[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Xen-devel] [linux-linus bisection] complete test-amd64-amd64-rumpuserxen-amd64



branch xen-unstable
xenbranch xen-unstable
job test-amd64-amd64-rumpuserxen-amd64
testid xen-boot

Tree: linux git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux-2.6.git
Tree: linuxfirmware git://xenbits.xen.org/osstest/linux-firmware.git
Tree: qemu git://xenbits.xen.org/qemu-xen-traditional.git
Tree: qemuu git://xenbits.xen.org/qemu-xen.git
Tree: rumpuserxen git://xenbits.xen.org/rumpuser-xen.git
Tree: rumpuserxen_buildrumpsh https://github.com/rumpkernel/buildrump.sh.git
Tree: rumpuserxen_netbsdsrc https://github.com/rumpkernel/src-netbsd
Tree: xen git://xenbits.xen.org/xen.git

*** Found and reproduced problem changeset ***

  Bug is in tree:  linux 
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux-2.6.git
  Bug introduced:  2dc10ad81fc017837037e60439662e1b16bdffb9
  Bug not present: 6ff33f3902c3b1c5d0db6b1e2c70b6d76fba357f
  Last fail repro: http://logs.test-lab.xenproject.org/osstest/logs/63832/


  commit 2dc10ad81fc017837037e60439662e1b16bdffb9
  Merge: e627078 f8f8bdc
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 4 14:47:13 2015 -0800

      Merge tag 'arm64-upstream' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux

      Pull arm64 updates from Catalin Marinas:

       - "genirq: Introduce generic irq migration for cpu hotunplugged" patch
         merged from tip/irq/for-arm to allow the arm64-specific part to be
         upstreamed via the arm64 tree

       - CPU feature detection reworked to cope with heterogeneous systems
         where CPUs may not have exactly the same features.  The features
         reported by the kernel via internal data structures or ELF_HWCAP are
         delayed until all the CPUs are up (and before user space starts)

       - Support for 16KB pages, with the additional bonus of a 36-bit VA
         space, though the latter only depending on EXPERT

       - Implement native {relaxed, acquire, release} atomics for arm64

       - New ASID allocation algorithm which avoids IPI on roll-over, together
         with TLB invalidation optimisations (using local vs global where
         feasible)

       - KASan support for arm64

       - EFI_STUB clean-up and isolation for the kernel proper (required by
         KASan)

       - copy_{to,from,in}_user optimisations (sharing the memcpy template)

       - perf: moving arm64 to the arm32/64 shared PMU framework

       - L1_CACHE_BYTES increased to 128 to accommodate Cavium hardware

       - Support for the contiguous PTE hint on kernel mapping (16 consecutive
         entries may be able to use a single TLB entry)

       - Generic CONFIG_HZ now used on arm64

       - defconfig updates

      * tag 'arm64-upstream' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux: (91 commits)
        arm64/efi: fix libstub build under CONFIG_MODVERSIONS
        ARM64: Enable multi-core scheduler support by default
        arm64/efi: move arm64 specific stub C code to libstub
        arm64: page-align sections for DEBUG_RODATA
        arm64: Fix build with CONFIG_ZONE_DMA=n
        arm64: Fix compat register mappings
        arm64: Increase the max granular size
        arm64: remove bogus TASK_SIZE_64 check
        arm64: make Timer Interrupt Frequency selectable
        arm64/mm: use PAGE_ALIGNED instead of IS_ALIGNED
        arm64: cachetype: fix definitions of ICACHEF_* flags
        arm64: cpufeature: declare enable_cpu_capabilities as static
        genirq: Make the cpuhotplug migration code less noisy
        arm64: Constify hwcap name string arrays
        arm64/kvm: Make use of the system wide safe values
        arm64/debug: Make use of the system wide safe value
        arm64: Move FP/ASIMD hwcap handling to common code
        arm64/HWCAP: Use system wide safe values
        arm64/capabilities: Make use of system wide safe value
        arm64: Delay cpu feature capability checks
        ...

  commit e627078a0cbdc0c391efeb5a2c4eb287328fd633
  Merge: 14c7909 b38fecc
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 4 11:31:31 2015 -0800

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux

      Pull s390 updates from Martin Schwidefsky:
       "There is only one new feature in this pull for the 4.4 merge window,
        most of it is small enhancements, cleanup and bug fixes:

         - Add the s390 backend for the software dirty bit tracking.  This
           adds two new pgtable functions pte_clear_soft_dirty and
           pmd_clear_soft_dirty which is why there is a hit to
           arch/x86/include/asm/pgtable.h in this pull request.

         - A series of cleanup patches for the AP bus, this includes the
           removal of the support for two outdated crypto cards (PCICC and
           PCICA).

         - The irq handling / signaling on buffer full in the runtime
           instrumentation code is dropped.

         - Some micro optimizations: remove unnecessary memory barriers for a
           couple of functions: [smb_]rmb, [smb_]wmb, atomics, bitops, and for
           spin_unlock.  Use the builtin bswap if available and make
           test_and_set_bit_lock more cache friendly.

         - Statistics and a tracepoint for the diagnose calls to the
           hypervisor.

         - The CPU measurement facility support to sample KVM guests is
           improved.

         - The vector instructions are now always enabled for user space
           processes if the hardware has the vector facility.  This simplifies
           the FPU handling code.  The fpu-internal.h header is split into fpu
           internals, api and types just like x86.

         - Cleanup and improvements for the common I/O layer.

         - Rework udelay to solve a problem with kprobe.  udelay has busy loop
           semantics but still uses an idle processor state for the wait"

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux: (66 commits)
        s390: remove runtime instrumentation interrupts
        s390/cio: de-duplicate subchannel validation
        s390/css: unneeded initialization in for_each_subchannel
        s390/Kconfig: use builtin bswap
        s390/dasd: fix disconnected device with valid path mask
        s390/dasd: fix invalid PAV assignment after suspend/resume
        s390/dasd: fix double free in dasd_eckd_read_conf
        s390/kernel: fix ptrace peek/poke for floating point registers
        s390/cio: move ccw_device_stlck functions
        s390/cio: move ccw_device_call_handler
        s390/topology: reduce per_cpu() invocations
        s390/nmi: reduce size of percpu variable
        s390/nmi: fix terminology
        s390/nmi: remove casts
        s390/nmi: remove pointless error strings
        s390: don't store registers on disabled wait anymore
        s390: get rid of __set_psw_mask()
        s390/fpu: split fpu-internal.h into fpu internals, api, and type headers
        s390/dasd: fix list_del corruption after lcu changes
        s390/spinlock: remove unneeded serializations at unlock
        ...

  commit 14c79092909a52b6fd6394b6ad5e7756c4f9565e
  Merge: 1b1050c a01fece
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 4 11:30:22 2015 -0800

      Merge branch 'parisc-4.3-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux

      Pull parisc updates from Helge Deller:
       "The most important change is that we reduce L1_CACHE_BYTES to 16
        bytes, for which a trivial patch for XPS in the network layer was
        needed.  Then we wire up the sys_membarrier and userfaultfd syscalls
        and added two other small cleanups"

      * 'parisc-4.3-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux:
        parisc: Change L1_CACHE_BYTES to 16
        net/xps: Fix calculation of initial number of xps queues
        parisc: reduce syslog debug output
        parisc: serial/mux: Convert to uart_console_device instead of open-coded
        parisc: Wire up userfaultfd syscall
        parisc: allocate sys_membarrier system call number

  commit 1b1050cdc5cdde43177b375b5f22dc070d45d8f8
  Merge: b0f85fa 353b39d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 4 10:12:43 2015 -0800

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/ide

      Pull IDE fixlet from David Miller:
       "Just a y2038 fix to the pdc202xx_new IDE driver"

      * git://git.kernel.org/pub/scm/linux/kernel/git/davem/ide:
        ide: pdc202xx_new: Replace timeval with ktime_t

  commit b0f85fa11aefc4f3e03306b4cd47f113bd57dcba
  Merge: ccc9d4a f32bfb9
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 4 09:41:05 2015 -0800

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

      Pull networking updates from David Miller:

      Changes of note:

       1) Allow to schedule ICMP packets in IPVS, from Alex Gartrell.

       2) Provide FIB table ID in ipv4 route dumps just as ipv6 does, from
          David Ahern.

       3) Allow the user to ask for the statistics to be filtered out of
          ipv4/ipv6 address netlink dumps.  From Sowmini Varadhan.

       4) More work to pass the network namespace context around deep into
          various packet path APIs, starting with the netfilter hooks.  From
          Eric W Biederman.

       5) Add layer 2 TX/RX checksum offloading to qeth driver, from Thomas
          Richter.

       6) Use usec resolution for SYN/ACK RTTs in TCP, from Yuchung Cheng.

       7) Support Very High Throughput in wireless MESH code, from Bob
          Copeland.

       8) Allow setting the ageing_time in switchdev/rocker.  From Scott
          Feldman.

       9) Properly autoload L2TP type modules, from Stephen Hemminger.

      10) Fix and enable offload features by default in 8139cp driver, from
          David Woodhouse.

      11) Support both ipv4 and ipv6 sockets in a single vxlan device, from
          Jiri Benc.

      12) Fix CWND limiting of thin streams in TCP, from Bendik Rønning
          Opstad.

      13) Fix IPSEC flowcache overflows on large systems, from Steffen
          Klassert.

      14) Convert bridging to track VLANs using rhashtable entries rather than
          a bitmap.  From Nikolay Aleksandrov.

      15) Make TCP listener handling completely lockless, this is a major
          accomplishment.  Incoming request sockets now live in the
          established hash table just like any other socket too.

          From Eric Dumazet.

      15) Provide more bridging attributes to netlink, from Nikolay
          Aleksandrov.

      16) Use hash based algorithm for ipv4 multipath routing, this was very
          long overdue.  From Peter Nørlund.

      17) Several y2038 cures, mostly avoiding timespec.  From Arnd Bergmann.

      18) Allow non-root execution of EBPF programs, from Alexei Starovoitov.

      19) Support SO_INCOMING_CPU as setsockopt, from Eric Dumazet.  This
          influences the port binding selection logic used by SO_REUSEPORT.

      20) Add ipv6 support to VRF, from David Ahern.

      21) Add support for Mellanox Spectrum switch ASIC, from Jiri Pirko.

      22) Add rtl8xxxu Realtek wireless driver, from Jes Sorensen.

      23) Implement RACK loss recovery in TCP, from Yuchung Cheng.

      24) Support multipath routes in MPLS, from Roopa Prabhu.

      25) Fix POLLOUT notification for listening sockets in AF_UNIX, from Eric
          Dumazet.

      26) Add new QED Qlogic river, from Yuval Mintz, Manish Chopra, and
          Sudarsana Kalluru.

      27) Don't fetch timestamps on AF_UNIX sockets, from Hannes Frederic
          Sowa.

      28) Support ipv6 geneve tunnels, from John W Linville.

      29) Add flood control support to switchdev layer, from Ido Schimmel.

      30) Fix CHECKSUM_PARTIAL handling of potentially fragmented frames, from
          Hannes Frederic Sowa.

      31) Support persistent maps and progs in bpf, from Daniel Borkmann.

      * git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next: (1790 
commits)
        sh_eth: use DMA barriers
        switchdev: respect SKIP_EOPNOTSUPP flag in case there is no recursion
        net: sched: kill dead code in sch_choke.c
        irda: Delete an unnecessary check before the function call 
"irlmp_unregister_service"
        net: dsa: mv88e6xxx: include DSA ports in VLANs
        net: dsa: mv88e6xxx: disable SA learning for DSA and CPU ports
        net/core: fix for_each_netdev_feature
        vlan: Invoke driver vlan hooks only if device is present
        arcnet/com20020: add LEDS_CLASS dependency
        bpf, verifier: annotate verbose printer with __printf
        dp83640: Only wait for timestamps for packets with timestamping enabled.
        ptp: Change ptp_class to a proper bitmask
        dp83640: Prune rx timestamp list before reading from it
        dp83640: Delay scheduled work.
        dp83640: Include hash in timestamp/packet matching
        ipv6: fix tunnel error handling
        net/mlx5e: Fix LSO vlan insertion
        net/mlx5e: Re-eanble client vlan TX acceleration
        net/mlx5e: Return error in case mlx5e_set_features() fails
        net/mlx5e: Don't allow more than max supported channels
        ...

  commit ccc9d4a6d640cbde05d519edeb727881646cf71b
  Merge: 66ef349 271817a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 4 09:11:12 2015 -0800

      Merge branch 'linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

      Pull crypto update from Herbert Xu:
       "API:

         - Add support for cipher output IVs in testmgr
         - Add missing crypto_ahash_blocksize helper
         - Mark authenc and des ciphers as not allowed under FIPS.

      Algorithms:

         - Add CRC support to 842 compression
         - Add keywrap algorithm
         - A number of changes to the akcipher interface:
            + Separate functions for setting public/private keys.
            + Use SG lists.

      Drivers:

         - Add Intel SHA Extension optimised SHA1 and SHA256
         - Use dma_map_sg instead of custom functions in crypto drivers
         - Add support for STM32 RNG
         - Add support for ST RNG
         - Add Device Tree support to exynos RNG driver
         - Add support for mxs-dcp crypto device on MX6SL
         - Add xts(aes) support to caam
         - Add ctr(aes) and xts(aes) support to qat
         - A large set of fixes from Russell King for the marvell/cesa driver"

      * 'linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6: (115 commits)
        crypto: asymmetric_keys - Fix unaligned access in x509_get_sig_params()
        crypto: akcipher - Don't #include crypto/public_key.h as the contents 
aren't used
        hwrng: exynos - Add Device Tree support
        hwrng: exynos - Fix missing configuration after suspend to RAM
        hwrng: exynos - Add timeout for waiting on init done
        dt-bindings: rng: Describe Exynos4 PRNG bindings
        crypto: marvell/cesa - use __le32 for hardware descriptors
        crypto: marvell/cesa - fix missing cpu_to_le32() in mv_cesa_dma_add_op()
        crypto: marvell/cesa - use memcpy_fromio()/memcpy_toio()
        crypto: marvell/cesa - use gfp_t for gfp flags
        crypto: marvell/cesa - use dma_addr_t for cur_dma
        crypto: marvell/cesa - use readl_relaxed()/writel_relaxed()
        crypto: caam - fix indentation of close braces
        crypto: caam - only export the state we really need to export
        crypto: caam - fix non-block aligned hash calculation
        crypto: caam - avoid needlessly saving and restoring caam_hash_ctx
        crypto: caam - print errno code when hash registration fails
        crypto: marvell/cesa - fix memory leak
        crypto: marvell/cesa - fix first-fragment handling in 
mv_cesa_ahash_dma_last_req()
        crypto: marvell/cesa - rearrange handling for sw padded hashes
        ...

  commit 66ef3493d4bb387f5a83915e33dc893102fd1b43
  Merge: 639ab3e d1f0f6c
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 21:33:18 2015 -0800

      Merge branch 'x86-platform-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 platform changes from Ingo Molnar:
       "Misc updates to the Intel MID and SGI UV platforms"

      * 'x86-platform-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/intel-mid: Make intel_mid_ops static
        arch/x86/intel-mid: Use kmemdup rather than duplicating its 
implementation
        x86/platform/uv: Implement simple dump failover if kdump fails
        x86/platform/uv: Insert per_cpu accessor function on uv_hub_nmi

  commit 639ab3eb38c6e92e27e061551dddee6dd3bbb5d2
  Merge: 4302d50 e1a5832
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 21:23:56 2015 -0800

      Merge branch 'x86-mm-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 mm changes from Ingo Molnar:
       "The main changes are: continued PAT work by Toshi Kani, plus a new
        boot time warning about insecure RWX kernel mappings, by Stephen
        Smalley.

        The new CONFIG_DEBUG_WX=y warning is marked default-y if
        CONFIG_DEBUG_RODATA=y is already eanbled, as a special exception, as
        these bugs are hard to notice and this check already found several
        live bugs"

      * 'x86-mm-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/mm: Warn on W^X mappings
        x86/mm: Fix no-change case in try_preserve_large_page()
        x86/mm: Fix __split_large_page() to handle large PAT bit
        x86/mm: Fix try_preserve_large_page() to handle large PAT bit
        x86/mm: Fix gup_huge_p?d() to handle large PAT bit
        x86/mm: Fix slow_virt_to_phys() to handle large PAT bit
        x86/mm: Fix page table dump to show PAT bit
        x86/asm: Add pud_pgprot() and pmd_pgprot()
        x86/asm: Fix pud/pmd interfaces to handle large PAT bit
        x86/asm: Add pud/pmd mask interfaces to handle large PAT bit
        x86/asm: Move PUD_PAGE macros to page_types.h
        x86/vdso32: Define PGTABLE_LEVELS to 32bit VDSO

  commit 4302d506d5f3419109abdd0d6e400ed6e8148209
  Merge: ce4d72f 0e2815d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 21:05:40 2015 -0800

      Merge branch 'x86-headers-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 sigcontext header cleanups from Ingo Molnar:
       "This series reorganizes and cleans up various aspects of the main
        sigcontext UAPI headers, such as unifying the data structures and
        updating/adding lots of comments to explain all the ABI details and
        quirks.  The headers can now also be built in user-space standalone"

      * 'x86-headers-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/headers: Clean up too long lines
        x86/headers: Remove <asm/sigcontext.h> references on the kernel side
        x86/headers: Remove direct sigcontext32.h uses
        x86/headers: Convert sigcontext_ia32 uses to sigcontext_32
        x86/headers: Unify 'struct sigcontext_ia32' and 'struct sigcontext_32'
        x86/headers: Make sigcontext pointers bit independent
        x86/headers: Move the 'struct sigcontext' definitions into the UAPI 
header
        x86/headers: Clean up the kernel's struct sigcontext types to be 
ABI-clean
        x86/headers: Convert uses of _fpstate_ia32 to _fpstate_32
        x86/headers: Unify 'struct _fpstate_ia32' and i386 struct _fpstate
        x86/headers: Unify register type definitions between 32-bit compat and 
i386
        x86/headers: Use ABI types consistently in sigcontext*.h
        x86/headers: Separate out legacy user-space structure definitions
        x86/headers: Clean up and better document uapi/asm/sigcontext.h
        x86/headers: Clean up uapi/asm/sigcontext32.h
        x86/headers: Fix (old) header file dependency bug in 
uapi/asm/sigcontext32.h

  commit ce4d72fac16a9540452957b526443b6080030bff
  Merge: 0f25f2c 158ecc3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 20:50:26 2015 -0800

      Merge branch 'x86-fpu-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 fpu changes from Ingo Molnar:
       "There are two main areas of changes:

         - Rework of the extended FPU state code to robustify the kernel's
           usage of cpuid provided xstate sizes - and related changes (Dave
           Hansen)"

         - math emulation enhancements: new modern FPU instructions support,
           with testcases, plus cleanups (Denys Vlasnko)"

      * 'x86-fpu-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (23 commits)
        x86/fpu: Fixup uninitialized feature_name warning
        x86/fpu/math-emu: Add support for FISTTP instructions
        x86/fpu/math-emu, selftests: Add test for FISTTP instructions
        x86/fpu/math-emu: Add support for FCMOVcc insns
        x86/fpu/math-emu: Add support for F[U]COMI[P] insns
        x86/fpu/math-emu: Remove define layer for undocumented opcodes
        x86/fpu/math-emu, selftests: Add tests for FCMOV and FCOMI insns
        x86/fpu/math-emu: Remove !NO_UNDOC_CODE
        x86/fpu: Check CPU-provided sizes against struct declarations
        x86/fpu: Check to ensure increasing-offset xstate offsets
        x86/fpu: Correct and check XSAVE xstate size calculations
        x86/fpu: Add C structures for AVX-512 state components
        x86/fpu: Rework YMM definition
        x86/fpu/mpx: Rework MPX 'xstate' types
        x86/fpu: Add xfeature_enabled() helper instead of test_bit()
        x86/fpu: Remove 'xfeature_nr'
        x86/fpu: Rework XSTATE_* macros to remove magic '2'
        x86/fpu: Rename XFEATURES_NR_MAX
        x86/fpu: Rename XSAVE macros
        x86/fpu: Remove partial LWP support definitions
        ...

  commit 0f25f2c1b18f7e47279ec2cf1d24c11c3108873b
  Merge: f323c49 0d44975
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 20:12:10 2015 -0800

      Merge branch 'x86-debug-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 kgdb fixlet from Ingo Molnar:
       "A single debugging related commit: compress the memory usage of a kgdb
        data structure"

      * 'x86-debug-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/kgdb: Replace bool_int_array[NR_CPUS] with bitmap

  commit f323c49b300baf89e2cb4050b0def1856c0b1852
  Merge: 33d46f9 2167cea
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 19:39:42 2015 -0800

      Merge branch 'x86-cpu-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 cpu changes from Ingo Molnar:
       "Two changes in this cycle: a Kconfig help text enhancement, and an AMD
        CLZERO instruction capability detection and enumeration"

      * 'x86-cpu-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/cpu: Add CLZERO detection
        x86/Kconfig/cpus: Fix/complete CPU type help texts

  commit 33d46f9765901a08d7759c031779073263e8b4e3
  Merge: 378e4e9 3435dd0
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 19:34:22 2015 -0800

      Merge branch 'x86-cleanups-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 cleanups from Ingo Molnar:
       "An early_printk cleanup plus deinlining enhancements"

      * 'x86-cleanups-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/early_printk: Set __iomem address space for IO
        x86/signal: Deinline get_sigframe, save 240 bytes
        x86: Deinline early_console_register, save 403 bytes
        x86/e820: Deinline e820_type_to_string, save 126 bytes

  commit 378e4e98258ad92097bfdf795dbef8b49cf52a34
  Merge: a75a3f6 e9c40d2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 19:28:37 2015 -0800

      Merge branch 'x86-boot-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 boot cleanup from Ingo Molnar:
       "A single commit: remove an obsolete kcrash boot flag"

      * 'x86-boot-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/kexec: Remove obsolete 'in_crash_kexec' flag

  commit a75a3f6fc92888e4119744d8594ffdf748c3d444
  Merge: d2bea73 3bd2951
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 18:59:10 2015 -0800

      Merge branch 'x86-asm-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 asm changes from Ingo Molnar:
       "The main change in this cycle is another step in the big x86 system
        call interface rework by Andy Lutomirski, which moves most of the low
        level x86 entry code from assembly to C, for all syscall entries
        except native 64-bit system calls:

          arch/x86/entry/entry_32.S        | 182 ++++------
          arch/x86/entry/entry_64_compat.S | 547 ++++++++-----------------------
          194 insertions(+), 535 deletions(-)

        ... our hope is that the final remaining step (converting native
        64-bit system calls) will be less painful as all the previous steps,
        given that most of the legacies and quirks are concentrated around
        native 32-bit and compat environments"

      * 'x86-asm-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (47 commits)
        x86/entry/32: Fix FS and GS restore in opportunistic SYSEXIT
        x86/entry/32: Fix entry_INT80_32() to expect interrupts to be on
        um/x86: Fix build after x86 syscall changes
        x86/asm: Remove the xyz_cfi macros from dwarf2.h
        selftests/x86: Style fixes for the 'unwind_vdso' test
        x86/entry/64/compat: Document sysenter_fix_flags's reason for existence
        x86/entry: Split and inline syscall_return_slowpath()
        x86/entry: Split and inline prepare_exit_to_usermode()
        x86/entry: Use pt_regs_to_thread_info() in syscall entry tracing
        x86/entry: Hide two syscall entry assertions behind CONFIG_DEBUG_ENTRY
        x86/entry: Micro-optimize compat fast syscall arg fetch
        x86/entry: Force inlining of 32-bit syscall code
        x86/entry: Make irqs_disabled checks in exit code depend on lockdep
        x86/entry: Remove unnecessary IRQ twiddling in fast 32-bit syscalls
        x86/asm: Remove thread_info.sysenter_return
        x86/entry/32: Re-implement SYSENTER using the new C path
        x86/entry/32: Switch INT80 to the new C syscall path
        x86/entry/32: Open-code return tracking from fork and kthreads
        x86/entry/compat: Implement opportunistic SYSRETL for compat syscalls
        x86/vdso/compat: Wire up SYSENTER and SYSCSALL for compat userspace
        ...

  commit d2bea739f8b41d620c235d81e00289d01169dc3c
  Merge: 5352869 4faefda
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 18:33:15 2015 -0800

      Merge branch 'x86-apic-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 apic changes from Ingo Molnar:
       "The main changes in this cycle were:

         - Numachip updates: new hardware support, fixes and cleanups.
           (Daniel J Blueman)

         - misc smaller cleanups and fixlets"

      * 'x86-apic-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/io_apic: Make eoi_ioapic_pin() static
        x86/irq: Drop unlikely before IS_ERR_OR_NULL
        x86/x2apic: Make stub functions available even if !CONFIG_X86_LOCAL_APIC
        x86/apic: Deinline various functions
        x86/numachip: Fix timer build conflict
        x86/numachip: Introduce Numachip2 timer mechanisms
        x86/numachip: Add Numachip IPI optimisations
        x86/numachip: Add Numachip2 APIC support
        x86/numachip: Cleanup Numachip support

  commit 53528695ff6d8b77011bc818407c13e30914a946
  Merge: b831ef2 e73e85f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 18:03:50 2015 -0800

      Merge branch 'sched-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull scheduler changes from Ingo Molnar:
       "The main changes in this cycle were:

         - sched/fair load tracking fixes and cleanups (Byungchul Park)

         - Make load tracking frequency scale invariant (Dietmar Eggemann)

         - sched/deadline updates (Juri Lelli)

         - stop machine fixes, cleanups and enhancements for bugs triggered by
           CPU hotplug stress testing (Oleg Nesterov)

         - scheduler preemption code rework: remove PREEMPT_ACTIVE and related
           cleanups (Peter Zijlstra)

         - Rework the sched_info::run_delay code to fix races (Peter Zijlstra)

         - Optimize per entity utilization tracking (Peter Zijlstra)

         - ... misc other fixes, cleanups and smaller updates"

      * 'sched-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (57 commits)
        sched: Don't scan all-offline ->cpus_allowed twice if !CONFIG_CPUSETS
        sched: Move cpu_active() tests from stop_two_cpus() into 
migrate_swap_stop()
        sched: Start stopper early
        stop_machine: Kill cpu_stop_threads->setup() and cpu_stop_unpark()
        stop_machine: Kill smp_hotplug_thread->pre_unpark, introduce 
stop_machine_unpark()
        stop_machine: Change cpu_stop_queue_two_works() to rely on 
stopper->enabled
        stop_machine: Introduce __cpu_stop_queue_work() and 
cpu_stop_queue_two_works()
        stop_machine: Ensure that a queued callback will be called before 
cpu_stop_park()
        sched/x86: Fix typo in __switch_to() comments
        sched/core: Remove a parameter in the migrate_task_rq() function
        sched/core: Drop unlikely behind BUG_ON()
        sched/core: Fix task and run queue sched_info::run_delay inconsistencies
        sched/numa: Fix task_tick_fair() from disabling numa_balancing
        sched/core: Add preempt_count invariant check
        sched/core: More notrace annotations
        sched/core: Kill PREEMPT_ACTIVE
        sched/core, sched/x86: Kill thread_info::saved_preempt_count
        sched/core: Simplify preempt_count tests
        sched/core: Robustify preemption leak checks
        sched/core: Stop setting PREEMPT_ACTIVE
        ...

  commit b831ef2cad979912850e34f82415c0c5d59de8cb
  Merge: b02ac6b dc34bdd
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 17:51:33 2015 -0800

      Merge branch 'ras-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull RAS changes from Ingo Molnar:
       "The main system reliability related changes were from x86, but also
        some generic RAS changes:

         - AMD MCE error injection subsystem enhancements.  (Aravind
           Gopalakrishnan)

         - Fix MCE and CPU hotplug interaction bug.  (Ashok Raj)

         - kcrash bootup robustness fix.  (Baoquan He)

         - kcrash cleanups.  (Borislav Petkov)

         - x86 microcode driver rework: simplify it by unmodularizing it and
           other cleanups.  (Borislav Petkov)"

      * 'ras-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (23 commits)
        x86/mce: Add a default case to the switch in __mcheck_cpu_ancient_init()
        x86/mce: Add a Scalable MCA vendor flags bit
        MAINTAINERS: Unify the microcode driver section
        x86/microcode/intel: Move #ifdef DEBUG inside the function
        x86/microcode/amd: Remove maintainers from comments
        x86/microcode: Remove modularization leftovers
        x86/microcode: Merge the early microcode loader
        x86/microcode: Unmodularize the microcode driver
        x86/mce: Fix thermal throttling reporting after kexec
        kexec/crash: Say which char is the unrecognized
        x86/setup/crash: Check memblock_reserve() retval
        x86/setup/crash: Cleanup some more
        x86/setup/crash: Remove alignment variable
        x86/setup: Cleanup crashkernel reservation functions
        x86/amd_nb, EDAC: Rename amd_get_node_id()
        x86/setup: Do not reserve crashkernel high memory if low reservation 
failed
        x86/microcode/amd: Do not overwrite final patch levels
        x86/microcode/amd: Extract current patch level read to a function
        x86/ras/mce_amd_inj: Inject bank 4 errors on the NBC
        x86/ras/mce_amd_inj: Trigger deferred and thresholding errors interrupts
        ...

  commit b02ac6b18cd4e2c76bf0a102c20c429b973f5f76
  Merge: 105ff3c bebd23a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 17:38:09 2015 -0800

      Merge branch 'perf-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull perf updates from Ingo Molnar:
       "Kernel side changes:

         - Improve accuracy of perf/sched clock on x86.  (Adrian Hunter)

         - Intel DS and BTS updates.  (Alexander Shishkin)

         - Intel cstate PMU support.  (Kan Liang)

         - Add group read support to perf_event_read().  (Peter Zijlstra)

         - Branch call hardware sampling support, implemented on x86 and
           PowerPC.  (Stephane Eranian)

         - Event groups transactional interface enhancements.  (Sukadev
           Bhattiprolu)

         - Enable proper x86/intel/uncore PMU support on multi-segment PCI
           systems.  (Taku Izumi)

         - ... misc fixes and cleanups.

        The perf tooling team was very busy again with 200+ commits, the full
        diff doesn't fit into lkml size limits.  Here's an (incomplete) list
        of the tooling highlights:

        New features:

         - Change the default event used in all tools (record/top): use the
           most precise "cycles" hw counter available, i.e. when the user
           doesn't specify any event, it will try using cycles:ppp, cycles:pp,
           etc and fall back transparently until it finds a working counter.
           (Arnaldo Carvalho de Melo)

         - Integration of perf with eBPF that, given an eBPF .c source file
           (or .o file built for the 'bpf' target with clang), will get it
           automatically built, validated and loaded into the kernel via the
           sys_bpf syscall, which can then be used and seen using 'perf trace'
           and other tools.

           (Wang Nan)

        Various user interface improvements:

         - Automatic pager invocation on long help output.  (Namhyung Kim)

         - Search for more options when passing args to -h, e.g.: (Arnaldo
           Carvalho de Melo)

              $ perf report -h interface

              Usage: perf report [<options>]

               --gtk    Use the GTK2 interface
               --stdio  Use the stdio interface
               --tui    Use the TUI interface

         - Show ordered command line options when -h is used or when an
           unknown option is specified.  (Arnaldo Carvalho de Melo)

         - If options are passed after -h, show just its descriptions, not all
           options.  (Arnaldo Carvalho de Melo)

         - Implement column based horizontal scrolling in the hists browser
           (top, report), making it possible to use the TUI for things like
           'perf mem report' where there are many more columns than can fit in
           a terminal.  (Arnaldo Carvalho de Melo)

         - Enhance the error reporting of tracepoint event parsing, e.g.:

             $ oldperf record -e sched:sched_switc usleep 1
             event syntax error: 'sched:sched_switc'
                                  \___ unknown tracepoint
             Run 'perf list' for a list of valid events

           Now we get the much nicer:

             $ perf record -e sched:sched_switc ls
             event syntax error: 'sched:sched_switc'
                                  \___ can't access trace events

             Error: No permissions to read 
/sys/kernel/debug/tracing/events/sched/sched_switc
             Hint:  Try 'sudo mount -o remount,mode=755 /sys/kernel/debug'

           And after we have those mount point permissions fixed:

             $ perf record -e sched:sched_switc ls
             event syntax error: 'sched:sched_switc'
                                  \___ unknown tracepoint

             Error: File /sys/kernel/debug/tracing/events/sched/sched_switc not 
found.
             Hint:  Perhaps this kernel misses some CONFIG_ setting to enable 
this feature?.

           I.e.  basically now the event parsing routing uses the 
strerror_open()
           routines introduced by and used in 'perf trace' work.  (Jiri Olsa)

         - Fail properly when pattern matching fails to find a tracepoint,
           i.e. '-e non:existent' was being correctly handled, with a proper
           error message about that not being a valid event, but '-e
           non:existent*' wasn't, fix it.  (Jiri Olsa)

         - Do event name substring search as last resort in 'perf list'.
           (Arnaldo Carvalho de Melo)

           E.g.:

             # perf list clock

             List of pre-defined events (to be used in -e):

              cpu-clock                                          [Software 
event]
              task-clock                                         [Software 
event]

              uncore_cbox_0/clockticks/                          [Kernel PMU 
event]
              uncore_cbox_1/clockticks/                          [Kernel PMU 
event]

              kvm:kvm_pvclock_update                             [Tracepoint 
event]
              kvm:kvm_update_master_clock                        [Tracepoint 
event]
              power:clock_disable                                [Tracepoint 
event]
              power:clock_enable                                 [Tracepoint 
event]
              power:clock_set_rate                               [Tracepoint 
event]
              syscalls:sys_enter_clock_adjtime                   [Tracepoint 
event]
              syscalls:sys_enter_clock_getres                    [Tracepoint 
event]
              syscalls:sys_enter_clock_gettime                   [Tracepoint 
event]
              syscalls:sys_enter_clock_nanosleep                 [Tracepoint 
event]
              syscalls:sys_enter_clock_settime                   [Tracepoint 
event]
              syscalls:sys_exit_clock_adjtime                    [Tracepoint 
event]
              syscalls:sys_exit_clock_getres                     [Tracepoint 
event]
              syscalls:sys_exit_clock_gettime                    [Tracepoint 
event]
              syscalls:sys_exit_clock_nanosleep                  [Tracepoint 
event]
              syscalls:sys_exit_clock_settime                    [Tracepoint 
event]

        Intel PT hardware tracing enhancements:

         - Accept a zero --itrace period, meaning "as often as possible".  In
           the case of Intel PT that is the same as a period of 1 and a unit
           of 'instructions' (i.e.  --itrace=i1i).  (Adrian Hunter)

         - Harmonize itrace's synthesized callchains with the existing
           --max-stack tool option.  (Adrian Hunter)

         - Allow time to be displayed in nanoseconds in 'perf script'.
           (Adrian Hunter)

         - Fix potential infinite loop when handling Intel PT timestamps.
           (Adrian Hunter)

         - Slighly improve Intel PT debug logging.  (Adrian Hunter)

         - Warn when AUX data has been lost, just like when processing
           PERF_RECORD_LOST.  (Adrian Hunter)

         - Further document export-to-postgresql.py script.  (Adrian Hunter)

         - Add option to synthesize branch stack from auxtrace data.  (Adrian
           Hunter)

        Misc notable changes:

         - Switch the default callchain output mode to 'graph,0.5,caller', to
           make it look like the default for other tools, reducing the
           learning curve for people used to 'caller' based viewing.  (Arnaldo
           Carvalho de Melo)

         - various call chain usability enhancements.  (Namhyung Kim)

         - Introduce the 'P' event modifier, meaning 'max precision level,
           please', i.e.:

              $ perf record -e cycles:P usleep 1

           Is now similar to:

              $ perf record usleep 1

           Useful, for instance, when specifying multiple events.  (Jiri Olsa)

         - Add 'socket' sort entry, to sort by the processor socket in 'perf
           top' and 'perf report'.  (Kan Liang)

         - Introduce --socket-filter to 'perf report', for filtering by
           processor socket.  (Kan Liang)

         - Add new "Zoom into Processor Socket" operation in the perf hists
           browser, used in 'perf top' and 'perf report'.  (Kan Liang)

         - Allow probing on kmodules without DWARF.  (Masami Hiramatsu)

         - Fix 'perf probe -l' for probes added to kernel module functions.
           (Masami Hiramatsu)

         - Preparatory work for the 'perf stat record' feature that will allow
           generating perf.data files with counting data in addition to the
           sampling mode we have now (Jiri Olsa)

         - Update libtraceevent KVM plugin.  (Paolo Bonzini)

         - ... plus lots of other enhancements that I failed to list properly,
           by: Adrian Hunter, Alexander Shishkin, Andi Kleen, Andrzej Hajda,
           Arnaldo Carvalho de Melo, Dima Kogan, Don Zickus, Geliang Tang, He
           Kuang, Huaitong Han, Ingo Molnar, Jan Stancek, Jiri Olsa, Kan
           Liang, Kirill Tkhai, Masami Hiramatsu, Matt Fleming, Namhyung Kim,
           Paolo Bonzini, Peter Zijlstra, Rabin Vincent, Scott Wood, Stephane
           Eranian, Sukadev Bhattiprolu, Taku Izumi, Vaishali Thakkar, Wang
           Nan, Yang Shi and Yunlong Song"

      * 'perf-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (260 commits)
        perf unwind: Pass symbol source to libunwind
        tools build: Fix libiberty feature detection
        perf tools: Compile scriptlets to BPF objects when passing '.c' to 
--event
        perf record: Add clang options for compiling BPF scripts
        perf bpf: Attach eBPF filter to perf event
        perf tools: Make sure fixdep is built before libbpf
        perf script: Enable printing of branch stack
        perf trace: Add cmd string table to decode sys_bpf first arg
        perf bpf: Collect perf_evsel in BPF object files
        perf tools: Load eBPF object into kernel
        perf tools: Create probe points for BPF programs
        perf tools: Enable passing bpf object file to --event
        perf ebpf: Add the libbpf glue
        perf tools: Make perf depend on libbpf
        perf symbols: Fix endless loop in dso__split_kallsyms_for_kcore
        perf tools: Enable pre-event inherit setting by config terms
        perf symbols: we can now read separate debug-info files based on a 
build ID
        perf symbols: Fix type error when reading a build-id
        perf tools: Search for more options when passing args to -h
        perf stat: Cache aggregated map entries in extra cpumap
        ...

  commit 105ff3cbf225036b75a6a46c96d1ddce8e7bdc66
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 17:22:17 2015 -0800

      atomic: remove all traces of READ_ONCE_CTRL() and atomic*_read_ctrl()

      This seems to be a mis-reading of how alpha memory ordering works, and
      is not backed up by the alpha architecture manual.  The helper functions
      don't do anything special on any other architectures, and the arguments
      that support them being safe on other architectures also argue that they
      are safe on alpha.

      Basically, the "control dependency" is between a previous read and a
      subsequent write that is dependent on the value read.  Even if the
      subsequent write is actually done speculatively, there is no way that
      such a speculative write could be made visible to other cpu's until it
      has been committed, which requires validating the speculation.

      Note that most weakely ordered architectures (very much including alpha)
      do not guarantee any ordering relationship between two loads that depend
      on each other on a control dependency:

          read A
          if (val == 1)
              read B

      because the conditional may be predicted, and the "read B" may be
      speculatively moved up to before reading the value A.  So we require the
      user to insert a smp_rmb() between the two accesses to be correct:

          read A;
          if (A == 1)
              smp_rmb()
              read B

      Alpha is further special in that it can break that ordering even if the
      *address* of B depends on the read of A, because the cacheline that is
      read later may be stale unless you have a memory barrier in between the
      pointer read and the read of the value behind a pointer:

          read ptr
          read offset(ptr)

      whereas all other weakly ordered architectures guarantee that the data
      dependency (as opposed to just a control dependency) will order the two
      accesses.  As a result, alpha needs a "smp_read_barrier_depends()" in
      between those two reads for them to be ordered.

      The coontrol dependency that "READ_ONCE_CTRL()" and "atomic_read_ctrl()"
      had was a control dependency to a subsequent *write*, however, and
      nobody can finalize such a subsequent write without having actually done
      the read.  And were you to write such a value to a "stale" cacheline
      (the way the unordered reads came to be), that would seem to lose the
      write entirely.

      So the things that make alpha able to re-order reads even more
      aggressively than other weak architectures do not seem to be relevant
      for a subsequent write.  Alpha memory ordering may be strange, but
      there's no real indication that it is *that* strange.

      Also, the alpha architecture reference manual very explicitly talks
      about the definition of "Dependence Constraints" in section 5.6.1.7,
      where a preceding read dominates a subsequent write.

      Such a dependence constraint admittedly does not impose a BEFORE (alpha
      architecture term for globally visible ordering), but it does guarantee
      that there can be no "causal loop".  I don't see how you could avoid
      such a loop if another cpu could see the stored value and then impact
      the value of the first read.  Put another way: the read and the write
      could not be seen as being out of order wrt other cpus.

      So I do not see how these "x_ctrl()" functions can currently be necessary.

      I may have to eat my words at some point, but in the absense of clear
      proof that alpha actually needs this, or indeed even an explanation of
      how alpha could _possibly_ need it, I do not believe these functions are
      called for.

      And if it turns out that alpha really _does_ need a barrier for this
      case, that barrier still should not be "smp_read_barrier_depends()".
      We'd have to make up some new speciality barrier just for alpha, along
      with the documentation for why it really is necessary.

      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Paul E McKenney <paulmck@xxxxxxxxxx>
      Cc: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit d63a9788650fcd999b34584316afee6bd4378f19
  Merge: 2814228 6e490b0
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 16:10:43 2015 -0800

      Merge branch 'locking-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull locking changes from Ingo Molnar:
       "The main changes in this cycle were:

         - More gradual enhancements to atomic ops: new atomic*_read_ctrl()
           ops, synchronize atomic_{read,set}() ordering requirements between
           architectures, add atomic_long_t bitops.  (Peter Zijlstra)

         - Add _{relaxed|acquire|release}() variants for inc/dec atomics and
           use them in various locking primitives: mutex, rtmutex, mcs, rwsem.
           This enables weakly ordered architectures (such as arm64) to make
           use of more locking related optimizations.  (Davidlohr Bueso)

         - Implement atomic[64]_{inc,dec}_relaxed() on ARM.  (Will Deacon)

         - Futex kernel data cache footprint micro-optimization.  (Rasmus
           Villemoes)

         - pvqspinlock runtime overhead micro-optimization.  (Waiman Long)

         - misc smaller fixlets"

      * 'locking-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        ARM, locking/atomics: Implement _relaxed variants of 
atomic[64]_{inc,dec}
        locking/rwsem: Use acquire/release semantics
        locking/mcs: Use acquire/release semantics
        locking/rtmutex: Use acquire/release semantics
        locking/mutex: Use acquire/release semantics
        locking/asm-generic: Add _{relaxed|acquire|release}() variants for 
inc/dec atomics
        atomic: Implement atomic_read_ctrl()
        atomic, arch: Audit atomic_{read,set}()
        atomic: Add atomic_long_t bitops
        futex: Force hot variables into a single cache line
        locking/pvqspinlock: Kick the PV CPU unconditionally when _Q_SLOW_VAL
        locking/osq: Relax atomic semantics
        locking/qrwlock: Rename ->lock to ->wait_lock
        locking/Documentation/lockstat: Fix typo - lokcing -> locking
        locking/atomics, cmpxchg: Privatize the inclusion of asm/cmpxchg.h

  commit 281422869942c19f05a08d4017c633d08d390938
  Merge: f5a8160 b33e18f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 15:40:38 2015 -0800

      Merge branch 'core-rcu-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull RCU changes from Ingo Molnar:
       "The main changes in this cycle were:

         - Improvements to expedited grace periods (Paul E McKenney)

         - Performance improvements to and locktorture tests for percpu-rwsem
           (Oleg Nesterov, Paul E McKenney)

         - Torture-test changes (Paul E McKenney, Davidlohr Bueso)

         - Documentation updates (Paul E McKenney)

         - Miscellaneous fixes (Paul E McKenney, Boqun Feng, Oleg Nesterov,
           Patrick Marlier)"

      * 'core-rcu-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (54 commits)
        fs/writeback, rcu: Don't use list_entry_rcu() for pointer offsetting in 
bdi_split_work_to_wbs()
        rcu: Better hotplug handling for synchronize_sched_expedited()
        rcu: Enable stall warnings for synchronize_rcu_expedited()
        rcu: Add tasks to expedited stall-warning messages
        rcu: Add online/offline info to expedited stall warning message
        rcu: Consolidate expedited CPU selection
        rcu: Prepare for consolidating expedited CPU selection
        cpu: Remove try_get_online_cpus()
        rcu: Stop excluding CPU hotplug in synchronize_sched_expedited()
        rcu: Stop silencing lockdep false positive for expedited grace periods
        rcu: Switch synchronize_sched_expedited() to IPI
        locktorture: Fix module unwind when bad torture_type specified
        torture: Forgive non-plural arguments
        rcutorture: Fix unused-function warning for torturing_tasks()
        rcutorture: Fix module unwind when bad torture_type specified
        rcu_sync: Cleanup the CONFIG_PROVE_RCU checks
        locking/percpu-rwsem: Clean up the lockdep annotations in 
percpu_down_read()
        locking/percpu-rwsem: Fix the comments outdated by rcu_sync
        locking/percpu-rwsem: Make use of the rcu_sync infrastructure
        locking/percpu-rwsem: Make percpu_free_rwsem() after kzalloc() safe
        ...

  commit f5a8160c1e055c0fd8d16a5b3ac97c638365b0db
  Merge: 7eeef2a 78b9bc9
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 15:05:52 2015 -0800

      Merge branch 'core-efi-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull EFI changes from Ingo Molnar:
       "The main changes in this cycle were:

         - further EFI code generalization to make it more workable for ARM64
         - various extensions, such as 64-bit framebuffer address support,
           UEFI v2.5 EFI_PROPERTIES_TABLE support
         - code modularization simplifications and cleanups
         - new debugging parameters
         - various fixes and smaller additions"

      * 'core-efi-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (23 commits)
        efi: Fix warning of int-to-pointer-cast on x86 32-bit builds
        efi: Use correct type for struct efi_memory_map::phys_map
        x86/efi: Fix kernel panic when CONFIG_DEBUG_VIRTUAL is enabled
        efi: Add "efi_fake_mem" boot option
        x86/efi: Rename print_efi_memmap() to efi_print_memmap()
        efi: Auto-load the efi-pstore module
        efi: Introduce EFI_NX_PE_DATA bit and set it from properties table
        efi: Add support for UEFIv2.5 Properties table
        efi: Add EFI_MEMORY_MORE_RELIABLE support to efi_md_typeattr_format()
        efifb: Add support for 64-bit frame buffer addresses
        efi/arm64: Clean up efi_get_fdt_params() interface
        arm64: Use core efi=debug instead of uefi_debug command line parameter
        efi/x86: Move efi=debug option parsing to core
        drivers/firmware: Make efi/esrt.c driver explicitly non-modular
        efi: Use the generic efi.memmap instead of 'memmap'
        acpi/apei: Use appropriate pgprot_t to map GHES memory
        arm64, acpi/apei: Implement arch_apei_get_mem_attributes()
        arm64/mm: Add PROT_DEVICE_nGnRnE and PROT_NORMAL_WT
        acpi, x86: Implement arch_apei_get_mem_attributes()
        efi, x86: Rearrange efi_mem_attributes()
        ...

  commit 7eeef2abe87dc0d8c276f97ccfdb1f42d9d1e4d8
  Merge: 6aa2fdb b2f7392
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 15:04:04 2015 -0800

      Merge branch 'core-debug-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull wchan kernel address hiding from Ingo Molnar:
       "This fixes a wchan related information leak in /proc/PID/stat.

        There's a bit of an ABI twist to it: instead of setting the wchan
        field to 0 (which is our usual technique) we set it conditionally to a
        0/1 flag to keep ABI compatibility with older procps versions that
        only fetches /proc/PID/wchan (symbolic names) if the absolute wchan
        address is nonzero"

      * 'core-debug-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        fs/proc, core/debug: Don't expose absolute kernel addresses via wchan

  commit 6aa2fdb87cf01d7746955c600cbac352dc04d451
  Merge: 7b2a430 d9e4ad5
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 14:40:01 2015 -0800

      Merge branch 'irq-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull irq updates from Thomas Gleixner:
       "The irq departement delivers:

         - Rework the irqdomain core infrastructure to accomodate ACPI based
           systems.  This is required to support ARM64 without creating
           artificial device tree nodes.

         - Sanitize the ACPI based ARM GIC initialization by making use of the
           new firmware independent irqdomain core

         - Further improvements to the generic MSI management

         - Generalize the irq migration on CPU hotplug

         - Improvements to the threaded interrupt infrastructure

         - Allow the migration of "chained" low level interrupt handlers

         - Allow optional force masking of interrupts in disable_irq[_nosysnc]

         - Support for two new interrupt chips - Sigh!

         - A larger set of errata fixes for ARM gicv3

         - The usual pile of fixes, updates, improvements and cleanups all
           over the place"

      * 'irq-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (71 commits)
        Document that IRQ_NONE should be returned when IRQ not actually handled
        PCI/MSI: Allow the MSI domain to be device-specific
        PCI: Add per-device MSI domain hook
        of/irq: Use the msi-map property to provide device-specific MSI domain
        of/irq: Split of_msi_map_rid to reuse msi-map lookup
        irqchip/gic-v3-its: Parse new version of msi-parent property
        PCI/MSI: Use of_msi_get_domain instead of open-coded "msi-parent" 
parsing
        of/irq: Use of_msi_get_domain instead of open-coded "msi-parent" parsing
        of/irq: Add support code for multi-parent version of "msi-parent"
        irqchip/gic-v3-its: Add handling of PCI requester id.
        PCI/MSI: Add helper function pci_msi_domain_get_msi_rid().
        of/irq: Add new function of_msi_map_rid()
        Docs: dt: Add PCI MSI map bindings
        irqchip/gic-v2m: Add support for multiple MSI frames
        irqchip/gic-v3: Fix translation of LPIs after conversion to irq_fwspec
        irqchip/mxs: Add Alphascale ASM9260 support
        irqchip/mxs: Prepare driver for hardware with different offsets
        irqchip/mxs: Panic if ioremap or domain creation fails
        irqdomain: Documentation updates
        irqdomain/msi: Use fwnode instead of of_node
        ...

  commit 7b2a4306f9e7d64bb408a6df3bb419500578068a
  Merge: 316dde2 03f136a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 14:13:41 2015 -0800

      Merge branch 'timers-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull timer updates from Thomas Gleixner:
       "The timer departement provides:

         - More y2038 work in the area of ntp and pps.

         - Optimization of posix cpu timers

         - New time related selftests

         - Some new clocksource drivers

         - The usual pile of fixes, cleanups and improvements"

      * 'timers-core-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (25 commits)
        timeconst: Update path in comment
        timers/x86/hpet: Type adjustments
        clocksource/drivers/armada-370-xp: Implement ARM delay timer
        clocksource/drivers/tango_xtal: Add new timer for Tango SoCs
        clocksource/drivers/imx: Allow timer irq affinity change
        clocksource/drivers/exynos_mct: Use container_of() instead of 
this_cpu_ptr()
        clocksource/drivers/h8300_*: Remove unneeded memset()s
        clocksource/drivers/sh_cmt: Remove unneeded memset() in sh_cmt_setup()
        clocksource/drivers/em_sti: Remove unneeded memset()s
        clocksource/drivers/mediatek: Use GPT as sched clock source
        clockevents/drivers/mtk: Fix spurious interrupt leading to crash
        posix_cpu_timer: Reduce unnecessary sighand lock contention
        posix_cpu_timer: Convert cputimer->running to bool
        posix_cpu_timer: Check thread timers only when there are active thread 
timers
        posix_cpu_timer: Optimize fastpath_timer_check()
        timers, kselftest: Add 'adjtick' test to validate adjtimex() tick 
adjustments
        timers: Use __fls in apply_slack()
        clocksource: Remove return statement from void functions
        net: sfc: avoid using timespec
        ntp/pps: use y2038 safe types in pps_event_time
        ...

  commit 316dde2fe95b33657de1fc2db54bfc16aa065790
  Merge: 2c2b828 116ef0f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 13:54:35 2015 -0800

      Merge branch 'for-linus' of git://ftp.arm.linux.org.uk/~rmk/linux-arm

      Pull ARM updates from Russell King:
       "In this ARM merge, we remove more lines than we add.  Changes include:

         - Enable imprecise aborts early, so that bus errors aren't masked
           until later in the boot.  This has the side effect that boot
           loaders which provoke these aborts can cause the kernel to crash
           early in boot, so we install a handler to report this event around
           the site where these are enabled.

         - Remove the buggy but impossible to enable cmpxchg syscall code.

         - Add unwinding annotations to some assembly code.

         - Add support for atomic half-word exchange for ARMv6k+.

         - Reduce ioremap() alignment for SMP/LPAE cases where we don't need
           the large alignment.

         - Addition of an "optimal" 3G configuration for systems with 1G of
           RAM.

         - Increase vmalloc space by 128M.

         - Constify some SMP operations structures, which have never been
           writable.

         - Improve ARMs dma_mmap() support for mapping DMA coherent mappings
           into userspace.

         - Fix to the NMI backtrace code in the IPI case on ARM where the
           failing CPU gets stuck for 10s waiting for its own IPI to be
           delivered.

         - Removal of legacy PM support from the AMBA bus driver.

         - Another fix for the previous fix of vdsomunge"

      * 'for-linus' of git://ftp.arm.linux.org.uk/~rmk/linux-arm: (23 commits)
        ARM: 8449/1: fix bug in vdsomunge swab32 macro
        arm: add missing of_node_put
        ARM: 8447/1: catch pending imprecise abort on unmask
        ARM: 8446/1: amba: Remove unused callbacks for legacy system PM
        ARM: 8443/1: Adding support for atomic half word exchange
        ARM: clean up TWD after previous patch
        ARM: 8441/2: twd: Don't set CLOCK_EVT_FEAT_C3STOP unconditionally
        ARM: 8440/1: remove obsolete documentation
        ARM: make highpte an expert option
        ARM: 8433/1: add a VMSPLIT_3G_OPT config option
        ARM: 8439/1: Fix backtrace generation when IPI is masked
        ARM: 8428/1: kgdb: Fix registers on sleeping tasks
        ARM: 8427/1: dma-mapping: add support for offset parameter in dma_mmap()
        ARM: 8426/1: dma-mapping: add missing range check in dma_mmap()
        ARM: remove user cmpxchg syscall
        ARM: 8438/1: Add unwinding to __clear_user_std()
        ARM: 8436/1: hw_breakpoint: remove unnecessary header
        ARM: 8434/2: Revert "7655/1: smp_twd: make 
twd_local_timer_of_register() no-op for nosmp"
        ARM: 8432/1: move VMALLOC_END from 0xff000000 to 0xff800000
        ARM: 8430/1: use default ioremap alignment for SMP or LPAE
        ...

  commit 2c2b8285dcd4d0674b6e77269cf32721fffea59e
  Merge: 0921f1e 5a364c2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 13:21:09 2015 -0800

      Merge tag 'arc-4.4-rc1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/vgupta/arc

      Pull ARC updates from Vineet Gupta:

       - Support for new MM features in ARCv2 cores (THP, PAE40) Some generic
         THP bits are touched - all ACKed by Kirill

       - Platform framework updates to prepare for EZChip arrival (still in 
works)

       - ARC Public Mailing list setup finally 
(linux-snps-arc@xxxxxxxxxxxxxxxxxx)

      * tag 'arc-4.4-rc1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/vgupta/arc: (42 commits)
        ARC: mm: PAE40 support
        ARC: mm: PAE40: tlbex.S: Explicitify the size of pte_t
        ARC: mm: PAE40: switch to using phys_addr_t for physical addresses
        ARC: mm: HIGHMEM: populate high memory from DT
        ARC: mm: HIGHMEM: kmap API implementation
        ARC: mm: preps ahead of HIGHMEM support #2
        ARC: mm: preps ahead of HIGHMEM support
        ARC: mm: use generic macros _BITUL()/_AC()
        ARC: mm: Improve Duplicate PD Fault handler
        MAINTAINERS: Add public mailing list for ARC
        ARC: Ensure DT mem base is same as what kernel is built with
        ARC: boot: Non Master cpus only need to call EARLY_CPU_SETUP once
        ARCv2: smp: [plat-*]: No need to explicitly call mcip_init_smp()
        ARC: smp: Introduce smp hook @init_irq_cpu called for all cores
        ARC: smp: Rename platform hook @init_smp -> @init_cpu_smp
        ARCv2: smp: [plat-*]: No need to explicitly call mcip_init_early_smp()
        ARC: smp: Introduce smp hook @init_early_smp for Master core
        ARC: remove @init_time, @init_irq platform callbacks
        ARC: smp: irqchip: handle IPI as percpu irq like timer
        ARC: boot: Support Halt-on-reset and Run-on-reset SMP booting modes
        ...

  commit 0921f1efb605d8fda43d794734222d1ad39c6840
  Merge: 15f9340 4247896
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 13:15:46 2015 -0800

      Merge tag 'cris-for-4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jesper/cris

      Pull CRIS changes from Jesper Nilsson:
       "Mostly another batch of code removal due to move to standard
        frameworks for CRISv32, initial devicetree configuration for a couple
        of boards, and some small fixes for kgdb and time handling"

      * tag 'cris-for-4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jesper/cris:
        cris: Drop reference to get_cmos_time()
        CRIS: Drop code related to obsolete or unused kconfigs
        cris: time: Cleanup of persistent clock stuff
        cris: re-use helpers to dump data in hex format
        CRIS v32: remove old GPIO and LEDs code
        CRIS v32: remove I2C bitbanging driver
        CRIS v32: add ARTPEC-3 and P1343 device trees
        CRIS v32: dev88: add GPIO, LEDs, RTC, temp sensor
        CRIS: add dt-bindings symlink
        CRIS v32: increase NR_IRQS
        cris: arch-v10: kgdb: Add '__used' for static variable is_dyn_brkp
        cris: arch-v10: kgdb: Use BAR instead of DTP0 for register P12
        cris: kgdb: use native hex2bin

  commit 15f93405aae307a3cb2c33c795286463601963f7
  Merge: df91fba 6ebbabb
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 13:09:32 2015 -0800

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/egtvedt/linux-avr32

      Pull avr32 update from Hans-Christian Noren Egtvedt.

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/egtvedt/linux-avr32:
        avr32: atngw100: remove useless include

  commit df91fba5e7ed414b1856b33bbed6d55439a14c47
  Merge: e8a2a17 bab84fa
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 13:01:48 2015 -0800

      Merge branch 'for-next' of 
git://git.kernel.org/pub/scm/linux/kernel/git/geert/linux-m68k

      Pull m68k update from Geert Uytterhoeven.

      * 'for-next' of 
git://git.kernel.org/pub/scm/linux/kernel/git/geert/linux-m68k:
        m68k/sun3: Use %pM format specifier to print ethernet address

  commit e8a2a176dd0f3e4c7252b79dc5cea6bd4acaf78e
  Merge: 5062ecd ffdc307
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 12:20:29 2015 -0800

      Merge tag 'leds_for_4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/j.anaszewski/linux-leds

      Pull LED updates from Jacek Anaszewski:

       - Move the out-of-LED-tree led-sead3 driver to the LED subsystem.

       - Add 'invert' sysfs attribute to the heartbeat trigger.

       - Add Device Tree support to the leds-netxbig driver and add related DT
         nodes to the kirkwood-netxbig.dtsi and kirkwood-net5big.dts files.
         Remove static LED setup from the related board files.

       - Remove redundant brightness conversion operation from leds-netxbig.

       - Improve leds-bcm6328 driver: improve default-state handling, add more
         init configuration options, print invalid LED instead of warning only
         about maximum LED value.

       - Add a shutdown function for setting gpio-leds into off state when
         shutting down.

       - Fix DT flash timeout property naming in leds-aat1290.txt.

       - Switch to using devm prefixed version of led_classdev_register()
         (leds-cobalt-qube, leds-hp6xx, leds-ot200, leds-ipaq-micro,
         leds-netxbig, leds-locomo, leds-menf21bmc, leds-net48xx, leds-wrap).

       - Add missing of_node_put (leds-powernv, leds-bcm6358, leds-bcm6328,
         leds-88pm860x).

       - Coding style fixes and cleanups: led-class/led-core, leds-ipaq-micro.

      * tag 'leds_for_4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/j.anaszewski/linux-leds: (27 
commits)
        leds: 88pm860x: add missing of_node_put
        leds: bcm6328: add missing of_node_put
        leds: bcm6358: add missing of_node_put
        powerpc/powernv: add missing of_node_put
        leds: leds-wrap.c: Use devm_led_classdev_register
        leds: aat1290: Fix property naming of flash-timeout-us
        leds: leds-net48xx: Use devm_led_classdev_register
        leds: leds-menf21bmc.c: Use devm_led_class_register
        leds: leds-locomo.c: Use devm_led_classdev_register
        leds: leds-gpio: add shutdown function
        Documentation: leds: update DT bindings for leds-bcm6328
        leds-bcm6328: add more init configuration options
        leds-bcm6328: simplify and improve default-state handling
        leds-bcm6328: print invalid LED
        leds: netxbig: set led_classdev max_brightness
        leds: netxbig: convert to use the devm_ functions
        ARM: mvebu: remove static LED setup for netxbig boards
        ARM: Kirkwood: add LED DT entries for netxbig boards
        leds: netxbig: add device tree binding
        leds: triggers: add invert to heartbeat
        ...

  commit f32bfb9a8ca083f8d148ea90ae5ba66f4831836e
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 22:36:04 2015 +0300

      sh_eth: use DMA barriers

      Commit  7d7355f58ba4 ("sh_eth: Ensure proper ordering of descriptor active
      bit write/read") did the right thing  but used too "heavy" barriers while
      there were already "lighter" DMA barriers exactly  for this case...

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 73186df8d7fa574345f0ad626ebe89649f8308a5
  Merge: 0c63d80 ebac62f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Nov 3 13:41:45 2015 -0500

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

      Minor overlapping changes in net/ipv4/ipmr.c, in 'net' we were
      fixing the "BH-ness" of the counter bumps whilst in 'net-next'
      the functions were modified to take an explicit 'net' parameter.

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0c63d80c3fac4e6eb0f01dff756e47bc7cd50092
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Tue Nov 3 17:40:53 2015 +0100

      switchdev: respect SKIP_EOPNOTSUPP flag in case there is no recursion

      Caller passing down the SKIP_EOPNOTSUPP switchdev flag expects that
      -EOPNOTSUPP cannot be returned. But in case of direct op call without
      recurtion, this may happen. So fix this by checking it always on the
      end of __switchdev_port_attr_set function.

      Fixes: 464314ea6c11 ("switchdev: skip over ports returning -EOPNOTSUPP 
when recursing ports")
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2a4f4176217d3a29176dff83f2647c48ebaa30a4
  Author: Phil Sutter <phil@xxxxxx>
  Date:   Tue Nov 3 19:01:41 2015 +0100

      net: sched: kill dead code in sch_choke.c

      It looks like this has never been used at all.

      Signed-off-by: Phil Sutter <phil@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 37b8e1ca0fd7adce1c75b5d95e5515bd2dc234dd
  Author: Markus Elfring <elfring@xxxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 18:18:37 2015 +0100

      irda: Delete an unnecessary check before the function call 
"irlmp_unregister_service"

      The irlmp_unregister_service() function tests whether its argument is NULL
      and then returns immediately. Thus the test around the call is not needed.

      This issue was detected by using the Coccinelle software.

      Signed-off-by: Markus Elfring <elfring@xxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 353b39d1b1511376aca71bc3aba62831370561ca
  Author: Amitoj Kaur Chawla <amitoj1606@xxxxxxxxx>
  Date:   Thu Oct 22 18:15:50 2015 +0530

      ide: pdc202xx_new: Replace timeval with ktime_t

      This driver uses 'struct timeval' which we are trying to remove since
      32 bit time types will break in the year 2038 by replacing it with
      ktime_t.

      This patch changes do_gettimeofday() to ktime_get() because
      ktime_get() returns a ktime_t while do_gettimeofday() returns struct
      timeval.

      This patch also uses ktime_us_delta() to get the elapsed time.

      Signed-off-by: Amitoj Kaur Chawla <amitoj1606@xxxxxxxxx>
      Reviewed-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b3047a77cba193658ebf534ee4abab9cb5446842
  Merge: 3d131f0 e420842
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Nov 3 11:30:57 2015 -0500

      Merge tag 'mac80211-for-davem-2015-11-03' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211

      Johannes Berg says:

      ====================
      Another set of fixes:
       * remove a warning on a check that can trigger without any
         errors having happened (Andrei)
       * correctly handle deauth request while in the process of
         associating (Andrei)
       * fix TDLS HT operation (Arik)
       * allow changing AID/listen interval during client setup (Ayala)
       * be more forgiving with WMM parameters to get HT/VHT in case of
         broken APs with bad WMM settings (Emmanuel, myself)
       * a number of other fixes (some in documentation)
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3d131f070948e4ad93189cb379b3a45d53dce71b
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 10:52:52 2015 -0500

      net: dsa: mv88e6xxx: include DSA ports in VLANs

      DSA ports must be members of a VLAN in order to ensure frame bridging
      between chained switch chips.

      Thus tag them in addition to the CPU port when adding a VLAN, and skip
      them when deleting a VLAN and reporting VLAN members.

      Also use the UNMODIFIED egress policy, so that frames egress on these
      ports as they ingress, tagged or untagged.

      Fixes: 0d3b33e60206 ("net: dsa: mv88e6xxx: add VLAN Load support")
      Reported-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4c7ea3c0791e971f05f78453a587a1640fe09a61
  Author: Andrew Lunn <andrew@xxxxxxx>
  Date:   Tue Nov 3 10:52:36 2015 -0500

      net: dsa: mv88e6xxx: disable SA learning for DSA and CPU ports

      Frames with DSA headers passing to/from the CPU were taking place in the
      MAC learning on these ports, resulting in incorrect ATU entries. Disable
      learning on these ports.

      Signed-off-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5ba3f7d61a3a9e6d94462b207d302931b53d8c61
  Author: Jarod Wilson <jarod@xxxxxxxxxx>
  Date:   Tue Nov 3 10:15:59 2015 -0500

      net/core: fix for_each_netdev_feature

      As pointed out by Nikolay and further explained by Geert, the initial
      for_each_netdev_feature macro was broken, as feature would get set outside
      of the block of code it was intended to run in, thus only ever working for
      the first feature bit in the mask. While less pretty this way, this is
      tested and confirmed functional with multiple feature bits set in
      NETIF_F_UPPER_DISABLES.

      [root@dell-per730-01 ~]# ethtool -K bond0 lro off
      ...
      [  242.761394] bond0: Disabling feature 0x0000000000008000 on lower dev 
p5p2.
      [  243.552178] bnx2x 0000:06:00.1 p5p2: using MSI-X  IRQs: sp 74  fp[0] 
76 ... fp[7] 83
      [  244.353978] bond0: Disabling feature 0x0000000000008000 on lower dev 
p5p1.
      [  245.147420] bnx2x 0000:06:00.0 p5p1: using MSI-X  IRQs: sp 62  fp[0] 
64 ... fp[7] 71

      [root@dell-per730-01 ~]# ethtool -K bond0 gro off
      ...
      [  251.925645] bond0: Disabling feature 0x0000000000004000 on lower dev 
p5p2.
      [  252.713693] bnx2x 0000:06:00.1 p5p2: using MSI-X  IRQs: sp 74  fp[0] 
76 ... fp[7] 83
      [  253.499085] bond0: Disabling feature 0x0000000000004000 on lower dev 
p5p1.
      [  254.290922] bnx2x 0000:06:00.0 p5p1: using MSI-X  IRQs: sp 62  fp[0] 
64 ... fp[7] 71

      Fixes: fd867d51f ("net/core: generic support for disabling netdev 
features down stack")
      CC: "David S. Miller" <davem@xxxxxxxxxxxxx>
      CC: Eric Dumazet <edumazet@xxxxxxxxxx>
      CC: Jay Vosburgh <j.vosburgh@xxxxxxxxx>
      CC: Veaceslav Falico <vfalico@xxxxxxxxx>
      CC: Andy Gospodarek <gospo@xxxxxxxxxxxxxxxxxxx>
      CC: Jiri Pirko <jiri@xxxxxxxxxxx>
      CC: Nikolay Aleksandrov <razor@xxxxxxxxxxxxx>
      CC: Michal Kubecek <mkubecek@xxxxxxx>
      CC: Alexander Duyck <alexander.duyck@xxxxxxxxx>
      CC: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      CC: netdev@xxxxxxxxxxxxxxx
      Signed-off-by: Jarod Wilson <jarod@xxxxxxxxxx>
      Acked-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 74f2d19caff885bc656e9acf2a6e727b66ab0ed1
  Author: Padmanabh Ratnakar <padmanabh.ratnakar@xxxxxxxxxxxxx>
  Date:   Tue Nov 3 20:25:59 2015 +0530

      vlan: Invoke driver vlan hooks only if device is present

      NIC drivers mark device as detached during error recovery.
      It expects no manangement hooks to be invoked in this state.
      Invoke driver vlan hooks only if device is present.

      Signed-off-by: Padmanabh Ratnakar <padmanabh.ratnakar@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 754107e34165373b3696620cef344227b10eaa99
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Tue Nov 3 14:51:29 2015 +0100

      arcnet/com20020: add LEDS_CLASS dependency

      The newly added led trigger support in the com20020-pci driver causes
      build errors when CONFIG_LEDS_CLASS is disabled:

      drivers/built-in.o: In function `com20020pci_probe':
      (.text+0x185dc4): undefined reference to `devm_led_classdev_register'
      (.text+0x185dd8): undefined reference to `devm_led_classdev_register'

      This adds a Kconfig dependency to prevent the invalid configurations.
      Other drivers appear to be split 50:50 between 'select' and 'depends on'
      for this symbol, I picked 'depends on' as I could not find a common
      policy and it generally causes fewer problems.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: 8890624a4e8c ("arcnet: com20020-pci: add led trigger support")
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1d056d9c95be87725c07e514930b41c2c7174e75
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Tue Nov 3 11:39:20 2015 +0100

      bpf, verifier: annotate verbose printer with __printf

      The verbose() printer dumps the verifier state to user space, so let gcc
      take care to check calls to verbose() for (future) errors. make with W=1
      correctly suggests: function might be possible candidate for 'gnu_printf'
      format attribute [-Wsuggest-attribute=format].

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 85013ab5722268cd3c410425bd5a42feb6974a1f
  Merge: 0561e8e a1f8723
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Nov 3 11:08:22 2015 -0500

      Merge branch 'dp83640-fixes'

      Stefan Sørensen says:

      ====================
      dp83640 driver fixes

      This series fixes a number of minor bugs in the dp83640 driver.
      ====================

      Acked-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a1f8723f38921a0216a63d3ec9f01ec1e2813363
  Author: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 09:34:08 2015 +0100

      dp83640: Only wait for timestamps for packets with timestamping enabled.

      In the packet timestamping function, check that the ptp version and
      protocol of the packet matches what we have configured the hardware to
      actually generate timestamps for, before looking/waiting for a timestamp.

      Signed-off-by: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5f94c943d5dd4b51f3248193e622dd5fcdbb8b11
  Author: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 09:34:07 2015 +0100

      ptp: Change ptp_class to a proper bitmask

      Change the definition of PTP_CLASS_L2 to not have any bits overlapping 
with
      the other defined protocol values, allowing the PTP_CLASS_* definitions to
      be for simple filtering on packet type.

      Signed-off-by: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ccf6ee9a6980eff9ec0eeaa8f63c65bff34d9697
  Author: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 09:34:06 2015 +0100

      dp83640: Prune rx timestamp list before reading from it

      The list of rx timestamps are currently only pruned of old entries when a
      new entry is inserted. If no new entries are added, old timestamps may
      survive beyond their lifetime, possible causing them to be attached to
      packets with the same sequence number after a rollover.

      Signed-off-by: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4b063258ab9360207a4f6913d31d761bd85631ab
  Author: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 09:34:05 2015 +0100

      dp83640: Delay scheduled work.

      Currently rx_timestamp_work reschedules itself as a regular workqueue 
item,
      effectively causing it run constantly as long as there are packets left in
      the queue. Fix by using delayed workqueue items, limiting it to run only
      every two jiffies.

      Signed-off-by: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 539e44d26855fdd198280ee41360a0b3adcf699b
  Author: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 09:34:04 2015 +0100

      dp83640: Include hash in timestamp/packet matching

      Only using the message type and sequence id for matching timestamps
      with packets is error prone, as multiple clients may very well be
      sending packets with the same messagetype and timestamp at the same
      time. Fix by extending the check to include the hash of bytes 20-29
      (source id in PTPv2) that is provided with the timestamps.

      Signed-off-by: Stefan Sørensen <stefan.sorensen@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ebac62fe3d24c0ce22dd83afa7b07d1a2aaef44d
  Author: Michal KubeÄ?ek <mkubecek@xxxxxxx>
  Date:   Tue Nov 3 08:51:07 2015 +0100

      ipv6: fix tunnel error handling

      Both tunnel6_protocol and tunnel46_protocol share the same error
      handler, tunnel6_err(), which traverses through tunnel6_handlers list.
      For ipip6 tunnels, we need to traverse tunnel46_handlers as we do e.g.
      in tunnel46_rcv(). Current code can generate an ICMPv6 error message
      with an IPv4 packet embedded in it.

      Fixes: 73d605d1abbd ("[IPSEC]: changing API of xfrm6_tunnel_register")
      Signed-off-by: Michal Kubecek <mkubecek@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0561e8e8786203f1b82322550e5c31aeef033d2f
  Merge: fd867d5 3ea4891
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Nov 3 10:41:51 2015 -0500

      Merge branch 'mlx5-fixes'

      Or Gerlitz says:

      ====================
      Mellanox mlx5e driver update, Nov 3 2015

      This series contains bunch of small fixes to the mlx5e driver from Achiad.

      Changes from V0:
        - removed the driver patch that dealt with IRQ affinity changes during
          NAPI poll, as this is a generic problem which needs generic solution.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3ea4891db8d0d224f59b2fae0f386c8f5e68993f
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Tue Nov 3 08:07:24 2015 +0200

      net/mlx5e: Fix LSO vlan insertion

      Consider vlan insertion impact on headers copy size also for LSO
      packets.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e4cf27bd9ce64d048df52a21cf162ce8b1a99362
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Tue Nov 3 08:07:23 2015 +0200

      net/mlx5e: Re-eanble client vlan TX acceleration

      This reverts commit cd58c714acb9 "net/mlx5e: Disable client vlan TX 
acceleration".

      Bring back client vlan insertion offload, the original
      performance issue was found and fixed in the next patch.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fe9f4fe58d17e09b210061ed089dba6e81564652
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Tue Nov 3 08:07:22 2015 +0200

      net/mlx5e: Return error in case mlx5e_set_features() fails

      In case mlx5e_set_features() fails, return the failure status rather
      than 0.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3435ab59d3febe0c00af2a4d40a6df401effe3de
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Tue Nov 3 08:07:21 2015 +0200

      net/mlx5e: Don't allow more than max supported channels

      Consider MLX5E_MAX_NUM_CHANNELS @ethtool set/get_channels

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 61d0e73e0a5ab5fc80f6cd9d54f5146e33288a8d
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Tue Nov 3 08:07:20 2015 +0200

      net/mlx5_core: Use the the real irqn in eq->irqn

      Instead of storing the msix array index in eq->irqn (vecidx),
      store the real irq number.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Saeed Mahameed <saeedm@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 01c196a2d3d1cfaab7d20879236e981104749510
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Tue Nov 3 08:07:19 2015 +0200

      net/mlx5e: Wait for RX buffers initialization in a more proper manner

      Use jiffies rather than wait loop with msleep().

      The wait loop didn't take into consideration time when the
      process was not executing.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a1985740904342a884471348f6e038ee5d706c36
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Tue Nov 3 08:07:18 2015 +0200

      net/mlx5e: Avoid NULL pointer access in case of configuration failure

      In case a configuration operation that involves closing and re-opening
      resources (e.g RX/TX queue size change) fails at the re-opening stage
      these resources will remain closed.
      So when executing (following) configuration operations (e.g ifconfig
      down) we cannot assume that these resources are available.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b38feccd663b55ab07116208b68e1ffc7c3c7e78
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Mon Nov 2 14:03:46 2015 +0100

      s390: remove runtime instrumentation interrupts

      The external interrupts for runtime instrumentation buffer-full
      and runtime instrumentation halted are unused and have no current
      user. Remove the support and ignore the second parameter of the
      s390_runtime_instr system call from now on.

      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit e510f681d27d402d74dc7b81e13db118e4180937
  Author: Pierre Morel <pmorel@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 26 11:13:18 2015 +0100

      s390/cio: de-duplicate subchannel validation

      cio_validate_io_subchannel() and cio_validate_msg_subchannel() are
      identical, as the called functions already take care about the
      differences between subchannel types.

      Just inline the code into the only user,
      cio_validate_subchannel(), instead.

      Signed-off-by: Pierre Morel <pmorel@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Acked-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 8f0ba83178d4f3630687296c45d593326ec2d63d
  Author: Pierre Morel <pmorel@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 26 10:45:04 2015 +0100

      s390/css: unneeded initialization in for_each_subchannel

      The ret variable is always set by the fn function.
      There is no need to initialize it.

      Signed-off-by: Pierre Morel <pmorel@xxxxxxxxxxxxxxxxxx>
      Reviewed-By: Sascha Silbe <silbe@xxxxxxxxxxxxxxxxxx>
      Acked-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 295d8fa961466bb9e9ebb87b46fdad4edaf736de
  Author: Christian Borntraeger <borntraeger@xxxxxxxxxx>
  Date:   Thu Oct 29 01:16:04 2015 +0100

      s390/Kconfig: use builtin bswap

      Depending on the gcc version we can use builtin_bswap instead of
      architecture functions. Doing so is better than the inline assembly
      version of load reverse for two reasons:
      - the sequence of load reversed, apply constant mask, save reversed can
        be optimized to load, apply reversed mask, save
      - builtins are slightly better to optimize e.g. gcc instruction
        scheduler cannot optimize grouping on inline assemblies.

      To enable set we have to ARCH_USE_BUILTIN_BSWAP.
      bloat-o-meter results:
      add/remove: 1/1 grow/shrink: 75/533 up/down: 1711/-9394 (-7683)

      Suggested-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Acked-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit ccc0e7dc708ce1bd2e1c4a2b6a180ae7459374de
  Author: Stefan Haberland <stefan.haberland@xxxxxxxxxx>
  Date:   Fri Oct 23 12:10:51 2015 +0200

      s390/dasd: fix disconnected device with valid path mask

      Path verification is either done via dasd_eckd_read_conf() which is
      triggered during online processing and resume or via
      do_path_verification_work() which is triggered after path events.
      The dasd_eckd_read_conf() version added paths unconditionally and did
      not check if the path mask was empty. This led to devices having the
      disconnected stop flag set but a valid path mask. So they where not
      working although they had paths validated successfully. After a resume
      this state could even not be solved with additional paths added.

      Fix by checking for an empty path mask in dasd_eckd_read_conf() and
      clearing the device stop bits for a newly added channel path.

      Reviewed-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Stefan Haberland <stefan.haberland@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 251afd69e3328653bae4a8ca09700971ca4000c5
  Author: Stefan Haberland <stefan.haberland@xxxxxxxxxx>
  Date:   Thu Oct 15 13:54:39 2015 +0200

      s390/dasd: fix invalid PAV assignment after suspend/resume

      For a valid PAV assignment the DASD driver needs to notice possibly
      changed configuration data. Thus the failing of read configuration
      data should also fail the device restore to prevent invalid PAV
      assignment. The failed device may get restored after additional paths
      get available later on.
      If the restore fails after the device was added to the lcu alias
      handling it needs to be removed from the alias handling before exiting
      the restore function.

      Reviewed-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Stefan Haberland <stefan.haberland@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit c7c0c9deb0a4b0715d2c09438420437b86f387c4
  Author: Stefan Haberland <stefan.haberland@xxxxxxxxxx>
  Date:   Thu Oct 15 11:10:08 2015 +0200

      s390/dasd: fix double free in dasd_eckd_read_conf

      The configuration data is stored per path and also the first valid
      configuration data per device. When dasd_eckd_read_conf is called
      again after a path got lost the device configuration data is cleared
      but possibly not the per path configuration data. This might lead to a
      double free when the lost path gets operational again.

      Fix by clearing all per path configuration data when the first valid
      configuration data is received and stored.

      Reviewed-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Stefan Haberland <stefan.haberland@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 55a423b6f105fa323168f15f4bb67f23b21da44e
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Tue Oct 27 13:13:38 2015 +0100

      s390/kernel: fix ptrace peek/poke for floating point registers

      git commit 155e839a814834a3b4b31e729f4716e59d3d2dd4
      "s390/kernel: dynamically allocate FP register save area"
      introduced a regression in regard to ptrace.

      If the vector register extension is not present or unused the
      ptrace peek of a floating pointer register return incorrect data
      and the ptrace poke to a floating pointer register overwrites the
      task structure starting at task->thread.fpu.fprs.

      Cc: stable@xxxxxxxxxx # v4.3
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit e4208427247ecc7306c8f71ab3c5c08e08cf9fda
  Author: Ayala Beker <ayala.beker@xxxxxxxxx>
  Date:   Fri Oct 23 11:20:06 2015 +0300

      cfg80211: allow AID/listen interval changes for unassociated station

      Currently, cfg80211 rejects updates of AID and listen interval parameters
      for existing entries. This information is known only at association stage
      and as a result it's impossible to update entries that were added
      unassociated.
      Fix this by allowing updates of these properies for stations that the
      driver (or mac80211) assigned unassociated state.

      This then fixes mac80211's use of NL80211_FEATURE_FULL_AP_CLIENT_STATE.

      Signed-off-by: Ayala Beker <ayala.beker@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit dcae9e0203dfd887a7413cd38d1f87aaac1127f4
  Author: Chaitanya T K <chaitanya.mgit@xxxxxxxxx>
  Date:   Fri Oct 30 23:16:15 2015 +0530

      mac80211: document sleep requirements for channel context ops

      Channel context driver operations can sleep, so add might_sleep()
      and document this.

      Signed-off-by: Chaitanya T K <chaitanya.mgit@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit ef95d8ba384781ce574c10f87b97d6bab2659735
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Sun Oct 25 10:59:42 2015 +0200

      mac80211: further improve "no supported rates" warning

      Allow distinguishing the non-station case from the case of a
      station without rates, by using -1 for the non-station case.
      This value cannot be reached with a station since that many
      legacy rates don't exist.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 2ed77ea69205139c3f6016b250d34e09bf48574d
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 22 17:46:06 2015 +0200

      mac80211: treat bad WMM parameters more gracefully

      As WMM is required for HT/VHT operation, treat bad WMM parameters
      more gracefully by falling back to default parameters instead of
      not using WMM assocation. This makes it possible to still use HT
      or VHT, although potentially with reduced quality of service due
      to unintended WMM parameters.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 730a755017139ddedac08d82f73c3532a020d372
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Thu Oct 22 17:46:05 2015 +0200

      mac80211: fixup AIFSN instead of disabling WMM

      Disabling WMM has a huge impact these days. It implies that
      HT and VHT will be disabled which means that the throughput
      will be drammatically reduced.
      Since the AIFSN is a transmission parameter, we can play a
      bit and fix it up to make it compliant with the 802.11
      specification which requires it to be at least 2.
      Increasing it from 1 to 2 will slightly reduce the
      likelyhood to get a transmission opportunity compared to
      other clients that would accept to set AIFSN=1, but at
      least it will allow HT and VHT which is a huge gain.

      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit cec6628350802b0a652486c41b57d4e1dd37a65c
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 22 17:46:04 2015 +0200

      mac80211: make enable_qos parameter to ieee80211_set_wmm_default()

      The function currently determines this value, for use in bss_info.qos,
      based on the interface type itself. Make it a parameter instead and
      set it with the same logic for now.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit e86abc689c5cb963f713c1bab9c37775421a6a96
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Thu Oct 22 17:35:14 2015 +0200

      cfg80211/mac80211: clarify RSSI CQM reporting requirements

      The previous patch changed mac80211 to always report an event
      after a CQM RSSI reconfiguration. Document that as expected
      behaviour in both the cfg80211 and mac80211 API.

      Currently, iwlmvm already implements that behaviour; the other
      drivers implementing CQM RSSI events may have to be changed.

      This behaviour lets userspace know what the current state is
      without relying on querying the data which is racy.

      Reviewed-by: Sharon, Sara <sara.sharon@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 520c75dcae6e588670962243bac6324e7839b648
  Author: Matthias Schiffer <mschiffer@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 21:25:51 2015 +0200

      mac80211: fix crash on mesh local link ID generation with VIFs

      llid_in_use needs to be limited to stations of the same VIF, otherwise it
      will cause a NULL deref as the sta_info of non-mesh-VIFs don't have
      sta->mesh set.

      Steps to reproduce:

         modprobe mac80211_hwsim channels=2
         iw phy phy0 interface add ibss0 type ibss
         iw phy phy0 interface add mesh0 type mp
         iw phy phy1 interface add ibss1 type ibss
         iw phy phy1 interface add mesh1 type mp
         ip link set ibss0 up
         ip link set mesh0 up
         ip link set ibss1 up
         ip link set mesh1 up
         iw dev ibss0 ibss join foo 2412
         iw dev ibss1 ibss join foo 2412
         # Ensure that ibss0 and ibss1 are actually associated; I often need to
         # leave and join the cell on ibss1 a second time.
         iw dev mesh0 mesh join bar
         iw dev mesh1 mesh join bar # crash

      Signed-off-by: Matthias Schiffer <mschiffer@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 57f255f58165974c131f048b4302728052d92d29
  Author: Arik Nemtsov <arik@xxxxxxxxxx>
  Date:   Sun Oct 25 10:59:34 2015 +0200

      mac80211: TDLS: add proper HT-oper IE

      When 11n peers performs a TDLS connection on a legacy BSS, the HT
      operation IE must be specified according to IEEE802.11-2012 section
      9.23.3.2. Otherwise HT-protection is compromised and the medium becomes
      noisy for both the TDLS and the BSS links.

      Signed-off-by: Arik Nemtsov <arikx.nemtsov@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 0d440ea294a00b60ced66c0bc5cb5caa42fd4fbd
  Author: Eliad Peller <eliad@xxxxxxxxxx>
  Date:   Sun Oct 25 10:59:33 2015 +0200

      mac80211: don't reconfigure sched scan in case of wowlan

      Scheduled scan has to be reconfigured only if wowlan wasn't
      configured, since otherwise it should continue to run (with
      the 'any' trigger) or be aborted.

      The current code will end up asking the driver to start a new
      scheduled scan without stopping the previous one, and leaking
      some memory (from the previous request.)

      Fix this by doing the abort/restart under the proper conditions.

      Signed-off-by: Eliad Peller <eliadx.peller@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 968a76cef3d1bb9a3b4d135cd788056e742859f3
  Author: Eliad Peller <eliad@xxxxxxxxxx>
  Date:   Sun Oct 25 10:59:36 2015 +0200

      mac80211: call drv_stop only if driver is started

      If drv_start() fails during hw_restart, all the running
      interfaces are being closed/stopped, which results in
      drv_stop() being called, although the driver was never
      started successfully.

      This might cause drivers to perform operations on uninitialized
      memory (as they assume it was initialized on drv_start)

      Consider the local->started flag, and call the driver's stop()
      op only if drv_start() succeeded before.

      Move drv_start() and drv_stop() to driver-ops.c, as they are no
      longer simple wrappers.

      Signed-off-by: Eliad Peller <eliadx.peller@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit c189a685b83955a39884dc2bdae531bc0adf3b98
  Author: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
  Date:   Sun Oct 25 10:59:40 2015 +0200

      mac80211: Remove WARN_ON_ONCE in ieee80211_recalc_smps

      The recalc_smps work can run after the station disassociates.
      At this stage we already released the channel, but the work
      will be cancelled only when the interface stops.
      In this scenario we can hit the warning in ieee80211_recalc_smps, so
      just remove it.

      Signed-off-by: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 43d6df007c0cc111ab8ead8bd95aafab9bb4531d
  Author: Eliad Peller <eliad@xxxxxxxxxx>
  Date:   Sun Oct 25 10:59:35 2015 +0200

      mac80211: use freezable workqueue for restart work

      Requesting hw restart during suspend might result
      in the restart work being executed after mac80211
      and the hw are suspended.

      Solve the race by simply scheduling the restart
      work on a freezable workqueue.

      Note that there can be some cases of reconfiguration
      on resume (besides the hardware restart):

      * wowlan is not configured -
          All the interfaces removed were removed on suspend,
          and drv_stop() was called. At this point the driver
          shouldn't expect for hw_restart anyway, so we can
          simply cancel it (on resume).

      * wowlan is configured, drv_resume() == 1
          There is no definitive expected behavior in this case,
          as each driver might have different expectations (e.g.
          setting some flags on suspend/restart vs. not handling
          spurious recovery).
          For now, simply let the hw_restart work run again after
          resume, and hope the driver will handle it well (or at
          least initiate another hw restart).

      Signed-off-by: Eliad Peller <eliadx.peller@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit a64cba3c5330704a034bd3179270b8d04daf6987
  Author: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
  Date:   Sun Oct 25 10:59:38 2015 +0200

      mac80211: Fix local deauth while associating

      Local request to deauthenticate wasn't handled while associating, thus
      the association could continue even when the user space required to
      disconnect.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 254d3dfe445f94a764e399ca12e04365ac9413ed
  Author: Arik Nemtsov <arik@xxxxxxxxxx>
  Date:   Sun Oct 25 10:59:41 2015 +0200

      mac80211: allow null chandef in tracing

      In TDLS channel-switch operations the chandef can sometimes be NULL.
      Avoid an oops in the trace code for these cases and just print a
      chandef full of zeros.

      Cc: stable@xxxxxxxxxxxxxxx
      Fixes: a7a6bdd0670fe ("mac80211: introduce TDLS channel switch ops")
      Signed-off-by: Arik Nemtsov <arikx.nemtsov@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 4baf6bea37247e59f1971e8009d13aeda95edba2
  Author: Ola Olsson <ola1olsson@xxxxxxxxx>
  Date:   Thu Oct 29 07:04:58 2015 +0100

      nl80211: Fix potential memory leak from parse_acl_data

      If parse_acl_data succeeds but the subsequent parsing of smps
      attributes fails, there will be a memory leak due to early returns.
      Fix that by moving the ACL parsing later.

      Cc: stable@xxxxxxxxxxxxxxx
      Fixes: 18998c381b19b ("cfg80211: allow requesting SMPS mode on ap start")
      Signed-off-by: Ola Olsson <ola.olsson@xxxxxxxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 519ee6918b91abdc4bc9720deae17599a109eb40
  Author: Janusz.Dziedzic@xxxxxxxxx <Janusz.Dziedzic@xxxxxxxxx>
  Date:   Tue Oct 27 08:35:11 2015 +0100

      mac80211: fix divide by zero when NOA update

      In case of one shot NOA the interval can be 0, catch that
      instead of potentially (depending on the driver) crashing
      like this:

      divide error: 0000 [#1] SMP
      [...]
      Call Trace:
      <IRQ>
      [<ffffffffc08e891c>] ieee80211_extend_absent_time+0x6c/0xb0 [mac80211]
      [<ffffffffc08e8a17>] ieee80211_update_p2p_noa+0xb7/0xe0 [mac80211]
      [<ffffffffc069cc30>] ath9k_p2p_ps_timer+0x170/0x190 [ath9k]
      [<ffffffffc070adf8>] ath_gen_timer_isr+0xc8/0xf0 [ath9k_hw]
      [<ffffffffc0691156>] ath9k_tasklet+0x296/0x2f0 [ath9k]
      [<ffffffff8107ad65>] tasklet_action+0xe5/0xf0
      [...]

      Cc: stable@xxxxxxxxxxxxxxx [3.16+, due to d463af4a1c34 using it]
      Signed-off-by: Janusz Dziedzic <janusz.dziedzic@xxxxxxxxx>
      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit ffdc307d038f02617041f8e5c7e3cd00a1706a2a
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sat Oct 24 16:42:30 2015 +0200

      leds: 88pm860x: add missing of_node_put

      for_each_child_of_node performs an of_node_get on each iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      local idexpression n;
      expression e,r;
      @@

       for_each_child_of_node(r,n) {
         ...
      (
         of_node_put(n);
      |
         e = n
      |
      +  of_node_put(n);
      ?  break;
      )
         ...
       }
      ... when != n
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 6cc7624415466022749a868c159ac68367bc9a0e
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sat Oct 24 16:42:29 2015 +0200

      leds: bcm6328: add missing of_node_put

      for_each_available_child_of_node performs an of_node_get on each
      iteration, so a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression root,e;
      local idexpression child;
      @@

       for_each_available_child_of_node(root, child) {
         ... when != of_node_put(child)
             when != e = child
      (
         return child;
      |
      +  of_node_put(child);
      ?  return ...;
      )
         ...
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 4b6ba5e28b2903fa8b51c6d5fdafb2979fe6eeab
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sat Oct 24 16:42:28 2015 +0200

      leds: bcm6358: add missing of_node_put

      for_each_available_child_of_node performs an of_node_get on each
      iteration, so a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression root,e;
      local idexpression child;
      @@

       for_each_available_child_of_node(root, child) {
         ... when != of_node_put(child)
             when != e = child
      (
         return child;
      |
      +  of_node_put(child);
      ?  return ...;
      )
         ...
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit dde4afe7656084b7886f3b721530c32209842390
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sat Oct 24 16:42:27 2015 +0200

      powerpc/powernv: add missing of_node_put

      for_each_child_of_node performs an of_node_get on each iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression root,e;
      local idexpression child;
      @@

       for_each_child_of_node(root, child) {
         ... when != of_node_put(child)
             when != e = child
      (
         return child;
      |
      +  of_node_put(child);
      ?  return ...;
      )
         ...
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit e9aadb864f04f1f7c7f8713fead64a2370be940d
  Author: Fida Mohammad <fmthoker@xxxxxxxxx>
  Date:   Wed Oct 21 03:58:35 2015 -0700

      leds: leds-wrap.c: Use devm_led_classdev_register

      Use of resource managed function devm_led_classdev_register to
      make initialization path simpler. Also removed redundant remove
      function.

      Signed-off-by: Fida Mohammad <fmthoker@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 10238adb6f2bcc6c418188ef3425ea57297fa3a6
  Author: Ingi Kim <ingi2.kim@xxxxxxxxxxx>
  Date:   Thu Oct 22 10:14:07 2015 +0900

      leds: aat1290: Fix property naming of flash-timeout-us

      flash-timeout-us property name is changed to flash-max-timeout-us.
      This patch fixes that name.

      Signed-off-by: Ingi Kim <ingi2.kim@xxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 511676230b56249ecb613298f95f9910684fcb4f
  Author: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
  Date:   Sat Oct 17 05:02:57 2015 +0530

      leds: leds-net48xx: Use devm_led_classdev_register

      Use devm_led_classdev_register instead of led_classdev_register,
      removing the redundant net48xx_led_remove function.

      Signed-off-by: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 81aad9f81e6d89819f12656bd38df9ef639dbe45
  Author: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
  Date:   Sat Oct 17 01:47:55 2015 +0530

      leds: leds-menf21bmc.c: Use devm_led_class_register

      Use resource-managed function devm_led_classdev_register instead
      of led_classdev_register, consequently remove redundant
      menf21bmc_led_remove function.
      Also drop the unneeded label err_free_leds.

      Signed-off-by: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit d43986143463690642bac8897196496d4c776269
  Author: Fida Mohammad <fmthoker@xxxxxxxxx>
  Date:   Fri Oct 16 14:33:03 2015 -0700

      leds: leds-locomo.c: Use devm_led_classdev_register

      Use resource managed function devm_led_classdev_register to make
      initialisation path simpler.
      Also removed redundant led_classdev_unregister function.

      Signed-off-by: Fida Mohammad <fmthoker@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 707f33ed85ff423016674d27bb2e60fe8fa352ce
  Author: Heiko Schocher <hs@xxxxxxx>
  Date:   Tue Oct 13 07:17:12 2015 +0200

      leds: leds-gpio: add shutdown function

      add a shutdown function for setting the gpio-leds
      into off state when shuting down.

      Signed-off-by: Heiko Schocher <hs@xxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 1d3ff22d633d35048c35c3deeead7ab116cebc32
  Author: �lvaro Fernández Rojas <noltari@xxxxxxxxx>
  Date:   Thu Oct 8 12:35:55 2015 +0200

      Documentation: leds: update DT bindings for leds-bcm6328

      This patch adds latest DT bindings for leds-bcm6328 init register
      configuration.

      Signed-off-by: �lvaro Fernández Rojas <noltari@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 9f82c778ce17789a038351a411ff65cd41033c7a
  Author: �lvaro Fernández Rojas <noltari@xxxxxxxxx>
  Date:   Thu Oct 8 12:35:54 2015 +0200

      leds-bcm6328: add more init configuration options

      This patch adds more init register configuration options:
      - Serial LEDs multiplexing.
      - Serial LEDs clock signal low/high polarity.
      - Serial LEDs data signal low/high polarity.
      - Serial LEDs shift direction inverted/normal.

      Signed-off-by: �lvaro Fernández Rojas <noltari@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit d8fe1606d1a7181c877d8b1727cdcfb82f76e91c
  Author: �lvaro Fernández Rojas <noltari@xxxxxxxxx>
  Date:   Thu Oct 8 12:35:53 2015 +0200

      leds-bcm6328: simplify and improve default-state handling

      This patch simplifies and improves the code related to
      default-state handling.
      It also changes the code to power off the LEDs by default.

      Signed-off-by: �lvaro Fernández Rojas <noltari@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 79653fbb3365002899e7d25ec5ca96aff4241ede
  Author: �lvaro Fernández Rojas <noltari@xxxxxxxxx>
  Date:   Thu Oct 8 12:35:52 2015 +0200

      leds-bcm6328: print invalid LED

      Print invalid LED instead of warning only about maximum LED value.

      Signed-off-by: �lvaro Fernández Rojas <noltari@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 7b9d9d88158e99a6a17a292ec4ec47105a771c4f
  Author: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
  Date:   Sat Sep 26 23:02:38 2015 +0200

      leds: netxbig: set led_classdev max_brightness

      This patch sets the led_classdev max_brightness to the maximum level
      value supported by hardware. This allows to get rid of the brightness
      conversion operation (from software [0:LED_FULL] to hardware ranges) in
      brightness_set().

      Signed-off-by: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit cd0109555bd118ddb8ee0df0ca5d8f9bd3d7a77f
  Author: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
  Date:   Sat Sep 26 23:02:37 2015 +0200

      leds: netxbig: convert to use the devm_ functions

      This patch converts the leds-netxbig driver to use the devres functions
      devm_gpio_request_one() and devm_led_classdev_register(). This allows to
      simplify the code a bit.

      Signed-off-by: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit ebc278f1575942d08ad3278b71cde99bd24eae63
  Author: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
  Date:   Sat Sep 26 23:02:36 2015 +0200

      ARM: mvebu: remove static LED setup for netxbig boards

      Since DT support is now available for the LEDs found on the LaCie
      netxbig boards (Kirkwood-based), then the old-fashion netxbig board
      setup file is no longer needed. This patch removes this file.

      Signed-off-by: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
      Acked-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 767361fac0f730293c1be8cdf1636cf9510b2245
  Author: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
  Date:   Sat Sep 26 23:02:35 2015 +0200

      ARM: Kirkwood: add LED DT entries for netxbig boards

      This patch adds DT entries for the LEDs found on the Kirkwood-based
      LaCie boards 2Big and 5Big Network v2.

      Signed-off-by: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
      Acked-by: Gregory CLEMENT <gregory.clement@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 2976b17989094e97567510be3ea91fc2f0c7aab3
  Author: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
  Date:   Sat Sep 26 23:02:34 2015 +0200

      leds: netxbig: add device tree binding

      This patch adds device tree support for the netxbig LEDs.

      This also introduces a additionnal DT binding for the GPIO extension bus
      (netxbig-gpio-ext) used to configure the LEDs. Since this bus could also
      be used to control other devices, then it seems more suitable to have it
      in a separate DT binding.

      Signed-off-by: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 1c7b9d0edf5ada916fd02e66355f79f2089ee095
  Author: Jiri Prchal <jiri.prchal@xxxxxxxxxxx>
  Date:   Thu Oct 8 10:32:26 2015 +0200

      leds: triggers: add invert to heartbeat

      This patch adds possibility to invert heartbeat blinking.
      The inverted LED is more time ON then OFF. It's because it looks
      better when the heartbeat LED is next to other LED which is most
      time ON. The invert value is exported same way via sysfs in file
      invert like oneshot. I get inspiration from this trigger.

      Signed-off-by: Jiri Prchal <jiri.prchal@xxxxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 757b06ae04b3b6c8958ab067e879a8865d076d2a
  Author: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>
  Date:   Mon Sep 28 14:38:04 2015 +0200

      leds: core: Move LED core callbacks out of led-class.c

      Since the API for controlling LED brightness and blinking is defined in
      the LED core, move the related timer and work callbacks to the led-core.c,
      and initialize them through a new led_core_init API.

      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>
      Acked-by: Andrew Lunn <andrew@xxxxxxx>
      Acked-by: Pavel Machek <pavel@xxxxxx>

  commit 22a16873d38829570677871a22cf77f00445206f
  Author: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
  Date:   Mon Aug 3 17:04:01 2015 +0200

      LED/MIPS: Move SEAD3 LED driver to where it belongs.

      Fixes the following randconfig problem

      leds-sead3.c:(.text+0x7dc): undefined reference to 
`led_classdev_unregister'
      leds-sead3.c:(.text+0x7e8): undefined reference to 
`led_classdev_unregister'

      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
      Cc: Bryan Wu <cooloney@xxxxxxxxx>
      Cc: Richard Purdie <rpurdie@xxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: linux-leds@xxxxxxxxxxxxxxx
      Cc: linux-mips@xxxxxxxxxxxxxx
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 95281b5b598e9805b77dbbaaea400ebc2289bac8
  Author: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
  Date:   Mon Sep 7 21:58:29 2015 +0530

      leds: leds-ipaq-micro: Fix coding style issues

      Spaces at the starting of a line are removed, indentation using
      tab, instead of space. Also, line width of more than 80 characters
      is also taken care of.
      Two warnings are left alone to aid better readability.

      Signed-off-by: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 431557f4a44f582f83fd83cbee571baeab24b853
  Author: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
  Date:   Mon Sep 7 19:43:23 2015 +0530

      leds: leds-ipaq-micro: Use devm_led_classdev_register

      Use of resource-managed function devm_led_classdev_register
      instead of led_classdev_register is preferred, consequently
      remove redundant function micro_leds_remove.

      Signed-off-by: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 583a2b2cd73c13a91b5f529466dec4d27716d226
  Author: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
  Date:   Sat Sep 5 19:53:27 2015 +0530

      leds: leds-ot200: Use devm_led_classdev_register

      Use resource-managed function devm_led_classdev_register
      instead of led_classdev_register to make the error path simpler.
      The goto is replaced with direct return, unneeded label err is
      dropped. Also, remove redundant ot200_led_remove.

      Signed-off-by: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit c0fc68ba97b0f96fa4aaa6010ead6b77d3ffc3dd
  Author: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
  Date:   Sun Sep 6 01:23:37 2015 +0530

      leds: leds-hp6xx: Use devm_led_classdev_register

      Use resource-managed function devm_led_classdev_register
      instead of led_classdev_register to simplify error path.
      An unnecessary check of ret is replaced with a direct return
      Also, remove redundant hp6xxled_remove.

      Signed-off-by: Muhammad Falak R Wani <falakreyaz@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit aa4e2524955971730ff845c0589f2f8f441ad610
  Author: Vaishali Thakkar <vthakkar1994@xxxxxxxxx>
  Date:   Fri Sep 4 12:12:01 2015 +0200

      leds: leds-cobalt-qube: Use devm_led_classdev_register

      Use resource-managed function devm_led_classdev_register instead
      of led_classdev_register to make the error-path simpler.

      To be compatible with the change, goto is replaced with direct
      return, unneeded label err_null is dropped and unnecessary variable
      retval is removed. Also, remove redundant cobalt_qube_led_remove.

      Signed-off-by: Vaishali Thakkar <vthakkar1994@xxxxxxxxx>
      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>

  commit 6ebbabbaed0b38563f62100762e3b3780655f83f
  Author: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 10 15:14:21 2015 +0200

      avr32: atngw100: remove useless include

      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
      Acked-by: Hans-Christian Egtvedt <egtvedt@xxxxxxxxxxxx>

  commit 5f6c99e0ab805d8ec9eda105822912d49aa1d409
  Author: Shaohui Xie <Shaohui.Xie@xxxxxxxxxxxxx>
  Date:   Tue Nov 3 12:27:33 2015 +0800

      net: phy: fix a bug in get_phy_c45_ids

      When probing devices-in-package for a c45 phy, device zero is the last
      device to probe, however, if driver reads 0 from device zero,
      c45_ids->devices_in_package is set to '0', the loop condition of probing
      will be matched again, see codes below:

      for (i = 1;i < num_ids && c45_ids->devices_in_package == 0;i++)

      driver will run in a dead loop.

      This patch restructures the bug and confusing loop, it provides a helper
      function get_phy_c45_devs_in_pkg which to read devices-in-package 
registers
      of a MMD, and rewrites the loop with using the helper function.

      Signed-off-by: Shaohui Xie <Shaohui.Xie@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fd867d51f889aec11cca235ebb008578780d052d
  Author: Jarod Wilson <jarod@xxxxxxxxxx>
  Date:   Mon Nov 2 21:55:59 2015 -0500

      net/core: generic support for disabling netdev features down stack

      There are some netdev features, which when disabled on an upper device,
      such as a bonding master or a bridge, must be disabled and cannot be
      re-enabled on underlying devices.

      This is a rework of an earlier more heavy-handed appraoch, which simply
      disables and prevents re-enabling of netdev features listed in a new
      define in include/net/netdev_features.h, NETIF_F_UPPER_DISABLES. Any upper
      device that disables a flag in that feature mask, the disabling will
      propagate down the stack, and any lower device that has any upper device
      with one of those flags disabled should not be able to enable said flag.

      Initially, only LRO is included for proof of concept, and because this
      code effectively does the same thing as dev_disable_lro(), though it will
      also activate from the ethtool path, which was one of the goals here.

      [root@dell-per730-01 ~]# ethtool -k bond0 |grep large
      large-receive-offload: on
      [root@dell-per730-01 ~]# ethtool -k p5p1 |grep large
      large-receive-offload: on
      [root@dell-per730-01 ~]# ethtool -K bond0 lro off
      [root@dell-per730-01 ~]# ethtool -k bond0 |grep large
      large-receive-offload: off
      [root@dell-per730-01 ~]# ethtool -k p5p1 |grep large
      large-receive-offload: off

      dmesg dump:

      [ 1033.277986] bond0: Disabling feature 0x0000000000008000 on lower dev 
p5p2.
      [ 1034.067949] bnx2x 0000:06:00.1 p5p2: using MSI-X  IRQs: sp 74  fp[0] 
76 ... fp[7] 83
      [ 1034.753612] bond0: Disabling feature 0x0000000000008000 on lower dev 
p5p1.
      [ 1035.591019] bnx2x 0000:06:00.0 p5p1: using MSI-X  IRQs: sp 62  fp[0] 
64 ... fp[7] 71

      This has been successfully tested with bnx2x, qlcnic and netxen network
      cards as slaves in a bond interface. Turning LRO on or off on the master
      also turns it on or off on each of the slaves, new slaves are added with
      LRO in the same state as the master, and LRO can't be toggled on the
      slaves.

      Also, this should largely remove the need for dev_disable_lro(), and most,
      if not all, of its call sites can be replaced by simply making sure
      NETIF_F_LRO isn't included in the relevant device's feature flags.

      Note that this patch is driven by bug reports from users saying it was
      confusing that bonds and slaves had different settings for the same
      features, and while it won't be 100% in sync if a lower device doesn't
      support a feature like LRO, I think this is a good step in the right
      direction.

      CC: "David S. Miller" <davem@xxxxxxxxxxxxx>
      CC: Eric Dumazet <edumazet@xxxxxxxxxx>
      CC: Jay Vosburgh <j.vosburgh@xxxxxxxxx>
      CC: Veaceslav Falico <vfalico@xxxxxxxxx>
      CC: Andy Gospodarek <gospo@xxxxxxxxxxxxxxxxxxx>
      CC: Jiri Pirko <jiri@xxxxxxxxxxx>
      CC: Nikolay Aleksandrov <razor@xxxxxxxxxxxxx>
      CC: Michal Kubecek <mkubecek@xxxxxxx>
      CC: Alexander Duyck <alexander.duyck@xxxxxxxxx>
      CC: netdev@xxxxxxxxxxxxxxx
      Signed-off-by: Jarod Wilson <jarod@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b2663a4f30e85ec606b806f5135413e6d5c78d1e
  Author: Martin Habets <mhabets@xxxxxxxxxxxxxx>
  Date:   Mon Nov 2 12:51:31 2015 +0000

      sfc: push partner queue for skb->xmit_more

      When the IP stack passes SKBs the sfc driver puts them in 2 different TX
      queues (called partners), one for checksummed and one for not checksummed.
      If the SKB has xmit_more set the driver will delay pushing the work to the
      NIC.

      When later it does decide to push the buffers this patch ensures it also
      pushes the partner queue, if that also has any delayed work. Before this
      fix the work in the partner queue would be left for a long time and cause
      a netdev watchdog.

      Fixes: 70b33fb ("sfc: add support for skb->xmit_more")
      Reported-by: Jianlin Shi <jishi@xxxxxxxxxx>
      Signed-off-by: Martin Habets <mhabets@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c238041f517d0a6458264582e8e2a1513766f8e7
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 01:28:07 2015 +0300

      sh_eth: fix typo in RX descriptor bit name

      The correct name of the RX descriptor 0 bit 30 is RDLE (receive descriptor
      list end),  not  RDEL.

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4ece9009774596ee3df0acba65a324b7ea79387c
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Mon Nov 2 17:08:19 2015 -0800

      sit: fix sit0 percpu double allocations

      sit0 device allocates its percpu storage twice :
      - One time in ipip6_tunnel_init()
      - One time in ipip6_fb_tunnel_init()

      Thus we leak 48 bytes per possible cpu per network namespace dismantle.

      ipip6_fb_tunnel_init() can be much simpler and does not
      return an error, and should be called after register_netdev()

      Note that ipip6_tunnel_clone_6rd() also needs to be called
      after register_netdev() (calling ipip6_tunnel_init())

      Fixes: ebe084aafb7e ("sit: Use ipip6_tunnel_init as the ndo_init 
function.")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a176ded3f4bdbd267bc9a79bde12d984c8c517b2
  Merge: 12d4309 52bc671
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Nov 2 22:52:24 2015 -0500

      Merge branch 'bonding-actor-updates'

      Mahesh Bandewar says:

      ====================
      re-org actor admin/oper key updates

      I was observing machines entering into weird LACP state when the
      partner is in passive mode. This issue is not because of the partners
      in passive state but probably because of some operational key update
      which is pushing the state-machine is that weird state. This was
      happening randomly on about 1% of the machine (when the sample size
      is a large set of machines with a variety of NICs/ports bonded).

      In this patch-series I'm attempting to unify the logic of actor-key
      / operational-key changes to one place to avoid possible errors in
      update. Also this eliminates the need for the event-handler to decide
      if the key needs update.

      After this patch-set none of the machines (from same sample set) were
      exhibiting LACP-weirdness that was observed earlier.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 52bc67168109ade61014a36feedf09f4bc53d8f1
  Author: Mahesh Bandewar <maheshb@xxxxxxxxxx>
  Date:   Sat Oct 31 12:45:11 2015 -0700

      bonding: simplify / unify event handling code for 3ad mode.

      Old logic of updating state-machine is not required since
      ad_update_actor_keys() does it implicitly. The only loss is
      the notification differentiation between speed vs. duplex
      change. Now only one unified notification is printed.

      Signed-off-by: Mahesh Bandewar <maheshb@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7bb11dc9f59ddcb33ee317da77b235235aaa582a
  Author: Mahesh Bandewar <maheshb@xxxxxxxxxx>
  Date:   Sat Oct 31 12:45:06 2015 -0700

      bonding: unify all places where actor-oper key needs to be updated.

      actor_admin, and actor_oper key is changed at multiple locations in
      the code. This patch brings all those updates into one location in
      an attempt to avoid possible inconsistent updates causing LACP state
      machine to go in weird state.

      The unified place is ad_update_actor_key() with simple state-machine
      logic -
        (a) If port is "duplex" then only it can participate in LACP
        (b) Speed change reinitializes the LACP state-machine.

      Signed-off-by: Mahesh Bandewar <maheshb@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b25c2e7d3c44aaadee55d70f70c31cbc9014c713
  Author: Mahesh Bandewar <maheshb@xxxxxxxxxx>
  Date:   Sat Oct 31 12:45:00 2015 -0700

      bonding: Simplify __get_duplex function.

      Eliminate 'else' clause by simply initializing variable

      Signed-off-by: Mahesh Bandewar <maheshb@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 12d4309636d30770b54985be05ac512131f328b8
  Merge: 1d6119b 42984d7
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Nov 2 22:48:39 2015 -0500

      Merge branch 'bpf-persistent'

      Daniel Borkmann says:

      ====================
      BPF updates

      This set adds support for persistent maps/progs. Please see
      individual patches for further details. A man-page update
      to bpf(2) will be sent later on, also a iproute2 patch for
      support in tc.

      v1 -> v2:
        - Reworked most of patch 4 and 5
        - Rebased to latest net-next
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 42984d7c1e563bf92e6ca7a0fd89f8e933f2162e
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Thu Oct 29 14:58:10 2015 +0100

      bpf: add sample usages for persistent maps/progs

      This patch adds a couple of stand-alone examples on how BPF_OBJ_PIN
      and BPF_OBJ_GET commands can be used.

      Example with maps:

        # ./fds_example -F /sys/fs/bpf/m -P -m -k 1 -v 42
        bpf: map fd:3 (Success)
        bpf: pin ret:(0,Success)
        bpf: fd:3 u->(1:42) ret:(0,Success)
        # ./fds_example -F /sys/fs/bpf/m -G -m -k 1
        bpf: get fd:3 (Success)
        bpf: fd:3 l->(1):42 ret:(0,Success)
        # ./fds_example -F /sys/fs/bpf/m -G -m -k 1 -v 24
        bpf: get fd:3 (Success)
        bpf: fd:3 u->(1:24) ret:(0,Success)
        # ./fds_example -F /sys/fs/bpf/m -G -m -k 1
        bpf: get fd:3 (Success)
        bpf: fd:3 l->(1):24 ret:(0,Success)

        # ./fds_example -F /sys/fs/bpf/m2 -P -m
        bpf: map fd:3 (Success)
        bpf: pin ret:(0,Success)
        # ./fds_example -F /sys/fs/bpf/m2 -G -m -k 1
        bpf: get fd:3 (Success)
        bpf: fd:3 l->(1):0 ret:(0,Success)
        # ./fds_example -F /sys/fs/bpf/m2 -G -m
        bpf: get fd:3 (Success)

      Example with progs:

        # ./fds_example -F /sys/fs/bpf/p -P -p
        bpf: prog fd:3 (Success)
        bpf: pin ret:(0,Success)
        bpf sock:4 <- fd:3 attached ret:(0,Success)
        # ./fds_example -F /sys/fs/bpf/p -G -p
        bpf: get fd:3 (Success)
        bpf: sock:4 <- fd:3 attached ret:(0,Success)

        # ./fds_example -F /sys/fs/bpf/p2 -P -p -o ./sockex1_kern.o
        bpf: prog fd:5 (Success)
        bpf: pin ret:(0,Success)
        bpf: sock:3 <- fd:5 attached ret:(0,Success)
        # ./fds_example -F /sys/fs/bpf/p2 -G -p
        bpf: get fd:3 (Success)
        bpf: sock:4 <- fd:3 attached ret:(0,Success)

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b2197755b2633e164a439682fb05a9b5ea48f706
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Thu Oct 29 14:58:09 2015 +0100

      bpf: add support for persistent maps/progs

      This work adds support for "persistent" eBPF maps/programs. The term
      "persistent" is to be understood that maps/programs have a facility
      that lets them survive process termination. This is desired by various
      eBPF subsystem users.

      Just to name one example: tc classifier/action. Whenever tc parses
      the ELF object, extracts and loads maps/progs into the kernel, these
      file descriptors will be out of reach after the tc instance exits.
      So a subsequent tc invocation won't be able to access/relocate on this
      resource, and therefore maps cannot easily be shared, f.e. between the
      ingress and egress networking data path.

      The current workaround is that Unix domain sockets (UDS) need to be
      instrumented in order to pass the created eBPF map/program file
      descriptors to a third party management daemon through UDS' socket
      passing facility. This makes it a bit complicated to deploy shared
      eBPF maps or programs (programs f.e. for tail calls) among various
      processes.

      We've been brainstorming on how we could tackle this issue and various
      approches have been tried out so far, which can be read up further in
      the below reference.

      The architecture we eventually ended up with is a minimal file system
      that can hold map/prog objects. The file system is a per mount namespace
      singleton, and the default mount point is /sys/fs/bpf/. Any subsequent
      mounts within a given namespace will point to the same instance. The
      file system allows for creating a user-defined directory structure.
      The objects for maps/progs are created/fetched through bpf(2) with
      two new commands (BPF_OBJ_PIN/BPF_OBJ_GET). I.e. a bpf file descriptor
      along with a pathname is being passed to bpf(2) that in turn creates
      (we call it eBPF object pinning) the file system nodes. Only the pathname
      is being passed to bpf(2) for getting a new BPF file descriptor to an
      existing node. The user can use that to access maps and progs later on,
      through bpf(2). Removal of file system nodes is being managed through
      normal VFS functions such as unlink(2), etc. The file system code is
      kept to a very minimum and can be further extended later on.

      The next step I'm working on is to add dump eBPF map/prog commands
      to bpf(2), so that a specification from a given file descriptor can
      be retrieved. This can be used by things like CRIU but also applications
      can inspect the meta data after calling BPF_OBJ_GET.

      Big thanks also to Alexei and Hannes who significantly contributed
      in the design discussion that eventually let us end up with this
      architecture here.

      Reference: https://lkml.org/lkml/2015/10/15/925
      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e9d8afa90b789b07d414637ab557d169d6b2b84e
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Thu Oct 29 14:58:08 2015 +0100

      bpf: consolidate bpf_prog_put{, _rcu} dismantle paths

      We currently have duplicated cleanup code in bpf_prog_put() and
      bpf_prog_put_rcu() cleanup paths. Back then we decided that it was
      not worth it to make it a common helper called by both, but with
      the recent addition of resource charging, we could have avoided
      the fix in commit ac00737f4e81 ("bpf: Need to call 
bpf_prog_uncharge_memlock
      from bpf_prog_put") if we would have had only a single, common path.
      We can simplify it further by assigning aux->prog only once during
      allocation time.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c210129760a010b555372ef74f4e1a46d4eb8a22
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Thu Oct 29 14:58:07 2015 +0100

      bpf: align and clean bpf_{map,prog}_get helpers

      Add a bpf_map_get() function that we're going to use later on and
      align/clean the remaining helpers a bit so that we have them a bit
      more consistent:

        - __bpf_map_get() and __bpf_prog_get() that both work on the fd
          struct, check whether the descriptor is eBPF and return the
          pointer to the map/prog stored in the private data.

          Also, we can return f.file->private_data directly, the function
          signature is enough of a documentation already.

        - bpf_map_get() and bpf_prog_get() that both work on u32 user fd,
          call their respective __bpf_map_get()/__bpf_prog_get() variants,
          and take a reference.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit aa79781b65b9cf79807ade78f2703f5e9402c336
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Thu Oct 29 14:58:06 2015 +0100

      bpf: abstract anon_inode_getfd invocations

      Since we're going to use anon_inode_getfd() invocations in more than just
      the current places, make a helper function for both, so that we only need
      to pass a map/prog pointer to the helper itself in order to get a fd. The
      new helpers are called bpf_map_new_fd() and bpf_prog_new_fd().

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1d6119baf0610f813eb9d9580eb4fd16de5b4ceb
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Mon Nov 2 09:03:11 2015 -0800

      net: fix percpu memory leaks

      This patch fixes following problems :

      1) percpu_counter_init() can return an error, therefore
        init_frag_mem_limit() must propagate this error so that
        inet_frags_init_net() can do the same up to its callers.

      2) If ip[46]_frags_ns_ctl_register() fail, we must unwind
         properly and free the percpu_counter.

      Without this fix, we leave freed object in percpu_counters
      global list (if CONFIG_HOTPLUG_CPU) leading to crashes.

      This bug was detected by KASAN and syzkaller tool
      (http://github.com/google/syzkaller)

      Fixes: 6d7b857d541e ("net: use lib/percpu_counter API for fragmentation 
mem accounting")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Cc: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
      Acked-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8fa677d2706d325d71dab91bf6e6512c05214e37
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Mon Nov 2 07:50:07 2015 -0800

      net: avoid NULL deref in inet_ctl_sock_destroy()

      Under low memory conditions, tcp_sk_init() and icmp_sk_init()
      can both iterate on all possible cpus and call inet_ctl_sock_destroy(),
      with eventual NULL pointer.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5062ecdb662bf3aed6dc975019c53ffcd3b01d1c
  Merge: e86328c d4a1a31
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 2 16:16:24 2015 -0800

      Merge tag 'regmap-v4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap

      Pull regmap updates from Mark Brown:
       "Quite a few new features for regmap this time, mostly expanding things
        around the edges of the existing functionality to cover more devices
        rather than thinsg with wide applicability:

         - Support for offload of the update_bits() operation to hardware
           where devices implement bit level access.
         - Support for a few extra operations that need scratch buffers on
           fast_io devices where we can't sleep.
         - Expanded the feature set of regmap_irq to cope with some extra
           register layouts.
         - Cleanups to the debugfs code"

      * tag 'regmap-v4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap:
        regmap: Allow installing custom reg_update_bits function
        regmap: debugfs: simplify regmap_reg_ranges_read_file() slightly
        regmap: debugfs: use memcpy instead of snprintf
        regmap: debugfs: use snprintf return value in 
regmap_reg_ranges_read_file()
        regmap: Add generic macro to define regmap_irq
        regmap: debugfs: Remove scratch buffer for register length calculation
        regmap: irq: add ack_invert flag for chips using cleared bits as ack
        regmap: irq: add support for chips who have separate unmask registers
        regmap: Allocate buffers with GFP_ATOMIC when fast_io == true

  commit c451113291c193d3bfbd0682011d2979d649010c
  Author: Simon Horman <horms+renesas@xxxxxxxxxxxx>
  Date:   Mon Nov 2 10:40:17 2015 +0900

      ravb: use pdev rather than ndev for error messages

      This corrects what appear to be typos, making the code consistent with
      itself, and allowing meaningful prefixes to be displayed with the errors 
in
      question.

      Before:
       (null): failed to initialize MDIO
       (null): Cannot allocate desc base address table (size 176 bytes)

      After:
      ravb e6800000.ethernet: failed to initialize MDIO
      ravb e6800000.ethernet: Cannot allocate desc base address table (size 176 
bytes)

      Signed-off-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ec13ad1d705c9990d55ed8ab21946cef323d30c7
  Author: Matthias Schiffer <mschiffer@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 2 01:24:38 2015 +0100

      ipv6: fix crash on ICMPv6 redirects with prohibited/blackholed source

      There are other error values besides ip6_null_entry that can be returned 
by
      ip6_route_redirect(): fib6_rule_action() can also result in
      ip6_blk_hole_entry and ip6_prohibit_entry if such ip rules are installed.

      Only checking for ip6_null_entry in rt6_do_redirect() causes ip6_ins_rt()
      to be called with rt->rt6i_table == NULL in these cases, making the kernel
      crash.

      Signed-off-by: Matthias Schiffer <mschiffer@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9e17f8a475fca81950fdddc08df428ed66cf441f
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sun Nov 1 15:36:55 2015 -0800

      net: make skb_set_owner_w() more robust

      skb_set_owner_w() is called from various places that assume
      skb->sk always point to a full blown socket (as it changes
      sk->sk_wmem_alloc)

      We'd like to attach skb to request sockets, and in the future
      to timewait sockets as well. For these kind of pseudo sockets,
      we need to take a traditional refcount and use sock_edemux()
      as the destructor.

      It is now time to un-inline skb_set_owner_w(), being too big.

      Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets 
instead of listener")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Bisected-by: Haiyang Zhang <haiyangz@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit eca1e006cf6f6f66a1a90c055a8a6d393475c3f9
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Sun Nov 1 18:31:45 2015 +0200

      bridge: vlan: Use rcu_dereference instead of rtnl_dereference

      br_should_learn() is protected by RCU and not by RTNL, so use correct
      flavor of nbp_vlan_group().

      Fixes: 907b1e6e83ed ("bridge: vlan: use proper rcu for the vlgrp
      member")
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Acked-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4ab42d78e37a294ac7bc56901d563c642e03c4ae
  Author: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 16:22:53 2015 +0000

      ppp, slip: Validate VJ compression slot parameters completely

      Currently slhc_init() treats out-of-range values of rslots and tslots
      as equivalent to 0, except that if tslots is too large it will
      dereference a null pointer (CVE-2015-7799).

      Add a range-check at the top of the function and make it return an
      ERR_PTR() on error instead of NULL.  Change the callers accordingly.

      Compile-tested only.

      Reported-by: é?­æ°¸å?? <guoyonggang@xxxxxx>
      References: http://article.gmane.org/gmane.comp.security.oss.general/17908
      Signed-off-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0baa57d8dc32db78369d8b5176ef56c5e2e18ab3
  Author: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 16:21:24 2015 +0000

      isdn_ppp: Add checks for allocation failure in isdn_ppp_open()

      Compile-tested only.

      Signed-off-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 70910791731b5956171e1bfcad707766b8e18fee
  Author: Bjørn Mork <bjorn@xxxxxxx>
  Date:   Sun Nov 1 01:34:50 2015 +0100

      qmi_wwan: fix entry for HP lt4112 LTE/HSPA+ Gobi 4G Module

      The lt4112 is a HP branded Huawei me906e modem. Like other Huawei
      modems, it does not have a fixed interface to function mapping.
      Instead it uses a Huawei specific scheme: functions are mapped by
      subclass and protocol.

      However, the HP vendor ID is used for modems from many different
      manufacturers using different schemes, so we cannot apply a generic
      vendor rule like we do for the Huawei vendor ID.

      Replace the previous lt4112 entry pointing to an arbitrary interface
      number with a device specific subclass + protocol match.

      Reported-and-tested-by: Muri Nicanor <muri+libqmi@xxxxxxxxxx>
      Tested-by: Martin Hauke <mardnh@xxxxxx>
      Fixes: bb2bdeb83fb1 ("qmi_wwan: Add support for HP lt4112 LTE/HSPA+ Gobi 
4G Modem")
      Signed-off-by: Bjørn Mork <bjorn@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e86328c489d7ecdca99410a06a3f448caf7857bf
  Merge: bc9d8c2 0963670
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 2 12:59:12 2015 -0800

      Merge tag 'gpio-v4.4-1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-gpio

      Pull GPIO updates from Linus Walleij:
       "Here is the bulk of GPIO changes for the v4.4 development cycle.

        The only changes hitting outside drivers/gpio are in the pin control
        subsystem and these seem to have settled nicely in linux-next.

        Development mistakes and catfights are nicely documented in the
        reverts as you can see.  The outcome of the ABI fight is that we're
        working on a chardev ABI for GPIO now, where hope to show results for
        the v4.5 kernel.

        Summary of changes:

        GPIO core:
         - Define and handle flags for open drain/open collector and open
           source/open emitter, also know as "single-ended" configurations.
         - Generic request/free operations that handle calling out to the
           (optional) pin control backend.
         - Some refactoring related to an ABI change that did not happen, yet
           provide useful.
         - Added a real-time compliance checklist.  Many GPIO chips have
           irqchips, and need to think this over with the RT patches going
           upstream.
         - Restructure, fix and clean up Kconfig menus a bit.

        New drivers:
         - New driver for AMD Promony.
         - New driver for ACCES 104-IDIO-16, a port-mapped I/O card,
           ISA-style.  Very retro.

        Subdriver changes:
         - OMAP changes to handle real time requirements.
         - Handle trigger types for edge and level IRQs on PL061 properly.  As
           this hardware is very common it needs to set a proper example for
           others to follow.
         - Some container_of() cleanups.
         - Delete the unused MSM driver in favor of the driver that is
           embedded inside the pin control driver.
         - Cleanup of the ath79 GPIO driver used by many, many OpenWRT router
           targets.
         - A consolidated IT87xx driver replacing the earlier very specific
           IT8761e driver.
         - Handle the TI TCA9539 in the PCA953x driver.  Also handle ACPI
           devices in this subdriver.
         - Drop xilinx arch dependencies as these FPGAs seem to profilate over
           a few different architectures.  MIPS and ARM come to mind"

      * tag 'gpio-v4.4-1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-gpio: (57 commits)
        gpio: fix up SPI submenu
        gpio: drop surplus I2C dependencies
        gpio: drop surplus X86 dependencies
        gpio: dt-bindings: document the official use of "ngpios"
        gpio: MAINTAINERS: Add an entry for the ATH79 GPIO driver
        gpio / ACPI: Allow shared GPIO event to be read via operation region
        gpio: group port-mapped I/O drivers in a menu
        gpio: Add ACCES 104-IDIO-16 driver maintainer entry
        gpio: zynq: Document interrupt-controller DT binding
        gpio: xilinx: Drop architecture dependencies
        gpio: generic: Revert to old error handling in bgpio_map
        gpio: add a real time compliance notes
        Revert "gpio: add a real time compliance checklist"
        gpio: Add GPIO support for the ACCES 104-IDIO-16
        gpio: driver for AMD Promontory
        gpio: xlp: Convert to use gpiolib irqchip helpers
        gpio: add a real time compliance checklist
        gpio/xilinx: enable for MIPS
        gpiolib: Add and use OF_GPIO_SINGLE_ENDED flag
        gpiolib: Split GPIO flags parsing and GPIO configuration
        ...

  commit 44f49dd8b5a606870a1f21101522a0f9c4414784
  Author: Ani Sinha <ani@xxxxxxxxxx>
  Date:   Fri Oct 30 16:54:31 2015 -0700

      ipmr: fix possible race resulting from improper usage of 
IP_INC_STATS_BH() in preemptible context.

      Fixes the following kernel BUG :

      BUG: using __this_cpu_add() in preemptible [00000000] code: bash/2758
      caller is __this_cpu_preempt_check+0x13/0x15
      CPU: 0 PID: 2758 Comm: bash Tainted: P           O   3.18.19 #2
       ffffffff8170eaca ffff880110d1b788 ffffffff81482b2a 0000000000000000
       0000000000000000 ffff880110d1b7b8 ffffffff812010ae ffff880007cab800
       ffff88001a060800 ffff88013a899108 ffff880108b84240 ffff880110d1b7c8
      Call Trace:
      [<ffffffff81482b2a>] dump_stack+0x52/0x80
      [<ffffffff812010ae>] check_preemption_disabled+0xce/0xe1
      [<ffffffff812010d4>] __this_cpu_preempt_check+0x13/0x15
      [<ffffffff81419d60>] ipmr_queue_xmit+0x647/0x70c
      [<ffffffff8141a154>] ip_mr_forward+0x32f/0x34e
      [<ffffffff8141af76>] ip_mroute_setsockopt+0xe03/0x108c
      [<ffffffff810553fc>] ? get_parent_ip+0x11/0x42
      [<ffffffff810e6974>] ? pollwake+0x4d/0x51
      [<ffffffff81058ac0>] ? default_wake_function+0x0/0xf
      [<ffffffff810553fc>] ? get_parent_ip+0x11/0x42
      [<ffffffff810613d9>] ? __wake_up_common+0x45/0x77
      [<ffffffff81486ea9>] ? _raw_spin_unlock_irqrestore+0x1d/0x32
      [<ffffffff810618bc>] ? __wake_up_sync_key+0x4a/0x53
      [<ffffffff8139a519>] ? sock_def_readable+0x71/0x75
      [<ffffffff813dd226>] do_ip_setsockopt+0x9d/0xb55
      [<ffffffff81429818>] ? unix_seqpacket_sendmsg+0x3f/0x41
      [<ffffffff813963fe>] ? sock_sendmsg+0x6d/0x86
      [<ffffffff813959d4>] ? sockfd_lookup_light+0x12/0x5d
      [<ffffffff8139650a>] ? SyS_sendto+0xf3/0x11b
      [<ffffffff810d5738>] ? new_sync_read+0x82/0xaa
      [<ffffffff813ddd19>] compat_ip_setsockopt+0x3b/0x99
      [<ffffffff813fb24a>] compat_raw_setsockopt+0x11/0x32
      [<ffffffff81399052>] compat_sock_common_setsockopt+0x18/0x1f
      [<ffffffff813c4d05>] compat_SyS_setsockopt+0x1a9/0x1cf
      [<ffffffff813c4149>] compat_SyS_socketcall+0x180/0x1e3
      [<ffffffff81488ea1>] cstar_dispatch+0x7/0x1e

      Signed-off-by: Ani Sinha <ani@xxxxxxxxxx>
      Acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d3e8b858f375595421817a5475611a3e63bb4a43
  Merge: 615a100 b61ed8f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Nov 2 15:56:12 2015 -0500

      Merge branch 'sh_eth-fixes'

      Sergei Shtylyov says:

      ====================
      sh_eth: fix bugs in sh_eth_ring_init()

         Here's a set of 2 patches against DaveM's 'net.git' repo which fix 
couple of
      bugs in the sh_eth_ring_init() function.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b61ed8fdd845340ee31e8a97403b6101ccf4e4a2
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 02:06:29 2015 +0300

      sh_eth: fix WARNING in dma_common_free_remap()

      Iff the first dma_alloc_coherent()  call fails in sh_eth_ring_init(), the
      following  is printed to the kernel console:

      WARNING: CPU: 0 PID: 1 at drivers/base/dma-mapping.c:334 
dma_common_free_remap+0x48/0x6c()
      trying to free invalid coherent area:   (null)
      Modules linked in:
      CPU: 0 PID: 1 Comm: swapper/0 Not tainted 4.3.0-rc7-dirty #969
      Hardware name: Generic R8A7791 (Flattened Device Tree)
      Backtrace:
      [<c0013820>] (dump_backtrace) from [<c00139bc>] (show_stack+0x18/0x1c)
       r6:c0662856 r5:00000009 r4:00000000 r3:00204140
      [<c00139a4>] (show_stack) from [<c0227510>] (dump_stack+0x74/0x90)
      [<c022749c>] (dump_stack) from [<c0026ef4>] 
(warn_slowpath_common+0x8c/0xb8)
       r4:ee84dce0 r3:c0712774
      [<c0026e68>] (warn_slowpath_common) from [<c0026fc4>] 
(warn_slowpath_fmt+0x38/0x40)
       r8:ee7f8000 r7:c0734520 r6:00001000 r5:20000008 r4:00000000
      [<c0026f90>] (warn_slowpath_fmt) from [<c02df404>] 
(dma_common_free_remap+0x48/0x6c)
       r3:00000000 r2:c0662871
      [<c02df3bc>] (dma_common_free_remap) from [<c001b9fc>] 
(__arm_dma_free+0xb8/0xd4)
      r6:00000001 r5:00000000 r4:00001000 r3:ee8c5584
      [<c001b944>] (__arm_dma_free) from [<c001ba68>] (arm_dma_free+0x24/0x2c)
       r10:0000016b r8:00000000 r7:ee9bc830 r6:00000000 r5:00000400 r4:ee9bc800
      [<c001ba44>] (arm_dma_free) from [<c032ebf0>] 
(sh_eth_ring_init+0x110/0x138)
      [<c032eae0>] (sh_eth_ring_init) from [<c033179c>] (sh_eth_open+0x94/0x1f4)
       r6:00000000 r5:ee9bcd18 r4:ee9bc800
      [<c0331708>] (sh_eth_open) from [<c041bf7c>] (__dev_open+0x84/0x104)
       r6:c0565c50 r5:00000000 r4:ee9bc800
      [<c041bef8>] (__dev_open) from [<c041c208>] 
(__dev_change_flags+0x94/0x13c)
       r7:00001002 r6:00000001 r5:00001003 r4:ee9bc800
      [<c041c174>] (__dev_change_flags) from [<c041c2e8>] 
(dev_change_flags+0x20/0x50)
       r7:c072c8a0 r6:00000138 r5:00001002 r4:ee9bc800
      [<c041c2c8>] (dev_change_flags) from [<c06e8d4c>] 
(ip_auto_config+0x174/0xf7c)
       r8:00001002 r7:c072c8a0 r6:c0700040 r5:00000001 r4:ee9bc800 r3:00000101
      [<c06e8bd8>] (ip_auto_config) from [<c000a810>] 
(do_one_initcall+0x100/0x1c8)
       r10:c06f883c r9:00000000 r8:c06e8bd8 r7:c0734000 r6:c070e918 r5:c070e918
       r4:ee083640
      [<c000a710>] (do_one_initcall) from [<c06c9ddc>] 
(kernel_init_freeable+0x11c/0x1ec)
       r10:c06f883c r9:00000000 r8:00000099 r7:c0734000 r6:c070372c r5:c06f8834
       r4:00000007
      [<c06c9cc0>] (kernel_init_freeable) from [<c0514d78>] 
(kernel_init+0x14/0xec)
       r10:00000000 r8:00000000 r7:00000000 r6:00000000 r5:c0514d64 r4:c0734000
      [<c0514d64>] (kernel_init) from [<c0010458>] (ret_from_fork+0x14/0x3c)
       r4:00000000 r3:ee84c000

      This is because the code jumps to a wrong label and so tries to free yet
      unallocated coherent memory.  Fix the *goto* in question.

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2c94e8567d7c7c9d619584da857e9f5b28f283ea
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 02:05:56 2015 +0300

      sh_eth: fix uninitialized arrays in sh_eth_ring_init()

      sh_eth_ring_free()  called in the sh_eth_ring_init()'s error path expects
      the arrays pointed  to  by 'sh_eth_private::[rt]x_skbuff' to be 
initialized
      with NULLs but they are allocated with just kmalloc_array() and so are 
left
      filled with random data. Use kcalloc() instead.

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b9b377136eb83cace5667cb6e8d53da771df6faa
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 19:39:48 2015 -0400

      net: dsa: mv88e6xxx: lookup switch name

      All the mv88e6xxx drivers use the exact same code in their probe
      function to lookup the switch name given its ID. Thus introduce a
      mv88e6xxx_switch_id structure and a mv88e6xxx_lookup_name function in
      the common mv88e6xxx code.

      In the meantime make __mv88e6xxx_reg_{read,write} static since we do not
      need to expose these low-level r/w routines anymore.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Acked-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3996a4ffb01f57f82abe6c7e60ac9048dd0c31df
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 18:56:45 2015 -0400

      net: dsa: mv88e6xxx: assert SMI lock

      It's easy to forget to lock the smi_mutex before calling the low-level
      _mv88e6xxx_reg_{read,write}, so add a assert_smi_lock function in them.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Acked-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ac00881f922106b45e934dc6988fa9c1ec542d71
  Author: Yang Shi <yang.shi@xxxxxxxxxx>
  Date:   Fri Oct 30 15:16:26 2015 -0700

      bpf: convert hashtab lock to raw lock

      When running bpf samples on rt kernel, it reports the below warning:

      BUG: sleeping function called from invalid context at 
kernel/locking/rtmutex.c:917
      in_atomic(): 1, irqs_disabled(): 128, pid: 477, name: ping
      Preemption disabled at:[<ffff80000017db58>] kprobe_perf_func+0x30/0x228

      CPU: 3 PID: 477 Comm: ping Not tainted 4.1.10-rt8 #4
      Hardware name: Freescale Layerscape 2085a RDB Board (DT)
      Call trace:
      [<ffff80000008a5b0>] dump_backtrace+0x0/0x128
      [<ffff80000008a6f8>] show_stack+0x20/0x30
      [<ffff8000007da90c>] dump_stack+0x7c/0xa0
      [<ffff8000000e4830>] ___might_sleep+0x188/0x1a0
      [<ffff8000007e2200>] rt_spin_lock+0x28/0x40
      [<ffff80000018bf9c>] htab_map_update_elem+0x124/0x320
      [<ffff80000018c718>] bpf_map_update_elem+0x40/0x58
      [<ffff800000187658>] __bpf_prog_run+0xd48/0x1640
      [<ffff80000017ca6c>] trace_call_bpf+0x8c/0x100
      [<ffff80000017db58>] kprobe_perf_func+0x30/0x228
      [<ffff80000017dd84>] kprobe_dispatcher+0x34/0x58
      [<ffff8000007e399c>] kprobe_handler+0x114/0x250
      [<ffff8000007e3bf4>] kprobe_breakpoint_handler+0x1c/0x30
      [<ffff800000085b80>] brk_handler+0x88/0x98
      [<ffff8000000822f0>] do_debug_exception+0x50/0xb8
      Exception stack(0xffff808349687460 to 0xffff808349687580)
      7460: 4ca2b600 ffff8083 4a3a7000 ffff8083 49687620 ffff8083 0069c5f8 
ffff8000
      7480: 00000001 00000000 007e0628 ffff8000 496874b0 ffff8083 007e1de8 
ffff8000
      74a0: 496874d0 ffff8083 0008e04c ffff8000 00000001 00000000 4ca2b600 
ffff8083
      74c0: 00ba2e80 ffff8000 49687528 ffff8083 49687510 ffff8083 000e5c70 
ffff8000
      74e0: 00c22348 ffff8000 00000000 ffff8083 49687510 ffff8083 000e5c74 
ffff8000
      7500: 4ca2b600 ffff8083 49401800 ffff8083 00000001 00000000 00000000 
00000000
      7520: 496874d0 ffff8083 00000000 00000000 00000000 00000000 00000000 
00000000
      7540: 2f2e2d2c 33323130 00000000 00000000 4c944500 ffff8083 00000000 
00000000
      7560: 00000000 00000000 008751e0 ffff8000 00000001 00000000 124e2d1d 
00107b77

      Convert hashtab lock to raw lock to avoid such warning.

      Signed-off-by: Yang Shi <yang.shi@xxxxxxxxxx>
      Acked-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 21086b990ba51d12670eba342eec76d4bba55d33
  Merge: ce10500 ddd611d
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Nov 2 15:40:11 2015 -0500

      Merge branch 'bridge_vlan_fixes'

      Nikolay Aleksandrov says:

      ====================
      bridge: vlan: failure path and comment fixes

      This is a set from Ido which takes care of one failure path error in
      nbp_vlan_init (patch 1) and a few comment errors (patch 2).
      I must admit I didn't expect the port init continues after a vlan init
      failure but should've checked to make sure. Thanks to Ido for catching
      these!
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ddd611d3fffb90b967e50f5aa6d45d55eb0e1d3f
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Fri Oct 30 17:46:20 2015 +0100

      bridge: vlan: Use correct flag name in comment

      The flag used to indicate if a VLAN should be used for filtering - as
      opposed to context only - on the bridge itself (e.g. br0) is called
      'brentry' and not 'brvlan'.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Acked-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 07bc588fc1087929e8e6dfe95ffcee1cb69a240f
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Fri Oct 30 17:46:19 2015 +0100

      bridge: vlan: Prevent possible use-after-free

      When adding a port to a bridge we initialize VLAN filtering on it. We do
      not bail out in case an error occurred in nbp_vlan_init, as it can be
      used as a non VLAN filtering bridge.

      However, if VLAN filtering is required and an error occurred in
      nbp_vlan_init, we should set vlgrp to NULL, so that VLAN filtering
      functions (e.g. br_vlan_find, br_get_pvid) will know the struct is
      invalid and will not try to access it.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ce1050089c969b96c797118f9cb0cf5a421ddc69
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 30 09:46:12 2015 -0700

      tcp/dccp: fix ireq->pktopts race

      IPv6 request sockets store a pointer to skb containing the SYN packet
      to be able to transfer it to full blown socket when 3WHS is done
      (ireq->pktopts -> np->pktoptions)

      As explained in commit 5e0724d027f0 ("tcp/dccp: fix hashdance race for
      passive sessions"), we must transfer the skb only if we won the
      hashdance race, if multiple cpus receive the 'ack' packet completing
      3WHS at the same time.

      Fixes: e994b2f0fb92 ("tcp: do not lock listener to process SYN packets")
      Fixes: 079096f103fa ("tcp/dccp: install syn_recv requests into ehash 
table")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7b5654349e4728021b9301e42ae16fa11f6832c8
  Author: santosh.shilimkar@xxxxxxxxxx <santosh.shilimkar@xxxxxxxxxx>
  Date:   Fri Oct 30 08:49:10 2015 -0700

      RDS: convert bind hash table to re-sizable hashtable

      To further improve the RDS connection scalabilty on massive systems
      where number of sockets grows into tens of thousands  of sockets, there
      is a need of larger bind hashtable. Pre-allocated 8K or 16K table is
      not very flexible in terms of memory utilisation. The rhashtable
      infrastructure gives us the flexibility to grow the hashtbable based
      on use and also comes up with inbuilt efficient bucket(chain) handling.

      Reviewed-by: David Miller <davem@xxxxxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <ssantosh@xxxxxxxxxx>
      Signed-off-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d3ffaefa1bbcfba1b4ef985fd53406f31b98f277
  Author: Saurabh Sengar <saurabh.truth@xxxxxxxxx>
  Date:   Fri Oct 30 19:46:44 2015 +0530

      net: rds: changing the return type from int to void

      as result of function rds_iw_flush_mr_pool is nowhere checked,
      changing its return type from int to void.
      also removing the unused variable rc as there is nothing to return

      Signed-off-by: Saurabh Sengar <saurabh.truth@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 615a1003c6502f0d1812fd2dbe08e86b1c3f5db9
  Merge: e6dbe1e 562b103
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Nov 2 15:33:38 2015 -0500

      Merge tag 'linux-can-fixes-for-4.3-20151030' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mkl/linux-can

      Marc Kleine-Budde says:

      ====================
      pull-request: can 2015-10-30

      this is a pull request for the upcoming v4.3 release.

      Marek Vasut provides a patch to use the correct attrlen in the nla_put() 
in the
      can_fill_info() function.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bc9d8c20ffb47e64a41a4716a06d37cdf88fcc42
  Merge: 9ff3ca5 d99c805
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 2 12:30:39 2015 -0800

      Merge tag 'pinctrl-v4.4-1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl

      Pull pin control updates from Linus Walleij:
       "This is the big bulk of pin control changes for the v4.4 kernel
        development cycle.  Development pace is high in pin control again this
        merge window.  28 contributors, 83 patches.

        It hits a few sites outside the pin control subsystem:

         - Device tree bindings in Documentation (as usual)
         - MAINTAINERS
         - drivers/base/* for the "init" state handling by Doug Anderson.
           This has been ACKed by Greg.
         - drivers/usb/renesas_usbhs/rcar2.c, for a dependent Renesas change
           in the USB subsystem.  This has been ACKed by both Greg and Felipe.
         - arch/arm/boot/dts/sama5d2.dtsi - this should ideally have gone
           through the ARM SoC tree but ended up here.

        This time I am using Geert Uytterhoeven as submaintainer for SH PFC
        since the are three-four people working in parallel with new Renesas
        ASICs.

        Summary of changes:

        Infrastructure:

         - Doug Anderson wrote a patch adding an "init" state different from
           the "default" state for pin control state handling in the core
           framework.  This is applied before the driver's probe() call if
           defined and takes precedence over "default".  If both are defined,
           "init" will be applied *before* probe() and "default" will be
           applied *after* probe().

        Significant subdriver improvements:

         - SH PFC is switched to getting GPIO ranges from the device tree
           ranges property on DT platforms.
         - Got rid of CONFIG_ARCH_SHMOBILE_LEGACY, we are all modernized.
         - Got rid of SH PFC hardcoded IRQ numbers.
         - Allwinner sunxi external interrupt through the "r" controller.
         - Moved the Cygnus driver to use DT-provided GPIO ranges.

        New drivers:

         - Atmel PIO4 pin controller for the SAMA4D2 family

        New subdrivers:

         - Rockchip RK3036 subdriver
         - Renesas SH PFC R8A7795 subdriver
         - Allwinner sunxi A83T PIO subdriver
         - Freescale i.MX7d iomux lpsr subdriver
         - Marvell Berlin BG4CT subdriver
         - SiRF Atlas 7 step B SoC subdriver
         - Intel Broxton SoC subdriver

        Apart from this, the usual slew if syntactic and semantic fixes"

      * tag 'pinctrl-v4.4-1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-pinctrl: (81 commits)
        pinctrl: pinconf: remove needless loop
        pinctrl: uniphier: guard uniphier directory with CONFIG_PINCTRL_UNIPHIER
        pinctrl: zynq: fix UTF-8 errors
        pinctrl: zynq: Initialize early
        pinctrl: at91: add missing of_node_put
        pinctrl: tegra-xusb: Correct lane mux options
        pinctrl: intel: Add Intel Broxton pin controller support
        pinctrl: intel: Allow requesting pins which are in ACPI mode as GPIOs
        pinctrl: intel: Add support for multiple GPIO chips sharing the 
interrupt
        drivers/pinctrl: Add the concept of an "init" state
        pinctrl: uniphier: set input-enable before pin-muxing
        pinctrl: cygnus: Add new compatible string for gpio controller driver
        pinctrl: cygnus: Remove GPIO to Pinctrl pin mapping from driver
        pinctrl: cygnus: Optional DT property to support pin mappings
        pinctrl: sunxi: Add irq pinmuxing to sun6i "r" pincontroller
        pinctrl: sunxi: Fix irq_of_xlate for the r_pio pinctrl block
        pinctrl: sh-pfc: Remove obsolete r8a7778 platform_device_id entry
        pinctrl: sh-pfc: Remove obsolete r8a7779 platform_device_id entry
        pinctrl: sh-pfc: Stop including <linux/platform_data/gpio-rcar.h>
        usb: renesas_usbhs: Remove unneeded #include 
<linux/platform_data/gpio-rcar.h>
        ...

  commit 64cf370887ac497e74b2e4224b662bfd1d8db41a
  Merge: 322cf7e 07f56c6
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Nov 2 15:28:57 2015 -0500

      Merge branch 'encx24j600-fixes'

      Javier Martinez Canillas says:

      ====================
      net: encx24j600: Fix SPI driver module autoload

      Recently I've been trying to fix module autoloading for all SPI drivers 
and
      found that the encx24j600 driver does not fill module alias information 
due
      missing a MODULE_DEVICE_TABLE() so module autload won't work and the 
driver
      Kconfig symbol is tristate which means the driver can be built as a 
module.

      But also the SPI id table is not correctly defined so this series fixes 
both
      issues.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 07f56c616d06b966c0a63d16172935b257a6a8d4
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 13:49:18 2015 +0100

      net: encx24j600: Export missing SPI module alias information

      The driver Kconfig symbol is tristate which means that it can be built as
      a module but the module alias information is not added to the module info
      so module autoload won't work since user-space won't have the information.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d0cb48cd19ce1e249cd350aa67fbf63560292266
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 13:49:17 2015 +0100

      net: encx24j600: Fix SPI id table definition

      A driver's SPI id table is expected to be an array of struct spi_device_id
      that ends with a zero-initialized sentinel entry. But this driver defines
      the table as a single struct spi_device_id and sets .id_table to a pointer
      to this struct.

      But spi_match_id() has a loop that iterates while the struct spi_device_id
      .name[0] is not NULL, so not having a sentinel can cause a NULL pointer
      deference error.

      This patch defines the SPI id table correctly as all other SPI drivers do.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9ff3ca58b0f99475f269cd6faf4ab1b194243b3f
  Merge: 17a1359 990995b
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 2 12:14:50 2015 -0800

      Merge tag 'edac_for_4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/bp/bp

      Pull EDAC updates from Borislav Petkov:
       "A bunch of fixes all over the place and some hw enablement this time.

         - Convert EDAC to debugfs wrappers and make drivers use those
           (Borislav Petkov)

         - L3 and SoC support for xgene_edac (Loc Ho)

         - AMD F15h, models 0x60-6f support to amd64_edac (Aravind
           Gopalakrishnan)

         - Fixes and cleanups all over the place"

      * tag 'edac_for_4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/bp/bp: (22 commits)
        EDAC: Fix PAGES_TO_MiB macro misuse
        EDAC, altera: SoCFPGA EDAC should not look for ECC_CORR_EN
        EDAC: Use edac_debugfs_remove_recursive()
        EDAC, ppc4xx_edac: Fix module autoload for OF platform driver
        Documentation/EDAC: Add reference documents section for amd64_edac
        EDAC, amd64_edac: Update copyright and remove changelog
        EDAC, amd64_edac: Extend scrub rate support to F15hM60h
        EDAC: Don't allow empty DIMM labels
        EDAC: Fix sysfs dimm_label store operation
        EDAC: Fix sysfs dimm_label show operation
        arm64, EDAC: Add L3/SoC DT subnodes to the APM X-Gene SoC EDAC node
        EDAC, xgene: Add SoC support
        EDAC, xgene: Fix possible sprintf() overflow issue
        EDAC, xgene: Add L3 support
        EDAC, Documentation: Update X-Gene EDAC binding for L3/SoC subnodes
        EDAC, sb_edac: Fix TAD presence check for sbridge_mci_bind_devs()
        EDAC, ghes_edac: Remove redundant memory_type array
        EDAC, xgene: Convert to debugfs wrappers
        EDAC, i5100: Convert to debugfs wrappers
        EDAC, altera: Convert to debugfs wrappers
        ...

  commit 322cf7e3a4e89236ae386cb5668ae0d787d21136
  Author: Govindarajulu Varadarajan <_govind@xxxxxxx>
  Date:   Fri Oct 30 16:52:51 2015 +0530

      enic: assign affinity hint to interrupts

      The affinity hint is used by the user space daemon, irqbalancer, to
      indicate a preferred CPU mask for irqs. This patch sets the irq affinity
      hint to local numa core first, when exausted we try non-local numa cores.

      Also set tx xps cpus mask bassed on affinity hint.

      v2: remove the global affinity policy.

      Signed-off-by: Govindarajulu Varadarajan <_govind@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 17a1359034e1fb5cfe9e5196a8ab5153acfacdc6
  Merge: 66b0199 7cc8d58
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 2 11:40:22 2015 -0800

      Merge tag 'mmc-v4.4' of git://git.linaro.org/people/ulf.hansson/mmc

      Pull MMC updates from Ulf Hansson:
       "MMC core:
         - Add new API to set VCCQ voltage - mmc_regulator_set_vqmmc()
         - Add new ioctl to allow userspace to send multi commands
         - Wait for card busy signalling before starting SDIO requests
         - Remove MMC_CLKGATE
         - Enable tuning for DDR50 mode
         - Some code clean-up/improvements to mmc pwrseq
         - Use highest priority for eMMC restart handler
         - Add DT bindings for eMMC hardware reset support
         - Extend the mmc_send_tuning() API
         - Improve ios show for debugfs
         - A couple of code optimizations

        MMC host:
         - Some generic OF improvements
         - Various code clean-ups
         - sirf: Add support for DDR50
         - sunxi: Add support for card busy detection
         - mediatek: Use MMC_CAP_RUNTIME_RESUME
         - mediatek: Add support for eMMC HW-reset
         - mediatek: Add support for HS400
         - dw_mmc: Convert to use the new mmc_regulator_set_vqmmc() API
         - dw_mmc: Add external DMA interface support
         - dw_mmc: Some various improvements
         - dw_mmc-rockchip: MMC tuning with the clock phase framework
         - sdhci: Properly clear IRQs during resume
         - sdhci: Enable tuning for DDR50 mode
         - sdhci-of-esdhc: Use IRQ mode for card detection
         - sdhci-of-esdhc: Support both BE and LE host controller
         - sdhci-pci: Build o2micro support in the same module
         - sdhci-pci: Support for new Intel host controllers
         - sdhci-acpi: Support for new Intel host controllers"

      * tag 'mmc-v4.4' of git://git.linaro.org/people/ulf.hansson/mmc: (73 
commits)
        mmc: dw_mmc: fix the wrong setting for UHS-DDR50 mode
        mmc: dw_mmc: fix the CardThreshold boundary at CardThrCtl register
        mmc: dw_mmc: NULL dereference in error message
        mmc: pwrseq: Use highest priority for eMMC restart handler
        mmc: mediatek: add HS400 support
        mmc: mmc: extend the mmc_send_tuning()
        mmc: mediatek: add implement of ops->hw_reset()
        mmc: mediatek: fix got GPD checksum error interrupt when data transfer
        mmc: mediatek: change the argument "ddr" to "timing"
        mmc: mediatek: make cmd_ints_mask to const
        mmc: dt-bindings: update Mediatek MMC bindings
        mmc: core: Add DT bindings for eMMC hardware reset support
        mmc: omap_hsmmc: Enable omap_hsmmc for Keystone 2
        mmc: sdhci-acpi: Add more ACPI HIDs for Intel controllers
        mmc: sdhci-pci: Add more PCI IDs for Intel controllers
        arm: lpc18xx_defconfig: remove CONFIG_MMC_DW_IDMAC
        arm: hisi_defconfig: remove CONFIG_MMC_DW_IDMAC
        arm: exynos_defconfig: remove CONFIG_MMC_DW_IDMAC
        arc: axs10x_defconfig: remove CONFIG_MMC_DW_IDMAC
        mips: pistachio_defconfig: remove CONFIG_MMC_DW_IDMAC
        ...

  commit 9920e48b830a0f4ec06bcbf0ec3147c88ae72bac
  Author: Paolo Abeni <pabeni@xxxxxxxxxx>
  Date:   Thu Oct 29 22:20:40 2015 +0100

      ipv4: use l4 hash for locally generated multipath flows

      This patch changes how the multipath hash is computed for locally
      generated flows: now the hash comprises l4 information.

      This allows better utilization of the available paths when the existing
      flows have the same source IP and the same destination IP: with l3 hash,
      even when multiple connections are in place simultaneously, a single path
      will be used, while with l4 hash we can use all the available paths.

      v2 changes:
      - use get_hash_from_flowi4() instead of implementing just another l4 hash
        function

      Signed-off-by: Paolo Abeni <pabeni@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 66b019967845a5af58802fd9af77f2317e5298a1
  Merge: a5ad88c 3b5ea47
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 2 11:32:24 2015 -0800

      Merge tag 'hwmon-for-linus-v4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging

      Pull hwmon updates from Guenter Roeck:
       "New driver for MAX31790, added support for TMP75C, as well as cleanups
        and minor improvements in various drivers"

      * tag 'hwmon-for-linus-v4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging:
        hwmon: (fam15h_power) Add max compute unit accumulated power
        hwmon: (fam15h_power) Enable power1_input on AMD Carrizo
        hwmon: (fam15h_power) Refactor attributes for dynamically added
        hwmon: (ina2xx) remove no longer used variable 'kind'
        hwmon: (nct6775) Introduce separate temperature labels for NCT6792 and 
NCT6793
        hwmon: (nct6775) NCT6791D and NCT6792D have an additional temperature 
source
        hwmon: (ina2xx) give precedence to DT over checking for platform data.
        hwmon: (ina2xx) convert driver to using regmap
        hwmon: (coretemp) Increase limit of maximum core ID from 32 to 128.
        hwmon: (lm75) Add support for TMP75C
        hwmon: (ibmpowernv) Add OF compatibility table entry
        hwmon: (abx500) drop the use of IRQF_NO_SUSPEND
        hwmon: (max31790) Fix dereference of ERR_PTR
        hwmon: Driver for Maxim MAX31790

  commit 4247896f4b8bdbe2c9a03c2f713b636e94eab210
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Sun Oct 25 15:50:59 2015 -0700

      cris: Drop reference to get_cmos_time()

      Function get_cmos_time() was removed with commit 657926a83df9 ("cris:
      time: Cleanup of persistent clock stuff"). The remaining reference to
      it may cause the following build error.

      arch/cris/kernel/built-in.o:(___ksymtab+get_cmos_time+0x0):
        undefined reference to `get_cmos_time'
      Makefile:946: recipe for target 'vmlinux' failed

      Fixes: 657926a83df9 ("cris: time: Cleanup of persistent clock stuff")
      Cc: Xunlei Pang <pang.xunlei@xxxxxxxxxx>
      Cc: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit e301a08be4e4ad349b6195562197950d74c86e8a
  Author: Jesper Nilsson <jespern@xxxxxxxx>
  Date:   Fri Oct 2 11:22:55 2015 +0200

      CRIS: Drop code related to obsolete or unused kconfigs

      Drop all code related to Kconfigs that don't exist.
      Fix one Kconfig where it was actually typo:ed (ETRAX_KGB_PORT2)
      Drop content related to CRIS v32 SoCs from etraxgpio.h headerfile,
      all use of GPIO for both ETRAX FS and ARTPEC-3 should now be through
      standard gpiolib instead.

      Signed-off-by: Jesper Nilsson <jesper.nilsson@xxxxxxxx>

  commit 9f4137fa2cf20bd1ffb1fcb2711c3c347cc86fea
  Author: Xunlei Pang <pang.xunlei@xxxxxxxxxx>
  Date:   Fri Jul 17 17:31:26 2015 +0800

      cris: time: Cleanup of persistent clock stuff

      - Remove update_persistent_clock(), as it does nothing now.
      - Remove read_persistent_clock(), let it fall back to the weak version.

      Cc: Mikael Starvik <starvik@xxxxxxxx>
      Cc: John Stultz <john.stultz@xxxxxxxxxx>
      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Xunlei Pang <pang.xunlei@xxxxxxxxxx>
      Acked-by: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit fad5a06b0cfd9a65c71d09c70520d0cf67e0c577
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 15:17:25 2015 +0300

      cris: re-use helpers to dump data in hex format

      There are native helpers such as print_hex_byte() and %*ph specifier to 
dump
      data in hex format. Re-use them instead of a custom approach.

      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit ab28e96fd1cf1db1579854931890e5613efc5021
  Author: Rabin Vincent <rabin@xxxxxx>
  Date:   Mon Aug 3 20:19:24 2015 +0200

      CRIS v32: remove old GPIO and LEDs code

      Since we now have a gpiolib driver, remove this code:

      The gpio-etraxfs driver (along with things like gpio-keys-polled for
      polling support) replaces the GIO driver implementations in mach-a3 and
      mach-fs.  The various generic external chip drivers replace the "virtual
      gpio" parts.

      The generic gpio-leds driver replaces the LED handling.

      Signed-off-by: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit 79b863c68eba8f7aa5b76c44db3b1df8412c977e
  Author: Rabin Vincent <rabin@xxxxxx>
  Date:   Mon Aug 3 20:19:23 2015 +0200

      CRIS v32: remove I2C bitbanging driver

      Now that we have a gpiolib GPIO driver, the generic i2c-gpio driver
      provides this functionality.

      Signed-off-by: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit 25624b98509f6868829a093392bb6437bcbd7beb
  Author: Rabin Vincent <rabin@xxxxxx>
  Date:   Mon Aug 3 20:19:22 2015 +0200

      CRIS v32: add ARTPEC-3 and P1343 device trees

      Add a device tree for the Axis P1343 with the ARTPEC-3 SoC and on-board
      LEDs and RTC.

      Signed-off-by: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit a95b3ba2c322c3c373d34988d6928311b1b447a1
  Author: Rabin Vincent <rabin@xxxxxx>
  Date:   Mon Aug 3 20:19:21 2015 +0200

      CRIS v32: dev88: add GPIO, LEDs, RTC, temp sensor

      Add the GPIO driver to the device tree and, using it, support for the
      LEDs and the RTC chip (via I2C-GPIO), as well as the temperature sensor
      (via SPI-GPIO).

      Signed-off-by: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit d4dde7d21c4e243744d574ae38e2971be6a7a3a7
  Author: Rabin Vincent <rabin@xxxxxx>
  Date:   Mon Aug 3 20:19:20 2015 +0200

      CRIS: add dt-bindings symlink

      Add a dt-bindings symlink to get DT include files, as on other
      architectures.  See c58299a ("kbuild: create an "include chroot" for DT
      bindings") for the details.

      Signed-off-by: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit df90c338087fdec88727a025a8d6400ecb7fe4bd
  Author: Rabin Vincent <rabin@xxxxxx>
  Date:   Mon Aug 3 20:19:19 2015 +0200

      CRIS v32: increase NR_IRQS

      Increase NR_IQRS so we can fit in GPIO interrupts.

      Signed-off-by: Rabin Vincent <rabin@xxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit c33fe4444395a6972b30cb91676d04af2a3dc1a5
  Author: Chen Gang <xili_gchen_5257@xxxxxxxxxxx>
  Date:   Thu Aug 6 00:34:53 2015 +0200

      cris: arch-v10: kgdb: Add '__used' for static variable is_dyn_brkp

      Within one C file, current gcc can optimize the global static variables
      according to the C code, but it will skip assembly code -- it will pass
      them to gas directly.

      if the static variable is used between C code and assembly code in one C
      file (e.g. is_dyn_brkp in kgdb.c), it needs '__used' to let gcc know it
      should be still used, or gcc may remove it for optimization.

      The related error in this case:

          LD      init/built-in.o
        arch/cris/arch-v10/kernel/built-in.o: In function 
`kgdb_handle_breakpoint':
        (.text+0x2aca): undefined reference to `is_dyn_brkp'
        arch/cris/arch-v10/kernel/built-in.o: In function `is_static':
        kgdb.c:(.text+0x2ada): undefined reference to `is_dyn_brkp'

      Signed-off-by: Chen Gang <gang.chen.5i5j@xxxxxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit 8f40dcebefd4a9e8fa24d2ac5e3fd5e410eea58d
  Author: Chen Gang <xili_gchen_5257@xxxxxxxxxxx>
  Date:   Sat Jul 11 05:47:24 2015 +0800

      cris: arch-v10: kgdb: Use BAR instead of DTP0 for register P12

      For arch-v10, there is no DTP0 register, and at present, assembler know
      BAR, so use BAR instead of DTP0, the related error (with allmodconfig):

          CC      arch/cris/arch-v10/kernel/kgdb.o
        {standard input}: Assembler messages:
        {standard input}:6: Error: Illegal operands
        {standard input}:6: Error: Illegal operands

      Signed-off-by: Chen Gang <gang.chen.5i5j@xxxxxxxxx>
      Acked-by: Hans-Peter Nilsson <hp@xxxxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit 4d0d39758d3e10a31e7f146d56760a92396feb85
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 1 14:42:29 2015 +0300

      cris: kgdb: use native hex2bin

      There are kernel native helpers to convert hex ascii to the binary format:
      hex_to_bin() and hex2bin(). Thus, no need to reimplement them customly.

      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Cc: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Signed-off-by: Jesper Nilsson <jespern@xxxxxxxx>

  commit f8f8bdc48851da979c6e0e4808b6031122e4af47
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Tue Oct 27 11:12:51 2015 +0900

      arm64/efi: fix libstub build under CONFIG_MODVERSIONS

      Now that we strictly forbid absolute relocations in libstub code,
      make sure that we don't emit any when CONFIG_MODVERSIONS is enabled,
      by stripping the kcrctab sections from the object file. This fixes
      a build problem under CONFIG_MODVERSIONS=y.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Reviewed-by: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit a5ad88ce8c7fae7ddc72ee49a11a75aa837788e0
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 17:09:15 2015 -0800

      mm: get rid of 'vmalloc_info' from /proc/meminfo

      It turns out that at least some versions of glibc end up reading
      /proc/meminfo at every single startup, because glibc wants to know the
      amount of memory the machine has.  And while that's arguably insane,
      it's just how things are.

      And it turns out that it's not all that expensive most of the time, but
      the vmalloc information statistics (amount of virtual memory used in the
      vmalloc space, and the biggest remaining chunk) can be rather expensive
      to compute.

      The 'get_vmalloc_info()' function actually showed up on my profiles as
      4% of the CPU usage of "make test" in the git source repository, because
      the git tests are lots of very short-lived shell-scripts etc.

      It turns out that apparently this same silly vmalloc info gathering
      shows up on the facebook servers too, according to Dave Jones.  So it's
      not just "make test" for git.

      We had two patches to just cache the information (one by me, one by
      Ingo) to mitigate this issue, but the whole vmalloc information of of
      rather dubious value to begin with, and people who *actually* want to
      know what the situation is wrt the vmalloc area should just look at the
      much more complete /proc/vmallocinfo instead.

      In fact, according to my testing - and perhaps more importantly,
      according to that big search engine in the sky: Google - there is
      nothing out there that actually cares about those two expensive fields:
      VmallocUsed and VmallocChunk.

      So let's try to just remove them entirely.  Actually, this just removes
      the computation and reports the numbers as zero for now, just to try to
      be minimally intrusive.

      If this breaks anything, we'll obviously have to re-introduce the code
      to compute this all and add the caching patches on top.  But if given
      the option, I'd really prefer to just remove this bad idea entirely
      rather than add even more code to work around our historical mistake
      that likely nobody really cares about.

      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 2e002662973fd8d67d5a760776a5d3ea3d3399a9
  Merge: 6a13feb fc90888
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 16:43:24 2015 -0800

      Merge branch 'fs-file-descriptor-optimization'

      Merge file descriptor allocation speedup.

      Eric Dumazet has a test-case for a fairly common network deamon load
      pattern: openign and closing a lot of sockets that each have very little
      work done on them.  It turns out that in that case, the cost of just
      finding the correct file descriptor number can be a dominating factor.

      We've long had a trivial optimization for allocating file descriptors
      sequentially, but that optimization ends up being not very effective
      when other file descriptors are being closed concurrently, and the fd
      patterns are not some simple FIFO pattern.  In such cases we ended up
      spending a lot of time just scanning the bitmap of open file descriptors
      in order to find the next file descriptor number to open.

      This trivial patch-series mitigates that by simply introducing a
      second-level bitmap of which words in the first bitmap are already fully
      allocated.  That cuts down the cost of scanning by an order of magnitude
      in some pathological (but realistic) cases.

      The second patch is an even more trivial patch to avoid unnecessarily
      dirtying the cacheline for the close-on-exec bit array that normally
      ends up being all empty.

      * fs-file-descriptor-optimization:
        vfs: conditionally clear close-on-exec flag
        vfs: Fix pathological performance case for __alloc_fd()

  commit 6a13feb9c82803e2b815eca72fa7a9f5561d7861
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 16:05:25 2015 -0800

      Linux 4.3

  commit 95fc00a4e15e804356d01c1c53c7da3d99a94f20
  Merge: ca04d39 182475b
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 14:13:54 2015 -0800

      Merge branch 'libnvdimm-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm

      Pull memremap fix from Dan Williams:
       "The new memremap() api introduced in the 4.3 cycle to unify/replace
        ioremap_cache() and ioremap_wt() is mishandling the highmem case.
        This patch has received a build success notification from a
        0day-kbuild-robot run and has received an ack from Ard"

      From the commit message:
       "The impact of this bug is low for now since the pmem driver is the
        only user of memremap(), but this is important to fix before more
        conversions to memremap arrive in 4.4"

      * 'libnvdimm-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm:
        memremap: fix highmem support

  commit e6dbe1eb2db0d7a14991c06278dd3030c45fb825
  Author: Phil Reid <preid@xxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 16:43:55 2015 +0800

      stmmac: Correctly report PTP capabilities.

      priv->hwts_*_en indicate if timestamping is enabled/disabled at run
      time. But  priv->dma_cap.time_stamp  and priv->dma_cap.atime_stamp
      indicates HW is support for PTPv1/PTPv2.

      Signed-off-by: Phil Reid <preid@xxxxxxxxxxxxxxxxx>
      Acked-by: Richard Cochran <richardcochran@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1032a6687168af9509615879d513f77e4049062e
  Author: Tina Ruchandani <ruchandani.tina@xxxxxxxxx>
  Date:   Fri Oct 30 01:24:56 2015 -0700

      Use 64-bit timekeeping

      This patch changes the use of struct timespec in
      dccp_probe to use struct timespec64 instead. timespec uses a 32-bit
      seconds field which will overflow in the year 2038 and beyond. timespec64
      uses a 64-bit seconds field. Note that the correctness of the code isn't
      changed, since the original code only uses the timestamps to compute a
      small elapsed interval. This patch is part of a larger attempt to remove
      instances of 32-bit timekeeping structures (timespec, timeval, time_t)
      from the kernel so it is easier to identify where the real 2038 issues
      are.

      Signed-off-by: Tina Ruchandani <ruchandani.tina@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fc2a263bb0604642703cda6cba5ac1ffb1935440
  Merge: 5dbebbb c9b3292
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Nov 1 16:57:44 2015 -0500

      Merge branch 'ipv4_link_down'

      Julian Anastasov says:

      ====================
      ipv4: fix problems from the RTNH_F_LINKDOWN introduction

      Fix two problems from the change that introduced RTNH_F_LINKDOWN
      flag. The first patch deals with the removal of local route on
      DOWN event. The second patch makes sure the RTNH_F_LINKDOWN
      flag is properly updated on UP event because the DOWN event
      sets it in all cases.

      v2->v3:
      - use bool for force var

      v1->v2:
      - forgot to add ifconfig dummy0 down in the test case
      - split to 2 patches
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c9b3292eeb52c6834e972eb5b8fe38914771ed12
  Author: Julian Anastasov <ja@xxxxxx>
  Date:   Fri Oct 30 10:23:34 2015 +0200

      ipv4: update RTNH_F_LINKDOWN flag on UP event

      When nexthop is part of multipath route we should clear the
      LINKDOWN flag when link goes UP or when first address is added.
      This is needed because we always set LINKDOWN flag when DEAD flag
      was set but now on UP the nexthop is not dead anymore. Examples when
      LINKDOWN bit can be forgotten when no NETDEV_CHANGE is delivered:

      - link goes down (LINKDOWN is set), then link goes UP and device
      shows carrier OK but LINKDOWN remains set

      - last address is deleted (LINKDOWN is set), then address is
      added and device shows carrier OK but LINKDOWN remains set

      Steps to reproduce:
      modprobe dummy
      ifconfig dummy0 192.168.168.1 up

      here add a multipath route where one nexthop is for dummy0:

      ip route add 1.2.3.4 nexthop dummy0 nexthop SOME_OTHER_DEVICE
      ifconfig dummy0 down
      ifconfig dummy0 up

      now ip route shows nexthop that is not dead. Now set the sysctl var:

      echo 1 > /proc/sys/net/ipv4/conf/dummy0/ignore_routes_with_linkdown

      now ip route will show a dead nexthop because the forgotten
      RTNH_F_LINKDOWN is propagated as RTNH_F_DEAD.

      Fixes: 8a3d03166f19 ("net: track link-status of ipv4 nexthops")
      Signed-off-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4f823defdd5b106a5e89745ee8b163c71855de1e
  Author: Julian Anastasov <ja@xxxxxx>
  Date:   Fri Oct 30 10:23:33 2015 +0200

      ipv4: fix to not remove local route on link down

      When fib_netdev_event calls fib_disable_ip on NETDEV_DOWN event
      we should not delete the local routes if the local address
      is still present. The confusion comes from the fact that both
      fib_netdev_event and fib_inetaddr_event use the NETDEV_DOWN
      constant. Fix it by returning back the variable 'force'.

      Steps to reproduce:
      modprobe dummy
      ifconfig dummy0 192.168.168.1 up
      ifconfig dummy0 down
      ip route list table local | grep dummy | grep host
      local 192.168.168.1 dev dummy0  proto kernel  scope host  src 
192.168.168.1

      Fixes: 8a3d03166f19 ("net: track link-status of ipv4 nexthops")
      Signed-off-by: Julian Anastasov <ja@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1cf7d8dda2bd1704ca8552c93d5475af444a986b
  Author: huangdaode <huangdaode@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 10:50:54 2015 +0800

      net: hisilicon: Remove .owner assignment from platform_driver

      platform_driver doesn't need to set .owner, because
      platform_driver_register() will set it.

      Signed-off-by: huangdaode <huangdaode@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 76e398a6271285c1f361d66445a55cdcee5c1b4b
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 12:33:55 2015 -0500

      net: dsa: use switchdev obj for VLAN add/del ops

      Simplify DSA by pushing the switchdev objects for VLAN add and delete
      operations down to its drivers. Currently only mv88e6xxx is affected.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5dbebbb44a6ad94aab2cd1a46f7676f255403f64
  Author: Florian Fainelli <f.fainelli@xxxxxxxxx>
  Date:   Thu Oct 29 18:11:35 2015 -0700

      net: bcmgenet: Software reset EPHY after power on

      The EPHY on GENET v1->v3 is extremely finicky, and will show occasional
      failures based on the timing and reset sequence, ranging from duplicate
      packets, to extremely high latencies.

      Perform an additional software reset, and re-configuration to make sure 
it is
      in a consistent and working state.

      Fixes: 6ac3ce8295e6 ("net: bcmgenet: Remove excessive PHY reset")
      Signed-off-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ca04d396a3229d37d8151311ad70d1255a5807bd
  Merge: f5eab26 2459ee8
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 11:45:26 2015 -0800

      Merge branch 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 fixes from Thomas Gleixner:
       "This set of updates contains:

         - Another bugfix for the pathologic vm86 machinery.  Clear
           thread.vm86 on fork to prevent corrupting the parent state.  This
           comes along with an update to the vm86 selftest case

         - Fix another corner case in the ioapic setup code which causes a
           boot crash on some oddball systems

         - Fix the fallout from the dma allocation consolidation work, which
           leads to a NULL pointer dereference when the allocation code is
           called with a NULL device"

      * 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/vm86: Set thread.vm86 to NULL on fork/clone
        selftests/x86: Add a fork() to entry_from_vm86 to catch fork bugs
        x86/ioapic: Prevent NULL pointer dereference in setup_ioapic_dest()
        x86/dma-mapping: Fix arch_dma_alloc_attrs() oops with NULL dev

  commit f5eab26701999b1aa26d06772e013b11c4a16f6a
  Merge: 4bf690d fe326c5
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 11:39:03 2015 -0800

      Merge branch 'timers-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull timer fixes from Thomas Gleixner:
       "The last round of minimalistic fixes for clocksource drivers:

         - Prevent multiple shutdown of the sh_mtu2 clocksource

         - Annotate a bunch of clocksource/schedclock functions with notrace
           to prevent an annoying ftrace recursion issue"

      * 'timers-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        clocksource/drivers/sh_mtu2: Fix multiple shutdown call issue
        clocksource/drivers/digicolor: Prevent ftrace recursion
        clocksource/drivers/fsl_ftm_timer: Prevent ftrace recursion
        clocksource/drivers/vf_pit_timer: Prevent ftrace recursion
        clocksource/drivers/prima2: Prevent ftrace recursion
        clocksource/drivers/samsung_pwm_timer: Prevent ftrace recursion
        clocksource/drivers/pistachio: Prevent ftrace recursion
        clocksource/drivers/arm_global_timer: Prevent ftrace recursion

  commit 4bf690d7e09bbac43dfac9af01ba263e08f37e3e
  Merge: 56ef9db 209da39
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 1 11:33:04 2015 -0800

      Merge branch 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull irq fixes from Thomas Gleixner:
       "The last two one-liners for 4.3 from the irqchip space:

         - Regression fix for armada SoC which addresses the fallout from the
           set_irq_flags() cleanup

         - Add the missing propagation of the irq_set_type() callback to the
           parent interrupt controller of the tegra interrupt chip"

      * 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        irqchip/tegra: Propagate IRQ type setting to parent
        irqchip/armada-370-xp: Fix regression by clearing IRQ_NOAUTOEN

  commit ea3803c193df18d8353d6c8d77034066a08c19f5
  Author: Stefan Hajnoczi <stefanha@xxxxxxxxxx>
  Date:   Thu Oct 29 11:57:42 2015 +0000

      VSOCK: define VSOCK_SS_LISTEN once only

      The SS_LISTEN socket state is defined by both af_vsock.c and
      vmci_transport.c.  This is risky since the value could be changed in one
      file and the other would be out of sync.

      Rename from SS_LISTEN to VSOCK_SS_LISTEN since the constant is not part
      of enum socket_state (SS_CONNECTED, ...).  This way it is clear that the
      constant is vsock-specific.

      The big text reflow in af_vsock.c was necessary to keep to the maximum
      line length.  Text is unchanged except for s/SS_LISTEN/VSOCK_SS_LISTEN/.

      Signed-off-by: Stefan Hajnoczi <stefanha@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b43c142f22236b37aa68faf23ac1bbd75f94c5b5
  Author: Pavel Fedin <p.fedin@xxxxxxxxxxx>
  Date:   Thu Oct 29 09:45:22 2015 +0300

      net: smsc911x: Fix crash if loopback test fails

      On certain hardware in certain situations loopback test fails and the
      driver gets removed. During mdiobus_unregister() instance of PHY driver
      gets disposed. But by this time it has already been started using
      phy_connect_direct().

      PHY driver uses DELAYED_WORK in order to maintain its state. Attempting
      to dispose the driver without calling phy_disconnect() causes deallocation
      of DELAYED_WORK being active. This shortly causes a bad crash in timer
      code.

      The problem can be discovered by enabling CONFIG_DEBUG_OBJECTS_TIMERS and
      CONFIG_DEBUG_OBJECTS_FREE

      Signed-off-by: Pavel Fedin <p.fedin@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5cbb28a4bf65c7e4daa6c25b651fed8eb888c620
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Wed Oct 28 13:09:53 2015 -0400

      tipc: linearize arriving NAME_DISTR and LINK_PROTO buffers

      Testing of the new UDP bearer has revealed that reception of
      NAME_DISTRIBUTOR, LINK_PROTOCOL/RESET and LINK_PROTOCOL/ACTIVATE
      message buffers is not prepared for the case that those may be
      non-linear.

      We now linearize all such buffers before they are delivered up to the
      generic reception layer.

      In order for the commit to apply cleanly to 'net' and 'stable', we do
      the change in the function tipc_udp_recv() for now. Later, we will post
      a commit to 'net-next' moving the linearization to generic code, in
      tipc_named_rcv() and tipc_link_proto_rcv().

      Fixes: commit d0f91938bede ("tipc: add ip/udp media type")
      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f4444574a41430315a9c3eeb9e37cb0a36444a35
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Wed Oct 28 10:20:30 2015 -0200

      fec: Use gpio_set_value_cansleep()

      We are in a context where we can sleep, and the FEC PHY reset gpio
      may be on an I2C expander. Use the cansleep() variant when
      setting the GPIO value.

      Based on a patch from Russell King for pci-mvebu.c.

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 24c39de0091197f4c1f1a18a7c31e540000dc3b8
  Merge: b75ec3a 405c92f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Nov 1 12:01:37 2015 -0500

      Merge branch 'csum_partial_frags'

      Hannes Frederic Sowa says:

      ====================
      net: clean up interactions of CHECKSUM_PARTIAL and fragmentation

      This series fixes wrong checksums on the wire for IPv4 and IPv6. Large
      send buffers and especially NFS lead to wrong checksums in both IPv4
      and IPv6.

      CHECKSUM_PARTIAL skbs should not receive the respective fragmentations
      functions, so we add WARN_ON_ONCE to those functions to fix up those as
      soon as they get reported.

      Changelog:
      v2: added v4 checks
      v3: removed WARN_ON_ONCES (advice by Tom Herbert)
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 405c92f7a5417274419192ad134d6dc71aedaaa4
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 22:40:42 2015 +0100

      ipv6: add defensive check for CHECKSUM_PARTIAL skbs in ip_fragment

      CHECKSUM_PARTIAL skbs should never arrive in ip_fragment. If we get one
      of those warn about them once and handle them gracefully by recalculating
      the checksum.

      Fixes: commit 32dce968dd987 ("ipv6: Allow for partial checksums on 
non-ufo packets")
      See-also: commit 72e843bb09d45 ("ipv6: ip6_fragment() should check 
CHECKSUM_PARTIAL")
      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Vlad Yasevich <vyasevich@xxxxxxxxx>
      Cc: Benjamin Coddington <bcodding@xxxxxxxxxx>
      Cc: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 682b1a9d3f9686ee43fd66b48605daff00522157
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 22:40:41 2015 +0100

      ipv6: no CHECKSUM_PARTIAL on MSG_MORE corked sockets

      We cannot reliable calculate packet size on MSG_MORE corked sockets
      and thus cannot decide if they are going to be fragmented later on,
      so better not use CHECKSUM_PARTIAL in the first place.

      The IPv6 code also intended to protect and not use CHECKSUM_PARTIAL in
      the existence of IPv6 extension headers, but the condition was wrong. Fix
      it up, too. Also the condition to check whether the packet fits into
      one fragment was wrong and has been corrected.

      Fixes: commit 32dce968dd987 ("ipv6: Allow for partial checksums on 
non-ufo packets")
      See-also: commit 72e843bb09d45 ("ipv6: ip6_fragment() should check 
CHECKSUM_PARTIAL")
      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Vlad Yasevich <vyasevich@xxxxxxxxx>
      Cc: Benjamin Coddington <bcodding@xxxxxxxxxx>
      Cc: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit dbd3393c56a8794fe596e7dd20d0efa613b9cf61
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 22:40:40 2015 +0100

      ipv4: add defensive check for CHECKSUM_PARTIAL skbs in ip_fragment

      CHECKSUM_PARTIAL skbs should never arrive in ip_fragment. If we get one
      of those warn about them once and handle them gracefully by recalculating
      the checksum.

      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Vlad Yasevich <vyasevich@xxxxxxxxx>
      Cc: Benjamin Coddington <bcodding@xxxxxxxxxx>
      Cc: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d749c9cbffd666956694f307d237e018c464d973
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 22:40:39 2015 +0100

      ipv4: no CHECKSUM_PARTIAL on MSG_MORE corked sockets

      We cannot reliable calculate packet size on MSG_MORE corked sockets
      and thus cannot decide if they are going to be fragmented later on,
      so better not use CHECKSUM_PARTIAL in the first place.

      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Vlad Yasevich <vyasevich@xxxxxxxxx>
      Cc: Benjamin Coddington <bcodding@xxxxxxxxxx>
      Cc: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2167ceabf34163727ca4e283c0f030e3960932e5
  Author: Wan Zongshun <Vincent.Wan@xxxxxxx>
  Date:   Fri Oct 30 13:11:39 2015 +0100

      x86/cpu: Add CLZERO detection

      AMD Fam17h processors introduce support for the CLZERO
      instruction. It zeroes out the 64 byte cache line specified in
      RAX.

      Add the bit here to allow /proc/cpuinfo to list the feature.

      Boris: we're adding this as a separate ->x86_capability leaf
      because CPUID_80000008_EBX is going to contain more feature bits
      and it will fill out with time.

      Signed-off-by: Wan Zongshun <Vincent.Wan@xxxxxxx>
      Signed-off-by: Aravind Gopalakrishnan <aravind.gopalakrishnan@xxxxxxx>
      [ Wrap code in patch form, fix comments. ]
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Huang Rui <ray.huang@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1446207099-24948-4-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit dc34bdd2367fd31744ee3ba1de1b1cc0fa2ce193
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Fri Oct 30 13:11:38 2015 +0100

      x86/mce: Add a default case to the switch in __mcheck_cpu_ancient_init()

      Caught by building with W= which enable -Wswitch-default also.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1446207099-24948-3-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c7f54d21fb02e90042e6233b46716dcb244e70e6
  Author: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
  Date:   Fri Oct 30 13:11:37 2015 +0100

      x86/mce: Add a Scalable MCA vendor flags bit

      Scalable MCA (SMCA) is a new feature in AMD Fam17h processors
      which indicates presence of MCA extensions.

      MCA extensions expands existing register space for the MCE banks
      and also introduces a new MSR range to accommodate new banks.

      Add the detection bit.

      Signed-off-by: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
      [ Reformat mce_vendor_flags definitions and save indentation levels. 
Improve comments. ]
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Ashok Raj <ashok.raj@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1446207099-24948-2-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 0963670aeaec2287aa263daa0d41384d4dcd5292
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Sun Nov 1 10:50:19 2015 +0100

      gpio: fix up SPI submenu

      - Relax dependencies on SPI_MASTER for drivers in the SPI menu
        that already has this dependency.
      - Move out the expander that would be hidden for I2C access if
        SPI_MASTER was not selected. Tentatively create a separate
        menu for this.
      - Move the ZX SoC driver to memory-mapped drivers, this must be
        a mistake and only worked because the system has an SPI master
        enabled at the same time.

      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 269a46f80bd9c77b6f862a92ccb52eb8a68d3997
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Sun Nov 1 10:43:16 2015 +0100

      gpio: drop surplus I2C dependencies

      The I2C expander menu already depends on I2C, drop subdependecies
      on individual drivers. Keep the instances of depends on I2C=y
      though, so these are still restricted to the compiled-in case.

      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 7768feb0f56d4ba6c1ae1395e144e168e41f1900
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Sun Nov 1 10:39:07 2015 +0100

      gpio: drop surplus X86 dependencies

      Port-mapped I/O depends on X86 already, so individual drivers need
      not specify this dependency.

      Suggested-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 56ef9db24633cf6528d2ce736de0985eb125a3c1
  Merge: 060b85b 53dd186
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 21:36:07 2015 -0700

      Merge tag 'armsoc-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

      Pull ARM SoC fixes from Olof Johansson:
       "This should be our final batch of fixes for 4.3:

         - A patch from Sudeep Holla that fixes annotation of wakeup sources
           properly, old unused format seems to have spread through copying.

         - Two patches from Tony for OMAP.  One dealing with MUSB setup
           problems due to runtime PM being enabled too early on the parent
           device.  The other fixes IRQ numbering for OMAP1"

      * tag 'armsoc-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc:
        usb: musb: omap2430: Fix regression caused by driver core change
        ARM: OMAP1: fix incorrect INT_DMA_LCD
        ARM: dts: fix gpio-keys wakeup-source property

  commit 060b85b0d3064032b6810928973f8c7a15ab9c11
  Merge: af7eba0 d6a32b9
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 21:26:04 2015 -0700

      Merge tag 'scsi-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi

      Pull SCSI fixes from James Bottomley:
       "This is three essential bug fixes for various SCSI parts.

        The only affected users are SCSI multi-path via device handler
        (basically all the enterprise) and mvsas users.  The dh bugs are an
        async entanglement in boot resulting in a serious WARN_ON trip and a
        use after free on remove leading to a crash with strict memory
        accounting.  The mvsas bug manifests as a null deref oops but only on
        abort sequences; however, these can commonly occur with SATA attached
        devices, hence the fix"

      * tag 'scsi-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi:
        scsi_dh: don't try to load a device handler during async probing
        scsi_dh: fix use-after-free when removing scsi device
        mvsas: Fix NULL pointer dereference in mvs_slot_task_free

  commit af7eba0158e9b4632dcd94c1cd4100689666e14f
  Merge: d59ebbf d01552a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 21:20:49 2015 -0700

      Merge tag 'md/4.3-rc7-fixes' of git://neil.brown.name/md

      Pull md bug fixes from Neil Brown:
       "Two more bug fixes for md.

        One bugfix for a list corruption in raid5 because of incorrect
        locking.

        Other for possible data corruption when a recovering device is failed,
        removed, and re-added.

        Both tagged for -stable"

      * tag 'md/4.3-rc7-fixes' of git://neil.brown.name/md:
        Revert "md: allow a partially recovered device to be hot-added to an 
array."
        md/raid5: fix locking in handle_stripe_clean_event()

  commit b75ec3af27bf011a760e2f44eb25a99b6fbb0fb3
  Merge: e7b63ff 523e134
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Nov 1 00:15:30 2015 -0400

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

  commit d59ebbf19b29f4964b24f38c3ad876c33cdd7368
  Merge: 523e134 8731b26
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 16:16:51 2015 -0700

      Merge branch 'drm-fixes' of git://people.freedesktop.org/~airlied/linux

      Pull drm fixes from Dave Airlie:
       "Two drm atomic core fixes.

        And two radeon patches needed to fix a backlight regression on some
        older hardware"

      * 'drm-fixes' of git://people.freedesktop.org/~airlied/linux:
        drm: Correct arguments to list_tail_add in create blob ioctl
        drm: crtc: integer overflow in drm_property_create_blob()
        drm/radeon: fix dpms when driver backlight control is disabled
        drm/radeon: move bl encoder assignment into bl init

  commit fc90888d07b8e17eec49c04bdb26344fdea96c3b
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 16:06:40 2015 -0700

      vfs: conditionally clear close-on-exec flag

      We clear the close-on-exec flag when opening and closing files, and the
      bit was almost always already clear before.  Avoid dirtying the
      cacheline if the clearning isn't necessary.  That avoids unnecessary
      cacheline dirtying and bouncing in multi-socket environments.

      Eric Dumazet has a file descriptor benchmark that goes 4% faster from
      this on his two-socket machine.  It's probably partly superlinear
      improvement due to getting slightly less spinlock contention on the
      file_lock spinlock due to less work in the critical section.

      Tested-by: Eric Dumazet <eric.dumazet@xxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit f3f86e33dc3da437fa4f204588ce7c78ea756982
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 16:53:57 2015 -0700

      vfs: Fix pathological performance case for __alloc_fd()

      Al Viro points out that:
      > >     * [Linux-specific aside] our __alloc_fd() can degrade quite badly
      > > with some use patterns.  The cacheline pingpong in the bitmap is 
probably
      > > inevitable, unless we accept considerably heavier memory footprint,
      > > but we also have a case when alloc_fd() takes O(n) and it's _not_ hard
      > > to trigger - close(3);open(...); will have the next open() after that
      > > scanning the entire in-use bitmap.

      And Eric Dumazet has a somewhat realistic multithreaded microbenchmark
      that opens and closes a lot of sockets with minimal work per socket.

      This patch largely fixes it.  We keep a 2nd-level bitmap of the open
      file bitmaps, showing which words are already full.  So then we can
      traverse that second-level bitmap to efficiently skip already allocated
      file descriptors.

      On his benchmark, this improves performance by up to an order of
      magnitude, by avoiding the excessive open file bitmap scanning.

      Tested-and-acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 3b5ea47dbff0c934b7b979bcc772427a2404ed3d
  Author: Huang Rui <ray.huang@xxxxxxx>
  Date:   Fri Oct 30 17:56:57 2015 +0800

      hwmon: (fam15h_power) Add max compute unit accumulated power

      This patch adds a member in fam15h_power_data which specifies the
      maximum accumulated power in a compute unit.

      Signed-off-by: Huang Rui <ray.huang@xxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Guenter Roeck <linux@xxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 46f29c2b494600cd326b84f87f5765e80fffface
  Author: Huang Rui <ray.huang@xxxxxxx>
  Date:   Fri Oct 30 17:56:56 2015 +0800

      hwmon: (fam15h_power) Enable power1_input on AMD Carrizo

      This patch enables power1_input attribute for Carrizo platform.

      Signed-off-by: Huang Rui <ray.huang@xxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Guenter Roeck <linux@xxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 7deb14b1316def5d4c85f99718d9e530d53cef4e
  Author: Huang Rui <ray.huang@xxxxxxx>
  Date:   Fri Oct 30 17:56:55 2015 +0800

      hwmon: (fam15h_power) Refactor attributes for dynamically added

      Attributes depend on the CPU model the driver gets loaded on.
      Therefore, add those attributes dynamically at init time. This is more
      flexible to control the different attributes on different platforms.

      Suggested-by: Borislav Petkov <bp@xxxxxxxxx>
      Signed-off-by: Huang Rui <ray.huang@xxxxxxx>
      Cc: Guenter Roeck <linux@xxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 523e13455ec9ec4457a5a1d24ff7132949742b70
  Merge: 4bb0fb5 bae818e
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 15:19:36 2015 -0700

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client

      Pull Ceph fix from Sage Weil:
       "This sets the stable pages flag on the RBD block device when we have
        CRCs enabled.  (This is necessary since the default assumption for
        block devices changed in 3.9)"

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client:
        rbd: require stable pages if message data CRCs are enabled

  commit 4bb0fb57f3bbe2ed7d4aad75a3c60a051afbd1db
  Merge: c94eee8 5ffdbe8
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 14:49:19 2015 -0700

      Merge branch 'overlayfs-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/vfs

      Pull overlayfs bug fixes from Miklos Szeredi:
       "This contains fixes for bugs that appeared in earlier kernels (all are
        marked for -stable)"

      * 'overlayfs-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mszeredi/vfs:
        ovl: free lower_mnt array in ovl_put_super
        ovl: free stack of paths in ovl_fill_super
        ovl: fix open in stacked overlay
        ovl: fix dentry reference leak
        ovl: use O_LARGEFILE in ovl_copy_up()

  commit d99c8053fc2473115f506782822cb7c33c687513
  Author: Laurent Meunier <laurent.meunier@xxxxxx>
  Date:   Fri Oct 30 15:15:51 2015 +0100

      pinctrl: pinconf: remove needless loop

      This removes a needless loop which was caught in pinconf.c.

      Suggested-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Signed-off-by: Laurent Meunier <laurent.meunier@xxxxxx>
      Reviewed-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 241297c2af8bf0459a590c143a1d15b93779fab1
  Author: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 19:28:15 2015 +0900

      pinctrl: uniphier: guard uniphier directory with CONFIG_PINCTRL_UNIPHIER

      CONFIG_PINCTRL_UNIPHIER is more suitable than CONFIG_ARCH_UNIPHIER
      to guard the drivers/pinctrl/uniphier directory.

      The current CONFIG_PINCTRL_UNIPHIER_CORE is a bit long
      (it would break the indentation in drivers/pinctrl/Makefile),
      so rename it into CONFIG_PINCTRL_UNIPHIER.

      Signed-off-by: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit a7c6f30c02326a5acccc602b0d0f08a9853eec3f
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Fri Oct 30 15:04:37 2015 +0100

      pinctrl: zynq: fix UTF-8 errors

      Fix up Sören's name in the Zynq driver. I caused this. I fix it.

      Acked-by: Sören Brinkmann <soren.brinkmann@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit aacaffd1d9a6f8e2c7369d83c21d41c3b53e2edc
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Fri Oct 30 11:58:28 2015 +0100

      gpio: dt-bindings: document the official use of "ngpios"

      There are a bunch of drivers that utilize the "ngpios" DT property
      without any vendor prefix. Try to start cleaning up the mess by
      defining what we mean by this property.

      Cc: devicetree@xxxxxxxxxxxxxxx
      Cc: Pramod Kumar <pramodku@xxxxxxxxxxxx>
      Cc: Jonas Gorski <jogo@xxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit aad7a2119965a4a504ddf1d8374968135e9a8780
  Author: Alban Bedel <albeu@xxxxxxx>
  Date:   Fri Oct 30 11:36:29 2015 +0100

      gpio: MAINTAINERS: Add an entry for the ATH79 GPIO driver

      Add an entry for the ATH79 GPIO driver with myself as maintainer.

      Signed-off-by: Alban Bedel <albeu@xxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit c103a10f690cc49054c52f493eeeff143d5f59e7
  Author: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 12:02:05 2015 +0200

      gpio / ACPI: Allow shared GPIO event to be read via operation region

      In Microsoft Surface3 the GPIO detecting lid state is shared between GPIO
      event and operation region. Below is simplied version of the DSDT from
      Surface3 including relevant parts:

          Scope (GPO0)
          {
              Name (_AEI, ResourceTemplate ()
              {
                  GpioInt (Edge, ActiveBoth, Shared, PullNone, 0x0000,
                      "\\_SB.GPO0", 0x00, ResourceConsumer, ,
                      )
                      {   // Pin list
                          0x004C
                      }
              })

              OperationRegion (GPOR, GeneralPurposeIo, Zero, One)
              Field (GPOR, ByteAcc, NoLock, Preserve)
              {
                  Connection (
                      GpioIo (Shared, PullNone, 0x0000, 0x0000,
                          IoRestrictionNone, "\\_SB.GPO0", 0x00,
                          ResourceConsumer,,)
                          {   // Pin list
                              0x004C
                          }
                  ),
                  HELD,   1
              }

              Method (_E4C, 0, Serialized)  // _Exx: Edge-Triggered GPE
              {
                  If ((HELD == One))
                  {
                      ^^LID.LIDB = One
                  }
                  Else
                  {
                      ^^LID.LIDB = Zero
                      Notify (LID, 0x80) // Status Change
                  }

                  Notify (^^PCI0.SPI1.NTRG, One) // Device Check
              }
          }

      When GPIO 0x4c changes we call ASL method _E4C which tries to read HELD
      field (the same GPIO). This triggers following error on the console:

          ACPI Error: Method parse/execution failed [\_SB.GPO0._E4C]
              (Node ffff88013f4b4438), AE_ERROR (20150930/psparse-542)

      The error happens because ACPI GPIO operation region handler
      (acpi_gpio_adr_space_handler()) tries to acquire the very same GPIO which
      returns an error (-EBUSY) because the GPIO is already reserved for the 
GPIO
      event.

      Fix this so that we "borrow" the event GPIO if we find the GPIO belongs to
      an event. Allow this only for GPIOs that are read.

      To be able to go through acpi_gpio->events list for operation region 
access
      we need to make sure the list is properly initialized whenever GPIO chip 
is
      registered.

      Link: https://bugzilla.kernel.org/show_bug.cgi?id=106571
      Signed-off-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit bc6a73bbfba5d8325b0e659545ce2f3ad983829b
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Fri Oct 30 10:32:19 2015 +0100

      gpio: group port-mapped I/O drivers in a menu

      Create a Kconfig submenu for drivers using X86 port-mapped I/O
      and depend on X86 for this.

      Suggested-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Cc: William Breathitt Gray <vilhelm.gray@xxxxxxxxx>
      Cc: Andreas Bofjall <andreas@xxxxxxxxxx>
      Cc: Diego Elio Pettenò <flameeyes@xxxxxxxxxxxx>
      Cc: Daniel Krueger <daniel.krueger@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Bruno Randolf <br1@xxxxxxxxxxx>
      Cc: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Acked-by: Simon Guinot <simon.guinot@xxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit c94eee8a3befe480a1193f2633f16988108393bc
  Merge: 38dab9a 89bc784
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 31 11:52:20 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

      Pull networking fixes from David Miller:

       1) Fix two regressions in ipv6 route lookups, particularly wrt output
          interface specifications in the lookup key.  From David Ahern.

       2) Fix checks in ipv6 IPSEC tunnel pre-encap fragmentation, from
          Herbert Xu.

       3) Fix mis-advertisement of 1000BASE-T on bcm63xx_enet, from Simon
          Arlott.

       4) Some smsc phys misbehave with energy detect mode enabled, so add a
          DT property and disable it on such switches.  From Heiko Schocher.

       5) Fix TSO corruption on TX in mv643xx_eth, from Philipp Kirchhofer.

       6) Fix regression added by removal of openvswitch vport stats, from
          James Morse.

       7) Vendor Kconfig options should be bool, not tristate, from Andreas
          Schwab.

       8) Use non-_BH() net stats bump in tcp_xmit_probe_skb(), otherwise we
          barf during TCP REPAIR operations.

       9) Fix various bugs in openvswitch conntrack support, from Joe
          Stringer.

      10) Fix NETLINK_LIST_MEMBERSHIPS locking, from David Herrmann.

      11) Don't have VSOCK do sock_put() in interrupt context, from Jorgen
          Hansen.

      12) Fix skb_realloc_headroom() failures properly in ISDN, from Karsten
          Keil.

      13) Add some device IDs to qmi_wwan, from Bjorn Mork.

      14) Fix ovs egress tunnel information when using lwtunnel devices, from
          Pravin B Shelar.

      15) Add missing NETIF_F_FRAGLIST to macvtab feature list, from Jason
          Wang.

      16) Fix incorrect handling of throw routes when the result of the throw
          cannot find a match, from Xin Long.

      17) Protect ipv6 MTU calculations from wrap-around, from Hannes Frederic
          Sowa.

      18) Fix failed autonegotiation on KSZ9031 micrel PHYs, from Nathan
          Sullivan.

      19) Add missing memory barries in descriptor accesses or xgbe driver,
          from Thomas Lendacky.

      20) Fix release conditon test in pppoe_release(), from Guillaume Nault.

      21) Fix gianfar bugs wrt filter configuration, from Claudiu Manoil.

      22) Fix violations of RX buffer alignment in sh_eth driver, from Sergei
          Shtylyov.

      23) Fixing missing of_node_put() calls in various places around the
          networking, from Julia Lawall.

      24) Fix incorrect leaf now walking in ipv4 routing tree, from Alexander
          Duyck.

      25) RDS doesn't check pskb_pull()/pskb_trim() return values, from
          Sowmini Varadhan.

      26) Fix VLAN configuration in mlx4 driver, from Jack Morgenstein.

      * git://git.kernel.org/pub/scm/linux/kernel/git/davem/net: (79 commits)
        ipv6: protect mtu calculation of wrap-around and infinite loop by 
rounding issues
        Revert "Merge branch 'ipv6-overflow-arith'"
        net/mlx4: Copy/set only sizeof struct mlx4_eqe bytes
        net/mlx4_en: Explicitly set no vlan tags in WQE ctrl segment when no 
vlan is present
        vhost: fix performance on LE hosts
        bpf: sample: define aarch64 specific registers
        amd-xgbe: Fix race between access of desc and desc index
        RDS-TCP: Recover correctly from pskb_pull()/pksb_trim() failure in 
rds_tcp_data_recv
        forcedeth: fix unilateral interrupt disabling in netpoll path
        openvswitch: Fix skb leak using IPv6 defrag
        ipv6: Export nf_ct_frag6_consume_orig()
        openvswitch: Fix double-free on ip_defrag() errors
        fib_trie: leaf_walk_rcu should not compute key if key is less than 
pn->key
        net: mv643xx_eth: add missing of_node_put
        ath6kl: add missing of_node_put
        net: phy: mdio: add missing of_node_put
        netdev/phy: add missing of_node_put
        net: netcp: add missing of_node_put
        net: thunderx: add missing of_node_put
        ipv6: gre: support SIT encapsulation
        ...

  commit 5aa4e83dd54a3b33d0f2fbab0a1f06a3614a5949
  Author: Marc Titinger <mtitinger@xxxxxxxxxxxx>
  Date:   Thu Oct 29 10:07:17 2015 +0100

      hwmon: (ina2xx) remove no longer used variable 'kind'

      Signed-off-by: Marc Titinger <mtitinger@xxxxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 2459ee8651dc5ab72790c2ffa99af288c7641b64
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Fri Oct 30 22:42:46 2015 -0700

      x86/vm86: Set thread.vm86 to NULL on fork/clone

      thread.vm86 points to per-task information -- the pointer should not
      be copied on clone.

      Fixes: d4ce0f26c790 ("x86/vm86: Move fields from 'struct 
kernel_vm86_struct' to 'struct vm86'")
      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Stas Sergeev <stsp@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/71c5d6985d70ec8197c8d72f003823c81b7dcf99.1446270067.git.luto@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 226f1f729ce277720fab60c91dd1b12574cfe66c
  Author: Andy Lutomirski <luto@xxxxxxxxxx>
  Date:   Fri Oct 30 22:42:45 2015 -0700

      selftests/x86: Add a fork() to entry_from_vm86 to catch fork bugs

      Mere possession of vm86 state is strange.  Make sure that nothing
      gets corrupted if we fork after calling vm86().

      Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Stas Sergeev <stsp@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/08f83295460a80e41dc5e3e81ec40d6844d316f5.1446270067.git.luto@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 38dab9ac1c017e96dc98e978111e365134d41d13
  Merge: f9793e3 1955621
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 18:49:44 2015 -0700

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

      Pull input layer fixes from Dmitry Torokhov:

       - a change to the ALPS driver where we had limit the quirk for
         trackstick handling from being active on all Dells to just a few
         models

       - a fix for a build dependency issue in the sur40 driver

       - a small clock handling fixup in the LPC32xx touchscreen driver

      * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input:
        Input: alps - only the Dell Latitude D420/430/620/630 have separate 
stick button bits
        Input: sur40 - add dependency on VIDEO_V4L2
        Input: lpc32xx_ts - fix warnings caused by enabling unprepared clock

  commit f9793e379bbb1188c72d8a367083290a14f98c97
  Merge: 9b971e7 1266963
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 18:47:18 2015 -0700

      Merge tag 'pci-v4.3-fixes-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/helgaas/pci

      Pull PCI fix from Bjorn Helgaas:
       "Sorry for this last-minute update; it's been in -next for quite a
        while, but I forgot about it until I started getting ready for the
        merge window.

        It's small and fixes a way a user could cause a panic via sysfs, so I
        think it's worth getting it in v4.3.

        NUMA:
          - Prevent out of bounds access in sysfs numa_node override (Sasha 
Levin)"

      * tag 'pci-v4.3-fixes-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/helgaas/pci:
        PCI: Prevent out of bounds access in numa_node override

  commit 53dd186b3fb7254ae0cb4d6648abb5589aaa8c2d
  Merge: 4db7062 8f2279d
  Author: Olof Johansson <olof@xxxxxxxxx>
  Date:   Sat Oct 31 01:41:45 2015 +0000

      Merge tag 'omap-for-v4.3/fixes-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap into fixes

      Two omap regression fixes:

      - Fix omap3 MUSB with DMA caused by driver core changes

      - Fix LCD DMA interrupt number for omap1 that did not
        get changed for sparse IRQ changes

      * tag 'omap-for-v4.3/fixes-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap:
        usb: musb: omap2430: Fix regression caused by driver core change
        ARM: OMAP1: fix incorrect INT_DMA_LCD

      Signed-off-by: Olof Johansson <olof@xxxxxxxxx>

  commit 8731b269f01e16193390c7276e70530366b8d626
  Author: Maneet Singh <mmaneetsingh@xxxxxxxxxx>
  Date:   Thu Oct 8 10:10:24 2015 -0400

      drm: Correct arguments to list_tail_add in create blob ioctl

      Arguments passed to list_add_tail were reversed resulting in deletion
      of old blob property everytime the new one is added.

      Fixes

      commit e2f5d2ea479b9b2619965d43db70939589afe43a
      Author: Daniel Stone <daniels@xxxxxxxxxxxxx>
      Date:   Fri May 22 13:34:51 2015 +0100

          drm/mode: Add user blob-creation ioctl

      Signed-off-by: Maneet Singh <mmaneetsingh@xxxxxxxxxx>
      [seanpaul tweaked commit subject a little]
      Signed-off-by: Sean Paul <seanpaul@xxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxx # v4.2
      Reviewed-by: Daniel Stone <daniels@xxxxxxxxxxxxx>
      Reviewed-by: Jani Nikula <jani.nikula@xxxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxx>

  commit d01552a76d71f9879af448e9142389ee9be6e95b
  Author: NeilBrown <neilb@xxxxxxxx>
  Date:   Sat Oct 31 11:00:56 2015 +1100

      Revert "md: allow a partially recovered device to be hot-added to an 
array."

      This reverts commit 7eb418851f3278de67126ea0c427641ab4792c57.

      This commit is poorly justified, I can find not discusison in email,
      and it clearly causes a problem.

      If a device which is being recovered fails and is subsequently
      re-added to an array, there could easily have been changes to the
      array *before* the point where the recovery was up to.  So the
      recovery must start again from the beginning.

      If a spare is being recovered and fails, then when it is re-added we
      really should do a bitmap-based recovery up to the recovery-offset,
      and then a full recovery from there.  Before this reversion, we only
      did the "full recovery from there" which is not corect.  After this
      reversion with will do a full recovery from the start, which is safer
      but not ideal.

      It will be left to a future patch to arrange the two different styles
      of recovery.

      Reported-and-tested-by: Nate Dailey <nate.dailey@xxxxxxxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx (3.14+)
      Fixes: 7eb418851f32 ("md: allow a partially recovered device to be 
hot-added to an array.")

  commit 9ac0934bbe52290e4e4c2a58ec41cab9b6ca8c96
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Thu Oct 29 16:37:54 2015 +0300

      drm: crtc: integer overflow in drm_property_create_blob()

      The size here comes from the user via the ioctl, it is a number between
      1-u32max so the addition here could overflow on 32 bit systems.

      Fixes: f453ba046074 ('DRM: add mode setting support')
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Reviewed-by: Daniel Stone <daniels@xxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxx # v4.2
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxx>

  commit 9b971e771ece3f3fa9c6074e5a12d9304e5fa9ef
  Merge: 7c0f488 73effcc
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 16:57:55 2015 -0700

      Merge tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux

      Pull arm64 fixes from Will Deacon:
       "Apologies for this being so late, but we've uncovered a few nasty
        issues on arm64 which didn't settle down until yesterday and the fixes
        all look suitable for 4.3.  Of the four patches, three of them are
        Cc'd to stable, with the remaining patch fixing an issue that only
        took effect during the merge window.

        Summary:

         - Fix corruption in SWP emulation when STXR fails due to contention
         - Fix MMU re-initialisation when resuming from a low-power state
         - Fix stack unwinding code to match what ftrace expects
         - Fix relocation code in the EFI stub when DRAM base is not 2MB 
aligned"

      * tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux:
        arm64/efi: do not assume DRAM base is aligned to 2 MB
        Revert "ARM64: unwind: Fix PC calculation"
        arm64: kernel: fix tcr_el1.t0sz restore on systems with extended idmap
        arm64: compat: fix stxr failure case in SWP emulation

  commit 7c0f488fbed7e498043f26de42c89c00855028c1
  Merge: 8a28d67 d305c47
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 16:56:44 2015 -0700

      Merge tag 'please-pull-syscalls' of 
git://git.kernel.org/pub/scm/linux/kernel/git/aegl/linux

      Pull ia64 kcmp syscall from Tony Luck:
       "Missed adding the kcmp() syscall a long time ago.  Now it seems that
        it is essential to build systemd"

      * tag 'please-pull-syscalls' of 
git://git.kernel.org/pub/scm/linux/kernel/git/aegl/linux:
        [IA64] Wire up kcmp syscall

  commit b8a9d66d043ffac116100775a469f05f5158c16f
  Author: Roman Gushchin <klamm@xxxxxxxxxxxxxx>
  Date:   Sat Oct 31 10:53:50 2015 +1100

      md/raid5: fix locking in handle_stripe_clean_event()

      After commit 566c09c53455 ("raid5: relieve lock contention in 
get_active_stripe()")
      __find_stripe() is called under conf->hash_locks + hash.
      But handle_stripe_clean_event() calls remove_hash() under
      conf->device_lock.

      Under some cirscumstances the hash chain can be circuited,
      and we get an infinite loop with disabled interrupts and locked hash
      lock in __find_stripe(). This leads to hard lockup on multiple CPUs
      and following system crash.

      I was able to reproduce this behavior on raid6 over 6 ssd disks.
      The devices_handle_discard_safely option should be set to enable trim
      support. The following script was used:

      for i in `seq 1 32`; do
          dd if=/dev/zero of=large$i bs=10M count=100 &
      done

      neilb: original was against a 3.x kernel.  I forward-ported
        to 4.3-rc.  This verison is suitable for any kernel since
        Commit: 59fc630b8b5f ("RAID5: batch adjacent full stripe write")
        (v4.1+).  I'll post a version for earlier kernels to stable.

      Signed-off-by: Roman Gushchin <klamm@xxxxxxxxxxxxxx>
      Fixes: 566c09c53455 ("raid5: relieve lock contention in 
get_active_stripe()")
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>
      Cc: Shaohua Li <shli@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 3.13 - 4.2

  commit bae818ee1577c27356093901a0ea48f672eda514
  Author: Ronny Hegewald <ronny.hegewald@xxxxxxxxx>
  Date:   Thu Oct 15 18:50:46 2015 +0000

      rbd: require stable pages if message data CRCs are enabled

      rbd requires stable pages, as it performs a crc of the page data before
      they are send to the OSDs.

      But since kernel 3.9 (patch 1d1d1a767206fbe5d4c69493b7e6d2a8d08cc0a0
      "mm: only enforce stable page writes if the backing device requires
      it") it is not assumed anymore that block devices require stable pages.

      This patch sets the necessary flag to get stable pages back for rbd.

      In a ceph installation that provides multiple ext4 formatted rbd
      devices "bad crc" messages appeared regularly (ca 1 message every 1-2
      minutes on every OSD that provided the data for the rbd) in the
      OSD-logs before this patch. After this patch this messages are pretty
      much gone (only ca 1-2 / month / OSD).

      Cc: stable@xxxxxxxxxxxxxxx # 3.9+, needs backporting
      Signed-off-by: Ronny Hegewald <Ronny.Hegewald@xxxxxxxxx>
      [idryomov@xxxxxxxxx: require stable pages only in crc case, changelog]
      Signed-off-by: Ilya Dryomov <idryomov@xxxxxxxxx>

  commit aa644fa64c25ab2231a0fa9464892f5579d4e161
  Author: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
  Date:   Mon Oct 19 17:55:49 2015 +0100

      ARM64: Enable multi-core scheduler support by default

      Make sure that the task scheduler domain hierarchy is set-up correctly
      on systems with single or multi-cluster topology.

      Signed-off-by: Dietmar Eggemann <dietmar.eggemann@xxxxxxx>
      Acked-by: Punit Agrawal <punit.agrawal@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit bf457786f569cc480629d7855cac1fd1173ac009
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Fri Oct 23 16:48:14 2015 +0200

      arm64/efi: move arm64 specific stub C code to libstub

      Now that we added special handling to the C files in libstub, move
      the one remaining arm64 specific EFI stub C file to libstub as
      well, so that it gets the same treatment. This should prevent future
      changes from resulting in binaries that may execute incorrectly in
      UEFI context.

      With efi-entry.S the only remaining EFI stub source file under
      arch/arm64, we can also simplify the Makefile logic somewhat.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Reviewed-by: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Tested-by: Jeremy Linton <jeremy.linton@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 50224f4d0959981ed03c407af1f35ed7917ae097
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Fri Oct 30 07:52:39 2015 -0700

      hwmon: (nct6775) Introduce separate temperature labels for NCT6792 and 
NCT6793

      NCT6792 and NCT6793 are mostly register compatible to NCT6791, but
      temperature sources are different and difficult to manage with a single
      temperature label array. Introduce separate temperature label arrays
      for those chips to reflect the differences.

      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 9a38371a8cda366400e592d10bc062deea09b695
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Sat Aug 29 15:29:25 2015 -0700

      hwmon: (nct6775) NCT6791D and NCT6792D have an additional temperature 
source

      Both NCT6791D and NCT6792D permit selection of a 'virtual' temperature
      register as temperature source. The virtual temperature registers are
      registers 0xea to 0xef in bank 0 and can be written by software.

      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 562b103a21974c2f9cd67514d110f918bb3e1796
  Author: Marek Vasut <marex@xxxxxxx>
  Date:   Fri Oct 30 13:48:19 2015 +0100

      can: Use correct type in sizeof() in nla_put()

      The sizeof() is invoked on an incorrect variable, likely due to some
      copy-paste error, and this might result in memory corruption. Fix this.

      Signed-off-by: Marek Vasut <marex@xxxxxxx>
      Cc: Wolfgang Grandegger <wg@xxxxxxxxxxxxxx>
      Cc: netdev@xxxxxxxxxxxxxxx
      Cc: linux-stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>

  commit e7b63ff115f21ea6c609cbb08f3d489af627af6e
  Merge: a493bcf cb866e3
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 20:51:56 2015 +0900

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next

      Steffen Klassert says:

      ====================
      pull request (net-next): ipsec-next 2015-10-30

      1) The flow cache is limited by the flow cache limit which
         depends on the number of cpus and the xfrm garbage collector
         threshold which is independent of the number of cpus. This
         leads to the fact that on systems with more than 16 cpus
         we hit the xfrm garbage collector limit and refuse new
         allocations, so new flows are dropped. On systems with 16
         or less cpus, we hit the flowcache limit. In this case, we
         shrink the flow cache instead of refusing new flows.

         We increase the xfrm garbage collector threshold to INT_MAX
         to get the same behaviour, independent of the number of cpus.

      2) Fix some unaligned accesses on sparc systems.
         From Sowmini Varadhan.

      3) Fix some header checks in _decode_session4. We may call
         pskb_may_pull with a negative value converted to unsigened
         int from pskb_may_pull. This can lead to incorrect policy
         lookups. We fix this by a check of the data pointer position
         before we call pskb_may_pull.

      4) Reload skb header pointers after calling pskb_may_pull
         in _decode_session4 as this may change the pointers into
         the packet.

      5) Add a missing statistic counter on inner mode errors.

      Please pull or let me know if there are problems.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a493bcf8d6caf28f062c5f8f2ba486fdbf1ae899
  Merge: e258d91 8aaa878
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 20:38:24 2015 +0900

      Merge tag 'wireless-drivers-next-for-davem-2015-10-29' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next

      Kalle Valo says:

      ====================
      iwlwifi

      * bug fix for TDLS
      * fixes and cleanups in scan
      * support of several scan plans
      * improvements in FTM
      * fixes in FW API
      * improvements in the failure paths when the bus is dead
      * other various small things here and there

      ath10k

      * add QCA9377 support
      * fw_stats support for 10.4 firmware

      ath6kl

      * report antenna configuration to user space
      * implement ethtool stats

      ssb

      * add Kconfig SSB_HOST_SOC for compiling SoC related code
      * move functions specific to SoC hosted bus to separated file
      * pick PCMCIA host code support from b43 driver
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e258d919b175e0160a694a20fb309e29fc93d7b1
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Wed Oct 28 23:17:31 2015 -0700

      switchdev: fix: pass correct obj size when deferring obj add

      Fixes: 4d429c5dd ("switchdev: introduce possibility to defer obj_add/del")
      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3a7bde55a11c4a22a6ccfc487993d621ae8e3688
  Author: Scott Feldman <sfeldma@xxxxxxxxx>
  Date:   Wed Oct 28 23:17:30 2015 -0700

      switchdev: fix: erasing too much of vlan obj when handling multiple vlan 
specs

      When adding vlans with multiple IFLA_BRIDGE_VLAN_INFO attrs set in AFSPEC,
      we would wipe the vlan obj struct after the first IFLA_BRIDGE_VLAN_INFO.
      Fix this by only clearing what's necessary on each IFLA_BRIDGE_VLAN_INFO
      iteration.

      Fixes: 9e8f4a54 ("switchdev: push object ID back to object structure")
      Signed-off-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 740215ddb5b3faa0006505de073654cc50e9a299
  Merge: 5bf8921 f116317
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 20:19:43 2015 +0900

      Merge tag 'nfc-next-4.4-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sameo/nfc-next

      Samuel Ortiz says:

      ====================
      NFC 4.4 pull request

      This is the NFC pull request for 4.4.

      It's a bit bigger than usual, the 3 main culprits being:

      - A new driver for Intel's Fields Peak NCI chipset. In order to
        support this chipset we had to export a few NCI routines and
        extend the driver NCI ops to not only support proprietary
        commands but also core ones.

      - Support for vendor commands for both STM drivers, st-nci
        and st21nfca. Those vendor commands allow to run factory tests
        through the NFC netlink interface.

      - New i2c and SPI support for the Marvell driver, together with
        firmware download support for this driver's core.

      Besides that we also have:

      - A few file renames in the STM drivers, to keep the naming
        consistent between drivers.

      - Some improvements and fixes on the NCI HCI layer, mostly to
        properly reach a secure element over a legacy HCI link.

      - A few fixes for the s3fwrn5 and trf7970a drivers.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5bf8921116ce0972c23b78ea2d98e5c0c6a99ae2
  Merge: b7b0b1d 324e786
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 19:41:10 2015 +0900

      Merge branch 'for-upstream' of 
git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next

      Johan Hedberg says:

      ====================
      pull request: bluetooth-next 2015-10-28

      Here are a some more Bluetooth patches for 4.4 which collected up during
      the past week. The most important ones are from Kuba Pawlak for fixing
      locking issues with SCO sockets. There's also a fix from Alexander Aring
      for 6lowpan, a memleak fix from Julia Lawall for the btmrvl driver and
      some cleanup patches from Marcel.

      Please let me know if there are any issues pulling. Thanks.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 13e3008fae342c86dd645b2ec4c669bbb40c5d33
  Author: Mike Looijmans <mike.looijmans@xxxxxxxx>
  Date:   Thu Oct 22 13:30:20 2015 +0200

      pinctrl: zynq: Initialize early

      Supplying pinmux configuration for e.g. gpio pins leads to deferred
      probes because the pinctrl device is probed much later than gpio.
      Move the init call to a much earlier stage so it probes before the
      devices that may need it.

      Signed-off-by: Mike Looijmans <mike.looijmans@xxxxxxxx>
      Tested-by: Sören Brinkmann <soren.brinkmann@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit e25589894e24b07a33b143b9bfd95fe8d2c0a353
  Author: William Breathitt Gray <vilhelm.gray@xxxxxxxxx>
  Date:   Wed Oct 28 17:24:16 2015 -0400

      gpio: Add ACCES 104-IDIO-16 driver maintainer entry

      Add William Breathitt Gray as the maintainer of the ACCES 104-IDIO-16
      GPIO driver.

      Signed-off-by: William Breathitt Gray <vilhelm.gray@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit d9e4ad5badf4ccbfddee208c898fb8fd0c8836b1
  Author: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
  Date:   Wed Oct 28 16:14:31 2015 +0900

      Document that IRQ_NONE should be returned when IRQ not actually handled

      Our IRQ storm detection works when an interrupt handler returns
      IRQ_NONE for thousands of consecutive interrupts in a second. It
      doesn't hurt to occasionally return IRQ_NONE when the interrupt is
      actually genuine.

      Drivers should only be returning IRQ_HANDLED if they have actually
      *done* something to stop an interrupt from happening â?? it doesn't just
      mean "this really *was* my device".

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Cc: davem@xxxxxxxxxxxxx
      Link: http://lkml.kernel.org/r/1446016471.3405.201.camel@xxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit b7b0b1d290cc89c39607dd47f8047e1071e65692
  Author: Alexander Duyck <aduyck@xxxxxxxxxxxx>
  Date:   Mon Oct 26 11:06:33 2015 -0700

      ipv6: recreate ipv6 link-local addresses when increasing MTU over 
IPV6_MIN_MTU

      This change makes it so that we reinitialize the interface if the MTU is
      increased back above IPV6_MIN_MTU and the interface is up.

      Cc: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bebd23a2ed31d47e7dd746d3b125068aa2c42d85
  Merge: 66a565c 7ed4915
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Fri Oct 30 10:09:37 2015 +0100

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      New features:

        - Allow passing C language eBPF scriptlets via --event in all tools,
          so that it gets built using clang and then pass it to the kernel via
          sys_bpf(). (Wang Nan)

        - Wire up the loaded ebpf object file with associated kprobes, so that
          it can determine if the kprobes will be filtered or not. (Wang Nan)

      User visible changes:

        - Add cmd string table to decode sys_bpf first arg in 'trace'. (Arnaldo 
Carvalho de Melo)

        - Enable printing of branch stack in 'perf script'. (Stephane Eranian)

        - Pass the right file with debug info to libunwind. (Rabin Vincent)

      Build Fixes:

        - Make sure fixdep is built before libbpf, fixing a race. (Jiri Olsa)

        - Fix libiberty feature detection. (Rabin Vincent)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit ee6259382ca8f723a2cc90841f903667c7720584
  Merge: 65bdc43 c7070fc
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 12:27:07 2015 +0900

      Merge branch 'mlxsw-flooding-and-cosmetics'

      Jiri Pirko says:

      ====================
      mlxsw: driver update

      This driver update mainly brings support for user to be able to setup
      flooding on specified port, via bridge flag. Also, there is a fix in 
ageing
      time conversion. The rest is just cosmetics.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c7070fc4ecb50bee801cef85483e043d0ba1dd27
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:17:05 2015 +0100

      mlxsw: spectrum: Make mlxsw_sp_port_switchdev_ops static

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d9324f68eea7b01bde25ab4c204227f3583b92ba
  Author: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:17:04 2015 +0100

      mlxsw: Put braces on all arms of branch statement

      Fix a place where checkpatch complains that braces should be used
      on all arms of this statement.

      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ef743fddb33f47b34c852f26fbd2057c72c70016
  Author: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:17:03 2015 +0100

      mlxsw: Put constant on the right side of comparisons

      Fixes those places where checkpatch complains that comparisons
      should place the constant on the right side of the test.

      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 135f9eceb7fa0287e535f9ec921485661e9d6667
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:17:02 2015 +0100

      mlxsw: spectrum: Fix ageing time value

      The value passed through switchdev attr set is not in jiffies, but in
      clock_t, so fix the convert.

      Reported-by: Sagi Rotem <sagir@xxxxxxxxxxxx>
      Fixes: 56ade8fe3f ("mlxsw: spectrum: Add initial support for Spectrum 
ASIC")
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 75c09280feddcf5c01c00aa11881c4b38559e2ef
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:17:01 2015 +0100

      mlxsw: reg: Avoid unnecessary line wrap for mlxsw_reg_sfd_uc_unpack

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8316f087f7c62a2d21ec4e72926ec07ce777fe48
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:17:00 2015 +0100

      mlxsw: reg: Fix desription typos of couple of SFN items

      Fix copy-paste errors.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4e9ec0839b4994ebc764d8067832dd079336c42f
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:16:59 2015 +0100

      mlxsw: reg: Fix description for reg_sfd_uc_sub_port

      The original description was for LAG, so fix it.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0293038e0c36db45f2ea4e4e4a8ce0a0faa62139
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:16:58 2015 +0100

      mlxsw: spectrum: Add support for flood control

      Add or remove a bridged port from the flooding domain of unknown unicast
      packets according to user configuration.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1b3433a942922953df43ef0bc0172119041364c5
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:16:57 2015 +0100

      mlxsw: spectrum: Add support for VLAN ranges in flooding configuration

      When enabling a range of VLANs on a bridged port we can configure
      flooding for these VLANs by one register access instead of calling the
      same register for each VLAN. This is accomplished by using the 'range'
      field of the Switch Flooding Table Register (SFTR).

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0d9b970cee612968c6b888b93736d991762b9edb
  Author: Jiri Pirko <jiri@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:16:56 2015 +0100

      mlxsw: spectrum: move "bridged" bool to u8 flags

      It is a flag anyway, so move it to existing u8 flag and don't waste mem.
      Fix the flags to be in single u8 on the way.

      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 371e59adcebf9953385bf46d5325ac39a53c5520
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:16:55 2015 +0100

      switchdev: Make flood to CPU optional

      In certain use cases it is not always desirable for the switch device to
      flood traffic to CPU port. Instead, only certain packet types (e.g.
      STP, LACP) should be trapped to it.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 741af0053b43d8b9a688a12c57ece62338616ae8
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Wed Oct 28 10:16:54 2015 +0100

      switchdev: Add support for flood control

      Allow devices supporting this feature to control the flooding of unknown
      unicast traffic, by making switchdev infrastructure propagate this setting
      to the switch driver.

      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 65bdc43d2220bc97af037c87aba2407b46f13c2a
  Merge: b7af147 6ccbe6b
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 12:21:57 2015 +0900

      Merge branch 'xgene_txrx_delay'

      Iyappan Subramanian says:

      ====================
      drivers: xgene: Add support RGMII TX/RX delay configuration

      X-Gene RGMII ethernet controller has a RGMII bridge that performs the
      task of converting the RGMII signal {RX_CLK,RX_CTL, RX_DATA[3:0]} from
      PHY to GMII signal {RX_DV,RX_ER,RX_DATA[7:0]} and vice versa.  This
      RGMII bridge has a provision to internally delay the input RX_CLK and
      the output TX_CLK using configuration registers. This will help in
      maintain the CLK-CTL delay relationship in various operating
      conditions.

      This patch adds support RGMII TX/RX delay configuration.
      ====================

      Signed-off-by: Iyappan Subramanian <isubramanian@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6ccbe6b248ef8cc31477a388ea9841b56030bea9
  Author: Iyappan Subramanian <isubramanian@xxxxxxx>
  Date:   Mon Oct 26 15:25:16 2015 -0700

      Documentation: dts: xgene: Add TX/RX delay field

      Signed-off-by: Iyappan Subramanian <isubramanian@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 16615a4c6f4d54d7655dff19e7061c76043f907d
  Author: Iyappan Subramanian <isubramanian@xxxxxxx>
  Date:   Mon Oct 26 15:25:15 2015 -0700

      drivers: net: xgene: Add support RGMII TX/RX delay configuration

      Add RGMII TX/RX delay configuration support. RGMII standard requires 2ns
      delay to help the RGMII bridge receiver to sample data correctly. If the
      default value does not provide proper centering of the data sample, the
      TX/RX delay parameters can be used to adjust accordingly.

      Signed-off-by: Iyappan Subramanian <isubramanian@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b7af1472afa2228bd9fe8b4cea3b003b4027d72d
  Author: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 07:52:56 2015 -0700

      bridge: set is_local and is_static before fdb entry is added to the fdb 
hashtable

      Problem Description:
      We can add fdbs pointing to the bridge with NULL ->dst but that has a
      few race conditions because br_fdb_insert() is used which first creates
      the fdb and then, after the fdb has been published/linked, sets
      "is_local" to 1 and in that time frame if a packet arrives for that fdb
      it may see it as non-local and either do a NULL ptr dereference in
      br_forward() or attach the fdb to the port where it arrived, and later
      br_fdb_insert() will make it local thus getting a wrong fdb entry.
      Call chain br_handle_frame_finish() -> br_forward():
      But in br_handle_frame_finish() in order to call br_forward() the dst
      should not be local i.e. skb != NULL, whenever the dst is
      found to be local skb is set to NULL so we can't forward it,
      and here comes the problem since it's running only
      with RCU when forwarding packets it can see the entry before "is_local"
      is set to 1 and actually try to dereference NULL.
      The main issue is that if someone sends a packet to the switch while
      it's adding the entry which points to the bridge device, it may
      dereference NULL ptr. This is needed now after we can add fdbs
      pointing to the bridge.  This poses a problem for
      br_fdb_update() as well, while someone's adding a bridge fdb, but
      before it has is_local == 1, it might get moved to a port if it comes
      as a source mac and then it may get its "is_local" set to 1

      This patch changes fdb_create to take is_local and is_static as
      arguments to set these values in the fdb entry before it is added to the
      hash. Also adds null check for port in br_forward.

      Fixes: 3741873b4f73 ("bridge: allow adding of fdb entries pointing to the 
bridge device")
      Reported-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Stephen Hemminger <stephen@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b8812fa88371ae567c907448d9a7ba62d09b90c9
  Author: John W. Linville <linville@xxxxxxxxxxxxx>
  Date:   Tue Oct 27 09:49:00 2015 -0400

      geneve: add IPv6 bits to geneve_fill_metadata_dst

      Signed-off-by: John W. Linville <linville@xxxxxxxxxxxxx>
      Reviewed-by: Jesse Gross <jesse@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3a56f86f1be6a381345800d69999eaff87e0161d
  Author: John W. Linville <linville@xxxxxxxxxxxxx>
  Date:   Mon Oct 26 17:01:45 2015 -0400

      geneve: handle ipv6 priority like ipv4 tos

      Other callers of udp_tunnel6_xmit_skb just pass 0 for the prio
      argument.  Jesse Gross <jesse@xxxxxxxxxx> suggested that prio is really
      the same as IPv4's tos and should be handled the same, so this is my
      interpretation of that suggestion.

      Signed-off-by: John W. Linville <linville@xxxxxxxxxxxxx>
      Reported-by: Jesse Gross <jesse@xxxxxxxxxx>
      Reviewed-by: Jesse Gross <jesse@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8ed66f0e8235118a31720acdab3bbbe9debd0f6a
  Author: John W. Linville <linville@xxxxxxxxxxxxx>
  Date:   Mon Oct 26 17:01:44 2015 -0400

      geneve: implement support for IPv6-based tunnels

      NOTE: Link-local IPv6 addresses for remote endpoints are not supported,
      since the driver currently has no capacity for binding a geneve
      interface to a specific link.

      Signed-off-by: John W. Linville <linville@xxxxxxxxxxxxx>
      Reviewed-by: Jesse Gross <jesse@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 04ccb89073e7cfc31d9b9208d32b2cdf84a4d97d
  Merge: 8a28d67 ae93580
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Fri Oct 30 09:32:59 2015 +1000

      Merge branch 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux 
into drm-fixes

      regression fix for backlight on old laptops.

      * 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux:
        drm/radeon: fix dpms when driver backlight control is disabled
        drm/radeon: move bl encoder assignment into bl init

  commit 7ed4915ad60788d6b846e2cd034f49ee15698143
  Author: Rabin Vincent <rabin.vincent@xxxxxxxx>
  Date:   Thu Oct 29 08:49:36 2015 +0100

      perf unwind: Pass symbol source to libunwind

      Even if --symfs is used to point to the debug binaries, we send in the
      non-debug filenames to libunwind, which leads to libunwind not finding
      the debug frame.  Fix this by preferring the file in --symfs, if it is
      available.

      Signed-off-by: Rabin Vincent <rabin.vincent@xxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Rabin Vincent <rabinv@xxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1446104978-26429-1-git-send-email-rabin.vincent@xxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 3af6ed84eb43c587beb5f3252222e39e65d08c61
  Author: Rabin Vincent <rabin.vincent@xxxxxxxx>
  Date:   Thu Oct 29 08:49:37 2015 +0100

      tools build: Fix libiberty feature detection

      Any CFLAGS or LDFLAGS set by the user need to be passed to the feature
      build command.  This many include for example -I or -L to point to
      libraries and include files in custom paths.

      In most of the test-*.bin rules in build/feature/Makefile, we use the 
BUILD
      macro which always sends in CFLAGS and LDFLAGS.  The libiberty build line
      however doesn't use the BUILD macro and thus needs to send in CFLAGS and
      LDFLAGS explicitly.  Without this, when using custom CFLAGS/LDFLAGS, 
libiberty
      fails to be detected and the perf link fails with something like:

         LINK     perf
        libbfd.a(bfd.o): In function `bfd_errmsg':
        bfd.c:(.text+0x168): undefined reference to `xstrerror'
        bbfd.a(opncls.o): In function `_bfd_new_bfd':
        opncls.c:(.text+0xe8): undefined reference to `objalloc_create'
        ...

      Signed-off-by: Rabin Vincent <rabin.vincent@xxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Rabin Vincent <rabinv@xxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1446104978-26429-2-git-send-email-rabin.vincent@xxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit d509db0473e40134286271b1d1adadccf42ac467
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:20 2015 +0000

      perf tools: Compile scriptlets to BPF objects when passing '.c' to --event

      This patch provides infrastructure for passing source files to --event
      directly using:

       # perf record --event bpf-file.c command

      This patch does following works:

       1) Allow passing '.c' file to '--event'. parse_events_load_bpf() is
          expanded to allow caller tell it whether the passed file is source
          file or object.

       2) llvm__compile_bpf() is called to compile the '.c' file, the result
          is saved into memory. Use bpf_object__open_buffer() to load the
          in-memory object.

      Introduces a bpf-script-example.c so we can manually test it:

       # perf record --clang-opt "-DLINUX_VERSION_CODE=0x40200" --event 
./bpf-script-example.c sleep 1

      Note that '--clang-opt' must put before '--event'.

      Futher patches will merge it into a testcase so can be tested 
automatically.

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-10-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: He Kuang <hekuang@xxxxxxxxxx>
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 71dc2326252ff1bcdddc05db03c0f831d16c9447
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:19 2015 +0000

      perf record: Add clang options for compiling BPF scripts

      Although previous patch allows setting BPF compiler related options in
      perfconfig, on some ad-hoc situation it still requires passing options
      through cmdline. This patch introduces 2 options to 'perf record' for
      this propose: --clang-path and --clang-opt.

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-9-git-send-email-wangnan0@xxxxxxxxxx
      [ Add the new options to the 'record' man page ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 1f45b1d49073541947193bd7dac9e904142576aa
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:18 2015 +0000

      perf bpf: Attach eBPF filter to perf event

      This is the final patch which makes basic BPF filter work. After
      applying this patch, users are allowed to use BPF filter like:

       # perf record --event ./hello_world.o ls

      A bpf_fd field is appended to 'struct evsel', and setup during the
      callback function add_bpf_event() for each 'probe_trace_event'.

      PERF_EVENT_IOC_SET_BPF ioctl is used to attach eBPF program to a newly
      created perf event. The file descriptor of the eBPF program is passed to
      perf record using previous patches, and stored into evsel->bpf_fd.

      It is possible that different perf event are created for one kprobe
      events for different CPUs. In this case, when trying to call the ioctl,
      EEXIST will be return. This patch doesn't treat it as an error.

      Committer note:

      The bpf proggie used so far:

        __attribute__((section("fork=_do_fork"), used))
        int fork(void *ctx)
        {
          return 0;
        }

        char _license[] __attribute__((section("license"), used)) = "GPL";
        int _version __attribute__((section("version"), used)) = 0x40300;

      failed to produce any samples, even with forks happening and it being
      running in system wide mode.

      That is because now the filter is being associated, and the code above
      always returns zero, meaning that all forks will be probed but filtered
      away ;-/

      Change it to 'return 1;' instead and after that:

        # trace --no-syscalls --event /tmp/foo.o
           0.000 perf_bpf_probe:fork:(ffffffff8109be30))
           2.333 perf_bpf_probe:fork:(ffffffff8109be30))
           3.725 perf_bpf_probe:fork:(ffffffff8109be30))
           4.550 perf_bpf_probe:fork:(ffffffff8109be30))
        ^C#

      And it works with all tools, including 'perf trace'.

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-8-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 50f1e6d0431d3343cb506037c43ce623bd15581f
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Wed Oct 28 21:44:50 2015 +0100

      perf tools: Make sure fixdep is built before libbpf

      While doing 'make -C tools/perf build-test':

         LD       fixdep-in.o
         LINK     fixdep
       /bin/sh: /home/acme/git/linux/tools/build/fixdep: Permission denied
       make[6]: *** [bpf.o] Error 1
       make[5]: *** [libbpf-in.o] Error 2
       make[4]: *** [/home/acme/git/linux/tools/lib/bpf/libbpf.a] Error 2
       make[4]: *** Waiting for unfinished jobs....

      The fixdep tool needs to be built as the first binary.  Libraries are
      built in paralel, so each of them needs to depend on fixdep target.

      Reported-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20151028204450.GA25553@xxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit dc323ce8e72d6d1beb9af9bbd29c4d55ce3d7fb0
  Author: Stephane Eranian <eranian@xxxxxxxxxx>
  Date:   Mon Aug 31 18:41:13 2015 +0200

      perf script: Enable printing of branch stack

      This patch improves perf script by enabling printing of the
      branch stack via the 'brstack' and 'brstacksym' arguments to
      the field selection option -F. The option is off by default
      and operates only if the perf.data file has branch stack content.

      The branches are printed in to/from pairs. The most recent branch
      is printed first. The number of branch entries vary based on the
      underlying hardware and filtering used.

      The brstack prints FROM/TO addresses in raw hexadecimal format.
      The brstacksym prints FROM/TO addresses in symbolic form wherever
      possible.

       $ perf script -F ip,brstack
        5d3000 0x401aa0/0x5d2000/M/-/-/-/0 ...

       $ perf script -F ip,brstacksym
        4011e0 noploop+0x0/noploop+0x0/P/-/-/0

      The notation F/T/M/X/A/C describes the attributes of the branch.
      F=from, T=to, M/P=misprediction/prediction, X=TSX, A=TSX abort, C=cycles 
(SKL)

      Signed-off-by: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Yuanfang Chen <cyfmxc@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1441039273-16260-5-git-send-email-eranian@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit cb083816ab5ac3d10a9417527f07fc5962cc3808
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Mon Oct 26 21:42:33 2015 +0000

      arm64: page-align sections for DEBUG_RODATA

      A kernel built with DEBUG_RO_DATA && !CONFIG_DEBUG_ALIGN_RODATA doesn't
      have .text aligned to a page boundary, though fixup_executable works at
      page-granularity thanks to its use of create_mapping. If .text is not
      page-aligned, the first page it exists in may be marked non-executable,
      leading to failures when an attempt is made to execute code in said
      page.

      This patch upgrades ALIGN_DEBUG_RO and ALIGN_DEBUG_RO_MIN to force page
      alignment for DEBUG_RO_DATA && !CONFIG_DEBUG_ALIGN_RODATA kernels,
      ensuring that all sections with specific RWX permission requirements are
      mapped with the correct permissions.

      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Reported-by: Jeremy Linton <jeremy.linton@xxxxxxx>
      Reviewed-by: Laura Abbott <laura@xxxxxxxxxxxx>
      Acked-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Cc: Suzuki Poulose <suzuki.poulose@xxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Fixes: da141706aea52c1a ("arm64: add better page protections to arm64")
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 86a5906e4d1df1ec160fa9e18b6f2277a5216c60
  Author: Robin Murphy <robin.murphy@xxxxxxx>
  Date:   Tue Oct 27 17:40:26 2015 +0000

      arm64: Fix build with CONFIG_ZONE_DMA=n

      Trying to build with CONFIG_ZONE_DMA=n leaves visible references
      to the now-undefined ZONE_DMA, resulting in a syntax error.

      Hide the references behind an #ifdef instead of using IS_ENABLED.

      Signed-off-by: Robin Murphy <robin.murphy@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 5accd17d0eb523350c9ef754d655e379c9bb93b3
  Author: Robin Murphy <robin.murphy@xxxxxxx>
  Date:   Thu Oct 22 15:41:52 2015 +0100

      arm64: Fix compat register mappings

      For reasons not entirely apparent, but now enshrined in history, the
      architectural mapping of AArch32 banked registers to AArch64 registers
      actually orders SP_<mode> and LR_<mode> backwards compared to the
      intuitive r13/r14 order, for all modes except FIQ.

      Fix the compat_<reg>_<mode> macros accordingly, in the hope of avoiding
      subtle bugs with KVM and AArch32 guests.

      Signed-off-by: Robin Murphy <robin.murphy@xxxxxxx>
      Acked-by: Will Deacon <will.deacon@xxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 73effccb9196ccc0241c3fb51dfd8de1d14ae8ed
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Thu Oct 29 15:07:25 2015 +0100

      arm64/efi: do not assume DRAM base is aligned to 2 MB

      The current arm64 Image relocation code in the UEFI stub assumes that
      the dram_base argument it receives is always a multiple of 2 MB. In
      reality, it is simply the lowest start address of all RAM entries in
      the UEFI memory map, which means it could be any multiple of 4 KB.

      Since the arm64 kernel Image needs to reside TEXT_OFFSET bytes beyond
      a 2 MB aligned base, or it will fail to boot, make sure we round dram_base
      to 2 MB before using it to calculate the relocation address.

      Fixes: e38457c361b30c5a ("arm64: efi: prefer AllocatePages() over 
efi_low_alloc() for vmlinux")
      Reported-by: Timur Tabi <timur@xxxxxxxxxxxxxx>
      Tested-by: Timur Tabi <timur@xxxxxxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit 116ef0fcc9268a876c8d1bbf77d8fa80111fa526
  Merge: 9ffecb1 38850d7 a4283e4
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Oct 29 15:21:30 2015 +0000

      Merge branches 'fixes' and 'misc' into for-next

  commit 38850d786a799c3ff2de0dc1980902c3263698dc
  Author: H. Nikolaus Schaller <hns@xxxxxxxxxxxxx>
  Date:   Wed Oct 28 19:00:26 2015 +0100

      ARM: 8449/1: fix bug in vdsomunge swab32 macro

      Commit 8a603f91cc48 ("ARM: 8445/1: fix vdsomunge not to depend on
      glibc specific byteswap.h") unfortunately introduced a bug created but
      not found during discussion and patch simplification.

      Reported-by: Efraim Yawitz <efraim.yawitz@xxxxxxxxx>
      Signed-off-by: H. Nikolaus Schaller <hns@xxxxxxxxxxxxx>
      Fixes: 8a603f91cc48 ("ARM: 8445/1: fix vdsomunge not to depend on glibc 
specific byteswap.h")
      Signed-off-by: Nathan Lynch <nathan_lynch@xxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit ae93580ee59c02395c1711d3e6b90546b8137b86
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Tue Oct 27 10:56:44 2015 -0400

      drm/radeon: fix dpms when driver backlight control is disabled

      If driver backlight control is disabled, either by driver
      parameter or default per-asic setting, revert to the old behavior.

      Fixes a regression in commit:
      4281f46ef839050d2ef60348f661eb463c21cc2e

      Reviewed-by: Michel Dänzer <michel.daenzer@xxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 4cee6a9057d5e13911f0cb6e143d11dc1a3245dd
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Wed Oct 28 14:26:32 2015 -0400

      drm/radeon: move bl encoder assignment into bl init

      So that the bl encoder will be null if the GPU does not
      control the backlight.

      Reviewed-by: Michel Dänzer <michel.daenzer@xxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 729a78417a7b5c1f59e15d21a1900758375c4647
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Oct 29 11:48:18 2015 -0300

      perf trace: Add cmd string table to decode sys_bpf first arg

       # perf trace -e bpf perf record -e /tmp/foo.o -a
         362.779 (0.130 ms): perf/3451 bpf(cmd: PROG_LOAD, uattr: 
0x7ffe9a6825d0, size: 48) = 3

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-2b0nknu53baz9e0wj4thcdd8@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 89bc7848a91bc99532f5c21b2885472ba710f249
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 13:21:04 2015 +0100

      ipv6: protect mtu calculation of wrap-around and infinite loop by 
rounding issues

      Raw sockets with hdrincl enabled can insert ipv6 extension headers
      right into the data stream. In case we need to fragment those packets,
      we reparse the options header to find the place where we can insert
      the fragment header. If the extension headers exceed the link's MTU we
      actually cannot make progress in such a case.

      Instead of ending up in broken arithmetic or rounding towards 0 and
      entering an endless loop in ip6_fragment, just prevent those cases by
      aborting early and signal -EMSGSIZE to user space.

      This is the second version of the patch which doesn't use the
      overflow_usub function, which got reverted for now.

      Suggested-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1e0d69a9cc9172d7896c2113f983a74f6e8ff303
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 13:21:03 2015 +0100

      Revert "Merge branch 'ipv6-overflow-arith'"

      Linus dislikes these changes. To not hold up the net-merge let's revert
      it for now and fix the bug like Linus suggested.

      This reverts commit ec3661b42257d9a06cf0d318175623ac7a660113, reversing
      changes made to c80dbe04612986fd6104b4a1be21681b113b5ac9.

      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8aaa878de83a0de3833f5b00bc822dbcd403ec36
  Merge: 845da6e 13eff53
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
  Date:   Thu Oct 29 15:34:27 2015 +0200

      Merge ath-next from ath.git

      Major changes:

      ath10k:

      * add QCA9377 support
      * fw_stats support for 10.4 firmware

      ath6kl:

      * report antenna configuration to user space
      * implement ethtool stats

  commit 5a364c2a1762e8a78721fafc93144509c0b6cb84
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Fri Feb 6 18:44:57 2015 +0300

      ARC: mm: PAE40 support

      This is the first working implementation of 40-bit physical address
      extension on ARCv2.

      Signed-off-by: Alexey Brodkin <abrodkin@xxxxxxxxxxxx>
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 66a565c203bc31b76969711fbd92da11bee2f129
  Merge: 6fc774e 4edf30e
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Thu Oct 29 13:17:56 2015 +0100

      Merge tag 'perf-ebpf-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull basic perf/ebpf integration:

       "Please see the changeset comments, but this is the very basic 
integration of
        perf with libbpf that, given a .o file built for the 'bpf' target with 
clang,
        will get it validated and loaded into the kernel via the sys_bpf 
syscall, which
        can be seen using 'perf trace' to trace the whole thing looking just 
for the
        bpf and perf_event_open syscalls:

          # perf trace -e bpf,perf_event_open perf record -g --event /tmp/foo.o 
-a
           362.779 ( 0.129 ms): perf/22408 bpf(cmd: 5, uattr: 0x7ffd4edb6db0, 
size: 48                           ) = 3
           384.192 ( 0.016 ms): perf/22408 perf_event_open(attr_uptr: 
0x7ffd4edbace0, pid: -1, cpu: 3, group_fd: -1, flags: FD_CLOEXEC) = 5
           384.247 ( 0.038 ms): perf/22408 perf_event_open(attr_uptr: 
0x37aedd8, pid: -1, group_fd: -1, flags: FD_CLOEXEC) = 5
           384.261 ( 0.007 ms): perf/22408 perf_event_open(attr_uptr: 
0x37aedd8, pid: -1, group_fd: -1, flags: FD_CLOEXEC) = 5
           387.680 ( 3.413 ms): perf/22408 perf_event_open(attr_uptr: 
0x3222f08, pid: -1, group_fd: -1, flags: FD_CLOEXEC) = 5
           387.688 ( 0.005 ms): perf/22408 perf_event_open(attr_uptr: 
0x3222f08, pid: -1, cpu: 1, group_fd: -1, flags: FD_CLOEXEC) = 6
           387.693 ( 0.004 ms): perf/22408 perf_event_open(attr_uptr: 
0x3222f08, pid: -1, cpu: 2, group_fd: -1, flags: FD_CLOEXEC) = 7
           387.698 ( 0.003 ms): perf/22408 perf_event_open(attr_uptr: 
0x3222f08, pid: -1, cpu: 3, group_fd: -1, flags: FD_CLOEXEC) = 8
          ^C[ perf record: Woken up 1 times to write data ]
            [ perf record: Captured and wrote 0.221 MB perf.data (2 samples) ]
          # perf script
          bash 18389 [002] 83446.412607: perf_bpf_probe:fork: (ffffffff8109be30)
                          29be31 _do_fork 
(/lib/modules/4.3.0-rc6+/build/vmlinux)
                          96d662 tracesys_phase2 
(/lib/modules/4.3.0-rc6+/build/vmlinux)
                           bd56c __libc_fork (/usr/lib64/libc-2.17.so)
                           413b2 make_child (/usr/bin/bash)

          bash 18389 [002] 83447.227255: perf_bpf_probe:fork: (ffffffff8109be30)
                          29be31 _do_fork 
(/lib/modules/4.3.0-rc6+/build/vmlinux)
                          96d662 tracesys_phase2 
(/lib/modules/4.3.0-rc6+/build/vmlinux)
                           bd56c __libc_fork (/usr/lib64/libc-2.17.so)
                           413b2 make_child (/usr/bin/bash)

          # perf evlist -v
          perf_bpf_probe:fork: type: 2, size: 112, config: 0x6cf, { 
sample_period, sample_freq }: 1, sample_type: 
IP|TID|TIME|CALLCHAIN|CPU|PERIOD|RAW, disabled: 1, inherit: 1, mmap: 1, comm: 
1, task: 1, sample_id_all: 1, exclude_guest: 1, mmap2: 1, comm_exec: 1
          #

        More work is about to be reviewed, tested and merged that will allow 
the whole
        process of going from a .c file to an .o file via clang, etc to be done
        automagically. (Wang Nan)"

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 13eff5311382cb109725363026cdb4717714bf65
  Author: Ben Greear <greearb@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:07:39 2015 -0700

      ath6kl: implement ethtool stats

      This supports a way to get target stats through normal
      ethtool stats API.

      For instance:
      # ethtool -S wlan1
      NIC statistics:
           tx_pkts_nic: 353
           tx_bytes_nic: 25142
           rx_pkts_nic: 6
           rx_bytes_nic: 996
           d_tx_ucast_pkts: 89
           d_tx_bcast_pkts: 264
           d_tx_ucast_bytes: 3020
           d_tx_bcast_bytes: 22122
      ...

      Signed-off-by: Ben Greear <greearb@xxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 0370248379579aa0274c8f14f2d9af1f32388104
  Author: Ben Greear <greearb@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:07:38 2015 -0700

      ath6kl: break stats gathering code into separate method

      This will allow us to call it from elsewhere when implementing
      ethtool stats.

      Signed-off-by: Ben Greear <greearb@xxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 53cc3291bcfbefc0b3f1e3b7b30ed028b5f1a75d
  Author: Ben Greear <greearb@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 14:53:21 2015 -0700

      ath6kl: fix firmware version assignment

      Improper use of strlcpy caused garbage to be appended to the
      firmware version string.  Fix this by paying attention to the
      ie_lenth.

      Signed-off-by: Ben Greear <greearb@xxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 7fd98524560cac3a629aa1130d45260d4469d254
  Author: Ben Greear <greearb@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 14:53:20 2015 -0700

      ath6kl: add error message to explain lack of HT

      It can take a user a while to understand why their
      NIC that advertises 802.11n support cannot actually
      do 802.11n.  Print out a warning in the logs to save
      the next poor person to use this NIC some trouble.

      Signed-off-by: Ben Greear <greearb@xxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 9c2e90ffc97a8f45b98d81345d8f2eff192d09ef
  Author: Ben Greear <greearb@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 14:53:19 2015 -0700

      ath6kl: report antenna configuration

      This lets 'iw phy phy0 info' report antennas for
      the radio device:

      ...
        Available Antennas: TX 0x2 RX 0x2
        Configured Antennas: TX 0x2 RX 0x2
      ...

      Signed-off-by: Ben Greear <greearb@xxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 5140a5fde2b44d366338e00ad7c2a7ede8be3e65
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 25 15:59:24 2015 +0200

      wil6210: handle failure in Tx vring config

      When configuring Tx vring for new connection,
      WMI call to the firmware may fail. In this case, need to
      clean up properly. In particular, need to call
      cfg80211_del_sta() in case of AP like interface.

      Perform full "disconnect" procedure for proper clean up

      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 817f18534412532198bf3da8dfd2663a1d75a7de
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 25 15:59:23 2015 +0200

      wil6210: fix device ready detection

      Adjust driver behavior during FW boot. Proper sequence of
      events after reset and FW download, is as following:

      - FW prepares mailbox structure and reports IRQ "FW_READY"
      - driver caches mailbox registers, marks mailbox readiness
      - FW sends WMI_FW_READY event, ignore it
      - FW sends WMI_READY event with some data
      - driver stores relevant data marks FW is operational

      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit e3d2ed9434331dedb9eeece586d38aec9e29f60b
  Author: Hamad Kadmany <qca_hkadmany@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 25 15:59:22 2015 +0200

      wil6210: Fix TSO overflow handling

      When Tx ring full is encountered with TSO,
      printout of "DMA error" was wrongly printed.

      In addition, in case of Tx ring full return
      proper error code so that NETDEV_TX_BUSY is
      returned to network stack in order not to
      drop the packets and retry transmission of the
      packets when ring is emptied.

      Signed-off-by: Hamad Kadmany <qca_hkadmany@xxxxxxxxxxxxxxxx>
      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit b03fbab0c4d502510400b7ee5fb3d5bab6d859bf
  Author: Vladimir Kondratiev <QCA_vkondrat@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 25 15:59:21 2015 +0200

      wil6210: ignore selected WMI events

      Some events are ignored for purpose; such events should not
      be treated as "unhandled events". Replace info message
      saying "unhandled" with debug one saying "ignore", to reduce
      dmesg pollution

      Signed-off-by: Vladimir Kondratiev <qca_vkondrat@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit a226b519d43a2a6b37267fea051aacb4a79c9614
  Author: Bartosz Markowski <bartosz.markowski@xxxxxxxxx>
  Date:   Wed Oct 28 15:09:53 2015 +0100

      ath10k: add QCA9377 chipset support

      Add the hardware name, revision and update the pci_id table.

      Currently there're two HW ref. designs available I'm aware of,
      with 1.0.2 and 1.1 chip revisions. I've access and been using
      the first one so far and this patch cover only it.

      QCA9377 inherits most of the stuff (e.g. fw interfaces)
      from QCA61x4 design, so the integration was pretty straightforward.

      Signed-off-by: Bartosz Markowski <bartosz.markowski@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 5036fe0f6fae8a961745f5cf8d82a2a4912ae1ef
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 17:51:14 2015 +0530

      ath10k: reload HT/VHT capabilities on antenna change

      To reflect configured antenna settings in HT/VHT MCS map,
      reload the HT/VHT capabilities upon antenna change.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit f58512f336bbb166610be4a4c42ec1184edcd426
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 17:51:13 2015 +0530

      ath10k: move static HT/VHT capability setup functions

      Move HT and VHT capabiltity setup static functions to avoid
      forward declaration.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 7a1d70ab05488146d20cfc8fb9e4acfd132c7bf5
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 17:51:12 2015 +0530

      ath10k: fill HT/VHT MCS rateset only for configured chainmask

      HT/VHT MCS rateset should be filled only for configured chainmask
      rather that max supported chainmask. Fix that by checking configured
      chainmask while filling HT/VHT MCS rate map.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 166de3f1895dfc49d1f16cc39fd76dab6d7961d2
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 17:51:11 2015 +0530

      ath10k: remove supported chain mask

      Removing supported chainmask fields as it can be always derived
      from num_rf_chains.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit b4c306d0c53ec1b444a4da1f1a3fefaace6b486e
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:01:06 2015 +0530

      ath10k: remove shadow copy of CE descriptors for source ring

      For the messages from host to target, shadow copy of CE descriptors
      are maintained in source ring. Before writing actual CE descriptor,
      first shadow copy is filled and then it is copied to CE address space.
      To optimize in download path and to reduce d-cache pressure, removing
      shadow copy of CE descriptors. This will also reduce driver memory
      consumption by 33KB during on device probing.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 765952e40dbadd4a74a44f55ac1344c338571bb9
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:01:05 2015 +0530

      ath10k: cleanup copy engine send completion

      The physical address necessary to unmap DMA ('bufferp') is stored
      in ath10k_skb_cb as 'paddr'. ath10k doesn't rely on the meta/transfer_id
      when handling send completion (htc ep id is stored in sk_buff control
      buffer). So the unused output arguments {bufferp, nbytesp and 
transfer_idp}
      are removed from CE send completion. This change is needed before removing
      the shadow copy of copy engine (CE) descriptors in follow up patch.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 1e8f86d9cbe9431dcda36fdd85a9f342d639dca5
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:01:04 2015 +0530

      ath10k: remove send completion validation in diag read/write

      CE diag window access is serialized (it has to be by design) so
      there's no way to get a different send completion. so there's no
      need for post completion validation.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit b4e84c5606f6c91a3fff96c25b9347dc75b2002d
  Author: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:01:03 2015 +0530

      ath10k: use local memory instead of shadow descriptor in ce_send

      Currently to avoid uncached memory access while filling up copy engine
      descriptors, shadow descriptors are used. This can be optimized further
      by removing shadow descriptors. To achieve that first shadow ring
      dependency in ce_send is removed by creating local copy of the
      descriptor on stack and make a one-shot copy into the "uncached"
      descriptor.

      Signed-off-by: Rajkumar Manoharan <rmanohar@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 98dd2b92bb591007e82fb58808f60134ee4479bf
  Author: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 21:38:33 2015 +0200

      ath10k: add fw_stats support to 10.4 firmware

      This patch adds support for getting firmware debug stats in 10.4 fw.

      Signed-off-by: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
      Signed-off-by: Tamizh chelvam <c_traja@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit a81a98cee94519807e826e199bb579a546efa289
  Author: Alan Liu <alanliu@xxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 21:38:32 2015 +0200

      ath10k: add FW API support to test mode

      Add WMI-TLV and FW API support in ath10k testmode.
      Ath10k can get right wmi command format from UTF image
      to communicate UTF firmware.

      Signed-off-by: Alan Liu <alanliu@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 7cc8d580228cc712edcf7a1856a3bdb38c164e83
  Author: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
  Date:   Wed Oct 21 19:49:42 2015 +0900

      mmc: dw_mmc: fix the wrong setting for UHS-DDR50 mode

      When card is running with DDR mode, dwmmc needs to set DDR_REG bit at
      UHS_REG register.
      Before this patch, dwmmc controller doesn't consider this.
      If this patch is not applied, CRC or other error shoulds be occurred.

      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Reviewed-by: Alim Akhtar <alim.akhtar@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 98daafd8a09d9a514bc2166709731d659037003b
  Author: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
  Date:   Wed Oct 21 19:49:41 2015 +0900

      mmc: dw_mmc: fix the CardThreshold boundary at CardThrCtl register

      According to DesignWare DoC file, CardThreshold bit should be
      bit[27:16].
      So it's correct to use (0xFFF << 16), not (0x1FFF << 16).

      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Reviewed-by: Alim Akhtar <alim.akhtar@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 4539d36ef2bbf2ee1519e7cfb51c6fdddda3e4e6
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Thu Oct 22 22:53:46 2015 +0300

      mmc: dw_mmc: NULL dereference in error message

      The "host->dms->ch" pointer is NULL here so we can't use it to print the
      error message.

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 6fc774ef4ceca99c35dd3fb230dab618f78c8d6f
  Merge: 4341801 443f8c7
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Thu Oct 29 10:29:18 2015 +0100

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

        - Enable per-event perf_event_attr.inherit setting by config terms, i.e.
          this becomes possible:

              $ perf record -e cycles/inherit/ -e instructions/no-inherit/

          This affects the default, that can be changed globally using the 
--no-inherit
          option.

          This fine grained control appeared in the eBPF patchkit, but this 
added
          flexibility may end up being useful in other scenarios. (Wang Nan)

        - Setup pager when printing usage and help, we have long lists of 
options,
          better use the pager like we do with normal tooling output, i.e. when 
needed,
          and including any error messages in the paged output. (Namhyung Kim)

        - Search for more options when passing args to -h, e.g.: (Arnaldo 
Carvalho de Melo)

          $ perf report -h interface

           Usage: perf report [<options>]

            --gtk    Use the GTK2 interface
            --stdio  Use the stdio interface
            --tui    Use the TUI interface

        - Fix reading separate debuginfo files based on a build-id, problem
          found on a Debian system. (Dima Kogan)

        - Fix endless loop when splitting kallsyms symbols per section for
          handling kcore files, problem found on a s390x system. (Jiri Olsa)

      Infrastructure changes:

        - Prep work for the 'perf stat record' work that will allow generating
          perf.data files with counting data in addition to the sampling mode
          we have now (Jiri Olsa)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 001e2e730ce4e6dc2cd97fcb169097febfc7b200
  Author: Marc Titinger <mtitinger@xxxxxxxxxxxx>
  Date:   Tue Oct 27 10:51:08 2015 +0100

      hwmon: (ina2xx) give precedence to DT over checking for platform data.

      when checking for the value of the shunt resistor.

      Signed-off-by: Marc Titinger <mtitinger@xxxxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit a0de56c81fcf9f1a691e22e519b0dff21c48c645
  Author: Marc Titinger <mtitinger@xxxxxxxxxxxx>
  Date:   Wed Oct 28 12:04:53 2015 +0100

      hwmon: (ina2xx) convert driver to using regmap

      Any sysfs "show" read access from the client app will result in reading
      all registers (8 with ina226). Depending on the host this can limit the
      best achievable read rate.

      This changeset allows for individual register accesses through regmap.

      Tested with BeagleBone Black (Baylibre-ACME) and ina226.

      Signed-off-by: Marc Titinger <mtitinger@xxxxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit d305c4773458fdd6ff9c52bfdea8c67fbd3b2072
  Author: Ã?meric MASCHINO <emeric.maschino@xxxxxxxxx>
  Date:   Tue Sep 22 23:58:48 2015 +0200

      [IA64] Wire up kcmp syscall

      systemd > 218 fails to compile on ia64 with:

           error: â??__NR_kcmpâ?? undeclared [1].

      I've been told that this is because the kcmp syscall hasn't been wired up
      for the ia64 arch [2].

      The proposed patch thus wire up the kcmp syscall for the ia64 arch.

      [1] https://bugs.gentoo.org/show_bug.cgi?id=560492
      [2] https://bugs.gentoo.org/show_bug.cgi?id=560492#c17

      Signed-off-by: Ã?meric MASCHINO <emeric.maschino@xxxxxxxxx>
      Signed-off-by: Tony Luck <tony.luck@xxxxxxxxx>

  commit 62f77f095c27dc6b3536735aa960a8bb21e4c5eb
  Author: Maharaja <c_mkenna@xxxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 11:49:18 2015 +0300

      ath10k: enable adaptive CCA

      European Union has made it mandatory that all devices working in 2.4 GHz
      has to adhere to the ETSI specification (ETSI EN 300 328 V1.9.1)
      beginnig this year. The standard basically speaks about interferences
      in 2.4Ghz band.
      For example, when 802.11 device detects interference, TX must be stopped
      as long as interference is present.

      Adaptive CCA is a feature, when enabled the device learns from the
      environment and configures CCA levels adaptively. This will improve
      detecting interferences and the device can stop trasmissions till the
      interference is present eventually leading to good performances in
      varying interference conditions.

      The patch includes code for enabling adaptive CCA for 10.2.4 firmware on
      QCA988X.

      Signed-off-by: Maharaja <c_mkenna@xxxxxxxxxxxxxxxx>
      Signed-off-by: Manikanta Pubbisetty <c_mpubbi@xxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxxxx>

  commit 97303480753e48fb313dc0e15daaf11b0451cdb8
  Author: Tirumalesh Chalamarla <tchalamarla@xxxxxxxxxx>
  Date:   Tue Sep 22 19:59:48 2015 +0200

      arm64: Increase the max granular size

      Increase the standard cacheline size to avoid having locks in the same
      cacheline.

      Cavium's ThunderX core implements cache lines of 128 byte size. With
      current granulare size of 64 bytes (L1_CACHE_SHIFT=6) two locks could
      share the same cache line leading a performance degradation.
      Increasing the size fixes that.

      Increasing the size has no negative impact to cache invalidation on
      systems with a smaller cache line. There is an impact on memory usage,
      but that's not too important for arm64 use cases.

      Signed-off-by: Tirumalesh Chalamarla <tchalamarla@xxxxxxxxxx>
      Signed-off-by: Robert Richter <rrichter@xxxxxxxxxx>
      Acked-by: Timur Tabi <timur@xxxxxxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 845da6e58e19b932b8364ec3678b8f7f80d6b6a9
  Author: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
  Date:   Sun Oct 25 19:32:43 2015 +0100

      ssb: add Kconfig entry for compiling SoC related code

      This allows saving a little of space when not using ssb on Broadcom SoC.

      Signed-off-by: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 830c7df46247b44aa46ae276073e2e10727c9e93
  Author: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
  Date:   Sun Oct 25 19:32:42 2015 +0100

      ssb: move functions specific to SoC hosted bus to separated file

      This cleans main.c a bit and will allow us to compile SoC related code
      conditionally in the future.

      Signed-off-by: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 399500da18f7fe79699c0e4f603f8874cecb3898
  Author: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
  Date:   Thu Oct 15 07:23:25 2015 +0200

      ssb: pick PCMCIA host code support from b43 driver

      ssb bus can be found on various "host" devices like PCI/PCMCIA/SDIO.
      Every ssb bus contains cores AKA devices.
      The main idea is to have ssb driver scan/initialize bus and register
      ready-to-use cores. This way ssb drivers can operate on a single core
      mostly ignoring underlaying details.

      For some reason PCMCIA support was split between ssb and b43. We got
      PCMCIA host device probing in b43, then bus scanning in ssb and then
      wireless core probing back in b43. The truth is it's very unlikely we
      will ever see PCMCIA ssb device with no 802.11 core but I still don't
      see any advantage of the current architecture.

      With proposed change we get the same functionality with a simpler
      architecture, less Kconfig symbols, one killed EXPORT and hopefully
      cleaner b43. Since b43 supports both: ssb & bcma I prefer to keep ssb
      specific code in ssb driver.

      This mostly moves code from b43's pcmcia.c to bridge_pcmcia_80211.c. We
      already use similar solution with b43_pci_bridge.c. I didn't use "b43"
      in name of this new file as in theory any driver can operate on wireless
      core.

      Signed-off-by: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 0117e78aec73f1c0869e50d11a255b28aa4db8f0
  Author: Marty Faltesek <mfaltesek@xxxxxxxxxx>
  Date:   Sun Oct 25 22:54:01 2015 -0700

      mwifiex: toggle carrier state in start_ap/stop_ap.

      In uap mode the carrier is not enabled until after the first STA joins.
      The carrier triggers the bridge to start its state machine, and if STP
      is enabled, it takes 4 seconds as it transitions from disabled to
      forwarding. During this time the bridge drops all traffic, and the EAPOL
      handshake times out after 3 seconds, preventing stations from joining.

      Follow the logic used in mac80211 and start the carrier in start_ap
      and disable it in stop_ap. This has a nice benefit of allowing the
      first station connection time to be reduced by up to 75% when STP is
      in use.

      Signed-off-by: Martin Faltesek <mfaltesek@xxxxxxxxxx>
      Signed-off-by: Amitkumar Karwar <akarwar@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 072255241d2e3e9c1e23fc693f0333be72adfe2a
  Author: yfw <fengwei.yin@xxxxxxxxxx>
  Date:   Mon Oct 26 10:36:22 2015 +0800

      wcn36xx: Remove warning message when dev is NULL for arm64 dma_alloc.

      arm64 has requirement that all the dma operations have actual device.
      Otherwise, following warnning message shown and dma allocation fails:

      WARNING: CPU: 0 PID: 954 at arch/arm64/mm/dma-mapping.c:106 
__dma_alloc+0x24c/0x258()
      Use an actual device structure for DMA allocation
      Modules linked in: wcn36xx wcn36xx_platform
      CPU: 0 PID: 954 Comm: ifconfig Not tainted 4.0.0+ #14
      Hardware name: Qualcomm Technologies, Inc. MSM 8916 MTP (DT)
      Call trace:
      [<ffffffc000089904>] dump_backtrace+0x0/0x124
      [<ffffffc000089a38>] show_stack+0x10/0x1c
      [<ffffffc000627114>] dump_stack+0x80/0xc4
      [<ffffffc0000b2e64>] warn_slowpath_common+0x98/0xd0
      [<ffffffc0000b2ee8>] warn_slowpath_fmt+0x4c/0x58
      [<ffffffc00009487c>] __dma_alloc+0x248/0x258
      [<ffffffbffc009270>] wcn36xx_dxe_allocate_mem_pools+0xc4/0x108 [wcn36xx]
      [<ffffffbffc0079c4>] wcn36xx_start+0x38/0x240 [wcn36xx]
      [<ffffffc0005f161c>] ieee80211_do_open+0x1b0/0x9a4
      [<ffffffc0005f1e68>] ieee80211_open+0x58/0x68
      [<ffffffc00051693c>] __dev_open+0xb0/0x120
      [<ffffffc000516c10>] __dev_change_flags+0x88/0x150
      [<ffffffc000516cf4>] dev_change_flags+0x1c/0x5c
      [<ffffffc000570950>] devinet_ioctl+0x644/0x6f0

      Signed-off-by: Yin, Fengwei <fengwei.yin@xxxxxxxxxx>
      Acked-by: Bjorn Andersson <bjorn.andersson@xxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 8e8e54c490032f15779d7b199548eb0143b70f0f
  Author: Bob Copeland <me@xxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 13:42:15 2015 -0400

      wcn36xx: introduce per-channel ring buffer locks

      wcn36xx implements a ring buffer for transmitted frames for each
      (high and low priority) DMA channel.  The ring buffers are lockless:
      new frames are inserted at the head of the queue, while finished
      packets are reaped from the tail.

      Unfortunately, the list manipulations are missing any kind of barriers
      so are susceptible to various races: for example, a TX completion
      handler might read an updated desc->ctrl before the head has actually
      advanced, and then null out the ctl->skb pointer while it is still
      being used in the TX path.

      Simplify things here by adding a spin lock when traversing the ring.
      This change increased stability for me without adding any noticeable
      overhead on my platform (xperia z).

      Signed-off-by: Bob Copeland <me@xxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 56bae464275ac57cbf993f3ed15e96d6e1ec00a2
  Author: Zefir Kurtisi <zefir.kurtisi@xxxxxxxxxxx>
  Date:   Tue Oct 20 14:19:26 2015 +0200

      ath9k: fix phyerror codes

      Some of the ath9k_phyerr enums were wrong from the
      beginning (and even before). Most of the time the
      codes were used for counters to be displayed over
      debugfs, which made this a non-functional issue.

      Some (e.g. ATH9K_PHYERR_FALSE_RADAR_EXT) are used
      for radar detection and require the correct code
      to work as intended.

      This patch includes:
      a) fixes
        ATH9K_PHYERR_FALSE_RADAR_EXT:    24 => 36
        ATH9K_PHYERR_CCK_LENGTH_ILLEGAL: 32 => 28
        ATH9K_PHYERR_CCK_POWER_DROP:     33 => 29
        ATH9K_PHYERR_HT_CRC_ERROR:       34 => 32
        ATH9K_PHYERR_HT_LENGTH_ILLEGAL:  35 => 33
        ATH9K_PHYERR_HT_RATE_ILLEGAL:    36 => 34

      b) extensions
        ATH9K_PHYERR_CCK_BLOCKER = 24
        ATH9K_PHYERR_HT_ZLF      = 35
        ATH9K_PHYERR_GREEN_FIELD = 37

      Aside from the correction and completion made in
      the enum, the patch also extends the display of
      the related counters in the debugfs.

      Signed-off-by: Zefir Kurtisi <zefir.kurtisi@xxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 989b8376f33721f7206dd058330da05972a71384
  Author: John Linville <linville@xxxxxxxxxxxxx>
  Date:   Mon Oct 19 11:15:00 2015 -0400

      orinoco_usb: return error in ezusb_probe when alloc_orinocodev fails

      The current code exits after alloc_orinocodev, but fails to change the
      return value to something that indicates the failure.  This patch
      changes the return value to -ENOMEM.

      https://bugzilla.kernel.org/show_bug.cgi?id=106181

      Signed-off-by: John W. Linville <linville@xxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit dae0412d0caa4948da07fe4ad91352b5b61a70ec
  Author: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 21:04:14 2015 +0200

      airo: fix scan after SIOCSIWAP (airo_set_wap)

      SIOCSIWAP (airo_set_wap) affects scan: only the AP specified by
      SIOCSIWAP is present in scan results.

      This makes NetworkManager work for the first time but then unable to
      find any other APs.

      Clear APList before starting scan and set it back after scan completes
      to work-around the problem.

      To avoid losing packets during scan, modify disable_MAC() to omit
      netif_carrier_off() call when lock == 2.

      Signed-off-by: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit f675f93a797a18fc1f82030d56d02286039d0fb3
  Author: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 21:04:13 2015 +0200

      airo: Track APList_rid in struct airo_info

      Instead of dynamically allocating APList, make it a member of struct
      airo_info to always track state of APList_rid.
      This simplifies suspend/resume and allows removal of readAPListRid.

      Signed-off-by: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 6e4a0f2b5c56af6be43b546df16b1ece7df537d8
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Mon Oct 26 12:53:17 2015 +0900

      arm64: remove bogus TASK_SIZE_64 check

      The comparison between TASK_SIZE_64 and MODULES_VADDR does not
      make any sense on arm64, it is simply something that has been
      carried over from the ARM port which arm64 is based on. So drop it.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit b3bcb1b27203c24fbf181748cec6eec10419678d
  Merge: 6d08f61 2edb7a3
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
  Date:   Wed Oct 28 20:48:26 2015 +0200

      Merge tag 'iwlwifi-next-for-kalle-2015-10-25' of 
https://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-next

      * bug fix for TDLS
      * fixes and cleanups in scan
      * support of several scan plans
      * improvements in FTM
      * fixes in FW API
      * improvements in the failure paths when the bus is dead
      * other various small things here and there

  commit f90df5e27d978c492c4d911476622a7413621213
  Author: Kefeng Wang <wangkefeng.wang@xxxxxxxxxx>
  Date:   Mon Oct 26 11:48:16 2015 +0800

      arm64: make Timer Interrupt Frequency selectable

      It allows a selectable timer interrupt frequency of 100, 250, 300 and 
1000 HZ.
      We will get better performance when choose a suitable frequency in some 
scene.

      Cc: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Kefeng Wang <wangkefeng.wang@xxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit f23bef34d34b6325916daddc4cfdeee53d5139e6
  Author: Alexander Kuleshov <kuleshovmail@xxxxxxxxx>
  Date:   Mon Oct 26 17:26:57 2015 +0600

      arm64/mm: use PAGE_ALIGNED instead of IS_ALIGNED

      The <linux/mm.h> already provides the PAGE_ALIGNED macro. Let's
      use this macro instead of IS_ALIGNED and passing PAGE_SIZE directly.

      Signed-off-by: Alexander Kuleshov <kuleshovmail@xxxxxxxxx>
      Acked-by: Laura Abbott <laura@xxxxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 59f2413573e4ee1e76062beef4a359156500db94
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 27 12:05:55 2015 +0000

      arm64: cachetype: fix definitions of ICACHEF_* flags

      test_bit and set_bit take the bit number to operate on, rather than a
      mask. This patch fixes the ICACHEF_* definitions so that they represent
      the bit index in __icache_flags as opposed to the mask returned by the
      BIT macro.

      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Reviewed-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit fde4a59fc1c55709b96d0f07110895f20015b6cc
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Tue Oct 27 12:05:54 2015 +0000

      arm64: cpufeature: declare enable_cpu_capabilities as static

      enable_cpu_capabilities is only called from within cpufeature.c, so it
      can be declared static.

      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 8f2279d5d908119a08e906be1c6b69c744d0c379
  Author: Tony Lindgren <tony@xxxxxxxxxxx>
  Date:   Wed Oct 28 10:16:04 2015 -0700

      usb: musb: omap2430: Fix regression caused by driver core change

      Commit ddef08dd00f5 ("Driver core: wakeup the parent device before trying
      probe") started automatically ensuring the parent device is enabled when
      the child gets probed.

      This however caused a regression for MUSB omap2430 interface as the
      runtime PM for the parent device needs the child initialized to access
      the MUSB hardware registers.

      Let's delay the enabling of PM runtime for the parent until the child
      has been properly initialized as suggested in an earlier patch by
      Grygorii Strashko <grygorii.strashko@xxxxxx>.

      In addition to delaying pm_runtime_enable, we now also need to make sure
      the parent is enabled during omap2430_musb_init. We also want to propagate
      an error from omap2430_runtime_resume if struct musb is not initialized.

      Note that we use pm_runtime_put_noidle here for both the child and parent
      to prevent an extra runtime_suspend/resume cycle.

      Let's also add some comments to avoid confusion between the
      two different devices.

      Fixes: ddef08dd00f5 ("Driver core: wakeup the parent device before
      trying probe")
      Suggested-by: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Reviewed-by: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Acked-by: Felipe Balbi <balbi@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 9702970c7bd3e2d6fecb642a190269131d4ac16c
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Wed Oct 28 16:56:13 2015 +0000

      Revert "ARM64: unwind: Fix PC calculation"

      This reverts commit e306dfd06fcb44d21c80acb8e5a88d55f3d1cf63.

      With this patch applied, we were the only architecture making this sort
      of adjustment to the PC calculation in the unwinder. This causes
      problems for ftrace, where the PC values are matched against the
      contents of the stack frames in the callchain and fail to match any
      records after the address adjustment.

      Whilst there has been some effort to change ftrace to workaround this,
      those patches are not yet ready for mainline and, since we're the odd
      architecture in this regard, let's just step in line with other
      architectures (like arch/arm/) for now.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit e13d918a19a7b6cba62b32884f5e336e764c2cc6
  Author: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
  Date:   Tue Oct 27 17:29:10 2015 +0000

      arm64: kernel: fix tcr_el1.t0sz restore on systems with extended idmap

      Commit dd006da21646 ("arm64: mm: increase VA range of identity map")
      introduced a mechanism to extend the virtual memory map range
      to support arm64 systems with system RAM located at very high offset,
      where the identity mapping used to enable/disable the MMU requires
      additional translation levels to map the physical memory at an equal
      virtual offset.

      The kernel detects at boot time the tcr_el1.t0sz value required by the
      identity mapping and sets-up the tcr_el1.t0sz register field accordingly,
      any time the identity map is required in the kernel (ie when enabling the
      MMU).

      After enabling the MMU, in the cold boot path the kernel resets the
      tcr_el1.t0sz to its default value (ie the actual configuration value for
      the system virtual address space) so that after enabling the MMU the
      memory space translated by ttbr0_el1 is restored as expected.

      Commit dd006da21646 ("arm64: mm: increase VA range of identity map")
      also added code to set-up the tcr_el1.t0sz value when the kernel resumes
      from low-power states with the MMU off through cpu_resume() in order to
      effectively use the identity mapping to enable the MMU but failed to add
      the code required to restore the tcr_el1.t0sz to its default value, when
      the core returns to the kernel with the MMU enabled, so that the kernel
      might end up running with tcr_el1.t0sz value set-up for the identity
      mapping which can be lower than the value required by the actual virtual
      address space, resulting in an erroneous set-up.

      This patchs adds code in the resume path that restores the tcr_el1.t0sz
      default value upon core resume, mirroring this way the cold boot path
      behaviour therefore fixing the issue.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: Catalin Marinas <catalin.marinas@xxxxxxx>
      Fixes: dd006da21646 ("arm64: mm: increase VA range of identity map")
      Acked-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Signed-off-by: James Morse <james.morse@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit 589cb22bbedacf325951014c07a35a2b01ca57f6
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Thu Oct 15 13:55:53 2015 +0100

      arm64: compat: fix stxr failure case in SWP emulation

      If the STXR instruction fails in the SWP emulation code, we leave *data
      overwritten with the loaded value, therefore corrupting the data written
      by a subsequent, successful attempt.

      This patch re-jigs the code so that we only write back to *data once we
      know that the update has happened.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Fixes: bd35a4adc413 ("arm64: Port SWP/SWPB emulation support from arm")
      Reported-by: Shengjiu Wang <shengjiu.wang@xxxxxxxxxxxxx>
      Reported-by: Vladimir Murzin <vladimir.murzin@xxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>

  commit 1bd5dfe41b994a6e793363894befef76626965a9
  Author: Aaro Koskinen <aaro.koskinen@xxxxxx>
  Date:   Mon Oct 26 20:23:53 2015 +0200

      ARM: OMAP1: fix incorrect INT_DMA_LCD

      Commit 685e2d08c54b ("ARM: OMAP1: Change interrupt numbering for
      sparse IRQ") turned on SPARSE_IRQ on OMAP1, but forgot to change
      the number of INT_DMA_LCD. This broke the boot at least on Nokia 770,
      where the device hangs during framebuffer initialization.

      Fix by defining INT_DMA_LCD like the other interrupts.

      Cc: stable@xxxxxxxxxxxxxxx # v4.2+
      Fixes: 685e2d08c54b ("ARM: OMAP1: Change interrupt numbering for sparse 
IRQ")
      Signed-off-by: Aaro Koskinen <aaro.koskinen@xxxxxx>
      Signed-off-by: Tony Lindgren <tony@xxxxxxxxxxx>

  commit 4edf30e39e6cff32390eaff6a1508969b3cd967b
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:17 2015 +0000

      perf bpf: Collect perf_evsel in BPF object files

      This patch creates a 'struct perf_evsel' for every probe in a BPF object
      file(s) and fills 'struct evlist' with them. The previously introduced
      dummy event is now removed. After this patch, the following command:

       # perf record --event filter.o ls

      Can trace on each of the probes defined in filter.o.

      The core of this patch is bpf__foreach_tev(), which calls a callback
      function for each 'struct probe_trace_event' event for a bpf program
      with each associated file descriptors. The add_bpf_event() callback
      creates evsels by calling parse_events_add_tracepoint().

      Since bpf-loader.c will not be built if libbpf is turned off, an empty
      bpf__foreach_tev() is defined in bpf-loader.h to avoid build errors.

      Committer notes:

      Before:

        # /tmp/oldperf record --event /tmp/foo.o -a usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.198 MB perf.data ]
        # perf evlist
        /tmp/foo.o
        # perf evlist -v
        /tmp/foo.o: type: 1, size: 112, config: 0x9, { sample_period,
        sample_freq }: 4000, sample_type: IP|TID|TIME|CPU|PERIOD, disabled: 1,
        inherit: 1, mmap: 1, comm: 1, freq: 1, task: 1, sample_id_all: 1,
        exclude_guest: 1, mmap2: 1, comm_exec: 1

      I.e. we create just the PERF_TYPE_SOFTWARE (type: 1),
      PERF_COUNT_SW_DUMMY(config 0x9) event, now, with this patch:

        # perf record --event /tmp/foo.o -a usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.210 MB perf.data ]
        # perf evlist -v
        perf_bpf_probe:fork: type: 2, size: 112, config: 0x6bd, { sample_period,
        sample_freq }: 1, sample_type: IP|TID|TIME|CPU|PERIOD|RAW, disabled: 1,
        inherit: 1, mmap: 1, comm: 1, task: 1, sample_id_all: 1, exclude_guest:
        1, mmap2: 1, comm_exec: 1
        #

      We now have a PERF_TYPE_SOFTWARE (type: 1), but the config states 0x6bd,
      which is how, after setting up the event via the kprobes interface, the
      'perf_bpf_probe:fork' event is accessible via the perf_event_open
      syscall. This is all transient, as soon as the 'perf record' session
      ends, these probes will go away.

      To see how it looks like, lets try doing a neverending session, one that
      expects a control+C to end:

        # perf record --event /tmp/foo.o -a

      So, with that in place, we can use 'perf probe' to see what is in place:

        # perf probe -l
          perf_bpf_probe:fork  (on _do_fork@acme/git/linux/kernel/fork.c)

      We also can use debugfs:

        [root@felicio ~]# cat /sys/kernel/debug/tracing/kprobe_events
        p:perf_bpf_probe/fork _text+638512

      Ok, now lets stop and see if we got some forks:

        [root@felicio linux]# perf record --event /tmp/foo.o -a
        ^C[ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.325 MB perf.data (111 samples) ]

        [root@felicio linux]# perf script
            sshd  1271 [003] 81797.507678: perf_bpf_probe:fork: 
(ffffffff8109be30)
            sshd 18309 [000] 81797.524917: perf_bpf_probe:fork: 
(ffffffff8109be30)
            sshd 18309 [001] 81799.381603: perf_bpf_probe:fork: 
(ffffffff8109be30)
            sshd 18309 [001] 81799.408635: perf_bpf_probe:fork: 
(ffffffff8109be30)
        <SNIP>

      Sure enough, we have 111 forks :-)

      Callchains seems to work as well:

        # perf report --stdio --no-child
        # To display the perf.data header info, please use 
--header/--header-only options.
        #
        # Total Lost Samples: 0
        #
        # Samples: 562  of event 'perf_bpf_probe:fork'
        # Event count (approx.): 562
        #
        # Overhead  Command   Shared Object     Symbol
        # ........  ........  ................  ............
        #
            44.66%  sh        [kernel.vmlinux]  [k] _do_fork
                          |
                          ---_do_fork
                             entry_SYSCALL_64_fastpath
                             __libc_fork
                             make_child

          26.16%  make      [kernel.vmlinux]  [k] _do_fork
      <SNIP>
        #

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-7-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 1e5e3ee8ff3877db6943032b54a6ac21c095affd
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:16 2015 +0000

      perf tools: Load eBPF object into kernel

      This patch utilizes bpf_object__load() provided by libbpf to load all
      objects into kernel.

      Committer notes:

      Testing it:

      When using an incorrect kernel version number, i.e., having this in your
      eBPF proggie:

        int _version __attribute__((section("version"), used)) = 0x40100;

      For a 4.3.0-rc6+ kernel, say, this happens and needs checking at event
      parsing time, to provide a better error report to the user:

        # perf record --event /tmp/foo.o sleep 1
        libbpf: load bpf program failed: Invalid argument
        libbpf: -- BEGIN DUMP LOG ---
        libbpf:

        libbpf: -- END LOG --
        libbpf: failed to load program 'fork=_do_fork'
        libbpf: failed to load object '/tmp/foo.o'
        event syntax error: '/tmp/foo.o'
                             \___ Invalid argument: Are you root and runing a 
CONFIG_BPF_SYSCALL kernel?

        (add -v to see detail)
        Run 'perf list' for a list of valid events

         Usage: perf record [<options>] [<command>]
            or: perf record [<options>] -- <command> [<options>]

            -e, --event <event>   event selector. use 'perf list' to list 
available events

      If we instead make it match, i.e. use 0x40300 on this v4.3.0-rc6+
      kernel, the whole process goes thru:

        # perf record --event /tmp/foo.o -a usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.202 MB perf.data ]
        # perf evlist -v
        /tmp/foo.o: type: 1, size: 112, config: 0x9, { sample_period,
        sample_freq }: 4000, sample_type: IP|TID|TIME|CPU|PERIOD, disabled: 1,
        inherit: 1, mmap: 1, comm: 1, freq: 1, task: 1, sample_id_all: 1,
        exclude_guest: 1, mmap2: 1, comm_exec: 1
        #

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-6-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit aa3abf30bb28addcf593578d37447d42e3f65fc3
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:15 2015 +0000

      perf tools: Create probe points for BPF programs

      This patch introduces bpf__{un,}probe() functions to enable callers to
      create kprobe points based on section names a BPF program. It parses the
      section names in the program and creates corresponding 'struct
      perf_probe_event' structures. The parse_perf_probe_command() function is
      used to do the main parsing work. The resuling 'struct perf_probe_event'
      is stored into program private data for further using.

      By utilizing the new probing API, this patch creates probe points during
      event parsing.

      To ensure probe points be removed correctly, register an atexit hook so
      even perf quit through exit() bpf__clear() is still called, so probing
      points are cleared. Note that bpf_clear() should be registered before
      bpf__probe() is called, so failure of bpf__probe() can still trigger
      bpf__clear() to remove probe points which are already probed.

      strerror style error reporting scaffold is created by this patch.
      bpf__strerror_probe() is the first error reporting function in
      bpf-loader.c.

      Committer note:

      Trying it:

      To build a test eBPF object file:

      I am testing using a script I built from the 'perf test -v LLVM' output:

        $ cat ~/bin/hello-ebpf
        export KERNEL_INC_OPTIONS="-nostdinc -isystem 
/usr/lib/gcc/x86_64-redhat-linux/4.8.3/include 
-I/home/acme/git/linux/arch/x86/include -Iarch/x86/include/generated/uapi 
-Iarch/x86/include/generated -I/home/acme/git/linux/include -Iinclude 
-I/home/acme/git/linux/arch/x86/include/uapi -Iarch/x86/include/generated/uapi 
-I/home/acme/git/linux/include/uapi -Iinclude/generated/uapi -include 
/home/acme/git/linux/include/linux/kconfig.h"
        export WORKING_DIR=/lib/modules/4.2.0/build
        export CLANG_SOURCE=-
        export CLANG_OPTIONS=-xc

        OBJ=/tmp/foo.o
        rm -f $OBJ
        echo '__attribute__((section("fork=do_fork"), used)) int fork(void 
*ctx) {return 0;} char _license[] __attribute__((section("license"), used)) = 
"GPL";int _version __attribute__((section("version"), used)) = 0x40100;' | \
        clang -D__KERNEL__ $CLANG_OPTIONS $KERNEL_INC_OPTIONS -Wno-unused-value 
-Wno-pointer-sign -working-directory $WORKING_DIR -c "$CLANG_SOURCE" -target 
bpf -O2 -o /tmp/foo.o && file $OBJ

       ---

      First asking to put a probe in a function not present in the kernel
      (misses the initial _):

        $ perf record --event /tmp/foo.o sleep 1
        Probe point 'do_fork' not found.
        event syntax error: '/tmp/foo.o'
                             \___ You need to check probing points in BPF file

        (add -v to see detail)
        Run 'perf list' for a list of valid events

         Usage: perf record [<options>] [<command>]
            or: perf record [<options>] -- <command> [<options>]

            -e, --event <event>   event selector. use 'perf list' to list 
available events
        $

       ---

      Now, with "__attribute__((section("fork=_do_fork"), used)):

       $ grep _do_fork /proc/kallsyms
       ffffffff81099ab0 T _do_fork
       $ perf record --event /tmp/foo.o sleep 1
       Failed to open kprobe_events: Permission denied
       event syntax error: '/tmp/foo.o'
                            \___ Permission denied

       ---

      Cool, we need to provide some better hints, "kprobe_events" is too low
      level, one doesn't strictly need to know the precise details of how
      these things are put in place, so something that shows the command
      needed to fix the permissions would be more helpful.

      Lets try as root instead:

        # perf record --event /tmp/foo.o sleep 1
        Lowering default frequency rate to 1000.
        Please consider tweaking /proc/sys/kernel/perf_event_max_sample_rate.
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.013 MB perf.data ]
        # perf evlist
        /tmp/foo.o
        [root@felicio ~]# perf evlist -v
        /tmp/foo.o: type: 1, size: 112, config: 0x9, { sample_period,
        sample_freq }: 1000, sample_type: IP|TID|TIME|PERIOD, disabled: 1,
        inherit: 1, mmap: 1, comm: 1, freq: 1, enable_on_exec: 1, task: 1,
        sample_id_all: 1, exclude_guest: 1, mmap2: 1, comm_exec: 1

       ---

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-5-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 84c86ca12b2189df751eed7b2d67cb63bc8feda5
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:14 2015 +0000

      perf tools: Enable passing bpf object file to --event

      By introducing new rules in tools/perf/util/parse-events.[ly], this
      patch enables 'perf record --event bpf_file.o' to select events by an
      eBPF object file. It calls parse_events_load_bpf() to load that file,
      which uses bpf__prepare_load() and finally calls bpf_object__open() for
      the object files.

      After applying this patch, commands like:

       # perf record --event foo.o sleep

      become possible.

      However, at this point it is unable to link any useful things onto the
      evsel list because the creating of probe points and BPF program
      attaching have not been implemented.  Before real events are possible to
      be extracted, to avoid perf report error because of empty evsel list,
      this patch link a dummy evsel. The dummy event related code will be
      removed when probing and extracting code is ready.

      Commiter notes:

      Using it:

        $ ls -la foo.o
        ls: cannot access foo.o: No such file or directory
        $ perf record --event foo.o sleep
        libbpf: failed to open foo.o: No such file or directory
        event syntax error: 'foo.o'
                             \___ BPF object file 'foo.o' is invalid

        (add -v to see detail)
        Run 'perf list' for a list of valid events

         Usage: perf record [<options>] [<command>]
            or: perf record [<options>] -- <command> [<options>]

            -e, --event <event>   event selector. use 'perf list' to list 
available events
        $

        $ file /tmp/build/perf/perf.o
        /tmp/build/perf/perf.o: ELF 64-bit LSB relocatable, x86-64, version 1 
(SYSV), not stripped
        $ perf record --event /tmp/build/perf/perf.o sleep
        libbpf: /tmp/build/perf/perf.o is not an eBPF object file
        event syntax error: '/tmp/build/perf/perf.o'
                             \___ BPF object file '/tmp/build/perf/perf.o' is 
invalid

        (add -v to see detail)
        Run 'perf list' for a list of valid events

         Usage: perf record [<options>] [<command>]
            or: perf record [<options>] -- <command> [<options>]

            -e, --event <event>   event selector. use 'perf list' to list 
available events
        $

        $ file /tmp/foo.o
        /tmp/foo.o: ELF 64-bit LSB relocatable, no machine, version 1 (SYSV), 
not stripped
        $ perf record --event /tmp/foo.o sleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.013 MB perf.data ]
        $ perf evlist
        /tmp/foo.o
        $ perf evlist  -v
        /tmp/foo.o: type: 1, size: 112, config: 0x9, { sample_period, 
sample_freq }: 4000, sample_type: IP|TID|TIME|PERIOD, disabled: 1, inherit: 1, 
mmap: 1, comm: 1, freq: 1, enable_on_exec: 1, task: 1, sample_id_all: 1, 
exclude_guest: 1, mmap2: 1, comm_exec: 1
        $

      So, type 1 is PERF_TYPE_SOFTWARE, config 0x9 is PERF_COUNT_SW_DUMMY, ok.

        $ perf report --stdio
        Error:
        The perf.data file has no samples!
        # To display the perf.data header info, please use 
--header/--header-only options.
        #
        $

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-4-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 69d262a93a25cf475012ea2e00aeb29f4932c028
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:13 2015 +0000

      perf ebpf: Add the libbpf glue

      The 'bpf-loader.[ch]' files are introduced in this patch. Which will be
      the interface between perf and libbpf. bpf__prepare_load() resides in
      bpf-loader.c. Following patches will enrich these two files.

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-3-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ed63f34c026e9a60d17fa750ecdfe3f600d49393
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 14 12:41:12 2015 +0000

      perf tools: Make perf depend on libbpf

      By adding libbpf into perf's Makefile, this patch enables perf to build
      libbpf if libelf is found and neither NO_LIBELF nor NO_LIBBPF is set.

      The newly introduced code is similar to how libapi and libtraceevent
      are wired into Makefile.perf.

      MANIFEST is also updated for 'make perf-*-src-pkg'.

      Append make_no_libbpf to tools/perf/tests/make.

      The 'bpf' feature check is appended into default FEATURE_TESTS and
      FEATURE_DISPLAY, so perf will check the API version of bpf in
      /path/to/kernel/include/uapi/linux/bpf.h. Which should not fail except
      when we are trying to port this code to an old kernel.

      Error messages are also updated to notify users about the lack of BPF
      support in 'perf record' if libelf is missing or the BPF API check
      failed.

      tools/lib/bpf is added to TAG_FOLDERS to allow us to navigate libbpf
      files when working on perf using tools/perf/tags.

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: He Kuang <hekuang@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kaixu Xia <xiakaixu@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1444826502-49291-2-git-send-email-wangnan0@xxxxxxxxxx
      [ Document NO_LIBBPF in Makefile.perf, noted by Jiri Olsa ]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit fe326c5cc07cd265abad29c35c142cfae09889e4
  Author: Magnus Damm <damm+renesas@xxxxxxxxxxxxx>
  Date:   Wed Oct 28 10:43:23 2015 +0900

      clocksource/drivers/sh_mtu2: Fix multiple shutdown call issue

      On the r7s72100 Genmai board the MTU2 driver currently triggers a common
      clock framework WARN_ON(enable_count) when disabling the clock due to
      the MTU2 driver after recent callback rework may call 
->set_state_shutdown()
      multiple times. A similar issue was spotted for the TMU driver and fixed 
in:
      452b132 clocksource/drivers/sh_tmu: Fix traceback spotted in -next

      On r7s72100 Genmai v4.3-rc7 built with shmobile_defconfig spits out the
      following during boot:

      sh_mtu2 fcff0000.timer: ch0: used for clock events
      ------------[ cut here ]------------
      WARNING: CPU: 0 PID: 1 at drivers/clk/clk.c:675 
clk_core_disable+0x2c/0x6c()
      CPU: 0 PID: 1 Comm: swapper/0 Not tainted 4.3.0-rc7 #1
      Hardware name: Generic R7S72100 (Flattened Device Tree)
      Backtrace:
      [<c00133d4>] (dump_backtrace) from [<c0013570>] (show_stack+0x18/0x1c)
      [<c0013558>] (show_stack) from [<c01c7aac>] (dump_stack+0x74/0x90)
      [<c01c7a38>] (dump_stack) from [<c00272fc>] 
(warn_slowpath_common+0x88/0xb4)
      [<c0027274>] (warn_slowpath_common) from [<c0027400>] 
(warn_slowpath_null+0x24/0x2c)
      [<c00273dc>] (warn_slowpath_null) from [<c03a9320>] 
(clk_core_disable+0x2c/0x6c)
      [<c03a92f4>] (clk_core_disable) from [<c03aa0a0>] (clk_disable+0x40/0x4c)
      [<c03aa060>] (clk_disable) from [<c0395d2c>] (sh_mtu2_disable+0x24/0x50)
      [<c0395d08>] (sh_mtu2_disable) from [<c0395d6c>] 
(sh_mtu2_clock_event_shutdown+0x14/0x1c)
      [<c0395d58>] (sh_mtu2_clock_event_shutdown) from [<c007d7d0>] 
(clockevents_switch_state+0xc8/0x114)
      [<c007d708>] (clockevents_switch_state) from [<c007d834>] 
(clockevents_shutdown+0x18/0x28)
      [<c007d81c>] (clockevents_shutdown) from [<c007dd58>] 
(clockevents_exchange_device+0x70/0x78)
      [<c007dce8>] (clockevents_exchange_device) from [<c007e578>] 
(tick_check_new_device+0x88/0xe0)
      [<c007e4f0>] (tick_check_new_device) from [<c007daf0>] 
(clockevents_register_device+0xac/0x120)
      [<c007da44>] (clockevents_register_device) from [<c0395be8>] 
(sh_mtu2_probe+0x230/0x350)
      [<c03959b8>] (sh_mtu2_probe) from [<c028b6f0>] 
(platform_drv_probe+0x50/0x98)

      Reported-by: Chris Brandt <chris.brandt@xxxxxxxxxxx>
      Fixes: 19a9ffb ("clockevents/drivers/sh_mtu2: Migrate to new 'set-state' 
interface")
      Cc: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Cc: Laurent Pinchart <laurent.pinchart+renesas@xxxxxxxxxxxxxxxx>
      Signed-off-by: Magnus Damm <damm+renesas@xxxxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
      Reviewed-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>

  commit 25d464183ca3522ae27ec1bbef5ddcbbbef65017
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Oct 5 15:41:36 2015 +0530

      ARC: mm: PAE40: tlbex.S: Explicitify the size of pte_t

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 28b4af729fc4f7ee748c4bccb50ba5a6066418eb
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Sep 14 18:43:42 2015 -0700

      ARC: mm: PAE40: switch to using phys_addr_t for physical addresses

      That way a single flip of phys_addr_t to 64 bit ensures all places
      dealing with physical addresses get correct data

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 29e332261d2ae0900e3befffd90cd70594cd7a84
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Wed Oct 28 19:06:10 2015 +0530

      ARC: mm: HIGHMEM: populate high memory from DT

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 443f8c75e8d58d394b0e65b47e02e5cd8ed32b41
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Mon Oct 26 14:51:30 2015 +0100

      perf symbols: Fix endless loop in dso__split_kallsyms_for_kcore

      Currently we split symbols based on the map comparison, but symbols are 
stored
      within dso objects and maps could point into same dso objects (kernel 
maps).

      Hence we could end up changing rbtree we are currently iterating and mess 
it
      up. It's easily reproduced on s390x by running:

        $ perf record -a -- sleep 3
        $ perf buildid-list -i perf.data --with-hits

      The fix is to compare dso objects instead.

      Reported-by: Michael Petlan <mpetlan@xxxxxxxxxx>
      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Acked-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: http://lkml.kernel.org/r/20151026135130.GA26003@xxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 374ce938aaeb481114b2a8fdedd261f9b2ff9b2b
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Wed Oct 28 10:55:02 2015 +0000

      perf tools: Enable pre-event inherit setting by config terms

      This patch allows perf record setting event's attr.inherit bit by
      config terms like:

        # perf record -e cycles/no-inherit/ ...
        # perf record -e cycles/inherit/ ...

      So user can control inherit bit for each event separately.

      In following example, a.out fork()s in main then do some complex
      CPU intensive computations in both of its children.

      Basic result with and without inherit:

        # perf record -e cycles -e instructions ./a.out
        [ perf record: Woken up 9 times to write data ]
        [ perf record: Captured and wrote 2.205 MB perf.data (47920 samples) ]
        # perf report --stdio
        # ...
        # Samples: 23K of event 'cycles'
        # Event count (approx.): 23641752891
        ...
        # Samples: 24K of event 'instructions'
        # Event count (approx.): 30428312415

        # perf record -i -e cycles -e instructions ./a.out
        [ perf record: Woken up 5 times to write data ]
        [ perf record: Captured and wrote 1.111 MB perf.data (24019 samples) ]
        ...
        # Samples: 12K of event 'cycles'
        # Event count (approx.): 11699501775
        ...
        # Samples: 12K of event 'instructions'
        # Event count (approx.): 15058023559

      Cancel inherit for one event when globally enable:

        # perf record -e cycles/no-inherit/ -e instructions ./a.out
        [ perf record: Woken up 7 times to write data ]
        [ perf record: Captured and wrote 1.660 MB perf.data (36004 samples) ]
        ...
        # Samples: 12K of event 'cycles/no-inherit/'
        # Event count (approx.): 11895759282
       ...
        # Samples: 24K of event 'instructions'
        # Event count (approx.): 30668000441

      Enable inherit for one event when globally disable:

        # perf record -i -e cycles/inherit/ -e instructions ./a.out
        [ perf record: Woken up 7 times to write data ]
        [ perf record: Captured and wrote 1.654 MB perf.data (35868 samples) ]
        ...
        # Samples: 23K of event 'cycles/inherit/'
        # Event count (approx.): 23285400229
        ...
        # Samples: 11K of event 'instructions'
        # Event count (approx.): 14969050259

      Committer note:

      One can check if the bit was set, in addition to seeing the result in
      the perf.data file size as above by doing one of:

        # perf record -e cycles -e instructions -a usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.911 MB perf.data (63 samples) ]
        # perf evlist -v
        cycles: size: 112, { sample_period, sample_freq }: 4000, sample_type: 
IP|TID|TIME|ID|CPU|PERIOD, read_format: ID, disabled: 1, inherit: 1, mmap: 1, 
comm: 1, freq: 1, task: 1, sample_id_all: 1, exclude_guest: 1, mmap2: 1, 
comm_exec: 1
        instructions: size: 112, config: 0x1, { sample_period, sample_freq }: 
4000, sample_type: IP|TID|TIME|ID|CPU|PERIOD, read_format: ID, disabled: 1, 
inherit: 1, freq: 1, sample_id_all: 1, exclude_guest: 1
        #

      So, the inherit bit was set in both, now, if we disable it globally using
      --no-inherit:

        # perf record --no-inherit -e cycles -e instructions -a usleep 1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.910 MB perf.data (56 samples) ]
        # perf evlist -v
        cycles: size: 112, { sample_period, sample_freq }: 4000, sample_type: 
IP|TID|TIME|ID|CPU|PERIOD, read_format: ID, disabled: 1, mmap: 1, comm: 1, 
freq: 1, task: 1, sample_id_all: 1, exclude_guest: 1, mmap2: 1, comm_exec: 1
        instructions: size: 112, config: 0x1, { sample_period, sample_freq }: 
4000, sample_type: IP|TID|TIME|ID|CPU|PERIOD, read_format: ID, disabled: 1, 
freq: 1, sample_id_all: 1, exclude_guest: 1

      No inherit bit set, then disabling it and setting just on the cycles 
event:

        # perf record --no-inherit -e cycles/inherit/ -e instructions -a usleep 
1
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.909 MB perf.data (48 samples) ]
        # perf evlist -v
        cycles/inherit/: size: 112, { sample_period, sample_freq }: 4000, 
sample_type: IP|TID|TIME|ID|CPU|PERIOD, read_format: ID, disabled: 1, inherit: 
1, mmap: 1, comm: 1, freq: 1, task: 1, sample_id_all: 1, exclude_guest: 1, 
mmap2: 1, comm_exec: 1
        instructions: size: 112, config: 0x1, { sample_period, sample_freq }: 
4000, sample_type: IP|TID|TIME|ID|CPU|PERIOD, read_format: ID, disabled: 1, 
freq: 1, sample_id_all: 1, exclude_guest: 1
        #

      We can see it as well in by using a more verbose level of debug messages 
in
      the tool that sets up the perf_event_attr, 'perf record' in this case:

        [root@zoo ~]# perf record -vv --no-inherit -e cycles/inherit/ -e 
instructions -a usleep 1
        ------------------------------------------------------------
        perf_event_attr:
          size                             112
          { sample_period, sample_freq }   4000
          sample_type                      IP|TID|TIME|ID|CPU|PERIOD
          read_format                      ID
          disabled                         1
          inherit                          1
          mmap                             1
          comm                             1
          freq                             1
          task                             1
          sample_id_all                    1
          exclude_guest                    1
          mmap2                            1
          comm_exec                        1
        ------------------------------------------------------------
        sys_perf_event_open: pid -1  cpu 0  group_fd -1  flags 0x8
        sys_perf_event_open: pid -1  cpu 1  group_fd -1  flags 0x8
        sys_perf_event_open: pid -1  cpu 2  group_fd -1  flags 0x8
        sys_perf_event_open: pid -1  cpu 3  group_fd -1  flags 0x8
        ------------------------------------------------------------
        perf_event_attr:
          size                             112
          config                           0x1
          { sample_period, sample_freq }   4000
          sample_type                      IP|TID|TIME|ID|CPU|PERIOD
          read_format                      ID
          disabled                         1
          freq                             1
          sample_id_all                    1
          exclude_guest                    1
        ------------------------------------------------------------
        sys_perf_event_open: pid -1  cpu 0  group_fd -1  flags 0x8

      <SNIP>

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: David S. Miller <davem@xxxxxxxxxxxxx>
      Cc: Li Zefan <lizefan@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1446029705-199659-2-git-send-email-wangnan0@xxxxxxxxxx
      [ s/u64/bool/ for the perf_evsel_config_term inherit field - jolsa]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 45890f6d34e70d9dd194bd1729eba3ff72cabf78
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Mar 9 18:53:49 2015 +0530

      ARC: mm: HIGHMEM: kmap API implementation

      Implement kmap* API for ARC.

      This enables
       - permanent kernel maps (pkmaps): :kmap() API
       - fixmap : kmap_atomic()

      We use a very simple/uniform approach for both (unlike some of the other
      arches). So fixmap doesn't use the customary compile time address stuff.
      The important semantic is sleep'ability (pkmap) vs. not (fixmap) which
      the API guarantees.

      Note that this patch only enables highmem for subsequent PAE40 support
      as there is no real highmem for ARC in pure 32-bit paradigm as explained
      below.

      ARC has 2:2 address split of the 32-bit address space with lower half
      being translated (virtual) while upper half unstranslated
      (0x8000_0000 to 0xFFFF_FFFF). kernel itself is linked at base of
      unstranslated space (i.e. 0x8000_0000 onwards), which is mapped to say
      DDR 0x0 by external Bus Glue logic (outside the core). So kernel can
      potentially access 1.75G worth of memory directly w/o need for highmem.
      (the top 256M is taken by uncached peripheral space from 0xF000_0000 to
      0xFFFF_FFFF)

      In PAE40, hardware can address memory beyond 4G (0x1_0000_0000) while
      the logical/virtual addresses remain 32-bits. Thus highmem is required
      for kernel proper to be able to access these pages for it's own purposes
      (user space is agnostic to this anyways).

      Signed-off-by: Alexey Brodkin <abrodkin@xxxxxxxxxxxx>
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 6101be5ad439806c70b54bdd083e7db9e3affb3d
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Wed Oct 28 18:48:17 2015 +0530

      ARC: mm: preps ahead of HIGHMEM support #2

      Explicit'ify that all memory added so far is low memory
      Nothing semantical

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 336e2136e1353db8e9e731c27381ee0735656a8a
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Thu Mar 5 17:06:31 2015 +0530

      ARC: mm: preps ahead of HIGHMEM support

      Before we plug in highmem support, some of code needs to be ready for it
       - copy_user_highpage() needs to be using the kmap_atomic API
       - mk_pte() can't assume page_address()
       - do_page_fault() can't assume VMALLOC_END is end of kernel vaddr space

      Signed-off-by: Alexey Brodkin <abrodkin@xxxxxxxxxxxx>
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit d40846457fc23cd841a60fdc2786e08a8bedb35b
  Author: Alexey Brodkin <abrodkin@xxxxxxxxxxxx>
  Date:   Wed Sep 2 20:43:30 2015 +0300

      ARC: mm: use generic macros _BITUL()/_AC()

      Signed-off-by: Alexey Brodkin <abrodkin@xxxxxxxxxxxx>
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 8840e14cd82d398d348b2947fad3a630e93260ba
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Tue Oct 13 12:11:38 2015 +0530

      ARC: mm: Improve Duplicate PD Fault handler

       - Move the verbosity knob from .data to .bss by using inverted logic
       - No need to readout PD1 descriptor
       - clip the non pfn bits of PD0 to avoid clipping inside the loop

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 5baecbcd9c9a2f491afe1369fc22e7363f9c94d5
  Author: Dima Kogan <dima@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 17:34:19 2015 -0700

      perf symbols: we can now read separate debug-info files based on a build 
ID

      Recent GDB (at least on a vanilla Debian box) looks for debug information 
in

        /usr/lib/debug/.build-id/nn/nnnnnnn

      where nn/nnnnnn is the build-id of the stripped ELF binary. This is
      documented here:

        https://sourceware.org/gdb/onlinedocs/gdb/Separate-Debug-Files.html

      This was not working in perf because we didn't read the build id until
      AFTER we searched for the separate debug information file. This patch
      reads the build ID and THEN does the search.

      Signed-off-by: Dima Kogan <dima@xxxxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/87si6pfwz4.fsf@xxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f2f3096888569ff1fc15fa0187a39eef3a24b28e
  Author: Dima Kogan <dima@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 7 17:30:28 2015 -0700

      perf symbols: Fix type error when reading a build-id

      This was benign, but wrong. The build-id should live in a char[], not a 
char*[]

      Signed-off-by: Dima Kogan <dima@xxxxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/87si6pfwz4.fsf@xxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b33e18f61bd18227a456016a77b1a968f5bc1d65
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Tue Oct 27 14:19:39 2015 +0900

      fs/writeback, rcu: Don't use list_entry_rcu() for pointer offsetting in 
bdi_split_work_to_wbs()

      bdi_split_work_to_wbs() uses list_for_each_entry_rcu_continue()
      to walk @bdi->wb_list.  To set up the initial iteration
      condition, it uses list_entry_rcu() to calculate the entry
      pointer corresponding to the list head; however, this isn't an
      actual RCU dereference and using list_entry_rcu() for it ended
      up breaking a proposed list_entry_rcu() change because it was
      feeding an non-lvalue pointer into the macro.

      Don't use the RCU variant for simple pointer offsetting.  Use
      list_entry() instead.

      Reported-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Cc: Darren Hart <dvhart@xxxxxxxxxxxxxxx>
      Cc: David Howells <dhowells@xxxxxxxxxx>
      Cc: Dipankar Sarma <dipankar@xxxxxxxxxx>
      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Josh Triplett <josh@xxxxxxxxxxxxxxxx>
      Cc: Lai Jiangshan <jiangshanlai@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Patrick Marlier <patrick.marlier@xxxxxxxxx>
      Cc: Paul McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: pranith kumar <bobby.prani@xxxxxxxxx>
      Link: http://lkml.kernel.org/r/20151027051939.GA19355@xxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit e4340bbb07dd38339c0773543dd928886e512a57
  Merge: c13dc31 a22c4d7
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Oct 28 13:17:01 2015 +0100

      Merge branch 'linus' into core/rcu, to fix up a semantic conflict

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 78b9bc947b18ed16b6c2c573d774e6d54ad9452d
  Author: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
  Date:   Fri Oct 23 11:48:17 2015 +0200

      efi: Fix warning of int-to-pointer-cast on x86 32-bit builds

      Commit:

        0f96a99dab36 ("efi: Add "efi_fake_mem" boot option")

      introduced the following warning message:

        drivers/firmware/efi/fake_mem.c:186:20: warning: cast to pointer from 
integer of different size [-Wint-to-pointer-cast]

      new_memmap_phy was defined as a u64 value and cast to void*,
      causing a int-to-pointer-cast warning on x86 32-bit builds.
      However, since the void* type is inappropriate for a physical
      address, the definition of struct efi_memory_map::phys_map has
      been changed to phys_addr_t in the previous patch, and so the
      cast can be dropped entirely.

      This patch also changes the type of the "new_memmap_phy"
      variable from "u64" to "phys_addr_t" to align with the types of
      memblock_alloc() and struct efi_memory_map::phys_map.

      Reported-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
      [ Removed void* cast, updated commit log]
      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Reviewed-by: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: kamezawa.hiroyu@xxxxxxxxxxxxxx
      Cc: linux-efi@xxxxxxxxxxxxxxx
      Cc: matt.fleming@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1445593697-1342-2-git-send-email-ard.biesheuvel@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 44511fb9e55ada760822b0b0d7be9d150576f17f
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Fri Oct 23 11:48:16 2015 +0200

      efi: Use correct type for struct efi_memory_map::phys_map

      We have been getting away with using a void* for the physical
      address of the UEFI memory map, since, even on 32-bit platforms
      with 64-bit physical addresses, no truncation takes place if the
      memory map has been allocated by the firmware (which only uses
      1:1 virtually addressable memory), which is usually the case.

      However, commit:

        0f96a99dab36 ("efi: Add "efi_fake_mem" boot option")

      adds code that clones and modifies the UEFI memory map, and the
      clone may live above 4 GB on 32-bit platforms.

      This means our use of void* for struct efi_memory_map::phys_map has
      graduated from 'incorrect but working' to 'incorrect and
      broken', and we need to fix it.

      So redefine struct efi_memory_map::phys_map as phys_addr_t, and
      get rid of a bunch of casts that are now unneeded.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Reviewed-by: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: izumi.taku@xxxxxxxxxxxxxx
      Cc: kamezawa.hiroyu@xxxxxxxxxxxxxx
      Cc: linux-efi@xxxxxxxxxxxxxxx
      Cc: matt.fleming@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1445593697-1342-1-git-send-email-ard.biesheuvel@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 9acdc911b55569145034b01075adf658891afbd2
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Oct 26 10:52:57 2015 +0530

      MAINTAINERS: Add public mailing list for ARC

      Cc: <stable@xxxxxxxxxxxxxxx> #3.9+
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit f759ee57b205223e98fdc97e26cbef305b8048e1
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Fri Jan 23 18:10:26 2015 +0530

      ARC: Ensure DT mem base is same as what kernel is built with

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 483bcc99c0a349570b30fc9cb20dea20c9387a4b
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Thu Oct 15 20:32:39 2015 +0530

      ARC: boot: Non Master cpus only need to call EARLY_CPU_SETUP once

      With prev fixes, all cores now start via common entry point @stext which
      already calls EARLY_CPU_SETUP for all cores - so no need to invoke it
      again

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit aa0efcde45a36d1ea2bc5bde4d47f36ec17502de
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Oct 12 15:15:48 2015 +0530

      ARCv2: smp: [plat-*]: No need to explicitly call mcip_init_smp()

      MCIP now registers it's own per cpu setup routine (for IPI IRQ request)
      using smp_ops.init_irq_cpu().

      So no need for platforms to do that. This now completely decouples
      platforms from MCIP.

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 286130ebf196d9643800977d57bdb7cda266b49e
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Wed Oct 14 14:38:02 2015 +0530

      ARC: smp: Introduce smp hook @init_irq_cpu called for all cores

      Note this is not part of platform owned static machine_desc,
      but more of device owned plat_smp_ops (rather misnamed) which a IPI
      provider or some such typically defines.

      This will help us seperate out the IPI registration from platform
      specific init_cpu_smp() into device specific init_irq_cpu()

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 8721a7f5a6f95c38cacbe1be22c820a7698926ef
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Tue Oct 13 15:26:00 2015 +0530

      ARC: smp: Rename platform hook @init_smp -> @init_cpu_smp

      This conveys better that it is called for each cpu

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 26b8f996239884451aeb1213747e3ca808c26024
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Oct 12 16:38:07 2015 +0530

      ARCv2: smp: [plat-*]: No need to explicitly call mcip_init_early_smp()

      MCIP now registers it's own probe callback with smp_ops.init_early_smp()
      which is called by ARC common code, so no need for platforms to do that.

      This decouples the platforms and MCIP and helps confine MCIP details
      to it's own file.

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit e55af4da026ebdb9ded3cb7708b8a8bd7884ad3a
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Oct 12 16:28:55 2015 +0530

      ARC: smp: Introduce smp hook @init_early_smp for Master core

      This adds a platform agnostic early SMP init hook which is called on
      Master core before calling setup_processor()

        setup_arch()
           smp_init_cpus()
               smp_ops.init_early_smp()
           ...
           setup_processor()

      How this helps:
       - Used for one time init of certain SMP centric IP blocks, before
         calling setup_processor() which probes various bits of core,
         possibly including this block

       - Currently platforms need to call this IP block init from their
         init routines, which doesn't make sense as this is specific to ARC
         core and not platform and otherwise requires copy/paste in all
         (and hence a possible point of failure)

      e.g. MCIP init is called from 2 platforms currently (axs10x and sim)
      which will go away once we have this.

      This change only adds the hooks but they are empty for now. Next commit
      will populate them and remove the explicit init calls from platforms.

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 4c82f28617ab9ce938118f0b99156a96c64d3da0
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Tue Oct 13 08:48:54 2015 +0530

      ARC: remove @init_time, @init_irq platform callbacks

      These are not in use for ARC platforms. Moreover DT mechanims exist to
      probe them w/o explicit platform calls.

       - clocksource drivers can use CLOCKSOURCE_OF_DECLARE()
       - intc IRQCHIP_DECLARE() calls + cascading inside DT allows external
         intc to be probed automatically

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit e0868e6f673d0d2db6a3c3798605e6efb756e61e
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Oct 12 14:58:54 2015 +0530

      ARC: smp: irqchip: handle IPI as percpu irq like timer

      The reason this was not done so far was lack of genuine IPI_IRQ for
      ARC700, as we don't have a SMP version of core yet (which might change
      soon thx to EZChip). Nevertheles to increase the build coverage, we
      need to allow CONFIG_SMP for ARC700 and still be able to run it on a
      UP platform (nsim or AXS101) with a UP Device Tree (SMP-on-UP)

      The build itself requires some define for IPI_IRQ and even a dummy
      value is fine since that code won't run anyways.

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 3971cdc202f638f252e39316d42492ace04cc1b1
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Fri Oct 9 11:26:12 2015 +0530

      ARC: boot: Support Halt-on-reset and Run-on-reset SMP booting modes

      For Run-on-reset, non masters need to spin wait. For Halt-on-reset they
      can jump to entry point directly.

      Also while at it, made reset vector handler as "the" entry point for
      kernel including host debugger based boot (which uses the ELF header
      entry point)

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 8a28d67457b613258aa0578ccece206d166f2b9f
  Merge: a22c4d7 977bf06
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 18:59:53 2015 +0900

      Merge tag 'powerpc-4.3-6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux

      Pull powerpc fix from Michael Ellerman:
       - powerpc/dma: dma_set_coherent_mask() should not be GPL only from Ben

      * tag 'powerpc-4.3-6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:
        powerpc/dma: dma_set_coherent_mask() should not be GPL only

  commit f11631748ee6973f85238109a3fa8ab8e760e5a4
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Mon Oct 26 13:58:54 2015 +0200

      NFC: nci: non-static functions can not be inline

      This fixes a build error that seems to be toochain
      dependent (Not seen with gcc v5.1):

      In file included from net/nfc/nci/rsp.c:36:0:
      net/nfc/nci/rsp.c: In function â??nci_rsp_packetâ??:
      include/net/nfc/nci_core.h:355:12: error: inlining failed in call to
      always_inline â??nci_prop_rsp_packetâ??: function body not available
       inline int nci_prop_rsp_packet(struct nci_dev *ndev, __u16 opcode,

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 977bf062bba3eb8d03f66d5b4e227e5d7ebc1e08
  Author: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 17:20:05 2015 +0900

      powerpc/dma: dma_set_coherent_mask() should not be GPL only

      When turning this from inline to an exported function I was a bit
      over-eager and made it GPL only. This prevents the use of pretty much
      all non-GPL PCI driver which is a bit over the top. Let's bring it
      back in line with other architecture.

      Fixes: 817820b0226a ("powerpc/iommu: Support "hybrid" iommu/direct DMA 
ops for coherent_mask < dma_mask")
      Signed-off-by: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit e18f6ac30d31433d8cd9ccf693d3cdd5d2e66ef9
  Merge: e407f39 c02b050
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 27 20:27:45 2015 -0700

      Merge branch 'mlx4-fixes'

      Or Gerlitz says:

      ====================
      Mellanox mlx4 driver fixes for 4.3-rc7

      Jack's fix is for a regression introduced in 4.3-rc1

      Carol's fix addresses an issue which exists for while and
      turns to beat us hard on PPC, please queue for -stable.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c02b05011fadf8e409e41910217ca689f2fc9d91
  Author: Carol L Soto <clsoto@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 17:36:20 2015 +0200

      net/mlx4: Copy/set only sizeof struct mlx4_eqe bytes

      When doing memcpy/memset of EQEs, we should use sizeof struct
      mlx4_eqe as the base size and not caps.eqe_size which could be bigger.

      If caps.eqe_size is bigger than the struct mlx4_eqe then we corrupt
      data in the master context.

      When using a 64 byte stride, the memcpy copied over 63 bytes to the
      slave_eq structure.  This resulted in copying over the entire eqe of
      interest, including its ownership bit -- and also 31 bytes of garbage
      into the next WQE in the slave EQ -- which did NOT include the ownership
      bit (and therefore had no impact).

      However, once the stride is increased to 128, we are overwriting the
      ownership bits of *three* eqes in the slave_eq struct.  This results
      in an incorrect ownership bit for those eqes, which causes the eq to
      seem to be full. The issue therefore surfaced only once 128-byte EQEs
      started being used in SRIOV and (overarchitectures that have 128/256
      byte cache-lines such as PPC) - e.g after commit 77507aa249ae
      "net/mlx4_core: Enable CQE/EQE stride support".

      Fixes: 08ff32352d6f ('mlx4: 64-byte CQE/EQE support')
      Signed-off-by: Carol L Soto <clsoto@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 092bf0fc80f5fb7928244ad63d8a2a8df8a72a3e
  Author: Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 17:36:19 2015 +0200

      net/mlx4_en: Explicitly set no vlan tags in WQE ctrl segment when no vlan 
is present

      We do not set the ins_vlan field to zero when no vlan id is present in 
the packet.

      Since WQEs in the TX ring are not zeroed out between uses, this oversight
      could result in having vlan flags present in the WQE ctrl segment when no
      vlan is preset.

      Fixes: e38af4faf01d ('net/mlx4_en: Add support for hardware accelerated 
802.1ad vlan')
      Reported-by: Gideon Naim <gideonn@xxxxxxxxxxxx>
      Signed-off-by: Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6d08f617872cc048173d59f1ce4660b030bab5a6
  Author: yankejian <yankejian@xxxxxxxxxx>
  Date:   Tue Oct 27 19:16:34 2015 +0800

      net: hisilicon: updates HNS config and documents

      updates the bindings documents and dtsi file according to the review
      comments[https://lkml.org/lkml/2015/9/21/670] from Rob Herring 
<robh@xxxxxxxxxx>

      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Signed-off-by: huangdaode <huangdaode@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e407f39afdc0741dcf20aed100b8e738ccab7cb1
  Author: Michael S. Tsirkin <mst@xxxxxxxxxx>
  Date:   Tue Oct 27 11:37:39 2015 +0200

      vhost: fix performance on LE hosts

      commit 2751c9882b947292fcfb084c4f604e01724af804 ("vhost: cross-endian
      support for legacy devices") introduced a minor regression: even with
      cross-endian disabled, and even on LE host, vhost_is_little_endian is
      checking is_le flag so there's always a branch.

      To fix, simply check virtio_legacy_is_little_endian first.

      Cc: Greg Kurz <gkurz@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Michael S. Tsirkin <mst@xxxxxxxxxx>
      Reviewed-by: Greg Kurz <gkurz@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit edc9b4272e3298c4a6a86d34d03e951033566f69
  Author: Li Peng <lipeng321@xxxxxxxxxx>
  Date:   Tue Oct 27 17:17:40 2015 +0800

      net: hns: fixes the bug tested XGE by ethtool -p

      delete action of ETHTOOL_ID_ON/ETHTOOL_ID_OFF in XGE ethtool -p,
      so Hardware control the LED state instead of software.

      Signed-off-by: Li Peng <lipeng321@xxxxxxxxxx>
      Signed-off-by: Yisen Zhuang <yisen.zhuang@xxxxxxxxxx>
      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8fcc60333ccf5622f1788ab72848e1a880667fe0
  Author: Abhimanyu <abhimanyu@xxxxxxxxxxxxx>
  Date:   Tue Oct 27 14:17:43 2015 +0530

      gianfar: Increase TX_TIMEOUT to 5HZ

      Increased TX_TIMEOUT to 5HZ to accommodate worst case situation
      for traffic and CPU intensive use cases

      Signed-off-by: Priyanka Jain <Priyanka.Jain@xxxxxxxxxxxxx>
      Signed-off-by: Abhimanyu <abhimanyu@xxxxxxxxxxxxx>
      Acked-by: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d59542ddcb547871b1913c34c31a6d207627db02
  Merge: f8e529e c096377
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 27 19:56:56 2015 -0700

      Merge tag 'wireless-drivers-next-for-davem-2015-10-27' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers-next

      Kalle Valo says:

      ====================
      here's a bigger pull request for 4.4. The diffstat looks scary as we
      created a new directory realtek for all realtek drivers. In the future
      I'm planning to create similar directories for all vendors, currently we
      just have ath, mediatek and realtek. This change has been in linux-next
      for a couple of weeks so it should be safe, but of course you never
      know.

      There's also a new driver rtl8xxxu for few realtek USB devices. This
      just made it to the last linux-next build.

      Otherwise there's nothing really special, more info below. If time
      permits, and it's ok for you, I'm hoping to send you a one more pull
      request this week.

      brcmfmac

      * using netdev carrier state
      * add and rework some cfg80211 callbacks mainly for AP mode
      * use devcoredump when triggered by firmware event

      realtek

      * create new directory drivers/net/wireless/realtek/ for all realtek
        drivers, not visible to users (no kconfig changes etc)
      * add rtl8xxxu, a new mac80211 driver for RTL8723AU, RTL8188CU,
        RTL8188RU, RTL8191CU, RTL8192CU and hopefully more in the future

      ath10k

      * add board 2 API support for automatically choosing correct board file
      * data path optimisations
      * disable PCI power save for qca988x and QCA99x0 due to interop reasons

      wil6210

      * BlockAckReq support
      * firmware crashdump using devcoredump
      * capture all frames with sniffer
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f8e529ed941ba2bbcbf310b575d968159ce7e895
  Author: Tycho Andersen <tycho.andersen@xxxxxxxxxxxxx>
  Date:   Tue Oct 27 09:23:59 2015 +0900

      seccomp, ptrace: add support for dumping seccomp filters

      This patch adds support for dumping a process' (classic BPF) seccomp
      filters via ptrace.

      PTRACE_SECCOMP_GET_FILTER allows the tracer to dump the user's classic BPF
      seccomp filters. addr should be an integer which represents the ith 
seccomp
      filter (0 is the most recently installed filter). data should be a struct
      sock_filter * with enough room for the ith filter, or NULL, in which case
      the filter is not saved. The return value for this command is the number 
of
      BPF instructions the program represents, or negative in the case of 
errors.
      Command specific errors are ENOENT: which indicates that there is no ith
      filter in this seccomp tree, and EMEDIUMTYPE, which indicates that the ith
      filter was not installed as a classic BPF filter.

      A caveat with this approach is that there is no way to get explicitly at
      the heirarchy of seccomp filters, and users need to memcmp() filters to
      decide which are inherited. This means that a task which installs two of
      the same filter can potentially confuse users of this interface.

      v2: * make save_orig const
          * check that the orig_prog exists (not necessary right now, but when
             grows eBPF support it will be)
          * s/n/filter_off and make it an unsigned long to match ptrace
          * count "down" the tree instead of "up" when passing a filter offset

      v3: * don't take the current task's lock for inspecting its seccomp mode
          * use a 0x42** constant for the ptrace command value

      v4: * don't copy to userspace while holding spinlocks

      v5: * add another condition to WARN_ON

      v6: * rebase on net-next

      Signed-off-by: Tycho Andersen <tycho.andersen@xxxxxxxxxxxxx>
      Acked-by: Kees Cook <keescook@xxxxxxxxxxxx>
      CC: Will Drewry <wad@xxxxxxxxxxxx>
      Reviewed-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      CC: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      CC: Pavel Emelyanov <xemul@xxxxxxxxxxxxx>
      CC: Serge E. Hallyn <serge.hallyn@xxxxxxxxxx>
      CC: Alexei Starovoitov <ast@xxxxxxxxxx>
      CC: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5b9e3bd5b2f807f66a959cc079c495915f032c67
  Merge: c0f9c7e cf4b24f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 27 19:53:04 2015 -0700

      Merge branch 'mpls-multipath-improvements'

      Robert Shearman says:

      ====================
      mpls: mulipath improvements

      Two improvements to the recently added mpls multipath support. The
      first is a fix for missing initialisation the nexthop address length
      for the v4 and v6 explicit null label routes, and the second is to
      reduce the amount of memory used by mpls routes by changing the way
      the via addresses are stored.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cf4b24f0024fc2e3fbc653a659356d224b5b9172
  Author: Robert Shearman <rshearma@xxxxxxxxxxx>
  Date:   Tue Oct 27 00:37:36 2015 +0000

      mpls: reduce memory usage of routes

      Nexthops for MPLS routes have a via address field sized for the
      largest via address that is expected, which is 32 bytes. This means
      that in the most common case of having ipv4 via addresses, 28 bytes of
      memory more than required are used per nexthop. In the other common
      case of an ipv6 nexthop then 16 bytes more than required are
      used. With large numbers of MPLS routes this extra memory usage could
      start to become significant.

      To avoid allocating memory for a maximum length via address when not
      all of it is required and to allow for ease of iterating over
      nexthops, then the via addresses are changed to be stored in the same
      memory block as the route and nexthops, but in an array after the end
      of the array of nexthops. New accessors are provided to retrieve a
      pointer to the via address.

      To allow for O(1) access without having to store a pointer or offset
      per nh, the via address for each nexthop is sized according to the
      maximum via address for any nexthop in the route, which is stored in a
      new route field, rt_max_alen, but this is in an existing hole in
      struct mpls_route so it doesn't increase the size of the
      structure. Each via address is ensured to be aligned to VIA_ALEN_ALIGN
      to account for architectures that don't allow unaligned accesses.

      Signed-off-by: Robert Shearman <rshearma@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b4e04fc7357b6cef0856cb14b42306af1af990e5
  Author: Robert Shearman <rshearma@xxxxxxxxxxx>
  Date:   Tue Oct 27 00:37:35 2015 +0000

      mpls: fix forwarding using v4/v6 explicit null

      Fill in the via address length for the predefined IPv4 and IPv6
      explicit-null label routes.

      Fixes: f8efb73c97e2 ("mpls: multipath route support")
      Signed-off-by: Robert Shearman <rshearma@xxxxxxxxxxx>
      Acked-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 85ff8a43f39fa6d2f970b5e1e5c03df87abde242
  Author: Yang Shi <yang.shi@xxxxxxxxxx>
  Date:   Mon Oct 26 17:02:19 2015 -0700

      bpf: sample: define aarch64 specific registers

      Define aarch64 specific registers for building bpf samples correctly.

      Signed-off-by: Yang Shi <yang.shi@xxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 20986ed826cbb36bb8f2d77f872e3c52d8d30647
  Author: Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
  Date:   Mon Oct 26 17:13:54 2015 -0500

      amd-xgbe: Fix race between access of desc and desc index

      During Tx cleanup it's still possible for the descriptor data to be
      read ahead of the descriptor index. A memory barrier is required between
      the read of the descriptor index and the start of the Tx cleanup loop.
      This allows a change to a lighter-weight barrier in the Tx transmit
      routine just before updating the current descriptor index.

      Since the memory barrier does result in extra overhead on arm64, keep
      the previous change to not chase the current descriptor value. This
      prevents the execution of the barrier for each loop performed.

      Suggested-by: Alexander Duyck <alexander.duyck@xxxxxxxxx>
      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8ce675ff39b9958d1c10f86cf58e357efaafc856
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Mon Oct 26 12:46:37 2015 -0400

      RDS-TCP: Recover correctly from pskb_pull()/pksb_trim() failure in 
rds_tcp_data_recv

      Either of pskb_pull() or pskb_trim() may fail under low memory conditions.
      If rds_tcp_data_recv() ignores such failures, the application will
      receive corrupted data because the skb has not been correctly
      carved to the RDS datagram size.

      Avoid this by handling pskb_pull/pskb_trim failure in the same
      manner as the skb_clone failure: bail out of rds_tcp_data_recv(), and
      retry via the deferred call to rds_send_worker() that gets set up on
      ENOMEM from rds_tcp_read_sock()

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Acked-by: Santosh Shilimkar <santosh.shilimkar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0b7c874348ea14ec3c358fe95e56d6f830540248
  Author: Neil Horman <nhorman@xxxxxxxxxxxxx>
  Date:   Mon Oct 26 12:24:22 2015 -0400

      forcedeth: fix unilateral interrupt disabling in netpoll path

      Forcedeth currently uses disable_irq_lockdep and enable_irq_lockdep, 
which in
      some configurations simply calls local_irq_disable.  This causes errant 
warnings
      in the netpoll path as in netpoll_send_skb_on_dev, where we disable irqs 
using
      local_irq_save, leading to the following warning:

      WARNING: at net/core/netpoll.c:352 netpoll_send_skb_on_dev+0x243/0x250() 
(Not
      tainted)
      Hardware name:
      netpoll_send_skb_on_dev(): eth0 enabled interrupts in poll
      (nv_start_xmit_optimized+0x0/0x860 [forcedeth])
      Modules linked in: netconsole(+) configfs ipv6 iptable_filter ip_tables 
ppdev
      parport_pc parport sg microcode serio_raw edac_core edac_mce_amd k8temp
      snd_hda_codec_realtek snd_hda_codec_generic forcedeth snd_hda_intel
      snd_hda_codec snd_hwdep snd_seq snd_seq_device snd_pcm snd_timer snd 
soundcore
      snd_page_alloc i2c_nforce2 i2c_core shpchp ext4 jbd2 mbcache sr_mod cdrom 
sd_mod
      crc_t10dif pata_amd ata_generic pata_acpi sata_nv dm_mirror dm_region_hash
      dm_log dm_mod [last unloaded: scsi_wait_scan]
      Pid: 1940, comm: modprobe Not tainted 2.6.32-573.7.1.el6.x86_64.debug #1
      Call Trace:
       [<ffffffff8107bbc1>] ? warn_slowpath_common+0x91/0xe0
       [<ffffffff8107bcc6>] ? warn_slowpath_fmt+0x46/0x60
       [<ffffffffa00fe5b0>] ? nv_start_xmit_optimized+0x0/0x860 [forcedeth]
       [<ffffffff814b3593>] ? netpoll_send_skb_on_dev+0x243/0x250
       [<ffffffff814b37c9>] ? netpoll_send_udp+0x229/0x270
       [<ffffffffa02e3299>] ? write_msg+0x39/0x110 [netconsole]
       [<ffffffffa02e331b>] ? write_msg+0xbb/0x110 [netconsole]
       [<ffffffff8107bd55>] ? __call_console_drivers+0x75/0x90
       [<ffffffff8107bdba>] ? _call_console_drivers+0x4a/0x80
       [<ffffffff8107c445>] ? release_console_sem+0xe5/0x250
       [<ffffffff8107d200>] ? register_console+0x190/0x3e0
       [<ffffffffa02e71a6>] ? init_netconsole+0x1a6/0x216 [netconsole]
       [<ffffffffa02e7000>] ? init_netconsole+0x0/0x216 [netconsole]
       [<ffffffff810020d0>] ? do_one_initcall+0xc0/0x280
       [<ffffffff810d4933>] ? sys_init_module+0xe3/0x260
       [<ffffffff8100b0d2>] ? system_call_fastpath+0x16/0x1b
      ---[ end trace f349c7af88e6a6d5 ]---
      console [netcon0] enabled
      netconsole: network logging started

      Fix it by modifying the forcedeth code to use
      disable_irq_nosync_lockdep_irqsavedisable_irq_nosync_lockdep_irqsave 
instead,
      which saves and restores irq state properly.  This also saves us a little 
code
      in the process

      Tested by the reporter, with successful restuls

      Patch applies to the head of the net tree

      Signed-off-by: Neil Horman <nhorman@xxxxxxxxxxxxx>
      CC: "David S. Miller" <davem@xxxxxxxxxxxxx>
      Reported-by: Vasily Averin <vvs@xxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c0f9c7e45d374ce6dc369443fa586c2fe228c345
  Author: Bert Kenward <bkenward@xxxxxxxxxxxxxx>
  Date:   Mon Oct 26 14:23:42 2015 +0000

      sfc: replace spinlocks with bit ops for busy poll locking

      This patch reduces the overhead of locking for busy poll.
      Previously the state was protected by a lock, whereas now
      it's manipulated solely with atomic operations.

      Signed-off-by: Shradha Shah <sshah@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 080a270f5adec1ada1357eb66321e7222cc34301
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 26 13:51:37 2015 +0100

      sock: don't enable netstamp for af_unix sockets

      netstamp_needed is toggled for all socket families if they request
      timestamping. But some protocols don't need the lower-layer timestamping
      code at all. This patch starts disabling it for af-unix.

      E.g. systemd enables timestamping during boot-up on the journald af-unix
      sockets, thus causing the system to globally enable timestamping in the
      lower networking stack. Still, it is very probable that timestamping
      gets activated, by e.g. dhclient or various NTP implementations.

      Reported-by: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6092db1aba2d151acd40a0370b80b5c043936d2d
  Merge: 8941faa 133fac0
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Oct 27 19:35:01 2015 -0700

      Merge branch 'qed-driver'

      Ariel Elior says:

      ====================
      Add new drivers: qed & qede

      This series implements the driver set for Qlogic's new QL4xxx series.
      These are 10/20/25/40/50/100 Gig capable converged nics, supporting
      ethernet (obviously), iscsi, fcoe, roce and iwarp protocols.

      The overall driver design includes a common module ('qed') and protocol
      specific dependent modules for ethernet ('qede'), fcoe ('qedf'),
      iscsi ('qedi') and roce ('qedr').
      The common module contains all of the common logic, e.g. initialization,
      cleanup, infrastructure for interrupt handling, link management, slowpath
      etc. as well as protocol agnostic features, and supplying an abstraction
      layer for other modules.
      The protocol specific modules can be compiled and operated independently
      of each other, with the exception of the rdma modules which are dependent
      on the ethernet module, in accordance with the kernel rdma stack design.

      This series only adds the core and ethernet modules, with basic L2
      capabilities. Future series will add the rest of the modules and enhance
      the L2 functionality.

      Ths patch series is constructed of the following patches:
      qed:  Add module with basic common support
      qed:  Add basic L2 interface
      qede: Add basic Network driver
      qed:  Add slowpath L2 support
      qede: Add basic network device support
      qede: Add classification configuration
      qed:  Add link support
      qede: Add support for link
      qed:  Add statistics support
      qede: Add basic ethtool support

      This project is a team effort, thanks go to Yuval Mintz, Dmitry Kravkov,
      Michal Kalderon, Tomer Tayar, Manish Chopra, Sudarsana Kalluru,
      Rajesh Borundia, Sony Chacko, Artum Zolotushko, Harish Patil, Rasesh Mody,
      Sergey Ukhterov and Elad Manela, as well as former team members,
      Eilon Greenstein and Shmulik Ravid.

      Changes from previos version:
      -----------------------------

      From Version 7:
        - Various small fixes according to Dave's suggestions; Largest change
          [code-wise] - don't use tabs for indenting function arguments.

      From Version 6:
        - Reduced the number of arguments for functions with exceptionally
          high number of parameters.

      From Version 5:
        - Style change and fixes [mostly in 1, 4 and 7].
          Thanks go to Francois Romieu, a mere mortal. ;-)

      From Version 4:
        - Drop dependency for x86_64.

      From Version 3:
        - Limit support of initial submission to x86_64.
        - Fix endian problems appearing via sparse [although no BE support yet].
        - Fix small issues suggested by the kbuild test robot.

      From Version 2:
        - Removed U64_{HI,LO}; Using {upper,lower}_32_bits instead.
        - Use regular napi weight definition.
        - [We still use the __le variants for variables, since we didn't get
           a reply regarding the change into non-user API types].

      From Version 1:
        - Removed private license file; Instead revised comments at source 
headers.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 133fac0eedc355be5cdbeb9cdfc6df59d2bbbdd1
  Author: Sudarsana Kalluru <Sudarsana.Kalluru@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:34 2015 +0200

      qede: Add basic ethtool support

      This adds basic ethtool operations to the qed driver, allowing support in:
       - Statistics gathering [ethtool -S]
       - Setting of debug level [ethtool -s <interface> msglvl]
       - Getting basic information [ethtool, ethtool -i]

      In addition it adds the ability to change the MTU.

      Signed-off-by: Sudarsana Kalluru <Sudarsana.Kalluru@xxxxxxxxxx>
      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9df2ed0415b13218f84262c2372323ef028310fc
  Author: Manish Chopra <Manish.Chopra@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:33 2015 +0200

      qed: Add statistics support

      Device statistics can be gathered on-demand. This adds the qed support for
      reading the statistics [both function and port] from the device, and adds
      to the public API a method for requesting the current statistics.

      Signed-off-by: Manish Chopra <Manish.Chopra@xxxxxxxxxx>
      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a2ec6172d29cf3aed92e9db40e83e36329db1dd5
  Author: Sudarsana Kalluru <Sudarsana.Kalluru@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:32 2015 +0200

      qede: Add support for link

      This adds basic link functionality to qede - driver still doesn't provide
      users with an API to change any link property, but it does request qed to
      initialize the link using default configuration, and registers a callback
      that allows it to get link notifications.

      This patch adds the ability of the driver to set the carrier as active and
      to enable traffic as a result of async. link notifications.
      Following this patch, driver should be capable of running traffic.

      Signed-off-by: Sudarsana Kalluru <Sudarsana.Kalluru@xxxxxxxxxx>
      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cc875c2e4f34e86c2f562f18b6e917cfcc560bcb
  Author: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:31 2015 +0200

      qed: Add link support

      Physical link is handled by the management Firmware.
      This patch lays the infrastructure for attention handling in the driver,
      as link change notifications arrive via async. attentions,
      as well the handling of such notifications.

      This patch also extends the API with the protocol drivers by adding
      registered callbacks which the protocol driver passes to qed in order
      to be notified of async. events originating from the FW/HW.

      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0d8e0aa05796c8a5652c164de5e4f16d8c9ee199
  Author: Sudarsana Kalluru <Sudarsana.Kalluru@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:30 2015 +0200

      qede: classification configuration

      Add the ability to configure basic classification in driver by
      implementing ndo_set_mac_address() and ndo_set_rx_mode().

      Signed-off-by: Sudarsana Kalluru <Sudarsana.Kalluru@xxxxxxxxxx>
      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2950219d87b040959f23484dd4ff5856bf1bc172
  Author: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:29 2015 +0200

      qede: Add basic network device support

      This patch includes the basic Rx/Tx support for the driver [although
      carrier will still never be turned on].
      Following this patch the driver registers a network device, initializes
      it and prepares it for traffic.

      Signed-off-by: Sudarsana Kalluru <Sudarsana.Kalluru@xxxxxxxxxx>
      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cee4d26448c1000ccc1711eb5e6ed4c15f18fa83
  Author: Manish Chopra <Manish.Chopra@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:28 2015 +0200

      qed: Add slowpath L2 support

      This patch adds to the qed the support to configure various L2 elements,
      such as channels and basic filtering conditions.
      It also enhances its public API to allow qede to later utilize this
      functionality.

      Signed-off-by: Manish Chopra <Manish.Chopra@xxxxxxxxxx>
      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e712d52b9f2a8ecf14ba0a2ec9a80ed0b194c4a1
  Author: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:27 2015 +0200

      qede: Add basic Network driver

      The Qlogic Everest Driver for Ethernet is the Ethernet specific module for
      QL4xxx ethernet products by Qlogic.

      This patch adds a very minimal PCI driver, one that doesn't yet register
      a network device, but one that does interact with qed and does a basic
      initialization of the HW.

      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 25c089d78f3833edf614fc377e75e9cf848562f5
  Author: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:26 2015 +0200

      qed: Add basic L2 interface

      This patch adds a public API for a network driver to work on top of QED.
      The interface itself is very minimal - it's mostly infrastructure, as the
      only content it has after this patch is a query for HW-based information
      required for the creation of a network interface [I.e., no actual
      protocol-specific configurations are supported].

      Signed-off-by: Manish Chopra <Manish.Chopra@xxxxxxxxxx>
      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fe56b9e6a8d957d6a20729d626027f800c17a2da
  Author: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
  Date:   Mon Oct 26 11:02:25 2015 +0200

      qed: Add module with basic common support

      The Qlogic Everest Driver is the backend module for the QL4xxx ethernet
      products by Qlogic.

      This module serves two main purposes:
       1. It's responsible to contain all the common code that will be shared
          between the various drivers that would be used with said line of
          products. Flows such as chip initialization and de-initialization
          fall under this category.

       2. It would abstract the protocol-specific HW & FW components, allowing
          the protocol drivers to have a clean APIs which is detached in its
          slowpath configuration from the actual HSI.

      This adds a very basic module without any protocol-specific bits.
      I.e., this adds a basic implementation that almost entirely falls under
      the first category.

      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6f5cadee44d83395dcd78d557b577e1021e192e4
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Sun Oct 25 20:21:50 2015 -0700

      openvswitch: Fix skb leak using IPv6 defrag

      nf_ct_frag6_gather() makes a clone of each skb passed to it, and if the
      reassembly is successful, expects the caller to free all of the original
      skbs using nf_ct_frag6_consume_orig(). This call was previously missing,
      meaning that the original fragments were never freed (with the exception
      of the last fragment to arrive).

      Fix this by ensuring that all original fragments except for the last
      fragment are freed via nf_ct_frag6_consume_orig(). The last fragment
      will be morphed into the head, so it must not be freed yet. Furthermore,
      retain the ->next pointer for the head after skb_morph().

      Fixes: 7f8a436eaa2c ("openvswitch: Add conntrack action")
      Reported-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 190b8ffbb700a9aa47acc559779bc79c0cb14766
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Sun Oct 25 20:21:49 2015 -0700

      ipv6: Export nf_ct_frag6_consume_orig()

      This is needed in openvswitch to fix an skb leak in the next patch.

      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 74c16618137f1505b0a32dea3ec73a2ef6f8f842
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Sun Oct 25 20:21:48 2015 -0700

      openvswitch: Fix double-free on ip_defrag() errors

      If ip_defrag() returns an error other than -EINPROGRESS, then the skb is
      freed. When handle_fragments() passes this back up to
      do_execute_actions(), it will be freed again. Prevent this double free
      by never freeing the skb in do_execute_actions() for errors returned by
      ovs_ct_execute. Always free it in ovs_ct_execute() error paths instead.

      Fixes: 7f8a436eaa2c ("openvswitch: Add conntrack action")
      Reported-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c2229fe1430d4e1c70e36520229dd64a87802b20
  Author: Alexander Duyck <aduyck@xxxxxxxxxxxx>
  Date:   Tue Oct 27 15:06:45 2015 -0700

      fib_trie: leaf_walk_rcu should not compute key if key is less than pn->key

      We were computing the child index in cases where the key value we were
      looking for was actually less than the base key of the tnode.  As a result
      we were getting incorrect index values that would cause us to skip over
      some children.

      To fix this I have added a test that will force us to use child index 0 if
      the key we are looking for is less than the key of the current tnode.

      Fixes: 8be33e955cb9 ("fib_trie: Fib walk rcu should take a tnode and key 
instead of a trie and a leaf")
      Reported-by: Brian Rak <brak@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a22c4d7e34402ccdf3414f64c50365436eba7b93
  Author: Ming Lin <ming.l@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:59:42 2015 -0700

      block: re-add discard_granularity and alignment checks

      In commit b49a087("block: remove split code in
      blkdev_issue_{discard,write_same}"), discard_granularity and alignment
      checks were removed. Ideally, with bio late splitting, the upper layers
      shouldn't need to depend on device's limits.

      Christoph reported a discard regression on the HGST Ultrastar SN100 NVMe
      device when mkfs.xfs. We have not found the root cause yet.

      This patch re-adds discard_granularity and alignment checks by reverting
      the related changes in commit b49a087. The good thing is now we can
      remove the 2G discard size cap and just use UINT_MAX to avoid bi_size
      overflow.

      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Tested-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Ming Lin <ming.l@xxxxxxxxxxxxxxx>
      Reviewed-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 23d88271b4f97f66de521ac9b2c1471e6311cf26
  Merge: 3d0aa36 625faa6
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 07:24:53 2015 +0900

      Merge branch 'fixes' of git://ftp.arm.linux.org.uk/~rmk/linux-arm

      Pull ARM fixes from Russell King:
       "Two fixes for ARM and one for clkdev:

         - Fix another build issue with vdsomunge on non-glibc systems
         - Fix a randconfig build error caused by an invalid configuration
         - Fix a clkdev problem causing the Nokia n700 to no longer boot"

      * 'fixes' of git://ftp.arm.linux.org.uk/~rmk/linux-arm:
        clkdev: fix clk_add_alias() with a NULL alias device name
        ARM: 8445/1: fix vdsomunge not to depend on glibc specific byteswap.h
        ARM: make RiscPC depend on MMU

  commit 3d0aa366072a194c6a339d37b85d5b99e936097e
  Merge: dc5bc3f 174fd8d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 07:22:15 2015 +0900

      Merge branch 'for-linus' of git://git.kernel.dk/linux-block

      Pull blkcg fix from Jens Axboe:
       "One final fix that should go into 4.3.  It's a simple 2x1 liner,
        fixing a blkcg accounting issue.  It was using the wrong bio member to
        look at the sync and write bits..."

      * 'for-linus' of git://git.kernel.dk/linux-block:
        blkcg: fix incorrect read/write sync/async stat accounting

  commit dc5bc3f1e3d886ce1193281bb2bfb2b44f4aeae4
  Merge: 9e17f90 3fc89ad
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 07:20:10 2015 +0900

      Merge branch 'linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

      Pull crypto fix from Herbert Xu:
       "This fixes a problem in the Crypto API that may cause spurious errors
        when signals are received by the process that made the orignal system
        call into the kernel"

      * 'linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:
        crypto: api - Only abort operations on fatal signal

  commit 9e17f9070280bd58af9aead415544387a7a61427
  Merge: 858e904 275d7d4
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 07:17:50 2015 +0900

      Merge tag 'fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux

      Pull module preemption fix from Rusty Russell:
       "Turns out we should have always been disabling preemption here;
        someone finally caught it thanks to Peter Z's additional checks"

      * tag 'fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux:
        module: Fix locking in symbol_put_addr()

  commit f4efcce33d2e5224a905369f9906f3931f5d907c
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Tue Oct 27 17:35:58 2015 -0300

      perf tools: Search for more options when passing args to -h

      Recently 'perf <tool> -h' was made aware of arguments and would show
      just the help for the arguments specified, but that required a strict
      form, i.e.:

        $ perf -h --tui

      worked, but:

        $ perf -h tui

      didn't.

      Make it support both cases and also look at the option help when neither
      matches, so that he following examples works:

        $ perf report -h interface

         Usage: perf report [<options>]

          --gtk    Use the GTK2 interface
          --stdio  Use the stdio interface
          --tui    Use the TUI interface

        $ perf report -h stack

         Usage: perf report [<options>]

          -g, --call-graph <print_type,threshold[,print_limit],order,
                            sort_key[,branch]>
            Display call graph (stack chain/backtrace):

              print_type:  call graph printing style (graph|flat|fractal|none)
              threshold:   minimum call graph inclusion threshold (<percent>)
              print_limit: maximum number of call graph entry (<number>)
              order:       call graph order (caller|callee)
              sort_key:    call graph sort key (function|address)
              branch:      include last branch info to call graph (branch)

            Default: graph,0.5,caller,function
              --max-stack <n>   Set the maximum stack depth when parsing the
                                callchain, anything beyond the specified depth
                                will be ignored. Default: 127
        $

      Suggested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-xzqvamzqv3cv0p6w3inhols3@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 1e5a29318ba8506f52a8d727b5c6a53143f9882a
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Sun Oct 25 15:51:18 2015 +0100

      perf stat: Cache aggregated map entries in extra cpumap

      Currently any time we need to access socket or core id for given cpu, we
      access the sysfs topology file.

      Adding a cpus_aggr_map cpu_map to cache those entries.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445784728-21732-3-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2322f573f8131da9c6d1fab01fe0a0c2c23aa549
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Sun Oct 25 15:51:17 2015 +0100

      perf cpu_map: Add cpu_map__empty_new function

      Adding cpu_map__empty_new interface to create empty cpumap with given
      size. The cpumap entries are initialized with -1.

      It'll be used for caching cpu_map in following patches.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445784728-21732-2-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit af3399817428d8adc2c87c91df23fde77dbcdb35
  Author: Jiri Olsa <jolsa@xxxxxxxxxx>
  Date:   Sun Oct 25 15:51:44 2015 +0100

      perf evsel: Move id_offset out of struct perf_evsel union member

      Because the 'perf stat record' patches will use the id_offset member
      together with the priv pointer.

      Signed-off-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Tested-by: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445784728-21732-29-git-send-email-jolsa@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 06ef431ab8060aa8ef51b36f56773d01f6a53f24
  Merge: 790a2ee 2c66e24d
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Tue Oct 27 18:40:47 2015 +0100

      Merge tag 'efi-next' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mfleming/efi into core/efi

      Pull EFI fix from Matt Fleming:

        - Fix a kernel panic by not passing EFI virtual mapping addresses to
          __pa() in the x86 pageattr code. Since these virtual addreses are
          not part of the direct mapping or kernel text mapping, passing them
          to __pa() will trigger a BUG_ON() when CONFIG_DEBUG_VIRTUAL is
          enabled. (Sai Praneeth Prakhya)

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit d94b986aa734efea09fbc8f59390ba2e4e00f9d0
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sat Oct 24 16:42:35 2015 +0200

      pinctrl: at91: add missing of_node_put

      for_each_child_of_node performs an of_node_get on each iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression root,e;
      local idexpression child;
      @@

       for_each_child_of_node(root, child) {
         ... when != of_node_put(child)
             when != e = child
      (
         return child;
      |
      +  of_node_put(child);
      ?  return ...;
      )
         ...
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Acked-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 9d4cc85d290578ec07e37d063d73f0e8707ea3eb
  Author: Jon Hunter <jonathanh@xxxxxxxxxx>
  Date:   Fri Oct 16 10:24:01 2015 +0100

      pinctrl: tegra-xusb: Correct lane mux options

      The description of the XUSB_PADCTL_USB3_PAD_MUX_0 register in the Tegra124
      documentation implies that all functions (pcie, usb3 and sata) can be
      muxed onto to all lanes (pcie lanes 0-4 and sata lane 0). However, it has
      been confirmed that this is not the case and the mux'ing options much more
      limited. Unfortunately, the public documentation has not been updated to
      reflect this and so detail the actual mux'ing options here by function:

      Function:         Lanes:
      pcie1 x2:         pcie3, pcie4
      pcie1 x4:         pcie1, pcie2, pcie3, pcie4
      pcie2 x1 (option1):       pcie0
      pcie2 x1 (option2):       pcie2
      usb3 port 0:              pcie0
      usb3 port 1 (option 1):   pcie1
      usb3 port 1 (option 2):   sata0
      sata:                     sata0

      Signed-off-by: Jon Hunter <jonathanh@xxxxxxxxxx>
      Acked-by: Stephen Warren <swarren@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 787dfbb294b25b37211d0749e7cdbb20d443c680
  Author: Soren Brinkmann <soren.brinkmann@xxxxxxxxxx>
  Date:   Fri Oct 23 09:25:30 2015 -0700

      gpio: zynq: Document interrupt-controller DT binding

      HW and driver support the GPIO as interrupt-controller.
      Document that in the DT binding.

      Signed-off-by: Soren Brinkmann <soren.brinkmann@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 79786721c29ff8fecf2903ba080479476015553d
  Author: Soren Brinkmann <soren.brinkmann@xxxxxxxxxx>
  Date:   Thu Oct 22 21:51:18 2015 -0700

      gpio: xilinx: Drop architecture dependencies

      The driver does not have any real architecture dependencies. To avoid
      listing each architecture that might use this driver on some
      FPGA-enabled platform, drop these dependencies.

      Signed-off-by: Soren Brinkmann <soren.brinkmann@xxxxxxxxxx>
      Acked-by: Moritz Fischer <moritz.fischer@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit ee1a6ca43dba07465c71f6ab661702d703f5eb06
  Author: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 13:08:45 2015 +0300

      pinctrl: intel: Add Intel Broxton pin controller support

      This driver adds pinctrl/GPIO support for Intel Broxton. The GPIO
      controller is based on the same hardware design that is already used in
      Intel Sunrisepoint so we leverage the core driver here.

      Signed-off-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 4341e8a5458f10cb7265167061fa06ebf3a3a903
  Author: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 13:08:44 2015 +0300

      pinctrl: intel: Allow requesting pins which are in ACPI mode as GPIOs

      Reserved for ACPI actually means that in such case the GPIO hardware will
      not update the interrupt status register (GPI_IS) even if the pin is
      configured to trigger an interrupt. It will update GPI_GPE_STS instead and
      does not trigger an interrupt.

      Allow using such pins as GPIOs, only prevent their usage as interrupts.

      We also rename function intel_pad_reserved_for_acpi() to be
      intel_pad_acpi_mode() which reflects the actual meaning better.

      Signed-off-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit c71183697250b356be6c7c1abc2e9a74073e1dca
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Sun Oct 25 00:49:27 2015 +0900

      perf tools: Introduce usage_with_options_msg()

      Now usage_with_options() setup a pager before printing message so normal
      printf() or pr_err() will not be shown.  The usage_with_options_msg()
      can be used to print some help message before usage strings.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445701767-12731-4-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 193b40c8258f781d8dc395909b2971472aad6796
  Author: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 13:08:43 2015 +0300

      pinctrl: intel: Add support for multiple GPIO chips sharing the interrupt

      On Intel Broxton the GPIO hardware consists of several chips that all 
share
      the parent interrupt. It is not possible to handle this by setting chained
      handler for each chip (as they will overwrite each other).

      To overcome this we need to request the interrupt using devm_request_irq()
      and pass IRQF_SHARED with the flags.

      Signed-off-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit b2f68b6306dbdbfd9b8cf46c697b52efa78f9ad6
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Wed Oct 21 00:12:00 2015 -0700

      gpio: generic: Revert to old error handling in bgpio_map

      Returning an error instead of NULL in bgpio_map if
      platform_get_resource_byname does not find a resource was introduced with
      commit cf3f2a2c8bae ("gpio: generic: improve error handling in 
bgpio_map").
      This results in several qemu runtime failures with default and non-default
      configurations, if attempts are made to boot from mmcblk0. Examples for
      failures with multi_v7_defconfig are

      Machine: vexpress-a9      dtb: vexpress-v2p-ca9
      Machine: vexpress-a15     dtb: vexpress-v2p-ca15-tc1

      Crash:

      VFS: Cannot open root device "mmcblk0" or unknown-block(0,0): error -6
      Please append a correct "root=" boot option; here are the available 
partitions:
      Kernel panic - not syncing: VFS: Unable to mount root fs on 
unknown-block(0,0)

      Looking into the code, always returning an error if bgpio_map fails
      does not appear to make much sense, since the code in bgpio_setup_io
      specifically supports some of the resources to be NULL.

      Fixes: cf3f2a2c8bae ("gpio: generic: improve error handling in bgpio_map")
      Cc: Heiner Kallweit <hkallweit1@xxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit ef0eebc05130b0d22b0ea65c0cd014ee16fc89c7
  Author: Douglas Anderson <dianders@xxxxxxxxxxxx>
  Date:   Tue Oct 20 21:15:06 2015 -0700

      drivers/pinctrl: Add the concept of an "init" state

      For pinctrl the "default" state is applied to pins before the driver's
      probe function is called.  This is normally a sensible thing to do,
      but in some cases can cause problems.  That's because the pins will
      change state before the driver is given a chance to program how those
      pins should behave.

      As an example you might have a regulator that is controlled by a PWM
      (output high = high voltage, output low = low voltage).  The firmware
      might leave this pin as driven high.  If we allow the driver core to
      reconfigure this pin as a PWM pin before the PWM's probe function runs
      then you might end up running at too low of a voltage while we probe.

      Let's introudce a new "init" state.  If this is defined we'll set
      pinctrl to this state before probe and then "default" after probe
      (unless the driver explicitly changed states already).

      An alternative idea that was thought of was to use the pre-existing
      "sleep" or "idle" states and add a boolean property that we should
      start in that mode.  This was not done because the "init" state is
      needed for correctness and those other states are only present (and
      only transitioned in to and out of) when (optional) power management
      is enabled.

      Changes in v3:
      - Moved declarations to pinctrl/devinfo.h
      - Fixed author/SoB

      Changes in v2:
      - Added comment to pinctrl_init_done() as per Linus W.

      Signed-off-by: Douglas Anderson <dianders@xxxxxxxxxxxx>
      Acked-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
      Tested-by: Caesar Wang <wxt@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit c307b002548590c5d8c32b964831de671ad4affe
  Author: Grygorii Strashko <grygorii.strashko@xxxxxx>
  Date:   Tue Oct 20 17:22:15 2015 +0300

      gpio: add a real time compliance notes

      Put in a compliance checklist.

      Signed-off-by: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 4aa50b87f1e99164a93314c25ed3a827c24bc54f
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Tue Oct 27 11:13:18 2015 +0100

      Revert "gpio: add a real time compliance checklist"

      This reverts commit 677b2ff4afd9996eabefc9472c701211b4b49e87.

  commit 1c6e58d83615678875bf52747f8841c49291dfcf
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 17:15:40 2015 +0200

      mmc: pwrseq: Use highest priority for eMMC restart handler

      The pwrseq_emmc driver does a eMMC card reset before a system reboot to
      allow broken or limited ROM boot-loaders (that don't have an eMMC reset
      logic) to be able to read the second stage from the eMMC.

      But this has to be called before a system reboot handler and while most
      of them use the priority 128, there are other restart handlers (such as
      the syscon-reboot one) that use a higher priority. So, use the highest
      priority to make sure that the eMMC hw is reset before a system reboot.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Tested-by: Markus Reichl <m.reichl@xxxxxxxxxxxxx>
      Tested-by: Anand Moon <linux.amoon@xxxxxxxxx>
      Reviewed-by: Alim Akhtar <alim.akhtar@xxxxxxxxxxx>
      Tested-by: Douglas Anderson <dianders@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit bac7f4c1bf5e7c6ccd5bb71edc015b26c77f7460
  Author: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
  Date:   Tue Oct 20 17:25:09 2015 +0900

      pinctrl: uniphier: set input-enable before pin-muxing

      While IECTRL is disabled, input signals are pulled-down internally.
      If pin-muxing is set up first, glitch signals (Low to High transition)
      might be input to hardware blocks.

      Bad case scenario:
      [1] The hardware block is already running before pinctrl is handled.
         (the reset is de-asserted by default or by a firmware, for example)
      [2] The pin-muxing is set up.  The input signals to hardware block
          are pulled-down by the chip-internal biasing.
      [3] The pins are input-enabled.  The signals from the board reach the
          hardware block.

      Actually, one invalid character is input to the UART blocks for such
      SoCs as PH1-LD4, PH1-sLD8, where UART devices start to run at the
      power on reset.

      To avoid such problems, pins should be input-enabled before muxing.

      Fixes: 6e9088920258 ("pinctrl: UniPhier: add UniPhier pinctrl core 
support")
      Signed-off-by: Masahiro Yamada <yamada.masahiro@xxxxxxxxxxxxx>
      Reported-by: Dai Okamura <okamura.dai@xxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 1ceacea220c36e7933216e79b0ca21e1318b7c8d
  Author: William Breathitt Gray <vilhelm.gray@xxxxxxxxx>
  Date:   Mon Oct 19 12:59:14 2015 -0400

      gpio: Add GPIO support for the ACCES 104-IDIO-16

      The ACCES 104-IDIO-16 family of PC/104 utility boards feature 16
      optically isolated inputs and 16 optically isolated FET solid state
      outputs. This driver provides GPIO support for these 32 channels of
      digital I/O. Change-of-State detection interrupts are not supported.

      GPIO 0-15 correspond to digital outputs 0-15, while GPIO 16-31
      correspond to digital inputs 0-15. The base port address for the device
      may be set via the idio_16_base module parameter.

      Signed-off-by: William Breathitt Gray <vilhelm.gray@xxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit e0548004d433e4454c5d129a5c5b0905442bfe8e
  Author: Pramod Kumar <pramodku@xxxxxxxxxxxx>
  Date:   Mon Oct 19 11:13:11 2015 +0530

      pinctrl: cygnus: Add new compatible string for gpio controller driver

      This new compatible string, "brcm,iproc-gpio", should be used for
      all new iproc-based future SoCs.

      Signed-off-by: Pramod Kumar <pramodku@xxxxxxxxxxxx>
      Reviewed-by: Ray Jui <rjui@xxxxxxxxxxxx>
      Reviewed-by: Scott Branden <sbranden@xxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit ea92211c0844afbe8b3f83809ea2f51bc53acc68
  Author: Pramod Kumar <pramodku@xxxxxxxxxxxx>
  Date:   Mon Oct 19 11:13:09 2015 +0530

      pinctrl: cygnus: Remove GPIO to Pinctrl pin mapping from driver

      Remove gpio to pinctrl pin mapping code from driver and
      address this through standard property "gpio-ranges".

      Signed-off-by: Pramod Kumar <pramodku@xxxxxxxxxxxx>
      Reviewed-by: Ray Jui <rjui@xxxxxxxxxxxx>
      Reviewed-by: Scott Branden <sbranden@xxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 03e09bc18580c84961c8a05470e8d5ed197ecd84
  Author: Pramod Kumar <pramodku@xxxxxxxxxxxx>
  Date:   Mon Oct 19 11:13:08 2015 +0530

      pinctrl: cygnus: Optional DT property to support pin mappings

      If GPIO controller's pins are muxed, pin-controller subsystem
      need to be intimated by defining mapping between gpio and
      pinmux controller. This patch adds required properties to
      define this mapping via DT.

      Signed-off-by: Pramod Kumar <pramodku@xxxxxxxxxxxx>
      Reviewed-by: Ray Jui <rjui@xxxxxxxxxxxx>
      Reviewed-by: Scott Branden <sbranden@xxxxxxxxxxxx>
      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 6397b7f5f405f30f03f67ef829306c5af6d3369b
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Oct 27 14:24:29 2015 +0800

      mmc: mediatek: add HS400 support

      add HS400 mode and tune support

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 9979dbe5158899b556eb772b7335e29417ac0ddd
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Oct 27 14:24:28 2015 +0800

      mmc: mmc: extend the mmc_send_tuning()

      The mmc_execute_tuning() has already prepared the opcode,
      there is no need to prepare it again at mmc_send_tuning(),
      and, there is a BUG of mmc_send_tuning() to determine the opcode
      by bus width, assume eMMC was running at HS200, 4bit mode,
      then the mmc_send_tuning() will overwrite the opcode from CMD21
      to CMD19, then got error.

      in addition, extend an argument of "cmd_error" to allow getting
      if there was cmd error when tune response.

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      [Ulf: Rebased patch]
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit c9b5061e7728da1f7192ecaf3ffab4a7300920dc
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Oct 27 14:24:26 2015 +0800

      mmc: mediatek: add implement of ops->hw_reset()

      add implement of ops->hw_reset() for eMMC

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 62b0d27af85ef1b1729c2ed675c12020e1fbf10f
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Oct 27 14:24:25 2015 +0800

      mmc: mediatek: fix got GPD checksum error interrupt when data transfer

      Even if we only use one gpd, we need alloc 2 gpd and make
      the gpd->next pointer to the second gpd, or may get gpd checksum
      error, this was checked by hardware

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 6e622947e149fa9fd62e3609aab010935c8e10bd
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Oct 27 14:24:24 2015 +0800

      mmc: mediatek: change the argument "ddr" to "timing"

      use the ios->timing directly is better
      It can reflect current timing and do settings by timing

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 726a9aac31a89d5a02614ca8f2b3f644df621c27
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Oct 27 14:24:23 2015 +0800

      mmc: mediatek: make cmd_ints_mask to const

      cmd_ints_mask and data_ints_mask are constant value,
      so make it to const

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 2c21d26825d5c1fda1729541d5fad56ee7ef7fa2
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Oct 27 14:24:22 2015 +0800

      mmc: dt-bindings: update Mediatek MMC bindings

      Add 400Mhz clock source for HS400 mode

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 794f15782d9f12aa5a43f796680a5fc4f2c424e3
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Oct 27 14:24:21 2015 +0800

      mmc: core: Add DT bindings for eMMC hardware reset support

      Sometime only need set MMC_CAP_HW_RESET for one of MMC hosts,
      So set it in device tree is better.

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 324e786ee39c70ffbdc280c34b7d2b6da5c87879
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 27 08:35:24 2015 +0100

      bluetooth: 6lowpan: fix NOHZ: local_softirq_pending

      Jukka reported about the following warning:

      "NOHZ: local_softirq_pending 08"

      I remember this warning and we had a similar issue when using workqueues
      and calling netif_rx. See commit 5ff3fec ("mac802154: fix NOHZ
      local_softirq_pending 08 warning").

      This warning occurs when calling "netif_rx" inside the wrong context
      (non softirq context). The net core api offers "netif_rx_ni" to call
      netif_rx inside the correct softirq context.

      Reported-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit ef12cb904e096335ef179bfe30e637a9c2464343
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 26 12:38:13 2015 +0100

      s390/cio: move ccw_device_stlck functions

      device_ops.c should only contain functions that are called by ccw device
      drivers. Move the cio internal functions that handle unconditional
      reserve + release to device_pgid.c

      Acked-by: Peter Oberparleiter <oberpar@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 8421d212e831cb03ba65bada57a733ad875286bf
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 26 12:35:06 2015 +0100

      s390/cio: move ccw_device_call_handler

      device_ops.c should only contain functions that are called by ccw device
      drivers. Move the cio internal function ccw_device_call_handler to
      device_fsm.c where it's used. Remove some useless comments while at it.

      Acked-by: Peter Oberparleiter <oberpar@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 439eb131f796d8b2cf625d791b22b42962b9dd0d
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Thu Oct 15 13:40:55 2015 +0200

      s390/topology: reduce per_cpu() invocations

      Each per_cpu() invocation generates extra code. Since there are a lot
      of similiar calls in the topology code we can avoid a lot of them.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 36324963a3006d2c416095d87d8272e4825c679b
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Mon Oct 12 13:04:12 2015 +0200

      s390/nmi: reduce size of percpu variable

      Change the flag fields within struct mcck_struct to simple bit fields
      to reduce the size of the structure which is used as percpu variable.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 975be635d929e3cfdae149d6de055f31a17c92d7
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Mon Oct 12 13:03:05 2015 +0200

      s390/nmi: fix terminology

      According to the architecture registers are validated and not
      revalidated. So change comments and functions names to match.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit dc6e15556a9f21d640a62ae6de3cbfa68ec687a4
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Mon Oct 12 13:00:39 2015 +0200

      s390/nmi: remove casts

      Remove all the casts to and from the machine check interruption code.
      This patch changes struct mci to a union, which contains an anonymous
      structure with the already known bits and in addition an unsigned
      long field, which contains the raw machine check interruption code.

      This allows to simply assign and decoce the interruption code value
      without the need for all those casts we had all the time.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 3d68286a4304574c250ca3b0a5429d2901688f16
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Mon Oct 12 12:39:09 2015 +0200

      s390/nmi: remove pointless error strings

      s390_handle_damage() has character string parameter which was used as
      a pointer to verbose error message. The hope was (a lot of years ago)
      when analyzing dumps that register R2 would still contain the pointer
      and therefore it would be rather easy to tell what went wrong.

      However gcc optimizes the strings away since a long time. And even if
      it wouldn't it is necessary to have a close look at the machine check
      interruption code to tell what's wrong.

      So remove the pointless error strings.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit f9e6edfb9cf780edfe0a649a85ed00032e787f69
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Mon Oct 12 12:28:28 2015 +0200

      s390: don't store registers on disabled wait anymore

      The current disabled wait code stores register contents into their
      save areas, however it is (at least) missing the new vector registers.

      Given the fact that the whole exercise seems to be rather pointless
      simply don't save any registers anymore.

      In a "live" system it is always possible to inspect register contents,
      and in case of a dump the register contents will be stored by the
      dump mechanism.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit ecbafda85371a3d85814aab8ff080a19e4d98b36
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Mon Oct 12 11:54:03 2015 +0200

      s390: get rid of __set_psw_mask()

      With the removal of 31 bit code we can always assume that the epsw
      instruction is available. Therefore use the __extract_psw() function
      to disable and enable machine checks.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 174fd8d369613c4e06660f3704caaba48dac8554
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Thu Oct 22 09:27:12 2015 +0900

      blkcg: fix incorrect read/write sync/async stat accounting

      While unifying how blkcg stats are collected, 77ea733884eb ("blkcg:
      move io_service_bytes and io_serviced stats into blkcg_gq")
      incorrectly used bio->flags instead of bio->rw to tell the IO type.
      This made IOs to be accounted as the wrong type.  Fix it.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Fixes: 77ea733884eb ("blkcg: move io_service_bytes and io_serviced stats 
into blkcg_gq")
      Reviewed-by: Jeff Moyer <jmoyer@xxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit d6a32b98099fb6b257e9b4f7b3febb5aae6f7408
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Thu Oct 8 09:25:32 2015 +0100

      scsi_dh: don't try to load a device handler during async probing

      Request_module gets really unhappy when called from async probing, so
      revert to not auto load device handler modules during the SCSI bus
      scan.  While autoloading would be really useful we never did this
      until 4.3-rc and it turns out that functionality doesn't actually
      work.

      Fixes: 566079 ("dm-mpath, scsi_dh: request scsi_dh modules in scsi_dh, 
not dm-mpath")
      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Reported-by: Paul Mackerras <paulus@xxxxxxxxxx>
      Tested-by: Paul Mackerras <paulus@xxxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 8941faa161b526199e55ca7764cf875383453612
  Author: emmanuel.grumbach@xxxxxxxxx <emmanuel.grumbach@xxxxxxxxx>
  Date:   Mon Oct 26 10:31:29 2015 +0200

      net: tso: add support for IPv6

      Adding IPv6 for the TSO helper API is trivial:
      * Don't play with the id (which doesn't exist in IPv6)
      * Correctly update the payload_len (don't include the
        length of the IP header itself)

      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
      Acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 61b9da925a5e985afc268eb8184f1af3ef542422
  Merge: 4b3418f 59fbcbc
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 26 22:16:02 2015 -0700

      Merge tag 'arcnet-for-4.4-rc1' of git://git.pengutronix.de/git/mgr/linux

      Michael Grzeschik says:

      ====================
      This series includes code simplifaction. The main changes are the correct
      xceiver handling (enable/disable) of the com20020 cards. The driver now 
handles
      link status change detection. The EAE PCI-ARCNET cards now make use of the
      rotary encoded subdevice indexing and got support for led triggers on 
transmit
      and reconnection events.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8fe012964a39ead19405ba8d65f50d4fd598f5b8
  Merge: 7e3b6e7 26b7974
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 26 22:08:22 2015 -0700

      Merge branch 'net_of_node_put'

      Julia Lawall says:

      ====================
      add missing of_node_put

      The various for_each device_node iterators performs an of_node_get on each
      iteration, so a break out of the loop requires an of_node_put.

      The complete semantic patch that fixes this problem is
      (http://coccinelle.lip6.fr):

      // <smpl>
      @r@
      local idexpression n;
      expression e1,e2;
      iterator name for_each_node_by_name, for_each_node_by_type,
      for_each_compatible_node, for_each_matching_node,
      for_each_matching_node_and_match, for_each_child_of_node,
      for_each_available_child_of_node, for_each_node_with_property;
      iterator i;
      statement S;
      expression list [n1] es;
      @@

      (
      (
      for_each_node_by_name(n,e1) S
      |
      for_each_node_by_type(n,e1) S
      |
      for_each_compatible_node(n,e1,e2) S
      |
      for_each_matching_node(n,e1) S
      |
      for_each_matching_node_and_match(n,e1,e2) S
      |
      for_each_child_of_node(e1,n) S
      |
      for_each_available_child_of_node(e1,n) S
      |
      for_each_node_with_property(n,e1) S
      )
      &
      i(es,n,...) S
      )

      @@
      local idexpression r.n;
      iterator r.i;
      expression e;
      expression list [r.n1] es;
      @@

       i(es,n,...) {
         ...
      (
         of_node_put(n);
      |
         e = n
      |
         return n;
      |
      +  of_node_put(n);
      ?  return ...;
      )
         ...
       }

      @@
      local idexpression r.n;
      iterator r.i;
      expression e;
      expression list [r.n1] es;
      @@

       i(es,n,...) {
         ...
      (
         of_node_put(n);
      |
         e = n
      |
      +  of_node_put(n);
      ?  break;
      )
         ...
       }
      ... when != n

      @@
      local idexpression r.n;
      iterator r.i;
      expression e;
      identifier l;
      expression list [r.n1] es;
      @@

       i(es,n,...) {
         ...
      (
         of_node_put(n);
      |
         e = n
      |
      +  of_node_put(n);
      ?  goto l;
      )
         ...
       }
      ...
      l: ... when != n// </smpl>
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 26b7974d9ad7f93891ee8c39ee63bd2515da7744
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Oct 25 14:57:07 2015 +0100

      net: mv643xx_eth: add missing of_node_put

      for_each_available_child_of_node performs an of_node_get on each 
iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression root,e;
      local idexpression child;
      @@

       for_each_available_child_of_node(root, child) {
         ... when != of_node_put(child)
             when != e = child
      (
         return child;
      |
      +  of_node_put(child);
      ?  return ...;
      )
         ...
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 81a577034b000964ca791281a975f0ba9a9d7eed
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Oct 25 14:57:06 2015 +0100

      ath6kl: add missing of_node_put

      for_each_compatible_node performs an of_node_get on each iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression e;
      local idexpression n;
      @@

       for_each_compatible_node(n,...) {
         ... when != of_node_put(n)
             when != e = n
      (
         return n;
      |
      +  of_node_put(n);
      ?  return ...;
      )
         ...
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 028623418766ea64f4256035b06ac6cbc0a67892
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Oct 25 14:57:03 2015 +0100

      net: phy: mdio: add missing of_node_put

      for_each_available_child_of_node performs an of_node_get on each 
iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression root,e;
      local idexpression child;
      @@

       for_each_available_child_of_node(root, child) {
         ... when != of_node_put(child)
             when != e = child
      (
         return child;
      |
      +  of_node_put(child);
      ?  return ...;
      )
         ...
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 447ed7360037b6e38c0206ddcbd04a256ec94099
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Oct 25 14:57:02 2015 +0100

      netdev/phy: add missing of_node_put

      for_each_available_child_of_node performs an of_node_get on each 
iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      local idexpression r.n;
      expression r,e;
      @@

       for_each_available_child_of_node(r,n) {
         ...
      (
         of_node_put(n);
      |
         e = n
      |
      +  of_node_put(n);
      ?  break;
      )
         ...
       }
      ... when != n
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bd252796852193277a07da505601a2f407c70e0b
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Oct 25 14:57:01 2015 +0100

      net: netcp: add missing of_node_put

      for_each_child_of_node performs an of_node_get on each iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      local idexpression r.n;
      expression r,e;
      @@

       for_each_child_of_node(r,n) {
         ...
      (
         of_node_put(n);
      |
         e = n
      |
      +  of_node_put(n);
      ?  break;
      )
         ...
       }
      ... when != n
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8c387ebbaff8652943a1cbcab496aecadc6a8875
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sun Oct 25 14:57:00 2015 +0100

      net: thunderx: add missing of_node_put

      for_each_child_of_node performs an of_node_get on each iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      local idexpression r.n;
      expression r,e;
      @@

       for_each_child_of_node(r,n) {
         ...
      (
         of_node_put(n);
      |
         e = n
      |
      +  of_node_put(n);
      ?  break;
      )
         ...
       }
      ... when != n
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7e3b6e7423d5f994257c1de88e06b509673fdbcf
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sat Oct 24 05:47:44 2015 -0700

      ipv6: gre: support SIT encapsulation

      gre_gso_segment() chokes if SIT frames were aggregated by GRO engine.

      Fixes: 61c1db7fae21e ("ipv6: sit: add GSO/TSO support")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2c501cdd6823a644cf35ac594c635310bf077125
  Author: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
  Date:   Mon Oct 26 16:17:14 2015 +0000

      Bluetooth: Fix crash on fast disconnect of SCO

      Fix a crash that may happen when a connection is closed before it was 
fully
      established. Mapping conn->hcon was released by shutdown function, but it
      is still referenced in (not yet finished) connection established handling
      function.

      [ 4635.254073] BUG: unable to handle kernel NULL pointer dereference at 
00000013
      [ 4635.262058] IP: [<c11659f0>] memcmp+0xe/0x25
      [ 4635.266835] *pdpt = 0000000024190001 *pde = 0000000000000000
      [ 4635.273261] Oops: 0000 [#1] PREEMPT SMP
      [ 4635.277652] Modules linked in: evdev ecb vfat fat libcomposite usb2380 
isofs zlib_inflate rfcomm(O) udc_core bnep(O) btusb(O) btbcm(O) btintel(O) 
bluetooth(O) cdc_acm arc4 uinput hid_mule
      [ 4635.321761] Pid: 363, comm: kworker/u:2H Tainted: G           O 
3.8.0-119.1-plk-adaptation-byt-ivi-brd #1
      [ 4635.332642] EIP: 0060:[<c11659f0>] EFLAGS: 00010206 CPU: 0
      [ 4635.338767] EIP is at memcmp+0xe/0x25
      [ 4635.342852] EAX: e4720678 EBX: 00000000 ECX: 00000006 EDX: 00000013
      [ 4635.349849] ESI: 00000000 EDI: fb85366c EBP: e40c7dc0 ESP: e40c7db4
      [ 4635.356846]  DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
      [ 4635.362873] CR0: 8005003b CR2: 00000013 CR3: 24191000 CR4: 001007f0
      [ 4635.369869] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
      [ 4635.376865] DR6: ffff0ff0 DR7: 00000400
      [ 4635.381143] Process kworker/u:2H (pid: 363, ti=e40c6000 task=e40c5510 
task.ti=e40c6000)
      [ 4635.390080] Stack:
      [ 4635.392319]  e4720400 00000000 fb85366c e40c7df4 fb842285 e40c7de2 
fb853200 00000013
      [ 4635.401003]  e3f101c4 e4720678 e3f101c0 e403be0a e40c7dfc e416a000 
e403be0a fb85366c
      [ 4635.409692]  e40c7e1c fb820186 020f6c00 e47c49ac e47c4008 00000000 
e416a000 e47c402c
      [ 4635.418380] Call Trace:
      [ 4635.421153]  [<fb842285>] sco_connect_cfm+0xff/0x236 [bluetooth]
      [ 4635.427893]  [<fb820186>] 
hci_sync_conn_complete_evt.clone.101+0x227/0x268 [bluetooth]
      [ 4635.436758]  [<fb82370f>] hci_event_packet+0x1caa/0x21d3 [bluetooth]
      [ 4635.443859]  [<c106231f>] ? trace_hardirqs_on+0xb/0xd
      [ 4635.449502]  [<c1375b8a>] ? _raw_spin_unlock_irqrestore+0x42/0x59
      [ 4635.456340]  [<fb814b67>] hci_rx_work+0xb9/0x350 [bluetooth]
      [ 4635.462663]  [<c1039f1e>] ? process_one_work+0x17b/0x2e6
      [ 4635.468596]  [<c1039f77>] process_one_work+0x1d4/0x2e6
      [ 4635.474333]  [<c1039f1e>] ? process_one_work+0x17b/0x2e6
      [ 4635.480294]  [<fb814aae>] ? hci_cmd_work+0xda/0xda [bluetooth]
      [ 4635.486810]  [<c103a3fa>] worker_thread+0x171/0x20f
      [ 4635.492257]  [<c10456c5>] ? complete+0x34/0x3e
      [ 4635.497219]  [<c103ea06>] kthread+0x90/0x95
      [ 4635.501888]  [<c103a289>] ? manage_workers+0x1df/0x1df
      [ 4635.507628]  [<c1376537>] ret_from_kernel_thread+0x1b/0x28
      [ 4635.513755]  [<c103e976>] ? __init_kthread_worker+0x42/0x42
      [ 4635.519975] Code: 74 0d 3c 79 74 04 3c 59 75 0c c6 02 01 eb 03 c6 02 
00 31 c0 eb 05 b8 ea ff ff ff 5d c3 55 89 e5 57 56 53 31 db eb 0e 0f b6 34 18 
<0f> b6 3c 1a 43 29 fe 75 07 49 85 c9 7f
      [ 4635.541264] EIP: [<c11659f0>] memcmp+0xe/0x25 SS:ESP 0068:e40c7db4
      [ 4635.548166] CR2: 0000000000000013
      [ 4635.552177] ---[ end trace e05ce9b8ce6182f6 ]---

      Signed-off-by: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 4b3418fba0fe819197e3359d5ddbef84ba2c59de
  Author: Bjørn Mork <bjorn@xxxxxxx>
  Date:   Sat Oct 24 14:00:20 2015 +0200

      ipv6: icmp: include addresses in debug messages

      Messages like "icmp6_send: no reply to icmp error" are close
      to useless. Adding source and destination addresses to provide
      some more clue.

      Signed-off-by: Bjørn Mork <bjorn@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1075ef5950da97927ae1b3ef76d03e211c4fdb55
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Fri Oct 23 14:58:19 2015 -0700

      bpf: make tracing helpers gpl only

      exported perf symbols are GPL only, mark eBPF helper functions
      used in tracing as GPL only as well.

      Suggested-by: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 62544ce8e01c1879d420ba309f7f319d24c0f4e6
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Thu Oct 22 17:10:14 2015 -0700

      bpf: fix bpf_perf_event_read() helper

      Fix safety checks for bpf_perf_event_read():
      - only non-inherited events can be added to perf_event_array map
        (do this check statically at map insertion time)
      - dynamically check that event is local and !pmu->count
      Otherwise buggy bpf program can cause kernel splat.

      Also fix error path after perf_event_attrs()
      and remove redundant 'extern'.

      Fixes: 35578d798400 ("bpf: Implement function bpf_perf_event_read() that 
get the selected hardware PMU conuter")
      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Tested-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d8e018c0b3211902af1bfb5d5b280f955a4633b7
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:45 2015 +0100

      NFC: nfcmrvl: update device tree bindings for Marvell NFC

      Align NFC bindgins to use marvell instead of mrvl.

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit caf6e49bf6d02e6bb94df680bbe3beaf680fdefa
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:44 2015 +0100

      NFC: nfcmrvl: add spi driver

      This driver adds the support of SPI-based Marvell NFC controller.

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 2bd832459a0827b8dcf13b345380b66f92089d74
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:43 2015 +0100

      NFC: NCI: allow spi driver to choose transfer clock

      In some cases low level drivers might want to update the
      SPI transfer clock (e.g. during firmware download).

      This patch adds this support. Without any modification the
      driver will use the default SPI clock (from pdata or device tree).

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit fcd9d046fd8998cc984f2ff80e76f246ebca15b6
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:42 2015 +0100

      NFC: NCI: move generic spi driver to a module

      SPI driver should be a module.

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit b5b3e23e4cace008e1a30e8614a484d14dfd07a1
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:41 2015 +0100

      NFC: nfcmrvl: add i2c driver

      This driver adds the support of I2C-based Marvell NFC controller.

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 58d34aa677ec248539262c54a618d61804a893f1
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:40 2015 +0100

      NFC: nfcmrvl: configure head/tail room values per low level drivers

      Low-level drivers may need to add some data before and/or
      after NCI packet.

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 3194c6870158e305dac2af52f83681e9cb67280f
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:39 2015 +0100

      NFC: nfcmrvl: add firmware download support

      Implement firmware download protocol for Marvell NFC controllers.
      This protocol is based on NCI frames that's why parts of its
      implementation use some NCI generic functions.

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit e5629d29470134af1954d2bbe45c4f2b73f68ee9
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:38 2015 +0100

      NFC: NCI: export nci_send_frame and nci_send_cmd function

      Export nci_send_frame and nci_send_cmd symbols to allow drivers
      to use it. This is needed for example if NCI is used during
      firmware download phase.

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit fb101c0e9cc635b811b413b26a6690240c303f54
  Author: Vincent Cuissard <cuissard@xxxxxxxxxxx>
  Date:   Mon Oct 26 10:27:37 2015 +0100

      NFC: nfcmrvl: remove unneeded version defines

      Signed-off-by: Vincent Cuissard <cuissard@xxxxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 15d17170b4e44c5768c3d32b093cd393c4dbc158
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Mon Oct 26 07:50:11 2015 +0100

      NFC: st21nfca: Add support for proprietary commands

      Add support for proprietary commands useful mainly
      for factory testings.

      Here is a list:

      - FACTORY_MODE: Allow to set the driver into a mode where no
        secure element are activated. It does not consider any
        NFC_ATTR_VENDOR_DATA.
      - HCI_CLEAR_ALL_PIPES: Allow to execute a HCI clear all pipes
        command. It does not consider any NFC_ATTR_VENDOR_DATA.
      - HCI_DM_PUT_DATA: Allow to configure specific CLF registry as
        for example RF trimmings or low level drivers configurations
        (I2C, SPI, SWP).
      - HCI_DM_UPDATE_AID: Allow to configure an AID routing into the
        CLF routing table following RF technology, CLF mode or protocol.
      - HCI_DM_GET_INFO: Allow to retrieve CLF information.
      - HCI_DM_GET_DATA: Allow to retrieve CLF configurable data such as
        low level drivers configurations or RF trimmings.
      - HCI_DM_LOAD: Allow to load a firmware into the CLF. A complete
        packet can be more than 8KB.
      - HCI_DM_RESET: Allow to run a CLF reset in order to "commit" CLF
        configuration changes without CLF power off.
      - HCI_GET_PARAM: Allow to retrieve an HCI CLF parameter (for example
        the white list).
      - HCI_DM_FIELD_GENERATOR: Allow to generate different kind of RF
        technology. When using this command to anti-collision is done.
      - HCI_LOOPBACK: Allow to echo a command and test the Dh to CLF
        connectivity.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 2b6e5bfed0288524fca1376eb89856363cb8c55e
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:50 2015 +0100

      NFC: st-nci: Replace st21nfcb by st_nci in makefile

      Replace 1 missing st21nfcb by st_nci

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit bd8f1a31a98b9f26201167f695bc807e3ff45841
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:49 2015 +0100

      NFC: st-nci: remove duplicated skb dump

      Remove SPI_DUMP_SKB and I2C_DUMP_SKB as skb is already dumped
      in ndlc layer.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit bb2496c3ecae8a4a24c86b3c67de192f30fa1385
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:48 2015 +0100

      NFC: st-nci: Disable irq when powering the device up

      Upon some conditions (timing, CLF errors, platform errors...), the
      irq might be already active when powering the device.

      Add irq_active variable as a guard to avoid kernel warning message

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit a9e062d0599f499082320006ae3b54cf391bf996
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:47 2015 +0100

      NFC: st21nfca: Add error messages for unexpected HCI events

      Potentially an unexpected HCI event may occur because of a
      firmware bug. It could be transparent for the user but we should
      at least log it.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 57dc828a7740f600ea8ce3049c3745aa805c83c9
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:45 2015 +0100

      NFC: st21nfca: Add few code style fixes

      Add a minor code style fixes

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 064d00479697907730a4aff9edf879c0ca4743f0
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:44 2015 +0100

      NFC: st-nci: Add few code style fixes

      Add some few code style fixes.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 96d4581f0b3712221d6ed4a765bb6b4ea40f2b2f
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:43 2015 +0100

      NFC: netlink: Add mode parameter to deactivate_target functions

      In order to manage in a better way the nci poll mode state machine,
      add mode parameter to deactivate_target functions.
      This way we can manage different target state.
      mode parameter make sense only in nci core.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit cde2aa99ba702ab8efa583495e54731b9f854e66
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:42 2015 +0100

      NFC: st21nfca: Fix host_list verification after SEactivation

      A secure element can be activated in different order.
      The host_list is updated keeping a fixed order:
        <terminal_host_id><uicc_id><ese_id>.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 4e932acc6fd66c905b2d0ca452dcf69321b6c414
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:41 2015 +0100

      NFC: st-nci: Fix host_list verification after SE activation

      A secure element can be activated in different order.
      The host_list is updated keeping a fixed order:
        <terminal_host_id><uicc_id><ese_id>.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 06521053a06062f62f001d79b7c1449a614cc4af
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:40 2015 +0100

      NFC: st-nci: Increase delay between 2 secure element activations

      After internal discussion, it appears this timing should be
      increased to 20 ms for interoperability reason.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 3648dc6d27f648b8e3ce9b48874627a833d53c3a
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:39 2015 +0100

      NFC: st-nci: Add ese-present/uicc-present dts properties

      In order to align with st21nfca, dts configuration properties
      ese_present and uicc_present are made available in st-nci driver.

      So far, in early development firmware, because
      nci_nfcee_mode_set(DISABLE) was not supported we had to try to
      enable it during the secure element discovery phase.

      After several trials on commercial and qualified firmware it appears
      that nci_nfcee_mode_set(ENABLE) and nci_nfcee_mode_set(DISABLE) are
      properly supported.

      Such feature also help us to eventually save some time (~5ms) when
      only one secure element is connected.

      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit be73c2cbc857a4a3424c0e3cdd70002d5a27a756
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:38 2015 +0100

      NFC: netlink: Add missing NFC_ATTR comments

      NFC_CMD_ACTIVATE_TARGET and NFC_ATTR_SE_PARAMS comments are missing.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 2b5dbe089f619f995faf2fe6beb7efb705eed302
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:37 2015 +0100

      NFC: st-nci: Add error messages when an unexpected HCI event occurs

      Potentially an unexpected HCI event may occur because of a
      firmware bug. It could be transparent for the user but we need to
      at least log it.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit b1fa4dc4ffef843bda17f26bbf54fb5d8bc23d2b
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:36 2015 +0100

      NFC: st-nci: Add support for proprietary commands

      Add support for proprietary commands useful mainly for
      factory testings. Here is a list:

      - FACTORY_MODE: Allow to set the driver into a mode where
        no secure element are activated. It does not consider any
        NFC_ATTR_VENDOR_DATA.
      - HCI_CLEAR_ALL_PIPES: Allow to execute a HCI clear all pipes
        command. It does not consider any NFC_ATTR_VENDOR_DATA.
      - HCI_DM_PUT_DATA: Allow to configure specific CLF registry
        like for example RF trimmings or low level drivers
        configurations (I2C, SPI, SWP).
      - HCI_DM_UPDATE_AID: Allow to configure an AID routing into the
        CLF routing table following RF technology, CLF mode or protocol.
      - HCI_DM_GET_INFO: Allow to retrieve CLF information.
      - HCI_DM_GET_DATA: Allow to retrieve CLF configurable data such as
        low level drivers configurations or RF trimmings.
      - HCI_DM_DIRECT_LOAD: Allow to load a firmware into the CLF.
        A complete packet can be more than 8KB.
      - HCI_DM_RESET: Allow to run a CLF reset in order to "commit" CLF
        configuration changes without CLF power off.
      - HCI_GET_PARAM: Allow to retrieve an HCI CLF parameter (for example
        the white list).
      - HCI_DM_FIELD_GENERATOR: Allow to generate different kind of RF
        technology. When using this command to anti-collision is done.
      - HCI_LOOPBACK: Allow to echo a command and test the Dh to CLF
        connectivity.
      - HCI_DM_VDC_MEASUREMENT_VALUE: Allow to measure the field applied
        on the CLF antenna. A value between 0 and 0x0f is returned. 0 is
        maximum.
      - HCI_DM_FWUPD_START: Allow to put CLF into firmware update mode.
        It is a specific CLF command as there is no GPIO for this.
      - HCI_DM_FWUPD_END:  Allow to complete firmware update.
      - HCI_DM_VDC_VALUE_COMPARISON: Allow to compare the field applied
        on the CLF antenna to a reference value.
      - MANUFACTURER_SPECIFIC: Allow to retrieve manufacturer specific data
        received during a NCI_CORE_INIT_CMD.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 23695e41a1cac017edad2b38607f33678a31b877
  Author: Junichi Nomura <j-nomura@xxxxxxxxxxxxx>
  Date:   Tue Oct 6 04:32:57 2015 +0000

      scsi_dh: fix use-after-free when removing scsi device

      The commit 1bab0de0274f ("dm-mpath, scsi_dh: don't let dm detach device
      handlers") removed reference counting of attached scsi device handler.
      As a result, handler data is freed immediately via scsi_dh->detach()
      in the context of scsi_remove_device() where activation request can be
      still in flight.

      This patch moves scsi_dh_handler_detach() to sdev releasing function,
      scsi_device_dev_release_usercontext(), at that point the device
      is already in quiesced state.

      Fixes: 1bab0de0274f ("dm-mpath, scsi_dh: don't let dm detach device 
handlers")
      Signed-off-by: Jun'ichi Nomura <j-nomura@xxxxxxxxxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 2280521719e81919283b82902ac24058f87dfc1b
  Author: DÄ?vis MosÄ?ns <davispuh@xxxxxxxxx>
  Date:   Fri Aug 21 07:29:22 2015 +0300

      mvsas: Fix NULL pointer dereference in mvs_slot_task_free

      When pci_pool_alloc fails in mvs_task_prep then task->lldd_task stays
      NULL but it's later used in mvs_abort_task as slot which is passed
      to mvs_slot_task_free causing NULL pointer dereference.

      Just return from mvs_slot_task_free when passed with NULL slot.

      Bugzilla: https://bugzilla.kernel.org/show_bug.cgi?id=101891
      Signed-off-by: DÄ?vis MosÄ?ns <davispuh@xxxxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Johannes Thumshirn <jthumshirn@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 3242c9ee0b6104c901336a9498bb7ec64923eb1f
  Merge: f7e1b37 cb36859
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Mon Oct 26 18:32:22 2015 -0700

      Merge branch 'sh_eth-fixes'

      Sergei Shtylyov says:

      ====================
      sh_eth: RX buffer alignment fixes

      Here's a set of 2 patches against DaveM's 'net.git' repo which are the
      fixes to the RX buffer size calculation.

      [1/2] sh_eth: fix RX buffer size alignment
      [2/2] sh_eth: fix RX buffer size calculation
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cb3685958dd4c46d7646d244063ea3ec8adf3618
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 00:46:40 2015 +0300

      sh_eth: fix RX buffer size calculation

      The RX buffer size calulation failed to account for the length granularity
      (which is now 32 bytes)...

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ab8579169b79c062935dade949287113c7c1ba73
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 00:46:03 2015 +0300

      sh_eth: fix RX buffer size alignment

      Both  Renesas R-Car and RZ/A1 manuals state that RX buffer  length must be
      a multiple of 32 bytes, while the driver  only uses 16 byte granularity...

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8b7c94e3478dbb0296293b43a974c3561d01e9fb
  Author: Florian Fainelli <f.fainelli@xxxxxxxxx>
  Date:   Fri Oct 23 12:11:08 2015 -0700

      net: dsa: bcm_sf2: Unhardcode port numbers

      While the current driver mostly supports BCM7445 which has a hardcoded
      location for its MoCA port on port 7 and port 0 for its internal PHY,
      this is not necessarily true for all other chips out there such as
      BCM3390 for instance.

      Walk the list of ports from Device Tree, get their port number ("reg"
      property), and then parse the "phy-mode" property and initialize two
      internal variables: moca_port and a bitmask of internal PHYs. Since we
      use interrupts for the MoCA port, we introduce two helper functions to
      enable/disable interrupts and do this at the appropriate bank (INTRL2_0
      or INTRL2_1).

      Signed-off-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 680060d3e02d175516832e9af058ffe96ecc4cdc
  Author: Florian Fainelli <f.fainelli@xxxxxxxxx>
  Date:   Fri Oct 23 11:38:07 2015 -0700

      net: dsa: bcm_sf2: Implement FDB operations

      Add support for the FDB add, delete, and dump operations. The add and
      delete operations are implemented using directed ARL operations using
      the specified MAC address and consist in a read operation, write and
      readback operation.

      The dump operation consists in using the ARL search and software
      filtering entries which are not for the desired port.

      Signed-off-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Reviewed-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 76b1ba7feda533a74c5874a1d15bb4039083efc8
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Tue Oct 20 16:02:39 2015 +0800

      clocksource/drivers/digicolor: Prevent ftrace recursion

      Having a traceable function in the sched_clock() path leads to a recursion
      within ftrace and a kernel crash.

      We should not trace digicolor_timer_sched_read() function. Fix this by 
adding
      the notrace attribute to this function.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Acked-by: Baruch Siach <baruch@xxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit bd859a44b2f6749fd82e89dabbaa37f2c8aa33fe
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Tue Oct 20 16:02:40 2015 +0800

      clocksource/drivers/fsl_ftm_timer: Prevent ftrace recursion

      Having a traceable function in the sched_clock() path leads to a recursion
      within ftrace and a kernel crash.

      We should not trace the ftm_read_sched_clock() function.

      Fix this by adding the notrace attribute to this function.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit 36361abc8bc14e80f6b4db561665e5e15249c181
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Tue Oct 20 16:02:38 2015 +0800

      clocksource/drivers/vf_pit_timer: Prevent ftrace recursion

      Having a traceable function in the sched_clock() path leads to a recursion
      within ftrace and a kernel crash.

      We should not trace the pit_read_sched_clock() function. Fix this by 
adding a
      notrace attribute to this function.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit cdc68ec01853baf3558c6d25f19c869add4a6888
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Tue Oct 20 16:02:37 2015 +0800

      clocksource/drivers/prima2: Prevent ftrace recursion

      Currently prima2 timer can be used as a scheduler clock. We properly
      marked sirfsoc_read_sched_clock() as notrace but we then call another
      function sirfsoc_timer_read() that _wasn't_ notrace.

      Having a traceable function in the sched_clock() path leads to a recursion
      within ftrace and a kernel crash.

      Fix this by adding notrace attribute to the sirfsoc_timer_read() function.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit b8725dab66f0b2d57affb33a7f6ca094d9f1f8dd
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Tue Oct 20 16:02:35 2015 +0800

      clocksource/drivers/samsung_pwm_timer: Prevent ftrace recursion

      Currently samsung_pwm_timer can be used as a scheduler clock. We properly
      marked samsung_read_sched_clock() as notrace but we then call another
      function samsung_clocksource_read() that _wasn't_ notrace.

      Having a traceable function in the sched_clock() path leads to a recursion
      within ftrace and a kernel crash.

      Fix this by adding notrace attribute to the samsung_clocksource_read()
      function.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit f8af0e9c644caf64d0f42dce816c18346c744a9f
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Tue Oct 20 16:02:36 2015 +0800

      clocksource/drivers/pistachio: Prevent ftrace recursion

      Currently pistachio can be used as a scheduler clock. We properly marked
      pistachio_read_sched_clock() as notrace but we then call another function
      pistachio_clocksource_read_cycles() that _wasn't_ notrace.

      Having a traceable function in the sched_clock() path leads to a recursion
      within ftrace and a kernel crash.

      Fix this by adding notrace attribute to the 
pistachio_clocksource_read_cycles()
      function.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit d6df3576e6b4bcf765f5ace69915b4fa4a7ee1c3
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Tue Oct 20 16:02:34 2015 +0800

      clocksource/drivers/arm_global_timer: Prevent ftrace recursion

      Currently arm_global_timer can be used as a scheduler clock. We properly
      marked gt_sched_clock_read() as notrace but we then call another function
      gt_counter_read() that _wasn't_ notrace.

      Having a traceable function in the sched_clock() path leads to a recursion
      within ftrace and a kernel crash.

      Fix this by adding an extra notrace function to keep other users of
      gt_counter_read() traceable.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Signed-off-by: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>

  commit 195562194aad3a0a3915941077f283bcc6347b9b
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Mon Oct 26 01:50:28 2015 -0700

      Input: alps - only the Dell Latitude D420/430/620/630 have separate stick 
button bits

      commit 92bac83dd79e ("Input: alps - non interleaved V2 dualpoint has
      separate stick button bits") assumes that all alps v2 non-interleaved
      dual point setups have the separate stick button bits.

      Later we limited this to Dell laptops only because of reports that this
      broke things on non Dell laptops. Now it turns out that this breaks things
      on the Dell Latitude D600 too. So it seems that only the Dell Latitude
      D420/430/620/630, which all share the same touchpad / stick combo,
      have these separate bits.

      This patch limits the checking of the separate bits to only these models
      fixing regressions with other models.

      Reported-and-tested-by: Larry Finger <Larry.Finger@xxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Tested-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Acked-By: Pali Rohár <pali.rohar@xxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit ababae44108b0e94b58eef6cb5bd830bd040a47f
  Author: Werner Pawlitschko <werner.pawlitschko@xxxxxxxx>
  Date:   Tue Oct 27 09:08:04 2015 +0900

      x86/ioapic: Prevent NULL pointer dereference in setup_ioapic_dest()

      Commit 4857c91f0d19 changed the way how irq affinity is setup in
      setup_ioapic_dest() from using the core helper function to
      unconditionally calling the irq_set_affinity() callback of the
      underlying irq chip.

      That results in a NULL pointer dereference for the rare case where the
      underlying irq chip is lapic_chip which has no irq_set_affinity()
      callback. lapic_chip is occasionally used for the timer interrupt (irq
      0).

      The fix is simple: Check the availability of the callback instead of
      calling it unconditionally.

      Fixes: 4857c91f0d19 "x86/ioapic: Force affinity setting in 
setup_ioapic_dest()"
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 858e904bd71dd0057a548d6785d94ce5ec4aeabd
  Merge: ce6f988 cbf3ccd
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 07:44:13 2015 +0900

      Merge tag 'iommu-fixes-v4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu

      Pull iommu fixes from Joerg Roedel:
       "Two late fixes for the AMD IOMMU driver:

         - add an additional check to the io page-fault handler to avoid a
           BUG_ON being hit in handle_mm_fault()

         - fix a problem with devices writing to the system management area
           and were blocked by the IOMMU because the driver wrongly cleared
           out the DTE flags allowing that access"

      * tag 'iommu-fixes-v4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu:
        iommu/amd: Don't clear DTE flags when modifying it
        iommu/amd: Fix BUG when faulting a PROT_NONE VMA

  commit ce6f9886037f5566cb8e440b9caa5e7d7334e53b
  Merge: 896066e 8bce6d3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 07:41:48 2015 +0900

      Merge tag 'md/4.3-rc6-fixes' of git://neil.brown.name/md

      Pull md fixes from Neil Brown:
       "Some raid1/raid10 fixes.

        I meant to get this to you before -rc7, but what with all the travel
        plans..

        Two fixes for bugs that are in both raid1 and raid10.  Both related to
        bad-block-lists and at least one needs to be back ported to 3.1.

        Also a revision for the "new" layout in raid10.  This "new" code
        (which aims to improve robustness) actually reduces robustness in some
        cases.  It probably isn't in use at all as not public user-space code
        makes use of these new layouts.  However just in case someone has
        their own code, it would be good to get the WARNing out for them
        sooner"

      * tag 'md/4.3-rc6-fixes' of git://neil.brown.name/md:
        md/raid10: fix the 'new' raid10 layout to work correctly.
        md/raid10: don't clear bitmap bit when bad-block-list write fails.
        md/raid1: don't clear bitmap bit when bad-block-list write fails.
        md/raid10: submit_bio_wait() returns 0 on success
        md/raid1: submit_bio_wait() returns 0 on success

  commit 896066ee1cf4d653057dac4e952f49c96ad16fa7
  Merge: 85051e2 22ca7ca
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 07:40:01 2015 +0900

      Merge branch 'drm-fixes' of git://people.freedesktop.org/~airlied/linux

      Pull drm fixes from Dave Airlie:
       "Last fixes from me: one amdgpu/radeon suspend resume and one leak fix,
        along with one vmware fix for some issues when command submission
        fails"

      * 'drm-fixes' of git://people.freedesktop.org/~airlied/linux:
        drm/amdgpu: don't try to recreate sysfs entries on resume
        drm/radeon: don't try to recreate sysfs entries on resume
        drm/amdgpu: stop leaking page flip fence
        drm/vmwgfx: Stabilize the command buffer submission code

  commit 182475b7a2831abf7e6ca83b2aced0bef5dcdfd3
  Author: Dan Williams <dan.j.williams@xxxxxxxxx>
  Date:   Mon Oct 26 16:55:56 2015 -0400

      memremap: fix highmem support

      Currently memremap checks if the range is "System RAM" and returns the
      kernel linear address.  This is broken for highmem platforms where a
      range may be "System RAM", but is not part of the kernel linear mapping.
      Fallback to ioremap_cache() in these cases, to let the arch code attempt
      to handle it.

      Note that ARM ioremap will WARN when attempting to remap ram, and in
      that case the caller needs to be fixed.  For this reason, existing
      ioremap_cache() usages for ARM are already trained to avoid attempts to
      remap ram.

      The impact of this bug is low for now since the pmem driver is the only
      user of memremap(), but this is important to fix before more conversions
      to memremap arrive in 4.4.

      Cc: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Reported-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Acked-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit 01b19455c08cc37d1c3ef174524278e84c92fec1
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Sun Oct 25 00:49:26 2015 +0900

      perf tools: Setup pager when printing usage and help

      It's annoying to see error or help message when command has many options
      like in perf record, report or top.  So setup pager when print parser
      error or help message - it should be OK since no UI is enabled at the
      parsing time.  The usage_with_options() already disables it by calling
      exit_browser() anyway.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Acked-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445701767-12731-3-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b272a59d835cd8ca6b45f41c66c61b473996c759
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Sun Oct 25 00:49:25 2015 +0900

      perf report: Rename to --show-cpu-utilization

      So that it can be more consistent with other --show-* options.  The old
      name (--showcpuutilization) is provided only for compatibility.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445701767-12731-2-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit a5f4a6932ec2e1a53642e97a1be64bc7b169942f
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Sun Oct 25 00:49:24 2015 +0900

      perf tools: Improve ambiguous option help message

      Currently if an option name is ambiguous it only prints first two
      matched option names but no help.  It'd be better it could show all
      possible names and help messages too.

      Before:
        $ perf report --show
          Error: Ambiguous option: show (could be --show-total-period or
                                                  --show-ref-call-graph)
         Usage: perf report [<options>]

      After:
        $ perf report --show
          Error: Ambiguous option: show (could be --show-total-period or
                                                  --show-ref-call-graph)
         Usage: perf report [<options>]

            -n, --show-nr-samples
                                    Show a column with the number of samples
                --showcpuutilization
                                    Show sample percentage for different cpu 
modes
            -I, --show-info         Display extended information about 
perf.data file
                --show-total-period
                                    Show a column with the sum of periods
                --show-ref-call-graph
                                    Show callgraph from reference event

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Acked-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445701767-12731-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit c0963772cbbf1b7dc9fad4497f3aba8526bb07d6
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
  Date:   Sun Oct 25 18:24:38 2015 +0200

      rtl8xxxu: fix unused rtl8192cu_fops compiler warning

      kbuild reported:

      rtl8xxxu.c:5786:32: warning: â??rtl8192cu_fopsâ?? defined but not used 
[-Wunused-variable]

      Fix it by adding temporary ifdefs around the static functions.

      Fixes: 033695bdf6d7 ("rtl8xxxu: move devices supported by rtlwifi under 
UNTESTED config")
      Reported-by: kbuild test robot <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit a7cedab6ccd7f02c86476ae52760a5d0482806fa
  Author: Lokesh Vutla <lokeshvutla@xxxxxx>
  Date:   Tue Oct 20 16:50:06 2015 -0500

      mmc: omap_hsmmc: Enable omap_hsmmc for Keystone 2

      Enable omap_hsmmc for Keystone 2 architecture which reuses the HSMMC
      IP found on OMAP platforms.

      Signed-off-by: Franklin S Cooper Jr <fcooper@xxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit e839b134761444e5988d5eee1ef54a0ff2327344
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Wed Oct 21 11:15:46 2015 +0300

      mmc: sdhci-acpi: Add more ACPI HIDs for Intel controllers

      Add ACPI HIDs for Intel host controllers including one
      supporting HS400.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 4fd4c0655b82b0f81841b915ef1e70e2141d4a38
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Wed Oct 21 11:15:45 2015 +0300

      mmc: sdhci-pci: Add more PCI IDs for Intel controllers

      Add PCI IDs for Intel host controllers

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit b3b78f2cb2eeca47f3b81dd795fd341a337363c4
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:43:01 2015 +0800

      arm: lpc18xx_defconfig: remove CONFIG_MMC_DW_IDMAC

      DesignWare MMC Controller's transfer mode should be decided
      at runtime instead of compile-time. So we remove this config
      option and read dw_mmc's register to select DMA master.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Acked-by: Joachim Eastwood <manabian@xxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit fdd36e530e0f29b86aaa2013e0d9dee0964ecf6f
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:42:49 2015 +0800

      arm: hisi_defconfig: remove CONFIG_MMC_DW_IDMAC

      DesignWare MMC Controller's transfer mode should be decided
      at runtime instead of compile-time. So we remove this config
      option and read dw_mmc's register to select DMA master.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Acked-by: Wei Xu <xuwei5@xxxxxxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 391ce1e0eb0af2cb5d85273a142061fb77ecf135
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:42:37 2015 +0800

      arm: exynos_defconfig: remove CONFIG_MMC_DW_IDMAC

      DesignWare MMC Controller's transfer mode should be decided
      at runtime instead of compile-time. So we remove this config
      option and read dw_mmc's register to select DMA master.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Acked-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 005a5243aab6a2d45910233593bf9cba4f207bf2
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:42:20 2015 +0800

      arc: axs10x_defconfig: remove CONFIG_MMC_DW_IDMAC

      DesignWare MMC Controller's transfer mode should be decided
      at runtime instead of compile-time. So we remove this config
      option and read dw_mmc's register to select DMA master.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Acked-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit b13af8f9685e85d0a0939aae8c5fce53f8e90186
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:42:05 2015 +0800

      mips: pistachio_defconfig: remove CONFIG_MMC_DW_IDMAC

      DesignWare MMC Controller's transfer mode should be decided
      at runtime instead of compile-time. So we remove this config
      option and read dw_mmc's register to select DMA master.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Acked-by: Govindraj Raja <govindraj.raja@xxxxxxxxxx>
      Acked-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 87ffa7d30d0be24f4bcf08005f145903c5ef55b7
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:41:50 2015 +0800

      Documentation: synopsys-dw-mshc: add bindings for idmac and edmac

      synopsys-dw-mshc supports three types of transfer mode. We add
      bindings and description for how to use them at runtime.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 70692752af12e2dbae48685b1d07fe7bdb2fab31
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:41:37 2015 +0800

      mmc: dw_mmc: use macro for HCON register operations

      This patch add some macros for HCON register operations
      to make code more readable.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 3fc7eaef44dbcbcd602b6bcd0ac6efba7a30b108
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:41:23 2015 +0800

      mmc: dw_mmc: Add external dma interface support

      DesignWare MMC Controller can supports two types of DMA
      mode: external dma and internal dma. We get a RK312x platform
      integrated dw_mmc and ARM pl330 dma controller. This patch add
      edmac ops to support these platforms. I've tested it on RK31xx
      platform with edmac mode and RK3288 platform with idmac mode.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Signed-off-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 9e4703df3aa9829a84d6ccf19c6062ba19a8de71
  Author: yangbo lu <yangbo.lu@xxxxxxxxxxxxx>
  Date:   Fri Oct 16 15:44:03 2015 +0800

      mmc: sdhci-of-esdhc: avoid writing power control register

      The eSDHC doesn't have a standard power control register, so when
      writing this register in stack we should do nothing to avoid
      incorrect operation.

      Signed-off-by: Yangbo Lu <yangbo.lu@xxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit a599579ee8e32daebdfa4d97b24389c680ef5789
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 01:40:16 2015 +0300

      DT: mmc: sh_mmcif: document R8A7794 support

      Renesas R8A7794 SoC also has the MMCIF controller.

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Acked-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 76d63c2b59d4a1481bedc65a3ef25e9d1354dca3
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 01:39:39 2015 +0300

      DT: mmc: sh_mmcif: fix "compatible" property text

      The "compatible" property text contradicts even the example given in the 
MMCIF
      binding document itself;  moreover, the Renesas MMCIF driver only matches 
 on
      the generic "compatible" string and doesn't look for the SoC specific 
strings
      at all. Thus describe "renesas,sh-mmcif" as a fallback value.

      Fixes: b4c27763d749 ("mmc: sh_mmcif: Document DT bindings")
      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Acked-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 2860d060ac902df0164cc9580f843b101e27a2c6
  Author: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 14 23:53:03 2015 +0300

      mmc: skip reclaiming host on mmc_add_card() error

      There's little sense in releasing the host on mmc_add_card() error
      immediately after reclaiming  it, so reclaim the host  only in case
      of success.

      Signed-off-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 7f8a9a7e98f99e9cd874eaf6ca2f00438c2a7c38
  Author: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
  Date:   Sat Oct 10 17:08:32 2015 +0100

      mmc: android-goldfish: Allow compiling the driver with COMPILE_TEST

      The driver depends on GOLDFISH but there isn't a build dependency
      so it's a good idea to allow the driver to always be built when the
      COMPILE_TEST option is enabled.

      That way, the driver can be built with a config generated by make
      allyesconfig and check if a patch would break the build.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Reviewed-by: Jean Delvare <jdelvare@xxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit c41d31f71d8889919d2f3becbccd6d2d7a3bd243
  Author: Heiko Stuebner <heiko@xxxxxxxxx>
  Date:   Mon Oct 12 14:48:30 2015 +0200

      ARM: dts: rockchip: add tuning related settings to veyron devices

      This allows the tuning code to run and use higher speeds on capable cards.

      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit f71ddc5873cb90ffb217de50aed8bdd2fb00fc9f
  Author: Alexandru M Stan <amstan@xxxxxxxxxxxx>
  Date:   Mon Oct 12 14:48:29 2015 +0200

      ARM: dts: rockchip: Add drive/sample clocks for rk3288 dw_mmc devices

      The drive/sample clocks can be phase shifted.  The drive clock
      could be used in a future patch to adjust hold times.  The sample
      clock is used for tuning.

      Signed-off-by: Alexandru M Stan <amstan@xxxxxxxxxxxx>
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit cbb79e43c82635840cdcbf71b1d1c374e2c3a025
  Author: Alexandru M Stan <amstan@xxxxxxxxxxxx>
  Date:   Mon Oct 12 14:48:28 2015 +0200

      mmc: dw_mmc-rockchip: MMC tuning with the clock phase framework

      This algorithm will try 1 degree increments, since there's no way to tell
      what resolution the underlying phase code uses. As an added bonus, doing
      many tunings yields better results since some tests are run more than once
      (ex: if the underlying driver uses 45 degree increments, the tuning code
      will try the same angle more than once).

      It will then construct a list of good phase ranges (even ranges that cross
      360/0), will pick the biggest range then it will set the sample_clk to the
      middle of that range.

      We do not touch ciu_drive (and by extension define default-drive-phase).
      Drive phase is mostly used to define minimum hold times, while one could
      write some code to determine what phase meets the minimum hold time (ex 10
      degrees) this will not work with the current clock phase framework (which
      floors angles, so we'll get 0 deg, and there's no way to know what
      resolution the floors happen at). We assume that the default drive angles
      set by the hardware are good enough.

      If a device has device specific code (like exynos) then that will still
      take precedence, otherwise this new code will execute. If the device wants
      to tune, but has no sample_clk defined we'll return EIO with an error
      message.

      Signed-off-by: Alexandru M Stan <amstan@xxxxxxxxxxxx>
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Acked-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit f8085bbada3b124b5b39b61bb1a7a0a78c24604b
  Author: Alexandru M Stan <amstan@xxxxxxxxxxxx>
  Date:   Mon Oct 12 14:48:27 2015 +0200

      mmc: dw_mmc-rockchip: dt-binding: Add tuning related things

      Add ciu_drive, ciu_sample clocks and default-sample-phase. This will later
      be used by tuning code.

      We do not touch ciu_drive (and by extension define default-drive-phase).
      Drive phase is mostly used to define minimum hold times, while one could
      write some code to determine what phase meets the minimum hold time
      (ex 10 degrees) this will not work with the current clock phase framework
      (which floors angles, so we'll get 0 deg, and there's no way to know what
      resolution the floors happen at). We assume that the default drive angles
      set by the hardware are good enough.

      Signed-off-by: Alexandru M Stan <amstan@xxxxxxxxxxxx>
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Acked-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit e0848f5d294c703917260a6228cc08b8be46c527
  Author: Douglas Anderson <dianders@xxxxxxxxxxxx>
  Date:   Mon Oct 12 14:48:26 2015 +0200

      mmc: dw_mmc: Use mmc_regulator_set_vqmmc in start_signal_voltage_switch

      We've introduced a new helper in the MMC core:
      mmc_regulator_set_vqmmc().  Let's use this in dw_mmc.  Using this new
      helper has some advantages:

      1. We get the mmc_regulator_set_vqmmc() behavior of trying to match
         VQMMC and VMMC when the signal voltage is 3.3V.  This ensures max
         compatibility.

      2. We get rid of a few more warnings when probing unsupported
         voltages.

      3. We get rid of some non-dw_mmc specific code in dw_mmc.

      Signed-off-by: Douglas Anderson <dianders@xxxxxxxxxxxx>
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Acked-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 2086f801cb2a796279e817e68255654c4cfd3be3
  Author: Douglas Anderson <dianders@xxxxxxxxxxxx>
  Date:   Mon Oct 12 14:48:25 2015 +0200

      mmc: core: Add mmc_regulator_set_vqmmc()

      This adds logic to the MMC core to set VQMMC.  This is expected to be
      called by MMC drivers like dw_mmc as part of (or instead of) their
      start_signal_voltage_switch() callback.

      A few notes:

      * When setting the signal voltage to 3.3V we do our best to make VQMMC
        and VMMC match.  It's been reported that this makes some old cards
        happy since they were tested back in the day before UHS when VQMMC
        and VMMC were provided by the same regulator.  A nice side effect of
        this is that we don't end up on the hairy edge of VQMMC (2.7V),
        which some EEs claim is a little too close to the minimum for
        comfort.
        This is done in two steps. At first we try to find a VQMMC within
        a 0.3V tolerance of VMMC and if this is not supported by the
        supplying regulator we try to find a suitable voltage within the
        whole 2.7V-3.6V area of the spec.

      * The two step approach is currently necessary, as the used
        regulator_set_voltage_triplet(min, target, max) uses a simple
        implementation that just tries two basic steps:
        regulator_set_voltage(target, max);
        regulator_set_voltage(min, target);
        So with only one step with 2.7-3.6V borders, if a suitable voltage
        is a bit below VMMC, we would directly get the lowest 2.7V
        which some boards (like Rockchips) don't like at all.

      * When setting the signal voltage to 1.8V or 1.2V we aim for that
        specific voltage instead of picking the lowest one in the range.

      * We very purposely don't print errors in mmc_regulator_set_vqmmc().
        There are cases where the MMC core will try several different
        voltages and we don't want to pollute the logs.

      Signed-off-by: Douglas Anderson <dianders@xxxxxxxxxxxx>
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 310c805e7f133443cd57f880b73557a4a8f54b30
  Author: Heiko Stuebner <heiko@xxxxxxxxx>
  Date:   Mon Oct 12 18:00:54 2015 +0200

      mmc: core: move ocr-bit to voltage translation into separate function

      We will shortly need the calculation of an ocr-bit to the actual
      voltage in a second place too, so move it from mmc_regulator_set_ocr
      to a common function mmc_ocrbitnum_to_vdd to make that possible.

      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 9eadcc0581a8ccaf4c2378aa1c193fb164304f1d
  Author: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
  Date:   Fri Oct 2 10:56:11 2015 +0200

      mmc: core: Remove MMC_CLKGATE

      MMC_CLKGATE was once invented to save power by gating the bus clock at
      request inactivity. At that time it served its purpose. The modern way to
      deal with power saving for these scenarios, is by using runtime PM.

      Nowadays, several host drivers have deployed runtime PM, but for those
      that haven't and which still cares power saving at request inactivity,
      it's certainly time to deploy runtime PM as it has been around for several
      years now.

      To simplify code to mmc core and thus decrease maintenance efforts, this
      patch removes all code related to MMC_CLKGATE.

      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
      Reviewed-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit a22950c888e3770c958a5c489906b48d3764a783
  Author: yangbo lu <yangbo.lu@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 18:36:57 2015 +0800

      mmc: sdhci-of-esdhc: add quirk SDHCI_QUIRK_BROKEN_TIMEOUT_VAL for ls1021a

      Signed-off-by: Yangbo Lu <yangbo.lu@xxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 2ca635242ec40c8d575e337a0b2b0a1928ad6581
  Author: yangbo lu <yangbo.lu@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 18:36:47 2015 +0800

      mmc: kconfig: reconfigure MMC_SDHCI_OF_ESDHC option

      Freescale eSDHC driver now supports both little-endian and
      big-endian mode eSDHC IPs for ARM and PPC. So, MMC_SDHCI_OF_ESDHC
      option needs to be reconfigured.

      Signed-off-by: Yangbo Lu <yangbo.lu@xxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit f4932cfd22f151af19d552c0ee607b2fb9c41b53
  Author: yangbo lu <yangbo.lu@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 18:36:36 2015 +0800

      mmc: sdhci-of-esdhc: support both BE and LE host controller

      To support little endian eSDHC controller, we redefine both BE and
      LE IO accessors. In the new accessors, use ioread*/iowrite* instead
      of in_be32/out_be32 and will select accessors according to endian
      mode in probe function.

      Signed-off-by: Yangbo Lu <yangbo.lu@xxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit e38eeca5c23389f9a606e4847f0f9731b2e889f2
  Author: yangbo lu <yangbo.lu@xxxxxxxxxxxxx>
  Date:   Thu Oct 8 18:36:23 2015 +0800

      mmc: dt: add DT binding for little-endian eSDHC host controller

      Signed-off-by: Yangbo Lu <yangbo.lu@xxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 06bf9c565444643ce2732f8a297f76b953acde6b
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Tue Oct 6 10:26:21 2015 +0300

      mmc: sdhci-pci: Add another PCI ID for an Intel eMMC host controller

      Add another PCI ID for an Intel eMMC host controller.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 4351f19a337d48a780762d076408ebe9b0c1f945
  Author: Douglas Anderson <dianders@xxxxxxxxxxxx>
  Date:   Wed Sep 30 16:07:38 2015 +0200

      clk: rockchip: Make calculations use rounding

      Let's use DIV_ROUND_CLOSEST for rounding, not just truncating
      division.  This lets us get closer to the right rate.

      Before this:
        set_phase(86) delay_nums=26 reg[0xf000420c]=0x468 actual_degrees=83
        set_phase(89) delay_nums=27 reg[0xf000420c]=0x46c actual_degrees=86

      After this:
        set_phase(86) delay_nums=27 reg[0xf000420c]=0x46c actual_degrees=86
        set_phase(89) delay_nums=28 reg[0xf000420c]=0x470 actual_degrees=90

      Signed-off-by: Douglas Anderson <dianders@xxxxxxxxxxxx>
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Acked-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit f0232063fb64fc79bfb7b6b35d611b2e4a79ffe6
  Author: Douglas Anderson <dianders@xxxxxxxxxxxx>
  Date:   Wed Sep 30 16:07:37 2015 +0200

      clk: rockchip: Allow more precision for some mmc clock phases

      Because of the inexact nature of the extra MMC delay elements (it's
      not possible to keep the phase monotonic and to also make phases (mod
      90) > 70), we previously only allowed phases (mod 90) of 22.5, 45,
      and 67.5.

      But it's not the end of the world if the MMC clock phase goes
      non-monotonic.  At most we'll be 25 degrees off.  It's way better to
      test more phases to look for bad ones than to be 25 degrees off, because
      in the case of MMC really the point is to find bad phases and get as far
      asway from the as possible.  If we get to test extra phases by going
      slightly non-monotonic then that might be fine.  Worst case we would
      end up at a phases that's slight differnt than the one we wanted, but
      at least we'd still be quite far away from the a bad phase.

      Signed-off-by: Douglas Anderson <dianders@xxxxxxxxxxxx>
      Fold in more precise variance-values of 44-77 instead of 40-80.
      Fold in the actual removal of the monotonic requirement and adapt
      patch message accordingly.
      Signed-off-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Acked-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 7582041ff3d4aaa348894858d6384c4a9981c5fc
  Author: kbuild test robot <lkp@xxxxxxxxx>
  Date:   Tue Oct 6 04:01:04 2015 +0800

      mmc: sdhci-pci: fix simple_return.cocci warnings

      drivers/mmc/host/sdhci-pci-core.c:447:1-4: WARNING: end returns can be 
simpified

       Simplify a trivial if-return sequence.  Possibly combine with a
       preceding function call.

      Generated by: scripts/coccinelle/misc/simple_return.cocci

      CC: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Signed-off-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit f0cbd7806d736d77714994cc41c5161c0a29cccf
  Author: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 20:31:58 2015 +0100

      mmc: sdhci-pci: Make sdhci_pci_o2_fujin2_pci_init() static

      It has no external callers.

      Signed-off-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 659c9bc114a810b3a3c1e50585cc57f1312a6d60
  Author: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 20:31:18 2015 +0100

      mmc: sdhci-pci: Build o2micro support in the same module

      sdhci-pci-o2micro.c contains no initialisation and its functions are only
      called from shdci-pci.c, so there is no reason for it to be a separate
      module, let alone or for it to always be built-in.

      - Rename sdhci-pci.c to sdhci-pci-core.c so that the sdhci-pci module
        can be built from multiple source files
      - Add sdhci-pci-o2micro.c to it
      - Remove redundant exports

      Signed-off-by: Ben Hutchings <ben@xxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 0de9125fa823e526c9f68dc0987aae342ec94cbd
  Author: Weijun Yang <york.yang@xxxxxxx>
  Date:   Sun Oct 4 12:04:13 2015 +0000

      mmc: sirf: fix the capbility to support DDR50

      According to hardware spec, validate DDR50 mode
      for SDXC.

      Signed-off-by: Weijun Yang <york.yang@xxxxxxx>
      Signed-off-by: Barry Song <Baohua.Song@xxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 9faac7b95ea4f9e83b7a914084cc81ef1632fd91
  Author: Weijun Yang <york.yang@xxxxxxx>
  Date:   Sun Oct 4 12:04:12 2015 +0000

      mmc: sdhci: enable tuning for DDR50

      CMD19 tuning is also available for DDR50 mode.

      Signed-off-by: Weijun Yang <york.yang@xxxxxxx>
      Signed-off-by: Barry Song <Baohua.Song@xxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 4324f6de6d2eb9b232410eb0d67bfafdde8ba711
  Author: Weijun Yang <york.yang@xxxxxxx>
  Date:   Sun Oct 4 12:04:11 2015 +0000

      mmc: core: enable CMD19 tuning for DDR50 mode

      As SD Specifications Part1 Physical Layer Specification Version
      3.01 says, CMD19 tuning is available for unlocked cards in transfer
      state of 1.8V signaling mode. The small difference between v3.00
      and 3.01 spec means that CMD19 tuning is also available for DDR50
      mode.

      Signed-off-by: Weijun Yang <york.yang@xxxxxxx>
      Signed-off-by: Barry Song <Baohua.Song@xxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit b093410c9aef29efbf2f4af7b00b2dcc1c119fe8
  Author: Grant Grundler <grundler@xxxxxxxxxxxx>
  Date:   Wed Sep 23 18:30:33 2015 -0700

      mmc: block: copy resp[] data on err for MMC_IOC_MULTI_CMD

      MMC_IOC_CMD and MMC_IOC_MULTI_CMD ioctl() code currently bails on
      any eMMC errors. However, in case there is any resp[] data, we
      should attempt to copy resp[] back to user space. The user app
      can then determine which command(s) failed in the MMC_IOC_MULTI_CMD
      case AND/OR report better diagnostics in both cases.

      Gwendal Grignou provided the idea and it was previously implemented
      and tested on v3.18 ChromeOS kernel:
          https://chromium-review.googlesource.com/#/c/299956

      Signed-off-by: Grant Grundler <grundler@xxxxxxxxxxxx>
      Reviewed-by: Hyung Taek Ryoo <hryoo@xxxxxxxxxx>
      Reviewed-by: Gwendal Grignou <gwendal@xxxxxxxxxxxx>
      Tested-by: David Riley <davidriley@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 85f45058eeef94fdc9f533cca8e17679e44f1177
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Thu Sep 24 08:13:43 2015 +0800

      mmc: debugfs: implement ios show for SDR12 and SDR25

      This patch add MMC_TIMING_UHS_SDR12 and MMC_TIMING_UHS_SDR25
      for mmc_ios_show to show the ios->timing if mmc card runs under
      these two modes.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit c1590dd86d6e34df214f30a501682e392be0ba3c
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Tue Sep 22 17:30:26 2015 +0200

      mmc: sunxi: Add card busy detection

      Some sdio wifi modules have not been working reliable with the sunxi-mmc
      host code. This turns out to be caused by starting new io-rw commands 
while
      the card signals that it is still busy processing a previous command.

      This commit adds card-busy detection to the sunxi-mmc driver which 
together
      with recent core changes to check card-busy before starting io-rw commands
      fixes the wifi reliability issues on the Cubietruck and other sunxi boards
      using sdio wifi.

      Reported-by: Eugene K <sigintmailru@xxxxxxxxx>
      Suggested-by: Eugene K <sigintmailru@xxxxxxxxx>
      Cc: Eugene K <sigintmailru@xxxxxxxxx>
      Cc: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 5d3f6ef04d65dda92a3573841a7215fb05c347de
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Tue Sep 22 17:30:25 2015 +0200

      mmc: Wait for card_busy before starting sdio requests

      Some sdio wifi chips will not work properly if we try to start new
      sdio-rw requests while the device is signalling that it is busy.

      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit de98c55682790437fb3c6b5335f2bf3ce20539db
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Tue Sep 22 17:30:24 2015 +0200

      mmc: Add mmc_is_io_op helper function

      Add a helper function to check if an opcode is a sd-io-rw-* opcode.

      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit a5f5774c55a2e3ed75f4d6c5556b7bfcb726e6f0
  Author: Jon Hunter <jonathanh@xxxxxxxxxx>
  Date:   Tue Sep 22 10:27:53 2015 +0100

      mmc: block: Add new ioctl to send multi commands

      Certain eMMC devices allow vendor specific device information to be read
      via a sequence of vendor commands. These vendor commands must be issued
      in sequence and an atomic fashion. One way to support this would be to
      add an ioctl function for sending a sequence of commands to the device
      atomically as proposed here. These multi commands are simple array of
      the existing mmc_ioc_cmd structure.

      The structure passed via the ioctl uses a __u64 type to specify the number
      of commands (so that the structure is aligned on a 64-bit boundary) and a
      zero length array as a header for list of commands to be issued. The
      maximum number of commands that can be sent is determined by
      MMC_IOC_MAX_CMDS (which defaults to 255 and should be more than
      sufficient).

      This based upon work by Seshagiri Holi <sholi@xxxxxxxxxx>.

      Signed-off-by: Seshagiri Holi <sholi@xxxxxxxxxx>
      Signed-off-by: Jon Hunter <jonathanh@xxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit aaa58d0e932c518bdb1d9dc767876d7a8c68e17e
  Author: Yangbo Lu <yangbo.lu@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 14:36:10 2015 +0800

      mmc: sdhci-pltfm: enable interrupt mode to detect card for ls1021a

      Enable interrupt mode to detect card instead of polling mode for
      ls1021a by removing the quirk SDHCI_QUIRK_BROKEN_CARD_DETECTION.
      This could improve data transferring performance and avoid the call
      trace caused by polling card status sometime.

      Signed-off-by: Yangbo Lu <yangbo.lu@xxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit ce037275861ea6c016ab88a6b884adb8c481db31
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 21 14:14:54 2015 +0200

      mmc: pwrseq_simple: use GPIO descriptors array API

      The simple power sequence provider sets a value for multiple GPIOs in one
      go so it is better to use the API already provided by the GPIO descriptor
      API instead of open coding the same logic.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 8131e815f723ec8fee018d6fa34348d61c0e54b8
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Tue Sep 22 14:00:44 2015 +0800

      mmc: mediatek: Add MMC_CAP_RUNTIME_RESUME support

      Add MMC_CAP_RUNTIME_RESUME support to save resume time
      Drop unnecessary SDC_ARG write

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit d1f23f9304f303e15200c8b7940eeeeb1a1c8c6a
  Author: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
  Date:   Tue Sep 22 09:20:08 2015 +0800

      mmc: debugfs: implement ios show for driver type

      This patch add ios->drv_type for mmc_ios_show to show the
      card's driver type.

      Signed-off-by: Shawn Lin <shawn.lin@xxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit b73f34c22d283f049347f7f625c272ec22830eb3
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 23:50:25 2015 +0200

      mmc: omap: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Acked-by: Tony Lindgren <tony@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 774523539fff7bf34499b7b088dc8b2c0b4a04bc
  Author: Luis de Bethencourt <luis@xxxxxxxxxxxxxxxxx>
  Date:   Thu Sep 17 23:49:59 2015 +0200

      mmc: moxart: Fix module autoload for OF platform driver

      This platform driver has a OF device ID table but the OF module
      alias information is not created so module autoloading won't work.

      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit e02b9d7cbfe1536aef9e7ba7751993d7eca6e829
  Author: Tobias Klauser <tklauser@xxxxxxxxxx>
  Date:   Thu Sep 17 15:09:54 2015 +0200

      mmc: sdhci-pltfm: Use of_property_read_u32 instead of open-coding it

      Use of_property_read_u32 instead of of_get_property with return value
      checks and endianness conversion.

      Signed-off-by: Tobias Klauser <tklauser@xxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit bf7241d02eb4704beeaa055cb027ba7b28344a0e
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 11:12:07 2015 +0200

      mmc: mmc_spi: Export OF module alias information

      Drivers needs to export the OF id table and this be built into
      the module or udev won't have the necessary information to autoload
      the driver module when the device is registered via OF.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 930d50f7fd49fe485d9126ffd26dcc0428d7920a
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Sep 16 09:19:49 2015 +0300

      mmc: sdhci-of-at91: remove a line of dead code

      The goto is correct and the unreachable "return -EINVAL" should be
      removed.

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Acked-by: Ludovic Desroches <ludovic.desroches@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 14a7b416434a8076afb2dea8bb51c6514b41a47b
  Author: Haibo Chen <haibo.chen@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 18:32:58 2015 +0800

      mmc: sdhci: call sdhci_init() before request irq

      sdhci_init() will clear all irqs and set the needed irqs. So
      logically sdhci_init() should be called before request irq.

      If not, some irqs may be triggled and handled wrongly. Take
      the following into consideration, after request irq, if
      SDIO card interrupt enabled, a sd card in the sd slot will
      trigger a mass of interrupt(SDHCI_INT_CARD_INT), because at
      this time, the vmmc-regulator still not restore, no voltage
      supply for the sd card, so the pin of data0~data3 change and
      keep low, interrupt(SDHCI_INT_CARD_INT) will rise up ceaselessly.
      Due to we already reguest irq, system will be busy in handling
      this endless irq, can't response to other event.

      So we should call sdhci_init() before request irq in sd resume.

      Signed-off-by: Haibo Chen <haibo.chen@xxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 28804293b9086100ae784a15d62ebf6249db433c
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 11:53:20 2015 +0200

      mmc: sdhci-bcm-kona: fix logic to check for 8-bit data width

      The driver prints if the data width is 8-bit but it's using a
      binary OR instead of a binary AND so it will always report as
      "is_8bit=Y" regardless of the flags in host->mmc->caps.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Reviewed-by: Ray Jui <rjui@xxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit a30b55119d086d33bd6046dfdd4723c810fd2579
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Mon Sep 14 14:00:35 2015 +0200

      mmc: pwrseq: use gpiod_get() instead of index 0

      The gpiod_get() function expands to gpiod_get_index() with index 0
      so it's better to use it since is easier to read and more concise.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit f90d2e4035d456cb20c0b784725d556eb4de4d8a
  Author: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
  Date:   Tue Sep 15 15:19:45 2015 +0200

      mmc: core: Convert __mmc_switch() into an internal core function

      As there are no users of the __mmc_switch() API, except for the mmc core
      itself, let's convert it from an exported function into an internal.

      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 7eece8d0e436e1eabc6b0adb04872964afe20b35
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 11:30:04 2015 +0200

      mmc: vub300: Remove unneded semicolons

      They aren't needed and are just creating null statements so remove it.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 17a90539710d090d7bfb736c071a94451dc09170
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Wed Sep 16 11:30:03 2015 +0200

      mmc: wbsd: Remove unneded semicolon

      It's not needed an is just creating a null statement, so remove it.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit bf8b8511af7721e6f81848a1fd1359716602f3b7
  Author: Yousong Zhou <yszhou4tech@xxxxxxxxx>
  Date:   Thu Sep 10 00:33:16 2015 +0800

      mmc: sd: Remove superfluous error code assignment

      Signed-off-by: Yousong Zhou <yszhou4tech@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 8d1ffc8c982e4480059ef735e8f15f631e40e80c
  Author: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
  Date:   Fri Sep 11 14:41:55 2015 +0200

      mmc: core: Keep host claimed while invoking mmc_power_off|up()

      As mmc_claim_host() invokes pm_runtime_get_sync() for the mmc host device,
      it's important that the host is kept claimed for *all* accesses to it via
      the host_ops callbacks.

      In some code paths for SDIO, particularly related to the PM support,
      mmc_power_off|up() is invoked without keeping the host claimed. Let's fix
      these.

      Moreover, mmc_start|stop_host() also invokes mmc_power_off|up() without
      claiming the host, let's fix these as well.

      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
      Acked-by: Kishon Vijay Abraham I <kishon@xxxxxx>

  commit 0cd2f04453fcb7bf3f38a4a72d1619636b4afa57
  Author: Michele Curti <michele.curti@xxxxxxxxx>
  Date:   Sat Sep 5 08:49:52 2015 +0200

      mmc: sdhci-acpi: detect sd card reader on asus x205ta

      Add an entry to the sdhci_acpi_uids list to detect the SD card
      reader on the Asus X205Ta laptop.

      dstd table:

      Device (SDHC)
      {
          Name (_ADR, Zero)  // _ADR: Address
          Name (_HID, "PNP0FFF")  // _HID: Hardware ID
          Name (_CID, "PNP0D40" /* SDA Standard Compliant SD Host Controller */)
          Name (_DDN, "Intel(R) SD Card Controller - 80860F16")  // _DDN: DOS 
Dev
          Name (_UID, 0x03)  // _UID: Unique ID
          Name (RDEP, Package (0x02)

      Signed-off-by: Michele Curti <michele.curti@xxxxxxxxx>
      Acked-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 10af309a86669878099b40cec24dbb52aca1d3ed
  Merge: 3f84ccf 660c40b
  Author: Linus Walleij <linus.walleij@xxxxxxxxxx>
  Date:   Mon Oct 26 14:49:11 2015 +0100

      Merge branch 'sh-pfc-for-v4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/geert/renesas-drivers into devel

  commit 6057d40f41a30f234533e5cf28810dd3fd2b6995
  Author: YD Tseng <ltyu101@xxxxxxxxx>
  Date:   Mon Oct 19 11:07:37 2015 +0800

      gpio: driver for AMD Promontory

      This patch adds a new GPIO driver for AMD Promontory chip.

      This GPIO controller is enumerated by ACPI and the ACPI compliant
      hardware ID is AMDF030.

      Change history:

      v2: 1. fix coding style
          2. registers renaming
      v3: 1. change include file
          2. fix coding style
          3. remove module_init/exit, add module_platform_driver
          4. remove MODULE_ALIAS
      v4: 1. change TOTAL_GPIO_PINS to PT_TOTAL_GPIO
          2. remove PCI dependency in Kconfig
          3. fix subject line

      Signed-off-by: YD Tseng <Yd_Tseng@xxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit a4283e41bbd80c629770f954cc5d013eb8851229
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sat Oct 10 23:41:42 2015 +0200

      arm: add missing of_node_put

      for_each_child_of_node performs an of_node_get on each iteration, so
      a break out of the loop requires an of_node_put.

      The of_node_put is duplicated in front of each error return, because the
      function contains a later error return that is beyond the end of the
      for_each_child_of_node and thus doesn't need of_node_put.

      The semantic patch that fixes this problem is as follows
      (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression root,e;
      local idexpression child;
      iterator name for_each_child_of_node;
      @@

       for_each_child_of_node(root, child) {
         ... when != of_node_put(child)
             when != e = child
      (
         return child;
      |
      +  of_node_put(child);
      ?  return ...;
      )
         ...
       }

      @@
      expression root,e;
      local idexpression child;
      @@

       for_each_child_of_node(root, child) {
         ... when != of_node_put(child)
             when != e = child
      +  of_node_put(child);
      ?  break;
         ...
      }
      ... when != child
      // </smpl>

      Additionally, concatenated a string in an affected line to avoid 
introducing
      a checkpatch warning.

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 59fbcbc61e1f0fd9acdf3efb09faca0320049718
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Wed Sep 16 10:15:45 2015 +0200

      arcnet: add netif_carrier_on/off for reconnect

      The arcnet device has no interrupt to detect if the link has changed
      from disconnected to connected. This patch adds an timer to toggle the
      link detection. The timer will get retriggered as long as the
      reconnection interrupts accure. If the recon interrupts hold off
      for >1s we define the connection stable again.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 8890624a4e8c2c7046d63bfd15d7331af9f55f10
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Thu Sep 18 00:12:50 2014 +0200

      arcnet: com20020-pci: add led trigger support

      The EAE PLX-PCI card has special leds on the the main io pci resource
      bar. This patch adds support to trigger the conflict and data leds with
      the packages.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 5ef216c1f84825c6942fdd6c24d12a08ac2df135
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Thu Sep 18 00:12:50 2014 +0200

      arcnet: com20020-pci: add rotary index support

      The EAE PLX-PCI card has a special rotary encoder
      to configure the address of every card individually.
      We take this information for the initial setup of
      the cards dev_id.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit ae8ede6a0cdcf3b21596f44dff30bbd02265bb41
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Fri Mar 20 15:22:24 2015 +0100

      arcnet: com20020-pci: set dev_port to the subdevice index

      This patch sets the dev_port according to the index of
      the card. This can be used by udev to name the ports
      in userspace.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit 27daf6ed5c1fbeca9029c59c7f4f70a5c7e13531
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Fri Mar 20 15:20:59 2015 +0100

      arcnet: com20020: add enable and disable device on open/close

      This patch changes the driver to properly work with the linux netif
      interface. The controller gets enabled on open and disabled on close.
      Therefor it removes every bogus start of the xceiver. It only gets
      enabled on com20020_open and disabled on com20020_close.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit b82de0e28ccac15e1a0c3b4f6f20dfd230049041
  Author: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>
  Date:   Wed Apr 22 16:41:46 2015 +0200

      arcnet: move dev_free_skb to its only user

      The call for dev_free_skb is done only once. This patch
      moves its call to its only user and removes the obsolete
      condition variable.

      Signed-off-by: Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx>

  commit c4297e8f7f453c83a75c2cbd93e57d8d9f36a316
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Mon Oct 26 02:08:38 2015 +0100

      Bluetooth: Fix some obvious coding style issues in the SCO module

      Lets fix this obvious coding style issues in the SCO module and bring it
      in line with the rest of the Bluetooth subsystem.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 05fcd4c4f1011858fe86dd7423304d8cae8e8d2e
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 25 23:29:22 2015 +0100

      Bluetooth: Replace hci_notify with hci_sock_dev_event

      There is no point in wrapping hci_sock_dev_event around hci_notify. It
      is an empty wrapper which adds no value. So remove it.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 242c0ebd3730334c43b9c04eeec40d8dd5c3a26e
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 25 22:45:53 2015 +0100

      Bluetooth: Rename bt_cb()->req into bt_cb()->hci

      The SKB context buffer for HCI request is really not just for requests,
      information in their are preserved for the whole HCI layer. So it makes
      more sense to actually rename it into bt_cb()->hci and also call it then
      struct hci_ctrl.

      In addition that allows moving the decoded opcode for outgoing packets
      into that struct. So far it was just consuming valuable space from the
      main shared items. And opcode are not valid for L2CAP packets.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit d94a61040d8f99cbaf7f3e7686315edcc6dc2400
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 25 22:45:18 2015 +0100

      Bluetooth: Remove unneeded parenthesis around MSG_OOB

      There are two checks that are still using (MSG_OOB) instead of just
      MSG_OOB and so lets just fix them.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 298a96c12b2d8fd845ae0c2c21c0a1c0b470f99e
  Author: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
  Date:   Sun Oct 25 23:11:43 2015 +0200

      x86/dma-mapping: Fix arch_dma_alloc_attrs() oops with NULL dev

      Commit 6894258eda2f broke drivers that pass NULL as the device pointer
      to dma_alloc. The reason is that arch_dma_alloc_attrs() now calls
      dma_alloc_coherent_gfp_flags() which in turn calls
      dma_alloc_coherent_mask(), where the device pointer is dereferenced
      unconditionally.

      Fix things by moving the ISA DMA fallback device assignment before the
      call to dma_alloc_coherent_gfp_flags().

      Fixes: 6894258eda2f ("dma-mapping: consolidate 
dma_{alloc,free}_{attrs,coherent}")
      Reported-and-tested-by: Meelis Roos <mroos@xxxxxxxx>
      Signed-off-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      Cc: Christoph Hellwig <hch@xxxxxx>
      Link: 
http://lkml.kernel.org/r/1445807503-8920-1-git-send-email-ville.syrjala@xxxxxxxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit ba723199d18eeb5021cd6ace4aaf90670d6b3133
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:35 2015 +0100

      NFC: st21nfca: Fix st21nfca_gates offset

      It is useless to start from index 0 when looking for a gate
      because only dynamic pipes are retrieved with
      ST21NFCA_DM_GETINFO(ST21NFCA_DM_GETINFO_PIPE_LIST).

      The first dynamic pipe is present at index 3.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit d3f13c558f2501d4bd0212030f692bc56fbcb755
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:34 2015 +0100

      NFC: st-nci: Fix st_nci_gates offset

      It is useless to start from index 0 when looking for a gate
      because only dynamic pipes are retrieved with
      ST_NCI_DM_GETINFO(ST_NCI_DM_GETINFO_PIPE_LIST).

      The first dynamic pipe is present at index 3.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 7e35740438bafcc8be0e05ff2461b73d631caeb0
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:33 2015 +0100

      NFC: st-nci: Add support for NCI_HCI_IDENTITY_MGMT_GATE

      NCI_HCI_IDENTITY_MGMT_GATE might be useful to get information
      about hardware or firmware version.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 404b3e585b15d7431a0ffa5cf67090569fad88c1
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:32 2015 +0100

      NFC: st-nci: initialize gate_count in st_nci_hci_network_init

      When initializing ndev->hci_dev->init_data, only gates field
      was set. gate_count needs to be initialized as well.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 92d108b6f4fcabf45df5fa9631cfc4ada35e9ab1
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:31 2015 +0100

      NFC: st21nfca: Keep st21nfca_gates unchanged in load_session

      We need to keep initial st_nci_gates values in order for
      nfc_hci_dev_connect_gates to create and open pipe when necessary.

      For example after a firmware update CLF pipes are cleared. Changing
      pipe values in st21nfca_gates was causing nfc_hci_dev_connect_gates
      not using accurate pipes value.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 22c84c5b23932161546b7b16c61a6eb85bf587b8
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:30 2015 +0100

      NFC: st-nci: Keep st_nci_gates unchanged in load_session

      We need to keep initial st_nci_gates values in order for
      nci_hci_dev_connect_gates to create and open pipe when necessary.

      For example after a firmware update CLF pipes are cleared. Changing
      pipe values in st_nci_gates was causing nci_hci_dev_connect_gates
      not using accurate pipes value.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 6443ce97d2266b24f8315cb7e3ff99adf822a597
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:29 2015 +0100

      NFC: st21nfca: Open NFC_HCI_LINK_MGMT_PIPE

      NFC_HCI_LINK_MGMT_PIPE was never opened in nfc_hci_load_session.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 9dfe29f1796f9d92db6e7d33a3fc8ed8e496912a
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:28 2015 +0100

      NFC: st-nci: Open NCI_HCI_LINK_MGMT_PIPE

      NCI_HCI_LINK_MGMT_PIPE was never opened in st_nci_hci_load_session.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 4d37a772b7437bed2ffb94e391a0534198588d20
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:27 2015 +0100

      NFC: st21nfca: Remove HCI gates initialization in load_session

      hdev->init_data.gates is already initialized in st21nfca_hci_probe.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 543a0a301fb831f19a37ac06fbe8094e0b5a2c73
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:26 2015 +0100

      NFC: st-nci: Remove HCI init_data.gates initialization in load_session

      ndev->hci_dev->init_data.gates is already initialized in
      st_nci_hci_network.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit a1b0b9415817c14d207921582f269d03f848b69f
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:25 2015 +0100

      NFC: nci: Create pipe on specific gate in nci_hci_connect_gate

      Some gates might need to have their pipes explicitly created.
      Add a call to nci_hci_create_pipe in nci_hci_connect_gate for
      every gate that is different than NCI_HCI_LINK_MGMT_GATE or
      NCI_HCI_ADMIN_GATE.

      In case of an error when opening a pipe, like in hci layer,
      delete the pipe if it was created.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 8a49943f5bc5ff4f835d50451ecf2380eab44d2e
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:24 2015 +0100

      NFC: nci: Call nci_hci_clear_all_pipes at HCI initial activation.

      When session_id is filled to 0xff, the pipe configuration is
      probably incorrect and needs to be cleared.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit fa6fbadea5d3618339fae8f9d5136a470bad4fa7
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:23 2015 +0100

      NFC: nci: add nci_hci_clear_all_pipes functions

      nci_hci_clear_all_pipes might be use full in some cases
      for example after a firmware update.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit e65917b6d54f8b47d8293ea96adfa604fd46cf0d
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:22 2015 +0100

      NFC: nci: extract pipe value using NCI_HCP_MSG_GET_PIPE

      When receiving data in nci_hci_msg_rx_work, extract pipe
      value using NCI_HCP_MSG_GET_PIPE macro.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit d8cd37ed2fc871c66b4c79c59f651dc2cdf7091c
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:21 2015 +0100

      NFC: nci: Fix improper management of HCI return code

      When sending HCI data over NCI, HCI return code is part
      of the NCI data. In order to get correctly the HCI return
      code, we assume the NCI communication is successful and
      extract the return code for the nci_hci functions return code.

      This is done because nci_to_errno does not match hci return
      code value.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 500c4ef02277eaadbfe20537f963b6221f6ac007
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:20 2015 +0100

      NFC: nci: Fix incorrect data chaining when sending data

      When sending HCI data over NCI, cmd information should be
      present only on the first packet.
      Each packet shall be specifically allocated and sent to the
      NCI layer.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit a1269dd116319335db6d73013a31c038486c813e
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:19 2015 +0100

      NFC: st-nci: Fix incorrect spi buffer size

      When sending data over SPI, the maximum expected length is the maximum
      nci packet payload + data header size + the frame head room (1 for the
      ndlc header) + the frame trail room (0).

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 1c54795da05a792e495387317240625696d37abd
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:18 2015 +0100

      NFC: st21nfca: Align st21nfca driver with other nfc driver

      Align st21nfca driver with or nfc driver:
      - Remove st21nfca_ prefix
      - Merge st21nfca_se.h, st21nfca_dep.h in st21nfca.h

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit d1611c3aba11ffa281bdd027aace52f5a370b8c5
  Author: Michael Chan <mchan@xxxxxxxxxxxx>
  Date:   Sun Oct 25 22:27:57 2015 -0400

      bnxt_en: Fix compile warnings when CONFIG_INET is not set.

      bnxt_gro_skb() has unused variables when CONFIG_INET is not set.  We
      really cannot support hardware GRO if CONFIG_INET is not set, so
      compile out bnxt_gro_skb() completely and define BNXT_FLAG_GRO to be 0
      if CONFIG_INET is not set.  This will effectively always disable
      hardware GRO if CONFIG_INET is not set.

      Signed-off-by: Michael Chan <mchan@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e67e7e596f3ff19fb90520be9f2130aa54914181
  Author: Christophe Ricard <christophe.ricard@xxxxxxxxx>
  Date:   Sun Oct 25 22:54:17 2015 +0100

      NFC: st-nci: include st-nci.h instead of ndlc.h

      st-nci.h already include ndlc.h.

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit f5876627715e3584db379a0549f8ce6f3f06e2bc
  Author: Christophe Ricard <christophe-h.ricard@xxxxxx>
  Date:   Mon Oct 26 05:55:22 2015 +0100

      NFC: st-nci: Align st-nci driver with other nfc driver

      Align st-nci driver with other NFC drivers:
      - Remove st-nci_ prefix
      - Merge se.h in st-nci.h

      Signed-off-by: Christophe Ricard <christophe-h.ricard@xxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 85051e295fb7487fd22546f86058e99d5266dd88
  Merge: 32b8819 5dd32ea
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 26 12:29:16 2015 +0900

      Merge branch 'i2c/for-current' of 
git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux

      Pull i2c fixes from Wolfram Sang:
       "Two driver bugfixes for the I2C subsystem"

      * 'i2c/for-current' of 
git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux:
        i2c: pnx: fix runtime warnings caused by enabling unprepared clock
        i2c: mv64xxx: really allow I2C offloading

  commit f7e1b37ec84730c759eee54289f61f30e59d79de
  Merge: 30aa7b1 abb1ed7
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 25 18:28:23 2015 -0700

      Merge branch 'gianfar-fixes'

      Claudiu Manoil says:

      ====================
      gianfar: Misc. fixes and updates

      Various fixes for some older issues, including having a
      MAINTAINERS entry for this driver.
      I'd recommend applying them on top of net, thanks.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit abb1ed7b793fcb10cadb378fe0eeee589b61a9e1
  Author: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 11:42:01 2015 +0300

      MAINTAINERS: Add entry for gianfar ethernet driver

      Signed-off-by: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1de65a5ea32de7b335ab505366d45cefadbbdf71
  Author: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 11:42:00 2015 +0300

      gianfar: Fix Rx BSY error handling

      The Rx BSY error interrupt indicates that a frame was
      received and discarded due to lack of buffers, so it's
      a rx ring overflow condition and has nothing to do with
      with bad rx packets.  Use the right counter.

      BSY conditions happen when the SoC is under performance
      stress.  Doing *more* work in stress situations by trying
      to schedule NAPI is not a good idea as the stressed system
      becomes still more stressed.  The Rx interrupt is already
      at work making sure the NAPI is scheduled.
      So calling gfar_receive() here does not help.  This issue
      was present since day 1.

      Signed-off-by: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 15bf176db1fb00333af7050c0c699fc7b4e4a960
  Author: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 11:41:59 2015 +0300

      gianfar: Don't enable the Filer w/o the Parser

      Under one unusual circumstance it's possible to wrongly set
      FILREN without enabling PRSDEP as well in the RCTRL register,
      against the hardware specifications.  With the default config
      this does not happen because the default Rx offloads (Rx csum
      and Rx VLAN) properly enable PRSDEP.  But if anyone disables
      all these offloads (via ethtool), we get a wrong configuration
      were the Rx flow classification and hashing, and other Filer
      based features (e.g. wake-on-filer interrupt) won't work.
      This patch fixes the issue.
      Also, account for Rx FCB insertion which happens every time
      PRSDEP is set.

      Signed-off-by: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5188f7e5a7175975f8b943a4b25e499c98a7b9d6
  Author: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 11:41:58 2015 +0300

      gianfar: Remove duplicated argument to bitwise OR

      RQFCR_AND is duplicated.
      Add missing space as well.

      Signed-off-by: Claudiu Manoil <claudiu.manoil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3ed770f60317a02a5a5e4a7345dc13d8819f56e8
  Author: Jon Ringle <jringle@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 15:09:04 2015 -0400

      net: encx24j600: Fix mask to update LED configuration

      This fixes the mask used to update the LED configuration so that it clears
      the necessary bits as well as setting the bits according to the mask.
      Also reverse the LED configuration to show the Link state + collisions in
      LEDA and the Link state + TX/RX events in LEDB.

      Signed-off-by: Jon Ringle <jringle@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit da92bf99dd9f4b62df6168787bf0a92dc7d1bce7
  Merge: 1586a58 e483911
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 25 18:20:41 2015 -0700

      Merge branch 'mvneta-ethtool-stats'

      Russell King says:

      ====================
      mvneta ethtool statistics

      Sorry for v3 - I forgot to update the commit message on patch 1 as
      requested by Marcin.

      This short series adds ethtool statistics reporting to mvneta.  Having
      discussed with Andrew on IRC, we decided I'd pick up his patch into my
      series.

      My change for patch 1 compared to the previous RFC splits out the
      reading of the statistics from the hardware into a separate function,
      in order to facilitate work going on elsewhere to arrange for the
      statistics to be preserved across a suspend/resume cycle.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e483911f9f16d508dd2652ac860977533b96e34e
  Author: Andrew Lunn <andrew@xxxxxxx>
  Date:   Thu Oct 22 18:37:36 2015 +0100

      net: mvneta: Fix clearing of MIB statistics

      The existing function to clear the MIB statatistics was using the
      wrong address for the registers. Also, the counters would of been
      cleared when the interface was brought up, not during the
      probe. Fix both of these.

      Signed-off-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9b0cdefa4cd5dca85967f66da8ab376c0321b845
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 18:37:30 2015 +0100

      net: mvneta: add ethtool statistics

      Add support for the ethtool statistic interface, returning the full set
      of statistics which both Armada 370, 38x and Armada XP can support.

      Tested-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 30aa7b18e8f997a6c35e8d866642396a787afbb8
  Merge: ce9d9b8 34411b6
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Oct 25 18:13:37 2015 -0700

      Merge branch 'thunderx-fixes'

      David Daney says:

      ====================
      net: thunderx: Support pass-2 revision hardware.

      With the availability of a new revision of the ThunderX NIC hardware a
      few changes to the driver are required.  With these, the driver works
      on all currently available hardware revisions.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 34411b68b132e403ddf395419e986475a9993d9b
  Author: Thanneeru Srinivasulu <tsrinivasulu@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 17:14:10 2015 -0700

      net: thunderx: Incorporate pass2 silicon CPI index configuration changes

      Add support for ThunderX pass2 CPI and MPI configuration changes.
      MPI_ALG is not enabled i.e MCAM parsing is disabled.

      Signed-off-by: Thanneeru Srinivasulu <tsrinivasulu@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Sunil Goutham <sgoutham@xxxxxxxxxx>
      Signed-off-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 88ed237720bd618240439714a57fb69ea96428e7
  Author: David Daney <david.daney@xxxxxxxxxx>
  Date:   Fri Oct 23 17:14:09 2015 -0700

      net: thunderx: Rewrite silicon revision tests.

      The test for pass-1 silicon was incorrect, it should be for all
      revisions less than 8.  Also the revision is already present in the
      pci_dev, so there is no need to read and keep a private copy.

      Remove rev_id and code to read it from struct nicpf.  Create new
      static inline function pass1_silicon() to be used to testing the
      silicon version.  Use pass1_silicon() for revision checks, this will
      be more widely used in follow on patches.

      Signed-off-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4e85777ff071b51f500b130b6d036922af32be25
  Author: Sunil Goutham <sgoutham@xxxxxxxxxx>
  Date:   Fri Oct 23 17:14:08 2015 -0700

      net: thunderx: Fix incorrect subsystem devid of VF on pass2 silicon

      Signed-off-by: Sunil Goutham <sgoutham@xxxxxxxxxx>
      Signed-off-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f9bf45e08ef36b6726a5744f0029325e81b3248a
  Author: Sunil Goutham <sgoutham@xxxxxxxxxx>
  Date:   Fri Oct 23 17:14:07 2015 -0700

      net: thunderx: Remove PF soft reset.

      In some silicon revisions, the soft reset clobbers PCI config space,
      so quit doing the reset.

      Signed-off-by: Sunil Goutham <sgoutham@xxxxxxxxxx>
      Signed-off-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 03f136a2074b2b8890da4a24df7104558ad0da48
  Author: Jason A. Donenfeld <Jason@xxxxxxxxx>
  Date:   Tue Jul 14 19:24:45 2015 +0200

      timeconst: Update path in comment

      Signed-off-by: Jason A. Donenfeld <Jason@xxxxxxxxx>
      Cc: hofrat@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1436894685-5868-1-git-send-email-Jason@xxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 209da39154837ec1b69fb34f438041939911e4b4
  Author: Lucas Stach <dev@xxxxxxxxxx>
  Date:   Sun Oct 25 16:39:12 2015 +0100

      irqchip/tegra: Propagate IRQ type setting to parent

      The LIC doesn't deal with the different types of interrupts itself
      but needs to forward calls to set the appropriate type to its parent
      IRQ controller.

      Without this fix all IRQs routed through the LIC will stay at the
      initial EDGE type, while most of them should actually be level triggered.

      Fixes: 1eec582158e2 "irqchip: tegra: Add Tegra210 support"
      Signed-off-by: Lucas Stach <dev@xxxxxxxxxx>
      Cc: Stephen Warren <swarren@xxxxxxxxxxxxx>
      Cc: Thierry Reding <thierry.reding@xxxxxxxxx>
      Cc: Alexandre Courbot <gnurou@xxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 4.1
      Link: 
http://lkml.kernel.org/r/1445787552-13062-1-git-send-email-dev@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 353d6d6c82e5d2533ba22e7f9fb081582bf50dc2
  Author: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 15:48:15 2015 +0200

      irqchip/armada-370-xp: Fix regression by clearing IRQ_NOAUTOEN

      Commit d17cab4451df1 ("irqchip: Kill off set_irq_flags usage") changed
      the code of armada_370_xp_mpic_irq_map() from using set_irq_flags() to
      irq_set_probe().

      While the commit log seems to imply that there are no functional
      changes, there are indeed functional changes introduced by this
      commit: the IRQ_NOAUTOEN flag is no longer cleared. This functional
      change causes a regression on Armada XP, which no longer works
      properly after suspend/resume because per-CPU interrupts remain
      disabled.

      Due to how the hardware registers work, the irq-armada-370-xp cannot
      simply save/restore a bunch of registers at suspend/resume to make
      sure that the interrupts remain in the same state after
      resuming. Therefore, it relies on the kernel to say whether the
      interrupt is disabled or not, using the irqd_irq_disabled()
      function. This was all working fine while the IRQ_NOAUTOEN flag was
      cleared.

      With the change introduced by Rob Herring in d17cab4451df1, the
      IRQ_NOAUTOEN flag is now set for all interrupts. irqd_irq_disabled()
      returns false for per-CPU interrupts, and therefore our per-CPU
      interrupts are no longer re-enabled after resume.

      This commit works around this problem by clearing again the
      IRQ_NOAUTOEN flags, so that we are back to the situation we had before
      commit d17cab4451df1. This work around is proposed as a minimal fix
      for the problem, while a better long-term solution is being worked on.

      Fixes: d17cab4451df1 "irqchip: Kill off set_irq_flags usage"
      Signed-off-by: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
      Link: 
https://lkml.kernel.org/r/1445435295-19956-1-git-send-email-thomas.petazzoni@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 1da5537eccd865b83fedbbb7ea704669f6d255fd
  Author: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
  Date:   Mon Oct 5 18:44:17 2015 +0200

      Bluetooth: Fix locking issue during fast SCO reconnection.

      When SCO connection is requested and disconnected fast, there is a change
      that sco_sock_shutdown is going to preempt thread started in 
sco_connect_cfm.
      When this happens struct sock sk may be removed but a pointer to it is 
still
      held in sco_conn_ready, where embedded spinlock is used. If it is used, 
but
      struct sock has been removed, it will crash.

      Block connection object, which will prevent struct sock from being removed
      and give connection process chance to finish.

      BUG: spinlock bad magic on CPU#0, kworker/u:2H/319
       lock: 0xe3e99434, .magic: f3000000, .owner: (���/0, .owner_cpu: 
-203804160
      Pid: 319, comm: kworker/u:2H Tainted: G           O 
3.8.0-115.1-plk-adaptation-byt-ivi-brd #1
      Call Trace:
       [<c1155659>] ? do_raw_spin_lock+0x19/0xe9
       [<fb75354f>] ? sco_connect_cfm+0x92/0x236 [bluetooth]
       [<fb731dbc>] ? hci_sync_conn_complete_evt.clone.101+0x18b/0x1cb 
[bluetooth]
       [<fb734ee7>] ? hci_event_packet+0x1acd/0x21a6 [bluetooth]
       [<c1041095>] ? finish_task_switch+0x50/0x89
       [<c1349a2e>] ? __schedule+0x638/0x6b8
       [<fb727918>] ? hci_rx_work+0xb9/0x2b8 [bluetooth]
       [<c103760a>] ? queue_delayed_work_on+0x21/0x2a
       [<c1035df9>] ? process_one_work+0x157/0x21b
       [<fb72785f>] ? hci_cmd_work+0xef/0xef [bluetooth]
       [<c1036217>] ? worker_thread+0x16e/0x20a
       [<c10360a9>] ? manage_workers+0x1cf/0x1cf
       [<c103a0ef>] ? kthread+0x8d/0x92
       [<c134adf7>] ? ret_from_kernel_thread+0x1b/0x28
       [<c103a062>] ? __init_kthread_worker+0x24/0x24
      BUG: unable to handle kernel NULL pointer dereference at   (null)
      IP: [<  (null)>]   (null)
      *pdpt = 00000000244e1001 *pde = 0000000000000000
      Oops: 0010 [#1] PREEMPT SMP
      Modules linked in: evdev ecb rfcomm(O) libcomposite usb2380 udc_core 
bnep(O) btusb(O) btbcm(O) cdc_acm btintel(O) bluetooth(O) arc4 uinput 
hid_multitouch usbhid hid iwlmvm(O)e
      Pid: 319, comm: kworker/u:2H Tainted: G           O 
3.8.0-115.1-plk-adaptation-byt-ivi-brd #1
      EIP: 0060:[<00000000>] EFLAGS: 00010246 CPU: 0
      EIP is at 0x0
      EAX: e3e99400 EBX: e3e99400 ECX: 00000100 EDX: 00000000
      ESI: e3e99434 EDI: fb763ce0 EBP: e49b9e44 ESP: e49b9e14
       DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
      CR0: 8005003b CR2: 00000000 CR3: 24444000 CR4: 001007f0
      DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
      DR6: ffff0ff0 DR7: 00000400
      Process kworker/u:2H (pid: 319, ti=e49b8000 task=e4ab9030 
task.ti=e49b8000)
      Stack:
       fb75355b 00000246 fb763900 22222222 22222222 22222222 e3f94460 e3ca7c0a
       e49b9e4c e3f34c00 e3ca7c0a fb763ce0 e49b9e6c fb731dbc 02000246 e4cec85c
       e4cec008 00000000 e3f34c00 e4cec000 e3c2ce00 0000002c e49b9ed0 fb734ee7
      Call Trace:
       [<fb75355b>] ? sco_connect_cfm+0x9e/0x236 [bluetooth]
       [<fb731dbc>] ? hci_sync_conn_complete_evt.clone.101+0x18b/0x1cb 
[bluetooth]
       [<fb734ee7>] ? hci_event_packet+0x1acd/0x21a6 [bluetooth]
       [<c1041095>] ? finish_task_switch+0x50/0x89
       [<c1349a2e>] ? __schedule+0x638/0x6b8
       [<fb727918>] ? hci_rx_work+0xb9/0x2b8 [bluetooth]
       [<c103760a>] ? queue_delayed_work_on+0x21/0x2a
       [<c1035df9>] ? process_one_work+0x157/0x21b
       [<fb72785f>] ? hci_cmd_work+0xef/0xef [bluetooth]
       [<c1036217>] ? worker_thread+0x16e/0x20a
       [<c10360a9>] ? manage_workers+0x1cf/0x1cf
       [<c103a0ef>] ? kthread+0x8d/0x92
       [<c134adf7>] ? ret_from_kernel_thread+0x1b/0x28
       [<c103a062>] ? __init_kthread_worker+0x24/0x24
      Code:  Bad EIP value.
      EIP: [<00000000>] 0x0 SS:ESP 0068:e49b9e14
      CR2: 0000000000000000
      ---[ end trace 942a6577c0abd725 ]---

      Signed-off-by: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 435c513369768f5840cd57101e398bc450fd26de
  Author: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
  Date:   Mon Oct 5 18:44:16 2015 +0200

      Bluetooth: Fix locking issue on SCO disconnection

      Thread handling SCO disconnection may get preempted in '__sco_sock_close'
      after dropping a reference to hci_conn but before marking this as NULL
      in associated struct sco_conn. When execution returs to this thread,
      this connection will possibly be released, resulting in kernel crash

      Lock connection before this point.

      BUG: unable to handle kernel NULL pointer dereference at   (null)
      IP: [<fb770ab9>] __sco_sock_close+0x194/0x1ff [bluetooth]
      *pdpt = 0000000023da6001 *pde = 0000000000000000
      Oops: 0002 [#1] PREEMPT SMP
      Modules linked in: evdev ecb rfcomm(O) libcomposite usb2380 udc_core 
bnep(O) btusb(O) btbcm(O) cdc_acm btintel(O) bluetooth(O) arc4 uinput 
hid_multitouch usbhid iwlmvm(O) hide
      Pid: 984, comm: bluetooth Tainted: G           O 
3.8.0-115.1-plk-adaptation-byt-ivi-brd #1
      EIP: 0060:[<fb770ab9>] EFLAGS: 00010282 CPU: 2
      EIP is at __sco_sock_close+0x194/0x1ff [bluetooth]
      EAX: 00000000 EBX: e49d7600 ECX: ef1ec3c2 EDX: 000000c3
      ESI: e4c12000 EDI: 00000000 EBP: ef1edf5c ESP: ef1edf4c
       DS: 007b ES: 007b FS: 00d8 GS: 0033 SS: 0068
      CR0: 80050033 CR2: 00000000 CR3: 23da7000 CR4: 001007f0
      DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
      DR6: ffff0ff0 DR7: 00000400
      Process bluetooth (pid: 984, ti=ef1ec000 task=e47f2550 task.ti=ef1ec000)
      Stack:
       e4c120d0 e49d7600 00000000 08421a40 ef1edf70 fb770b7a 00000002 e8a4cc80
       08421a40 ef1ec000 c12966b1 00000001 00000000 0000000b 084954c8 c1296b6c
       0000001b 00000002 0000001b 00000002 00000000 00000002 b2524880 00000046
      Call Trace:
       [<fb770b7a>] ? sco_sock_shutdown+0x56/0x95 [bluetooth]
       [<c12966b1>] ? sys_shutdown+0x37/0x53
       [<c1296b6c>] ? sys_socketcall+0x12e/0x1be
       [<c134ae7e>] ? sysenter_do_call+0x12/0x26
       [<c1340000>] ? ip_vs_control_net_cleanup+0x46/0xb1
      Code: e8 90 6b 8c c5 f6 05 72 5d 78 fb 04 74 17 8b 46 08 50 56 68 0a fd 
77 fb 68 60 5d 78 fb e8 68 95 9e c5 83 c4 10 8b 83 fc 01 00 00 <c7> 00 00 00 00 
00 eb 32 ba 68 00 00 0b
      EIP: [<fb770ab9>] __sco_sock_close+0x194/0x1ff [bluetooth] SS:ESP 
0068:ef1edf4c
      CR2: 0000000000000000
      ---[ end trace 47fa2f55a9544e69 ]---

      Signed-off-by: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 75e34f5cf69bd731d3b7375a786d4a15494fb8c6
  Author: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
  Date:   Mon Oct 5 18:44:15 2015 +0200

      Bluetooth: Fix crash on SCO disconnect

      When disconnecting audio from the phone's side, it may happen, that
      a thread handling HCI message 'disconnection complete' will get preempted
      in 'sco_conn_del' before calling 'sco_sock_kill', still holding a pointer
      to struct sock sk. Interrupting thread started in 'sco_sock_shutdown' will
      carry on releasing resources and will eventually release struct sock.
      When execution goes back to first thread it will call sco_sock_kill using
      now invalid pointer to already destroyed socket.

      Fix is to grab a reference to the socket a release it after calling
      'sco_sock_kill'.

      [  166.358213] BUG: unable to handle kernel paging request at 7541203a
      [  166.365228] IP: [<fb6e8bfb>] bt_sock_unlink+0x1a/0x38 [bluetooth]
      [  166.372068] *pdpt = 0000000024b19001 *pde = 0000000000000000
      [  166.378483] Oops: 0002 [#1] PREEMPT SMP
      [  166.382871] Modules linked in: evdev ecb rfcomm(O) libcomposite 
usb2380 udc_core bnep(O) btusb(O) btbcm(O) btintel(O) cdc_acm bluetooth(O) arc4 
uinput hid_multitouch iwlmvm(O) usbhid hide
      [  166.424233] Pid: 338, comm: kworker/u:2H Tainted: G           O 
3.8.0-115.1-plk-adaptation-byt-ivi-brd #1
      [  166.435112] EIP: 0060:[<fb6e8bfb>] EFLAGS: 00010206 CPU: 0
      [  166.441259] EIP is at bt_sock_unlink+0x1a/0x38 [bluetooth]
      [  166.447382] EAX: 632e6563 EBX: e4bfc600 ECX: e466d4d3 EDX: 7541203a
      [  166.454369] ESI: fb7278ac EDI: e4d52000 EBP: e4669e20 ESP: e4669e0c
      [  166.461366]  DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
      [  166.467391] CR0: 8005003b CR2: 7541203a CR3: 24aba000 CR4: 001007f0
      [  166.474387] DR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000
      [  166.481375] DR6: ffff0ff0 DR7: 00000400
      [  166.485654] Process kworker/u:2H (pid: 338, ti=e4668000 task=e466e030 
task.ti=e4668000)
      [  166.494591] Stack:
      [  166.496830]  e4bfc600 e4bfc600 fb715c28 e4717ee0 e4d52000 e4669e3c 
fb715cf3 e4bfc634
      [  166.505518]  00000068 e4d52000 e4c32000 fb7277c0 e4669e6c fb6f2019 
0000004a 00000216
      [  166.514205]  e4660101 e4c32008 02000001 00000013 e4d52000 e4c32000 
e3dc9240 00000005
      [  166.522891] Call Trace:
      [  166.525654]  [<fb715c28>] ? sco_sock_kill+0x73/0x9a [bluetooth]
      [  166.532295]  [<fb715cf3>] ? sco_conn_del+0xa4/0xbf [bluetooth]
      [  166.538836]  [<fb6f2019>] ? 
hci_disconn_complete_evt.clone.55+0x1bd/0x205 [bluetooth]
      [  166.547609]  [<fb6f73d3>] ? hci_event_packet+0x297/0x223c [bluetooth]
      [  166.554805]  [<c10416da>] ? dequeue_task+0xaf/0xb7
      [  166.560154]  [<c1041095>] ? finish_task_switch+0x50/0x89
      [  166.566086]  [<c1349a2e>] ? __schedule+0x638/0x6b8
      [  166.571460]  [<fb6eb906>] ? hci_rx_work+0xb9/0x2b8 [bluetooth]
      [  166.577975]  [<c1035df9>] ? process_one_work+0x157/0x21b
      [  166.583933]  [<fb6eb84d>] ? hci_cmd_work+0xef/0xef [bluetooth]
      [  166.590448]  [<c1036217>] ? worker_thread+0x16e/0x20a
      [  166.596088]  [<c10360a9>] ? manage_workers+0x1cf/0x1cf
      [  166.601826]  [<c103a0ef>] ? kthread+0x8d/0x92
      [  166.606691]  [<c134adf7>] ? ret_from_kernel_thread+0x1b/0x28
      [  166.613010]  [<c103a062>] ? __init_kthread_worker+0x24/0x24
      [  166.619230] Code: 85 63 ff ff ff 31 db 8d 65 f4 89 d8 5b 5e 5f 5d c3 
56 8d 70 04 53 89 f0 89 d3 e8 7e 17 c6 c5 8b 53 28 85 d2 74 1a 8b 43 24 85 c0 
<89> 02 74 03 89 50 04 c7 43 28 00 00 00
      [  166.640501] EIP: [<fb6e8bfb>] bt_sock_unlink+0x1a/0x38 [bluetooth] 
SS:ESP 0068:e4669e0c
      [  166.649474] CR2: 000000007541203a
      [  166.653420] ---[ end trace 0181ff2c9e42d51e ]---
      [  166.658609] note: kworker/u:2H[338] exited with preempt_count 1

      Signed-off-by: Kuba Pawlak <kubax.t.pawlak@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit c0859e2f4ca530c0bf6a333ca3eb8430008e62c9
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sat Oct 24 16:42:32 2015 +0200

      Bluetooth: btmrvl: add missing of_node_put

      for_each_compatible_node performs an of_node_get on each iteration, so
      a break out of the loop requires an of_node_put.

      A simplified version of the semantic patch that fixes this problem is as
      follows (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression e;
      local idexpression n;
      @@

       for_each_compatible_node(n, ...) {
         ... when != of_node_put(n)
             when != e = n
      (
         return n;
      |
      +  of_node_put(n);
      ?  return ...;
      )
         ...
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit a06347c04c13e380afce0c9816df51f00b83faf1
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:42 2015 +0300

      NFC: Add Intel Fields Peak NFC solution driver

      Fields Peak complies with the ISO/IEC 14443A/B, 15693, 18092,
      and JIS X 6319-4. It is an NCI based controller.

      RF Protocols supported:
       - NFC Forum Type 1 Tags (Jewel, Topaz)
       - NFC Forum Type 2 Tags (Mifare UL)
       - NFC Forum Type 3 Tags (FeliCa)
       - NFC Forum Type 4A (ISO/IEC 14443 A-4 106kbps to 848kbps)
       - NFC Forum Type 4B (ISO/IEC 14443 B-4 106kbps to 848kbps)
       - NFCIP in passive and active modes (ISO/IEC 18092 106kbps
         to 424kbps)
       - Bâ?? (based on ISO/IEC 14443 B-2)
       - iCLASS (based on ISO/IEC 15693-2)
       - Vicinity cards (ISO/IEC 15693-3)
       - Kovio tags (NFC Forum Type 2)

      The device can be enumerated using ACPI using the id INT339A.
      The 1st GPIO is the IRQ and the 2nd is the RESET pin.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 85b9ce9a21b119a8163f20d60e7f0ce58fffbeef
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:41 2015 +0300

      NFC: nci: add nci_get_conn_info_by_id function

      This functin takes as a parameter a pointer to the nci_dev
      struct and the first byte from the values of the first domain
      specific parameter that was used for the connection creation.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit caa575a86ec1f177730cafa089d69ab4e424860c
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:40 2015 +0300

      NFC: nci: fix possible crash in nci_core_conn_create

      If the number of destination speific parameters supplied is 0
      the call will fail. If the first destination specific parameter
      does not have a value, curr_id will be set to 0.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 22e4bd09c401905671f3787a8392d269a0ebfa0d
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:39 2015 +0300

      NFC: nci: rename nci_prop_ops to nci_driver_ops

      Initially it was used to create hooks in the driver for
      proprietary operations. Currently it is being used for hooks
      for both proprietary and generic operations.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 0a97a3cba298fd989802bf34541c94b6488c3834
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:38 2015 +0300

      NFC: nci: Allow the driver to set handler for core nci ops

      The driver may be required to act when some responses or
      notifications arrive. For example the NCI core does not have a
      handler for NCI_OP_CORE_GET_CONFIG_RSP. The NFCC can send a
      config response that has to be read by the driver and the packet
      may contain vendor specific data.

      The Fields Peak driver needs to take certain actions when a reset
      notification arrives (packet also not handled by the nfc core).

      The driver handlers do not interfere with the core and they are
      called after the core processes the packet.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 7bc4824ed5cf9feb0173b90a6bec28f694a5f7ce
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:37 2015 +0300

      NFC: nci: Introduce nci_core_cmd

      This allows sending core commands from the driver. The driver
      should be able to send NCI core commands like CORE_GET_CONFIG_CMD.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit e4dbd62528931951aa9d3b313ee7d536df5069fc
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:36 2015 +0300

      NFC: nci: Do not call post_setup when setup fails

      The driver should know that it can continue with post setup where
      setup left off. Being able to execute post_setup when setup fails
      may force the developer to keep this state in the driver.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit a9433c11b1aa0639cc6e4842fff52af2422af06d
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:35 2015 +0300

      NFC: nci: Introduce new core opcodes

      Add NCI_OP_CORE_GET_CONFIG_CMD, NCI_OP_CORE_GET_CONFIG_RSP
      and NCI_OP_CORE_RESET_NTF.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 2663589ce67e5429bac89544bb0e102bb1fcf617
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:34 2015 +0300

      NFC: nci: Add function to get max packet size for conn

      FDP driver needs to send the firmware as regular packets
      (not fragmented). The driver should have a way to
      get the max packet size for a given connection.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit ea785c094d38bc5eae8011330759d68f45236559
  Author: Robert Dolca <robert.dolca@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:33 2015 +0300

      NFC: nci: Export nci data send API

      For the firmware update the driver may use nci_send_data.

      Signed-off-by: Robert Dolca <robert.dolca@xxxxxxxxx>
      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit dc42143b8468b1fe6385962d1d78ddadc76c5168
  Author: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 17:05:37 2015 +0200

      NFC: st-nci: Rename st-nci_se.c

      Rename it to se.c to keep the driver files namespace consistent.

      Signed-off-by: Samuel Ortiz <sameo@xxxxxxxxxxxxxxx>

  commit 1586a5877db9eee313379738d6581bc7c6ffb5e3
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Fri Oct 23 10:59:16 2015 -0700

      af_unix: do not report POLLOUT on listeners

      poll(POLLOUT) on a listener should not report fd is ready for
      a write().

      This would break some applications using poll() and pfd.events = -1,
      as they would not block in poll()

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Reported-by: Alan Burlison <Alan.Burlison@xxxxxxxxxx>
      Tested-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 742e038330a485350334ee5eb75dce4a9dff87cd
  Author: Wu Fengguang <fengguang.wu@xxxxxxxxx>
  Date:   Sat Oct 24 22:56:01 2015 +0800

      tipc: link_is_bc_sndlink() can be static

      TO: "David S. Miller" <davem@xxxxxxxxxxxxx>
      CC: netdev@xxxxxxxxxxxxxxx
      CC: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      CC: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      CC: tipc-discussion@xxxxxxxxxxxxxxxxxxxxx
      CC: linux-kernel@xxxxxxxxxxxxxxx

      Signed-off-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Acked-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2edb7a3372c76c9379d0fc00e4274ea8f018248a
  Author: Moshe Harel <moshe.harel@xxxxxxxxx>
  Date:   Thu Sep 10 15:29:09 2015 +0300

      iwlwifi: nvm: free old section data when reading nvm file

      When reading external NVM file, if a section exists both in OTP
      and in the external file, the memory that was allocated at OTP
      reading is not freed.
      This is possible only on systems that have an external NVM
      file which is typically the case on embedded systems.

      Signed-off-by: Moshe Harel <moshe.harel@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 06ecdba319e2b389c94c7b6a9c936d09ec188359
  Author: Arik Nemtsov <arik@xxxxxxxxxx>
  Date:   Mon Oct 12 14:47:11 2015 +0300

      iwlwifi: mvm: disable TDLS ac queues correctly

      The iwl_mvm_disable_queue function requires the TID to be set to
      IWL_MAX_TID_COUNT when disabling an AC queue. Call it correctly for TDLS
      scenarios.

      Fixes: 4ecafae9e568 ("iwlwifi: mvm: support using multiple ACs on single 
HW queue")
      Signed-off-by: Arik Nemtsov <arikx.nemtsov@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 78ba82f777f3ab41f10afa3694c9c7633bf595d4
  Author: Eliad Peller <eliad@xxxxxxxxxx>
  Date:   Thu Oct 15 10:58:48 2015 +0300

      iwlwifi: mvm: take scan ref only on success

      In some cases, scan reference was taken, but wasn't
      released even though scan command wasn't actually issued.

      Change the current code to simply take the reference
      only on success.

      Signed-off-by: Eliad Peller <eliadx.peller@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit c8f423159e3e53d30e5b36a455797ee2072b09d0
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Sep 11 12:07:21 2015 +0200

      iwlwifi: mvm: remove pointless scan plan checks

      As cfg80211 already enforces these limits, there's little point
      in having them again here in our code.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 46eebec9794e47ebad0352285db50a10de595bb5
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Sep 11 12:09:22 2015 +0200

      iwlwifi: mvm: clean up some whitespace in scan code

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit effd19298c7767457772d489c88f1b7ffa6e7bd9
  Author: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
  Date:   Tue Jun 30 12:08:28 2015 +0300

      iwlwifi: mvm: Implement per vif frame registration API

      Implement config_iface_filter() driver op. Currently support only
      probe request registration for p2p client vifs, by setting
      MAC_FILTER_IN_PROBE_REQUEST flag in MAC_CONTEXT_CMD.
      This is needed since WFDS spec and certification require a P2P client
      to be discoverable on its operating channel.

      Signed-off-by: Andrei Otcheretianski <andrei.otcheretianski@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 053225de121a950b94a1989802c22895797ffbfc
  Author: Eliad Peller <eliad@xxxxxxxxxx>
  Date:   Thu Sep 10 15:00:22 2015 +0300

      iwlwifi: avoid read/write operations if the bus is dead

      Recovery takes too much time if the bus is dead (each timeout
      is 2000ms, etc.).
      Explicitly skip fw dump in this case, as it will result in
      garbage data (and might take signifcant time)

      Signed-off-by: Eliad Peller <eliadx.peller@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit cd55ccea5978d7e87852be3ea5daf89c95b7e78a
  Author: Avraham Stern <avraham.stern@xxxxxxxxx>
  Date:   Wed Aug 19 12:46:12 2015 +0300

      iwlwifi: mvm: Add support for two scheduled scan plans

      Add support for two scan plans for scheduled scan. The first plan
      will run for a limited number of iterations, then the second plan
      will run infinitely.

      Signed-off-by: Avraham Stern <avraham.stern@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 5888a40c50b181bab6737167cfc1bf653945e2a1
  Author: Luca Coelho <luciano.coelho@xxxxxxxxx>
  Date:   Tue Oct 6 09:54:57 2015 +0300

      iwlwifi: mvm: let any command flag be passed to iwl_mvm_flushtx_path()

      Instead of only allowing the caller to decide whether the CMD_ASYNC
      flag is set, let it pass the entire flags bitmask.  This allows more
      flexibility and will be needed when we call this function in the
      suspend flow (where other flags are needed).

      Signed-off-by: Luca Coelho <luciano.coelho@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit c84af35de612fb45db6b5c5968b575813f5daa3b
  Author: Assaf Krauss <assaf.krauss@xxxxxxxxx>
  Date:   Wed Aug 12 17:52:12 2015 +0300

      iwlwifi: mvm: Allow setting ctrl-chnl-position in FTM responder

      This patch enables the debugfs user to configure an FTM responder
      with the appropriate control channel position.

      Signed-off-by: Assaf Krauss <assaf.krauss@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit b08dbed71a876d982e3506a97702535fd5cff48c
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Oct 6 14:07:44 2015 +0200

      iwlwifi: mvm: use short timeouts in P2P low latency if supported

      Those timeouts are used for AM-to-PSM transition.
      We already have those pairs defined for default and WOWLAN use cases.
      We expect that by using shorter threshold for low latency P2P,
      e.g. for Miracast video scenario, we might save a considerable amount of 
power.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Avri Altman <avri.altman@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 9645edb607427a9728b9269dfded74e8c42a9d48
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Tue Oct 6 13:28:48 2015 +0200

      iwlwifi: mvm: use wowlan RX/TX timeouts in D0i3

      In "hostless" mode (D3 or D0i3) the same parameters were intended
      to be used, but the code doesn't do that properly. Fix it.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>
      Signed-off-by: Avri Altman <avri.altman@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 78efc702c8b6ddd6563d836f0d9844bf1f288f9b
  Author: Arik Nemtsov <arik@xxxxxxxxxx>
  Date:   Tue Oct 6 12:22:47 2015 +0300

      iwlwifi: mvm: correctly request DTS-measure for new cards

      Since the 8000 series, the DTS measurement request command has been
      changed. Use an ucode capability flag to determine which version is
      supported and send the extended command when needed.

      Signed-off-by: Arik Nemtsov <arikx.nemtsov@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 03a19cbb91994212be72ce15ac3406fa9f8ba079
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Wed Oct 21 19:55:32 2015 +0300

      iwlwifi: pcie: fix (again) prepare card flow

      The hardware bug in the commit mentioned below forces us
      not to re-enable the clock gating in the Host Cluster.
      The impact on the power consumption is minimal and it allows
      the WAKE_ME interrupt to propagate.

      CC: <stable@xxxxxxxxxxxxxxx> [4.1+]
      Fixes: c9fdec9f3970 ("iwlwifi: pcie: fix prepare card flow")
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit f0afea54ee0dd212186de0291ec025c63016fa39
  Author: Matti Gottlieb <matti.gottlieb@xxxxxxxxx>
  Date:   Mon Jul 20 17:55:51 2015 +0300

      iwlwifi: mvm: Dump FW's virtual image in the case of a NIC error

      When paging is enabled the driver stores part of the FW's
      image in the DRAM.

      Dump FW's virtual image in the case of a NIC error.

      Signed-off-by: Golan Ben-Ami <golan.ben.ami@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit e621c2282e310aa83a50db4da3e16dfc5945db08
  Author: Alexander Bondar <alexander.bondar@xxxxxxxxx>
  Date:   Thu Sep 3 15:42:09 2015 +0300

      iwlwifi: rs: Remove workaround that disables MIMO on P2P

      Remove an old workaround that's no longer needed and
      enable MIMO on P2P interfaces.

      Signed-off-by: Alexander Bondar <alexander.bondar@xxxxxxxxx>
      Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>

  commit 10d15322ed26652263a579bcb59dfd49ab8a30de
  Merge: 0316d30 e5a9f8d
  Author: Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx>
  Date:   Sun Oct 25 12:38:20 2015 +0200

      Merge remote-tracking branch 'mac80211-next/master' into next

  commit 2c66e24d75d424919c42288b418d2e593fa818b1
  Author: Sai Praneeth <sai.praneeth.prakhya@xxxxxxxxx>
  Date:   Fri Oct 16 16:20:27 2015 -0700

      x86/efi: Fix kernel panic when CONFIG_DEBUG_VIRTUAL is enabled

      When CONFIG_DEBUG_VIRTUAL is enabled, all accesses to __pa(address) are
      monitored to see whether address falls in direct mapping or kernel text
      mapping (see Documentation/x86/x86_64/mm.txt for details), if it does
      not, the kernel panics. During 1:1 mapping of EFI runtime services we 
access
      virtual addresses which are == physical addresses, thus the 1:1 mapping
      and these addresses do not fall in either of the above two regions and
      hence when passed as arguments to __pa() kernel panics as reported by
      Dave Hansen here https://lkml.kernel.org/r/5462999A.7090706@xxxxxxxxxx

      So, before calling __pa() virtual addresses should be validated which
      results in skipping call to split_page_count() and that should be fine
      because it is used to keep track of everything *but* 1:1 mappings.

      Signed-off-by: Sai Praneeth Prakhya <sai.praneeth.prakhya@xxxxxxxxx>
      Reported-by: Dave Hansen <dave.hansen@xxxxxxxxx>
      Reviewed-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Ricardo Neri <ricardo.neri@xxxxxxxxx>
      Cc: Glenn P Williamson <glenn.p.williamson@xxxxxxxxx>
      Cc: Ravi Shankar <ravi.v.shankar@xxxxxxxxx>
      Signed-off-by: Matt Fleming <matt@xxxxxxxxxxxxxxxxxxx>

  commit a01fece2e4185ac173abd16d10304d73d47ebf00
  Author: John David Anglin <dave.anglin@xxxxxxxx>
  Date:   Wed Oct 14 20:32:11 2015 -0400

      parisc: Change L1_CACHE_BYTES to 16

      Change L1_CACHE_BYTES to 16 bytes.
      Tested for 16 days on rp3440.

      Additional remarks from Helge Deller:
      Saves ~17 kb of kernel code/data and gives a slight performance 
improvement in
      various test cases.

      Signed-off-by: John David Anglin <dave.anglin@xxxxxxxx>
      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit c59f419bdd1f056e1ceacbd29f7be7bcff746a5d
  Author: Helge Deller <deller@xxxxxx>
  Date:   Sun Oct 25 10:00:32 2015 +0100

      net/xps: Fix calculation of initial number of xps queues

      The existing code breaks on architectures where the L1 cache size
      (L1_CACHE_BYTES) is smaller or equal the size of struct xps_map.

      The new code ensures that we get at minimum one initial xps queue, or 
even more
      as long as it fits into the next multiple of L1_CACHE_SIZE.

      Signed-off-by: Helge Deller <deller@xxxxxx>
      Acked-by: Alexander Duyck <aduyck@xxxxxxxxxxxx>

  commit 4341801873e23bbecee76dabb7c111e3693b900f
  Merge: 80fcd45 161d904
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sun Oct 25 09:40:31 2015 +0100

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements from Arnaldo Carvalho de Melo:

      New user-visible features:

        - Show ordered command line options when -h is used or when an
          unknown option is specified. (Arnaldo Carvalho de Melo)

        - If options are passed after -h, show just its descriptions, not
          all options. (Arnaldo Carvalho de Melo)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 32b88194f71d6ae7768a29f87fbba454728273ee
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 25 10:39:47 2015 +0900

      Linux 4.3-rc7

  commit 22ca7ca52e80524360b43944a0556b2a6dc1aa21
  Merge: aef8cc9 09dc138
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Sun Oct 25 05:02:33 2015 +1000

      Merge branch 'vmwgfx-fixes-4.3' of 
git://people.freedesktop.org/~thomash/linux

      I'm not sure whether this patch comes in too late, but it would be good to
      have it in. It stabilizes command submission in case of command buffer 
errors.

      * 'vmwgfx-fixes-4.3' of git://people.freedesktop.org/~thomash/linux:
        drm/vmwgfx: Stabilize the command buffer submission code

  commit aef8cc903583c5a205b696fb0a51e1eca9117321
  Merge: 01815536 c86f5ebf
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Sun Oct 25 05:01:57 2015 +1000

      Merge branch 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux

      Two regression fixes and a memory leak fix for amdgpu and radeon.

      * 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux:
        drm/amdgpu: don't try to recreate sysfs entries on resume
        drm/radeon: don't try to recreate sysfs entries on resume
        drm/amdgpu: stop leaking page flip fence

  commit 687f079addba1ac7f97ce97080c2291bbe8c8dce
  Merge: ba3e208 2af5ae3
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sat Oct 24 06:56:54 2015 -0700

      Merge branch 'tipc-next'

      Jon Maloy says:

      ====================
      tipc: improve broadcast implementation

      The TIPC broadcast link implementation is currently complex and hard to
      follow. It also incurs some amount of code and structure duplication,
      something that can be reduced significantly with a little effort.

      This commit series introduces a number of improvements which address
      both the locking structure, the code/structure duplication issue, and
      the overall readbility of the code.

      The series consists of three main parts:

      1-7: Adaptation to the new link structure, and preparation for the next
           step. In particular, we want the broadcast transmission link to
           have a life cycle that is longer than any of its potential (unicast
           and broadcast receive links) users. This eliminates the need to
           always test for the presence of this link before accessing it.

      8-10: This is what is really new in this series. Commit #9 is by far
            the largest and most important one, because it moves most of
            the broadcast functionality into link.c, partially reusing the
            fields and functionality of the unicast link. The removal of
            the "node_map" infrastructure in commit #10 is also an important
            achievement.

      11-16: Some improvements leveraging the changes made in the previous
             commits.

      The series needs commit 53387c4e22ac ("tipc: extend broadcast link window 
size")
      and commit e53567948f82 ("tipc: conditionally expand buffer headroom over 
udp tunnel")
      which are both present in 'net' but not yet in 'net-next', to apply 
cleanly.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2af5ae372a4b6d6e2d3314af0e9c865d6d64f8d3
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:48 2015 -0400

      tipc: clean up unused code and structures

      After the previous changes in this series, we can now remove some
      unused code and structures, both in the broadcast, link aggregation
      and link code.

      There are no functional changes in this commit.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c49a0a84391bcc313b3dc2a9ceee6de684e07655
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:47 2015 -0400

      tipc: ensure binding table initial distribution is sent via first link

      Correct synchronization of the broadcast link at first contact between
      two nodes is dependent on the assumption that the binding table "bulk"
      update passes via the same link as the initial broadcast syncronization
      message, i.e., via the first link that is established.

      This is not guaranteed in the current implementation. If two link
      come up very close to each other in time, the "bulk" may quite well
      pass via the second link, and hence void the guarantee of a correct
      initial synchronization before the broadcast link is opened.

      This commit makes two small changes to strengthen this guarantee.

      1) We let the second established link occupy slot 1 of the
         "active_links" array, while the first link will retain slot 0.
         (This is in reality a cosmetic change, we could just as well keep
          the current, opposite order)

      2) We let the name distributor always use link selector/slot 0 when
         it sends it binding table updates.

      The extra traffic bias on the first link caused by this change should
      be negligible, since binding table updates constitutes a very small
      fraction of the total traffic.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c72fa872a23f03b2b9c17e88f3b0a8070924e5f1
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:46 2015 -0400

      tipc: eliminate link's reference to owner node

      With the recent commit series, we have established a one-way dependency
      between the link aggregation (struct tipc_node) instances and their
      pertaining tipc_link instances. This has enabled quite significant code
      and structure simplifications.

      In this commit, we eliminate the field 'owner', which points to an
      instance of struct tipc_node, from struct tipc_link, and replace it with
      a pointer to struct net, which is the only external reference now needed
      by a link instance.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7214bcf8753109256d635ba079938fbd6fcf713b
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:45 2015 -0400

      tipc: eliminate redundant buffer cloning at transmission

      Since all packet transmitters (link, bcast, discovery) are now sending
      consumable buffer clones to the bearer layer, we can remove the
      redundant buffer cloning that is perfomed in the lower level functions
      tipc_l2_send_msg() and tipc_udp_send_msg().

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 60852d679575b0d7ce62497938116f92654ae908
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:44 2015 -0400

      tipc: let neighbor discoverer tranmsit consumable buffers

      The neighbor discovery function currently uses the function
      tipc_bearer_send() for transmitting packets, assuming that the
      sent buffers are not consumed by the called function.

      We want to change this, in order to avoid unnecessary buffer cloning
      elswhere in the code.

      This commit introduces a new function tipc_bearer_skb() which consumes
      the sent buffers, and let the discoverer functions use this new call
      instead. The discoverer does now itself perform the cloning when
      that is necessary.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 959e1781aa230aecc90e4deb80117fd9a53dede7
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:43 2015 -0400

      tipc: introduce jumbo frame support for broadcast

      Until now, we have only been supporting a fix MTU size of 1500 bytes
      for all broadcast media, irrespective of their actual capability.

      We now make the broadcast MTU adaptable to the carrying media, i.e.,
      we use the smallest MTU supported by any of the interfaces attached
      to TIPC.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b06b281e79375fcbd9ffaec7c5fdc350b888d089
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:42 2015 -0400

      tipc: simplify bearer level broadcast

      Until now, we have been keeping track of the exact set of broadcast
      destinations though the help structure tipc_node_map. This leads us to
      have to maintain a whole infrastructure for supporting this, including
      a pseudo-bearer and a number of functions to manipulate both the bearers
      and the node map correctly. Apart from the complexity, this approach is
      also limiting, as struct tipc_node_map only can support cluster local
      broadcast if we want to avoid it becoming excessively large. We want to
      eliminate this limitation, in order to enable introduction of scoped
      multicast in the future.

      A closer analysis reveals that it is unnecessary maintaining this "full
      set" overview; it is sufficient to keep a counter per bearer, indicating
      how many nodes can be reached via this bearer at the moment. The protocol
      is now robust enough to handle transitional discrepancies between the
      nominal number of reachable destinations, as expected by the broadcast
      protocol itself, and the number which is actually reachable at the
      moment. The initial broadcast synchronization, in conjunction with the
      retransmission mechanism, ensures that all packets will eventually be
      acknowledged by the correct set of destinations.

      This commit introduces these changes.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5266698661401afc5e4a1a521cf9ba10724d10dd
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:41 2015 -0400

      tipc: let broadcast packet reception use new link receive function

      The code path for receiving broadcast packets is currently distinct
      from the unicast path. This leads to unnecessary code and data
      duplication, something that can be avoided with some effort.

      We now introduce separate per-peer tipc_link instances for handling
      broadcast packet reception. Each receive link keeps a pointer to the
      common, single, broadcast link instance, and can hence handle release
      and retransmission of send buffers as if they belonged to the own
      instance.

      Furthermore, we let each unicast link instance keep a reference to both
      the pertaining broadcast receive link, and to the common send link.
      This makes it possible for the unicast links to easily access data for
      broadcast link synchronization, as well as for carrying acknowledges for
      received broadcast packets.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fd556f209af53b9cdc45df8c467feb235376c4df
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:40 2015 -0400

      tipc: introduce capability bit for broadcast synchronization

      Until now, we have tried to support both the newer, dedicated broadcast
      synchronization mechanism along with the older, less safe, RESET_MSG/
      ACTIVATE_MSG based one. The latter method has turned out to be a hazard
      in a highly dynamic cluster, so we find it safer to disable it completely
      when we find that the former mechanism is supported by the peer node.

      For this purpose, we now introduce a new capabability bit,
      TIPC_BCAST_SYNCH, to inform any peer nodes that dedicated broadcast
      syncronization is supported by the present node. The new bit is conveyed
      between peers in the 'capabilities' field of neighbor discovery messages.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2f566124570625c29c3fd79bac4d9cd97c0c31a1
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:39 2015 -0400

      tipc: let broadcast transmission use new link transmit function

      This commit simplifies the broadcast link transmission function, by
      leveraging previous changes to the link transmission function and the
      broadcast transmission link life cycle.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c1ab3f1dea3df566ad38caf98baf69c656679090
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:38 2015 -0400

      tipc: make struct tipc_link generic to support broadcast

      Realizing that unicast is just a special case of broadcast, we also see
      that we can go in the other direction, i.e., that modest changes to the
      current unicast link can make it generic enough to support broadcast.

      The following changes are introduced here:

      - A new counter ("ackers") in struct tipc_link, to indicate how many
        peers need to ack a packet before it can be released.
      - A corresponding counter in the skb user area, to keep track of how
        many peers a are left to ack before a buffer can be released.
      - A new counter ("acked"), to keep persistent track of how far a peer
        has acked at the moment, i.e., where in the transmission queue to
        start updating buffers when the next ack arrives. This is to avoid
        double acknowledgements from a peer, with inadvertent relase of
        packets as a result.
      - A more generic tipc_link_retrans() function, where retransmit starts
        from a given sequence number, instead of the first packet in the
        transmision queue. This is to minimize the number of retransmitted
        packets on the broadcast media.

      When the new functionality is taken into use in the next commits,
      we expect it to have minimal effect on unicast mode performance.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 323019069e8d96d87e9dba51f897060f94999821
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:37 2015 -0400

      tipc: use explicit allocation of broadcast send link

      The broadcast link instance (struct tipc_link) used for sending is
      currently aggregated into struct tipc_bclink. This means that we cannot
      use the regular tipc_link_create() function for initiating the link, but
      do instead have to initiate numerous fields directly from the
      bcast_init() function.

      We want to reduce dependencies between the broadcast functionality
      and the inner workings of tipc_link. In this commit, we introduce
      a new function tipc_bclink_create() to link.c, and allocate the
      instance of the link separately using this function.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0e05498e9eae16a6d8c86543e77930ec152e655e
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:36 2015 -0400

      tipc: make link implementation independent from struct tipc_bearer

      In reality, the link implementation is already independent from
      struct tipc_bearer, in that it doesn't store any reference to it.
      However, we still pass on a pointer to a bearer instance in the
      function tipc_link_create(), just to have it extract some
      initialization information from it.

      I later commits, we need to create instances of tipc_link without
      having any associated struct tipc_bearer. To facilitate this, we
      want to extract the initialization data already in the creator
      function in node.c, before calling tipc_link_create(), and pass
      this info on as individual parameters in the call.

      This commit introduces this change.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5fd9fd635104f4816da158cdac6917e99e192eac
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:35 2015 -0400

      tipc: create broadcast transmission link at namespace init

      The broadcast transmission link is currently instantiated when the
      network subsystem is started, i.e., on order from user space via netlink.

      This forces the broadcast transmission code to do unnecessary tests for
      the existence of the transmission link, as well in single mode node as
      in network mode.

      In this commit, we do instead create the link during initialization of
      the name space, and remove it when it is stopped. The fact that the
      transmission link now has a guaranteed longer life cycle than any of its
      potential clients paves the way for further code simplifcations
      and optimizations.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0043550b0a88b72216161d6f25eb0a2e0e78babf
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:34 2015 -0400

      tipc: move broadcast link lock to struct tipc_net

      The broadcast lock will need to be acquired outside bcast.c in a later
      commit. For this reason, we move the lock to struct tipc_net. Consistent
      with the changes in the previous commit, we also introducee two new
      functions tipc_bcast_lock() and tipc_bcast_unlock(). The code that is
      currently using tipc_bclink_lock()/unlock() will be phased out during
      the coming commits in this series.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6beb19a62a87ef6f7107fcd43c2cc1ebad3edfb5
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Thu Oct 22 08:51:33 2015 -0400

      tipc: move bcast definitions to bcast.c

      Currently, a number of structure and function definitions related
      to the broadcast functionality are unnecessarily exposed in the file
      bcast.h. This obscures the fact that the external interface towards
      the broadcast link in fact is very narrow, and causes unnecessary
      recompilations of other files when anything changes in those
      definitions.

      In this commit, we move as many of those definitions as is currently
      possible to the file bcast.c.

      We also rename the structure 'tipc_bclink' to 'tipc_bc_base', both
      since the name does not correctly describe the contents of this
      struct, and will do so even less in the future, and because we want
      to use the term 'link' more appropriately in the functionality
      introduced later in this series.

      Finally, we rename a couple of functions, such as tipc_bclink_xmit()
      and others that will be kept in the future, to include the term 'bcast'
      instead.

      There are no functional changes in this commit.

      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ba3e2084f268bdfed7627046e58a2218037e15af
  Merge: a72c951 ce9d9b8
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sat Oct 24 06:54:12 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

      Conflicts:
        net/ipv6/xfrm6_output.c
        net/openvswitch/flow_netlink.c
        net/openvswitch/vport-gre.c
        net/openvswitch/vport-vxlan.c
        net/openvswitch/vport.c
        net/openvswitch/vport.h

      The openvswitch conflicts were overlapping changes.  One was
      the egress tunnel info fix in 'net' and the other was the
      vport ->send() op simplification in 'net-next'.

      The xfrm6_output.c conflicts was also a simplification
      overlapping a bug fix.

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a72c9512bf2bef12c5e66a4d910c4b348fe31d61
  Merge: 379a80a 13972ad
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sat Oct 24 05:13:16 2015 -0700

      Merge branch 'for-upstream' of 
git://git.kernel.org/pub/scm/linux/kernel/git/bluetooth/bluetooth-next

      Johan Hedberg says:

      ====================
      pull request: bluetooth-next 2015-10-22

      Here's probably the last bluetooth-next pull request for 4.4. Among
      several other changes it contains the rest of the fixes & cleanups from
      the Bluetooth UnplugFest (that didn't need to be hurried to 4.3).

       - Refactoring & cleanups to 6lowpan code
       - New USB ids for two Atheros controllers and BCM43142A0 from Broadcom
       - Fix (quirk) for broken Broadcom BCM2045 controllers
       - Support for latest Apple controllers
       - Improvements to the vendor diagnostic message support

      Please let me know if there are any issues pulling. Thanks.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 033695bdf6d79180f74893830053fcf3e8bc9d24
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
  Date:   Fri Oct 23 20:27:58 2015 +0300

      rtl8xxxu: move devices supported by rtlwifi under UNTESTED config

      There are still four devices which are currently supported both by the new
      rtl8xxxu driver and rtlwifi. To not break existing setups enable the 
support
      for these four devices only when CONFIG_RTL8XXXU_UNTESTED is turned on.

      Once rtl8xxxu support is found to be good enough the devices can be 
removed
      from rtlwifi and enabled by default in rtl8xxxu.

      Reported-by: Xose Vazquez Perez <xose.vazquez@xxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 8bce6d35b308d73cdb2ee273c95d711a55be688c
  Author: NeilBrown <neilb@xxxxxxxx>
  Date:   Thu Oct 22 13:20:15 2015 +1100

      md/raid10: fix the 'new' raid10 layout to work correctly.

      In Linux 3.9 we introduce a new 'far' layout for RAID10 which was
      supposed to rotate the replicas differently and so provide better
      resilience.  In particular it could survive more combinations of 2
      drive failures.

      Unfortunately. due to a coding error, this some did what was wanted,
      sometimes improved less than we hoped, and sometimes - in very
      unlikely circumstances - put multiple replicas on the same device so
      the redundancy was harmed.

      No public user-space tool has created arrays using this layout so it
      is very unlikely that zero-redundancy arrays actually exist.  Probably
      no arrays using any form of the new layout exist.  But we cannot be
      certain.

      So use another bit in the 'layout' number and introduce a bug-fixed
      version of the layout.
      Also when assembling an array, if it has a zero-redundancy layout,
      give a warning.

      Reported-by: Heinz Mauelshagen <heinzm@xxxxxxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit c340702ca26a628832fade4f133d8160a55c29cc
  Author: NeilBrown <neilb@xxxxxxxx>
  Date:   Sat Oct 24 16:23:48 2015 +1100

      md/raid10: don't clear bitmap bit when bad-block-list write fails.

      When a write fails and a bad-block-list is present, we can
      update the bad-block-list instead of writing the data.  If
      this succeeds then it is OK clear the relevant bitmap-bit as
      no further 'sync' of the block is needed.

      However if writing the bad-block-list fails then we need to
      treat the write as failed and particularly must not clear
      the bitmap bit.  Otherwise the device can be re-added (after
      any hardware connection issues are resolved) and because the
      relevant bit in the bitmap is clear, that block will not be
      resynced.  This leads to data corruption.

      We already delay the final bio_endio() on the write until
      the bad-block-list is written so that when the write
      returns: either that data is safe, the bad-block record is
      safe, or the fact that the device is faulty is safe.
      However we *don't* delay the clearing of the bitmap, so the
      bitmap bit can be recorded as cleared before we know if the
      bad-block-list was written safely.

      So: delay that until the write really is safe.
      i.e. move the call to close_write() until just before
      calling bio_endio(), and recheck the 'is array degraded'
      status before making that call.

      This bug goes back to v3.1 when bad-block-lists were
      introduced, though it only affects arrays created with
      mdadm-3.3 or later as only those have bad-block lists.

      Backports will require at least
      Commit: 95af587e95aa ("md/raid10: ensure device failure recorded before 
write request returns.")
      as well.  I'll send that to 'stable' separately.

      Note that of the two tests of R10BIO_WriteError that this
      patch adds, the first is certain to fail and the second is
      certain to succeed.  However doing it this way makes the
      patch more obviously correct.  I will tidy the code up in a
      future merge window.

      Reported-by: Nate Dailey <nate.dailey@xxxxxxxxxxx>
      Fixes: bd870a16c594 ("md/raid10:  Handle write errors by updating 
badblock log.")
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit bd8688a199b864944bf62eebed0ca13b46249453
  Author: NeilBrown <neilb@xxxxxxxx>
  Date:   Sat Oct 24 16:02:16 2015 +1100

      md/raid1: don't clear bitmap bit when bad-block-list write fails.

      When a write fails and a bad-block-list is present, we can
      update the bad-block-list instead of writing the data.  If
      this succeeds then it is OK clear the relevant bitmap-bit as
      no further 'sync' of the block is needed.

      However if writing the bad-block-list fails then we need to
      treat the write as failed and particularly must not clear
      the bitmap bit.  Otherwise the device can be re-added (after
      any hardware connection issues are resolved) and because the
      relevant bit in the bitmap is clear, that block will not be
      resynced.  This leads to data corruption.

      We already delay the final bio_endio() on the write until
      the bad-block-list is written so that when the write
      returns: either that data is safe, the bad-block record is
      safe, or the fact that the device is faulty is safe.
      However we *don't* delay the clearing of the bitmap, so the
      bitmap bit can be recorded as cleared before we know if the
      bad-block-list was written safely.

      So: delay that until the write really is safe.
      i.e. move the call to close_write() until just before
      calling bio_endio(), and recheck the 'is array degraded'
      status before making that call.

      This bug goes back to v3.1 when bad-block-lists were
      introduced, though it only affects arrays created with
      mdadm-3.3 or later as only those have bad-block lists.

      Backports will require at least
      Commit: 55ce74d4bfe1 ("md/raid1: ensure device failure recorded before 
write request returns.")
      as well.  I'll send that to 'stable' separately.

      Note that of the two tests of R1BIO_WriteError that this
      patch adds, the first is certain to fail and the second is
      certain to succeed.  However doing it this way makes the
      patch more obviously correct.  I will tidy the code up in a
      future merge window.

      Reported-and-tested-by: Nate Dailey <nate.dailey@xxxxxxxxxxx>
      Cc: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
      Fixes: cd5ff9a16f08 ("md/raid1:  Handle write errors by updating badblock 
log.")
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit 161d9041782b86c5493481566539bfc058ceeaff
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Fri Oct 23 13:27:39 2015 -0300

      perf tools: Provide help for subset of options

      Some tools have a lot of options, so, providing a way to show help just
      for some of them may come handy:

        $ perf report -h --tui

         Usage: perf report [<options>]

              --tui             Use the TUI interface

        $ perf report -h --tui --showcpuutilization -b -c

         Usage: perf report [<options>]

          -b, --branch-stack    use branch records for per branch histogram 
filling
          -c, --comms <comm[,comm...]>
                                only consider symbols in these comms
              --showcpuutilization
                                Show sample percentage for different cpu modes
              --tui             Use the TUI interface

        $

      Using it with perf bash completion is also handy, just make sure you
      source the needed file:

        $ . ~/git/linux/tools/perf/perf-completion.sh

      Then press tab/tab after -- to see a list of options, put them after -h
      and only the options chosen will have its help presented:

        $ perf report -h --
        --asm-raw              --demangle-kernel      --group
        --kallsyms             --pretty               --stdio
        --branch-history       --disassembler-style   --gtk
        --max-stack            --showcpuutilization   --symbol-filter
        --branch-stack         --dsos                 --header
        --mem-mode             --show-info            --symbols
        --call-graph           --dump-raw-trace       --header-only
        --modules              --show-nr-samples      --symfs
        --children             --exclude-other        --hide-unresolved
        --objdump              --show-ref-call-graph  --threads
        --column-widths        --fields               --ignore-callees
        --parent               --show-total-period    --tid
        --comms                --field-separator      --input
        --percentage           --socket-filter        --tui
        --cpu                  --force                --inverted
        --percent-limit        --sort                 --verbose
        --demangle             --full-source-path     --itrace
        --pid                  --source               --vmlinux
        $ perf report -h --socket-filter

         Usage: perf report [<options>]

            --socket-filter <n>
                        only show processor socket that match with this filter

      Suggested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-83mcdd3wj0379jcgea8w0fxa@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 869c55b0f473fecfe6c294c6fa965dedfe469e02
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Fri Oct 23 11:23:28 2015 -0300

      perf tools: Show tool command line options ordered

      When asking for a listing of the options, be it using -h or when an
      unknown option is passed, order it by one-letter options, then the ones
      having just long names.

      Suggested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-41qh68t35n4ehrpsuazp1dx8@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 379a80a1d048dcacfc2011d5d32e16d5c804b9f4
  Author: Michael Chan <mchan@xxxxxxxxxxxx>
  Date:   Fri Oct 23 15:06:19 2015 -0400

      bnxt_en: Fix compile errors when CONFIG_BNXT_SRIOV is not set.

      struct bnxt_pf_info needs to be always defined.  Move bnxt_update_vf_mac()
      to bnxt_sriov.c and add some missing #ifdef CONFIG_BNXT_SRIOV.

      Reported-by: Jim Hull <jim.hull@xxxxxxx>
      Tested-by: Jim Hull <jim.hull@xxxxxxx>
      Signed-off-by: Michael Chan <mchan@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 018155365dccecd9ea9f26e1b26fb0f960c1ee32
  Merge: dd5ae68 fd7cd06
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 07:52:59 2015 +0900

      Merge tag 'usb-4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb

      Pull USB fixes from Greg KH:
       "Here are three xhci driver fixes for reported issues for 4.3-rc7

        All have been in linux-next for a while with no problems"

      * tag 'usb-4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb:
        xhci: Add spurious wakeup quirk for LynxPoint-LP controllers
        xhci: handle no ping response error properly
        xhci: don't finish a TD if we get a short transfer event mid TD

  commit dd5ae6818ccd4ab0aa6f7d84e88f60a48af0fb52
  Merge: 4ee8019 f235f66
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 07:52:09 2015 +0900

      Merge tag 'tty-4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty

      Pull tty/serial fixes from Greg KH:
       "Here are two fixes that resolve reported issues, one with the 8250
        driver, and the other with the generic fbcon driver.

        Both have been in linux-next for a while"

      * tag 'tty-4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty:
        fbcon: initialize blink interval before calling fb_set_par
        Revert "serial: 8250_dma: don't bother DMA with small transfers"

  commit 4ee8019d3fdc6cce14129a954632c0f81d456884
  Merge: 410694e 4301de3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 07:51:13 2015 +0900

      Merge tag 'staging-4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

      Pull staging driver fixes from Greg KH:
       "Here are four iio driver fixes for 4.3-rc7, fixing some reported
        issues.  All of these have been in linux-next for a while"

      * tag 'staging-4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging:
        iio: mxs-lradc: Fix temperature offset
        iio: accel: sca3000: memory corruption in sca3000_read_first_n_hw_rb()
        iio: st_accel: fix interrupt handling on LIS3LV02
        iio: adc: twl4030: Fix ADC[3:6] readings

  commit 410694e214d5b479bc8b035ded0bb832f1c469b4
  Merge: 35df017 0ca81a2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 07:28:05 2015 +0900

      Merge tag 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma

      Pull infiniband fixes from Doug Ledford:
       "It's late in the game, I know, but these fixes seemed important enough
        to warrant a late pull request.  They all involve oopses or use after
        frees or corruptions.

        Six serious fixes:

         - Hold the mutex around the find and corresponding update of our gid

         - The ifa list is rcu protected, copy its contents under rcu to avoid
           using a freed structure

         - On error, netdev might be null, so check it before trying to
           release it

         - On init, if workqueue alloc fails, fail init

         - The new demux patches exposed a bug in mlx5 and ipath drivers, we
           need to use the payload P_Key to determine the P_Key the packet
           arrived on because the hardware doesn't tell us the truth

         - Due to a couple convoluted error flows, it is possible for the CM
           to trigger a use_after_free and a double_free of rb nodes.  Add two
           checks to prevent that.  This code has worked for 10+ years.  It is
           likely that some of the recent changes have caused this issue to
           surface.  The current patch will protect us from nasty events for
           now while we track down why this is just now showing up"

      * tag 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma:
        IB/cm: Fix rb-tree duplicate free and use-after-free
        IB/cma: Use inner P_Key to determine netdev
        IB/ucma: check workqueue allocation before usage
        IB/cma: Potential NULL dereference in cma_id_from_event
        IB/core: Fix use after free of ifa
        IB/core: Fix memory corruption in ib_cache_gid_set_default_gid

  commit 35df017c4d5571ee6f3061964d1445aae250219c
  Merge: ea1ee5f 3201ac4
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 07:23:52 2015 +0900

      Merge tag 'dm-4.3-fixes-4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm

      Pull device mapper fixes from Mike Snitzer:
       "Three stable fixes (two in btree code used by DM thinp and one to
        properly store flags in DM cache metadata's superblock)"

      * tag 'dm-4.3-fixes-4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm:
        dm cache: the CLEAN_SHUTDOWN flag was not being set
        dm btree: fix leak of bufio-backed block in btree_split_beneath error 
path
        dm btree remove: fix a bug when rebalancing nodes after removal

  commit ea1ee5ff1b500ccdc64782ecef13d276afb08f14
  Merge: ef594c4 e27c5b9
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 07:20:57 2015 +0900

      Merge branch 'for-linus' of git://git.kernel.dk/linux-block

      Pull block layer fixes from Jens Axboe:
       "A final set of fixes for 4.3.

        It is (again) bigger than I would have liked, but it's all been
        through the testing mill and has been carefully reviewed by multiple
        parties.  Each fix is either a regression fix for this cycle, or is
        marked stable.  You can scold me at KS.  The pull request contains:

         - Three simple fixes for NVMe, fixing regressions since 4.3.  From
           Arnd, Christoph, and Keith.

         - A single xen-blkfront fix from Cathy, fixing a NULL dereference if
           an error is returned through the staste change callback.

         - Fixup for some bad/sloppy code in nbd that got introduced earlier
           in this cycle.  From Markus Pargmann.

         - A blk-mq tagset use-after-free fix from Junichi.

         - A backing device lifetime fix from Tejun, fixing a crash.

         - And finally, a set of regression/stable fixes for cgroup writeback
           from Tejun"

      * 'for-linus' of git://git.kernel.dk/linux-block:
        writeback: remove broken rbtree_postorder_for_each_entry_safe() usage 
in cgwb_bdi_destroy()
        NVMe: Fix memory leak on retried commands
        block: don't release bdi while request_queue has live references
        nvme: use an integer value to Linux errno values
        blk-mq: fix use-after-free in blk_mq_free_tag_set()
        nvme: fix 32-bit build warning
        writeback: fix incorrect calculation of available memory for memcg 
domains
        writeback: memcg dirty_throttle_control should be initialized with 
wb->memcg_completions
        writeback: bdi_writeback iteration must not skip dying ones
        writeback: fix bdi_writeback iteration in wakeup_dirtytime_writeback()
        writeback: laptop_mode_timer_fn() needs rcu_read_lock() around 
bdi_writeback iteration
        nbd: Add locking for tasks
        xen-blkfront: check for null drvdata in blkback_changed 
(XenbusStateClosing)

  commit ef594c421a0f96197f28d205e2ee58a83c1e0e37
  Merge: 37902bc 6d69bb53
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 07:19:33 2015 +0900

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client

      Pull Ceph fixes from Sage Weil:
       "Two fixes.

        One is a stopgap to prevent a stack blowout when users have a deep
        chain of image clones.  (We'll rewrite this code to be non-recursive
        for the next window, but in the meantime this is a simple fix that
        avoids a crash.)

        The second fixes a refcount underflow"

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client:
        rbd: prevent kernel stack blow up on rbd map
        rbd: don't leak parent_spec in rbd_dev_probe_parent()

  commit 37902bc190f1396a8c232783b29ddfcaa4026028
  Merge: 0386729 0f89abf
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Oct 24 07:17:58 2015 +0900

      Merge branch 'for-linus-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs

      Pull btrfs fixes from Chris Mason:
       "I have two more small fixes this week:

        Qu's fix avoids unneeded COW during fallocate, and Christian found a
        memory leak in the error handling of an earlier fix"

      * 'for-linus-4.3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs:
        btrfs: fix possible leak in btrfs_ioctl_balance()
        btrfs: Avoid truncate tailing page if fallocate range doesn't exceed 
inode size

  commit 5dd32eae604ee503e5a84a4f18d1381e4cc356cb
  Author: Vladimir Zapolskiy <vz@xxxxxxxxx>
  Date:   Sat Oct 17 21:52:27 2015 +0300

      i2c: pnx: fix runtime warnings caused by enabling unprepared clock

      The driver can not be used on a platform with common clock framework
      until clk_prepare/clk_unprepare calls are added, otherwise clk_enable
      calls will fail and a WARN is generated.

      Signed-off-by: Vladimir Zapolskiy <vz@xxxxxxxxx>
      Signed-off-by: Wolfram Sang <wsa@xxxxxxxxxxxxx>

  commit 3201ac452e84a8a368197d648c9b7011e061804a
  Author: Joe Thornber <ejt@xxxxxxxxxx>
  Date:   Thu Oct 22 18:10:55 2015 +0100

      dm cache: the CLEAN_SHUTDOWN flag was not being set

      If the CLEAN_SHUTDOWN flag is not set when a cache is loaded then all 
cache
      blocks are marked as dirty and a full writeback occurs.

      __commit_transaction() is responsible for setting/clearing
      CLEAN_SHUTDOWN (based the flags_mutator that is passed in).

      Fix this issue, of the cache's on-disk flags being wrong, by making sure
      __commit_transaction() does not reset the flags after the mutator has
      altered the flags in preparation for them being serialized to disk.

      before:

      sb_flags = mutator(le32_to_cpu(disk_super->flags));
      disk_super->flags = cpu_to_le32(sb_flags);
      disk_super->flags = cpu_to_le32(cmd->flags);

      after:

      disk_super->flags = cpu_to_le32(cmd->flags);
      sb_flags = mutator(le32_to_cpu(disk_super->flags));
      disk_super->flags = cpu_to_le32(sb_flags);

      Reported-by: Bogdan Vasiliev <bogdan.vasiliev@xxxxxxxxx>
      Signed-off-by: Joe Thornber <ejt@xxxxxxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 4dcb8b57df3593dcb20481d9d6cf79d1dc1534be
  Author: Mike Snitzer <snitzer@xxxxxxxxxx>
  Date:   Thu Oct 22 10:56:40 2015 -0400

      dm btree: fix leak of bufio-backed block in btree_split_beneath error path

      btree_split_beneath()'s error path had an outstanding FIXME that speaks
      directly to the potential for _not_ cleaning up a previously allocated
      bufio-backed block.

      Fix this by releasing the previously allocated bufio block using
      unlock_block().

      Reported-by: Mikulas Patocka <mpatocka@xxxxxxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Acked-by: Joe Thornber <thornber@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 2871c69e025e8bc507651d5a9cf81a8a7da9d24b
  Author: Joe Thornber <ejt@xxxxxxxxxx>
  Date:   Wed Oct 21 18:36:49 2015 +0100

      dm btree remove: fix a bug when rebalancing nodes after removal

      Commit 4c7e309340ff ("dm btree remove: fix bug in redistribute3") wasn't
      a complete fix for redistribute3().

      The redistribute3 function takes 3 btree nodes and shares out the entries
      evenly between them.  If the three nodes in total contained
      (MAX_ENTRIES * 3) - 1 entries between them then this was erroneously 
getting
      rebalanced as (MAX_ENTRIES - 1) on the left and right, and (MAX_ENTRIES + 
1) in
      the center.

      Fix this issue by being more careful about calculating the target number
      of entries for the left and right nodes.

      Unit tested in userspace using this program:
      
https://github.com/jthornber/redistribute3-test/blob/master/redistribute3_t.c

      Signed-off-by: Joe Thornber <ejt@xxxxxxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 6d69bb536bac0d403d83db1ca841444981b280cd
  Author: Ilya Dryomov <idryomov@xxxxxxxxx>
  Date:   Sun Oct 11 19:38:00 2015 +0200

      rbd: prevent kernel stack blow up on rbd map

      Mapping an image with a long parent chain (e.g. image foo, whose parent
      is bar, whose parent is baz, etc) currently leads to a kernel stack
      overflow, due to the following recursion in the reply path:

        rbd_osd_req_callback()
          rbd_obj_request_complete()
            rbd_img_obj_callback()
              rbd_img_parent_read_callback()
                rbd_obj_request_complete()
                  ...

      Limit the parent chain to 16 images, which is ~5K worth of stack.  When
      the above recursion is eliminated, this limit can be lifted.

      Fixes: http://tracker.ceph.com/issues/12538

      Cc: stable@xxxxxxxxxxxxxxx # 3.10+, needs backporting for < 4.2
      Signed-off-by: Ilya Dryomov <idryomov@xxxxxxxxx>
      Reviewed-by: Josh Durgin <jdurgin@xxxxxxxxxx>

  commit 1f2c6651f69c14d0d3a9cfbda44ea101b02160ba
  Author: Ilya Dryomov <idryomov@xxxxxxxxx>
  Date:   Sun Oct 11 19:38:00 2015 +0200

      rbd: don't leak parent_spec in rbd_dev_probe_parent()

      Currently we leak parent_spec and trigger a "parent reference
      underflow" warning if rbd_dev_create() in rbd_dev_probe_parent() fails.
      The problem is we take the !parent out_err branch and that only drops
      refcounts; parent_spec that would've been freed had we called
      rbd_dev_unparent() remains and triggers rbd_warn() in
      rbd_dev_parent_put() - at that point we have parent_spec != NULL and
      parent_ref == 0, so counter ends up being -1 after the decrement.

      Redo rbd_dev_probe_parent() to fix this.

      Cc: stable@xxxxxxxxxxxxxxx # 3.10+, needs backporting for < 4.2
      Signed-off-by: Ilya Dryomov <idryomov@xxxxxxxxx>
      Reviewed-by: Alex Elder <elder@xxxxxxxxxx>

  commit c86f5ebfbd147d1a228ab89ee1658e18939bd7ad
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Fri Oct 23 10:45:14 2015 -0400

      drm/amdgpu: don't try to recreate sysfs entries on resume

      Fixes an error on resume caused by:
      fa022a9b65d2886486a022fd66b20c823cd76ad9

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 49abb26651167c892393cd9f2ad23df429645ed9
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Fri Oct 23 10:38:52 2015 -0400

      drm/radeon: don't try to recreate sysfs entries on resume

      Fixes a harmless error message caused by:
      51a4726b04e880fdd9b4e0e58b13f70b0a68a7f5

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 5c92d87d30b23844e6998d8318e4c19ee3a907ac
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Wed Oct 21 21:58:28 2015 +0200

      drm/amdgpu: stop leaking page flip fence

      reservation_object_get_fences_rcu already takes the references.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Reviewed-by: Chunming Zhou <david1.zhou@xxxxxxx>
      Reviewed-by: Jammy Zhou <Jammy.Zhou@xxxxxxx>

  commit bf7958607d0b792e0c43482c0c78786023a69832
  Merge: e74f510 8443c1a
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 06:58:09 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-10-23

      This series contains updates to i40e, i40evf, if_link, ixgbe and ixgbevf.

      Anjali adds a workaround to drop any flow control frames from being
      transmitted from any VSI, so that a malicious VF cannot send flow control
      or PFC packets out on the wire.  Also fixed a bug in debugfs by grabbing
      the filter list lock before adding or deleting a filter.

      Akeem fixes an issue where we were unconditionally returning VEB bridge
      mode before allowing LB in the add VSI routine, resolve by checking if
      the bridge is actually in VEB mode first.

      Mitch fixed an issue where the incorrect structure was being used for
      VLAN filter list, which meant the VLAN filter list did not get
      processed correctly and VLAN filters would not be re-enabled after any
      kind of reset.

      Helin fixed a problem of possibly getting inconsistent flow control
      status after a PF reset.  The issue was requested_mode was being set
      with a default value during probe, but the hardware state could be a
      different value from this mode.

      Carolyn fixed a problem where the driver output of the OEM version
      string varied from the other tools.

      Jean Sacren fixes up kernel documentation by fixing function header
      comments to match actual variables used in the functions.  Also
      cleaned up variable initialization, when the variable would be
      over-written immediately.

      Hiroshi Shimanoto provides three patches to add "trusted" VF by adding
      netlink directives and an NDO entry.  Then implement these new controls
      in ixgbe and ixgbevf.  This series has gone through several iterations
      to address all the suggested community changes and concerns.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 03867292476e6fa7679395838d768dda0a0816c7
  Merge: df55793 f7d27c3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 22:34:32 2015 +0900

      Merge branch 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 fixes from Ingo Molnar:
       "Misc fixes: two KASAN fixes, two EFI boot fixes, two boot-delay
        optimization fixes, and a fix for a IRQ handling hang observed on
        virtual platforms"

      * 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/mm, kasan: Silence KASAN warnings in get_wchan()
        compiler, atomics, kasan: Provide READ_ONCE_NOCHECK()
        x86, kasan: Fix build failure on KASAN=y && KMEMCHECK=y kernels
        x86/smpboot: Fix CPU #1 boot timeout
        x86/smpboot: Fix cpu_init_udelay=10000 corner case boot parameter 
misbehavior
        x86/ioapic: Disable interrupts when re-routing legacy IRQs
        x86/setup: Extend low identity map to cover whole kernel range
        x86/efi: Fix multiple GOP device support

  commit df55793680d36e37e6fc384fbd90c39ed83cbe75
  Merge: 9f30931 0aaafaa
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 22:31:39 2015 +0900

      Merge branch 'sched-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull scheduler fixes from Ingo Molnar:
       "Misc fixes all around the map: an instrumentation fix, a nohz
        usability fix, a lockdep annotation fix and two task group scheduling
        fixes"

      * 'sched-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        sched/core: Add missing lockdep_unpin() annotations
        sched/deadline: Fix migration of SCHED_DEADLINE tasks
        nohz: Revert "nohz: Set isolcpus when nohz_full is set"
        sched/fair: Update task group's load_avg after task migration
        sched/fair: Fix overly small weight for interactive group entities
        sched, tracing: Stop/start critical timings around the idle=poll idle 
loop

  commit e74f51056a167036f9168fb8d04b9e16ea12af43
  Merge: 654c9c5 1c78efa
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 06:26:50 2015 -0700

      Merge branch 'mpls_multipath'

      Roopa Prabhu says:

      ====================
      mpls: multipath support

      This patch adds support for MPLS multipath routes.

      Includes following changes to support multipath:
      - splits struct mpls_route into 'struct mpls_route + struct mpls_nh'.

      - struct mpls_nh represents a mpls nexthop label forwarding entry

      - Adds support to parse/fill RTA_MULTIPATH netlink attribute for
      multipath routes similar to ipv4/v6 fib

      - In the process of restructuring, this patch also consistently changes 
all
      labels to u8

      $ip -f mpls route add 100 nexthop as 200 via inet 10.1.1.2 dev swp1 \
                nexthop as 700 via inet 10.1.1.6 dev swp2 \
                nexthop as 800 via inet 40.1.1.2 dev swp3

      $ip  -f mpls route show
      100
        nexthop as to 200 via inet 10.1.1.2  dev swp1
        nexthop as to 700 via inet 10.1.1.6  dev swp2
        nexthop as to 800 via inet 40.1.1.2  dev swp3
      ====================

      Signed-off-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Eric W. Biederman <ebiederm@xxxxxxxxxxxx>

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1c78efa8319cad2f10f421afa627745fb4d9b29f
  Author: Robert Shearman <rshearma@xxxxxxxxxxx>
  Date:   Fri Oct 23 06:03:28 2015 -0700

      mpls: flow-based multipath selection

      Change the selection of a multipath route to use a flow-based
      hash. This more suitable for traffic sensitive to reordering within a
      flow (e.g. TCP, L2VPN) and whilst still allowing a good distribution
      of traffic given enough flows.

      Selection of the path for a multipath route is done using a hash of:
      1. Label stack up to MAX_MP_SELECT_LABELS labels or up to and
         including entropy label, whichever is first.
      2. 3-tuple of (L3 src, L3 dst, proto) from IPv4/IPv6 header in MPLS
         payload, if present.

      Naturally, a 5-tuple hash using L4 information in addition would be
      possible and be better in some scenarios, but there is a tradeoff
      between looking deeper into the packet to achieve good distribution,
      and packet forwarding performance, and I have erred on the side of the
      latter as the default.

      Signed-off-by: Robert Shearman <rshearma@xxxxxxxxxxx>
      Signed-off-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f8efb73c97e2fa0abbe2e07c5c5df07800312643
  Author: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 06:03:27 2015 -0700

      mpls: multipath route support

      This patch adds support for MPLS multipath routes.

      Includes following changes to support multipath:
      - splits struct mpls_route into 'struct mpls_route + struct mpls_nh'

      - 'struct mpls_nh' represents a mpls nexthop label forwarding entry

      - moves mpls route and nexthop structures into internal.h

      - A mpls_route can point to multiple mpls_nh structs

      - the nexthops are maintained as a array (similar to ipv4 fib)

      - In the process of restructuring, this patch also consistently changes
        all labels to u8

      - Adds support to parse/fill RTA_MULTIPATH netlink attribute for
      multipath routes similar to ipv4/v6 fib

      - In this patch, the multipath route nexthop selection algorithm
      simply returns the first nexthop. It is replaced by a
      hash based algorithm from Robert Shearman in the next patch

      - mpls_route_update cleanup: remove 'dev' handling in mpls_route_update.
      mpls_route_update though implemented to update based on dev, it was
      never used that way. And the dev handling gets tricky with multiple
      nexthops. Cannot match against any single nexthops dev. So, this patch
      removes the unused 'dev' handling in mpls_route_update.

      - dead route/path handling will be implemented in a subsequent patch

      Example:

      $ip -f mpls route add 100 nexthop as 200 via inet 10.1.1.2 dev swp1 \
                      nexthop as 700 via inet 10.1.1.6 dev swp2 \
                      nexthop as 800 via inet 40.1.1.2 dev swp3

      $ip  -f mpls route show
      100
              nexthop as to 200 via inet 10.1.1.2  dev swp1
              nexthop as to 700 via inet 10.1.1.6  dev swp2
              nexthop as to 800 via inet 40.1.1.2  dev swp3

      Signed-off-by: Roopa Prabhu <roopa@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Robert Shearman <rshearma@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ce9d9b8e5c2b7486edf76958bcdb5e6534a915b0
  Author: Li RongQing <roy.qing.li@xxxxxxxxx>
  Date:   Fri Oct 23 20:59:49 2015 +0800

      net: sysctl: fix a kmemleak warning

      the returned buffer of register_sysctl() is stored into net_header
      variable, but net_header is not used after, and compiler maybe
      optimise the variable out, and lead kmemleak reported the below warning

        comm "swapper/0", pid 1, jiffies 4294937448 (age 267.270s)
        hex dump (first 32 bytes):
        90 38 8b 01 c0 ff ff ff 00 00 00 00 01 00 00 00 .8..............
        01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
        backtrace:
        [<ffffffc00020f134>] create_object+0x10c/0x2a0
        [<ffffffc00070ff44>] kmemleak_alloc+0x54/0xa0
        [<ffffffc0001fe378>] __kmalloc+0x1f8/0x4f8
        [<ffffffc00028e984>] __register_sysctl_table+0x64/0x5a0
        [<ffffffc00028eef0>] register_sysctl+0x30/0x40
        [<ffffffc00099c304>] net_sysctl_init+0x20/0x58
        [<ffffffc000994dd8>] sock_init+0x10/0xb0
        [<ffffffc0000842e0>] do_one_initcall+0x90/0x1b8
        [<ffffffc000966bac>] kernel_init_freeable+0x218/0x2f0
        [<ffffffc00070ed6c>] kernel_init+0x1c/0xe8
        [<ffffffc000083bfc>] ret_from_fork+0xc/0x50
        [<ffffffffffffffff>] 0xffffffffffffffff <<end check kmemleak>>

      Before fix, the objdump result on ARM64:
      0000000000000000 <net_sysctl_init>:
         0:   a9be7bfd        stp     x29, x30, [sp,#-32]!
         4:   90000001        adrp    x1, 0 <net_sysctl_init>
         8:   90000000        adrp    x0, 0 <net_sysctl_init>
         c:   910003fd        mov     x29, sp
        10:   91000021        add     x1, x1, #0x0
        14:   91000000        add     x0, x0, #0x0
        18:   a90153f3        stp     x19, x20, [sp,#16]
        1c:   12800174        mov     w20, #0xfffffff4                // #-12
        20:   94000000        bl      0 <register_sysctl>
        24:   b4000120        cbz     x0, 48 <net_sysctl_init+0x48>
        28:   90000013        adrp    x19, 0 <net_sysctl_init>
        2c:   91000273        add     x19, x19, #0x0
        30:   9101a260        add     x0, x19, #0x68
        34:   94000000        bl      0 <register_pernet_subsys>
        38:   2a0003f4        mov     w20, w0
        3c:   35000060        cbnz    w0, 48 <net_sysctl_init+0x48>
        40:   aa1303e0        mov     x0, x19
        44:   94000000        bl      0 <register_sysctl_root>
        48:   2a1403e0        mov     w0, w20
        4c:   a94153f3        ldp     x19, x20, [sp,#16]
        50:   a8c27bfd        ldp     x29, x30, [sp],#32
        54:   d65f03c0        ret
      After:
      0000000000000000 <net_sysctl_init>:
         0:   a9bd7bfd        stp     x29, x30, [sp,#-48]!
         4:   90000000        adrp    x0, 0 <net_sysctl_init>
         8:   910003fd        mov     x29, sp
         c:   a90153f3        stp     x19, x20, [sp,#16]
        10:   90000013        adrp    x19, 0 <net_sysctl_init>
        14:   91000000        add     x0, x0, #0x0
        18:   91000273        add     x19, x19, #0x0
        1c:   f90013f5        str     x21, [sp,#32]
        20:   aa1303e1        mov     x1, x19
        24:   12800175        mov     w21, #0xfffffff4                // #-12
        28:   94000000        bl      0 <register_sysctl>
        2c:   f9002260        str     x0, [x19,#64]
        30:   b40001a0        cbz     x0, 64 <net_sysctl_init+0x64>
        34:   90000014        adrp    x20, 0 <net_sysctl_init>
        38:   91000294        add     x20, x20, #0x0
        3c:   9101a280        add     x0, x20, #0x68
        40:   94000000        bl      0 <register_pernet_subsys>
        44:   2a0003f5        mov     w21, w0
        48:   35000080        cbnz    w0, 58 <net_sysctl_init+0x58>
        4c:   aa1403e0        mov     x0, x20
        50:   94000000        bl      0 <register_sysctl_root>
        54:   14000004        b       64 <net_sysctl_init+0x64>
        58:   f9402260        ldr     x0, [x19,#64]
        5c:   94000000        bl      0 <unregister_sysctl_table>
        60:   f900227f        str     xzr, [x19,#64]
        64:   2a1503e0        mov     w0, w21
        68:   f94013f5        ldr     x21, [sp,#32]
        6c:   a94153f3        ldp     x19, x20, [sp,#16]
        70:   a8c37bfd        ldp     x29, x30, [sp],#48
        74:   d65f03c0        ret

      Add the possible error handle to free the net_header to remove the
      kmemleak warning

      Signed-off-by: Li RongQing <roy.qing.li@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9f30931a5482d66710210dafe9b4f2cc92320540
  Merge: a2c01ed b67de01
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 22:10:51 2015 +0900

      Merge branch 'akpm' (patches from Andrew)

      Merge fixes from Andrew Morton:
       "9 fixes"

      * emailed patches from Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>:
        ocfs2/dlm: unlock lockres spinlock before dlm_lockres_put
        fault-inject: fix inverted interval/probability values in printk
        lib/Kconfig.debug: disable -Wframe-larger-than warnings with KASAN=y
        mm: make sendfile(2) killable
        thp: use is_zero_pfn() only after pte_present() check
        mailmap: update Javier Martinez Canillas' email
        MAINTAINERS: add Sergey as zsmalloc reviewer
        mm: cma: fix incorrect type conversion for size during dma allocation
        kmod: don't run async usermode helper as a child of kworker thread

  commit 654c9c543ac025f4ecb73047f2e5b689137c77c5
  Merge: 6fb3b6b5 f050561
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 05:57:53 2015 -0700

      Merge branch 'mdiobus_nested_read_write'

      Neil Armstrong says:

      ====================
      Refactor nested mdiobus read/write functions

      In order to avoid locked signal false positive for nested mdiobus
      read/write calls, nested code was introduced in mv88e6xxx and
      mdio-mux.
      But mv88e6060 also needs such nested mdiobus read/write calls.
      For sake of refactoring, introduce nested variants of mdiobus read/write
      and make them used by mv88e6xxx and mv88e6060.
      In a next patch, mdio-mux should also use these variant calls.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f0505610505caf8443cd5ea269a7936b64711fee
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Thu Oct 22 10:37:57 2015 +0200

      net: dsa: Make mv88e6060 use nested mdiobus read/write

      Like mv88e6xxx and mdio-mux, to avoid lockdep give false positives
      because of nested MDIO busses, switch to previously introduced
      nested mdiobus_read/write variants.

      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6e899e6c51320dd340ccc7a3d4391cedd0ba275b
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Thu Oct 22 10:37:53 2015 +0200

      net: dsa: Make mv88e6xxx use nested mdiobus read/write

      Make the mv88e6xxx driver use the previously introduced nested
      variants of mdiobus_read/write functions.

      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 21dd19fed3c3eb42a3877600f4a97a774323e562
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Thu Oct 22 10:37:49 2015 +0200

      net: phy: Add nested variants of mdiobus read/write

      Since nested variants of mdiobus_read/write are used in multiple
      drivers, add nested variants in the mdiobus core.

      Suggested-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8443c1a4b192089e62642d847ebac3e4d15134c3
  Author: Hiroshi Shimamoto <h-shimamoto@xxxxxxxxxxxxx>
  Date:   Fri Aug 28 06:59:03 2015 +0000

      ixgbe, ixgbevf: Add new mbox API xcast mode

      The limitation of the number of multicast address for VF is not enough
      for the large scale server with SR-IOV feature. IPv6 requires the 
multicast
      MAC address for each IP address to handle the Neighbor Solicitation
      message. We couldn't assign over 30 IPv6 addresses to a single VF.

      This patch introduces the new mailbox API, IXGBE_VF_UPDATE_XCAST_MODE,
      to update multicast mode of VF. This adds 3 modes;
        - NONE     only L2 exact match addresses or Flow Director enabled
        - MULTI    BAM and ROMPE set
        - ALLMULTI BAM, ROMPE and MPE set

      If a guest VF user wants over 30 MAC multicast addresses, set IFF_ALLMULTI
      to request PF to update xcast mode to enable VF multicast promiscuous 
mode.

      On the other hand, enabling VF multicast promiscuous mode may affect
      security and performance in the network of the NIC. Only trusted VF can
      enable multicast promiscuous mode. The behavior of untrusted VF is the
      same as previous version.

      Signed-off-by: Hiroshi Shimamoto <h-shimamoto@xxxxxxxxxxxxx>
      Tested-by: Krishneil Singh <Krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 54011e4db839504791cf8317fc48949c683587d4
  Author: Hiroshi Shimamoto <h-shimamoto@xxxxxxxxxxxxx>
  Date:   Fri Aug 28 06:58:33 2015 +0000

      ixgbe: Add new ndo to trust VF

      Implements the new netdev op to trust VF in ixgbe.

      The administrator can turn on and off VF trusted by ip command which
      supports trust message.
       # ip link set dev eth0 vf 1 trust on
      or
       # ip link set dev eth0 vf 1 trust off

      Send a ping to reset VF on changing the status of trusting.
      VF driver will reconfigure its features on reset.

      Signed-off-by: Hiroshi Shimamoto <h-shimamoto@xxxxxxxxxxxxx>
      Tested-by: Krishneil Singh <Krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 6fb3b6b57ae444d7723088656dce86b1be92498d
  Author: Grygorii Strashko <grygorii.strashko@xxxxxx>
  Date:   Fri Oct 23 14:41:12 2015 +0300

      drivers: net: cpsw: use module_platform_driver

      There is no reasons to probe cpsw from late_initcall level
      and it's not recommended. Hence, use module_platform_driver()
      to register and probe cpsw driver from module_init() level.

      Cc: Tony Lindgren <tony@xxxxxxxxxxx>
      Acked-by: Mugunthan V N <mugunthanvnm@xxxxxx>
      Signed-off-by: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit dd461d6aa894761fe67c30ddf81eec0d08be216b
  Author: Hiroshi Shimamoto <h-shimamoto@xxxxxxxxxxxxx>
  Date:   Fri Aug 28 06:57:55 2015 +0000

      if_link: Add control trust VF

      Add netlink directives and ndo entry to trust VF user.

      This controls the special permission of VF user.
      The administrator will dedicatedly trust VF user to use some features
      which impacts security and/or performance.

      The administrator never turn it on unless VF user is fully trusted.

      CC: Sy Jong Choi <sy.jong.choi@xxxxxxxxx>
      Signed-off-by: Hiroshi Shimamoto <h-shimamoto@xxxxxxxxxxxxx>
      Acked-by: Greg Rose <gregory.v.rose@xxxxxxxxx>
      Tested-by: Krishneil Singh <Krishneil.k.singh@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 5e0724d027f0548511a2165a209572d48fe7a4c8
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Oct 22 08:20:46 2015 -0700

      tcp/dccp: fix hashdance race for passive sessions

      Multiple cpus can process duplicates of incoming ACK messages
      matching a SYN_RECV request socket. This is a rare event under
      normal operations, but definitely can happen.

      Only one must win the race, otherwise corruption would occur.

      To fix this without adding new atomic ops, we use logic in
      inet_ehash_nolisten() to detect the request was present in the same
      ehash bucket where we try to insert the new child.

      If request socket was not found, we have to undo the child creation.

      This actually removes a spin_lock()/spin_unlock() pair in
      reqsk_queue_unlink() for the fast path.

      Fixes: e994b2f0fb92 ("tcp: do not lock listener to process SYN packets")
      Fixes: 079096f103fa ("tcp/dccp: install syn_recv requests into ehash 
table")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2fc4cd52fa7ed86e9d1df94e459b6a2435bfa9c7
  Author: Jean Sacren <sakiwit@xxxxxxxxx>
  Date:   Tue Oct 13 01:06:32 2015 -0600

      i40e: fix unconditional execution of cpu_to_le16()

      The commit 3092e5e4cc79 ("i40e: add little endian conversion for
      checksum") fixed the checksum bug on big-endian architecture.

      But we should not execute cpu_to_le16() unconditionally. Thus, put
      cpu_to_le16() under certain condition.

      Cc: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Cc: Paul M Stillwell Jr <paul.m.stillwell.jr@xxxxxxxxx>
      Signed-off-by: Jean Sacren <sakiwit@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 0e5229c6c576969bf8f89f8ca74fa7ea355b434e
  Author: Jean Sacren <sakiwit@xxxxxxxxx>
  Date:   Tue Oct 13 01:06:31 2015 -0600

      i40e: clean up local variable initialization

      In both i40e_calc_nvm_checksum() and i40e_update_nvm_checksum(), the
      local variables designated by 'ret_code' are overwritten immediately. As
      such, they should merely be declared.

      Signed-off-by: Jean Sacren <sakiwit@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit ed17f7e5d7918adb487debe49fadf57fd2b98d1c
  Author: Jean Sacren <sakiwit@xxxxxxxxx>
  Date:   Tue Oct 13 01:06:30 2015 -0600

      i40evf: clean up local variable initialization

      In i40evf_msix_aq(), the first two lines of rd32() are mainly to clear
      the registers. If we initialize 'val' at this point, it will be
      overwritten immediately. We shall simply discard the return value here.

      When we initialize 'val', we might as well include the mask in one step.

      Signed-off-by: Jean Sacren <sakiwit@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 554f4544afa541b25882cd0ca5fd6b01b4e2ce07
  Author: Jean Sacren <sakiwit@xxxxxxxxx>
  Date:   Tue Oct 13 01:06:28 2015 -0600

      i40e: add missing kernel-doc argument

      The following kernel-doc arguments for their respective functions are
      missing:

      1) @cd_type_cmd_tso_mss for i40e_tso();
      2) @cd_type_cmd_tso_mss for i40e_tsyn();
      3) @tx_ring for i40e_tx_enable_csum().

      Add them all for the kernel-doc requirement.

      Signed-off-by: Jean Sacren <sakiwit@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Acked-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 69c1d70ab6b5b53ec21919f4f8de84041d3f6cdd
  Author: Jean Sacren <sakiwit@xxxxxxxxx>
  Date:   Tue Oct 13 01:06:27 2015 -0600

      i40evf: add missing kernel-doc argument

      @flush has been missing since the inception of i40evf_irq_enable(). Add
      it for the kernel doc.

      Signed-off-by: Jean Sacren <sakiwit@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Acked-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit a3524e95ac5339e9b65dba2228f3f7efd27648cf
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 2 12:18:16 2015 +0300

      i40e: re-use %*ph specifier to hexdump a data

      Instead of using a custom approach change the code to use %*ph format
      specifier.

      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Acked-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 0e320516b280a8cf7258d9d41e7140563dd7c027
  Author: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
  Date:   Thu Oct 1 14:37:41 2015 -0400

      i40e/i40evf: Bump i40e to 1.3.46 and i40evf to 1.3.33

      Bump up the version...

      Change-ID: Ib8d501021671ba20250115ed54330e2c182255b7
      Signed-off-by: Catherine Sullivan <catherine.sullivan@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit de445b3dc29835ae840f202bc62fd3ae42da12ad
  Author: Akeem G Abodunrin <akeem.g.abodunrin@xxxxxxxxx>
  Date:   Thu Oct 1 14:37:40 2015 -0400

      i40e: Disable VEB bridge mode with SR-IOV failure

      If a call to enable SR-IOV in the kernel failed, we need to disable
      I40E_FLAG_VEB_MODE_ENABLED, so that bridge mode could fall back to
      VEPA, which is a default.

      Change-ID: I12b6f776769506db85b29bea94b9c88d0b5ee65e
      Signed-off-by: Akeem G Abodunrin <akeem.g.abodunrin@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 2efaad86b5cdd0f6d70436fa304a567df8a3cf6c
  Author: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
  Date:   Thu Oct 1 14:37:39 2015 -0400

      i40e: Fix an incorrect OEM version string

      This patch fixes a problem where the driver output of the OEM
      version string varied from the other tools.  The mask value
      and the order of operations were incorrect, per the original
      change request.  Without this patch, the version string will
      appear incorrect from the driver.

      Change-ID: Ie1ca6485284b4ce3b57e5a99b18b7641617c7ef7
      Signed-off-by: Carolyn Wyborny <carolyn.wyborny@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 58fc3267f151f6facfc94c6982bef09a53bb5219
  Author: Helin Zhang <helin.zhang@xxxxxxxxx>
  Date:   Thu Oct 1 14:37:38 2015 -0400

      i40e: fix inconsistent statuses after a PF reset

      This patch fixes a problem of possibly getting inconsistent flow control
      statuses after a PF reset. Requested_mode was being set with a default
      value during probing, but the initial HW state could be different from
      this mode.

      Change-ID: I772bf07b78616e87086418d4bd87954b66fa17cd
      Signed-off-by: Helin Zhang <helin.zhang@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 40d01366e6dd5ef1cb3505f11b2d208cfa3632f3
  Author: Mitch Williams <mitch.a.williams@xxxxxxxxx>
  Date:   Thu Oct 1 14:37:37 2015 -0400

      i40evf: use correct struct for list manipulation

      Not sure how this compiles at all. Use the correct struct for
      manipulating the VLAN filter list. Without this, the VLAN filter
      list doesn't get processed correctly, and VLAN filters will not
      be re-enabled after any kind of reset.

      Change-ID: Iceff2dc089f303058fb71ecb08419eed471e0e90
      Signed-off-by: Mitch Williams <mitch.a.williams@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 09603eaa5ca91dd9a318d8722ff5de8feb1e36ab
  Author: Akeem G Abodunrin <akeem.g.abodunrin@xxxxxxxxx>
  Date:   Thu Oct 1 14:37:36 2015 -0400

      i40e: Fix VEB/VEPA bridge mode mismatch issue

      Fix i40e_is_vsi_uplink_mode_veb to check if bridge is actually
      in VEB mode before allowing LB in the add VSI routine, instead of
      unconditionally returning VEB bridge mode.

      Change-ID: I162397b1bdd02367735fe9baaeb51465be2a3ce9
      Signed-off-by: Akeem G Abodunrin <akeem.g.abodunrin@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 10dc0358e802ea60f95432f89c8dd051767fc06f
  Author: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
  Date:   Thu Oct 1 14:37:35 2015 -0400

      i40e: fix a bug in debugfs with add/del macaddr

      The new code flow requires us to grab the filter list lock before
      adding/deleting the filter.

      Change-ID: I4eaef508ab4da2d1b2e23f20f2a78d931d5b6aeb
      Signed-off-by: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit e7358f54a3954df16d4f87e3cad35063f1c17de5
  Author: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
  Date:   Thu Oct 1 14:37:34 2015 -0400

      i40e/i40evf: Add a workaround to drop all flow control frames

      This patch adds a workaround to drop any flow control frames from being
      transmitted from any VSI. FW can still send flow control frames if flow
      control is enabled.

      With this patch in place a malicious VF cannot send flow control or PFC
      packets out on the wire.

      Change-ID: I4303b24e98b93066d2767fec24dfe78be591c277
      Signed-off-by: Anjali Singhai Jain <anjali.singhai@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 1acea4f6ce1b1c0941438aca75dd2e5c6b09db60
  Author: Guillaume Nault <g.nault@xxxxxxxxxxxx>
  Date:   Thu Oct 22 16:57:10 2015 +0200

      ppp: fix pppoe_dev deletion condition in pppoe_release()

      We can't rely on PPPOX_ZOMBIE to decide whether to clear po->pppoe_dev.
      PPPOX_ZOMBIE can be set by pppoe_disc_rcv() even when po->pppoe_dev is
      NULL. So we have no guarantee that (sk->sk_state & PPPOX_ZOMBIE) implies
      (po->pppoe_dev != NULL).
      Since we're releasing a PPPoE socket, we want to release the pppoe_dev
      if it exists and reset sk_state to PPPOX_DEAD, no matter the previous
      value of sk_state. So we can just check for po->pppoe_dev and avoid any
      assumption on sk->sk_state.

      Fixes: 2b018d57ff18 ("pppoe: drop PPPOX_ZOMBIEs in pppoe_release")
      Signed-off-by: Guillaume Nault <g.nault@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f6b8dec99865ea906150e963eacbfd037b579ee9
  Author: Li RongQing <roy.qing.li@xxxxxxxxx>
  Date:   Thu Oct 22 11:35:05 2015 +0800

      af_key: fix two typos

      Signed-off-by: Li RongQing <roy.qing.li@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0aaafaabfcba8aa991913cd3280a5dbf7f111a2a
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 11:50:08 2015 +0200

      sched/core: Add missing lockdep_unpin() annotations

      Luca and Wanpeng reported two missing annotations that led to
      false lockdep complaints. Add the missing annotations.

      Reported-by: Luca Abeni <luca.abeni@xxxxxxxx>
      Reported-by: Wanpeng Li <wanpeng.li@xxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Juri Lelli <juri.lelli@xxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mike Galbraith <efault@xxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Fixes: cbce1a686700 ("sched,lockdep: Employ lock pinning")
      Link: 
http://lkml.kernel.org/r/20151023095008.GY17308@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 20a41fba679d665cdae2808e2b9cae97c073351f
  Author: Lendacky, Thomas <Thomas.Lendacky@xxxxxxx>
  Date:   Wed Oct 21 15:37:05 2015 -0500

      amd-xgbe: Use wmb before updating current descriptor count

      The code currently uses the lightweight dma_wmb barrier before updating
      the current descriptor count. Under heavy load, the Tx cleanup routine
      was seeing the updated current descriptor count before the updated
      descriptor information. As a result, the Tx descriptor was being cleaned
      up before it was used because it was not "owned" by the hardware yet,
      resulting in a Tx queue hang.

      Using the wmb barrier insures that the descriptor is updated before the
      descriptor counter preventing the Tx queue hang. For extra insurance,
      the Tx cleanup routine is changed to grab the current decriptor count on
      entry and uses that initial value in the processing loop rather than
      trying to chase the current value.

      Signed-off-by: Tom Lendacky <thomas.lendacky@xxxxxxx>
      Tested-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d2fd719bcb0e83cb39cfee22ee800f98a56eceb3
  Author: Nathan Sullivan <nathan.sullivan@xxxxxx>
  Date:   Wed Oct 21 14:17:04 2015 -0500

      net/phy: micrel: Add workaround for bad autoneg

      Very rarely, the KSZ9031 will appear to complete autonegotiation, but
      will drop all traffic afterwards.  When this happens, the idle error
      count will read 0xFF after autonegotiation completes.  Reset the PHY
      when in that state.

      Signed-off-by: Nathan Sullivan <nathan.sullivan@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7b1311807f3d3eb8bef3ccc53127838b3bea3771
  Author: Paolo Abeni <pabeni@xxxxxxxxxx>
  Date:   Tue Oct 20 10:28:45 2015 +0200

      ipv4: implement support for NOPREFIXROUTE ifa flag for ipv4 address

      Currently adding a new ipv4 address always cause the creation of the
      related network route, with default metric. When a host has multiple
      interfaces on the same network, multiple routes with the same metric
      are created.

      If the userspace wants to set specific metric on each routes, i.e.
      giving better metric to ethernet links in respect to Wi-Fi ones,
      the network routes must be deleted and recreated, which is error-prone.

      This patch implements the support for IFA_F_NOPREFIXROUTE for ipv4
      address. When an address is added with such flag set, no associated
      network route is created, no network route is deleted when
      said IP is gone and it's up to the user space manage such route.

      Signed-off-by: Paolo Abeni <pabeni@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a2c01ed5d46f0686c52272e09f7d2f5be9f573fd
  Merge: d0ddf98 8832317
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:49:51 2015 +0900

      Merge tag 'powerpc-4.3-5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux

      Pull powerpc fixes from Michael Ellerman:

       - Revert "Use the POWER8 Micro Partition Prefetch Engine in KVM HV on
         POWER8" from Paul
       - Handle irq_happened flag correctly in off-line loop from Paul
       - Validate rtas.entry before calling enter_rtas() from Vasant

      * tag 'powerpc-4.3-5' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:
        powerpc/rtas: Validate rtas.entry before calling enter_rtas()
        powerpc/powernv: Handle irq_happened flag correctly in off-line loop
        powerpc: Revert "Use the POWER8 Micro Partition Prefetch Engine in KVM 
HV on POWER8"

  commit ec3661b42257d9a06cf0d318175623ac7a660113
  Merge: c80dbe0 b72a2b0
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Fri Oct 23 02:49:41 2015 -0700

      Merge branch 'ipv6-overflow-arith'

      Hannes Frederic Sowa says:

      ====================
      overflow-arith: begin to add support for overflow builtins functions

      I add a new header, linux/overflow-arith.h, as the central place to add
      overflow and wrap-around checking functions. The reason I am doing so
      is that it can make use of compiler supported builtin functions which
      can leverage hardware.

      As I need this for a fix in the ipv6 stack, which is also included in
      this series, I propose to add it sooner than later over Davem's net
      tree. This is also the reason why I start slowly with only the one
      function I need at this time.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b72a2b01b686f242028038f630555513c9e4de38
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 11:32:43 2015 +0200

      ipv6: protect mtu calculation of wrap-around and infinite loop by 
rounding issues

      Raw sockets with hdrincl enabled can insert ipv6 extension headers
      right into the data stream. In case we need to fragment those packets,
      we reparse the options header to find the place where we can insert
      the fragment header. If the extension headers exceed the link's MTU we
      actually cannot make progress in such a case.

      Instead of ending up in broken arithmetic or rounding towards 0 and
      entering an endless loop in ip6_fragment, just prevent those cases by
      aborting early and signal -EMSGSIZE to user space.

      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 79907146fb5b1778035870db895fb2bf64061284
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 11:32:42 2015 +0200

      overflow-arith: begin to add support for overflow builtin functions

      The idea of the overflow-arith.h header is to collect overflow checking
      functions in one central place.

      If gcc compiler supports the __builtin_overflow_* builtins we use them
      because they might give better performance, otherwise the code falls
      back to normal overflow checking functions.

      The builtin_overflow functions are supported by gcc-5 and clang. The
      matter of supporting clang is to just provide a corresponding
      CC_HAVE_BUILTIN_OVERFLOW, because the specific overflow checking builtins
      don't differ between gcc and clang.

      I just provide overflow_usub function here as I intend this to get merged
      into net, more functions will definitely follow as they are needed.

      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c80dbe04612986fd6104b4a1be21681b113b5ac9
  Author: Andrew Shewmaker <agshew@xxxxxxxxx>
  Date:   Sun Oct 18 21:59:08 2015 -0700

      tcp: allow dctcp alpha to drop to zero

      If alpha is strictly reduced by alpha >> dctcp_shift_g and if alpha is 
less
      than 1 << dctcp_shift_g, then alpha may never reach zero. For example,
      given shift_g=4 and alpha=15, alpha >> dctcp_shift_g yields 0 and alpha
      remains 15. The effect isn't noticeable in this case below cwnd=137, but
      could gradually drive uncongested flows with leftover alpha down to
      cwnd=137. A larger dctcp_shift_g would have a greater effect.

      This change causes alpha=15 to drop to 0 instead of being decrementing by 
1
      as it would when alpha=16. However, it requires one less conditional to
      implement since it doesn't have to guard against subtracting 1 from 0U. A
      decay of 15 is not unreasonable since an equal or greater amount occurs at
      alpha >= 240.

      Signed-off-by: Andrew G. Shewmaker <agshew@xxxxxxxxx>
      Acked-by: Florian Westphal <fw@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ab997ad408394bcaf7f3015d4c4e38047eaf2ad6
  Author: lucien <lucien.xin@xxxxxxxxx>
  Date:   Fri Oct 23 15:36:53 2015 +0800

      ipv6: fix the incorrect return value of throw route

      The error condition -EAGAIN, which is signaled by throw routes, tells
      the rules framework to walk on searching for next matches. If the walk
      ends and we stop walking the rules with the result of a throw route we
      have to translate the error conditions to -ENETUNREACH.

      Signed-off-by: Xin Long <lucien.xin@xxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d0ddf980d6efdcee6c7a85eb0f27baa6b60eeff6
  Merge: 2c44f4f 55f4129
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:38:00 2015 +0900

      Merge tag 'fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

      Pull ARM SoC fixes from Arnd Bergmann:
       "Most of the changes this time are for incorrect device nodes in
        various ways, on on imx, berlin, exynos, ux500, uniphier, omap and
        meson.

        Chen-Yu Tsai now co-maintains mach-sunxi (Allwinner).

        Other bug fixes include
         - a partial revert of a broken tegra gpio patch
         - irq affinity for arm ccn
         - suspend on one Armada 385 machine
         - enable ZONE_DMA to avoid an OMAP crash for over 2GB RAM
         - turning on a regulator on beagleboard-x15 for HDMI
         - making the omap gpmc debug code visible
         - setup of orion network switch
         - a rare build regression for pxa"

      * tag 'fixes-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc: (22 commits)
        ARM: OMAP2+: Fix imprecise external abort caused by bogus SRAM init
        thermal: exynos: Fix register read in TMU
        ARM: OMAP2+: Fix oops with LPAE and more than 2GB of memory
        ARM: tegra: Comment out gpio-ranges properties
        ARM: dts: uniphier: fix IRQ number for devices on PH1-LD6b ref board
        drivers/perf: arm_pmu: avoid CPU device_node reference leak
        bus: arm-ccn: Fix irq affinity setting on CPU migration
        bus: arm-ccn: Handle correctly no-more-cpus case
        ARM: mvebu: correct a385-db-ap compatible string
        ARM: meson6: DTS: Fix wrong reg mapping and IRQ numbers
        MAINTAINERS: Update Allwinner entry and add new maintainer
        ARM: ux500: modify initial levelshifter status
        ARM: pxa: fix pxa3xx DFI lockup hack
        Documentation: ARM: List new omap MMC requirements
        memory: omap-gpmc: dump "before" state before first modification
        memory: omap-gpmc: Fix unselectable debug option for GPMC
        ARM: dts: am57xx-beagle-x15: set VDD_SD to always-on
        ARM: dts: Fix audio card detection on Peach boards
        ARM: EXYNOS: Fix double of_node_put() when parsing child power domains
        ARM: orion: Fix DSA platform device after mvmdio conversion
        ...

  commit f23d538bc24a83c16127c2eb82c9cf1adc2b5149
  Author: Jason Wang <jasowang@xxxxxxxxxx>
  Date:   Fri Oct 23 00:57:05 2015 -0400

      macvtap: unbreak receiving of gro skb with frag list

      We don't have fraglist support in TAP_FEATURES. This will lead
      software segmentation of gro skb with frag list. Fixes by having
      frag list support in TAP_FEATURES.

      With this patch single session of netperf receiving were restored from
      about 5Gb/s to about 12Gb/s on mlx4.

      Fixes a567dd6252 ("macvtap: simplify usage of tap_features")
      Cc: Vlad Yasevich <vyasevic@xxxxxxxxxx>
      Cc: Michael S. Tsirkin <mst@xxxxxxxxxx>
      Signed-off-by: Jason Wang <jasowang@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2c44f4f03574a3754306b5a8a80b9ed38a795104
  Merge: 8a990fb ad355e3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:32:29 2015 +0900

      Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm

      Pull KVM bugfixes from Paolo Bonzini:
       "Bug fixes for ARM, mostly 4.3 regressions related to virtual interrupt
        controller changes"

      * tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm:
        arm/arm64: KVM: Fix disabled distributor operation
        arm/arm64: KVM: Clear map->active on pend/active clear
        arm/arm64: KVM: Fix arch timer behavior for disabled interrupts
        KVM: arm: use GIC support unconditionally
        KVM: arm/arm64: Fix memory leak if timer initialization fails
        KVM: arm/arm64: Do not inject spurious interrupts

  commit 8a990fb47b4c93653745512eca7d2d210678e6c1
  Merge: 0122835 1904be1
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:24:33 2015 +0900

      Merge tag 'trace-fixes-v4.3-rc6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace

      Pull tracing fixes from Steven Rostedt:
       "Running tests on other changes, the system locked up due to lots of
        warnings.  It was caused by the stack tracer triggering a warning
        about using rcu_dereference() when RCU was not watching.  This can
        happen due to the fact that the stack tracer uses the function tracer
        to check each function, and there are functions that may be called and
        traced when RCU stopped watching.  Namely when a function is called
        just before going idle or to userspace and after RCU stopped watching
        that current CPU.

        The first patch makes sure that RCU is watching when the stack tracer
        uses RCU.  The second patch is to make sure that the stack tracer does
        not get called by functions in NMI, as it's not NMI safe"

      * tag 'trace-fixes-v4.3-rc6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace:
        tracing: Do not allow stack_tracer to record stack in NMI
        tracing: Have stack tracer force RCU to be watching

  commit 0122835a020a9f5c007b3a49ea9b5f1ac68fc7c7
  Merge: 45d80f1 b9b6e4a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:21:55 2015 +0900

      Merge tag 'sound-4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound

      Pull sound fixes from Takashi Iwai:
       "There is nothing to worry you much, only a few small & stable patches
        are found for usual stuff, HD-audio (a Lenovo laptop quirk, a fix for
        minor error handling) and ASoC (trivial fixes for RT298 and WM
        codecs).

        The only remaining major change is the fix for ASoC SX_TLV control
        that was overseen during refactoring, but the fix itself is trivial
        and safe"

      * tag 'sound-4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound:
        ASoC: wm8962: mark cache_dirty flag after software reset in pm_resume
        ASoC: rt298: fix wrong setting of gpio2_en
        ASoC: wm8904: Correct number of EQ registers
        ALSA: hda - Fix deadlock at error in building PCM
        ASoC: Add info callback for SX_TLV controls
        ASoC: rt298: correct index default value
        ALSA: hda - Fix inverted internal mic on Lenovo G50-80
        ALSA: hdac: Explicitly add io.h

  commit 45d80f168d2727f60bf1de64536f4ba62f303130
  Merge: a67b20d 56ea37d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:15:20 2015 +0900

      Merge tag 'media/v4.3-4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media

      Pull media fixes from Mauro Carvalho Chehab:
       "Some regression fixes and potential security issues:

         - netup_unidvb: fix potential crash when spi is NULL
         - rtl28xxu: fix control message flaws
         - m88ds3103: fix a regression on Kernel 4.2
         - c8sectpfe: fix some issues on this new driver
         - v4l2-flash-led-class: fix a Kbuild dependency
         - si2157 and si2158: check for array boundary when uploading firmware
           files
         - horus3a and lnbh25: fix some building troubles when some options
           aren't selected
         - ir-hix5hd2: drop the use of IRQF_NO_SUSPEND"

      * tag 'media/v4.3-4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/linux-media:
        [media] m88ds3103: use own reg update_bits() implementation
        [media] rtl28xxu: fix control message flaws
        [media] v4l2-flash-led-class: Add missing VIDEO_V4L2 Kconfig dependency
        [media] netup_unidvb: fix potential crash when spi is NULL
        [media] si2168: Bounds check firmware
        [media] si2157: Bounds check firmware
        [media] ir-hix5hd2: drop the use of IRQF_NO_SUSPEND
        [media] c8sectpfe: fix return of garbage
        [media] c8sectpfe: fix ininitialized error return on firmware load 
failure
        [media] lnbh25: Fix lnbh25_attach() function return type
        [media] horus3a: Fix horus3a_attach() function parameters

  commit a67b20d24c9ed3719146c9a5e95937c38c89e16a
  Merge: 8a70dd2 c50f13f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 23 18:08:22 2015 +0900

      Merge branch 'drm-fixes' of git://people.freedesktop.org/~airlied/linux

      Pull drm fixes from Dave Airlie:
       "I've been a bit slow gathering these:

         - drm/mst: one mutex leak in a fail path

         - radeon: two oops fixes, one dpm fix

         - i915: one messy set of fixes, where we revert the original fix, and
                 pull back the proper set of fixes from -next on top.

         - nouveau: one fix for an illegal buffer placement.

        Doesn't look too bad, hopefully shouldn't be too much more"

      * 'drm-fixes' of git://people.freedesktop.org/~airlied/linux:
        drm/nouveau/gem: return only valid domain when there's only one
        drm: fix mutex leak in drm_dp_get_mst_branch_device
        drm/amdgpu: add missing dpm check for KV dpm late init
        drm/amdgpu/dpm: don't add pwm attributes if DPM is disabled
        drm/radeon/dpm: don't add pwm attributes if DPM is disabled
        drm/i915: Add primary plane to mask if it's visible
        drm/i915: Move sprite/cursor plane disable to intel_sanitize_crtc()
        drm/i915: Assign hwmode after encoder state readout
        Revert "drm/i915: Add primary plane to mask if it's visible"
        drm/i915: Deny wrapping an userptr into a framebuffer
        drm/i915: Enable DPLL VGA mode before P1/P2 divider write
        drm/i915: Restore lost DPLL register write on gen2-4
        drm/i915: Flush pipecontrol post-sync writes
        drm/i915: Fix kerneldoc for i915_gem_shrink_all

  commit b67de018b37a97548645a879c627d4188518e907
  Author: Joseph Qi <joseph.qi@xxxxxxxxxx>
  Date:   Thu Oct 22 13:32:29 2015 -0700

      ocfs2/dlm: unlock lockres spinlock before dlm_lockres_put

      dlm_lockres_put will call dlm_lockres_release if it is the last
      reference, and then it may call dlm_print_one_lock_resource and
      take lockres spinlock.

      So unlock lockres spinlock before dlm_lockres_put to avoid deadlock.

      Signed-off-by: Joseph Qi <joseph.qi@xxxxxxxxxx>
      Cc: Mark Fasheh <mfasheh@xxxxxxx>
      Cc: Joel Becker <jlbec@xxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit bb387002693ed28b2bb0408c5dec65521b71e5f1
  Author: Florian Westphal <fw@xxxxxxxxx>
  Date:   Thu Oct 22 13:32:27 2015 -0700

      fault-inject: fix inverted interval/probability values in printk

      interval displays the probability and vice versa.

      Fixes: 6adc4a22f20bb ("fault-inject: add ratelimit option")
      Acked-by: Akinobu Mita <akinobu.mita@xxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 3f181b4d8652f7bcd7e9932c7307b8ecd4d87cf6
  Author: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 13:32:24 2015 -0700

      lib/Kconfig.debug: disable -Wframe-larger-than warnings with KASAN=y

      When the kernel compiled with KASAN=y, GCC adds redzones for each
      variable on stack.  This enlarges function's stack frame and causes:

        'warning: the frame size of X bytes is larger than Y bytes'

      The worst case I've seen for now is following:

         ../net/wireless/nl80211.c: In function `nl80211_send_wiphy':
         ../net/wireless/nl80211.c:1731:1: warning: the frame size of 5448 
bytes is larger than 2048 bytes [-Wframe-larger-than=]

      That kind of warning becomes useless with KASAN=y.  It doesn't
      necessarily indicate that there is some problem in the code, thus we
      should turn it off.

      (The KASAN=y stack size in increased from 16k to 32k for this reason)

      Signed-off-by: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
      Reported-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Acked-by: Abylay Ospan <aospan@xxxxxxxx>
      Cc: Andi Kleen <andi@xxxxxxxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Mauro Carvalho Chehab <m.chehab@xxxxxxxxxxx>
      Cc: Kozlov Sergey <serjk@xxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 296291cdd1629c308114504b850dc343eabc2782
  Author: Jan Kara <jack@xxxxxxxx>
  Date:   Thu Oct 22 13:32:21 2015 -0700

      mm: make sendfile(2) killable

      Currently a simple program below issues a sendfile(2) system call which
      takes about 62 days to complete in my test KVM instance.

              int fd;
              off_t off = 0;

              fd = open("file", O_RDWR | O_TRUNC | O_SYNC | O_CREAT, 0644);
              ftruncate(fd, 2);
              lseek(fd, 0, SEEK_END);
              sendfile(fd, fd, &off, 0xfffffff);

      Now you should not ask kernel to do a stupid stuff like copying 256MB in
      2-byte chunks and call fsync(2) after each chunk but if you do, sysadmin
      should have a way to stop you.

      We actually do have a check for fatal_signal_pending() in
      generic_perform_write() which triggers in this path however because we
      always succeed in writing something before the check is done, we return
      value > 0 from generic_perform_write() and thus the information about
      signal gets lost.

      Fix the problem by doing the signal check before writing anything.  That
      way generic_perform_write() returns -EINTR, the error gets propagated up
      and the sendfile loop terminates early.

      Signed-off-by: Jan Kara <jack@xxxxxxxx>
      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 47aee4d8e314384807e98b67ade07f6da476aa75
  Author: Minchan Kim <minchan@xxxxxxxxxx>
  Date:   Thu Oct 22 13:32:19 2015 -0700

      thp: use is_zero_pfn() only after pte_present() check

      Use is_zero_pfn() on pteval only after pte_present() check on pteval
      (It might be better idea to introduce is_zero_pte() which checks
      pte_present() first).

      Otherwise when working on a swap or migration entry and if pte_pfn's
      result is equal to zero_pfn by chance, we lose user's data in
      __collapse_huge_page_copy().  So if you're unlucky, the application
      segfaults and finally you could see below message on exit:

      BUG: Bad rss-counter state mm:ffff88007f099300 idx:2 val:3

      Fixes: ca0984caa823 ("mm: incorporate zero pages into transparent huge 
pages")
      Signed-off-by: Minchan Kim <minchan@xxxxxxxxxx>
      Reviewed-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Acked-by: Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx>
      Cc: Mel Gorman <mgorman@xxxxxxx>
      Acked-by: Vlastimil Babka <vbabka@xxxxxxx>
      Cc: Hugh Dickins <hughd@xxxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>      [4.1+]
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit b8fa0efa01109e294e9be610465c324f771cb5ba
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 13:32:16 2015 -0700

      mailmap: update Javier Martinez Canillas' email

      The get_maintainer script still reports my old Collabora email based on
      old commits but that address no longer exist so update mailmap to report
      my current email and avoid people sending to the old address.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 41192a2d6a7f4cd6af9fc2f8edbbf24b2694f2f6
  Author: Sergey Senozhatsky <sergey.senozhatsky@xxxxxxxxx>
  Date:   Thu Oct 22 13:32:13 2015 -0700

      MAINTAINERS: add Sergey as zsmalloc reviewer

      Nominate myself as a zsmalloc reviewer.

      Signed-off-by: Sergey Senozhatsky <sergey.senozhatsky@xxxxxxxxx>
      Cc: Minchan Kim <minchan@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 67a2e213e7e937c41c52ab5bc46bf3f4de469f6e
  Author: Rohit Vaswani <rvaswani@xxxxxxxxxxxxxx>
  Date:   Thu Oct 22 13:32:11 2015 -0700

      mm: cma: fix incorrect type conversion for size during dma allocation

      This was found during userspace fuzzing test when a large size dma cma
      allocation is made by driver(like ion) through userspace.

        show_stack+0x10/0x1c
        dump_stack+0x74/0xc8
        kasan_report_error+0x2b0/0x408
        kasan_report+0x34/0x40
        __asan_storeN+0x15c/0x168
        memset+0x20/0x44
        __dma_alloc_coherent+0x114/0x18c

      Signed-off-by: Rohit Vaswani <rvaswani@xxxxxxxxxxxxxx>
      Acked-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
      Cc: Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 5211613978cb7353a3237e4372958c0e7514683f
  Author: Oleg Nesterov <oleg@xxxxxxxxxx>
  Date:   Thu Oct 22 13:32:08 2015 -0700

      kmod: don't run async usermode helper as a child of kworker thread

      call_usermodehelper_exec_sync() does fork() + wait() with "unignored"
      SIGCHLD.  What we have missed is that this worker thread can have other
      children previously forked by call_usermodehelper_exec_work() without
      UMH_WAIT_PROC.  If such a child exits in between it becomes a zombie
      because auto-reaping only works if SIGCHLD is ignored, and nobody can
      reap it (unless/until this worker thread exits too).

      Change the !UMH_WAIT_PROC case to use CLONE_PARENT.

      Note: this is only first step.  All PF_KTHREAD tasks, even created by
      kernel_thread() should have ->parent == kthreadd by default.

      Fixes: bb304a5c6fc63d8506c ("kmod: handle UMH_WAIT_PROC from system 
unbound workqueue")
      Signed-off-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Acked-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Rik van Riel <riel@xxxxxxxxxx>
      Cc: Christoph Lameter <cl@xxxxxxxxx>
      Cc: Tejun Heo <tj@xxxxxxxxxx>
      Cc: Rusty Russell <rusty@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 80fcd45ee05b4ef05e61d37a5ffb70a67095a9f6
  Merge: 4ba792e f06cff7
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Fri Oct 23 10:25:57 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

        - The default for callchains is back to 'callee' when --children is not 
used.
          (Namhyung Kim)

        - Move the 'use_offset' option to the right place where the annotate 
code
          expects it to be to be able to properly handle it. (Namhyung Kim)

        - Don't die when an unknown 'annotate' option is found in the perf 
config
          file (usually ~/.perfconfig), just warn the user. (Arnaldo Carvalho 
de Melo)

      Infrastructure changes:

        - Support %ps/%pS in libtraceevent. (Scott Wood)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 3f84ccf62c9fdd39d2cb1caa725663191c817b65
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Fri Oct 16 09:46:12 2015 +0200

      pinctrl: sunxi: Add irq pinmuxing to sun6i "r" pincontroller

      Add pinmuxing for external interrupt functionality through the
      sun6i "r" pincontroller.

      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Acked-by: Chen-Yu Tsai <wens@xxxxxxxx>
      Acked-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 8297992cad599e8a214e65959ccdde51738fe5a2
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Fri Oct 16 09:46:11 2015 +0200

      pinctrl: sunxi: Fix irq_of_xlate for the r_pio pinctrl block

      The r_pio gpio / pin controller has a pin_base of non 0, we need to
      adjust for this before calling sunxi_pinctrl_desc_find_function_by_pin.

      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Acked-by: Chen-Yu Tsai <wens@xxxxxxxx>
      Acked-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit cb866e3298cd7412503fc7e2c265753c853fab9d
  Author: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
  Date:   Fri Oct 23 07:52:58 2015 +0200

      xfrm: Increment statistic counter on inner mode error

      Increment the LINUX_MIB_XFRMINSTATEMODEERROR statistic counter
      to notify about dropped packets if we fail to fetch a inner mode.

      Signed-off-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>

  commit ea673a4d3a337184f3c314dcc6300bf02f39e077
  Author: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
  Date:   Fri Oct 23 07:32:39 2015 +0200

      xfrm4: Reload skb header pointers after calling pskb_may_pull.

      A call to pskb_may_pull may change the pointers into the packet,
      so reload the pointers after the call.

      Signed-off-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>

  commit 1a14f1e5550a341f76e5c8f596e9b5f8a886dfbc
  Author: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
  Date:   Fri Oct 23 07:31:23 2015 +0200

      xfrm4: Fix header checks in _decode_session4.

      We skip the header informations if the data pointer points
      already behind the header in question for some protocols.
      This is because we call pskb_may_pull with a negative value
      converted to unsigened int from pskb_may_pull in this case.
      Skipping the header informations can lead to incorrect policy
      lookups, so fix it by a check of the data pointer position
      before we call pskb_may_pull.

      Signed-off-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>

  commit b9b6e4ac2da74995cb7ac9394854a5fd563014c2
  Merge: d289619 f69eccc
  Author: Takashi Iwai <tiwai@xxxxxxx>
  Date:   Fri Oct 23 06:56:56 2015 +0200

      Merge tag 'asoc-fix-v4.3-rc6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linus

      ASoC: Fixes for v4.3

      A bunch of driver fixes plus one core fix which fixes problems with
      misreporting values from _SX controls following a recent refactoring.
      This had gone unnoticed as such controls are quite rare.

  commit e33d4f13d21e9f604194ebc8730077ff39916c50
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Wed Oct 21 11:48:25 2015 -0400

      xfrm: Fix unaligned access to stats in copy_to_user_state()

      On sparc, deleting established SAs (e.g., by restarting ipsec)
      results in unaligned access messages via xfrm_del_sa ->
      km_state_notify -> xfrm_send_state_notify().

      Even though struct xfrm_usersa_info is aligned on 8-byte boundaries,
      netlink attributes are fundamentally only 4 byte aligned, and this
      cannot be changed for nla_data() that is passed up to userspace.
      As a result, the put_unaligned() macro needs to be used to
      set up potentially unaligned fields such as the xfrm_stats in
      copy_to_user_state()

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Signed-off-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>

  commit fc4099f17240767554ff3a73977acb78ef615404
  Author: Pravin B Shelar <pshelar@xxxxxxxxxx>
  Date:   Thu Oct 22 18:17:16 2015 -0700

      openvswitch: Fix egress tunnel info.

      While transitioning to netdev based vport we broke OVS
      feature which allows user to retrieve tunnel packet egress
      information for lwtunnel devices.  Following patch fixes it
      by introducing ndo operation to get the tunnel egress info.
      Same ndo operation can be used for lwtunnel devices and compat
      ovs-tnl-vport devices. So after adding such device operation
      we can remove similar operation from ovs-vport.

      Fixes: 614732eaa12d ("openvswitch: Use regular VXLAN net_device device").
      Signed-off-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c0c050c58d840994ba842ad1c338a98e7c12b764
  Author: Michael Chan <mchan@xxxxxxxxxxxx>
  Date:   Thu Oct 22 16:01:17 2015 -0400

      bnxt_en: New Broadcom ethernet driver.

      Broadcom ethernet driver for the new family of NetXtreme-C/E
      ethernet devices.

      v5:
        - Removed empty blank lines at end of files (noted by David Miller).
        - Moved busy poll helper functions to bnxt.h to at least make the
          .c file look less cluttered with #ifdef (noted by Stephen Hemminger).

      v4:
        - Broke up 2 long message strings with "\n" (suggested by John Linville)
        - Constify an array of strings (suggested by Stephen Hemminger)
        - Improve bnxt_vf_pciid() (suggested by Stephen Hemminger)
        - Use PCI_VDEVICE() to populate pci_device_id table for more compact
          source.

      v3:
        - Fixed 2 more sparse warnings.
        - Removed some unused structures in .h files.

      v2:
        - Fixed all kbuild test robot reported warnings.
        - Fixed many of the checkpatch.pl errors and warnings.
        - Fixed the Kconfig description (noted by Dmitry Kravkov).

      Acked-by: Eddie Wai <eddie.wai@xxxxxxxxxxxx>
      Acked-by: Jeffrey Huang <huangjw@xxxxxxxxxxxx>
      Signed-off-by: Prashant Sreedharan <prashant@xxxxxxxxxxxx>
      Signed-off-by: Michael Chan <mchan@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0a31adae0b2ab70127b2d5faa6a685e2ea70cc1b
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 16:54:31 2015 -0400

      net: dsa: mv88e6xxx: remove debugfs interface

      It is preferable to have a common debugfs interface for DSA or switchdev
      instead of a driver specific one. Thus remove the mv88e6xxx debug code.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0c472b9b391ecf9011d383956b322e72593d87b2
  Merge: 8566b86 e9e5366
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 19:02:08 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/net-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-10-22

      This series contains fixes to i40e only.

      Jesse provides two small fixes for i40e, first fixes counters that were
      being displayed incorrectly due to indexing beyond the array of strings
      when printing stats.  Then fixed the fact that the driver was printing
      a message about not being able to assign VMDq because a lack of MSI-X
      vectors, when it was not true.  It was due to a line missing that
      initialized a variable.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8566b86ab9f0f45bc6f7dd422b21de9d0cf5415a
  Author: Jorgen Hansen <jhansen@xxxxxxxxxx>
  Date:   Thu Oct 22 08:25:25 2015 -0700

      VSOCK: Fix lockdep issue.

      The recent fix for the vsock sock_put issue used the wrong
      initializer for the transport spin_lock causing an issue when
      running with lockdep checking.

      Testing: Verified fix on kernel with lockdep enabled.

      Reviewed-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
      Signed-off-by: Jorgen Hansen <jhansen@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e9e53662d8130dd950885e37dc1d97008e1283f9
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Fri Oct 2 17:57:21 2015 -0700

      i40e: fix annoying message

      The driver was printing a message about not being able
      to assign VMDq because of a lack of MSI-X vectors.

      This was because a line was missing that initialized a variable,
      simply a merge error.

      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit 74a6c66565f5f4eda4aaae53e2e325deeedeaca2
  Author: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
  Date:   Fri Oct 2 19:09:34 2015 -0700

      i40e: fix stats offsets

      The code was setting up stats that were not being initialized.
      This caused several counters to be displayed incorrectly, due
      to indexing beyond the array of strings when printing stats.

      Signed-off-by: Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx>
      Tested-by: Andrew Bowers <andrewx.bowers@xxxxxxxxx>
      Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@xxxxxxxxx>

  commit f69eccc4b248ce53b1b830034babd0a795d5763c
  Merge: ab5cf7d f8f2dc4 3419871 97aff2c 4eb0f7a
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Fri Oct 23 08:44:14 2015 +0900

      Merge remote-tracking branches 'asoc/fix/rt298', 'asoc/fix/sx', 
'asoc/fix/wm8904' and 'asoc/fix/wm8962' into asoc-linus

  commit ab5cf7df4578e46f6587c589f0c4d58c7c9a8753
  Merge: 7379047 79828b4
  Author: Mark Brown <broonie@xxxxxxxxxx>
  Date:   Fri Oct 23 08:44:13 2015 +0900

      Merge remote-tracking branch 'asoc/fix/rt5645' into asoc-linus

  commit f06cff7c59b6b252d667435d7baad48687b41002
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Oct 22 18:10:52 2015 -0300

      perf annotate: Don't die() when finding an invalid config option

      The perf_config() infrastructure we inherited from git calls die() when
      the provided config callback returns -1, meaning some key in a config
      section is unexpected, that seems ok for a stdio based tool, but in
      --tui we end up messing up the output, so just tell the user about the
      error, wait for a keystroke and return 0, being more resilient and
      proceeding with what we managed to parse.

      That die() needs to die, tho :-)

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-pqtsffh2kwr5mwm4qg9kgotu@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 990995bad13c2bcf074f87236d1a6c5e09bd5eff
  Author: Tan Xiaojun <tanxiaojun@xxxxxxxxxx>
  Date:   Tue Oct 20 19:45:38 2015 +0800

      EDAC: Fix PAGES_TO_MiB macro misuse

      The PAGES_TO_MiB macro is used for unit conversion but the
      trace_mc_event() tracepoint expects a page address. Fix that.

      Signed-off-by: Tan Xiaojun <tanxiaojun@xxxxxxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445341538-24271-1-git-send-email-tanxiaojun@xxxxxxxxxx
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>

  commit 464b01a48eb6be48bc58332e029760b5e40ea119
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Oct 22 16:44:17 2015 -0300

      perf ui tui: Register the error callbacks before initializing the widgets

      I.e. we want to tell the user about errors found during, for instance,
      the ui_browser initialization, so that a call to ui__warning() appears
      as a window waiting for a key to be pressed.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-ederrwizcl6mfz10vfobl5qq@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 39ff7cdb5a5e6b75dd049255615828c6531cd109
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Wed Oct 21 11:57:20 2015 +0900

      perf annotate: Fix 'annotate.use_offset' config variable usage

      The annotate__configs should be sorted so that it can use bsearch(3).

      However commit 0c4a5bcea460 ("perf annotate: Display total number of
      samples with --show-total-period") added a new config item at the end.
      This resulted in the 'annotate.use_offset' config variable cannot be
      found and perf terminated like below:

        $ perf report
        bad config file line 6 in ~/.perfconfig

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Martin Liška <mliska@xxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Taeung Song <treeze.taeung@xxxxxxxxx>
      Fixes: 0c4a5bcea460 ("perf annotate: Display total number of samples with 
--show-total-period")
      Link: 
http://lkml.kernel.org/r/1445396240-3428-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 76a26549eb367f683fbb394b7246bef5dc665f8c
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Thu Oct 22 23:28:32 2015 +0900

      perf tools: Improve call graph documents and help messages

      The --call-graph option is complex so we should provide better guide for
      users.  Also change help message to be consistent with config option
      names.  Now perf top will show help like below:

        $ perf top --call-graph
          Error: option `call-graph' requires a value

         Usage: perf top [<options>]

            --call-graph 
<record_mode[,record_size],print_type,threshold[,print_limit],order,sort_key[,branch]>
                 setup and enables call-graph (stack chain/backtrace):

                record_mode:    call graph recording mode (fp|dwarf|lbr)
                record_size:    if record_mode is 'dwarf', max size of stack 
recording (<bytes>)
                                default: 8192 (bytes)
                print_type:     call graph printing style 
(graph|flat|fractal|none)
                threshold:      minimum call graph inclusion threshold 
(<percent>)
                print_limit:    maximum number of call graph entry (<number>)
                order:          call graph order (caller|callee)
                sort_key:       call graph sort key (function|address)
                branch:         include last branch info to call graph (branch)

                Default: fp,graph,0.5,caller,function

      Requested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Acked-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445524112-5201-2-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 792aeafa8ed08e5e18fb66ab93b470f78e619f75
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Thu Oct 22 16:45:46 2015 +0900

      perf tools: Defaults to 'caller' callchain order only if --children is 
enabled

      The caller callchain order is useful with --children option since it can
      show 'overview' style output, but other commands which don't use
      --children feature like 'perf script' or even 'perf report/top' without
      --children are better to keep callee order.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Acked-by: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Acked-by: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Acked-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445499946-29817-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit a2c10d39af49b00514f7cc7b750757fcc2174f0c
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Thu Oct 22 15:28:49 2015 +0900

      perf top: Support call-graph display options also

      Currently 'perf top --call-graph' option is same as 'perf record'.  But
      'perf top' also need to receive display options in 'perf report'.  To do
      that, change parse_callchain_report_opt() to allow record options too.

      Now perf top can receive display options like below:

        $ perf top --call-graph
          Error: option `call-graph' requires a value

         Usage: perf top [<options>]

              --call-graph
                
<mode[,dump_size],output_type,min_percent[,print_limit],call_order[,branch]>
                           setup and enables call-graph (stack chain/backtrace)
                           recording: fp dwarf lbr, output_type (graph, flat,
                     fractal, or none), min percent threshold, optional
                     print limit, callchain order, key (function or
                     address), add branches

        $ perf top --call-graph callee,graph,fp

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445495330-25416-2-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 21cf62847d29392e51c37460856d3c3c57769c5e
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Thu Oct 22 15:28:48 2015 +0900

      perf tools: Move callchain help messages to callchain.h

      These messages will be used by 'perf top' in the next patch.

      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Chandler Carruth <chandlerc@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445495330-25416-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b6bd9c7d543ac160646a667470158c5da319a85c
  Author: Scott Wood <scottwood@xxxxxxxxxxxxx>
  Date:   Mon Aug 31 16:16:37 2015 -0500

      tools lib traceevent: Support %ps/%pS

      Commits such as 65dd297ac25565 ("xfs: %pF is only for function
      pointers") caused a regression because pretty_print() didn't support
      %ps/%pS.  The current %pf/%pF implementation in pretty_print() is what
      %ps/%pS is supposed to do, so use the same code for %ps/%pS.

      Addressing the incorrect %pf/%pF implementation is beyond the scope of
      this patch.

      Signed-off-by: Scott Wood <scottwood@xxxxxxxxxxxxx>
      Acked-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Dave Chinner <david@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20150831211637.GA12848@xxxxxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 56ea37da3b93dfe46cb5c3ee0ee4cc44229ece47
  Author: Antti Palosaari <crope@xxxxxx>
  Date:   Sat Oct 3 18:35:14 2015 -0300

      [media] m88ds3103: use own reg update_bits() implementation

      Device stopped to tuning some channels after regmap conversion.
      Reason is that regmap_update_bits() works a bit differently for
      partially volatile registers than old homemade routine. Return
      back to old routine in order to fix issue.

      Fixes: 478932b16052f5ded74685d096ae920cd17d6424

      Cc: <stable@xxxxxxxxxx> # 4.2+
      Reported-by: Mark Clarkstone <hello@xxxxxxxxxxxxxxxxxxxx>
      Tested-by: Mark Clarkstone <hello@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Antti Palosaari <crope@xxxxxx>
      Signed-off-by: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>

  commit d18ca5b7ceca0e9674cb4bb2ed476b0fcbb23ba2
  Author: Antti Palosaari <crope@xxxxxx>
  Date:   Tue Oct 6 00:22:23 2015 -0300

      [media] rtl28xxu: fix control message flaws

      Add lock to prevent concurrent access for control message as control
      message function uses shared buffer. Without the lock there may be
      remote control polling which messes the buffer causing IO errors.
      Increase buffer size and add check for maximum supported message
      length.

      Link: https://bugzilla.kernel.org/show_bug.cgi?id=103391
      Fixes: c56222a6b25c ("[media] rtl28xxu: move usb buffers to state")

      Cc: <stable@xxxxxxxxxxxxxxx> # 4.0+
      Signed-off-by: Antti Palosaari <crope@xxxxxx>

  commit 17f38822038ba5d4dba79b72fd111bbf64173063
  Author: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>
  Date:   Fri Oct 2 06:19:15 2015 -0300

      [media] v4l2-flash-led-class: Add missing VIDEO_V4L2 Kconfig dependency

      Fixes the following randconfig problem:

      drivers/built-in.o: In function `v4l2_flash_release':
      (.text+0x12204f): undefined reference to `v4l2_async_unregister_subdev'
      drivers/built-in.o: In function `v4l2_flash_release':
      (.text+0x122057): undefined reference to `v4l2_ctrl_handler_free'
      drivers/built-in.o: In function `v4l2_flash_close':
      v4l2-flash-led-class.c:(.text+0x12208f): undefined reference to 
`v4l2_fh_is_singular'
      v4l2-flash-led-class.c:(.text+0x1220c8): undefined reference to 
`__v4l2_ctrl_s_ctrl'
      drivers/built-in.o: In function `v4l2_flash_open':
      v4l2-flash-led-class.c:(.text+0x12227f): undefined reference to 
`v4l2_fh_is_singular'
      drivers/built-in.o: In function `v4l2_flash_init_controls':
      v4l2-flash-led-class.c:(.text+0x12274e): undefined reference to 
`v4l2_ctrl_handler_init_class'
      v4l2-flash-led-class.c:(.text+0x122797): undefined reference to 
`v4l2_ctrl_new_std_menu'
      v4l2-flash-led-class.c:(.text+0x1227e0): undefined reference to 
`v4l2_ctrl_new_std'
      v4l2-flash-led-class.c:(.text+0x122826): undefined reference to 
`v4l2_ctrl_handler_setup'
      v4l2-flash-led-class.c:(.text+0x122839): undefined reference to 
`v4l2_ctrl_handler_free'
      drivers/built-in.o: In function `v4l2_flash_init':
      (.text+0x1228e2): undefined reference to `v4l2_subdev_init'
      drivers/built-in.o: In function `v4l2_flash_init':
      (.text+0x12293b): undefined reference to `v4l2_async_register_subdev'
      drivers/built-in.o: In function `v4l2_flash_init':
      (.text+0x122949): undefined reference to `v4l2_ctrl_handler_free'
      drivers/built-in.o:(.rodata+0x20ef8): undefined reference to 
`v4l2_subdev_queryctrl'
      drivers/built-in.o:(.rodata+0x20f10): undefined reference to 
`v4l2_subdev_querymenu'

      Signed-off-by: Jacek Anaszewski <j.anaszewski@xxxxxxxxxxx>
      Reported-by: kbuild test robot <fengguang.wu@xxxxxxxxx>
      Cc: Sakari Ailus <sakari.ailus@xxxxxx>
      Cc: Hans Verkuil <hans.verkuil@xxxxxxxxx>

  commit 9d2b064c0ae42ad93b2a0c7da05daef312c96bcc
  Author: Abylay Ospan <aospan@xxxxxxxx>
  Date:   Fri Sep 25 04:56:21 2015 -0300

      [media] netup_unidvb: fix potential crash when spi is NULL

      Signed-off-by: Abylay Ospan <aospan@xxxxxxxx>
      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>

  commit 47810b4341ac9d2f558894bc5995e6fa2a1298f9
  Author: Laura Abbott <labbott@xxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 21:10:09 2015 -0300

      [media] si2168: Bounds check firmware

      When reading the firmware and sending commands, the length must
      be bounds checked to avoid overrunning the size of the command
      buffer and smashing the stack if the firmware is not in the expected
      format:

      si2168 11-0064: found a 'Silicon Labs Si2168-B40'
      si2168 11-0064: downloading firmware from file 
'dvb-demod-si2168-b40-01.fw'
      si2168 11-0064: firmware download failed -95
      Kernel panic - not syncing: stack-protector: Kernel stack is corrupted 
in: ffffffffa085708f

      Add the proper check.

      Cc: stable@xxxxxxxxxx
      Reported-by: Stuart Auchterlonie <sauchter@xxxxxxxxxx>
      Reviewed-by: Antti Palosaari <crope@xxxxxx>
      Signed-off-by: Laura Abbott <labbott@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>

  commit a828d72df216c36e9c40b6c24dc4b17b6f7b5a76
  Author: Laura Abbott <labbott@xxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 21:10:10 2015 -0300

      [media] si2157: Bounds check firmware

      When reading the firmware and sending commands, the length
      must be bounds checked to avoid overrunning the size of the command
      buffer and smashing the stack if the firmware is not in the
      expected format. Add the proper check.

      Cc: stable@xxxxxxxxxx
      Signed-off-by: Laura Abbott <labbott@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>

  commit 54bec3970cb5351d08866af1ea8b0787edd7ede3
  Author: Sudeep Holla <sudeep.holla@xxxxxxx>
  Date:   Mon Sep 21 12:47:11 2015 -0300

      [media] ir-hix5hd2: drop the use of IRQF_NO_SUSPEND

      This driver doesn't claim the IR transmitter to be wakeup source. It
      even disables the clock and the IR during suspend-resume cycle.

      This patch removes yet another misuse of IRQF_NO_SUSPEND.

      Cc: Patrice Chotard <patrice.chotard@xxxxxx>
      Cc: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Cc: Guoxiong Yan <yanguoxiong@xxxxxxxxxx>
      Signed-off-by: Sudeep Holla <sudeep.holla@xxxxxxx>
      Acked-by: Zhangfei Gao <zhangfei.gao@xxxxxxxxxx>
      Signed-off-by: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>

  commit 51a3ac5f4dc45120c78fad51096d989914801457
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Thu Sep 17 07:12:54 2015 -0300

      [media] c8sectpfe: fix return of garbage

      The variable err was never initialized, that means we had been checking
      a garbage value in the for loop. Moreover if the segment is not outside
      the firmware file then also we have been returning the garbage.
      Initialize it to 0 so that on success we return the value and no need to
      check in the for loop also as it is initially 0 and whenever that value
      changes we have done a break from the loop.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>

  commit bf447221a8791d0f5dd28b19336e31e48f05f04a
  Author: Colin Ian King <colin.king@xxxxxxxxxxxxx>
  Date:   Tue Sep 15 08:42:27 2015 -0300

      [media] c8sectpfe: fix ininitialized error return on firmware load failure

      static analysis with cppcheck detected the following error:

      [drivers/media/platform/sti/c8sectpfe/c8sectpfe-core.c:1210]:
        (error) Uninitialized variable: ret

      ret is never initialised, so garbage is being returned. Instead
      return the error return from the call of request_firmware_nowait

      Signed-off-by: Colin Ian King <colin.king@xxxxxxxxxxxxx>

  commit a9c4e5cfebc44e6caa6b9299af5603f5c2da0c33
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Sun Sep 13 19:45:21 2015 -0300

      [media] lnbh25: Fix lnbh25_attach() function return type

      If CONFIG_DVB_LNBH25 is disabled, a stub static inline function is
      defined that just prints a warning about the driver being disabled
      but the function return type was wrong which caused a build error.

      Fixes: e025273b86fb ("[media] lnbh25: LNBH25 SEC controller driver")

      Reported-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>

  commit ebdd4b7e6a0dd86736eeb6b9e60b361ef64ccc30
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Sun Sep 13 19:39:22 2015 -0300

      [media] horus3a: Fix horus3a_attach() function parameters

      If CONFIG_DVB_HORUS3A is disabled a stub static inline function is
      defined that just prints a warning about the driver being disabled
      but the function parameters were wrong which caused a build error.

      Fixes: a5d32b358254f ("[media] horus3a: Sony Horus3A DVB-S/S2 tuner 
driver")

      Reported-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>

  commit 4db7062c9a8bff92137bb2f381d81dd1bb5b7872
  Author: Sudeep Holla <sudeep.holla@xxxxxxx>
  Date:   Fri Oct 16 17:01:36 2015 +0100

      ARM: dts: fix gpio-keys wakeup-source property

      The keyboard driver for GPIO buttons(gpio-keys) checks for one of the
      two boolean properties to enable gpio buttons as wakeup source:
      1. "wakeup-source" or
      2. the legacy "gpio-key,wakeup"

      However juno, ste-snowball and emev2-kzm9d dts file have a undetected
      "wakeup" property to indictate the wakeup source.

      This patch fixes it by making use of "wakeup-source" property.

      Cc: Magnus Damm <magnus.damm@xxxxxxxxx>
      Acked-by: Simon Horman <horms@xxxxxxxxxxxx>
      Reviewed-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Sudeep Holla <sudeep.holla@xxxxxxx>
      Signed-off-by: Olof Johansson <olof@xxxxxxxxx>

  commit 6bccb4955c1cc6335d76a9cad87b97c7b1457b8d
  Merge: 9299b24 58c9c87
  Author: Catalin Marinas <catalin.marinas@xxxxxxx>
  Date:   Thu Oct 22 17:30:08 2015 +0100

      Merge branch 'irq/for-arm' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      This is an incremental fix for a patch previously pulled from tip
      irq/for-arm.

      * 'irq/for-arm' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        genirq: Make the cpuhotplug migration code less noisy

  commit 0db65fcfcded76fe4f74e3ca9f4e2baf67b683ef
  Author: Bjørn Mork <bjorn@xxxxxxx>
  Date:   Thu Oct 22 14:15:58 2015 +0200

      qmi_wwan: add Sierra Wireless MC74xx/EM74xx

      New device IDs shamelessly lifted from the vendor driver.

      Signed-off-by: Bjørn Mork <bjorn@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 199c6550694dcdf5f568ea9db6fe2b46d14e4fa5
  Merge: d46a9d6 ca064bd
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 07:46:05 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec

      Steffen Klassert says:

      ====================
      pull request (net): ipsec 2015-10-22

      1) Fix IPsec pre-encap fragmentation for GSO packets.
         From Herbert Xu.

      2) Fix some header checks in _decode_session6.
         We skip the header informations if the data pointer points
         already behind the header in question for some protocols.
         This is because we call pskb_may_pull with a negative value
         converted to unsigened int from pskb_may_pull in this case.
         Skipping the header informations can lead to incorrect policy
         lookups. From Mathias Krause.

      3) Allow to change the replay threshold and expiry timer of a
         state without having to set other attributes like replay
         counter and byte lifetime. Changing these other attributes
         may break the SA. From Michael Rossberg.

      4) Fix pmtu discovery for local generated packets.
         We may fail dispatch to the inner address family.
         As a reault, the local error handler is not called
         and the mtu value is not reported back to userspace.

      Please pull or let me know if there are problems.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 998eb8079f03f44d4017d7941c082b4a57eb2db8
  Merge: e9829b9 1a49a2f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 07:39:07 2015 -0700

      Merge branch 'dsa-port_fdb_dump'

      Vivien Didelot says:

      ====================
      net: dsa: implement port_fdb_dump in drivers

      Not all switch chips provide a Get Next kind of operation to dump FDB 
entries.
      It is preferred to let the driver handle the dump operation the way it 
works
      best for the chip. Thus, drop port_fdb_getnext and implement the 
port_fdb_dump
      operation in DSA, which pushes the switchdev FDB dump callback down to the
      drivers. mv88e6xxx is the only driver affected and is updated accordingly.

      v3 -> v4: fix rejects on latest net-next

      v2 -> v3: opencode switchdev_obj_dump_cb_t to avoid multiple typedef;
                use ether_addr_copy in fdb_dump

      v1 -> v2: fix a few "return err" instead of "goto unlock" in mv88e6xxx.c
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1a49a2fbf8c15d63a0b5e60d935ec7d5d3d07fd5
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:34:43 2015 -0400

      net: dsa: remove port_fdb_getnext

      No driver implements port_fdb_getnext anymore, and port_fdb_dump is
      preferred anyway, so remove this function from DSA.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2c49471b6695c5bac0d36c30ca07b8c311cd7cc3
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:34:42 2015 -0400

      net: dsa: mv88e6xxx: remove port_fdb_getnext

      Now that port_fdb_dump is implemented and even simpler, get rid of
      port_fdb_getnext.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f33475bd678e3c052f585d5660373ee7e957c742
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:34:41 2015 -0400

      net: dsa: mv88e6xxx: implement port_fdb_dump

      Implement the port_fdb_dump DSA operation.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b0e1a692ff17a37031af03599fbb3666e82c777b
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:34:40 2015 -0400

      net: dsa: mv88e6xxx: write MAC outside of ATU Get Next code

      There is no need to write the MAC address before every Get Next
      operation, since ATU MAC registers are not cleared between calls.

      Move the _mv88e6xxx_atu_mac_write call outside of _mv88e6xxx_atu_getnext
      so future code could call ATU Get Next multiple times and save a few
      register access.

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 36d04ba127eeed94b003155129c7509a2139b474
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:34:39 2015 -0400

      net: dsa: mv88e6xxx: write VID outside of VTU Get Next code

      There is no need to write the VLAN ID before every Get Next operation,
      since the VTU VID register is not cleared between calls.

      Move the VID write call in a _mv88e6xxx_vtu_vid_write function outside
      of _mv88e6xxx_vtu_getnext so future code could call VTU Get Next
      multiple times and save a few register accesses.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ea70ba980666cffacb57d90d867b2c7952d90700
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 09:34:38 2015 -0400

      net: dsa: add port_fdb_dump function

      Not all switch chips support a Get Next operation to iterate on its FDB.
      So add a more simple port_fdb_dump function for them.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d46a9d678e4c9fac1e968d0593e4dba683389324
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 08:42:22 2015 -0700

      net: ipv6: Dont add RT6_LOOKUP_F_IFACE flag if saddr set

      741a11d9e410 ("net: ipv6: Add RT6_LOOKUP_F_IFACE flag if oif is set")
      adds the RT6_LOOKUP_F_IFACE flag to make device index mismatch fatal if
      oif is given. Hajime reported that this change breaks the Mobile IPv6
      use case that wants to force the message through one interface yet use
      the source address from another interface. Handle this case by only
      adding the flag if oif is set and saddr is not set.

      Fixes: 741a11d9e410 ("net: ipv6: Add RT6_LOOKUP_F_IFACE flag if oif is 
set")
      Cc: Hajime Tazaki <thehajime@xxxxxxxxx>
      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e9829b9745b6e1683fd2a90842da498a2197299e
  Merge: c7fc9eb e5a9f8d
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 07:28:41 2015 -0700

      Merge tag 'mac80211-next-for-davem-2015-10-21' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211-next

      Johannes Berg says:

      ====================
      Here's another set of patches for the current cycle:
       * I merged net-next back to avoid a conflict with the
       * cfg80211 scheduled scan API extensions
       * preparations for better scan result timestamping
       * regulatory cleanups
       * mac80211 statistics cleanups
       * a few other small cleanups and fixes
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 92a93fd5bbe7dbe0ee7322c92e44a820f62bef90
  Merge: 4ef7ea9 c96356a
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 07:23:25 2015 -0700

      Merge branch 'isdn-null-deref'

      Karsten Keil says:

      ====================
      Fix potential NULL pointer access and memory leak in ISDN layer2 functions

      Insu Yun did brinup the issue with not checking the skb_clone() return
      value in the layer2 I-frame ull functions.
      This series fix the issue in a way which avoid protocol violations/data 
loss
      on a temporary memory shortage.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c96356a9baa2e3d628caf52f3b83df1968628b5f
  Author: Karsten Keil <keil@xxxxxxxxxxxxx>
  Date:   Wed Oct 21 14:18:39 2015 +0200

      mISDN: fix OOM condition for sending queued I-Frames

      The old code did not check the return value of skb_clone().
      The extra skb_clone() is not needed at all, if using 
skb_realloc_headroom()
      instead, which gives us a private copy with enough headroom as well.
      We need to requeue the original skb if the call failed, because we cannot
      inform upper layers about the data loss. Restructure the code to minimise
      rollback effort if it happens.
      This fix kernel bug #86091

      Thanks to Insu Yun <wuninsu@xxxxxxxxx> to remind me on this issue.

      Signed-off-by: Karsten Keil <keil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c7a7c95e8e18a3598c4d0f99c35e69dce591daf1
  Author: Karsten Keil <keil@xxxxxxxxxxxxx>
  Date:   Wed Oct 21 14:18:38 2015 +0200

      ISDN: fix OOM condition for sending queued I-Frames

      The skb_clone() return value was not checked and the 
skb_realloc_headroom()
      usage was wrong, the old skb was not freed. It turned out, that the
      skb_clone is not needed at all, the skb_realloc_headroom() will create a
      private copy with enough headroom and the original SKB can be used for the
      ACK queue.
      We need to requeue the original skb if the call failed, since the upper
      layer cannot be informed about memory shortage.

      Thanks to Insu Yun <wuninsu@xxxxxxxxx> to remind me on this issue.

      Signed-off-by: Karsten Keil <keil@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4ef7ea9195ea73262cd9730fb54e1eb726da157b
  Author: Jorgen Hansen <jhansen@xxxxxxxxxx>
  Date:   Wed Oct 21 04:53:56 2015 -0700

      VSOCK: sock_put wasn't safe to call in interrupt context

      In the vsock vmci_transport driver, sock_put wasn't safe to call
      in interrupt context, since that may call the vsock destructor
      which in turn calls several functions that should only be called
      from process context. This change defers the callling of these
      functions  to a worker thread. All these functions were
      deallocation of resources related to the transport itself.

      Furthermore, an unused callback was removed to simplify the
      cleanup.

      Multiple customers have been hitting this issue when using
      VMware tools on vSphere 2015.

      Also added a version to the vmci transport module (starting from
      1.0.2.0-k since up until now it appears that this module was
      sharing version with vsock that is currently at 1.0.1.0-k).

      Reviewed-by: Aditya Asarwade <asarwade@xxxxxxxxxx>
      Reviewed-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
      Signed-off-by: Jorgen Hansen <jhansen@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c7fc9eb79a89049214f9870a6cf978050aaea43a
  Author: yankejian <yankejian@xxxxxxxxxx>
  Date:   Wed Oct 21 17:57:44 2015 +0800

      net: hisilicon: deals with the sub ctrl by syscon

      the global Soc configuration is treated by syscon, and sub ctrl bus is
      Soc bus. it has to be treated by syscon.

      Signed-off-by: yankejian <yankejian@xxxxxxxxxx>
      Signed-off-by: lisheng <lisheng011@xxxxxxxxxx>
      Signed-off-by: lipeng <lipeng321@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 47191d65b647af5eb5c82ede70ed4c24b1e93ef4
  Author: David Herrmann <dh.herrmann@xxxxxxxxx>
  Date:   Wed Oct 21 11:47:43 2015 +0200

      netlink: fix locking around NETLINK_LIST_MEMBERSHIPS

      Currently, NETLINK_LIST_MEMBERSHIPS grabs the netlink table while copying
      the membership state to user-space. However, grabing the netlink table is
      effectively a write_lock_irq(), and as such we should not be triggering
      page-faults in the critical section.

      This can be easily reproduced by the following snippet:
          int s = socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE);
          void *p = mmap(0, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANON, 
-1, 0);
          int r = getsockopt(s, 0x10e, 9, p, (void*)((char*)p + 4092));

      This should work just fine, but currently triggers EFAULT and a possible
      WARN_ON below handle_mm_fault().

      Fix this by reducing locking of NETLINK_LIST_MEMBERSHIPS to a read-side
      lock. The write-lock was overkill in the first place, and the read-lock
      allows page-faults just fine.

      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Signed-off-by: David Herrmann <dh.herrmann@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e9e6d79c521b91e7103fea37411680e31927487b
  Merge: aec1592 b08f2b3
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 07:04:08 2015 -0700

      Merge branch 'cxgb4-trivial-fixes'

      Hariprasad Shenai says:

      ====================
      Trivial fixes for cxgb4 driver

      This patch series updates driver description for next gen. adapters, 
updates
      firmware info., returns error for setup_rss error case, restores L1
      configuration in case of FW rejects new config, updates and aligns ethtool
      get stats settings, etc

       This patch series has been created against net-next tree and includes
      patches on cxgb4 and cxgb4vf driver.

      We have included all the maintainers of respective drivers. Kindly review
      the change and let us know in case of any review comments.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b08f2b35692e640e942deb49bbabe47a264f0023
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Wed Oct 21 14:39:57 2015 +0530

      cxgb4: Update ethtool get_drvinfo to get regdump len

      Update ethtool get_drvinfo to display regdump len and also update
      firmware string version print to display N/A in case FW isn't present

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9c673d156256f427657f0114eea981aaeefa3828
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Wed Oct 21 14:39:56 2015 +0530

      cxgb4: Use vmalloc, if kmalloc fails

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6ac5fe75df57299cfbd89eb35a36d979742a69d8
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Wed Oct 21 14:39:55 2015 +0530

      cxgb4: Return error if setup_rss is called before probe

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 52a5f8463b10e49da93190dd0ee24e7f1c4860fd
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Wed Oct 21 14:39:54 2015 +0530

      cxgb4/cxgb4vf: Update driver desc. to include Chelsio T6 adapter

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 43eb4e82ebf7e3442a724ab9ecd69322eccad530
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Wed Oct 21 14:39:53 2015 +0530

      cxgb4: Add info print to display number of MSI-X vectors allocated

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4116542897be9cb5eaae7fdbfd5b2ddeaaaaeaef
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Wed Oct 21 14:39:52 2015 +0530

      cxgb4: Restore L1 cfg, if FW rejects new L1 cfg settings

      In the ethtool set_settings() routine we need to remember our old L1
      Configuration in case the firmware rejects the request and then restore
      that.

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9bfdad5ef555d92639a8b2a9e75e1f51ea3235d6
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Wed Oct 21 14:39:51 2015 +0530

      cxgb4: Don't disallow turning off auto-negotiation

      For {1, 10, 40} Gb/s. Prohibiting turning off autonegotiation isn't 
anywhere
      in the standard.

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit eed7342d4b53a697603d568ab8d10561273def42
  Author: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
  Date:   Wed Oct 21 14:39:50 2015 +0530

      cxgb4: Align ethtool get stat settings

      Align the ethtool get stats settings with the rest so it looks uniform

      Signed-off-by: Hariprasad Shenai <hariprasad@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit aec15924740edc9886051593bc7769873be9498b
  Author: Pravin B Shelar <pshelar@xxxxxxxxxx>
  Date:   Tue Oct 20 23:00:10 2015 -0700

      openvswitch: Use dev_queue_xmit for vport send.

      With use of lwtunnel, we can directly call dev_queue_xmit()
      rather than calling netdev vport send operation.
      Following change make tunnel vport code bit cleaner.

      Signed-off-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Acked-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 99e28f18e3f4daa2091802e07ebeb4f541631320
  Author: Pravin B Shelar <pshelar@xxxxxxxxxx>
  Date:   Tue Oct 20 20:47:46 2015 -0700

      openvswitch: Fix incorrect type use.

      Patch fixes following sparse warning.
      net/openvswitch/flow_netlink.c:583:30: warning: incorrect type in 
assignment (different base types)
      net/openvswitch/flow_netlink.c:583:30:    expected restricted __be16 
[usertype] ipv4
      net/openvswitch/flow_netlink.c:583:30:    got int

      Fixes: 6b26ba3a7d ("openvswitch: netlink attributes for IPv6 tunneling")
      Signed-off-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Acked-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b696e5e93835cee114f24b5b106c73f9f8503ec0
  Author: Helge Deller <deller@xxxxxx>
  Date:   Thu Oct 22 15:45:18 2015 +0200

      parisc: reduce syslog debug output

      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit aa0bdd2995fb991f0c0f0145303803a0474c93e2
  Author: Axel Lin <axel.lin@xxxxxxxxxx>
  Date:   Sat Sep 19 11:43:07 2015 +0800

      parisc: serial/mux: Convert to uart_console_device instead of open-coded

      The implementation of mux_console_device() is very similar to
      uart_console_device(). Setting .data field in mux_console then we can
      convert to use uart_console_device().

      Signed-off-by: Axel Lin <axel.lin@xxxxxxxxxx>
      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit 7bc2d40ea690a37eccc2f514c96c56fdcda626b5
  Author: Helge Deller <deller@xxxxxx>
  Date:   Tue Sep 8 15:45:32 2015 +0200

      parisc: Wire up userfaultfd syscall

      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit b6096755f43c443101e6f5d3acc74efa746cb4ec
  Author: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
  Date:   Mon Sep 7 12:15:51 2015 -0400

      parisc: allocate sys_membarrier system call number

      Signed-off-by: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
      Tested-by: Helge Deller <deller@xxxxxx>
      CC: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      CC: linux-api@xxxxxxxxxxxxxxx
      CC: "James E.J. Bottomley" <jejb@xxxxxxxxxxxxxxxx>
      CC: linux-parisc@xxxxxxxxxxxxxxx
      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit 721daebbdb9ba44756a9695878ecca8aad38009b
  Merge: 63b11e7 3911169
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 06:42:23 2015 -0700

      Merge branch 'bpf-perf'

      Alexei Starovoitov says:

      ====================
      bpf_perf_event_output helper

      Over the last year there were multiple attempts to let eBPF programs
      output data into perf events by He Kuang and Wangnan.
      The last one was:
      https://lkml.org/lkml/2015/7/20/736
      It was almost perfect with exception that all bpf programs would sent
      data into one global perf_event.
      This patch set takes different approach by letting user space
      open independent PERF_COUNT_SW_BPF_OUTPUT events, so that program
      output won't collide.

      Wangnan is working on corresponding perf patches.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 39111695b1b88a21e81983a38786d877e770da81
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Tue Oct 20 20:02:35 2015 -0700

      samples: bpf: add bpf_perf_event_output example

      Performance test and example of bpf_perf_event_output().
      kprobe is attached to sys_write() and trivial bpf program streams
      pid+cookie into userspace via PERF_COUNT_SW_BPF_OUTPUT event.

      Usage:
      $ sudo ./bld_x64/samples/bpf/trace_output
      recv 2968913 events per sec

      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a43eec304259a6c637f4014a6d4767159b6a3aa3
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Tue Oct 20 20:02:34 2015 -0700

      bpf: introduce bpf_perf_event_output() helper

      This helper is used to send raw data from eBPF program into
      special PERF_TYPE_SOFTWARE/PERF_COUNT_SW_BPF_OUTPUT perf_event.
      User space needs to perf_event_open() it (either for one or all cpus) and
      store FD into perf_event_array (similar to bpf_perf_event_read() helper)
      before eBPF program can send data into it.

      Today the programs triggered by kprobe collect the data and either store
      it into the maps or print it via bpf_trace_printk() where latter is the 
debug
      facility and not suitable to stream the data. This new helper replaces
      such bpf_trace_printk() usage and allows programs to have dedicated
      channel into user space for post-processing of the raw data collected.

      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fa128e6a148a0a58355bd6814c6283515bbd028a
  Author: Alexei Starovoitov <ast@xxxxxxxxxxxx>
  Date:   Tue Oct 20 20:02:33 2015 -0700

      perf: pad raw data samples automatically

      Instead of WARN_ON in perf_event_output() on unpaded raw samples,
      pad them automatically.

      Signed-off-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 63b11e757d6dae570bc22450ec58a5b68cdf5c3c
  Author: Brenden Blanco <bblanco@xxxxxxxxxxxx>
  Date:   Tue Oct 20 16:47:33 2015 -0700

      ipvlan: read direct ifindex instead of iflink

      In the ipv4 outbound path of an ipvlan device in l3 mode, the ifindex is
      being grabbed from dev_get_iflink. This works for the physical device
      case, since as the documentation of that function notes: "Physical
      interfaces have the same 'ifindex' and 'iflink' values.".  However, if
      the master device is a veth, and the pairs are in separate net
      namespaces, the route lookup will fail with -ENODEV due to outer veth
      pair being in a separate namespace from the ipvlan master/routing
      namespace.

        ns0    |   ns1    |   ns2
       veth0a--|--veth0b--|--ipvl0

      In ipvlan_process_v4_outbound(), a packet sent from ipvl0 in the above
      configuration will pass fl.flowi4_oif == veth0a to
      ip_route_output_flow(), but *net == ns1.

      Notice also that ipv6 processing is not using iflink. Since there is a
      discrepancy in usage, fixup both v4 and v6 case to use local dev
      variable.

      Tested this with l3 ipvlan on top of veth, as well as with single
      physical interface in the top namespace.

      Signed-off-by: Brenden Blanco <bblanco@xxxxxxxxxxxx>
      Reviewed-by: Jiri Benc <jbenc@xxxxxxxxxx>
      Acked-by: Mahesh Bandewar <maheshb@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 34e45ad9378c31ef2b59e8bd63d62f0ca8e719a3
  Author: Andrew F. Davis <afd@xxxxxx>
  Date:   Tue Oct 20 16:28:57 2015 -0500

      net: phy: dp83848: Add TI DP83848 Ethernet PHY

      Add support for the TI DP83848 Ethernet PHY device.

      The DP83848 is a highly reliable, feature rich, IEEE 802.3 compliant
      single port 10/100 Mb/s Ethernet Physical Layer Transceiver supporting
      the MII and RMII interfaces.

      Signed-off-by: Andrew F. Davis <afd@xxxxxx>
      Signed-off-by: Dan Murphy <dmurphy@xxxxxx>
      Reviewed-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Acked-by: Dan Murphy <dmurphy@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit dbf650b67bb4db1b95807d2aafe2d7cfafd458da
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Oct 20 13:17:40 2015 -0700

      tcp: fastopen: limit max_qlen

      Allowing an application to set whatever limit for
      the list of recently RST fastopen sessions [1] is not wise,
      as it open ways to deplete kernel memory.

      Cap the user provided limit by somaxconn sysctl,
      like listen() backlog.

      [1] https://tools.ietf.org/html/rfc7413#section-5.1

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0729a04977d497cf66234fd7f900ddcec3ef1c52
  Author: Hezi Shahmoon <hezi@xxxxxxxxxxx>
  Date:   Tue Oct 20 16:32:24 2015 +0200

      i2c: mv64xxx: really allow I2C offloading

      Commit 00d8689b85a7 ("i2c: mv64xxx: rework offload support to fix
      several problems") completely reworked the offload support, but left a
      debugging-related "return false" at the beginning of the
      mv64xxx_i2c_can_offload() function. This has the unfortunate consequence
      that offloading is in fact never used, which wasn't really the
      intention.

      This commit fixes that problem by removing the bogus "return false".

      Fixes: 00d8689b85a7 ("i2c: mv64xxx: rework offload support to fix several 
problems")
      Signed-off-by: Hezi Shahmoon <hezi@xxxxxxxxxxx>
      [Thomas: reworked commit log and title.]
      Signed-off-by: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Wolfram Sang <wsa@xxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>

  commit 83ea24fd45f8793706b9a259842ab3f144661e25
  Author: Kamlakant Patel <kamlakant.patel@xxxxxxxxxxxx>
  Date:   Thu Oct 15 18:23:32 2015 +0530

      gpio: xlp: Convert to use gpiolib irqchip helpers

      commit "325f0a (MIPS: Netlogic: Use chip_data for irq_chip methods)"
      Updates "mips/netlogic/common/irq.c" to use chip_data to store interrupt
      controller data pointer. Before this commit handler_data was used to
      store interrupt controller data which caused errors while using
      gpiochip_set_chained_irqchip.

      Update XLP GPIO driver to use the gpiolib irqchip helpers.
      And add missing depends on OF_GPIO in Kconfig.

      Signed-off-by: Kamlakant Patel <kamlakant.patel@xxxxxxxxxxxx>
      Signed-off-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 58c9c87ca9dca99f269267f5aadcd051fef1637b
  Author: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
  Date:   Thu Oct 22 14:34:57 2015 +0200

      genirq: Make the cpuhotplug migration code less noisy

      The original arm code has a pr_debug() statement for the case where
      the irq chip has no set_affinity() callback. That's sufficient for
      debugging and we really don't want to spam dmesg with useless warnings
      for the normal case.

      Fixes: f1e0bb0ad473: "genirq: Introduce generic irq migration for cpu 
hotunplug"
      Reported-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Requested-by: Russell King <linux@xxxxxxxxxxxxxxxx>
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Yang Yingliang <yangyingliang@xxxxxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: Hanjun Guo <hanjun.guo@xxxxxxxxxx>
      Cc: Jiang Liu <jiang.liu@xxxxxxxxxxxxxxx>

  commit 4eb0f7abcefad2d4c127aa7502d3122635eddab0
  Author: Jiada Wang <jiada_wang@xxxxxxxxxx>
  Date:   Tue Oct 20 11:47:11 2015 +0900

      ASoC: wm8962: mark cache_dirty flag after software reset in pm_resume

      By doing software reset of wm8962 in pm_resume, all registers which
      have already been set will be reset to default value without regmap
      interface be involved, thus driver need to mark cache_dirty flag,
      to let regcache can be updated by regcache_sync().

      Signed-off-by: Jiada Wang <jiada_wang@xxxxxxxxxx>
      Acked-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 13972adc3240ea8b18b44906b819c622941a64b6
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Thu Oct 22 12:29:27 2015 +0200

      Bluetooth: Increase minor version of core module

      With the addition of support for diagnostic feature, it makes sense to
      increase the minor version of the Bluetooth core module.

      The module version is not used anywhere, but it gives a nice extra
      hint for debugging purposes.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit aeedebff6961d96e9df58799e6c3a93513d6f66b
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Thu Oct 22 12:11:27 2015 +0200

      ieee802154: 6lowpan: fix memory leak

      Looking at current situation of memory management in 6lowpan receive
      function I detected some invalid handling. After calling
      lowpan_invoke_rx_handlers we will do a kfree_skb and then NET_RX_DROP on
      error handling. We don't do this before, also on
      skb_share_check/skb_unshare which might manipulate the reference
      counters.

      After running some 'grep -r "dev_add_pack" net/' to look how others
      packet-layer receive callbacks works I detected that every subsystem do
      a kfree_skb, then NET_RX_DROP without calling skb functions which
      might manipulate the skb reference counters. This is the reason why we
      should do the same here like all others subsystems. I didn't find any
      documentation how the packet-layer receive callbacks handle NET_RX_DROP
      return values either.

      This patch will add a kfree_skb, then NET_RX_DROP handling for the
      "trivial checks", in case of skb_share_check/skb_unshare the kfree_skb
      call will be done inside these functions.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 88d07feb097b60fcca20ba63d2920b0f05a05fa0
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Thu Oct 22 10:49:39 2015 +0300

      Bluetooth: Make hci_disconnect() behave correctly for all states

      There are a few places that don't explicitly check the connection
      state before calling hci_disconnect(). To make this API do the right
      thing take advantage of the new hci_abort_conn() API and also make
      sure to only read the clock offset if we're really connected.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 89e0ccc882c47a4553698a580bec70cd90bc6319
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Thu Oct 22 10:49:38 2015 +0300

      Bluetooth: Take advantage of connection abort helpers

      Convert the various places mapping connection state to
      disconnect/cancel HCI command to use the new hci_abort_conn helper
      API.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit dcc0f0d9ce839e1cc97b95d9dac364047bd1b975
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Thu Oct 22 10:49:37 2015 +0300

      Bluetooth: Introduce hci_req helper to abort a connection

      There are several different places needing to make sure that a
      connection gets disconnected or canceled. The exact action needed
      depends on the connection state, so centralizing this logic can save
      quite a lot of code duplication.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit a1857390e2a626cd44e494968fc1b41891caec66
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Thu Oct 22 12:06:09 2015 +0300

      Bluetooth: hci_bcm: checking for ERR_PTR instead of NULL

      bt_skb_alloc() returns NULL on error, it never returns an ERR_PTR.

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 4ba792e303e278052bb0ee60cce15d6d7dc15c7c
  Merge: 43e41ad e3d006c
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Thu Oct 22 09:33:46 2015 +0200

      Merge tag 'perf-core-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/core

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      User visible changes:

        - Print branch filter state in verbose mode. (Andi Kleen)

        - Fix core dump caused by per-socket/core system-wide stat. (Kan Liang)

        - Update libtraceevent KVM plugin. (Paolo Bonzini)

      Infrastructure changes:

        - Add fixdep to 'tools/build' .gitignore. (Yunlong Song)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c81d555a264bde740adc314f3931046994534106
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Thu Oct 22 09:38:35 2015 +0300

      Bluetooth: Fix crash in SMP when unpairing

      When unpairing the keys stored in hci_dev are removed. If SMP is
      ongoing the SMP context will also have references to these keys, so
      removing them from the hci_dev lists will make the pointers invalid.
      This can result in the following type of crashes:

       BUG: unable to handle kernel paging request at 6b6b6b6b
       IP: [<c11f26be>] __list_del_entry+0x44/0x71
       *pde = 00000000
       Oops: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC
       Modules linked in: hci_uart btqca btusb btintel btbcm btrtl hci_vhci 
rfcomm bluetooth_6lowpan bluetooth
       CPU: 0 PID: 723 Comm: kworker/u5:0 Not tainted 4.3.0-rc3+ #1379
       Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 
1.8.1-20150318_183358- 04/01/2014
       Workqueue: hci0 hci_rx_work [bluetooth]
       task: f19da940 ti: f1a94000 task.ti: f1a94000
       EIP: 0060:[<c11f26be>] EFLAGS: 00010202 CPU: 0
       EIP is at __list_del_entry+0x44/0x71
       EAX: c0088d20 EBX: f30fcac0 ECX: 6b6b6b6b EDX: 6b6b6b6b
       ESI: f4b60000 EDI: c0088d20 EBP: f1a95d90 ESP: f1a95d8c
        DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
       CR0: 8005003b CR2: 6b6b6b6b CR3: 319e5000 CR4: 00000690
       Stack:
        f30fcac0 f1a95db0 f82dc3e1 f1bfc000 00000000 c106524f f1bfc000 f30fd020
        f1a95dc0 f1a95dd0 f82dcbdb f1a95de0 f82dcbdb 00000067 f1bfc000 f30fd020
        f1a95de0 f1a95df0 f82d1126 00000067 f82d1126 00000006 f30fd020 f1bfc000
       Call Trace:
        [<f82dc3e1>] smp_chan_destroy+0x192/0x240 [bluetooth]
        [<c106524f>] ? trace_hardirqs_on_caller+0x14e/0x169
        [<f82dcbdb>] smp_teardown_cb+0x47/0x64 [bluetooth]
        [<f82dcbdb>] ? smp_teardown_cb+0x47/0x64 [bluetooth]
        [<f82d1126>] l2cap_chan_del+0x5d/0x14d [bluetooth]
        [<f82d1126>] ? l2cap_chan_del+0x5d/0x14d [bluetooth]
        [<f82d40ef>] l2cap_conn_del+0x109/0x17b [bluetooth]
        [<f82d40ef>] ? l2cap_conn_del+0x109/0x17b [bluetooth]
        [<f82c0205>] ? hci_event_packet+0x5b1/0x2092 [bluetooth]
        [<f82d41aa>] l2cap_disconn_cfm+0x49/0x50 [bluetooth]
        [<f82d41aa>] ? l2cap_disconn_cfm+0x49/0x50 [bluetooth]
        [<f82c0228>] hci_event_packet+0x5d4/0x2092 [bluetooth]
        [<c1332c16>] ? skb_release_data+0x6a/0x95
        [<f82ce5d4>] ? hci_send_to_monitor+0xe7/0xf4 [bluetooth]
        [<c1409708>] ? _raw_spin_unlock_irqrestore+0x44/0x57
        [<f82b3bb0>] hci_rx_work+0xf1/0x28b [bluetooth]
        [<f82b3bb0>] ? hci_rx_work+0xf1/0x28b [bluetooth]
        [<c10635a0>] ? __lock_is_held+0x2e/0x44
        [<c104772e>] process_one_work+0x232/0x432
        [<c1071ddc>] ? rcu_read_lock_sched_held+0x50/0x5a
        [<c104772e>] ? process_one_work+0x232/0x432
        [<c1047d48>] worker_thread+0x1b8/0x255
        [<c1047b90>] ? rescuer_thread+0x23c/0x23c
        [<c104bb71>] kthread+0x91/0x96
        [<c14096a7>] ? _raw_spin_unlock_irq+0x27/0x44
        [<c1409d61>] ret_from_kernel_thread+0x21/0x30
        [<c104bae0>] ? kthread_parkme+0x1e/0x1e

      To solve the issue, introduce a new smp_cancel_pairing() API that can
      be used to clean up the SMP state before touching the hci_dev lists.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit fc64361ac15318126c64193929616fc4832071a6
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Thu Oct 22 09:38:31 2015 +0300

      Bluetooth: Disable auto-connection parameters when unpairing

      For connection parameters that are left around until a disconnection
      we should at least clear any auto-connection properties. This way a
      new Add Device call is required to re-set them after calling Unpair
      Device.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit e2aacd963a06fc558a809ecb62f5833e6c340b28
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 20 10:08:59 2015 -0400

      net: mdio-gpio: move platform data header

      This header file only contains the platform data structure definition,
      so move it to the include/linux/platform_data/ directory.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 844338e5a46f5d80566fa853c6168a78cdadab01
  Author: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 20 10:08:58 2015 -0400

      ARM: gemini: remove unnecessary mdio-gpio includes

      Remove the inclusion of linux/mdio-gpio.h in nas4220b, wbd111 and wbd222
      boards since mdio-gpio is not used.

      Signed-off-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 104eb270e665f4fcd8cb8c8ab4c4d4538c604e92
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Tue Oct 20 10:42:24 2015 +0200

      net: sun4i-emac: Properly free resources on probe failure and remove

      Fix sun4i-emac not releasing the following resources:
      -iomapped memory not released on probe-failure nor on remove
      -clock not getting disabled on probe-failure nor on remove
      -sram not being released on remove

      And while at it also add error checking to the clk_prepare_enable call
      done on probe.

      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Acked-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c6aa74d546ccb94c99a1e95fb461f8b0e9410a3e
  Author: Wu Fengguang <fengguang.wu@xxxxxxxxx>
  Date:   Tue Oct 20 14:56:00 2015 +0800

      net: hisilicon: fix ptr_ret.cocci warnings

      drivers/net/ethernet/hisilicon/hns/hnae.c:442:1-3: WARNING: 
PTR_ERR_OR_ZERO can be used

       Use PTR_ERR_OR_ZERO rather than if(IS_ERR(...)) + PTR_ERR

      Generated by: scripts/coccinelle/api/ptr_ret.cocci

      CC: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit feec0cb3f20b837f8ca36e974267918d7a4497f8
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Mon Oct 19 20:40:17 2015 -0700

      ipv6: gro: support sit protocol

      Tom Herbert added SIT support to GRO with commit
      19424e052fb4 ("sit: Add gro callbacks to sit_offload"),
      later reverted by Herbert Xu.

      The problem came because Tom patch was building GRO
      packets without proper meta data : If packets were locally
      delivered, we would not care.

      But if packets needed to be forwarded, GSO engine was not
      able to segment individual segments.

      With the following patch, we correctly set skb->encapsulation
      and inner network header. We also update gso_type.

      Tested:

      Server :
      netserver
      modprobe dummy
      ifconfig dummy0 8.0.0.1 netmask 255.255.255.0 up
      arp -s 8.0.0.100 4e:32:51:04:47:e5
      iptables -I INPUT -s 10.246.7.151 -j TEE --gateway 8.0.0.100
      ifconfig sixtofour0
      sixtofour0 Link encap:IPv6-in-IPv4
                inet6 addr: 2002:af6:798::1/128 Scope:Global
                inet6 addr: 2002:af6:798::/128 Scope:Global
                UP RUNNING NOARP  MTU:1480  Metric:1
                RX packets:411169 errors:0 dropped:0 overruns:0 frame:0
                TX packets:409414 errors:0 dropped:0 overruns:0 carrier:0
                collisions:0 txqueuelen:0
                RX bytes:20319631739 (20.3 GB)  TX bytes:29529556 (29.5 MB)

      Client :
      netperf -H 2002:af6:798::1 -l 1000 &

      Checked on server traffic copied on dummy0 and verify segments were
      properly rebuilt, with proper IP headers, TCP checksums...

      tcpdump on eth0 shows proper GRO aggregation takes place.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Acked-by: Tom Herbert <tom@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8f3af27786913851e720bc9466d1abffcfa7aff6
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Mon Oct 19 20:17:59 2015 -0700

      net: dummy: add more features

      While testing my SIT/GRO patch using netfilter TEE module and a dummy
      device, I found some features were missing :

      TSO IPv6, UFO, and encapsulated traffic.

      ethtool -k dummy0 now gives :
      ...
      tcp-segmentation-offload: on
        tx-tcp-segmentation: on
        tx-tcp-ecn-segmentation: on
        tx-tcp6-segmentation: on
      udp-fragmentation-offload: on
      ...
      tx-gre-segmentation: on
      tx-ipip-segmentation: on
      tx-sit-segmentation: on
      tx-udp_tnl-segmentation: on

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e754ec69ab69601420eb2ed58ece803d77c93f61
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Mon Oct 19 19:19:00 2015 -0700

      openvswitch: Serialize nested ct actions if provided

      If userspace provides a ct action with no nested mark or label, then the
      storage for these fields is zeroed. Later when actions are requested,
      such zeroed fields are serialized even though userspace didn't
      originally specify them. Fix the behaviour by ensuring that no action is
      serialized in this case, and reject actions where userspace attempts to
      set these fields with mask=0. This should make netlink marshalling
      consistent across deserialization/reserialization.

      Reported-by: Jarno Rajahalme <jrajahalme@xxxxxxxxxx>
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4f0909ee3d8e3514a274121f3bf217a4920fa12d
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Mon Oct 19 19:18:59 2015 -0700

      openvswitch: Mark connections new when not confirmed.

      New, related connections are marked as such as part of ovs_ct_lookup(),
      but they are not marked as "new" if the commit flag is used. Make this
      consistent by setting the "new" flag whenever !nf_ct_is_confirmed(ct).

      Reported-by: Jarno Rajahalme <jrajahalme@xxxxxxxxxx>
      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1d008a1df927846788b9dc02e770f65951f98ddc
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Mon Oct 19 19:18:58 2015 -0700

      openvswitch: Clarify conntrack COMMIT behaviour

      The presence of this attribute does not modify the ct_state for the
      current packet, only future packets. Make this more clear in the header
      definition.

      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9e384715e9e702704c6941c575f0e6b322132a3a
  Author: Joe Stringer <joestringer@xxxxxxxxxx>
  Date:   Mon Oct 19 19:18:57 2015 -0700

      openvswitch: Reject ct_state masks for unknown bits

      Currently, 0-bits are generated in ct_state where the bit position is
      undefined, and matches are accepted on these bit-positions. If userspace
      requests to match the 0-value for this bit then it may expect only a
      subset of traffic to match this value, whereas currently all packets
      will have this bit set to 0. Fix this by rejecting such masks.

      Signed-off-by: Joe Stringer <joestringer@xxxxxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Acked-by: Thomas Graf <tgraf@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e2e8009ff72ad2a795b67785f3238af152146368
  Author: Renato Westphal <renatowestphal@xxxxxxxxx>
  Date:   Mon Oct 19 18:51:34 2015 -0200

      tcp: remove improper preemption check in tcp_xmit_probe_skb()

      Commit e520af48c7e5a introduced the following bug when setting the
      TCP_REPAIR sockoption:

      [ 2860.657036] BUG: using __this_cpu_add() in preemptible [00000000] 
code: daemon/12164
      [ 2860.657045] caller is __this_cpu_preempt_check+0x13/0x20
      [ 2860.657049] CPU: 1 PID: 12164 Comm: daemon Not tainted 4.2.3 #1
      [ 2860.657051] Hardware name: Dell Inc. PowerEdge R210 II/0JP7TR, BIOS 
2.0.5 03/13/2012
      [ 2860.657054]  ffffffff81c7f071 ffff880231e9fdf8 ffffffff8185d765 
0000000000000002
      [ 2860.657058]  0000000000000001 ffff880231e9fe28 ffffffff8146ed91 
ffff880231e9fe18
      [ 2860.657062]  ffffffff81cd1a5d ffff88023534f200 ffff8800b9811000 
ffff880231e9fe38
      [ 2860.657065] Call Trace:
      [ 2860.657072]  [<ffffffff8185d765>] dump_stack+0x4f/0x7b
      [ 2860.657075]  [<ffffffff8146ed91>] check_preemption_disabled+0xe1/0xf0
      [ 2860.657078]  [<ffffffff8146edd3>] __this_cpu_preempt_check+0x13/0x20
      [ 2860.657082]  [<ffffffff817e0bc7>] tcp_xmit_probe_skb+0xc7/0x100
      [ 2860.657085]  [<ffffffff817e1e2d>] tcp_send_window_probe+0x2d/0x30
      [ 2860.657089]  [<ffffffff817d1d8c>] do_tcp_setsockopt.isra.29+0x74c/0x830
      [ 2860.657093]  [<ffffffff817d1e9c>] tcp_setsockopt+0x2c/0x30
      [ 2860.657097]  [<ffffffff81767b74>] sock_common_setsockopt+0x14/0x20
      [ 2860.657100]  [<ffffffff817669e1>] SyS_setsockopt+0x71/0xc0
      [ 2860.657104]  [<ffffffff81865172>] entry_SYSCALL_64_fastpath+0x16/0x75

      Since tcp_xmit_probe_skb() can be called from process context, use
      NET_INC_STATS() instead of NET_INC_STATS_BH().

      Fixes: e520af48c7e5 ("tcp: add TCPWinProbe and TCPKeepAlive SNMP 
counters")
      Signed-off-by: Renato Westphal <renatow@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 36a28b21169d28db2a3409a4e2d4b9a7563c1a00
  Merge: e535679 00db674
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 21 19:26:17 2015 -0700

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf

      Pablo Neira Ayuso says:

      ====================
      Netfilter fixes for net

      The following patchset contains four Netfilter fixes for net, they are:

      1) Fix Kconfig dependencies of new nf_dup_ipv4 and nf_dup_ipv6.

      2) Remove bogus test nh_scope in IPv4 rpfilter match that is breaking
         --accept-local, from Xin Long.

      3) Wait for RCU grace period after dropping the pending packets in the
         nfqueue, from Florian Westphal.

      4) Fix sleeping allocation while holding spin_lock_bh, from Nikolay 
Borisov.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b1974ed05ea90264d534a200e8a13932ad55f8b8
  Author: Arad, Ronen <ronen.arad@xxxxxxxxx>
  Date:   Mon Oct 19 09:23:28 2015 -0700

      netlink: Rightsize IFLA_AF_SPEC size calculation

      if_nlmsg_size() overestimates the minimum allocation size of netlink
      dump request (when called from rtnl_calcit()) or the size of the
      message (when called from rtnl_getlink()). This is because
      ext_filter_mask is not supported by rtnl_link_get_af_size() and
      rtnl_link_get_size().

      The over-estimation is significant when at least one netdev has many
      VLANs configured (8 bytes for each configured VLAN).

      This patch-set "rightsizes" the protocol specific attribute size
      calculation by propagating ext_filter_mask to rtnl_link_get_af_size()
      and adding this a argument to get_link_af_size op in rtnl_af_ops.

      Bridge module already used filtering aware sizing for notifications.
      br_get_link_af_size_filtered() is consistent with the modified
      get_link_af_size op so it replaces br_get_link_af_size() in br_af_ops.
      br_get_link_af_size() becomes unused and thus removed.

      Signed-off-by: Ronen Arad <ronen.arad@xxxxxxxxx>
      Acked-by: Sridhar Samudrala <sridhar.samudrala@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e53567948f82368247b4b1a63fcab4c76ef7d51c
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Mon Oct 19 11:43:11 2015 -0400

      tipc: conditionally expand buffer headroom over udp tunnel

      In commit d999297c3dbbe ("tipc: reduce locking scope during packet 
reception")
      we altered the packet retransmission function. Since then, when
      restransmitting packets, we create a clone of the original buffer
      using __pskb_copy(skb, MIN_H_SIZE), where MIN_H_SIZE is the size of
      the area we want to have copied, but also the smallest possible TIPC
      packet size. The value of MIN_H_SIZE is 24.

      Unfortunately, __pskb_copy() also has the effect that the headroom
      of the cloned buffer takes the size MIN_H_SIZE. This is too small
      for carrying the packet over the UDP tunnel bearer, which requires
      a minimum headroom of 28 bytes. A change to just use pskb_copy()
      lets the clone inherit the original headroom of 80 bytes, but also
      assumes that the copied data area is of at least that size, something
      that is not always the case. So that is not a viable solution.

      We now fix this by adding a check for sufficient headroom in the
      transmit function of udp_media.c, and expanding it when necessary.

      Fixes: commit d999297c3dbbe ("tipc: reduce locking scope during packet 
reception")
      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7a4264a9250fc6d555ff305aa5e5168723805bb9
  Author: Andreas Schwab <schwab@xxxxxxx>
  Date:   Mon Oct 19 17:37:13 2015 +0200

      net: cavium: change NET_VENDOR_CAVIUM to bool

      CONFIG_NET_VENDOR_CAVIUM is only used to hide/show config options and to
      include subdirectories in the build, so it doesn't make sense to make it
      tristate.

      Signed-off-by: Andreas Schwab <schwab@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 45c8b7b175ceb2d542e0fe15247377bf3bce29ec
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Mon Oct 19 11:33:00 2015 -0400

      tipc: allow non-linear first fragment buffer

      The current code for message reassembly is erroneously assuming that
      the the first arriving fragment buffer always is linear, and then goes
      ahead resetting the fragment list of that buffer in anticipation of
      more arriving fragments.

      However, if the buffer already happens to be non-linear, we will
      inadvertently drop the already attached fragment list, and later
      on trig a BUG() in __pskb_pull_tail().

      We see this happen when running fragmented TIPC multicast across UDP,
      something made possible since
      commit d0f91938bede ("tipc: add ip/udp media type")

      We fix this by not resetting the fragment list when the buffer is non-
      linear, and by initiatlizing our private fragment list tail pointer to
      the tail of the existing fragment list.

      Fixes: commit d0f91938bede ("tipc: add ip/udp media type")
      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 1241365f1aeb24ef0ffe82970f7c558022ddc85f
  Author: James Morse <james.morse@xxxxxxx>
  Date:   Mon Oct 19 16:31:55 2015 +0100

      openvswitch: Allocate memory for ovs internal device stats.

      "openvswitch: Remove vport stats" removed the per-vport statistics, in
      order to use the netdev's statistics fields.
      "openvswitch: Fix ovs_vport_get_stats()" fixed the export of these stats
      to user-space, by using the provided netdev_ops to collate them - but ovs
      internal devices still use an unallocated dev->tstats field to count
      packets, which are no longer exported by this api.

      Allocate the dev->tstats field for ovs internal devices, and wire up
      ndo_get_stats64 with the original implementation of
      ovs_vport_get_stats().

      On its own, "openvswitch: Fix ovs_vport_get_stats()" fixes the OOPs,
      unmasking a full-on panic on arm64:

      =============%<==============
      [<ffffffbffc00ce4c>] internal_dev_recv+0xa8/0x170 [openvswitch]
      [<ffffffbffc0008b4>] do_output.isra.31+0x60/0x19c [openvswitch]
      [<ffffffbffc000bf8>] do_execute_actions+0x208/0x11c0 [openvswitch]
      [<ffffffbffc001c78>] ovs_execute_actions+0xc8/0x238 [openvswitch]
      [<ffffffbffc003dfc>] ovs_packet_cmd_execute+0x21c/0x288 [openvswitch]
      [<ffffffc0005e8c5c>] genl_family_rcv_msg+0x1b0/0x310
      [<ffffffc0005e8e60>] genl_rcv_msg+0xa4/0xe4
      [<ffffffc0005e7ddc>] netlink_rcv_skb+0xb0/0xdc
      [<ffffffc0005e8a94>] genl_rcv+0x38/0x50
      [<ffffffc0005e76c0>] netlink_unicast+0x164/0x210
      [<ffffffc0005e7b70>] netlink_sendmsg+0x304/0x368
      [<ffffffc0005a21c0>] sock_sendmsg+0x30/0x4c
      [SNIP]
      Kernel panic - not syncing: Fatal exception in interrupt
      =============%<==============

      Fixes: 8c876639c985 ("openvswitch: Remove vport stats.")
      Signed-off-by: James Morse <james.morse@xxxxxxx>
      Acked-by: Pravin B Shelar <pshelar@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f1900fb5eca2cf9b96837e4931165003918d7d29
  Author: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 19 08:26:05 2015 -0700

      net: Really fix vti6 with oif in dst lookups

      6e28b000825d ("net: Fix vti use case with oif in dst lookups for IPv6")
      is missing the checks on FLOWI_FLAG_SKIP_NH_OIF. Add them.

      Fixes: 42a7b32b73d6 ("xfrm: Add oif to dst lookups")
      Cc: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
      Signed-off-by: David Ahern <dsa@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 53387c4e22ac33d27a552b3d56bad932bd32531b
  Author: Jon Paul Maloy <jon.maloy@xxxxxxxxxxxx>
  Date:   Mon Oct 19 09:21:37 2015 -0400

      tipc: extend broadcast link window size

      The default fix broadcast window size is currently set to 20 packets.
      This is a very low value, set at a time when we were still testing on
      10 Mb/s hubs, and a change to it is long overdue.

      Commit 7845989cb4b3da1db ("net: tipc: fix stall during bclink wakeup 
procedure")
      revealed a problem with this low value. For messages of importance LOW,
      the backlog queue limit will be  calculated to 30 packets, while a
      single, maximum sized message of 66000 bytes, carried across a 1500 MTU
      network consists of 46 packets.

      This leads to the following scenario (among others leading to the same
      situation):

      1: Msg 1 of 46 packets is sent. 20 packets go to the transmit queue, 26
         packets to the backlog queue.
      2: Msg 2 of 46 packets is attempted sent, but rejected because there is
         no more space in the backlog queue at this level. The sender is added
         to the wakeup queue with a "pending packets chain size" number of 46.
      3: Some packets in the transmit queue are acked and released. We try to
         wake up the sender, but the pending size of 46 is bigger than the LOW
         wakeup limit of 30, so this doesn't happen.
      5: Subsequent acks releases all the remaining buffers. Each time we test
         for the wakeup criteria and find that 46 still is larger than 30,
         even after both the transmit and the backlog queues are empty.
      6: The sender is never woken up and given a chance to send its message.
         He is stuck.

      We could now loosen the wakeup criteria (used by link_prepare_wakeup())
      to become equal to the send criteria (used by tipc_link_xmit()), i.e.,
      by ignoring the "pending packets chain size" value altogether, or we can
      just increase the queue limits so that the criteria can be satisfied
      anyway. There are good reasons (potentially multiple waiting senders) to
      not opt for the former solution, so we choose the latter one.

      This commit fixes the problem by giving the broadcast link window a
      default value of 50 packets. We also introduce a new minimum link
      window size BCLINK_MIN_WIN of 32, which is enough to always avoid the
      described situation. Finally, in order to not break any existing users
      which may set the window explicitly, we enforce that the window is set
      to the new minimum value in case the user is trying to set it to
      anything lower.

      Fixes: 7845989cb4b3da1db ("net: tipc: fix stall during bclink wakeup 
procedure")
      Signed-off-by: Jon Maloy <jon.maloy@xxxxxxxxxxxx>
      Reviewed-by: Ying Xue <ying.xue@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0f89abf56abbd0e1c6e3cef9813e6d9f05383c1e
  Author: Christian Engelmayer <cengelma@xxxxxx>
  Date:   Wed Oct 21 00:50:06 2015 +0200

      btrfs: fix possible leak in btrfs_ioctl_balance()

      Commit 8eb934591f8b ("btrfs: check unsupported filters in balance
      arguments") adds a jump to exit label out_bargs in case the argument
      check fails. At this point in addition to the bargs memory, the
      memory for struct btrfs_balance_control has already been allocated.
      Ownership of bctl is passed to btrfs_balance() in the good case,
      thus the memory is not freed due to the introduced jump. Make sure
      that the memory gets freed in any case as necessary. Detected by
      Coverity CID 1328378.

      Signed-off-by: Christian Engelmayer <cengelma@xxxxxx>
      Reviewed-by: David Sterba <dsterba@xxxxxxxx>
      Signed-off-by: Chris Mason <clm@xxxxxx>

  commit c50f13f911b90a722308bffbf26187ff3890aa1e
  Merge: c2a7558 677c884
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Thu Oct 22 10:24:55 2015 +1000

      Merge branch 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux 
into drm-fixes

      Just a crash fix for radeon and amdgpu if the user has forcibly disabled
      dpm and tries to access the pwm sysfs controls.

      * 'drm-fixes-4.3' of git://people.freedesktop.org/~agd5f/linux:
        drm/amdgpu: add missing dpm check for KV dpm late init
        drm/amdgpu/dpm: don't add pwm attributes if DPM is disabled
        drm/radeon/dpm: don't add pwm attributes if DPM is disabled

  commit c2a75586ff27ee7636bb2bf33ee66992a6603e49
  Merge: 37363bc 18e9345
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Thu Oct 22 10:24:21 2015 +1000

      Merge tag 'drm-intel-fixes-2015-10-16' of 
git://anongit.freedesktop.org/drm-intel into drm-fixes

      The revert dance could use some explanation: we had stuff fixed in
      -next, and initially backported one commit to v4.3. Now, turns out we
      need more fixes, and we could cherry-pick them all without conflicts if
      we reverted the backported one first. So did that to not have to edit
      and backport them all.

      * tag 'drm-intel-fixes-2015-10-16' of 
git://anongit.freedesktop.org/drm-intel:
        drm/i915: Add primary plane to mask if it's visible
        drm/i915: Move sprite/cursor plane disable to intel_sanitize_crtc()
        drm/i915: Assign hwmode after encoder state readout
        Revert "drm/i915: Add primary plane to mask if it's visible"
        drm/i915: Deny wrapping an userptr into a framebuffer
        drm/i915: Enable DPLL VGA mode before P1/P2 divider write
        drm/i915: Restore lost DPLL register write on gen2-4
        drm/i915: Flush pipecontrol post-sync writes
        drm/i915: Fix kerneldoc for i915_gem_shrink_all

  commit 8832317f662c06f5c06e638f57bfe89a71c9b266
  Author: Vasant Hegde <hegdevasant@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 15:53:29 2015 +0530

      powerpc/rtas: Validate rtas.entry before calling enter_rtas()

      Currently we do not validate rtas.entry before calling enter_rtas(). This
      leads to a kernel oops when user space calls rtas system call on a powernv
      platform (see below). This patch adds code to validate rtas.entry before
      making enter_rtas() call.

        Oops: Exception in kernel mode, sig: 4 [#1]
        SMP NR_CPUS=1024 NUMA PowerNV
        task: c000000004294b80 ti: c0000007e1a78000 task.ti: c0000007e1a78000
        NIP: 0000000000000000 LR: 0000000000009c14 CTR: c000000000423140
        REGS: c0000007e1a7b920 TRAP: 0e40   Not tainted  
(3.18.17-340.el7_1.pkvm3_1_0.2400.1.ppc64le)
        MSR: 1000000000081000 <HV,ME>  CR: 00000000  XER: 00000000
        CFAR: c000000000009c0c SOFTE: 0
        NIP [0000000000000000]           (null)
        LR [0000000000009c14] 0x9c14
        Call Trace:
        [c0000007e1a7bba0] [c00000000041a7f4] avc_has_perm_noaudit+0x54/0x110 
(unreliable)
        [c0000007e1a7bd80] [c00000000002ddc0] ppc_rtas+0x150/0x2d0
        [c0000007e1a7be30] [c000000000009358] syscall_exit+0x0/0x98

      Cc: stable@xxxxxxxxxxxxxxx # v3.2+
      Fixes: 55190f88789a ("powerpc: Add skeleton PowerNV platform")
      Reported-by: NAGESWARA R. SASTRY <nasastry@xxxxxxxxxx>
      Signed-off-by: Vasant Hegde <hegdevasant@xxxxxxxxxxxxxxxxxx>
      [mpe: Reword change log, trim oops, and add stable + fixes]
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 37363bc03e0b53c45e98f34e35c75b55611417e0
  Merge: 30730c7 2a6c521
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Thu Oct 22 09:15:10 2015 +1000

      Merge branch 'linux-4.3' of 
git://anongit.freedesktop.org/nouveau/linux-2.6 into drm-fixes

      Just one fix from Ilia to resolve various issues that have resulted from
      buffer eviction.

      * 'linux-4.3' of git://anongit.freedesktop.org/nouveau/linux-2.6:
        drm/nouveau/gem: return only valid domain when there's only one

  commit 2a6c521bb41ce862e43db46f52e7681d33e8d771
  Author: Ilia Mirkin <imirkin@xxxxxxxxxxxx>
  Date:   Tue Oct 20 01:15:39 2015 -0400

      drm/nouveau/gem: return only valid domain when there's only one

      On nv50+, we restrict the valid domains to just the one where the buffer
      was originally created. However after the buffer is evicted to system
      memory, we might move it back to a different domain that was not
      originally valid. When sharing the buffer and retrieving its GEM_INFO
      data, we still want the domain that will be valid for this buffer in a
      pushbuf, not the one where it currently happens to be.

      This resolves fdo#92504 and several others. These are due to suspend
      evicting all buffers, making it more likely that they temporarily end up
      in the wrong place.

      Cc: stable@xxxxxxxxxxxxxxx
      Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=92504
      Signed-off-by: Ilia Mirkin <imirkin@xxxxxxxxxxxx>
      Signed-off-by: Ben Skeggs <bskeggs@xxxxxxxxxx>

  commit 30730c7f5943b3beace1e29f7f1476e05de3da14
  Author: Adam Richter <adamrichter4@xxxxxxxxx>
  Date:   Fri Oct 16 03:33:02 2015 -0700

      drm: fix mutex leak in drm_dp_get_mst_branch_device

      In Linux 4.3-rc5, there is an error case in drm_dp_get_branch_device
      that returns without releasing mgr->lock, resulting a spew of kernel
      messages about a kernel work function possibly having leaked a mutex
      and presumably more serious adverse consequences later.  This patch
      changes the error to "goto out" to unlock the mutex before returning.

      [airlied: grabbed from drm-next as it fixes something we've seen]

      Signed-off-by: Adam J. Richter <adam_richter2004@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 8a70dd2669200ce83255ed8c5ebef7e59f9e8707
  Merge: 7f67786 ba2374f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 06:32:48 2015 +0900

      Merge tag 'for-linus-20151021' of git://git.infradead.org/intel-iommu

      Pull intel-iommu bugfix from David Woodhouse:
       "This contains a single fix, for when the IOMMU API is used to overlay
        an existing mapping comprised of 4KiB pages, with a mapping that can
        use superpages.

        For the *first* superpage in the new mapping, we were correctly¹
        freeing the old bottom-level page table page and clearing the link to
        it, before installing the superpage.  For subsequent superpages,
        however, we weren't.  This causes a memory leak, and a warning about
        setting a PTE which is already set.

        ¹ Well, not *entirely* correctly.  We just free the page table pages
          right there and then, which is wrong.  In fact they should only be
          freed *after* the IOTLB is flushed so we know the hardware will no
          longer be looking at them....  and in fact I note that the IOTLB
          flush is completely missing from the intel_iommu_map() code path,
          although it needs to be there if it's permitted to overwrite
          existing mappings.

          Fixing those is somewhat more intrusive though, and will probably
          need to wait for 4.4 at this point"

      * tag 'for-linus-20151021' of git://git.infradead.org/intel-iommu:
        iommu/vt-d: fix range computation when making room for large pages

  commit 7f67786330ba500ebd7c62ff52b5f7cc6336358f
  Merge: be0e198 08b137d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 06:31:27 2015 +0900

      Merge tag 'mmc-v4.3-rc5' of git://git.linaro.org/people/ulf.hansson/mmc

      Pull MMC bugfix from Ulf Hansson:
       "Here's yet another MMC fix intended for v4.3 rc7.  I don't expect to
        send any further pull requests for 4.3 rc[n].

        MMC core:
         - Don't re-tune in the reset sequence to allow re-init of the card"

      * tag 'mmc-v4.3-rc5' of git://git.linaro.org/people/ulf.hansson/mmc:
        mmc: core: Fix init_card in 52Mhz

  commit e3d006ce8180a0c025ce66bdc89bbc125f85be57
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Oct 21 15:45:13 2015 -0300

      perf annotate: Add debug message for out of bounds sample

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-q0lde9ajs84oi38nlyjcqbwg@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 8b8cde49586566471d65af9a59e25d3edb941387
  Author: Andi Kleen <ak@xxxxxxxxxxxxxxx>
  Date:   Tue Oct 20 11:46:36 2015 -0700

      perf evsel: Print branch filter state with -vv

      Add a missing field to the perf_event_attr debug output.

      Signed-off-by: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Acked-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445366797-30894-4-git-send-email-andi@xxxxxxxxxxxxxx
      [ Print it between config2 and sample_regs_user (peterz)]
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 0ca81a2840f77855bbad1b9f172c545c4dc9e6a4
  Author: Doron Tsur <doront@xxxxxxxxxxxx>
  Date:   Sun Oct 11 15:58:17 2015 +0300

      IB/cm: Fix rb-tree duplicate free and use-after-free

      ib_send_cm_sidr_rep could sometimes erase the node from the sidr
      (depending on errors in the process). Since ib_send_cm_sidr_rep is
      called both from cm_sidr_req_handler and cm_destroy_id, cm_id_priv
      could be either erased from the rb_tree twice or not erased at all.
      Fixing that by making sure it's erased only once before freeing
      cm_id_priv.

      Fixes: a977049dacde ('[PATCH] IB: Add the kernel CM implementation')
      Signed-off-by: Doron Tsur <doront@xxxxxxxxxxxx>
      Signed-off-by: Matan Barak <matanb@xxxxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 09dc1387c9c06cdaf55bc99b35238bd2ec0aed4b
  Author: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
  Date:   Wed Oct 21 21:31:49 2015 +0200

      drm/vmwgfx: Stabilize the command buffer submission code

      This commit addresses some stability problems with the command buffer
      submission code recently introduced:

      1) Make the vmw_cmdbuf_man_process() function handle reruns internally to
      avoid losing interrupts if the caller forgets to rerun on -EAGAIN.
      2) Handle default command buffer allocations using inline command buffers.
      This avoids rare allocation deadlocks.
      3) In case of command buffer errors we might lose fence submissions.
      Therefore send a new fence after each command buffer error. This will help
      avoid lengthy fence waits.

      Signed-off-by: Thomas Hellstrom <thellstrom@xxxxxxxxxx>
      Reviewed-by: Sinclair Yeh <syeh@xxxxxxxxxx>

  commit 17bc08f0d1b17d6d5e4967c1b430af627c5f2041
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 18:03:10 2015 +0300

      Bluetooth: Remove unnecessary hci_explicit_connect_lookup function

      There's only one user of this helper which can be replaces with a call
      to hci_pend_le_action_lookup() and a check for params->explicit_connect.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 1ede9868f6577e2bd7eda1a05cd6812aff5c6c8a
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 18:03:07 2015 +0300

      Bluetooth: Remove redundant (and possibly wrong) flag clearing

      There's no need to clear the HCI_CONN_ENCRYPT_PEND flag in
      smp_failure. In fact, this may cause the encryption tracking to get
      out of sync as this has nothing to do with HCI activity.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b5c2b6214c609f2be4c020c0be90758b5feeb446
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 18:03:09 2015 +0300

      Bluetooth: Add hdev helper variable to hci_le_create_connection_cancel

      The hci_le_create_connection_cancel() function needs to use the hdev
      pointer in many places so add a variable for it to avoid the need to
      dereference the hci_conn every time.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit ec182f0397e7065dabf13a99fc745fcab0bdc641
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 18:03:03 2015 +0300

      Bluetooth: Remove unnecessary indentation in unpair_device()

      Instead of doing all of the LE-specific handling in an else-branch in
      unpair_device() create a 'done' label for the BR/EDR branch to jump to
      and then remove the else-branch completely.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit f5ad4ffceba0b34adb0d896a069b81fc68f2d7b6
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 18:03:02 2015 +0300

      Bluetooth: 6lowpan: Use hci_conn_hash_lookup_le() when possible

      Use the new hci_conn_hash_lookup_le() API to look up LE connections.
      This way we're guaranteed exact matches that also take into account
      the address type.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 9d4c1cc15b14b4a96ddfcfac533a12f9f527c129
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 18:03:01 2015 +0300

      Bluetooth: Use hci_conn_hash_lookup_le() when possible

      Use the new hci_conn_hash_lookup_le() API to look up LE connections.
      This way we're guaranteed exact matches that also take into account
      the address type.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 1b51c7b6e878a2df6fdb5bcf51f966eb46a330e0
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 18:03:00 2015 +0300

      Bluetooth: Add hci_conn_hash_lookup_le() helper function

      Many of the existing LE connection lookups are forced to use
      hci_conn_hash_lookup_ba() which doesn't take into account the address
      type. What's worse, most of the users don't bother checking that the
      returned address type matches what was wanted.

      This patch adds a new helper API to look up LE connections based on
      their address and address type, paving the way to have the
      hci_conn_hash_lookup_ba() users converted to do more precise lookups.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 85813a7ec774b982899c82f86c52cad47588f863
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 18:02:59 2015 +0300

      Bluetooth: Add le_addr_type() helper function

      The mgmt code needs to convert from mgmt/L2CAP address types to HCI in
      many places. Having a dedicated helper function for this simplifies
      code by shortening it and removing unnecessary 'addr_type' variables.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit ad355e383d826e3506c3caaa0fe991fd112de47b
  Merge: b10d92a 0d99749
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Wed Oct 21 17:46:56 2015 +0200

      Merge tag 'kvm-arm-for-v4.3-rc7' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kvmarm/kvmarm into kvm-master

      A late round of KVM/ARM fixes for v4.3-rc7, fixing:
       - A bug where level-triggered interrupts lowered from userspace
         are still routed to the guest
       - A memory leak an a failed initialization path
       - A build error under certain configurations
       - Several timer bugs introduced with moving the timer to the active
         state handling instead of the masking trick.

  commit 55f41297576ddb7868af2f13f3a8107178dee2d0
  Merge: 0690f4f db347f1
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Oct 21 17:03:37 2015 +0200

      Merge tag 'mvebu-fixes-4.3-2' of git://git.infradead.org/linux-mvebu into 
fixes

      Merge "mvebu fixes for 4.3 (part 2)" from Gregory CLEMENT:

      Fix wrong compatible for A385 DB AP preventing using suspend

      * tag 'mvebu-fixes-4.3-2' of git://git.infradead.org/linux-mvebu:
        ARM: mvebu: correct a385-db-ap compatible string

  commit 0690f4f2ef487259e9ce39f575c48c89745058f2
  Merge: 6701ef0 b28fec1
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Oct 21 17:02:13 2015 +0200

      Merge tag 'samsung-fixes-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kgene/linux-samsung into fixes

      Merge "Samsung 2nd fixes for v4.3" from Kukjin Kim:

      - fix SOC detection of exynos thermal on exynos5260
      - fix audio card detection on Peach boards
      - fix double of_node_put() when parsing child power domains

      * tag 'samsung-fixes-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kgene/linux-samsung:
        thermal: exynos: Fix register read in TMU
        ARM: dts: Fix audio card detection on Peach boards
        ARM: EXYNOS: Fix double of_node_put() when parsing child power domains

  commit 6701ef0318f76a9765a3fc762cbac405e024a8c2
  Merge: 4f1d841 57df538
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Oct 21 17:01:14 2015 +0200

      Merge tag 'omap-for-v4.3/fixes-rc6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap into fixes

      Merge "Fixes for omaps for v4.3-rc cycle" from Tony Lindgren:

      - Fix oops with LPAE and moew than 2GB of memory by enabling
        ZONE_DMA for LPAE. Probably no need for stable on this one as we
        only recently ran into this with the mainline kernel

      - Fix imprecise external abort caused by bogus SRAM init. This affects
        dm814x recently merged, so no need for stable on this one AFAIK

      * tag 'omap-for-v4.3/fixes-rc6' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap:
        ARM: OMAP2+: Fix imprecise external abort caused by bogus SRAM init
        ARM: OMAP2+: Fix oops with LPAE and more than 2GB of memory

  commit 6ac311ae8bfb47de09f349e781e26373944d2ee3
  Author: Elad Raz <eladr@xxxxxxxxxxxx>
  Date:   Mon Oct 19 15:37:25 2015 +0300

      Adding switchdev ageing notification on port bridged

      Configure ageing time to the HW for newly bridged device

      CC: Scott Feldman <sfeldma@xxxxxxxxx>
      CC: Jiri Pirko <jiri@xxxxxxxxxxx>
      Signed-off-by: Elad Raz <eladr@xxxxxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Acked-by: Scott Feldman <sfeldma@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 50010c20597d14667eff0fdb628309986f195230
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Mon Oct 19 13:16:49 2015 +0300

      irda: precedence bug in irlmp_seq_hb_idx()

      This is decrementing the pointer, instead of the value stored in the
      pointer.  KASan detects it as an out of bounds reference.

      Reported-by: "Berry Cheng ç¨?å??(æ??æ·¼)" <chengmiao.cj@xxxxxxxxxxxxxxx>
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ca88ea1247dfee094e2467a3578eaec9bdf0833a
  Author: Joe Jin <joe.jin@xxxxxxxxxx>
  Date:   Mon Oct 19 13:37:17 2015 +0800

      xen-netfront: update num_queues to real created

      Sometimes xennet_create_queues() may failed to created all requested
      queues, we need to update num_queues to real created to avoid NULL
      pointer dereference.

      Signed-off-by: Joe Jin <joe.jin@xxxxxxxxxx>
      Cc: Boris Ostrovsky <boris.ostrovsky@xxxxxxxxxx>
      Cc: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Wei Liu <wei.liu2@xxxxxxxxxx>
      Cc: Ian Campbell <ian.campbell@xxxxxxxxxx>
      Cc: David S. Miller <davem@xxxxxxxxxxxxx>
      Reviewed-by: Boris Ostrovsky <boris.ostrovsky@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f6a835bb04ca34b6fd337eea0544a871ba2349b8
  Author: Gao feng <omarapazanadi@xxxxxxxxx>
  Date:   Sun Oct 18 23:35:56 2015 +0800

      vsock: fix missing cleanup when misc_register failed

      reset transport and unlock if misc_register failed.

      Signed-off-by: Gao feng <omarapazanadi@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 10be15ff6c33f1dc0a96cae6089dc2268834e568
  Merge: f3c9f95 968200f
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 21 07:36:51 2015 -0700

      Merge branch 'mv643xx-fixes'

      Philipp Kirchhofer says:

      ====================
      net: mv643xx_eth: TSO TX data corruption fixes

      as previously discussed [1] the mv643xx_eth driver has some
      issues with data corruption when using TCP segmentation offload (TSO).

      The following patch set improves this situation by fixing two data
      corruption bugs in the TSO TX path.

      Before applying the patches repeatedly accessing large files located on
      a SMB share on my NSA325 NAS with TSO enabled resulted in different
      hash sums, which confirmed that data corruption is happening during
      file transfer. After applying the patches the hash sums were the same.

      As this is my first patch submission please feel free to point out any
      issues with the patch set.

      [1] http://thread.gmane.org/gmane.linux.network/336530
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 968200f322daccc6f08fee26fe1bb4232e460408
  Author: Philipp Kirchhofer <philipp@xxxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 16:02:44 2015 +0200

      net: mv643xx_eth: Defer writing the first TX descriptor when using TSO

      To prevent a race between the TX DMA engine and the CPU the writing of the
      first transmit descriptor must be deferred until all following descriptors
      have been updated. The network card may otherwise start transmitting 
before
      all packet descriptors are set up correctly, which leads to data 
corruption
      or an aborted transmit operation.

      This deferral is already done in the non-TSO TX path, implement it also in
      the TSO TX path.

      Signed-off-by: Philipp Kirchhofer <philipp@xxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 91986fd3d335a2ea651bc85cf5a03f2f61a2aa34
  Author: Philipp Kirchhofer <philipp@xxxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 16:02:43 2015 +0200

      net: mv643xx_eth: Ensure proper data alignment in TSO TX path

      The TX DMA engine requires that buffers with a size of 8 bytes or smaller
      must be 64 bit aligned. This requirement may be violated when doing TSO,
      as in this case larger skb frags can be broken up and transmitted in small
      parts with then inappropriate alignment.

      Fix this by checking for proper alignment before handing a buffer to the
      DMA engine. If the data is misaligned realign it by copying it into the
      TSO header data area.

      Signed-off-by: Philipp Kirchhofer <philipp@xxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9299b24712400d1cfe3dcf3e5dcb6cac2940df56
  Author: Dave Martin <Dave.Martin@xxxxxxx>
  Date:   Thu Jul 30 16:36:25 2015 +0100

      arm64: Constify hwcap name string arrays

      The hwcap string arrays used for generating the contents of
      /proc/cpuinfo are currently arrays of non-const pointers.

      There's no need for these pointers to be mutable, so this patch makes
      them const so that they can be moved to .rodata.

      Signed-off-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 4db8e5ea6b07ae83e4361aee3f967f7126e01fa4
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:55 2015 +0100

      arm64/kvm: Make use of the system wide safe values

      Use the system wide safe value from the new API for safer
      decisions

      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Cc: kvmarm@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Acked-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 3085bb01b40676d946a13064483ab2819ae3b010
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:54 2015 +0100

      arm64/debug: Make use of the system wide safe value

      Use the system wide value of ID_AA64DFR0 to make safer decisions

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit fe80f9f2da1006a4308c2bc018ee1d67f10dd8d0
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:53 2015 +0100

      arm64: Move FP/ASIMD hwcap handling to common code

      The FP/ASIMD is detected in fpsimd_init(), which is built-in
      unconditionally. Lets move the hwcap handling to the central place.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 37b01d53ceefa390d6eee7a82f3c156b64951bf3
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:52 2015 +0100

      arm64/HWCAP: Use system wide safe values

      Extend struct arm64_cpu_capabilities to handle the HWCAP detection
      and make use of the system wide value of the feature registers for
      a reliable set of HWCAPs.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit da8d02d19ffdd201af632c755a473b6df4b3e4cc
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:51 2015 +0100

      arm64/capabilities: Make use of system wide safe value

      Now that we can reliably read the system wide safe value for a
      feature register, use that to compute the system capability.
      This patch also replaces the 'feature-register-specific'
      methods with a generic routine to check the capability.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit dbb4e152b8da1f977d9d8cd7e494ab4ee3622f72
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:50 2015 +0100

      arm64: Delay cpu feature capability checks

      At the moment we run through the arm64_features capability list for
      each CPU and set the capability if one of the CPU supports it. This
      could be problematic in a heterogeneous system with differing 
capabilities.
      Delay the CPU feature checks until all the enabled CPUs are up(i.e,
      smp_cpus_done(), so that we can make better decisions based on the
      overall system capability. Once we decide and advertise the capabilities
      the alternatives can be applied. From this state, we cannot roll back
      a feature to disabled based on the values from a new hotplugged CPU,
      due to the runtime patching and other reasons. So, for all new CPUs,
      we need to make sure that they have the established system capabilities.
      Failing which, we bring the CPU down, preventing it from turning online.
      Once the capabilities are decided, any new CPU booting up goes through
      verification to ensure that it has all the enabled capabilities and also
      invokes the respective enable() method on the CPU.

      The CPU errata checks are not delayed and is still executed per-CPU
      to detect the respective capabilities. If we ever come across a non-errata
      capability that needs to be checked on each-CPU, we could introduce them 
via
      a new capability table(or introduce a flag), which can be processed per 
CPU.

      The next patch will make the feature checks use the system wide
      safe value of a feature register.

      NOTE: The enable() methods associated with the capability is scheduled
      on all the CPUs (which is the only use case at the moment). If we need
      a different type of 'enable()' which only needs to be run once on any CPU,
      we should be able to handle that when needed.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      [catalin.marinas@xxxxxxx: static variable and coding style fixes]
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit ce8b602c694c9482e0ffb7432cd59fa2276673fe
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:49 2015 +0100

      arm64: Refactor check_cpu_capabilities

      check_cpu_capabilities runs through a given list of caps and
      checks if the system has the cap, updates the system capability
      bitmap and also runs any enable() methods associated with them.
      All of this is not quite obvious from the name 'check'. This
      patch splits the check_cpu_capabilities into two parts :

      1) update_cpu_capabilities
       => Runs through the given list and updates the system
          wide capability map.
      2) enable_cpu_capabilities
       => Runs through the given list and invokes enable() (if any)
          for the caps enabled on the system.

      Cc: Andre Przywara <andre.przywara@xxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Suggested-by: Catalin Marinas <catalin.marinsa@xxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit c1e8656cbae139c8aaf34d7b802edecbc8a1cf58
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:48 2015 +0100

      arm64: Cleanup mixed endian support detection

      Make use of the system wide safe register to decide the support
      for mixed endian.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit b3f1537893b54d0f42f52e0f4cde5e17e21f564c
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:47 2015 +0100

      arm64: Read system wide CPUID value

      Add an API for reading the safe CPUID value across the
      system from the new infrastructure.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 3086d391f992984def0aa6aa4a36f54853c58536
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:46 2015 +0100

      arm64: Consolidate CPU Sanity check to CPU Feature infrastructure

      This patch consolidates the CPU Sanity check to the new infrastructure.

      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 3c739b57108436211c7f798ba3de0bb0cd8ef469
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:45 2015 +0100

      arm64: Keep track of CPU feature registers

      This patch adds an infrastructure to keep track of the CPU feature
      registers on the system. For each register, the infrastructure keeps
      track of the system wide safe value of the feature bits. Also, tracks
      the which fields of a register should be matched strictly across all
      the CPUs on the system for the SANITY check infrastructure.

      The feature bits are classified into following 3 types depending on
      the implication of the possible values. This information is used to
      decide the safe value for a feature.

      LOWER_SAFE  - The smaller value is safer
      HIGHER_SAFE - The bigger value is safer
      EXACT       - We can't decide between the two, so a predefined safe_value 
is used.

      This infrastructure will be later used to make better decisions for:

       - Kernel features (e.g, KVM, Debug)
       - SANITY Check
       - CPU capability
       - ELF HWCAP
       - Exposing CPU Feature register to userspace.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      [catalin.marinas@xxxxxxx: whitespace fix]
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit ce98a677d897dbaac86905652292fab1eeeb2b93
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:44 2015 +0100

      arm64: Handle width of a cpuid feature

      Introduce a helper to extract cpuid feature for any given
      width.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 12d11817eaafa414eeb47af684093eb2165ebe37
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:43 2015 +0100

      arm64: Move /proc/cpuinfo handling code

      This patch moves the /proc/cpuinfo handling code:

      arch/arm64/kernel/{setup.c to cpuinfo.c}

      No functional changes

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit cdcf817b7e4b62b935d8797f7d07ea0b97760884
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:42 2015 +0100

      arm64: Move mixed endian support detection

      Move the mixed endian support detection code to cpufeature.c
      from cpuinfo.c. This also moves the update_cpu_features()
      used by mixed endian detection code, which will get more
      functionality.

      Also moves the ID register field shifts to asm/sysreg.h,
      where all the useful definitions will end up in later patches.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 9cdf8ec4a86b9310111f741bbaf11df9120e0482
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:41 2015 +0100

      arm64: Move cpu feature detection code

      This patch moves the CPU feature detection code from
       arch/arm64/kernel/{setup.c to cpufeature.c}

      The plan is to consolidate all the CPU feature handling
      in cpufeature.c.

      Apart from changing pr_fmt from "alternatives" to "cpu features",
      there are no functional changes.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 4b998ff1885eecd3dc330bf057e24667c1db84a4
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:40 2015 +0100

      arm64: Delay cpuinfo_store_boot_cpu

      At the moment the boot CPU stores the cpuinfo long before the
      PERCPU areas are initialised by the kernel. This could be problematic
      as the non-boot CPU data structures might get copied with the data
      from the boot CPU, giving us no chance to detect if a particular CPU
      updated its cpuinfo. This patch delays the boot cpu store to
      smp_prepare_boot_cpu().

      Also kills the setup_processor() which no longer does meaningful
      work.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 3a75578efae64b94d76eacbf8adf2a3ab13c6aa1
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:39 2015 +0100

      arm64: Delay ELF HWCAP initialisation until all CPUs are up

      Delay the ELF HWCAP initialisation until all the (enabled) CPUs are
      up, i.e, smp_cpus_done(). This is in preparation for detecting the
      common features across the CPUS and creating a consistent ELF HWCAP
      for the system.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 64f17818977d0989f7d05347670777611b295799
  Author: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
  Date:   Mon Oct 19 14:24:38 2015 +0100

      arm64: Make the CPU information more clear

      At early boot, we print the CPU version/revision. On a heterogeneous
      system, we could have different types of CPUs. Print the CPU info for
      all active cpus. Also, the secondary CPUs prints the message only when
      they turn online.

      Also, remove the redundant 'revision' information which doesn't
      make any sense without the 'variant' field.

      Signed-off-by: Suzuki K. Poulose <suzuki.poulose@xxxxxxx>
      Tested-by: Dave Martin <Dave.Martin@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit e27c5b9d23168cc2cb8fec147ae7ed1f7a2005c3
  Author: Tejun Heo <tj@xxxxxxxxxx>
  Date:   Tue Oct 13 18:14:19 2015 -0400

      writeback: remove broken rbtree_postorder_for_each_entry_safe() usage in 
cgwb_bdi_destroy()

      a20135ffbc44 ("writeback: don't drain bdi_writeback_congested on bdi
      destruction") added rbtree_postorder_for_each_entry_safe() which is
      used to remove all entries; however, according to Cody, the iterator
      isn't safe against operations which may rebalance the tree.  Fix it by
      switching to repeatedly removing rb_first() until empty.

      Signed-off-by: Tejun Heo <tj@xxxxxxxxxx>
      Reported-by: Cody P Schafer <dev@xxxxxxxxxx>
      Fixes: a20135ffbc44 ("writeback: don't drain bdi_writeback_congested on 
bdi destruction")
      Link: 
http://lkml.kernel.org/g/1443997973-1700-1-git-send-email-dev@xxxxxxxxxx
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit eb9fae328faff9807a4ab5c1834b19f34dd155d4
  Merge: c8fdc32 4f41b1c
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 21 07:00:59 2015 -0700

      Merge branch 'tcp-rack'

      Yuchung Cheng says:

      ====================
      RACK loss detection

      RACK (Recent ACK) loss recovery uses the notion of time instead of
      packet sequence (FACK) or counts (dupthresh).

      It's inspired by the FACK heuristic in tcp_mark_lost_retrans(): when a
      limited transmit (new data packet) is sacked in recovery, then any
      retransmission sent before that newly sacked packet was sent must have
      been lost, since at least one round trip time has elapsed.

      But that existing heuristic from tcp_mark_lost_retrans()
      has several limitations:
        1) it can't detect tail drops since it depends on limited transmit
        2) it's disabled upon reordering (assumes no reordering)
        3) it's only enabled in fast recovery but not timeout recovery

      RACK addresses these limitations with a core idea: an unacknowledged
      packet P1 is deemed lost if a packet P2 that was sent later is is
      s/acked, since at least one round trip has passed.

      Since RACK cares about the time sequence instead of the data sequence
      of packets, it can detect tail drops when a later retransmission is
      s/acked, while FACK or dupthresh can't. For reordering RACK uses a
      dynamically adjusted reordering window ("reo_wnd") to reduce false
      positives on ever (small) degree of reordering, similar to the delayed
      Early Retransmit.

      In the current patch set RACK is only a supplemental loss detection
      and does not trigger fast recovery. However we are developing RACK
      to replace or consolidate FACK/dupthresh, early retransmit, and
      thin-dupack. These heuristics all implicitly bear the time notion.
      For example, the delayed Early Retransmit is simply applying RACK
      to trigger the fast recovery with small inflight.

      RACK requires measuring the minimum RTT. Tracking a global min is less
      robust due to traffic engineering pathing changes. Therefore it uses a
      windowed filter by Kathleen Nichols. The min RTT can also be useful
      for various other purposes like congestion control or stat monitoring.

      This patch has been used on Google servers for well over 1 year. RACK
      has also been implemented in the QUIC protocol. We are submitting an
      IETF draft as well.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4f41b1c58a32537542f14c1150099131613a5e8a
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Oct 16 21:57:47 2015 -0700

      tcp: use RACK to detect losses

      This patch implements the second half of RACK that uses the the most
      recent transmit time among all delivered packets to detect losses.

      tcp_rack_mark_lost() is called upon receiving a dubious ACK.
      It then checks if an not-yet-sacked packet was sent at least
      "reo_wnd" prior to the sent time of the most recently delivered.
      If so the packet is deemed lost.

      The "reo_wnd" reordering window starts with 1msec for fast loss
      detection and changes to min-RTT/4 when reordering is observed.
      We found 1msec accommodates well on tiny degree of reordering
      (<3 pkts) on faster links. We use min-RTT instead of SRTT because
      reordering is more of a path property but SRTT can be inflated by
      self-inflicated congestion. The factor of 4 is borrowed from the
      delayed early retransmit and seems to work reasonably well.

      Since RACK is still experimental, it is now used as a supplemental
      loss detection on top of existing algorithms. It is only effective
      after the fast recovery starts or after the timeout occurs. The
      fast recovery is still triggered by FACK and/or dupack threshold
      instead of RACK.

      We introduce a new sysctl net.ipv4.tcp_recovery for future
      experiments of loss recoveries. For now RACK can be disabled by
      setting it to 0.

      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 659a8ad56f490279f0efee43a62ffa1ac914a4e0
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Oct 16 21:57:46 2015 -0700

      tcp: track the packet timings in RACK

      This patch is the first half of the RACK loss recovery.

      RACK loss recovery uses the notion of time instead
      of packet sequence (FACK) or counts (dupthresh). It's inspired by the
      previous FACK heuristic in tcp_mark_lost_retrans(): when a limited
      transmit (new data packet) is sacked, then current retransmitted
      sequence below the newly sacked sequence must been lost,
      since at least one round trip time has elapsed.

      But it has several limitations:
      1) can't detect tail drops since it depends on limited transmit
      2) is disabled upon reordering (assumes no reordering)
      3) only enabled in fast recovery ut not timeout recovery

      RACK (Recently ACK) addresses these limitations with the notion
      of time instead: a packet P1 is lost if a later packet P2 is s/acked,
      as at least one round trip has passed.

      Since RACK cares about the time sequence instead of the data sequence
      of packets, it can detect tail drops when later retransmission is
      s/acked while FACK or dupthresh can't. For reordering RACK uses a
      dynamically adjusted reordering window ("reo_wnd") to reduce false
      positives on ever (small) degree of reordering.

      This patch implements tcp_advanced_rack() which tracks the
      most recent transmission time among the packets that have been
      delivered (ACKed or SACKed) in tp->rack.mstamp. This timestamp
      is the key to determine which packet has been lost.

      Consider an example that the sender sends six packets:
      T1: P1 (lost)
      T2: P2
      T3: P3
      T4: P4
      T100: sack of P2. rack.mstamp = T2
      T101: retransmit P1
      T102: sack of P2,P3,P4. rack.mstamp = T4
      T205: ACK of P4 since the hole is repaired. rack.mstamp = T101

      We need to be careful about spurious retransmission because it may
      falsely advance tp->rack.mstamp by an RTT or an RTO, causing RACK
      to falsely mark all packets lost, just like a spurious timeout.

      We identify spurious retransmission by the ACK's TS echo value.
      If TS option is not applicable but the retransmission is acknowledged
      less than min-RTT ago, it is likely to be spurious. We refrain from
      using the transmission time of these spurious retransmissions.

      The second half is implemented in the next patch that marks packet
      lost using RACK timestamp.

      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 625a5e109a3ed6f36a1008a43069a3462b44a424
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Oct 16 21:57:45 2015 -0700

      tcp: skb_mstamp_after helper

      a helper to prepare the first main RACK patch.

      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 77c631273dc1305a89698929decafa6e43bea645
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Oct 16 21:57:44 2015 -0700

      tcp: add tcp_tsopt_ecr_before helper

      a helper to prepare the main RACK patch

      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit af82f4e84866ecd360a53f770d6217637116e6c1
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Oct 16 21:57:43 2015 -0700

      tcp: remove tcp_mark_lost_retrans()

      Remove the existing lost retransmit detection because RACK subsumes
      it completely. This also stops the overloading the ack_seq field of
      the skb control block.

      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f672258391b42a5c7cc2732c9c063e56a85c8dbe
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Oct 16 21:57:42 2015 -0700

      tcp: track min RTT using windowed min-filter

      Kathleen Nichols' algorithm for tracking the minimum RTT of a
      data stream over some measurement window. It uses constant space
      and constant time per update. Yet it almost always delivers
      the same minimum as an implementation that has to keep all
      the data in the window. The measurement window is tunable via
      sysctl.net.ipv4.tcp_min_rtt_wlen with a default value of 5 minutes.

      The algorithm keeps track of the best, 2nd best & 3rd best min
      values, maintaining an invariant that the measurement time of
      the n'th best >= n-1'th best. It also makes sure that the three
      values are widely separated in the time window since that bounds
      the worse case error when that data is monotonically increasing
      over the window.

      Upon getting a new min, we can forget everything earlier because
      it has no value - the new min is less than everything else in the
      window by definition and it's the most recent. So we restart fresh
      on every new min and overwrites the 2nd & 3rd choices. The same
      property holds for the 2nd & 3rd best.

      Therefore we have to maintain two invariants to maximize the
      information in the samples, one on values (1st.v <= 2nd.v <=
      3rd.v) and the other on times (now-win <=1st.t <= 2nd.t <= 3rd.t <=
      now). These invariants determine the structure of the code

      The RTT input to the windowed filter is the minimum RTT measured
      from ACK or SACK, or as the last resort from TCP timestamps.

      The accessor tcp_min_rtt() returns the minimum RTT seen in the
      window. ~0U indicates it is not available. The minimum is 1usec
      even if the true RTT is below that.

      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9e45a3e36b363cc4c79c70f2b4f994e66543a219
  Author: Yuchung Cheng <ycheng@xxxxxxxxxx>
  Date:   Fri Oct 16 21:57:41 2015 -0700

      tcp: apply Kern's check on RTTs used for congestion control

      Currently ca_seq_rtt_us does not use Kern's check. Fix that by
      checking if any packet acked is a retransmit, for both RTT used
      for RTT estimation and congestion control.

      Fixes: 5b08e47ca ("tcp: prefer packet timing to TS-ECR for RTT")
      Signed-off-by: Yuchung Cheng <ycheng@xxxxxxxxxx>
      Signed-off-by: Neal Cardwell <ncardwell@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f3c9f95056acab715328ee63a80ddf5fd32c0a28
  Merge: aebd994 d88ecb3
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 21 06:41:51 2015 -0700

      Merge branch 'smsc-energy-detect'

      Heiko Schocher says:

      ====================
      net, phy, smsc: add posibility to disable energy detect mode

      On some boards the energy enable detect mode leads in
      trouble with some switches, so make the enabling of
      this mode configurable through DT.
      Therefore the property "smsc,disable-energy-detect" is
      introduced.

      Patch 1 introduces phy-handle support for the ti,cpsw
      driver. This is needed now for the smsc phy.

      Patch 2 adds the disable energy mode functionality
      to the smsc phy

      Changes in v2:
      - add comments from Florian Fainelli
        - I did not change disable property name into enable
          because I fear to break existing behaviour
        - add smsc vendor prefix
        - remove CONFIG_OF and use __maybe_unused
        - introduce "phy-handle" ability into ti,cpsw
          driver, so I can remove bogus:
            if (!of_node && dev->parent->of_node)
                of_node = dev->parent->of_node;
          construct. Therefore new patch for the ti,cpsw
          driver is necessary.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d88ecb373bd1877acc43e13311a8e0e6daffc3d2
  Author: Heiko Schocher <hs@xxxxxxx>
  Date:   Sat Oct 17 06:04:36 2015 +0200

      net: phy: smsc: disable energy detect mode

      On some boards the energy enable detect mode leads in
      trouble with some switches, so make the enabling of
      this mode configurable through DT.

      Signed-off-by: Heiko Schocher <hs@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9e42f715264ff158478fa30eaed847f6e131366b
  Author: Heiko Schocher <hs@xxxxxxx>
  Date:   Sat Oct 17 06:04:35 2015 +0200

      drivers: net: cpsw: add phy-handle parsing

      add the ability to parse "phy-handle". This
      is needed for phys, which have a DT node, and
      need to parse DT properties.

      Signed-off-by: Heiko Schocher <hs@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit aebd99477f03950fb05b29c7248656167198bf2d
  Author: Simon Arlott <simon@xxxxxxxxxxx>
  Date:   Thu Oct 15 21:00:22 2015 +0100

      bcm63xx_enet: check 1000BASE-T advertisement configuration

      If a gigabit ethernet PHY is connected to a fast ethernet MAC,
      then it can detect 1000 support from the partner but not use it.

      This results in a forced speed of 1000 and RX/TX failure.

      Check for 1000BASE-T support and then check the advertisement
      configuration before setting the MAC speed to 1000mbit.

      Signed-off-by: Simon Arlott <simon@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c8fdc324916a864de753db6de6423b048c20cc0f
  Merge: 26440c8 a1f192c
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Wed Oct 21 06:29:56 2015 -0700

      Merge branch 'master' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue

      Jeff Kirsher says:

      ====================
      Intel Wired LAN Driver Updates 2015-10-19

      This series contains updates to i40e and i40evf only.

      Kiran adds a spinlock around code accessing VSI MAC filter list to
      ensure that we are synchronizing access to the filter list, otherwise
      we can end up with multiple accesses at the same time which can cause
      the VSI MAC filter list to get in an unstable or corrupted state.

      Jesse fixes overlong BIT defines, where the RSS enabling call were
      mistakenly missed.  Also fixes a bug where the enable function was
      enabling the interrupt twice while trying to update the two interrupt
      throttle rate thresholds for Rx and Tx, while refactoring the IRQ
      enable function to simplify reading the flow.  Addressed the high
      CPU utilization of some small streaming workloads that the driver should
      reduce CPU in.

      Anjali fixes two X722 issues with respect to EEPROM checksum verify and
      reading NVM version info.  Fixed where a mask value was accidentally
      replaced with a bit mask causing Flow Director sideband to be broken.

      Alex Duyck fixes areas of the drivers which run from hard interrupt
      context or with interrupts already disabled in netpoll, so use
      napi_schedule_irqoff() instead of napi_schedule().

      Mitch fixes the VF drivers to not easily give up when it is not able
      to communicate with the PF driver.

      Carolyn fixes a problem where our tools MAC loopback test, after driver
      unbind would fail because the hardware was configured for multiqueue and
      unbind operation did not clear this configuration.  Also fixed a issue
      where the NVMUpdate tool gets bad data from the PHY when using the PHY
      NVM feature because of contention on the MDIO interface from getting
      PHY capability calls from the driver during regular operations.

      Catherine fixed an issue where we were checking if autoneg was allowed
      to change before checking if autoneg was changing, these checks need to
      be in the reverse order.

      Jean Sacren fixes up an function header comment to align the kernel-docs
      with the actual code.

      v2: Cleaned up the use of spin_is_locked() in patch 1 based on feedback
          from David Miller, since it always evaluates to zero on uni-processor
          builds
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8ce783dc5ea3af3a213ac9b4d9d2ccfeeb9c9058
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Wed Oct 21 15:21:31 2015 +0300

      Bluetooth: Fix missing hdev locking for LE scan cleanup

      The hci_conn objects don't have a dedicated lock themselves but rely
      on the caller to hold the hci_dev lock for most types of access. The
      hci_conn_timeout() function has so far sent certain HCI commands based
      on the hci_conn state which has been possible without holding the
      hci_dev lock.

      The recent changes to do LE scanning before connect attempts added
      even more operations to hci_conn and hci_dev from hci_conn_timeout,
      thereby exposing potential race conditions with the hci_dev and
      hci_conn states.

      As an example of such a race, here there's a timeout but an
      l2cap_sock_connect() call manages to race with the cleanup routine:

      [Oct21 08:14] l2cap_chan_timeout: chan ee4b12c0 state BT_CONNECT
      [  +0.000004] l2cap_chan_close: chan ee4b12c0 state BT_CONNECT
      [  +0.000002] l2cap_chan_del: chan ee4b12c0, conn f3141580, err 111, 
state BT_CONNECT
      [  +0.000002] l2cap_sock_teardown_cb: chan ee4b12c0 state BT_CONNECT
      [  +0.000005] l2cap_chan_put: chan ee4b12c0 orig refcnt 4
      [  +0.000010] hci_conn_drop: hcon f53d56e0 orig refcnt 1
      [  +0.000013] l2cap_chan_put: chan ee4b12c0 orig refcnt 3
      [  +0.000063] hci_conn_timeout: hcon f53d56e0 state BT_CONNECT
      [  +0.000049] hci_conn_params_del: addr ee:0d:30:09:53:1f (type 1)
      [  +0.000002] hci_chan_list_flush: hcon f53d56e0
      [  +0.000001] hci_chan_del: hci0 hcon f53d56e0 chan f4e7ccc0
      [  +0.004528] l2cap_sock_create: sock e708fc00
      [  +0.000023] l2cap_chan_create: chan ee4b1770
      [  +0.000001] l2cap_chan_hold: chan ee4b1770 orig refcnt 1
      [  +0.000002] l2cap_sock_init: sk ee4b3390
      [  +0.000029] l2cap_sock_bind: sk ee4b3390
      [  +0.000010] l2cap_sock_setsockopt: sk ee4b3390
      [  +0.000037] l2cap_sock_connect: sk ee4b3390
      [  +0.000002] l2cap_chan_connect: 00:02:72:d9:e5:8b -> ee:0d:30:09:53:1f 
(type 2) psm 0x00
      [  +0.000002] hci_get_route: 00:02:72:d9:e5:8b -> ee:0d:30:09:53:1f
      [  +0.000001] hci_dev_hold: hci0 orig refcnt 8
      [  +0.000003] hci_conn_hold: hcon f53d56e0 orig refcnt 0

      Above the l2cap_chan_connect() shouldn't have been able to reach the
      hci_conn f53d56e0 anymore but since hci_conn_timeout didn't do proper
      locking that's not the case. The end result is a reference to hci_conn
      that's not in the conn_hash list, resulting in list corruption when
      trying to remove it later:

      [Oct21 08:15] l2cap_chan_timeout: chan ee4b1770 state BT_CONNECT
      [  +0.000004] l2cap_chan_close: chan ee4b1770 state BT_CONNECT
      [  +0.000003] l2cap_chan_del: chan ee4b1770, conn f3141580, err 111, 
state BT_CONNECT
      [  +0.000001] l2cap_sock_teardown_cb: chan ee4b1770 state BT_CONNECT
      [  +0.000005] l2cap_chan_put: chan ee4b1770 orig refcnt 4
      [  +0.000002] hci_conn_drop: hcon f53d56e0 orig refcnt 1
      [  +0.000015] l2cap_chan_put: chan ee4b1770 orig refcnt 3
      [  +0.000038] hci_conn_timeout: hcon f53d56e0 state BT_CONNECT
      [  +0.000003] hci_chan_list_flush: hcon f53d56e0
      [  +0.000002] hci_conn_hash_del: hci0 hcon f53d56e0
      [  +0.000001] ------------[ cut here ]------------
      [  +0.000461] WARNING: CPU: 0 PID: 1782 at lib/list_debug.c:56 
__list_del_entry+0x3f/0x71()
      [  +0.000839] list_del corruption, f53d56e0->prev is LIST_POISON2 
(00000200)

      The necessary fix is unfortunately more complicated than just adding
      hci_dev_lock/unlock calls to the hci_conn_timeout() call path.
      Particularly, the hci_conn_del() API, which expects the hci_dev lock to
      be held, performs a cancel_delayed_work_sync(&hcon->disc_work) which
      would lead to a deadlock if the hci_conn_timeout() call path tries to
      acquire the same lock.

      This patch solves the problem by deferring the cleanup work to a
      separate work callback. To protect against the hci_dev or hci_conn
      going away meanwhile temporary references are taken with the help of
      hci_dev_hold() and hci_conn_get().

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # 4.3

  commit f8f2dc4a7127725383c93b501fcc4e47871b0a9d
  Author: Bard Liao <bardliao@xxxxxxxxxxx>
  Date:   Wed Oct 21 16:18:18 2015 +0800

      ASoC: rt298: fix wrong setting of gpio2_en

      The register value to enable gpio2 was incorrect. So fix it.

      Signed-off-by: Bard Liao <bardliao@xxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>

  commit 53c656c4138511c2ba54df413dc29976cfa9f084
  Author: Paul Mackerras <paulus@xxxxxxxxx>
  Date:   Wed Oct 21 16:06:24 2015 +1100

      powerpc/powernv: Handle irq_happened flag correctly in off-line loop

      This fixes a bug where it is possible for an off-line CPU to fail to go
      into a low-power state (nap/sleep/winkle), and to become unresponsive to
      requests from the KVM subsystem to wake up and run a VCPU. What can
      happen is that a maskable interrupt of some kind (external, decrementer,
      hypervisor doorbell, or HMI) after we have called local_irq_disable() at
      the beginning of pnv_smp_cpu_kill_self() and before interrupts are
      hard-disabled inside power7_nap/sleep/winkle(). In this situation, the
      pending event is marked in the irq_happened flag in the PACA. This
      pending event prevents power7_nap/sleep/winkle from going to the
      requested low-power state; instead they return immediately. We don't
      deal with any of these pending event flags in the off-line loop in
      pnv_smp_cpu_kill_self() because power7_nap et al. return 0 in this case,
      so we will have srr1 == 0, and none of the processing to clear
      interrupts or doorbells will be done.

      Usually, the most obvious symptom of this is that a KVM guest will fail
      with a console message saying "KVM: couldn't grab cpu N".

      This fixes the problem by making sure we handle the irq_happened flags
      properly. First, we hard-disable before the off-line loop. Once we have
      hard-disabled, the irq_happened flags can't change underneath us. We
      unconditionally clear the DEC and HMI flags: there is no processing of
      timer interrupts while off-line, and the necessary HMI processing is all
      done in lower-level code. We leave the EE and DBELL flags alone for the
      first iteration of the loop, so that we won't fail to respond to a
      split-core request that came in just before hard-disabling. Within the
      loop, we handle external interrupts if the EE bit is set in irq_happened
      as well as if the low-power state was interrupted by an external
      interrupt. (We don't need to do the msgclr for a pending doorbell in
      irq_happened, because doorbells are edge-triggered and don't remain
      pending in hardware.) Then we clear both the EE and DBELL flags, and
      once clear, they cannot be set again (until this CPU comes online again,
      that is).

      This also fixes the debug check to not be done when we just ran a KVM
      guest or when the sleep didn't happen because of a pending event in
      irq_happened.

      Signed-off-by: Paul Mackerras <paulus@xxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 23316316c1af0677a041c81f3ad6efb9dc470b33
  Author: Paul Mackerras <paulus@xxxxxxxxx>
  Date:   Wed Oct 21 16:03:14 2015 +1100

      powerpc: Revert "Use the POWER8 Micro Partition Prefetch Engine in KVM HV 
on POWER8"

      This reverts commit 9678cdaae939 ("Use the POWER8 Micro Partition
      Prefetch Engine in KVM HV on POWER8") because the original commit had
      multiple, partly self-cancelling bugs, that could cause occasional
      memory corruption.

      In fact the logmpp instruction was incorrectly using register r0 as the
      source of the buffer address and operation code, and depending on what
      was in r0, it would either do nothing or corrupt the 64k page pointed to
      by r0.

      The logmpp instruction encoding and the operation code definitions could
      be corrected, but then there is the problem that there is no clearly
      defined way to know when the hardware has finished writing to the
      buffer.

      The original commit attempted to work around this by aborting the
      write-out before starting the prefetch, but this is ineffective in the
      case where the virtual core is now executing on a different physical
      core from the one where the write-out was initiated.

      These problems plus advice from the hardware designers not to use the
      function (since the measured performance improvement from using the
      feature was actually mostly negative), mean that reverting the code is
      the best option.

      Fixes: 9678cdaae939 ("Use the POWER8 Micro Partition Prefetch Engine in 
KVM HV on POWER8")
      Signed-off-by: Paul Mackerras <paulus@xxxxxxxxx>
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit cbf3ccd09d683abf1cacd36e3640872ee912d99b
  Author: Joerg Roedel <jroedel@xxxxxxx>
  Date:   Tue Oct 20 14:59:36 2015 +0200

      iommu/amd: Don't clear DTE flags when modifying it

      During device assignment/deassignment the flags in the DTE
      get lost, which might cause spurious faults, for example
      when the device tries to access the system management range.
      Fix this by not clearing the flags with the rest of the DTE.

      Reported-by: G. Richard Bellamy <rbellamy@xxxxxxxxxxxxx>
      Tested-by: G. Richard Bellamy <rbellamy@xxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Joerg Roedel <jroedel@xxxxxxx>

  commit 79ebdc9536c132eb92b4bcce26daaed7f4bf359e
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Oct 20 11:54:49 2015 +0200

      MAINTAINERS: Unify the microcode driver section

      Merge the AMD and Intel sections and generalize the file patterns.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Dave Jones <davej@xxxxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Len Brown <len.brown@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445334889-300-7-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit c595ac2bac930ce79f336c7a7e45e1ea38abfe16
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Oct 20 11:54:48 2015 +0200

      x86/microcode/intel: Move #ifdef DEBUG inside the function

      ... and save us the stub.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Dave Jones <davej@xxxxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Len Brown <len.brown@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445334889-300-6-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 6f7fc44bf1eef6768f9dcb527c737ab24a3203ac
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Oct 20 11:54:47 2015 +0200

      x86/microcode/amd: Remove maintainers from comments

      We have the MAINTAINERS file for that. Also, Andreas doesn't
      have the time for this work anymore.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andreas Herrmann <herrmann.der.user@xxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Dave Jones <davej@xxxxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Len Brown <len.brown@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445334889-300-5-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 6b26e1bf66bb4bf1b1b9b4f27d1f324875689cf0
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Oct 20 11:54:46 2015 +0200

      x86/microcode: Remove modularization leftovers

      Remove the remaining module functionality leftovers. Make
      "dis_ucode_ldr" an early_param and make it static again. Drop
      module aliases, autoloading table, description, etc.

      Bump version number, while at it.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Dave Jones <davej@xxxxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Len Brown <len.brown@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445334889-300-4-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit fe055896c040df571e4ff56fb196d6845130057b
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Oct 20 11:54:45 2015 +0200

      x86/microcode: Merge the early microcode loader

      Merge the early loader functionality into the driver proper. The
      diff is huge but logically, it is simply moving code from the
      _early.c files into the main driver.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Dave Jones <davej@xxxxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Len Brown <len.brown@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445334889-300-3-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 9a2bc335f100a0f6ee6392b9f97ac4188d84db1d
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Tue Oct 20 11:54:44 2015 +0200

      x86/microcode: Unmodularize the microcode driver

      Make CONFIG_MICROCODE a bool. It was practically a bool already anyway,
      since early loader was forcing it to =y.

      Regardless, there's no real reason to have something be a module which
      gets built-in on the majority of installations out there. And its not
      like there's noticeable change in functionality - we still can load late
      microcode - just the module glue disappears.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arjan van de Ven <arjan@xxxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Dave Jones <davej@xxxxxxxxxxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Len Brown <len.brown@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445334889-300-2-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 3d45ac4b35cbdf942f2a45b2b927f2ef6a8bda48
  Author: Jan Beulich <JBeulich@xxxxxxxx>
  Date:   Mon Oct 19 04:35:44 2015 -0600

      timers/x86/hpet: Type adjustments

      Standardize on bool instead of an inconsistent mixture of u8 and plain 
'int'.

      Also use u32 or 'unsigned int' instead of 'unsigned long' when a 32-bit 
type
      suffices, generating slightly better code on x86-64.

      Signed-off-by: Jan Beulich <jbeulich@xxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/5624E3A002000078000AC49A@xxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 221836e92cd5664de6fc2f1d836f6343ae5f2e43
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Mon Oct 19 10:41:17 2015 +0200

      x86/Kconfig/cpus: Fix/complete CPU type help texts

      Move the generic help text explaining each CPU type and what to
      select under the "Processor Family" prompt and not under the
      M486 option. Also, amend it with the missing options.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445244077-25120-1-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 81ffdcdd97d94110627caa81c23d5d780083731d
  Author: Andi Kleen <ak@xxxxxxxxxxxxxxx>
  Date:   Mon Oct 19 11:17:48 2015 +0200

      x86/mce: Fix thermal throttling reporting after kexec

      The per CPU thermal vector init code checks if the thermal
      vector is already installed and complains and bails out if it
      is.

      This happens after kexec, as kernel shut down does not clear the
      thermal vector APIC register.

      This causes two problems:

      1. So we always do not fully initialize thermal reports after
         kexec. The CPU is still likely initialized, as the previous
         kernel should have done it. But we don't set up the software
         pointer to the thermal vector, so reporting may end up with a
         unknown thermal interrupt message.

      2. Also it complains for every logical CPU, even though the
         value is actually derived from BP only.

      The problem is that we end up with one message per CPU, so on
      larger systems it becomes very noisy and messes up the otherwise
      nicely formatted CPU bootup numbers in the kernel log.

      Just remove the check. I checked the code and there's no valid
      code paths where the thermal init code for a CPU could be called
      multiple times.

      Why the kernel does not clean up this value on shutdown:

      The thermal monitoring is controlled per logical CPU thread.
      Normal shutdown code is just running on one CPU. To disable it
      we would need a broadcast NMI to all CPUs on shut down. That's
      overkill for this. So we just ignore it after kexec.

      Signed-off-by: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Reviewed-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Tony Luck <tony.luck@xxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445246268-26285-9-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 53b90c0c56b502056da83d768047dcf765bac9fb
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Mon Oct 19 11:17:47 2015 +0200

      kexec/crash: Say which char is the unrecognized

      It is helpful when the crashkernel cmdline parsing routines
      actually say which character is the unrecognized one. Make them
      do so.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Reviewed-by: Dave Young <dyoung@xxxxxxxxxx>
      Reviewed-by: Joerg Roedel <jroedel@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Baoquan He <bhe@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Jiri Kosina <jkosina@xxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Vivek Goyal <vgoyal@xxxxxxxxxx>
      Cc: WANG Chao <chaowang@xxxxxxxxxx>
      Cc: jerry_hoemann@xxxxxx
      Link: 
http://lkml.kernel.org/r/1445246268-26285-8-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 6f3760570e26eefc214e641b6daeddb7106240bb
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Mon Oct 19 11:17:46 2015 +0200

      x86/setup/crash: Check memblock_reserve() retval

      memblock_reserve() can fail but the crashkernel reservation code
      doesn't check that and this can lead the user into believing
      that the crashkernel region was actually reserved. Make sure we
      check that return value and we exit early with a failure message
      in the error case.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Reviewed-by: Dave Young <dyoung@xxxxxxxxxx>
      Reviewed-by: Joerg Roedel <jroedel@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Jiri Kosina <jkosina@xxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: WANG Chao <chaowang@xxxxxxxxxx>
      Cc: jerry_hoemann@xxxxxx
      Link: 
http://lkml.kernel.org/r/1445246268-26285-7-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f56d55781c1ff5663874775d0672ba954fe5634c
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Mon Oct 19 11:17:45 2015 +0200

      x86/setup/crash: Cleanup some more

      * Remove unused auto_set variable
      * Cleanup local function variable declarations
      * Reformat printk string and use pr_info()

      No functionality change.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Reviewed-by: Dave Young <dyoung@xxxxxxxxxx>
      Reviewed-by: Joerg Roedel <jroedel@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Jiri Kosina <jkosina@xxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: WANG Chao <chaowang@xxxxxxxxxx>
      Cc: jerry_hoemann@xxxxxx
      Link: 
http://lkml.kernel.org/r/1445246268-26285-6-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 606134f77ce22997fd2800d5937698d85c6990d9
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Mon Oct 19 11:17:44 2015 +0200

      x86/setup/crash: Remove alignment variable

      Use a macro instead. No functionality change.

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Reviewed-by: Dave Young <dyoung@xxxxxxxxxx>
      Reviewed-by: Joerg Roedel <jroedel@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Jiri Kosina <jkosina@xxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: WANG Chao <chaowang@xxxxxxxxxx>
      Cc: jerry_hoemann@xxxxxx
      Link: 
http://lkml.kernel.org/r/1445246268-26285-5-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 97eac21babe47e1a8ed4cac4f8874c5746cf6e36
  Author: Borislav Petkov <bp@xxxxxxx>
  Date:   Mon Oct 19 11:17:43 2015 +0200

      x86/setup: Cleanup crashkernel reservation functions

      * Shorten variable names
      * Realign code, space out for better readability

      No code changed:

        # arch/x86/kernel/setup.o:

         text    data     bss     dec     hex filename
         4543    3096   69904   77543   12ee7 setup.o.before
         4543    3096   69904   77543   12ee7 setup.o.after

      md5:
         8a1b7c6738a553ca207b56bd84a8f359  setup.o.before.asm
         8a1b7c6738a553ca207b56bd84a8f359  setup.o.after.asm

      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Reviewed-by: Dave Young <dyoung@xxxxxxxxxx>
      Reviewed-by: Joerg Roedel <jroedel@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Jiri Kosina <jkosina@xxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: WANG Chao <chaowang@xxxxxxxxxx>
      Cc: jerry_hoemann@xxxxxx
      Link: 
http://lkml.kernel.org/r/1445246268-26285-4-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 1a6775c1a2c2ed863699403cda517916c22aeb72
  Author: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
  Date:   Mon Oct 19 11:17:42 2015 +0200

      x86/amd_nb, EDAC: Rename amd_get_node_id()

      This function doesn't give us the "Node ID" as the function name
      suggests. Rather, it receives a PCI device as argument, checks
      the available F3 PCI device IDs in the system and returns the
      index of the matching Bus/Device IDs.

      Rename it to amd_pci_dev_to_node_id().

      No functional change is introduced.

      Suggested-by: Ingo Molnar <mingo@xxxxxxxxxx>
      Signed-off-by: Aravind Gopalakrishnan <Aravind.Gopalakrishnan@xxxxxxx>
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Suravee Suthikulpanit <Suravee.Suthikulpanit@xxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: linux-edac <linux-edac@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1445246268-26285-3-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit eb6db83d105914c246ac5875be76fd4b944833d5
  Author: Baoquan He <bhe@xxxxxxxxxx>
  Date:   Mon Oct 19 11:17:41 2015 +0200

      x86/setup: Do not reserve crashkernel high memory if low reservation 
failed

      People reported that when allocating crashkernel memory using
      the ",high" and ",low" syntax, there were cases where the
      reservation of the high portion succeeds but the reservation of
      the low portion fails.

      Then kexec can load the kdump kernel successfully, but booting
      the kdump kernel fails as there's no low memory.

      The low memory allocation for the kdump kernel can fail on large
      systems for a couple of reasons. For example, the manually
      specified crashkernel low memory can be too large and thus no
      adequate memblock region would be found.

      Therefore, we try to reserve low memory for the crash kernel
      *after* the high memory portion has been allocated. If that
      fails, we free crashkernel high memory too and return. The user
      can then take measures accordingly.

      Tested-by: Joerg Roedel <jroedel@xxxxxxx>
      Signed-off-by: Baoquan He <bhe@xxxxxxxxxx>
      [ Massage text. ]
      Signed-off-by: Borislav Petkov <bp@xxxxxxx>
      Reviewed-by: Joerg Roedel <jroedel@xxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Dave Young <dyoung@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Jiri Kosina <jkosina@xxxxxxx>
      Cc: Juergen Gross <jgross@xxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Mark Salter <msalter@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: WANG Chao <chaowang@xxxxxxxxxx>
      Cc: jerry_hoemann@xxxxxx
      Cc: yinghai@xxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1445246268-26285-2-git-send-email-bp@xxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 08b137d90eec51b0e90c42e123ca8ceb118d233f
  Author: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
  Date:   Mon Oct 12 17:22:23 2015 +0800

      mmc: core: Fix init_card in 52Mhz

      Suppose that we got a data crc error, and it triggers the mmc_reset.
      mmc_reset will call mmc_send_status to see if HW reset was supported.
      before issue CMD13, it will do retune, and if EMMC was in HS400 mode,
      it will reduce frequency to 52Mhz firstly, then results in card init
      was doing at 52Mhz.
      The mmc_send_status was originally only done for mmc_test, should drop
      it. And, rename the "eMMC hardware reset" to "Reset test", as we would
      also be able to use the test for SD-cards.

      Signed-off-by: Chaotian Jing <chaotian.jing@xxxxxxxxxxxx>
      Suggested-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Fixes: bd11e8bd03ca ("mmc: core: Flag re-tuning is needed on CRC errors")
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit e5a9f8d04660da7ef3a98260aa74c3976f9cb4cd
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Oct 16 17:54:47 2015 +0200

      mac80211: move station statistics into sub-structs

      Group station statistics by where they're (mostly) updated
      (TX, RX and TX-status) and group them into sub-structs of
      the struct sta_info.

      Also rename the variables since the grouping now makes it
      obvious where they belong.

      This makes it easier to identify where the statistics are
      updated in the code, and thus easier to think about them.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 976bd9efdae6a844079ba4a7898a38d229ef246c
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Oct 16 17:18:11 2015 +0200

      mac80211: move beacon_loss_count into ifmgd

      There's little point in keeping (and even sending to userspace)
      the beacon_loss_count value per station, since it can only apply
      to the AP on a managed-mode connection. Move the value to ifmgd,
      advertise it only in managed mode, and remove it from ethtool as
      it's available through better interfaces.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 763aa27a292113b6fd9f6ad8bf633edc9b13c98b
  Author: Johannes Berg <johannes.berg@xxxxxxxxx>
  Date:   Fri Oct 16 16:55:51 2015 +0200

      mac80211: remove sta->last_ack_signal

      This file only feeds a debugfs file that isn't very useful, so remove
      it. If necessary, we can add other ways to get this information, for
      example in the NL80211_CMD_PROBE_CLIENT response.

      Signed-off-by: Johannes Berg <johannes.berg@xxxxxxxxx>

  commit 81c1f74de3b6a9be0006a734d3584150f9c2e295
  Merge: f8273ba bc6f9ae
  Author: Kalle Valo <kvalo@xxxxxxxxxxxxxx>
  Date:   Wed Oct 21 11:07:55 2015 +0300

      Merge ath-next from ath.git

      Major changes:

      ath10k

      * add board 2 API support for automatically choosing correct board file
      * data path optimisations
      * disable PCI power save for qca988x and QCA99x0 due to interop reasons

      wil6210

      * BlockAckReq support
      * firmware crashdump using devcoredump
      * capture all frames with sniffer

  commit f8273bafcbc1bc04d1b139144f78f25c559f10c3
  Author: Eric Caruso <ejcaruso@xxxxxxxxxx>
  Date:   Wed Oct 14 12:34:11 2015 -0700

      brcm80211: Add support for brcm4371

      This is a new Broadcom chip and we should be able to recognize it.

      Signed-off-by: Eric Caruso <ejcaruso@xxxxxxxxxx>
      Acked-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 92121e69de8a982c0b33b359ce68657b3ec3c83d
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:21 2015 +0200

      brcmfmac: Properly set carrier state of netdev.

      Use the netif_carrier api to correctly set carrier state on the
      different modes.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 54b499d9ad10dd0ce9b4ac92507072cad0f37f7a
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:20 2015 +0200

      brcmfmac: Remove unused state AP creating.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit c443e169577c2dfb8172711ef4b765919d177429
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:19 2015 +0200

      brcmfmac: Move brcmf_c_preinit_dcmds prototype to correct file.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit bf2a7e0499b922b4d2ffc073a3d14cec93c33af1
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:18 2015 +0200

      brcmfmac: Add dump_station support to cfg80221 ops.

      With this feature it becomes possible to request a station
      assoc list.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit cae355dc90db2bd27bf5ed5400ab2a417a185faa
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:17 2015 +0200

      brcmfmac: Add RSSI information to get_station.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 124d517211e4322366f087774dadae136c6cec8b
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:16 2015 +0200

      brcmfmac: Fix station info rate information.

      Txrate and rxrate in get_station got assigned first with value
      in kbps and then divided by 100 to get it in 100kbps unit. The
      problem with that is that type of rate is u16 which resulted
      in incorrect values for high data rate values.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 2b76acdbc0431a7d9e87eacb27bb537a211bed16
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:15 2015 +0200

      brcmfmac: Rework p2p attach, use single method for p2p dev creation.

      When module param p2pon is used a p2p device is created at init.
      This patch reworks how this is done by using the same method as
      for a dynamically (by user space) created p2p device.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 43569bfaf6ed0ee5b44533ee9ded7e8323734687
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:14 2015 +0200

      brcmfmac: remove conversational comment

      Removing a comment that was only useful during the review of
      the change that introduced it and which should never have been
      submitted.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 4a3462843f9f363162314ca7667e24c146c7fa71
  Author: Franky Lin <frankyl@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:13 2015 +0200

      brcmfmac: rename firmware_path to alternative_fw_path

      In brcmfmac the module parameter "firmware_path" is used as an
      alternative relative path under the search path used by firmware_class
      or ueventhelper. Rename the parameter to alternative_fw_path to avoid
      confusion.

      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Franky Lin <frankyl@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 185f0eb0b5fab0c9bfd7c5d322e2cd05b951d6e8
  Author: Hante Meuleman <meuleman@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:12 2015 +0200

      brcmfmac: Fix race condition between USB probe/load and disconnect.

      When a USB device gets disconnected due to for example removal
      then it is possible that it is still in the loading phase due to
      the asynchronous load routines. These routines can then possible
      access memory which has been freed. Fix this by mutex locking the
      device init phase.

      Reviewed-by: Arend Van Spriel <arend@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit ff4445a8502cdf06969540c92bb201ee47e70351
  Author: Arend van Spriel <arend@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:33:11 2015 +0200

      brcmfmac: expose device memory to devcoredump subsystem

      Upon PSM watchdog event received from firmware the driver will obtain
      a memory snapshot of the device and expose it to user-space through
      the devcoredump framework. This will trigger a uevent.

      Reviewed-by: Hante Meuleman <meuleman@xxxxxxxxxxxx>
      Reviewed-by: Franky (Zhenhui) Lin <frankyl@xxxxxxxxxxxx>
      Reviewed-by: Pieter-Paul Giesberts <pieterpg@xxxxxxxxxxxx>
      Signed-off-by: Arend van Spriel <arend@xxxxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 26f1fad29ad973b0fb26a9ca3dcb2a73dde781aa
  Author: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
  Date:   Wed Oct 14 20:44:51 2015 -0400

      New driver: rtl8xxxu (mac80211)

      This is an alternate driver for a number of Realtek WiFi USB devices,
      including RTL8723AU, RTL8188CU, RTL8188RU, RTL8191CU, and RTL8192CU.
      It was written from scratch utilizing the Linux mac80211 stack.

      After spending months cleaning up the vendor provided rtl8723au
      driver, which comes with it's own 802.11 stack included, I decided to
      rewrite this driver from the bottom up.

      Many thanks to Johannes Berg for 802.11 insights and help and Larry
      Finger for help with the vendor driver.

      The full git log for the development of this driver can be found here:
      git git://git.kernel.org/pub/scm/linux/kernel/git/jes/linux.git
          branch rtl8723au-mac80211

      This driver is still under development, but has proven to be very
      stable for me. It currently supports station mode only. It has support
      for OFDM and CCK rates. It does lack certain features found in the
      staging driver, such as power management, AMPDU, and 40MHz channel
      support. In addition it does not support AD-HOC, AP, and monitor mode
      support at this point.

      The driver is known to work with the following devices:
      Lenovo Yoga (rtl8723au)
      TP-Link TL-WN823N (rtl8192cu)
      Etekcity 6R (rtl8188cu)
      Daffodil LAN03 (rtl8188cu)
      Alfa AWUS036NHR (rtl8188ru)

      Signed-off-by: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
      Signed-off-by: Kalle Valo <kvalo@xxxxxxxxxxxxxx>

  commit 213445b2b40e87e819c7d949ae7d97c30dcd0853
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Wed Oct 21 02:45:19 2015 +0200

      Bluetooth: btintel: Enable extra Intel vendor events

      The Intel Bluetooth controllers can emit extra vendor specific events in
      error conditions or for debugging purposes. To make the life easier for
      engineers, enable them by default. When the vendor_diag options has been
      enabled, then additional debug events are also enabled.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit e4c534bbacab81fc67c81ae8af263a70f35ffec9
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Wed Oct 21 01:31:45 2015 +0200

      Bluetooth: btusb: Set manufacturer for Intel bootloader devices

      For Intel bootloader devices, set the manufacturer information so that
      it becomes possible to decode the boot process.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 98a63aaf245e2522b0ddd86f38fb83883344bcaf
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Tue Oct 20 23:25:42 2015 +0200

      Bluetooth: Introduce driver specific post init callback

      Some drivers might have to restore certain settings after the init
      procedure has been completed. This driver callback allows them to hook
      into that stage. This callback is run just before the controller is
      declared as powered up.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit aee61f7aa89bbfa48b91628291d8685aa61c970f
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Tue Oct 20 21:30:45 2015 +0200

      Bluetooth: hci_uart: Provide initial manufacturer information

      Provide an early indication about the manufacturer information so that
      it can be forwarded into monitor channel.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 0f6925fa2907df58496cabc33fa4677c635e2223
  Author: Qu Wenruo <quwenruo@xxxxxxxxxxxxxx>
  Date:   Wed Oct 14 15:26:13 2015 +0800

      btrfs: Avoid truncate tailing page if fallocate range doesn't exceed 
inode size

      Current code will always truncate tailing page if its alloc_start is
      smaller than inode size.

      For example, the file extent layout is like:
      0 4K      8K      16K     32K
      |<-----Extent A---------------->|
      |<--Inode size: 18K---------->|

      But if calling fallocate even for range [0,4K), it will cause btrfs to
      re-truncate the range [16,32K), causing COW and a new extent.

      0 4K      8K      16K     32K
      |///////| <- Fallocate call range
      |<-----Extent A-------->|<--B-->|

      The cause is quite easy, just a careless btrfs_truncate_inode() in a
      else branch without extra judgment.
      Fix it by add judgment on whether the fallocate range is beyond isize.

      Signed-off-by: Qu Wenruo <quwenruo@xxxxxxxxxxxxxx>
      Signed-off-by: Chris Mason <clm@xxxxxx>

  commit 1904be1b6bb92058c8e00063dd59df2df294e258
  Author: Steven Rostedt (Red Hat) <rostedt@xxxxxxxxxxx>
  Date:   Tue Oct 20 21:48:02 2015 -0400

      tracing: Do not allow stack_tracer to record stack in NMI

      The code in stack tracer should not be executed within an NMI as it grabs
      spinlocks and stack tracing an NMI gives the possibility of causing a
      deadlock. Although this is safe on x86_64, because it does not perform 
stack
      traces when the task struct stack is not in use (interrupts and NMIs), it
      may be an issue for NMIs on i386 and other archs that use the same stack 
as
      the NMI.

      Signed-off-by: Steven Rostedt <rostedt@xxxxxxxxxxx>

  commit 9f7378a9d6ced1784e08d3e21a9ddb769523baf2
  Author: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
  Date:   Wed Oct 14 12:18:47 2015 +0200

      Bluetooth: l2cap_disconnection_req priority over shutdown

      There is a L2CAP protocol race between the local peer and
      the remote peer demanding disconnection of the L2CAP link.

      When L2CAP ERTM is used, l2cap_sock_shutdown() can be called
      from userland to disconnect L2CAP. However, there can be a
      delay introduced by waiting for ACKs. During this waiting
      period, the remote peer may have sent a Disconnection Request.
      Therefore, recheck the shutdown status of the socket
      after waiting for ACKs because there is no need to do
      further processing if the connection has gone.

      Signed-off-by: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
      Signed-off-by: Harish Jenny K N <harish_kandiga@xxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 04ba72e6b24f1e0e2221fcd73f08782870473fa1
  Author: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
  Date:   Wed Oct 14 12:18:46 2015 +0200

      Bluetooth: Reorganize mutex lock in l2cap_sock_shutdown()

      This commit reorganizes the mutex lock and is now
      only protecting l2cap_chan_close(). This is now consistent
      with other places where l2cap_chan_close() is called.

      If a conn connection exists, call
      mutex_lock(&conn->chan_lock) before calling l2cap_chan_close()
      to ensure other L2CAP protocol operations do not interfere.

      Note that the conn structure has to be protected from being
      freed as it is possible for the connection to be disconnected
      whilst the locks are not held. This solution allows the mutex
      lock to be used even when the connection has just been
      disconnected.

      This commit also reduces the scope of chan locking.

      The only place where chan locking is needed is the call to
      l2cap_chan_close(chan, 0) which if necessary closes the channel.
      Therefore, move the l2cap_chan_lock(chan) and
      l2cap_chan_lock(chan) locking calls to around
      l2cap_chan_close(chan, 0).

      This allows __l2cap_wait_ack(sk, chan) to be called with no
      chan locks being held so L2CAP messaging over the ACL link
      can be done unimpaired.

      Signed-off-by: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
      Signed-off-by: Harish Jenny K N <harish_kandiga@xxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit e7456437c15a2fd42cedd25c2b12b06876f285f0
  Author: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
  Date:   Wed Oct 14 12:18:45 2015 +0200

      Bluetooth: Unwind l2cap_sock_shutdown()

      l2cap_sock_shutdown() is designed to only action shutdown
      of the channel when shutdown is not already in progress.
      Therefore, reorganise the code flow by adding a goto
      to jump to the end of function handling when shutdown is
      already being actioned. This removes one level of code
      indentation and make the code more readable.

      Signed-off-by: Dean Jenkins <Dean_Jenkins@xxxxxxxxxx>
      Signed-off-by: Harish Jenny K N <harish_kandiga@xxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 09bf420f101c9d35ca0b5f539c7f03951fd2e24d
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 20 08:31:26 2015 +0200

      6lowpan: put mcast compression in an own function

      This patch moves the mcast compression algorithmn to an own function
      like all other compression/decompression methods in iphc.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit b5af9bdbfe6d497d27e5936a7d110fc5f64e7c0d
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 20 08:31:25 2015 +0200

      6lowpan: rework tc and flow label handling

      This patch reworks the handling of compression/decompression of traffic
      class and flow label handling. The current method is hard to understand,
      also doesn't checks if we can read the buffer from skb length.

      I tried to put the shifting operations into static inline functions and
      comment each steps which I did there to make it hopefully somewhat more
      readable. The big mess to deal with that is the that the ipv6 header
      bring the order "DSCP + ECN" but iphc uses "ECN + DSCP". Additional the
      DCSP + ECN bits are splitted in ipv6_hdr inside the priority and
      flow_lbl[0] fields.

      I tested these compressions by using fakelb 802.15.4 driver and
      manipulate the tc and flow label fields manually in function
      "__ip6_local_out" before the skb will be send to lower layers. Then I
      looked up the tc and flow label fields in wireshark on a wpan and lowpan
      interface.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit c8a3e7eb98236f7c88e6deddf9f330874070fa09
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 20 08:31:24 2015 +0200

      6lowpan: iphc: change define values

      This patch has the main goal to delete shift operations. Instead we
      doing masks and equals afterwards. E.g. for the SAM evaluation we
      masking only the SAM value which fits in iphc1 byte, then comparing with
      all possible SAM values over a switch case statement. We will not
      shifting the SAM value to somewhat readable anymore.
      Additional this patch slighty change the naming style like RFC 6282,
      e.g. TTL to HLIM and we will drop an errno now if CID flag is set,
      because we don't support it.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 028b2a8c16c7c6a482075fe42275a44fbe5463fa
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 20 08:31:23 2015 +0200

      6lowpan: remove lowpan_is_addr_broadcast

      This macro is used at 802.15.4 6LoWPAN only and can be replaced by
      memcmp with the interface broadcast address.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 6350047eb8dbd3dcf0ff29a637ece96db8f59d8d
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 20 08:31:22 2015 +0200

      6lowpan: move IPHC functionality defines

      This patch removes the IPHC related defines for doing bit manipulation
      from global 6lowpan header to the iphc file which should the only one
      implementation which use these defines.

      Also move next header compression defines to their nhc implementation.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 607b0bd3f2b9ac118f2c67dbd18c55f1f5aefeb1
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 20 08:31:21 2015 +0200

      6lowpan: nhc: move iphc manipulation out of nhc

      This patch moves the iphc setting of next header commpression bit inside
      iphc functionality. Setting of IPHC bits should be happen at iphc.c file
      only.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 478208e3b9988adc7ec2c480f237049aaf7c4609
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 13 13:42:59 2015 +0200

      6lowpan: remove lowpan_fetch_skb_u8

      This patch removes the lowpan_fetch_skb_u8 function for getting the iphc
      bytes. Instead we using the generic which has a len parameter to tell
      the amount of bytes to fetch.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 8911d7748ca360ef96cb207cc5165eb9c08669e5
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 13 13:42:58 2015 +0200

      6lowpan: cleanup lowpan_header_decompress

      This patch changes the lowpan_header_decompress function by removing
      inklayer related information from parameters. This is currently for
      supporting short and extended address for iphc handling in 802154.
      We don't support short address handling anyway right now, but there
      exists already code for handling short addresses in
      lowpan_header_decompress.

      The address parameters are also changed to a void pointer, so 6LoWPAN
      linklayer specific code can put complex structures as these parameters
      and cast it again inside the generic code by evaluating linklayer type
      before. The order is also changed by destination address at first and
      then source address, which is the same like all others functions where
      destination is always the first, memcpy, dev_hard_header,
      lowpan_header_compress, etc.

      This patch also moves the fetching of iphc values from 6LoWPAN linklayer
      specific code into the generic branch.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit a6f773891a836abfa16fcbb8af14c29c3e109336
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 13 13:42:57 2015 +0200

      6lowpan: cleanup lowpan_header_compress

      This patch changes the lowpan_header_compress function by removing
      unused parameters like "len" and drop static value parameters of
      protocol type. Instead we really check the protocol type inside inside
      the skb structure. Also we drop the use of IEEE802154_ADDR_LEN which is
      link-layer specific. Instead we using EUI64_ADDR_LEN which should always
      the default case for now.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit bf513fd6fc609590b7835c0dba624ccb9f8f9214
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 13 13:42:56 2015 +0200

      6lowpan: introduce LOWPAN_IPHC_MAX_HC_BUF_LEN

      This patch introduces the LOWPAN_IPHC_MAX_HC_BUF_LEN define which
      represent the worst-case supported IPHC buffer length. It's used to
      allocate the stack buffer space for creating the IPHC header.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit cefdb801c80736017b5a0d97a4a9f816d5a98fc4
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 13 13:42:55 2015 +0200

      bluetooth: 6lowpan: use lowpan dispatch helpers

      This patch adds a check if the dataroom of skb contains a dispatch value
      by checking if skb->len != 0. This patch also change the dispatch
      evaluation by the recently introduced helpers for checking the common
      6LoWPAN dispatch values for IPv6 and IPHC header.

      There was also a forgotten else branch which should drop the packet if
      no matching dispatch is available.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Acked-by: Jukka Rissanen <jukka.rissanen@xxxxxxxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 71cd2aa53dbf9eb8cb954fc9e65de8dab774b7f6
  Author: Alexander Aring <alex.aring@xxxxxxxxx>
  Date:   Tue Oct 13 13:42:54 2015 +0200

      mac802154: llsec: use kzfree

      This patch will use kzfree instead kfree for security related
      information which can be offered by acccident.

      Signed-off-by: Alexander Aring <alex.aring@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit a6ad2a6b9cc1d9d791aee5462cfb8528f366f1d4
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Mon Oct 19 10:51:47 2015 +0300

      Bluetooth: Fix removing connection parameters when unpairing

      The commit 89cbb0638e9b7 introduced support for deferred connection
      parameter removal when unpairing by removing them only once an
      existing connection gets disconnected. However, it failed to address
      the scenario when we're *not* connected and do an unpair operation.

      What makes things worse is that most user space BlueZ versions will
      first issue a disconnect request and only then unpair, meaning the
      buggy code will be triggered every time. This effectively causes the
      kernel to resume scanning and reconnect to a device for which we've
      removed all keys and GATT database information.

      This patch fixes the issue by adding the missing call to the
      hci_conn_params_del() function to a branch which handles the case of
      no existing connection.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # 3.19+

  commit 22f8e9dbf671a2f36d90d3d8723a2a0c5227fa4b
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Tue Oct 20 00:53:33 2015 +0200

      Bluetooth: btusb: Add support for latest Apple controllers

      The latest Apple Bluetooth controllers with Broadcom chip in it have
      a small design change. Instead of including a USB hub with mouse and
      keyboard devices, they are now HID interfaces on the same device.

      T:  Bus=04 Lev=02 Prnt=02 Port=04 Cnt=01 Dev#= 39 Spd=12   MxCh= 0
      D:  Ver= 2.01 Cls=ef(misc ) Sub=02 Prot=01 MxPS=64 #Cfgs=  1
      P:  Vendor=05ac ProdID=8290 Rev= 0.79
      S:  Manufacturer=Broadcom Corp.
      S:  Product=Bluetooth USB Host Controller
      C:* #Ifs= 6 Cfg#= 1 Atr=e0 MxPwr=  0mA
      A:  FirstIf#= 2 IfCount= 4 Cls=ff(vend.) Sub=01 Prot=01
      I:* If#= 0 Alt= 0 #EPs= 1 Cls=03(HID  ) Sub=01 Prot=01 Driver=usbhid
      E:  Ad=85(I) Atr=03(Int.) MxPS=   8 Ivl=10ms
      I:* If#= 1 Alt= 0 #EPs= 1 Cls=03(HID  ) Sub=01 Prot=02 Driver=usbhid
      E:  Ad=86(I) Atr=03(Int.) MxPS=   8 Ivl=10ms
      I:* If#= 2 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=81(I) Atr=03(Int.) MxPS=  16 Ivl=1ms
      E:  Ad=82(I) Atr=02(Bulk) MxPS=  64 Ivl=0ms
      E:  Ad=02(O) Atr=02(Bulk) MxPS=  64 Ivl=0ms
      I:* If#= 3 Alt= 0 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=   0 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=   0 Ivl=1ms
      I:  If#= 3 Alt= 1 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=   9 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=   9 Ivl=1ms
      I:  If#= 3 Alt= 2 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  17 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  17 Ivl=1ms
      I:  If#= 3 Alt= 3 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  25 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  25 Ivl=1ms
      I:  If#= 3 Alt= 4 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  33 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  33 Ivl=1ms
      I:  If#= 3 Alt= 5 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  49 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  49 Ivl=1ms
      I:* If#= 4 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=btusb
      E:  Ad=84(I) Atr=02(Bulk) MxPS=  32 Ivl=0ms
      E:  Ad=04(O) Atr=02(Bulk) MxPS=  32 Ivl=0ms
      I:* If#= 5 Alt= 0 #EPs= 0 Cls=fe(app. ) Sub=01 Prot=01 Driver=(none)

      The general layout of Bluetooth devices is that interface 0 is the main
      interface and interface 1 is for audio data. This design obviously moves
      it to main interface 2 and audio data on interface 3.

      Starting with the MacBookPro12,1 (early 2015 models) the new Broadcom
      BCM943602CS cards are used which show this interface layout.

      usb 4-1.5: New USB device found, idVendor=05ac, idProduct=8290
      usb 4-1.5: New USB device strings: Mfr=1, Product=2, SerialNumber=0
      usb 4-1.5: Product: Bluetooth USB Host Controller
      usb 4-1.5: Manufacturer: Broadcom Corp.
      Bluetooth: hci0: BCM: chip id 102 build 0243
      Bluetooth: hci0: BCM: product 05ac:8290
      Bluetooth: hci0: BCM20703A1 Generic USB UHE Apple 20Mhz fcbga_X87

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 49a5f782d03888e8b55ed799e57a592b76ce32f6
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Tue Oct 20 02:30:48 2015 +0200

      Bluetooth: btusb: Set early vendor info for Intel and Broadcom

      For the controllers from Intel and Broadcom (including Apple), it is
      helpful to have the information about the manufacturer send out early.

      This patch sets the hdev->manufacturer information which will be send
      out before actually calling the vendor specific hdev->setup driver
      callback.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit e131d74a3afe2b44c3bc59dc4ff06bfd0481ab1a
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Tue Oct 20 02:30:47 2015 +0200

      Bluetooth: Add support setup stage internal notification event

      Before the vendor specific setup stage is triggered call back into the
      core to trigger an internal notification event. That event is used to
      send an index update to the monitor interface. With that specific event
      it is possible to update userspace with manufacturer information before
      any HCI command has been executed. This is useful for early stage
      debugging of vendor specific initialization sequences.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 18e0afab8ce3f1230ce3fef52b2e73374fd9c0e7
  Author: Dmitry Tunin <hanipouspilot@xxxxxxxxx>
  Date:   Fri Oct 16 11:45:26 2015 +0300

      Bluetooth: ath3k: Add support of AR3012 0cf3:817b device

      T: Bus=04 Lev=02 Prnt=02 Port=04 Cnt=01 Dev#= 3 Spd=12 MxCh= 0
      D: Ver= 1.10 Cls=e0(wlcon) Sub=01 Prot=01 MxPS=64 #Cfgs= 1
      P: Vendor=0cf3 ProdID=817b Rev=00.02
      C: #Ifs= 2 Cfg#= 1 Atr=e0 MxPwr=100mA
      I: If#= 0 Alt= 0 #EPs= 3 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      I: If#= 1 Alt= 0 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb

      BugLink: https://bugs.launchpad.net/bugs/1506615

      Signed-off-by: Dmitry Tunin <hanipouspilot@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit cd355ff071cd37e7197eccf9216770b2b29369f7
  Author: Dmitry Tunin <hanipouspilot@xxxxxxxxx>
  Date:   Mon Oct 5 19:29:33 2015 +0300

      Bluetooth: ath3k: Add new AR3012 0930:021c id

      This adapter works with the existing linux-firmware.

      T:  Bus=01 Lev=01 Prnt=01 Port=03 Cnt=02 Dev#=  3 Spd=12  MxCh= 0
      D:  Ver= 1.10 Cls=e0(wlcon) Sub=01 Prot=01 MxPS=64 #Cfgs=  1
      P:  Vendor=0930 ProdID=021c Rev=00.01
      C:  #Ifs= 2 Cfg#= 1 Atr=e0 MxPwr=100mA
      I:  If#= 0 Alt= 0 #EPs= 3 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      I:  If#= 1 Alt= 0 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb

      BugLink: https://bugs.launchpad.net/bugs/1502781

      Signed-off-by: Dmitry Tunin <hanipouspilot@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 2faf71ce90782d02e1710c12a19a2084fbbec5cc
  Author: Santtu Rekilä <sare@xxxxxxxxxx>
  Date:   Mon Oct 5 15:45:27 2015 +0300

      Bluetooth: btusb: Add support for Foxconn/Lenovo BCM43142A0 (105b:e065)

      Recently salvaged this 'BCM43142A0' WiFi/Bluetooth module from a Lenovo 
laptop
      and noticed it doesn't work automatically, because the USB IDs are missing
      from btusb.c.

      Plugging in the adapter on Linux 4.1 (dmesg):
      usb 3-3.3.3: new full-speed USB device number 90 using xhci_hcd
      usb 3-3.3.3: New USB device found, idVendor=105b, idProduct=e065
      usb 3-3.3.3: New USB device strings: Mfr=1, Product=2, SerialNumber=3
      usb 3-3.3.3: Product: BCM43142A0
      usb 3-3.3.3: Manufacturer: Broadcom Corp
      usb 3-3.3.3: SerialNumber: 0090A286559E

      /sys/kernel/debug/usb/devices:
      T:  Bus=03 Lev=03 Prnt=22 Port=02 Cnt=02 Dev#= 90 Spd=12   MxCh= 0
      D:  Ver= 2.00 Cls=ff(vend.) Sub=01 Prot=01 MxPS=64 #Cfgs=  1
      P:  Vendor=105b ProdID=e065 Rev= 1.12
      S:  Manufacturer=Broadcom Corp
      S:  Product=BCM43142A0
      S:  SerialNumber=0090A286559E
      C:* #Ifs= 4 Cfg#= 1 Atr=e0 MxPwr=  0mA
      I:* If#= 0 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=01 Prot=01 Driver=(none)
      E:  Ad=81(I) Atr=03(Int.) MxPS=  16 Ivl=1ms
      E:  Ad=82(I) Atr=02(Bulk) MxPS=  64 Ivl=0ms
      E:  Ad=02(O) Atr=02(Bulk) MxPS=  64 Ivl=0ms
      I:* If#= 1 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=(none)
      E:  Ad=83(I) Atr=01(Isoc) MxPS=   0 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=   0 Ivl=1ms
      I:  If#= 1 Alt= 1 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=(none)
      E:  Ad=83(I) Atr=01(Isoc) MxPS=   9 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=   9 Ivl=1ms
      I:  If#= 1 Alt= 2 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=(none)
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  17 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  17 Ivl=1ms
      I:  If#= 1 Alt= 3 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=(none)
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  25 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  25 Ivl=1ms
      I:  If#= 1 Alt= 4 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=(none)
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  33 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  33 Ivl=1ms
      I:  If#= 1 Alt= 5 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=(none)
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  49 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  49 Ivl=1ms
      I:* If#= 2 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=(none)
      E:  Ad=84(I) Atr=02(Bulk) MxPS=  32 Ivl=0ms
      E:  Ad=04(O) Atr=02(Bulk) MxPS=  32 Ivl=0ms
      I:* If#= 3 Alt= 0 #EPs= 0 Cls=fe(app. ) Sub=01 Prot=01 Driver=(none)

      Support for the chipset was added in commit 88f9b65 and a similar BCM43142
      based device was added in commit 8f0c304.

      To work around the issue, I got the firmware
      (BCM43142A0_001.001.011.0122.0153) off a Windows installation of Broadcom
      bluetooth driver and converted it to a .hcd -file via. hex2hcd and placed 
it
      in /lib/firmware/brcm/BCM.hcd. After that:

      $ echo "105b e065 0 19ff 0239" > /sys/bus/usb/drivers/btusb/new_id
      ...(plug in the adapter)
      usb 3-3.3.3: new full-speed USB device number 91 using xhci_hcd
      usb 3-3.3.3: New USB device found, idVendor=105b, idProduct=e065
      usb 3-3.3.3: New USB device strings: Mfr=1, Product=2, SerialNumber=3
      usb 3-3.3.3: Product: BCM43142A0
      usb 3-3.3.3: Manufacturer: Broadcom Corp
      usb 3-3.3.3: SerialNumber: 0090A286559E
      Bluetooth: hci0: BCM: chip id 70
      Bluetooth: hci0: BCM (001.001.011) build 0000
      bluetooth hci0: firmware: direct-loading firmware brcm/BCM.hcd
      Bluetooth: hci0: BCM (001.001.011) build 0154

      Bam, now it works for me!

      /sys/kernel/debug/usb/devices:
      T:  Bus=03 Lev=03 Prnt=22 Port=02 Cnt=02 Dev#= 92 Spd=12   MxCh= 0
      D:  Ver= 2.00 Cls=ff(vend.) Sub=01 Prot=01 MxPS=64 #Cfgs=  1
      P:  Vendor=105b ProdID=e065 Rev= 1.12
      S:  Manufacturer=Broadcom Corp
      S:  Product=BCM43142A0
      S:  SerialNumber=0090A286559E
      C:* #Ifs= 4 Cfg#= 1 Atr=e0 MxPwr=  0mA
      I:* If#= 0 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=81(I) Atr=03(Int.) MxPS=  16 Ivl=1ms
      E:  Ad=82(I) Atr=02(Bulk) MxPS=  64 Ivl=0ms
      E:  Ad=02(O) Atr=02(Bulk) MxPS=  64 Ivl=0ms
      I:* If#= 1 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=   0 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=   0 Ivl=1ms
      I:  If#= 1 Alt= 1 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=   9 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=   9 Ivl=1ms
      I:  If#= 1 Alt= 2 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  17 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  17 Ivl=1ms
      I:  If#= 1 Alt= 3 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  25 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  25 Ivl=1ms
      I:  If#= 1 Alt= 4 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  33 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  33 Ivl=1ms
      I:  If#= 1 Alt= 5 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  49 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  49 Ivl=1ms
      I:* If#= 2 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=(none)
      E:  Ad=84(I) Atr=02(Bulk) MxPS=  32 Ivl=0ms
      E:  Ad=04(O) Atr=02(Bulk) MxPS=  32 Ivl=0ms
      I:* If#= 3 Alt= 0 #EPs= 0 Cls=fe(app. ) Sub=01 Prot=01 Driver=(none)

      Signed-off-by: Santtu Rekilä <sare@xxxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 660f0fc07d21114549c1862e67e78b1cf0c90c29
  Author: David Herrmann <dh.herrmann@xxxxxxxxx>
  Date:   Mon Sep 7 12:05:41 2015 +0200

      Bluetooth: hidp: fix device disconnect on idle timeout

      The HIDP specs define an idle-timeout which automatically disconnects a
      device. This has always been implemented in the HIDP layer and forced a
      synchronous shutdown of the hidp-scheduler. This works just fine, but
      lacks a forced disconnect on the underlying l2cap channels. This has been
      broken since:

          commit 5205185d461d5902325e457ca80bd421127b7308
          Author: David Herrmann <dh.herrmann@xxxxxxxxx>
          Date:   Sat Apr 6 20:28:47 2013 +0200

              Bluetooth: hidp: remove old session-management

      The old session-management always forced an l2cap error on the ctrl/intr
      channels when shutting down. The new session-management skips this, as we
      don't want to enforce channel policy on the caller. In other words, if
      user-space removes an HIDP device, the underlying channels (which are
      *owned* and *referenced* by user-space) are still left active. User-space
      needs to call shutdown(2) or close(2) to release them.

      Unfortunately, this does not work with idle-timeouts. There is no way to
      signal user-space that the HIDP layer has been stopped. The API simply
      does not support any event-passing except for poll(2). Hence, we restore
      old behavior and force EUNATCH on the sockets if the HIDP layer is
      disconnected due to idle-timeouts (behavior of explicit disconnects
      remains unmodified). User-space can still call

          getsockopt(..., SO_ERROR, ...)

      ..to retrieve the EUNATCH error and clear sk_err. Hence, the channels can
      still be re-used (which nobody does so far, though). Therefore, the API
      still supports the new behavior, but with this patch it's also compatible
      to the old implicit channel shutdown.

      Cc: <stable@xxxxxxxxxxxxxxx> # 3.10+
      Reported-by: Mark Haun <haunma@xxxxxxxxx>
      Reported-by: Luiz Augusto von Dentz <luiz.dentz@xxxxxxxxx>
      Signed-off-by: David Herrmann <dh.herrmann@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 34cea41e84d5e87a0bd4d5388adab58d0cbc9532
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 18 22:48:28 2015 +0200

      Bluetooth: btbcm: Read USB product information for Apple devices

      For the Apple Bluetooth devices, read the USB product information and
      print them. This allows for easy mapping of chip and USB details.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 8045ce2197bf61b5b82bbe38fcc5feeaf7348ad1
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sun Oct 18 22:37:56 2015 +0200

      Bluetooth: btbcm: Fix firmware version number calculation

      The calculation for the firmware version number is off by one bit.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 6c9d435d359898868f71e8ba03f8d5f1cbccaa69
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sat Oct 17 14:39:27 2015 +0200

      Bluetooth: btusb: Mark BCM2045 devices to have broken link key commands

      The BCM2045 seems to have a problem with the stored link key commands
      and thus just mark them as broken.

        HCI Event: Command Complete (0x0e) plen 12
           Read Local Supported Features (0x04|0x0003) ncmd 1
           status 0x00
           Features: 0xff 0xff 0x8d 0xfe 0x8f 0xf9 0x00 0x80
        HCI Event: Command Complete (0x0e) plen 12
           Read Local Version Information (0x04|0x0001) ncmd 1
           status 0x00
           HCI Version: 2.0 (0x3) HCI Revision: 0x2000
           LMP Version: 2.0 (0x3) LMP Subversion: 0x410d
           Manufacturer: Broadcom Corporation (15)
        HCI Event: Command Complete (0x0e) plen 11
           Read Buffer Size (0x04|0x0005) ncmd 1
           status 0x00
           ACL MTU 1017:8 SCO MTU 64:0
        HCI Event: Command Complete (0x0e) plen 68
           Read Local Supported Commands (0x04|0x0002) ncmd 1
           status 0x00
           Commands: ffffff03feffcfffffffffff0300f8ff07
        HCI Event: Command Complete (0x0e) plen 4
           Delete Stored Link Key (0x03|0x0012) ncmd 1
           status 0x11 deleted 2048
           Error: Unsupported Feature or Parameter Value

      From the looks of it, this device seems genuine and not one of the
      devices that are neither Broadcom nor CSR devices in reality.

      T: Bus=04 Lev=02 Prnt=02 Port=02 Cnt=02 Dev#= 3 Spd=12 MxCh= 0
      D: Ver= 2.00 Cls=e0(wlcon) Sub=01 Prot=01 MxPS=64 #Cfgs= 1
      P: Vendor=0a5c ProdID=2045 Rev= 1.12
      S: Manufacturer=Broadcom Corp
      S: Product=BCM2045A
      S: SerialNumber=000000000000
      C:* #Ifs= 4 Cfg#= 1 Atr=a0 MxPwr=100mA
      I:* If#= 0 Alt= 0 #EPs= 3 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=81(I) Atr=03(Int.) MxPS= 16 Ivl=1ms
      E: Ad=82(I) Atr=02(Bulk) MxPS= 64 Ivl=0ms
      E: Ad=02(O) Atr=02(Bulk) MxPS= 64 Ivl=0ms
      I:* If#= 1 Alt= 0 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=83(I) Atr=01(Isoc) MxPS= 0 Ivl=1ms
      E: Ad=03(O) Atr=01(Isoc) MxPS= 0 Ivl=1ms
      I: If#= 1 Alt= 1 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=83(I) Atr=01(Isoc) MxPS= 9 Ivl=1ms
      E: Ad=03(O) Atr=01(Isoc) MxPS= 9 Ivl=1ms
      I: If#= 1 Alt= 2 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=83(I) Atr=01(Isoc) MxPS= 17 Ivl=1ms
      E: Ad=03(O) Atr=01(Isoc) MxPS= 17 Ivl=1ms
      I: If#= 1 Alt= 3 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=83(I) Atr=01(Isoc) MxPS= 25 Ivl=1ms
      E: Ad=03(O) Atr=01(Isoc) MxPS= 25 Ivl=1ms
      I: If#= 1 Alt= 4 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=83(I) Atr=01(Isoc) MxPS= 33 Ivl=1ms
      E: Ad=03(O) Atr=01(Isoc) MxPS= 33 Ivl=1ms
      I: If#= 1 Alt= 5 #EPs= 2 Cls=e0(wlcon) Sub=01 Prot=01 Driver=btusb
      E: Ad=83(I) Atr=01(Isoc) MxPS= 49 Ivl=1ms
      E: Ad=03(O) Atr=01(Isoc) MxPS= 49 Ivl=1ms
      I:* If#= 2 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=(none)
      E: Ad=84(I) Atr=02(Bulk) MxPS= 32 Ivl=0ms
      E: Ad=04(O) Atr=02(Bulk) MxPS= 32 Ivl=0ms
      I:* If#= 3 Alt= 0 #EPs= 0 Cls=fe(app. ) Sub=01 Prot=00 Driver=(none)

      Reported-and-tested-by: Julio González Mejías <juliolokooo@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 3e24767b78744c7f335ca8c485ab0a0dcec693ec
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sat Oct 17 16:00:28 2015 +0200

      Bluetooth: btintel: Add diagnostic support for older controllers

      For the older controllers like Wilkens Peak and Stone Peak, enabling the
      traces requires to switch into manufacturer mode first. This patch does
      exactly that, but only for these older controllers.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit d8270fbb3ffe9a29d81bdaa66c81ef021ba09651
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sat Oct 17 16:00:27 2015 +0200

      Bluetooth: btintel: Set quirk for non-persistent diagnostic settings

      For Intel controllers the diagnostics settings are not persistent over
      HCI Reset. So set the quirk to programm them again on every power up.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 7e995b9eadbe226e355b785a765fd90fe0487414
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Sat Oct 17 16:00:26 2015 +0200

      Bluetooth: Add new quirk for non-persistent diagnostic settings

      If the diagnostic settings are not persistent over HCI Reset, then this
      quirk can be used to tell the Bluetoth core about it. This will ensure
      that the settings are programmed correctly when the controller is
      powered up.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 7841d06e4398cff7d744539d1e6ea4026ceab2e5
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Sat Oct 17 00:03:38 2015 +0200

      Bluetooth: bpa10x: fix BT_HCIUART dependency

      The change to bpa10x to use the h4_recv_buf helper added a dependency
      on BT_HCIUART. This was incorrectly added to Kconfig by adding a
      'select' statement, which now in turn causes build failures
      when CONFIG_TTY is not set:

      warning: (BT_HCIBPA10X) selects BT_HCIUART which has unmet direct 
dependencies (NET && BT && TTY)
      vers/built-in.o: In function `hci_uart_tty_receive':
      fpga-mgr.c:(.text+0x282824): undefined reference to `tty_unthrottle'
      drivers/built-in.o: In function `hci_uart_tty_ioctl':
      fpga-mgr.c:(.text+0x282aa0): undefined reference to `n_tty_ioctl_helper'
      drivers/built-in.o: In function `hci_uart_flush':

      This replaces the 'select BT_HCIUART' dependency with 'depends on', which
      does not have this kind of problem. Alternatively, one could add 'depends
      on TTY', but avoiding 'select' on user-visible options is generally the
      preferred choice as that does not introduce the potential for dependency
      loops or incomplete dependency chains.

      Fixes: 91489919247a ("Bluetooth: bpa10x: Fix missing BT_HCIUART 
dependency")
      Fixes: 943cc592195e ("Bluetooth: bpa10x: Use h4_recv_buf helper for frame 
reassembly")
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 2220994e7187c15848c00c7d9dab632969533396
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Tue Oct 13 13:54:55 2015 +0200

      Bluetooth: btusb: Print information of Intel SfP lock states

      The lock states from Intel SfP controllers can only be read once before
      loading the firmware. So for debugging purposes, print them out.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit cad20c278085d893ebd616cd20c0747a8e9d53c7
  Author: Johan Hedberg <johan.hedberg@xxxxxxxxx>
  Date:   Mon Oct 12 13:36:19 2015 +0200

      Bluetooth: Don't use remote address type to decide IRK persistency

      There are LE devices on the market that start off by announcing their
      public address and then once paired switch to using private address.
      To be interoperable with such devices we should simply trust the fact
      that we're receiving an IRK from them to indicate that they may use
      private addresses in the future. Instead, simply tie the persistency
      to the bonding/no-bonding information the same way as for LTKs and
      CSRKs.

      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>
      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>

  commit 581d6fd60f37be587690655de05aee200b939e06
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Fri Oct 9 16:13:51 2015 +0200

      Bluetooth: Queue diagnostic messages together with HCI packets

      Sending diagnostic messages directly to the monitor socket might cause
      issues for devices processing their messages in interrupt context. So
      instead of trying to directly forward them, queue them up with the other
      HCI packets and lets them be processed by the sockets at the same time.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit bb77543ebd2e38c08412fec7eb1e35b902c5ff77
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Fri Oct 9 16:13:50 2015 +0200

      Bluetooth: Restrict valid packet types via HCI_CHANNEL_RAW

      When using the HCI_CHANNEL_RAW, restrict the packet types to valid ones
      from the Bluetooth specification.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 8cd4f581427213e086fca601bb9d8c7ea9cfeabc
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Fri Oct 9 16:13:49 2015 +0200

      Bluetooth: Remove quirk for HCI_VENDOR_PKT filter handling

      The HCI_VENDOR_PKT quirk was needed for BPA-100/105 devices that send
      these messages. Now that there is support for proper diagnostic channel
      this quirk is no longer needed.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 6d2e50d24098b1f80ad76db9a9cb9668c4bf6b50
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Fri Oct 9 14:42:08 2015 +0200

      Bluetooth: btintel: Add support for enabling tracing functionality

      For Intel controllers with firmware that allows tracing of baseband
      functionality this allows enabling it via set_diag driver callback.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 9d08f50401ac7eb32e3c9ae8c4c0a61c6b107fd1
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Thu Oct 8 20:23:08 2015 +0200

      Bluetooth: btusb: Add support for Broadcom LM_DIAG interface

      The Broadcom Bluetooth USB devices have a third interface that is
      dedicated for LM_DIAG messages. The If#= 2 describes this interface
      and it consists of one bulk in and one bulk endpoint.

      T:  Bus=01 Lev=01 Prnt=01 Port=01 Cnt=02 Dev#= 38 Spd=12   MxCh= 0
      D:  Ver= 2.00 Cls=ff(vend.) Sub=01 Prot=01 MxPS=64 #Cfgs=  1
      P:  Vendor=19ff ProdID=0239 Rev= 1.12
      S:  Manufacturer=Broadcom Corp
      S:  Product=BCM20702A0
      C:* #Ifs= 4 Cfg#= 1 Atr=e0 MxPwr=  0mA
      I:* If#= 0 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=81(I) Atr=03(Int.) MxPS=  16 Ivl=1ms
      E:  Ad=82(I) Atr=02(Bulk) MxPS=  64 Ivl=0ms
      E:  Ad=02(O) Atr=02(Bulk) MxPS=  64 Ivl=0ms
      I:* If#= 1 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=   0 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=   0 Ivl=1ms
      I:  If#= 1 Alt= 1 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=   9 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=   9 Ivl=1ms
      I:  If#= 1 Alt= 2 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  17 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  17 Ivl=1ms
      I:  If#= 1 Alt= 3 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  25 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  25 Ivl=1ms
      I:  If#= 1 Alt= 4 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  33 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  33 Ivl=1ms
      I:  If#= 1 Alt= 5 #EPs= 2 Cls=ff(vend.) Sub=01 Prot=01 Driver=btusb
      E:  Ad=83(I) Atr=01(Isoc) MxPS=  49 Ivl=1ms
      E:  Ad=03(O) Atr=01(Isoc) MxPS=  49 Ivl=1ms
      I:* If#= 2 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=btusb
      E:  Ad=84(I) Atr=02(Bulk) MxPS=  32 Ivl=0ms
      E:  Ad=04(O) Atr=02(Bulk) MxPS=  32 Ivl=0ms
      I:* If#= 3 Alt= 0 #EPs= 0 Cls=fe(app. ) Sub=01 Prot=01 Driver=(none)

      For all Broadcom based devices with this interface, the driver now
      claims it and schedules URBs for it. This allows to capture the
      LM_DIAG messages and allows forwarding them via hci_recv_diag into
      the diagnostic channel of the Bluetooth subsystem.

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 91489919247a48ce02686520eca25e9c9200dc6f
  Author: Marcel Holtmann <marcel@xxxxxxxxxxxx>
  Date:   Thu Oct 8 19:30:05 2015 +0200

      Bluetooth: bpa10x: Fix missing BT_HCIUART dependency

      Selecting just BT_HCIUART_H4 is not enough and it also needs to select
      BT_HCIUART to avoid this warning:

      warning: (BT_HCIBPA10X) selects BT_HCIUART_H4 which has unmet direct
      dependencies (NET && BT && BT_HCIUART)

      Signed-off-by: Marcel Holtmann <marcel@xxxxxxxxxxxx>
      Signed-off-by: Johan Hedberg <johan.hedberg@xxxxxxxxx>

  commit 681ab4696062f5aa939c9e04d058732306a97176
  Author: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
  Date:   Tue Oct 20 12:09:13 2015 -0400

      md/raid10: submit_bio_wait() returns 0 on success

      This was introduced with 9e882242c6193ae6f416f2d8d8db0d9126bd996b
      which changed the return value of submit_bio_wait() to return != 0 on
      error, but didn't update the caller accordingly.

      Fixes: 9e882242c6 ("block: Add submit_bio_wait(), remove from md")
      Cc: stable@xxxxxxxxxxxxxxx (v3.10)
      Reported-by: Bill Kuzeja <William.Kuzeja@xxxxxxxxxxx>
      Signed-off-by: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit 203d27b0226a05202438ddb39ef0ef1acb14a759
  Author: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
  Date:   Tue Oct 20 12:09:12 2015 -0400

      md/raid1: submit_bio_wait() returns 0 on success

      This was introduced with 9e882242c6193ae6f416f2d8d8db0d9126bd996b
      which changed the return value of submit_bio_wait() to return != 0 on
      error, but didn't update the caller accordingly.

      Fixes: 9e882242c6 ("block: Add submit_bio_wait(), remove from md")
      Cc: stable@xxxxxxxxxxxxxxx (v3.10)
      Reported-by: Bill Kuzeja <William.Kuzeja@xxxxxxxxxxx>
      Signed-off-by: Jes Sorensen <Jes.Sorensen@xxxxxxxxxx>
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit bc1d03687b9be3a30aab8e8d78c7884449b6e511
  Author: Kan Liang <kan.liang@xxxxxxxxx>
  Date:   Fri Oct 9 06:59:23 2015 -0400

      perf cpu_map: Fix core dump caused by per-socket/core system-wide stat

      Perf will core dump if --per-socket/core -a are applied for perf stat.

      The root cause is that cpu_map__build_map set refcnt of evlist's cpu_map
      to 1.  It should set refcnt for the newly created cpu_map, not evlist's
      cpu_map.

      Here is the example:

        # perf stat -e cycles --per-socket -a sleep 1

         Performance counter stats for 'system wide':

        S0       36         30,196,257      cycles
        S1       28         15,823,536      cycles

             1.001126828 seconds time elapsed

        *** Error in `./perf': corrupted double-linked list: 0x00000000021f9090 
***
        ======= Backtrace: =========
        /lib64/libc.so.6[0x3002e7bbe7]
        /lib64/libc.so.6[0x3002e7d2b5]
        ./perf(perf_evsel__delete+0x28)[0x485bdd]
        ./perf[0x4800e8]
        ./perf(perf_evlist__delete+0x5e)[0x482cd5]
        ./perf(cmd_stat+0xf25)[0x432328]
        ./perf[0x4768e0]
        ./perf[0x476ad6]
        ./perf[0x476b41]
        ./perf(main+0x1d0)[0x476db2]
        /lib64/libc.so.6(__libc_start_main+0xf5)[0x3002e21b45]
        ./perf[0x4202c5]

      Signed-off-by: Kan Liang <kan.liang@xxxxxxxxx>
      Acked-by: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Andi Kleen <ak@xxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1444388363-35936-1-git-send-email-kan.liang@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 2f465deef7ce8c722121b782dd91c284f5ae80ca
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Thu Oct 1 12:28:11 2015 +0200

      tools lib traceevent: update KVM plugin

      The format of the role word has changed through the years and the plugin
      was never updated; some VMX exit reasons were missing too.

      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Acked-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: kvm@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1443695293-31127-1-git-send-email-pbonzini@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ab3964ad2acfbb0dc5414d4c86fa6d8d690f27a1
  Author: Haggai Eran <haggaie@xxxxxxxxxxxx>
  Date:   Tue Oct 20 09:53:01 2015 +0300

      IB/cma: Use inner P_Key to determine netdev

      When discussing the patches to demux ids in rdma_cm instead of ib_cm, it
      was decided that it is best to use the P_Key value in the packet headers.
      However, the mlx5 and ipath drivers are currently unable to send correct
      P_Key values in GMP headers. They always send using a single P_Key that is
      set during the GSI QP initialization.

      Change the rdma_cm code to look at the P_Key value that is part of the
      packet payload as a workaround. Once the drivers are fixed this patch can
      be reverted.

      Fixes: 4c21b5bcef73 ("IB/cma: Add net_dev and private data checks to
      RDMA CM")
      Signed-off-by: Haggai Eran <haggaie@xxxxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 0174b381caf89443d92c6fe75f725f2bfeba96b6
  Author: Sasha Levin <sasha.levin@xxxxxxxxxx>
  Date:   Thu Sep 17 16:04:19 2015 -0400

      IB/ucma: check workqueue allocation before usage

      Allocating a workqueue might fail, which wasn't checked so far and would
      lead to NULL ptr derefs when an attempt to use it was made.

      Signed-off-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit b3b51f9f6f5d91cd16afaed0c22df2c56ed5f92e
  Author: Haggai Eran <haggaie@xxxxxxxxxxxx>
  Date:   Mon Sep 21 16:02:02 2015 +0300

      IB/cma: Potential NULL dereference in cma_id_from_event

      If the lookup of a listening ID failed for an AF_IB request, the code
      would try to call dev_put() on a NULL net_dev.

      Fixes: be688195bd08 ("IB/cma: Fix net_dev reference leak with failed
      requests")
      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Haggai Eran <haggaie@xxxxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 3909642034ffd7a8906ff3f2b2a71455bf39e7f6
  Author: Matan Barak <matanb@xxxxxxxxxxxx>
  Date:   Thu Oct 15 15:01:03 2015 +0300

      IB/core: Fix use after free of ifa

      When using ifup/ifdown while executing enum_netdev_ipv4_ips,
      ifa could become invalid and cause use after free error.
      Fixing it by protecting with RCU lock.

      Fixes: 03db3a2d81e6 ('IB/core: Add RoCE GID table management')
      Signed-off-by: Matan Barak <matanb@xxxxxxxxxxxx>
      Signed-off-by: Doug Ledford <dledford@xxxxxxxxxx>

  commit 625faa6a720d26fc0db9e20b48dc0dfe4c8d8ddf
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Tue Oct 20 11:49:44 2015 +0100

      clkdev: fix clk_add_alias() with a NULL alias device name

      clk_add_alias() was not correctly handling the case where alias_dev_name
      was NULL: rather than producing an entry with a NULL dev_id pointer,
      it would produce a device name of (null).  Fix this.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Fixes: 2568999835d7 ("clkdev: add clkdev_create() helper")
      Reported-by: Aaro Koskinen <aaro.koskinen@xxxxxx>
      Tested-by: Aaro Koskinen <aaro.koskinen@xxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>

  commit 0d997491f814c87310a6ad7be30a9049c7150489
  Author: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
  Date:   Sat Oct 17 19:05:27 2015 +0200

      arm/arm64: KVM: Fix disabled distributor operation

      We currently do a single update of the vgic state when the distributor
      enable/disable control register is accessed and then bypass updating the
      state for as long as the distributor remains disabled.

      This is incorrect, because updating the state does not consider the
      distributor enable bit, and this you can end up in a situation where an
      interrupt is marked as pending on the CPU interface, but not pending on
      the distributor, which is an impossible state to be in, and triggers a
      warning.  Consider for example the following sequence of events:

      1. An interrupt is marked as pending on the distributor
         - the interrupt is also forwarded to the CPU interface
      2. The guest turns off the distributor (it's about to do a reboot)
         - we stop updating the CPU interface state from now on
      3. The guest disables the pending interrupt
         - we remove the pending state from the distributor, but don't touch
           the CPU interface, see point 2.

      Since the distributor disable bit really means that no interrupts should
      be forwarded to the CPU interface, we modify the code to keep updating
      the internal VGIC state, but always set the CPU interface pending bits
      to zero when the distributor is disabled.

      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit 544c572e03174438b6656ed24a4516b9a9d5f14a
  Author: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
  Date:   Sat Oct 17 17:55:12 2015 +0200

      arm/arm64: KVM: Clear map->active on pend/active clear

      When a guest reboots or offlines/onlines CPUs, it is not uncommon for it
      to clear the pending and active states of an interrupt through the
      emulated VGIC distributor.  However, since the architected timers are
      defined by the architecture to be level triggered and the guest
      rightfully expects them to be that, but we emulate them as
      edge-triggered, we have to mimic level-triggered behavior for an
      edge-triggered virtual implementation.

      We currently do not signal the VGIC when the map->active field is true,
      because it indicates that the guest has already been signalled of the
      interrupt as required.  Normally this field is set to false when the
      guest deactivates the virtual interrupt through the sync path.

      We also need to catch the case where the guest deactivates the interrupt
      through the emulated distributor, again allowing guests to boot even if
      the original virtual timer signal hit before the guest's GIC
      initialization sequence is run.

      Reviewed-by: Eric Auger <eric.auger@xxxxxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit cff9211eb1a1f58ce7f5a2d596b617928fd4be0e
  Author: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
  Date:   Fri Oct 16 12:41:21 2015 +0200

      arm/arm64: KVM: Fix arch timer behavior for disabled interrupts

      We have an interesting issue when the guest disables the timer interrupt
      on the VGIC, which happens when turning VCPUs off using PSCI, for
      example.

      The problem is that because the guest disables the virtual interrupt at
      the VGIC level, we never inject interrupts to the guest and therefore
      never mark the interrupt as active on the physical distributor.  The
      host also never takes the timer interrupt (we only use the timer device
      to trigger a guest exit and everything else is done in software), so the
      interrupt does not become active through normal means.

      The result is that we keep entering the guest with a programmed timer
      that will always fire as soon as we context switch the hardware timer
      state and run the guest, preventing forward progress for the VCPU.

      Since the active state on the physical distributor is really part of the
      timer logic, it is the job of our virtual arch timer driver to manage
      this state.

      The timer->map->active boolean field indicates whether we have signalled
      this interrupt to the vgic and if that interrupt is still pending or
      active.  As long as that is the case, the hardware doesn't have to
      generate physical interrupts and therefore we mark the interrupt as
      active on the physical distributor.

      We also have to restore the pending state of an interrupt that was
      queued to an LR but was retired from the LR for some reason, while
      remaining pending in the LR.

      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Reported-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit 4a5d69b73948d0e03cd38d77dc11edb2e707165f
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Oct 12 15:22:31 2015 +0200

      KVM: arm: use GIC support unconditionally

      The vgic code on ARM is built for all configurations that enable KVM,
      but the parent_data field that it references is only present when
      CONFIG_IRQ_DOMAIN_HIERARCHY is set:

      virt/kvm/arm/vgic.c: In function 'kvm_vgic_map_phys_irq':
      virt/kvm/arm/vgic.c:1781:13: error: 'struct irq_data' has no member named 
'parent_data'

      This flag is implied by the GIC driver, and indeed the VGIC code only
      makes sense if a GIC is present. This changes the CONFIG_KVM symbol
      to always select GIC, which avoids the issue.

      Fixes: 662d9715840 ("arm/arm64: KVM: Kill CONFIG_KVM_ARM_{VGIC,TIMER}")
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit 399ea0f6bcd318af94ec8e4ffe96703ed674f22e
  Author: Pavel Fedin <p.fedin@xxxxxxxxxxx>
  Date:   Tue Oct 6 11:14:35 2015 +0300

      KVM: arm/arm64: Fix memory leak if timer initialization fails

      Jump to correct label and free kvm_host_cpu_state

      Reviewed-by: Wei Huang <wei@xxxxxxxxxx>
      Signed-off-by: Pavel Fedin <p.fedin@xxxxxxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit 437f9963bc4fd75889c1fe9289a92dea9124a439
  Author: Pavel Fedin <p.fedin@xxxxxxxxxxx>
  Date:   Fri Sep 25 17:00:29 2015 +0300

      KVM: arm/arm64: Do not inject spurious interrupts

      When lowering a level-triggered line from userspace, we forgot to lower
      the pending bit on the emulated CPU interface and we also did not
      re-compute the pending_on_cpu bitmap for the CPU affected by the change.

      Update vgic_update_irq_pending() to fix the two issues above and also
      raise a warning in vgic_quue_irq_to_lr if we encounter an interrupt
      pending on a CPU which is neither marked active nor pending.

        [ Commit text reworked completely - Christoffer ]

      Signed-off-by: Pavel Fedin <p.fedin@xxxxxxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit a2d7629048322ae62bff57f34f5f995e25ed234c
  Author: Steven Rostedt (Red Hat) <rostedt@xxxxxxxxxxx>
  Date:   Tue Oct 20 11:38:08 2015 -0400

      tracing: Have stack tracer force RCU to be watching

      The stack tracer was triggering the WARN_ON() in module.c:

       static void module_assert_mutex_or_preempt(void)
       {
       #ifdef CONFIG_LOCKDEP
        if (unlikely(!debug_locks))
                return;

        WARN_ON(!rcu_read_lock_sched_held() &&
                !lockdep_is_held(&module_mutex));
       #endif
       }

      The reason is that the stack tracer traces all function calls, and some of
      those calls happen while exiting or entering user space and idle. Some of
      these functions are called after RCU had already stopped watching, as RCU
      does not watch userspace or idle CPUs.

      If a max stack is hit, then the save_stack_trace() is called, which will
      check module addresses and call module_assert_mutex_or_preempt(), and then
      trigger the warning. Sad part is, the warning itself will also do a stack
      trace and tigger the same warning. That probably should be fixed.

      The warning was added by 0be964be0d45 "module: Sanitize RCU usage and
      locking" but this bug has probably been around longer. But it's unlikely 
to
      cause much harm, but the new warning causes the system to lock up.

      Cc: stable@xxxxxxxxxxxxxxx # 4.2+
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc:"Paul E. McKenney" <paulmck@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Steven Rostedt <rostedt@xxxxxxxxxxx>

  commit 97aff2c03a1e4d343266adadb52313613efb027f
  Author: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 20 10:25:58 2015 +0100

      ASoC: wm8904: Correct number of EQ registers

      There are 24 EQ registers not 25, I suspect this bug came about because
      the registers start at EQ1 not zero. The bug is relatively harmless as
      the extra register written is an unused one.

      Signed-off-by: Charles Keepax <ckeepax@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Mark Brown <broonie@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit d289619a219dd01e255d7b5e30f9171b25efea48
  Author: Takashi Iwai <tiwai@xxxxxxx>
  Date:   Tue Oct 20 16:23:55 2015 +0200

      ALSA: hda - Fix deadlock at error in building PCM

      The HDA codec driver issues snd_hda_codec_reset() at the error path of
      PCM build.  This was needed in the earlier code base, but the recent
      rewrite to use the standard bus binding made this a deadlock:
       modprobe        D 0000000000000005     0   720    716 0x00000080
       Call Trace:
        [<ffffffff816a5dbe>] schedule+0x3e/0x90
        [<ffffffff816a61a5>] schedule_preempt_disabled+0x15/0x20
        [<ffffffff816a7ae5>] __mutex_lock_slowpath+0xb5/0x120
        [<ffffffff816a7b6b>] mutex_lock+0x1b/0x30
        [<ffffffff8148656b>] device_release_driver+0x1b/0x30
        [<ffffffff81485c15>] bus_remove_device+0x105/0x180
        [<ffffffff814822b9>] device_del+0x139/0x260
        [<ffffffffa05e0ec5>] snd_hdac_device_unregister+0x25/0x30 [snd_hda_core]
        [<ffffffffa074fa6a>] snd_hda_codec_reset+0x2a/0x70 [snd_hda_codec]
        [<ffffffffa075007b>] snd_hda_codec_build_pcms+0x18b/0x1b0 
[snd_hda_codec]
        [<ffffffffa074a44e>] hda_codec_driver_probe+0xbe/0x140 [snd_hda_codec]
        [<ffffffff81486ac4>] driver_probe_device+0x1f4/0x460
        [<ffffffff81486dc0>] __driver_attach+0x90/0xa0
        [<ffffffff81484844>] bus_for_each_dev+0x64/0xa0
        [<ffffffff814862de>] driver_attach+0x1e/0x20
        [<ffffffff81485e7b>] bus_add_driver+0x1eb/0x280
        [<ffffffff81487680>] driver_register+0x60/0xe0
        [<ffffffffa074a0da>] __hda_codec_driver_register+0x5a/0x60 
[snd_hda_codec]
        [<ffffffffa070a01e>] realtek_driver_init+0x1e/0x1000 
[snd_hda_codec_realtek]
        [<ffffffff810002f3>] do_one_initcall+0xb3/0x200
        [<ffffffff816a1fc5>] do_init_module+0x60/0x1f8
        [<ffffffff810ee5c3>] load_module+0x1653/0x1bd0
        [<ffffffff810eed48>] SYSC_finit_module+0x98/0xc0
        [<ffffffff810eed8e>] SyS_finit_module+0xe/0x10
        [<ffffffff816aa032>] entry_SYSCALL_64_fastpath+0x16/0x75

      The simple fix is just to remove this call, since we don't need to
      think about unbinding at there any longer.

      Bugzilla: https://bugzilla.suse.com/show_bug.cgi?id=948758
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.1+
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit 271817a3e92c0455bda5856d87eca244ad67d3a2
  Author: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
  Date:   Mon Oct 19 17:23:28 2015 -0400

      crypto: asymmetric_keys - Fix unaligned access in x509_get_sig_params()

      x509_get_sig_params() has the same code pattern as the one in
      pkcs7_verify() that is fixed by commit 62f57d05e287 ("crypto: pkcs7 - Fix
      unaligned access in pkcs7_verify()") so apply a similar fix here: make
      sure that desc is pointing at an algined value past the digest_size,
      and take alignment values into consideration when doing kzalloc()

      Signed-off-by: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
      Acked-by: David Howells <dhowells@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 381ceef785aa3957cd78f13b9311a09a8ea8ed45
  Author: David Howells <dhowells@xxxxxxxxxx>
  Date:   Mon Oct 19 12:19:45 2015 +0100

      crypto: akcipher - Don't #include crypto/public_key.h as the contents 
aren't used

      Don't #include crypto/public_key.h in akcipher as the contents of the
      header aren't used and changes in a future patch cause it to fail to
      compile if CONFIG_KEYS=n.

      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 642c117b927fae34cb85ac7ff278f5fc5bb93a47
  Author: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
  Date:   Mon Oct 19 13:37:42 2015 +0900

      hwrng: exynos - Add Device Tree support

      Add Device Tree support for the driver. The Pseudo Random Number
      Generator module is the same in almost all of Exynos SoCs, since
      Exynos4210 (however the tests were done only on Trats2 board with
      Exynos4412). There are some differences on newer Exynos Octa
      (Exynos542x) SoCs.

      Signed-off-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit bd1dffb1424682ac5b5849e0998c26dffcd61d9e
  Author: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
  Date:   Mon Oct 19 13:37:41 2015 +0900

      hwrng: exynos - Fix missing configuration after suspend to RAM

      After suspend to RAM the device stopped to work with ETIMEDOUT error:

      $ dd if=/dev/hwrng of=/dev/null bs=1 count=16
      dd: reading `/dev/hwrng': Connection timed out

      In the STATUS register the bits #5 (PRNG_DONE) and #1
      (SEED_SETTING_DONE) were not set. Instead PRNG_ERROR (seventh bit) was
      high.

      After each system suspend initialize the seed to fix the error.

      Signed-off-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit d7fd6075a205f19cd0c570c8b5badb8c69321d88
  Author: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
  Date:   Mon Oct 19 13:37:40 2015 +0900

      hwrng: exynos - Add timeout for waiting on init done

      Driver may hang waiting indefinitely for PRNG to finish its
      initialization stage. Instead of stalling return -ETIMEDOUT error.

      Signed-off-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 2b748a2f642a95c8125bfd8981d430a4e4d73e15
  Author: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
  Date:   Mon Oct 19 13:37:39 2015 +0900

      dt-bindings: rng: Describe Exynos4 PRNG bindings

      Document the bindings used by exynos-rng Pseudo Random Number Generator
      driver.

      Signed-off-by: Krzysztof Kozlowski <k.kozlowski@xxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 6de59d453ae567c1b637ef9469c37fd8367cd1b4
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 18:31:26 2015 +0100

      crypto: marvell/cesa - use __le32 for hardware descriptors

      Much of the driver uses cpu_to_le32() to convert values for descriptors
      to little endian before writing.  Use __le32 to define the hardware-
      accessed parts of the descriptors, and ensure most places where it's
      reasonable to do so use cpu_to_le32() when assigning to these.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit ea1f662bde067563328ec3083884aaffb3d902d8
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 18:31:20 2015 +0100

      crypto: marvell/cesa - fix missing cpu_to_le32() in mv_cesa_dma_add_op()

      When tdma->src is freed in mv_cesa_dma_cleanup(), we convert the DMA
      address from a little-endian value prior to calling dma_pool_free().
      However, mv_cesa_dma_add_op() assigns tdma->src without first converting
      the DMA address to little endian.  Fix this.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 0f3304dc18b1316bc6d32921f2a7837938f90c30
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 18:31:15 2015 +0100

      crypto: marvell/cesa - use memcpy_fromio()/memcpy_toio()

      Use the IO memcpy() functions when copying from/to MMIO memory.
      These locations were found via sparse.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 35622eae188761f30df916a6cae4fa8c942a6366
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 18:31:10 2015 +0100

      crypto: marvell/cesa - use gfp_t for gfp flags

      Use gfp_t not u32 for the GFP flags.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 5d754137ab905aaaf69acf81c9c6c7005bcfe6e4
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 18:31:05 2015 +0100

      crypto: marvell/cesa - use dma_addr_t for cur_dma

      cur_dma is part of the software state, not read by the hardware.
      Storing it in LE32 format is wrong, use dma_addr_t for this.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit b150856152cc442050ed3041e912ff0258c50f87
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 18:31:00 2015 +0100

      crypto: marvell/cesa - use readl_relaxed()/writel_relaxed()

      Use relaxed IO accessors where appropriate.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 660c40bd9837854b3d3cc75e6ddb41cc8ac32a1d
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Fri Sep 25 11:29:01 2015 +0200

      pinctrl: sh-pfc: Remove obsolete r8a7778 platform_device_id entry

      Since the removal of the r8a7778 legacy SoC code in commit
      4baadb9e05c68962 ("ARM: shmobile: r8a7778: remove obsolete setup code"),
      r8a7778 is only supported in generic DT-only ARM multi-platform builds.
      The driver doesn't need to match platform devices by name anymore, hence
      remove the corresponding platform_device_id entry.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 5eb6fc210ea2f988731f54eda0497d0518b89347
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Fri Sep 25 11:27:19 2015 +0200

      pinctrl: sh-pfc: Remove obsolete r8a7779 platform_device_id entry

      Since the removal of the r8a7779 legacy SoC code in commit
      c99cd90d98a98aa1 ("ARM: shmobile: r8a7779: Remove legacy SoC code"),
      r8a7779 is only supported in generic DT-only ARM multi-platform builds.
      The driver doesn't need to match platform devices by name anymore, hence
      remove the corresponding platform_device_id entry.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>

  commit 659f313dcfb9eaf4de7d415fe9fd1856252444f5
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:51:31 2015 +0100

      crypto: caam - fix indentation of close braces

      The kernel's coding style suggests that closing braces for initialisers
      should not be aligned to the open brace column.  The CodingStyle doc
      shows how this should be done.  Remove the additional tab.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 5ec908319ab53072d3a2188e62ed2e5d7b846951
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:51:25 2015 +0100

      crypto: caam - only export the state we really need to export

      Avoid exporting lots of state by only exporting what we really require,
      which is the buffer containing the set of pending bytes to be hashed,
      number of pending bytes, the context buffer, and the function pointer
      state.  This reduces down the exported state size to 216 bytes from
      576 bytes.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit c7556ff7e3e4f2747583bcc787f12ec9460ec3a6
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:51:20 2015 +0100

      crypto: caam - fix non-block aligned hash calculation

      caam does not properly calculate the size of the retained state
      when non-block aligned hashes are requested - it uses the wrong
      buffer sizes, which results in errors such as:

      caam_jr 2102000.jr1: 40000501: DECO: desc idx 5: SGT Length Error. The 
descriptor is trying to read more data than is contained in the SGT table.

      We end up here with:

      in_len 0x46 blocksize 0x40 last_bufsize 0x0 next_bufsize 0x6
      to_hash 0x40 ctx_len 0x28 nbytes 0x20

      which results in a job descriptor of:

      jobdesc@889: ed03d918: b0861c08 3daa0080 f1400000 3d03d938
      jobdesc@889: ed03d928: 00000068 f8400000 3cde2a40 00000028

      where the word at 0xed03d928 is the expected data size (0x68), and a
      scatterlist containing:

      sg@892: ed03d938: 00000000 3cde2a40 00000028 00000000
      sg@892: ed03d948: 00000000 3d03d100 00000006 00000000
      sg@892: ed03d958: 00000000 7e8aa700 40000020 00000000

      0x68 comes from 0x28 (the context size) plus the "in_len" rounded down
      to a block size (0x40).  in_len comes from 0x26 bytes of unhashed data
      from the previous operation, plus the 0x20 bytes from the latest
      operation.

      The fixed version would create:

      sg@892: ed03d938: 00000000 3cde2a40 00000028 00000000
      sg@892: ed03d948: 00000000 3d03d100 00000026 00000000
      sg@892: ed03d958: 00000000 7e8aa700 40000020 00000000

      which replaces the 0x06 length with the correct 0x26 bytes of previously
      unhashed data.

      This fixes a previous commit which erroneously "fixed" this due to a
      DMA-API bug report; that commit indicates that the bug was caused via a
      test_ahash_pnum() function in the tcrypt module.  No such function has
      ever existed in the mainline kernel.  Given that the change in this
      commit has been tested with DMA API debug enabled and shows no issue,
      I can only conclude that test_ahash_pnum() was triggering that bad
      behaviour by CAAM.

      Fixes: 7d5196aba3c8 ("crypto: caam - Correct DMA unmap size in 
ahash_update_ctx()")
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 434b421241f2d0faa7fea75f6320de00c5e3430e
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:51:15 2015 +0100

      crypto: caam - avoid needlessly saving and restoring caam_hash_ctx

      When exporting and importing the hash state, we will only export and
      import into hashes which share the same struct crypto_ahash pointer.
      (See hash_accept->af_alg_accept->hash_accept_parent.)

      This means that saving the caam_hash_ctx structure on export, and
      restoring it on import is a waste of resources.  So, remove this code.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 6ea30f0acfd1c269520c561b45762c0de590007f
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:51:10 2015 +0100

      crypto: caam - print errno code when hash registration fails

      Print the errno code when hash registration fails, so we know why the
      failure occurred.  This aids debugging.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 8c07f3a8c487df241f5e809e8f6d5dd7c9d75b54
  Author: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:57 2015 +0100

      crypto: marvell/cesa - fix memory leak

      To: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>,Arnaud Ebalard 
<arno@xxxxxxxxxxxx>,Thomas Petazzoni 
<thomas.petazzoni@xxxxxxxxxxxxxxxxxx>,Jason Cooper <jason@xxxxxxxxxxxxxx>

      The local chain variable is not cleaned up if an error occurs in the 
middle
      of DMA chain creation. Fix that by dropping the local chain variable and
      using the dreq->chain field which will be cleaned up by
      mv_cesa_dma_cleanup() in case of errors.

      Signed-off-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Reported-by: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 8efbc2c0f6b4e52e384ecb1714511f0194c4d56a
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:52 2015 +0100

      crypto: marvell/cesa - fix first-fragment handling in 
mv_cesa_ahash_dma_last_req()

      When adding the software padding, this must be done using the first/mid
      fragment mode, and any subsequent operation needs to be a mid-fragment.
      Fix this.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit ab270e7055e0aa9d4dc3bf419cdfdde340174978
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:47 2015 +0100

      crypto: marvell/cesa - rearrange handling for sw padded hashes

      Rearrange the last request handling for hashes which require software
      padding.

      We prepare the padding to be appended, and then append as much of the
      padding to any existing data that's already queued up, adding an
      operation block and launching the operation.

      Any remainder is then appended as a separate operation.

      This ensures that the hardware only ever sees multiples of the hash
      block size to be operated on for software padded hashes, thus ensuring
      that the engine always indicates that it has finished the calculation.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit aee84a7e6ed515f0f217317ff261a15db4bff0bb
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:42 2015 +0100

      crypto: marvell/cesa - rearrange handling for hw finished hashes

      Rearrange the last request handling for hardware finished hashes
      by moving the generation of the fragment operation into this path.
      This results in a simplified sequence to handle this case, and
      allows us to move the software padded case further down into the
      function.  Add comments describing these parts.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 58953e15ef015ba9136b7234a7098cf827428999
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:37 2015 +0100

      crypto: marvell/cesa - rearrange last request handling

      Move the test for the last request out of mv_cesa_ahash_dma_last_req()
      to its caller, and move the mv_cesa_dma_add_frag() down into this
      function.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit e41bbebddec44f7c06585f42686b2a529513fc6a
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:32 2015 +0100

      crypto: marvell/cesa - avoid adding final operation within loop

      Avoid adding the final operation within the loop, but instead add it
      outside.  We combine this with the handling for the no-data case.

      Signed-off-by: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit bd274b10856b91f702fa767114aa7e6ac45b933d
  Author: Russell King <rmk+kernel@xxxxxxxxxxxxxxxx>
  Date:   Sun Oct 18 17:24:26 2015 +0100

      crypto: marvell/cesa - ensure iter.base.op_len is the full op length

      When we process the last request of data, and the request contains user
      data, the loop in mv_cesa_ahash_dma_req_init() marks the first data size
      as being iter.base.op_len which does not include the size of the cache
      data.  This means we end up hashing an insufficient amount of data.

      Fix this by always including the