[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Xen-devel] [linux-linus bisection] complete test-amd64-i386-qemut-rhel6hvm-intel



branch xen-unstable
xenbranch xen-unstable
job test-amd64-i386-qemut-rhel6hvm-intel
testid xen-boot

Tree: linux git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux-2.6.git
Tree: linuxfirmware git://xenbits.xen.org/osstest/linux-firmware.git
Tree: qemu git://xenbits.xen.org/qemu-xen-traditional.git
Tree: qemuu git://xenbits.xen.org/qemu-xen.git
Tree: xen git://xenbits.xen.org/xen.git

*** Found and reproduced problem changeset ***

  Bug is in tree:  linux 
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux-2.6.git
  Bug introduced:  78c4a49a69e910a162b05e4e8727b9bdbf948f13
  Bug not present: 8a70dd2669200ce83255ed8c5ebef7e59f9e8707
  Last fail repro: http://logs.test-lab.xenproject.org/osstest/logs/65215/


  commit 78c4a49a69e910a162b05e4e8727b9bdbf948f13
  Merge: 9b81d51 c2489e0
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 25 15:11:08 2015 -0800

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

      Pull vfs fixes from Al Viro:
       "A couple of fixes for sendfile lockups caught by Dmitry + a fix for
        ancient sysvfs symlink breakage"

      * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs:
        vfs: Avoid softlockups with sendfile(2)
        vfs: Make sendfile(2) killable even better
        fix sysvfs symlinks

  commit 9b81d512a4a89dadfd3887d1b4443eeb2c20c573
  Merge: 4cf193b dcd8376
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 25 11:08:35 2015 -0800

      Merge branch 'for-linus' of git://git.kernel.dk/linux-block

      Pull more block layer fixes from Jens Axboe:
       "I wasn't going to send off a new pull before next week, but the blk
        flush fix from Jan from the other day introduced a regression.  It's
        rare enough not to have hit during testing, since it requires both a
        device that rejects the first flush, and bad timing while it does
        that.  But since someone did hit it, let's get the revert into 4.4-rc3
        so we don't have a released rc with that known issue.

        Apart from that revert, three other fixes:

         - From Christoph, a fix for a missing unmap in NVMe request
           preparation.

         - An NVMe fix from Nishanth that fixes data corruption on powerpc.

         - Also from Christoph, fix a list_del() attempt on blk-mq that didn't
           have a matching list_add() at timer start"

      * 'for-linus' of git://git.kernel.dk/linux-block:
        Revert "blk-flush: Queue through IO scheduler when flush not required"
        block: fix blk_abort_request for blk-mq drivers
        nvme: add missing unmaps in nvme_queue_rq
        NVMe: default to 4k device page size

  commit dcd8376c369fa8fde8269e721b14f50475dd397b
  Author: Jens Axboe <axboe@xxxxxx>
  Date:   Wed Nov 25 10:12:54 2015 -0700

      Revert "blk-flush: Queue through IO scheduler when flush not required"

      This reverts commit 1b2ff19e6a957b1ef0f365ad331b608af80e932e.

      Jan writes:

      --

      Thanks for report! After some investigation I found out we allocate
      elevator specific data in __get_request() only for non-flush requests. And
      this is actually required since the flush machinery uses the space in
      struct request for something else. Doh. So my patch is just wrong and not
      easy to fix since at the time __get_request() is called we are not sure
      whether the flush machinery will be used in the end. Jens, please revert
      1b2ff19e6a957b1ef0f365ad331b608af80e932e. Thanks!

      I'm somewhat surprised that you can reliably hit the race where flushing
      gets disabled for the device just while the request is in flight. But I
      guess during boot it makes some sense.

      --

      So let's just revert it, we can fix the queue run manually after the
      fact. This race is rare enough that it didn't trigger in testing, it
      requires the specific disable-while-in-flight scenario to trigger.

  commit 4cf193b4b2363bfed0b4e040e61f20d78192e2e0
  Merge: 6ffeba9 b2467e7
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 25 09:01:49 2015 -0800

      Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm

      Pull KVM fixes from Paolo Bonzini:
       "Bug fixes for all architectures.  Nothing really stands out"

      * tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm: (21 
commits)
        KVM: nVMX: remove incorrect vpid check in nested invvpid emulation
        arm64: kvm: report original PAR_EL1 upon panic
        arm64: kvm: avoid %p in __kvm_hyp_panic
        KVM: arm/arm64: vgic: Trust the LR state for HW IRQs
        KVM: arm/arm64: arch_timer: Preserve physical dist. active state on 
LR.active
        KVM: arm/arm64: Fix preemptible timer active state crazyness
        arm64: KVM: Add workaround for Cortex-A57 erratum 834220
        arm64: KVM: Fix AArch32 to AArch64 register mapping
        ARM/arm64: KVM: test properly for a PTE's uncachedness
        KVM: s390: fix wrong lookup of VCPUs by array index
        KVM: s390: avoid memory overwrites on emergency signal injection
        KVM: Provide function for VCPU lookup by id
        KVM: s390: fix pfmf intercept handler
        KVM: s390: enable SIMD only when no VCPUs were created
        KVM: x86: request interrupt window when IRQ chip is split
        KVM: x86: set KVM_REQ_EVENT on local interrupt request from user space
        KVM: x86: split kvm_vcpu_ready_for_interrupt_injection out of 
dm_request_for_irq_injection
        KVM: x86: fix interrupt window handling in split IRQ chip case
        MIPS: KVM: Uninit VCPU in vcpu_create error path
        MIPS: KVM: Fix CACHE immediate offset sign extension
        ...

  commit b2467e744f89fcb2e723143c2b78bcbaf391828a
  Author: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
  Date:   Wed Nov 25 17:21:39 2015 +0800

      KVM: nVMX: remove incorrect vpid check in nested invvpid emulation

      This patch removes the vpid check when emulating nested invvpid
      instruction of type all-contexts invalidation. The existing code is
      incorrect because:
       (1) According to Intel SDM Vol 3, Section "INVVPID - Invalidate
           Translations Based on VPID", invvpid instruction does not check
           vpid in the invvpid descriptor when its type is all-contexts
           invalidation.
       (2) According to the same document, invvpid of type all-contexts
           invalidation does not require there is an active VMCS, so/and
           get_vmcs12() in the existing code may result in a NULL-pointer
           dereference. In practice, it can crash both KVM itself and L1
           hypervisors that use invvpid (e.g. Xen).

      Signed-off-by: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 55ce0da1da287822e5ffb5fcd6e357180d5ba4cd
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Fri Oct 30 20:47:04 2015 +0800

      block: fix blk_abort_request for blk-mq drivers

      We only added the request to the request list for the !blk-mq case,
      so we should only delete it in that case as well.

      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit bf508e910b02a6107a5aa054e03c6fc8a65dae1e
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Fri Oct 16 07:58:31 2015 +0200

      nvme: add missing unmaps in nvme_queue_rq

      When we fail various metadata related operations in nvme_queue_rq we
      need to unmap the data SGL.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Keith Busch <keith.busch@xxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit c5c9f25b98a568451d665afe4aeefe17bf9f2995
  Author: Nishanth Aravamudan <nacc at linux.vnet.ibm.com>
  Date:   Tue Nov 24 09:55:05 2015 -0700

      NVMe: default to 4k device page size

      We received a bug report recently when DDW (64-bit direct DMA on Power)
      is not enabled for NVMe devices. In that case, we fall back to 32-bit
      DMA via the IOMMU, which is always done via 4K TCEs (Translation Control
      Entries).

      The NVMe device driver, though, assumes that the DMA alignment for the
      PRP entries will match the device's page size, and that the DMA aligment
      matches the kernel's page aligment. On Power, the the IOMMU page size,
      as mentioned above, can be 4K, while the device can have a page size of
      8K, while the kernel has a page size of 64K. This eventually trips the
      BUG_ON in nvme_setup_prps(), as we have a 'dma_len' that is a multiple
      of 4K but not 8K (e.g., 0xF000).

      In this particular case of page sizes, we clearly want to use the
      IOMMU's page size in the driver. And generally, the NVMe driver in this
      function should be using the IOMMU's page size for the default device
      page size, rather than the kernel's page size. There is not currently an
      API to obtain the IOMMU's page size across all architectures and in the
      interest of a stop-gap fix to this functional issue, default the NVMe
      device page size to 4K, with the intent of adding such an API and
      implementation across all architectures in the next merge window.

      With the functionally equivalent v3 of this patch, our hardware test
      exerciser survives when using 32-bit DMA; without the patch, the kernel
      will BUG within a few minutes.

      Signed-off-by: Nishanth Aravamudan <nacc at linux.vnet.ibm.com>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 6ffeba9607343f15303a399bc402a538800d89d9
  Merge: 81b1a83 0fcb04d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 24 12:53:11 2015 -0800

      Merge tag 'dm-4.4-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm

      Pull device mapper fixes from Mike Snitzer:
       "Two fixes for 4.4-rc1's DM ioctl changes that introduced the potential
        for infinite recursion on ioctl (with DM multipath).

        And four stable fixes:

         - A DM thin-provisioning fix to restore 'error_if_no_space' setting
           when a thin-pool is made writable again (after having been out of
           space).

         - A DM thin-provisioning fix to properly advertise discard support
           for thin volumes that are stacked on a thin-pool whose underlying
           data device doesn't support discards.

         - A DM ioctl fix to allow ctrl-c to break out of an ioctl retry loop
           when DM multipath is configured to 'queue_if_no_path'.

         - A DM crypt fix for a possible hang on dm-crypt device removal"

      * tag 'dm-4.4-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm:
        dm thin: fix regression in advertised discard limits
        dm crypt: fix a possible hang due to race condition on exit
        dm mpath: fix infinite recursion in ioctl when no paths and 
!queue_if_no_path
        dm: do not reuse dm_blk_ioctl block_device input as local variable
        dm: fix ioctl retry termination with signal
        dm thin: restore requested 'error_if_no_space' setting on OODS to WRITE 
transition

  commit 81b1a832d79749058863cffe2c0ed4ef40f6e6ec
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Tue Nov 24 11:39:54 2015 -0800

      pidns: fix NULL dereference in __task_pid_nr_ns()

      I got a crash during a "perf top" session that was caused by a race in
      __task_pid_nr_ns() :

      pid_nr_ns() was inlined, but apparently compiler chose to read
      task->pids[type].pid twice, and the pid->level dereference crashed
      because we got a NULL pointer at the second read :

          if (pid && ns->level <= pid->level) { // CRASH

      Just use RCU API properly to solve this race, and not worry about "perf
      top" crashing hosts :(

      get_task_pid() can benefit from same fix.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 8bd142c01648cdb33e9bcafa0448ba2c20ed814c
  Merge: d792aba fbb4574
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Tue Nov 24 19:34:40 2015 +0100

      Merge tag 'kvm-arm-for-v4.4-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kvmarm/kvmarm into kvm-master

      KVM/ARM Fixes for v4.4-rc3.

      Includes some timer fixes, properly unmapping PTEs, an errata fix, and two
      tweaks to the EL2 panic code.

  commit 4ce01c518ebf6e3818abf5f4a9e1a1ef9d52f232
  Merge: a293154 12e57f5
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 24 10:26:30 2015 -0800

      Merge branch 'for-linus' of git://git.kernel.dk/linux-block

      Pull block layer fixes from Jens Axboe:
       "A round of fixes/updates for the current series.

        This looks a little bigger than it is, but that's mainly because we
        pushed the lightnvm enabled null_blk change out of the merge window so
        it could be updated a bit.  The rest of the volume is also mostly
        lightnvm.  In particular:

         - Lightnvm.  Various fixes, additions, updates from Matias and
           Javier, as well as from Wenwei Tao.

         - NVMe:
              - Fix for potential arithmetic overflow from Keith.
              - Also from Keith, ensure that we reap pending completions from
                a completion queue before deleting it.  Fixes kernel crashes
                when resetting a device with IO pending.
              - Various little lightnvm related tweaks from Matias.

         - Fixup flushes to go through the IO scheduler, for the cases where a
           flush is not required.  Fixes a case in CFQ where we would be
           idling and not see this request, hence not break the idling.  From
           Jan Kara.

         - Use list_{first,prev,next} in elevator.c for cleaner code.  From
           Gelian Tang.

         - Fix for a warning trigger on btrfs and raid on single queue blk-mq
           devices, where we would flush plug callbacks with preemption
           disabled.  From me.

         - A mac partition validation fix from Kees Cook.

         - Two merge fixes from Ming, marked stable.  A third part is adding a
           new warning so we'll notice this quicker in the future, if we screw
           up the accounting.

         - Cleanup of thread name/creation in mtip32xx from Rasmus Villemoes"

      * 'for-linus' of git://git.kernel.dk/linux-block: (32 commits)
        blk-merge: warn if figured out segment number is bigger than 
nr_phys_segments
        blk-merge: fix blk_bio_segment_split
        block: fix segment split
        blk-mq: fix calling unplug callbacks with preempt disabled
        mac: validate mac_partition is within sector
        mtip32xx: use formatting capability of kthread_create_on_node
        NVMe: reap completion entries when deleting queue
        lightnvm: add free and bad lun info to show luns
        lightnvm: keep track of block counts
        nvme: lightnvm: use admin queues for admin cmds
        lightnvm: missing free on init error
        lightnvm: wrong return value and redundant free
        null_blk: do not del gendisk with lightnvm
        null_blk: use device addressing mode
        null_blk: use ppa_cache pool
        NVMe: Fix possible arithmetic overflow for max segments
        blk-flush: Queue through IO scheduler when flush not required
        null_blk: register as a LightNVM device
        elevator: use list_{first,prev,next}_entry
        lightnvm: cleanup queue before target removal
        ...

  commit fbb4574ce9a37e15a9872860bf202f2be5bdf6c4
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Mon Nov 16 13:58:29 2015 +0000

      arm64: kvm: report original PAR_EL1 upon panic

      If we call __kvm_hyp_panic while a guest context is active, we call
      __restore_sysregs before acquiring the system register values for the
      panic, in the process throwing away the PAR_EL1 value at the point of
      the panic.

      This patch modifies __kvm_hyp_panic to stash the PAR_EL1 value prior to
      restoring host register values, enabling us to report the original
      values at the point of the panic.

      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit 1d7a4e313abbc7200982e5a68121483a3aa32295
  Author: Mark Rutland <mark.rutland@xxxxxxx>
  Date:   Mon Nov 16 13:55:51 2015 +0000

      arm64: kvm: avoid %p in __kvm_hyp_panic

      Currently __kvm_hyp_panic uses %p for values which are not pointers,
      such as the ESR value. This can confusingly lead to "(null)" being
      printed for the value.

      Use %x instead, and only use %p for host pointers.

      Signed-off-by: Mark Rutland <mark.rutland@xxxxxxx>
      Acked-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit 9f958c11b780af74fc311b96d6124740aa21cc68
  Author: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
  Date:   Tue Nov 24 16:34:31 2015 +0100

      KVM: arm/arm64: vgic: Trust the LR state for HW IRQs

      We were probing the physial distributor state for the active state of a
      HW virtual IRQ, because we had seen evidence that the LR state was not
      cleared when the guest deactivated a virtual interrupted.

      However, this issue turned out to be a software bug in the GIC, which
      was solved by: 84aab5e68c2a5e1e18d81ae8308c3ce25d501b29
      (KVM: arm/arm64: arch_timer: Preserve physical dist. active
      state on LR.active, 2015-11-24)

      Therefore, get rid of the complexities and just look at the LR.

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit 0e3dfda91d9fe8e2c4d0b5d21434b173a241eeaf
  Author: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
  Date:   Tue Nov 24 16:23:05 2015 +0100

      KVM: arm/arm64: arch_timer: Preserve physical dist. active state on 
LR.active

      We were incorrectly removing the active state from the physical
      distributor on the timer interrupt when the timer output level was
      deasserted.  We shouldn't be doing this without considering the virtual
      interrupt's active state, because the architecture requires that when an
      LR has the HW bit set and the pending or active bits set, then the
      physical interrupt must also have the corresponding bits set.

      This addresses an issue where we have been observing an inconsistency
      between the LR state and the physical distributor state where the LR
      state was active and the physical distributor was not active, which
      shouldn't happen.

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit 7e16aa81f9f6a7cfe2287b788a7d62abc2880185
  Author: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
  Date:   Tue Nov 24 10:31:07 2015 +0100

      KVM: arm/arm64: Fix preemptible timer active state crazyness

      We were setting the physical active state on the GIC distributor in a
      preemptible section, which could cause us to set the active state on
      different physical CPU from the one we were actually going to run on,
      hacoc ensues.

      Since we are no longer descheduling/scheduling soft timers in the
      flush/sync timer functions, simply moving the timer flush into a
      non-preemptible section.

      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit 498cd5c32be6e32bc0f8efcad48ab094bb2bfdf3
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Mon Nov 16 10:28:18 2015 +0000

      arm64: KVM: Add workaround for Cortex-A57 erratum 834220

      Cortex-A57 parts up to r1p2 can misreport Stage 2 translation faults
      when a Stage 1 permission fault or device alignment fault should
      have been reported.

      This patch implements the workaround (which is to validate that the
      Stage-1 translation actually succeeds) by using code patching.

      Cc: stable@xxxxxxxxxxxxxxx
      Reviewed-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit c0f0963464c24e034b858441205455bf2a5d93ad
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Mon Nov 16 10:28:17 2015 +0000

      arm64: KVM: Fix AArch32 to AArch64 register mapping

      When running a 32bit guest under a 64bit hypervisor, the ARMv8
      architecture defines a mapping of the 32bit registers in the 64bit
      space. This includes banked registers that are being demultiplexed
      over the 64bit ones.

      On exceptions caused by an operation involving a 32bit register, the
      HW exposes the register number in the ESR_EL2 register. It was so
      far understood that SW had to distinguish between AArch32 and AArch64
      accesses (based on the current AArch32 mode and register number).

      It turns out that I misinterpreted the ARM ARM, and the clue is in
      D1.20.1: "For some exceptions, the exception syndrome given in the
      ESR_ELx identifies one or more register numbers from the issued
      instruction that generated the exception. Where the exception is
      taken from an Exception level using AArch32 these register numbers
      give the AArch64 view of the register."

      Which means that the HW is already giving us the translated version,
      and that we shouldn't try to interpret it at all (for example, doing
      an MMIO operation from the IRQ mode using the LR register leads to
      very unexpected behaviours).

      The fix is thus not to perform a call to vcpu_reg32() at all from
      vcpu_reg(), and use whatever register number is supplied directly.
      The only case we need to find out about the mapping is when we
      actively generate a register access, which only occurs when injecting
      a fault in a guest.

      Cc: stable@xxxxxxxxxxxxxxx
      Reviewed-by: Robin Murphy <robin.murphy@xxxxxxx>
      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit e6fab54423450d699a09ec2b899473a541f61971
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Tue Nov 10 15:11:20 2015 +0100

      ARM/arm64: KVM: test properly for a PTE's uncachedness

      The open coded tests for checking whether a PTE maps a page as
      uncached use a flawed '(pte_val(xxx) & CONST) != CONST' pattern,
      which is not guaranteed to work since the type of a mapping is
      not a set of mutually exclusive bits

      For HYP mappings, the type is an index into the MAIR table (i.e, the
      index itself does not contain any information whatsoever about the
      type of the mapping), and for stage-2 mappings it is a bit field where
      normal memory and device types are defined as follows:

          #define MT_S2_NORMAL            0xf
          #define MT_S2_DEVICE_nGnRE      0x1

      I.e., masking *and* comparing with the latter matches on the former,
      and we have been getting lucky merely because the S2 device mappings
      also have the PTE_UXN bit set, or we would misidentify memory mappings
      as device mappings.

      Since the unmap_range() code path (which contains one instance of the
      flawed test) is used both for HYP mappings and stage-2 mappings, and
      considering the difference between the two, it is non-trivial to fix
      this by rewriting the tests in place, as it would involve passing
      down the type of mapping through all the functions.

      However, since HYP mappings and stage-2 mappings both deal with host
      physical addresses, we can simply check whether the mapping is backed
      by memory that is managed by the host kernel, and only perform the
      D-cache maintenance if this is the case.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Tested-by: Pavel Fedin <p.fedin@xxxxxxxxxxx>
      Reviewed-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>
      Signed-off-by: Christoffer Dall <christoffer.dall@xxxxxxxxxx>

  commit 12e57f59ca3344a588531f68eeede45666e8a6e0
  Author: Ming Lei <ming.lei@xxxxxxxxxxxxx>
  Date:   Tue Nov 24 10:35:31 2015 +0800

      blk-merge: warn if figured out segment number is bigger than 
nr_phys_segments

      We had seen lots of reports of this kind issue, so add one
      warnning in blk-merge, then it can be triggered easily and
      avoid to depend on warning/bug from drivers.

      Signed-off-by: Ming Lei <ming.lei@xxxxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 02e707424c2eadbcda68cd38876c9f4434ca8e1a
  Author: Ming Lei <ming.lei@xxxxxxxxxxxxx>
  Date:   Tue Nov 24 10:35:30 2015 +0800

      blk-merge: fix blk_bio_segment_split

      Commit bdced438acd83a(block: setup bi_phys_segments after
      splitting) introduces function of computing bio->bi_phys_segments
      during bio splitting.

      Unfortunately both bio->bi_seg_front_size and bio->bi_seg_back_size
      arn't computed, so too many physical segments may be obtained
      for one request since both the two are used to check if one segment
      across two bios can be possible.

      This patch fixes the issue by computing the two variables in
      blk_bio_segment_split().

      Fixes: bdced438acd83a(block: setup bi_phys_segments after splitting)
      Reported-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Reported-by: Mark Salter <msalter@xxxxxxxxxx>
      Tested-by: Laurent Dufour <ldufour@xxxxxxxxxxxxxxxxxx>
      Tested-by: Mark Salter <msalter@xxxxxxxxxx>
      Signed-off-by: Ming Lei <ming.lei@xxxxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 578270bfbd2803dc7b0b03fbc2ac119efbc73195
  Author: Ming Lei <ming.lei@xxxxxxxxxxxxx>
  Date:   Tue Nov 24 10:35:29 2015 +0800

      block: fix segment split

      Inside blk_bio_segment_split(), previous bvec pointer(bvprvp)
      always points to the iterator local variable, which is obviously
      wrong, so fix it by pointing to the local variable of 'bvprv'.

      Fixes: 5014c311baa2b(block: fix bogus compiler warnings in blk-merge.c)
      Cc: stable@xxxxxxxxxx #4.3
      Reported-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Reported-by: Mark Salter <msalter@xxxxxxxxxx>
      Tested-by: Laurent Dufour <ldufour@xxxxxxxxxxxxxxxxxx>
      Tested-by: Mark Salter <msalter@xxxxxxxxxx>
      Signed-off-by: Ming Lei <ming.lei@xxxxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit c2489e07c0a71a56fb2c84bc0ee66cddfca7d068
  Author: Jan Kara <jack@xxxxxxx>
  Date:   Mon Nov 23 13:09:51 2015 +0100

      vfs: Avoid softlockups with sendfile(2)

      The following test program from Dmitry can cause softlockups or RCU
      stalls as it copies 1GB from tmpfs into eventfd and we don't have any
      scheduling point at that path in sendfile(2) implementation:

              int r1 = eventfd(0, 0);
              int r2 = memfd_create("", 0);
              unsigned long n = 1<<30;
              fallocate(r2, 0, 0, n);
              sendfile(r1, r2, 0, n);

      Add cond_resched() into __splice_from_pipe() to fix the problem.

      CC: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      CC: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Jan Kara <jack@xxxxxxx>
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit c725bfce7968009756ed2836a8cd7ba4dc163011
  Author: Jan Kara <jack@xxxxxxx>
  Date:   Mon Nov 23 13:09:50 2015 +0100

      vfs: Make sendfile(2) killable even better

      Commit 296291cdd162 (mm: make sendfile(2) killable) fixed an issue where
      sendfile(2) was doing a lot of tiny writes into a filesystem and thus
      was unkillable for a long time. However sendfile(2) can be (mis)used to
      issue lots of writes into arbitrary file descriptor such as evenfd or
      similar special file descriptors which never hit the standard filesystem
      write path and thus are still unkillable. E.g. the following example
      from Dmitry burns CPU for ~16s on my test system without possibility to
      be killed:

              int r1 = eventfd(0, 0);
              int r2 = memfd_create("", 0);
              unsigned long n = 1<<30;
              fallocate(r2, 0, 0, n);
              sendfile(r1, r2, 0, n);

      There are actually quite a few tests for pending signals in sendfile
      code however we data to write is always available none of them seems to
      trigger. So fix the problem by adding a test for pending signal into
      splice_from_pipe_next() also before the loop waiting for pipe buffers to
      be available. This should fix all the lockup issues with sendfile of the
      do-ton-of-tiny-writes nature.

      CC: stable@xxxxxxxxxxxxxxx
      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Signed-off-by: Jan Kara <jack@xxxxxxx>
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit 0ebf7f10d67a70e120f365018f1c5fce9ddc567d
  Author: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 23 21:11:08 2015 -0500

      fix sysvfs symlinks

      The thing got broken back in 2002 - sysvfs does *not* have inline
      symlinks; even short ones have bodies stored in the first block
      of file.  sysv_symlink() handles that correctly; unfortunately,
      attempting to look an existing symlink up will end up confusing
      them for inline symlinks, and interpret the block number containing
      the body as the body itself.

      Nobody has noticed until now, which says something about the level
      of testing sysvfs gets ;-/

      Cc: stable@xxxxxxxxxxxxxxx # all of them, not that anyone cared
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit a2931547eee19201856a89406397ecc1f978deaf
  Merge: 1ec2183 2ce47b4
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 23 13:19:27 2015 -0800

      Merge tag 'linux-kselftest-4.4-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/shuah/linux-kselftest

      Pull kselftest fixes from Shuah Khan:
       "This update consists of one minor documentation fix and a fix to an
        existing test"

      * tag 'linux-kselftest-4.4-rc3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/shuah/linux-kselftest:
        selftests/seccomp: Get page size from sysconf
        tools:testing/selftests: fix typo in futex/README

  commit 0fcb04d59351f790efb8da18edefd6ab4d9bbf3b
  Author: Mike Snitzer <snitzer@xxxxxxxxxx>
  Date:   Mon Nov 23 13:44:38 2015 -0500

      dm thin: fix regression in advertised discard limits

      When establishing a thin device's discard limits we cannot rely on the
      underlying thin-pool device's discard capabilities (which are inherited
      from the thin-pool's underlying data device) given that DM thin devices
      must provide discard support even when the thin-pool's underlying data
      device doesn't support discards.

      Users were exposed to this thin device discard limits regression if
      their thin-pool's underlying data device does _not_ support discards.
      This regression caused all upper-layers that called the
      blkdev_issue_discard() interface to not be able to issue discards to
      thin devices (because discard_granularity was 0).  This regression
      wasn't caught earlier because the device-mapper-test-suite's extensive
      'thin-provisioning' discard tests are only ever performed against
      thin-pool's with data devices that support discards.

      Fix is to have thin_io_hints() test the pool's 'discard_enabled' feature
      rather than inferring whether or not a thin device's discard support
      should be enabled by looking at the thin-pool's discard_granularity.

      Fixes: 216076705 ("dm thin: disable discard support for thin devices if 
pool's is disabled")
      Reported-by: Mike Gerber <mike@xxxxxxxxxxxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # 4.1+

  commit 1ec218373b8ebda821aec00bb156a9c94fad9cd4
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 22 16:45:59 2015 -0800

      Linux 4.4-rc2

  commit 104e2a6f8b3df8b8200c7f4ac23feb079a44e4f3
  Merge: dcfeda9 865762a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 22 15:21:40 2015 -0800

      Merge branch 'akpm' (patches from Andrew)

      Merge slub bulk allocator updates from Andrew Morton:
       "This missed the merge window because I was waiting for some repairs to
        come in.  Nothing actually uses the bulk allocator yet and the changes
        to other code paths are pretty small.  And the net guys are waiting
        for this so they can start merging the client code"

      More comments from Jesper Dangaard Brouer:
       "The kmem_cache_alloc_bulk() call, in mm/slub.c, were included in
        previous kernel.  The present version contains a bug.  Vladimir
        Davydov noticed it contained a bug, when kernel is compiled with
        CONFIG_MEMCG_KMEM (see commit 03ec0ed57ffc: "slub: fix kmem cgroup
        bug in kmem_cache_alloc_bulk").  Plus the mem cgroup counterpart in
        kmem_cache_free_bulk() were missing (see commit 033745189b1b "slub:
        add missing kmem cgroup support to kmem_cache_free_bulk").

        I don't consider the fix stable-material because there are no in-tree
        users of the API.

        But with known bugs (for memcg) I cannot start using the API in the
        net-tree"

      * emailed patches from Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>:
        slab/slub: adjust kmem_cache_alloc_bulk API
        slub: add missing kmem cgroup support to kmem_cache_free_bulk
        slub: fix kmem cgroup bug in kmem_cache_alloc_bulk
        slub: optimize bulk slowpath free by detached freelist
        slub: support for bulk free with SLUB freelists

  commit dcfeda9d5f52bf43ae4297d8102a76d88b778d93
  Merge: 7f21739 bd63acf
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 22 15:10:57 2015 -0800

      Merge tag 'tty-4.4-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty

      Pull tty/serial fixes from Greg KH:
       "Here are a few small tty/serial driver fixes for 4.4-rc2 that resolve
        some reported problems.

        All have been in linux-next, full details are in the shortlog below"

      * tag 'tty-4.4-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty:
        serial: export fsl8250_handle_irq
        serial: 8250_mid: Add missing dependency
        tty: audit: Fix audit source
        serial: etraxfs-uart: Fix crash
        serial: fsl_lpuart: Fix earlycon support
        bcm63xx_uart: Use the device name when registering an interrupt
        tty: Fix direct use of tty buffer work
        tty: Fix tty_send_xchar() lock order inversion

  commit 7f21739301bf894607f64cbb36add761fa4cb772
  Merge: 6d2d91b b57f9f3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 22 13:26:24 2015 -0800

      Merge tag 'staging-4.4-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging

      Pull staging/IIO fixes from Greg KH:
       "Here are some staging and iio driver fixes for 4.4-rc2.  All of these
        are in response to issues that have been reported and have been in
        linux-next for a while"

      * tag 'staging-4.4-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging:
        Revert "Staging: wilc1000: coreconfigurator: Drop unneeded wrapper 
functions"
        iio: adc: xilinx: Fix VREFN scale
        iio: si7020: Swap data byte order
        iio: adc: vf610_adc: Fix division by zero error
        iio:ad7793: Fix ad7785 product ID
        iio: ad5064: Fix ad5629/ad5669 shift
        iio:ad5064: Make sure ad5064_i2c_write() returns 0 on success
        iio: lpc32xx_adc: fix warnings caused by enabling unprepared clock
        staging: iio: select IRQ_WORK for IIO_DUMMY_EVGEN
        vf610_adc: Fix internal temperature calculation

  commit 6d2d91b3e463a10a745616650066e28b42af649d
  Merge: 0ec7dc8 19cd80a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 22 13:15:05 2015 -0800

      Merge tag 'usb-4.4-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb

      Pull USB fixes from Greg KH:
       "Here are a number of USB fixes and new device ids for 4.4-rc2.  All
        have been in linux-next and the details are in the shortlog"

      * tag 'usb-4.4-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb: (28 commits)
        usblp: do not set TASK_INTERRUPTIBLE before lock
        USB: MAINTAINERS: cxacru
        usb: kconfig: fix warning of select USB_OTG
        USB: option: add XS Stick W100-2 from 4G Systems
        xhci: Fix a race in usb2 LPM resume, blocking U3 for usb2 devices
        usb: xhci: fix checking ep busy for CFC
        xhci: Workaround to get Intel xHCI reset working more reliably
        usb: chipidea: imx: fix a possible NULL dereference
        usb: chipidea: usbmisc_imx: fix a possible NULL dereference
        usb: chipidea: otg: gadget module load and unload support
        usb: chipidea: debug: disable usb irq while role switch
        ARM: dts: imx27.dtsi: change the clock information for usb
        usb: chipidea: imx: refine clock operations to adapt for all platforms
        usb: gadget: atmel_usba_udc: Expose correct device speed
        usb: musb: enable usb_dma parameter
        usb: phy: phy-mxs-usb: fix a possible NULL dereference
        usb: dwc3: gadget: let us set lower max_speed
        usb: musb: fix tx fifo flush handling
        usb: gadget: f_loopback: fix the warning during the enumeration
        usb: dwc2: host: Fix remote wakeup when not in DWC2_L2
        ...

  commit 0ec7dc8d19683ae292a4866c155824b647226103
  Merge: 94521b2 55f1d59
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 22 12:59:46 2015 -0800

      Merge branch 'upstream' of 
git://git.linux-mips.org/pub/scm/ralf/upstream-linus

      Pull MIPS fixes from Ralf Baechle:

       - Fix a flood of annoying build warnings

       - A number of fixes for Atheros 79xx platforms

      * 'upstream' of git://git.linux-mips.org/pub/scm/ralf/upstream-linus:
        MIPS: ath79: Add a machine entry for booting OF machines
        MIPS: ath79: Fix the size of the MISC INTC registers in ar9132.dtsi
        MIPS: ath79: Fix the DDR control initialization on ar71xx and ar934x
        MIPS: Fix flood of warnings about comparsion being always true.

  commit 94521b2fd27b5ef43573f9f425a48839fa80ebaa
  Merge: 727cde6 41b85a1
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 22 12:50:58 2015 -0800

      Merge branch 'parisc-4.4-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux

      Pull parisc update from Helge Deller:
       "This patchset adds Huge Page and HUGETLBFS support for parisc"

      Honestly, the hugepage support should have gone through in the merge
      window, and is not really an rc-time fix.  But it only touches
      arch/parisc, and I cannot find it in myself to care.  If one of the
      three parisc users notices a breakage, I will point at Helge and make
      rude farting noises.

      * 'parisc-4.4-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux:
        parisc: Map kernel text and data on huge pages
        parisc: Add Huge Page and HUGETLBFS support
        parisc: Use long branch to do_syscall_trace_exit
        parisc: Increase initial kernel mapping to 32MB on 64bit kernel
        parisc: Initialize the fault vector earlier in the boot process.
        parisc: Add defines for Huge page support
        parisc: Drop unused MADV_xxxK_PAGES flags from asm/mman.h
        parisc: Drop definition of start_thread_som for HP-UX SOM binaries
        parisc: Fix wrong comment regarding first pmd entry flags

  commit 727cde6c3af38ebb2dbc40e0b32499a55051851d
  Merge: 069ec22 e15bf88
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 22 12:37:20 2015 -0800

      Merge branch 'perf-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull perf tool fixes from Thomas Gleixner:
       "A couple of fixes for perf tools:

         - Build system updates

         - Plug a memory leak in an error path of perf probe

         - Tear down probes correctly when adding fails

         - Fixes to the perf symbol handling

         - Fix ordering of event processing in buildid-list

         - Fix per DSO filtering in the histogram browser"

      * 'perf-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        perf probe: Clear probe_trace_event when add_probe_trace_event() fails
        perf probe: Fix memory leaking on failure by clearing all 
probe_trace_events
        perf inject: Also re-pipe lost_samples event
        perf buildid-list: Requires ordered events
        perf symbols: Fix dso lookup by long name and missing buildids
        perf symbols: Allow forcing reading of non-root owned files by root
        perf hists browser: The dso can be obtained from 
popup_action->ms.map->dso
        perf hists browser: Fix 'd' hotkey action to filter by DSO
        perf symbols: Rebuild rbtree when adjusting symbols for kcore
        tools: Add a "make all" rule
        tools: Actually install tmon in the install rule

  commit 069ec22915b0932e1c2da53255a705593743374f
  Merge: 3ad5d7e 581b7f15
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 22 12:00:12 2015 -0800

      Merge branch 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 fixes from Thomas Gleixner:
       "This update contains:

         - MPX updates for handling 32bit processes

         - A fix for a long standing bug in 32bit signal frame handling
           related to FPU/XSAVE state

         - Handle get_xsave_addr() correctly in KVM

         - Fix SMAP check under paravirtualization

         - Add a comment to the static function trace entry to avoid further
           confusion about the difference to dynamic tracing"

      * 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/cpu: Fix SMAP check in PVOPS environments
        x86/ftrace: Add comment on static function tracing
        x86/fpu: Fix get_xsave_addr() behavior under virtualization
        x86/fpu: Fix 32-bit signal frame handling
        x86/mpx: Fix 32-bit address space calculation
        x86/mpx: Do proper get_user() when running 32-bit binaries on 64-bit 
kernels

  commit 865762a8119e74b5f0e236d2d8eaaf8be9292a06
  Author: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
  Date:   Fri Nov 20 15:57:58 2015 -0800

      slab/slub: adjust kmem_cache_alloc_bulk API

      Adjust kmem_cache_alloc_bulk API before we have any real users.

      Adjust API to return type 'int' instead of previously type 'bool'.  This
      is done to allow future extension of the bulk alloc API.

      A future extension could be to allow SLUB to stop at a page boundary, when
      specified by a flag, and then return the number of objects.

      The advantage of this approach, would make it easier to make bulk alloc
      run without local IRQs disabled.  With an approach of cmpxchg "stealing"
      the entire c->freelist or page->freelist.  To avoid overshooting we would
      stop processing at a slab-page boundary.  Else we always end up returning
      some objects at the cost of another cmpxchg.

      To keep compatible with future users of this API linking against an older
      kernel when using the new flag, we need to return the number of allocated
      objects with this API change.

      Signed-off-by: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
      Cc: Vladimir Davydov <vdavydov@xxxxxxxxxxxxx>
      Acked-by: Christoph Lameter <cl@xxxxxxxxx>
      Cc: Pekka Enberg <penberg@xxxxxxxxxx>
      Cc: David Rientjes <rientjes@xxxxxxxxxx>
      Cc: Joonsoo Kim <iamjoonsoo.kim@xxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 033745189b1bae3fc931beeaf48604ee7c259309
  Author: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
  Date:   Fri Nov 20 15:57:55 2015 -0800

      slub: add missing kmem cgroup support to kmem_cache_free_bulk

      Initial implementation missed support for kmem cgroup support in
      kmem_cache_free_bulk() call, add this.

      If CONFIG_MEMCG_KMEM is not enabled, the compiler should be smart enough
      to not add any asm code.

      Incoming bulk free objects can belong to different kmem cgroups, and
      object free call can happen at a later point outside memcg context.  Thus,
      we need to keep the orig kmem_cache, to correctly verify if a memcg object
      match against its "root_cache" (s->memcg_params.root_cache).

      Signed-off-by: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
      Reviewed-by: Vladimir Davydov <vdavydov@xxxxxxxxxxxxx>
      Cc: Christoph Lameter <cl@xxxxxxxxx>
      Cc: Pekka Enberg <penberg@xxxxxxxxxx>
      Cc: David Rientjes <rientjes@xxxxxxxxxx>
      Cc: Joonsoo Kim <iamjoonsoo.kim@xxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 03ec0ed57ffc77720b811dbb6d44733b58360d9f
  Author: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
  Date:   Fri Nov 20 15:57:52 2015 -0800

      slub: fix kmem cgroup bug in kmem_cache_alloc_bulk

      The call slab_pre_alloc_hook() interacts with kmemgc and is not allowed to
      be called several times inside the bulk alloc for loop, due to the call to
      memcg_kmem_get_cache().

      This would result in hitting the VM_BUG_ON in __memcg_kmem_get_cache.

      As suggested by Vladimir Davydov, change slab_post_alloc_hook() to be able
      to handle an array of objects.

      A subtle detail is, loop iterator "i" in slab_post_alloc_hook() must have
      same type (size_t) as size argument.  This helps the compiler to easier
      realize that it can remove the loop, when all debug statements inside loop
      evaluates to nothing.  Note, this is only an issue because the kernel is
      compiled with GCC option: -fno-strict-overflow

      In slab_alloc_node() the compiler inlines and optimizes the invocation of
      slab_post_alloc_hook(s, flags, 1, &object) by removing the loop and access
      object directly.

      Signed-off-by: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
      Reported-by: Vladimir Davydov <vdavydov@xxxxxxxxxxxxx>
      Suggested-by: Vladimir Davydov <vdavydov@xxxxxxxxxxxxx>
      Reviewed-by: Vladimir Davydov <vdavydov@xxxxxxxxxxxxx>
      Cc: Christoph Lameter <cl@xxxxxxxxx>
      Cc: Pekka Enberg <penberg@xxxxxxxxxx>
      Cc: David Rientjes <rientjes@xxxxxxxxxx>
      Cc: Joonsoo Kim <iamjoonsoo.kim@xxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit d0ecd894e3d5f768a84403b34019c4a7daa05882
  Author: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
  Date:   Fri Nov 20 15:57:49 2015 -0800

      slub: optimize bulk slowpath free by detached freelist

      This change focus on improving the speed of object freeing in the
      "slowpath" of kmem_cache_free_bulk.

      The calls slab_free (fastpath) and __slab_free (slowpath) have been
      extended with support for bulk free, which amortize the overhead of
      the (locked) cmpxchg_double.

      To use the new bulking feature, we build what I call a detached
      freelist.  The detached freelist takes advantage of three properties:

       1) the free function call owns the object that is about to be freed,
          thus writing into this memory is synchronization-free.

       2) many freelist's can co-exist side-by-side in the same slab-page
          each with a separate head pointer.

       3) it is the visibility of the head pointer that needs synchronization.

      Given these properties, the brilliant part is that the detached
      freelist can be constructed without any need for synchronization.  The
      freelist is constructed directly in the page objects, without any
      synchronization needed.  The detached freelist is allocated on the
      stack of the function call kmem_cache_free_bulk.  Thus, the freelist
      head pointer is not visible to other CPUs.

      All objects in a SLUB freelist must belong to the same slab-page.
      Thus, constructing the detached freelist is about matching objects
      that belong to the same slab-page.  The bulk free array is scanned is
      a progressive manor with a limited look-ahead facility.

      Kmem debug support is handled in call of slab_free().

      Notice kmem_cache_free_bulk no longer need to disable IRQs. This
      only slowed down single free bulk with approx 3 cycles.

      Performance data:
       Benchmarked[1] obj size 256 bytes on CPU i7-4790K @ 4.00GHz

      SLUB fastpath single object quick reuse: 47 cycles(tsc) 11.931 ns

      To get stable and comparable numbers, the kernel have been booted with
      "slab_merge" (this also improve performance for larger bulk sizes).

      Performance data, compared against fallback bulking:

      bulk -  fallback bulk            - improvement with this patch
         1 -  62 cycles(tsc) 15.662 ns - 49 cycles(tsc) 12.407 ns- improved 
21.0%
         2 -  55 cycles(tsc) 13.935 ns - 30 cycles(tsc) 7.506 ns - improved 
45.5%
         3 -  53 cycles(tsc) 13.341 ns - 23 cycles(tsc) 5.865 ns - improved 
56.6%
         4 -  52 cycles(tsc) 13.081 ns - 20 cycles(tsc) 5.048 ns - improved 
61.5%
         8 -  50 cycles(tsc) 12.627 ns - 18 cycles(tsc) 4.659 ns - improved 
64.0%
        16 -  49 cycles(tsc) 12.412 ns - 17 cycles(tsc) 4.495 ns - improved 
65.3%
        30 -  49 cycles(tsc) 12.484 ns - 18 cycles(tsc) 4.533 ns - improved 
63.3%
        32 -  50 cycles(tsc) 12.627 ns - 18 cycles(tsc) 4.707 ns - improved 
64.0%
        34 -  96 cycles(tsc) 24.243 ns - 23 cycles(tsc) 5.976 ns - improved 
76.0%
        48 -  83 cycles(tsc) 20.818 ns - 21 cycles(tsc) 5.329 ns - improved 
74.7%
        64 -  74 cycles(tsc) 18.700 ns - 20 cycles(tsc) 5.127 ns - improved 
73.0%
       128 -  90 cycles(tsc) 22.734 ns - 27 cycles(tsc) 6.833 ns - improved 
70.0%
       158 -  99 cycles(tsc) 24.776 ns - 30 cycles(tsc) 7.583 ns - improved 
69.7%
       250 - 104 cycles(tsc) 26.089 ns - 37 cycles(tsc) 9.280 ns - improved 
64.4%

      Performance data, compared current in-kernel bulking:

      bulk - curr in-kernel  - improvement with this patch
         1 -  46 cycles(tsc) - 49 cycles(tsc) - improved (cycles:-3) -6.5%
         2 -  27 cycles(tsc) - 30 cycles(tsc) - improved (cycles:-3) -11.1%
         3 -  21 cycles(tsc) - 23 cycles(tsc) - improved (cycles:-2) -9.5%
         4 -  18 cycles(tsc) - 20 cycles(tsc) - improved (cycles:-2) -11.1%
         8 -  17 cycles(tsc) - 18 cycles(tsc) - improved (cycles:-1) -5.9%
        16 -  18 cycles(tsc) - 17 cycles(tsc) - improved (cycles: 1)  5.6%
        30 -  18 cycles(tsc) - 18 cycles(tsc) - improved (cycles: 0)  0.0%
        32 -  18 cycles(tsc) - 18 cycles(tsc) - improved (cycles: 0)  0.0%
        34 -  78 cycles(tsc) - 23 cycles(tsc) - improved (cycles:55) 70.5%
        48 -  60 cycles(tsc) - 21 cycles(tsc) - improved (cycles:39) 65.0%
        64 -  49 cycles(tsc) - 20 cycles(tsc) - improved (cycles:29) 59.2%
       128 -  69 cycles(tsc) - 27 cycles(tsc) - improved (cycles:42) 60.9%
       158 -  79 cycles(tsc) - 30 cycles(tsc) - improved (cycles:49) 62.0%
       250 -  86 cycles(tsc) - 37 cycles(tsc) - improved (cycles:49) 57.0%

      Performance with normal SLUB merging is significantly slower for
      larger bulking.  This is believed to (primarily) be an effect of not
      having to share the per-CPU data-structures, as tuning per-CPU size
      can achieve similar performance.

      bulk - slab_nomerge   -  normal SLUB merge
         1 -  49 cycles(tsc) - 49 cycles(tsc) - merge slower with cycles:0
         2 -  30 cycles(tsc) - 30 cycles(tsc) - merge slower with cycles:0
         3 -  23 cycles(tsc) - 23 cycles(tsc) - merge slower with cycles:0
         4 -  20 cycles(tsc) - 20 cycles(tsc) - merge slower with cycles:0
         8 -  18 cycles(tsc) - 18 cycles(tsc) - merge slower with cycles:0
        16 -  17 cycles(tsc) - 17 cycles(tsc) - merge slower with cycles:0
        30 -  18 cycles(tsc) - 23 cycles(tsc) - merge slower with cycles:5
        32 -  18 cycles(tsc) - 22 cycles(tsc) - merge slower with cycles:4
        34 -  23 cycles(tsc) - 22 cycles(tsc) - merge slower with cycles:-1
        48 -  21 cycles(tsc) - 22 cycles(tsc) - merge slower with cycles:1
        64 -  20 cycles(tsc) - 48 cycles(tsc) - merge slower with cycles:28
       128 -  27 cycles(tsc) - 57 cycles(tsc) - merge slower with cycles:30
       158 -  30 cycles(tsc) - 59 cycles(tsc) - merge slower with cycles:29
       250 -  37 cycles(tsc) - 56 cycles(tsc) - merge slower with cycles:19

      Joint work with Alexander Duyck.

      [1] 
https://github.com/netoptimizer/prototype-kernel/blob/master/kernel/mm/slab_bulk_test01.c

      [akpm@xxxxxxxxxxxxxxxxxxxx: BUG_ON -> WARN_ON;return]
      Signed-off-by: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
      Signed-off-by: Alexander Duyck <alexander.h.duyck@xxxxxxxxxx>
      Acked-by: Christoph Lameter <cl@xxxxxxxxx>
      Cc: Pekka Enberg <penberg@xxxxxxxxxx>
      Cc: David Rientjes <rientjes@xxxxxxxxxx>
      Cc: Joonsoo Kim <iamjoonsoo.kim@xxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 81084651d73737988355f167065fab8a73574db1
  Author: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
  Date:   Fri Nov 20 15:57:46 2015 -0800

      slub: support for bulk free with SLUB freelists

      Make it possible to free a freelist with several objects by adjusting API
      of slab_free() and __slab_free() to have head, tail and an objects counter
      (cnt).

      Tail being NULL indicate single object free of head object.  This allow
      compiler inline constant propagation in slab_free() and
      slab_free_freelist_hook() to avoid adding any overhead in case of single
      object free.

      This allows a freelist with several objects (all within the same
      slab-page) to be free'ed using a single locked cmpxchg_double in
      __slab_free() and with an unlocked cmpxchg_double in slab_free().

      Object debugging on the free path is also extended to handle these
      freelists.  When CONFIG_SLUB_DEBUG is enabled it will also detect if
      objects don't belong to the same slab-page.

      These changes are needed for the next patch to bulk free the detached
      freelists it introduces and constructs.

      Micro benchmarking showed no performance reduction due to this change,
      when debugging is turned off (compiled with CONFIG_SLUB_DEBUG).

      Signed-off-by: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
      Signed-off-by: Alexander Duyck <alexander.h.duyck@xxxxxxxxxx>
      Acked-by: Christoph Lameter <cl@xxxxxxxxx>
      Cc: Pekka Enberg <penberg@xxxxxxxxxx>
      Cc: David Rientjes <rientjes@xxxxxxxxxx>
      Cc: Joonsoo Kim <iamjoonsoo.kim@xxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 41b85a1163386f8328ad570f383973cb3975d2fa
  Author: Helge Deller <deller@xxxxxx>
  Date:   Sun Nov 22 00:07:44 2015 +0100

      parisc: Map kernel text and data on huge pages

      Adjust the linker script and map_pages() to map kernel text and data on
      physical 1MB huge/large pages.

      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit 736d2169338a50c8814efc186b5423aee43b0c68
  Author: Helge Deller <deller@xxxxxx>
  Date:   Sun Nov 22 00:07:06 2015 +0100

      parisc: Add Huge Page and HUGETLBFS support

      This patch adds huge page support to allow userspace to allocate huge
      pages and to use hugetlbfs filesystem on 32- and 64-bit Linux kernels.
      A later patch will add kernel support to map kernel text and data on
      huge pages.

      The only requirement is, that the kernel needs to be compiled for a
      PA8X00 CPU (PA2.0 architecture). Older PA1.X CPUs do not support
      variable page sizes. 64bit Kernels are compiled for PA2.0 by default.

      Technically on parisc multiple physical huge pages may be needed to
      emulate standard 2MB huge pages.

      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit 337685e556c6f080bf4775950e3b9493852715f8
  Author: Helge Deller <deller@xxxxxx>
  Date:   Fri Nov 20 11:22:32 2015 +0100

      parisc: Use long branch to do_syscall_trace_exit

      Use the 22bit instead of the 17bit branch instruction on a 64bit kernel
      to reach the do_syscall_trace_exit function from the gateway page.
      A huge page enabled kernel may need the additional branch distance bits.

      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit 332b42e4eb6e955f3be0bbbf1f272aa943954d98
  Author: Helge Deller <deller@xxxxxx>
  Date:   Fri Nov 20 11:17:27 2015 +0100

      parisc: Increase initial kernel mapping to 32MB on 64bit kernel

      For the 64bit kernel the initially 16 MB kernel memory might become too
      small if you build a kernel with many modules built-in and with kernel
      text and data areas mapped on huge pages.

      This patch increases the initial mapping to 32MB for 64bit kernels and
      keeps 16MB for 32bit kernels.

      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit 4182d0cdf853fb044b969318289ae9f451f69c86
  Author: Helge Deller <deller@xxxxxx>
  Date:   Fri Nov 20 10:50:01 2015 +0100

      parisc: Initialize the fault vector earlier in the boot process.

      A fault vector on parisc needs to be 2K aligned.  Furthermore the
      checksum of the fault vector needs to sum up to 0 which is being
      calculated and written at runtime.

      Up to now we aligned both PA20 and PA11 fault vectors on the same 4K
      page in order to easily write the checksum after having mapped the
      kernel read-only (by mapping this page only as read-write).
      But when we want to map the kernel text and data on huge pages this
      makes things harder.
      So, simplify it by aligning both fault vectors on 2K boundries and write
      the checksum before we map the page read-only.

      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit 1f25ad26d65b3740f44d6e03edcd34a5f7b58850
  Author: Helge Deller <deller@xxxxxx>
  Date:   Fri Nov 20 15:46:52 2015 +0100

      parisc: Add defines for Huge page support

      Huge pages on parisc will have the same size as one pmd table, which
      is on a 64bit kernel 2MB on a kernel with 4K kernel page sizes, and
      on a 32bit kernel 4MB when used with 4K kernel pages.

      Since parisc does not physically supports 2MB huge page sizes, emulate
      it with two consecutive 1MB page sizes instead. Keeping the same huge
      page size as one pmd will allow us to add transparent huge page support
      later on.

      Bit 21 in the pte flags was unused and will now be used to mark a page
      as huge page (_PAGE_HPAGE_BIT).

      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit dcbf0d299c00ed4f82ea8d6e359ad88a5182f9b8
  Author: Helge Deller <deller@xxxxxx>
  Date:   Sun Nov 22 12:14:14 2015 +0100

      parisc: Drop unused MADV_xxxK_PAGES flags from asm/mman.h

      Drop the MADV_xxK_PAGES flags, which were never used and were from a 
proposed
      API which was never integrated into the generic Linux kernel code.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit 3ad5d7e06a96d54a55acb5ab25938a06814605c8
  Merge: 707b4f4 b4a6471
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Nov 21 10:49:13 2015 -0800

      Merge branch 'akpm' (patches from Andrew)

      Merge misc fixes from Andrew Morton:
       "A bunch of fixes"

      * emailed patches from Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>:
        slub: mark the dangling ifdef #else of CONFIG_SLUB_DEBUG
        slub: avoid irqoff/on in bulk allocation
        slub: create new ___slab_alloc function that can be called with irqs 
disabled
        mm: fix up sparse warning in gfpflags_allow_blocking
        ocfs2: fix umask ignored issue
        PM/OPP: add entry in MAINTAINERS
        kernel/panic.c: turn off locks debug before releasing console lock
        kernel/signal.c: unexport sigsuspend()
        kasan: fix kmemleak false-positive in kasan_module_alloc()
        fat: fix fake_offset handling on error path
        mm/hugetlbfs: fix bugs in fallocate hole punch of areas with holes
        mm/page-writeback.c: initialize m_dirty to avoid compile warning
        various: fix pci_set_dma_mask return value checking
        mm: loosen MADV_NOHUGEPAGE to enable Qemu postcopy on s390
        mm: vmalloc: don't remove inexistent guard hole in remove_vm_area()
        tools/vm/page-types.c: support KPF_IDLE
        ncpfs: don't allow negative timeouts
        configfs: allow dynamic group creation
        MAINTAINERS: add Moritz as reviewer for FPGA Manager Framework
        slab.h: sprinkle __assume_aligned attributes

  commit 707b4f493e77638387f29d5ea35e383c418e710d
  Merge: 4143fc8 3da6d49
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Nov 21 10:26:24 2015 -0800

      Merge branch 'timers-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull timer fixes from Thomas Gleixner:
       "Two timer fixlets from Arnd:

         - Use proper constant size in the FSL timer driver
         - Prevent a build error for legacy platforms"

      * 'timers-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        clocksource: Disallow drivers for ARCH_USES_GETTIMEOFFSET
        clocksource/fsl: Avoid harmless 64-bit warnings

  commit 4143fc83bb0c05a4e2042d78e18a75156e914260
  Merge: 876454a 1c7d4dd
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Nov 21 10:19:15 2015 -0800

      Merge branch 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull irq fixes from Thomas Gleixner:
       "Three fixes for the ARM GIC interrupt controller from Marc addressing
        various shortcomings versus boot initialization and suspend/resume"

      * 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        irqchip/gic: Add save/restore of the active state
        irqchip/gic: Clear enable bits before restoring them
        irqchip/gic: Make sure all interrupts are deactivated at boot

  commit 876454ac1a710acd434c2f23617f91d7df82387b
  Merge: 81051f9 1ddaa02
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Nov 21 09:52:07 2015 -0800

      Merge tag 'for-linus-20151120' of git://git.infradead.org/linux-mtd

      Pull MTD fixes from Brian Norris:

       - MAINTAINERS updates for brcmnand driver

       - Fix reboot hangs seen when multiple NAND flash chips are registered
         with the same controller

       - Fix build issues on jz4740 NAND driver; the error was introduced in
         4.3, so I guess nobody really cared, but we might as well fix it

      * tag 'for-linus-20151120' of git://git.infradead.org/linux-mtd:
        MAINTAINERS: brcmnand: Add co-maintainer for Broadcom SoCs
        MAINTAINERS: brcmnand: Add Broadcom internal mailing-list
        mtd: nand: fix shutdown/reboot for multi-chip systems
        mtd: jz4740_nand: fix build on jz4740 after removing gpio.h

  commit b094f89ca42fbb8ce40174d5f85ca8430e499da6
  Author: Jens Axboe <axboe@xxxxxx>
  Date:   Fri Nov 20 20:29:45 2015 -0700

      blk-mq: fix calling unplug callbacks with preempt disabled

      Liu reported that running certain parts of xfstests threw the
      following error:

      BUG: sleeping function called from invalid context at mm/page_alloc.c:3190
      in_atomic(): 1, irqs_disabled(): 0, pid: 6, name: kworker/u16:0
      3 locks held by kworker/u16:0/6:
       #0:  ("writeback"){++++.+}, at: [<ffffffff8107f083>] 
process_one_work+0x173/0x730
       #1:  ((&(&wb->dwork)->work)){+.+.+.}, at: [<ffffffff8107f083>] 
process_one_work+0x173/0x730
       #2:  (&type->s_umount_key#44){+++++.}, at: [<ffffffff811e6805>] 
trylock_super+0x25/0x60
      CPU: 5 PID: 6 Comm: kworker/u16:0 Tainted: G           OE   4.3.0+ #3
      Hardware name: Red Hat KVM, BIOS Bochs 01/01/2011
      Workqueue: writeback wb_workfn (flush-btrfs-108)
       ffffffff81a3abab ffff88042e282ba8 ffffffff8130191b ffffffff81a3abab
       0000000000000c76 ffff88042e282ba8 ffff88042e27c180 ffff88042e282bd8
       ffffffff8108ed95 ffff880400000004 0000000000000000 0000000000000c76
      Call Trace:
       [<ffffffff8130191b>] dump_stack+0x4f/0x74
       [<ffffffff8108ed95>] ___might_sleep+0x185/0x240
       [<ffffffff8108eea2>] __might_sleep+0x52/0x90
       [<ffffffff811817e8>] __alloc_pages_nodemask+0x268/0x410
       [<ffffffff8109a43c>] ? sched_clock_local+0x1c/0x90
       [<ffffffff8109a6d1>] ? local_clock+0x21/0x40
       [<ffffffff810b9eb0>] ? __lock_release+0x420/0x510
       [<ffffffff810b534c>] ? __lock_acquired+0x16c/0x3c0
       [<ffffffff811ca265>] alloc_pages_current+0xc5/0x210
       [<ffffffffa0577105>] ? rbio_is_full+0x55/0x70 [btrfs]
       [<ffffffff810b7ed8>] ? mark_held_locks+0x78/0xa0
       [<ffffffff81666d50>] ? _raw_spin_unlock_irqrestore+0x40/0x60
       [<ffffffffa0578c0a>] full_stripe_write+0x5a/0xc0 [btrfs]
       [<ffffffffa0578ca9>] __raid56_parity_write+0x39/0x60 [btrfs]
       [<ffffffffa0578deb>] run_plug+0x11b/0x140 [btrfs]
       [<ffffffffa0578e33>] btrfs_raid_unplug+0x23/0x70 [btrfs]
       [<ffffffff812d36c2>] blk_flush_plug_list+0x82/0x1f0
       [<ffffffff812e0349>] blk_sq_make_request+0x1f9/0x740
       [<ffffffff812ceba2>] ? generic_make_request_checks+0x222/0x7c0
       [<ffffffff812cf264>] ? blk_queue_enter+0x124/0x310
       [<ffffffff812cf1d2>] ? blk_queue_enter+0x92/0x310
       [<ffffffff812d0ae2>] generic_make_request+0x172/0x2c0
       [<ffffffff812d0ad4>] ? generic_make_request+0x164/0x2c0
       [<ffffffff812d0ca0>] submit_bio+0x70/0x140
       [<ffffffffa0577b29>] ? rbio_add_io_page+0x99/0x150 [btrfs]
       [<ffffffffa0578a89>] finish_rmw+0x4d9/0x600 [btrfs]
       [<ffffffffa0578c4c>] full_stripe_write+0x9c/0xc0 [btrfs]
       [<ffffffffa057ab7f>] raid56_parity_write+0xef/0x160 [btrfs]
       [<ffffffffa052bd83>] btrfs_map_bio+0xe3/0x2d0 [btrfs]
       [<ffffffffa04fbd6d>] btrfs_submit_bio_hook+0x8d/0x1d0 [btrfs]
       [<ffffffffa05173c4>] submit_one_bio+0x74/0xb0 [btrfs]
       [<ffffffffa0517f55>] submit_extent_page+0xe5/0x1c0 [btrfs]
       [<ffffffffa0519b18>] __extent_writepage_io+0x408/0x4c0 [btrfs]
       [<ffffffffa05179c0>] ? alloc_dummy_extent_buffer+0x140/0x140 [btrfs]
       [<ffffffffa051dc88>] __extent_writepage+0x218/0x3a0 [btrfs]
       [<ffffffff810b7ed8>] ? mark_held_locks+0x78/0xa0
       [<ffffffffa051e2c9>] extent_write_cache_pages.clone.0+0x2f9/0x400 [btrfs]
       [<ffffffffa051e422>] extent_writepages+0x52/0x70 [btrfs]
       [<ffffffffa05001f0>] ? btrfs_set_inode_index+0x70/0x70 [btrfs]
       [<ffffffffa04fcc17>] btrfs_writepages+0x27/0x30 [btrfs]
       [<ffffffff81184df3>] do_writepages+0x23/0x40
       [<ffffffff81212229>] __writeback_single_inode+0x89/0x4d0
       [<ffffffff81212a60>] ? writeback_sb_inodes+0x260/0x480
       [<ffffffff81212a60>] ? writeback_sb_inodes+0x260/0x480
       [<ffffffff8121295f>] ? writeback_sb_inodes+0x15f/0x480
       [<ffffffff81212ad2>] writeback_sb_inodes+0x2d2/0x480
       [<ffffffff810b1397>] ? down_read_trylock+0x57/0x60
       [<ffffffff811e6805>] ? trylock_super+0x25/0x60
       [<ffffffff810d629f>] ? rcu_read_lock_sched_held+0x4f/0x90
       [<ffffffff81212d0c>] __writeback_inodes_wb+0x8c/0xc0
       [<ffffffff812130b5>] wb_writeback+0x2b5/0x500
       [<ffffffff810b7ed8>] ? mark_held_locks+0x78/0xa0
       [<ffffffff810660a8>] ? __local_bh_enable_ip+0x68/0xc0
       [<ffffffff81213362>] ? wb_do_writeback+0x62/0x310
       [<ffffffff812133c1>] wb_do_writeback+0xc1/0x310
       [<ffffffff8107c3d9>] ? set_worker_desc+0x79/0x90
       [<ffffffff81213842>] wb_workfn+0x92/0x330
       [<ffffffff8107f133>] process_one_work+0x223/0x730
       [<ffffffff8107f083>] ? process_one_work+0x173/0x730
       [<ffffffff8108035f>] ? worker_thread+0x18f/0x430
       [<ffffffff810802ed>] worker_thread+0x11d/0x430
       [<ffffffff810801d0>] ? maybe_create_worker+0xf0/0xf0
       [<ffffffff810801d0>] ? maybe_create_worker+0xf0/0xf0
       [<ffffffff810858df>] kthread+0xef/0x110
       [<ffffffff8108f74e>] ? schedule_tail+0x1e/0xd0
       [<ffffffff810857f0>] ? __init_kthread_worker+0x70/0x70
       [<ffffffff816673bf>] ret_from_fork+0x3f/0x70
       [<ffffffff810857f0>] ? __init_kthread_worker+0x70/0x70

      The issue is that we've got the software context pinned while
      calling blk_flush_plug_list(), which flushes callbacks that
      are allowed to sleep. btrfs and raid has such callbacks.

      Flip the checks around a bit, so we can enable preempt a bit
      earlier and flush plugs without having preempt disabled.

      This only affects blk-mq driven devices, and only those that
      register a single queue.

      Reported-by: Liu Bo <bo.li.liu@xxxxxxxxxx>
      Tested-by: Liu Bo <bo.li.liu@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxx
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit bd63acf9e9a6b48e9c6c15f0f413f85a481cb5ef
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Nov 16 16:48:09 2015 +0100

      serial: export fsl8250_handle_irq

      fsl8250_handle_irq is now used by the of_serial driver, and that fails
      if it is a loadable module:

      ERROR: "fsl8250_handle_irq" [drivers/tty/serial/of_serial.ko] undefined!

      This exports the symbol to avoid randconfig errors.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: d43b54d269d2 ("serial: Enable Freescale 16550 workaround on arm")
      Cc: Scott Wood <scottwood@xxxxxxxxxxxxx>
      Signed-off-by: Jeff Mahoney <jeffm@xxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit fa70045e9df47d2e7a698e5f7a0d21423a58cdaa
  Author: Heikki Krogerus <heikki.krogerus@xxxxxxxxxxxxxxx>
  Date:   Thu Nov 12 15:21:23 2015 +0200

      serial: 8250_mid: Add missing dependency

      8250_mid uses rational_best_approximation() function, so the
      driver needs to select CONFIG_RATIONAL option.

      This fixes build error when CONFIG_RATIONAL is not enabled:

      drivers/built-in.o: In function `mid8250_set_termios':
      8250_mid.c:(.text+0x10169a): undefined reference to 
`rational_best_approximation'

      Reported-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Signed-off-by: Heikki Krogerus <heikki.krogerus@xxxxxxxxxxxxxxx>
      Acked-by: Andy Shevchenko <andy.shevchenko@xxxxxxxxx>
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 6b2a3d628aa752f0ab825fc6d4d07b09e274d1c1
  Author: Peter Hurley <peter@xxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 8 08:52:31 2015 -0500

      tty: audit: Fix audit source

      The data to audit/record is in the 'from' buffer (ie., the input
      read buffer).

      Fixes: 72586c6061ab ("n_tty: Fix auditing support for cannonical mode")
      Cc: stable <stable@xxxxxxxxxxxxxxx> # 4.1+
      Cc: Miloslav TrmaÄ? <mitr@xxxxxxxxxx>
      Signed-off-by: Peter Hurley <peter@xxxxxxxxxxxxxxxxxx>
      Acked-by: Laura Abbott <labbott@xxxxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit f356d7a7ddb5ea545e81c84eecfdf1b5ab4647fc
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Sun Nov 1 18:32:56 2015 -0800

      serial: etraxfs-uart: Fix crash

      Since commit 7d8c70d8048c ("serial: mctrl-gpio: rename init function"),
      crisv32 either do not build or crash as follows.

      Unable to handle kernel NULL pointer dereference
      Linux 4.3.0-rc7-next-20151101 #1 Sun Nov 1 11:41:28 PST 2015
      ...
      Call Trace: [<c0004a0e>] show_stack+0x0/0x9e
      [<c004c0c0>] printk+0x0/0x2c
      [<c00059d4>] show_registers+0x14a/0x1c2
      [<c004c0c0>] printk+0x0/0x2c
      [<c0004b52>] die_if_kernel+0x7c/0x9e
      [<c0005346>] do_page_fault+0x32e/0x3e6
      [<c01dc59c>] of_get_property+0x0/0x2c
      [<c01e0558>] of_irq_parse_raw+0x12a/0x376
      [<c01dc59c>] of_get_property+0x0/0x2c
      [<c0053aca>] get_page_from_freelist+0x73e/0x856
      [<c01dc59c>] of_get_property+0x0/0x2c
      [<c0008912>] d_mmu_refill+0x10a/0x112
      [<c01b488c>] devm_kmalloc+0x40/0x56
      [<c01b47d0>] add_dr+0xc/0x1c
      [<c01b4800>] devm_add_action+0x2/0x4e
      [<c01abdbc>] mctrl_gpio_init_noauto+0x1c/0x76
      [<c01abf9e>] mctrl_gpio_init+0x22/0x110

      The function call in the etraxfs-uart driver was not renamed,
      possibly due to interference with commit 7b9c5162c182 ("serial:
      etraxfs-uart: use mctrl_gpio helpers for handling modem signals").

      Fixes: 7d8c70d8048c ("serial: mctrl-gpio: rename init function")
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Acked-by: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
      Acked-by: Niklas Cassel <nks@xxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit bec8bf61dc911ebe04a7997db2c44ed51d8ade9d
  Author: Peter Hurley <peter@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 20 09:55:21 2015 -0400

      serial: fsl_lpuart: Fix earlycon support

      Earlycon support for Freescale lpuart should only be enabled when
      console support is enabled.

      Fixes: 1d59b382f1c4 ("serial: fsl_lpuart: add earlycon support")
      Acked-by: Stefan Agner <stefan@xxxxxxxx>
      Signed-off-by: Peter Hurley <peter@xxxxxxxxxxxxxxxxxx>
      Acked-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 83f7fa6c2976a9db9edf3abf7749176ca36fb4cc
  Author: Simon Arlott <simon@xxxxxxxxxxx>
  Date:   Sun Nov 15 16:14:32 2015 +0000

      bcm63xx_uart: Use the device name when registering an interrupt

      Use the device name when registering an interrupt so that multiple
      ports don't all have the same interrupt name.

      Signed-off-by: Simon Arlott <simon@xxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 17a69219713b5063698038151fea9167b5b0c7b4
  Author: Peter Hurley <peter@xxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 8 07:53:06 2015 -0500

      tty: Fix direct use of tty buffer work

      Recent abstraction of tty buffer work introduced api to manage
      tty input kworker; use it.

      Fixes: e176058f0de5 ("tty: Abstract tty buffer work")
      Signed-off-by: Peter Hurley <peter@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit ee0c1a65cf95230d5eb3d9de94fd2ead9a428c67
  Author: Peter Hurley <peter@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 11 08:03:54 2015 -0500

      tty: Fix tty_send_xchar() lock order inversion

      The correct lock order is atomic_write_lock => termios_rwsem, as
      established by tty_write() => n_tty_write().

      Fixes: c274f6ef1c666 ("tty: Hold termios_rwsem for tcflow(TCIxxx)")
      Reported-and-Tested-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v3.18+
      Signed-off-by: Peter Hurley <peter@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit b4a64718797b84b64a6ddf3d4183c29c2e79ef1d
  Author: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
  Date:   Fri Nov 20 15:57:41 2015 -0800

      slub: mark the dangling ifdef #else of CONFIG_SLUB_DEBUG

      The #ifdef of CONFIG_SLUB_DEBUG is located very far from the associated
      #else.  For readability mark it with a comment.

      Signed-off-by: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
      Acked-by: Christoph Lameter <cl@xxxxxxxxx>
      Cc: Pekka Enberg <penberg@xxxxxxxxxx>
      Cc: David Rientjes <rientjes@xxxxxxxxxx>
      Cc: Joonsoo Kim <iamjoonsoo.kim@xxxxxxx>
      Cc: Alexander Duyck <alexander.h.duyck@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 87098373e244840e00bd1c93884c1d917411597e
  Author: Christoph Lameter <cl@xxxxxxxxx>
  Date:   Fri Nov 20 15:57:38 2015 -0800

      slub: avoid irqoff/on in bulk allocation

      Use the new function that can do allocation while interrupts are disabled.
      Avoids irq on/off sequences.

      Signed-off-by: Christoph Lameter <cl@xxxxxxxxx>
      Cc: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
      Cc: Pekka Enberg <penberg@xxxxxxxxxx>
      Cc: David Rientjes <rientjes@xxxxxxxxxx>
      Cc: Joonsoo Kim <iamjoonsoo.kim@xxxxxxx>
      Cc: Alexander Duyck <alexander.h.duyck@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit a380a3c75529a5c42b78c0d64a46404f8cb0c0d1
  Author: Christoph Lameter <cl@xxxxxxxxx>
  Date:   Fri Nov 20 15:57:35 2015 -0800

      slub: create new ___slab_alloc function that can be called with irqs 
disabled

      Bulk alloc needs a function like that because it enables interrupts before
      calling __slab_alloc which promptly disables them again using the 
expensive
      local_irq_save().

      Signed-off-by: Christoph Lameter <cl@xxxxxxxxx>
      Cc: Jesper Dangaard Brouer <brouer@xxxxxxxxxx>
      Cc: Pekka Enberg <penberg@xxxxxxxxxx>
      Cc: David Rientjes <rientjes@xxxxxxxxxx>
      Cc: Joonsoo Kim <iamjoonsoo.kim@xxxxxxx>
      Cc: Alexander Duyck <alexander.h.duyck@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 21fa8442799945beaca074cb5bcf7cfe24969d59
  Author: Jeff Layton <jlayton@xxxxxxxxxxxxxxx>
  Date:   Fri Nov 20 15:57:32 2015 -0800

      mm: fix up sparse warning in gfpflags_allow_blocking

      sparse says:

          include/linux/gfp.h:274:26: warning: incorrect type in return 
expression (different base types)
          include/linux/gfp.h:274:26:    expected bool
          include/linux/gfp.h:274:26:    got restricted gfp_t

      ...add a forced cast to silence the warning.

      Signed-off-by: Jeff Layton <jeff.layton@xxxxxxxxxxxxxxx>
      Cc: Mel Gorman <mgorman@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 8f1eb48758aacf6c1ffce18179295adbf3bd7640
  Author: Junxiao Bi <junxiao.bi@xxxxxxxxxx>
  Date:   Fri Nov 20 15:57:30 2015 -0800

      ocfs2: fix umask ignored issue

      New created file's mode is not masked with umask, and this makes umask not
      work for ocfs2 volume.

      Fixes: 702e5bc ("ocfs2: use generic posix ACL infrastructure")
      Signed-off-by: Junxiao Bi <junxiao.bi@xxxxxxxxxx>
      Cc: Gang He <ghe@xxxxxxxx>
      Cc: Mark Fasheh <mfasheh@xxxxxxx>
      Cc: Joel Becker <jlbec@xxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 875fa6fbb8d8d5bbf8cc2fa7b340a716f50ee0c7
  Author: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
  Date:   Fri Nov 20 15:57:27 2015 -0800

      PM/OPP: add entry in MAINTAINERS

      Add entry for operating performance points into MAINTAINERS file.  This
      will also allow get_maintainers to list OPP stakeholders properly.

      Signed-off-by: Viresh Kumar <viresh.kumar@xxxxxxxxxx>
      Acked-by: Stephen Boyd <sboyd@xxxxxxxxxxxxxx>
      Cc: Rafael Wysocki <rjw@xxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 7625b3a0007decf2b135cb47ca67abc78a7b1bc1
  Author: Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
  Date:   Fri Nov 20 15:57:24 2015 -0800

      kernel/panic.c: turn off locks debug before releasing console lock

      Commit 08d78658f393 ("panic: release stale console lock to always get the
      logbuf printed out") introduced an unwanted bad unlock balance report when
      panic() is called directly and not from OOPS (e.g.  from out_of_memory()).
      The difference is that in case of OOPS we disable locks debug in
      oops_enter() and on direct panic call nobody does that.

      Fixes: 08d78658f393 ("panic: release stale console lock to always get the 
logbuf printed out")
      Reported-by: kernel test robot <ying.huang@xxxxxxxxxxxxxxx>
      Signed-off-by: Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
      Cc: HATAYAMA Daisuke <d.hatayama@xxxxxxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Jiri Kosina <jkosina@xxxxxxx>
      Cc: Baoquan He <bhe@xxxxxxxxxx>
      Cc: Prarit Bhargava <prarit@xxxxxxxxxx>
      Cc: Xie XiuQi <xiexiuqi@xxxxxxxxxx>
      Cc: Seth Jennings <sjenning@xxxxxxxxxx>
      Cc: "K. Y. Srinivasan" <kys@xxxxxxxxxxxxx>
      Cc: Jan Kara <jack@xxxxxxx>
      Cc: Petr Mladek <pmladek@xxxxxxx>
      Cc: Yasuaki Ishimatsu <isimatu.yasuaki@xxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 9d8a765211335cfdad464b90fb19f546af5706ae
  Author: Richard Weinberger <richard@xxxxxx>
  Date:   Fri Nov 20 15:57:21 2015 -0800

      kernel/signal.c: unexport sigsuspend()

      sigsuspend() is nowhere used except in signal.c itself, so we can mark it
      static do not pollute the global namespace.

      But this patch is more than a boring cleanup patch, it fixes a real issue
      on UserModeLinux.  UML has a special console driver to display ttys using
      xterm, or other terminal emulators, on the host side.  Vegard reported
      that sometimes UML is unable to spawn a xterm and he's facing the
      following warning:

        WARNING: CPU: 0 PID: 908 at include/linux/thread_info.h:128 
sigsuspend+0xab/0xc0()

      It turned out that this warning makes absolutely no sense as the UML
      xterm code calls sigsuspend() on the host side, at least it tries.  But
      as the kernel itself offers a sigsuspend() symbol the linker choose this
      one instead of the glibc wrapper.  Interestingly this code used to work
      since ever but always blocked signals on the wrong side.  Some recent
      kernel change made the WARN_ON() trigger and uncovered the bug.

      It is a wonderful example of how much works by chance on computers. :-)

      Fixes: 68f3f16d9ad0f1 ("new helper: sigsuspend()")
      Signed-off-by: Richard Weinberger <richard@xxxxxx>
      Reported-by: Vegard Nossum <vegard.nossum@xxxxxxxxxx>
      Tested-by: Vegard Nossum <vegard.nossum@xxxxxxxxxx>
      Acked-by: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>      [3.5+]
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 459372545c9c0d6f491e280dccc8a54a61b60e56
  Author: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
  Date:   Fri Nov 20 15:57:18 2015 -0800

      kasan: fix kmemleak false-positive in kasan_module_alloc()

      Kmemleak reports the following leak:

        unreferenced object 0xfffffbfff41ea000 (size 20480):
        comm "modprobe", pid 65199, jiffies 4298875551 (age 542.568s)
        hex dump (first 32 bytes):
          00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
          00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
        backtrace:
          [<ffffffff82354f5e>] kmemleak_alloc+0x4e/0xc0
          [<ffffffff8152e718>] __vmalloc_node_range+0x4b8/0x740
          [<ffffffff81574072>] kasan_module_alloc+0x72/0xc0
          [<ffffffff810efe68>] module_alloc+0x78/0xb0
          [<ffffffff812f6a24>] module_alloc_update_bounds+0x14/0x70
          [<ffffffff812f8184>] layout_and_allocate+0x16f4/0x3c90
          [<ffffffff812faa1f>] load_module+0x2ff/0x6690
          [<ffffffff813010b6>] SyS_finit_module+0x136/0x170
          [<ffffffff8239bbc9>] system_call_fastpath+0x16/0x1b
          [<ffffffffffffffff>] 0xffffffffffffffff

      kasan_module_alloc() allocates shadow memory for module and frees it on
      module unloading.  It doesn't store the pointer to allocated shadow memory
      because it could be calculated from the shadowed address, i.e.
      kasan_mem_to_shadow(addr).

      Since kmemleak cannot find pointer to allocated shadow, it thinks that
      memory leaked.

      Use kmemleak_ignore() to tell kmemleak that this is not a leak and shadow
      memory doesn't contain any pointers.

      Signed-off-by: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
      Acked-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 928a477102c4fc6739883415b66987207e3502f4
  Author: OGAWA Hirofumi <hirofumi@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 20 15:57:15 2015 -0800

      fat: fix fake_offset handling on error path

      For the root directory, .  and ..  are faked (using dir_emit_dots()) and
      ctx->pos is reset from 2 to 0.

      A corrupted root directory could cause fat_get_entry() to fail, but
      ->iterate() (fat_readdir()) reports progress to the VFS (with ctx->pos
      rewound to 0), so any following calls to ->iterate() continue to return
      the same entries again and again.

      The result is that userspace will never see the end of the directory,
      causing e.g.  'ls' to hang in a getdents() loop.

      [hirofumi@xxxxxxxxxxxxxxxxxx: cleanup and make sure to correct 
fake_offset]
      Reported-by: Vegard Nossum <vegard.nossum@xxxxxxxxxx>
      Tested-by: Vegard Nossum <vegard.nossum@xxxxxxxxxx>
      Signed-off-by: Richard Weinberger <richard.weinberger@xxxxxxxxx>
      Signed-off-by: OGAWA Hirofumi <hirofumi@xxxxxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 1817889e3b2cc1db8abb595712095129ff9156c1
  Author: Mike Kravetz <mike.kravetz@xxxxxxxxxx>
  Date:   Fri Nov 20 15:57:13 2015 -0800

      mm/hugetlbfs: fix bugs in fallocate hole punch of areas with holes

      Hugh Dickins pointed out problems with the new hugetlbfs fallocate hole
      punch code.  These problems are in the routine remove_inode_hugepages and
      mostly occur in the case where there are holes in the range of pages to be
      removed.  These holes could be the result of a previous hole punch or
      simply sparse allocation.  The current code could access pages outside the
      specified range.

      remove_inode_hugepages handles both hole punch and truncate operations.
      Page index handling was fixed/cleaned up so that the loop index always
      matches the page being processed.  The code now only makes a single pass
      through the range of pages as it was determined page faults could not race
      with truncate.  A cond_resched() was added after removing up to
      PAGEVEC_SIZE pages.

      Some totally unnecessary code in hugetlbfs_fallocate() that remained from
      early development was also removed.

      Tested with fallocate tests submitted here:
      
http://librelist.com/browser//libhugetlbfs/2015/6/25/patch-tests-add-tests-for-fallocate-system-call/
      And, some ftruncate tests under development

      Fixes: b5cec28d36f5 ("hugetlbfs: truncate_hugepages() takes a range of 
pages")
      Signed-off-by: Mike Kravetz <mike.kravetz@xxxxxxxxxx>
      Acked-by: Hugh Dickins <hughd@xxxxxxxxxx>
      Cc: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: Naoya Horiguchi <n-horiguchi@xxxxxxxxxxxxx>
      Cc: Davidlohr Bueso <dave@xxxxxxxxxxxx>
      Cc: "Hillf Danton" <hillf.zj@xxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>      [4.3]
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 50e55bf626ad3ebbca45c0c0d03eb1710a139638
  Author: Yang Shi <yang.shi@xxxxxxxxxx>
  Date:   Fri Nov 20 15:57:10 2015 -0800

      mm/page-writeback.c: initialize m_dirty to avoid compile warning

      When building kernel with gcc 5.2, the below warning is raised:

        mm/page-writeback.c: In function 'balance_dirty_pages.isra.10':
        mm/page-writeback.c:1545:17: warning: 'm_dirty' may be used 
uninitialized in this function [-Wmaybe-uninitialized]
           unsigned long m_dirty, m_thresh, m_bg_thresh;

      The m_dirty{thresh, bg_thresh} are initialized in the block of "if
      (mdtc)", so if mdts is null, they won't be initialized before being used.
      Initialize m_dirty to zero, also initialize m_thresh and m_bg_thresh to
      keep consistency.

      They are used later by if condition: !mdtc || m_dirty <=
      dirty_freerun_ceiling(m_thresh, m_bg_thresh)

      If mdtc is null, dirty_freerun_ceiling will not be called at all, so the
      initialization will not change any behavior other than just ceasing the
      compile warning.

      (akpm: the patch actually reduces .text size by ~20 bytes on gcc-4.x.y)

      [akpm@xxxxxxxxxxxxxxxxxxxx: add comment]
      Signed-off-by: Yang Shi <yang.shi@xxxxxxxxxx>
      Cc: Tejun Heo <tj@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 1a47de6e4a8dc2aaf3c3fb544b60730b74abe0f1
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Fri Nov 20 15:57:07 2015 -0800

      various: fix pci_set_dma_mask return value checking

      pci_set_dma_mask returns a negative errno value, not a bool like
      pci_dma_supported.  This of course was just a giant test for attention :)

      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Reported-by: Jongman Heo <jongman.heo@xxxxxxxxxxx>
      Tested-by: Jongman Heo <jongman.heo@xxxxxxxxxxx>  [pcnet32]
      Acked-by: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: Hans Verkuil <hverkuil@xxxxxxxxx>
      Cc: Antti Palosaari <crope@xxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 1a763615688b891246c5b0a932d7a95fea4c1a68
  Author: Jason J. Herne <jjherne@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 20 15:57:04 2015 -0800

      mm: loosen MADV_NOHUGEPAGE to enable Qemu postcopy on s390

      MADV_NOHUGEPAGE processing is too restrictive.  kvm already disables
      hugepage but hugepage_madvise() takes the error path when we ask to turn
      on the MADV_NOHUGEPAGE bit and the bit is already on.  This causes Qemu's
      new postcopy migration feature to fail on s390 because its first action is
      to madvise the guest address space as NOHUGEPAGE.  This patch modifies the
      code so that the operation succeeds without error now.

      For consistency reasons do the same for MADV_HUGEPAGE.

      Signed-off-by: Jason J. Herne <jjherne@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Andrea Arcangeli <aarcange@xxxxxxxxxx>
      Acked-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Acked-by: David Rientjes <rientjes@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 7511c3ede752e6dd67df20779b4e11effe102637
  Author: Jerome Marchand <jmarchan@xxxxxxxxxx>
  Date:   Fri Nov 20 15:57:02 2015 -0800

      mm: vmalloc: don't remove inexistent guard hole in remove_vm_area()

      Commit 71394fe50146 ("mm: vmalloc: add flag preventing guard hole
      allocation") missed a spot.  Currently remove_vm_area() decreases vm->size
      to "remove" the guard hole page, even when it isn't present.  All but one
      users just free the vm_struct rigth away and never access vm->size anyway.

      Don't touch the size in remove_vm_area() and have __vunmap() use the
      proper get_vm_area_size() helper.

      Signed-off-by: Jerome Marchand <jmarchan@xxxxxxxxxx>
      Acked-by: Andrey Ryabinin <aryabinin@xxxxxxxxxxxxx>
      Acked-by: David Rientjes <rientjes@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 429d48622cb08b7b4908cb63b43a135be9b3db09
  Author: Naoya Horiguchi <n-horiguchi@xxxxxxxxxxxxx>
  Date:   Fri Nov 20 15:56:59 2015 -0800

      tools/vm/page-types.c: support KPF_IDLE

      PageIdle is exported in include/uapi/linux/kernel-page-flags.h, so let's
      make page-types.c tool handle it.

      Signed-off-by: Naoya Horiguchi <n-horiguchi@xxxxxxxxxxxxx>
      Reviewed-by: Vladimir Davydov <vdavydov@xxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 1491e30ed1a741009d1d38f9285f7a29e6c05c78
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Fri Nov 20 15:56:56 2015 -0800

      ncpfs: don't allow negative timeouts

      This code causes a static checker warning because it's a user controlled
      variable where we cap the upper bound but not the lower bound.  Let's
      return an -EINVAL for negative timeouts.

      [akpm@xxxxxxxxxxxxxxxxxxxx: remove unneeded `else']
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Reviewed-by: Jan Kara <jack@xxxxxxxx>
      Cc: Petr Vandrovec <petr@xxxxxxxxxxxxxx>
      Cc: David Howells <dhowells@xxxxxxxxxx>
      Cc: Jan Kara <jack@xxxxxxx>
      Cc: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 5cf6a51e6062afe7cc507f32f1e5f7e6497ae844
  Author: Daniel Baluta <daniel.baluta@xxxxxxxxx>
  Date:   Fri Nov 20 15:56:53 2015 -0800

      configfs: allow dynamic group creation

      This patchset introduces IIO software triggers, offers a way of 
configuring
      them via configfs and adds the IIO hrtimer based interrupt source to be 
used
      with software triggers.

      The architecture is now split in 3 parts, to remove all IIO trigger 
specific
      parts from IIO configfs core:

      (1) IIO configfs - creates the root of the IIO configfs subsys.
      (2) IIO software triggers - software trigger implementation, dynamically
          creating /config/iio/triggers group.
      (3) IIO hrtimer trigger - is the first interrupt source for software 
triggers
          (with syfs to follow). Each trigger type can implement its own set of
          attributes.

      Lockdep seems to be happy with the locking in configfs patch.

      This patch (of 5):

      We don't want to hardcode default groups at subsystem
      creation time. We export:
        * configfs_register_group
        * configfs_unregister_group
      to allow drivers to programatically create/destroy groups
      later, after module init time.

      This is needed for IIO configfs support.

      (akpm: the other 4 patches to be merged via the IIO tree)

      Signed-off-by: Daniel Baluta <daniel.baluta@xxxxxxxxx>
      Suggested-by: Lars-Peter Clausen <lars@xxxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Acked-by: Joel Becker <jlbec@xxxxxxxxxxxx>
      Cc: Hartmut Knaack <knaack.h@xxxxxx>
      Cc: Octavian Purdila <octavian.purdila@xxxxxxxxx>
      Cc: Paul Bolle <pebolle@xxxxxxxxxx>
      Cc: Adriana Reus <adriana.reus@xxxxxxxxx>
      Cc: Cristina Opriceana <cristina.opriceana@xxxxxxxxx>
      Cc: Peter Meerwald <pmeerw@xxxxxxxxxx>
      Cc: Alexander Viro <viro@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit dd7d664a2bcf93634a57d208e8e480ab7448c107
  Author: Moritz Fischer <moritz.fischer@xxxxxxxxx>
  Date:   Fri Nov 20 15:56:51 2015 -0800

      MAINTAINERS: add Moritz as reviewer for FPGA Manager Framework

      Nominate myself as Reviewer.

      Signed-off-by: Moritz Fischer <moritz.fischer@xxxxxxxxx>
      Acked-by: Alan Tull <atull@xxxxxxxxxxxxxxxxxxxxx>
      Cc: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 94a58c360a45c066ab5472cfd2bf2a4ba63aa532
  Author: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 20 15:56:48 2015 -0800

      slab.h: sprinkle __assume_aligned attributes

      The various allocators return aligned memory.  Telling the compiler that
      allows it to generate better code in many cases, for example when the
      return value is immediately passed to memset().

      Some code does become larger, but at least we win twice as much as we 
lose:

      $ scripts/bloat-o-meter /tmp/vmlinux vmlinux
      add/remove: 0/0 grow/shrink: 13/52 up/down: 995/-2140 (-1145)

      An example of the different (and smaller) code can be seen in mm_alloc(). 
Before:

      :       48 8d 78 08             lea    0x8(%rax),%rdi
      :       48 89 c1                mov    %rax,%rcx
      :       48 89 c2                mov    %rax,%rdx
      :       48 c7 00 00 00 00 00    movq   $0x0,(%rax)
      :       48 c7 80 48 03 00 00    movq   $0x0,0x348(%rax)
      :       00 00 00 00
      :       31 c0                   xor    %eax,%eax
      :       48 83 e7 f8             and    $0xfffffffffffffff8,%rdi
      :       48 29 f9                sub    %rdi,%rcx
      :       81 c1 50 03 00 00       add    $0x350,%ecx
      :       c1 e9 03                shr    $0x3,%ecx
      :       f3 48 ab                rep stos %rax,%es:(%rdi)

      After:

      :       48 89 c2                mov    %rax,%rdx
      :       b9 6a 00 00 00          mov    $0x6a,%ecx
      :       31 c0                   xor    %eax,%eax
      :       48 89 d7                mov    %rdx,%rdi
      :       f3 48 ab                rep stos %rax,%es:(%rdi)

      So gcc's strategy is to do two possibly (but not really, of course)
      unaligned stores to the first and last word, then do an aligned rep stos
      covering the middle part with a little overlap.  Maybe arches which do not
      allow unaligned stores gain even more.

      I don't know if gcc can actually make use of alignments greater than 8 for
      anything, so one could probably drop the __assume_xyz_alignment macros and
      just use __assume_aligned(8).

      The increases in code size are mostly caused by gcc deciding to
      opencode strlen() using the check-four-bytes-at-a-time trick when it
      knows the buffer is sufficiently aligned (one function grew by 200
      bytes). Now it turns out that many of these strlen() calls showing up
      were in fact redundant, and they're gone from -next. Applying the two
      patches to next-20151001 bloat-o-meter instead says

      add/remove: 0/0 grow/shrink: 6/52 up/down: 244/-2140 (-1896)

      Signed-off-by: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
      Acked-by: Christoph Lameter <cl@xxxxxxxxx>
      Cc: David Rientjes <rientjes@xxxxxxxxxx>
      Cc: Pekka Enberg <penberg@xxxxxxxxxx>
      Cc: Joonsoo Kim <iamjoonsoo.kim@xxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 81051f9120560059ba7055e974e42bd05a67de6d
  Merge: 116dfe5 cdc5a31
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 20 15:52:52 2015 -0800

      Merge branch 'i2c/for-current' of 
git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux

      Pull i2c fixes from Wolfram Sang:
       "A few bugfixes and one PCI ID addition from I2C"

      * 'i2c/for-current' of 
git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux:
        i2c: i801: add Intel Lewisburg device IDs
        i2c: fix wakeup irq parsing
        i2c: xiic: Prevent concurrent running of the IRQ handler and 
__xiic_start_xfer()
        i2c: Revert "i2c: xiic: Do not reset controller before every transfer"
        i2c: imx: fix a compiling error

  commit 116dfe5e88cd0c9368bf0db28708fff6b549951f
  Merge: 9580306 1ef0623
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 20 15:47:27 2015 -0800

      Merge tag '4.4-fix' of git://git.lwn.net/linux

      Pull documentation fix from Jon Corbet:
       "A single fix from Mauro for a 4.4 regression that would cause the docs
        build to fail on systems with ancient Perl installations"

      * tag '4.4-fix' of git://git.lwn.net/linux:
        kernel-doc: Make it compatible with Perl versions below 5.12 again

  commit 95803066c697d40798a5db861f6152e533736a25
  Merge: 400f3f2 2e6edc9
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 20 15:00:50 2015 -0800

      Merge branch 'libnvdimm-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm

      Pull libnvdimm fixes from Dan Williams:

       - A collection of crash and deadlock fixes for DAX that are also tagged
         for -stable.  We will look to re-enable DAX pmd mappings in 4.5, but
         for now 4.4 and -stable should disable it by default.

       - A fixup to ext2 and ext4 to mirror the same warning emitted by XFS
         when mounting with "-o dax"

      * 'libnvdimm-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm:
        block: protect rw_page against device teardown
        mm, dax: fix DAX deadlocks (COW fault)
        dax: disable pmd mappings
        ext2, ext4: warn when mounting with dax enabled

  commit 400f3f255debc5a1b5eba631adddc19a9f74a6e4
  Merge: 2f25535 a3767e3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 20 09:01:07 2015 -0800

      Merge tag 'pm+acpi-4.4-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm

      Pull more power management and ACPI updates from Rafael Wysocki:
       "These are mostly fixes and cleanups (ACPI core, PM core, cpufreq, ACPI
        EC driver, device properties) including three reverts of recent
        intel_pstate driver commits due to a regression introduced by one of
        them plus support for Atom Airmont cores in intel_pstate (which really
        boils down to adding new frequency tables for Airmont) and additional
        turbostat updates.

        Specifics:

         - Revert three recent intel_pstate driver commits one of which
           introduced a regression and the remaining two depend on the
           problematic one (Rafael Wysocki).

         - Fix breakage related to the recently introduced ACPI _CCA object
           support in the PCI DMA setup code (Suravee Suthikulpanit).

         - Fix up the recently introduced ACPI CPPC support to only use the
           hardware-reduced version of the PCCT structure as the only
           architecture to support it (ARM64) will only use hardware-reduced
           ACPI anyway (Ashwin Chaugule).

         - Fix a cpufreq mediatek driver build problem (Arnd Bergmann).

         - Fix the SMBus transaction handling implementation in the ACPI core
           to avoid re-entrant calls to wait_event_timeout() which makes
           intermittent boot stalls related to the Smart Battery Subsystem
           initialization go away and revert a workaround of another problem
           with the same underlying root cause (Chris Bainbridge).

         - Fix the generic wakeup interrupts framework to avoid using invalid
           IRQ numbers (Dmitry Torokhov).

         - Remove a redundant check from the ACPI EC driver (Markus Elfring).

         - Modify the intel_pstate driver so it can support more Atom flavors
           than just one (Baytrail) and add support for Atom Airmont cores
           (which require new freqnency tables) to it (Philippe Longepe).

         - Clean up MSR-related symbols in turbostat (Len Brown)"

      * tag 'pm+acpi-4.4-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:
        PCI: Fix OF logic in pci_dma_configure()
        Revert "Documentation: kernel_parameters for Intel P state driver"
        cpufreq: mediatek: fix build error
        cpufreq: intel_pstate: Add separate support for Airmont cores
        cpufreq: intel_pstate: Replace BYT with ATOM
        Revert "cpufreq: intel_pstate: Use ACPI perf configuration"
        Revert "cpufreq: intel_pstate: Avoid calculation for max/min"
        ACPI-EC: Drop unnecessary check made before calling 
acpi_ec_delete_query()
        Revert "ACPI / SBS: Add 5 us delay to fix SBS hangs on MacBook"
        ACPI / SMBus: Fix boot stalls / high CPU caused by reentrant code
        PM / wakeirq: check that wake IRQ is valid before accepting it
        ACPI / CPPC: Use h/w reduced version of the PCCT structure
        x86: remove unused definition of MSR_NHM_PLATFORM_INFO
        tools/power turbostat: use new name for MSR_PLATFORM_INFO

  commit 2f255351c133318cf9e0e4a003ca345bef5914fc
  Merge: 86eaf54 1451ad03
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 20 08:20:04 2015 -0800

      Merge tag 'powerpc-4.4-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux

      Pull powerpc fixlet from Michael Ellerman:
       "Wire up sys_mlock2()"

      * tag 'powerpc-4.4-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:
        powerpc: Wire up sys_mlock2()

  commit 02e2a5bfebe99edcf9d694575a75032d53fe1b73
  Author: Kees Cook <keescook@xxxxxxxxxxxx>
  Date:   Thu Nov 19 17:18:54 2015 -0800

      mac: validate mac_partition is within sector

      If md->signature == MAC_DRIVER_MAGIC and md->block_size == 1023, a single
      512 byte sector would be read (secsize / 512). However the partition
      structure would be located past the end of the buffer (secsize % 512).

      Signed-off-by: Kees Cook <keescook@xxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 8aeea03195ee6e33fcb00039c414eabfc37a4eb8
  Author: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 20 10:46:49 2015 +0100

      mtip32xx: use formatting capability of kthread_create_on_node

      kthread_create_on_node takes format+args, so there's no need to do the
      pretty-printing in advance. Moreover, "mtip_svc_thd_99" (including its
      '\0') only just fits in 16 bytes, so if index could ever go above 99
      we'd have a stack buffer overflow.

      Signed-off-by: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Jeff Moyer <jmoyer@xxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 604e8c8da8854351496215d269c3fa93859e3fee
  Author: Keith Busch <keith.busch@xxxxxxxxx>
  Date:   Fri Nov 20 08:38:13 2015 -0700

      NVMe: reap completion entries when deleting queue

      Make sure that there are no unprocesssed entries on a completion
      queue before deleting it, and check for validity of the CQ
      door bell before writing completions to it.

      This fixes problems with doing a sysfs reset of the device while
      it's handling IO.

      Tested-by: Jon Derrick <jonathan.derrick@xxxxxxxxx>

      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 2fde0e482db2b43bb4ed0e9aebfbe78ebcbbf5a6
  Author: Javier Gonzalez <javier@xxxxxxxxxxx>
  Date:   Fri Nov 20 13:47:57 2015 +0100

      lightnvm: add free and bad lun info to show luns

      Add free block, used block, and bad block information to the show debug
      interface. This information is used to debug how targets track blocks.

      Also, change debug function name to make it more generic.

      Signed-off-by: Javier Gonzalez <javier@xxxxxxxxxxxx>
      Signed-off-by: Matias Bjørling <m@xxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 0b59733b95f9d7af6bee6e6a4d0d444eb694c514
  Author: Javier Gonzalez <javier@xxxxxxxxxxx>
  Date:   Fri Nov 20 13:47:56 2015 +0100

      lightnvm: keep track of block counts

      Maintain number of in use blocks, free blocks, and bad blocks in a per
      lun basis. This allows the upper layers to get information about the
      state of each lun.

      Also, account for blocks reserved to the device on the free block count.
      nr_free_blocks matches now the actual number of blocks on the free list
      when the device is booted.

      Signed-off-by: Javier Gonzalez <javier@xxxxxxxxxxxx>
      Signed-off-by: Matias Bjørling <m@xxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 47b3115ae7b799be8b77b0f024215ad4f68d6460
  Author: Wenwei Tao <ww.tao0320@xxxxxxxxx>
  Date:   Fri Nov 20 13:47:55 2015 +0100

      nvme: lightnvm: use admin queues for admin cmds

      According to the Open-Channel SSD Specification, the NVMe-NVM admin
      commands use vendor specific opcodes of NVMe, so use the NVMe admin
      queue to dispatch these commands.

      Signed-off-by: Wenwei Tao <ww.tao0320@xxxxxxxxx>
      Updated by me to include set bad block table as well and also use
      the admin queue for l2p len calculation.

      Signed-off-by: Matias Bjørling <m@xxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 93e70c1f2883f2db2d6a1f339d0e26f00b138e4e
  Author: Matias Bjørling <m@xxxxxxxxxxx>
  Date:   Fri Nov 20 13:47:54 2015 +0100

      lightnvm: missing free on init error

      If either max_phys_sect is out of bound, the nvm_dev structure is not
      freed.

      Signed-off-by: Matias Bjørling <m@xxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 480fc0db819d706ea5608545a12d33cf8d5a31ab
  Author: Wenwei Tao <ww.tao0320@xxxxxxxxx>
  Date:   Fri Nov 20 13:47:53 2015 +0100

      lightnvm: wrong return value and redundant free

      The return value should be non-zero under error conditions.
      Remove nvme_free(dev) to avoid free dev more than once.

      Signed-off-by: Wenwei Tao <ww.tao0320@xxxxxxxxx>
      Signed-off-by: Matias Bjørling <m@xxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit cdc5a3110e7c3ae793f367285789a6bc39c962dc
  Author: Alexandra Yates <alexandra.yates@xxxxxxxxxxxxxxx>
  Date:   Thu Nov 5 11:40:25 2015 -0800

      i2c: i801: add Intel Lewisburg device IDs

      Adding Intel codename Lewisburg platform device IDs for SMBus.

      Signed-off-by: Alexandra Yates <alexandra.yates@xxxxxxxxxxxxxxx>
      Reviewed-by: Jean Delvare <jdelvare@xxxxxxx>
      Signed-off-by: Wolfram Sang <wsa@xxxxxxxxxxxxx>

  commit c18fba23061f16dde128e10d4869ba4e88e0e81a
  Author: Grygorii Strashko <grygorii.strashko@xxxxxx>
  Date:   Thu Nov 12 15:42:26 2015 +0200

      i2c: fix wakeup irq parsing

      This patch fixes obvious copy-past error in wake up irq parsing
      code which leads to the fact that dev_pm_set_wake_irq() will
      be called with wrong IRQ number when "wakeup" IRQ is not
      defined in DT.

      Fixes: 3fffd1283927 ("i2c: allow specifying separate wakeup interrupt in 
device tree")
      Signed-off-by: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Acked-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
      Signed-off-by: Wolfram Sang <wsa@xxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.3

  commit d0fe5258e6be609dab7e53335d845818684d1dcf
  Author: Lars-Peter Clausen <lars@xxxxxxxxxx>
  Date:   Mon Nov 16 14:42:04 2015 +0100

      i2c: xiic: Prevent concurrent running of the IRQ handler and 
__xiic_start_xfer()

      Prior to commit e6c9a037bc8a ("i2c: xiic: Remove the disabling of
      interrupts") IRQs where disabled when the initial __xiic_start_xfer() was
      called. After the commit the interrupt is enabled while the function is
      running, this means it is possible for the interrupt to be triggered while
      the function is still running. When this happens the internal data
      structures get corrupted and undefined behavior can occur like the
      following crash:

        Internal error: Oops: 17 [#1] PREEMPT SMP ARM
        Modules linked in:
        CPU: 0 PID: 2040 Comm: i2cdetect Not tainted 4.0.0-02856-g047a308 #10956
        Hardware name: Xilinx Zynq Platform
        task: ee0c9500 ti: e99a2000 task.ti: e99a2000
        PC is at __xiic_start_xfer+0x6c4/0x7c8
        LR is at __xiic_start_xfer+0x690/0x7c8
        pc : [<c02bbffc>]    lr : [<c02bbfc8>]    psr: 800f0013
        sp : e99a3da8  ip : 00000000  fp : 00000000
        r10: 00000001  r9 : 600f0013  r8 : f0180000
        r7 : f0180000  r6 : c064e444  r5 : 00000017  r4 : ee031010
        r3 : 00000000  r2 : 00000000  r1 : 600f0013  r0 : 0000000f
        Flags: Nzcv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
        Control: 18c5387d  Table: 29a5404a  DAC: 00000015
        Process i2cdetect (pid: 2040, stack limit = 0xe99a2210)
        Stack: (0xe99a3da8 to 0xe99a4000)
        3da0:                   ee031010 00000000 00000001 ee031020 ee031224 
c02bc5ec
        3dc0: ee34c604 00000000 ee0c9500 e99a3dcc e99a3dd0 e99a3dd0 e99a3dd8 
c069f0e8
        3de0: 00000000 ee031020 c064e100 ffff90bb e99a3e48 c02b6590 ee031020 
00000001
        3e00: e99a3e48 ee031020 00000000 e99a3e63 00000001 c02b6ec4 00000000 
00000000
        3e20: 00000000 c02b7320 e99a3ef0 00000000 00000000 e99e3df0 00000000 
00000000
        3e40: 00000103 2814575f 0000003e c00a0000 e99a3e85 0001003e ee0c0000 
e99a3e63
        3e60: eefd3578 c064e61c ee0c9500 c0041e04 0000056c e9a56db8 00006e5a 
b6f5c000
        3e80: ee0c9548 eefd0040 00000001 eefd3540 ee0c9500 eefd39a0 c064b540 
ee0c9500
        3ea0: 00000000 ee92b000 00000000 bef4862c ee34c600 e99ecdc0 00000720 
00000003
        3ec0: e99a2000 00000000 00000000 c02b8b30 00000000 00000000 00000000 
e99a3f24
        3ee0: b6e80000 00000000 00000000 c04257e8 00000000 e99a3f24 c02b8f08 
00000703
        3f00: 00000003 c02116bc ee935300 00000000 bef4862c ee34c600 e99ecdc0 
c02b91f0
        3f20: e99ecdc0 00000720 bef4862c eeb725f8 e99ecdc0 c00c9e2c 00000003 
00000003
        3f40: ee248dc0 00000000 ee248dc8 00000002 eeb7c1a8 00000000 00000000 
c00bb360
        3f60: 00000000 00000000 00000003 ee248dc0 bef4862c e99ecdc0 e99ecdc0 
00000720
        3f80: 00000003 e99a2000 00000000 c00c9f68 00000000 00000000 b6f22000 
00000036
        3fa0: c000dfa4 c000de20 00000000 00000000 00000003 00000720 bef4862c 
bef4862c
        3fc0: 00000000 00000000 b6f22000 00000036 00000000 00000000 b6f60000 
00000000
        3fe0: 00013040 bef48614 00008cab b6ecdbe6 400f0030 00000003 2f7fd821 
2f7fdc21
        [<c02bbffc>] (__xiic_start_xfer) from [<c02bc5ec>] 
(xiic_xfer+0x94/0x168)
        [<c02bc5ec>] (xiic_xfer) from [<c02b6590>] (__i2c_transfer+0x4c/0x7c)
        [<c02b6590>] (__i2c_transfer) from [<c02b6ec4>] (i2c_transfer+0x9c/0xc4)
        [<c02b6ec4>] (i2c_transfer) from [<c02b7320>] 
(i2c_smbus_xfer+0x3a0/0x4ec)
        [<c02b7320>] (i2c_smbus_xfer) from [<c02b8b30>] 
(i2cdev_ioctl_smbus+0xb0/0x214)
        [<c02b8b30>] (i2cdev_ioctl_smbus) from [<c02b91f0>] 
(i2cdev_ioctl+0xa0/0x1d4)
        [<c02b91f0>] (i2cdev_ioctl) from [<c00c9e2c>] (do_vfs_ioctl+0x4b0/0x5b8)
        [<c00c9e2c>] (do_vfs_ioctl) from [<c00c9f68>] (SyS_ioctl+0x34/0x5c)
        [<c00c9f68>] (SyS_ioctl) from [<c000de20>] (ret_fast_syscall+0x0/0x34)
        Code: e283300c e5843210 eafffe64 e5943210 (e1d320b4)

      The issue can easily be reproduced by performing I2C access under high
      system load or IO load.

      To fix the issue protect the invocation to __xiic_start_xfer() form
      xiic_start_xfer() with the same lock that is used to protect the interrupt
      handler.

      Fixes: e6c9a037bc8a ("i2c: xiic: Remove the disabling of interrupts")
      Signed-off-by: Lars-Peter Clausen <lars@xxxxxxxxxx>
      Reviewed-by: Shubhrajyoti Datta <shubhraj@xxxxxxxxxx>
      Signed-off-by: Wolfram Sang <wsa@xxxxxxxxxxxxx>

  commit 9656eeebf3f1dd05376c4c923797369746d9a618
  Author: Lars-Peter Clausen <lars@xxxxxxxxxx>
  Date:   Mon Nov 16 14:42:03 2015 +0100

      i2c: Revert "i2c: xiic: Do not reset controller before every transfer"

      Commit d701667bb331 ("i2c: xiic: Do not reset controller before every
      transfer") removed the reinitialization of the controller before the start
      of each transfer. Apparently this change is not safe to make and the 
commit
      results in random I2C bus failures.

      An easy way to trigger the issue is to run i2cdetect.

      Without the patch applied:
           0  1  2  3  4  5  6  7  8  9  a  b  c  d  e  f
         00:          -- -- -- -- -- -- -- -- -- -- -- -- --
         10: -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
         20: -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
         30: -- -- -- -- -- -- -- -- UU UU -- UU 3c -- -- UU
         40: -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
         50: -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
         60: -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
         70: -- -- -- -- -- -- -- --

      With the patch applied every other or so invocation:
           0  1  2  3  4  5  6  7  8  9  a  b  c  d  e  f
         00:          03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f
         10: 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f
         20: 20 21 22 23 24 25 26 27 28 29 2a 2b 2c 2d 2e 2f
         30: -- -- -- -- -- -- -- -- UU UU -- UU 3c -- -- UU
         40: -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
         50: -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
         60: -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
         70: -- -- -- -- -- -- -- --

      So revert the commit for now.

      Fixes: d701667bb331 ("i2c: xiic: Do not reset controller before every 
transfer")
      Signed-off-by: Lars-Peter Clausen <lars@xxxxxxxxxx>
      Acked-by: Shubhrajyoti Datta <shubhraj@xxxxxxxxxx>
      Signed-off-by: Wolfram Sang <wsa@xxxxxxxxxxxxx>

  commit 8bb6fd585d419d906fb3c228db47fbc4e4272a00
  Author: Hou Zhiqiang <Zhiqiang.Hou@xxxxxxxxxxxxx>
  Date:   Tue Nov 17 17:53:18 2015 +0800

      i2c: imx: fix a compiling error

      drivers/i2c/busses/i2c-imx.c:978:2: error: implicit declaration of
      function â??pinctrl_select_stateâ?? 
[-Werror=implicit-function-declaration]
        pinctrl_select_state(i2c_imx->pinctrl, i2c_imx->pinctrl_pins_gpio);
        ^

      Signed-off-by: Hou Zhiqiang <Zhiqiang.Hou@xxxxxxxxxxxxx>
      Signed-off-by: Wolfram Sang <wsa@xxxxxxxxxxxxx>

  commit 55f1d5988c52d481dc489e29ee5e8905b18ff859
  Author: Alban Bedel <albeu@xxxxxxx>
  Date:   Tue Nov 17 21:52:00 2015 +0100

      MIPS: ath79: Add a machine entry for booting OF machines

      As I'm using a board with a broken old bootloader I hardcoded the
      mips_machtype and did't notice that the machine entry was still
      missing.

      [ralf@xxxxxxxxxxxxxx: Fixed spelling message noticed by Sergei Shtylyov
      <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>.]

      Signed-off-by: Alban Bedel <albeu@xxxxxxx>
      Cc: Qais Yousef <qais.yousef@xxxxxxxxxx>
      Cc: Felix Fietkau <nbd@xxxxxxxxxxx>
      Cc: Andrew Bresticker <abrestic@xxxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11503/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit accbfb52d09ac00147f02c4335d1cc47665e6653
  Author: Alban Bedel <albeu@xxxxxxx>
  Date:   Tue Nov 17 20:34:51 2015 +0100

      MIPS: ath79: Fix the size of the MISC INTC registers in ar9132.dtsi

      There is 2 registers that is 8 bytes long, not 4.

      Signed-off-by: Alban Bedel <albeu@xxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Alexander Couzens <lynxis@xxxxxxx>
      Cc: Joel Porquet <joel@xxxxxxxxxxx>
      Cc: Andrew Bresticker <abrestic@xxxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11508/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 5011a7e808c9fec643d752c5a495a48f27268a48
  Author: Alban Bedel <albeu@xxxxxxx>
  Date:   Tue Nov 17 09:40:07 2015 +0100

      MIPS: ath79: Fix the DDR control initialization on ar71xx and ar934x

      The DDR control initialization needs to know the SoC type, however
      ath79_detect_sys_type() was called after ath79_ddr_ctrl_init().
      Reverse the order to fix the DDR control initialization on ar71xx and
      ar934x.

      Signed-off-by: Alban Bedel <albeu@xxxxxxx>
      Cc: Felix Fietkau <nbd@xxxxxxxxxxx>
      Cc: Qais Yousef <qais.yousef@xxxxxxxxxx>
      Cc: Andrew Bresticker <abrestic@xxxxxxxxxxxx>
      CC: stable@xxxxxxxxxxxxxxx # v4.2+
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11500/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 1e208ae7326caa33ef7d4496d7ff1c404657a4a3
  Author: Helge Deller <deller@xxxxxx>
  Date:   Fri Nov 20 10:12:42 2015 +0100

      parisc: Drop definition of start_thread_som for HP-UX SOM binaries

      The definition of start_thread_som was planned to be used to execute
      HP-UX SOM binaries. Since HP-UX compatibility was dropped with kernel 4.0
      there is no need to carry it further.

      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit 2b3f34451054768a3da27ea1e86da676bf4621bd
  Author: Helge Deller <deller@xxxxxx>
  Date:   Fri Nov 20 10:09:18 2015 +0100

      parisc: Fix wrong comment regarding first pmd entry flags

      The first pmd entry is marked with PxD_FLAG_ATTACHED instead of
      _PAGE_GATEWAY.

      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit 86eaf54d07f239243f674d6256e5c4be6578348a
  Merge: c69bde7 2c5d740
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Nov 19 20:51:31 2015 -0800

      Merge tag 'dmaengine-fix-4.4-rc2' of 
git://git.infradead.org/users/vkoul/slave-dma

      Pull dmaengine fixes from Vinod Koul:
       "This has odd fixes spreadout drivers, not major here

         - usbdmac fixes for pm
         - edma build and logic fixes
         - build warn fixes for few drivers"

      * tag 'dmaengine-fix-4.4-rc2' of 
git://git.infradead.org/users/vkoul/slave-dma:
        dmaengine: at_hdmac: use %pad format string for dma_addr_t
        dmaengine: at_xdmac: use %pad format string for dma_addr_t
        dmaengine: imx-sdma: remove __init annotation on sdma_event_remap
        dmaengine: edma: predecence bug in GET_NUM_QDMACH()
        dmaengine: edma: fix build without CONFIG_OF
        dmaengine: of_dma: Correct return code for of_dma_request_slave_channel 
in case !CONFIG_OF
        dmaengine: sh: usb-dmac: Fix pm_runtime_{enable,disable}() imbalance
        dmaengine: sh: usb-dmac: Fix crash on runtime suspend

  commit c69bde78f05c34f0f3c1f3025d6214d6e06389f4
  Merge: cd6caf5 2d591ab
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Nov 19 20:39:38 2015 -0800

      Merge branch 'drm-fixes' of git://people.freedesktop.org/~airlied/linux

      Pull drm fixes from Dave Airlie:
       "A varied bunch of fixes, the radeon pull is probably a bit larger than
        I'd like, but it contains 2 weeks of stuff, and the Fiji fixes are a
        bit large, but they are Fiji specific.

        Otherwise:

         - mgag200: One cursor regression oops fix.
         - vc4: A few small fixes and cleanups.
         - core: Atomic fixes and Atomic helper fixes
         - i915: Revert for the backlight regression along with a bunch of
           fixes"

      * 'drm-fixes' of git://people.freedesktop.org/~airlied/linux: (58 commits)
        drm/atomic-helper: Check encoder/crtc constraints
        Revert "drm/i915: skip modeset if compatible for everyone."
        drm/mgag200: fix kernel hang in cursor code.
        drm/amdgpu: reserve/unreserve objects out of map/unmap operations
        drm/amdgpu: move bo_reserve out of amdgpu_vm_clear_bo
        drm/amdgpu: add lock for interval tree in vm
        drm/amdgpu: keep the owner for VMIDs
        drm/amdgpu: move VM manager clean into the VM code again
        drm/amdgpu: cleanup VM coding style
        drm/amdgpu: remove unused VM manager field
        drm/amdgpu: cleanup scheduler command submission
        drm/amdgpu: fix typo in firmware name
        drm/i915: Consider SPLL as another shared pll, v2.
        drm/i915: Fix gpu frequency change tracing
        drm/vc4: Make sure that planes aren't scaled.
        drm/vc4: Fix some failure to track __iomem decorations on pointers.
        drm/vc4: checking for NULL instead of IS_ERR
        drm/vc4: fix itnull.cocci warnings
        drm/vc4: fix platform_no_drv_owner.cocci warnings
        drm/vc4: vc4_plane_duplicate_state() can be static
        ...

  commit cd6caf550a2adc763c6301ecc0be01f422fb2aea
  Merge: 8bdddfa c7f42c6
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Nov 19 18:14:47 2015 -0800

      Merge tag 'for-linus-4.4' of git://git.code.sf.net/p/openipmi/linux-ipmi

      Pull IPMI updates from Corey Minyard:
       "Some fixes for small IPMI problems.

        The most significant is that the driver wasn't starting the timer for
        some messages, which would result in problems if that message failed
        for some reason.

        The others are small optimizations or making things a little neater"

      * tag 'for-linus-4.4' of git://git.code.sf.net/p/openipmi/linux-ipmi:
        ipmi watchdog : add panic_wdt_timeout parameter
        char: ipmi: Move MODULE_DEVICE_TABLE() to follow struct
        ipmi: Stop the timer immediately if idle
        ipmi: Start the timer and thread on internal msgs

  commit 8bdddfae6590ecbc4a48e1a5b93386d6b8956fe5
  Merge: b4ba1f0 0ba58de
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Nov 19 17:58:44 2015 -0800

      Merge tag 'renesas-sh-drivers-for-v4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/horms/renesas

      Pull SH driver fixlet from Simon Horman:
       "I am sending this change after v4.4-rc1 has been released as it
        depends on SoC changes which are present in that rc:

         = Remove now unnecessary reference to CONFIG_ARCH_SHMOBILE_MULTI"

      * tag 'renesas-sh-drivers-for-v4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/horms/renesas:
        drivers: sh: Get rid of CONFIG_ARCH_SHMOBILE_MULTI

  commit 19cd80a214821f4b558560ebd76bfb2c38b4f3d8
  Author: Jiri Slaby <jslaby@xxxxxxx>
  Date:   Mon Nov 2 10:27:00 2015 +0100

      usblp: do not set TASK_INTERRUPTIBLE before lock

      It is not permitted to set task state before lock. usblp_wwait sets
      the state to TASK_INTERRUPTIBLE and calls mutex_lock_interruptible.
      Upon return from that function, the state will be TASK_RUNNING again.

      This is clearly a bug and a warning is generated with LOCKDEP too:
      WARNING: CPU: 1 PID: 5109 at kernel/sched/core.c:7404 
__might_sleep+0x7d/0x90()
      do not call blocking ops when !TASK_RUNNING; state=1 set at 
[<ffffffffa0c588d0>] usblp_wwait+0xa0/0x310 [usblp]
      Modules linked in: ...
      CPU: 1 PID: 5109 Comm: captmon Tainted: G        W       
4.2.5-0.gef2823b-default #1
      Hardware name: LENOVO 23252SG/23252SG, BIOS G2ET33WW (1.13 ) 07/24/2012
       ffffffff81a4edce ffff880236ec7ba8 ffffffff81716651 0000000000000000
       ffff880236ec7bf8 ffff880236ec7be8 ffffffff8106e146 0000000000000282
       ffffffff81a50119 000000000000028b 0000000000000000 ffff8802dab7c508
      Call Trace:
      ...
       [<ffffffff8106e1c6>] warn_slowpath_fmt+0x46/0x50
       [<ffffffff8109a8bd>] __might_sleep+0x7d/0x90
       [<ffffffff8171b20f>] mutex_lock_interruptible_nested+0x2f/0x4b0
       [<ffffffffa0c588fc>] usblp_wwait+0xcc/0x310 [usblp]
       [<ffffffffa0c58bb2>] usblp_write+0x72/0x350 [usblp]
       [<ffffffff8121ed98>] __vfs_write+0x28/0xf0
      ...

      Commit 7f477358e2384c54b190cc3b6ce28277050a041b (usblp: Implement the
      ENOSPC convention) moved the set prior locking. So move it back after
      the lock.

      Signed-off-by: Jiri Slaby <jslaby@xxxxxxx>
      Fixes: 7f477358e2 ("usblp: Implement the ENOSPC convention")
      Acked-By: Pete Zaitcev <zaitcev@xxxxxxxxx>
      Cc: stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 44243ef42d77ae367e6e9c68afca3b4578d2d461
  Author: Simon Arlott <simon@xxxxxxxxxxx>
  Date:   Sun Nov 15 17:12:08 2015 +0000

      USB: MAINTAINERS: cxacru

      Make cxacru an orphan. I still have a few of these devices for testing
      but haven't had an ADSL1 connection for several years.

      Signed-off-by: Simon Arlott <simon@xxxxxxxxxxx>
      Cc: Duncan Sands <baldrick@xxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit c4f161308ac280ce5b27681ddcc2bbac6de39c20
  Author: Peter Chen <peter.chen@xxxxxxxxxxxxx>
  Date:   Thu Nov 19 11:47:47 2015 +0800

      usb: kconfig: fix warning of select USB_OTG

      When choose randconfig for kernel build, it reports below warning:
      "warning: (USB_OTG_FSM && FSL_USB2_OTG && USB_MV_OTG) selects USB_OTG
      which has unmet direct dependencies (USB_SUPPORT && USB && PM)"

      In fact, USB_OTG is visible symbol and depends on PM, so the driver
      needs to depend on it to reduce dependency problem.

      Signed-off-by: Peter Chen <peter.chen@xxxxxxxxxxxxx>
      Reported-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: Felipe Balbi <balbi@xxxxxx>
      Acked-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 638148e20c7f8f6e95017fdc13bce8549a6925e0
  Author: Bjørn Mork <bjorn@xxxxxxx>
  Date:   Wed Nov 18 21:12:33 2015 +0100

      USB: option: add XS Stick W100-2 from 4G Systems

      Thomas reports
      "
      4gsystems sells two total different LTE-surfsticks under the same name.
      ..
      The newer version of XS Stick W100 is from "omega"
      ..
      Under windows the driver switches to the same ID, and uses MI03\6 for
      network and MI01\6 for modem.
      ..
      echo "1c9e 9b01" > /sys/bus/usb/drivers/qmi_wwan/new_id
      echo "1c9e 9b01" > /sys/bus/usb-serial/drivers/option1/new_id

      T:  Bus=01 Lev=01 Prnt=01 Port=03 Cnt=01 Dev#=  4 Spd=480 MxCh= 0
      D:  Ver= 2.00 Cls=00(>ifc ) Sub=00 Prot=00 MxPS=64 #Cfgs=  1
      P:  Vendor=1c9e ProdID=9b01 Rev=02.32
      S:  Manufacturer=USB Modem
      S:  Product=USB Modem
      S:  SerialNumber=
      C:  #Ifs= 5 Cfg#= 1 Atr=80 MxPwr=500mA
      I:  If#= 0 Alt= 0 #EPs= 2 Cls=ff(vend.) Sub=ff Prot=ff Driver=option
      I:  If#= 1 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=ff Prot=ff Driver=option
      I:  If#= 2 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=ff Prot=ff Driver=option
      I:  If#= 3 Alt= 0 #EPs= 3 Cls=ff(vend.) Sub=ff Prot=ff Driver=qmi_wwan
      I:  If#= 4 Alt= 0 #EPs= 2 Cls=08(stor.) Sub=06 Prot=50 Driver=usb-storage

      Now all important things are there:

      wwp0s29f7u2i3 (net), ttyUSB2 (at), cdc-wdm0 (qmi), ttyUSB1 (at)

      There is also ttyUSB0, but it is not usable, at least not for at.

      The device works well with qmi and ModemManager-NetworkManager.
      "

      Reported-by: Thomas Schäfer <tschaefer@xxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Bjørn Mork <bjorn@xxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit a3767e3c9da514e63e898772b72b932f9eb3b062
  Merge: 0aba0ab8 a76032e 4981c2b 768acd6
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Fri Nov 20 01:22:52 2015 +0100

      Merge branches 'acpi-smbus', 'acpi-ec' and 'acpi-pci'

      * acpi-smbus:
        Revert "ACPI / SBS: Add 5 us delay to fix SBS hangs on MacBook"
        ACPI / SMBus: Fix boot stalls / high CPU caused by reentrant code

      * acpi-ec:
        ACPI-EC: Drop unnecessary check made before calling 
acpi_ec_delete_query()

      * acpi-pci:
        PCI: Fix OF logic in pci_dma_configure()

  commit 0aba0ab8915bcad3ae7e05e18bc2c5c55570e328
  Merge: 9832bf3 6f9b36c
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Fri Nov 20 01:22:33 2015 +0100

      Merge branch 'pm-sleep'

      * pm-sleep:
        PM / wakeirq: check that wake IRQ is valid before accepting it

  commit 9832bf3a35f55b8650280a6a3236859e751a1294
  Merge: d9f67db 3bf7f56 d29d673
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Fri Nov 20 01:22:10 2015 +0100

      Merge branches 'pm-cpufreq' and 'acpi-cppc'

      * pm-cpufreq:
        Revert "Documentation: kernel_parameters for Intel P state driver"
        cpufreq: mediatek: fix build error
        cpufreq: intel_pstate: Add separate support for Airmont cores
        cpufreq: intel_pstate: Replace BYT with ATOM
        Revert "cpufreq: intel_pstate: Use ACPI perf configuration"
        Revert "cpufreq: intel_pstate: Avoid calculation for max/min"

      * acpi-cppc:
        ACPI / CPPC: Use h/w reduced version of the PCCT structure

  commit 768acd64d68b232e0d2b9623d9846457355f0c27
  Author: Suravee Suthikulpanit <suravee.suthikulpanit@xxxxxxx>
  Date:   Wed Nov 18 16:49:52 2015 -0800

      PCI: Fix OF logic in pci_dma_configure()

      This patch fixes a bug introduced by previous commit,
      which incorrectly checkes the of_node of the end-point device.
      Instead, it should check the of_node of the host bridge.

      Fixes: 50230713b639 ("PCI: OF: Move of_pci_dma_configure() to 
pci_dma_configure()")
      Reported-by: Robin Murphy <robin.murphy@xxxxxxx>
      Signed-off-by: Suravee Suthikulpanit <suravee.suthikulpanit@xxxxxxx>
      Acked-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit 2d591ab18a77e25def2c483b495e07b42a3ea79f
  Merge: db39563 7383123
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Fri Nov 20 09:45:31 2015 +1000

      Merge tag 'drm-intel-fixes-2015-11-19' of 
git://anongit.freedesktop.org/drm-intel into drm-fixes

      i915 fixes for 4.4, including the revert for the backlight regression
      Olof reported. Otherwise fixes all around.

      * tag 'drm-intel-fixes-2015-11-19' of 
git://anongit.freedesktop.org/drm-intel:
        Revert "drm/i915: skip modeset if compatible for everyone."
        drm/i915: Consider SPLL as another shared pll, v2.
        drm/i915: Fix gpu frequency change tracing
        drm/i915: Don't clobber the addfb2 ioctl params
        drm/i915: Clear intel_crtc->atomic before updating it.
        drm/i915: get runtime PM reference around GEM set_caching IOCTL
        drm/i915: Fix GT frequency rounding
        drm/i915: quirk backlight present on Macbook 4, 1
        drm/i915: Fix crtc_y assignment in intel_find_initial_plane_obj()

  commit db3956372f086eaf1c079dc12c3f03ae9f306ba5
  Merge: f6619ef 5481c8f
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Fri Nov 20 09:44:50 2015 +1000

      Merge tag 'topic/drm-fixes-2015-11-19' of 
git://anongit.freedesktop.org/drm-intel into drm-fixes

      Here are some drm core fixes for v4.4 that I've picked up. Atomic fixes
      from Maarten, and atomic helper fixes from Ville and Daniel.

      Admittedly the topmost commit didn't sit in our tree for very long, but
      does come with reviews and testing from trustworthy people.

      * tag 'topic/drm-fixes-2015-11-19' of 
git://anongit.freedesktop.org/drm-intel:
        drm/atomic-helper: Check encoder/crtc constraints
        drm: Fix primary plane size for stereo doubled modes for legacy setcrtc
        drm/core: Fix old_fb handling in pan_display_atomic.
        drm/core: Fix old_fb handling in restore_fbdev_mode_atomic.
        drm/atomic: add a drm_atomic_clean_old_fb helper.
        drm/core: Fix old_fb handling in drm_mode_atomic_ioctl.
        drm/core: Set legacy_cursor_update in drm_atomic_helper_disable_plane.

  commit 54514aa465e94316a4bf1c5dfe970536bec3e76f
  Author: Matias Bjørling <m@xxxxxxxxxxx>
  Date:   Thu Nov 19 12:50:10 2015 +0100

      null_blk: do not del gendisk with lightnvm

      The gendisk structure has not been initialized when using lightnvm.
      Make sure to not delete it upon exit. Also make sure that we use the
      appropriate disk_name at unregistration.

      Signed-off-by: Matias Bjørling <m@xxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 5b40db99099ddebe31e9b1b759894cf09c0c6679
  Author: Matias Bjørling <m@xxxxxxxxxxx>
  Date:   Thu Nov 19 12:50:09 2015 +0100

      null_blk: use device addressing mode

      The linear addressing mode was removed in 7386af2. Make null_blk instead
      expose the ppa format geometry and support the generic addressing mode.

      Signed-off-by: Matias Bjørling <m@xxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 6bb9535bc3f59194a0ae17b17ca71aecd0f7e3a2
  Author: Matias Bjørling <m@xxxxxxxxxxx>
  Date:   Thu Nov 19 12:50:08 2015 +0100

      null_blk: use ppa_cache pool

      Instead of using a page pool, we can save memory by only allocating room
      for 64 entries for the ppa command. Introduce a ppa_cache to allocate only
      the required memory for the ppa list.

      Signed-off-by: Matias Bjørling <m@xxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 0a72f2ad84cc9dde5e4c7ab905a2f89593ddc0b6
  Merge: dad67d5 59536da
  Author: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
  Date:   Thu Nov 19 14:08:37 2015 -0800

      Merge tag 'usb-serial-4.4-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/johan/usb-serial into usb-linus

      Johan writes:

      USB-serial fixes for v4.4-rc2

      Here are some new device ids, support for an odd qcserial Gobi interface
      layout and a fix for the qcserial Huawei interface layout.

      Signed-off-by: Johan Hovold <johan@xxxxxxxxxx>

  commit 2e6edc95382cc36423aff18a237173ad62d5ab52
  Author: Dan Williams <dan.j.williams@xxxxxxxxx>
  Date:   Thu Nov 19 13:29:28 2015 -0800

      block: protect rw_page against device teardown

      Fix use after free crashes like the following:

       general protection fault: 0000 [#1] SMP
       Call Trace:
        [<ffffffffa0050216>] ? pmem_do_bvec.isra.12+0xa6/0xf0 [nd_pmem]
        [<ffffffffa0050ba2>] pmem_rw_page+0x42/0x80 [nd_pmem]
        [<ffffffff8128fd90>] bdev_read_page+0x50/0x60
        [<ffffffff812972f0>] do_mpage_readpage+0x510/0x770
        [<ffffffff8128fd20>] ? I_BDEV+0x20/0x20
        [<ffffffff811d86dc>] ? lru_cache_add+0x1c/0x50
        [<ffffffff81297657>] mpage_readpages+0x107/0x170
        [<ffffffff8128fd20>] ? I_BDEV+0x20/0x20
        [<ffffffff8128fd20>] ? I_BDEV+0x20/0x20
        [<ffffffff8129058d>] blkdev_readpages+0x1d/0x20
        [<ffffffff811d615f>] __do_page_cache_readahead+0x28f/0x310
        [<ffffffff811d6039>] ? __do_page_cache_readahead+0x169/0x310
        [<ffffffff811c5abd>] ? pagecache_get_page+0x2d/0x1d0
        [<ffffffff811c76f6>] filemap_fault+0x396/0x530
        [<ffffffff811f816e>] __do_fault+0x4e/0xf0
        [<ffffffff811fce7d>] handle_mm_fault+0x11bd/0x1b50

      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: Jens Axboe <axboe@xxxxxx>
      Cc: Alexander Viro <viro@xxxxxxxxxxxxxxxxxx>
      Reported-by: kbuild test robot <lkp@xxxxxxxxx>
      Acked-by: Matthew Wilcox <willy@xxxxxxxxxxxxxxx>
      [willy: symmetry fixups]
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit b4ba1f0f6533e3a49976f5736b263478509099a0
  Merge: a3d66b5 92e788b
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Nov 19 12:21:23 2015 -0800

      Merge tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux

      Pull arm64 fixes from Catalin Marinas:

       - Fix size alignment in __iommu_{alloc,free}_attrs

       - Kernel memory mapping fix with CONFIG_DEBUG_RODATA for page sizes
         other than 4KB and a fix of the mark_rodata_ro permissions

       - dma_get_ops() simplification and behaviour alignment between DT and
         ACPI

       - function_graph trace fix for cpu_suspend() (CPUs returning from deep
         sleep via a different path and confusing the tracer)

       - Use of non-global mappings for UEFI run-time services to avoid a
         (potentially theoretical) TLB conflict

       - Crypto priority reduction of core AES cipher (the accelerated
         asynchronous implementation is preferred when available)

       - Reverting an old commit that removed BogoMIPS from /proc/cpuinfo on
         arm64.  Apparently, we had it for a relatively short time and libvirt
         started checking for its presence

       - Compiler warnings fixed (ptrace.h inclusion from compat.h,
         smp_load_acquire with const argument)

      * tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux:
        arm64: restore bogomips information in /proc/cpuinfo
        arm64: barriers: fix smp_load_acquire to work with const arguments
        arm64: Fix R/O permissions in mark_rodata_ro
        arm64: crypto: reduce priority of core AES cipher
        arm64: use non-global mappings for UEFI runtime regions
        arm64: kernel: pause/unpause function graph tracer in cpu_suspend()
        arm64: do not include ptrace.h from compat.h
        arm64: simplify dma_get_ops
        arm64: mm: use correct mapping granularity under DEBUG_RODATA
        arm64/dma-mapping: Fix sizes in __iommu_{alloc,free}_attrs

  commit a3d66b5a17f81ee84604f95b0e2c9ccf0434c6f0
  Merge: 319645c e41b104
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Nov 19 12:16:12 2015 -0800

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jikos/livepatching

      Pull livepatching fix from Jiri Kosina:
       "A fix for module handling in case kASLR has been enabled, from Zhou
        Chengming"

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jikos/livepatching:
        livepatch: x86: fix relocation computation with kASLR

  commit 319645cac26c2d065a485f5d59228433ad602f71
  Merge: 1282ac4 a3088ab
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Nov 19 12:10:51 2015 -0800

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jikos/hid

      Pull HID fixes from Jiri Kosina:
       "Two functional fixes for wacom HID driver from Ping Cheng and Jiri
        Kosina"

      * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/hid:
        HID: wacom: fixup quirks setup for WACOM_DEVICETYPE_PAD
        HID: wacom: Add outbounding area for DTU1141

  commit 6824c5ef5e8900e61ce8ed40885cacc1c9301c14
  Author: Keith Busch <keith.busch@xxxxxxxxx>
  Date:   Wed Nov 18 16:33:08 2015 -0700

      NVMe: Fix possible arithmetic overflow for max segments

      Reported-by: Paul Grabinar <paul.grabinar@xxxxxxxxxxx>
      Signed-off-by: Keith Busch <keith.busch@xxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 1282ac407cf4c3eaeaddd8d776a7ffbd2b94c2e7
  Merge: 34258a3 d3df046
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Nov 19 11:33:58 2015 -0800

      Merge tag 'mmc-v4.4-rc1' of git://git.linaro.org/people/ulf.hansson/mmc

      Pull MMC fixes from Ulf Hansson:
       "Here are some mmc fixes intended for v4.4 rc2.  It's based on a commit
        prior rc1 as I wanted to get them a bit more tested in next before
        sending you the pull request.

        MMC core:
         - Improve reliability when selecting HS200 mode
         - Improve reliability when selecting HS400 mode
         - mmc: remove bondage between REQ_META and reliable write

        MMC host:
         - pxamci: Fix read-only gpio detection polarity
         - mtk-sd: Preinitialize delay_phase to fix the case when delay is zero
         - android-goldfish: Fix build dependency by adding HAS_DMA
         - dw_mmc: Remove Seungwon Jeon from MAINTAINERS"

      * tag 'mmc-v4.4-rc1' of git://git.linaro.org/people/ulf.hansson/mmc:
        mmc: remove bondage between REQ_META and reliable write
        mmc: MMC_GOLDFISH should depend on HAS_DMA
        mmc: mediatek: Preinitialize delay_phase in get_best_delay()
        MAINTAINERS: mmc: Remove Seungwon Jeon from dw_mmc
        mmc: mmc: Improve reliability of mmc_select_hs400()
        mmc: mmc: Move mmc_switch_status()
        mmc: mmc: Fix HS setting in mmc_select_hs400()
        mmc: mmc: Improve reliability of mmc_select_hs200()
        mmc: pxamci: fix read-only gpio detection polarity

  commit bcbd94ff481ec1d7b5c824d90df82d0faafabd35
  Author: Mikulas Patocka <mpatocka@xxxxxxxxxx>
  Date:   Thu Nov 19 07:36:50 2015 -0500

      dm crypt: fix a possible hang due to race condition on exit

      A kernel thread executes __set_current_state(TASK_INTERRUPTIBLE),
      __add_wait_queue, spin_unlock_irq and then tests kthread_should_stop().
      It is possible that the processor reorders memory accesses so that
      kthread_should_stop() is executed before __set_current_state().  If such
      reordering happens, there is a possible race on thread termination:

      CPU 0:
      calls kthread_should_stop()
        it tests KTHREAD_SHOULD_STOP bit, returns false
      CPU 1:
      calls kthread_stop(cc->write_thread)
        sets the KTHREAD_SHOULD_STOP bit
        calls wake_up_process on the kernel thread, that sets the thread
        state to TASK_RUNNING
      CPU 0:
      sets __set_current_state(TASK_INTERRUPTIBLE)
      spin_unlock_irq(&cc->write_thread_wait.lock)
      schedule() - and the process is stuck and never terminates, because the
        state is TASK_INTERRUPTIBLE and wake_up_process on CPU 1 already
        terminated

      Fix this race condition by using a new flag DM_CRYPT_EXIT_THREAD to
      signal that the kernel thread should exit.  The flag is set and tested
      while holding cc->write_thread_wait.lock, so there is no possibility of
      racy access to the flag.

      Also, remove the unnecessary set_task_state(current, TASK_RUNNING)
      following the schedule() call.  When the process was woken up, its state
      was already set to TASK_RUNNING.  Other kernel code also doesn't set the
      state to TASK_RUNNING following schedule() (for example,
      do_wait_for_common in completion.c doesn't do it).

      Fixes: dc2676210c42 ("dm crypt: offload writes to thread")
      Signed-off-by: Mikulas Patocka <mpatocka@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # v4.0+
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>

  commit 92e788b749862ebe9920360513a718e5dd4da7a9
  Author: Yang Shi <yang.shi@xxxxxxxxxx>
  Date:   Wed Nov 18 10:48:55 2015 -0800

      arm64: restore bogomips information in /proc/cpuinfo

      As previously reported, some userspace applications depend on bogomips
      showed by /proc/cpuinfo. Although there is much less legacy impact on
      aarch64 than arm, it does break libvirt.

      This patch reverts commit 326b16db9f69 ("arm64: delay: don't bother
      reporting bogomips in /proc/cpuinfo"), but with some tweak due to
      context change and without the pr_info().

      Fixes: 326b16db9f69 ("arm64: delay: don't bother reporting bogomips in 
/proc/cpuinfo")
      Signed-off-by: Yang Shi <yang.shi@xxxxxxxxxx>
      Acked-by: Will Deacon <will.deacon@xxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 3.12+
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit d792abacaf1a1a8dfea353fab699b97fa6251c2a
  Merge: 62a193e 152e9f6
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Thu Nov 19 17:59:32 2015 +0100

      Merge tag 'kvm-s390-master-4.4-1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/kvms390/linux into kvm-master

      KVM: s390: Fixes for 4.4

      1. disallow changing the SIMD mode when CPUs have been created.
         it allowed userspace to corrupt kernel memory
      2. Fix vCPU lookup. Until now the vCPU number equals the vCPU id. Some
         kernel code places relied on that. This might
         a: cause guest failures
         b: allow userspace to corrupt kernel memory
      3. Fencing of the PFMF instruction should use the guest facilities
         and not the host facilities.

  commit 5481c8fb1da2a573861095fbea078f30c664d0bd
  Author: Daniel Vetter <daniel.vetter@xxxxxxxx>
  Date:   Wed Nov 18 18:46:48 2015 +0100

      drm/atomic-helper: Check encoder/crtc constraints

      This was totally lost when I originally created the atomic helpers.

      We probably should also check possible_clones in the helpers, but
      since the legacy ones didn't do that this is for a separate patch.

      Reported-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      Cc: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      Cc: Daniel Stone <daniels@xxxxxxxxxxxxx>
      Reviewed-by: Daniel Stone <daniels@xxxxxxxxxxxxx>
      Reviewed-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      Tested-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      Signed-off-by: Daniel Vetter <daniel.vetter@xxxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>
      Link: 
http://patchwork.freedesktop.org/patch/msgid/1447868808-10266-1-git-send-email-daniel.vetter@xxxxxxxx

  commit 152e9f65d66f0a3891efc3869440becc0e7ff53f
  Author: David Hildenbrand <dahi@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Nov 5 09:06:06 2015 +0100

      KVM: s390: fix wrong lookup of VCPUs by array index

      For now, VCPUs were always created sequentially with incrementing
      VCPU ids. Therefore, the index in the VCPUs array matched the id.

      As sequential creation might change with cpu hotplug, let's use
      the correct lookup function to find a VCPU by id, not array index.

      Let's also use kvm_lookup_vcpu() for validation of the sending VCPU
      on external call injection.

      Reviewed-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Signed-off-by: David Hildenbrand <dahi@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # db27a7a KVM: Provide function for VCPU 
lookup by id

  commit b85de33a1a3433487b6a721cfdce25ec8673e622
  Author: David Hildenbrand <dahi@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Nov 5 09:38:15 2015 +0100

      KVM: s390: avoid memory overwrites on emergency signal injection

      Commit 383d0b050106 ("KVM: s390: handle pending local interrupts via
      bitmap") introduced a possible memory overwrite from user space.

      User space could pass an invalid emergency signal code (sending VCPU)
      and therefore exceed the bitmap. Let's take care of this case and
      check that the id is in the valid range.

      Reviewed-by: Dominik Dingel <dingel@xxxxxxxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # v3.19+ db27a7a KVM: Provide function for 
VCPU lookup by id
      Signed-off-by: David Hildenbrand <dahi@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>

  commit db27a7a37aa0b1f8b373f8b0fb72a2ccaafb85b7
  Author: David Hildenbrand <dahi@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Nov 5 09:03:50 2015 +0100

      KVM: Provide function for VCPU lookup by id

      Let's provide a function to lookup a VCPU by id.

      Reviewed-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Reviewed-by: Dominik Dingel <dingel@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David Hildenbrand <dahi@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      [split patch from refactoring patch]

  commit 03c02807e25ef0f44767f28e939efc2c5deb0f3d
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Fri Nov 13 13:31:58 2015 +0100

      KVM: s390: fix pfmf intercept handler

      The pfmf intercept handler should check if the EDAT 1 facility
      is installed in the guest, not if it is installed in the host.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>

  commit 5967c17b118a2bd1dd1d554cc4eee16233e52bec
  Author: David Hildenbrand <dahi@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 6 12:08:48 2015 +0100

      KVM: s390: enable SIMD only when no VCPUs were created

      We should never allow to enable/disable any facilities for the guest
      when other VCPUs were already created.

      kvm_arch_vcpu_(load|put) relies on SIMD not changing during runtime.
      If somebody would create and run VCPUs and then decides to enable
      SIMD, undefined behaviour could be possible (e.g. vector save area
      not being set up).

      Acked-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Acked-by: Cornelia Huck <cornelia.huck@xxxxxxxxxx>
      Signed-off-by: David Hildenbrand <dahi@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # 4.1+

  commit 581b7f158fe0383b492acd1ce3fb4e99d4e57808
  Author: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
  Date:   Wed Jun 3 10:31:14 2015 +0100

      x86/cpu: Fix SMAP check in PVOPS environments

      There appears to be no formal statement of what pv_irq_ops.save_fl() is
      supposed to return precisely.  Native returns the full flags, while 
lguest and
      Xen only return the Interrupt Flag, and both have comments by the
      implementations stating that only the Interrupt Flag is looked at.  This 
may
      have been true when initially implemented, but no longer is.

      To make matters worse, the Xen PVOP leaves the upper bits undefined, 
making
      the BUG_ON() undefined behaviour.  Experimentally, this now trips for 
32bit PV
      guests on Broadwell hardware.  The BUG_ON() is consistent for an 
individual
      build, but not consistent for all builds.  It has also been a sitting 
timebomb
      since SMAP support was introduced.

      Use native_save_fl() instead, which will obtain an accurate view of the AC
      flag.

      Signed-off-by: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
      Reviewed-by: David Vrabel <david.vrabel@xxxxxxxxxx>
      Tested-by: Rusty Russell <rusty@xxxxxxxxxxxxxxx>
      Cc: Rusty Russell <rusty@xxxxxxxxxxxxxxx>
      Cc: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>
      Cc: Boris Ostrovsky <boris.ostrovsky@xxxxxxxxxx>
      Cc: <lguest@xxxxxxxxxxxxxxxx>
      Cc: Xen-devel <xen-devel@xxxxxxxxxxxxx>
      CC: stable@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1433323874-6927-1-git-send-email-andrew.cooper3@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 112677d683d31ebd6a8e8b02e0620ae512354b2d
  Author: Namhyung Kim <namhyung@xxxxxxxxxx>
  Date:   Tue Nov 17 09:43:24 2015 +0900

      x86/ftrace: Add comment on static function tracing

      There was a confusion between update_ftrace_function() and static
      function tracing trampoline regarding 3rd parameter (ftrace_ops).
      Add a comment for clarification.

      Suggested-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Signed-off-by: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1447721004-2551-1-git-send-email-namhyung@xxxxxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 7383123647566a813692bb37a1389c767ed89158
  Author: Jani Nikula <jani.nikula@xxxxxxxxx>
  Date:   Thu Nov 19 10:26:30 2015 +0200

      Revert "drm/i915: skip modeset if compatible for everyone."

      This reverts

      commit 6764e9f8724f1231b4deac53b9a82286ac0830e7
      Author: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Date:   Thu Aug 27 15:44:06 2015 +0200

          drm/i915: skip modeset if compatible for everyone.

      Bring back the i915.fastboot module parameter, disabled by default, due
      to backlight regression on Chromebook Pixel 2015.

      Apparently the firmware of the Chromebook in question enables the panel
      but disables backlight to avoid a brief garbage scanout upon loading the
      kernel/module. With fastboot, we leave the backlight untouched, in this
      case disabled. The user would have to do a modeset (i.e. not just crank
      up the brightness) to enable the backlight.

      There is no clean fix readily available, so get back to the drawing
      board by reverting.

      [N.B. The reference below is for when the thread was included on public
      lists, and some of the context had already been dropped by then.]

      Reported-and-tested-by: Olof Johansson <olof@xxxxxxxxx>
      Acked-by: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Acked-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      References: 
http://marc.info/?i=CAKMK7uES7xk05ki92oeX6gmvZWAh9f2vL7yz=6T+fGK9J3X7cQ@xxxxxxxxxxxxxx
      Fixes: 6764e9f8724f ("drm/i915: skip modeset if compatible for everyone.")
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>
      Link: 
http://patchwork.freedesktop.org/patch/msgid/1447921590-3785-1-git-send-email-jani.nikula@xxxxxxxxx

  commit f6619ef7508261be2ba3ded313ccc46ce670d0d3
  Author: Wang, Rui Y <rui.y.wang@xxxxxxxxx>
  Date:   Wed Nov 18 23:00:53 2015 +0800

      drm/mgag200: fix kernel hang in cursor code.

      The machine hang completely with the following message on the console:

      [  487.777538] BUG: unable to handle kernel NULL pointer dereference at 
0000000000000060
      [  487.777554] IP: [<ffffffff8158aaee>] _raw_spin_lock+0xe/0x30
      [  487.777557] PGD 42e9f7067 PUD 42f2fa067 PMD 0
      [  487.777560] Oops: 0002 [#1] SMP
      ...
      [  487.777618] CPU: 21 PID: 3190 Comm: Xorg Tainted: G            E   
4.4.0-rc1-3-default+ #6
      [  487.777620] Hardware name: Intel Corporation BRICKLAND/BRICKLAND, BIOS 
BRHSXSD1.86B.0059.R00.1501081238 01/08/2015
      [  487.777621] task: ffff880853ae4680 ti: ffff8808696d4000 task.ti: 
ffff8808696d4000
      [  487.777625] RIP: 0010:[<ffffffff8158aaee>]  [<ffffffff8158aaee>] 
_raw_spin_lock+0xe/0x30
      [  487.777627] RSP: 0018:ffff8808696d79c0  EFLAGS: 00010246
      [  487.777628] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 
0000000000000000
      [  487.777629] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 
0000000000000060
      [  487.777630] RBP: ffff8808696d79e0 R08: 0000000000000000 R09: 
ffff88086924a780
      [  487.777631] R10: 000000000001bb40 R11: 0000000000003246 R12: 
0000000000000000
      [  487.777632] R13: ffff880463a27360 R14: ffff88046ca50218 R15: 
0000000000000080
      [  487.777634] FS:  00007f3f81c5a8c0(0000) GS:ffff88086f060000(0000) 
knlGS:0000000000000000
      [  487.777635] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
      [  487.777636] CR2: 0000000000000060 CR3: 000000042e678000 CR4: 
00000000001406e0
      [  487.777638] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 
0000000000000000
      [  487.777639] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 
0000000000000400
      [  487.777639] Stack:
      [  487.777642]  ffffffffa00eb5fa ffff8808696d7b60 ffff88086b87d800 
0000000000000000
      [  487.777644]  ffff8808696d7ac8 ffffffffa01694b6 ffff8808696d7ae8 
ffffffff8109c8d5
      [  487.777647]  ffff880469158740 ffff880463a27000 ffff88086b87d800 
ffff88086b87d800
      [  487.777647] Call Trace:
      [  487.777674]  [<ffffffffa00eb5fa>] ? drm_gem_object_lookup+0x1a/0xa0 
[drm]
      [  487.777681]  [<ffffffffa01694b6>] mga_crtc_cursor_set+0xc6/0xb60 
[mgag200]
      [  487.777691]  [<ffffffff8109c8d5>] ? find_busiest_group+0x35/0x4a0
      [  487.777696]  [<ffffffff81086294>] ? __might_sleep+0x44/0x80
      [  487.777699]  [<ffffffff815888c2>] ? __ww_mutex_lock+0x22/0x9c
      [  487.777722]  [<ffffffffa0104f64>] ? drm_modeset_lock+0x34/0xf0 [drm]
      [  487.777733]  [<ffffffffa0148d9e>] restore_fbdev_mode+0xee/0x2a0 
[drm_kms_helper]
      [  487.777742]  [<ffffffffa014afce>] 
drm_fb_helper_restore_fbdev_mode_unlocked+0x2e/0x70 [drm_kms_helper]
      [  487.777748]  [<ffffffffa014b037>] drm_fb_helper_set_par+0x27/0x50 
[drm_kms_helper]
      [  487.777752]  [<ffffffff8134560c>] fb_set_var+0x18c/0x3f0
      [  487.777777]  [<ffffffffa02a9b0a>] ? 
__ext4_handle_dirty_metadata+0x8a/0x210 [ext4]
      [  487.777783]  [<ffffffff8133cb97>] fbcon_blank+0x1b7/0x2b0
      [  487.777790]  [<ffffffff813be2a3>] do_unblank_screen+0xb3/0x1c0
      [  487.777795]  [<ffffffff813b5aba>] vt_ioctl+0x118a/0x1210
      [  487.777801]  [<ffffffff813a8fe0>] tty_ioctl+0x3f0/0xc90
      [  487.777808]  [<ffffffff81172018>] ? kzfree+0x28/0x30
      [  487.777813]  [<ffffffff811e053f>] ? mntput+0x1f/0x30
      [  487.777817]  [<ffffffff811d3f5d>] do_vfs_ioctl+0x30d/0x570
      [  487.777822]  [<ffffffff8107ed3a>] ? task_work_run+0x8a/0xa0
      [  487.777825]  [<ffffffff811d4234>] SyS_ioctl+0x74/0x80
      [  487.777829]  [<ffffffff8158aeae>] entry_SYSCALL_64_fastpath+0x12/0x71
      [  487.777851] Code: 65 ff 0d ce 02 a8 7e 5d c3 ba 01 00 00 00 f0 0f b1 
17 85 c0 75 e8 b0 01 5d c3 0f 1f 00 65 ff 05 b1 02 a8 7e 31 c0 ba 01 00 00 00 
<f0> 0f b1 17 85 c0 75 01 c3 55 89 c6 48 89 e5 e8 4e f5 b1 ff 5d
      [  487.777854] RIP  [<ffffffff8158aaee>] _raw_spin_lock+0xe/0x30
      [  487.777855]  RSP <ffff8808696d79c0>
      [  487.777856] CR2: 0000000000000060
      [  487.777860] ---[ end trace 672a2cd555e0ebd3 ]---

      The cursor code may be entered with file_priv == NULL && handle == NULL.
      The problem was introduced by:

      "bf89209 drm/mga200g: Hold a proper reference for cursor_set"

      which calls drm_gem_object_lookup(dev, file_priv...). Previously this 
wasn't
      a problem because we checked the handle. Move the check early in the 
function
      can fix the problem.

      Signed-off-by: Rui Wang <rui.y.wang@xxxxxxxxx>
      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit e6c84acb3afcdf4bdbedc75d268b6c8bd7c4ed7a
  Merge: 8ed59fd bf893ac
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Thu Nov 19 13:17:08 2015 +1000

      Merge branch 'drm-vc4-fixes' of git://github.com/anholt/linux into 
drm-fixes

      Here are a few little VC4 fixes for 4.4 that I didn't get in to you
      before the -next pull request.  I dropped the feature-ish one I'd
      mentioned, and also droppped the one I saw you included in the last
      -fixes pull request.

      * 'drm-vc4-fixes' of git://github.com/anholt/linux:
        drm/vc4: Make sure that planes aren't scaled.
        drm/vc4: Fix some failure to track __iomem decorations on pointers.
        drm/vc4: checking for NULL instead of IS_ERR
        drm/vc4: fix itnull.cocci warnings
        drm/vc4: fix platform_no_drv_owner.cocci warnings
        drm/vc4: vc4_plane_duplicate_state() can be static

  commit 8ed59fd6d4691bd1e67b71f84e473f440fc7c821
  Merge: 34258a3 49b02b1
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Thu Nov 19 13:15:17 2015 +1000

      Merge branch 'drm-fixes-4.4' of git://people.freedesktop.org/~agd5f/linux 
into drm-fixes

      Radeon and amdgpu fixes for 4.4.  A bit more the usual since I missed
      last week.  Misc fixes all over the place.  The big changes are the
      tiling configuration fixes for Fiji.

      * 'drm-fixes-4.4' of git://people.freedesktop.org/~agd5f/linux: (35 
commits)
        drm/amdgpu: reserve/unreserve objects out of map/unmap operations
        drm/amdgpu: move bo_reserve out of amdgpu_vm_clear_bo
        drm/amdgpu: add lock for interval tree in vm
        drm/amdgpu: keep the owner for VMIDs
        drm/amdgpu: move VM manager clean into the VM code again
        drm/amdgpu: cleanup VM coding style
        drm/amdgpu: remove unused VM manager field
        drm/amdgpu: cleanup scheduler command submission
        drm/amdgpu: fix typo in firmware name
        drm/amdgpu: remove the unnecessary parameter adev for amdgpu_sa_bo_new()
        drm/amdgpu: wait interruptible when semaphores are disabled v2
        drm/amdgpu: update pd while updating vm as well
        drm/amdgpu: fix handling order in scheduler CS
        drm/amdgpu: fix incorrect mutex usage v3
        drm/amdgpu: cleanup scheduler fence get/put dance
        drm/amdgpu: add command submission workflow tracepoint
        drm/amdgpu: update Fiji's tiling mode table
        drm/amdgpu: fix bug that can't enter thermal interrupt for bonaire.
        drm/amdgpu: fix seq_printf format string
        drm/radeon: fix quirk for MSI R7 370 Armor 2X
        ...

  commit 0df9d41ab5d43dc5b20abc8b22a6b6d098b03994
  Author: Yigal Korman <yigal@xxxxxxxxxxxxx>
  Date:   Mon Nov 16 14:09:15 2015 +0200

      mm, dax: fix DAX deadlocks (COW fault)

      DAX handling of COW faults has wrong locking sequence:
        dax_fault does i_mmap_lock_read
        do_cow_fault does i_mmap_unlock_write

      Ross's commit[1] missed a fix[2] that Kirill added to Matthew's
      commit[3].

      Original COW locking logic was introduced by Matthew here[4].

      This should be applied to v4.3 as well.

      [1] 0f90cc6609c7 mm, dax: fix DAX deadlocks
      [2] 52a2b53ffde6 mm, dax: use i_mmap_unlock_write() in do_cow_fault()
      [3] 843172978bb9 dax: fix race between simultaneous faults
      [4] 2e4cdab0584f mm: allow page fault handlers to perform the COW

      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: Boaz Harrosh <boaz@xxxxxxxxxxxxx>
      Cc: Alexander Viro <viro@xxxxxxxxxxxxxxxxxx>
      Cc: Dave Chinner <dchinner@xxxxxxxxxx>
      Cc: Jan Kara <jack@xxxxxxxx>
      Cc: "Kirill A. Shutemov" <kirill.shutemov@xxxxxxxxxxxxxxx>
      Cc: Matthew Wilcox <matthew.r.wilcox@xxxxxxxxx>
      Acked-by: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
      Signed-off-by: Yigal Korman <yigal@xxxxxxxxxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit 2ce47b44b25d8fb0114ff117813742adbefec8ff
  Author: Bamvor Jian Zhang <bamvor.zhangjian@xxxxxxxxxx>
  Date:   Fri Nov 13 11:17:51 2015 +0800

      selftests/seccomp: Get page size from sysconf

      The commit fd88d16c58c2 ("selftests/seccomp: Be more precise with
      syscall arguments.") use PAGE_SIZE directly which lead to build
      failure on arm64.

      Replace it with generic interface(sysconf(_SC_PAGESIZE)) to fix this
      failure.

      Build and test successful on x86_64 and arm64.

      Signed-off-by: Bamvor Jian Zhang <bamvor.zhangjian@xxxxxxxxxx>
      Acked-by: Kees Cook <keescook@xxxxxxxxxxxx>
      Tested-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Signed-off-by: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>

  commit 3bf7f56e70c9f0edb4f91cbb73a393c3b1d24801
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Thu Nov 19 00:42:23 2015 +0100

      Revert "Documentation: kernel_parameters for Intel P state driver"

      Revert commit 053f56def57b (Documentation: kernel_parameters for Intel P
      state driver) as the code documented by it has been reverted already.

      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit 2d4ee3036774e394d416cded9d5cf7661ffb4e4f
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Nov 16 22:27:55 2015 +0100

      cpufreq: mediatek: fix build error

      The recently added mt8173 cpufreq driver relies on the cpu topology
      that is always present on ARM64 but optional on ARM32:

      drivers/cpufreq/mt8173-cpufreq.c: In function 'mtk_cpufreq_init':
      drivers/cpufreq/mt8173-cpufreq.c:441:30: error: 'cpu_topology' undeclared 
(first use in this function)
        cpumask_copy(policy->cpus, &cpu_topology[policy->cpu].core_sibling);

      This refines the Kconfig dependencies so that we can still build on
      ARM32, but only if COMPILE_TEST is selected and the CPU topology
      code is present.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit 1421df63c3cf956c69c26ac9660c6e223eeed980
  Author: Philippe Longepe <philippe.longepe@xxxxxxxxxxxxxxx>
  Date:   Mon Nov 9 17:40:47 2015 -0800

      cpufreq: intel_pstate: Add separate support for Airmont cores

      There are two flavors of Atom cores to be supported by intel_pstate,
      Silvermont and Airmont, so make the driver distinguish between them by
      adding separate frequency tables.

      Separate the CPU defaults params for each of them and match the CPU IDs
      against them as appropriate.

      Signed-off-by: Philippe Longepe <philippe.longepe@xxxxxxxxxxxxxxx>
      Signed-off-by: Stephane Gasparini <stephane.gasparini@xxxxxxxxxxxxxxx>
      Acked-by: Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
      [ rjw: Subject and changelog ]
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit 938d21a2a6370241c86d515ca574aaaa9e8812f2
  Author: Philippe Longepe <philippe.longepe@xxxxxxxxxxxxxxx>
  Date:   Mon Nov 9 17:40:46 2015 -0800

      cpufreq: intel_pstate: Replace BYT with ATOM

      Rename symbol and function names starting with "BYT" or "byt" to
      start with "ATOM" or "atom", respectively, so as to make it clear
      that they may apply to Atom in general and not just to Baytrail
      (the goal is to support several Atoms architectures eventually).

      This should not lead to any functional changes.

      Signed-off-by: Philippe Longepe <philippe.longepe@xxxxxxxxxxxxxxx>
      Signed-off-by: Stephane Gasparini <stephane.gasparini@xxxxxxxxxxxxxxx>
      Acked-by: Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
      [ rjw : Changelog ]
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit 6ee11e413c495390dacabd96ad462eea9de9dfbd
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Thu Nov 19 00:20:42 2015 +0100

      Revert "cpufreq: intel_pstate: Use ACPI perf configuration"

      Revert commit 37afb0003242 (cpufreq: intel_pstate: Use ACPI perf
      configuration) that is reported to cause a regression to happen
      on a system where invalid data are returned by the ACPI _PSS object.

      Since that commit makes assumptions regarding the _PSS output
      correctness that may turn out to be overly optimistic in general,
      there is a concern that it may introduce regression on more
      systems, so it's better to revert it now and we'll revisit the
      underlying issue in the next cycle with a more robust solution.

      Conflicts:
              drivers/cpufreq/intel_pstate.c

      Fixes: 37afb0003242 (cpufreq: intel_pstate: Use ACPI perf configuration)
      Reported-by: Borislav Petkov <bp@xxxxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit 799281a3c481a738801bf17e3079a6f91df56cd3
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Wed Nov 18 23:29:56 2015 +0100

      Revert "cpufreq: intel_pstate: Avoid calculation for max/min"

      Revert commit 4ef451487019 (cpufreq: intel_pstate: Avoid calculation for
      max/min) as it depends on commit 37afb0003242 (cpufreq: intel_pstate: Use
      ACPI perf configuration) that causes problems to happen and needs to be
      reverted.

      Conflicts:
        drivers/cpufreq/intel_pstate.c

      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit b57f9f34e27bf81c97b10d6725d71824e448c37e
  Author: Glen Lee <glen.lee@xxxxxxxxx>
  Date:   Thu Nov 5 18:51:23 2015 +0900

      Revert "Staging: wilc1000: coreconfigurator: Drop unneeded wrapper 
functions"

      The source and destination pointers are misplaced.
      This will be like,
      ether_addr_copy(data, bssid + ADDR2);
      -> ether_addr_copy(bssid, data + ADDR2);
      and also to use ether_addr_copy, it has to be proved that src/dst address 
are
      properly aligned(2).

      I revert this as author agree to drop this patch.

      This reverts commit d4622f68db8095dd54179e3134e97812727f6b89.

      Signed-off-by: Glen Lee <glen.lee@xxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 1ddaa021b000220b5f2ad023e4f15ed44990974b
  Author: Kamal Dasu <kdasu.kdev@xxxxxxxxx>
  Date:   Tue Nov 17 13:50:08 2015 -0500

      MAINTAINERS: brcmnand: Add co-maintainer for Broadcom SoCs

      Adding myself as co-maintainer of nand controller driver
      for the Broadcom SoCs.

      Signed-off-by: Kamal Dasu <kdasu.kdev@xxxxxxxxx>
      Acked-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: Brian Norris <computersforpeace@xxxxxxxxx>

  commit 819db468b26797d9f53d547dd2a9fe94859a16e0
  Merge: 8005c49 a57f8da
  Author: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 18 13:15:50 2015 -0800

      Merge tag 'iio-fixes-for-4.4a' of 
ssh://ra.kernel.org/pub/scm/linux/kernel/git/jic23/iio into staging-linus

      Jonathan writes:

      First set of IIO fixes for the 4.4 cycle.

      This set does not include those for issues introduced during the merge
      window.  Fixes of those will follow in a future series.

      * ad5064
        - Make sure the local i2c_write returns 0 on success rather than the
          number of bytes transfered.  Otherwise we report an error on all 
writes.
        - Fix a shift for ad5629 and ad5669 which gives incorrect DAC output on
          these parts.
      * ad7793
        - The product ID on the datasheet is wrong.  Fix it in the driver.
      * IIO_DUMMY_EVGEN
        - select IRQ_WORK as a dependency.
      * lpc32xx
        - make sure clock is prepared before enabling.
      * si7020
        - data byte order was reversed. Fix it.
      * vf610
        - Internal temperature calculation was wrong if a different
          reference voltage was used.  Now use a linear interpolation
          function to make it work over the full range.
        - Fix a division by zero in the case of a device tree property
          not being present (same issue two fixes).
      * xilinx XADC
        - VREFN scale was wrong - fix it.

  commit c139aa60c1007429335131167a0ca181e38c5668
  Author: Will Deacon <will.deacon@xxxxxxx>
  Date:   Wed Nov 18 10:13:08 2015 +0000

      arm64: barriers: fix smp_load_acquire to work with const arguments

      A newly introduced function in include/net/sock.h passes a const
      argument to smp_load_acquire:

        static inline int sk_state_load(const struct sock *sk)
        {
        return smp_load_acquire(&sk->sk_state);
        }

      This cause an allmodconfig build failure, since our underlying
      load-acquire implementation does not handle const types correctly:

        include/net/sock.h: In function 'sk_state_load':
        ./arch/arm64/include/asm/barrier.h:71:3: error: read-only variable 
'___p1' used as 'asm' output
           asm volatile ("ldarb %w0, %1"    \

      This patch fixes the problem by reusing the trick in READ_ONCE that
      loads via a non-const member of an anonymous union. This has the
      advantage of allowing us to use smp_load_acquire on packed structures
      (e.g. arch_spinlock_t) as well as primitive types.

      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: David Daney <david.daney@xxxxxxxxxx>
      Cc: Eric Dumazet <eric.dumazet@xxxxxxxxx>
      Reported-by: Arnd Bergmann <arnd@xxxxxxxx>
      Reported-by: David Daney <david.daney@xxxxxxxxxx>
      Signed-off-by: Will Deacon <will.deacon@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit dad67d5f3d0efe01d38c6cebcb6698280e51927b
  Author: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
  Date:   Wed Nov 18 10:48:22 2015 +0200

      xhci: Fix a race in usb2 LPM resume, blocking U3 for usb2 devices

      Clear device initiated resume variables once device is fully up and 
running
      in U0 state.

      Resume needs to be signaled for 20ms for usb2 devices before they can be
      moved to U0 state.

      An interrupt is triggered if a device initiates resume. As we handle the
      event in interrupt context we can not sleep for 20ms, so we instead set
      a resume flag, a timestamp, and start the roothub polling.

      The roothub code will later move the port to U0 when it finds a port in
      resume state with the resume flag set, and timestamp passed by 20ms.

      A host initiated resume is however not done in interrupt context, and
      host initiated resume code will directly signal resume, wait 20ms and then
      move the port to U0.

      These two codepaths can race, if we are in the middle of a host initated
      resume, while sleeping for 20ms, we may handle a port event and find the
      port in resume state. The port event handling code will assume the resume
      was device initiated and set the resume flag and timestamp.

      Root hub code will however not catch the port in resume state again as the
      host initated resume code has already moved the port to U0.
      The resume flag and timestamp will remain set for this port preventing 
port
      from suspending again  (LPM setting port to U3)

      Fix this for now by always clearing the device initated resume parameters
      once port is in U0

      Cc: stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 42df7215facf27be8d53e657dd4a12d4ebad0a44
  Author: Lu Baolu <baolu.lu@xxxxxxxxxxxxxxx>
  Date:   Wed Nov 18 10:48:21 2015 +0200

      usb: xhci: fix checking ep busy for CFC

      Function ep_ring_is_processing() checks the dequeue pointer
      in endpoint context to know whether an endpoint is busy with
      processing TRBs. This is not correct since dequeue pointer
      field in an endpoint context is only valid when the endpoint
      is in Halted or Stopped states. This buggy code causes audio
      noise when playing sound with USB headset connected to host
      controllers which support CFC (one of xhci 1.1 features).

      This patch should exist in stable kernel since v4.3.

      Reported-and-tested-by: YD Tseng <yd_tseng@xxxxxxxxxxxxxx>
      Signed-off-by: Lu Baolu <baolu.lu@xxxxxxxxxxxxxxx>
      Cc: stable <stable@xxxxxxxxxxxxxxx> # v4.3
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit a5964396190d0c40dd549c23848c282fffa5d1f2
  Author: Rajmohan Mani <rajmohan.mani@xxxxxxxxx>
  Date:   Wed Nov 18 10:48:20 2015 +0200

      xhci: Workaround to get Intel xHCI reset working more reliably

      Existing Intel xHCI controllers require a delay of 1 mS,
      after setting the CMD_RESET bit in command register, before
      accessing any HC registers. This allows the HC to complete
      the reset operation and be ready for HC register access.
      Without this delay, the subsequent HC register access,
      may result in a system hang, very rarely.

      Verified CherryView / Braswell platforms go through over
      5000 warm reboot cycles (which was not possible without
      this patch), without any xHCI reset hang.

      Signed-off-by: Rajmohan Mani <rajmohan.mani@xxxxxxxxx>
      Tested-by: Joe Lawrence <joe.lawrence@xxxxxxxxxxx>
      Cc: stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
      Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

  commit 53de980796e0b7463dfaa81edc41b272f07b1f17
  Merge: aa05cfa 6f51bc3
  Author: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 18 09:21:17 2015 -0800

      Merge tag 'usb-ci-v4.4-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/peter.chen/usb into usb-linus

      Peter writes:

      USB Chipidea Fixes for v4.4-rc2

      The first four fixes was for v4.3-rc7, but it is too late
      at that time, and other two small fixes are for possible NULL
      pointer issue.

  commit 34258a32d9a9fc9e38fb549efe1692301cc31f85
  Merge: 0d77a12 f52c74f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 18 08:59:29 2015 -0800

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux

      Pull s390 fixes from Martin Schwidefsky:
       "Assorted bug fixes, the mlock2 system call gets added, and one
        improvement.  The boot from dasd devices is now possible from a wider
        range of devices"

      * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux:
        s390: remove SALIPL loader
        s390: wire up mlock2 system call
        s390: remove g5 elf platform support
        s390: avoid cache aliasing under z/VM and KVM
        s390/sclp: _sclp_wait_int(): retain full PSW mask
        s390/zcrypt: Fix initialisation when zcrypt is built-in
        s390/zcrypt: Fix kernel crash on systems without AP bus support
        s390: add support for ipl devices in subchannel sets > 0
        s390/ipl: fix out of bounds access in scpdata_write
        s390/pci_dma: improve debugging of errors during dma map
        s390/pci_dma: handle dma table failures
        s390/pci_dma: unify label of invalid translation table entries
        s390/syscalls: remove system call number calculation
        s390/cio: simplify css_generate_pgid
        s390/diag: add a s390 prefix to the diagnose trace point
        s390/head: fix error message on unsupported hardware

  commit 0d77a123ffb5d11b97895afe8430191a273b23d6
  Merge: 7f151f1 cef03d7
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 18 08:43:29 2015 -0800

      Merge tag 'hwmon-for-linus-v4.4-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging

      Pull hwmon fixes from Guenter Roeck:
       "Fix build issues in scpi and ina2xx drivers, update scpi driver to
        support recent firmware, and fix an uninitialized variable warning in
        applesmc driver"

      * tag 'hwmon-for-linus-v4.4-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging:
        hwmon: (scpi) skip unsupported sensors properly
        hwmon: (scpi) add thermal-of dependency
        hwmon : (applesmc) Fix uninitialized variables warnings
        hwmon: (ina2xx) Fix build issue by selecting REGMAP_I2C

  commit 49b02b180a541d6fb31031aaffe75496e9238942
  Author: Chunming Zhou <David1.Zhou@xxxxxxx>
  Date:   Fri Nov 13 14:18:38 2015 +0800

      drm/amdgpu: reserve/unreserve objects out of map/unmap operations

      Change-Id: Id6514f2fb6e002437fdbe99353d5d35f4ac736c7
      Signed-off-by: Chunming Zhou <David1.Zhou@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>

  commit ef9f0a83d68cecca241ee5d61b797d598722772e
  Author: Chunming Zhou <David1.Zhou@xxxxxxx>
  Date:   Fri Nov 13 13:43:22 2015 +0800

      drm/amdgpu: move bo_reserve out of amdgpu_vm_clear_bo

      Change-Id: Ifbb0c06680494bfa04d0be5e5941d31ae2e5ef28
      Signed-off-by: Chunming Zhou <David1.Zhou@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>

  commit c25867dfabf045a8148fd179fa759bb17f670e42
  Author: Chunming Zhou <David1.Zhou@xxxxxxx>
  Date:   Fri Nov 13 13:32:01 2015 +0800

      drm/amdgpu: add lock for interval tree in vm

      Change-Id: I62b892a22af37b32e6b4aefca80a25cf45426ed2
      Signed-off-by: Chunming Zhou <David1.Zhou@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>

  commit 1c16c0a7b26c6c905dc79c4194135ca2f360f0f5
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Sat Nov 14 21:31:40 2015 +0100

      drm/amdgpu: keep the owner for VMIDs

      We don't need the last VM use any more, keep the owner directly.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Chunming Zhou <davdi1.zhou@xxxxxxx>

  commit ea89f8c9e8ba8a7b75446eef36917da50d2186d9
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Sun Nov 15 20:52:06 2015 +0100

      drm/amdgpu: move VM manager clean into the VM code again

      It's not a good idea to duplicate that code.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Chunming Zhou <davdi1.zhou@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 8b4fb00b5db271bb1e117a078d5d7a161d8d8af1
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Sun Nov 15 16:04:16 2015 +0100

      drm/amdgpu: cleanup VM coding style

      Fix the indentation and move the VM functions to the structures.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Chunming Zhou <davdi1.zhou@xxxxxxx>
      Reviewed-by: Junwei Zhang <Jerry.Zhang@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit eeed25ab83bbd68b2c9dba3cc2ce5913537594f6
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Sun Nov 15 15:50:07 2015 +0100

      drm/amdgpu: remove unused VM manager field

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Chunming Zhou <davdi1.zhou@xxxxxxx>
      Reviewed-by: Junwei Zhang <Jerry.Zhang@xxxxxxx>

  commit 984810fc45389c545719fbb4219e8a12b27032a4
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Sat Nov 14 21:05:35 2015 +0100

      drm/amdgpu: cleanup scheduler command submission

      Unify the two code path again, cause they do pretty much the same thing.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Chunming Zhou <davdi1.zhou@xxxxxxx>
      Reviewed-by: Junwei Zhang <Jerry.Zhang@xxxxxxx>

  commit 2269a395790dd1ed3ae6e7708d76731e92fd46ff
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Tue Nov 17 11:02:47 2015 +0100

      drm/amdgpu: fix typo in firmware name

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Chunming Zhou <david1.zhou@xxxxxxx>

  commit 00490c22b1b59b168d89de798f0790bfd9541515
  Author: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
  Date:   Mon Nov 16 14:42:12 2015 +0100

      drm/i915: Consider SPLL as another shared pll, v2.

      When diagnosing a unrelated bug for someone on irc, it would seem the 
hardware can
      be brought up by the BIOS with the embedded displayport using the SPLL 
for spread spectrum.

      Right now this is not handled well in i915, and it calculates the crtc 
needs to
      be reprogrammed on the first modeset without SSC, but  the SPLL itself 
was kept
      active. Fix this by exposing SPLL as a shared pll that will not be 
returned
      by intel_get_shared_dpll; you have to know it exists to use it.

      Changes since v1:
      - Create a separate dpll_hw_state.spll for spll, and use
        separate pll functions for spll.

      Tested-by: Emil Renner Berthing <kernel@xxxxxxxx>
      Tested-by: Gabriel Feceoru <gabriel.feceoru@xxxxxxxxx>
      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Link: 
http://patchwork.freedesktop.org/patch/msgid/1447681332-6318-1-git-send-email-maarten.lankhorst@xxxxxxxxxxxxxxx
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 0b2aa5b80bbf4d0fb5daa1fb83ff637daa12d552
  Author: Laura Abbott <labbott@xxxxxxxxxxxxxxxxx>
  Date:   Thu Nov 12 12:21:10 2015 -0800

      arm64: Fix R/O permissions in mark_rodata_ro

      The permissions in mark_rodata_ro trigger a build error
      with STRICT_MM_TYPECHECKS. Fix this by introducing
      PAGE_KERNEL_ROX for the same reasons as PAGE_KERNEL_RO.
      From Ard:

      "PAGE_KERNEL_EXEC has PTE_WRITE set as well, making the range
      writeable under the ARMv8.1 DBM feature, that manages the
      dirty bit in hardware (writing to a page with the PTE_RDONLY
      and PTE_WRITE bits both set will clear the PTE_RDONLY bit in that case)"

      Signed-off-by: Laura Abbott <labbott@xxxxxxxxxxxxxxxxx>
      Acked-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 08c6781cfaa196d4b257ec043c17e8746d9284e3
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Mon Nov 16 13:12:48 2015 +0100

      arm64: crypto: reduce priority of core AES cipher

      The asynchronous, merged implementations of AES in CBC, CTR and XTS
      modes are preferred when available (i.e., when instantiating ablkciphers
      explicitly). However, the synchronous core AES cipher combined with the
      generic CBC mode implementation will produce a 'cbc(aes)' blkcipher that
      is callable asynchronously as well. To prevent this implementation from
      being used when the accelerated asynchronous implemenation is also
      available, lower its priority to 250 (i.e., below the asynchronous
      module's priority of 300).

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 62a193edaf90df38356e292f47a17f28e0cee3f1
  Author: Matt Gingell <gingell@xxxxxxxxxx>
  Date:   Mon Nov 16 15:26:07 2015 -0800

      KVM: x86: request interrupt window when IRQ chip is split

      Before this patch, we incorrectly enter the guest without requesting an
      interrupt window if the IRQ chip is split between user space and the
      kernel.

      Because lapic_in_kernel no longer implies the PIC is in the kernel, this
      patch tests pic_in_kernel to determining whether an interrupt window
      should be requested when entering the guest.

      If the APIC is in the kernel and we request an interrupt window the
      guest will return immediately. If the APIC is masked the guest will not
      not make forward progress and unmask it, leading to a loop when KVM
      reenters and requests again. This patch adds a check to ensure the APIC
      is ready to accept an interrupt before requesting a window.

      Reviewed-by: Steve Rutherford <srutherford@xxxxxxxxxx>
      Signed-off-by: Matt Gingell <gingell@xxxxxxxxxx>
      [Use the other newly introduced functions. - Paolo]
      Fixes: 1c1a9ce973a7863dd46767226bce2a5f12d48bc6
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 934bf65354227981df15bbc755d33f4ba3443ff2
  Author: Matt Gingell <gingell@xxxxxxxxxx>
  Date:   Mon Nov 16 15:26:05 2015 -0800

      KVM: x86: set KVM_REQ_EVENT on local interrupt request from user space

      Set KVM_REQ_EVENT when a PIC in user space injects a local interrupt.

      Currently a request is only made when neither the PIC nor the APIC is in
      the kernel, which is not sufficient in the split IRQ chip case.

      This addresses a problem in QEMU where interrupts are delayed until
      another path invokes the event loop.

      Reviewed-by: Steve Rutherford <srutherford@xxxxxxxxxx>
      Signed-off-by: Matt Gingell <gingell@xxxxxxxxxx>
      Fixes: 1c1a9ce973a7863dd46767226bce2a5f12d48bc6
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 782d422bcaee4680c640fbc8ce8c45524fd11790
  Author: Matt Gingell <gingell@xxxxxxxxxx>
  Date:   Mon Nov 16 15:26:00 2015 -0800

      KVM: x86: split kvm_vcpu_ready_for_interrupt_injection out of 
dm_request_for_irq_injection

      This patch breaks out a new function 
kvm_vcpu_ready_for_interrupt_injection.
      This routine encapsulates the logic required to determine whether a vcpu
      is ready to accept an interrupt injection, which is now required on
      multiple paths.

      Reviewed-by: Steve Rutherford <srutherford@xxxxxxxxxx>
      Signed-off-by: Matt Gingell <gingell@xxxxxxxxxx>
      Fixes: 1c1a9ce973a7863dd46767226bce2a5f12d48bc6
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 127a457acb2131fdb31c68c98cf11eda8ba7b380
  Author: Matt Gingell <gingell@xxxxxxxxxx>
  Date:   Tue Nov 17 17:32:05 2015 +0100

      KVM: x86: fix interrupt window handling in split IRQ chip case

      This patch ensures that dm_request_for_irq_injection and
      post_kvm_run_save are in sync, avoiding that an endless ping-pong
      between userspace (who correctly notices that IF=0) and
      the kernel (who insists that userspace handles its request
      for the interrupt window).

      To synchronize them, it also adds checks for kvm_arch_interrupt_allowed
      and !kvm_event_needs_reinjection.  These are always needed, not
      just for in-kernel LAPIC.

      Signed-off-by: Matt Gingell <gingell@xxxxxxxxxx>
      [A collage of two patches from Matt. - Paolo]
      Fixes: 1c1a9ce973a7863dd46767226bce2a5f12d48bc6
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 585bb8f9a5e592f2ce7abbe5ed3112d5438d2754
  Author: James Hogan <james.hogan@xxxxxxxxxx>
  Date:   Wed Nov 11 14:21:20 2015 +0000

      MIPS: KVM: Uninit VCPU in vcpu_create error path

      If either of the memory allocations in kvm_arch_vcpu_create() fail, the
      vcpu which has been allocated and kvm_vcpu_init'd doesn't get uninit'd
      in the error handling path. Add a call to kvm_vcpu_uninit() to fix this.

      Fixes: 669e846e6c4e ("KVM/MIPS32: MIPS arch specific APIs for KVM")
      Signed-off-by: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
      Cc: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Cc: Gleb Natapov <gleb@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: kvm@xxxxxxxxxxxxxxx
      Cc: <stable@xxxxxxxxxxxxxxx> # 3.10.x-
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit c5c2a3b998f1ff5a586f9d37e154070b8d550d17
  Author: James Hogan <james.hogan@xxxxxxxxxx>
  Date:   Wed Nov 11 14:21:19 2015 +0000

      MIPS: KVM: Fix CACHE immediate offset sign extension

      The immediate field of the CACHE instruction is signed, so ensure that
      it gets sign extended by casting it to an int16_t rather than just
      masking the low 16 bits.

      Fixes: e685c689f3a8 ("KVM/MIPS32: Privileged instruction/target branch 
emulation.")
      Signed-off-by: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
      Cc: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Cc: Gleb Natapov <gleb@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: kvm@xxxxxxxxxxxxxxx
      Cc: <stable@xxxxxxxxxxxxxxx> # 3.10.x-
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 002374f371bd02df864cce1fe85d90dc5b292837
  Author: James Hogan <james.hogan@xxxxxxxxxx>
  Date:   Wed Nov 11 14:21:18 2015 +0000

      MIPS: KVM: Fix ASID restoration logic

      ASID restoration on guest resume should determine the guest execution
      mode based on the guest Status register rather than bit 30 of the guest
      PC.

      Fix the two places in locore.S that do this, loading the guest status
      from the cop0 area. Note, this assembly is specific to the trap &
      emulate implementation of KVM, so it doesn't need to check the
      supervisor bit as that mode is not implemented in the guest.

      Fixes: b680f70fc111 ("KVM/MIPS32: Entry point for trampolining to...")
      Signed-off-by: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
      Cc: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Cc: Gleb Natapov <gleb@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: kvm@xxxxxxxxxxxxxxx
      Cc: <stable@xxxxxxxxxxxxxxx> # 3.10.x-
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 65da0a8e34a857f2ba9ccb91dc8f8f964cf938b7
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Tue Nov 17 09:53:31 2015 +0100

      arm64: use non-global mappings for UEFI runtime regions

      As pointed out by Russell King in response to the proposed ARM version
      of this code, the sequence to switch between the UEFI runtime mapping
      and current's actual userland mapping (and vice versa) is potentially
      unsafe, since it leaves a time window between the switch to the new
      page tables and the TLB flush where speculative accesses may hit on
      stale global TLB entries.

      So instead, use non-global mappings, and perform the switch via the
      ordinary ASID-aware context switch routines.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Acked-by: Will Deacon <will.deacon@xxxxxxx>
      Reviewed-by: Mark Rutland <mark.rutland@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 0f94592efd36213c961145fe1ab0c3bc323ec053
  Author: Mika Kuoppala <mika.kuoppala@xxxxxxxxxxxxxxx>
  Date:   Tue Nov 17 18:14:26 2015 +0200

      drm/i915: Fix gpu frequency change tracing

      With gen < 9 we have had always 50Mhz units as our hw
      ratio. With gen >= 9 the hw ratio changed to 16.667Mhz (50/3).
      The result was that our gpu frequency tracing started to output
      values 3 times larger than expected due to hardcoded scaling
      value. Fix this by using  Use intel_gpu_freq() when generating Mhz
      value from ratio for 'intel_gpu_freq_change' trace event.

      Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=92591
      Cc: stable@xxxxxxxxxxxxxxx # v4.3+
      Reported-by: Eero Tamminen <eero.t.tamminen@xxxxxxxxx>
      Signed-off-by: Mika Kuoppala <mika.kuoppala@xxxxxxxxx>
      Reviewed-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>
      Link: 
http://patchwork.freedesktop.org/patch/msgid/1447776866-29384-1-git-send-email-mika.kuoppala@xxxxxxxxx

  commit 6f51bc340d2a1c71a2409f80f3e60fe2c44e35ae
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Thu Nov 12 08:43:34 2015 +0100

      usb: chipidea: imx: fix a possible NULL dereference

      of_match_device could return NULL, and so cause a NULL pointer
      dereference later.

      Reported-by: coverity (CID 1324138)
      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Peter Chen <peter.chen@xxxxxxxxxxxxx>

  commit 090bc267ea1013bbb33778b343b4acd78b9c5d9b
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Thu Nov 12 08:43:33 2015 +0100

      usb: chipidea: usbmisc_imx: fix a possible NULL dereference

      of_match_device could return NULL, and so cause a NULL pointer
      dereference later. Renaming tmp_dev to of_id (like all others do) in the
      process.

      Reported-by: coverity (CID 1324135)
      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Peter Chen <peter.chen@xxxxxxxxxxxxx>

  commit 85da852df66e5e0d3aba761b0fece7c958ff0685
  Author: Li Jun <B47624@xxxxxxxxxxxxx>
  Date:   Fri Dec 12 09:11:42 2014 +0800

      usb: chipidea: otg: gadget module load and unload support

      This patch is to support load and unload gadget driver in full OTG mode.

      Signed-off-by: Li Jun <jun.li@xxxxxxxxxxxxx>
      Signed-off-by: Peter Chen <peter.chen@xxxxxxxxxxxxx>
      Tested-by: Jiada Wang <jiada_wang@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> #v4.0+

  commit 251b3c8b57481bcecd3f753108e36e7389ce12ac
  Author: Li Jun <jun.li@xxxxxxxxxxxxx>
  Date:   Tue Oct 13 18:23:31 2015 +0800

      usb: chipidea: debug: disable usb irq while role switch

      Since the ci->role will be set after the host role start is complete, 
there
      will be nobody cared irq during start host if usb irq enabled. This error
      can be reproduced on i.mx6 sololite EVK board by:
      1. disable otg id irq(IDIE) and disable all real otg properties of usbotg1
         in dts.
      2. boot up the board with ID cable and usb device connected.
      3. echo gadget > /sys/kernel/debug/ci_hdrc.0/role
      4. echo host > /sys/kernel/debug/ci_hdrc.0/role
      5. irq 212: nobody cared.

      Cc: <stable@xxxxxxxxxxxxxxx> # v3.10+
      Signed-off-by: Li Jun <jun.li@xxxxxxxxxxxxx>
      Signed-off-by: Peter Chen <peter.chen@xxxxxxxxxxxxx>

  commit facf47ee6b4d07d43c3bfd6f0762f1b28f64703a
  Author: Peter Chen <peter.chen@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 09:35:06 2015 +0800

      ARM: dts: imx27.dtsi: change the clock information for usb

      For imx27, it needs three clocks to let the controller work,
      the old code is wrong, and usbmisc has not included clock handling
      code any more. Without this patch, it will cause below data
      abort when accessing usbmisc registers.

      usbcore: registered new interface driver usb-storage
      Unhandled fault: external abort on non-linefetch (0x008) at 0xf4424600
      pgd = c0004000
      [f4424600] *pgd=10000452(bad)
      Internal error: : 8 [#1] PREEMPT ARM
      Modules linked in:
      CPU: 0 PID: 1 Comm: swapper Not tainted 4.1.0-next-20150701-dirty #3089
      Hardware name: Freescale i.MX27 (Device Tree Support)
      task: c7832b60 ti: c783e000 task.ti: c783e000
      PC is at usbmisc_imx27_init+0x4c/0xbc
      LR is at usbmisc_imx27_init+0x40/0xbc
      pc : [<c03cb5c0>]    lr : [<c03cb5b4>]    psr: 60000093
      sp : c783fe08  ip : 00000000  fp : 00000000
      r10: c0576434  r9 : 0000009c  r8 : c7a773a0
      r7 : 01000000  r6 : 60000013  r5 : c7a776f0  r4 : c7a773f0
      r3 : f4424600  r2 : 00000000  r1 : 00000001  r0 : 00000001
      Flags: nZCv  IRQs off  FIQs on  Mode SVC_32  ISA ARM  Segment kernel
      Control: 0005317f  Table: a0004000  DAC: 00000017
      Process swapper (pid: 1, stack limit = 0xc783e190)
      Stack: (0xc783fe08 to 0xc7840000)

      Signed-off-by: Peter Chen <peter.chen@xxxxxxxxxxxxx>
      Reported-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Tested-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> #v4.1+
      Acked-by: Shawn Guo <shawnguo@xxxxxxxxxx>

  commit ae3e57ae26cdcc85728bb566f999bcb9a7cc6954
  Author: Peter Chen <peter.chen@xxxxxxxxxxxxx>
  Date:   Wed Sep 16 09:40:51 2015 +0800

      usb: chipidea: imx: refine clock operations to adapt for all platforms

      Some i.mx platforms need three clocks to let controller work, but
      others only need one, refine clock operation to adapt for all
      platforms, it fixes a regression found at i.mx27.

      Signed-off-by: Peter Chen <peter.chen@xxxxxxxxxxxxx>
      Tested-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> #v4.1+

  commit e15bf88a44d1fcb685754b2868b1cd28927af3aa
  Merge: 2a49f02 092b1f0
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Wed Nov 18 06:56:48 2015 +0100

      Merge tag 'perf-urgent-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/urgent

      Pull perf/urgent fixes from Arnaldo Carvalho de Melo:

        - Do not change the key of an object in a rbtree, this time it was
          the one for DSOs lookup by its long_name, and the noticed symptom was
          with 'perf buildid-list --with-hits' (Adrian Hunter)

        - 'perf inject' is a pipe, events it doesn't touch should be passed
          on, PERF_RECORD_LOST wasn't, fix it (Adrian Hunter)

        - Make 'perf buildid-list' request event ordering, as it needs to
          first get the mmap events to be able to mark wich DSOs had hits
          (Adrian Hunter)

        - Fix memory leaks on failure in 'perf probe' (Masami Hiramatsu, Wang 
Nan)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 1ef0623371e0a39a476fb05e575089cf48178f5c
  Author: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
  Date:   Tue Nov 17 13:29:49 2015 -0200

      kernel-doc: Make it compatible with Perl versions below 5.12 again

      Changeset 4d73270192ec('scripts/kernel-doc: Replacing highlights
      hash by an array') broke compatibility of the kernel-doc script with
      older versions of perl by using "keys ARRAY" syntax with is available
      only on Perl 5.12 or newer, according with:
        http://perldoc.perl.org/functions/keys.html

      Restore backward compatibility by replacing "foreach my $k (keys ARRAY)"
      by a C-like variant: "for (my $k = 0; $k < !ARRAY; $k++)"

      Signed-off-by: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Signed-off-by: Jonathan Corbet <corbet@xxxxxxx>

  commit aa05cfa95f686be5d1485094402ebc7b03729e0e
  Merge: 8005c49 d134c48
  Author: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 17 14:47:58 2015 -0800

      Merge tag 'fixes-for-v4.4-rc2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/balbi/usb into usb-linus

      Felipe writes:

      usb: fixes for v4.4-rc2

      First round of fixes for this -rc cycle. We have the
      usual set of miscellaneous fixes. The important
      thing here is support for Intel Broxton SoC on dwc3,
      some fixes for Rockchip SoCs on dwc2 and a fix on
      dwc3 to let it report lower speeds than
      USB_SPEED_SUPER.

  commit 7f151f1d8abb7d5930b49d4796b463dca1673cb7
  Merge: a18ab2f e7523a4
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 17 13:52:59 2015 -0800

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

      Pull networking fixes from David Miller:

       1) Fix list tests in netfilter ingress support, from Florian Westphal.

       2) Fix reversal of input and output interfaces in ingress hook
          invocation, from Pablo Neira Ayuso.

       3) We have a use after free in r8169, caught by Dave Jones, fixed by
          Francois Romieu.

       4) Splice use-after-free fix in AF_UNIX frmo Hannes Frederic Sowa.

       5) Three ipv6 route handling bug fixes from Martin KaFai Lau:
          a) Don't create clone routes not managed by the fib6 tree
          b) Don't forget to check expiration of DST_NOCACHE routes.
          c) Handle rt->dst.from == NULL properly.

       6) Several AF_PACKET fixes wrt transport header setting and SKB
          protocol setting, from Daniel Borkmann.

       7) Fix thunder driver crash on shutdown, from Pavel Fedin.

       8) Several Mellanox driver fixes (max MTU calculations, use of correct
          DMA unmap in TX path, etc.) from Saeed Mahameed, Tariq Toukan, Doron
          Tsur, Achiad Shochat, Eran Ben Elisha, and Noa Osherovich.

       9) Several mv88e6060 DSA driver fixes (wrong bit definitions for
          certain registers, etc.) from Neil Armstrong.

      10) Make sure to disable preemption while updating per-cpu stats of ip
          tunnels, from Jason A.  Donenfeld.

      11) Various ARM64 bpf JIT fixes, from Yang Shi.

      12) Flush icache properly in ARM JITs, from Daniel Borkmann.

      13) Fix masking of RX and TX interrupts in ravb driver, from Masaru
          Nagai.

      14) Fix netdev feature propagation for devices not implementing
          ->ndo_set_features().  From Nikolay Aleksandrov.

      15) Big endian fix in vmxnet3 driver, from Shrikrishna Khare.

      16) RAW socket code increments incorrect SNMP counters, fix from Ben
          Cartwright-Cox.

      17) IPv6 multicast SNMP counters are bumped twice, fix from Neil Horman.

      18) Fix handling of VLAN headers on stacked devices when REORDER is
          disabled.  From Vlad Yasevich.

      19) Fix SKB leaks and use-after-free in ipvlan and macvlan drivers, from
          Sabrina Dubroca.

      * git://git.kernel.org/pub/scm/linux/kernel/git/davem/net: (83 commits)
        MAINTAINERS: Update Mellanox's Eth NIC driver entries
        net/core: revert "net: fix __netdev_update_features return.." and add 
comment
        af_unix: take receive queue lock while appending new skb
        rtnetlink: fix frame size warning in rtnl_fill_ifinfo
        net: use skb_clone to avoid alloc_pages failure.
        packet: Use PAGE_ALIGNED macro
        packet: Don't check frames_per_block against negative values
        net: phy: Use interrupts when available in NOLINK state
        phy: marvell: Add support for 88E1540 PHY
        arm64: bpf: make BPF prologue and epilogue align with ARM64 AAPCS
        macvlan: fix leak in macvlan_handle_frame
        ipvlan: fix use after free of skb
        ipvlan: fix leak in ipvlan_rcv_frame
        vlan: Do not put vlan headers back on bridge and macvlan ports
        vlan: Fix untag operations of stacked vlans with REORDER_HEADER off
        via-velocity: unconditionally drop frames with bad l2 length
        ipg: Remove ipg driver
        dl2k: Add support for IP1000A-based cards
        snmp: Remove duplicate OUTMCAST stat increment
        net: thunder: Check for driver data in nicvf_remove()
        ...

  commit bf893acc1675516fabf238a5ee3b52859c5687dc
  Author: Eric Anholt <eric@xxxxxxxxxx>
  Date:   Fri Oct 23 10:36:27 2015 +0100

      drm/vc4: Make sure that planes aren't scaled.

      We would scan out the memory around them if an upscale was attempted,
      and would just scan out incorrectly for downscaling.

      Signed-off-by: Eric Anholt <eric@xxxxxxxxxx>

  commit 36f4f69a092d766581f2442ddffea051e1ef464e
  Author: Eric Anholt <eric@xxxxxxxxxx>
  Date:   Fri Oct 23 10:24:11 2015 +0100

      drm/vc4: Fix some failure to track __iomem decorations on pointers.

      Caught by the kbuild test robot.

      v2: Fix the +i I dropped in the first version.

      Signed-off-by: Eric Anholt <eric@xxxxxxxxxx>

  commit 79513237da7ecc0981e7d962a784625b32cabfdc
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Nov 4 16:21:40 2015 +0300

      drm/vc4: checking for NULL instead of IS_ERR

      vc4_plane_init() returns an ERR_PTR on error, it doesn't return NULL.
      This was obviously intended because the next lines call
      PTR_ERR(primary_plane) already.

      Fixes: c8b75bca92cb ('Eric Anholt <eric@xxxxxxxxxx>')
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Eric Anholt <eric@xxxxxxxxxx>

  commit 2fa8e90433cdc2d9f09883f45fd2942dc042d6a6
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Fri Oct 23 07:38:00 2015 +0200

      drm/vc4: fix itnull.cocci warnings

      Connector cannot be null because it is a list entry, ie accessed at an
      offset from the positions of the list structure pointers themselves.

      Generated by: scripts/coccinelle/iterators/itnull.cocci

      Signed-off-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Julia Lawall <julia.lawall@xxxxxxx>
      Signed-off-by: Eric Anholt <eric@xxxxxxxxxx>

  commit e2ab3218f46bce3380189ba4ac2a8cbdb2ae6272
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Fri Oct 23 07:39:45 2015 +0200

      drm/vc4: fix platform_no_drv_owner.cocci warnings

      drivers/gpu/drm/vc4/vc4_drv.c:248:3-8: No need to set .owner here. The 
core will do it.

       Remove .owner field if calls are used which set it automatically

      Generated by: scripts/coccinelle/api/platform_no_drv_owner.cocci

      Signed-off-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Julia Lawall <julia.lawall@xxxxxxx>
      Signed-off-by: Eric Anholt <eric@xxxxxxxxxx>

  commit 91276ae2ea7d588cb70ed54fb0b00b732aa7ea04
  Author: kbuild test robot <fengguang.wu@xxxxxxxxx>
  Date:   Thu Oct 22 11:12:26 2015 +0800

      drm/vc4: vc4_plane_duplicate_state() can be static

      Signed-off-by: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Signed-off-by: Eric Anholt <eric@xxxxxxxxxx>

  commit e7523a497d48a9921983a80670f7a02dc4639d41
  Author: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
  Date:   Tue Nov 17 18:25:07 2015 +0200

      MAINTAINERS: Update Mellanox's Eth NIC driver entries

      Eugenia (Jenny) Emantayev is replacing Amir Vadai as the
      mlx4 Ethernet driver maintainer.

      Saeed Mahameed is assigned to maintain mlx5 Eth functionality.

      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 17b85d29e82cc3c874a497a8bc5764d6a2b043e2
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 17 15:49:06 2015 +0100

      net/core: revert "net: fix __netdev_update_features return.." and add 
comment

      This reverts commit 00ee59271777 ("net: fix __netdev_update_features 
return
      on ndo_set_features failure")
      and adds a comment explaining why it's okay to return a value other than
      0 upon error. Some drivers might actually change flags and return an
      error so it's better to fire a spurious notification rather than miss
      these.

      CC: MichaÅ? MirosÅ?aw <mirq-linux@xxxxxxxxxxxx>
      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a3a116e04cc6a94d595ead4e956ab1bc1d2f4746
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 17 15:10:59 2015 +0100

      af_unix: take receive queue lock while appending new skb

      While possibly in future we don't necessarily need to use
      sk_buff_head.lock this is a rather larger change, as it affects the
      af_unix fd garbage collector, diag and socket cleanups. This is too much
      for a stable patch.

      For the time being grab sk_buff_head.lock without disabling bh and irqs,
      so don't use locked skb_queue_tail.

      Fixes: 869e7c62486e ("net: af_unix: implement stream sendpage support")
      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Reported-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b22b941b2c253a20e1d000c671594c4f3f0a3858
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 17 14:16:52 2015 +0100

      rtnetlink: fix frame size warning in rtnl_fill_ifinfo

      Fix the following warning:

        CC      net/core/rtnetlink.o
      net/core/rtnetlink.c: In function â??rtnl_fill_ifinfoâ??:
      net/core/rtnetlink.c:1308:1: warning: the frame size of 2864 bytes is 
larger than 2048 bytes [-Wframe-larger-than=]
       }
       ^
      by splitting up the huge rtnl_fill_ifinfo into some smaller ones, so we
      don't have the huge frame allocations at the same time.

      Cc: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 19125c1a4fd873421698876f34a06dbe18d25f17
  Author: Martin Zhang <martinbj2008@xxxxxxxxx>
  Date:   Tue Nov 17 20:49:30 2015 +0800

      net: use skb_clone to avoid alloc_pages failure.

      1. new skb only need dst and ip address(v4 or v6).
      2. skb_copy may need high order pages, which is very rare on long running 
server.

      Signed-off-by: Junwei Zhang <linggao.zjw@xxxxxxxxxxxxxxx>
      Signed-off-by: Martin Zhang <martinbj2008@xxxxxxxxx>
      Acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 90836b67e2171f48be696bdd3c4006d1e6f031fc
  Author: Tobias Klauser <tklauser@xxxxxxxxxx>
  Date:   Tue Nov 17 10:40:21 2015 +0100

      packet: Use PAGE_ALIGNED macro

      Use PAGE_ALIGNED(...) instead of open-coding it.

      Signed-off-by: Tobias Klauser <tklauser@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4194b4914a824c21bcad9305d6180825f4dc1f5e
  Author: Tobias Klauser <tklauser@xxxxxxxxxx>
  Date:   Tue Nov 17 10:38:36 2015 +0100

      packet: Don't check frames_per_block against negative values

      rb->frames_per_block is an unsigned int, thus can never be negative.

      Also fix spacing in the calculation of frames_per_block.

      Signed-off-by: Tobias Klauser <tklauser@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 321beec5047af83db90c88114b7e664b156f49fe
  Author: Andrew Lunn <andrew@xxxxxxx>
  Date:   Mon Nov 16 23:36:46 2015 +0100

      net: phy: Use interrupts when available in NOLINK state

      The NOLINK state will poll the phy once a second to see if the link
      has come up. If the phy has an interrupt line, this polling can be
      skipped, since the phy should interrupt when the link returns.

      Signed-off-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 819ec8e1f349f73bdf65bf33a364538e59007a9a
  Author: Andrew Lunn <andrew@xxxxxxx>
  Date:   Mon Nov 16 23:34:41 2015 +0100

      phy: marvell: Add support for 88E1540 PHY

      The 88E1540 can be found embedded in the Marvell 88E6352 switch.  It
      is compatible with the 88E1510, so add support for it, using the
      88E1510 specific functions.

      Signed-off-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ec0738db8d7a9bd6653d9f9d81b201a519144d63
  Author: Yang Shi <yang.shi@xxxxxxxxxx>
  Date:   Mon Nov 16 14:35:35 2015 -0800

      arm64: bpf: make BPF prologue and epilogue align with ARM64 AAPCS

      Save and restore FP/LR in BPF prog prologue and epilogue, save SP to FP
      in prologue in order to get the correct stack backtrace.

      However, ARM64 JIT used FP (x29) as eBPF fp register, FP is subjected to
      change during function call so it may cause the BPF prog stack base 
address
      change too.

      Use x25 to replace FP as BPF stack base register (fp). Since x25 is callee
      saved register, so it will keep intact during function call.
      It is initialized in BPF prog prologue when BPF prog is started to run
      everytime. Save and restore x25/x26 in BPF prologue and epilogue to keep
      them intact for the outside of BPF. Actually, x26 is unnecessary, but SP
      requires 16 bytes alignment.

      So, the BPF stack layout looks like:

                                       high
               original A64_SP =>   0:+-----+ BPF prologue
                                      |FP/LR|
               current A64_FP =>  -16:+-----+
                                      | ... | callee saved registers
                                      +-----+
                                      |     | x25/x26
               BPF fp register => -80:+-----+
                                      |     |
                                      | ... | BPF prog stack
                                      |     |
                                      |     |
               current A64_SP =>      +-----+
                                      |     |
                                      | ... | Function call stack
                                      |     |
                                      +-----+
                                        low

      CC: Zi Shen Lim <zlim.lnx@xxxxxxxxx>
      CC: Xi Wang <xi.wang@xxxxxxxxx>
      Signed-off-by: Yang Shi <yang.shi@xxxxxxxxxx>
      Acked-by: Zi Shen Lim <zlim.lnx@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e639b8d8a7a728f0b05ef2df6cb6b45dc3d4e556
  Author: Sabrina Dubroca <sd@xxxxxxxxxxxxxxx>
  Date:   Mon Nov 16 22:54:20 2015 +0100

      macvlan: fix leak in macvlan_handle_frame

      Reset pskb in macvlan_handle_frame in case skb_share_check returned a
      clone.

      Fixes: 8a4eb5734e8d ("net: introduce rx_handler results and logic around 
that")
      Signed-off-by: Sabrina Dubroca <sd@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a534dc529853c69e94994aa47c1d80a03ce2c11d
  Author: Sabrina Dubroca <sd@xxxxxxxxxxxxxxx>
  Date:   Mon Nov 16 22:44:53 2015 +0100

      ipvlan: fix use after free of skb

      ipvlan_handle_frame is a rx_handler, and when it returns a value other
      than RX_HANDLER_CONSUMED (here, NET_RX_DROP aka RX_HANDLER_ANOTHER),
      __netif_receive_skb_core expects that the skb still exists and will
      process it further, but we just freed it.

      Fixes: 2ad7bf363841 ("ipvlan: Initial check-in of the IPVLAN driver.")
      Signed-off-by: Sabrina Dubroca <sd@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cf554ada0be7077906aa9a17faf151ff66e3cb8e
  Author: Sabrina Dubroca <sd@xxxxxxxxxxxxxxx>
  Date:   Mon Nov 16 22:34:26 2015 +0100

      ipvlan: fix leak in ipvlan_rcv_frame

      Pass a **skb to ipvlan_rcv_frame so that if skb_share_check returns a
      new skb, we actually use it during further processing.

      It's safe to ignore the new skb in the ipvlan_xmit_* functions, because
      they call ipvlan_rcv_frame with local == true, so that dev_forward_skb
      is called and always takes ownership of the skb.

      Fixes: 2ad7bf363841 ("ipvlan: Initial check-in of the IPVLAN driver.")
      Signed-off-by: Sabrina Dubroca <sd@xxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit eb3f8b42aaba19325eff7e99842ca36429a0a3b8
  Merge: 6c606fa 28f9ee2
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Tue Nov 17 14:38:36 2015 -0500

      Merge branch 'vlan-reorder'

      Vladislav Yasevich says:

      ====================
      Fix issues with vlans without REORDER_HEADER

      A while ago Phil Sutter brought up an issue with vlans without
      REORDER_HEADER and bridges.  The problem was that if a vlan
      without REORDER_HEADER was a port in the bridge, the bridge ended
      up forwarding corrupted packets that still contained the vlan header.
      The same issue exists for bridge mode macvlan/macvtap devices.

      An additional issue with vlans without REORDER_HEADER is that stacking
      them also doesn't work.  The reason here is that skb_reorder_vlan_header()
      function assumes that it on ETH_HLEN bytes deep into the packet.  That
      is not the case, when you a vlan without REORRDER_HEADER flag set.

      This series attempts to correct these 2 issues.

      1) To solve the stacked vlans problem, the patch simply use
      skb->mac_len as an offset to start copying mac addresses that
      is part of header reordering.

      2) To fix the issue with bridge/macvlan/macvtap, the second patch
      simply doesn't write the vlan header back to the packet if the
      vlan device is either a bridge or a macvlan port.  This ends up
      being the simplest and least performance intrussive solution.

      I've considered extending patch 2 to all stacked devices (essentially
      checked for the presense of rx_handler), but that feels like a broader
      restriction and _may_ break existing uses.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 28f9ee22bcdd84726dbf6267d0b58f254166b900
  Author: Vlad Yasevich <vyasevich@xxxxxxxxx>
  Date:   Mon Nov 16 15:43:45 2015 -0500

      vlan: Do not put vlan headers back on bridge and macvlan ports

      When a vlan is configured with REORDER_HEADER set to 0, the vlan
      header is put back into the packet and makes it appear that
      the vlan header is still there even after it's been processed.
      This posses a problem for bridge and macvlan ports.  The packets
      passed to those device may be forwarded and at the time of the
      forward, vlan headers end up being unexpectedly present.

      With the patch, we make sure that we do not put the vlan header
      back (when REORDER_HEADER is 0) if a bridge or macvlan has
      been configured on top of the vlan device.

      Signed-off-by: Vladislav Yasevich <vyasevic@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a6e18ff111701b4ff6947605bfbe9594ec42a6e8
  Author: Vlad Yasevich <vyasevich@xxxxxxxxx>
  Date:   Mon Nov 16 15:43:44 2015 -0500

      vlan: Fix untag operations of stacked vlans with REORDER_HEADER off

      When we have multiple stacked vlan devices all of which have
      turned off REORDER_HEADER flag, the untag operation does not
      locate the ethernet addresses correctly for nested vlans.
      The reason is that in case of REORDER_HEADER flag being off,
      the outer vlan headers are put back and the mac_len is adjusted
      to account for the presense of the header.  Then, the subsequent
      untag operation, for the next level vlan, always use VLAN_ETH_HLEN
      to locate the begining of the ethernet header and that ends up
      being a multiple of 4 bytes short of the actuall beginning
      of the mac header (the multiple depending on the how many vlan
      encapsulations ethere are).

      As a reslult, if there are multiple levles of vlan devices
      with REODER_HEADER being off, the recevied packets end up
      being dropped.

      To solve this, we use skb->mac_len as the offset.  The value
      is always set on receive path and starts out as a ETH_HLEN.
      The value is also updated when the vlan header manupations occur
      so we know it will be correct.

      Signed-off-by: Vladislav Yasevich <vyasevic@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6c606fa32c4272894248c1abbc15257fc04250be
  Author: Timo Teräs <timo.teras@xxxxxx>
  Date:   Mon Nov 16 14:36:32 2015 +0200

      via-velocity: unconditionally drop frames with bad l2 length

      By default the driver allowed incorrect frames to be received. What is
      worse the code does not handle very short frames correctly. The FCS
      length is unconditionally subtracted, and the underflow can cause
      skb_put to be called with large number after implicit cast to unsigned.
      And indeed, an skb_over_panic() was observed with via-velocity.

      This removes the module parameter as it does not work in it's
      current state, and should be implemented via NETIF_F_RXALL if needed.

      Suggested-by: Francois Romieu <romieu@xxxxxxxxxxxxx>
      Signed-off-by: Timo Teräs <timo.teras@xxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 43e43c9ea60a7a1831ec823773e924d2dadefd44
  Author: Junichi Nomura <j-nomura@xxxxxxxxxxxxx>
  Date:   Tue Nov 17 09:36:56 2015 +0000

      dm mpath: fix infinite recursion in ioctl when no paths and 
!queue_if_no_path

      In multipath_prepare_ioctl(),
        - pgpath is a path selected from available paths
        - m->queue_io is true if we cannot send a request immediately to
          paths, either because:
            * there is no available path
            * the path group needs activation (pg_init)
                - pg_init is not started
                - pg_init is still running
        - m->queue_if_no_path is true if the device is configured to queue
          I/O if there are no available paths

      If !pgpath && !m->queue_if_no_path, the handler should return -EIO.
      However in the course of refactoring the condition check has broken
      and returns success in that case.  Since bdev points to the dm device
      itself, dm_blk_ioctl() calls __blk_dev_driver_ioctl() for itself and
      recurses until crash.

      You could reproduce the problem like this:

        # dmsetup create mp --table '0 1024 multipath 0 0 0 0'
        # sg_inq /dev/mapper/mp
        <crash>
        [  172.648615] BUG: unable to handle kernel paging request at 
fffffffc81b10268
        [  172.662843] PGD 19dd067 PUD 0
        [  172.666269] Thread overran stack, or stack corrupted
        [  172.671808] Oops: 0000 [#1] SMP
        ...

      Fix the condition check with some clarifications.

      Fixes: e56f81e0b01e ("dm: refactor ioctl handling")
      Signed-off-by: Jun'ichi Nomura <j-nomura@xxxxxxxxxxxxx>
      Cc: Christoph Hellwig <hch@xxxxxx>
      Cc: Mike Snitzer <snitzer@xxxxxxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>

  commit 647a20d5cad7477033bc021ec9dd75edf4bbf9a0
  Author: Mike Snitzer <snitzer@xxxxxxxxxx>
  Date:   Tue Nov 17 14:11:34 2015 -0500

      dm: do not reuse dm_blk_ioctl block_device input as local variable

      (Ab)using the @bdev passed to dm_blk_ioctl() opens the potential for
      targets' .prepare_ioctl to fail if they go on to check the bdev for
      !NULL.

      Fixes: e56f81e0b01e ("dm: refactor ioctl handling")
      Reported-by: Junichi Nomura <j-nomura@xxxxxxxxxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>

  commit 5bbbfdf685657771fda05b926b28ca0f79163a28
  Author: Junichi Nomura <j-nomura@xxxxxxxxxxxxx>
  Date:   Tue Nov 17 09:39:26 2015 +0000

      dm: fix ioctl retry termination with signal

      dm-mpath retries ioctl, when no path is readily available and the device
      is configured to queue I/O in such a case. If you want to stop the retry
      before multipathd decides to turn off queueing mode, you could send
      signal for the process to exit from the loop.

      However the check of fatal signal has not carried along when commit
      6c182cd88d17 ("dm mpath: fix ioctl deadlock when no paths") moved the
      loop from dm-mpath to dm core. As a result, we can't terminate such
      a process in the retry loop.

      Easy reproducer of the situation is:

        # dmsetup create mp --table '0 1024 multipath 0 0 0 0'
        # dmsetup message mp 0 'queue_if_no_path'
        # sg_inq /dev/mapper/mp

      then you should be able to terminate sg_inq by pressing Ctrl+C.

      Fixes: 6c182cd88d17 ("dm mpath: fix ioctl deadlock when no paths")
      Signed-off-by: Jun'ichi Nomura <j-nomura@xxxxxxxxxxxxx>
      Cc: Hannes Reinecke <hare@xxxxxxx>
      Cc: Mikulas Patocka <mpatocka@xxxxxxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit a18ab2f6cb79eeccedea61b8c7bf71d24e087d42
  Merge: 864f83a e62d6e2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 17 10:11:08 2015 -0800

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

      Pull vfs fixes from Al Viro:
       "A fs-cache regression fix, and adding a warning about obnoxiou^W
        moderation of list given in MAINTAINERS"

      * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs:
        MAINTAINERS: linux-cachefs@xxxxxxxxxx is moderated for non-subscribers
        FS-Cache: Add missing initialization of ret in cachefiles_write_page()

  commit 864f83a1f65bc8614705fc7c053969bb09939215
  Merge: 8005c49 176155d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 17 09:40:05 2015 -0800

      Merge branch 'linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

      Pull crypto fix from Herbert Xu:
       "This fixes a bug in the qat driver where a user-space pointer is
        dereferenced"

      * 'linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:
        crypto: qat - don't use userspace pointer

  commit d134c48d889ddceadf4c990e6f3df16b816ed5d4
  Author: Douglas Gilbert <dgilbert@xxxxxxxxxxxx>
  Date:   Mon Nov 16 19:22:08 2015 +0100

      usb: gadget: atmel_usba_udc: Expose correct device speed

      Following changes that appeared in lk 4.0.0, the gadget udc driver for
      some ARM based Atmel SoCs (e.g. at91sam9x5 and sama5d3 families)
      incorrectly deduced full-speed USB link speed even when the hardware
      had negotiated a high-speed link. The fix is to make sure that the
      UDPHS Interrupt Enable Register value does not mask the SPEED bit
      in the Interrupt Status Register.

      For a mass storage gadget this problem lead to failures when the host
      had a USB 3 port with the xhci_hcd driver. If the host was a USB 2
      port using the ehci_hcd driver then the mass storage gadget worked
      (but probably at a lower speed than it should have).

      Signed-off-by: Douglas Gilbert <dgilbert@xxxxxxxxxxxx>
      Reviewed-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> #4.0+
      Fixes: 9870d895ad87 ("usb: atmel_usba_udc: Mask status with enabled irqs")
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 51676c8d6daac6dd11f768cb26db8d5b572f65b4
  Author: Bin Liu <b-liu@xxxxxx>
  Date:   Fri Nov 13 15:45:24 2015 -0600

      usb: musb: enable usb_dma parameter

      Change the permission of usb_dma parameter so it can
      be used for runtime debug without reboot.

      Signed-off-by: Bin Liu <b-liu@xxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 89d99aea94a5bf8eae530cd77df40904d382946c
  Author: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
  Date:   Thu Nov 12 08:45:52 2015 +0100

      usb: phy: phy-mxs-usb: fix a possible NULL dereference

      of_match_device could return NULL, and so cause a NULL pointer
      dereference later.

      Signed-off-by: LABBE Corentin <clabbe.montjoie@xxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit b9e51b2b1fda19143f48d182ed7a2943f21e1ae4
  Author: Ben McCauley <ben.mccauley@xxxxxxxxxx>
  Date:   Mon Nov 16 10:47:24 2015 -0600

      usb: dwc3: gadget: let us set lower max_speed

      In some SoCs, dwc3 is implemented as a USB2.0 only
      core, meaning that it can't ever achieve SuperSpeed.

      Currect driver always sets gadget.max_speed to
      USB_SPEED_SUPER unconditionally. This can causes
      issues to some Host stacks where the host will issue
      a GetBOS() request and we will reply with a BOS
      containing Superspeed Capability Descriptor.

      At least Windows seems to be upset by this fact and
      prints a warning that we should connect $this device
      to another port.

      [ balbi@xxxxxx : rewrote entire commit, including
      source code comment to make a lot clearer what the
      problem is ]

      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Ben McCauley <ben.mccauley@xxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 68fe05e2a45181ce02ab2698930b37f20487bd24
  Author: Bin Liu <b-liu@xxxxxx>
  Date:   Fri Nov 6 12:08:56 2015 -0600

      usb: musb: fix tx fifo flush handling

      Here are a few changes in musb_h_tx_flush_fifo().

      - It has been observed that sometimes (if not always) musb is unable
        to flush tx fifo during urb dequeue when disconnect a device. But
        it seems to be harmless, since the tx fifo flush is done again in
        musb_ep_program() when re-use the hw_ep.

        But the WARN() floods the console in the case when multiple tx urbs
        are queued, so change it to dev_WARN_ONCE().

      - applications could queue up many tx urbs, then the 1ms delay could
        causes minutes of delay in device disconnect. So remove it to get
        better user experience. The 1ms delay does not help the flushing
        anyway.

      - cleanup the debug code - related to lastcsr.

      ----
      Note: The tx fifo flush issue has been observed during device disconnect
      on AM335x.

      To reproduce the issue, ensure tx urb(s) are queued when unplug the usb
      device which is connected to AM335x usb host port.

      I found using a usb-ethernet device and running iperf (client on AM335x)
      has very high chance to trigger the problem.

      Better to turn on dev_dbg() in musb_cleanup_urb() with CPPI enabled to
      see the issue when aborting the tx channel.

      Signed-off-by: Bin Liu <b-liu@xxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 5e216d54b4862611c663e1e3e8ca1db1930ef948
  Author: Peter Chen <peter.chen@xxxxxxxxxxxxx>
  Date:   Tue Nov 3 15:57:38 2015 +0800

      usb: gadget: f_loopback: fix the warning during the enumeration

      The current code tries to allocate memory with GFP_KERNEL at
      interrupt context, it would show below warning during the enumeration
      when I test it with chipidea hardware, change GFP flag as GFP_ATOMIC
      can fix this issue.

      [   40.438237] zero gadget: high-speed config #2: loopback
      [   40.444924] ------------[ cut here ]------------
      [   40.449609] WARNING: CPU: 0 PID: 0 at kernel/locking/lockdep.c:2755 
lockdep_trace_alloc+0x108/0x128()
      [   40.461715] DEBUG_LOCKS_WARN_ON(irqs_disabled_flags(flags))
      [   40.467130] Modules linked in:
      [   40.470216]  usb_f_ss_lb g_zero libcomposite evbug
      [   40.473822] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 
4.3.0-rc5-00168-gb730aaf #604
      [   40.481496] Hardware name: Freescale i.MX6 SoloX (Device Tree)
      [   40.487345] Backtrace:
      [   40.489857] [<80014e94>] (dump_backtrace) from [<80015088>] 
(show_stack+0x18/0x1c)
      [   40.497445]  r6:80b67a80 r5:00000000 r4:00000000 r3:00000000
      [   40.503234] [<80015070>] (show_stack) from [<802e27b4>] 
(dump_stack+0x8c/0xa4)
      [   40.510503] [<802e2728>] (dump_stack) from [<8002cfe8>] 
(warn_slowpath_common+0x80/0xbc)
      [   40.518612]  r6:8007510c r5:00000009 r4:80b49c88 r3:00000001
      [   40.524396] [<8002cf68>] (warn_slowpath_common) from [<8002d05c>] 
(warn_slowpath_fmt+0x38/0x40)
      [   40.533109]  r8:bcfdef80 r7:bdb705cc r6:000080d0 r5:be001e80 
r4:809cc278
      [   40.539965] [<8002d028>] (warn_slowpath_fmt) from [<8007510c>] 
(lockdep_trace_alloc+0x108/0x128)
      [   40.548766]  r3:809d0128 r2:809cc278
      [   40.552401]  r4:600b0193
      [   40.554990] [<80075004>] (lockdep_trace_alloc) from [<801093d4>] 
(kmem_cache_alloc+0x28/0x15c)
      [   40.563618]  r4:000080d0 r3:80b4aa8c
      [   40.567270] [<801093ac>] (kmem_cache_alloc) from [<804d95e4>] 
(ep_alloc_request+0x58/0x68)
      [   40.575550]  r10:7f01f104 r9:00000001 r8:bcfdef80 r7:bdb705cc 
r6:bc178700 r5:00000000
      [   40.583512]  r4:bcfdef80 r3:813c0a38
      [   40.587183] [<804d958c>] (ep_alloc_request) from [<7f01f7ec>] 
(loopback_set_alt+0x114/0x21c [usb_f_ss_lb])
      [   40.596929] [<7f01f6d8>] (loopback_set_alt [usb_f_ss_lb]) from 
[<7f006910>] (composite_setup+0xbd0/0x17e8 [libcomposite])
      [   40.607902]  r10:bd3a2c0c r9:00000000 r8:bcfdef80 r7:bc178700 
r6:bdb702d0 r5:bcfdefdc
      [   40.615866]  r4:7f0199b4 r3:00000002
      [   40.619542] [<7f005d40>] (composite_setup [libcomposite]) from 
[<804dae88>] (udc_irq+0x784/0xd1c)
      [   40.628431]  r10:80bb5619 r9:c0876140 r8:00012001 r7:bdb71010 
r6:bdb70568 r5:00010001
      [   40.636392]  r4:bdb70014
      [   40.638985] [<804da704>] (udc_irq) from [<804d64f8>] 
(ci_irq+0x5c/0x118)
      [   40.645702]  r10:80bb5619 r9:be11e000 r8:00000117 r7:00000000 
r6:bdb71010 r5:be11e060
      [   40.653666]  r4:bdb70010
      [   40.656261] [<804d649c>] (ci_irq) from [<8007f638>] 
(handle_irq_event_percpu+0x7c/0x13c)
      [   40.664367]  r6:00000000 r5:be11e060 r4:bdb05cc0 r3:804d649c
      [   40.670149] [<8007f5bc>] (handle_irq_event_percpu) from [<8007f740>] 
(handle_irq_event+0x48/0x6c)
      [   40.679036]  r10:00000000 r9:be008000 r8:00000001 r7:00000000 
r6:bdb05cc0 r5:be11e060
      [   40.686998]  r4:be11e000
      [   40.689581] [<8007f6f8>] (handle_irq_event) from [<80082850>] 
(handle_fasteoi_irq+0xd4/0x1b0)
      [   40.698120]  r6:80b56a30 r5:be11e060 r4:be11e000 r3:00000000
      [   40.703898] [<8008277c>] (handle_fasteoi_irq) from [<8007ec04>] 
(generic_handle_irq+0x28/0x3c)
      [   40.712524]  r7:00000000 r6:80b4aaf4 r5:00000117 r4:80b445fc
      [   40.718304] [<8007ebdc>] (generic_handle_irq) from [<8007ef20>] 
(__handle_domain_irq+0x6c/0xe8)
      [   40.727033] [<8007eeb4>] (__handle_domain_irq) from [<800095d4>] 
(gic_handle_irq+0x48/0x94)
      [   40.735402]  r9:c080f100 r8:80b4ac6c r7:c080e100 r6:80b67d40 
r5:80b49f00 r4:c080e10c
      [   40.743290] [<8000958c>] (gic_handle_irq) from [<80015d38>] 
(__irq_svc+0x58/0x78)
      [   40.750791] Exception stack(0x80b49f00 to 0x80b49f48)
      [   40.755873] 9f00: 00000001 00000001 00000000 80024320 80b48000 
80b4a9d0 80b4a984 80b433e4
      [   40.764078] 9f20: 00000001 807f4680 00000000 80b49f5c 80b49f20 
80b49f50 80071ca4 800113fc
      [   40.772272] 9f40: 200b0013 ffffffff
      [   40.775776]  r9:807f4680 r8:00000001 r7:80b49f34 r6:ffffffff 
r5:200b0013 r4:800113fc
      [   40.783677] [<800113d4>] (arch_cpu_idle) from [<8006c5bc>] 
(default_idle_call+0x28/0x38)
      [   40.791798] [<8006c594>] (default_idle_call) from [<8006c6dc>] 
(cpu_startup_entry+0x110/0x1b0)
      [   40.800445] [<8006c5cc>] (cpu_startup_entry) from [<807e95dc>] 
(rest_init+0x12c/0x168)
      [   40.808376]  r7:80b4a8c0 r3:807f4b7c
      [   40.812030] [<807e94b0>] (rest_init) from [<80ad7cc0>] 
(start_kernel+0x360/0x3d4)
      [   40.819528]  r5:80bcb000 r4:80bcb050
      [   40.823171] [<80ad7960>] (start_kernel) from [<8000807c>] (0x8000807c)

      It fixes commit 91c42b0da8e3 ("usb: gadget: loopback: Fix looping back
      logic implementation").

      Cc: <stable@xxxxxxxxxxxxxxx> # v3.18+
      Signed-off-by: Peter Chen <peter.chen@xxxxxxxxxxxxx>
      Reviewed-by: Krzysztof Opasiak <k.opasiak@xxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 1fb7f12d5bec1b0a699c85d724bd5184a01fa2dd
  Author: Douglas Anderson <dianders@xxxxxxxxxxxx>
  Date:   Thu Oct 22 13:05:03 2015 -0700

      usb: dwc2: host: Fix remote wakeup when not in DWC2_L2

      In commit 734643dfbdde ("usb: dwc2: host: add flag to reflect bus
      state") we changed dwc2_port_suspend() not to set the lx_state
      anymore (instead it sets the new bus_suspended variable).  This
      introduced a bug where we would fail to detect device insertions if:

      1. Plug empty hub into dwc2
      2. Plug USB flash drive into the empty hub.
      3. Wait a few seconds
      4. Unplug USB flash drive
      5. Less than 2 seconds after step 4, plug the USB flash drive in again.

      The dwc2_hcd_rem_wakeup() function should have been changed to look at
      the new bus_suspended variable.

      Let's fix it.  Since commit b46146d59fda ("usb: dwc2: host: resume root
      hub on remote wakeup") talks about needing the root hub resumed if the
      bus was suspended, we'll include it in our test.

      It appears that the "port_l1_change" should only be set to 1 if we were
      in DWC2_L1 (the driver currently never sets this), so we'll update the
      former "else" case based on this test.

      Fixes: 734643dfbdde ("usb: dwc2: host: add flag to reflect bus state")
      Acked-by: John Youn <johnyoun@xxxxxxxxxxxx>
      Tested-by: Gregory Herrero <gregory.herrero@xxxxxxxxx>
      Reviewed-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Signed-off-by: Douglas Anderson <dianders@xxxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit f16593034a30bcbef8f63c37d0f2b9e1a0902c2d
  Author: Douglas Anderson <dianders@xxxxxxxxxxxx>
  Date:   Tue Oct 20 16:33:53 2015 -0700

      usb: dwc2: host: Fix ahbcfg for rk3066

      The comment for ahbcfg for rk3066 parameters (also used for rk3288)
      claimed that ahbcfg was INCR16, but it wasn't.  Since the bits weren't
      shifted properly, the 0x7 ended up being masked and we ended up
      programming 0x3 for the HBstLen.  Let's set it to INCR16 properly.

      As per Wu Liang Feng at Rockchip this may increase transmission
      efficiency.  I did blackbox tests with writing 0s to a USB-based SD
      reader (forcefully capping CPU Freq to try to measure efficiency):
        cd /sys/devices/system/cpu/cpu0/cpufreq
        echo userspace > scaling_governor
        echo 126000 > scaling_setspeed
        for i in $(seq 10); do
          dd if=/dev/zero of=/dev/sdb bs=1M count=750
        done

      With the above tests I found that speeds went from ~15MB/s to ~18MB/s.
      Note that most other tests I did (including reading from the same USB
      reader) didn't show any difference in performance.

      Tested-by: Heiko Stuebner <heiko@xxxxxxxxx>
      Acked-by: John Youn <johnyoun@xxxxxxxxxxxx>
      Reviewed-by: Liangfeng Wu <wulf@xxxxxxxxxxxxxx>
      Signed-off-by: Douglas Anderson <dianders@xxxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit de818bd4522c40ea02a81b387d2fa86f989c9623
  Author: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
  Date:   Tue Nov 17 11:50:51 2015 +0000

      arm64: kernel: pause/unpause function graph tracer in cpu_suspend()

      The function graph tracer adds instrumentation that is required to trace
      both entry and exit of a function. In particular the function graph
      tracer updates the "return address" of a function in order to insert
      a trace callback on function exit.

      Kernel power management functions like cpu_suspend() are called
      upon power down entry with functions called "finishers" that are in turn
      called to trigger the power down sequence but they may not return to the
      kernel through the normal return path.

      When the core resumes from low-power it returns to the cpu_suspend()
      function through the cpu_resume path, which leaves the trace stack frame
      set-up by the function tracer in an incosistent state upon return to the
      kernel when tracing is enabled.

      This patch fixes the issue by pausing/resuming the function graph
      tracer on the thread executing cpu_suspend() (ie the function call that
      subsequently triggers the "suspend finishers"), so that the function graph
      tracer state is kept consistent across functions that enter power down
      states and never return by effectively disabling graph tracer while they
      are executing.

      Fixes: 819e50e25d0c ("arm64: Add ftrace support")
      Signed-off-by: Lorenzo Pieralisi <lorenzo.pieralisi@xxxxxxx>
      Reported-by: Catalin Marinas <catalin.marinas@xxxxxxx>
      Reported-by: AKASHI Takahiro <takahiro.akashi@xxxxxxxxxx>
      Suggested-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Acked-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Will Deacon <will.deacon@xxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 3.16+
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 76dc3769d7c3cdcfa7c4c7768a7cb87cd91af12f
  Author: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
  Date:   Wed Nov 11 19:11:28 2015 +0200

      drm/i915: Don't clobber the addfb2 ioctl params

      We try to convert the old way of of specifying fb tiling (obj->tiling)
      into the new fb modifiers. We store the result in the passed in mode_cmd
      structure. But that structure comes directly from the addfb2 ioctl, and
      gets copied back out to userspace, which means we're clobbering the
      modifiers that the user provided (all 0 since the DRM_MODE_FB_MODIFIERS
      flag wasn't even set by the user). Hence if the user reuses the struct
      for another addfb2, the ioctl will be rejected since it's now asking for
      some modifiers w/o the flag set.

      Fix the problem by making a copy of the user provided structure. We can
      play any games we want with the copy.

      IGT-Version: 1.12-git (x86_64) (Linux: 4.4.0-rc1-stereo+ x86_64)
      ...
      Subtest basic-X-tiled: SUCCESS (0.001s)
      Test assertion failure function pitch_tests, file kms_addfb_basic.c:167:
      Failed assertion: drmIoctl(fd, DRM_IOCTL_MODE_ADDFB2, &f) == 0
      Last errno: 22, Invalid argument
      Stack trace:
        #0 [__igt_fail_assert+0x101]
        #1 [pitch_tests+0x619]
        #2 [__real_main426+0x2f]
        #3 [main+0x23]
        #4 [__libc_start_main+0xf0]
        #5 [_start+0x29]
        #6 [<unknown>+0x29]
        Subtest framebuffer-vs-set-tiling failed.
        **** DEBUG ****
        Test assertion failure function pitch_tests, file kms_addfb_basic.c:167:
        Failed assertion: drmIoctl(fd, DRM_IOCTL_MODE_ADDFB2, &f) == 0
        Last errno: 22, Invalid argument
        ****  END  ****
        Subtest framebuffer-vs-set-tiling: FAIL (0.003s)
        ...

      IGT-Version: 1.12-git (x86_64) (Linux: 4.4.0-rc1-stereo+ x86_64)
      Subtest framebuffer-vs-set-tiling: SUCCESS (0.000s)

      Cc: stable@xxxxxxxxxxxxxxx # v4.1+
      Cc: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Cc: Tvrtko Ursulin <tvrtko.ursulin@xxxxxxxxx>
      Fixes: 2a80eada326f ("drm/i915: Add fb format modifier support")
      Testcase: igt/kms_addfb_basic/clobbered-modifier
      Signed-off-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>
      Link: 
http://patchwork.freedesktop.org/patch/msgid/1447261890-3960-1-git-send-email-ville.syrjala@xxxxxxxxxxxxxxx

  commit 83926117273cd6d9ffa1b5ff0cc566ad38648b70
  Author: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
  Date:   Mon Nov 16 17:02:34 2015 +0200

      drm: Fix primary plane size for stereo doubled modes for legacy setcrtc

      Properly double the hdisplay/vdisplay timings that we use as the primary
      plane size with stereo doubled modes. Otherwise the modeset gets
      rejected on machines where the primary plane must be fullscreen, and on
      the rest only the first eye would get a visible plane.

      Cc: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx #v3.19+
      Fixes: 042652ed9599 ("drm/atomic-helper: implementatations for legacy 
interfaces")
      Signed-off-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      Link: 
http://patchwork.freedesktop.org/patch/msgid/1447686157-29607-1-git-send-email-ville.syrjala@xxxxxxxxxxxxxxx
      Testcase: igt/kms_3d
      Signed-off-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit ba8af3e592f7175b5f9a92d2cfcc00b82097d1be
  Author: Maarten Lankhorst <maarten@xxxxxxxxxxxxxx>
  Date:   Mon Nov 16 12:49:14 2015 +0100

      drm/i915: Clear intel_crtc->atomic before updating it.

      If an atomic update fails intel_crtc->atomic may have have some values 
left
      from the last atomic check. One example is atomic->wait_for_vblank,
      which results in spurious errors in kms_flip.

      [ 1551.892708] ------------[ cut here ]------------
      [ 1551.892721] WARNING: CPU: 3 PID: 4179 at 
../drivers/gpu/drm/drm_irq.c:1199 drm_wait_one_vblank+0x197/0x1a0 [drm]()
      [ 1551.892722] vblank not available on crtc 2, ret=-22
      [ 1551.892751] Modules linked in: snd_hda_intel i915 drm_kms_helper drm
      intel_gtt i2c_algo_bit cfbfillrect syscopyarea cfbimgblt sysfillrect
      sysimgblt fb_sys_fops cfbcopyarea agpgart cfg80211 binfmt_misc
      snd_hda_codec_hdmi intel_rapl iosf_mbi x86_pkg_temp_thermal coretemp
      kvm_intel snd_hda_codec_realtek kvm snd_hda_codec_generic iTCO_wdt
      aesni_intel aes_x86_64 glue_helper lrw snd_hda_codec gf128mul
      ablk_helper cryptd snd_hwdep psmouse snd_hda_core pcspkr snd_pcm
      snd_timer snd lpc_ich i2c_i801 mfd_core soundcore wmi evdev [last
      unloaded: drm]
      [ 1551.892753] CPU: 3 PID: 4179 Comm: kms_pipe_crc_ba Tainted: G     U  W 
      4.3.0-reg+ #6
      [ 1551.892754] Hardware name:                  /DZ77BH-55K, BIOS 
BHZ7710H.86A.0100.2013.0517.0942 05/17/2013
      [ 1551.892758]  ffffffffa03128d8 ffff8800cec73890 ffffffff812c0f3c 
ffff8800cec738d8
      [ 1551.892760]  ffff8800cec738c8 ffffffff8104ff36 ffff880116ae2290 
0000000000000002
      [ 1551.892762]  ffff8800d39fcda0 ffff8800d038b4d0 ffff8800d42b5550 
ffff8800cec73928
      [ 1551.892763] Call Trace:
      [ 1551.892768]  [<ffffffff812c0f3c>] dump_stack+0x4e/0x82
      [ 1551.892771]  [<ffffffff8104ff36>] warn_slowpath_common+0x86/0xc0
      [ 1551.892773]  [<ffffffff8104ffbc>] warn_slowpath_fmt+0x4c/0x50
      [ 1551.892781]  [<ffffffffa02e6708>] ? drm_vblank_get+0x78/0xd0 [drm]
      [ 1551.892787]  [<ffffffffa02e6d47>] drm_wait_one_vblank+0x197/0x1a0 [drm]
      [ 1551.892813]  [<ffffffffa03d052f>] intel_post_plane_update+0xef/0x120 
[i915]
      [ 1551.892832]  [<ffffffffa03d11d2>] intel_atomic_commit+0x4c2/0x1600 
[i915]
      [ 1551.892862]  [<ffffffffa02ff0c7>] ? drm_atomic_check_only+0x147/0x5e0 
[drm]
      [ 1551.892872]  [<ffffffffa02feeb7>] ? 
drm_atomic_add_affected_connectors+0x27/0xf0 [drm]
      [ 1551.892881]  [<ffffffffa02ff597>] drm_atomic_commit+0x37/0x60 [drm]
      [ 1551.892887]  [<ffffffffa034301a>] restore_fbdev_mode+0x28a/0x2c0 
[drm_kms_helper]
      [ 1551.892895]  [<ffffffffa0345253>] 
drm_fb_helper_restore_fbdev_mode_unlocked+0x33/0x80 [drm_kms_helper]
      [ 1551.892900]  [<ffffffffa03452cd>] drm_fb_helper_set_par+0x2d/0x50 
[drm_kms_helper]
      [ 1551.892920]  [<ffffffffa03e7a9a>] intel_fbdev_set_par+0x1a/0x60 [i915]
      [ 1551.892923]  [<ffffffff8131a5a7>] fb_set_var+0x1a7/0x3f0
      [ 1551.892927]  [<ffffffff8109732f>] ? 
trace_hardirqs_on_caller+0x12f/0x1c0
      [ 1551.892931]  [<ffffffff81314f32>] fbcon_blank+0x212/0x2f0
      [ 1551.892935]  [<ffffffff81373f4a>] do_unblank_screen+0xba/0x1d0
      [ 1551.892937]  [<ffffffff8136b725>] vt_ioctl+0x13d5/0x1450
      [ 1551.892940]  [<ffffffff8107cdd1>] ? preempt_count_sub+0x41/0x50
      [ 1551.892943]  [<ffffffff8135d8a3>] tty_ioctl+0x423/0xe30
      [ 1551.892947]  [<ffffffff8119f721>] do_vfs_ioctl+0x301/0x560
      [ 1551.892949]  [<ffffffff8119b1e3>] ? putname+0x53/0x60
      [ 1551.892952]  [<ffffffff811ab376>] ? __fget_light+0x66/0x90
      [ 1551.892955]  [<ffffffff8119f9f9>] SyS_ioctl+0x79/0x90
      [ 1551.892958]  [<ffffffff81552e97>] entry_SYSCALL_64_fastpath+0x12/0x6f
      [ 1551.892961] ---[ end trace 3e764d4b6628c91c ]---

      Testcase: kms_flip
      Reported-and-tested-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx #v4.3
      Signed-off-by: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Reviewed-by: Daniel Stone <daniels@xxxxxxxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>
      Link: 
http://patchwork.freedesktop.org/patch/msgid/5649C2BA.6080300@xxxxxxxxxxxxxx

  commit 1c7d4dd46ee048afe19e1294634df6fa66862519
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Mon Nov 16 19:13:28 2015 +0000

      irqchip/gic: Add save/restore of the active state

      When using EOImode==1, we may mark interrupts as being forwarded
      to a virtual machine. In that case, the interrupt is left active
      while being passed to the VM.

      If we suspend the system before the VM has deactivated the interrupt,
      the active state will be lost (which may be very annoying, as this
      may result in spurious interrupts and a confused guest).

      To avoid this, save and restore the active state together with the
      rest of the GIC registers.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Russell King <linux@xxxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1447701208-18150-5-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 92eda4ad4371225d6ccf9cded74315547e9a3153
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Mon Nov 16 19:13:27 2015 +0000

      irqchip/gic: Clear enable bits before restoring them

      When restoring the GIC state (after a suspend/resume cycle,
      for example), the driver directly writes the 'enabled' state
      it has saved by accessing GICD_ISENABLERn, which performs
      an OR operation between the value present in the register
      and the value we write.

      If whatever code that has run before we reentered the kernel
      has enabled an interrupt that was previously disabled, we won't
      restore that disabled state.

      Making sure we first clear the register (by writting to
      GICD_ICENABLERn) before restoring the enabled state.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Russell King <linux@xxxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1447701208-18150-4-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 0eece2b22849c90b730815c893425a36b9d10fd5
  Author: Marc Zyngier <marc.zyngier@xxxxxxx>
  Date:   Mon Nov 16 19:13:26 2015 +0000

      irqchip/gic: Make sure all interrupts are deactivated at boot

      When booting a GIC/GICv3 based system, we have no idea what
      state the firmware (or previous kernel in the case of kexec)
      has left the GIC, and some interrupts may still be active.

      In order to garantee that we have a clean state, make sure
      the active bits are cleared at init time.

      Signed-off-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Russell King <linux@xxxxxxxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1447701208-18150-3-git-send-email-marc.zyngier@xxxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit adc235aff6fcf5ae4d8dc00faf30a07632b9725b
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Nov 16 17:32:15 2015 +0100

      arm64: do not include ptrace.h from compat.h

      including ptrace.h brings a definition of BITS_PER_PAGE into device
      drivers and cause a build warning in allmodconfig builds:

      drivers/block/drbd/drbd_bitmap.c:482:0: warning: "BITS_PER_PAGE" redefined
       #define BITS_PER_PAGE  (1UL << (PAGE_SHIFT + 3))

      This uses a slightly different way to express current_pt_regs()
      that avoids the use of the header and gets away with the already
      included asm/ptrace.h.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 1dccb598df549d892b6450c261da54cdd7af44b4
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Nov 16 17:25:48 2015 +0100

      arm64: simplify dma_get_ops

      Including linux/acpi.h from asm/dma-mapping.h causes tons of compile-time
      warnings, e.g.

       drivers/isdn/mISDN/dsp_ecdis.h:43:0: warning: "FALSE" redefined
       drivers/isdn/mISDN/dsp_ecdis.h:44:0: warning: "TRUE" redefined
       drivers/net/fddi/skfp/h/targetos.h:62:0: warning: "TRUE" redefined
       drivers/net/fddi/skfp/h/targetos.h:63:0: warning: "FALSE" redefined

      However, it looks like the dependency should not even there as
      I do not see why __generic_dma_ops() cares about whether we have
      an ACPI based system or not.

      The current behavior is to fall back to the global dma_ops when
      a device has not set its own dma_ops, but only for DT based systems.
      This seems dangerous, as a random device might have different
      requirements regarding IOMMU or coherency, so we should really
      never have that fallback and just forbid DMA when we have not
      initialized DMA for a device.

      This removes the global dma_ops variable and the special-casing
      for ACPI, and just returns the dma ops that got set for the
      device, or the dummy_dma_ops if none were present.

      The original code has apparently been copied from arm32 where we
      rely on it for ISA devices things like the floppy controller, but
      we should have no such devices on ARM64.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      [catalin.marinas@xxxxxxx: removed acpi_disabled check in 
arch_setup_dma_ops()]
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 4fee9f364b9b99f76732f2a6fd6df679a237fa74
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Mon Nov 16 11:18:14 2015 +0100

      arm64: mm: use correct mapping granularity under DEBUG_RODATA

      When booting a 64k pages kernel that is built with CONFIG_DEBUG_RODATA
      and resides at an offset that is not a multiple of 512 MB, the rounding
      that occurs in __map_memblock() and fixup_executable() results in
      incorrect regions being mapped.

      The following snippet from /sys/kernel/debug/kernel_page_tables shows
      how, when the kernel is loaded 2 MB above the base of DRAM at 0x40000000,
      the first 2 MB of memory (which may be inaccessible from non-secure EL1
      or just reserved by the firmware) is inadvertently mapped into the end of
      the module region.

        ---[ Modules start ]---
        0xfffffdffffe00000-0xfffffe0000000000     2M RW NX ... UXN MEM/NORMAL
        ---[ Modules end ]---
        ---[ Kernel Mapping ]---
        0xfffffe0000000000-0xfffffe0000090000   576K RW NX ... UXN MEM/NORMAL
        0xfffffe0000090000-0xfffffe0000200000  1472K ro x  ... UXN MEM/NORMAL
        0xfffffe0000200000-0xfffffe0000800000     6M ro x  ... UXN MEM/NORMAL
        0xfffffe0000800000-0xfffffe0000810000    64K ro x  ... UXN MEM/NORMAL
        0xfffffe0000810000-0xfffffe0000a00000  1984K RW NX ... UXN MEM/NORMAL
        0xfffffe0000a00000-0xfffffe00ffe00000  4084M RW NX ... UXN MEM/NORMAL

      The same issue is likely to occur on 16k pages kernels whose load
      address is not a multiple of 32 MB (i.e., SECTION_SIZE). So round to
      SWAPPER_BLOCK_SIZE instead of SECTION_SIZE.

      Fixes: da141706aea5 ("arm64: add better page protections to arm64")
      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Acked-by: Mark Rutland <mark.rutland@xxxxxxx>
      Acked-by: Laura Abbott <labbott@xxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 4.0+
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 07d3bad6c1210bd21e85d084807ef4ee4ac43a78
  Author: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
  Date:   Wed Nov 11 11:29:11 2015 +0100

      drm/core: Fix old_fb handling in pan_display_atomic.

      Don't touch plane->old_fb/fb without having the right locks held.

      Signed-off-by: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>
      Link: 
http://patchwork.freedesktop.org/patch/msgid/1447237751-9663-6-git-send-email-maarten.lankhorst@xxxxxxxxxx

  commit f72c6b33edda439acff81a0da612f2bcd1f46f35
  Author: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
  Date:   Wed Nov 11 11:29:10 2015 +0100

      drm/core: Fix old_fb handling in restore_fbdev_mode_atomic.

      Don't touch plane->old_fb/fb without having the right locks held.

      Signed-off-by: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>
      Link: 
http://patchwork.freedesktop.org/patch/msgid/1447237751-9663-5-git-send-email-maarten.lankhorst@xxxxxxxxxx

  commit 0f45c26fc302c02b0576db37d4849baa53a2bb41
  Author: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
  Date:   Wed Nov 11 11:29:09 2015 +0100

      drm/atomic: add a drm_atomic_clean_old_fb helper.

      This is useful for all the boilerplate code about cleaning old_fb.

      Signed-off-by: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>
      Link: 
http://patchwork.freedesktop.org/patch/msgid/1447237751-9663-4-git-send-email-maarten.lankhorst@xxxxxxxxxx

  commit 4572372847680ee04f184df916d5cf007c94ff7e
  Author: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
  Date:   Wed Nov 11 11:29:08 2015 +0100

      drm/core: Fix old_fb handling in drm_mode_atomic_ioctl.

      plane_mask should be cleared inside the retry loop, because it gets
      reset on every retry. Without this fix the plane->fb refcounting might
      get out of sync on retries, resulting in either leaked memory or
      use-after-free.

      Signed-off-by: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx #v4.3
      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>
      Link: 
http://patchwork.freedesktop.org/patch/msgid/1447237751-9663-3-git-send-email-maarten.lankhorst@xxxxxxxxxx

  commit 24e79d0ddc416184594aa8193023c15d85ab15db
  Author: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
  Date:   Wed Nov 11 11:29:07 2015 +0100

      drm/core: Set legacy_cursor_update in drm_atomic_helper_disable_plane.

      legacy_cursor_update was being set in restore_fbdev_mode_atomic which was
      probably unintended. Fix this by only setting it in the function that 
needs it.

      This oversight was introduced in

      commit bbb1e52402b2a288b09ae37e8182599931c7e9df
      Author: Rob Clark <robdclark@xxxxxxxxx>
      Date:   Tue Aug 25 15:35:58 2015 -0400

          drm/fb-helper: atomic restore_fbdev_mode()...

      Signed-off-by: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Reviewed-by: Daniel Vetter <daniel.vetter@xxxxxxxx>
      [Jani: checkpatch fix]
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>
      Link: 
http://patchwork.freedesktop.org/patch/msgid/1447237751-9663-2-git-send-email-maarten.lankhorst@xxxxxxxxxx

  commit ee82c9ed41e896bd47e121d87e4628de0f2656a3
  Author: Dan Williams <dan.j.williams@xxxxxxxxx>
  Date:   Sun Nov 15 16:06:32 2015 -0800

      dax: disable pmd mappings

      While dax pmd mappings are functional in the nominal path they trigger
      kernel crashes in the following paths:

       BUG: unable to handle kernel paging request at ffffea0004098000
       IP: [<ffffffff812362f7>] follow_trans_huge_pmd+0x117/0x3b0
       [..]
       Call Trace:
        [<ffffffff811f6573>] follow_page_mask+0x2d3/0x380
        [<ffffffff811f6708>] __get_user_pages+0xe8/0x6f0
        [<ffffffff811f7045>] get_user_pages_unlocked+0x165/0x1e0
        [<ffffffff8106f5b1>] get_user_pages_fast+0xa1/0x1b0

       kernel BUG at arch/x86/mm/gup.c:131!
       [..]
       Call Trace:
        [<ffffffff8106f34c>] gup_pud_range+0x1bc/0x220
        [<ffffffff8106f634>] get_user_pages_fast+0x124/0x1b0

       BUG: unable to handle kernel paging request at ffffea0004088000
       IP: [<ffffffff81235f49>] copy_huge_pmd+0x159/0x350
       [..]
       Call Trace:
        [<ffffffff811fad3c>] copy_page_range+0x34c/0x9f0
        [<ffffffff810a0daf>] copy_process+0x1b7f/0x1e10
        [<ffffffff810a11c1>] _do_fork+0x91/0x590

      All of these paths are interpreting a dax pmd mapping as a transparent
      huge page and making the assumption that the pfn is covered by the
      memmap, i.e. that the pfn has an associated struct page.  PTE mappings
      do not suffer the same fate since they have the _PAGE_SPECIAL flag to
      cause the gup path to fault.  We can do something similar for the PMD
      path, or otherwise defer pmd support for cases where a struct page is
      available.  For now, 4.4-rc and -stable need to disable dax pmd support
      by default.

      For development the "depends on BROKEN" line can be removed from
      CONFIG_FS_DAX_PMD.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: Jan Kara <jack@xxxxxxxx>
      Cc: Dave Chinner <david@xxxxxxxxxxxxx>
      Cc: Matthew Wilcox <willy@xxxxxxxxxxxxxxx>
      Cc: Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx>
      Reported-by: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit 9e5b8a6e53c79e6ccdbe6e62142ed9f317cefd46
  Author: Wei Jiangang <weijg.fnst@xxxxxxxxxxxxxx>
  Date:   Mon Nov 9 14:26:39 2015 +0800

      tools:testing/selftests: fix typo in futex/README

      Correct typo in tools/testing/selftests/futex/README.

      Signed-off-by: Wei Jiangang <weijg.fnst@xxxxxxxxxxxxxx>
      Acked-by: Darren Hart <dvhart@xxxxxxxxxxxxxxx>
      Signed-off-by: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>

  commit e62d6e244f759556b569801c38dc4ca27a58bd18
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Thu Nov 12 11:46:33 2015 +0000

      MAINTAINERS: linux-cachefs@xxxxxxxxxx is moderated for non-subscribers

      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit cf89752645e47d86ba8a4157f4b121fcb33434c5
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Thu Nov 12 11:46:23 2015 +0000

      FS-Cache: Add missing initialization of ret in cachefiles_write_page()

      fs/cachefiles/rdwr.c: In function â??cachefiles_write_pageâ??:
      fs/cachefiles/rdwr.c:882: warning: â??retâ?? may be used uninitialized in
      this function

      If the jump to label "error" is taken, "ret" will indeed be
      uninitialized, and random stack data may be printed by the debug code.

      Fixes: 102f4d900c9c8f5e ("FS-Cache: Handle a write to the page 
immediately beyond the EOF marker")
      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit 1285734c7a776b6195f8aaac6fa6acce26b5b97a
  Author: Florian Fainelli <f.fainelli@xxxxxxxxx>
  Date:   Mon Nov 16 15:34:15 2015 -0800

      MAINTAINERS: brcmnand: Add Broadcom internal mailing-list

      The Broadcom NAND driver is used by many different groups at Broadcom
      now, so use the same mailing-list we use for other areas of the kernel.

      Signed-off-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: Brian Norris <computersforpeace@xxxxxxxxx>

  commit a3088abc68f79ac30e6e8ccb07a15c8093e39684
  Author: Jiri Kosina <jkosina@xxxxxxx>
  Date:   Tue Nov 17 00:24:14 2015 +0100

      HID: wacom: fixup quirks setup for WACOM_DEVICETYPE_PAD

      Given that INTUOSHT < BAMBOO_PT

        features->type >= INTUOSHT || features->type <= BAMBOO_PT

      condition is always true, and therefore device_type is under certain
      circumstances wrongly set with WACOM_DEVICETYPE_PAD bit set.

      Fix the condition so that it actually represents the range as intended.

      Reported-by: David Binderman <dcb314@xxxxxxxxxxx>
      Signed-off-by: Jiri Kosina <jkosina@xxxxxxx>

  commit 4981c2b7abfe92a7ad3c9888b8a1ada552d49406
  Author: Markus Elfring <elfring@xxxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 15 22:42:27 2015 +0100

      ACPI-EC: Drop unnecessary check made before calling acpi_ec_delete_query()

      The acpi_ec_delete_query() function tests whether its argument is NULL
      and then returns immediately. Thus the test around the call is not needed.

      This issue was detected by using the Coccinelle software.

      Signed-off-by: Markus Elfring <elfring@xxxxxxxxxxxxxxxxxxxxx>
      [ rjw: Subject ]
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit a76032e0abef027df83f7f053580aa297de54818
  Author: Chris Bainbridge <chris.bainbridge@xxxxxxxxx>
  Date:   Thu Nov 12 19:24:47 2015 +0000

      Revert "ACPI / SBS: Add 5 us delay to fix SBS hangs on MacBook"

      Revert commit 3349fb64b292 (ACPI / SBS: Add 5 us delay to fix SBS
      hangs on MacBook), since the delay introduced by it is not necessary
      any more after commit add68d6aa9e2 (ACPI / SMBus: Fix boot stalls /
      high CPU caused by reentrant code).

      Signed-off-by: Chris Bainbridge <chris.bainbridge@xxxxxxxxx>
      [ rjw: Changelog ]
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit 1b2ff19e6a957b1ef0f365ad331b608af80e932e
  Author: Jan Kara <jack@xxxxxxxx>
  Date:   Thu Nov 12 14:25:52 2015 +0100

      blk-flush: Queue through IO scheduler when flush not required

      Currently blk_insert_flush() just adds flush request to q->queue_head
      when flush is not required. That completely bypasses IO scheduler so
      e.g. CFQ can be idling waiting for new request to arrive and will idle
      through the whole window unnecessarily. Luckily this only happens in
      rare cases as usually checks in generic_make_request_checks() clear
      FLUSH and FUA flags early if they are not needed.

      When no flushing is actually required, we can easily fix the problem by
      properly queueing the request through the IO scheduler. Ideally IO
      scheduler should be also made aware of requests queued via
      blk_flush_queue_rq(). However inserting flush request through IO
      scheduler can have unwanted side-effects since due to flush batching
      delaying the flush request in IO scheduler will delay all flush requests
      possibly coming from other processes. So we keep adding the request
      directly to q->queue_head.

      Signed-off-by: Jan Kara <jack@xxxxxxxx>
      Reviewed-by: Jeff Moyer <jmoyer@xxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit add68d6aa9e2492e51707ca603ada5b26c626757
  Author: Chris Bainbridge <chris.bainbridge@xxxxxxxxx>
  Date:   Thu Nov 12 18:05:37 2015 +0000

      ACPI / SMBus: Fix boot stalls / high CPU caused by reentrant code

      In the SBS initialisation, a reentrant call to wait_event_timeout()
      causes an intermittent boot stall of several minutes usually following
      the "Switching to clocksource tsc" message. Another symptom of this bug
      is high CPU usage from programs (Firefox, upowerd) querying the battery
      state. This is caused by:

       1. drivers/acpi/sbshc.c wait_transaction_complete() calls
          wait_event_timeout():

        if (wait_event_timeout(hc->wait, smb_check_done(hc),
                               msecs_to_jiffies(timeout)))

       2. ___wait_event sets task state to uninterruptible

       3. ___wait_event calls the "condition" smb_check_done()

       4. smb_check_done (sbshc.c) calls through to ec_read() in
          drivers/acpi/ec.c

       5. ec_guard() is reached which calls wait_event_timeout()

        if (wait_event_timeout(ec->wait,
                               ec_transaction_completed(ec),
                               guard))

          ie. wait_event_timeout() is being called again inside evaluation of
          the previous wait_event_timeout() condition

       5. The EC IRQ handler calls wake_up() and wakes up the sleeping task in
          ec_guard()

       6. The task is now in state running even though the wait "condition" is
          still being evaluated

       7. The "condition" check returns false so ___wait_event calls
          schedule_timeout()

       8. Since the task state is running, the scheduler immediately schedules
          it again

       9. This loop usually repeats for around 250 seconds even though the
          original wait_event_timeout was only 1000ms.

          The timeout is incorrect because each call to schedule_timeout()
          usually returns immediately, taking less than 1ms, so the jiffies
          timeout counter is not decremented. The task is now stuck in a
          running state, and so is highly likely to be immediately
          rescheduled, which takes less than a jiffy. The loop will never exit
          if all schedule_timeout() calls take less than a jiffy.

      Fix this by replacing SMBus reads in the wait_event_timeout condition
      with checks of a boolean value that is updated by the EC query handler.

      Link: https://bugzilla.kernel.org/show_bug.cgi?id=107191
      Link: https://lkml.org/lkml/2015/11/6/776
      Signed-off-by: Chris Bainbridge <chris.bainbridge@xxxxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit b2b7e00148a203e9934bbd17aebffae3f447ade7
  Author: Matias Bjørling <m@xxxxxxxxxxx>
  Date:   Thu Nov 12 20:25:10 2015 +0100

      null_blk: register as a LightNVM device

      Add support for registering as a LightNVM device. This allows us to
      evaluate the performance of the LightNVM subsystem.

      In /drivers/Makefile, LightNVM is moved above block device drivers
      to make sure that the LightNVM media managers have been initialized
      before drivers under /drivers/block are initialized.

      Signed-off-by: Matias Bjørling <m@xxxxxxxxxxx>
      Fix by Jens Axboe to remove unneeded slab cache and the following
      memory leak.
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 4736346bb47966254ee6d1fc50267a2609791cba
  Author: Geliang Tang <geliangtang@xxxxxxx>
  Date:   Mon Nov 16 23:30:00 2015 +0800

      elevator: use list_{first,prev,next}_entry

      To make the intention clearer, use list_{first,prev,next}_entry
      instead of list_entry.

      Signed-off-by: Geliang Tang <geliangtang@xxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit d09f9581b235a92abbe372531660b468fadabc17
  Author: Javier González <javier@xxxxxxxxxxx>
  Date:   Mon Nov 16 15:34:47 2015 +0100

      lightnvm: cleanup queue before target removal

      This prevents outstanding IOs to be sent for completion to target after
      the target has been removed. The flow is now: stop new IOs > cleanup
      queue > remove target.

      Signed-off-by: Javier Gonzalez <javier@xxxxxxxxxxxx>
      Signed-off-by: Matias Bjørling <m@xxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit dad1b00977f9dc8120b48f9711deb4aa6462a3a6
  Author: Matias Bjørling <m@xxxxxxxxxxx>
  Date:   Mon Nov 16 15:34:46 2015 +0100

      nvme: remove reserved double word

      The specification was updated the remove the double word just after
      number of configuration groups and capabilities. Update the identify
      structure to reflect it.

      Signed-off-by: Matias Bjørling <m@xxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 2393bd39c77f21488ac7e5337cac1523e9ebd2c4
  Author: Matias Bjørling <m@xxxxxxxxxxx>
  Date:   Mon Nov 16 15:34:45 2015 +0100

      nvme: missing ppaf copy

      The ppa format was not copied from the NVMe specific ppa format to the
      lightnvm specific ppa format. This led to the ppa format not being
      communicated to the layers above.

      Signed-off-by: Matias Bjørling <m@xxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 7386af270c72be65c7cb2ba4ad0d4e70dc373106
  Author: Matias Bjørling <m@xxxxxxxxxxx>
  Date:   Mon Nov 16 15:34:44 2015 +0100

      lightnvm: remove linear and device addr modes

      The linear and device specific address modes can be replaced with a
      simple offset and bit length conversion that is generic across all
      devices.

      This both simplifies the specification and removes the special case for
      qemu nvme, that previously relied on the linear address mapping.

      Signed-off-by: Matias Bjørling <m@xxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit c1480ad5943261e01a62eaa7132eab76f9c490e0
  Author: Matias Bjørling <m@xxxxxxxxxxx>
  Date:   Mon Nov 16 15:34:43 2015 +0100

      lightnvm: prevent double free on init error

      Both the nvm_register and nvm_init does a kfree(dev) on error. Make sure
      to only free it once.

      Signed-off-by: Matias Bjørling <m@xxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit edad2e6606ee62dd7dfc5b001fae39c5c8015a55
  Author: Matias Bjørling <m@xxxxxxxxxxx>
  Date:   Mon Nov 16 15:34:42 2015 +0100

      lightnvm: prematurely activate nvm_dev

      We register with nvm_devices when there registration can still fail.
      Move the final registration at the end of the nvm_register function
      to make sure we are fully registered when added to the nvm_devices list.

      Signed-off-by: Matias Bjørling <m@xxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 4264c980e3e9bb904b7f41dc9c64786cc5466bee
  Author: Matias Bjørling <m@xxxxxxxxxxx>
  Date:   Mon Nov 16 15:34:41 2015 +0100

      lightnvm: check for NAND flash and its type

      Only NAND flash with SLC and MLC is supported. Make sure to not try to
      initialize TLC memory or other non-volatile memory types.

      Signed-off-by: Matias Bjørling <m@xxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 73387e7bed260c89628fc6a4e3632b45be9776b0
  Author: Matias Bjørling <m@xxxxxxxxxxx>
  Date:   Mon Nov 16 15:34:40 2015 +0100

      lightnvm: remove unused attrs in nvm_id structs

      The nvm_id, nvm_id_group and nvm_addr_format data structures contain
      reserved attributes. They are unused by media managers and targets.
      Remove them.

      Signed-off-by: Matias Bjørling <m@xxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 12be5edf68e785dd5dc8665db5a88152b49c1fe8
  Author: Matias Bjørling <m@xxxxxxxxxxx>
  Date:   Mon Nov 16 15:34:39 2015 +0100

      lightnvm: expose mccap in identify command

      The mccap field is required for I/O command option support. It defines the
      following flash access modes:

       * SLC mode
       * Erase/Program Suspension
       * Scramble On/Off
       * Encryption

      It is slotted in between mpos and cpar, changing the offset for
      cpar as well.

      Signed-off-by: Matias Bjørling <m@xxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 36d5dbc694e0d1b1909506666d7c27b53f7f9674
  Author: Matias Bjørling <m@xxxxxxxxxxx>
  Date:   Mon Nov 16 15:34:38 2015 +0100

      lightnvm: update alignments for identify command

      A single 8 bit and 16 bit reserve field were inserted in the
      specification to align fields appropriately. Reflect this in the
      identify group structure.

      Signed-off-by: Matias Bjørling <m@xxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 11450469830f2481a9e7cb181609288d40f41323
  Author: Matias Bjørling <m@xxxxxxxxxxx>
  Date:   Mon Nov 16 15:34:37 2015 +0100

      lightnvm: update bad block table format

      The specification was changed to reflect a multi-value bad block table.
      Instead of bit-based bad block table, the bad block table now allows
      eight bad block categories. Currently four are defined:

       * Factory bad blocks
       * Grown bad blocks
       * Device-side reserved blocks
       * Host-side reserved blocks

      The factory and grown bad blocks are the regular bad blocks. The
      reserved blocks are either for internal use or external use. In
      particular, the device-side reserved blocks allows the host to
      bootstrap from a limited number of flash blocks. Reducing the flash
      blocks to scan upon super block initialization.

      Support for both get bad block table and set bad block table is added.

      Signed-off-by: Matias Bjørling <m@xxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit aedf17f4515b12ba1cd73298e66baa69cf93010e
  Author: Matias Bjørling <m@xxxxxxxxxxx>
  Date:   Mon Nov 16 15:34:36 2015 +0100

      lightnvm: change max_phys_sect to uint

      The max_phys_sect variable is defined as a char. We do a boundary check
      to maximally allow 256 physical page descriptors per command. As we are
      not indexing from zero. This expression is always false. Bump the
      max_phys_sect to an unsigned int to support the range check.

      Signed-off-by: Matias Bjørling <m@xxxxxxxxxxx>
      Reported-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 4ead1a25ce436f73501d6358450f3ba0c1cb2ce3
  Author: Matias Bjørling <m@xxxxxxxxxxx>
  Date:   Mon Nov 16 15:34:35 2015 +0100

      MAINTAINERS: Add linux-block list to LightNVM for patches

      Signed-off-by: Matias Bjørling <m@xxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit f1a454a37618b819f2528ccd234f77a02b3a6016
  Author: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 15 22:36:12 2015 +0100

      ipg: Remove ipg driver

      Now that IP1000A chips are supported by dl2k driver, the buggy ipg
      driver can be removed.

      Signed-off-by: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c3f45d322cbd379c46466cc2ecab7e2d719b22ed
  Author: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 15 22:36:11 2015 +0100

      dl2k: Add support for IP1000A-based cards

      Add support for IP1000A chips to dl2k driver.
      IP1000A chip looks like a TC9020 with integrated PHY.

      This allows IP1000A chips to work reliably because the ipg driver is
      buggy - it loses packets under load and then completely stops
      transmitting data.

      Tested with Asus NX1101 v2.0 at 10, 100 and 1000Mbps:
      vendor=0x13f0 device=0x1023 (rev 0x41)
      subsystem vendor=0x1043 device=0x8180

      MAC address registers access needed to be changed from 8-bit to 16-bit
      because 8-bit does not work on IP1000A. 8-bit access is not even
      allowed in the TC9020 datasheet (although it worked). 16-bit access
      works on both.

      Tested that it does not break D-Link DGE-550T (DL-2000 chip, probably
      a rebranded TC9020):
      vendor=0x1186 device=0x4000 (rev 0x0c)
      subsystem vendor=0x1186 device=0x4000

      Signed-off-by: Ondrej Zary <linux@xxxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Andy Shevchenko <andy.shevchenko@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6f9b36cd2497660e254c67ed131f0b297ed8bf40
  Author: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
  Date:   Thu Nov 12 10:26:57 2015 -0800

      PM / wakeirq: check that wake IRQ is valid before accepting it

      Check that IRQ number passed to dev_pm_set_wake_irq() and
      dev_pm_set_dedicated_wake_irq() is valid (not negative) before
      accepting it.

      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit bbf0b34578a71f42d19bd6c966f09221044921fe
  Author: Junwei Zhang <Jerry.Zhang@xxxxxxx>
  Date:   Sun Sep 6 14:00:46 2015 +0800

      drm/amdgpu: remove the unnecessary parameter adev for amdgpu_sa_bo_new()

      Signed-off-by: Junwei Zhang <Jerry.Zhang@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>

  commit 680513cc0accf14cb447663b65e02ae307ac3811
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Thu Sep 10 15:03:50 2015 +0200

      drm/amdgpu: wait interruptible when semaphores are disabled v2

      Otherwise debugging locked up processes isn't possible.

      v2: rebased

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx> (v1)

  commit d9f67dbc0f55e67dd18fc18fa05a9d5d2bd52914
  Merge: 8005c49 5369a21
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Mon Nov 16 22:57:02 2015 +0100

      Merge branch 'pm-tools'

      * pm-tools:
        x86: remove unused definition of MSR_NHM_PLATFORM_INFO
        tools/power turbostat: use new name for MSR_PLATFORM_INFO

  commit 41033f029e393a64e81966cbe34d66c6cf8a2e7e
  Author: Neil Horman <nhorman@xxxxxxxxxxxxx>
  Date:   Mon Nov 16 13:09:10 2015 -0500

      snmp: Remove duplicate OUTMCAST stat increment

      the OUTMCAST stat is double incremented, getting bumped once in the mcast 
code
      itself, and again in the common ip output path.  Remove the mcast bump, 
as its
      not needed

      Validated by the reporter, with good results

      Signed-off-by: Neil Horman <nhorman@xxxxxxxxxxxxx>
      Reported-by: Claus Jensen <claus.jensen@xxxxxxxxxxxxx>
      CC: Claus Jensen <claus.jensen@xxxxxxxxxxxxx>
      CC: David Miller <davem@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7750130d93decff06120df0d8ea024ff8a038a21
  Author: Pavel Fedin <p.fedin@xxxxxxxxxxx>
  Date:   Mon Nov 16 17:51:34 2015 +0300

      net: thunder: Check for driver data in nicvf_remove()

      In some cases the crash is caused by nicvf_remove() being called from
      outside. For example, if we try to feed the device to vfio after the
      probe has failed for some reason. So, move the check to better place.

      Signed-off-by: Pavel Fedin <p.fedin@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 88ad4175b201ae24be5e9b7752cf33c1306b64e4
  Author: Bjørn Mork <bjorn@xxxxxxx>
  Date:   Mon Nov 16 19:16:40 2015 +0100

      net/core: use netdev name in warning if no parent

      A recent flaw in the netdev feature setting resulted in warnings
      like this one from VLAN interfaces:

       WARNING: CPU: 1 PID: 4975 at net/core/dev.c:2419 
skb_warn_bad_offload+0xbc/0xcb()
       : caps=(0x00000000001b5820, 0x00000000001b5829) len=2782 data_len=0 
gso_size=1348 gso_type=16 ip_summed=3

      The ":" is supposed to be preceded by a driver name, but in this
      case it is an empty string since the device has no parent.

      There are many types of network devices without a parent. The
      anonymous warnings for these devices can be hard to debug.  Log
      the network device name instead in these cases to assist further
      debugging.

      This is mostly similar to how __netdev_printk() handles orphan
      devices.

      Signed-off-by: Bjørn Mork <bjorn@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8844f97238ca6c1ca92a5d6c69f53efd361a266f
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 16 16:25:56 2015 +0100

      af_unix: don't append consumed skbs to sk_receive_queue

      In case multiple writes to a unix stream socket race we could end up in a
      situation where we pre-allocate a new skb for use in unix_stream_sendpage
      but have to free it again in the locked section because another skb
      has been appended meanwhile, which we must use. Accidentally we didn't
      clear the pointer after consuming it and so we touched freed memory
      while appending it to the sk_receive_queue. So, clear the pointer after
      consuming the skb.

      This bug has been found with syzkaller
      (http://github.com/google/syzkaller) by Dmitry Vyukov.

      Fixes: 869e7c62486e ("net: af_unix: implement stream sendpage support")
      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Eric Dumazet <eric.dumazet@xxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 24cb7055a3066634a0f3fa0cd6a4780652905d35
  Author: Dragos Tatulea <dragos@xxxxxxxxxxxx>
  Date:   Mon Nov 16 10:52:48 2015 +0100

      net: switchdev: fix return code of fdb_dump stub

      rtnl_fdb_dump always expects an index to be returned by the ndo_fdb_dump 
op,
      but when CONFIG_NET_SWITCHDEV is off, it returns an error.

      Fix that by returning the given unmodified idx.

      A similar fix was 0890cf6cb6ab ("switchdev: fix return value of
      switchdev_port_fdb_dump in case of error") but for the 
CONFIG_NET_SWITCHDEV=y
      case.

      Fixes: 45d4122ca7cd ("switchdev: add support for fdb add/del/dump via 
switchdev_port_obj ops.")
      Signed-off-by: Dragos Tatulea <dragos@xxxxxxxxxxxx>
      Acked-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ab6d7846cf80affc43b9d412fed5e25dfcf4f35d
  Author: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
  Date:   Sun Nov 15 15:02:16 2015 +0200

      bnx2x: Fix VLANs null-pointer for 57710, 57711

      Commit 05cc5a39ddb7 "bnx2x: add vlan filtering offload" introduced
      a regression in regard for vlans for 57710, 57711 adapters -
      Loading 8021q module on a machine with such an adapter would cause
      a null pointer dereference, as the driver mistakenly publishes it
      has capabilities for vlan CTAG filtering.

      Reported-by: Otto Sabart <osabart@xxxxxxxxxx>
      Signed-off-by: Yuval Mintz <Yuval.Mintz@xxxxxxxxxx>
      Signed-off-by: Ariel Elior <Ariel.Elior@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d60cf616ec39141b3483304fde69acf0dcec80eb
  Author: Masaru Nagai <masaru.nagai.vx@xxxxxxxxxxx>
  Date:   Sun Nov 15 21:34:42 2015 +0900

      ravb: remove unhandle int cause

      This driver does not handle the AVB-DMAC Receive FIFO Warning interrupt
      now, so the interrupt should not be enabled.

      Signed-off-by: Masaru Nagai <masaru.nagai.vx@xxxxxxxxxxx>
      Signed-off-by: Yoshihiro Kaneko <ykaneko0929@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 027ac58e3c757277dd6cb8975d1b69c27853aa76
  Author: Ben Cartwright-Cox <ben@xxxxxxxxxxxxx>
  Date:   Sat Nov 14 15:13:58 2015 +0000

      raw: increment correct SNMP counters for ICMP messages

      Sending ICMP packets with raw sockets ends up in the SNMP counters
      logging the type as the first byte of the IPv4 header rather than
      the ICMP header. This is fixed by adding the IP Header Length to
      the casting into a icmphdr struct.

      Signed-off-by: Ben Cartwright-Cox <ben@xxxxxxxxxxxxx>
      Acked-by: Eric Dumazet <eric.dumazet@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c300366b6b978fcb84f8eeb6205e5980cc0c40c3
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sat Nov 14 11:06:57 2015 +0100

      sfc: constify pci_error_handlers structures

      This pci_error_handlers structure is never modified, like all the other
      pci_error_handlers structures, so declare it as const.

      Done with the help of Coccinelle.

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 166e23623e7482070aa124ad805f600672377019
  Author: Julia Lawall <julia.lawall@xxxxxxx>
  Date:   Sat Nov 14 11:06:53 2015 +0100

      net: cavium: liquidio: constify pci_error_handlers structures

      This pci_error_handlers structure is never modified, like all the other
      pci_error_handlers structures, so declare it as const.

      Done with the help of Coccinelle.

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d37d5ec861b0d937c0bdd70f0138e2750aacccdb
  Author: Shrikrishna Khare <skhare@xxxxxxxxxx>
  Date:   Fri Nov 13 15:42:10 2015 -0800

      Driver: Vmxnet3: Fix use of mfTableLen for big endian architectures

      Signed-off-by: Shrikrishna Khare <skhare@xxxxxxxxxx>
      Reported-by: Masao Uebayashi <uebayasi@xxxxxxxxx>
      Signed-off-by: Bhavesh Davda <bhavesh@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0b88393cdf6b1322522849e61f7a3328f4fd3843
  Author: Daniele Palmas <dnlplm@xxxxxxxxx>
  Date:   Fri Nov 13 18:01:21 2015 +0100

      net: usb: cdc_ether: add Dell DW5580 as a mobile broadband adapter

      Since Dell DW5580 is a 3G modem, this patch adds the device as a
      mobile broadband adapter

      Signed-off-by: Daniele Palmas <dnlplm@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 00ee5927177792a6e139d50b6b7564d35705556a
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 13 15:20:24 2015 +0100

      net: fix __netdev_update_features return on ndo_set_features failure

      If ndo_set_features fails __netdev_update_features() will return -1 but
      this is wrong because it is expected to return 0 if no features were
      changed (see netdev_update_features()), which will cause a netdev
      notifier to be called without any actual changes. Fix this by returning
      0 if ndo_set_features fails.

      Fixes: 6cb6a27c45ce ("net: Call netdev_features_change() from 
netdev_update_features()")
      CC: MichaÅ? MirosÅ?aw <mirq-linux@xxxxxxxxxxxx>
      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5f8dc33e8ee7e59bee3bc6dc2088807a384b285a
  Author: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 13 14:54:01 2015 +0100

      net: fix feature changes on devices without ndo_set_features

      When __netdev_update_features() was updated to ensure some features are
      disabled on new lower devices, an error was introduced for devices which
      don't have the ndo_set_features() method set. Before we'll just set the
      new features, but now we return an error and don't set them. Fix this by
      returning the old behaviour and setting err to 0 when ndo_set_features
      is not present.

      Fixes: e7868a85e1b2 ("net/core: ensure features get disabled on new lower 
devs")
      CC: Jarod Wilson <jarod@xxxxxxxxxx>
      CC: Jiri Pirko <jiri@xxxxxxxxxxx>
      CC: Ido Schimmel <idosch@xxxxxxxxxxxx>
      CC: Sander Eikelenboom <linux@xxxxxxxxxxxxxx>
      CC: Andy Gospodarek <gospo@xxxxxxxxxxxxxxxxxxx>
      CC: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Reviewed-by: Andy Gospodarek <gospo@xxxxxxxxxxxxxxxxxxx>
      Reviewed-by: Jarod Wilson <jarod@xxxxxxxxxx>
      Tested-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Tested-by: Dave Young <dyoung@xxxxxxxxxx>
      Tested-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit bbe14f54297467ddb23b7d1db564a2468c6ae151
  Author: Ido Schimmel <idosch@xxxxxxxxxxxx>
  Date:   Fri Nov 13 13:06:12 2015 +0200

      switchdev: bridge: Check return code is not EOPNOTSUPP

      When NET_SWITCHDEV=n, switchdev_port_attr_set simply returns EOPNOTSUPP.
      In this case we should not emit errors and warnings to the kernel log.

      Reported-by: Sander Eikelenboom <linux@xxxxxxxxxxxxxx>
      Tested-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Fixes: 0bc05d585d38 ("switchdev: allow caller to explicitly request
      attr_set as deferred")
      Fixes: 6ac311ae8bfb ("Adding switchdev ageing notification on port
      bridged")
      Signed-off-by: Ido Schimmel <idosch@xxxxxxxxxxxx>
      Signed-off-by: Jiri Pirko <jiri@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d5d309815bc377ec8235df380fda6d1befbc57cc
  Author: Ivan Vecera <ivecera@xxxxxxxxxx>
  Date:   Fri Nov 13 11:36:58 2015 +0100

      be2net: replace hardcoded values with existing define

      Signed-off-by: Ivan Vecera <ivecera@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4114ec905de2f02b91703c484bba9b62dc3bbb87
  Author: Ivan Vecera <ivecera@xxxxxxxxxx>
  Date:   Fri Nov 13 11:36:57 2015 +0100

      be2net: remove unused local rsstable array

      Remove rsstable array and its initialization from be_set_rss_hash_opts().
      The array became unused after "e255787 be2net: Support for configurable
      RSS hash key". The initial RSS table is now filled and stored for later
      usage during Rx queue creation.

      Signed-off-by: Ivan Vecera <ivecera@xxxxxxxxxx>
      Acked-by: Sathya Perla <sathya.perla@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2452cb0c6503f05ab371b26c3216c5fba54d4476
  Author: Masaru Nagai <masaru.nagai.vx@xxxxxxxxxxx>
  Date:   Fri Nov 13 19:24:49 2015 +0900

      ravb: Fix int mask value overwritten issue

      When RX/TX interrupt for Network Control queue and Best Effort queue
      is issued at the same time, the interrupt mask of Network Control
      queue will be reset when the mask of Best Effort queue is set.
      This patch fixes this problem.

      Signed-off-by: Masaru Nagai <masaru.nagai.vx@xxxxxxxxxxx>
      Signed-off-by: Yoshihiro Kaneko <ykaneko0929@xxxxxxxxx>
      Acked-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Acked-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cd998ecd2f031cfdb88436ea12f7c6d0b09c7a80
  Author: Pavel Fedin <p.fedin@xxxxxxxxxxx>
  Date:   Fri Nov 13 09:46:59 2015 +0300

      net: smsc911x: Reset PHY during initialization

      On certain hardware after software reboot the chip may get stuck and fail
      to reinitialize during reset. This can be fixed by ensuring that PHY is
      reset too.

      Old PHY resetting method required operational MDIO interface, therefore
      the chip should have been already set up. In order to be able to function
      during probe, it is changed to use PMT_CTRL register.

      The problem could be observed on SMDK5410 board.

      Signed-off-by: Pavel Fedin <p.fedin@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c3d4c682c240595c3637c552dc1afa985bc6d382
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Sat Nov 14 01:16:18 2015 +0100

      bpf, arm64: start flushing icache range from header

      While recently going over ARM64's BPF code, I noticed that the icache
      range we're flushing should start at header already and not at ctx.image.

      Reason is that after b569c1c622c5 ("net: bpf: arm64: address randomize
      and write protect JIT code"), we also want to make sure to flush the
      random-sized trap in front of the start of the actual program (analogous
      to x86). No operational differences from user side.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Zi Shen Lim <zlim.lnx@xxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ebaef649c26b44ff28114b452fd067a270ca7f02
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Sat Nov 14 01:26:53 2015 +0100

      bpf, arm: start flushing icache range from header

      During review I noticed that the icache range we're flushing should
      start at header already and not at ctx.image.

      Reason is that after 55309dd3d4cd ("net: bpf: arm: address randomize
      and write protect JIT code"), we also want to make sure to flush the
      random-sized trap in front of the start of the actual program (analogous
      to x86). No operational differences from user side.

      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Tested-by: Nicolas Schichan <nschichan@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 30b50aa612018bd92f5a85534cc2668423e8c7e8
  Author: Yang Shi <yang.shi@xxxxxxxxxx>
  Date:   Thu Nov 12 14:07:46 2015 -0800

      bpf: samples: exclude asm/sysreg.h for arm64

      commit 338d4f49d6f7114a017d294ccf7374df4f998edc
      ("arm64: kernel: Add support for Privileged Access Never") includes 
sysreg.h
      into futex.h and uaccess.h. But, the inline assembly used by asm/sysreg.h 
is
      incompatible with llvm so it will cause BPF samples build failure for 
ARM64.
      Since sysreg.h is useless for BPF samples, just exclude it from Makefile 
via
      defining __ASM_SYSREG_H.

      Signed-off-by: Yang Shi <yang.shi@xxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0fcd593b943bfcc21ad84d3321422401de071d8a
  Author: Yang Shi <yang.shi@xxxxxxxxxx>
  Date:   Thu Nov 12 13:57:00 2015 -0800

      arm64: bpf: fix JIT frame pointer setup

      BPF fp should point to the top of the BPF prog stack. The original
      implementation made it point to the bottom incorrectly.
      Move A64_SP to fp before reserve BPF prog stack space.

      CC: Zi Shen Lim <zlim.lnx@xxxxxxxxx>
      CC: Xi Wang <xi.wang@xxxxxxxxx>
      Signed-off-by: Yang Shi <yang.shi@xxxxxxxxxx>
      Reviewed-by: Zi Shen Lim <zlim.lnx@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 7729b053814ac91af340f5055970afc87d7fee21
  Author: Måns Rullgård <mans@xxxxxxxxx>
  Date:   Thu Nov 12 18:41:12 2015 +0000

      net: phy: vitesse: add support for VSC8601

      This adds support for the Vitesse VSC8601 PHY. Generic functions are
      used for everything except interrupt handling.

      Signed-off-by: Mans Rullgard <mans@xxxxxxxxx>
      Reviewed-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0eae5982a3571dc15a9e7684c02e8774ba2fb1c7
  Author: Måns Rullgård <mans@xxxxxxxxx>
  Date:   Thu Nov 12 17:40:20 2015 +0000

      net: phy: at803x: support interrupt on 8030 and 8035

      Commit 77a993942 "phy/at8031: enable at8031 to work on interrupt mode"
      added interrupt support for the 8031 PHY but left out the other two
      chips supported by this driver.

      This patch sets the .ack_interrupt and .config_intr functions for the
      8030 and 8035 drivers as well.

      Signed-off-by: Mans Rullgard <mans@xxxxxxxxx>
      Reviewed-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b4fe85f9c9146f60457e9512fb6055e69e6a7a65
  Author: Jason A. Donenfeld <Jason@xxxxxxxxx>
  Date:   Thu Nov 12 17:35:58 2015 +0100

      ip_tunnel: disable preemption when updating per-cpu tstats

      Drivers like vxlan use the recently introduced
      udp_tunnel_xmit_skb/udp_tunnel6_xmit_skb APIs. udp_tunnel6_xmit_skb
      makes use of ip6tunnel_xmit, and ip6tunnel_xmit, after sending the
      packet, updates the struct stats using the usual
      u64_stats_update_begin/end calls on this_cpu_ptr(dev->tstats).
      udp_tunnel_xmit_skb makes use of iptunnel_xmit, which doesn't touch
      tstats, so drivers like vxlan, immediately after, call
      iptunnel_xmit_stats, which does the same thing - calls
      u64_stats_update_begin/end on this_cpu_ptr(dev->tstats).

      While vxlan is probably fine (I don't know?), calling a similar function
      from, say, an unbound workqueue, on a fully preemptable kernel causes
      real issues:

      [  188.434537] BUG: using smp_processor_id() in preemptible [00000000] 
code: kworker/u8:0/6
      [  188.435579] caller is debug_smp_processor_id+0x17/0x20
      [  188.435583] CPU: 0 PID: 6 Comm: kworker/u8:0 Not tainted 4.2.6 #2
      [  188.435607] Call Trace:
      [  188.435611]  [<ffffffff8234e936>] dump_stack+0x4f/0x7b
      [  188.435615]  [<ffffffff81915f3d>] check_preemption_disabled+0x19d/0x1c0
      [  188.435619]  [<ffffffff81915f77>] debug_smp_processor_id+0x17/0x20

      The solution would be to protect the whole
      this_cpu_ptr(dev->tstats)/u64_stats_update_begin/end blocks with
      disabling preemption and then reenabling it.

      Signed-off-by: Jason A. Donenfeld <Jason@xxxxxxxxx>
      Acked-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9ca641b0f02a3a1eedbc8c296e695326da9bbaf9
  Author: Brian Norris <computersforpeace@xxxxxxxxx>
  Date:   Mon Nov 9 16:37:28 2015 -0800

      mtd: nand: fix shutdown/reboot for multi-chip systems

      If multiple NAND chips are registered to the same controller, then when
      rebooting the system, the first one will grab the controller lock, while
      the second will wait forever for the first one to release it. i.e., a
      classic deadlock.

      This problem was solved for a similar case (suspend/resume) back in
      commit 6b0d9a841249 ("mtd: nand: fix multi-chip suspend problem"), and
      the shutdown state really isn't much different for us, so rather than
      adding a new special case to nand_get_device(), we can just overload the
      FL_PM_SUSPENDED state.

      Now, multiple chips can "get" the same controller lock (preventing
      further I/O), while we still allow other chips to pass through
      nand_shutdown().

      Original report:
      http://thread.gmane.org/gmane.linux.drivers.mtd/59726
      http://lists.infradead.org/pipermail/linux-mtd/2015-July/059992.html

      Fixes: 72ea403669c7 ("mtd: nand: added nand_shutdown")
      Reported-by: Andrew E. Mileski <andrewm@xxxxxxxx>
      Signed-off-by: Brian Norris <computersforpeace@xxxxxxxxx>
      Cc: Scott Branden <sbranden@xxxxxxxxxxxx>
      Cc: Andrew E. Mileski <andrewm@xxxxxxxx>
      Acked-by: Scott Branden <sbranden@xxxxxxxxxxxx>
      Reviewed-by: Boris Brezillon <boris.brezillon@xxxxxxxxxxxxxxxxxx>

  commit 96dd922c198286681fbbc15100e196e0f629e2fb
  Author: Brian Norris <computersforpeace@xxxxxxxxx>
  Date:   Wed Nov 11 15:36:16 2015 -0800

      mtd: jz4740_nand: fix build on jz4740 after removing gpio.h

      Fallout from commit 832f5dacfa0b ("MIPS: Remove all the uses of custom 
gpio.h")

      We see errors like this:

      drivers/mtd/nand/jz4740_nand.c: In function 'jz_nand_detect_bank':
      drivers/mtd/nand/jz4740_nand.c:340:9: error: 'JZ_GPIO_MEM_CS0' undeclared 
(first use in this function)
      drivers/mtd/nand/jz4740_nand.c:340:9: note: each undeclared identifier is 
reported only once for each function it appears in
      drivers/mtd/nand/jz4740_nand.c:359:2: error: implicit declaration of 
function 'jz_gpio_set_function' [-Werror=implicit-function-declaration]
      drivers/mtd/nand/jz4740_nand.c:359:29: error: 'JZ_GPIO_FUNC_MEM_CS0' 
undeclared (first use in this function)
      drivers/mtd/nand/jz4740_nand.c:399:29: error: 'JZ_GPIO_FUNC_NONE' 
undeclared (first use in this function)
      drivers/mtd/nand/jz4740_nand.c: In function 'jz_nand_probe':
      drivers/mtd/nand/jz4740_nand.c:528:13: error: 'JZ_GPIO_MEM_CS0' 
undeclared (first use in this function)
      drivers/mtd/nand/jz4740_nand.c: In function 'jz_nand_remove':
      drivers/mtd/nand/jz4740_nand.c:555:14: error: 'JZ_GPIO_MEM_CS0' 
undeclared (first use in this function)

      Patched similarly to:

      https://patchwork.linux-mips.org/patch/11089/

      Fixes: 832f5dacfa0b ("MIPS: Remove all the uses of custom gpio.h")
      Signed-off-by: Brian Norris <computersforpeace@xxxxxxxxx>

  commit 3da6d49e847128378c30292848125cc3e207e5f7
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Nov 16 17:51:17 2015 +0100

      clocksource: Disallow drivers for ARCH_USES_GETTIMEOFFSET

      We can now select clocksource drivers like ti-32k and CONFIG_OF
      on ancient machines that still use gettimeoffset, and the combination
      results in a link error.

      arch/arm/kernel/built-in.o: In function `time_init':
      (.init.text+0xc28): undefined reference to `clocksource_probe'

      The reason for this is that the Makefile is hidden behind
      CONFIG_ARCH_USES_GETTIMEOFFSET, but the Kconfig file is not, and
      it has shown up just now because the ti-32k driver was added
      and can be selected using COMPILE_TEST on all platforms.

      This patch hides the Kconfig menu in CONFIG_ARCH_USES_GETTIMEOFFSET
      as well.

      Fixes: dfedaf105d60 "clocksource: ti-32k: make it depend on 
GENERIC_CLOCKSOURCE"
      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Felipe Balbi <balbi@xxxxxx>
      Cc: Tony Lindgren <tony@xxxxxxxxxxx>
      Cc: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
      Link: http://lkml.kernel.org/r/7579471.4N90fYPQOK@wuerfel
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit dde7632ed02382e4bac2b57c66ee2285764f2cd7
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Nov 16 17:34:50 2015 +0100

      clocksource/fsl: Avoid harmless 64-bit warnings

      The ftm_clockevent_init passes the value of "~0UL" into a function
      that takes a 32-bit argument, which drops the upper 32 bits, as
      gcc warns about on ARM64:

      clocksource/fsl_ftm_timer.c: In function 'ftm_clockevent_init':
      clocksource/fsl_ftm_timer.c:206:13: warning: large integer implicitly 
truncated to unsigned type [-Woverflow]

      This was obviously unintended behavior, and is easily avoided by
      using '~0u' as the integer literal, because that is 32-bit wide
      on all architectures.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Cc: linux-arm-kernel@xxxxxxxxxxxxxxxxxxx
      Cc: Xiubo Li <Li.Xiubo@xxxxxxxxxxxxx>
      Cc: Shawn Guo <shawnguo@xxxxxxxxxx>
      Cc: Sascha Hauer <kernel@xxxxxxxxxxxxxx>
      Cc: Stefan Agner <stefan@xxxxxxxx>
      Cc: Daniel Lezcano <daniel.lezcano@xxxxxxxxxx>
      Link: http://lkml.kernel.org/r/3990834.xnjhm37Grs@wuerfel
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit cef03d7e66bd70c4baf61dd2431cf8de250834de
  Author: Sudeep Holla <sudeep.holla@xxxxxxx>
  Date:   Wed Oct 28 17:17:31 2015 +0000

      hwmon: (scpi) skip unsupported sensors properly

      Currently it's assumed that firmware exports only the class of sensors
      supported by the driver. However with newer firmware or SCPI protocol
      revision, support for newer classes of sensors can be present.

      The driver fails to probe with the following warning if an unsupported
      class of sensor is encountered in the firmware.

      sysfs: cannot create duplicate filename
        '/devices/platform/scpi/scpi:sensors/hwmon/hwmon0/'
      ------------[ cut here ]------------
      WARNING: at fs/sysfs/dir.c:31
      Modules linked in:

      CPU: 0 PID: 6 Comm: kworker/u12:0 Not tainted 4.3.0-rc7 #137
      Hardware name: ARM Juno development board (r0) (DT)
      Workqueue: deferwq deferred_probe_work_func
      PC is at sysfs_warn_dup+0x54/0x78
      LR is at sysfs_warn_dup+0x54/0x78

      This patch fixes the above issue by skipping through the unsupported
      class of SCPI sensors.

      Fixes: 68acc77a2d51 ("hwmon: Support thermal zones registration for SCP 
temperature sensors")
      Fixes: ea98b29a05e9 ("hwmon: Support sensors exported via ARM SCP 
interface")
      Cc: Guenter Roeck <linux@xxxxxxxxxxxx>
      Reviewed-by: Punit Agrawal <punit.agrawal@xxxxxxx>
      Signed-off-by: Sudeep Holla <sudeep.holla@xxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit d42d5b6f729929f2bbd17d22a2b223b7138470da
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Nov 16 17:56:39 2015 +0100

      hwmon: (scpi) add thermal-of dependency

      The newly added scpi thermal support is broken when the scpi driver
      is built-in but the thermal driver is a loadable module:

      drivers/built-in.o: In function `scpi_hwmon_probe':
      (.text+0x444d70): undefined reference to 
`thermal_zone_of_sensor_unregister'
      (.text+0x444d94): undefined reference to `thermal_zone_of_sensor_register'
      drivers/built-in.o: In function `scpi_hwmon_remove':
      (text+0x444e6c): undefined reference to 
`thermal_zone_of_sensor_unregister'

      This uses the same Kconfig trick that we have in a couple of other
      drivers already to ensure we can only select the driver in valid
      configurations when either THERMAL_OF is disabled, or when with a
      dependency on CONFIG_THERMAL that can force SCPI to be a loadable
      module in the case I was hitting.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: 68acc77a2d51 ("hwmon: Support thermal zones registration for SCP 
temperature sensors")
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit ef83b6e8f40bb24b92ad73b5889732346e54a793
  Author: Dan Williams <dan.j.williams@xxxxxxxxx>
  Date:   Tue Sep 29 15:48:11 2015 -0400

      ext2, ext4: warn when mounting with dax enabled

      Similar to XFS warn when mounting DAX while it is still considered under
      development.  Also, aspects of the DAX implementation, for example
      synchronization against multiple faults and faults causing block
      allocation, depend on the correct implementation in the filesystem.  The
      maturity of a given DAX implementation is filesystem specific.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: "Theodore Ts'o" <tytso@xxxxxxx>
      Cc: Matthew Wilcox <willy@xxxxxxxxxxxxxxx>
      Cc: linux-ext4@xxxxxxxxxxxxxxx
      Cc: Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx>
      Reported-by: Dave Chinner <david@xxxxxxxxxxxxx>
      Acked-by: Jan Kara <jack@xxxxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit 59536da34513c594af2a6fd35ba65ea45b6960a1
  Author: Bjørn Mork <bjorn@xxxxxxx>
  Date:   Mon Nov 16 13:15:46 2015 +0100

      USB: qcserial: Fix support for HP lt4112 LTE/HSPA+ Gobi 4G Modem

      The DEVICE_HWI type was added under the faulty assumption that Huawei
      devices based on Qualcomm chipsets and firmware use the static USB
      interface numbering known from Gobi devices.  But this model does
      not apply to Huawei devices like the HP branded lt4112 (Huawei me906e).
      Huawei firmwares will dynamically assign interface numbers. Functions
      are renumbered when the firmware is reconfigured.

      Fix by changing the DEVICE_HWI type to use a simplified version
      of Huawei's subclass + protocol scheme: Blacklisting known network
      interface combinations and assuming the rest are serial.

      Reported-and-tested-by: Muri Nicanor <muri+libqmi@xxxxxxxxxx>
      Tested-by: Martin Hauke <mardnh@xxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Fixes: e7181d005e84 ("USB: qcserial: Add support for HP lt4112 LTE/HSPA+ 
Gobi 4G Modem")
      Signed-off-by: Bjørn Mork <bjorn@xxxxxxx>
      Signed-off-by: Johan Hovold <johan@xxxxxxxxxx>

  commit 0ba58de231066e47de87ccc4d61c5e396fe9bd27
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Thu Aug 27 22:06:52 2015 +0200

      drivers: sh: Get rid of CONFIG_ARCH_SHMOBILE_MULTI

      Shmobile is all multiplatform these days, so get rid of the reference to
      CONFIG_ARCH_SHMOBILE_MULTI.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Simon Horman <horms+renesas@xxxxxxxxxxxx>

  commit 2c2025b41aeff57963f9ae2dd909fea704c625ab
  Author: Aaro Koskinen <aaro.koskinen@xxxxxx>
  Date:   Tue Oct 27 23:26:33 2015 +0200

      usb: phy: omap-otg: fix uninitialized pointer

      otg_dev->extcon was referenced before otg_dev was initialized. Fix.

      Cc: <stable@xxxxxxxxxxxxxxx> # v4.3
      Fixes: a2fd2423240f ("usb: phy: omap-otg: Replace deprecated API of 
extcon")
      Reviewed-by: Chanwoo Choi <cw00.choi@xxxxxxxxxxx>
      Signed-off-by: Aaro Koskinen <aaro.koskinen@xxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 705e63d2b29c8bbf091119084544d353bda70393
  Author: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
  Date:   Fri Oct 23 09:53:50 2015 +0200

      usb: musb: core: fix order of arguments to ulpi write callback

      There is a bit of a mess in the order of arguments to the ulpi write
      callback. There is

        int ulpi_write(struct ulpi *ulpi, u8 addr, u8 val)

      in drivers/usb/common/ulpi.c;

        struct usb_phy_io_ops {
                ...
                int (*write)(struct usb_phy *x, u32 val, u32 reg);
        }

      in include/linux/usb/phy.h.

      The callback registered by the musb driver has to comply to the latter,
      but up to now had "offset" first which effectively made the function
      broken for correct users. So flip the order and while at it also
      switch to the parameter names of struct usb_phy_io_ops's write.

      Fixes: ffb865b1e460 ("usb: musb: add ulpi access operations")
      Signed-off-by: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit b4c580a43d520b7812c0fd064fbab929ce2f1da0
  Author: Heikki Krogerus <heikki.krogerus@xxxxxxxxxxxxxxx>
  Date:   Wed Oct 21 14:37:04 2015 +0300

      usb: dwc3: pci: add support for Intel Broxton SOC

      PCI IDs for Broxton based platforms.

      Signed-off-by: Heikki Krogerus <heikki.krogerus@xxxxxxxxxxxxxxx>
      Signed-off-by: Felipe Balbi <balbi@xxxxxx>

  commit 43c27fb5c21eb238ce5ffc7766bc59ab773bfd7c
  Author: Chunming Zhou <David1.Zhou@xxxxxxx>
  Date:   Thu Nov 12 15:33:09 2015 +0800

      drm/amdgpu: update pd while updating vm as well

      Change-Id: I93a861cd6707f7d91672b9e19757cc50008cd7a2
      Signed-off-by: Chunming Zhou <David1.Zhou@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>

  commit 5d82730af746abca2aa74e00de6370d338df7e95
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Fri Nov 13 13:04:50 2015 +0100

      drm/amdgpu: fix handling order in scheduler CS

      We need to clear parser.ibs and num_ibs before amd_sched_fence_create,
      otherwise the IB could be freed twice if fence creates fails.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Chunming Zhou <david1.zhou@xxxxxxx>

  commit e284022163716ecf11c37fd1057c35d689ef2c11
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Thu Nov 5 19:49:48 2015 +0100

      drm/amdgpu: fix incorrect mutex usage v3

      Before this patch the scheduler fence was created when we push the job
      into the queue, so we could only get the fence after pushing it.

      The mutex now was necessary to prevent the thread pushing the jobs to
      the hardware from running faster than the thread pushing the jobs into
      the queue.

      Otherwise the thread pushing jobs into the queue would have accessed
      possible freed up memory when it tries to get a reference to the fence.

      So what you get in the end is thread A:
      mutex_lock(&job->lock);
      ...
      Kick of thread B.
      ...
      mutex_unlock(&job->lock);

      And thread B:
      mutex_lock(&job->lock);
      ....
      mutex_unlock(&job->lock);
      kfree(job);

      I'm actually not sure if I'm still up to date on this, but this usage
      pattern used to be not allowed with mutexes. See here as well
      https://lwn.net/Articles/575460/.

      v2: remove unrelated changes, fix missing owner
      v3: rebased, add more commit message

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 4a562283376197722b295d27633134401bbc80f5
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Fri Nov 6 14:09:21 2015 +0100

      drm/amdgpu: cleanup scheduler fence get/put dance

      The code was correct, but getting two references when the ownership
      is linearly moved on is a bit awkward and just overhead.

      Signed: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 7034decf6a5b1ff778d83ff9d7ce1f0b404804e4
  Author: Chunming Zhou <David1.Zhou@xxxxxxx>
  Date:   Wed Nov 11 14:56:00 2015 +0800

      drm/amdgpu: add command submission workflow tracepoint

      OGL needs these tracepoints to investigate performance issue.

      Change-Id: I5e58187d061253f7d665dfce8e4e163ba91d3e2b
      Signed-off-by: Chunming Zhou <David1.Zhou@xxxxxxx>

  commit 5f2e816b2957fdde3c7d51d55db6751a980f4bea
  Author: Flora Cui <Flora.Cui@xxxxxxx>
  Date:   Thu Nov 5 09:50:21 2015 +0800

      drm/amdgpu: update Fiji's tiling mode table

      Change-Id: I925c15015390113f7e27746ec5751eaa6a92c2a7
      Signed-off-by: Flora Cui <Flora.Cui@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit c305fd5fffae5b826b9f8f7ef32fe72ee83354fc
  Author: Rex Zhu <Rex.Zhu@xxxxxxx>
  Date:   Tue Oct 13 13:57:52 2015 +0800

      drm/amdgpu: fix bug that can't enter thermal interrupt for bonaire.

      Set reversed bit to enable/disable thermal interrupt.

      Signed-off-by: Rex Zhu <Rex.Zhu@xxxxxxx>
      Reviewed-by: Jammy Zhou <Jammy.Zhou@xxxxxxx>

  commit e1b35f6103b37e0d81184b32906b7010170dda02
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Tue Nov 10 13:17:55 2015 +0100

      drm/amdgpu: fix seq_printf format string

      The amdgpu driver has a debugfs interface that shows the amount of
      VRAM in use, but the newly added code causes a build error on
      all 32-bit architectures:

      drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c:1076:17: warning: format '%lu' 
expects argument of type 'long unsigned int', but argument 4 has type 'long 
long int' [-Wformat=]

      This fixes the format string to use "%llu" for printing 64-bit
      numbers, which works everywhere, as long as we also cast to 'u64'.
      Unlike atomic64_t, u64 is defined as 'unsigned long long' on
      all architectures.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: a2ef8a974931 ("drm/amdgpu: add vram usage into debugfs")
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 515c752dabee9945c1e8686c87f7cdeb3935eea4
  Author: Maxim Sheviakov <mrader3940@xxxxxxxxx>
  Date:   Tue Nov 10 13:09:13 2015 -0500

      drm/radeon: fix quirk for MSI R7 370 Armor 2X

      There was a typo in the original.

      bug:
      https://bugs.freedesktop.org/show_bug.cgi?id=92865

      Signed-off-by: Maxim Sheviakov <mrader3940@xxxxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit a80b30476d240482d360a25a1b2e8c13036ed750
  Author: Jay Cornwall <jay@xxxxxxxxxxxx>
  Date:   Thu Nov 5 13:06:15 2015 -0600

      drm/amdgpu: Fix default page access routing

      The VM default page (used when a VM translation fails) is allocated in
      system memory. The VM is misconfigured to interpret the physical address
      as referencing a VRAM physical page.

      Route default page accesses to system memory.

      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Signed-off-by: Jay Cornwall <jay@xxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # v4.2+
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 24dd2f64c5a877392925202321c7c2c46c2b0ddf
  Author: Alex Deucher <alexander.deucher@xxxxxxx>
  Date:   Tue Nov 10 13:01:35 2015 -0500

      drm/radeon: unconditionally set sysfs_initialized

      Avoids spew on resume for systems where sysfs may
      fail even on init.

      bug:
      https://bugzilla.kernel.org/show_bug.cgi?id=106851

      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 7e52a81c2f0326a85d3ebc005829bcd604731c6d
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Wed Nov 4 15:44:39 2015 +0100

      drm/amdgpu: cleanup amdgpu_cs_parser handling

      No need any more to allocate that structure dynamically, just put it on 
the
      stack. This is a start to cleanup some of the scheduler fallouts.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Junwei Zhang <Jerry.Zhang@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit e4a58a28b50f30e72292b6659d94410cbf7355ad
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Thu Nov 5 17:00:25 2015 +0100

      drm/amdgpu: fix leaking the IBs on error

      Fixing a memory leak when the scheduler is enabled.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Junwei Zhang <Jerry.Zhang@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit f5617f9dde5ae2466560f7cb008c741e2b88adab
  Author: Chunming Zhou <David1.Zhou@xxxxxxx>
  Date:   Thu Nov 5 11:41:50 2015 +0800

      drm/amd: add kmem cache for sched fence

      Change-Id: I45bb8ff10ef05dc3b15e31a77fbcf31117705f11
      Signed-off-by: Chunming Zhou <David1.Zhou@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>

  commit b49c84a5765cf68b8e2fdb1dc4eded9c208e6d58
  Author: Chunming Zhou <David1.Zhou@xxxxxxx>
  Date:   Thu Nov 5 11:28:28 2015 +0800

      drm/amdgpu: add kmem cache for amdgpu fence

      Change-Id: I5ad8dd156ccf27a6f18004aa0a215a0925b6e67b
      Signed-off-by: Chunming Zhou <David1.Zhou@xxxxxxx>
      Reviewed-by: Christian König <christian.koenig@xxxxxxx>

  commit 451f698bcac84c49dd4e25dd8e89dbd66796b4cd
  Author: Flora Cui <Flora.Cui@xxxxxxx>
  Date:   Thu Nov 5 15:24:46 2015 +0800

      drm/amdgpu: update fiji_mgcg_cgcg_init table

      Change-Id: If44b8057741c78208f1976f60f31b535c944d0bd
      Signed-off-by: Flora Cui <Flora.Cui@xxxxxxx>
      Reviewed-by: Jammy Zhou <Jammy.Zhou@xxxxxxx>

  commit 16ae42feb0ce6cc80473d35dd82a1cd07e2e7178
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Tue Nov 3 14:53:28 2015 +0100

      drm/amdgpu: use common fence for amdgpu_vm_fence

      Just cleanup the function parameters.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Chunming Zhou <david1.zhou@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit b56c22853eabde22a93d77bbd5250c1655405d74
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Thu Oct 29 17:01:19 2015 +0100

      drm/amdgpu: use fence_is_later() for vm_flush as well v2

      v2: remove superfluous check

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx> (v1)
      Reviewed-by: Chunming Zhou <david1.zhou@xxxxxxx>

  commit c2776afe740db5598c4c457dcacb94d4427b13f9
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Tue Nov 3 13:27:39 2015 +0100

      drm/amdgpu: use a timer for fence fallback

      Less overhead than a work item and also adds proper cleanup handling.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Chunming Zhou <david1.zhou@xxxxxxx>
      Acked-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 935c186aaecc25258495351adaba34f7c507d298
  Author: Christian König <christian.koenig@xxxxxxx>
  Date:   Tue Nov 3 21:23:08 2015 +0100

      drm/amdgpu: remove fence trace points

      Mostly unused and replaced by the common trace points.

      Signed-off-by: Christian König <christian.koenig@xxxxxxx>
      Reviewed-by: Chunming Zhou <david1.zhou@xxxxxxx>
      Acked-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit fa6760482bed1ed752568fe09135c078e9768595
  Author: Flora Cui <Flora.Cui@xxxxxxx>
  Date:   Fri Oct 30 18:29:46 2015 +0800

      drm/amdgpu: update Fiji's mmPA_SC_RASTER_CONFIG value

      Change-Id: I6d138306a878450e5bf8a77a2f1aacc380a39fe5
      Signed-off-by: Flora Cui <Flora.Cui@xxxxxxx>
      Reviewed-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 938204985c1c46c28a88cb558d9e38610044b67a
  Author: Michel Dänzer <michel.daenzer@xxxxxxx>
  Date:   Thu Nov 5 17:25:28 2015 +0900

      drm/radeon: Only prompt for enabling PAT when we'd allow write-combining

      No use bothering users about this for whom we disable write-combining for
      other reasons anyway.

      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Signed-off-by: Michel Dänzer <michel.daenzer@xxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit a28bbd5824d4a2af98de45b300ab8d8fb39739fc
  Author: Michel Dänzer <michel.daenzer@xxxxxxx>
  Date:   Thu Nov 5 17:25:27 2015 +0900

      drm/radeon: Always disable RADEON_GEM_GTT_UC along with RADEON_GEM_GTT_WC

      Write-combining is a CPU feature. From the GPU POV, these both simply
      mean no GPU<->CPU cache coherency.

      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Signed-off-by: Michel Dänzer <michel.daenzer@xxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 96ea47c0ec8c012509116bee8c57414281428fc4
  Author: Michel Dänzer <michel.daenzer@xxxxxxx>
  Date:   Thu Nov 5 17:25:26 2015 +0900

      drm/radeon: Disable uncacheable CPU mappings of GTT with RV6xx

      They reportedly cause random GPU hangs.

      Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=91268

      Reviewed-by: Christian König <christian.koenig@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Michel Dänzer <michel.daenzer@xxxxxxx>
      Signed-off-by: Alex Deucher <alexander.deucher@xxxxxxx>

  commit 172c238612ebf81cabccc86b788c9209af591f61
  Author: Mike Snitzer <snitzer@xxxxxxxxxx>
  Date:   Fri Nov 6 10:53:01 2015 -0500

      dm thin: restore requested 'error_if_no_space' setting on OODS to WRITE 
transition

      A thin-pool that is in out-of-data-space (OODS) mode may transition back
      to write mode -- without the admin adding more space to the thin-pool --
      if/when blocks are released (either by deleting thin devices or
      discarding provisioned blocks).

      But as part of the thin-pool's earlier transition to out-of-data-space
      mode the thin-pool may have set the 'error_if_no_space' flag to true if
      the no_space_timeout expires without more space having been made
      available.  That implementation detail, of changing the pool's
      error_if_no_space setting, needs to be reset back to the default that
      the user specified when the thin-pool's table was loaded.

      Otherwise we'll drop the user requested behaviour on the floor when this
      out-of-data-space to write mode transition occurs.

      Reported-by: Vivek Goyal <vgoyal@xxxxxxxxxx>
      Signed-off-by: Mike Snitzer <snitzer@xxxxxxxxxx>
      Acked-by: Joe Thornber <ejt@xxxxxxxxxx>
      Fixes: 2c43fd26e4 ("dm thin: fix missing out-of-data-space to write mode 
transition if blocks are released")
      Cc: stable@xxxxxxxxxxxxxxx

  commit fd0fe6acf1dd88aabfbf383f7e4c16315387a7b7
  Author: Imre Deak <imre.deak@xxxxxxxxx>
  Date:   Wed Nov 4 21:25:32 2015 +0200

      drm/i915: get runtime PM reference around GEM set_caching IOCTL

      After Damien's D3 fix I started to get runtime suspend residency for the
      first time and that revealed a breakage on the set_caching IOCTL path
      that accesses the HW but doesn't take an RPM ref. Fix this up.

      Signed-off-by: Imre Deak <imre.deak@xxxxxxxxx>
      Reviewed-by: Paulo Zanoni <paulo.r.zanoni@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Link: 
http://patchwork.freedesktop.org/patch/msgid/1446665132-22491-1-git-send-email-imre.deak@xxxxxxxxx
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 500a3d2eb3883b71350036e15aad286cc6e5df21
  Author: Mika Kuoppala <mika.kuoppala@xxxxxxxxxxxxxxx>
  Date:   Fri Nov 13 19:29:41 2015 +0200

      drm/i915: Fix GT frequency rounding

      When we set and later readback a frequency value through
      sysfs interface, igt/pm_rpm assumes that we get same value back
      if it matches hw granularity.

      On bxt we have found out that this is not always the case.
      Currently frequency - hw ratio - frequency conversions round down,
      with few exceptions on platforms that have more specific conversions.
      On bxt the supported range can be for example from 100Mhz to 650Mhz.
      Midpoint is then calculated by test to be 375 which pm_rps uses to find a
      closest hw supported frequency. That is 366 (ratio 22),
      which it then writes back. But as the rounding down kicks in,
      driver actually sets 350 instead of 366, as 366 is 2/3 below 22 * 50/3.

      Fix this by rounding to closest instead of rounding down in
      freq-ratio-freq conversions.

      Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=92768
      Testcase: igt/pm_rps/basic-api
      Tested-by: Bob Paauwe <bob.j.paauwe@xxxxxxxxx>
      Cc: Bob Paauwe <bob.j.paauwe@xxxxxxxxx>
      Signed-off-by: Imre Deak <imre.deak@xxxxxxxxx>
      Signed-off-by: Mika Kuoppala <mika.kuoppala@xxxxxxxxx>
      Reviewed-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      Reviewed-by: Bob Paauwe <bob.j.paauwe@xxxxxxxxx>
      Link: 
http://patchwork.freedesktop.org/patch/msgid/1447435781-23416-1-git-send-email-mika.kuoppala@xxxxxxxxx
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit 1bcb49e663f88bccee35b8688e6a3da2bea31fd4
  Author: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
  Date:   Sat Nov 14 16:49:30 2015 +0000

      USB: ti_usb_3410_5052: Add Honeywell HGI80 ID

      The Honeywell HGI80 is a wireless interface to the evohome connected
      thermostat. It uses a TI 3410 USB-serial port.

      Signed-off-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Johan Hovold <johan@xxxxxxxxxx>

  commit e07af133c3e2716db25e3e1e1d9f10c2088e9c1a
  Author: Aleksander Morgado <aleksander@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 19:51:40 2015 +0100

      USB: serial: option: add support for Novatel MiFi USB620L

      Also known as Verizon U620L.

      The device is modeswitched from 1410:9020 to 1410:9022 by selecting the
      4th USB configuration:

       $ sudo usb_modeswitch â??v 0x1410 â??p 0x9020 â??u 4

      This configuration provides a ECM interface as well as TTYs ('Enterprise
      Mode' according to the U620 Linux integration guide).

      Signed-off-by: Aleksander Morgado <aleksander@xxxxxxxxxxxxx>
      Cc: stable <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Johan Hovold <johan@xxxxxxxxxx>

  commit 9d5b5ed796d7afd7e8d2ac4b4fb77c6a49463f4b
  Author: Petr Å tetiar <ynezz@xxxxxxx>
  Date:   Tue Nov 3 11:25:28 2015 +0100

      USB: qcserial: Add support for Quectel EC20 Mini PCIe module

      It seems like this device has same vendor and product IDs as G2K
      devices, but it has different number of interfaces(4 vs 5) and also
      different interface layout which makes it currently unusable:

        usbcore: registered new interface driver qcserial
        usbserial: USB Serial support registered for Qualcomm USB modem
        usb 2-1.2: unknown number of interfaces: 5

      lsusb output:

        Bus 002 Device 003: ID 05c6:9215 Qualcomm, Inc. Acer Gobi 2000 Wireless
        Device Descriptor:
          bLength                18
          bDescriptorType         1
          bcdUSB               2.00
          bDeviceClass            0 (Defined at Interface level)
          bDeviceSubClass         0
          bDeviceProtocol         0
          bMaxPacketSize0        64
          idVendor           0x05c6 Qualcomm, Inc.
          idProduct          0x9215 Acer Gobi 2000 Wireless Modem
          bcdDevice            2.32
          iManufacturer           1 Quectel
          iProduct                2 Quectel LTE Module
          iSerial                 0
          bNumConfigurations      1
          Configuration Descriptor:
            bLength                 9
            bDescriptorType         2
            wTotalLength          209
            bNumInterfaces          5
            bConfigurationValue     1
            iConfiguration          0
            bmAttributes         0xa0
              (Bus Powered)
              Remote Wakeup
            MaxPower              500mA

      Signed-off-by: Petr Å tetiar <ynezz@xxxxxxx>
      Cc: stable <stable@xxxxxxxxxxxxxxx>
      [johan: rename define and add comment ]
      Signed-off-by: Johan Hovold <johan@xxxxxxxxxx>

  commit 1b9448b071caa7d10bb2569fabe3020a2c25ae59
  Author: Jani Nikula <jani.nikula@xxxxxxxxx>
  Date:   Thu Nov 5 11:49:59 2015 +0200

      drm/i915: quirk backlight present on Macbook 4, 1

      Unsurprisingly macbooks have backlights, just the VBT doesn't seem to
      know it in this case.

      Reported-and-tested-by: Daniel Nicoletti <dantti12@xxxxxxxxx>
      Bugzilla: https://bugs.freedesktop.org/show_bug.cgi?id=88325
      Fixes: c675949ec58c ("drm/i915: do not setup backlight if not available 
according to VBT")
      Cc: stable@xxxxxxxxxxxxxxx # v3.15+
      Reviewed-by: Ander Conselvan de Oliveira <conselvan2@xxxxxxxxx>
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>
      Link: 
http://patchwork.freedesktop.org/patch/msgid/1446716999-1796-1-git-send-email-jani.nikula@xxxxxxxxx

  commit f44e26593aea9b920e892fc490ffd2a1a0b9123f
  Author: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
  Date:   Fri Nov 13 19:16:13 2015 +0200

      drm/i915: Fix crtc_y assignment in intel_find_initial_plane_obj()

      Let's set crtc_y to 0 instead of setting src_y twice.

      Multiple assignments in one statement is a good way to hide bugs.
      Please don't do that.

      Cc: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Fixes: be5651f2d581 ("drm/i915: Update missing properties in 
find_initial_plane_obj")
      Signed-off-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      Reviewed-by: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
      Link: 
http://patchwork.freedesktop.org/patch/msgid/1447434973-12369-1-git-send-email-ville.syrjala@xxxxxxxxxxxxxxx
      Signed-off-by: Jani Nikula <jani.nikula@xxxxxxxxx>

  commit c7f42c63901b964833eb23a9bda873b799e7f308
  Author: Jean-Yves Faye <jean-yves.faye@xxxxxx>
  Date:   Tue Sep 29 11:39:19 2015 +0200

      ipmi watchdog : add panic_wdt_timeout parameter

      In order to allow panic actions to be processed, the ipmi watchdog
      driver sets a new timeout value on panic. The 255s timeout
      was designed to allow kdump and others actions on panic, as in
      http://lkml.iu.edu/hypermail/linux/kernel/0711.3/0258.html

      This is counter-intuitive for a end-user who sets watchdog timeout
      value to something like 30s and who expects BMC to reset the system
      within 30s of a panic.

      This commit allows user to configure the timeout on panic.

      Signed-off-by: Jean-Yves Faye <jean-yves.faye@xxxxxx>
      Signed-off-by: Corey Minyard <cminyard@xxxxxxxxxx>

  commit f52c74fee95f1f4dd2bc1c75e016d849150eb2de
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Fri Nov 13 14:17:14 2015 +0100

      s390: remove SALIPL loader

      There is no known user, therefore remove the code.

      Acked-by: Rob Van Der Heij <robvdheij@xxxxxxxxxx>
      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 932f608193cdbd3a275a4aefb94760dfd4a1f736
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Mon Nov 16 12:31:33 2015 +0100

      s390: wire up mlock2 system call

      Passes mlock2-tests test case in 64 bit and compat mode.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 95486e4979e56e7da2fbb4fd32eb54d672b1e074
  Author: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
  Date:   Mon Nov 16 12:07:10 2015 +0100

      MIPS: Fix flood of warnings about comparsion being always true.

      ./arch/mips/include/asm/page.h:204:13: warning: comparison of unsigned 
expression &gt;= 0 is always true [-Wtype-limits]

      The default value of ARCH_PFN_OFFSET is 0 thus triggering this warning
      for all platforms using the default value.

      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit ddfd4a054b91def32cd1fe214f0a4d5506bb553b
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Fri Nov 13 12:45:12 2015 +0100

      s390: remove g5 elf platform support

      Remove dead code, since this could only happen on a 31 bit machine
      where the kernel wouldn't IPL.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit c7e8b2c21c6a6fd88022ae64f997ebc574036067
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Tue Nov 10 12:30:28 2015 +0100

      s390: avoid cache aliasing under z/VM and KVM

      commit 1f6b83e5e4d3 ("s390: avoid z13 cache aliasing") checks for the
      machine type to optimize address space randomization and zero page
      allocation to avoid cache aliases.

      This check might fail under a hypervisor with migration support.
      z/VMs "Single System Image and Live Guest Relocation" facility will
      "fake" the machine type of the oldest system in the group. For example
      in a group of zEC12 and Z13 the guest appears to run on a zEC12
      (architecture fencing within the relocation domain)

      Remove the machine type detection and always use cache aliasing
      rules that are known to work for all machines. These are the z13
      aliasing rules.

      Suggested-by: Christian Borntraeger <borntraeger@xxxxxxxxxx>
      Reviewed-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit bd1c6ff74ce0bbd8cda6eb7763fa0e2625dfcc8b
  Author: Robin Murphy <robin.murphy@xxxxxxx>
  Date:   Wed Nov 4 13:23:52 2015 +0000

      arm64/dma-mapping: Fix sizes in __iommu_{alloc,free}_attrs

      The iommu-dma layer does its own size-alignment for coherent DMA
      allocations based on IOMMU page sizes, but we still need to consider
      CPU page sizes for the cases where a non-cacheable CPU mapping is
      created. Whilst everything on the alloc/map path seems to implicitly
      align things enough to make it work, some functions used by the
      corresponding unmap/free path do not, which leads to problems freeing
      odd-sized allocations. Either way it's something we really should be
      handling explicitly, so do that to make both paths suitably robust.

      Reported-by: Yong Wu <yong.wu@xxxxxxxxxxxx>
      Signed-off-by: Robin Murphy <robin.murphy@xxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 1451ad03fac3e86948728e0b11f63dee73d3106c
  Author: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
  Date:   Wed Nov 11 21:54:26 2015 +1100

      powerpc: Wire up sys_mlock2()

      The selftest passes on 64-bit LE and 32-bit BE.

      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>

  commit 5e0a0ee4d397665e5a509ed03ed9c41727c5f228
  Author: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
  Date:   Thu Nov 5 15:39:27 2015 -0700

      hwmon : (applesmc) Fix uninitialized variables warnings

      Fix the following "maybe used uninitialized" warnings by
      initializing the variables to keep the compiler quiet.
      There is no "used uninitialized" in this case.

        CC [M]  drivers/hwmon/applesmc.o
      drivers/hwmon/applesmc.c: In function â??applesmc_init_smcregâ??:
      drivers/hwmon/applesmc.c:595:43: warning: â??right_light_sensorâ??
      may be used uninitialized in this function [-Wmaybe-uninitialized]
        s->num_light_sensors = left_light_sensor + right_light_sensor;
                                                 ^
      drivers/hwmon/applesmc.c:540:26: note: â??right_light_sensorâ?? was
      declared here
        bool left_light_sensor, right_light_sensor;
                                ^
      drivers/hwmon/applesmc.c:595:43: warning: â??left_light_sensorâ?? may
      be used uninitialized in this function [-Wmaybe-uninitialized]
        s->num_light_sensors = left_light_sensor + right_light_sensor;
                                                 ^
      drivers/hwmon/applesmc.c:540:7: note: â??left_light_sensorâ?? was
      declared here
        bool left_light_sensor, right_light_sensor;
             ^

      Signed-off-by: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 92e11f002cac5f6d60bc7498d8d33e6a5fb9cb6f
  Author: Li Yang <leoli@xxxxxxxxxxxxx>
  Date:   Thu Nov 5 14:18:17 2015 -0600

      hwmon: (ina2xx) Fix build issue by selecting REGMAP_I2C

      Since a0de56c81fcf ("hwmon: (ina2xx) convert driver to using regmap")
      the driver requires REGMAP_I2C to build.  Select it by default
      in Kconfig.

      Reported-by: Guo Chunrong <B40290@xxxxxxxxxxxxx>
      Cc: Marc Titinger <mtitinger@xxxxxxxxxxxx>
      Signed-off-by: Li Yang <leoli@xxxxxxxxxxxxx>
      Fixes: a0de56c81fcf ("hwmon: (ina2xx) convert driver to using regmap")
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>

  commit 2c5d7407e012721f02741f1adae2b1bdf6ef6449
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Thu Nov 12 15:18:22 2015 +0100

      dmaengine: at_hdmac: use %pad format string for dma_addr_t

      dma_addr_t may be defined as 32 or 64 bit depending on configuration,
      so it cannot be printed using the normal format strings, as
      gcc correctly warns:

      drivers/dma/at_hdmac.c: In function 'atc_prep_dma_interleaved':
      drivers/dma/at_hdmac.c:731:28: warning: format '%x' expects argument of 
type 'unsigned int', but argument 4 has type 'dma_addr_t {aka long long 
unsigned int}' [-Wformat=]

      This changes the format strings to use the special "%pad" format
      string that prints a dma_addr_t, and changes the arguments so we
      pass the address by reference as required.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Acked-by: Nicolas Ferre <nicolas.ferre@xxxxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit 268914f4e7a013a4798b5544cce9d9584de99889
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Thu Nov 12 15:16:53 2015 +0100

      dmaengine: at_xdmac: use %pad format string for dma_addr_t

      dma_addr_t may be defined as 32 or 64 bit depending on configuration,
      so it cannot be printed using the normal format strings, as
      gcc correctly warns:

      drivers/dma/at_xdmac.c: In function 'at_xdmac_interleaved_queue_desc':
      drivers/dma/at_xdmac.c:922:51: warning: format '%x' expects argument of 
type 'unsigned int', but argument 5 has type 'dma_addr_t {aka long long 
unsigned int}' [-Wformat=]

      This changes the format strings to use the special "%pad" format
      string that prints a dma_addr_t, and changes the arguments so we
      pass the address by reference as required.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit 29f493dafa6113d28763e9efb853e6972b41ade5
  Author: Jason Liu <r64343@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 17:20:49 2015 +0800

      dmaengine: imx-sdma: remove __init annotation on sdma_event_remap

      The sdma_probe function will call sdma_event_remap, but sdma_event_remap
      marked with the __init annotation which make the kbuild complains as the
      following log:

      WARNING: drivers/dma/built-in.o(.text+0x56fc): Section mismatch in 
reference
      from the function sdma_probe() to the function 
.init.text:sdma_event_remap()
      The function sdma_probe() references
      the function __init sdma_event_remap().
      This is often because sdma_probe lacks a __init
      annotation or the annotation of sdma_event_remap is wrong.

      Remove the __init annotation on sdma_event_remap to kill this build 
warning

      Signed-off-by: Jason Liu <r64343@xxxxxxxxxxxxx>
      Acked-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit f5ea7ad252452f0b461e04a0d0e468f1f6ad8b3b
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Nov 4 16:38:31 2015 +0300

      dmaengine: edma: predecence bug in GET_NUM_QDMACH()

      The current code uses bits 0-2 instead of 4-6 as the comment says.

      Fixes: 633e42b8c546 ('dmaengine: edma: Get qDMA channel information from 
HW also')
      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Acked-by: Peter Ujfalusi <peter.ujfalusi@xxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit 638bdc8ce845285e1112f4870aded1638187fc98
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Tue Nov 3 15:00:57 2015 +0100

      dmaengine: edma: fix build without CONFIG_OF

      During the edma rework, a build error was introduced for the
      case that CONFIG_OF is disabled:

      drivers/built-in.o: In function `edma_tc_set_pm_state':
      :(.text+0x43bf0): undefined reference to `of_find_device_by_node'

      As the edma_tc_set_pm_state() function does nothing in case
      we are running without OF, this adds an IS_ENABLED() check
      that turns the function into an empty stub then and avoids the
      link error.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: ca304fa9bb76 ("ARM/dmaengine: edma: Public API to use private 
struct pointer")
      Acked-by: Peter Ujfalusi <peter.ujfalusi@xxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit 500404ebcbd074ca11aa0c3fd9a268aa4054fd8b
  Author: Peter Ujfalusi <peter.ujfalusi@xxxxxx>
  Date:   Tue Nov 3 12:28:10 2015 +0200

      dmaengine: of_dma: Correct return code for of_dma_request_slave_channel 
in case !CONFIG_OF

      of_dma_request_slave_channel should return either pointer for valid
      dma_chan or ERR_PTR() error code, NULL is not expected to be returned.

      Signed-off-by: Peter Ujfalusi <peter.ujfalusi@xxxxxx>
      Acked-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit bf55555baaf80cdf2cc4176fee02545a07a8ff4a
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Sun Oct 25 11:09:34 2015 +0100

      dmaengine: sh: usb-dmac: Fix pm_runtime_{enable,disable}() imbalance

      If the call to pm_runtime_get_sync() failed, Runtime PM was left
      enabled.

      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit 36fa4a530b7798aa85789953b08d94c03fb09fa5
  Author: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
  Date:   Sun Oct 25 11:09:33 2015 +0100

      dmaengine: sh: usb-dmac: Fix crash on runtime suspend

      If CONFIG_PREEMPT=y:

          Unable to handle kernel NULL pointer dereference at virtual address 
00000014
          pgd = c0003000
          [00000014] *pgd=80000040004003, *pmd=00000000
          Internal error: Oops: 206 [#1] PREEMPT SMP ARM
          Modules linked in:
          CPU: 0 PID: 17 Comm: kworker/0:1 Tainted: G        W       
4.3.0-rc3-koelsch-022
          71-g705498fc5e6a5da8-dirty #1789
          Hardware name: Generic R8A7791 (Flattened Device Tree)
          Workqueue: pm pm_runtime_work
          task: ef578e40 ti: ef57a000 task.ti: ef57a000
          PC is at usb_dmac_chan_halt+0xc/0xc0
          LR is at usb_dmac_runtime_suspend+0x28/0x38
          pc : [<c023c880>]    lr : [<c023c95c>]    psr: 80000113
          sp : ef57bdf8  ip : 00000008  fp : 00000003
          r10: 00000008  r9 : c06ab928  r8 : ef49e810
          r7 : 00000000  r6 : 000000ac  r5 : ef770010  r4 : 00000000
          r3 : 00000000  r2 : 8ffc2b84  r1 : 00000000  r0 : ef770010
          Flags: Nzcv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment kernel
          Control: 30c5307d  Table: 40003000  DAC: fffffffd
          Process kworker/0:1 (pid: 17, stack limit = 0xef57a210)
          Stack: (0xef57bdf8 to 0xef57c000)

          [...

          [<c023c880>] (usb_dmac_chan_halt) from [<c023c95c>] 
(usb_dmac_runtime_suspend+0x28/0x38)
          [<c023c95c>] (usb_dmac_runtime_suspend) from [<c027b25c>] 
(pm_genpd_runtime_suspend+0x74/0x23c)

      This happens because usb_dmac_probe() calls pm_runtime_put() before
      usb_dmac_chan_probe(), leading to the device being suspended before the
      DMA channels are initialized, causing a NULL pointer dereference.

      Move the call to pm_runtime_put() to the end of usb_dmac_probe() to fix
      this.

      Add a check to usb_dmac_runtime_suspend() to prevent the crash from
      happening in the error path.

      Reported-by: Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
      Tested-by: Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx>
      Signed-off-by: Vinod Koul <vinod.koul@xxxxxxxxx>

  commit 66f44018300c5e6f53c9d30d6920332cf0e6a8f9
  Author: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
  Date:   Sat Sep 19 16:43:23 2015 +0100

      char: ipmi: Move MODULE_DEVICE_TABLE() to follow struct

      The policy for drivers is to have MODULE_DEVICE_TABLE() just after the
      struct used in it. For clarity.

      Suggested-by: Corey Minyard <minyard@xxxxxxx>
      Signed-off-by: Luis de Bethencourt <luisbg@xxxxxxxxxxxxxxx>
      Signed-off-by: Corey Minyard <cminyard@xxxxxxxxxx>

  commit 314ef52fe67f8f03453b69169f954e2d04679bbd
  Author: Corey Minyard <cminyard@xxxxxxxxxx>
  Date:   Sat Sep 5 17:58:13 2015 -0500

      ipmi: Stop the timer immediately if idle

      The IPMI driver would let the final timeout just happen, but it could
      easily just stop the timer.  If the timer stop fails that's ok, that
      should be rare.

      Signed-off-by: Corey Minyard <cminyard@xxxxxxxxxx>

  commit 0cfec916e86d881e209de4b4ae9959a6271e6660
  Author: Corey Minyard <cminyard@xxxxxxxxxx>
  Date:   Sat Sep 5 17:44:13 2015 -0500

      ipmi: Start the timer and thread on internal msgs

      The timer and thread were not being started for internal messages,
      so in interrupt mode if something hung the timer would never go
      off and clean things up.  Factor out the internal message sending
      and start the timer for those messages, too.

      Signed-off-by: Corey Minyard <cminyard@xxxxxxxxxx>
      Tested-by: Gouji, Masayuki <gouji.masayuki@xxxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx

  commit 17c790a60dad11c0193127e83ac8e183b4fed1a2
  Merge: 8863002 6a4b298
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Nov 15 20:16:26 2015 -0500

      Merge branch 'mv88e6060-fixes'

      Neil Armstrong says:

      ====================
      net: dsa: mv88e6060: cleanup and fix setup

      This patchset introduces some fixes and a registers addressing cleanup for
      the mv88e6060 DSA driver.

      The first patch removes the poll_link as mv88e6xxx.
      The 3 following patches fixes the setup in regards of the datasheet.
      The 2 last patches introduces a clean header and replaces all magic 
values.

      v2: cleanup InitReady patch, add missing Acked-by and fix header 
copyright notice
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 6a4b2980d18164a09734c2069ddb4ad4a3b69c71
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Tue Nov 10 16:51:36 2015 +0100

      net: dsa: mv88e6060: replace magic values with register defines

      To align with the mv88e6xxx code, use the register defines to
      access all the register addresses and bit fields.

      Acked-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f7e3931181595cd15e22e199d1bbabb0468d5a93
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Tue Nov 10 16:51:42 2015 +0100

      net: dsa: mv88e6060: add register defines header file

      To align with the mv88e6xxx code, add a similar header file
      with all the register defines.
      The file is based on the mv88e6xxx header for coherency.

      Acked-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Acked-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 83ea0f4cb344089b6f240d3793d8c522a8501037
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Tue Nov 10 16:51:32 2015 +0100

      net: dsa: mv88e6060: use the correct bit shift for mac0

      According to the mv88e6060 datasheet, the first mac byte must
      be at position 9 instead of 8 since the bit 8 is used to select
      if the mac address must differ for each port for Pause frames.
      Use the correct shift and set the same mac address for all port.

      Acked-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b73c774e08cf1e8877b000585e8598ecee890c7f
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Tue Nov 10 16:51:24 2015 +0100

      net: dsa: mv88e6060: use the correct MaxFrameSize bit

      According to the mv88e6060 datasheet, the MaxFrameSize bit position
      is 10 instead of 11 which is reserved.
      Use the bit correctly to setup max frame size to 1536.

      Acked-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c37909b4bb24320a59f697439bc77c700ca354fe
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Tue Nov 10 16:51:19 2015 +0100

      net: dsa: mv88e6060: use the correct InitReady bit

      According to the mv88e6060 datasheet, the InitReady bit position
      is 11 and the polarity is inverted.
      Use the bit correctly to detect the end of initialization.

      Acked-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Acked-by: Vivien Didelot <vivien.didelot@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit dc1e7eb846ae6677426c2dcdfe5ea323cf9036e9
  Author: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
  Date:   Tue Nov 10 16:51:14 2015 +0100

      net: dsa: mv88e6060: remove poll_link callback

      As of mv88e6xxx remove the poll_link callback since the link
      state change polling is now handled by the phylib.

      Tested on a mv88e6060 B0 device with a TI DM816X SoC.

      Suggested-by: Andrew Lunn <andrew@xxxxxxx>
      Acked-by: Andrew Lunn <andrew@xxxxxxx>
      Signed-off-by: Neil Armstrong <narmstrong@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8005c49d9aea74d382f474ce11afbbc7d7130bec
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 15 17:00:27 2015 -0800

      Linux 4.4-rc1

  commit 8863002c5acd6f89b6cf57df4dff2248e97381e1
  Merge: 340c78e d49c219
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Nov 15 18:43:47 2015 -0500

      Merge branch 'mellanox-net-fixes'

      Or Gerlitz says:

      ====================
      Mellanox NIC driver update, Nov 12, 2015

      Few small mlx5 and mlx4 fixes from the team... done over
      net commit c5a3788 "Merge branch 'akpm' (patches from Andrew)"

      Eran's patch needs to go to 4.2 and 4.3 stable kernels.

      Tariq's patch need to go to 4.3 stable too.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d49c2197fd70c37d57982804465268440a33183a
  Author: Noa Osherovich <noaos@xxxxxxxxxxxx>
  Date:   Thu Nov 12 19:35:30 2015 +0200

      net/mlx4_core: Avoid returning success in case of an error flow

      The err variable wasn't set with the correct error value in some cases.

      Fixes: 47605df95398 ('mlx4: Modify proxy/tunnel QP mechanism [..]')
      Signed-off-by: Noa Osherovich <noaos@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f5adbfee72282bb1f456d52b04adacd4fe6ac502
  Author: Eran Ben Elisha <eranbe@xxxxxxxxxxxx>
  Date:   Thu Nov 12 19:35:29 2015 +0200

      net/mlx4_core: Fix sleeping while holding spinlock at rem_slave_counters

      When cleaning slave's counter resources, we hold a spinlock that
      protects the slave's counters list. As part of the clean, we call
      __mlx4_clear_if_stat which calls mlx4_alloc_cmd_mailbox which is a
      sleepable function.

      In order to fix this issue, hold the spinlock, and copy all counter
      indices into a temporary array, and release the spinlock. Afterwards,
      iterate over this array and free every counter. Repeat this scenario
      until the original list is empty (a new counter might have been added
      while releasing the counters from the temporary array).

      Fixes: b72ca7e96acf ("net/mlx4_core: Reset counters data when freed")
      Reported-by: Moni Shoua <monis@xxxxxxxxxxxx>
      Tested-by: Moni Shoua <monis@xxxxxxxxxxxx>
      Signed-off-by: Jack Morgenstein <jackm@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Eran Ben Elisha <eranbe@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d4e28cbd24c8cb004960ddb8b22124953f6c220c
  Author: Achiad Shochat <achiad@xxxxxxxxxxxx>
  Date:   Thu Nov 12 19:35:28 2015 +0200

      net/mlx5e: Use the right DMA free function on TX path

      On xmit path we use skb_frag_dma_map() which is using dma_map_page(),
      while upon completion we dma-unmap the skb fragments using
      dma_unmap_single() rather than dma_unmap_page().

      To fix this, we now save the dma map type on xmit path and use this
      info to call the right dma unmap method upon TX completion.

      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Saeed Mahameed <saeedm@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 50a9eea694ab8e0779069e0a4e0b12e145521468
  Author: Doron Tsur <doront@xxxxxxxxxxxx>
  Date:   Thu Nov 12 19:35:27 2015 +0200

      net/mlx5e: Max mtu comparison fix

      On change mtu the driver compares between hardware queried mtu and
      software requested mtu. We need to compare between software
      representation of the queried mtu and the requested mtu.

      Fixes: facc9699f0fe ('net/mlx5e: Fix HW MTU settings')
      Signed-off-by: Doron Tsur <doront@xxxxxxxxxxxx>
      Signed-off-by: Saeed Mahameed <saeedm@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 66189961e986e53ae39822898fc2ce88f44c61bb
  Author: Tariq Toukan <tariqt@xxxxxxxxxxxx>
  Date:   Thu Nov 12 19:35:26 2015 +0200

      net/mlx5e: Added self loopback prevention

      Prevent outgoing multicast frames from looping back to the RX queue.

      By introducing new HW capability self_lb_en_modifiable, which indicates
      the support to modify self_lb_en bit in modify_tir command.

      When this capability is set we can prevent TIRs from sending back
      loopback multicast traffic to their own RQs, by "refreshing TIRs" with
      modify_tir command, on every time new channels (SQs/RQs) are created at
      device open.
      This is needed since TIRs are static and only allocated once on driver
      load, and the loopback decision is under their responsibility.

      Fixes issues of the kind:
      "IPv6: eth2: IPv6 duplicate address fe80::e61d:2dff:fe5c:f2e9 detected!"
      The issue is seen since the IPv6 solicitations multicast messages are
      loopedback and the network stack thinks they are coming from another host.

      Fixes: 5c50368f3831 ("net/mlx5e: Light-weight netdev open/stop")
      Signed-off-by: Tariq Toukan <tariqt@xxxxxxxxxxxx>
      Signed-off-by: Saeed Mahameed <saeedm@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ba6c4c094470dc83a7275000bac2fbd46bd5ab69
  Author: Saeed Mahameed <saeedm@xxxxxxxxxxxx>
  Date:   Thu Nov 12 19:35:25 2015 +0200

      net/mlx5e: Fix inline header size calculation

      mlx5e_get_inline_hdr_size didn't take into account the vlan insertion
      into the inline WQE segment.
      This could lead to max inline violation in cases where
      skb_headlen(skb) + VLAN_HLEN >= sq->max_inline.

      Fixes: 3ea4891db8d0 ("net/mlx5e: Fix LSO vlan insertion")
      Signed-off-by: Saeed Mahameed <saeedm@xxxxxxxxxxxx>
      Signed-off-by: Achiad Shochat <achiad@xxxxxxxxxxxx>
      Signed-off-by: Or Gerlitz <ogerlitz@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 340c78e5906264c42f9415005c7ba0a4efcfe735
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Nov 12 09:14:12 2015 -0800

      ipvs: use skb_to_full_sk() helper

      SYNACK packets might be attached to request sockets.

      Use skb_to_full_sk() helper to avoid illegal accesses to
      inet_sk(skb->sk)

      Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets 
instead of listener")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Reported-by: Sander Eikelenboom <linux@xxxxxxxxxxxxxx>
      Acked-by: Julian Anastasov <ja@xxxxxx>
      Acked-by: Simon Horman <horms@xxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 00fd38d938db3f1ab1c486549afc450cb7e751b1
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Thu Nov 12 08:43:18 2015 -0800

      tcp: ensure proper barriers in lockless contexts

      Some functions access TCP sockets without holding a lock and
      might output non consistent data, depending on compiler and or
      architecture.

      tcp_diag_get_info(), tcp_get_info(), tcp_poll(), get_tcp4_sock() ...

      Introduce sk_state_load() and sk_state_store() to fix the issues,
      and more clearly document where this lack of locking is happening.

      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5883d9c6d7e680bcdc7a8a9ed2509cd10dd98206
  Author: Pavel Fedin <p.fedin@xxxxxxxxxxx>
  Date:   Thu Nov 12 14:55:18 2015 +0300

      net: thunder: Fix crash upon shutdown after failed probe

      If device probe fails, driver remains bound to the PCI device. However,
      driver data has been reset to NULL. This causes crash upon dereferencing
      it in nicvf_remove()

      Signed-off-by: Pavel Fedin <p.fedin@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit ed5a377d87dc4c87fb3e1f7f698cba38cd893103
  Author: lucien <lucien.xin@xxxxxxxxx>
  Date:   Thu Nov 12 13:07:07 2015 +0800

      sctp: translate host order to network order when setting a hmacid

      now sctp auth cannot work well when setting a hmacid manually, which
      is caused by that we didn't use the network order for hmacid, so fix
      it by adding the transformation in sctp_auth_ep_set_hmacs.

      even we set hmacid with the network order in userspace, it still
      can't work, because of this condition in sctp_auth_ep_set_hmacs():

                if (id > SCTP_AUTH_HMAC_ID_MAX)
                        return -EOPNOTSUPP;

      so this wasn't working before and thus it won't break compatibility.

      Fixes: 65b07e5d0d09 ("[SCTP]: API updates to suport SCTP-AUTH 
extensions.")
      Signed-off-by: Xin Long <lucien.xin@xxxxxxxxx>
      Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@xxxxxxxxx>
      Acked-by: Neil Horman <nhorman@xxxxxxxxxxxxx>
      Acked-by: Vlad Yasevich <vyasevich@xxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 52b4620294b772cdc56a9495bc0df1f81b389315
  Merge: d7475de 5cfb4c8
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Nov 15 18:00:48 2015 -0500

      Merge branch 'packet-fixes'

      Daniel Borkmann says:

      ====================
      packet fixes

      Fixes a couple of issues in packet sockets, i.e. on TX ring side. See
      individual patches for details.

      v2 -> v3:
       - First two patches unchanged, kept Jason's Ack
       - Reworked 3rd patch and split into 3:
        - check for dev type as discussed with Willem
        - infer skb->protocol
        - fix max len for dgram
      v1 -> v2:
       - Added patch 2 as suggested by Dave
       - Rest is unchanged from previous submission
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5cfb4c8d05b4409c4044cb9c05b19705c1d9818b
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 23:25:44 2015 +0100

      packet: fix tpacket_snd max frame len

      Since it's introduction in commit 69e3c75f4d54 ("net: TX_RING and
      packet mmap"), TX_RING could be used from SOCK_DGRAM and SOCK_RAW
      side. When used with SOCK_DGRAM only, the size_max > dev->mtu +
      reserve check should have reserve as 0, but currently, this is
      unconditionally set (in it's original form as dev->hard_header_len).

      I think this is not correct since tpacket_fill_skb() would then
      take dev->mtu and dev->hard_header_len into account for SOCK_DGRAM,
      the extra VLAN_HLEN could be possible in both cases. Presumably, the
      reserve code was copied from packet_snd(), but later on missed the
      check. Make it similar as we have it in packet_snd().

      Fixes: 69e3c75f4d54 ("net: TX_RING and packet mmap")
      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Willem de Bruijn <willemb@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit c72219b75fde768efccf7666342282fab7f9e4e7
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 23:25:43 2015 +0100

      packet: infer protocol from ethernet header if unset

      In case no struct sockaddr_ll has been passed to packet
      socket's sendmsg() when doing a TX_RING flush run, then
      skb->protocol is set to po->num instead, which is the protocol
      passed via socket(2)/bind(2).

      Applications only xmitting can go the path of allocating the
      socket as socket(PF_PACKET, <mode>, 0) and do a bind(2) on the
      TX_RING with sll_protocol of 0. That way, register_prot_hook()
      is neither called on creation nor on bind time, which saves
      cycles when there's no interest in capturing anyway.

      That leaves us however with po->num 0 instead and therefore
      the TX_RING flush run sets skb->protocol to 0 as well. Eric
      reported that this leads to problems when using tools like
      trafgen over bonding device. I.e. the bonding's hash function
      could invoke the kernel's flow dissector, which depends on
      skb->protocol being properly set. In the current situation, all
      the traffic is then directed to a single slave.

      Fix it up by inferring skb->protocol from the Ethernet header
      when not set and we have ARPHRD_ETHER device type. This is only
      done in case of SOCK_RAW and where we have a dev->hard_header_len
      length. In case of ARPHRD_ETHER devices, this is guaranteed to
      cover ETH_HLEN, and therefore being accessed on the skb after
      the skb_store_bits().

      Reported-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Willem de Bruijn <willemb@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3c70c132488794e2489ab045559b0ce0afcf17de
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 23:25:42 2015 +0100

      packet: only allow extra vlan len on ethernet devices

      Packet sockets can be used by various net devices and are not
      really restricted to ARPHRD_ETHER device types. However, when
      currently checking for the extra 4 bytes that can be transmitted
      in VLAN case, our assumption is that we generally probe on
      ARPHRD_ETHER devices. Therefore, before looking into Ethernet
      header, check the device type first.

      This also fixes the issue where non-ARPHRD_ETHER devices could
      have no dev->hard_header_len in TX_RING SOCK_RAW case, and thus
      the check would test unfilled linear part of the skb (instead
      of non-linear).

      Fixes: 57f89bfa2140 ("network: Allow af_packet to transmit +4 bytes for 
VLAN packets.")
      Fixes: 52f1454f629f ("packet: allow to transmit +4 byte in TX_RING slot 
for VLAN case")
      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Willem de Bruijn <willemb@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8fd6c80d9dd938ca338c70698533a7e304752846
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 23:25:41 2015 +0100

      packet: always probe for transport header

      We concluded that the skb_probe_transport_header() should better be
      called unconditionally. Avoiding the call into the flow dissector has
      also not really much to do with the direct xmit mode.

      While it seems that only virtio_net code makes use of GSO from non
      RX/TX ring packet socket paths, we should probe for a transport header
      nevertheless before they hit devices.

      Reference: http://thread.gmane.org/gmane.linux.network/386173/
      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Jason Wang <jasowang@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit efdfa2f7848f64517008136fb41f53c4a1faf93a
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 23:25:40 2015 +0100

      packet: do skb_probe_transport_header when we actually have data

      In tpacket_fill_skb() commit c1aad275b029 ("packet: set transport
      header before doing xmit") and later on 40893fd0fd4e ("net: switch
      to use skb_probe_transport_header()") was probing for a transport
      header on the skb from a ring buffer slot, but at a time, where
      the skb has _not even_ been filled with data yet. So that call into
      the flow dissector is pretty useless. Lets do it after we've set
      up the skb frags.

      Fixes: c1aad275b029 ("packet: set transport header before doing xmit")
      Reported-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Jason Wang <jasowang@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d7475de58575c904818efa369c82e88c6648ce2e
  Author: Kamal Mostafa <kamal@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 14:24:27 2015 -0800

      tools/net: Use include/uapi with __EXPORTED_HEADERS__

      Use the local uapi headers to keep in sync with "recently" added #define's
      (e.g. SKF_AD_VLAN_TPID).  Refactored CFLAGS, and bpf_asm doesn't need -I.

      Fixes: 3f356385e8a4 ("filter: bpf_asm: add minimal bpf asm tool")
      Signed-off-by: Kamal Mostafa <kamal@xxxxxxxxxxxxx>
      Acked-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e63e904c629ac7c092b17328aeed88ca6e437ed3
  Merge: 9001d94 02bcf4e
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Nov 15 17:15:50 2015 -0500

      Merge branch 'ipv6-route-fixes'

      Martin KaFai Lau says:

      ====================
      ipv6: Fixes for pmtu update and DST_NOCACHE route

      This patchset fixes:
      1. An oops during IPv6 pmtu update on a IPv4 GRE running
         in an IPSec setup
      2. Misc fixes on DST_NOCACHE route
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 02bcf4e082e4dc634409a6a6cb7def8806d6e5e6
  Author: Martin KaFai Lau <kafai@xxxxxx>
  Date:   Wed Nov 11 11:51:08 2015 -0800

      ipv6: Check rt->dst.from for the DST_NOCACHE route

      All DST_NOCACHE rt6_info used to have rt->dst.from set to
      its parent.

      After commit 8e3d5be73681 ("ipv6: Avoid double dst_free"),
      DST_NOCACHE is also set to rt6_info which does not have
      a parent (i.e. rt->dst.from is NULL).

      This patch catches the rt->dst.from == NULL case.

      Fixes: 8e3d5be73681 ("ipv6: Avoid double dst_free")
      Signed-off-by: Martin KaFai Lau <kafai@xxxxxx>
      Cc: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 5973fb1e245086071bf71994c8b54d99526ded03
  Author: Martin KaFai Lau <kafai@xxxxxx>
  Date:   Wed Nov 11 11:51:07 2015 -0800

      ipv6: Check expire on DST_NOCACHE route

      Since the expires of the DST_NOCACHE rt can be set during
      the ip6_rt_update_pmtu(), we also need to consider the expires
      value when doing ip6_dst_check().

      This patches creates __rt6_check_expired() to only
      check the expire value (if one exists) of the current rt.

      In rt6_dst_from_check(), it adds __rt6_check_expired() as
      one of the condition check.

      Signed-off-by: Martin KaFai Lau <kafai@xxxxxx>
      Cc: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0d3f6d297bfb7af24d0508460fdb3d1ec4903fa3
  Author: Martin KaFai Lau <kafai@xxxxxx>
  Date:   Wed Nov 11 11:51:06 2015 -0800

      ipv6: Avoid creating RTF_CACHE from a rt that is not managed by fib6 tree

      The original bug report:
      https://bugzilla.redhat.com/show_bug.cgi?id=1272571

      The setup has a IPv4 GRE tunnel running in a IPSec.  The bug
      happens when ndisc starts sending router solicitation at the gre
      interface.  The simplified oops stack is like:

      __lock_acquire+0x1b2/0x1c30
      lock_acquire+0xb9/0x140
      _raw_write_lock_bh+0x3f/0x50
      __ip6_ins_rt+0x2e/0x60
      ip6_ins_rt+0x49/0x50
      ~~~~~~~~
      __ip6_rt_update_pmtu.part.54+0x145/0x250
      ip6_rt_update_pmtu+0x2e/0x40
      ~~~~~~~~
      ip_tunnel_xmit+0x1f1/0xf40
      __gre_xmit+0x7a/0x90
      ipgre_xmit+0x15a/0x220
      dev_hard_start_xmit+0x2bd/0x480
      __dev_queue_xmit+0x696/0x730
      dev_queue_xmit+0x10/0x20
      neigh_direct_output+0x11/0x20
      ip6_finish_output2+0x21f/0x770
      ip6_finish_output+0xa7/0x1d0
      ip6_output+0x56/0x190
      ~~~~~~~~
      ndisc_send_skb+0x1d9/0x400
      ndisc_send_rs+0x88/0xc0
      ~~~~~~~~

      The rt passed to ip6_rt_update_pmtu() is created by
      icmp6_dst_alloc() and it is not managed by the fib6 tree,
      so its rt6i_table == NULL.  When __ip6_rt_update_pmtu() creates
      a RTF_CACHE clone, the newly created clone also has rt6i_table == NULL
      and it causes the ip6_ins_rt() oops.

      During pmtu update, we only want to create a RTF_CACHE clone
      from a rt which is currently managed (or owned) by the
      fib6 tree.  It means either rt->rt6i_node != NULL or
      rt is a RTF_PCPU clone.

      It is worth to note that rt6i_table may not be NULL even it is
      not (yet) managed by the fib6 tree (e.g. addrconf_dst_alloc()).
      Hence, rt6i_node is a better check instead of rt6i_table.

      Fixes: 45e4fd26683c ("ipv6: Only create RTF_CACHE routes after 
encountering pmtu")
      Signed-off-by: Martin KaFai Lau <kafai@xxxxxx>
      Reported-by: Chris Siebenmann <cks-rhbugzilla@xxxxxxxxxxxxxx>
      Cc: Chris Siebenmann <cks-rhbugzilla@xxxxxxxxxxxxxx>
      Cc: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9001d94dfd558f175bede9f847276f691cd9c164
  Author: Colin Ian King <colin.king@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 15:22:40 2015 +0000

      fjes: fix inconsistent indenting

      minor change, indenting is one tab out.

      Signed-off-by: Colin Ian King <colin.king@xxxxxxxxxxxxx>
      Signed-off-by: Taku Izumi <izumi.taku@xxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 73ed5d25dce0354ea381d6dc93005c3085fae03d
  Author: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 16:23:15 2015 +0100

      af-unix: fix use-after-free with concurrent readers while splicing

      During splicing an af-unix socket to a pipe we have to drop all
      af-unix socket locks. While doing so we allow another reader to enter
      unix_stream_read_generic which can read, copy and finally free another
      skb. If exactly this skb is just in process of being spliced we get a
      use-after-free report by kasan.

      First, we must make sure to not have a free while the skb is used during
      the splice operation. We simply increment its use counter before unlocking
      the reader lock.

      Stream sockets have the nice characteristic that we don't care about
      zero length writes and they never reach the peer socket's queue. That
      said, we can take the UNIXCB.consumed field as the indicator if the
      skb was already freed from the socket's receive queue. If the skb was
      fully consumed after we locked the reader side again we know it has been
      dropped by a second reader. We indicate a short read to user space and
      abort the current splice operation.

      This bug has been found with syzkaller
      (http://github.com/google/syzkaller) by Dmitry Vyukov.

      Fixes: 2b514574f7e8 ("net: af_unix: implement splice for stream af_unix 
sockets")
      Reported-by: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Dmitry Vyukov <dvyukov@xxxxxxxxxx>
      Cc: Eric Dumazet <eric.dumazet@xxxxxxxxx>
      Acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: Hannes Frederic Sowa <hannes@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 0ca9b67606f0ce984b5811b0830cfd7d143f6077
  Merge: 051b29f 41ac18e
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 15 09:36:24 2015 -0800

      Merge branch 'perf-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull perf updates from Thomas Gleixner:
       "Mostly updates to the perf tool plus two fixes to the kernel core code:

         - Handle tracepoint filters correctly for inherited events (Peter
           Zijlstra)

         - Prevent a deadlock in perf_lock_task_context (Paul McKenney)

         - Add missing newlines to some pr_err() calls (Arnaldo Carvalho de
           Melo)

         - Print full source file paths when using 'perf annotate --print-line
           --full-paths' (Michael Petlan)

         - Fix 'perf probe -d' when just one out of uprobes and kprobes is
           enabled (Wang Nan)

         - Add compiler.h to list.h to fix 'make perf-tar-src-pkg' generated
           tarballs, i.e. out of tree building (Arnaldo Carvalho de Melo)

         - Add the llvm-src-base.c and llvm-src-kbuild.c files, generated by
           the 'perf test' LLVM entries, when running it in-tree, to
           .gitignore (Yunlong Song)

         - libbpf error reporting improvements, using a strerror interface to
           more precisely tell the user about problems with the provided
           scriptlet, be it in C or as a ready made object file (Wang Nan)

         - Do not be case sensitive when searching for matching 'perf test'
           entries (Arnaldo Carvalho de Melo)

         - Inform the user about objdump failures in 'perf annotate' (Andi
           Kleen)

         - Improve the LLVM 'perf test' entry, introduce a new ones for BPF
           and kbuild tests to check the environment used by clang to compile
           .c scriptlets (Wang Nan)"

      * 'perf-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip: (32 commits)
        perf/x86/intel/rapl: Remove the unused RAPL_EVENT_DESC() macro
        tools include: Add compiler.h to list.h
        perf probe: Verify parameters in two functions
        perf session: Add missing newlines to some pr_err() calls
        perf annotate: Support full source file paths for srcline fix
        perf test: Add llvm-src-base.c and llvm-src-kbuild.c to .gitignore
        perf: Fix inherited events vs. tracepoint filters
        perf: Disable IRQs across RCU RS CS that acquires scheduler lock
        perf test: Do not be case sensitive when searching for matching tests
        perf test: Add 'perf test BPF'
        perf test: Enhance the LLVM tests: add kbuild test
        perf test: Enhance the LLVM test: update basic BPF test program
        perf bpf: Improve BPF related error messages
        perf tools: Make fetch_kernel_version() publicly available
        bpf tools: Add new API bpf_object__get_kversion()
        bpf tools: Improve libbpf error reporting
        perf probe: Cleanup find_perf_probe_point_from_map to reduce redundancy
        perf annotate: Inform the user about objdump failures in --stdio
        perf stat: Make stat options global
        perf sched latency: Fix thread pid reuse issue
        ...

  commit 051b29f2798b5f1a95e745613117eeb367ab4bce
  Merge: 8f98e29 25b3e5a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 15 09:35:33 2015 -0800

      Merge branch 'sched-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull scheduler fix from Thomas Gleixner:
       "A single fix to prevent math underflow in the numa balancing code"

      * 'sched-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        sched/numa: Fix math underflow in task_tick_numa()

  commit 8f98e292eb612956e1add401f28dc76ffea20323
  Merge: bba072d b32e1f5
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 15 09:34:32 2015 -0800

      Merge branch 'locking-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull liblockdep fixes from Thomas Gleixner:
       "Three small patches to synchronize liblockdep with the latest core
        changes"

      * 'locking-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        tools/liblockdep: explicitly declare lockdep API we call from liblockdep
        tools/liblockdep: add userspace versions of WRITE_ONCE and 
RCU_INIT_POINTER
        tools/liblockdep: remove task argument from debug_check_no_locks_held

  commit bba072dfd7bf87f0712e569a78ae9c0e91e0a8df
  Merge: 511601b 04633df
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 15 09:32:59 2015 -0800

      Merge branch 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull x86 fixes from Thomas Gleixner:
       "A couple of fixes and updates related to x86:

         - Fix the W+X check regression on XEN

         - The real fix for the low identity map trainwreck

         - Probe legacy PIC early instead of unconditionally allocating legacy
           irqs

         - Add cpu verification to long mode entry

         - Adjust the cache topology to AMD Fam17H systems

         - Let Merrifield use the TSC across S3"

      * 'x86-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        x86/cpu: Call verify_cpu() after having entered long mode too
        x86/setup: Fix low identity map for >= 2GB kernel range
        x86/mm: Skip the hypervisor range when walking PGD
        x86/AMD: Fix last level cache topology for AMD Fam17h systems
        x86/irq: Probe for PIC presence before allocating descs for legacy IRQs
        x86/cpu/intel: Enable X86_FEATURE_NONSTOP_TSC_S3 for Merrifield

  commit 511601bdbcacd3ab615564941409bf012435b23d
  Merge: b84da9f 4717f13 22b886d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 15 09:30:48 2015 -0800

      Merge branches 'irq-urgent-for-linus' and 'timers-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

      Pull irq and timer fixes from Thomas Gleixner:

       - An irq regression fix to restore the wakeup behaviour of chained
         interrupts.

       - A timer fix for a long standing race versus timers scheduled on a
         target cpu which got exposed by recent changes in the workqueue
         implementation.

      * 'irq-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        genirq/PM: Restore system wake up from chained interrupts

      * 'timers-urgent-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
        timers: Use proper base migration in add_timer_on()

  commit b84da9fa47cf6e8dfd71d673a2f744ec1cac452c
  Merge: 12b76f3 da34232
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun Nov 15 09:10:53 2015 -0800

      Merge branch 'upstream' of 
git://git.linux-mips.org/pub/scm/ralf/upstream-linus

      Pull MIPS updates from Ralf Baechle:
       "These are the highlists of the main MIPS pull request for 4.4:

         - Add latencytop support
         - Support appended DTBs
         - VDSO support and initially use it for gettimeofday.
         - Drop the .MIPS.abiflags and ELF NOTE sections from vmlinux
         - Support for the 5KE, an internal test core.
         - Switch all MIPS platfroms to libata drivers.
         - Improved support, cleanups for ralink and Lantiq platforms.
         - Support for the new xilfpga platform.
         - A number of DTB improvments for BMIPS.
         - Improved support for CM and CPS.
         - Minor JZ4740 and BCM47xx enhancements"

      * 'upstream' of git://git.linux-mips.org/pub/scm/ralf/upstream-linus: 
(120 commits)
        MIPS: idle: add case for CPU_5KE
        MIPS: Octeon: Support APPENDED_DTB
        MIPS: vmlinux: create a section for appended DTB
        MIPS: Clean up compat_siginfo_t
        MIPS: Fix PAGE_MASK definition
        MIPS: BMIPS: Enable GZIP ramdisk and timed printks
        MIPS: Add xilfpga defconfig
        MIPS: xilfpga: Add mipsfpga platform code
        MIPS: xilfpga: Add xilfpga device tree files.
        dt-bindings: MIPS: Document xilfpga bindings and boot style
        MIPS: Make MIPS_CMDLINE_DTB default
        MIPS: Make the kernel arguments from dtb available
        MIPS: Use USE_OF as the guard for appended dtb
        MIPS: BCM63XX: Use pr_* instead of printk
        MIPS: Loongson: Cleanup CONFIG_LOONGSON_SUSPEND.
        MIPS: lantiq: Disable xbar fpi burst mode
        MIPS: lantiq: Force the crossbar to big endian
        MIPS: lantiq: Initialize the USB core on boot
        MIPS: lantiq: Return correct value for fpi clock on ar9
        MIPS: ralink: Add missing clock on rt305x
        ...

  commit a57f8dac46fbac5ab0e31aef1a98b3f6eb30c079
  Author: Thomas Betker <thomas.betker@xxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 11 21:24:38 2015 +0100

      iio: adc: xilinx: Fix VREFN scale

      The scaling factor for VREFN is 3.0/4096 (not 1.0/4096), just as for
      VREFP. This is not immediately obvious from the specification (Xilinx
      UG480), but has been confirmed by Xilinx support.

      Suggested-by: Hartmut Knaack <knaack.h@xxxxxx>
      Signed-off-by: Thomas Betker <thomas.betker@xxxxxxxxxxxxxxxxx>
      Cc: <Stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Jonathan Cameron <jic23@xxxxxxxxxx>

  commit 0d2f6fd3ffd5e7a447233a57112246bc00064752
  Author: Chris Lesiak <chris.lesiak@xxxxxxxxx>
  Date:   Mon Nov 2 15:45:03 2015 -0600

      iio: si7020: Swap data byte order

      The Silicon Labs Si7013, Si7020, and Si7021 family of I2C humidity and
      temperature sensors deliver 16 bit data high byte first.

      See the datasheet available at:
      
https://www.silabs.com/Support%20Documents%2fTechnicalDocs%2fSi7020-A20.pdf

      But as documented in Documentation/i2c/smbus-protocol,
      i2c_smbus_read_word_data() expects the low byte first.

      Change the driver to use i2c_smbus_read_word_swapped to get correct byte
      order.

      Signed-off-by: Chris Lesiak <chris.lesiak@xxxxxxxxx>
      Cc: <Stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Jonathan Cameron <jic23@xxxxxxxxxx>

  commit 12b76f3bf336388916ddf8047156f9e9993ff4e9
  Merge: b3a0d9a 2db1a57
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Nov 14 09:43:00 2015 -0800

      Merge tag 'sound-fix-4.4-rc1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound

      Pull sound fixes from Takashi Iwai:
       "Here are a collection of small fixes tha have been gathered for
        4.4-rc1.  The only significant changes are those in PCI drivers
        Kconfig, to use "depends on" instead of "select" for CONFIG_ZONE_DMA.
        A reverse select is often more user-friendly, but in this case, it
        makes hard to manage with the conflict with ZONE_DEVICE, so changed in
        such a way for now.

        Others are all small fixes and quirks: an error check in soundcore
        reigster_chrdev(), HD-audio HDMI/DP phantom jack fix, Intel Broxton DP
        quirk, USB-audio DSD device quirk, some constifications, etc"

      * tag 'sound-fix-4.4-rc1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound:
        ALSA: pci: depend on ZONE_DMA
        ALSA: hda - Simplify phantom jack handling for HDMI/DP
        ALSA: hda/hdmi - apply Skylake fix-ups to Broxton display codec
        ALSA: ctxfi: constify rsc ops structures
        ALSA: usb: Add native DSD support for Aune X1S
        ALSA: oxfw: add an comment to Kconfig for TASCAM FireOne
        sound: fix check for error condition of register_chrdev()

  commit b3a0d9a232c72c38c9db6fe1456015a82119afc3
  Merge: 63f4f7e 30b9dbe
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Nov 14 09:09:37 2015 -0800

      Merge tag 'arc-4.4-rc1-part2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/vgupta/arc

      Pull ARC fixes from Vineet Gupta:
       "Found a couple of brown paper bag bugs with the prev pull request
        (including a SMP build breakage report from Guenter).  Since these are
        urgent I also decided to send over a bunch of other pending fixes
        which could have otherwise waited an rc or two.

        Summary:

         - A bunch of brown paper bag bugs (MAINTAINERS list email, SMP build
           failure)
         - cpu_relax() now compiler barrier for UP as well
         - handling of userspace Bus Errors for ARCompact builds"

      * tag 'arc-4.4-rc1-part2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/vgupta/arc:
        ARC: Fix silly typo in MAINTAINERS file
        ARC: cpu_relax() to be compiler barrier even for UP
        ARC: use ASL assembler mnemonic
        ARC: [arcompact] Handle bus error from userspace as Interrupt not 
exception
        ARC: remove extraneous header include
        ARCv2: lib: memcpy: use local symbols

  commit 30b9dbee895ff0d5cbf155bd1ef3f0f5992bca6f
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Sat Nov 14 12:58:53 2015 +0530

      ARC: Fix silly typo in MAINTAINERS file

  commit 1cfc05cbe2c9757c6cc36804df96e3ed28e940a1
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Mon Nov 9 17:48:34 2015 +0530

      ARC: cpu_relax() to be compiler barrier even for UP

      cpu_relax() on ARC has been barrier only for SMP (and no-op for UP). Per
      recent discussions, it is safer to make it a compiler barrier
      unconditionally.

      Link: http://lkml.kernel.org/r/53A7D3AA.9020100@xxxxxxxxxxxx
      Acked-by: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit a6416f57ce57fb390b6ee30b12c01c29032a26af
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Thu Nov 5 09:13:31 2015 +0530

      ARC: use ASL assembler mnemonic

      ARCompact and ARCv2 only have ASL, while binutils used to support LSL as
      a alias mnemonic.

      Newer binutils (upstream) don't want to do that so replace it.

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 541366da6a93f52f468b408ba24ab6bb5e4fd3d8
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Sat Oct 31 01:22:51 2015 +0530

      ARC: [arcompact] Handle bus error from userspace as Interrupt not 
exception

      Bus errors from userspace on ARCompact based cores are handled by core
      as a high priority L2 interrupt but current code treated it as interrupt
      Handling an interrupt like exception is certainly not going to go 
unnoticed.
      (and it worked so far as we never saw a Bus error from userspace until
      IPPK guys tested a DDR controller with ECC error detection etc hence
      needed to explicitly trigger/handle such errors)

       - So move mem_service exception handler from common code into ARCv2 code.
       - In ARCompact code, define  mem_service as L2 interrupt handler which
         just drops down to pure kernel mode and goes of to enqueue SIGBUS

      Reported-by: Nelson Pereira <npereira@xxxxxxxxxxxx>
      Tested-by: Ana Martins <amartins@xxxxxxxxxxxx>
      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 76a8c40c65a2fc9e526fcba97c0cd1a6ecbd3438
  Author: Vineet Gupta <vgupta@xxxxxxxxxxxx>
  Date:   Sat Oct 31 00:47:39 2015 +0530

      ARC: remove extraneous header include

      Signed-off-by: Vineet Gupta <vgupta@xxxxxxxxxxxx>

  commit 63f4f7e8df6c504f39c6493799b54775916030d6
  Merge: 4bfc89d ebaf31c
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 13 21:53:18 2015 -0800

      Merge tag 'chrome-platform-4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/olof/chrome-platform

      Pull chrome platform updates from Olof Johansson:
       "Here's the branch of chrome platform changes for v4.4.  Some have been
        queued up for the full 4.3 release cycle since I forgot to send them
        in for that round (rebased early on to deal with fixes conflicts).

        Most of these enable EC communication stuff -- Pixel 2015 support,
        enabling building for ARM64 platforms, and a few fixes for memory
        leaks.

        There's also a patch in here to allow reading/writing the verified
        boot context, which depends on a sysfs patch acked by Greg"

      * tag 'chrome-platform-4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/olof/chrome-platform:
        platform/chrome: Fix i2c-designware adapter name
        platform/chrome: Support reading/writing the vboot context
        sysfs: Support is_visible() on binary attributes
        platform/chrome: cros_ec: Fix possible leak in led_rgb_store()
        platform/chrome: cros_ec: Fix leak in sequence_store()
        platform/chrome: Enable Chrome platforms on 64-bit ARM
        platform/chrome: cros_ec_dev - Add a platform device ID table
        platform/chrome: cros_ec_lpc - Add support for Google Pixel 2
        platform/chrome: cros_ec_lpc - Use existing function to check EC result
        platform/chrome: Make depends on MFD_CROS_EC instead CROS_EC_PROTO
        Revert "platform/chrome: Don't make CHROME_PLATFORMS depends on X86 || 
ARM"

  commit 4bfc89d26a0d177a79574fc1b54fc728e3bb8b4e
  Merge: a30b7ca b829834
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 13 21:47:06 2015 -0800

      Merge tag 'platform-drivers-x86-v4.4-2' of 
git://git.infradead.org/users/dvhart/linux-platform-drivers-x86

      Pull another x86 platform driver update from Darren Hart:
       "Support for the unfortunately rather unique ESC key on the Ideapad
        Yoga 3 and two DMI matches for rfkill support.  Solitary fix for
        potential missed errors for asus-wmi.  Downgrade a thinkpad_acpi
        message to info.

        asus-wmi:
         - fix error handling in store_sys_wmi()

        ideapad-laptop:
         - Add Lenovo Yoga 900 to no_hw_rfkill dmi list
         - include Yoga 3 1170 in add rfkill whitelist
         - add support for Yoga 3 ESC key

        thinkpad_acpi:
         - Don't yell on unsupported brightness interfaces"

      * tag 'platform-drivers-x86-v4.4-2' of 
git://git.infradead.org/users/dvhart/linux-platform-drivers-x86:
        asus-wmi: fix error handling in store_sys_wmi()
        ideapad-laptop: Add Lenovo Yoga 900 to no_hw_rfkill dmi list
        ideapad-laptop: include Yoga 3 1170 in add rfkill whitelist
        ideapad-laptop: add support for Yoga 3 ESC key
        thinkpad_acpi: Don't yell on unsupported brightness interfaces

  commit a30b7ca2894994e4e2f2e06811ee67fa637bca2e
  Merge: d83763f bbdb5c2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 13 21:41:14 2015 -0800

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

      Pull more input updates from Dmitry Torokhov:
       "An update to the tsc2005 driver that allows it to also support tsc2004
        (basically the same controller, but uses i2c instead of spi bus), and
        a couple of bug fixes"

      * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input:
        Input: parkbd - drop bogus __init from parkbd_allocate_serio()
        Input: elantech - add Fujitsu Lifebook U745 to force crc_enabled
        Input: tsc2004 - add support for tsc2004
        Input: tsc200x-core - rename functions and variables
        Input: tsc2005 - separate SPI and core functions

  commit d83763f4a6adb2f417c3288ee903982985ae949c
  Merge: 9aa3d65 0a5149b
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 13 20:35:54 2015 -0800

      Merge tag 'scsi-misc' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi

      Pull final round of SCSI updates from James Bottomley:
       "Sorry for the delay in this patch which was mostly caused by getting
        the merger of the mpt2/mpt3sas driver, which was seen as an essential
        item of maintenance work to do before the drivers diverge too much.
        Unfortunately, this caused a compile failure (detected by linux-next),
        which then had to be fixed up and incubated.

        In addition to the mpt2/3sas rework, there are updates from pm80xx,
        lpfc, bnx2fc, hpsa, ipr, aacraid, megaraid_sas, storvsc and ufs plus
        an assortment of changes including some year 2038 issues, a fix for a
        remove before detach issue in some drivers and a couple of other minor
        issues"

      * tag 'scsi-misc' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi: (141 commits)
        mpt3sas: fix inline markers on non inline function declarations
        sd: Clear PS bit before Mode Select.
        ibmvscsi: set max_lun to 32
        ibmvscsi: display default value for max_id, max_lun and max_channel.
        mptfusion: don't allow negative bytes in kbuf_alloc_2_sgl()
        scsi: pmcraid: replace struct timeval with ktime_get_real_seconds()
        mvumi: 64bit value for seconds_since1970
        be2iscsi: Fix bogus WARN_ON length check
        scsi_scan: don't dump trace when scsi_prep_async_scan() is called twice
        mpt3sas: Bump mpt3sas driver version to 09.102.00.00
        mpt3sas: Single driver module which supports both SAS 2.0 & SAS 3.0 HBAs
        mpt2sas, mpt3sas: Update the driver versions
        mpt3sas: setpci reset kernel oops fix
        mpt3sas: Added OEM Gen2 PnP ID branding names
        mpt3sas: Refcount fw_events and fix unsafe list usage
        mpt3sas: Refcount sas_device objects and fix unsafe list usage
        mpt3sas: sysfs attribute to report Backup Rail Monitor Status
        mpt3sas: Ported WarpDrive product SSS6200 support
        mpt3sas: fix for driver fails EEH, recovery from injected pci bus error
        mpt3sas: Manage MSI-X vectors according to HBA device type
        ...

  commit 9aa3d651a9199103eb6451aeb0ac1b66a6d770a6
  Merge: 5d2eb54 5179822
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 13 20:04:17 2015 -0800

      Merge branch 'for-next' of 
git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending

      Pull SCSI target updates from Nicholas Bellinger:
       "This series contains HCH's changes to absorb configfs attribute
        ->show() + ->store() function pointer usage from it's original
        tree-wide consumers, into common configfs code.

        It includes usb-gadget, target w/ drivers, netconsole and ocfs2
        changes to realize the improved simplicity, that now renders the
        original include/target/configfs_macros.h CPP magic for fabric drivers
        and others, unnecessary and obsolete.

        And with common code in place, new configfs attributes can be added
        easier than ever before.

        Note, there are further improvements in-flight from other folks for
        v4.5 code in configfs land, plus number of target fixes for post -rc1
        code"

      In the meantime, a new user of the now-removed old configfs API came in
      through the char/misc tree in commit 7bd1d4093c2f ("stm class: Introduce
      an abstraction for System Trace Module devices").

      This merge resolution comes from Alexander Shishkin, who updated his stm
      class tracing abstraction to account for the removal of the old
      show_attribute and store_attribute methods in commit 517982229f78
      ("configfs: remove old API") from this pull.  As Alexander says about
      that patch:

       "There's no need to keep an extra wrapper structure per item and the
        awkward show_attribute/store_attribute item ops are no longer needed.

        This patch converts policy code to the new api, all the while making
        the code quite a bit smaller and easier on the eyes.

        Signed-off-by: Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx>"

      That patch was folded into the merge so that the tree should be fully
      bisectable.

      * 'for-next' of 
git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending: (23 commits)
        configfs: remove old API
        ocfs2/cluster: use per-attribute show and store methods
        ocfs2/cluster: move locking into attribute store methods
        netconsole: use per-attribute show and store methods
        target: use per-attribute show and store methods
        spear13xx_pcie_gadget: use per-attribute show and store methods
        dlm: use per-attribute show and store methods
        usb-gadget/f_serial: use per-attribute show and store methods
        usb-gadget/f_phonet: use per-attribute show and store methods
        usb-gadget/f_obex: use per-attribute show and store methods
        usb-gadget/f_uac2: use per-attribute show and store methods
        usb-gadget/f_uac1: use per-attribute show and store methods
        usb-gadget/f_mass_storage: use per-attribute show and store methods
        usb-gadget/f_sourcesink: use per-attribute show and store methods
        usb-gadget/f_printer: use per-attribute show and store methods
        usb-gadget/f_midi: use per-attribute show and store methods
        usb-gadget/f_loopback: use per-attribute show and store methods
        usb-gadget/ether: use per-attribute show and store methods
        usb-gadget/f_acm: use per-attribute show and store methods
        usb-gadget/f_hid: use per-attribute show and store methods
        ...

  commit 5d2eb548b309be34ecf3b91f0b7300a2b9d09b8c
  Merge: 2870f6c 29608d2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 13 18:02:30 2015 -0800

      Merge branch 'for-linus-3' of 
git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

      Pull vfs xattr cleanups from Al Viro.

      * 'for-linus-3' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs:
        f2fs: xattr simplifications
        squashfs: xattr simplifications
        9p: xattr simplifications
        xattr handlers: Pass handler to operations instead of flags
        jffs2: Add missing capability check for listing trusted xattrs
        hfsplus: Remove unused xattr handler list operations
        ubifs: Remove unused security xattr handler
        vfs: Fix the posix_acl_xattr_list return value
        vfs: Check attribute names in posix acl xattr handers

  commit 2870f6c4d136e093e22159b8916918ff42c92218
  Merge: 934f98d 152d7bd
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 13 17:35:48 2015 -0800

      Merge branch 'libnvdimm-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm

      Pull libnvdimm fixes from Dan Williams:

       - three fixes tagged for -stable including a crash fix, simple
         performance tweak, and an invalid i/o error.

       - build regression fix for the nvdimm unit tests

       - nvdimm documentation update

      * 'libnvdimm-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm:
        dax: fix __dax_pmd_fault crash
        libnvdimm: documentation clarifications
        libnvdimm, pmem: fix size trim in pmem_direct_access()
        libnvdimm, e820: fix numa node for e820-type-12 pmem ranges
        tools/testing/nvdimm, acpica: fix flag rename build breakage

  commit 29608d208b3619b3b508a6871622db789611d8a3
  Author: Andreas Gruenbacher <agruenba@xxxxxxxxxx>
  Date:   Sun Oct 4 19:18:54 2015 +0200

      f2fs: xattr simplifications

      Now that the xattr handler is passed to the xattr handler operations, we
      have access to the attribute name prefix, so simplify
      f2fs_xattr_generic_list.

      Also, f2fs_xattr_advise_list is only ever called for
      f2fs_xattr_advise_handler; there is no need to double check for that.

      Signed-off-by: Andreas Gruenbacher <agruenba@xxxxxxxxxx>
      Cc: Jaegeuk Kim <jaegeuk@xxxxxxxxxx>
      Cc: Changman Lee <cm224.lee@xxxxxxxxxxx>
      Cc: Chao Yu <chao2.yu@xxxxxxxxxxx>
      Cc: linux-f2fs-devel@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit 0ddaf72c1da8b84bc2896e1997ef3f1a22765194
  Author: Andreas Gruenbacher <agruenba@xxxxxxxxxx>
  Date:   Sun Oct 4 19:18:53 2015 +0200

      squashfs: xattr simplifications

      Now that the xattr handler is passed to the xattr handler operations, we
      have access to the attribute name prefix, so simplify the squashfs xattr
      handlers a bit.

      Signed-off-by: Andreas Gruenbacher <agruenba@xxxxxxxxxx>
      Cc: Phillip Lougher <phillip@xxxxxxxxxxxxxxx>
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit e409de992e3ea3674393465f07cc71c948edd87a
  Author: Andreas Gruenbacher <agruenba@xxxxxxxxxx>
  Date:   Sun Oct 4 19:18:52 2015 +0200

      9p: xattr simplifications

      Now that the xattr handler is passed to the xattr handler operations, we
      can use the same get and set operations for the user, trusted, and 
security
      xattr namespaces.  In those namespaces, we can access the full attribute
      name by "reattaching" the name prefix the vfs has skipped for us.  Add a
      xattr_full_name helper to make this obvious in the code.

      For the "system.posix_acl_access" and "system.posix_acl_default"
      attributes, handler->prefix is the full attribute name; the suffix is the
      empty string.

      Signed-off-by: Andreas Gruenbacher <agruenba@xxxxxxxxxx>
      Cc: Eric Van Hensbergen <ericvh@xxxxxxxxx>
      Cc: Ron Minnich <rminnich@xxxxxxxxxx>
      Cc: Latchesar Ionkov <lucho@xxxxxxxxxx>
      Cc: v9fs-developer@xxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit d9a82a04033f87bbd06efb29f78c0170a38154a8
  Author: Andreas Gruenbacher <agruenba@xxxxxxxxxx>
  Date:   Sun Oct 4 19:18:51 2015 +0200

      xattr handlers: Pass handler to operations instead of flags

      The xattr_handler operations are currently all passed a file system
      specific flags value which the operations can use to disambiguate between
      different handlers; some file systems use that to distinguish the xattr
      namespace, for example.  In some oprations, it would be useful to also 
have
      access to the handler prefix.  To allow that, pass a pointer to the 
handler
      to operations instead of the flags value alone.

      Signed-off-by: Andreas Gruenbacher <agruenba@xxxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit bf781714b3e1421a0ebcd0137d081e6566a89f15
  Author: Andreas Gruenbacher <agruenba@xxxxxxxxxx>
  Date:   Sun Oct 4 19:18:50 2015 +0200

      jffs2: Add missing capability check for listing trusted xattrs

      The vfs checks if a task has the appropriate access for get and set
      operations, but it cannot do that for the list operation; the file system
      must check for that itself.

      Signed-off-by: Andreas Gruenbacher <agruenba@xxxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Cc: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
      Cc: linux-mtd@xxxxxxxxxxxxxxxxxxx
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit e282fb7f3bce68089ae2b40c227b015c23764a38
  Author: Andreas Gruenbacher <agruenba@xxxxxxxxxx>
  Date:   Sun Oct 4 19:18:49 2015 +0200

      hfsplus: Remove unused xattr handler list operations

      The list operations can never be called; they are even documented to be
      unused.

      Signed-off-by: Andreas Gruenbacher <agruenba@xxxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit 13d3408f100186d2755d9ac1ad8b5de9e1975a92
  Author: Andreas Gruenbacher <agruenba@xxxxxxxxxx>
  Date:   Sun Oct 4 19:18:48 2015 +0200

      ubifs: Remove unused security xattr handler

      Ubifs installs a security xattr handler in sb->s_xattr but doesn't use the
      generic_{get,set,list,remove}xattr inode operations needed for processing
      this list of attribute handlers; the handler is never called.  Instead,
      ubifs uses its own xattr handlers which also process security xattrs.

      Remove the dead code.

      Signed-off-by: Andreas Gruenbacher <agruenba@xxxxxxxxxx>
      Reviewed-by: Richard Weinberger <richard@xxxxxx>
      Cc: Artem Bityutskiy <dedekind1@xxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: linux-mtd@xxxxxxxxxxxxxxxxxxx
      Cc: Subodh Nijsure <snijsure@xxxxxxxxxxxx>
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit dae5f57a72a6c913926cf3569edb0556a409a3df
  Author: Andreas Gruenbacher <agruenba@xxxxxxxxxx>
  Date:   Tue Nov 3 15:25:08 2015 +0100

      vfs: Fix the posix_acl_xattr_list return value

      When a filesystem that contains POSIX ACLs is mounted without ACL support
      (-o noacl), the appropriate behavior is not to list any existing POSIX ACL
      xattrs.  The return value for list xattr handlers in this case is 0, not 
an
      error code: several filesystems that use the POSIX ACL xattr handlers do
      not expect the list operation to fail.

      Symlinks cannot have ACLs, so posix_acl_xattr_list will never be called 
for
      symlinks in the first place.

      Signed-off-by: Andreas Gruenbacher <agruenba@xxxxxxxxxx>
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit c361016adeb5acb17a67000689602b7515930f13
  Author: Andreas Gruenbacher <agruenba@xxxxxxxxxx>
  Date:   Tue Nov 3 15:25:07 2015 +0100

      vfs: Check attribute names in posix acl xattr handers

      The get and set operations of the POSIX ACL xattr handlers failed to check
      the attribute names, so all names with "system.posix_acl_access" or
      "system.posix_acl_default" as a prefix were accepted.  Reject invalid 
names
      from now on.

      Signed-off-by: Andreas Gruenbacher <agruenba@xxxxxxxxxx>
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit 934f98d7e8123892bd9ca8ea08728ee0784e6597
  Merge: f3996e6 222e684
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 13 17:05:32 2015 -0800

      Merge tag 'vfio-v4.4-rc1' of git://github.com/awilliam/linux-vfio

      Pull VFIO updates from Alex Williamson:
       - Use kernel interfaces for VPD emulation (Alex Williamson)
       - Platform fix for releasing IRQs (Eric Auger)
       - Type1 IOMMU always advertises PAGE_SIZE support when smaller mapping
         sizes are available (Eric Auger)
       - Platform fixes for incorrectly using copies of structures rather than
         pointers to structures (James Morse)
       - Rework platform reset modules, fix leak, and add AMD xgbe reset
         module (Eric Auger)
       - Fix vfio_device_get_from_name() return value (Joerg Roedel)
       - No-IOMMU interface (Alex Williamson)
       - Fix potential out of bounds array access in PCI config handling (Dan
         Carpenter)

      * tag 'vfio-v4.4-rc1' of git://github.com/awilliam/linux-vfio:
        vfio/pci: make an array larger
        vfio: Include No-IOMMU mode
        vfio: Fix bug in vfio_device_get_from_name()
        VFIO: platform: reset: AMD xgbe reset module
        vfio: platform: reset: calxedaxgmac: fix ioaddr leak
        vfio: platform: add dev_info on device reset
        vfio: platform: use list of registered reset function
        vfio: platform: add compat in vfio_platform_device
        vfio: platform: reset: calxedaxgmac: add reset function registration
        vfio: platform: introduce module_vfio_reset_handler macro
        vfio: platform: add capability to register a reset function
        vfio: platform: introduce vfio-platform-base module
        vfio/platform: store mapped memory in region, instead of an on-stack 
copy
        vfio/type1: handle case where IOMMU does not support PAGE_SIZE size
        VFIO: platform: clear IRQ_NOAUTOEN when de-assigning the IRQ
        vfio/pci: Use kernel VPD access functions
        vfio: Whitelist PCI bridges

  commit f3996e6ac6e2bd739d8a82cc9acae0653c2d5dca
  Merge: e75cdf9 7b52e27
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 13 16:40:36 2015 -0800

      Merge branch 'for-next' of git://git.samba.org/sfrench/cifs-2.6

      Pull SMB3 updates from Steve French:
       "A collection of SMB3 patches adding some reliability features
        (persistent and resilient handles) and improving SMB3 copy offload.

        I will have some additional patches for SMB3 encryption and SMB3.1.1
        signing (important security features), and also for improving SMB3
        persistent handle reconnection (setting ChannelSequence number e.g.)
        that I am still working on but wanted to get this set in since they
        can stand alone"

      * 'for-next' of git://git.samba.org/sfrench/cifs-2.6:
        Allow copy offload (CopyChunk) across shares
        Add resilienthandles mount parm
        [SMB3] Send durable handle v2 contexts when use of persistent handles 
required
        [SMB3] Display persistenthandles in /proc/mounts for SMB3 shares if 
enabled
        [SMB3] Enable checking for continuous availability and persistent 
handle support
        [SMB3] Add parsing for new mount option controlling persistent handles
        Allow duplicate extents in SMB3 not just SMB3.1.1

  commit e75cdf9898132f521df98a3ce1c280a2f85d360a
  Merge: ca4ba96 d5f2e33
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 13 16:30:29 2015 -0800

      Merge branch 'for-linus-4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs

      Pull btrfs fixes and cleanups from Chris Mason:
       "Some of this got cherry-picked from a github repo this week, but I
        verified the patches.

        We have three small scrub cleanups and a collection of fixes"

      * 'for-linus-4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mason/linux-btrfs:
        btrfs: Use fs_info directly in btrfs_delete_unused_bgs
        btrfs: Fix lost-data-profile caused by balance bg
        btrfs: Fix lost-data-profile caused by auto removing bg
        btrfs: Remove len argument from scrub_find_csum
        btrfs: Reduce unnecessary arguments in scrub_recheck_block
        btrfs: Use scrub_checksum_data and scrub_checksum_tree_block for 
scrub_recheck_block_checksum
        btrfs: Reset sblock->xxx_error stats before calling 
scrub_recheck_block_checksum
        btrfs: scrub: setup all fields for sblock_to_check
        btrfs: scrub: set error stats when tree block spanning stripes
        Btrfs: fix race when listing an inode's xattrs
        Btrfs: fix race leading to BUG_ON when running delalloc for nodatacow
        Btrfs: fix race leading to incorrect item deletion when dropping extents
        Btrfs: fix sleeping inside atomic context in qgroup rescan worker
        Btrfs: fix race waiting for qgroup rescan worker
        btrfs: qgroup: exit the rescan worker during umount
        Btrfs: fix extent accounting for partial direct IO writes

  commit d29d67357db8dad08f97162bbeb51e4975ee67fd
  Author: Ashwin Chaugule <ashwin.chaugule@xxxxxxxxxx>
  Date:   Thu Nov 12 19:52:30 2015 -0500

      ACPI / CPPC: Use h/w reduced version of the PCCT structure

      CPPC is enabled only on platforms which support the h/w reduced
      ACPI specification, so use the h/w reduced version of the PCCT
      consistently when deferencing PCCT contents.

      Fixes: 337aadff8e45 (ACPI: Introduce CPU performance controls using CPPC)
      Signed-off-by: Ashwin Chaugule <ashwin.chaugule@xxxxxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit 5369a21e3f26ef9d2bf6ea1b322d6899a4ed08e0
  Author: Len Brown <len.brown@xxxxxxxxx>
  Date:   Thu Nov 12 02:42:32 2015 -0500

      x86: remove unused definition of MSR_NHM_PLATFORM_INFO

      MSR_NHM_PLATFORM_INFO has been replaced by...
      MSR_PLATFORM_INFO

      Signed-off-by: Len Brown <len.brown@xxxxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit ec0adc539b8bf59b7c00db0748671f6594b77843
  Author: Len Brown <len.brown@xxxxxxxxx>
  Date:   Thu Nov 12 02:42:31 2015 -0500

      tools/power turbostat: use new name for MSR_PLATFORM_INFO

      MSR_PLATFORM_INFO is the new name for MSR_NHM_PLATFORM_INFO

      no functional change

      Signed-off-by: Len Brown <len.brown@xxxxxxxxx>
      Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>

  commit bbdb5c22e12507e7f1637091bc24fe4d33e128e5
  Merge: e60e063 5e0baca
  Author: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
  Date:   Fri Nov 13 11:56:45 2015 -0800

      Merge branch 'next' into for-linus

      Prepare second round of input updates for 4.3 merge window.

  commit ca4ba96e02e932a0c9997a40fd51253b5b2d0f9d
  Merge: 4aeabc6 583d0fe
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 13 09:24:40 2015 -0800

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client

      Pull Ceph updates from Sage Weil:
       "There are several patches from Ilya fixing RBD allocation lifecycle
        issues, a series adding a nocephx_sign_messages option (and associated
        bug fixes/cleanups), several patches from Zheng improving the
        (directory) fsync behavior, a big improvement in IO for direct-io
        requests when striping is enabled from Caifeng, and several other
        small fixes and cleanups"

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client:
        libceph: clear msg->con in ceph_msg_release() only
        libceph: add nocephx_sign_messages option
        libceph: stop duplicating client fields in messenger
        libceph: drop authorizer check from cephx msg signing routines
        libceph: msg signing callouts don't need con argument
        libceph: evaluate osd_req_op_data() arguments only once
        ceph: make fsync() wait unsafe requests that created/modified inode
        ceph: add request to i_unsafe_dirops when getting unsafe reply
        libceph: introduce ceph_x_authorizer_cleanup()
        ceph: don't invalidate page cache when inode is no longer used
        rbd: remove duplicate calls to rbd_dev_mapping_clear()
        rbd: set device_type::release instead of device::release
        rbd: don't free rbd_dev outside of the release callback
        rbd: return -ENOMEM instead of pool id if rbd_dev_create() fails
        libceph: use local variable cursor instead of &msg->cursor
        libceph: remove con argument in handle_reply()
        ceph: combine as many iovec as possile into one OSD request
        ceph: fix message length computation
        ceph: fix a comment typo
        rbd: drop null test before destroy functions

  commit 4aeabc6b5ca3b9d025f287978096e138bdfbdd35
  Merge: be4773e 91633a6
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 13 09:19:05 2015 -0800

      Merge tag '4.4-additional' of git://git.lwn.net/linux

      Pull more documentation updates from Jon Corbet:
       "A few more documentation patches that wandered in and have no reason
        to wait; these include some improvements to the suggestions for email
        clients and patch submission"

      * tag '4.4-additional' of git://git.lwn.net/linux:
        Documentation: Add minimal Mutt config for using Gmail
        Documentation: Add note on sending files directly with Mutt
        Documentation: dontdiff: remove media from dontdiff
        Documentation/SubmittingPatches: discuss In-Reply-To
        Remove email address from Documentation/filesystems/overlayfs.txt
        can-doc: Add missing semicolon to example

  commit be4773e6a11a0cc1e63c9c32f000b870e51b8c01
  Merge: f6d07df f20780f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 13 09:12:38 2015 -0800

      Merge branch 'drm-next' of git://people.freedesktop.org/~airlied/linux

      Pull drm sti driver updates from Dave Airlie:
       "The sti driver had a requirement on some patches in Greg's tree, they
        are in, so I see no problems just merging this one now"

      * 'drm-next' of git://people.freedesktop.org/~airlied/linux:
        drm/sti: load HQVDP firmware the first time HQVDP's plane is used
        drm/sti: fix typo issue in sti_mode_config_init
        drm/sti: set mixer background color through module param
        drm/sti: Remove local fbdev emulation Kconfig option
        drm/sti: remove redundant sign extensions
        drm/sti: hdmi use of_get_i2c_adapter_by_node interface
        drm/sti: hdmi fix i2c adapter device refcounting
        drm/sti: Do not export symbols
        drm/sti: Build monolithic driver
        drm/sti: Use drm_crtc_vblank_*() API
        drm/sti: Store correct CRTC index in events
        drm/sti: Select FW_LOADER
        drm/sti: Constify function pointer structs

  commit 092b1f0b5f9f797812da0de927c3aa26acbe8762
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Fri Nov 13 12:29:11 2015 +0000

      perf probe: Clear probe_trace_event when add_probe_trace_event() fails

      When probing with a glob, errors in add_probe_trace_event() won't be
      passed to debuginfo__find_trace_events() because it would be modified by
      probe_point_search_cb(). It causes a segfault if perf fails to find an
      argument for a probe point matched by the glob. For example:

        # ./perf probe -v -n 'SyS_dup? oldfd'
        probe-definition(0): SyS_dup? oldfd
        symbol:SyS_dup? file:(null) line:0 offset:0 return:0 lazy:(null)
        parsing arg: oldfd into oldfd
        1 arguments
        Looking at the vmlinux_path (7 entries long)
        Using /lib/modules/4.3.0-rc4+/build/vmlinux for symbols
        Open Debuginfo file: /lib/modules/4.3.0-rc4+/build/vmlinux
        Try to find probe point from debuginfo.
        Matched function: SyS_dup3
        found inline addr: 0xffffffff812095c0
        Probe point found: SyS_dup3+0
        Searching 'oldfd' variable in context.
        Converting variable oldfd into trace event.
        oldfd type is long int.
        found inline addr: 0xffffffff812096d4
        Probe point found: SyS_dup2+36
        Searching 'oldfd' variable in context.
        Failed to find 'oldfd' in this function.
        Matched function: SyS_dup3
        Probe point found: SyS_dup3+0
        Searching 'oldfd' variable in context.
        Converting variable oldfd into trace event.
        oldfd type is long int.
        Matched function: SyS_dup2
        Probe point found: SyS_dup2+0
        Searching 'oldfd' variable in context.
        Converting variable oldfd into trace event.
        oldfd type is long int.
        Found 4 probe_trace_events.
        Opening /sys/kernel/debug/tracing//kprobe_events write=1
        Writing event: p:probe/SyS_dup3 _text+2135488 oldfd=%di:s64
        Segmentation fault (core dumped)
        #

      This patch ensures that add_probe_trace_event() doesn't touches
      tf->ntevs and tf->tevs if those functions fail.

      After the patch:

        # perf probe  'SyS_dup? oldfd'
        Failed to find 'oldfd' in this function.
        Added new events:
          probe:SyS_dup3       (on SyS_dup? with oldfd)
          probe:SyS_dup3_1     (on SyS_dup? with oldfd)
          probe:SyS_dup2       (on SyS_dup? with oldfd)

        You can now use it in all perf tools, such as:

        perf record -e probe:SyS_dup2 -aR sleep 1

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1447417761-156094-3-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 0196e787ceb58cdfea822482ec70019bc16cbd51
  Author: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
  Date:   Fri Nov 13 12:29:10 2015 +0000

      perf probe: Fix memory leaking on failure by clearing all 
probe_trace_events

      Fix memory leaking on the debuginfo__find_trace_events() failure path
      which frees an array of probe_trace_events but doesn't clears all the
      allocated sub-structures and strings.

      So, before doing zfree(tevs), clear all the array elements which may
      have allocated resources.

      Reported-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Signed-off-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1447417761-156094-2-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit d8145b3e30a24280c396d88c8703c50a1ea0aa3a
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Nov 13 11:48:32 2015 +0200

      perf inject: Also re-pipe lost_samples event

      perf inject must re-pipe all events otherwise they get dropped from the
      output file.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1447408112-1920-4-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 1216b65c502e0f130cc9984dfd5f9e1968c1eb46
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Nov 13 11:48:31 2015 +0200

      perf buildid-list: Requires ordered events

      'perf buildid-list' processes events to determine hits (i.e. with-hits
      option).  That may not work if events are not sorted in order. i.e. MMAP
      events must be processed before the samples that depend on them so that
      sample processing can 'hit' the DSO to which the MMAP refers.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1447408112-1920-3-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit e266a753bf51b2c3b46d0d230349662c35ac5629
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Nov 13 11:48:30 2015 +0200

      perf symbols: Fix dso lookup by long name and missing buildids

      Commit 4598a0a6d22f ("perf symbols: Improve DSO long names lookup speed
      with rbtree") Added a tree to lookup dsos by long name.  That tree gets
      corrupted whenever a dso long name is changed because the tree is not
      updated.

      One effect of that is buildid-list does not work with the 'with-hits'
      option because dso lookup fails and results in two structs for the same
      dso.  The first has the buildid but no hits, the second has hits but no
      buildid. e.g.

      Before:

        $ tools/perf/perf record ls
        arch     certs    CREDITS  Documentation  firmware  include
        ipc      Kconfig  lib      Makefile       net       REPORTING-BUGS
        scripts  sound    usr      block          COPYING   crypto
        drivers  fs       init     Kbuild         kernel    MAINTAINERS
        mm       README   samples  security       tools     virt
        [ perf record: Woken up 1 times to write data ]
        [ perf record: Captured and wrote 0.012 MB perf.data (11 samples) ]
        $ tools/perf/perf buildid-list
        574da826c66538a8d9060d393a8866289bd06005 [kernel.kallsyms]
        30c94dc66a1fe95180c3d68d2b89e576d5ae213c 
/lib/x86_64-linux-gnu/libc-2.19.so
        $ tools/perf/perf buildid-list -H
        574da826c66538a8d9060d393a8866289bd06005 [kernel.kallsyms]
        0000000000000000000000000000000000000000 
/lib/x86_64-linux-gnu/libc-2.19.so

      After:

        $ tools/perf/perf buildid-list -H
        574da826c66538a8d9060d393a8866289bd06005 [kernel.kallsyms]
        30c94dc66a1fe95180c3d68d2b89e576d5ae213c 
/lib/x86_64-linux-gnu/libc-2.19.so

      The fix is to record the root of the tree on the dso so that
      dso__set_long_name() can update the tree when the long name changes.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Don Zickus <dzickus@xxxxxxxxxx>
      Cc: Douglas Hatch <doug.hatch@xxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Scott J Norton <scott.norton@xxxxxx>
      Cc: Waiman Long <Waiman.Long@xxxxxx>
      Fixes: 4598a0a6d22f ("perf symbols: Improve DSO long names lookup speed 
with rbtree")
      Link: 
http://lkml.kernel.org/r/1447408112-1920-2-git-send-email-adrian.hunter@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit ff38e82931aeaa339d6bf4a9980e011cbfd14927
  Author: Ping Cheng <pinglinux@xxxxxxxxx>
  Date:   Thu Nov 12 17:21:14 2015 -0800

      HID: wacom: Add outbounding area for DTU1141

      DTU1141 has an extra 1 mm tablet active outbounding area on each
      side of the display, same as those recently released DTUs.

      Signed-off-by: Ping Cheng <pingc@xxxxxxxxx>
      Signed-off-by: Jiri Kosina <jkosina@xxxxxxx>

  commit 176155dac13f528e0a58c14dc322623219365d91
  Author: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
  Date:   Wed Oct 21 14:57:09 2015 -0700

      crypto: qat - don't use userspace pointer

      Bugfix - don't dereference userspace pointer.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Tadeusz Struk <tadeusz.struk@xxxxxxxxx>
      Signed-off-by: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>

  commit 2a49f02a7580d23802ea0e16ceb6d5523ab21aa8
  Merge: 41ac18e 2059fc7
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Fri Nov 13 10:10:45 2015 +0100

      Merge tag 'perf-urgent-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/urgent

      Pull perf/urgent fixes from Arnaldo Carvalho de Melo:

        - Fix 'd' hotkey for filtering by DSO in the top/report
          TUI browser (Arnaldo Carvalho de Melo)

        - Allow forcing reading of non-root owned /tmp/perf-PID JIT
          symbol maps (Arnaldo Carvalho de Melo)

        - Rebuild rbtree when adjusting symbols for kcore (Adrian Hunter)

        - Actually install tmon in the tools/ install rule (Kamal Mostafa)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 0a5149ba02bdf75281b8bc94cf6dfa94c527fa6f
  Author: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
  Date:   Fri Nov 13 12:35:36 2015 +1100

      mpt3sas: fix inline markers on non inline function declarations

      After merging the scsi tree, today's linux-next build (powerpc
      allyesconfig) failed like this:

      In file included from drivers/scsi/mpt3sas/mpt3sas_scsih.c:59:0:
      drivers/scsi/mpt3sas/mpt3sas_scsih.c: In function '_scsih_io_done':
      drivers/scsi/mpt3sas/mpt3sas_base.h:1414:1: error: inlining failed in 
call to always_inline 'mpt3sas_scsi_direct_io_get': function body not available
       mpt3sas_scsi_direct_io_get(struct MPT3SAS_ADAPTER *ioc, u16 smid);
       ^
      drivers/scsi/mpt3sas/mpt3sas_scsih.c:4448:6: error: called from here
        if (mpt3sas_scsi_direct_io_get(ioc, smid) &&
            ^
      In file included from drivers/scsi/mpt3sas/mpt3sas_scsih.c:59:0:
      drivers/scsi/mpt3sas/mpt3sas_base.h:1416:1: error: inlining failed in 
call to always_inline 'mpt3sas_scsi_direct_io_set': function body not available
       mpt3sas_scsi_direct_io_set(struct MPT3SAS_ADAPTER *ioc, u16 smid, u8 
direct_io);
       ^
      drivers/scsi/mpt3sas/mpt3sas_scsih.c:4454:3: error: called from here
         mpt3sas_scsi_direct_io_set(ioc, smid, 0);
         ^
      In file included from drivers/scsi/mpt3sas/mpt3sas_scsih.c:5
      9:0:
      drivers/scsi/mpt3sas/mpt3sas_base.h:1416:1: error: inlining failed in 
call to always_inline 'mpt3sas_scsi_direct_io_set': function body not available
       mpt3sas_scsi_direct_io_set(struct MPT3SAS_ADAPTER *ioc, u16 smid, u8 
direct_io);
       ^
      drivers/scsi/mpt3sas/mpt3sas_scsih.c:4454:3: error: called from here
         mpt3sas_scsi_direct_io_set(ioc, smid, 0);
         ^

      Presumably caused by commit

        c84b06a48c4d ("mpt3sas: Single driver module which supports both SAS 
2.0 & SAS 3.0 HBAs")

      Signed-off-by: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 152d7bd80dca5ce77ec2d7313149a2ab990e808e
  Author: Dan Williams <dan.j.williams@xxxxxxxxx>
  Date:   Thu Nov 12 18:33:54 2015 -0800

      dax: fix __dax_pmd_fault crash

      Since 4.3 introduced devm_memremap_pages() the pfns handled by DAX may
      optionally have a struct page backing.  When a mapped pfn reaches
      vmf_insert_pfn_pmd() it fails with a crash signature like the following:

       kernel BUG at mm/huge_memory.c:905!
       [..]
       Call Trace:
        [<ffffffff812a73ba>] __dax_pmd_fault+0x2ea/0x5b0
        [<ffffffffa01a4182>] xfs_filemap_pmd_fault+0x92/0x150 [xfs]
        [<ffffffff811fbe02>] handle_mm_fault+0x312/0x1b50

      Fix this by falling back to 4K mappings in the pfn_valid() case.  Longer
      term, vmf_insert_pfn_pmd() needs to grow support for architectures that
      can provide a 'pmd_special' capability.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Reported-by: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit f6d07dfcb15aad199d7351d3122eabd506968daf
  Merge: 0e97606 5bad7d2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Nov 12 18:24:47 2015 -0800

      Merge branch 'drm-fixes' of git://people.freedesktop.org/~airlied/linux

      Pull drm fixes from Dave Airlie:
       "One urgent fix for an oops under console lock in some drivers, one
        uapi fix, and one revert to fix rockchip regression"

      * 'drm-fixes' of git://people.freedesktop.org/~airlied/linux:
        Revert "drm/rockchip: Convert the probe function to the generic 
drm_of_component_probe()"
        drm: Don't oops in drm_calc_timestamping_constants() if 
drm_vblank_init() wasn't called
        drm: Use userspace compatible type in fourcc_mod_code macro

  commit 0e976064256523ca604bd82048ae0e3402ce2467
  Merge: 5e2078b e428abb
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Nov 12 16:22:54 2015 -0800

      Merge tag 'trace-v4.4-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace

      Pull trace cleanups from Steven Rostedt:
       "This contains three more clean up patches.

        One patch is needed to make tracing work without debugfs now that
        tracing uses its own tracefs.

        The second is removing an unused variable.

        The third is fixing a warning about unused variables when MAX_TRACER
        is not configured.  Note, this warning shows up in gcc 6.0, but does
        not show up in gcc 4.9, as it seems that gcc does not complain about
        constants not being used"

      * tag 'trace-v4.4-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace:
        tracing: #ifdef out uses of max trace when CONFIG_TRACER_MAX_TRACE is 
not set
        tracing: Remove unused ftrace_cpu_disabled per cpu variable
        tracing: Make tracing work when debugfs is not configured in

  commit f20780f3e8feec0eebcf9fb41e1d90202fffaeff
  Merge: a18e2fa e00fe64
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Fri Nov 13 10:08:19 2015 +1000

      Merge branch 'drm-sti-next-2015-11-03' of 
http://git.linaro.org/people/benjamin.gaignard/kernel into drm-next

      sti/drm changes

      Add better support for firmware loading
      lots of fixes.

      * 'drm-sti-next-2015-11-03' of 
http://git.linaro.org/people/benjamin.gaignard/kernel:
        drm/sti: load HQVDP firmware the first time HQVDP's plane is used
        drm/sti: fix typo issue in sti_mode_config_init
        drm/sti: set mixer background color through module param
        drm/sti: Remove local fbdev emulation Kconfig option
        drm/sti: remove redundant sign extensions
        drm/sti: hdmi use of_get_i2c_adapter_by_node interface
        drm/sti: hdmi fix i2c adapter device refcounting
        drm/sti: Do not export symbols
        drm/sti: Build monolithic driver
        drm/sti: Use drm_crtc_vblank_*() API
        drm/sti: Store correct CRTC index in events
        drm/sti: Select FW_LOADER
        drm/sti: Constify function pointer structs

  commit 5bad7d29a7bcffb2dbc28ea2728eeb3af13784f2
  Author: Mark Yao <mark.yao@xxxxxxxxxxxxxx>
  Date:   Tue Nov 10 16:47:19 2015 +0800

      Revert "drm/rockchip: Convert the probe function to the generic 
drm_of_component_probe()"

      This reverts commit 52f5eb60940de889ce98a876f6933b574ead3225.

      Rockchip drm can't work with generic drm_of_component_probe now

      Signed-off-by: Mark Yao <mark.yao@xxxxxxxxxxxxxx>
      Acked-by: Liviu Dudau <Liviu.Dudau@xxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 0c545ac4815657e0b062344c690ea35a11eeaec8
  Author: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
  Date:   Thu Nov 12 14:34:18 2015 +0200

      drm: Don't oops in drm_calc_timestamping_constants() if drm_vblank_init() 
wasn't called

      Seems the crtc helpers call drm_calc_timestamping_constants()
      unconditionally even if the driver didn't initialize vblank support by
      calling drm_vblank_init(). That used to be OK since the constants were
      stored under drm_crtc.

      However I broke this with
      commit eba1f35dfe14 ("drm: Move timestamping constants into 
drm_vblank_crtc")
      when I moved the constants to live inside the drm_vblank_crtc struct
      instead. If drm_vblank_init() isn't called, we don't allocate these
      structures, and so drm_calc_timestamping_constants() will oops.

      Fix it by adding a check into drm_calc_timestamping_constants() to see
      if vblank support was initialized at all. And to keep in line with other
      such checks, also toss in a check and warn for the case where vblank
      support was initialized, but the wrong number of crtcs was specified.

      Fixes the following sort of oops:
       BUG: unable to handle kernel NULL pointer dereference at 00000000000000b0
       IP: [<ffffffffa014b266>] drm_calc_timestamping_constants+0x86/0x130 [drm]
       PGD 0
       Oops: 0002 [#1] SMP
       Modules linked in: sr_mod cdrom mgag200(+) i2c_algo_bit drm_kms_helper 
ahci syscopyarea sysfillrect sysimgblt libahci fb_sys_fops bnx2x ttm tg3(+) 
mdio drm ptp sd_mod libata i2c_core pps_core libcrc32c hpsa dm_mirror 
dm_region_hash dm_log dm_mod
       CPU: 0 PID: 418 Comm: kworker/0:2 Not tainted 4.3.0+ #1
       Hardware name: HP ProLiant DL380 Gen9, BIOS P89 06/09/2015
       Workqueue: events work_for_cpu_fn
       task: ffff88046ca95500 ti: ffff88007830c000 task.ti: ffff88007830c000
       RIP: 0010:[<ffffffffa014b266>]  [<ffffffffa014b266>] 
drm_calc_timestamping_constants+0x86/0x130 [drm]
       RSP: 0018:ffff88007830f4e8  EFLAGS: 00010246
       RAX: 0000000000fe4c00 RBX: ffff88006a849160 RCX: 0000000000000540
       RDX: 0000000000000000 RSI: 000000000000fde8 RDI: ffff88006a849000
       RBP: ffff88007830f518 R08: ffff88007830c000 R09: 00000001b87e3712
       R10: 00000000000050c4 R11: 0000000000000000 R12: 0000000000fe4c00
       R13: ffff88006a849000 R14: 0000000000000000 R15: 000000000000fde8
       FS:  0000000000000000(0000) GS:ffff88046f800000(0000) 
knlGS:0000000000000000
       CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
       CR2: 00000000000000b0 CR3: 00000000019d6000 CR4: 00000000001406f0
       Stack:
        ffff88007830f518 ffff88006a849000 ffff880c69b90340 ffff880c69b90000
        ffff880c69b90348 ffff880c69b90340 ffff88007830f748 ffffffffa042f7e7
        ffff88006a849090 0000000000000000 ffff88006a849160 0000000000000000
       Call Trace:
        [<ffffffffa042f7e7>] drm_crtc_helper_set_mode+0x3d7/0x4b0 
[drm_kms_helper]
        [<ffffffffa04307d4>] drm_crtc_helper_set_config+0x8d4/0xb10 
[drm_kms_helper]
        [<ffffffffa01548d4>] drm_mode_set_config_internal+0x64/0x100 [drm]
        [<ffffffffa043c342>] drm_fb_helper_pan_display+0xa2/0x280 
[drm_kms_helper]
        [<ffffffff81392c7b>] fb_pan_display+0xbb/0x170
        [<ffffffff8138cf70>] bit_update_start+0x20/0x50
        [<ffffffff8138b81b>] fbcon_switch+0x39b/0x590
        [<ffffffff8140a3d0>] redraw_screen+0x1a0/0x240
        [<ffffffff8140b30e>] do_bind_con_driver+0x2ee/0x310
        [<ffffffff8140b651>] do_take_over_console+0x141/0x1b0
        [<ffffffff81387377>] do_fbcon_takeover+0x57/0xb0
        [<ffffffff8138c98b>] fbcon_event_notify+0x60b/0x750
        [<ffffffff810a5599>] notifier_call_chain+0x49/0x70
        [<ffffffff810a58dd>] __blocking_notifier_call_chain+0x4d/0x70
        [<ffffffff810a5916>] blocking_notifier_call_chain+0x16/0x20
        [<ffffffff8139282b>] fb_notifier_call_chain+0x1b/0x20
        [<ffffffff81394881>] register_framebuffer+0x1f1/0x330
        [<ffffffffa043d9aa>] drm_fb_helper_initial_config+0x27a/0x3d0 
[drm_kms_helper]
        [<ffffffffa0469b4d>] mgag200_fbdev_init+0xdd/0xf0 [mgag200]
        [<ffffffffa0468586>] mgag200_modeset_init+0x176/0x1e0 [mgag200]
        [<ffffffffa0464659>] mgag200_driver_load+0x3f9/0x580 [mgag200]
        [<ffffffffa014e067>] drm_dev_register+0xa7/0xb0 [drm]
        [<ffffffffa015054f>] drm_get_pci_dev+0x8f/0x1e0 [drm]
        [<ffffffffa046937b>] mga_pci_probe+0x9b/0xc0 [mgag200]
        [<ffffffff813662d5>] local_pci_probe+0x45/0xa0
        [<ffffffff8109afe4>] work_for_cpu_fn+0x14/0x20
        [<ffffffff8109e13c>] process_one_work+0x14c/0x3c0
        [<ffffffff8109eaa4>] worker_thread+0x244/0x470
        [<ffffffff8168bfba>] ? __schedule+0x2aa/0x760
        [<ffffffff8109e860>] ? rescuer_thread+0x310/0x310
        [<ffffffff810a4438>] kthread+0xd8/0xf0
        [<ffffffff810a4360>] ? kthread_park+0x60/0x60
        [<ffffffff8169030f>] ret_from_fork+0x3f/0x70
        [<ffffffff810a4360>] ? kthread_park+0x60/0x60
       Code: f6 31 d2 41 89 c2 8b 83 b4 00 00 00 0f af c1 48 98 48 69 c0 40 42 
0f 00 48 f7 f6 f6 43 74 10 41 89 c4 75 26 f6 05 9a 6f 03 00 01 <45> 89 96 b0 00 
00 00 45 89 a6 ac 00 00 00 75 35 48 83 c4 08 5b
       RIP  [<ffffffffa014b266>] drm_calc_timestamping_constants+0x86/0x130 
[drm]
        RSP <ffff88007830f4e8>
       CR2: 00000000000000b0

      Cc: Jeff Moyer <jmoyer@xxxxxxxxxx>
      Reported-by: Jeff Moyer <jmoyer@xxxxxxxxxx>
      References: 
http://lists.freedesktop.org/archives/dri-devel/2015-November/094217.html
      Fixes: eba1f35dfe14 ("drm: Move timestamping constants into 
drm_vblank_crtc")
      Signed-off-by: Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 9589fcde27a6726b83bc525fba5c57e4b2c0328e
  Merge: a18e2fa 6172180
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Fri Nov 13 09:54:31 2015 +1000

      Merge tag 'topic/drm-fixes-2015-11-11' of 
git://anongit.freedesktop.org/drm-intel into drm-fixes

      Single fix for uapi.

      * tag 'topic/drm-fixes-2015-11-11' of 
git://anongit.freedesktop.org/drm-intel:
        drm: Use userspace compatible type in fourcc_mod_code macro

  commit 5e2078b2899da31ff4c9854e932b186685d5bea0
  Merge: a4d8c7c e3a7a3b
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Nov 12 15:54:30 2015 -0800

      Merge branch 'for-linus' of git://git.kernel.dk/linux-block

      Pull misc block fixes from Jens Axboe:
       "Stuff that got collected after the merge window opened.  This
        contains:

         - NVMe:
              - Fix for non-striped transfer size setting for NVMe from
                Sathyavathi.
              - (Some) support for the weird Apple nvme controller in the
                macbooks. From Stephan Günther.

         - The error value leak for dax from Al.

         - A few minor blk-mq tweaks from me.

         - Add the new linux-block@xxxxxxxxxxxxxxx mailing list to the
           MAINTAINERS file.

         - Discard fix for brd, from Jan.

         - A kerneldoc warning for block core from Randy.

         - An older fix from Vivek, converting a WARN_ON() to a rate limited
           printk when a device is hot removed with dirty inodes"

      * 'for-linus' of git://git.kernel.dk/linux-block:
        block: don't hardcode blk_qc_t -> tag mask
        dax_io(): don't let non-error value escape via retval instead of EFAULT
        block: fix blk-core.c kernel-doc warning
        fs/block_dev.c: Remove WARN_ON() when inode writeback fails
        NVMe: add support for Apple NVMe controller
        NVMe: use split lo_hi_{read,write}q
        blk-mq: mark __blk_mq_complete_request() static
        MAINTAINERS: add reference to new linux-block list
        NVMe: Increase the max transfer size when mdts is 0
        brd: Refuse improperly aligned discard requests

  commit a4d8c7c9f7754405c52c59e1b1e984df5749d7bb
  Merge: a18e2fa cc25b99
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Nov 12 15:48:10 2015 -0800

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

      Pull security subsystem fixes from James Morris:
       "This includes several fixes for TPM, as well as a fix for the x.509
        certificate parser to address CVE-2015-5327"

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security:
        X.509: Fix the time validation [ver #2]
        tpm: fix compat 'ppi' link handling in tpm_chip_register()
        tpm: fix missing migratable flag in sealing functionality for TPM2
        TPM: revert the list handling logic fixed in 398a1e7
        TPM: Avoid reference to potentially freed memory
        tpm_tis: restore IRQ vector in IO memory after failed probing
        tpm_tis: free irq after probing

  commit a18e2fa5e670a1b84e66522b221c42875b02028a
  Merge: 7dac710 01b305a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Nov 12 15:33:11 2015 -0800

      Merge tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux

      Pull arm64 fixes and clean-ups from Catalin Marinas:
       "Here's a second pull request for this merging window with some
        fixes/clean-ups:

         - __cmpxchg_double*() return type fix to avoid truncation of a long
           to int and subsequent logical "not" in cmpxchg_double()
           misinterpreting the operation success/failure

         - BPF fixes for mod and div by zero

         - Fix compilation with STRICT_MM_TYPECHECKS enabled

         - VDSO build fix without libgcov

         - Some static and __maybe_unused annotations

         - Kconfig clean-up (FRAME_POINTER)

         - defconfig update for CRYPTO_CRC32_ARM64"

      * tag 'arm64-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux:
        arm64: suspend: make hw_breakpoint_restore static
        arm64: mmu: make split_pud and fixup_executable static
        arm64: smp: make of_parse_and_init_cpus static
        arm64: use linux/types.h in kvm.h
        arm64: build vdso without libgcov
        arm64: mark cpus_have_hwcap as __maybe_unused
        arm64: remove redundant FRAME_POINTER kconfig option and force to 
select it
        arm64: fix R/O permissions of FDT mapping
        arm64: fix STRICT_MM_TYPECHECKS issue in PTE_CONT manipulation
        arm64: bpf: fix mod-by-zero case
        arm64: bpf: fix div-by-zero case
        arm64: Enable CRYPTO_CRC32_ARM64 in defconfig
        arm64: cmpxchg_dbl: fix return value type

  commit 7dac7102afbeb99daa454f555f1ea1f42fad2f78
  Merge: 3370b69 f639eeb
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Nov 12 15:26:39 2015 -0800

      Merge tag 'for-4.4' of git://git.osdn.jp/gitroot/uclinux-h8/linux

      Pull h8300 updates from Yoshinori Sato:
       "Some bug fixes"

      * tag 'for-4.4' of git://git.osdn.jp/gitroot/uclinux-h8/linux:
        h8300: enable CLKSRC_OF
        h8300: Don't set CROSS_COMPILE unconditionally
        asm-generic: {get,put}_user ptr argument evaluate only 1 time
        h8300: bit io fix
        h8300: zImage fix
        h8300: register address fix
        h8300: Fix alignment for .data
        h8300: unaligned divcr register support.

  commit 3370b69eb0c1f6a05f9051e8fc3e8768461a80f7
  Merge: be23c9d 3702897
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Nov 12 14:34:06 2015 -0800

      Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm

      Pull second batch of kvm updates from Paolo Bonzini:
       "Four changes:

         - x86: work around two nasty cases where a benign exception occurs
           while another is being delivered.  The endless stream of exceptions
           causes an infinite loop in the processor, which not even NMIs or
           SMIs can interrupt; in the virt case, there is no possibility to
           exit to the host either.

         - x86: support for Skylake per-guest TSC rate.  Long supported by
           AMD, the patches mostly move things from there to common
           arch/x86/kvm/ code.

         - generic: remove local_irq_save/restore from the guest entry and
           exit paths when context tracking is enabled.  The patches are a few
           months old, but we discussed them again at kernel summit.  Andy
           will pick up from here and, in 4.5, try to remove it from the user
           entry/exit paths.

         - PPC: Two bug fixes, see merge commit 370289756becc for details"

      * tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm: (21 
commits)
        KVM: x86: rename update_db_bp_intercept to update_bp_intercept
        KVM: svm: unconditionally intercept #DB
        KVM: x86: work around infinite loop in microcode when #AC is delivered
        context_tracking: avoid irq_save/irq_restore on guest entry and exit
        context_tracking: remove duplicate enabled check
        KVM: VMX: Dump TSC multiplier in dump_vmcs()
        KVM: VMX: Use a scaled host TSC for guest readings of MSR_IA32_TSC
        KVM: VMX: Setup TSC scaling ratio when a vcpu is loaded
        KVM: VMX: Enable and initialize VMX TSC scaling
        KVM: x86: Use the correct vcpu's TSC rate to compute time scale
        KVM: x86: Move TSC scaling logic out of call-back read_l1_tsc()
        KVM: x86: Move TSC scaling logic out of call-back adjust_tsc_offset()
        KVM: x86: Replace call-back compute_tsc_offset() with a common function
        KVM: x86: Replace call-back set_tsc_khz() with a common function
        KVM: x86: Add a common TSC scaling function
        KVM: x86: Add a common TSC scaling ratio field in kvm_vcpu_arch
        KVM: x86: Collect information for setting TSC scaling ratio
        KVM: x86: declare a few variables as __read_mostly
        KVM: x86: merge handle_mmio_page_fault and handle_mmio_page_fault_common
        KVM: PPC: Book3S HV: Don't dynamically split core when already split
        ...

  commit 2059fc7a5a9e667797b8ec503bfb4685afee48d8
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Nov 12 16:50:13 2015 -0300

      perf symbols: Allow forcing reading of non-root owned files by root

      When the root user tries to read a file owned by some other user we get:

        # ls -la perf.data
        -rw-------. 1 acme acme 20032 Nov 12 15:50 perf.data
        # perf report
        File perf.data not owned by current user or root (use -f to override)
        # perf report -f | grep -v ^# | head -2
          30.96%  ls       [kernel.vmlinux]  [k] do_set_pte
          28.24%  ls       libc-2.20.so      [.] intel_check_word
        #

      That wasn't happening when the symbol code tried to read a JIT map,
      where the same check was done but no forcing was possible, fix it.

      Reported-by: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Tested-by: Brendan Gregg <brendan.d.gregg@xxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://permalink.gmane.org/gmane.linux.kernel.perf.user/2380
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit b7f294b58adb02d928dccb04bd39cb789db09e1f
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Nov 12 16:01:56 2015 -0300

      perf hists browser: The dso can be obtained from popup_action->ms.map->dso

      So no need to have a 'dso' member in 'popup_action', remove it as no
      code is using it, already.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-76a6s0007slug0op0wkl6o8b@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit fae00650f7910da7064f45d49c95df88fab816f6
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Thu Nov 12 15:59:26 2015 -0300

      perf hists browser: Fix 'd' hotkey action to filter by DSO

      When pressing 'd' the expected action is to filter all entries by the
      DSO in the current entry, but for that the action->map needs to be set,
      and only action->dso was being set, fix it.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Fixes: 045b80dd0340 ("perf hists browser: Use the map to determine if a 
DSO is being used as a kernel")
      Link: http://lkml.kernel.org/n/tip-xqhfzgoblq49lk5h5u82atro@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 866548dd6e22c3795ae5146a9746a5cf659698f1
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Fri Nov 6 15:59:29 2015 +0200

      perf symbols: Rebuild rbtree when adjusting symbols for kcore

      Normally symbols are read from the DSO and adjusted, if need be, so that
      the symbol start matches the file offset in the DSO file (we want the
      file offset because that is what we know from MMAP events). That is done
      by dso__load_sym() which inserts the symbols *after* adjusting them.

      In the case of kcore, the symbols have been read from kallsyms and the
      symbol start is the memory address. The symbols have to be adjusted to
      match the kcore file offsets. dso__split_kallsyms_for_kcore() does that,
      but now the adjustment is being done *after* the symbols have been
      inserted. It appears dso__split_kallsyms_for_kcore() was assuming that
      changing the symbol start would not change the order in the rbtree -
      which is, of course, not guaranteed.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Tested-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: http://lkml.kernel.org/r/563CB241.2090701@xxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f6ba98c5dc78708cb7fd29950c4a50c4c7e88f95
  Author: Kamal Mostafa <kamal@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 14:25:34 2015 -0800

      tools: Add a "make all" rule

      Signed-off-by: Kamal Mostafa <kamal@xxxxxxxxxxxxx>
      Acked-by: Pavel Machek <pavel@xxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Jonathan Cameron <jic23@xxxxxxxxxx>
      Cc: Pali Rohar <pali.rohar@xxxxxxxxx>
      Cc: Roberta Dobrescu <roberta.dobrescu@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1447280736-2161-2-git-send-email-kamal@xxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 49e4a2293035b420e807e739999d59c8ec1488e9
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Thu Nov 12 22:03:40 2015 +0100

      stmmac: avoid ipq806x constant overflow warning

      Building dwmac-ipq806x on a 64-bit architecture produces a harmless
      warning from gcc:

      stmmac/dwmac-ipq806x.c: In function 'ipq806x_gmac_probe':
      include/linux/bitops.h:6:19: warning: overflow in implicit constant 
conversion [-Woverflow]
        val = QSGMII_PHY_CDR_EN |
      stmmac/dwmac-ipq806x.c:333:8: note: in expansion of macro 
'QSGMII_PHY_CDR_EN'
       #define QSGMII_PHY_CDR_EN   BIT(0)
       #define BIT(nr)   (1UL << (nr))

      This is a result of the type conversion rules in C, when we take the
      logical OR of multiple different types. In particular, we have
      and unsigned long

        QSGMII_PHY_CDR_EN == BIT(0) == (1ul << 0) == 0x0000000000000001ul

      and a signed int

        0xC << QSGMII_PHY_TX_DRV_AMP_OFFSET == 0xc0000000

      which together gives a signed long value

        0xffffffffc0000001l

      and when this is passed into a function that takes an unsigned int type,
      gcc warns about the signed overflow and the loss of the upper 32-bits that
      are all ones.

      This patch adds 'ul' type modifiers to the literal numbers passed in
      here, so now the expression remains an 'unsigned long' with the upper
      bits all zero, and that avoids the signed overflow and the warning.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: b1c17215d718 ("stmmac: add ipq806x glue layer")
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 2db1a57986d37653583e67ccbf13082aadc8f25d
  Author: Dan Williams <dan.j.williams@xxxxxxxxx>
  Date:   Thu Nov 12 12:13:57 2015 -0800

      ALSA: pci: depend on ZONE_DMA

      There are several sound drivers that 'select ZONE_DMA'.  This is
      backwards as ZONE_DMA is an architecture capability exported to drivers.
      Switch the polarity of the dependency to disable these drivers when the
      architecture does not support ZONE_DMA.  This was discovered in the
      context of testing/enabling devm_memremap_pages() which depends on
      ZONE_DEVICE.  ZONE_DEVICE in turn depends on !ZONE_DMA.

      Reported-by: Jeff Moyer <jmoyer@xxxxxxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit be23c9d20b341a58ad7107f9e9aa5735cea3da13
  Merge: 5d50ac7 f57ab32
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Nov 12 11:50:33 2015 -0800

      Merge tag 'pm+acpi-4.4-rc1-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm

      Pull more power management and ACPI updates from Rafael Wysocki:
       "The only new feature in this batch is support for the ACPI _CCA device
        configuration object, which it a pre-requisite for future ACPI PCI
        support on ARM64, but should not affect the other architectures.

        The rest is fixes and cleanups, mostly in cpufreq (including
        intel_pstate), the Operating Performace Points (OPP) framework and
        tools (cpupower and turbostat).

        Specifics:

         - Support for the ACPI _CCA configuration object intended to tell the
           OS whether or not a bus master device supports hardware managed
           cache coherency and a new set of functions to allow drivers to
           check the cache coherency support for devices in a platform
           firmware interface agnostic way (Suravee Suthikulpanit, Jeremy
           Linton).

         - ACPI backlight quirks for ESPRIMO Mobile M9410 and Dell XPS L421X
           (Aaron Lu, Hans de Goede).

         - Fixes for the arm_big_little and s5pv210-cpufreq cpufreq drivers
           (Jon Medhurst, Nicolas Pitre).

         - kfree()-related fixup for the recently introduced CPPC cpufreq
           frontend (Markus Elfring).

         - intel_pstate fix reducing kernel log noise on systems where
           P-states are managed by hardware (Prarit Bhargava).

         - intel_pstate maintainers information update (Srinivas Pandruvada).

         - cpufreq core optimization related to the handling of delayed work
           items used by governors (Viresh Kumar).

         - Locking fixes and cleanups of the Operating Performance Points
           (OPP) framework (Viresh Kumar).

         - Generic power domains framework cleanups (Lina Iyer).

         - cpupower tool updates (Jacob Tanenbaum, Sriram Raghunathan, Thomas
           Renninger).

         - turbostat tool updates (Len Brown)"

      * tag 'pm+acpi-4.4-rc1-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm: (32 commits)
        PCI: ACPI: Add support for PCI device DMA coherency
        PCI: OF: Move of_pci_dma_configure() to pci_dma_configure()
        of/pci: Fix pci_get_host_bridge_device leak
        device property: ACPI: Remove unused DMA APIs
        device property: ACPI: Make use of the new DMA Attribute APIs
        device property: Adding DMA Attribute APIs for Generic Devices
        ACPI: Adding DMA Attribute APIs for ACPI Device
        device property: Introducing enum dev_dma_attr
        ACPI: Honor ACPI _CCA attribute setting
        cpufreq: CPPC: Delete an unnecessary check before the function call 
kfree()
        PM / OPP: Add opp_rcu_lockdep_assert() to _find_device_opp()
        PM / OPP: Hold dev_opp_list_lock for writers
        PM / OPP: Protect updates to list_dev with mutex
        PM / OPP: Propagate error properly from dev_pm_opp_set_sharing_cpus()
        cpufreq: s5pv210-cpufreq: fix wrong do_div() usage
        MAINTAINERS: update for intel P-state driver
        Creating a common structure initialization pattern for struct option
        cpupower: Enable disabled Cstates if they are below max latency
        cpupower: Remove debug message when using cpupower idle-set -D switch
        cpupower: cpupower monitor reports uninitialized values for offline cpus
        ...

  commit 382a483e53fa9a84579aa92701d54801b37fb8fd
  Merge: 3917429 086f332
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Thu Nov 12 14:17:16 2015 -0500

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf

      Pablo Neira Ayuso:

      ====================
      Netfilter fixes for net

      The following patchset contains Netfilter fixes for your net tree. This
      large batch that includes fixes for ipset, netfilter ingress, nf_tables
      dynamic set instantiation and a longstanding Kconfig dependency problem.
      More specifically, they are:

      1) Add missing check for empty hook list at the ingress hook, from
         Florian Westphal.

      2) Input and output interface are swapped at the ingress hook,
         reported by Patrick McHardy.

      3) Resolve ipset extension alignment issues on ARM, patch from Jozsef
         Kadlecsik.

      4) Fix bit check on bitmap in ipset hash type, also from Jozsef.

      5) Release buckets when all entries have expired in ipset hash type,
         again from Jozsef.

      6) Oneliner to initialize conntrack tuple object in the PPTP helper,
         otherwise the conntrack lookup may fail due to random bits in the
         structure holes, patch from Anthony Lineham.

      7) Silence a bogus gcc warning in nfnetlink_log, from Arnd Bergmann.

      8) Fix Kconfig dependency problems with TPROXY, socket and dup, also
         from Arnd.

      9) Add __netdev_alloc_pcpu_stats() to allow creating percpu counters
         from atomic context, this is required by the follow up fix for
         nf_tables.

      10) Fix crash from the dynamic set expression, we have to add new clone
          operation that should be defined when a simple memcpy is not enough.
          This resolves a crash when using per-cpu counters with new Patrick
          McHardy's flow table nft support.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 39174291d8e8acfd1113214a943263aaa03c57c8
  Author: françois romieu <romieu@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 23:35:18 2015 +0100

      r8169: fix kasan reported skb use-after-free.

      Signed-off-by: Francois Romieu <romieu@xxxxxxxxxxxxx>
      Reported-by: Dave Jones <davej@xxxxxxxxxxxxxxxxx>
      Fixes: d7d2d89d4b0af ("r8169: Add software counter for multicast 
packages")
      Acked-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Acked-by: Corinna Vinschen <vinschen@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8de5dff8bae634497f4413bc3067389f2ed267da
  Author: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>
  Date:   Tue Nov 10 16:10:45 2015 -0800

      libnvdimm: documentation clarifications

      A bunch of changes that I hope will help in understanding it
      better for first-time readers.

      Signed-off-by: Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit 589e75d15702dc720b363a92f984876704864946
  Author: Dan Williams <dan.j.williams@xxxxxxxxx>
  Date:   Sat Oct 24 19:55:58 2015 -0700

      libnvdimm, pmem: fix size trim in pmem_direct_access()

      This masking prevents access to the end of the device via dax_do_io(),
      and is unnecessary as arch_add_memory() would have rejected an unaligned
      allocation.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit f7256dc0cdbc68903502997bde619f555a910f50
  Author: Dan Williams <dan.j.williams@xxxxxxxxx>
  Date:   Wed Nov 11 16:46:33 2015 -0800

      libnvdimm, e820: fix numa node for e820-type-12 pmem ranges

      Rather than punt on the numa node for these e820 ranges try to find a
      better answer with memory_add_physaddr_to_nid() when it is available.

      Cc: <stable@xxxxxxxxxxxxxxx>
      Reported-by: Boaz Harrosh <boaz@xxxxxxxxxxxxx>
      Tested-by: Boaz Harrosh <boaz@xxxxxxxxxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit f42957967fb435aef6fc700fbbd9df89533b9a2e
  Author: Dan Williams <dan.j.williams@xxxxxxxxx>
  Date:   Tue Nov 10 15:50:33 2015 -0800

      tools/testing/nvdimm, acpica: fix flag rename build breakage

      Commit ca321d1ca672 "ACPICA: Update NFIT table to rename a flags field"
      performed a tree-wide s/ACPI_NFIT_MEM_ARMED/ACPI_NFIT_MEM_NOT_ARMED/
      operation, but missed the tools/testing/nvdimm/ directory.

      Cc: Bob Moore <robert.moore@xxxxxxxxx>
      Cc: Lv Zheng <lv.zheng@xxxxxxxxx>
      Acked-by: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit 01b305a234943c25c336a6f2f77932a4eaf125fa
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Thu Nov 12 20:04:44 2015 +0800

      arm64: suspend: make hw_breakpoint_restore static

      hw_breakpoint_restore is only used within suspend.c, so it can be
      declared static.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 9a17a213345584fbc692f6b3a715aa451d4c75e9
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Thu Nov 12 20:04:43 2015 +0800

      arm64: mmu: make split_pud and fixup_executable static

      split_pud and fixup_executable are only called from within mmu.c, so
      they can be declared static.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 29b8302b1a7baef6b4c71ff368bd14729f26eb0c
  Author: Jisheng Zhang <jszhang@xxxxxxxxxxx>
  Date:   Thu Nov 12 20:04:42 2015 +0800

      arm64: smp: make of_parse_and_init_cpus static

      of_parse_and_init_cpus is only called from within smp.c, so it can be
      declared static.

      Signed-off-by: Jisheng Zhang <jszhang@xxxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit d19279154b3fff9adff96b54d1a77dfb8f01e3da
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Thu Nov 12 15:41:08 2015 +0100

      arm64: use linux/types.h in kvm.h

      We should always use linux/types.h instead of asm/types.h for
      consistency, and Kbuild actually warns about it:

      ./usr/include/asm/kvm.h:35: include of <linux/types.h> is preferred over 
<asm/types.h>

      This patch does as Kbuild asks us.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 543097843ca7c9ac3758d0b5879ea2a6f44089de
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Thu Nov 12 15:37:12 2015 +0100

      arm64: build vdso without libgcov

      On a cross-toolchain without glibc support, libgcov may not be
      available, and attempting to build an arm64 kernel with GCOV
      enabled then results in a build error:

      
/home/arnd/cross-gcc/lib/gcc/aarch64-linux/5.2.1/../../../../aarch64-linux/bin/ld:
 cannot find -lgcov

      We don't really want to link libgcov into the vdso anyway, so
      this patch just disables GCOV in the vdso directory, just as
      we do for most other architectures.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 3d6d103538e73a5710ea66d95fa2b652bf6eab77
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Thu Nov 12 15:20:16 2015 +0100

      arm64: mark cpus_have_hwcap as __maybe_unused

      cpus_have_hwcap() is defined as a 'static' function an only used in
      one place that is inside of an #ifdef, so we get a warning when
      the only user is disabled:

      arch/arm64/kernel/cpufeature.c:699:13: warning: 'cpus_have_hwcap' defined 
but not used [-Wunused-function]

      This marks the function as __maybe_unused, so the compiler knows that
      it can drop the function definition without warning about it.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: 37b01d53ceef ("arm64/HWCAP: Use system wide safe values")
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 836d525baada26e1a7462e87805337b9a9b729f6
  Author: Kamal Mostafa <kamal@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 14:25:33 2015 -0800

      tools: Actually install tmon in the install rule

      Signed-off-by: Kamal Mostafa <kamal@xxxxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Pali Rohar <pali.rohar@xxxxxxxxx>
      Cc: Roberta Dobrescu <roberta.dobrescu@xxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1447280736-2161-1-git-send-email-kamal@xxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit f07f21b3e20c11017cea17ec841f0150a62aac53
  Author: Sascha Silbe <silbe@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 4 14:16:57 2015 +0100

      s390/sclp: _sclp_wait_int(): retain full PSW mask

      There's no reason to clear all PSW mask bits other than the addressing
      mode bits. Just use the previous PSW mask as-is.

      Signed-off-by: Sascha Silbe <silbe@xxxxxxxxxxxxxxxxxx>
      Acked-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit febdfbd2137a5727f70dfbf920105c07e6c2a21e
  Merge: 0da3968 2c5d16d
  Author: James Bottomley <JBottomley@xxxxxxxx>
  Date:   Thu Nov 12 07:06:18 2015 -0500

      Merge tag '4.4-scsi-mkp' into misc

      SCSI queue for 4.4.

      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 909cadc6c8c7e52149fb4687453277d6cabe8c80
  Author: Takashi Iwai <tiwai@xxxxxxx>
  Date:   Thu Nov 12 11:52:13 2015 +0100

      ALSA: hda - Simplify phantom jack handling for HDMI/DP

      The HDMI codec parser may create a phantom jack, but the helper
      function snd_hda_jack_add_kctl() treats always as a normal jack.  This
      is superfluous as the jack query is executed at each time the jack
      sync is performed.

      Since the HDMI codec parser is the only caller of this function, it's
      easier to change back this directly calling the original
      __snd_hda_jack_add_kctl() with phantom_jack parameter.

      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit da34232641a91ca785a787c23c158488e459b938
  Merge: bf463f2 3bfb722
  Author: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
  Date:   Thu Nov 12 11:36:03 2015 +0100

      Merge branch '4.3-fixes' into mips-for-linux-next

  commit bf463f2f7510771db180908507005379850dade0
  Author: Aurelien Jarno <aurelien@xxxxxxxxxxx>
  Date:   Sat Sep 5 18:47:31 2015 +0200

      MIPS: idle: add case for CPU_5KE

      While the 5KE processors have never been taped out, they exists though
      a CP0.PRId and experimental RTLs or QEMU implementations. Add a case
      entry in the idle code, as they can use the standard idle loop like the
      5K processors.

      Signed-off-by: Aurelien Jarno <aurelien@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11099/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 651d19fb10fac0f1f25c028c8e46ded9fc43a640
  Author: Aaro Koskinen <aaro.koskinen@xxxxxxxxx>
  Date:   Fri Sep 11 17:46:15 2015 +0300

      MIPS: Octeon: Support APPENDED_DTB

      Use appended DTB when available.

      Signed-off-by: Aaro Koskinen <aaro.koskinen@xxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11115/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 87db537da4cd1bfad388511a3647bbb497d2fb61
  Author: Aaro Koskinen <aaro.koskinen@xxxxxxxxx>
  Date:   Fri Sep 11 17:46:14 2015 +0300

      MIPS: vmlinux: create a section for appended DTB

      For bootloaders that support booting only ELF kernels and load only ELF
      segments to memory there is no easy way to supply DTB without kernel
      recompilation. For that purpose, create a section called .appended_dtb
      that can be later updated with board-specific DTB using binutils e.g. at
      kernel installation time.

      Signed-off-by: Aaro Koskinen <aaro.koskinen@xxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11114/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit d00d920338382ceaefc643760daf9936ae9c5788
  Author: Amanieu d'Antras <amanieu@xxxxxxxxx>
  Date:   Thu Nov 5 00:50:24 2015 +0000

      MIPS: Clean up compat_siginfo_t

      While mips can't use the generic compat_siginfo_t directly because
      its si_code and si_errno are inverted, we can still make it as
      close to the generic version as possible. This makes it easier
      to update when new members are added to siginfo_t.

      The main changes are adding a missing _sigsys union member and
      eliminating the unused _irix_sigchld one.

      Signed-off-by: Amanieu d'Antras <amanieu@xxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11455/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 22b14523994588279ae9c5ccfe64073c1e5b3c00
  Author: Dan Williams <dan.j.williams@xxxxxxxxx>
  Date:   Fri Oct 9 20:56:28 2015 -0400

      MIPS: Fix PAGE_MASK definition

      Make PAGE_MASK an unsigned long, like it is on x86, to avoid:

      In file included from arch/mips/kernel/asm-offsets.c:14:0:
      include/linux/mm.h: In function '__pfn_to_pfn_t':
      include/linux/mm.h:1050:2: warning: left shift count >= width of type
        pfn_t pfn_t = { .val = pfn | (flags & PFN_FLAGS_MASK), };

      ...where PFN_FLAGS_MASK is:

      #define PFN_FLAGS_MASK (~PAGE_MASK << (BITS_PER_LONG - PAGE_SHIFT))

      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>
      Cc: ross.zwisler@xxxxxxxxxxxxxxx
      Cc: hch@xxxxxx
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-nvdimm@xxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: linux-mm@xxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11280/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit cc25b994acfbc901429da682d0f73c190e960206
  Author: David Howells <dhowells@xxxxxxxxxx>
  Date:   Thu Nov 12 09:36:40 2015 +0000

      X.509: Fix the time validation [ver #2]

      This fixes CVE-2015-5327.  It affects kernels from 4.3-rc1 onwards.

      Fix the X.509 time validation to use month number-1 when looking up the
      number of days in that month.  Also put the month number validation before
      doing the lookup so as not to risk overrunning the array.

      This can be tested by doing the following:

      cat <<EOF | openssl x509 -outform DER | keyctl padd asymmetric "" @s
      -----BEGIN CERTIFICATE-----
      MIIDbjCCAlagAwIBAgIJAN/lUld+VR4hMA0GCSqGSIb3DQEBCwUAMCkxETAPBgNV
      BAoMCGxvY2FsLWNhMRQwEgYDVQQDDAtzaWduaW5nIGtleTAeFw0xNTA5MDEyMTMw
      MThaFw0xNjA4MzEyMTMwMThaMCkxETAPBgNVBAoMCGxvY2FsLWNhMRQwEgYDVQQD
      DAtzaWduaW5nIGtleTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANrn
      crcMfMeG67nagX4+m02Xk9rkmsMKI5XTUxbikROe7GSUVJ27sPVPZp4mgzoWlvhh
      jfK8CC/qhEhwep8Pgg4EJZyWOjhZb7R97ckGvLIoUC6IO3FC2ZnR7WtmWDgo2Jcj
      VlXwJdHhKU1VZwulh81O61N8IBKqz2r/kDhIWiicUCUkI/Do/RMRfKAoDBcSh86m
      gOeIAGfq62vbiZhVsX5dOE8Oo2TK5weAvwUIOR7OuGBl5AqwFlPnXQolewiHzKry
      THg9e44HfzG4Mi6wUvcJxVaQT1h5SrKD779Z5+8+wf1JLaooetcEUArvWyuxCU59
      qxA4lsTjBwl4cmEki+cCAwEAAaOBmDCBlTAMBgNVHRMEBTADAQH/MAsGA1UdDwQE
      AwIHgDAdBgNVHQ4EFgQUyND/eKUis7ep/hXMJ8iZMdUhI+IwWQYDVR0jBFIwUIAU
      yND/eKUis7ep/hXMJ8iZMdUhI+KhLaQrMCkxETAPBgNVBAoMCGxvY2FsLWNhMRQw
      EgYDVQQDDAtzaWduaW5nIGtleYIJAN/lUld+VR4hMA0GCSqGSIb3DQEBCwUAA4IB
      AQAMqm1N1yD5pimUELLhT5eO2lRdGUfTozljRxc7e2QT3RLk2TtGhg65JFFN6eml
      XS58AEPVcAsSLDlR6WpOpOLB2giM0+fV/eYFHHmh22yqTJl4YgkdUwyzPdCHNOZL
      hmSKeY9xliHb6PNrNWWtZwhYYvRaO2DX4GXOMR0Oa2O4vaYu6/qGlZOZv3U6qZLY
      wwHEJSrqeBDyMuwN+eANHpoSpiBzD77S4e+7hUDJnql4j6xzJ65+nWJ89fCrQypR
      4sN5R3aGeIh3QAQUIKpHilwek0CtEaYERgc5m+jGyKSc1rezJW62hWRTaitOc+d5
      G5hh+9YpnYcxQHEKnZ7rFNKJ
      -----END CERTIFICATE-----
      EOF

      If it works, it emit a key ID; if it fails, it should give a bad message
      error.

      Reported-by: Mimi Zohar <zohar@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>
      Tested-by: Mimi Zohar <zohar@xxxxxxxxxxxxxxxxxx>
      Acked-by: David Woodhouse <David.Woodhouse@xxxxxxxxx>
      Signed-off-by: James Morris <james.l.morris@xxxxxxxxxx>

  commit 5ca9d3a4286a1a4aaa46acc7c1c29a15d8d0fea2
  Merge: 5d50ac7 d56e4f7
  Author: James Morris <james.l.morris@xxxxxxxxxx>
  Date:   Thu Nov 12 20:38:04 2015 +1100

      Merge tag 'tpmdd-next-20151110' of 
https://github.com/jsakkine/linux-tpmdd into for-linus

  commit 370289756beccdc2a6ef9c7998fe67a7ca68bfc2
  Merge: a96036b f74f2e2
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Thu Nov 12 10:06:29 2015 +0100

      Merge branch 'kvm-ppc-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/paulus/powerpc into HEAD

      "Paolo,

      I have two fixes for HV KVM which I would like to have included in
      v4.4-rc1.  The first one is a fix for a bug identified by Red Hat
      which causes occasional guest crashes.  The second one fixes a bug
      which causes host stalls and timeouts under certain circumstances when
      the host is configured for static 2-way micro-threading mode."

  commit 41ac18ebfc429ce3f4d369ef07447d652999a0cd
  Author: Huang Rui <ray.huang@xxxxxxx>
  Date:   Wed Nov 4 17:43:53 2015 +0800

      perf/x86/intel/rapl: Remove the unused RAPL_EVENT_DESC() macro

      Signed-off-by: Huang Rui <ray.huang@xxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxx>
      Cc: Dasaratharaman Chandramouli <dasaratharaman.chandramouli@xxxxxxxxx>
      Cc: Fengguang Wu <fengguang.wu@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Tony Li <tony.li@xxxxxxx>
      Link: 
http://lkml.kernel.org/r/1446630233-3166-1-git-send-email-ray.huang@xxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit a05917b6ba9dc9a95fc42bdcbe3a875e8ad83935
  Author: Huaitong Han <huaitong.han@xxxxxxxxx>
  Date:   Fri Nov 6 17:00:23 2015 +0800

      x86/fpu: Fix get_xsave_addr() behavior under virtualization

      KVM uses the get_xsave_addr() function in a different fashion from
      the native kernel, in that the 'xsave' parameter belongs to guest vcpu,
      not the currently running task.

      But 'xsave' is replaced with current task's (host) xsave structure, so
      get_xsave_addr() will incorrectly return the bad xsave address to KVM.

      Fix it so that the passed in 'xsave' address is used - as intended
      originally.

      Signed-off-by: Huaitong Han <huaitong.han@xxxxxxxxx>
      Reviewed-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Fenghua Yu <fenghua.yu@xxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Oleg Nesterov <oleg@xxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Quentin Casasnovas <quentin.casasnovas@xxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: dave.hansen@xxxxxxxxx
      Link: 
http://lkml.kernel.org/r/1446800423-21622-1-git-send-email-huaitong.han@xxxxxxxxx
      [ Tidied up the changelog. ]
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit ab6b52947545a5355154f64f449f97af9d05845f
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 16:23:54 2015 -0800

      x86/fpu: Fix 32-bit signal frame handling

      (This should have gone to LKML originally. Sorry for the extra
       noise, folks on the cc.)

      Background:

      Signal frames on x86 have two formats:

        1. For 32-bit executables (whether on a real 32-bit kernel or
           under 32-bit emulation on a 64-bit kernel) we have a
          'fpregset_t' that includes the "FSAVE" registers.

        2. For 64-bit executables (on 64-bit kernels obviously), the
           'fpregset_t' is smaller and does not contain the "FSAVE"
           state.

      When creating the signal frame, we have to be aware of whether
      we are running a 32 or 64-bit executable so we create the
      correct format signal frame.

      Problem:

      save_xstate_epilog() uses 'fx_sw_reserved_ia32' whenever it is
      called for a 32-bit executable.  This is for real 32-bit and
      ia32 emulation.

      But, fpu__init_prepare_fx_sw_frame() only initializes
      'fx_sw_reserved_ia32' when emulation is enabled, *NOT* for real
      32-bit kernels.

      This leads to really wierd situations where 32-bit programs
      lose their extended state when returning from a signal handler.
      The kernel copies the uninitialized (zero) 'fx_sw_reserved_ia32'
      out to userspace in save_xstate_epilog().  But when returning
      from the signal, the kernel errors out in check_for_xstate()
      when it does not see FP_XSTATE_MAGIC1 present (because it was
      zeroed).  This leads to the FPU/XSAVE state being initialized.

      For MPX, this leads to the most permissive state and means we
      silently lose bounds violations.  I think this would also mean
      that we could lose *ANY* FPU/SSE/AVX state.  I'm not sure why
      no one has spotted this bug.

      I believe this was broken by:

        72a671ced66d ("x86, fpu: Unify signal handling code paths for x86 and 
x86_64 kernels")

      way back in 2012.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: dave@xxxxxxxx
      Cc: fenghua.yu@xxxxxxxxx
      Cc: yu-cheng.yu@xxxxxxxxx
      Link: http://lkml.kernel.org/r/20151111002354.A0799571@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit f3119b830264d89d216bfb378ab65065dffa02d9
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Nov 11 10:19:34 2015 -0800

      x86/mpx: Fix 32-bit address space calculation

      I received a bug report that running 32-bit MPX binaries on
      64-bit kernels was broken.  I traced it down to this little code
      snippet.  We were switching our "number of bounds directory
      entries" calculation correctly.  But, we didn't switch the other
      side of the calculation: the virtual space size.

      This meant that we were calculating an absurd size for
      bd_entry_virt_space() on 32-bit because we used the 64-bit
      virt_space.

      This was _also_ broken for 32-bit kernels running on 64-bit
      hardware since boot_cpu_data.x86_virt_bits=48 even when running
      in 32-bit mode.

      Correct that and properly handle all 3 possible cases:

       1. 32-bit binary on 64-bit kernel
       2. 64-bit binary on 64-bit kernel
       3. 32-bit binary on 32-bit kernel

      This manifested in having bounds tables not properly unmapped.
      It "leaked" memory but had no functional impact otherwise.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Dave Hansen <dave@xxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20151111181934.FA7FAC34@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 46561c3959d6307d22139c24cd0bf196162e5681
  Author: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
  Date:   Wed Nov 11 10:19:31 2015 -0800

      x86/mpx: Do proper get_user() when running 32-bit binaries on 64-bit 
kernels

      When you call get_user(foo, bar), you effectively do a

        copy_from_user(&foo, bar, sizeof(*bar));

      Note that the sizeof() is implicit.

      When we reach out to userspace to try to zap an entire "bounds
      table" we need to go read a "bounds directory entry" in order to
      locate the table's address.  The size of a "directory entry"
      depends on the binary being run and is always the size of a
      pointer.

      But, when we have a 64-bit kernel and a 32-bit application, the
      directory entry is still only 32-bits long, but we fetch it with
      a 64-bit pointer which makes get_user() does a 64-bit fetch.
      Reading 4 extra bytes isn't harmful, unless we are at the end of
      and run off the table.  It might also cause the zero page to get
      faulted in unnecessarily even if you are not at the end.

      Fix it up by doing a special 32-bit get_user() via a cast when
      we have 32-bit userspace.

      Signed-off-by: Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Cc: Andy Lutomirski <luto@xxxxxxxxxxxxxx>
      Cc: Borislav Petkov <bp@xxxxxxxxx>
      Cc: Brian Gerst <brgerst@xxxxxxxxx>
      Cc: Dave Hansen <dave@xxxxxxxx>
      Cc: Denys Vlasenko <dvlasenk@xxxxxxxxxx>
      Cc: H. Peter Anvin <hpa@xxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20151111181931.3ACF6822@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 492cf7a0be68676382050daa06335f56db2cdb08
  Merge: b71b437 5602ea0
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Thu Nov 12 07:37:53 2015 +0100

      Merge tag 'perf-urgent-for-mingo' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/urgent

      Pull perf/urgent fixes from Arnaldo Carvalho de Melo:

        - Add missing newlines to some pr_err() calls (Arnaldo Carvalho de Melo)

        - Print full source file paths when using
          'perf annotate --print-line --full-paths' (Michael Petlan)

        - Fix 'perf probe -d' when just one out of uprobes and kprobes is
          enabled (Wang Nan)

        - Add compiler.h to list.h to fix 'make perf-tar-src-pkg' generated
          tarballs, i.e. out of tree building (Arnaldo Carvalho de Melo)

        - Add the llvm-src-base.c and llvm-src-kbuild.c files, generated by the
          'perf test' LLVM entries, when running it in-tree, to .gitignore 
(Yunlong Song)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 5d50ac70fe98518dbf620bfba8184254663125eb
  Merge: 31c1feb 4e14e49
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 11 20:18:48 2015 -0800

      Merge tag 'xfs-for-linus-4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dgc/linux-xfs

      Pull xfs updates from Dave Chinner:
       "There is nothing really major here - the only significant addition is
        the per-mount operation statistics infrastructure.  Otherwises there's
        various ACL, xattr, DAX, AIO and logging fixes, and a smattering of
        small cleanups and fixes elsewhere.

        Summary:

         - per-mount operational statistics in sysfs
         - fixes for concurrent aio append write submission
         - various logging fixes
         - detection of zeroed logs and invalid log sequence numbers on v5 
filesystems
         - memory allocation failure message improvements
         - a bunch of xattr/ACL fixes
         - fdatasync optimisation
         - miscellaneous other fixes and cleanups"

      * tag 'xfs-for-linus-4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dgc/linux-xfs: (39 commits)
        xfs: give all workqueues rescuer threads
        xfs: fix log recovery op header validation assert
        xfs: Fix error path in xfs_get_acl
        xfs: optimise away log forces on timestamp updates for fdatasync
        xfs: don't leak uuid table on rmmod
        xfs: invalidate cached acl if set via ioctl
        xfs: Plug memory leak in xfs_attrmulti_attr_set
        xfs: Validate the length of on-disk ACLs
        xfs: invalidate cached acl if set directly via xattr
        xfs: xfs_filemap_pmd_fault treats read faults as write faults
        xfs: add ->pfn_mkwrite support for DAX
        xfs: DAX does not use IO completion callbacks
        xfs: Don't use unwritten extents for DAX
        xfs: introduce BMAPI_ZERO for allocating zeroed extents
        xfs: fix inode size update overflow in xfs_map_direct()
        xfs: clear PF_NOFREEZE for xfsaild kthread
        xfs: fix an error code in xfs_fs_fill_super()
        xfs: stats are no longer dependent on CONFIG_PROC_FS
        xfs: simplify /proc teardown & error handling
        xfs: per-filesystem stats counter implementation
        ...

  commit 31c1febd7a45229edb3e5d86f354e3c1df543cbb
  Merge: b4a2375 0442f14
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 11 20:11:28 2015 -0800

      Merge tag 'nfsd-4.4' of git://linux-nfs.org/~bfields/linux

      Pull nfsd updates from Bruce Fields:
       "Apologies for coming a little late in the merge window.  Fortunately
        this is another fairly quiet one:

        Mainly smaller bugfixes and cleanup.  We're still finding some bugs
        from the breakup of the big NFSv4 state lock in 3.17 -- thanks
        especially to Andrew Elble and Jeff Layton for tracking down some of
        the remaining races"

      * tag 'nfsd-4.4' of git://linux-nfs.org/~bfields/linux:
        svcrpc: document lack of some memory barriers
        nfsd: fix race with open / open upgrade stateids
        nfsd: eliminate sending duplicate and repeated delegations
        nfsd: remove recurring workqueue job to clean DRC
        SUNRPC: drop stale comment in svc_setup_socket()
        nfsd: ensure that seqid morphing operations are atomic wrt to copies
        nfsd: serialize layout stateid morphing operations
        nfsd: improve client_has_state to check for unused openowners
        nfsd: fix clid_inuse on mount with security change
        sunrpc/cache: make cache flushing more reliable.
        nfsd: move include of state.h from trace.c to trace.h
        sunrpc: avoid warning in gss_key_timeout
        lockd: get rid of reference-counted NSM RPC clients
        SUNRPC: Use MSG_SENDPAGE_NOTLAST when calling sendpage()
        lockd: create NSM handles per net namespace
        nfsd: switch unsigned char flags in svc_fh to bools
        nfsd: move svc_fh->fh_maxsize to just after fh_handle
        nfsd: drop null test before destroy functions
        nfsd: serialize state seqid morphing operations

  commit b4a237598aa740562f842db76d97465c44fb74c1
  Merge: c970872 b1d06b6
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 11 19:54:05 2015 -0800

      Merge tag 'devicetree-fixes-for-4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux

      Pull DeviceTree fixes from Rob Herring:

       - Add empty of_translate_address needed for HiSilicon network driver.

       - Fix alignment requirements for CMA regions in DT.

       - Fix booting on PPC systems which can't do WARN() early.

       - Rename ak4554 binding doc from .c to .txt.

      * tag 'devicetree-fixes-for-4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/robh/linux:
        of: Provide static inline function for of_translate_address if needed
        drivers: of: of_reserved_mem: fixup the alignment with CMA setup
        of: Print rather than WARN'ing when overlap check fails
        dt-bindings: ak4554: extension should be .txt

  commit c970872e59e46774d508777291b2f90910ab695b
  Author: Caesar Wang <wxt@xxxxxxxxxxxxxx>
  Date:   Wed Nov 11 19:43:11 2015 -0800

      thermal: rockchip: fix compile error

      Missing a include file caused compile error.

        drivers/thermal/rockchip_thermal.c: In function 
'rockchip_thermal_suspend':
        drivers/thermal/rockchip_thermal.c:720:2: error: implicit declaration 
of function 'pinctrl_pm_select_sleep_state' 
[-Werror=implicit-function-declaration]
        ...

      Fixes: 7e38a5b1daa1 ("thermal: rockchip: support the sleep pinctrl state
      to avoid glitches")

      Reported-by: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
      Reported-by: kbuild test robot <lkp@xxxxxxxxx>
      Signed-off-by: Caesar Wang <wxt@xxxxxxxxxxxxxx>
      Signed-off-by: Eduardo Valentin <edubezval@xxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit f639eeb4a60ce39f154753e3a745bd755e0fe084
  Author: Yoshinori Sato <ysato@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 4 02:10:09 2015 +0900

      h8300: enable CLKSRC_OF

      Signed-off-by: Yoshinori Sato <ysato@xxxxxxxxxxxxxxxxxxxx>

  commit 2c5d16d6a9e7218e57b716e4fd9d77c776d21471
  Author: Gabriel Krisman Bertazi <krisman@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 16:04:43 2015 -0200

      sd: Clear PS bit before Mode Select.

      According to SPC-4, in a Mode Select, the PS bit in Mode Pages is
      reserved and must be set to 0 by the driver.  In the sd implementation,
      function cache_type_store does a Mode Sense, which might set the PS bit
      on the read buffer, followed by a Mode Select, which receives the same
      buffer, without explicitly clearing the PS bit.  So, in cases where
      target supports saving the Mode Page to a non-volatile location, we end
      up doing a Mode Select with the PS bit set, which could cause an illegal
      request error if the target is checking this.

      This was observed on a new firmware change, which was subsequently
      reverted, but this changes sd.c to be more compliant with SPC-4.

      This patch clears the PS bit in the buffer returned by Mode Select,
      right before it is used in the Mode Select command.

      Signed-off-by: Gabriel Krisman Bertazi <krisman@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 3467a1468fe00fe3f693907f01d980f62d1e46a3
  Author: Laurent Vivier <lvivier@xxxxxxxxxx>
  Date:   Mon Nov 9 17:49:09 2015 +0100

      ibmvscsi: set max_lun to 32

      As defined in 4.6.9 of SAM-4, the encoding of LUN is
      on 5 bits (max_lun=32) and the current value is only 8.
      Set max_lun to IBMVSCSI_MAX_LUN (32).

      Signed-off-by: Laurent Vivier <lvivier@xxxxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit e3678a0c4c207d2d0104d69bffbe37c965d4e87d
  Author: Laurent Vivier <lvivier@xxxxxxxxxx>
  Date:   Mon Nov 9 17:49:08 2015 +0100

      ibmvscsi: display default value for max_id, max_lun and max_channel.

      As devices with values greater than that are silently ignored,
      this gives some hints to the sys admin to know why he doesn't see
      his devices...

      Signed-off-by: Laurent Vivier <lvivier@xxxxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 491212014ec3ab6c477e7368405c5ae028b05ceb
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Nov 11 01:15:24 2015 +0300

      mptfusion: don't allow negative bytes in kbuf_alloc_2_sgl()

      There is a static checker warning here because "bytes" is controlled by
      the user and we cap the upper bound with min() but allow negatives.
      Negative bytes will result in some nasty warning messages but are not
      super harmful.  Anyway, no one needs negative bytes so let's just check
      for it and return NULL.

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 9c9bd593f30fc8a4d6e70d72b49b5651fa492e65
  Author: Alison Schofield <amsfield22@xxxxxxxxx>
  Date:   Mon Nov 9 11:34:20 2015 -0800

      scsi: pmcraid: replace struct timeval with ktime_get_real_seconds()

      Replace the use of struct timeval and do_gettimeofday() with
      64 bit ktime_get_real_seconds. Prevents 32-bit type overflow
      in year 2038 on 32-bit systems.

      Driver was using the seconds portion of struct timeval (.tv_secs)
      to pass a millseconds timestamp to the firmware. This change maintains
      that same behavior using ktime_get_real_seconds.

      The structure used to pass the timestamp to firmware is 48 bits and
      works fine as long as the top 16 bits are zero and they will be zero
      for a long time..ie. thousands of years.

      Alternative Change:  Add sub second granularity to timestamp

      As noted above, the driver only used the seconds portion of timeval,
      ignores the microseconds portion, and by multiplying by 1000 effectively
      does a <<10 and always writes zero into timestamp[0].

      The alternative change would pass all the bits to the firmware:

              struct timespec64 ts;

              ktime_get_real_ts64(&ts);
              timestamp = ts.tv_sec * MSEC_PER_SEC + ts.tv_nsec / NSEC_PER_MSEC;

      Signed-off-by: Alison Schofield <amsfield22@xxxxxxxxx>
      Reviewed-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 36f8ef7f7684997f1c1efcc775b1d7cdf452ce44
  Author: Tina Ruchandani <ruchandani.tina@xxxxxxxxx>
  Date:   Fri Oct 30 02:11:10 2015 -0700

      mvumi: 64bit value for seconds_since1970

      struct mvumi_hs_page2 stores a "seconds_since1970" field which is of
      type u64. It is however, written to, using 'struct timeval' which has
      a 32-bit seconds field and whose value will overflow in year 2038.
      This patch uses ktime_get_real_seconds() instead since it provides a
      64-bit seconds value, which is 2038 safe.

      Signed-off-by: Tina Ruchandani <ruchandani.tina@xxxxxxxxx>
      Reviewed-by: Johannes Thumshirn <jthumshirn@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit dd29dae00d39186890a5eaa2fe4ad8768bfd41a9
  Author: Tim Gardner <tim.gardner@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 12:22:58 2015 -0600

      be2iscsi: Fix bogus WARN_ON length check

      drivers/scsi/be2iscsi/be_main.c: In function 'be_sgl_create_contiguous':
      drivers/scsi/be2iscsi/be_main.c:3187:18: warning: logical not is only 
applied to the left hand side of comparison [-Wlogical-not-parentheses]
        WARN_ON(!length > 0);

      gcc version 5.2.1

      Signed-off-by: Tim Gardner <tim.gardner@xxxxxxxxxxxxx>
      Cc: Jayamohan Kallickal <jayamohan.kallickal@xxxxxxxxxxxxx>
      Cc: Minh Tran <minh.tran@xxxxxxxxxxxxx>
      Cc: John Soni Jose <sony.john-n@xxxxxxxxxxxxx>
      Cc: "James E.J. Bottomley" <JBottomley@xxxxxxxx>
      Reported-by: Joel Stanley <joel@xxxxxxxxx>
      Reviewed-by: Manoj Kumar <manoj@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit a4cf30e15ccea82a07fa5870e8af787b9ea1a672
  Author: Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
  Date:   Fri Oct 30 12:37:49 2015 +0100

      scsi_scan: don't dump trace when scsi_prep_async_scan() is called twice

      The only user of scsi_prep_async_scan() is scsi_scan_host() and it
      handles the situation correctly. Move 'called twice' reporting to debug
      level as well.

      The issue is observed on Hyper-V: on any device add/remove event storvsc
      driver calls scsi_scan_host() and in case previous scan is still running
      we get the message and stack dump on console.

      Signed-off-by: Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
      Reviewed-by: K. Y. Srinivasan <kys@xxxxxxxxxxxxx>
      Tested-by: Alex Ng <alexng@xxxxxxxxxxxxx>
      Signed-off-by: K. Y. Srinivasan <kys@xxxxxxxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit abc01f7d54da8c77d650e730bcaef1c6c3982a5a
  Author: Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 17:30:41 2015 +0530

      mpt3sas: Bump mpt3sas driver version to 09.102.00.00

      Bump mpt3sas driver version to 09.102.00.00

      Signed-off-by: Sreekanth Reddy <Sreekanth.Reddy@xxxxxxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit c84b06a48c4d8ac8270624453132f3fa1a4a0f9d
  Author: Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 17:30:35 2015 +0530

      mpt3sas: Single driver module which supports both SAS 2.0 & SAS 3.0 HBAs

      Modified the mpt3sas driver to have a single driver module which
      supports both SAS 2.0 & SAS 3.0 HBA devices.

      * Added SAS 2.0 HBA device IDs to the mpt3sas_pci_table pci table.

      * Created two separate SCSI host templates for SAS2 and SAS3 HBAs so
        that, during the driver load time driver can use corresponding host
        template(based the pci device ID) while registering a scsi host
        adapter instance for that pci device.

      * Registered two IOCTL devices, mpt2ctl is for SAS2 HBAs & mpt3ctl for
        SAS3 HBAs. Also updated the code to make sure that mpt2ctl device
        processes only those ioctl cmds issued for the SAS2 HBAs and mpt3ctl
        device processes only those ioctl cmds issued for the SAS3 HBAs.

      * Added separate indexing for SAS2 and SAS3 HBAs.

      * Replaced compile time check 'MPT2SAS_SCSI' to run time check
        'hba_mpi_version_belonged' whereever needed.

      * Aliased this merged driver to mpt2sas using MODULE_ALIAS.

      * Moved global varaible 'driver_name' to per adapter instance variable.

      * Created two raid function template and used corresponding raid
        function templates based on the run time check
        'hba_mpi_version_belonged'.

      * Moved mpt2sas_warpdrive.c file from mpt2sas to mpt3sas folder and
        renamed it as mpt3sas_warpdrive.c.

      * Also renamed the functions in mpt3sas_warpdrive.c file to follow
        current driver function name convention.

      * Updated the Makefile to build mpt3sas_warpdrive.o file for these
        WarpDrive-specific functions.

      * Also in function mpt3sas_setup_direct_io(), used sector_div() API
        instead of division operator (which gives compilation errors on 32 bit
        machines).

      * Removed mpt2sas files, mpt2sas directory & mpt3sas_module.c file.

      * Added module parameter 'hbas_to_enumerate' which permits using this
        merged driver as a legacy mpt2sas driver or as a legacy mpt3sas
        driver.

        Here are the available options for this module parameter:

         0 - Merged driver which enumerates both SAS 2.0 & SAS 3.0 HBAs
         1 - Acts as legacy mpt2sas driver, which enumerates only SAS 2.0 HBAs
         2 - Acts as legacy mpt3sas driver, which enumerates only SAS 3.0 HBAs

      * Removed mpt2sas entries from SCSI's Kconfig and Makefile files.

      Signed-off-by: Sreekanth Reddy <Sreekanth.Reddy@xxxxxxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit d0c627afb7a6753488b9e8948b307941880b1b9e
  Author: Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 17:30:34 2015 +0530

      mpt2sas, mpt3sas: Update the driver versions

      Bump the mpt2sas driver version to 20.102.00.00 and
      Bump the mpt3sas driver version to 9.101.00.00.

      Signed-off-by: Sreekanth Reddy <Sreekanth.Reddy@xxxxxxxxxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 08c4d550c5797d842b1f1bb85d474a8b54f02382
  Author: Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 17:30:33 2015 +0530

      mpt3sas: setpci reset kernel oops fix

      setpci reset on nytro warpdrive card along with sysfs access and cli
      ioctl access resulted in kernel oops

      1. pci_access_mutex lock added to provide synchronization between IOCTL,
         sysfs, PCI resource handling path

      2. gioc_lock spinlock to protect list operations over multiple
         controllers

      This patch is ported from commit 6229b414b3ad ("mpt2sas: setpci reset
      kernel oops fix").

      Signed-off-by: Sreekanth Reddy <Sreekanth.Reddy@xxxxxxxxxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 989e43c7ec3401f95e40a792367995e4d4fc5b66
  Author: Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 17:30:32 2015 +0530

      mpt3sas: Added OEM Gen2 PnP ID branding names

      Added OEM Gen2 PnP ID branding names from mpt2sas driver.

      Signed-off-by: Sreekanth Reddy <Sreekanth.Reddy@xxxxxxxxxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 146b16c8071f5f6c67895d15beeee1163f5107c4
  Author: Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 17:30:31 2015 +0530

      mpt3sas: Refcount fw_events and fix unsafe list usage

      The fw_event_work struct is concurrently referenced at shutdown. Add a
      refcount to protect it and refactor the code to use it.

      Additionally, refactor _scsih_fw_event_cleanup_queue() such that it no
      longer iterates over the list without holding the lock since
      _firmware_event_work() concurrently deletes items from the list.

      This patch is ported from commit 008549f6e8a1 ("mpt2sas: Refcount
      fw_events and fix unsafe list usage"). These changes are also required
      for mpt3sas.

      Signed-off-by: Sreekanth Reddy <Sreekanth.Reddy@xxxxxxxxxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit d1cb5e495e5384f6d90a8573f1be9cc79b85c862
  Author: Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 17:30:30 2015 +0530

      mpt3sas: Refcount sas_device objects and fix unsafe list usage

      sas_device objects can be referenced concurrently throughout the driver.
      We need a way to make sure threads can't delete them out from under each
      other. This patch adds the refcount and refactors the code to use it.

      Additionally, we cannot iterate over the sas_device_list without holding
      the lock or we risk corrupting random memory if items are added or
      deleted as we iterate. This patch refactors _scsih_probe_sas() to use
      the sas_device_list in a safe way.

      This patch is ported from the following mpt2sas driver commit
      d224fe0d6097 ("mpt2sas: Refcount sas_device objects and fix unsafe list
      usage").

      Signed-off-by: Sreekanth Reddy <Sreekanth.Reddy@xxxxxxxxxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 422630955ea34841a2a074cb6734ec5d70758b0d
  Author: Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 17:30:29 2015 +0530

      mpt3sas: sysfs attribute to report Backup Rail Monitor Status

      A new sysfs shost attribute called "BMR_status" is implemented to report
      Backup Rail Monitor status.

      This attribute is located in:

              /sys/class/scsi_host/host#/BMR_status

      When reading this adapter attribute, the driver will output the state of
      GPIO[24]. It returns "0" if BMR is healthy and "1" for failure.

      If it returns an empty string then it means that there was an error
      while obtaining the BMR status. Check dmesg for what error has occurred.

      This sysfs shost attribute is mainly for WarpDrive controllers.

      This commit is a port of 6c265660c262 ("mpt2sas: Provide sysfs attribute
      to report Backup Rail Monitor Status").

      Signed-off-by: Sreekanth Reddy <Sreekanth.Reddy@xxxxxxxxxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 7786ab6aff9cea97eb0a8d67705c68e97a664bf3
  Author: Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 17:30:28 2015 +0530

      mpt3sas: Ported WarpDrive product SSS6200 support

      Ported the following list of WarpDrive-specific patches:

      1. commit 0bdccdb0a090ad8dc5f851cad5e843244c410ee8 ("mpt2sas: WarpDrive
         New product SSS6200 support added")

      2. commit 82a452581230b3ffc9d6475dffdb2568497b5fec ("mpt2sas: WarpDrive
         Infinite command retries due to wrong scsi command entry in MPI
         message")

      3. commit ba96bd0b1d4a4e11f23671e1f375a5c8f46b0fe7 ("mpt2sas: Support
         for greater than 2TB capacity WarpDrive")

      4. commit 4da7af9494b2f98a1503a2634059300c3e4615e6 ("mpt2sas: Do not
         retry a timed out direct IO for Warpdrive")

      5. commit daeaa9df92bd742f4e6d4d6039d689277a8e31bd ("mpt2sas: Avoid type
         casting for direct I/O commands").

      Also set the mpt2_ioctl_iocinfo adapter_type to:

      1. MPT3_IOCTL_INTERFACE_SAS3 for Gen3 HBAs

      2. MPT2_IOCTL_INTERFACE_SAS2_SSS6200 for Warp Drive

      3. MPT2_IOCTL_INTERFACE_SAS2  for other Gen2 HBAs

      Signed-off-by: Sreekanth Reddy <Sreekanth.Reddy@xxxxxxxxxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 16e179bda58f0931854a669c9a70fd9139015899
  Author: Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 17:30:27 2015 +0530

      mpt3sas: fix for driver fails EEH, recovery from injected pci bus error

      This patch stops the driver to invoke kthread (which remove the dead
      ioc) for some time while EEH recovery has started.

      This patch is a port of commit b4730fb6e54a ("mpt2sas: fix for driver
      fails EEH, recovery from injected pci bus error")'.

      Signed-off-by: Sreekanth Reddy <Sreekanth.Reddy@xxxxxxxxxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 42081173c74e0867b996f5fd6b46d3c1606377c7
  Author: Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 17:30:26 2015 +0530

      mpt3sas: Manage MSI-X vectors according to HBA device type

      1. Do not enable MSI-X vectors for SAS2008 B0 controllers

      2. Enable a single MSI-X vector for the following controller:

         a. SAS2004
         b. SAS2008
         c. SAS2008_1
         d. SAS2008_2
         e. SAS2008_3
         f. SAS2116_1
         g. SAS2116_2

      3. Enable Combined Reply Post Queue Support (i.e. 96 MSI-X vectors)
         for Gen3 Invader/Fury C0 and above revision HBAs

      4. Enable Combined Reply Post Queue Support (i.e. 96 MSI-X vectors)
         for all Intruder and Cutlass HBAs

      Signed-off-by: Sreekanth Reddy <Sreekanth.Reddy@xxxxxxxxxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 45506049c7abd4c17c35ad43adc07bf1236a3fcf
  Author: Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 17:30:25 2015 +0530

      mpt3sas: Don't send PHYDISK_HIDDEN RAID action request on SAS2 HBAs

      Avoid sending PHYDISK_HIDDEN RAID action requests to SAS2 controllers
      since they don't support it.

      Also enable fast_path only for SAS3 HBAs.

      Signed-off-by: Sreekanth Reddy <Sreekanth.Reddy@xxxxxxxxxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 471ef9d4e4982595b2a6081d314a69ca626245ae
  Author: Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 17:30:24 2015 +0530

      mpt3sas: Build MPI SGL LIST on GEN2 HBAs and IEEE SGL LIST on GEN3 HBAs

      Gen2 HBAs use MPI scatter-gather lists whereas Gen3 HBAs use IEEE
      scatter-gather lists. Modify the common code part in such a way that it
      will build IEEE SGL tables for Gen3 HBAs and MPI SGL tables for Gen2
      HBAs.

      Signed-off-by: Sreekanth Reddy <Sreekanth.Reddy@xxxxxxxxxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit af0094115b080b41eb5a3567c177ce960a07dea4
  Author: Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 17:30:23 2015 +0530

      mpt2sas, mpt3sas: Remove SCSI_MPTXSAS_LOGGING entry from Kconfig

      Currently there is a logging level option provided for each of our
      drivers in the kernel configuration utility. Users can enable this
      option to get more verbose information. By default it is enabled.

      Only when this option is enabled will the functions which display the
      required information get compiled in.

      As we are merging the both drivers we can no longer provide this
      configuration option. Remove the SCSI_MPTXSAS_LOGGING entry from Kconfig
      and unconditionally enable logging (by removing the #ifdef
      CONFIG_SCSI_MPT3SAS_LOGGING preprocessor check conditions) so that all
      functions which are defined to display more verbose information get
      compiled in.

      Signed-off-by: Sreekanth Reddy <Sreekanth.Reddy@xxxxxxxxxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit d357e84d65dfcdb502fdb1aaab2873a82a828db5
  Author: Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 17:30:22 2015 +0530

      mpt3sas: Define 'hba_mpi_version_belonged' IOC variable

      1. Use 'hba_mpi_version_belonged' IOC varable to uniquely identify each
      individual generation driver functionality at runtime.

      2. Declare global variable 'driver_name' and use this variable while
      reserving PCI regions and while allocating the IRQs.

      Signed-off-by: Sreekanth Reddy <Sreekanth.Reddy@xxxxxxxxxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 09ec55ed74ebb8a61859609011d28ab0bcb15e08
  Author: Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 17:30:21 2015 +0530

      mpt2sas: Remove .c and .h files from mpt2sas driver

      Remove .c and .h files which are no longer needed from mpt2sas
      driver. We are reusing this code from mpt3sas.

      Signed-off-by: Sreekanth Reddy <Sreekanth.Reddy@xxxxxxxxxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit f57ab32a843690fe7431ebb3a2f461e689a2e3c7
  Merge: f6f18a2 89ba7d8
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Thu Nov 12 00:22:56 2015 +0100

      Merge branch 'pm-tools'

      * pm-tools:
        Creating a common structure initialization pattern for struct option
        cpupower: Enable disabled Cstates if they are below max latency
        cpupower: Remove debug message when using cpupower idle-set -D switch
        cpupower: cpupower monitor reports uninitialized values for offline cpus
        tools/power turbostat: bugfix: print MAX_NON_TURBO_RATIO
        tools/power turbostat: simplify Bzy_MHz calculation

  commit f6f18a261c1748973e9aac529ed81bb4abd9f120
  Merge: 1f47b0d 2547923
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Thu Nov 12 00:22:50 2015 +0100

      Merge branch 'pm-domains'

      * pm-domains:
        PM / Domains: Allocate memory outside domain locks
        PM / Domains: Remove dev->driver check for runtime PM

  commit 78f97c8f612d0e7d7d08d741549e89e8c951920a
  Author: Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 17:30:20 2015 +0530

      mpt2sas: Move Gen2 HBA's device registration to a separate file

      1. Create a mpt2sas_module.c file for mpt2sas where GEN2 HBA devices
      register with PCI, SML, IOCTL subsystems.

      2. Updated the Makefile to use the object files from mpt3sas folder.

      3. Defined a compilation flag SCSI_MPT2SAS which can be used to not
      include those sections of code from mpt3sas driver which are not
      required for mpt2sas driver.

      4. Inherited automatic diag buffer feature from mpt3sas driver.

      Signed-off-by: Sreekanth Reddy <Sreekanth.Reddy@xxxxxxxxxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 7497392a1193ea5b32d8a8a2b8d77888e7fe8221
  Author: Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 17:30:19 2015 +0530

      mpt3sas: Move Gen3 HBA's device registration to a separate file

      Created a mpt3sas_module.c file for mpt3sas driver where it can register
      SAS3 HBA devices with PCI, SML, IOCTL subsystems. Also removed the
      corresponding interfaces from mpt3sas_scsih.c file.

      Signed-off-by: Sreekanth Reddy <Sreekanth.Reddy@xxxxxxxxxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 8a7e4c24e08fceb94887eb6d8123d6059dc5ddcd
  Author: Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxxx>
  Date:   Wed Nov 11 17:30:18 2015 +0530

      mpt3sas: Added mpt2sas driver definitions

      1. Added mpt2sas driver related macros in mpt3sas header files

      2. Made scsi host's, raid class', pci's, ioctl's callback functions
      global so that both drivers can use them.

      Signed-off-by: Sreekanth Reddy <Sreekanth.Reddy@xxxxxxxxxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 3c5866565f37d45e3b812e3045caf2358f2f2377
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Wed Nov 11 17:30:17 2015 +0530

      mpt2sas: Use mpi headers from mpt3sas

      Use a single set of the hardware description headers instead of having
      them in the source tree twice.

      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Sreekanth Reddy <sreekanth.reddy@xxxxxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 5602ea09c19e85557f2b4d30be1d6ba349b7a038
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Wed Nov 11 12:54:42 2015 -0300

      tools include: Add compiler.h to list.h

      list.h needs WRITE_ONCE() since 7f5f873c6a07 ("rculist: Use WRITE_ONCE()
      when deleting from reader-visible list") add it before including the
      kernel's list.h file.

      This fixes builds of 'make perf-tar-src-pkg' perf tool tarball builds,
      i.e. out of tree builds.

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-e0rb8f7jwz0jn24ttyick9u6@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 421fd0845eaeecce6b3806f7f0c0d67d1f9ad108
  Author: Wang Nan <wangnan0@xxxxxxxxxx>
  Date:   Fri Nov 6 09:50:15 2015 +0000

      perf probe: Verify parameters in two functions

      On kernel with only one out of CONFIG_KPROBE_EVENTS and
      CONFIG_UPROBE_EVENTS enabled, 'perf probe -d' causes a segfault because
      perf_del_probe_events() calls probe_file__get_events() with a negative
      fd.

      This patch fixes it by adding parameter validation at the entry of
      probe_file__get_events() and probe_file__get_rawlist(). Since they are
      both non-static public functions (in .h file), parameter verifying is
      required.

      v1 -> v2: Verify fd at the head of probe_file__get_rawlist() instead of
                checking at call site (suggested by Masami and Arnaldo at 
[1,2]).

      [1] 
http://lkml.kernel.org/r/50399556C9727B4D88A595C8584AAB37526048E3@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
      [2] http://lkml.kernel.org/r/20151105155830.GV13236@xxxxxxxxxx

      Signed-off-by: Wang Nan <wangnan0@xxxxxxxxxx>
      Acked-by: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Zefan Li <lizefan@xxxxxxxxxx>
      Cc: pi3orama@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1446803415-83382-1-git-send-email-wangnan0@xxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit e87b49116dedba3464fd8d0ec9393b4841167334
  Author: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
  Date:   Mon Nov 9 17:12:03 2015 -0300

      perf session: Add missing newlines to some pr_err() calls

      Before:

        [acme@zoo linux]$ perf evlist
        WARNING: The perf.data file's data size field is 0 which is unexpected.
        Was the 'perf record' command properly terminated?
        non matching sample_type[acme@zoo linux]$

      After:

        [acme@zoo linux]$ perf evlist
        WARNING: The perf.data file's data size field is 0 which is unexpected.
        Was the 'perf record' command properly terminated?
        non matching sample_type
        [acme@zoo linux]$

      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Link: http://lkml.kernel.org/n/tip-wscok3a2s7yrj8156oc2r6qe@xxxxxxxxxxxxxx
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 4a4c03c1bb286bf0def7ae506bc076285f58d8b6
  Author: Michael Petlan <mpetlan@xxxxxxxxxx>
  Date:   Mon Nov 9 16:33:31 2015 +0100

      perf annotate: Support full source file paths for srcline fix

      The --full-paths option did not show the full source file paths in the 
'perf
      annotate' tool, because the value of the option was not propagated into 
the
      related functions.

      With this patch the value of the --full-paths option is known to the 
function
      that composes the srcline string, so it prints the full path when 
necessary.

      Committer Note:

      This affects annotate when the --print-line option is used:

        # perf annotate -h 2>&1 | grep print-line
            -l, --print-line      print matching source lines (may be slow)

      Looking just at the lines that should be affected by this change:

      Before:

        # perf annotate --print-line --full-paths --stdio fput | grep 
'\.[ch]:[0-9]\+'
           94.44 atomic64_64.h:114
            5.56 file_table.c:265
         file_table.c:265    5.56 :       ffffffff81219a00:       callq  
ffffffff81769360 <__fentry__>
         atomic64_64.h:114   94.44 :      ffffffff81219a05:       lock decq 
0x38(%rdi)

      After:

        # perf annotate --print-line --full-paths --stdio fput | grep 
'\.[ch]:[0-9]\+'
           94.44 /home/git/linux/arch/x86/include/asm/atomic64_64.h:114
            5.56 /home/git/linux/fs/file_table.c:265
         /home/git/linux/fs/file_table.c:265    5.56 :    ffffffff81219a00:     
  callq  ffffffff81769360 <__fentry__>
         /home/git/linux/arch/x86/include/asm/atomic64_64.h:114   94.44 :       
  ffffffff81219a05:       lock decq 0x38(%rdi)
        #

      Signed-off-by: Michael Petlan <mpetlan@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Link: http://permalink.gmane.org/gmane.linux.kernel.perf.user/2365
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 3d07b3bed8eac28bbb336cd9304f1974d9a425fb
  Author: Yunlong Song <yunlong.song@xxxxxxxxxx>
  Date:   Mon Nov 9 11:10:03 2015 +0800

      perf test: Add llvm-src-base.c and llvm-src-kbuild.c to .gitignore

      Commit b31de018a6284a25e0fdfeb028e724f8417ec3b1 ("perf test: Enhance the
      LLVM test: update basic BPF test program") dynamically creates file
      llvm-src-base.c during the perf building.

      Similarly, the commit 7af3f3d55b80cce40ad94b6b8e173dccedaf25e6 ("perf
      test: Enhance the LLVM tests: add kbuild test") dynamically creates file
      llvm-src-kbuild.c during the perf building. Add them to .gitignore.

      Signed-off-by: Yunlong Song <yunlong.song@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Alexei Starovoitov <ast@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Kan Liang <kan.liang@xxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
      Cc: Paul Mackerras <paulus@xxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Fixes: b31de018a628 ("perf test: Enhance the LLVM test: update basic BPF 
test program")
      Fixes: 7af3f3d55b80 ("perf test: Enhance the LLVM tests: add kbuild test")
      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>

  commit 8d3de01cfa37bfcf54f1d84eafb7db8530b74199
  Merge: 842cf0b 100ceb6
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 11 10:21:34 2015 -0800

      Merge tag 'firewire-update' of 
git://git.kernel.org/pub/scm/linux/kernel/git/ieee1394/linux1394

      Pull firewire fix from Stefan Richter:
       "Work around JMicron initialization quirk, which ffected isochronous
        transmission, e.g. audio via FFADO or ALSA"

      * tag 'firewire-update' of 
git://git.kernel.org/pub/scm/linux/kernel/git/ieee1394/linux1394:
        firewire: ohci: fix JMicron JMB38x IT context discovery

  commit 91633a6dc7cb49ae7c3d268e183ddc905e739fff
  Author: Eddie Kovsky <ewk@xxxxxxxxxxxx>
  Date:   Thu Nov 5 23:25:35 2015 -0700

      Documentation: Add minimal Mutt config for using Gmail

      This patch provides a minimal configuration to set up Mutt for
      submitting plain text patches using Gmail.

      Signed-off-by: Eddie Kovsky <ewk@xxxxxxxxxxxx>
      Reviewed-by: Darren Hart <dvhart@xxxxxxxxxxxxx>
      Signed-off-by: Jonathan Corbet <corbet@xxxxxxx>

  commit 803cfe2635cff6ea2147dc1065b5bd0bb98c6394
  Author: Eddie Kovsky <ewk@xxxxxxxxxxxx>
  Date:   Thu Nov 5 23:23:01 2015 -0700

      Documentation: Add note on sending files directly with Mutt

      Like 'git send-email', Mutt can also be used to send patches generated
      with 'git format-patch'. This works regardless of the editor the
      contributor has set up to use with Mutt.

      Signed-off-by: Eddie Kovsky <ewk@xxxxxxxxxxxx>
      Reviewed-by: Darren Hart <dvhart@xxxxxxxxxxxxx>
      Signed-off-by: Jonathan Corbet <corbet@xxxxxxx>

  commit 842cf0b9525813b084720a82d0d3aabc750b7ccc
  Merge: 65d57b30 7c7afc4
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 11 09:45:24 2015 -0800

      Merge branch 'for-linus-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

      Pull vfs update from Al Viro:

       - misc stable fixes

       - trivial kernel-doc and comment fixups

       - remove never-used block_page_mkwrite() wrapper function, and rename
         the function that is _actually_ used to not have double underscores.

      * 'for-linus-2' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs:
        fs: 9p: cache.h: Add #define of include guard
        vfs: remove stale comment in inode_operations
        vfs: remove unused wrapper block_page_mkwrite()
        binfmt_elf: Correct `arch_check_elf's description
        fs: fix writeback.c kernel-doc warnings
        fs: fix inode.c kernel-doc warning
        fs/pipe.c: return error code rather than 0 in pipe_write()
        fs/pipe.c: preserve alloc_file() error code
        binfmt_elf: Don't clobber passed executable's file header
        FS-Cache: Handle a write to the page immediately beyond the EOF marker
        cachefiles: perform test on s_blocksize when opening cache file.
        FS-Cache: Don't override netfs's primary_index if registering failed
        FS-Cache: Increase reference of parent after registering, netfs success
        debugfs: fix refcount imbalance in start_creating

  commit 65d57b3050eed3d848e51761904668b5d156743c
  Merge: c8fff3e 4afa5f9
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 11 09:23:07 2015 -0800

      Merge branch 'linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

      Pull crypto fix from Herbert Xu:
       "This fixes a bug in the algif_hash interface that may lead to crashes
        when used with certain algorithms such as HMAC"

      * 'linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:
        crypto: algif_hash - Only export and import on sockets with data

  commit c8fff3ed321abf11bea7464884b0876c46ff2491
  Merge: baf51c4 5dcd7b4
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 11 09:16:10 2015 -0800

      Merge tag 'pwm/for-4.4-rc1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/thierry.reding/linux-pwm

      Pull pwm updates from Thierry Reding:
       "This round contains a couple of new drivers for the Marvell Berlin
        family of SoCs, various SoCs from Renesas and Broadcom as well as the
        backlight PWM present on MediaTek SoCs.

        Further existing drivers are extended to support a wider range of
        hardware.

        The remaining patches are minor fixes and cleanups across the board.

        Note that one of the patches included in this pull request is against
        arch/unicore32.  I've included it here because I couldn't get a
        response from Guan Xuetao and I consider the change low-risk.
        Equivalent patches have been merged and tested in Samsung and PXA
        trees.  The goal is to finally get rid of legacy code paths that have
        repeatedly been causing headaches"

      * tag 'pwm/for-4.4-rc1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/thierry.reding/linux-pwm: (24 
commits)
        pwm: sunxi: Fix whitespace issue
        pwm: sysfs: Make use of the DEVICE_ATTR_[RW][WO] macro's
        pwm: sysfs: Remove unnecessary temporary variable
        unicore32: nb0916: Use PWM lookup table
        pwm: pwm-rcar: Revise the device tree binding document about compatible
        pwm: Return -ENODEV if no PWM lookup match is found
        pwm: sun4i: Add support for PWM controller on sun5i SoCs
        pwm: Set enable state properly on failed call to enable
        pwm: lpss: Add support for runtime PM
        pwm: lpss: Add more Intel Broxton IDs
        pwm: lpss: Support all four PWMs on Intel Broxton
        pwm: lpss: Add support for multiple PWMs
        pwm-pca9685: enable ACPI device found on Galileo Gen2
        pwm: Add MediaTek display PWM driver support
        dt-bindings: pwm: Add MediaTek display PWM bindings
        pwm: tipwmss: Enable on TI DRA7x and AM437x
        pwm: atmel-hlcdc: add sama5d2 SoC support.
        pwm: Add Broadcom BCM7038 PWM controller support
        Documentation: dt: add Broadcom BCM7038 PWM controller binding
        pwm: Add support for R-Car PWM Timer
        ...

  commit 0214503c5b42d05f146ede6d0bbf49265eca2909
  Author: Wang YanQing <udknight@xxxxxxxxx>
  Date:   Fri Oct 30 01:15:39 2015 +0800

      Documentation: dontdiff: remove media from dontdiff

      media will hide all the changes in drivers/media.

      Signed-off-by: Wang YanQing <udknight@xxxxxxxxx>
      Signed-off-by: Jonathan Corbet <corbet@xxxxxxx>

  commit d7ac8d85d39f460df9204b875eb985e18a5c523b
  Author: Chris Metcalf <cmetcalf@xxxxxxxxxx>
  Date:   Thu Nov 5 15:21:47 2015 -0500

      Documentation/SubmittingPatches: discuss In-Reply-To

      Add a paragraph suggesting best practices for when to link patches
      to previous LKML messages via In-Reply-To.

      Signed-off-by: Chris Metcalf <cmetcalf@xxxxxxxxxx>
      [jc: moved the added text to a separate section]
      Signed-off-by: Jonathan Corbet <corbet@xxxxxxx>

  commit a907c907656bdbe082555a579ee6058a873b6e3a
  Author: NeilBrown <neilb@xxxxxxxx>
  Date:   Sat Nov 7 17:38:58 2015 +1100

      Remove email address from Documentation/filesystems/overlayfs.txt

      I'm getting a surprising large number of questions about overlayfs sent
      to me personally, rather than to a relevant mailing list.

      So remove my email address from the documentation, and add a note
      about looking in the MAINTAINERS file.

      Signed-off-by: NeilBrown <neilb@xxxxxxxx>
      Signed-off-by: Jonathan Corbet <corbet@xxxxxxx>

  commit e2807e67d58328053dc3b6f4b91033ca4ab21c0d
  Author: Stefan Tatschner <rumpelsepp@xxxxxxxxxxxxx>
  Date:   Mon Nov 9 14:17:09 2015 +0100

      can-doc: Add missing semicolon to example

      The example code for CAN_BCM,

        connect(s, (struct sockaddr *)&addr, sizeof(addr))

      lacks a semicolon at the end of the line. This patch adds that
      missing semicolon to ensure that the given code snippet actually
      compiles.

      Signed-off-by: Stefan Tatschner <rumpelsepp@xxxxxxxxxxxxx>
      Acked-by: Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
      Signed-off-by: Jonathan Corbet <corbet@xxxxxxx>

  commit baf51c43926ec9aa42ef9d33ca6ee9e3e043aebe
  Merge: c5a3788 7c5b275
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 11 09:03:01 2015 -0800

      Merge branch 'next' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rzhang/linux

      Pull thermal updates from Zhang Rui:

       - Implement generic devfreq cooling mechanism through frequency
         reduction for devices using devfreq.  From Ã?rjan Eide and Javi
         Merino.

       - Introduce OMAP3 support on TI SoC thermal driver.  From Pavel Mack
         and Eduardo Valentin.

       - A bounch of small fixes on devfreq_cooling, Exynos, IMX, Armada, and
         Rockchip thermal drivers.

      * 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/rzhang/linux: 
(24 commits)
        thermal: exynos: Directly return 0 instead of using local ret variable
        thermal: exynos: Remove unneeded semicolon
        thermal: exynos: Use IS_ERR() because regulator cannot be NULL
        thermal: exynos: Fix first temperature read after registering sensor
        thermal: exynos: Fix unbalanced regulator disable on probe failure
        devfreq_cooling: return on allocation failure
        thermal: rockchip: support the sleep pinctrl state to avoid glitches in 
s2r
        dt-bindings: rockchip-thermal: Add the pinctrl states in this document
        thermal: devfreq_cooling: Make power a u64
        thermal: devfreq_cooling: use a thermal_cooling_device for register and 
unregister
        thermal: underflow bug in imx_set_trip_temp()
        thermal: armada: Fix possible overflow in the Armada 380 thermal sensor 
formula
        thermal: imx: register irq handler later in probe
        thermal: rockhip: fix setting thermal shutdown polarity
        thermal: rockchip: fix handling of invalid readings
        devfreq_cooling: add trace information
        thermal: Add devfreq cooling
        PM / OPP: get the voltage for all OPPs
        tools/thermal: tmon: use pkg-config also for CFLAGS
        linux/thermal.h: rename KELVIN_TO_CELSIUS to DECI_KELVIN_TO_CELSIUS
        ...

  commit e3a7a3bf362e2a8acc301e5eaec2631e740a8a95
  Author: Jens Axboe <axboe@xxxxxx>
  Date:   Wed Nov 11 09:37:34 2015 -0700

      block: don't hardcode blk_qc_t -> tag mask

      Use the shift/mask we use elsewhere.

      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit cadfbb6ec2e55171479191046142c927a8b12d87
  Author: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 19:42:49 2015 -0700

      dax_io(): don't let non-error value escape via retval instead of EFAULT

      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
      Reported-by: Sasha Levin <sasha.levin@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx # 4.0+
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit ccc2600b8a28f3eb0c126cd00312baba1c22cccb
  Author: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
  Date:   Fri Oct 30 18:36:16 2015 -0700

      block: fix blk-core.c kernel-doc warning

      Fix kernel-doc warning in blk-core.c:

      Warning(..//block/blk-core.c:1549): No description found for parameter 
'same_queue_rq'

      Signed-off-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Reviewed-by: Jeff Moyer <jmoyer@xxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit dbd3ca50753e70e09cad747dce23b1a7683a3342
  Author: Vivek Goyal <vgoyal@xxxxxxxxxx>
  Date:   Mon Nov 9 09:23:40 2015 -0700

      fs/block_dev.c: Remove WARN_ON() when inode writeback fails

      If a block device is hot removed and later last reference to device
      is put, we try to writeback the dirty inode. But device is gone and
      that writeback fails.

      Currently we do a WARN_ON() which does not seem to be the right thing.
      Convert it to a ratelimited kernel warning.

      Reported-by: Andi Kleen <andi@xxxxxxxxxxxxxx>
      Signed-off-by: Vivek Goyal <vgoyal@xxxxxxxxxx>
      Acked-by: Tejun Heo <tj@xxxxxxxxxx>
      [jmoyer@xxxxxxxxxx: get rid of unnecessary name initialization, 80 cols]
      Signed-off-by: Jeff Moyer <jmoyer@xxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit c74dc7801d515d01847fd5cf2b472489fa5717b1
  Author: Stephan Günther <guenther@xxxxxx>
  Date:   Wed Nov 4 00:49:45 2015 +0100

      NVMe: add support for Apple NVMe controller

      Add PCI ID of Apple's NVMe controller.

      Signed-off-by: Stephan Guenther <guenther@xxxxxx>
      Signed-off-by: Maurice Leclaire <leclaire@xxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit a310acd7a7ea53533886c11bb7edd11ffd61a036
  Author: Stephan Günther <guenther@xxxxxx>
  Date:   Sat Nov 7 18:07:02 2015 -0700

      NVMe: use split lo_hi_{read,write}q

      Some controllers may require ordered split transfers even on 64bit
      machines, e.g. Apple's NVMe controller as found in the MacBook8,1 and
      MacBookAir7,1 (256/512GB models).

      This patch enforces ordered split transfers on 64bit platforms, which
      works around that issue for all controllers. As pointed out by Christoph
      [1] there should be no performance impact due to that modification.

      [1] 
http://lists.infradead.org/pipermail/linux-nvme/2015-November/002965.html

      Signed-off-by: Stephan Guenther <guenther@xxxxxx>
      Signed-off-by: Maurice Leclaire <leclaire@xxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>

      Updated by me to explicitly use lo_hi_read/writeq instead of playing
      define tricks.

      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 1fa8cc52f46c14fb1afc20c220855c40a5d28fcd
  Author: Jens Axboe <axboe@xxxxxx>
  Date:   Thu Nov 5 14:32:55 2015 -0700

      blk-mq: mark __blk_mq_complete_request() static

      It's no longer used outside of blk-mq core.

      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 82c426e0f1f0b279a04cbafd1d25b504bbf49c22
  Author: Jens Axboe <axboe@xxxxxx>
  Date:   Thu Nov 5 13:29:25 2015 -0700

      MAINTAINERS: add reference to new linux-block list

      In the past, I've resisted doing a non-lkml related block/storage
      list. But we have more activity now than we previously did, and
      ain't nobody got time to track and follow lkml.

      So now linux-block@xxxxxxxxxxxxxxx exists. Please CC your patches
      related to block/storage here, and we'll have an easier time
      tracking them.

      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit b12363d0a5da00c422641f3d926fffb713192ea3
  Author: Sathyavathi M <sathya.m@xxxxxxxxxxx>
  Date:   Thu Nov 5 12:52:28 2015 -0700

      NVMe: Increase the max transfer size when mdts is 0

      This patch address the issue when IO with 128KB from FIO is split into
      two parts, 124KB and 4KB, due to max transfer size(127KB). This degrades
      the device performance.

      Signed-off-by: Sathyavathi M <sathya.m@xxxxxxxxxxx>
      Acked-by: Keith Busch <keith.busch@xxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit 2dbe5495763612f7c1b68fc897cd28c9e22079b8
  Author: Jan Kara <jack@xxxxxxxx>
  Date:   Wed Nov 4 17:13:39 2015 +0100

      brd: Refuse improperly aligned discard requests

      Currently when improperly aligned discard request is submitted, we just
      silently discard more / less data which results in filesystem corruption
      in some cases. Refuse such misaligned requests.

      Signed-off-by: Jan Kara <jack@xxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit e41b104c7dba92443e594e6bc86e4b0bf1cdf573
  Author: Zhou Chengming <zhouchengming1@xxxxxxxxxx>
  Date:   Fri Nov 6 14:25:00 2015 +0800

      livepatch: x86: fix relocation computation with kASLR

      With kASLR enabled, old_addr provided by patch module is being shifted
      accrodingly so that the symbol lookups work. To have module relocations
      handled properly as well, the same transformation needs to be perfomed
      on relocation address information.

      [jkosina@xxxxxxx: extended / reworded changelog a bit]
      Reported-by: Cyril B. <cbay@xxxxxxxxxxxxxx>
      Signed-off-by: Zhou Chengming <zhouchengming1@xxxxxxxxxx>
      Acked-by: Josh Poimboeuf <jpoimboe@xxxxxxxxxx>
      Signed-off-by: Jiri Kosina <jkosina@xxxxxxx>

  commit 121a868d05500b9d7e5108cc52474dafbf60e285
  Author: Sascha Silbe <silbe@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Oct 28 11:06:08 2015 +0100

      s390/zcrypt: Fix initialisation when zcrypt is built-in

      ap_bus and zcrypt_api assumed module information to always be present
      and initialisation to be done in module loading order (symbol
      dependencies). These assumptions don't hold if zcrypt is built-in;
      THIS_MODULE will be NULL in this case and init call order is linker
      order, i.e. Makefile order.

      Fix initialisation order by ordering the object files in the Makefile
      according to their dependencies, like the module loader would do.

      Fix message type registration by using a dedicated "name" field rather
      than piggy-backing on the module ("owner") information. There's no
      change to the requirement that module name and msgtype name are
      identical. The existing name macros are used.

      We don't need any special code for dealing with the drivers being
      built-in; the generic module support code already does the right
      thing.

      Test results:
      1. CONFIG_MODULES=y, CONFIG_ZCRYPT=y

         KVM: boots, no /sys/bus/ap (expected)
         LPAR with CEX5: boots, /sys/bus/ap/devices/card*/type present

      2. CONFIG_MODULES=y, CONFIG_ZCRYPT=m=:

         KVM: boots, loading zcrypt_cex4 (and ap) fails (expected)
         LPAR with CEX5: boots, loading =zcrypt_cex4= succeeds,
         /sys/bus/ap/devices/card*/type present after explicit module
         loading

      3. CONFIG_MODULES unset, CONFIG_ZCRYPT=y:
         KVM: boots, no /sys/bus/ap (expected)
         LPAR with CEX5: boots, /sys/bus/ap/devices/card*/type present

      No further testing (user-space functionality) was done.

      Fixes: 3b6245fd303f ("s390/zcrypt: Separate msgtype implementation from 
card modules.")
      Signed-off-by: Sascha Silbe <silbe@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit e387753c5fb4ae40393ba3f00b7958744670cac2
  Author: Sascha Silbe <silbe@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 18:29:52 2015 +0100

      s390/zcrypt: Fix kernel crash on systems without AP bus support

      On systems without AP bus (e.g. KVM) the kernel crashes during init
      calls when zcrypt is built-in:

      kernel BUG at drivers/base/driver.c:153!
      illegal operation: 0001 ilc:1 [#1] SMP
      Modules linked in:
      CPU: 1 PID: 1 Comm: swapper/0 Not tainted 4.2.0+ #221
      task: 0000000010a40000 ti: 0000000010a48000 task.ti:0000000010a48000
      Krnl PSW : 0704c00180000000 0000000000592bd6(driver_register+0x106/0x140)
                 R:0 T:1 IO:1 EX:1 Key:0 M:1 W:0 P:0 AS:3 CC:0 PM:0 EA:3
                 0000000000000012 0000000000000000 0000000000c45328 
0000000000c44e30
                 00000000009ef63c 000000000067f598 0000000000cf3c58 
0000000000000000
                 000000000000007b 0000000000cb1030 0000000000000002 
0000000000000000
                 0000000000ca8580 0000000010306700 00000000001001d8 
0000000010a4bd88
      Krnl Code: 0000000000592bc6: f0b00004ebcf srp 4(12,%r0),3023(%r14),0
                 0000000000592bcc: f0a0000407f4       srp     4(11,%r0),2036,0
                #0000000000592bd2: a7f40001           brc     15,592bd4
                >0000000000592bd6: e330d0000004       lg      %r3,0(%r13)
                 0000000000592bdc: c0200021edfd       larl    %r2,9d07d6
                 0000000000592be2: c0e500126d8f       brasl   %r14,7e0700
                 0000000000592be8: e330d0080004       lg      %r3,8(%r13)
                 0000000000592bee: a7f4ffab           brc     15,592b44
      Call Trace:
      ([<00000000001001c8>] do_one_initcall+0x90/0x1d0)
       [<0000000000c6dd34>] kernel_init_freeable+0x1e4/0x2a0
       [<00000000007db53a>] kernel_init+0x2a/0x120
       [<00000000007e8ece>] kernel_thread_starter+0x6/0xc
       [<00000000007e8ec8>] kernel_thread_starter+0x0/0xc
      Last Breaking-Event-Address:
       [<0000000000592bd2>] driver_register+0x102/0x140

      When zcrypt is built as a module, the module loader ensures that the
      driver modules cannot be loaded if the AP bus module returns an error
      during initialisation. But if zcrypt and the driver are built-in, the
      driver is getting initialised even if the AP bus initialisation
      failed. The driver invokes ap_driver_register() during initialisation,
      which then causes operations on uninitialised data structures to be
      performed.

      Explicitly protect ap_driver_register() by introducing an
      "initialised" flag that gets set iff the AP bus initialisation was
      successful. When the AP bus initialisation failed,
      ap_driver_register() will error out with -ENODEV, causing the driver
      initialisation to fail as well.

      Test results:
      1. Inside KVM (no AP bus), zcrypt built-in

         Boots. /sys/bus/ap not present (expected).

      2. Inside KVM (no AP bus), zcrypt as module

         Boots. Loading zcrypt_cex4 fails because loading ap_bus fails
         (expected).

      3. On LPAR with CEX5, zcrypt built-in

         Boots. /sys/bus/ap/devices/card* present but .../card*/type missing
         (i.e. zcrypt_device_register() fails, unrelated issue).

      4. On LPAR with CEX5, zcrypt as module

         Boots. Loading zcrypt_cex4 successful,
         /sys/bus/ap/devices/card*/type present. No further testing
         (user-space functionality) was done.

      Signed-off-by: Sascha Silbe <silbe@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 18e22a1772260045648e49e2048ecc7193422a80
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Jun 29 18:39:54 2015 +0200

      s390: add support for ipl devices in subchannel sets > 0

      Allow to ipl from CCW based devices residing in any subchannel set.

      Reviewed-by: Michael Holzheu <holzheu@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit e2656412f2a7343ecfd13eb74bac0a6e6e9c5aad
  Author: Lu, Han <han.lu@xxxxxxxxx>
  Date:   Wed Nov 11 16:54:27 2015 +0800

      ALSA: hda/hdmi - apply Skylake fix-ups to Broxton display codec

      Broxton and Skylake have the same behavior on display audio. So this patch
      applys Skylake fix-ups to Broxton.

      Signed-off-by: Lu, Han <han.lu@xxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit 997effa0c198ab3b7d4b62cf443d797e4e0bf5ff
  Author: Florian Fainelli <f.fainelli@xxxxxxxxx>
  Date:   Fri Oct 16 12:51:58 2015 -0700

      MIPS: BMIPS: Enable GZIP ramdisk and timed printks

      Update bmips_be_defconfig and bmips_stb_defconfig to have GZIP ramdisk
      support enabled by default as well was timed printks.

      Signed-off-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Reviewed-by: Kevin Cernekee <cernekee@xxxxxxxxx>
      Reviewed-by: Dragan Stancevic <dragan.stancevic@xxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: blogic@xxxxxxxxxxx
      Cc: jogo@xxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11307/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit e0bedada3a497d0640dd5db93e7ad0735f487492
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 6 09:58:06 2015 +0100

      s390/ipl: fix out of bounds access in scpdata_write

      The input buffer in reipl_fcp_scpdata_write is accessed out of bounds
      when an offset is specified. The problem is that the offset refers to
      the data we should write to and not to the buffer we read from.

      So instead of
              memcpy(scp_data, buf + off, count);
      we could just do
              memcpy(scp_data + off, buf, count);

      However we not only modify the data but also store its length. For this to
      work we'd need to remember a state per open FH. Since that's not possible
      with sysfs callbacks let's just fail when an offset is specified.

      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Acked-by: Hendrik Brueckner <brueckner@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 43f2cdeb7a61598050028f1eae51b9cb5398af42
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sun Nov 8 23:40:41 2015 +0100

      ALSA: ctxfi: constify rsc ops structures

      The various rsc ops structures are never modified, so declare them as
      const.

      Done with the help of Coccinelle.

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit 834cc15b443840d94e225bb0ff0604b1c1f6f2e1
  Author: Zubair Lutfullah Kakakhel <Zubair.Kakakhel@xxxxxxxxxx>
  Date:   Mon Oct 26 11:30:57 2015 +0000

      MIPS: Add xilfpga defconfig

      Add defconfig for MIPSfpga

      Signed-off-by: Zubair Lutfullah Kakakhel <Zubair.Kakakhel@xxxxxxxxxx>
      Cc: robh+dt@xxxxxxxxxx
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: devicetree@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11363/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 9937f5fff889bde488c5ffd238dcb49e9b9cc7b7
  Author: Zubair Lutfullah Kakakhel <Zubair.Kakakhel@xxxxxxxxxx>
  Date:   Mon Oct 26 11:30:56 2015 +0000

      MIPS: xilfpga: Add mipsfpga platform code

      The xilfpga platform will be DT only.

      Add required platform code.
      DT files have already been added separately.

      Signed-off-by: Zubair Lutfullah Kakakhel <Zubair.Kakakhel@xxxxxxxxxx>
      Cc: robh+dt@xxxxxxxxxx
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: devicetree@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11364/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 552b8b363ede5fc53db343b67c0b2b5eaf783a11
  Author: Zubair Lutfullah Kakakhel <Zubair.Kakakhel@xxxxxxxxxx>
  Date:   Mon Oct 26 11:30:55 2015 +0000

      MIPS: xilfpga: Add xilfpga device tree files.

      Add device tree files for the MIPSfpga platform.

      See Documentation/devicetree/bindings/mips/img/xilfpga.txt
      for details about MIPSfpga

      Signed-off-by: Zubair Lutfullah Kakakhel <Zubair.Kakakhel@xxxxxxxxxx>
      Cc: robh+dt@xxxxxxxxxx
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: devicetree@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11362/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 26c188be1f99d609cd4946f97fdf9e29d3d5c81e
  Author: Zubair Lutfullah Kakakhel <Zubair.Kakakhel@xxxxxxxxxx>
  Date:   Mon Oct 26 11:30:54 2015 +0000

      dt-bindings: MIPS: Document xilfpga bindings and boot style

      Xilfpga boots only with device-tree. Document the required properties
      and the unique boot style

      Signed-off-by: Zubair Lutfullah Kakakhel <Zubair.Kakakhel@xxxxxxxxxx>
      Cc: robh+dt@xxxxxxxxxx
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: devicetree@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11361/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 2bcef9b457bbe159a5e3843e2578d8195e0b1c56
  Author: Jonas Gorski <jogo@xxxxxxxxxxx>
  Date:   Mon Oct 12 13:13:03 2015 +0200

      MIPS: Make MIPS_CMDLINE_DTB default

      Seval of-enabled machines (bmips, lantiq, xlp, pistachio, ralink) copied
      the arguments from dtb to arcs_command_line to prevent the kernel from
      overwriting them.

      Since there is now an option to keep the dtb arguments, default to the
      new option remove the "backup" to arcs_command_line in case of USE_OF is
      enabled, except for those platforms that still take the bootloader
      arguments or do not use any at all.

      Signed-off-by: Jonas Gorski <jogo@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Kevin Cernekee <cernekee@xxxxxxxxx>
      Cc: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Cc: Zubair Lutfullah Kakakhel <Zubair.Kakakhel@xxxxxxxxxx>
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: John Crispin <blogic@xxxxxxxxxxx>
      Cc: Ganesan Ramalingam <ganesanr@xxxxxxxxxxxx>
      Cc: Jayachandran C <jchandra@xxxxxxxxxxxx>
      Cc: Andrew Bresticker <abrestic@xxxxxxxxxxxx>
      Cc: James Hartley <james.hartley@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11285/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 2024972ef5330dcae47f400c586764d8f4cb0b04
  Author: Jonas Gorski <jogo@xxxxxxxxxxx>
  Date:   Mon Oct 12 13:13:02 2015 +0200

      MIPS: Make the kernel arguments from dtb available

      Similar to how arm allows using selecting between bootloader arguments,
      dtb arguments and both, allow to select them on mips. But since we have
      less control over the place of the dtb do not modify it but instead use
      the boot_command_line for merging them.

      The default is "use bootloader arguments" to keep the current behaviour
      as default.

      Signed-off-by: Jonas Gorski <jogo@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Kevin Cernekee <cernekee@xxxxxxxxx>
      Cc: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Cc: Zubair Lutfullah Kakakhel <Zubair.Kakakhel@xxxxxxxxxx>
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: John Crispin <blogic@xxxxxxxxxxx>
      Cc: Ganesan Ramalingam <ganesanr@xxxxxxxxxxxx>
      Cc: Jayachandran C <jchandra@xxxxxxxxxxxx>
      Cc: Andrew Bresticker <abrestic@xxxxxxxxxxxx>
      Cc: James Hartley <james.hartley@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11284/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 5b24d52ce23d1c7a5c2bd884e57463e266eb8b85
  Author: Jonas Gorski <jogo@xxxxxxxxxxx>
  Date:   Mon Oct 12 13:13:01 2015 +0200

      MIPS: Use USE_OF as the guard for appended dtb

      Since OF is now a user selectable symbol, the choice for appended dtb
      support should only be visible when USE_OF is selected, as this
      indicates actual machine support for device tree in MIPS.

      Signed-off-by: Jonas Gorski <jogo@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Kevin Cernekee <cernekee@xxxxxxxxx>
      Cc: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Cc: Zubair Lutfullah Kakakhel <Zubair.Kakakhel@xxxxxxxxxx>
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: John Crispin <blogic@xxxxxxxxxxx>
      Cc: Ganesan Ramalingam <ganesanr@xxxxxxxxxxxx>
      Cc: Jayachandran C <jchandra@xxxxxxxxxxxx>
      Cc: Andrew Bresticker <abrestic@xxxxxxxxxxxx>
      Cc: James Hartley <james.hartley@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11283/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 63893ea5304c919656613a47b04e35c6814d9041
  Author: Gregory Fong <gregory.0xf0@xxxxxxxxx>
  Date:   Wed Oct 14 04:27:38 2015 -0700

      MIPS: BCM63XX: Use pr_* instead of printk

      Signed-off-by: Gregory Fong <gregory.0xf0@xxxxxxxxx>
      Cc: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Cc: Jonas Gorski <jogo@xxxxxxxxxxx>
      Cc: Joe Perches <joe@xxxxxxxxxxx>
      Cc: Rusty Russell <rusty@xxxxxxxxxxxxxxx>
      Cc: Nicolas Schichan <nschichan@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11300/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 5361832704d3224c09dd5732ae656d9d5014c1d8
  Author: Huacai Chen <chenhc@xxxxxxxxxx>
  Date:   Wed Oct 7 14:07:59 2015 +0800

      MIPS: Loongson: Cleanup CONFIG_LOONGSON_SUSPEND.

      Now LOONGSON_CHIPCFG register definition doesn't depend on CPUFREQ any
      more, so CPU_SUPPORTS_CPUFREQ is no longer needed for suspend/resume.
      Remove CONFIG_LOONGSON_SUSPEND and use CONFIG_SUSPEND instead.

      Signed-off-by: Huacai Chen <chenhc@xxxxxxxxxx>
      Cc: John Crispin <john@xxxxxxxxxxx>
      Cc: Steven J. Hill <Steven.Hill@xxxxxxxxxx>
      Cc: Fuxin Zhang <zhangfx@xxxxxxxxxx>
      Cc: Zhangjin Wu <wuzhangjin@xxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11274/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 08b3c894e56580b8ed3e601212a25bda974c3cc2
  Author: John Crispin <blogic@xxxxxxxxxxx>
  Date:   Thu Nov 5 03:56:23 2015 +0100

      MIPS: lantiq: Disable xbar fpi burst mode

      Signed-off-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11458/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 9eb8c69e0b00d5e7970a682454180780b6a3d020
  Author: John Crispin <blogic@xxxxxxxxxxx>
  Date:   Wed Nov 4 13:14:15 2015 +0100

      MIPS: lantiq: Force the crossbar to big endian

      Signed-off-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11450/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 26cfdbe30d81c209a5e81c4c311b02b10b5821c3
  Author: John Crispin <blogic@xxxxxxxxxxx>
  Date:   Wed Nov 4 13:14:14 2015 +0100

      MIPS: lantiq: Initialize the USB core on boot

      There is a DWC2 USB core in these SoCs. To make USB work we need to first
      reset and power the state machine. These are SoC specific registers and
      not part of the actual USB core.

      Signed-off-by: Antti Seppälä <a.seppala@xxxxxxxxx>
      Signed-off-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11449/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 1601078df26605da7a8107bdd3143ef6b9d07e3b
  Author: John Crispin <blogic@xxxxxxxxxxx>
  Date:   Wed Nov 4 13:14:13 2015 +0100

      MIPS: lantiq: Return correct value for fpi clock on ar9

      Some configurations of AR9 reported the incorrect speed for the fpi bus.

      Signed-off-by: Ben Mulvihill <ben.mulvihill@xxxxxxxxx>
      Signed-off-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11448/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 69ebed7dc9311ea383dd0b9542c823a51b20e679
  Author: John Crispin <blogic@xxxxxxxxxxx>
  Date:   Wed Nov 4 11:50:14 2015 +0100

      MIPS: ralink: Add missing clock on rt305x

      The rt305x support is missing a clock required by the ethernet driver.

      Signed-off-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11447/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 1a93520504aa035f037e7e255aee670561a38946
  Author: John Crispin <blogic@xxxxxxxxxxx>
  Date:   Wed Nov 4 11:50:13 2015 +0100

      MIPS: ralink: Put the pci bus into reset state before rebooting the SoC

      Some pcie cards have problems after a reboot without this.

      Signed-off-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11446/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 81ab9f6c5ff8565e4cba330e340a8979a10521d7
  Author: John Crispin <blogic@xxxxxxxxxxx>
  Date:   Wed Nov 4 11:50:12 2015 +0100

      MIPS: ralink: Don't set pm_power_off

      Setting pm_power_off is apprently wrong and makes drivers such as
      gpio-poweroff not work.

      Signed-off-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11445/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit bc19f5d677c10f323650e6bb5fe45ab5fb11e9a9
  Author: John Crispin <blogic@xxxxxxxxxxx>
  Date:   Wed Nov 4 11:50:11 2015 +0100

      MIPS: ralink: Remove check for CONFIG_PCI on non-PCI SoCs

      The code currently panics if PCI is enabled but the SoC has no PCI bus.
      This check is superfluous as the driver only loads if enabled in the
      devicetree.

      Signed-off-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11444/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 37bcc03f97e05cc65ce87d3b2fdcd4e5b28ce06c
  Author: John Crispin <blogic@xxxxxxxxxxx>
  Date:   Wed Nov 4 11:50:10 2015 +0100

      MIPS: ralink: Fix invalid tick count

      The current code adds the delta twice, which is obviously wrong.

      Signed-off-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11443/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 73afa6c4208257ea1733a03918fea731a18131e7
  Author: John Crispin <blogic@xxxxxxxxxxx>
  Date:   Thu Nov 5 03:59:58 2015 +0100

      MIPS: ralink: Add tty detection

      MT7688 has several uarts that can be used for console. There are several
      boards in the wild, that use ttyS1 or ttyS2. This patch applies a simply
      autodetection routine to figure out which ttyS the bootloader used as
      console. The uarts come up in 6 bit mode by default. The bootloader will
      have set 8 bit mode on the console. Find that 8bit tty and use it.

      Signed-off-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11459/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit b361bd762e7724e660a44955ae4840aa984e3871
  Author: John Crispin <blogic@xxxxxxxxxxx>
  Date:   Wed Nov 4 11:50:08 2015 +0100

      MIPS: ralink: Fix usb issue during frequency scaling

      If the USB HCD is running and the cpu is scaled too low, then the USB
      stops working. Increase the idle speed of the core to fix this if the
      kernel is built with USB support.

      The "magic" values are taken from the Ralink SDK Kernel.

      Signed-off-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11441/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 418d29c8706170c6801998e48341181b274a47a8
  Author: John Crispin <blogic@xxxxxxxxxxx>
  Date:   Wed Nov 4 11:50:07 2015 +0100

      MIPS: ralink: Unify SoC id handling

      This makes detection a lot easier for audio, wifi, ... drivers.

      Signed-off-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11440/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 81857db913e9782546d29b52cd3efc80c0145c23
  Author: John Crispin <blogic@xxxxxxxxxxx>
  Date:   Wed Nov 4 11:50:06 2015 +0100

      MIPS: ralink: Add support for mt7688

      MT7688 is similar tot he MT7628 but has a different wifi radio.

      Signed-off-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11439/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 1b04be20f6e38672d81f2de844488164bca988ca
  Author: Jaedon Shin <jaedon.shin@xxxxxxxxx>
  Date:   Tue Oct 27 15:48:11 2015 +0900

      MIPS: BMIPS: Add SATA/PHY nodes for bcm7362

      Add AHCI and PHY device nodes to MIPS-based BCM7362 set-top box
      platform.

      Signed-off-by: Jaedon Shin <jaedon.shin@xxxxxxxxx>
      Cc: Brian Norris <computersforpeace@xxxxxxxxx>
      Cc: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Cc: Tejun Heo <tj@xxxxxxxxxx>
      Cc: Kishon Vijay Abraham I <kishon@xxxxxx>
      Cc: Rob Herring <robh+dt@xxxxxxxxxx>
      Cc: Kevin Cernekee <cernekee@xxxxxxxxx>
      Cc: Dragan Stancevic <dragan.stancevic@xxxxxxxxx>
      Cc: linux-ide@xxxxxxxxxxxxxxx
      Cc: Linux-MIPS <linux-mips@xxxxxxxxxxxxxx>
      Cc: devicetree@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11379/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 19e88101c78fdbfb93580f7ac0eb64eea040cbb6
  Author: Jaedon Shin <jaedon.shin@xxxxxxxxx>
  Date:   Tue Oct 27 15:48:10 2015 +0900

      MIPS: BMIPS: Add SATA/PHY nodes for bcm7346

      Add AHCI and PHY device nodes to MIPS-based BCM7346 set-top box
      platform.

      Signed-off-by: Jaedon Shin <jaedon.shin@xxxxxxxxx>
      Cc: Brian Norris <computersforpeace@xxxxxxxxx>
      Cc: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Cc: Tejun Heo <tj@xxxxxxxxxx>
      Cc: Kishon Vijay Abraham I <kishon@xxxxxx>
      Cc: Rob Herring <robh+dt@xxxxxxxxxx>
      Cc: Kevin Cernekee <cernekee@xxxxxxxxx>
      Cc: Dragan Stancevic <dragan.stancevic@xxxxxxxxx>
      Cc: linux-ide@xxxxxxxxxxxxxxx
      Cc: Linux-MIPS <linux-mips@xxxxxxxxxxxxxx>
      Cc: devicetree@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11378/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit ce6df6376a1eeb63c694f8e82e9563b59c5506a6
  Author: Jaedon Shin <jaedon.shin@xxxxxxxxx>
  Date:   Tue Oct 27 15:48:09 2015 +0900

      MIPS: BMIPS: Add SATA/PHY nodes for bcm7425

      Add AHCI and PHY device nodes to MIPS-based BCM7425 set-top box
      platform.

      Signed-off-by: Jaedon Shin <jaedon.shin@xxxxxxxxx>
      Cc: Brian Norris <computersforpeace@xxxxxxxxx>
      Cc: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Cc: Tejun Heo <tj@xxxxxxxxxx>
      Cc: Kishon Vijay Abraham I <kishon@xxxxxx>
      Cc: Rob Herring <robh+dt@xxxxxxxxxx>
      Cc: Kevin Cernekee <cernekee@xxxxxxxxx>
      Cc: Dragan Stancevic <dragan.stancevic@xxxxxxxxx>
      Cc: linux-ide@xxxxxxxxxxxxxxx
      Cc: Linux-MIPS <linux-mips@xxxxxxxxxxxxxx>
      Cc: devicetree@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11377/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit f50cbf5329e045e8d69046ea9093e6bafdc09516
  Author: Jaedon Shin <jaedon.shin@xxxxxxxxx>
  Date:   Wed Oct 21 11:37:01 2015 +0900

      MIPS: BMIPS: Add I2C node for bcm7362

      Add I2C device nodes to BMIPS based BCM7362 platform.

      Signed-off-by: Jaedon Shin <jaedon.shin@xxxxxxxxx>
      Acked-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Cc: Wolfram Sang <wsa@xxxxxxxxxxxxx>
      Cc: Kamal Dasu <kdasu.kdev@xxxxxxxxx>
      Cc: linux-i2c@xxxxxxxxxxxxxxx
      Cc: devicetree@xxxxxxxxxxxxxxx
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11336/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit fb575b85efd091bad0e0a1220426086c789074d7
  Author: Jaedon Shin <jaedon.shin@xxxxxxxxx>
  Date:   Wed Oct 21 11:37:00 2015 +0900

      MIPS: BMIPS: Add I2C node for bcm7360

      Add I2C device nodes to BMIPS based BCM7360 platform.

      Signed-off-by: Jaedon Shin <jaedon.shin@xxxxxxxxx>
      Acked-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Cc: Wolfram Sang <wsa@xxxxxxxxxxxxx>
      Cc: Kamal Dasu <kdasu.kdev@xxxxxxxxx>
      Cc: linux-i2c@xxxxxxxxxxxxxxx
      Cc: devicetree@xxxxxxxxxxxxxxx
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11335/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit ad8378383e2c705871125f5c9d36936d80068174
  Author: Jaedon Shin <jaedon.shin@xxxxxxxxx>
  Date:   Wed Oct 21 11:36:59 2015 +0900

      MIPS: BMIPS: Add I2C node for bcm7358

      Add I2C device nodes to BMIPS based BCM7358 platform.

      Signed-off-by: Jaedon Shin <jaedon.shin@xxxxxxxxx>
      Acked-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Cc: Wolfram Sang <wsa@xxxxxxxxxxxxx>
      Cc: Kamal Dasu <kdasu.kdev@xxxxxxxxx>
      Cc: linux-i2c@xxxxxxxxxxxxxxx
      Cc: devicetree@xxxxxxxxxxxxxxx
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11334/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 39d9b6b223900cdcc36f78c7f9b4173975ca668c
  Author: Jaedon Shin <jaedon.shin@xxxxxxxxx>
  Date:   Wed Oct 21 11:36:58 2015 +0900

      MIPS: BMIPS: Add I2C node for bcm7346

      Add I2C device nodes to BMIPS based BCM7346 platform.

      Signed-off-by: Jaedon Shin <jaedon.shin@xxxxxxxxx>
      Acked-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Cc: Wolfram Sang <wsa@xxxxxxxxxxxxx>
      Cc: Kamal Dasu <kdasu.kdev@xxxxxxxxx>
      Cc: linux-i2c@xxxxxxxxxxxxxxx
      Cc: devicetree@xxxxxxxxxxxxxxx
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11333/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 6e807852676a2ef6f104b56114d7a5096d42ff37
  Author: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
  Date:   Wed Oct 28 23:37:44 2015 +0100

      MIPS: Lantiq: Fix check for return value of request_mem_region()

      request_mem_region() returns a pointer and not an integer with an error
      value. A check for "< 0" on a pointer will cause problems, replace it
      with not null checks instead. This was found with sparse.

      Signed-off-by: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
      Acked-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11395/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 13648d724549ec5bd986e88ec628c1b42ab0258e
  Author: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
  Date:   Wed Oct 28 23:37:43 2015 +0100

      MIPS: Lantiq: Add support for xRX220 SoC

      Signed-off-by: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
      Acked-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11394/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 5072d8142a830102317411e5599d7347cdd88a9f
  Author: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
  Date:   Wed Oct 28 23:37:42 2015 +0100

      MIPS: Lantiq: Add misc clocks

      Signed-off-by: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
      Acked-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11393/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit e71f6d356dccce4ba49a402bf7e9cb44671787cb
  Author: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
  Date:   Wed Oct 28 23:37:41 2015 +0100

      MIPS: Lantiq: Add 1e103100.deu clock

      Signed-off-by: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
      Acked-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11392/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit a3a6853498903dc937710a9f00af8a6679b3e704
  Author: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
  Date:   Wed Oct 28 23:37:40 2015 +0100

      MIPS: Lantiq: Add clock for mei driver

      Signed-off-by: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
      Acked-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11391/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit a5c1aad853a499f2b9f3a74e0d019b2ea8ad5825
  Author: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
  Date:   Wed Oct 28 23:37:39 2015 +0100

      MIPS: Lantiq: Add SoC detection for ar10 and grx390

      Signed-off-by: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
      Acked-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11390/
      Patchwork: https://patchwork.linux-mips.org/patch/11399/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit eefee024b012df827fd0aebffcd05665d8511a8a
  Author: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
  Date:   Wed Oct 28 23:37:38 2015 +0100

      MIPS: Lantiq: Add support for gphy firmware loading for ar10 and grx390

      Signed-off-by: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
      Acked-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11389/
      Patchwork: https://patchwork.linux-mips.org/patch/11398/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit d0b991e376e6293f1122813f28c63d3c93fdc97b
  Author: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
  Date:   Wed Oct 28 23:37:37 2015 +0100

      MIPS: Lantiq: Add pmu bits for ar10 and grx390

      Signed-off-by: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
      Acked-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11388/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit e182c98a59e3cf9e78d1d20f32d3bd3d1b4c521a
  Author: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
  Date:   Wed Oct 28 23:37:36 2015 +0100

      MIPS: Lantiq: Add PMU bits for USB and SDIO devices

      This adds the PUM bits for USB and SDIO devices

      Signed-off-by: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
      Acked-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11387/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 95135bfa7ead1becc2879230f72583dde2b71a0c
  Author: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
  Date:   Wed Oct 28 23:37:35 2015 +0100

      MIPS: Lantiq: Deactivate most of the devices by default

      When the SoC starts up most of the devices should be deactivated by the
      PMU, they should be activated when they get used by their drivers. Some
      devices should not get deactivate at startup like the serial, register
      them in a special way.

      Signed-off-by: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
      Acked-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11386/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 61e371d8222fe9fd9beb15f94d27aeec58f36a2d
  Author: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
  Date:   Wed Oct 28 23:37:34 2015 +0100

      MIPS: Lantiq: Add clock detection for grx390 and ar10

      This add detection of some clocks on the ar10 and grx390.

      Signed-off-by: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
      Acked-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11385/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 18a3af60fcb6c0f2948e4e2922d3fcaeb1d74c64
  Author: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
  Date:   Wed Oct 28 23:37:33 2015 +0100

      MIPS: Lantiq: Fix pp32 clock on vr9

      The vendor code uses different clock values for this clock.

      Signed-off-by: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
      Acked-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11384/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit b5a03d0cb32c35f7ca9a042f01c1de14daaeeb11
  Author: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
  Date:   Wed Oct 28 23:37:32 2015 +0100

      MIPS: Lantiq: Rename CGU_SYS_VR9 register

      This register is also used on other SoCs.

      Signed-off-by: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
      Acked-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11383/
      Patchwork: https://patchwork.linux-mips.org/patch/11397/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 758d2443edd57a44cfebde585a46fabc8f298250
  Author: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
  Date:   Wed Oct 28 23:37:31 2015 +0100

      MIPS: Lantiq: Add support for setting PMU register on AR10 and GRX390

      This adds support for setting the PMU register on the AR10 and GRX390.

      Signed-off-by: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
      Acked-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11382/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit cab7b8363ce5413a69817a2275cf12efa0001334
  Author: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
  Date:   Wed Oct 28 23:37:30 2015 +0100

      MIPS: Lantiq: Add locking for PMU register and check status afterwards

      The PMU register are accessed in a non atomic way and they could be
      accessed by different threads simultaneously, which could cause
      problems this patch adds locking around the PMU registers. In
      addition we now also wait till the PMU is actually deactivated.

      [ralf@xxxxxxxxxxxxxx: Fix spelling mistake in commit message as noticed
      by Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>.]

      Signed-off-by: Hauke Mehrtens <hauke.mehrtens@xxxxxxxxxx>
      Acked-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11381/
      Patchwork: https://patchwork.linux-mips.org/patch/11396/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit d8cfb5037bfc875e6dc8e09e4caceb443c04ff6a
  Author: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
  Date:   Mon Oct 26 11:13:16 2015 +0100

      MIPS: BCM47xx: Fetch board info directly in callback function

      This drops another symbol dependency between setup.c and sprom.c which
      will allow us to make SPROM code a separated module (and share it with
      ARM).
      Patch tested on Linksys WRT300N V1.

      Signed-off-by: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
      Cc: Hauke Mehrtens <hauke@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11360/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 2f94acde42b70c81129b398c44aa09411974a16d
  Author: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
  Date:   Sun Oct 25 22:16:48 2015 +0100

      MIPS: BCM47xx: Fix some WARNINGs pointed in sprom.c by checkpatch.pl

      There are still few left:
      1) Most of them about lines over 80 chars (increased readability 
exception)
      2) Wrong parsing of preprocessor macros

      Signed-off-by: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Hauke Mehrtens <hauke@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11356/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit daa7ce02513d2188fe6f5ff47ce5ef83eb7de739
  Author: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
  Date:   Sun Oct 25 22:16:47 2015 +0100

      MIPS: BCM47xx: Support on-SoC bus in SPROM reading function

      To support (extract) SPROM on Broadcom ARM devices we should separate
      SPROM code and make it a separated module. We won't want to export
      bcm47xx_fill_sprom symbol so we should support SoC SPROM in the standard
      fallback function and then modify ssb to use it.

      Signed-off-by: RafaÅ? MiÅ?ecki <zajec5@xxxxxxxxx>
      Acked-by: Hauke Mehrtens <hauke@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11355/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 500fab97c682f3264eb7f96c22575d70cce6b2b4
  Author: Hauke Mehrtens <hauke@xxxxxxxxxx>
  Date:   Sun Oct 25 23:21:42 2015 +0100

      MIPS: lantiq: add clk_round_rate()

      This adds a basic implementation of clk_round_rate()
      The clk_round_rate() function is called by multiple drivers and
      subsystems now and the lantiq clk driver is supposed to export this,
      but doesn't do so, this causes linking problems like this one:
      ERROR: "clk_round_rate" [drivers/media/v4l2-core/videodev.ko] undefined!

      Signed-off-by: Hauke Mehrtens <hauke@xxxxxxxxxx>
      Acked-by: John Crispin <blogic@xxxxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 4.1+
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11358/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit e1e1611598148e03c6d65e6c23338f4ff2cee71e
  Author: Aaro Koskinen <aaro.koskinen@xxxxxxxxx>
  Date:   Fri Oct 23 15:39:02 2015 +0300

      MIPS: Add LATENCYTOP support

      Add LATENCYTOP support for MIPS. Tested on OCTEON.

      Signed-off-by: Aaro Koskinen <aaro.koskinen@xxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11353/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 972cfd5502cc87d388a6d358eae717ac48ca4817
  Author: Julia Lawall <Julia.Lawall@xxxxxxx>
  Date:   Sun Oct 25 22:24:25 2015 +0100

      MIPS: pci-rt3883: drop unneeded of_node_get

      for_each_child_of_node performs an of_node_get on each iteration, so no
      of_node_get is needed on breaking out of the loop when the device_node
      structure is saved in another variable.

      A simplified semantic match that finds this problem is as follows
      (http://coccinelle.lip6.fr):

      // <smpl>
      @@
      expression root;
      local idexpression child;
      @@

       for_each_child_of_node(root, child) {
         ...
      *  of_node_get(child)
         ...
         break;
       }
      // </smpl>

      Signed-off-by: Julia Lawall <Julia.Lawall@xxxxxxx>
      Cc: kernel-janitors@xxxxxxxxxxxxxxx
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: Russell King - ARM Linux <linux@xxxxxxxxxxxxxxxx>
      Cc: Thomas Petazzoni <thomas.petazzoni@xxxxxxxxxxxxxxxxxx>
      Cc: Andrew Lunn <andrew@xxxxxxx>
      Cc: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11357/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit a7f4df4e21dd8a8dab96e88acd2c9c5017b83fc6
  Author: Alex Smith <alex.smith@xxxxxxxxxx>
  Date:   Wed Oct 21 09:57:44 2015 +0100

      MIPS: VDSO: Add implementations of gettimeofday() and clock_gettime()

      Add user-mode implementations of gettimeofday() and clock_gettime() to
      the VDSO. This is currently usable with 2 clocksources: the CP0 count
      register, which is accessible to user-mode via RDHWR on R2 and later
      cores, or the MIPS Global Interrupt Controller (GIC) timer, which
      provides a "user-mode visible" section containing a mirror of its
      counter registers. This section must be mapped into user memory, which
      is done below the VDSO data page.

      When a supported clocksource is not in use, the VDSO functions will
      return -ENOSYS, which causes libc to fall back on the standard syscall
      path.

      When support for neither of these clocksources is compiled into the
      kernel at all, the VDSO still provides clock_gettime(), as the coarse
      realtime/monotonic clocks can still be implemented. However,
      gettimeofday() is not provided in this case as nothing can be done
      without a suitable clocksource. This causes the symbol lookup to fail
      in libc and it will then always use the standard syscall path.

      This patch includes a workaround for a bug in QEMU which results in
      RDHWR on the CP0 count register always returning a constant (incorrect)
      value. A fix for this has been submitted, and the workaround can be
      removed after the fix has been in stable releases for a reasonable
      amount of time.

      A simple performance test which calls gettimeofday() 1000 times in a
      loop and calculates the average execution time gives the following
      results on a Malta + I6400 (running at 20MHz):

       - Syscall:    ~31000 ns
       - VDSO (GIC): ~15000 ns
       - VDSO (CP0): ~9500 ns

      [markos.chandras@xxxxxxxxxx:
      - Minor code re-arrangements in order for mappings to be made
      in the order they appear to the process' address space.
      - Move do_{monotonic, realtime} outside of the MIPS_CLOCK_VSYSCALL ifdef
      - Use gic_get_usm_range so we can do the GIC mapping in the
      arch/mips/kernel/vdso instead of the GIC irqchip driver]

      Signed-off-by: Alex Smith <alex.smith@xxxxxxxxxx>
      Signed-off-by: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11338/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit c0a9f72c156baf1e88c33c6ba4450647af1b8804
  Author: Alex Smith <alex.smith@xxxxxxxxxx>
  Date:   Mon Oct 12 10:40:43 2015 +0100

      irqchip: irq-mips-gic: Provide function to map GIC user section

      The GIC provides a "user-mode visible" section containing a mirror of
      the counter registers which can be mapped into user memory. This will
      be used by the VDSO time function implementations, so provide a
      function to map it in.

      When the GIC is not enabled in Kconfig a dummy inline version of this
      function is provided, along with "#define gic_present 0", so that we
      don't have to litter the VDSO code with ifdefs.

      [markos.chandras@xxxxxxxxxx:
        - Move mapping code to arch/mips/kernel/vdso.c and use a resource
          type to get the GIC usermode information
        - Avoid renaming function arguments and use __gic_base_addr to hold
          the base GIC address prior to ioremap.]
      [ralf@xxxxxxxxxxxxxx: Fix up gic_get_usm_range() to compile and make 
inline
      again.]

      Signed-off-by: Alex Smith <alex.smith@xxxxxxxxxx>
      Signed-off-by: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Reviewed-by: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: Marc Zyngier <marc.zyngier@xxxxxxx>
      Cc: Alex Smith <alex.smith@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: http://patchwork.linux-mips.org/patch/11281/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit ebb5e78cc63417a35254a791de66e1cc84f963cc
  Author: Alex Smith <alex.smith@xxxxxxxxxx>
  Date:   Wed Oct 21 09:54:38 2015 +0100

      MIPS: Initial implementation of a VDSO

      Add an initial implementation of a proper (i.e. an ELF shared library)
      VDSO. With this commit it does not export any symbols, it only replaces
      the current signal return trampoline page. A later commit will add user
      implementations of gettimeofday()/clock_gettime().

      To support both new toolchains and old ones which don't generate ABI
      flags section, we define its content manually and then use a tool
      (genvdso) to patch up the section to have the correct name and type.
      genvdso also extracts symbol offsets ({,rt_}sigreturn) needed by the
      kernel, and generates a C file containing a "struct mips_vdso_image"
      containing both the VDSO data and these offsets. This C file is
      compiled into the kernel.

      On 64-bit kernels we require a different VDSO for each supported ABI,
      so we may build up to 3 different VDSOs. The VDSO to use is selected by
      the mips_abi structure.

      A kernel/user shared data page is created and mapped below the VDSO
      image. This is currently empty, but will be used by the user time
      function implementations which are added later.

      [markos.chandras@xxxxxxxxxx:
      - Add more comments
      - Move abi detection in genvdso.h since it's the get_symbol function
      that needs it.
      - Add an R6 specific way to calculate the base address of VDSO in order
      to avoid the branch instruction which affects performance.
      - Do not patch .gnu.attributes since it's not needed for dynamic linking.
      - Simplify Makefile a little bit.
      - checkpatch fixes
      - Restrict VDSO support for binutils < 2.25 for pre-R6
      - Include atomic64.h for O32 variant on MIPS64]

      Signed-off-by: Alex Smith <alex.smith@xxxxxxxxxx>
      Signed-off-by: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: Matthew Fortune <matthew.fortune@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11337/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 22773aa9b95657f0adc2b5342428d9da7a6d5d02
  Author: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
  Date:   Mon Sep 14 17:51:56 2015 +0200

      MIPS: mpc30x_defconfig: Convert to use libata PATA drivers

      IDE subsystem has been deprecated since 2009 and the majority
      (if not all) of Linux distributions have switched to use
      libata for ATA support exclusively.  However there are still
      some users (mostly old or/and embedded non-x86 systems) that
      have not converted from using IDE subsystem to libata PATA
      drivers.  This doesn't seem to be good thing in the long-term
      for Linux as while there is less and less PATA systems left
      in use:

      * testing efforts are divided between two subsystems

      * having duplicate drivers for same hardware confuses users

      This patch converts mpc30x_defconfig to use libata PATA
      drivers.

      PS This platform still uses "ide0=base[,ctl[,irq]]" hack in
      its defconfig.  The hack itself has been removed in 2008 and
      this platform should be converted to using PATA platform host
      driver (pata_platform) instead.

      Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-ide@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11141/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 1b7d801263522d9e1a122a6913c42acb5bf6c2c0
  Author: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
  Date:   Mon Sep 14 17:51:55 2015 +0200

      MIPS: maltaup_xpa_defconfig: Convert to use libata PATA drivers

      IDE subsystem has been deprecated since 2009 and the majority
      (if not all) of Linux distributions have switched to use
      libata for ATA support exclusively.  However there are still
      some users (mostly old or/and embedded non-x86 systems) that
      have not converted from using IDE subsystem to libata PATA
      drivers.  This doesn't seem to be good thing in the long-term
      for Linux as while there is less and less PATA systems left
      in use:

      * testing efforts are divided between two subsystems

      * having duplicate drivers for same hardware confuses users

      This patch converts maltaup_xpa_defconfig to use libata PATA
      drivers (tc86c001 IDE host driver has no corresponding libata
      driver yet so it is not converted).

      Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
      Cc: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: Steven J. Hill <Steven.Hill@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-ide@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11140/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 93c7e664ff6af49c05d1b78b54aa6f02e1ba88f6
  Author: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
  Date:   Mon Sep 14 17:51:54 2015 +0200

      MIPS: maltaup_defconfig: Convert to use libata PATA drivers

      IDE subsystem has been deprecated since 2009 and the majority
      (if not all) of Linux distributions have switched to use
      libata for ATA support exclusively.  However there are still
      some users (mostly old or/and embedded non-x86 systems) that
      have not converted from using IDE subsystem to libata PATA
      drivers.  This doesn't seem to be good thing in the long-term
      for Linux as while there is less and less PATA systems left
      in use:

      * testing efforts are divided between two subsystems

      * having duplicate drivers for same hardware confuses users

      This patch converts maltaup_defconfig to use libata PATA
      drivers.

      Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
      Cc: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: Steven J. Hill <Steven.Hill@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-ide@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11142/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit b0b98ad9b59f2a4c011d4b1ff40efa663b2b4e43
  Author: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
  Date:   Mon Sep 14 17:51:53 2015 +0200

      MIPS: maltasmvp_eva_defconfig: Convert to use libata PATA drivers

      IDE subsystem has been deprecated since 2009 and the majority
      (if not all) of Linux distributions have switched to use
      libata for ATA support exclusively.  However there are still
      some users (mostly old or/and embedded non-x86 systems) that
      have not converted from using IDE subsystem to libata PATA
      drivers.  This doesn't seem to be good thing in the long-term
      for Linux as while there is less and less PATA systems left
      in use:

      * testing efforts are divided between two subsystems

      * having duplicate drivers for same hardware confuses users

      This patch converts maltasmvp_eva_defconfig to use libata PATA
      drivers.

      Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
      Cc: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: Steven J. Hill <Steven.Hill@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-ide@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11139/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 255faa84276ae8c42a660af3ad6e089ac89d22b4
  Author: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
  Date:   Mon Sep 14 17:51:52 2015 +0200

      MIPS: maltaaprp_defconfig: Convert to use libata PATA drivers

      IDE subsystem has been deprecated since 2009 and the majority
      (if not all) of Linux distributions have switched to use
      libata for ATA support exclusively.  However there are still
      some users (mostly old or/and embedded non-x86 systems) that
      have not converted from using IDE subsystem to libata PATA
      drivers.  This doesn't seem to be good thing in the long-term
      for Linux as while there is less and less PATA systems left
      in use:

      * testing efforts are divided between two subsystems

      * having duplicate drivers for same hardware confuses users

      This patch converts maltaaprp_defconfig to use libata PATA
      drivers.

      Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
      Cc: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: Steven J. Hill <Steven.Hill@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-ide@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: b.zolnierkie@xxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11137/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 077b649a2ffe53109c98379fe7ba2fa4fdc9a34a
  Author: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
  Date:   Mon Sep 14 17:51:51 2015 +0200

      MIPS: malta_qemu_32r6_defconfig: Convert to use libata PATA drivers

      IDE subsystem has been deprecated since 2009 and the majority
      (if not all) of Linux distributions have switched to use
      libata for ATA support exclusively.  However there are still
      some users (mostly old or/and embedded non-x86 systems) that
      have not converted from using IDE subsystem to libata PATA
      drivers.  This doesn't seem to be good thing in the long-term
      for Linux as while there is less and less PATA systems left
      in use:

      * testing efforts are divided between two subsystems

      * having duplicate drivers for same hardware confuses users

      This patch converts malta_qemu_32r6_defconfig to use libata
      PATA drivers.

      Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-ide@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: b.zolnierkie@xxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11138/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 5f6df05b2faf893bc119d4bf1ef2decefedd0440
  Author: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
  Date:   Mon Sep 14 17:51:50 2015 +0200

      MIPS: malta_kvm_guest_defconfig: Convert to use libata PATA drivers

      IDE subsystem has been deprecated since 2009 and the majority
      (if not all) of Linux distributions have switched to use
      libata for ATA support exclusively.  However there are still
      some users (mostly old or/and embedded non-x86 systems) that
      have not converted from using IDE subsystem to libata PATA
      drivers.  This doesn't seem to be good thing in the long-term
      for Linux as while there is less and less PATA systems left
      in use:

      * testing efforts are divided between two subsystems

      * having duplicate drivers for same hardware confuses users

      This patch converts malta_kvm_guest_defconfig to use libata
      PATA drivers (tc86c001 IDE host driver has no corresponding
      libata driver yet so it is not converted).

      Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
      Cc: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: Sanjay Lal <sanjayl@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-ide@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11136/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 91c6fbabaed76ce0d85c357fe2f9e9dfc74d0640
  Author: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
  Date:   Mon Sep 14 17:51:49 2015 +0200

      MIPS: malta_kvm_defconfig: Convert to use libata PATA drivers

      IDE subsystem has been deprecated since 2009 and the majority
      (if not all) of Linux distributions have switched to use
      libata for ATA support exclusively.  However there are still
      some users (mostly old or/and embedded non-x86 systems) that
      have not converted from using IDE subsystem to libata PATA
      drivers.  This doesn't seem to be good thing in the long-term
      for Linux as while there is less and less PATA systems left
      in use:

      * testing efforts are divided between two subsystems

      * having duplicate drivers for same hardware confuses users

      This patch converts malta_kvm_defconfig to use libata PATA
      drivers (tc86c001 IDE host driver has no corresponding libata
      driver yet so it is not converted).

      Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
      Cc: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: Sanjay Lal <sanjayl@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-ide@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11135/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit d17e465543e7689168ea2a913e67231876a668d5
  Author: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
  Date:   Mon Sep 14 17:51:48 2015 +0200

      MIPS: malta_defconfig: Convert to use libata PATA drivers

      IDE subsystem has been deprecated since 2009 and the majority
      (if not all) of Linux distributions have switched to use
      libata for ATA support exclusively.  However there are still
      some users (mostly old or/and embedded non-x86 systems) that
      have not converted from using IDE subsystem to libata PATA
      drivers.  This doesn't seem to be good thing in the long-term
      for Linux as while there is less and less PATA systems left
      in use:

      * testing efforts are divided between two subsystems

      * having duplicate drivers for same hardware confuses users

      This patch converts malta_defconfig to use libata PATA
      drivers.

      Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
      Cc: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-ide@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11134/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 7ff7a5b1bfff71a1814f3542c1bd3c8f3e08bbbe
  Author: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
  Date:   Mon Sep 14 17:51:47 2015 +0200

      MIPS: lemote2f_defconfig: Convert to use libata PATA drivers

      IDE subsystem has been deprecated since 2009 and the majority
      (if not all) of Linux distributions have switched to use
      libata for ATA support exclusively.  However there are still
      some users (mostly old or/and embedded non-x86 systems) that
      have not converted from using IDE subsystem to libata PATA
      drivers.  This doesn't seem to be good thing in the long-term
      for Linux as while there is less and less PATA systems left
      in use:

      * testing efforts are divided between two subsystems

      * having duplicate drivers for same hardware confuses users

      This patch converts lemote2f_defconfig to use libata PATA
      drivers.

      PS This platform uses CS5536 chipset which (due to historical
      reasons) has basic support in AMD/nVidia PATA host driver and
      full support in a newer CS5536 PATA one (pata_cs5536).  Thus
      most likely this platform should switch to using the latter
      host driver.

      Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
      Cc: Huacai Chen <chenhc@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-ide@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11133/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 973852fc0d1be1fa47a03c7c0a106a0667714edd
  Author: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
  Date:   Mon Sep 14 17:51:46 2015 +0200

      MIPS: lasat_defconfig: Convert to use libata PATA drivers

      IDE subsystem has been deprecated since 2009 and the majority
      (if not all) of Linux distributions have switched to use
      libata for ATA support exclusively.  However there are still
      some users (mostly old or/and embedded non-x86 systems) that
      have not converted from using IDE subsystem to libata PATA
      drivers.  This doesn't seem to be good thing in the long-term
      for Linux as while there is less and less PATA systems left
      in use:

      * testing efforts are divided between two subsystems

      * having duplicate drivers for same hardware confuses users

      This patch converts lasat_defconfig to use libata PATA
      drivers.

      Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
      Cc: Brian Murphy <brian@xxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-ide@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11132/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 1485ddcc2ffaaa801c4104b85eac95c2f32c4220
  Author: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
  Date:   Mon Sep 14 17:51:45 2015 +0200

      MIPS: fuloong2e_defconfig: Convert to use libata PATA drivers

      IDE subsystem has been deprecated since 2009 and the majority
      (if not all) of Linux distributions have switched to use
      libata for ATA support exclusively.  However there are still
      some users (mostly old or/and embedded non-x86 systems) that
      have not converted from using IDE subsystem to libata PATA
      drivers.  This doesn't seem to be good thing in the long-term
      for Linux as while there is less and less PATA systems left
      in use:

      * testing efforts are divided between two subsystems

      * having duplicate drivers for same hardware confuses users

      This patch converts fuloong2e_defconfig to use libata PATA
      drivers.

      Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
      Cc: Wu Zhangjin <wuzhangjin@xxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-ide@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11131/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 5c2a53a1e0ee8713b9160a52ed374cc8d8cd0c82
  Author: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
  Date:   Mon Sep 14 17:51:44 2015 +0200

      MIPS: e55_defconfig: Convert to use libata PATA drivers

      IDE subsystem has been deprecated since 2009 and the majority
      (if not all) of Linux distributions have switched to use
      libata for ATA support exclusively.  However there are still
      some users (mostly old or/and embedded non-x86 systems) that
      have not converted from using IDE subsystem to libata PATA
      drivers.  This doesn't seem to be good thing in the long-term
      for Linux as while there is less and less PATA systems left
      in use:

      * testing efforts are divided between two subsystems

      * having duplicate drivers for same hardware confuses users

      This patch converts e55_defconfig to use libata PATA drivers.

      PS This platform still uses "ide0=base[,ctl[,irq]]" hack in
      its defconfig.  The hack itself has been removed in 2008 and
      this platform should be converted to using PATA platform host
      driver (pata_platform) instead.

      Cc: Yoichi Yuasa <yoichi_yuasa@xxxxxxxxxxxxxx>
      Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 5081f4fc32243c3ebbd95638abd3ef1a2ae1247f
  Author: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
  Date:   Mon Sep 14 17:51:43 2015 +0200

      MIPS: capcella_defconfig: Convert to use libata PATA drivers

      IDE subsystem has been deprecated since 2009 and the majority
      (if not all) of Linux distributions have switched to use
      libata for ATA support exclusively.  However there are still
      some users (mostly old or/and embedded non-x86 systems) that
      have not converted from using IDE subsystem to libata PATA
      drivers.  This doesn't seem to be good thing in the long-term
      for Linux as while there is less and less PATA systems left
      in use:

      * testing efforts are divided between two subsystems

      * having duplicate drivers for same hardware confuses users

      This patch converts capcella_defconfig to use libata PATA
      drivers.

      Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-ide@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11129/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit adcdd4287da33132d4a72a9bcf60183c1cab5563
  Author: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
  Date:   Mon Sep 14 17:51:42 2015 +0200

      MIPS: bigsur_defconfig: Convert to use libata PATA drivers

      IDE subsystem has been deprecated since 2009 and the majority
      (if not all) of Linux distributions have switched to use
      libata for ATA support exclusively.  However there are still
      some users (mostly old or/and embedded non-x86 systems) that
      have not converted from using IDE subsystem to libata PATA
      drivers.  This doesn't seem to be good thing in the long-term
      for Linux as while there is less and less PATA systems left
      in use:

      * testing efforts are divided between two subsystems

      * having duplicate drivers for same hardware confuses users

      This patch converts bigsur_defconfig to use libata PATA
      drivers (tc86c001 IDE host driver has no corresponding libata
      driver yet so it is not converted).

      Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@xxxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-ide@xxxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11128/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit cab25bc7537badea41f635a049f45408c24dff26
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 12:03:37 2015 -0700

      MIPS: Extend hardware table walking support to MIPS64

      Extend the existing support for Hardware Table Walking (HTW) to MIPS64
      systems by supporting PMDs & setting the pointer size bit in PWSize,
      then ceasing to blacklist HTW on MIPS64 systems.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Steven J. Hill <Steven.Hill@xxxxxxxxxx>
      Cc: Joshua Kinard <kumba@xxxxxxxxxx>
      Cc: Leonid Yegoshin <Leonid.Yegoshin@xxxxxxxxxx>
      Cc: Maciej W. Rozycki <macro@xxxxxxxxxxxxxx>
      Cc: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11224/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit ecafe3e9b27644b51282b539878b7671ea28ac34
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:58:43 2015 -0700

      MIPS: Malta: Register UP SMP ops if all else fails

      If we fail to register any real SMP implementations, fall back to
      registering the dummy UP implementation. Otherwise when we build an SMP
      kernel & run it on a system where the SMP implementations fail to probe
      (eg. QEMU) the kernel will perform a NULL dereference attempting to call
      mp_ops->smp_setup() from plat_smp_setup().

      Notably this fixes booting kernels with CPS SMP enabled on QEMU, which
      doesn't currently implement the CM, CPC or GIC.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Peter Hurley <peter@xxxxxxxxxxxxxxxxxx>
      Cc: Rob Herring <robh@xxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11223/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit e81a8c7dabac05d444eda315ff1a747b0fe38396
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:56:38 2015 -0700

      MIPS: Malta: Setup RAM regions via DT

      Move memory configuration to be performed via device tree for the Malta
      board. This moves more Malta specific code to malta-dtshim.c, leaving
      the rest of the mti-malta code a little more board-agnostic. This will
      be useful to share more code between boards, with the device tree
      providing the board specifics as intended.

      Since we can't rely upon Malta boards running a bootloader capable of
      handling devictrees & filling in the required information, a piece of
      shim code (malta_dt_shim) is added to consume the (e)memsize variables
      provided as part of the bootloader environment (or on the kernel command
      line) then generate the DT memory node using the provided values.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: devicetree@xxxxxxxxxxxxxxx
      Cc: Kumar Gala <galak@xxxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: Ian Campbell <ijc+devicetree@xxxxxxxxxxxxxx>
      Cc: Rob Herring <robh+dt@xxxxxxxxxx>
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Pawel Moll <pawel.moll@xxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: Mark Rutland <mark.rutland@xxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11222/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit ea050714bc3656a25b4b5fc73f3682532c7180eb
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:56:37 2015 -0700

      MIPS: Malta: Remove fw_memblock_t abstraction

      The fw_getmdesc function & fw_memblock_t abstraction is only used by
      Malta, and so far as I can tell serves no purpose beyond making the code
      less clear than it could be. Remove the useless level of abstraction.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11221/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit e1137e1d5944c2a23ca100a0b4fe6310f9cc086d
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:56:36 2015 -0700

      MIPS: Malta: Split obj-y entries across lines

      Split the obj-y entries to their own lines such that it's easier to see
      what's going on when adding or removing entries.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11220/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 033549c60969753d9c54053901b2041d91c4fbff
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:42:53 2015 -0700

      MIPS: Allow RIXI for 32-bit kernels on MIPS64

      Commit a68d09a156b2 ("MIPS: Don't use RI/XI with 32-bit kernels on
      64-bit CPUs") prevented use of RIXI on MIPS64 systems, stating that the
      "TLB handlers cannot handle this case". What they actually couldn't
      handle was cases where there were less fill bits in the Entry{Lo,Hi}
      registers than bits used by software in PTEs. The handlers can now deal
      with this case, so enable RIXI for MIPS32 kernels on MIPS64 systems.

      Note that beyond the obvious benefits provided by having RIXI on such
      systems, this is required for systems implementing MIPSr6 where RIXI
      cannot be disabled.

      This reverts commit a68d09a156b2 ("MIPS: Don't use RI/XI with 32-bit
      kernels on 64-bit CPUs").

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Joshua Kinard <kumba@xxxxxxxxxx>
      Cc: Leonid Yegoshin <Leonid.Yegoshin@xxxxxxxxxx>
      Cc: Maciej W. Rozycki <macro@xxxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11219/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 00bf1c691d082c1945fdba032c03a9a82e9e7e61
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:42:52 2015 -0700

      MIPS: tlbex: Avoid placing software PTE bits in Entry* PFN fields

      Commit 748e787eb6de ("MIPS: Optimize TLB refill for RI/XI
      configurations.") stopped explicitly clearing the bits used by software
      in PTEs by making use of a rotate instruction that rotates them into the
      fill bits of the Entry{Lo,Hi} register. This can only work if there are
      actually enough fill bits in the register to cover the software
      maintained bits, otherwise we end up writing those bits into the upper
      bits of the PFN or PFNX field of the Entry{Lo,Hi} register.

      Fix this by detecting the number of fill bits present in the
      Entry{Lo,Hi} registers & explicitly clearing the software bits where
      necessary.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Steven J. Hill <Steven.Hill@xxxxxxxxxx>
      Cc: Leonid Yegoshin <Leonid.Yegoshin@xxxxxxxxxx>
      Cc: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11218/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit c6956728c76d35f2314dd54a74680360760cc2fd
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:42:51 2015 -0700

      MIPS: Tidy EntryLo bit definitions, add PFN

      Tidy up the definition of the EntryLo RI & XI bits using BITS_PER_LONG
      rather than #ifdef'ing on CONFIG_64BIT, and add a definition for the
      offset to the PFN field for use by a later patch.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Steven J. Hill <Steven.Hill@xxxxxxxxxx>
      Cc: Maciej W. Rozycki <macro@xxxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11217/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit c676589b057a01dab418985f018123a634c1265c
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:42:50 2015 -0700

      MIPS: tlbex: Share MIPS32 32 bit phys & MIPS64 64 bit phys code

      The code in build_update_entries for 64 bit physical addresses on a
      MIPS64 CPU and 32 bit physical addresses on a MIPS32 CPU is now
      identical, with the exception of r4k bug workaround in the latter which
      would simply not apply to the former. Remove the duplication and some

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Steven J. Hill <Steven.Hill@xxxxxxxxxx>
      Cc: Leonid Yegoshin <Leonid.Yegoshin@xxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11216/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 974a0b6a2c40260b0ac64a5523106f5991cc5127
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:42:49 2015 -0700

      MIPS: tlbex: Remove some RIXI redundancy

      The cpu_has_rixi cases in build_update_entries are now identical to the
      non-RIXI cases with the one exception of the r45k_bvahwbug case which is
      hardcoded as never happening anyway & presumably was either missed from
      the RIXI path or would never happen on a CPU with RIXI support. Remove
      the redundant checks & duplication.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Steven J. Hill <Steven.Hill@xxxxxxxxxx>
      Cc: Leonid Yegoshin <Leonid.Yegoshin@xxxxxxxxxx>
      Cc: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11215/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit dbfd657ad12d872d04d5b105876669058285a166
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:42:48 2015 -0700

      MIPS: tlbex: Stop open-coding build_convert_pte_to_entrylo

      Make use of build_convert_pte_to_entrylo in the RIXI cases within
      build_update_entries rather than open-coding it 4 times.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Steven J. Hill <Steven.Hill@xxxxxxxxxx>
      Cc: Leonid Yegoshin <Leonid.Yegoshin@xxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11214/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 5b10a0e84b4ebe02a7018846e882caa112b4ffc6
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:24:20 2015 -0700

      MIPS: Always use r4k_wait_irqoff for MIPSr6

      Prior to release 6 of the MIPS architecture it has been implementation
      dependent whether masked interrupts cause a wait instruction to return,
      so the kernel has effectively had to maintain a whitelist of cores upon
      which it is safe to use the r4k_wait_irqoff cpu_wait implementation.
      With MIPSr6 this is no longer implementation dependent and
      r4k_wait_irqoff can always be used.

      Remove the existing I6400 case which will no longer ever be hit, and was
      incorrect anyway since I6400 & r6 in general doesn't have the WII bit.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Leonid Yegoshin <Leonid.Yegoshin@xxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11210/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 78a54c4d8e5a7915a4ec2ba0eb461fae50590683
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:12:18 2015 -0700

      MIPS: CM, CPC: Ensure core-other GCRs reflect the correct core

      Ensure the update to which core the core-other GCR regions reflect has
      taken place before any core-other GCRs are accessed by placing a memory
      barrier (sync instruction) between the write to the core-other registers
      and any such GCR accesses.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11209/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 4ede31617056b7424eef28dce59dd6dbe81729c3
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:12:17 2015 -0700

      MIPS: CM: make use of mips_cm_{lock,unlock}_other

      Document that CPC core-other accesses must take place within the bounds
      of the CM lock, and begin using the CM lock functions where we access
      the GCRs of other cores. This is required because with CM3 the CPC began
      using GCR_CL_OTHER instead of CPC_CL_OTHER.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Rusty Russell <rusty@xxxxxxxxxxxxxxx>
      Cc: Andrew Bresticker <abrestic@xxxxxxxxxxxx>
      Cc: Bjorn Helgaas <bhelgaas@xxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: Niklas Cassel <niklas.cassel@xxxxxxxx>
      Cc: Ezequiel Garcia <ezequiel.garcia@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11208/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 23d5de8efb9aed48074a72bf3d43841e1556ca42
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:12:16 2015 -0700

      MIPS: CM: Introduce core-other locking functions

      Introduce mips_cm_lock_other & mips_cm_unlock_other, mirroring the
      existing CPC equivalents, in order to lock access from the current core
      to another via the core-other GCR region. This hasn't been required in
      the past but with CM3 the CPC starts using GCR_CL_OTHER rather than
      CPC_CL_OTHER and this will be required for safety.

      [ralf@xxxxxxxxxxxxxx: Fix merge conflict.]

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11207/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 252d6aa605fa05b559347d3ed0a4f11bbdf6d3d0
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:12:15 2015 -0700

      MIPS: CM: Fix GCR_Cx_CONFIG PVPE mask

      The PVPE (or PVP in >= CM3) field is 10 bits wide, but the mask
      previously only covered the bottom 9 bits. Extend the mask to cover all
      10 bits of the field.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11206/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit a8c20614b0163a71f2df3f9788bfe8b9ff07d742
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:12:14 2015 -0700

      MIPS: CPS: Warn if a core doesn't start

      When debugging core bringup it is useful to see the state of the CPC
      sequencer, so output that value if the core hasn't started within a
      reasonable amount of time (1 second). This avoids simply appearing to
      the user to hang if a secondary core fails to start.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Rusty Russell <rusty@xxxxxxxxxxxxxxx>
      Cc: Andrew Bresticker <abrestic@xxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: Niklas Cassel <niklas.cassel@xxxxxxxx>
      Cc: Ezequiel Garcia <ezequiel.garcia@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11205/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 192fbc20258c79e3f776a5ce6cea4654376f5af6
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:12:13 2015 -0700

      MIPS: CPS: Skip Config1 presence check

      The Config1 register is architecturally defined as required, and is thus
      present in all systems which may make use of cps-vec.S. Skip the check
      for its presence via the Config.M bit.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11204/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 946db17349f6922a9c8a959c34ad9fb3aa238952
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:12:12 2015 -0700

      MIPS: CPS: Read CM GCR base from cop0

      Rather than patching the start of mips_cps_core_entry to provide the
      base address of the CM GCRs, simply read that base address from the cop0
      CMGCRBase register, converting from the physical address to an uncached
      virtual address.

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Rusty Russell <rusty@xxxxxxxxxxxxxxx>
      Cc: Andrew Bresticker <abrestic@xxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: Niklas Cassel <niklas.cassel@xxxxxxxx>
      Cc: Ezequiel Garcia <ezequiel.garcia@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11203/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 609cf6f2291a69d09aa5c02d74cd4488b19aa9a6
  Author: Paul Burton <paul.burton@xxxxxxxxxx>
  Date:   Tue Sep 22 11:12:11 2015 -0700

      MIPS: CPS: Early debug using an ns16550-compatible UART

      Provide support for outputting early debug information, in the form of
      various register values should an exception occur, during the early
      bringup of secondary cores. This code requires an ns16550-compatible
      UART accessible from the secondary core, and is written in assembly due
      to the environment in which such early exceptions occur where way may
      not have a stack, be coherent or even have initialised caches.

      [ralf@xxxxxxxxxxxxxx: Fix merge conflict.]

      Signed-off-by: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: Steven J. Hill <Steven.Hill@xxxxxxxxxx>
      Cc: Andrew Bresticker <abrestic@xxxxxxxxxxxx>
      Cc: Leonid Yegoshin <Leonid.Yegoshin@xxxxxxxxxx>
      Cc: Maciej W. Rozycki <macro@xxxxxxxxxxxxxx>
      Cc: Jason Cooper <jason@xxxxxxxxxxxxxx>
      Cc: linux-kernel@xxxxxxxxxxxxxxx
      Cc: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Markos Chandras <markos.chandras@xxxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11202/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 195cee92afcb20b2156437e98b144d94812e4afd
  Author: James Hogan <james.hogan@xxxxxxxxxx>
  Date:   Tue Nov 10 17:06:37 2015 +0000

      MIPS: Fix duplicate CP0_* definitions.

      Remove the definition in locore.S and move a few of the other similar
      definitions in asm/mipsregs.h too. CP0_INTCTL, CP0_SRSCTL, & CP0_SRSMAP
      are unused so they're just dropped instead. CP0_DDATA_LO is left where
      it is as I have patches to eliminate its use in locore.S and it
      otherwise is unlikely to need to be used from assembly code.

      Signed-off-by: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
      Cc: Paul Burton <paul.burton@xxxxxxxxxx>
      Cc: Paolo Bonzini <pbonzini@xxxxxxxxxx>
      Cc: Gleb Natapov <gleb@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: kvm@xxxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11461/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 7c7afc440c8ec311ae135df892cc489436a1ff00
  Author: Tzvetelin Katchov <katchov@xxxxxxxxx>
  Date:   Wed Oct 7 20:15:21 2015 -0400

      fs: 9p: cache.h: Add #define of include guard

      The include file was intended to have an include guard, but the #define
      part is missing.

      Signed-off-by: Tzvetelin Katchov <katchov@xxxxxxxxx>
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit c8fffa643583e00eb9a783abbca251b11bc0d163
  Author: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
  Date:   Thu Oct 8 17:07:20 2015 -0600

      vfs: remove stale comment in inode_operations

      The big warning comment that is currently at the end of struct
      inode_operations was added as part of this commit:

      4aa7c6346be3 ("vfs: add i_op->dentry_open()")

      It was added to warn people not to use the newly added 'dentry_open'
      function pointer.

      This function pointer was removed as part of this commit:

      4bacc9c9234c ("overlayfs: Make f_path always point to the overlay and
                f_inode to the underlay")

      The comment was left behind and now refers to nothing, so remove it.

      Signed-off-by: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit 5c50002963369c7c622b18ff751719eadbe225c5
  Author: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
  Date:   Tue Oct 13 16:51:02 2015 -0600

      vfs: remove unused wrapper block_page_mkwrite()

      The function currently called "__block_page_mkwrite()" used to be called
      "block_page_mkwrite()" until a wrapper for this function was added by:

      commit 24da4fab5a61 ("vfs: Create __block_page_mkwrite() helper passing
        error values back")

      This wrapper, the current "block_page_mkwrite()", is currently unused.
      __block_page_mkwrite() is used directly by ext4, nilfs2 and xfs.

      Remove the unused wrapper, rename __block_page_mkwrite() back to
      block_page_mkwrite() and update the comment above block_page_mkwrite().

      Signed-off-by: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
      Reviewed-by: Jan Kara <jack@xxxxxxxx>
      Cc: Jan Kara <jack@xxxxxxxx>
      Cc: Christoph Hellwig <hch@xxxxxx>
      Cc: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit 54d15714f7497094a0839537f0d47946edb45761
  Author: Maciej W. Rozycki <macro@xxxxxxxxxx>
  Date:   Mon Oct 26 15:47:57 2015 +0000

      binfmt_elf: Correct `arch_check_elf's description

      Correct `arch_check_elf's description, mistakenly copied and pasted from
      `arch_elf_pt_proc'.

      Signed-off-by: Maciej W. Rozycki <macro@xxxxxxxxxx>
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit 88a578d823c1d8acb298cf317f76a3220d307d2e
  Author: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
  Date:   Thu Nov 5 16:54:04 2015 -0800

      fs: fix writeback.c kernel-doc warnings

      Fix kernel-doc warnings in fs/fs-writeback.c by moving a #define macro
      to after the function's opening brace. Also #undef this macro at the
      end of the function.

      ..//fs/fs-writeback.c:1984: warning: Excess function parameter 'inode' 
description in 'I_DIRTY_INODE'
      ..//fs/fs-writeback.c:1984: warning: Excess function parameter 'flags' 
description in 'I_DIRTY_INODE'

      Signed-off-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit 034ae4bac93afb483aaf8531e3a6de2ee7f1be6e
  Author: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
  Date:   Thu Nov 5 16:53:47 2015 -0800

      fs: fix inode.c kernel-doc warning

      Fix kernel-doc warning in fs/inode.c:

      ..//fs/inode.c:1606: warning: No description found for parameter 'inode'

      Signed-off-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit 6ae08069939f17422835448acae76bda8d96b16a
  Author: Eric Biggers <ebiggers3@xxxxxxxxx>
  Date:   Sat Oct 17 16:26:09 2015 -0500

      fs/pipe.c: return error code rather than 0 in pipe_write()

      pipe_write() would return 0 if it failed to merge the beginning of the
      data to write with the last, partially filled pipe buffer.  It should
      return an error code instead.  Userspace programs could be confused by
      write() returning 0 when called with a nonzero 'count'.

      The EFAULT error case was a regression from f0d1bec9d5 ("new helper:
      copy_page_from_iter()"), while the ops->confirm() error case was a much
      older bug.

      Test program:

        #include <assert.h>
        #include <errno.h>
        #include <unistd.h>

        int main(void)
        {
                int fd[2];
                char data[1] = {0};

                assert(0 == pipe(fd));
                assert(1 == write(fd[1], data, 1));

                /* prior to this patch, write() returned 0 here  */
                assert(-1 == write(fd[1], NULL, 1));
                assert(errno == EFAULT);
        }

      Cc: stable@xxxxxxxxxxxxxxx # at least v3.15+
      Signed-off-by: Eric Biggers <ebiggers3@xxxxxxxxx>
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit e9bb1f9b12e33fc0b2169b3937dc50c44ad87dd5
  Author: Eric Biggers <ebiggers3@xxxxxxxxx>
  Date:   Sat Oct 17 16:26:08 2015 -0500

      fs/pipe.c: preserve alloc_file() error code

      If sys_pipe() was unable to allocate a 'struct file', it always failed
      with ENFILE, which means "The number of simultaneously open files in the
      system would exceed a system-imposed limit." However, alloc_file()
      actually returns an ERR_PTR value and might fail with other error codes.
      Currently, in addition to ENFILE, it can fail with ENOMEM, potentially
      when there are few open files in the system.  Update sys_pipe() to
      preserve this error code.

      In a prior submission of a similar patch (1) some concern was raised
      about introducing a new error code for sys_pipe().  However, for most
      system calls, programs cannot assume that new error codes will never be
      introduced.  In addition, ENOMEM was, in fact, already a possible error
      code for sys_pipe(), in the case where the file descriptor table could
      not be expanded due to insufficient memory.

        (1) http://comments.gmane.org/gmane.linux.kernel/1357942

      Signed-off-by: Eric Biggers <ebiggers3@xxxxxxxxx>
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit b582ef5c53040c5feef4c96a8f9585b6831e2441
  Author: Maciej W. Rozycki <macro@xxxxxxxxxx>
  Date:   Mon Oct 26 15:48:19 2015 +0000

      binfmt_elf: Don't clobber passed executable's file header

      Do not clobber the buffer space passed from `search_binary_handler' and
      originally preloaded by `prepare_binprm' with the executable's file
      header by overwriting it with its interpreter's file header.  Instead
      keep the buffer space intact and directly use the data structure locally
      allocated for the interpreter's file header, fixing a bug introduced in
      2.1.14 with loadable module support (linux-mips.org commit beb11695
      [Import of Linux/MIPS 2.1.14], predating kernel.org repo's history).
      Adjust the amount of data read from the interpreter's file accordingly.

      This was not an issue before loadable module support, because back then
      `load_elf_binary' was executed only once for a given ELF executable,
      whether the function succeeded or failed.

      With loadable module support supported and enabled, upon a failure of
      `load_elf_binary' -- which may for example be caused by architecture
      code rejecting an executable due to a missing hardware feature requested
      in the file header -- a module load is attempted and then the function
      reexecuted by `search_binary_handler'.  With the executable's file
      header replaced with its interpreter's file header the executable can
      then be erroneously accepted in this subsequent attempt.

      Cc: stable@xxxxxxxxxxxxxxx # all the way back
      Signed-off-by: Maciej W. Rozycki <macro@xxxxxxxxxx>
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit 102f4d900c9c8f5ed89ae4746d493fe3ebd7ba64
  Author: David Howells <dhowells@xxxxxxxxxx>
  Date:   Wed Nov 4 15:20:42 2015 +0000

      FS-Cache: Handle a write to the page immediately beyond the EOF marker

      Handle a write being requested to the page immediately beyond the EOF
      marker on a cache object.  Currently this gets an assertion failure in
      CacheFiles because the EOF marker is used there to encode information 
about
      a partial page at the EOF - which could lead to an unknown blank spot in
      the file if we extend the file over it.

      The problem is actually in fscache where we check the index of the page
      being written against store_limit.  store_limit is set to the number of
      pages that we're allowed to store by fscache_set_store_limit() - which
      means it's one more than the index of the last page we're allowed to 
store.
      The problem is that we permit writing to a page with an index _equal_ to
      the store limit - when we should reject that case.

      Whilst we're at it, change the triggered assertion in CacheFiles to just
      return -ENOBUFS instead.

      The assertion failure looks something like this:

      CacheFiles: Assertion failed
      1000 < 7b1 is false
      ------------[ cut here ]------------
      kernel BUG at fs/cachefiles/rdwr.c:962!
      ...
      RIP: 0010:[<ffffffffa02c9e83>]  [<ffffffffa02c9e83>] 
cachefiles_write_page+0x273/0x2d0 [cachefiles]

      Cc: stable@xxxxxxxxxxxxxxx # v2.6.31+; earlier - that + backport of 
a17754f (at least)
      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit 95201a40604791bc4a2e8d066429be89fb82b46d
  Author: NeilBrown <neilb@xxxxxxx>
  Date:   Wed Nov 4 15:20:34 2015 +0000

      cachefiles: perform test on s_blocksize when opening cache file.

      cachefiles requires that s_blocksize in the cache is not greater than
      PAGE_SIZE, and performs the check every time a block is accessed.

      Move the test to the place where the file is "opened", where other
      file-validity tests are performed.

      Signed-off-by: NeilBrown <neilb@xxxxxxx>
      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit b130ed5998e62879a66bad08931a2b5e832da95c
  Author: Kinglong Mee <kinglongmee@xxxxxxxxx>
  Date:   Wed Nov 4 15:20:24 2015 +0000

      FS-Cache: Don't override netfs's primary_index if registering failed

      Only override netfs->primary_index when registering success.

      Cc: stable@xxxxxxxxxxxxxxx # v2.6.30+
      Signed-off-by: Kinglong Mee <kinglongmee@xxxxxxxxx>
      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit 86108c2e34a26e4bec3c6ddb23390bf8cedcf391
  Author: Kinglong Mee <kinglongmee@xxxxxxxxx>
  Date:   Wed Nov 4 15:20:15 2015 +0000

      FS-Cache: Increase reference of parent after registering, netfs success

      If netfs exist, fscache should not increase the reference of parent's
      usage and n_children, otherwise, never be decreased.

      v2: thanks David's suggest,
       move increasing reference of parent if success
       use kmem_cache_free() freeing primary_index directly

      v3: don't move "netfs->primary_index->parent = &fscache_fsdef_index;"

      Cc: stable@xxxxxxxxxxxxxxx # v2.6.30+
      Signed-off-by: Kinglong Mee <kinglongmee@xxxxxxxxx>
      Signed-off-by: David Howells <dhowells@xxxxxxxxxx>
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit 0ee9608c89e81a1ccee52ecb58a7ff040e2522d9
  Author: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
  Date:   Thu Nov 5 00:01:51 2015 +0100

      debugfs: fix refcount imbalance in start_creating

      In debugfs' start_creating(), we pin the file system to safely access
      its root. When we failed to create a file, we unpin the file system via
      failed_creating() to release the mount count and eventually the reference
      of the vfsmount.

      However, when we run into an error during lookup_one_len() when still
      in start_creating(), we only release the parent's mutex but not so the
      reference on the mount. Looks like it was done in the past, but after
      splitting portions of __create_file() into start_creating() and
      end_creating() via 190afd81e4a5 ("debugfs: split the beginning and the
      end of __create_file() off"), this seemed missed. Noticed during code
      review.

      Fixes: 190afd81e4a5 ("debugfs: split the beginning and the end of 
__create_file() off")
      Cc: stable@xxxxxxxxxxxxxxx # v4.0+
      Signed-off-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Signed-off-by: Al Viro <viro@xxxxxxxxxxxxxxxxxx>

  commit b82983401684ba06fcf3fbafa63edf371c0d4775
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Wed Nov 11 01:18:16 2015 +0300

      asus-wmi: fix error handling in store_sys_wmi()

      The asus_wmi_get_devstate_simple() returns 0-1 on success.  In theory
      according to static checkers, it can return either -EIO or -ENODEV on
      failure.  Currently the error handling code only handles -ENODEV and
      -EIO is treated as success.  Let's make it handle the -EIO error as
      well.

      It's possible that it can't actually return -EIO and this patch is not
      needed but in that case this patch is harmless and silences a static
      checker warning so it's still worth it.

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Darren Hart <dvhart@xxxxxxxxxxxxxxx>

  commit c5a37883f42be712a989e54d5d6c0159b0e56599
  Merge: 5dfe5b2 247e75d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 21:14:23 2015 -0800

      Merge branch 'akpm' (patches from Andrew)

      Merge final patch-bomb from Andrew Morton:
       "Various leftovers, mainly Christoph's pci_dma_supported() removals"

      * emailed patches from Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>:
        pci: remove pci_dma_supported
        usbnet: remove ifdefed out call to dma_supported
        kaweth: remove ifdefed out call to dma_supported
        sfc: don't call dma_supported
        nouveau: don't call pci_dma_supported
        netup_unidvb: use pci_set_dma_mask insted of pci_dma_supported
        cx23885: use pci_set_dma_mask insted of pci_dma_supported
        cx25821: use pci_set_dma_mask insted of pci_dma_supported
        cx88: use pci_set_dma_mask insted of pci_dma_supported
        saa7134: use pci_set_dma_mask insted of pci_dma_supported
        saa7164: use pci_set_dma_mask insted of pci_dma_supported
        tw68-core: use pci_set_dma_mask insted of pci_dma_supported
        pcnet32: use pci_set_dma_mask insted of pci_dma_supported
        lib/string.c: add ULL suffix to the constant definition
        hugetlb: trivial comment fix
        selftests/mlock2: add ULL suffix to 64-bit constants
        selftests/mlock2: add missing #define _GNU_SOURCE

  commit 5dfe5b2c714a5bea0908c1e00da0e8e00535f55c
  Merge: 152813e 67afc21
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 21:11:58 2015 -0800

      Merge branch 'misc' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mmarek/kbuild

      Pull misc kbuild updates from Michal Marek:
       "This is the non-critical part of kbuild:

         - several coccinelle updates
         - make deb-pkg creates an armhf package if CONFIG_VFP=y
         - make tags understands some more powerpc macros"

      * 'misc' of git://git.kernel.org/pub/scm/linux/kernel/git/mmarek/kbuild:
        coccinelle: Improve checking for missing NULL terminators
        coccinelle: ifnullfree: handle various destroy functions
        coccinelle: ifnullfree: various cleanups
        cocinelle: iterators: semantic patch to delete unneeded of_node_put
        deb-pkg: Add automatic support for armhf architecture
        scripts/coccinelle: fix typos
        coccinelle: misc: remove "complex return code" warnings
        Coccinelle: fix incorrect -include option transformation
        coccinelle: tests: improve odd_ptr_err.cocci
        coccinelle: misc: move constants to the right
        scripts/tags.sh: Teach tags about some powerpc macros

  commit 152813e6e4bbb5f017e33eba7eb01bbda4b389b8
  Merge: c34e6e0 be596aa
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 21:06:50 2015 -0800

      Merge branch 'kconfig' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mmarek/kbuild

      Pull kconfig updates from Michal Marek:

       - 'make xconfig' ported to Qt5, dropping support for Qt3

       - merge_config.sh supports a single-input-file mode and also respects
         $KCONFIG_CONFIG

       - Fix for incorrect display of >= and > in dependency expressions

      * 'kconfig' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mmarek/kbuild: (44 commits)
        Add current selection check.
        Use pkg-config to find Qt 4 and 5 instead of direct qmake
        kconfig: Fix copy&paste error
        kconfig/merge_config.sh: Accept a single file
        kconfig/merge_config.sh: Support KCONFIG_CONFIG
        Update the buildsystem for KConfig finding Qt
        Port xconfig to Qt5 - Update copyright.
        Port xconfig to Qt5 - Fix goParent issue.
        Port xconfig to Qt5 - on Back clicked, deselect old item.
        Port xconfig to Qt5 - Add(back) one click checkbox toggle.
        Port xconfig to Qt5 - Add(back) lineedit editing.
        Port xconfig to Qt5 - Remove some commented code.
        Port xconfig to Qt5 - Source format.
        Port xconfig to Qt5 - Add horizontal scrollbar, and scroll per pixel.
        Port xconfig to Qt5 - Change ConfigItem constructor parent type.
        Port xconfig to Qt5 - Disable ConfigList soring
        Port xconfig to Qt5 - Remove ConfigList::updateMenuList template.
        Port xconfig to Qt5 - Add ConfigList::mode to initializer list.
        Port xconfig to Qt5 - Add ConfigItem::nextItem to initializer list.
        Port xconfig to Qt5 - Tree widget set column titles.
        ...

  commit c34e6e0bd5d729948119d4b3e15b075ec0b80d6f
  Merge: 6a177af dcb825a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 20:55:37 2015 -0800

      Merge branch 'kbuild' of 
git://git.kernel.org/pub/scm/linux/kernel/git/mmarek/kbuild

      Pull kbuild update from Michal Marek:
       "The kbuild branch for v4.4-rc1 only has one commit: A new make
        kselftest-clean target cleans tools/testing/selftests"

      * 'kbuild' of git://git.kernel.org/pub/scm/linux/kernel/git/mmarek/kbuild:
        kselftest: add kselftest-clean rule

  commit 6a177af775d92cff7ef36a681c304dc750dbe121
  Merge: ae36ce0 3b5bab3
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 20:46:45 2015 -0800

      Merge tag 'linux-kselftest-4.4-rc1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/shuah/linux-kselftest

      Pull kselftest updates from Shuah Khan:
       "This 12 patch update for 4.4-rc1 consists of a new pstore test and
        fixes to existing tests"

      * tag 'linux-kselftest-4.4-rc1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/shuah/linux-kselftest:
        selftests: breakpoint: Actually build it
        selftests: vm: Try harder to allocate huge pages
        selftests: Make scripts executable
        selftests: kprobe: Choose an always-defined function to probe
        selftests: memfd: Stop unnecessary rebuilds
        selftests: Add missing #include directives
        selftests/seccomp: Be more precise with syscall arguments.
        selftests/seccomp: build and pass on arm64
        selftests: memfd_test: Revised STACK_SIZE to make it 16-byte aligned
        selftests/pstore: add pstore test scripts going with reboot
        selftests/pstore: add pstore test script for pre-reboot
        selftests: add .gitignore for efivarfs

  commit ae36ce07abbdde3521dc0ef7e32143b88718cd21
  Merge: 2df4ee7 10855ae
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 20:37:28 2015 -0800

      Merge branch 'drm-fixes' of git://people.freedesktop.org/~airlied/linux

      Pull drm fixes from Dave Airlie:
       "Two build fixes, one for VC4, one for nouveau where the ARM only code
        is doing something a bit strange.  While people are discussing that,
        just workaround it and fix the build for now.  The code in question
        will never get used on anything non-ARM anyways.

        Also one fix for AST that SuSE had been hiding in their kernel, that
        allows all fbdev apps to work on that driver"

      * 'drm-fixes' of git://people.freedesktop.org/~airlied/linux:
        drm/nouveau: fix build failures on all non ARM.
        drm/ast: Initialized data needed to map fbdev memory
        drm/vc4: Add dependency on HAVE_DMA_ATTRS, and select DRM_GEM_CMA_HELPER

  commit d5f2e33b92b10b8007be50b570a27e9bacfb4c3a
  Author: Zhao Lei <zhaolei@xxxxxxxxxxxxxx>
  Date:   Thu Oct 8 18:46:44 2015 +0800

      btrfs: Use fs_info directly in btrfs_delete_unused_bgs

      No need to use root->fs_info in btrfs_delete_unused_bgs(),
      use fs_info directly instead.

      Signed-off-by: Zhao Lei <zhaolei@xxxxxxxxxxxxxx>
      Signed-off-by: Chris Mason <clm@xxxxxx>

  commit 2c9fe835525896077e7e6d8e416b97f2f868edef
  Author: Zhao Lei <zhaolei@xxxxxxxxxxxxxx>
  Date:   Mon Nov 9 11:51:32 2015 +0800

      btrfs: Fix lost-data-profile caused by balance bg

      Reproduce:
       (In integration-4.3 branch)

       TEST_DEV=(/dev/vdg /dev/vdh)
       TEST_DIR=/mnt/tmp

       umount "$TEST_DEV" >/dev/null
       mkfs.btrfs -f -d raid1 "${TEST_DEV[@]}"

       mount -o nospace_cache "$TEST_DEV" "$TEST_DIR"
       btrfs balance start -dusage=0 $TEST_DIR
       btrfs filesystem usage $TEST_DIR

       dd if=/dev/zero of="$TEST_DIR"/file count=100
       btrfs filesystem usage $TEST_DIR

      Result:
       We can see "no data chunk" in first "btrfs filesystem usage":
       # btrfs filesystem usage $TEST_DIR
       Overall:
          ...
       Metadata,single: Size:8.00MiB, Used:0.00B
          /dev/vdg        8.00MiB
       Metadata,RAID1: Size:122.88MiB, Used:112.00KiB
          /dev/vdg      122.88MiB
          /dev/vdh      122.88MiB
       System,single: Size:4.00MiB, Used:0.00B
          /dev/vdg        4.00MiB
       System,RAID1: Size:8.00MiB, Used:16.00KiB
          /dev/vdg        8.00MiB
          /dev/vdh        8.00MiB
       Unallocated:
          /dev/vdg        1.06GiB
          /dev/vdh        1.07GiB

       And "data chunks changed from raid1 to single" in second
       "btrfs filesystem usage":
       # btrfs filesystem usage $TEST_DIR
       Overall:
          ...
       Data,single: Size:256.00MiB, Used:0.00B
          /dev/vdh      256.00MiB
       Metadata,single: Size:8.00MiB, Used:0.00B
          /dev/vdg        8.00MiB
       Metadata,RAID1: Size:122.88MiB, Used:112.00KiB
          /dev/vdg      122.88MiB
          /dev/vdh      122.88MiB
       System,single: Size:4.00MiB, Used:0.00B
          /dev/vdg        4.00MiB
       System,RAID1: Size:8.00MiB, Used:16.00KiB
          /dev/vdg        8.00MiB
          /dev/vdh        8.00MiB
       Unallocated:
          /dev/vdg        1.06GiB
          /dev/vdh      841.92MiB

      Reason:
       btrfs balance delete last data chunk in case of no data in
       the filesystem, then we can see "no data chunk" by "fi usage"
       command.

       And when we do write operation to fs, the only available data
       profile is 0x0, result is all new chunks are allocated single type.

      Fix:
       Allocate a data chunk explicitly to ensure we don't lose the
       raid profile for data.

      Test:
       Test by above script, and confirmed the logic by debug output.

      Reviewed-by: Filipe Manana <fdmanana@xxxxxxxx>
      Signed-off-by: Zhao Lei <zhaolei@xxxxxxxxxxxxxx>
      Signed-off-by: Chris Mason <clm@xxxxxx>

  commit aefbe9a633b50a6124dbeb33a5d4efcdc6de6c30
  Author: Zhao Lei <zhaolei@xxxxxxxxxxxxxx>
  Date:   Tue Sep 29 21:03:54 2015 +0800

      btrfs: Fix lost-data-profile caused by auto removing bg

      Reproduce:
       (In integration-4.3 branch)

       TEST_DEV=(/dev/vdg /dev/vdh)
       TEST_DIR=/mnt/tmp

       umount "$TEST_DEV" >/dev/null
       mkfs.btrfs -f -d raid1 "${TEST_DEV[@]}"

       mount -o nospace_cache "$TEST_DEV" "$TEST_DIR"
       umount "$TEST_DEV"

       mount -o nospace_cache "$TEST_DEV" "$TEST_DIR"
       btrfs filesystem usage $TEST_DIR

      We can see the data chunk changed from raid1 to single:
       # btrfs filesystem usage $TEST_DIR
       Data,single: Size:8.00MiB, Used:0.00B
          /dev/vdg        8.00MiB
       #

      Reason:
       When a empty filesystem mount with -o nospace_cache, the last
       data blockgroup will be auto-removed in umount.

       Then if we mount it again, there is no data chunk in the
       filesystem, so the only available data profile is 0x0, result
       is all new chunks are created as single type.

      Fix:
       Don't auto-delete last blockgroup for a raid type.

      Test:
       Test by above script, and confirmed the logic by debug output.

      Reviewed-by: Filipe Manana <fdmanana@xxxxxxxx>
      Signed-off-by: Zhao Lei <zhaolei@xxxxxxxxxxxxxx>
      Signed-off-by: Chris Mason <clm@xxxxxx>

  commit 3b5753ec23597b05fd41d3f19ef582d6af1a6477
  Author: Zhao Lei <zhaolei@xxxxxxxxxxxxxx>
  Date:   Mon Aug 24 22:03:02 2015 +0800

      btrfs: Remove len argument from scrub_find_csum

      It is useless.

      Signed-off-by: Zhao Lei <zhaolei@xxxxxxxxxxxxxx>
      Signed-off-by: Chris Mason <clm@xxxxxx>

  commit affe4a5ae18baa2ab67af42eb21d7d734b851819
  Author: Zhao Lei <zhaolei@xxxxxxxxxxxxxx>
  Date:   Mon Aug 24 21:32:06 2015 +0800

      btrfs: Reduce unnecessary arguments in scrub_recheck_block

      We don't need pass so many arguments for recheck sblock now,
      this patch cleans them.

      Signed-off-by: Zhao Lei <zhaolei@xxxxxxxxxxxxxx>
      Signed-off-by: Chris Mason <clm@xxxxxx>

  commit ba7cf9882bd25bed77aad7dd8865e80c7ae0070a
  Author: Zhao Lei <zhaolei@xxxxxxxxxxxxxx>
  Date:   Mon Aug 24 21:18:02 2015 +0800

      btrfs: Use scrub_checksum_data and scrub_checksum_tree_block for 
scrub_recheck_block_checksum

      We can use existing scrub_checksum_data() and scrub_checksum_tree_block()
      for scrub_recheck_block_checksum(), instead of write duplicated code.

      Signed-off-by: Zhao Lei <zhaolei@xxxxxxxxxxxxxx>
      Signed-off-by: Chris Mason <clm@xxxxxx>

  commit 772d233f5dec86e38a96e58cc995e7b04ab4ec68
  Author: Zhao Lei <zhaolei@xxxxxxxxxxxxxx>
  Date:   Mon Aug 24 21:10:18 2015 +0800

      btrfs: Reset sblock->xxx_error stats before calling 
scrub_recheck_block_checksum

      We should reset sblock->xxx_error stats before calling
      scrub_recheck_block_checksum().

      Current code run correctly because all sblock are allocated by
      k[cz]alloc(), and the error stats are not got changed.

      Signed-off-by: Zhao Lei <zhaolei@xxxxxxxxxxxxxx>
      Signed-off-by: Chris Mason <clm@xxxxxx>

  commit 4734b7ed79e1230602927a38bc4d04dbe9dd09c1
  Author: Zhao Lei <zhaolei@xxxxxxxxxxxxxx>
  Date:   Wed Aug 19 22:39:18 2015 +0800

      btrfs: scrub: setup all fields for sblock_to_check

      scrub_setup_recheck_block() isn't setup all necessary fields for
      sblock_to_check because history reason.

      So current code need more arguments in severial functions,
      and more local variables, just to passing these lacked values to
      necessary place.

      This patch setup above fields to sblock_to_check in
      scrub_setup_recheck_block(), for:
      1: more cleanup for function arg, local variable
      2: to make sblock_to_check complete, then we can use sblock_to_check
         without concern about some uninitialized member.

      Signed-off-by: Zhao Lei <zhaolei@xxxxxxxxxxxxxx>
      Signed-off-by: Chris Mason <clm@xxxxxx>

  commit 9799d2c32bef6fba098fbef763002bc8d4851a2c
  Author: Zhao Lei <zhaolei@xxxxxxxxxxxxxx>
  Date:   Tue Aug 25 21:31:40 2015 +0800

      btrfs: scrub: set error stats when tree block spanning stripes

      It is better to show error stats to user when we found tree block
      spanning stripes.

      On a btrfs created by old version of btrfs-convert:
      Before patch:
        # btrfs scrub start -B /dev/vdh
        scrub done for 8b342d35-2904-41ab-b3cb-2f929709cf47
                scrub started at Tue Aug 25 21:19:09 2015 and finished after 
00:00:00
                total bytes scrubbed: 53.54MiB with 0 errors
        # dmesg
        ...
        [  128.711434] BTRFS error (device vdh): scrub: tree block 27054080 
spanning stripes, ignored. logical=27000832
        [  128.712744] BTRFS error (device vdh): scrub: tree block 27054080 
spanning stripes, ignored. logical=27066368
        ...

      After patch:
        # btrfs scrub start -B /dev/vdh
        scrub done for ff7f844b-7a4e-4b1a-88a9-8252ab25be1b
                scrub started at Tue Aug 25 21:42:29 2015 and finished after 
00:00:00
                total bytes scrubbed: 53.60MiB with 2 errors
                error details:
                corrected errors: 0, uncorrectable errors: 2, unverified 
errors: 0
        ERROR: There are uncorrectable errors.
        # dmesg
        ...omit...
        #

      Signed-off-by: Zhao Lei <zhaolei@xxxxxxxxxxxxxx>
      Signed-off-by: Chris Mason <clm@xxxxxx>

  commit 10855aeb1e78533c041065b33e34315e1f381c2e
  Author: Dave Airlie <airlied@xxxxxxxxxx>
  Date:   Tue Nov 10 08:36:59 2015 +1000

      drm/nouveau: fix build failures on all non ARM.

      gk20a is an ARM only GPU, so we can just do the correct thing on
      ARM but fail on other architectures. The other option was to use
      SWIOTLB as the define, which means phys_to_page exists, but
      this seems clearer.

      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 28fb4cb7fa6f63dc2fbdb5f2564dcbead8e3eee0
  Author: Egbert Eich <eich@xxxxxxx>
  Date:   Wed Jun 11 14:59:55 2014 +0200

      drm/ast: Initialized data needed to map fbdev memory

      Due to a missing initialization there was no way to map fbdev memory.
      Thus for example using the Xserver with the fbdev driver failed.
      This fix adds initialization for fix.smem_start and fix.smem_len
      in the fb_info structure, which fixes this problem.

      Requested-by: Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Egbert Eich <eich@xxxxxxx>
      [pulled from SuSE tree by me - airlied]
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit 2df4ee78d042ee3d17cbebd51e31b300286549dc
  Merge: 3419b45 8a92126
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 18:11:41 2015 -0800

      Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

      Pull networking fixes from David Miller:

       1) Fix null deref in xt_TEE netfilter module, from Eric Dumazet.

       2) Several spots need to get to the original listner for SYN-ACK
          packets, most spots got this ok but some were not.  Whilst covering
          the remaining cases, create a helper to do this.  From Eric Dumazet.

       3) Missiing check of return value from alloc_netdev() in CAIF SPI code,
          from Rasmus Villemoes.

       4) Don't sleep while != TASK_RUNNING in macvtap, from Vlad Yasevich.

       5) Use after free in mvneta driver, from Justin Maggard.

       6) Fix race on dst->flags access in dst_release(), from Eric Dumazet.

       7) Add missing ZLIB_INFLATE dependency for new qed driver.  From Arnd
          Bergmann.

       8) Fix multicast getsockopt deadlock, from WANG Cong.

       9) Fix deadlock in btusb, from Kuba Pawlak.

      10) Some ipv6_add_dev() failure paths were not cleaning up the SNMP6
          counter state.  From Sabrina Dubroca.

      11) Fix packet_bind() race, which can cause lost notifications, from
          Francesco Ruggeri.

      12) Fix MAC restoration in qlcnic driver during bonding mode changes,
          from Jarod Wilson.

      13) Revert bridging forward delay change which broke libvirt and other
          userspace things, from Vlad Yasevich.

      * git://git.kernel.org/pub/scm/linux/kernel/git/davem/net: (65 commits)
        Revert "bridge: Allow forward delay to be cfgd when STP enabled"
        bpf_trace: Make dependent on PERF_EVENTS
        qed: select ZLIB_INFLATE
        net: fix a race in dst_release()
        net: mvneta: Fix memory use after free.
        net: Documentation: Fix default value tcp_limit_output_bytes
        macvtap: Resolve possible __might_sleep warning in macvtap_do_read()
        mvneta: add FIXED_PHY dependency
        net: caif: check return value of alloc_netdev
        net: hisilicon: NET_VENDOR_HISILICON should depend on HAS_DMA
        drivers: net: xgene: fix RGMII 10/100Mb mode
        netfilter: nft_meta: use skb_to_full_sk() helper
        net_sched: em_meta: use skb_to_full_sk() helper
        sched: cls_flow: use skb_to_full_sk() helper
        netfilter: xt_owner: use skb_to_full_sk() helper
        smack: use skb_to_full_sk() helper
        net: add skb_to_full_sk() helper and use it in 
selinux_netlbl_skbuff_setsid()
        bpf: doc: correct arch list for supported eBPF JIT
        dwc_eth_qos: Delete an unnecessary check before the function call 
"of_node_put"
        bonding: fix panic on non-ARPHRD_ETHER enslave failure
        ...

  commit 3419b45039c6b799c974a8019361c045e7ca232c
  Merge: 01504f5 c1c5346
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 17:23:49 2015 -0800

      Merge branch 'for-4.4/io-poll' of git://git.kernel.dk/linux-block

      Pull block IO poll support from Jens Axboe:
       "Various groups have been doing experimentation around IO polling for
        (really) fast devices.  The code has been reviewed and has been
        sitting on the side for a few releases, but this is now good enough
        for coordinated benchmarking and further experimentation.

        Currently O_DIRECT sync read/write are supported.  A framework is in
        the works that allows scalable stats tracking so we can auto-tune
        this.  And we'll add libaio support as well soon.  Fow now, it's an
        opt-in feature for test purposes"

      * 'for-4.4/io-poll' of git://git.kernel.dk/linux-block:
        direct-io: be sure to assign dio->bio_bdev for both paths
        directio: add block polling support
        NVMe: add blk polling support
        block: add block polling support
        blk-mq: return tag/queue combo in the make_request_fn handlers
        block: change ->make_request_fn() and users to return a queue cookie

  commit 01504f5e9e071f1dde1062e3be15f54d4555308f
  Merge: 4bde961 8c1c5f2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 16:35:06 2015 -0800

      Merge tag 'upstream-4.4-rc1' of git://git.infradead.org/linux-ubifs

      Pull UBI/UBIFS updates from Richard Weinberger:

       - access time support for UBIFS by Dongsheng Yang

       - random cleanups and bug fixes all over the place

      * tag 'upstream-4.4-rc1' of git://git.infradead.org/linux-ubifs:
        ubifs: introduce UBIFS_ATIME_SUPPORT to ubifs
        ubifs: make ubifs_[get|set]xattr atomic
        UBIFS: Delete unnecessary checks before the function call "iput"
        UBI: Remove in vain semicolon
        UBI: Fastmap: Fix PEB array type
        UBIFS: Fix possible memory leak in ubifs_readdir()
        fs/ubifs: remove unnecessary new_valid_dev check
        ubi: fastmap: Implement produce_free_peb()
        UBIFS: print verbose message when rescanning a corrupted node
        UBIFS: call dbg_is_power_cut() instead of reading c->dbg->pc_happened
        UBI: drop null test before destroy functions
        UBI: Update comments to reflect UBI_METAONLY flag
        UBI: Fix debug message
        UBI: Fix typo in comment
        UBI: Fastmap: Simplify expression
        UBIFS: fix a typo in comment of ubifs_budget_req
        UBIFS: use kmemdup rather than duplicating its implementation

  commit 4bde961e5245bb37dab4831107bbed23e433d55a
  Merge: c6de7f1 2eb5f31
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 16:33:37 2015 -0800

      Merge branch 'for-linus-4.4-rc1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rw/uml

      Pull UML updates from Richard Weinberger:

       - a new hrtimer based clocksource by Anton Ivanov

       - ptrace() enhancments by Richard Weinberger

       - random cleanups and bug fixes all over the place

      * 'for-linus-4.4-rc1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rw/uml:
        um: Switch clocksource to hrtimers
        um: net: replace GFP_KERNEL with GFP_ATOMIC when spinlock is held
        um: Report host OOM more nicely
        um: Simplify STUB_DATA loading
        um: Remove dead symbol from i386 syscall stub
        um: Remove dead code from x86_64 syscall stub
        um: Get rid of open coded NR_SYSCALLS
        um: Store syscall number after syscall_trace_enter()
        um: Define PTRACE_OLDSETOPTIONS

  commit 247e75dba60140395cd7e808d32f76f208bedf76
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Tue Nov 10 14:45:50 2015 -0800

      pci: remove pci_dma_supported

      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Cc: "James E.J. Bottomley" <jejb@xxxxxxxxxxxxxxxx>
      Cc: Helge Deller <deller@xxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 704c16db0e055e9a2acd4a5353e92b1ae4408a90
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Tue Nov 10 14:45:47 2015 -0800

      usbnet: remove ifdefed out call to dma_supported

      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Cc: Oliver Neukum <oneukum@xxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 21fd6c099dc0d6eb97fbd28a8c16c1b331e1d45a
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Tue Nov 10 14:45:44 2015 -0800

      kaweth: remove ifdefed out call to dma_supported

      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Cc: "David S. Miller" <davem@xxxxxxxxxxxxx>
      Cc: Oliver Neukum <oliver@xxxxxxxxxx>
      Cc: Alexey Khoroshilov <khoroshilov@xxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 8722b8fbceecfb63bdd74674fc5e49a8c511a1f6
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Tue Nov 10 14:45:42 2015 -0800

      sfc: don't call dma_supported

      dma_set_mask already checks for a supported DMA mask before updating it,
      the call to dma_supported is redundant.

      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Cc: Solarflare linux maintainers <linux-net-drivers@xxxxxxxxxxxxxx>
      Cc: Shradha Shah <sshah@xxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 0dcc4a59d5a9821ed6f6cf5e88c96ff4f25e55aa
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Tue Nov 10 14:45:39 2015 -0800

      nouveau: don't call pci_dma_supported

      Just try to set a 64-bit DMA mask first and retry with the smaller 
dma_mask
      if dma_set_mask failed.

      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Cc: David Airlie <airlied@xxxxxxxx>
      Cc: Ben Skeggs <bskeggs@xxxxxxxxxx>
      Cc: Alexandre Courbot <acourbot@xxxxxxxxxx>
      Cc: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Cc: Thierry Reding <treding@xxxxxxxxxx>
      Cc: Dave Airlie <airlied@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit e806f75d527f7d0372fe838a80d3b7a6e1fde1b9
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Tue Nov 10 14:45:36 2015 -0800

      netup_unidvb: use pci_set_dma_mask insted of pci_dma_supported

      This ensures the dma mask that is supported by the driver is recorded
      in the device structure.

      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Cc: Sergey Kozlov <serjk@xxxxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 4571e4a2fc6c984d2e13517aa5a6ede240a1f733
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Tue Nov 10 14:45:33 2015 -0800

      cx23885: use pci_set_dma_mask insted of pci_dma_supported

      This ensures the dma mask that is supported by the driver is recorded
      in the device structure.

      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: Hans Verkuil <hans.verkuil@xxxxxxxxx>
      Cc: Pawel Osciak <pawel@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 251c5912d995a146522d30a642767f5fb0f1440b
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Tue Nov 10 14:45:31 2015 -0800

      cx25821: use pci_set_dma_mask insted of pci_dma_supported

      This ensures the dma mask that is supported by the driver is recorded
      in the device structure.

      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: Hans Verkuil <hans.verkuil@xxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 111be8b28d87769dfbde901602d262902575805d
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Tue Nov 10 14:45:28 2015 -0800

      cx88: use pci_set_dma_mask insted of pci_dma_supported

      This ensures the dma mask that is supported by the driver is recorded
      in the device structure.

      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: Hans Verkuil <hverkuil@xxxxxxxxx>
      Cc: Sakari Ailus <sakari.ailus@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit f546e121b5c8672cbae4243a75b9f8dcaed6b1fd
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Tue Nov 10 14:45:25 2015 -0800

      saa7134: use pci_set_dma_mask insted of pci_dma_supported

      This ensures the dma mask that is supported by the driver is recorded
      in the device structure.

      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: Pawel Osciak <pawel@xxxxxxxxxx>
      Cc: Hans Verkuil <hans.verkuil@xxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 45fa9c039a09d25cb656f29ac3b061fe5672feab
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Tue Nov 10 14:45:23 2015 -0800

      saa7164: use pci_set_dma_mask insted of pci_dma_supported

      This ensures the dma mask that is supported by the driver is recorded
      in the device structure.

      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: Hans Verkuil <hverkuil@xxxxxxxxx>
      Cc: Steven Toth <stoth@xxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit bad007bca7b7643fea786737071c86088ba2803b
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Tue Nov 10 14:45:20 2015 -0800

      tw68-core: use pci_set_dma_mask insted of pci_dma_supported

      This ensures the dma mask that is supported by the driver is recorded
      in the device structure.

      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Cc: Hans Verkuil <hverkuil@xxxxxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: Pawel Osciak <pawel@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 46a7fd8a9b302116b3263bc8e47f8f08c0d3a2ca
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Tue Nov 10 14:45:17 2015 -0800

      pcnet32: use pci_set_dma_mask insted of pci_dma_supported

      All drivers should be using dma_set_mask / pci_set_dma_mask to try to
      set the dma mask instead of just querying it.  Without that some iommu
      implementations may not work.

      pci_dma_supported is removed entirely, but dma_supported stays for
      dma_ops implementations for now.

      This patch (of 15):

      This ensures the dma mask that is supported by the driver is recorded
      in the device structure.

      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Acked-by: Don Fry <pcnet32@xxxxxxxxxxxx>
      Cc: "David S. Miller" <davem@xxxxxxxxxxxxx>
      Cc: "James E.J. Bottomley" <jejb@xxxxxxxxxxxxxxxx>
      Cc: Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
      Cc: Alexandre Courbot <acourbot@xxxxxxxxxx>
      Cc: Alexey Khoroshilov <khoroshilov@xxxxxxxxx>
      Cc: Ben Skeggs <bskeggs@xxxxxxxxxx>
      Cc: Christoph Hellwig <hch@xxxxxx>
      Cc: Daniel Vetter <daniel.vetter@xxxxxxxx>
      Cc: Dave Airlie <airlied@xxxxxxxxxx>
      Cc: David Airlie <airlied@xxxxxxxx>
      Cc: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
      Cc: Hans Verkuil <hverkuil@xxxxxxxxx>
      Cc: Helge Deller <deller@xxxxxx>
      Cc: Jiri Slaby <jslaby@xxxxxxxx>
      Cc: Mauro Carvalho Chehab <mchehab@xxxxxxxxxxxxxxx>
      Cc: Pawel Osciak <pawel@xxxxxxxxxx>
      Cc: Sakari Ailus <sakari.ailus@xxxxxxxxxxxxxxx>
      Cc: Sergey Kozlov <serjk@xxxxxxxx>
      Cc: Shradha Shah <sshah@xxxxxxxxxxxxxx>
      Cc: Solarflare linux maintainers <linux-net-drivers@xxxxxxxxxxxxxx>
      Cc: Steven Toth <stoth@xxxxxxxxxxxxxx>
      Cc: Thierry Reding <treding@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 3368e8fbcda539e4f9d6cdb750f23c25021698c9
  Author: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 14:45:14 2015 -0800

      lib/string.c: add ULL suffix to the constant definition

      8-byte constant is too big for long and compiler complains about this.

        lib/string.c:907:20: warning: constant 0x0101010101010101 is so big it 
is long

      Append ULL suffix to explicitly show its type.

      Signed-off-by: Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit d15c7c09325bcc5c924ae5ef52e2bc91b6753715
  Author: Naoya Horiguchi <n-horiguchi@xxxxxxxxxxxxx>
  Date:   Tue Nov 10 14:45:11 2015 -0800

      hugetlb: trivial comment fix

      Recently alloc_buddy_huge_page() was renamed to __alloc_buddy_huge_page(),
      so let's sync comments.

      Signed-off-by: Naoya Horiguchi <n-horiguchi@xxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit e14231cfe70253cb3c32289d06407e68f4575939
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Tue Nov 10 14:45:09 2015 -0800

      selftests/mlock2: add ULL suffix to 64-bit constants

      On 32-bit (e.g. m68k):

          mlock2-tests.c: In function 'lock_check':
          mlock2-tests.c:293: warning: integer constant is too large for 'long' 
type
          mlock2-tests.c:294: warning: integer constant is too large for 'long' 
type
          mlock2-tests.c:299: warning: integer constant is too large for 'long' 
type
          ...

      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Acked-by: Eric B Munson <emunson@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 60997feb14d5634fc7a9b18ab3c026ba8d3a5839
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Tue Nov 10 14:45:06 2015 -0800

      selftests/mlock2: add missing #define _GNU_SOURCE

      On glibc 2.3.6:

          mlock2-tests.c: In function 'seek_to_smaps_entry':
          mlock2-tests.c:158: warning: implicit declaration of function 
'getline'

      According to the manpage of getline(), it needs _GNU_SOURCE before glibc
      2.10.

      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Acked-by: Eric B Munson <emunson@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit c6de7f1754bd474019c60d6f076fa3f704e46b78
  Merge: 52e9a33 f23d0e2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 16:24:25 2015 -0800

      Merge tag 'metag-for-v4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jhogan/metag

      Pull metag arch updates from James Hogan:
       "A fix for 4KiB stacks with SMP, and a change of maintenance status to
        'Odd Fixes'"

      * tag 'metag-for-v4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jhogan/metag:
        MAINTAINERS: Change Meta arch port status to Odd Fixes
        metag: Turn irq_ctx_* macros into static inlines
        metag: SMP: Fix 4KiB stack setup on secondary CPUs

  commit b1d06b60e90cd5016798b9984f8e420e753f4846
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Fri Nov 6 19:28:22 2015 -0800

      of: Provide static inline function for of_translate_address if needed

      If OF_ADDRESS is not configured, builds can fail with errors such as

      drivers/net/ethernet/hisilicon/hns_mdio.c:
        In function 'hns_mdio_bus_name':
      drivers/net/ethernet/hisilicon/hns_mdio.c:411:3:
        error: implicit declaration of function 'of_translate_address'

      as currently seen when building sparc:allmodconfig.

      Introduce a static inline function if OF_ADDRESS is not configured to fix
      the build failure. Return OF_BAD_ADDR in this case. For this to work, the
      definition of OF_BAD_ADDR has to be moved outside CONFIG_OF conditional
      code.

      Fixes: 876133d3161d ("net: hisilicon: add OF dependency")
      Cc: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Reviewed-by: Arnd Bergmann <arnd@xxxxxxxx>
      Reviewed-by: Frank Rowand <frank.rowand@xxxxxxxxxxxxxx>
      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>

  commit 1cc8e3458b5110253c8f5aaf1890d5ffea9bb7b7
  Author: Jason Liu <r64343@xxxxxxxxxxxxx>
  Date:   Tue Nov 10 20:30:26 2015 +0800

      drivers: of: of_reserved_mem: fixup the alignment with CMA setup

      There is an alignment mismatch issue between the of_reserved_mem and
      the CMA setup requirement. The of_reserved_mem will try to get the
      alignment value from the DTS and pass it to __memblock_alloc_base to
      do the memory block base allocation, but the alignment value specified
      in the DTS may not satisfy the CAM setup requirement since CMA setup
      required the alignment as the following in the code:

      align = PAGE_SIZE << max(MAX_ORDER - 1, pageblock_order);

      The sanity check in the function of rmem_cma_setup will fail if the
      alignment does not setup correctly and thus CMA will fail to setup.

      This patch is to fixup the alignment to meet the CMA setup required.

      Mailing-list-thread: https://lkml.org/lkml/2015/11/9/138
      Signed-off-by: Jason Liu <r64343@xxxxxxxxxxxxx>
      Acked-by: Marek Szyprowski <m.szyprowski@xxxxxxxxxxx>
      Cc: Grant Likely <grant.likely@xxxxxxxxxx>
      Cc: Rob Herring <robh+dt@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>

  commit 85a1c77fb8c4ae91d203fd0e8c3b54b50662d3c6
  Author: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
  Date:   Tue Nov 10 16:08:33 2015 +1100

      of: Print rather than WARN'ing when overlap check fails

      __rmem_check_for_overlap() is called very early in boot, and on some
      powerpc systems it's not safe to call WARN that early in boot.

      If the overlap check fails the system will oops instead of printing a
      warning. Furthermore because it's so early in boot the console is not up
      and the user doesn't see the oops, they just get a dead system.

      Fix it by printing an error instead of calling WARN.

      Fixes: ae1add247bf8 ("of: Check for overlap in reserved memory regions")
      Signed-off-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx>
      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>

  commit 87ab5205e620f0936f5c65c9d6c7b341dca9d5f9
  Author: Raphael Poggi <poggi.raph@xxxxxxxxx>
  Date:   Fri Nov 6 13:51:47 2015 -0800

      dt-bindings: ak4554: extension should be .txt

      Signed-off-by: Raphaël Poggi <poggi.raph@xxxxxxxxx>
      Signed-off-by: Rob Herring <robh@xxxxxxxxxx>

  commit 52e9a33333fc337d03ffb865048f9ccae8552a8d
  Merge: c0d6fe2 7c9730c
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 15:08:32 2015 -0800

      Merge tag 'armsoc-defconfig' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

      Pull ARM SoC defconfig updates from Olof Johansson:
       "Defconfig updates are kept separate from other branches mostly to
        avoid conflicts between the different categories (driver branch
        enabling something that has context conflict with SoC options, etc).

        A lot of this again is scattered across the various hardware
        platforms.  multi_v7_defconfig, our "generic" config for most 32-bit
        platforms has been gone through by Marvell Berlin maintainers and
        added most options they need to run on their hardware.  Broadcom NSP
        is also added there, and the new Atmel SAMA5D2 (added last release).
        Rockchip also has display and other devices supported in that config.

        In addition to that, the usual small churn of new options being added
        here and there"

      * tag 'armsoc-defconfig' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc: (45 commits)
        ARM: multi_v7_defconfig: enable UniPhier I2C drivers
        ARM: multi_v7_defconfig: Enable rtl8152 ethernet driver for Odroid-XU4
        ARM: exynos_defconfig: Enable rtl8152 ethernet driver for Odroid-XU4
        ARM: exynos_defconfig: Enable WiFi-Ex as a module instead built-in
        ARM: exynos_defconfig: Disable simplefb support
        ARM: exynos_defconfig: Enable LEDS for Odroid-XU3/XU4
        ARM: multi_v7_defconfig: Enable DWC2 USB driver and USB ethernet gadget
        ARM: exynos_defconfig: Enable DWC2 USB driver and USB ethernet gadget
        ARM: exynos_defconfig: Enable USB Video Class support
        ARM: multi_v7_defconfig: improve multi_v7_defconfig support for Berlin
        ARM: tegra: Update multi_v7_defconfig
        ARM: multi_v7_defconfig: Add Atmel SDHCI device
        ARM: multi_v7_defconfig: Add Atmel Flexcom device
        ARM: multi_v7_defconfig: Add Atmel SAMA5D2 SoC
        ARM: at91/defconfig: add sama5d2 and its new devices to sama5 defconfig
        ARM: at91/defconfig: update at91_dt defconfig
        ARM: at91/defconfig: update sama5 defconfig
        ARM: configs: Enable FIXED_PHY in multi_v7 defconfig
        ARM: configs: update lpc18xx defconfig
        ARM: socfpga_defconfig: enable fpga manager
        ...

  commit c0d6fe2f01c475cc137d90607a07578586883df8
  Merge: b44a3d2 3e4dda7
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 15:06:26 2015 -0800

      Merge tag 'armsoc-dt' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

      Pull ARM DT updates from Olof Johansson:
       "As usual, this is the massive branch we have for each release.  Lots
        of various updates and additions of hardware descriptions on existing
        hardware, as well as the usual additions of new boards and SoCs.

        This is also the first release where we've started mixing 64- and
        32-bit DT updates in one branch.

        (Specific details on what's actually here and new is pretty easy to
        tell from the diffstat, so there's little point in duplicating listing
        it here)"

      * tag 'armsoc-dt' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc: (499 commits)
        ARM: dts: uniphier: add system-bus-controller nodes
        ARM64: juno: disable NOR flash node by default
        ARM: dts: uniphier: add outer cache controller nodes
        arm64: defconfig: Enable PCI generic host bridge by default
        arm64: Juno: Add support for the PCIe host bridge on Juno R1
        Documentation: of: Document the bindings used by Juno R1 PCIe host 
bridge
        ARM: dts: uniphier: add I2C aliases for ProXstream2 boards
        dts/Makefile: Add build support for LS2080a QDS & RDB board DTS
        dts/ls2080a: Add DTS support for LS2080a QDS & RDB boards
        dts/ls2080a: Update Simulator DTS to add support of various peripherals
        dts/ls2080a: Remove text about writing to Free Software Foundation
        dts/ls2080a: Update DTSI to add support of various peripherals
        doc: DTS: Update DWC3 binding to provide reference to generic bindings
        doc/bindings: Update GPIO devicetree binding documentation for LS2080A
        Documentation/dts: Move FSL board-specific bindings out of /powerpc
        Documentation: DT: Add entry for FSL LS2080A QDS and RDB boards
        arm64: Rename FSL LS2085A SoC support code to LS2080A
        arm64: Use generic Layerscape SoC family naming
        ARM: dts: uniphier: add ProXstream2 Vodka board support
        ARM: dts: uniphier: add ProXstream2 Gentil board support
        ...

  commit 89ba7d8c22acb43e318ca1c82e25c8b75ef7a7b2
  Merge: 57ab3b08 759d2a9
  Author: Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
  Date:   Wed Nov 11 00:01:21 2015 +0100

      Merge branch 'turbostat' of 
git://git.kernel.org/pub/scm/linux/kernel/git/lenb/linux into pm-tools

      Pull turbostat changes for v4.4 from Len Brown.

      * 'turbostat' of git://git.kernel.org/pub/scm/linux/kernel/git/lenb/linux:
        tools/power turbostat: bugfix: print MAX_NON_TURBO_RATIO
        tools/power turbostat: simplify Bzy_MHz calculation

  commit b44a3d2a85c64208a57362a1728efb58a6556cd6
  Merge: 56e0464 d13a5c8
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 15:00:03 2015 -0800

      Merge tag 'armsoc-drivers' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

      Pull ARM SoC driver updates from Olof Johansson:
       "As we've enabled multiplatform kernels on ARM, and greatly done away
        with the contents under arch/arm/mach-*, there's still need for
        SoC-related drivers to go somewhere.

        Many of them go in through other driver trees, but we still have
        drivers/soc to hold some of the "doesn't fit anywhere" lowlevel code
        that might be shared between ARM and ARM64 (or just in general makes
        sense to not have under the architecture directory).

        This branch contains mostly such code:

         - Drivers for qualcomm SoCs for SMEM, SMD and SMD-RPM, used to
           communicate with power management blocks on these SoCs for use by
           clock, regulator and bus frequency drivers.

         - Allwinner Reduced Serial Bus driver, again used to communicate with
           PMICs.

         - Drivers for ARM's SCPI (System Control Processor).  Not to be
           confused with PSCI (Power State Coordination Interface).  SCPI is
           used to communicate with the assistant embedded cores doing power
           management, and we have yet to see how many of them will implement
           this for their hardware vs abstracting in other ways (or not at all
           like in the past).

         - To make confusion between SCPI and PSCI more likely, this release
           also includes an update of PSCI to interface version 1.0.

         - Rockchip support for power domains.

         - A driver to talk to the firmware on Raspberry Pi"

      * tag 'armsoc-drivers' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc: (57 commits)
        soc: qcom: smd-rpm: Correct size of outgoing message
        bus: sunxi-rsb: Add driver for Allwinner Reduced Serial Bus
        bus: sunxi-rsb: Add Allwinner Reduced Serial Bus (RSB) controller 
bindings
        ARM: bcm2835: add mutual inclusion protection
        drivers: psci: make PSCI 1.0 functions initialization version dependent
        dt-bindings: Correct paths in Rockchip power domains binding document
        soc: rockchip: power-domain: don't try to print the clock name in error 
case
        soc: qcom/smem: add HWSPINLOCK dependency
        clk: berlin: add cpuclk
        ARM: berlin: dts: add CLKID_CPU for BG2Q
        ARM: bcm2835: Add the Raspberry Pi firmware driver
        soc: qcom: smem: Move RPM message ram out of smem DT node
        soc: qcom: smd-rpm: Correct the active vs sleep state flagging
        soc: qcom: smd: delete unneeded of_node_put
        firmware: qcom-scm: build for correct architecture level
        soc: qcom: smd: Correct SMEM items for upper channels
        qcom-scm: add missing prototype for qcom_scm_is_available()
        qcom-scm: fix endianess issue in __qcom_scm_is_call_available
        soc: qcom: smd: Reject send of too big packets
        soc: qcom: smd: Handle big endian CPUs
        ...

  commit 56e0464980febfa50432a070261579415c72664e
  Merge: a5e1d71 b1e4006
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 14:56:23 2015 -0800

      Merge tag 'armsoc-soc' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

      Pull ARM SoC platform updates from Olof Johansson:
       "New and/or improved SoC support for this release:

        Marvell Berlin:
           - Enable standard DT-based cpufreq
           - Add CPU hotplug support

        Freescale:
           - Ethernet init for i.MX7D
           - Suspend/resume support for i.MX6UL

        Allwinner:
           - Support for R8 chipset (used on NTC's $9 C.H.I.P board)

        Mediatek:
           - SMP support for some platforms

        Uniphier:
           - L2 support
           - Cleaned up SMP support, etc.

        plus a handful of other patches around above functionality, and a few
        other smaller changes"

      * tag 'armsoc-soc' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc: (42 commits)
        ARM: uniphier: rework SMP operations to use trampoline code
        ARM: uniphier: add outer cache support
        Documentation: EXYNOS: Update bootloader interface on exynos542x
        ARM: mvebu: add broken-idle option
        ARM: orion5x: use mac_pton() helper
        ARM: at91: pm: at91_pm_suspend_in_sram() must be 8-byte aligned
        ARM: sunxi: Add R8 support
        ARM: digicolor: select pinctrl/gpio driver
        arm: berlin: add CPU hotplug support
        arm: berlin: use non-self-cleared reset register to reset cpu
        ARM: mediatek: add smp bringup code
        ARM: mediatek: enable gpt6 on boot up to make arch timer working
        soc: mediatek: Fix random hang up issue while kernel init
        soc: ti: qmss: make acc queue support optional in the driver
        soc: ti: add firmware file name as part of the driver
        Documentation: dt: soc: Add description for knav qmss driver
        ARM: S3C64XX: Use PWM lookup table for mach-smartq
        ARM: S3C64XX: Use PWM lookup table for mach-hmt
        ARM: S3C64XX: Use PWM lookup table for mach-crag6410
        ARM: S3C64XX: Use PWM lookup table for smdk6410
        ...

  commit a5e1d715a8d0696961d99d31d869aa522f1cad5a
  Merge: 64fd8c8 d3dc3df
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 14:48:36 2015 -0800

      Merge tag 'armsoc-cleanup' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

      Pull ARM SoC cleanups from Olof Johansson:
       "Again we have a sizable (but not huge) cleanup branch with a net delta
        of about -3k lines.

        Main contents here is:

         - A bunch of development/cleanup of a few PXA boards
         - Removal of bockw platforms on shmobile, since the platform has now
           gone completely multiplatform.  Whee!
         - move of the 32kHz timer on OMAP to a proper timesource
         - Misc cleanup of older OMAP material (incl removal of one board
           file)
         - Switch over to new common PWM lookup support for several platforms

        There's also a handful of other cleanups across the tree, but the
        above are the major pieces"

      * tag 'armsoc-cleanup' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc: (103 commits)
        ARM: OMAP3: hwmod data: Remove legacy mailbox data and addrs
        ARM: DRA7: hwmod data: Remove spinlock hwmod addrs
        ARM: OMAP4: hwmod data: Remove spinlock hwmod addrs
        ARM: DRA7/AM335x/AM437x: hwmod: Remove gpmc address space from hwmod 
data
        ARM: Remove __ref on hotplug cpu die path
        ARM: Remove open-coded version of IRQCHIP_DECLARE
        arm: omap2: board-generic: use omap4_local_timer_init for AM437x
        ARM: DRA7/AM335x/AM437x: hwmod: Remove elm address space from hwmod data
        ARM: OMAP: Remove duplicated operand in OR operation
        clocksource: ti-32k: make it depend on GENERIC_CLOCKSOURCE
        ARM: pxa: remove incorrect __init annotation on pxa27x_set_pwrmode
        ARM: pxa: raumfeld: make some variables static
        ARM: OMAP: Change all cpu_is_* occurences to soc_is_* for id.c
        ARM: OMAP2+: Rename cpu_is macros to soc_is
        arm: omap2: timer: limit hwmod usage to non-DT boots
        arm: omap2+: select 32k clocksource driver
        clocksource: add TI 32.768 Hz counter driver
        arm: omap2: timer: rename omap_sync32k_timer_init()
        arm: omap2: timer: always call clocksource_of_init() when DT
        arm: omap2: timer: move realtime_counter_init() around
        ...

  commit 086f332167d64b645d37405854f049b9ad7371ab
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Tue Nov 10 13:39:42 2015 +0100

      netfilter: nf_tables: add clone interface to expression operations

      With the conversion of the counter expressions to make it percpu, we
      need to clone the percpu memory area, otherwise we crash when using
      counters from flow tables.

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit aabc92bbe3cfe4c545f8ccdaaeeea012a46f0abf
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Tue Nov 10 14:31:18 2015 +0100

      net: add __netdev_alloc_pcpu_stats() to indicate gfp flags

      nf_tables may create percpu counters from the packet path through its
      dynamic set instantiation infrastructure, so we need a way to allocate
      this through GFP_ATOMIC.

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
      Acked-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 74ec4d55c4d243330d93fc52e23e37d2e76548ba
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Tue Nov 10 13:22:15 2015 +0100

      netfilter: fix xt_TEE and xt_TPROXY dependencies

      Kconfig is too smart for its own good: a Kconfig line that states

        select NF_DEFRAG_IPV6 if IP6_NF_IPTABLES

      means that if IP6_NF_IPTABLES is set to 'm', then NF_DEFRAG_IPV6 will
      also be set to 'm', regardless of the state of the symbol from which
      it is selected. When the xt_TEE driver is built-in and nothing else
      forces NF_DEFRAG_IPV6 to be built-in, this causes a link-time error:

      net/built-in.o: In function `tee_tg6':
      net/netfilter/xt_TEE.c:46: undefined reference to `nf_dup_ipv6'

      This works around that behavior by changing the dependency to
      'if IP6_NF_IPTABLES != n', which is interpreted as boolean expression
      rather than a tristate and causes the NF_DEFRAG_IPV6 symbol to
      be built-in as well.

      The bug only occurs once in thousands of 'randconfig' builds and
      does not really impact real users. From inspecting the other
      surrounding Kconfig symbols, I am guessing that NETFILTER_XT_TARGET_TPROXY
      and NETFILTER_XT_MATCH_SOCKET have the same issue. If not, this
      change should still be harmless.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit c872a2d9e3627829591736ddd8e8710a0afb2f95
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Tue Nov 10 13:08:15 2015 +0100

      netfilter: nfnetlink_log: work around uninitialized variable warning

      After a recent (correct) change, gcc started warning about the use
      of the 'flags' variable in nfulnl_recv_config()

      net/netfilter/nfnetlink_log.c: In function 'nfulnl_recv_config':
      net/netfilter/nfnetlink_log.c:320:14: warning: 'flags' may be used 
uninitialized in this function [-Wmaybe-uninitialized]
      net/netfilter/nfnetlink_log.c:828:6: note: 'flags' was declared here

      The warning first shows up in ARM s3c2410_defconfig with gcc-4.3 or
      higher (including 5.2.1, which is the latest version I checked) I
      tried working around it by rearranging the code but had no success
      with that.

      As a last resort, this initializes the variable to zero, which shuts
      up the warning, but means that we don't get a warning if the code
      is ever changed in a way that actually causes the variable to be
      used without first being written.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: 8cbc870829ec ("netfilter: nfnetlink_log: validate dependencies to 
avoid breaking atomicity")
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 64fd8c8a0ff421b47a879fbff5b82563b7fb82f5
  Merge: b0aeba7 19c1c32
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 14:45:05 2015 -0800

      Merge tag 'armsoc-fixes-nc' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

      Pull ARM SoC non-urgent fixes from Olof Johansson:
       "A handful of fixes that came in and didn't seem warranted to go in
        through the 4.3-rc cycle.

         - MAINTAINERS updates for one of the Broadcom platforms and lpc18xx
         - A couple of non-critical Davinci bugfixes
         - A fix to reset irq affinity for TI platforms (silences a warning at
           reboot)"

      * tag 'armsoc-fixes-nc' of 
git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc:
        MAINTAINERS: update lpc18xx entry with more drivers
        soc: ti: reset irq affinity before freeing irq
        ARM: cns3xxx: pci: avoid potential stack overflow
        ARM: davinci: clock: Correct return values for API functions
        ARM: davinci: re-use %*ph specifier
        MAINTAINERS: add entry for the Broadcom Northstar Plus SoCs

  commit b0aeba741b2d082e4f0773881af4906ce2bb8231
  Author: Tony Luck <tony.luck@xxxxxxxxx>
  Date:   Tue Nov 10 10:09:47 2015 -0800

      Fix alloc_node_mem_map() to work on ia64 again

      In commit a1c34a3bf00a ("mm: Don't offset memmap for flatmem") Laura
      fixed a problem for Srinivas relating to the bottom 2MB of RAM on an ARM
      IFC6410 board.

      One small wrinkle on ia64 is that it allocates the node_mem_map earlier
      in arch code, so it skips the block of code where "offset" is
      initialized.

      Move initialization of start and offset before the check for the
      node_mem_map so that they will always be available in the latter part of
      the function.

      Tested-by: Laura Abbott <laura@xxxxxxxxxxxx>
      Fixes: a1c34a3bf00a (mm: Don't offset memmap for flatmem)
      Signed-off-by: Tony Luck <tony.luck@xxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 0442f14b15f8e7a8b3778a9f8cf640ef89b2df26
  Author: J. Bruce Fields <bfields@xxxxxxxxxx>
  Date:   Fri Oct 9 01:44:07 2015 +0000

      svcrpc: document lack of some memory barriers

      We're missing memory barriers in net/sunrpc/svcsock.c in some spots we'd
      expect them.  But it doesn't appear they're necessary in our case, and
      this is likely a hot path--for now just document the odd behavior.

      Kosuke Tatsukawa found this issue while looking through the linux source
      code for places calling waitqueue_active() before wake_up*(), but
      without preceding memory barriers, after sending a patch to fix a
      similar issue in drivers/tty/n_tty.c  (Details about the original issue
      can be found here: https://lkml.org/lkml/2015/9/28/849).

      Reported-by: Kosuke Tatsukawa <tatsu@xxxxxxxxxxxxx>
      Signed-off-by: J. Bruce Fields <bfields@xxxxxxxxxx>

  commit 8a921265e2cd31e61a0c2eda582af54c5bfef897
  Author: Vlad Yasevich <vyasevich@xxxxxxxxx>
  Date:   Tue Nov 10 06:15:32 2015 -0500

      Revert "bridge: Allow forward delay to be cfgd when STP enabled"

      This reverts commit 34c2d9fb0498c066afbe610b15e18995fd8be792.

      There are 2 reasons for this revert:
       1)  The commit in question doesn't do what it says it does.  The
           description reads: "Allow bridge forward delay to be configured
           when Spanning Tree is enabled."  This was already the case before
           the commit was made.  What the commit actually do was disallow
           invalid values or 'forward_delay' when STP was turned off.

       2)  The above change was actually a change in the user observed
           behavior and broke things like libvirt and other network configs
           that set 'forward_delay' to 0 without enabling STP.  The value
           of 0 is actually used when STP is turned off to immediately mark
           the bridge as forwarding.

      Signed-off-by: Vlad Yasevich <vyasevic@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a31d82d85afdcbdb8c4128dfd6146992dc6b3576
  Author: Steven Rostedt <rostedt@xxxxxxxxxxx>
  Date:   Tue Nov 10 15:28:17 2015 -0500

      bpf_trace: Make dependent on PERF_EVENTS

      Arnd Bergmann reported:

        In my ARM randconfig tests, I'm getting a build error for
        newly added code in bpf_perf_event_read and bpf_perf_event_output
        whenever CONFIG_PERF_EVENTS is disabled:

        kernel/trace/bpf_trace.c: In function 'bpf_perf_event_read':
        kernel/trace/bpf_trace.c:203:11: error: 'struct perf_event' has no 
member named 'oncpu'
        if (event->oncpu != smp_processor_id() ||
                 ^
        kernel/trace/bpf_trace.c:204:11: error: 'struct perf_event' has no 
member named 'pmu'
              event->pmu->count)

        This can happen when UPROBE_EVENT is enabled but KPROBE_EVENT
        is disabled. I'm not sure if that is a configuration we care
        about, otherwise we could prevent this case from occuring by
        adding Kconfig dependencies.

      Looking at this further, it's really that UPROBE_EVENT enables 
PERF_EVENTS.
      By just having BPF_EVENTS depend on PERF_EVENTS, then all is fine.

      Link: http://lkml.kernel.org/r/4525348.Aq9YoXkChv@wuerfel
      Reported-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 4bdb96cb69d9e4c6038a976fa9def9f8ae024ff8
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Tue Nov 10 11:28:15 2015 +0100

      qed: select ZLIB_INFLATE

      The newly added qlogic qed driver uses the zlib library, but
      misses the dependency:

      drivers/built-in.o: In function `qed_alloc_stream_mem':
      drivers/net/ethernet/qlogic/qed/qed_main.c:707: undefined reference to 
`zlib_inflate_workspacesize'
      drivers/built-in.o: In function `qed_unzip_data':
      drivers/net/ethernet/qlogic/qed/qed_main.c:675: undefined reference to 
`zlib_inflateInit2'

      This changes Kconfig to always select zlib when needed.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: fe56b9e6a8d9 ("qed: Add module with basic common support")
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3934bbc0446e4cae977a6efe82ce993d37434e53
  Merge: 264015f 14f09e2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 12:13:00 2015 -0800

      Merge tag 'md/4.4-rc0-fix' of git://neil.brown.name/md

      Pull config fix for md from Neil Brown:
       "New config dependency needed as md/raid5 now uses crc32c"

      * tag 'md/4.4-rc0-fix' of git://neil.brown.name/md:
        raid5-cache: add crc32c Kconfig dependency

  commit 264015f8a83fefc62c5125d761fbbadf924e520c
  Merge: d55fc37 ab27a8d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 12:07:22 2015 -0800

      Merge tag 'libnvdimm-for-4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm

      Pull libnvdimm updates from Dan Williams:
       "Outside of the new ACPI-NFIT hot-add support this pull request is more
        notable for what it does not contain, than what it does.  There were a
        handful of development topics this cycle, dax get_user_pages, dax
        fsync, and raw block dax, that need more more iteration and will wait
        for 4.5.

        The patches to make devm and the pmem driver NUMA aware have been in
        -next for several weeks.  The hot-add support has not, but is
        contained to the NFIT driver and is passing unit tests.  The coredump
        support is straightforward and was looked over by Jeff.  All of it has
        received a 0day build success notification across 107 configs.

        Summary:

         - Add support for the ACPI 6.0 NFIT hot add mechanism to process
           updates of the NFIT at runtime.

         - Teach the coredump implementation how to filter out DAX mappings.

         - Introduce NUMA hints for allocations made by the pmem driver, and
           as a side effect all devm allocations now hint their NUMA node by
           default"

      * tag 'libnvdimm-for-4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/nvdimm/nvdimm:
        coredump: add DAX filtering for FDPIC ELF coredumps
        coredump: add DAX filtering for ELF coredumps
        acpi: nfit: Add support for hot-add
        nfit: in acpi_nfit_init, break on a 0-length table
        pmem, memremap: convert to numa aware allocations
        devm_memremap_pages: use numa_mem_id
        devm: make allocations numa aware by default
        devm_memremap: convert to return ERR_PTR
        devm_memunmap: use devres_release()
        pmem: kill memremap_pmem()
        x86, mm: quiet arch_add_memory()

  commit d55fc37856244c929965c190c8e9dcb49e2c07aa
  Merge: 42d4ebb 75ecc64
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 11:58:25 2015 -0800

      Merge branch 'i2c/for-4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux

      Pull i2c updates from Wolfram Sang:

       - New drivers: UniPhier (with and without FIFO)

       - some drivers got some bigger rework: ismt, designware, img-scb (rcar
         had to be reverted because issues were showing up just lately)

       - ACPI: reworked the device scanning and added support for muxes

      ... and quite a lot of driver bugfixes and cleanups this time.  All
      files touched outside of the i2c realm have proper acks.

      * 'i2c/for-4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux: (70 commits)
        i2c: rcar: Revert the latest refactoring series
        i2c: pnx: remove superfluous assignment
        MAINTAINERS: i2c: drop i2c-pnx maintainer
        MAINTAINERS: i2c: mark also subdirectories as maintained
        i2c: cadence: enable driver for ARM64
        i2c: i801: Document Intel DNV and Broxton
        i2c: at91: manage unexpected RXRDY flag when starting a transfer
        i2c: pnx: Use setup_timer instead of open coding it
        i2c: add ACPI support for I2C mux ports
        acpi: add acpi_preset_companion() stub
        i2c: pxa: Add support for pxa910/988 & new configuration features
        i2c: au1550: Convert to devm_kzalloc and devm_ioremap_resource
        i2c-dev: Fix I2C_SLAVE ioctl comment
        i2c-dev: Fix typo in ioctl name reference
        i2c: sirf: tune the divider to make i2c bus freq more accurate
        i2c: imx: Use -ENXIO as error in the NACK case
        i2c: i801: Add support for Intel Broxton
        i2c: i801: Add support for Intel DNV
        i2c: mediatek: add i2c resume support
        i2c: imx: implement bus recovery
        ...

  commit 42d4ebb42a17754d2e8344dc1aa486119671d0eb
  Merge: 6aabef6 760d280
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 10:11:12 2015 -0800

      Merge git://www.linux-watchdog.org/linux-watchdog

      Pull watchdog update from Wim Van Sebroeck:

       - New driver for Broadcom 7038 Set-Top Box
       - imx2_wdt: Use register definition in regmap_write()
       - intel-mid: add Magic Closure flag
       - watchdog framework improvements:
            - Use device tree alias for naming watchdogs
            - propagate ping error code to the user space
            - Always evaluate new timeout against min_timeout
            - Use single variable name for struct watchdog_device
       - include clean-ups

      * git://www.linux-watchdog.org/linux-watchdog:
        watchdog: include: add units for timeout values in kerneldoc
        watchdog: include: fix some typos
        watchdog: core: propagate ping error code to the user space
        watchdog: watchdog_dev: Use single variable name for struct 
watchdog_device
        watchdog: Always evaluate new timeout against min_timeout
        watchdog: intel-mid: add Magic Closure flag
        watchdog: imx2_wdt: Use register definition in regmap_write()
        watchdog: watchdog_dev: Use device tree alias for naming watchdogs
        watchdog: Watchdog driver for Broadcom Set-Top Box
        watchdog: bcm7038: add device tree binding documentation

  commit 6aabef681df96b851b4a11459520d4a20ab1cae4
  Merge: 1eb196c ba95339
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 10:09:01 2015 -0800

      Merge branch 'hwmon-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jdelvare/staging

      Pull tiny hwmon update from Jean Delvare.

      * 'hwmon-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jdelvare/staging:
        hwmon: (k10temp) Remove duplicate pci-id define

  commit 1eb196c3c01f364d6cd3e8c0e16dc4702fdaffd9
  Merge: 041c795 fdcb4b2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 10:07:50 2015 -0800

      Merge tag 'ntb-4.4' of git://github.com/jonmason/ntb

      Pull NTB bugfixes from Jon Mason:
       "NTB Bug fixes for potential NULL pointer accesses, accesses of a freed
        pointer, invalid buffer pointer, and a compiler warning.

        Also, unification of upstream/downstream addresses"

      * tag 'ntb-4.4' of git://github.com/jonmason/ntb:
        NTB: fix 32-bit compiler warning
        NTB: unify translation addresses
        NTB: invalid buf pointer in multi-MW setups
        NTB: remove unused variable
        NTB: fix access of free-ed pointer
        NTB: Fix issue where we may be accessing NULL ptr

  commit 041c79514af9080c75197078283134f538f46b44
  Merge: 7d88471 34635b1a
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 10:05:17 2015 -0800

      Merge tag 'dmaengine-4.4-rc1' of 
git://git.infradead.org/users/vkoul/slave-dma

      Pull dmaengine updates from Vinod Koul:
       "This time we have a very typical update which is mostly fixes and
        updates to drivers and no new drivers.

         - the biggest change is coming from Peter for edma cleanup which even
           caused some last minute regression, things seem settled now
         - idma64 and dw updates
         - iotdma updates
         - module autoload fixes for various drivers
         - scatter gather support for hdmac"

      * tag 'dmaengine-4.4-rc1' of 
git://git.infradead.org/users/vkoul/slave-dma: (77 commits)
        dmaengine: edma: Add dummy driver skeleton for edma3-tptc
        Revert "ARM: DTS: am33xx: Use the new DT bindings for the eDMA3"
        Revert "ARM: DTS: am437x: Use the new DT bindings for the eDMA3"
        dmaengine: dw: some Intel devices has no memcpy support
        dmaengine: dw: platform: provide platform data for Intel
        dmaengine: dw: don't override platform data with autocfg
        dmaengine: hdmac: Add scatter-gathered memset support
        dmaengine: hdmac: factorise memset descriptor allocation
        dmaengine: virt-dma: Fix kernel-doc annotations
        ARM: DTS: am437x: Use the new DT bindings for the eDMA3
        ARM: DTS: am33xx: Use the new DT bindings for the eDMA3
        dmaengine: edma: New device tree binding
        dmaengine: Kconfig: edma: Select TI_DMA_CROSSBAR in case of ARCH_OMAP
        dmaengine: ti-dma-crossbar: Add support for crossbar on AM33xx/AM43xx
        dmaengine: edma: Merge the of parsing functions
        dmaengine: edma: Do not allocate memory for edma_rsv_info in case of DT 
boot
        dmaengine: edma: Refactor the dma device and channel struct 
initialization
        dmaengine: edma: Get qDMA channel information from HW also
        dmaengine: edma: Merge map_dmach_to_queue into assign_channel_eventq
        dmaengine: edma: Correct PaRAM access function names (_parm_ to _param_)
        ...

  commit 7d884710bb3635f94dac152ae226ca54a585a223
  Merge: 3b13866 1e3929e
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 10:01:21 2015 -0800

      Merge tag 'rtc-v4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/abelloni/linux

      Pull RTC updates from Alexandre Belloni:
       "Core:
         - Fix rtctest error path

        New drivers:
         - Microcrystal RV8803

        Subsystem wide cleanups:
         - remove misuse of IRQF_NO_SUSPEND flag

        Drivers:
         - at91rm9200: clear RTC alarm status flag prior to suspending
         - davinci: remove incorrect reference to probe function
         - ds1307: Fix alarm programming for mcp794xx
         - ds1390: trickle charger support, fix ds1390_get_reg
         - isl1208: Pass the IRQF_ONESHOT flag
         - opal: fix type of token
         - pcf2127: fix RTC_READ_VL, remove useless driver version
         - pcf85063: return an error when date is invalid
         - pcf8563: add CLKOUT to common clock framework
         - rx8025: remove unnecessary braces
         - s3c: Set year, month, day value for setting alarm
         - stmp3xxx: unify register access macros
         - License fixes: pcf2127, da9063
         - wakeup-source support for isl12057 and opal"

      * tag 'rtc-v4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/abelloni/linux: (23 commits)
        rtc: Add a driver for Micro Crystal RV8803
        rtc: s3c: Set year, month, day value for setting alarm
        rtc: ds1307: Fix alarm programming for mcp794xx
        rtc: isl12057: enable support for the standard "wakeup-source" property
        rtc: opal: enable support for the stardard "wakeup-source" property
        rtc: isl1208: Pass the IRQF_ONESHOT flag
        rtc: pcf8563: add CLKOUT to common clock framework
        rtc: davinci: remove incorrect reference to probe function
        rtc: at91rm9200: clear RTC alarm status flag prior to suspending
        rtc: pcf2127: remove useless driver version
        rtc: pcf2127: fix reading uninitialized value on RTC_READ_VL ioctl
        rtc: stmp3xxx: unify register access macros
        rtc: da9063: GPL copyright inconsistency fix
        rtc: pcf85063: return an error when date is invalid
        rtc: rx8025: remove unnecessary braces
        rtc: ds1343: remove misuse of IRQF_NO_SUSPEND flag
        rtc: ab8500: remove misuse of IRQF_NO_SUSPEND flag
        rtc: pl031: remove misuse of IRQF_NO_SUSPEND flag
        rtc: opal: fix type of token
        rtc: ds1390: Add trickle charger device tree binding
        ...

  commit 3b13866869b8407497d20a916450594e117583e6
  Merge: 3e82806 08bfb45
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 10:00:09 2015 -0800

      Merge tag 'fbdev-4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tomba/linux

      Pull fbdev updates from Tomi Valkeinen:
       - omap: fix hdmi audio configuration issue
       - ssd1307fb: add ssd1309 support
       - tridentfb: support DDC
       - gxt4500: enable support for non-PPC platforms

      * tag 'fbdev-4.4' of 
git://git.kernel.org/pub/scm/linux/kernel/git/tomba/linux:
        radeonfb: Deinline large functions
        gxt4500: enable panning
        gxt4500: Use arch_phys_wc_* for framebuffer
        gxt4500: fix color order
        gxt4500: fix 16bpp 565 mode
        gxt4500: enable on non-PPC architectures
        tridentfb: Add DDC support
        fb_ddc: Allow I2C adapters without SCL read capability
        fbdev: ssd1307fb: add ssd1309 support
        fbdev: ssd1307fb: alphabetize headers
        video/omap: remove invalid check
        OMAPDSS: hdmi: Reconfigure and restart audio when display is enabled

  commit 3e82806b97398d542a5e03bd94861f79ce10ecee
  Merge: bd4f203 816d220
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 10 09:33:06 2015 -0800

      Merge branch 'drm-next' of git://people.freedesktop.org/~airlied/linux

      Pull drm updates from Dave Airlie:
       "I Was Almost Tempted To Capitalise Every Word, but then I decided I
        couldn't read it myself!

        I've also got one pull request for the sti driver outstanding.  It
        relied on a commit in Greg's tree and I didn't find out in time, that
        commit is in your tree now so I might send that along once this is
        merged.

        I also had the accidental misfortune to have access to a Skylake on my
        desk for a few days, and I've had to encourage Intel to try harder,
        which seems to be happening now.

        Here is the main drm-next pull request for 4.4.

        Highlights:

        New driver:
              vc4 driver for the Rasberry Pi VPU.
              (From Eric Anholt at Broadcom.)

        Core:
              Atomic fbdev support
              Atomic helpers for runtime pm
              dp/aux i2c STATUS_UPDATE handling
              struct_mutex usage cleanups.
              Generic of probing support.

        Documentation:
              Kerneldoc for VGA switcheroo code.
              Rename to gpu instead of drm to reflect scope.

        i915:
              Skylake GuC firmware fixes
              HPD A support
              VBT backlight fallbacks
              Fastboot by default for some systems
              FBC work
              BXT/SKL workarounds
              Skylake deeper sleep state fixes

        amdgpu:
              Enable GPU scheduler by default
              New atombios opcodes
              GPUVM debugging options
              Stoney support.
              Fencing cleanups.

        radeon:
              More efficient CS checking

        nouveau:
              gk20a instance memory handling improvements.
              Improved PGOB detection and GK107 support
              Kepler GDDR5 PLL statbility improvement
              G8x/GT2xx reclock improvements
              new userspace API compatiblity fixes.

        virtio-gpu:
              Add 3D support - qemu 2.5 has it merged for it's gtk backend.

        msm:
              Initial msm88896 (snapdragon 8200)

        exynos:
              HDMI cleanups
              Enable mixer driver byt default
              Add DECON-TV support

        vmwgfx:
              Move to using memremap + fixes.

        rcar-du:
              Add support for R8A7793/4 DU

        armada:
              Remove support for non-component mode
              Improved plane handling
              Power savings while in DPMS off.

        tda998x:
              Remove unused slave encoder support
              Use more HDMI helpers
              Fix EDID read handling

        dwhdmi:
              Interlace video mode support for ipu-v3/dw_hdmi
              Hotplug state fixes
              Audio driver integration

        imx:
              More color formats support.

        tegra:
              Minor fixes/improvements"

      [ Merge fixup: remove unused variable 'dev' that had all uses removed in
        commit 4e270f088011: "drm/gem: Drop struct_mutex requirement from
        drm_gem_mmap_obj" ]

      * 'drm-next' of git://people.freedesktop.org/~airlied/linux: (764 commits)
        drm/vmwgfx: Relax irq locking somewhat
        drm/vmwgfx: Properly flush cursor updates and page-flips
        drm/i915/skl: disable display side power well support for now
        drm/i915: Extend DSL readout fix to BDW and SKL.
        drm/i915: Do graphics device reset under forcewake
        drm/i915: Skip fence installation for objects with rotated views (v4)
        vga_switcheroo: Drop client power state VGA_SWITCHEROO_INIT
        drm/amdgpu: group together common fence implementation
        drm/amdgpu: remove AMDGPU_FENCE_OWNER_MOVE
        drm/amdgpu: remove now unused fence functions
        drm/amdgpu: fix fence fallback check
        drm/amdgpu: fix stoping the scheduler timeout
        drm/amdgpu: cleanup on error in amdgpu_cs_ioctl()
        drm/i915: Fix locking around GuC firmware load
        drm/amdgpu: update Fiji's Golden setting
        drm/amdgpu: update Fiji's rev id
        drm/amdgpu: extract common code in vi_common_early_init
        drm/amd/scheduler: don't oops on failure to load
        drm/amdgpu: don't oops on failure to load (v2)
        drm/amdgpu: don't VT switch on suspend
        ...

  commit c1c534609fe8a859f9c8108a5591e6e8a97e34d1
  Author: Jens Axboe <axboe@xxxxxx>
  Date:   Tue Nov 10 10:14:38 2015 -0700

      direct-io: be sure to assign dio->bio_bdev for both paths

      btrfs sets ->submit_io(), and we failed to set the block dev for
      that path. That resulted in a potential NULL dereference when
      we later wait for IO in dio_await_one().

      Reported-by: kernel test robot <ying.huang@xxxxxxxxxxxxxxx>
      Signed-off-by: Jens Axboe <axboe@xxxxxx>

  commit e428abbbf616cd8fdd1162e4a624ad1d47b47544
  Author: Chen Gang <gang.chen.5i5j@xxxxxxxxx>
  Date:   Tue Nov 10 05:15:15 2015 +0800

      tracing: #ifdef out uses of max trace when CONFIG_TRACER_MAX_TRACE is not 
set

      tracing_max_lat_fops is used only when TRACER_MAX_TRACE enabled, so also
      swith the related code. The related warning with defconfig under x86_64:

          CC      kernel/trace/trace.o
        kernel/trace/trace.c:5466:37: warning: â??tracing_max_lat_fopsâ?? 
defined but not used [-Wunused-const-variable]
         static const struct file_operations tracing_max_lat_fops = {

      Signed-off-by: Chen Gang <gang.chen.5i5j@xxxxxxxxx>
      Signed-off-by: Steven Rostedt <rostedt@xxxxxxxxxxx>

  commit 7fc0564e3a8d16df096f48c9c6425ba84d945c6e
  Author: Andrew Elble <aweits@xxxxxxx>
  Date:   Thu Nov 5 20:42:43 2015 -0500

      nfsd: fix race with open / open upgrade stateids

      We observed multiple open stateids on the server for files that
      seemingly should have been closed.

      nfsd4_process_open2() tests for the existence of a preexisting
      stateid. If one is not found, the locks are dropped and a new
      one is created. The problem is that init_open_stateid(), which
      is also responsible for hashing the newly initialized stateid,
      doesn't check to see if another open has raced in and created
      a matching stateid. This fix is to enable init_open_stateid() to
      return the matching stateid and have nfsd4_process_open2()
      swap to that stateid and switch to the open upgrade path.
      In testing this patch, coverage to the newly created
      path indicates that the race was indeed happening.

      Signed-off-by: Andrew Elble <aweits@xxxxxxx>
      Reviewed-by: Jeff Layton <jlayton@xxxxxxxxxxxxxxx>
      Signed-off-by: J. Bruce Fields <bfields@xxxxxxxxxx>

  commit 34ed9872e745fa56f10e9bef2cf3d2336c6c8816
  Author: Andrew Elble <aweits@xxxxxxx>
  Date:   Thu Oct 15 12:07:28 2015 -0400

      nfsd: eliminate sending duplicate and repeated delegations

      We've observed the nfsd server in a state where there are
      multiple delegations on the same nfs4_file for the same client.
      The nfs client does attempt to DELEGRETURN these when they are presented 
to
      it - but apparently under some (unknown) circumstances the client does not
      manage to return all of them. This leads to the eventual
      attempt to CB_RECALL more than one delegation with the same nfs
      filehandle to the same client. The first recall will succeed, but the
      next recall will fail with NFS4ERR_BADHANDLE. This leads to the server
      having delegations on cl_revoked that the client has no way to FREE
      or DELEGRETURN, with resulting inability to recover. The state manager
      on the server will continually assert 
SEQ4_STATUS_RECALLABLE_STATE_REVOKED,
      and the state manager on the client will be looping unable to satisfy
      the server.

      List discussion also reports a race between OPEN and DELEGRETURN that
      will be avoided by only sending the delegation once to the
      client. This is also logically in accordance with RFC5561 9.1.1 and 10.2.

      So, let's:

      1.) Not hand out duplicate delegations.
      2.) Only send them to the client once.

      RFC 5561:

      9.1.1:
      "Delegations and layouts, on the other hand, are not associated with a
      specific owner but are associated with the client as a whole
      (identified by a client ID)."

      10.2:
      "...the stateid for a delegation is associated with a client ID and may be
      used on behalf of all the open-owners for the given client.  A
      delegation is made to the client as a whole and not to any specific
      process or thread of control within it."

      Reported-by: Eric Meddaugh <etmsys@xxxxxxx>
      Cc: Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
      Cc: Olga Kornievskaia <aglo@xxxxxxxxx>
      Signed-off-by: Andrew Elble <aweits@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: J. Bruce Fields <bfields@xxxxxxxxxx>

  commit 3e80dbcda7f3e1e349a779d7a14c0e08677c39fa
  Author: Jeff Layton <jlayton@xxxxxxxxxxxxxxx>
  Date:   Wed Nov 4 11:02:29 2015 -0500

      nfsd: remove recurring workqueue job to clean DRC

      We have a shrinker, we clean out the cache when nfsd is shut down, and
      prune the chains on each request. A recurring workqueue job seems like
      unnecessary overhead. Just remove it.

      Signed-off-by: Jeff Layton <jeff.layton@xxxxxxxxxxxxxxx>
      Signed-off-by: J. Bruce Fields <bfields@xxxxxxxxxx>

  commit ea833f5de3ab49a0aac79a16633fd510390b83a6
  Author: Stefan Hajnoczi <stefanha@xxxxxxxxxx>
  Date:   Tue Oct 27 10:23:30 2015 +0000

      SUNRPC: drop stale comment in svc_setup_socket()

      The svc_setup_socket() function does set the send and receive buffer
      sizes, so the comment is out-of-date:

      Signed-off-by: Stefan Hajnoczi <stefanha@xxxxxxxxxx>
      Signed-off-by: J. Bruce Fields <bfields@xxxxxxxxxx>

  commit 4717f133736dec10605da9e29e707144c8d486df
  Author: Grygorii Strashko <grygorii.strashko@xxxxxx>
  Date:   Tue Nov 10 11:58:12 2015 +0200

      genirq/PM: Restore system wake up from chained interrupts

      Commit e509bd7da149 ("genirq: Allow migration of chained interrupts
      by installing default action") breaks PCS wake up IRQ behaviour on
      TI OMAP based platforms (dra7-evm).

      TI OMAP IRQ wake up configuration:
      GIC-irqchip->PCM_IRQ
        |- omap_prcm_register_chain_handler
           |- PRCM-irqchip -> PRCM_IO_IRQ
              |- pcs_irq_chain_handler
                 |- pinctrl-irqchip -> PCS_uart1_wakeup_irq

      This happens because IRQ PM code (irq/pm.c) is expected to ignore
      chained interrupts by default:
        static bool suspend_device_irq(struct irq_desc *desc)
        {
        if (!desc->action || desc->no_suspend_depth)
                return false;
       - it's expected !desc->action = true for chained interrupts;

      but, after above change, all chained interrupt descriptors will
      have default action handler installed - chained_action.
      As result, chained interrupts will be silently disabled during system
      suspend.

      Hence, fix it by introducing helper function irq_desc_is_chained() and
      use it in suspend_device_irq() for chained interrupts identification
      and skip them, once detected.

      Fixes: e509bd7da149 ("genirq: Allow migration of chained interrupts..")
      Signed-off-by: Grygorii Strashko <grygorii.strashko@xxxxxx>
      Reviewed-by: Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
      Cc: Tony Lindgren <tony@xxxxxxxxxxx>
      Cc: <nsekhar@xxxxxx>
      Cc: <linux-arm-kernel@xxxxxxxxxxxxxxxxxxx>
      Cc: Tony Lindgren <tony@xxxxxxxxxxx>
      Link: 
http://lkml.kernel.org/r/1447149492-20699-1-git-send-email-grygorii.strashko@xxxxxx
      Signed-off-by: Thomas Gleixner <tglx@xxxxxxxxxxxxx>

  commit 3bfb7224566593219dbd67474dacb23ef7c080e3
  Author: David Daney <ddaney@xxxxxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 00:54:48 2015 +0200

      MIPS: OCTEON: omit ELF NOTE segments

      OCTEON Pre-SDK-1.8.1 bootloaders can not handle PT_NOTE program headers,
      so do not emit them.

      Before the patch:

      $ readelf --program-headers octeon-vmlinux

      Elf file type is EXEC (Executable file)
      Entry point 0xffffffff815d09d0
      There are 2 program headers, starting at offset 64

      Program Headers:
        Type           Offset             VirtAddr           PhysAddr
                       FileSiz            MemSiz              Flags  Align
        LOAD           0x0000000000001000 0xffffffff81100000 0xffffffff81100000
                       0x0000000000b57f80 0x0000000001b86360  RWE    1000
        NOTE           0x00000000004e02e0 0xffffffff815df2e0 0xffffffff815df2e0
                       0x0000000000000024 0x0000000000000024  R      4

      After the patch:

      $ readelf --program-headers octeon-vmlinux

      Elf file type is EXEC (Executable file)
      Entry point 0xffffffff815d09d0
      There are 1 program headers, starting at offset 64

      Program Headers:
        Type           Offset             VirtAddr           PhysAddr
                       FileSiz            MemSiz              Flags  Align
        LOAD           0x0000000000001000 0xffffffff81100000 0xffffffff81100000
                       0x0000000000b57f80 0x0000000001b86360  RWE    1000

      The patch was tested on DSR-1000N router.

      Signed-off-by: David Daney <ddaney@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Aaro Koskinen <aaro.koskinen@xxxxxx>
      Cc: Matthew Fortune <Matthew.Fortune@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11403/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 61379878320664ed44901b0537254e983fc7e4c4
  Author: Aaro Koskinen <aaro.koskinen@xxxxxx>
  Date:   Fri Oct 30 00:54:47 2015 +0200

      MIPS: vmlinux: discard .MIPS.abiflags

      Discard .MIPS.abiflags from vmlinux. It's not needed and will cause
      issues e.g. with old OCTEON bootloaders that cannot tolerate
      additional program headers.

      Before the patch:

      $ readelf --program-headers octeon-vmlinux

      Elf file type is EXEC (Executable file)
      Entry point 0xffffffff815d09d0
      There are 3 program headers, starting at offset 64

      Program Headers:
        Type           Offset             VirtAddr           PhysAddr
                       FileSiz            MemSiz              Flags  Align
        ABIFLAGS       0x00000000005e77f0 0xffffffff816e67f0 0xffffffff816e67f0
                       0x0000000000000018 0x0000000000000018  R      8
        LOAD           0x0000000000001000 0xffffffff81100000 0xffffffff81100000
                       0x0000000000b57f80 0x0000000001b86360  RWE    1000
        NOTE           0x00000000004e02e0 0xffffffff815df2e0 0xffffffff815df2e0
                       0x0000000000000024 0x0000000000000024  R      4

      After the patch:

      $ readelf --program-headers octeon-vmlinux

      Elf file type is EXEC (Executable file)
      Entry point 0xffffffff815d09d0
      There are 2 program headers, starting at offset 64

      Program Headers:
        Type           Offset             VirtAddr           PhysAddr
                       FileSiz            MemSiz              Flags  Align
        LOAD           0x0000000000001000 0xffffffff81100000 0xffffffff81100000
                       0x0000000000b57f80 0x0000000001b86360  RWE    1000
        NOTE           0x00000000004e02e0 0xffffffff815df2e0 0xffffffff815df2e0
                       0x0000000000000024 0x0000000000000024  R      4

      Suggested-by: Matthew Fortune <matthew.fortune@xxxxxxxxxx>
      Suggested-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
      Signed-off-by: Aaro Koskinen <aaro.koskinen@xxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Cc: David Daney <ddaney.cavm@xxxxxxxxx>
      Patchwork: https://patchwork.linux-mips.org/patch/11402/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 5dcd7b42f1d06c62b5589441e69cc77c26c8b725
  Author: Olliver Schinagl <oliver@xxxxxxxxxxx>
  Date:   Mon Oct 26 22:32:33 2015 +0100

      pwm: sunxi: Fix whitespace issue

      This patch changes no code, it just fixes the whitespacing. Operators
      should be separated from operands by a single space.

      Signed-off-by: Olliver Schinagl <oliver@xxxxxxxxxxx>
      Signed-off-by: Thierry Reding <thierry.reding@xxxxxxxxx>

  commit 65cdc6914a959d8e1ea562f05fb323a0b8cb7cb1
  Author: Olliver Schinagl <oliver@xxxxxxxxxxx>
  Date:   Mon Oct 26 22:32:37 2015 +0100

      pwm: sysfs: Make use of the DEVICE_ATTR_[RW][WO] macro's

      For the npwm property the PWM sysfs interface already made use of the
      DEVICE_ATTR_RO macro. This patch expands this to the other sysfs
      properties so that the code base is concise and makes use of this
      helpful macro.

      This has the advantage of slightly reducing the code size, improving
      readability and no longer using magic values for permissions.

      Signed-off-by: Olliver Schinagl <oliver@xxxxxxxxxxx>
      Signed-off-by: Thierry Reding <thierry.reding@xxxxxxxxx>

  commit 0344d0d69b3360ec551581c141c6599a0dcb5f27
  Author: Olliver Schinagl <oliver@xxxxxxxxxxx>
  Date:   Mon Oct 26 22:32:36 2015 +0100

      pwm: sysfs: Remove unnecessary temporary variable

      Use the result of pwm_is_enabled() directly instead of storing it in a
      temporary variable.

      Signed-off-by: Olliver Schinagl <oliver@xxxxxxxxxxx>
      Signed-off-by: Thierry Reding <thierry.reding@xxxxxxxxx>

  commit b68edac9217ef433470f78d3fb54a769ef95a45f
  Author: Thierry Reding <thierry.reding@xxxxxxxxx>
  Date:   Mon Oct 5 08:05:30 2015 +0200

      unicore32: nb0916: Use PWM lookup table

      Use a PWM lookup table to provide the PWM to the pwm-backlight device.
      The driver has a legacy code path that is required only because boards
      still use the legacy method of requesting PWMs by global ID. Replacing
      these usages allows that legacy fallback to be removed.

      Cc: Guan Xuetao <gxt@xxxxxxxxxxxxxxx>
      Signed-off-by: Thierry Reding <thierry.reding@xxxxxxxxx>

  commit cdc137089a752d496880526dad2569eaa6ba092d
  Author: Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx>
  Date:   Tue Oct 6 20:28:28 2015 +0900

      pwm: pwm-rcar: Revise the device tree binding document about compatible

      The compatible should be "renesas,pwm-rcar", and one the the SoC
      specific string. So, this patch revises the documentation.

      Reported-by: Rob Herring <robh+dt@xxxxxxxxxx>
      Signed-off-by: Yoshihiro Shimoda <yoshihiro.shimoda.uh@xxxxxxxxxxx>
      Acked-by: Rob Herring <robh@xxxxxxxxxx>
      Signed-off-by: Thierry Reding <thierry.reding@xxxxxxxxx>

  commit 655a03554cbdf73e8114367441f10858baac59bf
  Author: Thierry Reding <thierry.reding@xxxxxxxxx>
  Date:   Mon Oct 5 14:38:32 2015 +0200

      pwm: Return -ENODEV if no PWM lookup match is found

      When looking up a PWM using the lookup table, assume that all entries
      will have been added already, so failure to find a match means that no
      corresponding entry has been registered.

      This fixes an issue where -EPROBE_DEFER would be returned if the PWM
      lookup table is empty. After this fix, -EPROBE_DEFER is reserved for
      situations where no provider has yet registered for a matching entry.

      Signed-off-by: Thierry Reding <thierry.reding@xxxxxxxxx>

  commit f6649f7ad8efbaf82679ab0ccdfe837a65bd58d8
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Sun Oct 11 11:49:57 2015 +0200

      pwm: sun4i: Add support for PWM controller on sun5i SoCs

      The PWM controller on sun5i SoCs is identical to the one found on sun7i
      SoCs. On the A13 package only one of the 2 pins is routed to the outside,
      so only advertise one PWM channel there.

      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Acked-by: Maxime Ripard <maxime.ripard@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Thierry Reding <thierry.reding@xxxxxxxxx>

  commit d1cd21427747f15920cd726f5f67a07880e7dee4
  Author: Jonathan Richardson <jonathar@xxxxxxxxxxxx>
  Date:   Fri Oct 16 17:40:58 2015 -0700

      pwm: Set enable state properly on failed call to enable

      The pwm_enable() function didn't clear the enabled bit if a call to the
      driver's ->enable() callback returned an error. The result was that the
      state of the PWM core was wrong. Clearing the bit when enable returns
      an error ensures the state is properly set.

      Tested-by: Jonathan Richardson <jonathar@xxxxxxxxxxxx>
      Reviewed-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
      Signed-off-by: Jonathan Richardson <jonathar@xxxxxxxxxxxx>
      [thierry.reding@xxxxxxxxx: add missing kerneldoc for the lock]
      Signed-off-by: Thierry Reding <thierry.reding@xxxxxxxxx>

  commit a96036b8ef7df9f10cd575c0d78359bd33188e8e
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Tue Nov 10 11:55:36 2015 +0100

      KVM: x86: rename update_db_bp_intercept to update_bp_intercept

      Because #DB is now intercepted unconditionally, this callback
      only operates on #BP for both VMX and SVM.

      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit cbdb967af3d54993f5814f1cee0ed311a055377d
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Tue Nov 10 09:14:39 2015 +0100

      KVM: svm: unconditionally intercept #DB

      This is needed to avoid the possibility that the guest triggers
      an infinite stream of #DB exceptions (CVE-2015-8104).

      VMX is not affected: because it does not save DR6 in the VMCS,
      it already intercepts #DB unconditionally.

      Reported-by: Jan Beulich <jbeulich@xxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 54a20552e1eae07aa240fa370a0293e006b5faed
  Author: Eric Northup <digitaleric@xxxxxxxxxx>
  Date:   Tue Nov 3 18:03:53 2015 +0100

      KVM: x86: work around infinite loop in microcode when #AC is delivered

      It was found that a guest can DoS a host by triggering an infinite
      stream of "alignment check" (#AC) exceptions.  This causes the
      microcode to enter an infinite loop where the core never receives
      another interrupt.  The host kernel panics pretty quickly due to the
      effects (CVE-2015-5307).

      Signed-off-by: Eric Northup <digitaleric@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit d0e536d89395ecd8ab78fe999dc4d6f5d140ce46
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Wed Oct 28 02:39:56 2015 +0100

      context_tracking: avoid irq_save/irq_restore on guest entry and exit

      guest_enter and guest_exit must be called with interrupts disabled,
      since they take the vtime_seqlock with write_seq{lock,unlock}.
      Therefore, it is not necessary to check for exceptions, nor to
      save/restore the IRQ state, when context tracking functions are
      called by guest_enter and guest_exit.

      Split the body of context_tracking_entry and context_tracking_exit
      out to __-prefixed functions, and use them from KVM.

      Rik van Riel has measured this to speed up a tight vmentry/vmexit
      loop by about 2%.

      Cc: Andy Lutomirski <luto@xxxxxxxxxx>
      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Paul McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Rik van Riel <riel@xxxxxxxxxx>
      Tested-by: Rik van Riel <riel@xxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit f70cd6b07e629f367bb9b1ac9d0e3e669eb325c0
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Wed Oct 28 02:39:55 2015 +0100

      context_tracking: remove duplicate enabled check

      All calls to context_tracking_enter and context_tracking_exit
      are already checking context_tracking_is_enabled, except the
      context_tracking_user_enter and context_tracking_user_exit
      functions left in for the benefit of assembly calls.

      Pull the check up to those functions, by making them simple
      wrappers around the user_enter and user_exit inline functions.

      Cc: Frederic Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Paul McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Rik van Riel <riel@xxxxxxxxxx>
      Tested-by: Rik van Riel <riel@xxxxxxxxxx>
      Acked-by: Andy Lutomirski <luto@xxxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 8cfe9866960581303f244780945c5d12ecc4e5bc
  Author: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
  Date:   Tue Oct 20 15:39:12 2015 +0800

      KVM: VMX: Dump TSC multiplier in dump_vmcs()

      This patch enhances dump_vmcs() to dump the value of TSC multiplier
      field in VMCS.

      Signed-off-by: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit be7b263ea925324e54e48c3558d4719be5374053
  Author: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
  Date:   Tue Oct 20 15:39:11 2015 +0800

      KVM: VMX: Use a scaled host TSC for guest readings of MSR_IA32_TSC

      This patch makes kvm-intel to return a scaled host TSC plus the TSC
      offset when handling guest readings to MSR_IA32_TSC.

      Signed-off-by: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit ff2c3a1803775cc72dc6f624b59554956396b0ee
  Author: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
  Date:   Tue Oct 20 15:39:10 2015 +0800

      KVM: VMX: Setup TSC scaling ratio when a vcpu is loaded

      This patch makes kvm-intel module to load TSC scaling ratio into TSC
      multiplier field of VMCS when a vcpu is loaded, so that TSC scaling
      ratio can take effect if VMX TSC scaling is enabled.

      Signed-off-by: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 64903d6195cbfb051ce339d30848cc64babdba12
  Author: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
  Date:   Tue Oct 20 15:39:09 2015 +0800

      KVM: VMX: Enable and initialize VMX TSC scaling

      This patch exhances kvm-intel module to enable VMX TSC scaling and
      collects information of TSC scaling ratio during initialization.

      Signed-off-by: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 27cca94e032c1749825fdd9b6b379e4235cd52e1
  Author: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
  Date:   Tue Oct 20 15:39:08 2015 +0800

      KVM: x86: Use the correct vcpu's TSC rate to compute time scale

      This patch makes KVM use virtual_tsc_khz rather than the host TSC rate
      as vcpu's TSC rate to compute the time scale if TSC scaling is enabled.

      Signed-off-by: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 4ba76538dd52dd9b18b464e509cb8f3ed4ed993f
  Author: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
  Date:   Tue Oct 20 15:39:07 2015 +0800

      KVM: x86: Move TSC scaling logic out of call-back read_l1_tsc()

      Both VMX and SVM scales the host TSC in the same way in call-back
      read_l1_tsc(), so this patch moves the scaling logic from call-back
      read_l1_tsc() to a common function kvm_read_l1_tsc().

      Signed-off-by: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 58ea6767874e791a6c4f5c96c7d9155de4b1af28
  Author: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
  Date:   Tue Oct 20 15:39:06 2015 +0800

      KVM: x86: Move TSC scaling logic out of call-back adjust_tsc_offset()

      For both VMX and SVM, if the 2nd argument of call-back
      adjust_tsc_offset() is the host TSC, then adjust_tsc_offset() will scale
      it first. This patch moves this common TSC scaling logic to its caller
      adjust_tsc_offset_host() and rename the call-back adjust_tsc_offset() to
      adjust_tsc_offset_guest().

      Signed-off-by: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 07c1419a32bbba08cf1efb6d1ecaf24f174fa4c3
  Author: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
  Date:   Tue Oct 20 15:39:05 2015 +0800

      KVM: x86: Replace call-back compute_tsc_offset() with a common function

      Both VMX and SVM calculate the tsc-offset in the same way, so this
      patch removes the call-back compute_tsc_offset() and replaces it with a
      common function kvm_compute_tsc_offset().

      Signed-off-by: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 381d585c80e34988269bd7901ad910981e900be1
  Author: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
  Date:   Tue Oct 20 15:39:04 2015 +0800

      KVM: x86: Replace call-back set_tsc_khz() with a common function

      Both VMX and SVM propagate virtual_tsc_khz in the same way, so this
      patch removes the call-back set_tsc_khz() and replaces it with a common
      function.

      Signed-off-by: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 35181e86df97e4223f4a28fb33e2bcf3b73de141
  Author: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
  Date:   Tue Oct 20 15:39:03 2015 +0800

      KVM: x86: Add a common TSC scaling function

      VMX and SVM calculate the TSC scaling ratio in a similar logic, so this
      patch generalizes it to a common TSC scaling function.

      Signed-off-by: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
      [Inline the multiplication and shift steps into mul_u64_u64_shr.  Remove
       BUG_ON.  - Paolo]
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit ad721883e9c5f46cc5fa9496bc12c097c6238b4a
  Author: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
  Date:   Tue Oct 20 15:39:02 2015 +0800

      KVM: x86: Add a common TSC scaling ratio field in kvm_vcpu_arch

      This patch moves the field of TSC scaling ratio from the architecture
      struct vcpu_svm to the common struct kvm_vcpu_arch.

      Signed-off-by: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit bc9b961b357ea8129d75613b7af4fdf57ced9b9f
  Author: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
  Date:   Tue Oct 20 15:39:01 2015 +0800

      KVM: x86: Collect information for setting TSC scaling ratio

      The number of bits of the fractional part of the 64-bit TSC scaling
      ratio in VMX and SVM is different. This patch makes the architecture
      code to collect the number of fractional bits and other related
      information into variables that can be accessed in the common code.

      Signed-off-by: Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 893590c73426585dfd9f33358b19f18d9395fb2f
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Fri Nov 6 11:46:24 2015 +0100

      KVM: x86: declare a few variables as __read_mostly

      These include module parameters and variables that are set by
      kvm_x86_ops->hardware_setup.

      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 450869d6dbb72b370774fd4ee14c4f275bb08f98
  Author: Paolo Bonzini <pbonzini@xxxxxxxxxx>
  Date:   Wed Nov 4 13:41:21 2015 +0100

      KVM: x86: merge handle_mmio_page_fault and handle_mmio_page_fault_common

      They are exactly the same, except that handle_mmio_page_fault
      has an unused argument and a call to WARN_ON.  Remove the unused
      argument from the callers, and move the warning to (the former)
      handle_mmio_page_fault_common.

      Signed-off-by: Paolo Bonzini <pbonzini@xxxxxxxxxx>

  commit 2f34f173816c4d35b7bb225fed410585e55147fe
  Author: Yang Shi <yang.shi@xxxxxxxxxx>
  Date:   Mon Nov 9 10:09:55 2015 -0800

      arm64: remove redundant FRAME_POINTER kconfig option and force to select 
it

      FRAME_POINTER is defined in lib/Kconfig.debug, it is unnecessary to 
redefine it
      in arch/arm64/Kconfig.debug.

      ARM64 depends on frame pointer to get correct stack trace (also selecting
      ARCH_WANT_FRAME_POINTERS). However, the lib/Kconfig.debug definition 
allows
      such option to be disabled. This patch forces FRAME_POINTER always on on 
arm64.

      Signed-off-by: Yang Shi <yang.shi@xxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit bd4f203e433387d39be404b67ad02acf6f76b7bc
  Merge: e6604ec 1bde925
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 9 21:05:13 2015 -0800

      Merge branch 'akpm' (patches from Andrew)

      Merge third patch-bomb from Andrew Morton:
       "We're pretty much done over here - I'm still waiting for a nouveau
        merge so I can cleanly finish up Christoph's dma-mapping rework.

         - bunch of small misc stuff

         - fold abs64() into abs(), remove abs64()

         - new_valid_dev() cleanups

         - binfmt_elf_fdpic feature work"

      * emailed patches from Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>: (24 
commits)
        fs/binfmt_elf_fdpic.c: provide NOMMU loader for regular ELF binaries
        fs/stat.c: remove unnecessary new_valid_dev() check
        fs/reiserfs/namei.c: remove unnecessary new_valid_dev() check
        fs/nilfs2/namei.c: remove unnecessary new_valid_dev() check
        fs/ncpfs/dir.c: remove unnecessary new_valid_dev() check
        fs/jfs: remove unnecessary new_valid_dev() checks
        fs/hpfs/namei.c: remove unnecessary new_valid_dev() check
        fs/f2fs/namei.c: remove unnecessary new_valid_dev() check
        fs/ext2/namei.c: remove unnecessary new_valid_dev() check
        fs/exofs/namei.c: remove unnecessary new_valid_dev() check
        fs/btrfs/inode.c: remove unnecessary new_valid_dev() check
        fs/9p: remove unnecessary new_valid_dev() checks
        include/linux/kdev_t.h: old/new_valid_dev() can return bool
        include/linux/kdev_t.h: remove unused huge_valid_dev()
        kmap_atomic_to_page() has no users, remove it
        drivers/scsi/cxgbi: fix build with EXTRA_CFLAGS
        dma: remove external references to dma_supported
        Documentation/sysctl/vm.txt: fix misleading code reference of 
overcommit_memory
        remove abs64()
        kernel.h: make abs() work with 64-bit types
        ...

  commit ebaf31c46cce0dc8a6ed690b5456b295aa7586a6
  Author: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 13:09:00 2015 +0200

      platform/chrome: Fix i2c-designware adapter name

      Commit d80d134182ba ("i2c: designware: Move common probe code into
      i2c_dw_probe()") caused the I2C adapter lookup code here to fail for PCI
      enumerated i2c-designware because commit changed the adapter name but
      didn't update it here.

      Fix the I2C adapter lookup by using the "Synopsys DesignWare I2C adapter"
      name.

      Reported-by: Jeremiah Mahler <jmmahler@xxxxxxxxx>
      Fixes: d80d134182ba ("i2c: designware: Move common probe code into 
i2c_dw_probe()")
      Signed-off-by: Jarkko Nikula <jarkko.nikula@xxxxxxxxxxxxxxx>
      Tested-by: Jeremiah Mahler <jmmahler@xxxxxxxxx>
      Signed-off-by: Olof Johansson <olof@xxxxxxxxx>

  commit d69bbf88c8d0b367cf3e3a052f6daadf630ee566
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Mon Nov 9 17:51:23 2015 -0800

      net: fix a race in dst_release()

      Only cpu seeing dst refcount going to 0 can safely
      dereference dst->flags.

      Otherwise an other cpu might already have freed the dst.

      Fixes: 27b75c95f10d ("net: avoid RCU for NOCACHE dst")
      Reported-by: Greg Thelen <gthelen@xxxxxxxxxx>
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8c94ddbc139bf8511d79153a81191b07f8e03eb4
  Author: Justin Maggard <jmaggard10@xxxxxxxxx>
  Date:   Mon Nov 9 17:21:05 2015 -0800

      net: mvneta: Fix memory use after free.

      After changing an interface's MTU, then bringing the interface down and
      back up again, I immediately saw tons of kernel messages like below.
      The reason for this bad behavior is mvneta_rxq_drop_pkts(), which calls
      dma_unmap_single() on already-freed memory.  So we need to switch the
      order of those two operations.

      [  152.388518] BUG: Bad page state in process ifconfig  pfn:1b518
      [  152.388526] page:dff3dbc0 count:0 mapcount:0 mapping:  (null) index:0x0
      [  152.395178] flags: 0x200(arch_1)
      [  152.398441] page dumped because: PAGE_FLAGS_CHECK_AT_PREP flag set
      [  152.398446] bad because of flags:
      [  152.398450] flags: 0x200(arch_1)
      [  152.401716] Modules linked in:
      [  152.401728] CPU: 0 PID: 1453 Comm: ifconfig Tainted: P    B      O    
4.1.12.armada.1 #1
      [  152.401733] Hardware name: Marvell Armada 370/XP (Device Tree)
      [  152.401749] [<c0015b1c>] (unwind_backtrace) from [<c0011d8c>] 
(show_stack+0x10/0x14)
      [  152.401762] [<c0011d8c>] (show_stack) from [<c06aa68c>] 
(dump_stack+0x74/0x90)
      [  152.401772] [<c06aa68c>] (dump_stack) from [<c0096c08>] 
(bad_page+0xc4/0x124)
      [  152.401783] [<c0096c08>] (bad_page) from [<c0099378>] 
(get_page_from_freelist+0x4e4/0x644)
      [  152.401794] [<c0099378>] (get_page_from_freelist) from [<c0099620>] 
(__alloc_pages_nodemask+0x148/0x784)
      [  152.401805] [<c0099620>] (__alloc_pages_nodemask) from [<c00ac658>] 
(kmalloc_order+0x10/0x20)
      [  152.401818] [<c00ac658>] (kmalloc_order) from [<c04c6f44>] 
(mvneta_rx_refill+0xc4/0xe8)
      [  152.401830] [<c04c6f44>] (mvneta_rx_refill) from [<c04c96c0>] 
(mvneta_setup_rxqs+0x298/0x39c)
      [  152.401842] [<c04c96c0>] (mvneta_setup_rxqs) from [<c04c9904>] 
(mvneta_open+0x3c/0x150)
      [  152.401853] [<c04c9904>] (mvneta_open) from [<c0597764>] 
(__dev_open+0xac/0x124)
      [  152.401864] [<c0597764>] (__dev_open) from [<c05979e4>] 
(__dev_change_flags+0x8c/0x148)
      [  152.401875] [<c05979e4>] (__dev_change_flags) from [<c0597ac0>] 
(dev_change_flags+0x18/0x48)
      [  152.401886] [<c0597ac0>] (dev_change_flags) from [<c060d308>] 
(devinet_ioctl+0x620/0x6d0)
      [  152.401897] [<c060d308>] (devinet_ioctl) from [<c057d810>] 
(sock_ioctl+0x64/0x288)
      [  152.401908] [<c057d810>] (sock_ioctl) from [<c00dcb7c>] 
(do_vfs_ioctl+0x78/0x608)
      [  152.401918] [<c00dcb7c>] (do_vfs_ioctl) from [<c00dd170>] 
(SyS_ioctl+0x64/0x74)
      [  152.401930] [<c00dd170>] (SyS_ioctl) from [<c000f3a0>] 
(ret_fast_syscall+0x0/0x3c)

      Signed-off-by: Justin Maggard <jmaggard@xxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e6604ecb70d4b1dbc0372c6518b51c25c4b135a1
  Merge: 9d74288 941c3ff
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 9 18:11:22 2015 -0800

      Merge tag 'nfs-for-4.4-1' of 
git://git.linux-nfs.org/projects/trondmy/linux-nfs

      Pull NFS client updates from Trond Myklebust:
       "Highlights include:

        New features:
         - RDMA client backchannel from Chuck
         - Support for NFSv4.2 file CLONE using the btrfs ioctl

        Bugfixes + cleanups:
         - Move socket data receive out of the bottom halves and into a
           workqueue
         - Refactor NFSv4 error handling so synchronous and asynchronous RPC
           handles errors identically.
         - Fix a panic when blocks or object layouts reads return a bad data
           length
         - Fix nfsroot so it can handle a 1024 byte long path.
         - Fix bad usage of page offset in bl_read_pagelist
         - Various NFSv4 callback cleanups+fixes
         - Fix GETATTR bitmap verification
         - Support hexadecimal number for sunrpc debug sysctl files"

      * tag 'nfs-for-4.4-1' of 
git://git.linux-nfs.org/projects/trondmy/linux-nfs: (53 commits)
        Sunrpc: Supports hexadecimal number for sysctl files of sunrpc debug
        nfs: Fix GETATTR bitmap verification
        nfs: Remove unused xdr page offsets in getacl/setacl arguments
        fs/nfs: remove unnecessary new_valid_dev check
        SUNRPC: fix variable type
        NFS: Enable client side NFSv4.1 backchannel to use other transports
        pNFS/flexfiles: Add support for FF_FLAGS_NO_IO_THRU_MDS
        pNFS/flexfiles: When mirrored, retry failed reads by switching mirrors
        SUNRPC: Remove the TCP-only restriction in bc_svc_process()
        svcrdma: Add backward direction service for RPC/RDMA transport
        xprtrdma: Handle incoming backward direction RPC calls
        xprtrdma: Add support for sending backward direction RPC replies
        xprtrdma: Pre-allocate Work Requests for backchannel
        xprtrdma: Pre-allocate backward rpc_rqst and send/receive buffers
        SUNRPC: Abstract backchannel operations
        xprtrdma: Saving IRQs no longer needed for rb_lock
        xprtrdma: Remove reply tasklet
        xprtrdma: Use workqueue to process RPC/RDMA replies
        xprtrdma: Replace send and receive arrays
        xprtrdma: Refactor reply handler error handling
        ...

  commit 9d74288ca79249af4b906215788b37d52263b58b
  Merge: 123a28d 31dddd9
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 9 18:01:23 2015 -0800

      Merge tag 'gfs2-merge-window' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gfs2/linux-gfs2

      Pull gfs2 updates from Bob Peterson:
       "Here is a list of patches we've accumulated for GFS2 for the current
        upstream merge window.  There are only six patches this time:

         1. A cleanup patch from Andreas to remove the gl_spin #define in favor
            of its value for the sake of clarity.
         2. A fix from Andy Price to mark the inode dirty during fallocate.
         3. A fix from Andy Price to set s_mode on mount failures to prevent a
            stack trace.
         4  A patch from me to prevent a kernel BUG() in 
trans_add_meta/trans_add_data
            due to uninitialized storage.
         5. A patch from me to protecting our freeing of the in-core directory
            hash table to prevent double-free.
         6. A fix for a page/block rounding problem that resulted in a metadata
            coherency problem when the block size != page size"

        I've got a lot more patches in various stages of review and testing,
        but I'm afraid they'll have to wait until the next merge window.  So
        next time we're likely to have a lot more"

      * tag 'gfs2-merge-window' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gfs2/linux-gfs2:
        GFS2: Fix rgrp end rounding problem for bsize < page size
        GFS2: Protect freeing directory hash table with i_lock spin_lock
        gfs2: Remove gl_spin define
        gfs2: Add missing else in trans_add_meta/data
        GFS2: Set s_mode before parsing mount options
        GFS2: fallocate: do not rely on file_update_time to mark the inode dirty

  commit 0da39687a15403251bdfd1c6fb18025c0607326b
  Author: Tina Ruchandani <ruchandani.tina@xxxxxxxxx>
  Date:   Fri Oct 30 01:30:40 2015 -0700

      stex: Remove use of struct timeval

      Function stex_gettime uses 'struct timeval' whose tv_sec value
      will overflow on 32-bit systems in year 2038 and beyond. This patch
      replaces the use of struct timeval and do_gettimeofday with
      ktime_get_real_seconds, which returns a 64-bit seconds value.

      Suggested-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Tina Ruchandani <ruchandani.tina@xxxxxxxxx>
      Reviewed-by: Johannes Thumshirn <jthumshirn@xxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 5cb9b40d6127fed91b00abe44498f19f6ed6a77f
  Author: Peter Oberparleiter <oberpar@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 26 15:54:23 2015 +0100

      scsi_sysfs: Fix queue_ramp_up_period return code

      Writing a number to /sys/bus/scsi/devices/<sdev>/queue_ramp_up_period
      returns the value of that number instead of the number of bytes written.
      This behavior can confuse programs expecting POSIX write() semantics.
      Fix this by returning the number of bytes written instead.

      Signed-off-by: Peter Oberparleiter <oberpar@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Reviewed-by: Ewan D. Milne <emilne@xxxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 123a28d8b522b03dd97c1f791245924088616ac0
  Merge: 373ee21 5726b27
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 9 17:38:34 2015 -0800

      Merge branch 'for_linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs

      Pull ext2 fix from Jan Kara:
       "Fix for DAX on ext2"

      * 'for_linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-fs:
        ext2: Add locking for DAX faults

  commit edb394b512098e9d68923db8340230c3caa4893f
  Author: Chad Dupuis <chad.dupuis@xxxxxxxxxx>
  Date:   Mon Oct 19 15:40:41 2015 -0400

      bnx2fc: Update version number to 2.9.6.

      Signed-off-by: Giridhar Malavali <giridhar.malavali@xxxxxxxxxx>
      Signed-off-by: Chad Dupuis <chad.dupuis@xxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 50a87414695fc5009ba776a61f48d3d67ffdd6ed
  Author: Chad Dupuis <chad.dupuis@xxxxxxxxxx>
  Date:   Mon Oct 19 15:40:39 2015 -0400

      bnx2fc: Remove explicit logouts.

      Explicit logouts from bnx2fc were causing race conditions in either 
returning
      stale SCSI commands or not allowing a target to log back in.

      Signed-off-by: Giridhar Malavali <giridhar.malavali@xxxxxxxxxx>
      Signed-off-by: Chad Dupuis <chad.dupuis@xxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit adcf7dfbea80382457a552b4eb7aa2b7d9f76dac
  Author: Chad Dupuis <chad.dupuis@xxxxxxxxxx>
  Date:   Mon Oct 19 15:40:38 2015 -0400

      bnx2fc: Fix FCP RSP residual parsing.

      Signed-off-by: Giridhar Malavali <giridhar.malavali@xxxxxxxxxx>
      Signed-off-by: Chad Dupuis <chad.dupuis@xxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 1fffa19991b5a907303ca3f09cf3d8e91b0bd911
  Author: Chad Dupuis <chad.dupuis@xxxxxxxxxx>
  Date:   Mon Oct 19 15:40:37 2015 -0400

      bnx2fc: Set ELS transfer length correctly for middle path commands.

      Signed-off-by: Giridhar Malavali <giridhar.malavali@xxxxxxxxxx>
      Signed-off-by: Chad Dupuis <chad.dupuis@xxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit de909d8740b74bed0f8274cdb818f7ce410a4a4a
  Author: Chad Dupuis <chad.dupuis@xxxxxxxxxx>
  Date:   Mon Oct 19 15:40:36 2015 -0400

      bnx2fc: Remove 'NetXtreme II' from source files.

      Signed-off-by: Giridhar Malavali <giridhar.malavali@xxxxxxxxxx>
      Signed-off-by: Chad Dupuis <chad.dupuis@xxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 97586090a9d7bfb697a9a27ba9eca7e00a7d3b13
  Author: Chad Dupuis <chad.dupuis@xxxxxxxxxx>
  Date:   Mon Oct 19 15:40:35 2015 -0400

      bnx2fc: Update copyright for 2015.

      Signed-off-by: Giridhar Malavali <giridhar.malavali@xxxxxxxxxx>
      Signed-off-by: Chad Dupuis <chad.dupuis@xxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit d9b43a10f0d04564c6e05de3728c3cbba64c644d
  Author: Seymour, Shane M <shane.seymour@xxxxxxx>
  Date:   Mon Oct 12 04:31:17 2015 +0000

      st: allow debug output to be enabled or disabled via sysfs

      Change st driver to allow enabling or disabling debug output
      via sysfs file /sys/bus/scsi/drivers/st/debug_flag.

      Previously the only way to enable debug output was:

      1. loading the driver with the module parameter debug_flag=1
      2. an ioctl call (this method was also the only way to dynamically
      disable debug output).

      To use the ioctl you need a second tape drive (if you are
      actively testing the first tape drive) since a second process
      cannot open the first tape drive if it is in use.

      The this change is only functional if the value of the macro
      DEBUG in st.c is a non-zero value (which it is by default).

      Signed-off-by: Shane Seymour <shane.seymour@xxxxxxx>
      Reviewed-by: Laurence Oberman <oberman.l@xxxxxxxxx>
      Acked-by: Kai Mäkisara <kai.makisara@xxxxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit c59ab4e5afade13fdb65efc99c07fb8455aecba5
  Author: Sebastian Herbszt <herbszt@xxxxxx>
  Date:   Sun Oct 11 22:35:18 2015 +0200

      libfc: Use the correct function name in kernel-doc comment.

      Signed-off-by: Sebastian Herbszt <herbszt@xxxxxx>
      Acked-by: Vasu Dev <vasu.dev@xxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 64d513ac31bd02a3c9b69ef04444f36c196f9a9d
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Thu Oct 8 09:28:04 2015 +0100

      scsi: use host wide tags by default

      This patch changes the !blk-mq path to the same defaults as the blk-mq
      I/O path by always enabling block tagging, and always using host wide
      tags.  We've had blk-mq available for a few releases so bugs with
      this mode should have been ironed out, and this ensures we get better
      coverage of over tagging setup over different configs.

      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Acked-by: Jens Axboe <axboe@xxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 720ba808e9ca276919f566bbe2b4e09c79f25faa
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Oct 7 15:11:04 2015 +0200

      bnx2fc: reduce stack usage in __bnx2fc_enable

      When the bnx2fc driver was changed to read the npiv table from
      nvram, the stack of the __bnx2fc_enable function gained an
      additional 1028 byte structure that gcc rightfully warns about:

      drivers/scsi/bnx2fc/bnx2fc_fcoe.c: In function '__bnx2fc_enable':
      drivers/scsi/bnx2fc/bnx2fc_fcoe.c:2134:1: warning: the frame size of 1128 
bytes is larger than 1024 bytes [-Wframe-larger-than=]

      In order to avoid a possible kernel stack overflow and to get rid
      of the warning, this changes the function to use a dynamic allocation
      of the structure using kzalloc.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: 2971ff67bd3 ("bnx2fc: Read npiv table from nvram and create 
vports.")
      Acked-by: Chad Dupuis <chad.dupuis@xxxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit e79504236548e4c909959ba444f87a12224555ac
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Wed Sep 23 19:02:32 2015 +0530

      lpfc: fix memory leak and NULL dereference

      kmalloc() can return NULL and without checking we were dereferencing it.
      Moreover if kmalloc succeeds but the function fails in other parts then
      we were returning the error code but we missed freeing lcb_context.
      While at it fixed one related checkpatch warning.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Reviewed-by: James Smart <james.smart@xxxxxxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 481ebb3daac39c6c1a8f78f98b823a9c9591616f
  Author: Jiri Slaby <jslaby@xxxxxxx>
  Date:   Tue Oct 6 14:27:45 2015 +0200

      fcoe: use continue instead of goto+label

      There is a label pointing to the start of a while loop and a goto
      nested only in the loop. The goto jumps to the label in some cases.
      Replace the goto and the label by simple continue.

      Signed-off-by: Jiri Slaby <jslaby@xxxxxxx>
      Reviewed-by: Johannes Thumshirn <jthumshirn@xxxxxxx>
      Acked-by: Vasu Dev <vasu.dev@xxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 2a188cb42b43b7a579c2b6d0e9fa095182333540
  Author: Benjamin Rood <benjaminjrood@xxxxxxxxx>
  Date:   Fri Oct 30 16:01:37 2015 -0400

      pm80xx: remove the SCSI host before detaching from SAS transport

      Previously, when this module was unloaded via 'rmmod' with at least one
      drive attached, the SCSI error handler thread would become stuck in an
      infinite recovery loop and lockup the system, necessitating a reboot.

      Once the SAS layer is detached, the driver will fail any subsequent
      commands since the target devices are removed.  However, removing the
      SCSI host generates a SYNCHRONIZE CACHE (10) command, which was failed
      and left the error handler no method of recovery.

      This patch simply removes the SCSI host first so that no more commands
      can come down, prior to cleaning up the SAS layer.  Note that the stack
      is built up with the SCSI host first, and then the SAS layer.  Perhaps
      it should be reversed for symmetry, so that commands cannot be sent to
      the pm80xx driver prior to attaching the SAS layer?

      What was really strange about this bug was that it was introduced at
      commit cff549e4860f ("[SCSI]: proper state checking and module refcount
      handling in scsi_device_get").  This commit appears to tinker with how
      the reference counting is performed for SCSI device objects.  My theory
      is that prior to this commit, the refcount for a device object was
      blindly incremented at some point during the teardown process which
      coincidentially made the device stick around during the procedure, which
      also coincidentially made any commands sent to the driver not fail
      (since the device was technically still "there").  After this commit was
      applied, my theory is the refcount for the device object is not being
      incremented at a specific point anymore, which makes the device go away,
      and thus made the pm80xx driver fail any subsequent commands.

      You may also want to see the following for more details:

      [1] http://www.spinics.net/lists/linux-scsi/msg37208.html
      [2] http://marc.info/?l=linux-scsi&m=144416476406993&w=2

      Signed-off-by: Benjamin Rood <brood@xxxxxxxxxxxx>
      Acked-by: Jack Wang <jinpu.wang@xxxxxxxxxxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 08d8a817cfda033da9d2f2c5314ef9b993f60010
  Author: Jack Wang <jinpu.wang@xxxxxxxxxxxxxxxx>
  Date:   Thu Nov 5 12:34:18 2015 +0100

      mvsas: remove SCSI host before detaching from SAS transport

      commit cff549e4860f ("scsi: proper state checking and module refcount
      handling in scsi_device_get") the reference count of scsi device was
      changed, which could lead to when rmmod with at least on drive attached,
      SCSI error handle will run into infinite loop, and lockup the system.

      Fix it by remove scsi host first, this way scsi core will not send
      commands down after detaching SAS transport.

      This is a follow up fix for Benjamin's fix for pm80xx.

      See also:
      http://www.spinics.net/lists/linux-scsi/msg90088.html

      Signed-off-by: Jack Wang <jinpu.wang@xxxxxxxxxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 373ee21eecebc5c06786a803d99661a3657afcc7
  Merge: f4d6893 d0cf62f
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 9 16:37:00 2015 -0800

      Merge branch 'parisc-4.4-1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux

      Pull parisc updates from Helge Deller:
       "We have two patches in here:

         - The parisc uapi headers have been screwed up since quite some time.
           This patch fixes some bugs (e.g. endianess not respected in
           compat_semid64_ds) and cleans them up (e.g. uid_t was used instead
           of __kernel_uid_t) so that they can be used by userspace again.
           This patch has been reviewed by Arnd Bergmann and is scheduled for
           stable kernel series.

         - Drop the hpux_stat64 struct from stat.h, we do not support HP-UX
           binaries since kernel 4.0"

      * 'parisc-4.4-1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/deller/parisc-linux:
        parisc: Fixes and cleanups in kernel uapi header files
        parisc: Drop hpux_stat64 struct from stat.h header file

  commit 4024593d5d9cc0002184f1748b7cdb1705f08e05
  Author: Jack Wang <jinpu.wang@xxxxxxxxxxxxxxxx>
  Date:   Thu Nov 5 12:33:45 2015 +0100

      aic94xx: remove SCSI host before detaching from SAS transport

      commit cff549e4860f ("scsi: proper state checking and module refcount
      handling in scsi_device_get") the reference count of scsi device was
      changed, which could lead to when rmmod with at least on drive attached,
      SCSI error handle will run into infinite loop, and lockup the system.

      Fix it by remove scsi host first, this way scsi core will not send
      commands down after detaching SAS transport.

      This is a follow up fix for Benjamin's fix for pm80xx.

      See also:
      http://www.spinics.net/lists/linux-scsi/msg90088.html

      Signed-off-by: Jack Wang <jinpu.wang@xxxxxxxxxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit f4d68930a88219ffda60f137dcc858e4f5db6680
  Merge: 3510ca1 bb3fc5d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 9 16:36:10 2015 -0800

      Merge tag 'nios2-v4.4-rc1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/lftan/nios2

      Pull nios2 updates from Ley Foon Tan:

       - nios2: Remove unnecessary #ifdef guards
       - nios2: Switch to generic __xchg()
       - nios2: Fix unused variable warning

      * tag 'nios2-v4.4-rc1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/lftan/nios2:
        nios2: Remove unnecessary #ifdef guards
        nios2: Switch to generic __xchg()
        nios2: Fix unused variable warning

  commit 4927f1fcf9afc0043a4a88c98cb7cb6caec11ff1
  Author: Jack Wang <jinpu.wang@xxxxxxxxxxxxxxxx>
  Date:   Thu Nov 5 12:32:29 2015 +0100

      isci: remove SCSI host before detaching from SAS transport

      commit cff549e4860f ("scsi: proper state checking and module refcount
      handling in scsi_device_get") , the reference count of scsi device was
      changed, which could lead to when rmmod with at least on drive attached,
      SCSI error handle will run into infinite loop, and lockup the system.

      Fix it by remove scsi host first, this way scsi core will not send
      commands down after detaching SAS transport.

      This is a follow up fix for Benjamin's fix for pm80xx.

      See also:
      http://www.spinics.net/lists/linux-scsi/msg90088.html

      Signed-off-by: Jack Wang <jinpu.wang@xxxxxxxxxxxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 3e4dda70cc989a4f8079541972942609229e9f55
  Merge: 1b38b0e 8713181
  Author: Olof Johansson <olof@xxxxxxxxx>
  Date:   Mon Nov 9 16:35:19 2015 -0800

      Merge branch 'next/arm64' into next/dt

      Merging in the few patches I had kept separate from main next/dt, since 
others
      got merged here directly.

      * next/arm64:
        arm64: defconfig: Enable PCI generic host bridge by default
        arm64: Juno: Add support for the PCIe host bridge on Juno R1
        Documentation: of: Document the bindings used by Juno R1 PCIe host 
bridge
        arm64: dts: mt8173: Add clocks for SCPSYS unit
        arm64: dts: mt8173: Add subsystem clock controller device nodes
        + Linux 4.3-rc5

  commit bf2cf3baa20b0a6cd2d08707ef05dc0e992a8aa0
  Author: Bart Van Assche <bart.vanassche@xxxxxxxxxxx>
  Date:   Fri Sep 18 17:23:42 2015 -0700

      scsi: Fix a bdi reregistration race

      Unregister and reregister BDI devices in the proper order. This patch
      avoids that the following kernel warning can get triggered:

      WARNING: CPU: 7 PID: 203 at fs/sysfs/dir.c:31 sysfs_warn_dup+0x68/0x80()
      sysfs: cannot create duplicate filename '/devices/virtual/bdi/8:32'
      Workqueue: events_unbound async_run_entry_fn
      Call Trace:
      [<ffffffff814ff5a4>] dump_stack+0x4c/0x65
      [<ffffffff810746ba>] warn_slowpath_common+0x8a/0xc0
      [<ffffffff81074736>] warn_slowpath_fmt+0x46/0x50
      [<ffffffff81237ca8>] sysfs_warn_dup+0x68/0x80
      [<ffffffff81237d8e>] sysfs_create_dir_ns+0x7e/0x90
      [<ffffffff81291f58>] kobject_add_internal+0xa8/0x320
      [<ffffffff812923a0>] kobject_add+0x60/0xb0
      [<ffffffff8138c937>] device_add+0x107/0x5e0
      [<ffffffff8138d018>] device_create_groups_vargs+0xd8/0x100
      [<ffffffff8138d05c>] device_create_vargs+0x1c/0x20
      [<ffffffff8117f233>] bdi_register+0x63/0x2a0
      [<ffffffff8117f497>] bdi_register_dev+0x27/0x30
      [<ffffffff81281549>] add_disk+0x1a9/0x4e0
      [<ffffffffa00c5739>] sd_probe_async+0x119/0x1d0 [sd_mod]
      [<ffffffff8109a81a>] async_run_entry_fn+0x4a/0x140
      [<ffffffff81091078>] process_one_work+0x1d8/0x7c0
      [<ffffffff81091774>] worker_thread+0x114/0x460
      [<ffffffff81097878>] kthread+0xf8/0x110
      [<ffffffff8150801f>] ret_from_fork+0x3f/0x70

      See also patch "block: destroy bdi before blockdev is unregistered"
      (commit ID 6cd18e711dd8).

      Signed-off-by: Bart Van Assche <bart.vanassche@xxxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit ce664fb5d4628632a6eceb8e69cbf015b7fb232a
  Author: Gabriel Krisman Bertazi <krisman@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 16:26:10 2015 -0200

      ipr: Driver version 2.6.3.

      Signed-off-by: Gabriel Krisman Bertazi <krisman@xxxxxxxxxxxxxxxxxx>
      Acked-by: Brian King <brking@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Wen Xiong <wenxiong@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit cd9d715c28d0320acb53df68ebecc035cfe60913
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Wed Sep 16 19:36:20 2015 +0530

      FlashPoint: fix build warning

      We have been getting a warning about non ANSI function.
      warning: non-ANSI function declaration of function 
'FPT_SccbMgrTableInitAll'

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Acked-by: Khalid Aziz <khalid@xxxxxxxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 3510ca19a82ba4c6a17af79c1f0448622a406efa
  Merge: e4da7e9 afaa7c5
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 9 16:32:13 2015 -0800

      Merge tag 'xtensa-20151108' of git://github.com/czankel/xtensa-linux

      Pull xtensa updates from Chris Zankel:

       - fix remaining issues with noMMU cores
       - fix build for cores w/o cache or zero overhead loop options
       - fix boot of secondary cores in SMP configuration
       - add support for DMA to high memory pages
       - add dma_to_phys and phys_to_dma functions.

      * tag 'xtensa-20151108' of git://github.com/czankel/xtensa-linux:
        xtensa: implement dma_to_phys and phys_to_dma
        xtensa: support DMA to high memory
        Revert "xtensa: cache inquiry and unaligned cache handling functions"
        xtensa: drop unused sections and remapped reset handlers
        xtensa: fix secondary core boot in SMP
        xtensa: add FORCE_MAX_ZONEORDER to Kconfig
        xtensa: nommu: provide defconfig for de212 on kc705
        xtensa: nommu: xtfpga: add kc705 DTS
        xtensa: add de212 core variant
        xtensa: nommu: select HAVE_FUTEX_CMPXCHG
        xtensa: nommu: fix default memory start address
        xtensa: nommu: provide correct KIO addresses
        xtensa: nommu: fix USER_RING definition
        xtensa: xtfpga: fix integer overflow in TASK_SIZE
        xtensa: fix build for configs without cache options
        xtensa: fixes for configs without loop option

  commit 1a47af26b71e3267f6a5da0103cb65d00b1ff32e
  Author: Gabriel Krisman Bertazi <krisman@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 16:26:09 2015 -0200

      ipr: Issue Configure Cache Parameters command.

      Some new adapters require a special Configure Cache Parameters command
      to enable the adapter write cache, so send this during the adapter
      initialization if the adapter requires it.

      Signed-off-by: Gabriel Krisman Bertazi <krisman@xxxxxxxxxxxxxxxxxx>
      Acked-by: Brian King <brking@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Wen Xiong <wenxiong@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 1021b3ffad7682a09437cafffae32e26d0ce83e9
  Author: Gabriel Krisman Bertazi <krisman@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 16:26:08 2015 -0200

      ipr: Inquiry IOA page 0xC4 during initialization.

      Add an IOA Inquiry command for Page 0xC4 during IOA initialization to
      collect cache capabilities, particularly to check if Sync IOA Write
      Cache is supported.

      Inquiry will happen right after Cap Inquiry on page 0xD0; and will
      execute only if the "Supported Pages" field in Inquiry Page 0x0 shows
      support for Page 0xC4.  Otherwise, assume Sync IOA Write Cache is
      not supported.

      Signed-off-by: Gabriel Krisman Bertazi <krisman@xxxxxxxxxxxxxxxxxx>
      Acked-by: Brian King <brking@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Wen Xiong <wenxiong@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 4f92d01a642d27716f60cdab0fd3c527fb7cfb0f
  Author: Gabriel Krisman Bertazi <krisman@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 16:26:07 2015 -0200

      ipr: Don't set NO_ULEN_CHK bit when resource is a vset.

      According to the IPR specification, Inhibit Underlength Checking bit
      must be disabled when issuing commands to vsets.  Enabling it in this
      case might cause SCSI commands to fail with an Illegal Request, so make
      sure we keep this bit cleared when resource is a vset.

      Signed-off-by: Gabriel Krisman Bertazi <krisman@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Manoj Kumar <manoj@xxxxxxxxxxxxxxxxxx>
      Acked-by: Brian King <brking@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Wen Xiong <wenxiong@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit f41f1d994e0e2e0fab29c6f3f9c77350f1769166
  Author: Gabriel Krisman Bertazi <krisman@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Nov 3 16:26:06 2015 -0200

      ipr: Add delay to ensure coherent dumps.

      Add a holding pattern prior to collecting dump data, to wait for the IOA
      indication that the Mailbox register is stable and won't change without
      an explicit reset.  This ensures we'll be collecting meaningful dump
      data, even when dumping right after an adapter reset.

      In the event of a timeout, we still force the dump, since a partial dump
      still might be useful.

      Signed-off-by: Gabriel Krisman Bertazi <krisman@xxxxxxxxxxxxxxxxxx>
      Acked-by: Brian King <brking@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Wen Xiong <wenxiong@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 3209f9d780d137cdb54c85e0a776cb19e723a170
  Author: K. Y. Srinivasan <kys@xxxxxxxxxxxxx>
  Date:   Tue Oct 6 18:04:01 2015 -0700

      scsi: storvsc: Fix a bug in the handling of SRB status flags

      SRB status can have additional information. Mask these out before 
processing
      SRB status.

      This patch was sent as part of a collection of patches more than a year 
ago.
      While the rest of the patches in the set were comitted, this patch was 
not.
      I woulod like to thank Olaf for noticing that this patch was not committed
      upstream.

      Signed-off-by: K. Y. Srinivasan <kys@xxxxxxxxxxxxx>
      Reviewed-by: Long Li <longli@xxxxxxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 81988a0e6b031bc80da15257201810ddcf989e64
  Author: Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
  Date:   Thu Oct 1 14:53:17 2015 -0700

      storvsc: get rid of bounce buffer

      Storvsc driver needs to ensure there are no 'holes' in the presented
      sg list (all segments in the middle of the list need to be of PAGE_SIZE).
      When a hole is detected storvsc driver creates a 'bounce sgl' without
      holes and copies data over with copy_{to,from}_bounce_buffer() functions.
      Setting virt_boundary_mask to PAGE_SIZE - 1 guarantees we'll never see
      such holes so we can significantly simplify the driver. This is also
      supposed to bring us some performance improvement for certain workloads
      as we eliminate copying.

      Reported-by: Radim KrÄ?máÅ? <rkrcmar@xxxxxxxxxx>
      Signed-off-by: Vitaly Kuznetsov <vkuznets@xxxxxxxxxx>
      Reviewed-by: K. Y. Srinivasan <kys@xxxxxxxxxxxxx>
      Tested-by: Alex Ng <alexng@xxxxxxxxxxxxx>
      Signed-off-by: K. Y. Srinivasan <kys@xxxxxxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 8cf308e1225f5f93575f03cc4dbef24516fa81c9
  Author: K. Y. Srinivasan <kys@xxxxxxxxxxxxx>
  Date:   Mon Aug 31 08:21:54 2015 -0700

      storvsc: Don't set the SRB_FLAGS_QUEUE_ACTION_ENABLE flag

      Don't set the SRB_FLAGS_QUEUE_ACTION_ENABLE flag since we are not 
specifying
      tags.  Without this, the qlogic driver doesn't work properly with storvsc.

      Signed-off-by: K. Y. Srinivasan <kys@xxxxxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit e4da7e9a54649d6877ac23828ff93ce7191eae2c
  Merge: 50c3650 4ac3131
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 9 16:22:26 2015 -0800

      Merge branch 'for-next' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gerg/m68knommu

      Pull m68knommu/coldfire fix from Greg Ungerer:
       "Only a single patch, fixes brk area setup problem in nommu
        environments"

      * 'for-next' of 
git://git.kernel.org/pub/scm/linux/kernel/git/gerg/m68knommu:
        fs/binfmt_elf_fdpic.c: fix brk area overlap with stack on NOMMU

  commit ead1cbf92745b2b52846da56c9b3dd83ea4e718b
  Author: Mahesh Rajashekhara <Mahesh.Rajashekhara@xxxxxxxx>
  Date:   Fri Aug 28 06:38:41 2015 -0400

      aacraid: Update driver version

      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Murthy Bhat <Murthy.Bhat@xxxxxxxx>
      Reviewed-by: Karthikeya Sunkesula <Karthikeya.Sunkesula@xxxxxxxx>
      Signed-off-by: Mahesh Rajashekhara <Mahesh.Rajashekhara@xxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 84859c926b0828b07b2c3dd66a440ef4120a8668
  Author: Mahesh Rajashekhara <Mahesh.Rajashekhara@xxxxxxxx>
  Date:   Fri Aug 28 06:38:40 2015 -0400

      aacraid: Use pci_enable_msix_range()

      As pci_enable_msix() deprecated, replaced with pci_enable_msix_range()

      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Murthy Bhat <Murthy.Bhat@xxxxxxxx>
      Reviewed-by: Karthikeya Sunkesula <Karthikeya.Sunkesula@xxxxxxxx>
      Signed-off-by: Mahesh Rajashekhara <Mahesh.Rajashekhara@xxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit e728f8e39ffd8f7054e0718b4fb308c32235a5c2
  Author: Mahesh Rajashekhara <Mahesh.Rajashekhara@xxxxxxxx>
  Date:   Fri Aug 28 06:38:39 2015 -0400

      aacraid: IOCTL fix

      Driver blocks ioctls once it received shutdown/suspend request during
      suspend/hybernation. This patch unblocks ioctls on resume path.

      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Murthy Bhat <Murthy.Bhat@xxxxxxxx>
      Reviewed-by: Karthikeya Sunkesula <Karthikeya.Sunkesula@xxxxxxxx>
      Signed-off-by: Mahesh Rajashekhara <Mahesh.Rajashekhara@xxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 8b1462e0ebb677ee07da6c18f7047539ea6e449e
  Author: Mahesh Rajashekhara <Mahesh.Rajashekhara@xxxxxxxx>
  Date:   Fri Aug 28 06:38:38 2015 -0400

      aacraid: Reset irq affinity hints

      Reset irq affinity hints before releasing IRQ.
      Removed duplicate code of IRQ acquire/release.

      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Murthy Bhat <Murthy.Bhat@xxxxxxxx>
      Reviewed-by: Karthikeya Sunkesula <Karthikeya.Sunkesula@xxxxxxxx>
      Signed-off-by: Mahesh Rajashekhara <Mahesh.Rajashekhara@xxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 55b8760847a6e593ab67448ca79f83c4b1a9f012
  Author: Mahesh Rajashekhara <Mahesh.Rajashekhara@xxxxxxxx>
  Date:   Fri Aug 28 06:38:37 2015 -0400

      aacraid: Tune response path if IsFastPath bit set

      If 'IsFastPath' bit is set, then response path assumes no error and skips
      error check.

      Reviewed-by: Murthy Bhat <Murthy.Bhat@xxxxxxxx>
      Reviewed-by: Karthikeya Sunkesula <Karthikeya.Sunkesula@xxxxxxxx>
      Signed-off-by: Mahesh Rajashekhara <Mahesh.Rajashekhara@xxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit c6992781d9e8086d592f95870092a59042d111a2
  Author: Mahesh Rajashekhara <Mahesh.Rajashekhara@xxxxxxxx>
  Date:   Fri Aug 28 06:38:36 2015 -0400

      aacraid: Enable 64bit write to controller register

      If writeq() not supported, then do atomic two 32bit write

      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Murthy Bhat <Murthy.Bhat@xxxxxxxx>
      Reviewed-by: Karthikeya Sunkesula <Karthikeya.Sunkesula@xxxxxxxx>
      Signed-off-by: Mahesh Rajashekhara <Mahesh.Rajashekhara@xxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 9022d375bd22869ba3e5ad3635f00427cfb934fc
  Author: Mahesh Rajashekhara <Mahesh.Rajashekhara@xxxxxxxx>
  Date:   Fri Aug 28 06:38:35 2015 -0400

      aacraid: Change interrupt mode to MSI for Series 6

      This change always sets MSI interrupt mode for series-6 controller.

      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Murthy Bhat <Murthy.Bhat@xxxxxxxx>
      Reviewed-by: Karthikeya Sunkesula <Karthikeya.Sunkesula@xxxxxxxx>
      Signed-off-by: Mahesh Rajashekhara <Mahesh.Rajashekhara@xxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit de665f28f788ad72ff6a0ce6ac2721d77248b7cf
  Author: Mahesh Rajashekhara <Mahesh.Rajashekhara@xxxxxxxx>
  Date:   Fri Aug 28 06:38:34 2015 -0400

      aacraid: Add Power Management support

      * .suspend() and .resume() routines implemented in the driver
      * aac_release_resources() initiates firmware shutdown
      * aac_acquire_resources re-initializes the host interface

      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Murthy Bhat <Murthy.Bhat@xxxxxxxx>
      Reviewed-by: Karthikeya Sunkesula <Karthikeya.Sunkesula@xxxxxxxx>
      Signed-off-by: Mahesh Rajashekhara <Mahesh.Rajashekhara@xxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit fb5d40d4fca272286695c67da0a2d0a9d0954615
  Author: Mahesh Rajashekhara <Mahesh.Rajashekhara@xxxxxxxx>
  Date:   Fri Aug 28 06:38:33 2015 -0400

      aacraid: Fix for LD name and UID not exposed to OS

      Driver sends the right size of the response buffer.

      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Murthy Bhat <Murthy.Bhat@xxxxxxxx>
      Reviewed-by: Karthikeya Sunkesula <Karthikeya.Sunkesula@xxxxxxxx>
      Signed-off-by: Mahesh Rajashekhara <Mahesh.Rajashekhara@xxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 50c36504fc6090847f1fbdc7cf4852ae16d6e500
  Merge: ce5c2d2 d1189c6
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 9 15:53:39 2015 -0800

      Merge tag 'modules-next-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux

      Pull module updates from Rusty Russell:
       "Nothing exciting, minor tweaks and cleanups"

      * tag 'modules-next-for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux:
        scripts: [modpost] add new sections to white list
        modpost: Add flag -E for making section mismatches fatal
        params: don't ignore the rest of cmdline if parse_one() fails
        modpost: abort if a module symbol is too long

  commit fb9c54dc1f74708882505d288ed8e8857cb4b22d
  Author: John Soni Jose <sony.john@xxxxxxxxxxxxx>
  Date:   Thu Aug 20 04:44:31 2015 +0530

      be2iscsi: Bump the driver version

      Signed-off-by: John Soni Jose <sony.john@xxxxxxxxxxxxx>
      Reviewed-by: Mike Christie <michaelc@xxxxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 340c99e9adacfe1bc7dd50eec4d4fa3203288042
  Author: John Soni Jose <sony.john@xxxxxxxxxxxxx>
  Date:   Thu Aug 20 04:44:30 2015 +0530

      be2iscsi: Fix updating the next pointer during WRB posting

      While posting WRB the next_pointer of the current WRB should point
      to itself and the previous WRB next_pointer should point to the
      current WRB.

      The next pointer value was retrieved during alloc_pdu and was updated
      in wrb before ringing the doorbell. The fix retrieves the
      next_pointer just before ringing the doorbell and updates in the WRB.

      Signed-off-by: John Soni Jose <sony.john@xxxxxxxxxxxxx>
      Reviewed-by: Mike Christie <michaelc@xxxxxxxxxxx>
      Signed-off-by: James Bottomley <JBottomley@xxxxxxxx>

  commit 4e14e49a91e18098fd8ef30743972e0c3cb727c1
  Merge: 264e89a 7a29ac4
  Author: Dave Chinner <david@xxxxxxxxxxxxx>
  Date:   Tue Nov 10 10:20:48 2015 +1100

      Merge branch 'xfs-misc-fixes-for-4.4-3' into for-next

  commit 1bde925d235478cd5e70a7d9f94f3d8eb7c6362b
  Author: Rich Felker <dalias@xxxxxxxx>
  Date:   Mon Nov 9 14:59:01 2015 -0800

      fs/binfmt_elf_fdpic.c: provide NOMMU loader for regular ELF binaries

      The ELF binary loader in binfmt_elf.c requires an MMU, making it
      impossible to use regular ELF binaries on NOMMU archs.  However, the FDPIC
      ELF loader in binfmt_elf_fdpic.c is fully capable as a loader for plain
      ELF, which requires constant displacements between LOAD segments, since it
      already supports FDPIC ELF files flagged as needing constant displacement.

      This patch adjusts the FDPIC ELF loader to accept non-FDPIC ELF files on
      NOMMU archs.  They are treated identically to FDPIC ELF files with the
      constant-displacement flag bit set, except for personality, which must
      match the ABI of the program being loaded; the PER_LINUX_FDPIC personality
      controls how the kernel interprets function pointers passed to sigaction.

      Files that do not set a stack size requirement explicitly are given a
      default stack size (matching the amount of committed stack the normal ELF
      loader for MMU archs would give them) rather than being rejected; this is
      necessary because plain ELF files generally do not declare stack
      requirements in theit program headers.

      Only ET_DYN (PIE) format ELF files are supported, since loading at a fixed
      virtual address is not possible on NOMMU.

      This patch was developed and tested on J2 (SH2-compatible) but should
      be usable immediately on all archs where binfmt_elf_fdpic is
      available. Moreover, by providing dummy definitions of the
      elf_check_fdpic() and elf_check_const_displacement() macros for archs
      which lack an FDPIC ABI, it should be possible to enable building of
      binfmt_elf_fdpic on all other NOMMU archs and thereby give them ELF
      binary support, but I have not yet tested this.

      The motivation for using binfmt_elf_fdpic.c rather than adapting
      binfmt_elf.c to NOMMU is that the former already has all the necessary
      code to work properly on NOMMU and has already received widespread
      real-world use and testing. I hope this is not controversial.

      I'm not really happy with having to unset the FDPIC_FUNCPTRS
      personality bit when loading non-FDPIC ELF. This bit should really
      reset automatically on execve, since otherwise, executing non-ELF
      binaries (e.g. bFLT) from an FDPIC process will leave the personality
      in the wrong state and severely break signal handling. But that's a
      separate, existing bug and I don't know the right place to fix it.

      Signed-off-by: Rich Felker <dalias@xxxxxxxx>
      Acked-by: Greg Ungerer <gerg@xxxxxxxxxxx>
      Cc: Paul Gortmaker <paul.gortmaker@xxxxxxxxxxxxx>
      Cc: Matt Mackall <mpm@xxxxxxxxxxx>
      Cc: David Woodhouse <dwmw2@xxxxxxxxxxxxx>
      Cc: Alexander Viro <viro@xxxxxxxxxxxxxxxxxx>
      Cc: David Howells <dhowells@xxxxxxxxxx>
      Cc: Oleg Endo <oleg.endo@xxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 28f65708a57395799781f5c44863b50f99facbf2
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Mon Nov 9 14:58:58 2015 -0800

      fs/stat.c: remove unnecessary new_valid_dev() check

      new_valid_dev() always returns 1, so the !new_valid_dev() check is not
      needed.  Remove it.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Cc: Alexander Viro <viro@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 3cc5d9a905826e835d4d4dcd0faf922ab7b9eaf9
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Mon Nov 9 14:58:55 2015 -0800

      fs/reiserfs/namei.c: remove unnecessary new_valid_dev() check

      new_valid_dev() always returns 1, so the !new_valid_dev() check is not
      needed.  Remove it.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Cc: Alexander Viro <viro@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 3348a172befd1b78025e30037bc383514be8d32f
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Mon Nov 9 14:58:53 2015 -0800

      fs/nilfs2/namei.c: remove unnecessary new_valid_dev() check

      new_valid_dev() always returns 1, so the !new_valid_dev() check is not
      needed.  Remove it.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Cc: Alexander Viro <viro@xxxxxxxxxxxxxxxxxx>
      Acked-by: Ryusuke Konishi <konishi.ryusuke@xxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 4467e29f0c48d0fc3e164c39c1eccd1ce230fbe4
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Mon Nov 9 14:58:50 2015 -0800

      fs/ncpfs/dir.c: remove unnecessary new_valid_dev() check

      new_valid_dev() always returns 1, so the !new_valid_dev() check is not
      needed.  Remove it.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Cc: Alexander Viro <viro@xxxxxxxxxxxxxxxxxx>
      Cc: Petr Vandrovec <petr@xxxxxxxxxxxxxx>
      Cc: Jan Kara <jack@xxxxxxx>
      Cc: Jens Axboe <axboe@xxxxxx>
      Cc: Tejun Heo <tj@xxxxxxxxxx>
      Cc: Fabian Frederick <fabf@xxxxxxxxx>
      Cc: David Howells <dhowells@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit a2a17044094d0816d56a9e151bbf146d89a23010
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Mon Nov 9 14:58:47 2015 -0800

      fs/jfs: remove unnecessary new_valid_dev() checks

      new_valid_dev() always returns 1, so the !new_valid_dev() checks are not
      needed.  Remove them.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Cc: Alexander Viro <viro@xxxxxxxxxxxxxxxxxx>
      Acked-by: Dave Kleikamp <dave.kleikamp@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit fdca5e6a6d0a6600ff24d6d9c843e5aee637f29f
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Mon Nov 9 14:58:44 2015 -0800

      fs/hpfs/namei.c: remove unnecessary new_valid_dev() check

      new_valid_dev() always returns 1, so the !new_valid_dev() check is not
      needed.  Remove it.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Cc: Alexander Viro <viro@xxxxxxxxxxxxxxxxxx>
      Cc: Mikulas Patocka <mikulas@xxxxxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit a8415e4b130e0cd919c7c6584bdf27660f3ff295
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Mon Nov 9 14:58:42 2015 -0800

      fs/f2fs/namei.c: remove unnecessary new_valid_dev() check

      new_valid_dev() always returns 1, so the !new_valid_dev() check is not
      needed.  Remove it.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Cc: Alexander Viro <viro@xxxxxxxxxxxxxxxxxx>
      Cc: Jaegeuk Kim <jaegeuk@xxxxxxxxxx>
      Cc: Changman Lee <cm224.lee@xxxxxxxxxxx>
      Cc: Chao Yu <chao2.yu@xxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit d7df00072e64f972e0f7eb4fea78eed2da9c0e59
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Mon Nov 9 14:58:39 2015 -0800

      fs/ext2/namei.c: remove unnecessary new_valid_dev() check

      new_valid_dev() always returns 1, so the !new_valid_dev() check is not
      needed.  Remove it.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Cc: Alexander Viro <viro@xxxxxxxxxxxxxxxxxx>
      Cc: Jan Kara <jack@xxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 5738939289d58829fd8b73f8c26b34ab08539fcf
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Mon Nov 9 14:58:37 2015 -0800

      fs/exofs/namei.c: remove unnecessary new_valid_dev() check

      new_valid_dev() always returns 1, so the !new_valid_dev() check is not
      needed.  Remove it.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Cc: Alexander Viro <viro@xxxxxxxxxxxxxxxxxx>
      Acked-by: Boaz Harrosh <ooo@xxxxxxxxxxxxxxx>
      Cc: Benny Halevy <bhalevy@xxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 7cac0a85992229a631d4e01934d2e1c042566189
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Mon Nov 9 14:58:34 2015 -0800

      fs/btrfs/inode.c: remove unnecessary new_valid_dev() check

      new_valid_dev() always returns 1, so the !new_valid_dev() check is not
      needed.  Remove it.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Cc: Alexander Viro <viro@xxxxxxxxxxxxxxxxxx>
      Cc: Chris Mason <clm@xxxxxx>
      Cc: Josef Bacik <jbacik@xxxxxx>
      Acked-by: David Sterba <dsterba@xxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 349c7037b15927eed3cc8a5dbc08639dea654ea5
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Mon Nov 9 14:58:31 2015 -0800

      fs/9p: remove unnecessary new_valid_dev() checks

      new_valid_dev() always returns 1, so the !new_valid_dev() check is not
      needed.  Remove it.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Cc: Alexander Viro <viro@xxxxxxxxxxxxxxxxxx>
      Cc: Eric Van Hensbergen <ericvh@xxxxxxxxx>
      Cc: Ron Minnich <rminnich@xxxxxxxxxx>
      Cc: Latchesar Ionkov <lucho@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 8b9758b9c6f65f55c94370636c04e976edc93e1a
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Mon Nov 9 14:58:28 2015 -0800

      include/linux/kdev_t.h: old/new_valid_dev() can return bool

      Make old/new_valid_dev return bool due to these two particular functions
      only using either one or zero as their return value.

      No functional change.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Cc: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 7bc4f1d281bc1f807fd0c9aaa2f2d333b6508790
  Author: Yaowei Bai <bywxiaobai@xxxxxxx>
  Date:   Mon Nov 9 14:58:26 2015 -0800

      include/linux/kdev_t.h: remove unused huge_valid_dev()

      There's no user of huge_valid_dev() any more, so remove it.

      No functional change.

      Signed-off-by: Yaowei Bai <bywxiaobai@xxxxxxx>
      Cc: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 77c5b5da02f0a30d61144a546c4ef3657e3b817d
  Author: Nicolas Pitre <nicolas.pitre@xxxxxxxxxx>
  Date:   Mon Nov 9 14:58:23 2015 -0800

      kmap_atomic_to_page() has no users, remove it

      Removal started in commit 5bbeed12bdc3 ("sparc32: drop unused
      kmap_atomic_to_page").  Let's do it across the whole tree.

      Signed-off-by: Nicolas Pitre <nico@xxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit ce1fb04153e6d27b5f0e23a30bacaacfcae8195f
  Author: Jiri Slaby <jslaby@xxxxxxx>
  Date:   Mon Nov 9 14:58:21 2015 -0800

      drivers/scsi/cxgbi: fix build with EXTRA_CFLAGS

      EXTRA_CFLAGS are intended to be used on the command line, not by Kbuild.
      In case of cxgbi drivers, use of EXTRA_CFLAGS results in a compilation
      failure:

        drivers/scsi/cxgbi/cxgb4i/cxgb4i.c:24:21: fatal error: t4_regs.h: No 
such file or directory

      when building like:

      $ make drivers/scsi/cxgbi/ EXTRA_CFLAGS=-Wwhatever

      Use ccflags-y instead of EXTRA_CFLAGS.

      Signed-off-by: Jiri Slaby <jslaby@xxxxxxx>
      Reviewed-by: Johannes Thumshirn <jthumshirn@xxxxxxx>
      Cc: James Bottomley <James.Bottomley@xxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 0e77acef8ec21c82530214728631fb7a416e75c7
  Author: Christoph Hellwig <hch@xxxxxx>
  Date:   Mon Nov 9 14:58:18 2015 -0800

      dma: remove external references to dma_supported

      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Acked-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
      Cc: Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit c56050c700d18f18fbec934f56069150bcec3709
  Author: Chun Chen <chenchun.feed@xxxxxxxxx>
  Date:   Mon Nov 9 14:58:15 2015 -0800

      Documentation/sysctl/vm.txt: fix misleading code reference of 
overcommit_memory

      The origin document references to cap_vm_enough_memory is because
      cap_vm_enough_memory invoked __vm_enough_memory before and it no longer
      does now.

      Signed-off-by: Chun Chen <ramichen@xxxxxxxxxxx>
      Acked-by: Michal Hocko <mhocko@xxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 79211c8ed19c055ca105502c8733800d442a0ae6
  Author: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 9 14:58:13 2015 -0800

      remove abs64()

      Switch everything to the new and more capable implementation of abs().
      Mainly to give the new abs() a bit of a workout.

      Cc: Michal Nazarewicz <mina86@xxxxxxxxxx>
      Cc: John Stultz <john.stultz@xxxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit c8299cb605b27dd5a49f7a69e48fd23e5a206298
  Author: Michal Nazarewicz <mina86@xxxxxxxxxx>
  Date:   Mon Nov 9 14:58:10 2015 -0800

      kernel.h: make abs() work with 64-bit types

      For 64-bit arguments, the abs macro casts it to an int which leads to
      lost precision and may cause incorrect results.  To deal with 64-bit
      types abs64 macro has been introduced but still there are places where
      abs macro is used incorrectly.

      To deal with the problem, expand abs macro such that it operates on s64
      type when dealing with 64-bit types while still returning long when
      dealing with smaller types.

      This fixes one known bug (per John):

      The internal clocksteering done for fine-grained error correction uses a
      : logarithmic approximation, so any time adjtimex() adjusts the clock
      : steering, timekeeping_freqadjust() quickly approximates the correct 
clock
      : frequency over a series of ticks.
      :
      : Unfortunately, the logic in timekeeping_freqadjust(), introduced in 
commit
      : dc491596f639438 (Rework frequency adjustments to work better w/ nohz),
      : used the abs() function with a s64 error value to calculate the size of
      : the approximated adjustment to be made.
      :
      : Per include/linux/kernel.h: "abs() should not be used for 64-bit types
      : (s64, u64, long long) - use abs64()".
      :
      : Thus on 32-bit platforms, this resulted in the clocksteering to take a
      : quite dampended random walk trying to converge on the proper frequency,
      : which caused the adjustments to be made much slower then intended (most
      : easily observed when large adjustments are made).

      Signed-off-by: Michal Nazarewicz <mina86@xxxxxxxxxx>
      Reported-by: John Stultz <john.stultz@xxxxxxxxxx>
      Tested-by: John Stultz <john.stultz@xxxxxxxxxx>
      Cc: Ingo Molnar <mingo@xxxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Masami Hiramatsu <masami.hiramatsu.pt@xxxxxxxxxxx>
      Cc: Peter Zijlstra <a.p.zijlstra@xxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 9c2d5eebfe3421a31499b552800041e684639076
  Author: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
  Date:   Mon Nov 9 14:58:06 2015 -0800

      sparc/sparc64: allocate sys_membarrier system call number

      Signed-off-by: Mathieu Desnoyers <mathieu.desnoyers@xxxxxxxxxxxx>
      Acked-by: "David S. Miller" <davem@xxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 784567f4b0cb0df300aa9a87de2596df5c0038b3
  Author: Eric B Munson <emunson@xxxxxxxxxx>
  Date:   Mon Nov 9 14:58:03 2015 -0800

      mips: add entry for new mlock2 syscall

      A previous commit introduced the new mlock2 syscall, add entries for the
      MIPS architecture.

      Signed-off-by: Eric B Munson <emunson@xxxxxxxxxx>
      Acked-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>
      Cc: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Cc: Guenter Roeck <linux@xxxxxxxxxxxx>
      Cc: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Cc: Jonathan Corbet <corbet@xxxxxxx>
      Cc: Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx>
      Cc: Michael Kerrisk <mtk.manpages@xxxxxxxxx>
      Cc: Michal Hocko <mhocko@xxxxxxx>
      Cc: Shuah Khan <shuahkh@xxxxxxxxxxxxxxx>
      Cc: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
      Cc: Vlastimil Babka <vbabka@xxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit dbce03b9e3e61e122451a7aa4e6900d5f0bb5993
  Author: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
  Date:   Mon Nov 9 14:58:00 2015 -0800

      fs/writeback.c: fix kernel-doc warnings

      Fix kernel-doc warnings in fs/fs-writeback.c by moving a #define macro to
      after the function's opening brace.  Also #undef this macro at the end of
      the function.

        ../fs/fs-writeback.c:1984: warning: Excess function parameter 'inode' 
description in 'I_DIRTY_INODE'
        ../fs/fs-writeback.c:1984: warning: Excess function parameter 'flags' 
description in 'I_DIRTY_INODE'

      Signed-off-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Cc: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 30fdc8ee0ef0d9dffaeaccb202f79d69e1291cbd
  Author: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
  Date:   Mon Nov 9 14:57:58 2015 -0800

      fs/inode.c: fix kernel-doc warning

      Fix kernel-doc warning in fs/inode.c:

        ../fs/inode.c:1606: warning: No description found for parameter 'inode'

      Signed-off-by: Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
      Cc: Al Viro <viro@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit 7a29ac474a47eb8cf212b45917683ae89d6fa13b
  Author: Chris Mason <clm@xxxxxx>
  Date:   Tue Nov 10 10:10:34 2015 +1100

      xfs: give all workqueues rescuer threads

      We're consistently hitting deadlocks here with XFS on recent kernels.
      After some digging through the crash files, it looks like everyone in
      the system is waiting for XFS to reclaim memory.

      Something like this:

      PID: 2733434  TASK: ffff8808cd242800  CPU: 19  COMMAND: "java"
       #0 [ffff880019c53588] __schedule at ffffffff818c4df2
       #1 [ffff880019c535d8] schedule at ffffffff818c5517
       #2 [ffff880019c535f8] _xfs_log_force_lsn at ffffffff81316348
       #3 [ffff880019c53688] xfs_log_force_lsn at ffffffff813164fb
       #4 [ffff880019c536b8] xfs_iunpin_wait at ffffffff8130835e
       #5 [ffff880019c53728] xfs_reclaim_inode at ffffffff812fd453
       #6 [ffff880019c53778] xfs_reclaim_inodes_ag at ffffffff812fd8c7
       #7 [ffff880019c53928] xfs_reclaim_inodes_nr at ffffffff812fe433
       #8 [ffff880019c53958] xfs_fs_free_cached_objects at ffffffff8130d3b9
       #9 [ffff880019c53968] super_cache_scan at ffffffff811a6f73
      #10 [ffff880019c539c8] shrink_slab at ffffffff811460e6
      #11 [ffff880019c53aa8] shrink_zone at ffffffff8114a53f
      #12 [ffff880019c53b48] do_try_to_free_pages at ffffffff8114a8ba
      #13 [ffff880019c53be8] try_to_free_pages at ffffffff8114ad5a
      #14 [ffff880019c53c78] __alloc_pages_nodemask at ffffffff8113e1b8
      #15 [ffff880019c53d88] alloc_kmem_pages_node at ffffffff8113e671
      #16 [ffff880019c53dd8] copy_process at ffffffff8104f781
      #17 [ffff880019c53ec8] do_fork at ffffffff8105129c
      #18 [ffff880019c53f38] sys_clone at ffffffff810515b6
      #19 [ffff880019c53f48] stub_clone at ffffffff818c8e4d

      xfs_log_force_lsn is waiting for logs to get cleaned, which is waiting
      for IO, which is waiting for workers to complete the IO which is waiting
      for worker threads that don't exist yet:

      PID: 2752451  TASK: ffff880bd6bdda00  CPU: 37  COMMAND: "kworker/37:1"
       #0 [ffff8808d20abbb0] __schedule at ffffffff818c4df2
       #1 [ffff8808d20abc00] schedule at ffffffff818c5517
       #2 [ffff8808d20abc20] schedule_timeout at ffffffff818c7c6c
       #3 [ffff8808d20abcc0] wait_for_completion_killable at ffffffff818c6495
       #4 [ffff8808d20abd30] kthread_create_on_node at ffffffff8106ec82
       #5 [ffff8808d20abdf0] create_worker at ffffffff8106752f
       #6 [ffff8808d20abe40] worker_thread at ffffffff810699be
       #7 [ffff8808d20abec0] kthread at ffffffff8106ef59
       #8 [ffff8808d20abf50] ret_from_fork at ffffffff818c8ac8

      I think we should be using WQ_MEM_RECLAIM to make sure this thread
      pool makes progress when we're not able to allocate new workers.

      [dchinner: make all workqueues WQ_MEM_RECLAIM]

      Signed-off-by: Chris Mason <clm@xxxxxx>
      Reviewed-by: Dave Chinner <dchinner@xxxxxxxxxx>
      Signed-off-by: Dave Chinner <david@xxxxxxxxxxxxx>

  commit 848ccfc8fe0e8ae572ed0d8a9a2c3a0cda3bce3b
  Author: Brian Foster <bfoster@xxxxxxxxxx>
  Date:   Tue Nov 10 10:10:33 2015 +1100

      xfs: fix log recovery op header validation assert

      Commit 89cebc84 ("xfs: validate transaction header length on log
      recovery") added additional validation of the on-disk op header length
      to protect from buffer overflow during log recovery. It accounts for the
      fact that the transaction header can be split across multiple op
      headers. It added an assert for when this occurs that verifies the
      length of the second part of a split transaction header is less than a
      full transaction header. In other words, it expects that the first op
      header of a split transaction header includes at least some portion of
      the transaction header.

      This expectation is not always valid as a zero-length op header can
      exist for the first op header of a split transaction header (see
      xlog_recover_add_to_trans() for details). This means that the second op
      header can have a valid, full length transaction header and thus the
      full header is copied in xlog_recover_add_to_cont_trans(). Fix the
      assert in xlog_recover_add_to_cont_trans() to handle this case correctly
      and require that the op header length is less than or equal to a full
      transaction header.

      Signed-off-by: Brian Foster <bfoster@xxxxxxxxxx>
      Reviewed-by: Dave Chinner <dchinner@xxxxxxxxxx>
      Signed-off-by: Dave Chinner <david@xxxxxxxxxxxxx>

  commit edfb8ebce225a0638cf62591d4ccb502f052ffd4
  Author: Andreas Gruenbacher <agruenba@xxxxxxxxxx>
  Date:   Tue Nov 10 10:09:45 2015 +1100

      xfs: Fix error path in xfs_get_acl

      Error codes from xfs_attr_get other than -ENOATTR were not properly
      reported.  Fix that.

      In addition, the declaration of struct xfs_inode in xfs_acl.h isn't 
needed.

      Signed-off-by: Andreas Gruenbacher <agruenba@xxxxxxxxxx>
      Reviewed-by: Dave Chinner <dchinner@xxxxxxxxxx>
      Signed-off-by: Dave Chinner <david@xxxxxxxxxxxxx>

  commit f06fcc7155dcbcd9b697d499595a2c1a3945bda2
  Author: Yaniv Gardi <ygardi@xxxxxxxxxxxxxx>
  Date:   Wed Oct 28 13:15:51 2015 +0200

      scsi: ufs-qcom: add QUniPro hardware support and power optimizations

      New revisions of UFS host controller supports the new UniPro
      hardware controller (referred as QUniPro). This patch adds
      the support to enable this new UniPro controller hardware.

      This change also adds power optimization for bus scaling feature,
      as well as support for HS-G3 power mode.

      Reviewed-by: Subhash Jadavani <subhashj@xxxxxxxxxxxxxx>
      Reviewed-by: Gilad Broner <gbroner@xxxxxxxxxxxxxx>
      Signed-off-by: Yaniv Gardi <ygardi@xxxxxxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 6e3fd44d7b7638e0f7e3331eaf7f90f3a629f3e7
  Author: Yaniv Gardi <ygardi@xxxxxxxxxxxxxx>
  Date:   Wed Oct 28 13:15:50 2015 +0200

      scsi: ufs-qcom: add debug prints for test bus

      Adds support for configuring and reading the test bus and debug
      registers. This change also adds another vops in order to print the
      debug registers.

      Reviewed-by: Subhash Jadavani <subhashj@xxxxxxxxxxxxxx>
      Reviewed-by: Gilad Broner <gbroner@xxxxxxxxxxxxxx>
      Signed-off-by: Yaniv Gardi <ygardi@xxxxxxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 47555a5c8a11a423e6767f942941c745766c99a2
  Author: Yaniv Gardi <ygardi@xxxxxxxxxxxxxx>
  Date:   Wed Oct 28 13:15:49 2015 +0200

      scsi: ufs: make the UFS variant a platform device

      This change turns the UFS variant (SCSI_UFS_QCOM) into a UFS
      a platform device.
      In order to do so a few additional changes are required:
      1. The ufshcd-pltfrm is no longer serves as a platform device.
         Now it only serves as a group of platform APIs such as PM APIs
         (runtime suspend/resume, system suspend/resume etc), parsers of
         clocks, regulators and pm_levels from DT.
      2. What used to be the old platform "probe" is now "only"
         a pltfrm_init() routine, that does exactly the same, but only
         being called by the new probe function of the UFS variant.

      Reviewed-by: Rob Herring <robherring2@xxxxxxxxx>
      Reviewed-by: Gilad Broner <gbroner@xxxxxxxxxxxxxx>
      Signed-off-by: Yaniv Gardi <ygardi@xxxxxxxxxxxxxx>
      Tested-by: Alim Akhtar <alim.akhtar@xxxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 0263bcd0e8319642440fa29c184b0d7f4b2d5857
  Author: Yaniv Gardi <ygardi@xxxxxxxxxxxxxx>
  Date:   Wed Oct 28 13:15:48 2015 +0200

      scsi: ufs: creates wrapper functions for vops

      In order to simplify the code a set of wrapper functions is created
      to test and call each of the variant operations.

      Reviewed-by: Akinobu Mita <akinobu.mita@xxxxxxxxx>
      Reviewed-by: Subhash Jadavani <subhashj@xxxxxxxxxxxxxx>
      Reviewed-by: Gilad Broner <gbroner@xxxxxxxxxxxxxx>
      Signed-off-by: Yaniv Gardi <ygardi@xxxxxxxxxxxxxx>
      Tested-by: Alim Akhtar <alim.akhtar@xxxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 1ce5898af55e23e933f6a68d102d4be730e9b503
  Author: Yaniv Gardi <ygardi@xxxxxxxxxxxxxx>
  Date:   Wed Oct 28 13:15:47 2015 +0200

      scsi: ufs: add ufshcd_get_variant ufshcd_set_variant

      This patch adds ufshcd_get_variant() and ufshcd_set_variant()
      routines in order to get/set the variant specific data.

      Reviewed-by: Akinobu Mita <akinobu.mita@xxxxxxxxx>
      Reviewed-by: Subhash Jadavani <subhashj@xxxxxxxxxxxxxx>
      Reviewed-by: Gilad Broner <gbroner@xxxxxxxxxxxxxx>
      Signed-off-by: Yaniv Gardi <ygardi@xxxxxxxxxxxxxx>
      Tested-by: Alim Akhtar <alim.akhtar@xxxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 9bac5db4b229977054c9936e859dc41e1cd64c59
  Author: Yaniv Gardi <ygardi@xxxxxxxxxxxxxx>
  Date:   Wed Oct 28 13:15:46 2015 +0200

      scsi: ufs-qcom: update configuration option of SCSI_UFS_QCOM component

      This change is required in order to be able to build the component
      as a module.

      Reviewed-by: Akinobu Mita <akinobu.mita@xxxxxxxxx>
      Reviewed-by: Subhash Jadavani <subhashj@xxxxxxxxxxxxxx>
      Reviewed-by: Gilad Broner <gbroner@xxxxxxxxxxxxxx>
      Signed-off-by: Yaniv Gardi <ygardi@xxxxxxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit fb819ee85e4281821b26f1e5b1812bb43ab5c41a
  Author: Yaniv Gardi <ygardi@xxxxxxxxxxxxxx>
  Date:   Wed Oct 28 13:15:45 2015 +0200

      scsi: ufs-qcom: fix compilation warning if compiled as a module

      This change fixes a compilation warning that happens if SCSI_UFS_QCOM is
      compiled as a module.  Also this patch fixes an error happens when
      insmod the module: "ufs_qcom: module license 'unspecified' taints
      kernel."

      Reviewed-by: Akinobu Mita <akinobu.mita@xxxxxxxxx>
      Reviewed-by: Subhash Jadavani <subhashj@xxxxxxxxxxxxxx>
      Reviewed-by: Gilad Broner <gbroner@xxxxxxxxxxxxxx>
      Signed-off-by: Yaniv Gardi <ygardi@xxxxxxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit aeeed76b32e440a542e2bd224513844dcf6097d0
  Author: Yaniv Gardi <ygardi@xxxxxxxxxxxxxx>
  Date:   Wed Oct 28 13:15:44 2015 +0200

      phy: qcom-ufs: fix build error when the component is built as a module

      Export the following functions in order to avoid build errors
      when the component PHY_QCOM_UFS is compiled as a module:

      ERROR: "ufs_qcom_phy_disable_ref_clk"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_enable_ref_clk"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_is_pcs_ready"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_disable_iface_clk"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_start_serdes"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_calibrate_phy"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_enable_dev_ref_clk"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_set_tx_lane_enable"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_disable_dev_ref_clk"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_save_controller_version"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      ERROR: "ufs_qcom_phy_enable_iface_clk"
        [drivers/scsi/ufs/ufs-qcom.ko] undefined!
      make[1]: *** [__modpost] Error 1

      Reviewed-by: Akinobu Mita <akinobu.mita@xxxxxxxxx>
      Reviewed-by: Subhash Jadavani <subhashj@xxxxxxxxxxxxxx>
      Reviewed-by: Gilad Broner <gbroner@xxxxxxxxxxxxxx>
      Signed-off-by: Yaniv Gardi <ygardi@xxxxxxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 2565df91a2a834046024a9baed479dc97dcfc712
  Author: Guenter Roeck <linux@xxxxxxxxxxxx>
  Date:   Sun Nov 1 16:31:52 2015 -0800

      drm/vc4: Add dependency on HAVE_DMA_ATTRS, and select DRM_GEM_CMA_HELPER

      Avoid the following build errors, seen with m68k:allmodconfig and other
      architectures which do not support HAVE_DMA_ATTRS.

      ERROR: "drm_gem_cma_create" [drivers/gpu/drm/vc4/vc4.ko] undefined!
      ERROR: "drm_gem_cma_prime_mmap" [drivers/gpu/drm/vc4/vc4.ko] undefined!
      ERROR: "drm_gem_cma_prime_get_sg_table" [drivers/gpu/drm/vc4/vc4.ko] 
undefined!
      ERROR: "drm_gem_cma_vm_ops" [drivers/gpu/drm/vc4/vc4.ko] undefined!
      ERROR: "drm_gem_cma_mmap" [drivers/gpu/drm/vc4/vc4.ko] undefined!
      ERROR: "drm_gem_cma_prime_vunmap" [drivers/gpu/drm/vc4/vc4.ko] undefined!
      ERROR: "drm_gem_cma_prime_import_sg_table" [drivers/gpu/drm/vc4/vc4.ko] 
undefined!
      ERROR: "drm_gem_cma_free_object" [drivers/gpu/drm/vc4/vc4.ko] undefined!
      ERROR: "drm_gem_cma_prime_vmap" [drivers/gpu/drm/vc4/vc4.ko] undefined!
      ERROR: "drm_gem_cma_dumb_map_offset" [drivers/gpu/drm/vc4/vc4.ko] 
undefined!
      ERROR: "drm_gem_cma_create" [drivers/gpu/drm/drm_kms_helper.ko] undefined!
      ERROR: "drm_gem_cma_describe" [drivers/gpu/drm/drm_kms_helper.ko] 
undefined!
      ERROR: "drm_gem_cma_free_object" [drivers/gpu/drm/drm_kms_helper.ko] 
undefined!

      Acked-by: Eric Anholt <eric@xxxxxxxxxx>
      Fixes: c8b75bca92cb ("drm/vc4: Add KMS support for Raspberry Pi.")
      Signed-off-by: Guenter Roeck <linux@xxxxxxxxxxxx>
      Signed-off-by: Dave Airlie <airlied@xxxxxxxxxx>

  commit f71c882dd4cfe4aa88ea07b1402ddd43605d4aef
  Author: Hans de Goede <hdegoede@xxxxxxxxxx>
  Date:   Mon Nov 9 17:09:05 2015 +0100

      ideapad-laptop: Add Lenovo Yoga 900 to no_hw_rfkill dmi list

      Like some of the other Yoga models the Lenovo Yoga 900 does not have a
      hw rfkill switch, and trying to read the hw rfkill switch through the
      ideapad module causes it to always reported blocking breaking wifi.

      This commit adds the Lenovo Yoga 900 to the no_hw_rfkill dmi list, fixing
      the wifi breakage.

      BugLink: https://bugzilla.redhat.com/show_bug.cgi?id=1275490
      Cc: stable@xxxxxxxxxxxxxxx
      Reported-and-tested-by: Kevin Fenzi <kevin@xxxxxxxxx>
      Signed-off-by: Hans de Goede <hdegoede@xxxxxxxxxx>
      Signed-off-by: Darren Hart <dvhart@xxxxxxxxxxxxxxx>

  commit c789fffc56a1a6c4bd9cbd15269d86089d757214
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Fri Nov 6 23:26:59 2015 +0100

      ideapad-laptop: include Yoga 3 1170 in add rfkill whitelist

      This changes the entry to the whitelist of machines that do not have
      a physical rfkill switch. Unfortunately, the Yoga 3 generation seems
      to use upper-case letters for the YOGA 3 Pro-1370, while it uses normal
      capitalization for its Yoga 3 1170 and 1470 siblings.

      In order to catch all variants of the Yoga 3, I'm changing both
      the entry for the 1470 (using "Yoga" as the name) and the entry for
      the Pro 1370 (using all-caps "YOGA") to not match the exact model number
      but only the generation. This way, the 1170 and 1470 models share one
      entry, but if the firmware changes from one format to the other, it will
      still work.

      The second entry for Yoga 2 Pro that was recently added for some
      reason ended up not being added in alphanumeric order, and I'm
      moving the Yoga 3 1470 entry down while making the change, so they
      are sorted more logically.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Darren Hart <dvhart@xxxxxxxxxxxxxxx>

  commit 74caab996c68393c0a985dccfd0ee6b33fb016e6
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Fri Nov 6 22:28:49 2015 +0100

      ideapad-laptop: add support for Yoga 3 ESC key

      The ideapad-laptop handles most special keys on various Lenovo Laptops
      including the Yoga line. Unfortunately, the Yoga 3 11/13/14 models have
      one important exception, which is the Fn-ESC combination.

      On other Lenovo Laptops, this is FnLock, which switches the function keys
      between the primary (Mute, Vol down, Vol up, ...) and the secondary (F1,
      F2, F3, ...) behavior. On the new machines, FnLock is only available
      through BIOS setup (possibly through a yet-to-be-implemented feature
      in this driver) but not through Fn-ESC, but instead the ESC key itself
      switched between ESC and a "Paper Display" app for Windows.

      Unfortunately, that means that you can never have both ESC *and* the
      function keys working at the same time without needing to press Fn on
      one of them.
      As pointed out in the official Lenovo Forum by dozens of users, this
      makes the machine rather useless for any serious work [1].

      I have now studied the ACPI DSDT one more time and found the event
      that is generated for the ESC key. Unlike all other key events on this
      machine, it is actually a WMI, while the other ones are read from the
      embedded controller.

      I am now installing a WMI notifier that uses the event number from the
      WMI subsystem as the scancode. The only event number generated here is
      '128', and that fits in nicely with the two existing ranges of scancodes
      used by the EC: 0-15 for the 16-bit VPCCMD_R_VPC register, 16-17 for
      the VPCCMD_R_NOVO register and 64-67 for VPCCMD_R_SPECIAL_BUTTONS.

      The only sane way to handle this button (in absence of the Windows Paper
      Display driver) seems to be to have it emit KEY_ESC, so that is what
      I use as the default. Should any user ever want to overwrite the default,
      they can install their own keymap.

      To ensure that we can still build the driver without adding a CONFIG_WMI
      dependency, all new code is enclosed in #ifdef.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>

      [1] 
https://forums.lenovo.com/t5/Lenovo-Yoga-Series-Notebooks/YOGA-3-14-How-to-reclaim-my-Esc-key-and-permanently-disable/td-p/2070816
      Signed-off-by: Darren Hart <dvhart@xxxxxxxxxxxxxxx>

  commit f23d0e2468bc538e8c33223af8963ef40b7515bf
  Author: James Hogan <james.hogan@xxxxxxxxxx>
  Date:   Mon Nov 9 18:40:59 2015 +0000

      MAINTAINERS: Change Meta arch port status to Odd Fixes

      For a while now the Meta architecture port has been supported with only
      odd fixes rather than any big new features, since it has now been
      effectively supersceded by MIPS, and there is no prospect of any new
      products being based on it. Change the maintenance status to Odd Fixes
      in order to reflect reality.

      Signed-off-by: James Hogan <james.hogan@xxxxxxxxxx>
      Cc: linux-metag@xxxxxxxxxxxxxxx

  commit f1cd1f0b7d1b5d4aaa5711e8f4e4898b0045cb6d
  Author: Filipe Manana <fdmanana@xxxxxxxx>
  Date:   Mon Nov 9 18:06:38 2015 +0000

      Btrfs: fix race when listing an inode's xattrs

      When listing a inode's xattrs we have a time window where we race against
      a concurrent operation for adding a new hard link for our inode that makes
      us not return any xattr to user space. In order for this to happen, the
      first xattr of our inode needs to be at slot 0 of a leaf and the previous
      leaf must still have room for an inode ref (or extref) item, and this can
      happen because an inode's listxattrs callback does not lock the inode's
      i_mutex (nor does the VFS does it for us), but adding a hard link to an
      inode makes the VFS lock the inode's i_mutex before calling the inode's
      link callback.

      If we have the following leafs:

                     Leaf X (has N items)                    Leaf Y

       [ ... (257 INODE_ITEM 0) (257 INODE_REF 256) ]  [ (257 XATTR_ITEM 
12345), ... ]
                 slot N - 2         slot N - 1              slot 0

      The race illustrated by the following sequence diagram is possible:

             CPU 1                                               CPU 2

        btrfs_listxattr()

          searches for key (257 XATTR_ITEM 0)

          gets path with path->nodes[0] == leaf X
          and path->slots[0] == N

          because path->slots[0] is >=
          btrfs_header_nritems(leaf X), it calls
          btrfs_next_leaf()

          btrfs_next_leaf()
            releases the path

                                                         adds key (257 
INODE_REF 666)
                                                         to the end of leaf X 
(slot N),
                                                         and leaf X now has N + 
1 items

            searches for the key (257 INODE_REF 256),
            with path->keep_locks == 1, because that
            is the last key it saw in leaf X before
            releasing the path

            ends up at leaf X again and it verifies
            that the key (257 INODE_REF 256) is no
            longer the last key in leaf X, so it
            returns with path->nodes[0] == leaf X
            and path->slots[0] == N, pointing to
            the new item with key (257 INODE_REF 666)

          btrfs_listxattr's loop iteration sees that
          the type of the key pointed by the path is
          different from the type BTRFS_XATTR_ITEM_KEY
          and so it breaks the loop and stops looking
          for more xattr items
            --> the application doesn't get any xattr
                listed for our inode

      So fix this by breaking the loop only if the key's type is greater than
      BTRFS_XATTR_ITEM_KEY and skip the current key if its type is smaller.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Filipe Manana <fdmanana@xxxxxxxx>

  commit ab27a8d04b32b6ee8c30c14c4afd1058e8addc82
  Author: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 16:33:37 2015 -0600

      coredump: add DAX filtering for FDPIC ELF coredumps

      Add explicit filtering for DAX mappings to FDPIC ELF coredump.  This is
      useful because DAX mappings have the potential to be very large.

      This patch has only been compile tested.

      Signed-off-by: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
      Acked-by: Jeff Moyer <jmoyer@xxxxxxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit 5037835c1f3eabf4f22163fc0278dd87165f8957
  Author: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
  Date:   Mon Oct 5 16:33:36 2015 -0600

      coredump: add DAX filtering for ELF coredumps

      Add two new flags to the existing coredump mechanism for ELF files to
      allow us to explicitly filter DAX mappings.  This is desirable because
      DAX mappings, like hugetlb mappings, have the potential to be very
      large.

      Update the coredump_filter documentation in
      Documentation/filesystems/proc.txt so that it addresses the new DAX
      coredump flags.  Also update the documented default value of
      coredump_filter to be consistent with the core(5) man page.  The
      documentation being updated talks about bit 4, Dump ELF headers, which
      is enabled if CONFIG_CORE_DUMP_DEFAULT_ELF_HEADERS is turned on in the
      kernel config.  This kernel config option defaults to "y" if both ELF
      binaries and coredump are enabled.

      Signed-off-by: Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
      Acked-by: Jeff Moyer <jmoyer@xxxxxxxxxx>
      Signed-off-by: Dan Williams <dan.j.williams@xxxxxxxxx>

  commit 85ce230051c37dfb979385eb0244bf3655625ba6
  Merge: 538ea4a 2098516
  Author: Dan Williams <dan.j.williams@xxxxxxxxx>
  Date:   Mon Nov 9 13:29:39 2015 -0500

      Merge branch 'for-4.4/hotplug' into libnvdimm-for-next

  commit 5e0baca8b3247f459af50947eaafc68bb8168b33
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Mon Nov 9 09:26:44 2015 -0800

      Input: parkbd - drop bogus __init from parkbd_allocate_serio()

      WARNING: vmlinux.o(.text+0x1056606): Section mismatch in reference from 
the function parkbd_attach() to the function .init.text:parkbd_allocate_serio()
      The function parkbd_attach() references
      the function __init parkbd_allocate_serio().
      This is often because parkbd_attach lacks a __init
      annotation or the annotation of parkbd_allocate_serio is wrong.

      Commit 33ca8ab97cbb676d ("Input: parkbd - use parallel port device
      model") dropped the __init attribute from the sole caller of
      parkbd_allocate_serio(), but forgot to remove it from
      parkbd_allocate_serio() itself.

      Fixes: 33ca8ab97cbb676d ("Input: parkbd - use parallel port device model")
      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Acked-by: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
      Signed-off-by: Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>

  commit fb53c439d84387621c53808a3957ffd9876e5094
  Author: Tomas Henzl <thenzl@xxxxxxxxxx>
  Date:   Fri Nov 6 16:24:09 2015 +0100

      hpsa: move lockup_detected attribute to host attr

      This patch fixes a 'general protection fault' issue by
      moving the attribute to where it was likely meant.

      Signed-off-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit ec2c3aa94d9207fd2557203f36677da8be75b354
  Author: Don Brace <don.brace@xxxxxxxx>
  Date:   Wed Nov 4 15:52:40 2015 -0600

      hpsa: bump the driver version

      Reviewed-by: Justin Lindley <justin.lindley@xxxxxxxx>
      Reviewed-by: Scott Teel <scott.teel@xxxxxxxx>
      Reviewed-by: Kevin Barnett <kevin.barnett@xxxxxxxx>
      Reviewed-by: Gerry Morong <gerry.morong.pmcs.com>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Reviewed-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit d04e62b9d63a7498735761dc40eaed88b7fd9d80
  Author: Kevin Barnett <kevin.barnett@xxxxxxxx>
  Date:   Wed Nov 4 15:52:34 2015 -0600

      hpsa: add in sas transport class

      Reviewed-by: Scott Teel <scott.teel@xxxxxxxx>
      Reviewed-by: Justin Lindley <justin.lindley@xxxxxxxx>
      Reviewed-by: Kevin Barnett <kevin.barnett@xxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 1faf072c0e3ab0bc41fc1d343883dac704b82946
  Author: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 4 15:52:28 2015 -0600

      hpsa: fix multiple issues in path_info_show

      path_info_show() seems to be broken in multiple ways.

      First, there's

        817 return snprintf(buf, output_len+1, "%s%s%s%s%s%s%s%s",
        818       path[0], path[1], path[2], path[3],
        819       path[4], path[5], path[6], path[7]);

      so hopefully output_len contains the combined length of the eight
      strings. Otherwise, snprintf will stop copying to the output
      buffer, but still end up reporting that combined length - which
      in turn would result in user-space getting a bunch of useless nul
      bytes (thankfully the upper sysfs layer seems to clear the output
      buffer before passing it to the various ->show routines). But we have

        767      output_len = snprintf(path[i],
        768                       PATH_STRING_LEN, "[%d:%d:%d:%d] %20.20s ",
        769                       h->scsi_host->host_no,
        770                       hdev->bus, hdev->target, hdev->lun,
        771                       scsi_device_type(hdev->devtype));

      so output_len at best contains the length of the last string printed.

      Inside the loop, we then otherwise add to output_len. By magic,
      we still have PATH_STRING_LEN available every time... This
      wouldn't really be a problem if the bean-counting has been done
      properly and each line actually does fit in 50 bytes, and maybe
      it does, but I don't immediately see why. Suppose we end up
      taking this branch:

        802                  output_len += snprintf(path[i] + output_len,
        803                          PATH_STRING_LEN,
        804                          "BOX: %hhu BAY: %hhu %s\n",
        805                          box, bay, active);

      An optimistic estimate says this uses strlen("BOX: 1 BAY: 2
      Active\n") which is 21. Now add the 20 bytes guaranteed by the
      %20.20s and then some for the rest of that format string, and
      we're easily over 50 bytes. I don't think we can get over 100
      bytes even being pessimistic, so this just means we'll scribble
      into the next path[i+1] and maybe get that overwritten later,
      leading to some garbled output (in fact, since we'd overwrite the
      previous string's 0-terminator, we could end up with one very
      long string and then print various suffixes of that, leading to
      much more than 400 bytes of output). Except of course when we're
      filling path[7], where overrunning it means writing random stuff
      to the kernel stack, which is usually a lot of fun.

      We can fix all of that and get rid of the 400 byte stack buffer by
      simply writing directly to the given output buffer, which the upper
      layer guarantees is at least PAGE_SIZE. s[c]nprintf doesn't care where
      it is writing to, so this doesn't make the spin lock hold time any
      longer. Using scnprintf ensures that output_len always represents the
      number of bytes actually written to the buffer, so we'll report the
      proper amount to the upper layer.

      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 7c59a0d46125d8c47c840e874d2cc9dd082afdf7
  Author: Don Brace <don.brace@xxxxxxxx>
  Date:   Wed Nov 4 15:52:22 2015 -0600

      hpsa: enhance device messages

      Reviewed-by: Justin Lindley <justin.lindley@xxxxxxxx>
      Reviewed-by: Scott Teel <scott.teel@xxxxxxxx>
      Reviewed-by: Kevin Barnett <kevin.barnett@xxxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Reviewed-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit c2adae44e9161612c89e52d233c83086195f454c
  Author: Scott Teel <scott.teel@xxxxxxxx>
  Date:   Wed Nov 4 15:52:16 2015 -0600

      hpsa: disable report lun data caching

      When external target arrays are present, disable the firmware's
      normal behavior of returning a cached copy of the report lun data,
      and force it to collect new data each time we request a report luns.

      This is necessary for external arrays, since there may be no
      reliable signal from the external array to the smart array when
      lun configuration changes, and thus when driver requests
      report luns, it may be stale data.

      Use diag options to turn off RPL data caching.

      Reviewed-by: Scott Teel <scott.teel@xxxxxxxx>
      Reviewed-by: Justin Lindley <justin.lindley@xxxxxxxx>
      Reviewed-by: Kevin Barnett <kevin.barnett@xxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Reviewed-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 34592254c13324add1972e6a7d5f6636d95ade33
  Author: Scott Teel <scott.teel@xxxxxxxx>
  Date:   Wed Nov 4 15:52:09 2015 -0600

      hpsa: add discovery polling for PT RAID devices.

      There are problems with getting configuration change notification
      in pass-through RAID environments.  So, activate flag
      h->discovery_polling when one of these devices is detected in
      update_scsi_devices.

      After discovery_polling is set, execute a report luns from
      rescan_controller_worker (every 30 seconds).

      If the data from report_luns is different than last
      time (binary compare), execute a full rescan via update_scsi_devices.

      Reviewed-by: Scott Teel <scott.teel@xxxxxxxx>
      Reviewed-by: Justin Lindley <justin.lindley@xxxxxxxx>
      Reviewed-by: Kevin Barnett <kevin.barnett@xxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Reviewed-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 2d62a33e05d471bef6b2e5478f57d05b9baded85
  Author: Scott Teel <scott.teel@xxxxxxxx>
  Date:   Wed Nov 4 15:52:03 2015 -0600

      hpsa: eliminate fake lun0 enclosures

      We don't need to create fake enclosure devices at Lun0
      in external target array configurations anymore.
      This was done to support Pre-SCSI rev 5 controllers
      that didn't suppoprt report luns commands, so the
      SCSI layer had to scan targets. If there was no
      LUN at LUN 0, then the target scan would stop, and
      move to the next target.  Lun0 enclosure device
      was added to prevent sparsely-numbered LUNs from
      being missed.

      Reviewed-by: Scott Teel <scott.teel@xxxxxxxx>
      Reviewed-by: Justin Lindley <justin.lindley@xxxxxxxx>
      Reviewed-by: Kevin Barnett <kevin.barnett@xxxxxxxx>
      Reviewed-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 66749d0d617a9cda967f168802f1fb1a6e598a92
  Author: Scott Teel <scott.teel@xxxxxxxx>
  Date:   Wed Nov 4 15:51:57 2015 -0600

      hpsa: generalize external arrays

      External array LUNs must use target and lun numbers assigned by the
      external array. So the driver must treat these differently from
      local LUNs when assigning lun/target.

      LUN's 'model' field has been used to detect Lun types that need
      special treatment, but the desire is to eliminate the need to reference
      specific array models, and support any external array.

      Pass-through RAID (PTRAID) luns are not luns of the local controller,
      so they are not reported in LUN count of command 'ID controller'.
      However, they ARE reported in "Report logical Luns" command.
      Local luns are listed first, then PTRAID LUNs.

      The number of luns from "Report LUNs" in excess of those reported by
      'ID controller' are therefore the PTRAID LUNS.

      We can now remove function is_ext_target, and the 'white list'
      array of supported model names.

      Reviewed-by: Scott Teel <scott.teel@xxxxxxxx>
      Reviewed-by: Justin Lindley <justin.lindley@xxxxxxxx>
      Reviewed-by: Kevin Barnett <kevin.barnett@xxxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Reviewed-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 096ccff47e152aef8e9ef318c02781daedc433b7
  Author: Kevin Barnett <kevin.barnett@xxxxxxxx>
  Date:   Wed Nov 4 15:51:51 2015 -0600

      hpsa: move scsi_add_device and scsi_remove_device calls to new function

      preparation for adding the sas transport class

      Reviewed-by: Scott Teel <scott.teel@xxxxxxxx>
      Reviewed-by: Justin Lindley <justin.lindley@xxxxxxxx>
      Reviewed-by: Kevin Barnett <kevin.barnett@xxxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Reviewed-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit c795505a742807fe6ba81d6c63b57c7d2737df3d
  Author: Kevin Barnett <kevin.barnett@xxxxxxxx>
  Date:   Wed Nov 4 15:51:45 2015 -0600

      hpsa: refactor hpsa_figure_bus_target_lun

      setup for sas transport. Need to set the
      bus and target accordingly.

      Reviewed-by: Scott Teel <scott.teel@xxxxxxxx>
      Reviewed-by: Justin Lindley <justin.lindley@xxxxxxxx>
      Reviewed-by: Kevin Barnett <kevin.barnett@xxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Reviewed-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 75d23d894a4054dea2912e8ccad3134b8b90f1f1
  Author: Don Brace <don.brace@xxxxxxxx>
  Date:   Wed Nov 4 15:51:39 2015 -0600

      hpsa: enhance hpsa_get_device_id

      use an index into vpd data for SAS/SATA drives

      Reviewed-by: Scott Teel <scott.teel@xxxxxxxx>
      Reviewed-by: Justin Lindley <justin.lindley@xxxxxxxx>
      Reviewed-by: Kevin Barnett <kevin.barnett@xxxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit f3f017305d4da61b64098f3d89cb64563c95087a
  Author: Kevin Barnett <kevin.barnett@xxxxxxxx>
  Date:   Wed Nov 4 15:51:33 2015 -0600

      hpsa: add function is_logical_device

      simplify checking for logical/physical devices

      Reviewed-by: Scott Teel <scott.teel@xxxxxxxx>
      Reviewed-by: Justin Lindley <justin.lindley@xxxxxxxx>
      Reviewed-by: Kevin Barnett <kevin.barnett@xxxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 04fa2f44461dd90a00b514cd75ce82f829924826
  Author: Kevin Barnett <kevin.barnett@xxxxxxxx>
  Date:   Wed Nov 4 15:51:27 2015 -0600

      hpsa: simplify update scsi devices

      remove repeated calculation that checks for physical
      or logical devices.

      Reviewed-by: Scott Teel <scott.teel@xxxxxxxx>
      Reviewed-by: Justin Lindley <justin.lindley@xxxxxxxx>
      Reviewed-by: Kevin Barnett <kevin.barnett@xxxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 2a168208a35515b8ca54fbf1a17581ad2a852a3f
  Author: Kevin Barnett <kevin.barnett@xxxxxxxx>
  Date:   Wed Nov 4 15:51:21 2015 -0600

      hpsa: simplify check for device exposure

      remove macros and cleanup device exposure checking

      Reviewed-by: Scott Teel <scott.teel@xxxxxxxx>
      Reviewed-by: Justin Lindley <justin.lindley@xxxxxxxx>
      Reviewed-by: Kevin Barnett <kevin.barnett@xxxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit a736e9b6a03283a2e0fc8190b748b3a672f289c1
  Author: Don Brace <don.brace@xxxxxxxx>
  Date:   Wed Nov 4 15:51:14 2015 -0600

      hpsa: correct ioaccel2 sg chain len

      Reviewed-by: Scott Teel <scott.teel@xxxxxxxx>
      Reviewed-by: Justin Lindley <justin.lindley@xxxxxxxx>
      Reviewed-by: Kevin Barnett <kevin.barnett@xxxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit f2039b03290b3b1e0556b85b7018273e116d17c3
  Author: Don Brace <don.brace@xxxxxxxx>
  Date:   Wed Nov 4 15:51:08 2015 -0600

      hpsa: correct check for non-disk devices

      The driver is using two MACROs which seemingly are looking in
      the wrong location for the device_flags returned from
      CISS_REPORT_PHYS. Both MACROs, NON_DISK_PHYS_DEV and
      PHYS_IOACCEL, are using the pointer returned from figure_lunaddrbytes
      which is the address of the LUN.lunid element in
      the extended CISS_REPORT_PHYS.  But the MACROS are using offsets
      beyond the range of the element (offset 17 of an 8 byte element).

      These MACROs actually are looking at the correct location but
      they fail static checker analysis. It also will not work
      if any new elements are added to the extended LUN structure.

      Change the code to use the structure elements directly
      since this MACRO is only used in one location.

      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Reviewed-by: Scott Teel <scott.teel@xxxxxxxx>
      Reviewed-by: Justin Lindley <justin.lindley@xxxxxxxx>
      Reviewed-by: Kevin Barnett <kevin.barnett@xxxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 0b9b7b6eecad03e0ba4290af7145e2c5d1f8ff13
  Author: Scott Teel <scott.teel@xxxxxxxx>
  Date:   Wed Nov 4 15:51:02 2015 -0600

      hpsa: fix physical target reset

      Set reset type in device_reset_handler to do either
      logical unit reset for logical devices, or physical
      target reset, for physical devices.

      Reviewed-by: Scott Teel <scott.teel@xxxxxxxx>
      Reviewed-by: Justin Lindley <justin.lindley@xxxxxxxx>
      Reviewed-by: Kevin Barnett <kevin.barnett@xxxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit da03ded045b6249261e6c82d942e6d0298dabc9b
  Author: Don Brace <don.brace@xxxxxxxx>
  Date:   Wed Nov 4 15:50:56 2015 -0600

      hpsa: fix hpsa_adjust_hpsa_scsi_table

      Fix a NULL pointer issue in the driver when devices are removed
      during a reset.

      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit c8a6c9a6b41367d147990756b311ed5a67f19005
  Author: Don Brace <don.brace@xxxxxxxx>
  Date:   Wed Nov 4 15:50:50 2015 -0600

      hpsa: correct transfer length for 6 byte read/write commands

      handle block counts of 0. Cleanup block and block count calculations.

      Reviewed-by: Scott Teel <scott.teel@xxxxxxxx>
      Reviewed-by: Justin Lindley <justin.lindley@xxxxxxxx>
      Reviewed-by: Kevin Barnett <kevin.barnett@xxxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 683fc444697a388f17cbc3bd7e64191ce000b6b4
  Author: Don Brace <don.brace@xxxxxxxx>
  Date:   Wed Nov 4 15:50:44 2015 -0600

      hpsa: abandon rescans on memory alloaction failures.

      Abandon and reschedule rescan process only if device inquiries
      fail due to mem alloc failures, which are likely to occur for
      all devices.

      Otherwise, skip device if inquiry fails for other reasons,
      and continue rescanning process for other devices.

      Reviewed-by: Scott Teel <scott.teel@xxxxxxxx>
      Reviewed-by: Justin Lindley <justin.lindley@xxxxxxxx>
      Reviewed-by: Kevin Barnett <kevin.barnett@xxxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 853633e85996cb661e7aed5b3ae8823b12f265cf
  Author: Don Brace <don.brace@xxxxxxxx>
  Date:   Wed Nov 4 15:50:37 2015 -0600

      hpsa: allow driver requested rescans

      Reviewed-by: Scott Teel <scott.teel@xxxxxxxx>
      Reviewed-by: Justin Lindley <justin.lindley@xxxxxxxx>
      Reviewed-by: Kevin Barnett <kevin.barnett@xxxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by; Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 1d33d85d4e51d85ee986b603de90be4f0b2faf2c
  Author: Don Brace <don.brace@xxxxxxxx>
  Date:   Wed Nov 4 15:50:31 2015 -0600

      hpsa: fix null device issues

      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Manoj Kumar <manoj@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 9975ec9dbeb1775d29faaae50b31e2c19f740bf8
  Author: Don Brace <don.brace@xxxxxxxx>
  Date:   Wed Nov 4 15:50:25 2015 -0600

      hpsa: check for null arguments to dev_printk

      Check for NULLs.

      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Manoj Kumar <manoj@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 3ad7de6b7d031165e8b2c0775986128de17c5a63
  Author: Don Brace <don.brace@xxxxxxxx>
  Date:   Wed Nov 4 15:50:19 2015 -0600

      hpsa: change devtype to unsigned

      This member is used in calls to scsi_device_type.
      It should be unsigned since the kernel checks for upper bounds
      and it should never be negative.

      Suggested-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Suggested-by: Hannes Reinecke <hare@xxxxxxx>
      Suggested-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit b48d9804281957ea35340076c2492c924ceb3ef0
  Author: Don Brace <don.brace@xxxxxxxx>
  Date:   Wed Nov 4 15:50:13 2015 -0600

      hpsa: remove unused hpsa_tag_discard_error_bits

      This function is no longer used.

      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Reviewed-by: Manoj Kumar <manoj@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 55d95d39b70fa391d609927242f55307d5536b17
  Author: Don Brace <don.brace@xxxxxxxx>
  Date:   Wed Nov 4 15:50:07 2015 -0600

      hpsa: stop zeroing reset_cmds_out and ioaccel_cmds_out during rescan

      pulling the rug out from under the reset handler
      likewise for ioaccel_cmds_out

      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 8aa60681dbc0a501697663af0cd9c31df046d709
  Author: Don Brace <don.brace@xxxxxxxx>
  Date:   Wed Nov 4 15:50:01 2015 -0600

      hpsa: remove unused parameter hostno

      This parameter was once used before scan_start was defined
      but now it is no longer used.

      Signed-off-by: Don Brace <don.brace@xxxxxxxx>
      Reviewed-by: Tomas Henzl <thenzl@xxxxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 863e02d0e173bb9d8cea6861be22820b25c076cc
  Author: Peter Oberparleiter <oberpar@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Oct 27 10:49:54 2015 +0100

      scsi_sysfs: Fix queue_ramp_up_period return code

      Writing a number to /sys/bus/scsi/devices/<sdev>/queue_ramp_up_period
      returns the value of that number instead of the number of bytes written.
      This behavior can confuse programs expecting POSIX write() semantics.
      Fix this by returning the number of bytes written instead.

      Signed-off-by: Peter Oberparleiter <oberpar@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Reviewed-by: Matthew R. Ochs <mrochs@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Ewan D. Milne <emilne@xxxxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 821b414405a78c3d38921c2545b492eb974d3814
  Author: Niklas Cassel <niklas.cassel@xxxxxxxx>
  Date:   Mon Nov 9 15:59:00 2015 +0100

      net: Documentation: Fix default value tcp_limit_output_bytes

      Commit c39c4c6abb89 ("tcp: double default TSQ output bytes limit")
      updated default value for tcp_limit_output_bytes

      Signed-off-by: Niklas Cassel <niklas.cassel@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit a499a2e9d9c03fd35bd9920b629e4d5b1d6cc1f0
  Author: Vlad Yasevich <vyasevich@xxxxxxxxx>
  Date:   Mon Nov 9 09:14:17 2015 -0500

      macvtap: Resolve possible __might_sleep warning in macvtap_do_read()

      macvtap_do_read code calls macvtap_put_user while it might be set up
      to wait for the user.  This results in the following warning:

      Jun 23 16:25:26 galen kernel: ------------[ cut here ]------------
      Jun 23 16:25:26 galen kernel: WARNING: CPU: 0 PID: 30433 at 
kernel/sched/core.c:
      7286 __might_sleep+0x7f/0x90()
      Jun 23 16:25:26 galen kernel: do not call blocking ops when 
!TASK_RUNNING; state
      =1 set at [<ffffffff810f1c1f>] prepare_to_wait+0x2f/0x90
      Jun 23 16:25:26 galen kernel: CPU: 0 PID: 30433 Comm: cat Not tainted 
4.1.0-rc6+
       #11
      Jun 23 16:25:26 galen kernel: Call Trace:
      Jun 23 16:25:26 galen kernel: [<ffffffff817f76ba>] dump_stack+0x4c/0x65
      Jun 23 16:25:26 galen kernel: [<ffffffff810a07ca>] 
warn_slowpath_common+0x8a/0xc
      0
      Jun 23 16:25:26 galen kernel: [<ffffffff810a0846>] 
warn_slowpath_fmt+0x46/0x50
      Jun 23 16:25:26 galen kernel: [<ffffffff810f1c1f>] ?  
prepare_to_wait+0x2f/0x90
      Jun 23 16:25:26 galen kernel: [<ffffffff810f1c1f>] ?  
prepare_to_wait+0x2f/0x90
      Jun 23 16:25:26 galen kernel: [<ffffffff810cdc1f>] __might_sleep+0x7f/0x90
      Jun 23 16:25:26 galen kernel: [<ffffffff811f8e15>] might_fault+0x55/0xb0
      Jun 23 16:25:26 galen kernel: [<ffffffff810fab9d>] ?  
trace_hardirqs_on_caller+0x fd/0x1c0
      Jun 23 16:25:26 galen kernel: [<ffffffff813f639c>] copy_to_iter+0x7c/0x360
      Jun 23 16:25:26 galen kernel: [<ffffffffa052da86>] 
macvtap_do_read+0x256/0x3d0 [macvtap]
      Jun 23 16:25:26 galen kernel: [<ffffffff810f20e0>] ?  
prepare_to_wait_event+0x110/0x110
      Jun 23 16:25:26 galen kernel: [<ffffffffa052dcab>] 
macvtap_read_iter+0x2b/0x50 [macvtap]
      Jun 23 16:25:26 galen kernel: [<ffffffff81247f2e>] __vfs_read+0xae/0xe0
      Jun 23 16:25:26 galen kernel: [<ffffffff81248526>] vfs_read+0x86/0x140
      Jun 23 16:25:26 galen kernel: [<ffffffff812493b9>] SyS_read+0x49/0xb0
      Jun 23 16:25:26 galen kernel: [<ffffffff8180182e>] 
system_call_fastpath+0x12/0x76
      Jun 23 16:25:26 galen kernel: ---[ end trace 22e33f67e70c0c2a ]---

      Make sure thet we call finish_wait() if we have the skb to process
      before trying to actually process it.

      Signed-off-by: Vladislav Yasevich <vyasevic@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 92e6246c8e02f4ce9960731e2411e49c1f0fabbf
  Author: Johannes Thumshirn <jthumshirn@xxxxxxx>
  Date:   Mon Nov 9 10:56:57 2015 +0100

      scsi: Export SCSI Inquiry data to sysfs

      Export the RAW SCSI Inquiry to sysfs as binfile. This way the data can be 
used
      by userland without the need to have and ioctl or use the sg_inq tool.

      Here is an example of the provided data

      linux:~ # hexdump /sys/class/scsi_device/1\:0\:0\:0/device/inquiry
      0000000 8005 3205 001f 0000 4551 554d 2020 2020
      0000010 4551 554d 4420 4456 522d 4d4f 2020 2020
      0000020 2e32 2e33
      0000024

      Signed-off-by: Johannes Thumshirn <jthumshirn@xxxxxxx>
      Reviewed-by: Hannes Reinecke <hare@xxxxxxx>
      Reviewed-by: Christoph Hellwig <hch@xxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 4bed5395a521b475c2164510596d9af366a3d6dc
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Nov 9 15:08:57 2015 +0100

      mvneta: add FIXED_PHY dependency

      The fixed_phy infrastructure is done in a way that is optional,
      by providing 'static inline' helper functions doing nothing in
      include/linux/phy_fixed.h for all its APIs. However, three out
      of the four users (DSA, BCMGENET, and SYSTEMPORT) always
      'select FIXED_PHY', presumably because they need that.
      MVNETA is the fourth one, and if that is built-in but FIXED_PHY
      is configured as a loadable module, we get a link error:

      drivers/built-in.o: In function `mvneta_fixed_link_update':
      fpga-mgr.c:(.text+0x33ed80): undefined reference to 
`fixed_phy_update_state'

      Presumably this driver has the same dependency as the others,
      so this patch also uses 'select' to ensure that the fixed-phy
      support is built-in.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: 898b2970e2c9 ("mvneta: implement SGMII-based in-band link state 
signaling")
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit cfb76d77c009b38e607c8a2adc8bdd57b5081768
  Author: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 9 13:19:10 2015 +0100

      net: caif: check return value of alloc_netdev

      I don't know if dev can actually be NULL here, but the test should be
      above alloc_netdev(), to avoid leaking the struct net_device in case
      dev is actually NULL. And of course the return value from alloc_netdev
      should be tested.

      Signed-off-by: Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3870502a66fe26c80c034db1aa915d69850854aa
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Mon Nov 9 10:34:30 2015 +0100

      net: hisilicon: NET_VENDOR_HISILICON should depend on HAS_DMA

      If NO_DMA=y:

          ERROR: "dma_set_mask" 
[drivers/net/ethernet/hisilicon/hns/hns_enet_drv.ko] undefined!
          ERROR: "dma_unmap_single" 
[drivers/net/ethernet/hisilicon/hns/hns_enet_drv.ko] undefined!
          ERROR: "dma_unmap_page" 
[drivers/net/ethernet/hisilicon/hns/hns_enet_drv.ko] undefined!
          ERROR: "dma_mapping_error" 
[drivers/net/ethernet/hisilicon/hns/hns_enet_drv.ko] undefined!
          ERROR: "dma_map_page" 
[drivers/net/ethernet/hisilicon/hns/hns_enet_drv.ko] undefined!
          ERROR: "dma_supported" 
[drivers/net/ethernet/hisilicon/hns/hns_enet_drv.ko] undefined!
          ERROR: "dma_map_single" 
[drivers/net/ethernet/hisilicon/hns/hns_enet_drv.ko] undefined!
          ERROR: "dma_set_mask" 
[drivers/net/ethernet/hisilicon/hns/hns_dsaf.ko] undefined!
          ERROR: "dma_supported" 
[drivers/net/ethernet/hisilicon/hns/hns_dsaf.ko] undefined!
          ERROR: "dma_unmap_single" 
[drivers/net/ethernet/hisilicon/hns/hnae.ko] undefined!
          ERROR: "dma_unmap_page" [drivers/net/ethernet/hisilicon/hns/hnae.ko] 
undefined!
          ERROR: "dma_mapping_error" 
[drivers/net/ethernet/hisilicon/hns/hnae.ko] undefined!
          ERROR: "dma_map_page" [drivers/net/ethernet/hisilicon/hns/hnae.ko] 
undefined!
          ERROR: "dma_map_single" [drivers/net/ethernet/hisilicon/hns/hnae.ko] 
undefined!
          ERROR: "dma_alloc_coherent" 
[drivers/net/ethernet/hisilicon/hix5hd2_gmac.ko] undefined!
          ERROR: "dma_mapping_error" 
[drivers/net/ethernet/hisilicon/hix5hd2_gmac.ko] undefined!
          ERROR: "dma_map_single" 
[drivers/net/ethernet/hisilicon/hix5hd2_gmac.ko] undefined!
          ERROR: "dma_unmap_single" 
[drivers/net/ethernet/hisilicon/hix5hd2_gmac.ko] undefined!
          ERROR: "dma_free_coherent" 
[drivers/net/ethernet/hisilicon/hix5hd2_gmac.ko] undefined!
          ERROR: "dma_alloc_coherent" 
[drivers/net/ethernet/hisilicon/hip04_eth.ko] undefined!
          ERROR: "dma_mapping_error" 
[drivers/net/ethernet/hisilicon/hip04_eth.ko] undefined!
          ERROR: "dma_map_single" [drivers/net/ethernet/hisilicon/hip04_eth.ko] 
undefined!
          ERROR: "dma_unmap_single" 
[drivers/net/ethernet/hisilicon/hip04_eth.ko] undefined!
          ERROR: "dma_free_coherent" 
[drivers/net/ethernet/hisilicon/hip04_eth.ko] undefined!

      As this affects all of HNS_ENET, HNS_DSAF, HNS, HIX5HD2_GMAC, and
      HIP04_ETH, add a dependency on HAS_DMA to the main NET_VENDOR_HISILICON
      symbol to fix this.

      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Acked-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 9fb74c4e66daab5c3fb3b949d37c15684d7ee82a
  Author: Sumit Saxena <sumit.saxena@xxxxxxxxxxxxx>
  Date:   Thu Nov 5 21:17:38 2015 +0530

      megaraid_sas: Fix sparse warning

      Signed-off-by: Sumit Saxena <sumit.saxena@xxxxxxxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit aed335eecf8f09c28588b01c7f7e24ee78156e28
  Author: Sumit Saxena <sumit.saxena@xxxxxxxxxxxxx>
  Date:   Thu Nov 5 21:17:37 2015 +0530

      megaraid_sas: Make tape drives visible on PERC5 controllers

      The DELL PERC5 controller firmware does not list tape drives in response
      to MR_DCMD_PD_LIST_QUERY. This causes tape drives not be exposed to the
      OS when connected to a PERC5 controller.

      This patch permits detection of tape drives connected to a PERC5
      controller by exposing non-TYPE_DISK devices unconditionally.

      Signed-off-by: Kashyap Desai <kashyap.desai@xxxxxxxxxxxxx>
      Signed-off-by: Sumit Saxena <sumit.saxena@xxxxxxxxxxxxx>
      Signed-off-by: Martin K. Petersen <martin.petersen@xxxxxxxxxx>

  commit 222e684ca762e9288108fcf852eb5d08cbe10ae3
  Author: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
  Date:   Mon Nov 9 15:24:55 2015 +0300

      vfio/pci: make an array larger

      Smatch complains about a possible out of bounds error:

        drivers/vfio/pci/vfio_pci_config.c:1241 vfio_cap_init()
        error: buffer overflow 'pci_cap_length' 20 <= 20

      The problem is that pci_cap_length[] was defined as large enough to
      hold "PCI_CAP_ID_AF + 1" elements.  The code in vfio_cap_init() assumes
      it has PCI_CAP_ID_MAX + 1 elements.  Originally, PCI_CAP_ID_AF and
      PCI_CAP_ID_MAX were the same but then we introduced PCI_CAP_ID_EA in
      commit f80b0ba95964 ("PCI: Add Enhanced Allocation register entries")
      so now the array is too small.

      Let's fix this by making the array size PCI_CAP_ID_MAX + 1.  And let's
      make a similar change to pci_ext_cap_length[] for consistency.  Also
      both these arrays can be made const.

      Signed-off-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Alex Williamson <alex.williamson@xxxxxxxxxx>

  commit d56e4f75346933dd2cb11533a668ce883908c859
  Author: Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx>
  Date:   Sat Nov 7 13:33:25 2015 +0200

      tpm: fix compat 'ppi' link handling in tpm_chip_register()

      __compat_only_sysfs_link_entry_to_kobj() was unconditionally called for
      TPM1 chips, which caused crash on Acer C720 laptop where DSM for the
      ACPI object did not exist.

      There are two reasons for unwanted behavior:

      * The code did not check whether
        __compat_only_sysfs_link_entry_to_kobj() returned -ENOENT. This is
        OK. It just meanst that ppi is not available.
      * The code did not clean up properly. Compat link should added only
        after all other init is done.

      This patch sorts out these issues.

      Fixes: 9b774d5cf2db
      Reported-by: Jeremiah Mahler <jmmahler@xxxxxxxxx>
      Signed-off-by: Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx>
      Tested-by: Jeremiah Mahler <jmmahler@xxxxxxxxx>
      Acked-by: Peter Huewe <PeterHuewe@xxxxxx>

  commit 2e31125c241212e2407d61a2d1cbdad0055a30b0
  Author: Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 30 14:57:02 2015 +0200

      tpm: fix missing migratable flag in sealing functionality for TPM2

      The 'migratable' flag was not added to the key payload. This patch
      fixes the problem.

      Fixes: 0fe5480303a1 ("keys, trusted: seal/unseal with TPM 2.0 chips")
      Signed-off-by: Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx>
      Acked-by: Peter Huewe <PeterHuewe@xxxxxx>

  commit b1a4144a695ff4a6834a2680600f36f991fa4926
  Author: Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx>
  Date:   Mon Nov 2 19:55:29 2015 +0200

      TPM: revert the list handling logic fixed in 398a1e7

      Mimi reported that afb5abc reverts the fix in 398a1e7. This patch
      reverts it back.

      Fixes: afb5abc262e9 ("tpm: two-phase chip management functions")
      Reported-by: Mimi Zohar <zohar@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx>
      Acked-by: Peter Huewe <PeterHuewe@xxxxxx>

  commit eb8ed1eb9a158c460d10205eaff71fd4ac67c160
  Author: Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
  Date:   Thu Oct 22 22:32:41 2015 +0200

      TPM: Avoid reference to potentially freed memory

      Reference to the 'np' node is dropped before dereferencing the 'sizep' and
      'basep' pointers, which could by then point to junk if the node has been
      freed.

      Refactor code to call 'of_node_put' later.

      Fixes: c5df39262dd5 ("drivers/char/tpm: Add securityfs support for event 
log")
      Signed-off-by: Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
      Reviewed-by: Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx>
      Signed-off-by: Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx>
      Acked-by: Peter Huewe <PeterHuewe@xxxxxx>

  commit 14b5c1c9159bf6f109b667d31da82859d8c8cdcd
  Author: Martin Wilck <Martin.Wilck@xxxxxxxxxxxxxx>
  Date:   Mon Nov 9 16:38:50 2015 +0200

      tpm_tis: restore IRQ vector in IO memory after failed probing

      If the probing finishes without success, it will leave the value 15 in
      the TPM_IRQ_VECTOR register. If the driver is unloaded and reloaded, it
      will "think" that the hardware had been programmed with IRQ 15, and will
      not probe again.

      This patch restores the original value in the IO memory if no IRQ is
      probed.

      Signed-off-by: Martin Wilck <Martin.Wilck@xxxxxxxxxxxxxx>
      Acked-by: Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx>
      Signed-off-by: Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx>
      Acked-by: Peter Huewe <PeterHuewe@xxxxxx>

  commit 2aef9da60bfdeb68dbcd4f114c098cbaa841b4ee
  Author: Martin Wilck <Martin.Wilck@xxxxxxxxxxxxxx>
  Date:   Thu Nov 5 17:19:09 2015 +0100

      tpm_tis: free irq after probing

      Release IRQs used for probing only. Otherwise the TPM will end up
      with all IRQs 3-15 assigned.

      Fixes: afb5abc262e9 ("tpm: two-phase chip management functions")
      Signed-off-by: Martin Wilck <Martin.Wilck@xxxxxxxxxxxxxx>
      Reviewed-by: Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx>
      Tested-by: Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx>
      Signed-off-by: Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx>
      Acked-by: Peter Huewe <PeterHuewe@xxxxxx>

  commit 31dddd9eb9ebae9a2a9b502750e9e481d752180a
  Author: Bob Peterson <rpeterso@xxxxxxxxxx>
  Date:   Wed Oct 28 09:05:31 2015 -0500

      GFS2: Fix rgrp end rounding problem for bsize < page size

      This patch fixes a bug introduced by commit 7005c3e. That patch
      tries to map a vm range for resource groups, but the calculation
      breaks down when the block size is less than the page size.

      Signed-off-by: Bob Peterson <rpeterso@xxxxxxxxxx>

  commit 7b52e2793a58af61b5d349c2c080437a437a4edb
  Author: Steve French <smfrench@xxxxxxxxx>
  Date:   Mon Nov 9 08:59:45 2015 -0600

      Allow copy offload (CopyChunk) across shares

      FSCTL_SRV_COPYCHUNK_WRITE only requires that the source and target
      be on the same server (not the same volume or same share),
      so relax the existing check (which required them to be on
      the same share). Note that this works to Windows (and presumably
      most other NAS) but Samba requires that the source
      and target be on the same share.  Moving a file across
      shares is a common use case and can be very heplful (100x faster).

      Signed-off-by: Steve French <steve.french@xxxxxxxxxxxxxxx>
      Reviewed-by: David Disseldorp <ddiss@xxxxxxxxx>

  commit 25b3e5a3344e1f700c1efec5b6f0199f04707fb1
  Author: Rik van Riel <riel@xxxxxxxxxx>
  Date:   Thu Nov 5 15:56:22 2015 -0500

      sched/numa: Fix math underflow in task_tick_numa()

      The NUMA balancing code implements delays in scanning by
      advancing curr->node_stamp beyond curr->se.sum_exec_runtime.

      With unsigned math, that creates an underflow, which results
      in task_numa_work being queued all the time, even when we
      don't want to.

      Avoiding the math underflow makes it possible to reduce CPU
      overhead in the NUMA balancing code.

      Reported-and-tested-by: Jan Stancek <jstancek@xxxxxxxxxx>
      Signed-off-by: Rik van Riel <riel@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: mgorman@xxxxxxx
      Link: 
http://lkml.kernel.org/r/1446756983-28173-2-git-send-email-riel@xxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit b71b437eedaed985062492565d9d421d975ae845
  Author: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
  Date:   Mon Nov 2 10:50:51 2015 +0100

      perf: Fix inherited events vs. tracepoint filters

      Arnaldo reported that tracepoint filters seem to misbehave (ie. not
      apply) on inherited events.

      The fix is obvious; filters are only set on the actual (parent)
      event, use the normal pattern of using this parent event for filters.
      This is safe because each child event has a reference to it.

      Reported-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Tested-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: David Ahern <dsahern@xxxxxxxxx>
      Cc: Frédéric Weisbecker <fweisbec@xxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Cc: Steven Rostedt <rostedt@xxxxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Cc: Wang Nan <wangnan0@xxxxxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Link: 
http://lkml.kernel.org/r/20151102095051.GN17308@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit 2fd59077755c44dbbd9b2fa89cf988235a3a6a2b
  Author: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 4 05:48:38 2015 -0800

      perf: Disable IRQs across RCU RS CS that acquires scheduler lock

      The perf_lock_task_context() function disables preemption across its
      RCU read-side critical section because that critical section acquires
      a scheduler lock.  If there was a preemption during that RCU read-side
      critical section, the rcu_read_unlock() could attempt to acquire scheduler
      locks, resulting in deadlock.

      However, recent optimizations to expedited grace periods mean that IPI
      handlers that execute during preemptible RCU read-side critical sections
      can now cause the subsequent rcu_read_unlock() to acquire scheduler locks.
      Disabling preemption does nothiing to prevent these IPI handlers from
      executing, so these optimizations introduced a deadlock.  In theory,
      this deadlock could be avoided by pulling all wakeups and printk()s out
      from rnp->lock critical sections, but in practice this would re-introduce
      some RCU CPU stall warning bugs.

      Given that acquiring scheduler locks entails disabling interrupts, these
      deadlocks can be avoided by disabling interrupts (instead of disabling
      preemption) across any RCU read-side critical that acquires scheduler
      locks and holds them across the rcu_read_unlock().  This commit therefore
      makes this change for perf_lock_task_context().

      Reported-by: Dave Jones <davej@xxxxxxxxxxxxxxxxx>
      Reported-by: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
      Signed-off-by: Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Peter Zijlstra (Intel) <peterz@xxxxxxxxxxxxx>
      Cc: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
      Cc: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
      Cc: Stephane Eranian <eranian@xxxxxxxxx>
      Cc: Thomas Gleixner <tglx@xxxxxxxxxxxxx>
      Link: http://lkml.kernel.org/r/20151104134838.GR29027@xxxxxxxxxxxxxxxxxx
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit fb226c3d7c77b4f99cee675795cc0e70937c56ee
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Mon Nov 9 09:55:46 2015 +0100

      arm64: fix R/O permissions of FDT mapping

      The mapping permissions of the FDT are set to 'PAGE_KERNEL | PTE_RDONLY'
      in an attempt to map the FDT as read-only. However, not only does this
      break at build time under STRICT_MM_TYPECHECKS (since the two terms are
      of different types in that case), it also results in both the PTE_WRITE
      and PTE_RDONLY attributes to be set, which means the region is still
      writable under ARMv8.1 DBM (and an attempted write will simply clear the
      PT_RDONLY bit).

      So instead, define PAGE_KERNEL_RO (which already has an established
      meaning across architectures) and use that instead.

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit b219545e9646e9d4089a74029c82ae59645e12ae
  Author: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
  Date:   Mon Nov 9 09:55:45 2015 +0100

      arm64: fix STRICT_MM_TYPECHECKS issue in PTE_CONT manipulation

      The new page table code that manipulates the PTE_CONT flags does so
      in a way that is inconsistent with STRICT_MM_TYPECHECKS. Fix it by
      using the correct combination of __pgprot() and pgprot_val().

      Signed-off-by: Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
      Signed-off-by: Catalin Marinas <catalin.marinas@xxxxxxx>

  commit 16771c7c704769c5f3d70c024630b6e5b3eafa67
  Author: Jurgen Kramer <gtmkramer@xxxxxxxxx>
  Date:   Mon Nov 9 12:13:55 2015 +0100

      ALSA: usb: Add native DSD support for Aune X1S

      This patch adds native DSD support for the Aune X1S 32BIT/384 DSD DAC

      Signed-off-by: Jurgen Kramer <gtmkramer@xxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit d3df0465db00cf4ed9f90d0bfc3b827d32b9c796
  Author: Luca Porzio <lporzio@xxxxxxxxxx>
  Date:   Fri Nov 6 15:12:26 2015 +0000

      mmc: remove bondage between REQ_META and reliable write

      Anytime a write operation is performed with Reliable Write flag enabled,
      the eMMC device is enforced to bypass the cache and do a write to the
      underling NVM device by Jedec specification; this causes a performance
      penalty since write operations can't be optimized by the device cache.

      In our tests, we replayed a typical mobile daily trace pattern and found
      ~9% overall time reduction in trace replay by using this patch. Also the
      write ops within 4KB~64KB chunk size range get a 40~60% performance
      improvement by using the patch (as this range of write chunks are the ones
      affected by REQ_META).

      This patch has been discussed in the Mobile & Embedded Linux Storage Forum
      and it's the results of feedbacks from many people. We also checked with
      fsdevl and f2fs mailing list developers that this change in the usage of
      REQ_META is not affecting FS behavior and we got positive feedbacks.
      Reporting here the feedbacks:
      http://comments.gmane.org/gmane.linux.file-systems/97219
      http://thread.gmane.org/gmane.linux.file-systems.f2fs/3178/focus=3183

      Signed-off-by: Bruce Ford <bford@xxxxxxxxxx>
      Signed-off-by: Luca Porzio <lporzio@xxxxxxxxxx>
      Fixes: ce39f9d17c14 ("mmc: support packed write command for eMMC4.5 
devices")
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit c255cb2ed3c7960b2c68f45de1dc0ac2197c8f78
  Author: Anthony Lineham <anthony.lineham@xxxxxxxxxxxxxxxxxxx>
  Date:   Thu Oct 22 11:17:03 2015 +1300

      netfilter: Fix removal of GRE expectation entries created by PPTP

      The uninitialized tuple structure caused incorrect hash calculation
      and the lookup failed.

      Link: https://bugzilla.kernel.org/show_bug.cgi?id=106441
      Signed-off-by: Anthony Lineham <anthony.lineham@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 3d35877294005911da54c36e2ab4d7b72d5e9331
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Mon Nov 9 10:36:01 2015 +0100

      mmc: MMC_GOLDFISH should depend on HAS_DMA

      If NO_DMA=y:

          ERROR: dma_unmap_sg [drivers/mmc/host/android-goldfish.ko] undefined!
          ERROR: dma_alloc_coherent [drivers/mmc/host/android-goldfish.ko] 
undefined!
          ERROR: dma_map_sg [drivers/mmc/host/android-goldfish.ko] undefined!
          ERROR: dma_free_coherent [drivers/mmc/host/android-goldfish.ko] 
undefined!

      Add a dependency on HAS_DMA to fix this.

      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 62d494ca2773563e333e670cd18378705dad32d4
  Author: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
  Date:   Fri Nov 6 12:22:08 2015 +0100

      mmc: mediatek: Preinitialize delay_phase in get_best_delay()

      drivers/mmc/host/mtk-sd.c: In function â??get_best_delayâ??:
      drivers/mmc/host/mtk-sd.c:1284: warning: â??delay_phase.startâ?? is used 
uninitialized in this function
      drivers/mmc/host/mtk-sd.c:1284: warning: â??delay_phase.maxlenâ?? is used 
uninitialized in this function

      If delay is zero, these fields are indeed not initialized.
      Let the compiler preinitialize the whole struct to fix this.

      Signed-off-by: Geert Uytterhoeven <geert@xxxxxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit ae3fbdd1becdfe4488e43bc023ea672bf2c90660
  Author: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
  Date:   Fri Nov 6 12:21:33 2015 +0100

      MAINTAINERS: mmc: Remove Seungwon Jeon from dw_mmc

      Unfortunate, Seungwon's email has been bouncing for some time and it seems
      like he has moved on to other duties. So, I would like to thank him for
      his efforts, but it's now time to remove him as the co-maintainer for the
      dw_mmc driver.

      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>
      Acked-by: Jaehoon Chung <jh80.chung@xxxxxxxxxxx>

  commit d23029332c3d51fb5ac117ba5cde4dc0a3ec3fa6
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Wed Oct 28 14:25:43 2015 +0200

      mmc: mmc: Improve reliability of mmc_select_hs400()

      mmc_select_hs400() calls __mmc_switch() which checks the switch is
      successful using CMD13 (SEND_STATUS).  The problem is that it does that
      using the timing settings of the previous mode.  That is prone to error,
      especially when switching from HS to HS400 because the timing parameters
      for HS mode are tighter than the timing parameters for HS400 mode.

      In the case when CMD13 polling is used (i.e. not MMC_CAP_WAIT_WHILE_BUSY)
      with the switch command, it must be assumed that using different modes on
      the card and host must work.

      However in the case when CMD13 polling is not used
      (i.e. MMC_CAP_WAIT_WHILE_BUSY) mmc_select_hs400() can be made more
      reliable by setting the host to the correct timing before sending CMD13.

      This patch does that.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 4.2+
      Tested-by: Alim Akhtar <alim.akhtar@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 974007aaf240aa195b31c34cfdb013524a2dcfca
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Wed Oct 28 14:25:42 2015 +0200

      mmc: mmc: Move mmc_switch_status()

      Move the mmc_switch_status() function in preparation for calling it
      in mmc_select_hs400().

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 4.2+
      Tested-by: Alim Akhtar <alim.akhtar@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 51b12f7764fa8bb464cbd0f7bbd3a408d21ade16
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Wed Oct 28 14:25:41 2015 +0200

      mmc: mmc: Fix HS setting in mmc_select_hs400()

      mmc_select_hs400() begins with the card and host in HS200 mode.
      Therefore, any commands sent to the card should use HS200 timing.
      It is incorrect to set the host to High Speed (HS) timing before
      sending the switch command.  Doing so is unreliable because
      the timing parameters for HS mode are tighter than the timing
      parameters for HS200 mode.  Thus the HS timings should be set
      only after the card has switched mode.

      However, it is not unreasonable first to reduce the frequency to
      the HS mode frequency, which should make the switch command and
      subsequent CMD13 commands more reliable.

      This patch does that.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 4.2+
      Tested-by: Alim Akhtar <alim.akhtar@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 1815e61b1a7efe81017a883e817292daf7d2f922
  Author: Adrian Hunter <adrian.hunter@xxxxxxxxx>
  Date:   Wed Oct 28 14:25:40 2015 +0200

      mmc: mmc: Improve reliability of mmc_select_hs200()

      Currently mmc_select_hs200() uses __mmc_switch() which checks the
      success of the switch to HS200 mode using CMD13 (SEND_STATUS).
      The problem is that it does that using the timing settings of legacy
      mode.  That is prone to error, not least because the timing parameters
      for legacy mode are tighter than the timing parameters for HS200 mode.

      In the case when CMD13 polling is used (i.e. not MMC_CAP_WAIT_WHILE_BUSY)
      with the switch command, it must be assumed that using different modes on
      the card and host must work.

      However in the case when CMD13 polling is not used
      (i.e. MMC_CAP_WAIT_WHILE_BUSY) mmc_select_hs200() can be made more
      reliable by setting the host to the correct timing before sending CMD13.

      This patch does that.

      A complication is that the caller, mmc_select_timing(), will ignore a
      switch error (indicated by -EBADMSG), assume the old mode is valid
      and continue, so the old timing must be restored in that case.

      Signed-off-by: Adrian Hunter <adrian.hunter@xxxxxxxxx>
      Cc: <stable@xxxxxxxxxxxxxxx> # 4.2+
      Tested-by: Alim Akhtar <alim.akhtar@xxxxxxxxxxx>
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 26d49fe7195385f2f1e406feddb01c16b53e77b6
  Author: Robert Jarzmik <robert.jarzmik@xxxxxxx>
  Date:   Thu Nov 5 20:46:53 2015 +0100

      mmc: pxamci: fix read-only gpio detection polarity

      The commit converting pxamci to slot-gpio API inverted the logic of the
      read-only gpio. Fix it by inverting the logic again.

      Fixes: fd546ee6a7dc ("mmc: pxamci: fix card detect with slot-gpio API")
      Signed-off-by: Robert Jarzmik <robert.jarzmik@xxxxxxx>
      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Ulf Hansson <ulf.hansson@xxxxxxxxxx>

  commit 1d512cb77bdbda80f0dd0620a3b260d697fd581d
  Author: Filipe Manana <fdmanana@xxxxxxxx>
  Date:   Mon Nov 9 00:33:58 2015 +0000

      Btrfs: fix race leading to BUG_ON when running delalloc for nodatacow

      If we are using the NO_HOLES feature, we have a tiny time window when
      running delalloc for a nodatacow inode where we can race with a concurrent
      link or xattr add operation leading to a BUG_ON.

      This happens because at run_delalloc_nocow() we end up casting a leaf item
      of type BTRFS_INODE_[REF|EXTREF]_KEY or of type BTRFS_XATTR_ITEM_KEY to a
      file extent item (struct btrfs_file_extent_item) and then analyse its
      extent type field, which won't match any of the expected extent types
      (values BTRFS_FILE_EXTENT_[REG|PREALLOC|INLINE]) and therefore trigger an
      explicit BUG_ON(1).

      The following sequence diagram shows how the race happens when running a
      no-cow dellaloc range [4K, 8K[ for inode 257 and we have the following
      neighbour leafs:

                   Leaf X (has N items)                    Leaf Y

       [ ... (257 INODE_ITEM 0) (257 INODE_REF 256) ]  [ (257 EXTENT_DATA 
8192), ... ]
                    slot N - 2         slot N - 1              slot 0

       (Note the implicit hole for inode 257 regarding the [0, 8K[ range)

             CPU 1                                         CPU 2

       run_dealloc_nocow()
         btrfs_lookup_file_extent()
           --> searches for a key with value
               (257 EXTENT_DATA 4096) in the
               fs/subvol tree
           --> returns us a path with
               path->nodes[0] == leaf X and
               path->slots[0] == N

         because path->slots[0] is >=
         btrfs_header_nritems(leaf X), it
         calls btrfs_next_leaf()

         btrfs_next_leaf()
           --> releases the path

                                                    hard link added to our 
inode,
                                                    with key (257 INODE_REF 500)
                                                    added to the end of leaf X,
                                                    so leaf X now has N + 1 keys

           --> searches for the key
               (257 INODE_REF 256), because
               it was the last key in leaf X
               before it released the path,
               with path->keep_locks set to 1

           --> ends up at leaf X again and
               it verifies that the key
               (257 INODE_REF 256) is no longer
               the last key in the leaf, so it
               returns with path->nodes[0] ==
               leaf X and path->slots[0] == N,
               pointing to the new item with
               key (257 INODE_REF 500)

         the loop iteration of run_dealloc_nocow()
         does not break out the loop and continues
         because the key referenced in the path
         at path->nodes[0] and path->slots[0] is
         for inode 257, its type is < BTRFS_EXTENT_DATA_KEY
         and its offset (500) is less then our delalloc
         range's end (8192)

         the item pointed by the path, an inode reference item,
         is (incorrectly) interpreted as a file extent item and
         we get an invalid extent type, leading to the BUG_ON(1):

         if (extent_type == BTRFS_FILE_EXTENT_REG ||
            extent_type == BTRFS_FILE_EXTENT_PREALLOC) {
             (...)
         } else if (extent_type == BTRFS_FILE_EXTENT_INLINE) {
             (...)
         } else {
             BUG_ON(1)
         }

      The same can happen if a xattr is added concurrently and ends up having
      a key with an offset smaller then the delalloc's range end.

      So fix this by skipping keys with a type smaller than
      BTRFS_EXTENT_DATA_KEY.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Filipe Manana <fdmanana@xxxxxxxx>

  commit adaa0b6c49795551b07576e952dfa94c3ccded51
  Author: Petri Gynther <pgynther@xxxxxxxxxx>
  Date:   Mon Oct 19 11:44:24 2015 -0700

      MIPS: Switch BMIPS5000 to use r4k_wait_irqoff()

      BCM7425 CPU Interface Zephyr Processor, pages 5-309 and 5-310
      BCM7428B0 CPU Interface Zephyr Processor, pages 5-337 and 5-338

      WAIT instruction:
      Thread enters wait state. No instructions are executed until an
      interrupt occurs. The processor's clocks are stopped if both threads
      are in idle mode.

      Description:
      Execution of this instruction puts the thread into wait state, an idle
      mode in which no instructions are fetched or executed. The thread remains
      in wait state until an interrupt occurs that is not masked by the
      interrupt mask field in the Status register. Then, if interrupts are
      enabled by the IE bit in the Status register, the interrupt is serviced.
      The ERET instruction returns to the instruction following the WAIT
      instruction. If interrupts are disabled, the processor resumes executing
      instructions with the next sequential instruction.

      Programming notes:
      The WAIT instruction should be executed while interrupts are disabled
      by the IE bit in the Status register. This avoids a potential timing
      hazard, which occurs if an interrupt is taken between testing the counter
      and executing the WAIT instruction. In this hazard case, the interrupt
      will have been completed before the WAIT instruction is executed, so
      the processor will remain indefinitely in wait state until the next
      interrupt.

      Signed-off-by: Petri Gynther <pgynther@xxxxxxxxxx>
      Reviewed-by: Florian Fainelli <f.fainelli@xxxxxxxxx>
      Cc: cernekee@xxxxxxxxx
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11322/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit ba953391e03fd3b9eb0db19814cadb201574b4e2
  Author: Adam Majer <adamm@xxxxxxxxxxx>
  Date:   Mon Nov 9 10:14:29 2015 +0100

      hwmon: (k10temp) Remove duplicate pci-id define

      PCI_DEVICE_ID_AMD_15H_M60H_NB_F3 is now defined in pci_ids.h

      Signed-off-by: Adam Majer <adamm@xxxxxxxxxxx>
      Acked-by: Clemens Ladisch <clemens@xxxxxxxxxx>
      Signed-off-by: Jean Delvare <jdelvare@xxxxxxx>

  commit 7963b3f127a7486815bc10639630c95c2792b811
  Author: Petri Gynther <pgynther@xxxxxxxxxx>
  Date:   Mon Oct 19 11:49:52 2015 -0700

      MIPS: add nmi_enter() + nmi_exit() to nmi_exception_handler()

      We need to enter NMI context when NMI interrupt fires.

      Signed-off-by: Petri Gynther <pgynther@xxxxxxxxxx>
      Cc: linux-mips@xxxxxxxxxxxxxx
      Patchwork: https://patchwork.linux-mips.org/patch/11323/
      Signed-off-by: Ralf Baechle <ralf@xxxxxxxxxxxxxx>

  commit 52d43d8184b1840c7cf6136724223585f51a1074
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 26 11:20:44 2015 +0100

      s390/pci_dma: improve debugging of errors during dma map

      Improve debugging to find out what went wrong during a failed
      dma map/unmap operation.

      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Gerald Schaefer <gerald.schaefer@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 66728eeea6d80060e4b9df55c7845c838ff2799f
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 26 11:19:13 2015 +0100

      s390/pci_dma: handle dma table failures

      We use lazy allocation for translation table entries but don't handle
      allocation (and other) failures during translation table updates.

      Handle these failures and undo translation table updates when it's
      meaningful.

      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Gerald Schaefer <gerald.schaefer@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 4d5a6b72959601d6c12e7e1ef3aa4132f0a62523
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Oct 26 11:15:28 2015 +0100

      s390/pci_dma: unify label of invalid translation table entries

      Newly allocated translation table entries are flagged as invalid
      and protected. If an existing translation table entry is invalidated,
      the protection flag is left unchanged.

      If a page (with invalid and protection flag set) is accessed it's
      undefined which type of exception we'll receive.

      Make sure to always set the invalid flag only.

      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Reviewed-by: Gerald Schaefer <gerald.schaefer@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 86b68c3873a82144033a82707781829e3f7b3859
  Author: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
  Date:   Fri Nov 6 13:50:25 2015 +0100

      s390/syscalls: remove system call number calculation

      Explicitly write the system call number for each define instead of
      calculating it. This makes it easier to parse the file when generating
      system call tables for various tools and libraries.

      Signed-off-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit cd5dead9d32423d63c802328c0563d7ff29647cd
  Author: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
  Date:   Thu Jul 16 22:40:27 2015 +0200

      s390/cio: simplify css_generate_pgid

      Simplify the css_generate_pgid code by using stap() independent of
      CONFIG_SMP. For !CONFIG_SMP builds stap() will deliver the address
      of the cpu we IPL'ed from (which can be != 0).

      Note: the ifdef was likely added to be compatible with _very_ old
      machines which we don't support anyway.

      Reviewed-by: Peter Oberparleiter <oberpar@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Sebastian Ott <sebott@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit 230ccb370f8f95b2600a1fce90ceb8ee70a15dbc
  Author: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>
  Date:   Thu Nov 5 13:50:04 2015 +0100

      s390/diag: add a s390 prefix to the diagnose trace point

      Documentation/trace/tracepoints.txt states that the naming scheme
      for tracepoints is "subsys_event" to avoid collisions. Rename
      the 'diagnose' tracepoint to 's390_diagnose'.

      Reported-by: Peter Oberparleiter <oberpar@xxxxxxxxxxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit c6eafbf9903c4283ba146098ad54240a24ffbeb1
  Author: Sascha Silbe <silbe@xxxxxxxxxxxxxxxxxx>
  Date:   Wed Nov 4 13:32:08 2015 +0100

      s390/head: fix error message on unsupported hardware

      startup calls the C function _sclp_print_early() if the machine we're
      running on is not supported by the kernel. sclp.c is getting built
      with -m64, so _sclp_print_early() expects the zSeries ELF ABI to be
      used.

      We previously called _sclp_print_early() using the S/390 ELF ABI, with
      a stack frame size of 96 bytes and while being in 31-bit address
      mode. This caused _sclp_wait_int() (called indirectly from
      _sclp_print_early()) to jump to an undefined address. While
      _sclp_wait_int() contained some code to deal with being called in
      31-bit addressing mode, it didn't quite work. While fixing this is
      possible, the code would still only work by chance and could break any
      time.

      Ensure compliance with the zSeries ELF ABI by switching to 64-bit
      addressing mode early and using a minimum stack frame size of 160
      bytes.

      Signed-off-by: Sascha Silbe <silbe@xxxxxxxxxxxxxxxxxx>
      Acked-by: Heiko Carstens <heiko.carstens@xxxxxxxxxx>
      Signed-off-by: Martin Schwidefsky <schwidefsky@xxxxxxxxxx>

  commit b32e1f58c254bd62f8a5852b8b181f6d51df1463
  Merge: 66ef349 2b62c2d
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Mon Nov 9 08:45:42 2015 +0100

      Merge branch 'liblockdep-fixes' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sashal/linux into locking/urgent

      Pull liblockdep fixes from Sasha Levin:

        " ... three fixes for liblockdep. Just keeping up with kernel
          code changes and new gcc versions."

      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit bb3fc5ddef93836a36a39308cf7eca82ef0a1c4c
  Author: Tobias Klauser <tklauser@xxxxxxxxxx>
  Date:   Fri Nov 6 14:19:11 2015 +0800

      nios2: Remove unnecessary #ifdef guards

      __HAVE_ARCH_MEMMOVE and __HAVE_ARCH_MEMSET are unconditionally defined
      for nios2, so there is no need to protect the function definitions of
      memmove() and memset().

      Signed-off-by: Tobias Klauser <tklauser@xxxxxxxxxx>
      Acked-by: Ley Foon Tan <lftan@xxxxxxxxxx>

  commit 713e9b802e21e762f31336da72bcfc32e1ab65ac
  Author: Marek Vasut <marex@xxxxxxx>
  Date:   Wed Sep 30 22:08:00 2015 +0800

      nios2: Switch to generic __xchg()

      The generic __xchg() implementation present in asm-generic/cmpxchg.h is
      correct on nios2 and even generates the same code. Switch to this generic
      implementation to trim down the amount of ad-hoc copies of the code.

      Signed-off-by: Marek Vasut <marex@xxxxxxx>
      Acked-by: Ley Foon Tan <lftan@xxxxxxxxxx>

  commit 4db2196d0c0de110779b1767d956995efefdb915
  Author: Marek Vasut <marex@xxxxxxx>
  Date:   Wed Sep 30 22:06:46 2015 +0800

      nios2: Fix unused variable warning

      Fix the following compiler splat by adding __maybe_unused annotation to
      the variable. Using this particular annotation has the least ugly impact
      on the code compared to using ifdeffery.

      arch/nios2/kernel/setup.c: In function 'nios2_boot_init':
      arch/nios2/kernel/setup.c:107:7: warning: unused variable 
'cmdline_passed' [-Wunused-variable]
        char cmdline_passed[COMMAND_LINE_SIZE] = { 0, };
             ^

      Signed-off-by: Marek Vasut <marex@xxxxxxx>
      Acked-by: Ley Foon Tan <lftan@xxxxxxxxxx>

  commit 761d4be5cf666973db317aab944b45bb07fe0a4f
  Author: Iyappan Subramanian <isubramanian@xxxxxxx>
  Date:   Sat Nov 7 11:50:40 2015 -0800

      drivers: net: xgene: fix RGMII 10/100Mb mode

      This patch fixes the RGMII 10/100M mode by reprogramming the clock.

      Signed-off-by: Iyappan Subramanian <isubramanian@xxxxxxx>
      Tested-by: Fushen Chen <fchen@xxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit b73c8bfd07eb53a964b7b917b0599e12103097fb
  Merge: fb9a10d 3aed822
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Nov 8 20:56:39 2015 -0500

      Merge branch 'skb_to_full_sk'

      Eric Dumazet says:

      ====================
      net: add skb_to_full_sk() helper

      Many contexts need to reach listener socket from skb attached
      to a request socket. This patch series add skb_to_full_sk() to
      clearly express this need and use it where appropriate.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 3aed822591556f93169ff532fda8c71b9b596de5
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sun Nov 8 10:54:12 2015 -0800

      netfilter: nft_meta: use skb_to_full_sk() helper

      SYNACK packets might be attached to request sockets.

      Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets 
instead of listener")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 02a56c81cf33dea892da1f8a5231b0f7d7e714fe
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sun Nov 8 10:54:11 2015 -0800

      net_sched: em_meta: use skb_to_full_sk() helper

      SYNACK packets might be attached to request sockets.

      Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets 
instead of listener")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 743b2a66744635b6d91e3d9da1fff29ad5ceb456
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sun Nov 8 10:54:10 2015 -0800

      sched: cls_flow: use skb_to_full_sk() helper

      SYNACK packets might be attached to request sockets.

      Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets 
instead of listener")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fdd723e2a856b6132d5e7beb2a2d3ec1e6a6297f
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sun Nov 8 10:54:09 2015 -0800

      netfilter: xt_owner: use skb_to_full_sk() helper

      SYNACK packets might be attached to a request socket,
      xt_owner wants to gte the listener in this case.

      Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets 
instead of listener")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 8827d90e29e664aa959817467a3da72041ca2269
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sun Nov 8 10:54:08 2015 -0800

      smack: use skb_to_full_sk() helper

      This module wants to access sk->sk_security, which is not
      available for request sockets.

      Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets 
instead of listener")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 54abc686c2d111e98228943a7e1e51cc256e35d9
  Author: Eric Dumazet <edumazet@xxxxxxxxxx>
  Date:   Sun Nov 8 10:54:07 2015 -0800

      net: add skb_to_full_sk() helper and use it in 
selinux_netlbl_skbuff_setsid()

      Generalize selinux_skb_sk() added in commit 212cd0895330
      ("selinux: fix random read in selinux_ip_postroute_compat()")
      so that we can use it other contexts.

      Use it right away in selinux_netlbl_skbuff_setsid()

      Fixes: ca6fb0651883 ("tcp: attach SYNACK messages to request sockets 
instead of listener")
      Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit fb9a10d9d8552acf6f9dee2ecb2d047777821d8b
  Merge: d0b8914 82aff3e
  Author: David S. Miller <davem@xxxxxxxxxxxxx>
  Date:   Sun Nov 8 20:47:26 2015 -0500

      Merge tag 'nfc-fixes-4.4-1' of 
git://git.kernel.org/pub/scm/linux/kernel/git/sameo/nfc-fixes

      Samuel Ortiz says:

      ====================
      NFC 4.4 fixes

      This is the 1st NFC fixes pull request for 4.4.

      It includes bug fixes and one fix for a build failure, all of them
      introduced with the first NFC pull request for 4.4.

      We have:

      - Fix nfcmrvl SPI driver potential build error due to a broken Kconfig
        dependency.
      - A few fixes for the firmware download implementation for the nfcmrvl
        UART driver.
      - A GPIO allocation leak for the nfcmrvl driver.
      - One code simplification for the nfcmrvl DT handling.
      ====================

      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit d0b891415f5e6e3d478cf069e573c70f9d9c0217
  Author: Yang Shi <yang.shi@xxxxxxxxxx>
  Date:   Fri Nov 6 21:38:58 2015 -0800

      bpf: doc: correct arch list for supported eBPF JIT

      aarch64 and s390x support eBPF JIT too, correct document to reflect this 
and
      avoid any confusion.

      Signed-off-by: Yang Shi <yang.shi@xxxxxxxxxx>
      Acked-by: Daniel Borkmann <daniel@xxxxxxxxxxxxx>
      Acked-by: Alexei Starovoitov <ast@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit afaa7c542cc9c4d8a99ba252a8ea5e8bc7c897e2
  Merge: 6a13feb 4c3dab3
  Author: Chris Zankel <chris@xxxxxxxxxx>
  Date:   Sun Nov 8 23:12:47 2015 +0000

      Merge tag 'xtensa-for-next-20151109' of 
git://github.com/jcmvbkbc/linux-xtensa

      Xtensa improvements for 4.4:

      - fix remaining issues with noMMU cores;
      - fix build for cores w/o cache or zero overhead loop options;
      - fix boot of secondary cores in SMP configuration;
      - add support for DMA to high memory pages;
      - add dma_to_phys and phys_to_dma functions.

  commit e75cb467df29a428612c162e6f1451c5c0717091
  Merge: b486598 0aae24e
  Author: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
  Date:   Sun Nov 8 23:52:23 2015 +0100

      Merge branch 'master' of git://blackhole.kfki.hu/nf

      Jozsef Kadlecsik says:
      ====================
      Please apply the next bugfixes against the nf tree.

      - Fix extensions alignment in ipset: Gerhard Wiesinger reported
        that the missing data aligments lead to crash on non-intel
        architecture. The patch was tested on armv7h by Gerhard Wiesinger
        and on x86_64 and sparc64 by me.
      - An incorrect index at the hash:* types could lead to
        falsely early expired entries and memory leak when the comment
        extension was used too.
      - Release empty hash bucket block when all entries are expired or
        all slots are empty instead of shrinkig the data part to zero.
      ====================

      Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>

  commit 4c3dab398d1317546d22b27be1a73b2c83ec7153
  Author: Max Filippov <jcmvbkbc@xxxxxxxxx>
  Date:   Sat Nov 7 06:59:51 2015 +0300

      xtensa: implement dma_to_phys and phys_to_dma

      This fixes the following build error seen in -next:

        drivers/gpu/drm/nouveau/nvkm/subdev/instmem/gk20a.c:143:2: error:
        implicit declaration of function 'dma_to_phys'

      Signed-off-by: Max Filippov <jcmvbkbc@xxxxxxxxx>

  commit c7ca9fe17b84719ef2edbe854e1b0cac04a91e2f
  Author: Max Filippov <jcmvbkbc@xxxxxxxxx>
  Date:   Fri Oct 9 02:44:23 2015 +0300

      xtensa: support DMA to high memory

      - don't bugcheck if high memory page is passed to xtensa_map_page;
      - turn empty dcache flush macros into functions so that they could be
        passed as function parameters;
      - use kmap_atomic to map high memory pages for cache invalidation/
        flushing performed by xtensa_sync_single_for_{cpu,device}.

      Signed-off-by: Max Filippov <jcmvbkbc@xxxxxxxxx>

  commit 14f09e2f9b85076133b795a2d2615f635482de1b
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Tue Nov 3 15:12:01 2015 +0100

      raid5-cache: add crc32c Kconfig dependency

      The recent change of the raid5-cache code to use crc32c instead
      of crc32 causes link errors when CONFIG_LIBCRC32C is disabled:

      drivers/built-in.o: In function crc32c'
      core.c:(.text+0x1c6060): undefined reference to `crc32c'

      This adds an explicit 'select' statement like all other users
      of this function do.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: 5cb2fbd6ea0d ("raid5-cache: use crc32c checksum")
      Signed-off-by: NeilBrown <neilb@xxxxxxxx>

  commit aeafbf8486c9e2bd53f5cc3c10c0b7fd7149d69c
  Author: Filipe Manana <fdmanana@xxxxxxxx>
  Date:   Fri Nov 6 13:33:33 2015 +0000

      Btrfs: fix race leading to incorrect item deletion when dropping extents

      While running a stress test I got the following warning triggered:

        [191627.672810] ------------[ cut here ]------------
        [191627.673949] WARNING: CPU: 8 PID: 8447 at fs/btrfs/file.c:779 
__btrfs_drop_extents+0x391/0xa50 [btrfs]()
        (...)
        [191627.701485] Call Trace:
        [191627.702037]  [<ffffffff8145f077>] dump_stack+0x4f/0x7b
        [191627.702992]  [<ffffffff81095de5>] ? console_unlock+0x356/0x3a2
        [191627.704091]  [<ffffffff8104b3b0>] warn_slowpath_common+0xa1/0xbb
        [191627.705380]  [<ffffffffa0664499>] ? 
__btrfs_drop_extents+0x391/0xa50 [btrfs]
        [191627.706637]  [<ffffffff8104b46d>] warn_slowpath_null+0x1a/0x1c
        [191627.707789]  [<ffffffffa0664499>] __btrfs_drop_extents+0x391/0xa50 
[btrfs]
        [191627.709155]  [<ffffffff8115663c>] ? 
cache_alloc_debugcheck_after.isra.32+0x171/0x1d0
        [191627.712444]  [<ffffffff81155007>] ? 
kmemleak_alloc_recursive.constprop.40+0x16/0x18
        [191627.714162]  [<ffffffffa06570c9>] 
insert_reserved_file_extent.constprop.40+0x83/0x24e [btrfs]
        [191627.715887]  [<ffffffffa065422b>] ? start_transaction+0x3bb/0x610 
[btrfs]
        [191627.717287]  [<ffffffffa065b604>] 
btrfs_finish_ordered_io+0x273/0x4e2 [btrfs]
        [191627.728865]  [<ffffffffa065b888>] finish_ordered_fn+0x15/0x17 
[btrfs]
        [191627.730045]  [<ffffffffa067d688>] normal_work_helper+0x14c/0x32c 
[btrfs]
        [191627.731256]  [<ffffffffa067d96a>] 
btrfs_endio_write_helper+0x12/0x14 [btrfs]
        [191627.732661]  [<ffffffff81061119>] process_one_work+0x24c/0x4ae
        [191627.733822]  [<ffffffff810615b0>] worker_thread+0x206/0x2c2
        [191627.734857]  [<ffffffff810613aa>] ? 
process_scheduled_works+0x2f/0x2f
        [191627.736052]  [<ffffffff810613aa>] ? 
process_scheduled_works+0x2f/0x2f
        [191627.737349]  [<ffffffff810669a6>] kthread+0xef/0xf7
        [191627.738267]  [<ffffffff810f3b3a>] ? time_hardirqs_on+0x15/0x28
        [191627.739330]  [<ffffffff810668b7>] ? __kthread_parkme+0xad/0xad
        [191627.741976]  [<ffffffff81465592>] ret_from_fork+0x42/0x70
        [191627.743080]  [<ffffffff810668b7>] ? __kthread_parkme+0xad/0xad
        [191627.744206] ---[ end trace bbfddacb7aaada8d ]---

        $ cat -n fs/btrfs/file.c
        691  int __btrfs_drop_extents(struct btrfs_trans_handle *trans,
        (...)
        758                  btrfs_item_key_to_cpu(leaf, &key, path->slots[0]);
        759                  if (key.objectid > ino ||
        760                      key.type > BTRFS_EXTENT_DATA_KEY || key.offset 
>= end)
        761                          break;
        762
        763                  fi = btrfs_item_ptr(leaf, path->slots[0],
        764                                      struct btrfs_file_extent_item);
        765                  extent_type = btrfs_file_extent_type(leaf, fi);
        766
        767                  if (extent_type == BTRFS_FILE_EXTENT_REG ||
        768                      extent_type == BTRFS_FILE_EXTENT_PREALLOC) {
        (...)
        774                  } else if (extent_type == 
BTRFS_FILE_EXTENT_INLINE) {
        (...)
        778                  } else {
        779                          WARN_ON(1);
        780                          extent_end = search_start;
        781                  }
        (...)

      This happened because the item we were processing did not match a file
      extent item (its key type != BTRFS_EXTENT_DATA_KEY), and even on this
      case we cast the item to a struct btrfs_file_extent_item pointer and
      then find a type field value that does not match any of the expected
      values (BTRFS_FILE_EXTENT_[REG|PREALLOC|INLINE]). This scenario happens
      due to a tiny time window where a race can happen as exemplified below.
      For example, consider the following scenario where we're using the
      NO_HOLES feature and we have the following two neighbour leafs:

                     Leaf X (has N items)                    Leaf Y

      [ ... (257 INODE_ITEM 0) (257 INODE_REF 256) ]  [ (257 EXTENT_DATA 8192), 
... ]
                slot N - 2         slot N - 1              slot 0

      Our inode 257 has an implicit hole in the range [0, 8K[ (implicit rather
      than explicit because NO_HOLES is enabled). Now if our inode has an
      ordered extent for the range [4K, 8K[ that is finishing, the following
      can happen:

                CPU 1                                       CPU 2

        btrfs_finish_ordered_io()
          insert_reserved_file_extent()
            __btrfs_drop_extents()
               Searches for the key
                (257 EXTENT_DATA 4096) through
                btrfs_lookup_file_extent()

               Key not found and we get a path where
               path->nodes[0] == leaf X and
               path->slots[0] == N

               Because path->slots[0] is >=
               btrfs_header_nritems(leaf X), we call
               btrfs_next_leaf()

               btrfs_next_leaf() releases the path

                                                        inserts key
                                                        (257 INODE_REF 4096)
                                                        at the end of leaf X,
                                                        leaf X now has N + 1 
keys,
                                                        and the new key is at
                                                        slot N

               btrfs_next_leaf() searches for
               key (257 INODE_REF 256), with
               path->keep_locks set to 1,
               because it was the last key it
               saw in leaf X

                 finds it in leaf X again and
                 notices it's no longer the last
                 key of the leaf, so it returns 0
                 with path->nodes[0] == leaf X and
                 path->slots[0] == N (which is now
                 < btrfs_header_nritems(leaf X)),
                 pointing to the new key
                 (257 INODE_REF 4096)

               __btrfs_drop_extents() casts the
               item at path->nodes[0], slot
               path->slots[0], to a struct
               btrfs_file_extent_item - it does
               not skip keys for the target
               inode with a type less than
               BTRFS_EXTENT_DATA_KEY
               (BTRFS_INODE_REF_KEY < BTRFS_EXTENT_DATA_KEY)

               sees a bogus value for the type
               field triggering the WARN_ON in
               the trace shown above, and sets
               extent_end = search_start (4096)

               does the if-then-else logic to
               fixup 0 length extent items created
               by a past bug from hole punching:

                 if (extent_end == key.offset &&
                     extent_end >= search_start)
                     goto delete_extent_item;

               that evaluates to true and it ends
               up deleting the key pointed to by
               path->slots[0], (257 INODE_REF 4096),
               from leaf X

      The same could happen for example for a xattr that ends up having a key
      with an offset value that matches search_start (very unlikely but not
      impossible).

      So fix this by ensuring that keys smaller than BTRFS_EXTENT_DATA_KEY are
      skipped, never casted to struct btrfs_file_extent_item and never deleted
      by accident. Also protect against the unexpected case of getting a key
      for a lower inode number by skipping that key and issuing a warning.

      Cc: stable@xxxxxxxxxxxxxxx
      Signed-off-by: Filipe Manana <fdmanana@xxxxxxxx>

  commit fdcb4b2e78220bde95ce4ba3213088e3a1f1cec6
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Wed Oct 7 09:59:34 2015 +0200

      NTB: fix 32-bit compiler warning

      resource_size_t may be 32-bit wide on some architectures, which causes
      this warning when building the NTB code:

      drivers/ntb/ntb_transport.c: In function 'ntb_transport_link_work':
      drivers/ntb/ntb_transport.c:828:46: warning: right shift count >= width 
of type [-Wshift-count-overflow]

      The warning is harmless but can be avoided by using the upper_32_bits()
      macro.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Fixes: e26a5843f7f5 ("NTB: Split ntb_hw_intel and ntb_transport drivers")
      Signed-off-by: Jon Mason <jdmason@xxxxxxxx>

  commit 8b782fab4da771c97a198f6cb496d124dace36fd
  Author: Dave Jiang <dave.jiang@xxxxxxxxx>
  Date:   Thu Sep 24 13:03:05 2015 -0700

      NTB: unify translation addresses

      There is no need for the upstream and downstream addresses to be different
      for the NTB configs. Go to using a single set of address. It is still
      possible to configure them differently using module parameter override
      however.

      Signed-off-by: Dave Jiang <dave.jiang@xxxxxxxxx>
      Acked and Tested-by: Allen Hubbe <Allen.Hubbe@xxxxxxx>
      Signed-off-by: Jon Mason <jdmason@xxxxxxxx>

  commit c92ba3c5d97de59c016d1a23ebab17293a792621
  Author: Jon Mason <jdmason@xxxxxxxx>
  Date:   Sun Oct 4 22:54:22 2015 -0400

      NTB: invalid buf pointer in multi-MW setups

      Order of operations issue with the QP Num and MW count, which would
      result in the receive buffer pointer being invalid if there are more
      than 1 MW.  Corrected with parenthesis to enforce the proper order of
      operations.

      Reported-by: John I. Kading <John.Kading@xxxxxxxxx>
      Signed-off-by: Jon Mason <jdmason@xxxxxxxx>

  commit 70d4687d60184915b6f40920041caa1df4f4d033
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Sat Oct 3 13:39:42 2015 +0530

      NTB: remove unused variable

      These variables were not used anywhere. So remove them.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Jon Mason <jdmason@xxxxxxxx>

  commit d4adee09fd1cf65189cb8901eb7506aea3e869ac
  Author: Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
  Date:   Sat Oct 3 13:39:41 2015 +0530

      NTB: fix access of free-ed pointer

      We were accessing nt->mw_vec after freeing it. Fix the error path so
      that we free nt->mw_vec after we have finished using it.

      Signed-off-by: Sudip Mukherjee <sudip@xxxxxxxxxxxxxxx>
      Signed-off-by: Jon Mason <jdmason@xxxxxxxx>

  commit 04afde45e096201f8fd74c1db848a5d85d1aa57d
  Author: Dave Jiang <dave.jiang@xxxxxxxxx>
  Date:   Thu Sep 17 13:27:04 2015 -0700

      NTB: Fix issue where we may be accessing NULL ptr

      smatch detected an issue in the function ntb_transport_max_size() where
      we could be dereferencing a dma channel pointer when it is NULL.

      Reported-by: Dan Carpenter <dan.carpenter@xxxxxxxxxx>
      Signed-off-by: Dave Jiang <dave.jiang@xxxxxxxxx>
      Signed-off-by: Jon Mason <jdmason@xxxxxxxx>

  commit d0cf62fb63f760e98244d31396b3b58f3a1e326b
  Author: Helge Deller <deller@xxxxxx>
  Date:   Fri Nov 6 23:36:01 2015 +0100

      parisc: Fixes and cleanups in kernel uapi header files

      This patch fixes some bugs and partly cleans up the parisc uapi header
      files to what glibc defined:
      - compat_semid64_ds was wrong and did not take the endianess into
        account
      - ipc64_perm exported userspace types which broke building userspace
        packages on debian (e.g. trinity)
      - ipc64_perm needs to use a 32bit mode_t on 64bit kernel
      - msqid64_ds and semid64_ds needs unsigned longs for various struct 
members
      - shmid64_ds exported size_t instead of __kernel_size_t

      And finally add some compile-time checks for the sizes of those structs
      to avoid future breakage.

      Runtime-tested with the Linux Test Project (LTP) testsuite.

      Cc: <stable@xxxxxxxxxxxxxxx> # 3.18+
      Reviewed-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit 338f169a456a42905b81ac90fc9d7c00ca4dbde4
  Author: Helge Deller <deller@xxxxxx>
  Date:   Wed Oct 28 21:40:18 2015 +0100

      parisc: Drop hpux_stat64 struct from stat.h header file

      The struct hpux_stat64 is not needed any longer since we dropped HP-UX
      support in commit 04c1614 ("parisc: hpux - Drop support for HP-UX
      binaries").

      Signed-off-by: Helge Deller <deller@xxxxxx>

  commit 8546d2e5b15e454d2d492a1e9625732980e8eb26
  Author: Sanchayan Maity <maitysanchayan@xxxxxxxxx>
  Date:   Mon Oct 19 13:13:52 2015 +0530

      iio: adc: vf610_adc: Fix division by zero error

      In case the fsl,adck-max-frequency property is not present in
      the device tree, a division by zero error results during the
      probe call on kernel boot (see below). This patch fixes it and
      also restores device tree compatibility in case kernels are
      booting with old device trees without this property specified.

      [    1.063229] Division by zero in kernel.
      [    1.067152] CPU: 0 PID: 1 Comm: swapper Not tainted
      4.3.0-rc5-00212-gcc88cef #37
      [    1.074650] Hardware name: Freescale Vybrid VF5xx/VF6xx (Device Tree)
      [    1.081135] Backtrace:
      [    1.083694] [<800134a4>] (dump_backtrace) from [<8001369c>]
      (show_stack+0x18/0x1c)
      [    1.091340]  r7:00000008 r6:8e0ae210 r5:00000000 r4:8e299800
      [    1.097146] [<80013684>] (show_stack) from [<80297b1c>]
      (dump_stack+0x24/0x28)
      [    1.104483] [<80297af8>] (dump_stack) from [<80013608>]
      (__div0+0x1c/0x20)
      [    1.111421] [<800135ec>] (__div0) from [<802968b4>] (Ldiv0+0x8/0x10)
      [    1.117865] [<80424350>] (vf610_adc_probe) from [<803153b4>]
      (platform_drv_probe+0x4c/0xac)
      [    1.126311]  r10:00000000 r9:8076a5ec r8:00000000 r7:fffffdfb
      r6:807cc67c r5:8e0ae210
      [    1.134319]  r4:807f6c54
      [    1.136915] [<80315368>] (platform_drv_probe) from [<803138bc>]
      (driver_probe_device+0x20c/0x2f8)
      [    1.145882]  r7:807cc67c r6:00000000 r5:8e0ae210 r4:807f6c54
      [    1.151657] [<803136b0>] (driver_probe_device) from [<80313a3c>]
      (__driver_attach+0x94/0x98)
      [    1.160190]  r9:8076a5ec r8:00000098 r7:00000000 r6:8e0ae244
      r5:807cc67c r4:8e0ae210
      [    1.168112] [<803139a8>] (__driver_attach) from [<80311cb8>]
      (bus_for_each_dev+0x70/0xa4)
      [    1.176383]  r7:00000000 r6:803139a8 r5:807cc67c r4:00000000
      [    1.182159] [<80311c48>] (bus_for_each_dev) from [<80313318>]
      (driver_attach+0x24/0x28)
      [    1.190260]  r6:807bb568 r5:8e2a5b00 r4:807cc67c
      [    1.194996] [<803132f4>] (driver_attach) from [<80312f50>]
      (bus_add_driver+0x1a4/0x21c)
      [    1.203113] [<80312dac>] (bus_add_driver) from [<803142a8>]
      (driver_register+0x80/0x100)
      [    1.211275]  r7:8e2a7dc0 r6:807a8160 r5:80789e14 r4:807cc67c
      [    1.217075] [<80314228>] (driver_register) from [<803152f8>]
      (__platform_driver_register+0x5c/0x64)
      [    1.226216]  r5:80789e14 r4:807a8160
      [    1.229877] [<8031529c>] (__platform_driver_register) from
      [<80789e30>] (vf610_adc_driver_init+0x1c/0x20)
      [    1.239556] [<80789e14>] (vf610_adc_driver_init) from [<800095f8>]
      (do_one_initcall+0x94/0x1dc)
      [    1.248365] [<80009564>] (do_one_initcall) from [<8076ae34>]
      (kernel_init_freeable+0x13c/0x1e0)
      [    1.257155]  r10:80794830 r9:8076a5ec r8:00000098 r7:807d5780
      r6:807d5780 r5:00000006
      [    1.265153]  r4:807a0ee8
      [    1.267753] [<8076acf8>] (kernel_init_freeable) from [<80590ef0>]
      (kernel_init+0x18/0xf0)
      [    1.276021]  r10:00000000 r9:00000000 r8:00000000 r7:00000000
      r6:00000000 r5:80590ed8
      [    1.284015]  r4:807d5780
      [    1.286615] [<80590ed8>] (kernel_init) from [<8000f878>]
      (ret_from_fork+0x14/0x3c)
      [    1.294278]  r5:80590ed8 r4:00000000

      Signed-off-by: Sanchayan Maity <maitysanchayan@xxxxxxxxx>
      Acked-by: Fugang Duan <B38611@xxxxxxxxxxxxx>
      Acked-by: Stefan Agner <stefan@xxxxxxxx>
      Cc: <Stable@xxxxxxxxxxxxxxx>
      Signed-off-by: Jonathan Cameron <jic23@xxxxxxxxxx>

  commit 3bc27cdfe989906fb025204c68a6f85b07b3a192
  Author: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>
  Date:   Fri Oct 16 13:31:27 2015 +0200

      h8300: Don't set CROSS_COMPILE unconditionally

      The h8300 architecture Makefile sets the CROSS_COMPILE variable to
      "h8300-unknown-linux-" unconditionally but doing that prevents the
      variable to be used if a toolchain with a different binary name is
      installed in the machine.

      So only set CROSS_COMPILE to that default if the variable has not
      been set by the user before.

      Signed-off-by: Javier Martinez Canillas <javier@xxxxxxxxxxxxxxx>

  commit a02613a4ba679eacec8251976d02809d533fa717
  Author: Yoshinori Sato <ysato@xxxxxxxxxxxxxxxxxxxx>
  Date:   Thu Jul 16 13:56:06 2015 +0900

      asm-generic: {get,put}_user ptr argument evaluate only 1 time

      Current implemantation ptr argument evaluate 2 times.
      It'll be an unexpected result.

      Changes v5:
      Remove unnecessary const.
      Changes v4:
      Temporary pointer type change to const void*
      Changes v3:
      Some build error fix.
      Changes v2:
      Argument x protect.

      Signed-off-by: Yoshinori Sato <ysato@xxxxxxxxxxxxxxxxxxxx>

  commit a795239b698d3f7c455b7f8841f5c62d20eefb23
  Author: Yoshinori Sato <ysato@xxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Jun 12 17:57:24 2015 +0900

      h8300: bit io fix

      "WU" constraint required memory address.

      Signed-off-by: Yoshinori Sato <ysato@xxxxxxxxxxxxxxxxxxxx>

  commit 78f02cac9515127efd7dc45e82bbbdb969b3302a
  Author: Yoshinori Sato <ysato@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun May 31 23:42:37 2015 +0900

      h8300: zImage fix

      - stack fix
      - configure base address

      Signed-off-by: Yoshinori Sato <ysato@xxxxxxxxxxxxxxxxxxxx>

  commit 780ffcd51cb287174e2d5cfe5ece2a7e73db6f37
  Author: Yoshinori Sato <ysato@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun May 31 23:34:22 2015 +0900

      h8300: register address fix

      Signed-off-by: Yoshinori Sato <ysato@xxxxxxxxxxxxxxxxxxxx>

  commit 75078de4ac2901315b77dd813ae2bcb6a5fc1238
  Author: Yoshinori Sato <ysato@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun May 31 23:28:17 2015 +0900

      h8300: Fix alignment for .data

      Signed-off-by: Yoshinori Sato <ysato@xxxxxxxxxxxxxxxxxxxx>

  commit aca2518064556ae5658974d78cb71f4883911d3d
  Author: Yoshinori Sato <ysato@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sun May 31 23:25:35 2015 +0900

      h8300: unaligned divcr register support.

      DIVCR is unaligned long word.
      So we need adjustment for long word align.

      Signed-off-by: Yoshinori Sato <ysato@xxxxxxxxxxxxxxxxxxxx>

  commit 1e3929ef0e1c4c7127b785ce7a236965b3739406
  Author: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
  Date:   Mon Nov 2 23:48:32 2015 +0100

      rtc: Add a driver for Micro Crystal RV8803

      This driver supports the following functions:
       - reading and settings time
       - alarms when connected to an IRQ
       - reading and clearing the voltage low flags
       - nvram

      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>

  commit fb4ac3c14b07a6fd33a399845273661172ed282d
  Author: Krzysztof Kozlowski <k.kozlowski.k@xxxxxxxxx>
  Date:   Sun Nov 1 20:49:04 2015 +0900

      rtc: s3c: Set year, month, day value for setting alarm

      This patch sets year, month, day value for set_alarm function.
      The current driver omits to set the values.

      This fixes setting wake alarm for dates different than current day.
      Without the patch the alarm scheduled for tomorrow would fire today on
      chosen time.

      Signed-off-by: Donggeun Kim <dg77.kim@xxxxxxxxxxx>
      Signed-off-by: MyungJoo Ham <myungjoo.kim@xxxxxxxxxxx>
      Signed-off-by: KyungMin Park <kyungmin.park@xxxxxxxxxxx>
      [k.kozlowski: Rebase and test the patch, update commit message]
      Signed-off-by: Krzysztof Kozlowski <k.kozlowski.k@xxxxxxxxx>
      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>

  commit 62c8c20af92ea312ecb22cec4e83082e5843076b
  Author: Tero Kristo <t-kristo@xxxxxx>
  Date:   Fri Oct 23 09:29:57 2015 +0300

      rtc: ds1307: Fix alarm programming for mcp794xx

      mcp794xx alarm registers must be written in BCD format. However, the
      alarm programming logic neglected this by adding one to the value
      after bin2bcd conversion has been already done, writing bad values
      to month register in case the alarm being set is in October. In this
      case, the alarm month value becomes 0x0a instead of the expected 0x10.

      Fix by moving the +1 addition within the bin2bcd call also.

      Fixes: 1d1945d261a2 ("drivers/rtc/rtc-ds1307.c: add alarm support for 
mcp7941x chips")

      Signed-off-by: Tero Kristo <t-kristo@xxxxxx>
      Acked-by: Nishanth Menon <nm@xxxxxx>
      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>

  commit f4b6722248e4991a65e545d6b19e4497202e8a8a
  Author: Sudeep Holla <Sudeep.Holla@xxxxxxx>
  Date:   Wed Oct 21 11:10:01 2015 +0100

      rtc: isl12057: enable support for the standard "wakeup-source" property

      Though the isl12057 rtc driver should and will continue to support the
      legacy "isil,irq2-can-wakeup-machine" property to enable RTC as the
      wakeup source, we need to add support for the new standard property
      "wakeup-source".

      This patch adds support for "wakeup-source" property in addition to the
      existing "isil,irq2-can-wakeup-machine" property.

      Cc: Alessandro Zummo <a.zummo@xxxxxxxxxxxx>
      Cc: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
      Cc: rtc-linux@xxxxxxxxxxxxxxxx
      Signed-off-by: Sudeep Holla <sudeep.holla@xxxxxxx>
      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>

  commit 347e40f0302c7e817e64256284b9e69a8b2711d2
  Author: Sudeep Holla <Sudeep.Holla@xxxxxxx>
  Date:   Wed Oct 21 11:10:00 2015 +0100

      rtc: opal: enable support for the stardard "wakeup-source" property

      Though the opal rtc driver should and will continue to support the legacy
      "has-tpo" property to enable RTC as the wakeup source, we need to add
      support for the new standard property "wakeup-source"

      This patch adds support for "wakeup-source" property in addition to the
      existing "has-tpo" property.

      Cc: Alessandro Zummo <a.zummo@xxxxxxxxxxxx>
      Cc: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
      Cc: rtc-linux@xxxxxxxxxxxxxxxx
      Signed-off-by: Sudeep Holla <sudeep.holla@xxxxxxx>
      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>

  commit 7a96f2874c524a0f42b8c8f2ac03da3f02c96194
  Author: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
  Date:   Sun Oct 18 22:06:22 2015 -0200

      rtc: isl1208: Pass the IRQF_ONESHOT flag

      Since commit 1c6c69525b40eb76de8adf039409722015927dc3 ("genirq: Reject
      bogus threaded irq requests") threaded IRQs without a primary handler
      need to be requested with IRQF_ONESHOT, otherwise the request will fail.

      So pass the IRQF_ONESHOT flag in this case.

      The semantic patch that makes this change is available
      in scripts/coccinelle/misc/irqf_oneshot.cocci

      Signed-off-by: Fabio Estevam <fabio.estevam@xxxxxxxxxxxxx>
      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>

  commit a39a6405d5f949bc651694028a55d74c514ef1f9
  Author: Heiko Schocher <hs@xxxxxxx>
  Date:   Fri Oct 16 13:31:29 2015 +0200

      rtc: pcf8563: add CLKOUT to common clock framework

      Add the clkout output clk to the common clock framework.
      Disable the CLKOUT of the RTC after power-up.
      After power-up/reset of the RTC, CLKOUT is enabled by default,
      with CLKOUT enabled the RTC chip has 2-3 times higher power
      consumption.

      Signed-off-by: Heiko Schocher <hs@xxxxxxx>
      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>

  commit dbb812b141f3bf3dbea75353da799da3d3373d53
  Author: Arnd Bergmann <arnd@xxxxxxxx>
  Date:   Mon Oct 12 15:14:05 2015 +0200

      rtc: davinci: remove incorrect reference to probe function

      The davinci rtc driver uses the module_platform_driver_probe()
      helper to call the probe function and mark it as __init, but
      it also puts a reference into its davinci_rtc_driver function.

      This will crash if we ever get a deferred probe and the probe
      function is called again after the init section has been removed.
      kbuild warns about this:

      WARNING: vmlinux.o(.data+0x1aa2b4): Section mismatch in reference from 
the variable davinci_rtc_driver to the function .init.text:davinci_rtc_probe()
      The variable davinci_rtc_driver references
      the function __init davinci_rtc_probe()

      This patch removes the .probe callback from the platform driver,
      which avoids those problems.

      Signed-off-by: Arnd Bergmann <arnd@xxxxxxxx>
      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>

  commit 921372bf5a7c03a05de25a083b852c6b5d9d97a7
  Author: Wenyou Yang <wenyou.yang@xxxxxxxxx>
  Date:   Mon Oct 12 16:39:23 2015 +0800

      rtc: at91rm9200: clear RTC alarm status flag prior to suspending

      As said in the SAMA5D2 datasheet, "Prior to instructing the device
      to enter ULP mode 1, ... and the internal sources of wake-up must
      be cleared."

      This patch is to clear the RTC alarm status flag prior to suspending
      to avoid the erroneous wake-up activity, as it is often used as
      the wake-up source for the ULP mode 1.

      Signed-off-by: Wenyou Yang <wenyou.yang@xxxxxxxxx>
      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>

  commit 3cfcb50b48029d84038208a98d1b85ad0dfa8172
  Author: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
  Date:   Fri Oct 2 11:17:20 2015 +0200

      rtc: pcf2127: remove useless driver version

      A driver version is only really sensible for oot drivers. Also the
      dev_info about having found a chip only signals that allocating the
      driver data succeeded and so isn't worth much.

      Signed-off-by: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>

  commit f97cfddc886bc8f9d4302447f8773239bed854c1
  Author: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
  Date:   Fri Oct 2 11:17:19 2015 +0200

      rtc: pcf2127: fix reading uninitialized value on RTC_READ_VL ioctl

      The flag reported on the RTC_READ_VL ioctl is only initialized when the
      date is read out. So the voltage low value doesn't represent reality but
      the status at the time the date was read (or 0 if the date was not read
      yet).

      Moreover when userspace requests a value via an ioctl there is no added
      benefit to also make a prosa representation of this (and other) values
      appear in the kernel log so remove the calls to dev_info and the driver
      data members to track their state.

      Signed-off-by: Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>

  commit 24417829936d82b03b156e0d036c3b8f25aa93fd
  Author: Harald Geyer <harald@xxxxxxxxx>
  Date:   Fri Oct 2 20:18:01 2015 +0000

      rtc: stmp3xxx: unify register access macros

      Use STMP_OFFSET_REG_(SET|CLR) instead of defining _SET and _CLR for
      STMP3XXX_RTC_CTRL and STMP3XXX_RTC_PERSISTENT0 - no functional changes.

      Signed-off-by: Harald Geyer <harald@xxxxxxxxx>
      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>

  commit ce006ca6d3158466f7d4b32736b8d9c70fd11526
  Author: Steve Twiss <stwiss.opensource@xxxxxxxxxxx>
  Date:   Fri Oct 2 11:21:11 2015 +0100

      rtc: da9063: GPL copyright inconsistency fix

      Fix misleading and inconsistent copyright header wording.

      Alter the copyright header text and MODULE_LICENSE macro to ensure the
      GPL v2 licence description is correctly represented.

      It will remove the incorrectly LGPL worded text. Words such as "Library"
      from the line "GNU Library General Public License"; and replace the word
      "library" with "program" in several other places.

      The copyright should match the GPL v2 description as specified in the GNU
      license found here: http://www.gnu.org/licenses/gpl-2.0.html

      It should also match this copyright text with the correct MODULE_LICENSE
      macro text as found in the kernel: include/linux/module.h
      In this case "GNU Public License v2 or later" is linked with "GPL".

      Signed-off-by: Steve Twiss <stwiss.opensource@xxxxxxxxxxx>
      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>

  commit 5413eaba5ae093b0704b5458696922f6518adac4
  Author: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
  Date:   Tue Sep 29 23:02:46 2015 +0200

      rtc: pcf85063: return an error when date is invalid

      Return an error when the date is invalid as the policy should be
      implemented there.

      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>

  commit b1f9d790b59dc04f8813a49a92ddd8651770ffee
  Author: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
  Date:   Sat Sep 26 16:25:28 2015 +0200

      rtc: rx8025: remove unnecessary braces

      braces {} are not necessary for single statement blocks

      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>

  commit caff0cc419d764287675e55bb46405c6e1fe43ee
  Author: Sudeep Holla <Sudeep.Holla@xxxxxxx>
  Date:   Mon Sep 21 16:47:02 2015 +0100

      rtc: ds1343: remove misuse of IRQF_NO_SUSPEND flag

      The IRQF_NO_SUSPEND flag is used to identify the interrupts that should
      be left enabled so as to allow them to work as expected during the
      suspend-resume cycle, but doesn't guarantee that it will wake the system
      from a suspended state, enable_irq_wake is recommended to be used for
      the wakeup.

      This patch removes the use of IRQF_NO_SUSPEND flags and uses newly
      introduce PM wakeup APIs dev_pm_{set,clear}_wake_irq.

      Cc: Alessandro Zummo <a.zummo@xxxxxxxxxxxx>
      Cc: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
      Cc: rtc-linux@xxxxxxxxxxxxxxxx
      Signed-off-by: Sudeep Holla <sudeep.holla@xxxxxxx>
      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>

  commit 93a6f9168f2fbeb5bb000ba079e17a11bedc1a62
  Author: Sudeep Holla <Sudeep.Holla@xxxxxxx>
  Date:   Mon Sep 21 16:46:58 2015 +0100

      rtc: ab8500: remove misuse of IRQF_NO_SUSPEND flag

      The IRQF_NO_SUSPEND flag is used to identify the interrupts that should
      be left enabled so as to allow them to work as expected during the
      suspend-resume cycle, but doesn't guarantee that it will wake the system
      from a suspended state, enable_irq_wake is recommended to be used for
      the wakeup.

      This patch removes the use of IRQF_NO_SUSPEND flags and uses newly
      introduce PM wakeup APIs dev_pm_{set,clear}_wake_irq.

      Cc: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Cc: Alessandro Zummo <a.zummo@xxxxxxxxxxxx>
      Cc: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
      Cc: rtc-linux@xxxxxxxxxxxxxxxx
      Signed-off-by: Sudeep Holla <sudeep.holla@xxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>

  commit eff6dd41c2240f49e562b89d50ed3e86485cc4ad
  Author: Sudeep Holla <Sudeep.Holla@xxxxxxx>
  Date:   Mon Sep 21 16:46:57 2015 +0100

      rtc: pl031: remove misuse of IRQF_NO_SUSPEND flag

      The IRQF_NO_SUSPEND flag is used to identify the interrupts that should
      be left enabled so as to allow them to work as expected during the
      suspend-resume cycle, but doesn't guarantee that it will wake the system
      from a suspended state, enable_irq_wake is recommended to be used for
      the wakeup.

      This patch removes the use of IRQF_NO_SUSPEND flags and uses newly
      introduce PM wakeup APIs dev_pm_{set,clear}_wake_irq.

      Cc: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Cc: Alessandro Zummo <a.zummo@xxxxxxxxxxxx>
      Cc: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>
      Cc: rtc-linux@xxxxxxxxxxxxxxxx
      Signed-off-by: Sudeep Holla <sudeep.holla@xxxxxxx>
      Acked-by: Linus Walleij <linus.walleij@xxxxxxxxxx>
      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>

  commit c35300941656508d37315625d276c5a104823505
  Author: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
  Date:   Mon Sep 21 15:33:56 2015 +0200

      rtc: opal: fix type of token

      The variable can take signed values.

      The problem has been detected using proposed semantic patch
      scripts/coccinelle/tests/unsigned_lesser_than_zero.cocci [1].

      [1]: http://permalink.gmane.org/gmane.linux.kernel/2038576

      Signed-off-by: Andrzej Hajda <a.hajda@xxxxxxxxxxx>
      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>

  commit fa395fb8fc3206cdd70b046e0b98168576cc71ef
  Author: Ivan Grimaldi <grimaldi.ivan@xxxxxxxxx>
  Date:   Fri Sep 18 17:27:57 2015 +0200

      rtc: ds1390: Add trickle charger device tree binding

      Introduce a device tree binding for specifying the trickle charger
      configuration for ds1390.

      Signed-off-by: Ivan Grimaldi <grimaldi.ivan@xxxxxxxxx>
      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>

  commit 2ec68825fc55d1ddeb04ab861f3bfdbaa8e9f3c4
  Author: Ivan Grimaldi <grimaldi.ivan@xxxxxxxxx>
  Date:   Fri Sep 18 17:27:56 2015 +0200

      rtc: ds1390: fix ds1390_get_reg return value

      spi_write_then_read puts in rx_buf the received data starting from
      the first byte of the rx_buf

      Signed-off-by: Ivan Grimaldi <grimaldi.ivan@xxxxxxxxx>
      Signed-off-by: Alexandre Belloni <alexandre.belloni@xxxxxxxxxxxxxxxxxx>

  commit 94d505e9746a53af79094904ff0aa0cf0952ed58
  Author: Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx>
  Date:   Sun Nov 8 14:46:34 2015 +0900

      ALSA: oxfw: add an comment to Kconfig for TASCAM FireOne

      A commit to add support for this model should have added a comment
      about this model to Kconfig.

      Fixes: 759a2f40c9fa('ALSA: oxfw: add an entry for TASCAM FireOne')
      Signed-off-by: Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx>
      Signed-off-by: Takashi Iwai <tiwai@xxxxxxx>

  commit bad9bc2d466445b0398b78a452b7706a05ebc182
  Merge: 66ef349 345c99a
  Author: Ingo Molnar <mingo@xxxxxxxxxx>
  Date:   Sun Nov 8 08:22:37 2015 +0100

      Merge tag 'perf-core-for-mingo-2' of 
git://git.kernel.org/pub/scm/linux/kernel/git/acme/linux into perf/urgent

      Pull perf/core improvements and fixes from Arnaldo Carvalho de Melo:

      Fixes:

        - libbpf error reporting improvements, using a strerror interface to
          more precisely tell the user about problems with the provided
          scriptlet, be it in C or as a ready made object file (Wang Nan)

        - Do not be case sensitive when searching for matching 'perf test'
          entries (Arnaldo Carvalho de Melo)

        - Inform the user about objdump failures in 'perf annotate' (Andi Kleen)

      Infrastructure changes:

        - Improve the LLVM 'perf test' entry, introduce a new ones for
          BPF and kbuild tests to check the environment used by clang to
          compile .c scriptlets (Wang Nan)

      Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
      Signed-off-by: Ingo Molnar <mingo@xxxxxxxxxx>

  commit ce5c2d2c256a4c8b523036537cd6be2d6af8f69d
  Author: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Nov 7 16:06:59 2015 -0800

      arm64: fixup for mm renames

      __GFP_WAIT was renamed for __GFP_RECLAIM and the gfpflags_allow_blocking()
      helper was added.

      Cc: Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx>
      Cc: Catalin Marinas <catalin.marinas@xxxxxxx>
      Cc: Robin Murphy <robin.murphy@xxxxxxx>
      Signed-off-by: Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>

  commit ad804a0b2a769a0eed29015c53fe395449c09d13
  Merge: ab9f2fa 5f2a2d5
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Nov 7 14:32:45 2015 -0800

      Merge branch 'akpm' (patches from Andrew)

      Merge second patch-bomb from Andrew Morton:

       - most of the rest of MM

       - procfs

       - lib/ updates

       - printk updates

       - bitops infrastructure tweaks

       - checkpatch updates

       - nilfs2 update

       - signals

       - various other misc bits: coredump, seqfile, kexec, pidns, zlib, ipc,
         dma-debug, dma-mapping, ...

      * emailed patches from Andrew Morton <akpm@xxxxxxxxxxxxxxxxxxxx>: (102 
commits)
        ipc,msg: drop dst nil validation in copy_msg
        include/linux/zutil.h: fix usage example of zlib_adler32()
        panic: release stale console lock to always get the logbuf printed out
        dma-debug: check nents in dma_sync_sg*
        dma-mapping: tidy up dma_parms default handling
        pidns: fix set/getpriority and ioprio_set/get in PRIO_USER mode
        kexec: use file name as the output message prefix
        fs, seqfile: always allow oom killer
        seq_file: reuse string_escape_str()
        fs/seq_file: use seq_* helpers in seq_hex_dump()
        coredump: change zap_threads() and zap_process() to use 
for_each_thread()
        coredump: ensure all coredumping tasks have SIGNAL_GROUP_COREDUMP
        signal: remove jffs2_garbage_collect_thread()->allow_signal(SIGCONT)
        signal: introduce kernel_signal_stop() to fix 
jffs2_garbage_collect_thread()
        signal: turn dequeue_signal_lock() into kernel_dequeue_signal()
        signals: kill block_all_signals() and unblock_all_signals()
        nilfs2: fix gcc uninitialized-variable warnings in powerpc build
        nilfs2: fix gcc unused-but-set-variable warnings
        MAINTAINERS: nilfs2: add header file for tracing
        nilfs2: add tracepoints for analyzing reading and writing metadata files
        ...

  commit ab9f2faf8f40604551336e5b0a18e0910a57b92c
  Merge: 75021d2 db7489e
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Nov 7 13:33:07 2015 -0800

      Merge tag 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma

      Pull rdma updates from Doug Ledford:
       "This is my initial round of 4.4 merge window patches.  There are a few
        other things I wish to get in for 4.4 that aren't in this pull, as
        this represents what has gone through merge/build/run testing and not
        what is the last few items for which testing is not yet complete.

         - "Checksum offload support in user space" enablement
         - Misc cxgb4 fixes, add T6 support
         - Misc usnic fixes
         - 32 bit build warning fixes
         - Misc ocrdma fixes
         - Multicast loopback prevention extension
         - Extend the GID cache to store and return attributes of GIDs
         - Misc iSER updates
         - iSER clustering update
         - Network NameSpace support for rdma CM
         - Work Request cleanup series
         - New Memory Registration API"

      * tag 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma: (76 commits)
        IB/core, cma: Make __attribute_const__ declarations sparse-friendly
        IB/core: Remove old fast registration API
        IB/ipath: Remove fast registration from the code
        IB/hfi1: Remove fast registration from the code
        RDMA/nes: Remove old FRWR API
        IB/qib: Remove old FRWR API
        iw_cxgb4: Remove old FRWR API
        RDMA/cxgb3: Remove old FRWR API
        RDMA/ocrdma: Remove old FRWR API
        IB/mlx4: Remove old FRWR API support
        IB/mlx5: Remove old FRWR API support
        IB/srp: Dont allocate a page vector when using fast_reg
        IB/srp: Remove srp_finish_mapping
        IB/srp: Convert to new registration API
        IB/srp: Split srp_map_sg
        RDS/IW: Convert to new memory registration API
        svcrdma: Port to new memory registration API
        xprtrdma: Port to new memory registration API
        iser-target: Port to new memory registration API
        IB/iser: Port to new fast registration API
        ...

  commit 75021d28594d9b6fb4d05bbc41f77948a0db0e02
  Merge: 6f1da31 8d090f4
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Nov 7 13:05:44 2015 -0800

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial

      Pull trivial updates from Jiri Kosina:
       "Trivial stuff from trivial tree that can be trivially summed up as:

         - treewide drop of spurious unlikely() before IS_ERR() from Viresh
           Kumar

         - cosmetic fixes (that don't really affect basic functionality of the
           driver) for pktcdvd and bcache, from Julia Lawall and Petr Mladek

         - various comment / printk fixes and updates all over the place"

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial:
        bcache: Really show state of work pending bit
        hwmon: applesmc: fix comment typos
        Kconfig: remove comment about scsi_wait_scan module
        class_find_device: fix reference to argument "match"
        debugfs: document that debugfs_remove*() accepts NULL and error values
        net: Drop unlikely before IS_ERR(_OR_NULL)
        mm: Drop unlikely before IS_ERR(_OR_NULL)
        fs: Drop unlikely before IS_ERR(_OR_NULL)
        drivers: net: Drop unlikely before IS_ERR(_OR_NULL)
        drivers: misc: Drop unlikely before IS_ERR(_OR_NULL)
        UBI: Update comments to reflect UBI_METAONLY flag
        pktcdvd: drop null test before destroy functions

  commit 6f1da317ac1df15f442b5fd37be7740c7cb55057
  Merge: 99aaa9c d64e19d
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Nov 7 12:49:27 2015 -0800

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jikos/hid

      Pull HID updates from Jiri Kosina:
       "Highlights:

         - Intel Skylake Win8 precision touchpads support fixes/improvements
           from Mika Westerberg

         - Lenovo Yoga 2 quirk from Ritesh Raj Sarraf

         - potential uninitialized buffer access fix in HID core from Richard
           Purdie

         - Wacom Intuos and Wacom Cintiq 2 support improvements from Jason
           Gerecke and Ping Cheng

         - initiation of sysfs deprecation process for most of the roccat
           drivers, from the roccat support maintiner Stefan Achatz

         - quite a few device ID / quirk additions and small fixes"

      * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/hid: 
(30 commits)
        HID: logitech: Add support for G29
        HID: logitech: Simplify wheel detection scheme
        HID: wacom: Call 'wacom_query_tablet_data' only after 'hid_hw_start'
        HID: wacom: Fix ABS_MISC reporting for Cintiq Companion 2
        HID: wacom: Remove useless conditions from 'wacom_query_tablet_data'
        HID: wacom: fix Intuos wireless report id issue
        HID: fix some indenting issues
        HID: wacom: Expect 'touch_max' touches if HID_DG_CONTACTCOUNT not 
present
        HID: wacom: Tie cached HID_DG_CONTACTCOUNT indices to report ID
        HID: roccat: Fixed resubmit: Deprecating most Roccat sysfs attributes
        HID: wacom: Report full pressure range for Intuos, Cintiq 13HD Touch
        HID: wacom: Add support for Cintiq Companion 2
        HID: multitouch: Fetch feature reports on demand for Win8 devices
        HID: sensor-hub: Add quirk for Lenovo Yoga 2 with ITE Chips
        HID: usbhid: Fix for the WiiU adapter from Mayflash
        HID: corsair: boolify struct k90_led.removed
        HID: corsair: Add Corsair Vengeance K90 driver
        HID: hid-input: allow input_configured callback return errors
        HID: multitouch: Add suffix for HID_DG_TOUCHPAD
        HID: i2c-hid: Fill in physical device providing HID functionality
        ...

  commit 99aaa9c64be5fe728975109c96ef297f5650883d
  Merge: 27eb427b e2391a2
  Author: Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Nov 7 12:15:17 2015 -0800

      Merge branch 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jikos/livepatching

      Pull livepatching fix from Jiri Kosina:
       "A fix for a kernel oops in case CONFIG_DEBUG_SET_MODULE_RONX is unset
        (as in such case it's possible for module struct to share a page with
        executable text, which is currently not being handled with grace) from
        Josh Poimboeuf"

      * 'for-linus' of 
git://git.kernel.org/pub/scm/linux/kernel/git/jikos/livepatching:
        livepatch: Fix crash with !CONFIG_DEBUG_SET_MODULE_RONX

  commit 03e88ae6b369da2a26a6e09ad165e57d210789cd
  Author: Dmitry Safonov <0x7f454c46@xxxxxxxxx>
  Date:   Fri Nov 6 22:07:26 2015 +0300

      tracing: Remove unused ftrace_cpu_disabled per cpu variable

      Since the ring buffer is lockless, there is no need to disable ftrace on
      CPU. And no one doing so: after commit 68179686ac67cb ("tracing: Remove
      ftrace_disable/enable_cpu()") ftrace_cpu_disabled stays the same after
      initialization, nothing changes it.
      ftrace_cpu_disabled shouldn't be used by any external module since it
      disables only function and graph_function tracers but not any other
      tracer.

      Link: 
http://lkml.kernel.org/r/1446836846-22239-1-git-send-email-0x7f454c46@xxxxxxxxx

      Signed-off-by: Dmitry Safonov <0x7f454c46@xxxxxxxxx>
      Signed-off-by: Steven Rostedt <rostedt@xxxxxxxxxxx>

  commit 3694bfbdb3bd5cf6632140c7f7fdf6f31d43ee66
  Author: Markus Elfring <elfring@xxxxxxxxxxxxxxxxxxxxx>
  Date:   Sat Nov 7 16:30:34 2015 +0100

      dwc_eth_qos: Delete an unnecessary check before the function call 
"of_node_put"

      The of_node_put() function tests whether its argument is NULL
      and then returns immediately.
      Thus the test around the call is not needed.

      This issue was detected by using the Coccinelle software.

      Signed-off-by: Markus Elfring <elfring@xxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 40baec225765c54eefa870530dd613bad9829bb7
  Author: Jay Vosburgh <jay.vosburgh@xxxxxxxxxxxxx>
  Date:   Fri Nov 6 17:23:23 2015 -0800

      bonding: fix panic on non-ARPHRD_ETHER enslave failure

      Since commit 7d5cd2ce529b, when bond_enslave fails on devices that
      are not ARPHRD_ETHER, if needed, it resets the bonding device back to
      ARPHRD_ETHER by calling ether_setup.

        Unfortunately, ether_setup clobbers dev->flags, clearing IFF_UP
      if the bond device is up, leaving it in a quasi-down state without
      having actually gone through dev_close.  For bonding, if any periodic
      work queue items are active (miimon, arp_interval, etc), those will
      remain running, as they are stopped by bond_close.  At this point, if
      the bonding module is unloaded or the bond is deleted, the system will
      panic when the work function is called.

        This panic is resolved by calling dev_close on the bond itself
      prior to calling ether_setup.

      Cc: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: Jay Vosburgh <jay.vosburgh@xxxxxxxxxxxxx>
      Fixes: 7d5cd2ce5292 ("bonding: correctly handle bonding type change on 
enslave failure")
      Acked-by: Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit e824de8ae2a00ee71c5bfbadd004d12c6dd85561
  Author: Jarod Wilson <jarod@xxxxxxxxxx>
  Date:   Fri Nov 6 09:25:31 2015 -0500

      net/qlcnic: fix mac address restore in bond mode 5/6

      The bonding driver saves a copy of slaves' original mac address and then
      assigns whatever mac as needed to the slave, depending on mode. In at
      least modes 5 and 6 (balance-tlb, balance-alb), it often ends up being the
      mac address of another slave. On release from the bond, the original mac
      address is supposed to get restored via a dev_set_mac_address() call in
      the bonding driver's __bond_release_one() function, which calls the
      slave's ndo_set_mac_address function, which for qlcnic, is
      qlcnic_set_mac().

      Now, this function tries to be somewhat intelligent and exit early if
      you're trying to set the mac address to the same thing that is already
      set. The problem here is that adapter->mac_addr isn't in sync with
      netdev->dev_addr. The qlcnic driver still has the original mac stored in
      adapter->mac_addr, while the bonding driver has updated netdev->dev_addr,
      so qlcnic thinks we're trying to set the same address it already has.

      I think the way to go here, since the function updates both netdev and
      adapter's stored mac addresses, is to check if either of them doesn't
      match the newly requested mac. Simply checking netdev's value only could
      result in a similar mismatch and non-update, so look at both.

      CC: Dept-GELinuxNICDev@xxxxxxxxxx
      CC: netdev@xxxxxxxxxxxxxxx
      CC: Manish Chopra <manish.chopra@xxxxxxxxxx>
      Signed-off-by: Jarod Wilson <jarod@xxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit f7b5964d4d0bddf429c44b457172891be000a3d3
  Author: Markus Elfring <elfring@xxxxxxxxxxxxxxxxxxxxx>
  Date:   Fri Nov 6 09:30:29 2015 +0100

      fjes: Delete an unnecessary check before the function call "vfree"

      The vfree() function performs also input parameter validation.
      Thus the test around the call is not needed.

      This issue was detected by using the Coccinelle software.

      Signed-off-by: Markus Elfring <elfring@xxxxxxxxxxxxxxxxxxxxx>
      Signed-off-by: David S. Miller <davem@xxxxxxxxxxxxx>

  commit 15c4f638f3d41bae52105ca4c0c8760afbcbeaab
  Author: Jens Axboe <axboe@xxxxxx>
  Date:   Tue Oct 27 14:09:51 2015 +0900

      directio: add block polling support

      This adds support for sync O_DIRECT read/write poll support.

      Signed-off-by: Jens Axboe <axboe@xxxxxx>
      [hch: split from a larger patch, minor updates]
      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Acked-by: Keith Busch <keith.busch@xxxxxxxxx>

  commit a0fa9647a54e81883abd57c5c865d1747f68a577
  Author: Jens Axboe <axboe@xxxxxx>
  Date:   Tue Nov 3 20:37:26 2015 -0700

      NVMe: add blk polling support

      Add nvme_poll(), which will check a specific completion queue for
      command completions. Wire that up to the new block layer poll
      mechanism.

      Signed-off-by: Jens Axboe <axboe@xxxxxx>
      Signed-off-by: Christoph Hellwig <hch@xxxxxx>
      Acked-by: Keith Busch <keith.busch@xxxxxxxxx>

  commit 05229beeddf7e75e2e616ddaad4b70e7fca9528d
  Author: Jens Axboe <axboe@xxxxxx>
  Date:   Thu Nov 5 10:44:55 2015 -0700

      block: add block polling support

      Add basic support for polling for specific IO to complete. This uses
      the cookie that blk-mq passes back, which enables the block layer
      to pass this cookie to the driver to spin for a specific request.

      This will be combined with request latency tracking, so we can make
      qualified decisions about when to poll and when not to. For now, for
      benchmark purposes, we add a sysfs file that controls whether polling
      is enabled or not.

      Signed-off-by: Jens Axboe <axboe@xxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Acked-by: Keith Busch <keith.busch@xxxxxxxxx>

  commit 7b371636fb6d187873d9d2730c2b1febc48a9b47
  Author: Jens Axboe <axboe@xxxxxx>
  Date:   Thu Nov 5 10:41:40 2015 -0700

      blk-mq: return tag/queue combo in the make_request_fn handlers

      Return a cookie, blk_qc_t, from the blk-mq make request functions, that
      allows a later caller to uniquely identify a specific IO. The cookie
      doesn't mean anything to the caller, but the caller can use it to later
      pass back to the block layer. The block layer can then identify the
      hardware queue and request from that cookie.

      Signed-off-by: Jens Axboe <axboe@xxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Acked-by: Keith Busch <keith.busch@xxxxxxxxx>

  commit dece16353ef47d8d33f5302bc158072a9d65e26f
  Author: Jens Axboe <axboe@xxxxxx>
  Date:   Thu Nov 5 10:41:16 2015 -0700

      block: change ->make_request_fn() and users to return a queue cookie

      No functional changes in this patch, but it prepares us for returning
      a more useful cookie related to the IO that was queued up.

      Signed-off-by: Jens Axboe <axboe@xxxxxx>
      Acked-by: Christoph Hellwig <hch@xxxxxx>
      Acked-by: Keith Busch <keith.busch@xxxxxxxxx>

  commit 8c1c5f263833ec2dc8fd716cf4281265c485d7ad
  Author: Dongsheng Yang <yangds.fnst@xxxxxxxxxxxxxx>
  Date:   Sat Nov 7 12:46:11 2015 +0800

      ubifs: introduce UBIFS_ATIME_SUPPORT to ubifs

      To make ubifs support atime flexily, this commit introduces
      a Kconfig option named as UBIFS_ATIME_SUPPORT.

      With UBIFS_ATIME_SUPPORT=n:
        ubifs keeps the full compatibility to no_atime from
      the start of ubifs.

      =================UBIFS_ATIME_SUPPORT=n=======================
      -o - no atime
      -o atime - no atime
      -o noatime - no atime
      -o relatime - no atime
      -o strictatime - no atime
      -o lazyatime - no atime

      With UBIFS_ATIME_SUPPORT=y:
        ubifs supports the atime same with other main stream
      file systems.
      =================UBIFS_ATIME_SUPPORT=y=======================
      -o - default behavior (relatime currently)
      -o atime - atime support
      -o noatime - no atime support
      -o relatime - relative atime support
      -o strictatime - strict atime support
      -o lazyatime - lazy atime support

      Signed-off-by: Dongsheng Yang <yangds.fnst@xxxxxxxxxxxxxx>
      Reviewed-by: Richard Weinberger <richard@xxxxxx>
      Signed-off-by: Richard Weinberger <richard@xxxxxx>

  commit ab92a20bce3b4c21927cc1ae514c482f50ad3487
  Author: Dongsheng Yang <yangds.fnst@xxxxxxxxxxxxxx>
  Date:   Tue Aug 18 12:38:36 2015 +0800

      ubifs: make ubifs_[get|set]xattr atomic

      This commit make the ubifs_[get|set]xattr protected by ui_mutex.

      Originally, there is a possibility that