[PATCH 4.2 000/110] 4.2.6-stable review

[Greg Kroah-Hartman <gregkh@linuxfoundation.org>]

This is the start of the stable review cycle for the 4.2.6 release.
There are 110 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sun Nov  8 19:16:22 UTC 2015.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.2.6-rc1.gz
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Linux 4.2.6-rc1

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    xen: fix backport of previous kexec patch

Mika Westerberg <mika.westerberg@linux.intel.com>
    pinctrl: baytrail: Use raw_spinlock for locking

Mika Westerberg <mika.westerberg@linux.intel.com>
    pinctrl: baytrail: Serialize all register access

Minchan Kim <minchan@kernel.org>
    thp: use is_zero_pfn() only after pte_present() check

Thomas Hellstrom <thellstrom@vmware.com>
    drm/vmwgfx: Fix up user_dmabuf refcounting

Keith Busch <keith.busch@intel.com>
    NVMe: Fix memory leak on retried commands

Will Deacon <will.deacon@arm.com>
    arm64: compat: fix stxr failure case in SWP emulation

Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>
    cpufreq: intel_pstate: Fix divide by zero on Knights Landing (KNL)

Luca Abeni <luca.abeni@unitn.it>
    sched/deadline: Fix migration of SCHED_DEADLINE tasks

Doron Tsur <doront@mellanox.com>
    IB/cm: Fix rb-tree duplicate free and use-after-free

Junichi Nomura <j-nomura@ce.jp.nec.com>
    blk-mq: fix use-after-free in blk_mq_free_tag_set()

Richard Weinberger <richard@nod.at>
    um: Fix kernel mode fault condition

Sudip Mukherjee <sudipm.mukherjee@gmail.com>
    thermal: exynos: Fix register read in TMU

Sudip Mukherjee <sudipm.mukherjee@gmail.com>
    kvm: irqchip: fix memory leak

Christian Engelmayer <cengelma@gmx.at>
    btrfs: fix possible leak in btrfs_ioctl_balance()

Nikolay Borisov <kernel@kyup.com>
    netfilter: ipset: Fix sleeping memory allocation in atomic context

Dāvis Mosāns <davispuh@gmail.com>
    mvsas: Fix NULL pointer dereference in mvs_slot_task_free

Lucas Stach <dev@lynxeye.de>
    irqchip/tegra: Propagate IRQ type setting to parent

Seth Jennings <sjenning@redhat.com>
    EDAC, sb_edac: Fix TAD presence check for sbridge_mci_bind_devs()

NeilBrown <neilb@suse.com>
    Revert "md: allow a partially recovered device to be hot-added to an array."

Roman Gushchin <klamm@yandex-team.ru>
    md/raid5: fix locking in handle_stripe_clean_event()

Jes Sorensen <Jes.Sorensen@redhat.com>
    md/raid10: submit_bio_wait() returns 0 on success

Jes Sorensen <Jes.Sorensen@redhat.com>
    md/raid1: submit_bio_wait() returns 0 on success

Herbert Xu <herbert@gondor.apana.org.au>
    crypto: api - Only abort operations on fatal signal

Hans de Goede <hdegoede@redhat.com>
    Input: alps - only the Dell Latitude D420/430/620/630 have separate stick button bits

Miklos Szeredi <miklos@szeredi.hu>
    ovl: fix open in stacked overlay

David Howells <dhowells@redhat.com>
    ovl: fix dentry reference leak

David Howells <dhowells@redhat.com>
    ovl: use O_LARGEFILE in ovl_copy_up()

Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
    ovl: free lower_mnt array in ovl_put_super

Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
    ovl: free stack of paths in ovl_fill_super

Sasha Levin <sasha.levin@oracle.com>
    PCI: Prevent out of bounds access in numa_node override

Peter Zijlstra <peterz@infradead.org>
    module: Fix locking in symbol_put_addr()

Cathy Avery <cathy.avery@oracle.com>
    xen-blkfront: check for null drvdata in blkback_changed (XenbusStateClosing)

Laura Abbott <labbott@fedoraproject.org>
    xhci: Add spurious wakeup quirk for LynxPoint-LP controllers

Mathias Nyman <mathias.nyman@linux.intel.com>
    xhci: handle no ping response error properly

Scot Doyle <lkml14@scotdoyle.com>
    fbcon: initialize blink interval before calling fb_set_par

Russell King <rmk+kernel@arm.linux.org.uk>
    clkdev: fix clk_add_alias() with a NULL alias device name

Hezi Shahmoon <hezi@marvell.com>
    i2c: mv64xxx: really allow I2C offloading

Bjørn Mork <bjorn@mork.no>
    USB: qcserial: add Sierra Wireless MC74xx/EM74xx

Frederic Danis <frederic.danis@linux.intel.com>
    Revert "serial: 8250_dma: don't bother DMA with small transfers"

Arnd Bergmann <arnd@arndb.de>
    nvme: fix 32-bit build warning

Mike Snitzer <snitzer@redhat.com>
    dm btree: fix leak of bufio-backed block in btree_split_beneath error path

Joe Thornber <ejt@redhat.com>
    dm cache: the CLEAN_SHUTDOWN flag was not being set

Joe Thornber <ejt@redhat.com>
    dm btree remove: fix a bug when rebalancing nodes after removal

Tejun Heo <tj@kernel.org>
    block: don't release bdi while request_queue has live references

Lorenzo Pieralisi <lorenzo.pieralisi@arm.com>
    arm64: kernel: fix tcr_el1.t0sz restore on systems with extended idmap

Will Deacon <will.deacon@arm.com>
    Revert "ARM64: unwind: Fix PC calculation"

H. Nikolaus Schaller <hns@goldelico.com>
    ARM: 8449/1: fix bug in vdsomunge swab32 macro

H. Nikolaus Schaller <hns@goldelico.com>
    ARM: 8445/1: fix vdsomunge not to depend on glibc specific byteswap.h

Aaro Koskinen <aaro.koskinen@iki.fi>
    ARM: OMAP1: fix incorrect INT_DMA_LCD

Linus Walleij <linus.walleij@linaro.org>
    ARM: ux500: modify initial levelshifter status

Tomi Valkeinen <tomi.valkeinen@ti.com>
    ARM: dts: am57xx-beagle-x15: set VDD_SD to always-on

Fabio Estevam <fabio.estevam@freescale.com>
    ARM: dts: imx7d: Fix UART2 base address

Alim Akhtar <alim.akhtar@samsung.com>
    ARM: dts: Fix audio card detection on Peach boards

Thomas Hebb <tommyhebb@gmail.com>
    ARM: dts: berlin: change BG2Q's USB PHY compatible

Marcin Wojtas <mw@semihalf.com>
    ARM: mvebu: correct a385-db-ap compatible string

Florian Fainelli <f.fainelli@gmail.com>
    ARM: orion: Fix DSA platform device after mvmdio conversion

Krzysztof Kozlowski <k.kozlowski@samsung.com>
    ARM: EXYNOS: Fix double of_node_put() when parsing child power domains

Ilya Dryomov <idryomov@gmail.com>
    rbd: prevent kernel stack blow up on rbd map

Ilya Dryomov <idryomov@gmail.com>
    rbd: don't leak parent_spec in rbd_dev_probe_parent()

Ronny Hegewald <ronny.hegewald@online.de>
    rbd: require stable pages if message data CRCs are enabled

Dan Carpenter <dan.carpenter@oracle.com>
    iio: accel: sca3000: memory corruption in sca3000_read_first_n_hw_rb()

Linus Walleij <linus.walleij@linaro.org>
    iio: st_accel: fix interrupt handling on LIS3LV02

Alexandre Belloni <alexandre.belloni@free-electrons.com>
    iio: mxs-lradc: Fix temperature offset

Alex Deucher <alexander.deucher@amd.com>
    drm/radeon: move bl encoder assignment into bl init

Alex Deucher <alexander.deucher@amd.com>
    drm/radeon: fix dpms when driver backlight control is disabled

Alex Deucher <alexander.deucher@amd.com>
    drm/amdgpu: don't try to recreate sysfs entries on resume

Alex Deucher <alexander.deucher@amd.com>
    drm/radeon: don't try to recreate sysfs entries on resume

Chris Wilson <chris@chris-wilson.co.uk>
    drm/i915: Deny wrapping an userptr into a framebuffer

Ville Syrjälä <ville.syrjala@linux.intel.com>
    drm/i915: Restore lost DPLL register write on gen2-4

Chris Wilson <chris@chris-wilson.co.uk>
    drm/i915: Flush pipecontrol post-sync writes

Alex Deucher <alexander.deucher@amd.com>
    drm/amdgpu: add missing dpm check for KV dpm late init

Alex Deucher <alexander.deucher@amd.com>
    drm/radeon/dpm: don't add pwm attributes if DPM is disabled

Ilia Mirkin <imirkin@alum.mit.edu>
    drm/nouveau/gem: return only valid domain when there's only one

Pawel Moll <pawel.moll@arm.com>
    bus: arm-ccn: Fix irq affinity setting on CPU migration

Steven Rostedt (Red Hat) <rostedt@goodmis.org>
    tracing: Have stack tracer force RCU to be watching

Florian Westphal <fw@strlen.de>
    fault-inject: fix inverted interval/probability values in printk

Jan Kara <jack@suse.com>
    mm: make sendfile(2) killable

Werner Pawlitschko <werner.pawlitschko@arcor.de>
    x86/ioapic: Prevent NULL pointer dereference in setup_ioapic_dest()

Paolo Bonzini <pbonzini@redhat.com>
    x86/setup: Extend low identity map to cover whole kernel range

Kővágó, Zoltán <DirtY.iCE.hu@gmail.com>
    x86/efi: Fix multiple GOP device support

Charles Keepax <ckeepax@opensource.wolfsonmicro.com>
    ASoC: wm8904: Correct number of EQ registers

Charles Keepax <ckeepax@opensource.wolfsonmicro.com>
    ASoC: Add info callback for SX_TLV controls

Takashi Iwai <tiwai@suse.de>
    ALSA: hda - Fix deadlock at error in building PCM

David Henningsson <david.henningsson@canonical.com>
    ALSA: hda - Fix inverted internal mic on Lenovo G50-80

Vinod Koul <vinod.koul@intel.com>
    ALSA: hdac: Explicitly add io.h

Arnd Bergmann <arnd@arndb.de>
    KVM: arm: use GIC support unconditionally

Antti Palosaari <crope@iki.fi>
    rtl28xxu: fix control message flaws

Laura Abbott <labbott@fedoraproject.org>
    si2168: Bounds check firmware

Laura Abbott <labbott@fedoraproject.org>
    si2157: Bounds check firmware

Antti Palosaari <crope@iki.fi>
    m88ds3103: use own reg update_bits() implementation

Dan Carpenter <dan.carpenter@oracle.com>
    drm: crtc: integer overflow in drm_property_create_blob()

Maneet Singh <mmaneetsingh@nvidia.com>
    drm: Correct arguments to list_tail_add in create blob ioctl

Adam Richter <adamrichter4@gmail.com>
    drm: fix mutex leak in drm_dp_get_mst_branch_device

Vasant Hegde <hegdevasant@linux.vnet.ibm.com>
    powerpc/rtas: Validate rtas.entry before calling enter_rtas()

Joerg Roedel <jroedel@suse.de>
    iommu/amd: Don't clear DTE flags when modifying it

Jay Cornwall <jay@jcornwall.me>
    iommu/amd: Fix BUG when faulting a PROT_NONE VMA

Christian Zander <christian@nervanasys.com>
    iommu/vt-d: fix range computation when making room for large pages

Luca Coelho <luciano.coelho@intel.com>
    iwlwifi: pci: add a few more PCI subvendor IDs for the 7265 series

Andrei Otcheretianski <andrei.otcheretianski@intel.com>
    iwlwifi: mvm: flush fw_dump_wk when mvm fails to start

Arik Nemtsov <arik@wizery.com>
    iwlwifi: mvm: init card correctly on ctkill exit check

Johannes Berg <johannes.berg@intel.com>
    iwlwifi: mvm: fix D3 firmware PN programming

Johannes Berg <johannes.berg@intel.com>
    iwlwifi: mvm: fix D3 CCMP TX PN assignment

Avraham Stern <avraham.stern@intel.com>
    iwlwifi: mvm: clear csa countdown when AP is stopped

Larry Finger <Larry.Finger@lwfinger.net>
    rtlwifi: rtl8821ae: Fix system lockups on boot

Johannes Berg <johannes.berg@intel.com>
    iwlwifi: fix firmware filename for 3160

Johannes Berg <johannes.berg@intel.com>
    iwlwifi: dvm: fix D3 firmware PN programming

Chaotian Jing <chaotian.jing@mediatek.com>
    mmc: core: Fix init_card in 52Mhz

Felix Fietkau <nbd@openwrt.org>
    ath9k: declare required extra tx headroom

Mohammed Shafi Shajakhan <mohammed@qti.qualcomm.com>
    mac80211: Fix hwflags debugfs file format


-------------

Diffstat:

 Makefile                                        |  4 +-
 arch/arm/boot/dts/am57xx-beagle-x15.dts         |  3 +-
 arch/arm/boot/dts/armada-385-db-ap.dts          |  2 +-
 arch/arm/boot/dts/berlin2q.dtsi                 |  6 +-
 arch/arm/boot/dts/exynos5420-peach-pit.dts      |  5 ++
 arch/arm/boot/dts/exynos5800-peach-pi.dts       |  5 ++
 arch/arm/boot/dts/imx7d.dtsi                    |  4 +-
 arch/arm/boot/dts/ste-hrefv60plus.dtsi          |  2 +-
 arch/arm/kvm/Kconfig                            |  1 +
 arch/arm/mach-exynos/pm_domains.c               |  8 +--
 arch/arm/plat-orion/common.c                    |  2 +-
 arch/arm/vdso/vdsomunge.c                       | 17 ++++--
 arch/arm64/kernel/armv8_deprecated.c            | 18 +++---
 arch/arm64/kernel/stacktrace.c                  |  6 +-
 arch/arm64/kernel/suspend.c                     | 22 +++++---
 arch/powerpc/kernel/rtas.c                      |  3 +
 arch/um/kernel/trap.c                           |  2 +-
 arch/x86/boot/compressed/eboot.c                |  8 ++-
 arch/x86/kernel/apic/io_apic.c                  |  4 +-
 arch/x86/kernel/setup.c                         |  8 +++
 arch/x86/xen/enlighten.c                        |  6 +-
 block/blk-core.c                                |  2 +-
 block/blk-mq-tag.c                              |  1 +
 block/blk-mq.c                                  |  4 +-
 block/blk-sysfs.c                               |  1 +
 crypto/ablkcipher.c                             |  2 +-
 crypto/algapi.c                                 |  2 +-
 crypto/api.c                                    |  6 +-
 crypto/crypto_user.c                            |  2 +-
 drivers/block/nvme-core.c                       | 15 +++--
 drivers/block/rbd.c                             | 72 ++++++++++++++----------
 drivers/block/xen-blkfront.c                    |  3 +-
 drivers/bus/arm-ccn.c                           |  3 +-
 drivers/clk/clkdev.c                            |  3 +-
 drivers/cpufreq/intel_pstate.c                  |  5 ++
 drivers/edac/sb_edac.c                          |  8 +--
 drivers/gpu/drm/amd/amdgpu/amdgpu.h             |  1 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_pm.c          |  5 ++
 drivers/gpu/drm/amd/amdgpu/kv_dpm.c             |  3 +
 drivers/gpu/drm/drm_crtc.c                      |  4 +-
 drivers/gpu/drm/drm_dp_mst_topology.c           |  7 ++-
 drivers/gpu/drm/i915/i915_gem_userptr.c         |  5 +-
 drivers/gpu/drm/i915/intel_display.c            |  7 +++
 drivers/gpu/drm/i915/intel_lrc.c                |  1 +
 drivers/gpu/drm/i915/intel_ringbuffer.c         |  2 +
 drivers/gpu/drm/nouveau/nouveau_gem.c           |  5 +-
 drivers/gpu/drm/radeon/atombios_encoders.c      | 19 +++++--
 drivers/gpu/drm/radeon/radeon.h                 |  1 +
 drivers/gpu/drm/radeon/radeon_encoders.c        |  1 -
 drivers/gpu/drm/radeon/radeon_legacy_encoders.c |  1 +
 drivers/gpu/drm/radeon/radeon_pm.c              | 43 +++++++++------
 drivers/gpu/drm/vmwgfx/vmwgfx_drv.c             |  3 +
 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h             |  6 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c         |  6 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_overlay.c         |  2 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_resource.c        | 29 +++++++---
 drivers/gpu/drm/vmwgfx/vmwgfx_shader.c          |  2 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_surface.c         | 12 +++-
 drivers/i2c/busses/i2c-mv64xxx.c                |  2 -
 drivers/iio/accel/st_accel_core.c               |  6 --
 drivers/infiniband/core/cm.c                    | 10 +++-
 drivers/input/mouse/alps.c                      | 48 ++++++++++++++--
 drivers/iommu/amd_iommu.c                       |  4 +-
 drivers/iommu/amd_iommu_types.h                 |  1 +
 drivers/iommu/amd_iommu_v2.c                    |  7 +++
 drivers/iommu/intel-iommu.c                     | 12 ++--
 drivers/irqchip/irq-tegra.c                     |  1 +
 drivers/md/dm-cache-metadata.c                  |  2 +-
 drivers/md/md.c                                 |  3 +-
 drivers/md/persistent-data/dm-btree-remove.c    | 17 ++++--
 drivers/md/persistent-data/dm-btree.c           |  2 +-
 drivers/md/raid1.c                              |  2 +-
 drivers/md/raid10.c                             |  2 +-
 drivers/md/raid5.c                              |  6 +-
 drivers/media/dvb-frontends/m88ds3103.c         | 73 ++++++++++++++++---------
 drivers/media/dvb-frontends/si2168.c            |  4 ++
 drivers/media/tuners/si2157.c                   |  4 ++
 drivers/media/usb/dvb-usb-v2/rtl28xxu.c         | 15 ++++-
 drivers/media/usb/dvb-usb-v2/rtl28xxu.h         |  2 +-
 drivers/mmc/card/mmc_test.c                     |  9 +--
 drivers/mmc/core/mmc.c                          |  7 ---
 drivers/net/wireless/ath/ath9k/init.c           |  1 +
 drivers/net/wireless/iwlwifi/dvm/lib.c          |  2 +-
 drivers/net/wireless/iwlwifi/iwl-7000.c         |  2 +-
 drivers/net/wireless/iwlwifi/mvm/d3.c           | 27 ++++-----
 drivers/net/wireless/iwlwifi/mvm/fw.c           |  4 +-
 drivers/net/wireless/iwlwifi/mvm/mac80211.c     |  1 +
 drivers/net/wireless/iwlwifi/mvm/mvm.h          |  5 ++
 drivers/net/wireless/iwlwifi/mvm/ops.c          |  1 +
 drivers/net/wireless/iwlwifi/pcie/drv.c         |  5 ++
 drivers/net/wireless/rtlwifi/pci.h              |  2 +
 drivers/net/wireless/rtlwifi/rtl8821ae/hw.c     | 17 ++++++
 drivers/net/wireless/rtlwifi/rtl8821ae/sw.c     |  5 ++
 drivers/net/wireless/rtlwifi/wifi.h             |  3 +
 drivers/pci/pci-sysfs.c                         |  2 +-
 drivers/pinctrl/intel/pinctrl-baytrail.c        | 59 ++++++++++++--------
 drivers/scsi/mvsas/mv_sas.c                     |  2 +
 drivers/staging/iio/accel/sca3000_ring.c        |  2 +-
 drivers/staging/iio/adc/mxs-lradc.c             |  9 +--
 drivers/thermal/samsung/exynos_tmu.c            |  2 +-
 drivers/tty/serial/8250/8250_dma.c              |  4 --
 drivers/usb/host/xhci-pci.c                     |  1 +
 drivers/usb/host/xhci-ring.c                    | 20 +++++--
 drivers/usb/serial/qcserial.c                   |  2 +
 drivers/video/console/fbcon.c                   |  1 +
 fs/btrfs/ioctl.c                                |  5 +-
 fs/overlayfs/copy_up.c                          |  6 +-
 fs/overlayfs/inode.c                            |  3 +
 fs/overlayfs/super.c                            |  2 +
 include/linux/backing-dev.h                     |  6 +-
 include/linux/omap-dma.h                        |  2 +-
 include/sound/soc.h                             |  6 +-
 include/sound/wm8904.h                          |  2 +-
 kernel/module.c                                 |  8 ++-
 kernel/sched/deadline.c                         |  8 ++-
 kernel/trace/trace_stack.c                      |  7 +++
 lib/fault-inject.c                              |  2 +-
 mm/backing-dev.c                                | 12 +++-
 mm/filemap.c                                    |  9 +--
 mm/huge_memory.c                                |  3 +-
 net/mac80211/debugfs.c                          |  2 +-
 net/netfilter/ipset/ip_set_list_set.c           |  2 +-
 sound/hda/ext/hdac_ext_bus.c                    |  1 +
 sound/pci/hda/hda_codec.c                       |  4 +-
 sound/pci/hda/patch_conexant.c                  |  1 +
 sound/soc/soc-ops.c                             | 28 ++++++++++
 virt/kvm/irqchip.c                              |  8 ++-
 127 files changed, 662 insertions(+), 313 deletions(-)