[PATCH 3.10 00/89] 3.10.85-stable review

[Greg Kroah-Hartman <gregkh@linuxfoundation.org>]

This is the start of the stable review cycle for the 3.10.85 release.
There are 89 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sun Aug  2 19:40:13 UTC 2015.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	kernel.org/pub/linux/kernel/v3.x/stable-review/patch-3.10.85-rc1.gz
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Linux 3.10.85-rc1

Nicholas Mc Guire <hofrat@osadl.org>
    MIPS: KVM: Do not sign extend on unsigned MMIO load

Chad Dupuis <chad.dupuis@qlogic.com>
    qla2xxx: Mark port lost when we receive an RSCN for it.

Linus Torvalds <torvalds@linux-foundation.org>
    Fix firmware loader uevent buffer NULL pointer dereference

Joe Perches <joe@perches.com>
    hpfs: hpfs_error: Remove static buffer, use vsprintf extension %pV instead

Chris Wilson <chris@chris-wilson.co.uk>
    agp/intel: Fix typo in needs_ilk_vtd_wa()

Ilya Dryomov <idryomov@gmail.com>
    rbd: use GFP_NOIO in rbd_obj_request_create()

Al Viro <viro@zeniv.linux.org.uk>
    9p: don't leave a half-initialized inode sitting around

Al Viro <viro@zeniv.linux.org.uk>
    9p: forgetting to cancel request on interrupted zero-copy RPC

Trond Myklebust <trond.myklebust@primarydata.com>
    SUNRPC: Fix a memory leak in the backchannel code

Jeff Layton <jlayton@poochiereds.net>
    nfs: increase size of EXCHANGE_ID name string buffer

Olga Kornievskaia <kolga@netapp.com>
    fixing infinite OPEN loop in 4.0 stateid recovery

Chuck Lever <chuck.lever@oracle.com>
    NFS: Fix size of NFSACL SETACL operations

Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
    watchdog: omap: assert the counter being stopped before reprogramming

Alan Stern <stern@rowland.harvard.edu>
    USB: usbfs: allow URBs to be reaped after disconnection

Michal Kazior <michal.kazior@tieto.com>
    mac80211: prevent possible crypto tx tailroom corruption

Chris Metcalf <cmetcalf@ezchip.com>
    __bitmap_parselist: fix bug in empty string handling

Ding Wang <justin.wang@spreadtrum.com>
    mmc: card: Fixup request missing in mmc_blk_issue_rw_rq

Sagi Grimberg <sagig@mellanox.com>
    iser-target: release stale iser connections

Sagi Grimberg <sagig@mellanox.com>
    iser-target: Fix possible deadlock in RDMA_CM connection error

Nicholas Bellinger <nab@linux-iscsi.org>
    iscsi-target: Convert iscsi_thread_set usage to kthread.h

Lv Zheng <lv.zheng@intel.com>
    ACPICA: Tables: Fix an issue that FACS initialization is performed twice

Ilya Dryomov <idryomov@gmail.com>
    crush: fix a bug in tree bucket decode

Miklos Szeredi <mszeredi@suse.cz>
    fuse: initialize fc->release before calling it

Filipe Manana <fdmanana@suse.com>
    Btrfs: use kmem_cache_free when freeing entry in inode cache

Firo Yang <firogm@gmail.com>
    md: fix a build warning

Stevens, Nick <Nick.Stevens@digi.com>
    hwmon: (mcp3021) Fix broken output scaling

Lior Amsalem <alior@marvell.com>
    dmaengine: mv_xor: bug fix for racing condition in descriptors cleanup

Steven Rostedt (Red Hat) <rostedt@goodmis.org>
    tracing: Have branch tracer use recursive field of task struct

Steven Rostedt (Red Hat) <rostedt@goodmis.org>
    tracing/filter: Do not allow infix to exceed end of string

Steven Rostedt (Red Hat) <rostedt@goodmis.org>
    tracing/filter: Do not WARN on operand count going below zero

Arne Fitzenreiter <arne_f@ipfire.org>
    libata: force disable trim for SuperSSpeed S238

Arne Fitzenreiter <arne_f@ipfire.org>
    libata: add ATA_HORKAGE_NOTRIM

Hon Ching \\(Vicky\\) Lo <honclo@linux.vnet.ibm.com>
    vTPM: set virtual device before passing to ibmvtpm_reset_crq

Eric Sandeen <sandeen@redhat.com>
    xfs: fix remote symlinks on V5/CRC filesystems

Zhao Junwang <zhjwpku@gmail.com>
    drm: add a check for x/y in drm_mode_setcrtc

Michel Dänzer <michel.daenzer@amd.com>
    drm/radeon: Don't flush the GART TLB if rdev->gart.ptr == NULL

Alex Deucher <alexander.deucher@amd.com>
    drm/radeon: take the mode_config mutex when dealing with hpds (v2)

Frediano Ziglio <fziglio@redhat.com>
    drm/qxl: Do not cause spice-server to clean our objects

Tomas Winkler <tomas.winkler@intel.com>
    mmc: block: Add missing mmc_blk_put() in power_ro_lock_show()

Joe Thornber <ejt@redhat.com>
    dm btree: silence lockdep lock inversion in dm_btree_del()

Dennis Yang <shinrairis@gmail.com>
    dm btree remove: fix bug in redistribute3

AMAN DEEP <aman.deep@samsung.com>
    usb: xhci: Bugfix for NULL pointer deference in xhci_endpoint_init() function

Claudio Cappelli <claudio.cappelli.linux@gmail.com>
    USB: option: add 2020:4000 ID

Peter Sanford <peter@sanford.io>
    USB: cp210x: add ID for Aruba Networks controllers

Dan Carpenter <dan.carpenter@oracle.com>
    USB: devio: fix a condition in async_completed()

John Youn <John.Youn@synopsys.com>
    usb: dwc3: Reset the transfer resource index on SET_INTERFACE

Subbaraya Sundeep Bhatta <subbaraya.sundeep.bhatta@xilinx.com>
    usb: dwc3: gadget: return error if command sent to DEPCMD register fails

Subbaraya Sundeep Bhatta <subbaraya.sundeep.bhatta@xilinx.com>
    usb: dwc3: gadget: return error if command sent to DGCMD register fails

Mikulas Patocka <mpatocka@redhat.com>
    libata: increase the timeout when setting transfer mode

Aleksei Mamlin <mamlinav@gmail.com>
    libata: add ATA_HORKAGE_BROKEN_FPDMA_AA quirk for HP 250GB SATA disk VB0250EAVER

Zidan Wang <zidan.wang@freescale.com>
    ASoC: wm8960: the enum of "DAC Polarity" should be wm8960_enum[1]

Axel Lin <axel.lin@ingics.com>
    ASoC: wm8903: Fix define for WM8903_VMID_RES_250K

Axel Lin <axel.lin@ingics.com>
    ASoC: wm8955: Fix setting wrong register for WM8955_K_8_0_MASK bits

Axel Lin <axel.lin@ingics.com>
    ASoC: wm8737: Fixup setting VMID Impedance control register

Mauro Carvalho Chehab <mchehab@osg.samsung.com>
    cx24116: fix a buffer overflow when checking userspace params

Mauro Carvalho Chehab <mchehab@osg.samsung.com>
    s5h1420: fix a buffer overflow when checking userspace params

Mauro Carvalho Chehab <mchehab@osg.samsung.com>
    af9013: Don't accept invalid bandwidth

JM Friedt <jmfriedt@femto-st.fr>
    iio: DAC: ad5624r_spi: fix bit shift of output data value

Cyrille Pitchen <cyrille.pitchen@atmel.com>
    i2c: at91: fix a race condition when using the DMA controller

Joseph Qi <joseph.qi@huawei.com>
    jbd2: fix ocfs2 corrupt when updating journal superblock fails

Dmitry Monakhov <dmonakhov@openvz.org>
    jbd2: use GFP_NOFS in jbd2_cleanup_journal_tail()

Michal Hocko <mhocko@suse.cz>
    ext4: replace open coded nofail allocation in ext4_free_blocks()

Eryu Guan <guaneryu@gmail.com>
    ext4: correctly migrate a file with a hole at the beginning

Eryu Guan <guaneryu@gmail.com>
    ext4: be more strict when migrating to non-extent based file

Lukas Czerner <lczerner@redhat.com>
    ext4: fix reservation release on invalidatepage for delalloc fs

Darrick J. Wong <darrick.wong@oracle.com>
    ext4: don't retry file block mapping on bigalloc fs with non-extent file

Theodore Ts'o <tytso@mit.edu>
    ext4: call sync_blockdev() before invalidate_bdev() in put_super()

Theodore Ts'o <tytso@mit.edu>
    ext4: fix race between truncate and __ext4_journalled_writepage()

Haggai Eran <haggai.eran@gmail.com>
    staging: rtl8712: prevent buffer overrun in recvbuf2recvframe

Felix Fietkau <nbd@openwrt.org>
    ath9k: fix DMA stop sequence for AR9003+

Marcel Holtmann <marcel@holtmann.org>
    Bluetooth: btusb: Fix memory leak in Intel setup routine

Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
    pinctrl: mvebu: armada-xp: fix functions of MPP48

Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
    pinctrl: mvebu: armada-xp: remove non-existing VDD cpu_pd functions

Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
    pinctrl: mvebu: armada-xp: remove non-existing NAND pins

Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
    pinctrl: mvebu: armada-370: fix spi0 pin description

Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
    mtd: dc21285: use raw spinlock functions for nw_gpio_lock

Brian Norris <computersforpeace@gmail.com>
    mtd: fix: avoid race condition when accessing mtd->usecount

Ezequiel Garcia <ezequiel@vanguardiasur.com.ar>
    spi: pl022: Specify 'num-cs' property as required in devicetree binding

Stefan Wahren <stefan.wahren@i2se.com>
    regulator: core: fix constraints output buffer

Arun Chandran <achandran@mvista.com>
    regmap: Fix regmap_bulk_read in BE mode

Rafael J. Wysocki <rafael.j.wysocki@intel.com>
    cpuidle / menu: Return (-1) if there are no suitable states

Will Deacon <will.deacon@arm.com>
    arm64: vdso: work-around broken ELF toolchains in Makefile

Dave P Martin <Dave.Martin@arm.com>
    arm64: mm: Fix freeing of the wrong memmap entries with !SPARSEMEM_VMEMMAP

Catalin Marinas <catalin.marinas@arm.com>
    arm64: Do not attempt to use init_mm in reset_context()

Vineet Gupta <vgupta@synopsys.com>
    ARC: add compiler barrier to LLSC based cmpxchg

Takashi Iwai <tiwai@suse.de>
    ALSA: hda - Fix the dock headphone output on Fujitsu Lifebook E780

Takashi Iwai <tiwai@suse.de>
    ALSA: hda - Add headset support to Acer Aspire V5

Ryan Underwood <nemesis@icequake.net>
    Disable write buffering on Toshiba ToPIC95

Brian King <brking@linux.vnet.ibm.com>
    ipr: Increase default adapter init stage change timeout


-------------

Diffstat:

 .../pinctrl/marvell,armada-370-pinctrl.txt         |   4 +-
 .../bindings/pinctrl/marvell,armada-xp-pinctrl.txt |  32 +++----
 .../devicetree/bindings/spi/spi_pl022.txt          |   2 +-
 Makefile                                           |   4 +-
 arch/arc/include/asm/cmpxchg.h                     |   9 +-
 arch/arm64/kernel/vdso/Makefile                    |   4 +
 arch/arm64/mm/context.c                            |   8 ++
 arch/arm64/mm/init.c                               |   2 +-
 arch/mips/kvm/kvm_mips_emul.c                      |   2 +-
 drivers/acpi/acpica/utxfinit.c                     |  10 +-
 drivers/ata/libata-core.c                          |   9 +-
 drivers/ata/libata-scsi.c                          |   3 +-
 drivers/base/firmware_class.c                      |  16 +++-
 drivers/base/regmap/regmap.c                       |   2 +-
 drivers/block/rbd.c                                |   4 +-
 drivers/bluetooth/btusb.c                          |   2 +
 drivers/char/agp/intel-gtt.c                       |   2 +-
 drivers/char/tpm/tpm_ibmvtpm.c                     |   5 +-
 drivers/cpuidle/cpuidle.c                          |   3 +
 drivers/cpuidle/governors/menu.c                   |   2 +-
 drivers/dma/mv_xor.c                               |  72 ++++++++------
 drivers/dma/mv_xor.h                               |   1 +
 drivers/gpu/drm/drm_crtc.c                         |   7 +-
 drivers/gpu/drm/qxl/qxl_cmd.c                      |   1 +
 drivers/gpu/drm/radeon/radeon_gart.c               |  12 ++-
 drivers/gpu/drm/radeon/radeon_irq_kms.c            |   2 +
 drivers/hwmon/mcp3021.c                            |  14 +--
 drivers/i2c/busses/i2c-at91.c                      |  70 ++++++++++----
 drivers/iio/dac/ad5624r_spi.c                      |   4 +-
 drivers/infiniband/ulp/isert/ib_isert.c            |  32 +++++--
 drivers/md/md.c                                    |   2 +-
 drivers/md/persistent-data/dm-btree-remove.c       |   6 +-
 drivers/md/persistent-data/dm-btree.c              |   2 +-
 drivers/media/dvb-frontends/af9013.c               |   4 +
 drivers/media/dvb-frontends/cx24116.c              |   8 +-
 drivers/media/dvb-frontends/s5h1420.c              |   2 +-
 drivers/mmc/card/block.c                           |  10 +-
 drivers/mtd/maps/dc21285.c                         |   4 +-
 drivers/mtd/mtd_blkdevs.c                          |   5 +
 drivers/net/wireless/ath/ath9k/main.c              |  12 ++-
 drivers/pcmcia/topic.h                             |  16 ++++
 drivers/pinctrl/mvebu/pinctrl-armada-370.c         |   4 +-
 drivers/pinctrl/mvebu/pinctrl-armada-xp.c          |  37 +++-----
 drivers/regulator/core.c                           |   2 +-
 drivers/scsi/ipr.h                                 |   2 +-
 drivers/scsi/qla2xxx/qla_isr.c                     |  17 +++-
 drivers/staging/rtl8712/rtl8712_recv.c             |   3 +-
 drivers/target/iscsi/iscsi_target.c                | 104 +++++++++------------
 drivers/target/iscsi/iscsi_target_core.h           |   7 ++
 drivers/target/iscsi/iscsi_target_erl0.c           |  13 ++-
 drivers/target/iscsi/iscsi_target_login.c          |  61 ++++++++++--
 drivers/usb/core/devio.c                           |  65 +++++++------
 drivers/usb/dwc3/ep0.c                             |   4 +
 drivers/usb/dwc3/gadget.c                          |   4 +
 drivers/usb/host/xhci-mem.c                        |   2 +-
 drivers/usb/serial/cp210x.c                        |   1 +
 drivers/usb/serial/option.c                        |   1 +
 drivers/watchdog/omap_wdt.c                        |   7 ++
 fs/9p/vfs_inode.c                                  |   3 +-
 fs/9p/vfs_inode_dotl.c                             |   3 +-
 fs/btrfs/inode-map.c                               |   2 +-
 fs/ext4/indirect.c                                 |   2 +-
 fs/ext4/inode.c                                    |  38 ++++++--
 fs/ext4/mballoc.c                                  |  16 +---
 fs/ext4/migrate.c                                  |  17 +++-
 fs/ext4/super.c                                    |   1 +
 fs/fuse/inode.c                                    |   2 +-
 fs/hpfs/super.c                                    |  11 ++-
 fs/jbd2/checkpoint.c                               |   7 +-
 fs/jbd2/journal.c                                  |  38 ++++++--
 fs/nfs/nfs3xdr.c                                   |   2 +-
 fs/nfs/nfs4state.c                                 |   2 +
 fs/xfs/xfs_symlink.c                               |   2 +-
 include/acpi/actypes.h                             |   1 +
 include/linux/jbd2.h                               |   4 +-
 include/linux/libata.h                             |   1 +
 include/linux/nfs_xdr.h                            |   2 +-
 include/uapi/linux/usbdevice_fs.h                  |   3 +-
 kernel/trace/trace.h                               |   1 +
 kernel/trace/trace_branch.c                        |  17 ++--
 kernel/trace/trace_events_filter.c                 |  10 +-
 lib/bitmap.c                                       |  17 ++--
 net/9p/client.c                                    |   3 +-
 net/ceph/osdmap.c                                  |   2 +-
 net/mac80211/main.c                                |   3 +
 net/sunrpc/backchannel_rqst.c                      |   2 +-
 sound/pci/hda/patch_realtek.c                      |  18 ++++
 sound/soc/codecs/wm8737.c                          |   6 +-
 sound/soc/codecs/wm8903.h                          |   2 +-
 sound/soc/codecs/wm8955.c                          |   2 +-
 sound/soc/codecs/wm8960.c                          |   2 +-
 91 files changed, 647 insertions(+), 340 deletions(-)