commit:     3755edc2db73c12d89055cb23f63bf33b0275a66
Author:     Mike Pagano <mpagano <AT> gentoo <DOT> org>
AuthorDate: Sat Jun  6 21:34:48 2015 +0000
Commit:     Mike Pagano <mpagano <AT> gentoo <DOT> org>
CommitDate: Sat Jun  6 21:34:48 2015 +0000
URL:        https://gitweb.gentoo.org/proj/linux-patches.git/commit/?id=3755edc2

Linux patch 3.14.44

 0000_README              |    4 +
 1043_linux-3.14.44.patch | 1714 ++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 1718 insertions(+)

diff --git a/0000_README b/0000_README
index 31b06bd..5f6f122 100644
--- a/0000_README
+++ b/0000_README
@@ -214,6 +214,10 @@ Patch:  1042_linux-3.14.43.patch
 From:   http://www.kernel.org
 Desc:   Linux 3.14.43
 
+Patch:  1043_linux-3.14.44.patch
+From:   http://www.kernel.org
+Desc:   Linux 3.14.44
+
 Patch:  1500_XATTR_USER_PREFIX.patch
 From:   https://bugs.gentoo.org/show_bug.cgi?id=470644
 Desc:   Support for namespace user.pax.* on tmpfs.

diff --git a/1043_linux-3.14.44.patch b/1043_linux-3.14.44.patch
new file mode 100644
index 0000000..4ee6940
--- /dev/null
+++ b/1043_linux-3.14.44.patch
@@ -0,0 +1,1714 @@
+diff --git a/Makefile b/Makefile
+index ae5f1e62812f..9f2471c6fbbe 100644
+--- a/Makefile
++++ b/Makefile
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 14
+-SUBLEVEL = 43
++SUBLEVEL = 44
+ EXTRAVERSION =
+ NAME = Remembering Coco
+ 
+@@ -244,7 +244,7 @@ CONFIG_SHELL := $(shell if [ -x "$$BASH" ]; then echo 
$$BASH; \
+ 
+ HOSTCC       = gcc
+ HOSTCXX      = g++
+-HOSTCFLAGS   = -Wall -Wmissing-prototypes -Wstrict-prototypes -O2 
-fomit-frame-pointer
++HOSTCFLAGS   = -Wall -Wmissing-prototypes -Wstrict-prototypes -O2 
-fomit-frame-pointer -std=gnu89
+ HOSTCXXFLAGS = -O2
+ 
+ # Decide whether to build built-in, modular, or both.
+@@ -382,7 +382,9 @@ KBUILD_CFLAGS   := -Wall -Wundef -Wstrict-prototypes 
-Wno-trigraphs \
+                  -fno-strict-aliasing -fno-common \
+                  -Werror-implicit-function-declaration \
+                  -Wno-format-security \
+-                 -fno-delete-null-pointer-checks
++                 -fno-delete-null-pointer-checks \
++                 -std=gnu89
++
+ KBUILD_AFLAGS_KERNEL :=
+ KBUILD_CFLAGS_KERNEL :=
+ KBUILD_AFLAGS   := -D__ASSEMBLY__
+diff --git a/arch/arm/boot/dts/imx27.dtsi b/arch/arm/boot/dts/imx27.dtsi
+index da2eb7f6a5b2..6899990be272 100644
+--- a/arch/arm/boot/dts/imx27.dtsi
++++ b/arch/arm/boot/dts/imx27.dtsi
+@@ -428,7 +428,7 @@
+ 
+                       fec: ethernet@1002b000 {
+                               compatible = "fsl,imx27-fec";
+-                              reg = <0x1002b000 0x4000>;
++                              reg = <0x1002b000 0x1000>;
+                               interrupts = <50>;
+                               clocks = <&clks 48>, <&clks 67>;
+                               clock-names = "ipg", "ahb";
+diff --git a/arch/arm/kernel/entry-common.S b/arch/arm/kernel/entry-common.S
+index a2dcafdf1bc8..98dd389e3b3c 100644
+--- a/arch/arm/kernel/entry-common.S
++++ b/arch/arm/kernel/entry-common.S
+@@ -32,7 +32,9 @@ ret_fast_syscall:
+  UNWIND(.fnstart      )
+  UNWIND(.cantunwind   )
+       disable_irq                             @ disable interrupts
+-      ldr     r1, [tsk, #TI_FLAGS]
++      ldr     r1, [tsk, #TI_FLAGS]            @ re-check for syscall tracing
++      tst     r1, #_TIF_SYSCALL_WORK
++      bne     __sys_trace_return
+       tst     r1, #_TIF_WORK_MASK
+       bne     fast_work_pending
+       asm_trace_hardirqs_on
+diff --git a/arch/powerpc/kernel/vmlinux.lds.S 
b/arch/powerpc/kernel/vmlinux.lds.S
+index f096e72262f4..1db685104ffc 100644
+--- a/arch/powerpc/kernel/vmlinux.lds.S
++++ b/arch/powerpc/kernel/vmlinux.lds.S
+@@ -213,6 +213,7 @@ SECTIONS
+               *(.opd)
+       }
+ 
++      . = ALIGN(256);
+       .got : AT(ADDR(.got) - LOAD_OFFSET) {
+               __toc_start = .;
+ #ifndef CONFIG_RELOCATABLE
+diff --git a/arch/s390/crypto/ghash_s390.c b/arch/s390/crypto/ghash_s390.c
+index 7940dc90e80b..b258110da952 100644
+--- a/arch/s390/crypto/ghash_s390.c
++++ b/arch/s390/crypto/ghash_s390.c
+@@ -16,11 +16,12 @@
+ #define GHASH_DIGEST_SIZE     16
+ 
+ struct ghash_ctx {
+-      u8 icv[16];
+-      u8 key[16];
++      u8 key[GHASH_BLOCK_SIZE];
+ };
+ 
+ struct ghash_desc_ctx {
++      u8 icv[GHASH_BLOCK_SIZE];
++      u8 key[GHASH_BLOCK_SIZE];
+       u8 buffer[GHASH_BLOCK_SIZE];
+       u32 bytes;
+ };
+@@ -28,8 +29,10 @@ struct ghash_desc_ctx {
+ static int ghash_init(struct shash_desc *desc)
+ {
+       struct ghash_desc_ctx *dctx = shash_desc_ctx(desc);
++      struct ghash_ctx *ctx = crypto_shash_ctx(desc->tfm);
+ 
+       memset(dctx, 0, sizeof(*dctx));
++      memcpy(dctx->key, ctx->key, GHASH_BLOCK_SIZE);
+ 
+       return 0;
+ }
+@@ -45,7 +48,6 @@ static int ghash_setkey(struct crypto_shash *tfm,
+       }
+ 
+       memcpy(ctx->key, key, GHASH_BLOCK_SIZE);
+-      memset(ctx->icv, 0, GHASH_BLOCK_SIZE);
+ 
+       return 0;
+ }
+@@ -54,7 +56,6 @@ static int ghash_update(struct shash_desc *desc,
+                        const u8 *src, unsigned int srclen)
+ {
+       struct ghash_desc_ctx *dctx = shash_desc_ctx(desc);
+-      struct ghash_ctx *ctx = crypto_shash_ctx(desc->tfm);
+       unsigned int n;
+       u8 *buf = dctx->buffer;
+       int ret;
+@@ -70,7 +71,7 @@ static int ghash_update(struct shash_desc *desc,
+               src += n;
+ 
+               if (!dctx->bytes) {
+-                      ret = crypt_s390_kimd(KIMD_GHASH, ctx, buf,
++                      ret = crypt_s390_kimd(KIMD_GHASH, dctx, buf,
+                                             GHASH_BLOCK_SIZE);
+                       if (ret != GHASH_BLOCK_SIZE)
+                               return -EIO;
+@@ -79,7 +80,7 @@ static int ghash_update(struct shash_desc *desc,
+ 
+       n = srclen & ~(GHASH_BLOCK_SIZE - 1);
+       if (n) {
+-              ret = crypt_s390_kimd(KIMD_GHASH, ctx, src, n);
++              ret = crypt_s390_kimd(KIMD_GHASH, dctx, src, n);
+               if (ret != n)
+                       return -EIO;
+               src += n;
+@@ -94,7 +95,7 @@ static int ghash_update(struct shash_desc *desc,
+       return 0;
+ }
+ 
+-static int ghash_flush(struct ghash_ctx *ctx, struct ghash_desc_ctx *dctx)
++static int ghash_flush(struct ghash_desc_ctx *dctx)
+ {
+       u8 *buf = dctx->buffer;
+       int ret;
+@@ -104,24 +105,24 @@ static int ghash_flush(struct ghash_ctx *ctx, struct 
ghash_desc_ctx *dctx)
+ 
+               memset(pos, 0, dctx->bytes);
+ 
+-              ret = crypt_s390_kimd(KIMD_GHASH, ctx, buf, GHASH_BLOCK_SIZE);
++              ret = crypt_s390_kimd(KIMD_GHASH, dctx, buf, GHASH_BLOCK_SIZE);
+               if (ret != GHASH_BLOCK_SIZE)
+                       return -EIO;
++
++              dctx->bytes = 0;
+       }
+ 
+-      dctx->bytes = 0;
+       return 0;
+ }
+ 
+ static int ghash_final(struct shash_desc *desc, u8 *dst)
+ {
+       struct ghash_desc_ctx *dctx = shash_desc_ctx(desc);
+-      struct ghash_ctx *ctx = crypto_shash_ctx(desc->tfm);
+       int ret;
+ 
+-      ret = ghash_flush(ctx, dctx);
++      ret = ghash_flush(dctx);
+       if (!ret)
+-              memcpy(dst, ctx->icv, GHASH_BLOCK_SIZE);
++              memcpy(dst, dctx->icv, GHASH_BLOCK_SIZE);
+       return ret;
+ }
+ 
+diff --git a/arch/x86/kvm/mmu.c b/arch/x86/kvm/mmu.c
+index dcae8fa2bf04..aa0779372e3d 100644
+--- a/arch/x86/kvm/mmu.c
++++ b/arch/x86/kvm/mmu.c
+@@ -4078,7 +4078,7 @@ void kvm_mmu_pte_write(struct kvm_vcpu *vcpu, gpa_t gpa,
+       ++vcpu->kvm->stat.mmu_pte_write;
+       kvm_mmu_audit(vcpu, AUDIT_PRE_PTE_WRITE);
+ 
+-      mask.cr0_wp = mask.cr4_pae = mask.nxe = 1;
++      mask.cr0_wp = mask.cr4_pae = mask.nxe = mask.smep_andnot_wp = 1;
+       for_each_gfn_indirect_valid_sp(vcpu->kvm, sp, gfn) {
+               if (detect_write_misaligned(sp, gpa, bytes) ||
+                     detect_write_flooding(sp)) {
+diff --git a/drivers/acpi/osl.c b/drivers/acpi/osl.c
+index fc1aa7909690..726c969b8a81 100644
+--- a/drivers/acpi/osl.c
++++ b/drivers/acpi/osl.c
+@@ -172,7 +172,7 @@ static void __init acpi_request_region (struct 
acpi_generic_address *gas,
+               request_mem_region(addr, length, desc);
+ }
+ 
+-static int __init acpi_reserve_resources(void)
++static void __init acpi_reserve_resources(void)
+ {
+       acpi_request_region(&acpi_gbl_FADT.xpm1a_event_block, 
acpi_gbl_FADT.pm1_event_length,
+               "ACPI PM1a_EVT_BLK");
+@@ -201,10 +201,7 @@ static int __init acpi_reserve_resources(void)
+       if (!(acpi_gbl_FADT.gpe1_block_length & 0x1))
+               acpi_request_region(&acpi_gbl_FADT.xgpe1_block,
+                              acpi_gbl_FADT.gpe1_block_length, "ACPI 
GPE1_BLK");
+-
+-      return 0;
+ }
+-device_initcall(acpi_reserve_resources);
+ 
+ void acpi_os_printf(const char *fmt, ...)
+ {
+@@ -1792,6 +1789,7 @@ acpi_status __init acpi_os_initialize(void)
+ 
+ acpi_status __init acpi_os_initialize1(void)
+ {
++      acpi_reserve_resources();
+       kacpid_wq = alloc_workqueue("kacpid", 0, 1);
+       kacpi_notify_wq = alloc_workqueue("kacpi_notify", 0, 1);
+       kacpi_hotplug_wq = alloc_ordered_workqueue("kacpi_hotplug", 0);
+diff --git a/drivers/ata/libahci.c b/drivers/ata/libahci.c
+index 36605abe5a67..b65d79cd43d5 100644
+--- a/drivers/ata/libahci.c
++++ b/drivers/ata/libahci.c
+@@ -1693,8 +1693,7 @@ static void ahci_handle_port_interrupt(struct ata_port 
*ap,
+       if (unlikely(resetting))
+               status &= ~PORT_IRQ_BAD_PMP;
+ 
+-      /* if LPM is enabled, PHYRDY doesn't mean anything */
+-      if (ap->link.lpm_policy > ATA_LPM_MAX_POWER) {
++      if (sata_lpm_ignore_phy_events(&ap->link)) {
+               status &= ~PORT_IRQ_PHYRDY;
+               ahci_scr_write(&ap->link, SCR_ERROR, SERR_PHYRDY_CHG);
+       }
+diff --git a/drivers/ata/libata-core.c b/drivers/ata/libata-core.c
+index 538574f98e22..b1c0fcdf46fc 100644
+--- a/drivers/ata/libata-core.c
++++ b/drivers/ata/libata-core.c
+@@ -6825,6 +6825,38 @@ u32 ata_wait_register(struct ata_port *ap, void __iomem 
*reg, u32 mask, u32 val,
+       return tmp;
+ }
+ 
++/**
++ *    sata_lpm_ignore_phy_events - test if PHY event should be ignored
++ *    @link: Link receiving the event
++ *
++ *    Test whether the received PHY event has to be ignored or not.
++ *
++ *    LOCKING:
++ *    None:
++ *
++ *    RETURNS:
++ *    True if the event has to be ignored.
++ */
++bool sata_lpm_ignore_phy_events(struct ata_link *link)
++{
++      unsigned long lpm_timeout = link->last_lpm_change +
++                                  msecs_to_jiffies(ATA_TMOUT_SPURIOUS_PHY);
++
++      /* if LPM is enabled, PHYRDY doesn't mean anything */
++      if (link->lpm_policy > ATA_LPM_MAX_POWER)
++              return true;
++
++      /* ignore the first PHY event after the LPM policy changed
++       * as it is might be spurious
++       */
++      if ((link->flags & ATA_LFLAG_CHANGED) &&
++          time_before(jiffies, lpm_timeout))
++              return true;
++
++      return false;
++}
++EXPORT_SYMBOL_GPL(sata_lpm_ignore_phy_events);
++
+ /*
+  * Dummy port_ops
+  */
+diff --git a/drivers/ata/libata-eh.c b/drivers/ata/libata-eh.c
+index 6d8757008318..c6c77b767a8d 100644
+--- a/drivers/ata/libata-eh.c
++++ b/drivers/ata/libata-eh.c
+@@ -3488,6 +3488,9 @@ static int ata_eh_set_lpm(struct ata_link *link, enum 
ata_lpm_policy policy,
+               }
+       }
+ 
++      link->last_lpm_change = jiffies;
++      link->flags |= ATA_LFLAG_CHANGED;
++
+       return 0;
+ 
+ fail:
+diff --git a/drivers/gpio/gpio-kempld.c b/drivers/gpio/gpio-kempld.c
+index c6d88173f5a2..fe6d4a135cab 100644
+--- a/drivers/gpio/gpio-kempld.c
++++ b/drivers/gpio/gpio-kempld.c
+@@ -117,7 +117,7 @@ static int kempld_gpio_get_direction(struct gpio_chip 
*chip, unsigned offset)
+               = container_of(chip, struct kempld_gpio_data, chip);
+       struct kempld_device_data *pld = gpio->pld;
+ 
+-      return kempld_gpio_get_bit(pld, KEMPLD_GPIO_DIR_NUM(offset), offset);
++      return !kempld_gpio_get_bit(pld, KEMPLD_GPIO_DIR_NUM(offset), offset);
+ }
+ 
+ static int kempld_gpio_pincount(struct kempld_device_data *pld)
+diff --git a/drivers/gpu/drm/radeon/cik.c b/drivers/gpu/drm/radeon/cik.c
+index c3664bc05acf..c4558bdb0584 100644
+--- a/drivers/gpu/drm/radeon/cik.c
++++ b/drivers/gpu/drm/radeon/cik.c
+@@ -5360,7 +5360,7 @@ static int cik_pcie_gart_enable(struct radeon_device 
*rdev)
+        */
+       /* set vm size, must be a multiple of 4 */
+       WREG32(VM_CONTEXT1_PAGE_TABLE_START_ADDR, 0);
+-      WREG32(VM_CONTEXT1_PAGE_TABLE_END_ADDR, rdev->vm_manager.max_pfn);
++      WREG32(VM_CONTEXT1_PAGE_TABLE_END_ADDR, rdev->vm_manager.max_pfn - 1);
+       for (i = 1; i < 16; i++) {
+               if (i < 8)
+                       WREG32(VM_CONTEXT0_PAGE_TABLE_BASE_ADDR + (i << 2),
+diff --git a/drivers/gpu/drm/radeon/ni.c b/drivers/gpu/drm/radeon/ni.c
+index f8c01b8d1594..392d94b94905 100644
+--- a/drivers/gpu/drm/radeon/ni.c
++++ b/drivers/gpu/drm/radeon/ni.c
+@@ -1256,7 +1256,8 @@ static int cayman_pcie_gart_enable(struct radeon_device 
*rdev)
+        */
+       for (i = 1; i < 8; i++) {
+               WREG32(VM_CONTEXT0_PAGE_TABLE_START_ADDR + (i << 2), 0);
+-              WREG32(VM_CONTEXT0_PAGE_TABLE_END_ADDR + (i << 2), 
rdev->vm_manager.max_pfn);
++              WREG32(VM_CONTEXT0_PAGE_TABLE_END_ADDR + (i << 2),
++                      rdev->vm_manager.max_pfn - 1);
+               WREG32(VM_CONTEXT0_PAGE_TABLE_BASE_ADDR + (i << 2),
+                       rdev->gart.table_addr >> 12);
+       }
+diff --git a/drivers/gpu/drm/radeon/si.c b/drivers/gpu/drm/radeon/si.c
+index 2f2deccb3b78..49da9fc6b742 100644
+--- a/drivers/gpu/drm/radeon/si.c
++++ b/drivers/gpu/drm/radeon/si.c
+@@ -4084,7 +4084,7 @@ static int si_pcie_gart_enable(struct radeon_device 
*rdev)
+       /* empty context1-15 */
+       /* set vm size, must be a multiple of 4 */
+       WREG32(VM_CONTEXT1_PAGE_TABLE_START_ADDR, 0);
+-      WREG32(VM_CONTEXT1_PAGE_TABLE_END_ADDR, rdev->vm_manager.max_pfn);
++      WREG32(VM_CONTEXT1_PAGE_TABLE_END_ADDR, rdev->vm_manager.max_pfn - 1);
+       /* Assign the pt base to something valid for now; the pts used for
+        * the VMs are determined by the application and setup and assigned
+        * on the fly in the vm part of radeon_gart.c
+diff --git a/drivers/hwmon/nct6775.c b/drivers/hwmon/nct6775.c
+index 38d5a6334053..20b69bff5b34 100644
+--- a/drivers/hwmon/nct6775.c
++++ b/drivers/hwmon/nct6775.c
+@@ -986,6 +986,7 @@ nct6775_create_attr_group(struct device *dev, struct 
sensor_template_group *tg,
+                                (*t)->dev_attr.attr.name, tg->base + i);
+                       if ((*t)->s2) {
+                               a2 = &su->u.a2;
++                              sysfs_attr_init(&a2->dev_attr.attr);
+                               a2->dev_attr.attr.name = su->name;
+                               a2->nr = (*t)->u.s.nr + i;
+                               a2->index = (*t)->u.s.index;
+@@ -996,6 +997,7 @@ nct6775_create_attr_group(struct device *dev, struct 
sensor_template_group *tg,
+                               *attrs = &a2->dev_attr.attr;
+                       } else {
+                               a = &su->u.a1;
++                              sysfs_attr_init(&a->dev_attr.attr);
+                               a->dev_attr.attr.name = su->name;
+                               a->index = (*t)->u.index + i;
+                               a->dev_attr.attr.mode =
+diff --git a/drivers/hwmon/ntc_thermistor.c b/drivers/hwmon/ntc_thermistor.c
+index e76feb86a1d4..3660cb6fc68a 100644
+--- a/drivers/hwmon/ntc_thermistor.c
++++ b/drivers/hwmon/ntc_thermistor.c
+@@ -181,8 +181,10 @@ static struct ntc_thermistor_platform_data *
+ ntc_thermistor_parse_dt(struct platform_device *pdev)
+ {
+       struct iio_channel *chan;
++      enum iio_chan_type type;
+       struct device_node *np = pdev->dev.of_node;
+       struct ntc_thermistor_platform_data *pdata;
++      int ret;
+ 
+       if (!np)
+               return NULL;
+@@ -195,6 +197,13 @@ ntc_thermistor_parse_dt(struct platform_device *pdev)
+       if (IS_ERR(chan))
+               return ERR_CAST(chan);
+ 
++      ret = iio_get_channel_type(chan, &type);
++      if (ret < 0)
++              return ERR_PTR(ret);
++
++      if (type != IIO_VOLTAGE)
++              return ERR_PTR(-EINVAL);
++
+       if (of_property_read_u32(np, "pullup-uv", &pdata->pullup_uv))
+               return ERR_PTR(-ENODEV);
+       if (of_property_read_u32(np, "pullup-ohm", &pdata->pullup_ohm))
+diff --git a/drivers/input/mouse/elantech.c b/drivers/input/mouse/elantech.c
+index cfc5a2e6dcce..e824651a5a11 100644
+--- a/drivers/input/mouse/elantech.c
++++ b/drivers/input/mouse/elantech.c
+@@ -314,7 +314,7 @@ static void elantech_report_semi_mt_data(struct input_dev 
*dev,
+                                        unsigned int x2, unsigned int y2)
+ {
+       elantech_set_slot(dev, 0, num_fingers != 0, x1, y1);
+-      elantech_set_slot(dev, 1, num_fingers == 2, x2, y2);
++      elantech_set_slot(dev, 1, num_fingers >= 2, x2, y2);
+ }
+ 
+ /*
+diff --git a/drivers/lguest/core.c b/drivers/lguest/core.c
+index 0bf1e4edf04d..19da22249bd8 100644
+--- a/drivers/lguest/core.c
++++ b/drivers/lguest/core.c
+@@ -176,7 +176,7 @@ static void unmap_switcher(void)
+ bool lguest_address_ok(const struct lguest *lg,
+                      unsigned long addr, unsigned long len)
+ {
+-      return (addr+len) / PAGE_SIZE < lg->pfn_limit && (addr+len >= addr);
++      return addr+len <= lg->pfn_limit * PAGE_SIZE && (addr+len >= addr);
+ }
+ 
+ /*
+diff --git a/drivers/md/raid0.c b/drivers/md/raid0.c
+index 683e685ed697..9afd00b45f83 100644
+--- a/drivers/md/raid0.c
++++ b/drivers/md/raid0.c
+@@ -531,6 +531,9 @@ static void raid0_make_request(struct mddev *mddev, struct 
bio *bio)
+                        ? (sector & (chunk_sects-1))
+                        : sector_div(sector, chunk_sects));
+ 
++              /* Restore due to sector_div */
++              sector = bio->bi_iter.bi_sector;
++
+               if (sectors < bio_sectors(bio)) {
+                       split = bio_split(bio, sectors, GFP_NOIO, fs_bio_set);
+                       bio_chain(split, bio);
+@@ -538,7 +541,6 @@ static void raid0_make_request(struct mddev *mddev, struct 
bio *bio)
+                       split = bio;
+               }
+ 
+-              sector = bio->bi_iter.bi_sector;
+               zone = find_zone(mddev->private, &sector);
+               tmp_dev = map_sector(mddev, zone, sector, &sector);
+               split->bi_bdev = tmp_dev->bdev;
+diff --git a/drivers/md/raid5.c b/drivers/md/raid5.c
+index 3545fafe2027..b98c70e1f1a9 100644
+--- a/drivers/md/raid5.c
++++ b/drivers/md/raid5.c
+@@ -1914,7 +1914,8 @@ static int resize_stripes(struct r5conf *conf, int 
newsize)
+ 
+       conf->slab_cache = sc;
+       conf->active_name = 1-conf->active_name;
+-      conf->pool_size = newsize;
++      if (!err)
++              conf->pool_size = newsize;
+       return err;
+ }
+ 
+diff --git a/drivers/mmc/host/atmel-mci.c b/drivers/mmc/host/atmel-mci.c
+index 42706ea0ba85..201ce37426ab 100644
+--- a/drivers/mmc/host/atmel-mci.c
++++ b/drivers/mmc/host/atmel-mci.c
+@@ -1300,7 +1300,7 @@ static void atmci_set_ios(struct mmc_host *mmc, struct 
mmc_ios *ios)
+ 
+       if (ios->clock) {
+               unsigned int clock_min = ~0U;
+-              u32 clkdiv;
++              int clkdiv;
+ 
+               clk_prepare(host->mck);
+               unprepare_clk = true;
+@@ -1329,7 +1329,12 @@ static void atmci_set_ios(struct mmc_host *mmc, struct 
mmc_ios *ios)
+               /* Calculate clock divider */
+               if (host->caps.has_odd_clk_div) {
+                       clkdiv = DIV_ROUND_UP(host->bus_hz, clock_min) - 2;
+-                      if (clkdiv > 511) {
++                      if (clkdiv < 0) {
++                              dev_warn(&mmc->class_dev,
++                                       "clock %u too fast; using %lu\n",
++                                       clock_min, host->bus_hz / 2);
++                              clkdiv = 0;
++                      } else if (clkdiv > 511) {
+                               dev_warn(&mmc->class_dev,
+                                        "clock %u too slow; using %lu\n",
+                                        clock_min, host->bus_hz / (511 + 2));
+diff --git a/drivers/net/wireless/rt2x00/rt2800usb.c 
b/drivers/net/wireless/rt2x00/rt2800usb.c
+index 57d3967de32f..e8abd0f3a06c 100644
+--- a/drivers/net/wireless/rt2x00/rt2800usb.c
++++ b/drivers/net/wireless/rt2x00/rt2800usb.c
+@@ -991,6 +991,7 @@ static struct usb_device_id rt2800usb_device_table[] = {
+       { USB_DEVICE(0x07d1, 0x3c17) },
+       { USB_DEVICE(0x2001, 0x3317) },
+       { USB_DEVICE(0x2001, 0x3c1b) },
++      { USB_DEVICE(0x2001, 0x3c25) },
+       /* Draytek */
+       { USB_DEVICE(0x07fa, 0x7712) },
+       /* DVICO */
+diff --git a/drivers/net/wireless/rtlwifi/usb.c 
b/drivers/net/wireless/rtlwifi/usb.c
+index 4933f02ce1d5..bc409ec43563 100644
+--- a/drivers/net/wireless/rtlwifi/usb.c
++++ b/drivers/net/wireless/rtlwifi/usb.c
+@@ -126,7 +126,7 @@ static int _usbctrl_vendorreq_sync_read(struct usb_device 
*udev, u8 request,
+ 
+       do {
+               status = usb_control_msg(udev, pipe, request, reqtype, value,
+-                                       index, pdata, len, 0); /*max. timeout*/
++                                       index, pdata, len, 1000);
+               if (status < 0) {
+                       /* firmware download is checksumed, don't retry */
+                       if ((value >= FW_8192C_START_ADDRESS &&
+diff --git a/drivers/scsi/qla2xxx/qla_gbl.h b/drivers/scsi/qla2xxx/qla_gbl.h
+index 1f426628a0a5..b5f22a9088e5 100644
+--- a/drivers/scsi/qla2xxx/qla_gbl.h
++++ b/drivers/scsi/qla2xxx/qla_gbl.h
+@@ -728,8 +728,6 @@ extern void qla8044_set_idc_dontreset(struct scsi_qla_host 
*ha);
+ extern int qla8044_rd_direct(struct scsi_qla_host *vha, const uint32_t 
crb_reg);
+ extern void qla8044_wr_direct(struct scsi_qla_host *vha,
+                             const uint32_t crb_reg, const uint32_t value);
+-extern inline void qla8044_set_qsnt_ready(struct scsi_qla_host *vha);
+-extern inline void qla8044_need_reset_handler(struct scsi_qla_host *vha);
+ extern int qla8044_device_state_handler(struct scsi_qla_host *vha);
+ extern void qla8044_clear_qsnt_ready(struct scsi_qla_host *vha);
+ extern void qla8044_clear_drv_active(struct qla_hw_data *);
+diff --git a/drivers/scsi/qla2xxx/qla_nx2.c b/drivers/scsi/qla2xxx/qla_nx2.c
+index f60989d729a8..24f69acdcd58 100644
+--- a/drivers/scsi/qla2xxx/qla_nx2.c
++++ b/drivers/scsi/qla2xxx/qla_nx2.c
+@@ -146,7 +146,7 @@ qla8044_rmw_crb_reg(struct scsi_qla_host *vha,
+       return;
+ }
+ 
+-inline void
++static inline void
+ qla8044_set_qsnt_ready(struct scsi_qla_host *vha)
+ {
+       uint32_t qsnt_state;
+diff --git a/drivers/scsi/sd.c b/drivers/scsi/sd.c
+index e8abb731c7ec..a10706409927 100644
+--- a/drivers/scsi/sd.c
++++ b/drivers/scsi/sd.c
+@@ -1599,6 +1599,7 @@ static unsigned int sd_completed_bytes(struct scsi_cmnd 
*scmd)
+ {
+       u64 start_lba = blk_rq_pos(scmd->request);
+       u64 end_lba = blk_rq_pos(scmd->request) + (scsi_bufflen(scmd) / 512);
++      u64 factor = scmd->device->sector_size / 512;
+       u64 bad_lba;
+       int info_valid;
+       /*
+@@ -1620,16 +1621,9 @@ static unsigned int sd_completed_bytes(struct scsi_cmnd 
*scmd)
+       if (scsi_bufflen(scmd) <= scmd->device->sector_size)
+               return 0;
+ 
+-      if (scmd->device->sector_size < 512) {
+-              /* only legitimate sector_size here is 256 */
+-              start_lba <<= 1;
+-              end_lba <<= 1;
+-      } else {
+-              /* be careful ... don't want any overflows */
+-              unsigned int factor = scmd->device->sector_size / 512;
+-              do_div(start_lba, factor);
+-              do_div(end_lba, factor);
+-      }
++      /* be careful ... don't want any overflows */
++      do_div(start_lba, factor);
++      do_div(end_lba, factor);
+ 
+       /* The bad lba was reported incorrectly, we have no idea where
+        * the error is.
+@@ -2196,8 +2190,7 @@ got_data:
+       if (sector_size != 512 &&
+           sector_size != 1024 &&
+           sector_size != 2048 &&
+-          sector_size != 4096 &&
+-          sector_size != 256) {
++          sector_size != 4096) {
+               sd_printk(KERN_NOTICE, sdkp, "Unsupported sector size %d.\n",
+                         sector_size);
+               /*
+@@ -2248,8 +2241,6 @@ got_data:
+               sdkp->capacity <<= 2;
+       else if (sector_size == 1024)
+               sdkp->capacity <<= 1;
+-      else if (sector_size == 256)
+-              sdkp->capacity >>= 1;
+ 
+       blk_queue_physical_block_size(sdp->request_queue,
+                                     sdkp->physical_block_size);
+diff --git a/drivers/scsi/storvsc_drv.c b/drivers/scsi/storvsc_drv.c
+index 97892f258043..3bb6646bb406 100644
+--- a/drivers/scsi/storvsc_drv.c
++++ b/drivers/scsi/storvsc_drv.c
+@@ -1625,8 +1625,7 @@ static int storvsc_queuecommand(struct Scsi_Host *host, 
struct scsi_cmnd *scmnd)
+               break;
+       default:
+               vm_srb->data_in = UNKNOWN_TYPE;
+-              vm_srb->win8_extension.srb_flags |= (SRB_FLAGS_DATA_IN |
+-                                                   SRB_FLAGS_DATA_OUT);
++              vm_srb->win8_extension.srb_flags |= SRB_FLAGS_NO_DATA_TRANSFER;
+               break;
+       }
+ 
+diff --git a/drivers/staging/gdm724x/gdm_mux.c 
b/drivers/staging/gdm724x/gdm_mux.c
+index 2fa3a5a6580f..f2e6599eef33 100644
+--- a/drivers/staging/gdm724x/gdm_mux.c
++++ b/drivers/staging/gdm724x/gdm_mux.c
+@@ -158,7 +158,7 @@ static int up_to_host(struct mux_rx *r)
+       unsigned int start_flag;
+       unsigned int payload_size;
+       unsigned short packet_type;
+-      int dummy_cnt;
++      int total_len;
+       u32 packet_size_sum = r->offset;
+       int index;
+       int ret = TO_HOST_INVALID_PACKET;
+@@ -175,10 +175,10 @@ static int up_to_host(struct mux_rx *r)
+                       break;
+               }
+ 
+-              dummy_cnt = ALIGN(MUX_HEADER_SIZE + payload_size, 4);
++              total_len = ALIGN(MUX_HEADER_SIZE + payload_size, 4);
+ 
+               if (len - packet_size_sum <
+-                      MUX_HEADER_SIZE + payload_size + dummy_cnt) {
++                      total_len) {
+                       pr_err("invalid payload : %d %d %04x\n",
+                              payload_size, len, packet_type);
+                       break;
+@@ -201,7 +201,7 @@ static int up_to_host(struct mux_rx *r)
+                       break;
+               }
+ 
+-              packet_size_sum += MUX_HEADER_SIZE + payload_size + dummy_cnt;
++              packet_size_sum += total_len;
+               if (len - packet_size_sum <= MUX_HEADER_SIZE + 2) {
+                       ret = r->callback(NULL,
+                                       0,
+@@ -359,7 +359,6 @@ static int gdm_mux_send(void *priv_dev, void *data, int 
len, int tty_index,
+       struct mux_pkt_header *mux_header;
+       struct mux_tx *t = NULL;
+       static u32 seq_num = 1;
+-      int dummy_cnt;
+       int total_len;
+       int ret;
+       unsigned long flags;
+@@ -372,9 +371,7 @@ static int gdm_mux_send(void *priv_dev, void *data, int 
len, int tty_index,
+ 
+       spin_lock_irqsave(&mux_dev->write_lock, flags);
+ 
+-      dummy_cnt = ALIGN(MUX_HEADER_SIZE + len, 4);
+-
+-      total_len = len + MUX_HEADER_SIZE + dummy_cnt;
++      total_len = ALIGN(MUX_HEADER_SIZE + len, 4);
+ 
+       t = alloc_mux_tx(total_len);
+       if (!t) {
+@@ -390,7 +387,8 @@ static int gdm_mux_send(void *priv_dev, void *data, int 
len, int tty_index,
+       mux_header->packet_type = __cpu_to_le16(packet_type[tty_index]);
+ 
+       memcpy(t->buf+MUX_HEADER_SIZE, data, len);
+-      memset(t->buf+MUX_HEADER_SIZE+len, 0, dummy_cnt);
++      memset(t->buf+MUX_HEADER_SIZE+len, 0, total_len - MUX_HEADER_SIZE -
++             len);
+ 
+       t->len = total_len;
+       t->callback = cb;
+diff --git a/drivers/staging/rtl8187se/ieee80211/ieee80211.h 
b/drivers/staging/rtl8187se/ieee80211/ieee80211.h
+index 09ffd9bc8991..6ebdd3f35dd6 100644
+--- a/drivers/staging/rtl8187se/ieee80211/ieee80211.h
++++ b/drivers/staging/rtl8187se/ieee80211/ieee80211.h
+@@ -1460,12 +1460,12 @@ extern void ieee80211_sta_ps_send_null_frame(struct 
ieee80211_device *ieee,
+ 
+ extern const long ieee80211_wlan_frequencies[];
+ 
+-extern inline void ieee80211_increment_scans(struct ieee80211_device *ieee)
++static inline void ieee80211_increment_scans(struct ieee80211_device *ieee)
+ {
+       ieee->scans++;
+ }
+ 
+-extern inline int ieee80211_get_scans(struct ieee80211_device *ieee)
++static inline int ieee80211_get_scans(struct ieee80211_device *ieee)
+ {
+       return ieee->scans;
+ }
+diff --git a/drivers/staging/rtl8192e/rtllib.h 
b/drivers/staging/rtl8192e/rtllib.h
+index 83f5f57373a6..59dc0782df44 100644
+--- a/drivers/staging/rtl8192e/rtllib.h
++++ b/drivers/staging/rtl8192e/rtllib.h
+@@ -2761,7 +2761,6 @@ extern void rtllib_stop_scan(struct rtllib_device *ieee);
+ extern bool rtllib_act_scanning(struct rtllib_device *ieee, bool sync_scan);
+ extern void rtllib_stop_scan_syncro(struct rtllib_device *ieee);
+ extern void rtllib_start_scan_syncro(struct rtllib_device *ieee, u8 is_mesh);
+-extern inline struct sk_buff *rtllib_probe_req(struct rtllib_device *ieee);
+ extern u8 MgntQuery_MgntFrameTxRate(struct rtllib_device *ieee);
+ extern void rtllib_sta_ps_send_null_frame(struct rtllib_device *ieee,
+                                         short pwr);
+@@ -2943,12 +2942,12 @@ void rtllib_softmac_scan_syncro(struct rtllib_device 
*ieee, u8 is_mesh);
+ 
+ extern const long rtllib_wlan_frequencies[];
+ 
+-extern inline void rtllib_increment_scans(struct rtllib_device *ieee)
++static inline void rtllib_increment_scans(struct rtllib_device *ieee)
+ {
+       ieee->scans++;
+ }
+ 
+-extern inline int rtllib_get_scans(struct rtllib_device *ieee)
++static inline int rtllib_get_scans(struct rtllib_device *ieee)
+ {
+       return ieee->scans;
+ }
+diff --git a/drivers/staging/rtl8192e/rtllib_softmac.c 
b/drivers/staging/rtl8192e/rtllib_softmac.c
+index 4bf72bc1ba7b..7b5093aa8683 100644
+--- a/drivers/staging/rtl8192e/rtllib_softmac.c
++++ b/drivers/staging/rtl8192e/rtllib_softmac.c
+@@ -341,7 +341,7 @@ inline void softmac_ps_mgmt_xmit(struct sk_buff *skb,
+       }
+ }
+ 
+-inline struct sk_buff *rtllib_probe_req(struct rtllib_device *ieee)
++static inline struct sk_buff *rtllib_probe_req(struct rtllib_device *ieee)
+ {
+       unsigned int len, rate_len;
+       u8 *tag;
+diff --git a/drivers/staging/rtl8192u/ieee80211/ieee80211.h 
b/drivers/staging/rtl8192u/ieee80211/ieee80211.h
+index bc64f05a7e6a..b1a0380ee596 100644
+--- a/drivers/staging/rtl8192u/ieee80211/ieee80211.h
++++ b/drivers/staging/rtl8192u/ieee80211/ieee80211.h
+@@ -2250,7 +2250,7 @@ static inline void *ieee80211_priv(struct net_device 
*dev)
+       return ((struct ieee80211_device *)netdev_priv(dev))->priv;
+ }
+ 
+-extern inline int ieee80211_is_empty_essid(const char *essid, int essid_len)
++static inline int ieee80211_is_empty_essid(const char *essid, int essid_len)
+ {
+       /* Single white space is for Linksys APs */
+       if (essid_len == 1 && essid[0] == ' ')
+@@ -2266,7 +2266,7 @@ extern inline int ieee80211_is_empty_essid(const char 
*essid, int essid_len)
+       return 1;
+ }
+ 
+-extern inline int ieee80211_is_valid_mode(struct ieee80211_device *ieee, int 
mode)
++static inline int ieee80211_is_valid_mode(struct ieee80211_device *ieee, int 
mode)
+ {
+       /*
+        * It is possible for both access points and our device to support
+@@ -2292,7 +2292,7 @@ extern inline int ieee80211_is_valid_mode(struct 
ieee80211_device *ieee, int mod
+       return 0;
+ }
+ 
+-extern inline int ieee80211_get_hdrlen(u16 fc)
++static inline int ieee80211_get_hdrlen(u16 fc)
+ {
+       int hdrlen = IEEE80211_3ADDR_LEN;
+ 
+@@ -2578,12 +2578,12 @@ void ieee80211_softmac_scan_syncro(struct 
ieee80211_device *ieee);
+ 
+ extern const long ieee80211_wlan_frequencies[];
+ 
+-extern inline void ieee80211_increment_scans(struct ieee80211_device *ieee)
++static inline void ieee80211_increment_scans(struct ieee80211_device *ieee)
+ {
+       ieee->scans++;
+ }
+ 
+-extern inline int ieee80211_get_scans(struct ieee80211_device *ieee)
++static inline int ieee80211_get_scans(struct ieee80211_device *ieee)
+ {
+       return ieee->scans;
+ }
+diff --git a/drivers/staging/rtl8712/ieee80211.h 
b/drivers/staging/rtl8712/ieee80211.h
+index da4000e49da6..8269be80437a 100644
+--- a/drivers/staging/rtl8712/ieee80211.h
++++ b/drivers/staging/rtl8712/ieee80211.h
+@@ -734,7 +734,7 @@ enum ieee80211_state {
+ #define IEEE_G            (1<<2)
+ #define IEEE_MODE_MASK    (IEEE_A|IEEE_B|IEEE_G)
+ 
+-extern inline int ieee80211_is_empty_essid(const char *essid, int essid_len)
++static inline int ieee80211_is_empty_essid(const char *essid, int essid_len)
+ {
+       /* Single white space is for Linksys APs */
+       if (essid_len == 1 && essid[0] == ' ')
+@@ -748,7 +748,7 @@ extern inline int ieee80211_is_empty_essid(const char 
*essid, int essid_len)
+       return 1;
+ }
+ 
+-extern inline int ieee80211_get_hdrlen(u16 fc)
++static inline int ieee80211_get_hdrlen(u16 fc)
+ {
+       int hdrlen = 24;
+ 
+diff --git a/drivers/staging/wlags49_h2/wl_internal.h 
b/drivers/staging/wlags49_h2/wl_internal.h
+index 78129e93920f..1ecb5cb44bd5 100644
+--- a/drivers/staging/wlags49_h2/wl_internal.h
++++ b/drivers/staging/wlags49_h2/wl_internal.h
+@@ -1013,7 +1013,7 @@ static inline void wl_unlock(struct wl_private *lp,
+ /* Interrupt enable disable functions                               */
+ /********************************************************************/
+ 
+-extern inline void wl_act_int_on(struct wl_private *lp)
++static inline void wl_act_int_on(struct wl_private *lp)
+ {
+       /*
+        * Only do something when the driver is handling
+@@ -1025,7 +1025,7 @@ extern inline void wl_act_int_on(struct wl_private *lp)
+       }
+ }
+ 
+-extern inline void wl_act_int_off(struct wl_private *lp)
++static inline void wl_act_int_off(struct wl_private *lp)
+ {
+       /*
+        * Only do something when the driver is handling
+diff --git a/drivers/target/target_core_pscsi.c 
b/drivers/target/target_core_pscsi.c
+index 29f28808fc03..9b90cfacf75c 100644
+--- a/drivers/target/target_core_pscsi.c
++++ b/drivers/target/target_core_pscsi.c
+@@ -520,6 +520,7 @@ static int pscsi_configure_device(struct se_device *dev)
+                                       " pdv_host_id: %d\n", pdv->pdv_host_id);
+                               return -EINVAL;
+                       }
++                      pdv->pdv_lld_host = sh;
+               }
+       } else {
+               if (phv->phv_mode == PHV_VIRTUAL_HOST_ID) {
+@@ -602,6 +603,8 @@ static void pscsi_free_device(struct se_device *dev)
+               if ((phv->phv_mode == PHV_LLD_SCSI_HOST_NO) &&
+                   (phv->phv_lld_host != NULL))
+                       scsi_host_put(phv->phv_lld_host);
++              else if (pdv->pdv_lld_host)
++                      scsi_host_put(pdv->pdv_lld_host);
+ 
+               if ((sd->type == TYPE_DISK) || (sd->type == TYPE_ROM))
+                       scsi_device_put(sd);
+diff --git a/drivers/target/target_core_pscsi.h 
b/drivers/target/target_core_pscsi.h
+index 1bd757dff8ee..820d3052b775 100644
+--- a/drivers/target/target_core_pscsi.h
++++ b/drivers/target/target_core_pscsi.h
+@@ -45,6 +45,7 @@ struct pscsi_dev_virt {
+       int     pdv_lun_id;
+       struct block_device *pdv_bd;
+       struct scsi_device *pdv_sd;
++      struct Scsi_Host *pdv_lld_host;
+ } ____cacheline_aligned;
+ 
+ typedef enum phv_modes {
+diff --git a/drivers/thermal/step_wise.c b/drivers/thermal/step_wise.c
+index f251521baaa2..ee52ab7d3730 100644
+--- a/drivers/thermal/step_wise.c
++++ b/drivers/thermal/step_wise.c
+@@ -146,9 +146,6 @@ static void thermal_zone_trip_update(struct 
thermal_zone_device *tz, int trip)
+               dev_dbg(&instance->cdev->device, "old_target=%d, target=%d\n",
+                                       old_target, (int)instance->target);
+ 
+-              if (old_target == instance->target)
+-                      continue;
+-
+               /* Activate a passive thermal instance */
+               if (old_target == THERMAL_NO_TARGET &&
+                       instance->target != THERMAL_NO_TARGET)
+diff --git a/drivers/tty/hvc/hvc_xen.c b/drivers/tty/hvc/hvc_xen.c
+index 8eb65f26fcae..59a7da7c6c5e 100644
+--- a/drivers/tty/hvc/hvc_xen.c
++++ b/drivers/tty/hvc/hvc_xen.c
+@@ -289,7 +289,7 @@ static int xen_initial_domain_console_init(void)
+                       return -ENOMEM;
+       }
+ 
+-      info->irq = bind_virq_to_irq(VIRQ_CONSOLE, 0);
++      info->irq = bind_virq_to_irq(VIRQ_CONSOLE, 0, false);
+       info->vtermno = HVC_COOKIE;
+ 
+       spin_lock(&xencons_lock);
+diff --git a/drivers/tty/n_gsm.c b/drivers/tty/n_gsm.c
+index 2ebe47b78a3e..5bfd8076b21f 100644
+--- a/drivers/tty/n_gsm.c
++++ b/drivers/tty/n_gsm.c
+@@ -3166,7 +3166,7 @@ static int gsmtty_break_ctl(struct tty_struct *tty, int 
state)
+       return gsmtty_modem_update(dlci, encode);
+ }
+ 
+-static void gsmtty_remove(struct tty_driver *driver, struct tty_struct *tty)
++static void gsmtty_cleanup(struct tty_struct *tty)
+ {
+       struct gsm_dlci *dlci = tty->driver_data;
+       struct gsm_mux *gsm = dlci->gsm;
+@@ -3174,7 +3174,6 @@ static void gsmtty_remove(struct tty_driver *driver, 
struct tty_struct *tty)
+       dlci_put(dlci);
+       dlci_put(gsm->dlci[0]);
+       mux_put(gsm);
+-      driver->ttys[tty->index] = NULL;
+ }
+ 
+ /* Virtual ttys for the demux */
+@@ -3195,7 +3194,7 @@ static const struct tty_operations gsmtty_ops = {
+       .tiocmget               = gsmtty_tiocmget,
+       .tiocmset               = gsmtty_tiocmset,
+       .break_ctl              = gsmtty_break_ctl,
+-      .remove                 = gsmtty_remove,
++      .cleanup                = gsmtty_cleanup,
+ };
+ 
+ 
+diff --git a/drivers/usb/gadget/configfs.c b/drivers/usb/gadget/configfs.c
+index 7d1cc01796b6..3740a3fd545b 100644
+--- a/drivers/usb/gadget/configfs.c
++++ b/drivers/usb/gadget/configfs.c
+@@ -765,6 +765,7 @@ static void purge_configs_funcs(struct gadget_info *gi)
+                       }
+               }
+               c->next_interface_id = 0;
++              memset(c->interface, 0, sizeof(c->interface));
+               c->superspeed = 0;
+               c->highspeed = 0;
+               c->fullspeed = 0;
+diff --git a/drivers/usb/host/xhci-ring.c b/drivers/usb/host/xhci-ring.c
+index 05185b9d4495..f615712e8251 100644
+--- a/drivers/usb/host/xhci-ring.c
++++ b/drivers/usb/host/xhci-ring.c
+@@ -2213,8 +2213,13 @@ static int process_isoc_td(struct xhci_hcd *xhci, 
struct xhci_td *td,
+               break;
+       case COMP_DEV_ERR:
+       case COMP_STALL:
++              frame->status = -EPROTO;
++              skip_td = true;
++              break;
+       case COMP_TX_ERR:
+               frame->status = -EPROTO;
++              if (event_trb != td->last_trb)
++                      return 0;
+               skip_td = true;
+               break;
+       case COMP_STOP:
+@@ -2822,7 +2827,7 @@ irqreturn_t xhci_irq(struct usb_hcd *hcd)
+               xhci_halt(xhci);
+ hw_died:
+               spin_unlock(&xhci->lock);
+-              return -ESHUTDOWN;
++              return IRQ_HANDLED;
+       }
+ 
+       /*
+diff --git a/drivers/usb/host/xhci.h b/drivers/usb/host/xhci.h
+index 7225dd242bfa..70facb725105 100644
+--- a/drivers/usb/host/xhci.h
++++ b/drivers/usb/host/xhci.h
+@@ -1268,7 +1268,7 @@ union xhci_trb {
+  * since the command ring is 64-byte aligned.
+  * It must also be greater than 16.
+  */
+-#define TRBS_PER_SEGMENT      64
++#define TRBS_PER_SEGMENT      256
+ /* Allow two commands + a link TRB, along with any reserved command TRBs */
+ #define MAX_RSVD_CMD_TRBS     (TRBS_PER_SEGMENT - 3)
+ #define TRB_SEGMENT_SIZE      (TRBS_PER_SEGMENT*16)
+diff --git a/drivers/usb/serial/cp210x.c b/drivers/usb/serial/cp210x.c
+index 8d114b9733ed..02de4cf48a5b 100644
+--- a/drivers/usb/serial/cp210x.c
++++ b/drivers/usb/serial/cp210x.c
+@@ -127,6 +127,7 @@ static const struct usb_device_id id_table[] = {
+       { USB_DEVICE(0x10C4, 0x88A5) }, /* Planet Innovation Ingeni ZigBee USB 
Device */
+       { USB_DEVICE(0x10C4, 0x8946) }, /* Ketra N1 Wireless Interface */
+       { USB_DEVICE(0x10C4, 0x8977) }, /* CEL MeshWorks DevKit Device */
++      { USB_DEVICE(0x10C4, 0x8998) }, /* KCF Technologies PRN */
+       { USB_DEVICE(0x10C4, 0xEA60) }, /* Silicon Labs factory default */
+       { USB_DEVICE(0x10C4, 0xEA61) }, /* Silicon Labs factory default */
+       { USB_DEVICE(0x10C4, 0xEA70) }, /* Silicon Labs factory default */
+diff --git a/drivers/usb/serial/pl2303.c b/drivers/usb/serial/pl2303.c
+index e9bad928039f..521959370b66 100644
+--- a/drivers/usb/serial/pl2303.c
++++ b/drivers/usb/serial/pl2303.c
+@@ -61,7 +61,6 @@ static const struct usb_device_id id_table[] = {
+       { USB_DEVICE(DCU10_VENDOR_ID, DCU10_PRODUCT_ID) },
+       { USB_DEVICE(SITECOM_VENDOR_ID, SITECOM_PRODUCT_ID) },
+       { USB_DEVICE(ALCATEL_VENDOR_ID, ALCATEL_PRODUCT_ID) },
+-      { USB_DEVICE(SAMSUNG_VENDOR_ID, SAMSUNG_PRODUCT_ID) },
+       { USB_DEVICE(SIEMENS_VENDOR_ID, SIEMENS_PRODUCT_ID_SX1),
+               .driver_info = PL2303_QUIRK_UART_STATE_IDX0 },
+       { USB_DEVICE(SIEMENS_VENDOR_ID, SIEMENS_PRODUCT_ID_X65),
+diff --git a/drivers/usb/serial/pl2303.h b/drivers/usb/serial/pl2303.h
+index 71fd9da1d6e7..e3b7af8adfb7 100644
+--- a/drivers/usb/serial/pl2303.h
++++ b/drivers/usb/serial/pl2303.h
+@@ -62,10 +62,6 @@
+ #define ALCATEL_VENDOR_ID     0x11f7
+ #define ALCATEL_PRODUCT_ID    0x02df
+ 
+-/* Samsung I330 phone cradle */
+-#define SAMSUNG_VENDOR_ID     0x04e8
+-#define SAMSUNG_PRODUCT_ID    0x8001
+-
+ #define SIEMENS_VENDOR_ID     0x11f5
+ #define SIEMENS_PRODUCT_ID_SX1        0x0001
+ #define SIEMENS_PRODUCT_ID_X65        0x0003
+diff --git a/drivers/usb/serial/visor.c b/drivers/usb/serial/visor.c
+index bf2bd40e5f2a..60afb39eb73c 100644
+--- a/drivers/usb/serial/visor.c
++++ b/drivers/usb/serial/visor.c
+@@ -95,7 +95,7 @@ static const struct usb_device_id id_table[] = {
+               .driver_info = (kernel_ulong_t)&palm_os_4_probe },
+       { USB_DEVICE(ACER_VENDOR_ID, ACER_S10_ID),
+               .driver_info = (kernel_ulong_t)&palm_os_4_probe },
+-      { USB_DEVICE(SAMSUNG_VENDOR_ID, SAMSUNG_SCH_I330_ID),
++      { USB_DEVICE_INTERFACE_CLASS(SAMSUNG_VENDOR_ID, SAMSUNG_SCH_I330_ID, 
0xff),
+               .driver_info = (kernel_ulong_t)&palm_os_4_probe },
+       { USB_DEVICE(SAMSUNG_VENDOR_ID, SAMSUNG_SPH_I500_ID),
+               .driver_info = (kernel_ulong_t)&palm_os_4_probe },
+diff --git a/drivers/usb/storage/unusual_devs.h 
b/drivers/usb/storage/unusual_devs.h
+index 7f625306ea80..821e1e2f70f6 100644
+--- a/drivers/usb/storage/unusual_devs.h
++++ b/drivers/usb/storage/unusual_devs.h
+@@ -760,6 +760,13 @@ UNUSUAL_DEV(  0x059f, 0x0643, 0x0000, 0x0000,
+               USB_SC_DEVICE, USB_PR_DEVICE, NULL,
+               US_FL_GO_SLOW ),
+ 
++/* Reported by Christian Schaller <cscha...@redhat.com> */
++UNUSUAL_DEV(  0x059f, 0x0651, 0x0000, 0x0000,
++              "LaCie",
++              "External HDD",
++              USB_SC_DEVICE, USB_PR_DEVICE, NULL,
++              US_FL_NO_WP_DETECT ),
++
+ /* Submitted by Joel Bourquard <numl...@freesurf.ch>
+  * Some versions of this device need the SubClass and Protocol overrides
+  * while others don't.
+diff --git a/drivers/xen/events/events_base.c 
b/drivers/xen/events/events_base.c
+index a5cc476256f1..5af64e966ed6 100644
+--- a/drivers/xen/events/events_base.c
++++ b/drivers/xen/events/events_base.c
+@@ -973,7 +973,7 @@ unsigned xen_evtchn_nr_channels(void)
+ }
+ EXPORT_SYMBOL_GPL(xen_evtchn_nr_channels);
+ 
+-int bind_virq_to_irq(unsigned int virq, unsigned int cpu)
++int bind_virq_to_irq(unsigned int virq, unsigned int cpu, bool percpu)
+ {
+       struct evtchn_bind_virq bind_virq;
+       int evtchn, irq, ret;
+@@ -987,8 +987,12 @@ int bind_virq_to_irq(unsigned int virq, unsigned int cpu)
+               if (irq < 0)
+                       goto out;
+ 
+-              irq_set_chip_and_handler_name(irq, &xen_percpu_chip,
+-                                            handle_percpu_irq, "virq");
++              if (percpu)
++                      irq_set_chip_and_handler_name(irq, &xen_percpu_chip,
++                                                    handle_percpu_irq, 
"virq");
++              else
++                      irq_set_chip_and_handler_name(irq, &xen_dynamic_chip,
++                                                    handle_edge_irq, "virq");
+ 
+               bind_virq.virq = virq;
+               bind_virq.vcpu = cpu;
+@@ -1078,7 +1082,7 @@ int bind_virq_to_irqhandler(unsigned int virq, unsigned 
int cpu,
+ {
+       int irq, retval;
+ 
+-      irq = bind_virq_to_irq(virq, cpu);
++      irq = bind_virq_to_irq(virq, cpu, irqflags & IRQF_PERCPU);
+       if (irq < 0)
+               return irq;
+       retval = request_irq(irq, handler, irqflags, devname, dev_id);
+diff --git a/fs/binfmt_elf.c b/fs/binfmt_elf.c
+index 78f46089a077..35240a704413 100644
+--- a/fs/binfmt_elf.c
++++ b/fs/binfmt_elf.c
+@@ -819,7 +819,7 @@ static int load_elf_binary(struct linux_binprm *bprm)
+                       total_size = total_mapping_size(elf_phdata,
+                                                       loc->elf_ex.e_phnum);
+                       if (!total_size) {
+-                              error = -EINVAL;
++                              retval = -EINVAL;
+                               goto out_free_dentry;
+                       }
+               }
+diff --git a/fs/dcache.c b/fs/dcache.c
+index a9231c872342..1d7e8a3fb6cd 100644
+--- a/fs/dcache.c
++++ b/fs/dcache.c
+@@ -1135,13 +1135,13 @@ ascend:
+               /* might go back up the wrong parent if we have had a rename. */
+               if (need_seqretry(&rename_lock, seq))
+                       goto rename_retry;
+-              next = child->d_child.next;
+-              while (unlikely(child->d_flags & DCACHE_DENTRY_KILLED)) {
++              /* go into the first sibling still alive */
++              do {
++                      next = child->d_child.next;
+                       if (next == &this_parent->d_subdirs)
+                               goto ascend;
+                       child = list_entry(next, struct dentry, d_child);
+-                      next = next->next;
+-              }
++              } while (unlikely(child->d_flags & DCACHE_DENTRY_KILLED));
+               rcu_read_unlock();
+               goto resume;
+       }
+diff --git a/fs/ext4/ext4_jbd2.c b/fs/ext4/ext4_jbd2.c
+index 3fe29de832c8..ff42208417b9 100644
+--- a/fs/ext4/ext4_jbd2.c
++++ b/fs/ext4/ext4_jbd2.c
+@@ -87,6 +87,12 @@ int __ext4_journal_stop(const char *where, unsigned int 
line, handle_t *handle)
+               ext4_put_nojournal(handle);
+               return 0;
+       }
++
++      if (!handle->h_transaction) {
++              err = jbd2_journal_stop(handle);
++              return handle->h_err ? handle->h_err : err;
++      }
++
+       sb = handle->h_transaction->t_journal->j_private;
+       err = handle->h_err;
+       rc = jbd2_journal_stop(handle);
+diff --git a/fs/ext4/extents.c b/fs/ext4/extents.c
+index 96a1ce159f51..4e237a6b4b33 100644
+--- a/fs/ext4/extents.c
++++ b/fs/ext4/extents.c
+@@ -361,7 +361,7 @@ static int ext4_valid_extent(struct inode *inode, struct 
ext4_extent *ext)
+       ext4_lblk_t lblock = le32_to_cpu(ext->ee_block);
+       ext4_lblk_t last = lblock + len - 1;
+ 
+-      if (lblock > last)
++      if (len == 0 || lblock > last)
+               return 0;
+       return ext4_data_block_valid(EXT4_SB(inode->i_sb), block, len);
+ }
+diff --git a/fs/fhandle.c b/fs/fhandle.c
+index 999ff5c3cab0..d59712dfa3e7 100644
+--- a/fs/fhandle.c
++++ b/fs/fhandle.c
+@@ -195,8 +195,9 @@ static int handle_to_path(int mountdirfd, struct 
file_handle __user *ufh,
+               goto out_err;
+       }
+       /* copy the full handle */
+-      if (copy_from_user(handle, ufh,
+-                         sizeof(struct file_handle) +
++      *handle = f_handle;
++      if (copy_from_user(&handle->f_handle,
++                         &ufh->f_handle,
+                          f_handle.handle_bytes)) {
+               retval = -EFAULT;
+               goto out_handle;
+diff --git a/fs/jbd2/recovery.c b/fs/jbd2/recovery.c
+index bcbef08a4d8f..a5f72a36c6c8 100644
+--- a/fs/jbd2/recovery.c
++++ b/fs/jbd2/recovery.c
+@@ -839,15 +839,23 @@ static int scan_revoke_records(journal_t *journal, 
struct buffer_head *bh,
+ {
+       jbd2_journal_revoke_header_t *header;
+       int offset, max;
++      int csum_size = 0;
++      __u32 rcount;
+       int record_len = 4;
+ 
+       header = (jbd2_journal_revoke_header_t *) bh->b_data;
+       offset = sizeof(jbd2_journal_revoke_header_t);
+-      max = be32_to_cpu(header->r_count);
++      rcount = be32_to_cpu(header->r_count);
+ 
+       if (!jbd2_revoke_block_csum_verify(journal, header))
+               return -EINVAL;
+ 
++      if (jbd2_journal_has_csum_v2or3(journal))
++              csum_size = sizeof(struct jbd2_journal_revoke_tail);
++      if (rcount > journal->j_blocksize - csum_size)
++              return -EINVAL;
++      max = rcount;
++
+       if (JBD2_HAS_INCOMPAT_FEATURE(journal, JBD2_FEATURE_INCOMPAT_64BIT))
+               record_len = 8;
+ 
+diff --git a/fs/jbd2/revoke.c b/fs/jbd2/revoke.c
+index d5e95a175c92..8ecf9b92f163 100644
+--- a/fs/jbd2/revoke.c
++++ b/fs/jbd2/revoke.c
+@@ -583,7 +583,7 @@ static void write_one_revoke_record(journal_t *journal,
+ {
+       int csum_size = 0;
+       struct buffer_head *descriptor;
+-      int offset;
++      int sz, offset;
+       journal_header_t *header;
+ 
+       /* If we are already aborting, this all becomes a noop.  We
+@@ -600,9 +600,14 @@ static void write_one_revoke_record(journal_t *journal,
+       if (jbd2_journal_has_csum_v2or3(journal))
+               csum_size = sizeof(struct jbd2_journal_revoke_tail);
+ 
++      if (JBD2_HAS_INCOMPAT_FEATURE(journal, JBD2_FEATURE_INCOMPAT_64BIT))
++              sz = 8;
++      else
++              sz = 4;
++
+       /* Make sure we have a descriptor with space left for the record */
+       if (descriptor) {
+-              if (offset >= journal->j_blocksize - csum_size) {
++              if (offset + sz > journal->j_blocksize - csum_size) {
+                       flush_descriptor(journal, descriptor, offset, write_op);
+                       descriptor = NULL;
+               }
+@@ -625,16 +630,13 @@ static void write_one_revoke_record(journal_t *journal,
+               *descriptorp = descriptor;
+       }
+ 
+-      if (JBD2_HAS_INCOMPAT_FEATURE(journal, JBD2_FEATURE_INCOMPAT_64BIT)) {
++      if (JBD2_HAS_INCOMPAT_FEATURE(journal, JBD2_FEATURE_INCOMPAT_64BIT))
+               * ((__be64 *)(&descriptor->b_data[offset])) =
+                       cpu_to_be64(record->blocknr);
+-              offset += 8;
+-
+-      } else {
++      else
+               * ((__be32 *)(&descriptor->b_data[offset])) =
+                       cpu_to_be32(record->blocknr);
+-              offset += 4;
+-      }
++      offset += sz;
+ 
+       *offsetp = offset;
+ }
+diff --git a/fs/jbd2/transaction.c b/fs/jbd2/transaction.c
+index f8a5d6a166fb..ecc57071a1a9 100644
+--- a/fs/jbd2/transaction.c
++++ b/fs/jbd2/transaction.c
+@@ -551,7 +551,6 @@ int jbd2_journal_extend(handle_t *handle, int nblocks)
+       int result;
+       int wanted;
+ 
+-      WARN_ON(!transaction);
+       if (is_handle_aborted(handle))
+               return -EROFS;
+       journal = transaction->t_journal;
+@@ -627,7 +626,6 @@ int jbd2__journal_restart(handle_t *handle, int nblocks, 
gfp_t gfp_mask)
+       tid_t           tid;
+       int             need_to_start, ret;
+ 
+-      WARN_ON(!transaction);
+       /* If we've had an abort of any type, don't even think about
+        * actually doing the restart! */
+       if (is_handle_aborted(handle))
+@@ -791,7 +789,6 @@ do_get_write_access(handle_t *handle, struct journal_head 
*jh,
+       int need_copy = 0;
+       unsigned long start_lock, time_lock;
+ 
+-      WARN_ON(!transaction);
+       if (is_handle_aborted(handle))
+               return -EROFS;
+       journal = transaction->t_journal;
+@@ -1057,7 +1054,6 @@ int jbd2_journal_get_create_access(handle_t *handle, 
struct buffer_head *bh)
+       int err;
+ 
+       jbd_debug(5, "journal_head %p\n", jh);
+-      WARN_ON(!transaction);
+       err = -EROFS;
+       if (is_handle_aborted(handle))
+               goto out;
+@@ -1271,7 +1267,6 @@ int jbd2_journal_dirty_metadata(handle_t *handle, struct 
buffer_head *bh)
+       struct journal_head *jh;
+       int ret = 0;
+ 
+-      WARN_ON(!transaction);
+       if (is_handle_aborted(handle))
+               return -EROFS;
+       journal = transaction->t_journal;
+@@ -1407,7 +1402,6 @@ int jbd2_journal_forget (handle_t *handle, struct 
buffer_head *bh)
+       int err = 0;
+       int was_modified = 0;
+ 
+-      WARN_ON(!transaction);
+       if (is_handle_aborted(handle))
+               return -EROFS;
+       journal = transaction->t_journal;
+@@ -1538,8 +1532,22 @@ int jbd2_journal_stop(handle_t *handle)
+       tid_t tid;
+       pid_t pid;
+ 
+-      if (!transaction)
+-              goto free_and_exit;
++      if (!transaction) {
++              /*
++               * Handle is already detached from the transaction so
++               * there is nothing to do other than decrease a refcount,
++               * or free the handle if refcount drops to zero
++               */
++              if (--handle->h_ref > 0) {
++                      jbd_debug(4, "h_ref %d -> %d\n", handle->h_ref + 1,
++                                                       handle->h_ref);
++                      return err;
++              } else {
++                      if (handle->h_rsv_handle)
++                              jbd2_free_handle(handle->h_rsv_handle);
++                      goto free_and_exit;
++              }
++      }
+       journal = transaction->t_journal;
+ 
+       J_ASSERT(journal_current_handle() == handle);
+@@ -2381,7 +2389,6 @@ int jbd2_journal_file_inode(handle_t *handle, struct 
jbd2_inode *jinode)
+       transaction_t *transaction = handle->h_transaction;
+       journal_t *journal;
+ 
+-      WARN_ON(!transaction);
+       if (is_handle_aborted(handle))
+               return -EROFS;
+       journal = transaction->t_journal;
+diff --git a/fs/omfs/inode.c b/fs/omfs/inode.c
+index d8b0afde2179..2dba0caf1f4a 100644
+--- a/fs/omfs/inode.c
++++ b/fs/omfs/inode.c
+@@ -361,7 +361,7 @@ nomem:
+ }
+ 
+ enum {
+-      Opt_uid, Opt_gid, Opt_umask, Opt_dmask, Opt_fmask
++      Opt_uid, Opt_gid, Opt_umask, Opt_dmask, Opt_fmask, Opt_err
+ };
+ 
+ static const match_table_t tokens = {
+@@ -370,6 +370,7 @@ static const match_table_t tokens = {
+       {Opt_umask, "umask=%o"},
+       {Opt_dmask, "dmask=%o"},
+       {Opt_fmask, "fmask=%o"},
++      {Opt_err, NULL},
+ };
+ 
+ static int parse_options(char *options, struct omfs_sb_info *sbi)
+diff --git a/include/drm/drm_pciids.h b/include/drm/drm_pciids.h
+index ca52de5a5c97..bb5367d288fb 100644
+--- a/include/drm/drm_pciids.h
++++ b/include/drm/drm_pciids.h
+@@ -186,6 +186,7 @@
+       {0x1002, 0x6658, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 
CHIP_BONAIRE|RADEON_NEW_MEMMAP}, \
+       {0x1002, 0x665c, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 
CHIP_BONAIRE|RADEON_NEW_MEMMAP}, \
+       {0x1002, 0x665d, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 
CHIP_BONAIRE|RADEON_NEW_MEMMAP}, \
++      {0x1002, 0x665f, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 
CHIP_BONAIRE|RADEON_NEW_MEMMAP}, \
+       {0x1002, 0x6660, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 
CHIP_HAINAN|RADEON_IS_MOBILITY|RADEON_NEW_MEMMAP}, \
+       {0x1002, 0x6663, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 
CHIP_HAINAN|RADEON_IS_MOBILITY|RADEON_NEW_MEMMAP}, \
+       {0x1002, 0x6664, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 
CHIP_HAINAN|RADEON_IS_MOBILITY|RADEON_NEW_MEMMAP}, \
+diff --git a/include/linux/libata.h b/include/linux/libata.h
+index e13b3aef0b0c..b84e786ff990 100644
+--- a/include/linux/libata.h
++++ b/include/linux/libata.h
+@@ -204,6 +204,7 @@ enum {
+       ATA_LFLAG_SW_ACTIVITY   = (1 << 7), /* keep activity stats */
+       ATA_LFLAG_NO_LPM        = (1 << 8), /* disable LPM on this link */
+       ATA_LFLAG_RST_ONCE      = (1 << 9), /* limit recovery to one reset */
++      ATA_LFLAG_CHANGED       = (1 << 10), /* LPM state changed on this link 
*/
+ 
+       /* struct ata_port flags */
+       ATA_FLAG_SLAVE_POSS     = (1 << 0), /* host supports slave dev */
+@@ -307,6 +308,12 @@ enum {
+        */
+       ATA_TMOUT_PMP_SRST_WAIT = 5000,
+ 
++      /* When the LPM policy is set to ATA_LPM_MAX_POWER, there might
++       * be a spurious PHY event, so ignore the first PHY event that
++       * occurs within 10s after the policy change.
++       */
++      ATA_TMOUT_SPURIOUS_PHY  = 10000,
++
+       /* ATA bus states */
+       BUS_UNKNOWN             = 0,
+       BUS_DMA                 = 1,
+@@ -785,6 +792,8 @@ struct ata_link {
+       struct ata_eh_context   eh_context;
+ 
+       struct ata_device       device[ATA_MAX_DEVICES];
++
++      unsigned long           last_lpm_change; /* when last LPM change 
happened */
+ };
+ #define ATA_LINK_CLEAR_BEGIN          offsetof(struct ata_link, active_tag)
+ #define ATA_LINK_CLEAR_END            offsetof(struct ata_link, device[0])
+@@ -1201,6 +1210,7 @@ extern struct ata_device *ata_dev_pair(struct ata_device 
*adev);
+ extern int ata_do_set_mode(struct ata_link *link, struct ata_device 
**r_failed_dev);
+ extern void ata_scsi_port_error_handler(struct Scsi_Host *host, struct 
ata_port *ap);
+ extern void ata_scsi_cmd_error_handler(struct Scsi_Host *host, struct 
ata_port *ap, struct list_head *eh_q);
++extern bool sata_lpm_ignore_phy_events(struct ata_link *link);
+ 
+ extern int ata_cable_40wire(struct ata_port *ap);
+ extern int ata_cable_80wire(struct ata_port *ap);
+diff --git a/include/xen/events.h b/include/xen/events.h
+index c9c85cf84895..5d84cd0a51b7 100644
+--- a/include/xen/events.h
++++ b/include/xen/events.h
+@@ -14,7 +14,7 @@ int bind_evtchn_to_irqhandler(unsigned int evtchn,
+                             irq_handler_t handler,
+                             unsigned long irqflags, const char *devname,
+                             void *dev_id);
+-int bind_virq_to_irq(unsigned int virq, unsigned int cpu);
++int bind_virq_to_irq(unsigned int virq, unsigned int cpu, bool percpu);
+ int bind_virq_to_irqhandler(unsigned int virq, unsigned int cpu,
+                           irq_handler_t handler,
+                           unsigned long irqflags, const char *devname,
+diff --git a/lib/strnlen_user.c b/lib/strnlen_user.c
+index a28df5206d95..11649615c505 100644
+--- a/lib/strnlen_user.c
++++ b/lib/strnlen_user.c
+@@ -57,7 +57,8 @@ static inline long do_strnlen_user(const char __user *src, 
unsigned long count,
+                       return res + find_zero(data) + 1 - align;
+               }
+               res += sizeof(unsigned long);
+-              if (unlikely(max < sizeof(unsigned long)))
++              /* We already handled 'unsigned long' bytes. Did we do it all ? 
*/
++              if (unlikely(max <= sizeof(unsigned long)))
+                       break;
+               max -= sizeof(unsigned long);
+               if (unlikely(__get_user(c,(unsigned long __user *)(src+res))))
+diff --git a/mm/mempolicy.c b/mm/mempolicy.c
+index e8fff0fa1202..936866e72b1d 100644
+--- a/mm/mempolicy.c
++++ b/mm/mempolicy.c
+@@ -2663,7 +2663,7 @@ static void __init check_numabalancing_enable(void)
+       if (numabalancing_override)
+               set_numabalancing_state(numabalancing_override == 1);
+ 
+-      if (nr_node_ids > 1 && !numabalancing_override) {
++      if (num_online_nodes() > 1 && !numabalancing_override) {
+               pr_info("%s automatic NUMA balancing. "
+                       "Configure with numa_balancing= or the "
+                       "kernel.numa_balancing sysctl",
+diff --git a/net/ceph/osd_client.c b/net/ceph/osd_client.c
+index 45f077c60348..5b7ef5bb90ed 100644
+--- a/net/ceph/osd_client.c
++++ b/net/ceph/osd_client.c
+@@ -1932,20 +1932,29 @@ static void kick_requests(struct ceph_osd_client 
*osdc, bool force_resend,
+               err = __map_request(osdc, req,
+                                   force_resend || force_resend_writes);
+               dout("__map_request returned %d\n", err);
+-              if (err == 0)
+-                      continue;  /* no change and no osd was specified */
+               if (err < 0)
+                       continue;  /* hrm! */
+-              if (req->r_osd == NULL) {
+-                      dout("tid %llu maps to no valid osd\n", req->r_tid);
+-                      needmap++;  /* request a newer map */
+-                      continue;
+-              }
++              if (req->r_osd == NULL || err > 0) {
++                      if (req->r_osd == NULL) {
++                              dout("lingering %p tid %llu maps to no osd\n",
++                                   req, req->r_tid);
++                              /*
++                               * A homeless lingering request makes
++                               * no sense, as it's job is to keep
++                               * a particular OSD connection open.
++                               * Request a newer map and kick the
++                               * request, knowing that it won't be
++                               * resent until we actually get a map
++                               * that can tell us where to send it.
++                               */
++                              needmap++;
++                      }
+ 
+-              dout("kicking lingering %p tid %llu osd%d\n", req, req->r_tid,
+-                   req->r_osd ? req->r_osd->o_osd : -1);
+-              __register_request(osdc, req);
+-              __unregister_linger_request(osdc, req);
++                      dout("kicking lingering %p tid %llu osd%d\n", req,
++                           req->r_tid, req->r_osd ? req->r_osd->o_osd : -1);
++                      __register_request(osdc, req);
++                      __unregister_linger_request(osdc, req);
++              }
+       }
+       reset_changed_osds(osdc);
+       mutex_unlock(&osdc->request_mutex);
+diff --git a/net/mac80211/wep.c b/net/mac80211/wep.c
+index 6ee2b5863572..f21b142dee1f 100644
+--- a/net/mac80211/wep.c
++++ b/net/mac80211/wep.c
+@@ -98,8 +98,7 @@ static u8 *ieee80211_wep_add_iv(struct ieee80211_local 
*local,
+ 
+       hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PROTECTED);
+ 
+-      if (WARN_ON(skb_tailroom(skb) < IEEE80211_WEP_ICV_LEN ||
+-                  skb_headroom(skb) < IEEE80211_WEP_IV_LEN))
++      if (WARN_ON(skb_headroom(skb) < IEEE80211_WEP_IV_LEN))
+               return NULL;
+ 
+       hdrlen = ieee80211_hdrlen(hdr->frame_control);
+@@ -169,6 +168,9 @@ int ieee80211_wep_encrypt(struct ieee80211_local *local,
+       size_t len;
+       u8 rc4key[3 + WLAN_KEY_LEN_WEP104];
+ 
++      if (WARN_ON(skb_tailroom(skb) < IEEE80211_WEP_ICV_LEN))
++              return -1;
++
+       iv = ieee80211_wep_add_iv(local, skb, keylen, keyidx);
+       if (!iv)
+               return -1;
+diff --git a/net/socket.c b/net/socket.c
+index 1b2c2d62ff20..b72fc137e1a6 100644
+--- a/net/socket.c
++++ b/net/socket.c
+@@ -2007,14 +2007,12 @@ static int ___sys_sendmsg(struct socket *sock, struct 
msghdr __user *msg,
+       int err, ctl_len, total_len;
+ 
+       err = -EFAULT;
+-      if (MSG_CMSG_COMPAT & flags) {
+-              if (get_compat_msghdr(msg_sys, msg_compat))
+-                      return -EFAULT;
+-      } else {
++      if (MSG_CMSG_COMPAT & flags)
++              err = get_compat_msghdr(msg_sys, msg_compat);
++      else
+               err = copy_msghdr_from_user(msg_sys, msg);
+-              if (err)
+-                      return err;
+-      }
++      if (err)
++              return err;
+ 
+       if (msg_sys->msg_iovlen > UIO_FASTIOV) {
+               err = -EMSGSIZE;
+@@ -2219,14 +2217,12 @@ static int ___sys_recvmsg(struct socket *sock, struct 
msghdr __user *msg,
+       struct sockaddr __user *uaddr;
+       int __user *uaddr_len;
+ 
+-      if (MSG_CMSG_COMPAT & flags) {
+-              if (get_compat_msghdr(msg_sys, msg_compat))
+-                      return -EFAULT;
+-      } else {
++      if (MSG_CMSG_COMPAT & flags)
++              err = get_compat_msghdr(msg_sys, msg_compat);
++      else
+               err = copy_msghdr_from_user(msg_sys, msg);
+-              if (err)
+-                      return err;
+-      }
++      if (err)
++              return err;
+ 
+       if (msg_sys->msg_iovlen > UIO_FASTIOV) {
+               err = -EMSGSIZE;
+diff --git a/net/sunrpc/auth_gss/gss_rpc_xdr.c 
b/net/sunrpc/auth_gss/gss_rpc_xdr.c
+index 1ec19f6f0c2b..eeeba5adee6d 100644
+--- a/net/sunrpc/auth_gss/gss_rpc_xdr.c
++++ b/net/sunrpc/auth_gss/gss_rpc_xdr.c
+@@ -793,20 +793,26 @@ int gssx_dec_accept_sec_context(struct rpc_rqst *rqstp,
+ {
+       u32 value_follows;
+       int err;
++      struct page *scratch;
++
++      scratch = alloc_page(GFP_KERNEL);
++      if (!scratch)
++              return -ENOMEM;
++      xdr_set_scratch_buffer(xdr, page_address(scratch), PAGE_SIZE);
+ 
+       /* res->status */
+       err = gssx_dec_status(xdr, &res->status);
+       if (err)
+-              return err;
++              goto out_free;
+ 
+       /* res->context_handle */
+       err = gssx_dec_bool(xdr, &value_follows);
+       if (err)
+-              return err;
++              goto out_free;
+       if (value_follows) {
+               err = gssx_dec_ctx(xdr, res->context_handle);
+               if (err)
+-                      return err;
++                      goto out_free;
+       } else {
+               res->context_handle = NULL;
+       }
+@@ -814,11 +820,11 @@ int gssx_dec_accept_sec_context(struct rpc_rqst *rqstp,
+       /* res->output_token */
+       err = gssx_dec_bool(xdr, &value_follows);
+       if (err)
+-              return err;
++              goto out_free;
+       if (value_follows) {
+               err = gssx_dec_buffer(xdr, res->output_token);
+               if (err)
+-                      return err;
++                      goto out_free;
+       } else {
+               res->output_token = NULL;
+       }
+@@ -826,14 +832,17 @@ int gssx_dec_accept_sec_context(struct rpc_rqst *rqstp,
+       /* res->delegated_cred_handle */
+       err = gssx_dec_bool(xdr, &value_follows);
+       if (err)
+-              return err;
++              goto out_free;
+       if (value_follows) {
+               /* we do not support upcall servers sending this data. */
+-              return -EINVAL;
++              err = -EINVAL;
++              goto out_free;
+       }
+ 
+       /* res->options */
+       err = gssx_dec_option_array(xdr, &res->options);
+ 
++out_free:
++      __free_page(scratch);
+       return err;
+ }
+diff --git a/sound/pci/hda/patch_conexant.c b/sound/pci/hda/patch_conexant.c
+index 976493c4a695..50981b148121 100644
+--- a/sound/pci/hda/patch_conexant.c
++++ b/sound/pci/hda/patch_conexant.c
+@@ -3591,6 +3591,14 @@ static const struct hda_codec_preset 
snd_hda_preset_conexant[] = {
+         .patch = patch_conexant_auto },
+       { .id = 0x14f150b9, .name = "CX20665",
+         .patch = patch_conexant_auto },
++      { .id = 0x14f150f1, .name = "CX20721",
++        .patch = patch_conexant_auto },
++      { .id = 0x14f150f2, .name = "CX20722",
++        .patch = patch_conexant_auto },
++      { .id = 0x14f150f3, .name = "CX20723",
++        .patch = patch_conexant_auto },
++      { .id = 0x14f150f4, .name = "CX20724",
++        .patch = patch_conexant_auto },
+       { .id = 0x14f1510f, .name = "CX20751/2",
+         .patch = patch_conexant_auto },
+       { .id = 0x14f15110, .name = "CX20751/2",
+@@ -3625,6 +3633,10 @@ MODULE_ALIAS("snd-hda-codec-id:14f150ab");
+ MODULE_ALIAS("snd-hda-codec-id:14f150ac");
+ MODULE_ALIAS("snd-hda-codec-id:14f150b8");
+ MODULE_ALIAS("snd-hda-codec-id:14f150b9");
++MODULE_ALIAS("snd-hda-codec-id:14f150f1");
++MODULE_ALIAS("snd-hda-codec-id:14f150f2");
++MODULE_ALIAS("snd-hda-codec-id:14f150f3");
++MODULE_ALIAS("snd-hda-codec-id:14f150f4");
+ MODULE_ALIAS("snd-hda-codec-id:14f1510f");
+ MODULE_ALIAS("snd-hda-codec-id:14f15110");
+ MODULE_ALIAS("snd-hda-codec-id:14f15111");
+diff --git a/sound/pci/hda/patch_realtek.c b/sound/pci/hda/patch_realtek.c
+index ca26373ebe70..e2b567706297 100644
+--- a/sound/pci/hda/patch_realtek.c
++++ b/sound/pci/hda/patch_realtek.c
+@@ -4549,6 +4549,7 @@ static const struct snd_pci_quirk alc269_fixup_tbl[] = {
+       SND_PCI_QUIRK_VENDOR(0x104d, "Sony VAIO", ALC269_FIXUP_SONY_VAIO),
+       SND_PCI_QUIRK(0x10cf, 0x1475, "Lifebook", ALC269_FIXUP_LIFEBOOK),
+       SND_PCI_QUIRK(0x10cf, 0x15dc, "Lifebook T731", 
ALC269_FIXUP_LIFEBOOK_HP_PIN),
++      SND_PCI_QUIRK(0x10cf, 0x1757, "Lifebook E752", 
ALC269_FIXUP_LIFEBOOK_HP_PIN),
+       SND_PCI_QUIRK(0x10cf, 0x1845, "Lifebook U904", 
ALC269_FIXUP_LIFEBOOK_EXTMIC),
+       SND_PCI_QUIRK(0x17aa, 0x20f2, "Thinkpad SL410/510", 
ALC269_FIXUP_SKU_IGNORE),
+       SND_PCI_QUIRK(0x17aa, 0x215e, "Thinkpad L512", ALC269_FIXUP_SKU_IGNORE),
+diff --git a/sound/pci/hda/thinkpad_helper.c b/sound/pci/hda/thinkpad_helper.c
+index 1eafc1a28193..8fe3b8c18ed4 100644
+--- a/sound/pci/hda/thinkpad_helper.c
++++ b/sound/pci/hda/thinkpad_helper.c
+@@ -71,7 +71,6 @@ static void hda_fixup_thinkpad_acpi(struct hda_codec *codec,
+               if (led_set_func(TPACPI_LED_MUTE, false) >= 0) {
+                       old_vmaster_hook = spec->vmaster_mute.hook;
+                       spec->vmaster_mute.hook = update_tpacpi_mute_led;
+-                      spec->vmaster_mute_enum = 1;
+                       removefunc = false;
+               }
+               if (led_set_func(TPACPI_LED_MICMUTE, false) >= 0) {
+diff --git a/sound/soc/codecs/mc13783.c b/sound/soc/codecs/mc13783.c
+index 582c2bbd42cb..b85229345969 100644
+--- a/sound/soc/codecs/mc13783.c
++++ b/sound/soc/codecs/mc13783.c
+@@ -634,14 +634,14 @@ static int mc13783_probe(struct snd_soc_codec *codec)
+                               AUDIO_SSI_SEL, 0);
+       else
+               mc13xxx_reg_rmw(priv->mc13xxx, MC13783_AUDIO_CODEC,
+-                              0, AUDIO_SSI_SEL);
++                              AUDIO_SSI_SEL, AUDIO_SSI_SEL);
+ 
+       if (priv->dac_ssi_port == MC13783_SSI1_PORT)
+               mc13xxx_reg_rmw(priv->mc13xxx, MC13783_AUDIO_DAC,
+                               AUDIO_SSI_SEL, 0);
+       else
+               mc13xxx_reg_rmw(priv->mc13xxx, MC13783_AUDIO_DAC,
+-                              0, AUDIO_SSI_SEL);
++                              AUDIO_SSI_SEL, AUDIO_SSI_SEL);
+ 
+       return 0;
+ }
+diff --git a/sound/soc/codecs/wm8960.c b/sound/soc/codecs/wm8960.c
+index 2a0bfb848512..edfd4edaa864 100644
+--- a/sound/soc/codecs/wm8960.c
++++ b/sound/soc/codecs/wm8960.c
+@@ -392,7 +392,7 @@ static const struct snd_soc_dapm_route audio_paths[] = {
+       { "Right Input Mixer", "Boost Switch", "Right Boost Mixer", },
+       { "Right Input Mixer", NULL, "RINPUT1", },  /* Really Boost Switch */
+       { "Right Input Mixer", NULL, "RINPUT2" },
+-      { "Right Input Mixer", NULL, "LINPUT3" },
++      { "Right Input Mixer", NULL, "RINPUT3" },
+ 
+       { "Left ADC", NULL, "Left Input Mixer" },
+       { "Right ADC", NULL, "Right Input Mixer" },
+diff --git a/sound/soc/codecs/wm8994.c b/sound/soc/codecs/wm8994.c
+index d98e52f647d2..66aec0c3b7bb 100644
+--- a/sound/soc/codecs/wm8994.c
++++ b/sound/soc/codecs/wm8994.c
+@@ -2745,7 +2745,7 @@ static struct {
+ };
+ 
+ static int fs_ratios[] = {
+-      64, 128, 192, 256, 348, 512, 768, 1024, 1408, 1536
++      64, 128, 192, 256, 384, 512, 768, 1024, 1408, 1536
+ };
+ 
+ static int bclk_divs[] = {
+diff --git a/tools/vm/Makefile b/tools/vm/Makefile
+index 3d907dacf2ac..c604f3ec628a 100644
+--- a/tools/vm/Makefile
++++ b/tools/vm/Makefile
+@@ -3,7 +3,7 @@
+ TARGETS=page-types slabinfo
+ 
+ LIB_DIR = ../lib/api
+-LIBS = $(LIB_DIR)/libapikfs.a
++LIBS = $(LIB_DIR)/libapi.a
+ 
+ CC = $(CROSS_COMPILE)gcc
+ CFLAGS = -Wall -Wextra -I../lib/

Reply via email to