commit:     bd40d08ff68c535adeddd9303c508ca63ac433f4
Author:     Mike Pagano <mpagano <AT> gentoo <DOT> org>
AuthorDate: Thu May 12 00:10:44 2016 +0000
Commit:     Mike Pagano <mpagano <AT> gentoo <DOT> org>
CommitDate: Thu May 12 00:10:44 2016 +0000
URL:        https://gitweb.gentoo.org/proj/linux-patches.git/commit/?id=bd40d08f

Linux patches 3.18.32 and 3.18.33

 0000_README              |    8 +
 1031_linux-3.18.32.patch | 2327 ++++++++++++++++++++++++++++++++++++++++++++++
 1032_linux-3.18.33.patch |  390 ++++++++
 3 files changed, 2725 insertions(+)

diff --git a/0000_README b/0000_README
index 8c2614b..e4866a4 100644
--- a/0000_README
+++ b/0000_README
@@ -167,6 +167,14 @@ Patch:  1030_linux-3.18.31.patch
 From:   http://www.kernel.org
 Desc:   Linux 3.18.31
 
+Patch:  1031_linux-3.18.32.patch
+From:   http://www.kernel.org
+Desc:   Linux 3.18.32
+
+Patch:  1032_linux-3.18.33.patch
+From:   http://www.kernel.org
+Desc:   Linux 3.18.33
+
 Patch:  1500_XATTR_USER_PREFIX.patch
 From:   https://bugs.gentoo.org/show_bug.cgi?id=470644
 Desc:   Support for namespace user.pax.* on tmpfs.

diff --git a/1031_linux-3.18.32.patch b/1031_linux-3.18.32.patch
new file mode 100644
index 0000000..f1a51f9
--- /dev/null
+++ b/1031_linux-3.18.32.patch
@@ -0,0 +1,2327 @@
+diff --git a/Documentation/kernel-parameters.txt 
b/Documentation/kernel-parameters.txt
+index 61f9273d0c46..b2bdea1953e6 100644
+--- a/Documentation/kernel-parameters.txt
++++ b/Documentation/kernel-parameters.txt
+@@ -3651,6 +3651,8 @@ bytes respectively. Such letter suffixes can also be 
entirely omitted.
+                                       sector if the number is odd);
+                               i = IGNORE_DEVICE (don't bind to this
+                                       device);
++                              j = NO_REPORT_LUNS (don't use report luns
++                                      command, uas only);
+                               l = NOT_LOCKABLE (don't try to lock and
+                                       unlock ejectable media);
+                               m = MAX_SECTORS_64 (don't transfer more
+diff --git a/Makefile b/Makefile
+index a05c9336722d..7a79cf89bf17 100644
+--- a/Makefile
++++ b/Makefile
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 18
+-SUBLEVEL = 31
++SUBLEVEL = 32
+ EXTRAVERSION =
+ NAME = Diseased Newt
+ 
+diff --git a/arch/arm/mach-omap2/omap_hwmod.c 
b/arch/arm/mach-omap2/omap_hwmod.c
+index bb9a148af8cc..e67ffbc9ec40 100644
+--- a/arch/arm/mach-omap2/omap_hwmod.c
++++ b/arch/arm/mach-omap2/omap_hwmod.c
+@@ -1439,9 +1439,7 @@ static void _enable_sysc(struct omap_hwmod *oh)
+           (sf & SYSC_HAS_CLOCKACTIVITY))
+               _set_clockactivity(oh, oh->class->sysc->clockact, &v);
+ 
+-      /* If the cached value is the same as the new value, skip the write */
+-      if (oh->_sysc_cache != v)
+-              _write_sysconfig(v, oh);
++      _write_sysconfig(v, oh);
+ 
+       /*
+        * Set the autoidle bit only after setting the smartidle bit
+@@ -1504,7 +1502,9 @@ static void _idle_sysc(struct omap_hwmod *oh)
+               _set_master_standbymode(oh, idlemode, &v);
+       }
+ 
+-      _write_sysconfig(v, oh);
++      /* If the cached value is the same as the new value, skip the write */
++      if (oh->_sysc_cache != v)
++              _write_sysconfig(v, oh);
+ }
+ 
+ /**
+diff --git a/arch/parisc/include/asm/uaccess.h 
b/arch/parisc/include/asm/uaccess.h
+index a5cb070b54bf..df9d8dd72db2 100644
+--- a/arch/parisc/include/asm/uaccess.h
++++ b/arch/parisc/include/asm/uaccess.h
+@@ -76,6 +76,7 @@ struct exception_table_entry {
+  */
+ struct exception_data {
+       unsigned long fault_ip;
++      unsigned long fault_gp;
+       unsigned long fault_space;
+       unsigned long fault_addr;
+ };
+diff --git a/arch/parisc/kernel/asm-offsets.c 
b/arch/parisc/kernel/asm-offsets.c
+index dcd55103a4bb..a0dc1e50e3a3 100644
+--- a/arch/parisc/kernel/asm-offsets.c
++++ b/arch/parisc/kernel/asm-offsets.c
+@@ -292,6 +292,7 @@ int main(void)
+       DEFINE(ASM_PT_INITIAL, PT_INITIAL);
+       BLANK();
+       DEFINE(EXCDATA_IP, offsetof(struct exception_data, fault_ip));
++      DEFINE(EXCDATA_GP, offsetof(struct exception_data, fault_gp));
+       DEFINE(EXCDATA_SPACE, offsetof(struct exception_data, fault_space));
+       DEFINE(EXCDATA_ADDR, offsetof(struct exception_data, fault_addr));
+       BLANK();
+diff --git a/arch/parisc/kernel/parisc_ksyms.c 
b/arch/parisc/kernel/parisc_ksyms.c
+index 568b2c61ea02..3cad8aadc69e 100644
+--- a/arch/parisc/kernel/parisc_ksyms.c
++++ b/arch/parisc/kernel/parisc_ksyms.c
+@@ -47,11 +47,11 @@ EXPORT_SYMBOL(__cmpxchg_u64);
+ EXPORT_SYMBOL(lclear_user);
+ EXPORT_SYMBOL(lstrnlen_user);
+ 
+-/* Global fixups */
+-extern void fixup_get_user_skip_1(void);
+-extern void fixup_get_user_skip_2(void);
+-extern void fixup_put_user_skip_1(void);
+-extern void fixup_put_user_skip_2(void);
++/* Global fixups - defined as int to avoid creation of function pointers */
++extern int fixup_get_user_skip_1;
++extern int fixup_get_user_skip_2;
++extern int fixup_put_user_skip_1;
++extern int fixup_put_user_skip_2;
+ EXPORT_SYMBOL(fixup_get_user_skip_1);
+ EXPORT_SYMBOL(fixup_get_user_skip_2);
+ EXPORT_SYMBOL(fixup_put_user_skip_1);
+diff --git a/arch/parisc/kernel/traps.c b/arch/parisc/kernel/traps.c
+index 47ee620d15d2..05aab1333dfa 100644
+--- a/arch/parisc/kernel/traps.c
++++ b/arch/parisc/kernel/traps.c
+@@ -802,6 +802,9 @@ void notrace handle_interruption(int code, struct pt_regs 
*regs)
+ 
+           if (fault_space == 0 && !in_atomic())
+           {
++              /* Clean up and return if in exception table. */
++              if (fixup_exception(regs))
++                      return;
+               pdc_chassis_send_status(PDC_CHASSIS_DIRECT_PANIC);
+               parisc_terminate("Kernel Fault", regs, code, fault_address);
+           }
+diff --git a/arch/parisc/lib/fixup.S b/arch/parisc/lib/fixup.S
+index f8c45cc2947d..1052b747e011 100644
+--- a/arch/parisc/lib/fixup.S
++++ b/arch/parisc/lib/fixup.S
+@@ -26,6 +26,7 @@
+ 
+ #ifdef CONFIG_SMP
+       .macro  get_fault_ip t1 t2
++      loadgp
+       addil LT%__per_cpu_offset,%r27
+       LDREG RT%__per_cpu_offset(%r1),\t1
+       /* t2 = smp_processor_id() */
+@@ -38,16 +39,21 @@
+       LDREGX \t2(\t1),\t2 
+       addil LT%exception_data,%r27
+       LDREG RT%exception_data(%r1),\t1
+-      /* t1 = &__get_cpu_var(exception_data) */
++      /* t1 = this_cpu_ptr(&exception_data) */
+       add,l \t1,\t2,\t1
++      /* %r27 = t1->fault_gp - restore gp */
++      LDREG EXCDATA_GP(\t1), %r27
+       /* t1 = t1->fault_ip */
+       LDREG EXCDATA_IP(\t1), \t1
+       .endm
+ #else
+       .macro  get_fault_ip t1 t2
+-      /* t1 = &__get_cpu_var(exception_data) */
++      loadgp
++      /* t1 = this_cpu_ptr(&exception_data) */
+       addil LT%exception_data,%r27
+       LDREG RT%exception_data(%r1),\t2
++      /* %r27 = t2->fault_gp - restore gp */
++      LDREG EXCDATA_GP(\t2), %r27
+       /* t1 = t2->fault_ip */
+       LDREG EXCDATA_IP(\t2), \t1
+       .endm
+diff --git a/arch/parisc/mm/fault.c b/arch/parisc/mm/fault.c
+index e5120e653240..50d64a7fc672 100644
+--- a/arch/parisc/mm/fault.c
++++ b/arch/parisc/mm/fault.c
+@@ -151,6 +151,7 @@ int fixup_exception(struct pt_regs *regs)
+               struct exception_data *d;
+               d = this_cpu_ptr(&exception_data);
+               d->fault_ip = regs->iaoq[0];
++              d->fault_gp = regs->gr[27];
+               d->fault_space = regs->isr;
+               d->fault_addr = regs->ior;
+ 
+diff --git a/arch/x86/kvm/x86.c b/arch/x86/kvm/x86.c
+index d77189c351a8..160981f69d4f 100644
+--- a/arch/x86/kvm/x86.c
++++ b/arch/x86/kvm/x86.c
+@@ -656,7 +656,6 @@ int __kvm_set_xcr(struct kvm_vcpu *vcpu, u32 index, u64 
xcr)
+       if ((!(xcr0 & XSTATE_BNDREGS)) != (!(xcr0 & XSTATE_BNDCSR)))
+               return 1;
+ 
+-      kvm_put_guest_xcr0(vcpu);
+       vcpu->arch.xcr0 = xcr0;
+ 
+       if ((xcr0 ^ old_xcr0) & XSTATE_EXTEND_MASK)
+@@ -6056,12 +6055,10 @@ static int inject_pending_event(struct kvm_vcpu *vcpu, 
bool req_int_win)
+       }
+ 
+       /* try to inject new event if pending */
+-      if (vcpu->arch.nmi_pending) {
+-              if (kvm_x86_ops->nmi_allowed(vcpu)) {
+-                      --vcpu->arch.nmi_pending;
+-                      vcpu->arch.nmi_injected = true;
+-                      kvm_x86_ops->set_nmi(vcpu);
+-              }
++      if (vcpu->arch.nmi_pending && kvm_x86_ops->nmi_allowed(vcpu)) {
++              --vcpu->arch.nmi_pending;
++              vcpu->arch.nmi_injected = true;
++              kvm_x86_ops->set_nmi(vcpu);
+       } else if (kvm_cpu_has_injectable_intr(vcpu)) {
+               /*
+                * Because interrupts can be injected asynchronously, we are
+@@ -6231,10 +6228,12 @@ static int vcpu_enter_guest(struct kvm_vcpu *vcpu)
+               if (inject_pending_event(vcpu, req_int_win) != 0)
+                       req_immediate_exit = true;
+               /* enable NMI/IRQ window open exits if needed */
+-              else if (vcpu->arch.nmi_pending)
+-                      kvm_x86_ops->enable_nmi_window(vcpu);
+-              else if (kvm_cpu_has_injectable_intr(vcpu) || req_int_win)
+-                      kvm_x86_ops->enable_irq_window(vcpu);
++              else {
++                      if (vcpu->arch.nmi_pending)
++                              kvm_x86_ops->enable_nmi_window(vcpu);
++                      if (kvm_cpu_has_injectable_intr(vcpu) || req_int_win)
++                              kvm_x86_ops->enable_irq_window(vcpu);
++              }
+ 
+               if (kvm_lapic_enabled(vcpu)) {
+                       /*
+@@ -6259,8 +6258,6 @@ static int vcpu_enter_guest(struct kvm_vcpu *vcpu)
+       kvm_x86_ops->prepare_guest_switch(vcpu);
+       if (vcpu->fpu_active)
+               kvm_load_guest_fpu(vcpu);
+-      kvm_load_guest_xcr0(vcpu);
+-
+       vcpu->mode = IN_GUEST_MODE;
+ 
+       srcu_read_unlock(&vcpu->kvm->srcu, vcpu->srcu_idx);
+@@ -6283,6 +6280,8 @@ static int vcpu_enter_guest(struct kvm_vcpu *vcpu)
+               goto cancel_injection;
+       }
+ 
++      kvm_load_guest_xcr0(vcpu);
++
+       if (req_immediate_exit)
+               smp_send_reschedule(vcpu->cpu);
+ 
+@@ -6331,6 +6330,8 @@ static int vcpu_enter_guest(struct kvm_vcpu *vcpu)
+       vcpu->mode = OUTSIDE_GUEST_MODE;
+       smp_wmb();
+ 
++      kvm_put_guest_xcr0(vcpu);
++
+       /* Interrupt is enabled by handle_external_intr() */
+       kvm_x86_ops->handle_external_intr(vcpu);
+ 
+@@ -6972,7 +6973,6 @@ void kvm_load_guest_fpu(struct kvm_vcpu *vcpu)
+        * and assume host would use all available bits.
+        * Guest xcr0 would be loaded later.
+        */
+-      kvm_put_guest_xcr0(vcpu);
+       vcpu->guest_fpu_loaded = 1;
+       __kernel_fpu_begin();
+       fpu_restore_checking(&vcpu->arch.guest_fpu);
+@@ -6981,8 +6981,6 @@ void kvm_load_guest_fpu(struct kvm_vcpu *vcpu)
+ 
+ void kvm_put_guest_fpu(struct kvm_vcpu *vcpu)
+ {
+-      kvm_put_guest_xcr0(vcpu);
+-
+       if (!vcpu->guest_fpu_loaded)
+               return;
+ 
+diff --git a/drivers/block/rbd.c b/drivers/block/rbd.c
+index c546a93c0f8a..2f7358726737 100644
+--- a/drivers/block/rbd.c
++++ b/drivers/block/rbd.c
+@@ -1929,7 +1929,7 @@ static struct ceph_osd_request *rbd_osd_req_create(
+ 
+       osdc = &rbd_dev->rbd_client->client->osdc;
+       osd_req = ceph_osdc_alloc_request(osdc, snapc, num_ops, false,
+-                                        GFP_ATOMIC);
++                                        GFP_NOIO);
+       if (!osd_req)
+               return NULL;    /* ENOMEM */
+ 
+@@ -1978,7 +1978,7 @@ rbd_osd_req_create_copyup(struct rbd_obj_request 
*obj_request)
+       rbd_dev = img_request->rbd_dev;
+       osdc = &rbd_dev->rbd_client->client->osdc;
+       osd_req = ceph_osdc_alloc_request(osdc, snapc, num_osd_ops,
+-                                              false, GFP_ATOMIC);
++                                              false, GFP_NOIO);
+       if (!osd_req)
+               return NULL;    /* ENOMEM */
+ 
+@@ -2470,7 +2470,7 @@ static int rbd_img_request_fill(struct rbd_img_request 
*img_request,
+                                       bio_chain_clone_range(&bio_list,
+                                                               &bio_offset,
+                                                               clone_size,
+-                                                              GFP_ATOMIC);
++                                                              GFP_NOIO);
+                       if (!obj_request->bio_list)
+                               goto out_unwind;
+               } else if (type == OBJ_REQUEST_PAGES) {
+diff --git a/drivers/dma/dw/core.c b/drivers/dma/dw/core.c
+index d95e1d0fcc18..f070a8d14168 100644
+--- a/drivers/dma/dw/core.c
++++ b/drivers/dma/dw/core.c
+@@ -122,26 +122,14 @@ static void dwc_desc_put(struct dw_dma_chan *dwc, struct 
dw_desc *desc)
+ static void dwc_initialize(struct dw_dma_chan *dwc)
+ {
+       struct dw_dma *dw = to_dw_dma(dwc->chan.device);
+-      struct dw_dma_slave *dws = dwc->chan.private;
+       u32 cfghi = DWC_CFGH_FIFO_MODE;
+       u32 cfglo = DWC_CFGL_CH_PRIOR(dwc->priority);
+ 
+       if (dwc->initialized == true)
+               return;
+ 
+-      if (dws) {
+-              /*
+-               * We need controller-specific data to set up slave
+-               * transfers.
+-               */
+-              BUG_ON(!dws->dma_dev || dws->dma_dev != dw->dma.dev);
+-
+-              cfghi |= DWC_CFGH_DST_PER(dws->dst_id);
+-              cfghi |= DWC_CFGH_SRC_PER(dws->src_id);
+-      } else {
+-              cfghi |= DWC_CFGH_DST_PER(dwc->dst_id);
+-              cfghi |= DWC_CFGH_SRC_PER(dwc->src_id);
+-      }
++      cfghi |= DWC_CFGH_DST_PER(dwc->dst_id);
++      cfghi |= DWC_CFGH_SRC_PER(dwc->src_id);
+ 
+       channel_writel(dwc, CFG_LO, cfglo);
+       channel_writel(dwc, CFG_HI, cfghi);
+@@ -932,7 +920,7 @@ bool dw_dma_filter(struct dma_chan *chan, void *param)
+       struct dw_dma_chan *dwc = to_dw_dma_chan(chan);
+       struct dw_dma_slave *dws = param;
+ 
+-      if (!dws || dws->dma_dev != chan->device->dev)
++      if (dws->dma_dev != chan->device->dev)
+               return false;
+ 
+       /* We have to copy data since dws can be temporary storage */
+@@ -1153,6 +1141,14 @@ static int dwc_alloc_chan_resources(struct dma_chan 
*chan)
+        * doesn't mean what you think it means), and status writeback.
+        */
+ 
++      /*
++       * We need controller-specific data to set up slave transfers.
++       */
++      if (chan->private && !dw_dma_filter(chan, chan->private)) {
++              dev_warn(chan2dev(chan), "Wrong controller-specific data\n");
++              return -EINVAL;
++      }
++
+       /* Enable controller here if needed */
+       if (!dw->in_use)
+               dw_dma_on(dw);
+@@ -1214,6 +1210,14 @@ static void dwc_free_chan_resources(struct dma_chan 
*chan)
+       spin_lock_irqsave(&dwc->lock, flags);
+       list_splice_init(&dwc->free_list, &list);
+       dwc->descs_allocated = 0;
++
++      /* Clear custom channel configuration */
++      dwc->src_id = 0;
++      dwc->dst_id = 0;
++
++      dwc->src_master = 0;
++      dwc->dst_master = 0;
++
+       dwc->initialized = false;
+ 
+       /* Disable interrupts */
+diff --git a/drivers/gpio/gpio-pca953x.c b/drivers/gpio/gpio-pca953x.c
+index e2da64abbccd..16f7c4f2d8c8 100644
+--- a/drivers/gpio/gpio-pca953x.c
++++ b/drivers/gpio/gpio-pca953x.c
+@@ -21,6 +21,7 @@
+ #ifdef CONFIG_OF_GPIO
+ #include <linux/of_platform.h>
+ #endif
++#include <asm/unaligned.h>
+ 
+ #define PCA953X_INPUT         0
+ #define PCA953X_OUTPUT                1
+@@ -154,7 +155,7 @@ static int pca953x_write_regs(struct pca953x_chip *chip, 
int reg, u8 *val)
+               switch (chip->chip_type) {
+               case PCA953X_TYPE:
+                       ret = i2c_smbus_write_word_data(chip->client,
+-                                                      reg << 1, (u16) *val);
++                          reg << 1, cpu_to_le16(get_unaligned((u16 *)val)));
+                       break;
+               case PCA957X_TYPE:
+                       ret = i2c_smbus_write_byte_data(chip->client, reg << 1,
+diff --git a/drivers/gpu/drm/qxl/qxl_display.c 
b/drivers/gpu/drm/qxl/qxl_display.c
+index 011b22836fd6..8e6e73cb187d 100644
+--- a/drivers/gpu/drm/qxl/qxl_display.c
++++ b/drivers/gpu/drm/qxl/qxl_display.c
+@@ -343,10 +343,15 @@ static int qxl_crtc_cursor_set2(struct drm_crtc *crtc,
+ 
+       qxl_bo_kunmap(user_bo);
+ 
++      qcrtc->cur_x += qcrtc->hot_spot_x - hot_x;
++      qcrtc->cur_y += qcrtc->hot_spot_y - hot_y;
++      qcrtc->hot_spot_x = hot_x;
++      qcrtc->hot_spot_y = hot_y;
++
+       cmd = (struct qxl_cursor_cmd *)qxl_release_map(qdev, release);
+       cmd->type = QXL_CURSOR_SET;
+-      cmd->u.set.position.x = qcrtc->cur_x;
+-      cmd->u.set.position.y = qcrtc->cur_y;
++      cmd->u.set.position.x = qcrtc->cur_x + qcrtc->hot_spot_x;
++      cmd->u.set.position.y = qcrtc->cur_y + qcrtc->hot_spot_y;
+ 
+       cmd->u.set.shape = qxl_bo_physical_address(qdev, cursor_bo, 0);
+ 
+@@ -409,8 +414,8 @@ static int qxl_crtc_cursor_move(struct drm_crtc *crtc,
+ 
+       cmd = (struct qxl_cursor_cmd *)qxl_release_map(qdev, release);
+       cmd->type = QXL_CURSOR_MOVE;
+-      cmd->u.position.x = qcrtc->cur_x;
+-      cmd->u.position.y = qcrtc->cur_y;
++      cmd->u.position.x = qcrtc->cur_x + qcrtc->hot_spot_x;
++      cmd->u.position.y = qcrtc->cur_y + qcrtc->hot_spot_y;
+       qxl_release_unmap(qdev, release, &cmd->release_info);
+ 
+       qxl_push_cursor_ring_release(qdev, release, QXL_CMD_CURSOR, false);
+diff --git a/drivers/gpu/drm/qxl/qxl_drv.h b/drivers/gpu/drm/qxl/qxl_drv.h
+index e66143cc1a7a..eef66769245f 100644
+--- a/drivers/gpu/drm/qxl/qxl_drv.h
++++ b/drivers/gpu/drm/qxl/qxl_drv.h
+@@ -135,6 +135,8 @@ struct qxl_crtc {
+       int index;
+       int cur_x;
+       int cur_y;
++      int hot_spot_x;
++      int hot_spot_y;
+ };
+ 
+ struct qxl_output {
+diff --git a/drivers/hid/usbhid/hid-core.c b/drivers/hid/usbhid/hid-core.c
+index e318980f8d45..d3fd973e8776 100644
+--- a/drivers/hid/usbhid/hid-core.c
++++ b/drivers/hid/usbhid/hid-core.c
+@@ -939,14 +939,6 @@ static int usbhid_output_report(struct hid_device *hid, 
__u8 *buf, size_t count)
+       return ret;
+ }
+ 
+-static void usbhid_restart_queues(struct usbhid_device *usbhid)
+-{
+-      if (usbhid->urbout && !test_bit(HID_OUT_RUNNING, &usbhid->iofl))
+-              usbhid_restart_out_queue(usbhid);
+-      if (!test_bit(HID_CTRL_RUNNING, &usbhid->iofl))
+-              usbhid_restart_ctrl_queue(usbhid);
+-}
+-
+ static void hid_free_buffers(struct usb_device *dev, struct hid_device *hid)
+ {
+       struct usbhid_device *usbhid = hid->driver_data;
+@@ -1392,6 +1384,37 @@ static void hid_cease_io(struct usbhid_device *usbhid)
+       usb_kill_urb(usbhid->urbout);
+ }
+ 
++static void hid_restart_io(struct hid_device *hid)
++{
++      struct usbhid_device *usbhid = hid->driver_data;
++      int clear_halt = test_bit(HID_CLEAR_HALT, &usbhid->iofl);
++      int reset_pending = test_bit(HID_RESET_PENDING, &usbhid->iofl);
++
++      spin_lock_irq(&usbhid->lock);
++      clear_bit(HID_SUSPENDED, &usbhid->iofl);
++      usbhid_mark_busy(usbhid);
++
++      if (clear_halt || reset_pending)
++              schedule_work(&usbhid->reset_work);
++      usbhid->retry_delay = 0;
++      spin_unlock_irq(&usbhid->lock);
++
++      if (reset_pending || !test_bit(HID_STARTED, &usbhid->iofl))
++              return;
++
++      if (!clear_halt) {
++              if (hid_start_in(hid) < 0)
++                      hid_io_error(hid);
++      }
++
++      spin_lock_irq(&usbhid->lock);
++      if (usbhid->urbout && !test_bit(HID_OUT_RUNNING, &usbhid->iofl))
++              usbhid_restart_out_queue(usbhid);
++      if (!test_bit(HID_CTRL_RUNNING, &usbhid->iofl))
++              usbhid_restart_ctrl_queue(usbhid);
++      spin_unlock_irq(&usbhid->lock);
++}
++
+ /* Treat USB reset pretty much the same as suspend/resume */
+ static int hid_pre_reset(struct usb_interface *intf)
+ {
+@@ -1441,14 +1464,14 @@ static int hid_post_reset(struct usb_interface *intf)
+               return 1;
+       }
+ 
++      /* No need to do another reset or clear a halted endpoint */
+       spin_lock_irq(&usbhid->lock);
+       clear_bit(HID_RESET_PENDING, &usbhid->iofl);
++      clear_bit(HID_CLEAR_HALT, &usbhid->iofl);
+       spin_unlock_irq(&usbhid->lock);
+       hid_set_idle(dev, intf->cur_altsetting->desc.bInterfaceNumber, 0, 0);
+-      status = hid_start_in(hid);
+-      if (status < 0)
+-              hid_io_error(hid);
+-      usbhid_restart_queues(usbhid);
++
++      hid_restart_io(hid);
+ 
+       return 0;
+ }
+@@ -1471,25 +1494,9 @@ void usbhid_put_power(struct hid_device *hid)
+ #ifdef CONFIG_PM
+ static int hid_resume_common(struct hid_device *hid, bool driver_suspended)
+ {
+-      struct usbhid_device *usbhid = hid->driver_data;
+-      int status;
+-
+-      spin_lock_irq(&usbhid->lock);
+-      clear_bit(HID_SUSPENDED, &usbhid->iofl);
+-      usbhid_mark_busy(usbhid);
+-
+-      if (test_bit(HID_CLEAR_HALT, &usbhid->iofl) ||
+-                      test_bit(HID_RESET_PENDING, &usbhid->iofl))
+-              schedule_work(&usbhid->reset_work);
+-      usbhid->retry_delay = 0;
+-
+-      usbhid_restart_queues(usbhid);
+-      spin_unlock_irq(&usbhid->lock);
+-
+-      status = hid_start_in(hid);
+-      if (status < 0)
+-              hid_io_error(hid);
++      int status = 0;
+ 
++      hid_restart_io(hid);
+       if (driver_suspended && hid->driver && hid->driver->resume)
+               status = hid->driver->resume(hid);
+       return status;
+@@ -1558,12 +1565,8 @@ static int hid_suspend(struct usb_interface *intf, 
pm_message_t message)
+ static int hid_resume(struct usb_interface *intf)
+ {
+       struct hid_device *hid = usb_get_intfdata (intf);
+-      struct usbhid_device *usbhid = hid->driver_data;
+       int status;
+ 
+-      if (!test_bit(HID_STARTED, &usbhid->iofl))
+-              return 0;
+-
+       status = hid_resume_common(hid, true);
+       dev_dbg(&intf->dev, "resume status %d\n", status);
+       return 0;
+@@ -1572,10 +1575,8 @@ static int hid_resume(struct usb_interface *intf)
+ static int hid_reset_resume(struct usb_interface *intf)
+ {
+       struct hid_device *hid = usb_get_intfdata(intf);
+-      struct usbhid_device *usbhid = hid->driver_data;
+       int status;
+ 
+-      clear_bit(HID_SUSPENDED, &usbhid->iofl);
+       status = hid_post_reset(intf);
+       if (status >= 0 && hid->driver && hid->driver->reset_resume) {
+               int ret = hid->driver->reset_resume(hid);
+diff --git a/drivers/scsi/sd.c b/drivers/scsi/sd.c
+index 10720938e5c5..fedf432eef30 100644
+--- a/drivers/scsi/sd.c
++++ b/drivers/scsi/sd.c
+@@ -1279,18 +1279,19 @@ static int sd_getgeo(struct block_device *bdev, struct 
hd_geometry *geo)
+       struct scsi_disk *sdkp = scsi_disk(bdev->bd_disk);
+       struct scsi_device *sdp = sdkp->device;
+       struct Scsi_Host *host = sdp->host;
++      sector_t capacity = logical_to_sectors(sdp, sdkp->capacity);
+       int diskinfo[4];
+ 
+       /* default to most commonly used values */
+-        diskinfo[0] = 0x40;   /* 1 << 6 */
+-              diskinfo[1] = 0x20;     /* 1 << 5 */
+-              diskinfo[2] = sdkp->capacity >> 11;
+-      
++      diskinfo[0] = 0x40;     /* 1 << 6 */
++      diskinfo[1] = 0x20;     /* 1 << 5 */
++      diskinfo[2] = capacity >> 11;
++
+       /* override with calculated, extended default, or driver values */
+       if (host->hostt->bios_param)
+-              host->hostt->bios_param(sdp, bdev, sdkp->capacity, diskinfo);
++              host->hostt->bios_param(sdp, bdev, capacity, diskinfo);
+       else
+-              scsicam_bios_param(bdev, sdkp->capacity, diskinfo);
++              scsicam_bios_param(bdev, capacity, diskinfo);
+ 
+       geo->heads = diskinfo[0];
+       geo->sectors = diskinfo[1];
+@@ -2273,14 +2274,6 @@ got_data:
+       } else
+               sdkp->max_xfer_blocks = SD_DEF_XFER_BLOCKS;
+ 
+-      /* Rescale capacity to 512-byte units */
+-      if (sector_size == 4096)
+-              sdkp->capacity <<= 3;
+-      else if (sector_size == 2048)
+-              sdkp->capacity <<= 2;
+-      else if (sector_size == 1024)
+-              sdkp->capacity <<= 1;
+-
+       blk_queue_physical_block_size(sdp->request_queue,
+                                     sdkp->physical_block_size);
+       sdkp->device->sector_size = sector_size;
+@@ -2815,7 +2808,7 @@ static int sd_revalidate_disk(struct gendisk *disk)
+       sdkp->disk->queue->limits.max_sectors =
+               min_not_zero(queue_max_hw_sectors(sdkp->disk->queue), max_xfer);
+ 
+-      set_capacity(disk, sdkp->capacity);
++      set_capacity(disk, logical_to_sectors(sdp, sdkp->capacity));
+       sd_config_write_same(sdkp);
+       kfree(buffer);
+ 
+diff --git a/drivers/scsi/sd.h b/drivers/scsi/sd.h
+index 467377884b63..53f503354866 100644
+--- a/drivers/scsi/sd.h
++++ b/drivers/scsi/sd.h
+@@ -65,7 +65,7 @@ struct scsi_disk {
+       struct device   dev;
+       struct gendisk  *disk;
+       atomic_t        openers;
+-      sector_t        capacity;       /* size in 512-byte sectors */
++      sector_t        capacity;       /* size in logical blocks */
+       u32             max_xfer_blocks;
+       u32             max_ws_blocks;
+       u32             max_unmap_blocks;
+@@ -145,6 +145,11 @@ static inline int scsi_medium_access_command(struct 
scsi_cmnd *scmd)
+       return 0;
+ }
+ 
++static inline sector_t logical_to_sectors(struct scsi_device *sdev, sector_t 
blocks)
++{
++      return blocks << (ilog2(sdev->sector_size) - 9);
++}
++
+ /*
+  * A DIF-capable target device can be formatted with different
+  * protection schemes.  Currently 0 through 3 are defined:
+diff --git a/drivers/thermal/thermal_core.c b/drivers/thermal/thermal_core.c
+index f23813fe1a0d..885adc345f57 100644
+--- a/drivers/thermal/thermal_core.c
++++ b/drivers/thermal/thermal_core.c
+@@ -1488,7 +1488,7 @@ struct thermal_zone_device 
*thermal_zone_device_register(const char *type,
+ {
+       struct thermal_zone_device *tz;
+       enum thermal_trip_type trip_type;
+-      int trip_temp;
++      unsigned long trip_temp;
+       int result;
+       int count;
+       int passive = 0;
+diff --git a/drivers/usb/core/hcd-pci.c b/drivers/usb/core/hcd-pci.c
+index efc953119ce2..a4c0b855faeb 100644
+--- a/drivers/usb/core/hcd-pci.c
++++ b/drivers/usb/core/hcd-pci.c
+@@ -74,6 +74,15 @@ static void for_each_companion(struct pci_dev *pdev, struct 
usb_hcd *hcd,
+               if (companion->bus != pdev->bus ||
+                               PCI_SLOT(companion->devfn) != slot)
+                       continue;
++
++              /*
++               * Companion device should be either UHCI,OHCI or EHCI host
++               * controller, otherwise skip.
++               */
++              if (companion->class != CL_UHCI && companion->class != CL_OHCI 
&&
++                              companion->class != CL_EHCI)
++                      continue;
++
+               companion_hcd = pci_get_drvdata(companion);
+               if (!companion_hcd || !companion_hcd->self.root_hub)
+                       continue;
+diff --git a/drivers/usb/host/xhci-mem.c b/drivers/usb/host/xhci-mem.c
+index ce3087bd95d2..150cab3290f8 100644
+--- a/drivers/usb/host/xhci-mem.c
++++ b/drivers/usb/host/xhci-mem.c
+@@ -1883,6 +1883,12 @@ no_bw:
+       kfree(xhci->rh_bw);
+       kfree(xhci->ext_caps);
+ 
++      xhci->usb2_ports = NULL;
++      xhci->usb3_ports = NULL;
++      xhci->port_array = NULL;
++      xhci->rh_bw = NULL;
++      xhci->ext_caps = NULL;
++
+       xhci->page_size = 0;
+       xhci->page_shift = 0;
+       xhci->bus_state[0].bus_suspended = 0;
+diff --git a/drivers/usb/host/xhci-pci.c b/drivers/usb/host/xhci-pci.c
+index 3ff5fcc7c94b..c6027acb6263 100644
+--- a/drivers/usb/host/xhci-pci.c
++++ b/drivers/usb/host/xhci-pci.c
+@@ -48,6 +48,7 @@
+ #define PCI_DEVICE_ID_INTEL_SUNRISEPOINT_H_XHCI               0xa12f
+ #define PCI_DEVICE_ID_INTEL_SUNRISEPOINT_LP_XHCI      0x9d2f
+ #define PCI_DEVICE_ID_INTEL_BROXTON_M_XHCI            0x0aa8
++#define PCI_DEVICE_ID_INTEL_BROXTON_B_XHCI            0x1aa8
+ 
+ static const char hcd_name[] = "xhci_hcd";
+ 
+@@ -149,7 +150,8 @@ static void xhci_pci_quirks(struct device *dev, struct 
xhci_hcd *xhci)
+               (pdev->device == PCI_DEVICE_ID_INTEL_SUNRISEPOINT_LP_XHCI ||
+                pdev->device == PCI_DEVICE_ID_INTEL_SUNRISEPOINT_H_XHCI ||
+                pdev->device == PCI_DEVICE_ID_INTEL_CHERRYVIEW_XHCI ||
+-               pdev->device == PCI_DEVICE_ID_INTEL_BROXTON_M_XHCI)) {
++               pdev->device == PCI_DEVICE_ID_INTEL_BROXTON_M_XHCI ||
++               pdev->device == PCI_DEVICE_ID_INTEL_BROXTON_B_XHCI)) {
+               xhci->quirks |= XHCI_PME_STUCK_QUIRK;
+       }
+       if (pdev->vendor == PCI_VENDOR_ID_INTEL &&
+@@ -296,6 +298,7 @@ static void xhci_pci_remove(struct pci_dev *dev)
+       struct xhci_hcd *xhci;
+ 
+       xhci = hcd_to_xhci(pci_get_drvdata(dev));
++      xhci->xhc_state |= XHCI_STATE_REMOVING;
+       if (xhci->shared_hcd) {
+               usb_remove_hcd(xhci->shared_hcd);
+               usb_put_hcd(xhci->shared_hcd);
+diff --git a/drivers/usb/host/xhci-ring.c b/drivers/usb/host/xhci-ring.c
+index 1e5fb8cfc9e3..04e75258fb46 100644
+--- a/drivers/usb/host/xhci-ring.c
++++ b/drivers/usb/host/xhci-ring.c
+@@ -3840,8 +3840,12 @@ static int queue_command(struct xhci_hcd *xhci, struct 
xhci_command *cmd,
+ {
+       int reserved_trbs = xhci->cmd_ring_reserved_trbs;
+       int ret;
+-      if (xhci->xhc_state & XHCI_STATE_DYING)
++
++      if ((xhci->xhc_state & XHCI_STATE_DYING) ||
++              (xhci->xhc_state & XHCI_STATE_HALTED)) {
++              xhci_dbg(xhci, "xHCI dying or halted, can't queue_command\n");
+               return -ESHUTDOWN;
++      }
+ 
+       if (!command_must_succeed)
+               reserved_trbs++;
+diff --git a/drivers/usb/host/xhci.c b/drivers/usb/host/xhci.c
+index 288d18493132..f951b7550789 100644
+--- a/drivers/usb/host/xhci.c
++++ b/drivers/usb/host/xhci.c
+@@ -147,7 +147,8 @@ static int xhci_start(struct xhci_hcd *xhci)
+                               "waited %u microseconds.\n",
+                               XHCI_MAX_HALT_USEC);
+       if (!ret)
+-              xhci->xhc_state &= ~(XHCI_STATE_HALTED | XHCI_STATE_DYING);
++              /* clear state flags. Including dying, halted or removing */
++              xhci->xhc_state = 0;
+ 
+       return ret;
+ }
+@@ -1102,8 +1103,8 @@ int xhci_resume(struct xhci_hcd *xhci, bool hibernated)
+               /* Resume root hubs only when have pending events. */
+               status = readl(&xhci->op_regs->status);
+               if (status & STS_EINT) {
+-                      usb_hcd_resume_root_hub(hcd);
+                       usb_hcd_resume_root_hub(xhci->shared_hcd);
++                      usb_hcd_resume_root_hub(hcd);
+               }
+       }
+ 
+@@ -1118,10 +1119,10 @@ int xhci_resume(struct xhci_hcd *xhci, bool hibernated)
+ 
+       /* Re-enable port polling. */
+       xhci_dbg(xhci, "%s: starting port polling.\n", __func__);
+-      set_bit(HCD_FLAG_POLL_RH, &hcd->flags);
+-      usb_hcd_poll_rh_status(hcd);
+       set_bit(HCD_FLAG_POLL_RH, &xhci->shared_hcd->flags);
+       usb_hcd_poll_rh_status(xhci->shared_hcd);
++      set_bit(HCD_FLAG_POLL_RH, &hcd->flags);
++      usb_hcd_poll_rh_status(hcd);
+ 
+       return retval;
+ }
+@@ -2753,7 +2754,8 @@ int xhci_check_bandwidth(struct usb_hcd *hcd, struct 
usb_device *udev)
+       if (ret <= 0)
+               return ret;
+       xhci = hcd_to_xhci(hcd);
+-      if (xhci->xhc_state & XHCI_STATE_DYING)
++      if ((xhci->xhc_state & XHCI_STATE_DYING) ||
++              (xhci->xhc_state & XHCI_STATE_REMOVING))
+               return -ENODEV;
+ 
+       xhci_dbg(xhci, "%s called for udev %p\n", __func__, udev);
+@@ -3795,7 +3797,7 @@ static int xhci_setup_device(struct usb_hcd *hcd, struct 
usb_device *udev,
+       u64 temp_64;
+       struct xhci_command *command;
+ 
+-      if (xhci->xhc_state)    /* dying or halted */
++      if (xhci->xhc_state)    /* dying, removing or halted */
+               return -EINVAL;
+ 
+       if (!udev->slot_id) {
+@@ -4914,6 +4916,16 @@ int xhci_gen_setup(struct usb_hcd *hcd, 
xhci_get_quirks_t get_quirks)
+               goto error;
+       xhci_dbg(xhci, "Reset complete\n");
+ 
++      /*
++       * On some xHCI controllers (e.g. R-Car SoCs), the AC64 bit (bit 0)
++       * of HCCPARAMS1 is set to 1. However, the xHCs don't support 64-bit
++       * address memory pointers actually. So, this driver clears the AC64
++       * bit of xhci->hcc_params to call dma_set_coherent_mask(dev,
++       * DMA_BIT_MASK(32)) in this xhci_gen_setup().
++       */
++      if (xhci->quirks & XHCI_NO_64BIT_SUPPORT)
++              xhci->hcc_params &= ~BIT(0);
++
+       /* Set dma_mask and coherent_dma_mask to 64-bits,
+        * if xHC supports 64-bit addressing */
+       if (HCC_64BIT_ADDR(xhci->hcc_params) &&
+diff --git a/drivers/usb/host/xhci.h b/drivers/usb/host/xhci.h
+index 810f7f6d356c..3850cb2af7a9 100644
+--- a/drivers/usb/host/xhci.h
++++ b/drivers/usb/host/xhci.h
+@@ -1531,6 +1531,7 @@ struct xhci_hcd {
+  */
+ #define XHCI_STATE_DYING      (1 << 0)
+ #define XHCI_STATE_HALTED     (1 << 1)
++#define XHCI_STATE_REMOVING   (1 << 2)
+       /* Statistics */
+       int                     error_bitmask;
+       unsigned int            quirks;
+@@ -1566,6 +1567,7 @@ struct xhci_hcd {
+ #define XHCI_BROKEN_STREAMS   (1 << 19)
+ #define XHCI_PME_STUCK_QUIRK  (1 << 20)
+ #define XHCI_SSIC_PORT_UNUSED (1 << 22)
++#define XHCI_NO_64BIT_SUPPORT (1 << 23)
+       unsigned int            num_active_eps;
+       unsigned int            limit_active_eps;
+       /* There are two roothubs to keep track of bus suspend info for */
+diff --git a/drivers/usb/musb/musb_cppi41.c b/drivers/usb/musb/musb_cppi41.c
+index 8dfd86771fac..2a535b70af21 100644
+--- a/drivers/usb/musb/musb_cppi41.c
++++ b/drivers/usb/musb/musb_cppi41.c
+@@ -9,9 +9,9 @@
+ 
+ #define RNDIS_REG(x) (0x80 + ((x - 1) * 4))
+ 
+-#define EP_MODE_AUTOREG_NONE          0
+-#define EP_MODE_AUTOREG_ALL_NEOP      1
+-#define EP_MODE_AUTOREG_ALWAYS                3
++#define EP_MODE_AUTOREQ_NONE          0
++#define EP_MODE_AUTOREQ_ALL_NEOP      1
++#define EP_MODE_AUTOREQ_ALWAYS                3
+ 
+ #define EP_MODE_DMA_TRANSPARENT               0
+ #define EP_MODE_DMA_RNDIS             1
+@@ -396,19 +396,19 @@ static bool cppi41_configure_channel(struct dma_channel 
*channel,
+ 
+                       /* auto req */
+                       cppi41_set_autoreq_mode(cppi41_channel,
+-                                      EP_MODE_AUTOREG_ALL_NEOP);
++                                      EP_MODE_AUTOREQ_ALL_NEOP);
+               } else {
+                       musb_writel(musb->ctrl_base,
+                                       RNDIS_REG(cppi41_channel->port_num), 0);
+                       cppi41_set_dma_mode(cppi41_channel,
+                                       EP_MODE_DMA_TRANSPARENT);
+                       cppi41_set_autoreq_mode(cppi41_channel,
+-                                      EP_MODE_AUTOREG_NONE);
++                                      EP_MODE_AUTOREQ_NONE);
+               }
+       } else {
+               /* fallback mode */
+               cppi41_set_dma_mode(cppi41_channel, EP_MODE_DMA_TRANSPARENT);
+-              cppi41_set_autoreq_mode(cppi41_channel, EP_MODE_AUTOREG_NONE);
++              cppi41_set_autoreq_mode(cppi41_channel, EP_MODE_AUTOREQ_NONE);
+               len = min_t(u32, packet_sz, len);
+       }
+       cppi41_channel->prog_len = len;
+diff --git a/drivers/usb/renesas_usbhs/fifo.c 
b/drivers/usb/renesas_usbhs/fifo.c
+index 634c14d022ce..e5f429ee7a89 100644
+--- a/drivers/usb/renesas_usbhs/fifo.c
++++ b/drivers/usb/renesas_usbhs/fifo.c
+@@ -192,7 +192,8 @@ static int usbhsf_pkt_handler(struct usbhs_pipe *pipe, int 
type)
+               goto __usbhs_pkt_handler_end;
+       }
+ 
+-      ret = func(pkt, &is_done);
++      if (likely(func))
++              ret = func(pkt, &is_done);
+ 
+       if (is_done)
+               __usbhsf_pkt_del(pkt);
+@@ -906,6 +907,7 @@ static int usbhsf_dma_prepare_push(struct usbhs_pkt *pkt, 
int *is_done)
+ 
+       pkt->trans = len;
+ 
++      usbhsf_tx_irq_ctrl(pipe, 0);
+       INIT_WORK(&pkt->work, xfer_work);
+       schedule_work(&pkt->work);
+ 
+diff --git a/drivers/usb/renesas_usbhs/mod_gadget.c 
b/drivers/usb/renesas_usbhs/mod_gadget.c
+index 294d43c387b2..e56bbb8ab9a0 100644
+--- a/drivers/usb/renesas_usbhs/mod_gadget.c
++++ b/drivers/usb/renesas_usbhs/mod_gadget.c
+@@ -118,18 +118,34 @@ struct usbhsg_recip_handle {
+ /*
+  *            queue push/pop
+  */
+-static void usbhsg_queue_pop(struct usbhsg_uep *uep,
+-                           struct usbhsg_request *ureq,
+-                           int status)
++static void __usbhsg_queue_pop(struct usbhsg_uep *uep,
++                             struct usbhsg_request *ureq,
++                             int status)
+ {
+       struct usbhsg_gpriv *gpriv = usbhsg_uep_to_gpriv(uep);
+       struct usbhs_pipe *pipe = usbhsg_uep_to_pipe(uep);
+       struct device *dev = usbhsg_gpriv_to_dev(gpriv);
++      struct usbhs_priv *priv = usbhsg_gpriv_to_priv(gpriv);
+ 
+       dev_dbg(dev, "pipe %d : queue pop\n", usbhs_pipe_number(pipe));
+ 
+       ureq->req.status = status;
++      spin_unlock(usbhs_priv_to_lock(priv));
+       usb_gadget_giveback_request(&uep->ep, &ureq->req);
++      spin_lock(usbhs_priv_to_lock(priv));
++}
++
++static void usbhsg_queue_pop(struct usbhsg_uep *uep,
++                           struct usbhsg_request *ureq,
++                           int status)
++{
++      struct usbhsg_gpriv *gpriv = usbhsg_uep_to_gpriv(uep);
++      struct usbhs_priv *priv = usbhsg_gpriv_to_priv(gpriv);
++      unsigned long flags;
++
++      usbhs_lock(priv, flags);
++      __usbhsg_queue_pop(uep, ureq, status);
++      usbhs_unlock(priv, flags);
+ }
+ 
+ static void usbhsg_queue_done(struct usbhs_priv *priv, struct usbhs_pkt *pkt)
+@@ -137,10 +153,14 @@ static void usbhsg_queue_done(struct usbhs_priv *priv, 
struct usbhs_pkt *pkt)
+       struct usbhs_pipe *pipe = pkt->pipe;
+       struct usbhsg_uep *uep = usbhsg_pipe_to_uep(pipe);
+       struct usbhsg_request *ureq = usbhsg_pkt_to_ureq(pkt);
++      unsigned long flags;
+ 
+       ureq->req.actual = pkt->actual;
+ 
+-      usbhsg_queue_pop(uep, ureq, 0);
++      usbhs_lock(priv, flags);
++      if (uep)
++              __usbhsg_queue_pop(uep, ureq, 0);
++      usbhs_unlock(priv, flags);
+ }
+ 
+ static void usbhsg_queue_push(struct usbhsg_uep *uep,
+diff --git a/drivers/usb/serial/cp210x.c b/drivers/usb/serial/cp210x.c
+index 50426cf095a5..d4541ac5bf48 100644
+--- a/drivers/usb/serial/cp210x.c
++++ b/drivers/usb/serial/cp210x.c
+@@ -164,6 +164,7 @@ static const struct usb_device_id id_table[] = {
+       { USB_DEVICE(0x18EF, 0xE025) }, /* ELV Marble Sound Board 1 */
+       { USB_DEVICE(0x1901, 0x0190) }, /* GE B850 CP2105 Recorder interface */
+       { USB_DEVICE(0x1901, 0x0193) }, /* GE B650 CP2104 PMC interface */
++      { USB_DEVICE(0x1901, 0x0194) }, /* GE Healthcare Remote Alarm Box */
+       { USB_DEVICE(0x19CF, 0x3000) }, /* Parrot NMEA GPS Flight Recorder */
+       { USB_DEVICE(0x1ADB, 0x0001) }, /* Schweitzer Engineering C662 Cable */
+       { USB_DEVICE(0x1B1C, 0x1C00) }, /* Corsair USB Dongle */
+diff --git a/drivers/usb/serial/cypress_m8.c b/drivers/usb/serial/cypress_m8.c
+index 01bf53392819..244acb1299a9 100644
+--- a/drivers/usb/serial/cypress_m8.c
++++ b/drivers/usb/serial/cypress_m8.c
+@@ -447,6 +447,11 @@ static int cypress_generic_port_probe(struct 
usb_serial_port *port)
+       struct usb_serial *serial = port->serial;
+       struct cypress_private *priv;
+ 
++      if (!port->interrupt_out_urb || !port->interrupt_in_urb) {
++              dev_err(&port->dev, "required endpoint is missing\n");
++              return -ENODEV;
++      }
++
+       priv = kzalloc(sizeof(struct cypress_private), GFP_KERNEL);
+       if (!priv)
+               return -ENOMEM;
+@@ -606,12 +611,6 @@ static int cypress_open(struct tty_struct *tty, struct 
usb_serial_port *port)
+               cypress_set_termios(tty, port, &priv->tmp_termios);
+ 
+       /* setup the port and start reading from the device */
+-      if (!port->interrupt_in_urb) {
+-              dev_err(&port->dev, "%s - interrupt_in_urb is empty!\n",
+-                      __func__);
+-              return -1;
+-      }
+-
+       usb_fill_int_urb(port->interrupt_in_urb, serial->dev,
+               usb_rcvintpipe(serial->dev, port->interrupt_in_endpointAddress),
+               port->interrupt_in_urb->transfer_buffer,
+diff --git a/drivers/usb/serial/digi_acceleport.c 
b/drivers/usb/serial/digi_acceleport.c
+index 12b0e67473ba..3df7b7ec178e 100644
+--- a/drivers/usb/serial/digi_acceleport.c
++++ b/drivers/usb/serial/digi_acceleport.c
+@@ -1251,8 +1251,27 @@ static int digi_port_init(struct usb_serial_port *port, 
unsigned port_num)
+ 
+ static int digi_startup(struct usb_serial *serial)
+ {
++      struct device *dev = &serial->interface->dev;
+       struct digi_serial *serial_priv;
+       int ret;
++      int i;
++
++      /* check whether the device has the expected number of endpoints */
++      if (serial->num_port_pointers < serial->type->num_ports + 1) {
++              dev_err(dev, "OOB endpoints missing\n");
++              return -ENODEV;
++      }
++
++      for (i = 0; i < serial->type->num_ports + 1 ; i++) {
++              if (!serial->port[i]->read_urb) {
++                      dev_err(dev, "bulk-in endpoint missing\n");
++                      return -ENODEV;
++              }
++              if (!serial->port[i]->write_urb) {
++                      dev_err(dev, "bulk-out endpoint missing\n");
++                      return -ENODEV;
++              }
++      }
+ 
+       serial_priv = kzalloc(sizeof(*serial_priv), GFP_KERNEL);
+       if (!serial_priv)
+diff --git a/drivers/usb/serial/ftdi_sio.c b/drivers/usb/serial/ftdi_sio.c
+index 8c660ae401d8..b61f12160d37 100644
+--- a/drivers/usb/serial/ftdi_sio.c
++++ b/drivers/usb/serial/ftdi_sio.c
+@@ -1004,6 +1004,10 @@ static const struct usb_device_id id_table_combined[] = 
{
+       { USB_DEVICE(FTDI_VID, CHETCO_SEASMART_DISPLAY_PID) },
+       { USB_DEVICE(FTDI_VID, CHETCO_SEASMART_LITE_PID) },
+       { USB_DEVICE(FTDI_VID, CHETCO_SEASMART_ANALOG_PID) },
++      /* ICP DAS I-756xU devices */
++      { USB_DEVICE(ICPDAS_VID, ICPDAS_I7560U_PID) },
++      { USB_DEVICE(ICPDAS_VID, ICPDAS_I7561U_PID) },
++      { USB_DEVICE(ICPDAS_VID, ICPDAS_I7563U_PID) },
+       { }                                     /* Terminating entry */
+ };
+ 
+diff --git a/drivers/usb/serial/ftdi_sio_ids.h 
b/drivers/usb/serial/ftdi_sio_ids.h
+index 7850071c0ae1..334bc600282d 100644
+--- a/drivers/usb/serial/ftdi_sio_ids.h
++++ b/drivers/usb/serial/ftdi_sio_ids.h
+@@ -872,6 +872,14 @@
+ #define NOVITUS_BONO_E_PID            0x6010
+ 
+ /*
++ * ICPDAS I-756*U devices
++ */
++#define ICPDAS_VID                    0x1b5c
++#define ICPDAS_I7560U_PID             0x0103
++#define ICPDAS_I7561U_PID             0x0104
++#define ICPDAS_I7563U_PID             0x0105
++
++/*
+  * RT Systems programming cables for various ham radios
+  */
+ #define RTSYSTEMS_VID         0x2100  /* Vendor ID */
+diff --git a/drivers/usb/serial/mct_u232.c b/drivers/usb/serial/mct_u232.c
+index fd707d6a10e2..89726f702202 100644
+--- a/drivers/usb/serial/mct_u232.c
++++ b/drivers/usb/serial/mct_u232.c
+@@ -376,14 +376,21 @@ static void mct_u232_msr_to_state(struct usb_serial_port 
*port,
+ 
+ static int mct_u232_port_probe(struct usb_serial_port *port)
+ {
++      struct usb_serial *serial = port->serial;
+       struct mct_u232_private *priv;
+ 
++      /* check first to simplify error handling */
++      if (!serial->port[1] || !serial->port[1]->interrupt_in_urb) {
++              dev_err(&port->dev, "expected endpoint missing\n");
++              return -ENODEV;
++      }
++
+       priv = kzalloc(sizeof(*priv), GFP_KERNEL);
+       if (!priv)
+               return -ENOMEM;
+ 
+       /* Use second interrupt-in endpoint for reading. */
+-      priv->read_urb = port->serial->port[1]->interrupt_in_urb;
++      priv->read_urb = serial->port[1]->interrupt_in_urb;
+       priv->read_urb->context = port;
+ 
+       spin_lock_init(&priv->lock);
+diff --git a/drivers/usb/serial/option.c b/drivers/usb/serial/option.c
+index 5e194f187802..2a593d9232d7 100644
+--- a/drivers/usb/serial/option.c
++++ b/drivers/usb/serial/option.c
+@@ -1827,6 +1827,8 @@ static const struct usb_device_id option_ids[] = {
+       { USB_DEVICE_AND_INTERFACE_INFO(0x2001, 0x7d02, 0xff, 0x00, 0x00) },
+       { USB_DEVICE_AND_INTERFACE_INFO(0x2001, 0x7d03, 0xff, 0x02, 0x01) },
+       { USB_DEVICE_AND_INTERFACE_INFO(0x2001, 0x7d03, 0xff, 0x00, 0x00) },
++      { USB_DEVICE_INTERFACE_CLASS(0x2001, 0x7e19, 0xff),                     
/* D-Link DWM-221 B1 */
++        .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
+       { USB_DEVICE_AND_INTERFACE_INFO(0x07d1, 0x3e01, 0xff, 0xff, 0xff) }, /* 
D-Link DWM-152/C1 */
+       { USB_DEVICE_AND_INTERFACE_INFO(0x07d1, 0x3e02, 0xff, 0xff, 0xff) }, /* 
D-Link DWM-156/C1 */
+       { USB_DEVICE_INTERFACE_CLASS(0x2020, 0x4000, 0xff) },                /* 
OLICARD300 - MT6225 */
+diff --git a/drivers/usb/storage/uas.c b/drivers/usb/storage/uas.c
+index c6b4af82b7ed..e390d1d11baf 100644
+--- a/drivers/usb/storage/uas.c
++++ b/drivers/usb/storage/uas.c
+@@ -2,7 +2,7 @@
+  * USB Attached SCSI
+  * Note that this is not the same as the USB Mass Storage driver
+  *
+- * Copyright Hans de Goede <hdego...@redhat.com> for Red Hat, Inc. 2013 - 2014
++ * Copyright Hans de Goede <hdego...@redhat.com> for Red Hat, Inc. 2013 - 2016
+  * Copyright Matthew Wilcox for Intel Corp, 2010
+  * Copyright Sarah Sharp for Intel Corp, 2010
+  *
+@@ -768,6 +768,17 @@ static int uas_eh_bus_reset_handler(struct scsi_cmnd 
*cmnd)
+       return SUCCESS;
+ }
+ 
++static int uas_target_alloc(struct scsi_target *starget)
++{
++      struct uas_dev_info *devinfo = (struct uas_dev_info *)
++                      dev_to_shost(starget->dev.parent)->hostdata;
++
++      if (devinfo->flags & US_FL_NO_REPORT_LUNS)
++              starget->no_report_luns = 1;
++
++      return 0;
++}
++
+ static int uas_slave_alloc(struct scsi_device *sdev)
+ {
+       struct uas_dev_info *devinfo =
+@@ -816,6 +827,7 @@ static struct scsi_host_template uas_host_template = {
+       .module = THIS_MODULE,
+       .name = "uas",
+       .queuecommand = uas_queuecommand,
++      .target_alloc = uas_target_alloc,
+       .slave_alloc = uas_slave_alloc,
+       .slave_configure = uas_slave_configure,
+       .eh_abort_handler = uas_eh_abort_handler,
+diff --git a/drivers/usb/storage/unusual_uas.h 
b/drivers/usb/storage/unusual_uas.h
+index cd4ba61330c8..eb87c44663b1 100644
+--- a/drivers/usb/storage/unusual_uas.h
++++ b/drivers/usb/storage/unusual_uas.h
+@@ -54,6 +54,13 @@ UNUSUAL_DEV(0x0bc2, 0x3312, 0x0000, 0x9999,
+               USB_SC_DEVICE, USB_PR_DEVICE, NULL,
+               US_FL_NO_ATA_1X),
+ 
++/* Reported-by: David Webb <d...@noc.ac.uk> */
++UNUSUAL_DEV(0x0bc2, 0x331a, 0x0000, 0x9999,
++              "Seagate",
++              "Expansion Desk",
++              USB_SC_DEVICE, USB_PR_DEVICE, NULL,
++              US_FL_NO_REPORT_LUNS),
++
+ /* Reported-by: Hans de Goede <hdego...@redhat.com> */
+ UNUSUAL_DEV(0x0bc2, 0x3320, 0x0000, 0x9999,
+               "Seagate",
+diff --git a/drivers/usb/storage/usb.c b/drivers/usb/storage/usb.c
+index cda42cf779a5..b770fff1d321 100644
+--- a/drivers/usb/storage/usb.c
++++ b/drivers/usb/storage/usb.c
+@@ -480,7 +480,7 @@ void usb_stor_adjust_quirks(struct usb_device *udev, 
unsigned long *fflags)
+                       US_FL_NO_READ_DISC_INFO | US_FL_NO_READ_CAPACITY_16 |
+                       US_FL_INITIAL_READ10 | US_FL_WRITE_CACHE |
+                       US_FL_NO_ATA_1X | US_FL_NO_REPORT_OPCODES |
+-                      US_FL_MAX_SECTORS_240);
++                      US_FL_MAX_SECTORS_240 | US_FL_NO_REPORT_LUNS);
+ 
+       p = quirks;
+       while (*p) {
+@@ -530,6 +530,9 @@ void usb_stor_adjust_quirks(struct usb_device *udev, 
unsigned long *fflags)
+               case 'i':
+                       f |= US_FL_IGNORE_DEVICE;
+                       break;
++              case 'j':
++                      f |= US_FL_NO_REPORT_LUNS;
++                      break;
+               case 'l':
+                       f |= US_FL_NOT_LOCKABLE;
+                       break;
+diff --git a/drivers/xen/events/events_base.c 
b/drivers/xen/events/events_base.c
+index 38387950490e..511aab3b9206 100644
+--- a/drivers/xen/events/events_base.c
++++ b/drivers/xen/events/events_base.c
+@@ -483,9 +483,19 @@ static void eoi_pirq(struct irq_data *data)
+       struct physdev_eoi eoi = { .irq = pirq_from_irq(data->irq) };
+       int rc = 0;
+ 
+-      irq_move_irq(data);
++      if (!VALID_EVTCHN(evtchn))
++              return;
+ 
+-      if (VALID_EVTCHN(evtchn))
++      if (unlikely(irqd_is_setaffinity_pending(data))) {
++              int masked = test_and_set_mask(evtchn);
++
++              clear_evtchn(evtchn);
++
++              irq_move_masked_irq(data);
++
++              if (!masked)
++                      unmask_evtchn(evtchn);
++      } else
+               clear_evtchn(evtchn);
+ 
+       if (pirq_needs_eoi(data->irq)) {
+@@ -1360,9 +1370,19 @@ static void ack_dynirq(struct irq_data *data)
+ {
+       int evtchn = evtchn_from_irq(data->irq);
+ 
+-      irq_move_irq(data);
++      if (!VALID_EVTCHN(evtchn))
++              return;
+ 
+-      if (VALID_EVTCHN(evtchn))
++      if (unlikely(irqd_is_setaffinity_pending(data))) {
++              int masked = test_and_set_mask(evtchn);
++
++              clear_evtchn(evtchn);
++
++              irq_move_masked_irq(data);
++
++              if (!masked)
++                      unmask_evtchn(evtchn);
++      } else
+               clear_evtchn(evtchn);
+ }
+ 
+diff --git a/fs/btrfs/transaction.c b/fs/btrfs/transaction.c
+index 7dce00b91a71..240019f36b2a 100644
+--- a/fs/btrfs/transaction.c
++++ b/fs/btrfs/transaction.c
+@@ -723,7 +723,7 @@ static int __btrfs_end_transaction(struct 
btrfs_trans_handle *trans,
+ 
+       if (!list_empty(&trans->ordered)) {
+               spin_lock(&info->trans_lock);
+-              list_splice(&trans->ordered, &cur_trans->pending_ordered);
++              list_splice_init(&trans->ordered, &cur_trans->pending_ordered);
+               spin_unlock(&info->trans_lock);
+       }
+ 
+@@ -1732,7 +1732,7 @@ int btrfs_commit_transaction(struct btrfs_trans_handle 
*trans,
+       }
+ 
+       spin_lock(&root->fs_info->trans_lock);
+-      list_splice(&trans->ordered, &cur_trans->pending_ordered);
++      list_splice_init(&trans->ordered, &cur_trans->pending_ordered);
+       if (cur_trans->state >= TRANS_STATE_COMMIT_START) {
+               spin_unlock(&root->fs_info->trans_lock);
+               atomic_inc(&cur_trans->use_count);
+diff --git a/fs/btrfs/tree-log.c b/fs/btrfs/tree-log.c
+index 3b68c75eccea..f6c20cf6090e 100644
+--- a/fs/btrfs/tree-log.c
++++ b/fs/btrfs/tree-log.c
+@@ -3929,6 +3929,308 @@ static int logged_inode_size(struct btrfs_root *log, 
struct inode *inode,
+       return 0;
+ }
+ 
++/*
++ * At the moment we always log all xattrs. This is to figure out at log replay
++ * time which xattrs must have their deletion replayed. If a xattr is missing
++ * in the log tree and exists in the fs/subvol tree, we delete it. This is
++ * because if a xattr is deleted, the inode is fsynced and a power failure
++ * happens, causing the log to be replayed the next time the fs is mounted,
++ * we want the xattr to not exist anymore (same behaviour as other filesystems
++ * with a journal, ext3/4, xfs, f2fs, etc).
++ */
++static int btrfs_log_all_xattrs(struct btrfs_trans_handle *trans,
++                              struct btrfs_root *root,
++                              struct inode *inode,
++                              struct btrfs_path *path,
++                              struct btrfs_path *dst_path)
++{
++      int ret;
++      struct btrfs_key key;
++      const u64 ino = btrfs_ino(inode);
++      int ins_nr = 0;
++      int start_slot = 0;
++
++      key.objectid = ino;
++      key.type = BTRFS_XATTR_ITEM_KEY;
++      key.offset = 0;
++
++      ret = btrfs_search_slot(NULL, root, &key, path, 0, 0);
++      if (ret < 0)
++              return ret;
++
++      while (true) {
++              int slot = path->slots[0];
++              struct extent_buffer *leaf = path->nodes[0];
++              int nritems = btrfs_header_nritems(leaf);
++
++              if (slot >= nritems) {
++                      if (ins_nr > 0) {
++                              u64 last_extent = 0;
++
++                              ret = copy_items(trans, inode, dst_path, path,
++                                               &last_extent, start_slot,
++                                               ins_nr, 1, 0);
++                              /* can't be 1, extent items aren't processed */
++                              ASSERT(ret <= 0);
++                              if (ret < 0)
++                                      return ret;
++                              ins_nr = 0;
++                      }
++                      ret = btrfs_next_leaf(root, path);
++                      if (ret < 0)
++                              return ret;
++                      else if (ret > 0)
++                              break;
++                      continue;
++              }
++
++              btrfs_item_key_to_cpu(leaf, &key, slot);
++              if (key.objectid != ino || key.type != BTRFS_XATTR_ITEM_KEY)
++                      break;
++
++              if (ins_nr == 0)
++                      start_slot = slot;
++              ins_nr++;
++              path->slots[0]++;
++              cond_resched();
++      }
++      if (ins_nr > 0) {
++              u64 last_extent = 0;
++
++              ret = copy_items(trans, inode, dst_path, path,
++                               &last_extent, start_slot,
++                               ins_nr, 1, 0);
++              /* can't be 1, extent items aren't processed */
++              ASSERT(ret <= 0);
++              if (ret < 0)
++                      return ret;
++      }
++
++      return 0;
++}
++
++/*
++ * If the no holes feature is enabled we need to make sure any hole between 
the
++ * last extent and the i_size of our inode is explicitly marked in the log. 
This
++ * is to make sure that doing something like:
++ *
++ *      1) create file with 128Kb of data
++ *      2) truncate file to 64Kb
++ *      3) truncate file to 256Kb
++ *      4) fsync file
++ *      5) <crash/power failure>
++ *      6) mount fs and trigger log replay
++ *
++ * Will give us a file with a size of 256Kb, the first 64Kb of data match what
++ * the file had in its first 64Kb of data at step 1 and the last 192Kb of the
++ * file correspond to a hole. The presence of explicit holes in a log tree is
++ * what guarantees that log replay will remove/adjust file extent items in the
++ * fs/subvol tree.
++ *
++ * Here we do not need to care about holes between extents, that is already 
done
++ * by copy_items(). We also only need to do this in the full sync path, where 
we
++ * lookup for extents from the fs/subvol tree only. In the fast path case, we
++ * lookup the list of modified extent maps and if any represents a hole, we
++ * insert a corresponding extent representing a hole in the log tree.
++ */
++static int btrfs_log_trailing_hole(struct btrfs_trans_handle *trans,
++                                 struct btrfs_root *root,
++                                 struct inode *inode,
++                                 struct btrfs_path *path)
++{
++      int ret;
++      struct btrfs_key key;
++      u64 hole_start;
++      u64 hole_size;
++      struct extent_buffer *leaf;
++      struct btrfs_root *log = root->log_root;
++      const u64 ino = btrfs_ino(inode);
++      const u64 i_size = i_size_read(inode);
++
++      if (!btrfs_fs_incompat(root->fs_info, NO_HOLES))
++              return 0;
++
++      key.objectid = ino;
++      key.type = BTRFS_EXTENT_DATA_KEY;
++      key.offset = (u64)-1;
++
++      ret = btrfs_search_slot(NULL, root, &key, path, 0, 0);
++      ASSERT(ret != 0);
++      if (ret < 0)
++              return ret;
++
++      ASSERT(path->slots[0] > 0);
++      path->slots[0]--;
++      leaf = path->nodes[0];
++      btrfs_item_key_to_cpu(leaf, &key, path->slots[0]);
++
++      if (key.objectid != ino || key.type != BTRFS_EXTENT_DATA_KEY) {
++              /* inode does not have any extents */
++              hole_start = 0;
++              hole_size = i_size;
++      } else {
++              struct btrfs_file_extent_item *extent;
++              u64 len;
++
++              /*
++               * If there's an extent beyond i_size, an explicit hole was
++               * already inserted by copy_items().
++               */
++              if (key.offset >= i_size)
++                      return 0;
++
++              extent = btrfs_item_ptr(leaf, path->slots[0],
++                                      struct btrfs_file_extent_item);
++
++              if (btrfs_file_extent_type(leaf, extent) ==
++                  BTRFS_FILE_EXTENT_INLINE) {
++                      len = btrfs_file_extent_inline_len(leaf,
++                                                         path->slots[0],
++                                                         extent);
++                      ASSERT(len == i_size);
++                      return 0;
++              }
++
++              len = btrfs_file_extent_num_bytes(leaf, extent);
++              /* Last extent goes beyond i_size, no need to log a hole. */
++              if (key.offset + len > i_size)
++                      return 0;
++              hole_start = key.offset + len;
++              hole_size = i_size - hole_start;
++      }
++      btrfs_release_path(path);
++
++      /* Last extent ends at i_size. */
++      if (hole_size == 0)
++              return 0;
++
++      hole_size = ALIGN(hole_size, root->sectorsize);
++      ret = btrfs_insert_file_extent(trans, log, ino, hole_start, 0, 0,
++                                     hole_size, 0, hole_size, 0, 0, 0);
++      return ret;
++}
++
++/*
++ * When we are logging a new inode X, check if it doesn't have a reference 
that
++ * matches the reference from some other inode Y created in a past transaction
++ * and that was renamed in the current transaction. If we don't do this, then 
at
++ * log replay time we can lose inode Y (and all its files if it's a 
directory):
++ *
++ * mkdir /mnt/x
++ * echo "hello world" > /mnt/x/foobar
++ * sync
++ * mv /mnt/x /mnt/y
++ * mkdir /mnt/x                 # or touch /mnt/x
++ * xfs_io -c fsync /mnt/x
++ * <power fail>
++ * mount fs, trigger log replay
++ *
++ * After the log replay procedure, we would lose the first directory and all 
its
++ * files (file foobar).
++ * For the case where inode Y is not a directory we simply end up losing it:
++ *
++ * echo "123" > /mnt/foo
++ * sync
++ * mv /mnt/foo /mnt/bar
++ * echo "abc" > /mnt/foo
++ * xfs_io -c fsync /mnt/foo
++ * <power fail>
++ *
++ * We also need this for cases where a snapshot entry is replaced by some 
other
++ * entry (file or directory) otherwise we end up with an unreplayable log due 
to
++ * attempts to delete the snapshot entry (entry of type BTRFS_ROOT_ITEM_KEY) 
as
++ * if it were a regular entry:
++ *
++ * mkdir /mnt/x
++ * btrfs subvolume snapshot /mnt /mnt/x/snap
++ * btrfs subvolume delete /mnt/x/snap
++ * rmdir /mnt/x
++ * mkdir /mnt/x
++ * fsync /mnt/x or fsync some new file inside it
++ * <power fail>
++ *
++ * The snapshot delete, rmdir of x, mkdir of a new x and the fsync all happen 
in
++ * the same transaction.
++ */
++static int btrfs_check_ref_name_override(struct extent_buffer *eb,
++                                       const int slot,
++                                       const struct btrfs_key *key,
++                                       struct inode *inode)
++{
++      int ret;
++      struct btrfs_path *search_path;
++      char *name = NULL;
++      u32 name_len = 0;
++      u32 item_size = btrfs_item_size_nr(eb, slot);
++      u32 cur_offset = 0;
++      unsigned long ptr = btrfs_item_ptr_offset(eb, slot);
++
++      search_path = btrfs_alloc_path();
++      if (!search_path)
++              return -ENOMEM;
++      search_path->search_commit_root = 1;
++      search_path->skip_locking = 1;
++
++      while (cur_offset < item_size) {
++              u64 parent;
++              u32 this_name_len;
++              u32 this_len;
++              unsigned long name_ptr;
++              struct btrfs_dir_item *di;
++
++              if (key->type == BTRFS_INODE_REF_KEY) {
++                      struct btrfs_inode_ref *iref;
++
++                      iref = (struct btrfs_inode_ref *)(ptr + cur_offset);
++                      parent = key->offset;
++                      this_name_len = btrfs_inode_ref_name_len(eb, iref);
++                      name_ptr = (unsigned long)(iref + 1);
++                      this_len = sizeof(*iref) + this_name_len;
++              } else {
++                      struct btrfs_inode_extref *extref;
++
++                      extref = (struct btrfs_inode_extref *)(ptr +
++                                                             cur_offset);
++                      parent = btrfs_inode_extref_parent(eb, extref);
++                      this_name_len = btrfs_inode_extref_name_len(eb, extref);
++                      name_ptr = (unsigned long)&extref->name;
++                      this_len = sizeof(*extref) + this_name_len;
++              }
++
++              if (this_name_len > name_len) {
++                      char *new_name;
++
++                      new_name = krealloc(name, this_name_len, GFP_NOFS);
++                      if (!new_name) {
++                              ret = -ENOMEM;
++                              goto out;
++                      }
++                      name_len = this_name_len;
++                      name = new_name;
++              }
++
++              read_extent_buffer(eb, name, name_ptr, this_name_len);
++              di = btrfs_lookup_dir_item(NULL, BTRFS_I(inode)->root,
++                                         search_path, parent,
++                                         name, this_name_len, 0);
++              if (di && !IS_ERR(di)) {
++                      ret = 1;
++                      goto out;
++              } else if (IS_ERR(di)) {
++                      ret = PTR_ERR(di);
++                      goto out;
++              }
++              btrfs_release_path(search_path);
++
++              cur_offset += this_len;
++      }
++      ret = 0;
++out:
++      btrfs_free_path(search_path);
++      kfree(name);
++      return ret;
++}
++
+ /* log a single inode in the tree log.
+  * At least one parent directory for this inode must exist in the tree
+  * or be logged already.
+@@ -3967,6 +4269,7 @@ static int btrfs_log_inode(struct btrfs_trans_handle 
*trans,
+       u64 ino = btrfs_ino(inode);
+       struct extent_map_tree *em_tree = &BTRFS_I(inode)->extent_tree;
+       u64 logged_isize = 0;
++      bool need_log_inode_item = true;
+ 
+       path = btrfs_alloc_path();
+       if (!path)
+@@ -4056,11 +4359,6 @@ static int btrfs_log_inode(struct btrfs_trans_handle 
*trans,
+               } else {
+                       if (inode_only == LOG_INODE_ALL)
+                               fast_search = true;
+-                      ret = log_inode_item(trans, log, dst_path, inode);
+-                      if (ret) {
+-                              err = ret;
+-                              goto out_unlock;
+-                      }
+                       goto log_extents;
+               }
+ 
+@@ -4083,6 +4381,44 @@ again:
+               if (min_key.type > max_key.type)
+                       break;
+ 
++              if (min_key.type == BTRFS_INODE_ITEM_KEY)
++                      need_log_inode_item = false;
++
++              if ((min_key.type == BTRFS_INODE_REF_KEY ||
++                   min_key.type == BTRFS_INODE_EXTREF_KEY) &&
++                  BTRFS_I(inode)->generation == trans->transid) {
++                      ret = btrfs_check_ref_name_override(path->nodes[0],
++                                                          path->slots[0],
++                                                          &min_key, inode);
++                      if (ret < 0) {
++                              err = ret;
++                              goto out_unlock;
++                      } else if (ret > 0) {
++                              err = 1;
++                              btrfs_set_log_full_commit(root->fs_info, trans);
++                              goto out_unlock;
++                      }
++              }
++
++              /* Skip xattrs, we log them later with btrfs_log_all_xattrs() */
++              if (min_key.type == BTRFS_XATTR_ITEM_KEY) {
++                      if (ins_nr == 0)
++                              goto next_slot;
++                      ret = copy_items(trans, inode, dst_path, path,
++                                       &last_extent, ins_start_slot,
++                                       ins_nr, inode_only, logged_isize);
++                      if (ret < 0) {
++                              err = ret;
++                              goto out_unlock;
++                      }
++                      ins_nr = 0;
++                      if (ret) {
++                              btrfs_release_path(path);
++                              continue;
++                      }
++                      goto next_slot;
++              }
++
+               src = path->nodes[0];
+               if (ins_nr && ins_start_slot + ins_nr == path->slots[0]) {
+                       ins_nr++;
+@@ -4150,9 +4486,26 @@ next_slot:
+               ins_nr = 0;
+       }
+ 
++      btrfs_release_path(path);
++      btrfs_release_path(dst_path);
++      err = btrfs_log_all_xattrs(trans, root, inode, path, dst_path);
++      if (err)
++              goto out_unlock;
++      if (max_key.type >= BTRFS_EXTENT_DATA_KEY && !fast_search) {
++              btrfs_release_path(path);
++              btrfs_release_path(dst_path);
++              err = btrfs_log_trailing_hole(trans, root, inode, path);
++              if (err)
++                      goto out_unlock;
++      }
+ log_extents:
+       btrfs_release_path(path);
+       btrfs_release_path(dst_path);
++      if (need_log_inode_item) {
++              err = log_inode_item(trans, log, dst_path, inode);
++              if (err)
++                      goto out_unlock;
++      }
+       if (fast_search) {
+               ret = btrfs_log_changed_extents(trans, root, inode, dst_path,
+                                               &logged_list, ctx);
+diff --git a/fs/ext4/ext4.h b/fs/ext4/ext4.h
+index c55a1faaed58..6ce71e4e82e5 100644
+--- a/fs/ext4/ext4.h
++++ b/fs/ext4/ext4.h
+@@ -811,6 +811,29 @@ do {                                                      
                       \
+ #include "extents_status.h"
+ 
+ /*
++ * Lock subclasses for i_data_sem in the ext4_inode_info structure.
++ *
++ * These are needed to avoid lockdep false positives when we need to
++ * allocate blocks to the quota inode during ext4_map_blocks(), while
++ * holding i_data_sem for a normal (non-quota) inode.  Since we don't
++ * do quota tracking for the quota inode, this avoids deadlock (as
++ * well as infinite recursion, since it isn't turtles all the way
++ * down...)
++ *
++ *  I_DATA_SEM_NORMAL - Used for most inodes
++ *  I_DATA_SEM_OTHER  - Used by move_inode.c for the second normal inode
++ *                      where the second inode has larger inode number
++ *                      than the first
++ *  I_DATA_SEM_QUOTA  - Used for quota inodes only
++ */
++enum {
++      I_DATA_SEM_NORMAL = 0,
++      I_DATA_SEM_OTHER,
++      I_DATA_SEM_QUOTA,
++};
++
++
++/*
+  * fourth extended file system inode data in memory
+  */
+ struct ext4_inode_info {
+diff --git a/fs/ext4/move_extent.c b/fs/ext4/move_extent.c
+index f498c34b4688..4d1049517e4a 100644
+--- a/fs/ext4/move_extent.c
++++ b/fs/ext4/move_extent.c
+@@ -60,10 +60,10 @@ ext4_double_down_write_data_sem(struct inode *first, 
struct inode *second)
+ {
+       if (first < second) {
+               down_write(&EXT4_I(first)->i_data_sem);
+-              down_write_nested(&EXT4_I(second)->i_data_sem, 
SINGLE_DEPTH_NESTING);
++              down_write_nested(&EXT4_I(second)->i_data_sem, 
I_DATA_SEM_OTHER);
+       } else {
+               down_write(&EXT4_I(second)->i_data_sem);
+-              down_write_nested(&EXT4_I(first)->i_data_sem, 
SINGLE_DEPTH_NESTING);
++              down_write_nested(&EXT4_I(first)->i_data_sem, I_DATA_SEM_OTHER);
+ 
+       }
+ }
+@@ -491,6 +491,13 @@ mext_check_arguments(struct inode *orig_inode,
+               return -EBUSY;
+       }
+ 
++      if (IS_NOQUOTA(orig_inode) || IS_NOQUOTA(donor_inode)) {
++              ext4_debug("ext4 move extent: The argument files should "
++                      "not be quota files [ino:orig %lu, donor %lu]\n",
++                      orig_inode->i_ino, donor_inode->i_ino);
++              return -EBUSY;
++      }
++
+       /* Ext4 move extent supports only extent based file */
+       if (!(ext4_test_inode_flag(orig_inode, EXT4_INODE_EXTENTS))) {
+               ext4_debug("ext4 move extent: orig file is not extents "
+diff --git a/fs/ext4/super.c b/fs/ext4/super.c
+index b16ba5239dcf..a5d94f263870 100644
+--- a/fs/ext4/super.c
++++ b/fs/ext4/super.c
+@@ -1281,9 +1281,9 @@ static int set_qf_name(struct super_block *sb, int 
qtype, substring_t *args)
+               return -1;
+       }
+       if (EXT4_HAS_RO_COMPAT_FEATURE(sb, EXT4_FEATURE_RO_COMPAT_QUOTA)) {
+-              ext4_msg(sb, KERN_ERR, "Cannot set journaled quota options "
+-                       "when QUOTA feature is enabled");
+-              return -1;
++              ext4_msg(sb, KERN_INFO, "Journaled quota options "
++                       "ignored when QUOTA feature is enabled");
++              return 1;
+       }
+       qname = match_strdup(args);
+       if (!qname) {
+@@ -1622,10 +1622,10 @@ static int handle_mount_opt(struct super_block *sb, 
char *opt, int token,
+               }
+               if (EXT4_HAS_RO_COMPAT_FEATURE(sb,
+                                              EXT4_FEATURE_RO_COMPAT_QUOTA)) {
+-                      ext4_msg(sb, KERN_ERR,
+-                               "Cannot set journaled quota options "
++                      ext4_msg(sb, KERN_INFO,
++                               "Quota format mount options ignored "
+                                "when QUOTA feature is enabled");
+-                      return -1;
++                      return 1;
+               }
+               sbi->s_jquota_fmt = m->mount_opt;
+ #endif
+@@ -1677,11 +1677,11 @@ static int parse_options(char *options, struct 
super_block *sb,
+ #ifdef CONFIG_QUOTA
+       if (EXT4_HAS_RO_COMPAT_FEATURE(sb, EXT4_FEATURE_RO_COMPAT_QUOTA) &&
+           (test_opt(sb, USRQUOTA) || test_opt(sb, GRPQUOTA))) {
+-              ext4_msg(sb, KERN_ERR, "Cannot set quota options when QUOTA "
+-                       "feature is enabled");
+-              return 0;
+-      }
+-      if (sbi->s_qf_names[USRQUOTA] || sbi->s_qf_names[GRPQUOTA]) {
++              ext4_msg(sb, KERN_INFO, "Quota feature enabled, usrquota and 
grpquota "
++                       "mount options ignored.");
++              clear_opt(sb, USRQUOTA);
++              clear_opt(sb, GRPQUOTA);
++      } else if (sbi->s_qf_names[USRQUOTA] || sbi->s_qf_names[GRPQUOTA]) {
+               if (test_opt(sb, USRQUOTA) && sbi->s_qf_names[USRQUOTA])
+                       clear_opt(sb, USRQUOTA);
+ 
+@@ -5187,6 +5187,20 @@ static int ext4_quota_on_mount(struct super_block *sb, 
int type)
+                                       EXT4_SB(sb)->s_jquota_fmt, type);
+ }
+ 
++static void lockdep_set_quota_inode(struct inode *inode, int subclass)
++{
++      struct ext4_inode_info *ei = EXT4_I(inode);
++
++      /* The first argument of lockdep_set_subclass has to be
++       * *exactly* the same as the argument to init_rwsem() --- in
++       * this case, in init_once() --- or lockdep gets unhappy
++       * because the name of the lock is set using the
++       * stringification of the argument to init_rwsem().
++       */
++      (void) ei;      /* shut up clang warning if !CONFIG_LOCKDEP */
++      lockdep_set_subclass(&ei->i_data_sem, subclass);
++}
++
+ /*
+  * Standard function to be called on quota_on
+  */
+@@ -5226,8 +5240,12 @@ static int ext4_quota_on(struct super_block *sb, int 
type, int format_id,
+               if (err)
+                       return err;
+       }
+-
+-      return dquot_quota_on(sb, type, format_id, path);
++      lockdep_set_quota_inode(path->dentry->d_inode, I_DATA_SEM_QUOTA);
++      err = dquot_quota_on(sb, type, format_id, path);
++      if (err)
++              lockdep_set_quota_inode(path->dentry->d_inode,
++                                           I_DATA_SEM_NORMAL);
++      return err;
+ }
+ 
+ static int ext4_quota_enable(struct super_block *sb, int type, int format_id,
+@@ -5253,8 +5271,11 @@ static int ext4_quota_enable(struct super_block *sb, 
int type, int format_id,
+ 
+       /* Don't account quota for quota files to avoid recursion */
+       qf_inode->i_flags |= S_NOQUOTA;
++      lockdep_set_quota_inode(qf_inode, I_DATA_SEM_QUOTA);
+       err = dquot_enable(qf_inode, type, format_id, flags);
+       iput(qf_inode);
++      if (err)
++              lockdep_set_quota_inode(qf_inode, I_DATA_SEM_NORMAL);
+ 
+       return err;
+ }
+diff --git a/include/linux/compiler-gcc.h b/include/linux/compiler-gcc.h
+index 02ae99e8e6d3..633716ef19b0 100644
+--- a/include/linux/compiler-gcc.h
++++ b/include/linux/compiler-gcc.h
+@@ -100,10 +100,122 @@
+ #define __maybe_unused                        __attribute__((unused))
+ #define __always_unused                       __attribute__((unused))
+ 
+-#define __gcc_header(x) #x
+-#define _gcc_header(x) __gcc_header(linux/compiler-gcc##x.h)
+-#define gcc_header(x) _gcc_header(x)
+-#include gcc_header(__GNUC__)
++/* gcc version specific checks */
++
++#if GCC_VERSION < 30200
++# error Sorry, your compiler is too old - please upgrade it.
++#endif
++
++#if GCC_VERSION < 30300
++# define __used                       __attribute__((__unused__))
++#else
++# define __used                       __attribute__((__used__))
++#endif
++
++#ifdef CONFIG_GCOV_KERNEL
++# if GCC_VERSION < 30400
++#   error "GCOV profiling support for gcc versions below 3.4 not included"
++# endif /* __GNUC_MINOR__ */
++#endif /* CONFIG_GCOV_KERNEL */
++
++#if GCC_VERSION >= 30400
++#define __must_check          __attribute__((warn_unused_result))
++#endif
++
++#if GCC_VERSION >= 40000
++
++/* GCC 4.1.[01] miscompiles __weak */
++#ifdef __KERNEL__
++# if GCC_VERSION >= 40100 &&  GCC_VERSION <= 40101
++#  error Your version of gcc miscompiles the __weak directive
++# endif
++#endif
++
++#define __used                        __attribute__((__used__))
++#define __compiler_offsetof(a, b)                                     \
++      __builtin_offsetof(a, b)
++
++#if GCC_VERSION >= 40100 && GCC_VERSION < 40600
++# define __compiletime_object_size(obj) __builtin_object_size(obj, 0)
++#endif
++
++#if GCC_VERSION >= 40300
++/* Mark functions as cold. gcc will assume any path leading to a call
++ * to them will be unlikely.  This means a lot of manual unlikely()s
++ * are unnecessary now for any paths leading to the usual suspects
++ * like BUG(), printk(), panic() etc. [but let's keep them for now for
++ * older compilers]
++ *
++ * Early snapshots of gcc 4.3 don't support this and we can't detect this
++ * in the preprocessor, but we can live with this because they're unreleased.
++ * Maketime probing would be overkill here.
++ *
++ * gcc also has a __attribute__((__hot__)) to move hot functions into
++ * a special section, but I don't see any sense in this right now in
++ * the kernel context
++ */
++#define __cold                        __attribute__((__cold__))
++
++#define __UNIQUE_ID(prefix) __PASTE(__PASTE(__UNIQUE_ID_, prefix), 
__COUNTER__)
++
++#ifndef __CHECKER__
++# define __compiletime_warning(message) __attribute__((warning(message)))
++# define __compiletime_error(message) __attribute__((error(message)))
++#endif /* __CHECKER__ */
++#endif /* GCC_VERSION >= 40300 */
++
++#if GCC_VERSION >= 40500
++/*
++ * Mark a position in code as unreachable.  This can be used to
++ * suppress control flow warnings after asm blocks that transfer
++ * control elsewhere.
++ *
++ * Early snapshots of gcc 4.5 don't support this and we can't detect
++ * this in the preprocessor, but we can live with this because they're
++ * unreleased.  Really, we need to have autoconf for the kernel.
++ */
++#define unreachable() __builtin_unreachable()
++
++/* Mark a function definition as prohibited from being cloned. */
++#define __noclone     __attribute__((__noclone__, __optimize__("no-tracer")))
++
++#endif /* GCC_VERSION >= 40500 */
++
++#if GCC_VERSION >= 40600
++/*
++ * Tell the optimizer that something else uses this function or variable.
++ */
++#define __visible     __attribute__((externally_visible))
++#endif
++
++/*
++ * GCC 'asm goto' miscompiles certain code sequences:
++ *
++ *   http://gcc.gnu.org/bugzilla/show_bug.cgi?id=58670
++ *
++ * Work it around via a compiler barrier quirk suggested by Jakub Jelinek.
++ *
++ * (asm goto is automatically volatile - the naming reflects this.)
++ */
++#define asm_volatile_goto(x...)       do { asm goto(x); asm (""); } while (0)
++
++#ifdef CONFIG_ARCH_USE_BUILTIN_BSWAP
++#if GCC_VERSION >= 40400
++#define __HAVE_BUILTIN_BSWAP32__
++#define __HAVE_BUILTIN_BSWAP64__
++#endif
++#if GCC_VERSION >= 40800 || (defined(__powerpc__) && GCC_VERSION >= 40600)
++#define __HAVE_BUILTIN_BSWAP16__
++#endif
++#endif /* CONFIG_ARCH_USE_BUILTIN_BSWAP */
++
++#if GCC_VERSION >= 50000
++#define KASAN_ABI_VERSION 4
++#elif GCC_VERSION >= 40902
++#define KASAN_ABI_VERSION 3
++#endif
++
++#endif        /* gcc version >= 40000 specific checks */
+ 
+ #if !defined(__noclone)
+ #define __noclone     /* not needed */
+diff --git a/include/linux/compiler-gcc3.h b/include/linux/compiler-gcc3.h
+deleted file mode 100644
+index 7d89febe4d79..000000000000
+--- a/include/linux/compiler-gcc3.h
++++ /dev/null
+@@ -1,23 +0,0 @@
+-#ifndef __LINUX_COMPILER_H
+-#error "Please don't include <linux/compiler-gcc3.h> directly, include 
<linux/compiler.h> instead."
+-#endif
+-
+-#if GCC_VERSION < 30200
+-# error Sorry, your compiler is too old - please upgrade it.
+-#endif
+-
+-#if GCC_VERSION >= 30300
+-# define __used                       __attribute__((__used__))
+-#else
+-# define __used                       __attribute__((__unused__))
+-#endif
+-
+-#if GCC_VERSION >= 30400
+-#define __must_check          __attribute__((warn_unused_result))
+-#endif
+-
+-#ifdef CONFIG_GCOV_KERNEL
+-# if GCC_VERSION < 30400
+-#   error "GCOV profiling support for gcc versions below 3.4 not included"
+-# endif /* __GNUC_MINOR__ */
+-#endif /* CONFIG_GCOV_KERNEL */
+diff --git a/include/linux/compiler-gcc4.h b/include/linux/compiler-gcc4.h
+deleted file mode 100644
+index d1a558239b1a..000000000000
+--- a/include/linux/compiler-gcc4.h
++++ /dev/null
+@@ -1,87 +0,0 @@
+-#ifndef __LINUX_COMPILER_H
+-#error "Please don't include <linux/compiler-gcc4.h> directly, include 
<linux/compiler.h> instead."
+-#endif
+-
+-/* GCC 4.1.[01] miscompiles __weak */
+-#ifdef __KERNEL__
+-# if GCC_VERSION >= 40100 &&  GCC_VERSION <= 40101
+-#  error Your version of gcc miscompiles the __weak directive
+-# endif
+-#endif
+-
+-#define __used                        __attribute__((__used__))
+-#define __must_check          __attribute__((warn_unused_result))
+-#define __compiler_offsetof(a,b) __builtin_offsetof(a,b)
+-
+-#if GCC_VERSION >= 40100 && GCC_VERSION < 40600
+-# define __compiletime_object_size(obj) __builtin_object_size(obj, 0)
+-#endif
+-
+-#if GCC_VERSION >= 40300
+-/* Mark functions as cold. gcc will assume any path leading to a call
+-   to them will be unlikely.  This means a lot of manual unlikely()s
+-   are unnecessary now for any paths leading to the usual suspects
+-   like BUG(), printk(), panic() etc. [but let's keep them for now for
+-   older compilers]
+-
+-   Early snapshots of gcc 4.3 don't support this and we can't detect this
+-   in the preprocessor, but we can live with this because they're unreleased.
+-   Maketime probing would be overkill here.
+-
+-   gcc also has a __attribute__((__hot__)) to move hot functions into
+-   a special section, but I don't see any sense in this right now in
+-   the kernel context */
+-#define __cold                        __attribute__((__cold__))
+-
+-#define __UNIQUE_ID(prefix) __PASTE(__PASTE(__UNIQUE_ID_, prefix), 
__COUNTER__)
+-
+-#ifndef __CHECKER__
+-# define __compiletime_warning(message) __attribute__((warning(message)))
+-# define __compiletime_error(message) __attribute__((error(message)))
+-#endif /* __CHECKER__ */
+-#endif /* GCC_VERSION >= 40300 */
+-
+-#if GCC_VERSION >= 40500
+-/*
+- * Mark a position in code as unreachable.  This can be used to
+- * suppress control flow warnings after asm blocks that transfer
+- * control elsewhere.
+- *
+- * Early snapshots of gcc 4.5 don't support this and we can't detect
+- * this in the preprocessor, but we can live with this because they're
+- * unreleased.  Really, we need to have autoconf for the kernel.
+- */
+-#define unreachable() __builtin_unreachable()
+-
+-/* Mark a function definition as prohibited from being cloned. */
+-#define __noclone     __attribute__((__noclone__))
+-
+-#endif /* GCC_VERSION >= 40500 */
+-
+-#if GCC_VERSION >= 40600
+-/*
+- * Tell the optimizer that something else uses this function or variable.
+- */
+-#define __visible __attribute__((externally_visible))
+-#endif
+-
+-/*
+- * GCC 'asm goto' miscompiles certain code sequences:
+- *
+- *   http://gcc.gnu.org/bugzilla/show_bug.cgi?id=58670
+- *
+- * Work it around via a compiler barrier quirk suggested by Jakub Jelinek.
+- *
+- * (asm goto is automatically volatile - the naming reflects this.)
+- */
+-#define asm_volatile_goto(x...)       do { asm goto(x); asm (""); } while (0)
+-
+-#ifdef CONFIG_ARCH_USE_BUILTIN_BSWAP
+-#if GCC_VERSION >= 40400
+-#define __HAVE_BUILTIN_BSWAP32__
+-#define __HAVE_BUILTIN_BSWAP64__
+-#endif
+-#if GCC_VERSION >= 40800 || (defined(__powerpc__) && GCC_VERSION >= 40600)
+-#define __HAVE_BUILTIN_BSWAP16__
+-#endif
+-#endif /* CONFIG_ARCH_USE_BUILTIN_BSWAP */
+diff --git a/include/linux/compiler-gcc5.h b/include/linux/compiler-gcc5.h
+deleted file mode 100644
+index c8c565952548..000000000000
+--- a/include/linux/compiler-gcc5.h
++++ /dev/null
+@@ -1,65 +0,0 @@
+-#ifndef __LINUX_COMPILER_H
+-#error "Please don't include <linux/compiler-gcc5.h> directly, include 
<linux/compiler.h> instead."
+-#endif
+-
+-#define __used                                __attribute__((__used__))
+-#define __must_check                  __attribute__((warn_unused_result))
+-#define __compiler_offsetof(a, b)     __builtin_offsetof(a, b)
+-
+-/* Mark functions as cold. gcc will assume any path leading to a call
+-   to them will be unlikely.  This means a lot of manual unlikely()s
+-   are unnecessary now for any paths leading to the usual suspects
+-   like BUG(), printk(), panic() etc. [but let's keep them for now for
+-   older compilers]
+-
+-   Early snapshots of gcc 4.3 don't support this and we can't detect this
+-   in the preprocessor, but we can live with this because they're unreleased.
+-   Maketime probing would be overkill here.
+-
+-   gcc also has a __attribute__((__hot__)) to move hot functions into
+-   a special section, but I don't see any sense in this right now in
+-   the kernel context */
+-#define __cold                        __attribute__((__cold__))
+-
+-#define __UNIQUE_ID(prefix) __PASTE(__PASTE(__UNIQUE_ID_, prefix), 
__COUNTER__)
+-
+-#ifndef __CHECKER__
+-# define __compiletime_warning(message) __attribute__((warning(message)))
+-# define __compiletime_error(message) __attribute__((error(message)))
+-#endif /* __CHECKER__ */
+-
+-/*
+- * Mark a position in code as unreachable.  This can be used to
+- * suppress control flow warnings after asm blocks that transfer
+- * control elsewhere.
+- *
+- * Early snapshots of gcc 4.5 don't support this and we can't detect
+- * this in the preprocessor, but we can live with this because they're
+- * unreleased.  Really, we need to have autoconf for the kernel.
+- */
+-#define unreachable() __builtin_unreachable()
+-
+-/* Mark a function definition as prohibited from being cloned. */
+-#define __noclone     __attribute__((__noclone__))
+-
+-/*
+- * Tell the optimizer that something else uses this function or variable.
+- */
+-#define __visible __attribute__((externally_visible))
+-
+-/*
+- * GCC 'asm goto' miscompiles certain code sequences:
+- *
+- *   http://gcc.gnu.org/bugzilla/show_bug.cgi?id=58670
+- *
+- * Work it around via a compiler barrier quirk suggested by Jakub Jelinek.
+- *
+- * (asm goto is automatically volatile - the naming reflects this.)
+- */
+-#define asm_volatile_goto(x...)       do { asm goto(x); asm (""); } while (0)
+-
+-#ifdef CONFIG_ARCH_USE_BUILTIN_BSWAP
+-#define __HAVE_BUILTIN_BSWAP32__
+-#define __HAVE_BUILTIN_BSWAP64__
+-#define __HAVE_BUILTIN_BSWAP16__
+-#endif /* CONFIG_ARCH_USE_BUILTIN_BSWAP */
+diff --git a/include/linux/usb_usual.h b/include/linux/usb_usual.h
+index 7f5f78bd15ad..245f57dbbb61 100644
+--- a/include/linux/usb_usual.h
++++ b/include/linux/usb_usual.h
+@@ -79,6 +79,8 @@
+               /* Cannot handle MI_REPORT_SUPPORTED_OPERATION_CODES */ \
+       US_FLAG(MAX_SECTORS_240,        0x08000000)             \
+               /* Sets max_sectors to 240 */                   \
++      US_FLAG(NO_REPORT_LUNS, 0x10000000)                     \
++              /* Cannot handle REPORT_LUNS */                 \
+ 
+ #define US_FLAG(name, value)  US_FL_##name = value ,
+ enum { US_DO_ALL_FLAGS };
+diff --git a/lib/assoc_array.c b/lib/assoc_array.c
+index 2404d03e251a..03a77f4740c1 100644
+--- a/lib/assoc_array.c
++++ b/lib/assoc_array.c
+@@ -523,7 +523,9 @@ static bool assoc_array_insert_into_terminal_node(struct 
assoc_array_edit *edit,
+                       free_slot = i;
+                       continue;
+               }
+-              if (ops->compare_object(assoc_array_ptr_to_leaf(ptr), 
index_key)) {
++              if (assoc_array_ptr_is_leaf(ptr) &&
++                  ops->compare_object(assoc_array_ptr_to_leaf(ptr),
++                                      index_key)) {
+                       pr_devel("replace in slot %d\n", i);
+                       edit->leaf_p = &node->slots[i];
+                       edit->dead_leaf = node->slots[i];
+diff --git a/lib/lz4/lz4defs.h b/lib/lz4/lz4defs.h
+index abcecdc2d0f2..0710a62ad2f6 100644
+--- a/lib/lz4/lz4defs.h
++++ b/lib/lz4/lz4defs.h
+@@ -11,8 +11,7 @@
+ /*
+  * Detects 64 bits mode
+  */
+-#if (defined(__x86_64__) || defined(__x86_64) || defined(__amd64__) \
+-      || defined(__ppc64__) || defined(__LP64__))
++#if defined(CONFIG_64BIT)
+ #define LZ4_ARCH64 1
+ #else
+ #define LZ4_ARCH64 0
+@@ -35,6 +34,10 @@ typedef struct _U64_S { u64 v; } U64_S;
+ 
+ #define PUT4(s, d) (A32(d) = A32(s))
+ #define PUT8(s, d) (A64(d) = A64(s))
++
++#define LZ4_READ_LITTLEENDIAN_16(d, s, p)     \
++      (d = s - A16(p))
++
+ #define LZ4_WRITE_LITTLEENDIAN_16(p, v)       \
+       do {    \
+               A16(p) = v; \
+@@ -51,10 +54,13 @@ typedef struct _U64_S { u64 v; } U64_S;
+ #define PUT8(s, d) \
+       put_unaligned(get_unaligned((const u64 *) s), (u64 *) d)
+ 
+-#define LZ4_WRITE_LITTLEENDIAN_16(p, v)       \
+-      do {    \
+-              put_unaligned(v, (u16 *)(p)); \
+-              p += 2; \
++#define LZ4_READ_LITTLEENDIAN_16(d, s, p)     \
++      (d = s - get_unaligned_le16(p))
++
++#define LZ4_WRITE_LITTLEENDIAN_16(p, v)                       \
++      do {                                            \
++              put_unaligned_le16(v, (u16 *)(p));      \
++              p += 2;                                 \
+       } while (0)
+ #endif
+ 
+@@ -140,9 +146,6 @@ typedef struct _U64_S { u64 v; } U64_S;
+ 
+ #endif
+ 
+-#define LZ4_READ_LITTLEENDIAN_16(d, s, p) \
+-      (d = s - get_unaligned_le16(p))
+-
+ #define LZ4_WILDCOPY(s, d, e)         \
+       do {                            \
+               LZ4_COPYPACKET(s, d);   \
+diff --git a/net/ipv4/tcp_cubic.c b/net/ipv4/tcp_cubic.c
+index 20de0118c98e..9332ec123a6c 100644
+--- a/net/ipv4/tcp_cubic.c
++++ b/net/ipv4/tcp_cubic.c
+@@ -154,6 +154,27 @@ static void bictcp_init(struct sock *sk)
+               tcp_sk(sk)->snd_ssthresh = initial_ssthresh;
+ }
+ 
++static void bictcp_cwnd_event(struct sock *sk, enum tcp_ca_event event)
++{
++      if (event == CA_EVENT_TX_START) {
++              struct bictcp *ca = inet_csk_ca(sk);
++              u32 now = tcp_time_stamp;
++              s32 delta;
++
++              delta = now - tcp_sk(sk)->lsndtime;
++
++              /* We were application limited (idle) for a while.
++               * Shift epoch_start to keep cwnd growth to cubic curve.
++               */
++              if (ca->epoch_start && delta > 0) {
++                      ca->epoch_start += delta;
++                      if (after(ca->epoch_start, now))
++                              ca->epoch_start = now;
++              }
++              return;
++      }
++}
++
+ /* calculate the cubic root of x using a table lookup followed by one
+  * Newton-Raphson iteration.
+  * Avg err ~= 0.195%
+@@ -440,6 +461,7 @@ static struct tcp_congestion_ops cubictcp __read_mostly = {
+       .cong_avoid     = bictcp_cong_avoid,
+       .set_state      = bictcp_state,
+       .undo_cwnd      = bictcp_undo_cwnd,
++      .cwnd_event     = bictcp_cwnd_event,
+       .pkts_acked     = bictcp_acked,
+       .owner          = THIS_MODULE,
+       .name           = "cubic",
+diff --git a/sound/pci/hda/patch_realtek.c b/sound/pci/hda/patch_realtek.c
+index 1bc0be907ead..c3c8337c4ea2 100644
+--- a/sound/pci/hda/patch_realtek.c
++++ b/sound/pci/hda/patch_realtek.c
+@@ -4644,6 +4644,7 @@ enum {
+       ALC255_FIXUP_DELL_SPK_NOISE,
+       ALC225_FIXUP_DELL1_MIC_NO_PRESENCE,
+       ALC280_FIXUP_HP_HEADSET_MIC,
++      ALC221_FIXUP_HP_FRONT_MIC,
+ };
+ 
+ static const struct hda_fixup alc269_fixups[] = {
+@@ -5256,6 +5257,13 @@ static const struct hda_fixup alc269_fixups[] = {
+               .chained = true,
+               .chain_id = ALC269_FIXUP_HEADSET_MIC,
+       },
++      [ALC221_FIXUP_HP_FRONT_MIC] = {
++              .type = HDA_FIXUP_PINS,
++              .v.pins = (const struct hda_pintbl[]) {
++                      { 0x19, 0x02a19020 }, /* Front Mic */
++                      { }
++              },
++      },
+ };
+ 
+ static const struct snd_pci_quirk alc269_fixup_tbl[] = {
+@@ -5345,6 +5353,7 @@ static const struct snd_pci_quirk alc269_fixup_tbl[] = {
+       SND_PCI_QUIRK(0x103c, 0x2336, "HP", ALC269_FIXUP_HP_MUTE_LED_MIC1),
+       SND_PCI_QUIRK(0x103c, 0x2337, "HP", ALC269_FIXUP_HP_MUTE_LED_MIC1),
+       SND_PCI_QUIRK(0x103c, 0x221c, "HP EliteBook 755 G2", 
ALC280_FIXUP_HP_HEADSET_MIC),
++      SND_PCI_QUIRK(0x103c, 0x8256, "HP", ALC221_FIXUP_HP_FRONT_MIC),
+       SND_PCI_QUIRK(0x1043, 0x103f, "ASUS TX300", ALC282_FIXUP_ASUS_TX300),
+       SND_PCI_QUIRK(0x1043, 0x106d, "Asus K53BE", 
ALC269_FIXUP_LIMIT_INT_MIC_BOOST),
+       SND_PCI_QUIRK(0x1043, 0x115d, "Asus 1015E", 
ALC269_FIXUP_LIMIT_INT_MIC_BOOST),
+diff --git a/sound/usb/mixer_maps.c b/sound/usb/mixer_maps.c
+index 9a3e1076a5b1..c758638df9f7 100644
+--- a/sound/usb/mixer_maps.c
++++ b/sound/usb/mixer_maps.c
+@@ -351,6 +351,16 @@ static struct usbmix_name_map dragonfly_1_2_map[] = {
+ };
+ 
+ /*
++ * Dell usb dock with ALC4020 codec had a firmware problem where it got
++ * screwed up when zero volume is passed; just skip it as a workaround
++ */
++static const struct usbmix_name_map dell_alc4020_map[] = {
++      { 16, NULL },
++      { 19, NULL },
++      { 0 }
++};
++
++/*
+  * Control map entries
+  */
+ 
+@@ -433,6 +443,10 @@ static struct usbmix_ctl_map usbmix_ctl_maps[] = {
+               .map = aureon_51_2_map,
+       },
+       {
++              .id = USB_ID(0x0bda, 0x4014),
++              .map = dell_alc4020_map,
++      },
++      {
+               .id = USB_ID(0x13e5, 0x0001),
+               .map = scratch_live_map,
+               .ignore_ctl_error = 1,
+diff --git a/sound/usb/quirks.c b/sound/usb/quirks.c
+index 7da345b0cdaf..c7f5ff4d8f98 100644
+--- a/sound/usb/quirks.c
++++ b/sound/usb/quirks.c
+@@ -1118,8 +1118,12 @@ bool snd_usb_get_sample_rate_quirk(struct snd_usb_audio 
*chip)
+       case USB_ID(0x045E, 0x076F): /* MS Lifecam HD-6000 */
+       case USB_ID(0x045E, 0x0772): /* MS Lifecam Studio */
+       case USB_ID(0x045E, 0x0779): /* MS Lifecam HD-3000 */
++      case USB_ID(0x047F, 0x0415): /* Plantronics BT-300 */
+       case USB_ID(0x047F, 0xAA05): /* Plantronics DA45 */
+       case USB_ID(0x04D8, 0xFEEA): /* Benchmark DAC1 Pre */
++      case USB_ID(0x074D, 0x3553): /* Outlaw RR2150 (Micronas UAC3553B) */
++      case USB_ID(0x1de7, 0x0014): /* Phoenix Audio TMX320 */
++      case USB_ID(0x21B4, 0x0081): /* AudioQuest DragonFly */
+               return true;
+       }
+       return false;

diff --git a/1032_linux-3.18.33.patch b/1032_linux-3.18.33.patch
new file mode 100644
index 0000000..a91229b
--- /dev/null
+++ b/1032_linux-3.18.33.patch
@@ -0,0 +1,390 @@
+diff --git a/Makefile b/Makefile
+index 7a79cf89bf17..59d0737f9524 100644
+--- a/Makefile
++++ b/Makefile
+@@ -1,6 +1,6 @@
+ VERSION = 3
+ PATCHLEVEL = 18
+-SUBLEVEL = 32
++SUBLEVEL = 33
+ EXTRAVERSION =
+ NAME = Diseased Newt
+ 
+diff --git a/arch/powerpc/include/uapi/asm/cputable.h 
b/arch/powerpc/include/uapi/asm/cputable.h
+index de2c0e4ee1aa..67de80a8e178 100644
+--- a/arch/powerpc/include/uapi/asm/cputable.h
++++ b/arch/powerpc/include/uapi/asm/cputable.h
+@@ -31,6 +31,7 @@
+ #define PPC_FEATURE_PSERIES_PERFMON_COMPAT \
+                                       0x00000040
+ 
++/* Reserved - do not use              0x00000004 */
+ #define PPC_FEATURE_TRUE_LE           0x00000002
+ #define PPC_FEATURE_PPC_LE            0x00000001
+ 
+diff --git a/arch/powerpc/kernel/prom.c b/arch/powerpc/kernel/prom.c
+index 099f27e6d1b0..d2804fd65c4b 100644
+--- a/arch/powerpc/kernel/prom.c
++++ b/arch/powerpc/kernel/prom.c
+@@ -149,17 +149,24 @@ static struct ibm_pa_feature {
+       unsigned long   cpu_features;   /* CPU_FTR_xxx bit */
+       unsigned long   mmu_features;   /* MMU_FTR_xxx bit */
+       unsigned int    cpu_user_ftrs;  /* PPC_FEATURE_xxx bit */
++      unsigned int    cpu_user_ftrs2; /* PPC_FEATURE2_xxx bit */
+       unsigned char   pabyte;         /* byte number in ibm,pa-features */
+       unsigned char   pabit;          /* bit number (big-endian) */
+       unsigned char   invert;         /* if 1, pa bit set => clear feature */
+ } ibm_pa_features[] __initdata = {
+-      {0, 0, PPC_FEATURE_HAS_MMU,     0, 0, 0},
+-      {0, 0, PPC_FEATURE_HAS_FPU,     0, 1, 0},
+-      {CPU_FTR_CTRL, 0, 0,            0, 3, 0},
+-      {CPU_FTR_NOEXECUTE, 0, 0,       0, 6, 0},
+-      {CPU_FTR_NODSISRALIGN, 0, 0,    1, 1, 1},
+-      {0, MMU_FTR_CI_LARGE_PAGE, 0,   1, 2, 0},
+-      {CPU_FTR_REAL_LE, PPC_FEATURE_TRUE_LE, 5, 0, 0},
++      {0, 0, PPC_FEATURE_HAS_MMU, 0,          0, 0, 0},
++      {0, 0, PPC_FEATURE_HAS_FPU, 0,          0, 1, 0},
++      {CPU_FTR_CTRL, 0, 0, 0,                 0, 3, 0},
++      {CPU_FTR_NOEXECUTE, 0, 0, 0,            0, 6, 0},
++      {CPU_FTR_NODSISRALIGN, 0, 0, 0,         1, 1, 1},
++      {0, MMU_FTR_CI_LARGE_PAGE, 0, 0,                1, 2, 0},
++      {CPU_FTR_REAL_LE, 0, PPC_FEATURE_TRUE_LE, 0, 5, 0, 0},
++      /*
++       * If the kernel doesn't support TM (ie. 
CONFIG_PPC_TRANSACTIONAL_MEM=n),
++       * we don't want to turn on CPU_FTR_TM here, so we use CPU_FTR_TM_COMP
++       * which is 0 if the kernel doesn't support TM.
++       */
++      {CPU_FTR_TM_COMP, 0, 0, 0,              22, 0, 0},
+ };
+ 
+ static void __init scan_features(unsigned long node, const unsigned char 
*ftrs,
+@@ -190,10 +197,12 @@ static void __init scan_features(unsigned long node, 
const unsigned char *ftrs,
+               if (bit ^ fp->invert) {
+                       cur_cpu_spec->cpu_features |= fp->cpu_features;
+                       cur_cpu_spec->cpu_user_features |= fp->cpu_user_ftrs;
++                      cur_cpu_spec->cpu_user_features2 |= fp->cpu_user_ftrs2;
+                       cur_cpu_spec->mmu_features |= fp->mmu_features;
+               } else {
+                       cur_cpu_spec->cpu_features &= ~fp->cpu_features;
+                       cur_cpu_spec->cpu_user_features &= ~fp->cpu_user_ftrs;
++                      cur_cpu_spec->cpu_user_features2 &= ~fp->cpu_user_ftrs2;
+                       cur_cpu_spec->mmu_features &= ~fp->mmu_features;
+               }
+       }
+diff --git a/arch/s390/include/asm/hugetlb.h b/arch/s390/include/asm/hugetlb.h
+index 11eae5f55b70..9787b61e0758 100644
+--- a/arch/s390/include/asm/hugetlb.h
++++ b/arch/s390/include/asm/hugetlb.h
+@@ -14,6 +14,7 @@
+ 
+ #define is_hugepage_only_range(mm, addr, len) 0
+ #define hugetlb_free_pgd_range                        free_pgd_range
++#define hugepages_supported()                 (MACHINE_HAS_HPAGE)
+ 
+ void set_huge_pte_at(struct mm_struct *mm, unsigned long addr,
+                    pte_t *ptep, pte_t pte);
+diff --git a/arch/x86/crypto/sha-mb/sha1_mb.c 
b/arch/x86/crypto/sha-mb/sha1_mb.c
+index d42c9b7fadcf..418319b3763e 100644
+--- a/arch/x86/crypto/sha-mb/sha1_mb.c
++++ b/arch/x86/crypto/sha-mb/sha1_mb.c
+@@ -457,10 +457,10 @@ static int sha_complete_job(struct 
mcryptd_hash_request_ctx *rctx,
+ 
+                       req = cast_mcryptd_ctx_to_req(req_ctx);
+                       if (irqs_disabled())
+-                              rctx->complete(&req->base, ret);
++                              req_ctx->complete(&req->base, ret);
+                       else {
+                               local_bh_disable();
+-                              rctx->complete(&req->base, ret);
++                              req_ctx->complete(&req->base, ret);
+                               local_bh_enable();
+                       }
+               }
+diff --git a/arch/x86/include/asm/hugetlb.h b/arch/x86/include/asm/hugetlb.h
+index 68c05398bba9..7aadd3cea843 100644
+--- a/arch/x86/include/asm/hugetlb.h
++++ b/arch/x86/include/asm/hugetlb.h
+@@ -4,6 +4,7 @@
+ #include <asm/page.h>
+ #include <asm-generic/hugetlb.h>
+ 
++#define hugepages_supported() cpu_has_pse
+ 
+ static inline int is_hugepage_only_range(struct mm_struct *mm,
+                                        unsigned long addr,
+diff --git a/drivers/crypto/ccp/ccp-crypto-aes-cmac.c 
b/drivers/crypto/ccp/ccp-crypto-aes-cmac.c
+index 5c93afb1841a..f10b4998937d 100644
+--- a/drivers/crypto/ccp/ccp-crypto-aes-cmac.c
++++ b/drivers/crypto/ccp/ccp-crypto-aes-cmac.c
+@@ -206,6 +206,9 @@ static int ccp_aes_cmac_export(struct ahash_request *req, 
void *out)
+       struct ccp_aes_cmac_req_ctx *rctx = ahash_request_ctx(req);
+       struct ccp_aes_cmac_exp_ctx state;
+ 
++      /* Don't let anything leak to 'out' */
++      memset(&state, 0, sizeof(state));
++
+       state.null_msg = rctx->null_msg;
+       memcpy(state.iv, rctx->iv, sizeof(state.iv));
+       state.buf_count = rctx->buf_count;
+diff --git a/drivers/crypto/ccp/ccp-crypto-sha.c 
b/drivers/crypto/ccp/ccp-crypto-sha.c
+index b368e985a086..ced9f38a8978 100644
+--- a/drivers/crypto/ccp/ccp-crypto-sha.c
++++ b/drivers/crypto/ccp/ccp-crypto-sha.c
+@@ -198,6 +198,9 @@ static int ccp_sha_export(struct ahash_request *req, void 
*out)
+       struct ccp_sha_req_ctx *rctx = ahash_request_ctx(req);
+       struct ccp_sha_exp_ctx state;
+ 
++      /* Don't let anything leak to 'out' */
++      memset(&state, 0, sizeof(state));
++
+       state.type = rctx->type;
+       state.msg_bits = rctx->msg_bits;
+       state.first = rctx->first;
+diff --git a/drivers/edac/sb_edac.c b/drivers/edac/sb_edac.c
+index b97f5f0c5c0a..6251a0aeadcb 100644
+--- a/drivers/edac/sb_edac.c
++++ b/drivers/edac/sb_edac.c
+@@ -1264,7 +1264,7 @@ static int get_memory_error_data(struct mem_ctl_info 
*mci,
+       }
+ 
+       ch_way = TAD_CH(reg) + 1;
+-      sck_way = 1 << TAD_SOCK(reg);
++      sck_way = TAD_SOCK(reg);
+ 
+       if (ch_way == 3)
+               idx = addr >> 6;
+@@ -1303,7 +1303,7 @@ static int get_memory_error_data(struct mem_ctl_info 
*mci,
+               switch(ch_way) {
+               case 2:
+               case 4:
+-                      sck_xch = 1 << sck_way * (ch_way >> 1);
++                      sck_xch = (1 << sck_way) * (ch_way >> 1);
+                       break;
+               default:
+                       sprintf(msg, "Invalid mirror set. Can't decode addr");
+@@ -1339,7 +1339,7 @@ static int get_memory_error_data(struct mem_ctl_info 
*mci,
+ 
+       ch_addr = addr - offset;
+       ch_addr >>= (6 + shiftup);
+-      ch_addr /= ch_way * sck_way;
++      ch_addr /= sck_xch;
+       ch_addr <<= (6 + shiftup);
+       ch_addr |= addr & ((1 << (6 + shiftup)) - 1);
+ 
+diff --git a/drivers/gpu/drm/radeon/radeon_atpx_handler.c 
b/drivers/gpu/drm/radeon/radeon_atpx_handler.c
+index 1523cf94bcdc..8bc7d0bbd3c8 100644
+--- a/drivers/gpu/drm/radeon/radeon_atpx_handler.c
++++ b/drivers/gpu/drm/radeon/radeon_atpx_handler.c
+@@ -62,10 +62,6 @@ bool radeon_has_atpx(void) {
+       return radeon_atpx_priv.atpx_detected;
+ }
+ 
+-bool radeon_has_atpx_dgpu_power_cntl(void) {
+-      return radeon_atpx_priv.atpx.functions.power_cntl;
+-}
+-
+ /**
+  * radeon_atpx_call - call an ATPX method
+  *
+@@ -145,6 +141,10 @@ static void radeon_atpx_parse_functions(struct 
radeon_atpx_functions *f, u32 mas
+  */
+ static int radeon_atpx_validate(struct radeon_atpx *atpx)
+ {
++      /* make sure required functions are enabled */
++      /* dGPU power control is required */
++      atpx->functions.power_cntl = true;
++
+       if (atpx->functions.px_params) {
+               union acpi_object *info;
+               struct atpx_px_params output;
+diff --git a/drivers/gpu/drm/radeon/radeon_device.c 
b/drivers/gpu/drm/radeon/radeon_device.c
+index eb5f88aa76ab..5d54ab0fbe2b 100644
+--- a/drivers/gpu/drm/radeon/radeon_device.c
++++ b/drivers/gpu/drm/radeon/radeon_device.c
+@@ -103,12 +103,6 @@ static const char radeon_family_name[][16] = {
+       "LAST",
+ };
+ 
+-#if defined(CONFIG_VGA_SWITCHEROO)
+-bool radeon_has_atpx_dgpu_power_cntl(void);
+-#else
+-static inline bool radeon_has_atpx_dgpu_power_cntl(void) { return false; }
+-#endif
+-
+ #define RADEON_PX_QUIRK_DISABLE_PX  (1 << 0)
+ #define RADEON_PX_QUIRK_LONG_WAKEUP (1 << 1)
+ 
+@@ -1401,7 +1395,7 @@ int radeon_device_init(struct radeon_device *rdev,
+        * ignore it */
+       vga_client_register(rdev->pdev, rdev, NULL, radeon_vga_set_decode);
+ 
+-      if ((rdev->flags & RADEON_IS_PX) && radeon_has_atpx_dgpu_power_cntl())
++      if (rdev->flags & RADEON_IS_PX)
+               runtime = true;
+       vga_switcheroo_register_client(rdev->pdev, &radeon_switcheroo_ops, 
runtime);
+       if (runtime)
+diff --git a/drivers/gpu/drm/radeon/radeon_ttm.c 
b/drivers/gpu/drm/radeon/radeon_ttm.c
+index 33928b71445b..fdea9d07cca7 100644
+--- a/drivers/gpu/drm/radeon/radeon_ttm.c
++++ b/drivers/gpu/drm/radeon/radeon_ttm.c
+@@ -212,6 +212,8 @@ static int radeon_verify_access(struct ttm_buffer_object 
*bo, struct file *filp)
+ {
+       struct radeon_bo *rbo = container_of(bo, struct radeon_bo, tbo);
+ 
++      if (radeon_ttm_tt_has_userptr(bo->ttm))
++              return -EPERM;
+       return drm_vma_node_verify_access(&rbo->gem_base.vma_node, filp);
+ }
+ 
+diff --git a/drivers/gpu/drm/radeon/si_dpm.c b/drivers/gpu/drm/radeon/si_dpm.c
+index c6ad8a9f1452..481e718086fc 100644
+--- a/drivers/gpu/drm/radeon/si_dpm.c
++++ b/drivers/gpu/drm/radeon/si_dpm.c
+@@ -2923,6 +2923,10 @@ static struct si_dpm_quirk si_dpm_quirk_list[] = {
+       { PCI_VENDOR_ID_ATI, 0x6810, 0x1462, 0x3036, 0, 120000 },
+       { PCI_VENDOR_ID_ATI, 0x6811, 0x174b, 0xe271, 0, 120000 },
+       { PCI_VENDOR_ID_ATI, 0x6810, 0x174b, 0xe271, 85000, 90000 },
++      { PCI_VENDOR_ID_ATI, 0x6811, 0x1762, 0x2015, 0, 120000 },
++      { PCI_VENDOR_ID_ATI, 0x6811, 0x1043, 0x2015, 0, 120000 },
++      { PCI_VENDOR_ID_ATI, 0x6811, 0x148c, 0x2015, 0, 120000 },
++      { PCI_VENDOR_ID_ATI, 0x6810, 0x1682, 0x9275, 0, 120000 },
+       { 0, 0, 0, 0 },
+ };
+ 
+diff --git a/drivers/input/tablet/gtco.c b/drivers/input/tablet/gtco.c
+index 858045694e9d..a51de543a0b2 100644
+--- a/drivers/input/tablet/gtco.c
++++ b/drivers/input/tablet/gtco.c
+@@ -868,6 +868,14 @@ static int gtco_probe(struct usb_interface *usbinterface,
+               goto err_free_buf;
+       }
+ 
++      /* Sanity check that a device has an endpoint */
++      if (usbinterface->altsetting[0].desc.bNumEndpoints < 1) {
++              dev_err(&usbinterface->dev,
++                      "Invalid number of endpoints\n");
++              error = -EINVAL;
++              goto err_free_urb;
++      }
++
+       /*
+        * The endpoint is always altsetting 0, we know this since we know
+        * this device only has one interrupt endpoint
+@@ -889,7 +897,7 @@ static int gtco_probe(struct usb_interface *usbinterface,
+        * HID report descriptor
+        */
+       if (usb_get_extra_descriptor(usbinterface->cur_altsetting,
+-                                   HID_DEVICE_TYPE, &hid_desc) != 0){
++                                   HID_DEVICE_TYPE, &hid_desc) != 0) {
+               dev_err(&usbinterface->dev,
+                       "Can't retrieve exta USB descriptor to get hid report 
descriptor length\n");
+               error = -EIO;
+diff --git a/include/drm/drm_cache.h b/include/drm/drm_cache.h
+index 461a0558bca4..cebecff536a3 100644
+--- a/include/drm/drm_cache.h
++++ b/include/drm/drm_cache.h
+@@ -39,6 +39,8 @@ static inline bool drm_arch_can_wc_memory(void)
+ {
+ #if defined(CONFIG_PPC) && !defined(CONFIG_NOT_COHERENT_CACHE)
+       return false;
++#elif defined(CONFIG_MIPS) && defined(CONFIG_CPU_LOONGSON3)
++      return false;
+ #else
+       return true;
+ #endif
+diff --git a/include/linux/hugetlb.h b/include/linux/hugetlb.h
+index 14020c7796af..e6192934cdfa 100644
+--- a/include/linux/hugetlb.h
++++ b/include/linux/hugetlb.h
+@@ -415,15 +415,14 @@ static inline spinlock_t *huge_pte_lockptr(struct hstate 
*h,
+       return &mm->page_table_lock;
+ }
+ 
+-static inline bool hugepages_supported(void)
+-{
+-      /*
+-       * Some platform decide whether they support huge pages at boot
+-       * time. On these, such as powerpc, HPAGE_SHIFT is set to 0 when
+-       * there is no such support
+-       */
+-      return HPAGE_SHIFT != 0;
+-}
++#ifndef hugepages_supported
++/*
++ * Some platform decide whether they support huge pages at boot
++ * time. Some of them, such as powerpc, set HPAGE_SHIFT to 0
++ * when there is no such support
++ */
++#define hugepages_supported() (HPAGE_SHIFT != 0)
++#endif
+ 
+ #else /* CONFIG_HUGETLB_PAGE */
+ struct hstate {};
+diff --git a/kernel/futex.c b/kernel/futex.c
+index d9d63806f55f..d58859d62b8b 100644
+--- a/kernel/futex.c
++++ b/kernel/futex.c
+@@ -1157,10 +1157,20 @@ static int wake_futex_pi(u32 __user *uaddr, u32 uval, 
struct futex_q *this)
+        */
+       newval = FUTEX_WAITERS | task_pid_vnr(new_owner);
+ 
+-      if (cmpxchg_futex_value_locked(&curval, uaddr, uval, newval))
++      if (cmpxchg_futex_value_locked(&curval, uaddr, uval, newval)) {
+               ret = -EFAULT;
+-      else if (curval != uval)
+-              ret = -EINVAL;
++      } else if (curval != uval) {
++              /*
++               * If a unconditional UNLOCK_PI operation (user space did not
++               * try the TID->0 transition) raced with a waiter setting the
++               * FUTEX_WAITERS flag between get_user() and locking the hash
++               * bucket lock, retry the operation.
++               */
++              if ((FUTEX_TID_MASK & curval) == uval)
++                      ret = -EAGAIN;
++              else
++                      ret = -EINVAL;
++      }
+       if (ret) {
+               raw_spin_unlock(&pi_state->pi_mutex.wait_lock);
+               return ret;
+@@ -2419,6 +2429,15 @@ retry:
+                */
+               if (ret == -EFAULT)
+                       goto pi_faulted;
++              /*
++               * A unconditional UNLOCK_PI op raced against a waiter
++               * setting the FUTEX_WAITERS bit. Try again.
++               */
++              if (ret == -EAGAIN) {
++                      spin_unlock(&hb->lock);
++                      put_futex_key(&key);
++                      goto retry;
++              }
+               goto out_unlock;
+       }
+ 
+diff --git a/net/wireless/nl80211.c b/net/wireless/nl80211.c
+index 5fed79cfe45a..0286733f2e8c 100644
+--- a/net/wireless/nl80211.c
++++ b/net/wireless/nl80211.c
+@@ -11951,7 +11951,7 @@ static int nl80211_netlink_notify(struct 
notifier_block * nb,
+       struct wireless_dev *wdev;
+       struct cfg80211_beacon_registration *reg, *tmp;
+ 
+-      if (state != NETLINK_URELEASE)
++      if (state != NETLINK_URELEASE || notify->protocol != NETLINK_GENERIC)
+               return NOTIFY_DONE;
+ 
+       rcu_read_lock();
+diff --git a/sound/pci/pcxhr/pcxhr_core.c b/sound/pci/pcxhr/pcxhr_core.c
+index a584acb61c00..874591e18b3e 100644
+--- a/sound/pci/pcxhr/pcxhr_core.c
++++ b/sound/pci/pcxhr/pcxhr_core.c
+@@ -1339,5 +1339,6 @@ irqreturn_t pcxhr_threaded_irq(int irq, void *dev_id)
+       }
+ 
+       pcxhr_msg_thread(mgr);
++      mutex_unlock(&mgr->lock);
+       return IRQ_HANDLED;
+ }

Reply via email to