commit:     89e744181b46d6751c181899d789820432d371db
Author:     Mike Pagano <mpagano <AT> gentoo <DOT> org>
AuthorDate: Mon Mar 19 12:02:08 2018 +0000
Commit:     Mike Pagano <mpagano <AT> gentoo <DOT> org>
CommitDate: Mon Mar 19 12:02:08 2018 +0000
URL:        https://gitweb.gentoo.org/proj/linux-patches.git/commit/?id=89e74418

Linux patch 4.15.11

 0000_README              |    4 +
 1010_linux-4.15.11.patch | 3788 ++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 3792 insertions(+)

diff --git a/0000_README b/0000_README
index 172ed03..6b57403 100644
--- a/0000_README
+++ b/0000_README
@@ -83,6 +83,10 @@ Patch:  1009_linux-4.15.10.patch
 From:   http://www.kernel.org
 Desc:   Linux 4.15.10
 
+Patch:  1010_linux-4.15.11.patch
+From:   http://www.kernel.org
+Desc:   Linux 4.15.11
+
 Patch:  1500_XATTR_USER_PREFIX.patch
 From:   https://bugs.gentoo.org/show_bug.cgi?id=470644
 Desc:   Support for namespace user.pax.* on tmpfs.

diff --git a/1010_linux-4.15.11.patch b/1010_linux-4.15.11.patch
new file mode 100644
index 0000000..f914c5d
--- /dev/null
+++ b/1010_linux-4.15.11.patch
@@ -0,0 +1,3788 @@
+diff --git a/Documentation/devicetree/bindings/serial/fsl-imx-uart.txt 
b/Documentation/devicetree/bindings/serial/fsl-imx-uart.txt
+index 860a9559839a..89b92c1314cf 100644
+--- a/Documentation/devicetree/bindings/serial/fsl-imx-uart.txt
++++ b/Documentation/devicetree/bindings/serial/fsl-imx-uart.txt
+@@ -9,7 +9,8 @@ Optional properties:
+ - fsl,irda-mode : Indicate the uart supports irda mode
+ - fsl,dte-mode : Indicate the uart works in DTE mode. The uart works
+                   in DCE mode by default.
+-- rs485-rts-delay, rs485-rx-during-tx, linux,rs485-enabled-at-boot-time: see 
rs485.txt
++- rs485-rts-delay, rs485-rts-active-low, rs485-rx-during-tx,
++  linux,rs485-enabled-at-boot-time: see rs485.txt
+ 
+ Please check Documentation/devicetree/bindings/serial/serial.txt
+ for the complete list of generic properties.
+diff --git a/Documentation/devicetree/bindings/serial/fsl-lpuart.txt 
b/Documentation/devicetree/bindings/serial/fsl-lpuart.txt
+index 59567b51cf09..6bd3f2e93d61 100644
+--- a/Documentation/devicetree/bindings/serial/fsl-lpuart.txt
++++ b/Documentation/devicetree/bindings/serial/fsl-lpuart.txt
+@@ -16,7 +16,8 @@ Required properties:
+ Optional properties:
+ - dmas: A list of two dma specifiers, one for each entry in dma-names.
+ - dma-names: should contain "tx" and "rx".
+-- rs485-rts-delay, rs485-rx-during-tx, linux,rs485-enabled-at-boot-time: see 
rs485.txt
++- rs485-rts-delay, rs485-rts-active-low, rs485-rx-during-tx,
++  linux,rs485-enabled-at-boot-time: see rs485.txt
+ 
+ Note: Optional properties for DMA support. Write them both or both not.
+ 
+diff --git a/Documentation/devicetree/bindings/serial/omap_serial.txt 
b/Documentation/devicetree/bindings/serial/omap_serial.txt
+index 43eac675f21f..4b0f05adb228 100644
+--- a/Documentation/devicetree/bindings/serial/omap_serial.txt
++++ b/Documentation/devicetree/bindings/serial/omap_serial.txt
+@@ -20,6 +20,7 @@ Optional properties:
+          node and a DMA channel number.
+ - dma-names : "rx" for receive channel, "tx" for transmit channel.
+ - rs485-rts-delay, rs485-rx-during-tx, linux,rs485-enabled-at-boot-time: see 
rs485.txt
++- rs485-rts-active-high: drive RTS high when sending (default is low).
+ 
+ Example:
+ 
+diff --git a/Documentation/devicetree/bindings/serial/rs485.txt 
b/Documentation/devicetree/bindings/serial/rs485.txt
+index b8415936dfdb..b7c29f74ebb2 100644
+--- a/Documentation/devicetree/bindings/serial/rs485.txt
++++ b/Documentation/devicetree/bindings/serial/rs485.txt
+@@ -12,6 +12,7 @@ Optional properties:
+   * b is the delay between end of data sent and rts signal in milliseconds
+       it corresponds to the delay after sending data and actual release of 
the line.
+   If this property is not specified, <0 0> is assumed.
++- rs485-rts-active-low: drive RTS low when sending (default is high).
+ - linux,rs485-enabled-at-boot-time: empty property telling to enable the rs485
+   feature at boot time. It can be disabled later with proper ioctl.
+ - rs485-rx-during-tx: empty property that enables the receiving of data even
+diff --git a/Documentation/devicetree/bindings/usb/usb-xhci.txt 
b/Documentation/devicetree/bindings/usb/usb-xhci.txt
+index ae6e484a8d7c..4143ef222540 100644
+--- a/Documentation/devicetree/bindings/usb/usb-xhci.txt
++++ b/Documentation/devicetree/bindings/usb/usb-xhci.txt
+@@ -12,6 +12,7 @@ Required properties:
+     - "renesas,xhci-r8a7793" for r8a7793 SoC
+     - "renesas,xhci-r8a7795" for r8a7795 SoC
+     - "renesas,xhci-r8a7796" for r8a7796 SoC
++    - "renesas,xhci-r8a77965" for r8a77965 SoC
+     - "renesas,rcar-gen2-xhci" for a generic R-Car Gen2 compatible device
+     - "renesas,rcar-gen3-xhci" for a generic R-Car Gen3 compatible device
+     - "xhci-platform" (deprecated)
+diff --git a/Makefile b/Makefile
+index 7eed0f168b13..74c0f5e8dd55 100644
+--- a/Makefile
++++ b/Makefile
+@@ -1,7 +1,7 @@
+ # SPDX-License-Identifier: GPL-2.0
+ VERSION = 4
+ PATCHLEVEL = 15
+-SUBLEVEL = 10
++SUBLEVEL = 11
+ EXTRAVERSION =
+ NAME = Fearless Coyote
+ 
+diff --git a/arch/arm/boot/dts/am335x-pepper.dts 
b/arch/arm/boot/dts/am335x-pepper.dts
+index 03c7d77023c6..9fb7426070ce 100644
+--- a/arch/arm/boot/dts/am335x-pepper.dts
++++ b/arch/arm/boot/dts/am335x-pepper.dts
+@@ -139,7 +139,7 @@
+ &audio_codec {
+       status = "okay";
+ 
+-      gpio-reset = <&gpio1 16 GPIO_ACTIVE_LOW>;
++      reset-gpios = <&gpio1 16 GPIO_ACTIVE_LOW>;
+       AVDD-supply = <&ldo3_reg>;
+       IOVDD-supply = <&ldo3_reg>;
+       DRVDD-supply = <&ldo3_reg>;
+diff --git a/arch/arm/boot/dts/exynos4412-trats2.dts 
b/arch/arm/boot/dts/exynos4412-trats2.dts
+index 220cdf109405..9f4672ba9943 100644
+--- a/arch/arm/boot/dts/exynos4412-trats2.dts
++++ b/arch/arm/boot/dts/exynos4412-trats2.dts
+@@ -454,7 +454,7 @@
+               reg = <0>;
+               vdd3-supply = <&lcd_vdd3_reg>;
+               vci-supply = <&ldo25_reg>;
+-              reset-gpios = <&gpy4 5 GPIO_ACTIVE_HIGH>;
++              reset-gpios = <&gpf2 1 GPIO_ACTIVE_HIGH>;
+               power-on-delay= <50>;
+               reset-delay = <100>;
+               init-delay = <100>;
+diff --git a/arch/arm/boot/dts/omap3-n900.dts 
b/arch/arm/boot/dts/omap3-n900.dts
+index 669c51c00c00..5362139d5312 100644
+--- a/arch/arm/boot/dts/omap3-n900.dts
++++ b/arch/arm/boot/dts/omap3-n900.dts
+@@ -558,7 +558,7 @@
+       tlv320aic3x: tlv320aic3x@18 {
+               compatible = "ti,tlv320aic3x";
+               reg = <0x18>;
+-              gpio-reset = <&gpio2 28 GPIO_ACTIVE_HIGH>; /* 60 */
++              reset-gpios = <&gpio2 28 GPIO_ACTIVE_LOW>; /* 60 */
+               ai3x-gpio-func = <
+                       0 /* AIC3X_GPIO1_FUNC_DISABLED */
+                       5 /* AIC3X_GPIO2_FUNC_DIGITAL_MIC_INPUT */
+@@ -575,7 +575,7 @@
+       tlv320aic3x_aux: tlv320aic3x@19 {
+               compatible = "ti,tlv320aic3x";
+               reg = <0x19>;
+-              gpio-reset = <&gpio2 28 GPIO_ACTIVE_HIGH>; /* 60 */
++              reset-gpios = <&gpio2 28 GPIO_ACTIVE_LOW>; /* 60 */
+ 
+               AVDD-supply = <&vmmc2>;
+               DRVDD-supply = <&vmmc2>;
+diff --git a/arch/arm/boot/dts/r8a7791-koelsch.dts 
b/arch/arm/boot/dts/r8a7791-koelsch.dts
+index e164eda69baf..4126de417922 100644
+--- a/arch/arm/boot/dts/r8a7791-koelsch.dts
++++ b/arch/arm/boot/dts/r8a7791-koelsch.dts
+@@ -278,6 +278,12 @@
+               };
+       };
+ 
++      cec_clock: cec-clock {
++              compatible = "fixed-clock";
++              #clock-cells = <0>;
++              clock-frequency = <12000000>;
++      };
++
+       hdmi-out {
+               compatible = "hdmi-connector";
+               type = "a";
+@@ -640,12 +646,6 @@
+               };
+       };
+ 
+-      cec_clock: cec-clock {
+-              compatible = "fixed-clock";
+-              #clock-cells = <0>;
+-              clock-frequency = <12000000>;
+-      };
+-
+       hdmi@39 {
+               compatible = "adi,adv7511w";
+               reg = <0x39>;
+diff --git a/arch/arm64/boot/dts/renesas/salvator-common.dtsi 
b/arch/arm64/boot/dts/renesas/salvator-common.dtsi
+index dbe2648649db..7c49b3e8c8fb 100644
+--- a/arch/arm64/boot/dts/renesas/salvator-common.dtsi
++++ b/arch/arm64/boot/dts/renesas/salvator-common.dtsi
+@@ -263,6 +263,7 @@
+               reg = <0>;
+               interrupt-parent = <&gpio2>;
+               interrupts = <11 IRQ_TYPE_LEVEL_LOW>;
++              reset-gpios = <&gpio2 10 GPIO_ACTIVE_LOW>;
+       };
+ };
+ 
+diff --git a/arch/powerpc/include/asm/code-patching.h 
b/arch/powerpc/include/asm/code-patching.h
+index abef812de7f8..2c895e8d07f7 100644
+--- a/arch/powerpc/include/asm/code-patching.h
++++ b/arch/powerpc/include/asm/code-patching.h
+@@ -33,6 +33,7 @@ int patch_branch(unsigned int *addr, unsigned long target, 
int flags);
+ int patch_instruction(unsigned int *addr, unsigned int instr);
+ 
+ int instr_is_relative_branch(unsigned int instr);
++int instr_is_relative_link_branch(unsigned int instr);
+ int instr_is_branch_to_addr(const unsigned int *instr, unsigned long addr);
+ unsigned long branch_target(const unsigned int *instr);
+ unsigned int translate_branch(const unsigned int *dest,
+diff --git a/arch/powerpc/include/asm/kvm_book3s_64.h 
b/arch/powerpc/include/asm/kvm_book3s_64.h
+index 735cfa35298a..998f7b7aaa9e 100644
+--- a/arch/powerpc/include/asm/kvm_book3s_64.h
++++ b/arch/powerpc/include/asm/kvm_book3s_64.h
+@@ -122,13 +122,13 @@ static inline int kvmppc_hpte_page_shifts(unsigned long 
h, unsigned long l)
+       lphi = (l >> 16) & 0xf;
+       switch ((l >> 12) & 0xf) {
+       case 0:
+-              return !lphi ? 24 : -1;         /* 16MB */
++              return !lphi ? 24 : 0;          /* 16MB */
+               break;
+       case 1:
+               return 16;                      /* 64kB */
+               break;
+       case 3:
+-              return !lphi ? 34 : -1;         /* 16GB */
++              return !lphi ? 34 : 0;          /* 16GB */
+               break;
+       case 7:
+               return (16 << 8) + 12;          /* 64kB in 4kB */
+@@ -140,7 +140,7 @@ static inline int kvmppc_hpte_page_shifts(unsigned long h, 
unsigned long l)
+                       return (24 << 8) + 12;  /* 16MB in 4kB */
+               break;
+       }
+-      return -1;
++      return 0;
+ }
+ 
+ static inline int kvmppc_hpte_base_page_shift(unsigned long h, unsigned long 
l)
+@@ -159,7 +159,11 @@ static inline int kvmppc_hpte_actual_page_shift(unsigned 
long h, unsigned long l
+ 
+ static inline unsigned long kvmppc_actual_pgsz(unsigned long v, unsigned long 
r)
+ {
+-      return 1ul << kvmppc_hpte_actual_page_shift(v, r);
++      int shift = kvmppc_hpte_actual_page_shift(v, r);
++
++      if (shift)
++              return 1ul << shift;
++      return 0;
+ }
+ 
+ static inline int kvmppc_pgsize_lp_encoding(int base_shift, int actual_shift)
+@@ -232,7 +236,7 @@ static inline unsigned long compute_tlbie_rb(unsigned long 
v, unsigned long r,
+               va_low ^= v >> (SID_SHIFT_1T - 16);
+       va_low &= 0x7ff;
+ 
+-      if (b_pgshift == 12) {
++      if (b_pgshift <= 12) {
+               if (a_pgshift > 12) {
+                       sllp = (a_pgshift == 16) ? 5 : 4;
+                       rb |= sllp << 5;        /*  AP field */
+diff --git a/arch/powerpc/kernel/entry_64.S b/arch/powerpc/kernel/entry_64.S
+index 2748584b767d..fde89f04f276 100644
+--- a/arch/powerpc/kernel/entry_64.S
++++ b/arch/powerpc/kernel/entry_64.S
+@@ -939,9 +939,13 @@ END_FTR_SECTION_IFSET(CPU_FTR_HAS_PPR)
+       beq     1f
+       rlwinm  r7,r7,0,~PACA_IRQ_HARD_DIS
+       stb     r7,PACAIRQHAPPENED(r13)
+-1:    li      r0,0
+-      stb     r0,PACASOFTIRQEN(r13);
+-      TRACE_DISABLE_INTS
++1:
++#if defined(CONFIG_TRACE_IRQFLAGS) && defined(CONFIG_BUG)
++      /* The interrupt should not have soft enabled. */
++      lbz     r7,PACASOFTIRQEN(r13)
++1:    tdnei   r7,0
++      EMIT_BUG_ENTRY 1b,__FILE__,__LINE__,BUGFLAG_WARNING
++#endif
+       b       .Ldo_restore
+ 
+       /*
+diff --git a/arch/powerpc/kernel/module_64.c b/arch/powerpc/kernel/module_64.c
+index 759104b99f9f..180c16f04063 100644
+--- a/arch/powerpc/kernel/module_64.c
++++ b/arch/powerpc/kernel/module_64.c
+@@ -487,7 +487,17 @@ static bool is_early_mcount_callsite(u32 *instruction)
+    restore r2. */
+ static int restore_r2(u32 *instruction, struct module *me)
+ {
+-      if (is_early_mcount_callsite(instruction - 1))
++      u32 *prev_insn = instruction - 1;
++
++      if (is_early_mcount_callsite(prev_insn))
++              return 1;
++
++      /*
++       * Make sure the branch isn't a sibling call.  Sibling calls aren't
++       * "link" branches and they don't return, so they don't need the r2
++       * restore afterwards.
++       */
++      if (!instr_is_relative_link_branch(*prev_insn))
+               return 1;
+ 
+       if (*instruction != PPC_INST_NOP) {
+diff --git a/arch/powerpc/kvm/book3s_64_mmu_radix.c 
b/arch/powerpc/kvm/book3s_64_mmu_radix.c
+index 58618f644c56..0c854816e653 100644
+--- a/arch/powerpc/kvm/book3s_64_mmu_radix.c
++++ b/arch/powerpc/kvm/book3s_64_mmu_radix.c
+@@ -573,7 +573,7 @@ long kvmppc_hv_get_dirty_log_radix(struct kvm *kvm,
+               j = i + 1;
+               if (npages) {
+                       set_dirty_bits(map, i, npages);
+-                      i = j + npages;
++                      j = i + npages;
+               }
+       }
+       return 0;
+diff --git a/arch/powerpc/lib/code-patching.c 
b/arch/powerpc/lib/code-patching.c
+index d469224c4ada..096d4e4d31e6 100644
+--- a/arch/powerpc/lib/code-patching.c
++++ b/arch/powerpc/lib/code-patching.c
+@@ -302,6 +302,11 @@ int instr_is_relative_branch(unsigned int instr)
+       return instr_is_branch_iform(instr) || instr_is_branch_bform(instr);
+ }
+ 
++int instr_is_relative_link_branch(unsigned int instr)
++{
++      return instr_is_relative_branch(instr) && (instr & BRANCH_SET_LINK);
++}
++
+ static unsigned long branch_iform_target(const unsigned int *instr)
+ {
+       signed long imm;
+diff --git a/arch/x86/kernel/machine_kexec_64.c 
b/arch/x86/kernel/machine_kexec_64.c
+index 1f790cf9d38f..3b7427aa7d85 100644
+--- a/arch/x86/kernel/machine_kexec_64.c
++++ b/arch/x86/kernel/machine_kexec_64.c
+@@ -542,6 +542,7 @@ int arch_kexec_apply_relocations_add(const Elf64_Ehdr 
*ehdr,
+                               goto overflow;
+                       break;
+               case R_X86_64_PC32:
++              case R_X86_64_PLT32:
+                       value -= (u64)address;
+                       *(u32 *)location = value;
+                       break;
+diff --git a/arch/x86/kernel/module.c b/arch/x86/kernel/module.c
+index da0c160e5589..f58336af095c 100644
+--- a/arch/x86/kernel/module.c
++++ b/arch/x86/kernel/module.c
+@@ -191,6 +191,7 @@ int apply_relocate_add(Elf64_Shdr *sechdrs,
+                               goto overflow;
+                       break;
+               case R_X86_64_PC32:
++              case R_X86_64_PLT32:
+                       if (*(u32 *)loc != 0)
+                               goto invalid_relocation;
+                       val -= (u64)loc;
+diff --git a/arch/x86/kvm/mmu.c b/arch/x86/kvm/mmu.c
+index e080dbe55360..fe2cb4cfa75b 100644
+--- a/arch/x86/kvm/mmu.c
++++ b/arch/x86/kvm/mmu.c
+@@ -4951,6 +4951,16 @@ int kvm_mmu_page_fault(struct kvm_vcpu *vcpu, gva_t 
cr2, u64 error_code,
+       if (mmio_info_in_cache(vcpu, cr2, direct))
+               emulation_type = 0;
+ emulate:
++      /*
++       * On AMD platforms, under certain conditions insn_len may be zero on 
#NPF.
++       * This can happen if a guest gets a page-fault on data access but the 
HW
++       * table walker is not able to read the instruction page (e.g 
instruction
++       * page is not present in memory). In those cases we simply restart the
++       * guest.
++       */
++      if (unlikely(insn && !insn_len))
++              return 1;
++
+       er = x86_emulate_instruction(vcpu, cr2, emulation_type, insn, insn_len);
+ 
+       switch (er) {
+diff --git a/arch/x86/kvm/svm.c b/arch/x86/kvm/svm.c
+index 3505afabce5d..76bbca2c8159 100644
+--- a/arch/x86/kvm/svm.c
++++ b/arch/x86/kvm/svm.c
+@@ -2178,7 +2178,8 @@ static int pf_interception(struct vcpu_svm *svm)
+       u64 error_code = svm->vmcb->control.exit_info_1;
+ 
+       return kvm_handle_page_fault(&svm->vcpu, error_code, fault_address,
+-                      svm->vmcb->control.insn_bytes,
++                      static_cpu_has(X86_FEATURE_DECODEASSISTS) ?
++                      svm->vmcb->control.insn_bytes : NULL,
+                       svm->vmcb->control.insn_len);
+ }
+ 
+@@ -2189,7 +2190,8 @@ static int npf_interception(struct vcpu_svm *svm)
+ 
+       trace_kvm_page_fault(fault_address, error_code);
+       return kvm_mmu_page_fault(&svm->vcpu, fault_address, error_code,
+-                      svm->vmcb->control.insn_bytes,
++                      static_cpu_has(X86_FEATURE_DECODEASSISTS) ?
++                      svm->vmcb->control.insn_bytes : NULL,
+                       svm->vmcb->control.insn_len);
+ }
+ 
+diff --git a/arch/x86/tools/relocs.c b/arch/x86/tools/relocs.c
+index 5d73c443e778..220e97841e49 100644
+--- a/arch/x86/tools/relocs.c
++++ b/arch/x86/tools/relocs.c
+@@ -770,9 +770,12 @@ static int do_reloc64(struct section *sec, Elf_Rel *rel, 
ElfW(Sym) *sym,
+               break;
+ 
+       case R_X86_64_PC32:
++      case R_X86_64_PLT32:
+               /*
+                * PC relative relocations don't need to be adjusted unless
+                * referencing a percpu symbol.
++               *
++               * NB: R_X86_64_PLT32 can be treated as R_X86_64_PC32.
+                */
+               if (is_percpu_sym(sym, symname))
+                       add_reloc(&relocs32neg, offset);
+diff --git a/crypto/ecc.c b/crypto/ecc.c
+index 633a9bcdc574..18f32f2a5e1c 100644
+--- a/crypto/ecc.c
++++ b/crypto/ecc.c
+@@ -964,7 +964,7 @@ int ecc_gen_privkey(unsigned int curve_id, unsigned int 
ndigits, u64 *privkey)
+        * DRBG with a security strength of 256.
+        */
+       if (crypto_get_default_rng())
+-              err = -EFAULT;
++              return -EFAULT;
+ 
+       err = crypto_rng_get_bytes(crypto_default_rng, (u8 *)priv, nbytes);
+       crypto_put_default_rng();
+diff --git a/crypto/keywrap.c b/crypto/keywrap.c
+index 744e35134c45..ec5c6a087c90 100644
+--- a/crypto/keywrap.c
++++ b/crypto/keywrap.c
+@@ -188,7 +188,7 @@ static int crypto_kw_decrypt(struct blkcipher_desc *desc,
+       }
+ 
+       /* Perform authentication check */
+-      if (block.A != cpu_to_be64(0xa6a6a6a6a6a6a6a6))
++      if (block.A != cpu_to_be64(0xa6a6a6a6a6a6a6a6ULL))
+               ret = -EBADMSG;
+ 
+       memzero_explicit(&block, sizeof(struct crypto_kw_block));
+@@ -221,7 +221,7 @@ static int crypto_kw_encrypt(struct blkcipher_desc *desc,
+        * Place the predefined IV into block A -- for encrypt, the caller
+        * does not need to provide an IV, but he needs to fetch the final IV.
+        */
+-      block.A = cpu_to_be64(0xa6a6a6a6a6a6a6a6);
++      block.A = cpu_to_be64(0xa6a6a6a6a6a6a6a6ULL);
+ 
+       /*
+        * src scatterlist is read-only. dst scatterlist is r/w. During the
+diff --git a/drivers/base/Kconfig b/drivers/base/Kconfig
+index 2415ad9f6dd4..49fd50fccd48 100644
+--- a/drivers/base/Kconfig
++++ b/drivers/base/Kconfig
+@@ -249,6 +249,7 @@ config DMA_SHARED_BUFFER
+       bool
+       default n
+       select ANON_INODES
++      select IRQ_WORK
+       help
+         This option enables the framework for buffer-sharing between
+         multiple drivers. A buffer is associated with a file using driver
+diff --git a/drivers/char/agp/intel-gtt.c b/drivers/char/agp/intel-gtt.c
+index 9b6b6023193b..dde7caac7f9f 100644
+--- a/drivers/char/agp/intel-gtt.c
++++ b/drivers/char/agp/intel-gtt.c
+@@ -872,6 +872,8 @@ void intel_gtt_insert_sg_entries(struct sg_table *st,
+               }
+       }
+       wmb();
++      if (intel_private.driver->chipset_flush)
++              intel_private.driver->chipset_flush();
+ }
+ EXPORT_SYMBOL(intel_gtt_insert_sg_entries);
+ 
+diff --git a/drivers/clk/meson/gxbb.c b/drivers/clk/meson/gxbb.c
+index ae385310e980..2ac9f3fa9578 100644
+--- a/drivers/clk/meson/gxbb.c
++++ b/drivers/clk/meson/gxbb.c
+@@ -1386,7 +1386,7 @@ static MESON_GATE(gxbb_pl301, HHI_GCLK_MPEG0, 6);
+ static MESON_GATE(gxbb_periphs, HHI_GCLK_MPEG0, 7);
+ static MESON_GATE(gxbb_spicc, HHI_GCLK_MPEG0, 8);
+ static MESON_GATE(gxbb_i2c, HHI_GCLK_MPEG0, 9);
+-static MESON_GATE(gxbb_sar_adc, HHI_GCLK_MPEG0, 10);
++static MESON_GATE(gxbb_sana, HHI_GCLK_MPEG0, 10);
+ static MESON_GATE(gxbb_smart_card, HHI_GCLK_MPEG0, 11);
+ static MESON_GATE(gxbb_rng0, HHI_GCLK_MPEG0, 12);
+ static MESON_GATE(gxbb_uart0, HHI_GCLK_MPEG0, 13);
+@@ -1437,7 +1437,7 @@ static MESON_GATE(gxbb_usb0_ddr_bridge, HHI_GCLK_MPEG2, 
9);
+ static MESON_GATE(gxbb_mmc_pclk, HHI_GCLK_MPEG2, 11);
+ static MESON_GATE(gxbb_dvin, HHI_GCLK_MPEG2, 12);
+ static MESON_GATE(gxbb_uart2, HHI_GCLK_MPEG2, 15);
+-static MESON_GATE(gxbb_sana, HHI_GCLK_MPEG2, 22);
++static MESON_GATE(gxbb_sar_adc, HHI_GCLK_MPEG2, 22);
+ static MESON_GATE(gxbb_vpu_intr, HHI_GCLK_MPEG2, 25);
+ static MESON_GATE(gxbb_sec_ahb_ahb3_bridge, HHI_GCLK_MPEG2, 26);
+ static MESON_GATE(gxbb_clk81_a53, HHI_GCLK_MPEG2, 29);
+diff --git a/drivers/clk/qcom/gcc-msm8916.c b/drivers/clk/qcom/gcc-msm8916.c
+index 3410ee68d4bc..2057809219f4 100644
+--- a/drivers/clk/qcom/gcc-msm8916.c
++++ b/drivers/clk/qcom/gcc-msm8916.c
+@@ -1438,6 +1438,7 @@ static const struct freq_tbl ftbl_codec_clk[] = {
+ 
+ static struct clk_rcg2 codec_digcodec_clk_src = {
+       .cmd_rcgr = 0x1c09c,
++      .mnd_width = 8,
+       .hid_width = 5,
+       .parent_map = gcc_xo_gpll1_emclk_sleep_map,
+       .freq_tbl = ftbl_codec_clk,
+diff --git a/drivers/clk/renesas/r8a77970-cpg-mssr.c 
b/drivers/clk/renesas/r8a77970-cpg-mssr.c
+index 72f98527473a..f55842917e8d 100644
+--- a/drivers/clk/renesas/r8a77970-cpg-mssr.c
++++ b/drivers/clk/renesas/r8a77970-cpg-mssr.c
+@@ -105,6 +105,7 @@ static const struct mssr_mod_clk r8a77970_mod_clks[] 
__initconst = {
+       DEF_MOD("vspd0",                 623,   R8A77970_CLK_S2D1),
+       DEF_MOD("csi40",                 716,   R8A77970_CLK_CSI0),
+       DEF_MOD("du0",                   724,   R8A77970_CLK_S2D1),
++      DEF_MOD("lvds",                  727,   R8A77970_CLK_S2D1),
+       DEF_MOD("vin3",                  808,   R8A77970_CLK_S2D1),
+       DEF_MOD("vin2",                  809,   R8A77970_CLK_S2D1),
+       DEF_MOD("vin1",                  810,   R8A77970_CLK_S2D1),
+diff --git a/drivers/cpufreq/cpufreq.c b/drivers/cpufreq/cpufreq.c
+index 41d148af7748..d6a3038a128d 100644
+--- a/drivers/cpufreq/cpufreq.c
++++ b/drivers/cpufreq/cpufreq.c
+@@ -637,6 +637,8 @@ static int cpufreq_parse_governor(char *str_governor, 
unsigned int *policy,
+                       *governor = t;
+                       err = 0;
+               }
++              if (t && !try_module_get(t->owner))
++                      t = NULL;
+ 
+               mutex_unlock(&cpufreq_governor_mutex);
+       }
+@@ -765,6 +767,10 @@ static ssize_t store_scaling_governor(struct 
cpufreq_policy *policy,
+               return -EINVAL;
+ 
+       ret = cpufreq_set_policy(policy, &new_policy);
++
++      if (new_policy.governor)
++              module_put(new_policy.governor->owner);
++
+       return ret ? ret : count;
+ }
+ 
+diff --git a/drivers/crypto/caam/caamalg_qi.c 
b/drivers/crypto/caam/caamalg_qi.c
+index f9f08fce4356..ad14b69a052e 100644
+--- a/drivers/crypto/caam/caamalg_qi.c
++++ b/drivers/crypto/caam/caamalg_qi.c
+@@ -668,7 +668,7 @@ static struct aead_edesc *aead_edesc_alloc(struct 
aead_request *req,
+       qm_sg_ents = 1 + !!ivsize + mapped_src_nents +
+                    (mapped_dst_nents > 1 ? mapped_dst_nents : 0);
+       if (unlikely(qm_sg_ents > CAAM_QI_MAX_AEAD_SG)) {
+-              dev_err(qidev, "Insufficient S/G entries: %d > %lu\n",
++              dev_err(qidev, "Insufficient S/G entries: %d > %zu\n",
+                       qm_sg_ents, CAAM_QI_MAX_AEAD_SG);
+               caam_unmap(qidev, req->src, req->dst, src_nents, dst_nents,
+                          iv_dma, ivsize, op_type, 0, 0);
+@@ -905,7 +905,7 @@ static struct ablkcipher_edesc 
*ablkcipher_edesc_alloc(struct ablkcipher_request
+ 
+       qm_sg_ents += mapped_dst_nents > 1 ? mapped_dst_nents : 0;
+       if (unlikely(qm_sg_ents > CAAM_QI_MAX_ABLKCIPHER_SG)) {
+-              dev_err(qidev, "Insufficient S/G entries: %d > %lu\n",
++              dev_err(qidev, "Insufficient S/G entries: %d > %zu\n",
+                       qm_sg_ents, CAAM_QI_MAX_ABLKCIPHER_SG);
+               caam_unmap(qidev, req->src, req->dst, src_nents, dst_nents,
+                          iv_dma, ivsize, op_type, 0, 0);
+@@ -1058,7 +1058,7 @@ static struct ablkcipher_edesc 
*ablkcipher_giv_edesc_alloc(
+       }
+ 
+       if (unlikely(qm_sg_ents > CAAM_QI_MAX_ABLKCIPHER_SG)) {
+-              dev_err(qidev, "Insufficient S/G entries: %d > %lu\n",
++              dev_err(qidev, "Insufficient S/G entries: %d > %zu\n",
+                       qm_sg_ents, CAAM_QI_MAX_ABLKCIPHER_SG);
+               caam_unmap(qidev, req->src, req->dst, src_nents, dst_nents,
+                          iv_dma, ivsize, GIVENCRYPT, 0, 0);
+diff --git a/drivers/crypto/cavium/cpt/cptvf_reqmanager.c 
b/drivers/crypto/cavium/cpt/cptvf_reqmanager.c
+index 169e66231bcf..b0ba4331944b 100644
+--- a/drivers/crypto/cavium/cpt/cptvf_reqmanager.c
++++ b/drivers/crypto/cavium/cpt/cptvf_reqmanager.c
+@@ -459,7 +459,8 @@ int process_request(struct cpt_vf *cptvf, struct 
cpt_request_info *req)
+       info->completion_addr = kzalloc(sizeof(union cpt_res_s), GFP_KERNEL);
+       if (unlikely(!info->completion_addr)) {
+               dev_err(&pdev->dev, "Unable to allocate memory for 
completion_addr\n");
+-              return -ENOMEM;
++              ret = -ENOMEM;
++              goto request_cleanup;
+       }
+ 
+       result = (union cpt_res_s *)info->completion_addr;
+diff --git a/drivers/crypto/chelsio/chcr_algo.c 
b/drivers/crypto/chelsio/chcr_algo.c
+index 4eed7171e2ae..38fe59b5c689 100644
+--- a/drivers/crypto/chelsio/chcr_algo.c
++++ b/drivers/crypto/chelsio/chcr_algo.c
+@@ -2414,7 +2414,7 @@ static inline int chcr_hash_dma_map(struct device *dev,
+       error = dma_map_sg(dev, req->src, sg_nents(req->src),
+                          DMA_TO_DEVICE);
+       if (!error)
+-              return error;
++              return -ENOMEM;
+       req_ctx->is_sg_map = 1;
+       return 0;
+ }
+diff --git a/drivers/dma-buf/dma-fence-array.c 
b/drivers/dma-buf/dma-fence-array.c
+index 0350829ba62e..dd1edfb27b61 100644
+--- a/drivers/dma-buf/dma-fence-array.c
++++ b/drivers/dma-buf/dma-fence-array.c
+@@ -31,6 +31,14 @@ static const char *dma_fence_array_get_timeline_name(struct 
dma_fence *fence)
+       return "unbound";
+ }
+ 
++static void irq_dma_fence_array_work(struct irq_work *wrk)
++{
++      struct dma_fence_array *array = container_of(wrk, typeof(*array), work);
++
++      dma_fence_signal(&array->base);
++      dma_fence_put(&array->base);
++}
++
+ static void dma_fence_array_cb_func(struct dma_fence *f,
+                                   struct dma_fence_cb *cb)
+ {
+@@ -39,8 +47,9 @@ static void dma_fence_array_cb_func(struct dma_fence *f,
+       struct dma_fence_array *array = array_cb->array;
+ 
+       if (atomic_dec_and_test(&array->num_pending))
+-              dma_fence_signal(&array->base);
+-      dma_fence_put(&array->base);
++              irq_work_queue(&array->work);
++      else
++              dma_fence_put(&array->base);
+ }
+ 
+ static bool dma_fence_array_enable_signaling(struct dma_fence *fence)
+@@ -136,6 +145,7 @@ struct dma_fence_array *dma_fence_array_create(int 
num_fences,
+       spin_lock_init(&array->lock);
+       dma_fence_init(&array->base, &dma_fence_array_ops, &array->lock,
+                      context, seqno);
++      init_irq_work(&array->work, irq_dma_fence_array_work);
+ 
+       array->num_fences = num_fences;
+       atomic_set(&array->num_pending, signal_on_any ? 1 : num_fences);
+diff --git a/drivers/dma/qcom/hidma_ll.c b/drivers/dma/qcom/hidma_ll.c
+index 4999e266b2de..7c6e2ff212a2 100644
+--- a/drivers/dma/qcom/hidma_ll.c
++++ b/drivers/dma/qcom/hidma_ll.c
+@@ -393,6 +393,8 @@ static int hidma_ll_reset(struct hidma_lldev *lldev)
+  */
+ static void hidma_ll_int_handler_internal(struct hidma_lldev *lldev, int 
cause)
+ {
++      unsigned long irqflags;
++
+       if (cause & HIDMA_ERR_INT_MASK) {
+               dev_err(lldev->dev, "error 0x%x, disabling...\n",
+                               cause);
+@@ -410,6 +412,10 @@ static void hidma_ll_int_handler_internal(struct 
hidma_lldev *lldev, int cause)
+               return;
+       }
+ 
++      spin_lock_irqsave(&lldev->lock, irqflags);
++      writel_relaxed(cause, lldev->evca + HIDMA_EVCA_IRQ_CLR_REG);
++      spin_unlock_irqrestore(&lldev->lock, irqflags);
++
+       /*
+        * Fine tuned for this HW...
+        *
+@@ -421,9 +427,6 @@ static void hidma_ll_int_handler_internal(struct 
hidma_lldev *lldev, int cause)
+        * Try to consume as many EVREs as possible.
+        */
+       hidma_handle_tre_completion(lldev);
+-
+-      /* We consumed TREs or there are pending TREs or EVREs. */
+-      writel_relaxed(cause, lldev->evca + HIDMA_EVCA_IRQ_CLR_REG);
+ }
+ 
+ irqreturn_t hidma_ll_inthandler(int chirq, void *arg)
+diff --git a/drivers/gpio/gpiolib.c b/drivers/gpio/gpiolib.c
+index f6efcf94f6ad..7a5cf5b08c54 100644
+--- a/drivers/gpio/gpiolib.c
++++ b/drivers/gpio/gpiolib.c
+@@ -460,6 +460,15 @@ static int linehandle_create(struct gpio_device *gdev, 
void __user *ip)
+       if (lflags & ~GPIOHANDLE_REQUEST_VALID_FLAGS)
+               return -EINVAL;
+ 
++      /*
++       * Do not allow OPEN_SOURCE & OPEN_DRAIN flags in a single request. If
++       * the hardware actually supports enabling both at the same time the
++       * electrical result would be disastrous.
++       */
++      if ((lflags & GPIOHANDLE_REQUEST_OPEN_DRAIN) &&
++          (lflags & GPIOHANDLE_REQUEST_OPEN_SOURCE))
++              return -EINVAL;
++
+       /* OPEN_DRAIN and OPEN_SOURCE flags only make sense for output mode. */
+       if (!(lflags & GPIOHANDLE_REQUEST_OUTPUT) &&
+           ((lflags & GPIOHANDLE_REQUEST_OPEN_DRAIN) ||
+diff --git a/drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c 
b/drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c
+index 5432af39a674..f7fa7675215c 100644
+--- a/drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c
++++ b/drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c
+@@ -265,6 +265,9 @@ uint32_t get_max_engine_clock_in_mhz(struct kgd_dev *kgd)
+ {
+       struct amdgpu_device *adev = (struct amdgpu_device *)kgd;
+ 
+-      /* The sclk is in quantas of 10kHz */
+-      return adev->pm.dpm.dyn_state.max_clock_voltage_on_ac.sclk / 100;
++      /* the sclk is in quantas of 10kHz */
++      if (amdgpu_sriov_vf(adev))
++              return adev->clock.default_sclk / 100;
++
++      return amdgpu_dpm_get_sclk(adev, false) / 100;
+ }
+diff --git a/drivers/gpu/drm/amd/amdgpu/amdgpu_sync.c 
b/drivers/gpu/drm/amd/amdgpu/amdgpu_sync.c
+index a4bf21f8f1c1..bbbc40d630a0 100644
+--- a/drivers/gpu/drm/amd/amdgpu/amdgpu_sync.c
++++ b/drivers/gpu/drm/amd/amdgpu/amdgpu_sync.c
+@@ -191,9 +191,6 @@ int amdgpu_sync_resv(struct amdgpu_device *adev,
+       f = reservation_object_get_excl(resv);
+       r = amdgpu_sync_fence(adev, sync, f);
+ 
+-      if (explicit_sync)
+-              return r;
+-
+       flist = reservation_object_get_list(resv);
+       if (!flist || r)
+               return r;
+@@ -212,11 +209,11 @@ int amdgpu_sync_resv(struct amdgpu_device *adev,
+                            (fence_owner == AMDGPU_FENCE_OWNER_VM)))
+                               continue;
+ 
+-                      /* Ignore fence from the same owner as
++                      /* Ignore fence from the same owner and explicit one as
+                        * long as it isn't undefined.
+                        */
+                       if (owner != AMDGPU_FENCE_OWNER_UNDEFINED &&
+-                          fence_owner == owner)
++                          (fence_owner == owner || explicit_sync))
+                               continue;
+               }
+ 
+diff --git a/drivers/gpu/drm/amd/amdgpu/dce_virtual.c 
b/drivers/gpu/drm/amd/amdgpu/dce_virtual.c
+index a8829af120c1..39460eb1e71a 100644
+--- a/drivers/gpu/drm/amd/amdgpu/dce_virtual.c
++++ b/drivers/gpu/drm/amd/amdgpu/dce_virtual.c
+@@ -437,6 +437,8 @@ static int dce_virtual_sw_fini(void *handle)
+       drm_kms_helper_poll_fini(adev->ddev);
+ 
+       drm_mode_config_cleanup(adev->ddev);
++      /* clear crtcs pointer to avoid dce irq finish routine access freed 
data */
++      memset(adev->mode_info.crtcs, 0, sizeof(adev->mode_info.crtcs[0]) * 
AMDGPU_MAX_CRTCS);
+       adev->mode_info.mode_config_initialized = false;
+       return 0;
+ }
+@@ -723,7 +725,7 @@ static void 
dce_virtual_set_crtc_vblank_interrupt_state(struct amdgpu_device *ad
+                                                       int crtc,
+                                                       enum 
amdgpu_interrupt_state state)
+ {
+-      if (crtc >= adev->mode_info.num_crtc) {
++      if (crtc >= adev->mode_info.num_crtc || !adev->mode_info.crtcs[crtc]) {
+               DRM_DEBUG("invalid crtc %d\n", crtc);
+               return;
+       }
+diff --git a/drivers/gpu/drm/amd/amdgpu/mxgpu_ai.c 
b/drivers/gpu/drm/amd/amdgpu/mxgpu_ai.c
+index b4906d2f30d3..0031f8f34db5 100644
+--- a/drivers/gpu/drm/amd/amdgpu/mxgpu_ai.c
++++ b/drivers/gpu/drm/amd/amdgpu/mxgpu_ai.c
+@@ -282,9 +282,17 @@ static int xgpu_ai_mailbox_rcv_irq(struct amdgpu_device 
*adev,
+               /* see what event we get */
+               r = xgpu_ai_mailbox_rcv_msg(adev, IDH_FLR_NOTIFICATION);
+ 
+-              /* only handle FLR_NOTIFY now */
+-              if (!r)
+-                      schedule_work(&adev->virt.flr_work);
++              /* sometimes the interrupt is delayed to inject to VM, so under 
such case
++               * the IDH_FLR_NOTIFICATION is overwritten by VF FLR from GIM 
side, thus
++               * above recieve message could be failed, we should schedule 
the flr_work
++               * anyway
++               */
++              if (r) {
++                      DRM_ERROR("FLR_NOTIFICATION is missed\n");
++                      xgpu_ai_mailbox_send_ack(adev);
++              }
++
++              schedule_work(&adev->virt.flr_work);
+       }
+ 
+       return 0;
+diff --git a/drivers/gpu/drm/amd/amdkfd/kfd_topology.c 
b/drivers/gpu/drm/amd/amdkfd/kfd_topology.c
+index 19ce59028d6b..e0b78fd9804d 100644
+--- a/drivers/gpu/drm/amd/amdkfd/kfd_topology.c
++++ b/drivers/gpu/drm/amd/amdkfd/kfd_topology.c
+@@ -501,11 +501,17 @@ static ssize_t sysprops_show(struct kobject *kobj, 
struct attribute *attr,
+       return ret;
+ }
+ 
++static void kfd_topology_kobj_release(struct kobject *kobj)
++{
++      kfree(kobj);
++}
++
+ static const struct sysfs_ops sysprops_ops = {
+       .show = sysprops_show,
+ };
+ 
+ static struct kobj_type sysprops_type = {
++      .release = kfd_topology_kobj_release,
+       .sysfs_ops = &sysprops_ops,
+ };
+ 
+@@ -541,6 +547,7 @@ static const struct sysfs_ops iolink_ops = {
+ };
+ 
+ static struct kobj_type iolink_type = {
++      .release = kfd_topology_kobj_release,
+       .sysfs_ops = &iolink_ops,
+ };
+ 
+@@ -568,6 +575,7 @@ static const struct sysfs_ops mem_ops = {
+ };
+ 
+ static struct kobj_type mem_type = {
++      .release = kfd_topology_kobj_release,
+       .sysfs_ops = &mem_ops,
+ };
+ 
+@@ -607,6 +615,7 @@ static const struct sysfs_ops cache_ops = {
+ };
+ 
+ static struct kobj_type cache_type = {
++      .release = kfd_topology_kobj_release,
+       .sysfs_ops = &cache_ops,
+ };
+ 
+@@ -729,6 +738,7 @@ static const struct sysfs_ops node_ops = {
+ };
+ 
+ static struct kobj_type node_type = {
++      .release = kfd_topology_kobj_release,
+       .sysfs_ops = &node_ops,
+ };
+ 
+diff --git a/drivers/gpu/drm/drm_edid.c b/drivers/gpu/drm/drm_edid.c
+index 16fb76ba6509..96afdb4d3ecf 100644
+--- a/drivers/gpu/drm/drm_edid.c
++++ b/drivers/gpu/drm/drm_edid.c
+@@ -3843,8 +3843,7 @@ EXPORT_SYMBOL(drm_edid_get_monitor_name);
+  * @edid: EDID to parse
+  *
+  * Fill the ELD (EDID-Like Data) buffer for passing to the audio driver. The
+- * Conn_Type, HDCP and Port_ID ELD fields are left for the graphics driver to
+- * fill in.
++ * HDCP and Port_ID ELD fields are left for the graphics driver to fill in.
+  */
+ void drm_edid_to_eld(struct drm_connector *connector, struct edid *edid)
+ {
+@@ -3925,6 +3924,12 @@ void drm_edid_to_eld(struct drm_connector *connector, 
struct edid *edid)
+       }
+       eld[5] |= total_sad_count << 4;
+ 
++      if (connector->connector_type == DRM_MODE_CONNECTOR_DisplayPort ||
++          connector->connector_type == DRM_MODE_CONNECTOR_eDP)
++              eld[DRM_ELD_SAD_COUNT_CONN_TYPE] |= DRM_ELD_CONN_TYPE_DP;
++      else
++              eld[DRM_ELD_SAD_COUNT_CONN_TYPE] |= DRM_ELD_CONN_TYPE_HDMI;
++
+       eld[DRM_ELD_BASELINE_ELD_LEN] =
+               DIV_ROUND_UP(drm_eld_calc_baseline_block_size(eld), 4);
+ 
+diff --git a/drivers/gpu/drm/drm_vblank.c b/drivers/gpu/drm/drm_vblank.c
+index 3717b3df34a4..32d9bcf5be7f 100644
+--- a/drivers/gpu/drm/drm_vblank.c
++++ b/drivers/gpu/drm/drm_vblank.c
+@@ -663,14 +663,16 @@ bool drm_calc_vbltimestamp_from_scanoutpos(struct 
drm_device *dev,
+       delta_ns = div_s64(1000000LL * (vpos * mode->crtc_htotal + hpos),
+                          mode->crtc_clock);
+ 
+-      /* save this only for debugging purposes */
+-      ts_etime = ktime_to_timespec64(etime);
+-      ts_vblank_time = ktime_to_timespec64(*vblank_time);
+       /* Subtract time delta from raw timestamp to get final
+        * vblank_time timestamp for end of vblank.
+        */
+-      etime = ktime_sub_ns(etime, delta_ns);
+-      *vblank_time = etime;
++      *vblank_time = ktime_sub_ns(etime, delta_ns);
++
++      if ((drm_debug & DRM_UT_VBL) == 0)
++              return true;
++
++      ts_etime = ktime_to_timespec64(etime);
++      ts_vblank_time = ktime_to_timespec64(*vblank_time);
+ 
+       DRM_DEBUG_VBL("crtc %u : v p(%d,%d)@ %lld.%06ld -> %lld.%06ld [e %d us, 
%d rep]\n",
+                     pipe, hpos, vpos,
+diff --git a/drivers/gpu/drm/etnaviv/Kconfig b/drivers/gpu/drm/etnaviv/Kconfig
+index a29b8f59eb15..3f58b4077767 100644
+--- a/drivers/gpu/drm/etnaviv/Kconfig
++++ b/drivers/gpu/drm/etnaviv/Kconfig
+@@ -6,6 +6,7 @@ config DRM_ETNAVIV
+       depends on MMU
+       select SHMEM
+       select SYNC_FILE
++      select THERMAL if DRM_ETNAVIV_THERMAL
+       select TMPFS
+       select WANT_DEV_COREDUMP
+       select CMA if HAVE_DMA_CONTIGUOUS
+@@ -13,6 +14,14 @@ config DRM_ETNAVIV
+       help
+         DRM driver for Vivante GPUs.
+ 
++config DRM_ETNAVIV_THERMAL
++      bool "enable ETNAVIV thermal throttling"
++      depends on DRM_ETNAVIV
++      default y
++      help
++        Compile in support for thermal throttling.
++        Say Y unless you want to risk burning your SoC.
++
+ config DRM_ETNAVIV_REGISTER_LOGGING
+       bool "enable ETNAVIV register logging"
+       depends on DRM_ETNAVIV
+diff --git a/drivers/gpu/drm/etnaviv/etnaviv_gpu.c 
b/drivers/gpu/drm/etnaviv/etnaviv_gpu.c
+index e19cbe05da2a..968cbc2be9c4 100644
+--- a/drivers/gpu/drm/etnaviv/etnaviv_gpu.c
++++ b/drivers/gpu/drm/etnaviv/etnaviv_gpu.c
+@@ -1738,7 +1738,7 @@ static int etnaviv_gpu_bind(struct device *dev, struct 
device *master,
+       struct etnaviv_gpu *gpu = dev_get_drvdata(dev);
+       int ret;
+ 
+-      if (IS_ENABLED(CONFIG_THERMAL)) {
++      if (IS_ENABLED(CONFIG_DRM_ETNAVIV_THERMAL)) {
+               gpu->cooling = thermal_of_cooling_device_register(dev->of_node,
+                               (char *)dev_name(dev), gpu, &cooling_ops);
+               if (IS_ERR(gpu->cooling))
+@@ -1751,7 +1751,8 @@ static int etnaviv_gpu_bind(struct device *dev, struct 
device *master,
+       ret = etnaviv_gpu_clk_enable(gpu);
+ #endif
+       if (ret < 0) {
+-              thermal_cooling_device_unregister(gpu->cooling);
++              if (IS_ENABLED(CONFIG_DRM_ETNAVIV_THERMAL))
++                      thermal_cooling_device_unregister(gpu->cooling);
+               return ret;
+       }
+ 
+@@ -1808,7 +1809,8 @@ static void etnaviv_gpu_unbind(struct device *dev, 
struct device *master,
+ 
+       gpu->drm = NULL;
+ 
+-      thermal_cooling_device_unregister(gpu->cooling);
++      if (IS_ENABLED(CONFIG_DRM_ETNAVIV_THERMAL))
++              thermal_cooling_device_unregister(gpu->cooling);
+       gpu->cooling = NULL;
+ }
+ 
+diff --git a/drivers/gpu/drm/i915/intel_guc_fw.c 
b/drivers/gpu/drm/i915/intel_guc_fw.c
+index ef67a36354c5..cd05bdea46d3 100644
+--- a/drivers/gpu/drm/i915/intel_guc_fw.c
++++ b/drivers/gpu/drm/i915/intel_guc_fw.c
+@@ -39,9 +39,6 @@
+ #define KBL_FW_MAJOR 9
+ #define KBL_FW_MINOR 14
+ 
+-#define GLK_FW_MAJOR 10
+-#define GLK_FW_MINOR 56
+-
+ #define GUC_FW_PATH(platform, major, minor) \
+        "i915/" __stringify(platform) "_guc_ver" __stringify(major) "_" 
__stringify(minor) ".bin"
+ 
+@@ -54,8 +51,6 @@ MODULE_FIRMWARE(I915_BXT_GUC_UCODE);
+ #define I915_KBL_GUC_UCODE GUC_FW_PATH(kbl, KBL_FW_MAJOR, KBL_FW_MINOR)
+ MODULE_FIRMWARE(I915_KBL_GUC_UCODE);
+ 
+-#define I915_GLK_GUC_UCODE GUC_FW_PATH(glk, GLK_FW_MAJOR, GLK_FW_MINOR)
+-
+ /**
+  * intel_guc_fw_select() - selects GuC firmware for uploading
+  *
+@@ -85,10 +80,6 @@ int intel_guc_fw_select(struct intel_guc *guc)
+               guc->fw.path = I915_KBL_GUC_UCODE;
+               guc->fw.major_ver_wanted = KBL_FW_MAJOR;
+               guc->fw.minor_ver_wanted = KBL_FW_MINOR;
+-      } else if (IS_GEMINILAKE(dev_priv)) {
+-              guc->fw.path = I915_GLK_GUC_UCODE;
+-              guc->fw.major_ver_wanted = GLK_FW_MAJOR;
+-              guc->fw.minor_ver_wanted = GLK_FW_MINOR;
+       } else {
+               DRM_ERROR("No GuC firmware known for platform with GuC!\n");
+               return -ENOENT;
+diff --git a/drivers/gpu/drm/i915/intel_huc.c 
b/drivers/gpu/drm/i915/intel_huc.c
+index c8a48cbc2b7d..c3460c4a7b54 100644
+--- a/drivers/gpu/drm/i915/intel_huc.c
++++ b/drivers/gpu/drm/i915/intel_huc.c
+@@ -54,10 +54,6 @@
+ #define KBL_HUC_FW_MINOR 00
+ #define KBL_BLD_NUM 1810
+ 
+-#define GLK_HUC_FW_MAJOR 02
+-#define GLK_HUC_FW_MINOR 00
+-#define GLK_BLD_NUM 1748
+-
+ #define HUC_FW_PATH(platform, major, minor, bld_num) \
+       "i915/" __stringify(platform) "_huc_ver" __stringify(major) "_" \
+       __stringify(minor) "_" __stringify(bld_num) ".bin"
+@@ -74,9 +70,6 @@ MODULE_FIRMWARE(I915_BXT_HUC_UCODE);
+       KBL_HUC_FW_MINOR, KBL_BLD_NUM)
+ MODULE_FIRMWARE(I915_KBL_HUC_UCODE);
+ 
+-#define I915_GLK_HUC_UCODE HUC_FW_PATH(glk, GLK_HUC_FW_MAJOR, \
+-      GLK_HUC_FW_MINOR, GLK_BLD_NUM)
+-
+ /**
+  * intel_huc_select_fw() - selects HuC firmware for loading
+  * @huc:      intel_huc struct
+@@ -103,10 +96,6 @@ void intel_huc_select_fw(struct intel_huc *huc)
+               huc->fw.path = I915_KBL_HUC_UCODE;
+               huc->fw.major_ver_wanted = KBL_HUC_FW_MAJOR;
+               huc->fw.minor_ver_wanted = KBL_HUC_FW_MINOR;
+-      } else if (IS_GEMINILAKE(dev_priv)) {
+-              huc->fw.path = I915_GLK_HUC_UCODE;
+-              huc->fw.major_ver_wanted = GLK_HUC_FW_MAJOR;
+-              huc->fw.minor_ver_wanted = GLK_HUC_FW_MINOR;
+       } else {
+               DRM_ERROR("No HuC firmware known for platform with HuC!\n");
+               return;
+diff --git a/drivers/gpu/drm/panel/panel-raspberrypi-touchscreen.c 
b/drivers/gpu/drm/panel/panel-raspberrypi-touchscreen.c
+index 890fd6ff397c..d964d454e4ae 100644
+--- a/drivers/gpu/drm/panel/panel-raspberrypi-touchscreen.c
++++ b/drivers/gpu/drm/panel/panel-raspberrypi-touchscreen.c
+@@ -221,7 +221,7 @@ static struct rpi_touchscreen *panel_to_ts(struct 
drm_panel *panel)
+       return container_of(panel, struct rpi_touchscreen, base);
+ }
+ 
+-static u8 rpi_touchscreen_i2c_read(struct rpi_touchscreen *ts, u8 reg)
++static int rpi_touchscreen_i2c_read(struct rpi_touchscreen *ts, u8 reg)
+ {
+       return i2c_smbus_read_byte_data(ts->i2c, reg);
+ }
+diff --git a/drivers/gpu/drm/sun4i/sun8i_mixer.h 
b/drivers/gpu/drm/sun4i/sun8i_mixer.h
+index 4785ac090b8c..c142fbb8661e 100644
+--- a/drivers/gpu/drm/sun4i/sun8i_mixer.h
++++ b/drivers/gpu/drm/sun4i/sun8i_mixer.h
+@@ -80,7 +80,7 @@
+ 
+ #define SUN8I_MIXER_CHAN_UI_LAYER_ATTR_EN             BIT(0)
+ #define SUN8I_MIXER_CHAN_UI_LAYER_ATTR_ALPHA_MODE_MASK        GENMASK(2, 1)
+-#define SUN8I_MIXER_CHAN_UI_LAYER_ATTR_FBFMT_MASK     GENMASK(11, 8)
++#define SUN8I_MIXER_CHAN_UI_LAYER_ATTR_FBFMT_MASK     GENMASK(12, 8)
+ #define SUN8I_MIXER_CHAN_UI_LAYER_ATTR_ALPHA_MASK     GENMASK(31, 24)
+ #define SUN8I_MIXER_CHAN_UI_LAYER_ATTR_ALPHA_MODE_DEF (1 << 1)
+ #define SUN8I_MIXER_CHAN_UI_LAYER_ATTR_FBFMT_ARGB8888 (0 << 8)
+diff --git a/drivers/hid/hid-elo.c b/drivers/hid/hid-elo.c
+index 0cd4f7216239..5eea6fe0d7bd 100644
+--- a/drivers/hid/hid-elo.c
++++ b/drivers/hid/hid-elo.c
+@@ -42,6 +42,12 @@ static int elo_input_configured(struct hid_device *hdev,
+ {
+       struct input_dev *input = hidinput->input;
+ 
++      /*
++       * ELO devices have one Button usage in GenDesk field, which makes
++       * hid-input map it to BTN_LEFT; that confuses userspace, which then
++       * considers the device to be a mouse/touchpad instead of touchscreen.
++       */
++      clear_bit(BTN_LEFT, input->keybit);
+       set_bit(BTN_TOUCH, input->keybit);
+       set_bit(ABS_PRESSURE, input->absbit);
+       input_set_abs_params(input, ABS_PRESSURE, 0, 256, 0, 0);
+diff --git a/drivers/hid/hid-multitouch.c b/drivers/hid/hid-multitouch.c
+index 65ea23be9677..397592959238 100644
+--- a/drivers/hid/hid-multitouch.c
++++ b/drivers/hid/hid-multitouch.c
+@@ -778,9 +778,11 @@ static int mt_touch_event(struct hid_device *hid, struct 
hid_field *field,
+ }
+ 
+ static void mt_process_mt_event(struct hid_device *hid, struct hid_field 
*field,
+-                              struct hid_usage *usage, __s32 value)
++                              struct hid_usage *usage, __s32 value,
++                              bool first_packet)
+ {
+       struct mt_device *td = hid_get_drvdata(hid);
++      __s32 cls = td->mtclass.name;
+       __s32 quirks = td->mtclass.quirks;
+       struct input_dev *input = field->hidinput->input;
+ 
+@@ -837,6 +839,15 @@ static void mt_process_mt_event(struct hid_device *hid, 
struct hid_field *field,
+                       break;
+ 
+               default:
++                      /*
++                       * For Win8 PTP touchpads we should only look at
++                       * non finger/touch events in the first_packet of
++                       * a (possible) multi-packet frame.
++                       */
++                      if ((cls == MT_CLS_WIN_8 || cls == MT_CLS_WIN_8_DUAL) &&
++                          !first_packet)
++                              return;
++
+                       if (usage->type)
+                               input_event(input, usage->type, usage->code,
+                                               value);
+@@ -856,6 +867,7 @@ static void mt_touch_report(struct hid_device *hid, struct 
hid_report *report)
+ {
+       struct mt_device *td = hid_get_drvdata(hid);
+       struct hid_field *field;
++      bool first_packet;
+       unsigned count;
+       int r, n;
+ 
+@@ -874,6 +886,7 @@ static void mt_touch_report(struct hid_device *hid, struct 
hid_report *report)
+                       td->num_expected = value;
+       }
+ 
++      first_packet = td->num_received == 0;
+       for (r = 0; r < report->maxfield; r++) {
+               field = report->field[r];
+               count = field->report_count;
+@@ -883,7 +896,7 @@ static void mt_touch_report(struct hid_device *hid, struct 
hid_report *report)
+ 
+               for (n = 0; n < count; n++)
+                       mt_process_mt_event(hid, field, &field->usage[n],
+-                                      field->value[n]);
++                                          field->value[n], first_packet);
+       }
+ 
+       if (td->num_received >= td->num_expected)
+diff --git a/drivers/iio/adc/ina2xx-adc.c b/drivers/iio/adc/ina2xx-adc.c
+index 84a43871f7dc..651dc9df2a7b 100644
+--- a/drivers/iio/adc/ina2xx-adc.c
++++ b/drivers/iio/adc/ina2xx-adc.c
+@@ -44,7 +44,6 @@
+ 
+ #define INA226_MASK_ENABLE            0x06
+ #define INA226_CVRF                   BIT(3)
+-#define INA219_CNVR                   BIT(1)
+ 
+ #define INA2XX_MAX_REGISTERS            8
+ 
+@@ -79,6 +78,11 @@
+ #define INA226_ITS_MASK               GENMASK(5, 3)
+ #define INA226_SHIFT_ITS(val) ((val) << 3)
+ 
++/* INA219 Bus voltage register, low bits are flags */
++#define INA219_OVF            BIT(0)
++#define INA219_CNVR           BIT(1)
++#define INA219_BUS_VOLTAGE_SHIFT      3
++
+ /* Cosmetic macro giving the sampling period for a full P=UxI cycle */
+ #define SAMPLING_PERIOD(c)    ((c->int_time_vbus + c->int_time_vshunt) \
+                                * c->avg)
+@@ -112,7 +116,7 @@ struct ina2xx_config {
+       u16 config_default;
+       int calibration_factor;
+       int shunt_div;
+-      int bus_voltage_shift;
++      int bus_voltage_shift;  /* position of lsb */
+       int bus_voltage_lsb;    /* uV */
+       int power_lsb;          /* uW */
+       enum ina2xx_ids chip_id;
+@@ -135,7 +139,7 @@ static const struct ina2xx_config ina2xx_config[] = {
+               .config_default = INA219_CONFIG_DEFAULT,
+               .calibration_factor = 40960000,
+               .shunt_div = 100,
+-              .bus_voltage_shift = 3,
++              .bus_voltage_shift = INA219_BUS_VOLTAGE_SHIFT,
+               .bus_voltage_lsb = 4000,
+               .power_lsb = 20000,
+               .chip_id = ina219,
+@@ -170,6 +174,9 @@ static int ina2xx_read_raw(struct iio_dev *indio_dev,
+               else
+                       *val  = regval;
+ 
++              if (chan->address == INA2XX_BUS_VOLTAGE)
++                      *val >>= chip->config->bus_voltage_shift;
++
+               return IIO_VAL_INT;
+ 
+       case IIO_CHAN_INFO_OVERSAMPLING_RATIO:
+@@ -203,9 +210,9 @@ static int ina2xx_read_raw(struct iio_dev *indio_dev,
+                       return IIO_VAL_FRACTIONAL;
+ 
+               case INA2XX_BUS_VOLTAGE:
+-                      /* processed (mV) = raw*lsb (uV) / (1000 << shift) */
++                      /* processed (mV) = raw * lsb (uV) / 1000 */
+                       *val = chip->config->bus_voltage_lsb;
+-                      *val2 = 1000 << chip->config->bus_voltage_shift;
++                      *val2 = 1000;
+                       return IIO_VAL_FRACTIONAL;
+ 
+               case INA2XX_POWER:
+@@ -532,7 +539,7 @@ static ssize_t ina2xx_shunt_resistor_store(struct device 
*dev,
+  * Sampling Freq is a consequence of the integration times of
+  * the Voltage channels.
+  */
+-#define INA219_CHAN_VOLTAGE(_index, _address) { \
++#define INA219_CHAN_VOLTAGE(_index, _address, _shift) { \
+       .type = IIO_VOLTAGE, \
+       .address = (_address), \
+       .indexed = 1, \
+@@ -544,7 +551,8 @@ static ssize_t ina2xx_shunt_resistor_store(struct device 
*dev,
+       .scan_index = (_index), \
+       .scan_type = { \
+               .sign = 'u', \
+-              .realbits = 16, \
++              .shift = _shift, \
++              .realbits = 16 - _shift, \
+               .storagebits = 16, \
+               .endianness = IIO_LE, \
+       } \
+@@ -579,8 +587,8 @@ static const struct iio_chan_spec ina226_channels[] = {
+ };
+ 
+ static const struct iio_chan_spec ina219_channels[] = {
+-      INA219_CHAN_VOLTAGE(0, INA2XX_SHUNT_VOLTAGE),
+-      INA219_CHAN_VOLTAGE(1, INA2XX_BUS_VOLTAGE),
++      INA219_CHAN_VOLTAGE(0, INA2XX_SHUNT_VOLTAGE, 0),
++      INA219_CHAN_VOLTAGE(1, INA2XX_BUS_VOLTAGE, INA219_BUS_VOLTAGE_SHIFT),
+       INA219_CHAN(IIO_POWER, 2, INA2XX_POWER),
+       INA219_CHAN(IIO_CURRENT, 3, INA2XX_CURRENT),
+       IIO_CHAN_SOFT_TIMESTAMP(4),
+diff --git a/drivers/iio/health/max30102.c b/drivers/iio/health/max30102.c
+index 147a8c14235f..a14fc2eb1fe9 100644
+--- a/drivers/iio/health/max30102.c
++++ b/drivers/iio/health/max30102.c
+@@ -329,20 +329,31 @@ static int max30102_read_temp(struct max30102_data 
*data, int *val)
+       return 0;
+ }
+ 
+-static int max30102_get_temp(struct max30102_data *data, int *val)
++static int max30102_get_temp(struct max30102_data *data, int *val, bool en)
+ {
+       int ret;
+ 
++      if (en) {
++              ret = max30102_set_powermode(data, true);
++              if (ret)
++                      return ret;
++      }
++
+       /* start acquisition */
+       ret = regmap_update_bits(data->regmap, MAX30102_REG_TEMP_CONFIG,
+                                MAX30102_REG_TEMP_CONFIG_TEMP_EN,
+                                MAX30102_REG_TEMP_CONFIG_TEMP_EN);
+       if (ret)
+-              return ret;
++              goto out;
+ 
+       msleep(35);
++      ret = max30102_read_temp(data, val);
++
++out:
++      if (en)
++              max30102_set_powermode(data, false);
+ 
+-      return max30102_read_temp(data, val);
++      return ret;
+ }
+ 
+ static int max30102_read_raw(struct iio_dev *indio_dev,
+@@ -355,20 +366,19 @@ static int max30102_read_raw(struct iio_dev *indio_dev,
+       switch (mask) {
+       case IIO_CHAN_INFO_RAW:
+               /*
+-               * Temperature reading can only be acquired while engine
+-               * is running
++               * Temperature reading can only be acquired when not in
++               * shutdown; leave shutdown briefly when buffer not running
+                */
+               mutex_lock(&indio_dev->mlock);
+-
+               if (!iio_buffer_enabled(indio_dev))
+-                      ret = -EBUSY;
+-              else {
+-                      ret = max30102_get_temp(data, val);
+-                      if (!ret)
+-                              ret = IIO_VAL_INT;
+-              }
+-
++                      ret = max30102_get_temp(data, val, true);
++              else
++                      ret = max30102_get_temp(data, val, false);
+               mutex_unlock(&indio_dev->mlock);
++              if (ret)
++                      return ret;
++
++              ret = IIO_VAL_INT;
+               break;
+       case IIO_CHAN_INFO_SCALE:
+               *val = 1000;  /* 62.5 */
+diff --git a/drivers/infiniband/hw/mlx5/mr.c b/drivers/infiniband/hw/mlx5/mr.c
+index 3832edd867ed..1961c6a45437 100644
+--- a/drivers/infiniband/hw/mlx5/mr.c
++++ b/drivers/infiniband/hw/mlx5/mr.c
+@@ -1206,6 +1206,9 @@ struct ib_mr *mlx5_ib_reg_user_mr(struct ib_pd *pd, u64 
start, u64 length,
+       int err;
+       bool use_umr = true;
+ 
++      if (!IS_ENABLED(CONFIG_INFINIBAND_USER_MEM))
++              return ERR_PTR(-EINVAL);
++
+       mlx5_ib_dbg(dev, "start 0x%llx, virt_addr 0x%llx, length 0x%llx, 
access_flags 0x%x\n",
+                   start, virt_addr, length, access_flags);
+ 
+diff --git a/drivers/leds/leds-pm8058.c b/drivers/leds/leds-pm8058.c
+index a52674327857..8988ba3b2d65 100644
+--- a/drivers/leds/leds-pm8058.c
++++ b/drivers/leds/leds-pm8058.c
+@@ -106,7 +106,7 @@ static int pm8058_led_probe(struct platform_device *pdev)
+       if (!led)
+               return -ENOMEM;
+ 
+-      led->ledtype = (u32)of_device_get_match_data(&pdev->dev);
++      led->ledtype = (u32)(unsigned long)of_device_get_match_data(&pdev->dev);
+ 
+       map = dev_get_regmap(pdev->dev.parent, NULL);
+       if (!map) {
+diff --git a/drivers/md/dm-mpath.c b/drivers/md/dm-mpath.c
+index f7810cc869ac..025e033ecb78 100644
+--- a/drivers/md/dm-mpath.c
++++ b/drivers/md/dm-mpath.c
+@@ -1968,8 +1968,9 @@ static int multipath_busy(struct dm_target *ti)
+  *---------------------------------------------------------------*/
+ static struct target_type multipath_target = {
+       .name = "multipath",
+-      .version = {1, 12, 0},
+-      .features = DM_TARGET_SINGLETON | DM_TARGET_IMMUTABLE,
++      .version = {1, 13, 0},
++      .features = DM_TARGET_SINGLETON | DM_TARGET_IMMUTABLE |
++                  DM_TARGET_PASSES_INTEGRITY,
+       .module = THIS_MODULE,
+       .ctr = multipath_ctr,
+       .dtr = multipath_dtr,
+diff --git a/drivers/md/dm-raid.c b/drivers/md/dm-raid.c
+index 6319d846e0ad..d0f330a5d0cb 100644
+--- a/drivers/md/dm-raid.c
++++ b/drivers/md/dm-raid.c
+@@ -675,15 +675,11 @@ static struct raid_type *get_raid_type_by_ll(const int 
level, const int layout)
+       return NULL;
+ }
+ 
+-/*
+- * Conditionally change bdev capacity of @rs
+- * in case of a disk add/remove reshape
+- */
+-static void rs_set_capacity(struct raid_set *rs)
++/* Adjust rdev sectors */
++static void rs_set_rdev_sectors(struct raid_set *rs)
+ {
+       struct mddev *mddev = &rs->md;
+       struct md_rdev *rdev;
+-      struct gendisk *gendisk = dm_disk(dm_table_get_md(rs->ti->table));
+ 
+       /*
+        * raid10 sets rdev->sector to the device size, which
+@@ -692,8 +688,16 @@ static void rs_set_capacity(struct raid_set *rs)
+       rdev_for_each(rdev, mddev)
+               if (!test_bit(Journal, &rdev->flags))
+                       rdev->sectors = mddev->dev_sectors;
++}
+ 
+-      set_capacity(gendisk, mddev->array_sectors);
++/*
++ * Change bdev capacity of @rs in case of a disk add/remove reshape
++ */
++static void rs_set_capacity(struct raid_set *rs)
++{
++      struct gendisk *gendisk = dm_disk(dm_table_get_md(rs->ti->table));
++
++      set_capacity(gendisk, rs->md.array_sectors);
+       revalidate_disk(gendisk);
+ }
+ 
+@@ -1674,8 +1678,11 @@ static void do_table_event(struct work_struct *ws)
+       struct raid_set *rs = container_of(ws, struct raid_set, md.event_work);
+ 
+       smp_rmb(); /* Make sure we access most actual mddev properties */
+-      if (!rs_is_reshaping(rs))
++      if (!rs_is_reshaping(rs)) {
++              if (rs_is_raid10(rs))
++                      rs_set_rdev_sectors(rs);
+               rs_set_capacity(rs);
++      }
+       dm_table_event(rs->ti->table);
+ }
+ 
+@@ -3842,11 +3849,10 @@ static int raid_preresume(struct dm_target *ti)
+               mddev->resync_min = mddev->recovery_cp;
+       }
+ 
+-      rs_set_capacity(rs);
+-
+       /* Check for any reshape request unless new raid set */
+       if (test_and_clear_bit(RT_FLAG_RESHAPE_RS, &rs->runtime_flags)) {
+               /* Initiate a reshape. */
++              rs_set_rdev_sectors(rs);
+               mddev_lock_nointr(mddev);
+               r = rs_start_reshape(rs);
+               mddev_unlock(mddev);
+@@ -3875,6 +3881,10 @@ static void raid_resume(struct dm_target *ti)
+       mddev->ro = 0;
+       mddev->in_sync = 0;
+ 
++      /* Only reduce raid set size before running a disk removing reshape. */
++      if (mddev->delta_disks < 0)
++              rs_set_capacity(rs);
++
+       /*
+        * Keep the RAID set frozen if reshape/rebuild flags are set.
+        * The RAID set is unfrozen once the next table load/resume,
+diff --git a/drivers/media/platform/davinci/vpif_capture.c 
b/drivers/media/platform/davinci/vpif_capture.c
+index fca4dc829f73..e45916f69def 100644
+--- a/drivers/media/platform/davinci/vpif_capture.c
++++ b/drivers/media/platform/davinci/vpif_capture.c
+@@ -1550,6 +1550,8 @@ vpif_capture_get_pdata(struct platform_device *pdev)
+                                           sizeof(*chan->inputs) *
+                                           VPIF_CAPTURE_NUM_CHANNELS,
+                                           GFP_KERNEL);
++              if (!chan->inputs)
++                      return NULL;
+ 
+               chan->input_count++;
+               chan->inputs[i].input.type = V4L2_INPUT_TYPE_CAMERA;
+diff --git a/drivers/media/platform/vsp1/vsp1_drv.c 
b/drivers/media/platform/vsp1/vsp1_drv.c
+index 962e4c304076..eed9516e25e1 100644
+--- a/drivers/media/platform/vsp1/vsp1_drv.c
++++ b/drivers/media/platform/vsp1/vsp1_drv.c
+@@ -571,7 +571,13 @@ static int __maybe_unused vsp1_pm_suspend(struct device 
*dev)
+ {
+       struct vsp1_device *vsp1 = dev_get_drvdata(dev);
+ 
+-      vsp1_pipelines_suspend(vsp1);
++      /*
++       * When used as part of a display pipeline, the VSP is stopped and
++       * restarted explicitly by the DU.
++       */
++      if (!vsp1->drm)
++              vsp1_pipelines_suspend(vsp1);
++
+       pm_runtime_force_suspend(vsp1->dev);
+ 
+       return 0;
+@@ -582,7 +588,13 @@ static int __maybe_unused vsp1_pm_resume(struct device 
*dev)
+       struct vsp1_device *vsp1 = dev_get_drvdata(dev);
+ 
+       pm_runtime_force_resume(vsp1->dev);
+-      vsp1_pipelines_resume(vsp1);
++
++      /*
++       * When used as part of a display pipeline, the VSP is stopped and
++       * restarted explicitly by the DU.
++       */
++      if (!vsp1->drm)
++              vsp1_pipelines_resume(vsp1);
+ 
+       return 0;
+ }
+diff --git a/drivers/media/usb/cpia2/cpia2_v4l.c 
b/drivers/media/usb/cpia2/cpia2_v4l.c
+index 3dedd83f0b19..a1c59f19cf2d 100644
+--- a/drivers/media/usb/cpia2/cpia2_v4l.c
++++ b/drivers/media/usb/cpia2/cpia2_v4l.c
+@@ -808,7 +808,7 @@ static int cpia2_querybuf(struct file *file, void *fh, 
struct v4l2_buffer *buf)
+       struct camera_data *cam = video_drvdata(file);
+ 
+       if(buf->type != V4L2_BUF_TYPE_VIDEO_CAPTURE ||
+-         buf->index > cam->num_frames)
++         buf->index >= cam->num_frames)
+               return -EINVAL;
+ 
+       buf->m.offset = cam->buffers[buf->index].data - cam->frame_buffer;
+@@ -859,7 +859,7 @@ static int cpia2_qbuf(struct file *file, void *fh, struct 
v4l2_buffer *buf)
+ 
+       if(buf->type != V4L2_BUF_TYPE_VIDEO_CAPTURE ||
+          buf->memory != V4L2_MEMORY_MMAP ||
+-         buf->index > cam->num_frames)
++         buf->index >= cam->num_frames)
+               return -EINVAL;
+ 
+       DBG("QBUF #%d\n", buf->index);
+diff --git a/drivers/mmc/core/mmc_test.c b/drivers/mmc/core/mmc_test.c
+index 478869805b96..789afef66fce 100644
+--- a/drivers/mmc/core/mmc_test.c
++++ b/drivers/mmc/core/mmc_test.c
+@@ -2328,10 +2328,17 @@ static int mmc_test_reset(struct mmc_test_card *test)
+       int err;
+ 
+       err = mmc_hw_reset(host);
+-      if (!err)
++      if (!err) {
++              /*
++               * Reset will re-enable the card's command queue, but tests
++               * expect it to be disabled.
++               */
++              if (card->ext_csd.cmdq_en)
++                      mmc_cmdq_disable(card);
+               return RESULT_OK;
+-      else if (err == -EOPNOTSUPP)
++      } else if (err == -EOPNOTSUPP) {
+               return RESULT_UNSUP_HOST;
++      }
+ 
+       return RESULT_FAIL;
+ }
+diff --git a/drivers/mtd/nand/fsl_ifc_nand.c b/drivers/mtd/nand/fsl_ifc_nand.c
+index 9e03bac7f34c..bbdd68a54d68 100644
+--- a/drivers/mtd/nand/fsl_ifc_nand.c
++++ b/drivers/mtd/nand/fsl_ifc_nand.c
+@@ -916,6 +916,13 @@ static int fsl_ifc_chip_init(struct fsl_ifc_mtd *priv)
+       if (ctrl->version >= FSL_IFC_VERSION_1_1_0)
+               fsl_ifc_sram_init(priv);
+ 
++      /*
++       * As IFC version 2.0.0 has 16KB of internal SRAM as compared to older
++       * versions which had 8KB. Hence bufnum mask needs to be updated.
++       */
++      if (ctrl->version >= FSL_IFC_VERSION_2_0_0)
++              priv->bufnum_mask = (priv->bufnum_mask * 2) + 1;
++
+       return 0;
+ }
+ 
+diff --git a/drivers/mtd/nand/nand_base.c b/drivers/mtd/nand/nand_base.c
+index 9c702b46c6ee..e38edfa766f2 100644
+--- a/drivers/mtd/nand/nand_base.c
++++ b/drivers/mtd/nand/nand_base.c
+@@ -710,7 +710,8 @@ static void nand_command(struct mtd_info *mtd, unsigned 
int command,
+               chip->cmd_ctrl(mtd, readcmd, ctrl);
+               ctrl &= ~NAND_CTRL_CHANGE;
+       }
+-      chip->cmd_ctrl(mtd, command, ctrl);
++      if (command != NAND_CMD_NONE)
++              chip->cmd_ctrl(mtd, command, ctrl);
+ 
+       /* Address cycle, when necessary */
+       ctrl = NAND_CTRL_ALE | NAND_CTRL_CHANGE;
+@@ -738,6 +739,7 @@ static void nand_command(struct mtd_info *mtd, unsigned 
int command,
+        */
+       switch (command) {
+ 
++      case NAND_CMD_NONE:
+       case NAND_CMD_PAGEPROG:
+       case NAND_CMD_ERASE1:
+       case NAND_CMD_ERASE2:
+@@ -831,7 +833,9 @@ static void nand_command_lp(struct mtd_info *mtd, unsigned 
int command,
+       }
+ 
+       /* Command latch cycle */
+-      chip->cmd_ctrl(mtd, command, NAND_NCE | NAND_CLE | NAND_CTRL_CHANGE);
++      if (command != NAND_CMD_NONE)
++              chip->cmd_ctrl(mtd, command,
++                             NAND_NCE | NAND_CLE | NAND_CTRL_CHANGE);
+ 
+       if (column != -1 || page_addr != -1) {
+               int ctrl = NAND_CTRL_CHANGE | NAND_NCE | NAND_ALE;
+@@ -866,6 +870,7 @@ static void nand_command_lp(struct mtd_info *mtd, unsigned 
int command,
+        */
+       switch (command) {
+ 
++      case NAND_CMD_NONE:
+       case NAND_CMD_CACHEDPROG:
+       case NAND_CMD_PAGEPROG:
+       case NAND_CMD_ERASE1:
+diff --git a/drivers/net/ethernet/broadcom/bnxt/bnxt.c 
b/drivers/net/ethernet/broadcom/bnxt/bnxt.c
+index 61ca4eb7c6fa..6a9ee65099a6 100644
+--- a/drivers/net/ethernet/broadcom/bnxt/bnxt.c
++++ b/drivers/net/ethernet/broadcom/bnxt/bnxt.c
+@@ -1706,12 +1706,16 @@ static int bnxt_async_event_process(struct bnxt *bp,
+ 
+               if (BNXT_VF(bp))
+                       goto async_event_process_exit;
+-              if (data1 & 0x20000) {
++
++              /* print unsupported speed warning in forced speed mode only */
++              if (!(link_info->autoneg & BNXT_AUTONEG_SPEED) &&
++                  (data1 & 0x20000)) {
+                       u16 fw_speed = link_info->force_link_speed;
+                       u32 speed = bnxt_fw_to_ethtool_speed(fw_speed);
+ 
+-                      netdev_warn(bp->dev, "Link speed %d no longer 
supported\n",
+-                                  speed);
++                      if (speed != SPEED_UNKNOWN)
++                              netdev_warn(bp->dev, "Link speed %d no longer 
supported\n",
++                                          speed);
+               }
+               set_bit(BNXT_LINK_SPEED_CHNG_SP_EVENT, &bp->sp_event);
+               /* fall thru */
+diff --git a/drivers/net/ethernet/broadcom/bnxt/bnxt_tc.c 
b/drivers/net/ethernet/broadcom/bnxt/bnxt_tc.c
+index d8fee26cd45e..aa484d72f38c 100644
+--- a/drivers/net/ethernet/broadcom/bnxt/bnxt_tc.c
++++ b/drivers/net/ethernet/broadcom/bnxt/bnxt_tc.c
+@@ -148,9 +148,6 @@ static int bnxt_tc_parse_actions(struct bnxt *bp,
+               }
+       }
+ 
+-      if (rc)
+-              return rc;
+-
+       if (actions->flags & BNXT_TC_ACTION_FLAG_FWD) {
+               if (actions->flags & BNXT_TC_ACTION_FLAG_TUNNEL_ENCAP) {
+                       /* dst_fid is PF's fid */
+@@ -164,7 +161,7 @@ static int bnxt_tc_parse_actions(struct bnxt *bp,
+               }
+       }
+ 
+-      return rc;
++      return 0;
+ }
+ 
+ #define GET_KEY(flow_cmd, key_type)                                   \
+diff --git a/drivers/net/ethernet/cavium/thunder/nicvf_main.c 
b/drivers/net/ethernet/cavium/thunder/nicvf_main.c
+index a063c36c4c58..3e6286d402ef 100644
+--- a/drivers/net/ethernet/cavium/thunder/nicvf_main.c
++++ b/drivers/net/ethernet/cavium/thunder/nicvf_main.c
+@@ -1833,6 +1833,11 @@ static int nicvf_probe(struct pci_dev *pdev, const 
struct pci_device_id *ent)
+       nic->pdev = pdev;
+       nic->pnicvf = nic;
+       nic->max_queues = qcount;
++      /* If no of CPUs are too low, there won't be any queues left
++       * for XDP_TX, hence double it.
++       */
++      if (!nic->t88)
++              nic->max_queues *= 2;
+ 
+       /* MAP VF's configuration registers */
+       nic->reg_base = pcim_iomap(pdev, PCI_CFG_REG_BAR_NUM, 0);
+diff --git a/drivers/net/ieee802154/adf7242.c 
b/drivers/net/ieee802154/adf7242.c
+index 400fdbd3a120..8381f4279bc7 100644
+--- a/drivers/net/ieee802154/adf7242.c
++++ b/drivers/net/ieee802154/adf7242.c
+@@ -888,7 +888,7 @@ static const struct ieee802154_ops adf7242_ops = {
+       .set_cca_ed_level = adf7242_set_cca_ed_level,
+ };
+ 
+-static void adf7242_debug(u8 irq1)
++static void adf7242_debug(struct adf7242_local *lp, u8 irq1)
+ {
+ #ifdef DEBUG
+       u8 stat;
+@@ -932,7 +932,7 @@ static irqreturn_t adf7242_isr(int irq, void *data)
+               dev_err(&lp->spi->dev, "%s :ERROR IRQ1 = 0x%X\n",
+                       __func__, irq1);
+ 
+-      adf7242_debug(irq1);
++      adf7242_debug(lp, irq1);
+ 
+       xmit = test_bit(FLAG_XMIT, &lp->flags);
+ 
+diff --git a/drivers/net/ipvlan/ipvlan_core.c 
b/drivers/net/ipvlan/ipvlan_core.c
+index 77cc4fbaeace..e92f31a53339 100644
+--- a/drivers/net/ipvlan/ipvlan_core.c
++++ b/drivers/net/ipvlan/ipvlan_core.c
+@@ -322,6 +322,10 @@ static int ipvlan_rcv_frame(struct ipvl_addr *addr, 
struct sk_buff **pskb,
+               if (dev_forward_skb(ipvlan->dev, skb) == NET_RX_SUCCESS)
+                       success = true;
+       } else {
++              if (!ether_addr_equal_64bits(eth_hdr(skb)->h_dest,
++                                           ipvlan->phy_dev->dev_addr))
++                      skb->pkt_type = PACKET_OTHERHOST;
++
+               ret = RX_HANDLER_ANOTHER;
+               success = true;
+       }
+diff --git a/drivers/net/veth.c b/drivers/net/veth.c
+index f5438d0978ca..a69ad39ee57e 100644
+--- a/drivers/net/veth.c
++++ b/drivers/net/veth.c
+@@ -410,6 +410,9 @@ static int veth_newlink(struct net *src_net, struct 
net_device *dev,
+       if (ifmp && (dev->ifindex != 0))
+               peer->ifindex = ifmp->ifi_index;
+ 
++      peer->gso_max_size = dev->gso_max_size;
++      peer->gso_max_segs = dev->gso_max_segs;
++
+       err = register_netdevice(peer);
+       put_net(net);
+       net = NULL;
+diff --git a/drivers/net/virtio_net.c b/drivers/net/virtio_net.c
+index 5907a8d0e921..f42ee452072b 100644
+--- a/drivers/net/virtio_net.c
++++ b/drivers/net/virtio_net.c
+@@ -261,9 +261,12 @@ static void virtqueue_napi_complete(struct napi_struct 
*napi,
+       int opaque;
+ 
+       opaque = virtqueue_enable_cb_prepare(vq);
+-      if (napi_complete_done(napi, processed) &&
+-          unlikely(virtqueue_poll(vq, opaque)))
+-              virtqueue_napi_schedule(napi, vq);
++      if (napi_complete_done(napi, processed)) {
++              if (unlikely(virtqueue_poll(vq, opaque)))
++                      virtqueue_napi_schedule(napi, vq);
++      } else {
++              virtqueue_disable_cb(vq);
++      }
+ }
+ 
+ static void skb_xmit_done(struct virtqueue *vq)
+diff --git a/drivers/net/wireless/ath/ath10k/mac.c 
b/drivers/net/wireless/ath/ath10k/mac.c
+index 0a947eef348d..c6460e7f6d78 100644
+--- a/drivers/net/wireless/ath/ath10k/mac.c
++++ b/drivers/net/wireless/ath/ath10k/mac.c
+@@ -6201,6 +6201,16 @@ static int ath10k_sta_state(struct ieee80211_hw *hw,
+                          "mac vdev %d peer delete %pM sta %pK (sta gone)\n",
+                          arvif->vdev_id, sta->addr, sta);
+ 
++              if (sta->tdls) {
++                      ret = ath10k_mac_tdls_peer_update(ar, arvif->vdev_id,
++                                                        sta,
++                                                        
WMI_TDLS_PEER_STATE_TEARDOWN);
++                      if (ret)
++                              ath10k_warn(ar, "failed to update tdls peer 
state for %pM state %d: %i\n",
++                                          sta->addr,
++                                          WMI_TDLS_PEER_STATE_TEARDOWN, ret);
++              }
++
+               ret = ath10k_peer_delete(ar, arvif->vdev_id, sta->addr);
+               if (ret)
+                       ath10k_warn(ar, "failed to delete peer %pM for vdev %d: 
%i\n",
+diff --git a/drivers/net/wireless/ath/ath10k/wmi.h 
b/drivers/net/wireless/ath/ath10k/wmi.h
+index c02b21cff38d..3cb8fe4374c5 100644
+--- a/drivers/net/wireless/ath/ath10k/wmi.h
++++ b/drivers/net/wireless/ath/ath10k/wmi.h
+@@ -5236,7 +5236,8 @@ enum wmi_10_4_vdev_param {
+ #define WMI_VDEV_PARAM_TXBF_MU_TX_BFER BIT(3)
+ 
+ #define WMI_TXBF_STS_CAP_OFFSET_LSB   4
+-#define WMI_TXBF_STS_CAP_OFFSET_MASK  0xf0
++#define WMI_TXBF_STS_CAP_OFFSET_MASK  0x70
++#define WMI_TXBF_CONF_IMPLICIT_BF       BIT(7)
+ #define WMI_BF_SOUND_DIM_OFFSET_LSB   8
+ #define WMI_BF_SOUND_DIM_OFFSET_MASK  0xf00
+ 
+diff --git a/drivers/net/wireless/intel/iwlwifi/mvm/rs.c 
b/drivers/net/wireless/intel/iwlwifi/mvm/rs.c
+index c69515ed72df..fbfa5eafcc93 100644
+--- a/drivers/net/wireless/intel/iwlwifi/mvm/rs.c
++++ b/drivers/net/wireless/intel/iwlwifi/mvm/rs.c
+@@ -1877,12 +1877,10 @@ static int rs_switch_to_column(struct iwl_mvm *mvm,
+       struct rs_rate *rate = &search_tbl->rate;
+       const struct rs_tx_column *column = &rs_tx_columns[col_id];
+       const struct rs_tx_column *curr_column = &rs_tx_columns[tbl->column];
+-      u32 sz = (sizeof(struct iwl_scale_tbl_info) -
+-                (sizeof(struct iwl_rate_scale_data) * IWL_RATE_COUNT));
+       unsigned long rate_mask = 0;
+       u32 rate_idx = 0;
+ 
+-      memcpy(search_tbl, tbl, sz);
++      memcpy(search_tbl, tbl, offsetof(struct iwl_scale_tbl_info, win));
+ 
+       rate->sgi = column->sgi;
+       rate->ant = column->ant;
+diff --git a/drivers/net/wireless/intel/iwlwifi/mvm/utils.c 
b/drivers/net/wireless/intel/iwlwifi/mvm/utils.c
+index 03ffd84786ca..50255944525e 100644
+--- a/drivers/net/wireless/intel/iwlwifi/mvm/utils.c
++++ b/drivers/net/wireless/intel/iwlwifi/mvm/utils.c
+@@ -595,6 +595,12 @@ static void iwl_mvm_dump_lmac_error_log(struct iwl_mvm 
*mvm, u32 base)
+ 
+ void iwl_mvm_dump_nic_error_log(struct iwl_mvm *mvm)
+ {
++      if (!test_bit(STATUS_DEVICE_ENABLED, &mvm->trans->status)) {
++              IWL_ERR(mvm,
++                      "DEVICE_ENABLED bit is not set. Aborting dump.\n");
++              return;
++      }
++
+       iwl_mvm_dump_lmac_error_log(mvm, mvm->error_event_table[0]);
+ 
+       if (mvm->error_event_table[1])
+diff --git a/drivers/net/wireless/mac80211_hwsim.c 
b/drivers/net/wireless/mac80211_hwsim.c
+index 829ac22b72fc..731d59ee6efe 100644
+--- a/drivers/net/wireless/mac80211_hwsim.c
++++ b/drivers/net/wireless/mac80211_hwsim.c
+@@ -729,16 +729,21 @@ static int hwsim_fops_ps_write(void *dat, u64 val)
+           val != PS_MANUAL_POLL)
+               return -EINVAL;
+ 
+-      old_ps = data->ps;
+-      data->ps = val;
+-
+-      local_bh_disable();
+       if (val == PS_MANUAL_POLL) {
++              if (data->ps != PS_ENABLED)
++                      return -EINVAL;
++              local_bh_disable();
+               ieee80211_iterate_active_interfaces_atomic(
+                       data->hw, IEEE80211_IFACE_ITER_NORMAL,
+                       hwsim_send_ps_poll, data);
+-              data->ps_poll_pending = true;
+-      } else if (old_ps == PS_DISABLED && val != PS_DISABLED) {
++              local_bh_enable();
++              return 0;
++      }
++      old_ps = data->ps;
++      data->ps = val;
++
++      local_bh_disable();
++      if (old_ps == PS_DISABLED && val != PS_DISABLED) {
+               ieee80211_iterate_active_interfaces_atomic(
+                       data->hw, IEEE80211_IFACE_ITER_NORMAL,
+                       hwsim_send_nullfunc_ps, data);
+diff --git a/drivers/net/wireless/marvell/mwifiex/cfg80211.c 
b/drivers/net/wireless/marvell/mwifiex/cfg80211.c
+index 6e0d9a9c5cfb..f32401197f7c 100644
+--- a/drivers/net/wireless/marvell/mwifiex/cfg80211.c
++++ b/drivers/net/wireless/marvell/mwifiex/cfg80211.c
+@@ -1116,6 +1116,12 @@ mwifiex_cfg80211_change_virtual_intf(struct wiphy 
*wiphy,
+       struct mwifiex_private *priv = mwifiex_netdev_get_priv(dev);
+       enum nl80211_iftype curr_iftype = dev->ieee80211_ptr->iftype;
+ 
++      if (priv->scan_request) {
++              mwifiex_dbg(priv->adapter, ERROR,
++                          "change virtual interface: scan in process\n");
++              return -EBUSY;
++      }
++
+       switch (curr_iftype) {
+       case NL80211_IFTYPE_ADHOC:
+               switch (type) {
+diff --git a/drivers/pinctrl/sh-pfc/pfc-r8a7791.c 
b/drivers/pinctrl/sh-pfc/pfc-r8a7791.c
+index 10bd35f8c894..c01ef02d326b 100644
+--- a/drivers/pinctrl/sh-pfc/pfc-r8a7791.c
++++ b/drivers/pinctrl/sh-pfc/pfc-r8a7791.c
+@@ -4826,6 +4826,10 @@ static const char * const can0_groups[] = {
+       "can0_data_d",
+       "can0_data_e",
+       "can0_data_f",
++      /*
++       * Retained for backwards compatibility, use can_clk_groups in new
++       * designs.
++       */
+       "can_clk",
+       "can_clk_b",
+       "can_clk_c",
+@@ -4837,6 +4841,21 @@ static const char * const can1_groups[] = {
+       "can1_data_b",
+       "can1_data_c",
+       "can1_data_d",
++      /*
++       * Retained for backwards compatibility, use can_clk_groups in new
++       * designs.
++       */
++      "can_clk",
++      "can_clk_b",
++      "can_clk_c",
++      "can_clk_d",
++};
++
++/*
++ * can_clk_groups allows for independent configuration, use can_clk function
++ * in new designs.
++ */
++static const char * const can_clk_groups[] = {
+       "can_clk",
+       "can_clk_b",
+       "can_clk_c",
+@@ -5308,7 +5327,7 @@ static const char * const vin2_groups[] = {
+ };
+ 
+ static const struct {
+-      struct sh_pfc_function common[56];
++      struct sh_pfc_function common[57];
+       struct sh_pfc_function r8a779x[2];
+ } pinmux_functions = {
+       .common = {
+@@ -5316,6 +5335,7 @@ static const struct {
+               SH_PFC_FUNCTION(avb),
+               SH_PFC_FUNCTION(can0),
+               SH_PFC_FUNCTION(can1),
++              SH_PFC_FUNCTION(can_clk),
+               SH_PFC_FUNCTION(du),
+               SH_PFC_FUNCTION(du0),
+               SH_PFC_FUNCTION(du1),
+diff --git a/drivers/pinctrl/sh-pfc/pfc-r8a7795-es1.c 
b/drivers/pinctrl/sh-pfc/pfc-r8a7795-es1.c
+index 1d4d84f34d60..292e35d4d2f4 100644
+--- a/drivers/pinctrl/sh-pfc/pfc-r8a7795-es1.c
++++ b/drivers/pinctrl/sh-pfc/pfc-r8a7795-es1.c
+@@ -1397,7 +1397,7 @@ static const u16 pinmux_data[] = {
+       PINMUX_IPSR_MSEL(IP16_27_24,    AUDIO_CLKOUT_B,         SEL_ADG_1),
+       PINMUX_IPSR_MSEL(IP16_27_24,    SSI_SCK2_B,             SEL_SSI_1),
+       PINMUX_IPSR_MSEL(IP16_27_24,    TS_SDEN1_D,             SEL_TSIF1_3),
+-      PINMUX_IPSR_MSEL(IP16_27_24,    STP_ISEN_1_D,           SEL_SSP1_1_2),
++      PINMUX_IPSR_MSEL(IP16_27_24,    STP_ISEN_1_D,           SEL_SSP1_1_3),
+       PINMUX_IPSR_MSEL(IP16_27_24,    STP_OPWM_0_E,           SEL_SSP1_0_4),
+       PINMUX_IPSR_MSEL(IP16_27_24,    RIF3_D0_B,              SEL_DRIF3_1),
+       PINMUX_IPSR_MSEL(IP16_27_24,    TCLK2_B,                
SEL_TIMER_TMU_1),
+diff --git a/drivers/power/supply/ab8500_charger.c 
b/drivers/power/supply/ab8500_charger.c
+index 4ebbcce45c48..5a76c6d343de 100644
+--- a/drivers/power/supply/ab8500_charger.c
++++ b/drivers/power/supply/ab8500_charger.c
+@@ -3218,11 +3218,13 @@ static int ab8500_charger_init_hw_registers(struct 
ab8500_charger *di)
+       }
+ 
+       /* Enable backup battery charging */
+-      abx500_mask_and_set_register_interruptible(di->dev,
++      ret = abx500_mask_and_set_register_interruptible(di->dev,
+               AB8500_RTC, AB8500_RTC_CTRL_REG,
+               RTC_BUP_CH_ENA, RTC_BUP_CH_ENA);
+-      if (ret < 0)
++      if (ret < 0) {
+               dev_err(di->dev, "%s mask and set failed\n", __func__);
++              goto out;
++      }
+ 
+       if (is_ab8540(di->parent)) {
+               ret = abx500_mask_and_set_register_interruptible(di->dev,
+diff --git a/drivers/power/supply/sbs-manager.c 
b/drivers/power/supply/sbs-manager.c
+index ccb4217b9638..cb6e8f66c7a2 100644
+--- a/drivers/power/supply/sbs-manager.c
++++ b/drivers/power/supply/sbs-manager.c
+@@ -183,7 +183,7 @@ static int sbsm_select(struct i2c_mux_core *muxc, u32 chan)
+               return ret;
+ 
+       /* chan goes from 1 ... 4 */
+-      reg = 1 << BIT(SBSM_SMB_BAT_OFFSET + chan);
++      reg = BIT(SBSM_SMB_BAT_OFFSET + chan);
+       ret = sbsm_write_word(data->client, SBSM_CMD_BATSYSSTATE, reg);
+       if (ret)
+               dev_err(dev, "Failed to select channel %i\n", chan);
+diff --git a/drivers/pwm/pwm-stmpe.c b/drivers/pwm/pwm-stmpe.c
+index e464582a390a..3439f1e902cb 100644
+--- a/drivers/pwm/pwm-stmpe.c
++++ b/drivers/pwm/pwm-stmpe.c
+@@ -145,7 +145,7 @@ static int stmpe_24xx_pwm_config(struct pwm_chip *chip, 
struct pwm_device *pwm,
+               break;
+ 
+       case 2:
+-              offset = STMPE24XX_PWMIC1;
++              offset = STMPE24XX_PWMIC2;
+               break;
+ 
+       default:
+diff --git a/drivers/rtc/rtc-brcmstb-waketimer.c 
b/drivers/rtc/rtc-brcmstb-waketimer.c
+index 796ac792a381..6cee61201c30 100644
+--- a/drivers/rtc/rtc-brcmstb-waketimer.c
++++ b/drivers/rtc/rtc-brcmstb-waketimer.c
+@@ -253,7 +253,7 @@ static int brcmstb_waketmr_probe(struct platform_device 
*pdev)
+       ret = devm_request_irq(dev, timer->irq, brcmstb_waketmr_irq, 0,
+                              "brcmstb-waketimer", timer);
+       if (ret < 0)
+-              return ret;
++              goto err_clk;
+ 
+       timer->reboot_notifier.notifier_call = brcmstb_waketmr_reboot;
+       register_reboot_notifier(&timer->reboot_notifier);
+@@ -262,12 +262,21 @@ static int brcmstb_waketmr_probe(struct platform_device 
*pdev)
+                                        &brcmstb_waketmr_ops, THIS_MODULE);
+       if (IS_ERR(timer->rtc)) {
+               dev_err(dev, "unable to register device\n");
+-              unregister_reboot_notifier(&timer->reboot_notifier);
+-              return PTR_ERR(timer->rtc);
++              ret = PTR_ERR(timer->rtc);
++              goto err_notifier;
+       }
+ 
+       dev_info(dev, "registered, with irq %d\n", timer->irq);
+ 
++      return 0;
++
++err_notifier:
++      unregister_reboot_notifier(&timer->reboot_notifier);
++
++err_clk:
++      if (timer->clk)
++              clk_disable_unprepare(timer->clk);
++
+       return ret;
+ }
+ 
+diff --git a/drivers/scsi/lpfc/lpfc_nvme.c b/drivers/scsi/lpfc/lpfc_nvme.c
+index 517ae570e507..0e63c88441a3 100644
+--- a/drivers/scsi/lpfc/lpfc_nvme.c
++++ b/drivers/scsi/lpfc/lpfc_nvme.c
+@@ -416,6 +416,9 @@ lpfc_nvme_ls_req(struct nvme_fc_local_port *pnvme_lport,
+       lport = (struct lpfc_nvme_lport *)pnvme_lport->private;
+       vport = lport->vport;
+ 
++      if (vport->load_flag & FC_UNLOADING)
++              return -ENODEV;
++
+       if (vport->load_flag & FC_UNLOADING)
+               return -ENODEV;
+ 
+@@ -534,6 +537,9 @@ lpfc_nvme_ls_abort(struct nvme_fc_local_port *pnvme_lport,
+       vport = lport->vport;
+       phba = vport->phba;
+ 
++      if (vport->load_flag & FC_UNLOADING)
++              return;
++
+       ndlp = lpfc_findnode_did(vport, pnvme_rport->port_id);
+       if (!ndlp) {
+               lpfc_printf_vlog(vport, KERN_ERR, LOG_NVME_ABTS,
+@@ -1260,6 +1266,11 @@ lpfc_nvme_fcp_io_submit(struct nvme_fc_local_port 
*pnvme_lport,
+               goto out_fail;
+       }
+ 
++      if (vport->load_flag & FC_UNLOADING) {
++              ret = -ENODEV;
++              goto out_fail;
++      }
++
+       /* Validate pointers. */
+       if (!pnvme_lport || !pnvme_rport || !freqpriv) {
+               lpfc_printf_vlog(vport, KERN_INFO, LOG_NVME_IOERR | LOG_NODE,
+@@ -1487,6 +1498,9 @@ lpfc_nvme_fcp_abort(struct nvme_fc_local_port 
*pnvme_lport,
+       vport = lport->vport;
+       phba = vport->phba;
+ 
++      if (vport->load_flag & FC_UNLOADING)
++              return;
++
+       /* Announce entry to new IO submit field. */
+       lpfc_printf_vlog(vport, KERN_INFO, LOG_NVME_ABTS,
+                        "6002 Abort Request to rport DID x%06x "
+diff --git a/drivers/scsi/lpfc/lpfc_nvmet.c b/drivers/scsi/lpfc/lpfc_nvmet.c
+index 84cf1b9079f7..2b50aecc2722 100644
+--- a/drivers/scsi/lpfc/lpfc_nvmet.c
++++ b/drivers/scsi/lpfc/lpfc_nvmet.c
+@@ -632,6 +632,9 @@ lpfc_nvmet_xmt_ls_rsp(struct nvmet_fc_target_port *tgtport,
+       struct ulp_bde64 bpl;
+       int rc;
+ 
++      if (phba->pport->load_flag & FC_UNLOADING)
++              return -ENODEV;
++
+       if (phba->pport->load_flag & FC_UNLOADING)
+               return -ENODEV;
+ 
+@@ -721,6 +724,11 @@ lpfc_nvmet_xmt_fcp_op(struct nvmet_fc_target_port 
*tgtport,
+               goto aerr;
+       }
+ 
++      if (phba->pport->load_flag & FC_UNLOADING) {
++              rc = -ENODEV;
++              goto aerr;
++      }
++
+ #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
+       if (ctxp->ts_cmd_nvme) {
+               if (rsp->op == NVMET_FCOP_RSP)
+@@ -820,6 +828,9 @@ lpfc_nvmet_xmt_fcp_abort(struct nvmet_fc_target_port 
*tgtport,
+       struct lpfc_hba *phba = ctxp->phba;
+       unsigned long flags;
+ 
++      if (phba->pport->load_flag & FC_UNLOADING)
++              return;
++
+       if (phba->pport->load_flag & FC_UNLOADING)
+               return;
+ 
+diff --git a/drivers/scsi/scsi_devinfo.c b/drivers/scsi/scsi_devinfo.c
+index dfb8da83fa50..0a17b9e5dc35 100644
+--- a/drivers/scsi/scsi_devinfo.c
++++ b/drivers/scsi/scsi_devinfo.c
+@@ -181,7 +181,7 @@ static struct {
+       {"HITACHI", "6586-", "*", BLIST_SPARSELUN | BLIST_LARGELUN},
+       {"HITACHI", "6588-", "*", BLIST_SPARSELUN | BLIST_LARGELUN},
+       {"HP", "A6189A", NULL, BLIST_SPARSELUN | BLIST_LARGELUN},       /* HP 
VA7400 */
+-      {"HP", "OPEN-", "*", BLIST_REPORTLUN2}, /* HP XP Arrays */
++      {"HP", "OPEN-", "*", BLIST_REPORTLUN2 | BLIST_TRY_VPD_PAGES}, /* HP XP 
Arrays */
+       {"HP", "NetRAID-4M", NULL, BLIST_FORCELUN},
+       {"HP", "HSV100", NULL, BLIST_REPORTLUN2 | BLIST_NOSTARTONADD},
+       {"HP", "C1557A", NULL, BLIST_FORCELUN},
+@@ -590,17 +590,12 @@ blist_flags_t scsi_get_device_flags_keyed(struct 
scsi_device *sdev,
+                               int key)
+ {
+       struct scsi_dev_info_list *devinfo;
+-      int err;
+ 
+       devinfo = scsi_dev_info_list_find(vendor, model, key);
+       if (!IS_ERR(devinfo))
+               return devinfo->flags;
+ 
+-      err = PTR_ERR(devinfo);
+-      if (err != -ENOENT)
+-              return err;
+-
+-      /* nothing found, return nothing */
++      /* key or device not found: return nothing */
+       if (key != SCSI_DEVINFO_GLOBAL)
+               return 0;
+ 
+diff --git a/drivers/scsi/scsi_dh.c b/drivers/scsi/scsi_dh.c
+index 2b785d09d5bd..b88b5dbbc444 100644
+--- a/drivers/scsi/scsi_dh.c
++++ b/drivers/scsi/scsi_dh.c
+@@ -56,10 +56,13 @@ static const struct scsi_dh_blist scsi_dh_blist[] = {
+       {"IBM", "1815",                 "rdac", },
+       {"IBM", "1818",                 "rdac", },
+       {"IBM", "3526",                 "rdac", },
++      {"IBM", "3542",                 "rdac", },
++      {"IBM", "3552",                 "rdac", },
+       {"SGI", "TP9",                  "rdac", },
+       {"SGI", "IS",                   "rdac", },
+-      {"STK", "OPENstorage D280",     "rdac", },
++      {"STK", "OPENstorage",          "rdac", },
+       {"STK", "FLEXLINE 380",         "rdac", },
++      {"STK", "BladeCtlr",            "rdac", },
+       {"SUN", "CSM",                  "rdac", },
+       {"SUN", "LCSM100",              "rdac", },
+       {"SUN", "STK6580_6780",         "rdac", },
+diff --git a/drivers/scsi/sd_zbc.c b/drivers/scsi/sd_zbc.c
+index 27793b9f54c0..9049a189c8e5 100644
+--- a/drivers/scsi/sd_zbc.c
++++ b/drivers/scsi/sd_zbc.c
+@@ -486,7 +486,7 @@ static int sd_zbc_check_capacity(struct scsi_disk *sdkp, 
unsigned char *buf)
+  */
+ static int sd_zbc_check_zone_size(struct scsi_disk *sdkp)
+ {
+-      u64 zone_blocks;
++      u64 zone_blocks = 0;
+       sector_t block = 0;
+       unsigned char *buf;
+       unsigned char *rec;
+@@ -504,10 +504,8 @@ static int sd_zbc_check_zone_size(struct scsi_disk *sdkp)
+ 
+       /* Do a report zone to get the same field */
+       ret = sd_zbc_report_zones(sdkp, buf, SD_ZBC_BUF_SIZE, 0);
+-      if (ret) {
+-              zone_blocks = 0;
+-              goto out;
+-      }
++      if (ret)
++              goto out_free;
+ 
+       same = buf[4] & 0x0f;
+       if (same > 0) {
+@@ -547,7 +545,7 @@ static int sd_zbc_check_zone_size(struct scsi_disk *sdkp)
+                       ret = sd_zbc_report_zones(sdkp, buf,
+                                                 SD_ZBC_BUF_SIZE, block);
+                       if (ret)
+-                              return ret;
++                              goto out_free;
+               }
+ 
+       } while (block < sdkp->capacity);
+@@ -555,35 +553,32 @@ static int sd_zbc_check_zone_size(struct scsi_disk *sdkp)
+       zone_blocks = sdkp->zone_blocks;
+ 
+ out:
+-      kfree(buf);
+-
+       if (!zone_blocks) {
+               if (sdkp->first_scan)
+                       sd_printk(KERN_NOTICE, sdkp,
+                                 "Devices with non constant zone "
+                                 "size are not supported\n");
+-              return -ENODEV;
+-      }
+-
+-      if (!is_power_of_2(zone_blocks)) {
++              ret = -ENODEV;
++      } else if (!is_power_of_2(zone_blocks)) {
+               if (sdkp->first_scan)
+                       sd_printk(KERN_NOTICE, sdkp,
+                                 "Devices with non power of 2 zone "
+                                 "size are not supported\n");
+-              return -ENODEV;
+-      }
+-
+-      if (logical_to_sectors(sdkp->device, zone_blocks) > UINT_MAX) {
++              ret = -ENODEV;
++      } else if (logical_to_sectors(sdkp->device, zone_blocks) > UINT_MAX) {
+               if (sdkp->first_scan)
+                       sd_printk(KERN_NOTICE, sdkp,
+                                 "Zone size too large\n");
+-              return -ENODEV;
++              ret = -ENODEV;
++      } else {
++              sdkp->zone_blocks = zone_blocks;
++              sdkp->zone_shift = ilog2(zone_blocks);
+       }
+ 
+-      sdkp->zone_blocks = zone_blocks;
+-      sdkp->zone_shift = ilog2(zone_blocks);
++out_free:
++      kfree(buf);
+ 
+-      return 0;
++      return ret;
+ }
+ 
+ static int sd_zbc_setup(struct scsi_disk *sdkp)
+diff --git a/drivers/scsi/ses.c b/drivers/scsi/ses.c
+index 11826c5c2dd4..62f04c0511cf 100644
+--- a/drivers/scsi/ses.c
++++ b/drivers/scsi/ses.c
+@@ -615,13 +615,16 @@ static void ses_enclosure_data_process(struct 
enclosure_device *edev,
+ }
+ 
+ static void ses_match_to_enclosure(struct enclosure_device *edev,
+-                                 struct scsi_device *sdev)
++                                 struct scsi_device *sdev,
++                                 int refresh)
+ {
++      struct scsi_device *edev_sdev = to_scsi_device(edev->edev.parent);
+       struct efd efd = {
+               .addr = 0,
+       };
+ 
+-      ses_enclosure_data_process(edev, to_scsi_device(edev->edev.parent), 0);
++      if (refresh)
++              ses_enclosure_data_process(edev, edev_sdev, 0);
+ 
+       if (scsi_is_sas_rphy(sdev->sdev_target->dev.parent))
+               efd.addr = sas_get_address(sdev);
+@@ -652,7 +655,7 @@ static int ses_intf_add(struct device *cdev,
+               struct enclosure_device *prev = NULL;
+ 
+               while ((edev = enclosure_find(&sdev->host->shost_gendev, prev)) 
!= NULL) {
+-                      ses_match_to_enclosure(edev, sdev);
++                      ses_match_to_enclosure(edev, sdev, 1);
+                       prev = edev;
+               }
+               return -ENODEV;
+@@ -768,7 +771,7 @@ static int ses_intf_add(struct device *cdev,
+       shost_for_each_device(tmp_sdev, sdev->host) {
+               if (tmp_sdev->lun != 0 || scsi_device_enclosure(tmp_sdev))
+                       continue;
+-              ses_match_to_enclosure(edev, tmp_sdev);
++              ses_match_to_enclosure(edev, tmp_sdev, 0);
+       }
+ 
+       return 0;
+diff --git a/drivers/spi/spi-imx.c b/drivers/spi/spi-imx.c
+index 40390d31a93b..6f57592a7f95 100644
+--- a/drivers/spi/spi-imx.c
++++ b/drivers/spi/spi-imx.c
+@@ -1622,6 +1622,11 @@ static int spi_imx_probe(struct platform_device *pdev)
+       spi_imx->devtype_data->intctrl(spi_imx, 0);
+ 
+       master->dev.of_node = pdev->dev.of_node;
++      ret = spi_bitbang_start(&spi_imx->bitbang);
++      if (ret) {
++              dev_err(&pdev->dev, "bitbang start failed with %d\n", ret);
++              goto out_clk_put;
++      }
+ 
+       /* Request GPIO CS lines, if any */
+       if (!spi_imx->slave_mode && master->cs_gpios) {
+@@ -1640,12 +1645,6 @@ static int spi_imx_probe(struct platform_device *pdev)
+               }
+       }
+ 
+-      ret = spi_bitbang_start(&spi_imx->bitbang);
+-      if (ret) {
+-              dev_err(&pdev->dev, "bitbang start failed with %d\n", ret);
+-              goto out_clk_put;
+-      }
+-
+       dev_info(&pdev->dev, "probed\n");
+ 
+       clk_disable(spi_imx->clk_ipg);
+diff --git a/drivers/spi/spi-sun6i.c b/drivers/spi/spi-sun6i.c
+index fb38234249a8..8533f4edd00a 100644
+--- a/drivers/spi/spi-sun6i.c
++++ b/drivers/spi/spi-sun6i.c
+@@ -541,7 +541,7 @@ static int sun6i_spi_probe(struct platform_device *pdev)
+ 
+ static int sun6i_spi_remove(struct platform_device *pdev)
+ {
+-      pm_runtime_disable(&pdev->dev);
++      pm_runtime_force_suspend(&pdev->dev);
+ 
+       return 0;
+ }
+diff --git a/drivers/staging/android/ashmem.c 
b/drivers/staging/android/ashmem.c
+index e7541dc90473..d9941b0c468d 100644
+--- a/drivers/staging/android/ashmem.c
++++ b/drivers/staging/android/ashmem.c
+@@ -334,24 +334,23 @@ static loff_t ashmem_llseek(struct file *file, loff_t 
offset, int origin)
+       mutex_lock(&ashmem_mutex);
+ 
+       if (asma->size == 0) {
+-              ret = -EINVAL;
+-              goto out;
++              mutex_unlock(&ashmem_mutex);
++              return -EINVAL;
+       }
+ 
+       if (!asma->file) {
+-              ret = -EBADF;
+-              goto out;
++              mutex_unlock(&ashmem_mutex);
++              return -EBADF;
+       }
+ 
++      mutex_unlock(&ashmem_mutex);
++
+       ret = vfs_llseek(asma->file, offset, origin);
+       if (ret < 0)
+-              goto out;
++              return ret;
+ 
+       /** Copy f_pos from backing file, since f_ops->llseek() sets it */
+       file->f_pos = asma->file->f_pos;
+-
+-out:
+-      mutex_unlock(&ashmem_mutex);
+       return ret;
+ }
+ 
+diff --git a/drivers/staging/comedi/drivers.c 
b/drivers/staging/comedi/drivers.c
+index 0b43db6371c6..c11c22bd6d13 100644
+--- a/drivers/staging/comedi/drivers.c
++++ b/drivers/staging/comedi/drivers.c
+@@ -484,8 +484,7 @@ unsigned int comedi_nsamples_left(struct comedi_subdevice 
*s,
+       struct comedi_cmd *cmd = &async->cmd;
+ 
+       if (cmd->stop_src == TRIG_COUNT) {
+-              unsigned int nscans = nsamples / cmd->scan_end_arg;
+-              unsigned int scans_left = __comedi_nscans_left(s, nscans);
++              unsigned int scans_left = __comedi_nscans_left(s, 
cmd->stop_arg);
+               unsigned int scan_pos =
+                   comedi_bytes_to_samples(s, async->scan_progress);
+               unsigned long long samples_left = 0;
+diff --git a/drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c 
b/drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c
+index 0d8ed002adcb..c8a8e3abfc3a 100644
+--- a/drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c
++++ b/drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.c
+@@ -249,7 +249,7 @@ static void dpaa2_eth_rx(struct dpaa2_eth_priv *priv,
+       vaddr = dpaa2_iova_to_virt(priv->iommu_domain, addr);
+       dma_unmap_single(dev, addr, DPAA2_ETH_RX_BUF_SIZE, DMA_FROM_DEVICE);
+ 
+-      fas = dpaa2_get_fas(vaddr);
++      fas = dpaa2_get_fas(vaddr, false);
+       prefetch(fas);
+       buf_data = vaddr + dpaa2_fd_get_offset(fd);
+       prefetch(buf_data);
+@@ -385,7 +385,7 @@ static int build_sg_fd(struct dpaa2_eth_priv *priv,
+        * on TX confirmation. We are clearing FAS (Frame Annotation Status)
+        * field from the hardware annotation area
+        */
+-      fas = dpaa2_get_fas(sgt_buf);
++      fas = dpaa2_get_fas(sgt_buf, true);
+       memset(fas, 0, DPAA2_FAS_SIZE);
+ 
+       sgt = (struct dpaa2_sg_entry *)(sgt_buf + priv->tx_data_offset);
+@@ -458,7 +458,7 @@ static int build_single_fd(struct dpaa2_eth_priv *priv,
+        * on TX confirmation. We are clearing FAS (Frame Annotation Status)
+        * field from the hardware annotation area
+        */
+-      fas = dpaa2_get_fas(buffer_start);
++      fas = dpaa2_get_fas(buffer_start, true);
+       memset(fas, 0, DPAA2_FAS_SIZE);
+ 
+       /* Store a backpointer to the skb at the beginning of the buffer
+@@ -510,7 +510,7 @@ static void free_tx_fd(const struct dpaa2_eth_priv *priv,
+ 
+       fd_addr = dpaa2_fd_get_addr(fd);
+       skbh = dpaa2_iova_to_virt(priv->iommu_domain, fd_addr);
+-      fas = dpaa2_get_fas(skbh);
++      fas = dpaa2_get_fas(skbh, true);
+ 
+       if (fd_format == dpaa2_fd_single) {
+               skb = *skbh;
+diff --git a/drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.h 
b/drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.h
+index 5b3ab9f62d5e..3a4e9395acdc 100644
+--- a/drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.h
++++ b/drivers/staging/fsl-dpaa2/ethernet/dpaa2-eth.h
+@@ -153,10 +153,15 @@ struct dpaa2_fas {
+ #define DPAA2_FAS_SIZE                        (sizeof(struct dpaa2_fas))
+ 
+ /* Accessors for the hardware annotation fields that we use */
+-#define dpaa2_get_hwa(buf_addr) \
+-      ((void *)(buf_addr) + DPAA2_ETH_SWA_SIZE)
+-#define dpaa2_get_fas(buf_addr) \
+-      (struct dpaa2_fas *)(dpaa2_get_hwa(buf_addr) + DPAA2_FAS_OFFSET)
++static inline void *dpaa2_get_hwa(void *buf_addr, bool swa)
++{
++      return buf_addr + (swa ? DPAA2_ETH_SWA_SIZE : 0);
++}
++
++static inline struct dpaa2_fas *dpaa2_get_fas(void *buf_addr, bool swa)
++{
++      return dpaa2_get_hwa(buf_addr, swa) + DPAA2_FAS_OFFSET;
++}
+ 
+ /* Error and status bits in the frame annotation status word */
+ /* Debug frame, otherwise supposed to be discarded */
+diff --git a/drivers/staging/rtlwifi/rtl8822be/fw.c 
b/drivers/staging/rtlwifi/rtl8822be/fw.c
+index f45487122517..483ea85943c3 100644
+--- a/drivers/staging/rtlwifi/rtl8822be/fw.c
++++ b/drivers/staging/rtlwifi/rtl8822be/fw.c
+@@ -464,6 +464,8 @@ bool rtl8822b_halmac_cb_write_data_rsvd_page(struct 
rtl_priv *rtlpriv, u8 *buf,
+       int count;
+ 
+       skb = dev_alloc_skb(size);
++      if (!skb)
++              return false;
+       memcpy((u8 *)skb_put(skb, size), buf, size);
+ 
+       if (!_rtl8822be_send_bcn_or_cmd_packet(rtlpriv->hw, skb, BEACON_QUEUE))
+diff --git a/drivers/tty/serial/8250/8250_pci.c 
b/drivers/tty/serial/8250/8250_pci.c
+index 54adf8d56350..38850672c57e 100644
+--- a/drivers/tty/serial/8250/8250_pci.c
++++ b/drivers/tty/serial/8250/8250_pci.c
+@@ -4698,6 +4698,17 @@ static const struct pci_device_id serial_pci_tbl[] = {
+       {       PCI_VENDOR_ID_INTASHIELD, PCI_DEVICE_ID_INTASHIELD_IS400,
+               PCI_ANY_ID, PCI_ANY_ID, 0, 0,    /* 135a.0dc0 */
+               pbn_b2_4_115200 },
++      /*
++       * BrainBoxes UC-260
++       */
++      {       PCI_VENDOR_ID_INTASHIELD, 0x0D21,
++              PCI_ANY_ID, PCI_ANY_ID,
++              PCI_CLASS_COMMUNICATION_MULTISERIAL << 8, 0xffff00,
++              pbn_b2_4_115200 },
++      {       PCI_VENDOR_ID_INTASHIELD, 0x0E34,
++              PCI_ANY_ID, PCI_ANY_ID,
++               PCI_CLASS_COMMUNICATION_MULTISERIAL << 8, 0xffff00,
++              pbn_b2_4_115200 },
+       /*
+        * Perle PCI-RAS cards
+        */
+diff --git a/drivers/tty/serial/atmel_serial.c 
b/drivers/tty/serial/atmel_serial.c
+index efa25611ca0c..ae9f1dcbf3fc 100644
+--- a/drivers/tty/serial/atmel_serial.c
++++ b/drivers/tty/serial/atmel_serial.c
+@@ -1734,6 +1734,7 @@ static void atmel_get_ip_name(struct uart_port *port)
+               switch (version) {
+               case 0x302:
+               case 0x10213:
++              case 0x10302:
+                       dev_dbg(port->dev, "This version is usart\n");
+                       atmel_port->has_frac_baudrate = true;
+                       atmel_port->has_hw_timer = true;
+diff --git a/drivers/tty/serial/earlycon.c b/drivers/tty/serial/earlycon.c
+index 4c8b80f1c688..ade1bbbeb9c9 100644
+--- a/drivers/tty/serial/earlycon.c
++++ b/drivers/tty/serial/earlycon.c
+@@ -250,11 +250,12 @@ int __init of_setup_earlycon(const struct earlycon_id 
*match,
+       }
+       port->mapbase = addr;
+       port->uartclk = BASE_BAUD * 16;
+-      port->membase = earlycon_map(port->mapbase, SZ_4K);
+ 
+       val = of_get_flat_dt_prop(node, "reg-offset", NULL);
+       if (val)
+               port->mapbase += be32_to_cpu(*val);
++      port->membase = earlycon_map(port->mapbase, SZ_4K);
++
+       val = of_get_flat_dt_prop(node, "reg-shift", NULL);
+       if (val)
+               port->regshift = be32_to_cpu(*val);
+diff --git a/drivers/tty/serial/serial_core.c 
b/drivers/tty/serial/serial_core.c
+index 7e7e6eb95b0a..6e0ab3333f62 100644
+--- a/drivers/tty/serial/serial_core.c
++++ b/drivers/tty/serial/serial_core.c
+@@ -1144,6 +1144,8 @@ static int uart_do_autoconfig(struct tty_struct 
*tty,struct uart_state *state)
+               uport->ops->config_port(uport, flags);
+ 
+               ret = uart_startup(tty, state, 1);
++              if (ret == 0)
++                      tty_port_set_initialized(port, true);
+               if (ret > 0)
+                       ret = 0;
+       }
+diff --git a/drivers/tty/serial/sh-sci.c b/drivers/tty/serial/sh-sci.c
+index d9f399c4e90c..db2ebeca7788 100644
+--- a/drivers/tty/serial/sh-sci.c
++++ b/drivers/tty/serial/sh-sci.c
+@@ -885,6 +885,8 @@ static void sci_receive_chars(struct uart_port *port)
+               /* Tell the rest of the system the news. New characters! */
+               tty_flip_buffer_push(tport);
+       } else {
++              /* TTY buffers full; read from RX reg to prevent lockup */
++              serial_port_in(port, SCxRDR);
+               serial_port_in(port, SCxSR); /* dummy read */
+               sci_clear_SCxSR(port, SCxSR_RDxF_CLEAR(port));
+       }
+diff --git a/drivers/usb/core/ledtrig-usbport.c 
b/drivers/usb/core/ledtrig-usbport.c
+index 9dbb429cd471..f1fde5165068 100644
+--- a/drivers/usb/core/ledtrig-usbport.c
++++ b/drivers/usb/core/ledtrig-usbport.c
+@@ -137,11 +137,17 @@ static bool usbport_trig_port_observed(struct 
usbport_trig_data *usbport_data,
+       if (!led_np)
+               return false;
+ 
+-      /* Get node of port being added */
++      /*
++       * Get node of port being added
++       *
++       * FIXME: This is really the device node of the connected device
++       */
+       port_np = usb_of_get_child_node(usb_dev->dev.of_node, port1);
+       if (!port_np)
+               return false;
+ 
++      of_node_put(port_np);
++
+       /* Amount of trigger sources for this LED */
+       count = of_count_phandle_with_args(led_np, "trigger-sources",
+                                          "#trigger-source-cells");
+diff --git a/drivers/usb/core/message.c b/drivers/usb/core/message.c
+index 77001bcfc504..a4025760dd84 100644
+--- a/drivers/usb/core/message.c
++++ b/drivers/usb/core/message.c
+@@ -150,6 +150,10 @@ int usb_control_msg(struct usb_device *dev, unsigned int 
pipe, __u8 request,
+ 
+       ret = usb_internal_control_msg(dev, pipe, dr, data, size, timeout);
+ 
++      /* Linger a bit, prior to the next control message. */
++      if (dev->quirks & USB_QUIRK_DELAY_CTRL_MSG)
++              msleep(200);
++
+       kfree(dr);
+ 
+       return ret;
+diff --git a/drivers/usb/core/quirks.c b/drivers/usb/core/quirks.c
+index f4a548471f0f..54b019e267c5 100644
+--- a/drivers/usb/core/quirks.c
++++ b/drivers/usb/core/quirks.c
+@@ -230,7 +230,8 @@ static const struct usb_device_id usb_quirk_list[] = {
+       { USB_DEVICE(0x1b1c, 0x1b13), .driver_info = USB_QUIRK_DELAY_INIT },
+ 
+       /* Corsair Strafe RGB */
+-      { USB_DEVICE(0x1b1c, 0x1b20), .driver_info = USB_QUIRK_DELAY_INIT },
++      { USB_DEVICE(0x1b1c, 0x1b20), .driver_info = USB_QUIRK_DELAY_INIT |
++        USB_QUIRK_DELAY_CTRL_MSG },
+ 
+       /* Corsair K70 LUX */
+       { USB_DEVICE(0x1b1c, 0x1b36), .driver_info = USB_QUIRK_DELAY_INIT },
+diff --git a/drivers/usb/dwc3/core.c b/drivers/usb/dwc3/core.c
+index 07832509584f..51de21ef3cdc 100644
+--- a/drivers/usb/dwc3/core.c
++++ b/drivers/usb/dwc3/core.c
+@@ -174,7 +174,7 @@ void dwc3_set_mode(struct dwc3 *dwc, u32 mode)
+       dwc->desired_dr_role = mode;
+       spin_unlock_irqrestore(&dwc->lock, flags);
+ 
+-      queue_work(system_power_efficient_wq, &dwc->drd_work);
++      queue_work(system_freezable_wq, &dwc->drd_work);
+ }
+ 
+ u32 dwc3_core_fifo_space(struct dwc3_ep *dep, u8 type)
+diff --git a/drivers/usb/gadget/function/f_fs.c 
b/drivers/usb/gadget/function/f_fs.c
+index 0ef08a909ba6..569882e04213 100644
+--- a/drivers/usb/gadget/function/f_fs.c
++++ b/drivers/usb/gadget/function/f_fs.c
+@@ -1535,7 +1535,6 @@ ffs_fs_kill_sb(struct super_block *sb)
+       if (sb->s_fs_info) {
+               ffs_release_dev(sb->s_fs_info);
+               ffs_data_closed(sb->s_fs_info);
+-              ffs_data_put(sb->s_fs_info);
+       }
+ }
+ 
+diff --git a/drivers/usb/host/xhci-pci.c b/drivers/usb/host/xhci-pci.c
+index 1aad89b8aba0..f68f364c77d5 100644
+--- a/drivers/usb/host/xhci-pci.c
++++ b/drivers/usb/host/xhci-pci.c
+@@ -122,6 +122,9 @@ static void xhci_pci_quirks(struct device *dev, struct 
xhci_hcd *xhci)
+       if (pdev->vendor == PCI_VENDOR_ID_AMD && usb_amd_find_chipset_info())
+               xhci->quirks |= XHCI_AMD_PLL_FIX;
+ 
++      if (pdev->vendor == PCI_VENDOR_ID_AMD && pdev->device == 0x43bb)
++              xhci->quirks |= XHCI_SUSPEND_DELAY;
++
+       if (pdev->vendor == PCI_VENDOR_ID_AMD)
+               xhci->quirks |= XHCI_TRUST_TX_LENGTH;
+ 
+diff --git a/drivers/usb/host/xhci-rcar.c b/drivers/usb/host/xhci-rcar.c
+index f0b559660007..f33ffc2bc4ed 100644
+--- a/drivers/usb/host/xhci-rcar.c
++++ b/drivers/usb/host/xhci-rcar.c
+@@ -83,6 +83,10 @@ static const struct soc_device_attribute 
rcar_quirks_match[]  = {
+               .soc_id = "r8a7796",
+               .data = (void *)RCAR_XHCI_FIRMWARE_V3,
+       },
++      {
++              .soc_id = "r8a77965",
++              .data = (void *)RCAR_XHCI_FIRMWARE_V3,
++      },
+       { /* sentinel */ },
+ };
+ 
+diff --git a/drivers/usb/host/xhci.c b/drivers/usb/host/xhci.c
+index 5c1326154e66..a7c99e121cc6 100644
+--- a/drivers/usb/host/xhci.c
++++ b/drivers/usb/host/xhci.c
+@@ -880,6 +880,9 @@ int xhci_suspend(struct xhci_hcd *xhci, bool do_wakeup)
+       clear_bit(HCD_FLAG_POLL_RH, &xhci->shared_hcd->flags);
+       del_timer_sync(&xhci->shared_hcd->rh_timer);
+ 
++      if (xhci->quirks & XHCI_SUSPEND_DELAY)
++              usleep_range(1000, 1500);
++
+       spin_lock_irq(&xhci->lock);
+       clear_bit(HCD_FLAG_HW_ACCESSIBLE, &hcd->flags);
+       clear_bit(HCD_FLAG_HW_ACCESSIBLE, &xhci->shared_hcd->flags);
+diff --git a/drivers/usb/host/xhci.h b/drivers/usb/host/xhci.h
+index 99a014a920d3..6740448779fe 100644
+--- a/drivers/usb/host/xhci.h
++++ b/drivers/usb/host/xhci.h
+@@ -718,11 +718,12 @@ struct xhci_ep_ctx {
+ /* bits 10:14 are Max Primary Streams */
+ /* bit 15 is Linear Stream Array */
+ /* Interval - period between requests to an endpoint - 125u increments. */
+-#define EP_INTERVAL(p)                (((p) & 0xff) << 16)
+-#define EP_INTERVAL_TO_UFRAMES(p)             (1 << (((p) >> 16) & 0xff))
+-#define CTX_TO_EP_INTERVAL(p) (((p) >> 16) & 0xff)
+-#define EP_MAXPSTREAMS_MASK   (0x1f << 10)
+-#define EP_MAXPSTREAMS(p)     (((p) << 10) & EP_MAXPSTREAMS_MASK)
++#define EP_INTERVAL(p)                        (((p) & 0xff) << 16)
++#define EP_INTERVAL_TO_UFRAMES(p)     (1 << (((p) >> 16) & 0xff))
++#define CTX_TO_EP_INTERVAL(p)         (((p) >> 16) & 0xff)
++#define EP_MAXPSTREAMS_MASK           (0x1f << 10)
++#define EP_MAXPSTREAMS(p)             (((p) << 10) & EP_MAXPSTREAMS_MASK)
++#define CTX_TO_EP_MAXPSTREAMS(p)      (((p) & EP_MAXPSTREAMS_MASK) >> 10)
+ /* Endpoint is set up with a Linear Stream Array (vs. Secondary Stream Array) 
*/
+ #define       EP_HAS_LSA              (1 << 15)
+ /* hosts with LEC=1 use bits 31:24 as ESIT high bits. */
+@@ -1823,6 +1824,7 @@ struct xhci_hcd {
+ /* Reserved. It was XHCI_U2_DISABLE_WAKE */
+ #define XHCI_ASMEDIA_MODIFY_FLOWCONTROL       (1 << 28)
+ #define XHCI_HW_LPM_DISABLE   (1 << 29)
++#define XHCI_SUSPEND_DELAY    (1 << 30)
+ 
+       unsigned int            num_active_eps;
+       unsigned int            limit_active_eps;
+@@ -2537,21 +2539,22 @@ static inline const char *xhci_decode_ep_context(u32 
info, u32 info2, u64 deq,
+       u8 burst;
+       u8 cerr;
+       u8 mult;
+-      u8 lsa;
+-      u8 hid;
++
++      bool lsa;
++      bool hid;
+ 
+       esit = CTX_TO_MAX_ESIT_PAYLOAD_HI(info) << 16 |
+               CTX_TO_MAX_ESIT_PAYLOAD(tx_info);
+ 
+       ep_state = info & EP_STATE_MASK;
+-      max_pstr = info & EP_MAXPSTREAMS_MASK;
++      max_pstr = CTX_TO_EP_MAXPSTREAMS(info);
+       interval = CTX_TO_EP_INTERVAL(info);
+       mult = CTX_TO_EP_MULT(info) + 1;
+-      lsa = info & EP_HAS_LSA;
++      lsa = !!(info & EP_HAS_LSA);
+ 
+       cerr = (info2 & (3 << 1)) >> 1;
+       ep_type = CTX_TO_EP_TYPE(info2);
+-      hid = info2 & (1 << 7);
++      hid = !!(info2 & (1 << 7));
+       burst = CTX_TO_MAX_BURST(info2);
+       maxp = MAX_PACKET_DECODED(info2);
+ 
+diff --git a/drivers/usb/mon/mon_text.c b/drivers/usb/mon/mon_text.c
+index f5e1bb5e5217..984f7e12a6a5 100644
+--- a/drivers/usb/mon/mon_text.c
++++ b/drivers/usb/mon/mon_text.c
+@@ -85,6 +85,8 @@ struct mon_reader_text {
+ 
+       wait_queue_head_t wait;
+       int printf_size;
++      size_t printf_offset;
++      size_t printf_togo;
+       char *printf_buf;
+       struct mutex printf_lock;
+ 
+@@ -376,75 +378,103 @@ static int mon_text_open(struct inode *inode, struct 
file *file)
+       return rc;
+ }
+ 
+-/*
+- * For simplicity, we read one record in one system call and throw out
+- * what does not fit. This means that the following does not work:
+- *   dd if=/dbg/usbmon/0t bs=10
+- * Also, we do not allow seeks and do not bother advancing the offset.
+- */
++static ssize_t mon_text_copy_to_user(struct mon_reader_text *rp,
++    char __user * const buf, const size_t nbytes)
++{
++      const size_t togo = min(nbytes, rp->printf_togo);
++
++      if (copy_to_user(buf, &rp->printf_buf[rp->printf_offset], togo))
++              return -EFAULT;
++      rp->printf_togo -= togo;
++      rp->printf_offset += togo;
++      return togo;
++}
++
++/* ppos is not advanced since the llseek operation is not permitted. */
+ static ssize_t mon_text_read_t(struct file *file, char __user *buf,
+-                              size_t nbytes, loff_t *ppos)
++    size_t nbytes, loff_t *ppos)
+ {
+       struct mon_reader_text *rp = file->private_data;
+       struct mon_event_text *ep;
+       struct mon_text_ptr ptr;
++      ssize_t ret;
+ 
+-      ep = mon_text_read_wait(rp, file);
+-      if (IS_ERR(ep))
+-              return PTR_ERR(ep);
+       mutex_lock(&rp->printf_lock);
+-      ptr.cnt = 0;
+-      ptr.pbuf = rp->printf_buf;
+-      ptr.limit = rp->printf_size;
+-
+-      mon_text_read_head_t(rp, &ptr, ep);
+-      mon_text_read_statset(rp, &ptr, ep);
+-      ptr.cnt += snprintf(ptr.pbuf + ptr.cnt, ptr.limit - ptr.cnt,
+-          " %d", ep->length);
+-      mon_text_read_data(rp, &ptr, ep);
+-
+-      if (copy_to_user(buf, rp->printf_buf, ptr.cnt))
+-              ptr.cnt = -EFAULT;
++
++      if (rp->printf_togo == 0) {
++
++              ep = mon_text_read_wait(rp, file);
++              if (IS_ERR(ep)) {
++                      mutex_unlock(&rp->printf_lock);
++                      return PTR_ERR(ep);
++              }
++              ptr.cnt = 0;
++              ptr.pbuf = rp->printf_buf;
++              ptr.limit = rp->printf_size;
++
++              mon_text_read_head_t(rp, &ptr, ep);
++              mon_text_read_statset(rp, &ptr, ep);
++              ptr.cnt += snprintf(ptr.pbuf + ptr.cnt, ptr.limit - ptr.cnt,
++                  " %d", ep->length);
++              mon_text_read_data(rp, &ptr, ep);
++
++              rp->printf_togo = ptr.cnt;
++              rp->printf_offset = 0;
++
++              kmem_cache_free(rp->e_slab, ep);
++      }
++
++      ret = mon_text_copy_to_user(rp, buf, nbytes);
+       mutex_unlock(&rp->printf_lock);
+-      kmem_cache_free(rp->e_slab, ep);
+-      return ptr.cnt;
++      return ret;
+ }
+ 
++/* ppos is not advanced since the llseek operation is not permitted. */
+ static ssize_t mon_text_read_u(struct file *file, char __user *buf,
+-                              size_t nbytes, loff_t *ppos)
++    size_t nbytes, loff_t *ppos)
+ {
+       struct mon_reader_text *rp = file->private_data;
+       struct mon_event_text *ep;
+       struct mon_text_ptr ptr;
++      ssize_t ret;
+ 
+-      ep = mon_text_read_wait(rp, file);
+-      if (IS_ERR(ep))
+-              return PTR_ERR(ep);
+       mutex_lock(&rp->printf_lock);
+-      ptr.cnt = 0;
+-      ptr.pbuf = rp->printf_buf;
+-      ptr.limit = rp->printf_size;
+ 
+-      mon_text_read_head_u(rp, &ptr, ep);
+-      if (ep->type == 'E') {
+-              mon_text_read_statset(rp, &ptr, ep);
+-      } else if (ep->xfertype == USB_ENDPOINT_XFER_ISOC) {
+-              mon_text_read_isostat(rp, &ptr, ep);
+-              mon_text_read_isodesc(rp, &ptr, ep);
+-      } else if (ep->xfertype == USB_ENDPOINT_XFER_INT) {
+-              mon_text_read_intstat(rp, &ptr, ep);
+-      } else {
+-              mon_text_read_statset(rp, &ptr, ep);
++      if (rp->printf_togo == 0) {
++
++              ep = mon_text_read_wait(rp, file);
++              if (IS_ERR(ep)) {
++                      mutex_unlock(&rp->printf_lock);
++                      return PTR_ERR(ep);
++              }
++              ptr.cnt = 0;
++              ptr.pbuf = rp->printf_buf;
++              ptr.limit = rp->printf_size;
++
++              mon_text_read_head_u(rp, &ptr, ep);
++              if (ep->type == 'E') {
++                      mon_text_read_statset(rp, &ptr, ep);
++              } else if (ep->xfertype == USB_ENDPOINT_XFER_ISOC) {
++                      mon_text_read_isostat(rp, &ptr, ep);
++                      mon_text_read_isodesc(rp, &ptr, ep);
++              } else if (ep->xfertype == USB_ENDPOINT_XFER_INT) {
++                      mon_text_read_intstat(rp, &ptr, ep);
++              } else {
++                      mon_text_read_statset(rp, &ptr, ep);
++              }
++              ptr.cnt += snprintf(ptr.pbuf + ptr.cnt, ptr.limit - ptr.cnt,
++                  " %d", ep->length);
++              mon_text_read_data(rp, &ptr, ep);
++
++              rp->printf_togo = ptr.cnt;
++              rp->printf_offset = 0;
++
++              kmem_cache_free(rp->e_slab, ep);
+       }
+-      ptr.cnt += snprintf(ptr.pbuf + ptr.cnt, ptr.limit - ptr.cnt,
+-          " %d", ep->length);
+-      mon_text_read_data(rp, &ptr, ep);
+ 
+-      if (copy_to_user(buf, rp->printf_buf, ptr.cnt))
+-              ptr.cnt = -EFAULT;
++      ret = mon_text_copy_to_user(rp, buf, nbytes);
+       mutex_unlock(&rp->printf_lock);
+-      kmem_cache_free(rp->e_slab, ep);
+-      return ptr.cnt;
++      return ret;
+ }
+ 
+ static struct mon_event_text *mon_text_read_wait(struct mon_reader_text *rp,
+diff --git a/drivers/usb/storage/uas.c b/drivers/usb/storage/uas.c
+index 3b1b9695177a..6034c39b67d1 100644
+--- a/drivers/usb/storage/uas.c
++++ b/drivers/usb/storage/uas.c
+@@ -1076,7 +1076,7 @@ static int uas_post_reset(struct usb_interface *intf)
+               return 0;
+ 
+       err = uas_configure_endpoints(devinfo);
+-      if (err && err != ENODEV)
++      if (err && err != -ENODEV)
+               shost_printk(KERN_ERR, shost,
+                            "%s: alloc streams error %d after reset",
+                            __func__, err);
+diff --git a/drivers/usb/storage/unusual_devs.h 
b/drivers/usb/storage/unusual_devs.h
+index f72d045ee9ef..89e1c743e652 100644
+--- a/drivers/usb/storage/unusual_devs.h
++++ b/drivers/usb/storage/unusual_devs.h
+@@ -2124,6 +2124,13 @@ UNUSUAL_DEV(  0x152d, 0x2566, 0x0114, 0x0114,
+               USB_SC_DEVICE, USB_PR_DEVICE, NULL,
+               US_FL_BROKEN_FUA ),
+ 
++/* Reported by Teijo Kinnunen <[email protected]> */
++UNUSUAL_DEV(  0x152d, 0x2567, 0x0117, 0x0117,
++              "JMicron",
++              "USB to ATA/ATAPI Bridge",
++              USB_SC_DEVICE, USB_PR_DEVICE, NULL,
++              US_FL_BROKEN_FUA ),
++
+ /* Reported-by George Cherian <[email protected]> */
+ UNUSUAL_DEV(0x152d, 0x9561, 0x0000, 0x9999,
+               "JMicron",
+diff --git a/drivers/usb/typec/fusb302/fusb302.c 
b/drivers/usb/typec/fusb302/fusb302.c
+index 72cb060b3fca..d20008576b8f 100644
+--- a/drivers/usb/typec/fusb302/fusb302.c
++++ b/drivers/usb/typec/fusb302/fusb302.c
+@@ -1543,6 +1543,21 @@ static int fusb302_pd_read_message(struct fusb302_chip 
*chip,
+       fusb302_log(chip, "PD message header: %x", msg->header);
+       fusb302_log(chip, "PD message len: %d", len);
+ 
++      /*
++       * Check if we've read off a GoodCRC message. If so then indicate to
++       * TCPM that the previous transmission has completed. Otherwise we pass
++       * the received message over to TCPM for processing.
++       *
++       * We make this check here instead of basing the reporting decision on
++       * the IRQ event type, as it's possible for the chip to report the
++       * TX_SUCCESS and GCRCSENT events out of order on occasion, so we need
++       * to check the message type to ensure correct reporting to TCPM.
++       */
++      if ((!len) && (pd_header_type_le(msg->header) == PD_CTRL_GOOD_CRC))
++              tcpm_pd_transmit_complete(chip->tcpm_port, TCPC_TX_SUCCESS);
++      else
++              tcpm_pd_receive(chip->tcpm_port, msg);
++
+       return ret;
+ }
+ 
+@@ -1650,13 +1665,12 @@ static irqreturn_t fusb302_irq_intn(int irq, void 
*dev_id)
+ 
+       if (interrupta & FUSB_REG_INTERRUPTA_TX_SUCCESS) {
+               fusb302_log(chip, "IRQ: PD tx success");
+-              /* read out the received good CRC */
+               ret = fusb302_pd_read_message(chip, &pd_msg);
+               if (ret < 0) {
+-                      fusb302_log(chip, "cannot read in GCRC, ret=%d", ret);
++                      fusb302_log(chip,
++                                  "cannot read in PD message, ret=%d", ret);
+                       goto done;
+               }
+-              tcpm_pd_transmit_complete(chip->tcpm_port, TCPC_TX_SUCCESS);
+       }
+ 
+       if (interrupta & FUSB_REG_INTERRUPTA_HARDRESET) {
+@@ -1677,7 +1691,6 @@ static irqreturn_t fusb302_irq_intn(int irq, void 
*dev_id)
+                                   "cannot read in PD message, ret=%d", ret);
+                       goto done;
+               }
+-              tcpm_pd_receive(chip->tcpm_port, &pd_msg);
+       }
+ done:
+       mutex_unlock(&chip->lock);
+diff --git a/drivers/usb/usbip/vudc_sysfs.c b/drivers/usb/usbip/vudc_sysfs.c
+index 1adc8af292ec..59a4d1bcda1e 100644
+--- a/drivers/usb/usbip/vudc_sysfs.c
++++ b/drivers/usb/usbip/vudc_sysfs.c
+@@ -105,10 +105,14 @@ static ssize_t store_sockfd(struct device *dev, struct 
device_attribute *attr,
+       if (rv != 0)
+               return -EINVAL;
+ 
++      if (!udc) {
++              dev_err(dev, "no device");
++              return -ENODEV;
++      }
+       spin_lock_irqsave(&udc->lock, flags);
+       /* Don't export what we don't have */
+-      if (!udc || !udc->driver || !udc->pullup) {
+-              dev_err(dev, "no device or gadget not bound");
++      if (!udc->driver || !udc->pullup) {
++              dev_err(dev, "gadget not bound");
+               ret = -ENODEV;
+               goto unlock;
+       }
+diff --git a/drivers/video/hdmi.c b/drivers/video/hdmi.c
+index 1cf907ecded4..111a0ab6280a 100644
+--- a/drivers/video/hdmi.c
++++ b/drivers/video/hdmi.c
+@@ -321,6 +321,17 @@ int hdmi_vendor_infoframe_init(struct 
hdmi_vendor_infoframe *frame)
+ }
+ EXPORT_SYMBOL(hdmi_vendor_infoframe_init);
+ 
++static int hdmi_vendor_infoframe_length(const struct hdmi_vendor_infoframe 
*frame)
++{
++      /* for side by side (half) we also need to provide 3D_Ext_Data */
++      if (frame->s3d_struct >= HDMI_3D_STRUCTURE_SIDE_BY_SIDE_HALF)
++              return 6;
++      else if (frame->vic != 0 || frame->s3d_struct != 
HDMI_3D_STRUCTURE_INVALID)
++              return 5;
++      else
++              return 4;
++}
++
+ /**
+  * hdmi_vendor_infoframe_pack() - write a HDMI vendor infoframe to binary 
buffer
+  * @frame: HDMI infoframe
+@@ -341,19 +352,11 @@ ssize_t hdmi_vendor_infoframe_pack(struct 
hdmi_vendor_infoframe *frame,
+       u8 *ptr = buffer;
+       size_t length;
+ 
+-      /* empty info frame */
+-      if (frame->vic == 0 && frame->s3d_struct == HDMI_3D_STRUCTURE_INVALID)
+-              return -EINVAL;
+-
+       /* only one of those can be supplied */
+       if (frame->vic != 0 && frame->s3d_struct != HDMI_3D_STRUCTURE_INVALID)
+               return -EINVAL;
+ 
+-      /* for side by side (half) we also need to provide 3D_Ext_Data */
+-      if (frame->s3d_struct >= HDMI_3D_STRUCTURE_SIDE_BY_SIDE_HALF)
+-              frame->length = 6;
+-      else
+-              frame->length = 5;
++      frame->length = hdmi_vendor_infoframe_length(frame);
+ 
+       length = HDMI_INFOFRAME_HEADER_SIZE + frame->length;
+ 
+@@ -372,14 +375,16 @@ ssize_t hdmi_vendor_infoframe_pack(struct 
hdmi_vendor_infoframe *frame,
+       ptr[5] = 0x0c;
+       ptr[6] = 0x00;
+ 
+-      if (frame->vic) {
+-              ptr[7] = 0x1 << 5;      /* video format */
+-              ptr[8] = frame->vic;
+-      } else {
++      if (frame->s3d_struct != HDMI_3D_STRUCTURE_INVALID) {
+               ptr[7] = 0x2 << 5;      /* video format */
+               ptr[8] = (frame->s3d_struct & 0xf) << 4;
+               if (frame->s3d_struct >= HDMI_3D_STRUCTURE_SIDE_BY_SIDE_HALF)
+                       ptr[9] = (frame->s3d_ext_data & 0xf) << 4;
++      } else if (frame->vic) {
++              ptr[7] = 0x1 << 5;      /* video format */
++              ptr[8] = frame->vic;
++      } else {
++              ptr[7] = 0x0 << 5;      /* video format */
+       }
+ 
+       hdmi_infoframe_set_checksum(buffer, length);
+@@ -1165,7 +1170,7 @@ hdmi_vendor_any_infoframe_unpack(union 
hdmi_vendor_any_infoframe *frame,
+ 
+       if (ptr[0] != HDMI_INFOFRAME_TYPE_VENDOR ||
+           ptr[1] != 1 ||
+-          (ptr[2] != 5 && ptr[2] != 6))
++          (ptr[2] != 4 && ptr[2] != 5 && ptr[2] != 6))
+               return -EINVAL;
+ 
+       length = ptr[2];
+@@ -1193,16 +1198,22 @@ hdmi_vendor_any_infoframe_unpack(union 
hdmi_vendor_any_infoframe *frame,
+ 
+       hvf->length = length;
+ 
+-      if (hdmi_video_format == 0x1) {
+-              hvf->vic = ptr[4];
+-      } else if (hdmi_video_format == 0x2) {
++      if (hdmi_video_format == 0x2) {
++              if (length != 5 && length != 6)
++                      return -EINVAL;
+               hvf->s3d_struct = ptr[4] >> 4;
+               if (hvf->s3d_struct >= HDMI_3D_STRUCTURE_SIDE_BY_SIDE_HALF) {
+-                      if (length == 6)
+-                              hvf->s3d_ext_data = ptr[5] >> 4;
+-                      else
++                      if (length != 6)
+                               return -EINVAL;
++                      hvf->s3d_ext_data = ptr[5] >> 4;
+               }
++      } else if (hdmi_video_format == 0x1) {
++              if (length != 5)
++                      return -EINVAL;
++              hvf->vic = ptr[4];
++      } else {
++              if (length != 4)
++                      return -EINVAL;
+       }
+ 
+       return 0;
+diff --git a/fs/btrfs/sysfs.c b/fs/btrfs/sysfs.c
+index 27baaff96880..a28bba801264 100644
+--- a/fs/btrfs/sysfs.c
++++ b/fs/btrfs/sysfs.c
+@@ -423,7 +423,7 @@ static ssize_t btrfs_nodesize_show(struct kobject *kobj,
+ {
+       struct btrfs_fs_info *fs_info = to_fs_info(kobj);
+ 
+-      return snprintf(buf, PAGE_SIZE, "%u\n", fs_info->nodesize);
++      return snprintf(buf, PAGE_SIZE, "%u\n", fs_info->super_copy->nodesize);
+ }
+ 
+ BTRFS_ATTR(, nodesize, btrfs_nodesize_show);
+@@ -433,7 +433,8 @@ static ssize_t btrfs_sectorsize_show(struct kobject *kobj,
+ {
+       struct btrfs_fs_info *fs_info = to_fs_info(kobj);
+ 
+-      return snprintf(buf, PAGE_SIZE, "%u\n", fs_info->sectorsize);
++      return snprintf(buf, PAGE_SIZE, "%u\n",
++                      fs_info->super_copy->sectorsize);
+ }
+ 
+ BTRFS_ATTR(, sectorsize, btrfs_sectorsize_show);
+@@ -443,7 +444,8 @@ static ssize_t btrfs_clone_alignment_show(struct kobject 
*kobj,
+ {
+       struct btrfs_fs_info *fs_info = to_fs_info(kobj);
+ 
+-      return snprintf(buf, PAGE_SIZE, "%u\n", fs_info->sectorsize);
++      return snprintf(buf, PAGE_SIZE, "%u\n",
++                      fs_info->super_copy->sectorsize);
+ }
+ 
+ BTRFS_ATTR(, clone_alignment, btrfs_clone_alignment_show);
+diff --git a/fs/btrfs/transaction.c b/fs/btrfs/transaction.c
+index 10d12b3de001..5a8c2649af2f 100644
+--- a/fs/btrfs/transaction.c
++++ b/fs/btrfs/transaction.c
+@@ -1723,23 +1723,19 @@ static void update_super_roots(struct btrfs_fs_info 
*fs_info)
+ 
+       super = fs_info->super_copy;
+ 
+-      /* update latest btrfs_super_block::chunk_root refs */
+       root_item = &fs_info->chunk_root->root_item;
+-      btrfs_set_super_chunk_root(super, root_item->bytenr);
+-      btrfs_set_super_chunk_root_generation(super, root_item->generation);
+-      btrfs_set_super_chunk_root_level(super, root_item->level);
++      super->chunk_root = root_item->bytenr;
++      super->chunk_root_generation = root_item->generation;
++      super->chunk_root_level = root_item->level;
+ 
+-      /* update latest btrfs_super_block::root refs */
+       root_item = &fs_info->tree_root->root_item;
+-      btrfs_set_super_root(super, root_item->bytenr);
+-      btrfs_set_super_generation(super, root_item->generation);
+-      btrfs_set_super_root_level(super, root_item->level);
+-
++      super->root = root_item->bytenr;
++      super->generation = root_item->generation;
++      super->root_level = root_item->level;
+       if (btrfs_test_opt(fs_info, SPACE_CACHE))
+-              btrfs_set_super_cache_generation(super, root_item->generation);
++              super->cache_generation = root_item->generation;
+       if (test_bit(BTRFS_FS_UPDATE_UUID_TREE_GEN, &fs_info->flags))
+-              btrfs_set_super_uuid_tree_generation(super,
+-                                                   root_item->generation);
++              super->uuid_tree_generation = root_item->generation;
+ }
+ 
+ int btrfs_transaction_in_commit(struct btrfs_fs_info *info)
+diff --git a/fs/gfs2/bmap.c b/fs/gfs2/bmap.c
+index 8c50d6878aa5..f13e986696f7 100644
+--- a/fs/gfs2/bmap.c
++++ b/fs/gfs2/bmap.c
+@@ -305,21 +305,22 @@ static void gfs2_metapath_ra(struct gfs2_glock *gl,
+       }
+ }
+ 
+-/**
+- * lookup_mp_height - helper function for lookup_metapath
+- * @ip: the inode
+- * @mp: the metapath
+- * @h: the height which needs looking up
+- */
+-static int lookup_mp_height(struct gfs2_inode *ip, struct metapath *mp, int h)
++static int __fillup_metapath(struct gfs2_inode *ip, struct metapath *mp,
++                           unsigned int x, unsigned int h)
+ {
+-      __be64 *ptr = metapointer(h, mp);
+-      u64 dblock = be64_to_cpu(*ptr);
+-
+-      if (!dblock)
+-              return h + 1;
++      for (; x < h; x++) {
++              __be64 *ptr = metapointer(x, mp);
++              u64 dblock = be64_to_cpu(*ptr);
++              int ret;
+ 
+-      return gfs2_meta_indirect_buffer(ip, h + 1, dblock, &mp->mp_bh[h + 1]);
++              if (!dblock)
++                      break;
++              ret = gfs2_meta_indirect_buffer(ip, x + 1, dblock, &mp->mp_bh[x 
+ 1]);
++              if (ret)
++                      return ret;
++      }
++      mp->mp_aheight = x + 1;
++      return 0;
+ }
+ 
+ /**
+@@ -336,25 +337,12 @@ static int lookup_mp_height(struct gfs2_inode *ip, 
struct metapath *mp, int h)
+  * at which it found the unallocated block. Blocks which are found are
+  * added to the mp->mp_bh[] list.
+  *
+- * Returns: error or height of metadata tree
++ * Returns: error
+  */
+ 
+ static int lookup_metapath(struct gfs2_inode *ip, struct metapath *mp)
+ {
+-      unsigned int end_of_metadata = ip->i_height - 1;
+-      unsigned int x;
+-      int ret;
+-
+-      for (x = 0; x < end_of_metadata; x++) {
+-              ret = lookup_mp_height(ip, mp, x);
+-              if (ret)
+-                      goto out;
+-      }
+-
+-      ret = ip->i_height;
+-out:
+-      mp->mp_aheight = ret;
+-      return ret;
++      return __fillup_metapath(ip, mp, 0, ip->i_height - 1);
+ }
+ 
+ /**
+@@ -365,25 +353,21 @@ static int lookup_metapath(struct gfs2_inode *ip, struct 
metapath *mp)
+  *
+  * Similar to lookup_metapath, but does lookups for a range of heights
+  *
+- * Returns: error or height of metadata tree
++ * Returns: error
+  */
+ 
+ static int fillup_metapath(struct gfs2_inode *ip, struct metapath *mp, int h)
+ {
+-      unsigned int start_h = h - 1;
+-      int ret;
++      unsigned int x = 0;
+ 
+       if (h) {
+               /* find the first buffer we need to look up. */
+-              while (start_h > 0 && mp->mp_bh[start_h] == NULL)
+-                      start_h--;
+-              for (; start_h < h; start_h++) {
+-                      ret = lookup_mp_height(ip, mp, start_h);
+-                      if (ret)
+-                              return ret;
++              for (x = h - 1; x > 0; x--) {
++                      if (mp->mp_bh[x])
++                              break;
+               }
+       }
+-      return ip->i_height;
++      return __fillup_metapath(ip, mp, x, h);
+ }
+ 
+ static inline void release_metapath(struct metapath *mp)
+@@ -790,7 +774,7 @@ int gfs2_iomap_begin(struct inode *inode, loff_t pos, 
loff_t length,
+               goto do_alloc;
+ 
+       ret = lookup_metapath(ip, &mp);
+-      if (ret < 0)
++      if (ret)
+               goto out_release;
+ 
+       if (mp.mp_aheight != ip->i_height)
+@@ -827,9 +811,6 @@ int gfs2_iomap_begin(struct inode *inode, loff_t pos, 
loff_t length,
+                       iomap->length = hole_size(inode, lblock, &mp);
+               else
+                       iomap->length = size - pos;
+-      } else {
+-              if (height <= ip->i_height)
+-                      iomap->length = hole_size(inode, lblock, &mp);
+       }
+       goto out_release;
+ }
+@@ -1339,7 +1320,9 @@ static int trunc_dealloc(struct gfs2_inode *ip, u64 
newsize)
+ 
+       mp.mp_bh[0] = dibh;
+       ret = lookup_metapath(ip, &mp);
+-      if (ret == ip->i_height)
++      if (ret)
++              goto out_metapath;
++      if (mp.mp_aheight == ip->i_height)
+               state = DEALLOC_MP_FULL; /* We have a complete metapath */
+       else
+               state = DEALLOC_FILL_MP; /* deal with partial metapath */
+@@ -1435,16 +1418,16 @@ static int trunc_dealloc(struct gfs2_inode *ip, u64 
newsize)
+               case DEALLOC_FILL_MP:
+                       /* Fill the buffers out to the current height. */
+                       ret = fillup_metapath(ip, &mp, mp_h);
+-                      if (ret < 0)
++                      if (ret)
+                               goto out;
+ 
+                       /* If buffers found for the entire strip height */
+-                      if ((ret == ip->i_height) && (mp_h == strip_h)) {
++                      if (mp.mp_aheight - 1 == strip_h) {
+                               state = DEALLOC_MP_FULL;
+                               break;
+                       }
+-                      if (ret < ip->i_height) /* We have a partial height */
+-                              mp_h = ret - 1;
++                      if (mp.mp_aheight < ip->i_height) /* We have a partial 
height */
++                              mp_h = mp.mp_aheight - 1;
+ 
+                       /* If we find a non-null block pointer, crawl a bit
+                          higher up in the metapath and try again, otherwise
+diff --git a/fs/namei.c b/fs/namei.c
+index 9cc91fb7f156..4e3fc58dae72 100644
+--- a/fs/namei.c
++++ b/fs/namei.c
+@@ -1133,9 +1133,6 @@ static int follow_automount(struct path *path, struct 
nameidata *nd,
+           path->dentry->d_inode)
+               return -EISDIR;
+ 
+-      if (path->dentry->d_sb->s_user_ns != &init_user_ns)
+-              return -EACCES;
+-
+       nd->total_link_count++;
+       if (nd->total_link_count >= 40)
+               return -ELOOP;
+diff --git a/include/linux/dma-fence-array.h b/include/linux/dma-fence-array.h
+index 332a5420243c..bc8940ca280d 100644
+--- a/include/linux/dma-fence-array.h
++++ b/include/linux/dma-fence-array.h
+@@ -21,6 +21,7 @@
+ #define __LINUX_DMA_FENCE_ARRAY_H
+ 
+ #include <linux/dma-fence.h>
++#include <linux/irq_work.h>
+ 
+ /**
+  * struct dma_fence_array_cb - callback helper for fence array
+@@ -47,6 +48,8 @@ struct dma_fence_array {
+       unsigned num_fences;
+       atomic_t num_pending;
+       struct dma_fence **fences;
++
++      struct irq_work work;
+ };
+ 
+ extern const struct dma_fence_ops dma_fence_array_ops;
+diff --git a/include/linux/usb/quirks.h b/include/linux/usb/quirks.h
+index f1fcec2fd5f8..b7a99ce56bc9 100644
+--- a/include/linux/usb/quirks.h
++++ b/include/linux/usb/quirks.h
+@@ -63,4 +63,7 @@
+  */
+ #define USB_QUIRK_DISCONNECT_SUSPEND          BIT(12)
+ 
++/* Device needs a pause after every control message. */
++#define USB_QUIRK_DELAY_CTRL_MSG              BIT(13)
++
+ #endif /* __LINUX_USB_QUIRKS_H */
+diff --git a/kernel/bpf/verifier.c b/kernel/bpf/verifier.c
+index 7125ddbb24df..6b4a72e5f874 100644
+--- a/kernel/bpf/verifier.c
++++ b/kernel/bpf/verifier.c
+@@ -279,7 +279,7 @@ static void print_verifier_state(struct bpf_verifier_env 
*env,
+       for (i = 0; i < state->allocated_stack / BPF_REG_SIZE; i++) {
+               if (state->stack[i].slot_type[0] == STACK_SPILL)
+                       verbose(env, " fp%d=%s",
+-                              -MAX_BPF_STACK + i * BPF_REG_SIZE,
++                              (-i - 1) * BPF_REG_SIZE,
+                               reg_type_str[state->stack[i].spilled_ptr.type]);
+       }
+       verbose(env, "\n");
+diff --git a/kernel/locking/locktorture.c b/kernel/locking/locktorture.c
+index f24582d4dad3..6dca260eeccf 100644
+--- a/kernel/locking/locktorture.c
++++ b/kernel/locking/locktorture.c
+@@ -715,8 +715,7 @@ static void __torture_print_stats(char *page,
+ {
+       bool fail = 0;
+       int i, n_stress;
+-      long max = 0;
+-      long min = statp[0].n_lock_acquired;
++      long max = 0, min = statp ? statp[0].n_lock_acquired : 0;
+       long long sum = 0;
+ 
+       n_stress = write ? cxt.nrealwriters_stress : cxt.nrealreaders_stress;
+@@ -823,7 +822,7 @@ static void lock_torture_cleanup(void)
+        * such, only perform the underlying torture-specific cleanups,
+        * and avoid anything related to locktorture.
+        */
+-      if (!cxt.lwsa)
++      if (!cxt.lwsa && !cxt.lrsa)
+               goto end;
+ 
+       if (writer_tasks) {
+@@ -898,6 +897,13 @@ static int __init lock_torture_init(void)
+               firsterr = -EINVAL;
+               goto unwind;
+       }
++
++      if (nwriters_stress == 0 && nreaders_stress == 0) {
++              pr_alert("lock-torture: must run at least one locking 
thread\n");
++              firsterr = -EINVAL;
++              goto unwind;
++      }
++
+       if (cxt.cur_ops->init)
+               cxt.cur_ops->init();
+ 
+@@ -921,17 +927,19 @@ static int __init lock_torture_init(void)
+ #endif
+ 
+       /* Initialize the statistics so that each run gets its own numbers. */
++      if (nwriters_stress) {
++              lock_is_write_held = 0;
++              cxt.lwsa = kmalloc(sizeof(*cxt.lwsa) * cxt.nrealwriters_stress, 
GFP_KERNEL);
++              if (cxt.lwsa == NULL) {
++                      VERBOSE_TOROUT_STRING("cxt.lwsa: Out of memory");
++                      firsterr = -ENOMEM;
++                      goto unwind;
++              }
+ 
+-      lock_is_write_held = 0;
+-      cxt.lwsa = kmalloc(sizeof(*cxt.lwsa) * cxt.nrealwriters_stress, 
GFP_KERNEL);
+-      if (cxt.lwsa == NULL) {
+-              VERBOSE_TOROUT_STRING("cxt.lwsa: Out of memory");
+-              firsterr = -ENOMEM;
+-              goto unwind;
+-      }
+-      for (i = 0; i < cxt.nrealwriters_stress; i++) {
+-              cxt.lwsa[i].n_lock_fail = 0;
+-              cxt.lwsa[i].n_lock_acquired = 0;
++              for (i = 0; i < cxt.nrealwriters_stress; i++) {
++                      cxt.lwsa[i].n_lock_fail = 0;
++                      cxt.lwsa[i].n_lock_acquired = 0;
++              }
+       }
+ 
+       if (cxt.cur_ops->readlock) {
+@@ -948,19 +956,21 @@ static int __init lock_torture_init(void)
+                       cxt.nrealreaders_stress = cxt.nrealwriters_stress;
+               }
+ 
+-              lock_is_read_held = 0;
+-              cxt.lrsa = kmalloc(sizeof(*cxt.lrsa) * cxt.nrealreaders_stress, 
GFP_KERNEL);
+-              if (cxt.lrsa == NULL) {
+-                      VERBOSE_TOROUT_STRING("cxt.lrsa: Out of memory");
+-                      firsterr = -ENOMEM;
+-                      kfree(cxt.lwsa);
+-                      cxt.lwsa = NULL;
+-                      goto unwind;
+-              }
+-
+-              for (i = 0; i < cxt.nrealreaders_stress; i++) {
+-                      cxt.lrsa[i].n_lock_fail = 0;
+-                      cxt.lrsa[i].n_lock_acquired = 0;
++              if (nreaders_stress) {
++                      lock_is_read_held = 0;
++                      cxt.lrsa = kmalloc(sizeof(*cxt.lrsa) * 
cxt.nrealreaders_stress, GFP_KERNEL);
++                      if (cxt.lrsa == NULL) {
++                              VERBOSE_TOROUT_STRING("cxt.lrsa: Out of 
memory");
++                              firsterr = -ENOMEM;
++                              kfree(cxt.lwsa);
++                              cxt.lwsa = NULL;
++                              goto unwind;
++                      }
++
++                      for (i = 0; i < cxt.nrealreaders_stress; i++) {
++                              cxt.lrsa[i].n_lock_fail = 0;
++                              cxt.lrsa[i].n_lock_acquired = 0;
++                      }
+               }
+       }
+ 
+@@ -990,12 +1000,14 @@ static int __init lock_torture_init(void)
+                       goto unwind;
+       }
+ 
+-      writer_tasks = kzalloc(cxt.nrealwriters_stress * 
sizeof(writer_tasks[0]),
+-                             GFP_KERNEL);
+-      if (writer_tasks == NULL) {
+-              VERBOSE_TOROUT_ERRSTRING("writer_tasks: Out of memory");
+-              firsterr = -ENOMEM;
+-              goto unwind;
++      if (nwriters_stress) {
++              writer_tasks = kzalloc(cxt.nrealwriters_stress * 
sizeof(writer_tasks[0]),
++                                     GFP_KERNEL);
++              if (writer_tasks == NULL) {
++                      VERBOSE_TOROUT_ERRSTRING("writer_tasks: Out of memory");
++                      firsterr = -ENOMEM;
++                      goto unwind;
++              }
+       }
+ 
+       if (cxt.cur_ops->readlock) {
+diff --git a/kernel/sched/core.c b/kernel/sched/core.c
+index a7bf32aabfda..5a31a85bbd84 100644
+--- a/kernel/sched/core.c
++++ b/kernel/sched/core.c
+@@ -508,7 +508,8 @@ void resched_cpu(int cpu)
+       unsigned long flags;
+ 
+       raw_spin_lock_irqsave(&rq->lock, flags);
+-      resched_curr(rq);
++      if (cpu_online(cpu) || cpu == smp_processor_id())
++              resched_curr(rq);
+       raw_spin_unlock_irqrestore(&rq->lock, flags);
+ }
+ 
+diff --git a/kernel/sched/rt.c b/kernel/sched/rt.c
+index 3401f588c916..89a086ed2b16 100644
+--- a/kernel/sched/rt.c
++++ b/kernel/sched/rt.c
+@@ -2218,7 +2218,7 @@ static void switched_to_rt(struct rq *rq, struct 
task_struct *p)
+               if (p->nr_cpus_allowed > 1 && rq->rt.overloaded)
+                       queue_push_tasks(rq);
+ #endif /* CONFIG_SMP */
+-              if (p->prio < rq->curr->prio)
++              if (p->prio < rq->curr->prio && cpu_online(cpu_of(rq)))
+                       resched_curr(rq);
+       }
+ }
+diff --git a/lib/usercopy.c b/lib/usercopy.c
+index 15e2e6fb060e..3744b2a8e591 100644
+--- a/lib/usercopy.c
++++ b/lib/usercopy.c
+@@ -20,7 +20,7 @@ EXPORT_SYMBOL(_copy_from_user);
+ #endif
+ 
+ #ifndef INLINE_COPY_TO_USER
+-unsigned long _copy_to_user(void *to, const void __user *from, unsigned long 
n)
++unsigned long _copy_to_user(void __user *to, const void *from, unsigned long 
n)
+ {
+       might_fault();
+       if (likely(access_ok(VERIFY_WRITE, to, n))) {
+diff --git a/net/mac80211/iface.c b/net/mac80211/iface.c
+index 13b16f90e1cf..0fa844293710 100644
+--- a/net/mac80211/iface.c
++++ b/net/mac80211/iface.c
+@@ -1474,7 +1474,7 @@ static void ieee80211_setup_sdata(struct 
ieee80211_sub_if_data *sdata,
+               break;
+       case NL80211_IFTYPE_UNSPECIFIED:
+       case NUM_NL80211_IFTYPES:
+-              BUG();
++              WARN_ON(1);
+               break;
+       }
+ 
+diff --git a/net/sched/sch_generic.c b/net/sched/sch_generic.c
+index cac003fddf3e..b8db13708370 100644
+--- a/net/sched/sch_generic.c
++++ b/net/sched/sch_generic.c
+@@ -762,10 +762,6 @@ struct Qdisc *dev_graft_qdisc(struct netdev_queue 
*dev_queue,
+       root_lock = qdisc_lock(oqdisc);
+       spin_lock_bh(root_lock);
+ 
+-      /* Prune old scheduler */
+-      if (oqdisc && refcount_read(&oqdisc->refcnt) <= 1)
+-              qdisc_reset(oqdisc);
+-
+       /* ... and graft new one */
+       if (qdisc == NULL)
+               qdisc = &noop_qdisc;
+@@ -916,6 +912,16 @@ static bool some_qdisc_is_busy(struct net_device *dev)
+       return false;
+ }
+ 
++static void dev_qdisc_reset(struct net_device *dev,
++                          struct netdev_queue *dev_queue,
++                          void *none)
++{
++      struct Qdisc *qdisc = dev_queue->qdisc_sleeping;
++
++      if (qdisc)
++              qdisc_reset(qdisc);
++}
++
+ /**
+  *    dev_deactivate_many - deactivate transmissions on several devices
+  *    @head: list of devices to deactivate
+@@ -926,7 +932,6 @@ static bool some_qdisc_is_busy(struct net_device *dev)
+ void dev_deactivate_many(struct list_head *head)
+ {
+       struct net_device *dev;
+-      bool sync_needed = false;
+ 
+       list_for_each_entry(dev, head, close_list) {
+               netdev_for_each_tx_queue(dev, dev_deactivate_queue,
+@@ -936,20 +941,25 @@ void dev_deactivate_many(struct list_head *head)
+                                            &noop_qdisc);
+ 
+               dev_watchdog_down(dev);
+-              sync_needed |= !dev->dismantle;
+       }
+ 
+       /* Wait for outstanding qdisc-less dev_queue_xmit calls.
+        * This is avoided if all devices are in dismantle phase :
+        * Caller will call synchronize_net() for us
+        */
+-      if (sync_needed)
+-              synchronize_net();
++      synchronize_net();
+ 
+       /* Wait for outstanding qdisc_run calls. */
+-      list_for_each_entry(dev, head, close_list)
++      list_for_each_entry(dev, head, close_list) {
+               while (some_qdisc_is_busy(dev))
+                       yield();
++              /* The new qdisc is assigned at this point so we can safely
++               * unwind stale skb lists and qdisc statistics
++               */
++              netdev_for_each_tx_queue(dev, dev_qdisc_reset, NULL);
++              if (dev_ingress_queue(dev))
++                      dev_qdisc_reset(dev, dev_ingress_queue(dev), NULL);
++      }
+ }
+ 
+ void dev_deactivate(struct net_device *dev)
+diff --git a/net/xfrm/xfrm_policy.c b/net/xfrm/xfrm_policy.c
+index bd6b0e7a0ee4..c135ed9bc8c4 100644
+--- a/net/xfrm/xfrm_policy.c
++++ b/net/xfrm/xfrm_policy.c
+@@ -1256,7 +1256,7 @@ EXPORT_SYMBOL(xfrm_policy_delete);
+ 
+ int xfrm_sk_policy_insert(struct sock *sk, int dir, struct xfrm_policy *pol)
+ {
+-      struct net *net = xp_net(pol);
++      struct net *net = sock_net(sk);
+       struct xfrm_policy *old_pol;
+ 
+ #ifdef CONFIG_XFRM_SUB_POLICY
+diff --git a/net/xfrm/xfrm_replay.c b/net/xfrm/xfrm_replay.c
+index 8b23c5bcf8e8..02501817227b 100644
+--- a/net/xfrm/xfrm_replay.c
++++ b/net/xfrm/xfrm_replay.c
+@@ -666,7 +666,7 @@ static int xfrm_replay_overflow_offload_esn(struct 
xfrm_state *x, struct sk_buff
+               if (unlikely(oseq < replay_esn->oseq)) {
+                       XFRM_SKB_CB(skb)->seq.output.hi = ++oseq_hi;
+                       xo->seq.hi = oseq_hi;
+-
++                      replay_esn->oseq_hi = oseq_hi;
+                       if (replay_esn->oseq_hi == 0) {
+                               replay_esn->oseq--;
+                               replay_esn->oseq_hi--;
+@@ -678,7 +678,6 @@ static int xfrm_replay_overflow_offload_esn(struct 
xfrm_state *x, struct sk_buff
+               }
+ 
+               replay_esn->oseq = oseq;
+-              replay_esn->oseq_hi = oseq_hi;
+ 
+               if (xfrm_aevent_is_on(net))
+                       x->repl->notify(x, XFRM_REPLAY_UPDATE);
+diff --git a/net/xfrm/xfrm_state.c b/net/xfrm/xfrm_state.c
+index a3785f538018..54e21f19d722 100644
+--- a/net/xfrm/xfrm_state.c
++++ b/net/xfrm/xfrm_state.c
+@@ -2056,6 +2056,13 @@ int xfrm_user_policy(struct sock *sk, int optname, u8 
__user *optval, int optlen
+       struct xfrm_mgr *km;
+       struct xfrm_policy *pol = NULL;
+ 
++      if (!optval && !optlen) {
++              xfrm_sk_policy_insert(sk, XFRM_POLICY_IN, NULL);
++              xfrm_sk_policy_insert(sk, XFRM_POLICY_OUT, NULL);
++              __sk_dst_reset(sk);
++              return 0;
++      }
++
+       if (optlen <= 0 || optlen > PAGE_SIZE)
+               return -EMSGSIZE;
+ 
+diff --git a/security/integrity/ima/ima_appraise.c 
b/security/integrity/ima/ima_appraise.c
+index 65fbcf3c32c7..d32e6a1d931a 100644
+--- a/security/integrity/ima/ima_appraise.c
++++ b/security/integrity/ima/ima_appraise.c
+@@ -223,7 +223,8 @@ int ima_appraise_measurement(enum ima_hooks func,
+               if (opened & FILE_CREATED)
+                       iint->flags |= IMA_NEW_FILE;
+               if ((iint->flags & IMA_NEW_FILE) &&
+-                  !(iint->flags & IMA_DIGSIG_REQUIRED))
++                  (!(iint->flags & IMA_DIGSIG_REQUIRED) ||
++                   (inode->i_size == 0)))
+                       status = INTEGRITY_PASS;
+               goto out;
+       }
+diff --git a/sound/soc/codecs/rt5651.c b/sound/soc/codecs/rt5651.c
+index 831b297978a4..45a73049cf64 100644
+--- a/sound/soc/codecs/rt5651.c
++++ b/sound/soc/codecs/rt5651.c
+@@ -1722,6 +1722,7 @@ static const struct regmap_config rt5651_regmap = {
+       .num_reg_defaults = ARRAY_SIZE(rt5651_reg),
+       .ranges = rt5651_ranges,
+       .num_ranges = ARRAY_SIZE(rt5651_ranges),
++      .use_single_rw = true,
+ };
+ 
+ #if defined(CONFIG_OF)
+diff --git a/sound/soc/codecs/sgtl5000.c b/sound/soc/codecs/sgtl5000.c
+index f2bb4feba3b6..0b11a2e01b2f 100644
+--- a/sound/soc/codecs/sgtl5000.c
++++ b/sound/soc/codecs/sgtl5000.c
+@@ -871,15 +871,26 @@ static int sgtl5000_pcm_hw_params(struct 
snd_pcm_substream *substream,
+ static int sgtl5000_set_bias_level(struct snd_soc_codec *codec,
+                                  enum snd_soc_bias_level level)
+ {
++      struct sgtl5000_priv *sgtl = snd_soc_codec_get_drvdata(codec);
++      int ret;
++
+       switch (level) {
+       case SND_SOC_BIAS_ON:
+       case SND_SOC_BIAS_PREPARE:
+       case SND_SOC_BIAS_STANDBY:
++              regcache_cache_only(sgtl->regmap, false);
++              ret = regcache_sync(sgtl->regmap);
++              if (ret) {
++                      regcache_cache_only(sgtl->regmap, true);
++                      return ret;
++              }
++
+               snd_soc_update_bits(codec, SGTL5000_CHIP_ANA_POWER,
+                                   SGTL5000_REFTOP_POWERUP,
+                                   SGTL5000_REFTOP_POWERUP);
+               break;
+       case SND_SOC_BIAS_OFF:
++              regcache_cache_only(sgtl->regmap, true);
+               snd_soc_update_bits(codec, SGTL5000_CHIP_ANA_POWER,
+                                   SGTL5000_REFTOP_POWERUP, 0);
+               break;
+diff --git a/sound/soc/codecs/wm_adsp.c b/sound/soc/codecs/wm_adsp.c
+index 66e32f5d2917..989d093abda7 100644
+--- a/sound/soc/codecs/wm_adsp.c
++++ b/sound/soc/codecs/wm_adsp.c
+@@ -1204,12 +1204,14 @@ static int wmfw_add_ctl(struct wm_adsp *dsp, struct 
wm_coeff_ctl *ctl)
+               kcontrol->put = wm_coeff_put_acked;
+               break;
+       default:
+-              kcontrol->get = wm_coeff_get;
+-              kcontrol->put = wm_coeff_put;
+-
+-              ctl->bytes_ext.max = ctl->len;
+-              ctl->bytes_ext.get = wm_coeff_tlv_get;
+-              ctl->bytes_ext.put = wm_coeff_tlv_put;
++              if (kcontrol->access & SNDRV_CTL_ELEM_ACCESS_TLV_CALLBACK) {
++                      ctl->bytes_ext.max = ctl->len;
++                      ctl->bytes_ext.get = wm_coeff_tlv_get;
++                      ctl->bytes_ext.put = wm_coeff_tlv_put;
++              } else {
++                      kcontrol->get = wm_coeff_get;
++                      kcontrol->put = wm_coeff_put;
++              }
+               break;
+       }
+ 
+diff --git a/sound/soc/nuc900/nuc900-ac97.c b/sound/soc/nuc900/nuc900-ac97.c
+index b6615affe571..fde974d52bb2 100644
+--- a/sound/soc/nuc900/nuc900-ac97.c
++++ b/sound/soc/nuc900/nuc900-ac97.c
+@@ -67,7 +67,7 @@ static unsigned short nuc900_ac97_read(struct snd_ac97 *ac97,
+ 
+       /* polling the AC_R_FINISH */
+       while (!(AUDIO_READ(nuc900_audio->mmio + ACTL_ACCON) & AC_R_FINISH)
+-                                                              && timeout--)
++                                                              && --timeout)
+               mdelay(1);
+ 
+       if (!timeout) {
+@@ -121,7 +121,7 @@ static void nuc900_ac97_write(struct snd_ac97 *ac97, 
unsigned short reg,
+ 
+       /* polling the AC_W_FINISH */
+       while ((AUDIO_READ(nuc900_audio->mmio + ACTL_ACCON) & AC_W_FINISH)
+-                                                              && timeout--)
++                                                              && --timeout)
+               mdelay(1);
+ 
+       if (!timeout)
+diff --git a/sound/soc/sunxi/sun4i-i2s.c b/sound/soc/sunxi/sun4i-i2s.c
+index 04f92583a969..b4af5ce78ecb 100644
+--- a/sound/soc/sunxi/sun4i-i2s.c
++++ b/sound/soc/sunxi/sun4i-i2s.c
+@@ -104,7 +104,7 @@
+ 
+ #define SUN8I_I2S_CHAN_CFG_REG                0x30
+ #define SUN8I_I2S_CHAN_CFG_RX_SLOT_NUM_MASK   GENMASK(6, 4)
+-#define SUN8I_I2S_CHAN_CFG_RX_SLOT_NUM(chan)  (chan - 1)
++#define SUN8I_I2S_CHAN_CFG_RX_SLOT_NUM(chan)  ((chan - 1) << 4)
+ #define SUN8I_I2S_CHAN_CFG_TX_SLOT_NUM_MASK   GENMASK(2, 0)
+ #define SUN8I_I2S_CHAN_CFG_TX_SLOT_NUM(chan)  (chan - 1)
+ 
+diff --git a/tools/perf/arch/s390/annotate/instructions.c 
b/tools/perf/arch/s390/annotate/instructions.c
+index e0e466c650df..8c72b44444cb 100644
+--- a/tools/perf/arch/s390/annotate/instructions.c
++++ b/tools/perf/arch/s390/annotate/instructions.c
+@@ -18,7 +18,8 @@ static struct ins_ops *s390__associate_ins_ops(struct arch 
*arch, const char *na
+       if (!strcmp(name, "br"))
+               ops = &ret_ops;
+ 
+-      arch__associate_ins_ops(arch, name, ops);
++      if (ops)
++              arch__associate_ins_ops(arch, name, ops);
+       return ops;
+ }
+ 
+diff --git a/tools/perf/util/annotate.c b/tools/perf/util/annotate.c
+index 3369c7830260..6a631acf8bb7 100644
+--- a/tools/perf/util/annotate.c
++++ b/tools/perf/util/annotate.c
+@@ -322,6 +322,8 @@ static int comment__symbol(char *raw, char *comment, u64 
*addrp, char **namep)
+               return 0;
+ 
+       *addrp = strtoull(comment, &endptr, 16);
++      if (endptr == comment)
++              return 0;
+       name = strchr(endptr, '<');
+       if (name == NULL)
+               return -1;
+@@ -435,8 +437,8 @@ static int mov__parse(struct arch *arch, struct 
ins_operands *ops, struct map *m
+               return 0;
+ 
+       comment = ltrim(comment);
+-      comment__symbol(ops->source.raw, comment, &ops->source.addr, 
&ops->source.name);
+-      comment__symbol(ops->target.raw, comment, &ops->target.addr, 
&ops->target.name);
++      comment__symbol(ops->source.raw, comment + 1, &ops->source.addr, 
&ops->source.name);
++      comment__symbol(ops->target.raw, comment + 1, &ops->target.addr, 
&ops->target.name);
+ 
+       return 0;
+ 
+@@ -480,7 +482,7 @@ static int dec__parse(struct arch *arch __maybe_unused, 
struct ins_operands *ops
+               return 0;
+ 
+       comment = ltrim(comment);
+-      comment__symbol(ops->target.raw, comment, &ops->target.addr, 
&ops->target.name);
++      comment__symbol(ops->target.raw, comment + 1, &ops->target.addr, 
&ops->target.name);
+ 
+       return 0;
+ }
+diff --git a/tools/perf/util/session.c b/tools/perf/util/session.c
+index 5c412310f266..1ea5b95ee93e 100644
+--- a/tools/perf/util/session.c
++++ b/tools/perf/util/session.c
+@@ -1350,10 +1350,11 @@ static s64 perf_session__process_user_event(struct 
perf_session *session,
+ {
+       struct ordered_events *oe = &session->ordered_events;
+       struct perf_tool *tool = session->tool;
++      struct perf_sample sample = { .time = 0, };
+       int fd = perf_data__fd(session->data);
+       int err;
+ 
+-      dump_event(session->evlist, event, file_offset, NULL);
++      dump_event(session->evlist, event, file_offset, &sample);
+ 
+       /* These events are processed right away */
+       switch (event->header.type) {
+diff --git a/tools/testing/selftests/firmware/fw_filesystem.sh 
b/tools/testing/selftests/firmware/fw_filesystem.sh
+index b1f20fef36c7..f9508e1a4058 100755
+--- a/tools/testing/selftests/firmware/fw_filesystem.sh
++++ b/tools/testing/selftests/firmware/fw_filesystem.sh
+@@ -45,7 +45,10 @@ test_finish()
+       if [ "$HAS_FW_LOADER_USER_HELPER" = "yes" ]; then
+               echo "$OLD_TIMEOUT" >/sys/class/firmware/timeout
+       fi
+-      echo -n "$OLD_PATH" >/sys/module/firmware_class/parameters/path
++      if [ "$OLD_FWPATH" = "" ]; then
++              OLD_FWPATH=" "
++      fi
++      echo -n "$OLD_FWPATH" >/sys/module/firmware_class/parameters/path
+       rm -f "$FW"
+       rmdir "$FWPATH"
+ }
+diff --git a/tools/testing/selftests/rcutorture/bin/configinit.sh 
b/tools/testing/selftests/rcutorture/bin/configinit.sh
+index 51f66a7ce876..c15f270e121d 100755
+--- a/tools/testing/selftests/rcutorture/bin/configinit.sh
++++ b/tools/testing/selftests/rcutorture/bin/configinit.sh
+@@ -51,7 +51,7 @@ then
+                       mkdir $builddir
+               fi
+       else
+-              echo Bad build directory: \"$builddir\"
++              echo Bad build directory: \"$buildloc\"
+               exit 2
+       fi
+ fi
+diff --git a/tools/usb/usbip/src/usbipd.c b/tools/usb/usbip/src/usbipd.c
+index 009afb4a3aae..c6dad2a13c80 100644
+--- a/tools/usb/usbip/src/usbipd.c
++++ b/tools/usb/usbip/src/usbipd.c
+@@ -456,7 +456,7 @@ static void set_signal(void)
+       sigaction(SIGTERM, &act, NULL);
+       sigaction(SIGINT, &act, NULL);
+       act.sa_handler = SIG_IGN;
+-      sigaction(SIGCLD, &act, NULL);
++      sigaction(SIGCHLD, &act, NULL);
+ }
+ 
+ static const char *pid_file;

Reply via email to