Saucy update to 3.11.5 stable release

[Tim Gardner]

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 3.11.5 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches are in the 3.11.5 stable release:
nfsd4: fix leak of inode reference on delegation failure
HID: fix data access in implement()
HID: fix unused rsize usage
sh_eth: fix napi_{en|dis}able() calls racing against interrupts
caif: Add missing braces to multiline if in cfctrl_linkup_request
tcp: Add missing braces to do_tcp_setsockopt
ipv6/exthdrs: accept tlv which includes only padding
net: fib: fib6_add: fix potential NULL pointer dereference
net: sctp: fix bug in sctp_poll for SOCK_SELECT_ERR_QUEUE
net: sctp: fix smatch warning in sctp_send_asconf_del_ip
net: fix multiqueue selection
net: flow_dissector: fix thoff for IPPROTO_AH
net_sched: htb: fix a typo in htb_change_class()
r8169: enforce RX_MULTI_EN for the 8168f.
netpoll: Should handle ETH_P_ARP other than ETH_P_IP in netpoll_neigh_reply
netpoll: fix NULL pointer dereference in netpoll_cleanup
tuntap: correctly handle error in tun_set_iff()
net: sctp: fix ipv6 ipsec encryption bug in sctp_v6_xmit
xen-netback: count number required slots for an skb more carefully
resubmit bridge: fix message_age_timer calculation
bridge: Clamp forward_delay when enabling STP
bridge: use br_port_get_rtnl within rtnl lock
bridge: fix NULL pointer deref of br_port_get_rcu
ip6_tunnels: raddr and laddr are inverted in nl msg
net: sctp: rfc4443: do not report ICMP redirects to user space
ethernet/arc/arc_emac: Fix huge delays in large file copies
vxlan: Avoid creating fdb entry with NULL destination
batman-adv: set the TAG flag for the vid passed to BLA
net:dccp: do not report ICMP redirects to user space
ip: use ip_hdr() in __ip_make_skb() to retrieve IP header
ip: generate unique IP identificator if local fragmentation is allowed
skge: fix invalid value passed to pci_unmap_sigle
ipv6: udp packets following an UFO enqueued packet need also be handled by UFO
via-rhine: fix VLAN priority field (PCP, IEEE 802.1p)
IPv6 NAT: Do not drop DNATed 6to4/6rd packets
net: net_secret should not depend on TCP
ip_tunnel: Do not use stale inner_iph pointer.
dm9601: fix IFF_ALLMULTI handling
bonding: Fix broken promiscuity reference counting issue
ipv6: gre: correct calculation of max_headroom
ipv4 igmp: use in_dev_put in timer handlers instead of __in_dev_put
ipv6 mcast: use in6_dev_put in timer handlers instead of __in6_dev_put
ll_temac: Reset dma descriptors indexes on ndo_open
ip_tunnel: Fix a memory corruption in ip_tunnel_xmit
ip_tunnel_core: Change __skb_push back to skb_push
sit: allow to use rtnl ops on fb tunnel
ip6tnl: allow to use rtnl ops on fb tunnel
avr32: fix clockevents kernel warning
regulator: ti-abb: Fix bias voltage glitch in transition to bypass mode
fs/binfmt_elf.c: prevent a coredump with a large vm_map_count from Oopsing
gpio/omap: maintain GPIO and IRQ usage separately
gpio/omap: auto-setup a GPIO when used as an IRQ
ASoC: max98095: a couple array underflows
ASoC: 88pm860x: array overflow in snd_soc_put_volsw_2r_st()
ASoC: ab8500-codec: info leak in anc_status_control_put()
ARM: kvm: rename cpu_reset to avoid name clash
ARM: mach-integrator: Add stub for pci_v3_early_init() for !CONFIG_PCI
iommu/arm-smmu: fix a signedness bug
iommu/arm-smmu: fix iommu_present() test in init
iommu/arm-smmu: don't enable SMMU device until probing has completed
powerpc/iommu: Use GFP_KERNEL instead of GFP_ATOMIC in iommu_init_table()
powerpc/perf: Fix handling of FAB events
powerpc/tm: Switch out userspace PPR and DSCR sooner
powerpc/tm: Turn interrupts hard off in tm_reclaim()
powerpc/vio: Fix modalias_show return values
powerpc: Fix parameter clobber in csum_partial_copy_generic()
powerpc: Fix memory hotplug with sparse vmemmap
powerpc/sysfs: Disable writing to PURR in guest mode
powerpc: Restore registers on error exit from csum_partial_copy_generic()
fuse: wait for writeback in fuse_file_fallocate()
fuse: fix fallocate vs. ftruncate race
brcmfmac: obtain platform data upon module initialization
Bluetooth: Fix security level for peripheral role
Bluetooth: Fix encryption key size for peripheral role
Bluetooth: Add a new PID/VID 0cf3/e005 for AR3012.
Bluetooth: Add support for BCM20702A0 [0b05, 17cb]
Bluetooth: Introduce a new HCI_RFKILLED flag
Bluetooth: Fix rfkill functionality during the HCI setup stage
nilfs2: fix issue with race condition of competition between segments for dirty blocks
ipc/sem.c: fix race in sem_lock()
ipc,msg: prevent race with rmid in msgsnd,msgrcv
ipc: fix race with LSMs
sparc64: Fix buggy strlcpy() conversion in ldom_reboot().
sparc: fix ldom_reboot buffer overflow harder
sparc64: Remove RWSEM export leftovers
sparc64: Fix ITLB handler of null page
esp_scsi: Fix tag state corruption when autosensing.
sparc64: Fix off by one in trampoline TLB mapping installation loop.
sparc64: Fix not SRA'ed %o5 in 32-bit traced syscall
sparc32: Fix exit flag passed from traced sys_sigreturn
mm: Fix generic hugetlb pte check return type.
mm/bounce.c: fix a regression where MS_SNAP_STABLE (stable pages snapshotting) was ignored
kernel/kmod.c: check for NULL in call_usermodehelper_exec()
staging: comedi: ni_65xx: (bug fix) confine insn_bits to one subdevice
NFSv4.1: nfs4_fl_prepare_ds - fix bugs when the connect attempt fails
mwifiex: fix NULL pointer dereference in usb suspend handler
mwifiex: fix hang issue for USB chipsets
mwifiex: fix PCIe hs_cfg cancel cmd timeout
usb: chipidea: add Intel Clovertrail pci id
USB: serial: option: Ignore card reader interface on Huawei E1750
xen/hvc: allow xenboot console to be used again
ib_srpt: Destroy cm_id before destroying QP.
ib_srpt: always set response for task management
rtlwifi: Align private space in rtl_priv struct
p54usb: add USB ID for Corega WLUSB2GTST USB adapter
mm: avoid reinserting isolated balloon pages into LRU lists
iscsi-target: Only perform wait_for_tasks when performing shutdown
net: Update the sysctl permissions handler to test effective uid/gid
irq: Force hardirq exit's softirq processing on its own stack
drm/radeon: fix hdmi callbacks for rv6xx (incorrectly added to r520)
dmaengine: imx-dma: fix lockdep issue between irqhandler and tasklet
dmaengine: imx-dma: fix callback path in tasklet
dmaengine: imx-dma: fix slow path issue in prep_dma_cyclic
ACPI / IPMI: Fix atomic context requirement of ipmi_msg_handler()
xfs: fix node forward in xfs_node_toosmall
drm/nouveau/bios/init: stub opcode 0xaa
ARM: tegra: unify Tegra's Kconfig a bit more
ALSA: hda - Fix GPIO for Acer Aspire 3830TG
ARM: multi_v7_defconfig: enable ARM_ATAG_DTB_COMPAT
HID: wiimote: fix FF deadlock
mmc: fix null pointer use in mmc_blk_remove_req
tile: use a more conservative __my_cpu_offset in CONFIG_PREEMPT
s390: fix system call restart after inferior call
Btrfs: reset ret in record_one_backref
Btrfs: change how we queue blocks for backref checking
Btrfs: skip subvol entries when checking if we've created a dir already
Btrfs: remove ourselves from the cluster list under lock
HID: roccat: add support for KonePureOptical v2
HID: add Holtek USB ID 04d9:a081 SHARKOON DarkGlider
HID: uhid: add devname module alias
HID: uhid: allocate static minor
net: qmi_wwan: add new Qualcomm devices
bcache: Fix a null ptr deref regression
Linux 3.11.5

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 3.11.0-13.20

---------------
linux (3.11.0-13.20) saucy; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1242793

  [ Paolo Pisati ]

  * [Config] amhf: VIRTIO_CONSOLE=y
    - LP: #1237982
  * [Config] AHCI_IMX=y
    - LP: #1240038

  [ Tim Gardner ]

  * [Config] CONFIG_USB_OTG=n for all arches
    - LP: #1047527
  * dm-raid4-5: Fix compile issues
    - LP: #1241086
  * [Config] CONFIG_DM_RAID45=m
    - LP: #1241086

  [ Upstream Kernel Changes ]

  * Revert "cw1200: Don't perform SPI transfers in interrupt context"
    - LP: #1237530
  * block: Fix bio_copy_data()
    - LP: #1237530
  * sysv: Add forgotten superblock lock init for v7 fs
    - LP: #1237530
  * bcache: Fix a dumb journal discard bug
    - LP: #1237530
  * bcache: Strip endline when writing the label through sysfs
    - LP: #1237530
  * bcache: Fix for when no journal entries are found
    - LP: #1237530
  * bcache: Fix a writeback performance regression
    - LP: #1237530
  * bcache: Fix a flush/fua performance bug
    - LP: #1237530
  * bcache: Fix a dumb CPU spinning bug in writeback
    - LP: #1237530
  * bcache: Fix a shrinker deadlock
    - LP: #1237530
  * bcache: Fix for handling overlapping extents when reading in a btree
    node
    - LP: #1237530
  * bcache: Fix flushes in writeback mode
    - LP: #1237530
  * kernel/reboot.c: re-enable the function of variable reboot_default
    - LP: #1237530
  * x86/reboot: Add quirk to make Dell C6100 use reboot=pci automatically
    - LP: #1237530
  * tools lib lk: Uninclude linux/magic.h in debugfs.c
    - LP: #1237530
  * x86, efi: Don't map Boot Services on i386
    - LP: #1237530
  * mei: make me client counters less error prone
    - LP: #1237530
  * mei: bus: stop wait for read during cl state transition
    - LP: #1237530
  * mei: cancel stall timers in mei_reset
    - LP: #1237530
  * tty: Fix SIGTTOU not sent with tcflush()
    - LP: #1237530
  * serial: tegra: fix tty-kref leak
    - LP: #1237530
  * serial: pch_uart: fix tty-kref leak in rx-error path
    - LP: #1237530
  * serial: pch_uart: fix tty-kref leak in dma-rx path
    - LP: #1237530
  * ARM: 7837/3: fix Thumb-2 bug in AES assembler code
    - LP: #1237530
  * staging: vt6656: [BUG] main_usb.c oops on device_close move flag
    earlier.
    - LP: #1237530
  * staging: vt6656: [BUG] iwctl_siwencodeext return if device not open
    - LP: #1237530
  * drm/i915/tv: clear adjusted_mode.flags
    - LP: #1237530
  * cw1200: Use a threaded oneshot irq handler for cw1200_spi
    - LP: #1237530
  * xhci: Ensure a command structure points to the correct trb on the
    command ring
    - LP: #1237530
  * xhci: Fix oops happening after address device timeout
    - LP: #1237530
  * USB: fix PM config symbol in uhci-hcd, ehci-hcd, and xhci-hcd
    - LP: #1237530
  * xhci: Fix race between ep halt and URB cancellation
    - LP: #1237530
  * USB: OHCI: accept very late isochronous URBs
    - LP: #1237530
  * USB: UHCI: accept very late isochronous URBs
    - LP: #1237530
  * USB: Fix breakage in ffs_fs_mount()
    - LP: #1237530
  * fsl/usb: Resolve PHY_CLK_VLD instability issue for ULPI phy
    - LP: #1237530
  *...