Precise update to 3.8.13.17 stable release

[Brad Figg]

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 3.8.13.17 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://kernel.ubuntu.com/ubuntu/linux.git

    TEST CASE: TBD

       The following patches are in the 3.8.13.17 stable release:
            Linux 3.8.13.17
            x86, x32: Correct invalid use of user timespec in the kernel
            staging: comedi: addi_apci_1032: fix subdevice type/flags bug
            staging: comedi: 8255_pci: fix for newer PCI-DIO48H
            net: rds: fix per-cpu helper usage
            perf/x86/amd/ibs: Fix waking up from S3 for AMD family 10h
            nilfs2: fix segctor bug that causes file system corruption
            hwmon: (coretemp) Fix truncated name of alarm attributes
            md/raid10: fix bug when raid10 recovery fails to recover a block.
            md/raid10: fix two bugs in handling of known-bad-blocks.
            md/raid5: Fix possible confusion when multiple write errors occur.
            ftrace/x86: Load ftrace_ops in parameter not the variable holding it
            drm/i915: fix DDI PLLs HW state readout code
            writeback: Fix data corruption on NFS
            vfs: In d_path don't call d_dname on a mount point
            Linux 3.8.13.16
            bridge: use spin_lock_bh() in br_multicast_set_hash_max
            netpoll: Fix missing TXQ unlock and and OOPS.
            net: llc: fix use after free in llc_ui_recvmsg
            virtio-net: fix refill races during restore
            virtio_net: don't leak memory or block when too many frags
            virtio-net: make all RX paths handle errors consistently
            virtio_net: fix error handling for mergeable buffers
            vlan: Fix header ops passthru when doing TX VLAN offload.
            net: rose: restore old recvmsg behavior
            rds: prevent dereference of a NULL device
            ipv6: always set the new created dst's from in ip6_rt_copy
            hamradio/yam: fix info leak in ioctl
            drivers/net/hamradio: Integer overflow in hdlcdrv_ioctl()
            net: inet_diag: zero out uninitialized idiag_{src,dst} fields
            net: unix: allow bind to fail on mutex lock
            netvsc: don't flush peers notifying work during setting mtu
            tg3: Initialize REG_BASE_ADDR at PCI config offset 120 to 0
            net: unix: allow set_peek_off to fail
            net: drop_monitor: fix the value of maxattr
            ipv6: don't count addrconf generated routes against gc limit
            packet: fix send path when running with proto == 0
            virtio: delete napi structures from netdev before releasing memory
            macvtap: signal truncated packets
            tun: update file current position
            macvtap: update file current position
            macvtap: Do not double-count received packets
            rds: prevent BUG_ON triggered on congestion update to loopback
            net: do not pretend FRAGLIST support
            IPv6: Fixed support for blackhole and prohibit routes
            SELinux: Fix possible NULL pointer dereference in selinux_inode_permission()
            clk: clk-divider: fix divisor > 255 bug
            drm/nouveau/bios: make jump conditional
            ACPI / Battery: Add a _BIX quirk for NEC LZ750/LS
            ACPI / TPM: fix memory leak when walking ACPI namespace
            ARM: fix "bad mode in ... handler" message for undefined instructions
            ahci: add PCI ID for Marvell 88SE9170 SATA controller
            ARM: fix footbridge clockevent device
            mac80211: move "bufferable MMPDU" check to fix AP mode scan
            mfd: rtsx_pcr: Disable interrupts before cancelling delayed works
            aacraid: prevent invalid pointer dereference
            ath9k_htc: properly set MAC address and BSSID mask
            x86, fpu, amd: Clear exceptions in AMD FXSAVE workaround
            KVM: x86: Fix APIC map calculation after re-enabling
            Revert "of/address: Handle #address-cells > 2 specially"
            powerpc: Fix bad stack check in exception entry
            tg3: Expand 4g_overflow_test workaround to skb fragments of any size.
            drm/radeon: expose render backend mask to the userspace
            drm/radeon: fix render backend setup for SI and CIK
            drm/radeon: 0x9649 is SUMO2 not SUMO
            dm9601: work around tx fifo sync issue on dm962x
            dm9601: fix reception of full size ethernet frames on dm9620/dm9621a
            ath9k: Fix interrupt handling for the AR9002 family
            rtlwifi: pci: Fix oops on driver unload
            radiotap: fix bitmap-end-finding buffer overrun
            auxvec.h: account for AT_HWCAP2 in AT_VECTOR_SIZE_BASE
            selinux: selinux_setprocattr()->ptrace_parent() needs rcu_read_lock()
            selinux: fix broken peer recv check
            drm/radeon: fix asic gfx values for scrapper asics
            libata, freezer: avoid block device removal while system is frozen
            ext4: fix deadlock when writing in ENOSPC conditions
            drm/i915: Use the correct GMCH_CTRL register for Sandybridge+
            scripts/link-vmlinux.sh: only filter kernel symbols for arm
            ext4: fix del_timer() misuse for ->s_err_report
            ext2: Fix oops in ext2_get_block() called from ext2_quota_write()
            ext4: check for overlapping extents in ext4_valid_extent_entries()
            ext4: fix use-after-free in ext4_mb_new_blocks
            ext4: call ext4_error_inode() if jbd2_journal_dirty_metadata() fails
            libata: add ATA_HORKAGE_BROKEN_FPDMA_AA quirk for Seagate Momentus SpinPoint M8
            arm64: ptrace: avoid using HW_BREAKPOINT_EMPTY for disabled events
            target/file: Update hw_max_sectors based on current block_size
            mm/compaction: respect ignore_skip_hint in update_pageblock_skip
            mm: numa: defer TLB flush for THP migration as long as possible
            mm: fix TLB flush race between migration, and change_protection_range
            mm: numa: avoid unnecessary disruption of NUMA hinting during migration
            mm: numa: clear numa hinting information on mprotect
            sched: numa: skip inaccessible VMAs
            mm: numa: avoid unnecessary work on the failure path
            mm: numa: ensure anon_vma is locked to prevent parallel THP splits
            mm: numa: do not clear PTE for pte_numa update
            mm: numa: do not clear PMD during PTE update scan
            mm: clear pmd_numa before invalidating
            mm: numa: call MMU notifiers on THP migration
            mm: numa: serialise parallel get_user_page against THP migration
            net_dma: mark broken
            ASoC: wm8904: fix DSP mode B configuration
            ASoC: wm_adsp: Add small delay while polling DSP RAM start
            iio:adc:ad7887 Fix channel reported endianness from cpu to big endian
            cpupower: Fix segfault due to incorrect getopt_long arugments
            ALSA: Add SNDRV_PCM_STATE_PAUSED case in wait_for_avail function
            xfs: fix infinite loop by detaching the group/project hints from user dquot
            sched/rt: Fix rq's cpupri leak while enqueue/dequeue child RT entities
            ASoC: wm5110: Correct HPOUT3 DAPM route typo
            drm/edid: add quirk for BPC in Samsung NP700G7A-S01PL notebook
            ftrace: Initialize the ftrace profiler for each possible cpu
            firewire: sbp2: bring back WRITE SAME support
            gpio: msm: Fix irq mask/unmask by writing bits instead of numbers
            ALSA: hda - Add enable_msi=0 workaround for four HP machines
            drm/radeon: Fix sideport problems on certain RS690 boards
            qla2xxx: Fix schedule_delayed_work() for target timeout calculations
            iscsi-target: Fix-up all zero data-length CDBs with R/W_BIT set
            drm/i915: don't update the dri1 breadcrumb with modesetting
            xhci: Limit the spurious wakeup fix only to HP machines
            usb: serial: zte_ev: move support for ZTE AC2726 from zte_ev back to option
            usb: cdc-wdm: manage_power should always set needs_remote_wakeup
            ASoC: tegra: fix uninitialized variables in set_fmt
            drm/i915: Hold mutex across i915_gem_release
            drm/i915: Do not clobber config status after a forced restore of hw state
            powerpc: kvm: fix rare but potential deadlock scene
            mm: memcg: fix race condition between memcg teardown and swapin
            drivers/rtc/rtc-at91rm9200.c: correct alarm over day/month wrap
            selinux: handle TCP SYN-ACK packets correctly in selinux_ip_output()
            KVM: x86: fix guest-initiated crash with x2apic (CVE-2013-6376)
            KVM: x86: Convert vapic synchronization to _cached functions (CVE-2013-6368)
            KVM: x86: Fix potential divide by 0 in lapic (CVE-2013-6367)
            KVM: Improve create VCPU parameter (CVE-2013-4587)
            futex: fix handling of read-only-mapped hugepages
            Btrfs: fix access_ok() check in btrfs_ioctl_send()
            hwmon: Prevent some divide by zeros in FAN_TO_REG()
            hwmon: (w83l768ng) Fix fan speed control range
            hwmon: (w83l786ng) Fix fan speed control mode setting and reporting
            ARM: pxa: prevent PXA270 occasional reboot freezes
            ARM: pxa: tosa: fix keys mapping
            ALSA: hda - hdmi: Fix IEC958 ctl indexes for some simple HDMI devices
            dm bufio: initialize read-only module parameters
            x86, efi: Don't use (U)EFI time services on 32 bit
            x86, build, icc: Remove uninitialized_var() from compiler-intel.h
            dm thin: allow pool in read-only mode to transition to read-write mode
            dm thin: re-establish read-only state when switching to fail mode
            dm thin: always fallback the pool mode if commit fails
            dm thin: switch to read-only mode if metadata space is exhausted
            dm thin: switch to read only mode if a mapping insert fails
            dm table: fail dm_table_create on dm_round_up overflow
            dm snapshot: avoid snapshot space leak on crash
            ALSA: compress: Fix 64bit ABI incompatibility
            ALSA: memalloc.h - fix wrong truncation of dma_addr_t
            x86, build: Pass in additional -mno-mmx, -mno-sse options
            ARM: 7913/1: fix framepointer check in unwind_frame
            ARM: 7912/1: check stack pointer in get_wchan
            PCI: Disable Bus Master only on kexec reboot
            drivers/char/i8k.c: add Dell XPLS L421X
            usb: hub: Use correct reset for wedged USB3 devices that are NOTATTACHED
            drm/radeon/atom: fix bus probes when hw_i2c is set (v2)
            drm/radeon: fixup bad vram size on SI
            USB: cdc-acm: Added support for the Lenovo RD02-D400 USB Modem
            USB: pl2303: fixed handling of CS5 setting
            USB: ftdi_sio: fixed handling of unsupported CSIZE setting
            USB: mos7840: correct handling of CS5 setting
            USB: spcp8x5: correct handling of CS5 setting
            USB: option: support new huawei devices
            USB: serial: option: blacklist interface 1 for Huawei E173s-6
            ath9k: Fix XLNA bias strength
            ath9k: Fix QuickDrop usage
            [media] saa7164: fix return value check in saa7164_initdev()
            [media] af9035: add [0413:6a05] Leadtek WinFast DTV Dongle Dual
            [media] af9035: [0ccd:0099] TerraTec Cinergy T Stick Dual RC (rev. 2)
            [media] af9035: add ID [0ccd:00aa] TerraTec Cinergy T Stick (rev. 2)
            usb: dwc3: fix implementation of endpoint wedge
            usb: musb: only cancel work if it is initialized
            usb: gadget: composite: reset delayed_status on reset_config
            mac80211: don't attempt to reorder multicast frames
            mac80211: fix scheduled scan rtnl deadlock
            dm delay: fix a possible deadlock due to shared workqueue
            selinux: process labeled IPsec TCP SYN-ACK packets properly in selinux_ip_postroute()
            selinux: look for IPsec labels on both inbound and outbound packets
            selinux: handle TCP SYN-ACK packets correctly in selinux_ip_postroute()
            Linux 3.8.13.15
            crypto: scatterwalk - Use sg_chain_ptr on chain entries
            x86-64, build: Always pass in -mno-sse
            cpuidle: Check for dev before deregistering it.
            ASoC: wm8731: fix dsp mode configuration
            [SCSI] bfa: Fix crash when symb name set for offline vport
            powerpc/gpio: Fix the wrong GPIO input data on MPC8572/MPC8536
            [SCSI] enclosure: fix WARN_ON in dual path device removing
            ALSA: hda - Another fixup for ASUS laptop with ALC660 codec
            [SCSI] hpsa: return 0 from driver probe function on success, not 1
            ARM: footbridge: fix EBSA285 LEDs
            [SCSI] hpsa: do not discard scsi status on aborted commands
            ARM: footbridge: fix VGA initialisation
            ARM: fix booting low-vectors machines
            net: smc91: fix crash regression on the versatile
            ALSA: hda - Fix silent output on ASUS W7J laptop
            efi-pstore: Make efi-pstore return a unique id
            [SCSI] Disable WRITE SAME for RAID and virtual host adapter drivers
            crypto: ccm - Fix handling of zero plaintext when computing mac
            crypto: s390 - Fix aes-xts parameter corruption
            crypto: scatterwalk - Set the chain pointer indication bit
            crypto: authenc - Find proper IV address in ablkcipher callback
            [SCSI] libsas: fix usage of ata_tf_to_fis
            ARM: OMAP2+: Disable POSTED mode for errata i103 and i767
            xen/gnttab: leave lazy MMU mode in the case of a m2p override failure
            can: flexcan: use correct clock as base for bit rate calculation
            irq: Enable all irqs unconditionally in irq_resume
            can: c_can: don't call pm_runtime_get_sync() from interrupt context
            can: sja1000: fix {pre,post}_irq() handling and IRQ handler return value
            ARM: mvebu: use the virtual CPU registers to access coherency registers
            ASoC: wm8990: Mark the register map as dirty when powering down
            time: Fix 1ns/tick drift w/ GENERIC_TIME_VSYSCALL_OLD
            Update of blkg_stat and blkg_rwstat may happen in bh context. While u64_stats_fetch_retry is only preempt_disable on 32bit UP system. This is not enough to avoid preemption by bh and may read strange 64 bit value.
            NFSv4: Update list of irrecoverable errors on DELEGRETURN
            mm/hugetlb: check for pte NULL pointer in __page_check_address()
            xen-netback: fix refcnt unbalance for 3.11 and earlier versions
            [media] cxd2820r_core: fix sparse warnings
            staging: comedi: pcmuio: fix possible NULL deref on detach
            staging: comedi: amplc_pc263: correct insn_bits result
            staging: comedi: ssv_dnp: use comedi_dio_update_state()
            ip6tnl: fix use after free of fb_tnl_dev
            sched: Avoid throttle_cfs_rq() racing with period_timer stopping
            NFSv4 wait on recovery for async session errors
            ALSA: hda - Initialize missing bass speaker pin for ASUS AIO ET2700
            cpuset: Fix memory allocator deadlock
            Staging: tidspbridge: disable driver
            tracing: Allow events to have NULL strings
            ALSA: hda/realtek - Set pcbeep amp for ALC668
            ALSA: hda/realtek - Add support of ALC231 codec
            staging: zsmalloc: Ensure handle is never 0 on success
            gpio: mvebu: make mvchip->irqbase signed for error handling
            powerpc/signals: Improved mark VSX not saved with small contexts fix
            ahci: add Marvell 9230 to the AHCI PCI device list
            ahci: sata: add support for exynos5440 sata
            crypto: s390 - Fix aes-cbc IV corruption
            {pktgen, xfrm} Update IPv4 header total len and checksum after tranformation
            ipv6: fix possible seqlock deadlock in ip6_finish_output2
            inet: fix possible seqlock deadlocks
            net: update consumers of MSG_MORE to recognize MSG_SENDPAGE_NOTLAST
            net: 8139cp: fix a BUG_ON triggered by wrong bytes_compl
            r8169: check ALDPS bit and disable it if enabled for the 8168g
            af_packet: block BH in prb_shutdown_retire_blk_timer()
            packet: fix use after free race in send path when dev is released
            bridge: flush br's address entry in fdb when remove the bridge dev
            net: core: Always propagate flag changes to interfaces
            ipv4: fix race in concurrent ip_route_input_slow()
            tcp: don't update snd_nxt, when a socket is switched from repair mode
            atm: idt77252: fix dev refcnt leak
            xfrm: Release dst if this dst is improper for vti tunnel
            ip6_output: fragment outgoing reassembled skb properly
            ipv6: fix leaking uninitialized port number of offender sockaddr
            net: clamp ->msg_namelen instead of returning an error
            inet: fix addr_len/msg->msg_namelen assignment in recv_error and rxpmtu functions
            net: add BUG_ON if kernel advertises msg_namelen > sizeof(struct sockaddr_storage)
            net: rework recvmsg handler msg_name and msg_namelen logic
            inet: prevent leakage of uninitialized memory to user in recv syscalls
            ipv4: fix possible seqlock deadlock
            connector: improved unaligned access error fix
            isdnloop: use strlcpy() instead of strcpy()
            net-tcp: fix panic in tcp_fastopen_cache_set()
            bonding: fix two race conditions in bond_store_updelay/downdelay
            tcp: tsq: restore minimal amount of queueing
            macvtap: limit head length of skb allocated
            tuntap: limit head length of skb allocated
            6lowpan: Uncompression of traffic class field was incorrect
            usbnet: fix status interrupt urb handling
            bonding: don't permit to use ARP monitoring in 802.3ad mode
            random32: fix off-by-one in seeding requirement
            ipv6: use rt6_get_dflt_router to get default router in rt6_route_rcv
            net: Fix "ip rule delete table 256"
            staging: vt6656: [BUG] Fix for TX USB resets from vendors driver.
            xfs: add capability check to free eofblocks ioctl