Trusty update to 3.16.7-ckt15 stable release

[Luis Henriques]

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 3.16.7-ckt15 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://kernel.ubuntu.com/ubuntu/linux.git

    TEST CASE: TBD

       The following patches are in the 3.16.7-ckt15 stable release:

ARM: clk-imx6q: refine sata's parent
KVM: nSVM: Check for NRIPS support before updating control field
nfs: take extra reference to fl->fl_file when running a setlk
bridge: fix multicast router rlist endless loop
net: don't wait for order-3 page allocation
sctp: fix ASCONF list handling
bridge: fix br_stp_set_bridge_priority race conditions
packet: read num_members once in packet_rcv_fanout()
packet: avoid out of bounds read in round robin fanout
neigh: do not modify unlinked entries
tcp: Do not call tcp_fastopen_reset_cipher from interrupt context
net: phy: fix phy link up when limiting speed via device tree
sctp: Fix race between OOTB responce and route removal
x86/mce: Fix MCE severity messages
[media] s5h1420: fix a buffer overflow when checking userspace params
[media] cx24116: fix a buffer overflow when checking userspace params
[media] af9013: Don't accept invalid bandwidth
[media] cx24117: fix a buffer overflow when checking userspace params
spi: fix race freeing dummy_tx/rx before it is unmapped
mtd: fix: avoid race condition when accessing mtd->usecount
intel_pstate: set BYT MSR with wrmsrl_on_cpu()
leds / PM: fix hibernation on arm when gpio-led used with CPU led trigger
crypto: talitos - avoid memleak in talitos_alg_alloc()
Revert "crypto: talitos - convert to use be16_add_cpu()"
genirq: devres: Fix testing return value of request_any_context_irq()
ASoC: wm8737: Fixup setting VMID Impedance control register
ASoC: wm8903: Fix define for WM8903_VMID_RES_250K
mnt: Refactor the logic for mounting sysfs and proc in a user namespace
ASoC: wm8955: Fix setting wrong register for WM8955_K_8_0_MASK bits
scsi_transport_srp: Introduce srp_wait_for_queuecommand()
scsi_transport_srp: Fix a race condition
KVM: mips: use id_to_memslot correctly
w1_therm reference count family data
drm/radeon: take the mode_config mutex when dealing with hpds (v2)
usb: dwc3: gadget: return error if command sent to DGCMD register fails
rcu: Correctly handle non-empty Tiny RCU callback list with none ready
ASoC: arizona: Fix noise generator gain TLV
usb: dwc3: gadget: don't clear EP_BUSY too early
staging: rtl8712: prevent buffer overrun in recvbuf2recvframe
usb: core: Fix USB 3.0 devices lost in NOTATTACHED state after a hub port reset
staging: vt6655: device_rx_srv check sk_buff is NULL
fixing infinite OPEN loop in 4.0 stateid recovery
ideapad_laptop: Lenovo G50-30 fix rfkill reports wireless blocked
powerpc/perf: Fix book3s kernel to userspace backtraces
SUNRPC: Fix a memory leak in the backchannel code
ipr: Increase default adapter init stage change timeout
ieee802154: Fix sockaddr_ieee802154 implicit padding information leak.
mnt: Modify fs_fully_visible to deal with locked ro nodev and atime
drm/qxl: Do not cause spice-server to clean our objects
drm/qxl: Do not leak memory if qxl_release_list_add fails
selinux: fix setting of security labels on NFS
ath3k: Add support of 0489:e076 AR3012 device
ath3k: add support of 13d3:3474 AR3012 device
Bluetooth: btusb: Fix memory leak in Intel setup routine
ath9k: fix DMA stop sequence for AR9003+
b43: fix support for 14e4:4321 PCI dev with BCM4321 chipset
cdc-acm: Add support of ATOL FPrint fiscal printers
regulator: core: fix constraints output buffer
ACPI / PM: Add missing pm_generic_complete() invocation
x86/PCI: Use host bridge _CRS info on Foxconn K8M890-8237A
pinctrl: mvebu: armada-38x: fix PCIe functions
pinctrl: mvebu: armada-370: fix spi0 pin description
pinctrl: mvebu: armada-375: remove non-existing NAND re/we pins
pinctrl: mvebu: armada-xp: remove non-existing NAND pins
pinctrl: mvebu: armada-xp: remove non-existing VDD cpu_pd functions
pinctrl: mvebu: armada-xp: fix functions of MPP48
pinctrl: mvebu: armada-375: remove incorrect space in pin description
pinctrl: mvebu: armada-38x: fix incorrect total number of GPIOs
i2c: at91: fix a race condition when using the DMA controller
dmaengine: mv_xor: bug fix for racing condition in descriptors cleanup
ASoC: wm8960: the enum of "DAC Polarity" should be wm8960_enum[1]
arm64: Do not attempt to use init_mm in reset_context()
ext4: fix race between truncate and __ext4_journalled_writepage()
Disable write buffering on Toshiba ToPIC95
fs/ufs: revert "ufs: fix deadlocks introduced by sb mutex merge"
jbd2: use GFP_NOFS in jbd2_cleanup_journal_tail()
regmap: Fix regmap_bulk_read in BE mode
jbd2: fix ocfs2 corrupt when updating journal superblock fails
ideapad: fix software rfkill setting
fs/ufs: restore s_lock mutex
regmap: Fix possible shift overflow in regmap_field_init()
ima: fix ima_show_template_data_ascii()
nfs: increase size of EXCHANGE_ID name string buffer
vTPM: set virtual device before passing to ibmvtpm_reset_crq
arm: KVM: force execution of HCPTR access on VM exit
arm64: mm: Fix freeing of the wrong memmap entries with !SPARSEMEM_VMEMMAP
dm space map metadata: fix occasional leak of a metadata block on resize
dm stats: fix divide by zero if 'number_of_areas' arg is zero
x86/PCI: Use host bridge _CRS info on systems with >32 bit addressing
pNFS: Fix a memory leak when attempted pnfs fails
ACPI / PNP: Avoid conflicting resource reservations
Bluetooth: ath3k: add support of 04ca:300f AR3012 device
Bluetooth: ath3k: Add support of 04ca:300d AR3012 device
libata: Do not blacklist Micron M500DC
arm64: vdso: work-around broken ELF toolchains in Makefile
iommu/amd: Handle large pages correctly in free_pagetable
ext4: call sync_blockdev() before invalidate_bdev() in put_super()
MIPS: Fix KVM guest fixmap address
xfs: fix remote symlinks on V5/CRC filesystems
ext4: don't retry file block mapping on bigalloc fs with non-extent file
xfs: don't truncate attribute extents if no extents exist
NET: ROSE: Don't dereference NULL neighbour pointer.
netfilter: nf_qeueue: Drop queue entries on nf_unregister_hook
fs: Fix S_NOSEC handling
stmmac: troubleshoot unexpected bits in des0 & des1
ACPI / resources: free memory on error in add_region_before()
PM / sleep: Increase default DPM watchdog timeout to 60
ARC: add compiler barrier to LLSC based cmpxchg
locking,arch,arc: Fold atomic_ops
ARC: add smp barriers around atomics per Documentation/atomic_ops.txt
mm: kmemleak: allow safe memory scanning during kmemleak disabling
dell-laptop: Fix allocating & freeing SMI buffer page
ALSA: hda - Fix Dock Headphone on Thinkpad X250 seen as a Line Out
tracing/filter: Do not WARN on operand count going below zero
tracing/filter: Do not allow infix to exceed end of string
clocksource: exynos_mct: Avoid blocking calls in the cpu hotplug notifier
ALSA: hda - Add headset support to Acer Aspire V5
ALSA: hda - Fix the dock headphone output on Fujitsu Lifebook E780
agp/intel: Fix typo in needs_ilk_vtd_wa()
drm/i915: fix backlight after resume on 855gm
drm/radeon: compute ring fix hibernation (CI GPU family) v2.
drm/radeon: SDMA fix hibernation (CI GPU family).
net: mvneta: introduce compatible string "marvell, armada-xp-neta"
ARM: mvebu: update Ethernet compatible string for Armada XP
net: mvneta: disable IP checksum with jumbo frames for Armada 370
crush: fix a bug in tree bucket decode
rbd: use GFP_NOIO in rbd_obj_request_create()
arm64: Don't report clear pmds and puds as huge
fuse: initialize fc->release before calling it
vfs: Ignore unlocked mounts in fs_fully_visible
VFS: Introduce inode-getting helpers for layered/unioned fs environments
fs: Add helper functions for permanently empty directories.
sysctl: Allow creating permanently empty directories that serve as mountpoints.
proc: Allow creating permanently empty directories that serve as mount points
kernfs: Add support for always empty directories.
sysfs: Add support for permanently empty directories to serve as mount points.
mnt: Update fs_fully_visible to test for permanently empty directories
vfs: Remove incorrect debugging WARN in prepend_path
hwmon: (mcp3021) Fix broken output scaling
ACPICA: Tables: Enable both 32-bit and 64-bit FACS
ACPICA: Tables: Fix an issue that FACS initialization is performed twice
ACPICA: Tables: Enable default 64-bit FADT addresses favor
KVM: x86: make vapics_in_nmi_mode atomic
KVM: x86: properly restore LVT0
KVM: s390: virtio-ccw: don't overwrite config space values
9p: forgetting to cancel request on interrupted zero-copy RPC
clk: Fix JSON output in debugfs
e1000e: Cleanup handling of VLAN_HLEN as a part of max frame size
powerpc/pseries: Fix possible leaked device node reference
clk: ti: dra7-atl-clock: Fix possible ERR_PTR dereference
ipip: fix one sparse error
HID: rmi: fix some harmless BIT() mistakes
HID: i2c-hid: fix harmless test_bit() issue
pktgen: adjust spacing in proc file interface output
USB: devio: fix a condition in async_completed()
tty: remove platform_sysrq_reset_seq
net/mlx4_core: Enhance the MAD_IFC wrapper to convert VF port to physical
IB/mlx4: Convert slave port before building address-handle
ath9k_htc: memory corruption calling set_bit()
rndis_wlan: harmless issue calling set_bit()
mtd: dc21285: use raw spinlock functions for nw_gpio_lock
mac80211: prevent possible crypto tx tailroom corruption
cfg80211: ignore netif running state when changing iftype
phy: twl4030-usb: remove incorrect pm_runtime_get_sync() in probe function.
NFS: Fix size of NFSACL SETACL operations
Btrfs: lock superblock before remounting for rw subvol
of: return NUMA_NO_NODE from fallback of_node_to_nid()
sched/fair: Prevent throttling in early pick_next_task_fair()
ASoC: imx-wm8962: Add a missing error check
ACPI / init: Switch over platform to the ACPI mode later
drm/tegra: dpaux: Fix transfers larger than 4 bytes
mmc: card: Fixup request missing in mmc_blk_issue_rw_rq
perf: Fix ring_buffer_attach() RCU sync, again
watchdog: omap: assert the counter being stopped before reprogramming
bridge: multicast: restore router configuration on port link down/up
mm/hugetlb: introduce minimum hugepage order
security_syslog() should be called once only
__bitmap_parselist: fix bug in empty string handling
x86/iosf: Add Kconfig prompt for IOSF_MBI selection
sparc: Use GFP_ATOMIC in ldc_alloc_exp_dring() as it can be called in softirq context
fs/ufs: restore s_lock mutex_init()
ACPI / PNP: Reserve ACPI resources at the fs_initcall_sync stage
LZ4 : fix the data abort issue
lz4: fix system halt at boot kernel on x86_64
Linux 3.16.7-ckt15

The following patch from 3.16.7-ckt15 was already applied in the Utopic kernel:

kvm: x86: fix kvm_apic_has_events to check for NULL pointer

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-lts-utopic - 3.16.0-46.62~14.04.1

---------------
linux-lts-utopic (3.16.0-46.62~14.04.1) trusty; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1483790
  * SAUCE: REBASE-FIXUP: debian/scripts/misc/getabis: fix abi directory

  [ Upstream Kernel Changes ]

  * Revert "Bluetooth: ath3k: Add support of 04ca:300d AR3012 device"

linux-lts-utopic (3.16.0-46.61~14.04.1) trusty; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1478986

  [ Brad Figg ]

  * SAUCE: REBASE-FIXUP: debian/rules.d/1-maintainer.mk: Need '~14.04.1' as
    part of the version when looking for the baseCommit for printchanges

  [ Upstream Kernel Changes ]

  * Revert "crypto: talitos - convert to use be16_add_cpu()"
    - LP: #1478852
  * storvsc: use cmd_size to allocate per-command data
    - LP: #1445195
  * storvsc: fix a bug in storvsc limits
    - LP: #1445195
  * Drivers: hv: vmbus: Support a vmbus API for efficiently sending page
    arrays
    - LP: #1445195
  * scsi: storvsc: Increase the ring buffer size
    - LP: #1445195
  * scsi: storvsc: Size the queue depth based on the ringbuffer size
    - LP: #1445195
  * scsi: storvsc: Always send on the selected outgoing channel
    - LP: #1445195
  * scsi: storvsc: Retrieve information about the capability of the target
    - LP: #1445195
  * scsi: storvsc: Don't assume that the scatterlist is not chained
    - LP: #1445195
  * scsi: storvsc: Set the tablesize based on the information given by the
    host
    - LP: #1445195
  * SUNRPC: TCP/UDP always close the old socket before reconnecting
    - LP: #1403152
  * ALSA: hda - Fix noisy outputs on Dell XPS13 (2015 model)
    - LP: #1468582
  * Fix kmalloc slab creation sequence
    - LP: #1475204
  * ARM: clk-imx6q: refine sata's parent
    - LP: #1478852
  * KVM: nSVM: Check for NRIPS support before updating control field
    - LP: #1478852
  * nfs: take extra reference to fl->fl_file when running a setlk
    - LP: #1478852
  * bridge: fix multicast router rlist endless loop
    - LP: #1478852
  * net: don't wait for order-3 page allocation
    - LP: #1478852
  * sctp: fix ASCONF list handling
    - LP: #1478852
  * bridge: fix br_stp_set_bridge_priority race conditions
    - LP: #1478852
  * packet: read num_members once in packet_rcv_fanout()
    - LP: #1478852
  * packet: avoid out of bounds read in round robin fanout
    - LP: #1478852
  * neigh: do not modify unlinked entries
    - LP: #1478852
  * tcp: Do not call tcp_fastopen_reset_cipher from interrupt context
    - LP: #1478852
  * net: phy: fix phy link up when limiting speed via device tree
    - LP: #1478852
  * sctp: Fix race between OOTB responce and route removal
    - LP: #1478852
  * x86/mce: Fix MCE severity messages
    - LP: #1478852
  * s5h1420: fix a buffer overflow when checking userspace params
    - LP: #1478852
  * cx24116: fix a buffer overflow when checking userspace params
    - LP: #1478852
  * af9013: Don't accept invalid bandwidth
    - LP: #1478852
  * cx24117: fix a buffer overflow when checking userspace params
    - LP: #1478852
  * spi: fix race freeing dummy_tx/rx before it is unmapped
    - LP: #...