Wily update to v4.2.8-ckt1 stable release

[Kamal Mostafa]

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The v4.2.8-ckt1 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://kernel.ubuntu.com/ubuntu/linux.git

    TEST CASE: TBD

       The following patches from the v4.2.8-ckt1 stable release shall be applied:

Linux 4.2.8-ckt1
KEYS: Fix race between read and revoke
tcp: restore fastopen with no data in SYN packet
af_unix: Revert 'lock_interruptible' in stream receive code
fou: clean up socket with kfree_rcu
gianfar: Don't enable RX Filer if not supported
rhashtable: Enforce minimum size on initial hash table
ipv6: automatically enable stable privacy mode if stable_secret set
net: fix uninitialized variable issue
bluetooth: Validate socket address length in sco_sock_bind().
net_sched: make qdisc_tree_decrease_qlen() work for non mq
net: check both type and procotol for tcp sockets
skbuff: Fix offset error in skb_reorder_vlan_header
vlan: Fix untag operations of stacked vlans with REORDER_HEADER off
pptp: verify sockaddr_len in pptp_bind() and pptp_connect()
sh_eth: fix kernel oops in skb_put()
net: add validation for the socket syscall protocol argument
phy: micrel: Fix finding PHY properties in MAC node.
ipv6: sctp: clone options to avoid use after free
r8152: fix lockup when runtime PM is enabled
net: qca_spi: fix transmit queue timeout handling
net: cdc_mbim: add "NDP to end" quirk for Huawei E3372
sctp: also copy sk_tsflags when copying the socket
sctp: update the netstamp_needed counter when copying sockets
sctp: use the same clock as if sock source timestamps were on
vxlan: fix incorrect RCO bit in VXLAN header
ipv6: keep existing flags when setting IFA_F_OPTIMISTIC
atl1c: Improve driver not to do order 4 GFP_ATOMIC allocation
gre6: allow to update all parameters via rtnl
pppoe: fix memory corruption in padt work structure
ARC: Fix silly typo in MAINTAINERS file
megaraid_sas: Make tape drives visible on PERC5 controllers
TPM: Avoid reference to potentially freed memory
mvneta: add FIXED_PHY dependency
TPM: revert the list handling logic fixed in 398a1e7
tpm_tis: free irq after probing
NTB: fix 32-bit compiler warning
rtc: ds1307: Fix alarm programming for mcp794xx
perf trace: Fix documentation for -i
ipv4: fix a potential deadlock in mcast getsockopt() path
thermal: exynos: Fix first temperature read after registering sensor
selftests: Make scripts executable
selftests: kprobe: Choose an always-defined function to probe
vfio/platform: store mapped memory in region, instead of an on-stack copy
ipv6: fix tunnel error handling
net: fix percpu memory leaks
tracepoints: Fix documentation of RCU lockdep checks
qmi_wwan: fix entry for HP lt4112 LTE/HSPA+ Gobi 4G Module
xprtrdma: Prevent loss of completion signals
xprtrdma: Re-arm after missed events
cpufreq: arm_big_little: fix frequency check when bL switcher is active
ipv6: no CHECKSUM_PARTIAL on MSG_MORE corked sockets
IB/core, cma: Make __attribute_const__ declarations sparse-friendly
sparc/PCI: Add mem64 resource parsing for root bus
PCI: Set SR-IOV NumVFs to zero after enumeration
netfilter: nfnetlink: don't probe module if it exists
of/fdt: fix error checking for earlycon address
netfilter: nf_nat_redirect: add missing NULL pointer check
DT: mmc: sh_mmcif: fix "compatible" property text
MIPS: atomic: Fix comment describing atomic64_add_unless's return value.
sunrpc: avoid warning in gss_key_timeout
perf annotate: Fix 'annotate.use_offset' config variable usage
spi: omap2-mcspi: disable other channels CHCONF_FORCE in prepare_message
IB/core: avoid 32-bit warning
RDMA/cxgb4: re-fix 32-bit build warning
tcp: apply Kern's check on RTTs used for congestion control
kconfig: Fix copy&paste error
ALSA: bebob: use correct type for __be32 data
ALSA: fireworks: use u32 type for be32_to_cpup() macro
ALSA: dice: assign converted data to the same type of variable
ALSA: dice: correct variable types for __be32 data
drm: Fix return value of drm_framebuffer_init()
ALSA: fireworks/bebob/oxfw/dice: enable to make as built-in
regulator: arizona-ldo1: Fix handling of GPIO 0
hsi: omap_ssi_port: Prevent warning if cawake_gpio is not defined.
hsi: fix double kfree
packet: fix match_fanout_group()
i2c: img-scb: verify support for requested bit rate
i2c: img-scb: Clear line and interrupt status before starting a transfer
i2c: img-scb: fix LOW and HIGH period values for the SCL clock
i2c: img-scb: use DIV_ROUND_UP to round divisor values
i2c: img-scb: do dummy writes before fifo access
i2c: img-scb: enable fencing for all versions of the ip
ipv4: Fix ip_queue_xmit to pass sk into ip_local_out_sk
ipv4: Fix ip_local_out_sk by passing the sk into __ip_local_out_sk
netfilter: remove dead code
devres: fix a for loop bounds check
[media] vivid: Fix iteration in driver removal path
tcp: call sk_mark_napi_id() on the child, not the listener
dmaengine: dw: convert to __ffs()
wm831x_power: Use IRQF_ONESHOT to request threaded IRQs
tools build: Fixup feature detection display function name
crypto: crc32c-pclmul - use .rodata instead of .rotata
net-sysfs: get_netdev_queue_index() cleanup
ALSA: pcm: remove structure member of 'struct snd_pcm_hwptr_log *' type because this structure had been removed
iio:magnetometer:bmc150_magn: sort entry alphabetically
dax_io(): don't let non-error value escape via retval instead of EFAULT
fs/pipe.c: return error code rather than 0 in pipe_write()
binfmt_elf: Don't clobber passed executable's file header
FS-Cache: Handle a write to the page immediately beyond the EOF marker
FS-Cache: Don't override netfs's primary_index if registering failed
FS-Cache: Increase reference of parent after registering, netfs success
drm/ast: Initialized data needed to map fbdev memory
drivers: of: of_reserved_mem: fixup the alignment with CMA setup
storvsc: Don't set the SRB_FLAGS_QUEUE_ACTION_ENABLE flag
ideapad-laptop: Add Lenovo Yoga 900 to no_hw_rfkill dmi list
scsi_sysfs: Fix queue_ramp_up_period return code
perf: Fix inherited events vs. tracepoint filters
parisc: Fixes and cleanups in kernel uapi header files
fs, seqfile: always allow oom killer
lib/hexdump.c: truncate output in case of overflow
printk: prevent userland from spoofing kernel messages
proc: actually make proc_fd_permission() thread-friendly
Input: elantech - add Fujitsu Lifebook U745 to force crc_enabled
arm64: bpf: fix mod-by-zero case
arm64: bpf: fix div-by-zero case
memcg: fix thresholds for 32b architectures.
mm/oom_kill.c: reverse the order of setting TIF_MEMDIE and sending SIGKILL
mm: slab: only move management objects off-slab for sizes larger than KMALLOC_MIN_SIZE
toshiba_acpi: Initialize hotkey_event_type variable
scsi: restart list search after unlock in scsi_remove_target
drm: Use userspace compatible type in fourcc_mod_code macro
ALSA: hda - Add Intel Lewisburg device IDs Audio
tracefs: Fix refcount imbalance in start_creating()
ALSA: hda - Apply pin fixup for HP ProBook 6550b
timers: Use proper base migration in add_timer_on()
thermal: exynos: Fix unbalanced regulator disable on probe failure
vfio: Fix bug in vfio_device_get_from_name()
KVM: VMX: fix SMEP and SMAP without EPT
recordmcount: arm64: Replace the ignored mcount call into nop
recordmcount: Fix endianness handling bug for nop_mcount
xtensa: fix secondary core boot in SMP
megaraid_sas : SMAP restriction--do not access user memory from IOCTL code
PCI: spear: Fix dw_pcie_cfg_read/write() usage
tracing: Update instance_rmdir() to use tracefs_remove_recursive
ALSA: hda - Fix lost 4k BDL boundary workaround
drm/amdgpu: Make amdgpu_mn functions inline
xtensa: fixes for configs without loop option
crypto: algif_hash - Only export and import on sockets with data
drm/i915: add quirk to enable backlight on Dell Chromebook 11 (2015)
Revert "dm mpath: fix stalls when handling invalid ioctls"
mtd: blkdevs: fix potential deadlock + lockdep warnings
dm: initialize non-blk-mq queue data before queue is used
megaraid_sas: Expose TAPE drives unconditionally
spi/spi-xilinx: Fix race condition on last word read
drm/amdgpu: add some additional CZ revisions
MAINTAINERS: Add public mailing list for ARC
ALSA: hda - Disable 64bit address for Creative HDA controllers
ALSA: hda/realtek - Dell XPS one ALC3260 speaker no sound after resume back
i2c: at91: manage unexpected RXRDY flag when starting a transfer
ACPI / PM: Fix incorrect wakeup IRQ setting during suspend-to-idle
ACPI: Using correct irq when waiting for events
ACPI: Use correct IRQ when uninstalling ACPI interrupt handler
spi: atmel: Fix DMA-setup for transfers with more than 8 bits per word
i2c: at91: fix write transfers by clearing pending interrupt first
[media] media/v4l2-ctrls: fix setting autocluster to manual with VIDIOC_S_CTRL
[media] media: vb2 dma-sg: Fully cache synchronise buffers in prepare and finish
[media] media: vb2 dma-contig: Fully cache synchronise buffers in prepare and finish
spi: dw: explicitly free IRQ handler in dw_spi_remove_host()
drm/amdgpu/gfx8: set TC_WB_ACTION_EN in RELEASE_MEM packet
tpm, tpm_tis: fix tpm_tis ACPI detection issue with TPM 2.0
tpm, tpm_crb: fix unaligned read of the command buffer address
vTPM: fix memory allocation flag for rtce buffer at kernel boot
[PATCH] fix calculation of meta_bg descriptor backups
jbd2: fix checkpoint list cleanup
iommu/arm-smmu: Fix error checking for ASID and VMID allocation
iommu/vt-d: Fix ATSR handling for Root-Complex integrated endpoints
lockd: create NSM handles per net namespace
spi: ti-qspi: Fix data corruption seen on r/w stress test
f2fs crypto: allocate buffer for decrypting filename
integrity: prevent loading untrusted certificates on the IMA trusted keyring
drm/i915: Fix userptr deadlock with aliased GTT mmappings
drm/i915: Only update the current userptr worker
ubi: fastmap: Implement produce_free_peb()
[media] media: v4l2-ctrls: Fix 64bit support in get_ctrl()
[media] v4l2-ctrls: arrays are also considered compound controls
mtd: mtdpart: fix add_mtd_partitions error path
[media] v4l2-compat-ioctl32: fix alignment for ARM64
HID: core: Avoid uninitialized buffer access
ipv6: Fix IPsec pre-encap fragmentation check
vxlan: set needed headroom correctly
ARM: OMAP2+: board-generic: Remove stale of_irq macros
scsi_dh: fix randconfig build error
netlink, mmap: fix edge-case leakages in nf queue zero-copy
ebpf: fix fd refcount leaks related to maps in bpf syscall
task_work: remove fifo ordering guarantee
ASoC: spear_pcm: Use devm_snd_dmaengine_pcm_register to fix resource leak
bridge: fix netlink max attr size
net: bcmgenet: Delay PHY initialization to bcmgenet_open()
net: bcmgenet: Use correct dev_id for free_irq
pinctrl: single: dra7: remove PCS_QUIRK_SHARED_IRQ
drm/radeon: fix quirk for MSI R7 370 Armor 2X
drm/radeon: add quirk for ASUS R7 370
drm/radeon: add quirk for MSI R7 370
x86/xen: Do not clip xen_e820_map to xen_e820_map_entries when sanitizing map
drivers: usb: fsl: Workaround for USB erratum-A005275
drivers: usb :fsl: Implement Workaround for USB Erratum A007792
mxc_nand: fix copy_spare

[Andy Whitcroft (apw)]

Fix released in 4.2.0-27.32