commit 6bfb09a1005193be5c81ebac9f3ef85210142650
Merge: 7c22a3d... 88c381b...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Sat Sep 13 14:51:22 2008 -0700

    Merge master.kernel.org:/home/rmk/linux-2.6-arm
    
    * master.kernel.org:/home/rmk/linux-2.6-arm:
      [ARM] Fix PCI_DMA_BUS_IS_PHYS for ARM
      [ARM] 5247/1: tosa: SW_EAR_IN support
      [ARM] 5246/1: tosa: add proper clock alias for tc6393xb clock
      [ARM] 5245/1: Fix warning about unused return value in drivers/pcmcia
      [ARM] OMAP: Fix MMC device data
      imx serial: fix rts handling for non imx1 based hardware
      imx serial: set RXD mux bit on i.MX27 and i.MX31
      i.MX serial: fix init failure
      pcm037: add rts/cts support for serial port

commit 7c22a3d853804d2716ef4f90cdd693a83819ba11
Merge: 0cb60ef... 97b697a...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Sat Sep 13 14:48:14 2008 -0700

    Merge branch 'upstream-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jgarzik/libata-dev
    
    * 'upstream-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jgarzik/libata-dev:
      [libata] LBA28/LBA48 off-by-one bug in ata.h
      sata_inic162x: enable LED blinking
      ata: duplicate variable sparse warning

commit 0cb60efd03ed82d02f44a14594714367e59e8abc
Merge: c19e808... 395a125...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Sat Sep 13 14:47:33 2008 -0700

    Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jbarnes/pci-2.6
    
    * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jbarnes/pci-2.6:
      PCI: re-add debug prints for unmodified BARs
      PCI: fix pciehp_free_irq()
      PCI Hotplug: fakephp: fix deadlock... again
      PCI: Fix printk warnings in setup-bus.c
      PCI: Fix printk warnings in probe.c
      PCI/iommu: blacklist DMAR on Intel G31/G33 chipsets

commit c19e80808b34b3de5c20884f11f58c3b6988daff
Merge: 344a782... cff502a...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Sat Sep 13 14:46:57 2008 -0700

    Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6
    
    * git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6:
      niu: panic on reset
      netlink: fix overrun in attribute iteration
      [Bluetooth] Fix regression from using default link policy
      ath9k: Assign seq# when mac80211 requests this

commit 344a7829c421ce6c626cb94c6576f66a7c28a871
Merge: 8e82f8c... 7d4ee28...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Sat Sep 13 14:45:42 2008 -0700

    Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/sparc-2.6
    
    * git://git.kernel.org/pub/scm/linux/kernel/git/davem/sparc-2.6:
      sparc: Fix user_regset 'n' field values.
      sparc64: Fix PCI error interrupt registry on PSYCHO.
      sparc32: Fix function signature of of_bus_sbus_get_flags().
      sparc64: Fix interrupt register calculations on Psycho and Sabre.

commit 8e82f8c34b1759ae0d80fe96101746ec51fb1ba4
Author: Alex Dubov <oakad@yahoo.com>
Date:   Sat Sep 13 02:33:26 2008 -0700

    memstick: fix MSProHG 8-bit interface mode support
    
    - 8-bit interface mode never worked properly.  The only adapter I have
      which supports the 8b mode (the Jmicron) had some problems with its
      clock wiring and they discovered it only now.  We also discovered that
      ProHG media is more sensitive to the ordering of initialization
      commands.
    
    - Make the driver fall back to highest supported mode instead of always
      falling back to serial.  The driver will attempt the switch to 8b mode
      for any new MSPro card, but not all of them support it.  Previously,
      these new cards ended up in serial mode, which is not the best idea
      (they work fine with 4b, after all).
    
    - Edit some macros for better conformance to Sony documentation
    
    Signed-off-by: Alex Dubov <oakad@yahoo.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 8d99f83b9478768d3a8d7d1bcd9bd182c75a0447
Author: Andrew Morton <akpm@linux-foundation.org>
Date:   Sat Sep 13 02:33:25 2008 -0700

    rescan_partitions(): make device capacity errors non-fatal
    
    Herton Krzesinski reports that the error-checking changes in
    04ebd4aee52b06a2c38127d9208546e5b96f3a19 ("block/ioctl.c and
    fs/partition/check.c: check value returned by add_partition") cause his
    buggy USB camera to no longer mount.  "The camera is an Olympus X-840.
    The original issue comes from the camera itself: its format program
    creates a partition with an off by one error".
    
    Buggy devices happen.  It is better for the kernel to warn and to proceed
    with the mount.
    
    Reported-by: Herton Ronaldo Krzesinski <herton@mandriva.com.br>
    Cc: Abdel Benamrouche <draconux@gmail.com>
    Cc: Jens Axboe <jens.axboe@oracle.com>
    Cc: Alan Stern <stern@rowland.harvard.edu>
    Cc: David Brownell <david-b@pacbell.net>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 42cde4309b8f2671610be049352df2f8716e8809
Author: Ben Dooks <ben-linux@fluff.org>
Date:   Sat Sep 13 02:33:24 2008 -0700

    spi_s3c24xx: fix section warning
    
    Fix the section mismatch warning generated by the incorrect naming of
    s3c24xx_spidrv which should be s3c24xx_spi_driver:
    
    WARNING: drivers/spi/spi_s3c24xx.o(.data+0x4):
      Section mismatch in reference from the variable s3c24xx_spidrv
      to the (unknown reference) .exit.text:(unknown)
    
    Signed-off-by: Ben Dooks <ben-linux@fluff.org>
    Signed-off-by: David Brownell <dbrownell@users.sourceforge.net>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 3aa04f1b07352be89960bddca4db0d5d8c09510c
Author: Haavard Skinnemoen <haavard.skinnemoen@atmel.com>
Date:   Sat Sep 13 02:33:23 2008 -0700

    atmel_lcdfb: disable LCD and DMA engines when suspending
    
    When suspending the system with atmel_lcdfb enabled, I sometimes see
    this:
    
    	atmel_lcdfb atmel_lcdfb.0: FIFO underflow 0x10
    
    Which can be explained by the fact that we're not stopping the LCD
    controller and its DMA engine when suspending, we're just gating the
    clocks to them.
    
    There's another potential issue which may be harder to trigger but
    much more nasty: If we gate the clocks at _just_ the right moment,
    e.g. when the DMA engine is doing a bus transaction, we may cause the
    DMA engine to violate the system bus protocol and cause a lockup.
    
    Avoid these issues by shutting down the LCD controller before entering
    suspend (and restarting it when resuming). This prevents the underrun
    from happening in the first place, and prevents whatever nastiness is
    happening when the bus clock stops in the middle of a DMA transfer.
    
    Signed-off-by: Haavard Skinnemoen <haavard.skinnemoen@atmel.com>
    Acked-by: Nicolas Ferre <nicolas.ferre@atmel.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 8275d102f8dbaa4f437f6b03b00d85bfb4e16025
Author: Robin Holt <holt@sgi.com>
Date:   Sat Sep 13 02:33:22 2008 -0700

    ia64: fix panic during `modprobe -r xpc'
    
    If you are on ia64 and you modprobe xpc then modprobe -r xpc, you
    immediately get a panic.  xpc depends on xp which depends on gru for a
    symbol.  That symbol is only used when we are running on UV hardware.
    
    Currently, the GRU driver detects we are not on UV hardware and does no
    initializing.  It does not do the same check when unloading.  As a result,
    the gru driver attempts to tear down stuff that was not setup.
    
    This is a simple two-line workaround to get us through this release.  Once
    2.6.28 is opened, we need to rework the symbols that xp is depending on
    from gru so the gru driver can properly fail to load when hardware is not
    available.
    
    Signed-off-by: Robin Holt <holt@sgi.com>
    Cc: "Luck, Tony" <tony.luck@intel.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit ecc9a04de66e7b2d40d539cc39d5798bc46553e9
Author: Ming Lei <tom.leiming@gmail.com>
Date:   Sat Sep 13 02:33:21 2008 -0700

    MAINTAINERS: fix USB VIDEO CLASS mail list address
    
    It should be linux-uvc-devel@lists.berlios.de.
    
    Signed-off-by: Ming Lei <tom.leiming@gmail.com>
    Cc: Mauro Carvalho Chehab <mchehab@infradead.org>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 9f986a8cdf94a5855201cf67db6ffdf926bc4cd9
Author: David Brownell <dbrownell@users.sourceforge.net>
Date:   Sat Sep 13 02:33:20 2008 -0700

    Documentation/ABI: /sys/class/gpio
    
    Provide summary ABI docs about the /sys/class/gpio files.
    
    Signed-off-by: David Brownell <dbrownell@users.sourceforge.net>
    Cc: Greg Kroah-Hartman <gregkh@suse.de>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 5bead2a0680687b9576d57c177988e8aa082b922
Author: Mel Gorman <mel@csn.ul.ie>
Date:   Sat Sep 13 02:33:19 2008 -0700

    mm: mark the correct zone as full when scanning zonelists
    
    The iterator for_each_zone_zonelist() uses a struct zoneref *z cursor when
    scanning zonelists to keep track of where in the zonelist it is.  The
    zoneref that is returned corresponds to the the next zone that is to be
    scanned, not the current one.  It was intended to be treated as an opaque
    list.
    
    When the page allocator is scanning a zonelist, it marks elements in the
    zonelist corresponding to zones that are temporarily full.  As the
    zonelist is being updated, it uses the cursor here;
    
      if (NUMA_BUILD)
            zlc_mark_zone_full(zonelist, z);
    
    This is intended to prevent rescanning in the near future but the zoneref
    cursor does not correspond to the zone that has been found to be full.
    This is an easy misunderstanding to make so this patch corrects the
    problem by changing zoneref cursor to be the current zone being scanned
    instead of the next one.
    
    Signed-off-by: Mel Gorman <mel@csn.ul.ie>
    Cc: Andy Whitcroft <apw@shadowen.org>
    Cc: KAMEZAWA Hiroyuki <kamezawa.hiroyu@jp.fujitsu.com>
    Cc: <stable@kernel.org>		[2.6.26.x]
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 7e96445533ac3f4f7964646a202ff3620602fab4
Author: Ned Forrester <nforrester@whoi.edu>
Date:   Sat Sep 13 02:33:18 2008 -0700

    pxa2xx_spi: dma bugfixes
    
    Fixes two DMA bugs in the pxa2xx_spi driver.  The first bug is in all
    versions of this driver; the second was introduced in the 2.6.20 kernel,
    and prevents using the driver with chips like m25p16 flash (which can
    issue large DMA reads).
    
     1. Zero length transfers are permitted for use to insert timing,
        but pxa2xx_spi.c will fail if this is requested in DMA mode.
        Fixed by using programmed I/O (PIO) mode for such transfers.
    
     2. Transfers larger than 8191 are not permitted in DMA mode.  A
        test for length rejects all large transfers regardless of DMA
        or PIO mode.  Worked around by rejecting only large transfers
        with DMA mapped buffers, and forcing all other transfers
        larger than 8191 to use PIO mode.  A rate limited warning is
        issued for DMA transfers forced to PIO mode.
    
    This patch should apply to all kernels back to and including 2.6.20;
    it was test patched against 2.6.20.  An additional patch would be
    required for older kernels, but those versions are very buggy anyway.
    
    Signed-off-by: Ned Forrester <nforrester@whoi.edu>
    Cc: Vernon Sauder <vernoninhand@gmail.com>
    Cc: Eric Miao <eric.y.miao@gmail.com>
    Signed-off-by: David Brownell <dbrownell@users.sourceforge.net>
    Cc: <stable@kernel.org>		[2.6.25.x, 2.6.26.x]
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 8423597d676615f3dd2d9ab36f59f147086b90b8
Author: Ned Forrester <nforrester@whoi.edu>
Date:   Sat Sep 13 02:33:17 2008 -0700

    pxa2xx_spi: chipselect bugfixes
    
    Fixes several chipselect bugs in the pxa2xx_spi driver.  These bugs are in
    all versions of this driver and prevent using it with chips like m25p16
    flash.
    
     1. The spi_transfer.cs_change flag is handled too early:
        before spi_transfer.delay_usecs applies, thus making the
        delay ineffective at holding chip select.
    
     2. spi_transfer.delay_usecs is ignored on the last transfer
        of a message (likewise not holding chipselect long enough).
    
     3. If spi_transfer.cs_change is set on the last transfer, the
        chip select is always disabled, instead of the intended
        meaning: optionally holding chip select enabled for the
        next message.
    
    Those first three bugs were fixed with a relocation of delays
    and chip select de-assertions.
    
     4. If a message has the cs_change flag set on the last transfer,
        and had the chip select stayed enabled as requested (see 3,
        above), it would not have been disabled if the next message is
        for a different chip.  Fixed by dropping chip select regardless
        of cs_change at end of a message, if there is no next message
        or if the next message is for a different chip.
    
    This patch should apply to all kernels back to and including 2.6.20;
    it was test patched against 2.6.20.  An additional patch would be
    required for older kernels, but those versions are very buggy anyway.
    
    Signed-off-by: Ned Forrester <nforrester@whoi.edu>
    Cc: Vernon Sauder <vernoninhand@gmail.com>
    Cc: Eric Miao <eric.y.miao@gmail.com>
    Signed-off-by: David Brownell <dbrownell@users.sourceforge.net>
    Cc: <stable@kernel.org>		[2.6.25.x, 2.6.26.x]
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit aa77d96ba94326db4f50d2aa36602824dd03286a
Author: Peter Korsgaard <jacmet@sunsite.dk>
Date:   Sat Sep 13 02:33:15 2008 -0700

    spi_mpc83xx: reject invalid transfer sizes
    
    Error out on transfer length != multiple of bytes per word with -EINVAL.
    Fixes a buffer overrun crash if length < bytes per word.
    
    Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
    Acked-by: Joakim Tjernlund <Joakim.Tjernlund@transmode.se>
    Signed-off-by: David Brownell <dbrownell@users.sourceforge.net>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 53604dbe1371c3c4458c2d741adbd8cfd8fe8e79
Author: Peter Korsgaard <jacmet@sunsite.dk>
Date:   Sat Sep 13 02:33:14 2008 -0700

    spi_mpc83xx: fix clockrate calculation for low speed
    
    Commit a61f5345 (spi_mpc83xx clockrate fixes) broke clockrate calculation
    for low speeds.  SPMODE_DIV16 should be set if the divider is higher than
    64, not only if the divider gets clipped to 1024.
    
    Furthermore, the clipping check was off by a factor 16 as well.
    
    Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
    Signed-off-by: David Brownell <dbrownell@users.sourceforge.net>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit d7a3e4959c28bccc25dd33315809ffcf40f7493e
Author: Hugh Dickins <hugh@veritas.com>
Date:   Sat Sep 13 02:33:13 2008 -0700

    mm: ifdef Quicklists in /proc/meminfo
    
    A "Quicklists:          0 kB" line has just started appearing in
    /proc/meminfo, but most architectures (including x86) don't have
    them configured, so #ifdef it, like the highmem lines.
    
    And those architectures which do have quicklists configured are
    using them for page tables: so let's place it next to PageTables.
    
    Signed-off-by: Hugh Dickins <hugh@veritas.com>
    Acked-by: Christoph Lameter <cl@linux-foundation.org>
    Acked-by: KOSAKI Motohiro <kosaki.motohiro@jp.fujitsu.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 1558182f651798164418abf53f76786da0ea4a6f
Author: Eric Sesterhenn <snakebyte@gmx.de>
Date:   Sat Sep 13 02:33:12 2008 -0700

    bfs: fix Lockdep warning
    
    This fixes:
    
      =============================================
      [ INFO: possible recursive locking detected ]
      2.6.27-rc5-00283-g70bb089 #68
      ---------------------------------------------
      touch/6855 is trying to acquire lock:
       (&info->bfs_lock){--..}, at: [<c02262f5>] bfs_delete_inode+0x9e/0x18c
    
      but task is already holding lock:
       (&info->bfs_lock){--..}, at: [<c0226c00>] bfs_create+0x45/0x187
    
      other info that might help us debug this:
      2 locks held by touch/6855:
       #0:  (&type->i_mutex_dir_key#5){--..}, at: [<c018ad13>] do_filp_open+0x10b/0x62f
       #1:  (&info->bfs_lock){--..}, at: [<c0226c00>] bfs_create+0x45/0x187
    
      stack backtrace:
      Pid: 6855, comm: touch Not tainted 2.6.27-rc5-00283-g70bb089 #68
       [<c013e769>] validate_chain+0x458/0x9f4
       [<c013bece>] ? trace_hardirqs_off+0xb/0xd
       [<c013f36b>] __lock_acquire+0x666/0x6e0
       [<c013f440>] lock_acquire+0x5b/0x77
       [<c02262f5>] ? bfs_delete_inode+0x9e/0x18c
       [<c06aab74>] mutex_lock_nested+0xbc/0x234
       [<c02262f5>] ? bfs_delete_inode+0x9e/0x18c
       [<c02262f5>] ? bfs_delete_inode+0x9e/0x18c
       [<c02262f5>] bfs_delete_inode+0x9e/0x18c
       [<c0226257>] ? bfs_delete_inode+0x0/0x18c
       [<c01925e1>] generic_delete_inode+0x94/0xfe
       [<c019265d>] generic_drop_inode+0x12/0x12f
       [<c0191b7e>] iput+0x4b/0x4e
       [<c0226d1e>] bfs_create+0x163/0x187
       [<c0188b42>] vfs_create+0xa6/0x114
       [<c018adb5>] do_filp_open+0x1ad/0x62f
       [<c0107cdc>] ? native_sched_clock+0x82/0x96
       [<c06ac309>] ? _spin_unlock+0x27/0x3c
       [<c019379e>] ? alloc_fd+0xbf/0xc9
       [<c06ae2f4>] ? sub_preempt_count+0x9d/0xab
       [<c019379e>] ? alloc_fd+0xbf/0xc9
       [<c0180391>] do_sys_open+0x42/0xb8
       [<c041d564>] ? trace_hardirqs_on_thunk+0xc/0x10
       [<c0180449>] sys_open+0x1e/0x26
       [<c01038bd>] sysenter_do_call+0x12/0x31
       =======================
    
    The problem is that we don't unlock the bfs->lock mutex before calling
    iput (we do in the other cases).
    
    Signed-off-by: Eric Sesterhenn <snakebyte@gmx.de>
    Cc: Tigran Aivazian <tigran@aivazian.fsnet.co.uk>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit b261dfea48e81636516f4fa653667097638a8a62
Author: Hidehiro Kawai <hidehiro.kawai.ez@hitachi.com>
Date:   Sat Sep 13 02:33:10 2008 -0700

    coredump_filter: add description of bit 4
    
    There is no description of bit 4 of coredump_filter in the
    documentation.  This patch adds it.
    
    Signed-off-by: Hidehiro Kawai <hidehiro.kawai.ez@hitachi.com>
    Cc: Roland McGrath <roland@redhat.com>
    Cc: Mel Gorman <mel@csn.ul.ie>
    Acked-by: KOSAKI Motohiro <kosaki.motohiro@jp.fujitsu.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 024994310e10cd7632f43b6873558820308c1af1
Author: Li Zefan <lizf@cn.fujitsu.com>
Date:   Sat Sep 13 02:33:09 2008 -0700

    cpuset: hotplug documentation fix
    
    If all the cpus in a cpuset are offlined, the tasks in it will be moved to
    the nearest ancestor with non-empty cpus.
    
    Signed-off-by: Li Zefan <lizf@cn.fujitsu.com>
    Acked-by: Paul Jackson <pj@sgi.com>
    Cc: Paul Menage <menage@google.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 4e74339af6a59c061cf02f1ac497766bca1de19a
Author: Li Zefan <lizf@cn.fujitsu.com>
Date:   Sat Sep 13 02:33:08 2008 -0700

    cpuset: avoid changing cpuset's cpus when -errno returned
    
    After the patch:
    
    commit 0b2f630a28d53b5a2082a5275bc3334b10373508
    Author: Miao Xie <miaox@cn.fujitsu.com>
    Date:   Fri Jul 25 01:47:21 2008 -0700
    
        cpusets: restructure the function update_cpumask() and update_nodemask()
    
    It might happen that 'echo 0 > /cpuset/sub/cpus' returned failure but 'cpus'
    has been changed, because cpus was changed before calling heap_init() which
    may return -ENOMEM.
    
    This patch restores the orginal behavior.
    
    Signed-off-by: Li Zefan <lizf@cn.fujitsu.com>
    Acked-by: Paul Menage <menage@google.com>
    Cc: Paul Jackson <pj@sgi.com>
    Cc: Miao Xie <miaox@cn.fujitsu.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit dea420ce0e2973e8ef1fd11fde6804c8d03a82ad
Author: Hiroshi DOYU <Hiroshi.DOYU@nokia.com>
Date:   Sat Sep 13 02:33:07 2008 -0700

    include/linux/ioport.h: add missing macro argument for devm_release_* family
    
    akpm: these have no callers at this time, but they shall soon, so let's
    get them right.
    
    [akpm@linux-foundation.org: coding-style fixes]
    Signed-off-by: Hiroshi DOYU <Hiroshi.DOYU@nokia.com>
    Cc: Tony Lindgren <tony@atomide.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 665020c35e89a9e0643e21561e4f8f967f4f2c4b
Author: Alexey Dobriyan <adobriyan@gmail.com>
Date:   Sat Sep 13 02:33:06 2008 -0700

    proc: more debugging for "already registered" case
    
    Print parent directory name as well.
    
    The aim is to catch non-creation of parent directory when proc_mkdir will
    return NULL and all subsequent registrations go directly in /proc instead
    of intended directory.
    
    Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    [ Fixed insane printk string while at it.  - Linus ]
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 97b697a11b07e2ebfa69c488132596cc5eb24119
Author: Taisuke Yamada <tai@rakugaki.org>
Date:   Sat Sep 13 16:46:15 2008 -0400

    [libata] LBA28/LBA48 off-by-one bug in ata.h
    
    I recently bought 3 HGST P7K500-series 500GB SATA drives and
    had trouble accessing the block right on the LBA28-LBA48 border.
    Here's how it fails (same for all 3 drives):
    
      # dd if=/dev/sdc bs=512 count=1 skip=268435455 > /dev/null
      dd: reading `/dev/sdc': Input/output error
      0+0 records in
      0+0 records out
      0 bytes (0 B) copied, 0.288033 seconds, 0.0 kB/s
      # dmesg
      ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
      ata1.00: BMDMA stat 0x25
      ata1.00: cmd c8/00:08:f8:ff:ff/00:00:00:00:00/ef tag 0 dma 4096 in
      res 51/04:08:f8:ff:ff/00:00:00:00:00/ef Emask 0x1 (device error)
      ata1.00: status: { DRDY ERR }
      ata1.00: error: { ABRT }
      ata1.00: configured for UDMA/33
      ata1: EH complete
      ...
    
    After some investigations, it turned out this seems to be caused
    by misinterpretation of the ATA specification on LBA28 access.
    Following part is the code in question:
    
      === include/linux/ata.h ===
      static inline int lba_28_ok(u64 block, u32 n_block)
      {
        /* check the ending block number */
        return ((block + n_block - 1) < ((u64)1 << 28)) && (n_block <= 256);
      }
    
    HGST drive (sometimes) fails with LBA28 access of {block = 0xfffffff,
    n_block = 1}, and this behavior seems to be comformant. Other drives,
    including other HGST drives are not that strict, through.
    
    >From the ATA specification:
    (http://www.t13.org/Documents/UploadedDocuments/project/d1410r3b-ATA-ATAPI-6.pdf)
    
      8.15.29  Word (61:60): Total number of user addressable sectors
      This field contains a value that is one greater than the total number
      of user addressable sectors (see 6.2). The maximum value that shall
      be placed in this field is 0FFFFFFFh.
    
    So the driver shouldn't use the value of 0xfffffff for LBA28 request
    as this exceeds maximum user addressable sector. The logical maximum
    value for LBA28 is 0xffffffe.
    
    The obvious fix is to cut "- 1" part, and the patch attached just do
    that. I've been using the patched kernel for about a month now, and
    the same fix is also floating on the net for some time. So I believe
    this fix works reliably.
    
    Just FYI, many Windows/Intel platform users also seems to be struck
    by this, and HGST has issued a note pointing to Intel ICH8/9 driver.
    
      "28-bit LBA command is being used to access LBAs 29-bits in length"
    http://www.hitachigst.com/hddt/knowtree.nsf/cffe836ed7c12018862565b000530c74/b531b8bce8745fb78825740f00580e23
    
    Also, *BSDs seems to have similar fix included sometime around ~2004,
    through I have not checked out exact portion of the code.
    
    Signed-off-by: Taisuke Yamada <tai@rakugaki.org>
    Signed-off-by: Jeff Garzik <jgarzik@redhat.com>

commit 99580664aa83ca04bb52988d504a4195b41833b0
Author: Bob Stewart <bob@evoria.net>
Date:   Thu Sep 11 11:50:03 2008 +0200

    sata_inic162x: enable LED blinking
    
    Enable LED blinking.
    
    Signed-off-by: Bob Stewart <bob@evoria.net>
    Signed-off-by: Tejun Heo <tj@kernel.org>
    Signed-off-by: Jeff Garzik <jgarzik@redhat.com>

commit da3ceb2288d0b50373b69d57a81c34fdd7cd11aa
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Mon Sep 8 09:31:39 2008 -0700

    ata: duplicate variable sparse warning
    
    drivers/ata/ata_piix.c:1502:7: warning: symbol 'rc' shadows an earlier one
    
    Signed-off-by: Stephen Hemminger <shemminger@vyatta.com>
    Signed-off-by: Jeff Garzik <jgarzik@redhat.com>

commit 88c381bf09d7b3f2c2e8749150087aff2c434be4
Author: Russell King <rmk@dyn-67.arm.linux.org.uk>
Date:   Sat Sep 13 21:23:06 2008 +0100

    [ARM] Fix PCI_DMA_BUS_IS_PHYS for ARM
    
    PCI_DMA_BUS_IS_PHYS was defined to be zero, which meant we ignored
    the DMA mask for IDE and SCSI transfers.  This is wrong - we have
    no DMA translation hardware.  We want to obey DMA masks so that the
    block layer performs bouncing itself.
    
    Reported-by: Mikael Pettersson <mikpe@it.uu.se>
    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>

commit 68ddb1d963c44da913b0331b633828c48206351b
Merge: c33de47... 9fbe604...
Author: Russell King <rmk@dyn-67.arm.linux.org.uk>
Date:   Sat Sep 13 20:10:59 2008 +0100

    Merge branch 'for-rmk' of git://pasiphae.extern.pengutronix.de/git/imx/linux-2.6.git

commit c33de47bce74e0c890f9f830a7641371524edbc1
Author: Dmitry Baryshkov <dbaryshkov@gmail.com>
Date:   Thu Sep 11 01:28:51 2008 +0100

    [ARM] 5247/1: tosa: SW_EAR_IN support
    
    Signed-off-by: Dmitry Baryshkov <dbaryshkov@gmail.com>
    Acked-by: Eric Miao <eric.miao@marvell.com>
    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>

commit 7bdb22c9d4b4f526b81770cd719d2f5dddf0373d
Author: Dmitry Baryshkov <dbaryshkov@gmail.com>
Date:   Wed Sep 10 10:30:37 2008 +0100

    [ARM] 5246/1: tosa: add proper clock alias for tc6393xb clock
    
    Add clock alias for clock that is used by tc6393xb device on tosa.
    As that chip plays pretty major part in tosa life and is currently
    disabled, this is 2.4.27 material.
    
    Signed-off-by: Dmitry Baryshkov <dbaryshkov@gmail.com>
    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>

commit 632480ea6548ae66e89a49ef037fd593c7a52418
Author: Jürgen Schindele <linux@schindele.name>
Date:   Mon Sep 8 22:06:29 2008 +0100

    [ARM] 5245/1: Fix warning about unused return value in drivers/pcmcia
    
    Fix warning when compiling "drivers/pcmcia/soc-common.c"
    The return value of the function "device_create_file"
    was not used / assigned.
    
    Signed-off-by: Jrgen Schindele <linux@schindele.name>
    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>

commit 395a125c6237802b19bf22b41017c99ff57f1024
Author: Yinghai Lu <yhlu.kernel@gmail.com>
Date:   Tue Sep 9 12:27:52 2008 -0700

    PCI: re-add debug prints for unmodified BARs
    
    Print out for device BAR values before the kernel tries to update them.
    Also make related output use KERN_DEBUG.
    
    Signed-off-by: Yinghai Lu <yhlu.kernel@gmail.com>
    Signed-off-by: Jesse Barnes <jbarnes@virtuousgeek.org>

commit cff502a38394fd33693f6233e03fca363dfa956d
Author: Santwona Behera <santwona.behera@sun.com>
Date:   Fri Sep 12 16:04:26 2008 -0700

    niu: panic on reset
    
    The reset_task function in the niu driver does not reset the tx and rx
    buffers properly. This leads to panic on reset. This patch is a
    modified implementation of the previously posted fix.
    
    Signed-off-by: Santwona Behera <santwona.behera@sun.com>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 7d4ee289d139d27b619c08c9809e7b1088c100aa
Author: David S. Miller <davem@davemloft.net>
Date:   Fri Sep 12 15:01:31 2008 -0700

    sparc: Fix user_regset 'n' field values.
    
    As noticed by Russell King, we were not setting this properly
    to the number of entries, but rather the total size.
    
    This results in the core dumping code allocating waayyyy too
    much memory.
    
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 80a56ab626c70468be92e74cf3d288ffaed23fdb
Author: David S. Miller <davem@davemloft.net>
Date:   Fri Sep 12 15:13:15 2008 -0700

    sparc64: Fix PCI error interrupt registry on PSYCHO.
    
    We need to pass IRQF_SHARED, otherwise we get things like:
    
    IRQ handler type mismatch for IRQ 33
    current handler: PSYCHO_UE
    Call Trace:
     [000000000048394c] request_irq+0xac/0x120
     [00000000007c5f6c] psycho_scan_bus+0x98/0x158
     [00000000007c2bc0] pcibios_init+0xdc/0x12c
     [0000000000426a5c] do_one_initcall+0x1c/0x160
     [00000000007c0180] kernel_init+0x9c/0xfc
     [0000000000427050] kernel_thread+0x30/0x60
     [00000000006ae1d0] rest_init+0x10/0x60
    
    on e3500 and similar systems.
    
    On a single board, the UE interrupts of two Psycho nodes
    are funneled through the same interrupt, from of_debug=3
    dump:
    
    /pci@b,4000: direct translate 2ee --> 21
     ...
    /pci@b,2000: direct translate 2ee --> 21
    
    Decimal "33" mentioned above is the hex "21" mentioned here.
    
    Thanks to Meelis Roos for dumps and testing.
    
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit d58b622b5de9747c82fcc3548f3ec87a02c24dce
Merge: 1045b03... 7c6a329...
Author: David S. Miller <davem@davemloft.net>
Date:   Thu Sep 11 19:11:50 2008 -0700

    Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/holtmann/bluetooth-2.6

commit 1045b03e07d85f3545118510a587035536030c1c
Author: Vegard Nossum <vegard.nossum@gmail.com>
Date:   Thu Sep 11 19:05:29 2008 -0700

    netlink: fix overrun in attribute iteration
    
    kmemcheck reported this:
    
      kmemcheck: Caught 16-bit read from uninitialized memory (f6c1ba30)
      0500110001508abf050010000500000002017300140000006f72672e66726565
       i i i i i i i i i i i i i u u u u u u u u u u u u u u u u u u u
                                       ^
    
      Pid: 3462, comm: wpa_supplicant Not tainted (2.6.27-rc3-00054-g6397ab9-dirty #13)
      EIP: 0060:[<c05de64a>] EFLAGS: 00010296 CPU: 0
      EIP is at nla_parse+0x5a/0xf0
      EAX: 00000008 EBX: fffffffd ECX: c06f16c0 EDX: 00000005
      ESI: 00000010 EDI: f6c1ba30 EBP: f6367c6c ESP: c0a11e88
       DS: 007b ES: 007b FS: 00d8 GS: 0033 SS: 0068
      CR0: 8005003b CR2: f781cc84 CR3: 3632f000 CR4: 000006d0
      DR0: c0ead9bc DR1: 00000000 DR2: 00000000 DR3: 00000000
      DR6: ffff4ff0 DR7: 00000400
       [<c05d4b23>] rtnl_setlink+0x63/0x130
       [<c05d5f75>] rtnetlink_rcv_msg+0x165/0x200
       [<c05ddf66>] netlink_rcv_skb+0x76/0xa0
       [<c05d5dfe>] rtnetlink_rcv+0x1e/0x30
       [<c05dda21>] netlink_unicast+0x281/0x290
       [<c05ddbe9>] netlink_sendmsg+0x1b9/0x2b0
       [<c05beef2>] sock_sendmsg+0xd2/0x100
       [<c05bf945>] sys_sendto+0xa5/0xd0
       [<c05bf9a6>] sys_send+0x36/0x40
       [<c05c03d6>] sys_socketcall+0x1e6/0x2c0
       [<c020353b>] sysenter_do_call+0x12/0x3f
       [<ffffffff>] 0xffffffff
    
    This is the line in nla_ok():
    
      /**
       * nla_ok - check if the netlink attribute fits into the remaining bytes
       * @nla: netlink attribute
       * @remaining: number of bytes remaining in attribute stream
       */
      static inline int nla_ok(const struct nlattr *nla, int remaining)
      {
              return remaining >= sizeof(*nla) &&
                     nla->nla_len >= sizeof(*nla) &&
                     nla->nla_len <= remaining;
      }
    
    It turns out that remaining can become negative due to alignment in
    nla_next(). But GCC promotes "remaining" to unsigned in the test
    against sizeof(*nla) above. Therefore the test succeeds, and the
    nla_for_each_attr() may access memory outside the received buffer.
    
    A short example illustrating this point is here:
    
      #include <stdio.h>
    
      main(void)
      {
              printf("%d\n", -1 >= sizeof(int));
      }
    
    ...which prints "1".
    
    This patch adds a cast in front of the sizeof so that GCC will make
    a signed comparison and fix the illegal memory dereference. With the
    patch applied, there is no kmemcheck report.
    
    Signed-off-by: Vegard Nossum <vegard.nossum@gmail.com>
    Acked-by: Thomas Graf <tgraf@suug.ch>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 7c6a329e444725f24c02192ac493d8a7cd9fa638
Author: Marcel Holtmann <marcel@holtmann.org>
Date:   Fri Sep 12 03:11:54 2008 +0200

    [Bluetooth] Fix regression from using default link policy
    
    To speed up the Simple Pairing connection setup, the support for the
    default link policy has been enabled. This is in contrast to settings
    the link policy on every connection setup. Using the default link policy
    is the preferred way since there is no need to dynamically change it for
    every connection.
    
    For backward compatibility reason and to support old userspace the
    HCISETLINKPOL ioctl has been switched over to using hci_request() to
    issue the HCI command for setting the default link policy instead of
    just storing it in the HCI device structure.
    
    However the hci_request() can only be issued when the device is
    brought up. If used on a device that is registered, but still down
    it will timeout and fail. This is problematic since the command is
    put on the TX queue and the Bluetooth core tries to submit it to
    hardware that is not ready yet. The timeout for these requests is
    10 seconds and this causes a significant regression when setting up
    a new device.
    
    The userspace can perfectly handle a failure of the HCISETLINKPOL
    ioctl and will re-submit it later, but the 10 seconds delay causes
    a problem. So in case hci_request() is called on a device that is
    still down, just fail it with ENETDOWN to indicate what happens.
    
    Signed-off-by: Marcel Holtmann <marcel@holtmann.org>

commit a551b98d5f6fce5897d497abd8bfb262efb33d2a
Merge: d1c6d2e... 50bed2e...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Thu Sep 11 11:50:15 2008 -0700

    Merge branch 'for-linus' of git://git.kernel.dk/linux-2.6-block
    
    * 'for-linus' of git://git.kernel.dk/linux-2.6-block:
      sg: disable interrupts inside sg_copy_buffer

commit d1c6d2e547148c5aa0c0a4ff6aac82f7c6da1d8b
Author: David Howells <dhowells@redhat.com>
Date:   Thu Sep 11 17:18:56 2008 +0100

    MN10300: Change the fault handler to check in_atomic() not in_interrupt()
    
    Change the MN10300 fault handler to make it check in_atomic() rather than
    in_interrupt() as commit 6edaf68a87d17570790fd55f0c451a29ec1d6703 did for other
    architectures:
    
    	Author: Peter Zijlstra <a.p.zijlstra@chello.nl>
    	Date:   Wed Dec 6 20:32:18 2006 -0800
    
    	[PATCH] mm: arch do_page_fault() vs in_atomic()
    
    	In light of the recent pagefault and filemap_copy_from_user work I've
    	gone through all the arch pagefault handlers to make sure the
    	inc_preempt_count() 'feature' works as expected.
    
    	Several sections of code (including the new filemap_copy_from_user)
    	rely on the fact that faults do not take locks under increased preempt
    	count.
    
    Signed-off-by: David Howells <dhowells@redhat.com>
    Acked-by: Peter Zijlstra <a.p.zijlstra@chello.nl>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 50bed2e2862a8f3a4f7d683d0d27292e71ef18b9
Author: FUJITA Tomonori <fujita.tomonori@lab.ntt.co.jp>
Date:   Thu Sep 11 18:35:39 2008 +0200

    sg: disable interrupts inside sg_copy_buffer
    
    The callers of sg_copy_buffer must disable interrupts before calling
    it (since it uses kmap_atomic). Some callers use it on
    interrupt-disabled code but some need to take the trouble to disable
    interrupts just for this. No wonder they forget about it and we hit a
    bug like:
    
    http://bugzilla.kernel.org/show_bug.cgi?id=11529
    
    James said that it might be better to disable interrupts inside the
    function rather than risk the callers getting it wrong.
    
    Signed-off-by: FUJITA Tomonori <fujita.tomonori@lab.ntt.co.jp>
    Signed-off-by: Jens Axboe <jens.axboe@oracle.com>

commit 6d242a263618ba7f0f9a41dd91b347d19e704bbe
Merge: a0a4a2c... 2dc75d3...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Thu Sep 11 08:42:55 2008 -0700

    Merge branch 'for-linus' of git://git.kernel.dk/linux-2.6-block
    
    * 'for-linus' of git://git.kernel.dk/linux-2.6-block:
      block: disable sysfs parts of the disk command filter

commit a0a4a2cb0d69446c084792a40884d911dfc3cf27
Merge: 29cd195... 534e38b...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Thu Sep 11 08:42:14 2008 -0700

    Merge branch 'kvm-updates/2.6.27' of git://git.kernel.org/pub/scm/linux/kernel/git/avi/kvm
    
    * 'kvm-updates/2.6.27' of git://git.kernel.org/pub/scm/linux/kernel/git/avi/kvm:
      KVM: VMX: Always return old for clear_flush_young() when using EPT
      KVM: SVM: fix guest global tlb flushes with NPT
      KVM: SVM: fix random segfaults with NPT enabled

commit 29cd195e078db0d90dd447a156039513ecdd8f16
Merge: c529b7e... 01b291b...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Thu Sep 11 08:41:17 2008 -0700

    Merge git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi-rc-fixes-2.6
    
    * git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi-rc-fixes-2.6:
      [SCSI] fix check of PQ and PDT bits for WLUNs
      [SCSI] make scsi_check_sense HARDWARE_ERROR return ADD_TO_MLQUEUE on retry
      [SCSI] scsi_dh: make check_sense return ADD_TO_MLQUEUE
      [SCSI] zfcp: Remove duplicated unlikely() macros.
      [SCSI] zfcp: channel cannot be detached due to refcount imbalance
      [SCSI] zfcp: Fix reference counter for remote ports
      [SCSI] zfcp: Simplify ccw notify handler
      [SCSI] zfcp: Correctly query end flag in gpn_ft response
      [SCSI] zfcp: Fix request queue locking
      [SCSI] sd: select CRC_T10DIF only when necessary

commit c529b7e2db948e240c48c54a83d0b6279275e57d
Merge: e2858ce... e7b1403...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Thu Sep 11 08:40:32 2008 -0700

    Merge branch 'release' of git://git.kernel.org/pub/scm/linux/kernel/git/aegl/linux-2.6
    
    * 'release' of git://git.kernel.org/pub/scm/linux/kernel/git/aegl/linux-2.6:
      [IA64] prevent ia64 from invoking irq handlers on offline CPUs
      [IA64] arch/ia64/sn/pci/tioca_provider.c: introduce missing kfree
      [IA64] fix up bte.h
      [IA64] fix compile failure with non modular builds

commit e2858ce3ed519500e3b9af1c16c25250ff16cd5c
Merge: 9a0e4c8... 5c89468...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Thu Sep 11 08:40:11 2008 -0700

    Merge branch 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-udf-2.6
    
    * 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jack/linux-udf-2.6:
      udf: add llseek method
      udf: Fix error paths in udf_new_inode()
      udf: Fix lock inversion between iprune_mutex and alloc_mutex (v2)

commit 69da6b87fcb270f758fe75141c32e041f8db510c
Author: Jouni Malinen <jouni.malinen@atheros.com>
Date:   Mon Aug 11 14:01:50 2008 +0300

    ath9k: Assign seq# when mac80211 requests this
    
    Use TX control flag IEEE80211_TX_CTL_ASSIGN_SEQ as a request to update
    the seq# for the frames. This will likely require some further cleanup
    to get seq# correctly for Beacons vs. other frames and also potentially
    for multiple BSSes. Anyway, this is better than ending up sending out
    most frames with seq# 0.
    
    (This is a backport of patch w/ same title already in net-next-2.6.
    It is verified to fix http://bugzilla.kernel.org/show_bug.cgi?id=11394
    and it should be acceptable for -rc due to the driver being new
    in 2.6.27.)
    
    Signed-off-by: Jouni Malinen <jouni.malinen@atheros.com>
    Signed-off-by: John W. Linville <linville@tuxdriver.com>

commit 2dc75d3c3b49c64fd26b4832a7efb75546cb3fc5
Author: Jens Axboe <jens.axboe@oracle.com>
Date:   Thu Sep 11 14:20:23 2008 +0200

    block: disable sysfs parts of the disk command filter
    
    We still have life time issues with the sysfs command filter kobject,
    so disable it for 2.6.27 release. We can revisit this and make it work
    properly for 2.6.28, for 2.6.27 release it's too risky.
    
    Signed-off-by: Jens Axboe <jens.axboe@oracle.com>

commit 7736c09c6cf9521f2413d78856a66f4a37046e84
Author: Russell King <rmk@dyn-67.arm.linux.org.uk>
Date:   Tue Sep 9 10:16:22 2008 +0100

    [ARM] OMAP: Fix MMC device data
    
    OMAPs MMC device data was passing the wrong structure via the platform
    device.  Moreover, a missing function means that both sx1_defconfig
    and omap_h2_1610_defconfig builds failed with
    
    	undefined reference to `omap_set_mmc_info'
    
    errors.  Fix this by updating the MMC support from the omapzoom tree.
    
    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>

commit 534e38b447df47f129a6d3ec3af6705c1e3f651e
Author: Sheng Yang <sheng.yang@intel.com>
Date:   Mon Sep 8 15:12:30 2008 +0800

    KVM: VMX: Always return old for clear_flush_young() when using EPT
    
    As well as discard fake accessed bit and dirty bit of EPT.
    
    Signed-off-by: Sheng Yang <sheng.yang@intel.com>
    Signed-off-by: Avi Kivity <avi@qumranet.com>

commit e5eab0cede4b1ffaca4ad857d840127622038e55
Author: Joerg Roedel <joerg.roedel@amd.com>
Date:   Tue Sep 9 19:11:51 2008 +0200

    KVM: SVM: fix guest global tlb flushes with NPT
    
    Accesses to CR4 are intercepted even with Nested Paging enabled. But the code
    does not check if the guest wants to do a global TLB flush. So this flush gets
    lost. This patch adds the check and the flush to svm_set_cr4.
    
    Signed-off-by: Joerg Roedel <joerg.roedel@amd.com>
    Signed-off-by: Avi Kivity <avi@qumranet.com>

commit 44874f84918e37b64bec6df1587e5fe2fdf6ab62
Author: Joerg Roedel <joerg.roedel@amd.com>
Date:   Wed Aug 27 14:18:43 2008 +0200

    KVM: SVM: fix random segfaults with NPT enabled
    
    This patch introduces a guest TLB flush on every NPF exit in KVM. This fixes
    random segfaults and #UD exceptions in the guest seen under some workloads
    (e.g. long running compile workloads or tbench). A kernbench run with and
    without that fix showed that it has a slowdown lower than 0.5%
    
    Cc: stable@kernel.org
    Signed-off-by: Joerg Roedel <joerg.roedel@amd.com>
    Signed-off-by: Alexander Graf <agraf@suse.de>
    Signed-off-by: Avi Kivity <avi@qumranet.com>

commit bdba4d6b77fcc76f206986d7cc55f1feb20301f8
Author: David S. Miller <davem@davemloft.net>
Date:   Wed Sep 10 23:38:51 2008 -0700

    sparc32: Fix function signature of of_bus_sbus_get_flags().
    
    This doesn't match the function pointer type it gets assigned
    to.  Luckily, this was harmless.
    
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 9a0e4c8038390342f48e574b157a1971e2f07348
Merge: 9e7222c... 46dfa04...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Wed Sep 10 14:16:53 2008 -0700

    Merge git://git.kernel.org/pub/scm/linux/kernel/git/bart/ide-2.6
    
    * git://git.kernel.org/pub/scm/linux/kernel/git/bart/ide-2.6:
      add deprecated ide-scsi to feature-removal-schedule.txt
      ide: Fix pointer arithmetic in hpt3xx driver code (3rd try)

commit 9e7222c83560186686319f2892f43fc557baed2d
Author: Geert Uytterhoeven <geert@linux-m68k.org>
Date:   Wed Sep 10 22:15:19 2008 +0200

    m68k: Update defconfigs for 2.6.27-rc6
    
    Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 5368f69c8b155d6e82dfc622d817c882689e9cd9
Author: Geert Uytterhoeven <geert@linux-m68k.org>
Date:   Wed Sep 10 22:15:18 2008 +0200

    VIDEO_SH_MOBILE_CEU should depend on HAS_DMA
    
    commit 0d3244d6439c8c31d2a29efd587c7aca9042c8aa ("V4L/DVB (8342):
    sh_mobile_ceu_camera: Add SuperH Mobile CEU driver V3") introduced
    VIDEO_SH_MOBILE_CEU, which selects VIDEOBUF_DMA_CONTIG. This circumvents the
    dependency on HAS_DMA of VIDEOBUF_DMA_CONTIG.
    
    Add a dependency on HAS_DMA to VIDEO_SH_MOBILE_CEU to fix this.
    
    Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
    Acked-by: Paul Mundt <lethal@linux-sh.org>
    Acked-by: Magnus Damm <damm@igel.co.jp>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit ebfb2c63405f2410897674f14e41c031c9302909
Author: David S. Miller <davem@davemloft.net>
Date:   Wed Sep 10 14:08:27 2008 -0700

    sparc64: Fix interrupt register calculations on Psycho and Sabre.
    
    Use the IMAP offset calculation for OBIO devices as documented in the
    programmer's manual.  Which is "0x10000 + ((ino & 0x1f) << 3)"
    
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 36223a399f639b13b7a454349565934e6d3e2db0
Author: Daniel J Blueman <daniel.blueman@gmail.com>
Date:   Wed Sep 10 21:07:55 2008 +0100

    swiotlb: fix back-off path when memory allocation fails
    
    This fixes a SWIOTLB oops
    
    With SWIOTLB being enabled and straight-forward page allocation
    failure [1], the swiotlb_alloc_coherent fall-back path hits an
    issue [2], resulting in my webcam failing to work.
    
    At the time of oops, RDI is clearly a pointer to a structure which
    has arrived as NULL, leading to the typo in swiotlb_map_single's
    callsite arguments.
    
    Correctly passing the device structure [3] addresses the issue and
    gets my webcam working again (the allocation failure still occuring).
    
     --- [1]
    
    skype: page allocation failure. order:3, mode:0x1
    Pid: 5895, comm: skype Not tainted 2.6.27-rc6-235c-debug #1
    
    Call Trace:
     [<ffffffff802b7cf0>] __alloc_pages_internal+0x4a0/0x5d0
     [<ffffffff802d5ddd>] alloc_pages_current+0xad/0x110
     [<ffffffff802b4ccd>] __get_free_pages+0x1d/0x60
     [<ffffffff8046cd39>] swiotlb_alloc_coherent+0x49/0x180
     [<ffffffff80212731>] dma_alloc_coherent+0x281/0x310
     [<ffffffff805621c0>] hcd_buffer_alloc+0x50/0x90
     [<ffffffff805547fd>] usb_buffer_alloc+0x2d/0x40
     [<ffffffffa0056763>] uvc_alloc_urb_buffers+0x53/0xf0 [uvcvideo]
     [<ffffffffa0056958>] uvc_init_video+0x158/0x3e0 [uvcvideo]
     [<ffffffffa0056c17>] uvc_video_enable+0x37/0x80 [uvcvideo]
     [<ffffffffa0055853>] uvc_v4l2_do_ioctl+0x723/0x1260 [uvcvideo]
     [<ffffffff8026dd61>] ? trace_hardirqs_off_caller+0x21/0xc0
     [<ffffffff8026dd61>] ? trace_hardirqs_off_caller+0x21/0xc0
     [<ffffffffa0032c9f>] video_usercopy+0x19f/0x390 [videodev]
     [<ffffffffa0055130>] ? uvc_v4l2_do_ioctl+0x0/0x1260 [uvcvideo]
     [<ffffffff8026d0ce>] ? put_lock_stats+0xe/0x30
     [<ffffffffa0054dad>] uvc_v4l2_ioctl+0x4d/0x80 [uvcvideo]
     [<ffffffffa0045083>] native_ioctl+0x83/0x90 [compat_ioctl32]
     [<ffffffffa004534e>] v4l_compat_ioctl32+0x2be/0x1da4 [compat_ioctl32]
     [<ffffffff806aad21>] ? do_page_fault+0x3d1/0xae0
     [<ffffffff80270ccd>] ? trace_hardirqs_on+0xd/0x10
     [<ffffffff80270c59>] ? trace_hardirqs_on_caller+0x149/0x1b0
     [<ffffffff80270ccd>] ? trace_hardirqs_on+0xd/0x10
     [<ffffffff80329afa>] compat_sys_ioctl+0x8a/0x3c0
     [<ffffffff806a700d>] ? trace_hardirqs_off_thunk+0x3a/0x3c
     [<ffffffff8022f816>] sysenter_dispatch+0x7/0x2c
     [<ffffffff806a6fce>] ? trace_hardirqs_on_thunk+0x3a/0x3f
    
    Mem-Info:
    Node 0 DMA per-cpu:
    CPU    0: hi:    0, btch:   1 usd:   0
    CPU    1: hi:    0, btch:   1 usd:   0
    Node 0 DMA32 per-cpu:
    CPU    0: hi:  186, btch:  31 usd:   3
    CPU    1: hi:  186, btch:  31 usd:   0
    Node 0 Normal per-cpu:
    CPU    0: hi:  186, btch:  31 usd:  23
    CPU    1: hi:  186, btch:  31 usd: 179
    Active:78545 inactive:48683 dirty:31 writeback:0 unstable:2
     free:830202 slab:17516 mapped:17473 pagetables:3496 bounce:0
    Node 0 DMA free:36kB min:28kB low:32kB high:40kB active:0kB
    inactive:0kB present:15156kB pages_scanned:0 all_unreclaimable? no
    lowmem_reserve[]: 0 3207 3956 3956
    Node 0 DMA32 free:3197192kB min:6512kB low:8140kB high:9768kB
    active:0kB inactive:0kB present:3284896kB pages_scanned:0
    all_unreclaimable? no
    lowmem_reserve[]: 0 0 748 748
    Node 0 Normal free:123580kB min:1516kB low:1892kB high:2272kB
    active:314180kB inactive:194732kB present:766464kB pages_scanned:0
    all_unreclaimable? no
    lowmem_reserve[]: 0 0 0 0
    Node 0 DMA: 1*4kB 0*8kB 0*16kB 1*32kB 0*64kB 0*128kB 0*256kB 0*512kB
    0*1024kB 0*2048kB 0*4096kB = 36kB
    Node 0 DMA32: 4*4kB 3*8kB 2*16kB 3*32kB 4*64kB 5*128kB 3*256kB 5*512kB
    4*1024kB 5*2048kB 776*4096kB = 3197224kB
    Node 0 Normal: 14*4kB 14*8kB 8*16kB 6*32kB 1*64kB 3*128kB 3*256kB
    2*512kB 4*1024kB 1*2048kB 28*4096kB = 123560kB
    64847 total pagecache pages
    0 pages in swap cache
    Swap cache stats: add 0, delete 0, find 0/0
    Free swap  = 502752kB
    Total swap = 502752kB
    1048576 pages RAM
    52120 pages reserved
    71967 pages shared
    143004 pages non-shared
    
     --- [2]
    
    BUG: unable to handle kernel NULL pointer dereference at 00000000000002c8
    IP: [<ffffffff8046c84c>] map_single+0x1c/0x280
    PGD 10e54e067 PUD 10e595067 PMD 0
    Oops: 0000 [1] PREEMPT SMP DEBUG_PAGEALLOC
    CPU 0
    Modules linked in: kvm_intel kvm microcode uvcvideo compat_ioctl32
    videodev v4l1_compat shpchp pci_hotplug
    Pid: 5895, comm: skype Not tainted 2.6.27-rc6-235c-debug #1
    RIP: 0010:[<ffffffff8046c84c>]  [<ffffffff8046c84c>] map_single+0x1c/0x280
    RSP: 0018:ffff88010e78d988  EFLAGS: 00210296
    RAX: 0000780000000000 RBX: 0000000000000000 RCX: 0000000000000002
    RDX: 0000000000005000 RSI: 0000000000000000 RDI: 0000000000000000
    RBP: ffff88010e78d9e8 R08: 0000000000000000 R09: 0000000000000001
    R10: ffff88010e78d698 R11: 0000000000000001 R12: 0000000000000002
    R13: 0000000000000000 R14: 0000000000005000 R15: ffff88012f1c9968
    FS:  0000000000000000(0000) GS:ffffffff80a6cdc0(0063) knlGS:00000000f6355b90
    CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
    CR2: 00000000000002c8 CR3: 000000010e57d000 CR4: 00000000000026e0
    DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
    DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
    Process skype (pid: 5895, threadinfo ffff88010e78c000, task ffff88012b9cc460)
    Stack:  0000000200000000 0000000000005000 0000000000000000 0000000000000000
     00000000000017b8 0000000000000000 ffff88010e78d9c8 0000000000000000
     0000000000000002 0000000000000000 0000000000005000 ffff88012f1c9968
    Call Trace:
     [<ffffffff8046cbb0>] swiotlb_map_single_attrs+0x60/0xf0
     [<ffffffff8046cc4c>] swiotlb_map_single+0xc/0x10
     [<ffffffff8046cdee>] swiotlb_alloc_coherent+0xfe/0x180
     [<ffffffff80212731>] dma_alloc_coherent+0x281/0x310
     [<ffffffff805621c0>] hcd_buffer_alloc+0x50/0x90
     [<ffffffff805547fd>] usb_buffer_alloc+0x2d/0x40
     [<ffffffffa0056763>] uvc_alloc_urb_buffers+0x53/0xf0 [uvcvideo]
     [<ffffffffa0056958>] uvc_init_video+0x158/0x3e0 [uvcvideo]
     [<ffffffffa0056c17>] uvc_video_enable+0x37/0x80 [uvcvideo]
     [<ffffffffa0055853>] uvc_v4l2_do_ioctl+0x723/0x1260 [uvcvideo]
     [<ffffffff8026dd61>] ? trace_hardirqs_off_caller+0x21/0xc0
     [<ffffffff8026dd61>] ? trace_hardirqs_off_caller+0x21/0xc0
     [<ffffffffa0032c9f>] video_usercopy+0x19f/0x390 [videodev]
     [<ffffffffa0055130>] ? uvc_v4l2_do_ioctl+0x0/0x1260 [uvcvideo]
     [<ffffffff8026d0ce>] ? put_lock_stats+0xe/0x30
     [<ffffffffa0054dad>] uvc_v4l2_ioctl+0x4d/0x80 [uvcvideo]
     [<ffffffffa0045083>] native_ioctl+0x83/0x90 [compat_ioctl32]
     [<ffffffffa004534e>] v4l_compat_ioctl32+0x2be/0x1da4 [compat_ioctl32]
     [<ffffffff806aad21>] ? do_page_fault+0x3d1/0xae0
     [<ffffffff80270ccd>] ? trace_hardirqs_on+0xd/0x10
     [<ffffffff80270c59>] ? trace_hardirqs_on_caller+0x149/0x1b0
     [<ffffffff80270ccd>] ? trace_hardirqs_on+0xd/0x10
     [<ffffffff80329afa>] compat_sys_ioctl+0x8a/0x3c0
     [<ffffffff806a700d>] ? trace_hardirqs_off_thunk+0x3a/0x3c
     [<ffffffff8022f816>] sysenter_dispatch+0x7/0x2c
     [<ffffffff806a6fce>] ? trace_hardirqs_on_thunk+0x3a/0x3f
    
    Code: 45 31 c0 48 89 e5 e8 a4 ff ff ff c9 c3 66 90 55 48 89 e5 41 57
    41 56 41 55 41 54 53 48 83 ec 38 48 89 75 b0 48 89 55 a8 89 4d a4 <48>
    8b 87 c8 02 00 00 48 85 c0 0f 84 1c 02 00 00 48 8b 58 08 48
    RIP  [<ffffffff8046c84c>] map_single+0x1c/0x280
     RSP <ffff88010e78d988>
    CR2: 00000000000002c8
    ---[ end trace 5d15baeeb7025a0e ]---
    
     --- [3]
    
    ffffffff8046c830 <map_single>:
    map_single():
    /store/kernel/linux/lib/swiotlb.c:291
    ffffffff8046c830:       55                      push   %rbp
    ffffffff8046c831:       48 89 e5                mov    %rsp,%rbp
    ffffffff8046c834:       41 57                   push   %r15
    ffffffff8046c836:       41 56                   push   %r14
    ffffffff8046c838:       41 55                   push   %r13
    ffffffff8046c83a:       41 54                   push   %r12
    ffffffff8046c83c:       53                      push   %rbx
    ffffffff8046c83d:       48 83 ec 38             sub    $0x38,%rsp
    ffffffff8046c841:       48 89 75 b0             mov    %rsi,-0x50(%rbp)
    ffffffff8046c845:       48 89 55 a8             mov    %rdx,-0x58(%rbp)
    ffffffff8046c849:       89 4d a4                mov    %ecx,-0x5c(%rbp)
    dma_get_seg_boundary():
    /store/kernel/linux/include/linux/dma-mapping.h:80
    ffffffff8046c84c:       48 8b 87 c8 02 00 00    mov    0x2c8(%rdi),%rax <----
    
     --- [4]
    
    Signed-off-by: Daniel J Blueman <daniel.blueman@gmail.com>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 46dfa040f6c26f416a0979a7cd5a2d81f08121d5
Author: FUJITA Tomonori <fujita.tomonori@lab.ntt.co.jp>
Date:   Wed Sep 10 22:22:34 2008 +0200

    add deprecated ide-scsi to feature-removal-schedule.txt
    
    Signed-off-by: FUJITA Tomonori <fujita.tomonori@lab.ntt.co.jp>
    Signed-off-by: Bartlomiej Zolnierkiewicz <bzolnier@gmail.com>

commit 62ff2ecf7a4e69f7271b7f7a57aaee76ffe610f2
Author: Masoud Sharbiani <masouds@google.com>
Date:   Wed Sep 10 22:22:34 2008 +0200

    ide: Fix pointer arithmetic in hpt3xx driver code (3rd try)
    
    git commit 74811f355f4f69a187fa74892dcf2a684b84ce99 causes crash at
    module load (or boot) time on my machine with a hpt374 controller.
    The reason for this is that for initializing second controller which sets
    (hwif->dev == host->dev[1]) to true (1), adds 1 to a void ptr, which
    advances it by one byte instead of advancing it by sizeof(hpt_info) bytes.
    Because of this, all initialization functions get corrupted data in info
    variable which causes a crash at boot time.
    
    This patch fixes that and makes my machine boot again.
    
    The card itself is a HPT374 raid conroller: Here is the lspci -v output:
    03:06.0 RAID bus controller: HighPoint Technologies, Inc. HPT374 (rev
    07)
            Subsystem: HighPoint Technologies, Inc. Unknown device 0001
            Flags: bus master, 66MHz, medium devsel, latency 120, IRQ 28
            I/O ports at 8000 [size=8]
            I/O ports at 7800 [size=4]
            I/O ports at 7400 [size=8]
            I/O ports at 7000 [size=4]
            I/O ports at 6800 [size=256]
            Expansion ROM at fe8e0000 [disabled] [size=128K]
            Capabilities: [60] Power Management version 2
    
    03:06.1 RAID bus controller: HighPoint Technologies, Inc. HPT374 (rev
    07)
            Subsystem: HighPoint Technologies, Inc. Unknown device 0001
            Flags: bus master, 66MHz, medium devsel, latency 120, IRQ 28
            I/O ports at 9800 [size=8]
            I/O ports at 9400 [size=4]
            I/O ports at 9000 [size=8]
            I/O ports at 8800 [size=4]
            I/O ports at 8400 [size=256]
            Capabilities: [60] Power Management version 2
    
    Signed-off-by: Masoud Sharbiani <masouds@google.com>
    Cc: Sergei Shtylyov <sshtylyov@ru.mvista.com>
    Cc: Andrew Morton <akpm@linux-foundation.org>
    [bart: use dev_get_drvdata() per Sergei's suggestion]
    Signed-off-by: Bartlomiej Zolnierkiewicz <bzolnier@gmail.com>

commit e7b140365b86aaf94374214c6f4e6decbee2eb0a
Author: Paul E. McKenney <paulmck@linux.vnet.ibm.com>
Date:   Sun Aug 31 11:06:30 2008 -0700

    [IA64] prevent ia64 from invoking irq handlers on offline CPUs
    
    Make ia64 refrain from clearing a given to-be-offlined CPU's bit in the
    cpu_online_mask until it has processed pending irqs.  This change
    prevents other CPUs from being blindsided by an apparently offline CPU
    nevertheless changing globally visible state.  Also remove the existing
    redundant cpu_clear(cpu, cpu_online_map).
    
    Signed-off-by: Paul E. McKenney <paulmck@linux.vnet.ibm.com>
    Signed-off-by: Tony Luck <tony.luck@intel.com>

commit a5827f40afafc864f57a1c44915f0bfaf3d94f53
Author: Adrian Bunk <bunk@kernel.org>
Date:   Thu Aug 28 01:05:26 2008 +0300

    PCI: fix pciehp_free_irq()
    
    This patch fixes an obvious bug (loop was never entered) caused by
    commit 820943b6fc4781621dee52ba026106758a727dd3
    (pciehp: cleanup pcie_poll_cmd).
    
    Reported-by: Adrian Bunk <bunk@kernel.org>
    Signed-off-by: Adrian Bunk <bunk@kernel.org>
    Acked-by: Kenji Kaneshige <kaneshige.kenji@jp.fujitsu.com>
    Signed-off-by: Jesse Barnes <jbarnes@virtuousgeek.org>

commit 6bf6a1a49377c32a02939ec835553703994f3e41
Author: Julia Lawall <julia@diku.dk>
Date:   Wed Sep 10 13:57:19 2008 +0200

    [IA64] arch/ia64/sn/pci/tioca_provider.c: introduce missing kfree
    
    Error handling code following a kmalloc should free the allocated data.
    
    Signed-off-by: Julia Lawall <julia@diku.dk>
    Signed-off-by: Tony Luck <tony.luck@intel.com>

commit 47633cf0d60bde5581d039ac1283ef4377a6e782
Author: Robin Holt <holt@sgi.com>
Date:   Tue Sep 9 10:34:44 2008 -0500

    [IA64] fix up bte.h
    
    bte.h expects a #define of L1_CACHE_MASK which is currently only
    in bte.c.  This small patch gets bte.h to include cleanly and makes
    BTE_UNALIGNED_COPY not report errors.
    
    Signed-off-by: Robin Holt <holt@sgi.com>
    Signed-off-by: Tony Luck <tony.luck@intel.com>

commit 4611a771fc8e5ad77d27f25268846abb425101a0
Author: James Bottomley <James.Bottomley@HansenPartnership.com>
Date:   Tue Sep 9 17:56:47 2008 -0500

    [IA64] fix compile failure with non modular builds
    
    Broke the non modular builds by moving an essential function into
    modules.c.  Fix this by moving it out again and into asm/sections.h as
    an inline.  To do this, the definitions of struct fdesc and struct
    got_val have been lifted out of modules.c and put in asm/elf.h where
    they belong.
    
    Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>
    Signed-off-by: Tony Luck <tony.luck@intel.com>

commit 0e116227a01580acf47437adba3afadf21b6bd5f
Author: Tao Ma <tao.ma@oracle.com>
Date:   Wed Sep 3 01:57:14 2008 +0800

    ocfs2: Fix a bug in direct IO read.
    
    ocfs2 will become read-only if we try to read the bytes which pass
    the end of i_size. This can be easily reproduced by following steps:
    1. mkfs a ocfs2 volume with bs=4k cs=4k and nosparse.
    2. create a small file(say less than 100 bytes) and we will create the file
       which is allocated 1 cluster.
    3. read 8196 bytes from the kernel using O_DIRECT which exceeds the limit.
    4. The ocfs2 volume becomes read-only and dmesg shows:
    OCFS2: ERROR (device sda13): ocfs2_direct_IO_get_blocks:
    Inode 66010 has a hole at block 1
    File system is now read-only due to the potential of on-disk corruption.
    Please run fsck.ocfs2 once the file system is unmounted.
    
    So suppress the ERROR message.
    
    Signed-off-by: Tao Ma <tao.ma@oracle.com>
    Signed-off-by: Mark Fasheh <mfasheh@suse.com>

commit 48902025af4da44dbbc0231061e542d6d40e712e
Author: Alex Chiang <achiang@hp.com>
Date:   Fri Sep 5 14:05:03 2008 -0700

    PCI Hotplug: fakephp: fix deadlock... again
    
    Commit fe99740cac117f208707488c03f3789cf4904957 (construct one
    fakephp slot per PCI slot) introduced a regression, causing a
    deadlock when removing a PCI device.
    
    We also never actually removed the device from the PCI core.
    
    So we:
    
    	- remove the device from the PCI core
    	- do not directly call remove_slot() to prevent deadlock
    
    Yu Zhao reported and diagnosed this defect.
    
    Signed-off-by: Alex Chiang <achiang@hp.com>
    Acked-by: Yu Zhao <yu.zhao@intel.com>
    Cc: Matthew Wilcox <matthew@wil.cx>
    Cc: Kristen Carlson Accardi <kristen.c.accardi@intel.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Jesse Barnes <jbarnes@virtuousgeek.org>

commit 53bc88701be91e7f631ad31418b32392aa952e9b
Author: Johann Felix Soden <johfel@users.sourceforge.net>
Date:   Fri Aug 22 20:25:10 2008 +0200

    PCI: Fix printk warnings in setup-bus.c
    
    Again, the cleaned up code introduced some resource warnings:
    drivers/pci/setup-bus.c: In function 'pci_bus_dump_res':
    drivers/pci/setup-bus.c:542: warning: format '%llx' expects type 'long long unsigned int', but argument 5 has type 'resource_size_t'
    drivers/pci/setup-bus.c:542: warning: format '%llx' expects type 'long long unsigned int', but argument 6 has type 'resource_size_t'
    
    Fix those up too.
    
    Signed-off-by: Johann Felix Soden <johfel@users.sourceforge.net>
    Signed-off-by: Jesse Barnes <jbarnes@virtuousgeek.org>

commit 4ca8a7726fb0e8094fdb56f2ae2d69fcf9254eae
Author: Johann Felix Soden <johfel@users.sourceforge.net>
Date:   Fri Aug 22 20:46:59 2008 +0200

    PCI: Fix printk warnings in probe.c
    
    The cleaned up resource code in probe.c introduced some warnings:
    drivers/pci/probe.c: In function 'pci_read_bridge_bases':
    drivers/pci/probe.c:386: warning: format '%llx' expects type 'long long unsigned int', but argument 3 has type 'resource_size_t'
    drivers/pci/probe.c:386: warning: format '%llx' expects type 'long long unsigned int', but argument 4 has type 'resource_size_t'
    drivers/pci/probe.c:398: warning: format '%llx' expects type 'long long unsigned int', but argument 3 has type 'resource_size_t'
    drivers/pci/probe.c:398: warning: format '%llx' expects type 'long long unsigned int', but argument 4 has type 'resource_size_t'
    drivers/pci/probe.c:434: warning: format '%llx' expects type 'long long unsigned int', but argument 4 has type 'resource_size_t'
    drivers/pci/probe.c:434: warning: format '%llx' expects type 'long long unsigned int', but argument 5 has type 'resource_size_t'
    
    So fix them up.
    
    Signed-off-by: Johann Felix Soden <johfel@users.sourceforge.net>
    Signed-off-by: Jesse Barnes <jbarnes@virtuousgeek.org>

commit cbda1ba898647aeb4ee770b803c922f595e97731
Author: David Woodhouse <dwmw2@infradead.org>
Date:   Sun Sep 7 16:35:26 2008 +0100

    PCI/iommu: blacklist DMAR on Intel G31/G33 chipsets
    
    Some BIOSes (the Intel DG33BU, for example) wrongly claim to have DMAR
    when they don't. Avoid the resulting crashes when it doesn't work as
    expected.
    
    Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
    Acked-by: Ingo Molnar <mingo@elte.hu>
    Signed-off-by: Jesse Barnes <jbarnes@virtuousgeek.org>

commit 5c89468c12899b84886cb47eec93f0c88e0f896a
Author: Christoph Hellwig <hch@lst.de>
Date:   Mon Sep 8 19:44:17 2008 +0200

    udf: add llseek method
    
    UDF currently doesn't set a llseek method for regular files, which
    means it will fall back to default_llseek.  This means no one can seek
    beyond 2 Gigabytes on udf, and that there's not protection vs
    the i_size updates from writers.
    
    Signed-off-by: Christoph Hellwig <hch@lst.de>
    Signed-off-by: Jan Kara <jack@suse.cz>

commit 9fbe604456c5ae21768f1c98379e1b81c72adcd3
Author: Marc Kleine-Budde <mkl@pengutronix.de>
Date:   Mon Jul 28 21:26:01 2008 +0200

    imx serial: fix rts handling for non imx1 based hardware
    
    The interrupt handler for muxed interrupts (imx2/imx3) was calling
    the rts handling subroutine if the RTSS bit was set.
    (Which indicates the status of the RTS line), leading to an
    interrupt flood on RTS bit low.
    
    This patch fixes the problem by looking at the RTSD bit instead,
    indicating a change in the RTS line.
    
    Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
    Signed-off-by: Sascha Hauer <s.hauer@pengutronix.de>

commit 4411805b13d4b8c31870b276c2730d585b062db7
Author: Marc Kleine-Budde <mkl@pengutronix.de>
Date:   Mon Jul 28 12:10:34 2008 +0200

    imx serial: set RXD mux bit on i.MX27 and i.MX31
    
    RX in i.MX27 and i.MX31 UART lines does not work unless the
    "RXD  Muxed Input Select" bit is set on i.MX27 and i.MX31 processors.
    
    This patch sets the missing RXD mux bit in the UCR3 register.
    
    Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de>
    Signed-off-by: Sascha Hauer <s.hauer@pengutronix.de>

commit c45e7d7be891fe94e13d0e7aeee3e0e4ee7118f4
Author: Darius Augulis <augulis.darius@gmail.com>
Date:   Tue Sep 2 10:19:29 2008 +0200

    i.MX serial: fix init failure
    
    Adds extra "out" label to probe function after calling .init form platform data.
    Because .init can return error number caused by gpio request fail.
    
    Signed-off-by: Darius Augulis <augulis.darius@gmail.com>
    Signed-off-by: Sascha Hauer <s.hauer@pengutronix.de>

commit a9b0623357d2faa49a0f862154ba36c42c4bad2b
Author: Sascha Hauer <s.hauer@pengutronix.de>
Date:   Tue Sep 2 10:19:29 2008 +0200

    pcm037: add rts/cts support for serial port
    
    We have rts/cts pins on the first serial port on the pcm037. Enable it.
    
    Signed-off-by: Sascha Hauer <s.hauer@pengutronix.de>

commit 01b291bd66564b4bd826326af6bd0b6d17e99439
Author: James Bottomley <James.Bottomley@HansenPartnership.com>
Date:   Thu Aug 21 15:14:14 2008 -0500

    [SCSI] fix check of PQ and PDT bits for WLUNs
    
    For IBM z series certain LUNs can no longer be accessed.
    
    This is because kernel version 2.6.19 a check was introduced not to
    create a generic SCSI device for devices that return PQ=1 and
    PDT=0x1f. For WLUNs (see SAM-3, p. 41ff) generic SCSI devices should
    be created unconditionally without looking at the PQ bit, so add a
    check for WLUNs in with this test.
    
    Acked-by: Martin Petermann <martin@linux.vnet.ibm.com>
    Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>

commit bb0003c1e189d5766b6b39299b08c690c985c4dc
Author: Mike Anderson <andmike@linux.vnet.ibm.com>
Date:   Tue Aug 12 12:11:58 2008 -0700

    [SCSI] make scsi_check_sense HARDWARE_ERROR return ADD_TO_MLQUEUE on retry
    
    Change scsi_check_sense HARDWARE_ERROR check to return ADD_TO_MLQUEUE
    if device->retry_hwerror is set to allow retries to occur without
    restriction of blk_noretry_request check.
    
    Signed-off-by: Mike Anderson <andmike@linux.vnet.ibm.com>
    Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>

commit c7dbb627a2505f42b2e6b3581f3716d73453dd0c
Author: Mike Anderson <andmike@linux.vnet.ibm.com>
Date:   Tue Aug 12 12:11:57 2008 -0700

    [SCSI] scsi_dh: make check_sense return ADD_TO_MLQUEUE
    
    Change scsi_dh check_sense functions to return ADD_TO_MLQUEUE
    to allow retries to occur without restriction of blk_noretry_request
    check.
    
    Signed-off-by: Mike Anderson <andmike@linux.vnet.ibm.com>
    Acked-by: Chandra Seetharaman <sekharan@us.ibm.com>
    Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>

commit 025270f0eaa2def673747ed6f77cca41f694f354
Author: Hirofumi Nakagawa <hnakagawa@miraclelinux.com>
Date:   Thu Aug 21 13:43:37 2008 +0200

    [SCSI] zfcp: Remove duplicated unlikely() macros.
    
    Some drivers have duplicated unlikely() macros. IS_ERR() already
    has unlikely() in itself. This patch cleans up such pointless
    codes although there is no real effect on the kernel's behaviour.
    
    Signed-off-by: Hirofumi Nakagawa <hnakagawa@miraclelinux.com>
    Signed-off-by: Christof Schmitt <christof.schmitt@de.ibm.com>
    Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>

commit 6139308dca9437975125290698cb9306240f525c
Author: Swen Schillig <swen@vnet.ibm.com>
Date:   Thu Aug 21 13:43:36 2008 +0200

    [SCSI] zfcp: channel cannot be detached due to refcount imbalance
    
    Due to an imbalance of the nameserver refcounting, channel devices
    couldn't be take offline anymore after the channel was activated.
    
    Signed-off-by: Swen Schillig <swen@vnet.ibm.com>
    Signed-off-by: Christof Schmitt <christof.schmitt@de.ibm.com>
    Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>

commit 9528539cc2d506aa232b0d93881ac4d19738752f
Author: Swen Schillig <swen@vnet.ibm.com>
Date:   Thu Aug 21 13:43:35 2008 +0200

    [SCSI] zfcp: Fix reference counter for remote ports
    
    Fix the remote port reference counter handling during ELS ADISC
    commands and find the remote port by WWPN not by D_IDs that could
    change.
    
    Signed-off-by: Swen Schillig <swen@vnet.ibm.com>
    Signed-off-by: Christof Schmitt <christof.schmitt@de.ibm.com>
    Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>

commit f48bf7fb00f74d93105ba69522a3f6c9435d6af3
Author: Christof Schmitt <christof.schmitt@de.ibm.com>
Date:   Thu Aug 21 13:43:34 2008 +0200

    [SCSI] zfcp: Simplify ccw notify handler
    
    The notify handler does not change the list of adapters, it only
    triggers erp actions to open or shutdown the adapter. We don't
    need to hold the config semaphore and wait for the erp to complete.
    
    This is a prerequisite for a fix in the s390 common i/o code.
    
    Signed-off-by: Christof Schmitt <christof.schmitt@de.ibm.com>
    Signed-off-by: Martin Petermann <martin@linux.vnet.ibm.com>
    Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>

commit 47f7bba52b01dd881fbd17b4b50c89ecf186eee2
Author: Christof Schmitt <christof.schmitt@de.ibm.com>
Date:   Thu Aug 21 13:43:33 2008 +0200

    [SCSI] zfcp: Correctly query end flag in gpn_ft response
    
    When the last port entry in the gpn_ft response is already a known
    port, the eval function would skip the end flag and try to attach
    ports with wwpn 0. Fix this by checking the flag first.
    
    Signed-off-by: Christof Schmitt <christof.schmitt@de.ibm.com>
    Signed-off-by: Martin Petermann <martin@linux.vnet.ibm.com>
    Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>

commit d4538817287e56abc938900886301a5bdfafbfcd
Author: Christof Schmitt <christof.schmitt@de.ibm.com>
Date:   Thu Aug 21 13:43:32 2008 +0200

    [SCSI] zfcp: Fix request queue locking
    
    The request queue lock can be acquired from softirq context when the
    SCSI midlayer issues commands. Disable softirqs for this lock when
    commands are issued from zfcp.
    
    Signed-off-by: Christof Schmitt <christof.schmitt@de.ibm.com>
    Signed-off-by: Martin Petermann <martin@linux.vnet.ibm.com>
    Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>

commit bfad9ceac5d11318c99ae8a0d1e926a380a56edd
Author: Stefan Richter <stefanr@s5r6.in-berlin.de>
Date:   Sat Aug 2 19:49:40 2008 +0200

    [SCSI] sd: select CRC_T10DIF only when necessary
    
    Signed-off-by: Stefan Richter <stefanr@s5r6.in-berlin.de>
    Acked-by: "Martin K. Petersen" <martin.petersen@oracle.com>
    Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>

commit 97e1cfb08616987878f91a46cefdd7fc5fa3dba1
Author: Jan Kara <jack@suse.cz>
Date:   Mon Aug 18 13:44:48 2008 +0200

    udf: Fix error paths in udf_new_inode()
    
    I case we failed to allocate memory for inode when creating it, we did not
    properly free block already allocated for this inode. Move memory allocation
    before the block allocation which fixes this issue (thanks for the idea go to
    Ingo Oeser <ioe-lkml@rameria.de>). Also remove a few superfluous
    initializations already done in udf_alloc_inode().
    
    Reviewed-by: Ingo Oeser <ioe-lkml@rameria.de>
    Signed-off-by: Jan Kara <jack@suse.cz>

commit db0badc58e948b810c7a75cfcc48845e2949ee37
Author: Jan Kara <jack@suse.cz>
Date:   Mon Aug 18 13:40:18 2008 +0200

    udf: Fix lock inversion between iprune_mutex and alloc_mutex (v2)
    
    A memory allocation inside alloc_mutex must not recurse back into the
    filesystem itself because that leads to lock inversion between iprune_mutex and
    alloc_mutex (and thus to deadlocks - see traces below). alloc_mutex is actually
    needed only to update allocation statistics in the superblock so we can drop it
    before we start allocating memory for the inode.
    
    tar           D ffff81015b9c8c90     0  6614   6612
     ffff8100d5a21a20 0000000000000086 0000000000000000 00000000ffff0000
     ffff81015b9c8c90 ffff81015b8f0cd0 ffff81015b9c8ee0 0000000000000000
     0000000000000003 0000000000000000 0000000000000000 0000000000000000
    Call Trace:
     [<ffffffff803c1d8a>] __mutex_lock_slowpath+0x64/0x9b
     [<ffffffff803c1bef>] mutex_lock+0xa/0xb
     [<ffffffff8027f8c2>] shrink_icache_memory+0x38/0x200
     [<ffffffff80257742>] shrink_slab+0xe3/0x15b
     [<ffffffff802579db>] try_to_free_pages+0x221/0x30d
     [<ffffffff8025657e>] isolate_pages_global+0x0/0x31
     [<ffffffff8025324b>] __alloc_pages_internal+0x252/0x3ab
     [<ffffffff8026b08b>] cache_alloc_refill+0x22e/0x47b
     [<ffffffff8026ae37>] kmem_cache_alloc+0x3b/0x61
     [<ffffffff8026b15b>] cache_alloc_refill+0x2fe/0x47b
     [<ffffffff8026b34e>] __kmalloc+0x76/0x9c
     [<ffffffffa00751f2>] :udf:udf_new_inode+0x202/0x2e2
     [<ffffffffa007ae5e>] :udf:udf_create+0x2f/0x16d
     [<ffffffffa0078f27>] :udf:udf_lookup+0xa6/0xad
    ...
    kswapd0       D ffff81015b9d9270     0   125      2
     ffff81015b903c28 0000000000000046 ffffffff8028cbb0 00000000fffffffb
     ffff81015b9d9270 ffff81015b8f0cd0 ffff81015b9d94c0 000000000271b490
     ffffe2000271b458 ffffe2000271b420 ffffe20002728dc8 ffffe20002728d90
    Call Trace:
     [<ffffffff8028cbb0>] __set_page_dirty+0xeb/0xf5
     [<ffffffff8025403a>] get_dirty_limits+0x1d/0x22f
     [<ffffffff803c1d8a>] __mutex_lock_slowpath+0x64/0x9b
     [<ffffffff803c1bef>] mutex_lock+0xa/0xb
     [<ffffffffa0073f58>] :udf:udf_bitmap_free_blocks+0x47/0x1eb
     [<ffffffffa007df31>] :udf:udf_discard_prealloc+0xc6/0x172
     [<ffffffffa007875a>] :udf:udf_clear_inode+0x1e/0x48
     [<ffffffff8027f121>] clear_inode+0x6d/0xc4
     [<ffffffff8027f7f2>] dispose_list+0x56/0xee
     [<ffffffff8027fa5a>] shrink_icache_memory+0x1d0/0x200
     [<ffffffff80257742>] shrink_slab+0xe3/0x15b
     [<ffffffff80257e93>] kswapd+0x346/0x447
    ...
    
    Reported-by: Tibor Tajti <tibor.tajti@gmail.com>
    Reviewed-by: Ingo Oeser <ioe-lkml@rameria.de>
    Signed-off-by: Jan Kara <jack@suse.cz>