add patches from the -stable queue:

* add patches from the -stable queue:
  - scsi-use-the-scsi-data-buffer-length-to-extract-transfer-size
  - usb-storage-scsi-add-broken_fua-blacklist-flag
  - ibmvscsi-abort-init-sequence-during-error-recovery
  - ibmvscsi-add-memory-barriers-for-send-receive
  - virtio-scsi-avoid-cancelling-uninitialized-work-items
  - scsi_error-fix-invalid-setting-of-host-byte
  - virtio-scsi-fix-various-bad-behavior-on-aborted-requests
  - xhci-use-correct-slot-id-when-handling-a-reset-device-command
  - xhci-correct-burst-count-field-for-isoc-transfers-on-1.0-xhci-hosts
  - xhci-fix-runtime-suspended-xhci-from-blocking-system-suspend
  - usb-option-add-device-id-for-speedup-su9800-usb-3g-modem
  - usb-option-add-modify-olivetti-olicard-modems
  - usb-musb-ux500-don-t-propagate-the-of-node
  - usb-musb-ensure-that-cppi41-timer-gets-armed-on-premature-dma-tx-irq
  - usb-musb-fix-panic-upon-musb_am335x-module-removal
  - usb-chipidea-udc-delete-td-from-req-s-td-list-at-ep_dequeue
  - usb-ftdi_sio-fix-null-deref-at-port-probe
  - usb-gadget-f_fs-resurect-usb_functionfs_descs_head-structure
  - usb-gadget-f_fs-fix-null-pointer-dereference-when-there-are-no-strings
  - rt2x00-disable-tkip-on-usb
  - rt2x00-fix-rfkill-regression-on-rt2500pci
  - mtd-elbc-nand-fix-subpage-write-support
  - mtd-nand-omap-fix-bchx-ecc.correct-to-return-detected-bit-flips-in-
    erased-page
  - mtd-pxa3xx_nand-make-the-driver-work-on-big-endian-systems
  - vgaswitcheroo-switch-the-mux-to-the-igp-on-power-down-when
  - drm-nouveau-kms-nv04-nv40-fix-pageflip-events-via-special-case
  - drm-nouveau-disp-nv04-nv40-abort-scanoutpos-query-on-vga-analog
  - drm-nouveau-kms-reference-vblank-for-crtc-during-pageflip
  - drm-radeon-only-apply-hdmi-bpc-pll-flags-when-encoder-mode-is-hdmi
  - drm-radeon-fix-typo-in-radeon_connector_is_dp12_capable
  - drm-radeon-dp-fix-lane-clock-setup-for-dp-1.2-capable-devices
  - drm-radeon-atom-fix-dithering-on-certain-panels
  - drm-radeon-add-missing-vce-init-case-for-hawaii
  - drm-radeon-dpm-fix-typo-in-vddci-setup-for-eg-btc
  - drm-radeon-dpm-fix-vddci-setup-typo-on-cayman
  - drm-radeon-cik-fix-typo-in-eop-packet
  - drm-nv50-mc-fix-kms-pageflip-events-by-reordering-irq-handling-order
  - drm-gk208-gr-add-missing-registers-to-grctx-init
  - drm-i915-bdw-only-use-2g-ggtt-for-32b-platforms
  - drm-i915-reorder-semaphore-deadlock-check
  - drm-i915-disable-fbc-by-default-also-on-haswell-and-later
  - drm-i915-avoid-div-by-zero-when-pixel_multiplier-is-zero
  - drm-i915-set-backlight-duty-cycle-after-backlight-enable-for-gen4
  - drm-i915-hd-audio-don-t-continue-probing-when-nomodeset-is-given
  - drm-i915-hold-the-table-lock-whilst-walking-the-file-s-idr-and-counting-
    the-objects-in-debugfs
  - drm-i915-default-to-having-backlight-if-vbt-not-available
  - drm-i95-initialize-active-ring-pid-to-1
  - drm-fix-null-pointer-access-by-wrong-ioctl
  - drm-i915-provide-interface-for-audio-driver-to-query-cdclk
  - alsa-hda-restore-bclk-m-n-value-as-per-cdclk-for-hsw-bdw-display-hda-
    controller
  - drm-vmwgfx-fix-incorrect-write-to-read-only-register-v2
  - drm-i2c-tda998x-move-drm_i2c_encoder_destroy-call
  - bluetooth-fix-incorrectly-overriding-conn-src_type
  - bluetooth-fix-ssp-acceptor-just-works-confirmation-without-mitm
  - bluetooth-fix-check-for-connection-encryption
  - bluetooth-fix-indicating-discovery-state-when-canceling-inquiry
  - bluetooth-refactor-discovery-stopping-into-its-own-function
  - bluetooth-reuse-hci_stop_discovery-function-when-cleaning-up-hci-state
  - bluetooth-fix-setting-correct-authentication-information-for-smp-stk
  - bluetooth-fix-deadlock-in-l2cap_conn_del
  - bluetooth-fix-locking-of-hdev-when-calling-into-smp-code
  - bluetooth-allow-change-security-level-on-att_cid-in-slave-role
  - dm-era-check-for-a-non-null-metadata-object-before-closing-it
  - dm-thin-update-discard_granularity-to-reflect-the-thin-pool-blocksize
  - rbd-use-reference-counts-for-image-requests
  - rbd-handle-parent_overlap-on-writes-correctly
  - hwmon-ina2xx-cast-to-s16-on-shunt-and-current-regs
  - intel_pstate-correct-rounding-in-busy-calculation
  - twl4030-madc-request-processed-values-in-twl4030_get_madc_conversion
  - mac80211-fix-ibss-join-by-initializing-last_scan_completed
  - mac80211-don-t-check-netdev-state-for-debugfs-read-write
  - mac80211-fix-a-memory-leak-on-sta-rate-selection-table
  - iwlwifi-pcie-try-to-get-ownership-several-times
  - mm-nommu-per-thread-vma-cache-fix
  - hugetlb-fix-copy_hugetlb_page_range-to-handle-migration-hwpoisoned-entry
  - mm-pcp-allow-restoring-percpu_pagelist_fraction-default
  - ia64-arch-ia64-include-uapi-asm-fcntl.h-needs-personality.h
  - arm-mvebu-fix-the-improper-use-of-the-compatible-string-armada38x-using-
    a-wildcard
  - arm64-mm-make-icache-synchronisation-logic-huge-page-aware
  - arm-omap2-fix-parser-bug-in-platform-muxing-code
  - arm64-bug-fix-in-stack-alignment-exception
  - net-allwinner-emac-add-missing-free_irq
  - b43-fix-frequency-reported-on-g-phy-with-new-firmware
  - fs-cifs-fix-regression-in-cifs_create_mf_symlink
  - cifs-fix-mount-failure-with-broken-pathnames-when-smb3-mount-with-
    mapchars-option
  - regulator-tps65218-add-the-missing-of_node-assignment-in-probe
  - regulator-tps65218-correct-the-the-config-register-for-ldo1
  - iommu-vt-d-fix-bug-in-handling-multiple-rmrrs-for-the-same-pci-device
  - blkcg-fix-use-after-free-in-__blkg_release_rcu-by-making-blkcg_gq-refcnt-
    an-atomic_t
  - ext4-fix-buffer-double-free-in-ext4_alloc_branch
  - ext4-fix-hole-punching-for-files-with-indirect-blocks
  - mm-page_alloc-fix-cma-area-initialisation-when-pageblock-max_order
  - zram-revalidate-disk-after-capacity-change
  - proc-stat-convert-to-single_open_size
  - kvm-x86-increase-the-number-of-fixed-mtrr-regs-to-10
  - kvm-x86-preserve-the-high-32-bits-of-the-pat-register
  - kvm-fix-wrong-address-when-writing-hyper-v-tsc-page
  - iio-of_iio_channel_get_by_name-returns-non-null-pointers-for-error-legs
  - staging-iio-ad7291-fix-error-code-in-ad7291_probe
  - nfsd-fix-rare-symlink-decoding-bug
  - tools-ffs-test-fix-header-values-endianess
  - staging-tidspbridge-fix-an-erroneous-removal-of-parentheses
  - tracing-remove-ftrace_stop-start-from-reading-the-trace-file
  - tracing-uprobes-revert-support-mix-of-ftrace-and-perf
  - tracing-uprobes-fix-the-usage-of-uprobe_buffer_enable-in-
    probe_event_enable
  - btrfs-only-unlock-block-in-verify_parent_transid-if-we-locked-it
  - md-flush-writes-before-starting-a-recovery
  - md-make-sure-get_array_info-ioctl-reports-correct-clean-status
  - irqchip-spear_shirq-fix-interrupt-offset
  - arc-fix-build-breakage-for-config_arc_dw2_unwind
  - mlx4_core-fix-incorrect-flags1-bitmap-test-in-mlx4_query_func_cap
  - net-mlx4_core-keep-only-one-driver-entry-release-mlx4_priv
  - clk-qcom-fix-clk_rcg2_is_enabled-check
  - clk-qcom-fix-mmcc-8974-s-pll-configurations
  - serial-fix-ignbrk-handling
  - tty-correct-inpck-handling
  - netfilter-ctnetlink-fix-dumping-of-dying-unconfirmed-conntracks
  - netfilter-nf_nat-fix-oops-on-netns-removal
  - netfilter-ctnetlink-fix-refcnt-leak-in-dying-unconfirmed-list-dumper
  - mmc-rtsx-add-r1-no-crc-mmc-command-type-handle
NOT RELEASED YET

* NOT RELEASED YET
* set ABI to 4.slh.2.