Gentoo Archives: gentoo-commits

From: Mike Pagano <mpagano@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] proj/linux-patches:4.16 commit in: /
Date: Wed, 09 May 2018 10:57:20
Message-Id: 1525863427.0498f014b69ef826fe7c972a5ab3d10ba1f29877.mpagano@gentoo
1 commit: 0498f014b69ef826fe7c972a5ab3d10ba1f29877
2 Author: Mike Pagano <mpagano <AT> gentoo <DOT> org>
3 AuthorDate: Wed May 9 10:57:07 2018 +0000
4 Commit: Mike Pagano <mpagano <AT> gentoo <DOT> org>
5 CommitDate: Wed May 9 10:57:07 2018 +0000
6 URL: https://gitweb.gentoo.org/proj/linux-patches.git/commit/?id=0498f014
7
8 Linux patch 4.16.8
9
10 0000_README | 4 +
11 1007_linux-4.16.8.patch | 2881 +++++++++++++++++++++++++++++++++++++++++++++++
12 2 files changed, 2885 insertions(+)
13
14 diff --git a/0000_README b/0000_README
15 index 1139362..b4a9e43 100644
16 --- a/0000_README
17 +++ b/0000_README
18 @@ -71,6 +71,10 @@ Patch: 1006_linux-4.16.7.patch
19 From: http://www.kernel.org
20 Desc: Linux 4.16.7
21
22 +Patch: 1007_linux-4.16.8.patch
23 +From: http://www.kernel.org
24 +Desc: Linux 4.16.8
25 +
26 Patch: 1500_XATTR_USER_PREFIX.patch
27 From: https://bugs.gentoo.org/show_bug.cgi?id=470644
28 Desc: Support for namespace user.pax.* on tmpfs.
29
30 diff --git a/1007_linux-4.16.8.patch b/1007_linux-4.16.8.patch
31 new file mode 100644
32 index 0000000..51d061b
33 --- /dev/null
34 +++ b/1007_linux-4.16.8.patch
35 @@ -0,0 +1,2881 @@
36 +diff --git a/Documentation/arm64/silicon-errata.txt b/Documentation/arm64/silicon-errata.txt
37 +index c1d520de6dfe..3b2f2dd82225 100644
38 +--- a/Documentation/arm64/silicon-errata.txt
39 ++++ b/Documentation/arm64/silicon-errata.txt
40 +@@ -55,6 +55,7 @@ stable kernels.
41 + | ARM | Cortex-A57 | #834220 | ARM64_ERRATUM_834220 |
42 + | ARM | Cortex-A72 | #853709 | N/A |
43 + | ARM | Cortex-A73 | #858921 | ARM64_ERRATUM_858921 |
44 ++| ARM | Cortex-A55 | #1024718 | ARM64_ERRATUM_1024718 |
45 + | ARM | MMU-500 | #841119,#826419 | N/A |
46 + | | | | |
47 + | Cavium | ThunderX ITS | #22375, #24313 | CAVIUM_ERRATUM_22375 |
48 +diff --git a/Makefile b/Makefile
49 +index 1c5d5d8c45e2..5da6ffd69209 100644
50 +--- a/Makefile
51 ++++ b/Makefile
52 +@@ -1,7 +1,7 @@
53 + # SPDX-License-Identifier: GPL-2.0
54 + VERSION = 4
55 + PATCHLEVEL = 16
56 +-SUBLEVEL = 7
57 ++SUBLEVEL = 8
58 + EXTRAVERSION =
59 + NAME = Fearless Coyote
60 +
61 +diff --git a/arch/arm64/Kconfig b/arch/arm64/Kconfig
62 +index 7381eeb7ef8e..be665760f2bd 100644
63 +--- a/arch/arm64/Kconfig
64 ++++ b/arch/arm64/Kconfig
65 +@@ -464,6 +464,20 @@ config ARM64_ERRATUM_843419
66 +
67 + If unsure, say Y.
68 +
69 ++config ARM64_ERRATUM_1024718
70 ++ bool "Cortex-A55: 1024718: Update of DBM/AP bits without break before make might result in incorrect update"
71 ++ default y
72 ++ help
73 ++ This option adds work around for Arm Cortex-A55 Erratum 1024718.
74 ++
75 ++ Affected Cortex-A55 cores (r0p0, r0p1, r1p0) could cause incorrect
76 ++ update of the hardware dirty bit when the DBM/AP bits are updated
77 ++ without a break-before-make. The work around is to disable the usage
78 ++ of hardware DBM locally on the affected cores. CPUs not affected by
79 ++ erratum will continue to use the feature.
80 ++
81 ++ If unsure, say Y.
82 ++
83 + config CAVIUM_ERRATUM_22375
84 + bool "Cavium erratum 22375, 24313"
85 + default y
86 +diff --git a/arch/arm64/include/asm/assembler.h b/arch/arm64/include/asm/assembler.h
87 +index 3c78835bba94..a3ca19e68b73 100644
88 +--- a/arch/arm64/include/asm/assembler.h
89 ++++ b/arch/arm64/include/asm/assembler.h
90 +@@ -25,6 +25,7 @@
91 +
92 + #include <asm/asm-offsets.h>
93 + #include <asm/cpufeature.h>
94 ++#include <asm/cputype.h>
95 + #include <asm/debug-monitors.h>
96 + #include <asm/page.h>
97 + #include <asm/pgtable-hwdef.h>
98 +@@ -595,4 +596,43 @@ USER(\label, ic ivau, \tmp2) // invalidate I line PoU
99 + #endif
100 + .endm
101 +
102 ++/*
103 ++ * Check the MIDR_EL1 of the current CPU for a given model and a range of
104 ++ * variant/revision. See asm/cputype.h for the macros used below.
105 ++ *
106 ++ * model: MIDR_CPU_MODEL of CPU
107 ++ * rv_min: Minimum of MIDR_CPU_VAR_REV()
108 ++ * rv_max: Maximum of MIDR_CPU_VAR_REV()
109 ++ * res: Result register.
110 ++ * tmp1, tmp2, tmp3: Temporary registers
111 ++ *
112 ++ * Corrupts: res, tmp1, tmp2, tmp3
113 ++ * Returns: 0, if the CPU id doesn't match. Non-zero otherwise
114 ++ */
115 ++ .macro cpu_midr_match model, rv_min, rv_max, res, tmp1, tmp2, tmp3
116 ++ mrs \res, midr_el1
117 ++ mov_q \tmp1, (MIDR_REVISION_MASK | MIDR_VARIANT_MASK)
118 ++ mov_q \tmp2, MIDR_CPU_MODEL_MASK
119 ++ and \tmp3, \res, \tmp2 // Extract model
120 ++ and \tmp1, \res, \tmp1 // rev & variant
121 ++ mov_q \tmp2, \model
122 ++ cmp \tmp3, \tmp2
123 ++ cset \res, eq
124 ++ cbz \res, .Ldone\@ // Model matches ?
125 ++
126 ++ .if (\rv_min != 0) // Skip min check if rv_min == 0
127 ++ mov_q \tmp3, \rv_min
128 ++ cmp \tmp1, \tmp3
129 ++ cset \res, ge
130 ++ .endif // \rv_min != 0
131 ++ /* Skip rv_max check if rv_min == rv_max && rv_min != 0 */
132 ++ .if ((\rv_min != \rv_max) || \rv_min == 0)
133 ++ mov_q \tmp2, \rv_max
134 ++ cmp \tmp1, \tmp2
135 ++ cset \tmp2, le
136 ++ and \res, \res, \tmp2
137 ++ .endif
138 ++.Ldone\@:
139 ++ .endm
140 ++
141 + #endif /* __ASM_ASSEMBLER_H */
142 +diff --git a/arch/arm64/include/asm/cputype.h b/arch/arm64/include/asm/cputype.h
143 +index 350c76a1d15b..8e32a6f28f00 100644
144 +--- a/arch/arm64/include/asm/cputype.h
145 ++++ b/arch/arm64/include/asm/cputype.h
146 +@@ -83,6 +83,7 @@
147 + #define ARM_CPU_PART_CORTEX_A53 0xD03
148 + #define ARM_CPU_PART_CORTEX_A73 0xD09
149 + #define ARM_CPU_PART_CORTEX_A75 0xD0A
150 ++#define ARM_CPU_PART_CORTEX_A55 0xD05
151 +
152 + #define APM_CPU_PART_POTENZA 0x000
153 +
154 +@@ -102,6 +103,7 @@
155 + #define MIDR_CORTEX_A72 MIDR_CPU_MODEL(ARM_CPU_IMP_ARM, ARM_CPU_PART_CORTEX_A72)
156 + #define MIDR_CORTEX_A73 MIDR_CPU_MODEL(ARM_CPU_IMP_ARM, ARM_CPU_PART_CORTEX_A73)
157 + #define MIDR_CORTEX_A75 MIDR_CPU_MODEL(ARM_CPU_IMP_ARM, ARM_CPU_PART_CORTEX_A75)
158 ++#define MIDR_CORTEX_A55 MIDR_CPU_MODEL(ARM_CPU_IMP_ARM, ARM_CPU_PART_CORTEX_A55)
159 + #define MIDR_THUNDERX MIDR_CPU_MODEL(ARM_CPU_IMP_CAVIUM, CAVIUM_CPU_PART_THUNDERX)
160 + #define MIDR_THUNDERX_81XX MIDR_CPU_MODEL(ARM_CPU_IMP_CAVIUM, CAVIUM_CPU_PART_THUNDERX_81XX)
161 + #define MIDR_THUNDERX_83XX MIDR_CPU_MODEL(ARM_CPU_IMP_CAVIUM, CAVIUM_CPU_PART_THUNDERX_83XX)
162 +diff --git a/arch/arm64/mm/proc.S b/arch/arm64/mm/proc.S
163 +index c0af47617299..5244440baea4 100644
164 +--- a/arch/arm64/mm/proc.S
165 ++++ b/arch/arm64/mm/proc.S
166 +@@ -448,6 +448,11 @@ ENTRY(__cpu_setup)
167 + cbz x9, 2f
168 + cmp x9, #2
169 + b.lt 1f
170 ++#ifdef CONFIG_ARM64_ERRATUM_1024718
171 ++ /* Disable hardware DBM on Cortex-A55 r0p0, r0p1 & r1p0 */
172 ++ cpu_midr_match MIDR_CORTEX_A55, MIDR_CPU_VAR_REV(0, 0), MIDR_CPU_VAR_REV(1, 0), x1, x2, x3, x4
173 ++ cbnz x1, 1f
174 ++#endif
175 + orr x10, x10, #TCR_HD // hardware Dirty flag update
176 + 1: orr x10, x10, #TCR_HA // hardware Access flag update
177 + 2:
178 +diff --git a/arch/x86/kernel/tsc.c b/arch/x86/kernel/tsc.c
179 +index 3615c0f255e9..c375b0aef877 100644
180 +--- a/arch/x86/kernel/tsc.c
181 ++++ b/arch/x86/kernel/tsc.c
182 +@@ -1067,6 +1067,7 @@ static struct clocksource clocksource_tsc_early = {
183 + .resume = tsc_resume,
184 + .mark_unstable = tsc_cs_mark_unstable,
185 + .tick_stable = tsc_cs_tick_stable,
186 ++ .list = LIST_HEAD_INIT(clocksource_tsc_early.list),
187 + };
188 +
189 + /*
190 +@@ -1086,6 +1087,7 @@ static struct clocksource clocksource_tsc = {
191 + .resume = tsc_resume,
192 + .mark_unstable = tsc_cs_mark_unstable,
193 + .tick_stable = tsc_cs_tick_stable,
194 ++ .list = LIST_HEAD_INIT(clocksource_tsc.list),
195 + };
196 +
197 + void mark_tsc_unstable(char *reason)
198 +@@ -1098,13 +1100,9 @@ void mark_tsc_unstable(char *reason)
199 + clear_sched_clock_stable();
200 + disable_sched_clock_irqtime();
201 + pr_info("Marking TSC unstable due to %s\n", reason);
202 +- /* Change only the rating, when not registered */
203 +- if (clocksource_tsc.mult) {
204 +- clocksource_mark_unstable(&clocksource_tsc);
205 +- } else {
206 +- clocksource_tsc.flags |= CLOCK_SOURCE_UNSTABLE;
207 +- clocksource_tsc.rating = 0;
208 +- }
209 ++
210 ++ clocksource_mark_unstable(&clocksource_tsc_early);
211 ++ clocksource_mark_unstable(&clocksource_tsc);
212 + }
213 +
214 + EXPORT_SYMBOL_GPL(mark_tsc_unstable);
215 +@@ -1205,7 +1203,7 @@ static void tsc_refine_calibration_work(struct work_struct *work)
216 +
217 + /* Don't bother refining TSC on unstable systems */
218 + if (tsc_unstable)
219 +- return;
220 ++ goto unreg;
221 +
222 + /*
223 + * Since the work is started early in boot, we may be
224 +@@ -1258,11 +1256,12 @@ static void tsc_refine_calibration_work(struct work_struct *work)
225 +
226 + out:
227 + if (tsc_unstable)
228 +- return;
229 ++ goto unreg;
230 +
231 + if (boot_cpu_has(X86_FEATURE_ART))
232 + art_related_clocksource = &clocksource_tsc;
233 + clocksource_register_khz(&clocksource_tsc, tsc_khz);
234 ++unreg:
235 + clocksource_unregister(&clocksource_tsc_early);
236 + }
237 +
238 +@@ -1272,8 +1271,8 @@ static int __init init_tsc_clocksource(void)
239 + if (!boot_cpu_has(X86_FEATURE_TSC) || tsc_disabled > 0 || !tsc_khz)
240 + return 0;
241 +
242 +- if (check_tsc_unstable())
243 +- return 0;
244 ++ if (tsc_unstable)
245 ++ goto unreg;
246 +
247 + if (tsc_clocksource_reliable)
248 + clocksource_tsc.flags &= ~CLOCK_SOURCE_MUST_VERIFY;
249 +@@ -1289,6 +1288,7 @@ static int __init init_tsc_clocksource(void)
250 + if (boot_cpu_has(X86_FEATURE_ART))
251 + art_related_clocksource = &clocksource_tsc;
252 + clocksource_register_khz(&clocksource_tsc, tsc_khz);
253 ++unreg:
254 + clocksource_unregister(&clocksource_tsc_early);
255 + return 0;
256 + }
257 +diff --git a/arch/x86/kvm/lapic.c b/arch/x86/kvm/lapic.c
258 +index 391dda8d43b7..7cf470a3755f 100644
259 +--- a/arch/x86/kvm/lapic.c
260 ++++ b/arch/x86/kvm/lapic.c
261 +@@ -1455,23 +1455,6 @@ static void start_sw_tscdeadline(struct kvm_lapic *apic)
262 + local_irq_restore(flags);
263 + }
264 +
265 +-static void start_sw_period(struct kvm_lapic *apic)
266 +-{
267 +- if (!apic->lapic_timer.period)
268 +- return;
269 +-
270 +- if (apic_lvtt_oneshot(apic) &&
271 +- ktime_after(ktime_get(),
272 +- apic->lapic_timer.target_expiration)) {
273 +- apic_timer_expired(apic);
274 +- return;
275 +- }
276 +-
277 +- hrtimer_start(&apic->lapic_timer.timer,
278 +- apic->lapic_timer.target_expiration,
279 +- HRTIMER_MODE_ABS_PINNED);
280 +-}
281 +-
282 + static void update_target_expiration(struct kvm_lapic *apic, uint32_t old_divisor)
283 + {
284 + ktime_t now, remaining;
285 +@@ -1538,6 +1521,26 @@ static void advance_periodic_target_expiration(struct kvm_lapic *apic)
286 + apic->lapic_timer.period);
287 + }
288 +
289 ++static void start_sw_period(struct kvm_lapic *apic)
290 ++{
291 ++ if (!apic->lapic_timer.period)
292 ++ return;
293 ++
294 ++ if (ktime_after(ktime_get(),
295 ++ apic->lapic_timer.target_expiration)) {
296 ++ apic_timer_expired(apic);
297 ++
298 ++ if (apic_lvtt_oneshot(apic))
299 ++ return;
300 ++
301 ++ advance_periodic_target_expiration(apic);
302 ++ }
303 ++
304 ++ hrtimer_start(&apic->lapic_timer.timer,
305 ++ apic->lapic_timer.target_expiration,
306 ++ HRTIMER_MODE_ABS_PINNED);
307 ++}
308 ++
309 + bool kvm_lapic_hv_timer_in_use(struct kvm_vcpu *vcpu)
310 + {
311 + if (!lapic_in_kernel(vcpu))
312 +diff --git a/drivers/acpi/button.c b/drivers/acpi/button.c
313 +index e1eee7a60fad..f1cc4f9d31cd 100644
314 +--- a/drivers/acpi/button.c
315 ++++ b/drivers/acpi/button.c
316 +@@ -635,4 +635,26 @@ module_param_call(lid_init_state,
317 + NULL, 0644);
318 + MODULE_PARM_DESC(lid_init_state, "Behavior for reporting LID initial state");
319 +
320 +-module_acpi_driver(acpi_button_driver);
321 ++static int acpi_button_register_driver(struct acpi_driver *driver)
322 ++{
323 ++ /*
324 ++ * Modules such as nouveau.ko and i915.ko have a link time dependency
325 ++ * on acpi_lid_open(), and would therefore not be loadable on ACPI
326 ++ * capable kernels booted in non-ACPI mode if the return value of
327 ++ * acpi_bus_register_driver() is returned from here with ACPI disabled
328 ++ * when this driver is built as a module.
329 ++ */
330 ++ if (acpi_disabled)
331 ++ return 0;
332 ++
333 ++ return acpi_bus_register_driver(driver);
334 ++}
335 ++
336 ++static void acpi_button_unregister_driver(struct acpi_driver *driver)
337 ++{
338 ++ if (!acpi_disabled)
339 ++ acpi_bus_unregister_driver(driver);
340 ++}
341 ++
342 ++module_driver(acpi_button_driver, acpi_button_register_driver,
343 ++ acpi_button_unregister_driver);
344 +diff --git a/drivers/gpu/drm/bridge/dumb-vga-dac.c b/drivers/gpu/drm/bridge/dumb-vga-dac.c
345 +index de5e7dee7ad6..2e6c61d9b8ea 100644
346 +--- a/drivers/gpu/drm/bridge/dumb-vga-dac.c
347 ++++ b/drivers/gpu/drm/bridge/dumb-vga-dac.c
348 +@@ -55,7 +55,9 @@ static int dumb_vga_get_modes(struct drm_connector *connector)
349 + }
350 +
351 + drm_mode_connector_update_edid_property(connector, edid);
352 +- return drm_add_edid_modes(connector, edid);
353 ++ ret = drm_add_edid_modes(connector, edid);
354 ++ kfree(edid);
355 ++ return ret;
356 +
357 + fallback:
358 + /*
359 +diff --git a/drivers/gpu/drm/vc4/vc4_crtc.c b/drivers/gpu/drm/vc4/vc4_crtc.c
360 +index ce1e3b9e14c9..75f379c67a31 100644
361 +--- a/drivers/gpu/drm/vc4/vc4_crtc.c
362 ++++ b/drivers/gpu/drm/vc4/vc4_crtc.c
363 +@@ -735,6 +735,7 @@ static irqreturn_t vc4_crtc_irq_handler(int irq, void *data)
364 + struct vc4_async_flip_state {
365 + struct drm_crtc *crtc;
366 + struct drm_framebuffer *fb;
367 ++ struct drm_framebuffer *old_fb;
368 + struct drm_pending_vblank_event *event;
369 +
370 + struct vc4_seqno_cb cb;
371 +@@ -764,6 +765,23 @@ vc4_async_page_flip_complete(struct vc4_seqno_cb *cb)
372 +
373 + drm_crtc_vblank_put(crtc);
374 + drm_framebuffer_put(flip_state->fb);
375 ++
376 ++ /* Decrement the BO usecnt in order to keep the inc/dec calls balanced
377 ++ * when the planes are updated through the async update path.
378 ++ * FIXME: we should move to generic async-page-flip when it's
379 ++ * available, so that we can get rid of this hand-made cleanup_fb()
380 ++ * logic.
381 ++ */
382 ++ if (flip_state->old_fb) {
383 ++ struct drm_gem_cma_object *cma_bo;
384 ++ struct vc4_bo *bo;
385 ++
386 ++ cma_bo = drm_fb_cma_get_gem_obj(flip_state->old_fb, 0);
387 ++ bo = to_vc4_bo(&cma_bo->base);
388 ++ vc4_bo_dec_usecnt(bo);
389 ++ drm_framebuffer_put(flip_state->old_fb);
390 ++ }
391 ++
392 + kfree(flip_state);
393 +
394 + up(&vc4->async_modeset);
395 +@@ -788,9 +806,22 @@ static int vc4_async_page_flip(struct drm_crtc *crtc,
396 + struct drm_gem_cma_object *cma_bo = drm_fb_cma_get_gem_obj(fb, 0);
397 + struct vc4_bo *bo = to_vc4_bo(&cma_bo->base);
398 +
399 ++ /* Increment the BO usecnt here, so that we never end up with an
400 ++ * unbalanced number of vc4_bo_{dec,inc}_usecnt() calls when the
401 ++ * plane is later updated through the non-async path.
402 ++ * FIXME: we should move to generic async-page-flip when it's
403 ++ * available, so that we can get rid of this hand-made prepare_fb()
404 ++ * logic.
405 ++ */
406 ++ ret = vc4_bo_inc_usecnt(bo);
407 ++ if (ret)
408 ++ return ret;
409 ++
410 + flip_state = kzalloc(sizeof(*flip_state), GFP_KERNEL);
411 +- if (!flip_state)
412 ++ if (!flip_state) {
413 ++ vc4_bo_dec_usecnt(bo);
414 + return -ENOMEM;
415 ++ }
416 +
417 + drm_framebuffer_get(fb);
418 + flip_state->fb = fb;
419 +@@ -801,10 +832,23 @@ static int vc4_async_page_flip(struct drm_crtc *crtc,
420 + ret = down_interruptible(&vc4->async_modeset);
421 + if (ret) {
422 + drm_framebuffer_put(fb);
423 ++ vc4_bo_dec_usecnt(bo);
424 + kfree(flip_state);
425 + return ret;
426 + }
427 +
428 ++ /* Save the current FB before it's replaced by the new one in
429 ++ * drm_atomic_set_fb_for_plane(). We'll need the old FB in
430 ++ * vc4_async_page_flip_complete() to decrement the BO usecnt and keep
431 ++ * it consistent.
432 ++ * FIXME: we should move to generic async-page-flip when it's
433 ++ * available, so that we can get rid of this hand-made cleanup_fb()
434 ++ * logic.
435 ++ */
436 ++ flip_state->old_fb = plane->state->fb;
437 ++ if (flip_state->old_fb)
438 ++ drm_framebuffer_get(flip_state->old_fb);
439 ++
440 + WARN_ON(drm_crtc_vblank_get(crtc) != 0);
441 +
442 + /* Immediately update the plane's legacy fb pointer, so that later
443 +diff --git a/drivers/gpu/drm/vmwgfx/vmwgfx_kms.c b/drivers/gpu/drm/vmwgfx/vmwgfx_kms.c
444 +index 3c824fd7cbf3..af9fd49c22e6 100644
445 +--- a/drivers/gpu/drm/vmwgfx/vmwgfx_kms.c
446 ++++ b/drivers/gpu/drm/vmwgfx/vmwgfx_kms.c
447 +@@ -2598,6 +2598,7 @@ void vmw_kms_helper_resource_finish(struct vmw_validation_ctx *ctx,
448 + vmw_kms_helper_buffer_finish(res->dev_priv, NULL, ctx->buf,
449 + out_fence, NULL);
450 +
451 ++ vmw_dmabuf_unreference(&ctx->buf);
452 + vmw_resource_unreserve(res, false, NULL, 0);
453 + mutex_unlock(&res->dev_priv->cmdbuf_mutex);
454 + }
455 +diff --git a/drivers/infiniband/core/ucma.c b/drivers/infiniband/core/ucma.c
456 +index 5c21ae237f82..006e9c0e1ea3 100644
457 +--- a/drivers/infiniband/core/ucma.c
458 ++++ b/drivers/infiniband/core/ucma.c
459 +@@ -678,7 +678,7 @@ static ssize_t ucma_resolve_ip(struct ucma_file *file,
460 + if (copy_from_user(&cmd, inbuf, sizeof(cmd)))
461 + return -EFAULT;
462 +
463 +- if (!rdma_addr_size_in6(&cmd.src_addr) ||
464 ++ if ((cmd.src_addr.sin6_family && !rdma_addr_size_in6(&cmd.src_addr)) ||
465 + !rdma_addr_size_in6(&cmd.dst_addr))
466 + return -EINVAL;
467 +
468 +diff --git a/drivers/infiniband/hw/cxgb4/cq.c b/drivers/infiniband/hw/cxgb4/cq.c
469 +index 6f2b26126c64..2be2e1ac1b5f 100644
470 +--- a/drivers/infiniband/hw/cxgb4/cq.c
471 ++++ b/drivers/infiniband/hw/cxgb4/cq.c
472 +@@ -315,7 +315,7 @@ static void advance_oldest_read(struct t4_wq *wq)
473 + * Deal with out-of-order and/or completions that complete
474 + * prior unsignalled WRs.
475 + */
476 +-void c4iw_flush_hw_cq(struct c4iw_cq *chp)
477 ++void c4iw_flush_hw_cq(struct c4iw_cq *chp, struct c4iw_qp *flush_qhp)
478 + {
479 + struct t4_cqe *hw_cqe, *swcqe, read_cqe;
480 + struct c4iw_qp *qhp;
481 +@@ -339,6 +339,13 @@ void c4iw_flush_hw_cq(struct c4iw_cq *chp)
482 + if (qhp == NULL)
483 + goto next_cqe;
484 +
485 ++ if (flush_qhp != qhp) {
486 ++ spin_lock(&qhp->lock);
487 ++
488 ++ if (qhp->wq.flushed == 1)
489 ++ goto next_cqe;
490 ++ }
491 ++
492 + if (CQE_OPCODE(hw_cqe) == FW_RI_TERMINATE)
493 + goto next_cqe;
494 +
495 +@@ -390,6 +397,8 @@ void c4iw_flush_hw_cq(struct c4iw_cq *chp)
496 + next_cqe:
497 + t4_hwcq_consume(&chp->cq);
498 + ret = t4_next_hw_cqe(&chp->cq, &hw_cqe);
499 ++ if (qhp && flush_qhp != qhp)
500 ++ spin_unlock(&qhp->lock);
501 + }
502 + }
503 +
504 +diff --git a/drivers/infiniband/hw/cxgb4/device.c b/drivers/infiniband/hw/cxgb4/device.c
505 +index 7a9d0de89d6a..01d94cd88916 100644
506 +--- a/drivers/infiniband/hw/cxgb4/device.c
507 ++++ b/drivers/infiniband/hw/cxgb4/device.c
508 +@@ -875,6 +875,11 @@ static int c4iw_rdev_open(struct c4iw_rdev *rdev)
509 +
510 + rdev->status_page->db_off = 0;
511 +
512 ++ init_completion(&rdev->rqt_compl);
513 ++ init_completion(&rdev->pbl_compl);
514 ++ kref_init(&rdev->rqt_kref);
515 ++ kref_init(&rdev->pbl_kref);
516 ++
517 + return 0;
518 + err_free_status_page_and_wr_log:
519 + if (c4iw_wr_log && rdev->wr_log)
520 +@@ -893,13 +898,15 @@ static int c4iw_rdev_open(struct c4iw_rdev *rdev)
521 +
522 + static void c4iw_rdev_close(struct c4iw_rdev *rdev)
523 + {
524 +- destroy_workqueue(rdev->free_workq);
525 + kfree(rdev->wr_log);
526 + c4iw_release_dev_ucontext(rdev, &rdev->uctx);
527 + free_page((unsigned long)rdev->status_page);
528 + c4iw_pblpool_destroy(rdev);
529 + c4iw_rqtpool_destroy(rdev);
530 ++ wait_for_completion(&rdev->pbl_compl);
531 ++ wait_for_completion(&rdev->rqt_compl);
532 + c4iw_ocqp_pool_destroy(rdev);
533 ++ destroy_workqueue(rdev->free_workq);
534 + c4iw_destroy_resource(&rdev->resource);
535 + }
536 +
537 +diff --git a/drivers/infiniband/hw/cxgb4/iw_cxgb4.h b/drivers/infiniband/hw/cxgb4/iw_cxgb4.h
538 +index cc929002c05e..831027717121 100644
539 +--- a/drivers/infiniband/hw/cxgb4/iw_cxgb4.h
540 ++++ b/drivers/infiniband/hw/cxgb4/iw_cxgb4.h
541 +@@ -185,6 +185,10 @@ struct c4iw_rdev {
542 + struct wr_log_entry *wr_log;
543 + int wr_log_size;
544 + struct workqueue_struct *free_workq;
545 ++ struct completion rqt_compl;
546 ++ struct completion pbl_compl;
547 ++ struct kref rqt_kref;
548 ++ struct kref pbl_kref;
549 + };
550 +
551 + static inline int c4iw_fatal_error(struct c4iw_rdev *rdev)
552 +@@ -1049,7 +1053,7 @@ u32 c4iw_pblpool_alloc(struct c4iw_rdev *rdev, int size);
553 + void c4iw_pblpool_free(struct c4iw_rdev *rdev, u32 addr, int size);
554 + u32 c4iw_ocqp_pool_alloc(struct c4iw_rdev *rdev, int size);
555 + void c4iw_ocqp_pool_free(struct c4iw_rdev *rdev, u32 addr, int size);
556 +-void c4iw_flush_hw_cq(struct c4iw_cq *chp);
557 ++void c4iw_flush_hw_cq(struct c4iw_cq *chp, struct c4iw_qp *flush_qhp);
558 + void c4iw_count_rcqes(struct t4_cq *cq, struct t4_wq *wq, int *count);
559 + int c4iw_ep_disconnect(struct c4iw_ep *ep, int abrupt, gfp_t gfp);
560 + int c4iw_flush_rq(struct t4_wq *wq, struct t4_cq *cq, int count);
561 +diff --git a/drivers/infiniband/hw/cxgb4/qp.c b/drivers/infiniband/hw/cxgb4/qp.c
562 +index de77b6027d69..ae167b686608 100644
563 +--- a/drivers/infiniband/hw/cxgb4/qp.c
564 ++++ b/drivers/infiniband/hw/cxgb4/qp.c
565 +@@ -1343,12 +1343,12 @@ static void __flush_qp(struct c4iw_qp *qhp, struct c4iw_cq *rchp,
566 + qhp->wq.flushed = 1;
567 + t4_set_wq_in_error(&qhp->wq);
568 +
569 +- c4iw_flush_hw_cq(rchp);
570 ++ c4iw_flush_hw_cq(rchp, qhp);
571 + c4iw_count_rcqes(&rchp->cq, &qhp->wq, &count);
572 + rq_flushed = c4iw_flush_rq(&qhp->wq, &rchp->cq, count);
573 +
574 + if (schp != rchp)
575 +- c4iw_flush_hw_cq(schp);
576 ++ c4iw_flush_hw_cq(schp, qhp);
577 + sq_flushed = c4iw_flush_sq(qhp);
578 +
579 + spin_unlock(&qhp->lock);
580 +diff --git a/drivers/infiniband/hw/cxgb4/resource.c b/drivers/infiniband/hw/cxgb4/resource.c
581 +index 3cf25997ed2b..0ef25ae05e6f 100644
582 +--- a/drivers/infiniband/hw/cxgb4/resource.c
583 ++++ b/drivers/infiniband/hw/cxgb4/resource.c
584 +@@ -260,12 +260,22 @@ u32 c4iw_pblpool_alloc(struct c4iw_rdev *rdev, int size)
585 + rdev->stats.pbl.cur += roundup(size, 1 << MIN_PBL_SHIFT);
586 + if (rdev->stats.pbl.cur > rdev->stats.pbl.max)
587 + rdev->stats.pbl.max = rdev->stats.pbl.cur;
588 ++ kref_get(&rdev->pbl_kref);
589 + } else
590 + rdev->stats.pbl.fail++;
591 + mutex_unlock(&rdev->stats.lock);
592 + return (u32)addr;
593 + }
594 +
595 ++static void destroy_pblpool(struct kref *kref)
596 ++{
597 ++ struct c4iw_rdev *rdev;
598 ++
599 ++ rdev = container_of(kref, struct c4iw_rdev, pbl_kref);
600 ++ gen_pool_destroy(rdev->pbl_pool);
601 ++ complete(&rdev->pbl_compl);
602 ++}
603 ++
604 + void c4iw_pblpool_free(struct c4iw_rdev *rdev, u32 addr, int size)
605 + {
606 + pr_debug("addr 0x%x size %d\n", addr, size);
607 +@@ -273,6 +283,7 @@ void c4iw_pblpool_free(struct c4iw_rdev *rdev, u32 addr, int size)
608 + rdev->stats.pbl.cur -= roundup(size, 1 << MIN_PBL_SHIFT);
609 + mutex_unlock(&rdev->stats.lock);
610 + gen_pool_free(rdev->pbl_pool, (unsigned long)addr, size);
611 ++ kref_put(&rdev->pbl_kref, destroy_pblpool);
612 + }
613 +
614 + int c4iw_pblpool_create(struct c4iw_rdev *rdev)
615 +@@ -310,7 +321,7 @@ int c4iw_pblpool_create(struct c4iw_rdev *rdev)
616 +
617 + void c4iw_pblpool_destroy(struct c4iw_rdev *rdev)
618 + {
619 +- gen_pool_destroy(rdev->pbl_pool);
620 ++ kref_put(&rdev->pbl_kref, destroy_pblpool);
621 + }
622 +
623 + /*
624 +@@ -331,12 +342,22 @@ u32 c4iw_rqtpool_alloc(struct c4iw_rdev *rdev, int size)
625 + rdev->stats.rqt.cur += roundup(size << 6, 1 << MIN_RQT_SHIFT);
626 + if (rdev->stats.rqt.cur > rdev->stats.rqt.max)
627 + rdev->stats.rqt.max = rdev->stats.rqt.cur;
628 ++ kref_get(&rdev->rqt_kref);
629 + } else
630 + rdev->stats.rqt.fail++;
631 + mutex_unlock(&rdev->stats.lock);
632 + return (u32)addr;
633 + }
634 +
635 ++static void destroy_rqtpool(struct kref *kref)
636 ++{
637 ++ struct c4iw_rdev *rdev;
638 ++
639 ++ rdev = container_of(kref, struct c4iw_rdev, rqt_kref);
640 ++ gen_pool_destroy(rdev->rqt_pool);
641 ++ complete(&rdev->rqt_compl);
642 ++}
643 ++
644 + void c4iw_rqtpool_free(struct c4iw_rdev *rdev, u32 addr, int size)
645 + {
646 + pr_debug("addr 0x%x size %d\n", addr, size << 6);
647 +@@ -344,6 +365,7 @@ void c4iw_rqtpool_free(struct c4iw_rdev *rdev, u32 addr, int size)
648 + rdev->stats.rqt.cur -= roundup(size << 6, 1 << MIN_RQT_SHIFT);
649 + mutex_unlock(&rdev->stats.lock);
650 + gen_pool_free(rdev->rqt_pool, (unsigned long)addr, size << 6);
651 ++ kref_put(&rdev->rqt_kref, destroy_rqtpool);
652 + }
653 +
654 + int c4iw_rqtpool_create(struct c4iw_rdev *rdev)
655 +@@ -380,7 +402,7 @@ int c4iw_rqtpool_create(struct c4iw_rdev *rdev)
656 +
657 + void c4iw_rqtpool_destroy(struct c4iw_rdev *rdev)
658 + {
659 +- gen_pool_destroy(rdev->rqt_pool);
660 ++ kref_put(&rdev->rqt_kref, destroy_rqtpool);
661 + }
662 +
663 + /*
664 +diff --git a/drivers/infiniband/hw/hfi1/driver.c b/drivers/infiniband/hw/hfi1/driver.c
665 +index addc68e83606..78f7c4e743dd 100644
666 +--- a/drivers/infiniband/hw/hfi1/driver.c
667 ++++ b/drivers/infiniband/hw/hfi1/driver.c
668 +@@ -432,31 +432,43 @@ void hfi1_process_ecn_slowpath(struct rvt_qp *qp, struct hfi1_packet *pkt,
669 + bool do_cnp)
670 + {
671 + struct hfi1_ibport *ibp = to_iport(qp->ibqp.device, qp->port_num);
672 ++ struct hfi1_pportdata *ppd = ppd_from_ibp(ibp);
673 + struct ib_other_headers *ohdr = pkt->ohdr;
674 + struct ib_grh *grh = pkt->grh;
675 + u32 rqpn = 0, bth1;
676 +- u16 pkey, rlid, dlid = ib_get_dlid(pkt->hdr);
677 ++ u16 pkey;
678 ++ u32 rlid, slid, dlid = 0;
679 + u8 hdr_type, sc, svc_type;
680 + bool is_mcast = false;
681 +
682 ++ /* can be called from prescan */
683 + if (pkt->etype == RHF_RCV_TYPE_BYPASS) {
684 + is_mcast = hfi1_is_16B_mcast(dlid);
685 + pkey = hfi1_16B_get_pkey(pkt->hdr);
686 + sc = hfi1_16B_get_sc(pkt->hdr);
687 ++ dlid = hfi1_16B_get_dlid(pkt->hdr);
688 ++ slid = hfi1_16B_get_slid(pkt->hdr);
689 + hdr_type = HFI1_PKT_TYPE_16B;
690 + } else {
691 + is_mcast = (dlid > be16_to_cpu(IB_MULTICAST_LID_BASE)) &&
692 + (dlid != be16_to_cpu(IB_LID_PERMISSIVE));
693 + pkey = ib_bth_get_pkey(ohdr);
694 + sc = hfi1_9B_get_sc5(pkt->hdr, pkt->rhf);
695 ++ dlid = ib_get_dlid(pkt->hdr);
696 ++ slid = ib_get_slid(pkt->hdr);
697 + hdr_type = HFI1_PKT_TYPE_9B;
698 + }
699 +
700 + switch (qp->ibqp.qp_type) {
701 ++ case IB_QPT_UD:
702 ++ dlid = ppd->lid;
703 ++ rlid = slid;
704 ++ rqpn = ib_get_sqpn(pkt->ohdr);
705 ++ svc_type = IB_CC_SVCTYPE_UD;
706 ++ break;
707 + case IB_QPT_SMI:
708 + case IB_QPT_GSI:
709 +- case IB_QPT_UD:
710 +- rlid = ib_get_slid(pkt->hdr);
711 ++ rlid = slid;
712 + rqpn = ib_get_sqpn(pkt->ohdr);
713 + svc_type = IB_CC_SVCTYPE_UD;
714 + break;
715 +@@ -481,7 +493,6 @@ void hfi1_process_ecn_slowpath(struct rvt_qp *qp, struct hfi1_packet *pkt,
716 + dlid, rlid, sc, grh);
717 +
718 + if (!is_mcast && (bth1 & IB_BECN_SMASK)) {
719 +- struct hfi1_pportdata *ppd = ppd_from_ibp(ibp);
720 + u32 lqpn = bth1 & RVT_QPN_MASK;
721 + u8 sl = ibp->sc_to_sl[sc];
722 +
723 +diff --git a/drivers/infiniband/hw/hfi1/hfi.h b/drivers/infiniband/hw/hfi1/hfi.h
724 +index 90bc8c76d2ca..43050006f301 100644
725 +--- a/drivers/infiniband/hw/hfi1/hfi.h
726 ++++ b/drivers/infiniband/hw/hfi1/hfi.h
727 +@@ -1538,13 +1538,13 @@ void set_link_ipg(struct hfi1_pportdata *ppd);
728 + void process_becn(struct hfi1_pportdata *ppd, u8 sl, u32 rlid, u32 lqpn,
729 + u32 rqpn, u8 svc_type);
730 + void return_cnp(struct hfi1_ibport *ibp, struct rvt_qp *qp, u32 remote_qpn,
731 +- u32 pkey, u32 slid, u32 dlid, u8 sc5,
732 ++ u16 pkey, u32 slid, u32 dlid, u8 sc5,
733 + const struct ib_grh *old_grh);
734 + void return_cnp_16B(struct hfi1_ibport *ibp, struct rvt_qp *qp,
735 +- u32 remote_qpn, u32 pkey, u32 slid, u32 dlid,
736 ++ u32 remote_qpn, u16 pkey, u32 slid, u32 dlid,
737 + u8 sc5, const struct ib_grh *old_grh);
738 + typedef void (*hfi1_handle_cnp)(struct hfi1_ibport *ibp, struct rvt_qp *qp,
739 +- u32 remote_qpn, u32 pkey, u32 slid, u32 dlid,
740 ++ u32 remote_qpn, u16 pkey, u32 slid, u32 dlid,
741 + u8 sc5, const struct ib_grh *old_grh);
742 +
743 + #define PKEY_CHECK_INVALID -1
744 +@@ -2438,7 +2438,7 @@ static inline void hfi1_make_16b_hdr(struct hfi1_16b_header *hdr,
745 + ((slid >> OPA_16B_SLID_SHIFT) << OPA_16B_SLID_HIGH_SHIFT);
746 + lrh2 = (lrh2 & ~OPA_16B_DLID_MASK) |
747 + ((dlid >> OPA_16B_DLID_SHIFT) << OPA_16B_DLID_HIGH_SHIFT);
748 +- lrh2 = (lrh2 & ~OPA_16B_PKEY_MASK) | (pkey << OPA_16B_PKEY_SHIFT);
749 ++ lrh2 = (lrh2 & ~OPA_16B_PKEY_MASK) | ((u32)pkey << OPA_16B_PKEY_SHIFT);
750 + lrh2 = (lrh2 & ~OPA_16B_L4_MASK) | l4;
751 +
752 + hdr->lrh[0] = lrh0;
753 +diff --git a/drivers/infiniband/hw/hfi1/init.c b/drivers/infiniband/hw/hfi1/init.c
754 +index 33eba2356742..b27fe75c7102 100644
755 +--- a/drivers/infiniband/hw/hfi1/init.c
756 ++++ b/drivers/infiniband/hw/hfi1/init.c
757 +@@ -1265,6 +1265,8 @@ struct hfi1_devdata *hfi1_alloc_devdata(struct pci_dev *pdev, size_t extra)
758 + return ERR_PTR(-ENOMEM);
759 + dd->num_pports = nports;
760 + dd->pport = (struct hfi1_pportdata *)(dd + 1);
761 ++ dd->pcidev = pdev;
762 ++ pci_set_drvdata(pdev, dd);
763 +
764 + INIT_LIST_HEAD(&dd->list);
765 + idr_preload(GFP_KERNEL);
766 +diff --git a/drivers/infiniband/hw/hfi1/pcie.c b/drivers/infiniband/hw/hfi1/pcie.c
767 +index 83d66e862207..c1c982908b4b 100644
768 +--- a/drivers/infiniband/hw/hfi1/pcie.c
769 ++++ b/drivers/infiniband/hw/hfi1/pcie.c
770 +@@ -163,9 +163,6 @@ int hfi1_pcie_ddinit(struct hfi1_devdata *dd, struct pci_dev *pdev)
771 + resource_size_t addr;
772 + int ret = 0;
773 +
774 +- dd->pcidev = pdev;
775 +- pci_set_drvdata(pdev, dd);
776 +-
777 + addr = pci_resource_start(pdev, 0);
778 + len = pci_resource_len(pdev, 0);
779 +
780 +diff --git a/drivers/infiniband/hw/hfi1/ruc.c b/drivers/infiniband/hw/hfi1/ruc.c
781 +index 3daa94bdae3a..c0071ca4147a 100644
782 +--- a/drivers/infiniband/hw/hfi1/ruc.c
783 ++++ b/drivers/infiniband/hw/hfi1/ruc.c
784 +@@ -733,6 +733,20 @@ static inline void hfi1_make_ruc_bth(struct rvt_qp *qp,
785 + ohdr->bth[2] = cpu_to_be32(bth2);
786 + }
787 +
788 ++/**
789 ++ * hfi1_make_ruc_header_16B - build a 16B header
790 ++ * @qp: the queue pair
791 ++ * @ohdr: a pointer to the destination header memory
792 ++ * @bth0: bth0 passed in from the RC/UC builder
793 ++ * @bth2: bth2 passed in from the RC/UC builder
794 ++ * @middle: non zero implies indicates ahg "could" be used
795 ++ * @ps: the current packet state
796 ++ *
797 ++ * This routine may disarm ahg under these situations:
798 ++ * - packet needs a GRH
799 ++ * - BECN needed
800 ++ * - migration state not IB_MIG_MIGRATED
801 ++ */
802 + static inline void hfi1_make_ruc_header_16B(struct rvt_qp *qp,
803 + struct ib_other_headers *ohdr,
804 + u32 bth0, u32 bth2, int middle,
805 +@@ -777,6 +791,12 @@ static inline void hfi1_make_ruc_header_16B(struct rvt_qp *qp,
806 + else
807 + middle = 0;
808 +
809 ++ if (qp->s_flags & RVT_S_ECN) {
810 ++ qp->s_flags &= ~RVT_S_ECN;
811 ++ /* we recently received a FECN, so return a BECN */
812 ++ becn = true;
813 ++ middle = 0;
814 ++ }
815 + if (middle)
816 + build_ahg(qp, bth2);
817 + else
818 +@@ -784,11 +804,6 @@ static inline void hfi1_make_ruc_header_16B(struct rvt_qp *qp,
819 +
820 + bth0 |= pkey;
821 + bth0 |= extra_bytes << 20;
822 +- if (qp->s_flags & RVT_S_ECN) {
823 +- qp->s_flags &= ~RVT_S_ECN;
824 +- /* we recently received a FECN, so return a BECN */
825 +- becn = true;
826 +- }
827 + hfi1_make_ruc_bth(qp, ohdr, bth0, bth1, bth2);
828 +
829 + if (!ppd->lid)
830 +@@ -806,6 +821,20 @@ static inline void hfi1_make_ruc_header_16B(struct rvt_qp *qp,
831 + pkey, becn, 0, l4, priv->s_sc);
832 + }
833 +
834 ++/**
835 ++ * hfi1_make_ruc_header_9B - build a 9B header
836 ++ * @qp: the queue pair
837 ++ * @ohdr: a pointer to the destination header memory
838 ++ * @bth0: bth0 passed in from the RC/UC builder
839 ++ * @bth2: bth2 passed in from the RC/UC builder
840 ++ * @middle: non zero implies indicates ahg "could" be used
841 ++ * @ps: the current packet state
842 ++ *
843 ++ * This routine may disarm ahg under these situations:
844 ++ * - packet needs a GRH
845 ++ * - BECN needed
846 ++ * - migration state not IB_MIG_MIGRATED
847 ++ */
848 + static inline void hfi1_make_ruc_header_9B(struct rvt_qp *qp,
849 + struct ib_other_headers *ohdr,
850 + u32 bth0, u32 bth2, int middle,
851 +@@ -839,6 +868,12 @@ static inline void hfi1_make_ruc_header_9B(struct rvt_qp *qp,
852 + else
853 + middle = 0;
854 +
855 ++ if (qp->s_flags & RVT_S_ECN) {
856 ++ qp->s_flags &= ~RVT_S_ECN;
857 ++ /* we recently received a FECN, so return a BECN */
858 ++ bth1 |= (IB_BECN_MASK << IB_BECN_SHIFT);
859 ++ middle = 0;
860 ++ }
861 + if (middle)
862 + build_ahg(qp, bth2);
863 + else
864 +@@ -846,11 +881,6 @@ static inline void hfi1_make_ruc_header_9B(struct rvt_qp *qp,
865 +
866 + bth0 |= pkey;
867 + bth0 |= extra_bytes << 20;
868 +- if (qp->s_flags & RVT_S_ECN) {
869 +- qp->s_flags &= ~RVT_S_ECN;
870 +- /* we recently received a FECN, so return a BECN */
871 +- bth1 |= (IB_BECN_MASK << IB_BECN_SHIFT);
872 +- }
873 + hfi1_make_ruc_bth(qp, ohdr, bth0, bth1, bth2);
874 + hfi1_make_ib_hdr(&ps->s_txreq->phdr.hdr.ibh,
875 + lrh0,
876 +diff --git a/drivers/infiniband/hw/hfi1/ud.c b/drivers/infiniband/hw/hfi1/ud.c
877 +index bcf3b0bebac8..69c17a5ef038 100644
878 +--- a/drivers/infiniband/hw/hfi1/ud.c
879 ++++ b/drivers/infiniband/hw/hfi1/ud.c
880 +@@ -628,7 +628,7 @@ int hfi1_lookup_pkey_idx(struct hfi1_ibport *ibp, u16 pkey)
881 + }
882 +
883 + void return_cnp_16B(struct hfi1_ibport *ibp, struct rvt_qp *qp,
884 +- u32 remote_qpn, u32 pkey, u32 slid, u32 dlid,
885 ++ u32 remote_qpn, u16 pkey, u32 slid, u32 dlid,
886 + u8 sc5, const struct ib_grh *old_grh)
887 + {
888 + u64 pbc, pbc_flags = 0;
889 +@@ -687,7 +687,7 @@ void return_cnp_16B(struct hfi1_ibport *ibp, struct rvt_qp *qp,
890 + }
891 +
892 + void return_cnp(struct hfi1_ibport *ibp, struct rvt_qp *qp, u32 remote_qpn,
893 +- u32 pkey, u32 slid, u32 dlid, u8 sc5,
894 ++ u16 pkey, u32 slid, u32 dlid, u8 sc5,
895 + const struct ib_grh *old_grh)
896 + {
897 + u64 pbc, pbc_flags = 0;
898 +diff --git a/drivers/infiniband/hw/mlx4/qp.c b/drivers/infiniband/hw/mlx4/qp.c
899 +index f045491f2c14..93af6b704d06 100644
900 +--- a/drivers/infiniband/hw/mlx4/qp.c
901 ++++ b/drivers/infiniband/hw/mlx4/qp.c
902 +@@ -673,7 +673,8 @@ static int set_qp_rss(struct mlx4_ib_dev *dev, struct mlx4_ib_rss *rss_ctx,
903 + MLX4_IB_RX_HASH_SRC_PORT_TCP |
904 + MLX4_IB_RX_HASH_DST_PORT_TCP |
905 + MLX4_IB_RX_HASH_SRC_PORT_UDP |
906 +- MLX4_IB_RX_HASH_DST_PORT_UDP)) {
907 ++ MLX4_IB_RX_HASH_DST_PORT_UDP |
908 ++ MLX4_IB_RX_HASH_INNER)) {
909 + pr_debug("RX Hash fields_mask has unsupported mask (0x%llx)\n",
910 + ucmd->rx_hash_fields_mask);
911 + return (-EOPNOTSUPP);
912 +diff --git a/drivers/infiniband/hw/mlx5/Kconfig b/drivers/infiniband/hw/mlx5/Kconfig
913 +index bce263b92821..fb4d77be019b 100644
914 +--- a/drivers/infiniband/hw/mlx5/Kconfig
915 ++++ b/drivers/infiniband/hw/mlx5/Kconfig
916 +@@ -1,6 +1,7 @@
917 + config MLX5_INFINIBAND
918 + tristate "Mellanox Connect-IB HCA support"
919 + depends on NETDEVICES && ETHERNET && PCI && MLX5_CORE
920 ++ depends on INFINIBAND_USER_ACCESS || INFINIBAND_USER_ACCESS=n
921 + ---help---
922 + This driver provides low-level InfiniBand support for
923 + Mellanox Connect-IB PCI Express host channel adapters (HCAs).
924 +diff --git a/drivers/infiniband/hw/mlx5/mr.c b/drivers/infiniband/hw/mlx5/mr.c
925 +index 6857c61bdee1..deccd91c2361 100644
926 +--- a/drivers/infiniband/hw/mlx5/mr.c
927 ++++ b/drivers/infiniband/hw/mlx5/mr.c
928 +@@ -836,25 +836,28 @@ static int mr_umem_get(struct ib_pd *pd, u64 start, u64 length,
929 + int *order)
930 + {
931 + struct mlx5_ib_dev *dev = to_mdev(pd->device);
932 ++ struct ib_umem *u;
933 + int err;
934 +
935 +- *umem = ib_umem_get(pd->uobject->context, start, length,
936 +- access_flags, 0);
937 +- err = PTR_ERR_OR_ZERO(*umem);
938 ++ *umem = NULL;
939 ++
940 ++ u = ib_umem_get(pd->uobject->context, start, length, access_flags, 0);
941 ++ err = PTR_ERR_OR_ZERO(u);
942 + if (err) {
943 +- *umem = NULL;
944 +- mlx5_ib_err(dev, "umem get failed (%d)\n", err);
945 ++ mlx5_ib_dbg(dev, "umem get failed (%d)\n", err);
946 + return err;
947 + }
948 +
949 +- mlx5_ib_cont_pages(*umem, start, MLX5_MKEY_PAGE_SHIFT_MASK, npages,
950 ++ mlx5_ib_cont_pages(u, start, MLX5_MKEY_PAGE_SHIFT_MASK, npages,
951 + page_shift, ncont, order);
952 + if (!*npages) {
953 + mlx5_ib_warn(dev, "avoid zero region\n");
954 +- ib_umem_release(*umem);
955 ++ ib_umem_release(u);
956 + return -EINVAL;
957 + }
958 +
959 ++ *umem = u;
960 ++
961 + mlx5_ib_dbg(dev, "npages %d, ncont %d, order %d, page_shift %d\n",
962 + *npages, *ncont, *order, *page_shift);
963 +
964 +@@ -1343,13 +1346,12 @@ int mlx5_ib_rereg_user_mr(struct ib_mr *ib_mr, int flags, u64 start,
965 + int access_flags = flags & IB_MR_REREG_ACCESS ?
966 + new_access_flags :
967 + mr->access_flags;
968 +- u64 addr = (flags & IB_MR_REREG_TRANS) ? virt_addr : mr->umem->address;
969 +- u64 len = (flags & IB_MR_REREG_TRANS) ? length : mr->umem->length;
970 + int page_shift = 0;
971 + int upd_flags = 0;
972 + int npages = 0;
973 + int ncont = 0;
974 + int order = 0;
975 ++ u64 addr, len;
976 + int err;
977 +
978 + mlx5_ib_dbg(dev, "start 0x%llx, virt_addr 0x%llx, length 0x%llx, access_flags 0x%x\n",
979 +@@ -1357,6 +1359,17 @@ int mlx5_ib_rereg_user_mr(struct ib_mr *ib_mr, int flags, u64 start,
980 +
981 + atomic_sub(mr->npages, &dev->mdev->priv.reg_pages);
982 +
983 ++ if (!mr->umem)
984 ++ return -EINVAL;
985 ++
986 ++ if (flags & IB_MR_REREG_TRANS) {
987 ++ addr = virt_addr;
988 ++ len = length;
989 ++ } else {
990 ++ addr = mr->umem->address;
991 ++ len = mr->umem->length;
992 ++ }
993 ++
994 + if (flags != IB_MR_REREG_PD) {
995 + /*
996 + * Replace umem. This needs to be done whether or not UMR is
997 +@@ -1364,6 +1377,7 @@ int mlx5_ib_rereg_user_mr(struct ib_mr *ib_mr, int flags, u64 start,
998 + */
999 + flags |= IB_MR_REREG_TRANS;
1000 + ib_umem_release(mr->umem);
1001 ++ mr->umem = NULL;
1002 + err = mr_umem_get(pd, addr, len, access_flags, &mr->umem,
1003 + &npages, &page_shift, &ncont, &order);
1004 + if (err < 0) {
1005 +diff --git a/drivers/infiniband/hw/mlx5/qp.c b/drivers/infiniband/hw/mlx5/qp.c
1006 +index 6c424afea25f..5f0144fee2ac 100644
1007 +--- a/drivers/infiniband/hw/mlx5/qp.c
1008 ++++ b/drivers/infiniband/hw/mlx5/qp.c
1009 +@@ -256,7 +256,11 @@ static int set_rq_size(struct mlx5_ib_dev *dev, struct ib_qp_cap *cap,
1010 + } else {
1011 + if (ucmd) {
1012 + qp->rq.wqe_cnt = ucmd->rq_wqe_count;
1013 ++ if (ucmd->rq_wqe_shift > BITS_PER_BYTE * sizeof(ucmd->rq_wqe_shift))
1014 ++ return -EINVAL;
1015 + qp->rq.wqe_shift = ucmd->rq_wqe_shift;
1016 ++ if ((1 << qp->rq.wqe_shift) / sizeof(struct mlx5_wqe_data_seg) < qp->wq_sig)
1017 ++ return -EINVAL;
1018 + qp->rq.max_gs = (1 << qp->rq.wqe_shift) / sizeof(struct mlx5_wqe_data_seg) - qp->wq_sig;
1019 + qp->rq.max_post = qp->rq.wqe_cnt;
1020 + } else {
1021 +@@ -2420,18 +2424,18 @@ enum {
1022 +
1023 + static int ib_rate_to_mlx5(struct mlx5_ib_dev *dev, u8 rate)
1024 + {
1025 +- if (rate == IB_RATE_PORT_CURRENT) {
1026 ++ if (rate == IB_RATE_PORT_CURRENT)
1027 + return 0;
1028 +- } else if (rate < IB_RATE_2_5_GBPS || rate > IB_RATE_300_GBPS) {
1029 ++
1030 ++ if (rate < IB_RATE_2_5_GBPS || rate > IB_RATE_300_GBPS)
1031 + return -EINVAL;
1032 +- } else {
1033 +- while (rate != IB_RATE_2_5_GBPS &&
1034 +- !(1 << (rate + MLX5_STAT_RATE_OFFSET) &
1035 +- MLX5_CAP_GEN(dev->mdev, stat_rate_support)))
1036 +- --rate;
1037 +- }
1038 +
1039 +- return rate + MLX5_STAT_RATE_OFFSET;
1040 ++ while (rate != IB_RATE_PORT_CURRENT &&
1041 ++ !(1 << (rate + MLX5_STAT_RATE_OFFSET) &
1042 ++ MLX5_CAP_GEN(dev->mdev, stat_rate_support)))
1043 ++ --rate;
1044 ++
1045 ++ return rate ? rate + MLX5_STAT_RATE_OFFSET : rate;
1046 + }
1047 +
1048 + static int modify_raw_packet_eth_prio(struct mlx5_core_dev *dev,
1049 +diff --git a/drivers/input/input-leds.c b/drivers/input/input-leds.c
1050 +index 766bf2660116..5f04b2d94635 100644
1051 +--- a/drivers/input/input-leds.c
1052 ++++ b/drivers/input/input-leds.c
1053 +@@ -88,6 +88,7 @@ static int input_leds_connect(struct input_handler *handler,
1054 + const struct input_device_id *id)
1055 + {
1056 + struct input_leds *leds;
1057 ++ struct input_led *led;
1058 + unsigned int num_leds;
1059 + unsigned int led_code;
1060 + int led_no;
1061 +@@ -119,14 +120,13 @@ static int input_leds_connect(struct input_handler *handler,
1062 +
1063 + led_no = 0;
1064 + for_each_set_bit(led_code, dev->ledbit, LED_CNT) {
1065 +- struct input_led *led = &leds->leds[led_no];
1066 ++ if (!input_led_info[led_code].name)
1067 ++ continue;
1068 +
1069 ++ led = &leds->leds[led_no];
1070 + led->handle = &leds->handle;
1071 + led->code = led_code;
1072 +
1073 +- if (!input_led_info[led_code].name)
1074 +- continue;
1075 +-
1076 + led->cdev.name = kasprintf(GFP_KERNEL, "%s::%s",
1077 + dev_name(&dev->dev),
1078 + input_led_info[led_code].name);
1079 +diff --git a/drivers/input/touchscreen/atmel_mxt_ts.c b/drivers/input/touchscreen/atmel_mxt_ts.c
1080 +index 7659bc48f1db..429b694405c7 100644
1081 +--- a/drivers/input/touchscreen/atmel_mxt_ts.c
1082 ++++ b/drivers/input/touchscreen/atmel_mxt_ts.c
1083 +@@ -3030,6 +3030,15 @@ static const struct dmi_system_id mxt_dmi_table[] = {
1084 + },
1085 + .driver_data = samus_platform_data,
1086 + },
1087 ++ {
1088 ++ /* Samsung Chromebook Pro */
1089 ++ .ident = "Samsung Chromebook Pro",
1090 ++ .matches = {
1091 ++ DMI_MATCH(DMI_SYS_VENDOR, "Google"),
1092 ++ DMI_MATCH(DMI_PRODUCT_NAME, "Caroline"),
1093 ++ },
1094 ++ .driver_data = samus_platform_data,
1095 ++ },
1096 + {
1097 + /* Other Google Chromebooks */
1098 + .ident = "Chromebook",
1099 +diff --git a/drivers/irqchip/qcom-irq-combiner.c b/drivers/irqchip/qcom-irq-combiner.c
1100 +index f31265937439..7f0c0be322e0 100644
1101 +--- a/drivers/irqchip/qcom-irq-combiner.c
1102 ++++ b/drivers/irqchip/qcom-irq-combiner.c
1103 +@@ -1,4 +1,4 @@
1104 +-/* Copyright (c) 2015-2016, The Linux Foundation. All rights reserved.
1105 ++/* Copyright (c) 2015-2018, The Linux Foundation. All rights reserved.
1106 + *
1107 + * This program is free software; you can redistribute it and/or modify
1108 + * it under the terms of the GNU General Public License version 2 and
1109 +@@ -68,7 +68,7 @@ static void combiner_handle_irq(struct irq_desc *desc)
1110 +
1111 + bit = readl_relaxed(combiner->regs[reg].addr);
1112 + status = bit & combiner->regs[reg].enabled;
1113 +- if (!status)
1114 ++ if (bit && !status)
1115 + pr_warn_ratelimited("Unexpected IRQ on CPU%d: (%08x %08lx %p)\n",
1116 + smp_processor_id(), bit,
1117 + combiner->regs[reg].enabled,
1118 +diff --git a/drivers/net/usb/qmi_wwan.c b/drivers/net/usb/qmi_wwan.c
1119 +index c853e7410f5a..51c68fc416fa 100644
1120 +--- a/drivers/net/usb/qmi_wwan.c
1121 ++++ b/drivers/net/usb/qmi_wwan.c
1122 +@@ -1098,6 +1098,7 @@ static const struct usb_device_id products[] = {
1123 + {QMI_FIXED_INTF(0x05c6, 0x9080, 8)},
1124 + {QMI_FIXED_INTF(0x05c6, 0x9083, 3)},
1125 + {QMI_FIXED_INTF(0x05c6, 0x9084, 4)},
1126 ++ {QMI_FIXED_INTF(0x05c6, 0x90b2, 3)}, /* ublox R410M */
1127 + {QMI_FIXED_INTF(0x05c6, 0x920d, 0)},
1128 + {QMI_FIXED_INTF(0x05c6, 0x920d, 5)},
1129 + {QMI_QUIRK_SET_DTR(0x05c6, 0x9625, 4)}, /* YUGA CLM920-NC5 */
1130 +diff --git a/drivers/net/wireless/realtek/rtlwifi/btcoexist/halbtcoutsrc.c b/drivers/net/wireless/realtek/rtlwifi/btcoexist/halbtcoutsrc.c
1131 +index 1404729441a2..71f9eee8fbe5 100644
1132 +--- a/drivers/net/wireless/realtek/rtlwifi/btcoexist/halbtcoutsrc.c
1133 ++++ b/drivers/net/wireless/realtek/rtlwifi/btcoexist/halbtcoutsrc.c
1134 +@@ -158,16 +158,6 @@ static u8 halbtc_get_wifi_central_chnl(struct btc_coexist *btcoexist)
1135 +
1136 + static u8 rtl_get_hwpg_single_ant_path(struct rtl_priv *rtlpriv)
1137 + {
1138 +- struct rtl_mod_params *mod_params = rtlpriv->cfg->mod_params;
1139 +-
1140 +- /* override ant_num / ant_path */
1141 +- if (mod_params->ant_sel) {
1142 +- rtlpriv->btcoexist.btc_info.ant_num =
1143 +- (mod_params->ant_sel == 1 ? ANT_X2 : ANT_X1);
1144 +-
1145 +- rtlpriv->btcoexist.btc_info.single_ant_path =
1146 +- (mod_params->ant_sel == 1 ? 0 : 1);
1147 +- }
1148 + return rtlpriv->btcoexist.btc_info.single_ant_path;
1149 + }
1150 +
1151 +@@ -178,7 +168,6 @@ static u8 rtl_get_hwpg_bt_type(struct rtl_priv *rtlpriv)
1152 +
1153 + static u8 rtl_get_hwpg_ant_num(struct rtl_priv *rtlpriv)
1154 + {
1155 +- struct rtl_mod_params *mod_params = rtlpriv->cfg->mod_params;
1156 + u8 num;
1157 +
1158 + if (rtlpriv->btcoexist.btc_info.ant_num == ANT_X2)
1159 +@@ -186,10 +175,6 @@ static u8 rtl_get_hwpg_ant_num(struct rtl_priv *rtlpriv)
1160 + else
1161 + num = 1;
1162 +
1163 +- /* override ant_num / ant_path */
1164 +- if (mod_params->ant_sel)
1165 +- num = (mod_params->ant_sel == 1 ? ANT_X2 : ANT_X1) + 1;
1166 +-
1167 + return num;
1168 + }
1169 +
1170 +diff --git a/drivers/net/wireless/realtek/rtlwifi/rtl8723be/hw.c b/drivers/net/wireless/realtek/rtlwifi/rtl8723be/hw.c
1171 +index e7bbbc95cdb1..b4f3f91b590e 100644
1172 +--- a/drivers/net/wireless/realtek/rtlwifi/rtl8723be/hw.c
1173 ++++ b/drivers/net/wireless/realtek/rtlwifi/rtl8723be/hw.c
1174 +@@ -848,6 +848,9 @@ static bool _rtl8723be_init_mac(struct ieee80211_hw *hw)
1175 + return false;
1176 + }
1177 +
1178 ++ if (rtlpriv->cfg->ops->get_btc_status())
1179 ++ rtlpriv->btcoexist.btc_ops->btc_power_on_setting(rtlpriv);
1180 ++
1181 + bytetmp = rtl_read_byte(rtlpriv, REG_MULTI_FUNC_CTRL);
1182 + rtl_write_byte(rtlpriv, REG_MULTI_FUNC_CTRL, bytetmp | BIT(3));
1183 +
1184 +@@ -2696,21 +2699,21 @@ void rtl8723be_read_bt_coexist_info_from_hwpg(struct ieee80211_hw *hw,
1185 + rtlpriv->btcoexist.btc_info.bt_type = BT_RTL8723B;
1186 + rtlpriv->btcoexist.btc_info.ant_num = (value & 0x1);
1187 + rtlpriv->btcoexist.btc_info.single_ant_path =
1188 +- (value & 0x40); /*0xc3[6]*/
1189 ++ (value & 0x40 ? ANT_AUX : ANT_MAIN); /*0xc3[6]*/
1190 + } else {
1191 + rtlpriv->btcoexist.btc_info.btcoexist = 0;
1192 + rtlpriv->btcoexist.btc_info.bt_type = BT_RTL8723B;
1193 + rtlpriv->btcoexist.btc_info.ant_num = ANT_X2;
1194 +- rtlpriv->btcoexist.btc_info.single_ant_path = 0;
1195 ++ rtlpriv->btcoexist.btc_info.single_ant_path = ANT_MAIN;
1196 + }
1197 +
1198 + /* override ant_num / ant_path */
1199 + if (mod_params->ant_sel) {
1200 + rtlpriv->btcoexist.btc_info.ant_num =
1201 +- (mod_params->ant_sel == 1 ? ANT_X2 : ANT_X1);
1202 ++ (mod_params->ant_sel == 1 ? ANT_X1 : ANT_X2);
1203 +
1204 + rtlpriv->btcoexist.btc_info.single_ant_path =
1205 +- (mod_params->ant_sel == 1 ? 0 : 1);
1206 ++ (mod_params->ant_sel == 1 ? ANT_AUX : ANT_MAIN);
1207 + }
1208 + }
1209 +
1210 +diff --git a/drivers/net/wireless/realtek/rtlwifi/wifi.h b/drivers/net/wireless/realtek/rtlwifi/wifi.h
1211 +index 46dcb7fef195..36683364dbc7 100644
1212 +--- a/drivers/net/wireless/realtek/rtlwifi/wifi.h
1213 ++++ b/drivers/net/wireless/realtek/rtlwifi/wifi.h
1214 +@@ -2759,6 +2759,11 @@ enum bt_ant_num {
1215 + ANT_X1 = 1,
1216 + };
1217 +
1218 ++enum bt_ant_path {
1219 ++ ANT_MAIN = 0,
1220 ++ ANT_AUX = 1,
1221 ++};
1222 ++
1223 + enum bt_co_type {
1224 + BT_2WIRE = 0,
1225 + BT_ISSC_3WIRE = 1,
1226 +diff --git a/drivers/platform/x86/Kconfig b/drivers/platform/x86/Kconfig
1227 +index 51ebc5a6053f..51a1b49760ea 100644
1228 +--- a/drivers/platform/x86/Kconfig
1229 ++++ b/drivers/platform/x86/Kconfig
1230 +@@ -154,7 +154,7 @@ config DELL_LAPTOP
1231 + depends on ACPI_VIDEO || ACPI_VIDEO = n
1232 + depends on RFKILL || RFKILL = n
1233 + depends on SERIO_I8042
1234 +- select DELL_SMBIOS
1235 ++ depends on DELL_SMBIOS
1236 + select POWER_SUPPLY
1237 + select LEDS_CLASS
1238 + select NEW_LEDS
1239 +diff --git a/drivers/platform/x86/asus-wireless.c b/drivers/platform/x86/asus-wireless.c
1240 +index d4aeac3477f5..f086469ea740 100644
1241 +--- a/drivers/platform/x86/asus-wireless.c
1242 ++++ b/drivers/platform/x86/asus-wireless.c
1243 +@@ -178,8 +178,10 @@ static int asus_wireless_remove(struct acpi_device *adev)
1244 + {
1245 + struct asus_wireless_data *data = acpi_driver_data(adev);
1246 +
1247 +- if (data->wq)
1248 ++ if (data->wq) {
1249 ++ devm_led_classdev_unregister(&adev->dev, &data->led);
1250 + destroy_workqueue(data->wq);
1251 ++ }
1252 + return 0;
1253 + }
1254 +
1255 +diff --git a/drivers/target/target_core_iblock.c b/drivers/target/target_core_iblock.c
1256 +index 07c814c42648..60429011292a 100644
1257 +--- a/drivers/target/target_core_iblock.c
1258 ++++ b/drivers/target/target_core_iblock.c
1259 +@@ -427,8 +427,8 @@ iblock_execute_zero_out(struct block_device *bdev, struct se_cmd *cmd)
1260 + {
1261 + struct se_device *dev = cmd->se_dev;
1262 + struct scatterlist *sg = &cmd->t_data_sg[0];
1263 +- unsigned char *buf, zero = 0x00, *p = &zero;
1264 +- int rc, ret;
1265 ++ unsigned char *buf, *not_zero;
1266 ++ int ret;
1267 +
1268 + buf = kmap(sg_page(sg)) + sg->offset;
1269 + if (!buf)
1270 +@@ -437,10 +437,10 @@ iblock_execute_zero_out(struct block_device *bdev, struct se_cmd *cmd)
1271 + * Fall back to block_execute_write_same() slow-path if
1272 + * incoming WRITE_SAME payload does not contain zeros.
1273 + */
1274 +- rc = memcmp(buf, p, cmd->data_length);
1275 ++ not_zero = memchr_inv(buf, 0x00, cmd->data_length);
1276 + kunmap(sg_page(sg));
1277 +
1278 +- if (rc)
1279 ++ if (not_zero)
1280 + return TCM_LOGICAL_UNIT_COMMUNICATION_FAILURE;
1281 +
1282 + ret = blkdev_issue_zeroout(bdev,
1283 +diff --git a/drivers/usb/core/config.c b/drivers/usb/core/config.c
1284 +index c821b4b9647e..7b5cb28ffb35 100644
1285 +--- a/drivers/usb/core/config.c
1286 ++++ b/drivers/usb/core/config.c
1287 +@@ -191,7 +191,9 @@ static const unsigned short full_speed_maxpacket_maxes[4] = {
1288 + static const unsigned short high_speed_maxpacket_maxes[4] = {
1289 + [USB_ENDPOINT_XFER_CONTROL] = 64,
1290 + [USB_ENDPOINT_XFER_ISOC] = 1024,
1291 +- [USB_ENDPOINT_XFER_BULK] = 512,
1292 ++
1293 ++ /* Bulk should be 512, but some devices use 1024: we will warn below */
1294 ++ [USB_ENDPOINT_XFER_BULK] = 1024,
1295 + [USB_ENDPOINT_XFER_INT] = 1024,
1296 + };
1297 + static const unsigned short super_speed_maxpacket_maxes[4] = {
1298 +diff --git a/drivers/usb/dwc3/gadget.c b/drivers/usb/dwc3/gadget.c
1299 +index 100454c514d5..726ae915c03a 100644
1300 +--- a/drivers/usb/dwc3/gadget.c
1301 ++++ b/drivers/usb/dwc3/gadget.c
1302 +@@ -1424,7 +1424,7 @@ static int dwc3_gadget_ep_dequeue(struct usb_ep *ep,
1303 + dwc->lock);
1304 +
1305 + if (!r->trb)
1306 +- goto out1;
1307 ++ goto out0;
1308 +
1309 + if (r->num_pending_sgs) {
1310 + struct dwc3_trb *trb;
1311 +diff --git a/drivers/usb/host/xhci.c b/drivers/usb/host/xhci.c
1312 +index 5d37700ae4b0..b60a02c50b89 100644
1313 +--- a/drivers/usb/host/xhci.c
1314 ++++ b/drivers/usb/host/xhci.c
1315 +@@ -3548,6 +3548,7 @@ static void xhci_free_dev(struct usb_hcd *hcd, struct usb_device *udev)
1316 + del_timer_sync(&virt_dev->eps[i].stop_cmd_timer);
1317 + }
1318 + xhci_debugfs_remove_slot(xhci, udev->slot_id);
1319 ++ virt_dev->udev = NULL;
1320 + ret = xhci_disable_slot(xhci, udev->slot_id);
1321 + if (ret)
1322 + xhci_free_virt_device(xhci, udev->slot_id);
1323 +diff --git a/drivers/usb/musb/musb_gadget.c b/drivers/usb/musb/musb_gadget.c
1324 +index 293e5b8da565..21b87a077c69 100644
1325 +--- a/drivers/usb/musb/musb_gadget.c
1326 ++++ b/drivers/usb/musb/musb_gadget.c
1327 +@@ -417,7 +417,6 @@ void musb_g_tx(struct musb *musb, u8 epnum)
1328 + req = next_request(musb_ep);
1329 + request = &req->request;
1330 +
1331 +- trace_musb_req_tx(req);
1332 + csr = musb_readw(epio, MUSB_TXCSR);
1333 + musb_dbg(musb, "<== %s, txcsr %04x", musb_ep->end_point.name, csr);
1334 +
1335 +@@ -456,6 +455,8 @@ void musb_g_tx(struct musb *musb, u8 epnum)
1336 + u8 is_dma = 0;
1337 + bool short_packet = false;
1338 +
1339 ++ trace_musb_req_tx(req);
1340 ++
1341 + if (dma && (csr & MUSB_TXCSR_DMAENAB)) {
1342 + is_dma = 1;
1343 + csr |= MUSB_TXCSR_P_WZC_BITS;
1344 +diff --git a/drivers/usb/musb/musb_host.c b/drivers/usb/musb/musb_host.c
1345 +index 45ed32c2cba9..0ee0c6d7f194 100644
1346 +--- a/drivers/usb/musb/musb_host.c
1347 ++++ b/drivers/usb/musb/musb_host.c
1348 +@@ -996,7 +996,9 @@ static void musb_bulk_nak_timeout(struct musb *musb, struct musb_hw_ep *ep,
1349 + /* set tx_reinit and schedule the next qh */
1350 + ep->tx_reinit = 1;
1351 + }
1352 +- musb_start_urb(musb, is_in, next_qh);
1353 ++
1354 ++ if (next_qh)
1355 ++ musb_start_urb(musb, is_in, next_qh);
1356 + }
1357 + }
1358 +
1359 +diff --git a/drivers/usb/serial/option.c b/drivers/usb/serial/option.c
1360 +index 2d8d9150da0c..10c7ab427a52 100644
1361 +--- a/drivers/usb/serial/option.c
1362 ++++ b/drivers/usb/serial/option.c
1363 +@@ -233,6 +233,8 @@ static void option_instat_callback(struct urb *urb);
1364 + /* These Quectel products use Qualcomm's vendor ID */
1365 + #define QUECTEL_PRODUCT_UC20 0x9003
1366 + #define QUECTEL_PRODUCT_UC15 0x9090
1367 ++/* These u-blox products use Qualcomm's vendor ID */
1368 ++#define UBLOX_PRODUCT_R410M 0x90b2
1369 + /* These Yuga products use Qualcomm's vendor ID */
1370 + #define YUGA_PRODUCT_CLM920_NC5 0x9625
1371 +
1372 +@@ -548,151 +550,15 @@ static void option_instat_callback(struct urb *urb);
1373 + #define WETELECOM_PRODUCT_6802 0x6802
1374 + #define WETELECOM_PRODUCT_WMD300 0x6803
1375 +
1376 +-struct option_blacklist_info {
1377 +- /* bitmask of interface numbers blacklisted for send_setup */
1378 +- const unsigned long sendsetup;
1379 +- /* bitmask of interface numbers that are reserved */
1380 +- const unsigned long reserved;
1381 +-};
1382 +
1383 +-static const struct option_blacklist_info four_g_w14_blacklist = {
1384 +- .sendsetup = BIT(0) | BIT(1),
1385 +-};
1386 ++/* Device flags */
1387 +
1388 +-static const struct option_blacklist_info four_g_w100_blacklist = {
1389 +- .sendsetup = BIT(1) | BIT(2),
1390 +- .reserved = BIT(3),
1391 +-};
1392 ++/* Interface does not support modem-control requests */
1393 ++#define NCTRL(ifnum) ((BIT(ifnum) & 0xff) << 8)
1394 +
1395 +-static const struct option_blacklist_info alcatel_x200_blacklist = {
1396 +- .sendsetup = BIT(0) | BIT(1),
1397 +- .reserved = BIT(4),
1398 +-};
1399 ++/* Interface is reserved */
1400 ++#define RSVD(ifnum) ((BIT(ifnum) & 0xff) << 0)
1401 +
1402 +-static const struct option_blacklist_info zte_0037_blacklist = {
1403 +- .sendsetup = BIT(0) | BIT(1),
1404 +-};
1405 +-
1406 +-static const struct option_blacklist_info zte_k3765_z_blacklist = {
1407 +- .sendsetup = BIT(0) | BIT(1) | BIT(2),
1408 +- .reserved = BIT(4),
1409 +-};
1410 +-
1411 +-static const struct option_blacklist_info zte_ad3812_z_blacklist = {
1412 +- .sendsetup = BIT(0) | BIT(1) | BIT(2),
1413 +-};
1414 +-
1415 +-static const struct option_blacklist_info zte_mc2718_z_blacklist = {
1416 +- .sendsetup = BIT(1) | BIT(2) | BIT(3) | BIT(4),
1417 +-};
1418 +-
1419 +-static const struct option_blacklist_info zte_mc2716_z_blacklist = {
1420 +- .sendsetup = BIT(1) | BIT(2) | BIT(3),
1421 +-};
1422 +-
1423 +-static const struct option_blacklist_info zte_me3620_mbim_blacklist = {
1424 +- .reserved = BIT(2) | BIT(3) | BIT(4),
1425 +-};
1426 +-
1427 +-static const struct option_blacklist_info zte_me3620_xl_blacklist = {
1428 +- .reserved = BIT(3) | BIT(4) | BIT(5),
1429 +-};
1430 +-
1431 +-static const struct option_blacklist_info zte_zm8620_x_blacklist = {
1432 +- .reserved = BIT(3) | BIT(4) | BIT(5),
1433 +-};
1434 +-
1435 +-static const struct option_blacklist_info huawei_cdc12_blacklist = {
1436 +- .reserved = BIT(1) | BIT(2),
1437 +-};
1438 +-
1439 +-static const struct option_blacklist_info net_intf0_blacklist = {
1440 +- .reserved = BIT(0),
1441 +-};
1442 +-
1443 +-static const struct option_blacklist_info net_intf1_blacklist = {
1444 +- .reserved = BIT(1),
1445 +-};
1446 +-
1447 +-static const struct option_blacklist_info net_intf2_blacklist = {
1448 +- .reserved = BIT(2),
1449 +-};
1450 +-
1451 +-static const struct option_blacklist_info net_intf3_blacklist = {
1452 +- .reserved = BIT(3),
1453 +-};
1454 +-
1455 +-static const struct option_blacklist_info net_intf4_blacklist = {
1456 +- .reserved = BIT(4),
1457 +-};
1458 +-
1459 +-static const struct option_blacklist_info net_intf5_blacklist = {
1460 +- .reserved = BIT(5),
1461 +-};
1462 +-
1463 +-static const struct option_blacklist_info net_intf6_blacklist = {
1464 +- .reserved = BIT(6),
1465 +-};
1466 +-
1467 +-static const struct option_blacklist_info zte_mf626_blacklist = {
1468 +- .sendsetup = BIT(0) | BIT(1),
1469 +- .reserved = BIT(4),
1470 +-};
1471 +-
1472 +-static const struct option_blacklist_info zte_1255_blacklist = {
1473 +- .reserved = BIT(3) | BIT(4),
1474 +-};
1475 +-
1476 +-static const struct option_blacklist_info simcom_sim7100e_blacklist = {
1477 +- .reserved = BIT(5) | BIT(6),
1478 +-};
1479 +-
1480 +-static const struct option_blacklist_info telit_me910_blacklist = {
1481 +- .sendsetup = BIT(0),
1482 +- .reserved = BIT(1) | BIT(3),
1483 +-};
1484 +-
1485 +-static const struct option_blacklist_info telit_me910_dual_modem_blacklist = {
1486 +- .sendsetup = BIT(0),
1487 +- .reserved = BIT(3),
1488 +-};
1489 +-
1490 +-static const struct option_blacklist_info telit_le910_blacklist = {
1491 +- .sendsetup = BIT(0),
1492 +- .reserved = BIT(1) | BIT(2),
1493 +-};
1494 +-
1495 +-static const struct option_blacklist_info telit_le920_blacklist = {
1496 +- .sendsetup = BIT(0),
1497 +- .reserved = BIT(1) | BIT(5),
1498 +-};
1499 +-
1500 +-static const struct option_blacklist_info telit_le920a4_blacklist_1 = {
1501 +- .sendsetup = BIT(0),
1502 +- .reserved = BIT(1),
1503 +-};
1504 +-
1505 +-static const struct option_blacklist_info telit_le922_blacklist_usbcfg0 = {
1506 +- .sendsetup = BIT(2),
1507 +- .reserved = BIT(0) | BIT(1) | BIT(3),
1508 +-};
1509 +-
1510 +-static const struct option_blacklist_info telit_le922_blacklist_usbcfg3 = {
1511 +- .sendsetup = BIT(0),
1512 +- .reserved = BIT(1) | BIT(2) | BIT(3),
1513 +-};
1514 +-
1515 +-static const struct option_blacklist_info cinterion_rmnet2_blacklist = {
1516 +- .reserved = BIT(4) | BIT(5),
1517 +-};
1518 +-
1519 +-static const struct option_blacklist_info yuga_clm920_nc5_blacklist = {
1520 +- .reserved = BIT(1) | BIT(4),
1521 +-};
1522 +-
1523 +-static const struct option_blacklist_info quectel_ep06_blacklist = {
1524 +- .reserved = BIT(4) | BIT(5),
1525 +-};
1526 +
1527 + static const struct usb_device_id option_ids[] = {
1528 + { USB_DEVICE(OPTION_VENDOR_ID, OPTION_PRODUCT_COLT) },
1529 +@@ -726,26 +592,26 @@ static const struct usb_device_id option_ids[] = {
1530 + { USB_DEVICE(QUANTA_VENDOR_ID, QUANTA_PRODUCT_GKE) },
1531 + { USB_DEVICE(QUANTA_VENDOR_ID, QUANTA_PRODUCT_GLE) },
1532 + { USB_DEVICE(QUANTA_VENDOR_ID, 0xea42),
1533 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1534 ++ .driver_info = RSVD(4) },
1535 + { USB_DEVICE_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0x1c05, USB_CLASS_COMM, 0x02, 0xff) },
1536 + { USB_DEVICE_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0x1c1f, USB_CLASS_COMM, 0x02, 0xff) },
1537 + { USB_DEVICE_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0x1c23, USB_CLASS_COMM, 0x02, 0xff) },
1538 + { USB_DEVICE_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, HUAWEI_PRODUCT_E173, 0xff, 0xff, 0xff),
1539 +- .driver_info = (kernel_ulong_t) &net_intf1_blacklist },
1540 ++ .driver_info = RSVD(1) },
1541 + { USB_DEVICE_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, HUAWEI_PRODUCT_E173S6, 0xff, 0xff, 0xff),
1542 +- .driver_info = (kernel_ulong_t) &net_intf1_blacklist },
1543 ++ .driver_info = RSVD(1) },
1544 + { USB_DEVICE_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, HUAWEI_PRODUCT_E1750, 0xff, 0xff, 0xff),
1545 +- .driver_info = (kernel_ulong_t) &net_intf2_blacklist },
1546 ++ .driver_info = RSVD(2) },
1547 + { USB_DEVICE_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0x1441, USB_CLASS_COMM, 0x02, 0xff) },
1548 + { USB_DEVICE_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0x1442, USB_CLASS_COMM, 0x02, 0xff) },
1549 + { USB_DEVICE_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, HUAWEI_PRODUCT_K4505, 0xff, 0xff, 0xff),
1550 +- .driver_info = (kernel_ulong_t) &huawei_cdc12_blacklist },
1551 ++ .driver_info = RSVD(1) | RSVD(2) },
1552 + { USB_DEVICE_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, HUAWEI_PRODUCT_K3765, 0xff, 0xff, 0xff),
1553 +- .driver_info = (kernel_ulong_t) &huawei_cdc12_blacklist },
1554 ++ .driver_info = RSVD(1) | RSVD(2) },
1555 + { USB_DEVICE_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0x14ac, 0xff, 0xff, 0xff), /* Huawei E1820 */
1556 +- .driver_info = (kernel_ulong_t) &net_intf1_blacklist },
1557 ++ .driver_info = RSVD(1) },
1558 + { USB_DEVICE_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, HUAWEI_PRODUCT_K4605, 0xff, 0xff, 0xff),
1559 +- .driver_info = (kernel_ulong_t) &huawei_cdc12_blacklist },
1560 ++ .driver_info = RSVD(1) | RSVD(2) },
1561 + { USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0xff, 0xff) },
1562 + { USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x01, 0x01) },
1563 + { USB_VENDOR_AND_INTERFACE_INFO(HUAWEI_VENDOR_ID, 0xff, 0x01, 0x02) },
1564 +@@ -1190,67 +1056,70 @@ static const struct usb_device_id option_ids[] = {
1565 + { USB_DEVICE(KYOCERA_VENDOR_ID, KYOCERA_PRODUCT_KPC680) },
1566 + { USB_DEVICE(QUALCOMM_VENDOR_ID, 0x6000)}, /* ZTE AC8700 */
1567 + { USB_DEVICE_AND_INTERFACE_INFO(QUALCOMM_VENDOR_ID, 0x6001, 0xff, 0xff, 0xff), /* 4G LTE usb-modem U901 */
1568 +- .driver_info = (kernel_ulong_t)&net_intf3_blacklist },
1569 ++ .driver_info = RSVD(3) },
1570 + { USB_DEVICE(QUALCOMM_VENDOR_ID, 0x6613)}, /* Onda H600/ZTE MF330 */
1571 + { USB_DEVICE(QUALCOMM_VENDOR_ID, 0x0023)}, /* ONYX 3G device */
1572 + { USB_DEVICE(QUALCOMM_VENDOR_ID, 0x9000)}, /* SIMCom SIM5218 */
1573 + /* Quectel products using Qualcomm vendor ID */
1574 + { USB_DEVICE(QUALCOMM_VENDOR_ID, QUECTEL_PRODUCT_UC15)},
1575 + { USB_DEVICE(QUALCOMM_VENDOR_ID, QUECTEL_PRODUCT_UC20),
1576 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1577 ++ .driver_info = RSVD(4) },
1578 + /* Yuga products use Qualcomm vendor ID */
1579 + { USB_DEVICE(QUALCOMM_VENDOR_ID, YUGA_PRODUCT_CLM920_NC5),
1580 +- .driver_info = (kernel_ulong_t)&yuga_clm920_nc5_blacklist },
1581 ++ .driver_info = RSVD(1) | RSVD(4) },
1582 ++ /* u-blox products using Qualcomm vendor ID */
1583 ++ { USB_DEVICE(QUALCOMM_VENDOR_ID, UBLOX_PRODUCT_R410M),
1584 ++ .driver_info = RSVD(1) | RSVD(3) },
1585 + /* Quectel products using Quectel vendor ID */
1586 + { USB_DEVICE(QUECTEL_VENDOR_ID, QUECTEL_PRODUCT_EC21),
1587 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1588 ++ .driver_info = RSVD(4) },
1589 + { USB_DEVICE(QUECTEL_VENDOR_ID, QUECTEL_PRODUCT_EC25),
1590 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1591 ++ .driver_info = RSVD(4) },
1592 + { USB_DEVICE(QUECTEL_VENDOR_ID, QUECTEL_PRODUCT_BG96),
1593 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1594 ++ .driver_info = RSVD(4) },
1595 + { USB_DEVICE(QUECTEL_VENDOR_ID, QUECTEL_PRODUCT_EP06),
1596 +- .driver_info = (kernel_ulong_t)&quectel_ep06_blacklist },
1597 ++ .driver_info = RSVD(4) | RSVD(5) },
1598 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_6001) },
1599 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_CMU_300) },
1600 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_6003),
1601 +- .driver_info = (kernel_ulong_t)&net_intf0_blacklist },
1602 ++ .driver_info = RSVD(0) },
1603 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_6004) },
1604 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_6005) },
1605 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_CGU_628A) },
1606 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_CHE_628S),
1607 +- .driver_info = (kernel_ulong_t)&net_intf0_blacklist },
1608 ++ .driver_info = RSVD(0) },
1609 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_CMU_301),
1610 +- .driver_info = (kernel_ulong_t)&net_intf0_blacklist },
1611 ++ .driver_info = RSVD(0) },
1612 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_CHU_628),
1613 +- .driver_info = (kernel_ulong_t)&net_intf0_blacklist },
1614 ++ .driver_info = RSVD(0) },
1615 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_CHU_628S) },
1616 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_CDU_680) },
1617 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_CDU_685A) },
1618 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_CHU_720S),
1619 +- .driver_info = (kernel_ulong_t)&net_intf0_blacklist },
1620 ++ .driver_info = RSVD(0) },
1621 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_7002),
1622 +- .driver_info = (kernel_ulong_t)&net_intf0_blacklist },
1623 ++ .driver_info = RSVD(0) },
1624 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_CHU_629K),
1625 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1626 ++ .driver_info = RSVD(4) },
1627 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_7004),
1628 +- .driver_info = (kernel_ulong_t)&net_intf3_blacklist },
1629 ++ .driver_info = RSVD(3) },
1630 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_7005) },
1631 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_CGU_629),
1632 +- .driver_info = (kernel_ulong_t)&net_intf5_blacklist },
1633 ++ .driver_info = RSVD(5) },
1634 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_CHU_629S),
1635 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1636 ++ .driver_info = RSVD(4) },
1637 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_CHU_720I),
1638 +- .driver_info = (kernel_ulong_t)&net_intf0_blacklist },
1639 ++ .driver_info = RSVD(0) },
1640 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_7212),
1641 +- .driver_info = (kernel_ulong_t)&net_intf0_blacklist },
1642 ++ .driver_info = RSVD(0) },
1643 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_7213),
1644 +- .driver_info = (kernel_ulong_t)&net_intf0_blacklist },
1645 ++ .driver_info = RSVD(0) },
1646 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_7251),
1647 +- .driver_info = (kernel_ulong_t)&net_intf1_blacklist },
1648 ++ .driver_info = RSVD(1) },
1649 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_7252),
1650 +- .driver_info = (kernel_ulong_t)&net_intf1_blacklist },
1651 ++ .driver_info = RSVD(1) },
1652 + { USB_DEVICE(CMOTECH_VENDOR_ID, CMOTECH_PRODUCT_7253),
1653 +- .driver_info = (kernel_ulong_t)&net_intf1_blacklist },
1654 ++ .driver_info = RSVD(1) },
1655 + { USB_DEVICE(TELIT_VENDOR_ID, TELIT_PRODUCT_UC864E) },
1656 + { USB_DEVICE(TELIT_VENDOR_ID, TELIT_PRODUCT_UC864G) },
1657 + { USB_DEVICE(TELIT_VENDOR_ID, TELIT_PRODUCT_CC864_DUAL) },
1658 +@@ -1258,38 +1127,38 @@ static const struct usb_device_id option_ids[] = {
1659 + { USB_DEVICE(TELIT_VENDOR_ID, TELIT_PRODUCT_DE910_DUAL) },
1660 + { USB_DEVICE(TELIT_VENDOR_ID, TELIT_PRODUCT_UE910_V2) },
1661 + { USB_DEVICE(TELIT_VENDOR_ID, TELIT_PRODUCT_LE922_USBCFG0),
1662 +- .driver_info = (kernel_ulong_t)&telit_le922_blacklist_usbcfg0 },
1663 ++ .driver_info = RSVD(0) | RSVD(1) | NCTRL(2) | RSVD(3) },
1664 + { USB_DEVICE(TELIT_VENDOR_ID, TELIT_PRODUCT_LE922_USBCFG1),
1665 +- .driver_info = (kernel_ulong_t)&telit_le910_blacklist },
1666 ++ .driver_info = NCTRL(0) | RSVD(1) | RSVD(2) },
1667 + { USB_DEVICE(TELIT_VENDOR_ID, TELIT_PRODUCT_LE922_USBCFG2),
1668 +- .driver_info = (kernel_ulong_t)&telit_le922_blacklist_usbcfg3 },
1669 ++ .driver_info = NCTRL(0) | RSVD(1) | RSVD(2) | RSVD(3) },
1670 + { USB_DEVICE(TELIT_VENDOR_ID, TELIT_PRODUCT_LE922_USBCFG3),
1671 +- .driver_info = (kernel_ulong_t)&telit_le922_blacklist_usbcfg3 },
1672 ++ .driver_info = NCTRL(0) | RSVD(1) | RSVD(2) | RSVD(3) },
1673 + { USB_DEVICE_INTERFACE_CLASS(TELIT_VENDOR_ID, TELIT_PRODUCT_LE922_USBCFG5, 0xff),
1674 +- .driver_info = (kernel_ulong_t)&telit_le922_blacklist_usbcfg0 },
1675 ++ .driver_info = RSVD(0) | RSVD(1) | NCTRL(2) | RSVD(3) },
1676 + { USB_DEVICE(TELIT_VENDOR_ID, TELIT_PRODUCT_ME910),
1677 +- .driver_info = (kernel_ulong_t)&telit_me910_blacklist },
1678 ++ .driver_info = NCTRL(0) | RSVD(1) | RSVD(3) },
1679 + { USB_DEVICE(TELIT_VENDOR_ID, TELIT_PRODUCT_ME910_DUAL_MODEM),
1680 +- .driver_info = (kernel_ulong_t)&telit_me910_dual_modem_blacklist },
1681 ++ .driver_info = NCTRL(0) | RSVD(3) },
1682 + { USB_DEVICE(TELIT_VENDOR_ID, TELIT_PRODUCT_LE910),
1683 +- .driver_info = (kernel_ulong_t)&telit_le910_blacklist },
1684 ++ .driver_info = NCTRL(0) | RSVD(1) | RSVD(2) },
1685 + { USB_DEVICE(TELIT_VENDOR_ID, TELIT_PRODUCT_LE910_USBCFG4),
1686 +- .driver_info = (kernel_ulong_t)&telit_le922_blacklist_usbcfg3 },
1687 ++ .driver_info = NCTRL(0) | RSVD(1) | RSVD(2) | RSVD(3) },
1688 + { USB_DEVICE(TELIT_VENDOR_ID, TELIT_PRODUCT_LE920),
1689 +- .driver_info = (kernel_ulong_t)&telit_le920_blacklist },
1690 ++ .driver_info = NCTRL(0) | RSVD(1) | RSVD(5) },
1691 + { USB_DEVICE(TELIT_VENDOR_ID, TELIT_PRODUCT_LE920A4_1207) },
1692 + { USB_DEVICE(TELIT_VENDOR_ID, TELIT_PRODUCT_LE920A4_1208),
1693 +- .driver_info = (kernel_ulong_t)&telit_le920a4_blacklist_1 },
1694 ++ .driver_info = NCTRL(0) | RSVD(1) },
1695 + { USB_DEVICE(TELIT_VENDOR_ID, TELIT_PRODUCT_LE920A4_1211),
1696 +- .driver_info = (kernel_ulong_t)&telit_le922_blacklist_usbcfg3 },
1697 ++ .driver_info = NCTRL(0) | RSVD(1) | RSVD(2) | RSVD(3) },
1698 + { USB_DEVICE(TELIT_VENDOR_ID, TELIT_PRODUCT_LE920A4_1212),
1699 +- .driver_info = (kernel_ulong_t)&telit_le920a4_blacklist_1 },
1700 ++ .driver_info = NCTRL(0) | RSVD(1) },
1701 + { USB_DEVICE_INTERFACE_CLASS(TELIT_VENDOR_ID, TELIT_PRODUCT_LE920A4_1213, 0xff) },
1702 + { USB_DEVICE(TELIT_VENDOR_ID, TELIT_PRODUCT_LE920A4_1214),
1703 +- .driver_info = (kernel_ulong_t)&telit_le922_blacklist_usbcfg3 },
1704 ++ .driver_info = NCTRL(0) | RSVD(1) | RSVD(2) | RSVD(3) },
1705 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, ZTE_PRODUCT_MF622, 0xff, 0xff, 0xff) }, /* ZTE WCDMA products */
1706 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0002, 0xff, 0xff, 0xff),
1707 +- .driver_info = (kernel_ulong_t)&net_intf1_blacklist },
1708 ++ .driver_info = RSVD(1) },
1709 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0003, 0xff, 0xff, 0xff) },
1710 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0004, 0xff, 0xff, 0xff) },
1711 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0005, 0xff, 0xff, 0xff) },
1712 +@@ -1305,58 +1174,58 @@ static const struct usb_device_id option_ids[] = {
1713 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0010, 0xff, 0xff, 0xff) },
1714 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0011, 0xff, 0xff, 0xff) },
1715 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0012, 0xff, 0xff, 0xff),
1716 +- .driver_info = (kernel_ulong_t)&net_intf1_blacklist },
1717 ++ .driver_info = RSVD(1) },
1718 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0013, 0xff, 0xff, 0xff) },
1719 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, ZTE_PRODUCT_MF628, 0xff, 0xff, 0xff) },
1720 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0016, 0xff, 0xff, 0xff) },
1721 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0017, 0xff, 0xff, 0xff),
1722 +- .driver_info = (kernel_ulong_t)&net_intf3_blacklist },
1723 ++ .driver_info = RSVD(3) },
1724 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0018, 0xff, 0xff, 0xff) },
1725 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0019, 0xff, 0xff, 0xff),
1726 +- .driver_info = (kernel_ulong_t)&net_intf3_blacklist },
1727 ++ .driver_info = RSVD(3) },
1728 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0020, 0xff, 0xff, 0xff) },
1729 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0021, 0xff, 0xff, 0xff),
1730 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1731 ++ .driver_info = RSVD(4) },
1732 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0022, 0xff, 0xff, 0xff) },
1733 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0023, 0xff, 0xff, 0xff) },
1734 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0024, 0xff, 0xff, 0xff) },
1735 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0025, 0xff, 0xff, 0xff),
1736 +- .driver_info = (kernel_ulong_t)&net_intf1_blacklist },
1737 ++ .driver_info = RSVD(1) },
1738 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0028, 0xff, 0xff, 0xff) },
1739 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0029, 0xff, 0xff, 0xff) },
1740 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0030, 0xff, 0xff, 0xff) },
1741 +- { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, ZTE_PRODUCT_MF626, 0xff,
1742 +- 0xff, 0xff), .driver_info = (kernel_ulong_t)&zte_mf626_blacklist },
1743 ++ { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, ZTE_PRODUCT_MF626, 0xff, 0xff, 0xff),
1744 ++ .driver_info = NCTRL(0) | NCTRL(1) | RSVD(4) },
1745 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0032, 0xff, 0xff, 0xff) },
1746 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0033, 0xff, 0xff, 0xff) },
1747 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0034, 0xff, 0xff, 0xff) },
1748 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0037, 0xff, 0xff, 0xff),
1749 +- .driver_info = (kernel_ulong_t)&zte_0037_blacklist },
1750 ++ .driver_info = NCTRL(0) | NCTRL(1) },
1751 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0038, 0xff, 0xff, 0xff) },
1752 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0039, 0xff, 0xff, 0xff) },
1753 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0040, 0xff, 0xff, 0xff) },
1754 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0042, 0xff, 0xff, 0xff),
1755 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1756 ++ .driver_info = RSVD(4) },
1757 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0043, 0xff, 0xff, 0xff) },
1758 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0044, 0xff, 0xff, 0xff) },
1759 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0048, 0xff, 0xff, 0xff) },
1760 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0049, 0xff, 0xff, 0xff),
1761 +- .driver_info = (kernel_ulong_t)&net_intf5_blacklist },
1762 ++ .driver_info = RSVD(5) },
1763 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0050, 0xff, 0xff, 0xff) },
1764 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0051, 0xff, 0xff, 0xff) },
1765 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0052, 0xff, 0xff, 0xff),
1766 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1767 ++ .driver_info = RSVD(4) },
1768 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0054, 0xff, 0xff, 0xff) },
1769 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0055, 0xff, 0xff, 0xff),
1770 +- .driver_info = (kernel_ulong_t)&net_intf1_blacklist },
1771 ++ .driver_info = RSVD(1) },
1772 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0056, 0xff, 0xff, 0xff) },
1773 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0057, 0xff, 0xff, 0xff) },
1774 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0058, 0xff, 0xff, 0xff),
1775 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1776 ++ .driver_info = RSVD(4) },
1777 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0061, 0xff, 0xff, 0xff) },
1778 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0062, 0xff, 0xff, 0xff) },
1779 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0063, 0xff, 0xff, 0xff),
1780 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1781 ++ .driver_info = RSVD(4) },
1782 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0064, 0xff, 0xff, 0xff) },
1783 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0065, 0xff, 0xff, 0xff) },
1784 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0066, 0xff, 0xff, 0xff) },
1785 +@@ -1381,26 +1250,26 @@ static const struct usb_device_id option_ids[] = {
1786 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0096, 0xff, 0xff, 0xff) },
1787 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0097, 0xff, 0xff, 0xff) },
1788 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0104, 0xff, 0xff, 0xff),
1789 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1790 ++ .driver_info = RSVD(4) },
1791 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0105, 0xff, 0xff, 0xff) },
1792 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0106, 0xff, 0xff, 0xff) },
1793 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0108, 0xff, 0xff, 0xff) },
1794 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0113, 0xff, 0xff, 0xff),
1795 +- .driver_info = (kernel_ulong_t)&net_intf5_blacklist },
1796 ++ .driver_info = RSVD(5) },
1797 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0117, 0xff, 0xff, 0xff) },
1798 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0118, 0xff, 0xff, 0xff),
1799 +- .driver_info = (kernel_ulong_t)&net_intf5_blacklist },
1800 ++ .driver_info = RSVD(5) },
1801 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0121, 0xff, 0xff, 0xff),
1802 +- .driver_info = (kernel_ulong_t)&net_intf5_blacklist },
1803 ++ .driver_info = RSVD(5) },
1804 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0122, 0xff, 0xff, 0xff) },
1805 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0123, 0xff, 0xff, 0xff),
1806 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1807 ++ .driver_info = RSVD(4) },
1808 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0124, 0xff, 0xff, 0xff),
1809 +- .driver_info = (kernel_ulong_t)&net_intf5_blacklist },
1810 ++ .driver_info = RSVD(5) },
1811 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0125, 0xff, 0xff, 0xff),
1812 +- .driver_info = (kernel_ulong_t)&net_intf6_blacklist },
1813 ++ .driver_info = RSVD(6) },
1814 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0126, 0xff, 0xff, 0xff),
1815 +- .driver_info = (kernel_ulong_t)&net_intf5_blacklist },
1816 ++ .driver_info = RSVD(5) },
1817 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0128, 0xff, 0xff, 0xff) },
1818 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0135, 0xff, 0xff, 0xff) },
1819 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0136, 0xff, 0xff, 0xff) },
1820 +@@ -1416,50 +1285,50 @@ static const struct usb_device_id option_ids[] = {
1821 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0155, 0xff, 0xff, 0xff) },
1822 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0156, 0xff, 0xff, 0xff) },
1823 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0157, 0xff, 0xff, 0xff),
1824 +- .driver_info = (kernel_ulong_t)&net_intf5_blacklist },
1825 ++ .driver_info = RSVD(5) },
1826 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0158, 0xff, 0xff, 0xff),
1827 +- .driver_info = (kernel_ulong_t)&net_intf3_blacklist },
1828 ++ .driver_info = RSVD(3) },
1829 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0159, 0xff, 0xff, 0xff) },
1830 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0161, 0xff, 0xff, 0xff) },
1831 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0162, 0xff, 0xff, 0xff) },
1832 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0164, 0xff, 0xff, 0xff) },
1833 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0165, 0xff, 0xff, 0xff) },
1834 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0167, 0xff, 0xff, 0xff),
1835 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1836 ++ .driver_info = RSVD(4) },
1837 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0189, 0xff, 0xff, 0xff) },
1838 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0191, 0xff, 0xff, 0xff), /* ZTE EuFi890 */
1839 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1840 ++ .driver_info = RSVD(4) },
1841 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0196, 0xff, 0xff, 0xff) },
1842 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0197, 0xff, 0xff, 0xff) },
1843 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0199, 0xff, 0xff, 0xff), /* ZTE MF820S */
1844 +- .driver_info = (kernel_ulong_t)&net_intf1_blacklist },
1845 ++ .driver_info = RSVD(1) },
1846 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0200, 0xff, 0xff, 0xff) },
1847 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0201, 0xff, 0xff, 0xff) },
1848 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0254, 0xff, 0xff, 0xff) },
1849 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0257, 0xff, 0xff, 0xff), /* ZTE MF821 */
1850 +- .driver_info = (kernel_ulong_t)&net_intf3_blacklist },
1851 ++ .driver_info = RSVD(3) },
1852 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0265, 0xff, 0xff, 0xff), /* ONDA MT8205 */
1853 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1854 ++ .driver_info = RSVD(4) },
1855 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0284, 0xff, 0xff, 0xff), /* ZTE MF880 */
1856 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1857 ++ .driver_info = RSVD(4) },
1858 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0317, 0xff, 0xff, 0xff) },
1859 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0326, 0xff, 0xff, 0xff),
1860 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1861 ++ .driver_info = RSVD(4) },
1862 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0330, 0xff, 0xff, 0xff) },
1863 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0395, 0xff, 0xff, 0xff) },
1864 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0412, 0xff, 0xff, 0xff), /* Telewell TW-LTE 4G */
1865 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1866 ++ .driver_info = RSVD(4) },
1867 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0414, 0xff, 0xff, 0xff) },
1868 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0417, 0xff, 0xff, 0xff) },
1869 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1008, 0xff, 0xff, 0xff),
1870 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1871 ++ .driver_info = RSVD(4) },
1872 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1010, 0xff, 0xff, 0xff),
1873 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1874 ++ .driver_info = RSVD(4) },
1875 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1012, 0xff, 0xff, 0xff),
1876 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1877 ++ .driver_info = RSVD(4) },
1878 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1018, 0xff, 0xff, 0xff) },
1879 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1021, 0xff, 0xff, 0xff),
1880 +- .driver_info = (kernel_ulong_t)&net_intf2_blacklist },
1881 ++ .driver_info = RSVD(2) },
1882 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1057, 0xff, 0xff, 0xff) },
1883 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1058, 0xff, 0xff, 0xff) },
1884 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1059, 0xff, 0xff, 0xff) },
1885 +@@ -1576,23 +1445,23 @@ static const struct usb_device_id option_ids[] = {
1886 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1170, 0xff, 0xff, 0xff) },
1887 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1244, 0xff, 0xff, 0xff) },
1888 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1245, 0xff, 0xff, 0xff),
1889 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1890 ++ .driver_info = RSVD(4) },
1891 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1246, 0xff, 0xff, 0xff) },
1892 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1247, 0xff, 0xff, 0xff),
1893 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1894 ++ .driver_info = RSVD(4) },
1895 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1248, 0xff, 0xff, 0xff) },
1896 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1249, 0xff, 0xff, 0xff) },
1897 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1250, 0xff, 0xff, 0xff) },
1898 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1251, 0xff, 0xff, 0xff) },
1899 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1252, 0xff, 0xff, 0xff),
1900 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1901 ++ .driver_info = RSVD(4) },
1902 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1253, 0xff, 0xff, 0xff) },
1903 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1254, 0xff, 0xff, 0xff),
1904 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1905 ++ .driver_info = RSVD(4) },
1906 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1255, 0xff, 0xff, 0xff),
1907 +- .driver_info = (kernel_ulong_t)&zte_1255_blacklist },
1908 ++ .driver_info = RSVD(3) | RSVD(4) },
1909 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1256, 0xff, 0xff, 0xff),
1910 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1911 ++ .driver_info = RSVD(4) },
1912 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1257, 0xff, 0xff, 0xff) },
1913 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1258, 0xff, 0xff, 0xff) },
1914 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1259, 0xff, 0xff, 0xff) },
1915 +@@ -1607,7 +1476,7 @@ static const struct usb_device_id option_ids[] = {
1916 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1268, 0xff, 0xff, 0xff) },
1917 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1269, 0xff, 0xff, 0xff) },
1918 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1270, 0xff, 0xff, 0xff),
1919 +- .driver_info = (kernel_ulong_t)&net_intf5_blacklist },
1920 ++ .driver_info = RSVD(5) },
1921 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1271, 0xff, 0xff, 0xff) },
1922 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1272, 0xff, 0xff, 0xff) },
1923 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1273, 0xff, 0xff, 0xff) },
1924 +@@ -1643,17 +1512,17 @@ static const struct usb_device_id option_ids[] = {
1925 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1303, 0xff, 0xff, 0xff) },
1926 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1333, 0xff, 0xff, 0xff) },
1927 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1401, 0xff, 0xff, 0xff),
1928 +- .driver_info = (kernel_ulong_t)&net_intf2_blacklist },
1929 ++ .driver_info = RSVD(2) },
1930 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1402, 0xff, 0xff, 0xff),
1931 +- .driver_info = (kernel_ulong_t)&net_intf2_blacklist },
1932 ++ .driver_info = RSVD(2) },
1933 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1424, 0xff, 0xff, 0xff),
1934 +- .driver_info = (kernel_ulong_t)&net_intf2_blacklist },
1935 ++ .driver_info = RSVD(2) },
1936 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1425, 0xff, 0xff, 0xff),
1937 +- .driver_info = (kernel_ulong_t)&net_intf2_blacklist },
1938 ++ .driver_info = RSVD(2) },
1939 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1426, 0xff, 0xff, 0xff), /* ZTE MF91 */
1940 +- .driver_info = (kernel_ulong_t)&net_intf2_blacklist },
1941 ++ .driver_info = RSVD(2) },
1942 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1428, 0xff, 0xff, 0xff), /* Telewell TW-LTE 4G v2 */
1943 +- .driver_info = (kernel_ulong_t)&net_intf2_blacklist },
1944 ++ .driver_info = RSVD(2) },
1945 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1533, 0xff, 0xff, 0xff) },
1946 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1534, 0xff, 0xff, 0xff) },
1947 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1535, 0xff, 0xff, 0xff) },
1948 +@@ -1671,8 +1540,8 @@ static const struct usb_device_id option_ids[] = {
1949 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1596, 0xff, 0xff, 0xff) },
1950 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1598, 0xff, 0xff, 0xff) },
1951 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x1600, 0xff, 0xff, 0xff) },
1952 +- { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x2002, 0xff,
1953 +- 0xff, 0xff), .driver_info = (kernel_ulong_t)&zte_k3765_z_blacklist },
1954 ++ { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x2002, 0xff, 0xff, 0xff),
1955 ++ .driver_info = NCTRL(0) | NCTRL(1) | NCTRL(2) | RSVD(4) },
1956 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x2003, 0xff, 0xff, 0xff) },
1957 +
1958 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0014, 0xff, 0xff, 0xff) }, /* ZTE CDMA products */
1959 +@@ -1683,20 +1552,20 @@ static const struct usb_device_id option_ids[] = {
1960 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0073, 0xff, 0xff, 0xff) },
1961 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0094, 0xff, 0xff, 0xff) },
1962 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0130, 0xff, 0xff, 0xff),
1963 +- .driver_info = (kernel_ulong_t)&net_intf1_blacklist },
1964 ++ .driver_info = RSVD(1) },
1965 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0133, 0xff, 0xff, 0xff),
1966 +- .driver_info = (kernel_ulong_t)&net_intf3_blacklist },
1967 ++ .driver_info = RSVD(3) },
1968 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0141, 0xff, 0xff, 0xff),
1969 +- .driver_info = (kernel_ulong_t)&net_intf5_blacklist },
1970 ++ .driver_info = RSVD(5) },
1971 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0147, 0xff, 0xff, 0xff) },
1972 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0152, 0xff, 0xff, 0xff) },
1973 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0168, 0xff, 0xff, 0xff),
1974 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
1975 ++ .driver_info = RSVD(4) },
1976 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0170, 0xff, 0xff, 0xff) },
1977 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0176, 0xff, 0xff, 0xff),
1978 +- .driver_info = (kernel_ulong_t)&net_intf3_blacklist },
1979 ++ .driver_info = RSVD(3) },
1980 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0x0178, 0xff, 0xff, 0xff),
1981 +- .driver_info = (kernel_ulong_t)&net_intf3_blacklist },
1982 ++ .driver_info = RSVD(3) },
1983 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0xff42, 0xff, 0xff, 0xff) },
1984 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0xff43, 0xff, 0xff, 0xff) },
1985 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0xff44, 0xff, 0xff, 0xff) },
1986 +@@ -1848,19 +1717,19 @@ static const struct usb_device_id option_ids[] = {
1987 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, ZTE_PRODUCT_AC2726, 0xff, 0xff, 0xff) },
1988 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, ZTE_PRODUCT_AC8710T, 0xff, 0xff, 0xff) },
1989 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, ZTE_PRODUCT_MC2718, 0xff, 0xff, 0xff),
1990 +- .driver_info = (kernel_ulong_t)&zte_mc2718_z_blacklist },
1991 ++ .driver_info = NCTRL(1) | NCTRL(2) | NCTRL(3) | NCTRL(4) },
1992 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, ZTE_PRODUCT_AD3812, 0xff, 0xff, 0xff),
1993 +- .driver_info = (kernel_ulong_t)&zte_ad3812_z_blacklist },
1994 ++ .driver_info = NCTRL(0) | NCTRL(1) | NCTRL(2) },
1995 + { USB_DEVICE_AND_INTERFACE_INFO(ZTE_VENDOR_ID, ZTE_PRODUCT_MC2716, 0xff, 0xff, 0xff),
1996 +- .driver_info = (kernel_ulong_t)&zte_mc2716_z_blacklist },
1997 ++ .driver_info = NCTRL(1) | NCTRL(2) | NCTRL(3) },
1998 + { USB_DEVICE(ZTE_VENDOR_ID, ZTE_PRODUCT_ME3620_L),
1999 +- .driver_info = (kernel_ulong_t)&zte_me3620_xl_blacklist },
2000 ++ .driver_info = RSVD(3) | RSVD(4) | RSVD(5) },
2001 + { USB_DEVICE(ZTE_VENDOR_ID, ZTE_PRODUCT_ME3620_MBIM),
2002 +- .driver_info = (kernel_ulong_t)&zte_me3620_mbim_blacklist },
2003 ++ .driver_info = RSVD(2) | RSVD(3) | RSVD(4) },
2004 + { USB_DEVICE(ZTE_VENDOR_ID, ZTE_PRODUCT_ME3620_X),
2005 +- .driver_info = (kernel_ulong_t)&zte_me3620_xl_blacklist },
2006 ++ .driver_info = RSVD(3) | RSVD(4) | RSVD(5) },
2007 + { USB_DEVICE(ZTE_VENDOR_ID, ZTE_PRODUCT_ZM8620_X),
2008 +- .driver_info = (kernel_ulong_t)&zte_zm8620_x_blacklist },
2009 ++ .driver_info = RSVD(3) | RSVD(4) | RSVD(5) },
2010 + { USB_VENDOR_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0xff, 0x02, 0x01) },
2011 + { USB_VENDOR_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0xff, 0x02, 0x05) },
2012 + { USB_VENDOR_AND_INTERFACE_INFO(ZTE_VENDOR_ID, 0xff, 0x86, 0x10) },
2013 +@@ -1880,37 +1749,34 @@ static const struct usb_device_id option_ids[] = {
2014 + { USB_DEVICE(ALINK_VENDOR_ID, ALINK_PRODUCT_PH300) },
2015 + { USB_DEVICE_AND_INTERFACE_INFO(ALINK_VENDOR_ID, ALINK_PRODUCT_3GU, 0xff, 0xff, 0xff) },
2016 + { USB_DEVICE(ALINK_VENDOR_ID, SIMCOM_PRODUCT_SIM7100E),
2017 +- .driver_info = (kernel_ulong_t)&simcom_sim7100e_blacklist },
2018 ++ .driver_info = RSVD(5) | RSVD(6) },
2019 + { USB_DEVICE(ALCATEL_VENDOR_ID, ALCATEL_PRODUCT_X060S_X200),
2020 +- .driver_info = (kernel_ulong_t)&alcatel_x200_blacklist
2021 +- },
2022 ++ .driver_info = NCTRL(0) | NCTRL(1) | RSVD(4) },
2023 + { USB_DEVICE(ALCATEL_VENDOR_ID, ALCATEL_PRODUCT_X220_X500D),
2024 +- .driver_info = (kernel_ulong_t)&net_intf6_blacklist },
2025 ++ .driver_info = RSVD(6) },
2026 + { USB_DEVICE(ALCATEL_VENDOR_ID, 0x0052),
2027 +- .driver_info = (kernel_ulong_t)&net_intf6_blacklist },
2028 ++ .driver_info = RSVD(6) },
2029 + { USB_DEVICE(ALCATEL_VENDOR_ID, 0x00b6),
2030 +- .driver_info = (kernel_ulong_t)&net_intf3_blacklist },
2031 ++ .driver_info = RSVD(3) },
2032 + { USB_DEVICE(ALCATEL_VENDOR_ID, 0x00b7),
2033 +- .driver_info = (kernel_ulong_t)&net_intf5_blacklist },
2034 ++ .driver_info = RSVD(5) },
2035 + { USB_DEVICE(ALCATEL_VENDOR_ID, ALCATEL_PRODUCT_L100V),
2036 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
2037 ++ .driver_info = RSVD(4) },
2038 + { USB_DEVICE(ALCATEL_VENDOR_ID, ALCATEL_PRODUCT_L800MA),
2039 +- .driver_info = (kernel_ulong_t)&net_intf2_blacklist },
2040 ++ .driver_info = RSVD(2) },
2041 + { USB_DEVICE(AIRPLUS_VENDOR_ID, AIRPLUS_PRODUCT_MCD650) },
2042 + { USB_DEVICE(TLAYTECH_VENDOR_ID, TLAYTECH_PRODUCT_TEU800) },
2043 + { USB_DEVICE(LONGCHEER_VENDOR_ID, FOUR_G_SYSTEMS_PRODUCT_W14),
2044 +- .driver_info = (kernel_ulong_t)&four_g_w14_blacklist
2045 +- },
2046 ++ .driver_info = NCTRL(0) | NCTRL(1) },
2047 + { USB_DEVICE(LONGCHEER_VENDOR_ID, FOUR_G_SYSTEMS_PRODUCT_W100),
2048 +- .driver_info = (kernel_ulong_t)&four_g_w100_blacklist
2049 +- },
2050 ++ .driver_info = NCTRL(1) | NCTRL(2) | RSVD(3) },
2051 + {USB_DEVICE(LONGCHEER_VENDOR_ID, FUJISOFT_PRODUCT_FS040U),
2052 +- .driver_info = (kernel_ulong_t)&net_intf3_blacklist},
2053 ++ .driver_info = RSVD(3)},
2054 + { USB_DEVICE_INTERFACE_CLASS(LONGCHEER_VENDOR_ID, SPEEDUP_PRODUCT_SU9800, 0xff) },
2055 + { USB_DEVICE_INTERFACE_CLASS(LONGCHEER_VENDOR_ID, 0x9801, 0xff),
2056 +- .driver_info = (kernel_ulong_t)&net_intf3_blacklist },
2057 ++ .driver_info = RSVD(3) },
2058 + { USB_DEVICE_INTERFACE_CLASS(LONGCHEER_VENDOR_ID, 0x9803, 0xff),
2059 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
2060 ++ .driver_info = RSVD(4) },
2061 + { USB_DEVICE(LONGCHEER_VENDOR_ID, ZOOM_PRODUCT_4597) },
2062 + { USB_DEVICE(LONGCHEER_VENDOR_ID, IBALL_3_5G_CONNECT) },
2063 + { USB_DEVICE(HAIER_VENDOR_ID, HAIER_PRODUCT_CE100) },
2064 +@@ -1936,14 +1802,14 @@ static const struct usb_device_id option_ids[] = {
2065 + { USB_DEVICE(CINTERION_VENDOR_ID, CINTERION_PRODUCT_EU3_E) },
2066 + { USB_DEVICE(CINTERION_VENDOR_ID, CINTERION_PRODUCT_EU3_P) },
2067 + { USB_DEVICE(CINTERION_VENDOR_ID, CINTERION_PRODUCT_PH8),
2068 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
2069 ++ .driver_info = RSVD(4) },
2070 + { USB_DEVICE_INTERFACE_CLASS(CINTERION_VENDOR_ID, CINTERION_PRODUCT_AHXX, 0xff) },
2071 + { USB_DEVICE(CINTERION_VENDOR_ID, CINTERION_PRODUCT_PLXX),
2072 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
2073 ++ .driver_info = RSVD(4) },
2074 + { USB_DEVICE_INTERFACE_CLASS(CINTERION_VENDOR_ID, CINTERION_PRODUCT_PH8_2RMNET, 0xff),
2075 +- .driver_info = (kernel_ulong_t)&cinterion_rmnet2_blacklist },
2076 ++ .driver_info = RSVD(4) | RSVD(5) },
2077 + { USB_DEVICE_INTERFACE_CLASS(CINTERION_VENDOR_ID, CINTERION_PRODUCT_PH8_AUDIO, 0xff),
2078 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
2079 ++ .driver_info = RSVD(4) },
2080 + { USB_DEVICE_INTERFACE_CLASS(CINTERION_VENDOR_ID, CINTERION_PRODUCT_AHXX_2RMNET, 0xff) },
2081 + { USB_DEVICE_INTERFACE_CLASS(CINTERION_VENDOR_ID, CINTERION_PRODUCT_AHXX_AUDIO, 0xff) },
2082 + { USB_DEVICE(CINTERION_VENDOR_ID, CINTERION_PRODUCT_HC28_MDM) },
2083 +@@ -1953,20 +1819,20 @@ static const struct usb_device_id option_ids[] = {
2084 + { USB_DEVICE(SIEMENS_VENDOR_ID, CINTERION_PRODUCT_HC28_MDM) }, /* HC28 enumerates with Siemens or Cinterion VID depending on FW revision */
2085 + { USB_DEVICE(SIEMENS_VENDOR_ID, CINTERION_PRODUCT_HC28_MDMNET) },
2086 + { USB_DEVICE(OLIVETTI_VENDOR_ID, OLIVETTI_PRODUCT_OLICARD100),
2087 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
2088 ++ .driver_info = RSVD(4) },
2089 + { USB_DEVICE(OLIVETTI_VENDOR_ID, OLIVETTI_PRODUCT_OLICARD120),
2090 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
2091 ++ .driver_info = RSVD(4) },
2092 + { USB_DEVICE(OLIVETTI_VENDOR_ID, OLIVETTI_PRODUCT_OLICARD140),
2093 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
2094 ++ .driver_info = RSVD(4) },
2095 + { USB_DEVICE(OLIVETTI_VENDOR_ID, OLIVETTI_PRODUCT_OLICARD145) },
2096 + { USB_DEVICE(OLIVETTI_VENDOR_ID, OLIVETTI_PRODUCT_OLICARD155),
2097 +- .driver_info = (kernel_ulong_t)&net_intf6_blacklist },
2098 ++ .driver_info = RSVD(6) },
2099 + { USB_DEVICE(OLIVETTI_VENDOR_ID, OLIVETTI_PRODUCT_OLICARD200),
2100 +- .driver_info = (kernel_ulong_t)&net_intf6_blacklist },
2101 ++ .driver_info = RSVD(6) },
2102 + { USB_DEVICE(OLIVETTI_VENDOR_ID, OLIVETTI_PRODUCT_OLICARD160),
2103 +- .driver_info = (kernel_ulong_t)&net_intf6_blacklist },
2104 ++ .driver_info = RSVD(6) },
2105 + { USB_DEVICE(OLIVETTI_VENDOR_ID, OLIVETTI_PRODUCT_OLICARD500),
2106 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
2107 ++ .driver_info = RSVD(4) },
2108 + { USB_DEVICE(CELOT_VENDOR_ID, CELOT_PRODUCT_CT680M) }, /* CT-650 CDMA 450 1xEVDO modem */
2109 + { USB_DEVICE_AND_INTERFACE_INFO(SAMSUNG_VENDOR_ID, SAMSUNG_PRODUCT_GT_B3730, USB_CLASS_CDC_DATA, 0x00, 0x00) }, /* Samsung GT-B3730 LTE USB modem.*/
2110 + { USB_DEVICE(YUGA_VENDOR_ID, YUGA_PRODUCT_CEM600) },
2111 +@@ -2043,9 +1909,9 @@ static const struct usb_device_id option_ids[] = {
2112 + { USB_DEVICE(PETATEL_VENDOR_ID, PETATEL_PRODUCT_NP10T_600E) },
2113 + { USB_DEVICE_AND_INTERFACE_INFO(TPLINK_VENDOR_ID, TPLINK_PRODUCT_LTE, 0xff, 0x00, 0x00) }, /* TP-Link LTE Module */
2114 + { USB_DEVICE(TPLINK_VENDOR_ID, TPLINK_PRODUCT_MA180),
2115 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
2116 ++ .driver_info = RSVD(4) },
2117 + { USB_DEVICE(TPLINK_VENDOR_ID, 0x9000), /* TP-Link MA260 */
2118 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
2119 ++ .driver_info = RSVD(4) },
2120 + { USB_DEVICE(CHANGHONG_VENDOR_ID, CHANGHONG_PRODUCT_CH690) },
2121 + { USB_DEVICE_INTERFACE_CLASS(0x2001, 0x7d01, 0xff) }, /* D-Link DWM-156 (variant) */
2122 + { USB_DEVICE_INTERFACE_CLASS(0x2001, 0x7d02, 0xff) },
2123 +@@ -2053,9 +1919,9 @@ static const struct usb_device_id option_ids[] = {
2124 + { USB_DEVICE_INTERFACE_CLASS(0x2001, 0x7d04, 0xff) }, /* D-Link DWM-158 */
2125 + { USB_DEVICE_INTERFACE_CLASS(0x2001, 0x7d0e, 0xff) }, /* D-Link DWM-157 C1 */
2126 + { USB_DEVICE_INTERFACE_CLASS(0x2001, 0x7e19, 0xff), /* D-Link DWM-221 B1 */
2127 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
2128 ++ .driver_info = RSVD(4) },
2129 + { USB_DEVICE_INTERFACE_CLASS(0x2001, 0x7e35, 0xff), /* D-Link DWM-222 */
2130 +- .driver_info = (kernel_ulong_t)&net_intf4_blacklist },
2131 ++ .driver_info = RSVD(4) },
2132 + { USB_DEVICE_AND_INTERFACE_INFO(0x07d1, 0x3e01, 0xff, 0xff, 0xff) }, /* D-Link DWM-152/C1 */
2133 + { USB_DEVICE_AND_INTERFACE_INFO(0x07d1, 0x3e02, 0xff, 0xff, 0xff) }, /* D-Link DWM-156/C1 */
2134 + { USB_DEVICE_AND_INTERFACE_INFO(0x07d1, 0x7e11, 0xff, 0xff, 0xff) }, /* D-Link DWM-156/A3 */
2135 +@@ -2115,7 +1981,7 @@ static int option_probe(struct usb_serial *serial,
2136 + struct usb_interface_descriptor *iface_desc =
2137 + &serial->interface->cur_altsetting->desc;
2138 + struct usb_device_descriptor *dev_desc = &serial->dev->descriptor;
2139 +- const struct option_blacklist_info *blacklist;
2140 ++ unsigned long device_flags = id->driver_info;
2141 +
2142 + /* Never bind to the CD-Rom emulation interface */
2143 + if (iface_desc->bInterfaceClass == 0x08)
2144 +@@ -2126,9 +1992,7 @@ static int option_probe(struct usb_serial *serial,
2145 + * the same class/subclass/protocol as the serial interfaces. Look at
2146 + * the Windows driver .INF files for reserved interface numbers.
2147 + */
2148 +- blacklist = (void *)id->driver_info;
2149 +- if (blacklist && test_bit(iface_desc->bInterfaceNumber,
2150 +- &blacklist->reserved))
2151 ++ if (device_flags & RSVD(iface_desc->bInterfaceNumber))
2152 + return -ENODEV;
2153 + /*
2154 + * Don't bind network interface on Samsung GT-B3730, it is handled by
2155 +@@ -2139,8 +2003,8 @@ static int option_probe(struct usb_serial *serial,
2156 + iface_desc->bInterfaceClass != USB_CLASS_CDC_DATA)
2157 + return -ENODEV;
2158 +
2159 +- /* Store the blacklist info so we can use it during attach. */
2160 +- usb_set_serial_data(serial, (void *)blacklist);
2161 ++ /* Store the device flags so we can use them during attach. */
2162 ++ usb_set_serial_data(serial, (void *)device_flags);
2163 +
2164 + return 0;
2165 + }
2166 +@@ -2148,22 +2012,21 @@ static int option_probe(struct usb_serial *serial,
2167 + static int option_attach(struct usb_serial *serial)
2168 + {
2169 + struct usb_interface_descriptor *iface_desc;
2170 +- const struct option_blacklist_info *blacklist;
2171 + struct usb_wwan_intf_private *data;
2172 ++ unsigned long device_flags;
2173 +
2174 + data = kzalloc(sizeof(struct usb_wwan_intf_private), GFP_KERNEL);
2175 + if (!data)
2176 + return -ENOMEM;
2177 +
2178 +- /* Retrieve blacklist info stored at probe. */
2179 +- blacklist = usb_get_serial_data(serial);
2180 ++ /* Retrieve device flags stored at probe. */
2181 ++ device_flags = (unsigned long)usb_get_serial_data(serial);
2182 +
2183 + iface_desc = &serial->interface->cur_altsetting->desc;
2184 +
2185 +- if (!blacklist || !test_bit(iface_desc->bInterfaceNumber,
2186 +- &blacklist->sendsetup)) {
2187 ++ if (!(device_flags & NCTRL(iface_desc->bInterfaceNumber)))
2188 + data->use_send_setup = 1;
2189 +- }
2190 ++
2191 + spin_lock_init(&data->susp_lock);
2192 +
2193 + usb_set_serial_data(serial, data);
2194 +diff --git a/drivers/usb/serial/visor.c b/drivers/usb/serial/visor.c
2195 +index f5373ed2cd45..8ddbecc25d89 100644
2196 +--- a/drivers/usb/serial/visor.c
2197 ++++ b/drivers/usb/serial/visor.c
2198 +@@ -335,47 +335,48 @@ static int palm_os_3_probe(struct usb_serial *serial,
2199 + goto exit;
2200 + }
2201 +
2202 +- if (retval == sizeof(*connection_info)) {
2203 +- connection_info = (struct visor_connection_info *)
2204 +- transfer_buffer;
2205 +-
2206 +- num_ports = le16_to_cpu(connection_info->num_ports);
2207 +- for (i = 0; i < num_ports; ++i) {
2208 +- switch (
2209 +- connection_info->connections[i].port_function_id) {
2210 +- case VISOR_FUNCTION_GENERIC:
2211 +- string = "Generic";
2212 +- break;
2213 +- case VISOR_FUNCTION_DEBUGGER:
2214 +- string = "Debugger";
2215 +- break;
2216 +- case VISOR_FUNCTION_HOTSYNC:
2217 +- string = "HotSync";
2218 +- break;
2219 +- case VISOR_FUNCTION_CONSOLE:
2220 +- string = "Console";
2221 +- break;
2222 +- case VISOR_FUNCTION_REMOTE_FILE_SYS:
2223 +- string = "Remote File System";
2224 +- break;
2225 +- default:
2226 +- string = "unknown";
2227 +- break;
2228 +- }
2229 +- dev_info(dev, "%s: port %d, is for %s use\n",
2230 +- serial->type->description,
2231 +- connection_info->connections[i].port, string);
2232 +- }
2233 ++ if (retval != sizeof(*connection_info)) {
2234 ++ dev_err(dev, "Invalid connection information received from device\n");
2235 ++ retval = -ENODEV;
2236 ++ goto exit;
2237 + }
2238 +- /*
2239 +- * Handle devices that report invalid stuff here.
2240 +- */
2241 ++
2242 ++ connection_info = (struct visor_connection_info *)transfer_buffer;
2243 ++
2244 ++ num_ports = le16_to_cpu(connection_info->num_ports);
2245 ++
2246 ++ /* Handle devices that report invalid stuff here. */
2247 + if (num_ports == 0 || num_ports > 2) {
2248 + dev_warn(dev, "%s: No valid connect info available\n",
2249 + serial->type->description);
2250 + num_ports = 2;
2251 + }
2252 +
2253 ++ for (i = 0; i < num_ports; ++i) {
2254 ++ switch (connection_info->connections[i].port_function_id) {
2255 ++ case VISOR_FUNCTION_GENERIC:
2256 ++ string = "Generic";
2257 ++ break;
2258 ++ case VISOR_FUNCTION_DEBUGGER:
2259 ++ string = "Debugger";
2260 ++ break;
2261 ++ case VISOR_FUNCTION_HOTSYNC:
2262 ++ string = "HotSync";
2263 ++ break;
2264 ++ case VISOR_FUNCTION_CONSOLE:
2265 ++ string = "Console";
2266 ++ break;
2267 ++ case VISOR_FUNCTION_REMOTE_FILE_SYS:
2268 ++ string = "Remote File System";
2269 ++ break;
2270 ++ default:
2271 ++ string = "unknown";
2272 ++ break;
2273 ++ }
2274 ++ dev_info(dev, "%s: port %d, is for %s use\n",
2275 ++ serial->type->description,
2276 ++ connection_info->connections[i].port, string);
2277 ++ }
2278 + dev_info(dev, "%s: Number of ports: %d\n", serial->type->description,
2279 + num_ports);
2280 +
2281 +diff --git a/fs/btrfs/extent-tree.c b/fs/btrfs/extent-tree.c
2282 +index 16b54b1ff20e..53ddfafa440b 100644
2283 +--- a/fs/btrfs/extent-tree.c
2284 ++++ b/fs/btrfs/extent-tree.c
2285 +@@ -3155,7 +3155,11 @@ static noinline int check_delayed_ref(struct btrfs_root *root,
2286 + struct rb_node *node;
2287 + int ret = 0;
2288 +
2289 ++ spin_lock(&root->fs_info->trans_lock);
2290 + cur_trans = root->fs_info->running_transaction;
2291 ++ if (cur_trans)
2292 ++ refcount_inc(&cur_trans->use_count);
2293 ++ spin_unlock(&root->fs_info->trans_lock);
2294 + if (!cur_trans)
2295 + return 0;
2296 +
2297 +@@ -3164,6 +3168,7 @@ static noinline int check_delayed_ref(struct btrfs_root *root,
2298 + head = btrfs_find_delayed_ref_head(delayed_refs, bytenr);
2299 + if (!head) {
2300 + spin_unlock(&delayed_refs->lock);
2301 ++ btrfs_put_transaction(cur_trans);
2302 + return 0;
2303 + }
2304 +
2305 +@@ -3180,6 +3185,7 @@ static noinline int check_delayed_ref(struct btrfs_root *root,
2306 + mutex_lock(&head->mutex);
2307 + mutex_unlock(&head->mutex);
2308 + btrfs_put_delayed_ref_head(head);
2309 ++ btrfs_put_transaction(cur_trans);
2310 + return -EAGAIN;
2311 + }
2312 + spin_unlock(&delayed_refs->lock);
2313 +@@ -3212,6 +3218,7 @@ static noinline int check_delayed_ref(struct btrfs_root *root,
2314 + }
2315 + spin_unlock(&head->lock);
2316 + mutex_unlock(&head->mutex);
2317 ++ btrfs_put_transaction(cur_trans);
2318 + return ret;
2319 + }
2320 +
2321 +diff --git a/fs/xfs/xfs_file.c b/fs/xfs/xfs_file.c
2322 +index 9ea08326f876..a7e8fdb5fc72 100644
2323 +--- a/fs/xfs/xfs_file.c
2324 ++++ b/fs/xfs/xfs_file.c
2325 +@@ -812,22 +812,26 @@ xfs_file_fallocate(
2326 + if (error)
2327 + goto out_unlock;
2328 + } else if (mode & FALLOC_FL_INSERT_RANGE) {
2329 +- unsigned int blksize_mask = i_blocksize(inode) - 1;
2330 ++ unsigned int blksize_mask = i_blocksize(inode) - 1;
2331 ++ loff_t isize = i_size_read(inode);
2332 +
2333 +- new_size = i_size_read(inode) + len;
2334 + if (offset & blksize_mask || len & blksize_mask) {
2335 + error = -EINVAL;
2336 + goto out_unlock;
2337 + }
2338 +
2339 +- /* check the new inode size does not wrap through zero */
2340 +- if (new_size > inode->i_sb->s_maxbytes) {
2341 ++ /*
2342 ++ * New inode size must not exceed ->s_maxbytes, accounting for
2343 ++ * possible signed overflow.
2344 ++ */
2345 ++ if (inode->i_sb->s_maxbytes - isize < len) {
2346 + error = -EFBIG;
2347 + goto out_unlock;
2348 + }
2349 ++ new_size = isize + len;
2350 +
2351 + /* Offset should be less than i_size */
2352 +- if (offset >= i_size_read(inode)) {
2353 ++ if (offset >= isize) {
2354 + error = -EINVAL;
2355 + goto out_unlock;
2356 + }
2357 +diff --git a/kernel/time/clocksource.c b/kernel/time/clocksource.c
2358 +index 65f9e3f24dde..0e1b4be93dbf 100644
2359 +--- a/kernel/time/clocksource.c
2360 ++++ b/kernel/time/clocksource.c
2361 +@@ -119,6 +119,16 @@ static DEFINE_SPINLOCK(watchdog_lock);
2362 + static int watchdog_running;
2363 + static atomic_t watchdog_reset_pending;
2364 +
2365 ++static void inline clocksource_watchdog_lock(unsigned long *flags)
2366 ++{
2367 ++ spin_lock_irqsave(&watchdog_lock, *flags);
2368 ++}
2369 ++
2370 ++static void inline clocksource_watchdog_unlock(unsigned long *flags)
2371 ++{
2372 ++ spin_unlock_irqrestore(&watchdog_lock, *flags);
2373 ++}
2374 ++
2375 + static int clocksource_watchdog_kthread(void *data);
2376 + static void __clocksource_change_rating(struct clocksource *cs, int rating);
2377 +
2378 +@@ -142,9 +152,19 @@ static void __clocksource_unstable(struct clocksource *cs)
2379 + cs->flags &= ~(CLOCK_SOURCE_VALID_FOR_HRES | CLOCK_SOURCE_WATCHDOG);
2380 + cs->flags |= CLOCK_SOURCE_UNSTABLE;
2381 +
2382 ++ /*
2383 ++ * If the clocksource is registered clocksource_watchdog_kthread() will
2384 ++ * re-rate and re-select.
2385 ++ */
2386 ++ if (list_empty(&cs->list)) {
2387 ++ cs->rating = 0;
2388 ++ return;
2389 ++ }
2390 ++
2391 + if (cs->mark_unstable)
2392 + cs->mark_unstable(cs);
2393 +
2394 ++ /* kick clocksource_watchdog_kthread() */
2395 + if (finished_booting)
2396 + schedule_work(&watchdog_work);
2397 + }
2398 +@@ -164,7 +184,7 @@ void clocksource_mark_unstable(struct clocksource *cs)
2399 +
2400 + spin_lock_irqsave(&watchdog_lock, flags);
2401 + if (!(cs->flags & CLOCK_SOURCE_UNSTABLE)) {
2402 +- if (list_empty(&cs->wd_list))
2403 ++ if (!list_empty(&cs->list) && list_empty(&cs->wd_list))
2404 + list_add(&cs->wd_list, &watchdog_list);
2405 + __clocksource_unstable(cs);
2406 + }
2407 +@@ -319,9 +339,8 @@ static void clocksource_resume_watchdog(void)
2408 +
2409 + static void clocksource_enqueue_watchdog(struct clocksource *cs)
2410 + {
2411 +- unsigned long flags;
2412 ++ INIT_LIST_HEAD(&cs->wd_list);
2413 +
2414 +- spin_lock_irqsave(&watchdog_lock, flags);
2415 + if (cs->flags & CLOCK_SOURCE_MUST_VERIFY) {
2416 + /* cs is a clocksource to be watched. */
2417 + list_add(&cs->wd_list, &watchdog_list);
2418 +@@ -331,7 +350,6 @@ static void clocksource_enqueue_watchdog(struct clocksource *cs)
2419 + if (cs->flags & CLOCK_SOURCE_IS_CONTINUOUS)
2420 + cs->flags |= CLOCK_SOURCE_VALID_FOR_HRES;
2421 + }
2422 +- spin_unlock_irqrestore(&watchdog_lock, flags);
2423 + }
2424 +
2425 + static void clocksource_select_watchdog(bool fallback)
2426 +@@ -373,9 +391,6 @@ static void clocksource_select_watchdog(bool fallback)
2427 +
2428 + static void clocksource_dequeue_watchdog(struct clocksource *cs)
2429 + {
2430 +- unsigned long flags;
2431 +-
2432 +- spin_lock_irqsave(&watchdog_lock, flags);
2433 + if (cs != watchdog) {
2434 + if (cs->flags & CLOCK_SOURCE_MUST_VERIFY) {
2435 + /* cs is a watched clocksource. */
2436 +@@ -384,21 +399,19 @@ static void clocksource_dequeue_watchdog(struct clocksource *cs)
2437 + clocksource_stop_watchdog();
2438 + }
2439 + }
2440 +- spin_unlock_irqrestore(&watchdog_lock, flags);
2441 + }
2442 +
2443 + static int __clocksource_watchdog_kthread(void)
2444 + {
2445 + struct clocksource *cs, *tmp;
2446 + unsigned long flags;
2447 +- LIST_HEAD(unstable);
2448 + int select = 0;
2449 +
2450 + spin_lock_irqsave(&watchdog_lock, flags);
2451 + list_for_each_entry_safe(cs, tmp, &watchdog_list, wd_list) {
2452 + if (cs->flags & CLOCK_SOURCE_UNSTABLE) {
2453 + list_del_init(&cs->wd_list);
2454 +- list_add(&cs->wd_list, &unstable);
2455 ++ __clocksource_change_rating(cs, 0);
2456 + select = 1;
2457 + }
2458 + if (cs->flags & CLOCK_SOURCE_RESELECT) {
2459 +@@ -410,11 +423,6 @@ static int __clocksource_watchdog_kthread(void)
2460 + clocksource_stop_watchdog();
2461 + spin_unlock_irqrestore(&watchdog_lock, flags);
2462 +
2463 +- /* Needs to be done outside of watchdog lock */
2464 +- list_for_each_entry_safe(cs, tmp, &unstable, wd_list) {
2465 +- list_del_init(&cs->wd_list);
2466 +- __clocksource_change_rating(cs, 0);
2467 +- }
2468 + return select;
2469 + }
2470 +
2471 +@@ -447,6 +455,9 @@ static inline int __clocksource_watchdog_kthread(void) { return 0; }
2472 + static bool clocksource_is_watchdog(struct clocksource *cs) { return false; }
2473 + void clocksource_mark_unstable(struct clocksource *cs) { }
2474 +
2475 ++static void inline clocksource_watchdog_lock(unsigned long *flags) { }
2476 ++static void inline clocksource_watchdog_unlock(unsigned long *flags) { }
2477 ++
2478 + #endif /* CONFIG_CLOCKSOURCE_WATCHDOG */
2479 +
2480 + /**
2481 +@@ -775,14 +786,19 @@ EXPORT_SYMBOL_GPL(__clocksource_update_freq_scale);
2482 + */
2483 + int __clocksource_register_scale(struct clocksource *cs, u32 scale, u32 freq)
2484 + {
2485 ++ unsigned long flags;
2486 +
2487 + /* Initialize mult/shift and max_idle_ns */
2488 + __clocksource_update_freq_scale(cs, scale, freq);
2489 +
2490 + /* Add clocksource to the clocksource list */
2491 + mutex_lock(&clocksource_mutex);
2492 ++
2493 ++ clocksource_watchdog_lock(&flags);
2494 + clocksource_enqueue(cs);
2495 + clocksource_enqueue_watchdog(cs);
2496 ++ clocksource_watchdog_unlock(&flags);
2497 ++
2498 + clocksource_select();
2499 + clocksource_select_watchdog(false);
2500 + mutex_unlock(&clocksource_mutex);
2501 +@@ -804,8 +820,13 @@ static void __clocksource_change_rating(struct clocksource *cs, int rating)
2502 + */
2503 + void clocksource_change_rating(struct clocksource *cs, int rating)
2504 + {
2505 ++ unsigned long flags;
2506 ++
2507 + mutex_lock(&clocksource_mutex);
2508 ++ clocksource_watchdog_lock(&flags);
2509 + __clocksource_change_rating(cs, rating);
2510 ++ clocksource_watchdog_unlock(&flags);
2511 ++
2512 + clocksource_select();
2513 + clocksource_select_watchdog(false);
2514 + mutex_unlock(&clocksource_mutex);
2515 +@@ -817,6 +838,8 @@ EXPORT_SYMBOL(clocksource_change_rating);
2516 + */
2517 + static int clocksource_unbind(struct clocksource *cs)
2518 + {
2519 ++ unsigned long flags;
2520 ++
2521 + if (clocksource_is_watchdog(cs)) {
2522 + /* Select and try to install a replacement watchdog. */
2523 + clocksource_select_watchdog(true);
2524 +@@ -830,8 +853,12 @@ static int clocksource_unbind(struct clocksource *cs)
2525 + if (curr_clocksource == cs)
2526 + return -EBUSY;
2527 + }
2528 ++
2529 ++ clocksource_watchdog_lock(&flags);
2530 + clocksource_dequeue_watchdog(cs);
2531 + list_del_init(&cs->list);
2532 ++ clocksource_watchdog_unlock(&flags);
2533 ++
2534 + return 0;
2535 + }
2536 +
2537 +diff --git a/kernel/trace/trace_uprobe.c b/kernel/trace/trace_uprobe.c
2538 +index df08863e6d53..fff97dc0b70f 100644
2539 +--- a/kernel/trace/trace_uprobe.c
2540 ++++ b/kernel/trace/trace_uprobe.c
2541 +@@ -55,6 +55,7 @@ struct trace_uprobe {
2542 + struct list_head list;
2543 + struct trace_uprobe_filter filter;
2544 + struct uprobe_consumer consumer;
2545 ++ struct path path;
2546 + struct inode *inode;
2547 + char *filename;
2548 + unsigned long offset;
2549 +@@ -287,7 +288,7 @@ static void free_trace_uprobe(struct trace_uprobe *tu)
2550 + for (i = 0; i < tu->tp.nr_args; i++)
2551 + traceprobe_free_probe_arg(&tu->tp.args[i]);
2552 +
2553 +- iput(tu->inode);
2554 ++ path_put(&tu->path);
2555 + kfree(tu->tp.call.class->system);
2556 + kfree(tu->tp.call.name);
2557 + kfree(tu->filename);
2558 +@@ -361,7 +362,6 @@ static int register_trace_uprobe(struct trace_uprobe *tu)
2559 + static int create_trace_uprobe(int argc, char **argv)
2560 + {
2561 + struct trace_uprobe *tu;
2562 +- struct inode *inode;
2563 + char *arg, *event, *group, *filename;
2564 + char buf[MAX_EVENT_NAME_LEN];
2565 + struct path path;
2566 +@@ -369,7 +369,6 @@ static int create_trace_uprobe(int argc, char **argv)
2567 + bool is_delete, is_return;
2568 + int i, ret;
2569 +
2570 +- inode = NULL;
2571 + ret = 0;
2572 + is_delete = false;
2573 + is_return = false;
2574 +@@ -435,21 +434,16 @@ static int create_trace_uprobe(int argc, char **argv)
2575 + }
2576 + /* Find the last occurrence, in case the path contains ':' too. */
2577 + arg = strrchr(argv[1], ':');
2578 +- if (!arg) {
2579 +- ret = -EINVAL;
2580 +- goto fail_address_parse;
2581 +- }
2582 ++ if (!arg)
2583 ++ return -EINVAL;
2584 +
2585 + *arg++ = '\0';
2586 + filename = argv[1];
2587 + ret = kern_path(filename, LOOKUP_FOLLOW, &path);
2588 + if (ret)
2589 +- goto fail_address_parse;
2590 +-
2591 +- inode = igrab(d_inode(path.dentry));
2592 +- path_put(&path);
2593 ++ return ret;
2594 +
2595 +- if (!inode || !S_ISREG(inode->i_mode)) {
2596 ++ if (!d_is_reg(path.dentry)) {
2597 + ret = -EINVAL;
2598 + goto fail_address_parse;
2599 + }
2600 +@@ -488,7 +482,7 @@ static int create_trace_uprobe(int argc, char **argv)
2601 + goto fail_address_parse;
2602 + }
2603 + tu->offset = offset;
2604 +- tu->inode = inode;
2605 ++ tu->path = path;
2606 + tu->filename = kstrdup(filename, GFP_KERNEL);
2607 +
2608 + if (!tu->filename) {
2609 +@@ -556,7 +550,7 @@ static int create_trace_uprobe(int argc, char **argv)
2610 + return ret;
2611 +
2612 + fail_address_parse:
2613 +- iput(inode);
2614 ++ path_put(&path);
2615 +
2616 + pr_info("Failed to parse address or file.\n");
2617 +
2618 +@@ -935,6 +929,7 @@ probe_event_enable(struct trace_uprobe *tu, struct trace_event_file *file,
2619 + goto err_flags;
2620 +
2621 + tu->consumer.filter = filter;
2622 ++ tu->inode = d_real_inode(tu->path.dentry);
2623 + ret = uprobe_register(tu->inode, tu->offset, &tu->consumer);
2624 + if (ret)
2625 + goto err_buffer;
2626 +@@ -980,6 +975,7 @@ probe_event_disable(struct trace_uprobe *tu, struct trace_event_file *file)
2627 + WARN_ON(!uprobe_filter_is_empty(&tu->filter));
2628 +
2629 + uprobe_unregister(tu->inode, tu->offset, &tu->consumer);
2630 ++ tu->inode = NULL;
2631 + tu->tp.flags &= file ? ~TP_FLAG_TRACE : ~TP_FLAG_PROFILE;
2632 +
2633 + uprobe_buffer_disable();
2634 +diff --git a/kernel/tracepoint.c b/kernel/tracepoint.c
2635 +index 671b13457387..1e37da2e0c25 100644
2636 +--- a/kernel/tracepoint.c
2637 ++++ b/kernel/tracepoint.c
2638 +@@ -207,7 +207,7 @@ static int tracepoint_add_func(struct tracepoint *tp,
2639 + lockdep_is_held(&tracepoints_mutex));
2640 + old = func_add(&tp_funcs, func, prio);
2641 + if (IS_ERR(old)) {
2642 +- WARN_ON_ONCE(1);
2643 ++ WARN_ON_ONCE(PTR_ERR(old) != -ENOMEM);
2644 + return PTR_ERR(old);
2645 + }
2646 +
2647 +@@ -239,7 +239,7 @@ static int tracepoint_remove_func(struct tracepoint *tp,
2648 + lockdep_is_held(&tracepoints_mutex));
2649 + old = func_remove(&tp_funcs, func);
2650 + if (IS_ERR(old)) {
2651 +- WARN_ON_ONCE(1);
2652 ++ WARN_ON_ONCE(PTR_ERR(old) != -ENOMEM);
2653 + return PTR_ERR(old);
2654 + }
2655 +
2656 +diff --git a/lib/errseq.c b/lib/errseq.c
2657 +index df782418b333..81f9e33aa7e7 100644
2658 +--- a/lib/errseq.c
2659 ++++ b/lib/errseq.c
2660 +@@ -111,27 +111,22 @@ EXPORT_SYMBOL(errseq_set);
2661 + * errseq_sample() - Grab current errseq_t value.
2662 + * @eseq: Pointer to errseq_t to be sampled.
2663 + *
2664 +- * This function allows callers to sample an errseq_t value, marking it as
2665 +- * "seen" if required.
2666 ++ * This function allows callers to initialise their errseq_t variable.
2667 ++ * If the error has been "seen", new callers will not see an old error.
2668 ++ * If there is an unseen error in @eseq, the caller of this function will
2669 ++ * see it the next time it checks for an error.
2670 + *
2671 ++ * Context: Any context.
2672 + * Return: The current errseq value.
2673 + */
2674 + errseq_t errseq_sample(errseq_t *eseq)
2675 + {
2676 + errseq_t old = READ_ONCE(*eseq);
2677 +- errseq_t new = old;
2678 +
2679 +- /*
2680 +- * For the common case of no errors ever having been set, we can skip
2681 +- * marking the SEEN bit. Once an error has been set, the value will
2682 +- * never go back to zero.
2683 +- */
2684 +- if (old != 0) {
2685 +- new |= ERRSEQ_SEEN;
2686 +- if (old != new)
2687 +- cmpxchg(eseq, old, new);
2688 +- }
2689 +- return new;
2690 ++ /* If nobody has seen this error yet, then we can be the first. */
2691 ++ if (!(old & ERRSEQ_SEEN))
2692 ++ old = 0;
2693 ++ return old;
2694 + }
2695 + EXPORT_SYMBOL(errseq_sample);
2696 +
2697 +diff --git a/lib/swiotlb.c b/lib/swiotlb.c
2698 +index 44f7eb408fdb..0331de0e9144 100644
2699 +--- a/lib/swiotlb.c
2700 ++++ b/lib/swiotlb.c
2701 +@@ -750,7 +750,7 @@ swiotlb_alloc_buffer(struct device *dev, size_t size, dma_addr_t *dma_handle,
2702 + swiotlb_tbl_unmap_single(dev, phys_addr, size, DMA_TO_DEVICE,
2703 + DMA_ATTR_SKIP_CPU_SYNC);
2704 + out_warn:
2705 +- if ((attrs & DMA_ATTR_NO_WARN) && printk_ratelimit()) {
2706 ++ if (!(attrs & DMA_ATTR_NO_WARN) && printk_ratelimit()) {
2707 + dev_warn(dev,
2708 + "swiotlb: coherent allocation failed, size=%zu\n",
2709 + size);
2710 +diff --git a/sound/core/pcm_compat.c b/sound/core/pcm_compat.c
2711 +index 06d7c40af570..6491afbb5fd5 100644
2712 +--- a/sound/core/pcm_compat.c
2713 ++++ b/sound/core/pcm_compat.c
2714 +@@ -423,6 +423,8 @@ static int snd_pcm_ioctl_xfern_compat(struct snd_pcm_substream *substream,
2715 + return -ENOTTY;
2716 + if (substream->stream != dir)
2717 + return -EINVAL;
2718 ++ if (substream->runtime->status->state == SNDRV_PCM_STATE_OPEN)
2719 ++ return -EBADFD;
2720 +
2721 + if ((ch = substream->runtime->channels) > 128)
2722 + return -EINVAL;
2723 +diff --git a/sound/core/seq/seq_virmidi.c b/sound/core/seq/seq_virmidi.c
2724 +index f48a4cd24ffc..289ae6bb81d9 100644
2725 +--- a/sound/core/seq/seq_virmidi.c
2726 ++++ b/sound/core/seq/seq_virmidi.c
2727 +@@ -174,12 +174,12 @@ static void snd_virmidi_output_trigger(struct snd_rawmidi_substream *substream,
2728 + }
2729 + return;
2730 + }
2731 ++ spin_lock_irqsave(&substream->runtime->lock, flags);
2732 + if (vmidi->event.type != SNDRV_SEQ_EVENT_NONE) {
2733 + if (snd_seq_kernel_client_dispatch(vmidi->client, &vmidi->event, in_atomic(), 0) < 0)
2734 +- return;
2735 ++ goto out;
2736 + vmidi->event.type = SNDRV_SEQ_EVENT_NONE;
2737 + }
2738 +- spin_lock_irqsave(&substream->runtime->lock, flags);
2739 + while (1) {
2740 + count = __snd_rawmidi_transmit_peek(substream, buf, sizeof(buf));
2741 + if (count <= 0)
2742 +diff --git a/sound/drivers/aloop.c b/sound/drivers/aloop.c
2743 +index 1063a4377502..eab7f594ebe7 100644
2744 +--- a/sound/drivers/aloop.c
2745 ++++ b/sound/drivers/aloop.c
2746 +@@ -296,6 +296,8 @@ static int loopback_trigger(struct snd_pcm_substream *substream, int cmd)
2747 + cable->pause |= stream;
2748 + loopback_timer_stop(dpcm);
2749 + spin_unlock(&cable->lock);
2750 ++ if (substream->stream == SNDRV_PCM_STREAM_PLAYBACK)
2751 ++ loopback_active_notify(dpcm);
2752 + break;
2753 + case SNDRV_PCM_TRIGGER_PAUSE_RELEASE:
2754 + case SNDRV_PCM_TRIGGER_RESUME:
2755 +@@ -304,6 +306,8 @@ static int loopback_trigger(struct snd_pcm_substream *substream, int cmd)
2756 + cable->pause &= ~stream;
2757 + loopback_timer_start(dpcm);
2758 + spin_unlock(&cable->lock);
2759 ++ if (substream->stream == SNDRV_PCM_STREAM_PLAYBACK)
2760 ++ loopback_active_notify(dpcm);
2761 + break;
2762 + default:
2763 + return -EINVAL;
2764 +@@ -827,9 +831,11 @@ static int loopback_rate_shift_get(struct snd_kcontrol *kcontrol,
2765 + {
2766 + struct loopback *loopback = snd_kcontrol_chip(kcontrol);
2767 +
2768 ++ mutex_lock(&loopback->cable_lock);
2769 + ucontrol->value.integer.value[0] =
2770 + loopback->setup[kcontrol->id.subdevice]
2771 + [kcontrol->id.device].rate_shift;
2772 ++ mutex_unlock(&loopback->cable_lock);
2773 + return 0;
2774 + }
2775 +
2776 +@@ -861,9 +867,11 @@ static int loopback_notify_get(struct snd_kcontrol *kcontrol,
2777 + {
2778 + struct loopback *loopback = snd_kcontrol_chip(kcontrol);
2779 +
2780 ++ mutex_lock(&loopback->cable_lock);
2781 + ucontrol->value.integer.value[0] =
2782 + loopback->setup[kcontrol->id.subdevice]
2783 + [kcontrol->id.device].notify;
2784 ++ mutex_unlock(&loopback->cable_lock);
2785 + return 0;
2786 + }
2787 +
2788 +@@ -875,12 +883,14 @@ static int loopback_notify_put(struct snd_kcontrol *kcontrol,
2789 + int change = 0;
2790 +
2791 + val = ucontrol->value.integer.value[0] ? 1 : 0;
2792 ++ mutex_lock(&loopback->cable_lock);
2793 + if (val != loopback->setup[kcontrol->id.subdevice]
2794 + [kcontrol->id.device].notify) {
2795 + loopback->setup[kcontrol->id.subdevice]
2796 + [kcontrol->id.device].notify = val;
2797 + change = 1;
2798 + }
2799 ++ mutex_unlock(&loopback->cable_lock);
2800 + return change;
2801 + }
2802 +
2803 +@@ -888,13 +898,18 @@ static int loopback_active_get(struct snd_kcontrol *kcontrol,
2804 + struct snd_ctl_elem_value *ucontrol)
2805 + {
2806 + struct loopback *loopback = snd_kcontrol_chip(kcontrol);
2807 +- struct loopback_cable *cable = loopback->cables
2808 +- [kcontrol->id.subdevice][kcontrol->id.device ^ 1];
2809 ++ struct loopback_cable *cable;
2810 ++
2811 + unsigned int val = 0;
2812 +
2813 +- if (cable != NULL)
2814 +- val = (cable->running & (1 << SNDRV_PCM_STREAM_PLAYBACK)) ?
2815 +- 1 : 0;
2816 ++ mutex_lock(&loopback->cable_lock);
2817 ++ cable = loopback->cables[kcontrol->id.subdevice][kcontrol->id.device ^ 1];
2818 ++ if (cable != NULL) {
2819 ++ unsigned int running = cable->running ^ cable->pause;
2820 ++
2821 ++ val = (running & (1 << SNDRV_PCM_STREAM_PLAYBACK)) ? 1 : 0;
2822 ++ }
2823 ++ mutex_unlock(&loopback->cable_lock);
2824 + ucontrol->value.integer.value[0] = val;
2825 + return 0;
2826 + }
2827 +@@ -937,9 +952,11 @@ static int loopback_rate_get(struct snd_kcontrol *kcontrol,
2828 + {
2829 + struct loopback *loopback = snd_kcontrol_chip(kcontrol);
2830 +
2831 ++ mutex_lock(&loopback->cable_lock);
2832 + ucontrol->value.integer.value[0] =
2833 + loopback->setup[kcontrol->id.subdevice]
2834 + [kcontrol->id.device].rate;
2835 ++ mutex_unlock(&loopback->cable_lock);
2836 + return 0;
2837 + }
2838 +
2839 +@@ -959,9 +976,11 @@ static int loopback_channels_get(struct snd_kcontrol *kcontrol,
2840 + {
2841 + struct loopback *loopback = snd_kcontrol_chip(kcontrol);
2842 +
2843 ++ mutex_lock(&loopback->cable_lock);
2844 + ucontrol->value.integer.value[0] =
2845 + loopback->setup[kcontrol->id.subdevice]
2846 + [kcontrol->id.device].channels;
2847 ++ mutex_unlock(&loopback->cable_lock);
2848 + return 0;
2849 + }
2850 +
2851 +diff --git a/sound/firewire/amdtp-stream.c b/sound/firewire/amdtp-stream.c
2852 +index 4a1dc145327b..cb9acfe60f6a 100644
2853 +--- a/sound/firewire/amdtp-stream.c
2854 ++++ b/sound/firewire/amdtp-stream.c
2855 +@@ -773,8 +773,6 @@ static void amdtp_stream_first_callback(struct fw_iso_context *context,
2856 + u32 cycle;
2857 + unsigned int packets;
2858 +
2859 +- s->max_payload_length = amdtp_stream_get_max_payload(s);
2860 +-
2861 + /*
2862 + * For in-stream, first packet has come.
2863 + * For out-stream, prepared to transmit first packet
2864 +@@ -879,6 +877,9 @@ int amdtp_stream_start(struct amdtp_stream *s, int channel, int speed)
2865 +
2866 + amdtp_stream_update(s);
2867 +
2868 ++ if (s->direction == AMDTP_IN_STREAM)
2869 ++ s->max_payload_length = amdtp_stream_get_max_payload(s);
2870 ++
2871 + if (s->flags & CIP_NO_HEADER)
2872 + s->tag = TAG_NO_CIP_HEADER;
2873 + else
2874 +diff --git a/sound/pci/hda/patch_realtek.c b/sound/pci/hda/patch_realtek.c
2875 +index 8c238e51bb5a..2dd34dd77447 100644
2876 +--- a/sound/pci/hda/patch_realtek.c
2877 ++++ b/sound/pci/hda/patch_realtek.c
2878 +@@ -3832,7 +3832,7 @@ static void alc280_fixup_hp_gpio4(struct hda_codec *codec,
2879 + }
2880 + }
2881 +
2882 +-#if IS_REACHABLE(INPUT)
2883 ++#if IS_REACHABLE(CONFIG_INPUT)
2884 + static void gpio2_mic_hotkey_event(struct hda_codec *codec,
2885 + struct hda_jack_callback *event)
2886 + {
2887 +diff --git a/tools/power/acpi/Makefile.config b/tools/power/acpi/Makefile.config
2888 +index 2cccbba64418..f304be71c278 100644
2889 +--- a/tools/power/acpi/Makefile.config
2890 ++++ b/tools/power/acpi/Makefile.config
2891 +@@ -56,6 +56,7 @@ INSTALL_SCRIPT = ${INSTALL_PROGRAM}
2892 + # to compile vs uClibc, that can be done here as well.
2893 + CROSS = #/usr/i386-linux-uclibc/usr/bin/i386-uclibc-
2894 + CROSS_COMPILE ?= $(CROSS)
2895 ++LD = $(CC)
2896 + HOSTCC = gcc
2897 +
2898 + # check if compiler option is supported
2899 +diff --git a/tools/testing/selftests/firmware/fw_filesystem.sh b/tools/testing/selftests/firmware/fw_filesystem.sh
2900 +index f9508e1a4058..6b63b6bf2661 100755
2901 +--- a/tools/testing/selftests/firmware/fw_filesystem.sh
2902 ++++ b/tools/testing/selftests/firmware/fw_filesystem.sh
2903 +@@ -46,9 +46,11 @@ test_finish()
2904 + echo "$OLD_TIMEOUT" >/sys/class/firmware/timeout
2905 + fi
2906 + if [ "$OLD_FWPATH" = "" ]; then
2907 +- OLD_FWPATH=" "
2908 ++ # A zero-length write won't work; write a null byte
2909 ++ printf '\000' >/sys/module/firmware_class/parameters/path
2910 ++ else
2911 ++ echo -n "$OLD_FWPATH" >/sys/module/firmware_class/parameters/path
2912 + fi
2913 +- echo -n "$OLD_FWPATH" >/sys/module/firmware_class/parameters/path
2914 + rm -f "$FW"
2915 + rmdir "$FWPATH"
2916 + }