Quantal update to 3.5.7.3 stable release

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 3.5.7.3 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches are in the 3.5.7.3 stable release:

KVM: PPC: e500: fix allocation size error on g2h_tlb1_map
s390/kvm: dont announce RRBM support
cgroup: cgroup_subsys->fork() should be called after the task is added to css_set
freezer: add missing mb's to freezer_count() and freezer_should_skip()
ath9k_hw: Enable hw PLL power save for AR9462
usb: gadget: tcm_usb_gadget: NULL terminate the FS descriptor list
usb: gadget: network: fix bind() error path
usb: gadget: midi: free hs descriptors
usb: gadget: phonet: free requests in pn_bind()'s error path
usb: gadget: uvc: fix error path in uvc_function_bind()
x86: hpet: Fix masking of MSI interrupts
usb: musb: cppi_dma: export cppi_interrupt()
iscsi-target: Fix bug in handling of ExpStatSN ACK during u32 wrap-around
iscsi-target: Always send a response before terminating iSCSI connection
SUNRPC: Fix validity issues with rpc_pipefs sb->s_fs_info
ext4: fix memory leak in ext4_xattr_set_acl()'s error path
ARM: mm: use pteval_t to represent page protection values
perf test: fix a build error on builtin-test
USB: fix endpoint-disabling for failed config changes
genirq: Always force thread affinity
xhci: Fix conditional check in bandwidth calculation.
xHCI: Fix TD Size calculation on 1.0 hosts.
xhci: fix null-pointer dereference when destroying half-built segment rings
xhci: Extend Fresco Logic MSI quirk.
usb: host: xhci: Stricter conditional for Z1 system models for Compliance Mode Patch
Staging: bcm: Add two products and remove an existing product.
rcu: Fix batch-limit size problem
ext4: init pagevec in ext4_da_block_invalidatepages
powerpc: Fix CONFIG_RELOCATABLE=y CONFIG_CRASH_DUMP=n build
ftrace: Clear bits properly in reset_iter_read()
cdc-acm: implement TIOCSSERIAL to avoid blocking close(2)
ACPI / battery: Correct battery capacity values on Thinkpads
cgroup: remove incorrect dget/dput() pair in cgroup_create_dir()
Bluetooth: Add support for BCM20702A0 [04ca, 2003]
Bluetooth: Add support for BCM20702A0 [0b05, 17b5]
regulator: wm831x: Set the new rather than old value for DVS VSEL
drm: fix documentation for drm_crtc_set_mode()
mfd: Only unregister platform devices allocated by the mfd core
NFS: Add sequence_priviliged_ops for nfs4_proc_sequence()
drm/i915: make the panel fitter work on pipes B and C on IVB
USB: add new zte 3g-dongle's pid to option.c
ACPI / PM: Add Sony Vaio VPCEB1S1E to nonvs blacklist.
mfd: wm8994: Add support for WM1811 rev E
Revert "8139cp: revert "set ring address before enabling receiver""
8139cp: set ring address after enabling C+ mode
USB: OHCI: workaround for hardware bug: retired TDs not added to the Done Queue
USB: option: blacklist network interface on Huawei E173
USB: cp210x: add Virtenio Preon32 device id
usb: ftdi_sio: fixup BeagleBone A5+ quirk
USB: ftdi_sio: Add support for Newport AGILIS motor drivers
qla2xxx: Look up LUN for abort requests
iscsit: use GFP_ATOMIC under spin lock
ASoC: wm8994: Use the same DCS codes for all WM1811 variants
sata_promise: fix hardreset lockdep error
xhci: Add Lynx Point LP to list of Intel switchable hosts
USB: mark uas driver as BROKEN
can: Do not call dev_put if restart timer is running upon close
mlx4_core: Fix potential deadlock in mlx4_eq_int()
xfs: fix stray dquot unlock when reclaiming dquots
KVM: Fix user memslot overlap check
ext4: fix possible use after free with metadata csum
prevent stack buffer overflow in host_reset
mvsas: fix undefined bit shift
qla2xxx: Test and clear FCPORT_UPDATE_NEEDED atomically.
ACPI: do acpisleep dmi check when CONFIG_ACPI_SLEEP is set
ACPI / PNP: Do not crash due to stale pointer use during system resume
ring-buffer: Fix NULL pointer if rb_set_head_page() fails
firewire: net: Fix handling of fragmented multicast/broadcast packets.
HID: Add Apple wireless keyboard 2011 ANSI to special driver list
libata: set dma_mode to 0xff in reset
s390/cio: fix pgid reserved check
Bluetooth: Add missing lock nesting notation
Bluetooth: cancel power_on work when unregistering the device
Input: wacom - fix touch support for Bamboo Fun CTH-461
ALSA: usb-audio: Avoid autopm calls after disconnection
ALSA: usb-audio: Fix missing autopm for MIDI input
ACPI / video: ignore BIOS initial backlight value for HP Folio 13-2000
mac80211: introduce IEEE80211_HW_TEARDOWN_AGGR_ON_BAR_FAIL
Revert: "rt2x00: Don't let mac80211 send a BAR when an AMPDU subframe fails"
x86,AMD: Power driver support for AMD's family 16h processors
target/file: Fix 32-bit highmem breakage for SGL -> iovec mapping
drm/i915: Close race between processing unpin task and queueing the flip
cgroup_rm_file: don't delete the uncreated files
pnpacpi: fix incorrect TEST_ALPHA() test
drm/radeon: stop page faults from hanging the system (v2)
drm/radeon/dce32+: use fractional fb dividers for high clocks
drm/radeon: fix eDP clk and lane setup for scaled modes
regmap: debugfs: Avoid overflows for very small reads
Revert "ath9k_hw: Update AR9003 high_power tx gain table"
b43legacy: Fix firmware loading when driver is built into the kernel
ath9k: ar9003: fix OTP register offsets for AR9340
bcma: mips: fix clearing device IRQ
ath9k_hw: Fix signal strength / channel noise reporting
ath5k: fix tx path skb leaks
b43: fix tx path skb leaks
drm/i915: drop buggy write to FDI_RX_CHICKEN register
drm/i915: disable cpt phase pointer fdi rx workaround
iwlwifi: silently ignore fw flaws in Tx path
iwlwifi: don't handle masked interrupt
mm: dmapool: use provided gfp flags for all dma_alloc_coherent() calls
nfs: don't extend writes to cover entire page if pagecache is invalid
solos-pci: fix double-free of TX skb in DMA mode
ALSA: hda - Add stereo-dmic fixup for Acer Aspire One 522
nfs: don't zero out the rest of the page if we hit the EOF on a DIO READ
drm/radeon: fix amd afusion gpu setup aka sumo v2
NFS: avoid NULL dereference in nfs_destroy_server
sbp-target: fix error path in sbp_make_tpg()
target/tcm_fc: fix the lockdep warning due to inconsistent lock state
MIPS: Fix poweroff failure when HOTPLUG_CPU configured.
fix Null pointer dereference on disk error
NFS: Fix calls to drop_nlink()
Input: walkera0701 - fix crash on startup
SUNRPC: continue run over clients list on PipeFS event instead of break
proc: pid/status: show all supplementary groups
CRIS: fix I/O macros
virtio: force vring descriptors to be allocated from lowmem
nfs: fix wrong object type in lockowner_slab
jffs2: hold erase_completion_lock on exit
nfsd: fix v4 reply caching
mtd cs553x_nand: Initialise ecc.strength before nand_scan()
kbuild: Do not remove vmlinux when cleaning external module
ASoC: sigmadsp: Fix endianness conversion issue
nfsd: avoid permission checks on EXCLUSIVE_CREATE replay
x86, 8042: Enable A20 using KBC to fix S3 resume on some MSI laptops
mtd: nand: gpmi: reset BCH earlier, too, to avoid NAND startup problems
ALSA: hda - Fix pin configuration of HP Pavilion dv7
ALSA: hda - Always turn on pins for HDMI/DP
OMAP: board-files: fix i2c_bus for tfp410
i2400m: add Intel 6150 device IDs
ALSA: hda - Fix the wrong pincaps set in ALC861VD dallas/hp fixup
nfsd4: fix oops on unusual readlike compound
qmi_wwan/cdc_ether: add Dell Wireless 5800 (Novatel E362) USB IDs
ARM: missing ->mmap_sem around find_vma() in swp_emulate.c
ARM: 7607/1: realview: fix private peripheral memory base for EB rev. B boards
cifs: don't compare uniqueids in cifs_prime_dcache unless server inode numbers are in use
intel-iommu: Free old page tables before creating superpage
vfs: d_obtain_alias() needs to use "/" as default name.
mm: fix calculation of dirtyable memory
exec: do not leave bprm->interp on stack
SGI-XP: handle non-fatal traps
dm persistent data: rename node to btree_node
dm ioctl: prevent unsafe change to dm_ioctl data_size
sis900: fix sis900_set_mode call parameters.
ne2000: add the right platform device
irda: sir_dev: Fix copy/paste typo
ipv4: ip_check_defrag must not modify skb before unsharing
inet_diag: fix oops for IPv4 AF_INET6 TCP SYN-RECV state
inet_diag: validate byte code to prevent oops in inet_diag_bc_run()
inet_diag: avoid unsafe and nonsensical prefix matches in inet_diag_bc_run()
inet_diag: validate port comparison byte code to prevent unsafe reads
usb/ipheth: Add iPhone 5 support
bonding: Bonding driver does not consider the gso_max_size/gso_max_segs setting of slave devices.
bonding: fix race condition in bonding_store_slaves_active
sctp: fix memory leak in sctp_datamsg_from_user() when copy from user space fails
sctp: fix -ENOMEM result with invalid user space pointer in sendto() syscall
udf: fix memory leak while allocating blocks during write
udf: don't increment lenExtents while writing to a hole
staging: vt6656: [BUG] out of bound array reference in RFbSetPower.
staging: vt6656: 64 bit fixes: use u32 for QWORD definition.
staging: vt6656: 64 bit fixes : correct all type sizes
staging: vt6656: 64 bit fixes: fix long warning messages.
staging: vt6656: 64bit fixes: key.c/h change unsigned long to u32
staging: vt6656: 64bit fixes: vCommandTimerWait change calculation of timer.
drm/i915: Flush outstanding unpin tasks before pageflipping
ext4: fix extent tree corruption caused by hole punch
ext4: check dioread_nolock on remount
drm/i915: fix flags in dma buf exporting
jbd2: fix assertion failure in jbd2_journal_flush()
drm/radeon: add WAIT_UNTIL to evergreen VM safe reg list
hwmon: (lm73} Detect and report i2c bus errors
ext4: do not try to write superblock on ro remount w/o journal
PCI: Work around Stratus ftServer broken PCIe hierarchy (fix DMI check)
PCI: Reduce Ricoh 0xe822 SD card reader base clock frequency to 50MHz
mm: Fix PageHead when !CONFIG_PAGEFLAGS_EXTENDED
tmpfs mempolicy: fix /proc/mounts corrupting memory
epoll: prevent missed events on EPOLL_CTL_MOD
drm/i915: add some barriers when changing DIPs
drm/i915: make sure we write all the DIP data bytes
RDMA/nes: Fix for terminate timer crash
RDMA/nes: Fix for crash when registering zero length MR for CQ
sparc: huge_ptep_set_* functions need to call set_huge_pte_at()
batman-adv: fix random jitter calculation
inet: Fix kmemleak in tcp_v4/6_syn_recv_sock and dccp_v4/6_request_recv_sock
net: sched: integer overflow fix
tcp: fix MSG_SENDPAGE_NOTLAST logic
tcp: implement RFC 5961 3.2
tcp: implement RFC 5961 4.2
tcp: refine SYN handling in tcp_validate_incoming
tcp: tcp_replace_ts_recent() should not be called from tcp_validate_incoming()
tcp: RFC 5961 5.2 Blind Data Injection Attack Mitigation
ACPI : do not use Lid and Sleep button for S5 wakeup
aoe: do not call bdi_init after blk_alloc_queue
Input: sentelic - only report position of first finger as ST coordinates
Input: gpio_keys - defer probing if GPIO probing is deferred
cifs: adjust sequence number downward after signing NT_CANCEL request
rtlwifi: fix incorrect use of usb_alloc_coherent with usb_control_msg
p54usb: add USB ID for T-Com Sinus 154 data II
ath9k_hw: Fix RX gain initvals for AR9485
p54usb: add USBIDs for two more p54usb devices
powerpc/vdso: Remove redundant locking in update_vsyscall_tz()
powerpc: Add missing NULL terminator to avoid boot panic on PPC40x
drm/radeon: add connector table for Mac G4 Silver
drm/radeon: Properly handle DDC probe for DP bridges
drm/nouveau: fix init with agpgart-uninorth
video: mxsfb: fix crash when unblanking the display
nfs: fix null checking in nfs_get_option_str()
SUNRPC: Ensure that we free the rpc_task after cleanups are done
NFS: Ensure that we free the rpc_task after read and write cleanups are done
ACPI / scan: Do not use dummy HID for system bus ACPI nodes
mm: limit mmu_gather batching to fix soft lockups on !CONFIG_PREEMPT
drivers/rtc/rtc-vt8500.c: correct handling of CR_24H bitfield
drivers/rtc/rtc-vt8500.c: fix handling of data passed in struct rtc_time
printk: fix incorrect length from print_time() when seconds > 99999
PM: Move disabling/enabling runtime PM to late suspend/early resume
signals: sys_ssetmask() uses uninitialized newmask
ext4: release buffer in failed path in dx_probe()
ALSA: hda - add mute LED for HP Pavilion 17 (Realtek codec)
drm/prime: drop reference on imported dma-buf come from gem
i915: ensure that VGA plane is disabled
[SCSI] mvsas: Fix oops when ata commond timeout.
Revert "drm/i915: no lvds quirk for Zotac ZDBOX SD ID12/ID13"
staging: comedi: Kconfig: COMEDI_NI_AT_A2150 should select COMEDI_FC
iscsi-target: Fix CmdSN comparison (use cmd->cmd_sn instead of cmd->stat_sn)
Linux 3.5.7.3

These patches needed context adjustments to apply:
Bluetooth: Add support for BCM20702A0 [04ca, 2003]
Bluetooth: Add support for BCM20702A0 [0b05, 17b5]
ALSA: hda - add mute LED for HP Pavilion 17 (Realtek codec)

These were dropped as they were already applied on Quantal:
exec: do not leave bprm->interp on stack
bonding: Bonding driver does not consider the gso_max_size/gso_max_segs setting of slave devices.