[ubuntu/disco-updates] linux-oracle 5.0.0-1004.8 (Accepted)
Andy Whitcroft
apw at canonical.com
Thu Oct 10 13:21:47 UTC 2019
linux-oracle (5.0.0-1004.8) disco; urgency=medium
* disco/linux-oracle: 5.0.0-1004.8 -proposed tracker (LP: #1846019)
* 5.0-based linux-oracle kernels can't run ADT (LP: #1845434)
- [config] CONFIG_VIRTIO=y
[ Ubuntu: 5.0.0-31.33 ]
* disco/linux: 5.0.0-31.33 -proposed tracker (LP: #1846026)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* /proc/self/maps paths missing on live session (was vlc won't start; eoan
19.10 & bionic 18.04 ubuntu/lubuntu/kubuntu/xubuntu/ubuntu-mate dailies)
(LP: #1842382)
- SAUCE: Revert "UBUNTU: SAUCE: shiftfs: enable overlayfs on shiftfs"
linux-oracle (5.0.0-1003.4) disco; urgency=medium
* disco/linux-oracle: 5.0.0-1003.4 -proposed tracker (LP: #1844358)
* Disco update: upstream stable patchset 2019-08-13 (LP: #1840076)
- [Config] updateconfigs for CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT
[ Ubuntu: 5.0.0-30.32 ]
* disco/linux: 5.0.0-30.32 -proposed tracker (LP: #1844362)
* Disco update: upstream stable patchset 2019-08-20 (LP: #1840846)
- Revert "e1000e: fix cyclic resets at link up with active tx"
- e1000e: start network tx queue only when link is up
- Input: synaptics - enable SMBUS on T480 thinkpad trackpad
- nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header
- drivers: base: cacheinfo: Ensure cpu hotplug work is done before Intel RDT
- firmware: improve LSM/IMA security behaviour
- irqchip/gic-v3-its: Fix command queue pointer comparison bug
- clk: ti: clkctrl: Fix returning uninitialized data
- efi/bgrt: Drop BGRT status field reserved bits check
- perf/core: Fix perf_sample_regs_user() mm check
- ARM: dts: gemini Fix up DNS-313 compatible string
- ARM: omap2: remove incorrect __init annotation
- afs: Fix uninitialised spinlock afs_volume::cb_break_lock
- x86/apic: Fix integer overflow on 10 bit left shift of cpu_khz
- be2net: fix link failure after ethtool offline test
- ppp: mppe: Add softdep to arc4
- sis900: fix TX completion
- ARM: dts: imx6ul: fix PWM[1-4] interrupts
- pinctrl: mcp23s08: Fix add_data and irqchip_add_nested call order
- dm table: don't copy from a NULL pointer in realloc_argv()
- dm verity: use message limit for data block corruption message
- x86/boot/64: Fix crash if kernel image crosses page table boundary
- x86/boot/64: Add missing fixup_pointer() for next_early_pgt access
- HID: chicony: add another quirk for PixArt mouse
- pinctrl: mediatek: Ignore interrupts that are wake only during resume
- cpu/hotplug: Fix out-of-bounds read when setting fail state
- pinctrl: mediatek: Update cur_mask in mask/mask ops
- linux/kernel.h: fix overflow for DIV_ROUND_UP_ULL
- genirq: Delay deactivation in free_irq()
- genirq: Fix misleading synchronize_irq() documentation
- genirq: Add optional hardware synchronization for shutdown
- x86/ioapic: Implement irq_get_irqchip_state() callback
- x86/irq: Handle spurious interrupt after shutdown gracefully
- x86/irq: Seperate unused system vectors from spurious entry again
- ARC: hide unused function unw_hdr_alloc
- s390: fix stfle zero padding
- s390/qdio: (re-)initialize tiqdio list entries
- s390/qdio: don't touch the dsci in tiqdio_add_input_queues()
- crypto: talitos - move struct talitos_edesc into talitos.h
- crypto: talitos - fix hash on SEC1.
- crypto/NX: Set receive window credits to max number of CRBs in RxFIFO
- drm/udl: introduce a macro to convert dev to udl.
- drm/udl: move to embedding drm device inside udl device.
- x86/entry/32: Fix ENDPROC of common_spurious
- irqchip/irq-csky-mpintc: Support auto irq deliver to all cpus
- arm64: dts: ls1028a: Fix CPU idle fail.
- selftests/powerpc: Add test of fork with mapping above 512TB
- x86/efi: fix a -Wtype-limits compilation warning
- pinctrl: ocelot: fix gpio direction for pins after 31
- pinctrl: ocelot: fix pinmuxing for pins after 31
- mm/oom_kill.c: fix uninitialized oc->constraint
- fork,memcg: alloc_thread_stack_node needs to set tsk->stack
- MIPS: ath79: fix ar933x uart parity mode
- MIPS: fix build on non-linux hosts
- arm64/efi: Mark __efistub_stext_offset as an absolute symbol explicitly
- scsi: iscsi: set auth_protocol back to NULL if CHAP_A value is not supported
- dmaengine: imx-sdma: fix use-after-free on probe error path
- wil6210: fix potential out-of-bounds read
- ath10k: Do not send probe response template for mesh
- ath9k: Check for errors when reading SREV register
- ath6kl: add some bounds checking
- ath10k: add peer id check in ath10k_peer_find_by_id
- wil6210: fix spurious interrupts in 3-msi
- ath: DFS JP domain W56 fixed pulse type 3 RADAR detection
- regmap: debugfs: Fix memory leak in regmap_debugfs_init
- batman-adv: fix for leaked TVLV handler.
- media: dvb: usb: fix use after free in dvb_usb_device_exit
- media: spi: IR LED: add missing of table registration
- crypto: talitos - fix skcipher failure due to wrong output IV
- media: ov7740: avoid invalid framesize setting
- media: marvell-ccic: fix DMA s/g desc number calculation
- media: vpss: fix a potential NULL pointer dereference
- media: media_device_enum_links32: clean a reserved field
- net: stmmac: dwmac1000: Clear unused address entries
- net: stmmac: dwmac4/5: Clear unused address entries
- qed: Set the doorbell address correctly
- signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig
- af_key: fix leaks in key_pol_get_resp and dump_sp.
- xfrm: Fix xfrm sel prefix length validation
- fscrypt: clean up some BUG_ON()s in block encryption/decryption
- perf annotate TUI browser: Do not use member from variable within its own
initialization
- media: mc-device.c: don't memset __user pointer contents
- media: saa7164: fix remove_proc_entry warning
- media: staging: media: davinci_vpfe: - Fix for memory leak if decoder
initialization fails.
- net: phy: Check against net_device being NULL
- crypto: talitos - properly handle split ICV.
- crypto: talitos - Align SEC1 accesses to 32 bits boundaries.
- tua6100: Avoid build warnings.
- batman-adv: Fix duplicated OGMs on NETDEV_UP
- locking/lockdep: Fix merging of hlocks with non-zero references
- media: wl128x: Fix some error handling in fm_v4l2_init_video_device()
- cpupower : frequency-set -r option misses the last cpu in related cpu list
- arm64: mm: make CONFIG_ZONE_DMA32 configurable
- perf jvmti: Address gcc string overflow warning for strncpy()
- net: stmmac: dwmac4: fix flow control issue
- net: stmmac: modify default value of tx-frames
- crypto: inside-secure - do not rely on the hardware last bit for result
descriptors
- net: fec: Do not use netdev messages too early
- net: axienet: Fix race condition causing TX hang
- s390/qdio: handle PENDING state for QEBSM devices
- RAS/CEC: Fix pfn insertion
- net: sfp: add mutex to prevent concurrent state checks
- ipset: Fix memory accounting for hash types on resize
- perf cs-etm: Properly set the value of 'old' and 'head' in snapshot mode
- perf test 6: Fix missing kvm module load for s390
- perf report: Fix OOM error in TUI mode on s390
- irqchip/meson-gpio: Add support for Meson-G12A SoC
- media: uvcvideo: Fix access to uninitialized fields on probe error
- media: fdp1: Support M3N and E3 platforms
- iommu: Fix a leak in iommu_insert_resv_region
- gpio: omap: fix lack of irqstatus_raw0 for OMAP4
- gpio: omap: ensure irq is enabled before wakeup
- regmap: fix bulk writes on paged registers
- bpf: silence warning messages in core
- media: s5p-mfc: fix reading min scratch buffer size on MFC v6/v7
- selinux: fix empty write to keycreate file
- x86/cpu: Add Ice Lake NNPI to Intel family
- ASoC: meson: axg-tdm: fix sample clock inversion
- rcu: Force inlining of rcu_read_lock()
- x86/cpufeatures: Add FDP_EXCPTN_ONLY and ZERO_FCS_FDS
- qed: iWARP - Fix tc for MPA ll2 connection
- block: null_blk: fix race condition for null_del_dev
- blkcg, writeback: dead memcgs shouldn't contribute to writeback ownership
arbitration
- xfrm: fix sa selector validation
- sched/core: Add __sched tag for io_schedule()
- sched/fair: Fix "runnable_avg_yN_inv" not used warnings
- perf/x86/intel/uncore: Handle invalid event coding for free-running counter
- x86/atomic: Fix smp_mb__{before,after}_atomic()
- perf evsel: Make perf_evsel__name() accept a NULL argument
- vhost_net: disable zerocopy by default
- ipoib: correcly show a VF hardware address
- x86/cacheinfo: Fix a -Wtype-limits warning
- blk-iolatency: only account submitted bios
- ACPICA: Clear status of GPEs on first direct enable
- EDAC/sysfs: Fix memory leak when creating a csrow object
- nvme: fix possible io failures when removing multipathed ns
- nvme-pci: properly report state change failure in nvme_reset_work
- nvme-pci: set the errno on ctrl state change error
- lightnvm: pblk: fix freeing of merged pages
- arm64: Do not enable IRQs for ct_user_exit
- ipsec: select crypto ciphers for xfrm_algo
- ipvs: defer hook registration to avoid leaks
- media: s5p-mfc: Make additional clocks optional
- media: i2c: fix warning same module names
- [Config] rename module adv7511
- ntp: Limit TAI-UTC offset
- timer_list: Guard procfs specific code
- acpi/arm64: ignore 5.1 FADTs that are reported as 5.0
- media: coda: fix mpeg2 sequence number handling
- media: coda: fix last buffer handling in V4L2_ENC_CMD_STOP
- media: coda: increment sequence offset for the last returned frame
- media: vimc: cap: check v4l2_fill_pixfmt return value
- media: hdpvr: fix locking and a missing msleep
- net: stmmac: sun8i: force select external PHY when no internal one
- rtlwifi: rtl8192cu: fix error handle when usb probe failed
- mt7601u: do not schedule rx_tasklet when the device has been disconnected
- x86/build: Add 'set -e' to mkcapflags.sh to delete broken capflags.c
- mt7601u: fix possible memory leak when the device is disconnected
- ipvs: fix tinfo memory leak in start_sync_thread
- ath10k: add missing error handling
- ath10k: fix PCIE device wake up failed
- perf tools: Increase MAX_NR_CPUS and MAX_CACHES
- ASoC: Intel: hdac_hdmi: Set ops to NULL on remove
- libata: don't request sense data on !ZAC ATA devices
- clocksource/drivers/exynos_mct: Increase priority over ARM arch timer
- xsk: Properly terminate assignment in xskq_produce_flush_desc
- rslib: Fix decoding of shortened codes
- rslib: Fix handling of of caller provided syndrome
- ixgbe: Check DDM existence in transceiver before access
- crypto: serpent - mark __serpent_setkey_sbox noinline
- crypto: asymmetric_keys - select CRYPTO_HASH where needed
- wil6210: drop old event after wmi_call timeout
- EDAC: Fix global-out-of-bounds write when setting edac_mc_poll_msec
- bcache: check CACHE_SET_IO_DISABLE in allocator code
- bcache: check CACHE_SET_IO_DISABLE bit in bch_journal()
- bcache: acquire bch_register_lock later in cached_dev_free()
- bcache: check c->gc_thread by IS_ERR_OR_NULL in cache_set_flush()
- bcache: fix potential deadlock in cached_def_free()
- net: hns3: fix a -Wformat-nonliteral compile warning
- net: hns3: add some error checking in hclge_tm module
- ath10k: destroy sdio workqueue while remove sdio module
- net: mvpp2: prs: Don't override the sign bit in SRAM parser shift
- igb: clear out skb->tstamp after reading the txtime
- iwlwifi: mvm: Drop large non sta frames
- bpf: fix uapi bpf_prog_info fields alignment
- perf stat: Make metric event lookup more robust
- perf stat: Fix group lookup for metric group
- net: usb: asix: init MAC address buffers
- rxrpc: Fix oops in tracepoint
- bpf, libbpf, smatch: Fix potential NULL pointer dereference
- selftests: bpf: fix inlines in test_lwt_seg6local
- bonding: validate ip header before check IPPROTO_IGMP
- gpiolib: Fix references to gpiod_[gs]et_*value_cansleep() variants
- tools: bpftool: Fix json dump crash on powerpc
- Bluetooth: hci_bcsp: Fix memory leak in rx_skb
- Bluetooth: Add new 13d3:3491 QCA_ROME device
- Bluetooth: Add new 13d3:3501 QCA_ROME device
- Bluetooth: 6lowpan: search for destination address in all peers
- perf tests: Fix record+probe_libc_inet_pton.sh for powerpc64
- Bluetooth: Check state in l2cap_disconnect_rsp
- gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable()
- Bluetooth: validate BLE connection interval updates
- gtp: fix suspicious RCU usage
- gtp: fix Illegal context switch in RCU read-side critical section.
- gtp: fix use-after-free in gtp_encap_destroy()
- gtp: fix use-after-free in gtp_newlink()
- net: mvmdio: defer probe of orion-mdio if a clock is not ready
- iavf: fix dereference of null rx_buffer pointer
- floppy: fix out-of-bounds read in next_valid_format
- floppy: fix invalid pointer dereference in drive_name
- xen: let alloc_xenballooned_pages() fail if not enough memory free
- scsi: NCR5380: Always re-enable reselection interrupt
- Revert "scsi: ncr5380: Increase register polling limit"
- scsi: core: Fix race on creating sense cache
- scsi: megaraid_sas: Fix calculation of target ID
- scsi: mac_scsi: Increase PIO/PDMA transfer length threshold
- scsi: mac_scsi: Fix pseudo DMA implementation, take 2
- crypto: ghash - fix unaligned memory access in ghash_setkey()
- crypto: ccp - Validate the the error value used to index error messages
- crypto: arm64/sha1-ce - correct digest for empty data in finup
- crypto: arm64/sha2-ce - correct digest for empty data in finup
- crypto: chacha20poly1305 - fix atomic sleep when using async algorithm
- crypto: crypto4xx - fix AES CTR blocksize value
- crypto: crypto4xx - fix blocksize for cfb and ofb
- crypto: crypto4xx - block ciphers should only accept complete blocks
- crypto: ccp - memset structure fields to zero before reuse
- crypto: ccp/gcm - use const time tag comparison.
- crypto: crypto4xx - fix a potential double free in ppc4xx_trng_probe
- bcache: Revert "bcache: fix high CPU occupancy during journal"
- bcache: Revert "bcache: free heap cache_set->flush_btree in
bch_journal_free"
- bcache: ignore read-ahead request failure on backing device
- bcache: fix mistaken sysfs entry for io_error counter
- bcache: destroy dc->writeback_write_wq if failed to create
dc->writeback_thread
- Input: gtco - bounds check collection indent level
- Input: synaptics - whitelist Lenovo T580 SMBus intertouch
- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
- arm64: tegra: Update Jetson TX1 GPU regulator timings
- iwlwifi: pcie: don't service an interrupt that was masked
- iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X
- iwlwifi: don't WARN when calling iwl_get_shared_mem_conf with RF-Kill
- iwlwifi: fix RF-Kill interrupt while FW load for gen2 devices
- NFSv4: Handle the special Linux file open access mode
- pnfs/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error
- pNFS: Fix a typo in pnfs_update_layout
- pnfs: Fix a problem where we gratuitously start doing I/O through the MDS
- lib/scatterlist: Fix mapping iterator when sg->offset is greater than
PAGE_SIZE
- ASoC: dapm: Adapt for debugfs API change
- raid5-cache: Need to do start() part job after adding journal device
- ALSA: seq: Break too long mutex context in the write loop
- ALSA: hda/realtek - Fixed Headphone Mic can't record on Dell platform
- media: v4l2: Test type instead of cfg->type in v4l2_ctrl_new_custom()
- media: coda: Remove unbalanced and unneeded mutex unlock
- media: videobuf2-core: Prevent size alignment wrapping buffer size to 0
- media: videobuf2-dma-sg: Prevent size from overflowing
- KVM: x86/vPMU: refine kvm_pmu err msg when event creation failed
- arm64: tegra: Fix AGIC register range
- fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys
inodes.
- kconfig: fix missing choice values in auto.conf
- drm/nouveau/i2c: Enable i2c pads & busses during preinit
- padata: use smp_mb in padata_reorder to avoid orphaned padata jobs
- dm zoned: fix zone state management race
- xen/events: fix binding user event channels to cpus
- 9p/xen: Add cleanup path in p9_trans_xen_init
- 9p/virtio: Add cleanup path in p9_virtio_init
- x86/boot: Fix memory leak in default_get_smp_config()
- perf/x86/intel: Fix spurious NMI on fixed counter
- perf/x86/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs
- perf/x86/amd/uncore: Set the thread mask for F17h L3 PMCs
- drm/edid: parse CEA blocks embedded in DisplayID
- intel_th: pci: Add Ice Lake NNPI support
- PCI: hv: Fix a use-after-free bug in hv_eject_device_work()
- PCI: Do not poll for PME if the device is in D3cold
- PCI: qcom: Ensure that PERST is asserted for at least 100 ms
- Btrfs: fix data loss after inode eviction, renaming it, and fsync it
- Btrfs: fix fsync not persisting dentry deletions due to inode evictions
- Btrfs: add missing inode version, ctime and mtime updates when punching hole
- IB/mlx5: Report correctly tag matching rendezvous capability
- HID: wacom: generic: only switch the mode on devices with LEDs
- HID: wacom: generic: Correct pad syncing
- HID: wacom: correct touch resolution x/y typo
- libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields
- coda: pass the host file in vma->vm_file on mmap
- include/asm-generic/bug.h: fix "cut here" for WARN_ON for __WARN_TAINT
architectures
- xfs: don't overflow xattr listent buffer
- xfs: rename m_inotbt_nores to m_finobt_nores
- xfs: don't ever put nlink > 0 inodes on the unlinked list
- xfs: reserve blocks for ifree transaction during log recovery
- xfs: fix reporting supported extra file attributes for statx()
- xfs: serialize unaligned dio writes against all other dio writes
- xfs: abort unaligned nowait directio early
- gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM
- crypto: caam - limit output IV to CBC to work around CTR mode DMA issue
- parisc: Ensure userspace privilege for ptraced processes in regset functions
- parisc: Fix kernel panic due invalid values in IAOQ0 or IAOQ1
- powerpc/32s: fix suspend/resume when IBATs 4-7 are used
- powerpc/watchpoint: Restore NV GPRs while returning from exception
- powerpc/powernv/npu: Fix reference leak
- powerpc/pseries: Fix oops in hotplug memory notifier
- mmc: sdhci-msm: fix mutex while in spinlock
- eCryptfs: fix a couple type promotion bugs
- mtd: rawnand: mtk: Correct low level time calculation of r/w cycle
- mtd: spinand: read returns badly if the last page has bitflips
- intel_th: msu: Fix single mode with disabled IOMMU
- Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug
- usb: Handle USB3 remote wakeup for LPM enabled devices correctly
- blk-throttle: fix zero wait time for iops throttled group
- blk-iolatency: clear use_delay when io.latency is set to zero
- blkcg: update blkcg_print_stat() to handle larger outputs
- net: mvmdio: allow up to four clocks to be specified for orion-mdio
- dt-bindings: allow up to four clocks for orion-mdio
- dm bufio: fix deadlock with loop device
- ath10k: Check tx_stats before use it
- ath10k: fix incorrect multicast/broadcast rate setting
- spi: rockchip: turn down tx dma bursts
- ath10k: Fix encoding for protected management frames
- media: v4l2-core: fix use-after-free error
- media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
- locking/lockdep: Fix OOO unlock when hlocks need merging
- media: aspeed: change irq to threaded irq
- gpio: omap: Fix lost edge wake-up interrupts
- media: davinci: vpif_capture: fix memory leak in vpif_probe()
- perf/x86/intel: Disable check_msr for real HW
- integrity: Fix __integrity_init_keyring() section mismatch
- iavf: allow null RX descriptors
- ASoC: rsnd: fixup mod ID calculation in rsnd_ctu_probe_
- bpf: fix callees pruning callers
- net: netsec: initialize tx ring on ndo_open
- EDAC/sysfs: Drop device references properly
- nvme-pci: adjust irq max_vector using num_possible_cpus()
- media: mt9m111: fix fw-node refactoring
- ASoC: soc-core: call snd_soc_unbind_card() under mutex_lock;
- ath10k: fix fw crash by moving chip reset after napi disabled
- netfilter: ctnetlink: Fix regression in conntrack entry deletion
- bpf: fix BPF_ALU32 | BPF_ARSH on BE arches
- gpio: Fix return value mismatch of function gpiod_get_from_of_node()
- ath9k: correctly handle short radar pulses
- ath10k: Fix memory leak in qmi
- net: hns3: add Asym Pause support to fix autoneg problem
- iwlwifi: dbg: fix debug monitor stop and restart delays
- bnxt_en: Disable bus master during PCI shutdown and driver unload.
- bnxt_en: Fix statistics context reservation logic for RDMA driver.
- perf stat: Fix metrics with --no-merge
- perf stat: Don't merge events in the same PMU
- net: hns3: enable broadcast promisc mode when initializing VF
- Bluetooth: hidp: NUL terminate a string in the compat ioctl
- xdp: fix race on generic receive path
- net: hns3: fix __QUEUE_STATE_STACK_XOFF not cleared issue
- blk-iolatency: fix STS_AGAIN handling
- scsi: NCR5380: Handle PDMA failure reliably
- scsi: sd_zbc: Fix compilation warning
- scsi: zfcp: fix request object use-after-free in send path causing seqno
errors
- scsi: zfcp: fix request object use-after-free in send path causing wrong
traces
- cifs: fix crash in smb2_compound_op()/smb2_set_next_command()
- cifs: Properly handle auto disabling of serverino option
- regulator: s2mps11: Fix ERR_PTR dereference on GPIO lookup failure
- iwlwifi: mvm: delay GTK setting in FW in AP mode
- iwlwifi: mvm: clear rfkill_safe_init_done when we start the firmware
- opp: Don't use IS_ERR on invalid supplies
- ASoC: core: Adapt for debugfs API change
- ceph: fix end offset in truncate_inode_pages_range call
- KVM: nVMX: Always sync GUEST_BNDCFGS when it comes from vmcs01
- KVM: VMX: Fix handling of #MC that occurs during VM-Entry
- KVM: VMX: check CPUID before allowing read/write of IA32_XSS
- KVM: PPC: Book3S HV: Signed extend decrementer value if not using large
decrementer
- KVM: PPC: Book3S HV: Clear pending decrementer exceptions on nested guest
entry
- KVM: PPC: Book3S HV: Fix CR0 setting in TM emulation
- signal/usb: Replace kill_pid_info_as_cred with kill_pid_usb_asyncio
- signal: Correct namespace fixups of si_pid and si_uid
- i3c: fix i2c and i3c scl rate by bus mode
- ARM: dts: gemini: Set DIR-685 SPI CS as active low
- rt2x00usb: fix rx queue hang
- block: Allow mapping of vmalloc-ed buffers
- block: Fix potential overflow in blk_report_zones()
- RDMA/srp: Accept again source addresses that do not have a port number
- mm/nvdimm: add is_ioremap_addr and use that to check ioremap address
- resource: fix locking in find_next_iomem_res()
- powerpc/powernv: Fix stale iommu table base after VFIO
- dax: Fix missed wakeup with PMD faults
- pstore: Fix double-free in pstore_mkfile() failure path
- [Config] rename module adv7511
* ACPI support for the ARMv8.2 Statistical Profiling Extension (LP: #1841490)
- ACPICA: ACPI 6.3: MADT: add support for statistical profiling in GICC
- ACPICA: ACPI 6.3: PPTT add additional fields in Processor Structure Flags
- ACPI/PPTT: Modify node flag detection to find last IDENTICAL
- ACPI/PPTT: Add function to return ACPI 6.3 Identical tokens
- arm_pmu: acpi: spe: Add initial MADT/SPE probing
- perf: arm_spe: Enable ACPI/Platform automatic module loading
* Backport support for software count cache flush Spectre v2 mitigation. (CVE)
(required for POWER9 DD2.3) (LP: #1822870) // QEMU - count cache flush
Spectre v2 mitigation (CVE) (required for POWER9 DD2.3) (LP: #1832622)
- KVM: PPC: Book3S: Add count cache flush parameters to kvmppc_get_cpu_char()
* Additional regression in CMA allocation rework (LP: #1841483)
- dma-direct: fix zone selection after an unaddressable CMA allocation
* [SRU][B-OEM-OSP1/D/E] reduce s2idle power consumption when BIOS uses shared
power resources (LP: #1840882)
- PCI / ACPI: Use cached ACPI device state to get PCI device power state
- ACPI / PM: Introduce concept of a _PR0 dependent device
- PCI / ACPI: Add _PR0 dependent devices
* ipv6: fix neighbour resolution with raw socket (LP: #1834465)
- ipv6: constify rt6_nexthop()
- ipv6: fix neighbour resolution with raw socket
* realtek r8822be kernel module fails after update to linux kernel-headers
5.0.0-21 (LP: #1838133)
- build_bug.h: add wrapper for _Static_assert
- lib/vsprintf.c: move sizeof(struct printf_spec) next to its definition
- linux/fs.h: move member alignment check next to definition of struct
filename
- rtw88: add license for Makefile
- rtw88: fix subscript above array bounds compiler warning
- rtw88: fix unassigned rssi_level in rtw_sta_info
- rtw88: avoid circular locking between local->iflist_mtx and rtwdev->mutex
- rtw88: Make some symbols static
- rtw88: pci: use ieee80211_ac_numbers instead of 0-3
- rtw88: pci: check if queue mapping exceeds size of ac_to_hwq
- rtw88: more descriptions about LPS
- rtw88: add fast xmit support
- rtw88: add support for random mac scan
- rtw88: add beacon function setting
- rtw88: 8822c: add rf write protection when switching channel
- rtw88: 8822c: update channel and bandwidth BB setting
- rtw88: 8822c: disable rx clock gating before counter reset
- rtw88: 8822c: use more accurate ofdm fa counting
- rtw88: power on again if it was already on
- rtw88: restore DACK results to save time
- rtw88: rsvd page should go though management queue
- rtw88: fix typo rtw_writ16_set
- rtw88: resolve order of tx power setting routines
- rtw88: do not use (void *) as argument
- rtw88: unify prefixes for tx power setting routine
- rtw88: remove unused variable
- rtw88: fix incorrect tx power limit at 5G
- rtw88: choose the lowest as world-wide power limit
- rtw88: correct power limit selection
- rtw88: update tx power limit table to RF v20
- rtw88: remove all RTW_MAX_POWER_INDEX macro
- rtw88: refine flow to get tx power index
- rtw88: Fix misuse of GENMASK macro
- rtw88: pci: Rearrange the memory usage for skb in RX ISR
- rtw88: pci: Use DMA sync instead of remapping in RX ISR
- rtw88: debug: dump tx power indexes in use
- rtw88: use txpwr_lmt_cfg_pair struct, not arrays
- rtw88: pci: remove set but not used variable 'ip_sel'
- rtw88: allow c2h operation in irq context
- rtw88: enclose c2h cmd handle with mutex
- rtw88: add BT co-existence support
- SAUCE: rtw88: pci: enable MSI interrupt
* Disco update: upstream stable patchset 2019-08-30 (LP: #1842128)
- selftests/bpf: fix sendmsg6_prog on s390
- net: mvpp2: Don't check for 3 consecutive Idle frames for 10G links
- selftests: forwarding: gre_multipath: Enable IPv4 forwarding
- selftests: forwarding: gre_multipath: Fix flower filters
- can: mcp251x: add error check when wq alloc failed
- can: gw: Fix error path of cgw_module_init
- ASoC: rockchip: Fix mono capture
- mac80211_hwsim: Fix possible null-pointer dereferences in
hwsim_dump_radio_nl()
- netfilter: ipset: Actually allow destination MAC address for hash:ip,mac
sets too
- netfilter: ipset: Copy the right MAC address in bitmap:ip,mac and
hash:ip,mac sets
- rxrpc: Fix potential deadlock
- rxrpc: Fix the lack of notification when sendmsg() fails on a DATA packet
- net: phy: phy_led_triggers: Fix a possible null-pointer dereference in
phy_led_trigger_change_speed()
- NFS: Fix regression whereby fscache errors are appearing on 'nofsc' mounts
- HID: quirks: Set the INCREMENT_USAGE_ON_DUPLICATE quirk on Saitek X52
- drm/rockchip: Suspend DP late
- SMB3: Fix potential memory leak when processing compound chain
- s390: put _stext and _etext into .text section
- net: stmmac: Fix issues when number of Queues >= 4
- net: stmmac: tc: Do not return a fragment entry
- block, bfq: handle NULL return value by bfq_init_rq()
- KVM: arm64: Don't write junk to sysregs on reset
- KVM: arm: Don't write junk to CP15 registers on reset
- clk: socfpga: stratix10: fix rate caclulationg for cnt_clks
- ceph: clear page dirty before invalidate page
- Drivers: hv: vmbus: Fix virt_to_hvpfn() for X86_PAE
- dm integrity: fix a crash due to BUG_ON in __journal_read_write()
- dm raid: add missing cleanup in raid_ctr()
- xfs: don't trip over uninitialized buffer on extent read of corrupted inode
- xfs: always rejoin held resources during defer roll
- rxrpc: Fix local endpoint refcounting
- rxrpc: Fix read-after-free in rxrpc_queue_local()
- rxrpc: Fix local endpoint replacement
- rxrpc: Fix local refcounting
- regulator: axp20x: fix DCDCA and DCDCD for AXP806
- regulator: axp20x: fix DCDC5 and DCDC6 for AXP803
- HID: Add 044f:b320 ThrustMaster, Inc. 2 in 1 DT
- MIPS: kernel: only use i8253 clocksource with periodic clockevent
- mips: fix cacheinfo
- netfilter: ebtables: fix a memory leak bug in compat
- ASoC: dapm: Fix handling of custom_stop_condition on DAPM graph walks
- spi: pxa2xx: Balance runtime PM enable/disable on error
- bpf: sockmap, sock_map_delete needs to use xchg
- bpf: sockmap, synchronize_rcu before free'ing map
- bpf: sockmap, only create entry if ulp is not already enabled
- ASoC: dapm: fix a memory leak bug
- bonding: Force slave speed check after link state recovery for 802.3ad
- can: dev: call netif_carrier_off() in register_candev()
- ASoC: Fail card instantiation if DAI format setup fails
- st21nfca_connectivity_event_received: null check the allocation
- st_nci_hci_connectivity_event_received: null check the allocation
- {nl,mac}80211: fix interface combinations on crypto controlled devices
- ASoC: ti: davinci-mcasp: Fix clk PDIR handling for i2s master mode
- ASoC: ti: davinci-mcasp: Correct slot_width posed constraint
- net: usb: qmi_wwan: Add the BroadMobi BM818 card
- qed: RDMA - Fix the hw_ver returned in device attributes
- isdn: mISDN: hfcsusb: Fix possible null-pointer dereferences in
start_isoc_chain()
- net: stmmac: manage errors returned by of_get_mac_address()
- netfilter: ipset: Fix rename concurrency with listing
- nvmem: Use the same permissions for eeprom as for nvmem
- iwlwifi: mvm: avoid races in rate init and rate perform
- iwlwifi: dbg_ini: move iwl_dbg_tlv_load_bin out of debug override ifdef
- iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef
- iwlwifi: fix locking in delayed GTK setting
- iwlwifi: mvm: send LQ command always ASYNC
- isdn: hfcsusb: Fix mISDN driver crash caused by transfer buffer on the stack
- perf bench numa: Fix cpu0 binding
- spi: pxa2xx: Add support for Intel Comet Lake
- spi: pxa2xx: Add support for Intel Tiger Lake
- can: sja1000: force the string buffer NULL-terminated
- can: peak_usb: force the string buffer NULL-terminated
- net/ethernet/qlogic/qed: force the string buffer NULL-terminated
- NFSv4: Fix a credential refcount leak in nfs41_check_delegation_stateid
- NFSv4: When recovering state fails with EAGAIN, retry the same recovery
- NFSv4.1: Fix open stateid recovery
- NFSv4.1: Only reap expired delegations
- NFSv4: Fix a potential sleep while atomic in nfs4_do_reclaim()
- HID: input: fix a4tech horizontal wheel custom usage
- SMB3: Kernel oops mounting a encryptData share with CONFIG_DEBUG_VIRTUAL
- sched/deadline: Fix double accounting of rq/running bw in push & pull
- s390/mm: fix dump_pagetables top level page table walking
- ata: rb532_cf: Fix unused variable warning in rb532_pata_driver_probe
- net: cxgb3_main: Fix a resource leak in a error path in 'init_one()'
- drm/amdgpu: pin the csb buffer on hw init for gfx v8
- net: hisilicon: make hip04_tx_reclaim non-reentrant
- net: hisilicon: fix hip04-xmit never return TX_BUSY
- net: hisilicon: Fix dma_map_single failed on arm64
- NFSv4: Ensure state recovery handles ETIMEDOUT correctly
- libata: have ata_scsi_rw_xlat() fail invalid passthrough requests
- libata: add SG safety checks in SFF pio transfers
- x86/lib/cpu: Address missing prototypes warning
- drm/vmwgfx: fix memory leak when too many retries have occurred
- block: aoe: Fix kernel crash due to atomic sleep when exiting
- perf ftrace: Fix failure to set cpumask when only one cpu is present
- perf cpumap: Fix writing to illegal memory in handling cpumap mask
- perf pmu-events: Fix missing "cpu_clk_unhalted.core" event
- selftests: kvm: Adding config fragments
- HID: wacom: correct misreported EKR ring values
- HID: wacom: Correct distance scale for 2nd-gen Intuos devices
- Revert "dm bufio: fix deadlock with loop device"
- ceph: don't try fill file_lock on unsuccessful GETFILELOCK reply
- libceph: fix PG split vs OSD (re)connect race
- drm/nouveau: Don't retry infinitely when receiving no data on i2c over AUX
- gpiolib: never report open-drain/source lines as 'input' to user-space
- userfaultfd_release: always remove uffd flags and clear vm_userfaultfd_ctx
- x86/retpoline: Don't clobber RFLAGS during CALL_NOSPEC on i386
- x86/apic: Handle missing global clockevent gracefully
- x86/CPU/AMD: Clear RDRAND CPUID bit on AMD family 15h/16h
- x86/boot: Save fields explicitly, zero out everything else
- x86/boot: Fix boot regression caused by bootparam sanitizing
- dm kcopyd: always complete failed jobs
- dm btree: fix order of block initialization in btree_split_beneath
- dm space map metadata: fix missing store of apply_bops() return value
- dm table: fix invalid memory accesses with too high sector number
- dm zoned: improve error handling in reclaim
- dm zoned: improve error handling in i/o map code
- dm zoned: properly handle backing device failure
- genirq: Properly pair kobject_del() with kobject_add()
- mm, page_alloc: move_freepages should not examine struct page of reserved
memory
- mm, page_owner: handle THP splits correctly
- mm/zsmalloc.c: migration can leave pages in ZS_EMPTY indefinitely
- mm/zsmalloc.c: fix race condition in zs_destroy_pool
- mm/kasan: fix false positive invalid-free reports with
CONFIG_KASAN_SW_TAGS=y
- xfs: fix missing ILOCK unlock when xfs_setattr_nonsize fails due to EDQUOT
- dm zoned: fix potential NULL dereference in dmz_do_reclaim()
- powerpc: Allow flush_(inval_)dcache_range to work across ranges >4GB
* Disco update: upstream stable patchset 2019-08-29 (LP: #1841994)
- scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure
- gcc-9: don't warn about uninitialized variable
- driver core: Establish order of operations for device_add and device_del via
bitflag
- drivers/base: Introduce kill_device()
- libnvdimm/bus: Prevent duplicate device_unregister() calls
- libnvdimm/bus: Prepare the nd_ioctl() path to be re-entrant
- libnvdimm/bus: Fix wait_nvdimm_bus_probe_idle() ABBA deadlock
- HID: wacom: fix bit shift for Cintiq Companion 2
- HID: Add quirk for HP X1200 PIXART OEM mouse
- atm: iphase: Fix Spectre v1 vulnerability
- bnx2x: Disable multi-cos feature.
- ife: error out when nla attributes are empty
- ip6_gre: reload ipv6h in prepare_ip6gre_xmit_ipv6
- ip6_tunnel: fix possible use-after-free on xmit
- ipip: validate header length in ipip_tunnel_xmit
- mlxsw: spectrum: Fix error path in mlxsw_sp_module_init()
- mvpp2: fix panic on module removal
- mvpp2: refactor MTU change code
- net: bridge: delete local fdb on device init failure
- net: bridge: mcast: don't delete permanent entries when fast leave is
enabled
- net: fix ifindex collision during namespace removal
- net/mlx5e: always initialize frag->last_in_page
- net/mlx5: Use reversed order when unregister devices
- net: phylink: Fix flow control for fixed-link
- net: qualcomm: rmnet: Fix incorrect UL checksum offload logic
- net: sched: Fix a possible null-pointer dereference in dequeue_func()
- net sched: update vlan action for batched events operations
- net: sched: use temporary variable for actions indexes
- net/smc: do not schedule tx_work in SMC_CLOSED state
- NFC: nfcmrvl: fix gpio-handling regression
- ocelot: Cancel delayed work before wq destruction
- tipc: compat: allow tipc commands without arguments
- tun: mark small packets as owned by the tap sock
- net/mlx5: Fix modify_cq_in alignment
- net/mlx5e: Prevent encap flow counter update async to user query
- r8169: don't use MSI before RTL8168d
- compat_ioctl: pppoe: fix PPPOEIOCSFWD handling
- cgroup: Call cgroup_release() before __exit_signal()
- cgroup: Implement css_task_iter_skip()
- cgroup: Include dying leaders with live threads in PROCS iterations
- cgroup: css_task_iter_skip()'d iterators must be advanced before accessed
- cgroup: Fix css_task_iter_advance_css_set() cset skip condition
- spi: bcm2835: Fix 3-wire mode if DMA is enabled
- ALSA: usb-audio: Sanity checks for each pipe and EP types
- ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check
- drivers/net/ethernet/marvell/mvmdio.c: Fix non OF case
- net: phylink: don't start and stop SGMII PHYs in SFP modules twice
- net: phy: mscc: initialize stats array
- bpf: fix XDP vlan selftests test_xdp_vlan.sh
- selftests/bpf: add wrapper scripts for test_xdp_vlan.sh
- selftests/bpf: reduce time to execute test_xdp_vlan.sh
- net: fix bpf_xdp_adjust_head regression for generic-XDP
- hv_sock: Fix hang when a connection is closed
- iio: cros_ec_accel_legacy: Fix incorrect channel setting
- iio: adc: max9611: Fix misuse of GENMASK macro
- staging: gasket: apex: fix copy-paste typo
- staging: android: ion: Bail out upon SIGKILL when allocating memory.
- crypto: ccp - Fix oops by properly managing allocated structures
- crypto: ccp - Add support for valid authsize values less than 16
- crypto: ccp - Ignore tag length when decrypting GCM ciphertext
- usb: usbfs: fix double-free of usb memory upon submiturb error
- usb: iowarrior: fix deadlock on disconnect
- sound: fix a memory leak bug
- mmc: cavium: Set the correct dma max segment size for mmc_host
- mmc: cavium: Add the missing dma unmap when the dma has finished.
- loop: set PF_MEMALLOC_NOIO for the worker thread
- Input: usbtouchscreen - initialize PM mutex before using it
- Input: elantech - enable SMBus on new (2018+) systems
- Input: synaptics - enable RMI mode for HP Spectre X360
- perf annotate: Fix s390 gap between kernel end and module start
- perf db-export: Fix thread__exec_comm()
- perf record: Fix module size on s390
- x86/purgatory: Use CFLAGS_REMOVE rather than reset KBUILD_CFLAGS
- gfs2: gfs2_walk_metadata fix
- usb: host: xhci-rcar: Fix timeout in xhci_suspend()
- usb: yurex: Fix use-after-free in yurex_delete
- usb: typec: tcpm: free log buf memory when remove debug file
- usb: typec: tcpm: remove tcpm dir if no children
- usb: typec: tcpm: Add NULL check before dereferencing config
- usb: typec: tcpm: Ignore unsupported/unknown alternate mode requests
- can: rcar_canfd: fix possible IRQ storm on high load
- can: peak_usb: fix potential double kfree_skb()
- netfilter: nfnetlink: avoid deadlock due to synchronous request_module
- vfio-ccw: Set pa_nr to 0 if memory allocation fails for pa_iova_pfn
- netfilter: Fix rpfilter dropping vrf packets by mistake
- netfilter: conntrack: always store window size un-scaled
- netfilter: nft_hash: fix symhash with modulus one
- scripts/sphinx-pre-install: fix script for RHEL/CentOS
- drm/amd/display: Wait for backlight programming completion in set backlight
level
- drm/amd/display: use encoder's engine id to find matched free audio device
- drm/amd/display: Fix dc_create failure handling and 666 color depths
- drm/amd/display: Only enable audio if speaker allocation exists
- drm/amd/display: Increase size of audios array
- iscsi_ibft: make ISCSI_IBFT dependson ACPI instead of ISCSI_IBFT_FIND
- nl80211: fix NL80211_HE_MAX_CAPABILITY_LEN
- mac80211: don't warn about CW params when not using them
- allocate_flower_entry: should check for null deref
- hwmon: (nct6775) Fix register address and added missed tolerance for nct6106
- drm: silence variable 'conn' set but not used
- cpufreq/pasemi: fix use-after-free in pas_cpufreq_cpu_init()
- s390/qdio: add sanity checks to the fast-requeue path
- ALSA: compress: Fix regression on compressed capture streams
- ALSA: compress: Prevent bypasses of set_params
- ALSA: compress: Don't allow paritial drain operations on capture streams
- ALSA: compress: Be more restrictive about when a drain is allowed
- perf tools: Fix proper buffer size for feature processing
- perf probe: Avoid calling freeing routine multiple times for same pointer
- drbd: dynamically allocate shash descriptor
- ACPI/IORT: Fix off-by-one check in iort_dev_find_its_id()
- ARM: davinci: fix sleep.S build error on ARMv4
- ARM: dts: bcm: bcm47094: add missing #cells for mdio-bus-mux
- scsi: megaraid_sas: fix panic on loading firmware crashdump
- scsi: ibmvfc: fix WARN_ON during event pool release
- scsi: scsi_dh_alua: always use a 2 second delay before retrying RTPG
- test_firmware: fix a memory leak bug
- tty/ldsem, locking/rwsem: Add missing ACQUIRE to read_failed sleep loop
- perf/core: Fix creating kernel counters for PMUs that override event->cpu
- s390/dma: provide proper ARCH_ZONE_DMA_BITS value
- HID: sony: Fix race condition between rumble and device remove.
- x86/purgatory: Do not use __builtin_memcpy and __builtin_memset
- ALSA: usb-audio: fix a memory leak bug
- can: peak_usb: pcan_usb_pro: Fix info-leaks to USB devices
- can: peak_usb: pcan_usb_fd: Fix info-leaks to USB devices
- hwmon: (nct7802) Fix wrong detection of in4 presence
- drm/i915: Fix wrong escape clock divisor init for GLK
- ALSA: firewire: fix a memory leak bug
- ALSA: hiface: fix multiple memory leak bugs
- ALSA: hda - Don't override global PCM hw info flag
- ALSA: hda - Workaround for crackled sound on AMD controller (1022:1457)
- mac80211: don't WARN on short WMM parameters from AP
- dax: dax_layout_busy_page() should not unmap cow pages
- SMB3: Fix deadlock in validate negotiate hits reconnect
- smb3: send CAP_DFS capability during session setup
- NFSv4: Fix an Oops in nfs4_do_setattr
- KVM: Fix leak vCPU's VMCS value into other pCPU
- mwifiex: fix 802.11n/WPA detection
- iwlwifi: don't unmap as page memory that was mapped as single
- iwlwifi: mvm: fix an out-of-bound access
- iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT on version < 41
- iwlwifi: mvm: fix version check for GEO_TX_POWER_LIMIT support
- iio: adc: gyroadc: fix uninitialized return code
- staging: wilc1000: flush the workqueue before deinit the host
- can: flexcan: fix stop mode acknowledgment
- can: flexcan: fix an use-after-free in flexcan_setup_stop_mode()
- powerpc: fix off by one in max_zone_pfn initialization for ZONE_DMA
- scripts/sphinx-pre-install: don't use LaTeX with CentOS 7
- rq-qos: don't reset has_sleepers on spurious wakeups
- rq-qos: set ourself TASK_UNINTERRUPTIBLE after we schedule
- rq-qos: use a mb for got_token
- drm/amd/display: Clock does not lower in Updateplanes
- drm/amd/display: fix DMCU hang when going into Modern Standby
- drm/amd/display: allocate 4 ddc engines for RV2
- mac80211: fix possible memory leak in ieee80211_assign_beacon
- hwmon: (occ) Fix division by zero issue
- ARM: dts: imx6ul: fix clock frequency property name of I2C buses
- powerpc/papr_scm: Force a scm-unbind if initial scm-bind fails
- arm64: Force SSBS on context switch
- arm64: entry: SP Alignment Fault doesn't write to FAR_EL1
- drm/msm/dpu: Correct dpu encoder spinlock initialization
- perf script: Fix off by one in brstackinsn IPC computation
- perf stat: Fix segfault for event group in repeat mode
- nvme: ignore subnqn for ADATA SX6000LNP
- nvme: fix memory leak caused by incorrect subsystem free
- perf/x86: Apply more accurate check on hypervisor platform
- gen_compile_commands: lower the entry count threshold
- NFSv4: Fix delegation state recovery
- NFSv4: Check the return value of update_open_stateid()
- KVM: arm/arm64: Sync ICH_VMCR_EL2 back when about to block
- iwlwifi: mvm: fix a use-after-free bug in iwl_mvm_tx_tso_segment
- sh: kernel: hw_breakpoint: Fix missing break in switch statement
- seq_file: fix problem when seeking mid-record
- mm/hmm: fix bad subpage pointer in try_to_unmap_one
- mm: mempolicy: make the behavior consistent when MPOL_MF_MOVE* and
MPOL_MF_STRICT were specified
- mm: mempolicy: handle vma with unmovable pages mapped correctly in mbind
- mm/memcontrol.c: fix use after free in mem_cgroup_iter()
- mm/usercopy: use memory range to be accessed for wraparound check
- cpufreq: schedutil: Don't skip freq update when limits change
- xtensa: add missing isync to the cpu_reset TLB code
- ALSA: hda/realtek - Add quirk for HP Envy x360
- ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term
- ALSA: usb-audio: Fix an OOB bug in parse_audio_mixer_unit
- ALSA: hda - Apply workaround for another AMD chip 1022:1487
- ALSA: hda - Fix a memory leak bug
- HID: holtek: test for sanity of intfdata
- HID: hiddev: avoid opening a disconnected device
- HID: hiddev: do cleanup in failure of opening a device
- Input: kbtab - sanity check for endpoint type
- Input: iforce - add sanity checks
- net: usb: pegasus: fix improper read if get_registers() fail
- netfilter: ebtables: also count base chain policies
- riscv: Make __fstate_clean() work correctly.
- clk: at91: generated: Truncate divisor to GENERATED_MAX_DIV + 1
- clk: sprd: Select REGMAP_MMIO to avoid compile errors
- clk: renesas: cpg-mssr: Fix reset control race condition
- xen/pciback: remove set but not used variable 'old_state'
- irqchip/gic-v3-its: Free unused vpt_page when alloc vpe table fail
- irqchip/irq-imx-gpcv2: Forward irq type to parent
- perf header: Fix divide by zero error if f_header.attr_size==0
- perf header: Fix use of unitialized value warning
- libata: zpodd: Fix small read overflow in zpodd_get_mech_type()
- drm/bridge: lvds-encoder: Fix build error while CONFIG_DRM_KMS_HELPER=m
- Btrfs: fix deadlock between fiemap and transaction commits
- scsi: hpsa: correct scsi command status issue after reset
- scsi: qla2xxx: Fix possible fcport null-pointer dereferences
- drm/amdgpu: fix a potential information leaking bug
- ata: libahci: do not complain in case of deferred probe
- kbuild: modpost: handle KBUILD_EXTRA_SYMBOLS only for external modules
- kbuild: Check for unknown options with cc-option usage in Kconfig and clang
- arm64/efi: fix variable 'si' set but not used
- arm64: unwind: Prohibit probing on return_address()
- arm64/mm: fix variable 'pud' set but not used
- IB/core: Add mitigation for Spectre V1
- IB/mlx5: Fix MR registration flow to use UMR properly
- IB/mad: Fix use-after-free in ib mad completion handling
- drm: msm: Fix add_gpu_components
- drm/exynos: fix missing decrement of retry counter
- Revert "kmemleak: allow to coexist with fault injection"
- ocfs2: remove set but not used variable 'last_hash'
- asm-generic: fix -Wtype-limits compiler warnings
- arm64: KVM: regmap: Fix unexpected switch fall-through
- staging: comedi: dt3000: Fix signed integer overflow 'divider * base'
- staging: comedi: dt3000: Fix rounding up of timer divisor
- iio: adc: max9611: Fix temperature reading in probe
- USB: core: Fix races in character device registration and deregistraion
- usb: gadget: udc: renesas_usb3: Fix sysfs interface of "role"
- usb: cdc-acm: make sure a refcount is taken early enough
- USB: CDC: fix sanity checks in CDC union parser
- USB: serial: option: add D-Link DWM-222 device ID
- USB: serial: option: Add support for ZTE MF871A
- USB: serial: option: add the BroadMobi BM818 card
- USB: serial: option: Add Motorola modem UARTs
- arm64: ftrace: Ensure module ftrace trampoline is coherent with I-side
- netfilter: conntrack: Use consistent ct id hash calculation
- Input: psmouse - fix build error of multiple definition
- bnx2x: Fix VF's VLAN reconfiguration in reload.
- bonding: Add vlan tx offload to hw_enc_features
- net: dsa: Check existence of .port_mdb_add callback before calling it
- net/mlx4_en: fix a memory leak bug
- net/packet: fix race in tpacket_snd()
- sctp: fix memleak in sctp_send_reset_streams
- sctp: fix the transport error_count check
- team: Add vlan tx offload to hw_enc_features
- tipc: initialise addr_trail_end when setting node addresses
- xen/netback: Reset nr_frags before freeing skb
- net/mlx5e: Only support tx/rx pause setting for port owner
- net/mlx5e: Use flow keys dissector to parse packets for ARFS
- mm/z3fold.c: fix z3fold_destroy_pool() ordering
- mm, vmscan: do not special-case slab reclaim when watermarks are boosted
- drm/amdgpu: fix gfx9 soft recovery
- riscv: Correct the initialized flow of FP register
- blk-mq: move cancel of requeue_work to the front of blk_exit_queue
- IB/mlx5: Replace kfree with kvfree
- dma-mapping: check pfn validity in dma_common_{mmap,get_sgtable}
- f2fs: fix to read source block before invalidating it
- tools perf beauty: Fix usbdevfs_ioctl table generator to handle _IOC()
- ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain
- drm/bridge: tc358764: Fix build error
- tracing: Fix header include guards in trace event headers
- drm/amdkfd: Fix byte align on VegaM
- RDMA/restrack: Track driver QP types in resource tracker
- RDMA/mlx5: Release locks during notifier unregister
- arm64: kprobes: Recover pstate.D in single-step exception handler
- arm64: Make debug exception handlers visible from RCU
- page flags: prioritize kasan bits over last-cpuid
- bnxt_en: Fix VNIC clearing logic for 57500 chips.
- bnxt_en: Improve RX doorbell sequence.
- bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails
- bnxt_en: Suppress HWRM errors for HWRM_NVM_GET_VARIABLE command
- bnxt_en: Use correct src_fid to determine direction of the flow
- bnxt_en: Fix to include flow direction in L2 key
- net sched: update skbedit action for batched events operations
- tc-testing: updated skbedit action tests with batch create/delete
* Disco update: upstream stable patchset 2019-08-27 (LP: #1841681)
- hv_sock: Add support for delayed close
- vsock: correct removal of socket from the list
- ISDN: hfcsusb: checking idx of ep configuration
- media: au0828: fix null dereference in error path
- ath10k: Change the warning message string
- media: cpia2_usb: first wake up, then free in disconnect
- media: pvrusb2: use a different format for warnings
- NFS: Cleanup if nfs_match_client is interrupted
- media: radio-raremono: change devm_k*alloc to k*alloc
- Bluetooth: hci_uart: check for missing tty operations
- sched/fair: Don't free p->numa_faults with concurrent readers
- sched/fair: Use RCU accessors consistently for ->numa_group
- /proc/<pid>/cmdline: remove all the special cases
- /proc/<pid>/cmdline: add back the setproctitle() special case
- drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl
- Fix allyesconfig output.
- ceph: hold i_ceph_lock when removing caps for freeing inode
- ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL
- xfrm: policy: fix bydst hlist corruption on hash rebuild
- nvme: fix multipath crash when ANA is deactivated
- ARM: riscpc: fix DMA
- ARM: dts: rockchip: Make rk3288-veyron-minnie run at hs200
- ARM: dts: rockchip: Make rk3288-veyron-mickey's emmc work again
- ARM: dts: rockchip: Mark that the rk3288 timer might stop in suspend
- ftrace: Enable trampoline when rec count returns back to one
- dmaengine: tegra-apb: Error out if DMA_PREP_INTERRUPT flag is unset
- arm64: dts: rockchip: fix isp iommu clocks and power domain
- kernel/module.c: Only return -EEXIST for modules that have finished loading
- firmware/psci: psci_checker: Park kthreads before stopping them
- MIPS: lantiq: Fix bitfield masking
- dmaengine: rcar-dmac: Reject zero-length slave DMA requests
- clk: tegra210: fix PLLU and PLLU_OUT1
- fs/adfs: super: fix use-after-free bug
- clk: sprd: Add check for return value of sprd_clk_regmap_init()
- btrfs: fix minimum number of chunk errors for DUP
- btrfs: qgroup: Don't hold qgroup_ioctl_lock in btrfs_qgroup_inherit()
- cifs: Fix a race condition with cifs_echo_request
- ceph: fix improper use of smp_mb__before_atomic()
- ceph: return -ERANGE if virtual xattr value didn't fit in buffer
- ACPI: blacklist: fix clang warning for unused DMI table
- scsi: zfcp: fix GCC compiler warning emitted with -Wmaybe-uninitialized
- perf version: Fix segfault due to missing OPT_END()
- x86: kvm: avoid constant-conversion warning
- ACPI: fix false-positive -Wuninitialized warning
- be2net: Signal that the device cannot transmit during reconfiguration
- x86/apic: Silence -Wtype-limits compiler warnings
- x86: math-emu: Hide clang warnings for 16-bit overflow
- mm/cma.c: fail if fixed declaration can't be honored
- lib/test_overflow.c: avoid tainting the kernel and fix wrap size
- lib/test_string.c: avoid masking memset16/32/64 failures
- coda: add error handling for fget
- coda: fix build using bare-metal toolchain
- uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side
headers
- drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings
- ipc/mqueue.c: only perform resource calculation if user valid
- xen/pv: Fix a boot up hang revealed by int3 self test
- x86/kvm: Don't call kvm_spurious_fault() from .fixup
- x86/paravirt: Fix callee-saved function ELF sizes
- x86, boot: Remove multiple copy of static function sanitize_boot_params()
- drm/nouveau: fix memory leak in nouveau_conn_reset()
- kconfig: Clear "written" flag to avoid data loss
- kbuild: initialize CLANG_FLAGS correctly in the top Makefile
- Btrfs: fix incremental send failure after deduplication
- Btrfs: fix race leading to fs corruption after transaction abort
- mmc: dw_mmc: Fix occasional hang after tuning on eMMC
- mmc: meson-mx-sdio: Fix misuse of GENMASK macro
- gpiolib: fix incorrect IRQ requesting of an active-low lineevent
- IB/hfi1: Fix Spectre v1 vulnerability
- mtd: rawnand: micron: handle on-die "ECC-off" devices correctly
- selinux: fix memory leak in policydb_init()
- ALSA: hda: Fix 1-minute detection delay when i915 module is not available
- mm: vmscan: check if mem cgroup is disabled or not before calling memcg slab
shrinker
- s390/dasd: fix endless loop after read unit address configuration
- cgroup: kselftest: relax fs_spec checks
- parisc: Fix build of compressed kernel even with debug enabled
- drivers/perf: arm_pmu: Fix failure path in PM notifier
- arm64: compat: Allow single-byte watchpoints on all addresses
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG}
- nbd: replace kill_bdev() with __invalidate_device() again
- xen/swiotlb: fix condition for calling xen_destroy_contiguous_region()
- IB/mlx5: Fix unreg_umr to ignore the mkey state
- IB/mlx5: Use direct mkey destroy command upon UMR unreg failure
- IB/mlx5: Move MRs to a kernel PD when freeing them to the MR cache
- IB/mlx5: Fix clean_mr() to work in the expected order
- IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification
- IB/hfi1: Check for error on call to alloc_rsm_map_table
- drm/i915/gvt: fix incorrect cache entry for guest page mapping
- eeprom: at24: make spd world-readable again
- gcc-9: properly declare the {pv,hv}clock_page storage
- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
- Documentation: Add swapgs description to the Spectre v1 documentation
- arm64: dts: marvell: mcbin: enlarge PCI memory window
- PCI: OF: Initialize dev->fwnode appropriately
- arm64: qcom: qcs404: Add reset-cells to GCC node
- swiotlb: fix phys_addr_t overflow warning
- arm64: dts: rockchip: Fix USB3 Type-C on rk3399-sapphire
- btrfs: Flush before reflinking any extent to prevent NOCOW write falling
back to COW without data reservation
- virtio-mmio: add error check for platform_get_irq
- cifs: fix crash in cifs_dfs_do_automount
- KVM: nVMX: Ignore segment base for VMX memory operand when segment not FS or
GS
- bpf: fix BTF verifier size resolution logic
- mm/slab_common.c: work around clang bug #42570
- mm/ioremap: check virtual address alignment while creating huge mappings
- nds32: fix asm/syscall.h
- mm/hotplug: make remove_memory() interface usable
- crypto: ccp - Fix SEV_VERSION_GREATER_OR_EQUAL
- bpf: Disable GCC -fgcse optimization for ___bpf_prog_run()
- kbuild: modpost: include .*.cmd files only when targets exist
- dax: Fix missed wakeup in put_unlocked_entry()
- fgraph: Remove redundant ftrace_graph_notrace_addr() test
- mmc: host: sdhci-sprd: Fix the missing pm_runtime_put_noidle()
- mmc: mmc_spi: Enable stable writes
- gpiolib: Preserve desc->flags when setting state
- gpio: don't WARN() on NULL descs if gpiolib is disabled
- i2c: at91: disable TXRDY interrupt after sending data
- i2c: at91: fix clk_offset for sama5d2
- mm: migrate: fix reference check race between __find_get_block() and
migration
- mm/migrate.c: initialize pud_entry in migrate_vma()
- parisc: Add archclean Makefile target
- parisc: Strip debug info from kernel before creating compressed vmlinuz
- RDMA/bnxt_re: Honor vlan_id in GID entry comparison
- drm/i915/perf: fix ICL perf register offsets
* Disco update: upstream stable patchset 2019-08-22 (LP: #1841121)
- hvsock: fix epollout hang from race condition
- drm/panel: simple: Fix panel_simple_dsi_probe
- iio: adc: stm32-dfsdm: manage the get_irq error case
- iio: adc: stm32-dfsdm: missing error case during probe
- staging: vt6656: use meaningful error code during buffer allocation
- usb: core: hub: Disable hub-initiated U1/U2
- tty: max310x: Fix invalid baudrate divisors calculator
- pinctrl: rockchip: fix leaked of_node references
- tty: serial: cpm_uart - fix init when SMC is relocated
- drm/amd/display: Fill prescale_params->scale for RGB565
- drm/amdgpu/sriov: Need to initialize the HDP_NONSURFACE_BAStE
- drm/amd/display: Disable ABM before destroy ABM struct
- drm/amdkfd: Fix a potential memory leak
- drm/amdkfd: Fix sdma queue map issue
- drm/edid: Fix a missing-check bug in drm_load_edid_firmware()
- PCI: Return error if cannot probe VF
- drm/bridge: tc358767: read display_props in get_modes()
- drm/bridge: sii902x: pixel clock unit is 10kHz instead of 1kHz
- gpu: host1x: Increase maximum DMA segment size
- drm/crc-debugfs: User irqsafe spinlock in drm_crtc_add_crc_entry
- drm/crc-debugfs: Also sprinkle irqrestore over early exits
- memstick: Fix error cleanup path of memstick_init
- tty/serial: digicolor: Fix digicolor-usart already registered warning
- tty: serial: msm_serial: avoid system lockup condition
- serial: 8250: Fix TX interrupt handling condition
- drm/amd/display: Always allocate initial connector state state
- drm/virtio: Add memory barriers for capset cache.
- phy: renesas: rcar-gen2: Fix memory leak at error paths
- drm/amd/display: fix compilation error
- powerpc/pseries/mobility: prevent cpu hotplug during DT update
- drm/rockchip: Properly adjust to a true clock in adjusted_mode
- serial: imx: fix locking in set_termios()
- tty: serial_core: Set port active bit in uart_port_activate
- usb: gadget: Zero ffs_io_data
- mmc: sdhci: sdhci-pci-o2micro: Check if controller supports 8-bit width
- powerpc/pci/of: Fix OF flags parsing for 64bit BARs
- drm/msm: Depopulate platform on probe failure
- serial: mctrl_gpio: Check if GPIO property exisits before requesting it
- PCI: sysfs: Ignore lockdep for remove attribute
- i2c: stm32f7: fix the get_irq error cases
- kbuild: Add -Werror=unknown-warning-option to CLANG_FLAGS
- genksyms: Teach parser about 128-bit built-in types
- PCI: xilinx-nwl: Fix Multi MSI data programming
- iio: iio-utils: Fix possible incorrect mask calculation
- powerpc/cacheflush: fix variable set but not used
- powerpc/xmon: Fix disabling tracing while in xmon
- recordmcount: Fix spurious mcount entries on powerpc
- mfd: madera: Add missing of table registration
- mfd: core: Set fwnode for created devices
- mfd: arizona: Fix undefined behavior
- mfd: hi655x-pmic: Fix missing return value check for
devm_regmap_init_mmio_clk
- mm/swap: fix release_pages() when releasing devmap pages
- um: Silence lockdep complaint about mmap_sem
- powerpc/4xx/uic: clear pending interrupt after irq type/pol change
- RDMA/i40iw: Set queue pair state when being queried
- serial: sh-sci: Terminate TX DMA during buffer flushing
- serial: sh-sci: Fix TX DMA buffer flushing and workqueue races
- IB/mlx5: Fixed reporting counters on 2nd port for Dual port RoCE
- powerpc/mm: Handle page table allocation failures
- IB/ipoib: Add child to parent list only if device initialized
- arm64: assembler: Switch ESB-instruction with a vanilla nop if
!ARM64_HAS_RAS
- PCI: mobiveil: Fix PCI base address in MEM/IO outbound windows
- PCI: mobiveil: Fix the Class Code field
- kallsyms: exclude kasan local symbols on s390
- PCI: mobiveil: Initialize Primary/Secondary/Subordinate bus numbers
- PCI: mobiveil: Use the 1st inbound window for MEM inbound transactions
- perf test mmap-thread-lookup: Initialize variable to suppress memory
sanitizer warning
- perf stat: Fix use-after-freed pointer detected by the smatch tool
- perf top: Fix potential NULL pointer dereference detected by the smatch tool
- perf session: Fix potential NULL pointer dereference found by the smatch
tool
- perf annotate: Fix dereferencing freed memory found by the smatch tool
- perf hists browser: Fix potential NULL pointer dereference found by the
smatch tool
- RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM
- PCI: dwc: pci-dra7xx: Fix compilation when !CONFIG_GPIOLIB
- powerpc/boot: add {get, put}_unaligned_be32 to xz_config.h
- block: init flush rq ref count to 1
- f2fs: avoid out-of-range memory access
- mailbox: handle failed named mailbox channel request
- dlm: check if workqueues are NULL before flushing/destroying
- powerpc/eeh: Handle hugepages in ioremap space
- block/bio-integrity: fix a memory leak bug
- sh: prevent warnings when using iounmap
- mm/kmemleak.c: fix check for softirq context
- 9p: pass the correct prototype to read_cache_page
- mm/gup.c: mark undo_dev_pagemap as __maybe_unused
- mm/gup.c: remove some BUG_ONs from get_gate_page()
- memcg, fsnotify: no oom-kill for remote memcg charging
- mm/mmu_notifier: use hlist_add_head_rcu()
- proc: use down_read_killable mmap_sem for /proc/pid/smaps_rollup
- proc: use down_read_killable mmap_sem for /proc/pid/pagemap
- proc: use down_read_killable mmap_sem for /proc/pid/clear_refs
- proc: use down_read_killable mmap_sem for /proc/pid/map_files
- cxgb4: reduce kernel stack usage in cudbg_collect_mem_region()
- proc: use down_read_killable mmap_sem for /proc/pid/maps
- locking/lockdep: Fix lock used or unused stats error
- mm: use down_read_killable for locking mmap_sem in access_remote_vm
- locking/lockdep: Hide unused 'class' variable
- usb: wusbcore: fix unbalanced get/put cluster_id
- usb: pci-quirks: Correct AMD PLL quirk detection
- btrfs: inode: Don't compress if NODATASUM or NODATACOW set
- x86/sysfb_efi: Add quirks for some devices with swapped width and height
- x86/speculation/mds: Apply more accurate check on hypervisor platform
- binder: prevent transactions to context manager from its own process.
- fpga-manager: altera-ps-spi: Fix build error
- mei: me: add mule creek canyon (EHL) device ids
- hpet: Fix division by zero in hpet_time_div()
- ALSA: ac97: Fix double free of ac97_codec_device
- powerpc/xive: Fix loop exit-condition in xive_find_target_in_mask()
- libnvdimm/bus: Stop holding nvdimm_bus_list_mutex over __nd_ioctl()
- access: avoid the RCU grace period for the temporary subjective credentials
- regulator: 88pm800: fix warning same module names
- media: drivers: media: coda: fix warning same module names
- btrfs: shut up bogus -Wmaybe-uninitialized warning
- drm/virtio: set seqno for dma-fence
- ipmi_si: fix unexpected driver unregister warning
- drm/bochs: Fix connector leak during driver unload
- drm/msm/a6xx: Check for ERR or NULL before iounmap
- ipmi:ssif: Only unregister the platform driver if it was registered
- ipmi_ssif: fix unexpected driver unregister warning
- drm/amd/display: Disable cursor when offscreen in negative direction
- drm/amdgpu: Reserve shared fence for eviction fence
- f2fs: fix to avoid deadloop if data_flush is on
- tools: PCI: Fix broken pcitest compilation
- drm/amd/display: Increase Backlight Gain Step Size
- f2fs: Fix accounting for unusable blocks
- f2fs: Lower threshold for disable_cp_again
- drm/vkms: Forward timer right after drm_crtc_handle_vblank
- i2c: nvidia-gpu: resume ccgx i2c client
- PCI: endpoint: Allocate enough space for fixed size BAR
- dma-remap: Avoid de-referencing NULL atomic_pool
- platform/x86: asus-wmi: Increase input buffer size of WMI methods
- iio: adxl372: fix iio_triggered_buffer_{pre,post}enable positions
- serial: uartps: Use the same dynamic major number for all ports
- kvm: vmx: fix limit checking in get_vmx_mem_address()
- KVM: nVMX: Intercept VMWRITEs to GUEST_{CS,SS}_AR_BYTES
- kvm: vmx: segment limit check: use access length
- powerpc/rtas: retry when cpu offline races with suspend/migration
- fixdep: check return value of printf() and putchar()
- KVM: nVMX: Stash L1's CR3 in vmcs01.GUEST_CR3 on nested entry w/o EPT
- perf trace: Fix potential NULL pointer dereference found by the smatch tool
- perf map: Fix potential NULL pointer dereference found by smatch tool
- perf intel-bts: Fix potential NULL pointer dereference found by the smatch
tool
- RDMA/core: Fix race when resolving IP address
- nvme-pci: check for NULL return from pci_alloc_p2pmem()
- nvme-pci: limit max_hw_sectors based on the DMA max mapping size
- nvme-tcp: don't use sendpage for SLAB pages
- nvme-tcp: set the STABLE_WRITES flag when data digests are enabled
- powerpc/irq: Don't WARN continuously in arch_local_irq_restore()
- nvme: fix NULL deref for fabrics options
- mm/mincore.c: fix race between swapoff and mincore
- mm, swap: fix race between swapoff and some swap operations
- usb-storage: Add a limitation for blk_queue_max_hw_sectors()
- KVM: PPC: Book3S HV: Always save guest pmu for guest capable of nesting
- KVM: PPC: Book3S HV: Save and restore guest visible PSSCR bits on pseries
- selinux: check sidtab limit before adding a new entry
- x86/stacktrace: Prevent access_ok() warnings in arch_stack_walk_user()
- eeprom: make older eeprom drivers select NVMEM_SYSFS
- drm/panel: Add support for Armadeus ST0700 Adapt
- ALSA: hda - Fix intermittent CORB/RIRB stall on Intel chips
- powerpc/mm: Limit rma_size to 1TB when running without HV mode
- powerpc/pmu: Set pmcregs_in_use in paca when running as LPAR
- iommu/vt-d: Don't queue_iova() if there is no flush queue
- iommu/iova: Remove stale cached32_node
- iommu/iova: Fix compilation error with !CONFIG_IOMMU_IOVA
- libnvdimm/region: Register badblocks before namespaces
* Line 6 POD HD500 driver fault (LP: #1790595) // Disco update: upstream
stable patchset 2019-08-22 (LP: #1841121)
- ALSA: line6: Fix wrong altsetting for LINE6_PODHD500_1
* Disco update: upstream stable patchset 2019-08-21 (LP: #1840961)
- bnx2x: Prevent load reordering in tx completion processing
- caif-hsi: fix possible deadlock in cfhsi_exit_module()
- hv_netvsc: Fix extra rcu_read_unlock in netvsc_recv_callback()
- igmp: fix memory leak in igmpv3_del_delrec()
- ipv4: don't set IPv6 only flags to IPv4 addresses
- ipv6: rt6_check should return NULL if 'from' is NULL
- ipv6: Unlink sibling route in case of failure
- net: bcmgenet: use promisc for unsupported filters
- net: dsa: mv88e6xxx: wait after reset deactivation
- net: make skb_dst_force return true when dst is refcounted
- net: neigh: fix multiple neigh timer scheduling
- net: openvswitch: fix csum updates for MPLS actions
- net: phy: sfp: hwmon: Fix scaling of RX power
- net: stmmac: Re-work the queue selection for TSO packets
- nfc: fix potential illegal memory access
- r8169: fix issue with confused RX unit after PHY power-down on RTL8411b
- rxrpc: Fix send on a connected, but unbound socket
- sctp: fix error handling on stream scheduler initialization
- sky2: Disable MSI on ASUS P6T
- tcp: be more careful in tcp_fragment()
- tcp: fix tcp_set_congestion_control() use from bpf hook
- tcp: Reset bytes_acked and bytes_received when disconnecting
- vrf: make sure skb->data contains ip header to make routing
- net/mlx5e: IPoIB, Add error path in mlx5_rdma_setup_rn
- macsec: fix use-after-free of skb during RX
- macsec: fix checksumming after decryption
- netrom: fix a memory leak in nr_rx_frame()
- netrom: hold sock when setting skb->destructor
- net_sched: unset TCQ_F_CAN_BYPASS when adding filters
- net/tls: make sure offload also gets the keys wiped
- sctp: not bind the socket in sctp_connect
- net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling
- net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query
- net: bridge: don't cache ether dest pointer on input
- net: bridge: stp: don't cache eth dest pointer before skb pull
- dma-buf: balance refcount inbalance
- dma-buf: Discard old fence_excl on retrying get_fences_rcu for realloc
- gpio: davinci: silence error prints in case of EPROBE_DEFER
- MIPS: lb60: Fix pin mappings
- perf/core: Fix exclusive events' grouping
- perf/core: Fix race between close() and fork()
- ext4: don't allow any modifications to an immutable file
- ext4: enforce the immutable flag on open files
- mm: add filemap_fdatawait_range_keep_errors()
- jbd2: introduce jbd2_inode dirty range scoping
- ext4: use jbd2_inode dirty range scoping
- ext4: allow directory holes
- KVM: nVMX: do not use dangling shadow VMCS after guest reset
- KVM: nVMX: Clear pending KVM_REQ_GET_VMCS12_PAGES when leaving nested
- mm: vmscan: scan anonymous pages on file refaults
- net: sched: verify that q!=NULL before setting q->flags
- selftests: txring_overwrite: fix incorrect test of mmap() return value
- net/tls: reject offload of TLS 1.3
- net/mlx5e: Rx, Fix checksum calculation for new hardware
- gpiolib: of: fix a memory leak in of_gpio_flags_quirks()
- sd_zbc: Fix report zones buffer allocation
- block: Limit zone array allocation size
- bnxt_en: Fix VNIC accounting when enabling aRFS on 57500 chips.
- mlxsw: spectrum_dcb: Configure DSCP map as the last rule is removed
- mlxsw: spectrum: Do not process learned records with a dummy FID
- Revert "kvm: x86: Use task structs fpu field for user"
* Disco update: upstream stable patchset 2019-08-19 (LP: #1840718)
- Bluetooth: Align minimum encryption key size for LE and BR/EDR connections
- Bluetooth: Fix regression with minimum encryption key size alignment
- Bluetooth: Fix faulty expression for minimum encryption key size check
- netfilter: nf_flow_table: ignore DF bit setting
- netfilter: nft_flow_offload: set liberal tracking mode for tcp
- netfilter: nft_flow_offload: don't offload when sequence numbers need
adjustment
- netfilter: nft_flow_offload: IPCB is only valid for ipv4 family
- ASoC : cs4265 : readable register too low
- ASoC: ak4458: add return value for ak4458_probe
- ASoC: soc-pcm: BE dai needs prepare when pause release after resume
- ASoC: ak4458: rstn_control - return a non-zero on error only
- spi: bitbang: Fix NULL pointer dereference in spi_unregister_master
- drm/mediatek: fix unbind functions
- drm/mediatek: unbind components in mtk_drm_unbind()
- drm/mediatek: call drm_atomic_helper_shutdown() when unbinding driver
- drm/mediatek: clear num_pipes when unbind driver
- drm/mediatek: call mtk_dsi_stop() after mtk_drm_crtc_atomic_disable()
- ASoC: max98090: remove 24-bit format support if RJ is 0
- ASoC: sun4i-i2s: Fix sun8i tx channel offset mask
- ASoC: sun4i-i2s: Add offset to RX channel select
- x86/CPU: Add more Icelake model numbers
- usb: gadget: fusb300_udc: Fix memory leak of fusb300->ep[i]
- usb: gadget: udc: lpc32xx: allocate descriptor with GFP_ATOMIC
- ALSA: hdac: fix memory release for SST and SOF drivers
- SoC: rt274: Fix internal jack assignment in set_jack callback
- scsi: hpsa: correct ioaccel2 chaining
- drm: panel-orientation-quirks: Add quirk for GPD pocket2
- drm: panel-orientation-quirks: Add quirk for GPD MicroPC
- platform/x86: intel-vbtn: Report switch events when event wakes device
- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg device
registration
- platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to remove flow
- i2c: pca-platform: Fix GPIO lookup code
- cpuset: restore sanity to cpuset_cpus_allowed_fallback()
- scripts/decode_stacktrace.sh: prefix addr2line with $CROSS_COMPILE
- mm/mlock.c: change count_mm_mlocked_page_nr return type
- tracing: avoid build warning with HAVE_NOP_MCOUNT
- module: Fix livepatch/ftrace module text permissions race
- ftrace: Fix NULL pointer dereference in free_ftrace_func_mapper()
- crypto: user - prevent operating on larval algorithms
- crypto: cryptd - Fix skcipher instance memory leak
- ALSA: seq: fix incorrect order of dest_client/dest_ports arguments
- ALSA: firewire-lib/fireworks: fix miss detection of received MIDI messages
- ALSA: line6: Fix write on zero-sized buffer
- ALSA: usb-audio: fix sign unintended sign extension on left shifts
- ALSA: hda/realtek: Add quirks for several Clevo notebook barebones
- ALSA: hda/realtek - Change front mic location for Lenovo M710q
- lib/mpi: Fix karactx leak in mpi_powm
- fs/userfaultfd.c: disable irqs for fault_pending and event locks
- tracing/snapshot: Resize spare buffer if size changed
- ARM: dts: armada-xp-98dx3236: Switch to armada-38x-uart serial node
- arm64: kaslr: keep modules inside module region when KASAN is enabled
- drm/amd/powerplay: use hardware fan control if no powerplay fan table
- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
- drm/etnaviv: add missing failure path to destroy suballoc
- drm/imx: notify drm core before sending event during crtc disable
- drm/imx: only send event on crtc disable if kept disabled
- ftrace/x86: Remove possible deadlock between register_kprobe() and
ftrace_run_update_code()
- mm/vmscan.c: prevent useless kswapd loops
- btrfs: Ensure replaced device doesn't have pending chunk allocation
- tty: rocket: fix incorrect forward declaration of 'rp_init()'
- net/smc: move unhash before release of clcsock
- media: s5p-mfc: fix incorrect bus assignment in virtual child device
- drm/fb-helper: generic: Don't take module ref for fbcon
- f2fs: don't access node/meta inode mapping after iput
- ALSA: hda: Initialize power_state field properly
- ip6: fix skb leak in ip6frag_expire_frag_queue()
- net: IP defrag: encapsulate rbtree defrag code into callable functions
- net: IP6 defrag: use rbtrees for IPv6 defrag
- net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c
- netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments
- sc16is7xx: move label 'err_spi' to correct section
- netfilter: ipv6: nf_defrag: accept duplicate fragments again
- KVM: x86: degrade WARN to pr_warn_ratelimited
- KVM: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC
- nfsd: Fix overflow causing non-working mounts on 1 TB machines
- svcrdma: Ignore source port when computing DRC hash
- MIPS: Fix bounds check virt_addr_valid
- MIPS: Add missing EHB in mtc0 -> mfc0 sequence.
- MIPS: have "plain" make calls build dtbs for selected platforms
- dmaengine: qcom: bam_dma: Fix completed descriptors count
- dmaengine: imx-sdma: remove BD_INTR for channel0
- signal: remove the wrong signal_pending() check in restore_user_sigmask()
- idr: Fix idr_get_next race with idr_remove
- ASoC: core: lock client_mutex while removing link components
- iommu/vt-d: Set the right field for Page Walk Snoop
- HID: a4tech: fix horizontal scrolling
- ASoC: hda: fix unbalanced codec dev refcount for HDA_DEV_ASOC
- gpio: pca953x: hack to fix 24 bit gpio expanders
- ASoC: Intel: sst: fix kmalloc call with wrong flags
- arm64: tlbflush: Ensure start/end of address range are aligned to stride
- dax: Fix xarray entry association for mixed mappings
- swap_readpage(): avoid blk_wake_io_task() if !synchronous
- drm/virtio: move drm_connector_update_edid_property() call
- s390/mm: fix pxd_bad with folded page tables
- dmaengine: jz4780: Fix an endian bug in IRQ handler
- scsi: target/iblock: Fix overrun in WRITE SAME emulation
- crypto: talitos - rename alternative AEAD algos.
- soc: brcmstb: Fix error path for unsupported CPUs
- soc: bcm: brcmstb: biuctrl: Register writes require a barrier
- samples, bpf: fix to change the buffer size for read()
- samples, bpf: suppress compiler warning
- mac80211: fix rate reporting inside cfg80211_calculate_bitrate_he()
- bpf: sockmap, fix use after free from sleep in psock backlog workqueue
- soundwire: stream: fix out of boundary access on port properties
- staging:iio:ad7150: fix threshold mode config bit
- mac80211: mesh: fix RCU warning
- mac80211: free peer keys before vif down in mesh
- iwlwifi: Fix double-free problems in iwl_req_fw_callback()
- soundwire: intel: set dai min and max channels correctly
- dt-bindings: can: mcp251x: add mcp25625 support
- can: mcp251x: add support for mcp25625
- can: m_can: implement errata "Needless activation of MRAF irq"
- can: af_can: Fix error path of can_init()
- ibmvnic: Do not close unopened driver during reset
- ibmvnic: Refresh device multicast list after reset
- ibmvnic: Fix unchecked return codes of memory allocations
- ARM: dts: am335x phytec boards: Fix cd-gpios active level
- s390/boot: disable address-of-packed-member warning
- drm/vmwgfx: Honor the sg list segment size limitation
- drm/vmwgfx: fix a warning due to missing dma_parms
- riscv: Fix udelay in RV32.
- Input: imx_keypad - make sure keyboard can always wake up system
- KVM: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy
- mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed
- ARM: davinci: da850-evm: call regulator_has_full_constraints()
- ARM: davinci: da8xx: specify dma_coherent_mask for lcdc
- mac80211: only warn once on chanctx_conf being NULL
- mac80211: do not start any work during reconfigure flow
- bpf, devmap: Fix premature entry free on destroying map
- bpf, devmap: Add missing bulk queue free
- bpf, devmap: Add missing RCU read lock on flush
- bpf, x64: fix stack layout of JITed bpf code
- qmi_wwan: add support for QMAP padding in the RX path
- qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode
- qmi_wwan: extend permitted QMAP mux_id value range
- mmc: core: complete HS400 before checking status
- md: fix for divide error in status_resync
- bnx2x: Check if transceiver implements DDM before access
- drm: return -EFAULT if copy_to_user() fails
- ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL
- net: lio_core: fix potential sign-extension overflow on large shift
- scsi: qedi: Check targetname while finding boot target information
- quota: fix a problem about transfer quota
- net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge()
- NFS4: Only set creation opendata if O_CREAT
- net :sunrpc :clnt :Fix xps refcount imbalance on the error path
- fscrypt: don't set policy for a dead directory
- udf: Fix incorrect final NOT_ALLOCATED (hole) extent length
- media: stv0297: fix frequency range limit
- ALSA: usb-audio: Fix parse of UAC2 Extension Units
- ALSA: hda/realtek - Headphone Mic can't record after S3
- block, bfq: NULL out the bic when it's no longer valid
- perf pmu: Fix uncore PMU alias list for ARM64
- x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()
- x86/tls: Fix possible spectre-v1 in do_get_thread_area()
- Documentation: Add section about CPU vulnerabilities for Spectre
- Documentation/admin: Remove the vsyscall=native documentation
- mwifiex: Abort at too short BSS descriptor element
- mwifiex: Don't abort on small, spec-compliant vendor IEs
- USB: serial: ftdi_sio: add ID for isodebug v1
- USB: serial: option: add support for GosunCn ME3630 RNDIS mode
- Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled"
- p54usb: Fix race between disconnect and firmware loading
- usb: gadget: ether: Fix race between gether_disconnect and rx_submit
- usb: dwc2: use a longer AHB idle timeout in dwc2_core_reset()
- usb: renesas_usbhs: add a workaround for a race condition of workqueue
- drivers/usb/typec/tps6598x.c: fix portinfo width
- drivers/usb/typec/tps6598x.c: fix 4CC cmd write
- staging: comedi: dt282x: fix a null pointer deref on interrupt
- staging: comedi: amplc_pci230: fix null pointer deref on interrupt
- HID: Add another Primax PIXART OEM mouse quirk
- lkdtm: support llvm-objcopy
- binder: fix memory leak in error path
- carl9170: fix misuse of device driver API
- VMCI: Fix integer overflow in VMCI handle arrays
- staging: fsl-dpaa2/ethsw: fix memory leak of switchdev_work
- staging: bcm2835-camera: Replace spinlock protecting context_map with mutex
- staging: bcm2835-camera: Ensure all buffers are returned on disable
- staging: bcm2835-camera: Remove check of the number of buffers supplied
- staging: bcm2835-camera: Handle empty EOS buffers whilst streaming
- staging: rtl8712: reduce stack usage, again
- crypto: lrw - use correct alignmask
- bpf: sockmap, restore sk_write_space when psock gets dropped
- ARM: dts: Drop bogus CLKSEL for timer12 on dra7
- iwlwifi: fix load in rfkill flow for unified firmware
- tools: bpftool: Fix JSON output when lookup fails
- soundwire: stream: fix bad unlock balance
- can: flexcan: Remove unneeded registration message
- RISC-V: defconfig: enable clocks, serial console
- xdp: check device pointer before clearing
- KVM: nVMX: use correct clean fields when copying from eVMCS
- gpu: ipu-v3: image-convert: Fix input bytesperline width/height align
- gpu: ipu-v3: image-convert: Fix input bytesperline for packed formats
- gpu: ipu-v3: image-convert: Fix image downsize coefficients
- cfg80211: util: fix bit count off by one
- cfg80211: report measurement start TSF correctly
- IB/hfi1: Create inline to get extended headers
- IB/hfi1: Wakeup QPs orphaned on wait list after flush
- IB/hfi1: Handle wakeup of orphaned QPs for pio
- IB/hfi1: Handle port down properly in pio
- powerpc: enable a 30-bit ZONE_DMA for 32-bit pmac
- tpm: Actually fail on TPM errors during "get random"
- tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations
- perf intel-pt: Fix itrace defaults for perf script
- perf auxtrace: Fix itrace defaults for perf script
- perf intel-pt: Fix itrace defaults for perf script intel-pt documentation
- perf header: Assign proper ff->ph in perf_event__synthesize_features()
- usb: gadget: f_fs: data_len used before properly set
- staging: wilc1000: fix error path cleanup in wilc_wlan_initialize()
- staging: mt7621-pci: fix PCIE_FTS_NUM_LO macro
- iio: adc: stm32-adc: add missing vdda-supply
- staging: vchiq_2835_arm: revert "quit using custom down_interruptible()"
- staging: vchiq: revert "switch to wait_for_completion_killable"
- staging: vchiq: make wait events interruptible
* Touchpad not detecting in Linux (LP: #1825718) // Disco update: upstream
stable patchset 2019-08-19 (LP: #1840718)
- HID: i2c-hid: add iBall Aer3 to descriptor override
* Disco update: upstream stable patchset 2019-08-16 (LP: #1840521)
- arm64: Don't unconditionally add -Wno-psabi to KBUILD_CFLAGS
- Revert "x86/uaccess, ftrace: Fix ftrace_likely_update() vs. SMAP"
- qmi_wwan: Fix out-of-bounds read
- fs/proc/array.c: allow reporting eip/esp for all coredumping threads
- mm/mempolicy.c: fix an incorrect rebind node in mpol_rebind_nodemask
- fs/binfmt_flat.c: make load_flat_shared_library() work
- clk: socfpga: stratix10: fix divider entry for the emac clocks
- mm: soft-offline: return -EBUSY if set_hwpoison_free_buddy_page() fails
- mm: hugetlb: soft-offline: dissolve_free_huge_page() return zero on
!PageHuge
- dm log writes: make sure super sector log updates are written in order
- scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck()
- x86/speculation: Allow guests to use SSBD even if host does not
- x86/microcode: Fix the microcode load on CPU hotplug for real
- x86/resctrl: Prevent possible overrun during bitmap operations
- NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O
- cpu/speculation: Warn on unsupported mitigations= parameter
- irqchip/mips-gic: Use the correct local interrupt map registers
- af_packet: Block execution of tasks waiting for transmit to complete in
AF_PACKET
- bonding: Always enable vlan tx offload
- ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while loop
- net/packet: fix memory leak in packet_set_ring()
- net: remove duplicate fetch in sock_getsockopt
- net: stmmac: fixed new system time seconds value calculation
- net: stmmac: set IC bit when transmitting frames with HW timestamp
- sctp: change to hold sk after auth shkey is created successfully
- team: Always enable vlan tx offload
- tipc: change to use register_pernet_device
- tipc: check msg->req data len in tipc_nl_compat_bearer_disable
- tun: wake up waitqueues after IFF_UP is set
- bpf: simplify definition of BPF_FIB_LOOKUP related flags
- bpf: lpm_trie: check left child of last leftmost node for NULL
- bpf: fix nested bpf tracepoints with per-cpu data
- bpf: fix unconnected udp hooks
- bpf: udp: Avoid calling reuseport's bpf_prog from udp_gro
- bpf: udp: ipv6: Avoid running reuseport's bpf_prog from __udp6_lib_err
- arm64: futex: Avoid copying out uninitialised stack in failed cmpxchg()
- bpf, arm64: use more scalable stadd over ldxr / stxr loop in xadd
- futex: Update comments and docs about return values of arch futex code
- RDMA: Directly cast the sockaddr union to sockaddr
- tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
- arm64: insn: Fix ldadd instruction encoding
- clk: tegra210: Fix default rates for HDA clocks
- mm, swap: fix THP swap out
- mm: fix page cache convergence regression
- efi/memreserve: deal with memreserve entries in unmapped memory
- net: aquantia: fix vlans not working over bridged network
* Disco update: upstream stable patchset 2019-08-15 (LP: #1840373)
- tracing: Silence GCC 9 array bounds warning
- gcc-9: silence 'address-of-packed-member' warning
- ovl: support the FS_IOC_FS[SG]ETXATTR ioctls
- ovl: fix wrong flags check in FS_IOC_FS[SG]ETXATTR ioctls
- ovl: make i_ino consistent with st_ino in more cases
- ovl: detect overlapping layers
- ovl: don't fail with disconnected lower NFS
- ovl: fix bogus -Wmaybe-unitialized warning
- mmc: sdhci: sdhci-pci-o2micro: Correctly set bus width when tuning
- mmc: core: API to temporarily disable retuning for SDIO CRC errors
- mmc: core: Add sdio_retune_hold_now() and sdio_retune_release()
- mmc: core: Prevent processing SDIO IRQs when the card is suspended
- scsi: ufs: Avoid runtime suspend possibly being blocked forever
- usb: chipidea: udc: workaround for endpoint conflict issue
- xhci: detect USB 3.2 capable host controllers correctly
- usb: xhci: Don't try to recover an endpoint if port is in error state.
- IB/hfi1: Validate fault injection opcode user input
- IB/hfi1: Silence txreq allocation warnings
- iio: temperature: mlx90632 Relax the compatibility check
- Input: synaptics - enable SMBus on ThinkPad E480 and E580
- Input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD
- Input: silead - add MSSL0017 to acpi_device_id
- apparmor: enforce nullbyte at end of tag string
- brcmfmac: sdio: Disable auto-tuning around commands expected to fail
- brcmfmac: sdio: Don't tune while the card is off
- ARC: fix build warnings
- dmaengine: dw-axi-dmac: fix null dereference when pointer first is null
- dmaengine: sprd: Fix block length overflow
- ARC: [plat-hsdk]: Add missing multicast filter bins number to GMAC node
- ARC: [plat-hsdk]: Add missing FIFO size entry in GMAC node
- fpga: dfl: afu: Pass the correct device to dma_mapping_error()
- fpga: dfl: Add lockdep classes for pdata->lock
- parport: Fix mem leak in parport_register_dev_model
- parisc: Fix compiler warnings in float emulation code
- IB/rdmavt: Fix alloc_qpn() WARN_ON()
- IB/hfi1: Insure freeze_work work_struct is canceled on shutdown
- IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value
- IB/hfi1: Validate page aligned for a given virtual address
- MIPS: uprobes: remove set but not used variable 'epc'
- xtensa: Fix section mismatch between memblock_reserve and mem_reserve
- kselftest/cgroup: fix unexpected testing failure on test_memcontrol
- kselftest/cgroup: fix unexpected testing failure on test_core
- kselftest/cgroup: fix incorrect test_core skip
- selftests: vm: install test_vmalloc.sh for run_vmtests
- net: dsa: mv88e6xxx: avoid error message on remove from VLAN 0
- mdesc: fix a missing-check bug in get_vdev_port_node_info()
- sparc: perf: fix updated event period in response to PERF_EVENT_IOC_PERIOD
- net: ethernet: mediatek: Use hw_feature to judge if HWLRO is supported
- net: ethernet: mediatek: Use NET_IP_ALIGN to judge if HW RX_2BYTE_OFFSET is
enabled
- drm/arm/mali-dp: Add a loop around the second set CVAL and try 5 times
- drm/arm/hdlcd: Actually validate CRTC modes
- drm/arm/hdlcd: Allow a bit of clock tolerance
- nvmet: fix data_len to 0 for bdev-backed write_zeroes
- scripts/checkstack.pl: Fix arm64 wrong or unknown architecture
- scsi: ufs: Check that space was properly alloced in copy_query_response
- scsi: smartpqi: unlock on error in pqi_submit_raid_request_synchronous()
- net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set
- s390/qeth: fix VLAN attribute in bridge_hostnotify udev event
- hwmon: (core) add thermal sensors only if dev->of_node is present
- hwmon: (pmbus/core) Treat parameters as paged if on multiple pages
- arm64: Silence gcc warnings about arch ABI drift
- nvme: Fix u32 overflow in the number of namespace list calculation
- btrfs: start readahead also in seed devices
- can: xilinx_can: use correct bittiming_const for CAN FD core
- can: flexcan: fix timeout when set small bitrate
- can: purge socket error queue on sock destruct
- riscv: mm: synchronize MMU after pte change
- powerpc/bpf: use unsigned division instruction for 64-bit operations
- ARM: imx: cpuidle-imx6sx: Restrict the SW2ISO increase to i.MX6SX
- ARM: dts: dra76x: Update MMC2_HS200_MANUAL1 iodelay values
- ARM: dts: am57xx-idk: Remove support for voltage switching for SD card
- arm64/sve: <uapi/asm/ptrace.h> should not depend on <uapi/linux/prctl.h>
- arm64: ssbd: explicitly depend on <linux/prctl.h>
- drm/vmwgfx: Use the backdoor port if the HB port is not available
- staging: erofs: add requirements field in superblock
- SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write
- cfg80211: fix memory leak of wiphy device name
- mac80211: drop robust management frames from unknown TA
- {nl,mac}80211: allow 4addr AP operation on crypto controlled devices
- mac80211: handle deauthentication/disassociation from TDLS peer
- nl80211: fix station_info pertid memory leak
- mac80211: Do not use stack memory with scatterlist for GMAC
- x86/resctrl: Don't stop walking closids when a locksetup group is found
- mmc: sdhi: disallow HS400 for M3-W ES1.2, RZ/G2M, and V3H
- mmc: mediatek: fix SDIO IRQ interrupt handle flow
- mmc: mediatek: fix SDIO IRQ detection issue
- cifs: fix GlobalMid_Lock bug in cifs_reconnect
- IB/hfi1: Close PSM sdma_progress sleep window
- IB/hfi1: Avoid hardlockup with flushlist_lock
- IB/hfi1: Correct tid qp rcd to match verbs context
- iio: imu: st_lsm6dsx: fix PM support for st_lsm6dsx i2c controller
- apparmor: reset pos on failure to unpack for various functions
- Revert "brcmfmac: disable command decode in sdio_aos"
- lkdtm/usercopy: Moves the KERNEL_DS test to non-canonical
- dmaengine: jz4780: Fix transfers being ACKed too soon
- dmaengine: mediatek-cqdma: sleeping in atomic context
- dmaengine: sprd: Fix the possible crash when getting descriptor status
- dmaengine: sprd: Add validation of current descriptor in irq handler
- dmaengine: sprd: Fix the incorrect start for 2-stage destination channels
- dmaengine: sprd: Fix the right place to configure 2-stage transfer
- fpga: stratix10-soc: fix use-after-free on s10_init()
- crypto: hmac - fix memory leak in hmac_init_tfm()
- userfaultfd: selftest: fix compiler warning
- selftests: set sysctl bc_forwarding properly in router_broadcast.sh
- kbuild: tar-pkg: enable communication with jobserver
- net: phylink: avoid reducing support mask
- udmabuf: actually unmap the scatterlist
- s390/qeth: handle limited IPv4 broadcast in L3 TX path
- s390/qeth: check dst entry before use
- ARM: mvebu_v7_defconfig: fix Ethernet on Clearfog
- KVM: x86/mmu: Allocate PAE root array when using SVM's 32-bit NPT
- binder: fix possible UAF when freeing buffer
- x86/vdso: Prevent segfaults due to hoisted vclock reads
* VIMC module not available (CONFIG_VIDEO_VIMC not set) (LP: #1831482)
- [Config] Enable VIMC module
* reboot will introduce an alarm 'beep ...' during BIOS phase (LP: #1840395)
- ALSA: hda - Let all conexant codec enter D3 when rebooting
- ALSA: hda - Add a generic reboot_notify
* Include Sunix serial/parallel driver (LP: #1826716)
- serial: 8250_pci: Add support for Sunix serial boards
- parport: parport_serial: Add support for Sunix Multi I/O boards
* Intel HDMI audio print "Unable to sync register" errors (LP: #1840394)
- ALSA: hda - Don't resume forcibly i915 HDMI/DP codec
* UBUNTU: SAUCE: shiftfs: pass correct point down (LP: #1837231)
- SAUCE: shiftfs: pass correct point down
* shiftfs: add O_DIRECT support (LP: #1837223)
- SAUCE: shiftfs: add O_DIRECT support
* p54usb module in linux-modules-extra-5.0.0-23-generic does not work
(LP: #1839693)
- p54: fix crash during initialization
* Goodix touchpad may drop first input event (LP: #1840075)
- Revert "UBUNTU: SAUCE: i2c: designware: add Inpiron/Vostro 7590 into i2c
quirk"
- Revert "UBUNTU: SAUCE: i2c: designware: Add disable runtime pm quirk"
- mfd: intel-lpss: Remove D3cold delay
* NULL pointer dereference when Inserting the VIMC module (LP: #1840028)
- media: vimc: fix component match compare
* Fix touchpad IRQ storm after S3 (LP: #1841396)
- pinctrl: intel: remap the pin number to gpio offset for irq enabled pin
* [SRU][B/OEM-B/OEM-OSP1/D] UBUNTU: SAUCE: enable middle button for one more
ThinkPad (LP: #1841722)
- SAUCE: Input: elantech - enable middle button for one more ThinkPad
* Disco update: upstream stable patchset 2019-08-13 (LP: #1840076)
- [Config] updateconfigs for CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT
- drm/nouveau: add kconfig option to turn off nouveau legacy contexts. (v3)
- nouveau: Fix build with CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT disabled
- HID: multitouch: handle faulty Elo touch device
- HID: wacom: Don't set tool type until we're in range
- HID: wacom: Don't report anything prior to the tool entering range
- HID: wacom: Send BTN_TOUCH in response to INTUOSP2_BT eraser contact
- HID: wacom: Correct button numbering 2nd-gen Intuos Pro over Bluetooth
- HID: wacom: Sync INTUOSP2_BT touch state after each frame if necessary
- ALSA: oxfw: allow PCM capture for Stanton SCS.1m
- ALSA: hda/realtek - Update headset mode for ALC256
- ALSA: firewire-motu: fix destruction of data for isochronous resources
- libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk
- mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node
- fs/ocfs2: fix race in ocfs2_dentry_attach_lock()
- mm/vmscan.c: fix trying to reclaim unevictable LRU page
- signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO
- ptrace: restore smp_rmb() in __ptrace_may_access()
- iommu/arm-smmu: Avoid constant zero in TLBI writes
- i2c: acorn: fix i2c warning
- bcache: fix stack corruption by PRECEDING_KEY()
- cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css()
- ASoC: cs42xx8: Add regcache mask dirty
- ASoC: fsl_asrc: Fix the issue about unsupported rate
- drm/i915/sdvo: Implement proper HDMI audio support for SDVO
- x86/uaccess, kcov: Disable stack protector
- ALSA: seq: Protect in-kernel ioctl calls with mutex
- ALSA: seq: Fix race of get-subscription call vs port-delete ioctls
- Revert "ALSA: seq: Protect in-kernel ioctl calls with mutex"
- s390/kasan: fix strncpy_from_user kasan checks
- Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var
- f2fs: fix to avoid accessing xattr across the boundary
- scsi: qedi: remove memset/memcpy to nfunc and use func instead
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
- scsi: lpfc: correct rcu unlock issue in lpfc_nvme_info_show
- scsi: lpfc: add check for loss of ndlp when sending RRQ
- arm64/mm: Inhibit huge-vmap with ptdump
- nvme: fix srcu locking on error return in nvme_get_ns_from_disk
- nvme: remove the ifdef around nvme_nvm_ioctl
- nvme: merge nvme_ns_ioctl into nvme_ioctl
- nvme: release namespace SRCU protection before performing controller ioctls
- nvme: fix memory leak for power latency tolerance
- platform/x86: pmc_atom: Add Lex 3I380D industrial PC to critclk_systems DMI
table
- platform/x86: pmc_atom: Add several Beckhoff Automation boards to
critclk_systems DMI table
- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
- libnvdimm: Fix compilation warnings with W=1
- selftests/timers: Add missing fflush(stdout) calls
- tracing: Prevent hist_field_var_ref() from accessing NULL tracing_map_elts
- usbnet: ipheth: fix racing condition
- KVM: arm/arm64: Move cc/it checks under hyp's Makefile to avoid
instrumentation
- KVM: x86/pmu: mask the result of rdpmc according to the width of the
counters
- KVM: x86/pmu: do not mask the value that is written to fixed PMUs
- KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION
- tools/kvm_stat: fix fields filter for child events
- drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an
invalid read
- drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define()
- usb: dwc2: Fix DMA cache alignment issues
- usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam regression)
- USB: Fix chipmunk-like voice when using Logitech C270 for recording audio.
- USB: serial: pl2303: add Allied Telesis VT-Kit3
- USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode
- USB: serial: option: add Telit 0x1260 and 0x1261 compositions
- timekeeping: Repair ktime_get_coarse*() granularity
- RAS/CEC: Convert the timer callback to a workqueue
- RAS/CEC: Fix binary search function
- x86/microcode, cpuhotplug: Add a microcode loader CPU hotplug callback
- x86/kasan: Fix boot with 5-level paging and KASAN
- x86/mm/KASLR: Compute the size of the vmemmap section properly
- x86/resctrl: Prevent NULL pointer dereference when local MBM is disabled
- drm/edid: abstract override/firmware EDID retrieval
- drm: add fallback override/firmware EDID modes workaround
- HID: input: make sure the wheel high resolution multiplier is set
- HID: input: fix assignment of .value
- Revert "HID: Increase maximum report size allowed by hid_field_extract()"
- selinux: fix a missing-check bug in selinux_add_mnt_opt( )
- selinux: fix a missing-check bug in selinux_sb_eat_lsm_opts()
- media: dvb: warning about dvb frequency limits produces too much noise
- drm/amdgpu/{uvd,vcn}: fetch ring's read_ptr after alloc
- drm/i915/dsi: Use a fuzzy check for burst mode clock check
- drm/i915: Fix per-pixel alpha with CCS
- drm/i915/dmc: protect against reading random memory
- drivers/perf: arm_spe: Don't error on high-order pages for aux buf
- bpf: sockmap, only stop/flush strp if it was enabled at some point
- bpf: sockmap remove duplicate queue free
- bpf: sockmap fix msg->sg.size account on ingress skb
- scsi: qla2xxx: Add cleanup for PCI EEH recovery
- scsi: lpfc: resolve lockdep warnings
- arm64: Print physical address of page table base in show_pte()
- net: macb: fix error format in dev_err()
- bpf, tcp: correctly handle DONT_WAIT flags and timeo == 0
- tools/bpftool: move set_max_rlimit() before __bpf_object__open_xattr()
- nvme-pci: Fix controller freeze wait disabling
- scsi: myrs: Fix uninitialized variable
- nvme-pci: use blk-mq mapping for unmanaged irqs
- KVM: nVMX: really fix the size checks on KVM_SET_NESTED_STATE
- KVM: selftests: Fix a condition in test_hv_cpuid()
- kvm: vmx: Fix -Wmissing-prototypes warnings
- KVM: LAPIC: Fix lapic_timer_advance_ns parameter overflow
- KVM: x86: do not spam dmesg with VMCS/VMCB dumps
- kvm: selftests: aarch64: dirty_log_test: fix unaligned memslot size
- kvm: selftests: aarch64: fix default vm mode
- tracing/uprobe: Fix NULL pointer dereference in trace_uprobe_create()
- powerpc: Fix kexec failure on book3s/32
- powerpc/64s: Fix THP PMD collapse serialisation
- ax25: fix inconsistent lock state in ax25_destroy_timer
- be2net: Fix number of Rx queues used for flow hashing
- hv_netvsc: Set probe mode to sync
- ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero
- lapb: fixed leak of control-blocks.
- neigh: fix use-after-free read in pneigh_get_next
- net: dsa: rtl8366: Fix up VLAN filtering
- net: openvswitch: do not free vport if register_netdevice() is failed.
- sctp: Free cookie before we memdup a new one
- sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg
- tipc: purge deferredq list for each grp member in tipc_group_delete
- vsock/virtio: set SOCK_DONE on peer shutdown
- net/mlx5: Avoid reloading already removed devices
- net: mvpp2: prs: Fix parser range for VID filtering
- net: mvpp2: prs: Use the correct helpers when removing all VID filters
- Staging: vc04_services: Fix a couple error codes
- perf/x86/intel/ds: Fix EVENT vs. UEVENT PEBS constraints
- netfilter: nf_queue: fix reinject verdict handling
- ipvs: Fix use-after-free in ip_vs_in
- selftests: netfilter: missing error check when setting up veth interface
- clk: ti: clkctrl: Fix clkdm_clk handling
- powerpc/powernv: Return for invalid IMC domain
- usb: xhci: Fix a potential null pointer dereference in
xhci_debugfs_create_endpoint()
- mISDN: make sure device name is NUL terminated
- x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor
- perf/ring_buffer: Fix exposing a temporarily decreased data_head
- perf/ring_buffer: Add ordering to rb->nest increment
- perf/ring-buffer: Always use {READ,WRITE}_ONCE() for rb->user_page data
- gpio: fix gpio-adp5588 build errors
- net: stmmac: update rx tail pointer register to fix rx dma hang issue.
- net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE()
- ACPI/PCI: PM: Add missing wakeup.flags.valid checks
- drm/etnaviv: lock MMU while dumping core
- net: aquantia: tx clean budget logic error
- net: aquantia: fix LRO with FCS error
- i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr
- ALSA: hda - Force polling mode on CNL for fixing codec communication
- configfs: Fix use-after-free when accessing sd->s_dentry
- perf data: Fix 'strncat may truncate' build failure with recent gcc
- perf namespace: Protect reading thread's namespace
- perf record: Fix s390 missing module symbol and warning for non-root users
- ia64: fix build errors by exporting paddr_to_nid()
- xen/pvcalls: Remove set but not used variable
- xenbus: Avoid deadlock during suspend due to open transactions
- KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list
- KVM: PPC: Book3S HV: Don't take kvm->lock around kvm_for_each_vcpu
- arm64: fix syscall_fn_t type
- arm64: use the correct function type in SYSCALL_DEFINE0
- arm64: use the correct function type for __arm64_sys_ni_syscall
- net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs
- net: phylink: ensure consistent phy interface mode
- net: phy: dp83867: Set up RGMII TX delay
- scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route()
- scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask
- scsi: scsi_dh_alua: Fix possible null-ptr-deref
- mlxsw: spectrum: Prevent force of 56G
- ocfs2: fix error path kobject memory leak
- coredump: fix race condition between collapse_huge_page() and core dumping
- Abort file_remove_privs() for non-reg. files
- net: tls, correctly account for copied bytes with multiple sk_msgs
- vxlan: Don't assume linear buffers in error handler
- geneve: Don't assume linear buffers in error handler
- net/mlx5: Update pci error handler entries and command translation
- mlxsw: spectrum_router: Refresh nexthop neighbour when it becomes dead
- net/mlx5e: Add ndo_set_feature for uplink representor
- mlxsw: spectrum_flower: Fix TOS matching
- net/mlx5e: Support tagged tunnel over bond
- net: correct udp zerocopy refcnt also when zerocopy only on append
- net/mlx5e: Avoid detaching non-existing netdev under switchdev mode
- staging: erofs: set sb->s_root to NULL when failing from __getname()
- staging: wilc1000: Fix some double unlock bugs in wilc_wlan_cleanup()
- pinctrl: intel: Clear interrupt status in mask/unmask callback
- netfilter: nf_tables: fix oops during rule dump
- netfilter: nft_fib: Fix existence check support
- net: stmmac: dwmac-mediatek: modify csr_clk value to fix mdio read/write
fail
- dpaa2-eth: Fix potential spectre issue
- dpaa2-eth: Use PTR_ERR_OR_ZERO where appropriate
- dpaa_eth: use only online CPU portals
- dfs_cache: fix a wrong use of kfree in flush_cache_ent()
- KVM: PPC: Book3S HV: Use new mutex to synchronize MMU setup
- blk-mq: Fix memory leak in error handling
- mm: mmu_gather: remove __tlb_reset_range() for force flush
- nvme-tcp: rename function to have nvme_tcp prefix
- nvme-tcp: fix possible null deref on a timed out io queue connect
- nvme-tcp: fix queue mapping when queue count is limited
* Disco update: upstream stable patchset 2019-08-12 (LP: #1839887)
- selftests/tls: test for lowat overshoot with multiple records
- selftests/tls: add test for sleeping even though there is data
- sparc64: Fix regression in non-hypervisor TLB flush xcall
- include/linux/bitops.h: sanitize rotate primitives
- xhci: update bounce buffer with correct sg num
- xhci: Use %zu for printing size_t type
- xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic()
- usb: xhci: avoid null pointer deref when bos field is NULL
- usbip: usbip_host: fix BUG: sleeping function called from invalid context
- usbip: usbip_host: fix stub_dev lock context imbalance regression
- USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
- USB: sisusbvga: fix oops in error path of sisusb_probe
- USB: Add LPM quirk for Surface Dock GigE adapter
- USB: rio500: refuse more than one device at a time
- USB: rio500: fix memory leak in close after disconnect
- media: usb: siano: Fix general protection fault in smsusb
- media: usb: siano: Fix false-positive "uninitialized variable" warning
- media: smsusb: better handle optional alignment
- brcmfmac: fix NULL pointer derefence during USB disconnect
- scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove
- scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs)
- tracing: Avoid memory leak in predicate_parse()
- Btrfs: fix wrong ctime and mtime of a directory after log replay
- Btrfs: fix race updating log root item during fsync
- Btrfs: fix fsync not persisting changed attributes of a directory
- Btrfs: incremental send, fix file corruption when no-holes feature is
enabled
- iio: dac: ds4422/ds4424 fix chip verification
- iio: adc: ti-ads8688: fix timestamp is not updated in buffer
- s390/crypto: fix possible sleep during spinlock aquired
- KVM: PPC: Book3S HV: XIVE: Do not clear IRQ data of passthrough interrupts
- powerpc/perf: Fix MMCRA corruption by bhrb_filter
- ALSA: line6: Assure canceling delayed work at disconnection
- ALSA: hda/realtek - Set default power save node to 0
- KVM: s390: Do not report unusabled IDs via KVM_CAP_MAX_VCPU_ID
- drm/nouveau/i2c: Disable i2c bus access after ->fini()
- i2c: mlxcpld: Fix wrong initialization order in probe
- i2c: synquacer: fix synquacer_i2c_doxfer() return value
- tty: serial: msm_serial: Fix XON/XOFF
- tty: max310x: Fix external crystal register setup
- memcg: make it work on sparse non-0-node systems
- kernel/signal.c: trace_signal_deliver when signal_group_exit
- arm64: Fix the arm64_personality() syscall wrapper redirection
- docs: Fix conf.py for Sphinx 2.0
- doc: Cope with the deprecation of AutoReporter
- doc: Cope with Sphinx logging deprecations
- ima: show rules with IMA_INMASK correctly
- evm: check hash algorithm passed to init_desc()
- vt/fbcon: deinitialize resources in visual_init() after failed memory
allocation
- serial: sh-sci: disable DMA for uart_console
- staging: vc04_services: prevent integer overflow in create_pagelist()
- staging: wlan-ng: fix adapter initialization failure
- cifs: fix memory leak of pneg_inbuf on -EOPNOTSUPP ioctl case
- CIFS: cifs_read_allocate_pages: don't iterate through whole page array on
ENOMEM
- Revert "lockd: Show pid of lockd for remote locks"
- gcc-plugins: Fix build failures under Darwin host
- drm/tegra: gem: Fix CPU-cache maintenance for BO's allocated using
get_pages()
- drm/vmwgfx: Don't send drm sysfs hotplug events on initial master set
- drm/sun4i: Fix sun8i HDMI PHY clock initialization
- drm/sun4i: Fix sun8i HDMI PHY configuration for > 148.5 MHz
- drm/rockchip: shutdown drm subsystem on shutdown
- drm/lease: Make sure implicit planes are leased
- Revert "x86/build: Move _etext to actual end of .text"
- scsi: lpfc: Fix backport of faf5a744f4f8 ("scsi: lpfc: avoid uninitialized
variable warning")
- KVM: PPC: Book3S HV: Fix lockdep warning when entering guest on POWER9
- KVM: PPC: Book3S HV: Restore SPRG3 in kvmhv_p9_guest_entry()
- powerpc/kexec: Fix loading of kernel + initramfs with kexec_file_load()
- kasan: initialize tag to 0xff in __kasan_kmalloc
- signal/arm64: Use force_sig not force_sig_fault for SIGKILL
- x86/ima: Check EFI_RUNTIME_SERVICES before using
- ima: fix wrong signed policy requirement when not appraising
- drm/vmwgfx: Fix user space handle equal to zero
- drm/vmwgfx: Fix compat mode shader operation
- drm/atomic: Wire file_priv through for property changes
- drm: Expose "FB_DAMAGE_CLIPS" property to atomic aware user-space only
- drm/cma-helper: Fix drm_gem_cma_free_object()
- ethtool: fix potential userspace buffer overflow
- Fix memory leak in sctp_process_init
- ipv4: not do cache for local delivery if bc_forwarding is enabled
- ipv6: fix the check before getting the cookie in rt6_get_cookie
- neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit
- net: ethernet: ti: cpsw_ethtool: fix ethtool ring param set
- net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query
- net: mvpp2: Use strscpy to handle stat strings
- net: rds: fix memory leak in rds_ib_flush_mr_pool
- net: sfp: read eeprom in maximum 16 byte increments
- net/tls: replace the sleeping lock around RX resync with a bit lock
- packet: unconditionally free po->rollover
- pktgen: do not sleep with the thread lock held.
- Revert "fib_rules: return 0 directly if an exactly same rule exists when
NLM_F_EXCL not supplied"
- ipv6: use READ_ONCE() for inet->hdrincl as in ipv4
- ipv6: fix EFAULT on sendto with icmpv6 and hdrincl
- mtd: spinand: macronix: Fix ECC Status Read
- rcu: locking and unlocking need to always be at least barriers
- parisc: Use implicit space register selection for loading the coherence
index of I/O pdirs
- NFSv4.1: Again fix a race where CB_NOTIFY_LOCK fails to wake a waiter
- NFSv4.1: Fix bug only first CB_NOTIFY_LOCK is handled
- fuse: fallocate: fix return with locked inode
- pstore: Set tfm to NULL on free_buf_for_compression
- pstore/ram: Run without kernel crash dump region
- x86/power: Fix 'nosmt' vs hibernation triple fault during resume
- i2c: xiic: Add max_read_len quirk
- s390/mm: fix address space detection in exception handling
- xen-blkfront: switch kcalloc to kvcalloc for large array allocation
- MIPS: Bounds check virt_addr_valid
- MIPS: pistachio: Build uImage.gz by default
- Revert "MIPS: perf: ath79: Fix perfcount IRQ assignment"
- genwqe: Prevent an integer overflow in the ioctl
- test_firmware: Use correct snprintf() limit
- drm/gma500/cdv: Check vbt config bits when detecting lvds panels
- drm/msm: fix fb references in async update
- drm: add non-desktop quirk for Valve HMDs
- drm: add non-desktop quirks to Sensics and OSVR headsets.
- drm/amdgpu/psp: move psp version specific function pointers to early_init
- drm/amdgpu: remove ATPX_DGPU_REQ_POWER_FOR_DISPLAYS check when hotplug-in
- drm/i915: Fix I915_EXEC_RING_MASK
- drm/i915/fbc: disable framebuffer compression on GeminiLake
- drm/i915: Maintain consistent documentation subsection ordering
- drm: don't block fb changes for async plane updates
- drm/i915/gvt: Initialize intel_gvt_gtt_entry in stack
- TTY: serial_core, add ->install
- ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled
- udp: only choose unbound UDP socket for multicast when not in a VRF
- neighbor: Reset gc_entries counter if new entry is released before insert
- cls_matchall: avoid panic when receiving a packet before filter set
- ipmr_base: Do not reset index in mr_table_dump
- ARC: mm: SIGSEGV userspace trying to access kernel virtual memory
- parisc: Fix crash due alternative coding for NP iopdir_fdc bit
- SUNRPC fix regression in umount of a secure mount
- fuse: fix copy_file_range() in the writeback case
- memstick: mspro_block: Fix an error code in mspro_block_issue_req()
- mmc: tmio: fix SCC error handling to avoid false positive CRC error
- mmc: sdhci_am654: Fix SLOTTYPE write
- nvme-rdma: fix queue mapping when queue count is limited
- drm/vc4: fix fb references in async update
- drm: Fix timestamp docs for variable refresh properties.
- drm/amd/display: Add ASICREV_IS_PICASSO
- drm/amdgpu: fix ring test failure issue during s3 in vce 3.0 (V2)
- drm/amd: fix fb references in async update
- rapidio: fix a NULL pointer dereference when create_workqueue() fails
- fs/fat/file.c: issue flush after the writeback of FAT
- sysctl: return -EINVAL if val violates minmax
- ipc: prevent lockup on alloc_msg and free_msg
- drm/pl111: Initialize clock spinlock early
- ARM: prevent tracing IPI_CPU_BACKTRACE
- mm/hmm: select mmu notifier when selecting HMM
- hugetlbfs: on restore reserve error path retain subpool reservation
- mem-hotplug: fix node spanned pages when we have a node with only
ZONE_MOVABLE
- mm/cma.c: fix crash on CMA allocation if bitmap allocation fails
- initramfs: free initrd memory if opening /initrd.image fails
- mm/cma.c: fix the bitmap status to show failed allocation reason
- mm: page_mkclean vs MADV_DONTNEED race
- mm/cma_debug.c: fix the break condition in cma_maxchunk_get()
- mm/slab.c: fix an infinite loop in leaks_show()
- kernel/sys.c: prctl: fix false positive in validate_prctl_map()
- thermal: rcar_gen3_thermal: disable interrupt in .remove
- drivers: thermal: tsens: Don't print error message on -EPROBE_DEFER
- mfd: tps65912-spi: Add missing of table registration
- mfd: intel-lpss: Set the device in reset state when init
- drm/nouveau/disp/dp: respect sink limits when selecting failsafe link
configuration
- mfd: twl6040: Fix device init errors for ACCCTL register
- perf/x86/intel: Allow PEBS multi-entry in watermark mode
- drm/nouveau/kms/gf119-gp10x: push HeadSetControlOutputResource() mthd when
encoders change
- drm/bridge: adv7511: Fix low refresh rate selection
- objtool: Don't use ignore flag for fake jumps
- drm/nouveau/kms/gv100-: fix spurious window immediate interlocks
- bpf: fix undefined behavior in narrow load handling
- EDAC/mpc85xx: Prevent building as a module
- pwm: meson: Use the spin-lock only to protect register modifications
- mailbox: stm32-ipcc: check invalid irq
- ntp: Allow TAI-UTC offset to be set to zero
- f2fs: fix to avoid panic in do_recover_data()
- f2fs: fix to avoid panic in f2fs_inplace_write_data()
- f2fs: fix to avoid panic in f2fs_remove_inode_page()
- f2fs: fix to do sanity check on free nid
- f2fs: fix to clear dirty inode in error path of f2fs_iget()
- f2fs: fix to avoid panic in dec_valid_block_count()
- f2fs: fix to use inline space only if inline_xattr is enable
- f2fs: fix to do sanity check on valid block count of segment
- f2fs: fix to do checksum even if inode page is uptodate
- percpu: remove spurious lock dependency between percpu and sched
- configfs: fix possible use-after-free in configfs_register_group
- uml: fix a boot splat wrt use of cpu_all_mask
- PCI: dwc: Free MSI in dw_pcie_host_init() error path
- PCI: dwc: Free MSI IRQ page in dw_pcie_free_msi()
- mmc: mmci: Prevent polling for busy detection in IRQ context
- netfilter: nf_flow_table: fix missing error check for rhashtable_insert_fast
- netfilter: nf_conntrack_h323: restore boundary check correctness
- mips: Make sure dt memory regions are valid
- netfilter: nf_tables: fix base chain stat rcu_dereference usage
- watchdog: imx2_wdt: Fix set_timeout for big timeout values
- watchdog: fix compile time error of pretimeout governors
- blk-mq: move cancel of requeue_work into blk_mq_release
- iommu/vt-d: Set intel_iommu_gfx_mapped correctly
- misc: pci_endpoint_test: Fix test_reg_bar to be updated in pci_endpoint_test
- PCI: designware-ep: Use aligned ATU window for raising MSI interrupts
- nvme-pci: unquiesce admin queue on shutdown
- nvme-pci: shutdown on timeout during deletion
- netfilter: nf_flow_table: check ttl value in flow offload data path
- netfilter: nf_flow_table: fix netdev refcnt leak
- ALSA: hda - Register irq handler after the chip initialization
- nvmem: core: fix read buffer in place
- nvmem: sunxi_sid: Support SID on A83T and H5
- fuse: retrieve: cap requested size to negotiated max_write
- nfsd: allow fh_want_write to be called twice
- nfsd: avoid uninitialized variable warning
- vfio: Fix WARNING "do not call blocking ops when !TASK_RUNNING"
- switchtec: Fix unintended mask of MRPC event
- net: thunderbolt: Unregister ThunderboltIP protocol handler when suspending
- x86/PCI: Fix PCI IRQ routing table memory leak
- i40e: Queues are reserved despite "Invalid argument" error
- platform/chrome: cros_ec_proto: check for NULL transfer function
- PCI: keystone: Prevent ARM32 specific code to be compiled for ARM64
- soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher
- clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288
- soc: rockchip: Set the proper PWM for rk3288
- ARM: dts: imx51: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
- ARM: dts: imx50: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
- ARM: dts: imx53: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
- ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA
- ARM: dts: imx6sll: Specify IMX6SLL_CLK_IPG as "ipg" clock to SDMA
- ARM: dts: imx7d: Specify IMX7D_CLK_IPG as "ipg" clock to SDMA
- ARM: dts: imx6ul: Specify IMX6UL_CLK_IPG as "ipg" clock to SDMA
- ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA
- ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA
- PCI: rpadlpar: Fix leaked device_node references in add/remove paths
- drm/amd/display: Use plane->color_space for dpp if specified
- ARM: OMAP2+: pm33xx-core: Do not Turn OFF CEFUSE as PPA may be using it
- platform/x86: intel_pmc_ipc: adding error handling
- power: supply: max14656: fix potential use-before-alloc
- PCI: rcar: Fix a potential NULL pointer dereference
- PCI: rcar: Fix 64bit MSI message address handling
- scsi: qla2xxx: Reset the FCF_ASYNC_{SENT|ACTIVE} flags
- video: hgafb: fix potential NULL pointer dereference
- video: imsttfb: fix potential NULL pointer dereferences
- block, bfq: increase idling for weight-raised queues
- PCI: xilinx: Check for __get_free_pages() failure
- gpio: gpio-omap: add check for off wake capable gpios
- ice: Add missing case in print_link_msg for printing flow control
- dmaengine: idma64: Use actual device for DMA transfers
- pwm: tiehrpwm: Update shadow register for disabling PWMs
- ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on
Arndale Octa
- pwm: Fix deadlock warning when removing PWM device
- ARM: exynos: Fix undefined instruction during Exynos5422 resume
- usb: typec: fusb302: Check vconn is off when we start toggling
- soc: renesas: Identify R-Car M3-W ES1.3
- gpio: vf610: Do not share irq_chip
- percpu: do not search past bitmap when allocating an area
- ovl: check the capability before cred overridden
- ovl: support stacked SEEK_HOLE/SEEK_DATA
- ALSA: seq: Cover unsubscribe_port() in list_mutex
- media: rockchip/vpu: Fix/re-order probe-error/remove path
- media: rockchip/vpu: Add missing dont_use_autosuspend() calls
- drm/msm: correct attempted NULL pointer dereference in debugfs
- mm/memory_hotplug: release memory resource after arch_remove_memory()
- mm/memory_hotplug.c: fix the wrong usage of N_HIGH_MEMORY
- drm/nouveau: fix duplication of nv50_head_atom struct
- f2fs: fix error path of recovery
- f2fs: fix to avoid panic in dec_valid_node_count()
- f2fs: fix to avoid deadloop in foreground GC
- f2fs: fix to retrieve inline xattr space
- media: atmel: atmel-isc: fix asd memory allocation
- vfio-pci/nvlink2: Fix potential VMA leak
- powerpc/pseries: Track LMB nid instead of using device tree
- arm64: defconfig: Update UFSHCD for Hi3660 soc
- iommu/vt-d: Don't request page request irq under dmar_global_lock
- soc/tegra: pmc: Remove reset sysfs entries on error
- power: supply: cpcap-battery: Fix signed counter sample register
- PCI: keystone: Invoke phy_reset() API before enabling PHY
- iommu/vt-d: Flush IOTLB for untrusted device in time
- arm64: dts: imx8mq: Mark iomuxc_gpr as i.MX6Q compatible
- pinctrl: pinctrl-intel: move gpio suspend/resume to noirq phase
- f2fs: fix potential recursive call when enabling data_flush
- arm64: dts: qcom: qcs404: Fix regulator supply names
- gpio: gpio-omap: limit errata 1.101 handling to wkup domain gpios only
- media: v4l2-ctrl: v4l2_ctrl_request_setup returns with error upon failure
- batman-adv: Adjust name for batadv_dat_send_data
- ice: Enable LAN_EN for the right recipes
- ice: Do not set LB_EN for prune switch rules
- media: v4l2-fwnode: Defaults may not override endpoint configuration in
firmware
- ARM: shmobile: porter: enable R-Car Gen2 regulator quirk
[ Ubuntu: 5.0.0-29.31 ]
* powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts
(CVE-2019-15031) / powerpc/tm: Fix FP/VMX unavailable exceptions inside a
transaction (CVE-2019-15030) (LP: #1843533) // CVE-2019-15031
- powerpc/tm: Fix FP/VMX unavailable exceptions inside a transaction
- powerpc/tm: Fix restoring FP/VMX facility incorrectly on interrupts
* CVE-2019-14835
- vhost: fix dirty log buffer overflow
* Packaging resync (LP: #1786013)
- [Packaging] resync getabis
[ Ubuntu: 5.0.0-27.28 ]
* disco/linux: 5.0.0-27.28 -proposed tracker (LP: #1840816)
* [Potential Regression] System crashes when running ftrace test in
ubuntu_kernel_selftests (LP: #1840750)
- x86/kprobes: Set instruction page as executable
linux-oracle (5.0.0-1002.3) disco; urgency=medium
* disco/linux-oracle: 5.0.0-1002.3 -proposed tracker (LP: #1842155)
* Packaging resync (LP: #1786013)
- [Packaging] fix Vcs-Git: package
* Miscellaneous Ubuntu changes
- [config] Update annotations format to version 3
- [config] CONFIG_PAGE_POISONING=y
- [config] CONFIG_NETWORK_PHY_TIMESTAMPING=y
- [config] Un-escaping string literal in CONFIG_LSM
linux-oracle (5.0.0-1001.2) disco; urgency=medium
* disco/linux-oracle: 5.0.0-1001.2 -proposed tracker (LP: #1840811)
* disco: unable to use iptables/enable ufw under -virtual kernel
(LP: #1823862)
- [Packaging] add bpfilter to linux-modules
* tcm_loop.ko: move from modules-extra into main modules package
(LP: #1817786)
- [Packaging] move tcm_loop.lo to main linux-modules package
* autofs kernel module missing (LP: #1824333)
- [Config] Update autofs4 path in inclusion list
* [Packaging] Improve config annotations check on custom kernels
(LP: #1820075)
- [Config] linux-oracle: Include custom annotations files
* Miscellaneous Ubuntu changes
- [Packaging] update update.conf
- [Config] update configs following rebase to 5.0.0-26.27
- [Packaging] sync packaging updates from master
- [Config] Update getabis to use linux-buildinfo
- [Config] Include shiftfs in generic inclusion list.
linux-oracle (5.0.0-1000.0) disco; urgency=medium
* Emtpy entry
linux-oracle (4.15.0-1022.25) bionic; urgency=medium
* bionic/linux-oracle: 4.15.0-1022.25 -proposed tracker (LP: #1839997)
* Build Nvidia drivers in conjunction with kernel (LP: #1764792)
- [Packaging] oracle: enable build and signing nvidia
* Bionic update: upstream stable patchset 2019-08-05 (LP: #1839036)
- [Packaging] oracle: adv7511 to adv7511-v4l2 rename
* Bionic update: upstream stable patchset 2019-08-02 (LP: #1838824)
- [Config] oracle: Add CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT=y
* Bionic update: upstream stable patchset 2019-07-29 (LP: #1838349)
- [Config] oracle: include CONFIG_INTEL_ATOMISP2_PM
* Bionic update: upstream stable patchset 2019-07-26 (LP: #1838116)
- [Config] oracle: Drop CONFIG_R3964
- [Config] oracle: Add CONFIG_LDISC_AUTOLOAD=y
* Bionic update: upstream stable patchset 2019-07-22 (LP: #1837477)
- [Config] oracle: Add CONFIG_CIFS_ALLOW_INSECURE_LEGACY=y
[ Ubuntu: 4.15.0-59.66 ]
* bionic/linux: 4.15.0-59.66 -proposed tracker (LP: #1840006)
* zfs not completely removed from bionic tree (LP: #1840051)
- SAUCE: (noup) remove completely the zfs code
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
* [18.04 FEAT] Enhanced hardware support (LP: #1836857)
- s390: report new CPU capabilities
- s390: add alignment hints to vector load and store
* [18.04 FEAT] Enhanced CPU-MF hardware counters - kernel part (LP: #1836860)
- s390/cpum_cf: Add support for CPU-MF SVN 6
- s390/cpumf: Add extended counter set definitions for model 8561 and 8562
* ideapad_laptop disables WiFi/BT radios on Lenovo Y540 (LP: #1837136)
- platform/x86: ideapad-laptop: Remove no_hw_rfkill_list
* Stacked onexec transitions fail when under NO NEW PRIVS restrictions
(LP: #1839037)
- SAUCE: apparmor: fix nnp subset check failure when, stacking
* bcache: bch_allocator_thread(): hung task timeout (LP: #1784665) // Tight
timeout for bcache removal causes spurious failures (LP: #1796292)
- SAUCE: bcache: fix deadlock in bcache_allocator
* bcache: bch_allocator_thread(): hung task timeout (LP: #1784665)
- bcache: never writeback a discard operation
- bcache: improve bcache_reboot()
- bcache: fix writeback target calc on large devices
- bcache: add journal statistic
- bcache: fix high CPU occupancy during journal
- bcache: use pr_info() to inform duplicated CACHE_SET_IO_DISABLE set
- bcache: fix incorrect sysfs output value of strip size
- bcache: fix error return value in memory shrink
- bcache: fix using of loop variable in memory shrink
- bcache: Fix indentation
- bcache: Add __printf annotation to __bch_check_keys()
- bcache: Annotate switch fall-through
- bcache: Fix kernel-doc warnings
- bcache: Remove an unused variable
- bcache: Suppress more warnings about set-but-not-used variables
- bcache: Reduce the number of sparse complaints about lock imbalances
- bcache: Fix a compiler warning in bcache_device_init()
- bcache: Move couple of string arrays to sysfs.c
- bcache: Move couple of functions to sysfs.c
- bcache: Replace bch_read_string_list() by __sysfs_match_string()
* linux hwe i386 kernel 5.0.0-21.22~18.04.1 crashes on Lenovo x220
(LP: #1838115)
- x86/mm: Check for pfn instead of page in vmalloc_sync_one()
- x86/mm: Sync also unmappings in vmalloc_sync_all()
- mm/vmalloc.c: add priority threshold to __purge_vmap_area_lazy()
- mm/vmalloc: Sync unmappings in __purge_vmap_area_lazy()
* [bionic] drm/i915: softpin broken, needs to be fixed for 32bit mesa
(LP: #1815172)
- drm/i915: Mark up GTT sizes as u64
- drm/i915/gvt: Use I915_GTT_PAGE_SIZE
- drm/i915: Compare user's 64b GTT offset even on 32b
* Bionic update: upstream stable patchset 2019-08-07 (LP: #1839376)
- ARM: riscpc: fix DMA
- ARM: dts: rockchip: Make rk3288-veyron-minnie run at hs200
- ARM: dts: rockchip: Make rk3288-veyron-mickey's emmc work again
- ARM: dts: rockchip: Mark that the rk3288 timer might stop in suspend
- ftrace: Enable trampoline when rec count returns back to one
- kernel/module.c: Only return -EEXIST for modules that have finished loading
- MIPS: lantiq: Fix bitfield masking
- dmaengine: rcar-dmac: Reject zero-length slave DMA requests
- clk: tegra210: fix PLLU and PLLU_OUT1
- fs/adfs: super: fix use-after-free bug
- btrfs: fix minimum number of chunk errors for DUP
- cifs: Fix a race condition with cifs_echo_request
- ceph: fix improper use of smp_mb__before_atomic()
- ceph: return -ERANGE if virtual xattr value didn't fit in buffer
- ACPI: blacklist: fix clang warning for unused DMI table
- scsi: zfcp: fix GCC compiler warning emitted with -Wmaybe-uninitialized
- x86: kvm: avoid constant-conversion warning
- ACPI: fix false-positive -Wuninitialized warning
- be2net: Signal that the device cannot transmit during reconfiguration
- x86/apic: Silence -Wtype-limits compiler warnings
- x86: math-emu: Hide clang warnings for 16-bit overflow
- mm/cma.c: fail if fixed declaration can't be honored
- coda: add error handling for fget
- coda: fix build using bare-metal toolchain
- uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side
headers
- drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings
- ipc/mqueue.c: only perform resource calculation if user valid
- xen/pv: Fix a boot up hang revealed by int3 self test
- x86/kvm: Don't call kvm_spurious_fault() from .fixup
- x86/paravirt: Fix callee-saved function ELF sizes
- x86, boot: Remove multiple copy of static function sanitize_boot_params()
- drm/nouveau: fix memory leak in nouveau_conn_reset()
- kbuild: initialize CLANG_FLAGS correctly in the top Makefile
- Btrfs: fix incremental send failure after deduplication
- Btrfs: fix race leading to fs corruption after transaction abort
- mmc: dw_mmc: Fix occasional hang after tuning on eMMC
- gpiolib: fix incorrect IRQ requesting of an active-low lineevent
- IB/hfi1: Fix Spectre v1 vulnerability
- selinux: fix memory leak in policydb_init()
- s390/dasd: fix endless loop after read unit address configuration
- parisc: Fix build of compressed kernel even with debug enabled
- drivers/perf: arm_pmu: Fix failure path in PM notifier
- nbd: replace kill_bdev() with __invalidate_device() again
- xen/swiotlb: fix condition for calling xen_destroy_contiguous_region()
- IB/mlx5: Fix unreg_umr to ignore the mkey state
- IB/mlx5: Use direct mkey destroy command upon UMR unreg failure
- IB/mlx5: Move MRs to a kernel PD when freeing them to the MR cache
- IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification
- IB/hfi1: Check for error on call to alloc_rsm_map_table
- eeprom: at24: make spd world-readable again
- objtool: Support GCC 9 cold subfunction naming scheme
- gcc-9: properly declare the {pv,hv}clock_page storage
- x86/vdso: Prevent segfaults due to hoisted vclock reads
- Documentation: Add swapgs description to the Spectre v1 documentation
- firmware/psci: psci_checker: Park kthreads before stopping them
- btrfs: qgroup: Don't hold qgroup_ioctl_lock in btrfs_qgroup_inherit()
- lib/test_string.c: avoid masking memset16/32/64 failures
- mmc: meson-mx-sdio: Fix misuse of GENMASK macro
- arm64: compat: Allow single-byte watchpoints on all addresses
- arm64: cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG}
- IB/mlx5: Fix clean_mr() to work in the expected order
- ARC: enable uboot support unconditionally
- scsi: mpt3sas: Use 63-bit DMA addressing on SAS35 HBA
* Bionic update: upstream stable patchset 2019-08-06 (LP: #1839213)
- staging: vt6656: use meaningful error code during buffer allocation
- drm/amd/display: Fill prescale_params->scale for RGB565
- drm/amd/display: Disable ABM before destroy ABM struct
- gpu: host1x: Increase maximum DMA segment size
- drm/amd/display: Always allocate initial connector state state
- drm/amd/display: fix compilation error
- mmc: sdhci: sdhci-pci-o2micro: Check if controller supports 8-bit width
- i2c: stm32f7: fix the get_irq error cases
- genksyms: Teach parser about 128-bit built-in types
- powerpc/mm: Handle page table allocation failures
- arm64: assembler: Switch ESB-instruction with a vanilla nop if
!ARM64_HAS_RAS
- dlm: check if workqueues are NULL before flushing/destroying
- proc: use down_read_killable mmap_sem for /proc/pid/pagemap
- proc: use down_read_killable mmap_sem for /proc/pid/clear_refs
- proc: use down_read_killable mmap_sem for /proc/pid/map_files
- proc: use down_read_killable mmap_sem for /proc/pid/maps
- mm: use down_read_killable for locking mmap_sem in access_remote_vm
- ALSA: ac97: Fix double free of ac97_codec_device
- libnvdimm/bus: Stop holding nvdimm_bus_list_mutex over __nd_ioctl()
- vsock: correct removal of socket from the list
- NFS: Fix dentry revalidation on NFSv4 lookup
- NFS: Refactor nfs_lookup_revalidate()
- NFSv4: Fix lookup revalidate of regular files
- i2c: qup: fixed releasing dma without flush operation completion
- arm64: compat: Provide definition for COMPAT_SIGMINSTKSZ
- binder: fix possible UAF when freeing buffer
- ISDN: hfcsusb: checking idx of ep configuration
- media: au0828: fix null dereference in error path
- ath10k: Change the warning message string
- media: cpia2_usb: first wake up, then free in disconnect
- media: pvrusb2: use a different format for warnings
- NFS: Cleanup if nfs_match_client is interrupted
- media: radio-raremono: change devm_k*alloc to k*alloc
- iommu/vt-d: Don't queue_iova() if there is no flush queue
- iommu/iova: Fix compilation error with !CONFIG_IOMMU_IOVA
- hv_sock: Add support for delayed close
- Bluetooth: hci_uart: check for missing tty operations
- sched/fair: Don't free p->numa_faults with concurrent readers
- drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl
- Fix allyesconfig output.
- ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL
* Bionic update: upstream stable patchset 2019-08-05 (LP: #1839036)
- e1000e: start network tx queue only when link is up
- Input: synaptics - enable SMBUS on T480 thinkpad trackpad
- nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header
- drivers: base: cacheinfo: Ensure cpu hotplug work is done before Intel RDT
- crypto: talitos - rename alternative AEAD algos.
- samples, bpf: fix to change the buffer size for read()
- bpf: sockmap, fix use after free from sleep in psock backlog workqueue
- staging:iio:ad7150: fix threshold mode config bit
- mac80211: mesh: fix RCU warning
- mac80211: free peer keys before vif down in mesh
- iwlwifi: Fix double-free problems in iwl_req_fw_callback()
- dt-bindings: can: mcp251x: add mcp25625 support
- can: mcp251x: add support for mcp25625
- can: m_can: implement errata "Needless activation of MRAF irq"
- can: af_can: Fix error path of can_init()
- ibmvnic: Refresh device multicast list after reset
- ARM: dts: am335x phytec boards: Fix cd-gpios active level
- Input: imx_keypad - make sure keyboard can always wake up system
- KVM: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy
- mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed
- ARM: davinci: da850-evm: call regulator_has_full_constraints()
- ARM: davinci: da8xx: specify dma_coherent_mask for lcdc
- mac80211: only warn once on chanctx_conf being NULL
- qmi_wwan: add support for QMAP padding in the RX path
- qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode
- qmi_wwan: extend permitted QMAP mux_id value range
- md: fix for divide error in status_resync
- bnx2x: Check if transceiver implements DDM before access
- drm: return -EFAULT if copy_to_user() fails
- ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL
- net: lio_core: fix potential sign-extension overflow on large shift
- quota: fix a problem about transfer quota
- net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge()
- net :sunrpc :clnt :Fix xps refcount imbalance on the error path
- fscrypt: don't set policy for a dead directory
- udf: Fix incorrect final NOT_ALLOCATED (hole) extent length
- ALSA: hda/realtek - Headphone Mic can't record after S3
- block, bfq: NULL out the bic when it's no longer valid
- x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()
- x86/tls: Fix possible spectre-v1 in do_get_thread_area()
- Documentation: Add section about CPU vulnerabilities for Spectre
- mwifiex: Abort at too short BSS descriptor element
- mwifiex: Don't abort on small, spec-compliant vendor IEs
- USB: serial: ftdi_sio: add ID for isodebug v1
- USB: serial: option: add support for GosunCn ME3630 RNDIS mode
- Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled"
- p54usb: Fix race between disconnect and firmware loading
- usb: gadget: ether: Fix race between gether_disconnect and rx_submit
- usb: renesas_usbhs: add a workaround for a race condition of workqueue
- staging: comedi: dt282x: fix a null pointer deref on interrupt
- staging: comedi: amplc_pci230: fix null pointer deref on interrupt
- binder: fix memory leak in error path
- carl9170: fix misuse of device driver API
- VMCI: Fix integer overflow in VMCI handle arrays
- MIPS: Remove superfluous check for __linux__
- clk: ti: clkctrl: Fix returning uninitialized data
- efi/bgrt: Drop BGRT status field reserved bits check
- perf/core: Fix perf_sample_regs_user() mm check
- ARM: omap2: remove incorrect __init annotation
- be2net: fix link failure after ethtool offline test
- ppp: mppe: Add softdep to arc4
- sis900: fix TX completion
- ARM: dts: imx6ul: fix PWM[1-4] interrupts
- dm verity: use message limit for data block corruption message
- x86/boot/64: Fix crash if kernel image crosses page table boundary
- cpu/hotplug: Fix out-of-bounds read when setting fail state
- linux/kernel.h: fix overflow for DIV_ROUND_UP_ULL
- ARC: hide unused function unw_hdr_alloc
- s390: fix stfle zero padding
- s390/qdio: (re-)initialize tiqdio list entries
- s390/qdio: don't touch the dsci in tiqdio_add_input_queues()
- crypto/NX: Set receive window credits to max number of CRBs in RxFIFO
- drm/udl: introduce a macro to convert dev to udl.
- drm/udl: move to embedding drm device inside udl device.
- drm/vmwgfx: fix a warning due to missing dma_parms
- riscv: Fix udelay in RV32.
- mac80211: do not start any work during reconfigure flow
- bpf, devmap: Fix premature entry free on destroying map
- NFS4: Only set creation opendata if O_CREAT
- perf pmu: Fix uncore PMU alias list for ARM64
- Documentation/admin: Remove the vsyscall=native documentation
- drivers/usb/typec/tps6598x.c: fix portinfo width
- staging: bcm2835-camera: Ensure all buffers are returned on disable
- staging: bcm2835-camera: Remove check of the number of buffers supplied
- staging: rtl8712: reduce stack usage, again
- irqchip/gic-v3-its: Fix command queue pointer comparison bug
- x86/apic: Fix integer overflow on 10 bit left shift of cpu_khz
- pinctrl: mcp23s08: Fix add_data and irqchip_add_nested call order
- x86/boot/64: Add missing fixup_pointer() for next_early_pgt access
- genirq: Delay deactivation in free_irq()
- genirq: Fix misleading synchronize_irq() documentation
- genirq: Update code comments wrt recycled thread_mask
- genirq: Synchronize only with single thread on free_irq()
- genirq: Add optional hardware synchronization for shutdown
- x86/ioapic: Implement irq_get_irqchip_state() callback
- x86/irq: Handle spurious interrupt after shutdown gracefully
- crypto: talitos - move struct talitos_edesc into talitos.h
- crypto: talitos - fix hash on SEC1.
- regmap-irq: do not write mask register if mask_base is zero
- MIPS: ath79: fix ar933x uart parity mode
- MIPS: fix build on non-linux hosts
- arm64/efi: Mark __efistub_stext_offset as an absolute symbol explicitly
- scsi: iscsi: set auth_protocol back to NULL if CHAP_A value is not supported
- dmaengine: imx-sdma: fix use-after-free on probe error path
- wil6210: fix potential out-of-bounds read
- ath10k: Do not send probe response template for mesh
- ath9k: Check for errors when reading SREV register
- ath6kl: add some bounds checking
- ath: DFS JP domain W56 fixed pulse type 3 RADAR detection
- batman-adv: fix for leaked TVLV handler.
- media: dvb: usb: fix use after free in dvb_usb_device_exit
- media: spi: IR LED: add missing of table registration
- crypto: talitos - fix skcipher failure due to wrong output IV
- media: marvell-ccic: fix DMA s/g desc number calculation
- media: vpss: fix a potential NULL pointer dereference
- media: media_device_enum_links32: clean a reserved field
- net: stmmac: dwmac1000: Clear unused address entries
- net: stmmac: dwmac4/5: Clear unused address entries
- qed: Set the doorbell address correctly
- signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig
- af_key: fix leaks in key_pol_get_resp and dump_sp.
- xfrm: Fix xfrm sel prefix length validation
- fscrypt: clean up some BUG_ON()s in block encryption/decryption
- media: mc-device.c: don't memset __user pointer contents
- media: staging: media: davinci_vpfe: - Fix for memory leak if decoder
initialization fails.
- net: phy: Check against net_device being NULL
- crypto: talitos - properly handle split ICV.
- crypto: talitos - Align SEC1 accesses to 32 bits boundaries.
- tua6100: Avoid build warnings.
- locking/lockdep: Fix merging of hlocks with non-zero references
- media: wl128x: Fix some error handling in fm_v4l2_init_video_device()
- cpupower : frequency-set -r option misses the last cpu in related cpu list
- net: stmmac: dwmac4: fix flow control issue
- net: fec: Do not use netdev messages too early
- net: axienet: Fix race condition causing TX hang
- s390/qdio: handle PENDING state for QEBSM devices
- RAS/CEC: Fix pfn insertion
- net: sfp: add mutex to prevent concurrent state checks
- ipset: Fix memory accounting for hash types on resize
- perf cs-etm: Properly set the value of 'old' and 'head' in snapshot mode
- perf tests: Add valid callback for parse-events test
- perf test 6: Fix missing kvm module load for s390
- media: fdp1: Support M3N and E3 platforms
- iommu: Fix a leak in iommu_insert_resv_region
- gpio: omap: fix lack of irqstatus_raw0 for OMAP4
- gpio: omap: ensure irq is enabled before wakeup
- regmap: fix bulk writes on paged registers
- bpf: silence warning messages in core
- rcu: Force inlining of rcu_read_lock()
- x86/cpufeatures: Add FDP_EXCPTN_ONLY and ZERO_FCS_FDS
- blkcg, writeback: dead memcgs shouldn't contribute to writeback ownership
arbitration
- xfrm: fix sa selector validation
- sched/core: Add __sched tag for io_schedule()
- x86/atomic: Fix smp_mb__{before,after}_atomic()
- perf evsel: Make perf_evsel__name() accept a NULL argument
- vhost_net: disable zerocopy by default
- ipoib: correcly show a VF hardware address
- EDAC/sysfs: Fix memory leak when creating a csrow object
- ipsec: select crypto ciphers for xfrm_algo
- ipvs: defer hook registration to avoid leaks
- media: s5p-mfc: Make additional clocks optional
- media: i2c: fix warning same module names
- ntp: Limit TAI-UTC offset
- timer_list: Guard procfs specific code
- acpi/arm64: ignore 5.1 FADTs that are reported as 5.0
- media: coda: fix mpeg2 sequence number handling
- media: coda: fix last buffer handling in V4L2_ENC_CMD_STOP
- media: coda: increment sequence offset for the last returned frame
- media: vimc: cap: check v4l2_fill_pixfmt return value
- media: hdpvr: fix locking and a missing msleep
- rtlwifi: rtl8192cu: fix error handle when usb probe failed
- mt7601u: do not schedule rx_tasklet when the device has been disconnected
- x86/build: Add 'set -e' to mkcapflags.sh to delete broken capflags.c
- mt7601u: fix possible memory leak when the device is disconnected
- ipvs: fix tinfo memory leak in start_sync_thread
- ath10k: add missing error handling
- ath10k: fix PCIE device wake up failed
- perf tools: Increase MAX_NR_CPUS and MAX_CACHES
- libata: don't request sense data on !ZAC ATA devices
- clocksource/drivers/exynos_mct: Increase priority over ARM arch timer
- rslib: Fix decoding of shortened codes
- rslib: Fix handling of of caller provided syndrome
- ixgbe: Check DDM existence in transceiver before access
- crypto: serpent - mark __serpent_setkey_sbox noinline
- crypto: asymmetric_keys - select CRYPTO_HASH where needed
- EDAC: Fix global-out-of-bounds write when setting edac_mc_poll_msec
- bcache: check c->gc_thread by IS_ERR_OR_NULL in cache_set_flush()
- net: hns3: fix a -Wformat-nonliteral compile warning
- net: hns3: add some error checking in hclge_tm module
- ath10k: destroy sdio workqueue while remove sdio module
- iwlwifi: mvm: Drop large non sta frames
- perf stat: Make metric event lookup more robust
- net: usb: asix: init MAC address buffers
- gpiolib: Fix references to gpiod_[gs]et_*value_cansleep() variants
- Bluetooth: hci_bcsp: Fix memory leak in rx_skb
- Bluetooth: 6lowpan: search for destination address in all peers
- Bluetooth: Check state in l2cap_disconnect_rsp
- gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable()
- Bluetooth: validate BLE connection interval updates
- gtp: fix suspicious RCU usage
- gtp: fix Illegal context switch in RCU read-side critical section.
- gtp: fix use-after-free in gtp_encap_destroy()
- gtp: fix use-after-free in gtp_newlink()
- net: mvmdio: defer probe of orion-mdio if a clock is not ready
- iavf: fix dereference of null rx_buffer pointer
- floppy: fix out-of-bounds read in next_valid_format
- floppy: fix invalid pointer dereference in drive_name
- xen: let alloc_xenballooned_pages() fail if not enough memory free
- scsi: NCR5380: Reduce goto statements in NCR5380_select()
- scsi: NCR5380: Always re-enable reselection interrupt
- Revert "scsi: ncr5380: Increase register polling limit"
- scsi: core: Fix race on creating sense cache
- scsi: megaraid_sas: Fix calculation of target ID
- scsi: mac_scsi: Increase PIO/PDMA transfer length threshold
- scsi: mac_scsi: Fix pseudo DMA implementation, take 2
- crypto: ghash - fix unaligned memory access in ghash_setkey()
- crypto: ccp - Validate the the error value used to index error messages
- crypto: arm64/sha1-ce - correct digest for empty data in finup
- crypto: arm64/sha2-ce - correct digest for empty data in finup
- crypto: chacha20poly1305 - fix atomic sleep when using async algorithm
- crypto: ccp - memset structure fields to zero before reuse
- crypto: ccp/gcm - use const time tag comparison.
- crypto: crypto4xx - fix a potential double free in ppc4xx_trng_probe
- Input: gtco - bounds check collection indent level
- Input: alps - don't handle ALPS cs19 trackpoint-only device
- Input: synaptics - whitelist Lenovo T580 SMBus intertouch
- Input: alps - fix a mismatch between a condition check and its comment
- regulator: s2mps11: Fix buck7 and buck8 wrong voltages
- arm64: tegra: Update Jetson TX1 GPU regulator timings
- iwlwifi: pcie: don't service an interrupt that was masked
- iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X
- NFSv4: Handle the special Linux file open access mode
- pnfs/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error
- lib/scatterlist: Fix mapping iterator when sg->offset is greater than
PAGE_SIZE
- ASoC: dapm: Adapt for debugfs API change
- ALSA: seq: Break too long mutex context in the write loop
- media: v4l2: Test type instead of cfg->type in v4l2_ctrl_new_custom()
- media: coda: Remove unbalanced and unneeded mutex unlock
- KVM: x86/vPMU: refine kvm_pmu err msg when event creation failed
- arm64: tegra: Fix AGIC register range
- fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys
inodes.
- drm/nouveau/i2c: Enable i2c pads & busses during preinit
- padata: use smp_mb in padata_reorder to avoid orphaned padata jobs
- dm zoned: fix zone state management race
- xen/events: fix binding user event channels to cpus
- 9p/xen: Add cleanup path in p9_trans_xen_init
- 9p/virtio: Add cleanup path in p9_virtio_init
- x86/boot: Fix memory leak in default_get_smp_config()
- perf/x86/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs
- perf/x86/amd/uncore: Set the thread mask for F17h L3 PMCs
- intel_th: pci: Add Ice Lake NNPI support
- PCI: Do not poll for PME if the device is in D3cold
- Btrfs: fix data loss after inode eviction, renaming it, and fsync it
- Btrfs: fix fsync not persisting dentry deletions due to inode evictions
- Btrfs: add missing inode version, ctime and mtime updates when punching hole
- HID: wacom: generic: only switch the mode on devices with LEDs
- HID: wacom: correct touch resolution x/y typo
- libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields
- coda: pass the host file in vma->vm_file on mmap
- gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM
- PCI: hv: Fix a use-after-free bug in hv_eject_device_work()
- crypto: caam - limit output IV to CBC to work around CTR mode DMA issue
- parisc: Ensure userspace privilege for ptraced processes in regset functions
- parisc: Fix kernel panic due invalid values in IAOQ0 or IAOQ1
- powerpc/32s: fix suspend/resume when IBATs 4-7 are used
- powerpc/watchpoint: Restore NV GPRs while returning from exception
- eCryptfs: fix a couple type promotion bugs
- intel_th: msu: Fix single mode with disabled IOMMU
- Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug
- usb: Handle USB3 remote wakeup for LPM enabled devices correctly
- net: mvmdio: allow up to four clocks to be specified for orion-mdio
- dt-bindings: allow up to four clocks for orion-mdio
- dm bufio: fix deadlock with loop device
- compiler.h, kasan: Avoid duplicating __read_once_size_nocheck()
- compiler.h: Add read_word_at_a_time() function.
- lib/strscpy: Shut up KASAN false-positives in strscpy()
- bnx2x: Prevent load reordering in tx completion processing
- caif-hsi: fix possible deadlock in cfhsi_exit_module()
- igmp: fix memory leak in igmpv3_del_delrec()
- ipv4: don't set IPv6 only flags to IPv4 addresses
- net: bcmgenet: use promisc for unsupported filters
- net: dsa: mv88e6xxx: wait after reset deactivation
- net: neigh: fix multiple neigh timer scheduling
- net: openvswitch: fix csum updates for MPLS actions
- nfc: fix potential illegal memory access
- rxrpc: Fix send on a connected, but unbound socket
- sky2: Disable MSI on ASUS P6T
- vrf: make sure skb->data contains ip header to make routing
- macsec: fix use-after-free of skb during RX
- macsec: fix checksumming after decryption
- netrom: fix a memory leak in nr_rx_frame()
- netrom: hold sock when setting skb->destructor
- bonding: validate ip header before check IPPROTO_IGMP
- net: make skb_dst_force return true when dst is refcounted
- tcp: fix tcp_set_congestion_control() use from bpf hook
- tcp: Reset bytes_acked and bytes_received when disconnecting
- net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling
- net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query
- net: bridge: stp: don't cache eth dest pointer before skb pull
- dma-buf: balance refcount inbalance
- dma-buf: Discard old fence_excl on retrying get_fences_rcu for realloc
- MIPS: lb60: Fix pin mappings
- ext4: don't allow any modifications to an immutable file
- ext4: enforce the immutable flag on open files
- mm: add filemap_fdatawait_range_keep_errors()
- jbd2: introduce jbd2_inode dirty range scoping
- ext4: use jbd2_inode dirty range scoping
- ext4: allow directory holes
- mm: vmscan: scan anonymous pages on file refaults
- hvsock: fix epollout hang from race condition
- drm/panel: simple: Fix panel_simple_dsi_probe
- usb: core: hub: Disable hub-initiated U1/U2
- tty: max310x: Fix invalid baudrate divisors calculator
- pinctrl: rockchip: fix leaked of_node references
- tty: serial: cpm_uart - fix init when SMC is relocated
- drm/edid: Fix a missing-check bug in drm_load_edid_firmware()
- PCI: Return error if cannot probe VF
- drm/bridge: tc358767: read display_props in get_modes()
- drm/bridge: sii902x: pixel clock unit is 10kHz instead of 1kHz
- drm/crc-debugfs: User irqsafe spinlock in drm_crtc_add_crc_entry
- memstick: Fix error cleanup path of memstick_init
- tty/serial: digicolor: Fix digicolor-usart already registered warning
- tty: serial: msm_serial: avoid system lockup condition
- serial: 8250: Fix TX interrupt handling condition
- drm/virtio: Add memory barriers for capset cache.
- phy: renesas: rcar-gen2: Fix memory leak at error paths
- powerpc/pseries/mobility: prevent cpu hotplug during DT update
- drm/rockchip: Properly adjust to a true clock in adjusted_mode
- tty: serial_core: Set port active bit in uart_port_activate
- usb: gadget: Zero ffs_io_data
- powerpc/pci/of: Fix OF flags parsing for 64bit BARs
- drm/msm: Depopulate platform on probe failure
- serial: mctrl_gpio: Check if GPIO property exisits before requesting it
- PCI: sysfs: Ignore lockdep for remove attribute
- kbuild: Add -Werror=unknown-warning-option to CLANG_FLAGS
- PCI: xilinx-nwl: Fix Multi MSI data programming
- iio: iio-utils: Fix possible incorrect mask calculation
- powerpc/xmon: Fix disabling tracing while in xmon
- recordmcount: Fix spurious mcount entries on powerpc
- mfd: core: Set fwnode for created devices
- mfd: arizona: Fix undefined behavior
- mfd: hi655x-pmic: Fix missing return value check for
devm_regmap_init_mmio_clk
- um: Silence lockdep complaint about mmap_sem
- powerpc/4xx/uic: clear pending interrupt after irq type/pol change
- RDMA/i40iw: Set queue pair state when being queried
- serial: sh-sci: Terminate TX DMA during buffer flushing
- serial: sh-sci: Fix TX DMA buffer flushing and workqueue races
- kallsyms: exclude kasan local symbols on s390
- perf test mmap-thread-lookup: Initialize variable to suppress memory
sanitizer warning
- perf session: Fix potential NULL pointer dereference found by the smatch
tool
- perf annotate: Fix dereferencing freed memory found by the smatch tool
- RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM
- PCI: dwc: pci-dra7xx: Fix compilation when !CONFIG_GPIOLIB
- powerpc/boot: add {get, put}_unaligned_be32 to xz_config.h
- f2fs: avoid out-of-range memory access
- mailbox: handle failed named mailbox channel request
- powerpc/eeh: Handle hugepages in ioremap space
- block/bio-integrity: fix a memory leak bug
- sh: prevent warnings when using iounmap
- mm/kmemleak.c: fix check for softirq context
- 9p: pass the correct prototype to read_cache_page
- mm/gup.c: mark undo_dev_pagemap as __maybe_unused
- mm/gup.c: remove some BUG_ONs from get_gate_page()
- mm/mmu_notifier: use hlist_add_head_rcu()
- locking/lockdep: Fix lock used or unused stats error
- locking/lockdep: Hide unused 'class' variable
- drm/crc: Only report a single overflow when a CRC fd is opened
- drm/crc-debugfs: Also sprinkle irqrestore over early exits
- usb: wusbcore: fix unbalanced get/put cluster_id
- usb: pci-quirks: Correct AMD PLL quirk detection
- KVM: nVMX: do not use dangling shadow VMCS after guest reset
- btrfs: inode: Don't compress if NODATASUM or NODATACOW set
- x86/sysfb_efi: Add quirks for some devices with swapped width and height
- x86/speculation/mds: Apply more accurate check on hypervisor platform
- binder: prevent transactions to context manager from its own process.
- fpga-manager: altera-ps-spi: Fix build error
- hpet: Fix division by zero in hpet_time_div()
- powerpc/xive: Fix loop exit-condition in xive_find_target_in_mask()
- powerpc/tm: Fix oops on sigreturn on systems without TM
- access: avoid the RCU grace period for the temporary subjective credentials
- batman-adv: Fix duplicated OGMs on NETDEV_UP
- net: hns3: set ops to null when unregister ad_dev
- x86/cpu: Add Ice Lake NNPI to Intel family
- qed: iWARP - Fix tc for MPA ll2 connection
- net: hns3: fix for skb leak when doing selftest
- sched/fair: Fix "runnable_avg_yN_inv" not used warnings
- x86/cacheinfo: Fix a -Wtype-limits warning
- nvme-pci: properly report state change failure in nvme_reset_work
- nvme-pci: set the errno on ctrl state change error
- arm64: Do not enable IRQs for ct_user_exit
- net: stmmac: sun8i: force select external PHY when no internal one
- bcache: check CACHE_SET_IO_DISABLE in allocator code
- bcache: check CACHE_SET_IO_DISABLE bit in bch_journal()
- bcache: acquire bch_register_lock later in cached_dev_free()
- bcache: fix potential deadlock in cached_def_free()
- perf stat: Fix group lookup for metric group
- tools: bpftool: Fix json dump crash on powerpc
- Bluetooth: Add a new 13d3:3496 QCA_ROME device
- Bluetooth: Add new 13d3:3491 QCA_ROME device
- Bluetooth: Add new 13d3:3501 QCA_ROME device
- bcache: ignore read-ahead request failure on backing device
- bcache: fix mistaken sysfs entry for io_error counter
- bcache: destroy dc->writeback_write_wq if failed to create
dc->writeback_thread
- iwlwifi: don't WARN when calling iwl_get_shared_mem_conf with RF-Kill
- iwlwifi: fix RF-Kill interrupt while FW load for gen2 devices
- ALSA: hda/realtek - Fixed Headphone Mic can't record on Dell platform
- media: videobuf2-core: Prevent size alignment wrapping buffer size to 0
- media: videobuf2-dma-sg: Prevent size from overflowing
- perf/x86/intel: Fix spurious NMI on fixed counter
- drm/edid: parse CEA blocks embedded in DisplayID
- PCI: qcom: Ensure that PERST is asserted for at least 100 ms
- IB/mlx5: Report correctly tag matching rendezvous capability
- include/asm-generic/bug.h: fix "cut here" for WARN_ON for __WARN_TAINT
architectures
- xfs: fix pagecache truncation prior to reflink
- xfs: flush removing page cache in xfs_reflink_remap_prep
- xfs: don't overflow xattr listent buffer
- xfs: don't ever put nlink > 0 inodes on the unlinked list
- xfs: fix reporting supported extra file attributes for statx()
- xfs: serialize unaligned dio writes against all other dio writes
- xfs: abort unaligned nowait directio early
- powerpc/powernv/npu: Fix reference leak
- powerpc/pseries: Fix oops in hotplug memory notifier
- mmc: sdhci-msm: fix mutex while in spinlock
- mtd: rawnand: mtk: Correct low level time calculation of r/w cycle
- blk-throttle: fix zero wait time for iops throttled group
- tcp: be more careful in tcp_fragment()
- net/mlx5e: IPoIB, Add error path in mlx5_rdma_setup_rn
- net_sched: unset TCQ_F_CAN_BYPASS when adding filters
- net: bridge: don't cache ether dest pointer on input
- net: sched: verify that q!=NULL before setting q->flags
* Line 6 POD HD500 driver fault (LP: #1790595) // Bionic update: upstream
stable patchset 2019-08-05 (LP: #1839036)
- ALSA: line6: Fix wrong altsetting for LINE6_PODHD500_1
* Bionic update: upstream stable patchset 2019-08-02 (LP: #1838824)
- rapidio: fix a NULL pointer dereference when create_workqueue() fails
- fs/fat/file.c: issue flush after the writeback of FAT
- sysctl: return -EINVAL if val violates minmax
- ipc: prevent lockup on alloc_msg and free_msg
- ARM: prevent tracing IPI_CPU_BACKTRACE
- mm/hmm: select mmu notifier when selecting HMM
- hugetlbfs: on restore reserve error path retain subpool reservation
- mem-hotplug: fix node spanned pages when we have a node with only
ZONE_MOVABLE
- mm/cma.c: fix crash on CMA allocation if bitmap allocation fails
- mm/cma.c: fix the bitmap status to show failed allocation reason
- mm/cma_debug.c: fix the break condition in cma_maxchunk_get()
- mm/slab.c: fix an infinite loop in leaks_show()
- kernel/sys.c: prctl: fix false positive in validate_prctl_map()
- thermal: rcar_gen3_thermal: disable interrupt in .remove
- drivers: thermal: tsens: Don't print error message on -EPROBE_DEFER
- mfd: tps65912-spi: Add missing of table registration
- mfd: intel-lpss: Set the device in reset state when init
- drm/nouveau/disp/dp: respect sink limits when selecting failsafe link
configuration
- mfd: twl6040: Fix device init errors for ACCCTL register
- perf/x86/intel: Allow PEBS multi-entry in watermark mode
- drm/bridge: adv7511: Fix low refresh rate selection
- objtool: Don't use ignore flag for fake jumps
- EDAC/mpc85xx: Prevent building as a module
- pwm: meson: Use the spin-lock only to protect register modifications
- ntp: Allow TAI-UTC offset to be set to zero
- f2fs: fix to avoid panic in do_recover_data()
- f2fs: fix to clear dirty inode in error path of f2fs_iget()
- f2fs: fix to avoid panic in dec_valid_block_count()
- f2fs: fix to do sanity check on valid block count of segment
- percpu: remove spurious lock dependency between percpu and sched
- configfs: fix possible use-after-free in configfs_register_group
- uml: fix a boot splat wrt use of cpu_all_mask
- mmc: mmci: Prevent polling for busy detection in IRQ context
- watchdog: imx2_wdt: Fix set_timeout for big timeout values
- watchdog: fix compile time error of pretimeout governors
- blk-mq: move cancel of requeue_work into blk_mq_release
- iommu/vt-d: Set intel_iommu_gfx_mapped correctly
- misc: pci_endpoint_test: Fix test_reg_bar to be updated in pci_endpoint_test
- nvme-pci: unquiesce admin queue on shutdown
- ALSA: hda - Register irq handler after the chip initialization
- nvmem: core: fix read buffer in place
- fuse: retrieve: cap requested size to negotiated max_write
- nfsd: allow fh_want_write to be called twice
- vfio: Fix WARNING "do not call blocking ops when !TASK_RUNNING"
- x86/PCI: Fix PCI IRQ routing table memory leak
- platform/chrome: cros_ec_proto: check for NULL transfer function
- PCI: keystone: Prevent ARM32 specific code to be compiled for ARM64
- soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher
- clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288
- soc: rockchip: Set the proper PWM for rk3288
- ARM: dts: imx51: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
- ARM: dts: imx50: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
- ARM: dts: imx53: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
- ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA
- ARM: dts: imx7d: Specify IMX7D_CLK_IPG as "ipg" clock to SDMA
- ARM: dts: imx6ul: Specify IMX6UL_CLK_IPG as "ipg" clock to SDMA
- ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA
- ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA
- PCI: rpadlpar: Fix leaked device_node references in add/remove paths
- platform/x86: intel_pmc_ipc: adding error handling
- power: supply: max14656: fix potential use-before-alloc
- PCI: rcar: Fix a potential NULL pointer dereference
- PCI: rcar: Fix 64bit MSI message address handling
- video: hgafb: fix potential NULL pointer dereference
- video: imsttfb: fix potential NULL pointer dereferences
- block, bfq: increase idling for weight-raised queues
- PCI: xilinx: Check for __get_free_pages() failure
- gpio: gpio-omap: add check for off wake capable gpios
- dmaengine: idma64: Use actual device for DMA transfers
- pwm: tiehrpwm: Update shadow register for disabling PWMs
- ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on
Arndale Octa
- pwm: Fix deadlock warning when removing PWM device
- ARM: exynos: Fix undefined instruction during Exynos5422 resume
- usb: typec: fusb302: Check vconn is off when we start toggling
- gpio: vf610: Do not share irq_chip
- percpu: do not search past bitmap when allocating an area
- drm: don't block fb changes for async plane updates
- ALSA: seq: Cover unsubscribe_port() in list_mutex
- initramfs: free initrd memory if opening /initrd.image fails
- bpf: fix undefined behavior in narrow load handling
- f2fs: fix to avoid panic in f2fs_remove_inode_page()
- f2fs: fix to use inline space only if inline_xattr is enable
- netfilter: nf_conntrack_h323: restore boundary check correctness
- mips: Make sure dt memory regions are valid
- nvmem: sunxi_sid: Support SID on A83T and H5
- nfsd: avoid uninitialized variable warning
- switchtec: Fix unintended mask of MRPC event
- net: thunderbolt: Unregister ThunderboltIP protocol handler when suspending
- i40e: Queues are reserved despite "Invalid argument" error
- net: hns3: return 0 and print warning when hit duplicate MAC
- soc: renesas: Identify R-Car M3-W ES1.1
- soc: renesas: Identify R-Car M3-W ES1.3
- [Config] updateconfigs for CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT
- drm/nouveau: add kconfig option to turn off nouveau legacy contexts. (v3)
- nouveau: Fix build with CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT disabled
- HID: wacom: Correct button numbering 2nd-gen Intuos Pro over Bluetooth
- HID: wacom: Sync INTUOSP2_BT touch state after each frame if necessary
- ALSA: oxfw: allow PCM capture for Stanton SCS.1m
- ALSA: hda/realtek - Update headset mode for ALC256
- ALSA: firewire-motu: fix destruction of data for isochronous resources
- libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk
- mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node
- fs/ocfs2: fix race in ocfs2_dentry_attach_lock()
- mm/vmscan.c: fix trying to reclaim unevictable LRU page
- signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO
- ptrace: restore smp_rmb() in __ptrace_may_access()
- media: v4l2-ioctl: clear fields in s_parm
- iommu/arm-smmu: Avoid constant zero in TLBI writes
- i2c: acorn: fix i2c warning
- bcache: fix stack corruption by PRECEDING_KEY()
- cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css()
- ASoC: cs42xx8: Add regcache mask dirty
- ASoC: fsl_asrc: Fix the issue about unsupported rate
- drm/i915/sdvo: Implement proper HDMI audio support for SDVO
- x86/uaccess, kcov: Disable stack protector
- ALSA: seq: Protect in-kernel ioctl calls with mutex
- ALSA: seq: Fix race of get-subscription call vs port-delete ioctls
- Revert "ALSA: seq: Protect in-kernel ioctl calls with mutex"
- s390/kasan: fix strncpy_from_user kasan checks
- Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var
- scsi: qedi: remove memset/memcpy to nfunc and use func instead
- scsi: qedi: remove set but not used variables 'cdev' and 'udev'
- scsi: lpfc: add check for loss of ndlp when sending RRQ
- arm64/mm: Inhibit huge-vmap with ptdump
- nvme: remove the ifdef around nvme_nvm_ioctl
- platform/x86: pmc_atom: Add Lex 3I380D industrial PC to critclk_systems DMI
table
- platform/x86: pmc_atom: Add several Beckhoff Automation boards to
critclk_systems DMI table
- scsi: bnx2fc: fix incorrect cast to u64 on shift operation
- libnvdimm: Fix compilation warnings with W=1
- selftests/timers: Add missing fflush(stdout) calls
- usbnet: ipheth: fix racing condition
- KVM: x86/pmu: do not mask the value that is written to fixed PMUs
- KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION
- drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an
invalid read
- drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define()
- usb: dwc2: Fix DMA cache alignment issues
- usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam regression)
- USB: Fix chipmunk-like voice when using Logitech C270 for recording audio.
- USB: serial: pl2303: add Allied Telesis VT-Kit3
- USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode
- USB: serial: option: add Telit 0x1260 and 0x1261 compositions
- RAS/CEC: Fix binary search function
- x86/microcode, cpuhotplug: Add a microcode loader CPU hotplug callback
- x86/kasan: Fix boot with 5-level paging and KASAN
- rtc: pcf8523: don't return invalid date when battery is low
- HID: wacom: Don't set tool type until we're in range
- HID: wacom: Don't report anything prior to the tool entering range
- HID: wacom: Send BTN_TOUCH in response to INTUOSP2_BT eraser contact
- bcache: only set BCACHE_DEV_WB_RUNNING when cached device attached
- f2fs: fix to avoid accessing xattr across the boundary
- nvme: fix srcu locking on error return in nvme_get_ns_from_disk
- nvme: merge nvme_ns_ioctl into nvme_ioctl
- nvme: release namespace SRCU protection before performing controller ioctls
- nvme: fix memory leak for power latency tolerance
- KVM: x86/pmu: mask the result of rdpmc according to the width of the
counters
- tools/kvm_stat: fix fields filter for child events
- RAS/CEC: Convert the timer callback to a workqueue
- x86/mm/KASLR: Compute the size of the vmemmap section properly
- ax25: fix inconsistent lock state in ax25_destroy_timer
- be2net: Fix number of Rx queues used for flow hashing
- ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero
- lapb: fixed leak of control-blocks.
- neigh: fix use-after-free read in pneigh_get_next
- net: openvswitch: do not free vport if register_netdevice() is failed.
- sctp: Free cookie before we memdup a new one
- sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg
- Staging: vc04_services: Fix a couple error codes
- perf/x86/intel/ds: Fix EVENT vs. UEVENT PEBS constraints
- netfilter: nf_queue: fix reinject verdict handling
- ipvs: Fix use-after-free in ip_vs_in
- selftests: netfilter: missing error check when setting up veth interface
- clk: ti: clkctrl: Fix clkdm_clk handling
- powerpc/powernv: Return for invalid IMC domain
- mISDN: make sure device name is NUL terminated
- x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor
- perf/ring_buffer: Fix exposing a temporarily decreased data_head
- perf/ring_buffer: Add ordering to rb->nest increment
- perf/ring-buffer: Always use {READ,WRITE}_ONCE() for rb->user_page data
- gpio: fix gpio-adp5588 build errors
- net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE()
- net: aquantia: fix LRO with FCS error
- i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr
- ALSA: hda - Force polling mode on CNL for fixing codec communication
- configfs: Fix use-after-free when accessing sd->s_dentry
- perf data: Fix 'strncat may truncate' build failure with recent gcc
- perf record: Fix s390 missing module symbol and warning for non-root users
- ia64: fix build errors by exporting paddr_to_nid()
- KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list
- KVM: PPC: Book3S HV: Don't take kvm->lock around kvm_for_each_vcpu
- net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs
- net: phy: dp83867: Set up RGMII TX delay
- scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route()
- scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask
- scsi: scsi_dh_alua: Fix possible null-ptr-deref
- scsi: libsas: delete sas port if expander discover failed
- mlxsw: spectrum: Prevent force of 56G
- coredump: fix race condition between collapse_huge_page() and core dumping
- infiniband: fix race condition between infiniband mlx4, mlx5 driver and core
dumping
- Abort file_remove_privs() for non-reg. files
- tipc: purge deferredq list for each grp member in tipc_group_delete
- vsock/virtio: set SOCK_DONE on peer shutdown
- usb: xhci: Fix a potential null pointer dereference in
xhci_debugfs_create_endpoint()
- ACPI/PCI: PM: Add missing wakeup.flags.valid checks
- drm/etnaviv: lock MMU while dumping core
- net: aquantia: tx clean budget logic error
- perf namespace: Protect reading thread's namespace
- xen/pvcalls: Remove set but not used variable
- xen: xenbus: Catch closing of non existent transactions
- xen: xenbus_dev_frontend: Verify body of XS_TRANSACTION_END
- xenbus: Avoid deadlock during suspend due to open transactions
- tracing: Silence GCC 9 array bounds warning
- objtool: Support per-function rodata sections
- gcc-9: silence 'address-of-packed-member' warning
- net: phy: broadcom: Use strlcpy() for ethtool::get_strings
- mmc: core: Prevent processing SDIO IRQs when the card is suspended
- scsi: ufs: Avoid runtime suspend possibly being blocked forever
- usb: chipidea: udc: workaround for endpoint conflict issue
- IB/hfi1: Silence txreq allocation warnings
- Input: synaptics - enable SMBus on ThinkPad E480 and E580
- Input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD
- apparmor: enforce nullbyte at end of tag string
- ARC: fix build warnings
- ARC: [plat-hsdk]: Add missing multicast filter bins number to GMAC node
- ARC: [plat-hsdk]: Add missing FIFO size entry in GMAC node
- parport: Fix mem leak in parport_register_dev_model
- parisc: Fix compiler warnings in float emulation code
- IB/rdmavt: Fix alloc_qpn() WARN_ON()
- IB/hfi1: Insure freeze_work work_struct is canceled on shutdown
- IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value
- IB/hfi1: Validate page aligned for a given virtual address
- MIPS: uprobes: remove set but not used variable 'epc'
- xtensa: Fix section mismatch between memblock_reserve and mem_reserve
- net: dsa: mv88e6xxx: avoid error message on remove from VLAN 0
- net: hns: Fix loopback test failed at copper ports
- mdesc: fix a missing-check bug in get_vdev_port_node_info()
- sparc: perf: fix updated event period in response to PERF_EVENT_IOC_PERIOD
- net: ethernet: mediatek: Use hw_feature to judge if HWLRO is supported
- net: ethernet: mediatek: Use NET_IP_ALIGN to judge if HW RX_2BYTE_OFFSET is
enabled
- drm/arm/hdlcd: Actually validate CRTC modes
- drm/arm/hdlcd: Allow a bit of clock tolerance
- scripts/checkstack.pl: Fix arm64 wrong or unknown architecture
- scsi: ufs: Check that space was properly alloced in copy_query_response
- scsi: smartpqi: unlock on error in pqi_submit_raid_request_synchronous()
- net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set
- s390/qeth: fix VLAN attribute in bridge_hostnotify udev event
- hwmon: (core) add thermal sensors only if dev->of_node is present
- hwmon: (pmbus/core) Treat parameters as paged if on multiple pages
- nvme: Fix u32 overflow in the number of namespace list calculation
- btrfs: start readahead also in seed devices
- can: flexcan: fix timeout when set small bitrate
- can: purge socket error queue on sock destruct
- powerpc/bpf: use unsigned division instruction for 64-bit operations
- ARM: imx: cpuidle-imx6sx: Restrict the SW2ISO increase to i.MX6SX
- ARM: dts: am57xx-idk: Remove support for voltage switching for SD card
- Bluetooth: Align minimum encryption key size for LE and BR/EDR connections
- Bluetooth: Fix regression with minimum encryption key size alignment
- SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write
- cfg80211: fix memory leak of wiphy device name
- mac80211: drop robust management frames from unknown TA
- mac80211: handle deauthentication/disassociation from TDLS peer
- mac80211: Do not use stack memory with scatterlist for GMAC
- s390/jump_label: Use "jdd" constraint on gcc9
- s390/ap: rework assembler functions to use unions for in/out register
variables
- mmc: core: API to temporarily disable retuning for SDIO CRC errors
- mmc: core: Add sdio_retune_hold_now() and sdio_retune_release()
- Input: silead - add MSSL0017 to acpi_device_id
- selftests: vm: install test_vmalloc.sh for run_vmtests
- arm64: Silence gcc warnings about arch ABI drift
- riscv: mm: synchronize MMU after pte change
- arm64/sve: <uapi/asm/ptrace.h> should not depend on <uapi/linux/prctl.h>
- drm/vmwgfx: Use the backdoor port if the HB port is not available
- {nl,mac}80211: allow 4addr AP operation on crypto controlled devices
- perf ui helpline: Use strlcpy() as a shorter form of strncpy() + explicit
set nul
- perf help: Remove needless use of strncpy()
- perf header: Fix unchecked usage of strncpy()
- IB/hfi1: Close PSM sdma_progress sleep window
- 9p/xen: fix check for xenbus_read error in front_probe
- 9p/rdma: do not disconnect on down_interruptible EAGAIN
- 9p: acl: fix uninitialized iattr access
- 9p/rdma: remove useless check in cm_event_handler
- 9p: p9dirent_read: check network-provided name length
- net/9p: include trans_common.h to fix missing prototype warning.
- qmi_wwan: Fix out-of-bounds read
- fs/proc/array.c: allow reporting eip/esp for all coredumping threads
- mm/mempolicy.c: fix an incorrect rebind node in mpol_rebind_nodemask
- fs/binfmt_flat.c: make load_flat_shared_library() work
- dm log writes: make sure super sector log updates are written in order
- scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck()
- x86/speculation: Allow guests to use SSBD even if host does not
- x86/microcode: Fix the microcode load on CPU hotplug for real
- NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O
- cpu/speculation: Warn on unsupported mitigations= parameter
- eeprom: at24: fix unexpected timeout under high load
- af_packet: Block execution of tasks waiting for transmit to complete in
AF_PACKET
- ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while loop
- net/packet: fix memory leak in packet_set_ring()
- net: remove duplicate fetch in sock_getsockopt
- net: stmmac: fixed new system time seconds value calculation
- sctp: change to hold sk after auth shkey is created successfully
- tipc: change to use register_pernet_device
- tipc: check msg->req data len in tipc_nl_compat_bearer_disable
- tun: wake up waitqueues after IFF_UP is set
- team: Always enable vlan tx offload
- bonding: Always enable vlan tx offload
- bpf: udp: Avoid calling reuseport's bpf_prog from udp_gro
- bpf: udp: ipv6: Avoid running reuseport's bpf_prog from __udp6_lib_err
- arm64: futex: Avoid copying out uninitialised stack in failed cmpxchg()
- bpf, arm64: use more scalable stadd over ldxr / stxr loop in xadd
- futex: Update comments and docs about return values of arch futex code
- tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
- arm64: insn: Fix ldadd instruction encoding
- arm64: Don't unconditionally add -Wno-psabi to KBUILD_CFLAGS
- irqchip/mips-gic: Use the correct local interrupt map registers
- Bluetooth: Fix faulty expression for minimum encryption key size check
- ASoC : cs4265 : readable register too low
- ASoC: soc-pcm: BE dai needs prepare when pause release after resume
- spi: bitbang: Fix NULL pointer dereference in spi_unregister_master
- drm/mediatek: fix unbind functions
- drm/mediatek: call drm_atomic_helper_shutdown() when unbinding driver
- drm/mediatek: call mtk_dsi_stop() after mtk_drm_crtc_atomic_disable()
- ASoC: max98090: remove 24-bit format support if RJ is 0
- ASoC: sun4i-i2s: Fix sun8i tx channel offset mask
- ASoC: sun4i-i2s: Add offset to RX channel select
- usb: gadget: fusb300_udc: Fix memory leak of fusb300->ep[i]
- usb: gadget: udc: lpc32xx: allocate descriptor with GFP_ATOMIC
- SoC: rt274: Fix internal jack assignment in set_jack callback
- scsi: hpsa: correct ioaccel2 chaining
- platform/x86: mlx-platform: Fix parent device in i2c-mux-reg device
registration
- cpuset: restore sanity to cpuset_cpus_allowed_fallback()
- scripts/decode_stacktrace.sh: prefix addr2line with $CROSS_COMPILE
- mm/mlock.c: change count_mm_mlocked_page_nr return type
- module: Fix livepatch/ftrace module text permissions race
- ftrace: Fix NULL pointer dereference in free_ftrace_func_mapper()
- MIPS: netlogic: xlr: Remove erroneous check in nlm_fmn_send()
- drm/i915/dmc: protect against reading random memory
- crypto: user - prevent operating on larval algorithms
- crypto: cryptd - Fix skcipher instance memory leak
- ALSA: seq: fix incorrect order of dest_client/dest_ports arguments
- ALSA: firewire-lib/fireworks: fix miss detection of received MIDI messages
- ALSA: line6: Fix write on zero-sized buffer
- ALSA: usb-audio: fix sign unintended sign extension on left shifts
- ALSA: hda/realtek - Change front mic location for Lenovo M710q
- lib/mpi: Fix karactx leak in mpi_powm
- tracing/snapshot: Resize spare buffer if size changed
- arm64: kaslr: keep modules inside module region when KASAN is enabled
- drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
- drm/imx: notify drm core before sending event during crtc disable
- drm/imx: only send event on crtc disable if kept disabled
- ftrace/x86: Remove possible deadlock between register_kprobe() and
ftrace_run_update_code()
- mm/vmscan.c: prevent useless kswapd loops
- btrfs: Ensure replaced device doesn't have pending chunk allocation
- vhost-net: set packet weight of tx polling to 2 * vq size
- vhost_net: use packet weight for rx handler, too
- vhost_net: introduce vhost_exceeds_weight()
- vhost: introduce vhost_exceeds_weight()
- vhost_net: fix possible infinite loop
- vhost: vsock: add weight support
- vhost: scsi: add weight support
- tty: rocket: fix incorrect forward declaration of 'rp_init()'
- KVM: x86: degrade WARN to pr_warn_ratelimited
- KVM: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC
- svcrdma: Ignore source port when computing DRC hash
- MIPS: Fix bounds check virt_addr_valid
- MIPS: Add missing EHB in mtc0 -> mfc0 sequence.
- dmaengine: imx-sdma: remove BD_INTR for channel0
- drm/mediatek: unbind components in mtk_drm_unbind()
- drm/mediatek: clear num_pipes when unbind driver
- x86/CPU: Add more Icelake model numbers
- platform/x86: asus-wmi: Only Tell EC the OS will handle display hotkeys from
asus_nb_wmi
- platform/x86: intel-vbtn: Report switch events when event wakes device
- i2c: pca-platform: Fix GPIO lookup code
- ALSA: hda/realtek: Add quirks for several Clevo notebook barebones
- ARM: dts: armada-xp-98dx3236: Switch to armada-38x-uart serial node
- drm/amd/powerplay: use hardware fan control if no powerplay fan table
- drm/etnaviv: add missing failure path to destroy suballoc
- mlxsw: spectrum: Handle VLAN device unlinking
- media: s5p-mfc: fix incorrect bus assignment in virtual child device
- net: hns: Fixes the missing put_device in positive leg for roce reset
- ALSA: hda: Initialize power_state field properly
- rds: Fix warning.
- ip6: fix skb leak in ip6frag_expire_frag_queue()
- netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments
- sc16is7xx: move label 'err_spi' to correct section
- netfilter: ipv6: nf_defrag: accept duplicate fragments again
- nfsd: Fix overflow causing non-working mounts on 1 TB machines
- MIPS: have "plain" make calls build dtbs for selected platforms
- dmaengine: qcom: bam_dma: Fix completed descriptors count
* Bionic update: upstream stable patchset 2019-08-01 (LP: #1838700)
- x86: Hide the int3_emulate_call/jmp functions from UML
- ext4: do not delete unlinked inode from orphan list on failed truncate
- f2fs: Fix use of number of devices
- KVM: x86: fix return value for reserved EFER
- bio: fix improper use of smp_mb__before_atomic()
- sbitmap: fix improper use of smp_mb__before_atomic()
- Revert "scsi: sd: Keep disk read-only when re-reading partition"
- crypto: vmx - CTR: always increment IV as quadword
- mmc: sdhci-iproc: cygnus: Set NO_HISPD bit to fix HS50 data hold time
problem
- mmc: sdhci-iproc: Set NO_HISPD bit to fix HS50 data hold time problem
- kvm: svm/avic: fix off-by-one in checking host APIC ID
- libnvdimm/pmem: Bypass CONFIG_HARDENED_USERCOPY overhead
- arm64/iommu: handle non-remapped addresses in ->mmap and ->get_sgtable
- gfs2: Fix sign extension bug in gfs2_update_stats
- Btrfs: do not abort transaction at btrfs_update_root() after failure to COW
path
- Btrfs: avoid fallback to transaction commit during fsync of files with holes
- Btrfs: fix race between ranged fsync and writeback of adjacent ranges
- btrfs: sysfs: Fix error path kobject memory leak
- btrfs: sysfs: don't leak memory when failing add fsid
- fbdev: fix divide error in fb_var_to_videomode
- btrfs: honor path->skip_locking in backref code
- fbdev: fix WARNING in __alloc_pages_nodemask bug
- media: cpia2: Fix use-after-free in cpia2_exit
- media: serial_ir: Fix use-after-free in serial_ir_init_module
- media: vivid: use vfree() instead of kfree() for dev->bitmap_cap
- ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit
- bpf: devmap: fix use-after-free Read in __dev_map_entry_free
- batman-adv: mcast: fix multicast tt/tvlv worker locking
- at76c50x-usb: Don't register led_trigger if usb_register_driver failed
- net: erspan: fix use-after-free
- gfs2: Fix lru_count going negative
- cxgb4: Fix error path in cxgb4_init_module
- NFS: make nfs_match_client killable
- IB/hfi1: Fix WQ_MEM_RECLAIM warning
- gfs2: Fix occasional glock use-after-free
- mmc: core: Verify SD bus width
- tools/bpf: fix perf build error with uClibc (seen on ARC)
- dmaengine: tegra210-dma: free dma controller in remove()
- net: ena: gcc 8: fix compilation warning
- pinctrl: zte: fix leaked of_node references
- ASoC: hdmi-codec: unlock the device on startup errors
- powerpc/perf: Return accordingly on invalid chip-id in
- powerpc/boot: Fix missing check of lseek() return value
- ASoC: imx: fix fiq dependencies
- spi: pxa2xx: fix SCR (divisor) calculation
- brcm80211: potential NULL dereference in
brcmf_cfg80211_vndr_cmds_dcmd_handler()
- ACPI / property: fix handling of data_nodes in acpi_get_next_subnode()
- ARM: vdso: Remove dependency with the arch_timer driver internals
- arm64: Fix compiler warning from pte_unmap() with -Wunused-but-set-variable
- sched/cpufreq: Fix kobject memleak
- scsi: qla2xxx: Fix a qla24xx_enable_msix() error path
- scsi: qla2xxx: Fix abort handling in tcm_qla2xxx_write_pending()
- scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in
tcm_qla2xxx_close_session()
- Btrfs: fix data bytes_may_use underflow with fallocate due to failed quota
reserve
- btrfs: fix panic during relocation after ENOSPC before writeback happens
- btrfs: Don't panic when we can't find a root key
- iwlwifi: pcie: don't crash on invalid RX interrupt
- rtc: 88pm860x: prevent use-after-free on device remove
- scsi: qedi: Abort ep termination if offload not scheduled
- w1: fix the resume command API
- dmaengine: pl330: _stop: clear interrupt status
- mac80211/cfg80211: update bss channel on channel switch
- libbpf: fix samples/bpf build failure due to undefined UINT32_MAX
- ASoC: fsl_sai: Update is_slave_mode with correct value
- mwifiex: prevent an array overflow
- net: cw1200: fix a NULL pointer dereference
- crypto: sun4i-ss - Fix invalid calculation of hash end
- bcache: return error immediately in bch_journal_replay()
- bcache: fix failure in journal relplay
- bcache: add failure check to run_cache_set() for journal replay
- bcache: avoid clang -Wunintialized warning
- vfio-ccw: Do not call flush_workqueue while holding the spinlock
- vfio-ccw: Release any channel program when releasing/removing vfio-ccw mdev
- smpboot: Place the __percpu annotation correctly
- x86/mm: Remove in_nmi() warning from 64-bit implementation of
vmalloc_fault()
- mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC
versions
- HID: logitech-hidpp: use RAP instead of FAP to get the protocol version
- pinctrl: pistachio: fix leaked of_node references
- pinctrl: samsung: fix leaked of_node references
- clk: rockchip: undo several noc and special clocks as critical on rk3288
- dmaengine: at_xdmac: remove BUG_ON macro in tasklet
- media: coda: clear error return value before picture run
- media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper
- media: au0828: stop video streaming only when last user stops
- media: ov2659: make S_FMT succeed even if requested format doesn't match
- audit: fix a memory leak bug
- media: stm32-dcmi: fix crash when subdev do not expose any formats
- media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable()
- media: pvrusb2: Prevent a buffer overflow
- powerpc/64: Fix booting large kernels with STRICT_KERNEL_RWX
- random: add a spinlock_t to struct batched_entropy
- cgroup: protect cgroup->nr_(dying_)descendants by css_set_lock
- sched/core: Check quota and period overflow at usec to nsec conversion
- sched/rt: Check integer overflow at usec to nsec conversion
- sched/core: Handle overflow in cpu_shares_write_u64
- drm/msm: a5xx: fix possible object reference leak
- USB: core: Don't unbind interfaces following device reset failure
- x86/irq/64: Limit IST stack overflow check to #DB stack
- phy: sun4i-usb: Make sure to disable PHY0 passby for peripheral mode
- i40e: Able to add up to 16 MAC filters on an untrusted VF
- i40e: don't allow changes to HW VLAN stripping on active port VLANs
- arm64: vdso: Fix clock_getres() for CLOCK_REALTIME
- RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure
- hwmon: (vt1211) Use request_muxed_region for Super-IO accesses
- hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses
- hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses
- hwmon: (pc87427) Use request_muxed_region for Super-IO accesses
- hwmon: (f71805f) Use request_muxed_region for Super-IO accesses
- scsi: libsas: Do discovery on empty PHY to update PHY info
- mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers
- mmc_spi: add a status check for spi_sync_locked
- mmc: sdhci-of-esdhc: add erratum eSDHC5 support
- mmc: sdhci-of-esdhc: add erratum A-009204 support
- mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
- drm/amdgpu: fix old fence check in amdgpu_fence_emit
- PM / core: Propagate dev->power.wakeup_path when no callbacks
- clk: rockchip: Fix video codec clocks on rk3288
- extcon: arizona: Disable mic detect if running when driver is removed
- clk: rockchip: Make rkpwm a critical clock on rk3288
- s390: zcrypt: initialize variables before_use
- x86/microcode: Fix the ancient deprecated microcode loading method
- s390: cio: fix cio_irb declaration
- cpufreq: ppc_cbe: fix possible object reference leak
- cpufreq/pasemi: fix possible object reference leak
- cpufreq: pmac32: fix possible object reference leak
- cpufreq: kirkwood: fix possible object reference leak
- block: sed-opal: fix IOC_OPAL_ENABLE_DISABLE_MBR
- x86/build: Keep local relocations with ld.lld
- iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion
- iio: hmc5843: fix potential NULL pointer dereferences
- iio: common: ssp_sensors: Initialize calculated_time in
ssp_common_process_data
- rtlwifi: fix a potential NULL pointer dereference
- mwifiex: Fix mem leak in mwifiex_tm_cmd
- brcmfmac: fix missing checks for kmemdup
- b43: shut up clang -Wuninitialized variable warning
- brcmfmac: convert dev_init_lock mutex to completion
- brcmfmac: fix WARNING during USB disconnect in case of unempty psq
- brcmfmac: fix race during disconnect when USB completion is in progress
- brcmfmac: fix Oops when bringing up interface during USB disconnect
- rtc: xgene: fix possible race condition
- rtlwifi: fix potential NULL pointer dereference
- scsi: ufs: Fix regulator load and icc-level configuration
- scsi: ufs: Avoid configuring regulator with undefined voltage range
- arm64: cpu_ops: fix a leaked reference by adding missing of_node_put
- x86/uaccess, signal: Fix AC=1 bloat
- x86/ia32: Fix ia32_restore_sigcontext() AC leak
- chardev: add additional check for minor range overlap
- RDMA/hns: Fix bad endianess of port_pd variable
- HID: core: move Usage Page concatenation to Main item
- ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put
- ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put
- cxgb3/l2t: Fix undefined behaviour
- HID: logitech-hidpp: change low battery level threshold from 31 to 30
percent
- spi: tegra114: reset controller on probe
- kobject: Don't trigger kobject_uevent(KOBJ_REMOVE) twice.
- media: video-mux: fix null pointer dereferences
- media: wl128x: prevent two potential buffer overflows
- scsi: qedf: Add missing return in qedf_post_io_req() in the fcport offload
check
- virtio_console: initialize vtermno value for ports
- tty: ipwireless: fix missing checks for ioremap
- x86/mce: Fix machine_check_poll() tests for error types
- rcutorture: Fix cleanup path for invalid torture_type strings
- rcuperf: Fix cleanup path for invalid perf_type strings
- usb: core: Add PM runtime calls to usb_hcd_platform_shutdown
- scsi: qla4xxx: avoid freeing unallocated dma memory
- batman-adv: allow updating DAT entry timeouts on incoming ARP Replies
- dmaengine: tegra210-adma: use devm_clk_*() helpers
- hwrng: omap - Set default quality
- thunderbolt: Fix to check for kmemdup failure
- media: m88ds3103: serialize reset messages in m88ds3103_set_frontend
- media: vimc: stream: fix thread state before sleep
- media: go7007: avoid clang frame overflow warning with KASAN
- media: vimc: zero the media_device on probe
- scsi: lpfc: Fix FDMI manufacturer attribute value
- scsi: lpfc: Fix fc4type information for FDMI
- media: saa7146: avoid high stack usage with clang
- scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices
- spi : spi-topcliff-pch: Fix to handle empty DMA buffers
- spi: rspi: Fix sequencer reset during initialization
- spi: Fix zero length xfer bug
- ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM
- drm/drv: Hold ref on parent device during drm_device lifetime
- drm: Wake up next in drm_read() chain if we are forced to putback the event
- vfio-ccw: Prevent quiesce function going into an infinite loop
- NFS: Fix a double unlock from nfs_match,get_client
- ext4: wait for outstanding dio during truncate in nojournal mode
- NFSv4.1 fix incorrect return value in copy_file_range
- media: vb2: add waiting_in_dqbuf flag
- acct_on(): don't mess with freeze protection
- hv_netvsc: fix race that may miss tx queue wakeup
- Bluetooth: Ignore CC events not matching the last HCI command
- powerpc/perf: Fix loop exit condition in nest_imc_event_init
- drm/nouveau/bar/nv50: ensure BAR is mapped
- media: stm32-dcmi: return appropriate error codes during probe
- powerpc/watchdog: Use hrtimers for per-CPU heartbeat
- scsi: qla2xxx: Fix hardirq-unsafe locking
- x86/modules: Avoid breaking W^X while loading modules
- sched/nohz: Run NOHZ idle load balancer on HK_FLAG_MISC CPUs
- s390: qeth: address type mismatch warning
- rsi: Fix NULL pointer dereference in kmalloc
- nvme: set 0 capacity if namespace block size exceeds PAGE_SIZE
- bcache: avoid potential memleak of list of journal_replay(s) in the
CACHE_SYNC branch of run_cache_set
- RDMA/cma: Consider scope_id while binding to ipv6 ll address
- block: fix use-after-free on gendisk
- staging: vc04_services: handle kzalloc failure
- irq_work: Do not raise an IPI when queueing work on the local CPU
- thunderbolt: Take domain lock in switch sysfs attribute callbacks
- drm: etnaviv: avoid DMA API warning when importing buffers
- ACPI/IORT: Reject platform device creation on NUMA node mapping failure
- perf/x86/msr: Add Icelake support
- perf/x86/intel/rapl: Add Icelake support
- perf/x86/intel/cstate: Add Icelake support
- drm/panel: otm8009a: Add delay at the end of initialization
- thunderbolt: property: Fix a missing check of kzalloc
- thunderbolt: Fix to check the return value of kmemdup
- x86/mce: Handle varying MCA bank counts
- scsi: lpfc: avoid uninitialized variable warning
- thunderbolt: Fix to check return value of ida_simple_get
- drm/amd/display: fix releasing planes when exiting odm
- thunderbolt: property: Fix a NULL pointer dereference
- e1000e: Disable runtime PM on CNP+
- igb: Exclude device from suspend direct complete optimization
- media: si2165: fix a missing check of return value
- drm/amd/display: Fix Divide by 0 in memory calculations
- spi: imx: stop buffer overflow in RX FIFO flush
- bonding/802.3ad: fix slave link initialization transition states
- cxgb4: offload VLAN flows regardless of VLAN ethtype
- inet: switch IP ID generator to siphash
- ipv4/igmp: fix another memory leak in igmpv3_del_delrec()
- ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST
- ipv6: Consider sk_bound_dev_if when binding a raw socket to an address
- llc: fix skb leak in llc_build_and_send_ui_pkt()
- net: dsa: mv88e6xxx: fix handling of upper half of STATS_TYPE_PORT
- net: fec: fix the clk mismatch in failed_reset path
- net-gro: fix use-after-free read in napi_gro_frags()
- net: mvneta: Fix err code path of probe
- net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value
- net: phy: marvell10g: report if the PHY fails to boot firmware
- net: stmmac: fix reset gpio free missing
- usbnet: fix kernel crash after disconnect
- tipc: Avoid copying bytes beyond the supplied data
- net/mlx5: Allocate root ns memory using kzalloc to match kfree
- bnxt_en: Fix aggregation buffer leak under OOM condition.
- crypto: vmx - ghash: do nosimd fallback manually
- include/linux/compiler*.h: define asm_volatile_goto
- compiler.h: give up __compiletime_assert_fallback()
- xen/pciback: Don't disable PCI_COMMAND on PCI device reset.
- tipc: fix modprobe tipc failed after switch order of device registration
- sparc64: Fix regression in non-hypervisor TLB flush xcall
- include/linux/bitops.h: sanitize rotate primitives
- xhci: update bounce buffer with correct sg num
- xhci: Use %zu for printing size_t type
- xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic()
- usb: xhci: avoid null pointer deref when bos field is NULL
- usbip: usbip_host: fix BUG: sleeping function called from invalid context
- usbip: usbip_host: fix stub_dev lock context imbalance regression
- USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
- USB: sisusbvga: fix oops in error path of sisusb_probe
- USB: Add LPM quirk for Surface Dock GigE adapter
- USB: rio500: refuse more than one device at a time
- USB: rio500: fix memory leak in close after disconnect
- media: usb: siano: Fix general protection fault in smsusb
- media: usb: siano: Fix false-positive "uninitialized variable" warning
- media: smsusb: better handle optional alignment
- scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove
- scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs)
- Btrfs: fix wrong ctime and mtime of a directory after log replay
- Btrfs: fix race updating log root item during fsync
- Btrfs: fix fsync not persisting changed attributes of a directory
- Btrfs: incremental send, fix file corruption when no-holes feature is
enabled
- KVM: PPC: Book3S HV: XIVE: Do not clear IRQ data of passthrough interrupts
- powerpc/perf: Fix MMCRA corruption by bhrb_filter
- ALSA: hda/realtek - Set default power save node to 0
- KVM: s390: Do not report unusabled IDs via KVM_CAP_MAX_VCPU_ID
- drm/nouveau/i2c: Disable i2c bus access after ->fini()
- tty: serial: msm_serial: Fix XON/XOFF
- tty: max310x: Fix external crystal register setup
- memcg: make it work on sparse non-0-node systems
- kernel/signal.c: trace_signal_deliver when signal_group_exit
- docs: Fix conf.py for Sphinx 2.0
- doc: Cope with the deprecation of AutoReporter
- doc: Cope with Sphinx logging deprecations
- ima: show rules with IMA_INMASK correctly
- serial: sh-sci: disable DMA for uart_console
- staging: vc04_services: prevent integer overflow in create_pagelist()
- staging: wlan-ng: fix adapter initialization failure
- CIFS: cifs_read_allocate_pages: don't iterate through whole page array on
ENOMEM
- gcc-plugins: Fix build failures under Darwin host
- drm/vmwgfx: Don't send drm sysfs hotplug events on initial master set
- drm/rockchip: shutdown drm subsystem on shutdown
- Compiler Attributes: add support for __copy (gcc >= 9)
- include/linux/module.h: copy __init/__exit attrs to init/cleanup_module
- binder: fix race between munmap() and direct reclaim
- media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
- brcmfmac: fix NULL pointer derefence during USB disconnect
- iio: dac: ds4422/ds4424 fix chip verification
- s390/crypto: fix possible sleep during spinlock aquired
- ALSA: line6: Assure canceling delayed work at disconnection
- vt/fbcon: deinitialize resources in visual_init() after failed memory
allocation
- cifs: fix memory leak of pneg_inbuf on -EOPNOTSUPP ioctl case
- x86/ftrace: Do not call function graph from dynamic trampolines
- x86/ftrace: Set trampoline pages as executable
- x86/kprobes: Set instruction page as executable
- of: overlay: validate overlay properties #address-cells and #size-cells
- of: overlay: set node fields from properties when add new overlay node
- ethtool: fix potential userspace buffer overflow
- Fix memory leak in sctp_process_init
- neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit
- net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query
- net: rds: fix memory leak in rds_ib_flush_mr_pool
- pktgen: do not sleep with the thread lock held.
- ipv6: fix EFAULT on sendto with icmpv6 and hdrincl
- ipv6: use READ_ONCE() for inet->hdrincl as in ipv4
- net: sfp: read eeprom in maximum 16 byte increments
- ipv6: fix the check before getting the cookie in rt6_get_cookie
- rcu: locking and unlocking need to always be at least barriers
- parisc: Use implicit space register selection for loading the coherence
index of I/O pdirs
- fuse: fallocate: fix return with locked inode
- pstore: Remove needless lock during console writes
- pstore: Convert buf_lock to semaphore
- pstore/ram: Run without kernel crash dump region
- x86/power: Fix 'nosmt' vs hibernation triple fault during resume
- i2c: xiic: Add max_read_len quirk
- MIPS: Bounds check virt_addr_valid
- MIPS: pistachio: Build uImage.gz by default
- genwqe: Prevent an integer overflow in the ioctl
- test_firmware: Use correct snprintf() limit
- drm/gma500/cdv: Check vbt config bits when detecting lvds panels
- drm/amdgpu/psp: move psp version specific function pointers to early_init
- drm/i915: Fix I915_EXEC_RING_MASK
- drm/i915/fbc: disable framebuffer compression on GeminiLake
- TTY: serial_core, add ->install
- qmi_wwan: Add quirk for Quectel dynamic config
- ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled
- ethtool: check the return value of get_regs_len
- net: ethernet: ti: cpsw_ethtool: fix ethtool ring param set
- net: mvpp2: Use strscpy to handle stat strings
- packet: unconditionally free po->rollover
- NFSv4.1: Again fix a race where CB_NOTIFY_LOCK fails to wake a waiter
- NFSv4.1: Fix bug only first CB_NOTIFY_LOCK is handled
- s390/mm: fix address space detection in exception handling
- drm/msm: fix fb references in async update
- drm: add non-desktop quirk for Valve HMDs
- drm: add non-desktop quirks to Sensics and OSVR headsets.
- drm/amdgpu: remove ATPX_DGPU_REQ_POWER_FOR_DISPLAYS check when hotplug-in
* CVE-2019-14283
- floppy: fix out-of-bounds read in copy_buffer
* CVE-2019-14284
- floppy: fix div-by-zero in setup_format_params
* Bionic linux 4.15.0-56.62 fails to build with CONFIG_NVM disabled
(LP: #1838533)
- Revert "nvme: warn when finding multi-port subsystems without multipathing
enabled"
* Bionic update: upstream stable patchset 2019-07-31 (LP: #1838576)
- netfilter: compat: initialize all fields in xt_init
- platform/x86: sony-laptop: Fix unintentional fall-through
- platform/x86: thinkpad_acpi: Disable Bluetooth for some machines
- hwmon: (pwm-fan) Disable PWM if fetching cooling data fails
- kernfs: fix barrier usage in __kernfs_new_node()
- USB: serial: fix unthrottle races
- iio: adc: xilinx: fix potential use-after-free on remove
- libnvdimm/namespace: Fix a potential NULL pointer dereference
- HID: input: add mapping for Expose/Overview key
- HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys
- HID: input: add mapping for "Toggle Display" key
- libnvdimm/btt: Fix a kmemdup failure check
- s390/dasd: Fix capacity calculation for large volumes
- mac80211: fix unaligned access in mesh table hash function
- mac80211: Increase MAX_MSG_LEN
- mac80211: fix memory accounting with A-MSDU aggregation
- nl80211: Add NL80211_FLAG_CLEAR_SKB flag for other NL commands
- s390/3270: fix lockdep false positive on view->lock
- clocksource/drivers/oxnas: Fix OX820 compatible
- mISDN: Check address length before reading address family
- s390/pkey: add one more argument space for debug feature entry
- x86/reboot, efi: Use EFI reboot for Acer TravelMate X514-51T
- KVM: fix spectrev1 gadgets
- KVM: x86: avoid misreporting level-triggered irqs as edge-triggered in
tracing
- tools lib traceevent: Fix missing equality check for strcmp
- mm: fix inactive list balancing between NUMA nodes and cgroups
- init: initialize jump labels before command line option parsing
- selftests: netfilter: check icmp pkttoobig errors are set as related
- ipvs: do not schedule icmp errors from tunnels
- netfilter: ctnetlink: don't use conntrack/expect object addresses as id
- s390: ctcm: fix ctcm_new_device error return code
- drm/sun4i: Set device driver data at bind time for use in unbind
- gpu: ipu-v3: dp: fix CSC handling
- drm/imx: don't skip DP channel disable for background plane
- spi: Micrel eth switch: declare missing of table
- spi: ST ST95HF NFC: declare missing of table
- Input: synaptics-rmi4 - fix possible double free
- MIPS: VDSO: Reduce VDSO_RANDOMIZE_SIZE to 64MB for 64bit
- ima: open a new file instance if no read permissions
- drm/i915: Disable LP3 watermarks on all SNB machines
- net: stmmac: Move debugfs init/exit to ->probe()/->remove()
- x86/vdso: Pass --eh-frame-hdr to the linker
- mm/memory.c: fix modifying of page protection by insert_pfn()
- net: fec: manage ahb clock in runtime pm
- mlxsw: spectrum_switchdev: Add MDB entries in prepare phase
- mlxsw: core: Do not use WQ_MEM_RECLAIM for EMAD workqueue
- mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw ordered workqueue
- mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw workqueue
- NFC: nci: Add some bounds checking in nci_hci_cmd_received()
- nfc: nci: Potential off by one in ->pipes[] array
- x86/kprobes: Avoid kretprobe recursion bug
- cw1200: fix missing unlock on error in cw1200_hw_scan()
- mwl8k: Fix rate_idx underflow
- rtlwifi: rtl8723ae: Fix missing break in switch statement
- bonding: fix arp_validate toggling in active-backup mode
- bridge: Fix error path for kobject_init_and_add()
- dpaa_eth: fix SG frame cleanup
- ipv4: Fix raw socket lookup for local traffic
- net: dsa: Fix error cleanup path in dsa_init_module
- net: ethernet: stmmac: dwmac-sun8i: enable support of unicast filtering
- net: seeq: fix crash caused by not set dev.parent
- net: ucc_geth - fix Oops when changing number of buffers in the ring
- packet: Fix error path in packet_init
- vlan: disable SIOCSHWTSTAMP in container
- vrf: sit mtu should not be updated when vrf netdev is the link
- tipc: fix hanging clients using poll with EPOLLOUT flag
- drivers/virt/fsl_hypervisor.c: dereferencing error pointers in ioctl
- drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl
- powerpc/powernv/idle: Restore IAMR after idle
- powerpc/booke64: set RI in default MSR
- platform/x86: dell-laptop: fix rfkill functionality
- iio: adc: xilinx: fix potential use-after-free on probe
- iio: adc: xilinx: prevent touching unclocked h/w on remove
- acpi/nfit: Always dump _DSM output payload
- libnvdimm/pmem: fix a possible OOB access when read and write pmem
- vxge: fix return of a free'd memblock on a failed dma mapping
- qede: fix write to free'd pointer error and double free of ptp
- afs: Unlock pages for __pagevec_release()
- ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash
- scsi: aic7xxx: fix EISA support
- drm/sun4i: Fix component unbinding and component master deletion
- netfilter: fix nf_l4proto_log_invalid to log invalid packets
- drm/sun4i: Unbind components before releasing DRM and memory
- usb: typec: Fix unchecked return value
- netfilter: nf_tables: use-after-free in dynamic operations
- um: Don't hardcode path as it is architecture dependent
- powerpc/book3s/64: check for NULL pointer in pgd_alloc()
- PCI: hv: Add hv_pci_remove_slots() when we unload the driver
- PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary
- net: core: another layer of lists, around PF_MEMALLOC skb handling
- locking/rwsem: Prevent decrement of reader count before increment
- PCI: hv: Fix a memory leak in hv_eject_device_work()
- x86/speculation/mds: Revert CPU buffer clear on double fault exit
- x86/speculation/mds: Improve CPU buffer clear documentation
- objtool: Fix function fallthrough detection
- ARM: dts: exynos: Fix interrupt for shared EINTs on Exynos5260
- ARM: dts: exynos: Fix audio (microphone) routing on Odroid XU3
- ARM: exynos: Fix a leaked reference by adding missing of_node_put
- power: supply: axp288_charger: Fix unchecked return value
- arm64: compat: Reduce address limit
- arm64: Clear OSDLR_EL1 on CPU boot
- arm64: Save and restore OSDLR_EL1 across suspend/resume
- sched/x86: Save [ER]FLAGS on context switch
- crypto: chacha20poly1305 - set cra_name correctly
- crypto: vmx - fix copy-paste error in CTR mode
- crypto: skcipher - don't WARN on unprocessed data after slow walk step
- crypto: crct10dif-generic - fix use via crypto_shash_digest()
- crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest()
- crypto: gcm - fix incompatibility between "gcm" and "gcm_base"
- crypto: rockchip - update IV buffer to contain the next IV
- crypto: arm/aes-neonbs - don't access already-freed walk.iv
- ALSA: usb-audio: Fix a memory leak bug
- ALSA: hda/realtek - EAPD turn on later
- ASoC: max98090: Fix restore of DAPM Muxes
- ASoC: RT5677-SPI: Disable 16Bit SPI Transfers
- bpf, arm64: remove prefetch insn in xadd mapping
- mm/mincore.c: make mincore() more conservative
- ocfs2: fix ocfs2 read inode data panic in ocfs2_iget
- userfaultfd: use RCU to free the task struct when fork fails
- mfd: da9063: Fix OTP control register names to match datasheets for
DA9063/63L
- mfd: max77620: Fix swapped FPS_PERIOD_MAX_US values
- mtd: spi-nor: intel-spi: Avoid crossing 4K address boundary on read/write
- tty: vt.c: Fix TIOCL_BLANKSCREEN console blanking if blankinterval == 0
- tty/vt: fix write/write race in ioctl(KDSKBSENT) handler
- jbd2: check superblock mapped prior to committing
- ext4: make sanity check in mballoc more strict
- ext4: ignore e_value_offs for xattrs with value-in-ea-inode
- ext4: avoid drop reference to iloc.bh twice
- Btrfs: do not start a transaction during fiemap
- Btrfs: do not start a transaction at iterate_extent_inodes()
- bcache: fix a race between cache register and cacheset unregister
- bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim()
- ext4: fix use-after-free race with debug_want_extra_isize
- ext4: actually request zeroing of inode table after grow
- ext4: fix ext4_show_options for file systems w/o journal
- ipmi:ssif: compare block number correctly for multi-part return messages
- crypto: arm64/aes-neonbs - don't access already-freed walk.iv
- crypto: salsa20 - don't access already-freed walk.iv
- crypto: ccm - fix incompatibility between "ccm" and "ccm_base"
- fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going
into workqueue when umount
- ext4: fix data corruption caused by overlapping unaligned and aligned IO
- ext4: fix use-after-free in dx_release()
- ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug
- KVM: x86: Skip EFER vs. guest CPUID checks for host-initiated writes
- iov_iter: optimize page_copy_sane()
- ext4: fix compile error when using BUFFER_TRACE
- arm64: dts: rockchip: Disable DCMDs on RK3399's eMMC controller.
- arm64: mmap: Ensure file offset is treated as unsigned
- arm64: arch_timer: Ensure counter register reads occur with seqlock held
- crypto: crypto4xx - fix ctr-aes missing output IV
- crypto: crypto4xx - fix cfb and ofb "overran dst buffer" issues
- ALSA: line6: toneport: Fix broken usage of timer for delayed execution
- ASoC: fsl_esai: Fix missing break in switch statement
- mm/huge_memory: fix vmf_insert_pfn_{pmd, pud}() crash, handle unaligned
addresses
- hugetlb: use same fault hash key for shared and private mappings
- ACPI: PM: Set enable_for_wake for wakeup GPEs during suspend-to-idle
- btrfs: Correctly free extent buffer in case btree_read_extent_buffer_pages
fails
- ext4: avoid panic during forced reboot due to aborted journal
- libnvdimm/namespace: Fix label tracking error
- ext4: don't update s_rev_level if not required
- net: avoid weird emergency message
- net/mlx4_core: Change the error print to info print
- net: test nouarg before dereferencing zerocopy pointers
- net: usb: qmi_wwan: add Telit 0x1260 and 0x1261 compositions
- ppp: deflate: Fix possible crash in deflate_init
- tipc: switch order of device registration to fix a crash
- vsock/virtio: free packets during the socket release
- vsock/virtio: Initialize core virtio vsock before registering the driver
- net: Always descend into dsa/
- parisc: Export running_on_qemu symbol for modules
- parisc: Skip registering LED when running in QEMU
- parisc: Use PA_ASM_LEVEL in boot code
- parisc: Rename LEVEL to PA_ASM_LEVEL to avoid name clash with DRBD code
- stm class: Fix channel free in stm output free path
- md: add mddev->pers to avoid potential NULL pointer dereference
- intel_th: msu: Fix single mode with IOMMU
- p54: drop device reference count if fails to enable device
- of: fix clang -Wunsequenced for be32_to_cpu()
- media: ov6650: Fix sensor possibly not detected on probe
- NFS4: Fix v4.0 client state corruption when mount
- PNFS fallback to MDS if no deviceid found
- clk: hi3660: Mark clk_gate_ufs_subsys as critical
- clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider
- clk: rockchip: fix wrong clock definitions for rk3328
- fuse: fix writepages on 32bit
- fuse: honor RLIMIT_FSIZE in fuse_file_fallocate
- iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114
- ceph: flush dirty inodes before proceeding with remount
- x86_64: Add gap to int3 to allow for call emulation
- x86_64: Allow breakpoints to emulate call instructions
- ftrace/x86_64: Emulate call function while updating in breakpoint handler
- tracing: Fix partial reading of trace event's id file
- memory: tegra: Fix integer overflow on tick value calculation
- perf intel-pt: Fix instructions sampling rate
- perf intel-pt: Fix improved sample timestamp
- perf intel-pt: Fix sample timestamp wrt non-taken branches
- objtool: Allow AR to be overridden with HOSTAR
- fbdev: sm712fb: fix brightness control on reboot, don't set SR30
- fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75
- fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F
- fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA
- fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping
VRAM
- fbdev: sm712fb: fix support for 1024x768-16 mode
- fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display
- fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting
- PCI: Mark AMD Stoney Radeon R7 GPU ATS as broken
- PCI: Mark Atheros AR9462 to avoid bus reset
- PCI: Factor out pcie_retrain_link() function
- PCI: Work around Pericom PCIe-to-PCI bridge Retrain Link erratum
- dm cache metadata: Fix loading discard bitset
- dm zoned: Fix zone report handling
- dm delay: fix a crash when invalid device is specified
- xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink
- xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module
- vti4: ipip tunnel deregistration fixes.
- esp4: add length check for UDP encapsulation
- xfrm4: Fix uninitialized memory read in _decode_session4
- power: supply: cpcap-battery: Fix division by zero
- securityfs: fix use-after-free on symlink traversal
- apparmorfs: fix use-after-free on symlink traversal
- mac80211: Fix kernel panic due to use of txq after free
- KVM: arm/arm64: Ensure vcpu target is unset on reset failure
- power: supply: sysfs: prevent endless uevent loop with
CONFIG_POWER_SUPPLY_DEBUG
- iwlwifi: mvm: check for length correctness in iwl_mvm_create_skb()
- sched/cpufreq: Fix kobject memleak
- x86/mm/mem_encrypt: Disable all instrumentation for early SME setup
- ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour
- perf bench numa: Add define for RUSAGE_THREAD if not present
- md/raid: raid5 preserve the writeback action after the parity check
- driver core: Postpone DMA tear-down until after devres release for probe
failure
- bpf: add map_lookup_elem_sys_only for lookups from syscall side
- bpf, lru: avoid messing with eviction heuristics upon syscall lookup
- fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough
- nfp: flower: add rcu locks when accessing netdev for tunnels
- rtnetlink: always put IFLA_LINK for links with a link-netnsid
- brd: re-enable __GFP_HIGHMEM in brd_insert_page()
- proc: prevent changes to overridden credentials
- md: batch flush requests.
- phy: ti-pipe3: fix missing bit-wise or operator when assigning val
- clk: mediatek: Disable tuner_en before change PLL rate
- PCI: rcar: Add the initialization of PCIe link in resume_noirq()
- fuse: Add FOPEN_STREAM to use stream_open()
- qmi_wwan: new Wistron, ZTE and D-Link devices
- bpf: relax inode permission check for retrieving bpf program
* Bionic update: upstream stable patchset 2019-07-30 (LP: #1838459)
- kbuild: simplify ld-option implementation
- cifs: do not attempt cifs operation on smb2+ rename error
- tracing: Fix a memory leak by early error exit in trace_pid_write()
- tracing: Fix buffer_ref pipe ops
- zram: pass down the bvec we need to read into in the work struct
- lib/Kconfig.debug: fix build error without CONFIG_BLOCK
- MIPS: scall64-o32: Fix indirect syscall number load
- trace: Fix preempt_enable_no_resched() abuse
- IB/rdmavt: Fix frwr memory registration
- sched/numa: Fix a possible divide-by-zero
- ceph: only use d_name directly when parent is locked
- ceph: ensure d_name stability in ceph_dentry_hash()
- ceph: fix ci->i_head_snapc leak
- nfsd: Don't release the callback slot unless it was actually held
- sunrpc: don't mark uninitialised items as VALID.
- Input: synaptics-rmi4 - write config register values to the right offset
- dmaengine: sh: rcar-dmac: With cyclic DMA residue 0 is valid
- ARM: 8857/1: efi: enable CP15 DMB instructions before cleaning the cache
- drm/vc4: Fix memory leak during gpu reset.
- drm/vc4: Fix compilation error reported by kbuild test bot
- ext4: fix some error pointer dereferences
- vsock/virtio: fix kernel panic from virtio_transport_reset_no_sock
- tipc: handle the err returned from cmd header function
- slip: make slhc_free() silently accept an error pointer
- intel_th: gth: Fix an off-by-one in output unassigning
- fs/proc/proc_sysctl.c: Fix a NULL pointer dereference
- ipvs: fix warning on unused variable
- sched/deadline: Correctly handle active 0-lag timers
- NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family.
- netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON
- fm10k: Fix a potential NULL pointer dereference
- tipc: check bearer name with right length in tipc_nl_compat_bearer_enable
- tipc: check link name with right length in tipc_nl_compat_link_set
- x86, retpolines: Raise limit for generating indirect calls from switch-case
- x86/retpolines: Disable switch jump tables when retpolines are enabled
- mm: Fix warning in insert_pfn()
- ipv4: add sanity checks in ipv4_link_failure()
- mlxsw: spectrum: Fix autoneg status in ethtool
- net/mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query
- net: rds: exchange of 8K and 1M pool
- net: stmmac: move stmmac_check_ether_addr() to driver probe
- stmmac: pci: Adjust IOT2000 matching
- team: fix possible recursive locking when add slaves
- net/rose: fix unbound loop in rose_loopback_timer()
- ipv4: set the tcp_min_rtt_wlen range from 0 to one day
- powerpc/fsl: Add FSL_PPC_BOOK3E as supported arch for nospectre_v2 boot arg
- Documentation: Add nospectre_v1 parameter
- netfilter: nf_tables: warn when expr implements only one of
activate/deactivate
- net/ibmvnic: Fix RTNL deadlock during device reset
- drm/rockchip: fix for mailbox read validation.
- powerpc/vdso32: fix CLOCK_MONOTONIC on PPC64
- perf/x86/intel: Enable C-state residency events for Cannon Lake
- perf/x86/intel: Update KBL Package C-state events to also include
PC8/PC9/PC10 counters
- powerpc/mm/radix: Make Radix require HUGETLB_PAGE
- workqueue: Try to catch flush_work() without INIT_WORK().
- mlxsw: pci: Reincrease PCI reset timeout
- mm: make page ref count overflow check tighter and more explicit
- mm: add 'try_get_page()' helper function
- mm: prevent get_user_pages() from overflowing page refcount
- fs: prevent page refcount overflow in pipe_buf_get
- ARM: dts: bcm283x: Fix hdmi hpd gpio pull
- s390: limit brk randomization to 32MB
- qlcnic: Avoid potential NULL pointer dereference
- netfilter: nft_set_rbtree: check for inactive element after flag mismatch
- netfilter: bridge: set skb transport_header before entering
NF_INET_PRE_ROUTING
- s390/qeth: fix race when initializing the IP address table
- sc16is7xx: missing unregister/delete driver on error in sc16is7xx_init()
- serial: ar933x_uart: Fix build failure with disabled console
- KVM: arm/arm64: vgic-its: Take the srcu lock when parsing the memslots
- usb: gadget: net2280: Fix overrun of OUT messages
- usb: gadget: net2280: Fix net2280_dequeue()
- usb: gadget: net2272: Fix net2272_dequeue()
- ARM: dts: pfla02: increase phy reset duration
- net: ks8851: Dequeue RX packets explicitly
- net: ks8851: Reassert reset pin if chip ID check fails
- net: ks8851: Delay requesting IRQ until opened
- net: ks8851: Set initial carrier state to down
- staging: rtl8188eu: Fix potential NULL pointer dereference of kcalloc
- staging: rtlwifi: rtl8822b: fix to avoid potential NULL pointer dereference
- staging: rtl8712: uninitialized memory in read_bbreg_hdl()
- staging: rtlwifi: Fix potential NULL pointer dereference of kzalloc
- net: macb: Add null check for PCLK and HCLK
- net/sched: don't dereference a->goto_chain to read the chain index
- ARM: dts: imx6qdl: Fix typo in imx6qdl-icore-rqs.dtsi
- NFS: Fix a typo in nfs_init_timeout_values()
- net: xilinx: fix possible object reference leak
- net: ibm: fix possible object reference leak
- net: ethernet: ti: fix possible object reference leak
- gpio: aspeed: fix a potential NULL pointer dereference
- drm/meson: Fix invalid pointer in meson_drv_unbind()
- drm/meson: Uninstall IRQ handler
- scsi: qla4xxx: fix a potential NULL pointer dereference
- usb: usb251xb: fix to avoid potential NULL pointer dereference
- usb: u132-hcd: fix resource leak
- ceph: fix use-after-free on symlink traversal
- scsi: zfcp: reduce flood of fcrscn1 trace records on multi-element RSCN
- libata: fix using DMA buffers on stack
- gpio: of: Fix of_gpiochip_add() error path
- kconfig/[mn]conf: handle backspace (^H) key
- ptrace: take into account saved_sigmask in PTRACE{GET,SET}SIGMASK
- leds: pca9532: fix a potential NULL pointer dereference
- KVM: arm64: Reset the PMU in preemptible context
- KVM: arm/arm64: vgic-its: Take the srcu lock when writing to guest memory
- scsi: aacraid: Insure we don't access PCIe space during AER/EEH
- x86/realmode: Don't leak the trampoline kernel address
- x86/mm: Don't exceed the valid physical address space
- ipv4: ip_do_fragment: Preserve skb_iif during fragmentation
- ipv6/flowlabel: wait rcu grace period before put_pid()
- ipv6: invert flowlabel sharing check in process and user mode
- l2ip: fix possible use-after-free
- l2tp: use rcu_dereference_sk_user_data() in l2tp_udp_encap_recv()
- net: dsa: bcm_sf2: fix buffer overflow doing set_rxnfc
- net: phy: marvell: Fix buffer overrun with stats counters
- sctp: avoid running the sctp state machine recursively
- packet: validate msg_namelen in send directly
- bnxt_en: Improve multicast address setup logic.
- bnxt_en: Free short FW command HWRM memory in error path in bnxt_init_one()
- ALSA: line6: use dynamic buffers
- rxrpc: Fix net namespace cleanup
- kasan: remove redundant initialization of variable 'real_size'
- kasan: prevent compiler from optimizing away memset in tests
- caif: reduce stack size with KASAN
- ALSA: hda/realtek - Add new Dell platform for headset mode
- USB: yurex: Fix protection fault after device removal
- USB: w1 ds2490: Fix bug caused by improper use of altsetting array
- usb: usbip: fix isoc packet num validation in get_pipe
- USB: core: Fix unterminated string returned by usb_string()
- USB: core: Fix bug caused by duplicate interface PM usage counter
- nvme-loop: init nvmet_ctrl fatal_err_work when allocate
- HID: logitech: check the return value of create_singlethread_workqueue
- HID: debug: fix race condition with between rdesc_show() and device removal
- rtc: sh: Fix invalid alarm warning for non-enabled alarm
- batman-adv: Reduce claim hash refcnt only for removed entry
- batman-adv: Reduce tt_local hash refcnt only for removed entry
- batman-adv: Reduce tt_global hash refcnt only for removed entry
- ARM: dts: rockchip: Fix gpu opp node names for rk3288
- net/mlx5: E-Switch, Fix esw manager vport indication for more vport commands
- bonding: show full hw address in sysfs for slave entries
- net: stmmac: ratelimit RX error logs
- net: stmmac: don't overwrite discard_frame status
- net: stmmac: fix dropping of multi-descriptor RX frames
- net: stmmac: don't log oversized frames
- jffs2: fix use-after-free on symlink traversal
- debugfs: fix use-after-free on symlink traversal
- rtc: da9063: set uie_unsupported when relevant
- HID: input: add mapping for Assistant key
- vfio/pci: use correct format characters
- scsi: core: add new RDAC LENOVO/DE_Series device
- scsi: storvsc: Fix calculation of sub-channel count
- net: hns: Fix WARNING when remove HNS driver with SMMU enabled
- kmemleak: powerpc: skip scanning holes in the .bss section
- hugetlbfs: fix memory leak for resv_map
- sh: fix multiple function definition build errors
- xsysace: Fix error handling in ace_setup
- ARM: orion: don't use using 64-bit DMA masks
- ARM: iop: don't use using 64-bit DMA masks
- perf/x86/amd: Update generic hardware cache events for Family 17h
- Bluetooth: btusb: request wake pin with NOAUTOEN
- staging: iio: adt7316: allow adt751x to use internal vref for all dacs
- staging: iio: adt7316: fix the dac read calculation
- staging: iio: adt7316: fix the dac write calculation
- scsi: RDMA/srpt: Fix a credit leak for aborted commands
- ASoC: stm32: fix sai driver name initialisation
- IB/core: Unregister notifier before freeing MAD security
- IB/core: Fix potential memory leak while creating MAD agents
- IB/core: Destroy QP if XRC QP fails
- Input: snvs_pwrkey - initialize necessary driver data before enabling IRQ
- Input: stmfts - acknowledge that setting brightness is a blocking call
- selinux: never allow relabeling on context mounts
- powerpc/mm/hash: Handle mmap_min_addr correctly in get_unmapped_area topdown
search
- x86/mce: Improve error message when kernel cannot recover, p2
- clk: x86: Add system specific quirk to mark clocks as critical
- i2c: i2c-stm32f7: Fix SDADEL minimum formula
- media: v4l2: i2c: ov7670: Fix PLL bypass register values
- mm/kmemleak.c: fix unused-function warning
- mac80211: don't attempt to rename ERR_PTR() debugfs dirs
- i2c: Remove unnecessary call to irq_find_mapping
- i2c: Clear client->irq in i2c_device_remove
- i2c: Allow recovery of the initial IRQ by an I2C client device.
- i2c: Prevent runtime suspend of adapter when Host Notify is required
- USB: dummy-hcd: Fix failure to give back unlinked URBs
- batman-adv: fix warning in function batadv_v_elp_get_throughput
- riscv: fix accessing 8-byte variable from RV32
- net: stmmac: don't stop NAPI processing when dropping a packet
- mfd: twl-core: Disable IRQ while suspended
- block: use blk_free_flush_queue() to free hctx->fq in blk_mq_init_hctx
- arm/mach-at91/pm : fix possible object reference leak
- fs: stream_open - opener for stream-like files so that read and write can
run simultaneously without deadlock
- block: pass no-op callback to INIT_WORK().
- platform/x86: intel_pmc_core: Fix PCH IP name
- platform/x86: intel_pmc_core: Handle CFL regmap properly
- x86/mm: Fix a crash with kmemleak_scan()
- Drivers: hv: vmbus: Remove the undesired put_cpu_ptr() in hv_synic_cleanup()
- ubsan: Fix nasty -Wbuiltin-declaration-mismatch GCC-9 warnings
- staging: greybus: power_supply: fix prop-descriptor request size
- ASoC: hdmi-codec: fix S/PDIF DAI
- ASoC:soc-pcm:fix a codec fixup issue in TDM case
- ASoC: nau8824: fix the issue of the widget with prefix name
- ASoC: nau8810: fix the issue of widget with prefixed name
- ASoC: samsung: odroid: Fix clock configuration for 44100 sample rate
- ASoC: wm_adsp: Add locking to wm_adsp2_bus_error
- ASoC: cs4270: Set auto-increment bit for register writes
- IB/hfi1: Eliminate opcode tests on mr deref
- MIPS: KGDB: fix kgdb support for SMP platforms.
- ASoC: tlv320aic32x4: Fix Common Pins
- drm/mediatek: Fix an error code in mtk_hdmi_dt_parse_pdata()
- perf/x86/intel: Fix handling of wakeup_events for multi-entry PEBS
- perf/x86/intel: Initialize TFA MSR
- linux/kernel.h: Use parentheses around argument in u64_to_user_ptr()
- ASoC: rockchip: pdm: fix regmap_ops hang issue
- slab: fix a crash by reading /proc/slab_allocators
- virtio_pci: fix a NULL pointer reference in vp_del_vqs
- RDMA/vmw_pvrdma: Fix memory leak on pvrdma_pci_remove
- scsi: csiostor: fix missing data copy in csio_scsi_err_handler()
- drm/mediatek: fix possible object reference leak
- ASoC: Intel: kbl: fix wrong number of channels
- virtio-blk: limit number of hw queues by nr_cpu_ids
- platform/x86: pmc_atom: Drop __initconst on dmi table
- genirq: Prevent use-after-free and work list corruption
- usb: dwc3: Fix default lpm_nyet_threshold value
- USB: serial: f81232: fix interrupt worker not stop
- USB: cdc-acm: fix unthrottle races
- usb-storage: Set virt_boundary_mask to avoid SG overflows
- intel_th: pci: Add Comet Lake support
- scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines
- UAS: fix alignment of scatter/gather segments
- ASoC: Intel: avoid Oops if DMA setup fails
- locking/futex: Allow low-level atomic operations to return -EAGAIN
- arm64: futex: Bound number of LDXR/STXR loops in FUTEX_WAKE_OP
- ASoC: tlv320aic3x: fix reset gpio reference counting
- ASoC: stm32: sai: fix exposed capabilities in spdif mode
- ASoC:intel:skl:fix a simultaneous playback & capture issue on hda platform
- ASoC: dapm: Fix NULL pointer dereference in snd_soc_dapm_free_kcontrol
- drm/omap: hdmi4_cec: Fix CEC clock handling for PM
- IB/hfi1: Fix the allocation of RSM table
- drm/amd/display: fix cursor black issue
- objtool: Add machine_real_restart() to the noreturn list
- objtool: Add rewind_stack_do_exit() to the noreturn list
- RDMA/hns: Fix bug that caused srq creation to fail
- perf/core: Fix perf_event_disable_inatomic() race
- soc: sunxi: Fix missing dependency on REGMAP_MMIO
- scsi: lpfc: change snprintf to scnprintf for possible overflow
* [ZenBook S UX391UA, Realtek ALC294, Mic, Internal] No sound at all
(LP: #1784485) // Bionic update: upstream stable patchset 2019-07-30
(LP: #1838459)
- ALSA: hda/realtek - Apply the fixup for ASUS Q325UAR
* Bionic update: upstream stable patchset 2019-07-29 (LP: #1838349)
- ARC: u-boot args: check that magic number is correct
- arc: hsdk_defconfig: Enable CONFIG_BLK_DEV_RAM
- perf/core: Restore mmap record type correctly
- ext4: add missing brelse() in add_new_gdb_meta_bg()
- ext4: report real fs size after failed resize
- ALSA: echoaudio: add a check for ioremap_nocache
- ALSA: sb8: add a check for request_region
- auxdisplay: hd44780: Fix memory leak on ->remove()
- IB/mlx4: Fix race condition between catas error reset and aliasguid flows
- mmc: davinci: remove extraneous __init annotation
- ALSA: opl3: fix mismatch between snd_opl3_drum_switch definition and
declaration
- thermal/intel_powerclamp: fix __percpu declaration of worker_data
- thermal: bcm2835: Fix crash in bcm2835_thermal_debugfs
- thermal/int340x_thermal: Add additional UUIDs
- thermal/int340x_thermal: fix mode setting
- thermal/intel_powerclamp: fix truncated kthread name
- scsi: iscsi: flush running unbind operations when removing a session
- x86/mm: Don't leak kernel addresses
- tools/power turbostat: return the exit status of a command
- perf list: Don't forget to drop the reference to the allocated thread_map
- perf config: Fix an error in the config template documentation
- perf config: Fix a memory leak in collect_config()
- perf build-id: Fix memory leak in print_sdt_events()
- perf top: Fix error handling in cmd_top()
- perf hist: Add missing map__put() in error case
- perf evsel: Free evsel->counts in perf_evsel__exit()
- perf tests: Fix a memory leak of cpu_map object in the
openat_syscall_event_on_all_cpus test
- perf tests: Fix memory leak by expr__find_other() in test__expr()
- perf tests: Fix a memory leak in test__perf_evsel__tp_sched_test()
- irqchip/mbigen: Don't clear eventid when freeing an MSI
- x86/hpet: Prevent potential NULL pointer dereference
- x86/cpu/cyrix: Use correct macros for Cyrix calls on Geode processors
- drm/nouveau/debugfs: Fix check of pm_runtime_get_sync failure
- iommu/vt-d: Check capability before disabling protected memory
- x86/hw_breakpoints: Make default case in hw_breakpoint_arch_parse() return
an error
- fix incorrect error code mapping for OBJECTID_NOT_FOUND
- ext4: prohibit fstrim in norecovery mode
- gpio: pxa: handle corner case of unprobed device
- rsi: improve kernel thread handling to fix kernel panic
- 9p: do not trust pdu content for stat item size
- 9p locks: add mount option for lock retry interval
- f2fs: fix to do sanity check with current segment number
- netfilter: xt_cgroup: shrink size of v2 path
- serial: uartps: console_setup() can't be placed to init section
- powerpc/pseries: Remove prrn_work workqueue
- media: au0828: cannot kfree dev before usb disconnect
- HID: i2c-hid: override HID descriptors for certain devices
- ARM: samsung: Limit SAMSUNG_PM_CHECK config option to non-Exynos platforms
- [Config] updateconfigs for CONFIG_SAMSUNG_PM_CHECK
- usbip: fix vhci_hcd controller counting
- ACPI / SBS: Fix GPE storm on recent MacBookPro's
- KVM: nVMX: restore host state in nested_vmx_vmexit for VMFail
- cifs: fallback to older infolevels on findfirst queryinfo retry
- kernel: hung_task.c: disable on suspend
- crypto: sha256/arm - fix crash bug in Thumb2 build
- crypto: sha512/arm - fix crash bug in Thumb2 build
- iommu/dmar: Fix buffer overflow during PCI bus notification
- soc/tegra: pmc: Drop locking from tegra_powergate_is_powered()
- lkdtm: Print real addresses
- lkdtm: Add tests for NULL pointer dereference
- drm/panel: panel-innolux: set display off in innolux_panel_unprepare
- crypto: axis - fix for recursive locking from bottom half
- Revert "ACPI / EC: Remove old CLEAR_ON_RESUME quirk"
- coresight: cpu-debug: Support for CA73 CPUs
- drm/nouveau/volt/gf117: fix speedo readout register
- ARM: 8839/1: kprobe: make patch_lock a raw_spinlock_t
- drm/amdkfd: use init_mqd function to allocate object for hid_mqd (CI)
- appletalk: Fix use-after-free in atalk_proc_exit
- lib/div64.c: off by one in shift
- include/linux/swap.h: use offsetof() instead of custom __swapoffset macro
- bpf: fix use after free in bpf_evict_inode
- dm: disable CRYPTO_TFM_REQ_MAY_SLEEP to fix a GFP_KERNEL recursion deadlock
- net: stmmac: Set dma ring length before enabling the DMA
- mm: hide incomplete nr_indirectly_reclaimable in sysfs
- appletalk: Fix compile regression
- ext4: avoid panic during forced reboot
- i40iw: Avoid panic when handling the inetdev event
- sched/core: Fix buffer overflow in cgroup2 property cpu.max
- ACPI / utils: Drop reference in test for device presence
- PM / Domains: Avoid a potential deadlock
- drm/exynos/mixer: fix MIXER shadow registry synchronisation code
- Bluetooth: Fix debugfs NULL pointer dereference
- f2fs: cleanup dirty pages if recover failed
- [Config] updateconfigs for CONFIG_INTEL_ATOMISP2_PM
- platform/x86: Add Intel AtomISP2 dummy / power-management driver
- drm/ttm: Fix bo_global and mem_global kfree error
- ALSA: hda: fix front speakers on Huawei MBXP
- ACPI: EC / PM: Disable non-wakeup GPEs for suspend-to-idle
- net/rds: fix warn in rds_message_alloc_sgs
- scsi: core: Avoid that system resume triggers a kernel warning
- PCI: Blacklist power management of Gigabyte X299 DESIGNARE EX PCIe ports
- rxrpc: Fix client call connect/disconnect race
- f2fs: fix to dirty inode for i_mode recovery
- bonding: fix event handling for stacked bonds
- net: atm: Fix potential Spectre v1 vulnerabilities
- net: bridge: fix per-port af_packet sockets
- net: bridge: multicast: use rcu to access port list from
br_multicast_start_querier
- net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv
- tcp: tcp_grow_window() needs to respect tcp_space()
- team: set slave to promisc if team is already in promisc mode
- vhost: reject zero size iova range
- ipv4: recompile ip options in ipv4_link_failure
- ipv4: ensure rcu_read_lock() in ipv4_link_failure()
- net: thunderx: raise XDP MTU to 1508
- net: thunderx: don't allow jumbo frames with XDP
- KVM: x86: Don't clear EFER during SMM transitions for 32-bit vCPU
- KVM: x86: svm: make sure NMI is injected after nmi_singlestep
- Staging: iio: meter: fixed typo
- staging: iio: ad7192: Fix ad7193 channel address
- iio: gyro: mpu3050: fix chip ID reading
- iio/gyro/bmg160: Use millidegrees for temperature scale
- iio: cros_ec: Fix the maths for gyro scale calculation
- iio: ad_sigma_delta: select channel when reading register
- iio: dac: mcp4725: add missing powerdown bits in store eeprom
- iio: Fix scan mask selection
- iio: adc: at91: disable adc channel interrupt in timeout case
- iio: core: fix a possible circular locking dependency
- io: accel: kxcjk1013: restore the range after resume.
- staging: comedi: vmk80xx: Fix use of uninitialized semaphore
- staging: comedi: vmk80xx: Fix possible double-free of ->usb_rx_buf
- staging: comedi: ni_usb6501: Fix use of uninitialized mutex
- staging: comedi: ni_usb6501: Fix possible double-free of ->usb_rx_buf
- ALSA: core: Fix card races between register and disconnect
- scsi: core: set result when the command cannot be dispatched
- coredump: fix race condition between mmget_not_zero()/get_task_mm() and core
dumping
- crypto: x86/poly1305 - fix overflow during partial reduction
- arm64: futex: Restore oldval initialization to work around buggy compilers
- x86/kprobes: Verify stack frame on kretprobe
- kprobes: Mark ftrace mcount handler functions nokprobe
- kprobes: Fix error check when reusing optimized probes
- rt2x00: do not increment sequence number while re-transmitting
- mac80211: do not call driver wake_tx_queue op during reconfig
- perf/x86/amd: Add event map for AMD Family 17h
- x86/cpu/bugs: Use __initconst for 'const' init data
- perf/x86: Fix incorrect PEBS_REGS
- x86/speculation: Prevent deadlock on ssb_state::lock
- crypto: crypto4xx - properly set IV after de- and encrypt
- mmc: sdhci: Fix data command CRC error handling
- mmc: sdhci: Rename SDHCI_ACMD12_ERR and SDHCI_INT_ACMD12ERR
- mmc: sdhci: Handle auto-command errors
- modpost: file2alias: go back to simple devtable lookup
- modpost: file2alias: check prototype of handler
- tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete
- ipv6: frags: fix a lockdep false positive
- Revert "kbuild: use -Oz instead of -Os when using clang"
- device_cgroup: fix RCU imbalance in error case
- mm/vmstat.c: fix /proc/vmstat format for CONFIG_DEBUG_TLBFLUSH=y
CONFIG_SMP=n
- ALSA: info: Fix racy addition/deletion of nodes
- percpu: stop printing kernel addresses
- iomap: report collisions between directio and buffered writes to userspace
- i2c-hid: properly terminate i2c_hid_dmi_desc_override_table[] array
- net: Fix missing meta data in skb with vlan packet
- nfp: flower: replace CFI with vlan present
- nfp: flower: remove vlan CFI bit from push vlan action
- ip: add helpers to process in-order fragments faster.
- net: IP defrag: encapsulate rbtree defrag code into callable functions
- ip: process in-order fragments efficiently
- ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module
- net: IP6 defrag: use rbtrees for IPv6 defrag
- net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c
- cifs: fix handle leak in smb2_query_symlink()
- Input: elan_i2c - add hardware ID for multiple Lenovo laptops
- drm/ttm: fix out-of-bounds read in ttm_put_pages() v2
- timers/sched_clock: Prevent generic sched_clock wrap caused by tick_freeze()
- tpm: Fix the type of the return value in calc_tpm2_event_size()
* Bionic update: upstream stable patchset 2019-07-26 (LP: #1838116)
- mmc: pxamci: fix enum type confusion
- drm/vmwgfx: Don't double-free the mode stored in par->set_mode
- iommu/amd: fix sg->dma_address for sg->offset bigger than PAGE_SIZE
- libceph: wait for latest osdmap in ceph_monc_blacklist_add()
- udf: Fix crash on IO error during truncate
- mips: loongson64: lemote-2f: Add IRQF_NO_SUSPEND to "cascade" irqaction.
- MIPS: Ensure ELF appended dtb is relocated
- MIPS: Fix kernel crash for R6 in jump label branch function
- scsi: ibmvscsi: Protect ibmvscsi_head from concurrent modificaiton
- scsi: ibmvscsi: Fix empty event pool access during host removal
- futex: Ensure that futex address is aligned in handle_futex_death()
- perf probe: Fix getting the kernel map
- objtool: Move objtool_file struct off the stack
- ALSA: x86: Fix runtime PM for hdmi-lpe-audio
- ext4: fix NULL pointer dereference while journal is aborted
- ext4: fix data corruption caused by unaligned direct AIO
- ext4: brelse all indirect buffer in ext4_ind_remove_space()
- media: v4l2-ctrls.c/uvc: zero v4l2_event
- Bluetooth: hci_uart: Check if socket buffer is ERR_PTR in h4_recv_buf()
- Bluetooth: Fix decrementing reference count twice in releasing socket
- Bluetooth: hci_ldisc: Initialize hci_dev before open()
- Bluetooth: hci_ldisc: Postpone HCI_UART_PROTO_READY bit set in
hci_uart_set_proto()
- drm: Reorder set_property_atomic to avoid returning with an active ww_ctx
- netfilter: ebtables: remove BUGPRINT messages
- x86/unwind: Handle NULL pointer calls better in frame unwinder
- x86/unwind: Add hardcoded ORC entry for NULL
- locking/lockdep: Add debug_locks check in __lock_downgrade()
- ALSA: hda - Record the current power state before suspend/resume calls
- PCI: designware-ep: dw_pcie_ep_set_msi() should only set MMC bits
- PCI: designware-ep: Read-only registers need DBI_RO_WR_EN to be writable
- PCI: endpoint: Use EPC's device in dma_alloc_coherent()/dma_free_coherent()
- rtc: Fix overflow when converting time64_t to rtc_time
- sched/cpufreq/schedutil: Fix error path mutex unlock
- pwm-backlight: Enable/disable the PWM before/after LCD enable toggle.
- power: supply: charger-manager: Fix incorrect return value
- ath10k: avoid possible string overflow
- mmc: renesas_sdhi: limit block count to 16 bit for old revisions
- powerpc/vdso64: Fix CLOCK_MONOTONIC inconsistencies across Y2038
- RDMA/cma: Rollback source IP address if failing to acquire device
- f2fs: fix to avoid deadlock of atomic file operations
- loop: access lo_backing_file only when the loop device is Lo_bound
- video: fbdev: Set pixclock = 0 in goldfishfb
- dccp: do not use ipv6 header for ipv4 flow
- genetlink: Fix a memory leak on error path
- mISDN: hfcpci: Test both vendor & device ID for Digium HFC4S
- net: datagram: fix unbounded loop in __skb_try_recv_datagram()
- net/packet: Set __GFP_NOWARN upon allocation in alloc_pg_vec
- net: rose: fix a possible stack overflow
- net: stmmac: fix memory corruption with large MTUs
- net-sysfs: call dev_hold if kobject_init_and_add success
- packets: Always register packet sk in the same order
- rhashtable: Still do rehash when we get EEXIST
- tcp: do not use ipv6 header for ipv4 flow
- thunderx: enable page recycling for non-XDP case
- thunderx: eliminate extra calls to put_page() for pages held for recycling
- vxlan: Don't call gro_cells_destroy() before device is unregistered
- sctp: get sctphdr by offset in sctp_compute_cksum
- net: aquantia: fix rx checksum offload for UDP/TCP over IPv6
- mac8390: Fix mmio access size probe
- tun: properly test for IFF_UP
- tun: add a missing rcu_read_unlock() in error path
- powerpc/fsl: Add barrier_nospec implementation for NXP PowerPC Book3E
- powerpc/fsl: Sanitize the syscall table for NXP PowerPC 32 bit platforms
- powerpc/fsl: Add infrastructure to fixup branch predictor flush
- powerpc/fsl: Add macro to flush the branch predictor
- powerpc/fsl: Emulate SPRN_BUCSR register
- powerpc/fsl: Flush the branch predictor at each kernel entry (64bit)
- powerpc/fsl: Flush the branch predictor at each kernel entry (32 bit)
- powerpc/fsl: Flush branch predictor when entering KVM
- powerpc/fsl: Enable runtime patching if nospectre_v2 boot arg is used
- powerpc/fsl: Fixed warning: orphan section `__btb_flush_fixup'
- powerpc/fsl: Fix the flush of branch predictor.
- Btrfs: fix incorrect file size after shrinking truncate and fsync
- btrfs: remove WARN_ON in log_dir_items
- ARM: imx6q: cpuidle: fix bug that CPU might not wake up at expected time
- powerpc: bpf: Fix generation of load/store DW instructions
- NFSv4.1 don't free interrupted slot on open
- net: dsa: qca8k: remove leftover phy accessors
- ALSA: pcm: Fix possible OOB access in PCM oss plugins
- ALSA: pcm: Don't suspend stream in unrecoverable PCM state
- kbuild: modversions: Fix relative CRC byte order interpretation
- fs/open.c: allow opening only regular files during execve()
- ocfs2: fix inode bh swapping mixup in ocfs2_reflink_inodes_lock
- scsi: sd: Fix a race between closing an sd device and sd I/O
- scsi: sd: Quiesce warning if device does not report optimal I/O size
- scsi: zfcp: fix rport unblock if deleted SCSI devices on Scsi_Host
- scsi: zfcp: fix scsi_eh host reset with port_forced ERP for non-NPIV FCP
devices
- tty: atmel_serial: fix a potential NULL pointer dereference
- staging: comedi: ni_mio_common: Fix divide-by-zero for DIO cmdtest
- staging: vt6655: Remove vif check from vnt_interrupt
- staging: vt6655: Fix interrupt race condition on device start up.
- serial: max310x: Fix to avoid potential NULL pointer dereference
- serial: sh-sci: Fix setting SCSCR_TIE while transferring data
- USB: serial: cp210x: add new device id
- USB: serial: ftdi_sio: add additional NovaTech products
- USB: serial: mos7720: fix mos_parport refcount imbalance on error path
- USB: serial: option: set driver_info for SIM5218 and compatibles
- USB: serial: option: add support for Quectel EM12
- USB: serial: option: add Olicard 600
- Disable kgdboc failed by echo space to /sys/module/kgdboc/parameters/kgdboc
- fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links
- drm/vgem: fix use-after-free when drm_gem_handle_create() fails
- gpio: exar: add a check for the return value of ida_simple_get fails
- gpio: adnp: Fix testing wrong value in adnp_gpio_direction_input
- phy: sun4i-usb: Support set_mode to USB_HOST for non-OTG PHYs
- usb: mtu3: fix EXTCON dependency
- USB: gadget: f_hid: fix deadlock in f_hidg_write()
- usb: common: Consider only available nodes for dr_mode
- usb: host: xhci-rcar: Add XHCI_TRUST_TX_LENGTH quirk
- xhci: Fix port resume done detection for SS ports with LPM enabled
- usb: cdc-acm: fix race during wakeup blocking TX traffic
- mm/migrate.c: add missing flush_dcache_page for non-mapped page migrate
- perf intel-pt: Fix TSC slip
- cpu/hotplug: Prevent crash when CPU bringup fails on CONFIG_HOTPLUG_CPU=n
- x86/smp: Enforce CONFIG_HOTPLUG_CPU when SMP=y
- KVM: Reject device ioctls from processes other than the VM's creator
- KVM: x86: Emulate MSR_IA32_ARCH_CAPABILITIES on AMD hosts
- vfio: ccw: only free cp on final interrupt
- ipmi_si: Fix crash when using hard-coded device
- gtp: change NET_UDP_TUNNEL dependency to select
- Btrfs: fix assertion failure on fsync with NO_HOLES enabled
- NFS: fix mount/umount race in nlmclnt.
- ALSA: hda/realtek: Enable headset MIC of Acer AIO with ALC286
- ALSA: hda/realtek: Enable headset MIC of Acer Aspire Z24-890 with ALC286
- ALSA: hda/realtek - Add support for Acer Aspire E5-523G/ES1-432 headset mic
- ALSA: hda/realtek: Enable ASUS X441MB and X705FD headset MIC with ALC256
- ALSA: hda/realtek: Enable headset mic of ASUS P5440FF with ALC256
- ALSA: hda/realtek: Enable headset MIC of ASUS X430UN and X512DK with ALC256
- ALSA: hda/realtek - Fix speakers on Acer Predator Helios 500 Ryzen laptops
- drm/rockchip: Do not use memcpy for MMIO addresses
- drm/rockchip: vop: reset scale mode when win is disabled
- tty: mxs-auart: fix a potential NULL pointer dereference
- staging: speakup_soft: Fix alternate speech with other synths
- serial: mvebu-uart: Fix to avoid a potential NULL pointer dereference
- drm/i915/gvt: Fix MI_FLUSH_DW parsing with correct index check
- usb: xhci: dbc: Don't free all memory with spinlock held
- xhci: Don't let USB3 ports stuck in polling state prevent suspend
- mm: add support for kmem caches in DMA32 zone
- iommu/io-pgtable-arm-v7s: request DMA32 memory, and improve debugging
- mm: mempolicy: make mbind() return -EIO when MPOL_MF_STRICT is specified
- perf pmu: Fix parser error for uncore event alias
- objtool: Query pkg-config for libelf location
- bpf: do not restore dst_reg when cur_state is freed
- arm64: debug: Don't propagate UNKNOWN FAR into si_code for debug signals
- ext4: cleanup bh release code in ext4_ind_remove_space()
- tty/serial: atmel: Add is_half_duplex helper
- tty/serial: atmel: RS485 HD w/DMA: enable RX after TX is stopped
- CIFS: fix POSIX lock leak and invalid ptr deref
- h8300: use cc-cross-prefix instead of hardcoding h8300-unknown-linux-
- f2fs: fix to avoid deadlock in f2fs_read_inline_dir()
- tracing: kdb: Fix ftdump to not sleep
- net/mlx5: Avoid panic when setting vport rate
- net/mlx5: Avoid panic when setting vport mac, getting vport config
- gpio: gpio-omap: fix level interrupt idling
- include/linux/relay.h: fix percpu annotation in struct rchan
- enic: fix build warning without CONFIG_CPUMASK_OFFSTACK
- scsi: hisi_sas: Set PHY linkrate when disconnected
- iio: adc: fix warning in Qualcomm PM8xxx HK/XOADC driver
- perf c2c: Fix c2c report for empty numa node
- mm/cma.c: cma_declare_contiguous: correct err handling
- mm/page_ext.c: fix an imbalance with kmemleak
- mm, mempolicy: fix uninit memory access
- mm/vmalloc.c: fix kernel BUG at mm/vmalloc.c:512!
- mm/slab.c: kmemleak no scan alien caches
- ocfs2: fix a panic problem caused by o2cb_ctl
- f2fs: do not use mutex lock in atomic context
- fs/file.c: initialize init_files.resize_wait
- page_poison: play nicely with KASAN
- cifs: use correct format characters
- dm thin: add sanity checks to thin-pool and external snapshot creation
- cifs: Fix NULL pointer dereference of devname
- jbd2: fix invalid descriptor block checksum
- fs: fix guard_bio_eod to check for real EOD errors
- tools lib traceevent: Fix buffer overflow in arg_eval
- PCI/PME: Fix hotplug/sysfs remove deadlock in pcie_pme_remove()
- wil6210: check null pointer in _wil_cfg80211_merge_extra_ies
- crypto: crypto4xx - add missing of_node_put after of_device_is_available
- crypto: cavium/zip - fix collision with generic cra_driver_name
- usb: chipidea: Grab the (legacy) USB PHY by phandle first
- scsi: core: replace GFP_ATOMIC with GFP_KERNEL in scsi_scan.c
- powerpc/xmon: Fix opcode being uninitialized in print_insn_powerpc
- coresight: etm4x: Add support to enable ETMv4.2
- serial: 8250_pxa: honor the port number from devicetree
- ARM: 8840/1: use a raw_spinlock_t in unwind
- iommu/io-pgtable-arm-v7s: Only kmemleak_ignore L2 tables
- powerpc/hugetlb: Handle mmap_min_addr correctly in get_unmapped_area
callback
- mmc: omap: fix the maximum timeout setting
- e1000e: Fix -Wformat-truncation warnings
- mlxsw: spectrum: Avoid -Wformat-truncation warnings
- IB/mlx4: Increase the timeout for CM cache
- clk: fractional-divider: check parent rate only if flag is set
- cpufreq: acpi-cpufreq: Report if CPU doesn't support boost technologies
- efi: cper: Fix possible out-of-bounds access
- scsi: megaraid_sas: return error when create DMA pool failed
- scsi: fcoe: make use of fip_mode enum complete
- perf test: Fix failure of 'evsel-tp-sched' test on s390
- SoC: imx-sgtl5000: add missing put_device()
- media: sh_veu: Correct return type for mem2mem buffer helpers
- media: s5p-jpeg: Correct return type for mem2mem buffer helpers
- media: s5p-g2d: Correct return type for mem2mem buffer helpers
- media: mx2_emmaprp: Correct return type for mem2mem buffer helpers
- media: mtk-jpeg: Correct return type for mem2mem buffer helpers
- vfs: fix preadv64v2 and pwritev64v2 compat syscalls with offset == -1
- HID: intel-ish-hid: avoid binding wrong ishtp_cl_device
- jbd2: fix race when writing superblock
- leds: lp55xx: fix null deref on firmware load failure
- iwlwifi: pcie: fix emergency path
- ACPI / video: Refactor and fix dmi_is_desktop()
- kprobes: Prohibit probing on bsearch()
- netfilter: conntrack: fix cloned unconfirmed skb->_nfct race in
__nf_conntrack_confirm
- ARM: 8833/1: Ensure that NEON code always compiles with Clang
- ALSA: PCM: check if ops are defined before suspending PCM
- usb: f_fs: Avoid crash due to out-of-scope stack ptr access
- sched/topology: Fix percpu data types in struct sd_data & struct s_data
- bcache: fix input overflow to cache set sysfs file io_error_halflife
- bcache: fix input overflow to sequential_cutoff
- bcache: improve sysfs_strtoul_clamp()
- genirq: Avoid summation loops for /proc/stat
- iw_cxgb4: fix srqidx leak during connection abort
- fbdev: fbmem: fix memory access if logo is bigger than the screen
- cdrom: Fix race condition in cdrom_sysctl_register
- platform/x86: intel_pmc_core: Fix PCH IP sts reading
- ASoC: fsl-asoc-card: fix object reference leaks in fsl_asoc_card_probe
- sched/debug: Initialize sd_sysctl_cpus if !CONFIG_CPUMASK_OFFSTACK
- efi/memattr: Don't bail on zero VA if it equals the region's PA
- ARM: dts: lpc32xx: Remove leading 0x and 0s from bindings notation
- soc: qcom: gsbi: Fix error handling in gsbi_probe()
- mt7601u: bump supported EEPROM version
- ARM: 8830/1: NOMMU: Toggle only bits in EXC_RETURN we are really care of
- ARM: avoid Cortex-A9 livelock on tight dmb loops
- bpf: fix missing prototype warnings
- cgroup/pids: turn cgroup_subsys->free() into cgroup_subsys->release() to fix
the accounting
- backlight: pwm_bl: Use gpiod_get_value_cansleep() to get initial state
- tty: increase the default flip buffer limit to 2*640K
- powerpc/pseries: Perform full re-add of CPU for topology update post-
migration
- usb: dwc3: gadget: Fix OTG events when gadget driver isn't loaded
- media: mt9m111: set initial frame size other than 0x0
- hwrng: virtio - Avoid repeated init of completion
- soc/tegra: fuse: Fix illegal free of IO base address
- HID: intel-ish: ipc: handle PIMR before ish_wakeup also clear PISR
busy_clear bit
- hpet: Fix missing '=' character in the __setup() code of hpet_mmap_enable
- cpu/hotplug: Mute hotplug lockdep during init
- dmaengine: imx-dma: fix warning comparison of distinct pointer types
- dmaengine: qcom_hidma: assign channel cookie correctly
- dmaengine: qcom_hidma: initialize tx flags in hidma_prep_dma_*
- netfilter: physdev: relax br_netfilter dependency
- media: s5p-jpeg: Check for fmt_ver_flag when doing fmt enumeration
- regulator: act8865: Fix act8600_sudcdc_voltage_ranges setting
- drm: Auto-set allow_fb_modifiers when given modifiers at plane init
- drm/nouveau: Stop using drm_crtc_force_disable
- x86/build: Specify elf_i386 linker emulation explicitly for i386 objects
- selinux: do not override context on context mounts
- wlcore: Fix memory leak in case wl12xx_fetch_firmware failure
- x86/build: Mark per-CPU symbols as absolute explicitly for LLD
- clk: rockchip: fix frac settings of GPLL clock for rk3328
- dmaengine: tegra: avoid overflow of byte tracking
- drm/dp/mst: Configure no_stop_bit correctly for remote i2c xfers
- ACPI / video: Extend chassis-type detection with a "Lunch Box" check
- f2fs: fix to adapt small inline xattr space in __find_inline_xattr()
- net: stmmac: Avoid sometimes uninitialized Clang warnings
- libbpf: force fixdep compilation at the start of the build
- scsi: hisi_sas: Fix a timeout race of driver internal and SMP IO
- x86/hyperv: Fix kernel panic when kexec on HyperV
- mm/sparse: fix a bad comparison
- mm, swap: bounds check swap_info array accesses to avoid NULL derefs
- memcg: killed threads should not invoke memcg OOM killer
- cifs: Accept validate negotiate if server return NT_STATUS_NOT_SUPPORTED
- netfilter: nf_tables: check the result of dereferencing base_chain->stats
- netfilter: conntrack: tcp: only close if RST matches exact sequence
- kbuild: invoke syncconfig if include/config/auto.conf.cmd is missing
- mwifiex: don't advertise IBSS features without FW support
- perf report: Don't shadow inlined symbol with different addr range
- media: rockchip/rga: Correct return type for mem2mem buffer helpers
- selftests: skip seccomp get_metadata test if not real root
- kprobes: Prohibit probing on RCU debug routine
- bcache: fix potential div-zero error of writeback_rate_i_term_inverse
- drm: rcar-du: add missing of_node_put
- perf/aux: Make perf_event accessible to setup_aux()
- e1000e: Exclude device from suspend direct complete optimization
- i2c: of: Try to find an I2C adapter matching the parent
- sched/core: Use READ_ONCE()/WRITE_ONCE() in
move_queued_task()/task_rq_lock()
- powerpc/64s: Clear on-stack exception marker upon exception return
- platform/x86: intel-hid: Missing power button release on some Dell models
- pinctrl: meson: meson8b: add the eth_rxd2 and eth_rxd3 pins
- net: stmmac: Avoid one more sometimes uninitialized Clang warning
- bcache: fix potential div-zero error of writeback_rate_p_term_inverse
- net: sfp: move sfp_register_socket call from sfp_remove to sfp_probe
- drm/i915/gvt: do not let pin count of shadow mm go negative
- powerpc/tm: Limit TM code inside PPC_TRANSACTIONAL_MEM
- kbuild: clang: choose GCC_TOOLCHAIN_DIR not on LD
- x86: vdso: Use $LD instead of $CC to link
- x86/vdso: Drop implicit common-page-size linker flag
- lib/string.c: implement a basic bcmp
- stating: ccree: revert "staging: ccree: fix leak of import() after init()"
- arm64: kaslr: Reserve size of ARM64_MEMSTART_ALIGN in linear region
- tty: mark Siemens R3964 line discipline as BROKEN
- [Config] updateconfigs for CONFIG_R3964 (BROKEN)
- [Config] updateconfigs for CONFIG_LDISC_AUTOLOAD
- tty: ldisc: add sysctl to prevent autoloading of ldiscs
- ipv6: Fix dangling pointer when ipv6 fragment
- ipv6: sit: reset ip header pointer in ipip6_rcv
- kcm: switch order of device registration to fix a crash
- net-gro: Fix GRO flush when receiving a GSO packet.
- net/mlx5: Decrease default mr cache size
- net/sched: fix ->get helper of the matchall cls
- qmi_wwan: add Olicard 600
- sctp: initialize _pad of sockaddr_in before copying to user memory
- tcp: Ensure DCTCP reacts to losses
- vrf: check accept_source_route on the original netdevice
- net/mlx5e: Fix error handling when refreshing TIRs
- net/mlx5e: Add a lock on tir list
- nfp: validate the return code from dev_queue_xmit()
- bnxt_en: Improve RX consumer index validity check.
- bnxt_en: Reset device on RX buffer errors.
- net/sched: act_sample: fix divide by zero in the traffic path
- netns: provide pure entropy for net_hash_mix()
- net: ethtool: not call vzalloc for zero sized memory request
- ALSA: seq: Fix OOB-reads from strlcpy
- ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type
- hv_netvsc: Fix unwanted wakeup after tx_disable
- arm64: dts: rockchip: fix rk3328 sdmmc0 write errors
- parisc: Detect QEMU earlier in boot process
- parisc: regs_return_value() should return gpr28
- alarmtimer: Return correct remaining time
- drm/udl: add a release method and delay modeset teardown
- include/linux/bitrev.h: fix constant bitrev
- ASoC: fsl_esai: fix channel swap issue when stream starts
- Btrfs: do not allow trimming when a fs is mounted with the nologreplay
option
- btrfs: prop: fix zstd compression parameter validation
- btrfs: prop: fix vanished compression property after failed set
- block: do not leak memory in bio_copy_user_iov()
- block: fix the return errno for direct IO
- genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent()
- genirq: Initialize request_mutex if CONFIG_SPARSE_IRQ=n
- virtio: Honour 'may_reduce_num' in vring_create_virtqueue
- ARM: dts: am335x-evmsk: Correct the regulators for the audio codec
- ARM: dts: am335x-evm: Correct the regulators for the audio codec
- ARM: dts: at91: Fix typo in ISC_D0 on PC9
- arm64: futex: Fix FUTEX_WAKE_OP atomic ops with non-zero result value
- arm64: dts: rockchip: fix rk3328 rgmii high tx error rate
- arm64: backtrace: Don't bother trying to unwind the userspace stack
- xen: Prevent buffer overflow in privcmd ioctl
- sched/fair: Do not re-read ->h_load_next during hierarchical load
calculation
- xtensa: fix return_address
- x86/perf/amd: Resolve race condition when disabling PMC
- x86/perf/amd: Resolve NMI latency issues for active PMCs
- x86/perf/amd: Remove need to check "running" bit in NMI handler
- PCI: Add function 1 DMA alias quirk for Marvell 9170 SATA controller
- dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors
- arm64: dts: rockchip: fix vcc_host1_5v pin assign on rk3328-rock64
- arm64: dts: rockchip: Fix vcc_host1_5v GPIO polarity on rk3328-rock64
- tcp: fix a potential NULL pointer dereference in tcp_sk_exit
- nfp: disable netpoll on representors
- r8169: disable default rx interrupt coalescing on RTL8168
- kbuild: deb-pkg: fix bindeb-pkg breakage when O= is used
- ACPICA: Namespace: remove address node from global list after method
termination
- ALSA: hda/realtek - Add quirk for Tuxedo XC 1509
- mm/huge_memory.c: fix modifying of page protection by insert_pfn_pmd()
- riscv: Fix syscall_get_arguments() and syscall_set_arguments()
- x86/asm: Remove dead __GNUC__ conditionals
- dm integrity: change memcmp to strncmp in dm_integrity_ctr
* Bionic update: upstream stable patchset 2019-07-25 (LP: #1837952)
- ACPICA: Reference Counts: increase max to 0x4000 for large servers
- gro_cells: make sure device is up in gro_cells_receive()
- ipv4/route: fail early when inet dev is missing
- l2tp: fix infoleak in l2tp_ip6_recvmsg()
- net: hsr: fix memory leak in hsr_dev_finalize()
- net/hsr: fix possible crash in add_timer()
- net: sit: fix UBSAN Undefined behaviour in check_6rd
- net/x25: fix use-after-free in x25_device_event()
- net/x25: reset state in x25_connect()
- pptp: dst_release sk_dst_cache in pptp_sock_destruct
- ravb: Decrease TxFIFO depth of Q3 and Q2 to one
- route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race
- rxrpc: Fix client call queueing, waiting for channel
- tcp: Don't access TCP_SKB_CB before initializing it
- tcp: handle inet_csk_reqsk_queue_add() failures
- vxlan: Fix GRO cells race condition between receive and link delete
- vxlan: test dev->flags & IFF_UP before calling gro_cells_receive()
- net/mlx4_core: Fix reset flow when in command polling mode
- net/mlx4_core: Fix locking in SRIOV mode when switching between events and
polling
- net/mlx4_core: Fix qp mtt size calculation
- net/x25: fix a race in x25_bind()
- net: Set rtm_table to RT_TABLE_COMPAT for ipv6 for tables > 255
- bonding: fix PACKET_ORIGDEV regression
- missing barriers in some of unix_sock ->addr and ->path accesses
- ipvlan: disallow userns cap_net_admin to change global mode/flags
- perf/x86: Fixup typo in stub functions
- ALSA: bebob: use more identical mod_alias for Saffire Pro 10 I/O against
Liquid Saffire 56
- ALSA: firewire-motu: fix construction of PCM frame for capture direction
- perf/x86/intel: Fix memory corruption
- perf/x86/intel: Make dev_attr_allow_tsx_force_abort static
- It's wrong to add len to sector_nr in raid10 reshape twice
- sctp: remove sched init from sctp_stream_init
- team: use operstate consistently for linkup
- ipv6: route: enforce RCU protection in rt6_update_exception_stamp_rt()
- ALSA: hda - add more quirks for HP Z2 G4 and HP Z240
- ALSA: hda/realtek: Enable audio jacks of ASUS UX362FA with ALC294
- i40e: report correct statistics when XDP is enabled
- 9p: use inode->i_lock to protect i_size_write() under 32-bit
- 9p/net: fix memory leak in p9_client_create
- ASoC: fsl_esai: fix register setting issue in RIGHT_J mode
- iio: adc: exynos-adc: Fix NULL pointer exception on unbind
- stm class: Fix an endless loop in channel allocation
- crypto: caam - fixed handling of sg list
- crypto: ahash - fix another early termination in hash walk
- crypto: rockchip - fix scatterlist nents error
- crypto: rockchip - update new iv to device in multiple operations
- drm/imx: ignore plane updates on disabled crtcs
- gpu: ipu-v3: Fix i.MX51 CSI control registers offset
- drm/imx: imx-ldb: add missing of_node_puts
- gpu: ipu-v3: Fix CSI offsets for imx53
- s390/dasd: fix using offset into zero size array error
- Input: pwm-vibra - prevent unbalanced regulator
- Input: pwm-vibra - stop regulator after disabling pwm, not before
- ARM: OMAP2+: Variable "reg" in function omap4_dsi_mux_pads() could be
uninitialized
- ASoC: dapm: fix out-of-bounds accesses to DAPM lookup tables
- ASoC: rsnd: fixup rsnd_ssi_master_clk_start() user count check
- KVM: arm/arm64: Reset the VCPU without preemption and vcpu state loaded
- ARM: OMAP2+: fix lack of timer interrupts on CPU1 after hotplug
- Input: cap11xx - switch to using set_brightness_blocking()
- Input: ps2-gpio - flush TX work when closing port
- Input: matrix_keypad - use flush_delayed_work()
- mac80211: Fix Tx aggregation session tear down with ITXQs
- ipvs: fix dependency on nf_defrag_ipv6
- floppy: check_events callback should not return a negative number
- NFS: Don't use page_file_mapping after removing the page
- mm/gup: fix gup_pmd_range() for dax
- Revert "mm: use early_pfn_to_nid in page_ext_init"
- mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs
- net: hns: Fix object reference leaks in hns_dsaf_roce_reset()
- i2c: cadence: Fix the hold bit setting
- i2c: bcm2835: Clear current buffer pointers and counts after a transfer
- auxdisplay: ht16k33: fix potential user-after-free on module unload
- Input: st-keyscan - fix potential zalloc NULL dereference
- clk: sunxi-ng: v3s: Fix TCON reset de-assert bit
- clk: sunxi: A31: Fix wrong AHB gate number
- esp: Skip TX bytes accounting when sending from a request socket
- ARM: 8824/1: fix a migrating irq bug when hotplug cpu
- af_key: unconditionally clone on broadcast
- assoc_array: Fix shortcut creation
- keys: Fix dependency loop between construction record and auth key
- scsi: libiscsi: Fix race between iscsi_xmit_task and iscsi_complete_task
- net: systemport: Fix reception of BPDUs
- pinctrl: meson: meson8b: fix the sdxc_a data 1..3 pins
- qmi_wwan: apply SET_DTR quirk to Sierra WP7607
- net: mv643xx_eth: disable clk on error path in mv643xx_eth_shared_probe()
- mailbox: bcm-flexrm-mailbox: Fix FlexRM ring flush timeout issue
- ASoC: topology: free created components in tplg load error
- qed: Fix iWARP syn packet mac address validation.
- arm64: Relax GIC version check during early boot
- net: marvell: mvneta: fix DMA debug warning
- tmpfs: fix link accounting when a tmpfile is linked in
- ixgbe: fix older devices that do not support IXGBE_MRQC_L3L4TXSWEN
- ARCv2: lib: memcpy: fix doing prefetchw outside of buffer
- ARC: uacces: remove lp_start, lp_end from clobber list
- ARCv2: support manual regfile save on interrupts
- phonet: fix building with clang
- mac80211_hwsim: propagate genlmsg_reply return code
- net: thunderx: make CFG_DONE message to run through generic send-ack
sequence
- nfp: bpf: fix code-gen bug on BPF_ALU | BPF_XOR | BPF_K
- nfp: bpf: fix ALU32 high bits clearance bug
- net: set static variable an initial value in atl2_probe()
- tmpfs: fix uninitialized return value in shmem_link
- media: videobuf2-v4l2: drop WARN_ON in vb2_warn_zero_bytesused()
- stm class: Prevent division by zero
- libnvdimm/label: Clear 'updating' flag after label-set update
- libnvdimm, pfn: Fix over-trim in trim_pfn_device()
- libnvdimm/pmem: Honor force_raw for legacy pmem regions
- libnvdimm: Fix altmap reservation size calculation
- fix cgroup_do_mount() handling of failure exits
- crypto: arm/crct10dif - revert to C code for short inputs
- crypto: arm64/crct10dif - revert to C code for short inputs
- crypto: hash - set CRYPTO_TFM_NEED_KEY if ->setkey() fails
- crypto: testmgr - skip crc32c context test for ahash algorithms
- crypto: arm64/aes-ccm - fix logical bug in AAD MAC handling
- crypto: arm64/aes-ccm - fix bugs in non-NEON fallback routine
- CIFS: Do not reset lease state to NONE on lease break
- CIFS: Fix read after write for files with read caching
- tracing: Use strncpy instead of memcpy for string keys in hist triggers
- tracing: Do not free iter->trace in fail path of tracing_open_pipe()
- xen: fix dom0 boot on huge systems
- ACPI / device_sysfs: Avoid OF modalias creation for removed device
- mmc: sdhci-esdhc-imx: fix HS400 timing issue
- spi: ti-qspi: Fix mmap read when more than one CS in use
- spi: pxa2xx: Setup maximum supported DMA transfer length
- regulator: s2mps11: Fix steps for buck7, buck8 and LDO35
- regulator: max77620: Initialize values for DT properties
- regulator: s2mpa01: Fix step values for some LDOs
- clocksource/drivers/exynos_mct: Move one-shot check from tick clear to ISR
- clocksource/drivers/exynos_mct: Clear timer interrupt when shutdown
- s390/setup: fix early warning messages
- s390/virtio: handle find on invalid queue gracefully
- scsi: virtio_scsi: don't send sc payload with tmfs
- scsi: aacraid: Fix performance issue on logical drives
- scsi: sd: Optimal I/O size should be a multiple of physical block size
- scsi: target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock
- fs/devpts: always delete dcache dentry-s in dput()
- splice: don't merge into linked buffers
- m68k: Add -ffreestanding to CFLAGS
- Btrfs: setup a nofs context for memory allocation at __btrfs_set_acl
- btrfs: ensure that a DUP or RAID1 block group has exactly two stripes
- Btrfs: fix corruption reading shared and compressed extents after hole
punching
- crypto: pcbc - remove bogus memcpy()s with src == dest
- libertas_tf: don't set URB_ZERO_PACKET on IN USB transfer
- irqchip/gic-v3-its: Avoid parsing _indirect_ twice for Device table
- x86/kprobes: Prohibit probing on optprobe template code
- cpufreq: tegra124: add missing of_node_put()
- cpufreq: pxa2xx: remove incorrect __init annotation
- ext4: add mask of ext4 flags to swap
- ext4: fix crash during online resizing
- IB/hfi1: Close race condition on user context disable and close
- cxl: Wrap iterations over afu slices inside 'afu_list_lock'
- ext2: Fix underflow in ext2_max_size()
- clk: uniphier: Fix update register for CPU-gear
- clk: clk-twl6040: Fix imprecise external abort for pdmclk
- clk: ingenic: Fix round_rate misbehaving with non-integer dividers
- clk: ingenic: Fix doc of ingenic_cgu_div_info
- usb: chipidea: tegra: Fix missed ci_hdrc_remove_device()
- nfit: acpi_nfit_ctl(): Check out_obj->type in the right place
- mm: hwpoison: fix thp split handing in soft_offline_in_use_page()
- mm/vmalloc: fix size check for remap_vmalloc_range_partial()
- kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv
- device property: Fix the length used in PROPERTY_ENTRY_STRING()
- intel_th: Don't reference unassigned outputs
- parport_pc: fix find_superio io compare code, should use equal test.
- i2c: tegra: fix maximum transfer size
- crypto: arm64/aes-neonbs - fix returning final keystream block
- drm/i915: Relax mmap VMA check
- serial: uartps: Fix stuck ISR if RX disabled with non-empty FIFO
- serial: 8250_of: assume reg-shift of 2 for mrvl,mmp-uart
- serial: 8250_pci: Fix number of ports for ACCES serial cards
- serial: 8250_pci: Have ACCES cards that use the four port Pericom PI7C9X7954
chip use the pci_pericom_setup()
- jbd2: clear dirty flag when revoking a buffer from an older transaction
- jbd2: fix compile warning when using JBUFFER_TRACE
- security/selinux: fix SECURITY_LSM_NATIVE_LABELS on reused superblock
- powerpc/32: Clear on-stack exception marker upon exception return
- powerpc/wii: properly disable use of BATs when requested.
- powerpc/powernv: Make opal log only readable by root
- powerpc/83xx: Also save/restore SPRG4-7 during suspend
- powerpc: Fix 32-bit KVM-PR lockup and host crash with MacOS guest
- powerpc/ptrace: Simplify vr_get/set() to avoid GCC warning
- powerpc/hugetlb: Don't do runtime allocation of 16G pages in LPAR
configuration
- powerpc/traps: fix recoverability of machine check handling on book3s/32
- powerpc/traps: Fix the message printed when stack overflows
- ARM: s3c24xx: Fix boolean expressions in osiris_dvs_notify
- arm64: Fix HCR.TGE status for NMI contexts
- arm64: debug: Ensure debug handlers check triggering exception level
- arm64: KVM: Fix architecturally invalid reset value for FPEXC32_EL2
- dm: fix to_sector() for 32bit
- dm integrity: limit the rate of error messages
- cpcap-charger: generate events for userspace
- NFS: Fix I/O request leakages
- NFS: Fix an I/O request leakage in nfs_do_recoalesce
- NFS: Don't recoalesce on error in nfs_pageio_complete_mirror()
- nfsd: fix memory corruption caused by readdir
- nfsd: fix wrong check in write_v4_end_grace()
- NFSv4.1: Reinitialise sequence results before retransmitting a request
- PM / wakeup: Rework wakeup source timer cancellation
- x86/unwind/orc: Fix ORC unwind table alignment
- perf intel-pt: Fix CYC timestamp calculation after OVF
- perf auxtrace: Define auxtrace record alignment
- perf intel-pt: Fix overlap detection to identify consecutive buffers
correctly
- perf intel-pt: Fix overlap calculation for padding
- perf intel-pt: Fix divide by zero when TSC is not available
- md: Fix failed allocation of md_register_thread
- tpm/tpm_crb: Avoid unaligned reads in crb_recv()
- tpm: Unify the send callback behaviour
- rcu: Do RCU GP kthread self-wakeup from softirq and interrupt
- media: imx: prpencvf: Stop upstream before disabling IDMA channel
- media: uvcvideo: Avoid NULL pointer dereference at the end of streaming
- media: vimc: Add vimc-streamer for stream control
- media: imx: csi: Disable CSI immediately after last EOF
- media: imx: csi: Stop upstream before disabling IDMA channel
- drm/radeon/evergreen_cs: fix missing break in switch statement
- KVM: Call kvm_arch_memslots_updated() before updating memslots
- KVM: x86/mmu: Detect MMIO generation wrap in any address space
- KVM: x86/mmu: Do not cache MMIO accesses while memslots are in flux
- KVM: nVMX: Sign extend displacements of VMX instr's mem operands
- KVM: nVMX: Apply addr size mask to effective address for VMX instructions
- KVM: nVMX: Ignore limit checks on VMX instructions using flat segments
- s390/setup: fix boot crash for machine without EDAT-1
- crypto: caam - fix hash context DMA unmap size
- crypto: caam - fix DMA mapping of stack memory
- KVM: arm/arm64: vgic: Make vgic_dist->lpi_list_lock a raw_spinlock
- arm/arm64: KVM: Allow a VCPU to fully reset itself
- arm/arm64: KVM: Don't panic on failure to properly reset system registers
- ASoC: samsung: Prevent clk_get_rate() calls in atomic context
- mac80211: call drv_ibss_join() on restart
- blk-mq: insert rq with DONTPREP to hctx dispatch list when requeue
- xprtrdma: Make sure Send CQ is allocated on an existing compvec
- net: dsa: bcm_sf2: potential array overflow in bcm_sf2_sw_suspend()
- x86/CPU: Add Icelake model number
- kallsyms: Handle too long symbols in kallsyms.c
- ARM: 8835/1: dma-mapping: Clear DMA ops on teardown
- net: dsa: bcm_sf2: Do not assume DSA master supports WoL
- qed: Fix iWARP buffer size provided for syn packet processing.
- mm: handle lru_add_drain_all for UP properly
- ARCv2: don't assume core 0x54 has dual issue
- bpf, lpm: fix lookup bug in map_delete_elem
- acpi/nfit: Fix bus command validation
- mmc:fix a bug when max_discard is 0
- netfilter: ipt_CLUSTERIP: fix warning unused variable cn
- [Config] updateconfigs for CONFIG_SUN50I_ERRATUM_UNKNOWN1
- clocksource/drivers/arch_timer: Workaround for Allwinner A64 timer
instability
- irqchip/brcmstb-l2: Use _irqsave locking variants in non-interrupt code
- ext4: fix check of inode in swap_inode_boot_loader
- ext4: cleanup pagecache before swap i_data
- ext4: update quota information while swapping boot loader inode
- dmaengine: usb-dmac: Make DMAC system sleep callbacks explicit
- mm/memory.c: do_fault: avoid usage of stale vm_area_struct
- media: i2c: ov5640: Fix post-reset delay
- powerpc/powernv: Don't reprogram SLW image on every KVM guest entry/exit
- mfd: sm501: Fix potential NULL pointer dereference
- nfsd: fix performance-limiting session calculation
- svcrpc: fix UDP on servers with lots of threads
- stable-kernel-rules.rst: add link to networking patch queue
- bcache: use (REQ_META|REQ_PRIO) to indicate bio for metadata
* Bionic update: upstream stable patchset 2019-07-24 (LP: #1837813)
- dt-bindings: eeprom: at24: add "atmel,24c2048" compatible string
- eeprom: at24: add support for 24c2048
- blk-mq: fix a hung issue when fsync
- ARM: 8789/1: signal: copy registers using __copy_to_user()
- ARM: 8790/1: signal: always use __copy_to_user to save iwmmxt context
- ARM: 8791/1: vfp: use __copy_to_user() when saving VFP state
- ARM: 8792/1: oabi-compat: copy oabi events using __copy_to_user()
- ARM: 8793/1: signal: replace __put_user_error with __put_user
- ARM: 8794/1: uaccess: Prevent speculative use of the current addr_limit
- ARM: 8795/1: spectre-v1.1: use put_user() for __put_user()
- ARM: 8796/1: spectre-v1,v1.1: provide helpers for address sanitization
- ARM: 8797/1: spectre-v1.1: harden __copy_to_user
- ARM: 8810/1: vfp: Fix wrong assignement to ufp_exc
- ARM: make lookup_processor_type() non-__init
- ARM: split out processor lookup
- ARM: clean up per-processor check_bugs method call
- ARM: add PROC_VTABLE and PROC_TABLE macros
- ARM: spectre-v2: per-CPU vtables to work around big.Little systems
- ARM: ensure that processor vtables is not lost after boot
- ARM: fix the cockup in the previous patch
- ACPI: NUMA: Use correct type for printing addresses on i386-PAE
- perf test shell: Use a fallback to get the pathname in vfs_getname
- cpufreq: check if policy is inactive early in __cpufreq_get()
- drm/bridge: tc358767: add defines for DP1_SRCCTRL & PHY_2LANE
- drm/bridge: tc358767: fix single lane configuration
- drm/bridge: tc358767: fix initial DP0/1_SRCCTRL value
- drm/bridge: tc358767: reject modes which require too much BW
- drm/bridge: tc358767: fix output H/V syncs
- nvme-pci: use the same attributes when freeing host_mem_desc_bufs.
- ARM: dts: da850-evm: Correct the sound card name
- ARM: dts: da850-lcdk: Correct the sound card name
- ARM: dts: kirkwood: Fix polarity of GPIO fan lines
- gpio: pl061: handle failed allocations
- drm/nouveau: Don't disable polling in fallback mode
- drm/nouveau/falcon: avoid touching registers if engine is off
- cifs: Limit memory used by lock request calls to a page
- Revert "Input: elan_i2c - add ACPI ID for touchpad in ASUS Aspire F5-573G"
- Input: elan_i2c - add ACPI ID for touchpad in Lenovo V330-15ISK
- perf/core: Fix impossible ring-buffer sizes warning
- perf/x86: Add check_period PMU callback
- ALSA: hda - Add quirk for HP EliteBook 840 G5
- ALSA: usb-audio: Fix implicit fb endpoint setup by quirk
- kvm: vmx: Fix entry number check for add_atomic_switch_msr()
- Input: bma150 - register input device after setting private data
- Input: elantech - enable 3rd button support on Fujitsu CELSIUS H780
- mm: proc: smaps_rollup: fix pss_locked calculation
- alpha: fix page fault handling for r16-r18 targets
- alpha: Fix Eiger NR_IRQS to 128
- tracing/uprobes: Fix output for multiple string arguments
- x86/platform/UV: Use efi_runtime_lock to serialise BIOS calls
- signal: Restore the stop PTRACE_EVENT_EXIT
- md/raid1: don't clear bitmap bits on interrupted recovery.
- x86/a.out: Clear the dump structure initially
- dm crypt: don't overallocate the integrity tag space
- dm thin: fix bug where bio that overwrites thin block ignores FUA
- drm/i915: Prevent a race during I915_GEM_MMAP ioctl with WC set
- perf report: Fix wrong iteration count in --branch-history
- riscv: fix trace_sys_exit hook
- ARM: dts: da850-lcdk: Correct the audio codec regulators
- ARM: OMAP5+: Fix inverted nirq pin interrupts with irq_set_type
- ASoC: hdmi-codec: fix oops on re-probe
- riscv: Add pte bit to distinguish swap from invalid
- mmc: sunxi: Filter out unsupported modes declared in the device tree
- s390/zcrypt: fix specification exception on z196 during ap probe
- drm/i915: Block fbdev HPD processing during suspend
- dsa: mv88e6xxx: Ensure all pending interrupts are handled prior to exit
- net: fix IPv6 prefix route residue
- net: ipv4: use a dedicated counter for icmp_v4 redirect packets
- vsock: cope with memory allocation failure at socket creation time
- vxlan: test dev->flags & IFF_UP before calling netif_rx()
- hwmon: (lm80) Fix missing unlock on error in set_fan_div()
- mlxsw: __mlxsw_sp_port_headroom_set(): Fix a use of local variable
- net: Fix for_each_netdev_feature on Big endian
- net: phy: xgmiitorgmii: Support generic PHY status read
- net: stmmac: Fix a race in EEE enable callback
- net: stmmac: handle endianness in dwmac4_get_timestamp
- vhost: correctly check the return value of translate_desc() in log_used()
- net: Add header for usage of fls64()
- net: Do not allocate page fragments that are not skb aligned
- tcp: clear icsk_backoff in tcp_write_queue_purge()
- sunrpc: fix 4 more call sites that were using stack memory with a
scatterlist
- net/x25: do not hold the cpu too long in x25_new_lci()
- mISDN: fix a race in dev_expire_timer()
- ax25: fix possible use-after-free
- af_packet: fix raw sockets over 6in4 tunnel
- tcp: tcp_v4_err() should be more careful
- mmc: meson-gx: fix interrupt name
- ARM: 8834/1: Fix: kprobes: optimized kprobes illegal instruction
- tracing: Fix number of entries in trace header
- MIPS: eBPF: Always return sign extended 32b values
- mac80211: Restore vif beacon interval if start ap fails
- mac80211: Free mpath object when rhashtable insertion fails
- libceph: handle an empty authorize reply
- ceph: avoid repeatedly adding inode to mdsc->snap_flush_list
- numa: change get_mempolicy() to use nr_node_ids instead of MAX_NUMNODES
- proc, oom: do not report alien mms when setting oom_score_adj
- KEYS: allow reaching the keys quotas exactly
- mfd: ti_am335x_tscadc: Use PLATFORM_DEVID_AUTO while registering mfd cells
- pvcalls-back: set -ENOTCONN in pvcalls_conn_back_read
- mfd: twl-core: Fix section annotations on {,un}protect_pm_master
- mfd: db8500-prcmu: Fix some section annotations
- mfd: mt6397: Do not call irq_domain_remove if PMIC unsupported
- mfd: ab8500-core: Return zero in get_register_interruptible()
- mfd: bd9571mwv: Add volatile register to make DVFS work
- mfd: qcom_rpm: write fw_version to CTRL_REG
- mfd: wm5110: Add missing ASRC rate register
- mfd: tps65218: Use devm_regmap_add_irq_chip and clean up error path in
probe()
- mfd: mc13xxx: Fix a missing check of a register-read failure
- xen/pvcalls: remove set but not used variable 'intf'
- qed: Fix qed_chain_set_prod() for PBL chains with non power of 2 page count
- qed: Fix qed_ll2_post_rx_buffer_notify_fw() by adding a write memory barrier
- net: hns: Fix use after free identified by SLUB debug
- MIPS: ath79: Enable OF serial ports in the default config
- netfilter: nf_tables: fix leaking object reference count
- scsi: qla4xxx: check return code of qla4xxx_copy_from_fwddb_param
- scsi: isci: initialize shost fully before calling scsi_add_host()
- MIPS: jazz: fix 64bit build
- bpf: correctly set initial window on active Fast Open sender
- net: stmmac: Fix PCI module removal leak
- isdn: i4l: isdn_tty: Fix some concurrency double-free bugs
- scsi: ufs: Fix system suspend status
- scsi: qedi: Add ep_state for login completion on un-reachable targets
- always clear the X2APIC_ENABLE bit for PV guest
- drm/meson: add missing of_node_put
- atm: he: fix sign-extension overflow on large shift
- hwmon: (tmp421) Correct the misspelling of the tmp442 compatible attribute
in OF device ID table
- leds: lp5523: fix a missing check of return value of lp55xx_read
- bpf: bpf_setsockopt: reset sock dst on SO_MARK changes
- mlxsw: spectrum_switchdev: Do not treat static FDB entries as sticky
- net/mlx5e: Fix wrong (zero) TX drop counter indication for representor
- isdn: avm: Fix string plus integer warning from Clang
- batman-adv: fix uninit-value in batadv_interface_tx()
- ipv6: propagate genlmsg_reply return code
- net/mlx5e: Don't overwrite pedit action when multiple pedit used
- net/packet: fix 4gb buffer limit due to overflow check
- net: sfp: do not probe SFP module before we're attached
- sctp: call gso_reset_checksum when computing checksum in sctp_gso_segment
- team: avoid complex list operations in team_nl_cmd_options_set()
- sit: check if IPv6 enabled before calling ip6_err_gen_icmpv6_unreach()
- net/mlx4_en: Force CHECKSUM_NONE for short ethernet frames
- inet_diag: fix reporting cgroup classid and fallback to priority
- RDMA/srp: Rework SCSI device reset handling
- KEYS: user: Align the payload buffer
- KEYS: always initialize keyring_index_key::desc_len
- parisc: Fix ptrace syscall number modification
- ARCv2: Enable unaligned access in early ASM code
- ARC: U-boot: check arguments paranoidly
- ARC: define ARCH_SLAB_MINALIGN = 8
- net: validate untrusted gso packets without csum offload
- net: avoid false positives in untrusted gso validation
- Revert "bridge: do not add port to router list when receives query with
source 0.0.0.0"
- netfilter: nf_tables: fix flush after rule deletion in the same batch
- netfilter: nft_compat: use-after-free when deleting targets
- netfilter: ipv6: Don't preserve original oif for loopback address
- pinctrl: max77620: Use define directive for max77620_pinconf_param values
- phy: tegra: remove redundant self assignment of 'map'
- net: phylink: avoid resolving link state too early
- gpio: pxa: avoid attempting to set pin direction via pinctrl on MMP2
- pvcalls-front: read all data before closing the connection
- pvcalls-front: don't try to free unallocated rings
- pvcalls-front: properly allocate sk
- mfd: cros_ec_dev: Add missing mfd_remove_devices() call in remove
- bpf: Fix [::] -> [::1] rewrite in sys_sendmsg
- watchdog: mt7621_wdt/rt2880_wdt: Fix compilation problem
- net/mlx4: Get rid of page operation after dma_alloc_coherent
- xprtrdma: Double free in rpcrdma_sendctxs_create()
- RDMA/mthca: Clear QP objects during their allocation
- powerpc/8xx: fix setting of pagetable for Abatron BDI debug tool.
- net: stmmac: Fix the logic of checking if RX Watchdog must be enabled
- scsi: ufs: Fix geometry descriptor size
- scsi: cxgb4i: add wait_for_completion()
- afs: Fix key refcounting in file locking code
- dpaa_eth: NETIF_F_LLTX requires to do our own update of trans_start
- mlxsw: pci: Return error on PCI reset timeout
- sctp: set stream ext to NULL after freeing it in sctp_stream_outq_migrate
- drm/amdgpu: Set DPM_FLAG_NEVER_SKIP when enabling PM-runtime
- gpu: drm: radeon: Set DPM_FLAG_NEVER_SKIP when enabling PM-runtime
- drm/amd/display: Fix MST reboot/poweroff sequence
- mac80211: allocate tailroom for forwarded mesh packets
- netfilter: ipt_CLUSTERIP: fix sleep-in-atomic bug in
clusterip_config_entry_put()
- net: stmmac: Fix reception of Broadcom switches tags
- drm/msm: Unblock writer if reader closes file
- ASoC: Intel: Haswell/Broadwell: fix setting for .dynamic field
- ALSA: compress: prevent potential divide by zero bugs
- ASoC: Variable "val" in function rt274_i2c_probe() could be uninitialized
- clk: vc5: Abort clock configuration without upstream clock
- thermal: int340x_thermal: Fix a NULL vs IS_ERR() check
- usb: dwc3: gadget: synchronize_irq dwc irq in suspend
- usb: dwc3: gadget: Fix the uninitialized link_state when udc starts
- usb: gadget: Potential NULL dereference on allocation error
- genirq: Make sure the initial affinity is not empty
- ASoC: dapm: change snprintf to scnprintf for possible overflow
- ASoC: imx-audmux: change snprintf to scnprintf for possible overflow
- selftests: seccomp: use LDLIBS instead of LDFLAGS
- selftests: gpio-mockup-chardev: Check asprintf() for error
- ARC: fix __ffs return value to avoid build warnings
- drivers: thermal: int340x_thermal: Fix sysfs race condition
- staging: rtl8723bs: Fix build error with Clang when inlining is disabled
- mac80211: fix miscounting of ttl-dropped frames
- sched/wait: Fix rcuwait_wake_up() ordering
- futex: Fix (possible) missed wakeup
- locking/rwsem: Fix (possible) missed wakeup
- drm/amd/powerplay: OD setting fix on Vega10
- serial: fsl_lpuart: fix maximum acceptable baud rate with over-sampling
- staging: android: ion: Support cpu access during dma_buf_detach
- direct-io: allow direct writes to empty inodes
- writeback: synchronize sync(2) against cgroup writeback membership switches
- scsi: csiostor: fix NULL pointer dereference in csio_vport_set_state()
- net: altera_tse: fix connect_local_phy error path
- hv_netvsc: Fix ethtool change hash key error
- net: usb: asix: ax88772_bind return error when hw_reset fail
- net: dev_is_mac_header_xmit() true for ARPHRD_RAWIP
- ibmveth: Do not process frames after calling napi_reschedule
- mac80211: don't initiate TDLS connection if station is not associated to AP
- mac80211: Add attribute aligned(2) to struct 'action'
- cfg80211: extend range deviation for DMG
- KVM: nSVM: clear events pending from svm_complete_interrupts() when exiting
to L1
- mmc: spi: Fix card detection during probe
- mmc: tmio_mmc_core: don't claim spurious interrupts
- mmc: tmio: fix access width of Block Count Register
- mmc: sdhci-esdhc-imx: correct the fix of ERR004536
- MIPS: fix truncation in __cmpxchg_small for short values
- MIPS: eBPF: Fix icache flush end address
- x86/uaccess: Don't leak the AC flag into __put_user() value evaluation
- irq/matrix: Split out the CPU selection code into a helper
- irq/matrix: Spread managed interrupts on allocation
- genirq/matrix: Improve target CPU selection for managed interrupts.
- clk: tegra: dfll: Fix a potential Oop in remove()
- selftests/vm/gup_benchmark.c: match gup struct to kernel
- ARC: show_regs: lockdep: avoid page allocator...
- sched/wake_q: Fix wakeup ordering for wake_q
- drm/sun4i: hdmi: Fix usage of TMDS clock
- scsi: lpfc: nvme: avoid hang / use-after-free when destroying localport
- scsi: lpfc: nvmet: avoid hang / use-after-free when destroying targetport
- mmc: core: Fix NULL ptr crash from mmc_should_fail_request
- drm: Block fb changes for async plane updates
- hugetlbfs: fix races and page leaks during migration
- MIPS: BCM63XX: provide DMA masks for ethernet devices
- cpufreq: Use struct kobj_attribute instead of struct global_attr
- USB: serial: option: add Telit ME910 ECM composition
- USB: serial: cp210x: add ID for Ingenico 3070
- USB: serial: ftdi_sio: add ID for Hjelmslund Electronics USB485
- staging: comedi: ni_660x: fix missing break in switch statement
- staging: wilc1000: fix to set correct value for 'vif_num'
- staging: android: ion: fix sys heap pool's gfp_flags
- ip6mr: Do not call __IP6_INC_STATS() from preemptible context
- net: dsa: mv88e6xxx: handle unknown duplex modes gracefully in
mv88e6xxx_port_set_duplex
- net-sysfs: Fix mem leak in netdev_register_kobject
- team: Free BPF filter when unregistering netdev
- tipc: fix RDM/DGRAM connect() regression
- bnxt_en: Drop oversize TX packets to prevent errors.
- hv_netvsc: Fix IP header checksum for coalesced packets
- net: dsa: mv88e6xxx: Fix statistics on mv88e6161
- net: dsa: mv88e6xxx: Fix u64 statistics
- netlabel: fix out-of-bounds memory accesses
- net: netem: fix skb length BUG_ON in __skb_to_sgvec
- net: phy: Micrel KSZ8061: link failure after cable connect
- net: phy: phylink: fix uninitialized variable in phylink_get_mac_state
- net: sit: fix memory leak in sit_init_net()
- tipc: fix race condition causing hung sendto
- tun: fix blocking read
- xen-netback: don't populate the hash cache on XenBus disconnect
- xen-netback: fix occasional leak of grant ref mappings under memory pressure
- tun: remove unnecessary memory barrier
- net: Add __icmp_send helper.
- net: avoid use IPCB in cipso_v4_error
- ipv4: Return error for RTA_VIA attribute
- ipv6: Return error for RTA_VIA attribute
- mpls: Return error for RTA_GATEWAY attribute
- net/sched: act_ipt: fix refcount leak when replace fails
- x86/CPU/AMD: Set the CPB bit unconditionally on F17h
- MIPS: irq: Allocate accurate order pages for irq stack
- xtensa: fix get_wchan
- Bluetooth: Fix locking in bt_accept_enqueue() for BH context
- scsi: core: reset host byte in DID_NEXUS_FAILURE case
- bpf: fix sanitation rewrite in case of non-pointers
- vti4: Fix a ipip packet processing bug in 'IPCOMP' virtual tunnel
- perf core: Fix perf_proc_update_handler() bug
- perf tools: Handle TOPOLOGY headers with no CPU
- IB/{hfi1, qib}: Fix WC.byte_len calculation for UD_SEND_WITH_IMM
- iommu/amd: Call free_iova_fast with pfn in map_sg
- iommu/amd: Unmap all mapped pages in error path of map_sg
- ipvs: Fix signed integer overflow when setsockopt timeout
- iommu/amd: Fix IOMMU page flush when detach device from a domain
- xtensa: SMP: fix ccount_timer_shutdown
- selftests: cpu-hotplug: fix case where CPUs offline > CPUs present
- xtensa: SMP: fix secondary CPU initialization
- xtensa: smp_lx200_defconfig: fix vectors clash
- xtensa: SMP: mark each possible CPU as present
- xtensa: SMP: limit number of possible CPUs by NR_CPUS
- net: altera_tse: fix msgdma_tx_completion on non-zero fill_level case
- net: hns: Fix for missing of_node_put() after of_parse_phandle()
- net: hns: Fix wrong read accesses via Clause 45 MDIO protocol
- net: stmmac: dwmac-rk: fix error handling in rk_gmac_powerup()
- netfilter: ebtables: compat: un-break 32bit setsockopt when no rules are
present
- gpio: vf610: Mask all GPIO interrupts
- selftests: timers: use LDLIBS instead of LDFLAGS
- nfs: Fix NULL pointer dereference of dev_name
- qed: Fix bug in tx promiscuous mode settings
- qed: Fix LACP pdu drops for VFs
- qed: Fix VF probe failure while FLR
- qed: Fix system crash in ll2 xmit
- qed: Fix stack out of bounds bug
- scsi: libfc: free skb when receiving invalid flogi resp
- scsi: 53c700: pass correct "dev" to dma_alloc_attrs()
- platform/x86: Fix unmet dependency warning for SAMSUNG_Q10
- cifs: fix computation for MAX_SMB2_HDR_SIZE
- x86/microcode/amd: Don't falsely trick the late loading mechanism
- arm64: kprobe: Always blacklist the KVM world-switch code
- apparmor: Fix aa_label_build() error handling for failed merges
- x86/kexec: Don't setup EFI info if EFI runtime is not enabled
- x86_64: increase stack size for KASAN_EXTRA
- mm, memory_hotplug: is_mem_section_removable do not pass the end of a zone
- mm, memory_hotplug: test_pages_in_a_zone do not pass the end of zone
- lib/test_kmod.c: potential double free in error handling
- fs/drop_caches.c: avoid softlockups in drop_pagecache_sb()
- autofs: drop dentry reference only when it is never used
- autofs: fix error return in autofs_fill_super()
- ARM: dts: omap4-droid4: Fix typo in cpcap IRQ flags
- arm64: dts: renesas: r8a7796: Enable DMA for SCIF2
- soc: fsl: qbman: avoid race in clearing QMan interrupt
- bpf: sock recvbuff must be limited by rmem_max in bpf_setsockopt()
- ARM: pxa: ssp: unneeded to free devm_ allocated data
- arm64: dts: add msm8996 compatible to gicv3
- DTS: CI20: Fix bugs in ci20's device tree.
- usb: phy: fix link errors
- irqchip/mmp: Only touch the PJ4 IRQ & FIQ bits on enable/disable
- net: stmmac: Fallback to Platform Data clock in Watchdog conversion
- net: stmmac: Send TSO packets always from Queue 0
- net: stmmac: Disable EEE mode earlier in XMIT callback
- irqchip/gic-v3-its: Fix ITT_entry_size accessor
- relay: check return of create_buf_file() properly
- bpf, selftests: fix handling of sparse CPU allocations
- bpf: fix lockdep false positive in percpu_freelist
- drm/sun4i: tcon: Prepare and enable TCON channel 0 clock at init
- dmaengine: at_xdmac: Fix wrongfull report of a channel as in use
- vsock/virtio: fix kernel panic after device hot-unplug
- vsock/virtio: reset connected sockets on device removal
- dmaengine: dmatest: Abort test in case of mapping error
- selftests: netfilter: fix config fragment CONFIG_NF_TABLES_INET
- selftests: netfilter: add simple masq/redirect test cases
- s390/qeth: fix use-after-free in error path
- perf symbols: Filter out hidden symbols from labels
- perf trace: Support multiple "vfs_getname" probes
- MIPS: Remove function size check in get_frame_info()
- i2c: omap: Use noirq system sleep pm ops to idle device for suspend
- fs: ratelimit __find_get_block_slow() failure message.
- qed: Fix EQ full firmware assert.
- qed: Consider TX tcs while deriving the max num_queues for PF.
- Input: wacom_serial4 - add support for Wacom ArtPad II tablet
- Input: elan_i2c - add id for touchpad found in Lenovo s21e-20
- iscsi_ibft: Fix missing break in switch statement
- scsi: aacraid: Fix missing break in switch statement
- arm64: dts: hikey: Give wifi some time after power-on
- ARM: dts: exynos: Fix pinctrl definition for eMMC RTSN line on Odroid X2/U3
- ARM: dts: exynos: Add minimal clkout parameters to Exynos3250 PMU
- drm: disable uncached DMA optimization for ARM and arm64
- ARM: 8781/1: Fix Thumb-2 syscall return for binutils 2.29+
- gfs2: Fix missed wakeups in find_insert_glock
- ath9k: Avoid OF no-EEPROM quirks without qca,no-eeprom
- perf/x86/intel: Make cpuc allocations consistent
- perf/x86/intel: Generalize dynamic constraint creation
- x86: Add TSX Force Abort CPUID/MSR
- perf/x86/intel: Implement support for TSX Force Abort
- perf script: Fix crash with printing mixed trace point and other events
- clk: ti: Fix error handling in ti_clk_parse_divider_data()
- riscv: Adjust mmap base address at a third of task size
- IB/ipoib: Fix for use-after-free in ipoib_cm_tx_start
- iomap: fix a use after free in iomap_dio_rw
- selftests: net: use LDLIBS instead of LDFLAGS
- scsi: scsi_debug: fix write_same with virtual_gb problem
- scsi: bnx2fc: Fix error handling in probe()
- ARM: OMAP: dts: N950/N9: fix onenand timings
- ARM: dts: sun8i: h3: Add ethernet0 alias to Beelink X2
- ARM: dts: imx6sx: correct backward compatible of gpt
- pinctrl: mcp23s08: spi: Fix regmap allocation for mcp23s18
- bpftool: Fix prog dump by tag
- bpftool: fix percpu maps updating
- batman-adv: release station info tidstats
- irqchip/gic-v4: Fix occasional VLPI drop
- s390/qeth: release cmd buffer in error paths
- nvme-pci: add missing unlock for reset error
- x86/PCI: Fixup RTIT_BAR of Intel Denverton Trace Hub
- ARM: dts: exynos: Fix max voltage for buck8 regulator on Odroid XU3/XU4
* Bionic update: upstream stable patchset 2019-07-23 (LP: #1837664)
- amd-xgbe: Fix mdio access for non-zero ports and clause 45 PHYs
- net: bridge: Fix ethernet header pointer before check skb forwardable
- net: Fix usage of pskb_trim_rcsum
- net: phy: mdio_bus: add missing device_del() in mdiobus_register() error
handling
- net_sched: refetch skb protocol for each filter
- openvswitch: Avoid OOB read when parsing flow nlattrs
- vhost: log dirty page correctly
- net: ipv4: Fix memory leak in network namespace dismantle
- tcp: allow MSG_ZEROCOPY transmission also in CLOSE_WAIT state
- mei: me: add denverton innovation engine device IDs
- USB: serial: simple: add Motorola Tetra TPG2200 device id
- USB: serial: pl2303: add new PID to support PL2303TB
- ASoC: atom: fix a missing check of snd_pcm_lib_malloc_pages
- ASoC: rt5514-spi: Fix potential NULL pointer dereference
- ARCv2: lib: memeset: fix doing prefetchw outside of buffer
- ARC: adjust memblock_reserve of kernel memory
- ARC: perf: map generic branches to correct hardware condition
- s390/smp: fix CPU hotplug deadlock with CPU rescan
- staging: rtl8188eu: Add device code for D-Link DWA-121 rev B1
- tty: Handle problem if line discipline does not have receive_buf
- uart: Fix crash in uart_write and uart_put_char
- tty/n_hdlc: fix __might_sleep warning
- hv_balloon: avoid touching uninitialized struct page during tail onlining
- Drivers: hv: vmbus: Check for ring when getting debug info
- CIFS: Fix possible hang during async MTU reads and writes
- CIFS: Fix credits calculations for reads with errors
- CIFS: Fix credit calculation for encrypted reads with errors
- CIFS: Do not reconnect TCP session in add_credits()
- Input: xpad - add support for SteelSeries Stratus Duo
- compiler.h: enable builtin overflow checkers and add fallback code
- Input: uinput - fix undefined behavior in uinput_validate_absinfo()
- acpi/nfit: Block function zero DSMs
- acpi/nfit: Fix command-supported detection
- dm thin: fix passdown_double_checking_shared_status()
- dm crypt: fix parsing of extended IV arguments
- KVM: x86: Fix single-step debugging
- x86/pkeys: Properly copy pkey state at fork()
- x86/selftests/pkeys: Fork() to check for state being preserved
- x86/kaslr: Fix incorrect i8254 outb() parameters
- posix-cpu-timers: Unbreak timer rearming
- irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size
- can: dev: __can_get_echo_skb(): fix bogous check for non-existing skb by
removing it
- can: bcm: check timer values before ktime conversion
- vt: invoke notifier on screen size change
- Revert "seccomp: add a selftest for get_metadata"
- s390/smp: Fix calling smp_call_ipl_cpu() from ipl CPU
- nvmet-rdma: Add unlikely for response allocated check
- nvmet-rdma: fix null dereference under heavy load
- usb: dwc3: gadget: Clear req->needs_extra_trb flag on cleanup
- x86/xen/time: Output xen sched_clock time from 0
- xen: Fix x86 sched_clock() interface for xen
- mlxsw: pci: Increase PCI SW reset timeout
- mlxsw: spectrum_fid: Update dummy FID index
- ASoC: tlv320aic32x4: Kernel OOPS while entering DAPM standby mode
- s390/mm: always force a load of the primary ASCE on context switch
- mmc: meson-gx: Free irq in release() callback
- vgacon: unconfuse vc_origin when using soft scrollback
- drm/amdgpu: Add APTX quirk for Lenovo laptop
- vt: always call notifier with the console lock held
- drm/meson: Fix atomic mode switching regression
- bpf: improve verifier branch analysis
- bpf: add per-insn complexity limit
- ipv6: Consider sk_bound_dev_if when binding a socket to an address
- ipv6: sr: clear IP6CB(skb) on SRH ip4ip6 encapsulation
- l2tp: copy 4 more bytes to linear part if necessary
- net/mlx4_core: Add masking for a few queries on HCA caps
- netrom: switch to sock timer API
- net/rose: fix NULL ax25_cb kernel panic
- net: set default network namespace in init_dummy_netdev()
- net/mlx5e: Allow MAC invalidation while spoofchk is ON
- Revert "net/mlx5e: E-Switch, Initialize eswitch only if eswitch manager"
- virtio_net: Don't enable NAPI when interface is down
- virtio_net: Don't call free_old_xmit_skbs for xdp_frames
- virtio_net: Fix not restoring real_num_rx_queues
- sctp: improve the events for sctp stream adding
- sctp: improve the events for sctp stream reset
- l2tp: remove l2specific_len dependency in l2tp_core
- l2tp: fix reading optional fields of L2TPv3
- ipvlan, l3mdev: fix broken l3s mode wrt local routes
- CIFS: Do not count -ENODATA as failure for query directory
- fs/dcache: Fix incorrect nr_dentry_unused accounting in shrink_dcache_sb()
- iommu/vt-d: Fix memory leak in intel_iommu_put_resv_regions()
- NFS: Fix up return value on fatal errors in nfs_page_async_flush()
- ARM: cns3xxx: Fix writing to wrong PCI config registers after alignment
- arm64: kaslr: ensure randomized quantities are clean also when kaslr is off
- arm64: hyp-stub: Forbid kprobing of the hyp-stub
- arm64: hibernate: Clean the __hyp_text to PoC after resume
- gpio: altera-a10sr: Set proper output level for direction_output
- gpio: pcf857x: Fix interrupts on multiple instances
- mmc: bcm2835: Fix DMA channel leak on probe error
- IB/hfi1: Remove overly conservative VM_EXEC flag check
- platform/x86: asus-nb-wmi: Map 0x35 to KEY_SCREENLOCK
- platform/x86: asus-nb-wmi: Drop mapping of 0x33 and 0x34 scan codes
- mmc: sdhci-iproc: handle mmc_of_parse() errors during probe
- kernel/exit.c: release ptraced tasks before zap_pid_ns_processes
- oom, oom_reaper: do not enqueue same task twice
- mm, oom: fix use-after-free in oom_kill_process
- mm: hwpoison: use do_send_sig_info() instead of force_sig()
- mm: migrate: don't rely on __PageMovable() of newpage after unlocking it
- md/raid5: fix 'out of memory' during raid cache recovery
- cifs: Always resolve hostname before reconnecting
- drivers: core: Remove glue dirs from sysfs earlier
- fanotify: fix handling of events on child sub-directory
- drm/msm/gpu: fix building without debugfs
- ravb: expand rx descriptor data to accommodate hw checksum
- tun: move the call to tun_set_real_num_queues
- sctp: set chunk transport correctly when it's a new asoc
- sctp: set flow sport from saddr only when it's 0
- virtio_net: Don't process redirected XDP frames when XDP is disabled
- CIFS: Do not consider -ENODATA as stat failure for reads
- mmc: mediatek: fix incorrect register setting of hs400_cmd_int_delay
- ALSA: usb-audio: Add Opus #3 to quirks for native DSD support
- Btrfs: fix deadlock when allocating tree block during leaf/node split
- mm/hugetlb.c: teach follow_hugetlb_page() to handle FOLL_NOWAIT
- mm,memory_hotplug: fix scan_movable_pages() for gigantic hugepages
- of: Convert to using %pOFn instead of device_node.name
- of: overlay: add tests to validate kfrees from overlay removal
- of: overlay: add missing of_node_get() in __of_attach_node_sysfs
- of: overlay: use prop add changeset entry for property in new nodes
- ucc_geth: Reset BQL queue when stopping device
- staging: iio: adc: ad7280a: handle error from __ad7280_read32()
- drm/vgem: Fix vgem_init to get drm device available.
- pinctrl: bcm2835: Use raw spinlock for RT compatibility
- ASoC: Intel: mrfld: fix uninitialized variable access
- gpu: ipu-v3: image-convert: Prevent race between run and unprepare
- ath9k: dynack: use authentication messages for 'late' ack
- scsi: lpfc: Correct LCB RJT handling
- scsi: mpt3sas: Call sas_remove_host before removing the target devices
- scsi: lpfc: Fix LOGO/PLOGI handling when triggerd by ABTS Timeout event
- ARM: 8808/1: kexec:offline panic_smp_self_stop CPU
- clk: boston: fix possible memory leak in clk_boston_setup()
- dlm: Don't swamp the CPU with callbacks queued during recovery
- x86/PCI: Fix Broadcom CNB20LE unintended sign extension (redux)
- powerpc/pseries: add of_node_put() in dlpar_detach_node()
- crypto: aes_ti - disable interrupts while accessing S-box
- drm/vc4: ->x_scaling[1] should never be set to VC4_SCALING_NONE
- serial: fsl_lpuart: clear parity enable bit when disable parity
- ptp: check gettime64 return code in PTP_SYS_OFFSET ioctl
- MIPS: Boston: Disable EG20T prefetch
- staging:iio:ad2s90: Make probe handle spi_setup failure
- fpga: altera-cvp: Fix registration for CvP incapable devices
- Tools: hv: kvp: Fix a warning of buffer overflow with gcc 8.0.1
- platform/chrome: don't report EC_MKBP_EVENT_SENSOR_FIFO as wakeup
- staging: iio: ad7780: update voltage on read
- usbnet: smsc95xx: fix rx packet alignment
- drm/rockchip: fix for mailbox read size
- ARM: OMAP2+: hwmod: Fix some section annotations
- net/mlx5: EQ, Use the right place to store/read IRQ affinity hint
- modpost: validate symbol names also in find_elf_symbol
- perf tools: Add Hygon Dhyana support
- soc/tegra: Don't leak device tree node reference
- media: mtk-vcodec: Release device nodes in mtk_vcodec_init_enc_pm()
- ptp: Fix pass zero to ERR_PTR() in ptp_clock_register
- dmaengine: xilinx_dma: Remove __aligned attribute on zynqmp_dma_desc_ll
- iio: adc: meson-saradc: check for devm_kasprintf failure
- iio: adc: meson-saradc: fix internal clock names
- iio: accel: kxcjk1013: Add KIOX010A ACPI Hardware-ID
- media: adv*/tc358743/ths8200: fill in min width/height/pixelclock
- ACPI: SPCR: Consider baud rate 0 as preconfigured state
- staging: pi433: fix potential null dereference
- f2fs: move dir data flush to write checkpoint process
- f2fs: fix race between write_checkpoint and write_begin
- f2fs: fix wrong return value of f2fs_acl_create
- i2c: sh_mobile: add support for r8a77990 (R-Car E3)
- arm64: io: Ensure calls to delay routines are ordered against prior readX()
- sunvdc: Do not spin in an infinite loop when vio_ldc_send() returns EAGAIN
- soc: bcm: brcmstb: Don't leak device tree node reference
- nfsd4: fix crash on writing v4_end_grace before nfsd startup
- drm: Clear state->acquire_ctx before leaving
drm_atomic_helper_commit_duplicated_state()
- arm64: io: Ensure value passed to __iormb() is held in a 64-bit register
- Thermal: do not clear passive state during system sleep
- firmware/efi: Add NULL pointer checks in efivars API functions
- s390/zcrypt: improve special ap message cmd handling
- arm64: ftrace: don't adjust the LR value
- ARM: dts: mmp2: fix TWSI2
- x86/fpu: Add might_fault() to user_insn()
- media: DaVinci-VPBE: fix error handling in vpbe_initialize()
- smack: fix access permissions for keyring
- usb: dwc3: Correct the logic for checking TRB full in
__dwc3_prepare_one_trb()
- usb: hub: delay hub autosuspend if USB3 port is still link training
- timekeeping: Use proper seqcount initializer
- usb: mtu3: fix the issue about SetFeature(U1/U2_Enable)
- clk: sunxi-ng: a33: Set CLK_SET_RATE_PARENT for all audio module clocks
- driver core: Move async_synchronize_full call
- kobject: return error code if writing /sys/.../uevent fails
- IB/hfi1: Unreserve a reserved request when it is completed
- usb: dwc3: trace: add missing break statement to make compiler happy
- pinctrl: sx150x: handle failure case of devm_kstrdup
- iommu/amd: Fix amd_iommu=force_isolation
- ARM: dts: Fix OMAP4430 SDP Ethernet startup
- mips: bpf: fix encoding bug for mm_srlv32_op
- media: coda: fix H.264 deblocking filter controls
- ARM: dts: Fix up the D-Link DIR-685 MTD partition info
- watchdog: renesas_wdt: don't set divider while watchdog is running
- usb: dwc3: gadget: Disable CSP for stream OUT ep
- iommu/arm-smmu: Add support for qcom,smmu-v2 variant
- iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer
- sata_rcar: fix deferred probing
- clk: imx6sl: ensure MMDC CH0 handshake is bypassed
- cpuidle: big.LITTLE: fix refcount leak
- OPP: Use opp_table->regulators to verify no regulator case
- i2c-axxia: check for error conditions first
- phy: sun4i-usb: add support for missing USB PHY index
- udf: Fix BUG on corrupted inode
- switchtec: Fix SWITCHTEC_IOCTL_EVENT_IDX_ALL flags overwrite
- selftests/bpf: use __bpf_constant_htons in test_prog.c
- ARM: pxa: avoid section mismatch warning
- ASoC: fsl: Fix SND_SOC_EUKREA_TLV320 build error on i.MX8M
- KVM: PPC: Book3S: Only report KVM_CAP_SPAPR_TCE_VFIO on powernv machines
- mmc: bcm2835: Recover from MMC_SEND_EXT_CSD
- mmc: bcm2835: reset host on timeout
- mmc: sdhci-of-esdhc: Fix timeout checks
- mmc: sdhci-xenon: Fix timeout checks
- tty: serial: samsung: Properly set flags in autoCTS mode
- perf test: Fix perf_event_attr test failure
- perf header: Fix unchecked usage of strncpy()
- perf probe: Fix unchecked usage of strncpy()
- arm64: KVM: Skip MMIO insn after emulation
- usb: musb: dsps: fix otg state machine
- percpu: convert spin_lock_irq to spin_lock_irqsave.
- powerpc/uaccess: fix warning/error with access_ok()
- mac80211: fix radiotap vendor presence bitmap handling
- xfrm6_tunnel: Fix spi check in __xfrm6_tunnel_alloc_spi
- mlxsw: spectrum: Properly cleanup LAG uppers when removing port from LAG
- scsi: smartpqi: correct host serial num for ssa
- scsi: smartpqi: correct volume status
- scsi: smartpqi: increase fw status register read timeout
- cw1200: Fix concurrency use-after-free bugs in cw1200_hw_scan()
- powerpc/perf: Fix thresholding counter data for unknown type
- drbd: narrow rcu_read_lock in drbd_sync_handshake
- drbd: disconnect, if the wrong UUIDs are attached on a connected peer
- drbd: skip spurious timeout (ping-timeo) when failing promote
- drbd: Avoid Clang warning about pointless switch statment
- video: clps711x-fb: release disp device node in probe()
- fbdev: fbmem: behave better with small rotated displays and many CPUs
- i40e: define proper net_device::neigh_priv_len
- ACPI/APEI: Clear GHES block_status before panic()
- fbdev: fbcon: Fix unregister crash when more than one framebuffer
- powerpc/mm: Fix reporting of kernel execute faults on the 8xx
- pinctrl: meson: meson8: fix the GPIO function for the GPIOAO pins
- pinctrl: meson: meson8b: fix the GPIO function for the GPIOAO pins
- KVM: x86: svm: report MSR_IA32_MCG_EXT_CTL as unsupported
- powerpc/fadump: Do not allow hot-remove memory from fadump reserved area.
- kvm: Change offset in kvm_write_guest_offset_cached to unsigned
- NFS: nfs_compare_mount_options always compare auth flavors.
- hwmon: (lm80) fix a missing check of the status of SMBus read
- hwmon: (lm80) fix a missing check of bus read in lm80 probe
- seq_buf: Make seq_buf_puts() null-terminate the buffer
- crypto: ux500 - Use proper enum in cryp_set_dma_transfer
- crypto: ux500 - Use proper enum in hash_set_dma_transfer
- MIPS: ralink: Select CONFIG_CPU_MIPSR2_IRQ_VI on MT7620/8
- cifs: check ntwrk_buf_start for NULL before dereferencing it
- um: Avoid marking pages with "changed protection"
- niu: fix missing checks of niu_pci_eeprom_read
- f2fs: fix sbi->extent_list corruption issue
- cgroup: fix parsing empty mount option string
- scripts/decode_stacktrace: only strip base path when a prefix of the path
- ocfs2: don't clear bh uptodate for block read
- ocfs2: improve ocfs2 Makefile
- isdn: hisax: hfc_pci: Fix a possible concurrency use-after-free bug in
HFCPCI_l1hw()
- gdrom: fix a memory leak bug
- fsl/fman: Use GFP_ATOMIC in {memac,tgec}_add_hash_mac_address()
- block/swim3: Fix -EBUSY error when re-opening device after unmount
- thermal: bcm2835: enable hwmon explicitly
- kdb: Don't back trace on a cpu that didn't round up
- thermal: generic-adc: Fix adc to temp interpolation
- HID: lenovo: Add checks to fix of_led_classdev_register
- kernel/hung_task.c: break RCU locks based on jiffies
- proc/sysctl: fix return error for proc_doulongvec_minmax()
- kernel/hung_task.c: force console verbose before panic
- fs/epoll: drop ovflist branch prediction
- scripts/gdb: fix lx-version string output
- thermal: hwmon: inline helpers when CONFIG_THERMAL_HWMON is not set
- dccp: fool proof ccid_hc_[rt]x_parse_options()
- enic: fix checksum validation for IPv6
- net: dp83640: expire old TX-skb
- rxrpc: bad unlock balance in rxrpc_recvmsg
- skge: potential memory corruption in skge_get_regs()
- rds: fix refcount bug in rds_sock_addref
- net: systemport: Fix WoL with password after deep sleep
- net/mlx5e: Force CHECKSUM_UNNECESSARY for short ethernet frames
- net: dsa: slave: Don't propagate flag changes on down slave interfaces
- ALSA: compress: Fix stop handling on compressed capture streams
- ALSA: hda - Serialize codec registrations
- dmaengine: bcm2835: Fix interrupt race on RT
- dmaengine: bcm2835: Fix abort of transactions
- dmaengine: imx-dma: fix wrong callback invoke
- futex: Handle early deadlock return correctly
- irqchip/gic-v3-its: Plug allocation race for devices sharing a DevID
- usb: phy: am335x: fix race condition in _probe
- usb: dwc3: gadget: Handle 0 xfer length for OUT EP
- usb: gadget: udc: net2272: Fix bitwise and boolean operations
- usb: gadget: musb: fix short isoc packets with inventra dma
- staging: speakup: fix tty-operation NULL derefs
- scsi: cxlflash: Prevent deadlock when adapter probe fails
- scsi: aic94xx: fix module loading
- cpu/hotplug: Fix "SMT disabled by BIOS" detection for KVM
- perf/x86/intel/uncore: Add Node ID mask
- x86/MCE: Initialize mce.bank in the case of a fatal error in
mce_no_way_out()
- perf/core: Don't WARN() for impossible ring-buffer sizes
- perf tests evsel-tp-sched: Fix bitwise operator
- serial: fix race between flush_to_ldisc and tty_open
- serial: 8250_pci: Make PCI class test non fatal
- IB/hfi1: Add limit test for RC/UC send via loopback
- perf/x86/intel: Delay memory deallocation until x86_pmu_dead_cpu()
- ath9k: dynack: make ewma estimation faster
- ath9k: dynack: check da->enabled first in sampling routines
- devres: Align data[] to ARCH_KMALLOC_MINALIGN
- genirq/affinity: Spread IRQs to all available NUMA nodes
- wil6210: fix memory leak in wil_find_tx_bcast_2
- fpga: altera-cvp: fix 'bad IO access' on x86_64
- drm/amd/display: calculate stream->phy_pix_clk before clock mapping
- net: aquantia: return 'err' if set MPI_DEINIT state fails
- perf: arm_spe: handle devm_kasprintf() failure
- xtensa: xtfpga.dtsi: fix dtc warnings about SPI
- media: imx274: select REGMAP_I2C
- drm/amdgpu/powerplay: fix clock stretcher limits on polaris (v2)
- tipc: fix node keep alive interval calculation
- mmc: meson-mx-sdio: check devm_kasprintf for failure
- mmc: sdhci-omap: Fix timeout checks
- mmc: jz4740: Get CD/WP GPIOs from descriptors
- usb: renesas_usbhs: add support for RZ/G2E
- i2c: sh_mobile: Add support for r8a774c0 (RZ/G2E)
- livepatch: check kzalloc return values
- usb: musb: dsps: fix runtime pm for peripheral mode
- perf header: Fix up argument to ctime()
- drm/amd/display: Add retry to read ddc_clock pin
- Bluetooth: hci_bcm: Handle deferred probing for the clock supply
- mlx5: update timecounter at least twice per counter overflow
- drm/amd/display: validate extended dongle caps
- perf build: Don't unconditionally link the libbfd feature test to -liberty
and -lz
- PCI: imx: Enable MSI from downstream components
- arm64/sve: ptrace: Fix SVE_PT_REGS_OFFSET definition
- kernel/kcov.c: mark write_comp_data() as notrace
- xfs: Fix xqmstats offsets in /proc/fs/xfs/xqmstat
- xfs: Fix error code in 'xfs_ioc_getbmap()'
- xfs: fix shared extent data corruption due to missing cow reservation
- xfs: fix transient reference count error in xfs_buf_resubmit_failed_buffers
- xfs: delalloc -> unwritten COW fork allocation can go wrong
- fs/xfs: fix f_ffree value for statfs when project quota is set
- lib/test_rhashtable: Make test_insert_dup() allocate its hash table
dynamically
- net: dsa: Fix lockdep false positive splat
- Revert "net: phy: marvell: avoid pause mode on SGMII-to-Copper for 88e151x"
- ALSA: hda/realtek - Fix lose hp_pins for disable auto mute
- serial: sh-sci: Do not free irqs that have already been freed
- mtd: rawnand: gpmi: fix MX28 bus master lockup problem
- iio: adc: axp288: Fix TS-pin handling
- iio: chemical: atlas-ph-sensor: correct IIO_TEMP values to millicelsius
- signal: Always notice exiting tasks
- signal: Better detection of synchronous signals
- misc: vexpress: Off by one in vexpress_syscfg_exec()
- samples: mei: use /dev/mei0 instead of /dev/mei
- debugfs: fix debugfs_rename parameter checking
- tracing: uprobes: Fix typo in pr_fmt string
- mips: cm: reprime error cause
- MIPS: OCTEON: don't set octeon_dma_bar_type if PCI is disabled
- MIPS: VDSO: Include $(ccflags-vdso) in o32,n32 .lds builds
- ARM: iop32x/n2100: fix PCI IRQ mapping
- ARM: tango: Improve ARCH_MULTIPLATFORM compatibility
- mac80211: ensure that mgmt tx skbs have tailroom for encryption
- drm/modes: Prevent division by zero htotal
- drm/vmwgfx: Fix setting of dma masks
- drm/vmwgfx: Return error code from vmw_execbuf_copy_fence_user
- HID: debug: fix the ring buffer implementation
- libceph: avoid KEEPALIVE_PENDING races in ceph_con_keepalive()
- xfrm: refine validation of template and selector families
- batman-adv: Avoid WARN on net_device without parent in netns
- batman-adv: Force mac header to start of data on xmit
- uio: Reduce return paths from uio_write()
- uio: Prevent device destruction while fds are open
- uio: change to use the mutex lock instead of the spin lock
- uio: fix crash after the device is unregistered
- uio: fix wrong return value from uio_mmap()
- uio: fix possible circular locking dependency
- mtd: Make sure mtd->erasesize is valid even if the partition is of size 0
- libata: Add NOLPM quirk for SAMSUNG MZ7TE512HMHP-000L1 SSD
- mips: loongson64: remove unreachable(), fix loongson_poweroff().
- SUNRPC: Always drop the XPRT_LOCK on XPRT_CLOSE_WAIT
* HP ProBook 470 G5, LED's in Hotkeys f5, f8 and f11 without function
(LP: #1811254) // Bionic update: upstream stable patchset 2019-07-23
(LP: #1837664)
- ALSA: hda - Add mute LED support for HP ProBook 470 G5
* Bionic update: upstream stable patchset 2019-07-22 (LP: #1837477)
- pinctrl: meson: fix pull enable register calculation
- powerpc: Fix COFF zImage booting on old powermacs
- powerpc/mm: Fix linux page tables build with some configs
- HID: ite: Add USB id match for another ITE based keyboard rfkill key quirk
- ARM: imx: update the cpu power up timing setting on i.mx6sx
- ARM: dts: imx7d-nitrogen7: Fix the description of the Wifi clock
- Input: restore EV_ABS ABS_RESERVED
- checkstack.pl: fix for aarch64
- xfrm: Fix error return code in xfrm_output_one()
- xfrm: Fix bucket count reported to userspace
- xfrm: Fix NULL pointer dereference in xfrm_input when skb_dst_force clears
the dst_entry.
- netfilter: seqadj: re-load tcp header pointer after possible head
reallocation
- scsi: bnx2fc: Fix NULL dereference in error handling
- Input: omap-keypad - fix idle configuration to not block SoC idle states
- Input: synaptics - enable RMI on ThinkPad T560
- ibmvnic: Fix non-atomic memory allocation in IRQ context
- ieee802154: ca8210: fix possible u8 overflow in ca8210_rx_done
- i40e: fix mac filter delete when setting mac address
- netfilter: ipset: do not call ipset_nest_end after nla_nest_cancel
- netfilter: nat: can't use dst_hold on noref dst
- bnx2x: Clear fip MAC when fcoe offload support is disabled
- bnx2x: Remove configured vlans as part of unload sequence.
- bnx2x: Send update-svid ramrod with retry/poll flags enabled
- scsi: target: iscsi: cxgbit: add missing spin_lock_init()
- x86, hyperv: remove PCI dependency
- drivers: net: xgene: Remove unnecessary forward declarations
- w90p910_ether: remove incorrect __init annotation
- SUNRPC: Fix a race with XPRT_CONNECTING
- qed: Fix an error code qed_ll2_start_xmit()
- net: macb: fix random memory corruption on RX with 64-bit DMA
- net: macb: fix dropped RX frames due to a race
- lan78xx: Resolve issue with changing MAC address
- vxge: ensure data0 is initialized in when fetching firmware version
information
- mac80211: free skb fraglist before freeing the skb
- kbuild: fix false positive warning/error about missing libelf
- virtio: fix test build after uio.h change
- gpio: mvebu: only fail on missing clk if pwm is actually to be used
- Input: synaptics - enable SMBus for HP EliteBook 840 G4
- net: netxen: fix a missing check and an uninitialized use
- qmi_wwan: Fix qmap header retrieval in qmimux_rx_fixup
- serial/sunsu: fix refcount leak
- scsi: zfcp: fix posting too many status read buffers leading to adapter
shutdown
- scsi: lpfc: do not set queue->page_count to 0 if pc_sli4_params.wqpcnt is
invalid
- tools: fix cross-compile var clobbering
- zram: fix double free backing device
- hwpoison, memory_hotplug: allow hwpoisoned pages to be offlined
- mm, devm_memremap_pages: mark devm_memremap_pages() EXPORT_SYMBOL_GPL
- mm, devm_memremap_pages: kill mapping "System RAM" support
- mm, hmm: use devm semantics for hmm_devmem_{add, remove}
- mm, hmm: mark hmm_devmem_{add, add_resource} EXPORT_SYMBOL_GPL
- mm, swap: fix swapoff with KSM pages
- sunrpc: fix cache_head leak due to queued request
- powerpc: avoid -mno-sched-epilog on GCC 4.9 and newer
- powerpc: Disable -Wbuiltin-requires-header when setjmp is used
- ftrace: Build with CPPFLAGS to get -Qunused-arguments
- kbuild: add -no-integrated-as Clang option unconditionally
- kbuild: consolidate Clang compiler flags
- Makefile: Export clang toolchain variables
- powerpc/boot: Set target when cross-compiling for clang
- raid6/ppc: Fix build for clang
- ALSA: cs46xx: Potential NULL dereference in probe
- ALSA: usb-audio: Avoid access before bLength check in build_audio_procunit()
- ALSA: usb-audio: Fix an out-of-bound read in create_composite_quirks
- dlm: fixed memory leaks after failed ls_remove_names allocation
- dlm: possible memory leak on error path in create_lkb()
- dlm: lost put_lkb on error path in receive_convert() and receive_unlock()
- dlm: memory leaks on error path in dlm_user_request()
- gfs2: Get rid of potential double-freeing in gfs2_create_inode
- b43: Fix error in cordic routine
- selinux: policydb - fix byte order and alignment issues
- scripts/kallsyms: filter arm64's __efistub_ symbols
- arm64: drop linker script hack to hide __efistub_ symbols
- arm64: relocatable: fix inconsistencies in linker script and options
- powerpc/tm: Set MSR[TS] just prior to recheckpoint
- 9p/net: put a lower bound on msize
- rxe: fix error completion wr_id and qp_num
- iommu/vt-d: Handle domain agaw being less than iommu agaw
- sched/fair: Fix infinite loop in update_blocked_averages() by reverting
a9e7f6544b9c
- ceph: don't update importing cap's mseq when handing cap export
- genwqe: Fix size check
- intel_th: msu: Fix an off-by-one in attribute store
- power: supply: olpc_battery: correct the temperature units
- lib: fix build failure in CONFIG_DEBUG_VIRTUAL test
- drm/vc4: Set ->is_yuv to false when num_planes == 1
- bnx2x: Fix NULL pointer dereference in bnx2x_del_all_vlans() on some hw
- tools: power/acpi, revert to LD = gcc
- ARM: dts: sun8i: a83t: bananapi-m3: increase vcc-pd voltage to 3.3V
- arm64: dts: mt7622: fix no more console output on rfb1
- ibmvnic: Convert reset work item mutex to spin lock
- ixgbe: Fix race when the VF driver does a reset
- net: macb: add missing barriers when reading descriptors
- powerpc: remove old GCC version checks
- Fix failure path in alloc_pid()
- block: deactivate blk_stat timer in wbt_disable_default()
- PCI / PM: Allow runtime PM without callback functions
- leds: pwm: silently error out on EPROBE_DEFER
- Revert "powerpc/tm: Unset MSR[TS] if not recheckpointing"
- iio: dac: ad5686: fix bit shift read register
- video: fbdev: pxafb: Fix "WARNING: invalid free of devm_ allocated data"
- drivers/perf: hisi: Fixup one DDRC PMU register offset
- drm/nouveau/drm/nouveau: Check rc from drm_dp_mst_topology_mgr_resume()
- drm/rockchip: psr: do not dereference encoder before it is null checked.
- CIFS: Fix adjustment of credits for MTU requests
- CIFS: Do not hide EINTR after sending network packets
- cifs: Fix potential OOB access of lock element array
- usb: cdc-acm: send ZLP for Telit 3G Intel based modems
- USB: storage: don't insert sane sense for SPC3+ when bad sense specified
- USB: storage: add quirk for SMI SM3350
- USB: Add USB_QUIRK_DELAY_CTRL_MSG quirk for Corsair K70 RGB
- slab: alien caches must not be initialized if the allocation of the alien
cache failed
- mm: page_mapped: don't assume compound page is huge or THP
- mm, memcg: fix reclaim deadlock with writeback
- ACPI: power: Skip duplicate power resource references in _PRx
- ACPI / PMIC: xpower: Fix TS-pin current-source handling
- i2c: dev: prevent adapter retries and timeout being set as minus value
- drm/fb-helper: Partially bring back workaround for bugs of SDL 1.2
- rbd: don't return 0 on unmap if RBD_DEV_FLAG_REMOVING is set
- ext4: make sure enough credits are reserved for dioread_nolock writes
- ext4: fix a potential fiemap/page fault deadlock w/ inline_data
- ext4: avoid kernel warning when writing the superblock to a dead device
- ext4: track writeback errors using the generic tracking infrastructure
- KVM: arm/arm64: Fix VMID alloc race by reverting to lock-less
- Btrfs: fix deadlock when using free space tree due to block group creation
- mm/usercopy.c: no check page span for stack objects
- vfio/type1: Fix unmap overflow off-by-one
- drm/amdgpu: Don't ignore rc from drm_dp_mst_topology_mgr_resume()
- ext4: fix special inode number checks in __ext4_iget()
- Btrfs: fix access to available allocation bits when starting balance
- Btrfs: use nofs context when initializing security xattrs to avoid deadlock
- tty/ldsem: Wake up readers after timed out down_write()
- can: gw: ensure DLC boundaries after CAN frame modification
- mmc: sdhci-msm: Disable CDR function on TX
- media: em28xx: Fix misplaced reset of dev->v4l::field_count
- scsi: target: iscsi: cxgbit: fix csk leak
- scsi: target: iscsi: cxgbit: fix csk leak
- arm64/kvm: consistently handle host HCR_EL2 flags
- arm64: Don't trap host pointer auth use to EL2
- ipv6: fix kernel-infoleak in ipv6_local_error()
- net: bridge: fix a bug on using a neighbour cache entry without checking its
state
- packet: Do not leak dev refcounts on error exit
- bonding: update nest level on unlink
- ip: on queued skb use skb_header_pointer instead of pskb_may_pull
- crypto: caam - fix zero-length buffer DMA mapping
- crypto: authencesn - Avoid twice completion call in decrypt path
- crypto: bcm - convert to use crypto_authenc_extractkeys()
- btrfs: wait on ordered extents on abort cleanup
- Yama: Check for pid death before checking ancestry
- scsi: core: Synchronize request queue PM status only on successful resume
- scsi: sd: Fix cache_type_store()
- crypto: talitos - reorder code in talitos_edesc_alloc()
- crypto: talitos - fix ablkcipher for CONFIG_VMAP_STACK
- mips: fix n32 compat_ipc_parse_version
- MIPS: lantiq: Fix IPI interrupt handling
- OF: properties: add missing of_node_put
- mfd: tps6586x: Handle interrupts on suspend
- media: v4l: ioctl: Validate num_planes for debug messages
- pstore/ram: Avoid allocation and leak of platform data
- arm64: kaslr: ensure randomized quantities are clean to the PoC
- Disable MSI also when pcie-octeon.pcie_disable on
- omap2fb: Fix stack memory disclosure
- media: vivid: fix error handling of kthread_run
- media: vivid: set min width/height to a value > 0
- bpf: in __bpf_redirect_no_mac pull mac only if present
- LSM: Check for NULL cred-security on free
- media: vb2: vb2_mmap: move lock up
- sunrpc: handle ENOMEM in rpcb_getport_async
- netfilter: ebtables: account ebt_table_info to kmemcg
- selinux: fix GPF on invalid policy
- blockdev: Fix livelocks on loop device
- sctp: allocate sctp_sockaddr_entry with kzalloc
- tipc: fix uninit-value in tipc_nl_compat_link_reset_stats
- tipc: fix uninit-value in tipc_nl_compat_bearer_enable
- tipc: fix uninit-value in tipc_nl_compat_link_set
- tipc: fix uninit-value in tipc_nl_compat_name_table_dump
- tipc: fix uninit-value in tipc_nl_compat_doit
- block/loop: Don't grab "struct file" for vfs_getattr() operation.
- loop: drop caches if offset or block_size are changed
- drm/fb-helper: Ignore the value of fb_var_screeninfo.pixclock
- media: vb2: be sure to unlock mutex on errors
- nbd: Use set_blocksize() to set device blocksize
- tun: publish tfile after it's fully initialized
- crypto: sm3 - fix undefined shift by >= width of value
- MIPS: BCM47XX: Setup struct device for the SoC
- RDMA/vmw_pvrdma: Return the correct opcode when creating WR
- arm64: dts: marvell: armada-ap806: reserve PSCI area
- ipv6: make icmp6_send() robust against null skb->dev
- block: use rcu_work instead of call_rcu to avoid sleep in softirq
- selftests: Fix test errors related to lib.mk khdr target
- ipv6: Consider sk_bound_dev_if when binding a socket to a v4 mapped address
- mlxsw: spectrum: Disable lag port TX before removing it
- mlxsw: spectrum_switchdev: Set PVID correctly during VLAN deletion
- net, skbuff: do not prefer skb allocation fails early
- qmi_wwan: add MTU default to qmap network interface
- ipv6: Take rcu_read_lock in __inet6_bind for mapped addresses
- net: dsa: mv88x6xxx: mv88e6390 errata
- gpio: pl061: Move irq_chip definition inside struct pl061
- platform/x86: asus-wmi: Tell the EC the OS will handle the display off
hotkey
- e1000e: allow non-monotonic SYSTIM readings
- writeback: don't decrement wb->refcnt if !wb->bdi
- serial: set suppress_bind_attrs flag only if builtin
- ALSA: oxfw: add support for APOGEE duet FireWire
- x86/mce: Fix -Wmissing-prototypes warnings
- MIPS: SiByte: Enable swiotlb for SWARM, LittleSur and BigSur
- arm64: perf: set suppress_bind_attrs flag to true
- usb: gadget: udc: renesas_usb3: add a safety connection way for
forced_b_device
- selinux: always allow mounting submounts
- rxe: IB_WR_REG_MR does not capture MR's iova field
- jffs2: Fix use of uninitialized delayed_work, lockdep breakage
- clk: imx: make mux parent strings const
- pstore/ram: Do not treat empty buffers as valid
- powerpc/xmon: Fix invocation inside lock region
- powerpc/pseries/cpuidle: Fix preempt warning
- media: firewire: Fix app_info parameter type in avc_ca{,_app}_info
- media: venus: core: Set dma maximum segment size
- net: call sk_dst_reset when set SO_DONTROUTE
- scsi: target: use consistent left-aligned ASCII INQUIRY data
- selftests: do not macro-expand failed assertion expressions
- clk: imx6q: reset exclusive gates on init
- arm64: Fix minor issues with the dcache_by_line_op macro
- kconfig: fix file name and line number of warn_ignored_character()
- kconfig: fix memory leak when EOF is encountered in quotation
- mmc: atmel-mci: do not assume idle after atmci_request_end
- btrfs: improve error handling of btrfs_add_link
- tty/serial: do not free trasnmit buffer page under port lock
- perf intel-pt: Fix error with config term "pt=0"
- perf svghelper: Fix unchecked usage of strncpy()
- perf parse-events: Fix unchecked usage of strncpy()
- netfilter: ipt_CLUSTERIP: check MAC address when duplicate config is set
- dm crypt: use u64 instead of sector_t to store iv_offset
- dm kcopyd: Fix bug causing workqueue stalls
- tools lib subcmd: Don't add the kernel sources to the include path
- dm snapshot: Fix excessive memory usage and workqueue stalls
- quota: Lock s_umount in exclusive mode for Q_XQUOTA{ON,OFF} quotactls.
- clocksource/drivers/integrator-ap: Add missing of_node_put()
- ALSA: bebob: fix model-id of unit for Apogee Ensemble
- sysfs: Disable lockdep for driver bind/unbind files
- IB/usnic: Fix potential deadlock
- scsi: smartpqi: correct lun reset issues
- scsi: smartpqi: call pqi_free_interrupts() in pqi_shutdown()
- scsi: megaraid: fix out-of-bound array accesses
- ocfs2: fix panic due to unrecovered local alloc
- mm/page-writeback.c: don't break integrity writeback on ->writepage() error
- mm/swap: use nr_node_ids for avail_lists in swap_info_struct
- mm, proc: be more verbose about unstable VMA flags in /proc/<pid>/smaps
- cifs: allow disabling insecure dialects in the config
- cifs: In Kconfig CONFIG_CIFS_POSIX needs depends on legacy (insecure cifs)
- PCI: dwc: Move interrupt acking into the proper callback
- ipmi:ssif: Fix handling of multi-part return messages
- net: clear skb->tstamp in bridge forwarding path
- netfilter: ipset: Allow matching on destination MAC address for mac and
ipmac sets
- drm/amdkfd: fix interrupt spin lock
- of: overlay: add missing of_node_put() after add new node to changeset
- drm/atomic-helper: Complete fake_commit->flip_done potentially earlier
- ASoC: pcm3168a: Don't disable pcm3168a when CONFIG_PM defined
- efi/libstub: Disable some warnings for x86{,_64}
- media: uvcvideo: Refactor teardown of uvc on USB disconnect
- arm64: kasan: Increase stack size for KASAN_EXTRA
- bpf: relax verifier restriction on BPF_MOV | BPF_ALU
- perf vendor events intel: Fix Load_Miss_Real_Latency on SKL/SKX
- netfilter: ipt_CLUSTERIP: remove wrong WARN_ON_ONCE in netns exit routine
- netfilter: ipt_CLUSTERIP: fix deadlock in netns exit routine
- x86/topology: Use total_cpus for max logical packages calculation
- perf stat: Avoid segfaults caused by negated options
- perf tools: Add missing sigqueue() prototype for systems lacking it
- perf tools: Add missing open_memstream() prototype for systems lacking it
- dm: Check for device sector overflow if CONFIG_LBDAF is not set
- userfaultfd: clear flag if remap event not enabled
* Bionic update: upstream stable patchset 2019-07-19 (LP: #1837257)
- pinctrl: sunxi: a83t: Fix IRQ offset typo for PH11
- userfaultfd: check VM_MAYWRITE was set after verifying the uffd is
registered
- arm64: dma-mapping: Fix FORCE_CONTIGUOUS buffer clearing
- MMC: OMAP: fix broken MMC on OMAP15XX/OMAP5910/OMAP310
- mmc: sdhci: fix the timeout check window for clock and reset
- ARM: mmp/mmp2: fix cpu_is_mmp2() on mmp2-dt
- dm thin: send event about thin-pool state change _after_ making it
- dm cache metadata: verify cache has blocks in
blocks_are_clean_separate_dirty()
- tracing: Fix memory leak in set_trigger_filter()
- tracing: Fix memory leak of instance function hash filters
- powerpc/msi: Fix NULL pointer access in teardown code
- drm/nouveau/kms: Fix memory leak in nv50_mstm_del()
- drm/i915/execlists: Apply a full mb before execution for Braswell
- drm/amdgpu: update SMC firmware image for polaris10 variants
- x86/build: Fix compiler support check for CONFIG_RETPOLINE
- locking: Remove smp_read_barrier_depends() from queued_spin_lock_slowpath()
- locking/qspinlock: Ensure node is initialised before updating prev->next
- locking/qspinlock: Bound spinning on pending->locked transition in slowpath
- locking/qspinlock: Merge 'struct __qspinlock' into 'struct qspinlock'
- locking/qspinlock: Remove unbounded cmpxchg() loop from locking slowpath
- locking/qspinlock: Remove duplicate clear_pending() function from PV code
- locking/qspinlock: Kill cmpxchg() loop when claiming lock from head of queue
- locking/qspinlock: Re-order code
- locking/qspinlock/x86: Increase _Q_PENDING_LOOPS upper bound
- locking/qspinlock, x86: Provide liveness guarantee
- mac80211: don't WARN on bad WMM parameters from buggy APs
- mac80211: Fix condition validating WMM IE
- IB/hfi1: Remove race conditions in user_sdma send path
- locking/qspinlock: Fix build for anonymous union in older GCC compilers
- mac80211_hwsim: fix module init error paths for netlink
- Input: hyper-v - fix wakeup from suspend-to-idle
- scsi: libiscsi: Fix NULL pointer dereference in iscsi_eh_session_reset
- scsi: vmw_pscsi: Rearrange code to avoid multiple calls to free_irq during
unload
- x86/earlyprintk/efi: Fix infinite loop on some screen widths
- drm/msm: Grab a vblank reference when waiting for commit_done
- ARC: io.h: Implement reads{x}()/writes{x}()
- bonding: fix 802.3ad state sent to partner when unbinding slave
- bpf: Fix verifier log string check for bad alignment.
- nfs: don't dirty kernel pages read by direct-io
- SUNRPC: Fix a potential race in xprt_connect()
- sbus: char: add of_node_put()
- drivers/sbus/char: add of_node_put()
- drivers/tty: add missing of_node_put()
- ide: pmac: add of_node_put()
- drm/msm: Fix error return checking
- clk: mvebu: Off by one bugs in cp110_of_clk_get()
- clk: mmp: Off by one in mmp_clk_add()
- Input: synaptics - enable SMBus for HP 15-ay000
- Input: omap-keypad - fix keyboard debounce configuration
- libata: whitelist all SAMSUNG MZ7KM* solid-state disks
- mv88e6060: disable hardware level MAC learning
- net/mlx4_en: Fix build break when CONFIG_INET is off
- ARM: 8814/1: mm: improve/fix ARM v7_dma_inv_range() unaligned address
handling
- ARM: 8815/1: V7M: align v7m_dma_inv_range() with v7 counterpart
- ethernet: fman: fix wrong of_node_put() in probe function
- drm/ast: Fix connector leak during driver unload
- vhost/vsock: fix reset orphans race with close timeout
- mlxsw: spectrum_switchdev: Fix VLAN device deletion via ioctl
- i2c: axxia: properly handle master timeout
- i2c: scmi: Fix probe error on devices with an empty SMB0001 ACPI device node
- i2c: uniphier: fix violation of tLOW requirement for Fast-mode
- i2c: uniphier-f: fix violation of tLOW requirement for Fast-mode
- nvmet-rdma: fix response use after free
- rtc: snvs: Add timeouts to avoid kernel lockups
- bpf, arm: fix emit_ldx_r and emit_mov_i using TMP_REG_1
- scsi: raid_attrs: fix unused variable warning
- staging: olpc_dcon: add a missing dependency
- ARM: dts: qcom-apq8064-arrow-sd-600eval fix graph_endpoint warning
- mmc: core: use mrq->sbc when sending CMD23 for RPMB
- dm: call blk_queue_split() to impose device limits on bios
- media: vb2: don't call __vb2_queue_cancel if vb2_start_streaming failed
- powerpc: Look for "stdout-path" when setting up legacy consoles
- dm zoned: Fix target BIO completion handling
- block: fix infinite loop if the device loses discard capability
- ASoC: sta32x: set ->component pointer in private struct
- perf record: Synthesize features before events in pipe mode
- USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data
- xhci: Don't prevent USB2 bus suspend in state check intended for USB3 only
- USB: xhci: fix 'broken_suspend' placement in struct xchi_hcd
- USB: serial: option: add GosunCn ZTE WeLink ME3630
- USB: serial: option: add HP lt4132
- USB: serial: option: add Simcom SIM7500/SIM7600 (MBIM mode)
- USB: serial: option: add Fibocom NL668 series
- USB: serial: option: add Telit LN940 series
- scsi: sd: use mempool for discard special page
- mmc: core: Reset HPI enabled state during re-init and in case of errors
- mmc: core: Allow BKOPS and CACHE ctrl even if no HPI support
- mmc: core: Use a minimum 1600ms timeout when enabling CACHE ctrl
- mmc: omap_hsmmc: fix DMA API warning
- gpio: max7301: fix driver for use with CONFIG_VMAP_STACK
- gpiolib-acpi: Only defer request_irq for GpioInt ACPI event handlers
- posix-timers: Fix division by zero bug
- kvm: x86: Add AMD's EX_CFG to the list of ignored MSRs
- Drivers: hv: vmbus: Return -EINVAL for the sys files for unopened channels
- x86/mtrr: Don't copy uninitialized gentry fields back to userspace
- panic: avoid deadlocks in re-entrant console drivers
- iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT to old firmwares
- iwlwifi: add new cards for 9560, 9462, 9461 and killer series
- ubifs: Handle re-linking of inodes correctly while recovery
- mm: don't miss the last page because of round-off error
- proc/sysctl: don't return ENOMEM on lookup when a table is unregistering
- i2c: rcar: check bus state before reinitializing
- drm/amd/display: Fix 6x4K displays light-up on Vega20 (v2)
- drm/msm: Fix task dump in gpu recovery
- drm/msm: fix handling of cmdstream offset
- net: aquantia: fix rx checksum offload bits
- liquidio: read sc->iq_no before release sc
- drm/msm/hdmi: Enable HPD after HDMI IRQ is set up
- macvlan: return correct error value
- bpf: check pending signals while verifying programs
- ARM: 8816/1: dma-mapping: fix potential uninitialized return
- tools/testing/nvdimm: Align test resources to 128M
- Btrfs: fix missing delayed iputs on unmount
- ax25: fix a use-after-free in ax25_fillin_cb()
- gro_cell: add napi_disable in gro_cells_destroy
- ibmveth: fix DMA unmap error in ibmveth_xmit_start error path
- ieee802154: lowpan_header_create check must check daddr
- ipv6: explicitly initialize udp6_addr in udp_sock_create6()
- ipv6: tunnels: fix two use-after-free
- isdn: fix kernel-infoleak in capi_unlocked_ioctl
- net: macb: restart tx after tx used bit read
- net: phy: Fix the issue that netif always links up after resuming
- netrom: fix locking in nr_find_socket()
- net/wan: fix a double free in x25_asy_open_tty()
- packet: validate address length
- packet: validate address length if non-zero
- ptr_ring: wrap back ->producer in __ptr_ring_swap_queue()
- qmi_wwan: Added support for Telit LN940 series
- sctp: initialize sin6_flowinfo for ipv6 addrs in sctp_inet6addr_event
- tcp: fix a race in inet_diag_dump_icsk()
- tipc: fix a double kfree_skb()
- vhost: make sure used idx is seen before log in vhost_add_used_n()
- VSOCK: Send reset control packet when socket is partially bound
- xen/netfront: tolerate frags with no data
- net/mlx5: Typo fix in del_sw_hw_rule
- net/mlx5e: RX, Fix wrong early return in receive queue poll
- mlxsw: core: Increase timeout during firmware flash process
- net/mlx5e: Remove the false indication of software timestamping support
- tipc: use lock_sock() in tipc_sk_reinit()
- tipc: compare remote and local protocols in tipc_udp_enable()
- qmi_wwan: Added support for Fibocom NL668 series
- qmi_wwan: Add support for Fibocom NL678 series
- net/smc: fix TCP fallback socket release
- sock: Make sock->sk_stamp thread-safe
- IB/hfi1: Incorrect sizing of sge for PIO will OOPs
- mtd: atmel-quadspi: disallow building on ebsa110
- ALSA: hda: add mute LED support for HP EliteBook 840 G4
- ALSA: fireface: fix for state to fetch PCM frames
- ALSA: firewire-lib: fix wrong handling payload_length as payload_quadlet
- ALSA: firewire-lib: fix wrong assignment for 'out_packet_without_header'
tracepoint
- ALSA: firewire-lib: use the same print format for 'without_header'
tracepoints
- ALSA: hda/tegra: clear pending irq handlers
- USB: serial: pl2303: add ids for Hewlett-Packard HP POS pole displays
- USB: serial: option: add Fibocom NL678 series
- usb: r8a66597: Fix a possible concurrency use-after-free bug in
r8a66597_endpoint_disable()
- staging: wilc1000: fix missing read_write setting when reading data
- qmi_wwan: apply SET_DTR quirk to the SIMCOM shared device ID
- s390/pci: fix sleeping in atomic during hotplug
- x86/speculation/l1tf: Drop the swap storage limit restriction when l1tf=off
- KVM: x86: Use jmp to invoke kvm_spurious_fault() from .fixup
- KVM: nVMX: Free the VMREAD/VMWRITE bitmaps if alloc_kvm_area() fails
- platform-msi: Free descriptors in platform_msi_domain_free()
- perf pmu: Suppress potential format-truncation warning
- ext4: add ext4_sb_bread() to disambiguate ENOMEM cases
- ext4: fix possible use after free in ext4_quota_enable
- ext4: missing unlock/put_page() in ext4_try_to_write_inline_data()
- ext4: fix EXT4_IOC_GROUP_ADD ioctl
- ext4: include terminating u32 in size of xattr entries when expanding inodes
- ext4: force inode writes when nfsd calls commit_metadata()
- ext4: check for shutdown and r/o file system in ext4_write_inode()
- spi: bcm2835: Fix race on DMA termination
- spi: bcm2835: Fix book-keeping of DMA termination
- spi: bcm2835: Avoid finishing transfer prematurely in IRQ mode
- clk: rockchip: fix typo in rk3188 spdif_frac parent
- crypto: cavium/nitrox - fix a DMA pool free failure
- cgroup: fix CSS_TASK_ITER_PROCS
- cdc-acm: fix abnormal DATA RX issue for Mediatek Preloader.
- Btrfs: fix fsync of files with multiple hard links in new directories
- f2fs: fix validation of the block count in sanity_check_raw_super
- serial: uartps: Fix interrupt mask issue to handle the RX interrupts
properly
- media: vivid: free bitmap_cap when updating std/timings/etc.
- media: v4l2-tpg: array index could become negative
- MIPS: math-emu: Write-protect delay slot emulation pages
- MIPS: c-r4k: Add r4k_blast_scache_node for Loongson-3
- MIPS: Ensure pmd_present() returns false after pmd_mknotpresent()
- MIPS: Align kernel load address to 64KB
- MIPS: Expand MIPS32 ASIDs to 64 bits
- MIPS: OCTEON: mark RGMII interface disabled on OCTEON III
- CIFS: Fix error mapping for SMB2_LOCK command which caused OFD lock problem
- arm64: KVM: Avoid setting the upper 32 bits of VTCR_EL2 to 1
- arm/arm64: KVM: vgic: Force VM halt when changing the active state of GICv3
PPIs/SGIs
- rtc: m41t80: Correct alarm month range with RTC reads
- tpm: tpm_i2c_nuvoton: use correct command duration for TPM 2.x
- spi: bcm2835: Unbreak the build of esoteric configs
- MIPS: Only include mmzone.h when CONFIG_NEED_MULTIPLE_NODES=y
- KVM: X86: Fix NULL deref in vcpu_scan_ioapic
- futex: Cure exit race
- x86/mm: Fix decoy address handling vs 32-bit builds
- x86/intel_rdt: Ensure a CPU remains online for the region's pseudo-locking
sequence
- mm: add mm_pxd_folded checks to pgtable_bytes accounting functions
- mm: make the __PAGETABLE_PxD_FOLDED defines non-empty
- mm: introduce mm_[p4d|pud|pmd]_folded
- ip: validate header length on virtual device xmit
- net: clear skb->tstamp in forwarding paths
- net/hamradio/6pack: use mod_timer() to rearm timers
- tipc: check tsk->group in tipc_wait_for_cond()
- tipc: check group dests after tipc_wait_for_cond()
- ipv6: frags: Fix bogus skb->sk in reassembled packets
- ALSA: hda/realtek: Enable audio jacks of ASUS UX391UA with ALC294
- ALSA: hda/realtek: Enable the headset mic auto detection for ASUS laptops
- ASoC: intel: cht_bsw_max98090_ti: Add pmc_plt_clk_0 quirk for Chromebook
Clapper
- ASoC: intel: cht_bsw_max98090_ti: Add pmc_plt_clk_0 quirk for Chromebook
Gnawty
- Input: elan_i2c - add ACPI ID for touchpad in ASUS Aspire F5-573G
- arm64: KVM: Make VHE Stage-2 TLB invalidation operations non-interruptible
- DRM: UDL: get rid of useless vblank initialization
- clocksource/drivers/arc_timer: Utilize generic sched_clock
- ocxl: Fix endiannes bug in ocxl_link_update_pe()
- ocxl: Fix endiannes bug in read_afu_name()
- ext4: add verifier check for symlink with append/immutable flags
- ext4: avoid declaring fs inconsistent due to invalid file handles
- clk: sunxi-ng: Use u64 for calculation of NM rate
- crypto: testmgr - add AES-CFB tests
- btrfs: dev-replace: go back to suspended state if target device is missing
- btrfs: run delayed items before dropping the snapshot
- powerpc/tm: Unset MSR[TS] if not recheckpointing
- f2fs: read page index before freeing
- f2fs: sanity check of xattr entry size
- media: cec: keep track of outstanding transmits
- media: imx274: fix stack corruption in imx274_read_reg
- media: vb2: check memory model for VIDIOC_CREATE_BUFS
- MIPS: Fix a R10000_LLSC_WAR logic in atomic.h
- KVM: arm/arm64: vgic: Do not cond_resched_lock() with IRQs disabled
- KVM: arm/arm64: vgic: Cap SPIs to the VM-defined maximum
* alsa/hda: neither mute led nor mic-mute led work on several Lenovo laptops
(LP: #1837963)
- SAUCE: ALSA: hda - Add a conexant codec entry to let mute led work
linux-oracle (4.15.0-1021.23) bionic; urgency=medium
* bionic/linux-oracle: 4.15.0-1021.23 -proposed tracker (LP: #1839280)
* Packaging resync (LP: #1786013)
- [Packaging] update helper scripts
[ Ubuntu: 4.15.0-58.64 ]
* unable to handle kernel NULL pointer dereference at 000000000000002c (IP:
iget5_locked+0x9e/0x1f0) (LP: #1838982)
- Revert "ovl: set I_CREATING on inode being created"
- Revert "new primitive: discard_new_inode()"
linux-oracle (4.15.0-1020.22) bionic; urgency=medium
[ Ubuntu: 4.15.0-57.63 ]
* CVE-2019-1125
- x86/cpufeatures: Carve out CQM features retrieval
- x86/cpufeatures: Combine word 11 and 12 into a new scattered features word
- x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations
- x86/speculation: Enable Spectre v1 swapgs mitigations
- x86/entry/64: Use JMP instead of JMPQ
- x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS
* Packaging resync (LP: #1786013)
- update dkms package versions
linux-oracle (4.15.0-1019.21) bionic; urgency=medium
* bionic/linux-oracle: 4.15.0-1019.21 -proposed tracker (LP: #1837616)
* hibmc-drm Causes Unreadable Display for Huawei amd64 Servers (LP: #1762940)
- [Config] linux-oracle: remove CONFIG_DRM_HISI_HIBMC=m
* zfs/spl build in conjunction with the kernel from DKMS source (LP: #1807378)
- [Packaging] linux-oracle: add build deps for building dkms
[ Ubuntu: 4.15.0-56.62 ]
* bionic/linux: 4.15.0-56.62 -proposed tracker (LP: #1837626)
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
- [Packaging] update helper scripts
* CVE-2019-2101
- media: uvcvideo: Fix 'type' check leading to overflow
* hibmc-drm Causes Unreadable Display for Huawei amd64 Servers (LP: #1762940)
- [Config] Set CONFIG_DRM_HISI_HIBMC to arm64 only
- SAUCE: Make CONFIG_DRM_HISI_HIBMC depend on ARM64
* Bionic: support for Solarflare X2542 network adapter (sfc driver)
(LP: #1836635)
- sfc: make mem_bar a function rather than a constant
- sfc: support VI strides other than 8k
- sfc: add Medford2 (SFC9250) PCI Device IDs
- sfc: improve PTP error reporting
- sfc: update EF10 register definitions
- sfc: populate the timer reload field
- sfc: update MCDI protocol headers
- sfc: support variable number of MAC stats
- sfc: expose FEC stats on Medford2
- sfc: expose CTPIO stats on NICs that support them
- sfc: basic MCDI mapping of 25/50/100G link speeds
- sfc: support the ethtool ksettings API properly so that 25/50/100G works
- sfc: add bits for 25/50/100G supported/advertised speeds
- sfc: remove tx and MCDI handling from NAPI budget consideration
- sfc: handle TX timestamps in the normal data path
- sfc: add function to determine which TX timestamping method to use
- sfc: use main datapath for HW timestamps if available
- sfc: only enable TX timestamping if the adapter is licensed for it
- sfc: MAC TX timestamp handling on the 8000 series
- sfc: on 8000 series use TX queues for TX timestamps
- sfc: only advertise TX timestamping if we have the license for it
- sfc: simplify RX datapath timestamping
- sfc: support separate PTP and general timestamping
- sfc: support second + quarter ns time format for receive datapath
- sfc: support Medford2 frequency adjustment format
- sfc: add suffix to large constant in ptp
- sfc: mark some unexported symbols as static
- sfc: update MCDI protocol headers
- sfc: support FEC configuration through ethtool
- sfc: remove ctpio_dmabuf_start from stats
- sfc: stop the TX queue before pushing new buffers
* [18.04 FEAT] zKVM: Add hardware CPU Model - kernel part (LP: #1836153)
- KVM: s390: add debug logging for cpu model subfunctions
- KVM: s390: implement subfunction processor calls
- KVM: s390: add vector enhancements facility 2 to cpumodel
- KVM: s390: add vector BCD enhancements facility to cpumodel
- KVM: s390: add MSA9 to cpumodel
- KVM: s390: provide query function for instructions returning 32 byte
- KVM: s390: add enhanced sort facilty to cpu model
- KVM: s390: add deflate conversion facilty to cpu model
- KVM: s390: enable MSA9 keywrapping functions depending on cpu model
* Intel ethernet I219 has slow RX speed (LP: #1836152)
- SAUCE: e1000e: add workaround for possible stalled packet
- SAUCE: e1000e: disable force K1-off feature
* Intel ethernet I219 may wrongly detect connection speed as 10Mbps
(LP: #1836177)
- SAUCE: e1000e: Make watchdog use delayed work
* Unhide Nvidia HDA audio controller (LP: #1836308)
- PCI: Enable NVIDIA HDA controllers
* selftests: Remove broken Power9 paste tests and fix compilation issue
(LP: #1836715)
- selftests/powerpc: Remove Power9 paste tests
- selftests/powerpc: Fix Makefiles for headers_install change
* ixgbe{vf} - Physical Function gets IRQ when VF checks link state
(LP: #1836760)
- ixgbevf: Use cached link state instead of re-reading the value for ethtool
* Fix nf_conntrack races when dealing with same origin requests in NAT
environments (LP: #1836816)
- netfilter: nf_conntrack: resolve clash for matching conntracks
- netfilter: nf_nat: skip nat clash resolution for same-origin entries
* CVE-2018-5383
- crypto: ecdh - add public key verification test
* sched: Prevent CPU lockups when task groups take longer than the period
(LP: #1836971)
- sched/fair: Limit sched_cfs_period_timer() loop to avoid hard lockup
* depmod may prefer unsigned l-r-m nvidia modules to signed modules
(LP: #1834479)
- [Packaging] dkms-build--nvidia-N -- clean up unsigned ko files
- [Packaging] Add update-version-dkms
- update dkms package versions
* Build Nvidia drivers in conjunction with kernel (LP: #1764792) // zfs/spl
build in conjunction with the kernel from DKMS source (LP: #1807378)
- [Packaging] dkms-build--nvidia-* -- convert to generic -N form
* zfs/spl build in conjunction with the kernel from DKMS source (LP: #1807378)
- [Packaging] dkms -- dkms package build packaging support
- [Packaging] dkms -- build zfs/spl packages
- [Packaging] dkms -- drop zfs/spl source code from kernel
* Build Nvidia drivers in conjunction with kernel (LP: #1764792)
- [Packaging] dkms -- introduce dkms package versions
- [Packaging] dkms -- add per package post-process step
- [Packaging] dkms -- switch to a consistent build prefix length and strip
- [Packaging] dkms-build -- support building against packages in PPAs
- [Packaging] dkms-build: do not redownload files on subsequent passes
- [Packaging] dkms-build -- add support for unversioned overrides
- [Packaging] dkms-build -- backport latest version from disco
- [Packaging] nvidia -- build and sign nvidia packages and ship signatures
- [Packaging] nvidia -- make nvidia package version explicit
* CVE-2019-13233
- x86/insn-eval: Fix use-after-free access to LDT entry
* kernel panic using CIFS share in smb2_push_mandatory_locks() (LP: #1795659)
- CIFS: keep FileInfo handle live during oplock break
* cifs set_oplock buffer overflow in strcat (LP: #1824981)
- cifs: fix strcat buffer overflow and reduce raciness in
smb21_set_oplock_level()
* CVE-2019-13272
- ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME
* Bionic update: upstream stable patchset 2019-07-18 (LP: #1837161)
- Kbuild: suppress packed-not-aligned warning for default setting only
- disable stringop truncation warnings for now
- test_hexdump: use memcpy instead of strncpy
- kobject: Replace strncpy with memcpy
- ALSA: intel_hdmi: Use strlcpy() instead of strncpy()
- unifdef: use memcpy instead of strncpy
- kernfs: Replace strncpy with memcpy
- ip_tunnel: Fix name string concatenate in __ip_tunnel_create()
- scsi: bfa: convert to strlcpy/strlcat
- kdb: use memmove instead of overlapping memcpy
- iser: set sector for ambiguous mr status errors
- uprobes: Fix handle_swbp() vs. unregister() + register() race once more
- MIPS: ralink: Fix mt7620 nd_sd pinmux
- mips: fix mips_get_syscall_arg o32 check
- IB/mlx5: Avoid load failure due to unknown link width
- drm/ast: Fix incorrect free on ioregs
- drm: set is_master to 0 upon drm_new_set_master() failure
- drm/meson: Enable fast_io in meson_dw_hdmi_regmap_config
- drm/meson: Fix OOB memory accesses in meson_viu_set_osd_lut()
- ALSA: trident: Suppress gcc string warning
- kgdboc: Fix restrict error
- kgdboc: Fix warning with module build
- svm: Add mutex_lock to protect apic_access_page_done on AMD systems
- drm/msm: fix OF child-node lookup
- Input: xpad - quirk all PDP Xbox One gamepads
- Input: synaptics - add PNP ID for ThinkPad P50 to SMBus
- Input: matrix_keypad - check for errors from of_get_named_gpio()
- Input: cros_ec_keyb - fix button/switch capability reports
- Input: elan_i2c - add ELAN0620 to the ACPI table
- Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15ARR
- Input: elan_i2c - add support for ELAN0621 touchpad
- btrfs: tree-checker: Don't check max block group size as current max chunk
size limit is unreliable
- ARC: change defconfig defaults to ARCv2
- arc: [devboards] Add support of NFSv3 ACL
- reset: make device_reset_optional() really optional
- reset: remove remaining WARN_ON() in <linux/reset.h>
- mm: hide incomplete nr_indirectly_reclaimable in /proc/zoneinfo
- net: qed: use correct strncpy() size
- tipc: use destination length for copy string
- arm64: ftrace: Fix to enable syscall events on arm64
- sched, trace: Fix prev_state output in sched_switch tracepoint
- tracing/fgraph: Fix set_graph_function from showing interrupts
- drm/meson: Fixes for drm_crtc_vblank_on/off support
- scsi: lpfc: fix block guard enablement on SLI3 adapters
- media: omap3isp: Unregister media device as first
- iommu/vt-d: Fix NULL pointer dereference in prq_event_thread()
- brcmutil: really fix decoding channel info for 160 MHz bandwidth
- iommu/ipmmu-vmsa: Fix crash on early domain free
- can: rcar_can: Fix erroneous registration
- test_firmware: fix error return getting clobbered
- HID: input: Ignore battery reported by Symbol DS4308
- batman-adv: Use explicit tvlv padding for ELP packets
- batman-adv: Expand merged fragment buffer for full packet
- amd/iommu: Fix Guest Virtual APIC Log Tail Address Register
- bnx2x: Assign unique DMAE channel number for FW DMAE transactions.
- qed: Fix PTT leak in qed_drain()
- qed: Fix reading wrong value in loop condition
- net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command
- net/mlx4_core: Fix uninitialized variable compilation warning
- net/mlx4: Fix UBSAN warning of signed integer overflow
- gpio: mockup: fix indicated direction
- mtd: rawnand: qcom: Namespace prefix some commands
- mtd: spi-nor: Fix Cadence QSPI page fault kernel panic
- qed: Fix bitmap_weight() check
- qed: Fix QM getters to always return a valid pq
- net: faraday: ftmac100: remove netif_running(netdev) check before disabling
interrupts
- iommu/vt-d: Use memunmap to free memremap
- flexfiles: use per-mirror specified stateid for IO
- ibmvnic: Fix RX queue buffer cleanup
- team: no need to do team_notify_peers or team_mcast_rejoin when disabling
port
- net: amd: add missing of_node_put()
- usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device
- usb: appledisplay: Add 27" Apple Cinema Display
- USB: check usb_get_extra_descriptor for proper size
- ALSA: hda: Add support for AMD Stoney Ridge
- ALSA: pcm: Fix starvation on down_write_nonblock()
- ALSA: pcm: Call snd_pcm_unlink() conditionally at closing
- ALSA: pcm: Fix interval evaluation with openmin/max
- ALSA: hda/realtek - Fix speaker output regression on Thinkpad T570
- SUNRPC: Fix leak of krb5p encode pages
- dmaengine: dw: Fix FIFO size for Intel Merrifield
- dmaengine: cppi41: delete channel from pending list when stop channel
- ARM: 8806/1: kprobes: Fix false positive with FORTIFY_SOURCE
- xhci: Prevent U1/U2 link pm states if exit latency is too long
- f2fs: fix to do sanity check with block address in main area v2
- swiotlb: clean up reporting
- Staging: lustre: remove two build warnings
- staging: atomisp: remove "fun" strncpy warning
- cifs: Fix separator when building path from dentry
- staging: rtl8712: Fix possible buffer overrun
- Revert commit ef9209b642f "staging: rtl8723bs: Fix indenting errors and an
off-by-one mistake in core/rtw_mlme_ext.c"
- drm/amdgpu: update mc firmware image for polaris12 variants
- drm/amdgpu/gmc8: update MC firmware for polaris
- tty: serial: 8250_mtk: always resume the device in probe.
- kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var()
- libnvdimm, pfn: Pad pfn namespaces relative to other regions
- mac80211: Clear beacon_int in ieee80211_do_stop
- mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext
- mac80211: fix reordering of buffered broadcast packets
- mac80211: ignore NullFunc frames in the duplicate detection
- qed: Fix rdma_info structure allocation
- drm/amdgpu: Add amdgpu "max bpc" connector property (v2)
- drivers/net/ethernet/qlogic/qed/qed_rdma.h: fix typo
- gpio: pxa: fix legacy non pinctrl aware builds again
- tc-testing: tdc.py: ignore errors when decoding stdout/stderr
- NFSv4: Fix a NFSv4 state manager deadlock
- USB: serial: console: fix reported terminal settings
- ALSA: usb-audio: Add SMSL D1 to quirks for native DSD support
- ALSA: hda/realtek: ALC286 mic and headset-mode fixups for Acer Aspire
U27-880
- ALSA: hda/realtek - Add support for Acer Aspire C24-860 headset mic
- ALSA: hda/realtek: Fix mic issue on Acer AIO Veriton Z4660G
- ALSA: hda/realtek: Fix mic issue on Acer AIO Veriton Z4860G/Z6860G
- media: dvb-pll: don't re-validate tuner frequencies
- parisc: Enable -ffunction-sections for modules on 32-bit kernel
- Revert "x86/e820: put !E820_TYPE_RAM regions into memblock.reserved"
- drm/lease: Send a distinct uevent
- drm/msm: Move fence put to where failure occurs
- drm/amdgpu/gmc8: always load MC firmware in the driver
- drm/i915: Downgrade Gen9 Plane WM latency error
- x86/efi: Allocate e820 buffer before calling efi_exit_boot_service
- cfg80211: Fix busy loop regression in ieee80211_ie_split_ric()
- ipv4: ipv6: netfilter: Adjust the frag mem limit when truesize changes
- ipv6: Check available headroom in ip6_xmit() even without options
- neighbour: Avoid writing before skb->head in neigh_hh_output()
- ipv6: sr: properly initialize flowi6 prior passing to ip6_route_output
- net: 8139cp: fix a BUG triggered by changing mtu with network traffic
- net/mlx4_core: Correctly set PFC param if global pause is turned off.
- net/mlx4_en: Change min MTU size to ETH_MIN_MTU
- net: phy: don't allow __set_phy_supported to add unsupported modes
- net: Prevent invalid access to skb->prev in __qdisc_drop_all
- rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices
- sctp: kfree_rcu asoc
- tcp: Do not underestimate rwnd_limited
- tcp: fix NULL ref in tail loss probe
- tun: forbid iface creation with rtnl ops
- virtio-net: keep vnet header zeroed after processing XDP
- ARM: OMAP2+: prm44xx: Fix section annotation on
omap44xx_prm_enable_io_wakeup
- ASoC: rsnd: fixup clock start checker
- staging: rtl8723bs: Fix the return value in case of error in
'rtw_wx_read32()'
- ARM: dts: logicpd-somlv: Fix interrupt on mmc3_dat1
- ARM: OMAP1: ams-delta: Fix possible use of uninitialized field
- sysv: return 'err' instead of 0 in __sysv_write_inode
- selftests: add script to stress-test nft packet path vs. control plane
- netfilter: nf_tables: fix use-after-free when deleting compat expressions
- hwmon (ina2xx) Fix NULL id pointer in probe()
- ASoC: wm_adsp: Fix dma-unsafe read of scratch registers
- s390/cpum_cf: Reject request for sampling in event initialization
- hwmon: (ina2xx) Fix current value calculation
- ASoC: omap-abe-twl6040: Fix missing audio card caused by deferred probing
- ASoC: dapm: Recalculate audio map forcely when card instantiated
- netfilter: xt_hashlimit: fix a possible memory leak in htable_create()
- hwmon: (w83795) temp4_type has writable permission
- perf tools: Restore proper cwd on return from mnt namespace
- PCI: imx6: Fix link training status detection in link up check
- objtool: Fix double-free in .cold detection error path
- objtool: Fix segfault in .cold detection with -ffunction-sections
- ARM: dts: at91: sama5d2: use the divided clock for SMC
- Btrfs: send, fix infinite loop due to directory rename dependencies
- RDMA/mlx5: Fix fence type for IB_WR_LOCAL_INV WR
- RDMA/rdmavt: Fix rvt_create_ah function signature
- ASoC: omap-mcbsp: Fix latency value calculation for pm_qos
- ASoC: omap-mcpdm: Add pm_qos handling to avoid under/overruns with CPU_IDLE
- ASoC: omap-dmic: Add pm_qos handling to avoid overruns with CPU_IDLE
- exportfs: do not read dentry after free
- bpf: fix check of allowed specifiers in bpf_trace_printk
- ipvs: call ip_vs_dst_notifier earlier than ipv6_dev_notf
- USB: omap_udc: use devm_request_irq()
- USB: omap_udc: fix crashes on probe error and module removal
- USB: omap_udc: fix omap_udc_start() on 15xx machines
- USB: omap_udc: fix USB gadget functionality on Palm Tungsten E
- USB: omap_udc: fix rejection of out transfers when DMA is used
- drm/meson: add support for 1080p25 mode
- netfilter: ipv6: Preserve link scope traffic original oif
- IB/mlx5: Fix page fault handling for MW
- KVM: x86: fix empty-body warnings
- x86/kvm/vmx: fix old-style function declaration
- net: thunderx: fix NULL pointer dereference in nic_remove
- usb: gadget: u_ether: fix unsafe list iteration
- netfilter: nf_tables: deactivate expressions in rule replecement routine
- igb: fix uninitialized variables
- ixgbe: recognize 1000BaseLX SFP modules as 1Gbps
- net: hisilicon: remove unexpected free_netdev
- drm/amdgpu: Add delay after enable RLC ucode
- drm/ast: fixed reading monitor EDID not stable issue
- xen: xlate_mmu: add missing header to fix 'W=1' warning
- Revert "xen/balloon: Mark unallocated host memory as UNUSABLE"
- pstore/ram: Correctly calculate usable PRZ bytes
- fscache, cachefiles: remove redundant variable 'cache'
- nvme: flush namespace scanning work just before removing namespaces
- ACPI/IORT: Fix iort_get_platform_device_domain() uninitialized pointer value
- ocfs2: fix deadlock caused by ocfs2_defrag_extent()
- mm/page_alloc.c: fix calculation of pgdat->nr_zones
- hfs: do not free node before using
- hfsplus: do not free node before using
- debugobjects: avoid recursive calls with kmemleak
- ocfs2: fix potential use after free
- printk: Add console owner and waiter logic to load balance console writes
- printk: Hide console waiter logic into helpers
- printk: Never set console_may_schedule in console_trylock()
- printk: Wake klogd when passing console_lock owner
- flexfiles: enforce per-mirror stateid only for v4 DSes
- staging: speakup: Replace strncpy with memcpy
- ALSA: fireface: fix reference to wrong register for clock configuration
- IB/hfi1: Fix an out-of-bounds access in get_hw_stats
- tcp: lack of available data can also cause TSO defer
- Revert "net/ibm/emac: wrong bit is used for STA control"
- tools: bpftool: prevent infinite loop in get_fdinfo()
- ASoC: sun8i-codec: fix crash on module removal
- ASoC: acpi: fix: continue searching when machine is ignored
- RDMA/bnxt_re: Fix system hang when registration with L2 driver fails
- RDMA/bnxt_re: Avoid accessing the device structure after it is freed
- RDMA/hns: Bugfix pbl configuration for rereg mr
- thunderbolt: Prevent root port runtime suspend during NVM upgrade
- netfilter: add missing error handling code for register functions
- netfilter: nat: fix double register in masquerade modules
- cachefiles: Fix an assertion failure when trying to update a failed object
- fscache: Fix race in fscache_op_complete() due to split atomic_sub & read
- pvcalls-front: fixes incorrect error handling
- nvme: warn when finding multi-port subsystems without multipathing enabled
- kernel/kcov.c: mark funcs in __sanitizer_cov_trace_pc() as notrace
- ALSA: hda/realtek: ALC294 mic and headset-mode fixups for ASUS X542UN
- ALSA: hda/realtek: Enable audio jacks of ASUS UX533FD with ALC294
- ALSA: hda/realtek: Enable audio jacks of ASUS UX433FN/UX333FA with ALC294
* Bionic update: upstream stable patchset 2019-07-17 (LP: #1836968)
- flow_dissector: do not dissect l4 ports for fragments
- ibmvnic: fix accelerated VLAN handling
- ip_tunnel: don't force DF when MTU is locked
- ipv6: Fix PMTU updates for UDP/raw sockets in presence of VRF
- net-gro: reset skb->pkt_type in napi_reuse_skb()
- sctp: not allow to set asoc prsctp_enable by sockopt
- tg3: Add PHY reset for 5717/5719/5720 in change ring and flow control paths
- tuntap: fix multiqueue rx
- net: systemport: Protect stop from timeout
- net: qualcomm: rmnet: Fix incorrect assignment of real_dev
- net: dsa: microchip: initialize mutex before use
- sctp: fix strchange_flags name for Stream Change Event
- net: phy: mdio-gpio: Fix working over slow can_sleep GPIOs
- sctp: not increase stream's incnt before sending addstrm_in request
- mlxsw: spectrum: Fix IP2ME CPU policer configuration
- net: smsc95xx: Fix MTU range
- usbnet: smsc95xx: disable carrier check while suspending
- inet: frags: better deal with smp races
- ARM: dts: r8a7791: Correct critical CPU temperature
- ARM: dts: r8a7793: Correct critical CPU temperature
- net: bcmgenet: protect stop from timeout
- tcp: Fix SOF_TIMESTAMPING_RX_HARDWARE to use the latest timestamp during TCP
coalescing
- tipc: don't assume linear buffer when reading ancillary data
- tipc: fix link re-establish failure
- net/mlx5e: Claim TC hw offloads support only under a proper build config
- net/mlx5e: Adjust to max number of channles when re-attaching
- net/mlx5e: Fix selftest for small MTUs
- l2tp: fix a sock refcnt leak in l2tp_tunnel_register
- net/mlx5e: IPoIB, Reset QP after channels are closed
- net: dsa: mv88e6xxx: Fix clearing of stats counters
- net: phy: realtek: fix RTL8201F sysfs name
- sctp: define SCTP_SS_DEFAULT for Stream schedulers
- rxrpc: Fix lockup due to no error backoff after ack transmit error
- cifs: don't dereference smb_file_target before null check
- cifs: fix return value for cifs_listxattr
- arm64: kprobe: make page to RO mode when allocate it
- ixgbe: fix MAC anti-spoofing filter after VFLR
- reiserfs: propagate errors from fill_with_dentries() properly
- hfs: prevent btree data loss on root split
- hfsplus: prevent btree data loss on root split
- um: Give start_idle_thread() a return code
- drm/edid: Add 6 bpc quirk for BOE panel.
- platform/x86: intel_telemetry: report debugfs failure
- clk: fixed-rate: fix of_node_get-put imbalance
- perf symbols: Set PLT entry/header sizes properly on Sparc
- fs/exofs: fix potential memory leak in mount option parsing
- clk: samsung: exynos5420: Enable PERIS clocks for suspend
- apparmor: Fix uninitialized value in aa_split_fqname
- x86/earlyprintk: Add a force option for pciserial device
- platform/x86: acerhdf: Add BIOS entry for Gateway LT31 v1.3307
- arm64: percpu: Initialize ret in the default case
- s390/vdso: add missing FORCE to build targets
- netfilter: ipset: list:set: Decrease refcount synchronously on deletion and
replace
- netfilter: ipset: actually allow allowable CIDR 0 in hash:net,port,net
- s390/mm: Fix ERROR: "__node_distance" undefined!
- netfilter: ipset: Correct rcu_dereference() call in ip_set_put_comment()
- netfilter: xt_IDLETIMER: add sysfs filename checking routine
- s390/qeth: fix HiperSockets sniffer
- hwmon: (ibmpowernv) Remove bogus __init annotations
- Revert "drm/exynos/decon5433: implement frame counter"
- clk: fixed-factor: fix of_node_get-put imbalance
- lib/raid6: Fix arm64 test build
- s390/perf: Change CPUM_CF return code in event init function
- sched/core: Take the hotplug lock in sched_init_smp()
- i40e: restore NETIF_F_GSO_IPXIP[46] to netdev features
- qed: Fix memory/entry leak in qed_init_sp_request()
- qed: Fix blocking/unlimited SPQ entries leak
- qed: Fix potential memory corruption
- net: stmmac: Fix RX packet size > 8191
- SUNRPC: drop pointless static qualifier in xdr_get_next_encode_buffer()
- ACPI / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM
- perf machine: Add machine__is() to identify machine arch
- perf tools: Fix kernel_start for PTI on x86
- perf machine: Add nr_cpus_avail()
- perf machine: Workaround missing maps for x86 PTI entry trampolines
- perf test code-reading: Fix perf_env setup for PTI entry trampolines
- media: v4l: event: Add subscription to list before calling "add" operation
- MIPS: OCTEON: cavium_octeon_defconfig: re-enable OCTEON USB driver
- uio: Fix an Oops on load
- usb: cdc-acm: add entry for Hiro (Conexant) modem
- usb: quirks: Add delay-init quirk for Corsair K70 LUX RGB
- misc: atmel-ssc: Fix section annotation on atmel_ssc_get_driver_data
- USB: misc: appledisplay: add 20" Apple Cinema Display
- ACPI / platform: Add SMB0001 HID to forbidden_id_list
- HID: uhid: forbid UHID_CREATE under KERNEL_DS or elevated privileges
- libceph: fall back to sendmsg for slab pages
- drm/i915: Replace some PAGE_SIZE with I915_GTT_PAGE_SIZE
- perf unwind: Take pgoff into account when reporting elf to libdwfl
- netfilter: bridge: define INT_MIN & INT_MAX in userspace
- s390/decompressor: add missing FORCE to build targets
- Revert "HID: add NOGET quirk for Eaton Ellipse MAX UPS"
- HID: alps: allow incoming reports when only the trackstick is opened
- s390/mm: fix mis-accounting of pgtable_bytes
- drm/amd/display: Stop leaking planes
- drm/amd/amdgpu/dm: Fix dm_dp_create_fake_mst_encoder()
- ceph: quota: fix null pointer dereference in quota check
- nvme: make sure ns head inherits underlying device limits
- i2c: omap: Enable for ARCH_K3
- net: aquantia: fix potential IOMMU fault after driver unbind
- net: aquantia: fixed enable unicast on 32 macvlan
- net: aquantia: invalid checksumm offload implementation
- mtd: rawnand: atmel: fix OF child-node lookup
- efi/libstub: arm: support building with clang
- ARM: 8766/1: drop no-thumb-interwork in EABI mode
- ARM: 8767/1: add support for building ARM kernel with clang
- bus: arm-cci: remove unnecessary unreachable()
- ARM: trusted_foundations: do not use naked function
- usb: core: Fix hub port connection events lost
- usb: dwc3: gadget: fix ISOC TRB type on unaligned transfers
- usb: dwc3: gadget: Properly check last unaligned/zero chain TRB
- usb: dwc3: core: Clean up ULPI device
- xhci: Add check for invalid byte size error when UAS devices are connected.
- ALSA: oss: Use kvzalloc() for local buffer allocations
- MAINTAINERS: Add Sasha as a stable branch maintainer
- mmc: sdhci-pci: Try "cd" for card-detect lookup before using NULL
- gpio: don't free unallocated ida on gpiochip_add_data_with_key() error path
- iwlwifi: mvm: support sta_statistics() even on older firmware
- iwlwifi: mvm: fix regulatory domain update when the firmware starts
- iwlwifi: mvm: don't use SAR Geo if basic SAR is not used
- brcmfmac: fix reporting support for 160 MHz channels
- tools/power/cpupower: fix compilation with STATIC=true
- v9fs_dir_readdir: fix double-free on p9stat_read error
- selinux: Add __GFP_NOWARN to allocation at str_read()
- Input: synaptics - avoid using uninitialized variable when probing
- bfs: add sanity check at bfs_fill_super()
- sctp: clear the transport of some out_chunk_list chunks in
sctp_assoc_rm_peer
- gfs2: Don't leave s_fs_info pointing to freed memory in init_sbd
- llc: do not use sk_eat_skb()
- mm: don't warn about large allocations for slab
- mm/memory.c: recheck page table entry with page table lock held
- IB/core: Perform modify QP on real one
- usb: xhci: Prevent bus suspend if a port connect change or polling state is
detected
- drm/ast: change resolution may cause screen blurred
- drm/ast: fixed cursor may disappear sometimes
- can: dev: can_get_echo_skb(): factor out non sending code to
__can_get_echo_skb()
- can: dev: __can_get_echo_skb(): replace struct can_frame by canfd_frame to
access frame length
- can: dev: __can_get_echo_skb(): Don't crash the kernel if can_priv::echo_skb
is accessed out of bounds
- can: dev: __can_get_echo_skb(): print error message, if trying to echo non
existing skb
- can: rx-offload: introduce can_rx_offload_get_echo_skb() and
can_rx_offload_queue_sorted() functions
- can: rx-offload: rename can_rx_offload_irq_queue_err_skb() to
can_rx_offload_queue_tail()
- can: raw: check for CAN FD capable netdev in raw_sendmsg()
- can: hi311x: Use level-triggered interrupt
- IB/hfi1: Eliminate races in the SDMA send error path
- pinctrl: meson: fix pinconf bias disable
- KVM: PPC: Move and undef TRACE_INCLUDE_PATH/FILE
- cpufreq: imx6q: add return value check for voltage scale
- rtc: pcf2127: fix a kmemleak caused in pcf2127_i2c_gather_write
- crypto: simd - correctly take reqsize of wrapped skcipher into account
- floppy: fix race condition in __floppy_read_block_0()
- powerpc/io: Fix the IO workarounds code to work with Radix
- perf/x86/intel/uncore: Add more IMC PCI IDs for KabyLake and CoffeeLake CPUs
- SUNRPC: Fix a bogus get/put in generic_key_to_expire()
- kdb: Use strscpy with destination buffer size
- powerpc/numa: Suppress "VPHN is not supported" messages
- tmpfs: make lseek(SEEK_DATA/SEK_HOLE) return ENXIO with a negative offset
- mm, page_alloc: check for max order in hot path
- arm64: remove no-op -p linker flag
- ubi: fastmap: Check each mapping only once
- Input: xpad - add PDP device id 0x02a4
- Input: xpad - fix some coding style issues
- Input: xpad - avoid using __set_bit() for capabilities
- Input: xpad - add support for Xbox1 PDP Camo series gamepad
- iwlwifi: fix wrong WGDS_WIFI_DATA_SIZE
- kbuild: allow to use GCC toolchain not in Clang search path
- PCI: endpoint: Populate func_no before calling pci_epc_add_epf()
- i40iw: Fix memory leak in error path of create QP
- clk: samsung: exynos5250: Add missing clocks for FIMC LITE SYSMMU devices
- ARM: dts: exynos: Fix invalid node referenced by i2c20 alias in Peach Pit
and Pi
- include/linux/pfn_t.h: force '~' to be parsed as an unary operator
- tty: wipe buffer.
- tty: wipe buffer if not echoing data
- lan78xx: Read MAC address from DT if present
- s390/mm: Check for valid vma before zapping in gmap_discard
- rcu: Make need_resched() respond to urgent RCU-QS needs
- net: ieee802154: 6lowpan: fix frag reassembly
- EVM: Add support for portable signature format
- ima: re-introduce own integrity cache lock
- ima: re-initialize iint->atomic_flags
- xhci: Fix leaking USB3 shared_hcd at xhci removal
- Documentation/security-bugs: Clarify treatment of embargoed information
- Documentation/security-bugs: Postpone fix publication in exceptional cases
- ACPICA: AML interpreter: add region addresses in global list during
initialization
- fsnotify: generalize handling of extra event flags
- pinctrl: meson: fix gxbb ao pull register bits
- pinctrl: meson: fix gxl ao pull register bits
- pinctrl: meson: fix meson8 ao pull register bits
- pinctrl: meson: fix meson8b ao pull register bits
- riscv: add missing vdso_install target
- media: ov5640: fix wrong binning value in exposure calculation
- media: ov5640: fix auto controls values when switching to manual mode
- mm/huge_memory: rename freeze_page() to unmap_page()
- mm/huge_memory.c: reorder operations in __split_huge_page_tail()
- mm/huge_memory: splitting set mapping+index before unfreeze
- mm/huge_memory: fix lockdep complaint on 32-bit i_size_read()
- mm/khugepaged: collapse_shmem() stop if punched or truncated
- mm/khugepaged: fix crashes due to misaccounted holes
- mm/khugepaged: collapse_shmem() remember to clear holes
- mm/khugepaged: minor reorderings in collapse_shmem()
- mm/khugepaged: collapse_shmem() without freezing new_page
- mm/khugepaged: collapse_shmem() do not crash on Compound
- media: em28xx: Fix use-after-free when disconnecting
- ubi: Initialize Fastmap checkmapping correctly
- libceph: store ceph_auth_handshake pointer in ceph_connection
- libceph: factor out __prepare_write_connect()
- libceph: factor out __ceph_x_decrypt()
- libceph: factor out encrypt_authorizer()
- libceph: add authorizer challenge
- libceph: implement CEPHX_V2 calculation mode
- net/tls: Fixed return value when tls_complete_pending_work() fails
- wil6210: missing length check in wmi_set_ie
- btrfs: validate type when reading a chunk
- btrfs: Verify that every chunk has corresponding block group at mount time
- btrfs: tree-checker: Add checker for dir item
- btrfs: tree-checker: use %zu format string for size_t
- btrfs: tree-check: reduce stack consumption in check_dir_item
- btrfs: tree-checker: Verify block_group_item
- btrfs: tree-checker: Detect invalid and empty essential trees
- btrfs: Check that each block group has corresponding chunk at mount time
- btrfs: tree-checker: Check level for leaves and nodes
- btrfs: tree-checker: Fix misleading group system information
- f2fs: check blkaddr more accuratly before issue a bio
- f2fs: enhance sanity_check_raw_super() to avoid potential overflow
- f2fs: clean up with is_valid_blkaddr()
- f2fs: introduce and spread verify_blkaddr
- f2fs: fix to do sanity check with secs_per_zone
- f2fs: fix to do sanity check with user_block_count
- f2fs: fix to do sanity check with node footer and iblocks
- f2fs: fix to do sanity check with block address in main area
- f2fs: fix to do sanity check with i_extra_isize
- f2fs: fix to do sanity check with cp_pack_start_sum
- net: skb_scrub_packet(): Scrub offload_fwd_mark
- net: thunderx: set xdp_prog to NULL if bpf_prog_add fails
- virtio-net: disable guest csum during XDP set
- virtio-net: fail XDP set if guest csum is negotiated
- net: thunderx: set tso_hdrs pointer to NULL in nicvf_free_snd_queue
- packet: copy user buffers before orphan or clone
- rapidio/rionet: do not free skb before reading its length
- usbnet: ipheth: fix potential recvmsg bug and recvmsg bug 2
- kvm: mmu: Fix race in emulated page table writes
- KVM: x86: Fix kernel info-leak in KVM_HC_CLOCK_PAIRING hypercall
- xtensa: enable coprocessors that are being flushed
- xtensa: fix coprocessor context offset definitions
- xtensa: fix coprocessor part of ptrace_{get,set}xregs
- Btrfs: ensure path name is null terminated at btrfs_control_ioctl
- btrfs: relocation: set trans to be NULL after ending transaction
- PCI: layerscape: Fix wrong invocation of outbound window disable accessor
- arm64: dts: rockchip: Fix PCIe reset polarity for rk3399-puma-haikou.
- x86/fpu: Disable bottom halves while loading FPU registers
- perf/x86/intel: Move branch tracing setup to the Intel-specific source file
- perf/x86/intel: Add generic branch tracing check to intel_pmu_has_bts()
- fs: fix lost error code in dio_complete
- ALSA: wss: Fix invalid snd_free_pages() at error path
- ALSA: ac97: Fix incorrect bit shift at AC97-SPSA control write
- ALSA: control: Fix race between adding and removing a user element
- ALSA: sparc: Fix invalid snd_free_pages() at error path
- ALSA: hda/realtek - Support ALC300
- ALSA: hda/realtek - fix headset mic detection for MSI MS-B171
- ext2: fix potential use after free
- ARM: dts: rockchip: Remove @0 from the veyron memory node
- dmaengine: at_hdmac: fix memory leak in at_dma_xlate()
- dmaengine: at_hdmac: fix module unloading
- staging: vchiq_arm: fix compat VCHIQ_IOC_AWAIT_COMPLETION
- staging: rtl8723bs: Add missing return for cfg80211_rtw_get_station
- usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series
- Revert "usb: dwc3: gadget: skip Set/Clear Halt when invalid"
- iio:st_magn: Fix enable device after trigger
- lib/test_kmod.c: fix rmmod double free
- mm: use swp_offset as key in shmem_replace_page()
- misc: mic/scif: fix copy-paste error in scif_create_remote_lookup
- binder: fix race that allows malicious free of live buffer
- libceph: weaken sizeof check in ceph_x_verify_authorizer_reply()
- libceph: check authorizer reply/challenge length before reading
- f2fs: fix missing up_read
- net: don't keep lonely packets forever in the gro hash
- net: phy: add workaround for issue where PHY driver doesn't bind to the
device
- KVM: nVMX/nSVM: Fix bug which sets vcpu->arch.tsc_offset to L1 tsc_offset
- udf: Allow mounting volumes with incorrect identification strings
- btrfs: Always try all copies when reading extent buffers
- Btrfs: fix rare chances for data loss when doing a fast fsync
- Btrfs: fix race between enabling quotas and subvolume creation
- perf/x86/intel: Disallow precise_ip on BTS events
- ALSA: hda: Add ASRock H81M-HDS to the power_save blacklist
- ALSA: hda: Add ASRock N68C-S UCC the power_save blacklist
- function_graph: Create function_graph_enter() to consolidate architecture
code
- ARM: function_graph: Simplify with function_graph_enter()
- microblaze: function_graph: Simplify with function_graph_enter()
- x86/function_graph: Simplify with function_graph_enter()
- powerpc/function_graph: Simplify with function_graph_enter()
- sh/function_graph: Simplify with function_graph_enter()
- sparc/function_graph: Simplify with function_graph_enter()
- parisc: function_graph: Simplify with function_graph_enter()
- s390/function_graph: Simplify with function_graph_enter()
- arm64: function_graph: Simplify with function_graph_enter()
- MIPS: function_graph: Simplify with function_graph_enter()
- function_graph: Make ftrace_push_return_trace() static
- function_graph: Use new curr_ret_depth to manage depth instead of
curr_ret_stack
- function_graph: Have profiler use curr_ret_stack and not depth
- function_graph: Move return callback before update of curr_ret_stack
- function_graph: Reverse the order of pushing the ret_stack and the callback
- ext2: initialize opts.s_mount_opt as zero before using it
- ASoC: intel: cht_bsw_max98090_ti: Add quirk for boards using pmc_plt_clk_0
- staging: most: use format specifier "%s" in snprintf
- iio/hid-sensors: Fix IIO_CHAN_INFO_RAW returning wrong values for signed
numbers
- mm: cleancache: fix corruption on missed inode invalidation
* Bionic update: upstream stable patchset 2019-07-17 (LP: #1836968) //
CVE-2000-1134 // CVE-2007-3852 // CVE-2008-0525 // CVE-2009-0416 //
CVE-2011-4834 // CVE-2015-1838 // CVE-2015-7442 // CVE-2016-7489
- namei: allow restricted O_CREAT of FIFOs and regular files
* bcache: risk of data loss on I/O errors in backing or caching devices
(LP: #1829563)
- bcache: add CACHE_SET_IO_DISABLE to struct cache_set flags
- bcache: add stop_when_cache_set_failed option to backing device
- bcache: fix inaccurate io state for detached bcache devices
- bcache: add backing_request_endio() for bi_end_io
- bcache: add io_disable to struct cached_dev
- bcache: store disk name in struct cache and struct cached_dev
- bcache: count backing device I/O error for writeback I/O
- bcache: add wait_for_kthread_stop() in bch_allocator_thread()
- bcache: set dc->io_disable to true in conditional_stop_bcache_device()
- bcache: stop bcache device when backing device is offline
- bcache: fix ioctl in flash device
* Bionic update: upstream stable patchset 2019-07-16 (LP: #1836802)
- mtd: spi-nor: fsl-quadspi: fix read error for flash size larger than 16MB
- spi: bcm-qspi: switch back to reading flash using smaller chunks
- bcache: trace missed reading by cache_missed
- bcache: fix miss key refill->end in writeback
- hwmon: (pmbus) Fix page count auto-detection.
- jffs2: free jffs2_sb_info through jffs2_kill_sb()
- cpufreq: conservative: Take limits changes into account properly
- pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges
- parisc: Fix address in HPMC IVA
- parisc: Fix map_pages() to not overwrite existing pte entries
- parisc: Fix exported address of os_hpmc handler
- ALSA: hda - Add quirk for ASUS G751 laptop
- ALSA: hda - Fix headphone pin config for ASUS G751
- ALSA: hda - Add mic quirk for the Lenovo G50-30 (17aa:3905)
- ALSA: ca0106: Disable IZD on SB0570 DAC to fix audio pops
- x86/xen: Fix boot loader version reported for PVH guests
- x86/corruption-check: Fix panic in memory_corruption_check() when boot
option without value is provided
- ARM: dts: exynos: Disable pull control for MAX8997 interrupts on Origen
- bpf: do not blindly change rlimit in reuseport net selftest
- Revert "perf tools: Fix PMU term format max value calculation"
- xfrm: policy: use hlist rcu variants on insert
- perf vendor events intel: Fix wrong filter_band* values for uncore events
- sched/fair: Fix the min_vruntime update logic in dequeue_entity()
- perf tools: Fix use of alternatives to find JDIR
- perf cpu_map: Align cpu map synthesized events properly.
- x86/fpu: Remove second definition of fpu in __fpu__restore_sig()
- net: qla3xxx: Remove overflowing shift statement
- selftests: ftrace: Add synthetic event syntax testcase
- i2c: rcar: cleanup DMA for all kinds of failure
- locking/lockdep: Fix debug_locks off performance problem
- ataflop: fix error handling during setup
- swim: fix cleanup on setup error
- nfp: devlink port split support for 1x100G CXP NIC
- tun: Consistently configure generic netdev params via rtnetlink
- s390/sthyi: Fix machine name validity indication
- hwmon: (pwm-fan) Set fan speed to 0 on suspend
- lightnvm: pblk: fix two sleep-in-atomic-context bugs
- spi: spi-ep93xx: Use dma_data_direction for ep93xx_spi_dma_{finish,prepare}
- perf tools: Free temporary 'sys' string in read_event_files()
- perf tools: Cleanup trace-event-info 'tdata' leak
- perf strbuf: Match va_{add,copy} with va_end
- cpupower: Fix coredump on VMWare
- mmc: sdhci-pci-o2micro: Add quirk for O2 Micro dev 0x8620 rev 0x01
- iwlwifi: pcie: avoid empty free RB queue
- iwlwifi: mvm: clear HW_RESTART_REQUESTED when stopping the interface
- x86/olpc: Indicate that legacy PC XO-1 platform should not register RTC
- ACPI / processor: Fix the return value of acpi_processor_ids_walk()
- cpufreq: dt: Try freeing static OPPs only if we have added them
- mtd: rawnand: atmel: Fix potential NULL pointer dereference
- signal: Introduce COMPAT_SIGMINSTKSZ for use in compat_sys_sigaltstack
- Bluetooth: btbcm: Add entry for BCM4335C0 UART bluetooth
- x86: boot: Fix EFI stub alignment
- pinctrl: qcom: spmi-mpp: Fix err handling of pmic_mpp_set_mux
- brcmfmac: fix for proper support of 160MHz bandwidth
- net: phy: phylink: ensure the carrier is off when starting phylink
- block, bfq: correctly charge and reset entity service in all cases
- kprobes: Return error if we fail to reuse kprobe instead of BUG_ON()
- ACPI / LPSS: Add alternative ACPI HIDs for Cherry Trail DMA controllers
- pinctrl: qcom: spmi-mpp: Fix drive strength setting
- pinctrl: spmi-mpp: Fix pmic_mpp_config_get() to be compliant
- pinctrl: ssbi-gpio: Fix pm8xxx_pin_config_get() to be compliant
- net: dsa: mv88e6xxx: Fix writing to a PHY page.
- iwlwifi: mvm: fix BAR seq ctrl reporting
- ixgbevf: VF2VF TCP RSS
- ath10k: schedule hardware restart if WMI command times out
- thermal: da9062/61: Prevent hardware access during system suspend
- cgroup, netclassid: add a preemption point to write_classid
- scsi: esp_scsi: Track residual for PIO transfers
- UAPI: ndctl: Fix g++-unsupported initialisation in headers
- KVM: nVMX: Clear reserved bits of #DB exit qualification
- scsi: megaraid_sas: fix a missing-check bug
- RDMA/core: Do not expose unsupported counters
- IB/ipoib: Clear IPCB before icmp_send
- RDMA/bnxt_re: Fix recursive lock warning in debug kernel
- usb: host: ohci-at91: fix request of irq for optional gpio
- PCI: mediatek: Fix mtk_pcie_find_port() endpoint/port matching logic
- tpm: suppress transmit cmd error logs when TPM 1.2 is disabled/deactivated
- Drivers: hv: vmbus: Use cpumask_var_t for on-stack cpu mask
- VMCI: Resource wildcard match fixed
- PCI / ACPI: Enable wake automatically for power managed bridges
- usb: gadget: udc: atmel: handle at91sam9rl PMC
- ext4: fix argument checking in EXT4_IOC_MOVE_EXT
- MD: fix invalid stored role for a disk
- f2fs: fix to recover inode's i_flags during POR
- PCI/MSI: Warn and return error if driver enables MSI/MSI-X twice
- coresight: etb10: Fix handling of perf mode
- PCI: dwc: pci-dra7xx: Enable errata i870 for both EP and RC mode
- crypto: caam - fix implicit casts in endianness helpers
- usb: chipidea: Prevent unbalanced IRQ disable
- driver/dma/ioat: Call del_timer_sync() without holding prep_lock
- uio: ensure class is registered before devices
- scsi: lpfc: Correct soft lockup when running mds diagnostics
- scsi: lpfc: Correct race with abort on completion path
- f2fs: report error if quota off error during umount
- signal: Always deliver the kernel's SIGKILL and SIGSTOP to a pid namespace
init
- mfd: menelaus: Fix possible race condition and leak
- dmaengine: dma-jz4780: Return error if not probed from DT
- IB/rxe: fix for duplicate request processing and ack psns
- ALSA: hda: Check the non-cached stream buffers more explicitly
- cpupower: Fix AMD Family 0x17 msr_pstate size
- f2fs: fix to account IO correctly
- ARM: dts: exynos: Remove "cooling-{min|max}-level" for CPU nodes
- arm: dts: exynos: Add missing cooling device properties for CPUs
- ARM: dts: exynos: Convert exynos5250.dtsi to opp-v2 bindings
- ARM: dts: exynos: Mark 1 GHz CPU OPP as suspend OPP on Exynos5250
- xen-swiotlb: use actually allocated size on check physical continuous
- tpm: Restore functionality to xen vtpm driver.
- xen/blkfront: avoid NULL blkfront_info dereference on device removal
- xen/balloon: Support xend-based toolstack
- xen: fix race in xen_qlock_wait()
- xen: make xen_qlock_wait() nestable
- xen/pvh: increase early stack size
- xen/pvh: don't try to unplug emulated devices
- libertas: don't set URB_ZERO_PACKET on IN USB transfer
- usbip:vudc: BUG kmalloc-2048 (Not tainted): Poison overwritten
- usb: gadget: udc: renesas_usb3: Fix b-device mode for "workaround"
- iwlwifi: mvm: check return value of rs_rate_from_ucode_rate()
- net/ipv4: defensive cipso option parsing
- dmaengine: ppc4xx: fix off-by-one build failure
- dmaengine: stm32-dma: fix incomplete configuration in cyclic mode
- libnvdimm: Hold reference on parent while scheduling async init
- libnvdimm, region: Fail badblocks listing for inactive regions
- ASoC: intel: skylake: Add missing break in skl_tplg_get_token()
- IB/mlx5: Fix MR cache initialization
- jbd2: fix use after free in jbd2_log_do_checkpoint()
- gfs2_meta: ->mount() can get NULL dev_name
- ext4: initialize retries variable in ext4_da_write_inline_data_begin()
- ext4: fix setattr project check in fssetxattr ioctl
- ext4: propagate error from dquot_initialize() in EXT4_IOC_FSSETXATTR
- ext4: fix use-after-free race in ext4_remount()'s error path
- EDAC, amd64: Add Family 17h, models 10h-2fh support
- EDAC, {i7core,sb,skx}_edac: Fix uncorrected error counting
- EDAC, skx_edac: Fix logical channel intermediate decoding
- ARM: dts: dra7: Fix up unaligned access setting for PCIe EP
- PCI/ASPM: Fix link_state teardown on device removal
- PCI: Add Device IDs for Intel GPU "spurious interrupt" quirk
- PCI: vmd: White list for fast interrupt handlers
- signal/GenWQE: Fix sending of SIGKILL
- signal: Guard against negative signal numbers in copy_siginfo_from_user32
- crypto: lrw - Fix out-of bounds access on counter overflow
- crypto: tcrypt - fix ghash-generic speed test
- mm: /proc/pid/smaps_rollup: fix NULL pointer deref in smaps_pte_range()
- ima: fix showing large 'violations' or 'runtime_measurements_count'
- hugetlbfs: dirty pages as they are added to pagecache
- mm/rmap: map_pte() was not handling private ZONE_DEVICE page properly
- KVM: arm64: Fix caching of host MDCR_EL2 value
- kbuild: fix kernel/bounds.c 'W=1' warning
- iio: ad5064: Fix regulator handling
- iio: adc: imx25-gcq: Fix leak of device_node in mx25_gcq_setup_cfgs()
- iio: adc: at91: fix acking DRDY irq on simple conversions
- iio: adc: at91: fix wrong channel number in triggered buffer mode
- w1: omap-hdq: fix missing bus unregister at removal
- smb3: allow stats which track session and share reconnects to be reset
- smb3: do not attempt cifs operation in smb3 query info error path
- smb3: on kerberos mount if server doesn't specify auth type use krb5
- printk: Fix panic caused by passing log_buf_len to command line
- genirq: Fix race on spurious interrupt detection
- NFSv4.1: Fix the r/wsize checking
- nfs: Fix a missed page unlock after pg_doio()
- nfsd: Fix an Oops in free_session()
- lockd: fix access beyond unterminated strings in prints
- dm ioctl: harden copy_params()'s copy_from_user() from malicious users
- dm zoned: fix metadata block ref counting
- dm zoned: fix various dmz_get_mblock() issues
- powerpc/msi: Fix compile error on mpc83xx
- MIPS: OCTEON: fix out of bounds array access on CN68XX
- iommu/arm-smmu: Ensure that page-table updates are visible before TLBI
- TC: Set DMA masks for devices
- media: v4l2-tpg: fix kernel oops when enabling HFLIP and OSD
- kgdboc: Passing ekgdboc to command line causes panic
- xen: fix xen_qlock_wait()
- xen-blkfront: fix kernel panic with negotiate_mq error path
- media: em28xx: use a default format if TRY_FMT fails
- media: tvp5150: avoid going past array on v4l2_querymenu()
- media: em28xx: fix input name for Terratec AV 350
- media: em28xx: make v4l2-compliance happier by starting sequence on zero
- media: media colorspaces*.rst: rename AdobeRGB to opRGB
- arm64: lse: remove -fcall-used-x0 flag
- rpmsg: smd: fix memory leak on channel create
- Cramfs: fix abad comparison when wrap-arounds occur
- ARM: dts: socfpga: Fix SDRAM node address for Arria10
- arm64: dts: stratix10: Correct System Manager register size
- soc/tegra: pmc: Fix child-node lookup
- btrfs: qgroup: Avoid calling qgroup functions if qgroup is not enabled
- btrfs: Handle owner mismatch gracefully when walking up tree
- btrfs: locking: Add extra check in btrfs_init_new_buffer() to avoid deadlock
- btrfs: fix error handling in free_log_tree
- btrfs: Enhance btrfs_trim_fs function to handle error better
- btrfs: Ensure btrfs_trim_fs can trim the whole filesystem
- btrfs: iterate all devices during trim, instead of fs_devices::alloc_list
- btrfs: don't attempt to trim devices that don't support it
- btrfs: wait on caching when putting the bg cache
- btrfs: protect space cache inode alloc with GFP_NOFS
- btrfs: reset max_extent_size on clear in a bitmap
- btrfs: make sure we create all new block groups
- Btrfs: fix warning when replaying log after fsync of a tmpfile
- Btrfs: fix wrong dentries after fsync of file that got its parent replaced
- btrfs: qgroup: Dirty all qgroups before rescan
- Btrfs: fix null pointer dereference on compressed write path error
- Btrfs: fix assertion on fsync of regular file when using no-holes feature
- btrfs: set max_extent_size properly
- btrfs: don't use ctl->free_space for max_extent_size
- btrfs: only free reserved extent if we didn't insert it
- btrfs: don't run delayed_iputs in commit
- btrfs: move the dio_sem higher up the callchain
- Btrfs: fix use-after-free during inode eviction
- Btrfs: fix use-after-free when dumping free space
- Btrfs: fix fsync after hole punching when using no-holes feature
- net: sched: Remove TCA_OPTIONS from policy
- bpf: wait for running BPF programs when updating map-in-map
- MD: fix invalid stored role for a disk - try2
- mtd: spi-nor: intel-spi: Add support for Intel Ice Lake SPI serial flash
- mtd: spi-nor: fsl-quadspi: Don't let -EINVAL on the bus
- bcache: correct dirty data statistics
- block: don't deal with discard limit in blkdev_issue_discard()
- block: make sure discard bio is aligned with logical block size
- block: make sure writesame bio is aligned with logical block size
- dma-mapping: fix panic caused by passing empty cma command line argument
- ACPI / OSL: Use 'jiffies' as the time bassis for acpi_os_get_timer()
- ACPICA: AML Parser: fix parse loop to correctly skip erroneous extended
opcodes
- kprobes/x86: Use preempt_enable() in optimized_callback()
- mailbox: PCC: handle parse error
- ALSA: hda: Add 2 more models to the power_save blacklist
- drm: fix use of freed memory in drm_mode_setcrtc
- nvme: remove ns sibling before clearing path
- nfp: flower: fix pedit set actions for multiple partial masks
- nfp: flower: use offsets provided by pedit instead of index for ipv6
- perf report: Don't crash on invalid inline debug information
- drm: Get ref on CRTC commit object when waiting for flip_done
- net: socionext: Reset tx queue in ndo_stop
- lightnvm: pblk: fix race on sysfs line state
- lightnvm: pblk: fix race condition on metadata I/O
- bcache: Populate writeback_rate_minimum attribute
- sdhci: acpi: add free_slot callback
- mtd: rawnand: denali: set SPARE_AREA_SKIP_BYTES register to 8 if unset
- iwlwifi: mvm: check for n_profiles validity in EWRD ACPI
- ACPI/PPTT: Handle architecturally unknown cache types
- ACPI / PM: LPIT: Register sysfs attributes based on FADT
- pinctrl: sunxi: fix 'pctrl->functions' allocation in
sunxi_pinctrl_build_state
- arm64: entry: Allow handling of undefined instructions from EL1
- bpf/verifier: fix verifier instability
- gpio: brcmstb: allow 0 width GPIO banks
- libata: Apply NOLPM quirk for SAMSUNG MZ7TD256HAFV-000L9
- thermal: rcar_thermal: Prevent doing work after unbind
- net: stmmac: dwmac-sun8i: fix OF child-node lookup
- f2fs: clear PageError on the read path
- xprtrdma: Reset credit grant properly after a disconnect
- nvmem: check the return value of nvmem_add_cells()
- f2fs: avoid sleeping under spin_lock
- f2fs: fix to recover cold bit of inode block during POR
- OPP: Free OPP table properly on performance state irregularities
- IB/rxe: Revise the ib_wr_opcode enum
- ext4: fix EXT4_IOC_SWAP_BOOT
- selinux: fix mounting of cgroup2 under older policies
- KVM: arm/arm64: Ensure only THP is candidate for adjustment
- NFC: nfcmrvl_uart: fix OF child-node lookup
- media: ov7670: make "xclk" clock optional
- powerpc/tm: Fix HFSCR bit for no suspend case
- powerpc/64s/hash: Do not use PPC_INVALIDATE_ERAT on CPUs before POWER9
- MIPS: memset: Fix CPU_DADDI_WORKAROUNDS `small_fixup' regression
- power: supply: twl4030-charger: fix OF sibling-node lookup
- ocxl: Fix access to the AFU Descriptor Data
- net: bcmgenet: fix OF child-node lookup
- media: cec: make cec_get_edid_spa_location() an inline function
- media: cec: integrate cec_validate_phys_addr() in cec-api.c
- media: adv7604: when the EDID is cleared, unconfigure CEC as well
- media: adv7842: when the EDID is cleared, unconfigure CEC as well
- drm/mediatek: fix OF sibling-node lookup
- media: replace ADOBERGB by OPRGB
- media: hdmi.h: rename ADOBE_RGB to OPRGB and ADOBE_YCC to OPYCC
- btrfs: fix error handling in btrfs_dev_replace_start
- btrfs: keep trim from interfering with transaction commits
- Btrfs: don't clean dirty pages during buffered writes
- btrfs: release metadata before running delayed refs
- Btrfs: fix deadlock when writing out free space caches
- btrfs: reset max_extent_size properly
- btrfs: fix insert_reserved error handling
- powerpc/traps: restore recoverability of machine_check interrupts
- powerpc/64/module: REL32 relocation range check
- powerpc/mm: Fix page table dump to work on Radix
- powerpc/eeh: Fix possible null deref in eeh_dump_dev_log()
- tty: check name length in tty_find_polling_driver()
- ARM: imx_v6_v7_defconfig: Select CONFIG_TMPFS_POSIX_ACL
- powerpc/nohash: fix undefined behaviour when testing page size support
- powerpc/mm: Don't report hugepage tables as memory leaks when using kmemleak
- drm/omap: fix memory barrier bug in DMM driver
- drm/hisilicon: hibmc: Do not carry error code in HiBMC framebuffer pointer
- media: pci: cx23885: handle adding to list failure
- media: coda: don't overwrite h.264 profile_idc on decoder instance
- MIPS: kexec: Mark CPU offline before disabling local IRQ
- powerpc/boot: Ensure _zimage_start is a weak symbol
- powerpc/memtrace: Remove memory in chunks
- MIPS/PCI: Call pcie_bus_configure_settings() to set MPS/MRRS
- sc16is7xx: Fix for multi-channel stall
- media: tvp5150: fix width alignment during set_selection()
- powerpc/selftests: Wait all threads to join
- staging:iio:ad7606: fix voltage scales
- 9p locks: fix glock.client_id leak in do_lock
- 9p: clear dangling pointers in p9stat_free
- ovl: fix error handling in ovl_verify_set_fh()
- scsi: qla2xxx: Fix incorrect port speed being set for FC adapters
- scsi: qla2xxx: Fix process response queue for ISP26XX and above
- scsi: qla2xxx: Remove stale debug trace message from tcm_qla2xxx
- scsi: qla2xxx: shutdown chip if reset fail
- scsi: qla2xxx: Fix re-using LoopID when handle is in use
- ovl: fix recursive oi->lock in ovl_link()
- MIPS: Loongson-3: Fix CPU UART irq delivery problem
- MIPS: Loongson-3: Fix BRIDGE irq delivery problem
- xtensa: add NOTES section to the linker script
- xtensa: make sure bFLT stack is 16 byte aligned
- xtensa: fix boot parameters address translation
- um: Drop own definition of PTRACE_SYSEMU/_SINGLESTEP
- clk: s2mps11: Fix matching when built as module and DT node contains
compatible
- clk: at91: Fix division by zero in PLL recalc_rate()
- clk: rockchip: Fix static checker warning in rockchip_ddrclk_get_parent call
- clk: mvebu: use correct bit for 98DX3236 NAND
- libceph: bump CEPH_MSG_MAX_DATA_LEN
- mach64: fix display corruption on big endian machines
- mach64: fix image corruption due to reading accelerator registers
- reset: hisilicon: fix potential NULL pointer dereference
- vhost/scsi: truncate T10 PI iov_iter to prot_bytes
- scsi: qla2xxx: Initialize port speed to avoid setting lower speed
- SCSI: fix queue cleanup race before queue initialization is done
- soc: ti: QMSS: Fix usage of irq_set_affinity_hint
- ocfs2: fix a misuse a of brelse after failing ocfs2_check_dir_entry
- ocfs2: free up write context when direct IO failed
- mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings
- netfilter: conntrack: fix calculation of next bucket number in early_drop
- ARM: 8809/1: proc-v7: fix Thumb annotation of cpu_v7_hvc_switch_mm
- mtd: docg3: don't set conflicting BCH_CONST_PARAMS option
- of, numa: Validate some distance map rules
- x86/cpu/vmware: Do not trace vmware_sched_clock()
- x86/hyper-v: Enable PIT shutdown quirk
- termios, tty/tty_baudrate.c: fix buffer overrun
- arch/alpha, termios: implement BOTHER, IBSHIFT and termios2
- watchdog/core: Add missing prototypes for weak functions
- btrfs: fix pinned underflow after transaction aborted
- Btrfs: fix cur_offset in the error case for nocow
- Btrfs: fix infinite loop on inode eviction after deduplication of eof block
- Btrfs: fix data corruption due to cloning of eof block
- clockevents/drivers/i8253: Add support for PIT shutdown quirk
- ext4: add missing brelse() update_backups()'s error path
- ext4: add missing brelse() in set_flexbg_block_bitmap()'s error path
- ext4: add missing brelse() add_new_gdb_meta_bg()'s error path
- ext4: avoid potential extra brelse in setup_new_flex_group_blocks()
- ext4: missing !bh check in ext4_xattr_inode_write()
- ext4: fix possible inode leak in the retry loop of ext4_resize_fs()
- ext4: avoid buffer leak on shutdown in ext4_mark_iloc_dirty()
- ext4: avoid buffer leak in ext4_orphan_add() after prior errors
- ext4: fix missing cleanup if ext4_alloc_flex_bg_array() fails while resizing
- ext4: avoid possible double brelse() in add_new_gdb() on error path
- ext4: fix possible leak of sbi->s_group_desc_leak in error path
- ext4: fix possible leak of s_journal_flag_rwsem in error path
- ext4: fix buffer leak in ext4_xattr_get_block() on error path
- ext4: release bs.bh before re-using in ext4_xattr_block_find()
- ext4: fix buffer leak in ext4_xattr_move_to_block() on error path
- ext4: fix buffer leak in ext4_expand_extra_isize_ea() on error path
- ext4: fix buffer leak in __ext4_read_dirblock() on error path
- mount: Prevent MNT_DETACH from disconnecting locked mounts
- kdb: use correct pointer when 'btc' calls 'btt'
- kdb: print real address of pointers instead of hashed addresses
- sunrpc: correct the computation for page_ptr when truncating
- rtc: hctosys: Add missing range error reporting
- configfs: replace strncpy with memcpy
- gfs2: Put bitmap buffers in put_super
- lib/ubsan.c: don't mark __ubsan_handle_builtin_unreachable as noreturn
- hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444!
- mm/swapfile.c: use kvzalloc for swap_info_struct allocation
- efi/arm/libstub: Pack FDT after populating it
- drm/amdgpu: add missing CHIP_HAINAN in amdgpu_ucode_get_load_type
- drm/nouveau: Check backlight IDs are >= 0, not > 0
- drm/dp_mst: Check if primary mstb is null
- drm/i915: Restore vblank interrupts earlier
- drm/i915: Don't unset intel_connector->mst_port
- drm/i915: Skip vcpi allocation for MSTB ports that are gone
- drm/i915: Large page offsets for pread/pwrite
- drm/i915/hdmi: Add HDMI 2.0 audio clock recovery N values
- drm/i915: Don't oops during modeset shutdown after lpe audio deinit
- drm/i915: Mark pin flags as u64
- drm/i915/execlists: Force write serialisation into context image vs
execution
- CONFIG_XEN_PV breaks xen_create_contiguous_region on ARM
- ovl: check whiteout in ovl_create_over_whiteout()
- nvme-loop: fix kernel oops in case of unhandled command
- Input: wm97xx-ts - fix exit path
- powerpc/Makefile: Fix PPC_BOOK3S_64 ASFLAGS
- tracing/kprobes: Check the probe on unloaded module correctly
- drm/amdgpu/powerplay: fix missing break in switch statements
- udf: Prevent write-unsupported filesystem to be remounted read-write
- serial: sh-sci: Fix could not remove dev_attr_rx_fifo_timeout
- zram: close udev startup race condition as default groups
- clk: rockchip: fix wrong mmc sample phase shift for rk3328
- bonding/802.3ad: fix link_failure_count tracking
- hwmon: (core) Fix double-free in __hwmon_device_register()
- perf stat: Handle different PMU names with common prefix
- mnt: fix __detach_mounts infinite loop
- NFSv4: Don't exit the state manager without clearing
NFS4CLNT_MANAGER_RUNNING
- libata: blacklist SAMSUNG MZ7TD256HAFV-000L9 SSD
- drm/i915/dp: Link train Fallback on eDP only if fallback link BW can fit
panel's native mode
- drm/i915: Fix ilk+ watermarks when disabling pipes
- drm/i915: Fix possible race in intel_dp_add_mst_connector()
* [SRU][B/B-OEM]Fix resume failure on some TPM chips (LP: #1836031)
- tpm: tpm_try_transmit() refactor error flow.
* Linux md raid-10 freezes during resync (LP: #1767992)
- md: fix raid10 hang issue caused by barrier
* hda/realtek: can't detect external mic on a Dell machine (LP: #1836755)
- ALSA: hda/realtek: apply ALC891 headset fixup to one Dell machine
* CVE-2019-12614
- powerpc/pseries/dlpar: Fix a missing check in dlpar_parse_cc_property()
* x86: mm: early boot problem on i386 with KPTI enabled (LP: #1827884)
- Revert "perf/core: Make sure the ring-buffer is mapped in all page-tables"
- x86/mm: Clarify hardware vs. software "error_code"
- x86/mm: Break out kernel address space handling
- x86/mm: Break out user address space handling
- x86/mm/fault: Allow stack access below %rsp
* bnx2x driver causes 100% CPU load (LP: #1832082)
- bnx2x: Prevent ptp_task to be rescheduled indefinitely
* Sometimes touchpad detected as mouse(i2c designware fails to get adapter
number) (LP: #1835150)
- i2c: i2c-designware-platdrv: Cleanup setting of the adapter number
- i2c: i2c-designware-platdrv: Always use a dynamic adapter number
* HP EliteBook 745 G5 (Ryzen 2500U) fails to boot unless `mce=off` is set on
command line (LP: #1796443)
- x86/MCE/AMD: Turn off MC4_MISC thresholding on all family 0x15 models
- x86/MCE/AMD: Carve out the MC4_MISC thresholding quirk
- x86/MCE: Add an MCE-record filtering function
- x86/MCE/AMD: Don't report L1 BTB MCA errors on some family 17h models
* Bionic update: upstream stable patchset 2019-07-15 (LP: #1836654)
- media: af9035: prevent buffer overflow on write
- batman-adv: Avoid probe ELP information leak
- batman-adv: Fix segfault when writing to throughput_override
- batman-adv: Fix segfault when writing to sysfs elp_interval
- batman-adv: Prevent duplicated gateway_node entry
- batman-adv: Prevent duplicated nc_node entry
- batman-adv: Prevent duplicated softif_vlan entry
- batman-adv: Prevent duplicated global TT entry
- batman-adv: Prevent duplicated tvlv handler
- batman-adv: fix backbone_gw refcount on queue_work() failure
- batman-adv: fix hardif_neigh refcount on queue_work() failure
- clocksource/drivers/ti-32k: Add CLOCK_SOURCE_SUSPEND_NONSTOP flag for non-
am43 SoCs
- scsi: ibmvscsis: Fix a stringop-overflow warning
- scsi: ibmvscsis: Ensure partition name is properly NUL terminated
- intel_th: pci: Add Ice Lake PCH support
- Input: atakbd - fix Atari keymap
- Input: atakbd - fix Atari CapsLock behaviour
- net: emac: fix fixed-link setup for the RTL8363SB switch
- ravb: do not write 1 to reserved bits
- PCI: dwc: Fix scheduling while atomic issues
- drm: mali-dp: Call drm_crtc_vblank_reset on device init
- scsi: ipr: System hung while dlpar adding primary ipr adapter back
- scsi: sd: don't crash the host on invalid commands
- net/mlx4: Use cpumask_available for eq->affinity_mask
- clocksource/drivers/fttmr010: Fix set_next_event handler
- powerpc/tm: Fix userspace r13 corruption
- powerpc/tm: Avoid possible userspace r1 corruption on reclaim
- iommu/amd: Return devid as alias for ACPI HID devices
- ARC: build: Get rid of toolchain check
- ARC: build: Don't set CROSS_COMPILE in arch's Makefile
- HID: quirks: fix support for Apple Magic Keyboards
- staging: ccree: check DMA pool buf !NULL before free
- net/smc: fix sizeof to int comparison
- qed: Fix populating the invalid stag value in multi function mode.
- RDMA/uverbs: Fix validity check for modify QP
- bpf: test_maps, only support ESTABLISHED socks
- RDMA/bnxt_re: Fix system crash during RDMA resource initialization
- RISC-V: include linux/ftrace.h in asm-prototypes.h
- powerpc/numa: Use associativity if VPHN hcall is successful
- x86/boot: Fix kexec booting failure in the SEV bit detection code
- xfrm: Validate address prefix lengths in the xfrm selector.
- xfrm6: call kfree_skb when skb is toobig
- xfrm: reset transport header back to network header after all input
transforms ahave been applied
- xfrm: reset crypto_done when iterating over multiple input xfrms
- mac80211: Always report TX status
- cfg80211: reg: Init wiphy_idx in regulatory_hint_core()
- mac80211: fix pending queue hang due to TX_DROP
- cfg80211: Address some corner cases in scan result channel updating
- mac80211: TDLS: fix skb queue/priority assignment
- mac80211: fix TX status reporting for ieee80211s
- ARM: 8799/1: mm: fix pci_ioremap_io() offset check
- xfrm: validate template mode
- netfilter: bridge: Don't sabotage nf_hook calls from an l3mdev
- arm64: hugetlb: Fix handling of young ptes
- ARM: dts: BCM63xx: Fix incorrect interrupt specifiers
- net: macb: Clean 64b dma addresses if they are not detected
- soc: fsl: qbman: qman: avoid allocating from non existing gen_pool
- soc: fsl: qe: Fix copy/paste bug in ucc_get_tdm_sync_shift()
- mac80211_hwsim: do not omit multicast announce of first added radio
- Bluetooth: SMP: fix crash in unpairing
- pxa168fb: prepare the clock
- qed: Avoid implicit enum conversion in qed_set_tunn_cls_info
- qed: Fix mask parameter in qed_vf_prep_tunn_req_tlv
- qed: Avoid implicit enum conversion in qed_roce_mode_to_flavor
- qed: Avoid constant logical operation warning in qed_vf_pf_acquire
- qed: Avoid implicit enum conversion in qed_iwarp_parse_rx_pkt
- asix: Check for supported Wake-on-LAN modes
- ax88179_178a: Check for supported Wake-on-LAN modes
- lan78xx: Check for supported Wake-on-LAN modes
- sr9800: Check for supported Wake-on-LAN modes
- r8152: Check for supported Wake-on-LAN Modes
- smsc75xx: Check for Wake-on-LAN modes
- smsc95xx: Check for Wake-on-LAN modes
- cfg80211: fix use-after-free in reg_process_hint()
- perf/core: Fix perf_pmu_unregister() locking
- perf/ring_buffer: Prevent concurent ring buffer access
- perf/x86/intel/uncore: Fix PCI BDF address of M3UPI on SKX
- perf/x86/amd/uncore: Set ThreadMask and SliceMask for L3 Cache perf events
- net: fec: fix rare tx timeout
- declance: Fix continuation with the adapter identification message
- locking/ww_mutex: Fix runtime warning in the WW mutex selftest
- be2net: don't flip hw_features when VXLANs are added/deleted
- net: cxgb3_main: fix a missing-check bug
- yam: fix a missing-check bug
- ocfs2: fix crash in ocfs2_duplicate_clusters_by_page()
- iwlwifi: mvm: check for short GI only for OFDM
- iwlwifi: dbg: allow wrt collection before ALIVE
- iwlwifi: fix the ALIVE notification layout
- usbip: vhci_hcd: update 'status' file header and format
- net/mlx5: Fix mlx5_get_vector_affinity function
- powerpc/pseries: Add empty update_numa_cpu_lookup_table() for NUMA=n
- dm integrity: fail early if required HMAC key is not available
- net: phy: realtek: Use the dummy stubs for MMD register access for rtl8211b
- net: phy: Add general dummy stubs for MMD register access
- scsi: qla2xxx: Avoid double completion of abort command
- kbuild: set no-integrated-as before incl. arch Makefile
- IB/mlx5: Avoid passing an invalid QP type to firmware
- l2tp: remove configurable payload offset
- cifs: Use ULL suffix for 64-bit constant
- KVM: x86: Update the exit_qualification access bits while walking an address
- sparc64: Fix regression in pmdp_invalidate().
- tpm: move the delay_msec increment after sleep in tpm_transmit()
- bpf: sockmap, map_release does not hold refcnt for pinned maps
- tpm: tpm_crb: relinquish locality on error path.
- IB/usnic: Update with bug fixes from core code
- mmc: dw_mmc-rockchip: correct property names in debug
- MIPS: Workaround GCC __builtin_unreachable reordering bug
- iio: buffer: fix the function signature to match implementation
- selftests/powerpc: Add ptrace hw breakpoint test
- scsi: ibmvfc: Avoid unnecessary port relogin
- scsi: sd: Remember that READ CAPACITY(16) succeeded
- btrfs: quota: Set rescan progress to (u64)-1 if we hit last leaf
- net: phy: phylink: Don't release NULL GPIO
- x86/paravirt: Fix some warning messages
- net: stmmac: mark PM functions as __maybe_unused
- kconfig: fix the rule of mainmenu_stmt symbol
- libertas: call into generic suspend code before turning off power
- compiler.h: Allow arch-specific asm/compiler.h
- ARM: dts: imx53-qsb: disable 1.2GHz OPP
- perf python: Use -Wno-redundant-decls to build with PYTHON=python3
- rxrpc: Don't check RXRPC_CALL_TX_LAST after calling rxrpc_rotate_tx_window()
- rxrpc: Only take the rwind and mtu values from latest ACK
- rxrpc: Fix connection-level abort handling
- selftests: rtnetlink.sh explicitly requires bash.
- fs/fat/fatent.c: add cond_resched() to fat_count_free_clusters()
- mtd: spi-nor: Add support for is25wp series chips
- ARM: dts: r8a7790: Correct critical CPU temperature
- media: uvcvideo: Fix driver reference counting
- Revert "netfilter: ipv6: nf_defrag: drop skb dst before queueing"
- perf tools: Disable parallelism for 'make clean'
- drm/i915/gvt: fix memory leak of a cmd_entry struct on error exit path
- bridge: do not add port to router list when receives query with source
0.0.0.0
- net: bridge: remove ipv6 zero address check in mcast queries
- ipv6: mcast: fix a use-after-free in inet6_mc_check
- ipv6/ndisc: Preserve IPv6 control buffer if protocol error handlers are
called
- llc: set SOCK_RCU_FREE in llc_sap_add_socket()
- net: fec: don't dump RX FIFO register when not available
- net/ipv6: Fix index counter for unicast addresses in in6_dump_addrs
- net: sched: gred: pass the right attribute to gred_change_table_def()
- net: socket: fix a missing-check bug
- net: stmmac: Fix stmmac_mdio_reset() when building stmmac as modules
- net: udp: fix handling of CHECKSUM_COMPLETE packets
- r8169: fix NAPI handling under high load
- sctp: fix race on sctp_id2asoc
- udp6: fix encap return code for resubmitting
- virtio_net: avoid using netif_tx_disable() for serializing tx routine
- ethtool: fix a privilege escalation bug
- bonding: fix length of actor system
- ip6_tunnel: Fix encapsulation layout
- openvswitch: Fix push/pop ethernet validation
- net/mlx5: Take only bit 24-26 of wqe.pftype_wq for page fault type
- net: sched: Fix for duplicate class dump
- net: drop skb on failure in ip_check_defrag()
- net: fix pskb_trim_rcsum_slow() with odd trim offset
- net/mlx5e: fix csum adjustments caused by RXFCS
- rtnetlink: Disallow FDB configuration for non-Ethernet device
- net: ipmr: fix unresolved entry dumps
- net: bcmgenet: Poll internal PHY for GENETv5
- net/sched: cls_api: add missing validation of netlink attributes
- net/mlx5: Fix build break when CONFIG_SMP=n
- mac80211_hwsim: fix locking when iterating radios during ns exit
- rxrpc: Fix checks as to whether we should set up a new call
- rxrpc: Fix transport sockopts to get IPv4 errors on an IPv6 socket
- thunderbolt: Do not handle ICM events after domain is stopped
- thunderbolt: Initialize after IOMMUs
- RISCV: Fix end PFN for low memory
- drm/amd/display: Signal hw_done() after waiting for flip_done()
- powerpc/numa: Skip onlining a offline node in kdump path
- mm/gup_benchmark: fix unsigned comparison to zero in __gup_benchmark_ioctl
- perf report: Don't try to map ip to invalid map
- perf record: Use unmapped IP for inline callchain cursors
- rxrpc: Carry call state out of locked section in rxrpc_rotate_tx_window()
- gpio: Assign gpio_irq_chip::parents to non-stack pointer
- IB/mlx5: Unmap DMA addr from HCA before IOMMU
- rds: RDS (tcp) hangs on sendto() to unresponding address
- sparc64: Export __node_distance.
- sparc64: Make corrupted user stacks more debuggable.
- sparc64: Make proc_id signed.
- sparc64: Set %l4 properly on trap return after handling signals.
- sparc: Fix single-pcr perf event counter management.
- sparc: Fix syscall fallback bugs in VDSO.
- sparc: Throttle perf events properly.
- eeprom: at24: Add support for address-width property
- vfs: swap names of {do,vfs}_clone_file_range()
- bpf: fix partial copy of map_ptr when dst is scalar
- gpio: mxs: Get rid of external API call
- xfs: truncate transaction does not modify the inobt
- cachefiles: fix the race between cachefiles_bury_object() and rmdir(2)
- drm/edid: VSDB yCBCr420 Deep Color mode bit definitions
- drm: fb-helper: Reject all pixel format changing requests
- cdc-acm: do not reset notification buffer index upon urb unlinking
- cdc-acm: correct counting of UART states in serial state notification
- cdc-acm: fix race between reset and control messaging
- usb: usbip: Fix BUG: KASAN: slab-out-of-bounds in vhci_hub_control()
- USB: fix the usbfs flag sanitization for control transfers
- Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15IGM
- sched/fair: Fix throttle_list starvation with low CFS quota
- x86/tsc: Force inlining of cyc2ns bits
- x86, hibernate: Fix nosave_regions setup for hibernation
- x86/percpu: Fix this_cpu_read()
- x86/time: Correct the attribute on jiffies' definition
- x86/fpu: Fix i486 + no387 boot crash by only saving FPU registers on context
switch if there is an FPU
- clk: sunxi-ng: sun4i: Set VCO and PLL bias current to lowest setting
- drm/sun4i: Fix an ulong overflow in the dotclock driver
- x86/swiotlb: Enable swiotlb for > 4GiG RAM on 32-bit kernels
* Colour banding in HP Pavilion 15-n233sl integrated display (LP: #1794387) //
Bionic update: upstream stable patchset 2019-07-15 (LP: #1836654)
- drm/edid: Add 6 bpc quirk for BOE panel in HP Pavilion 15-n233sl
* Bionic update: upstream stable patchset 2019-07-12 (LP: #1836426)
- drm/amd/pp: initialize result to before or'ing in data
- drm/amdgpu: add another ATPX quirk for TOPAZ
- tools/power turbostat: fix possible sprintf buffer overflow
- mac80211: Run TXQ teardown code before de-registering interfaces
- mac80211_hwsim: require at least one channel
- btrfs: btrfs_shrink_device should call commit transaction at the end
- scsi: csiostor: add a check for NULL pointer after kmalloc()
- mac80211: correct use of IEEE80211_VHT_CAP_RXSTBC_X
- mac80211_hwsim: correct use of IEEE80211_VHT_CAP_RXSTBC_X
- gpio: adp5588: Fix sleep-in-atomic-context bug
- mac80211: mesh: fix HWMP sequence numbering to follow standard
- mac80211: avoid kernel panic when building AMSDU from non-linear SKB
- gpiolib: acpi: Switch to cansleep version of GPIO library call
- gpiolib-acpi: Register GpioInt ACPI event handlers from a late_initcall
- cfg80211: nl80211_update_ft_ies() to validate NL80211_ATTR_IE
- mac80211: do not convert to A-MSDU if frag/subframe limited
- mac80211: always account for A-MSDU header changes
- tools/kvm_stat: fix handling of invalid paths in debugfs provider
- gpio: Fix crash due to registration race
- ARC: atomics: unbork atomic_fetch_##op()
- md/raid5-cache: disable reshape completely
- RAID10 BUG_ON in raise_barrier when force is true and conf->barrier is 0
- i2c: uniphier: issue STOP only for last message or I2C_M_STOP
- i2c: uniphier-f: issue STOP only for last message or I2C_M_STOP
- net: cadence: Fix a sleep-in-atomic-context bug in macb_halt_tx()
- fs/cifs: don't translate SFM_SLASH (U+F026) to backslash
- mac80211: fix an off-by-one issue in A-MSDU max_subframe computation
- cfg80211: fix a type issue in ieee80211_chandef_to_operating_class()
- mac80211: fix a race between restart and CSA flows
- mac80211: Fix station bandwidth setting after channel switch
- mac80211: don't Tx a deauth frame if the AP forbade Tx
- mac80211: shorten the IBSS debug messages
- tools/vm/slabinfo.c: fix sign-compare warning
- tools/vm/page-types.c: fix "defined but not used" warning
- mm: madvise(MADV_DODUMP): allow hugetlbfs pages
- netfilter: xt_cluster: add dependency on conntrack module
- HID: add support for Apple Magic Keyboards
- usb: gadget: fotg210-udc: Fix memory leak of fotg210->ep[i]
- HID: hid-saitek: Add device ID for RAT 7 Contagion
- scsi: qedi: Add the CRC size within iSCSI NVM image
- perf evsel: Fix potential null pointer dereference in perf_evsel__new_idx()
- perf util: Fix bad memory access in trace info.
- perf probe powerpc: Ignore SyS symbols irrespective of endianness
- netfilter: nf_tables: release chain in flushing set
- Revert "iio: temperature: maxim_thermocouple: add MAX31856 part"
- RDMA/ucma: check fd type in ucma_migrate_id()
- HID: sensor-hub: Restore fixup for Lenovo ThinkPad Helix 2 sensor hub report
- USB: yurex: Check for truncation in yurex_read()
- nvmet-rdma: fix possible bogus dereference under heavy load
- net/mlx5: Consider PCI domain in search for next dev
- drm/nouveau/TBDdevinit: don't fail when PMU/PRE_OS is missing from VBIOS
- drm/nouveau/disp: fix DP disable race
- dm raid: fix rebuild of specific devices by updating superblock
- fs/cifs: suppress a string overflow warning
- perf/x86/intel: Add support/quirk for the MISPREDICT bit on Knights Landing
CPUs
- dm thin metadata: try to avoid ever aborting transactions
- arch/hexagon: fix kernel/dma.c build warning
- hexagon: modify ffs() and fls() to return int
- arm64: jump_label.h: use asm_volatile_goto macro instead of "asm goto"
- drm/amdgpu: fix error handling in amdgpu_cs_user_fence_chunk
- r8169: Clear RTL_FLAG_TASK_*_PENDING when clearing RTL_FLAG_TASK_ENABLED
- s390/qeth: don't dump past end of unknown HW header
- cifs: read overflow in is_valid_oplock_break()
- xen/manage: don't complain about an empty value in control/sysrq node
- xen: avoid crash in disable_hotplug_cpu
- xen: fix GCC warning and remove duplicate EVTCHN_ROW/EVTCHN_COL usage
- ovl: fix access beyond unterminated strings
- ovl: fix memory leak on unlink of indexed file
- ovl: fix format of setxattr debug
- sysfs: Do not return POSIX ACL xattrs via listxattr
- smb2: fix missing files in root share directory listing
- iommu/amd: Clear memory encryption mask from physical address
- crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe()
- crypto: mxs-dcp - Fix wait logic on chan threads
- crypto: caam/jr - fix ablkcipher_edesc pointer arithmetic
- gpiolib: Free the last requested descriptor
- Drivers: hv: vmbus: Use get/put_cpu() in vmbus_connect()
- tools: hv: fcopy: set 'error' in case an unknown operation was requested
- ocfs2: fix locking for res->tracking and dlm->tracking_list
- ixgbe: check return value of napi_complete_done()
- dm thin metadata: fix __udivdi3 undefined on 32-bit
- Btrfs: fix unexpected failure of nocow buffered writes after snapshotting
when low on space
- scsi: aacraid: fix a signedness bug
- tipc: switch to rhashtable iterator
- net: mvpp2: initialize port of_node pointer
- tc-testing: add test-cases for numeric and invalid control action
- tools/kvm_stat: fix updates for dead guests
- ibmvnic: Include missing return code checks in reset function
- net/ibm/emac: wrong emac_calc_base call was used by typo
- ceph: avoid a use-after-free in ceph_destroy_options()
- afs: Fix cell specification to permit an empty address list
- netfilter: xt_checksum: ignore gso skbs
- HID: intel-ish-hid: Enable Sunrise Point-H ish driver
- iio: imu: st_lsm6dsx: take into account ts samples in wm configuration
- riscv: Do not overwrite initrd_start and initrd_end
- drm/nouveau: fix oops in client init failure path
- drm/nouveau/mmu: don't attempt to dereference vmm without valid instance
pointer
- drm/nouveau/disp/gm200-: enforce identity-mapped SOR assignment for LVDS/eDP
panels
- sched/topology: Set correct NUMA topology type
- drm/amdgpu: Fix SDMA hang in prt mode v2
- asm-generic: io: Fix ioport_map() for !CONFIG_GENERIC_IOMAP &&
CONFIG_INDIRECT_PIO
- x86/APM: Fix build warning when PROC_FS is not enabled
- new primitive: discard_new_inode()
- ovl: set I_CREATING on inode being created
- crypto: chelsio - Fix memory corruption in DMA Mapped buffers.
- perf/core: Add sanity check to deal with pinned event failure
- mm: migration: fix migration of huge PMD shared pages
- mm, thp: fix mlocking THP page with migration enabled
- mm/vmstat.c: skip NR_TLB_REMOTE_FLUSH* properly
- KVM: x86: fix L1TF's MMIO GFN calculation
- blk-mq: I/O and timer unplugs are inverted in blktrace
- clocksource/drivers/timer-atmel-pit: Properly handle error cases
- fbdev/omapfb: fix omapfb_memory_read infoleak
- drm/amdgpu: Fix vce work queue was not cancelled when suspend
- x86/vdso: Fix asm constraints on vDSO syscall fallbacks
- selftests/x86: Add clock_gettime() tests to test_vdso
- x86/vdso: Only enable vDSO retpolines when enabled and supported
- x86/vdso: Fix vDSO syscall fallback asm constraint regression
- mac80211: fix setting IEEE80211_KEY_FLAG_RX_MGMT for AP mode keys
- PM / core: Clear the direct_complete flag on errors
- dm cache metadata: ignore hints array being too small during resize
- dm cache: fix resize crash if user doesn't reload cache table
- xhci: Add missing CAS workaround for Intel Sunrise Point xHCI
- usb: xhci-mtk: resume USB3 roothub first
- USB: serial: simple: add Motorola Tetra MTP6550 id
- usb: cdc_acm: Do not leak URB buffers
- of: unittest: Disable interrupt node tests for old world MAC systems
- perf annotate: Use asprintf when formatting objdump command line
- perf tools: Fix python extension build for gcc 8
- ath10k: fix use-after-free in ath10k_wmi_cmd_send_nowait
- ath10k: fix kernel panic issue during pci probe
- nvme_fc: fix ctrl create failures racing with workq items
- powerpc/lib: fix book3s/32 boot failure due to code patching
- ARC: clone syscall to setp r25 as thread pointer
- perf utils: Move is_directory() to path.h
- f2fs: fix invalid memory access
- ucma: fix a use-after-free in ucma_resolve_ip()
- ubifs: Check for name being NULL while mounting
- rds: rds_ib_recv_alloc_cache() should call alloc_percpu_gfp() instead
- ath10k: fix scan crash due to incorrect length calculation
- pstore/ram: Fix failure-path memory leak in ramoops_init
- mac80211: allocate TXQs for active monitor interfaces
- drm: fix use-after-free read in drm_mode_create_lease_ioctl()
- USB: serial: option: improve Quectel EP06 detection
- USB: serial: option: add two-endpoints device-id flag
- tipc: call start and done ops directly in __tipc_nl_compat_dumpit()
- bnxt_en: Fix TX timeout during netpoll.
- bnxt_en: free hwrm resources, if driver probe fails.
- bonding: avoid possible dead-lock
- ip6_tunnel: be careful when accessing the inner header
- ip_tunnel: be careful when accessing the inner header
- ipv4: fix use-after-free in ip_cmsg_recv_dstaddr()
- ipv6: take rcu lock in rawv6_send_hdrinc()
- net: dsa: bcm_sf2: Call setup during switch resume
- net: hns: fix for unmapping problem when SMMU is on
- net: ipv4: update fnhe_pmtu when first hop's MTU changes
- net/ipv6: Display all addresses in output of /proc/net/if_inet6
- netlabel: check for IPV4MASK in addrinfo_get
- net: mvpp2: Extract the correct ethtype from the skb for tx csum offload
- net: mvpp2: fix a txq_done race condition
- net: sched: Add policy validation for tc attributes
- net: systemport: Fix wake-up interrupt race during resume
- net/usb: cancel pending work when unbinding smsc75xx
- qmi_wwan: Added support for Gemalto's Cinterion ALASxx WWAN interface
- rtnl: limit IFLA_NUM_TX_QUEUES and IFLA_NUM_RX_QUEUES to 4096
- sctp: update dst pmtu with the correct daddr
- team: Forbid enslaving team device to itself
- tipc: fix flow control accounting for implicit connect
- udp: Unbreak modules that rely on external __skb_recv_udp() availability
- net: stmmac: Fixup the tail addr setting in xmit path
- net/packet: fix packet drop as of virtio gso
- net: dsa: bcm_sf2: Fix unbind ordering
- net/mlx5e: Set vlan masks for all offloaded TC rules
- net: aquantia: memory corruption on jumbo frames
- net/mlx5: E-Switch, Fix out of bound access when setting vport rate
- bonding: pass link-local packets to bonding master also.
- bonding: fix warning message
- nfp: avoid soft lockups under control message storm
- bnxt_en: don't try to offload VLAN 'modify' action
- net-ethtool: ETHTOOL_GUFO did not and should not require CAP_NET_ADMIN
- tcp/dccp: fix lockdep issue when SYN is backlogged
- inet: make sure to grab rcu_read_lock before using ireq->ireq_opt
- ASoC: rt5514: Fix the issue of the delay volume applied again
- ASoC: wm8804: Add ACPI support
- ASoC: sigmadsp: safeload should not have lower byte limit
- selftests/efivarfs: add required kernel configs
- selftests: memory-hotplug: add required configs
- ASoC: rsnd: adg: care clock-frequency size
- ASoC: rsnd: don't fallback to PIO mode when -EPROBE_DEFER
- Bluetooth: hci_ldisc: Free rw_semaphore on close
- mfd: omap-usb-host: Fix dts probe of children
- scsi: iscsi: target: Don't use stack buffer for scatterlist
- scsi: qla2xxx: Fix an endian bug in fcpcmd_is_corrupted()
- sound: enable interrupt after dma buffer initialization
- sound: don't call skl_init_chip() to reset intel skl soc
- stmmac: fix valid numbers of unicast filter entries
- net: macb: disable scatter-gather for macb on sama5d3
- ARM: dts: at91: add new compatibility string for macb on sama5d3
- PCI: hv: support reporting serial number as slot information
- clk: x86: add "ether_clk" alias for Bay Trail / Cherry Trail
- clk: x86: Stop marking clocks as CLK_IS_CRITICAL
- x86/kvm/lapic: always disable MMIO interface in x2APIC mode
- drm/amdgpu: Fix SDMA HQD destroy error on gfx_v7
- mm/vmstat.c: fix outdated vmstat_text
- MIPS: VDSO: Always map near top of user memory
- mach64: detect the dot clock divider correctly on sparc
- percpu: stop leaking bitmap metadata blocks
- perf script python: Fix export-to-postgresql.py occasional failure
- perf script python: Fix export-to-sqlite.py sample columns
- s390/cio: Fix how vfio-ccw checks pinned pages
- dm cache: destroy migration_cache if cache target registration failed
- dm: fix report zone remapping to account for partition offset
- dm linear: eliminate linear_end_io call if CONFIG_DM_ZONED disabled
- dm linear: fix linear_end_io conditional definition
- cgroup: Fix dom_cgrp propagation when enabling threaded mode
- mmc: block: avoid multiblock reads for the last sector in SPI mode
- pinctrl: mcp23s08: fix irq and irqchip setup order
- arm64: perf: Reject stand-alone CHAIN events for PMUv3
- mm/thp: fix call to mmu_notifier in set_pmd_migration_entry() v2
- mm: Preserve _PAGE_DEVMAP across mprotect() calls
- i2c: i2c-scmi: fix for i2c_smbus_write_block_data
- xhci: Don't print a warning when setting link state for disabled ports
- mm: introduce NR_INDIRECTLY_RECLAIMABLE_BYTES
- mm: treat indirectly reclaimable memory as available in MemAvailable
- dcache: account external names as indirectly reclaimable memory
- mm: treat indirectly reclaimable memory as free in overcommit logic
- mm: don't show nr_indirectly_reclaimable in /proc/vmstat
- ARM: add more CPU part numbers for Cortex and Brahma B15 CPUs
- ARM: bugs: prepare processor bug infrastructure
- ARM: bugs: hook processor bug checking into SMP and suspend paths
- ARM: bugs: add support for per-processor bug checking
- [Config] updateconfigs for CPU_SPECTRE
- ARM: spectre: add Kconfig symbol for CPUs vulnerable to Spectre
- ARM: spectre-v2: harden branch predictor on context switches
- ARM: spectre-v2: add Cortex A8 and A15 validation of the IBE bit
- ARM: spectre-v2: harden user aborts in kernel space
- ARM: spectre-v2: add firmware based hardening
- ARM: spectre-v2: warn about incorrect context switching functions
- ARM: KVM: invalidate BTB on guest exit for Cortex-A12/A17
- ARM: KVM: invalidate icache on guest exit for Cortex-A15
- ARM: spectre-v2: KVM: invalidate icache on guest exit for Brahma B15
- ARM: KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling
- ARM: KVM: report support for SMCCC_ARCH_WORKAROUND_1
- ARM: spectre-v1: add speculation barrier (csdb) macros
- ARM: spectre-v1: add array_index_mask_nospec() implementation
- ARM: spectre-v1: fix syscall entry
- ARM: signal: copy registers using __copy_from_user()
- ARM: vfp: use __copy_from_user() when restoring VFP state
- ARM: oabi-compat: copy semops using __copy_from_user()
- ARM: use __inttype() in get_user()
- ARM: spectre-v1: use get_user() for __get_user()
- ARM: spectre-v1: mitigate user accesses
- perf tools: Fix snprint warnings for gcc 8
- net: sched: cls_u32: fix hnode refcounting
- net: qualcomm: rmnet: Skip processing loopback packets
- net: qualcomm: rmnet: Fix incorrect allocation flag in transmit
- tun: remove unused parameters
- tun: initialize napi_mutex unconditionally
- tun: napi flags belong to tfile
- net: dsa: b53: Keep CPU port as tagged in all VLANs
- rtnetlink: Fail dump if target netnsid is invalid
- net: ipv4: don't let PMTU updates increase route MTU
- ASoC: dapm: Fix NULL pointer deference on CODEC to CODEC DAIs
- selftests: android: move config up a level
- selftests: add headers_install to lib.mk
- Bluetooth: SMP: Fix trying to use non-existent local OOB data
- Bluetooth: Use correct tfm to generate OOB data
- net: ethernet: ti: add missing GENERIC_ALLOCATOR dependency
- afs: Fix afs_server struct leak
- afs: Fix clearance of reply
* Volume control not working Dell XPS 27 (7760) (LP: #1775068) // Bionic
update: upstream stable patchset 2019-07-12 (LP: #1836426)
- ALSA: hda/realtek - Cannot adjust speaker's volume on Dell XPS 27 7760
* Bionic update: upstream stable patchset 2019-07-11 (LP: #1836287)
- perf tools: Fix undefined symbol scnprintf in libperf-jvmti.so
- gso_segment: Reset skb->mac_len after modifying network header
- ipv6: fix possible use-after-free in ip6_xmit()
- net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT
- net: hp100: fix always-true check for link up state
- pppoe: fix reception of frames with no mac header
- qmi_wwan: set DTR for modems in forced USB2 mode
- udp4: fix IP_CMSG_CHECKSUM for connected sockets
- neighbour: confirm neigh entries when ARP packet is received
- udp6: add missing checks on edumux packet processing
- net/sched: act_sample: fix NULL dereference in the data path
- tls: don't copy the key out of tls12_crypto_info_aes_gcm_128
- tls: zero the crypto information from tls_context before freeing
- tls: clear key material from kernel memory when do_tls_setsockopt_conf fails
- NFC: Fix possible memory corruption when handling SHDLC I-Frame commands
- NFC: Fix the number of pipes
- ASoC: cs4265: fix MMTLR Data switch control
- ASoC: rsnd: fixup not to call clk_get/set under non-atomic
- ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix I/O at error
path
- ALSA: bebob: use address returned by kmalloc() instead of kernel stack for
streaming DMA mapping
- ALSA: emu10k1: fix possible info leak to userspace on
SNDRV_EMU10K1_IOCTL_INFO
- ALSA: fireface: fix memory leak in ff400_switch_fetching_mode()
- ALSA: firewire-digi00x: fix memory leak of private data
- ALSA: firewire-tascam: fix memory leak of private data
- ALSA: fireworks: fix memory leak of response buffer at error path
- ALSA: oxfw: fix memory leak for model-dependent data at error path
- ALSA: oxfw: fix memory leak of discovered stream formats at error path
- ALSA: oxfw: fix memory leak of private data
- platform/x86: alienware-wmi: Correct a memory leak
- xen/netfront: don't bug in case of too many frags
- xen/x86/vpmu: Zero struct pt_regs before calling into sample handling code
- spi: fix IDR collision on systems with both fixed and dynamic SPI bus
numbers
- ring-buffer: Allow for rescheduling when removing pages
- mm: shmem.c: Correctly annotate new inodes for lockdep
- scsi: target: iscsi: Use bin2hex instead of a re-implementation
- ocfs2: fix ocfs2 read block panic
- drm/nouveau: Fix deadlocks in nouveau_connector_detect()
- drm/nouveau/drm/nouveau: Don't forget to cancel hpd_work on suspend/unload
- drm/nouveau/drm/nouveau: Fix bogus drm_kms_helper_poll_enable() placement
- drm/nouveau/drm/nouveau: Use pm_runtime_get_noresume() in connector_detect()
- drm/nouveau/drm/nouveau: Prevent handling ACPI HPD events too early
- drm/vc4: Fix the "no scaling" case on multi-planar YUV formats
- drm: udl: Destroy framebuffer only if it was initialized
- drm/amdgpu: add new polaris pci id
- ext4: check to make sure the rename(2)'s destination is not freed
- ext4: avoid divide by zero fault when deleting corrupted inline directories
- ext4: avoid arithemetic overflow that can trigger a BUG
- ext4: recalucate superblock checksum after updating free blocks/inodes
- ext4: fix online resize's handling of a too-small final block group
- ext4: fix online resizing for bigalloc file systems with a 1k block size
- ext4: don't mark mmp buffer head dirty
- ext4: show test_dummy_encryption mount option in /proc/mounts
- sched/fair: Fix vruntime_normalized() for remote non-migration wakeup
- PCI: aardvark: Size bridges before resources allocation
- vmw_balloon: include asm/io.h
- iw_cxgb4: only allow 1 flush on user qps
- tick/nohz: Prevent bogus softirq pending warning
- spi: Fix double IDR allocation with DT aliases
- hv_netvsc: fix schedule in RCU context
- bnxt_en: Fix VF mac address regression.
- net: rtnl_configure_link: fix dev flags changes arg to __dev_notify_flags
- mtd: rawnand: denali: fix a race condition when DMA is kicked
- platform/x86: dell-smbios-wmi: Correct a memory leak
- fork: report pid exhaustion correctly
- mm: disable deferred struct page for 32-bit arches
- libata: mask swap internal and hardware tag
- drm/i915/bdw: Increase IPS disable timeout to 100ms
- drm/nouveau: Reset MST branching unit before enabling
- drm/nouveau: Only write DP_MSTM_CTRL when needed
- drm/nouveau: Remove duplicate poll_enable() in pmops_runtime_suspend()
- ext4, dax: set ext4_dax_aops for dax files
- crypto: skcipher - Fix -Wstringop-truncation warnings
- iio: adc: ina2xx: avoid kthread_stop() with stale task_struct
- tsl2550: fix lux1_input error in low light
- vmci: type promotion bug in qp_host_get_user_memory()
- x86/numa_emulation: Fix emulated-to-physical node mapping
- staging: rts5208: fix missing error check on call to rtsx_write_register
- power: supply: axp288_charger: Fix initial constant_charge_current value
- misc: sram: enable clock before registering regions
- serial: sh-sci: Stop RX FIFO timer during port shutdown
- uwb: hwa-rc: fix memory leak at probe
- power: vexpress: fix corruption in notifier registration
- iommu/amd: make sure TLB to be flushed before IOVA freed
- Bluetooth: Add a new Realtek 8723DE ID 0bda:b009
- USB: serial: kobil_sct: fix modem-status error handling
- 6lowpan: iphc: reset mac_header after decompress to fix panic
- iommu/msm: Don't call iommu_device_{,un}link from atomic context
- s390/mm: correct allocate_pgste proc_handler callback
- power: remove possible deadlock when unregistering power_supply
- md-cluster: clear another node's suspend_area after the copy is finished
- RDMA/bnxt_re: Fix a couple off by one bugs
- RDMA/i40w: Hold read semaphore while looking after VMA
- IB/core: type promotion bug in rdma_rw_init_one_mr()
- media: exynos4-is: Prevent NULL pointer dereference in __isp_video_try_fmt()
- IB/mlx4: Test port number before querying type.
- powerpc/kdump: Handle crashkernel memory reservation failure
- media: fsl-viu: fix error handling in viu_of_probe()
- media: staging/imx: fill vb2_v4l2_buffer field entry
- x86/tsc: Add missing header to tsc_msr.c
- ARM: hwmod: RTC: Don't assume lock/unlock will be called with irq enabled
- x86/entry/64: Add two more instruction suffixes
- ARM: dts: ls1021a: Add missing cooling device properties for CPUs
- scsi: target/iscsi: Make iscsit_ta_authentication() respect the output
buffer size
- scsi: klist: Make it safe to use klists in atomic context
- scsi: ibmvscsi: Improve strings handling
- scsi: target: Avoid that EXTENDED COPY commands trigger lock inversion
- usb: wusbcore: security: cast sizeof to int for comparison
- ath10k: sdio: use same endpoint id for all packets in a bundle
- ath10k: sdio: set skb len for all rx packets
- powerpc/powernv/ioda2: Reduce upper limit for DMA window size
- s390/sysinfo: add missing #ifdef CONFIG_PROC_FS
- alarmtimer: Prevent overflow for relative nanosleep
- s390/dasd: correct numa_node in dasd_alloc_queue
- s390/scm_blk: correct numa_node in scm_blk_dev_setup
- s390/extmem: fix gcc 8 stringop-overflow warning
- mtd: rawnand: atmel: add module param to avoid using dma
- iio: accel: adxl345: convert address field usage in iio_chan_spec
- posix-timers: Make forward callback return s64
- ALSA: snd-aoa: add of_node_put() in error path
- media: s3c-camif: ignore -ENOIOCTLCMD from v4l2_subdev_call for s_power
- media: soc_camera: ov772x: correct setting of banding filter
- media: omap3isp: zero-initialize the isp cam_xclk{a,b} initial data
- staging: android: ashmem: Fix mmap size validation
- drivers/tty: add error handling for pcmcia_loop_config
- media: tm6000: add error handling for dvb_register_adapter
- net: phy: xgmiitorgmii: Check read_status results
- ath10k: protect ath10k_htt_rx_ring_free with rx_ring.lock
- net: phy: xgmiitorgmii: Check phy_driver ready before accessing
- drm/sun4i: Fix releasing node when enumerating enpoints
- ath10k: transmit queued frames after processing rx packets
- rndis_wlan: potential buffer overflow in rndis_wlan_auth_indication()
- brcmsmac: fix wrap around in conversion from constant to s16
- ARM: mvebu: declare asm symbols as character arrays in pmsu.c
- arm: dts: mediatek: Add missing cooling device properties for CPUs
- HID: hid-ntrig: add error handling for sysfs_create_group
- MIPS: boot: fix build rule of vmlinux.its.S
- perf/x86/intel/lbr: Fix incomplete LBR call stack
- scsi: bnx2i: add error handling for ioremap_nocache
- iomap: complete partial direct I/O writes synchronously
- scsi: megaraid_sas: Update controller info during resume
- EDAC, i7core: Fix memleaks and use-after-free on probe and remove
- ASoC: dapm: Fix potential DAI widget pointer deref when linking DAIs
- module: exclude SHN_UNDEF symbols from kallsyms api
- gpio: Fix wrong rounding in gpio-menz127
- nfsd: fix corrupted reply to badly ordered compound
- EDAC: Fix memleak in module init error path
- fs/lock: skip lock owner pid translation in case we are in init_pid_ns
- Input: xen-kbdfront - fix multi-touch XenStore node's locations
- iio: 104-quad-8: Fix off-by-one error in register selection
- ARM: dts: dra7: fix DCAN node addresses
- x86/mm: Expand static page table for fixmap space
- tty: serial: lpuart: avoid leaking struct tty_struct
- serial: cpm_uart: return immediately from console poll
- intel_th: Fix device removal logic
- spi: tegra20-slink: explicitly enable/disable clock
- spi: sh-msiof: Fix invalid SPI use during system suspend
- spi: sh-msiof: Fix handling of write value for SISTR register
- spi: rspi: Fix invalid SPI use during system suspend
- spi: rspi: Fix interrupted DMA transfers
- regulator: fix crash caused by null driver data
- USB: fix error handling in usb_driver_claim_interface()
- USB: handle NULL config in usb_find_alt_setting()
- usb: musb: dsps: do not disable CPPI41 irq in driver teardown
- slub: make ->cpu_partial unsigned int
- USB: usbdevfs: sanitize flags more
- USB: usbdevfs: restore warning for nonsensical flags
- USB: remove LPM management from usb_driver_claim_interface()
- IB/srp: Avoid that sg_reset -d ${srp_device} triggers an infinite loop
- IB/hfi1: Fix SL array bounds check
- IB/hfi1: Invalid user input can result in crash
- IB/hfi1: Fix context recovery when PBC has an UnsupportedVL
- RDMA/uverbs: Atomically flush and mark closed the comp event queue
- ovl: hash non-dir by lower inode for fsnotify
- drm/i915: Remove vma from object on destroy, not close
- serial: imx: restore handshaking irq for imx1
- qed: Wait for ready indication before rereading the shmem
- qed: Wait for MCP halt and resume commands to take place
- qed: Prevent a possible deadlock during driver load and unload
- qed: Avoid sending mailbox commands when MFW is not responsive
- thermal: of-thermal: disable passive polling when thermal zone is disabled
- isofs: reject hardware sector size > 2048 bytes
- tls: possible hang when do_tcp_sendpages hits sndbuf is full case
- bpf: sockmap: write_space events need to be passed to TCP handler
- net: hns: fix length and page_offset overflow when CONFIG_ARM64_64K_PAGES
- e1000: check on netif_running() before calling e1000_up()
- e1000: ensure to free old tx/rx rings in set_ringparam()
- crypto: cavium/nitrox - fix for command corruption in queue full case with
backlog submissions.
- hwmon: (ina2xx) fix sysfs shunt resistor read access
- hwmon: (adt7475) Make adt7475_read_word() return errors
- Revert "ARM: dts: imx7d: Invert legacy PCI irq mapping"
- drm/amdgpu: Enable/disable gfx PG feature in rlc safe mode
- drm/amdgpu: Update power state at the end of smu hw_init.
- ata: ftide010: Add a quirk for SQ201
- nvme-fcloop: Fix dropped LS's to removed target port
- ARM: dts: omap4-droid4: Fix emmc errors seen on some devices
- arm/arm64: smccc-1.1: Make return values unsigned long
- arm/arm64: smccc-1.1: Handle function result as parameters
- i2c: i801: Allow ACPI AML access I/O ports not reserved for SMBus
- x86/pti: Fix section mismatch warning/error
- media: v4l: event: Prevent freeing event subscriptions while accessed
- drm/amd/display/dc/dce: Fix multiple potential integer overflows
- drm/amd/display: fix use of uninitialized memory
- RDMA/bnxt_re: Fix a bunch of off by one bugs in qplib_fp.c
- vhost_net: Avoid tx vring kicks during busyloop
- thermal: i.MX: Allow thermal probe to fail gracefully in case of bad
calibration.
- platform/x86: asus-wireless: Fix uninitialized symbol usage
- ACPI / button: increment wakeup count only when notified
- media: ov772x: add checks for register read errors
- media: ov772x: allow i2c controllers without I2C_FUNC_PROTOCOL_MANGLING
- drm/omap: gem: Fix mm_list locking
- ASoC: rsnd: SSI parent cares SWSP bit
- staging: pi433: fix race condition in pi433_ioctl
- perf tests: Fix indexing when invoking subtests
- gpio: tegra: Fix tegra_gpio_irq_set_type()
- block: fix deadline elevator drain for zoned block devices
- serial: mvebu-uart: Fix reporting of effective CSIZE to userspace
- intel_th: Fix resource handling for ACPI glue layer
- ext2, dax: set ext2_dax_aops for dax files
- IB/hfi1: Fix destroy_qp hang after a link down
- ARM: OMAP2+: Fix null hwmod for ti-sysc debug
- ARM: OMAP2+: Fix module address for modules using mpu_rt_idx
- bus: ti-sysc: Fix module register ioremap for larger offsets
- drm/amdgpu: fix preamble handling
- amdgpu: fix multi-process hang issue
- tcp_bbr: add bbr_check_probe_rtt_done() helper
- tcp_bbr: in restart from idle, see if we should exit PROBE_RTT
- net: hns3: fix page_offset overflow when CONFIG_ARM64_64K_PAGES
- ixgbe: fix driver behaviour after issuing VFLR
- powerpc/pseries: Fix unitialized timer reset on migration
* Kernel 4.15.0-50 or newer wont boot as Xen-DomU with PVH (LP: #1829378)
- SAUCE: ACPI / bus: Fix NULL pointer dereference in
acpi_quirk_matches_bios_ids()
* CVE-2019-10126
- mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies()
* CVE-2019-3846
- mwifiex: Fix possible buffer overflows at parsing bss descriptor
* CVE-2019-12818
- net: nfc: Fix NULL dereference on nfc_llcp_build_tlv fails
* CVE-2019-12984
- nfc: Ensure presence of required attributes in the deactivate_target handler
* Bionic update: upstream stable patchset 2019-07-10 (LP: #1836117)
- i2c: xiic: Make the start and the byte count write atomic
- i2c: i801: fix DNV's SMBCTRL register offset
- scsi: lpfc: Correct MDS diag and nvmet configuration
- nbd: don't allow invalid blocksize settings
- block: bfq: swap puts in bfqg_and_blkg_put
- android: binder: fix the race mmap and alloc_new_buf_locked
- MIPS: VDSO: Match data page cache colouring when D$ aliases
- SMB3: Backup intent flag missing for directory opens with backupuid mounts
- smb3: check for and properly advertise directory lease support
- Btrfs: fix data corruption when deduplicating between different files
- KVM: s390: vsie: copy wrapping keys to right place
- KVM: VMX: Do not allow reexecute_instruction() when skipping MMIO instr
- ALSA: hda - Fix cancel_work_sync() stall from jackpoll work
- cpu/hotplug: Adjust misplaced smb() in cpuhp_thread_fun()
- cpu/hotplug: Prevent state corruption on error rollback
- x86/microcode: Make sure boot_cpu_data.microcode is up-to-date
- x86/microcode: Update the new microcode revision unconditionally
- crypto: aes-generic - fix aes-generic regression on powerpc
- tpm: separate cmd_ready/go_idle from runtime_pm
- ARC: [plat-axs*]: Enable SWAP
- misc: mic: SCIF Fix scif_get_new_port() error handling
- ethtool: Remove trailing semicolon for static inline
- i2c: aspeed: Add an explicit type casting for *get_clk_reg_val
- Bluetooth: h5: Fix missing dependency on BT_HCIUART_SERDEV
- gpio: tegra: Move driver registration to subsys_init level
- selftests/bpf: fix a typo in map in map test
- media: davinci: vpif_display: Mix memory leak on probe error path
- media: dw2102: Fix memleak on sequence of probes
- net: phy: Fix the register offsets in Broadcom iProc mdio mux driver
- blk-mq: fix updating tags depth
- scsi: target: fix __transport_register_session locking
- md/raid5: fix data corruption of replacements after originals dropped
- timers: Clear timer_base::must_forward_clk with timer_base::lock held
- media: camss: csid: Configure data type and decode format properly
- gpu: ipu-v3: default to id 0 on missing OF alias
- misc: ti-st: Fix memory leak in the error path of probe()
- uio: potential double frees if __uio_register_device() fails
- firmware: vpd: Fix section enabled flag on vpd_section_destroy
- Drivers: hv: vmbus: Cleanup synic memory free path
- tty: rocket: Fix possible buffer overwrite on register_PCI
- f2fs: fix to active page in lru list for read path
- f2fs: do not set free of current section
- f2fs: fix defined but not used build warnings
- perf tools: Allow overriding MAX_NR_CPUS at compile time
- NFSv4.0 fix client reference leak in callback
- perf c2c report: Fix crash for empty browser
- perf evlist: Fix error out while applying initial delay and LBR
- macintosh/via-pmu: Add missing mmio accessors
- ath9k: report tx status on EOSP
- ath9k_hw: fix channel maximum power level test
- ath10k: prevent active scans on potential unusable channels
- wlcore: Set rx_status boottime_ns field on rx
- MIPS: Fix ISA virt/bus conversion for non-zero PHYS_OFFSET
- scsi: 3ware: fix return 0 on the error path of probe
- tools/testing/nvdimm: kaddr and pfn can be NULL to ->direct_access()
- ath10k: disable bundle mgmt tx completion event support
- Bluetooth: hidp: Fix handling of strncpy for hid->name information
- pinctrl: imx: off by one in imx_pinconf_group_dbg_show()
- gpio: ml-ioh: Fix buffer underwrite on probe error path
- pinctrl/amd: only handle irq if it is pending and unmasked
- net: mvneta: fix mtu change on port without link
- f2fs: try grabbing node page lock aggressively in sync scenario
- f2fs: fix to skip GC if type in SSA and SIT is inconsistent
- tpm_tis_spi: Pass the SPI IRQ down to the driver
- tpm/tpm_i2c_infineon: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
- f2fs: fix to do sanity check with reserved blkaddr of inline inode
- MIPS: Octeon: add missing of_node_put()
- MIPS: generic: fix missing of_node_put()
- net: dcb: For wild-card lookups, use priority -1, not 0
- dm cache: only allow a single io_mode cache feature to be requested
- Input: atmel_mxt_ts - only use first T9 instance
- media: s5p-mfc: Fix buffer look up in s5p_mfc_handle_frame_{new, copy_time}
functions
- media: helene: fix xtal frequency setting at power on
- f2fs: fix to wait on page writeback before updating page
- f2fs: Fix uninitialized return in f2fs_ioc_shutdown()
- iommu/ipmmu-vmsa: Fix allocation in atomic context
- mfd: ti_am335x_tscadc: Fix struct clk memory leak
- f2fs: fix to do sanity check with {sit,nat}_ver_bitmap_bytesize
- NFSv4.1: Fix a potential layoutget/layoutrecall deadlock
- MIPS: WARN_ON invalid DMA cache maintenance, not BUG_ON
- RDMA/cma: Do not ignore net namespace for unbound cm_id
- inet: frags: change inet_frags_init_net() return value
- inet: frags: add a pointer to struct netns_frags
- inet: frags: refactor ipfrag_init()
- inet: frags: refactor ipv6_frag_init()
- inet: frags: refactor lowpan_net_frag_init()
- ipv6: export ip6 fragments sysctl to unprivileged users
- rhashtable: add schedule points
- inet: frags: use rhashtables for reassembly units
- inet: frags: remove some helpers
- inet: frags: get rif of inet_frag_evicting()
- inet: frags: remove inet_frag_maybe_warn_overflow()
- inet: frags: break the 2GB limit for frags storage
- inet: frags: do not clone skb in ip_expire()
- ipv6: frags: rewrite ip6_expire_frag_queue()
- rhashtable: reorganize struct rhashtable layout
- inet: frags: reorganize struct netns_frags
- inet: frags: get rid of ipfrag_skb_cb/FRAG_CB
- inet: frags: fix ip6frag_low_thresh boundary
- ip: discard IPv4 datagrams with overlapping segments.
- net: modify skb_rbtree_purge to return the truesize of all purged skbs.
- ipv6: defrag: drop non-last frags smaller than min mtu
- net: pskb_trim_rcsum() and CHECKSUM_COMPLETE are friends
- mtd: ubi: wl: Fix error return code in ubi_wl_init()
- tun: fix use after free for ptr_ring
- tuntap: fix use after free during release
- autofs: fix autofs_sbi() does not check super block type
- KVM: PPC: Book3S HV: Use correct pagesize in kvm_unmap_radix()
- ARC: [plat-axs*/plat-hsdk]: Allow U-Boot to pass MAC-address to the kernel
- x86/apic/vector: Make error return value negative
- tc-testing: flush gact actions on test teardown
- pinctrl: berlin: fix 'pctrl->functions' allocation in
berlin_pinctrl_build_state
- powerpc/4xx: Fix error return path in ppc4xx_msi_probe()
- scsi: qla2xxx: Fix unintended Logout
- iwlwifi: pcie: don't access periphery registers when not available
- f2fs: Keep alloc_valid_block_count in sync
- f2fs: issue discard align to section in LFS mode
- device-dax: avoid hang on error before devm_memremap_pages()
- regulator: tps65217: Fix NULL pointer dereference on probe
- gpio: pxa: disable pinctrl calls for PXA3xx
- thermal_hwmon: Sanitize attribute name passed to hwmon
- f2fs: fix to do sanity check with extra_attr feature
- RDMA/hns: Add illegal hop_num judgement
- RDMA/hns: Update the data type of immediate data
- be2net: Fix memory leak in be_cmd_get_profile_config()
- net/mlx5: Fix use-after-free in self-healing flow
- net: qca_spi: Fix race condition in spi transfers
- rds: fix two RCU related problems
- net/mlx5: Check for error in mlx5_attach_interface
- net/mlx5: Fix debugfs cleanup in the device init/remove flow
- net/mlx5: E-Switch, Fix memory leak when creating switchdev mode FDB tables
- net/tls: Set count of SG entries if sk_alloc_sg returns -ENOSPC
- erspan: fix error handling for erspan tunnel
- erspan: return PACKET_REJECT when the appropriate tunnel is not found
- tcp: really ignore MSG_ZEROCOPY if no SO_ZEROCOPY
- usb: dwc3: change stream event enable bit back to 13
- iommu/io-pgtable-arm-v7s: Abort allocation when table address overflows the
PTE
- ALSA: msnd: Fix the default sample sizes
- ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE() macro
- xfrm: fix 'passing zero to ERR_PTR()' warning
- amd-xgbe: use dma_mapping_error to check map errors
- gfs2: Special-case rindex for gfs2_grow
- clk: imx6ul: fix missing of_node_put()
- clk: core: Potentially free connection id
- clk: clk-fixed-factor: Clear OF_POPULATED flag in case of failure
- kbuild: add .DELETE_ON_ERROR special target
- media: tw686x: Fix oops on buffer alloc failure
- dmaengine: pl330: fix irq race with terminate_all
- MIPS: ath79: fix system restart
- media: videobuf2-core: check for q->error in vb2_core_qbuf()
- IB/rxe: Drop QP0 silently
- block: allow max_discard_segments to be stacked
- IB/ipoib: Fix error return code in ipoib_dev_init()
- mtd/maps: fix solutionengine.c printk format warnings
- media: ov5645: Supported external clock is 24MHz
- perf test: Fix subtest number when showing results
- gfs2: Don't reject a supposedly full bitmap if we have blocks reserved
- perf tools: Synthesize GROUP_DESC feature in pipe mode
- fbdev: omapfb: off by one in omapfb_register_client()
- perf tools: Fix struct comm_str removal crash
- video: goldfishfb: fix memory leak on driver remove
- fbdev/via: fix defined but not used warning
- perf powerpc: Fix callchain ip filtering when return address is in a
register
- video: fbdev: pxafb: clear allocated memory for video modes
- fbdev: Distinguish between interlaced and progressive modes
- ARM: exynos: Clear global variable on init error path
- perf powerpc: Fix callchain ip filtering
- nvme-rdma: unquiesce queues when deleting the controller
- powerpc/powernv: opal_put_chars partial write fix
- staging: bcm2835-camera: fix timeout handling in wait_for_completion_timeout
- staging: bcm2835-camera: handle wait_for_completion_timeout return properly
- ASoC: rt5514: Fix the issue of the delay volume applied
- MIPS: jz4740: Bump zload address
- mac80211: restrict delayed tailroom needed decrement
- Smack: Fix handling of IPv4 traffic received by PF_INET6 sockets
- wan/fsl_ucc_hdlc: use IS_ERR_VALUE() to check return value of qe_muram_alloc
- reset: imx7: Fix always writing bits as 0
- nfp: avoid buffer leak when FW communication fails
- xen-netfront: fix queue name setting
- arm64: dts: qcom: db410c: Fix Bluetooth LED trigger
- ARM: dts: qcom: msm8974-hammerhead: increase load on l20 for sdhci
- s390/qeth: fix race in used-buffer accounting
- s390/qeth: reset layer2 attribute on layer switch
- platform/x86: toshiba_acpi: Fix defined but not used build warnings
- KVM: arm/arm64: Fix vgic init race
- drivers/base: stop new probing during shutdown
- i2c: aspeed: Fix initial values of master and slave state
- dmaengine: mv_xor_v2: kill the tasklets upon exit
- crypto: sharah - Unregister correct algorithms for SAHARA 3
- xen-netfront: fix warn message as irq device name has '/'
- RDMA/cma: Protect cma dev list with lock
- pstore: Fix incorrect persistent ram buffer mapping
- xen/netfront: fix waiting for xenbus state change
- IB/ipoib: Avoid a race condition between start_xmit and cm_rep_handler
- mmc: omap_hsmmc: fix wakeirq handling on removal
- ipmi: Fix I2C client removal in the SSIF driver
- Tools: hv: Fix a bug in the key delete code
- xhci: Fix use after free for URB cancellation on a reallocated endpoint
- usb: Don't die twice if PCI xhci host is not responding in resume
- mei: ignore not found client in the enumeration
- mei: bus: need to unlink client before freeing
- USB: Add quirk to support DJI CineSSD
- usb: uas: add support for more quirk flags
- usb: Avoid use-after-free by flushing endpoints early in usb_set_interface()
- usb: host: u132-hcd: Fix a sleep-in-atomic-context bug in u132_get_frame()
- USB: add quirk for WORLDE Controller KS49 or Prodipe MIDI 49C USB controller
- usb: gadget: udc: renesas_usb3: fix maxpacket size of ep0
- USB: net2280: Fix erroneous synchronization change
- USB: serial: io_ti: fix array underflow in completion handler
- usb: misc: uss720: Fix two sleep-in-atomic-context bugs
- USB: serial: ti_usb_3410_5052: fix array underflow in completion handler
- USB: yurex: Fix buffer over-read in yurex_write()
- Revert "cdc-acm: implement put_char() and flush_chars()"
- cifs: prevent integer overflow in nxt_dir_entry()
- CIFS: fix wrapping bugs in num_entries()
- xtensa: ISS: don't allocate memory in platform_setup
- perf/core: Force USER_DS when recording user stack data
- NFSv4.1 fix infinite loop on I/O.
- binfmt_elf: Respect error return from `regset->active'
- net/mlx5: Add missing SET_DRIVER_VERSION command translation
- arm64: dts: uniphier: Add missing cooling device properties for CPUs
- audit: fix use-after-free in audit_add_watch
- mtdchar: fix overflows in adjustment of `count`
- Bluetooth: Use lock_sock_nested in bt_accept_enqueue
- evm: Don't deadlock if a crypto algorithm is unavailable
- KVM: PPC: Book3S HV: Add of_node_put() in success path
- security: check for kstrdup() failure in lsm_append()
- MIPS: loongson64: cs5536: Fix PCI_OHCI_INT_REG reads
- configfs: fix registered group removal
- pinctrl: rza1: Fix selector use for groups and functions
- sched/core: Use smp_mb() in wake_woken_function()
- efi/esrt: Only call efi_mem_reserve() for boot services memory
- ARM: hisi: handle of_iomap and fix missing of_node_put
- ARM: hisi: fix error handling and missing of_node_put
- ARM: hisi: check of_iomap and fix missing of_node_put
- liquidio: fix hang when re-binding VF host drv after running DPDK VF driver
- gpu: ipu-v3: csi: pass back mbus_code_to_bus_cfg error codes
- tty: fix termios input-speed encoding when using BOTHER
- tty: fix termios input-speed encoding
- mmc: sdhci-of-esdhc: set proper dma mask for ls104x chips
- mmc: tegra: prevent HS200 on Tegra 3
- mmc: sdhci: do not try to use 3.3V signaling if not supported
- drm/nouveau: Fix runtime PM leak in drm_open()
- drm/nouveau/debugfs: Wake up GPU before doing any reclocking
- drm/nouveau: tegra: Detach from ARM DMA/IOMMU mapping
- parport: sunbpp: fix error return code
- sched/fair: Fix util_avg of new tasks for asymmetric systems
- coresight: Handle errors in finding input/output ports
- coresight: tpiu: Fix disabling timeouts
- coresight: ETM: Add support for Arm Cortex-A73 and Cortex-A35
- staging: bcm2835-audio: Don't leak workqueue if open fails
- gpio: pxa: Fix potential NULL dereference
- gpiolib: Mark gpio_suffixes array with __maybe_unused
- mfd: 88pm860x-i2c: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
- input: rohm_bu21023: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
- drm/amdkfd: Fix error codes in kfd_get_process
- rtc: bq4802: add error handling for devm_ioremap
- ALSA: pcm: Fix snd_interval_refine first/last with open min/max
- scsi: libfc: fixup 'sleeping function called from invalid context'
- drm/panel: type promotion bug in s6e8aa0_read_mtp_id()
- blk-mq: only attempt to merge bio if there is rq in sw queue
- blk-mq: avoid to synchronize rcu inside blk_cleanup_queue()
- pinctrl: msm: Fix msm_config_group_get() to be compliant
- pinctrl: qcom: spmi-gpio: Fix pmic_gpio_config_get() to be compliant
- clk: tegra: bpmp: Don't crash when a clock fails to register
- mei: bus: type promotion bug in mei_nfc_if_version()
- earlycon: Initialize port->uartclk based on clock-frequency property
- earlycon: Remove hardcoded port->uartclk initialization in of_setup_earlycon
- net/ipv6: prevent use after free in ip6_route_mpath_notify
- Partial revert "e1000e: Avoid receiver overrun interrupt bursts"
- e1000e: Fix queue interrupt re-raising in Other interrupt
- e1000e: Avoid missed interrupts following ICR read
- Revert "e1000e: Separate signaling for link check/link up"
- e1000e: Fix link check race condition
- e1000e: Fix check_for_link return value with autoneg off
- tipc: orphan sock in tipc_release()
- net/mlx5: Fix not releasing read lock when adding flow rules
- iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register
- iwlwifi: cancel the injective function between hw pointers to tfd entry
index
- kbuild: do not update config when running install targets
- omapfb: rename omap2 module to omap2fb.ko
- [Config] Rename omapfb to omap2fb
- perf script: Show correct offsets for DWARF-based unwinding
- iommu/ipmmu-vmsa: IMUCTRn.TTSEL needs a special usage on R-Car Gen3
- ipmi: Move BT capabilities detection to the detect call
- ovl: fix oopses in ovl_fill_super() failure paths
- usb: xhci: fix interrupt transfer error happened on MTK platforms
- usb: mtu3: fix error of xhci port id when enable U3 dual role
- dm verity: fix crash on bufio buffer that was allocated with vmalloc
- cifs: integer overflow in in SMB2_ioctl()
- perf tools: Fix maps__find_symbol_by_name()
- NFSv4: Fix a tracepoint Oops in initiate_file_draining()
- of: add helper to lookup compatible child node
- mmc: meson-mx-sdio: fix OF child-node lookup
- bpf: fix rcu annotations in compute_effective_progs()
- spi: dw: fix possible race condition
- PM / devfreq: use put_device() instead of kfree()
- ASoC: hdmi-codec: fix routing
- drm/amd/display: support access ddc for mst branch
- rcutorture: Use monotonic timestamp for stall detection
- selftests: vDSO - fix to return KSFT_SKIP when test couldn't be run
- selftests/android: initialize heap_type to avoid compiling warning
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
- scsi: lpfc: Fix panic if driver unloaded when port is offline
- arm64: perf: Disable PMU while processing counter overflows
- staging: fsl-dpaa2/eth: Fix DMA mapping direction
- block/DAC960.c: fix defined but not used build warnings
- IB/mlx5: fix uaccess beyond "count" in debugfs read/write handlers
* Bionic update: upstream stable patchset 2019-07-09 (LP: #1835972)
- vti6: fix PMTU caching and reporting on xmit
- xfrm: fix missing dst_release() after policy blocking lbcast and multicast
- xfrm: free skb if nlsk pointer is NULL
- esp6: fix memleak on error path in esp6_input
- mac80211: add stations tied to AP_VLANs during hw reconfig
- ext4: clear mmp sequence number when remounting read-only
- nl80211: Add a missing break in parse_station_flags
- drm/bridge: adv7511: Reset registers on hotplug
- scsi: target: iscsi: cxgbit: fix max iso npdu calculation
- scsi: libiscsi: fix possible NULL pointer dereference in case of TMF
- drm/imx: imx-ldb: disable LDB on driver bind
- drm/imx: imx-ldb: check if channel is enabled before printing warning
- nbd: don't requeue the same request twice.
- nbd: handle unexpected replies better
- usb: gadget: r8a66597: Fix two possible sleep-in-atomic-context bugs in
init_controller()
- usb: gadget: r8a66597: Fix a possible sleep-in-atomic-context bugs in
r8a66597_queue()
- usb: gadget: f_uac2: fix error handling in afunc_bind (again)
- usb: gadget: u_audio: fix pcm/card naming in g_audio_setup()
- usb: gadget: u_audio: update hw_ptr in iso_complete after data copied
- usb: gadget: u_audio: remove caching of stream buffer parameters
- usb: gadget: u_audio: remove cached period bytes value
- usb: gadget: u_audio: protect stream runtime fields with stream spinlock
- usb/phy: fix PPC64 build errors in phy-fsl-usb.c
- tools: usb: ffs-test: Fix build on big endian systems
- usb: gadget: f_uac2: fix endianness of 'struct cntrl_*_lay3'
- netfilter: nft_set_hash: add rcu_barrier() in the nft_rhash_destroy()
- bpf, ppc64: fix unexpected r0=0 exit path inside bpf_xadd
- netfilter: nf_tables: fix memory leaks on chain rename
- netfilter: nf_tables: don't allow to rename to already-pending name
- KVM: vmx: use local variable for current_vmptr when emulating VMPTRST
- tools/power turbostat: fix -S on UP systems
- net: caif: Add a missing rcu_read_unlock() in caif_flow_cb
- qed: Fix link flap issue due to mismatching EEE capabilities.
- qed: Fix possible race for the link state value.
- qed: Correct Multicast API to reflect existence of 256 approximate buckets.
- atl1c: reserve min skb headroom
- net: prevent ISA drivers from building on PPC32
- can: mpc5xxx_can: check of_iomap return before use
- can: m_can: Move accessing of message ram to after clocks are enabled
- i2c: davinci: Avoid zero value of CLKH
- perf/x86/amd/ibs: Don't access non-started event
- media: staging: omap4iss: Include asm/cacheflush.h after generic includes
- bnx2x: Fix invalid memory access in rss hash config path.
- net: axienet: Fix double deregister of mdio
- locking/rtmutex: Allow specifying a subclass for nested locking
- i2c/mux, locking/core: Annotate the nested rt_mutex usage
- sched/rt: Restore rt_runtime after disabling RT_RUNTIME_SHARE
- x86/boot: Fix if_changed build flip/flop bug
- selftests/ftrace: Add snapshot and tracing_on test case
- ipc/sem.c: prevent queue.status tearing in semop
- zswap: re-check zswap_is_full() after do zswap_shrink()
- tools/power turbostat: Read extended processor family from CPUID
- ARC: dma [non-IOC] setup SMP_CACHE_BYTES and cache_line_size
- bpf: use GFP_ATOMIC instead of GFP_KERNEL in bpf_parse_prog()
- nfp: flower: fix port metadata conversion bug
- enic: handle mtu change for vf properly
- ARC: [plat-eznps] Add missing struct nps_host_reg_aux_dpc
- arc: [plat-eznps] fix data type errors in platform headers
- arc: [plat-eznps] fix printk warning in arc/plat-eznps/mtm.c
- arc: fix build errors in arc/include/asm/delay.h
- arc: fix type warnings in arc/mm/cache.c
- sparc/time: Add missing __init to init_tick_ops()
- sparc: use asm-generic version of msi.h
- enic: do not call enic_change_mtu in enic_probe
- mm: delete historical BUG from zap_pmd_range()
- drivers: net: lmc: fix case value for target abort error
- memcg: remove memcg_cgroup::id from IDR on mem_cgroup_css_alloc() failure
- gpiolib-acpi: make sure we trigger edge events at least once on boot
- scsi: fcoe: fix use-after-free in fcoe_ctlr_els_send
- scsi: fcoe: drop frames in ELS LOGO error path
- scsi: vmw_pvscsi: Return DID_RESET for status SAM_STAT_COMMAND_TERMINATED
- mm/memory.c: check return value of ioremap_prot
- mei: don't update offset in write
- cifs: add missing debug entries for kconfig options
- cifs: check kmalloc before use
- smb3: enumerating snapshots was leaving part of the data off end
- smb3: Do not send SMB3 SET_INFO if nothing changed
- smb3: don't request leases in symlink creation and query
- smb3: fill in statfs fsid and correct namelen
- btrfs: use correct compare function of dirty_metadata_bytes
- btrfs: don't leak ret from do_chunk_alloc
- Btrfs: fix btrfs_write_inode vs delayed iput deadlock
- iommu/arm-smmu: Error out only if not enough context interrupts
- printk: Split the code for storing a message into the log buffer
- printk: Create helper function to queue deferred console handling
- printk/nmi: Prevent deadlock when accessing the main log buffer in NMI
- kprobes/arm64: Fix %p uses in error messages
- arm64: mm: check for upper PAGE_SHIFT bits in pfn_valid()
- arm64: dts: rockchip: corrected uart1 clock-names for rk3328
- KVM: arm/arm64: Skip updating PMD entry if no change
- KVM: arm/arm64: Skip updating PTE entry if no change
- stop_machine: Reflow cpu_stop_queue_two_works()
- ext4: check for NUL characters in extended attribute's name
- ext4: sysfs: print ext4_super_block fields as little-endian
- ext4: reset error code in ext4_find_entry in fallback
- platform/x86: ideapad-laptop: Apply no_hw_rfkill to Y20-15IKBM, too
- x86/vdso: Fix vDSO build if a retpoline is emitted
- x86/process: Re-export start_thread()
- x86/kvm/vmx: Remove duplicate l1d flush definitions
- fuse: Add missed unlock_page() to fuse_readpages_fill()
- udl-kms: change down_interruptible to down
- udl-kms: handle allocation failure
- udl-kms: fix crash due to uninitialized memory
- udl-kms: avoid division
- b43legacy/leds: Ensure NUL-termination of LED name string
- b43/leds: Ensure NUL-termination of LED name string
- ASoC: dpcm: don't merge format from invalid codec dai
- ASoC: zte: Fix incorrect PCM format bit usages
- ASoC: sirf: Fix potential NULL pointer dereference
- pinctrl: freescale: off by one in imx1_pinconf_group_dbg_show()
- x86/vdso: Fix lsl operand order
- x86/irqflags: Mark native_restore_fl extern inline
- x86/entry/64: Wipe KASAN stack shadow before rewind_stack_do_exit()
- s390/mm: fix addressing exception after suspend/resume
- s390/numa: move initial setup of node_to_cpumask_map
- kprobes/arm: Fix %p uses in error messages
- kprobes: Make list and blacklist root user read only
- MIPS: Correct the 64-bit DSP accumulator register size
- MIPS: Always use -march=<arch>, not -<arch> shortcuts
- MIPS: Change definition of cpu_relax() for Loongson-3
- MIPS: lib: Provide MIPS64r6 __multi3() for GCC < 7
- tpm: Return the actual size when receiving an unsupported command
- scsi: mpt3sas: Fix _transport_smp_handler() error path
- scsi: sysfs: Introduce sysfs_{un,}break_active_protection()
- scsi: core: Avoid that SCSI device removal through sysfs triggers a deadlock
- clk: rockchip: fix clk_i2sout parent selection bits on rk3399
- PM / clk: signedness bug in of_pm_clk_add_clks()
- power: generic-adc-battery: fix out-of-bounds write when copying channel
properties
- power: generic-adc-battery: check for duplicate properties copied from iio
channels
- watchdog: Mark watchdog touch functions as notrace
- gcc-plugins: Add include required by GCC release 8
- gcc-plugins: Use dynamic initializers
- Btrfs: fix send failure when root has deleted files still open
- Btrfs: send, fix incorrect file layout after hole punching beyond eof
- hwmon: (k10temp) 27C Offset needed for Threadripper2
- KVM: arm/arm64: Fix potential loss of ptimer interrupts
- KVM: arm/arm64: Fix lost IRQs from emulated physcial timer when blocked
- perf kvm: Fix subcommands on s390
- ext4: use ext4_warning() for sb_getblk failure
- platform/x86: wmi: Do not mix pages and kmalloc
- KVM: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd
- lib/vsprintf: Do not handle %pO[^F] as %px
- soc: qcom: rmtfs-mem: fix memleak in probe error paths
- kprobes: Show blacklist addresses as same as kallsyms does
- kprobes: Replace %p with other pointer types
- MIPS: memset.S: Fix byte_fixup for MIPSr6
- mtd: rawnand: qcom: wait for desc completion in all BAM channels
- net: 6lowpan: fix reserved space for single frames
- net: mac802154: tx: expand tailroom if necessary
- 9p/net: Fix zero-copy path in the 9p virtio transport
- spi: davinci: fix a NULL pointer dereference
- spi: pxa2xx: Add support for Intel Ice Lake
- spi: spi-fsl-dspi: Fix imprecise abort on VF500 during probe
- spi: cadence: Change usleep_range() to udelay(), for atomic context
- mmc: renesas_sdhi_internal_dmac: fix #define RST_RESERVED_BITS
- readahead: stricter check for bdi io_pages
- block: blk_init_allocated_queue() set q->fq as NULL in the fail case
- block: really disable runtime-pm for blk-mq
- drm/i915/userptr: reject zero user_size
- libertas: fix suspend and resume for SDIO connected cards
- media: Revert "[media] tvp5150: fix pad format frame height"
- mailbox: xgene-slimpro: Fix potential NULL pointer dereference
- Replace magic for trusting the secondary keyring with #define
- powerpc/fadump: handle crash memory ranges array index overflow
- powerpc/pseries: Fix endianness while restoring of r3 in MCE handler.
- PCI: Add wrappers for dev_printk()
- cxl: Fix wrong comparison in cxl_adapter_context_get()
- ib_srpt: Fix a use-after-free in srpt_close_ch()
- RDMA/rxe: Set wqe->status correctly if an unexpected response is received
- 9p: fix multiple NULL-pointer-dereferences
- fs/9p/xattr.c: catch the error of p9_client_clunk when setting xattr failed
- 9p/virtio: fix off-by-one error in sg list bounds check
- net/9p/client.c: version pointer uninitialized
- net/9p/trans_fd.c: fix race-condition by flushing workqueue before the
kfree()
- dm integrity: change 'suspending' variable from bool to int
- dm thin: stop no_space_timeout worker when switching to write-mode
- dm cache metadata: save in-core policy_hint_size to on-disk superblock
- dm cache metadata: set dirty on all cache blocks after a crash
- dm crypt: don't decrease device limits
- uart: fix race between uart_put_char() and uart_shutdown()
- Drivers: hv: vmbus: Reset the channel callback in vmbus_onoffer_rescind()
- iio: sca3000: Fix missing return in switch
- iio: ad9523: Fix displayed phase
- iio: ad9523: Fix return value for ad952x_store()
- extcon: Release locking when sending the notification of connector state
- vmw_balloon: fix inflation of 64-bit GFNs
- vmw_balloon: do not use 2MB without batching
- vmw_balloon: VMCI_DOORBELL_SET does not check status
- vmw_balloon: fix VMCI use when balloon built into kernel
- rtc: omap: fix potential crash on power off
- tracing: Do not call start/stop() functions when tracing_on does not change
- tracing/blktrace: Fix to allow setting same value
- printk/tracing: Do not trace printk_nmi_enter()
- livepatch: Validate module/old func name length
- uprobes: Use synchronize_rcu() not synchronize_sched()
- mfd: hi655x: Fix regmap area declared size for hi655x
- ovl: fix wrong use of impure dir cache in ovl_iterate()
- drivers/block/zram/zram_drv.c: fix bug storing backing_dev
- cpufreq: governor: Avoid accessing invalid governor_data
- PM / sleep: wakeup: Fix build error caused by missing SRCU support
- KVM: PPC: Book3S: Fix guest DMA when guest partially backed by THP pages
- xtensa: limit offsets in __loop_cache_{all,page}
- xtensa: increase ranges in ___invalidate_{i,d}cache_all
- block, bfq: return nbytes and not zero from struct cftype .write() method
- pnfs/blocklayout: off by one in bl_map_stripe()
- NFSv4 client live hangs after live data migration recovery
- NFSv4: Fix locking in pnfs_generic_recover_commit_reqs
- NFSv4: Fix a sleep in atomic context in nfs4_callback_sequence()
- ARM: tegra: Fix Tegra30 Cardhu PCA954x reset
- iommu/vt-d: Add definitions for PFSID
- iommu/vt-d: Fix dev iotlb pfsid use
- sys: don't hold uts_sem while accessing userspace memory
- userns: move user access out of the mutex
- ubifs: Fix memory leak in lprobs self-check
- ubifs: Check data node size before truncate
- ubifs: Fix synced_i_size calculation for xattr inodes
- pwm: tiehrpwm: Don't use emulation mode bits to control PWM output
- pwm: tiehrpwm: Fix disabling of output of PWMs
- fb: fix lost console when the user unplugs a USB adapter
- udlfb: set optimal write delay
- libnvdimm: fix ars_status output length calculation
- bcache: release dc->writeback_lock properly in bch_writeback_thread()
- perf auxtrace: Fix queue resize
- crypto: caam - fix DMA mapping direction for RSA forms 2 & 3
- crypto: caam/jr - fix descriptor DMA unmapping
- crypto: caam/qi - fix error path in xts setkey
- arm64: mm: always enable CONFIG_HOLES_IN_ZONE
- mmc: renesas_sdhi_internal_dmac: mask DMAC interrupts
- blkcg: Introduce blkg_root_lookup()
- powerpc64/ftrace: Include ftrace.h needed for enable/disable calls
- IB/mlx5: Fix leaking stack memory to userspace
- rtc: omap: fix resource leak in registration error path
- ACPICA: AML Parser: skip opcodes that open a scope upon parse failure
- ALSA: ac97: fix device initialization in the compat layer
- ALSA: ac97: fix check of pm_runtime_get_sync failure
- ALSA: ac97: fix unbalanced pm_runtime_enable
- nfsd: fix leaked file lock with nfs exported overlayfs
- ubifs: Fix directory size calculation for symlinks
- mm, dev_pagemap: Do not clear ->mapping on final put
- act_ife: fix a potential use-after-free
- ipv4: tcp: send zero IPID for RST and ACK sent in SYN-RECV and TIME-WAIT
state
- net: bcmgenet: use MAC link status for fixed phy
- net: macb: do not disable MDIO bus at open/close time
- qlge: Fix netdev features configuration.
- r8169: add support for NCube 8168 network card
- tcp: do not restart timewait timer on rst reception
- vti6: remove !skb->ignore_df check from vti6_xmit()
- net/sched: act_pedit: fix dump of extended layered op
- tipc: fix a missing rhashtable_walk_exit()
- nfp: wait for posted reconfigs when disabling the device
- sctp: hold transport before accessing its asoc in sctp_transport_get_next
- mlxsw: spectrum_switchdev: Do not leak RIFs when removing bridge
- vhost: correctly check the iova range when waking virtqueue
- hv_netvsc: ignore devices that are not PCI
- act_ife: move tcfa_lock down to where necessary
- act_ife: fix a potential deadlock
- net: sched: action_ife: take reference to meta module
- cifs: check if SMB2 PDU size has been padded and suppress the warning
- hfsplus: don't return 0 when fill_super() failed
- hfs: prevent crash on exit from failed search
- sunrpc: Don't use stack buffer with scatterlist
- fork: don't copy inconsistent signal handler state to child
- reiserfs: change j_timestamp type to time64_t
- hfsplus: fix NULL dereference in hfsplus_lookup()
- fs/proc/kcore.c: use __pa_symbol() for KCORE_TEXT list entries
- fat: validate ->i_start before using
- scripts: modpost: check memory allocation results
- virtio: pci-legacy: Validate queue pfn
- x86/mce: Add notifier_block forward declaration
- IB/hfi1: Invalid NUMA node information can cause a divide by zero
- pwm: meson: Fix mux clock names
- mm/fadvise.c: fix signed overflow UBSAN complaint
- fs/dcache.c: fix kmemcheck splat at take_dentry_name_snapshot()
- platform/x86: intel_punit_ipc: fix build errors
- netfilter: ip6t_rpfilter: set F_IFACE for linklocal addresses
- s390/kdump: Fix memleak in nt_vmcoreinfo
- ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
- mfd: sm501: Set coherent_dma_mask when creating subdevices
- platform/x86: asus-nb-wmi: Add keymap entry for lid flip action on UX360
- netfilter: fix memory leaks on netlink_dump_start error
- tcp, ulp: add alias for all ulp modules
- RDMA/hns: Fix usage of bitmap allocation functions return values
- net: hns3: Fix for command format parsing error in
hclge_is_all_function_id_zero
- perf tools: Check for null when copying nsinfo.
- irqchip/bcm7038-l1: Hide cpu offline callback when building for !SMP
- net/9p/trans_fd.c: fix race by holding the lock
- net/9p: fix error path of p9_virtio_probe
- powerpc/uaccess: Enable get_user(u64, *p) on 32-bit
- powerpc: Fix size calculation using resource_size()
- perf probe powerpc: Fix trace event post-processing
- block: bvec_nr_vecs() returns value for wrong slab
- s390/dasd: fix hanging offline processing due to canceled worker
- s390/dasd: fix panic for failed online processing
- ACPI / scan: Initialize status to ACPI_STA_DEFAULT
- scsi: aic94xx: fix an error code in aic94xx_init()
- NFSv4: Fix error handling in nfs4_sp4_select_mode()
- Input: do not use WARN() in input_alloc_absinfo()
- xen/balloon: fix balloon initialization for PVH Dom0
- PCI: mvebu: Fix I/O space end address calculation
- dm kcopyd: avoid softlockup in run_complete_job
- staging: comedi: ni_mio_common: fix subdevice flags for PFI subdevice
- ASoC: rt5677: Fix initialization of rt5677_of_match.data
- iommu/omap: Fix cache flushes on L2 table entries
- selftests/powerpc: Kill child processes on SIGINT
- RDS: IB: fix 'passing zero to ERR_PTR()' warning
- cfq: Suppress compiler warnings about comparisons
- smb3: fix reset of bytes read and written stats
- SMB3: Number of requests sent should be displayed for SMB3 not just CIFS
- powerpc/platforms/85xx: fix t1042rdb_diu.c build errors & warning
- powerpc/64s: Make rfi_flush_fallback a little more robust
- powerpc/pseries: Avoid using the size greater than RTAS_ERROR_LOG_MAX.
- clk: rockchip: Add pclk_rkpwm_pmu to PMU critical clocks in rk3399
- KVM: vmx: track host_state.loaded using a loaded_vmcs pointer
- kvm: nVMX: Fix fault vector for VMX operation at CPL > 0
- btrfs: Exit gracefully when chunk map cannot be inserted to the tree
- btrfs: replace: Reset on-disk dev stats value after replace
- btrfs: relocation: Only remove reloc rb_trees if reloc control has been
initialized
- btrfs: Don't remove block group that still has pinned down bytes
- arm64: rockchip: Force CONFIG_PM on Rockchip systems
- ARM: rockchip: Force CONFIG_PM on Rockchip systems
- drm/i915/lpe: Mark LPE audio runtime pm as "no callbacks"
- drm/amdgpu: Fix RLC safe mode test in gfx_v9_0_enter_rlc_safe_mode
- drm/amd/pp/Polaris12: Fix a chunk of registers missed to program
- drm/amdgpu: update tmr mc address
- drm/amdgpu:add tmr mc address into amdgpu_firmware_info
- drm/amdgpu:add new firmware id for VCN
- drm/amdgpu:add VCN support in PSP driver
- drm/amdgpu:add VCN booting with firmware loaded by PSP
- debugobjects: Make stack check warning more informative
- mm: Fix devm_memremap_pages() collision handling
- HID: add quirk for another PIXART OEM mouse used by HP
- usb: dwc3: core: Fix ULPI PHYs and prevent phy_get/ulpi_init during
suspend/resume
- x86/pae: use 64 bit atomic xchg function in native_ptep_get_and_clear
- x86/xen: don't write ptes directly in 32-bit PV guests
- drm/i915: Increase LSPCON timeout
- kbuild: make missing $DEPMOD a Warning instead of an Error
- kvm: x86: Set highest physical address bits in non-present/reserved SPTEs
- x86: kvm: avoid unused variable warning
- arm64: cpu_errata: include required headers
- ASoC: wm8994: Fix missing break in switch
- arm64: Fix mismatched cache line size detection
- arm64: Handle mismatched cache type
- tipc: fix the big/little endian issue in tipc_dest
- ip6_vti: fix a null pointer deference when destroy vti6 tunnel
- workqueue: skip lockdep wq dependency in cancel_work_sync()
- workqueue: re-add lockdep dependencies for flushing
- apparmor: fix an error code in __aa_create_ns()
- tcp, ulp: fix leftover icsk_ulp_ops preventing sock from reattach
- netfilter: x_tables: do not fail xt_alloc_table_info too easilly
- ACPICA: ACPICA: add status check for acpi_hw_read before assigning return
value
- PCI: Match Root Port's MPS to endpoint's MPSS as necessary
- coccicheck: return proper error code on fail
- RISC-V: Use KBUILD_CFLAGS instead of KCFLAGS when building the vDSO
- blk-mq: count the hctx as active before allocating tag
- selinux: cleanup dentry and inodes on error in selinuxfs
- drm/amd/display: Read back max backlight value at boot
- btrfs: check-integrity: Fix NULL pointer dereference for degraded mount
- btrfs: lift uuid_mutex to callers of btrfs_open_devices
- btrfs: Fix a C compliance issue
- drm/i915: Nuke the LVDS lid notifier
- drm/edid: Quirk Vive Pro VR headset non-desktop.
- drm/amd/display: fix type of variable
- drm/amd/display: Don't share clk source between DP and HDMI
- drm/amd/display: update clk for various HDMI color depths
- drm/amd/display: Use requested HDMI aspect ratio
- drm/rockchip: lvds: add missing of_node_put
- drm/amd/display: Pass connector id when executing VBIOS CT
- drm/amd/display: Check if clock source in use before disabling
- drm/amdgpu: fix incorrect use of fcheck
- drm/amdgpu: fix incorrect use of drm_file->pid
- drm/i915: set DP Main Stream Attribute for color range on DDI platforms
- x86/tsc: Prevent result truncation on 32bit
* [Regression] Colour banding appears on Lenovo B50-80 integrated display
(LP: #1788308) // Bionic update: upstream stable patchset 2019-07-09
(LP: #1835972)
- drm/edid: Add 6 bpc quirk for SDC panel in Lenovo B50-80
* CVE-2019-12819
- mdio_bus: Fix use-after-free on device_register fails
* proc_thermal flooding dmesg (LP: #1824690)
- drivers: thermal: processor_thermal: Downgrade error message
* Bionic update: upstream stable patchset 2019-07-08 (LP: #1835845)
- bonding: avoid lockdep confusion in bond_get_stats()
- inet: frag: enforce memory limits earlier
- ipv4: frags: handle possible skb truesize change
- net: dsa: Do not suspend/resume closed slave_dev
- net: stmmac: Fix WoL for PCI-based setups
- rxrpc: Fix user call ID check in rxrpc_service_prealloc_one
- can: ems_usb: Fix memory leak on ems_usb_disconnect()
- virtio_balloon: fix another race between migration and ballooning
- x86/apic: Future-proof the TSC_DEADLINE quirk for SKX
- kvm: x86: vmx: fix vpid leak
- audit: fix potential null dereference 'context->module.name'
- userfaultfd: remove uffd flags from vma->vm_flags if UFFD_EVENT_FORK fails
- RDMA/uverbs: Expand primary and alt AV port checks
- crypto: padlock-aes - Fix Nano workaround data corruption
- drm/vc4: Reset ->{x, y}_scaling[1] when dealing with uniplanar formats
- scsi: sg: fix minor memory leak in error path
- net/mlx5e: E-Switch, Initialize eswitch only if eswitch manager
- net/mlx5e: Set port trust mode to PCP as default
- x86/efi: Access EFI MMIO data as unencrypted when SEV is active
- drm/atomic: Check old_plane_state->crtc in drm_atomic_helper_async_check()
- drm/atomic: Initialize variables in drm_atomic_helper_async_check() to make
gcc happy
- scsi: qla2xxx: Fix unintialized List head crash
- scsi: qla2xxx: Fix NPIV deletion by calling wait_for_sess_deletion
- scsi: qla2xxx: Fix ISP recovery on unload
- scsi: qla2xxx: Return error when TMF returns
- genirq: Make force irq threading setup more robust
- nohz: Fix local_timer_softirq_pending()
- nohz: Fix missing tick reprogram when interrupting an inline softirq
- ring_buffer: tracing: Inherit the tracing setting to next ring buffer
- i2c: imx: Fix reinit_completion() use
- Btrfs: fix file data corruption after cloning a range and fsync
- nvme-pci: allocate device queues storage space at probe
- nvme-pci: Fix queue double allocations
- xfs: catch inode allocation state mismatch corruption
- xfs: validate cached inodes are free when allocated
- perf/x86/intel/uncore: Fix hardcoded index of Broadwell extra PCI devices
- parisc: Enable CONFIG_MLONGCALLS by default
- parisc: Define mb() and add memory barriers to assembler unlock sequences
- kasan: add no_sanitize attribute for clang builds
- Mark HI and TASKLET softirq synchronous
- xen/netfront: don't cache skb_shinfo()
- scsi: sr: Avoid that opening a CD-ROM hangs with runtime power management
enabled
- scsi: qla2xxx: Fix memory leak for allocating abort IOCB
- init: rename and re-order boot_cpu_state_init()
- root dentries need RCU-delayed freeing
- make sure that __dentry_kill() always invalidates d_seq, unhashed or not
- fix mntput/mntput race
- fix __legitimize_mnt()/mntput() race
- mtd: nand: qcom: Add a NULL check for devm_kasprintf()
- phy: phy-mtk-tphy: use auto instead of force to bypass utmi signals
- ARM: dts: imx6sx: fix irq for pcie bridge
- kprobes/x86: Fix %p uses in error messages
- x86/irqflags: Provide a declaration for native_save_fl
- x86/apic: Ignore secondary threads if nosmt=force
- x86/mm/kmmio: Make the tracer robust against L1TF
- tools headers: Synchronise x86 cpufeatures.h for L1TF additions
- x86/microcode: Allow late microcode loading with SMT disabled
- x86/smp: fix non-SMP broken build due to redefinition of
apic_id_is_primary_thread
- cpu/hotplug: Non-SMP machines do not make use of booted_once
- sched/deadline: Update rq_clock of later_rq when pushing a task
- zram: remove BD_CAP_SYNCHRONOUS_IO with writeback feature
- x86/l1tf: Fix build error seen if CONFIG_KVM_INTEL is disabled
- x86: i8259: Add missing include file
- kbuild: verify that $DEPMOD is installed
- crypto: x86/sha256-mb - fix digest copy in sha256_mb_mgr_get_comp_job_avx2()
- crypto: vmac - require a block cipher with 128-bit block size
- crypto: vmac - separate tfm and request context
- crypto: blkcipher - fix crash flushing dcache in error path
- crypto: ablkcipher - fix crash flushing dcache in error path
- crypto: skcipher - fix aligning block size in skcipher_copy_iv()
- crypto: skcipher - fix crash flushing dcache in error path
- x86/platform/UV: Mark memblock related init code and data correctly
- dccp: fix undefined behavior with 'cwnd' shift in ccid2_cwnd_restart()
- l2tp: use sk_dst_check() to avoid race on sk->sk_dst_cache
- llc: use refcount_inc_not_zero() for llc_sap_find()
- vsock: split dwork to avoid reinitializations
- net_sched: Fix missing res info when create new tc_index filter
- vhost: reset metadata cache when initializing new IOTLB
- ip6_tunnel: use the right value for ipv4 min mtu check in ip6_tnl_xmit
- net: aquantia: Fix IFF_ALLMULTI flag functionality
- ALSA: hda - Sleep for 10ms after entering D3 on Conexant codecs
- ALSA: hda - Turn CX8200 into D3 as well upon reboot
- ALSA: vx222: Fix invalid endian conversions
- ALSA: virmidi: Fix too long output trigger loop
- ALSA: cs5535audio: Fix invalid endian conversion
- ALSA: hda: Correct Asrock B85M-ITX power_save blacklist entry
- ALSA: memalloc: Don't exceed over the requested size
- ALSA: vxpocket: Fix invalid endian conversions
- USB: serial: sierra: fix potential deadlock at close
- USB: serial: pl2303: add a new device id for ATEN
- ACPI / PM: save NVS memory for ASUS 1025C laptop
- tty: serial: 8250: Revert NXP SC16C2552 workaround
- serial: 8250_exar: Read INT0 from slave device, too
- serial: 8250_dw: always set baud rate in dw8250_set_termios
- serial: 8250_dw: Add ACPI support for uart on Broadcom SoC
- misc: sram: fix resource leaks in probe error path
- Bluetooth: avoid killing an already killed socket
- isdn: Disable IIOCDBGVAR
- cls_matchall: fix tcf_unbind_filter missing
- mlxsw: core_acl_flex_actions: Return error for conflicting actions
- ip_vti: fix a null pointer deferrence when create vti fallback tunnel
- net: ethernet: mvneta: Fix napi structure mixup on armada 3700
- net: mvneta: fix mvneta_config_rss on armada 3700
- EDAC: Add missing MEM_LRDDR4 entry in edac_mem_types[]
- pty: fix O_CLOEXEC for TIOCGPTPEER
- arm: dts: armada: Fix "#cooling-cells" property's name
- vfio: ccw: fix error return in vfio_ccw_sch_event
- perf tools: Fix error index for pmu event parser
- Input: synaptics-rmi4 - fix axis-swap behavior
- IB/mlx4: Fix an error handling path in 'mlx4_ib_rereg_user_mr()'
- drm/bridge/sii8620: fix loops in EDID fetch logic
- drm/bridge/sii8620: fix potential buffer overflow
- ARC: Explicitly add -mmedium-calls to CFLAGS
- hwmon: (nct6775) Fix loop limit
- soc: imx: gpcv2: correct PGC offset
- usb: dwc3: pci: add support for Intel IceLake
- usb: dwc2: gadget: Fix issue in dwc2_gadget_start_isoc()
- usb: dwc3: of-simple: fix use-after-free on remove
- ACPI / EC: Use ec_no_wakeup on Thinkpad X1 Carbon 6th
- netfilter: ipv6: nf_defrag: reduce struct net memory waste
- netfilter: nf_ct_helper: Fix possible panic after
nf_conntrack_helper_unregister
- selftests: pstore: return Kselftest Skip code for skipped tests
- selftests: static_keys: return Kselftest Skip code for skipped tests
- selftests: sysctl: return Kselftest Skip code for skipped tests
- selftests: zram: return Kselftest Skip code for skipped tests
- selftests: vm: return Kselftest Skip code for skipped tests
- selftests: sync: add config fragment for testing sync framework
- ARM: dts: NSP: Fix i2c controller interrupt type
- ARM: dts: NSP: Fix PCIe controllers interrupt types
- ARM: dts: BCM5301x: Fix i2c controller interrupt type
- ARM: dts: Cygnus: Fix I2C controller interrupt type
- ARM: dts: Cygnus: Fix PCIe controller interrupt type
- arm64: dts: specify 1.8V EMMC capabilities for bcm958742k
- arm64: dts: specify 1.8V EMMC capabilities for bcm958742t
- arm64: dts: ns2: Fix I2C controller interrupt type
- arm64: dts: ns2: Fix PCIe controller interrupt type
- arm64: dts: Stingray: Fix I2C controller interrupt type
- drivers/perf: xgene_pmu: Fix IOB SLOW PMU parser error
- drm: mali-dp: Enable Global SE interrupts mask for DP500
- drm/arm/malidp: Preserve LAYER_FORMAT contents when setting format
- IB/rxe: Fix missing completion for mem_reg work requests
- usb: dwc2: alloc dma aligned buffer for isoc split in
- usb: dwc2: fix isoc split in transfer with no data
- usb: gadget: composite: fix delayed_status race condition when set_interface
- usb: gadget: dwc2: fix memory leak in gadget_init()
- dwc2: gadget: Fix ISOC IN DDMA PID bitfield value calculation
- xen: add error handling for xenbus_printf
- pNFS: Always free the session slot on error in
nfs4_layoutget_handle_exception
- scsi: xen-scsifront: add error handling for xenbus_printf
- xen/scsiback: add error handling for xenbus_printf
- arm64: dma-mapping: clear buffers allocated with FORCE_CONTIGUOUS flag
- arm64: make secondary_start_kernel() notrace
- qed: Fix possible memory leak in Rx error path handling.
- qed: Add sanity check for SIMD fastpath handler.
- qed: Do not advertise DCBX_LLD_MANAGED capability.
- enic: initialize enic->rfs_h.lock in enic_probe
- net: hamradio: use eth_broadcast_addr
- net: propagate dev_get_valid_name return code
- net: stmmac: socfpga: add additional ocp reset line for Stratix10
- nvmet: reset keep alive timer in controller enable
- block: sed-opal: Fix a couple off by one bugs
- ARC: Enable machine_desc->init_per_cpu for !CONFIG_SMP
- nbd: Add the nbd NBD_DISCONNECT_ON_CLOSE config flag.
- net: davinci_emac: match the mdio device against its compatible if possible
- sctp: fix erroneous inc of snmp SctpFragUsrMsgs
- KVM: arm/arm64: Drop resource size check for GICV window
- drm/bridge/sii8620: fix display of packed pixel modes in MHL2
- locking/lockdep: Do not record IRQ state within lockdep code
- selftests: bpf: notification about privilege required to run test_kmod.sh
testing script
- mtd: dataflash: Use ULL suffix for 64-bit constants
- x86/microcode/intel: Fix memleak in save_microcode_patch()
- ipv6: mcast: fix unsolicited report interval after receiving querys
- Smack: Mark inode instant in smack_task_to_inode
- arm64: dts: msm8916: fix Coresight ETF graph connections
- batman-adv: Fix bat_ogm_iv best gw refcnt after netlink dump
- batman-adv: Fix bat_v best gw refcnt after netlink dump
- batman-adv: Avoid storing non-TT-sync flags on singular entries too
- batman-adv: Fix multicast TT issues with bogus ROAM flags
- cxgb4: when disabling dcb set txq dcb priority to 0
- iio: pressure: bmp280: fix relative humidity unit
- brcmfmac: stop watchdog before detach and free everything
- ARM: dts: am437x: make edt-ft5x06 a wakeup source
- ALSA: seq: Fix UBSAN warning at SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT ioctl
- usb: xhci: remove the code build warning
- usb: xhci: increase CRS timeout value
- NFC: pn533: Fix wrong GFP flag usage
- typec: tcpm: Fix a msecs vs jiffies bug
- kconfig: fix line numbers for if-entries in menu tree
- perf record: Support s390 random socket_id assignment
- perf test session topology: Fix test on s390
- perf report powerpc: Fix crash if callchain is empty
- perf tools: Fix a clang 7.0 compilation error
- perf bench: Fix numa report output code
- ARM: davinci: board-da850-evm: fix WP pin polarity for MMC/SD
- netfilter: nf_log: fix uninit read in nf_log_proc_dostring
- net/mlx5: E-Switch, Disallow vlan/spoofcheck setup if not being esw manager
- nfp: cast sizeof() to int when comparing with error code
- selftests/x86/sigreturn/64: Fix spurious failures on AMD CPUs
- selftests/x86/sigreturn: Do minor cleanups
- ARM: dts: da850: Fix interrups property for gpio
- ARM64: dts: meson-gxl: fix Mali GPU compatible string
- dmaengine: pl330: report BURST residue granularity
- dmaengine: k3dma: Off by one in k3_of_dma_simple_xlate()
- ath10k: update the phymode along with bandwidth change request
- md/raid10: fix that replacement cannot complete recovery after reassemble
- dev-dax: check_vma: ratelimit dev_info-s
- nl80211: relax ht operation checks for mesh
- nl80211: check nla_parse_nested() return values
- drm/exynos: gsc: Fix support for NV16/61, YUV420/YVU420 and YUV422 modes
- drm/exynos: decon5433: Fix per-plane global alpha for XRGB modes
- drm/exynos: decon5433: Fix WINCONx reset value
- drbd: Fix drbd_request_prepare() discard handling
- bpf, s390: fix potential memleak when later bpf_jit_prog fails
- PCI: xilinx: Add missing of_node_put()
- PCI: xilinx-nwl: Add missing of_node_put()
- PCI: faraday: Add missing of_node_put()
- bnx2x: Fix receiving tx-timeout in error or recovery state.
- fsl/fman: fix parser reporting bad checksum on short frames
- dpaa_eth: DPAA SGT needs to be 256B
- acpi/nfit: fix cmd_rc for acpi_nfit_ctl to always return a value
- openrisc: entry: Fix delay slot exception detection
- m68k: fix "bad page state" oops on ColdFire boot
- objtool: Support GCC 8 '-fnoreorder-functions'
- ipvlan: call dev_change_flags when ipvlan mode is reset
- drm/amdgpu: fix swapped emit_ib_size in vce3
- x86/mm/32: Initialize the CR4 shadow before __flush_tlb_all()
- HID: wacom: Correct touch maximum XY of 2nd-gen Intuos
- ARM: imx_v4_v5_defconfig: Select ULPI support
- bpf: hash map: decrement counter on error
- tracing: Use __printf markup to silence compiler
- kasan: fix shadow_size calculation error in kasan_module_alloc
- smsc75xx: Add workaround for gigabit link up hardware errata.
- drm/bridge/sii8620: Fix display of packed pixel modes
- samples/bpf: add missing <linux/if_vlan.h>
- samples/bpf: Check the result of system()
- samples/bpf: Check the error of write() and read()
- ieee802154: 6lowpan: set IFLA_LINK
- netfilter: x_tables: set module owner for icmp(6) matches
- ipv6: make ipv6_renew_options() interrupt/kernel safe
- net: qrtr: Broadcast messages only from control port
- sh_eth: fix invalid context bug while calling auto-negotiation by ethtool
- sh_eth: fix invalid context bug while changing link options by ethtool
- ravb: fix invalid context bug while calling auto-negotiation by ethtool
- ravb: fix invalid context bug while changing link options by ethtool
- ARM: pxa: irq: fix handling of ICMR registers in suspend/resume
- net/sched: act_tunnel_key: fix NULL dereference when 'goto chain' is used
- nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
- ieee802154: at86rf230: switch from BUG_ON() to WARN_ON() on problem
- ieee802154: at86rf230: use __func__ macro for debug messages
- ieee802154: fakelb: switch from BUG_ON() to WARN_ON() on problem
- gpu: host1x: Check whether size of unpin isn't 0
- drm/tegra: Fix comparison operator for buffer size
- drm/armada: fix colorkey mode property
- drm/armada: fix irq handling
- netfilter: nft_compat: explicitly reject ERROR and standard target
- netfilter: nf_conntrack: Fix possible possible crash on module loading.
- ARC: Improve cmpxchg syscall implementation
- bnxt_en: Fix inconsistent BNXT_FLAG_AGG_RINGS logic.
- bnxt_en: Always set output parameters in bnxt_get_max_rings().
- bnxt_en: Fix for system hang if request_irq fails
- scsi: qedf: Send the driver state to MFW
- scsi: qedi: Send driver state to MFW
- perf llvm-utils: Remove bashism from kernel include fetch script
- perf tools: Fix compilation errors on gcc8
- perf script python: Fix dict reference counting
- nfit: fix unchecked dereference in acpi_nfit_ctl
- RDMA/mlx5: Fix memory leak in mlx5_ib_create_srq() error path
- ARM: 8780/1: ftrace: Only set kernel memory back to read-only after boot
- ARM: DRA7/OMAP5: Enable ACTLR[0] (Enable invalidates of BTB) for secondary
cores
- ARM: dts: am3517.dtsi: Disable reference to OMAP3 OTG controller
- ixgbe: Be more careful when modifying MAC filters
- tools: build: Use HOSTLDFLAGS with fixdep
- kbuild: suppress warnings from 'getconf LFS_*'
- packet: reset network header if packet shorter than ll reserved space
- qlogic: check kstrtoul() for errors
- tcp: remove DELAYED ACK events in DCTCP
- pinctrl: ingenic: Fix inverted direction for < JZ4770
- pinctrl: nsp: off by ones in nsp_pinmux_enable()
- pinctrl: nsp: Fix potential NULL dereference
- drm/nouveau/gem: off by one bugs in nouveau_gem_pushbuf_reloc_apply()
- net/ethernet/freescale/fman: fix cross-build error
- ibmvnic: Fix error recovery on login failure
- btrfs: scrub: Don't use inode page cache in scrub_handle_errored_block()
- octeon_mgmt: Fix MIX registers configuration on MTU setup
- net: usb: rtl8150: demote allmulti message to dev_dbg()
- PCI: OF: Fix I/O space page leak
- PCI: versatile: Fix I/O space page leak
- net: qca_spi: Avoid packet drop during initial sync
- net: qca_spi: Make sure the QCA7000 reset is triggered
- net: qca_spi: Fix log level if probe fails
- tcp: identify cryptic messages as TCP seq # bugs
- soc: imx: gpc: restrict register range for regmap access
- ACPI / EC: Use ec_no_wakeup on more Thinkpad X1 Carbon 6th systems
- ARM: dts: imx6: RDU2: fix irq type for mv88e6xxx switch
- nvme: fix handling of metadata_len for NVME_IOCTL_IO_CMD
- parisc: Remove ordered stores from syscall.S
- xfrm_user: prevent leaking 2 bytes of kernel memory
- netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state
- packet: refine ring v3 block size test to hold one frame
- net/smc: no shutdown in state SMC_LISTEN
- parisc: Remove unnecessary barriers from spinlock.h
- PCI: hotplug: Don't leak pci_slot on registration failure
- PCI: Skip MPS logic for Virtual Functions (VFs)
- PCI: pciehp: Fix use-after-free on unplug
- PCI: pciehp: Fix unprotected list iteration in IRQ handler
- i2c: core: ACPI: Properly set status byte to 0 for multi-byte writes
- i2c: imx: Fix race condition in dma read
- reiserfs: fix broken xattr handling (heap corruption, bad retval)
- updateconfigs for v4.14.67
- IB/rxe: avoid double kfree skb
- RDMA/qedr: Fix NULL pointer dereference when running over iWARP without
RDMA-CM
- smb3: increase initial number of credits requested to allow write
- hwmon: (dell-smm) Disable fan support for Dell XPS13 9333
- ARM: dts: HR2: Fix interrupt types for i2c and PCIe
- drm/arm/malidp: Ensure that the crtcs are shutdown before removing any
encoder/connector
- drm/mali-dp: Rectify the width and height passed to rotmem_required()
- dmaengine: ti: omap-dma: Fix OMAP1510 incorrect residue_granularity
- nvme-rdma: fix possible double free condition when failing to create a
controller
- nvme-rdma: Fix command completion race at error recovery
- nvme-pci: move nvme_kill_queues to nvme_remove_dead_ctrl
- clk: sunxi-ng: replace lib-y with obj-y
- batman-adv: Fix debugfs path for renamed hardif
- batman-adv: Fix debugfs path for renamed softif
- nfp: bpf: don't stop offload if replace failed
- perf tests: Add event parsing error handling to parse events test
- perf script: Fix crash because of missing evsel->priv
- perf tools: Fix crash caused by accessing feat_ops[HEADER_LAST_FEATURE]
- s390/qeth: consistently re-enable device features
- sched/fair: Fix bandwidth timer clock drift condition
- r8169: fix mac address change
- RISC-V: Don't include irq-riscv-intc.h
- RISC-V: Fix PTRACE_SETREGSET bug.
- net: qrtr: Reset the node and port ID of broadcast messages
- cxgb4: assume flash part size to be 4MB, if it can't be determined
- bpf: fix sk_skb programs without skb->dev assigned
- ipfrag: really prevent allocation on netns exit
- gpu: host1x: Skip IOMMU initialization if firewall is enabled
- ARC: [plat-hsdk]: Configure APB GPIO controller on ARC HSDK platform
- bnxt_en: Do not modify max IRQ count after RDMA driver requests/frees IRQs.
- scsi: hpsa: correct enclosure sas address
- perf tools: Use python-config --includes rather than --cflags
- sfp: ensure we clean up properly on bus registration failure
- amd/dc/dce100: On dce100, set clocks to 0 on suspend
- tools: build: Fixup host c flags
- kvm: nVMX: Restore exit qual for VM-entry failure due to MSR loading
- ibmvnic: Revise RX/TX queue error messages
- net/smc: reset recv timeout after clc handshake
- PCI: xgene: Fix I/O space page leak
- PCI: designware: Fix I/O space page leak
- PCI: aardvark: Fix I/O space page leak
- PCI: faraday: Fix I/O space page leak
- PCI: mediatek: Fix I/O space page leak
- PCI: v3-semi: Fix I/O space page leak
- platform/x86: dell-laptop: Fix backlight detection
- mm: use helper functions for allocating and freeing vm_area structs
- mm: make vm_area_dup() actually copy the old vma data
- mm: make vm_area_alloc() initialize core fields
- PCI / ACPI / PM: Resume all bridges on suspend-to-RAM
Date: 2019-10-03 21:08:17.957300+00:00
Changed-By: Khaled El Mously <khalid.elmously at canonical.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux-oracle/5.0.0-1004.8
-------------- next part --------------
Sorry, changesfile not available.
More information about the Disco-changes
mailing list