From patchwork Mon Aug 19 22:25:12 2019 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Kamal Mostafa X-Patchwork-Id: 1149660 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Authentication-Results: ozlabs.org; spf=none (mailfrom) smtp.mailfrom=lists.ubuntu.com (client-ip=91.189.94.19; helo=huckleberry.canonical.com; envelope-from=kernel-team-bounces@lists.ubuntu.com; receiver=) Authentication-Results: ozlabs.org; dmarc=fail (p=none dis=none) header.from=canonical.com Received: from huckleberry.canonical.com (huckleberry.canonical.com [91.189.94.19]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 46C7m530Pgz9sN4; Tue, 20 Aug 2019 08:25:25 +1000 (AEST) Received: from localhost ([127.0.0.1] helo=huckleberry.canonical.com) by huckleberry.canonical.com with esmtp (Exim 4.86_2) (envelope-from ) id 1hzq5Z-0004e9-B9; Mon, 19 Aug 2019 22:25:21 +0000 Received: from youngberry.canonical.com ([91.189.89.112]) by huckleberry.canonical.com with esmtps (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:128) (Exim 4.86_2) (envelope-from ) id 1hzq5U-0004d8-Ea for kernel-team@lists.ubuntu.com; Mon, 19 Aug 2019 22:25:16 +0000 Received: from 1.general.kamal.us.vpn ([10.172.68.52] helo=fourier) by youngberry.canonical.com with esmtpsa (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.76) (envelope-from ) id 1hzq5T-0000jJ-Jp for kernel-team@lists.ubuntu.com; Mon, 19 Aug 2019 22:25:16 +0000 Received: from kamal by fourier with local (Exim 4.90_1) (envelope-from ) id 1hzq5R-0003Dr-AP for kernel-team@lists.ubuntu.com; Mon, 19 Aug 2019 15:25:13 -0700 From: Kamal Mostafa To: kernel-team@lists.ubuntu.com Subject: [SRU][Disco][PULL] Disco upstream stable patchset 2019-08-19+ Date: Mon, 19 Aug 2019 15:25:12 -0700 Message-Id: <20190819222512.12332-1-kamal@canonical.com> X-Mailer: git-send-email 2.17.1 MIME-Version: 1.0 X-BeenThere: kernel-team@lists.ubuntu.com X-Mailman-Version: 2.1.20 Precedence: list List-Id: Kernel team discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: kernel-team-bounces@lists.ubuntu.com Sender: "kernel-team" This pull req includes the following pending Disco stable patchsets: Disco update: upstream stable patchset 2019-08-15 Ported from the following upstream stable releases: v4.19.56, v5.1.15 BugLink: https://bugs.launchpad.net/bugs/1840373 Disco update: upstream stable patchset 2019-08-16 Ported from the following upstream stable releases: v4.19.57, v5.1.16 BugLink: https://bugs.launchpad.net/bugs/1840520 Disco update: upstream stable patchset 2019-08-19 Ported from the following upstream stable releases: v4.19.58, v5.1.17, v4.19.59, v5.1.18 BugLink: https://bugs.launchpad.net/bugs/1840718 -Kamal ----- The following changes since commit e73cc011b6b50eb170b759000000180ffee03167: UBUNTU: upstream stable to v4.19.55, v5.1.14 (2019-08-13 15:50:23 -0400) are available in the Git repository at: git://git.launchpad.net/~kamalmostafa/ubuntu/+source/linux/+git/disco disco-stable for you to fetch changes up to 9ca5d2d491cb4072c121bb91ce8491ec806749c4: UBUNTU: upstream stable to v4.19.59, v5.1.18 (2019-08-19 14:35:49 -0700) ---------------------------------------------------------------- Adrian Hunter (3): perf intel-pt: Fix itrace defaults for perf script perf auxtrace: Fix itrace defaults for perf script perf intel-pt: Fix itrace defaults for perf script intel-pt documentation Ajay Singh (1): staging: wilc1000: fix error path cleanup in wilc_wlan_initialize() Alakesh Haloi (1): userfaultfd: selftest: fix compiler warning Alan Stern (1): p54usb: Fix race between disconnect and firmware loading Alejandro Jimenez (1): x86/speculation: Allow guests to use SSBD even if host does not Alex Deucher (1): drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE Alex Levin (1): ASoC: Intel: sst: fix kmalloc call with wrong flags Alex Shi (3): kselftest/cgroup: fix unexpected testing failure on test_memcontrol kselftest/cgroup: fix unexpected testing failure on test_core kselftest/cgroup: fix incorrect test_core skip Alexander Mikhaylenko (1): Input: synaptics - enable SMBus on ThinkPad E480 and E580 Alexandra Winter (1): s390/qeth: fix VLAN attribute in bridge_hostnotify udev event Alexandre Belloni (1): usb: gadget: udc: lpc32xx: allocate descriptor with GFP_ATOMIC Alexei Starovoitov (1): bpf, x64: fix stack layout of JITed bpf code Amadeusz Sławiński (2): ALSA: hdac: fix memory release for SST and SOF drivers SoC: rt274: Fix internal jack assignment in set_jack callback Amir Goldstein (4): ovl: support the FS_IOC_FS[SG]ETXATTR ioctls ovl: fix wrong flags check in FS_IOC_FS[SG]ETXATTR ioctls ovl: make i_ino consistent with st_ino in more cases ovl: detect overlapping layers Andreas Fritiofson (1): USB: serial: ftdi_sio: add ID for isodebug v1 Andrey Smirnov (1): Input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD Andy Lutomirski (2): x86/vdso: Prevent segfaults due to hoisted vclock reads Documentation/admin: Remove the vsyscall=native documentation Andy Strohman (1): nl80211: fix station_info pertid memory leak Anisse Astier (2): arm64/sve: should not depend on arm64: ssbd: explicitly depend on Anson Huang (1): Input: imx_keypad - make sure keyboard can always wake up system Anssi Hannula (1): can: xilinx_can: use correct bittiming_const for CAN FD core Ard Biesheuvel (2): efi/memreserve: deal with memreserve entries in unmapped memory arm64: kaslr: keep modules inside module region when KASAN is enabled Arnd Bergmann (2): ovl: fix bogus -Wmaybe-unitialized warning staging: rtl8712: reduce stack usage, again Avraham Stern (1): cfg80211: report measurement start TSF correctly Avri Altman (1): scsi: ufs: Check that space was properly alloced in copy_query_response Baolin Wang (2): dmaengine: sprd: Fix the possible crash when getting descriptor status dmaengine: sprd: Add validation of current descriptor in irq handler Bartosz Golaszewski (2): ARM: davinci: da850-evm: call regulator_has_full_constraints() ARM: davinci: da8xx: specify dma_coherent_mask for lcdc Benjamin Coddington (1): NFS4: Only set creation opendata if O_CREAT Bjørn Mork (1): qmi_wwan: Fix out-of-bounds read Brian Norris (1): mwifiex: Don't abort on small, spec-compliant vendor IEs Błażej Szczygieł (1): HID: a4tech: fix horizontal scrolling Cedric Hombourger (1): MIPS: have "plain" make calls build dtbs for selected platforms Chang-Hsien Tsai (1): samples, bpf: fix to change the buffer size for read() Christian Lamparter (2): carl9170: fix misuse of device driver API p54: fix crash during initialization Christoph Hellwig (1): powerpc: enable a 30-bit ZONE_DMA for 32-bit pmac Christophe Leroy (1): crypto: talitos - rename alternative AEAD algos. Chuck Lever (1): svcrdma: Ignore source port when computing DRC hash Colin Ian King (5): dmaengine: dw-axi-dmac: fix null dereference when pointer first is null ALSA: seq: fix incorrect order of dest_client/dest_ports arguments ALSA: usb-audio: fix sign unintended sign extension on left shifts net: lio_core: fix potential sign-extension overflow on large shift staging: fsl-dpaa2/ethsw: fix memory leak of switchdev_work Crt Mori (1): iio: temperature: mlx90632 Relax the compatibility check Dan Carpenter (4): scsi: smartpqi: unlock on error in pqi_submit_raid_request_synchronous() dmaengine: mediatek-cqdma: sleeping in atomic context dmaengine: jz4780: Fix an endian bug in IRQ handler drm: return -EFAULT if copy_to_user() fails Daniel Borkmann (2): bpf: fix unconnected udp hooks bpf, arm64: use more scalable stadd over ldxr / stxr loop in xadd Daniel Smith (1): Input: silead - add MSSL0017 to acpi_device_id Dave Martin (2): arm64: Silence gcc warnings about arch ABI drift KVM: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy Dave Stevenson (4): staging: bcm2835-camera: Replace spinlock protecting context_map with mutex staging: bcm2835-camera: Ensure all buffers are returned on disable staging: bcm2835-camera: Remove check of the number of buffers supplied staging: bcm2835-camera: Handle empty EOS buffers whilst streaming Dennis Wassenberg (1): ALSA: hda/realtek - Change front mic location for Lenovo M710q Dianzhang Chen (2): x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg() x86/tls: Fix possible spectre-v1 in do_get_thread_area() Dinh Nguyen (1): clk: socfpga: stratix10: fix divider entry for the emac clocks Dmitry Bogdanov (1): net: aquantia: fix vlans not working over bridged network Dmitry Korotin (1): MIPS: Add missing EHB in mtc0 -> mfc0 sequence. Don Brace (1): scsi: hpsa: correct ioaccel2 chaining Douglas Anderson (6): mmc: core: API to temporarily disable retuning for SDIO CRC errors mmc: core: Add sdio_retune_hold_now() and sdio_retune_release() brcmfmac: sdio: Disable auto-tuning around commands expected to fail brcmfmac: sdio: Don't tune while the card is off Revert "brcmfmac: disable command decode in sdio_aos" block, bfq: NULL out the bic when it's no longer valid Eduardo Valentin (1): hwmon: (core) add thermal sensors only if dev->of_node is present Eiichi Tsukata (1): tracing/snapshot: Resize spare buffer if size changed Emmanuel Grumbach (1): iwlwifi: fix load in rfkill flow for unified firmware Eric Biggers (5): cfg80211: fix memory leak of wiphy device name crypto: hmac - fix memory leak in hmac_init_tfm() crypto: user - prevent operating on larval algorithms fs/userfaultfd.c: disable irqs for fault_pending and event locks crypto: lrw - use correct alignmask Eric Dumazet (2): net/packet: fix memory leak in packet_set_ring() ip6: fix skb leak in ip6frag_expire_frag_queue() Eric Long (3): dmaengine: sprd: Fix block length overflow dmaengine: sprd: Fix the incorrect start for 2-stage destination channels dmaengine: sprd: Fix the right place to configure 2-stage transfer Eugen Hristev (1): can: m_can: implement errata "Needless activation of MRAF irq" Evan Quan (1): drm/amd/powerplay: use hardware fan control if no powerplay fan table Fabio Estevam (2): ARM: imx: cpuidle-imx6sx: Restrict the SW2ISO increase to i.MX6SX can: flexcan: Remove unneeded registration message Fabrice Gasnier (1): iio: adc: stm32-adc: add missing vdda-supply Faiz Abbas (2): ARM: dts: dra76x: Update MMC2_HS200_MANUAL1 iodelay values ARM: dts: am57xx-idk: Remove support for voltage switching for SD card Fei Li (1): tun: wake up waitqueues after IFF_UP is set Fei Yang (1): usb: gadget: f_fs: data_len used before properly set Florian Fainelli (2): soc: brcmstb: Fix error path for unsupported CPUs soc: bcm: brcmstb: biuctrl: Register writes require a barrier Florian Westphal (4): netfilter: nf_flow_table: ignore DF bit setting netfilter: nft_flow_offload: set liberal tracking mode for tcp netfilter: nft_flow_offload: don't offload when sequence numbers need adjustment netfilter: nft_flow_offload: IPCB is only valid for ipv4 family Gao Xiang (1): staging: erofs: add requirements field in superblock Geert Uytterhoeven (1): cpu/speculation: Warn on unsupported mitigations= parameter Gen Zhang (1): mdesc: fix a missing-check bug in get_vdev_port_node_info() George G. Davis (1): scripts/checkstack.pl: Fix arm64 wrong or unknown architecture Gerd Hoffmann (1): drm/virtio: move drm_connector_update_edid_property() call Guenter Roeck (1): xtensa: Fix section mismatch between memblock_reserve and mem_reserve Guillaume Nault (2): netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments netfilter: ipv6: nf_defrag: accept duplicate fragments again Guoqing Jiang (1): sc16is7xx: move label 'err_spi' to correct section H. Nikolaus Schaller (1): gpio: pca953x: hack to fix 24 bit gpio expanders Hans de Goede (2): drm: panel-orientation-quirks: Add quirk for GPD pocket2 drm: panel-orientation-quirks: Add quirk for GPD MicroPC Hauke Mehrtens (1): MIPS: Fix bounds check virt_addr_valid Heiko Carstens (1): s390/boot: disable address-of-packed-member warning Helge Deller (1): parisc: Fix compiler warnings in float emulation code Herbert Xu (1): lib/mpi: Fix karactx leak in mpi_powm Hongjie Fang (1): fscrypt: don't set policy for a dead directory Hsin-Yi Wang (5): drm/mediatek: fix unbind functions drm/mediatek: unbind components in mtk_drm_unbind() drm/mediatek: call drm_atomic_helper_shutdown() when unbinding driver drm/mediatek: clear num_pipes when unbind driver drm/mediatek: call mtk_dsi_stop() after mtk_drm_crtc_atomic_disable() Huang Ying (1): mm, swap: fix THP swap out Ian Abbott (2): staging: comedi: dt282x: fix a null pointer deref on interrupt staging: comedi: amplc_pci230: fix null pointer deref on interrupt Ido Schimmel (1): mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed Ilya Maximets (1): xdp: check device pointer before clearing Jaegeuk Kim (1): f2fs: don't access node/meta inode mapping after iput Jaesoo Lee (1): nvme: Fix u32 overflow in the number of namespace list calculation Jakub Sitnicki (1): bpf: sockmap, restore sk_write_space when psock gets dropped James Morse (1): x86/resctrl: Don't stop walking closids when a locksetup group is found Jan Kara (2): scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck() dax: Fix xarray entry association for mixed mappings Jan Kundrát (1): ARM: mvebu_v7_defconfig: fix Ethernet on Clearfog Jann Horn (2): apparmor: enforce nullbyte at end of tag string fs/binfmt_flat.c: make load_flat_shared_library() work Jason Gunthorpe (1): RDMA: Directly cast the sockaddr union to sockaddr Jean-Philippe Brucker (1): arm64: insn: Fix ldadd instruction encoding Jia-Ju Bai (1): iwlwifi: Fix double-free problems in iwl_req_fw_callback() JingYi Hou (1): net: remove duplicate fetch in sock_getsockopt Joakim Zhang (1): can: flexcan: fix timeout when set small bitrate Joel Savitz (1): cpuset: restore sanity to cpuset_cpus_allowed_fallback() Johannes Berg (1): mac80211: drop robust management frames from unknown TA Johannes Weiner (1): mm: fix page cache convergence regression John Crispin (1): mac80211: fix rate reporting inside cfg80211_calculate_bitrate_he() John Fastabend (1): bpf: sockmap, fix use after free from sleep in psock backlog workqueue John Garry (1): perf pmu: Fix uncore PMU alias list for ARM64 John Ogness (1): fs/proc/array.c: allow reporting eip/esp for all coredumping threads Jon Hunter (1): clk: tegra210: Fix default rates for HDA clocks Jonathan Lemon (1): bpf: lpm_trie: check left child of last leftmost node for NULL Jose Abreu (2): ARC: [plat-hsdk]: Add missing multicast filter bins number to GMAC node ARC: [plat-hsdk]: Add missing FIFO size entry in GMAC node Josh Poimboeuf (1): module: Fix livepatch/ftrace module text permissions race Joshua Scott (1): ARM: dts: armada-xp-98dx3236: Switch to armada-38x-uart serial node Jouni Malinen (1): mac80211: Do not use stack memory with scatterlist for GMAC Julian Wiedmann (2): s390/qeth: handle limited IPv4 broadcast in L3 TX path s390/qeth: check dst entry before use Jörgen Storvist (1): USB: serial: option: add support for GosunCn ME3630 RNDIS mode Kai-Heng Feng (1): HID: i2c-hid: add iBall Aer3 to descriptor override Kaike Wan (1): IB/hfi1: Validate fault injection opcode user input Kailang Yang (1): ALSA: hda/realtek - Headphone Mic can't record after S3 Kamal Mostafa (4): UBUNTU: upstream stable to v4.19.56, v5.1.15 UBUNTU: upstream stable to v4.19.57, v5.1.16 UBUNTU: upstream stable to v4.19.58, v5.1.17 UBUNTU: upstream stable to v4.19.59, v5.1.18 Kamenee Arumugam (1): IB/hfi1: Validate page aligned for a given virtual address Kan Liang (1): x86/CPU: Add more Icelake model numbers Kees Cook (2): lkdtm/usercopy: Moves the KERNEL_DS test to non-canonical tpm: Actually fail on TPM errors during "get random" Kevin Hilman (1): RISC-V: defconfig: enable clocks, serial console Kiruthika Varadarajan (1): usb: gadget: ether: Fix race between gether_disconnect and rx_submit Krzesimir Nowak (1): tools: bpftool: Fix JSON output when lookup fails Libin Yang (1): ASoC: soc-pcm: BE dai needs prepare when pause release after resume Lin Yi (1): net :sunrpc :clnt :Fix xps refcount imbalance on the error path Linus Torvalds (2): gcc-9: silence 'address-of-packed-member' warning tty: rocket: fix incorrect forward declaration of 'rp_init()' Linus Walleij (1): i2c: pca-platform: Fix GPIO lookup code Lorenzo Bianconi (1): iio: imu: st_lsm6dsx: fix PM support for st_lsm6dsx i2c controller Lu Baolu (1): iommu/vt-d: Set the right field for Page Walk Snoop Lucas Stach (2): udmabuf: actually unmap the scatterlist drm/etnaviv: add missing failure path to destroy suballoc Manikanta Pubbisetty (1): {nl,mac}80211: allow 4addr AP operation on crypto controlled devices Manuel Traut (1): scripts/decode_stacktrace.sh: prefix addr2line with $CROSS_COMPILE Marcel Holtmann (2): Bluetooth: Align minimum encryption key size for LE and BR/EDR connections Bluetooth: Fix regression with minimum encryption key size alignment Marcus Cooper (2): ASoC: sun4i-i2s: Fix sun8i tx channel offset mask ASoC: sun4i-i2s: Add offset to RX channel select Marek Szyprowski (1): media: s5p-mfc: fix incorrect bus assignment in virtual child device Mariusz Tkaczyk (1): md: fix for divide error in status_resync Martin Blumenstingl (1): usb: dwc2: use a longer AHB idle timeout in dwc2_core_reset() Martin KaFai Lau (2): bpf: udp: Avoid calling reuseport's bpf_prog from udp_gro bpf: udp: ipv6: Avoid running reuseport's bpf_prog from __udp6_lib_err Martin Schwidefsky (1): s390/mm: fix pxd_bad with folded page tables Martynas Pumputis (1): bpf: simplify definition of BPF_FIB_LOOKUP related flags Mathew King (1): platform/x86: intel-vbtn: Report switch events when event wakes device Mathias Nyman (2): xhci: detect USB 3.2 capable host controllers correctly usb: xhci: Don't try to recover an endpoint if port is in error state. Matias Karhumaa (1): Bluetooth: Fix faulty expression for minimum encryption key size check Matt Flax (1): ASoC : cs4265 : readable register too low Matt Mullins (1): bpf: fix nested bpf tracepoints with per-cpu data Matteo Croce (1): samples, bpf: suppress compiler warning Matthew Wilcox (Oracle) (1): idr: Fix idr_get_next race with idr_remove Mauro Carvalho Chehab (1): media: stv0297: fix frequency range limit Mauro S. M. Rodrigues (1): bnx2x: Check if transceiver implements DDM before access Melissa Wen (1): staging:iio:ad7150: fix threshold mode config bit Miaohe Lin (1): net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set Miguel Ojeda (1): tracing: Silence GCC 9 array bounds warning Mike Marciniszyn (11): IB/hfi1: Silence txreq allocation warnings IB/rdmavt: Fix alloc_qpn() WARN_ON() IB/hfi1: Insure freeze_work work_struct is canceled on shutdown IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value IB/hfi1: Close PSM sdma_progress sleep window IB/hfi1: Avoid hardlockup with flushlist_lock IB/hfi1: Correct tid qp rcd to match verbs context IB/hfi1: Create inline to get extended headers IB/hfi1: Wakeup QPs orphaned on wait list after flush IB/hfi1: Handle wakeup of orphaned QPs for pio IB/hfi1: Handle port down properly in pio Mike Salvatore (1): apparmor: reset pos on failure to unpack for various functions Miklos Szeredi (1): ovl: don't fail with disconnected lower NFS Minwoo Im (1): nvmet: fix data_len to 0 for bdev-backed write_zeroes Mordechay Goodstein (1): cfg80211: util: fix bit count off by one Naftali Goldstein (1): mac80211: do not start any work during reconfigure flow Naohiro Aota (1): btrfs: start readahead also in seed devices Naoya Horiguchi (2): mm: soft-offline: return -EBUSY if set_hwpoison_free_buddy_page() fails mm: hugetlb: soft-offline: dissolve_free_huge_page() return zero on !PageHuge Naresh Kamboju (1): selftests: vm: install test_vmalloc.sh for run_vmtests Nathan Chancellor (1): arm64: Don't unconditionally add -Wno-psabi to KBUILD_CFLAGS Naveen N. Rao (1): powerpc/bpf: use unsigned division instruction for 64-bit operations Neil Horman (1): af_packet: Block execution of tasks waiting for transmit to complete in AF_PACKET Nick Desaulniers (1): lkdtm: support llvm-objcopy Nick Hu (1): riscv: Fix udelay in RV32. Nicolas Saenz Julienne (3): staging: vchiq_2835_arm: revert "quit using custom down_interruptible()" staging: vchiq: revert "switch to wait_for_completion_killable" staging: vchiq: make wait events interruptible Nikita Yushchenko (1): net: dsa: mv88e6xxx: avoid error message on remove from VLAN 0 Nikolaus Voss (2): drivers/usb/typec/tps6598x.c: fix portinfo width drivers/usb/typec/tps6598x.c: fix 4CC cmd write Nikolay Borisov (1): btrfs: Ensure replaced device doesn't have pending chunk allocation Nilesh Javali (1): scsi: qedi: Check targetname while finding boot target information Noralf Trønnes (1): drm/fb-helper: generic: Don't take module ref for fbcon Oleg Nesterov (2): signal: remove the wrong signal_pending() check in restore_user_sigmask() swap_readpage(): avoid blk_wake_io_task() if !synchronous Oliver Barta (1): Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled" Paolo Bonzini (1): KVM: x86: degrade WARN to pr_warn_ratelimited Paul Burton (1): irqchip/mips-gic: Use the correct local interrupt map registers Paul Cercueil (1): dmaengine: jz4780: Fix transfers being ACKed too soon Paul Menzel (1): nfsd: Fix overflow causing non-working mounts on 1 TB machines Peter Chen (1): usb: chipidea: udc: workaround for endpoint conflict issue Peter Oskolkov (3): net: IP defrag: encapsulate rbtree defrag code into callable functions net: IP6 defrag: use rbtrees for IPv6 defrag net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c Petr Mladek (1): ftrace/x86: Remove possible deadlock between register_kprobe() and ftrace_run_update_code() Pradeep Kumar Chitrapu (1): mac80211: free peer keys before vif down in mesh Qian Cai (1): drm/vmwgfx: fix a warning due to missing dma_parms Ranjani Sridharan (2): ASoC: core: lock client_mutex while removing link components ASoC: hda: fix unbalanced codec dev refcount for HDA_DEV_ASOC Rasmus Villemoes (1): net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge() Raul E Rangel (1): mmc: sdhci: sdhci-pci-o2micro: Correctly set bus width when tuning Reinette Chatre (1): x86/resctrl: Prevent possible overrun during bitmap operations Reinhard Speyerer (3): qmi_wwan: add support for QMAP padding in the RX path qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode qmi_wwan: extend permitted QMAP mux_id value range Richard Sailer (1): ALSA: hda/realtek: Add quirks for several Clevo notebook barebones Robert Beckett (2): drm/imx: notify drm core before sending event during crtc disable drm/imx: only send event on crtc disable if kept disabled Robert Hancock (1): hwmon: (pmbus/core) Treat parameters as paged if on multiple pages Robin Gong (1): dmaengine: imx-sdma: remove BD_INTR for channel0 Robin Murphy (2): drm/arm/hdlcd: Actually validate CRTC modes drm/arm/hdlcd: Allow a bit of clock tolerance Roland Hii (2): net: stmmac: fixed new system time seconds value calculation net: stmmac: set IC bit when transmitting frames with HW timestamp Roman Bolshakov (1): scsi: target/iblock: Fix overrun in WRITE SAME emulation Ronnie Sahlberg (1): cifs: fix GlobalMid_Lock bug in cifs_reconnect Russell King (1): net: phylink: avoid reducing support mask Sasha Levin (1): Revert "x86/uaccess, ftrace: Fix ftrace_likely_update() vs. SMAP" Scott Wood (2): fpga: dfl: afu: Pass the correct device to dma_mapping_error() fpga: dfl: Add lockdep classes for pdata->lock Sean Christopherson (1): KVM: x86/mmu: Allocate PAE root array when using SVM's 32-bit NPT Sean Nyekjaer (2): dt-bindings: can: mcp251x: add mcp25625 support can: mcp251x: add support for mcp25625 Sean Wang (2): net: ethernet: mediatek: Use hw_feature to judge if HWLRO is supported net: ethernet: mediatek: Use NET_IP_ALIGN to judge if HW RX_2BYTE_OFFSET is enabled Sebastian Parschauer (1): HID: Add another Primax PIXART OEM mouse quirk Sergio Paracuellos (1): staging: mt7621-pci: fix PCIE_FTS_NUM_LO macro Shakeel Butt (1): mm/vmscan.c: prevent useless kswapd loops ShihPo Hung (1): riscv: mm: synchronize MMU after pte change Song Liu (1): perf header: Assign proper ff->ph in perf_event__synthesize_features() Sricharan R (1): dmaengine: qcom: bam_dma: Fix completed descriptors count Srinivas Kandagatla (3): soundwire: stream: fix out of boundary access on port properties soundwire: intel: set dai min and max channels correctly soundwire: stream: fix bad unlock balance Stanley Chu (1): scsi: ufs: Avoid runtime suspend possibly being blocked forever Stephen Suryaputra (1): ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while loop Steve French (1): SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write Steve Longerbeam (3): gpu: ipu-v3: image-convert: Fix input bytesperline width/height align gpu: ipu-v3: image-convert: Fix input bytesperline for packed formats gpu: ipu-v3: image-convert: Fix image downsize coefficients Steven J. Magnani (1): udf: Fix incorrect final NOT_ALLOCATED (hole) extent length Takashi Iwai (4): ALSA: line6: Fix write on zero-sized buffer ALSA: hda: Initialize power_state field properly ALSA: usb-audio: Fix parse of UAC2 Extension Units mwifiex: Abort at too short BSS descriptor element Takashi Sakamoto (1): ALSA: firewire-lib/fireworks: fix miss detection of received MIDI messages Teresa Remmet (1): ARM: dts: am335x phytec boards: Fix cd-gpios active level Thomas Falcon (3): ibmvnic: Do not close unopened driver during reset ibmvnic: Refresh device multicast list after reset ibmvnic: Fix unchecked return codes of memory allocations Thomas Gleixner (1): x86/microcode: Fix the microcode load on CPU hotplug for real Thomas Hellstrom (2): drm/vmwgfx: Use the backdoor port if the HB port is not available drm/vmwgfx: Honor the sg list segment size limitation Thomas Pedersen (1): mac80211: mesh: fix RCU warning Tim Chen (1): Documentation: Add section about CPU vulnerabilities for Spectre Todd Kjos (2): binder: fix possible UAF when freeing buffer binder: fix memory leak in error path Tony Lindgren (1): ARM: dts: Drop bogus CLKSEL for timer12 on dra7 Toshiaki Makita (3): bpf, devmap: Fix premature entry free on destroying map bpf, devmap: Add missing bulk queue free bpf, devmap: Add missing RCU read lock on flush Trevor Bourget (1): kbuild: tar-pkg: enable communication with jobserver Trond Myklebust (1): NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O Ulf Hansson (1): mmc: core: Prevent processing SDIO IRQs when the card is suspended Ursula Braun (1): net/smc: move unhash before release of clcsock Vadim Pasternak (2): platform/x86: mlx-platform: Fix parent device in i2c-mux-reg device registration platform/mellanox: mlxreg-hotplug: Add devm_free_irq call to remove flow Vadim Sukhomlinov (1): tpm: Fix TPM 1.2 Shutdown sequence to prevent future TPM operations Vasily Gorbik (1): tracing: avoid build warning with HAVE_NOP_MCOUNT Vincent Whitchurch (1): crypto: cryptd - Fix skcipher instance memory leak Vineet Gupta (1): ARC: fix build warnings Viorel Suman (2): ASoC: ak4458: add return value for ak4458_probe ASoC: ak4458: rstn_control - return a non-zero on error only Vishnu DASA (1): VMCI: Fix integer overflow in VMCI handle arrays Vitaly Kuznetsov (1): KVM: nVMX: use correct clean fields when copying from eVMCS Wanpeng Li (1): KVM: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC Wei Li (1): ftrace: Fix NULL pointer dereference in free_ftrace_func_mapper() Wen He (1): drm/arm/mali-dp: Add a loop around the second set CVAL and try 5 times Wen Yang (1): fpga: stratix10-soc: fix use-after-free on s10_init() Will Deacon (3): arm64: futex: Avoid copying out uninitialised stack in failed cmpxchg() futex: Update comments and docs about return values of arch futex code arm64: tlbflush: Ensure start/end of address range are aligned to stride Willem de Bruijn (1): can: purge socket error queue on sock destruct Wolfram Sang (2): mmc: sdhi: disallow HS400 for M3-W ES1.2, RZ/G2M, and V3H mmc: core: complete HS400 before checking status Xin Long (6): selftests: set sysctl bc_forwarding properly in router_broadcast.sh sctp: change to hold sk after auth shkey is created successfully tipc: change to use register_pernet_device tipc: check msg->req data len in tipc_nl_compat_bearer_disable tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL Yibo Zhao (1): mac80211: only warn once on chanctx_conf being NULL Yoshihiro Shimoda (1): usb: renesas_usbhs: add a workaround for a race condition of workqueue Young Xiao (2): sparc: perf: fix updated event period in response to PERF_EVENT_IOC_PERIOD usb: gadget: fusb300_udc: Fix memory leak of fusb300->ep[i] Yu Wang (1): mac80211: handle deauthentication/disassociation from TDLS peer Yu-Hsuan Hsu (1): ASoC: max98090: remove 24-bit format support if RJ is 0 YueHaibing (6): parport: Fix mem leak in parport_register_dev_model MIPS: uprobes: remove set but not used variable 'epc' bonding: Always enable vlan tx offload team: Always enable vlan tx offload spi: bitbang: Fix NULL pointer dereference in spi_unregister_master can: af_can: Fix error path of can_init() jjian zhou (2): mmc: mediatek: fix SDIO IRQ interrupt handle flow mmc: mediatek: fix SDIO IRQ detection issue swkhack (1): mm/mlock.c: change count_mm_mlocked_page_nr return type yangerkun (1): quota: fix a problem about transfer quota zhangyi (F) (1): dm log writes: make sure super sector log updates are written in order zhong jiang (1): mm/mempolicy.c: fix an incorrect rebind node in mpol_rebind_nodemask Documentation/ABI/testing/sysfs-class-net-qmi | 4 +- Documentation/admin-guide/hw-vuln/index.rst | 1 + Documentation/admin-guide/hw-vuln/spectre.rst | 697 +++++++++++++++++++++ Documentation/admin-guide/kernel-parameters.txt | 6 - .../bindings/net/can/microchip,mcp251x.txt | 1 + Documentation/robust-futexes.txt | 3 +- Documentation/userspace-api/spec_ctrl.rst | 2 + Makefile | 2 +- arch/arc/boot/dts/hsdk.dts | 4 + arch/arc/include/asm/cmpxchg.h | 14 +- arch/arc/mm/tlb.c | 13 +- arch/arm/boot/dts/am335x-pcm-953.dtsi | 2 +- arch/arm/boot/dts/am335x-wega.dtsi | 2 +- arch/arm/boot/dts/am57xx-idk-common.dtsi | 1 + arch/arm/boot/dts/armada-xp-98dx3236.dtsi | 8 + arch/arm/boot/dts/dra7-l4.dtsi | 2 - arch/arm/boot/dts/dra76x-mmc-iodelay.dtsi | 40 +- arch/arm/configs/mvebu_v7_defconfig | 1 + arch/arm/mach-davinci/board-da850-evm.c | 2 + arch/arm/mach-davinci/devices-da8xx.c | 3 + arch/arm/mach-imx/cpuidle-imx6sx.c | 3 +- arch/arm64/Makefile | 1 + arch/arm64/include/asm/futex.h | 4 +- arch/arm64/include/asm/insn.h | 8 + arch/arm64/include/asm/tlbflush.h | 3 + arch/arm64/include/uapi/asm/ptrace.h | 8 +- arch/arm64/kernel/insn.c | 40 ++ arch/arm64/kernel/module.c | 8 +- arch/arm64/kernel/ssbd.c | 1 + arch/arm64/net/bpf_jit.h | 4 + arch/arm64/net/bpf_jit_comp.c | 28 +- arch/mips/Makefile | 3 +- arch/mips/include/asm/mips-gic.h | 30 + arch/mips/kernel/uprobes.c | 3 - arch/mips/mm/mmap.c | 2 +- arch/mips/mm/tlbex.c | 29 +- arch/parisc/math-emu/cnv_float.h | 8 +- arch/powerpc/include/asm/page.h | 7 + arch/powerpc/include/asm/ppc-opcode.h | 1 + arch/powerpc/mm/mem.c | 3 +- arch/powerpc/net/bpf_jit.h | 2 +- arch/powerpc/net/bpf_jit_comp64.c | 8 +- arch/powerpc/platforms/powermac/Kconfig | 1 + arch/riscv/configs/defconfig | 4 + arch/riscv/lib/delay.c | 2 +- arch/riscv/mm/fault.c | 13 + arch/s390/Makefile | 1 + arch/s390/include/asm/pgtable.h | 33 +- arch/sparc/kernel/mdesc.c | 2 + arch/sparc/kernel/perf_event.c | 4 + arch/x86/entry/vdso/vclock_gettime.c | 15 +- arch/x86/include/asm/intel-family.h | 3 + arch/x86/kernel/cpu/bugs.c | 11 +- arch/x86/kernel/cpu/microcode/core.c | 15 +- arch/x86/kernel/cpu/resctrl/rdtgroup.c | 37 +- arch/x86/kernel/ftrace.c | 3 + arch/x86/kernel/ptrace.c | 5 +- arch/x86/kernel/tls.c | 9 +- arch/x86/kvm/lapic.c | 2 +- arch/x86/kvm/mmu.c | 16 +- arch/x86/kvm/vmx/nested.c | 4 +- arch/x86/kvm/x86.c | 6 +- arch/x86/net/bpf_jit_comp.c | 74 +-- arch/xtensa/kernel/setup.c | 3 +- block/bfq-iosched.c | 1 + crypto/cryptd.c | 1 + crypto/crypto_user_base.c | 3 + crypto/hmac.c | 4 +- crypto/lrw.c | 2 +- debian.master/upstream-stable | 4 +- drivers/android/binder.c | 20 +- drivers/char/tpm/tpm-chip.c | 6 +- drivers/char/tpm/tpm1-cmd.c | 7 +- drivers/char/tpm/tpm2-cmd.c | 7 +- drivers/clk/socfpga/clk-s10.c | 4 +- drivers/clk/tegra/clk-tegra210.c | 2 + drivers/crypto/talitos.c | 16 +- drivers/dma-buf/udmabuf.c | 1 + drivers/dma/dma-jz4780.c | 35 +- drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c | 3 +- drivers/dma/imx-sdma.c | 4 +- drivers/dma/mediatek/mtk-cqdma.c | 4 +- drivers/dma/qcom/bam_dma.c | 3 + drivers/dma/sprd-dma.c | 29 +- drivers/firmware/efi/efi.c | 13 +- drivers/fpga/dfl-afu-dma-region.c | 2 +- drivers/fpga/dfl.c | 16 +- drivers/fpga/stratix10-soc.c | 6 +- drivers/gpio/gpio-pca953x.c | 3 +- drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c | 19 - .../amd/powerplay/hwmgr/process_pptables_v1_0.c | 4 +- drivers/gpu/drm/amd/powerplay/inc/hwmgr.h | 1 + .../drm/amd/powerplay/smumgr/polaris10_smumgr.c | 4 + drivers/gpu/drm/arm/hdlcd_crtc.c | 14 +- drivers/gpu/drm/arm/malidp_drv.c | 13 +- drivers/gpu/drm/drm_bufs.c | 5 +- drivers/gpu/drm/drm_fb_helper.c | 6 +- drivers/gpu/drm/drm_ioc32.c | 5 +- drivers/gpu/drm/drm_panel_orientation_quirks.c | 32 + drivers/gpu/drm/etnaviv/etnaviv_gpu.c | 7 +- drivers/gpu/drm/imx/ipuv3-crtc.c | 6 +- drivers/gpu/drm/mediatek/mtk_drm_drv.c | 8 +- drivers/gpu/drm/mediatek/mtk_dsi.c | 12 +- drivers/gpu/drm/virtio/virtgpu_vq.c | 2 +- drivers/gpu/drm/vmwgfx/vmwgfx_drv.c | 3 + drivers/gpu/drm/vmwgfx/vmwgfx_msg.c | 146 ++++- drivers/gpu/drm/vmwgfx/vmwgfx_ttm_buffer.c | 10 +- drivers/gpu/ipu-v3/ipu-image-convert.c | 40 +- drivers/hid/hid-a4tech.c | 11 +- drivers/hid/hid-ids.h | 1 + drivers/hid/hid-quirks.c | 1 + drivers/hid/i2c-hid/i2c-hid-dmi-quirks.c | 8 + drivers/hwmon/hwmon.c | 2 +- drivers/hwmon/pmbus/pmbus_core.c | 34 +- drivers/i2c/busses/i2c-pca-platform.c | 3 +- drivers/iio/adc/stm32-adc-core.c | 21 +- drivers/iio/imu/st_lsm6dsx/st_lsm6dsx.h | 2 + drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 25 +- drivers/iio/temperature/mlx90632.c | 9 +- drivers/infiniband/core/addr.c | 16 +- drivers/infiniband/hw/hfi1/chip.c | 14 + drivers/infiniband/hw/hfi1/chip.h | 1 + drivers/infiniband/hw/hfi1/fault.c | 5 + drivers/infiniband/hw/hfi1/hfi.h | 31 + drivers/infiniband/hw/hfi1/pio.c | 21 +- drivers/infiniband/hw/hfi1/rc.c | 24 +- drivers/infiniband/hw/hfi1/sdma.c | 26 +- drivers/infiniband/hw/hfi1/tid_rdma.c | 4 +- drivers/infiniband/hw/hfi1/ud.c | 4 +- drivers/infiniband/hw/hfi1/user_exp_rcv.c | 3 + drivers/infiniband/hw/hfi1/user_sdma.c | 12 +- drivers/infiniband/hw/hfi1/user_sdma.h | 1 - drivers/infiniband/hw/hfi1/verbs.c | 6 +- drivers/infiniband/hw/hfi1/verbs_txreq.c | 2 +- drivers/infiniband/hw/hfi1/verbs_txreq.h | 3 +- drivers/infiniband/hw/ocrdma/ocrdma_ah.c | 5 +- drivers/infiniband/hw/ocrdma/ocrdma_hw.c | 5 +- drivers/infiniband/hw/qib/qib_verbs.c | 2 - drivers/infiniband/sw/rdmavt/mr.c | 2 + drivers/infiniband/sw/rdmavt/qp.c | 3 +- drivers/input/keyboard/imx_keypad.c | 18 +- drivers/input/misc/uinput.c | 22 +- drivers/input/mouse/synaptics.c | 2 + drivers/input/touchscreen/silead.c | 1 + drivers/iommu/intel-pasid.c | 2 +- drivers/irqchip/irq-mips-gic.c | 4 +- drivers/md/dm-log-writes.c | 23 +- drivers/md/md.c | 36 +- drivers/media/dvb-frontends/stv0297.c | 2 +- drivers/media/platform/s5p-mfc/s5p_mfc.c | 1 - drivers/misc/lkdtm/Makefile | 3 +- drivers/misc/lkdtm/usercopy.c | 10 +- drivers/misc/vmw_vmci/vmci_context.c | 80 +-- drivers/misc/vmw_vmci/vmci_handle_array.c | 38 +- drivers/misc/vmw_vmci/vmci_handle_array.h | 29 +- drivers/mmc/core/core.c | 5 +- drivers/mmc/core/mmc.c | 6 +- drivers/mmc/core/sdio.c | 13 +- drivers/mmc/core/sdio_io.c | 77 +++ drivers/mmc/core/sdio_irq.c | 4 + drivers/mmc/host/mtk-sd.c | 39 +- drivers/mmc/host/renesas_sdhi_core.c | 9 +- drivers/mmc/host/sdhci-pci-o2micro.c | 5 +- drivers/net/bonding/bond_main.c | 2 +- drivers/net/can/flexcan.c | 5 +- drivers/net/can/m_can/m_can.c | 21 + drivers/net/can/spi/Kconfig | 5 +- drivers/net/can/spi/mcp251x.c | 25 +- drivers/net/can/xilinx_can.c | 2 +- drivers/net/dsa/mv88e6xxx/chip.c | 2 +- drivers/net/dsa/mv88e6xxx/global1_vtu.c | 2 +- .../net/ethernet/aquantia/atlantic/aq_filters.c | 10 +- drivers/net/ethernet/aquantia/atlantic/aq_nic.c | 1 + drivers/net/ethernet/aquantia/atlantic/aq_nic.h | 1 + .../ethernet/aquantia/atlantic/hw_atl/hw_atl_b0.c | 19 +- .../net/ethernet/broadcom/bnx2x/bnx2x_ethtool.c | 3 +- drivers/net/ethernet/broadcom/bnx2x/bnx2x_link.h | 1 + drivers/net/ethernet/cavium/liquidio/lio_core.c | 2 +- drivers/net/ethernet/ibm/ibmvnic.c | 19 +- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 15 +- drivers/net/ethernet/mellanox/mlxsw/reg.h | 2 +- .../net/ethernet/stmicro/stmmac/stmmac_hwtstamp.c | 2 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 22 +- drivers/net/ipvlan/ipvlan_main.c | 2 +- drivers/net/phy/phylink.c | 13 +- drivers/net/team/team.c | 2 +- drivers/net/tun.c | 19 +- drivers/net/usb/qmi_wwan.c | 29 +- drivers/net/wireless/ath/carl9170/usb.c | 39 +- .../wireless/broadcom/brcm80211/brcmfmac/sdio.c | 17 +- drivers/net/wireless/intel/iwlwifi/iwl-drv.c | 1 - drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 23 +- drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 2 +- drivers/net/wireless/intel/iwlwifi/mvm/mvm.h | 2 +- drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 17 +- drivers/net/wireless/intel/iwlwifi/pcie/internal.h | 2 +- drivers/net/wireless/intersil/p54/p54usb.c | 43 +- drivers/net/wireless/intersil/p54/txrx.c | 5 +- drivers/net/wireless/marvell/mwifiex/fw.h | 12 +- drivers/net/wireless/marvell/mwifiex/scan.c | 27 +- drivers/net/wireless/marvell/mwifiex/sta_ioctl.c | 4 +- drivers/net/wireless/marvell/mwifiex/wmm.c | 2 +- drivers/nvme/host/core.c | 3 +- drivers/nvme/target/io-cmd-bdev.c | 1 + drivers/parport/share.c | 2 + drivers/platform/mellanox/mlxreg-hotplug.c | 1 + drivers/platform/x86/intel-vbtn.c | 16 +- drivers/platform/x86/mlx-platform.c | 2 +- drivers/s390/net/qeth_l2_main.c | 2 +- drivers/s390/net/qeth_l3_main.c | 32 +- drivers/scsi/hpsa.c | 7 +- drivers/scsi/hpsa_cmd.h | 1 + drivers/scsi/qedi/qedi_main.c | 3 + drivers/scsi/smartpqi/smartpqi_init.c | 6 +- drivers/scsi/ufs/ufshcd-pltfrm.c | 11 +- drivers/scsi/ufs/ufshcd.c | 3 +- drivers/scsi/vmw_pvscsi.c | 6 +- drivers/soc/bcm/brcmstb/biuctrl.c | 6 +- drivers/soundwire/intel.c | 4 +- drivers/soundwire/stream.c | 7 +- drivers/spi/spi-bitbang.c | 2 +- drivers/staging/comedi/drivers/amplc_pci230.c | 3 +- drivers/staging/comedi/drivers/dt282x.c | 3 +- drivers/staging/erofs/erofs_fs.h | 13 +- drivers/staging/erofs/internal.h | 2 + drivers/staging/erofs/super.c | 19 + drivers/staging/fsl-dpaa2/ethsw/ethsw.c | 1 + drivers/staging/iio/cdc/ad7150.c | 19 +- drivers/staging/mt7621-pci/pci-mt7621.c | 2 +- drivers/staging/rtl8712/rtl871x_ioctl_linux.c | 157 +++-- .../vc04_services/bcm2835-camera/bcm2835-camera.c | 43 +- .../vc04_services/bcm2835-camera/mmal-vchiq.c | 32 +- .../vc04_services/bcm2835-camera/mmal-vchiq.h | 3 + .../interface/vchiq_arm/vchiq_2835_arm.c | 2 +- .../vc04_services/interface/vchiq_arm/vchiq_arm.c | 21 +- .../vc04_services/interface/vchiq_arm/vchiq_core.c | 31 +- .../vc04_services/interface/vchiq_arm/vchiq_util.c | 6 +- drivers/staging/wilc1000/linux_wlan.c | 12 +- drivers/target/target_core_iblock.c | 2 +- drivers/tty/rocket.c | 2 +- drivers/tty/serial/8250/8250_port.c | 3 +- drivers/tty/serial/sc16is7xx.c | 2 + drivers/usb/chipidea/udc.c | 20 + drivers/usb/dwc2/core.c | 2 +- drivers/usb/gadget/function/f_fs.c | 3 +- drivers/usb/gadget/function/u_ether.c | 6 +- drivers/usb/gadget/udc/fusb300_udc.c | 5 + drivers/usb/gadget/udc/lpc32xx_udc.c | 3 +- drivers/usb/host/xhci-ring.c | 15 +- drivers/usb/host/xhci.c | 25 +- drivers/usb/host/xhci.h | 9 + drivers/usb/renesas_usbhs/fifo.c | 34 +- drivers/usb/serial/ftdi_sio.c | 1 + drivers/usb/serial/ftdi_sio_ids.h | 6 + drivers/usb/serial/option.c | 1 + drivers/usb/typec/tps6598x.c | 6 +- fs/aio.c | 28 +- fs/binfmt_flat.c | 23 +- fs/btrfs/dev-replace.c | 26 +- fs/btrfs/reada.c | 5 + fs/btrfs/volumes.c | 5 +- fs/btrfs/volumes.h | 5 + fs/cifs/connect.c | 2 + fs/cifs/smb2maperror.c | 2 +- fs/crypto/policy.c | 2 + fs/dax.c | 9 +- fs/eventpoll.c | 4 +- fs/f2fs/debug.c | 19 +- fs/f2fs/super.c | 5 + fs/inode.c | 2 +- fs/nfs/flexfilelayout/flexfilelayoutdev.c | 2 +- fs/nfs/nfs4proc.c | 20 +- fs/nfsd/nfs4state.c | 2 +- fs/overlayfs/file.c | 96 ++- fs/overlayfs/inode.c | 60 +- fs/overlayfs/namei.c | 8 + fs/overlayfs/overlayfs.h | 3 + fs/overlayfs/ovl_entry.h | 6 + fs/overlayfs/super.c | 155 ++++- fs/overlayfs/util.c | 12 + fs/proc/array.c | 2 +- fs/quota/dquot.c | 4 +- fs/select.c | 18 +- fs/udf/inode.c | 93 ++- fs/userfaultfd.c | 42 +- include/asm-generic/futex.h | 8 +- include/linux/bpf-cgroup.h | 8 + include/linux/mmc/host.h | 1 + include/linux/mmc/sdio_func.h | 6 + include/linux/signal.h | 2 +- include/linux/skmsg.h | 2 + include/linux/vmw_vmci_defs.h | 11 +- include/linux/xarray.h | 1 + include/net/bluetooth/hci_core.h | 3 + include/net/cfg80211.h | 3 +- include/net/inet_frag.h | 16 +- include/net/ip6_tunnel.h | 9 +- include/net/ipv6_frag.h | 12 +- include/uapi/linux/bpf.h | 6 +- include/uapi/linux/usb/audio.h | 37 ++ kernel/bpf/devmap.c | 9 +- kernel/bpf/lpm_trie.c | 9 +- kernel/bpf/syscall.c | 8 + kernel/bpf/verifier.c | 12 +- kernel/cgroup/cpuset.c | 15 +- kernel/cpu.c | 3 + kernel/livepatch/core.c | 6 + kernel/signal.c | 5 +- kernel/trace/bpf_trace.c | 100 ++- kernel/trace/ftrace.c | 12 +- kernel/trace/trace.c | 16 +- kernel/trace/trace.h | 18 + kernel/trace/trace_branch.c | 4 - kernel/trace/trace_kdb.c | 6 +- lib/idr.c | 14 +- lib/mpi/mpi-pow.c | 6 +- lib/xarray.c | 12 +- mm/hugetlb.c | 29 +- mm/memory-failure.c | 7 +- mm/mempolicy.c | 2 +- mm/mlock.c | 4 +- mm/page_io.c | 20 +- mm/vmscan.c | 27 +- net/bluetooth/hci_conn.c | 10 +- net/bluetooth/l2cap_core.c | 33 +- net/can/af_can.c | 25 +- net/core/filter.c | 2 + net/core/skbuff.c | 1 + net/core/sock.c | 3 - net/ipv4/inet_fragment.c | 293 +++++++++ net/ipv4/ip_fragment.c | 289 +-------- net/ipv4/raw.c | 2 +- net/ipv4/udp.c | 10 +- net/ipv6/netfilter/nf_conntrack_reasm.c | 270 +++----- net/ipv6/reassembly.c | 233 ++----- net/ipv6/udp.c | 8 +- net/mac80211/ieee80211_i.h | 12 +- net/mac80211/mesh.c | 6 +- net/mac80211/mlme.c | 12 +- net/mac80211/rx.c | 2 + net/mac80211/tdls.c | 23 + net/mac80211/util.c | 8 +- net/mac80211/wpa.c | 7 +- net/netfilter/nf_flow_table_ip.c | 3 +- net/netfilter/nft_flow_offload.c | 31 +- net/packet/af_packet.c | 23 +- net/packet/internal.h | 1 + net/sctp/endpointola.c | 8 +- net/smc/af_smc.c | 6 +- net/sunrpc/clnt.c | 1 + net/sunrpc/xprtrdma/svc_rdma_transport.c | 7 +- net/tipc/core.c | 12 +- net/tipc/netlink_compat.c | 18 +- net/tipc/udp_media.c | 8 +- net/wireless/core.c | 8 +- net/wireless/nl80211.c | 12 +- net/wireless/pmsr.c | 4 +- net/wireless/util.c | 4 +- net/xdp/xdp_umem.c | 11 +- samples/bpf/bpf_load.c | 2 +- samples/bpf/task_fd_query_user.c | 2 +- scripts/checkstack.pl | 2 +- scripts/decode_stacktrace.sh | 2 +- scripts/package/Makefile | 2 +- security/apparmor/policy_unpack.c | 42 +- sound/core/seq/oss/seq_oss_ioctl.c | 2 +- sound/core/seq/oss/seq_oss_rw.c | 2 +- sound/firewire/amdtp-am824.c | 2 +- sound/hda/ext/hdac_ext_bus.c | 1 - sound/pci/hda/hda_codec.c | 10 +- sound/pci/hda/patch_realtek.c | 10 +- sound/soc/codecs/ak4458.c | 18 +- sound/soc/codecs/cs4265.c | 2 +- sound/soc/codecs/max98090.c | 16 + sound/soc/codecs/rt274.c | 3 +- sound/soc/intel/atom/sst/sst_pvt.c | 4 +- sound/soc/soc-core.c | 2 + sound/soc/soc-pcm.c | 3 +- sound/soc/sunxi/sun4i-i2s.c | 6 +- sound/usb/line6/pcm.c | 5 + sound/usb/mixer.c | 16 +- sound/usb/mixer_quirks.c | 4 +- tools/bpf/bpftool/map.c | 2 + tools/perf/Documentation/intel-pt.txt | 10 +- tools/perf/util/auxtrace.c | 3 +- tools/perf/util/header.c | 1 + tools/perf/util/intel-pt.c | 3 +- tools/perf/util/pmu.c | 28 +- tools/testing/radix-tree/idr-test.c | 46 ++ tools/testing/selftests/bpf/test_lpm_map.c | 41 +- tools/testing/selftests/cgroup/test_core.c | 7 +- tools/testing/selftests/cgroup/test_memcontrol.c | 4 + .../selftests/net/forwarding/router_broadcast.sh | 6 +- tools/testing/selftests/vm/Makefile | 2 + tools/testing/selftests/vm/userfaultfd.c | 2 +- virt/kvm/arm/vgic/vgic-its.c | 1 + 396 files changed, 4471 insertions(+), 1973 deletions(-) create mode 100644 Documentation/admin-guide/hw-vuln/spectre.rst