From patchwork Wed Nov 27 21:55:58 2019 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Kamal Mostafa X-Patchwork-Id: 1201818 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Authentication-Results: ozlabs.org; spf=none (no SPF record) smtp.mailfrom=lists.ubuntu.com (client-ip=91.189.94.19; helo=huckleberry.canonical.com; envelope-from=kernel-team-bounces@lists.ubuntu.com; receiver=) Authentication-Results: ozlabs.org; dmarc=fail (p=none dis=none) header.from=canonical.com Received: from huckleberry.canonical.com (huckleberry.canonical.com [91.189.94.19]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 47NZN90PGlz9sSH; Thu, 28 Nov 2019 08:56:09 +1100 (AEDT) Received: from localhost ([127.0.0.1] helo=huckleberry.canonical.com) by huckleberry.canonical.com with esmtp (Exim 4.86_2) (envelope-from ) id 1ia5I5-0002iq-0t; Wed, 27 Nov 2019 21:56:05 +0000 Received: from youngberry.canonical.com ([91.189.89.112]) by huckleberry.canonical.com with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.86_2) (envelope-from ) id 1ia5I1-0002iO-Tv for kernel-team@lists.ubuntu.com; Wed, 27 Nov 2019 21:56:01 +0000 Received: from 1.general.kamal.us.vpn ([10.172.68.52] helo=fourier) by youngberry.canonical.com with esmtpsa (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.86_2) (envelope-from ) id 1ia5I1-00023T-Dl for kernel-team@lists.ubuntu.com; Wed, 27 Nov 2019 21:56:01 +0000 Received: from kamal by fourier with local (Exim 4.90_1) (envelope-from ) id 1ia5Hz-0005b9-6l for kernel-team@lists.ubuntu.com; Wed, 27 Nov 2019 13:55:59 -0800 From: Kamal Mostafa To: kernel-team@lists.ubuntu.com Subject: [SRU][Disco][PULL] Disco upstream stable patchset 2019-11-27+ Date: Wed, 27 Nov 2019 13:55:58 -0800 Message-Id: <20191127215558.21465-1-kamal@canonical.com> X-Mailer: git-send-email 2.17.1 MIME-Version: 1.0 X-BeenThere: kernel-team@lists.ubuntu.com X-Mailman-Version: 2.1.20 Precedence: list List-Id: Kernel team discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: kernel-team-bounces@lists.ubuntu.com Sender: "kernel-team" This pull req includes the following pending Disco stable patchsets: Disco update: upstream stable patchset 2019-11-22 Ported from the following upstream stable releases: v4.19.84, v5.3.11 https://bugs.launchpad.net/bugs/1853659 Disco update: upstream stable patchset 2019-11-26 Ported from the following upstream stable releases: v4.19.85, v5.3.12 https://bugs.launchpad.net/bugs/1854094 Disco update: upstream stable patchset 2019-11-27 Ported from the following upstream stable releases: v4.19.86, v5.3.13 https://bugs.launchpad.net/bugs/1854229 -Kamal ----- The following changes since commit e903d6a85368180af5f09bf5d0be0308b757694d: UBUNTU: upstream stable to v4.19.83, v5.3.10 (2019-11-21 21:09:59 -0500) are available in the Git repository at: git://git.launchpad.net/~kamalmostafa/ubuntu/+source/linux/+git/disco disco-stable for you to fetch changes up to 3aa37308ef9e9376634278134a6691d70e0a312d: UBUNTU: upstream stable to v4.19.86, v5.3.13 (2019-11-27 12:19:44 -0800) ---------------------------------------------------------------- Al Viro (9): ceph: add missing check in d_revalidate snapdir handling configfs: stash the data we need into configfs_buffer at open time configfs_register_group() shouldn't be (and isn't) called in rmdirable parts configfs: new object reprsenting tree fragments configfs: provide exclusion between IO and removals configfs: fix a deadlock in configfs_symlink() ceph: fix RCU case handling in ceph_d_revalidate() ecryptfs_lookup_interpose(): lower_dentry->d_inode is not stable ecryptfs_lookup_interpose(): lower_dentry->d_parent is not stable either Alan Stern (1): USB: Skip endpoints with 0 maxpacket length Aleksander Morgado (2): net: usb: qmi_wwan: add support for DW5821e with eSIM support net: usb: qmi_wwan: add support for Foxconn T77W968 LTE modules Alex Deucher (1): drm/radeon: fix si_enable_smc_cac() failed issue Alexander Shishkin (2): intel_th: pci: Add Comet Lake PCH support intel_th: pci: Add Jasper Lake PCH support Alexander Sverdlin (1): net: ethernet: octeon_mgmt: Account for second possible VLAN header Alexandru Ardelean (1): iio: imu: adis16480: make sure provided frequency is positive Andreas Klinger (1): iio: srf04: fix wrong limitation in distance measuring Andrew Duggan (2): Input: synaptics-rmi4 - disable the relative position IRQ in the F12 driver Input: synaptics-rmi4 - do not consume more data than we have (F11, F12) Andrey Grodzovsky (1): drm/amdgpu: If amdgpu_ib_schedule fails return back the error. Andy Shevchenko (1): pinctrl: intel: Avoid potential glitches if pin is in GPIO mode Anton Eidelman (1): nvme-multipath: fix possible io hang after ctrl reconnect Ard Biesheuvel (1): efi: libstub/arm: Account for firmware reserved memory at the base of RAM Arnd Bergmann (1): ntp/y2038: Remove incorrect time_t truncation Avri Altman (1): scsi: ufs-bsg: Wake the device before sending raw upiu commands Baolin Wang (1): dmaengine: sprd: Fix the possible memory leak issue Bard Liao (1): soundwire: bus: set initial value to port_status Bjorn Andersson (1): arm64: cpufeature: Enable Qualcomm Falkor errata 1009 for Kryo Catalin Marinas (1): arm64: Do not mask out PTE_RDONLY in pte_same() Chandana Kishori Chiluveru (1): usb: gadget: composite: Fix possible double free memory bug Chuhong Yuan (3): net: ethernet: arc: add the missed clk_disable_unprepare net: gemini: add missed free_netdev Input: synaptics-rmi4 - destroy F54 poller workqueue when removing Claudiu Manoil (2): net: mscc: ocelot: don't handle netdev events for other netdevs net: mscc: ocelot: fix NULL pointer on LAG slave removal Corentin Labbe (1): net: ethernet: dwmac-sun8i: Use the correct function in exit path Cristian Birsan (1): usb: gadget: udc: atmel: Fix interrupt storm in FIFO mode. Dan Carpenter (5): netfilter: ipset: Fix an error code in ip_set_sockfn_get() ALSA: usb-audio: remove some dead code RDMA/uverbs: Prevent potential underflow dmaengine: at_xdmac: remove a stray bottom half unlock net: cdc_ncm: Signedness bug in cdc_ncm_set_dgram_size() Daniel Borkmann (2): bpf: Fix use after free in subprog's jited symbol removal bpf: Fix use after free in bpf_get_prog_name Daniel Vetter (1): fbdev: Ditch fb_edid_add_monspecs Daniel Wagner (1): scsi: lpfc: Honor module parameter lpfc_use_adisc David Ahern (1): ipv4: Fix table id reference in fib_sync_down_addr David Hildenbrand (2): mm/memory_hotplug: don't access uninitialized memmaps in shrink_pgdat_span() mm/memory_hotplug: fix updating the node span Davide Caratti (1): ipvs: don't ignore errors in case refcounting ip_vs module fails Doug Berger (1): arm64: apply ARM64_ERRATUM_845719 workaround for Brahma-B53 core Eric Auger (1): iommu/vt-d: Fix QI_DEV_IOTLB_PFSID and QI_DEV_EIOTLB_PFSID macros Eric Dumazet (4): net: fix data-race in neigh_event_send() ipv6: fixes rt6_probe() and fib6_nh->last_probe init ipvs: move old_secure_tcp into struct netns_ipvs net: prevent load/store tearing on sk->sk_stamp Eugen Hristev (1): mmc: sdhci-of-at91: fix quirk2 overwrite Fabrice Gasnier (1): iio: adc: stm32-adc: fix stopping dma Felipe Balbi (1): usb: dwc3: gadget: fix race when disabling ep with cancelled xfers Filipe Manana (1): Btrfs: fix log context list corruption after rename exchange operation Florian Fainelli (2): arm64: Brahma-B53 is SSB and spectre v2 safe arm64: apply ARM64_ERRATUM_843419 workaround for Brahma-B53 core Gomez Iglesias, Antonio (1): Documentation: Add ITLB_MULTIHIT documentation Greg Kroah-Hartman (1): Revert "OPP: Protect dev_list with opp_table lock" Guillaume Nault (1): ipmr: Fix skb headroom in ipmr_get_route(). GwanYeong Kim (1): usbip: tools: Fix read_usb_vudc_device() error path handling Haiyang Zhang (1): hv_netvsc: Fix error handling in netvsc_attach() Hannes Reinecke (1): scsi: qla2xxx: fixup incorrect usage of host_byte Hans de Goede (2): pinctrl: cherryview: Fix irq_valid_mask calculation i2c: acpi: Force bus speed to 400KHz if a Silead touchscreen is present Henry Lin (1): ALSA: usb-audio: not submit urb for stopped endpoint Hillf Danton (1): net: openvswitch: free vport unless register_netdevice() succeeds Himanshu Madhani (1): scsi: qla2xxx: Initialized mailbox to prevent driver load failure Hsin-Yi Wang (1): i2c: mediatek: modify threshold passed to i2c_get_dma_safe_msg_buf() Ioana Ciornei (1): dpaa2-eth: free already allocated channels on probe defer Jakub Kicinski (3): net/tls: fix sk_msg trim on fallback to copy mode net/tls: add a TX lock selftests/tls: add test for concurrent recv and send James Erwin (1): IB/hfi1: Ensure full Gen3 speed in a Gen4 system Jan Beulich (1): x86/apic/32: Avoid bogus LDR warnings Jani Nikula (1): drm/i915: update rawclk also on resume Jason Gerecke (1): HID: wacom: generic: Treat serial number and related fields as unsigned Jay Vosburgh (1): bonding: fix state transition issue in link monitoring Jean-Baptiste Maneyrol (1): iio: imu: inv_mpu6050: fix no data on MPU6050 Jeff Layton (1): ceph: don't try to handle hashed dentries in non-O_CREAT atomic_open Jiada Wang (1): ASoC: rsnd: dma: fix SSI9 4/5/6/7 busif dma address Jiangfeng Xiao (1): net: hisilicon: Fix "Trying to free already-free IRQ" Jiri Olsa (1): perf tools: Fix time sorting Joakim Zhang (1): can: flexcan: disable completely the ECC mechanism Johan Hovold (4): can: usb_8dev: fix use-after-free on disconnect can: mcba_usb: fix use-after-free on disconnect can: peak_usb: fix slab info leak USB: ldusb: use unsigned size format specifiers Johannes Weiner (1): mm: memcontrol: fix network errors from failing __GFP_ATOMIC charges John Keeping (1): perf map: Use zalloc for map_groups Josh Poimboeuf (1): x86/speculation/taa: Fix printing of TAA_MSG_SMT on IBRS_ALL CPUs Jouni Hogander (2): slip: Fix memory leak in slip_open error path slcan: Fix memory leak in error path Juliet Kim (1): net/ibmvnic: unlock rtnl_lock in reset so linkwatch_event can run Jun Lei (1): drm/amd/display: do not synchronize "drr" displays Kairui Song (1): x86, efi: Never relocate kernel below lowest acceptable address Kamal Heib (1): RDMA/qedr: Fix reported firmware version Kamal Mostafa (3): UBUNTU: upstream stable to v4.19.84, v5.3.11 UBUNTU: upstream stable to v4.19.85, v5.3.12 UBUNTU: upstream stable to v4.19.86, v5.3.13 Kan Liang (1): perf/x86/uncore: Fix event group support Kevin Hao (1): dump_stack: avoid the livelock of the dump_lock Kim Phillips (2): perf/x86/amd/ibs: Fix reading of the IBS OpData register and thus precise RIP validity perf/x86/amd/ibs: Handle erratum #420 only on the affected CPU family (10h) Konstantin Khlebnikov (1): mm/filemap.c: don't initiate writeback if mapping has no dirty pages Kurt Van Dijck (1): can: c_can: c_can_poll(): only read status register after status IRQ Lijun Ou (1): RDMA/hns: Prevent memory leaks of eq->buf_list Lorenzo Bianconi (1): mt76: dma: fix buffer unmap with non-linear skbs Lucas Stach (2): Input: synaptics-rmi4 - fix video buffer size Input: synaptics-rmi4 - clear IRQ enables for F54 Luis Henriques (2): ceph: fix use-after-free in __ceph_remove_cap() ceph: don't allow copy_file_range when stripe_count != 1 Lukas Wunner (1): netfilter: nf_tables: Align nft_expr private data to 64-bit Luke Nelson (2): bpf, x32: Fix bug with ALU64 {LSH, RSH, ARSH} BPF_X shift by 0 bpf, x32: Fix bug with ALU64 {LSH, RSH, ARSH} BPF_K shift by 0 Magnus Karlsson (1): xsk: Fix registration of Rx-only sockets Manfred Rudigier (1): igb: Fix constant media auto sense switching when no cable is connected Manish Chopra (1): qede: fix NULL pointer deref in __qede_remove() Marc Kleine-Budde (1): can: rx-offload: can_rx_offload_queue_sorted(): fix error handling, avoid skb mem leak Martin Fuzzey (1): net: phy: smsc: LAN8740: add PHY_RST_AFTER_CLK_EN flag Mel Gorman (1): mm, meminit: recalculate pcpu batch and high limits after init completes Michael Schmitz (1): scsi: core: Handle drivers which set sg_tablesize to zero Michael Strauss (1): drm/amd/display: Passive DP->HDMI dongle detection fix Michal Hocko (1): mm, vmstat: hide /proc/pagetypeinfo from normal users Michal Suchanek (2): soundwire: depend on ACPI soundwire: depend on ACPI || OF Mike Marciniszyn (1): IB/hfi1: Use a common pad buffer for 9B and 16B packets Navid Emamdoost (3): can: gs_usb: gs_can_open(): prevent memory leak net/mlx5: prevent memory leak in mlx5_fpga_conn_create_cq usb: dwc3: pci: prevent memory leak in dwc3_pci_probe Nicholas Piggin (1): scsi: qla2xxx: stop timer in shutdown path Nicolas Boichat (1): HID: google: add magnemite/masterball USB ids Nicolin Chen (1): hwmon: (ina3221) Fix read timeout issue Nikhil Badola (1): usb: fsl: Check memory resource before releasing it Oliver Neukum (3): CDC-NCM: handle incomplete transfer of MTU ax88172a: fix information leak on short answers Input: ff-memless - kill timer in destroy() Ondrej Jirman (1): ARM: sunxi: Fix CPU powerdown on A83T Pablo Neira Ayuso (1): netfilter: nf_flow_table: set timeout before insertion into hashes Pan Bian (3): NFC: fdp: fix incorrect free object nfc: netlink: fix double device reference drop NFC: st21nfca: fix double free Paolo Bonzini (1): KVM: x86: introduce is_pae_paging Pavel Shilovsky (1): SMB3: Fix persistent handles reconnect Pavel Tatashin (1): arm64: uaccess: Ensure PAN is re-enabled after unhandled uaccess fault Pawan Gupta (1): x86/cpu: Add Tremont to the cpu vulnerability whitelist Peter Chen (1): usb: gadget: configfs: fix concurrent issue between composite APIs Potnuri Bharat Teja (2): iw_cxgb4: fix ECN check on the passive accept RDMA/iw_cxgb4: Avoid freeing skb twice in arp failure case Radhey Shyam Pandey (2): dmaengine: xilinx_dma: Fix control reg update in vdma_channel_set_config dmaengine: xilinx_dma: Fix 64-bit simple AXIDMA transfer Rafi Wiener (1): RDMA/mlx5: Clear old rate limit when closing QP Randolph Maaßen (1): iio: imu: mpu6050: Add support for the ICM 20602 IMU Roman Gushchin (2): mm: memcg: switch to css_tryget() in get_mem_cgroup_from_mm() mm: hugetlb: switch to css_tryget() in hugetlb_cgroup_charge_cgroup() Salil Mehta (1): net: hns: Fix the stray netpoll locks causing deadlock in NAPI path Sean Christopherson (1): KVM: MMU: Do not treat ZONE_DEVICE pages as being reserved Sean Tranchetti (1): net: qualcomm: rmnet: Fix potential UAF when unregistering Shuah Khan (2): tools: gpio: Use !building_out_of_srctree to determine srctree usbip: Fix vhci_urb_enqueue() URB null transfer buffer error path Shuning Zhang (1): ocfs2: protect extent tree in ocfs2_prepare_inode_for_write() Srinivas Pandruvada (1): cpufreq: intel_pstate: Fix invalid EPB setting Stefano Brivio (1): netfilter: ipset: Copy the right MAC address in hash:ip,mac IPv6 sets Stefano Garzarella (1): vsock/virtio: fix sock refcnt holding during the shutdown Stephane Grosjean (1): can: peak_usb: fix a potential out-of-sync while decoding packets Steve Moskovchenko (1): iio: imu: mpu6050: Fix FIFO layout for ICM20602 Suwan Kim (2): usbip: Implement SG support to vhci-hcd and stub driver usbip: Fix free of unallocated memory in vhci tx Taehee Yoo (3): bonding: fix unexpected IFF_BONDING bit unset macsec: fix refcnt leak in module exit routine virt_wifi: fix refcnt leak in module exit routine Takashi Iwai (13): ALSA: timer: Fix incorrectly assigned timer instance ALSA: hda/ca0132 - Fix possible workqueue stall ALSA: usb-audio: More validations of descriptor units ALSA: usb-audio: Simplify parse_audio_unit() ALSA: usb-audio: Unify the release of usb_mixer_elem_info objects ALSA: usb-audio: Remove superfluous bLength checks ALSA: usb-audio: Clean up check_input_term() ALSA: usb-audio: Fix possible NULL dereference at create_yamaha_midi_quirk() ALSA: usb-audio: Fix copy&paste error in the validator iommu/amd: Apply the same IVRS IOAPIC workaround to Acer Aspire A315-41 ALSA: usb-audio: Fix missing error check at mixer resolution test ALSA: usb-audio: Fix incorrect NULL check in create_yamaha_midi_quirk() ALSA: usb-audio: Fix incorrect size check for processing/extension units Takashi Sakamoto (1): ALSA: bebob: fix to detect configured source of sampling clock for Focusrite Saffire Pro i/o series Tariq Toukan (2): net/mlx5e: TX, Fix consumer index of error cqe dump net/mlx5e: Tx, Fix assumption of single WQEBB of NOP in cleanup flow Tejun Heo (2): blkcg: make blkcg_print_stat() print stats only for online blkgs cgroup,writeback: don't switch wbs immediately on dead wbs if the memcg is dead Thierry Reding (1): arm64: errata: Update stale comment Tony Lu (1): tcp: remove redundant new line from tcp_event_sk_skb Trond Myklebust (2): NFSv4: Don't allow a cached open with a revoked delegation SUNRPC: The RDMA back channel mustn't disappear while requests are outstanding Ursula Braun (1): net/smc: fix ethernet interface refcounting Valentin Schneider (2): sched/topology: Don't try to build empty sched domains sched/topology: Allow sched_asym_cpucapacity to be disabled Vidya Sagar (1): PCI: tegra: Enable Relaxed Ordering only for Tegra20 & Tegra30 Vinayak Menon (1): mm/page_io.c: do not free shared swap slots Vladimir Oltean (2): net: mscc: ocelot: fix vlan_filtering when enslaving to bridge before link is up net: mscc: ocelot: refuse to overwrite the port's native vlan Wang YanQing (2): bpf, x32: Fix bug for BPF_ALU64 | BPF_NEG bpf, x32: Fix bug for BPF_JMP | {BPF_JSGT, BPF_JSLE, BPF_JSLT, BPF_JSGE} Wen Yang (1): can: dev: add missing of_node_put() after calling of_get_child_by_name() Wenwen Wang (2): e1000: fix memory leaks bpf: btf: Fix a missing check bug Will Deacon (1): fjes: Handle workqueue allocation failure Yang Shi (2): mm: thp: handle page cache THP correctly in PageTransCompoundMap mm: mempolicy: fix the wrong return value and potential pages leak of mbind Yinbo Zhu (1): usb: dwc3: remove the call trace of USBx_GFLADJ Zhang Lixu (1): HID: intel-ish-hid: fix wrong error handling in ishtp_cl_alloc_tx_ring() Zhenfang Wang (1): dmaengine: sprd: Fix the link-list pointer register configuration issue Documentation/admin-guide/hw-vuln/index.rst | 1 + Documentation/admin-guide/hw-vuln/multihit.rst | 163 ++++++ arch/arm/mach-sunxi/mc_smp.c | 6 +- arch/arm64/include/asm/cputype.h | 2 + arch/arm64/include/asm/pgtable.h | 17 - arch/arm64/kernel/cpu_errata.c | 62 +- arch/arm64/lib/clear_user.S | 1 + arch/arm64/lib/copy_from_user.S | 1 + arch/arm64/lib/copy_in_user.S | 1 + arch/arm64/lib/copy_to_user.S | 1 + arch/x86/boot/compressed/eboot.c | 4 +- arch/x86/events/amd/ibs.c | 8 +- arch/x86/events/intel/uncore.c | 44 +- arch/x86/events/intel/uncore.h | 12 - arch/x86/kernel/apic/apic.c | 28 +- arch/x86/kernel/cpu/bugs.c | 4 - arch/x86/kernel/cpu/common.c | 2 + arch/x86/kvm/mmu.c | 8 +- arch/x86/kvm/vmx/vmx.c | 4 +- arch/x86/kvm/x86.c | 8 +- arch/x86/kvm/x86.h | 5 + arch/x86/net/bpf_jit_comp32.c | 524 +++++++---------- block/blk-cgroup.c | 13 +- debian.master/upstream-stable | 4 +- drivers/cpufreq/intel_pstate.c | 4 +- drivers/dma/at_xdmac.c | 2 +- drivers/dma/sprd-dma.c | 27 +- drivers/dma/xilinx/xilinx_dma.c | 10 +- drivers/firmware/efi/libstub/Makefile | 1 + drivers/firmware/efi/libstub/arm32-stub.c | 16 +- drivers/firmware/efi/libstub/efi-stub-helper.c | 24 +- drivers/gpu/drm/amd/amdgpu/amdgpu_job.c | 4 +- drivers/gpu/drm/amd/display/dc/core/dc_link_ddc.c | 24 +- drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 6 + drivers/gpu/drm/i915/i915_drv.c | 3 - drivers/gpu/drm/i915/intel_runtime_pm.c | 3 + drivers/gpu/drm/radeon/si_dpm.c | 1 + drivers/hid/hid-google-hammer.c | 4 + drivers/hid/hid-ids.h | 2 + drivers/hid/intel-ish-hid/ishtp/client-buffers.c | 2 +- drivers/hid/wacom.h | 15 + drivers/hid/wacom_wac.c | 10 +- drivers/hwmon/ina3221.c | 2 +- drivers/hwtracing/intel_th/pci.c | 10 + drivers/i2c/busses/i2c-mt65xx.c | 8 +- drivers/i2c/i2c-core-acpi.c | 28 +- drivers/iio/adc/stm32-adc.c | 4 +- drivers/iio/imu/adis16480.c | 5 +- drivers/iio/imu/inv_mpu6050/Kconfig | 8 +- drivers/iio/imu/inv_mpu6050/inv_mpu_core.c | 86 ++- drivers/iio/imu/inv_mpu6050/inv_mpu_i2c.c | 6 + drivers/iio/imu/inv_mpu6050/inv_mpu_iio.h | 30 +- drivers/iio/imu/inv_mpu6050/inv_mpu_ring.c | 18 +- drivers/iio/imu/inv_mpu6050/inv_mpu_spi.c | 12 +- drivers/iio/proximity/srf04.c | 29 +- drivers/infiniband/core/uverbs.h | 2 +- drivers/infiniband/hw/cxgb4/cm.c | 30 +- drivers/infiniband/hw/hfi1/pcie.c | 4 +- drivers/infiniband/hw/hfi1/sdma.c | 5 +- drivers/infiniband/hw/hfi1/verbs.c | 10 +- drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 6 +- drivers/infiniband/hw/mlx5/qp.c | 8 +- drivers/infiniband/hw/qedr/main.c | 2 +- drivers/input/ff-memless.c | 9 + drivers/input/rmi4/rmi_f11.c | 4 +- drivers/input/rmi4/rmi_f12.c | 32 +- drivers/input/rmi4/rmi_f54.c | 5 +- drivers/iommu/amd_iommu_quirks.c | 13 + drivers/mmc/host/sdhci-of-at91.c | 2 +- drivers/net/bonding/bond_main.c | 47 +- drivers/net/can/c_can/c_can.c | 25 +- drivers/net/can/c_can/c_can.h | 1 + drivers/net/can/dev.c | 1 + drivers/net/can/flexcan.c | 1 + drivers/net/can/rx-offload.c | 6 +- drivers/net/can/slcan.c | 1 + drivers/net/can/usb/gs_usb.c | 1 + drivers/net/can/usb/mcba_usb.c | 3 +- drivers/net/can/usb/peak_usb/pcan_usb.c | 17 +- drivers/net/can/usb/peak_usb/pcan_usb_core.c | 2 +- drivers/net/can/usb/usb_8dev.c | 3 +- drivers/net/ethernet/arc/emac_rockchip.c | 3 + drivers/net/ethernet/cavium/octeon/octeon_mgmt.c | 2 +- drivers/net/ethernet/cortina/gemini.c | 1 + drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c | 10 +- drivers/net/ethernet/hisilicon/hip04_eth.c | 1 - drivers/net/ethernet/hisilicon/hns/hnae.c | 1 - drivers/net/ethernet/hisilicon/hns/hnae.h | 3 - drivers/net/ethernet/hisilicon/hns/hns_enet.c | 22 +- drivers/net/ethernet/ibm/ibmvnic.c | 224 +++++--- drivers/net/ethernet/ibm/ibmvnic.h | 1 + drivers/net/ethernet/intel/e1000/e1000_ethtool.c | 7 +- drivers/net/ethernet/intel/igb/igb_main.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 6 +- drivers/net/ethernet/mellanox/mlx5/core/en_tx.c | 9 +- .../net/ethernet/mellanox/mlx5/core/fpga/conn.c | 4 +- drivers/net/ethernet/mscc/ocelot.c | 20 +- drivers/net/ethernet/qlogic/qede/qede_main.c | 12 +- drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c | 4 +- drivers/net/ethernet/stmicro/stmmac/dwmac-sun8i.c | 2 +- drivers/net/fjes/fjes_main.c | 15 +- drivers/net/hyperv/netvsc_drv.c | 9 +- drivers/net/macsec.c | 4 - drivers/net/phy/smsc.c | 1 + drivers/net/slip/slip.c | 1 + drivers/net/usb/ax88172a.c | 2 +- drivers/net/usb/cdc_ncm.c | 6 +- drivers/net/usb/qmi_wwan.c | 3 + drivers/net/wireless/mediatek/mt76/dma.c | 6 +- drivers/net/wireless/mediatek/mt76/mt76.h | 3 +- drivers/net/wireless/virt_wifi.c | 54 +- drivers/nfc/fdp/i2c.c | 2 +- drivers/nfc/st21nfca/core.c | 1 + drivers/nvme/host/multipath.c | 2 +- drivers/opp/core.c | 12 +- drivers/opp/cpu.c | 2 - drivers/opp/opp.h | 2 +- drivers/pci/controller/pci-tegra.c | 7 +- drivers/pinctrl/intel/pinctrl-cherryview.c | 2 +- drivers/pinctrl/intel/pinctrl-intel.c | 21 +- drivers/scsi/lpfc/lpfc_nportdisc.c | 4 +- drivers/scsi/qla2xxx/qla_bsg.c | 6 +- drivers/scsi/qla2xxx/qla_mbx.c | 3 +- drivers/scsi/qla2xxx/qla_os.c | 4 + drivers/scsi/scsi_lib.c | 3 +- drivers/scsi/ufs/ufs_bsg.c | 4 + drivers/soundwire/Kconfig | 1 + drivers/soundwire/bus.c | 2 +- drivers/usb/core/config.c | 5 + drivers/usb/dwc3/core.c | 3 +- drivers/usb/dwc3/dwc3-pci.c | 2 +- drivers/usb/dwc3/gadget.c | 6 + drivers/usb/gadget/composite.c | 4 + drivers/usb/gadget/configfs.c | 110 +++- drivers/usb/gadget/udc/atmel_usba_udc.c | 6 +- drivers/usb/gadget/udc/fsl_udc_core.c | 2 +- drivers/usb/misc/ldusb.c | 7 +- drivers/usb/usbip/stub.h | 7 +- drivers/usb/usbip/stub_main.c | 57 +- drivers/usb/usbip/stub_rx.c | 204 +++++-- drivers/usb/usbip/stub_tx.c | 99 +++- drivers/usb/usbip/usbip_common.c | 59 +- drivers/usb/usbip/vhci_hcd.c | 16 +- drivers/usb/usbip/vhci_rx.c | 3 + drivers/usb/usbip/vhci_tx.c | 69 ++- drivers/video/fbdev/core/fbmon.c | 96 ---- drivers/video/fbdev/core/modedb.c | 57 -- fs/btrfs/inode.c | 15 + fs/ceph/caps.c | 10 +- fs/ceph/dir.c | 15 +- fs/ceph/file.c | 15 +- fs/ceph/inode.c | 1 + fs/cifs/smb2pdu.h | 1 + fs/configfs/configfs_internal.h | 15 +- fs/configfs/dir.c | 137 +++-- fs/configfs/file.c | 280 ++++----- fs/configfs/symlink.c | 33 +- fs/ecryptfs/inode.c | 19 +- fs/fs-writeback.c | 9 +- fs/nfs/delegation.c | 10 + fs/nfs/delegation.h | 1 + fs/nfs/nfs4proc.c | 7 +- fs/ocfs2/file.c | 134 +++-- include/linux/efi.h | 18 +- include/linux/fb.h | 3 - include/linux/filter.h | 1 - include/linux/intel-iommu.h | 6 +- include/linux/kvm_host.h | 1 + include/linux/mm.h | 5 - include/linux/mm_types.h | 5 + include/linux/page-flags.h | 20 +- include/linux/skmsg.h | 9 +- include/net/bonding.h | 3 +- include/net/ip_vs.h | 1 + include/net/neighbour.h | 4 +- include/net/netfilter/nf_tables.h | 3 +- include/net/sock.h | 4 +- include/net/tls.h | 5 + include/rdma/ib_verbs.h | 2 +- include/trace/events/tcp.h | 2 +- kernel/bpf/btf.c | 3 + kernel/bpf/core.c | 2 +- kernel/bpf/syscall.c | 31 +- kernel/cgroup/cpuset.c | 3 +- kernel/sched/topology.c | 11 +- kernel/time/ntp.c | 2 +- lib/dump_stack.c | 7 +- mm/filemap.c | 3 +- mm/hugetlb_cgroup.c | 2 +- mm/memcontrol.c | 11 +- mm/memory_hotplug.c | 77 +-- mm/mempolicy.c | 14 +- mm/page_alloc.c | 10 +- mm/page_io.c | 6 +- mm/vmstat.c | 2 +- net/core/skmsg.c | 20 +- net/ipv4/fib_semantics.c | 2 +- net/ipv4/ipmr.c | 3 +- net/ipv6/route.c | 13 +- net/netfilter/ipset/ip_set_core.c | 8 +- net/netfilter/ipset/ip_set_hash_ipmac.c | 2 +- net/netfilter/ipvs/ip_vs_app.c | 12 +- net/netfilter/ipvs/ip_vs_ctl.c | 29 +- net/netfilter/ipvs/ip_vs_pe.c | 3 +- net/netfilter/ipvs/ip_vs_sched.c | 3 +- net/netfilter/ipvs/ip_vs_sync.c | 13 +- net/netfilter/nf_flow_table_core.c | 3 +- net/nfc/netlink.c | 2 - net/openvswitch/vport-internal_dev.c | 11 +- net/smc/smc_pnet.c | 2 - net/sunrpc/xprtrdma/backchannel.c | 2 + net/tls/tls_device.c | 6 + net/tls/tls_main.c | 2 + net/tls/tls_sw.c | 21 +- net/vmw_vsock/virtio_transport_common.c | 8 +- net/xdp/xdp_umem.c | 6 + sound/core/timer.c | 6 +- sound/firewire/bebob/bebob_focusrite.c | 3 + sound/pci/hda/patch_ca0132.c | 2 +- sound/soc/sh/rcar/dma.c | 4 +- sound/usb/Makefile | 3 +- sound/usb/clock.c | 14 +- sound/usb/endpoint.c | 3 + sound/usb/helper.h | 4 + sound/usb/mixer.c | 637 +++++++++------------ sound/usb/power.c | 2 + sound/usb/quirks.c | 3 + sound/usb/stream.c | 25 +- sound/usb/validate.c | 332 +++++++++++ tools/gpio/Makefile | 6 +- tools/perf/util/hist.c | 2 +- tools/perf/util/map.c | 2 +- tools/testing/selftests/net/tls.c | 108 ++++ tools/usb/usbip/libsrc/usbip_device_driver.c | 6 +- virt/kvm/kvm_main.c | 26 +- 235 files changed, 3395 insertions(+), 1838 deletions(-) create mode 100644 Documentation/admin-guide/hw-vuln/multihit.rst create mode 100644 sound/usb/validate.c