[PATCH 4.14 000/193] 4.14.308-rc1 review

From: Greg Kroah-Hartman
Date: Fri Mar 10 2023 - 08:46:36 EST


This is the start of the stable review cycle for the 4.14.308 release.
There are 193 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sun, 12 Mar 2023 13:36:38 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.308-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.14.308-rc1

Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
thermal: intel: powerclamp: Fix cur_state for multi package system

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
tcp: Fix listen() regression in 4.14.303.

Vasily Gorbik <gor@xxxxxxxxxxxxx>
s390/setup: init jump labels before command line parsing

Vasily Gorbik <gor@xxxxxxxxxxxxx>
s390/maccess: add no DAT mode to kernel_write

Nguyen Dinh Phi <phind.uet@xxxxxxxxx>
Bluetooth: hci_sock: purge socket queues in the destruct() callback

Jiapeng Chong <jiapeng.chong@xxxxxxxxxxxxxxxxx>
phy: rockchip-typec: Fix unsigned comparison with less than zero

Daniel Scally <dan.scally@xxxxxxxxxxxxxxxx>
usb: uvc: Enumerate valid values for color matching

Kees Cook <keescook@xxxxxxxxxxxx>
USB: ene_usb6250: Allocate enough memory for full object

Kees Cook <keescook@xxxxxxxxxxxx>
usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math

Harshit Mogalapalli <harshit.m.mogalapalli@xxxxxxxxxx>
iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word()

Harshit Mogalapalli <harshit.m.mogalapalli@xxxxxxxxxx>
iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word()

Yulong Zhang <yulong.zhang@xxxxxxxxxx>
tools/iio/iio_utils:fix memory leak

Sherry Sun <sherry.sun@xxxxxxx>
tty: serial: fsl_lpuart: disable the CTS when send break signal

Sven Schnelle <svens@xxxxxxxxxxxxx>
tty: fix out-of-bounds access in tty_driver_lookup_tty()

Ricardo Ribalda <ribalda@xxxxxxxxxxxx>
media: uvcvideo: Handle cameras with invalid descriptors

Darrell Kavanagh <darrell.kavanagh@xxxxxxxxx>
firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3

Jia-Ju Bai <baijiaju1990@xxxxxxxxx>
tracing: Add NULL checks for buffer in ring_buffer_free_read_page()

Dan Carpenter <error27@xxxxxxxxx>
thermal: intel: quark_dts: fix error pointer dereference

Arnd Bergmann <arnd@xxxxxxxx>
scsi: ipr: Work around fortify-string warning

Eric Dumazet <edumazet@xxxxxxxxxx>
tcp: tcp_check_req() can be called from process context

Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxx>
ARM: dts: spear320-hmi: correct STMPE GPIO compatible

Fedor Pchelkin <pchelkin@xxxxxxxxx>
nfc: fix memory leak of se_io context in nfc_genl_se_io

Juergen Gross <jgross@xxxxxxxx>
9p/xen: fix connection sequence

Juergen Gross <jgross@xxxxxxxx>
9p/xen: fix version parsing

Eric Dumazet <edumazet@xxxxxxxxxx>
net: fix __dev_kfree_skb_any() vs drop monitor

Hangyu Hua <hbh25y@xxxxxxxxx>
netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()

Li Hua <hucool.lihua@xxxxxxxxxx>
watchdog: pcwd_usb: Fix attempting to access uninitialized memory

Chen Jun <chenjun102@xxxxxxxxxx>
watchdog: Fix kmemleak in watchdog_cdev_register

ruanjinjie <ruanjinjie@xxxxxxxxxx>
watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path

Ammar Faizi <ammarfaizi2@xxxxxxxxxxx>
x86: um: vdso: Add '%rcx' and '%r11' to the syscall clobber list

Zhihao Cheng <chengzhihao1@xxxxxxxxxx>
ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed

Zhihao Cheng <chengzhihao1@xxxxxxxxxx>
ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()

Zhihao Cheng <chengzhihao1@xxxxxxxxxx>
ubifs: ubifs_writepage: Mark page dirty after writing inode failed

Zhihao Cheng <chengzhihao1@xxxxxxxxxx>
ubifs: dirty_cow_znode: Fix memleak in error handling path

Zhihao Cheng <chengzhihao1@xxxxxxxxxx>
ubifs: Re-statistic cleaned znode count if commit failed

Yang Yingliang <yangyingliang@xxxxxxxxxx>
ubi: Fix possible null-ptr-deref in ubi_free_volume()

Li Zetao <lizetao1@xxxxxxxxxx>
ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume()

Li Zetao <lizetao1@xxxxxxxxxx>
ubi: Fix use-after-free when volume resizing failed

Zhihao Cheng <chengzhihao1@xxxxxxxxxx>
ubifs: Reserve one leb for each journal head while doing budget

Zhihao Cheng <chengzhihao1@xxxxxxxxxx>
ubifs: Fix wrong dirty space budget for dirty inode

Zhihao Cheng <chengzhihao1@xxxxxxxxxx>
ubifs: Rectify space budget for ubifs_xrename()

George Kennedy <george.kennedy@xxxxxxxxxx>
ubi: ensure that VID header offset + VID header size <= alloc, size

Fabrice Gasnier <fabrice.gasnier@xxxxxxxxxxx>
pwm: stm32-lp: fix the check on arr and cmp registers update

Liu Shixin via Jfs-discussion <jfs-discussion@xxxxxxxxxxxxxxxxxxxxx>
fs/jfs: fix shift exponent db_agl2size negative

Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
net/sched: Retire tcindex classifier

Dmitry Goncharov <dgoncharov@xxxxxxxxxxxx>
kbuild: Port silent mode detection to future gnu make.

Mark Hawrylak <mark.hawrylak@xxxxxxxxx>
drm/radeon: Fix eDP for single-display iMac11,2

Damien Le Moal <damien.lemoal@xxxxxxxxxxxxxxxxxx>
PCI: Avoid FLR for AMD FCH AHCI adapters

Tomas Henzl <thenzl@xxxxxxxxxx>
scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()

Tomas Henzl <thenzl@xxxxxxxxxx>
scsi: ses: Fix possible desc_ptr out-of-bounds accesses

Tomas Henzl <thenzl@xxxxxxxxxx>
scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses

Tomas Henzl <thenzl@xxxxxxxxxx>
scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()

James Bottomley <jejb@xxxxxxxxxxxxx>
scsi: ses: Don't attach if enclosure has no components

Quinn Tran <qutran@xxxxxxxxxxx>
scsi: qla2xxx: Fix erroneous link down

Quinn Tran <qutran@xxxxxxxxxxx>
scsi: qla2xxx: Fix link failure in NPIV environment

Steven Rostedt <rostedt@xxxxxxxxxxx>
ktest.pl: Fix missing "end_monitor" when machine check fails

Elvira Khabirova <lineprinter0@xxxxxxxxx>
mips: fix syscall_get_nr

Al Viro <viro@xxxxxxxxxxxxxxxxxx>
alpha: fix FEN fault handling

Ilya Dryomov <idryomov@xxxxxxxxx>
rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails

Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxx>
ARM: dts: exynos: correct TMU phandle in Odroid XU

Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxx>
ARM: dts: exynos: correct TMU phandle in Exynos4

Mikulas Patocka <mpatocka@xxxxxxxxxx>
dm flakey: don't corrupt the zero page

Mikulas Patocka <mpatocka@xxxxxxxxxx>
dm flakey: fix logic when corrupting a bio

Alexander Wetzel <alexander@xxxxxxxxxxxxxx>
wifi: cfg80211: Fix use after free for wext

Bitterblue Smith <rtl8821cerfe2@xxxxxxxxx>
wifi: rtl8xxxu: Use a longer retry limit of 48

Jun Nie <jun.nie@xxxxxxxxxx>
ext4: refuse to create ea block when umounted

Jun Nie <jun.nie@xxxxxxxxxx>
ext4: optimize ea_inode block expansion

Dmitry Fomin <fomindmitriyfoma@xxxxxxx>
ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls()

Johan Hovold <johan+linaro@xxxxxxxxxx>
irqdomain: Drop bogus fwspec-mapping error handling

Johan Hovold <johan+linaro@xxxxxxxxxx>
irqdomain: Fix disassociation race

Johan Hovold <johan+linaro@xxxxxxxxxx>
irqdomain: Fix association race

Roberto Sassu <roberto.sassu@xxxxxxxxxx>
ima: Align ima_file_mmap() parameters with mmap_file LSM hook

KP Singh <kpsingh@xxxxxxxxxx>
Documentation/hw-vuln: Document the interaction between IBRS and STIBP

KP Singh <kpsingh@xxxxxxxxxx>
x86/speculation: Allow enabling STIBP with legacy IBRS

Borislav Petkov (AMD) <bp@xxxxxxxxx>
x86/microcode/AMD: Fix mixed steppings support

Borislav Petkov (AMD) <bp@xxxxxxxxx>
x86/microcode/AMD: Add a @cpu parameter to the reloading functions

Borislav Petkov (AMD) <bp@xxxxxxxxx>
x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter

Yang Jihong <yangjihong1@xxxxxxxxxx>
x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range

Yang Jihong <yangjihong1@xxxxxxxxxx>
x86/kprobes: Fix __recover_optprobed_insn check optimizing logic

Sean Christopherson <seanjc@xxxxxxxxxx>
x86/reboot: Disable SVM, not just VMX, when stopping CPUs

Sean Christopherson <seanjc@xxxxxxxxxx>
x86/reboot: Disable virtualization in an emergency if SVM is supported

Sean Christopherson <seanjc@xxxxxxxxxx>
x86/crash: Disable virt in core NMI crash handler to avoid double shootdown

Sean Christopherson <seanjc@xxxxxxxxxx>
x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows)

Jan Kara <jack@xxxxxxx>
udf: Fix file corruption when appending just after end of preallocated extent

Jan Kara <jack@xxxxxxx>
udf: Do not update file length for failed writes to inline files

Jan Kara <jack@xxxxxxx>
udf: Do not bother merging very long extents

Jan Kara <jack@xxxxxxx>
udf: Truncate added extents on failed expansion

Heming Zhao via Ocfs2-devel <ocfs2-devel@xxxxxxxxxxxxxx>
ocfs2: fix non-auto defrag path not working issue

Heming Zhao via Ocfs2-devel <ocfs2-devel@xxxxxxxxxxxxxx>
ocfs2: fix defrag path triggering jbd2 ASSERT

Eric Biggers <ebiggers@xxxxxxxxxx>
f2fs: fix information leak in f2fs_move_inline_dirents()

Dongliang Mu <mudongliangabcd@xxxxxxxxx>
fs: hfsplus: fix UAF issue in hfsplus_put_super

Liu Shixin <liushixin2@xxxxxxxxxx>
hfs: fix missing hfs_bnode_get() in __hfs_bnode_create

Vasily Gorbik <gor@xxxxxxxxxxxxx>
s390/kprobes: fix current_kprobe never cleared after kprobes reenter

Vasily Gorbik <gor@xxxxxxxxxxxxx>
s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler

Johan Hovold <johan+linaro@xxxxxxxxxx>
rtc: pm8xxx: fix set-alarm race

Jun ASAKA <JunASAKA@xxxxxxxxxxxxx>
wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu

William Zhang <william.zhang@xxxxxxxxxxxx>
spi: bcm63xx-hsspi: Fix multi-bit mode setting

Mike Snitzer <snitzer@xxxxxxxxxx>
dm cache: add cond_resched() to various workqueue loops

Mike Snitzer <snitzer@xxxxxxxxxx>
dm thin: add cond_resched() to various workqueue loops

Claudiu Beznea <claudiu.beznea@xxxxxxxxxxxxx>
pinctrl: at91: use devm_kasprintf() to avoid potential leaks

Kees Cook <keescook@xxxxxxxxxxxx>
regulator: s5m8767: Bounds check id indexing into arrays

Kees Cook <keescook@xxxxxxxxxxxx>
regulator: max77802: Bounds check regulator id against opmode

Kees Cook <keescook@xxxxxxxxxxxx>
ASoC: kirkwood: Iterate over array indexes instead of using pointer math

Jakob Koschel <jkl820.git@xxxxxxxxx>
docs/scripts/gdb: add necessary make scripts_gdb step

Jiasheng Jiang <jiasheng@xxxxxxxxxxx>
drm/msm/dsi: Add missing check for alloc_ordered_workqueue

Liwei Song <liwei.song@xxxxxxxxxxxxx>
drm/radeon: free iio for atombios when driver shutdown

Hans de Goede <hdegoede@xxxxxxxxxx>
ACPI: video: Fix Lenovo Ideapad Z570 DMI match

Michael Schmitz <schmitzmic@xxxxxxxxx>
m68k: Check syscall_trace_enter() return code

Florian Fainelli <f.fainelli@xxxxxxxxx>
net: bcmgenet: Add a check for oversized packets

Mark Rutland <mark.rutland@xxxxxxx>
ACPI: Don't build ACPICA with '-Os'

Pietro Borrello <borrello@xxxxxxxxxxxxxxxx>
inet: fix fast path in __inet_hash_connect()

Breno Leitao <leitao@xxxxxxxxxx>
x86/bugs: Reset speculation control settings on init

Jann Horn <jannh@xxxxxxxxxx>
timers: Prevent union confusion from unexpected restart_syscall()

Yang Li <yang.lee@xxxxxxxxxxxxxxxxx>
thermal: intel: Fix unsigned comparison with less than zero

Paul E. McKenney <paulmck@xxxxxxxxxx>
rcu: Suppress smp_processor_id() complaint in synchronize_rcu_expedited_wait()

Jisoo Jang <jisoo.jang@xxxxxxxxxxxx>
wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds()

Markuss Broks <markuss.broks@xxxxxxxxx>
ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy

Jan Kara <jack@xxxxxxx>
udf: Define EFSCORRUPTED error code

Bjorn Andersson <quic_bjorande@xxxxxxxxxxx>
rpmsg: glink: Avoid infinite loop on intent for missing channel

Duoming Zhou <duoming@xxxxxxxxxx>
media: usb: siano: Fix use after free bugs caused by do_submit_urb

Duoming Zhou <duoming@xxxxxxxxxx>
media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()

Jiasheng Jiang <jiasheng@xxxxxxxxxxx>
media: platform: ti: Add missing check for devm_regulator_get

Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
MIPS: vpe-mt: drop physical_memsize

Nathan Lynch <nathanl@xxxxxxxxxxxxx>
powerpc/pseries/lparcfg: add missing RTAS retry status handling

Frederic Barrat <fbarrat@xxxxxxxxxxxxx>
powerpc/powernv/ioda: Skip unallocated resources when mapping to PE

Luca Ellero <l.ellero@xxxxxxx>
Input: ads7846 - don't check penirq immediately for 7845

Luca Ellero <l.ellero@xxxxxxx>
Input: ads7846 - don't report pressure for ads7845

Samuel Holland <samuel@xxxxxxxxxxxx>
mtd: rawnand: sunxi: Fix the size of the last OOB region

Qiheng Lin <linqiheng@xxxxxxxxxx>
mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read()

Mike Snitzer <snitzer@xxxxxxxxxx>
dm: remove flush_scheduled_work() during local_exit()

Jiasheng Jiang <jiasheng@xxxxxxxxxxx>
scsi: aic94xx: Add missing check for dma_map_single()

Jonathan Cormier <jcormier@xxxxxxxxxxxxxxxx>
hwmon: (ltc2945) Handle error case in ltc2945_value_store

Haibo Chen <haibo.chen@xxxxxxx>
gpio: vf610: connect GPIO label to dev name

Kuninori Morimoto <kuninori.morimoto.gx@xxxxxxxxxxx>
ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress()

Rob Clark <robdclark@xxxxxxxxxxxx>
drm/mediatek: Drop unbalanced obj unref

Daniel Mentz <danielmentz@xxxxxxxxxx>
drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness

Alexey V. Vissarionov <gremlin@xxxxxxxxxxxx>
ALSA: hda/ca0132: minor fix for allocation size

Miaoqian Lin <linmq006@xxxxxxxxx>
pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups

Jiasheng Jiang <jiasheng@xxxxxxxxxxx>
drm/msm/hdmi: Add missing check for alloc_ordered_workqueue

Liang He <windhl@xxxxxxx>
gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id()

Yuan Can <yuancan@xxxxxxxxxx>
drm/bridge: megachips: Fix error handling in i2c_register_driver()

Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC

Florian Fainelli <f.fainelli@xxxxxxxxx>
irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts

Frank Jungclaus <frank.jungclaus@xxxxxx>
can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a bus error

Dan Carpenter <error27@xxxxxxxxx>
wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize()

Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
m68k: /proc/hardware should depend on PROC_FS

Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
crypto: rsa-pkcs1pad - Use akcipher_request_complete

Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
Bluetooth: L2CAP: Fix potential user-after-free

Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
cpufreq: davinci: Fix clk use after free

Miaoqian Lin <linmq006@xxxxxxxxx>
irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe

Miaoqian Lin <linmq006@xxxxxxxxx>
irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains

Jack Morgenstein <jackm@xxxxxxxxxx>
net/mlx5: Enhance debug print in page allocation failure

Ilya Leoshkevich <iii@xxxxxxxxxxxxx>
s390/bpf: Add expoline to tail calls

Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
crypto: seqiv - Handle EBUSY correctly

Armin Wolf <W_Armin@xxxxxx>
ACPI: battery: Fix missing NUL-termination with large strings

Minsuk Kang <linuxlovemin@xxxxxxxxxxxx>
wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback()

Fedor Pchelkin <pchelkin@xxxxxxxxx>
wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function

Alexey Kodanev <aleksei.kodanev@xxxxxxxxxxx>
wifi: orinoco: check return value of hermes_write_wordrec()

Daniil Tatianin <d-tatianin@xxxxxxxxxxxxxx>
ACPICA: nsrepair: handle cases without a return value correctly

Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
lib/mpi: Fix buffer overrun when SG is too long

Zhen Lei <thunder.leizhen@xxxxxxxxxx>
genirq: Fix the return type of kstat_cpu_irqs_sum()

Yang Yingliang <yangyingliang@xxxxxxxxxx>
wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave()

Yang Yingliang <yangyingliang@xxxxxxxxxx>
wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave()

Yang Yingliang <yangyingliang@xxxxxxxxxx>
wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave()

Zhengchao Shao <shaozhengchao@xxxxxxxxxx>
wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid()

Zhang Changzhong <zhangchangzhong@xxxxxxxxxx>
wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()

Zhengchao Shao <shaozhengchao@xxxxxxxxxx>
wifi: ipw2200: fix memory leak in ipw_wdev_init()

Yang Yingliang <yangyingliang@xxxxxxxxxx>
wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave()

Zhengchao Shao <shaozhengchao@xxxxxxxxxx>
wifi: libertas: fix memory leak in lbs_init_adapter()

Martin K. Petersen <martin.petersen@xxxxxxxxxx>
block: bio-integrity: Copy flags when bio_integrity_payload is cloned

Neil Armstrong <neil.armstrong@xxxxxxxxxx>
arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name

Neil Armstrong <neil.armstrong@xxxxxxxxxx>
arm64: dts: amlogic: meson-gx: add missing unit address to rng node name

Neil Armstrong <neil.armstrong@xxxxxxxxxx>
arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name

Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxx>
ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato

Yang Yingliang <yangyingliang@xxxxxxxxxx>
ARM: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init()

Martin Blumenstingl <martin.blumenstingl@xxxxxxxxxxxxxx>
arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address

Martin Blumenstingl <martin.blumenstingl@xxxxxxxxxxxxxx>
arm64: dts: meson-gx: Fix Ethernet MAC address unit name

Qiheng Lin <linqiheng@xxxxxxxxxx>
ARM: zynq: Fix refcount leak in zynq_early_slcr_init

Chen Hui <judy.chenhui@xxxxxxxxxx>
ARM: OMAP2+: Fix memory leak in realtime_counter_init()

Pietro Borrello <borrello@xxxxxxxxxxxxxxxx>
HID: asus: use spinlock to safely schedule workers

Pietro Borrello <borrello@xxxxxxxxxxxxxxxx>
HID: asus: use spinlock to protect concurrent accesses

Luke D. Jones <luke@xxxxxxxxxx>
HID: asus: Remove check for same LED brightness on set

Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
USB: core: Don't hold device lock while reading the "descriptors" sysfs file

Florian Zumbiehl <florz@xxxxxxxx>
USB: serial: option: add support for VW/Skoda "Carstick LTE"

Jiasheng Jiang <jiasheng@xxxxxxxxxxx>
dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
bpf: Fix truncation handling for mod32 dst reg wrt zero

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
bpf: Fix 32 bit src register truncation on div/mod

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
bpf: fix subprog verifier bypass by div/mod by 0 exception

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
bpf: Do not use ax register in interpreter on div/mod

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues().

Dean Luick <dean.luick@xxxxxxxxxxxxxxxxxxxx>
IB/hfi1: Assign npages earlier

David Sterba <dsterba@xxxxxxxx>
btrfs: send: limit number of clones and allocated memory size

Johan Jonker <jbx6244@xxxxxxxxx>
ARM: dts: rockchip: add power-domains property to dp node on rk3288


-------------

Diffstat:

Documentation/admin-guide/hw-vuln/spectre.rst | 21 +-
Documentation/dev-tools/gdb-kernel-debugging.rst | 4 +
Makefile | 17 +-
arch/alpha/kernel/traps.c | 30 +-
arch/arm/boot/dts/exynos3250-rinato.dts | 2 +-
arch/arm/boot/dts/exynos4-cpu-thermal.dtsi | 2 +-
arch/arm/boot/dts/exynos5410-odroidxu.dts | 1 -
arch/arm/boot/dts/exynos5420.dtsi | 2 +-
arch/arm/boot/dts/rk3288.dtsi | 1 +
arch/arm/boot/dts/spear320-hmi.dts | 2 +-
arch/arm/mach-omap1/timer.c | 2 +-
arch/arm/mach-omap2/timer.c | 1 +
arch/arm/mach-zynq/slcr.c | 1 +
arch/arm64/boot/dts/amlogic/meson-gx.dtsi | 6 +-
arch/arm64/boot/dts/amlogic/meson-gxl.dtsi | 2 +-
arch/m68k/68000/entry.S | 2 +
arch/m68k/Kconfig.devices | 1 +
arch/m68k/coldfire/entry.S | 2 +
arch/m68k/kernel/entry.S | 3 +
arch/mips/include/asm/syscall.h | 2 +-
arch/mips/include/asm/vpe.h | 1 -
arch/mips/kernel/vpe-mt.c | 7 +-
arch/mips/lantiq/prom.c | 6 -
arch/powerpc/platforms/powernv/pci-ioda.c | 3 +-
arch/powerpc/platforms/pseries/lparcfg.c | 20 +-
arch/s390/kernel/kprobes.c | 4 +-
arch/s390/kernel/setup.c | 1 +
arch/s390/mm/maccess.c | 16 +-
arch/s390/net/bpf_jit_comp.c | 12 +-
arch/x86/include/asm/microcode.h | 4 +-
arch/x86/include/asm/microcode_amd.h | 4 +-
arch/x86/include/asm/msr-index.h | 4 +
arch/x86/include/asm/reboot.h | 2 +
arch/x86/include/asm/virtext.h | 16 +-
arch/x86/kernel/cpu/bugs.c | 35 +-
arch/x86/kernel/cpu/microcode/amd.c | 53 +-
arch/x86/kernel/cpu/microcode/core.c | 6 +-
arch/x86/kernel/crash.c | 17 +-
arch/x86/kernel/kprobes/opt.c | 6 +-
arch/x86/kernel/reboot.c | 88 ++-
arch/x86/kernel/smp.c | 6 +-
arch/x86/kernel/sysfb_efi.c | 8 +
arch/x86/um/vdso/um_vdso.c | 12 +-
block/bio-integrity.c | 1 +
crypto/rsa-pkcs1pad.c | 34 +-
crypto/seqiv.c | 2 +-
drivers/acpi/acpica/Makefile | 2 +-
drivers/acpi/acpica/nsrepair.c | 12 +-
drivers/acpi/battery.c | 2 +-
drivers/acpi/video_detect.c | 2 +-
drivers/block/rbd.c | 20 +-
drivers/cpufreq/davinci-cpufreq.c | 4 +-
drivers/dma/sh/rcar-dmac.c | 5 +-
drivers/gpio/gpio-vf610.c | 2 +-
.../drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c | 6 +-
drivers/gpu/drm/drm_mipi_dsi.c | 52 ++
drivers/gpu/drm/mediatek/mtk_drm_gem.c | 2 -
drivers/gpu/drm/msm/dsi/dsi_host.c | 3 +
drivers/gpu/drm/msm/hdmi/hdmi.c | 4 +
drivers/gpu/drm/mxsfb/Kconfig | 1 +
drivers/gpu/drm/radeon/atombios_encoders.c | 5 +-
drivers/gpu/drm/radeon/radeon_device.c | 1 +
drivers/gpu/ipu-v3/ipu-common.c | 1 +
drivers/hid/hid-asus.c | 38 +-
drivers/hwmon/ltc2945.c | 2 +
drivers/iio/accel/mma9551_core.c | 10 +-
drivers/infiniband/hw/hfi1/user_exp_rcv.c | 9 +-
drivers/input/touchscreen/ads7846.c | 13 +-
drivers/irqchip/irq-alpine-msi.c | 1 +
drivers/irqchip/irq-bcm7120-l2.c | 3 +-
drivers/irqchip/irq-mvebu-gicp.c | 1 +
drivers/md/dm-cache-target.c | 4 +
drivers/md/dm-flakey.c | 30 +-
drivers/md/dm-thin.c | 2 +
drivers/md/dm.c | 1 -
drivers/media/platform/omap3isp/isp.c | 9 +
drivers/media/rc/ene_ir.c | 3 +-
drivers/media/usb/siano/smsusb.c | 1 +
drivers/media/usb/uvc/uvc_entity.c | 2 +-
drivers/mfd/pcf50633-adc.c | 7 +-
drivers/mtd/nand/sunxi_nand.c | 2 +-
drivers/mtd/ubi/build.c | 7 +
drivers/mtd/ubi/vmt.c | 18 +-
drivers/mtd/ubi/wl.c | 25 +-
drivers/net/can/usb/esd_usb2.c | 4 +-
drivers/net/ethernet/broadcom/genet/bcmgenet.c | 8 +
.../net/ethernet/mellanox/mlx5/core/pagealloc.c | 3 +-
drivers/net/wireless/ath/ath9k/htc_hst.c | 4 +-
drivers/net/wireless/ath/ath9k/wmi.c | 1 +
.../wireless/broadcom/brcm80211/brcmfmac/common.c | 1 +
.../wireless/broadcom/brcm80211/brcmfmac/core.c | 1 +
.../wireless/broadcom/brcm80211/brcmfmac/msgbuf.c | 5 +-
drivers/net/wireless/intel/ipw2x00/ipw2200.c | 9 +-
drivers/net/wireless/intersil/orinoco/hw.c | 2 +
drivers/net/wireless/marvell/libertas/cmdresp.c | 2 +-
drivers/net/wireless/marvell/libertas/main.c | 3 +-
drivers/net/wireless/marvell/mwifiex/11n.c | 6 +-
.../net/wireless/realtek/rtl8xxxu/rtl8xxxu_8192e.c | 5 +
.../net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 11 +-
drivers/net/wireless/wl3501_cs.c | 2 +-
drivers/nfc/st-nci/se.c | 6 +
drivers/nfc/st21nfca/se.c | 6 +
drivers/pci/quirks.c | 1 +
drivers/phy/rockchip/phy-rockchip-typec.c | 3 +-
drivers/pinctrl/pinctrl-at91-pio4.c | 4 +-
drivers/pinctrl/pinctrl-at91.c | 2 +-
drivers/pinctrl/pinctrl-rockchip.c | 1 +
drivers/pwm/pwm-stm32-lp.c | 2 +-
drivers/regulator/max77802-regulator.c | 34 +-
drivers/regulator/s5m8767.c | 6 +-
drivers/rpmsg/qcom_glink_native.c | 1 +
drivers/rtc/rtc-pm8xxx.c | 24 +-
drivers/scsi/aic94xx/aic94xx_task.c | 3 +
drivers/scsi/ipr.c | 41 +-
drivers/scsi/qla2xxx/qla_os.c | 9 +-
drivers/scsi/ses.c | 64 +-
drivers/spi/spi-bcm63xx-hsspi.c | 12 +-
drivers/thermal/intel_powerclamp.c | 20 +-
drivers/thermal/intel_quark_dts_thermal.c | 12 +-
drivers/thermal/intel_soc_dts_iosf.c | 2 +-
drivers/tty/serial/fsl_lpuart.c | 24 +-
drivers/tty/tty_io.c | 8 +-
drivers/usb/core/hub.c | 5 +-
drivers/usb/core/sysfs.c | 5 -
drivers/usb/host/xhci-mvebu.c | 2 +-
drivers/usb/serial/option.c | 4 +
drivers/usb/storage/ene_ub6250.c | 2 +-
drivers/watchdog/at91sam9_wdt.c | 7 +-
drivers/watchdog/pcwd_usb.c | 6 +-
drivers/watchdog/watchdog_dev.c | 2 +-
fs/btrfs/send.c | 6 +-
fs/ext4/xattr.c | 35 +-
fs/f2fs/inline.c | 13 +-
fs/hfs/bnode.c | 1 +
fs/hfsplus/super.c | 4 +-
fs/jfs/jfs_dmap.c | 3 +-
fs/ocfs2/move_extents.c | 34 +-
fs/ubifs/budget.c | 9 +-
fs/ubifs/dir.c | 5 +
fs/ubifs/file.c | 12 +-
fs/ubifs/tnc.c | 24 +-
fs/udf/file.c | 26 +-
fs/udf/inode.c | 58 +-
fs/udf/udf_sb.h | 2 +
include/drm/drm_mipi_dsi.h | 4 +
include/linux/filter.h | 24 +
include/linux/ima.h | 6 +-
include/linux/kernel_stat.h | 2 +-
include/linux/kprobes.h | 2 +
include/uapi/linux/usb/video.h | 30 +
kernel/bpf/core.c | 39 +-
kernel/bpf/verifier.c | 39 +-
kernel/irq/irqdomain.c | 31 +-
kernel/kprobes.c | 6 +-
kernel/rcu/tree_exp.h | 2 +
kernel/time/hrtimer.c | 2 +
kernel/time/posix-stubs.c | 2 +
kernel/time/posix-timers.c | 2 +
kernel/trace/ring_buffer.c | 7 +-
lib/mpi/mpicoder.c | 3 +-
net/9p/trans_xen.c | 48 +-
net/bluetooth/hci_sock.c | 11 +-
net/bluetooth/l2cap_core.c | 24 -
net/bluetooth/l2cap_sock.c | 8 +
net/caif/caif_socket.c | 1 +
net/core/dev.c | 4 +-
net/core/filter.c | 9 +-
net/core/stream.c | 1 -
net/ipv4/inet_connection_sock.c | 1 +
net/ipv4/inet_hashtables.c | 12 +-
net/ipv4/tcp_minisocks.c | 7 +-
net/netfilter/nf_conntrack_netlink.c | 5 +-
net/nfc/netlink.c | 4 +
net/sched/Kconfig | 11 -
net/sched/Makefile | 1 -
net/sched/cls_tcindex.c | 690 ---------------------
net/wireless/sme.c | 31 +-
security/integrity/ima/ima_main.c | 7 +-
security/security.c | 7 +-
sound/pci/hda/patch_ca0132.c | 2 +-
sound/pci/ice1712/aureon.c | 2 +-
sound/soc/kirkwood/kirkwood-dma.c | 2 +-
sound/soc/soc-compress.c | 2 +-
tools/iio/iio_utils.c | 23 +-
tools/testing/ktest/ktest.pl | 3 +-
185 files changed, 1175 insertions(+), 1343 deletions(-)