Files
Robin Peng 386bc3a21a Merge android-4.14-q (4.14.136) into android-msm-floral-4.14-qt-lts
Merge 4.14.136 into android-4.14-q
Linux 4.14.136
  * ip_tunnel: allow not to count pkts on tstats by setting skb's dev to NULL
      net/ipv4/ip_tunnel_core.c
    ceph: hold i_ceph_lock when removing caps for freeing inode
    Fix allyesconfig output.
    drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl
  * sched/fair: Don't free p->numa_faults with concurrent readers
      fs/exec.c
      include/linux/sched/numa_balancing.h
      kernel/fork.c
      kernel/sched/fair.c
    Bluetooth: hci_uart: check for missing tty operations
    hv_sock: Add support for delayed close
  * iommu/iova: Fix compilation error with !CONFIG_IOMMU_IOVA
      include/linux/iova.h
  * iommu/vt-d: Don't queue_iova() if there is no flush queue
      drivers/iommu/iova.c
      include/linux/iova.h
    media: radio-raremono: change devm_k*alloc to k*alloc
    NFS: Cleanup if nfs_match_client is interrupted
    media: pvrusb2: use a different format for warnings
    media: cpia2_usb: first wake up, then free in disconnect
    ath10k: Change the warning message string
    media: au0828: fix null dereference in error path
    ISDN: hfcsusb: checking idx of ep configuration
  * binder: fix possible UAF when freeing buffer
      drivers/android/binder.c
  * arm64: compat: Provide definition for COMPAT_SIGMINSTKSZ
      arch/arm64/include/asm/compat.h
    i2c: qup: fixed releasing dma without flush operation completion
    arm64: dts: marvell: Fix A37xx UART0 register size
    NFSv4: Fix lookup revalidate of regular files
    NFS: Refactor nfs_lookup_revalidate()
    NFS: Fix dentry revalidation on NFSv4 lookup
    vsock: correct removal of socket from the list
    VSOCK: use TCP state constants for sk_state
    ANDROID: fix up 9p filesystem due to CFI non-upstream patches
    Merge 4.14.135 into android-4.14-q
Linux 4.14.135
  * access: avoid the RCU grace period for the temporary subjective credentials
      fs/open.c
      include/linux/cred.h
      kernel/cred.c
    powerpc/tm: Fix oops on sigreturn on systems without TM
    powerpc/xive: Fix loop exit-condition in xive_find_target_in_mask()
    ALSA: hda - Add a conexant codec entry to let mute led work
    ALSA: line6: Fix wrong altsetting for LINE6_PODHD500_1
    hpet: Fix division by zero in hpet_time_div()
  * fpga-manager: altera-ps-spi: Fix build error
      drivers/fpga/Kconfig
  * binder: prevent transactions to context manager from its own process.
      drivers/android/binder.c
    x86/speculation/mds: Apply more accurate check on hypervisor platform
    x86/sysfb_efi: Add quirks for some devices with swapped width and height
    btrfs: inode: Don't compress if NODATASUM or NODATACOW set
    KVM: nVMX: do not use dangling shadow VMCS after guest reset
  * usb: pci-quirks: Correct AMD PLL quirk detection
      drivers/usb/host/pci-quirks.c
    usb: wusbcore: fix unbalanced get/put cluster_id
  * drm/crc-debugfs: Also sprinkle irqrestore over early exits
      drivers/gpu/drm/drm_debugfs_crc.c
  * drm/crc: Only report a single overflow when a CRC fd is opened
      drivers/gpu/drm/drm_debugfs_crc.c
      include/drm/drm_debugfs_crc.h
    locking/lockdep: Hide unused 'class' variable
    locking/lockdep: Fix lock used or unused stats error
    mm/mmu_notifier: use hlist_add_head_rcu()
  * mm/gup.c: remove some BUG_ONs from get_gate_page()
      mm/gup.c
  * mm/gup.c: mark undo_dev_pagemap as __maybe_unused
      mm/gup.c
    9p: pass the correct prototype to read_cache_page
    mm/kmemleak.c: fix check for softirq context
    sh: prevent warnings when using iounmap
    block/bio-integrity: fix a memory leak bug
    powerpc/eeh: Handle hugepages in ioremap space
  * mailbox: handle failed named mailbox channel request
      drivers/mailbox/mailbox.c
  * f2fs: avoid out-of-range memory access
      fs/f2fs/segment.c
    powerpc/boot: add {get, put}_unaligned_be32 to xz_config.h
    PCI: dwc: pci-dra7xx: Fix compilation when !CONFIG_GPIOLIB
    RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM
    perf annotate: Fix dereferencing freed memory found by the smatch tool
    perf session: Fix potential NULL pointer dereference found by the smatch tool
    perf test mmap-thread-lookup: Initialize variable to suppress memory sanitizer warning
  * kallsyms: exclude kasan local symbols on s390
      scripts/kallsyms.c
    serial: sh-sci: Fix TX DMA buffer flushing and workqueue races
    serial: sh-sci: Terminate TX DMA during buffer flushing
    RDMA/i40iw: Set queue pair state when being queried
    powerpc/4xx/uic: clear pending interrupt after irq type/pol change
    um: Silence lockdep complaint about mmap_sem
    mfd: hi655x-pmic: Fix missing return value check for devm_regmap_init_mmio_clk
    mfd: arizona: Fix undefined behavior
  * mfd: core: Set fwnode for created devices
      drivers/mfd/mfd-core.c
    recordmcount: Fix spurious mcount entries on powerpc
    powerpc/xmon: Fix disabling tracing while in xmon
    iio: iio-utils: Fix possible incorrect mask calculation
    PCI: xilinx-nwl: Fix Multi MSI data programming
  * kbuild: Add -Werror=unknown-warning-option to CLANG_FLAGS
      Makefile
  * PCI: sysfs: Ignore lockdep for remove attribute
      drivers/pci/pci-sysfs.c
    serial: mctrl_gpio: Check if GPIO property exisits before requesting it
  * drm/msm: Depopulate platform on probe failure
      drivers/gpu/drm/msm/msm_drv.c
    powerpc/pci/of: Fix OF flags parsing for 64bit BARs
  * usb: gadget: Zero ffs_io_data
      drivers/usb/gadget/function/f_fs.c
  * tty: serial_core: Set port active bit in uart_port_activate
      drivers/tty/serial/serial_core.c
    drm/rockchip: Properly adjust to a true clock in adjusted_mode
    powerpc/pseries/mobility: prevent cpu hotplug during DT update
    phy: renesas: rcar-gen2: Fix memory leak at error paths
    drm/virtio: Add memory barriers for capset cache.
    serial: 8250: Fix TX interrupt handling condition
    tty: serial: msm_serial: avoid system lockup condition
    tty/serial: digicolor: Fix digicolor-usart already registered warning
    memstick: Fix error cleanup path of memstick_init
  * drm/crc-debugfs: User irqsafe spinlock in drm_crtc_add_crc_entry
      drivers/gpu/drm/drm_debugfs_crc.c
    drm/bridge: sii902x: pixel clock unit is 10kHz instead of 1kHz
    drm/bridge: tc358767: read display_props in get_modes()
  * PCI: Return error if cannot probe VF
      drivers/pci/pci-driver.c
    drm/edid: Fix a missing-check bug in drm_load_edid_firmware()
    tty: serial: cpm_uart - fix init when SMC is relocated
    pinctrl: rockchip: fix leaked of_node references
    tty: max310x: Fix invalid baudrate divisors calculator
  * usb: core: hub: Disable hub-initiated U1/U2
      drivers/usb/core/hub.c
    drm/panel: simple: Fix panel_simple_dsi_probe
    hvsock: fix epollout hang from race condition
    nfsd: Fix overflow causing non-working mounts on 1 TB machines
    nfsd: fix performance-limiting session calculation
    nfsd: give out fewer session slots as limit approaches
    nfsd: increase DRC cache limit
    NFSv4: Fix open create exclusive when the server reboots
    perf/events/amd/uncore: Fix amd_uncore_llc ID to use pre-defined cpu_llc_id
  * mm: vmscan: scan anonymous pages on file refaults
      mm/vmscan.c
  * ext4: allow directory holes
      fs/ext4/dir.c
      fs/ext4/namei.c
  * ext4: use jbd2_inode dirty range scoping
      fs/ext4/ext4_jbd2.h
      fs/ext4/inode.c
      fs/ext4/move_extent.c
  * jbd2: introduce jbd2_inode dirty range scoping
      fs/jbd2/commit.c
      fs/jbd2/journal.c
      fs/jbd2/transaction.c
      include/linux/jbd2.h
  * mm: add filemap_fdatawait_range_keep_errors()
      include/linux/fs.h
      mm/filemap.c
  * ext4: enforce the immutable flag on open files
      fs/ext4/file.c
      fs/ext4/inode.c
  * ext4: don't allow any modifications to an immutable file
      fs/ext4/ioctl.c
    MIPS: lb60: Fix pin mappings
  * dma-buf: Discard old fence_excl on retrying get_fences_rcu for realloc
      drivers/dma-buf/reservation.c
  * dma-buf: balance refcount inbalance
      drivers/dma-buf/dma-buf.c
  * net: bridge: stp: don't cache eth dest pointer before skb pull
      net/bridge/br_stp_bpdu.c
  * net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query
      net/bridge/br_multicast.c
  * net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling
      net/bridge/br_multicast.c
  * tcp: Reset bytes_acked and bytes_received when disconnecting
      net/ipv4/tcp.c
  * tcp: fix tcp_set_congestion_control() use from bpf hook
      include/net/tcp.h
      net/core/filter.c
      net/ipv4/tcp.c
      net/ipv4/tcp_cong.c
  * net: make skb_dst_force return true when dst is refcounted
      include/net/dst.h
      net/netfilter/nf_queue.c
  * bonding: validate ip header before check IPPROTO_IGMP
      drivers/net/bonding/bond_main.c
    netrom: hold sock when setting skb->destructor
    netrom: fix a memory leak in nr_rx_frame()
    macsec: fix checksumming after decryption
    macsec: fix use-after-free of skb during RX
    vrf: make sure skb->data contains ip header to make routing
    sky2: Disable MSI on ASUS P6T
    rxrpc: Fix send on a connected, but unbound socket
    nfc: fix potential illegal memory access
    net: openvswitch: fix csum updates for MPLS actions
  * net: neigh: fix multiple neigh timer scheduling
      net/core/neighbour.c
    net: dsa: mv88e6xxx: wait after reset deactivation
    net: bcmgenet: use promisc for unsupported filters
  * ipv4: don't set IPv6 only flags to IPv4 addresses
      net/ipv4/devinet.c
  * igmp: fix memory leak in igmpv3_del_delrec()
      net/ipv4/igmp.c
    caif-hsi: fix possible deadlock in cfhsi_exit_module()
    bnx2x: Prevent ptp_task to be rescheduled indefinitely
    bnx2x: Prevent load reordering in tx completion processing
  * lib/strscpy: Shut up KASAN false-positives in strscpy()
      lib/string.c
  * compiler.h: Add read_word_at_a_time() function.
      include/linux/compiler.h
  * compiler.h, kasan: Avoid duplicating __read_once_size_nocheck()
      include/linux/compiler.h
  * dm bufio: fix deadlock with loop device
      drivers/md/dm-bufio.c
    dt-bindings: allow up to four clocks for orion-mdio
    net: mvmdio: allow up to four clocks to be specified for orion-mdio
  * usb: Handle USB3 remote wakeup for LPM enabled devices correctly
      drivers/usb/core/hub.c
  * Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug
      net/bluetooth/smp.c
    intel_th: msu: Fix single mode with disabled IOMMU
  * eCryptfs: fix a couple type promotion bugs
      fs/ecryptfs/crypto.c
    powerpc/watchpoint: Restore NV GPRs while returning from exception
    powerpc/32s: fix suspend/resume when IBATs 4-7 are used
    parisc: Fix kernel panic due invalid values in IAOQ0 or IAOQ1
    parisc: Ensure userspace privilege for ptraced processes in regset functions
    crypto: caam - limit output IV to CBC to work around CTR mode DMA issue
    PCI: hv: Fix a use-after-free bug in hv_eject_device_work()
    gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM
    coda: pass the host file in vma->vm_file on mmap
    libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields
    HID: wacom: correct touch resolution x/y typo
    HID: wacom: generic: only switch the mode on devices with LEDs
    Btrfs: add missing inode version, ctime and mtime updates when punching hole
    Btrfs: fix fsync not persisting dentry deletions due to inode evictions
    Btrfs: fix data loss after inode eviction, renaming it, and fsync it
  * PCI: Do not poll for PME if the device is in D3cold
      drivers/pci/pci.c
    intel_th: pci: Add Ice Lake NNPI support
    perf/x86/amd/uncore: Set the thread mask for F17h L3 PMCs
    perf/x86/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs
    x86/boot: Fix memory leak in default_get_smp_config()
    9p/virtio: Add cleanup path in p9_virtio_init
    9p/xen: Add cleanup path in p9_trans_xen_init
    xen/events: fix binding user event channels to cpus
    dm zoned: fix zone state management race
    padata: use smp_mb in padata_reorder to avoid orphaned padata jobs
    drm/nouveau/i2c: Enable i2c pads & busses during preinit
  * fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys inodes.
      fs/proc/proc_sysctl.c
    arm64: tegra: Fix AGIC register range
    KVM: x86/vPMU: refine kvm_pmu err msg when event creation failed
    media: coda: Remove unbalanced and unneeded mutex unlock
  * media: v4l2: Test type instead of cfg->type in v4l2_ctrl_new_custom()
      drivers/media/v4l2-core/v4l2-ctrls.c
    ALSA: hda/realtek: apply ALC891 headset fixup to one Dell machine
    ALSA: seq: Break too long mutex context in the write loop
  * ASoC: dapm: Adapt for debugfs API change
      sound/soc/soc-dapm.c
  * lib/scatterlist: Fix mapping iterator when sg->offset is greater than PAGE_SIZE
      lib/scatterlist.c
    pnfs/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error
    NFSv4: Handle the special Linux file open access mode
    iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X
    iwlwifi: pcie: don't service an interrupt that was masked
    arm64: tegra: Update Jetson TX1 GPU regulator timings
    regulator: s2mps11: Fix buck7 and buck8 wrong voltages
    Input: alps - fix a mismatch between a condition check and its comment
    Input: synaptics - whitelist Lenovo T580 SMBus intertouch
    Input: alps - don't handle ALPS cs19 trackpoint-only device
    Input: gtco - bounds check collection indent level
    crypto: crypto4xx - fix a potential double free in ppc4xx_trng_probe
    crypto: ccp/gcm - use const time tag comparison.
    crypto: ccp - memset structure fields to zero before reuse
    crypto: chacha20poly1305 - fix atomic sleep when using async algorithm
  * crypto: arm64/sha2-ce - correct digest for empty data in finup
      arch/arm64/crypto/sha2-ce-glue.c
  * crypto: arm64/sha1-ce - correct digest for empty data in finup
      arch/arm64/crypto/sha1-ce-glue.c
    crypto: ccp - Validate the the error value used to index error messages
  * crypto: ghash - fix unaligned memory access in ghash_setkey()
      crypto/ghash-generic.c
    scsi: mac_scsi: Fix pseudo DMA implementation, take 2
    scsi: mac_scsi: Increase PIO/PDMA transfer length threshold
    scsi: megaraid_sas: Fix calculation of target ID
  * scsi: core: Fix race on creating sense cache
      drivers/scsi/scsi_lib.c
    Revert "scsi: ncr5380: Increase register polling limit"
    scsi: NCR5380: Always re-enable reselection interrupt
    scsi: NCR5380: Reduce goto statements in NCR5380_select()
    xen: let alloc_xenballooned_pages() fail if not enough memory free
    floppy: fix out-of-bounds read in copy_buffer
    floppy: fix invalid pointer dereference in drive_name
    floppy: fix out-of-bounds read in next_valid_format
    floppy: fix div-by-zero in setup_format_params
    iavf: fix dereference of null rx_buffer pointer
    net: mvmdio: defer probe of orion-mdio if a clock is not ready
    gtp: fix use-after-free in gtp_newlink()
    gtp: fix use-after-free in gtp_encap_destroy()
    gtp: fix Illegal context switch in RCU read-side critical section.
    gtp: fix suspicious RCU usage
  * Bluetooth: validate BLE connection interval updates
      net/bluetooth/hci_event.c
      net/bluetooth/l2cap_core.c
    gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable()
  * Bluetooth: Check state in l2cap_disconnect_rsp
      net/bluetooth/l2cap_core.c
    Bluetooth: 6lowpan: search for destination address in all peers
    Bluetooth: hci_bcsp: Fix memory leak in rx_skb
  * gpiolib: Fix references to gpiod_[gs]et_*value_cansleep() variants
      drivers/gpio/gpiolib.c
  * net: usb: asix: init MAC address buffers
      drivers/net/usb/asix_devices.c
    perf stat: Make metric event lookup more robust
    iwlwifi: mvm: Drop large non sta frames
    ath10k: destroy sdio workqueue while remove sdio module
    net: hns3: add some error checking in hclge_tm module
    net: hns3: fix a -Wformat-nonliteral compile warning
    bcache: check c->gc_thread by IS_ERR_OR_NULL in cache_set_flush()
  * EDAC: Fix global-out-of-bounds write when setting edac_mc_poll_msec
      drivers/edac/edac_mc_sysfs.c
      drivers/edac/edac_module.h
  * crypto: asymmetric_keys - select CRYPTO_HASH where needed
      crypto/asymmetric_keys/Kconfig
    crypto: serpent - mark __serpent_setkey_sbox noinline
    ixgbe: Check DDM existence in transceiver before access
  * rslib: Fix handling of of caller provided syndrome
      lib/reed_solomon/decode_rs.c
  * rslib: Fix decoding of shortened codes
      lib/reed_solomon/decode_rs.c
  * clocksource/drivers/exynos_mct: Increase priority over ARM arch timer
      include/linux/cpuhotplug.h
    libata: don't request sense data on !ZAC ATA devices
    perf tools: Increase MAX_NR_CPUS and MAX_CACHES
    ath10k: fix PCIE device wake up failed
    ath10k: add missing error handling
    ipvs: fix tinfo memory leak in start_sync_thread
    mt7601u: fix possible memory leak when the device is disconnected
    x86/build: Add 'set -e' to mkcapflags.sh to delete broken capflags.c
    mt7601u: do not schedule rx_tasklet when the device has been disconnected
    rtlwifi: rtl8192cu: fix error handle when usb probe failed
    media: hdpvr: fix locking and a missing msleep
    media: vimc: cap: check v4l2_fill_pixfmt return value
    media: coda: increment sequence offset for the last returned frame
    media: coda: fix last buffer handling in V4L2_ENC_CMD_STOP
    media: coda: fix mpeg2 sequence number handling
    acpi/arm64: ignore 5.1 FADTs that are reported as 5.0
  * timer_list: Guard procfs specific code
      kernel/time/timer_list.c
  * ntp: Limit TAI-UTC offset
      kernel/time/ntp.c
  * media: i2c: fix warning same module names
      drivers/media/i2c/Makefile
    media: s5p-mfc: Make additional clocks optional
    ipvs: defer hook registration to avoid leaks
  * ipsec: select crypto ciphers for xfrm_algo
      net/xfrm/Kconfig
  * EDAC/sysfs: Fix memory leak when creating a csrow object
      drivers/edac/edac_mc_sysfs.c
    ipoib: correcly show a VF hardware address
    vhost_net: disable zerocopy by default
    perf evsel: Make perf_evsel__name() accept a NULL argument
    x86/atomic: Fix smp_mb__{before,after}_atomic()
  * sched/core: Add __sched tag for io_schedule()
      kernel/sched/core.c
  * xfrm: fix sa selector validation
      net/xfrm/xfrm_user.c
  * blkcg, writeback: dead memcgs shouldn't contribute to writeback ownership arbitration
      fs/fs-writeback.c
    x86/cpufeatures: Add FDP_EXCPTN_ONLY and ZERO_FCS_FDS
  * rcu: Force inlining of rcu_read_lock()
      include/linux/rcupdate.h
  * bpf: silence warning messages in core
      kernel/bpf/Makefile
  * regmap: fix bulk writes on paged registers
      drivers/base/regmap/regmap.c
    gpio: omap: ensure irq is enabled before wakeup
    gpio: omap: fix lack of irqstatus_raw0 for OMAP4
  * iommu: Fix a leak in iommu_insert_resv_region
      drivers/iommu/iommu.c
    media: fdp1: Support M3N and E3 platforms
    perf test 6: Fix missing kvm module load for s390
    perf cs-etm: Properly set the value of 'old' and 'head' in snapshot mode
    ipset: Fix memory accounting for hash types on resize
    net: sfp: add mutex to prevent concurrent state checks
    RAS/CEC: Fix pfn insertion
    s390/qdio: handle PENDING state for QEBSM devices
    net: axienet: Fix race condition causing TX hang
    net: fec: Do not use netdev messages too early
    net: stmmac: dwmac4: fix flow control issue
    cpupower : frequency-set -r option misses the last cpu in related cpu list
    media: wl128x: Fix some error handling in fm_v4l2_init_video_device()
    locking/lockdep: Fix merging of hlocks with non-zero references
    tua6100: Avoid build warnings.
    crypto: talitos - Align SEC1 accesses to 32 bits boundaries.
    crypto: talitos - properly handle split ICV.
  * net: phy: Check against net_device being NULL
      drivers/net/phy/phy_device.c
    media: staging: media: davinci_vpfe: - Fix for memory leak if decoder initialization fails.
  * media: mc-device.c: don't memset __user pointer contents
      drivers/media/media-device.c
  * fscrypt: clean up some BUG_ON()s in block encryption/decryption
      fs/crypto/crypto.c
  * xfrm: Fix xfrm sel prefix length validation
      net/xfrm/xfrm_user.c
  * af_key: fix leaks in key_pol_get_resp and dump_sp.
      net/key/af_key.c
    signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig
    qed: Set the doorbell address correctly
    net: stmmac: dwmac4/5: Clear unused address entries
    net: stmmac: dwmac1000: Clear unused address entries
  * media: media_device_enum_links32: clean a reserved field
      drivers/media/media-device.c
    media: vpss: fix a potential NULL pointer dereference
    media: marvell-ccic: fix DMA s/g desc number calculation
    crypto: talitos - fix skcipher failure due to wrong output IV
    media: spi: IR LED: add missing of table registration
    media: dvb: usb: fix use after free in dvb_usb_device_exit
    batman-adv: fix for leaked TVLV handler.
    ath: DFS JP domain W56 fixed pulse type 3 RADAR detection
    ath6kl: add some bounds checking
    ath9k: Check for errors when reading SREV register
    ath10k: Do not send probe response template for mesh
    wil6210: fix potential out-of-bounds read
    dmaengine: imx-sdma: fix use-after-free on probe error path
    scsi: iscsi: set auth_protocol back to NULL if CHAP_A value is not supported
  * arm64/efi: Mark __efistub_stext_offset as an absolute symbol explicitly
      arch/arm64/kernel/image.h
    MIPS: fix build on non-linux hosts
    MIPS: ath79: fix ar933x uart parity mode
    ANDROID: enable CONFIG_RTC_DRV_TEST on cuttlefish
    ANDROID: cuttlefish_defconfig: enable CONFIG_CPU_FREQ_TIMES
  * ANDROID: xfrm: remove in_compat_syscall() checks
      net/xfrm/xfrm_state.c
      net/xfrm/xfrm_user.c
  * UPSTREAM: binder: Set end of SG buffer area properly.
      drivers/android/binder.c
    Merge 4.14.134 into android-4.14-q
Linux 4.14.134
    drm/udl: move to embedding drm device inside udl device.
    drm/udl: introduce a macro to convert dev to udl.
    crypto/NX: Set receive window credits to max number of CRBs in RxFIFO
    s390/qdio: don't touch the dsci in tiqdio_add_input_queues()
    s390/qdio: (re-)initialize tiqdio list entries
    s390: fix stfle zero padding
    ARC: hide unused function unw_hdr_alloc
  * linux/kernel.h: fix overflow for DIV_ROUND_UP_ULL
      include/linux/kernel.h
  * cpu/hotplug: Fix out-of-bounds read when setting fail state
      kernel/cpu.c
    x86/boot/64: Fix crash if kernel image crosses page table boundary
  * dm verity: use message limit for data block corruption message
      drivers/md/dm-verity-target.c
    ARM: dts: imx6ul: fix PWM[1-4] interrupts
    sis900: fix TX completion
  * ppp: mppe: Add softdep to arc4
      drivers/net/ppp/ppp_mppe.c
    be2net: fix link failure after ethtool offline test
    ARM: omap2: remove incorrect __init annotation
  * perf/core: Fix perf_sample_regs_user() mm check
      kernel/events/core.c
    efi/bgrt: Drop BGRT status field reserved bits check
    clk: ti: clkctrl: Fix returning uninitialized data
    MIPS: Remove superfluous check for __linux__
    VMCI: Fix integer overflow in VMCI handle arrays
    carl9170: fix misuse of device driver API
  * binder: fix memory leak in error path
      drivers/android/binder.c
    staging: comedi: amplc_pci230: fix null pointer deref on interrupt
    staging: comedi: dt282x: fix a null pointer deref on interrupt
    usb: renesas_usbhs: add a workaround for a race condition of workqueue
  * usb: gadget: ether: Fix race between gether_disconnect and rx_submit
      drivers/usb/gadget/function/u_ether.c
    p54usb: Fix race between disconnect and firmware loading
    Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled"
    USB: serial: option: add support for GosunCn ME3630 RNDIS mode
    USB: serial: ftdi_sio: add ID for isodebug v1
    mwifiex: Don't abort on small, spec-compliant vendor IEs
    mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies()
    mwifiex: Abort at too short BSS descriptor element
    Documentation: Add section about CPU vulnerabilities for Spectre
    x86/tls: Fix possible spectre-v1 in do_get_thread_area()
    x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()
    block, bfq: NULL out the bic when it's no longer valid
    ALSA: hda/realtek - Headphone Mic can't record after S3
    udf: Fix incorrect final NOT_ALLOCATED (hole) extent length
  * fscrypt: don't set policy for a dead directory
      fs/crypto/policy.c
    net :sunrpc :clnt :Fix xps refcount imbalance on the error path
    net: dsa: mv88e6xxx: fix shift of FID bits in mv88e6185_g1_vtu_loadpurge()
  * quota: fix a problem about transfer quota
      fs/quota/dquot.c
    net: lio_core: fix potential sign-extension overflow on large shift
  * ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL
      include/net/ip6_tunnel.h
  * drm: return -EFAULT if copy_to_user() fails
      drivers/gpu/drm/drm_bufs.c
      drivers/gpu/drm/drm_ioc32.c
    bnx2x: Check if transceiver implements DDM before access
    md: fix for divide error in status_resync
    qmi_wwan: extend permitted QMAP mux_id value range
    qmi_wwan: avoid RCU stalls on device disconnect when in QMAP mode
    qmi_wwan: add support for QMAP padding in the RX path
    mac80211: only warn once on chanctx_conf being NULL
    ARM: davinci: da8xx: specify dma_coherent_mask for lcdc
    ARM: davinci: da850-evm: call regulator_has_full_constraints()
    mlxsw: spectrum: Disallow prio-tagged packets when PVID is removed
    KVM: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy
    Input: imx_keypad - make sure keyboard can always wake up system
    ARM: dts: am335x phytec boards: Fix cd-gpios active level
    ibmvnic: Refresh device multicast list after reset
    can: af_can: Fix error path of can_init()
    can: m_can: implement errata "Needless activation of MRAF irq"
  * can: mcp251x: add support for mcp25625
      drivers/net/can/spi/Kconfig
    dt-bindings: can: mcp251x: add mcp25625 support
  * netfilter: ipv6: nf_defrag: accept duplicate fragments again
      net/ipv6/netfilter/nf_conntrack_reasm.c
  * netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments
      net/ipv6/netfilter/nf_conntrack_reasm.c
    iwlwifi: Fix double-free problems in iwl_req_fw_callback()
    mwifiex: Fix possible buffer overflows at parsing bss descriptor
    mac80211: free peer keys before vif down in mesh
    mac80211: mesh: fix RCU warning
    staging:iio:ad7150: fix threshold mode config bit
  * bpf: sockmap, fix use after free from sleep in psock backlog workqueue
      net/core/skbuff.c
    samples, bpf: fix to change the buffer size for read()
    Input: elantech - enable middle button support on 2 ThinkPads
    crypto: talitos - rename alternative AEAD algos.
  * drivers: base: cacheinfo: Ensure cpu hotplug work is done before Intel RDT
      drivers/base/cacheinfo.c
      include/linux/cpuhotplug.h
    nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header
    Input: synaptics - enable SMBUS on T480 thinkpad trackpad
    e1000e: start network tx queue only when link is up
    Revert "e1000e: fix cyclic resets at link up with active tx"
    Merge 4.14.133 into android-4.14-q
Linux 4.14.133
    stable/btrfs: fix backport bug in d819d97ea0 ("btrfs: honor path->skip_locking in backref code")
    dmaengine: imx-sdma: remove BD_INTR for channel0
    MIPS: Add missing EHB in mtc0 -> mfc0 sequence.
    MIPS: Fix bounds check virt_addr_valid
    svcrdma: Ignore source port when computing DRC hash
    KVM: LAPIC: Fix pending interrupt in IRR blocked by software disable LAPIC
    KVM: x86: degrade WARN to pr_warn_ratelimited
    ARC: handle gcc generated __builtin_trap for older compiler
    tty: rocket: fix incorrect forward declaration of 'rp_init()'
    vhost: scsi: add weight support
    vhost: vsock: add weight support
    vhost_net: fix possible infinite loop
    vhost: introduce vhost_exceeds_weight()
    vhost_net: introduce vhost_exceeds_weight()
    vhost_net: use packet weight for rx handler, too
    vhost-net: set packet weight of tx polling to 2 * vq size
    btrfs: Ensure replaced device doesn't have pending chunk allocation
  * mm/vmscan.c: prevent useless kswapd loops
      mm/vmscan.c
    ftrace/x86: Remove possible deadlock between register_kprobe() and ftrace_run_update_code()
    drm/imx: only send event on crtc disable if kept disabled
    drm/imx: notify drm core before sending event during crtc disable
    drm/amdgpu/gfx9: use reset default for PA_SC_FIFO_SIZE
  * arm64: kaslr: keep modules inside module region when KASAN is enabled
      arch/arm64/kernel/module.c
  * tracing/snapshot: Resize spare buffer if size changed
      kernel/trace/trace.c
    lib/mpi: Fix karactx leak in mpi_powm
    ALSA: hda/realtek - Change front mic location for Lenovo M710q
  * ALSA: usb-audio: fix sign unintended sign extension on left shifts
      sound/usb/mixer_quirks.c
    ALSA: line6: Fix write on zero-sized buffer
    ALSA: firewire-lib/fireworks: fix miss detection of received MIDI messages
    ALSA: seq: fix incorrect order of dest_client/dest_ports arguments
  * crypto: cryptd - Fix skcipher instance memory leak
      crypto/cryptd.c
    crypto: user - prevent operating on larval algorithms
  * ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME
      kernel/ptrace.c
    drm/i915/dmc: protect against reading random memory
    MIPS: netlogic: xlr: Remove erroneous check in nlm_fmn_send()
    ftrace: Fix NULL pointer dereference in free_ftrace_func_mapper()
    module: Fix livepatch/ftrace module text permissions race
  * mm/mlock.c: change count_mm_mlocked_page_nr return type
      mm/mlock.c
    scripts/decode_stacktrace.sh: prefix addr2line with $CROSS_COMPILE
  * cpuset: restore sanity to cpuset_cpus_allowed_fallback()
      kernel/cgroup/cpuset.c
    platform/x86: mlx-platform: Fix parent device in i2c-mux-reg device registration
    scsi: hpsa: correct ioaccel2 chaining
    SoC: rt274: Fix internal jack assignment in set_jack callback
    usb: gadget: udc: lpc32xx: allocate descriptor with GFP_ATOMIC
    usb: gadget: fusb300_udc: Fix memory leak of fusb300->ep[i]
    ASoC: sun4i-i2s: Add offset to RX channel select
    ASoC: sun4i-i2s: Fix sun8i tx channel offset mask
    ASoC: max98090: remove 24-bit format support if RJ is 0
    drm/mediatek: call mtk_dsi_stop() after mtk_drm_crtc_atomic_disable()
    drm/mediatek: call drm_atomic_helper_shutdown() when unbinding driver
    drm/mediatek: fix unbind functions
    spi: bitbang: Fix NULL pointer dereference in spi_unregister_master
  * ASoC: soc-pcm: BE dai needs prepare when pause release after resume
      sound/soc/soc-pcm.c
    ASoC : cs4265 : readable register too low
  * Bluetooth: Fix faulty expression for minimum encryption key size check
      net/bluetooth/l2cap_core.c
    Merge 4.14.132 into android-4.14-q
Linux 4.14.132
  * arm64: insn: Fix ldadd instruction encoding
      arch/arm64/include/asm/insn.h
    tipc: pass tunnel dev as NULL to udp_tunnel(6)_xmit_skb
    futex: Update comments and docs about return values of arch futex code
  * bpf, arm64: use more scalable stadd over ldxr / stxr loop in xadd
      arch/arm64/include/asm/insn.h
      arch/arm64/kernel/insn.c
  * arm64: futex: Avoid copying out uninitialised stack in failed cmpxchg()
      arch/arm64/include/asm/futex.h
  * bpf: udp: ipv6: Avoid running reuseport's bpf_prog from __udp6_lib_err
      net/ipv6/udp.c
  * bpf: udp: Avoid calling reuseport's bpf_prog from udp_gro
      net/ipv4/udp.c
      net/ipv6/udp.c
  * bonding: Always enable vlan tx offload
      drivers/net/bonding/bond_main.c
    team: Always enable vlan tx offload
  * tun: wake up waitqueues after IFF_UP is set
      drivers/net/tun.c
    tipc: check msg->req data len in tipc_nl_compat_bearer_disable
    tipc: change to use register_pernet_device
    sctp: change to hold sk after auth shkey is created successfully
    net: stmmac: fixed new system time seconds value calculation
  * net: remove duplicate fetch in sock_getsockopt
      net/core/sock.c
  * net/packet: fix memory leak in packet_set_ring()
      net/packet/af_packet.c
  * ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while loop
      net/ipv4/raw.c
  * af_packet: Block execution of tasks waiting for transmit to complete in AF_PACKET
      net/packet/af_packet.c
      net/packet/internal.h
    eeprom: at24: fix unexpected timeout under high load
  * cpu/speculation: Warn on unsupported mitigations= parameter
      kernel/cpu.c
    NFS/flexfiles: Use the correct TCP timeout for flexfiles I/O
    x86/microcode: Fix the microcode load on CPU hotplug for real
    x86/speculation: Allow guests to use SSBD even if host does not
    scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck()
    dm log writes: make sure super sector log updates are written in order
    mm/page_idle.c: fix oops because end_pfn is larger than max_pfn
    fs/binfmt_flat.c: make load_flat_shared_library() work
    mm/mempolicy.c: fix an incorrect rebind node in mpol_rebind_nodemask
  * fs/proc/array.c: allow reporting eip/esp for all coredumping threads
      fs/proc/array.c
  * Revert "compiler.h: update definition of unreachable()"
      include/linux/compiler.h
    qmi_wwan: Fix out-of-bounds read
    net/9p: include trans_common.h to fix missing prototype warning.
    9p: p9dirent_read: check network-provided name length
    9p/rdma: remove useless check in cm_event_handler
    9p: acl: fix uninitialized iattr access
    9p/rdma: do not disconnect on down_interruptible EAGAIN
    9p/xen: fix check for xenbus_read error in front_probe
  * block: bio_iov_iter_get_pages: pin more pages for multi-segment IOs
      block/bio.c
  * block: add a lower-level bio_add_page interface
      block/bio.c
      include/linux/bio.h
    IB/hfi1: Close PSM sdma_progress sleep window
    Revert "x86/uaccess, ftrace: Fix ftrace_likely_update() vs. SMAP"
    perf header: Fix unchecked usage of strncpy()
    perf help: Remove needless use of strncpy()
    perf ui helpline: Use strlcpy() as a shorter form of strncpy() + explicit set nul
    Merge 4.14.131 into android-4.14-q
    Merge 4.14.130 into android-4.14-q
Linux 4.14.131
  * tcp: refine memory limit test in tcp_fragment()
      net/ipv4/tcp_output.c
Linux 4.14.130
    mac80211: Do not use stack memory with scatterlist for GMAC
    mac80211: handle deauthentication/disassociation from TDLS peer
    mac80211: drop robust management frames from unknown TA
  * cfg80211: fix memory leak of wiphy device name
      net/wireless/core.c
    SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write
  * Bluetooth: Fix regression with minimum encryption key size alignment
      net/bluetooth/hci_conn.c
      net/bluetooth/l2cap_core.c
  * Bluetooth: Align minimum encryption key size for LE and BR/EDR connections
      include/net/bluetooth/hci_core.h
      net/bluetooth/hci_conn.c
    ARM: dts: am57xx-idk: Remove support for voltage switching for SD card
    ARM: imx: cpuidle-imx6sx: Restrict the SW2ISO increase to i.MX6SX
    powerpc/bpf: use unsigned division instruction for 64-bit operations
    can: purge socket error queue on sock destruct
    can: flexcan: fix timeout when set small bitrate
    btrfs: start readahead also in seed devices
    nvme: Fix u32 overflow in the number of namespace list calculation
    hwmon: (pmbus/core) Treat parameters as paged if on multiple pages
  * hwmon: (core) add thermal sensors only if dev->of_node is present
      drivers/hwmon/hwmon.c
    s390/qeth: fix VLAN attribute in bridge_hostnotify udev event
    net: ipvlan: Fix ipvlan device tso disabled while NETIF_F_IP_CSUM is set
    scsi: smartpqi: unlock on error in pqi_submit_raid_request_synchronous()
  * scsi: ufs: Check that space was properly alloced in copy_query_response
      drivers/scsi/ufs/ufshcd.c
    scripts/checkstack.pl: Fix arm64 wrong or unknown architecture
    drm/arm/hdlcd: Allow a bit of clock tolerance
    drm/arm/hdlcd: Actually validate CRTC modes
    net: ethernet: mediatek: Use NET_IP_ALIGN to judge if HW RX_2BYTE_OFFSET is enabled
    net: ethernet: mediatek: Use hw_feature to judge if HWLRO is supported
    sparc: perf: fix updated event period in response to PERF_EVENT_IOC_PERIOD
    mdesc: fix a missing-check bug in get_vdev_port_node_info()
    net: hns: Fix loopback test failed at copper ports
    net: dsa: mv88e6xxx: avoid error message on remove from VLAN 0
    xtensa: Fix section mismatch between memblock_reserve and mem_reserve
    MIPS: uprobes: remove set but not used variable 'epc'
    IB/hfi1: Validate page aligned for a given virtual address
    IB/{qib, hfi1, rdmavt}: Correct ibv_devinfo max_mr value
    IB/hfi1: Insure freeze_work work_struct is canceled on shutdown
    IB/rdmavt: Fix alloc_qpn() WARN_ON()
    parisc: Fix compiler warnings in float emulation code
    parport: Fix mem leak in parport_register_dev_model
    ARC: [plat-hsdk]: Add missing FIFO size entry in GMAC node
    ARC: [plat-hsdk]: Add missing multicast filter bins number to GMAC node
    ARC: fix build warnings
    apparmor: enforce nullbyte at end of tag string
  * Input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD
      drivers/input/misc/uinput.c
    Input: synaptics - enable SMBus on ThinkPad E480 and E580
    IB/hfi1: Silence txreq allocation warnings
    usb: chipidea: udc: workaround for endpoint conflict issue
  * scsi: ufs: Avoid runtime suspend possibly being blocked forever
      drivers/scsi/ufs/ufshcd-pltfrm.c
    mmc: core: Prevent processing SDIO IRQs when the card is suspended
    net: phy: broadcom: Use strlcpy() for ethtool::get_strings
  * gcc-9: silence 'address-of-packed-member' warning
      Makefile
    objtool: Support per-function rodata sections
  * tracing: Silence GCC 9 array bounds warning
      kernel/trace/trace.c
      kernel/trace/trace.h
    Merge 4.14.129 into android-4.14-q
Linux 4.14.129
  * Abort file_remove_privs() for non-reg. files
      fs/inode.c
    infiniband: fix race condition between infiniband mlx4, mlx5 driver and core dumping
  * coredump: fix race condition between collapse_huge_page() and core dumping
      include/linux/sched/mm.h
    HID: wacom: Send BTN_TOUCH in response to INTUOSP2_BT eraser contact
    HID: wacom: Don't report anything prior to the tool entering range
    HID: wacom: Don't set tool type until we're in range
    mlxsw: spectrum: Prevent force of 56G
    scsi: libsas: delete sas port if expander discover failed
    scsi: scsi_dh_alua: Fix possible null-ptr-deref
    scsi: smartpqi: properly set both the DMA mask and the coherent DMA mask
    scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route()
    net: phy: dp83867: Set up RGMII TX delay
    net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs
    KVM: PPC: Book3S HV: Don't take kvm->lock around kvm_for_each_vcpu
    KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list
    ia64: fix build errors by exporting paddr_to_nid()
    perf record: Fix s390 missing module symbol and warning for non-root users
    perf data: Fix 'strncat may truncate' build failure with recent gcc
  * configfs: Fix use-after-free when accessing sd->s_dentry
      fs/configfs/dir.c
    ALSA: hda - Force polling mode on CNL for fixing codec communication
  * i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr
      drivers/i2c/i2c-dev.c
    net: aquantia: fix LRO with FCS error
    net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE()
  * gpio: fix gpio-adp5588 build errors
      drivers/gpio/Kconfig
  * perf/ring-buffer: Always use {READ,WRITE}_ONCE() for rb->user_page data
      kernel/events/ring_buffer.c
  * perf/ring_buffer: Add ordering to rb->nest increment
      kernel/events/ring_buffer.c
  * perf/ring_buffer: Fix exposing a temporarily decreased data_head
      kernel/events/ring_buffer.c
    x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor
    mISDN: make sure device name is NUL terminated
    powerpc/powernv: Return for invalid IMC domain
    clk: ti: clkctrl: Fix clkdm_clk handling
    selftests: netfilter: missing error check when setting up veth interface
    ipvs: Fix use-after-free in ip_vs_in
  * netfilter: nf_queue: fix reinject verdict handling
      net/netfilter/nf_queue.c
    perf/x86/intel/ds: Fix EVENT vs. UEVENT PEBS constraints
    Staging: vc04_services: Fix a couple error codes
    sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg
    sctp: Free cookie before we memdup a new one
    net: openvswitch: do not free vport if register_netdevice() is failed.
  * neigh: fix use-after-free read in pneigh_get_next
      net/core/neighbour.c
    lapb: fixed leak of control-blocks.
  * ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero
      net/ipv6/ip6_flowlabel.c
    be2net: Fix number of Rx queues used for flow hashing
    ax25: fix inconsistent lock state in ax25_destroy_timer
    perf machine: Guard against NULL in machine__exit()
  * BACKPORT: security: Implement Clang's stack initialization
      Makefile
      security/Kconfig.hardening
  * BACKPORT: security: Create "kernel hardening" config area
      security/Kconfig
      security/Kconfig.hardening
    Merge 4.14.128 into android-4.14-q
Linux 4.14.128
    rtc: pcf8523: don't return invalid date when battery is low
    x86/kasan: Fix boot with 5-level paging and KASAN
  * x86/microcode, cpuhotplug: Add a microcode loader CPU hotplug callback
      include/linux/cpuhotplug.h
    RAS/CEC: Fix binary search function
    USB: serial: option: add Telit 0x1260 and 0x1261 compositions
    USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode
    USB: serial: pl2303: add Allied Telesis VT-Kit3
  * USB: usb-storage: Add new ID to ums-realtek
      drivers/usb/storage/unusual_realtek.h
  * USB: Fix chipmunk-like voice when using Logitech C270 for recording audio.
      drivers/usb/core/quirks.c
    usb: dwc2: host: Fix wMaxPacketSize handling (fix webcam regression)
    usb: dwc2: Fix DMA cache alignment issues
    drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define()
    drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read
    KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION
    KVM: x86/pmu: do not mask the value that is written to fixed PMUs
    usbnet: ipheth: fix racing condition
    selftests/timers: Add missing fflush(stdout) calls
    libnvdimm: Fix compilation warnings with W=1
    scsi: bnx2fc: fix incorrect cast to u64 on shift operation
    platform/x86: pmc_atom: Add several Beckhoff Automation boards to critclk_systems DMI table
    platform/x86: pmc_atom: Add Lex 3I380D industrial PC to critclk_systems DMI table
    nvme: remove the ifdef around nvme_nvm_ioctl
  * arm64/mm: Inhibit huge-vmap with ptdump
      arch/arm64/mm/mmu.c
    scsi: lpfc: add check for loss of ndlp when sending RRQ
    scsi: qedi: remove set but not used variables 'cdev' and 'udev'
    scsi: qedi: remove memset/memcpy to nfunc and use func instead
    Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var
    s390/kasan: fix strncpy_from_user kasan checks
    Revert "ALSA: seq: Protect in-kernel ioctl calls with mutex"
    ALSA: seq: Fix race of get-subscription call vs port-delete ioctls
    ALSA: seq: Protect in-kernel ioctl calls with mutex
  * x86/uaccess, kcov: Disable stack protector
      kernel/Makefile
    drm/i915/sdvo: Implement proper HDMI audio support for SDVO
    ASoC: fsl_asrc: Fix the issue about unsupported rate
    ASoC: cs42xx8: Add regcache mask dirty
  * cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css()
      include/linux/cgroup.h
    bcache: fix stack corruption by PRECEDING_KEY()
    i2c: acorn: fix i2c warning
  * iommu/arm-smmu: Avoid constant zero in TLBI writes
      drivers/iommu/arm-smmu.c
  * media: v4l2-ioctl: clear fields in s_parm
      drivers/media/v4l2-core/v4l2-ioctl.c
  * ptrace: restore smp_rmb() in __ptrace_may_access()
      kernel/cred.c
      kernel/ptrace.c
  * signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO
      kernel/ptrace.c
  * mm/vmscan.c: fix trying to reclaim unevictable LRU page
      mm/vmscan.c
    fs/ocfs2: fix race in ocfs2_dentry_attach_lock()
  * mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node
      mm/list_lru.c
    libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk
    ALSA: firewire-motu: fix destruction of data for isochronous resources
    ALSA: hda/realtek - Update headset mode for ALC256
    ALSA: oxfw: allow PCM capture for Stanton SCS.1m
    HID: wacom: Sync INTUOSP2_BT touch state after each frame if necessary
    HID: wacom: Correct button numbering 2nd-gen Intuos Pro over Bluetooth
    nouveau: Fix build with CONFIG_NOUVEAU_LEGACY_CTX_SUPPORT disabled
  * drm/nouveau: add kconfig option to turn off nouveau legacy contexts. (v3)
      drivers/gpu/drm/nouveau/Kconfig
    Merge 4.14.127 into android-4.14-q
Linux 4.14.127
  * tcp: enforce tcp_min_snd_mss in tcp_mtu_probing()
      net/ipv4/tcp_timer.c
  * tcp: add tcp_min_snd_mss sysctl
      include/net/netns/ipv4.h
      net/ipv4/sysctl_net_ipv4.c
      net/ipv4/tcp_ipv4.c
      net/ipv4/tcp_output.c
  * tcp: tcp_fragment() should apply sane memory limits
      include/uapi/linux/snmp.h
      net/ipv4/proc.c
      net/ipv4/tcp_output.c
  * tcp: limit payload size of sacked skbs
      include/linux/tcp.h
      include/net/tcp.h
      net/ipv4/tcp.c
      net/ipv4/tcp_input.c
      net/ipv4/tcp_output.c
  * tcp: reduce tcp_fastretrans_alert() verbosity
      net/ipv4/tcp_input.c
    Merge 4.14.126 into android-4.14-q
Linux 4.14.126
    ALSA: seq: Cover unsubscribe_port() in list_mutex
  * drm: don't block fb changes for async plane updates
      drivers/gpu/drm/drm_atomic_helper.c
      include/drm/drm_modeset_helper_vtables.h
  * Revert "drm/nouveau: add kconfig option to turn off nouveau legacy contexts. (v3)"
      drivers/gpu/drm/nouveau/Kconfig
  * Revert "Bluetooth: Align minimum encryption key size for LE and BR/EDR connections"
      include/net/bluetooth/hci_core.h
      net/bluetooth/hci_conn.c
  * percpu: do not search past bitmap when allocating an area
      mm/percpu.c
    gpio: vf610: Do not share irq_chip
    usb: typec: fusb302: Check vconn is off when we start toggling
    ARM: exynos: Fix undefined instruction during Exynos5422 resume
  * pwm: Fix deadlock warning when removing PWM device
      drivers/pwm/core.c
      drivers/pwm/sysfs.c
      include/linux/pwm.h
    ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on Arndale Octa
    pwm: tiehrpwm: Update shadow register for disabling PWMs
    dmaengine: idma64: Use actual device for DMA transfers
    gpio: gpio-omap: add check for off wake capable gpios
    PCI: xilinx: Check for __get_free_pages() failure
    block, bfq: increase idling for weight-raised queues
    video: imsttfb: fix potential NULL pointer dereferences
    video: hgafb: fix potential NULL pointer dereference
    PCI: rcar: Fix 64bit MSI message address handling
    PCI: rcar: Fix a potential NULL pointer dereference
    power: supply: max14656: fix potential use-before-alloc
    platform/x86: intel_pmc_ipc: adding error handling
    PCI: rpadlpar: Fix leaked device_node references in add/remove paths
    ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA
    ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA
    ARM: dts: imx6ul: Specify IMX6UL_CLK_IPG as "ipg" clock to SDMA
    ARM: dts: imx7d: Specify IMX7D_CLK_IPG as "ipg" clock to SDMA
    ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA
    ARM: dts: imx53: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
    ARM: dts: imx50: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
    ARM: dts: imx51: Specify IMX5_CLK_IPG as "ahb" clock to SDMA
    soc: rockchip: Set the proper PWM for rk3288
    clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288
    soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher
    PCI: keystone: Prevent ARM32 specific code to be compiled for ARM64
    platform/chrome: cros_ec_proto: check for NULL transfer function
    x86/PCI: Fix PCI IRQ routing table memory leak
    vfio: Fix WARNING "do not call blocking ops when !TASK_RUNNING"
    nfsd: allow fh_want_write to be called twice
  * fuse: retrieve: cap requested size to negotiated max_write
      fs/fuse/dev.c
  * nvmem: core: fix read buffer in place
      drivers/nvmem/core.c
    ALSA: hda - Register irq handler after the chip initialization
    nvme-pci: unquiesce admin queue on shutdown
    misc: pci_endpoint_test: Fix test_reg_bar to be updated in pci_endpoint_test
    iommu/vt-d: Set intel_iommu_gfx_mapped correctly
  * blk-mq: move cancel of requeue_work into blk_mq_release
      block/blk-core.c
      block/blk-mq.c
  * watchdog: fix compile time error of pretimeout governors
      drivers/watchdog/Kconfig
    watchdog: imx2_wdt: Fix set_timeout for big timeout values
    mmc: mmci: Prevent polling for busy detection in IRQ context
    uml: fix a boot splat wrt use of cpu_all_mask
  * configfs: fix possible use-after-free in configfs_register_group
      fs/configfs/dir.c
  * percpu: remove spurious lock dependency between percpu and sched
      mm/percpu.c
  * f2fs: fix to do sanity check on valid block count of segment
      fs/f2fs/segment.h
  * f2fs: fix to avoid panic in dec_valid_block_count()
      fs/f2fs/f2fs.h
  * f2fs: fix to clear dirty inode in error path of f2fs_iget()
      fs/f2fs/inode.c
  * f2fs: fix to avoid panic in do_recover_data()
      fs/f2fs/recovery.c
  * ntp: Allow TAI-UTC offset to be set to zero
      kernel/time/ntp.c
    pwm: meson: Use the spin-lock only to protect register modifications
  * EDAC/mpc85xx: Prevent building as a module
      drivers/edac/Kconfig
    objtool: Don't use ignore flag for fake jumps
    drm/bridge: adv7511: Fix low refresh rate selection
    perf/x86/intel: Allow PEBS multi-entry in watermark mode
    mfd: twl6040: Fix device init errors for ACCCTL register
    drm/nouveau/disp/dp: respect sink limits when selecting failsafe link configuration
    mfd: intel-lpss: Set the device in reset state when init
    mfd: tps65912-spi: Add missing of table registration
    drivers: thermal: tsens: Don't print error message on -EPROBE_DEFER
    thermal: rcar_gen3_thermal: disable interrupt in .remove
  * kernel/sys.c: prctl: fix false positive in validate_prctl_map()
      kernel/sys.c
    mm/slab.c: fix an infinite loop in leaks_show()
    mm/cma_debug.c: fix the break condition in cma_maxchunk_get()
  * mm/cma.c: fix the bitmap status to show failed allocation reason
      mm/cma.c
  * mm/cma.c: fix crash on CMA allocation if bitmap allocation fails
      mm/cma.c
  * mem-hotplug: fix node spanned pages when we have a node with only ZONE_MOVABLE
      mm/page_alloc.c
    hugetlbfs: on restore reserve error path retain subpool reservation
  * mm/hmm: select mmu notifier when selecting HMM
      mm/Kconfig
    ARM: prevent tracing IPI_CPU_BACKTRACE
    ipc: prevent lockup on alloc_msg and free_msg
  * sysctl: return -EINVAL if val violates minmax
      kernel/sysctl.c
  * fs/fat/file.c: issue flush after the writeback of FAT
      fs/fat/file.c
    rapidio: fix a NULL pointer dereference when create_workqueue() fails
  * UPSTREAM: binder: check for overflow when alloc for security context
      drivers/android/binder.c
  * binder: fix race between munmap() and direct reclaim
      drivers/android/binder_alloc.c
  * Revert "binder: fix handling of misaligned binder object"
      drivers/android/binder_alloc.c
    Merge 4.14.125 into android-4.14-q
Linux 4.14.125
  * ethtool: check the return value of get_regs_len
      net/core/ethtool.c
  * ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled
      include/net/arp.h
  * fuse: Add FOPEN_STREAM to use stream_open()
      fs/fuse/file.c
      include/uapi/linux/fuse.h
  * fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock
      fs/open.c
      fs/read_write.c
      include/linux/fs.h
    qmi_wwan: Add quirk for Quectel dynamic config
  * TTY: serial_core, add ->install
      drivers/tty/serial/serial_core.c
    drm/i915/fbc: disable framebuffer compression on GeminiLake
    drm/i915: Fix I915_EXEC_RING_MASK
    drm/radeon: prefer lower reference dividers
    drm/amdgpu/psp: move psp version specific function pointers to early_init
  * drm/nouveau: add kconfig option to turn off nouveau legacy contexts. (v3)
      drivers/gpu/drm/nouveau/Kconfig
    drm/gma500/cdv: Check vbt config bits when detecting lvds panels
    test_firmware: Use correct snprintf() limit
    genwqe: Prevent an integer overflow in the ioctl
    Revert "MIPS: perf: ath79: Fix perfcount IRQ assignment"
    MIPS: pistachio: Build uImage.gz by default
    MIPS: Bounds check virt_addr_valid
    i2c: xiic: Add max_read_len quirk
  * x86/power: Fix 'nosmt' vs hibernation triple fault during resume
      include/linux/cpu.h
      kernel/cpu.c
  * pstore/ram: Run without kernel crash dump region
      fs/pstore/platform.c
      fs/pstore/ram.c
  * pstore: Convert buf_lock to semaphore
      fs/pstore/platform.c
      fs/pstore/ram.c
      include/linux/pstore.h
  * pstore: Remove needless lock during console writes
      fs/pstore/platform.c
  * fuse: fallocate: fix return with locked inode
      fs/fuse/file.c
    parisc: Use implicit space register selection for loading the coherence index of I/O pdirs
  * rcu: locking and unlocking need to always be at least barriers
      include/linux/rcupdate.h
  * Revert "fib_rules: return 0 directly if an exactly same rule exists when NLM_F_EXCL not supplied"
      net/core/fib_rules.c
  * Revert "fib_rules: fix error in backport of e9919a24d302 ("fib_rules: return 0...")"
      net/core/fib_rules.c
  * ipv6: fix the check before getting the cookie in rt6_get_cookie
      include/net/ip6_fib.h
    net: sfp: read eeprom in maximum 16 byte increments
  * ipv6: use READ_ONCE() for inet->hdrincl as in ipv4
      net/ipv6/raw.c
  * ipv6: fix EFAULT on sendto with icmpv6 and hdrincl
      net/ipv6/raw.c
    pktgen: do not sleep with the thread lock held.
    net: rds: fix memory leak in rds_ib_flush_mr_pool
    net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query
  * neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit
      net/core/neighbour.c
    Fix memory leak in sctp_process_init
  * ethtool: fix potential userspace buffer overflow
      net/core/ethtool.c
    Merge 4.14.124 into android-4.14-q
Linux 4.14.124
    media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
  * binder: fix race between munmap() and direct reclaim
      drivers/android/binder_alloc.c
  * Revert "binder: fix handling of misaligned binder object"
      drivers/android/binder_alloc.c
    Revert "x86/build: Move _etext to actual end of .text"
  * include/linux/module.h: copy __init/__exit attrs to init/cleanup_module
      include/linux/module.h
  * Compiler Attributes: add support for __copy (gcc >= 9)
      include/linux/compiler-gcc.h
      include/linux/compiler_types.h
    drm/rockchip: shutdown drm subsystem on shutdown
    drm/vmwgfx: Don't send drm sysfs hotplug events on initial master set
    gcc-plugins: Fix build failures under Darwin host
    Revert "lockd: Show pid of lockd for remote locks"
    CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM
    staging: wlan-ng: fix adapter initialization failure
    staging: vc04_services: prevent integer overflow in create_pagelist()
    serial: sh-sci: disable DMA for uart_console
    ima: show rules with IMA_INMASK correctly
    doc: Cope with Sphinx logging deprecations
    doc: Cope with the deprecation of AutoReporter
    docs: Fix conf.py for Sphinx 2.0
  * kernel/signal.c: trace_signal_deliver when signal_group_exit
      kernel/signal.c
  * memcg: make it work on sparse non-0-node systems
      include/linux/list_lru.h
      mm/list_lru.c
    tty: max310x: Fix external crystal register setup
    tty: serial: msm_serial: Fix XON/XOFF
    drm/nouveau/i2c: Disable i2c bus access after ->fini()
    KVM: s390: Do not report unusabled IDs via KVM_CAP_MAX_VCPU_ID
    ALSA: hda/realtek - Set default power save node to 0
    powerpc/perf: Fix MMCRA corruption by bhrb_filter
    KVM: PPC: Book3S HV: XIVE: Do not clear IRQ data of passthrough interrupts
    Btrfs: incremental send, fix file corruption when no-holes feature is enabled
    Btrfs: fix fsync not persisting changed attributes of a directory
    Btrfs: fix race updating log root item during fsync
    Btrfs: fix wrong ctime and mtime of a directory after log replay
    scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs)
    scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove
    media: smsusb: better handle optional alignment
    media: usb: siano: Fix false-positive "uninitialized variable" warning
    media: usb: siano: Fix general protection fault in smsusb
    USB: rio500: fix memory leak in close after disconnect
    USB: rio500: refuse more than one device at a time
  * USB: Add LPM quirk for Surface Dock GigE adapter
      drivers/usb/core/quirks.c
    USB: sisusbvga: fix oops in error path of sisusb_probe
  * USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
      drivers/usb/core/config.c
    usbip: usbip_host: fix stub_dev lock context imbalance regression
    usbip: usbip_host: fix BUG: sleeping function called from invalid context
  * usb: xhci: avoid null pointer deref when bos field is NULL
      drivers/usb/host/xhci.c
  * xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic()
      drivers/usb/host/xhci.c
  * xhci: Use %zu for printing size_t type
      drivers/usb/host/xhci-ring.c
  * xhci: update bounce buffer with correct sg num
      drivers/usb/host/xhci-ring.c
  * include/linux/bitops.h: sanitize rotate primitives
      include/linux/bitops.h
    sparc64: Fix regression in non-hypervisor TLB flush xcall
    tipc: fix modprobe tipc failed after switch order of device registration
    Revert "tipc: fix modprobe tipc failed after switch order of device registration"
    xen/pciback: Don't disable PCI_COMMAND on PCI device reset.
    crypto: vmx - ghash: do nosimd fallback manually
    net: phy: marvell10g: report if the PHY fails to boot firmware
    net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value
    net: mvneta: Fix err code path of probe
    net: dsa: mv88e6xxx: fix handling of upper half of STATS_TYPE_PORT
  * ipv4/igmp: fix build error if !CONFIG_IP_MULTICAST
      net/ipv4/igmp.c
  * ipv4/igmp: fix another memory leak in igmpv3_del_delrec()
      net/ipv4/igmp.c
    bnxt_en: Fix aggregation buffer leak under OOM condition.
    net/mlx5: Allocate root ns memory using kzalloc to match kfree
    tipc: Avoid copying bytes beyond the supplied data
  * usbnet: fix kernel crash after disconnect
      drivers/net/usb/usbnet.c
    net: stmmac: fix reset gpio free missing
  * net-gro: fix use-after-free read in napi_gro_frags()
      net/core/dev.c
    net: fec: fix the clk mismatch in failed_reset path
  * llc: fix skb leak in llc_build_and_send_ui_pkt()
      net/llc/llc_output.c
  * ipv6: Consider sk_bound_dev_if when binding a raw socket to an address
      net/ipv6/raw.c
  * inet: switch IP ID generator to siphash
      include/linux/siphash.h
      include/net/netns/ipv4.h
      net/ipv4/route.c
      net/ipv6/output_core.c
  * Revert "fib_rules: return 0 directly if an exactly same rule exists when NLM_F_EXCL not supplied"
      net/core/fib_rules.c
  * Revert "UPSTREAM: fib_rules: fix error in backport of e9919a24d302 ("fib_rules: return 0...")"
      net/core/fib_rules.c
    Revert "x86/build: Move _etext to actual end of .text"
    Merge 4.14.123 into android-4.14-q
Linux 4.14.123
    NFS: Fix a double unlock from nfs_match,get_client
    vfio-ccw: Prevent quiesce function going into an infinite loop
  * drm: Wake up next in drm_read() chain if we are forced to putback the event
      drivers/gpu/drm/drm_file.c
  * drm/drv: Hold ref on parent device during drm_device lifetime
      drivers/gpu/drm/drm_drv.c
    ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM
  * spi: Fix zero length xfer bug
      drivers/spi/spi.c
    spi: rspi: Fix sequencer reset during initialization
    spi : spi-topcliff-pch: Fix to handle empty DMA buffers
    scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices
    media: saa7146: avoid high stack usage with clang
    scsi: lpfc: Fix fc4type information for FDMI
    scsi: lpfc: Fix FDMI manufacturer attribute value
    media: vimc: zero the media_device on probe
    media: go7007: avoid clang frame overflow warning with KASAN
    media: vimc: stream: fix thread state before sleep
    media: m88ds3103: serialize reset messages in m88ds3103_set_frontend
    thunderbolt: Fix to check for kmemdup failure
    hwrng: omap - Set default quality
    dmaengine: tegra210-adma: use devm_clk_*() helpers
    batman-adv: allow updating DAT entry timeouts on incoming ARP Replies
    scsi: qla4xxx: avoid freeing unallocated dma memory
  * usb: core: Add PM runtime calls to usb_hcd_platform_shutdown
      drivers/usb/core/hcd.c
    rcuperf: Fix cleanup path for invalid perf_type strings
    rcutorture: Fix cleanup path for invalid torture_type strings
    x86/mce: Fix machine_check_poll() tests for error types
    tty: ipwireless: fix missing checks for ioremap
    virtio_console: initialize vtermno value for ports
    scsi: qedf: Add missing return in qedf_post_io_req() in the fcport offload check
    media: wl128x: prevent two potential buffer overflows
    media: video-mux: fix null pointer dereferences
  * kobject: Don't trigger kobject_uevent(KOBJ_REMOVE) twice.
      lib/kobject_uevent.c
    spi: tegra114: reset controller on probe
    HID: logitech-hidpp: change low battery level threshold from 31 to 30 percent
    cxgb3/l2t: Fix undefined behaviour
    ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put
    ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put
  * HID: core: move Usage Page concatenation to Main item
      drivers/hid/hid-core.c
      include/linux/hid.h
    RDMA/hns: Fix bad endianess of port_pd variable
  * chardev: add additional check for minor range overlap
      fs/char_dev.c
    x86/ia32: Fix ia32_restore_sigcontext() AC leak
    x86/uaccess, signal: Fix AC=1 bloat
    x86/uaccess, ftrace: Fix ftrace_likely_update() vs. SMAP
  * arm64: cpu_ops: fix a leaked reference by adding missing of_node_put
      arch/arm64/kernel/cpu_ops.c
  * scsi: ufs: Avoid configuring regulator with undefined voltage range
      drivers/scsi/ufs/ufshcd.c
  * scsi: ufs: Fix regulator load and icc-level configuration
      drivers/scsi/ufs/ufshcd.c
    rtlwifi: fix potential NULL pointer dereference
    rtc: xgene: fix possible race condition
    brcmfmac: fix Oops when bringing up interface during USB disconnect
    brcmfmac: fix race during disconnect when USB completion is in progress
    brcmfmac: fix WARNING during USB disconnect in case of unempty psq
    brcmfmac: convert dev_init_lock mutex to completion
    b43: shut up clang -Wuninitialized variable warning
    brcmfmac: fix missing checks for kmemdup
    mwifiex: Fix mem leak in mwifiex_tm_cmd
    rtlwifi: fix a potential NULL pointer dereference
    iio: common: ssp_sensors: Initialize calculated_time in ssp_common_process_data
    iio: hmc5843: fix potential NULL pointer dereferences
    iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion
    x86/build: Keep local relocations with ld.lld
    block: sed-opal: fix IOC_OPAL_ENABLE_DISABLE_MBR
    cpufreq: kirkwood: fix possible object reference leak
    cpufreq: pmac32: fix possible object reference leak
    cpufreq/pasemi: fix possible object reference leak
    cpufreq: ppc_cbe: fix possible object reference leak
    s390: cio: fix cio_irb declaration
    x86/microcode: Fix the ancient deprecated microcode loading method
    s390: zcrypt: initialize variables before_use
    clk: rockchip: Make rkpwm a critical clock on rk3288
    extcon: arizona: Disable mic detect if running when driver is removed
    clk: rockchip: Fix video codec clocks on rk3288
  * PM / core: Propagate dev->power.wakeup_path when no callbacks
      drivers/base/power/main.c
    drm/amdgpu: fix old fence check in amdgpu_fence_emit
    mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
    mmc: sdhci-of-esdhc: add erratum A-009204 support
    mmc: sdhci-of-esdhc: add erratum eSDHC5 support
    mmc_spi: add a status check for spi_sync_locked
    mmc: core: make pwrseq_emmc (partially) support sleepy GPIO controllers
    scsi: libsas: Do discovery on empty PHY to update PHY info
    hwmon: (f71805f) Use request_muxed_region for Super-IO accesses
    hwmon: (pc87427) Use request_muxed_region for Super-IO accesses
    hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses
    hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses
    hwmon: (vt1211) Use request_muxed_region for Super-IO accesses
    RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure
  * arm64: vdso: Fix clock_getres() for CLOCK_REALTIME
      arch/arm64/include/asm/vdso_datapage.h
      arch/arm64/kernel/asm-offsets.c
      arch/arm64/kernel/vdso.c
    i40e: don't allow changes to HW VLAN stripping on active port VLANs
    i40e: Able to add up to 16 MAC filters on an untrusted VF
    phy: sun4i-usb: Make sure to disable PHY0 passby for peripheral mode
    x86/irq/64: Limit IST stack overflow check to #DB stack
  * USB: core: Don't unbind interfaces following device reset failure
      drivers/usb/core/hub.c
    drm/msm: a5xx: fix possible object reference leak
  * sched/core: Handle overflow in cpu_shares_write_u64
      kernel/sched/core.c
  * sched/rt: Check integer overflow at usec to nsec conversion
      kernel/sched/rt.c
  * sched/core: Check quota and period overflow at usec to nsec conversion
      kernel/sched/core.c
  * cgroup: protect cgroup->nr_(dying_)descendants by css_set_lock
      include/linux/cgroup-defs.h
      kernel/cgroup/cgroup.c
  * random: add a spinlock_t to struct batched_entropy
      drivers/char/random.c
    powerpc/64: Fix booting large kernels with STRICT_KERNEL_RWX
    powerpc/numa: improve control of topology updates
    media: pvrusb2: Prevent a buffer overflow
    media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable()
    media: stm32-dcmi: fix crash when subdev do not expose any formats
  * audit: fix a memory leak bug
      kernel/auditfilter.c
    media: ov2659: make S_FMT succeed even if requested format doesn't match
    media: au0828: stop video streaming only when last user stops
    media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper
    media: coda: clear error return value before picture run
    dmaengine: at_xdmac: remove BUG_ON macro in tasklet
    clk: rockchip: undo several noc and special clocks as critical on rk3288
    pinctrl: samsung: fix leaked of_node references
    pinctrl: pistachio: fix leaked of_node references
    HID: logitech-hidpp: use RAP instead of FAP to get the protocol version
  * mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions
      lib/strncpy_from_user.c
      lib/strnlen_user.c
    x86/mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault()
  * smpboot: Place the __percpu annotation correctly
      include/linux/smpboot.h
    x86/build: Move _etext to actual end of .text
    vfio-ccw: Release any channel program when releasing/removing vfio-ccw mdev
    vfio-ccw: Do not call flush_workqueue while holding the spinlock
    bcache: avoid clang -Wunintialized warning
    bcache: add failure check to run_cache_set() for journal replay
    bcache: fix failure in journal relplay
    bcache: return error immediately in bch_journal_replay()
    crypto: sun4i-ss - Fix invalid calculation of hash end
    net: cw1200: fix a NULL pointer dereference
    mwifiex: prevent an array overflow
    ASoC: fsl_sai: Update is_slave_mode with correct value
    libbpf: fix samples/bpf build failure due to undefined UINT32_MAX
  * mac80211/cfg80211: update bss channel on channel switch
      net/wireless/nl80211.c
    dmaengine: pl330: _stop: clear interrupt status
    w1: fix the resume command API
    scsi: qedi: Abort ep termination if offload not scheduled
    rtc: 88pm860x: prevent use-after-free on device remove
    iwlwifi: pcie: don't crash on invalid RX interrupt
    btrfs: Don't panic when we can't find a root key
    btrfs: fix panic during relocation after ENOSPC before writeback happens
    Btrfs: fix data bytes_may_use underflow with fallocate due to failed quota reserve
    scsi: qla2xxx: Avoid that lockdep complains about unsafe locking in tcm_qla2xxx_close_session()
    scsi: qla2xxx: Fix abort handling in tcm_qla2xxx_write_pending()
    scsi: qla2xxx: Fix a qla24xx_enable_msix() error path
  * sched/cpufreq: Fix kobject memleak
      drivers/cpufreq/cpufreq.c
  * arm64: Fix compiler warning from pte_unmap() with -Wunused-but-set-variable
      arch/arm64/include/asm/pgtable.h
    ARM: vdso: Remove dependency with the arch_timer driver internals
    ACPI / property: fix handling of data_nodes in acpi_get_next_subnode()
    brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler()
    spi: pxa2xx: fix SCR (divisor) calculation
  * ASoC: imx: fix fiq dependencies
      sound/soc/fsl/Kconfig
    powerpc/boot: Fix missing check of lseek() return value
    powerpc/perf: Return accordingly on invalid chip-id in
  * ASoC: hdmi-codec: unlock the device on startup errors
      sound/soc/codecs/hdmi-codec.c
    pinctrl: zte: fix leaked of_node references
    net: ena: gcc 8: fix compilation warning
    dmaengine: tegra210-dma: free dma controller in remove()
    tools/bpf: fix perf build error with uClibc (seen on ARC)
    mmc: core: Verify SD bus width
    gfs2: Fix occasional glock use-after-free
    IB/hfi1: Fix WQ_MEM_RECLAIM warning
    NFS: make nfs_match_client killable
    cxgb4: Fix error path in cxgb4_init_module
    gfs2: Fix lru_count going negative
    Revert "btrfs: Honour FITRIM range constraints during free space trim"
    net: erspan: fix use-after-free
    at76c50x-usb: Don't register led_trigger if usb_register_driver failed
    batman-adv: mcast: fix multicast tt/tvlv worker locking
  * bpf: devmap: fix use-after-free Read in __dev_map_entry_free
      kernel/bpf/devmap.c
    ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit
    media: vivid: use vfree() instead of kfree() for dev->bitmap_cap
    media: serial_ir: Fix use-after-free in serial_ir_init_module
    media: cpia2: Fix use-after-free in cpia2_exit
  * fbdev: fix WARNING in __alloc_pages_nodemask bug
      drivers/video/fbdev/core/fbcmap.c
    btrfs: honor path->skip_locking in backref code
    brcmfmac: add subtype check for event handling in data path
    brcmfmac: assure SSID length from firmware is limited
  * hugetlb: use same fault hash key for shared and private mappings
      include/linux/hugetlb.h
  * fbdev: fix divide error in fb_var_to_videomode
      drivers/video/fbdev/core/modedb.c
    btrfs: sysfs: don't leak memory when failing add fsid
    btrfs: sysfs: Fix error path kobject memory leak
    Btrfs: fix race between ranged fsync and writeback of adjacent ranges
    Btrfs: avoid fallback to transaction commit during fsync of files with holes
    Btrfs: do not abort transaction at btrfs_update_root() after failure to COW path
    gfs2: Fix sign extension bug in gfs2_update_stats
  * arm64/iommu: handle non-remapped addresses in ->mmap and ->get_sgtable
      arch/arm64/mm/dma-mapping.c
    libnvdimm/namespace: Fix label tracking error
    libnvdimm/pmem: Bypass CONFIG_HARDENED_USERCOPY overhead
    kvm: svm/avic: fix off-by-one in checking host APIC ID
    mmc: sdhci-iproc: Set NO_HISPD bit to fix HS50 data hold time problem
    mmc: sdhci-iproc: cygnus: Set NO_HISPD bit to fix HS50 data hold time problem
    crypto: vmx - CTR: always increment IV as quadword
  * Revert "scsi: sd: Keep disk read-only when re-reading partition"
      drivers/scsi/sd.c
  * sbitmap: fix improper use of smp_mb__before_atomic()
      lib/sbitmap.c
  * bio: fix improper use of smp_mb__before_atomic()
      include/linux/bio.h
    KVM: x86: fix return value for reserved EFER
  * f2fs: Fix use of number of devices
      fs/f2fs/data.c
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
      fs/f2fs/gc.c
      fs/f2fs/segment.c
  * ext4: do not delete unlinked inode from orphan list on failed truncate
      fs/ext4/inode.c
    x86: Hide the int3_emulate_call/jmp functions from UML
    x86: Hide the int3_emulate_call/jmp functions from UML
    Merge 4.14.122 into android-4.14-q
Linux 4.14.122
    fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough
    btrfs: Honour FITRIM range constraints during free space trim
  * bpf, lru: avoid messing with eviction heuristics upon syscall lookup
      kernel/bpf/hashtab.c
  * bpf: add map_lookup_elem_sys_only for lookups from syscall side
      include/linux/bpf.h
      kernel/bpf/syscall.c
  * driver core: Postpone DMA tear-down until after devres release for probe failure
      drivers/base/dd.c
    md/raid: raid5 preserve the writeback action after the parity check
    Revert "Don't jump to compute_result state from check_result state"
    perf bench numa: Add define for RUSAGE_THREAD if not present
    ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour
  * x86/mm/mem_encrypt: Disable all instrumentation for early SME setup
      lib/Makefile
  * sched/cpufreq: Fix kobject memleak
      kernel/sched/cpufreq_schedutil.c
    iwlwifi: mvm: check for length correctness in iwl_mvm_create_skb()
  * power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG
      drivers/power/supply/power_supply_sysfs.c
    KVM: arm/arm64: Ensure vcpu target is unset on reset failure
    mac80211: Fix kernel panic due to use of txq after free
    apparmorfs: fix use-after-free on symlink traversal
    securityfs: fix use-after-free on symlink traversal
    power: supply: cpcap-battery: Fix division by zero
  * xfrm4: Fix uninitialized memory read in _decode_session4
      net/ipv4/xfrm4_policy.c
  * esp4: add length check for UDP encapsulation
      net/ipv4/esp4.c
  * vti4: ipip tunnel deregistration fixes.
      net/ipv4/ip_vti.c
  * xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module
      net/ipv6/xfrm6_tunnel.c
  * xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink
      net/xfrm/xfrm_user.c
    dm delay: fix a crash when invalid device is specified
    dm zoned: Fix zone report handling
    dm cache metadata: Fix loading discard bitset
  * PCI: Work around Pericom PCIe-to-PCI bridge Retrain Link erratum
      drivers/pci/quirks.c
      include/linux/pci.h
    PCI: Factor out pcie_retrain_link() function
  * PCI: Mark Atheros AR9462 to avoid bus reset
      drivers/pci/quirks.c
  * PCI: Mark AMD Stoney Radeon R7 GPU ATS as broken
      drivers/pci/quirks.c
    fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting
    fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display
    fbdev: sm712fb: fix support for 1024x768-16 mode
    fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping VRAM
    fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA
    fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F
    fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75
    fbdev: sm712fb: fix brightness control on reboot, don't set SR30
    objtool: Allow AR to be overridden with HOSTAR
    perf intel-pt: Fix sample timestamp wrt non-taken branches
    perf intel-pt: Fix improved sample timestamp
    perf intel-pt: Fix instructions sampling rate
    memory: tegra: Fix integer overflow on tick value calculation
  * tracing: Fix partial reading of trace event's id file
      kernel/trace/trace_events.c
    ftrace/x86_64: Emulate call function while updating in breakpoint handler
    x86_64: Allow breakpoints to emulate call instructions
    x86_64: Add gap to int3 to allow for call emulation
    ceph: flush dirty inodes before proceeding with remount
    iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114
  * fuse: honor RLIMIT_FSIZE in fuse_file_fallocate
      fs/fuse/file.c
  * fuse: fix writepages on 32bit
      fs/fuse/file.c
    clk: rockchip: fix wrong clock definitions for rk3328
    clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider
    clk: hi3660: Mark clk_gate_ufs_subsys as critical
    PNFS fallback to MDS if no deviceid found
    NFS4: Fix v4.0 client state corruption when mount
    Revert "cifs: fix memory leak in SMB2_read"
    media: ov6650: Fix sensor possibly not detected on probe
    cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level()
  * of: fix clang -Wunsequenced for be32_to_cpu()
      include/linux/of.h
    p54: drop device reference count if fails to enable device
    intel_th: msu: Fix single mode with IOMMU
    md: add mddev->pers to avoid potential NULL pointer dereference
    stm class: Fix channel free in stm output free path
    parisc: Rename LEVEL to PA_ASM_LEVEL to avoid name clash with DRBD code
    parisc: Use PA_ASM_LEVEL in boot code
    parisc: Skip registering LED when running in QEMU
    parisc: Export running_on_qemu symbol for modules
  * net: Always descend into dsa/
      drivers/net/Makefile
    vsock/virtio: Initialize core virtio vsock before registering the driver
    tipc: fix modprobe tipc failed after switch order of device registration
    vsock/virtio: free packets during the socket release
    tipc: switch order of device registration to fix a crash
  * ppp: deflate: Fix possible crash in deflate_init
      drivers/net/ppp/ppp_deflate.c
    net: usb: qmi_wwan: add Telit 0x1260 and 0x1261 compositions
  * net: test nouarg before dereferencing zerocopy pointers
      include/linux/skbuff.h
    net/mlx4_core: Change the error print to info print
  * net: avoid weird emergency message
      net/core/dev.c
    Enable CONFIG_ION_SYSTEM_HEAP
    Merge 4.14.121 into android-4.14-q
Linux 4.14.121
  * ext4: fix compile error when using BUFFER_TRACE
      fs/ext4/inode.c
  * iov_iter: optimize page_copy_sane()
      lib/iov_iter.c
    KVM: x86: Skip EFER vs. guest CPUID checks for host-initiated writes
    ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug
  * ext4: fix use-after-free in dx_release()
      fs/ext4/namei.c
  * ext4: fix data corruption caused by overlapping unaligned and aligned IO
      fs/ext4/file.c
  * ext4: zero out the unused memory region in the extent tree block
      fs/ext4/extents.c
  * fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount
      fs/fs-writeback.c
  * fib_rules: fix error in backport of e9919a24d302 ("fib_rules: return 0...")
      net/core/fib_rules.c
    crypto: ccm - fix incompatibility between "ccm" and "ccm_base"
    crypto: salsa20 - don't access already-freed walk.iv
    crypto: arm64/aes-neonbs - don't access already-freed walk.iv
    ipmi:ssif: compare block number correctly for multi-part return messages
  * ext4: fix ext4_show_options for file systems w/o journal
      fs/ext4/super.c
  * ext4: actually request zeroing of inode table after grow
      fs/ext4/ioctl.c
  * ext4: fix use-after-free race with debug_want_extra_isize
      fs/ext4/super.c
    bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim()
    bcache: fix a race between cache register and cacheset unregister
    Btrfs: do not start a transaction at iterate_extent_inodes()
    Btrfs: do not start a transaction during fiemap
  * ext4: avoid drop reference to iloc.bh twice
      fs/ext4/resize.c
  * ext4: ignore e_value_offs for xattrs with value-in-ea-inode
      fs/ext4/xattr.c
  * ext4: make sanity check in mballoc more strict
      fs/ext4/mballoc.c
  * jbd2: check superblock mapped prior to committing
      fs/jbd2/journal.c
    tty/vt: fix write/write race in ioctl(KDSKBSENT) handler
    tty: vt.c: Fix TIOCL_BLANKSCREEN console blanking if blankinterval == 0
    mtd: spi-nor: intel-spi: Avoid crossing 4K address boundary on read/write
    mfd: max77620: Fix swapped FPS_PERIOD_MAX_US values
    mfd: da9063: Fix OTP control register names to match datasheets for DA9063/63L
  * userfaultfd: use RCU to free the task struct when fork fails
      kernel/fork.c
    ocfs2: fix ocfs2 read inode data panic in ocfs2_iget
  * mm/mincore.c: make mincore() more conservative
      mm/mincore.c
    bpf, arm64: remove prefetch insn in xadd mapping
    ASoC: RT5677-SPI: Disable 16Bit SPI Transfers
    ASoC: max98090: Fix restore of DAPM Muxes
    ALSA: hda/realtek - EAPD turn on later
    ALSA: hda/hdmi - Consider eld_valid when reporting jack event
    ALSA: hda/hdmi - Read the pin sense from register when repolling
  * ALSA: usb-audio: Fix a memory leak bug
      sound/usb/mixer.c
    crypto: arm/aes-neonbs - don't access already-freed walk.iv
    crypto: rockchip - update IV buffer to contain the next IV
  * crypto: gcm - fix incompatibility between "gcm" and "gcm_base"
      crypto/gcm.c
    crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest()
    crypto: crct10dif-generic - fix use via crypto_shash_digest()
  * crypto: skcipher - don't WARN on unprocessed data after slow walk step
      crypto/skcipher.c
    crypto: vmx - fix copy-paste error in CTR mode
    crypto: chacha20poly1305 - set cra_name correctly
    sched/x86: Save [ER]FLAGS on context switch
  * arm64: Save and restore OSDLR_EL1 across suspend/resume
      arch/arm64/mm/proc.S
  * arm64: Clear OSDLR_EL1 on CPU boot
      arch/arm64/kernel/debug-monitors.c
  * arm64: compat: Reduce address limit
      arch/arm64/include/asm/processor.h
    power: supply: axp288_charger: Fix unchecked return value
    ARM: exynos: Fix a leaked reference by adding missing of_node_put
    ARM: dts: exynos: Fix audio (microphone) routing on Odroid XU3
    ARM: dts: exynos: Fix interrupt for shared EINTs on Exynos5260
    objtool: Fix function fallthrough detection
    x86/speculation/mds: Improve CPU buffer clear documentation
    x86/speculation/mds: Revert CPU buffer clear on double fault exit
    PCI: hv: Add pci_destroy_slot() in pci_devices_present_work(), if necessary
    PCI: hv: Add hv_pci_remove_slots() when we unload the driver
    PCI: hv: Fix a memory leak in hv_eject_device_work()
  * locking/rwsem: Prevent decrement of reader count before increment
      kernel/locking/rwsem-xadd.c
  * net: core: another layer of lists, around PF_MEMALLOC skb handling
      include/linux/list.h
  * UPSTREAM: fib_rules: fix error in backport of e9919a24d302 ("fib_rules: return 0...")
      net/core/fib_rules.c
  * UPSTREAM: bpf: relax inode permission check for retrieving bpf program
      kernel/bpf/inode.c
    ANDROID: cuttlefish 4.14: enable CONFIG_CRYPTO_AES_NI_INTEL=y
  * BACKPORT: fix "netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'"
      include/linux/bpf.h
      kernel/bpf/inode.c
      net/netfilter/xt_bpf.c
    Merge 4.14.120 into android-4.14-q
Linux 4.14.120
    s390/speculation: Fix build error caused by bad backport
    powerpc/booke64: set RI in default MSR
    powerpc/powernv/idle: Restore IAMR after idle
    drivers/virt/fsl_hypervisor.c: prevent integer overflow in ioctl
    drivers/virt/fsl_hypervisor.c: dereferencing error pointers in ioctl
    tipc: fix hanging clients using poll with EPOLLOUT flag
  * vrf: sit mtu should not be updated when vrf netdev is the link
      net/ipv6/sit.c
    vlan: disable SIOCSHWTSTAMP in container
  * packet: Fix error path in packet_init
      net/packet/af_packet.c
    net: ucc_geth - fix Oops when changing number of buffers in the ring
    net: seeq: fix crash caused by not set dev.parent
    net: ethernet: stmmac: dwmac-sun8i: enable support of unicast filtering
    net: dsa: Fix error cleanup path in dsa_init_module
  * ipv4: Fix raw socket lookup for local traffic
      net/ipv4/raw.c
  * fib_rules: return 0 directly if an exactly same rule exists when NLM_F_EXCL not supplied
      net/core/fib_rules.c
    dpaa_eth: fix SG frame cleanup
  * bridge: Fix error path for kobject_init_and_add()
      net/bridge/br_if.c
  * bonding: fix arp_validate toggling in active-backup mode
      drivers/net/bonding/bond_options.c
    powerpc/64s: Include cpu header
    Don't jump to compute_result state from check_result state
    rtlwifi: rtl8723ae: Fix missing break in switch statement
    mwl8k: Fix rate_idx underflow
    cw1200: fix missing unlock on error in cw1200_hw_scan()
    x86/kprobes: Avoid kretprobe recursion bug
    nfc: nci: Potential off by one in ->pipes[] array
    NFC: nci: Add some bounds checking in nci_hci_cmd_received()
    mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw workqueue
    mlxsw: core: Do not use WQ_MEM_RECLAIM for mlxsw ordered workqueue
    mlxsw: core: Do not use WQ_MEM_RECLAIM for EMAD workqueue
    mlxsw: spectrum_switchdev: Add MDB entries in prepare phase
    net: fec: manage ahb clock in runtime pm
  * mm/memory.c: fix modifying of page protection by insert_pfn()
      mm/memory.c
    net: hns: Fix WARNING when hns modules installed
    x86/fpu: Don't export __kernel_fpu_{begin,end}()
    cifs: fix memory leak in SMB2_read
    drm/rockchip: fix for mailbox read validation.
    netfilter: nf_tables: warn when expr implements only one of activate/deactivate
    Input: elan_i2c - add hardware ID for multiple Lenovo laptops
    ACPICA: Namespace: remove address node from global list after method termination
  * gtp: change NET_UDP_TUNNEL dependency to select
      drivers/net/Kconfig
    net_sched: fix two more memory leaks in cls_tcindex
    xtensa: xtfpga.dtsi: fix dtc warnings about SPI
  * devres: Align data[] to ARCH_KMALLOC_MINALIGN
      drivers/base/devres.c
    vt: always call notifier with the console lock held
    arm64: dts: marvell: armada-ap806: reserve PSCI area
    RDMA/vmw_pvrdma: Return the correct opcode when creating WR
    drm/rockchip: psr: do not dereference encoder before it is null checked.
    leds: pwm: silently error out on EPROBE_DEFER
    powerpc: remove old GCC version checks
    arm64: KVM: Make VHE Stage-2 TLB invalidation operations non-interruptible
  * mm: introduce mm_[p4d|pud|pmd]_folded
      include/asm-generic/pgtable.h
    x86/vdso: Pass --eh-frame-hdr to the linker
    Btrfs: fix missing delayed iputs on unmount
    net: stmmac: Move debugfs init/exit to ->probe()/->remove()
  * staging: olpc_dcon: add a missing dependency
      drivers/staging/olpc_dcon/Kconfig
    scsi: raid_attrs: fix unused variable warning
    drm/i915: Downgrade Gen9 Plane WM latency error
  * tracing/fgraph: Fix set_graph_function from showing interrupts
      kernel/trace/trace.h
  * net: don't keep lonely packets forever in the gro hash
      net/core/dev.c
    media: ov5640: fix auto controls values when switching to manual mode
    media: ov5640: fix wrong binning value in exposure calculation
    drm/i915: Disable LP3 watermarks on all SNB machines
  * fuse: fix possibly missed wake-up after abort
      fs/fuse/dev.c
    media: adv7842: when the EDID is cleared, unconfigure CEC as well
    media: adv7604: when the EDID is cleared, unconfigure CEC as well
    media: cec: integrate cec_validate_phys_addr() in cec-api.c
    media: cec: make cec_get_edid_spa_location() an inline function
    KVM: arm/arm64: Ensure only THP is candidate for adjustment
    ima: open a new file instance if no read permissions
  * IB/rxe: Revise the ib_wr_opcode enum
      include/rdma/ib_verbs.h
      include/uapi/rdma/ib_user_verbs.h
    ACPICA: AML interpreter: add region addresses in global list during initialization
    bcache: correct dirty data statistics
    MIPS: VDSO: Reduce VDSO_RANDOMIZE_SIZE to 64MB for 64bit
    sparc64: Make corrupted user stacks more debuggable.
    sparc64: Export __node_distance.
    Input: synaptics-rmi4 - fix possible double free
    spi: ST ST95HF NFC: declare missing of table
    spi: Micrel eth switch: declare missing of table
    drm/imx: don't skip DP channel disable for background plane
    gpu: ipu-v3: dp: fix CSC handling
    selftests/net: correct the return value for run_netsocktests
    drm/sun4i: Set device driver data at bind time for use in unbind
    s390: ctcm: fix ctcm_new_device error return code
    MIPS: perf: ath79: Fix perfcount IRQ assignment
  * netfilter: ctnetlink: don't use conntrack/expect object addresses as id
      include/net/netfilter/nf_conntrack.h
      net/netfilter/nf_conntrack_core.c
      net/netfilter/nf_conntrack_netlink.c
    ipvs: do not schedule icmp errors from tunnels
    selftests: netfilter: check icmp pkttoobig errors are set as related
  * init: initialize jump labels before command line option parsing
      init/main.c
  * mm: fix inactive list balancing between NUMA nodes and cgroups
      mm/vmscan.c
    tools lib traceevent: Fix missing equality check for strcmp
    KVM: x86: avoid misreporting level-triggered irqs as edge-triggered in tracing
  * KVM: fix spectrev1 gadgets
      include/linux/kvm_host.h
  * x86/reboot, efi: Use EFI reboot for Acer TravelMate X514-51T
      include/linux/efi.h
    s390/pkey: add one more argument space for debug feature entry
    mISDN: Check address length before reading address family
    clocksource/drivers/oxnas: Fix OX820 compatible
    s390/3270: fix lockdep false positive on view->lock
  * nl80211: Add NL80211_FLAG_CLEAR_SKB flag for other NL commands
      net/wireless/nl80211.c
    mac80211: fix memory accounting with A-MSDU aggregation
    mac80211: Increase MAX_MSG_LEN
    mac80211: fix unaligned access in mesh table hash function
    s390/dasd: Fix capacity calculation for large volumes
    libnvdimm/btt: Fix a kmemdup failure check
  * HID: input: add mapping for "Toggle Display" key
      drivers/hid/hid-input.c
  * HID: input: add mapping for keyboard Brightness Up/Down/Toggle keys
      drivers/hid/hid-input.c
  * HID: input: add mapping for Expose/Overview key
      drivers/hid/hid-input.c
    libnvdimm/namespace: Fix a potential NULL pointer dereference
    iio: adc: xilinx: fix potential use-after-free on remove
    USB: serial: fix unthrottle races
  * kernfs: fix barrier usage in __kernfs_new_node()
      fs/kernfs/dir.c
    hwmon: (pwm-fan) Disable PWM if fetching cooling data fails
    platform/x86: thinkpad_acpi: Disable Bluetooth for some machines
    platform/x86: sony-laptop: Fix unintentional fall-through
  * netfilter: compat: initialize all fields in xt_init
      net/netfilter/x_tables.c
    ANDROID: cuttlefish_defconfig: Disable DEVTMPFS
  * ANDROID: block/cfq-iosched: make group_idle per io cgroup tunable
      block/cfq-iosched.c
    ANDROID: Move from clang r349610 to r353983c.
    Merge 4.14.119 into android-4.14-q
Linux 4.14.119
    x86/speculation/mds: Fix documentation typo
    Documentation: Correct the possible MDS sysfs values
    x86/mds: Add MDSUM variant to the MDS documentation
    x86/speculation/mds: Add 'mitigations=' support for MDS
    s390/speculation: Support 'mitigations=' cmdline option
    powerpc/speculation: Support 'mitigations=' cmdline option
    x86/speculation: Support 'mitigations=' cmdline option
  * cpu/speculation: Add 'mitigations=' cmdline option
      include/linux/cpu.h
      kernel/cpu.c
    x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off
    x86/speculation/mds: Fix comment
    x86/speculation/mds: Add SMT warning message
    x86/speculation: Move arch_smt_update() call to after mitigation decisions
    x86/speculation/mds: Add mds=full,nosmt cmdline option
    Documentation: Add MDS vulnerability documentation
    Documentation: Move L1TF to separate directory
    x86/speculation/mds: Add mitigation mode VMWERV
  * x86/speculation/mds: Add sysfs reporting for MDS
      drivers/base/cpu.c
      include/linux/cpu.h
    x86/speculation/mds: Add mitigation control for MDS
    x86/speculation/mds: Conditionally clear CPU buffers on idle entry
    x86/kvm/vmx: Add MDS protection when L1D Flush is not active
    x86/speculation/mds: Clear CPU buffers on exit to user
    x86/speculation/mds: Add mds_clear_cpu_buffers()
    x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests
    x86/speculation/mds: Add BUG_MSBDS_ONLY
    x86/speculation/mds: Add basic bug infrastructure for MDS
    x86/speculation: Consolidate CPU whitelists
    x86/msr-index: Cleanup bit defines
  * locking/atomics, asm-generic: Move some macros from <linux/bitops.h> to a new <linux/bits.h> file
      include/linux/bitops.h
      include/linux/bits.h
    kvm: x86: Report STIBP on GET_SUPPORTED_CPUID
    x86/cpu: Sanitize FAM6_ATOM naming
    Documentation/l1tf: Fix small spelling typo
    x86/speculation: Simplify the CPU bug detection logic
    Merge 4.14.118 into android-4.14-q
Linux 4.14.118
  * arm64: futex: Bound number of LDXR/STXR loops in FUTEX_WAKE_OP
      arch/arm64/include/asm/futex.h
  * locking/futex: Allow low-level atomic operations to return -EAGAIN
      kernel/futex.c
    ASoC: Intel: avoid Oops if DMA setup fails
    UAS: fix alignment of scatter/gather segments
  * Bluetooth: Align minimum encryption key size for LE and BR/EDR connections
      include/net/bluetooth/hci_core.h
      net/bluetooth/hci_conn.c
    Bluetooth: hidp: fix buffer overflow
    scsi: qla2xxx: Fix incorrect region-size setting in optrom SYSFS routines
    intel_th: pci: Add Comet Lake support
  * usb-storage: Set virt_boundary_mask to avoid SG overflows
      drivers/usb/storage/scsiglue.c
    USB: cdc-acm: fix unthrottle races
    USB: serial: f81232: fix interrupt worker not stop
  * usb: dwc3: Fix default lpm_nyet_threshold value
      drivers/usb/dwc3/core.c
  * genirq: Prevent use-after-free and work list corruption
      kernel/irq/manage.c
    iommu/amd: Set exclusion range correctly
    platform/x86: pmc_atom: Drop __initconst on dmi table
    virtio-blk: limit number of hw queues by nr_cpu_ids
    ASoC: Intel: kbl: fix wrong number of channels
    drm/mediatek: fix possible object reference leak
    scsi: csiostor: fix missing data copy in csio_scsi_err_handler()
    RDMA/vmw_pvrdma: Fix memory leak on pvrdma_pci_remove
    virtio_pci: fix a NULL pointer reference in vp_del_vqs
    slab: fix a crash by reading /proc/slab_allocators
    ASoC: rockchip: pdm: fix regmap_ops hang issue
  * linux/kernel.h: Use parentheses around argument in u64_to_user_ptr()
      include/linux/kernel.h
    perf/x86/intel: Initialize TFA MSR
    perf/x86/intel: Fix handling of wakeup_events for multi-entry PEBS
    drm/mediatek: Fix an error code in mtk_hdmi_dt_parse_pdata()
    ASoC: tlv320aic32x4: Fix Common Pins
    MIPS: KGDB: fix kgdb support for SMP platforms.
    IB/hfi1: Eliminate opcode tests on mr deref
    ASoC: cs4270: Set auto-increment bit for register writes
    ASoC: wm_adsp: Add locking to wm_adsp2_bus_error
    ASoC: samsung: odroid: Fix clock configuration for 44100 sample rate
    ASoC: nau8810: fix the issue of widget with prefixed name
    ASoC: nau8824: fix the issue of the widget with prefix name
  * ASoC:soc-pcm:fix a codec fixup issue in TDM case
      sound/soc/soc-pcm.c
  * ASoC: hdmi-codec: fix S/PDIF DAI
      sound/soc/codecs/hdmi-codec.c
    staging: greybus: power_supply: fix prop-descriptor request size
    ubsan: Fix nasty -Wbuiltin-declaration-mismatch GCC-9 warnings
    Drivers: hv: vmbus: Remove the undesired put_cpu_ptr() in hv_synic_cleanup()
    scsi: libsas: fix a race condition when smp task timeout
    ANDROID: cuttlefish_defconfig: Enable CONFIG_CPUSETS and CONFIG_CGROUP_SCHEDTUNE
    Merge 4.14.117 into android-4.14-q
Linux 4.14.117
    mm/kmemleak.c: fix unused-function warning
    media: v4l2: i2c: ov7670: Fix PLL bypass register values
    i2c: i2c-stm32f7: Fix SDADEL minimum formula
    clk: x86: Add system specific quirk to mark clocks as critical
    x86/mce: Improve error message when kernel cannot recover, p2
    powerpc/mm/hash: Handle mmap_min_addr correctly in get_unmapped_area topdown search
  * selinux: never allow relabeling on context mounts
      security/selinux/hooks.c
    Input: stmfts - acknowledge that setting brightness is a blocking call
    Input: snvs_pwrkey - initialize necessary driver data before enabling IRQ
    IB/core: Destroy QP if XRC QP fails
    IB/core: Fix potential memory leak while creating MAD agents
    IB/core: Unregister notifier before freeing MAD security
    ASoC: stm32: fix sai driver name initialisation
    scsi: RDMA/srpt: Fix a credit leak for aborted commands
    staging: iio: adt7316: fix the dac write calculation
    staging: iio: adt7316: fix the dac read calculation
    staging: iio: adt7316: allow adt751x to use internal vref for all dacs
    Bluetooth: btusb: request wake pin with NOAUTOEN
    perf/x86/amd: Update generic hardware cache events for Family 17h
    ARM: iop: don't use using 64-bit DMA masks
    ARM: orion: don't use using 64-bit DMA masks
    xsysace: Fix error handling in ace_setup
    sh: fix multiple function definition build errors
    hugetlbfs: fix memory leak for resv_map
    kmemleak: powerpc: skip scanning holes in the .bss section
    net: hns: Fix WARNING when remove HNS driver with SMMU enabled
    net: hns: fix ICMP6 neighbor solicitation messages discard problem
    net: hns: Fix probabilistic memory overwrite when HNS driver initialized
    net: hns: Use NAPI_POLL_WEIGHT for hns driver
    net: hns: fix KASAN: use-after-free in hns_nic_net_xmit_hw()
    scsi: storvsc: Fix calculation of sub-channel count
  * scsi: core: add new RDAC LENOVO/DE_Series device
      drivers/scsi/scsi_devinfo.c
    vfio/pci: use correct format characters
  * HID: input: add mapping for Assistant key
      drivers/hid/hid-input.c
    rtc: da9063: set uie_unsupported when relevant
  * debugfs: fix use-after-free on symlink traversal
      fs/debugfs/inode.c
    jffs2: fix use-after-free on symlink traversal
    net: stmmac: don't log oversized frames
    net: stmmac: fix dropping of multi-descriptor RX frames
    net: stmmac: don't overwrite discard_frame status
    net: stmmac: ratelimit RX error logs
  * bonding: show full hw address in sysfs for slave entries
      drivers/net/bonding/bond_sysfs_slave.c
    net/mlx5: E-Switch, Fix esw manager vport indication for more vport commands
    igb: Fix WARN_ONCE on runtime suspend
    ARM: dts: rockchip: Fix gpu opp node names for rk3288
    batman-adv: Reduce tt_global hash refcnt only for removed entry
    batman-adv: Reduce tt_local hash refcnt only for removed entry
    batman-adv: Reduce claim hash refcnt only for removed entry
    rtc: sh: Fix invalid alarm warning for non-enabled alarm
  * HID: debug: fix race condition with between rdesc_show() and device removal
      drivers/hid/hid-debug.c
    HID: logitech: check the return value of create_singlethread_workqueue
    nvme-loop: init nvmet_ctrl fatal_err_work when allocate
  * mm: do not stall register_shrinker()
      mm/vmscan.c
  * USB: core: Fix bug caused by duplicate interface PM usage counter
      drivers/usb/core/driver.c
      include/linux/usb.h
  * USB: core: Fix unterminated string returned by usb_string()
      drivers/usb/core/message.c
    usb: usbip: fix isoc packet num validation in get_pipe
    USB: w1 ds2490: Fix bug caused by improper use of altsetting array
    USB: yurex: Fix protection fault after device removal
    ALSA: hda/realtek - Fixed Dell AIO speaker noise
    ALSA: hda/realtek - Add new Dell platform for headset mode
    caif: reduce stack size with KASAN
  * arm64: only advance singlestep for user instruction traps
      arch/arm64/kernel/traps.c
  * arm64: Fix single stepping in kernel traps
      arch/arm64/include/asm/traps.h
      arch/arm64/kernel/armv8_deprecated.c
      arch/arm64/kernel/cpufeature.c
      arch/arm64/kernel/traps.c
  * kasan: prevent compiler from optimizing away memset in tests
      lib/Makefile
    kasan: remove redundant initialization of variable 'real_size'
    net: dsa: bcm_sf2: fix buffer overflow doing set_rxnfc
    net: phy: marvell: Fix buffer overrun with stats counters
    rxrpc: Fix net namespace cleanup
    bnxt_en: Free short FW command HWRM memory in error path in bnxt_init_one()
    bnxt_en: Improve multicast address setup logic.
  * packet: validate msg_namelen in send directly
      net/packet/af_packet.c
    sctp: avoid running the sctp state machine recursively
  * ipv6: invert flowlabel sharing check in process and user mode
      net/ipv6/ip6_flowlabel.c
  * ipv6/flowlabel: wait rcu grace period before put_pid()
      net/ipv6/ip6_flowlabel.c
  * ipv4: ip_do_fragment: Preserve skb_iif during fragmentation
      net/ipv4/ip_output.c
    ALSA: line6: use dynamic buffers
    Merge 4.14.116 into android-4.14-q
Linux 4.14.116
    leds: pca9532: fix a potential NULL pointer dereference
  * ptrace: take into account saved_sigmask in PTRACE{GET,SET}SIGMASK
      include/linux/sched/signal.h
      kernel/ptrace.c
    iommu/amd: Reserve exclusion range in iova-domain
    kconfig/[mn]conf: handle backspace (^H) key
  * gpio: of: Fix of_gpiochip_add() error path
      drivers/gpio/gpiolib-of.c
    libata: fix using DMA buffers on stack
    scsi: zfcp: reduce flood of fcrscn1 trace records on multi-element RSCN
    ceph: fix use-after-free on symlink traversal
    usb: u132-hcd: fix resource leak
    usb: usb251xb: fix to avoid potential NULL pointer dereference
    scsi: qla4xxx: fix a potential NULL pointer dereference
    drm/meson: Uninstall IRQ handler
    drm/meson: Fix invalid pointer in meson_drv_unbind()
    gpio: aspeed: fix a potential NULL pointer dereference
    net: ethernet: ti: fix possible object reference leak
    net: ibm: fix possible object reference leak
    net: xilinx: fix possible object reference leak
    NFS: Fix a typo in nfs_init_timeout_values()
    ARM: dts: imx6qdl: Fix typo in imx6qdl-icore-rqs.dtsi
  * net/sched: don't dereference a->goto_chain to read the chain index
      include/net/tc_act/tc_gact.h
    net: macb: Add null check for PCLK and HCLK
    staging: rtlwifi: Fix potential NULL pointer dereference of kzalloc
    staging: rtl8712: uninitialized memory in read_bbreg_hdl()
    staging: rtlwifi: rtl8822b: fix to avoid potential NULL pointer dereference
    staging: rtl8188eu: Fix potential NULL pointer dereference of kcalloc
    net: ks8851: Set initial carrier state to down
    net: ks8851: Delay requesting IRQ until opened
    net: ks8851: Reassert reset pin if chip ID check fails
    net: ks8851: Dequeue RX packets explicitly
    ARM: dts: pfla02: increase phy reset duration
    usb: gadget: net2272: Fix net2272_dequeue()
    usb: gadget: net2280: Fix net2280_dequeue()
    usb: gadget: net2280: Fix overrun of OUT messages
    KVM: arm/arm64: vgic-its: Take the srcu lock when parsing the memslots
    serial: ar933x_uart: Fix build failure with disabled console
    sc16is7xx: missing unregister/delete driver on error in sc16is7xx_init()
    s390/qeth: fix race when initializing the IP address table
    netfilter: bridge: set skb transport_header before entering NF_INET_PRE_ROUTING
    netfilter: nft_set_rbtree: check for inactive element after flag mismatch
    qlcnic: Avoid potential NULL pointer dereference
    s390: limit brk randomization to 32MB
    ARM: dts: bcm283x: Fix hdmi hpd gpio pull
  * fs: prevent page refcount overflow in pipe_buf_get
      fs/fuse/dev.c
      fs/pipe.c
      fs/splice.c
      include/linux/pipe_fs_i.h
      kernel/trace/trace.c
  * mm: prevent get_user_pages() from overflowing page refcount
      mm/gup.c
  * mm: add 'try_get_page()' helper function
      include/linux/mm.h
  * mm: make page ref count overflow check tighter and more explicit
      include/linux/mm.h
    usbnet: ipheth: fix potential null pointer dereference in ipheth_carrier_set
    usbnet: ipheth: prevent TX queue timeouts when device not ready
  * selinux: use kernel linux/socket.h for genheaders and mdp
      scripts/selinux/genheaders/genheaders.c
      scripts/selinux/mdp/mdp.c
      security/selinux/include/classmap.h
    Merge 4.14.115 into android-4.14-q
Linux 4.14.115
    Documentation: Add nospectre_v1 parameter
    powerpc/fsl: Add FSL_PPC_BOOK3E as supported arch for nospectre_v2 boot arg
  * ipv4: set the tcp_min_rtt_wlen range from 0 to one day
      net/ipv4/sysctl_net_ipv4.c
    net/rose: fix unbound loop in rose_loopback_timer()
    net/rose: Convert timers to use timer_setup()
    team: fix possible recursive locking when add slaves
    stmmac: pci: Adjust IOT2000 matching
    net: stmmac: move stmmac_check_ether_addr() to driver probe
    net: rds: exchange of 8K and 1M pool
    net/mlx5e: ethtool, Remove unsupported SFP EEPROM high pages query
    mlxsw: spectrum: Fix autoneg status in ethtool
  * ipv4: add sanity checks in ipv4_link_failure()
      net/ipv4/route.c
  * Revert "block/loop: Use global lock for ioctl() operation."
      drivers/block/loop.c
      drivers/block/loop.h
  * mm: Fix warning in insert_pfn()
      mm/memory.c
    x86/retpolines: Disable switch jump tables when retpolines are enabled
    x86, retpolines: Raise limit for generating indirect calls from switch-case
    dm integrity: change memcmp to strncmp in dm_integrity_ctr
    tipc: check link name with right length in tipc_nl_compat_link_set
    tipc: check bearer name with right length in tipc_nl_compat_bearer_enable
    fm10k: Fix a potential NULL pointer dereference
  * netfilter: ebtables: CONFIG_COMPAT: drop a bogus WARN_ON
      net/bridge/netfilter/ebtables.c
    NFS: Forbid setting AF_INET6 to "struct sockaddr_in"->sin_family.
  * sched/deadline: Correctly handle active 0-lag timers
      kernel/sched/deadline.c
  * binder: fix handling of misaligned binder object
      drivers/android/binder_alloc.c
    ipvs: fix warning on unused variable
  * fs/proc/proc_sysctl.c: Fix a NULL pointer dereference
      fs/proc/proc_sysctl.c
    intel_th: gth: Fix an off-by-one in output unassigning
  * slip: make slhc_free() silently accept an error pointer
      drivers/net/slip/slhc.c
    tipc: handle the err returned from cmd header function
    vsock/virtio: fix kernel panic from virtio_transport_reset_no_sock
  * ext4: fix some error pointer dereferences
      fs/ext4/xattr.c
  * USB: Consolidate LPM checks to avoid enabling LPM twice
      drivers/usb/core/driver.c
      drivers/usb/core/hub.c
      drivers/usb/core/message.c
  * USB: Add new USB LPM helpers
      drivers/usb/core/driver.c
      drivers/usb/core/hub.c
      drivers/usb/core/message.c
      drivers/usb/core/sysfs.c
      drivers/usb/core/usb.h
    drm/vc4: Fix compilation error reported by kbuild test bot
    Revert "drm/i915/fbdev: Actually configure untiled displays"
    drm/vc4: Fix memory leak during gpu reset.
    ARM: 8857/1: efi: enable CP15 DMB instructions before cleaning the cache
    dmaengine: sh: rcar-dmac: With cyclic DMA residue 0 is valid
    vfio/type1: Limit DMA mappings per container
    Input: synaptics-rmi4 - write config register values to the right offset
    sunrpc: don't mark uninitialised items as VALID.
    nfsd: Don't release the callback slot unless it was actually held
    ceph: fix ci->i_head_snapc leak
    ceph: ensure d_name stability in ceph_dentry_hash()
    ceph: only use d_name directly when parent is locked
  * sched/numa: Fix a possible divide-by-zero
      kernel/sched/fair.c
    IB/rdmavt: Fix frwr memory registration
  * trace: Fix preempt_enable_no_resched() abuse
      kernel/trace/ring_buffer.c
    MIPS: scall64-o32: Fix indirect syscall number load
  * lib/Kconfig.debug: fix build error without CONFIG_BLOCK
      lib/Kconfig.debug
  * zram: pass down the bvec we need to read into in the work struct
      drivers/block/zram/zram_drv.c
  * tracing: Fix buffer_ref pipe ops
      fs/splice.c
      include/linux/pipe_fs_i.h
      kernel/trace/trace.c
  * tracing: Fix a memory leak by early error exit in trace_pid_write()
      kernel/trace/trace.c
    cifs: do not attempt cifs operation on smb2+ rename error
  * kbuild: simplify ld-option implementation
      scripts/Kbuild.include
    Merge 4.14.114 into android-4.14-q
Linux 4.14.114
  * kernel/sysctl.c: fix out-of-bounds access when setting file-max
      kernel/sysctl.c
    Revert "locking/lockdep: Add debug_locks check in __lock_downgrade()"
    i2c-hid: properly terminate i2c_hid_dmi_desc_override_table[] array
    xfs: hold xfs_buf locked between shortform->leaf conversion and the addition of an attribute
    xfs: add the ability to join a held buffer to a defer_ops
  * iomap: report collisions between directio and buffered writes to userspace
      fs/direct-io.c
      include/linux/fs.h
    tools include: Adopt linux/bits.h
  * percpu: stop printing kernel addresses
      mm/percpu.c
  * ALSA: info: Fix racy addition/deletion of nodes
      sound/core/info.c
  * mm/vmstat.c: fix /proc/vmstat format for CONFIG_DEBUG_TLBFLUSH=y CONFIG_SMP=n
      mm/vmstat.c
    device_cgroup: fix RCU imbalance in error case
  * sched/fair: Limit sched_cfs_period_timer() loop to avoid hard lockup
      kernel/sched/fair.c
  * Revert "kbuild: use -Oz instead of -Os when using clang"
      Makefile
  * net: IP6 defrag: use rbtrees in nf_conntrack_reasm.c
      net/ipv6/netfilter/nf_conntrack_reasm.c
  * net: IP6 defrag: use rbtrees for IPv6 defrag
      include/net/ipv6_frag.h
      net/ipv6/reassembly.c
  * ipv6: remove dependency of nf_defrag_ipv6 on ipv6 module
      include/net/ipv6.h
      include/net/ipv6_frag.h
      net/ipv6/netfilter/nf_conntrack_reasm.c
      net/ipv6/netfilter/nf_defrag_ipv6_hooks.c
      net/ipv6/reassembly.c
  * net: IP defrag: encapsulate rbtree defrag code into callable functions
      include/net/inet_frag.h
      net/ipv4/inet_fragment.c
      net/ipv4/ip_fragment.c
  * ipv6: frags: fix a lockdep false positive
      net/ipv6/reassembly.c
    tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete
  * modpost: file2alias: check prototype of handler
      scripts/mod/file2alias.c
  * modpost: file2alias: go back to simple devtable lookup
      scripts/mod/file2alias.c
    mmc: sdhci: Handle auto-command errors
    mmc: sdhci: Rename SDHCI_ACMD12_ERR and SDHCI_INT_ACMD12ERR
    mmc: sdhci: Fix data command CRC error handling
    crypto: crypto4xx - properly set IV after de- and encrypt
    x86/speculation: Prevent deadlock on ssb_state::lock
    perf/x86: Fix incorrect PEBS_REGS
    x86/cpu/bugs: Use __initconst for 'const' init data
    perf/x86/amd: Add event map for AMD Family 17h
    mac80211: do not call driver wake_tx_queue op during reconfig
    rt2x00: do not increment sequence number while re-transmitting
    kprobes: Fix error check when reusing optimized probes
    kprobes: Mark ftrace mcount handler functions nokprobe
  * x86/kprobes: Verify stack frame on kretprobe
      include/linux/kprobes.h
  * arm64: futex: Restore oldval initialization to work around buggy compilers
      arch/arm64/include/asm/futex.h
    crypto: x86/poly1305 - fix overflow during partial reduction
  * coredump: fix race condition between mmget_not_zero()/get_task_mm() and core dumping
      fs/proc/task_mmu.c
      include/linux/sched/mm.h
      mm/mmap.c
    Revert "svm: Fix AVIC incomplete IPI emulation"
    Revert "scsi: fcoe: clear FC_RP_STARTED flags when receiving a LOGO"
  * scsi: core: set result when the command cannot be dispatched
      drivers/scsi/scsi_lib.c
  * ALSA: core: Fix card races between register and disconnect
      sound/core/init.c
    ALSA: hda/realtek - add two more pin configuration sets to quirk table
    staging: comedi: ni_usb6501: Fix possible double-free of ->usb_rx_buf
    staging: comedi: ni_usb6501: Fix use of uninitialized mutex
    staging: comedi: vmk80xx: Fix possible double-free of ->usb_rx_buf
    staging: comedi: vmk80xx: Fix use of uninitialized semaphore
    io: accel: kxcjk1013: restore the range after resume.
  * iio: core: fix a possible circular locking dependency
      drivers/iio/industrialio-core.c
    iio: adc: at91: disable adc channel interrupt in timeout case
    iio: Fix scan mask selection
    iio: dac: mcp4725: add missing powerdown bits in store eeprom
    iio: ad_sigma_delta: select channel when reading register
    iio: cros_ec: Fix the maths for gyro scale calculation
    iio/gyro/bmg160: Use millidegrees for temperature scale
    iio: gyro: mpu3050: fix chip ID reading
    staging: iio: ad7192: Fix ad7193 channel address
    Staging: iio: meter: fixed typo
    KVM: x86: svm: make sure NMI is injected after nmi_singlestep
    KVM: x86: Don't clear EFER during SMM transitions for 32-bit vCPU
    CIFS: keep FileInfo handle live during oplock break
    net: thunderx: don't allow jumbo frames with XDP
    net: thunderx: raise XDP MTU to 1508
  * ipv4: ensure rcu_read_lock() in ipv4_link_failure()
      net/ipv4/route.c
  * ipv4: recompile ip options in ipv4_link_failure
      net/ipv4/route.c
    vhost: reject zero size iova range
    team: set slave to promisc if team is already in promisc mode
  * tcp: tcp_grow_window() needs to respect tcp_space()
      net/ipv4/tcp_input.c
    net: fou: do not use guehdr after iptunnel_pull_offloads in gue_udp_recv
  * net: bridge: multicast: use rcu to access port list from br_multicast_start_querier
      net/bridge/br_multicast.c
  * net: bridge: fix per-port af_packet sockets
      net/bridge/br_input.c
    net: atm: Fix potential Spectre v1 vulnerabilities
  * bonding: fix event handling for stacked bonds
      drivers/net/bonding/bond_main.c
    ANDROID: cuttlefish_defconfig: Enable CONFIG_XFRM_STATISTICS
    Merge 4.14.113 into android-4.14-q
Linux 4.14.113
  * appletalk: Fix compile regression
      include/linux/atalk.h
    mm: hide incomplete nr_indirectly_reclaimable in sysfs
    net: stmmac: Set dma ring length before enabling the DMA
    bpf: Fix selftests are changes for CVE 2019-7308
  * bpf: fix sanitation rewrite in case of non-pointers
      kernel/bpf/verifier.c
  * bpf: do not restore dst_reg when cur_state is freed
      kernel/bpf/verifier.c
  * bpf: fix inner map masking to prevent oob under speculation
      kernel/bpf/map_in_map.c
  * bpf: fix sanitation of alu op with pointer / scalar type from different paths
      include/linux/bpf_verifier.h
      kernel/bpf/verifier.c
  * bpf: prevent out of bounds speculation on pointer arithmetic
      include/linux/bpf_verifier.h
      kernel/bpf/verifier.c
  * bpf: fix check_map_access smin_value test when pointer contains offset
      kernel/bpf/verifier.c
  * bpf: restrict unknown scalars of mixed signed bounds for unprivileged
      kernel/bpf/verifier.c
  * bpf: restrict stack pointer arithmetic for unprivileged
      kernel/bpf/verifier.c
  * bpf: restrict map value pointer arithmetic for unprivileged
      kernel/bpf/verifier.c
  * bpf: enable access to ax register also from verifier rewrite
      include/linux/filter.h
      kernel/bpf/core.c
  * bpf: move tmp variable into ax register in interpreter
      include/linux/filter.h
      kernel/bpf/core.c
  * bpf: move {prev_,}insn_idx into verifier env
      include/linux/bpf_verifier.h
      kernel/bpf/verifier.c
  * bpf: fix stack state printing in verifier log
      kernel/bpf/verifier.c
  * bpf: fix verifier NULL pointer dereference
      kernel/bpf/verifier.c
  * bpf: fix verifier memory leaks
      kernel/bpf/verifier.c
  * bpf: reduce verifier memory consumption
      include/linux/bpf_verifier.h
      kernel/bpf/verifier.c
    dm: disable CRYPTO_TFM_REQ_MAY_SLEEP to fix a GFP_KERNEL recursion deadlock
  * bpf: fix use after free in bpf_evict_inode
      kernel/bpf/inode.c
  * include/linux/swap.h: use offsetof() instead of custom __swapoffset macro
      include/linux/swap.h
  * lib/div64.c: off by one in shift
      lib/div64.c
  * appletalk: Fix use-after-free in atalk_proc_exit
      include/linux/atalk.h
    drm/amdkfd: use init_mqd function to allocate object for hid_mqd (CI)
    ARM: 8839/1: kprobe: make patch_lock a raw_spinlock_t
    drm/nouveau/volt/gf117: fix speedo readout register
    coresight: cpu-debug: Support for CA73 CPUs
    Revert "ACPI / EC: Remove old CLEAR_ON_RESUME quirk"
    crypto: axis - fix for recursive locking from bottom half
    drm/panel: panel-innolux: set display off in innolux_panel_unprepare
  * lkdtm: Add tests for NULL pointer dereference
      drivers/misc/lkdtm.h
      drivers/misc/lkdtm_core.c
      drivers/misc/lkdtm_perms.c
  * lkdtm: Print real addresses
      drivers/misc/lkdtm_perms.c
    soc/tegra: pmc: Drop locking from tegra_powergate_is_powered()
    iommu/dmar: Fix buffer overflow during PCI bus notification
    crypto: sha512/arm - fix crash bug in Thumb2 build
    crypto: sha256/arm - fix crash bug in Thumb2 build
    kernel: hung_task.c: disable on suspend
    cifs: fallback to older infolevels on findfirst queryinfo retry
  * compiler.h: update definition of unreachable()
      include/linux/compiler.h
    KVM: nVMX: restore host state in nested_vmx_vmexit for VMFail
    ACPI / SBS: Fix GPE storm on recent MacBookPro's
    usbip: fix vhci_hcd controller counting
    ARM: samsung: Limit SAMSUNG_PM_CHECK config option to non-Exynos platforms
    HID: i2c-hid: override HID descriptors for certain devices
    media: au0828: cannot kfree dev before usb disconnect
    powerpc/pseries: Remove prrn_work workqueue
    serial: uartps: console_setup() can't be placed to init section
    netfilter: xt_cgroup: shrink size of v2 path
  * f2fs: fix to do sanity check with current segment number
      fs/f2fs/super.c
    9p locks: add mount option for lock retry interval
    9p: do not trust pdu content for stat item size
    rsi: improve kernel thread handling to fix kernel panic
    gpio: pxa: handle corner case of unprobed device
  * ext4: prohibit fstrim in norecovery mode
      fs/ext4/ioctl.c
    fix incorrect error code mapping for OBJECTID_NOT_FOUND
    x86/hw_breakpoints: Make default case in hw_breakpoint_arch_parse() return an error
    iommu/vt-d: Check capability before disabling protected memory
    drm/nouveau/debugfs: Fix check of pm_runtime_get_sync failure
    x86/cpu/cyrix: Use correct macros for Cyrix calls on Geode processors
    x86/hpet: Prevent potential NULL pointer dereference
    irqchip/mbigen: Don't clear eventid when freeing an MSI
    perf tests: Fix a memory leak in test__perf_evsel__tp_sched_test()
    perf tests: Fix memory leak by expr__find_other() in test__expr()
    perf tests: Fix a memory leak of cpu_map object in the openat_syscall_event_on_all_cpus test
    perf evsel: Free evsel->counts in perf_evsel__exit()
    perf hist: Add missing map__put() in error case
    perf top: Fix error handling in cmd_top()
    perf build-id: Fix memory leak in print_sdt_events()
    perf config: Fix a memory leak in collect_config()
    perf config: Fix an error in the config template documentation
    perf list: Don't forget to drop the reference to the allocated thread_map
    tools/power turbostat: return the exit status of a command
    x86/mm: Don't leak kernel addresses
    scsi: iscsi: flush running unbind operations when removing a session
    thermal/intel_powerclamp: fix truncated kthread name
    thermal/int340x_thermal: fix mode setting
    thermal/int340x_thermal: Add additional UUIDs
    thermal: bcm2835: Fix crash in bcm2835_thermal_debugfs
    thermal/intel_powerclamp: fix __percpu declaration of worker_data
    ALSA: opl3: fix mismatch between snd_opl3_drum_switch definition and declaration
    mmc: davinci: remove extraneous __init annotation
    IB/mlx4: Fix race condition between catas error reset and aliasguid flows
    auxdisplay: hd44780: Fix memory leak on ->remove()
    ALSA: sb8: add a check for request_region
    ALSA: echoaudio: add a check for ioremap_nocache
  * ext4: report real fs size after failed resize
      fs/ext4/resize.c
  * ext4: add missing brelse() in add_new_gdb_meta_bg()
      fs/ext4/resize.c
  * perf/core: Restore mmap record type correctly
      kernel/events/core.c
    arc: hsdk_defconfig: Enable CONFIG_BLK_DEV_RAM
    ARC: u-boot args: check that magic number is correct
    ANDROID: cuttlefish_defconfig: Enable L2TP/PPTP
    Make arm64 serial port config compatible with crosvm
  * ANDROID: Makefile: Properly resolve 4.14.112 merge
      Makefile
    Merge 4.14.112 into android-4.14-q
Linux 4.14.112
    arm64: dts: rockchip: Fix vcc_host1_5v GPIO polarity on rk3328-rock64
    arm64: dts: rockchip: fix vcc_host1_5v pin assign on rk3328-rock64
  * dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors
      drivers/md/dm-table.c
  * PCI: Add function 1 DMA alias quirk for Marvell 9170 SATA controller
      drivers/pci/quirks.c
    x86/perf/amd: Remove need to check "running" bit in NMI handler
    x86/perf/amd: Resolve NMI latency issues for active PMCs
    x86/perf/amd: Resolve race condition when disabling PMC
    xtensa: fix return_address
  * sched/fair: Do not re-read ->h_load_next during hierarchical load calculation
      kernel/sched/fair.c
    xen: Prevent buffer overflow in privcmd ioctl
  * arm64: backtrace: Don't bother trying to unwind the userspace stack
      arch/arm64/kernel/traps.c
    arm64: dts: rockchip: fix rk3328 rgmii high tx error rate
  * arm64: futex: Fix FUTEX_WAKE_OP atomic ops with non-zero result value
      arch/arm64/include/asm/futex.h
    ARM: dts: at91: Fix typo in ISC_D0 on PC9
    ARM: dts: am335x-evm: Correct the regulators for the audio codec
    ARM: dts: am335x-evmsk: Correct the regulators for the audio codec
    virtio: Honour 'may_reduce_num' in vring_create_virtqueue
  * genirq: Initialize request_mutex if CONFIG_SPARSE_IRQ=n
      kernel/irq/irqdesc.c
  * genirq: Respect IRQCHIP_SKIP_SET_WAKE in irq_chip_set_wake_parent()
      kernel/irq/chip.c
  * block: fix the return errno for direct IO
      fs/block_dev.c
  * block: do not leak memory in bio_copy_user_iov()
      block/bio.c
    btrfs: prop: fix vanished compression property after failed set
    btrfs: prop: fix zstd compression parameter validation
    Btrfs: do not allow trimming when a fs is mounted with the nologreplay option
    ASoC: fsl_esai: fix channel swap issue when stream starts
  * include/linux/bitrev.h: fix constant bitrev
      include/linux/bitrev.h
    drm/udl: add a release method and delay modeset teardown
  * alarmtimer: Return correct remaining time
      kernel/time/alarmtimer.c
    parisc: regs_return_value() should return gpr28
    parisc: Detect QEMU earlier in boot process
    arm64: dts: rockchip: fix rk3328 sdmmc0 write errors
    hv_netvsc: Fix unwanted wakeup after tx_disable
  * ip6_tunnel: Match to ARPHRD_TUNNEL6 for dev type
      net/ipv6/ip6_tunnel.c
    ALSA: seq: Fix OOB-reads from strlcpy
  * net: ethtool: not call vzalloc for zero sized memory request
      net/core/ethtool.c
  * netns: provide pure entropy for net_hash_mix()
      include/net/net_namespace.h
      include/net/netns/hash.h
      net/core/net_namespace.c
    net/sched: act_sample: fix divide by zero in the traffic path
    bnxt_en: Reset device on RX buffer errors.
    bnxt_en: Improve RX consumer index validity check.
    nfp: validate the return code from dev_queue_xmit()
    net/mlx5e: Add a lock on tir list
    net/mlx5e: Fix error handling when refreshing TIRs
  * vrf: check accept_source_route on the original netdevice
      include/net/ip.h
      net/ipv4/ip_input.c
      net/ipv4/ip_options.c
    tcp: Ensure DCTCP reacts to losses
    sctp: initialize _pad of sockaddr_in before copying to user memory
    qmi_wwan: add Olicard 600
    openvswitch: fix flow actions reallocation
    net/sched: fix ->get helper of the matchall cls
    net: rds: force to destroy connection if t_sock is NULL in rds_tcp_kill_sock().
    net/mlx5: Decrease default mr cache size
  * net-gro: Fix GRO flush when receiving a GSO packet.
      net/core/skbuff.c
    kcm: switch order of device registration to fix a crash
  * ipv6: sit: reset ip header pointer in ipip6_rcv
      net/ipv6/sit.c
  * ipv6: Fix dangling pointer when ipv6 fragment
      net/ipv6/ip6_output.c
  * tty: ldisc: add sysctl to prevent autoloading of ldiscs
      drivers/tty/Kconfig
      drivers/tty/tty_io.c
      drivers/tty/tty_ldisc.c
  * tty: mark Siemens R3964 line discipline as BROKEN
      drivers/char/Kconfig
  * arm64: kaslr: Reserve size of ARM64_MEMSTART_ALIGN in linear region
      arch/arm64/mm/init.c
    stating: ccree: revert "staging: ccree: fix leak of import() after init()"
  * lib/string.c: implement a basic bcmp
      include/linux/string.h
      lib/string.c
    x86/vdso: Drop implicit common-page-size linker flag
    x86: vdso: Use $LD instead of $CC to link
  * kbuild: clang: choose GCC_TOOLCHAIN_DIR not on LD
      Makefile
    powerpc/tm: Limit TM code inside PPC_TRANSACTIONAL_MEM
    drm/i915/gvt: do not let pin count of shadow mm go negative
    x86/power: Make restore_processor_context() sane
    x86/power/32: Move SYSENTER MSR restoration to fix_processor_context()
    x86/power/64: Use struct desc_ptr for the IDT in struct saved_context
    x86/power: Fix some ordering bugs in __restore_processor_context()
    net: sfp: move sfp_register_socket call from sfp_remove to sfp_probe
  * Revert "CHROMIUM: dm: boot time specification of dm="
      drivers/md/dm-ioctl.c
      drivers/md/dm-table.c
      include/linux/device-mapper.h
      init/Makefile
      init/do_mounts.c
      init/do_mounts.h
    Revert "ANDROID: dm: do_mounts_dm: Rebase on top of 4.9"
    Revert "ANDROID: dm: do_mounts_dm: fix dm_substitute_devices()"
  * Revert "ANDROID: dm: do_mounts_dm: Update init/do_mounts_dm.c to the latest ChromiumOS version."
      drivers/md/dm.h
      include/linux/device-mapper.h
    ANDROID: cuttlefish_defconfig: Enable CONFIG_FUSE_FS
    Merge 4.14.111 into android-4.14-q
    ANDROID: cuttlefish_defconfig: Enable CONFIG_OVERLAY_FS
    ANDROID: cuttlefish: enable CONFIG_NET_SCH_INGRESS=y
    Merge 4.14.110 into android-4.14-q
    UPSTREAM: virt_wifi: Remove REGULATORY_WIPHY_SELF_MANAGED
    Merge 4.14.109 into android-4.14-q

Change-Id: I262c01dd6e9bf1baf319b75a372679146466220d
Signed-off-by: Robin Peng <robinpeng@google.com>
2019-08-28 15:56:46 +08:00

308 lines
7.2 KiB
C

/*
* Detect Hung Task
*
* kernel/hung_task.c - kernel thread for detecting tasks stuck in D state
*
*/
#include <linux/mm.h>
#include <linux/cpu.h>
#include <linux/nmi.h>
#include <linux/init.h>
#include <linux/delay.h>
#include <linux/freezer.h>
#include <linux/kthread.h>
#include <linux/lockdep.h>
#include <linux/export.h>
#include <linux/sysctl.h>
#include <linux/suspend.h>
#include <linux/utsname.h>
#include <linux/sched/signal.h>
#include <linux/sched/debug.h>
#include <trace/events/sched.h>
#include <linux/sched/sysctl.h>
/*
* The number of tasks checked:
*/
int __read_mostly sysctl_hung_task_check_count = PID_MAX_LIMIT;
/*
* Selective monitoring of hung tasks.
*
* if set to 1, khungtaskd skips monitoring tasks, which has
* task_struct->hang_detection_enabled value not set, else monitors all tasks.
*/
int sysctl_hung_task_selective_monitoring = 1;
/*
* Limit number of tasks checked in a batch.
*
* This value controls the preemptibility of khungtaskd since preemption
* is disabled during the critical section. It also controls the size of
* the RCU grace period. So it needs to be upper-bound.
*/
#define HUNG_TASK_LOCK_BREAK (HZ / 10)
/*
* Zero means infinite timeout - no checking done:
*/
unsigned long __read_mostly sysctl_hung_task_timeout_secs = CONFIG_DEFAULT_HUNG_TASK_TIMEOUT;
int __read_mostly sysctl_hung_task_warnings = 10;
static int __read_mostly did_panic;
static bool hung_task_show_lock;
static bool hung_task_call_panic;
static struct task_struct *watchdog_task;
/*
* Should we panic (and reboot, if panic_timeout= is set) when a
* hung task is detected:
*/
unsigned int __read_mostly sysctl_hung_task_panic =
CONFIG_BOOTPARAM_HUNG_TASK_PANIC_VALUE;
static int __init hung_task_panic_setup(char *str)
{
int rc = kstrtouint(str, 0, &sysctl_hung_task_panic);
if (rc)
return rc;
return 1;
}
__setup("hung_task_panic=", hung_task_panic_setup);
static int
hung_task_panic(struct notifier_block *this, unsigned long event, void *ptr)
{
did_panic = 1;
return NOTIFY_DONE;
}
static struct notifier_block panic_block = {
.notifier_call = hung_task_panic,
};
static void check_hung_task(struct task_struct *t, unsigned long timeout)
{
unsigned long switch_count = t->nvcsw + t->nivcsw;
/*
* Ensure the task is not frozen.
* Also, skip vfork and any other user process that freezer should skip.
*/
if (unlikely(t->flags & (PF_FROZEN | PF_FREEZER_SKIP)))
return;
/*
* When a freshly created task is scheduled once, changes its state to
* TASK_UNINTERRUPTIBLE without having ever been switched out once, it
* musn't be checked.
*/
if (unlikely(!switch_count))
return;
if (switch_count != t->last_switch_count) {
t->last_switch_count = switch_count;
return;
}
trace_sched_process_hang(t);
if (sysctl_hung_task_panic) {
console_verbose();
hung_task_show_lock = true;
hung_task_call_panic = true;
}
/*
* Ok, the task did not get scheduled for more than 2 minutes,
* complain:
*/
if (sysctl_hung_task_warnings) {
if (sysctl_hung_task_warnings > 0)
sysctl_hung_task_warnings--;
pr_err("INFO: task %s:%d blocked for more than %ld seconds.\n",
t->comm, t->pid, timeout);
pr_err(" %s %s %.*s\n",
print_tainted(), init_utsname()->release,
(int)strcspn(init_utsname()->version, " "),
init_utsname()->version);
pr_err("\"echo 0 > /proc/sys/kernel/hung_task_timeout_secs\""
" disables this message.\n");
sched_show_task(t);
hung_task_show_lock = true;
}
touch_nmi_watchdog();
}
/*
* To avoid extending the RCU grace period for an unbounded amount of time,
* periodically exit the critical section and enter a new one.
*
* For preemptible RCU it is sufficient to call rcu_read_unlock in order
* to exit the grace period. For classic RCU, a reschedule is required.
*/
static bool rcu_lock_break(struct task_struct *g, struct task_struct *t)
{
bool can_cont;
get_task_struct(g);
get_task_struct(t);
rcu_read_unlock();
cond_resched();
rcu_read_lock();
can_cont = pid_alive(g) && pid_alive(t);
put_task_struct(t);
put_task_struct(g);
return can_cont;
}
/*
* Check whether a TASK_UNINTERRUPTIBLE does not get woken up for
* a really long time (120 seconds). If that happens, print out
* a warning.
*/
static void check_hung_uninterruptible_tasks(unsigned long timeout)
{
int max_count = sysctl_hung_task_check_count;
unsigned long last_break = jiffies;
struct task_struct *g, *t;
/*
* If the system crashed already then all bets are off,
* do not report extra hung tasks:
*/
if (test_taint(TAINT_DIE) || did_panic)
return;
hung_task_show_lock = false;
rcu_read_lock();
for_each_process_thread(g, t) {
if (!max_count--)
goto unlock;
if (time_after(jiffies, last_break + HUNG_TASK_LOCK_BREAK)) {
if (!rcu_lock_break(g, t))
goto unlock;
last_break = jiffies;
}
/* use "==" to skip the TASK_KILLABLE tasks waiting on NFS */
if (t->state == TASK_UNINTERRUPTIBLE)
/* Check for selective monitoring */
if (!sysctl_hung_task_selective_monitoring ||
t->hang_detection_enabled)
check_hung_task(t, timeout);
}
unlock:
rcu_read_unlock();
if (hung_task_show_lock)
debug_show_all_locks();
if (hung_task_call_panic) {
trigger_all_cpu_backtrace();
panic("hung_task: blocked tasks");
}
}
static long hung_timeout_jiffies(unsigned long last_checked,
unsigned long timeout)
{
/* timeout of 0 will disable the watchdog */
return timeout ? last_checked - jiffies + timeout * HZ :
MAX_SCHEDULE_TIMEOUT;
}
/*
* Process updating of timeout sysctl
*/
int proc_dohung_task_timeout_secs(struct ctl_table *table, int write,
void __user *buffer,
size_t *lenp, loff_t *ppos)
{
int ret;
ret = proc_doulongvec_minmax(table, write, buffer, lenp, ppos);
if (ret || !write)
goto out;
wake_up_process(watchdog_task);
out:
return ret;
}
static atomic_t reset_hung_task = ATOMIC_INIT(0);
void reset_hung_task_detector(void)
{
atomic_set(&reset_hung_task, 1);
}
EXPORT_SYMBOL_GPL(reset_hung_task_detector);
static bool hung_detector_suspended;
static int hungtask_pm_notify(struct notifier_block *self,
unsigned long action, void *hcpu)
{
switch (action) {
case PM_SUSPEND_PREPARE:
case PM_HIBERNATION_PREPARE:
case PM_RESTORE_PREPARE:
hung_detector_suspended = true;
break;
case PM_POST_SUSPEND:
case PM_POST_HIBERNATION:
case PM_POST_RESTORE:
hung_detector_suspended = false;
break;
default:
break;
}
return NOTIFY_OK;
}
/*
* kthread which checks for tasks stuck in D state
*/
static int watchdog(void *dummy)
{
unsigned long hung_last_checked = jiffies;
set_user_nice(current, 0);
for ( ; ; ) {
unsigned long timeout = sysctl_hung_task_timeout_secs;
long t = hung_timeout_jiffies(hung_last_checked, timeout);
if (t <= 0) {
if (!atomic_xchg(&reset_hung_task, 0) &&
!hung_detector_suspended)
check_hung_uninterruptible_tasks(timeout);
hung_last_checked = jiffies;
continue;
}
schedule_timeout_interruptible(t);
}
return 0;
}
static int __init hung_task_init(void)
{
atomic_notifier_chain_register(&panic_notifier_list, &panic_block);
/* Disable hung task detector on suspend */
pm_notifier(hungtask_pm_notify, 0);
watchdog_task = kthread_run(watchdog, NULL, "khungtaskd");
return 0;
}
subsys_initcall(hung_task_init);