* remotes/origin/tmp-3afae84:
Linux 4.14.7
dvb_frontend: don't use-after-free the frontend struct
media: dvb-core: always call invoke_release() in fe_free()
x86/intel_rdt: Fix potential deadlock during resctrl unmount
RDMA/cxgb4: Annotate r2 and stag as __be32
md: free unused memory after bitmap resize
dm raid: fix panic when attempting to force a raid to sync
audit: ensure that 'audit=1' actually enables audit for PID 1
audit: Allow auditd to set pid to 0 to end auditing
nvmet-rdma: update queue list during ib_device removal
blk-mq: Avoid that request queue removal can trigger list corruption
ide: ide-atapi: fix compile error with defining macro DEBUG
ipvlan: fix ipv6 outbound device
powerpc/powernv/idle: Round up latency and residency values
kbuild: do not call cc-option before KBUILD_CFLAGS initialization
KVM: arm/arm64: vgic-its: Preserve the revious read from the pending table
fix kcm_clone()
fcntl: don't cap l_start and l_end values for F_GETLK64 in compat syscall
usb: gadget: ffs: Forbid usb_ep_alloc_request from sleeping
ipmi: Stop timers before cleaning up the module
sctp: use right member as the param of list_for_each_entry
cls_bpf: don't decrement net's refcount when offload fails
net: openvswitch: datapath: fix data type in queue_gso_packets
net: accept UFO datagrams from tuntap and packet
tun: fix rcu_read_lock imbalance in tun_build_skb
net: ipv6: Fixup device for anycast routes during copy
tun: free skb in early errors
tcp: when scheduling TLP, time of RTO should account for current ACK
tap: free skb if flags error
net: sched: cbq: create block for q->link.block
tcp: use current time in tcp_rcv_space_adjust()
tipc: call tipc_rcv() only if bearer is up in tipc_udp_recv()
tcp: use IPCB instead of TCP_SKB_CB in inet_exact_dif_match()
s390/qeth: fix GSO throughput regression
s390/qeth: fix thinko in IPv4 multicast address tracking
s390/qeth: build max size GSO skbs on L2 devices
tcp/dccp: block bh before arming time_wait timer
stmmac: reset last TSO segment size after device open
net: remove hlist_nulls_add_tail_rcu()
usbnet: fix alignment for frames with no ethernet header
tcp: remove buggy call to tcp_v6_restore_cb()
net/packet: fix a race in packet_bind() and packet_notifier()
packet: fix crash in fanout_demux_rollover()
tcp: add tcp_v4_fill_cb()/tcp_v4_restore_cb()
sit: update frag_off info
rds: Fix NULL pointer dereference in __rds_rdma_map
vhost: fix skb leak in handle_rx()
tipc: fix memory leak in tipc_accept_from_sock()
s390/qeth: fix early exit from error path
net: realtek: r8169: implement set_link_ksettings()
net: thunderx: Fix TCP/UDP checksum offload for IPv4 pkts
net: thunderx: Fix TCP/UDP checksum offload for IPv6 pkts
net: qmi_wwan: add Quectel BG96 2c7c:0296
Linux 4.14.6
afs: Connect up the CB.ProbeUuid
afs: Fix total-length calculation for multiple-page send
IB/mlx5: Assign send CQ and recv CQ of UMR QP
IB/mlx4: Increase maximal message size under UD QP
bnxt_re: changing the ip address shouldn't affect new connections
f2fs: fix to clear FI_NO_PREALLOC
xfrm: Copy policy family in clone_policy
tls: Use kzalloc for aead_request allocation
jump_label: Invoke jump_label_test() via early_initcall()
atm: horizon: Fix irq release error
kbuild: rpm-pkg: fix jobserver unavailable warning
mailbox: mailbox-test: don't rely on rx_buffer content to signal data ready
clk: hi3660: fix incorrect uart3 clock freqency
clk: uniphier: fix DAPLL2 clock rate of Pro5
clk: qcom: common: fix legacy board-clock registration
clk: sunxi-ng: a83t: Fix i2c buses bits
clk: stm32h7: fix test of clock config
bpf: fix lockdep splat
geneve: fix fill_info when link down
fcntl: don't leak fd reference when fixup_compat_flock fails
sctp: use the right sk after waking up from wait_buf sleep
sctp: do not free asoc when it is already dead in sctp_sendmsg
slub: fix sysfs duplicate filename creation when slub_debug=O
zsmalloc: calling zs_map_object() from irq is a bug
sparc64/mm: set fields in deferred pages
block: wake up all tasks blocked in get_request()
dt-bindings: usb: fix reg-property port-number range
xfs: fix forgotten rcu read unlock when skipping inode reclaim
nfp: fix flower offload metadata flag usage
nfp: inherit the max_mtu from the PF netdev
sunrpc: Fix rpc_task_begin trace point
NFS: Fix a typo in nfs_rename()
dynamic-debug-howto: fix optional/omitted ending line number to be LARGE instead of 0
lib/genalloc.c: make the avail variable an atomic_long_t
pipe: match pipe_max_size data type with procfs
drivers/rapidio/devices/rio_mport_cdev.c: fix resource leak in error handling path in 'rio_dma_transfer()'
rsi: fix memory leak on buf and usb_reg_buf
route: update fnhe_expires for redirect when the fnhe exists
route: also update fnhe_genid when updating a route cache
gre6: use log_ecn_error module parameter in ip6_tnl_rcv()
mac80211_hwsim: Fix memory leak in hwsim_new_radio_nl()
x86/mpx/selftests: Fix up weird arrays
apparmor: fix leak of null profile name if profile allocation fails
powerpc/perf: Fix pmu_count to count only nest imc pmus
coccinelle: fix parallel build with CHECK=scripts/coccicheck
kbuild: pkg: use --transform option to prefix paths in tar
net/smc: use sk_rcvbuf as start for rmb creation
irqchip/qcom: Fix u32 comparison with value less than zero
ARM: avoid faulting on qemu
ARM: BUG if jumping to usermode address in kernel mode
crypto: talitos - fix ctr-aes-talitos
crypto: talitos - fix use of sg_link_tbl_len
crypto: talitos - fix AEAD for sha224 on non sha224 capable chips
crypto: talitos - fix setkey to check key weakness
crypto: talitos - fix memory corruption on SEC2
crypto: talitos - fix AEAD test failures
IB/core: Only enforce security for InfiniBand
IB/core: Avoid unnecessary return value check
bus: arm-ccn: fix module unloading Error: Removing state 147 which has instances left.
bus: arm-ccn: Fix use of smp_processor_id() in preemptible context
bus: arm-ccn: Check memory allocation failure
bus: arm-cci: Fix use of smp_processor_id() in preemptible context
Revert "ARM: dts: imx53: add srtc node"
arm64: SW PAN: Update saved ttbr0 value on enter_lazy_tlb
arm64: SW PAN: Point saved ttbr0 at the zero page when switching to init_mm
arm64: fpsimd: Prevent registers leaking from dead tasks
KVM: arm/arm64: vgic-its: Check result of allocation before use
KVM: arm/arm64: vgic: Preserve the revious read from the pending table
KVM: arm/arm64: vgic-irqfd: Fix MSI entry allocation
KVM: arm/arm64: Fix broken GICH_ELRSR big endian conversion
KVM: VMX: remove I/O port 0x80 bypass on Intel hosts
arm: KVM: Fix VTTBR_BADDR_MASK BUG_ON off-by-one
arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
media: rc: partial revert of "media: rc: per-protocol repeat period"
media: rc: sir_ir: detect presence of port
media: dvb: i2c transfers over usb cannot be done from stack
drm/i915: Fix vblank timestamp/frame counter jumps on gen2
drm/exynos: gem: Drop NONCONTIG flag for buffers allocated without IOMMU
drm/bridge: analogix dp: Fix runtime PM state in get_modes() callback
md/r5cache: move mddev_lock() out of r5c_journal_mode_set()
kdb: Fix handling of kallsyms_symbol_next() return value
brcmfmac: change driver unbind order of the sdio function devices
iwlwifi: mvm: enable RX offloading with TKIP and WEP
iwlwifi: mvm: fix packet injection
iwlwifi: add new cards for 9260 and 22000 series
iwlwifi: mvm: flush queue before deleting ROC
iwlwifi: mvm: don't use transmit queue hang detection when it is not possible
iwlwifi: mvm: mark MIC stripped MPDUs
powerpc/64s: Initialize ISAv3 MMU registers before setting partition table
Revert "powerpc: Do not call ppc_md.panic in fadump panic notifier"
KVM: s390: Fix skey emulation permission check
s390: fix compat system call table
s390/mm: fix off-by-one bug in 5-level page table handling
s390: always save and restore all registers on context switch
smp/hotplug: Move step CPUHP_AP_SMPCFD_DYING to the correct place
iommu/vt-d: Fix scatterlist offset handling
ALSA: usb-audio: Add check return value for usb_string()
ALSA: usb-audio: Fix out-of-bound error
ALSA: seq: Remove spurious WARN_ON() at timer check
ALSA: pcm: prevent UAF in snd_pcm_info
ALSA: hda/realtek - New codec support for ALC257
btrfs: handle errors while updating refcounts in update_ref_for_cow
btrfs: fix missing error return in btrfs_drop_snapshot
KVM: x86: fix APIC page invalidation
x86/PCI: Make broadcom_postcore_init() check acpi_disabled
x86/idt: Load idt early in start_secondary
X.509: fix comparisons of ->pkey_algo
X.509: reject invalid BIT STRING for subjectPublicKey
KEYS: reject NULL restriction string when type is specified
KEYS: add missing permission check for request_key() destination
ASN.1: check for error from ASN1_OP_END__ACT actions
ASN.1: fix out-of-bounds read when parsing indefinite length item
efi/esrt: Use memunmap() instead of kfree() to free the remapping
efi: Move some sysfs files to be read-only by root
scsi: libsas: align sata_device's rps_resp on a cacheline
scsi: use dma_get_cache_alignment() as minimum DMA alignment
scsi: dma-mapping: always provide dma_get_cache_alignment
isa: Prevent NULL dereference in isa_bus driver callbacks
firmware: vpd: Fix platform driver and device registration/unregistration
firmware: vpd: Tie firmware kobject to device lifetime
firmware: vpd: Destroy vpd sections in remove function
firmware: cleanup FIRMWARE_IN_KERNEL message
hv: kvp: Avoid reading past allocated blocks from KVP file
Drivers: hv: vmbus: Fix a rescind issue
pinctrl: armada-37xx: Fix direction_output() callback behavior
iio: adc: meson-saradc: Meson8 and Meson8b do not have REG11 and REG13
iio: adc: meson-saradc: initialize the bandgap correctly on older SoCs
iio: adc: meson-saradc: fix the bit_idx of the adc_en clock
iio: adc: cpcap: fix incorrect validation
iio: health: max30102: Temperature should be in milli Celsius
iio: stm32: fix adc/trigger link error
virtio: release virtio index when fail to device_register
can: peak/pcie_fd: fix potential bug in restarting tx queue
can: usb_8dev: cancel urb on -EPIPE and -EPROTO
can: esd_usb2: cancel urb on -EPIPE and -EPROTO
can: ems_usb: cancel urb on -EPIPE and -EPROTO
can: mcba_usb: cancel urb on -EPROTO
can: kvaser_usb: cancel urb on -EPIPE and -EPROTO
can: kvaser_usb: ratelimit errors if incomplete messages are received
can: kvaser_usb: Fix comparison bug in kvaser_usb_read_bulk_callback()
can: kvaser_usb: free buf in error paths
can: ti_hecc: Fix napi poll return value for repoll
can: flexcan: fix VF610 state transition issue
can: peak/pci: fix potential bug when probe() fails
can: mcba_usb: fix device disconnect bug
usb: f_fs: Force Reserved1=1 in OS_DESC_EXT_COMPAT
serdev: ttyport: fix tty locking in close
serdev: ttyport: fix NULL-deref on hangup
serdev: ttyport: add missing receive_buf sanity checks
usb: gadget: core: Fix ->udc_set_speed() speed handling
usb: gadget: udc: renesas_usb3: fix number of the pipes
Change-Id: I47977dc6948f8e5edbcd21770a63242e86adcb3b
Signed-off-by: Runmin Wang <runminw@codeaurora.org>
b716d1c640