Eoan update: v5.2.3 upstream stable release

[Seth Forshee]

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.2.3 upstream stable release
       from git://git.kernel.org/

Linux 5.2.3
dm bufio: fix deadlock with loop device
dm thin metadata: check if in fail_io mode when setting needs_check
phy: qcom-qmp: Correct READY_STATUS poll break condition
pstore: Fix double-free in pstore_mkfile() failure path
dt-bindings: allow up to four clocks for orion-mdio
net: mvmdio: allow up to four clocks to be specified for orion-mdio
blkcg: update blkcg_print_stat() to handle larger outputs
blk-iolatency: clear use_delay when io.latency is set to zero
clk: imx: imx8mm: correct audio_pll2_clk to audio_pll2_out
blk-throttle: fix zero wait time for iops throttled group
usb: Handle USB3 remote wakeup for LPM enabled devices correctly
dax: Fix missed wakeup with PMD faults
Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug
intel_th: msu: Fix single mode with disabled IOMMU
intel_th: msu: Remove set but not used variable 'last'
mtd: spinand: read returns badly if the last page has bitflips
mtd: rawnand: mtk: Correct low level time calculation of r/w cycle
eCryptfs: fix a couple type promotion bugs
mmc: sdhci-msm: fix mutex while in spinlock
powerpc/pseries: Fix oops in hotplug memory notifier
powerpc/pseries: Fix xive=off command line
powerpc/powernv: Fix stale iommu table base after VFIO
powerpc/powernv/idle: Fix restore of SPRN_LDBAR for POWER9 stop state.
powerpc/powernv/npu: Fix reference leak
powerpc/watchpoint: Restore NV GPRs while returning from exception
powerpc/mm/32s: fix condition that is always true
powerpc/32s: fix suspend/resume when IBATs 4-7 are used
parisc: Fix kernel panic due invalid values in IAOQ0 or IAOQ1
parisc: Avoid kernel panic triggered by invalid kprobe
parisc: Ensure userspace privilege for ptraced processes in regset functions
gpu: ipu-v3: ipu-ic: Fix saturation bit offset in TPMEM
resource: fix locking in find_next_iomem_res()
include/asm-generic/bug.h: fix "cut here" for WARN_ON for __WARN_TAINT architectures
coda: pass the host file in vma->vm_file on mmap
mm/z3fold.c: lock z3fold page before __SetPageMovable()
mm/memcontrol: fix wrong statistics in memory.stat
libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields
mm/nvdimm: add is_ioremap_addr and use that to check ioremap address
mm: vmscan: scan anonymous pages on file refaults
HID: wacom: correct touch resolution x/y typo
HID: wacom: generic: Correct pad syncing
HID: wacom: generic: only switch the mode on devices with LEDs
IB/mlx5: Report correctly tag matching rendezvous capability
Btrfs: add missing inode version, ctime and mtime updates when punching hole
Btrfs: fix fsync not persisting dentry deletions due to inode evictions
Btrfs: fix data loss after inode eviction, renaming it, and fsync it
btrfs: correctly validate compression type
PCI: qcom: Ensure that PERST is asserted for at least 100 ms
PCI: Do not poll for PME if the device is in D3cold
PCI: hv: Fix a use-after-free bug in hv_eject_device_work()
intel_th: pci: Add Ice Lake NNPI support
RDMA/odp: Fix missed unlock in non-blocking invalidate_start
RDMA/srp: Accept again source addresses that do not have a port number
block: Fix potential overflow in blk_report_zones()
block: Allow mapping of vmalloc-ed buffers
drm/edid: parse CEA blocks embedded in DisplayID
x86/stacktrace: Prevent infinite loop in arch_stack_walk_user()
perf/x86/amd/uncore: Set the thread mask for F17h L3 PMCs
perf/x86/amd/uncore: Do not set 'ThreadMask' and 'SliceMask' for non-L3 PMCs
perf/x86/intel: Fix spurious NMI on fixed counter
x86/boot: Fix memory leak in default_get_smp_config()
x86/hyper-v: Zero out the VP ASSIST PAGE on allocation
rt2x00usb: fix rx queue hang
9p/virtio: Add cleanup path in p9_virtio_init
9p/xen: Add cleanup path in p9_trans_xen_init
xen/events: fix binding user event channels to cpus
dm zoned: fix zone state management race
padata: use smp_mb in padata_reorder to avoid orphaned padata jobs
drm/nouveau/i2c: Enable i2c pads & busses during preinit
ARM: dts: gemini: Set DIR-685 SPI CS as active low
i3c: fix i2c and i3c scl rate by bus mode
fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys inodes.
signal: Correct namespace fixups of si_pid and si_uid
signal/usb: Replace kill_pid_info_as_cred with kill_pid_usb_asyncio
intel_th: msu: Fix unused variable warning on arm64 platform
arm64: Fix incorrect irqflag restore for priority masking
arm64: irqflags: Add condition flags to inline asm clobber list
arm64: tegra: Fix AGIC register range
KVM: x86/vPMU: refine kvm_pmu err msg when event creation failed
KVM: PPC: Book3S HV: Fix CR0 setting in TM emulation
KVM: PPC: Book3S HV: Clear pending decrementer exceptions on nested guest entry
KVM: PPC: Book3S HV: Signed extend decrementer value if not using large decrementer
KVM: Properly check if "page" is valid in kvm_vcpu_unmap
KVM: VMX: check CPUID before allowing read/write of IA32_XSS
KVM: VMX: Fix handling of #MC that occurs during VM-Entry
KVM: nVMX: Always sync GUEST_BNDCFGS when it comes from vmcs01
KVM: VMX: Always signal #GP on WRMSR to MSR_IA32_CR_PAT with bad value
KVM: nVMX: Don't dump VMCS if virtual APIC page can't be mapped
media: videobuf2-dma-sg: Prevent size from overflowing
media: videobuf2-core: Prevent size alignment wrapping buffer size to 0
media: coda: Remove unbalanced and unneeded mutex unlock
media: v4l2: Test type instead of cfg->type in v4l2_ctrl_new_custom()
ceph: use ceph_evict_inode to cleanup inode's resource
ceph: fix end offset in truncate_inode_pages_range call
ALSA: hda/hdmi - Fix i915 reverse port/pin mapping
ALSA: hda/hdmi - Remove duplicated define
ALSA: hda/realtek: apply ALC891 headset fixup to one Dell machine
ALSA: hda/realtek - Fixed Headphone Mic can't record on Dell platform
ALSA: hda - Don't resume forcibly i915 HDMI/DP codec
ALSA: seq: Break too long mutex context in the write loop
kconfig: fix missing choice values in auto.conf
raid5-cache: Need to do start() part job after adding journal device
ASoC: core: Adapt for debugfs API change
ASoC: dapm: Adapt for debugfs API change
lib/scatterlist: Fix mapping iterator when sg->offset is greater than PAGE_SIZE
SUNRPC: Ensure the bvecs are reset when we re-encode the RPC request
pnfs: Fix a problem where we gratuitously start doing I/O through the MDS
pnfs/flexfiles: Fix PTR_ERR() dereferences in ff_layout_track_ds_error
Revert "NFS: readdirplus optimization by cache mechanism" (memleak)
NFSv4: Handle the special Linux file open access mode
tracing: Fix user stack trace "??" output
arm64: Fix interrupt tracing in the presence of NMIs
opp: Don't use IS_ERR on invalid supplies
iwlwifi: mvm: clear rfkill_safe_init_done when we start the firmware
iwlwifi: mvm: delay GTK setting in FW in AP mode
iwlwifi: fix RF-Kill interrupt while FW load for gen2 devices
iwlwifi: don't WARN when calling iwl_get_shared_mem_conf with RF-Kill
iwlwifi: pcie: fix ALIVE interrupt handling for gen2 devices w/o MSI-X
iwlwifi: pcie: don't service an interrupt that was masked
iwlwifi: add support for hr1 RF ID
arm64: tegra: Fix Jetson Nano GPU regulator
arm64: tegra: Update Jetson TX1 GPU regulator timings
regulator: s2mps11: Fix buck7 and buck8 wrong voltages
regulator: s2mps11: Fix ERR_PTR dereference on GPIO lookup failure
Input: alps - fix a mismatch between a condition check and its comment
Input: synaptics - whitelist Lenovo T580 SMBus intertouch
Input: alps - don't handle ALPS cs19 trackpoint-only device
Input: gtco - bounds check collection indent level
bcache: destroy dc->writeback_write_wq if failed to create dc->writeback_thread
bcache: fix mistaken sysfs entry for io_error counter
bcache: ignore read-ahead request failure on backing device
bcache: Revert "bcache: free heap cache_set->flush_btree in bch_journal_free"
bcache: Revert "bcache: fix high CPU occupancy during journal"
Revert "bcache: set CACHE_SET_IO_DISABLE in bch_cached_dev_error()"
CIFS: fix deadlock in cached root handling
cifs: flush before set-info if we have writeable handles
cifs: Properly handle auto disabling of serverino option
cifs: fix crash in smb2_compound_op()/smb2_set_next_command()
cifs: always add credits back for unsolicited PDUs
crypto: crypto4xx - fix a potential double free in ppc4xx_trng_probe
crypto: ccp/gcm - use const time tag comparison.
crypto: ccp - memset structure fields to zero before reuse
crypto: crypto4xx - block ciphers should only accept complete blocks
crypto: crypto4xx - fix blocksize for cfb and ofb
crypto: crypto4xx - fix AES CTR blocksize value
crypto: chacha20poly1305 - fix atomic sleep when using async algorithm
crypto: arm64/sha2-ce - correct digest for empty data in finup
crypto: arm64/sha1-ce - correct digest for empty data in finup
crypto: ccp - Validate the the error value used to index error messages
crypto: caam - limit output IV to CBC to work around CTR mode DMA issue
crypto: ghash - fix unaligned memory access in ghash_setkey()
scsi: mac_scsi: Fix pseudo DMA implementation, take 2
scsi: mac_scsi: Increase PIO/PDMA transfer length threshold
scsi: megaraid_sas: Fix calculation of target ID
scsi: zfcp: fix request object use-after-free in send path causing wrong traces
scsi: zfcp: fix request object use-after-free in send path causing seqno errors
scsi: sd_zbc: Fix compilation warning
scsi: core: Fix race on creating sense cache
Revert "scsi: ncr5380: Increase register polling limit"
scsi: NCR5380: Handle PDMA failure reliably
scsi: NCR5380: Always re-enable reselection interrupt
xen: let alloc_xenballooned_pages() fail if not enough memory free
floppy: fix out-of-bounds read in copy_buffer
floppy: fix invalid pointer dereference in drive_name
floppy: fix out-of-bounds read in next_valid_format
floppy: fix div-by-zero in setup_format_params
libbpf: fix another GCC8 warning for strncpy
blk-iolatency: fix STS_AGAIN handling
iavf: fix dereference of null rx_buffer pointer
net: hns3: fix __QUEUE_STATE_STACK_XOFF not cleared issue
net: mvmdio: defer probe of orion-mdio if a clock is not ready
xdp: fix race on generic receive path
gtp: fix use-after-free in gtp_newlink()
gtp: fix use-after-free in gtp_encap_destroy()
gtp: fix Illegal context switch in RCU read-side critical section.
gtp: fix suspicious RCU usage
Bluetooth: validate BLE connection interval updates
gtp: add missing gtp_encap_disable_sock() in gtp_encap_enable()
Bluetooth: hidp: NUL terminate a string in the compat ioctl
Bluetooth: Check state in l2cap_disconnect_rsp
perf tests: Fix record+probe_libc_inet_pton.sh for powerpc64
genirq: Update irq stats from NMI handlers
Bluetooth: 6lowpan: search for destination address in all peers
Bluetooth: Add new 13d3:3501 QCA_ROME device
Bluetooth: Add new 13d3:3491 QCA_ROME device
Bluetooth: hci_bcsp: Fix memory leak in rx_skb
net: hns3: fix port capbility updating issue
net: hns3: enable broadcast promisc mode when initializing VF
tools: bpftool: Fix json dump crash on powerpc
ASoC: audio-graph-card: fix use-after-free in graph_for_each_link
iommu/arm-smmu-v3: Invalidate ATC when detaching a device
gpiolib: Fix references to gpiod_[gs]et_*value_cansleep() variants
bonding: validate ip header before check IPPROTO_IGMP
selftests: bpf: fix inlines in test_lwt_seg6local
bpf, libbpf, smatch: Fix potential NULL pointer dereference
libbpf: fix GCC8 warning for strncpy
rxrpc: Fix oops in tracepoint
net: usb: asix: init MAC address buffers
bnx2x: Prevent ptp_task to be rescheduled indefinitely
vxlan: do not destroy fdb if register_netdevice() is failed
perf stat: Fix group lookup for metric group
perf stat: Don't merge events in the same PMU
perf stat: Fix metrics with --no-merge
perf stat: Make metric event lookup more robust
ALSA: hda: Fix a headphone detection issue when using SOF
bnxt_en: Cap the returned MSIX vectors to the RDMA driver.
bnxt_en: Fix statistics context reservation logic for RDMA driver.
bnxt_en: Disable bus master during PCI shutdown and driver unload.
iwlwifi: dbg: fix debug monitor stop and restart delays
netfilter: Fix remainder of pseudo-header protocol 0
bpf: fix uapi bpf_prog_info fields alignment
iwlwifi: mvm: Drop large non sta frames
ixgbe: Avoid NULL pointer dereference with VF on non-IPsec hw
net: ethernet: ti: cpsw: Assign OF node to slave devices
net: hns3: add Asym Pause support to fix autoneg problem
igb: clear out skb->tstamp after reading the txtime
net: mvpp2: prs: Don't override the sign bit in SRAM parser shift
ath10k: destroy sdio workqueue while remove sdio module
ath10k: Fix memory leak in qmi
net: hns3: add some error checking in hclge_tm module
net: hns3: fix a -Wformat-nonliteral compile warning
bcache: fix potential deadlock in cached_def_free()
bcache: avoid a deadlock in bcache_reboot()
bcache: check c->gc_thread by IS_ERR_OR_NULL in cache_set_flush()
bcache: acquire bch_register_lock later in cached_dev_free()
bcache: check CACHE_SET_IO_DISABLE bit in bch_journal()
bcache: check CACHE_SET_IO_DISABLE in allocator code
bcache: fix return value error in bch_journal_read()
net/mlx5e: Attach/detach XDP program safely
EDAC: Fix global-out-of-bounds write when setting edac_mc_poll_msec
wil6210: drop old event after wmi_call timeout
ath9k: correctly handle short radar pulses
crypto: asymmetric_keys - select CRYPTO_HASH where needed
crypto: serpent - mark __serpent_setkey_sbox noinline
ixgbe: Check DDM existence in transceiver before access
net/mlx5: Get vport ACL namespace by vport index
net: hns3: restore the MAC autoneg state after reset
gpio: Fix return value mismatch of function gpiod_get_from_of_node()
rslib: Fix handling of of caller provided syndrome
bpf: fix BPF_ALU32 | BPF_ARSH on BE arches
rslib: Fix decoding of shortened codes
xsk: Properly terminate assignment in xskq_produce_flush_desc
netfilter: ctnetlink: Fix regression in conntrack entry deletion
clocksource/drivers/exynos_mct: Increase priority over ARM arch timer
clocksource/drivers/tegra: Restore base address before cleanup
libata: don't request sense data on !ZAC ATA devices
clocksource/drivers/tegra: Release all IRQ's on request_irq() error
block, bfq: fix rq_in_driver check in bfq_update_inject_limit
ASoC: Intel: hdac_hdmi: Set ops to NULL on remove
perf tools: Increase MAX_NR_CPUS and MAX_CACHES
ALSA: hdac: Fix codec name after machine driver is unloaded and reloaded
ath10k: fix PCIE device wake up failed
ath10k: fix fw crash by moving chip reset after napi disabled
ath10k: add missing error handling
mt76: mt7615: do not process rx packets if the device is not initialized
ipvs: fix tinfo memory leak in start_sync_thread
mt7601u: fix possible memory leak when the device is disconnected
x86/build: Add 'set -e' to mkcapflags.sh to delete broken capflags.c
mt7601u: do not schedule rx_tasklet when the device has been disconnected
rtlwifi: rtl8192cu: fix error handle when usb probe failed
net: stmmac: sun8i: force select external PHY when no internal one
media: hdpvr: fix locking and a missing msleep
media: vimc: cap: check v4l2_fill_pixfmt return value
media: coda: increment sequence offset for the last returned frame
media: coda: fix last buffer handling in V4L2_ENC_CMD_STOP
media: coda: fix mpeg2 sequence number handling
acpi/arm64: ignore 5.1 FADTs that are reported as 5.0
ASoC: soc-core: call snd_soc_unbind_card() under mutex_lock;
media: mt9m111: fix fw-node refactoring
timer_list: Guard procfs specific code
ntp: Limit TAI-UTC offset
media: i2c: fix warning same module names
media: s5p-mfc: Make additional clocks optional
ipvs: defer hook registration to avoid leaks
media: staging: davinci: fix memory leaks and check for allocation failure
ipsec: select crypto ciphers for xfrm_algo
arm64: Do not enable IRQs for ct_user_exit
nvme-pci: adjust irq max_vector using num_possible_cpus()
lightnvm: fix uninitialized pointer in nvm_remove_tgt()
lightnvm: pblk: fix freeing of merged pages
nvme-pci: set the errno on ctrl state change error
nvme-pci: properly report state change failure in nvme_reset_work
nvme: fix possible io failures when removing multipathed ns
EDAC/sysfs: Fix memory leak when creating a csrow object
EDAC/sysfs: Drop device references properly
spi: fix ctrl->num_chipselect constraint
ACPICA: Clear status of GPEs on first direct enable
blk-iolatency: only account submitted bios
x86/cacheinfo: Fix a -Wtype-limits warning
net: netsec: initialize tx ring on ndo_open
PCI: Add missing link delays required by the PCIe spec
perf build: Handle slang being in /usr/include and in /usr/include/slang/
bpf: fix callees pruning callers
tools build: Fix the zstd test in the test-all.c common case feature test
ASoC: rsnd: fixup mod ID calculation in rsnd_ctu_probe_
ipoib: correcly show a VF hardware address
iavf: allow null RX descriptors
vhost_net: disable zerocopy by default
perf evsel: Make perf_evsel__name() accept a NULL argument
x86/atomic: Fix smp_mb__{before,after}_atomic()
integrity: Fix __integrity_init_keyring() section mismatch
perf/x86/intel/uncore: Handle invalid event coding for free-running counter
perf/x86/intel: Disable check_msr for real HW
sched/fair: Fix "runnable_avg_yN_inv" not used warnings
perf/x86/intel: Add more Icelake CPUIDs
sched/core: Add __sched tag for io_schedule()
xfrm: fix sa selector validation
blkcg, writeback: dead memcgs shouldn't contribute to writeback ownership arbitration
block: null_blk: fix race condition for null_del_dev
net: hns3: delay ring buffer clearing during reset
net: hns3: fix for skb leak when doing selftest
net: hns3: fix for dereferencing before null checking
qed: iWARP - Fix tc for MPA ll2 connection
x86/cpufeatures: Add FDP_EXCPTN_ONLY and ZERO_FCS_FDS
perf/x86: Add Intel Ice Lake NNPI uncore support
rcu: Force inlining of rcu_read_lock()
ASoC: meson: axg-tdm: fix sample clock inversion
x86/cpu: Add Ice Lake NNPI to Intel family
crypto: testmgr - add some more preemption points
selinux: fix empty write to keycreate file
media: s5p-mfc: fix reading min scratch buffer size on MFC v6/v7
bpf: silence warning messages in core
media: davinci: vpif_capture: fix memory leak in vpif_probe()
gpio: omap: Fix lost edge wake-up interrupts
regmap: fix bulk writes on paged registers
gpio: omap: ensure irq is enabled before wakeup
gpio: omap: fix lack of irqstatus_raw0 for OMAP4
iommu: Fix a leak in iommu_insert_resv_region
media: fdp1: Support M3N and E3 platforms
media: uvcvideo: Fix access to uninitialized fields on probe error
irqchip/meson-gpio: Add support for Meson-G12A SoC
selftests/bpf : clean up feature/ when make clean
perf report: Fix OOM error in TUI mode on s390
perf test 6: Fix missing kvm module load for s390
perf cs-etm: Properly set the value of 'old' and 'head' in snapshot mode
ipset: Fix memory accounting for hash types on resize
netfilter: ipset: fix a missing check of nla_parse
net: sfp: add mutex to prevent concurrent state checks
RAS/CEC: Fix pfn insertion
s390/qdio: handle PENDING state for QEBSM devices
net: axienet: Fix race condition causing TX hang
net: fec: Do not use netdev messages too early
crypto: inside-secure - do not rely on the hardware last bit for result descriptors
net: stmmac: modify default value of tx-frames
net: stmmac: dwmac4: fix flow control issue
media: aspeed: fix a kernel warning on clk control
media: aspeed: change irq to threaded irq
perf jvmti: Address gcc string overflow warning for strncpy()
media: imx7-mipi-csis: Propagate the error if clock enabling fails
arm64: mm: make CONFIG_ZONE_DMA32 configurable
cpupower : frequency-set -r option misses the last cpu in related cpu list
net: hns3: set ops to null when unregister ad_dev
net: hns3: add a check to pointer in error_detected and slot_reset
media: wl128x: Fix some error handling in fm_v4l2_init_video_device()
media: platform: ao-cec-g12a: disable regmap fast_io for cec bus regmap
locking/lockdep: Fix merging of hlocks with non-zero references
locking/lockdep: Fix OOO unlock when hlocks need merging
batman-adv: Fix duplicated OGMs on NETDEV_UP
tua6100: Avoid build warnings.
crypto: talitos - Align SEC1 accesses to 32 bits boundaries.
crypto: talitos - properly handle split ICV.
net: dsa: sja1105: Fix broken fixed-link interfaces on user ports
net: phy: Check against net_device being NULL
media: staging: media: davinci_vpfe: - Fix for memory leak if decoder initialization fails.
ASoC: Intel: sof-rt5682: fix undefined references with Baytrail-only support
media: saa7164: fix remove_proc_entry warning
media: mc-device.c: don't memset __user pointer contents
ice: Check all VFs for MDD activity, don't disable
perf annotate TUI browser: Do not use member from variable within its own initialization
media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
fscrypt: clean up some BUG_ON()s in block encryption/decryption
media: v4l2-core: fix use-after-free error
media: vim2m: fix two double-free issues
xfrm: Fix xfrm sel prefix length validation
af_key: fix leaks in key_pol_get_resp and dump_sp.
signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig
qed: Set the doorbell address correctly
net: hns3: fix for FEC configuration
net: hns3: initialize CPU reverse mapping
net: mvpp2: cls: Extract the RSS context when parsing the ethtool rule
ice: Fix couple of issues in ice_vsi_release
net: stmmac: Prevent missing interrupts when running NAPI
net: stmmac: dwmac4/5: Clear unused address entries
net: stmmac: dwmac1000: Clear unused address entries
crypto: caam - avoid S/G table fetching for AEAD zero-length output
media: venus: firmware: fix leaked of_node references
ice: Gracefully handle reset failure in ice_alloc_vfs()
media: media_device_enum_links32: clean a reserved field
media: vpss: fix a potential NULL pointer dereference
selftests/bpf: adjust verifier scale test
media: marvell-ccic: fix DMA s/g desc number calculation
media: ov7740: avoid invalid framesize setting
crypto: talitos - fix skcipher failure due to wrong output IV
media: spi: IR LED: add missing of table registration
media: dvb: usb: fix use after free in dvb_usb_device_exit
batman-adv: fix for leaked TVLV handler.
regmap: debugfs: Fix memory leak in regmap_debugfs_init
ath10k: Fix encoding for protected management frames
ath: DFS JP domain W56 fixed pulse type 3 RADAR detection
wil6210: fix spurious interrupts in 3-msi
ath10k: add peer id check in ath10k_peer_find_by_id
ath6kl: add some bounds checking
wil6210: fix missed MISC mbox interrupt
ath10k: Fix the wrong value of enums for wmi tlv stats id
ath9k: Check for errors when reading SREV register
spi: rockchip: turn down tx dma bursts
ath10k: Do not send probe response template for mesh
wil6210: fix potential out-of-bounds read
ath9k: Don't trust TX status TID number when reporting airtime
ath10k: fix incorrect multicast/broadcast rate setting
ath10k: htt: don't use txdone_fifo with SDIO
ath10k: Check tx_stats before use it

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 5.2.0-10.11

---------------
linux (5.2.0-10.11) eoan; urgency=medium

  * eoan/linux: 5.2.0-10.11 -proposed tracker (LP: #1838113)

  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log

  * Eoan update: v5.2.4 upstream stable release (LP: #1838428)
    - bnx2x: Prevent load reordering in tx completion processing
    - caif-hsi: fix possible deadlock in cfhsi_exit_module()
    - hv_netvsc: Fix extra rcu_read_unlock in netvsc_recv_callback()
    - igmp: fix memory leak in igmpv3_del_delrec()
    - ipv4: don't set IPv6 only flags to IPv4 addresses
    - ipv6: rt6_check should return NULL if 'from' is NULL
    - ipv6: Unlink sibling route in case of failure
    - net: bcmgenet: use promisc for unsupported filters
    - net: dsa: mv88e6xxx: wait after reset deactivation
    - net: make skb_dst_force return true when dst is refcounted
    - net: neigh: fix multiple neigh timer scheduling
    - net: openvswitch: fix csum updates for MPLS actions
    - net: phy: sfp: hwmon: Fix scaling of RX power
    - net_sched: unset TCQ_F_CAN_BYPASS when adding filters
    - net: stmmac: Re-work the queue selection for TSO packets
    - net/tls: make sure offload also gets the keys wiped
    - nfc: fix potential illegal memory access
    - r8169: fix issue with confused RX unit after PHY power-down on RTL8411b
    - rxrpc: Fix send on a connected, but unbound socket
    - sctp: fix error handling on stream scheduler initialization
    - sctp: not bind the socket in sctp_connect
    - sky2: Disable MSI on ASUS P6T
    - tcp: be more careful in tcp_fragment()
    - tcp: fix tcp_set_congestion_control() use from bpf hook
    - tcp: Reset bytes_acked and bytes_received when disconnecting
    - vrf: make sure skb->data contains ip header to make routing
    - net/mlx5e: IPoIB, Add error path in mlx5_rdma_setup_rn
    - net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling
    - net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query
    - net: bridge: don't cache ether dest pointer on input
    - net: bridge: stp: don't cache eth dest pointer before skb pull
    - macsec: fix use-after-free of skb during RX
    - macsec: fix checksumming after decryption
    - netrom: fix a memory leak in nr_rx_frame()
    - netrom: hold sock when setting skb->destructor
    - selftests: txring_overwrite: fix incorrect test of mmap() return value
    - net/tls: fix poll ignoring partially copied records
    - net/tls: reject offload of TLS 1.3
    - net/mlx5e: Fix port tunnel GRE entropy control
    - net/mlx5e: Rx, Fix checksum calculation for new hardware
    - net/mlx5e: Fix return value from timeout recover function
    - net/mlx5e: Fix error flow in tx reporter diagnose
    - bnxt_en: Fix VNIC accounting when enabling aRFS on 57500 chips.
    - mlxsw: spectrum_dcb: Configure DSCP map as the last rule is removed
    - net/mlx5: E-Switch, Fix default encap mode
    - mlxsw: spectrum: Do not process learned records with a dummy FID
    - dma-buf: balance refcount inbalance
    - dma-buf: Discard old fence_excl on retrying get_fences_rcu for realloc
    - Revert "gpio/spi: Fix spi-gpio...