Bionic update: upstream stable patchset 2019-07-18

[Kamal Mostafa]

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       upstream stable patchset 2019-07-18

            Ported from the following upstream stable releases:
                v4.14.87, v4.19.8,
                v4.14.88, v4.19.9,
                v4.14.89, v4.19.10

       from git://git.kernel.org/

usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series
Revert "usb: dwc3: gadget: skip Set/Clear Halt when invalid"
iio:st_magn: Fix enable device after trigger
lib/test_kmod.c: fix rmmod double free
mm: use swp_offset as key in shmem_replace_page()
misc: mic/scif: fix copy-paste error in scif_create_remote_lookup
binder: fix race that allows malicious free of live buffer
libceph: weaken sizeof check in ceph_x_verify_authorizer_reply()
libceph: check authorizer reply/challenge length before reading
f2fs: fix missing up_read
net: don't keep lonely packets forever in the gro hash
net: phy: add workaround for issue where PHY driver doesn't bind to the device
KVM: nVMX/nSVM: Fix bug which sets vcpu->arch.tsc_offset to L1 tsc_offset
udf: Allow mounting volumes with incorrect identification strings
btrfs: Always try all copies when reading extent buffers
Btrfs: fix rare chances for data loss when doing a fast fsync
Btrfs: fix race between enabling quotas and subvolume creation
perf/x86/intel: Disallow precise_ip on BTS events
ALSA: hda: Add ASRock H81M-HDS to the power_save blacklist
ALSA: hda: Add ASRock N68C-S UCC the power_save blacklist
function_graph: Create function_graph_enter() to consolidate architecture code
ARM: function_graph: Simplify with function_graph_enter()
microblaze: function_graph: Simplify with function_graph_enter()
x86/function_graph: Simplify with function_graph_enter()
powerpc/function_graph: Simplify with function_graph_enter()
sh/function_graph: Simplify with function_graph_enter()
sparc/function_graph: Simplify with function_graph_enter()
parisc: function_graph: Simplify with function_graph_enter()
s390/function_graph: Simplify with function_graph_enter()
arm64: function_graph: Simplify with function_graph_enter()
MIPS: function_graph: Simplify with function_graph_enter()
function_graph: Make ftrace_push_return_trace() static
function_graph: Use new curr_ret_depth to manage depth instead of curr_ret_stack
function_graph: Have profiler use curr_ret_stack and not depth
function_graph: Move return callback before update of curr_ret_stack
function_graph: Reverse the order of pushing the ret_stack and the callback
ext2: initialize opts.s_mount_opt as zero before using it
ASoC: intel: cht_bsw_max98090_ti: Add quirk for boards using pmc_plt_clk_0
staging: most: use format specifier "%s" in snprintf
iio/hid-sensors: Fix IIO_CHAN_INFO_RAW returning wrong values for signed numbers
mm: cleancache: fix corruption on missed inode invalidation
Kbuild: suppress packed-not-aligned warning for default setting only
disable stringop truncation warnings for now
test_hexdump: use memcpy instead of strncpy
kobject: Replace strncpy with memcpy
ALSA: intel_hdmi: Use strlcpy() instead of strncpy()
unifdef: use memcpy instead of strncpy
kernfs: Replace strncpy with memcpy
ip_tunnel: Fix name string concatenate in __ip_tunnel_create()
scsi: bfa: convert to strlcpy/strlcat
kdb: use memmove instead of overlapping memcpy
iser: set sector for ambiguous mr status errors
uprobes: Fix handle_swbp() vs. unregister() + register() race once more
MIPS: ralink: Fix mt7620 nd_sd pinmux
mips: fix mips_get_syscall_arg o32 check
IB/mlx5: Avoid load failure due to unknown link width
drm/ast: Fix incorrect free on ioregs
drm: set is_master to 0 upon drm_new_set_master() failure
drm/meson: Enable fast_io in meson_dw_hdmi_regmap_config
drm/meson: Fix OOB memory accesses in meson_viu_set_osd_lut()
ALSA: trident: Suppress gcc string warning
kgdboc: Fix restrict error
kgdboc: Fix warning with module build
svm: Add mutex_lock to protect apic_access_page_done on AMD systems
drm/msm: fix OF child-node lookup
Input: xpad - quirk all PDP Xbox One gamepads
Input: synaptics - add PNP ID for ThinkPad P50 to SMBus
Input: matrix_keypad - check for errors from of_get_named_gpio()
Input: cros_ec_keyb - fix button/switch capability reports
Input: elan_i2c - add ELAN0620 to the ACPI table
Input: elan_i2c - add ACPI ID for Lenovo IdeaPad 330-15ARR
Input: elan_i2c - add support for ELAN0621 touchpad
btrfs: tree-checker: Don't check max block group size as current max chunk size limit is unreliable
ARC: change defconfig defaults to ARCv2
arc: [devboards] Add support of NFSv3 ACL
reset: make device_reset_optional() really optional
reset: remove remaining WARN_ON() in <linux/reset.h>
mm: hide incomplete nr_indirectly_reclaimable in /proc/zoneinfo
net: qed: use correct strncpy() size
tipc: use destination length for copy string
arm64: ftrace: Fix to enable syscall events on arm64
sched, trace: Fix prev_state output in sched_switch tracepoint
tracing/fgraph: Fix set_graph_function from showing interrupts
drm/meson: Fixes for drm_crtc_vblank_on/off support
scsi: lpfc: fix block guard enablement on SLI3 adapters
media: omap3isp: Unregister media device as first
iommu/vt-d: Fix NULL pointer dereference in prq_event_thread()
brcmutil: really fix decoding channel info for 160 MHz bandwidth
iommu/ipmmu-vmsa: Fix crash on early domain free
can: rcar_can: Fix erroneous registration
test_firmware: fix error return getting clobbered
HID: input: Ignore battery reported by Symbol DS4308
batman-adv: Use explicit tvlv padding for ELP packets
batman-adv: Expand merged fragment buffer for full packet
amd/iommu: Fix Guest Virtual APIC Log Tail Address Register
bnx2x: Assign unique DMAE channel number for FW DMAE transactions.
qed: Fix PTT leak in qed_drain()
qed: Fix reading wrong value in loop condition
net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command
net/mlx4_core: Fix uninitialized variable compilation warning
net/mlx4: Fix UBSAN warning of signed integer overflow
gpio: mockup: fix indicated direction
mtd: rawnand: qcom: Namespace prefix some commands
mtd: spi-nor: Fix Cadence QSPI page fault kernel panic
qed: Fix bitmap_weight() check
qed: Fix QM getters to always return a valid pq
net: faraday: ftmac100: remove netif_running(netdev) check before disabling interrupts
iommu/vt-d: Use memunmap to free memremap
flexfiles: use per-mirror specified stateid for IO
ibmvnic: Fix RX queue buffer cleanup
team: no need to do team_notify_peers or team_mcast_rejoin when disabling port
net: amd: add missing of_node_put()
usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device
usb: appledisplay: Add 27" Apple Cinema Display
USB: check usb_get_extra_descriptor for proper size
ALSA: hda: Add support for AMD Stoney Ridge
ALSA: pcm: Fix starvation on down_write_nonblock()
ALSA: pcm: Call snd_pcm_unlink() conditionally at closing
ALSA: pcm: Fix interval evaluation with openmin/max
ALSA: hda/realtek - Fix speaker output regression on Thinkpad T570
SUNRPC: Fix leak of krb5p encode pages
dmaengine: dw: Fix FIFO size for Intel Merrifield
dmaengine: cppi41: delete channel from pending list when stop channel
ARM: 8806/1: kprobes: Fix false positive with FORTIFY_SOURCE
xhci: Prevent U1/U2 link pm states if exit latency is too long
f2fs: fix to do sanity check with block address in main area v2
swiotlb: clean up reporting
Staging: lustre: remove two build warnings
staging: atomisp: remove "fun" strncpy warning
cifs: Fix separator when building path from dentry
staging: rtl8712: Fix possible buffer overrun
Revert commit ef9209b642f "staging: rtl8723bs: Fix indenting errors and an off-by-one mistake in core/rtw_mlme_ext.c"
drm/amdgpu: update mc firmware image for polaris12 variants
drm/amdgpu/gmc8: update MC firmware for polaris
tty: serial: 8250_mtk: always resume the device in probe.
kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var()
libnvdimm, pfn: Pad pfn namespaces relative to other regions
mac80211: Clear beacon_int in ieee80211_do_stop
mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext
mac80211: fix reordering of buffered broadcast packets
mac80211: ignore NullFunc frames in the duplicate detection
qed: Fix rdma_info structure allocation
drm/amdgpu: Add amdgpu "max bpc" connector property (v2)
drivers/net/ethernet/qlogic/qed/qed_rdma.h: fix typo
gpio: pxa: fix legacy non pinctrl aware builds again
tc-testing: tdc.py: ignore errors when decoding stdout/stderr
NFSv4: Fix a NFSv4 state manager deadlock
USB: serial: console: fix reported terminal settings
ALSA: usb-audio: Add SMSL D1 to quirks for native DSD support
ALSA: hda/realtek: ALC286 mic and headset-mode fixups for Acer Aspire U27-880
ALSA: hda/realtek - Add support for Acer Aspire C24-860 headset mic
ALSA: hda/realtek: Fix mic issue on Acer AIO Veriton Z4660G
ALSA: hda/realtek: Fix mic issue on Acer AIO Veriton Z4860G/Z6860G
media: dvb-pll: don't re-validate tuner frequencies
parisc: Enable -ffunction-sections for modules on 32-bit kernel
Revert "x86/e820: put !E820_TYPE_RAM regions into memblock.reserved"
drm/lease: Send a distinct uevent
drm/msm: Move fence put to where failure occurs
drm/amdgpu/gmc8: always load MC firmware in the driver
drm/i915: Downgrade Gen9 Plane WM latency error
x86/efi: Allocate e820 buffer before calling efi_exit_boot_service
cfg80211: Fix busy loop regression in ieee80211_ie_split_ric()
ipv4: ipv6: netfilter: Adjust the frag mem limit when truesize changes
ipv6: Check available headroom in ip6_xmit() even without options
neighbour: Avoid writing before skb->head in neigh_hh_output()
ipv6: sr: properly initialize flowi6 prior passing to ip6_route_output
net: 8139cp: fix a BUG triggered by changing mtu with network traffic
net/mlx4_core: Correctly set PFC param if global pause is turned off.
net/mlx4_en: Change min MTU size to ETH_MIN_MTU
net: phy: don't allow __set_phy_supported to add unsupported modes
net: Prevent invalid access to skb->prev in __qdisc_drop_all
rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices
sctp: kfree_rcu asoc
tcp: Do not underestimate rwnd_limited
tcp: fix NULL ref in tail loss probe
tun: forbid iface creation with rtnl ops
virtio-net: keep vnet header zeroed after processing XDP
ARM: OMAP2+: prm44xx: Fix section annotation on omap44xx_prm_enable_io_wakeup
ASoC: rsnd: fixup clock start checker
staging: rtl8723bs: Fix the return value in case of error in 'rtw_wx_read32()'
ARM: dts: logicpd-somlv: Fix interrupt on mmc3_dat1
ARM: OMAP1: ams-delta: Fix possible use of uninitialized field
sysv: return 'err' instead of 0 in __sysv_write_inode
selftests: add script to stress-test nft packet path vs. control plane
netfilter: nf_tables: fix use-after-free when deleting compat expressions
hwmon (ina2xx) Fix NULL id pointer in probe()
ASoC: wm_adsp: Fix dma-unsafe read of scratch registers
s390/cpum_cf: Reject request for sampling in event initialization
hwmon: (ina2xx) Fix current value calculation
ASoC: omap-abe-twl6040: Fix missing audio card caused by deferred probing
ASoC: dapm: Recalculate audio map forcely when card instantiated
netfilter: xt_hashlimit: fix a possible memory leak in htable_create()
hwmon: (w83795) temp4_type has writable permission
perf tools: Restore proper cwd on return from mnt namespace
PCI: imx6: Fix link training status detection in link up check
objtool: Fix double-free in .cold detection error path
objtool: Fix segfault in .cold detection with -ffunction-sections
ARM: dts: at91: sama5d2: use the divided clock for SMC
Btrfs: send, fix infinite loop due to directory rename dependencies
RDMA/mlx5: Fix fence type for IB_WR_LOCAL_INV WR
RDMA/rdmavt: Fix rvt_create_ah function signature
ASoC: omap-mcbsp: Fix latency value calculation for pm_qos
ASoC: omap-mcpdm: Add pm_qos handling to avoid under/overruns with CPU_IDLE
ASoC: omap-dmic: Add pm_qos handling to avoid overruns with CPU_IDLE
exportfs: do not read dentry after free
bpf: fix check of allowed specifiers in bpf_trace_printk
ipvs: call ip_vs_dst_notifier earlier than ipv6_dev_notf
USB: omap_udc: use devm_request_irq()
USB: omap_udc: fix crashes on probe error and module removal
USB: omap_udc: fix omap_udc_start() on 15xx machines
USB: omap_udc: fix USB gadget functionality on Palm Tungsten E
USB: omap_udc: fix rejection of out transfers when DMA is used
drm/meson: add support for 1080p25 mode
netfilter: ipv6: Preserve link scope traffic original oif
IB/mlx5: Fix page fault handling for MW
KVM: x86: fix empty-body warnings
x86/kvm/vmx: fix old-style function declaration
net: thunderx: fix NULL pointer dereference in nic_remove
usb: gadget: u_ether: fix unsafe list iteration
netfilter: nf_tables: deactivate expressions in rule replecement routine
igb: fix uninitialized variables
ixgbe: recognize 1000BaseLX SFP modules as 1Gbps
net: hisilicon: remove unexpected free_netdev
drm/amdgpu: Add delay after enable RLC ucode
drm/ast: fixed reading monitor EDID not stable issue
xen: xlate_mmu: add missing header to fix 'W=1' warning
Revert "xen/balloon: Mark unallocated host memory as UNUSABLE"
pstore/ram: Correctly calculate usable PRZ bytes
fscache, cachefiles: remove redundant variable 'cache'
nvme: flush namespace scanning work just before removing namespaces
ACPI/IORT: Fix iort_get_platform_device_domain() uninitialized pointer value
ocfs2: fix deadlock caused by ocfs2_defrag_extent()
mm/page_alloc.c: fix calculation of pgdat->nr_zones
hfs: do not free node before using
hfsplus: do not free node before using
debugobjects: avoid recursive calls with kmemleak
ocfs2: fix potential use after free
printk: Add console owner and waiter logic to load balance console writes
printk: Hide console waiter logic into helpers
printk: Never set console_may_schedule in console_trylock()
printk: Wake klogd when passing console_lock owner
flexfiles: enforce per-mirror stateid only for v4 DSes
staging: speakup: Replace strncpy with memcpy
ALSA: fireface: fix reference to wrong register for clock configuration
IB/hfi1: Fix an out-of-bounds access in get_hw_stats
tcp: lack of available data can also cause TSO defer
Revert "net/ibm/emac: wrong bit is used for STA control"
tools: bpftool: prevent infinite loop in get_fdinfo()
ASoC: sun8i-codec: fix crash on module removal
ASoC: acpi: fix: continue searching when machine is ignored
RDMA/bnxt_re: Fix system hang when registration with L2 driver fails
RDMA/bnxt_re: Avoid accessing the device structure after it is freed
RDMA/hns: Bugfix pbl configuration for rereg mr
thunderbolt: Prevent root port runtime suspend during NVM upgrade
netfilter: add missing error handling code for register functions
netfilter: nat: fix double register in masquerade modules
cachefiles: Fix an assertion failure when trying to update a failed object
fscache: Fix race in fscache_op_complete() due to split atomic_sub & read
pvcalls-front: fixes incorrect error handling
nvme: warn when finding multi-port subsystems without multipathing enabled
kernel/kcov.c: mark funcs in __sanitizer_cov_trace_pc() as notrace
ALSA: hda/realtek: ALC294 mic and headset-mode fixups for ASUS X542UN
ALSA: hda/realtek: Enable audio jacks of ASUS UX533FD with ALC294
ALSA: hda/realtek: Enable audio jacks of ASUS UX433FN/UX333FA with ALC294

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 4.15.0-58.64

---------------
linux (4.15.0-58.64) bionic; urgency=medium

  * unable to handle kernel NULL pointer dereference at 000000000000002c (IP:
    iget5_locked+0x9e/0x1f0) (LP: #1838982)
    - Revert "ovl: set I_CREATING on inode being created"
    - Revert "new primitive: discard_new_inode()"

linux (4.15.0-57.63) bionic; urgency=medium

  * CVE-2019-1125
    - x86/cpufeatures: Carve out CQM features retrieval
    - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word
    - x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations
    - x86/speculation: Enable Spectre v1 swapgs mitigations
    - x86/entry/64: Use JMP instead of JMPQ
    - x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS

  * Packaging resync (LP: #1786013)
    - update dkms package versions

linux (4.15.0-56.62) bionic; urgency=medium

  * bionic/linux: 4.15.0-56.62 -proposed tracker (LP: #1837626)

  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log
    - [Packaging] update helper scripts

  * CVE-2019-2101
    - media: uvcvideo: Fix 'type' check leading to overflow

  * hibmc-drm Causes Unreadable Display for Huawei amd64 Servers (LP: #1762940)
    - [Config] Set CONFIG_DRM_HISI_HIBMC to arm64 only
    - SAUCE: Make CONFIG_DRM_HISI_HIBMC depend on ARM64

  * Bionic: support for Solarflare X2542 network adapter (sfc driver)
    (LP: #1836635)
    - sfc: make mem_bar a function rather than a constant
    - sfc: support VI strides other than 8k
    - sfc: add Medford2 (SFC9250) PCI Device IDs
    - sfc: improve PTP error reporting
    - sfc: update EF10 register definitions
    - sfc: populate the timer reload field
    - sfc: update MCDI protocol headers
    - sfc: support variable number of MAC stats
    - sfc: expose FEC stats on Medford2
    - sfc: expose CTPIO stats on NICs that support them
    - sfc: basic MCDI mapping of 25/50/100G link speeds
    - sfc: support the ethtool ksettings API properly so that 25/50/100G works
    - sfc: add bits for 25/50/100G supported/advertised speeds
    - sfc: remove tx and MCDI handling from NAPI budget consideration
    - sfc: handle TX timestamps in the normal data path
    - sfc: add function to determine which TX timestamping method to use
    - sfc: use main datapath for HW timestamps if available
    - sfc: only enable TX timestamping if the adapter is licensed for it
    - sfc: MAC TX timestamp handling on the 8000 series
    - sfc: on 8000 series use TX queues for TX timestamps
    - sfc: only advertise TX timestamping if we have the license for it
    - sfc: simplify RX datapath timestamping
    - sfc: support separate PTP and general timestamping
    - sfc: support second + quarter ns time format for receive datapath
    - sfc: support Medford2 frequency adjustment format
    - sfc: add suffix to large constant in ptp
    - sfc: mark some unexported symbols as static
    - sfc: update MCDI protocol headers
    - sfc: support FEC configuration through ethtool
    - sfc: remove ctpio_dmabuf_start from stats
    - sfc: stop the TX queue before pushing new buffers

  * [18.04 FEAT] zKVM: Add hardwar...