-----BEGIN PGP SIGNATURE-----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=5xTr
-----END PGP SIGNATURE-----
Merge 4.14.92 into android-4.14
Changes in 4.14.92
ipv4: Fix potential Spectre v1 vulnerability
ip6mr: Fix potential Spectre v1 vulnerability
ax25: fix a use-after-free in ax25_fillin_cb()
gro_cell: add napi_disable in gro_cells_destroy
ibmveth: fix DMA unmap error in ibmveth_xmit_start error path
ieee802154: lowpan_header_create check must check daddr
ipv6: explicitly initialize udp6_addr in udp_sock_create6()
ipv6: tunnels: fix two use-after-free
isdn: fix kernel-infoleak in capi_unlocked_ioctl
net: ipv4: do not handle duplicate fragments as overlapping
net: macb: restart tx after tx used bit read
net: phy: Fix the issue that netif always links up after resuming
netrom: fix locking in nr_find_socket()
net/wan: fix a double free in x25_asy_open_tty()
packet: validate address length
packet: validate address length if non-zero
ptr_ring: wrap back ->producer in __ptr_ring_swap_queue()
qmi_wwan: Added support for Telit LN940 series
sctp: initialize sin6_flowinfo for ipv6 addrs in sctp_inet6addr_event
tcp: fix a race in inet_diag_dump_icsk()
tipc: fix a double kfree_skb()
vhost: make sure used idx is seen before log in vhost_add_used_n()
VSOCK: Send reset control packet when socket is partially bound
xen/netfront: tolerate frags with no data
net/mlx5: Typo fix in del_sw_hw_rule
net/mlx5e: RX, Fix wrong early return in receive queue poll
mlxsw: core: Increase timeout during firmware flash process
net/mlx5e: Remove the false indication of software timestamping support
tipc: use lock_sock() in tipc_sk_reinit()
tipc: compare remote and local protocols in tipc_udp_enable()
qmi_wwan: Added support for Fibocom NL668 series
qmi_wwan: Add support for Fibocom NL678 series
net/smc: fix TCP fallback socket release
sock: Make sock->sk_stamp thread-safe
IB/hfi1: Incorrect sizing of sge for PIO will OOPs
ALSA: rme9652: Fix potential Spectre v1 vulnerability
ALSA: emu10k1: Fix potential Spectre v1 vulnerabilities
ALSA: pcm: Fix potential Spectre v1 vulnerability
ALSA: emux: Fix potential Spectre v1 vulnerabilities
mtd: atmel-quadspi: disallow building on ebsa110
ALSA: hda: add mute LED support for HP EliteBook 840 G4
ALSA: fireface: fix for state to fetch PCM frames
ALSA: firewire-lib: fix wrong handling payload_length as payload_quadlet
ALSA: firewire-lib: fix wrong assignment for 'out_packet_without_header' tracepoint
ALSA: firewire-lib: use the same print format for 'without_header' tracepoints
ALSA: hda/tegra: clear pending irq handlers
USB: serial: pl2303: add ids for Hewlett-Packard HP POS pole displays
USB: serial: option: add Fibocom NL678 series
usb: r8a66597: Fix a possible concurrency use-after-free bug in r8a66597_endpoint_disable()
staging: wilc1000: fix missing read_write setting when reading data
qmi_wwan: apply SET_DTR quirk to the SIMCOM shared device ID
s390/pci: fix sleeping in atomic during hotplug
Input: elan_i2c - add ACPI ID for touchpad in ASUS Aspire F5-573G
x86/speculation/l1tf: Drop the swap storage limit restriction when l1tf=off
x86/mm: Drop usage of __flush_tlb_all() in kernel_physical_mapping_init()
KVM: x86: Use jmp to invoke kvm_spurious_fault() from .fixup
KVM: nVMX: Free the VMREAD/VMWRITE bitmaps if alloc_kvm_area() fails
platform-msi: Free descriptors in platform_msi_domain_free()
perf pmu: Suppress potential format-truncation warning
ext4: add ext4_sb_bread() to disambiguate ENOMEM cases
ext4: fix possible use after free in ext4_quota_enable
ext4: missing unlock/put_page() in ext4_try_to_write_inline_data()
ext4: fix EXT4_IOC_GROUP_ADD ioctl
ext4: include terminating u32 in size of xattr entries when expanding inodes
ext4: force inode writes when nfsd calls commit_metadata()
ext4: check for shutdown and r/o file system in ext4_write_inode()
spi: bcm2835: Fix race on DMA termination
spi: bcm2835: Fix book-keeping of DMA termination
spi: bcm2835: Avoid finishing transfer prematurely in IRQ mode
clk: rockchip: fix typo in rk3188 spdif_frac parent
crypto: cavium/nitrox - fix a DMA pool free failure
cgroup: fix CSS_TASK_ITER_PROCS
cdc-acm: fix abnormal DATA RX issue for Mediatek Preloader.
Btrfs: fix fsync of files with multiple hard links in new directories
netfilter: xt_connlimit: don't store address in the conn nodes
netfilter: nf_conncount: expose connection list interface
netfilter: nf_conncount: Fix garbage collection with zones
netfilter: nf_conncount: fix garbage collection confirm race
netfilter: nf_conncount: don't skip eviction when age is negative
f2fs: fix validation of the block count in sanity_check_raw_super
serial: uartps: Fix interrupt mask issue to handle the RX interrupts properly
media: vivid: free bitmap_cap when updating std/timings/etc.
media: v4l2-tpg: array index could become negative
MIPS: math-emu: Write-protect delay slot emulation pages
MIPS: c-r4k: Add r4k_blast_scache_node for Loongson-3
MIPS: Ensure pmd_present() returns false after pmd_mknotpresent()
MIPS: Align kernel load address to 64KB
MIPS: Expand MIPS32 ASIDs to 64 bits
MIPS: OCTEON: mark RGMII interface disabled on OCTEON III
CIFS: Fix error mapping for SMB2_LOCK command which caused OFD lock problem
arm64: KVM: Avoid setting the upper 32 bits of VTCR_EL2 to 1
arm/arm64: KVM: vgic: Force VM halt when changing the active state of GICv3 PPIs/SGIs
rtc: m41t80: Correct alarm month range with RTC reads
tpm: tpm_try_transmit() refactor error flow.
tpm: tpm_i2c_nuvoton: use correct command duration for TPM 2.x
spi: bcm2835: Unbreak the build of esoteric configs
MIPS: Only include mmzone.h when CONFIG_NEED_MULTIPLE_NODES=y
Linux 4.14.92
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>