Manual CentOS Debranding

[rt] Update source tree to match RHEL 7.6.z tree [1689417 1642619]
[net] tcp: enforce tcp_min_snd_mss in tcp_mtu_probing() (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
[net] tcp: add tcp_min_snd_mss sysctl (Florian Westphal) [1719914 1719915] {CVE-2019-11479}
[net] tcp: tcp_fragment() should apply sane memory limits (Florian Westphal) [1719849 1719850] {CVE-2019-11478}
[net] tcp: limit payload size of sacked skbs (Florian Westphal) [1719594 1719595] {CVE-2019-11477}
[net] tcp: pass previous skb to tcp_shifted_skb() (Florian Westphal) [1719594 1719595] {CVE-2019-11477}

[rt] Update source tree to match RHEL 7.6.z tree [1689417 1642619]
[security] xattr: use RH_KABI_CONST to avoid security_inode_init_security checksum change (Cestmir Kalina) [1702286 1710633]

[rt] Update source tree to match RHEL 7.6.z tree [1689417 1642619]
[x86] spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1712998 1712993 1710501 1710498] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
[x86] speculation/mds: Properly set/clear mds_idle_clear static key (Waiman Long) [1713004 1707292] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}

[rt] Update source tree to match RHEL 7.6.z tree [1689417 1642619]
[x86] x86/speculation/mds: Print SMT vulnerable on MSBDS with mitigations off (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
[x86] x86/speculation/mds: Fix comment (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
[x86] x86/speculation/mds: Add SMT warning message (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
[x86] x86/speculation: Move arch_smt_update() call to after mitigation decisions (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
[documentation] x86/speculation/mds: Add mds=full,nosmt cmdline option (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
[kernel] x86/speculation: Remove redundant arch_smt_update() invocation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
[x86] x86/spec_ctrl: Update MDS mitigation status after late microcode load (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
[x86] x86/spec_ctrl: Add debugfs x86/smt_present file (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
[x86] x86/spec_ctrl: Disable automatic enabling of STIBP with SMT on (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
[documentation] Documentation: Add MDS vulnerability documentation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
[documentation] Documentation: Move L1TF to separate directory (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
[x86] x86/speculation/mds: Add mitigation mode VMWERV (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
[base] x86/speculation/mds: Add sysfs reporting for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
[x86] x86/speculation/mds: Add mitigation control for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
[x86] x86/speculation/mds: Conditionally clear CPU buffers on idle entry (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
[kvm] x86/kvm/vmx: Add MDS protection when L1D Flush is not active (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
[x86] x86/speculation/mds: Clear CPU buffers on exit to user (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
[x86] x86/speculation/mds: Add mds_clear_cpu_buffers() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
[kvm] x86/kvm: Expose X86_FEATURE_MD_CLEAR to guests (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
[x86] x86/speculation/mds: Add BUG_MSBDS_ONLY (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
[x86] x86/speculation/mds: Add basic bug infrastructure for MDS (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
[x86] x86/speculation: Consolidate CPU whitelists (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
[x86] x86/msr-index: Cleanup bit defines (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
[x86] x86/l1tf: Show actual SMT state (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
[x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
[x86] x86/speculation: Rework SMT state change (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
[kernel] sched/smt: Expose sched_smt_present static key (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
[kernel] sched/smt: Make sched_smt_present track topology (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
[x86] x86/speculation: Disable STIBP when enhanced IBRS is in use (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
[x86] x86/speculation: Move STIPB/IBPB string conditionals out of cpu_show_common() (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
[x86] x86/speculation: Enable cross-hyperthread spectre v2 STIBP mitigation (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
[x86] x86/spectre_v2: Make spectre_v2_mitigation mode available (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
[x86] x86/spec_ctrl: Add X86_FEATURE_USE_IBPB (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091}
[x86] x86/spec_ctrl: Add casting to fix compilation error (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
[x86] x86/cpu: Sanitize FAM6_ATOM naming (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}
[x86] x86/cpufeatures: Add Intel PCONFIG cpufeature (Waiman Long) [1692597 1692598 1692599 1705815 1690335 1690348 1690358 1709296] {CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091}

[rt] Update source tree to match RHEL 7.6.z tree [1689417 1642619]
[security] selinux: always allow mounting submounts (Ondrej Mosnacek) [1702923 1077929]
[block] Make blk_queue_enter() reexamine the DYING flag (Ming Lei) [1702921 1701348]
[block] wakeup tasks blocked on q->mq_freeze_wq (Ming Lei) [1702921 1701348]
[fs] revert "[fs] xfs: use rhashtable to track buffer cache" (Brian Foster) [1702922 1658749]
[fs] xfs: hold xfs_buf locked between shortform->leaf conversion and the addition of an attribute (Brian Foster) [1701293 1613405]
[fs] xfs: add the ability to join a held buffer to a defer_ops (Brian Foster) [1701293 1613405]
[fs] xfs: refactor buffer logging into buffer dirtying helper (Brian Foster) [1701293 1613405]
[char] ipmi: ipmi_si_hardcode.c: init si_type array to fix a crash (Tony Camuso) [1701991 1692236]
[char] ipmi_si: Fix crash when using hard-coded device (Tony Camuso) [1701991 1692236]
[char] ipmi: Remove platform driver overrides and use the id_table (Tony Camuso) [1701991 1692236]
[security] xattr: Constify ->name member of "struct xattr" (Aaron Tomlin) [1702286 1607307]
[net] ipv6 Use get_hash_from_flowi6 for rt6 hash (Sabrina Dubroca) [1702282 1625454]
[s390] zcrypt: fix specification exception on z196 during ap probe (Hendrik Brueckner) [1700706 1669535]
[md] dm table: propagate BDI_CAP_STABLE_WRITES to fix sporadic checksum errors (Mike Snitzer) [1699722 1693466]
[fs] blockdev: Fix livelocks on loop device (Lukas Czerner) [1698110 1686149]
[fs] ext4: fix crash during online resizing (Lukas Czerner) [1698110 1686149]
[fs] ext4: fix overflow caused by missing cast in ext4_resize_fs() (Lukas Czerner) [1698110 1671293]
[powerpc] livepatch: return -ERRNO values in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
[powerpc] livepatch: small cleanups in save_stack_trace_tsk_reliable() (Joe Lawrence) [1697867 1658435]
[powerpc] livepatch: relax reliable stack tracer checks for first-frame (Joe Lawrence) [1697867 1658435]
[powerpc] 64s: Make reliable stacktrace dependency clearer (Joe Lawrence) [1697867 1658435]
[powerpc] 64s: Clear on-stack exception marker upon exception return (Joe Lawrence) [1697867 1658435]
[powerpc] livepatch: Fix build error with kprobes disabled (Joe Lawrence) [1697867 1658435]
[fs] xfs: don't screw up direct writes when freesp is fragmented (Brian Foster) [1693796 1667523]
[nvme] ensure forward progress during Admin passthru (David Milburn) [1690519 1672428]

[rt] Update source tree to match RHEL 7.6.z tree [1689417 1642619]
[s390] cputime: fix incorrect system time (Hendrik Brueckner) [1701743 1698825]

[rt] Update source tree to match RHEL 7.6.z tree [1689417 1642619]
[message] scsi: mptsas: Fixup device hotplug for VMWare ESXi (Tomas Henzl) [1699723 1661906]

[rt] Update source tree to match RHEL 7.6.z tree [1689417 1642619]
kvm/hyper-v: avoid spurious pending stimer on vCPU init (Vitaly Kuznetsov)
[kvm] KVM: x86: work around leak of uninitialized stack contents (Paolo Bonzini) {CVE-2019-7222}
kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Vitaly Kuznetsov) [1647097 1631439]
kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0 (Vitaly Kuznetsov) [1647097 1631439]
kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked (Vitaly Kuznetsov) [1647097 1631439]
kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change (Vitaly Kuznetsov) [1647097 1631439]
kvm: x86: hyperv: avoid livelock in oneshot SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2 (Vitaly Kuznetsov) [1647097 1631439]
kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm->vcpus (Vitaly Kuznetsov) [1647097 1631439]
kvm: x86: fix NULL deref in vcpu_scan_ioapic (Vitaly Kuznetsov) [1647097 1631439]
kvm: x86: use delivery to self in hyperv synic (Vitaly Kuznetsov) [1647097 1631439]
kvm: x86: hyperv: make function static to avoid compiling warning (Vitaly Kuznetsov) [1647097 1631439]
kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled (Vitaly Kuznetsov) [1647097 1631439]
kvm/x86: Hyper-V VMBus hypercall userspace exit (Vitaly Kuznetsov) [1647097 1631439]
kvm/x86: Reject Hyper-V hypercall continuation (Vitaly Kuznetsov) [1647097 1631439]
kvm/x86: Hyper-V SynIC timers tracepoints (Vitaly Kuznetsov) [1647097 1631439]
kvm/x86: Hyper-V SynIC tracepoints (Vitaly Kuznetsov) [1647097 1631439]
kvm/x86: Update SynIC timers on guest entry only (Vitaly Kuznetsov) [1647097 1631439]
kvm/x86: Skip SynIC vector check for QEMU side (Vitaly Kuznetsov) [1647097 1631439]
kvm/x86: Hyper-V fix SynIC timer disabling condition (Vitaly Kuznetsov) [1647097 1631439]
kvm/x86: Reorg stimer_expiration() to better control timer restart (Vitaly Kuznetsov) [1647097 1631439]
kvm/x86: Hyper-V unify stimer_start() and stimer_restart() (Vitaly Kuznetsov) [1647097 1631439]
kvm/x86: Drop stimer_stop() function (Vitaly Kuznetsov) [1647097 1631439]
kvm/x86: Hyper-V timers fix incorrect logical operation (Vitaly Kuznetsov) [1647097 1631439]
kvm/x86: Remove Hyper-V SynIC timer stopping (Vitaly Kuznetsov) [1647097 1631439]
kvm/x86: Hyper-V SynIC timers (Vitaly Kuznetsov) [1647097 1631439]
kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack (Vitaly Kuznetsov) [1647097 1631439]
kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers (Vitaly Kuznetsov) [1647097 1631439]
kvm/x86: Rearrange func's declarations inside Hyper-V header (Vitaly Kuznetsov) [1647097 1631439]
kvm/x86: Hyper-V kvm exit (Vitaly Kuznetsov) [1647097 1631439]
kvm/x86: Hyper-V synthetic interrupt controller (Vitaly Kuznetsov) [1647097 1631439]
kvm/x86: split ioapic-handled and EOI exit bitmaps (Vitaly Kuznetsov) [1647097 1631439]
kvm/irqchip: kvm_arch_irq_routing_update renaming split (Vitaly Kuznetsov) [1647097 1631439]
[netdrv] net/mlx5e: Properly set steering match levels for offloaded TC decap rules (Alaa Hleihel) [1686292 1618427]
[netdrv] net/mlx5e: Always use the match level enum when parsing TC rule match (Alaa Hleihel) [1686292 1618427]
[netdrv] net/mlx5e: Support offloaded TC flows with no matches on headers (Alaa Hleihel) [1686292 1618427]
[netdrv] net/mlx5e: Get the required HW match level while parsing TC flow matches (Alaa Hleihel) [1686292 1618427]
[netdrv] net/mlx5e: Properly order min inline mode setup while parsing TC matches (Alaa Hleihel) [1686292 1618427]
[netdrv] net/mlx5e: Avoid redundant zeroing of offloaded TC flow attributes (Alaa Hleihel) [1686292 1618427]
[netdrv] net/mlx5e: Err if asked to offload TC match on frag being first (Alaa Hleihel) [1686292 1618427]
[x86] hyperv: Stop suppressing X86_FEATURE_PCID (Vitaly Kuznetsov) [1697940 1691421]
[net] geneve: correctly handle ipv6.disable module parameter (Jiri Benc) [1694981 1677049]
[fs] ceph: Fix append mode for sync/direct write (Zheng Yan) [1696595 1691227]
[fs] ovl: fix return value from ovl_posix_acl_create() (Miklos Szeredi) [1696292 1677705]
[x86] mm: Unbreak modules that use the DMA API (Gary Hook) [1695511 1697241 1676613 1662887]
[sound] alsa/hda: add more quirks for HP Z2 G4 and HP Z240 (Jaroslav Kysela) [1693562 1680180]
[sound] alsa: hda/conexant - Add fixup for HP Z2 G4 workstation (Jaroslav Kysela) [1693562 1657855]
[block] mtip32xx: fix memory corruption by initializing internal command header (Ming Lei) [1689929 1660292]
[fs] nfsd: deal with revoked delegations appropriately (Dave Wysochanski) [1689811 1552203]

[rt] Update source tree to match RHEL 7.6.z tree [1689417 1642619]
[fs] ext4: Fix data corruption caused by unaligned direct AIO (Lukas Czerner) [1693561 1684780]
[net] sched: act_csum: Fix csum calc for tagged packets (Ivan Vecera) [1693110 1676462]

[rt] Update source tree to match RHEL 7.6.z tree [1689417 1642619]
[fs] move the call of __d_drop(anon) into __d_materialise_unique(dentry, anon) (Zheng Yan) [1692266 1627001]
[fs] dcache: d_splice_alias should ignore DCACHE_DISCONNECTED (Zheng Yan) [1692266 1627001]
[fs] dcache: d_splice_alias should detect loops (Zheng Yan) [1692266 1627001]
[fs] dcache: d_splice_alias mustn't create directory aliases (Zheng Yan) [1692266 1627001]
[fs] dcache: close d_move race in d_splice_alias (Zheng Yan) [1692266 1627001]
[fs] dcache: move d_splice_alias (Zheng Yan) [1692266 1627001]
[fs] dcache: don't clear DCACHE_DISCONNECTED too early (Zheng Yan) [1692266 1627001]
[fs] dcache: Don't set DISCONNECTED on "pseudo filesystem" dentries (Zheng Yan) [1692266 1627001]
[fs] dcache: use IS_ROOT to decide where dentry is hashed (Zheng Yan) [1692266 1627001]

[rt] Update source tree to match RHEL 7.6.z tree [1689417 1642619]
[drm] drm/nouveau/kms/nv50-: also flush fb writes when rewinding push buffer (Ben Skeggs) [1690761 1669098]

[rt] Update source tree to match RHEL 7.6.z tree [1689417 1642619]
[kernel] locking/rwsem: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
[kernel] futex: Fix (possible) missed wakeup (Waiman Long) [1690323 1547078]
[kernel] futex: Use smp_store_release() in mark_wake_futex() (Waiman Long) [1690323 1547078]
[kernel] sched/wake_q: Fix wakeup ordering for wake_q (Waiman Long) [1690323 1547078]
[kernel] sched/wake_q: Document wake_q_add() (Waiman Long) [1690323 1547078]
[scsi] mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (Tomas Henzl) [1689379 1649288]
[x86] cpu: avoid crash in get_cpu_cache_id() (David Arcari) [1689120 1626279]
[net] igmp: Allow user-space configuration of igmp unsolicited report interval (Hangbin Liu) [1686771 1663941]
[net] igmp: Don't flush routing cache when force_igmp_version is modified (Hangbin Liu) [1686771 1663941]
[net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1688225 1623359]
[net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1688225 1623359]
[net] igmp: make function __ip_mc_inc_group() static (Hangbin Liu) [1688225 1623359]
[net] igmp: Reduce Unsolicited report interval to 1s when using IGMPv3 (Hangbin Liu) [1688225 1623359]
[netdrv] cxgb4: Mask out interrupts that are not enabled (Arjun Vynipadath) [1687487 1678729]
[acpi] apci / watchdog: enable acpi_watchdog_uses_rtc (David Arcari) [1683078 1663637]
[watchdog] simplify getting .drvdata (David Arcari) [1683079 1666393]
[acpi] acpi / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (David Arcari) [1683079 1666393]
[acpi] acpi / watchdog: Prefer iTCO_wdt on Lenovo Z50-70 (David Arcari) [1683079 1666393]
[acpi] acpi / watchdog: properly initialize resources (David Arcari) [1683079 1666393]
[acpi] acpi / watchdog: Fix init failure with overlapping register regions (David Arcari) [1683079 1666393]
[acpi] acpi / watchdog: Print out error number when device creation fails (David Arcari) [1683079 1666393]
[net] netfilter: nat: limit port clash resolution attempts (Florian Westphal) [1683093 1654777]
[net] netfilter: nat: remove l4 protocol port rovers (Florian Westphal) [1683093 1654777]
[net] netfilter: nat: cope with negative port range (Florian Westphal) [1683093 1654777]
[x86] mm/fault: Allow stack access below rsp (Waiman Long) [1678221 1651416]
[nvme] nvme-rdma: fix possible double free of controller async event buffer (David Milburn) [1678214 1659532]
[nvme] nvme-rdma: fix possible free of a non-allocated async event buffer (David Milburn) [1678214 1659532]
[nvme] nvme-rdma: stop admin queue before freeing it (David Milburn) [1678214 1659532]
[nvme] rdma: fix double freeing of async event data (David Milburn) [1678216 1655786]
[md] fix memleak for mempool (Nigel Croxon) [1678215 1599780]
[md] Memory leak when flush bio size is zero (Nigel Croxon) [1678215 1599780]
[md] fix lock contention for flush bios (Nigel Croxon) [1678215 1599780]
[net] ipv6: rate-limit probes for neighbourless routes (Sabrina Dubroca) [1677179 1637821]
[net] ipv6: Re-arrange code in rt6_probe() (Sabrina Dubroca) [1677179 1637821]
[netdrv] cxgb4: update supported DCB version (Arjun Vynipadath) [1673821 1668570]
[netdrv] cxgb4: when disabling dcb set txq dcb priority to 0 (Arjun Vynipadath) [1673821 1668570]
[kvm] kvm: fix kvm_ioctl_create_device() reference counting (Paolo Bonzini) [1671922 1671923] {CVE-2019-6974}
[kvm] KVM: nVMX: unconditionally cancel preemption timer in free_nested (Paolo Bonzini) [1671905 1671906] {CVE-2019-7221}
[mm] page-writeback.c: fix range_cyclic writeback vs writepages deadlock (Brian Foster) [1673281 1591574]
[fs] rbd: avoid corruption on partially completed bios (Ilya Dryomov) [1672514 1613493]

[rt] Use new build target and certificates [1684127]
Revert "[x86] kvm/irqchip: kvm_arch_irq_routing_update renaming split" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm/x86: split ioapic-handled and EOI exit bitmaps" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm/x86: Hyper-V synthetic interrupt controller" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm/x86: Hyper-V kvm exit" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm/x86: Rearrange func's declarations inside Hyper-V header" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm/x86: Added Hyper-V vcpu_to_hv_vcpu()/hv_vcpu_to_vcpu() helpers" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm/x86: Hyper-V SynIC message slot pending clearing at SINT ack" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm/x86: Hyper-V SynIC timers" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm/x86: Remove Hyper-V SynIC timer stopping" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm/x86: Hyper-V timers fix incorrect logical operation" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm/x86: Drop stimer_stop() function" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm/x86: Hyper-V unify stimer_start() and stimer_restart()" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm/x86: Reorg stimer_expiration() to better control timer restart" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm/x86: Hyper-V fix SynIC timer disabling condition" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm/x86: Skip SynIC vector check for QEMU side" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm/x86: Update SynIC timers on guest entry only" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm/x86: Hyper-V SynIC tracepoints" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm/x86: Hyper-V SynIC timers tracepoints" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm/x86: Reject Hyper-V hypercall continuation" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm/x86: Hyper-V VMBus hypercall userspace exit" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm: hyper-v: do not do hypercall userspace exits if SynIC is disabled" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm: x86: hyperv: make function static to avoid compiling warning" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm: x86: use delivery to self in hyperv synic" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm: x86: fix NULL deref in vcpu_scan_ioapic" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm: Add kvm_vcpu_get_idx to get vcpu index in kvm->vcpus" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm: x86: hyperv: add KVM_CAP_HYPERV_SYNIC2" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm: x86: hyperv: avoid livelock in oneshot SynIC timers" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm/hyper-v: remove stale entries from vec_bitmap/auto_eoi_bitmap on vector change" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm/hyper-v: inject #GP only when invalid SINTx vector is unmasked" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm: x86: #GP when guest attempts to write MCi_STATUS register w/o 0" (Daniel Bristot de Oliveira) [1688673]
Revert "[x86] kvm: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd" (Daniel Bristot de Oliveira) [1688673]
[net] netfilter: nf_nat: skip nat clash resolution for same-origin entries (Florian Westphal) [1686766 1648965]
[net] netfilter: nf_conntrack: resolve clash for matching conntracks (Florian Westphal) [1686766 1648965]
[net] netfilter: conntrack: skip clash resolution if nat is in place (Florian Westphal) [1686766 1648965]
[net] netfilter: conntrack: introduce clash resolution on insertion race (Florian Westphal) [1686766 1648965]
[net] netfilter: conntrack: fix race between confirmation and flush (Florian Westphal) [1686766 1648965]
[net] netfilter: conntrack: introduce nf_ct_acct_update() (Florian Westphal) [1686766 1648965]
[netdrv] hv_netvsc: Fix a network regression after ifdown/ifup (Mohammed Gamal) [1679997 1661632]

[rt] Update source tree to match RHEL 7.6.z tree [1672406 1642619]
[rt] Minor updates to the build machinery [1672406 1642619]

[rt] Update source tree to match RHEL 7.6.z tree [1672406 1642619]
[fs] revert "[fs] nfs: Don't write back further requests if there is a pending write error" (Benjamin Coddington) [1672510 1656674]
[fs] cifs: connect to servername instead of IP for IPC$ share (Leif Sahlberg) [1672448 1647844]
[acpi] nfit: Fix command-supported detection (Charles Rose) [1671743 1665811]
[acpi] nfit: Block function zero DSMs (Charles Rose) [1671743 1665811]
[x86] efi-bgrt: Replace early_memremap() with memremap() (Lenny Szubowicz) [1671745 1481667]
[x86] efi-bgrt: Replace ioremap() with early_memremap() (Lenny Szubowicz) [1671745 1481667]
[scsi] libiscsi: Allow sd_shutdown on bad transport (Chris Leech) [1670680 1630979]
[block] blk-mq: punt failed direct issue to dispatch list (Ming Lei) [1670511 1656654]
[block] blk-mq: fix corruption with direct issue (Ming Lei) [1670511 1656654]
[powerpc] rtas: Fix a potential race between CPU-Offline & Migration (Steve Best) [1669044 1650249]
[powerpc] pseries: Disable CPU hotplug across migrations (Steve Best) [1669044 1650249]
[md] Add split counter for raid1 write request in the right place (Xiao Ni) [1668208 1659951]
[lib] string_helpers.c: fix infinite loop in string_get_size() (Ewan Milne) [1667989 1660565]
[kernel] stop_machine: Atomically queue and wake stopper threads (Phil Auld) [1667328 1557061]
[kernel] stop_machine: Disable preemption after queueing stopper threads (Phil Auld) [1667328 1557061]
[kernel] stop_machine: Disable preemption when waking two stopper threads (Phil Auld) [1667328 1557061]
[kernel] stop_machine, sched: Fix migrate_swap() vs. active_balance() deadlock (Phil Auld) [1667328 1557061]
[kernel] stop_machine: Make cpu_stop_queue_work() and stop_one_cpu_nowait() return bool (Phil Auld) [1667328 1557061]
[fs] proc: restrict kernel stack dumps to root (Joe Lawrence) [1642401 1638194] {CVE-2018-17972}
[fs] libceph: fall back to sendmsg for slab pages (Ilya Dryomov) [1665814 1647460]
[scsi] csiostor: remove flush_scheduled_work() (Arjun Vynipadath) [1665370 1660882]
[pci] shpchp: Separate existence of SHPC and permission to use it (Myron Stowe) [1663241 1633873]
[pci] shpchp: Manage SHPC unconditionally on non-ACPI systems (Myron Stowe) [1663241 1633873]
[pci] shpchp: Fix AMD POGO identification (Myron Stowe) [1663241 1633873]
[mm] memcontrol: factor out reclaim iterator loading and updating (Aristeu Rozanski) [1663114 1595932]
[net] xfrm: policy: init locks early (Herbert Xu) [1660887 1641866]
[kernel] mm: clear __GFP_FS when PF_MEMALLOC_NOIO is set (Rafael Aquini) [1660392 1657714]
[nvme] flush namespace scanning work just before removing namespaces (Ewan Milne) [1659937 1622487]
[fs] fuse: don't need GETATTR after every READ (Miklos Szeredi) [1657921 1648781]
[fs] fuse: don't invalidate attrs when not using atime (Miklos Szeredi) [1657921 1648781]
[net] Set sk_prot_creator when cloning sockets to the right proto (Andrea Claudi) [1657351 1657352] {CVE-2018-9568}
[kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Jiri Olsa) [1641387 1641388] {CVE-2018-18445}