Cosmic update to v4.18.8 stable release

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The v4.18.8 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches from the v4.18.8 stable release shall be applied:

act_ife: fix a potential use-after-free
ipv4: tcp: send zero IPID for RST and ACK sent in SYN-RECV and TIME-WAIT state
net: bcmgenet: use MAC link status for fixed phy
net: macb: do not disable MDIO bus at open/close time
net: sched: Fix memory exposure from short TCA_U32_SEL
qlge: Fix netdev features configuration.
r8169: add support for NCube 8168 network card
tcp: do not restart timewait timer on rst reception
vti6: remove !skb->ignore_df check from vti6_xmit()
act_ife: move tcfa_lock down to where necessary
act_ife: fix a potential deadlock
net: sched: action_ife: take reference to meta module
bnxt_en: Clean up unused functions.
bnxt_en: Do not adjust max_cp_rings by the ones used by RDMA.
net/sched: act_pedit: fix dump of extended layered op
tipc: fix a missing rhashtable_walk_exit()
hv_netvsc: Fix a deadlock by getting rtnl lock earlier in netvsc_probe()
tipc: fix the big/little endian issue in tipc_dest
sctp: remove useless start_fail from sctp_ht_iter in proc
erspan: set erspan_ver to 1 by default when adding an erspan dev
net: macb: Fix regression breaking non-MDIO fixed-link PHYs
ipv6: don't get lwtstate twice in ip6_rt_copy_init()
net/ipv6: init ip6 anycast rt->dst.input as ip6_input
net/ipv6: Only update MTU metric if it set
net/ipv6: Put lwtstate when destroying fib6_info
net/mlx5: Fix SQ offset in QPs with small RQ
r8169: set RxConfig after tx/rx is enabled for RTL8169sb/8110sb devices
Revert "net: stmmac: Do not keep rearming the coalesce timer in stmmac_xmit"
ip6_vti: fix creating fallback tunnel device for vti6
ip6_vti: fix a null pointer deference when destroy vti6 tunnel
nfp: wait for posted reconfigs when disabling the device
sctp: hold transport before accessing its asoc in sctp_transport_get_next
mlxsw: spectrum_switchdev: Do not leak RIFs when removing bridge
vhost: correctly check the iova range when waking virtqueue
hv_netvsc: ignore devices that are not PCI
cifs: check if SMB2 PDU size has been padded and suppress the warning
hfsplus: don't return 0 when fill_super() failed
hfs: prevent crash on exit from failed search
sunrpc: Don't use stack buffer with scatterlist
fork: don't copy inconsistent signal handler state to child
fs/proc/vmcore.c: hide vmcoredd_mmap_dumps() for nommu builds
reiserfs: change j_timestamp type to time64_t
iommu/rockchip: Handle errors returned from PM framework
hfsplus: fix NULL dereference in hfsplus_lookup()
iommu/rockchip: Move irq request past pm_runtime_enable
fs/proc/kcore.c: use __pa_symbol() for KCORE_TEXT list entries
fat: validate ->i_start before using
workqueue: skip lockdep wq dependency in cancel_work_sync()
workqueue: re-add lockdep dependencies for flushing
scripts: modpost: check memory allocation results
apparmor: fix an error code in __aa_create_ns()
virtio: pci-legacy: Validate queue pfn
x86/mce: Add notifier_block forward declaration
i2c: core: ACPI: Make acpi_gsb_i2c_read_bytes() check i2c_transfer return value
IB/hfi1: Invalid NUMA node information can cause a divide by zero
pwm: meson: Fix mux clock names
powerpc/topology: Get topology for shared processors at boot
mm/fadvise.c: fix signed overflow UBSAN complaint
mm: make DEFERRED_STRUCT_PAGE_INIT explicitly depend on SPARSEMEM
fs/dcache.c: fix kmemcheck splat at take_dentry_name_snapshot()
platform/x86: intel_punit_ipc: fix build errors
bpf, sockmap: fix map elem deletion race with smap_stop_sock
tcp, ulp: fix leftover icsk_ulp_ops preventing sock from reattach
bpf, sockmap: fix sock_map_ctx_update_elem race with exist/noexist
net/xdp: Fix suspicious RCU usage warning
bpf, sockmap: fix leakage of smap_psock_map_entry
samples/bpf: all XDP samples should unload xdp/bpf prog on SIGTERM
netfilter: ip6t_rpfilter: set F_IFACE for linklocal addresses
s390/kdump: Fix memleak in nt_vmcoreinfo
ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()
mfd: sm501: Set coherent_dma_mask when creating subdevices
netfilter: x_tables: do not fail xt_alloc_table_info too easilly
platform/x86: asus-nb-wmi: Add keymap entry for lid flip action on UX360
netfilter: fix memory leaks on netlink_dump_start error
tcp, ulp: add alias for all ulp modules
ubi: Initialize Fastmap checkmapping correctly
RDMA/hns: Fix usage of bitmap allocation functions return values
ACPICA: ACPICA: add status check for acpi_hw_read before assigning return value
perf arm spe: Fix uninitialized record error variable
net: hns3: Fix for command format parsing error in hclge_is_all_function_id_zero
block: don't warn for flush on read-only device
PCI: Match Root Port's MPS to endpoint's MPSS as necessary
drm/amd/display: Guard against null crtc in CRC IRQ
coccicheck: return proper error code on fail
perf tools: Check for null when copying nsinfo.
f2fs: avoid race between zero_range and background GC
f2fs: fix avoid race between truncate and background GC
RISC-V: Use KBUILD_CFLAGS instead of KCFLAGS when building the vDSO
irqchip/stm32: Fix init error handling
irqchip/bcm7038-l1: Hide cpu offline callback when building for !SMP
net/9p/trans_fd.c: fix race by holding the lock
net/9p: fix error path of p9_virtio_probe
f2fs: fix to clear PG_checked flag in set_page_dirty()
pinctrl: axp209: Fix NULL pointer dereference after allocation
bpf: fix bpffs non-array map seq_show issue
powerpc/uaccess: Enable get_user(u64, *p) on 32-bit
powerpc: Fix size calculation using resource_size()
perf probe powerpc: Fix trace event post-processing
block: bvec_nr_vecs() returns value for wrong slab
brcmfmac: fix brcmf_wiphy_wowl_params() NULL pointer dereference
s390/dasd: fix hanging offline processing due to canceled worker
s390/dasd: fix panic for failed online processing
ACPI / scan: Initialize status to ACPI_STA_DEFAULT
blk-mq: count the hctx as active before allocating tag
scsi: aic94xx: fix an error code in aic94xx_init()
NFSv4: Fix error handling in nfs4_sp4_select_mode()
Input: do not use WARN() in input_alloc_absinfo()
xen/balloon: fix balloon initialization for PVH Dom0
PCI: mvebu: Fix I/O space end address calculation
dm kcopyd: avoid softlockup in run_complete_job
staging: comedi: ni_mio_common: fix subdevice flags for PFI subdevice
ASoC: rt5677: Fix initialization of rt5677_of_match.data
iommu/omap: Fix cache flushes on L2 table entries
selftests/powerpc: Kill child processes on SIGINT
selinux: cleanup dentry and inodes on error in selinuxfs
RDS: IB: fix 'passing zero to ERR_PTR()' warning
cfq: Suppress compiler warnings about comparisons
smb3: fix reset of bytes read and written stats
CIFS: fix memory leak and remove dead code
SMB3: Number of requests sent should be displayed for SMB3 not just CIFS
smb3: if server does not support posix do not allow posix mount option
powerpc/platforms/85xx: fix t1042rdb_diu.c build errors & warning
powerpc/64s: Make rfi_flush_fallback a little more robust
um: fix parallel building with O= option
powerpc/pseries: Avoid using the size greater than RTAS_ERROR_LOG_MAX.
clk: rockchip: Add pclk_rkpwm_pmu to PMU critical clocks in rk3399
drm/amd/display: Read back max backlight value at boot
KVM: vmx: track host_state.loaded using a loaded_vmcs pointer
kvm: nVMX: Fix fault vector for VMX operation at CPL > 0
drm/etnaviv: fix crash in GPU suspend when init failed due to buffer placement
btrfs: Exit gracefully when chunk map cannot be inserted to the tree
btrfs: replace: Reset on-disk dev stats value after replace
btrfs: fix in-memory value of total_devices after seed device deletion
btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized
btrfs: tree-checker: Detect invalid and empty essential trees
btrfs: check-integrity: Fix NULL pointer dereference for degraded mount
btrfs: lift uuid_mutex to callers of btrfs_open_devices
btrfs: Don't remove block group that still has pinned down bytes
btrfs: Fix a C compliance issue
arm64: rockchip: Force CONFIG_PM on Rockchip systems
ARM: rockchip: Force CONFIG_PM on Rockchip systems
btrfs: do btrfs_free_stale_devices outside of device_list_add
btrfs: extend locked section when adding a new device in device_list_add
btrfs: rename local devices for fs_devices in btrfs_free_stale_devices(
btrfs: use device_list_mutex when removing stale devices
btrfs: lift uuid_mutex to callers of btrfs_scan_one_device
btrfs: lift uuid_mutex to callers of btrfs_parse_early_options
btrfs: reorder initialization before the mount locks uuid_mutex
btrfs: fix mount and ioctl device scan ioctl race
drm/i915/lpe: Mark LPE audio runtime pm as "no callbacks"
drm/i915: Nuke the LVDS lid notifier
drm/i915: Increase LSPCON timeout
drm/i915: Free write_buf that we allocated with kzalloc.
drm/amdgpu: update uvd_v6_0_ring_vm_funcs to use new nop packet
drm/amdgpu: fix a reversed condition
drm/amdgpu: Fix RLC safe mode test in gfx_v9_0_enter_rlc_safe_mode
drm/amd/pp: Convert voltage unit in mV*4 to mV on CZ/ST
drm/amd/powerplay: fixed uninitialized value
drm/amd/pp/Polaris12: Fix a chunk of registers missed to program
drm/edid: Quirk Vive Pro VR headset non-desktop.
drm/edid: Add 6 bpc quirk for SDC panel in Lenovo B50-80
drm/amd/display: fix type of variable
drm/amd/display: Don't share clk source between DP and HDMI
drm/amd/display: update clk for various HDMI color depths
drm/amd/display: Use requested HDMI aspect ratio
drm/amd/display: Report non-DP display as disconnected without EDID
drm/rockchip: lvds: add missing of_node_put
drm/rockchip: vop: split out core clock enablement into separate functions
drm/rockchip: vop: fix irq disabled after vop driver probed
drm/amd/display: Pass connector id when executing VBIOS CT
drm/amd/display: Check if clock source in use before disabling
drm/amdgpu: update tmr mc address
drm/amdgpu:add tmr mc address into amdgpu_firmware_info
drm/amdgpu:add new firmware id for VCN
drm/amdgpu:add VCN support in PSP driver
drm/amdgpu:add VCN booting with firmware loaded by PSP
drm/amdgpu: fix incorrect use of fcheck
drm/amdgpu: fix incorrect use of drm_file->pid
drm/i915: Re-apply "Perform link quality check, unconditionally during long pulse"
uapi/linux/keyctl.h: don't use C++ reserved keyword as a struct member name
mm: respect arch_dup_mmap() return value
drm/i915: set DP Main Stream Attribute for color range on DDI platforms
x86/tsc: Prevent result truncation on 32bit
drm/amdgpu: Keep track of amount of pinned CPU visible VRAM
drm/amdgpu: Make pin_size values atomic
drm/amdgpu: Warn and update pin_size values when destroying a pinned BO
drm/amdgpu: Don't warn on destroying a pinned BO
debugobjects: Make stack check warning more informative
x86/pae: use 64 bit atomic xchg function in native_ptep_get_and_clear
x86/xen: don't write ptes directly in 32-bit PV guests
kbuild: make missing $DEPMOD a Warning instead of an Error
kvm: x86: Set highest physical address bits in non-present/reserved SPTEs
x86: kvm: avoid unused variable warning
HID: redragon: fix num lock and caps lock LEDs
ASoC: wm8994: Fix missing break in switch
Linux 4.18.8

       The following patches from the v4.18.8 stable release shall be applied:

r8152: disable RX aggregation on new Dell TB16 dock
net: hns3: Fix for phy link issue when using marvell phy driver