Linux 4.14-rc5

[Linus Torvalds]

Things seem to be finally starting to calm down for 4.14.

We've certainly had smaller rc5's, but we've had bigger ones too, and
this week finally felt fairly normal in a release that has up until
now felt a bit messier than it perhaps should have been.

So assuming this trend holds, we're all good. Knock wood.

So what do we have here? A little bit of everything, but what might be
most noticeable is some more fixes for the whole new x86 TLB handling
due to the ASID changes that came in this release. Some of the lazy
TLB handling changes caused problems on a few AMD chips with
particular settings, because it was all a little bit *too* lazy in
flushing the TLB. Even when TLB entries aren't used (and will be
flushed before any possible use), the TLB may be speculatively filled,
and that can cause problems if we've already free'd the page tables
that the speculative fill ends up looking up.

The other thing perhaps worth mentioning is how much random fuzzing
people are doing, and it's finding things. We've always done fuzzing
(who remembers the old "crashme" program that just generated random
code and jumped to it? We used to do that quite actively very early
on), but people have been doing some nice targeted fuzzing of driver
subsystems etc, and there's been various fixes (not just this last
week either) coming out of those efforts. Very nice to see.

Anyway, rc5 is out, and things look normal. We've got arch updates
(mostly x86and poweerpc, but some mips), drivers (gpu, networking,
usb, sound, misc), some core kernel (lockdep fixes, networking, mm)
and some tooling (perf, selftests).

Go out and test,

               Linus

---

Al Viro (2):
      more bio_map_user_iov() leak fixes
      bio_copy_user_iov(): don't ignore ->iov_offset

Alan Stern (2):
      USB: dummy-hcd: Fix deadlock caused by disconnect detection
      usb: usbtest: fix NULL pointer dereference

Aleksander Morgado (1):
      cdc_ether: flag the u-blox TOBY-L2 and SARA-U2 as wwan

Alex Manoussakis (1):
      HID: hid-elecom: extend to fix descriptor for HUGE trackball

Alexander Levin (1):
      9p: set page uptodate when required in write_end()

Alexander Usyskin (1):
      mei: always use domain runtime pm callbacks.

Alexei Starovoitov (1):
      bpf: fix liveness marking

Alexey Kodanev (2):
      vti: fix NULL dereference in xfrm_input()
      gso: fix payload length when gso_size is zero

Andrea Arcangeli (1):
      userfaultfd: selftest: exercise -EEXIST only in background transfer

Andreas Engel (1):
      USB: serial: cp210x: add support for ELV TFD500

Andreas Gruenbacher (1):
      direct-io: Prevent NULL pointer access in submit_page_section

Andrew Gabbasov (2):
      usb: gadget: composite: Fix use-after-free in
usb_composite_overwrite_options
      usb: gadget: configfs: Fix memory leak of interface directory data

Andrey Ryabinin (1):
      mm/mempolicy: fix NUMA_INTERLEAVE_HIT counter

Andy Lutomirski (2):
      x86/mm/64: Fix reboot interaction with CR4.PCIDE
      x86/mm: Flush more aggressively in lazy TLB mode

Anju T Sudhakar (3):
      powerpc/perf: Fix for core/nest imc call trace on cpuhotplug
      powerpc/perf: Add ___GFP_NOWARN flag to alloc_pages_node()
      powerpc/perf: Fix IMC initialization crash

Archit Taneja (2):
      drm/msm/dsi: Use correct pm_runtime_put variant during host_init
      drm/msm/mdp5: Remove extra pm_runtime_put call in mdp5_crtc_cursor_set()

Arnaldo Carvalho de Melo (1):
      tools include uapi bpf.h: Sync kernel ABI header with tooling header

Arnd Bergmann (6):
      gpio: acpi: work around false-positive -Wstring-overflow warning
      gpio: omap: omap_gpio_show_rev is not __init
      crypto: axis - hide an unused variable
      crypto: stm32 - Try to fix hash padding
      remoteproc: qcom: fix RPMSG_QCOM_GLINK_SMEM dependencies
      include/linux/of.h: provide of_n_{addr,size}_cells wrappers for !CONFIG_OF

Artem Savkov (2):
      xfrm: don't call xfrm_policy_cache_flush under xfrm_state_lock
      netfilter: ebtables: fix race condition in frame_filter_net_init()

Arvind Yadav (1):
      netfilter: nf_tables: Release memory obtained by kasprintf

Axel Beckert (1):
      doc: Fix typo "8023.ad" in bonding documentation

Benjamin Coddington (1):
      NFS: Fix uninitialized rpc_wait_queue

Boris Brezillon (1):
      mm/cma.c: take __GFP_NOWARN into account in cma_alloc()

Borislav Petkov (2):
      x86/mce: Hide mca_cfg
      x86/microcode: Do the family check first

Brian Foster (1):
      xfs: reinit btree pointer on attr tree inactivation walk

Chao Yu (1):
      f2fs: fix potential panic during fstrim

Chris Wilson (2):
      drm/i915: Silence compiler warning for hsw_power_well_enable()
      drm/i915: Order two completing nop_submit_request

Christian KÃnig (1):
      drm/amdgpu: fix placement flags in amdgpu_ttm_bind

Christophe Jaillet (1):
      crypto: xts - Fix an error handling path in 'create()'

Colin Ian King (3):
      sunrpc: remove redundant initialization of sock
      perf/x86/intel/uncore: Fix memory leaks on allocation failures
      seccomp: make function __get_seccomp_filter static

Corentin Labbe (1):
      pinctrl: bcm2835: fix build warning in bcm2835_gpio_irq_handle_bank

Cyril Bur (1):
      powerpc/64s: Use emergency stack for kernel TM Bad Thing program checks

Dan Carpenter (6):
      NFS: Cleanup error handling in nfs_idmap_request_key()
      selftests/net: rxtimestamp: Fix an off by one
      rpmsg: glink: Unlock on error in qcom_glink_request_intent()
      rpmsg: glink: Fix memory leak in qcom_glink_alloc_intent()
      remoteproc: imx_rproc: fix a couple off by one bugs
      usb: misc: usbtest: Fix overflow in usbtest_do_ioctl()

Dave Chinner (3):
      xfs: Don't log uninitialised fields in inode structures
      xfs: move more RT specific code under CONFIG_XFS_RT
      xfs: don't change inode mode if ACL update fails

Ding Tianhong (2):
      Revert commit 1a8b6d76dc5b ("net:add one common config...")
      net: ixgbe: Use new PCI_DEV_FLAGS_NO_RELAXED_ORDERING flag

Eric Biggers (1):
      MAINTAINERS: associate linux/fs.h with VFS instead of file locking

Eric Dumazet (1):
      netfilter: x_tables: avoid stack-out-of-bounds read in
xt_copy_counters_from_user

Eric Sandeen (1):
      xfs: handle error if xfs_btree_get_bufs fails

Eryu Guan (2):
      nfsd4: define nfsd4_secinfo_no_name_release()
      fs/binfmt_misc.c: node could be NULL when evicting inode

Florian Westphal (1):
      netfilter: ipset: pernet ops must be unregistered last

Grygorii Strashko (2):
      gpio: omap: Fix lost edge interrupts
      pinctrl: cherryview: fix issues caused by dynamic gpio irqs mapping

Guenter Roeck (1):
      scripts/kallsyms.c: ignore symbol type 'n'

Guillaume Nault (1):
      ppp: fix race in ppp device destruction

Gustavo A. R. Silva (1):
      net: thunderx: mark expected switch fall-throughs in nicvf_main()

Gustavo Romero (1):
      powerpc/tm: Fix illegal TM state in signal handler

Haozhong Zhang (1):
      KVM: nVMX: fix guest CR4 loading when emulating L2 to L1 exit

Henryk Heisig (1):
      USB: serial: option: add support for TP-Link LTE module

Herbert Xu (2):
      crypto: skcipher - Fix crash on zero-length input
      crypto: shash - Fix zero-length shash ahash digest crash

Huang Ying (1):
      mm, swap: use page-cluster as max window of VMA based swap readahead

Ido Schimmel (1):
      mlxsw: spectrum_router: Avoid expensive lookup during route removal

Ingo Molnar (1):
      locking/lockdep: Disable cross-release features for now

J. Bruce Fields (1):
      nfs: RPC_MAX_AUTH_SIZE is in bytes

Jaejoong Kim (1):
      HID: usbhid: fix out-of-bounds bug

Jan Kara (1):
      quota: Generate warnings for DQUOT_SPACE_NOFAIL allocations

Jani Nikula (1):
      drm/i915/bios: parse DDI ports also for CHV for HDMI DDC pin and
DP AUX channel

Jarkko Nikula (1):
      device property: Track owner device of device property

Jason A. Donenfeld (1):
      netlink: do not set cb_running if dump's start() errs

Jeffrey Chu (1):
      USB: serial: ftdi_sio: add id for Cypress WICED dev board

Jeffy Chen (1):
      drm/atomic: Unref duplicated drm_atomic_state in
drm_atomic_helper_resume()

Jia-Ju Bai (1):
      crypto: shash - Fix a sleep-in-atomic bug in shash_setkey_unaligned

JingPiao Chen (1):
      netfilter: nf_tables: fix update chain error

Joe Lawrence (1):
      livepatch: unpatch all klp_objects if klp_module_coming fails

Joerg Roedel (1):
      iommu/amd: Finish TLB flush in amd_iommu_unmap()

Johan Hovold (2):
      USB: serial: console: fix use-after-free on disconnect
      USB: serial: console: fix use-after-free after failed setup

Johannes Weiner (2):
      Revert "vmalloc: back off when the current task is killed"
      tty: fall back to N_NULL if switching to N_TTY fails during hangup

John Einar Reitan (1):
      sync_file: Return consistent status in SYNC_IOC_FILE_INFO

John Fastabend (1):
      ixgbe: incorrect XDP ring accounting in ethtool tx_frame param

Jon Hunter (1):
      usb: phy: tegra: Fix phy suspend for UDC

Jon Maloy (2):
      tipc: correct initialization of skb list
      tipc: Unclone message at secondary destination lookup

Josh Poimboeuf (6):
      kprobes/x86: Set up frame pointer in kprobe trampoline
      objtool: Upgrade libelf-devel warning to error for CONFIG_ORC_UNWINDER
      x86/unwind: Fix dereference of untrusted pointer
      x86/unwind: Use MSB for frame pointer encoding on 32-bit
      x86/unwind: Align stack pointer in unwinder dump
      x86/unwind: Disable unwinder warnings on 32-bit

Jozsef Kadlecsik (1):
      netfilter: ipset: Fix adding an IPv4 range containing more than
2^31 addresses

K. Y. Srinivasan (1):
      Drivers: hv: vmbus: Fix bugs in rescind handling

Kai-Heng Feng (1):
      ALSA: usb-audio: Add sample rate quirk for Plantronics P610

Kamalesh Babulal (1):
      powerpc/livepatch: Fix livepatch stack access

Kazuya Mizuguchi (1):
      usb: renesas_usbhs: Fix DMAC sequence for receiving zero-length packet

Kees Cook (1):
      waitid(): Add missing access_ok() checks

Kelvin Cheung (1):
      MIPS: loongson1: set default number of rx and tx queues for stmmac

Konstantin Khlebnikov (1):
      kmemleak: clear stale pointers from task stacks

Ladi Prosek (2):
      KVM: nVMX: update last_nonleaf_level when initializing nested EPT
      KVM: MMU: always terminate page walks at level 1

Len Brown (1):
      x86/apic: Update TSC_DEADLINE quirk with additional SKX stepping

Lin Zhang (1):
      netfilter: SYNPROXY: skip non-tcp packet in {ipv4, ipv6}_synproxy_hook

Linus Torvalds (1):
      Linux 4.14-rc5

Lucas Stach (2):
      gpu: ipu-v3: prg: wait for double buffers to be filled on channel startup
      gpu: ipu-v3: pre: implement workaround for ERR009624

Maarten Lankhorst (1):
      drm/i915: Use crtc_state_is_legacy_gamma in intel_color_check

Manasi Navare (2):
      drm/i915/edp: Get the Panel Power Off timestamp after panel is off
      drm/i915/edp: Increase the T12 delay quirk to 1300ms

Marcelo Henrique Cerri (1):
      x86/hyperv: Fix hypercalls with extended CPU ranges for TLB flushing

Marek Szyprowski (1):
      iommu/exynos: Remove initconst attribute to avoid potential kernel oops

Mark D Rustad (1):
      ixgbe: Return error when getting PHY address if PHY access is
not supported

Mark Hairgrove (1):
      mm/migrate: fix indexing bug (off by one) and avoid out of bound access

Mark Rutland (1):
      perf pmu: Unbreak perf record for arm/arm64 with events with explicit PMU

Mark Santaniello (1):
      perf script: Add missing separator for "-F ip,brstack" (and brstackoff)

Masahiro Yamada (1):
      gpio: thunderx: select IRQ_DOMAIN_HIERARCHY instead of depends on

Masami Hiramatsu (1):
      kprobes/x86: Remove IRQ disabling from jprobe handlers

Mathias Krause (1):
      x86/alternatives: Fix alt_max_short macro to really be a max()

Matt Redfearn (1):
      MIPS: bpf: Fix uninitialised target compiler error

Matteo Croce (1):
      ipv6: fix net.ipv6.conf.all.accept_dad behaviour for real

Matthew Wilcox (1):
      fs/mpage.c: fix mpage_writepage() for pages with buffers

NeilBrown (1):
      scripts: fix faddr2line to work on last symbol

Nicolas Iooss (1):
      RAS/CEC: Use the right length for "cec_disable"

Niklas SÃderlund (1):
      device property: preserve usecount for node passed to
of_fwnode_graph_get_port_parent()

Pablo Neira Ayuso (1):
      netfilter: nf_tables: do not dump chain counters if not enabled

Paolo Abeni (1):
      udp: fix bcast packet reception

Paolo Bonzini (1):
      x86/apic: Silence "FW_BUG TSC_DEADLINE disabled due to Errata"
on hypervisors

Paul Burton (3):
      MIPS: Fix cmpxchg on 32b signed ints for 64b kernel with !kernel_uses_llsc
      MIPS: Fix generic-board-config.sh for builds using O=
      MIPS: math-emu: Remove pr_err() calls from fpu_emu()

Peng Xu (1):
      nl80211: Define policy for packet pattern attributes

Peter Ujfalusi (2):
      dmaengine: edma: Align the memcpy acnt array size with the transfer
      dmaengine: ti-dma-crossbar: Fix possible race condition with dma_inuse

Peter Zijlstra (5):
      locking/lockdep: Fix stacktrace mess
      locking/selftest: Avoid false BUG report
      sched/core: Fix wake_affine() performance regression
      sched/core: Address more wake_affine() regressions
      sched/core: Ensure load_balance() respects the active_mask

Petr Mladek (1):
      pinctrl/amd: Fix build dependency on pinmux code

Philipp Zabel (1):
      gpu: ipu-v3: Allow channel burst locking on i.MX6 only

Randy Dunlap (2):
      lib/Kconfig.debug: kernel hacking menu: runtime testing: keep
tests together
      linux/kernel.h: add/correct kernel-doc notation

Ravi Bangoria (1):
      perf callchain: Compare dsos (as well) for CCKEY_FUNCTION

Rob Clark (4):
      drm/msm/mdp5: add missing max size for 8x74 v1
      drm/msm: use proper memory barriers for updating tail/head
      drm/msm: fix error path cleanup
      drm/msm: fix _NO_IMPLICIT fencing case

Ross Lagerwall (1):
      netfilter: ipset: Fix race between dump and swap

Sabrina Dubroca (1):
      ixgbe: fix masking of bits read from IXGBE_VXLANCTRL register

Sakari Ailus (2):
      ACPI: properties: Align return codes of
__acpi_node_get_property_reference()
      ACPI: properties: Fix __acpi_node_get_property_reference() return codes

Sandipan Das (1):
      powerpc/lib/sstep: Fix count leading zeros instructions

Scott Mayhew (1):
      nfs/filelayout: fix oops when freeing filelayout segment

Sebastian Frei (1):
      USB: serial: cp210x: fix partnum regression

Sergey Senozhatsky (1):
      of: do not leak console options

Shmulik Ladkani (1):
      netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'

Shrirang Bagul (1):
      USB: serial: qcserial: add Dell DW5818, DW5819

Shuah Khan (2):
      selftests: x86: sysret_ss_attrs doesn't build on a PIE build
      selftests: mqueue: fix regression in silencing output from RUN_TESTS

Steffen Klassert (4):
      xfrm: Fix deletion of offloaded SAs on failure.
      xfrm: Fix negative device refcount on offload failure.
      ipv6: Fix traffic triggered IPsec connections.
      ipv4: Fix traffic triggered IPsec connections.

Stewart Smith (1):
      drivers: of: increase MAX_RESERVED_REGIONS to 32

Subash Abhinov Kasiviswanathan (1):
      netfilter: xt_socket: Restore mark from full sockets only

Sylvain Lesne (2):
      dmaengine: altera: fix response FIFO emptying
      dmaengine: altera: fix spinlock usage

Takashi Iwai (7):
      ALSA: seq: Fix copy_from_user() call inside lock
      ALSA: line6: Fix missing initialization before error path
      ALSA: line6: Fix NULL dereference at podhd_disconnect()
      ALSA: line6: Fix leftover URB at error-path during probe
      ALSA: usb-audio: Kill stray URB at exiting
      ALSA: seq: Fix use-after-free at creating a port
      ALSA: caiaq: Fix stray URB at probe error path

Thiago Jung Bauermann (1):
      powerpc: Don't call lockdep_assert_cpus_held() from
arch_update_cpu_topology()

Thierry Reding (1):
      Revert "PCI: tegra: Do not allocate MSI target memory"

Thomas Gleixner (3):
      genirq: Warn when effective affinity is not updated
      genirq/cpuhotplug: Add sanity check for effective affinity mask
      genirq/cpuhotplug: Enforce affinity setting on startup of managed irqs

Thomas Huth (1):
      MAINTAINERS: Add Paul Mackerras as maintainer for KVM/powerpc

Thomas Meyer (1):
      xfs: Fix bool initialization/comparison

Thomas Petazzoni (1):
      PCI: aardvark: Move to struct pci_host_bridge IRQ mapping functions

Todd Kjos (1):
      binder: fix use-after-free in binder_transaction()

Tom Lendacky (2):
      iommu/amd: Do not disable SWIOTLB if SME is active
      x86/mm: Disable various instrumentations of mm/mem_encrypt.c and mm/tlb.c

Tomas Winkler (1):
      mei: me: add gemini lake devices id

Trond Myklebust (1):
      NFSv4/pnfs: Fix an infinite layoutget loop

Vadim Fedorenko (1):
      netfilter: ipvs: full-functionality option for ECN encapsulation in tunnel

Ville SyrjÃlà (1):
      drm/i915: Read timings from the correct transcoder in
intel_crtc_mode_get()

Vitaly Kuznetsov (2):
      x86/hyperv: Clear vCPU banks between calls to avoid flushing
unneeded vCPUs
      x86/hyperv: Don't use percpu areas for pcpu_flush/pcpu_flush_ex structures

Vitaly Mayatskikh (1):
      fix unbalanced page refcounting in bio_map_user_iov

Wei Yongjun (2):
      remoteproc: imx_rproc: fix return value check in imx_rproc_addr_init()
      drm/msm: fix return value check in _msm_gem_kernel_new()

Will Deacon (2):
      perf/core: Avoid freeing static PMU contexts when PMU is unregistered
      mm: page_vma_mapped: ensure pmd is loaded with READ_ONCE outside of lock

Yang Shi (1):
      mm/madvise.c: add description for MADV_WIPEONFORK and MADV_KEEPONFORK

Zhen Lei (1):
      mm: only display online cpus of the numa node

Zhenzhong Duan (1):
      xen/vcpu: Use a unified name about cpu hotplug state for pv and pvhvm

Zi Yan (1):
      mm: remove unnecessary WARN_ONCE in page_vma_mapped_walk().

leilei.lin (1):
      perf/core: Fix cgroup time when scheduling descendants