Linux 4.15-rc5

[Linus Torvalds]

Ok, so it's not Sunday yet, but tomorrow is Christmas Eve, and while
I've been in the US for over two decades, we still celebrate Christmas
the only _right_ way - with Christmas Eve being the big day, and
Christmas Day being just for recovery.

So I'm doing the rc5 release a day early, in order to not have to do
it during the actual Christmas festivities at our house.

And it's not like I expect to see a lot of patches or pull requests
tomorrow anyway, so I guess it doesn't really much matter when I do
the rc release, the end result would look very similar even if I had
done it on my normal Sunday schedule.

This (shortened) week ended up being fairly normal for rc5, with the
exception of the ongoing merging of the x86 low-level prep for kernel
page table isolation that continues and is noticeable. In fact, about
a third of the rc5 patch is x86 updates due to that. It all looks like
very good cleanups, though, and it's been through about two hundred
iterations by now (no, seriously, Thomas has been keeping track of his
iterative updates of the PTI series, and it apparently hit 196 in the
last two months).

Outside of that, things look fairly normal: mostly drivers and some
networking updates (bpf fixes and selftests are notable). Some xfs
fixes also stand out.

The appended shortlog gives an overview of the details,

                  Linus

---

Adiel Aloni (1):
      mac80211_hwsim: enable TODS BIT in null data frame

Albert Hsieh (1):
      mtd: nand: brcmnand: Zero bitflip is not an error

Alexander Kochetkov (2):
      net: arc_emac: fix arc_emac_rx() error paths
      net: arc_emac: restart stalled EMAC

Alexei Starovoitov (2):
      bpf: fix integer overflows
      bpf: do not allow root to mangle valid pointers

Alexey Khoroshilov (1):
      net: phy: xgene: disable clk on error paths

Alexey Kodanev (1):
      vxlan: restore dev->mtu setting based on lower device

Andy Lutomirski (24):
      x86/unwinder/orc: Dont bail on stack overflow
      x86/irq: Remove an old outdated comment about context tracking races
      x86/irq/64: Print the offending IP in the stack overflow warning
      x86/entry/64: Allocate and enable the SYSENTER stack
      x86/dumpstack: Add get_stack_info() support for the SYSENTER stack
      x86/entry/gdt: Put per-CPU GDT remaps in ascending order
      x86/mm/fixmap: Generalize the GDT fixmap mechanism, introduce
struct cpu_entry_area
      x86/kasan/64: Teach KASAN about the cpu_entry_area
      x86/entry: Fix assumptions that the HW TSS is at the beginning of cpu_tss
      x86/dumpstack: Handle stack overflow on all stacks
      x86/entry: Move SYSENTER_stack to the beginning of struct tss_struct
      x86/entry: Remap the TSS into the CPU entry area
      x86/entry/64: Separate cpu_current_top_of_stack from TSS.sp0
      x86/espfix/64: Stop assuming that pt_regs is on the entry stack
      x86/entry/64: Use a per-CPU trampoline stack for IDT entries
      x86/entry/64: Return to userspace from the trampoline stack
      x86/entry/64: Create a per-CPU SYSCALL entry trampoline
      x86/entry/64: Move the IST stacks into struct cpu_entry_area
      x86/entry/64: Remove the SYSENTER stack canary
      x86/entry: Clean up the SYSENTER_stack code
      x86/entry/64: Make cpu_entry_area.tss read-only
      x86/vsyscall/64: Explicitly set _PAGE_USER in the pagetable hierarchy
      x86/vsyscall/64: Warn and fail vsyscall emulation in NATIVE mode
      x86/mm/64: Improve the memory map documentation

Anju T Sudhakar (2):
      powerpc/perf/imc: Fix nest-imc cpuhotplug callback failure
      powerpc/perf: Fix kfree memory allocated for nest pmus

Bart Van Assche (1):
      scsi: core: Use blist_flags_t consistently

Ben Skeggs (6):
      drm/nouveau/bios/dp: support DP Info Table 2.0
      drm/nouveau/imem/nv50: fix refcount_t warning
      drm/nouveau/mmu/gp10b: use correct implementation
      drm/nouveau: avoid GPU page sizes > PAGE_SIZE for buffer objects
in host memory
      drm/nouveau: use alternate memory type for system-memory buffers
with kind != 0
      drm/nouveau: fix obvious memory leak

Bhawanpreet Lakha (1):
      drm/amd/display: add pipe locking before front end programing

Boris Ostrovsky (2):
      x86/entry/64/paravirt: Use paravirt-safe macro to access eflags
      xen/balloon: Mark unallocated host memory as UNUSABLE

Brendan McGrath (1):
      ipv6: icmp6: Allow icmp messages to be looped back

Brian King (1):
      tg3: Fix rx hang on MTU change with 5717/5719

Cai Li (1):
      clk: fix a panic error caused by accessing NULL pointer

Chen-Yu Tsai (1):
      clk: sunxi: sun9i-mmc: Implement reset callback for reset controls

Chris Wilson (6):
      drm/i915: Flush pending GTT writes before unbinding
      drm/i915: Drop fb reference on load_detect_pipe failure path
      drm/i915: Stop listening to request resubmission from the signaler kthread
      drm/i915/fence: Use rcu to defer freeing of irq_work
      drm/i915/lpe: Remove double-encapsulation of info string
      drm/syncobj: Stop reusing the same struct file for all syncobj -> fd

Christoffer Dall (2):
      KVM: arm/arm64: Properly handle arch-timer IRQs after vtimer_save_state
      KVM: arm/arm64: Fix timer enable flow

Christophe Leroy (1):
      mtd: nand: gpio: Fix ALE gpio configuration

Chunyan Zhang (1):
      ARM: 8731/1: Fix csum_partial_copy_from_user() stack mismatch

Colin Ian King (1):
      ACPI: CPPC: remove initial assignment of pcc_ss_data

Cyrille Pitchen (1):
      Revert "dt-bindings: mtd: add sst25wf040b and en25s64 to sip-nor list"

CÃdric Le Goater (1):
      KVM: PPC: Book3S: fix XIVE migration of pending interrupts

Dan Williams (3):
      acpi, nfit: fix health event notification
      libnvdimm, pfn: fix start_pad handling for aligned namespaces
      libnvdimm, dax: fix 1GB-aligned namespaces vs physical misalignment

Daniel Borkmann (5):
      bpf, s390x: do not reload skb pointers in non-skb context
      bpf, ppc64: do not reload skb pointers in non-skb context
      bpf: guarantee r1 to be ctx in case of bpf_helper_changes_pkt_data
      bpf, sparc: fix usage of wrong reg for load_skb_regs after call
      bpf: add test case for ld_abs and helper changing pkt data

Darrick J. Wong (15):
      xfs: add the ability to join a held buffer to a defer_ops
      xfs: hold xfs_buf locked between shortform->leaf conversion and
the addition of an attribute
      xfs: account for null transactions in bunmapi
      xfs: move xfs_iext_insert tracepoint to report useful information
      xfs: remove dest file's post-eof preallocations before reflinking
      xfs: relax is_reflink_inode assert in xfs_reflink_find_cow_mapping
      xfs: avoid infinite loop when cancelling CoW blocks after
writeback failure
      xfs: allow CoW remap transactions to use reserve blocks
      xfs: track cowblocks separately in i_flags
      xfs: don't be so eager to clear the cowblocks tag on truncate
      xfs: remove leftover CoW reservations when remounting ro
      xfs: set cowblocks tag for direct cow writes too
      xfs: queue deferred rmap ops for cow staging extent alloc/free
in the right order
      xfs: always honor OWN_UNKNOWN rmap removal requests
      xfs: only skip rmap owner checks for unknown-owner rmap removal

Dave Hansen (4):
      x86/entry: Rename SYSENTER_stack to CPU_ENTRY_AREA_entry_stack
      x86/mm: Move the CR3 construction functions to tlbflush.h
      x86/mm: Remove hard-coded ASID limit checks
      x86/mm: Put MMU to hardware ASID translation in one place

David Disseldorp (1):
      nvme: set discard_alignment to zero

David Miller (1):
      bpf: Fix tools and testing build.

Dmytro Laktyushkin (1):
      drm/amd/display: set chroma taps to 1 when not scaling

Edward Cree (1):
      bpf/verifier: fix bounds calculation on BPF_RSH

Eran Ben Elisha (1):
      net/mlx5: Fix rate limit packet pacing naming and struct

Eric Biggers (1):
      crypto: skcipher - set walk.iv for zero-length inputs

Eric Garver (1):
      openvswitch: Fix pop_vlan action for double tagged frames

Eric W. Biederman (1):
      net: Fix double free and memory corruption in get_net_ns_by_id()

Eric Yang (1):
      drm/amd/display: fix missing pixel clock adjustment for dongle

Eugenia Emantayev (2):
      net/mlx5e: Fix defaulting RX ring size when not needed
      net/mlx5: Fix misspelling in the error message and comment

Fredrik Hallenberg (2):
      net: stmmac: Fix TX timestamp calculation
      net: stmmac: Fix bad RX timestamp extraction

Gal Pressman (4):
      net/mlx5e: Fix features check of IPv6 traffic
      net/mlx5e: Fix possible deadlock of VXLAN lock
      net/mlx5e: Add refcount to VXLAN structure
      net/mlx5e: Prevent possible races in VXLAN control flow

Geert Uytterhoeven (2):
      spi: Fix double "when"
      spi: rspi: Do not set SPCR_SPE in qspi_set_config_register()

Guneshwor Singh (1):
      ALSA: hda - Add vendor id for Cannonlake HDMI codec

Hans Verkuil (1):
      drm/sun4i: validate modes for HDMI

Hans de Goede (1):
      mfd: Fix RTS5227 (and others) powermanagement

Helge Deller (3):
      parisc: Fix indenting in puts()
      parisc: Align os_hpmc_size on word boundary
      parisc: Hide Diva-built-in serial aux and graphics card

Hemanth Puranik (1):
      net: qcom/emac: Change the order of mac up and sgmii open

Hendrik Brueckner (1):
      bpf: fix broken BPF selftest build on s390

Huy Nguyen (1):
      net/mlx5e: Fix ETS BW check

Ido Schimmel (2):
      ipv4: Fix use-after-free when flushing FIB tables
      ipv6: Honor specified parameters in fibmatch lookup

Jakub Kicinski (2):
      cls_bpf: fix offload assumptions after callback conversion
      nfp: bpf: keep track of the offloaded program

James Smart (1):
      nvme-fc: remove double put reference if admin connect fails

Jan Beulich (1):
      x86-64/Xen: eliminate W+X mappings

Jann Horn (7):
      bpf: fix incorrect sign extension in check_alu_op()
      bpf: fix incorrect tracking of register size truncation
      bpf: fix 32-bit ALU op verification
      bpf: fix missing error return in check_stack_boundary()
      bpf: force strict alignment checks for stack pointers
      bpf: don't prune branches when a scalar is replaced with a pointer
      selftests/bpf: add tests for recent bugfixes

Jens Axboe (4):
      block: fix blk_rq_append_bio
      block: unalign call_single_data in struct request
      null_blk: unalign call_single_data
      Revert "bdi: add error handle for bdi_debug_register"

Jerry (Fangzhi) Zuo (1):
      drm/amd/display: Fix rehook MST display not light back on

Jia-Ju Bai (1):
      mac80211_hwsim: Fix a possible sleep-in-atomic bug in hwsim_get_radio_nl

Johan Hovold (2):
      mfd: twl4030-audio: Fix sibling-node lookup
      mfd: twl6040: Fix child-node lookup

Johannes Berg (2):
      nl80211: fix nl80211_send_iface() error paths
      cfg80211: ship certificates as hex files

John David Anglin (2):
      Revert "parisc: Re-enable interrupts early"
      parisc: Reduce thread stack to 16 kb

Jon Hunter (1):
      mfd: cros ec: spi: Don't send first message too soon

Jon Maloy (4):
      tipc: fix lost member events bug
      tipc: remove leaving group member from all lists
      tipc: fix list sorting bug in function tipc_group_update_member()
      tipc: remove joining group member from congested list

Jonathan Corbet (1):
      nl80211: Remove obsolete kerneldoc line

Josh Poimboeuf (1):
      x86/unwinder: Handle stack overflows more gracefully

Julian Wiedmann (1):
      s390/qeth: fix error handling in checksum cmd callback

Julien Thierry (1):
      arm64: kvm: Prevent restoring stale PMSCR_EL1 for vcpu

Jussi Laako (1):
      ALSA: usb-audio: Add native DSD support for Esoteric D-05X

Kailang Yang (1):
      ALSA: hda/realtek - Fix Dell AIO LineOut issue

Kamal Heib (1):
      net/mlx5: FPGA, return -EINVAL if size is zero

Karol Herbst (2):
      drm/nouveau/fbcon: fix NULL pointer access in nouveau_fbcon_destroy
      drm/nouveau/pci: do a msi rearm on init

Kees Cook (1):
      Do not hash userspace addresses in fault handlers

Keith Busch (2):
      nvme: check hw sectors before setting chunk sectors
      nvme: setup streams after initializing namespace head

Keith Packard (1):
      drm: move lease init after validation in drm_lease_create

Lan Tianyu (1):
      KVM/x86: Check input paging mode when cs.l is set

Laurent Vivier (1):
      KVM: PPC: Book3S HV: Fix pending_pri value in kvmppc_xive_get_icp()

Linus Torvalds (1):
      Linux 4.15-rc5

Lucas Stach (1):
      cpufreq: imx6q: fix speed grading regression on i.MX6 QuadPlus

Maarten Lankhorst (1):
      drm/plane: Make framebuffer refcounting the responsibility of
setplane_internal callers

Maor Gottlieb (1):
      net/mlx5: Fix steering memory leak

Marc Zyngier (2):
      KVM: arm/arm64: Fix HYP unmapping going off limits
      KVM: arm/arm64: timer: Don't set irq as forwarded if no usable GIC

Marek Szyprowski (1):
      clk: Manage proper runtime PM state in clk_change_rate()

Maxime Chevallier (1):
      spi: a3700: Fix clk prescaling for coefficient over 15

Maxime Ripard (2):
      drm/sun4i: Fix error path handling
      drm/sun4i: hdmi: Move the mode_valid callback to the encoder

Michael Ellerman (1):
      powerpc/kernel: Print actual address of regs when oopsing

Mika Westerberg (1):
      pinctrl: cherryview: Mask all interrupts on Intel_Strago based systems

Ming Lei (2):
      nvme: call blk_integrity_unregister after queue is cleaned up
      block: don't let passthrough IO go into .make_request_fn()

Miquel Raynal (1):
      mtd: Fix mtd_check_oob_ops()

Moni Shoua (1):
      net/mlx5: Fix error flow in CREATE_QP command

Monk Liu (3):
      drm/ttm: fix incorrect calculate on shrink_pages
      drm/ttm: max_cpages is in unit of native page
      drm/amdgpu: fix MAP_QUEUES paramter

Moshe Shemesh (2):
      net/mlx5: Cleanup IRQs in case of unload failure
      net/mlx5: Stay in polling mode when command EQ destroy fails

Naresh Kamboju (1):
      selftests: net: Adding config fragment CONFIG_NUMA=y

Nikolay Aleksandrov (1):
      net: bridge: fix early call to br_stp_change_bridge_id and plug
newlink leaks

Omar Sandoval (1):
      kyber: fix another domain token wait queue hang

Paolo Bonzini (1):
      kvm: x86: fix RSM when PCID is non-zero

Peter Xu (1):
      kvm: x86: fix WARN due to uninitialized guest FPU state

Peter Zijlstra (8):
      x86/ldt: Rework locking
      x86/doc: Remove obvious weirdnesses from the x86 MM layout documentation
      x86/uv: Use the right TLB-flush API
      x86/microcode: Dont abuse the TLB-flush interface
      x86/mm: Use __flush_tlb_one() for kernel memory
      x86/mm: Remove superfluous barriers
      x86/mm: Add comments to clarify which TLB-flush functions are
supposed to flush what
      x86/mm: Create asm/invpcid.h

Petr Machata (1):
      mlxsw: spectrum_router: Remove batch neighbour deletion causing FW bug

Phil Sutter (1):
      ipv4: fib: Fix metrics match when deleting a route

Prasad B Munirathnam (1):
      scsi: aacraid: Fix I/O drop during reset

Pravin Shedge (1):
      parisc: remove duplicate includes

Radu Pirea (1):
      spi: atmel: fixed spin_lock usage inside atmel_spi_remove

Rafael J. Wysocki (2):
      PCI / PM: Force devices to D0 in pci_pm_thaw_noirq()
      cpufreq: governor: Ensure sufficiently large sampling intervals

Ravi Bangoria (1):
      powerpc/perf: Dereference BHRB entries safely

Ricardo Ribalda Delgado (1):
      spi: xilinx: Detect stall with Unknown commands

Rodrigo Vivi (1):
      drm/i915: Protect DDI port to DPLL map from theoretical race.

Russell King (1):
      net: phy: marvell: avoid pause mode on SGMII-to-Copper for 88e151x

Saeed Mahameed (1):
      Revert "mlx5: move affinity hints assignments to generic code"

Sascha Hauer (1):
      mtd: nand: gpmi: Fix failure when a erased page has a bitflip at BBM

Sean Wang (1):
      net: mediatek: setup proper state for disabled GMAC on the default

Sebastian Andrzej Siewior (1):
      crypto: mcryptd - protect the per-CPU queue with a lock

Shaohua Li (2):
      block-throttle: avoid double charge
      net: reevalulate autoflowlabel setting after sysctl setting

Shawn Nematbakhsh (1):
      mfd: cros ec: spi: Fix "in progress" error signaling

Song Liu (1):
      xdp: linearize skb in netif_receive_generic_xdp()

Stefan Raspl (11):
      tools/kvm_stat: fix command line option '-g'
      tools/kvm_stat: fix drilldown in events-by-guests mode
      tools/kvm_stat: fix missing field update after filter change
      tools/kvm_stat: fix extra handling of 'help' with fields filter
      tools/kvm_stat: fix child trace events accounting
      tools/kvm_stat: add hint on '-f help' to man page
      tools/kvm_stat: handle invalid regular expressions
      tools/kvm_stat: suppress usage information on command line errors
      tools/kvm_stat: stop ignoring unhandled arguments
      tools/kvm_stat: add line for totals
      tools/kvm_stat: sort '-f help' output

Stephan Mueller (2):
      crypto: af_alg - wait for data at beginning of recvmsg
      crypto: af_alg - fix race accessing cipher request

Takashi Iwai (3):
      ALSA: rawmidi: Avoid racy info ioctl via ctl device
      ACPI: APEI / ERST: Fix missing error handling in erst_reader()
      ALSA: usb-audio: Fix the missing ctl name suffix at parsing SU

Takuo Koguchi (1):
      spi: sun4i: disable clocks in the remove function

Thierry Reding (1):
      cfg80211: always rewrite generated files from scratch

Thomas Gleixner (12):
      x86/paravirt: Dont patch flush_tlb_single
      x86/paravirt: Provide a way to check for hypervisors
      x86/cpufeatures: Make CPU bugs sticky
      x86/Kconfig: Limit NR_CPUS on 32-bit to a sane amount
      x86/mm/dump_pagetables: Check PAGE_PRESENT for real
      x86/mm/dump_pagetables: Make the address hints correct and readable
      arch, mm: Allow arch_dup_mmap() to fail
      x86/ldt: Prevent LDT inheritance on exec
      x86/cpu_entry_area: Move it to a separate unit
      x86/cpu_entry_area: Move it out of the fixmap
      init: Invoke init_espfix_bsp() from mm_init()
      x86/cpu_entry_area: Prevent wraparound in
setup_cpu_entry_area_ptes() on 32bit

Trent Piepho (1):
      spi: imx: Update device tree binding documentation

Vishal Verma (2):
      libnvdimm, btt: add a couple of missing kernel-doc lines
      libnvdimm, btt: Fix an incompatibility in the log layout

Wanpeng Li (3):
      KVM: MMU: Fix infinite loop when there is no available mmu page
      KVM: X86: Fix load RFLAGS w/o the fixed bit
      KVM: Fix stack-out-of-bounds read in write_mmio

Willem de Bruijn (2):
      skbuff: orphan frags before zerocopy clone
      skbuff: skb_copy_ubufs must release uarg even without user frags

Xin Long (6):
      sctp: fix the issue that a __u16 variable may overflow in sctp_ulpq_renege
      sctp: add SCTP_CID_RECONF conversion in sctp_cname
      vxlan: update skb dst pmtu on tx path
      ip_gre: remove the incorrect mtu limit for ipgre tap
      ip6_gre: remove the incorrect mtu limit for ipgre tap
      ip6_tunnel: get the min mtu properly in ip6_tnl_xmit

Yelena Krivosheev (3):
      net: mvneta: clear interface link status on port disable
      net: mvneta: use proper rxq_number in loop on rx queues
      net: mvneta: eliminate wrong call to handle rx descriptor error

Zhao Qiang (1):
      net: phy: marvell: Limit 88m1101 autoneg errata to 88E1145 as well.