Things seem to be finally starting to calm down for 4.14. We've certainly had smaller rc5's, but we've had bigger ones too, and this week finally felt fairly normal in a release that has up until now felt a bit messier than it perhaps should have been.
So assuming this trend holds, we're all good. Knock wood. So what do we have here? A little bit of everything, but what might be most noticeable is some more fixes for the whole new x86 TLB handling due to the ASID changes that came in this release. Some of the lazy TLB handling changes caused problems on a few AMD chips with particular settings, because it was all a little bit *too* lazy in flushing the TLB. Even when TLB entries aren't used (and will be flushed before any possible use), the TLB may be speculatively filled, and that can cause problems if we've already free'd the page tables that the speculative fill ends up looking up. The other thing perhaps worth mentioning is how much random fuzzing people are doing, and it's finding things. We've always done fuzzing (who remembers the old "crashme" program that just generated random code and jumped to it? We used to do that quite actively very early on), but people have been doing some nice targeted fuzzing of driver subsystems etc, and there's been various fixes (not just this last week either) coming out of those efforts. Very nice to see. Anyway, rc5 is out, and things look normal. We've got arch updates (mostly x86and poweerpc, but some mips), drivers (gpu, networking, usb, sound, misc), some core kernel (lockdep fixes, networking, mm) and some tooling (perf, selftests). Go out and test, Linus --- Al Viro (2): more bio_map_user_iov() leak fixes bio_copy_user_iov(): don't ignore ->iov_offset Alan Stern (2): USB: dummy-hcd: Fix deadlock caused by disconnect detection usb: usbtest: fix NULL pointer dereference Aleksander Morgado (1): cdc_ether: flag the u-blox TOBY-L2 and SARA-U2 as wwan Alex Manoussakis (1): HID: hid-elecom: extend to fix descriptor for HUGE trackball Alexander Levin (1): 9p: set page uptodate when required in write_end() Alexander Usyskin (1): mei: always use domain runtime pm callbacks. Alexei Starovoitov (1): bpf: fix liveness marking Alexey Kodanev (2): vti: fix NULL dereference in xfrm_input() gso: fix payload length when gso_size is zero Andrea Arcangeli (1): userfaultfd: selftest: exercise -EEXIST only in background transfer Andreas Engel (1): USB: serial: cp210x: add support for ELV TFD500 Andreas Gruenbacher (1): direct-io: Prevent NULL pointer access in submit_page_section Andrew Gabbasov (2): usb: gadget: composite: Fix use-after-free in usb_composite_overwrite_options usb: gadget: configfs: Fix memory leak of interface directory data Andrey Ryabinin (1): mm/mempolicy: fix NUMA_INTERLEAVE_HIT counter Andy Lutomirski (2): x86/mm/64: Fix reboot interaction with CR4.PCIDE x86/mm: Flush more aggressively in lazy TLB mode Anju T Sudhakar (3): powerpc/perf: Fix for core/nest imc call trace on cpuhotplug powerpc/perf: Add ___GFP_NOWARN flag to alloc_pages_node() powerpc/perf: Fix IMC initialization crash Archit Taneja (2): drm/msm/dsi: Use correct pm_runtime_put variant during host_init drm/msm/mdp5: Remove extra pm_runtime_put call in mdp5_crtc_cursor_set() Arnaldo Carvalho de Melo (1): tools include uapi bpf.h: Sync kernel ABI header with tooling header Arnd Bergmann (6): gpio: acpi: work around false-positive -Wstring-overflow warning gpio: omap: omap_gpio_show_rev is not __init crypto: axis - hide an unused variable crypto: stm32 - Try to fix hash padding remoteproc: qcom: fix RPMSG_QCOM_GLINK_SMEM dependencies include/linux/of.h: provide of_n_{addr,size}_cells wrappers for !CONFIG_OF Artem Savkov (2): xfrm: don't call xfrm_policy_cache_flush under xfrm_state_lock netfilter: ebtables: fix race condition in frame_filter_net_init() Arvind Yadav (1): netfilter: nf_tables: Release memory obtained by kasprintf Axel Beckert (1): doc: Fix typo "8023.ad" in bonding documentation Benjamin Coddington (1): NFS: Fix uninitialized rpc_wait_queue Boris Brezillon (1): mm/cma.c: take __GFP_NOWARN into account in cma_alloc() Borislav Petkov (2): x86/mce: Hide mca_cfg x86/microcode: Do the family check first Brian Foster (1): xfs: reinit btree pointer on attr tree inactivation walk Chao Yu (1): f2fs: fix potential panic during fstrim Chris Wilson (2): drm/i915: Silence compiler warning for hsw_power_well_enable() drm/i915: Order two completing nop_submit_request Christian König (1): drm/amdgpu: fix placement flags in amdgpu_ttm_bind Christophe Jaillet (1): crypto: xts - Fix an error handling path in 'create()' Colin Ian King (3): sunrpc: remove redundant initialization of sock perf/x86/intel/uncore: Fix memory leaks on allocation failures seccomp: make function __get_seccomp_filter static Corentin Labbe (1): pinctrl: bcm2835: fix build warning in bcm2835_gpio_irq_handle_bank Cyril Bur (1): powerpc/64s: Use emergency stack for kernel TM Bad Thing program checks Dan Carpenter (6): NFS: Cleanup error handling in nfs_idmap_request_key() selftests/net: rxtimestamp: Fix an off by one rpmsg: glink: Unlock on error in qcom_glink_request_intent() rpmsg: glink: Fix memory leak in qcom_glink_alloc_intent() remoteproc: imx_rproc: fix a couple off by one bugs usb: misc: usbtest: Fix overflow in usbtest_do_ioctl() Dave Chinner (3): xfs: Don't log uninitialised fields in inode structures xfs: move more RT specific code under CONFIG_XFS_RT xfs: don't change inode mode if ACL update fails Ding Tianhong (2): Revert commit 1a8b6d76dc5b ("net:add one common config...") net: ixgbe: Use new PCI_DEV_FLAGS_NO_RELAXED_ORDERING flag Eric Biggers (1): MAINTAINERS: associate linux/fs.h with VFS instead of file locking Eric Dumazet (1): netfilter: x_tables: avoid stack-out-of-bounds read in xt_copy_counters_from_user Eric Sandeen (1): xfs: handle error if xfs_btree_get_bufs fails Eryu Guan (2): nfsd4: define nfsd4_secinfo_no_name_release() fs/binfmt_misc.c: node could be NULL when evicting inode Florian Westphal (1): netfilter: ipset: pernet ops must be unregistered last Grygorii Strashko (2): gpio: omap: Fix lost edge interrupts pinctrl: cherryview: fix issues caused by dynamic gpio irqs mapping Guenter Roeck (1): scripts/kallsyms.c: ignore symbol type 'n' Guillaume Nault (1): ppp: fix race in ppp device destruction Gustavo A. R. Silva (1): net: thunderx: mark expected switch fall-throughs in nicvf_main() Gustavo Romero (1): powerpc/tm: Fix illegal TM state in signal handler Haozhong Zhang (1): KVM: nVMX: fix guest CR4 loading when emulating L2 to L1 exit Henryk Heisig (1): USB: serial: option: add support for TP-Link LTE module Herbert Xu (2): crypto: skcipher - Fix crash on zero-length input crypto: shash - Fix zero-length shash ahash digest crash Huang Ying (1): mm, swap: use page-cluster as max window of VMA based swap readahead Ido Schimmel (1): mlxsw: spectrum_router: Avoid expensive lookup during route removal Ingo Molnar (1): locking/lockdep: Disable cross-release features for now J. Bruce Fields (1): nfs: RPC_MAX_AUTH_SIZE is in bytes Jaejoong Kim (1): HID: usbhid: fix out-of-bounds bug Jan Kara (1): quota: Generate warnings for DQUOT_SPACE_NOFAIL allocations Jani Nikula (1): drm/i915/bios: parse DDI ports also for CHV for HDMI DDC pin and DP AUX channel Jarkko Nikula (1): device property: Track owner device of device property Jason A. Donenfeld (1): netlink: do not set cb_running if dump's start() errs Jeffrey Chu (1): USB: serial: ftdi_sio: add id for Cypress WICED dev board Jeffy Chen (1): drm/atomic: Unref duplicated drm_atomic_state in drm_atomic_helper_resume() Jia-Ju Bai (1): crypto: shash - Fix a sleep-in-atomic bug in shash_setkey_unaligned JingPiao Chen (1): netfilter: nf_tables: fix update chain error Joe Lawrence (1): livepatch: unpatch all klp_objects if klp_module_coming fails Joerg Roedel (1): iommu/amd: Finish TLB flush in amd_iommu_unmap() Johan Hovold (2): USB: serial: console: fix use-after-free on disconnect USB: serial: console: fix use-after-free after failed setup Johannes Weiner (2): Revert "vmalloc: back off when the current task is killed" tty: fall back to N_NULL if switching to N_TTY fails during hangup John Einar Reitan (1): sync_file: Return consistent status in SYNC_IOC_FILE_INFO John Fastabend (1): ixgbe: incorrect XDP ring accounting in ethtool tx_frame param Jon Hunter (1): usb: phy: tegra: Fix phy suspend for UDC Jon Maloy (2): tipc: correct initialization of skb list tipc: Unclone message at secondary destination lookup Josh Poimboeuf (6): kprobes/x86: Set up frame pointer in kprobe trampoline objtool: Upgrade libelf-devel warning to error for CONFIG_ORC_UNWINDER x86/unwind: Fix dereference of untrusted pointer x86/unwind: Use MSB for frame pointer encoding on 32-bit x86/unwind: Align stack pointer in unwinder dump x86/unwind: Disable unwinder warnings on 32-bit Jozsef Kadlecsik (1): netfilter: ipset: Fix adding an IPv4 range containing more than 2^31 addresses K. Y. Srinivasan (1): Drivers: hv: vmbus: Fix bugs in rescind handling Kai-Heng Feng (1): ALSA: usb-audio: Add sample rate quirk for Plantronics P610 Kamalesh Babulal (1): powerpc/livepatch: Fix livepatch stack access Kazuya Mizuguchi (1): usb: renesas_usbhs: Fix DMAC sequence for receiving zero-length packet Kees Cook (1): waitid(): Add missing access_ok() checks Kelvin Cheung (1): MIPS: loongson1: set default number of rx and tx queues for stmmac Konstantin Khlebnikov (1): kmemleak: clear stale pointers from task stacks Ladi Prosek (2): KVM: nVMX: update last_nonleaf_level when initializing nested EPT KVM: MMU: always terminate page walks at level 1 Len Brown (1): x86/apic: Update TSC_DEADLINE quirk with additional SKX stepping Lin Zhang (1): netfilter: SYNPROXY: skip non-tcp packet in {ipv4, ipv6}_synproxy_hook Linus Torvalds (1): Linux 4.14-rc5 Lucas Stach (2): gpu: ipu-v3: prg: wait for double buffers to be filled on channel startup gpu: ipu-v3: pre: implement workaround for ERR009624 Maarten Lankhorst (1): drm/i915: Use crtc_state_is_legacy_gamma in intel_color_check Manasi Navare (2): drm/i915/edp: Get the Panel Power Off timestamp after panel is off drm/i915/edp: Increase the T12 delay quirk to 1300ms Marcelo Henrique Cerri (1): x86/hyperv: Fix hypercalls with extended CPU ranges for TLB flushing Marek Szyprowski (1): iommu/exynos: Remove initconst attribute to avoid potential kernel oops Mark D Rustad (1): ixgbe: Return error when getting PHY address if PHY access is not supported Mark Hairgrove (1): mm/migrate: fix indexing bug (off by one) and avoid out of bound access Mark Rutland (1): perf pmu: Unbreak perf record for arm/arm64 with events with explicit PMU Mark Santaniello (1): perf script: Add missing separator for "-F ip,brstack" (and brstackoff) Masahiro Yamada (1): gpio: thunderx: select IRQ_DOMAIN_HIERARCHY instead of depends on Masami Hiramatsu (1): kprobes/x86: Remove IRQ disabling from jprobe handlers Mathias Krause (1): x86/alternatives: Fix alt_max_short macro to really be a max() Matt Redfearn (1): MIPS: bpf: Fix uninitialised target compiler error Matteo Croce (1): ipv6: fix net.ipv6.conf.all.accept_dad behaviour for real Matthew Wilcox (1): fs/mpage.c: fix mpage_writepage() for pages with buffers NeilBrown (1): scripts: fix faddr2line to work on last symbol Nicolas Iooss (1): RAS/CEC: Use the right length for "cec_disable" Niklas Söderlund (1): device property: preserve usecount for node passed to of_fwnode_graph_get_port_parent() Pablo Neira Ayuso (1): netfilter: nf_tables: do not dump chain counters if not enabled Paolo Abeni (1): udp: fix bcast packet reception Paolo Bonzini (1): x86/apic: Silence "FW_BUG TSC_DEADLINE disabled due to Errata" on hypervisors Paul Burton (3): MIPS: Fix cmpxchg on 32b signed ints for 64b kernel with !kernel_uses_llsc MIPS: Fix generic-board-config.sh for builds using O= MIPS: math-emu: Remove pr_err() calls from fpu_emu() Peng Xu (1): nl80211: Define policy for packet pattern attributes Peter Ujfalusi (2): dmaengine: edma: Align the memcpy acnt array size with the transfer dmaengine: ti-dma-crossbar: Fix possible race condition with dma_inuse Peter Zijlstra (5): locking/lockdep: Fix stacktrace mess locking/selftest: Avoid false BUG report sched/core: Fix wake_affine() performance regression sched/core: Address more wake_affine() regressions sched/core: Ensure load_balance() respects the active_mask Petr Mladek (1): pinctrl/amd: Fix build dependency on pinmux code Philipp Zabel (1): gpu: ipu-v3: Allow channel burst locking on i.MX6 only Randy Dunlap (2): lib/Kconfig.debug: kernel hacking menu: runtime testing: keep tests together linux/kernel.h: add/correct kernel-doc notation Ravi Bangoria (1): perf callchain: Compare dsos (as well) for CCKEY_FUNCTION Rob Clark (4): drm/msm/mdp5: add missing max size for 8x74 v1 drm/msm: use proper memory barriers for updating tail/head drm/msm: fix error path cleanup drm/msm: fix _NO_IMPLICIT fencing case Ross Lagerwall (1): netfilter: ipset: Fix race between dump and swap Sabrina Dubroca (1): ixgbe: fix masking of bits read from IXGBE_VXLANCTRL register Sakari Ailus (2): ACPI: properties: Align return codes of __acpi_node_get_property_reference() ACPI: properties: Fix __acpi_node_get_property_reference() return codes Sandipan Das (1): powerpc/lib/sstep: Fix count leading zeros instructions Scott Mayhew (1): nfs/filelayout: fix oops when freeing filelayout segment Sebastian Frei (1): USB: serial: cp210x: fix partnum regression Sergey Senozhatsky (1): of: do not leak console options Shmulik Ladkani (1): netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1' Shrirang Bagul (1): USB: serial: qcserial: add Dell DW5818, DW5819 Shuah Khan (2): selftests: x86: sysret_ss_attrs doesn't build on a PIE build selftests: mqueue: fix regression in silencing output from RUN_TESTS Steffen Klassert (4): xfrm: Fix deletion of offloaded SAs on failure. xfrm: Fix negative device refcount on offload failure. ipv6: Fix traffic triggered IPsec connections. ipv4: Fix traffic triggered IPsec connections. Stewart Smith (1): drivers: of: increase MAX_RESERVED_REGIONS to 32 Subash Abhinov Kasiviswanathan (1): netfilter: xt_socket: Restore mark from full sockets only Sylvain Lesne (2): dmaengine: altera: fix response FIFO emptying dmaengine: altera: fix spinlock usage Takashi Iwai (7): ALSA: seq: Fix copy_from_user() call inside lock ALSA: line6: Fix missing initialization before error path ALSA: line6: Fix NULL dereference at podhd_disconnect() ALSA: line6: Fix leftover URB at error-path during probe ALSA: usb-audio: Kill stray URB at exiting ALSA: seq: Fix use-after-free at creating a port ALSA: caiaq: Fix stray URB at probe error path Thiago Jung Bauermann (1): powerpc: Don't call lockdep_assert_cpus_held() from arch_update_cpu_topology() Thierry Reding (1): Revert "PCI: tegra: Do not allocate MSI target memory" Thomas Gleixner (3): genirq: Warn when effective affinity is not updated genirq/cpuhotplug: Add sanity check for effective affinity mask genirq/cpuhotplug: Enforce affinity setting on startup of managed irqs Thomas Huth (1): MAINTAINERS: Add Paul Mackerras as maintainer for KVM/powerpc Thomas Meyer (1): xfs: Fix bool initialization/comparison Thomas Petazzoni (1): PCI: aardvark: Move to struct pci_host_bridge IRQ mapping functions Todd Kjos (1): binder: fix use-after-free in binder_transaction() Tom Lendacky (2): iommu/amd: Do not disable SWIOTLB if SME is active x86/mm: Disable various instrumentations of mm/mem_encrypt.c and mm/tlb.c Tomas Winkler (1): mei: me: add gemini lake devices id Trond Myklebust (1): NFSv4/pnfs: Fix an infinite layoutget loop Vadim Fedorenko (1): netfilter: ipvs: full-functionality option for ECN encapsulation in tunnel Ville Syrjälä (1): drm/i915: Read timings from the correct transcoder in intel_crtc_mode_get() Vitaly Kuznetsov (2): x86/hyperv: Clear vCPU banks between calls to avoid flushing unneeded vCPUs x86/hyperv: Don't use percpu areas for pcpu_flush/pcpu_flush_ex structures Vitaly Mayatskikh (1): fix unbalanced page refcounting in bio_map_user_iov Wei Yongjun (2): remoteproc: imx_rproc: fix return value check in imx_rproc_addr_init() drm/msm: fix return value check in _msm_gem_kernel_new() Will Deacon (2): perf/core: Avoid freeing static PMU contexts when PMU is unregistered mm: page_vma_mapped: ensure pmd is loaded with READ_ONCE outside of lock Yang Shi (1): mm/madvise.c: add description for MADV_WIPEONFORK and MADV_KEEPONFORK Zhen Lei (1): mm: only display online cpus of the numa node Zhenzhong Duan (1): xen/vcpu: Use a unified name about cpu hotplug state for pv and pvhvm Zi Yan (1): mm: remove unnecessary WARN_ONCE in page_vma_mapped_walk(). leilei.lin (1): perf/core: Fix cgroup time when scheduling descendants