* remotes/origin/tmp-9189141:
Linux 4.14.13
KVM: s390: prevent buffer overrun on memory hotplug during migration
KVM: s390: fix cmma migration for multiple memory slots
mtd: nand: pxa3xx: Fix READOOB implementation
parisc: qemu idle sleep support
parisc: Fix alignment of pa_tlb_lock in assembly on 32-bit SMP kernel
apparmor: fix regression in mount mediation when feature set is pinned
x86/microcode/AMD: Add support for fam17h microcode loading
Input: elantech - add new icbody type 15
powerpc/mm: Fix SEGV on mapped region to return SEGV_ACCERR
ARC: uaccess: dont use "l" gcc inline asm constraint modifier
iommu/arm-smmu-v3: Cope with duplicated Stream IDs
iommu/arm-smmu-v3: Don't free page table ops twice
kernel/signal.c: remove the no longer needed SIGNAL_UNKILLABLE check in complete_signal()
kernel/signal.c: protect the SIGNAL_UNKILLABLE tasks from !sig_kernel_only() signals
kernel/signal.c: protect the traced SIGNAL_UNKILLABLE tasks from SIGKILL
x86 / CPU: Always show current CPU frequency in /proc/cpuinfo
x86 / CPU: Avoid unnecessary IPIs in arch_freq_get_on_cpu()
fscache: Fix the default for fscache_maybe_release_page()
sunxi-rsb: Include OF based modalias in device uevent
drm/i915: Apply Display WA #1183 on skl, kbl, and cfl
drm/i915: Disable DC states around GMBUS on GLK
crypto: chelsio - select CRYPTO_GF128MUL
crypto: pcrypt - fix freeing pcrypt instances
crypto: chacha20poly1305 - validate the digest size
crypto: n2 - cure use after free
efi/capsule-loader: Reinstate virtual capsule mapping
btrfs: fix refcount_t usage when deleting btrfs_delayed_nodes
userfaultfd: clear the vma->vm_userfaultfd_ctx if UFFD_EVENT_FORK fails
mm/sparse.c: wrong allocation for mem_section
mm/mprotect: add a cond_resched() inside change_pmd_range()
kernel/acct.c: fix the acct->needcheck check in check_free_space()
x86/pti: Rename BUG_CPU_INSECURE to BUG_CPU_MELTDOWN
x86/alternatives: Add missing '\n' at end of ALTERNATIVE inline asm
x86/tlb: Drop the _GPL from the cpu_tlbstate export
x86/events/intel/ds: Use the proper cache flush method for mapping ds buffers
x86/kaslr: Fix the vaddr_end mess
x86/mm: Map cpu_entry_area at the same place on 4/5 level
x86/mm: Set MODULES_END to 0xffffffffff000000
ANDROID: netfilter: xt_qtaguid: Fix 4.14 compilation
ANDROID: Squashfs: optimize reading uncompressed data
ANDROID: Squashfs: implement .readpages()
ANDROID: Squashfs: replace buffer_head with BIO
ANDROID: Squashfs: refactor page_actor
ANDROID: usb: f_fs: Prevent gadget unbind if it is already unbound
Linux 4.14.12
rtc: m41t80: remove unneeded checks from m41t80_sqw_set_rate
rtc: m41t80: avoid i2c read in m41t80_sqw_is_prepared
rtc: m41t80: avoid i2c read in m41t80_sqw_recalc_rate
rtc: m41t80: fix m41t80_sqw_round_rate return value
rtc: m41t80: m41t80_sqw_set_rate should return 0 on success
Revert "xfrm: Fix stack-out-of-bounds read in xfrm_state_find."
x86/process: Define cpu_tss_rw in same section as declaration
x86/pti: Switch to kernel CR3 at early in entry_SYSCALL_compat()
x86/dumpstack: Print registers for first stack frame
x86/dumpstack: Fix partial register dumps
x86/pti: Make sure the user/kernel PTEs match
x86/cpu, x86/pti: Do not enable PTI on AMD processors
capabilities: fix buffer overread on very short xattr
exec: Weaken dumpability for secureexec
Linux 4.14.11
tty: fix tty_ldisc_receive_buf() documentation
n_tty: fix EXTPROC vs ICANON interaction with TIOCINQ (aka FIONREAD)
x86/ldt: Make LDT pgtable free conditional
x86/ldt: Plug memory leak in error path
x86/espfix/64: Fix espfix double-fault handling on 5-level systems
x86-32: Fix kexec with stack canary (CONFIG_CC_STACKPROTECTOR)
x86/mm: Remove preempt_disable/enable() from __native_flush_tlb()
x86/smpboot: Remove stale TLB flush invocations
nohz: Prevent a timer interrupt storm in tick_nohz_stop_sched_tick()
staging: android: ion: Fix dma direction for dma_sync_sg_for_cpu/device
drivers: base: cacheinfo: fix cache type for non-architected system cache
phy: tegra: fix device-tree node lookups
binder: fix proc->files use-after-free
timers: Reinitialize per cpu bases on hotplug
timers: Invoke timer_start_debug() where it makes sense
timers: Use deferrable base independent of base::nohz_active
usb: xhci: Add XHCI_TRUST_TX_LENGTH for Renesas uPD720201
USB: Fix off by one in type-specific length check of BOS SSP capability
usb: add RESET_RESUME for ELSA MicroLink 56K
usb: Add device quirk for Logitech HD Pro Webcam C925e
USB: serial: option: adding support for YUGA CLM920-NC5
USB: serial: option: add support for Telit ME910 PID 0x1101
USB: serial: qcserial: add Sierra Wireless EM7565
USB: serial: ftdi_sio: add id for Airbus DS P8GR
USB: chipidea: msm: fix ulpi-node lookup
usbip: vhci: stop printing kernel pointer addresses in messages
usbip: stub: stop printing kernel pointer addresses in messages
usbip: prevent leaking socket pointer address in messages
usbip: fix usbip bind writing random string after command in match_busid
sparc64: repair calling incorrect hweight function from stubs
skbuff: in skb_copy_ubufs unclone before releasing zerocopy
skbuff: skb_copy_ubufs must release uarg even without user frags
skbuff: orphan frags before zerocopy clone
Revert "mlx5: move affinity hints assignments to generic code"
ipv6: set all.accept_dad to 0 by default
ipv4: fib: Fix metrics match when deleting a route
phylink: ensure AN is enabled
phylink: ensure the PHY interface mode is appropriately set
bnxt_en: Fix sources of spurious netpoll warnings
net: sched: fix static key imbalance in case of ingress/clsact_init error
vxlan: restore dev->mtu setting based on lower device
net/mlx5: FPGA, return -EINVAL if size is zero
tcp: refresh tcp_mstamp from timers callbacks
ipv6: Honor specified parameters in fibmatch lookup
net: phy: marvell: Limit 88m1101 autoneg errata to 88E1145 as well.
tcp: fix potential underestimation on rcv_rtt
mlxsw: spectrum: Disable MAC learning for ovs port
tipc: fix hanging poll() for stream sockets
sctp: make sure stream nums can match optlen in sctp_setsockopt_reset_streams
s390/qeth: fix error handling in checksum cmd callback
net: dsa: bcm_sf2: Clear IDDQ_GLOBAL_PWR bit for PHY
sfc: pass valid pointers from efx_enqueue_unwind
openvswitch: Fix pop_vlan action for double tagged frames
net/mlx5: Fix error flow in CREATE_QP command
net/mlx5e: Prevent possible races in VXLAN control flow
net/mlx5e: Add refcount to VXLAN structure
net/mlx5e: Fix features check of IPv6 traffic
net/mlx5e: Fix possible deadlock of VXLAN lock
net/mlx5: Fix rate limit packet pacing naming and struct
tcp: invalidate rate samples during SACK reneging
sock: free skb in skb_complete_tx_timestamp on error
net: phy: micrel: ksz9031: reconfigure autoneg after phy autoneg workaround
net: Fix double free and memory corruption in get_net_ns_by_id()
net: bridge: fix early call to br_stp_change_bridge_id and plug newlink leaks
ipv4: Fix use-after-free when flushing FIB tables
ip6_gre: fix device features for ioctl setup
adding missing rcu_read_unlock in ipxip6_rcv
sctp: Replace use of sockets_allocated with specified macro.
net: mvmdio: disable/unprepare clocks in EPROBE_DEFER case
net: ipv4: fix for a race condition in raw_sendmsg
s390/qeth: update takeover IPs after configuration change
s390/qeth: lock IP table while applying takeover changes
s390/qeth: don't apply takeover changes to RXIP
s390/qeth: apply takeover changes when mode is toggled
tcp_bbr: reset long-term bandwidth sampling on loss recovery undo
tcp_bbr: reset full pipe detection on loss recovery undo
tg3: Fix rx hang on MTU change with 5717/5719
tcp md5sig: Use skb's saddr when replying to an incoming segment
tcp_bbr: record "full bw reached" decision in new full_bw_reached bit
RDS: Check cmsg_len before dereferencing CMSG_DATA
ptr_ring: add barriers
net: reevalulate autoflowlabel setting after sysctl setting
net: qmi_wwan: add Sierra EM7565 1199:9091
netlink: Add netns check on taps
net: igmp: Use correct source address on IGMPv3 reports
net: fec: unmap the xmit buffer that are not transferred by DMA
ipv6: mcast: better catch silly mtu values
ipv4: igmp: guard against silly MTU values
kbuild: add '-fno-stack-check' to kernel build options
block: don't let passthrough IO go into .make_request_fn()
block: fix blk_rq_append_bio
cpufreq: schedutil: Use idle_calls counter of the remote CPU
ALSA: hda - Fix missing COEF init for ALC225/295/299
ALSA: hda - fix headset mic detection issue on a Dell machine
ALSA: hda - change the location for one mic on a Lenovo machine
ALSA: hda - Add MIC_NO_PRESENCE fixup for 2 HP machines
ALSA: hda: Drop useless WARN_ON()
IB/core: Verify that QP is security enabled in create and destroy
IB/uverbs: Fix command checking as part of ib_uverbs_ex_modify_qp()
IB/mlx5: Serialize access to the VMA list
IB/hfi: Only read capability registers if the capability exists
gpio: fix "gpio-line-names" property retrieval
ASoC: tlv320aic31xx: Fix GPIO1 register definition
ASoC: twl4030: fix child-node lookup
ASoC: fsl_ssi: AC'97 ops need regmap, clock and cleaning up on failure
ASoC: da7218: fix fix child-node lookup
ASoC: wm_adsp: Fix validation of firmware and coeff lengths
ASoC: codecs: msm8916-wcd: Fix supported formats
iw_cxgb4: Only validate the MSN for successful completions
ring-buffer: Do no reuse reader page if still in use
ring-buffer: Mask out the info bits when returning buffer page length
x86/ldt: Make the LDT mapping RO
x86/mm/dump_pagetables: Allow dumping current pagetables
x86/mm/dump_pagetables: Check user space page table for WX pages
x86/mm/dump_pagetables: Add page table directory to the debugfs VFS hierarchy
x86/mm/pti: Add Kconfig
x86/dumpstack: Indicate in Oops whether PTI is configured and enabled
x86/mm: Clarify the whole ASID/kernel PCID/user PCID naming
x86/mm: Use INVPCID for __native_flush_tlb_single()
x86/mm: Optimize RESTORE_CR3
x86/mm: Use/Fix PCID to optimize user/kernel switches
x86/mm: Abstract switching CR3
x86/mm: Allow flushing for future ASID switches
x86/pti: Map the vsyscall page if needed
x86/pti: Put the LDT in its own PGD if PTI is on
x86/mm/64: Make a full PGD-entry size hole in the memory map
x86/events/intel/ds: Map debug buffers in cpu_entry_area
x86/cpu_entry_area: Add debugstore entries to cpu_entry_area
x86/mm/pti: Map ESPFIX into user space
x86/mm/pti: Share entry text PMD
x86/entry: Align entry text section to PMD boundary
x86/mm/pti: Share cpu_entry_area with user space page tables
x86/mm/pti: Force entry through trampoline when PTI active
x86/mm/pti: Add functions to clone kernel PMDs
x86/mm/pti: Populate user PGD
x86/mm/pti: Allocate a separate user PGD
x86/mm/pti: Allow NX poison to be set in p4d/pgd
x86/mm/pti: Add mapping helper functions
x86/pti: Add the pti= cmdline option and documentation
x86/mm/pti: Add infrastructure for page table isolation
x86/mm/pti: Prepare the x86/entry assembly code for entry/exit CR3 switching
x86/mm/pti: Disable global pages if PAGE_TABLE_ISOLATION=y
x86/cpufeatures: Add X86_BUG_CPU_INSECURE
tracing: Fix crash when it fails to alloc ring buffer
tracing: Fix possible double free on failure of allocating trace buffer
tracing: Remove extra zeroing out of the ring buffer page
Conflicts:
drivers/staging/android/ion/ion.c
kernel/time/timer.c
Change-Id: Ia5b16c96ab44e640e2f10ab535c4c672b670cbdc
Signed-off-by: Runmin Wang <runminw@codeaurora.org>
5682ea9f33