[PATCH 4.17 00/56] 4.17.6-stable review

From: Greg Kroah-Hartman
Date: Tue Jul 10 2018 - 14:34:23 EST


This is the start of the stable review cycle for the 4.17.6 release.
There are 56 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Thu Jul 12 18:24:40 UTC 2018.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.17.6-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.17.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.17.6-rc1

Sebastian Andrzej Siewior <bigeasy@xxxxxxxxxxxxx>
Revert mm/vmstat.c: fix vmstat_update() preemption BUG

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
staging: comedi: quatech_daqp_cs: fix no-op loop daqp_ao_insn_write()

Jann Horn <jannh@xxxxxxxxxx>
netfilter: nf_log: don't hold nf_log_mutex during user access

Tokunori Ikegami <ikegami@xxxxxxxxxxxxxxxxxxxx>
mtd: cfi_cmdset_0002: Change erase functions to check chip good only

Tokunori Ikegami <ikegami@xxxxxxxxxxxxxxxxxxxx>
mtd: cfi_cmdset_0002: Change erase functions to retry for error

Tokunori Ikegami <ikegami@xxxxxxxxxxxxxxxxxxxx>
mtd: cfi_cmdset_0002: Change definition naming to retry write operation

Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
dm: prevent DAX mounts if not supported

Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()

Dave Jiang <dave.jiang@xxxxxxxxx>
dax: change bdev_dax_supported() to support boolean returns

Darrick J. Wong <darrick.wong@xxxxxxxxxx>
fs: allow per-device dax status checking for filesystems

Peter Rosin <peda@xxxxxxxxxx>
i2c: smbus: kill memory leak on emulated and failed DMA SMBus xfers

Wenwen Wang <wang6495@xxxxxxx>
i2c: core: smbus: fix a potential missing-check bug

Benjamin Tissoires <benjamin.tissoires@xxxxxxxxxx>
HID: core: allow concurrent registration of drivers

Daniel Rosenberg <drosen@xxxxxxxxxx>
HID: debug: check length before copy_to_user()

Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx>
HID: hiddev: fix potential Spectre v1

Jason Andryuk <jandryuk@xxxxxxxxx>
HID: i2c-hid: Fix "incomplete report" noise

Jon Derrick <jonathan.derrick@xxxxxxxxx>
ext4: check superblock mapped prior to committing

Theodore Ts'o <tytso@xxxxxxx>
ext4: add more mount time checks of the superblock

Theodore Ts'o <tytso@xxxxxxx>
ext4: add more inode number paranoia checks

Theodore Ts'o <tytso@xxxxxxx>
ext4: avoid running out of journal credits when appending to an inline file

Theodore Ts'o <tytso@xxxxxxx>
ext4: never move the system.data xattr out of the inode body

Theodore Ts'o <tytso@xxxxxxx>
ext4: clear i_data in ext4_inode_info when removing inline data

Theodore Ts'o <tytso@xxxxxxx>
ext4: include the illegal physical block in the bad map ext4_error msg

Theodore Ts'o <tytso@xxxxxxx>
ext4: verify the depth of extent tree in ext4_find_extent()

Theodore Ts'o <tytso@xxxxxxx>
ext4: only look at the bg_flags field if it is valid

Theodore Ts'o <tytso@xxxxxxx>
ext4: always check block group bounds in ext4_init_block_bitmap()

Theodore Ts'o <tytso@xxxxxxx>
ext4: make sure bitmaps and the inode table don't overlap with bg descriptors

Theodore Ts'o <tytso@xxxxxxx>
ext4: always verify the magic number in xattr blocks

Theodore Ts'o <tytso@xxxxxxx>
ext4: add corruption check in ext4_xattr_set_entry()

Theodore Ts'o <tytso@xxxxxxx>
jbd2: don't mark block as modified if the handle is out of credits

Lyude Paul <lyude@xxxxxxxxxx>
drm/amdgpu: Dynamically probe for ATIF handle (v2)

Lyude Paul <lyude@xxxxxxxxxx>
drm/amdgpu: Add amdgpu_atpx_get_dhandle()

Mikulas Patocka <mpatocka@xxxxxxxxxx>
drm/udl: fix display corruption of the last line

Michel DÃnzer <michel.daenzer@xxxxxxx>
drm: Use kvzalloc for allocating blob property memory

Paulo Alcantara <paulo@xxxxxxxx>
cifs: Fix infinite loop when using hard mount option

Stefano Brivio <sbrivio@xxxxxxxxxx>
cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting

Paulo Alcantara <paulo@xxxxxxxx>
cifs: Fix memory leak in smb2_set_ea()

Lars Persson <lars.persson@xxxxxxxx>
cifs: Fix use after free of a mid_q_entry

Roger Quadros <rogerq@xxxxxx>
ARM: dts: dra7: Disable metastability workaround for USB2

Adam Ford <aford173@xxxxxxxxx>
ARM: dts: omap3: Fix am3517 mdio and emac clock references

Nick Dyer <nick@xxxxxxxxxxxxx>
ARM: dts: imx51-zii-rdu1: fix touchscreen pinctrl

Jason Gunthorpe <jgg@xxxxxxxx>
vfio: Use get_user_pages_longterm correctly

Lars Ellenberg <lars.ellenberg@xxxxxxxxxx>
drbd: fix access after free

Christian Borntraeger <borntraeger@xxxxxxxxxx>
s390: Correct register corruption in critical section cleanup

David Disseldorp <ddiss@xxxxxxx>
scsi: target: Fix truncated PR-in ReadKeys response

Raghava Aditya Renukunta <RaghavaAditya.Renukunta@xxxxxxxxxxxxx>
scsi: aacraid: Fix PD performance regression over incorrect qd being set

Jann Horn <jannh@xxxxxxxxxx>
scsi: sg: mitigate read/write abuse

Changbin Du <changbin.du@xxxxxxxxx>
tracing: Fix missing return symbol in function_graph output

Arnd Bergmann <arnd@xxxxxxxx>
tracing: Avoid string overflow

Lyude Paul <lyude@xxxxxxxxxx>
drm/amdgpu: Make struct amdgpu_atif private to amdgpu_acpi.c

Jouke Witteveen <j.witteveen@xxxxxxxxx>
ACPI / battery: Safe unregistering of hooks

Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
ACPICA: Drop leading newlines from error messages

Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
PCI / ACPI / PM: Resume bridges w/o drivers on suspend-to-RAM

Pavel Tatashin <pasha.tatashin@xxxxxxxxxx>
mm: teach dump_page() to correctly output poisoned struct pages

Cannon Matthews <cannonmatthews@xxxxxxxxxx>
mm: hugetlb: yield when prepping struct pages

Janosch Frank <frankja@xxxxxxxxxxxxx>
userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access


-------------

Diffstat:

Makefile | 4 +-
arch/arm/boot/dts/am3517.dtsi | 4 +
arch/arm/boot/dts/dra7.dtsi | 2 +-
arch/arm/boot/dts/imx51-zii-rdu1.dts | 2 +-
arch/s390/kernel/entry.S | 4 +-
drivers/acpi/acpica/uterror.c | 6 +-
drivers/acpi/battery.c | 9 +-
drivers/block/drbd/drbd_worker.c | 2 +-
drivers/dax/super.c | 48 +++++----
drivers/gpu/drm/amd/amdgpu/amdgpu.h | 46 ++------
drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c | 131 +++++++++++++++++++----
drivers/gpu/drm/amd/amdgpu/amdgpu_atpx_handler.c | 6 ++
drivers/gpu/drm/drm_property.c | 6 +-
drivers/gpu/drm/udl/udl_fb.c | 5 +-
drivers/gpu/drm/udl/udl_transfer.c | 11 +-
drivers/hid/hid-core.c | 5 +-
drivers/hid/hid-debug.c | 8 +-
drivers/hid/i2c-hid/i2c-hid.c | 2 +-
drivers/hid/usbhid/hiddev.c | 11 ++
drivers/i2c/i2c-core-smbus.c | 12 ++-
drivers/md/dm-table.c | 7 +-
drivers/md/dm.c | 3 +-
drivers/mtd/chips/cfi_cmdset_0002.c | 30 ++++--
drivers/pci/pci-acpi.c | 12 +++
drivers/scsi/aacraid/aachba.c | 15 ++-
drivers/scsi/sg.c | 42 +++++++-
drivers/staging/comedi/drivers/quatech_daqp_cs.c | 2 +-
drivers/target/target_core_pr.c | 15 ++-
drivers/vfio/vfio_iommu_type1.c | 16 ++-
fs/cifs/cifsglob.h | 1 +
fs/cifs/cifsproto.h | 1 +
fs/cifs/cifssmb.c | 10 +-
fs/cifs/connect.c | 8 +-
fs/cifs/smb1ops.c | 1 +
fs/cifs/smb2ops.c | 3 +
fs/cifs/smb2pdu.c | 25 +++--
fs/cifs/smb2transport.c | 1 +
fs/cifs/transport.c | 18 +++-
fs/ext2/super.c | 3 +-
fs/ext4/balloc.c | 21 ++--
fs/ext4/ext4.h | 8 --
fs/ext4/ext4_extents.h | 1 +
fs/ext4/extents.c | 6 ++
fs/ext4/ialloc.c | 14 ++-
fs/ext4/inline.c | 39 +------
fs/ext4/inode.c | 7 +-
fs/ext4/mballoc.c | 6 +-
fs/ext4/super.c | 89 ++++++++++++---
fs/ext4/xattr.c | 40 ++++---
fs/jbd2/transaction.c | 9 +-
fs/userfaultfd.c | 12 ++-
fs/xfs/xfs_ioctl.c | 3 +-
fs/xfs/xfs_iops.c | 30 +++++-
fs/xfs/xfs_super.c | 10 +-
include/linux/dax.h | 11 +-
include/linux/hid.h | 3 +-
kernel/trace/trace_events_hist.c | 2 +-
kernel/trace/trace_functions_graph.c | 5 +-
mm/debug.c | 18 +++-
mm/hugetlb.c | 1 +
mm/vmstat.c | 2 -
net/netfilter/nf_log.c | 9 +-
62 files changed, 596 insertions(+), 287 deletions(-)