[PATCH 4.12 00/99] 4.12.10-stable review

From: Greg Kroah-Hartman
Date: Mon Aug 28 2017 - 04:07:34 EST


This is the start of the stable review cycle for the 4.12.10 release.
There are 99 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed Aug 30 08:04:17 UTC 2017.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.12.10-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.12.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 4.12.10-rc1

Benjamin Herrenschmidt <benh@xxxxxxxxxxxxxxxxxxx>
powerpc/mm: Ensure cpumask update is ordered

Lv Zheng <lv.zheng@xxxxxxxxx>
ACPI: EC: Fix regression related to wrong ECDT initialization order

Hanjun Guo <hanjun.guo@xxxxxxxxxx>
ACPI: APD: Fix HID for Hisilicon Hip07/08

Dave Jiang <dave.jiang@xxxxxxxxx>
ntb: transport shouldn't disable link due to bogus values in SPADs

Logan Gunthorpe <logang@xxxxxxxxxxxx>
ntb: ntb_test: ensure the link is up before trying to configure the mws

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
Clarify (and fix) MAX_LFS_FILESIZE macros

Joerg Roedel <jroedel@xxxxxxx>
iommu: Fix wrong freeing of iommu_device->dev

Charles Milette <charlesmilette@xxxxxxxxx>
staging: rtl8188eu: add RNX-N150NUB support

Lorenzo Bianconi <lorenzo.bianconi83@xxxxxxxxx>
iio: magnetometer: st_magn: remove ihl property for LSM303AGR

Lorenzo Bianconi <lorenzo.bianconi83@xxxxxxxxx>
iio: magnetometer: st_magn: fix status register address for LSM303AGR

Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
iio: hid-sensor-trigger: Fix the race with user space powering up sensors

Dragos Bogdan <dragos.bogdan@xxxxxxxxxx>
iio: imu: adis16480: Fix acceleration scale factor for adis16480

Martijn Coenen <maco@xxxxxxxxxxx>
ANDROID: binder: fix proc->tsk check.

Riley Andrews <riandrews@xxxxxxxxxx>
binder: Use wake up hint for synchronous transactions.

Todd Kjos <tkjos@xxxxxxxxxxx>
binder: use group leader instead of open thread

Todd Kjos <tkjos@xxxxxxxxxxx>
Revert "android: binder: Sanity check at binder ioctl"

Jeffy Chen <jeffy.chen@xxxxxxxxxxxxxx>
Bluetooth: bnep: fix possible might sleep error in bnep_session

Jeffy Chen <jeffy.chen@xxxxxxxxxxxxxx>
Bluetooth: cmtp: fix possible might sleep error in cmtp_session

Jeffy Chen <jeffy.chen@xxxxxxxxxxxxxx>
Bluetooth: hidp: fix possible might sleep error in hidp_session_thread

Mateusz Jurczyk <mjurczyk@xxxxxxxxxx>
netfilter: nfnetlink: Improve input length sanitization in nfnetlink_rcv

Florian Westphal <fw@xxxxxxxxx>
netfilter: nat: fix src map lookup

Florian Westphal <fw@xxxxxxxxx>
netfilter: expect: fix crash when putting uninited expectation

Vadim Lomovtsev <vlomovts@xxxxxxxxxx>
net: sunrpc: svcsock: fix NULL-pointer exception

Eric Biggers <ebiggers@xxxxxxxxxx>
x86/mm: Fix use-after-free of ldt_struct

Nicholas Piggin <npiggin@xxxxxxxxx>
timers: Fix excessive granularity of new timers after a nohz idle

Mark Rutland <mark.rutland@xxxxxxx>
perf/core: Fix group {cpu,task} validation

Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx>
ftrace: Check for null ret_stack on profile function graph entry function

Christoph Hellwig <hch@xxxxxx>
virtio_pci: fix cpu affinity support

Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx>
ring-buffer: Have ring_buffer_alloc_read_page() return error on offline CPU

Chuck Lever <chuck.lever@xxxxxxxxxx>
nfsd: Limit end of page list when decoding NFSv4 WRITE

Ronnie Sahlberg <lsahlber@xxxxxxxxxx>
cifs: return ENAMETOOLONG for overlong names in cifs_open()/cifs_lookup()

Sachin Prabhu <sprabhu@xxxxxxxxxx>
cifs: Fix df output for users with quota limits

Nicholas Piggin <npiggin@xxxxxxxxx>
kbuild: linker script do not match C names unless LD_DEAD_CODE_DATA_ELIMINATION is configured

Bharat Potnuri <bharat@xxxxxxxxxxx>
RDMA/uverbs: Initialize cq_context appropriately

Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx>
tracing: Fix freeing of filter in create_filter() when set_str is false

Chunyu Hu <chuhu@xxxxxxxxxx>
tracing: Fix kmemleak in tracing_map_array_free()

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
tracing: Missing error code in tracer_alloc_buffers()

Steven Rostedt (VMware) <rostedt@xxxxxxxxxxx>
tracing: Call clear_boot_tracer() at lateinit_sync

Sakari Ailus <sakari.ailus@xxxxxxxxxxxxxxx>
ACPI: device property: Fix node lookup in acpi_graph_get_child_prop_value()

Alex Deucher <alexdeucher@xxxxxxxxx>
Revert "drm/amdgpu: fix vblank_time when displays are off"

fred gao <fred.gao@xxxxxxxxx>
drm/i915/gvt: Fix the kernel null pointer error

Jani Nikula <jani.nikula@xxxxxxxxx>
drm/i915/vbt: ignore extraneous child devices for a port

Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
drm/atomic: If the atomic check fails, return its value first

Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
drm/atomic: Handle -EDEADLK with out-fences correctly

Jonathan Liu <net147@xxxxxxxxx>
drm/sun4i: Implement drm_driver lastclose to restore fbdev console

Chris Wilson <chris@xxxxxxxxxxxxxxxxxx>
drm: Release driver tracking before making the object available again

Nikhil Mahale <nmahale@xxxxxxxxxx>
drm: Fix framebuffer leak

Dave Martin <Dave.Martin@xxxxxxx>
arm64: fpsimd: Prevent registers leaking across exec

Pavel Tatashin <pasha.tatashin@xxxxxxxxxx>
mm/memblock.c: reversed logic in memblock_discard()

Eric Biggers <ebiggers@xxxxxxxxxx>
fork: fix incorrect fput of ->exe_file causing use-after-free

Eric Biggers <ebiggers@xxxxxxxxxx>
mm/madvise.c: fix freeing of locked page with MADV_FREE

Ulf Hansson <ulf.hansson@xxxxxxxxxx>
i2c: designware: Fix system suspend

Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx>
dax: fix deadlock due to misaligned PMD faults

Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx>
mm, shmem: fix handling /sys/kernel/mm/transparent_hugepage/shmem_enabled

Chen Yu <yu.c.chen@xxxxxxxxx>
PM/hibernate: touch NMI watchdog when creating snapshot

Vineet Gupta <vgupta@xxxxxxxxxxxx>
ARCv2: PAE40: set MSB even if !CONFIG_ARC_HAS_PAE40 but PAE exists in SoC

Alexey Brodkin <Alexey.Brodkin@xxxxxxxxxxxx>
ARCv2: PAE40: Explicitly set MSB counterpart of SLC region ops addresses

Alexey Brodkin <abrodkin@xxxxxxxxxxxx>
ARCv2: SLC: Make sure busy bit is set properly for region ops

Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx>
ALSA: firewire-motu: destroy stream data surely at failure of card initialization

Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx>
ALSA: firewire: fix NULL pointer dereference when releasing uninitialized data of iso-resource

Takashi Iwai <tiwai@xxxxxxx>
ALSA: hda - Add stereo mic quirk for Lenovo G50-70 (17aa:3978)

Takashi Iwai <tiwai@xxxxxxx>
ALSA: core: Fix unexpected error at replacing user TLV

Joakim Tjernlund <joakim.tjernlund@xxxxxxxxxxxx>
ALSA: usb-audio: Add delay quirk for H650e/Jabra 550a USB headsets

Paolo Bonzini <pbonzini@xxxxxxxxxx>
KVM: x86: block guest protection keys unless the host has them enabled

Paolo Bonzini <pbonzini@xxxxxxxxxx>
KVM, pkeys: do not use PKRU value in vcpu->arch.guest_fpu.state

Paolo Bonzini <pbonzini@xxxxxxxxxx>
KVM: x86: simplify handling of PKRU

Heiko Carstens <heiko.carstens@xxxxxxxxxx>
KVM: s390: sthyi: fix specification exception detection

Heiko Carstens <heiko.carstens@xxxxxxxxxx>
KVM: s390: sthyi: fix sthyi inline assembly

Masaki Ota <masaki.ota@xxxxxxxxxxx>
Input: ALPS - fix two-finger scroll breakage in right side on ALPS touchpad

KT Liao <kt.liao@xxxxxxxxxx>
Input: elan_i2c - add ELAN0602 ACPI ID to support Lenovo Yoga310

Aaron Ma <aaron.ma@xxxxxxxxxxxxx>
Input: trackpoint - add new trackpoint firmware ID

Edward Cree <ecree@xxxxxxxxxxxxxx>
bpf/verifier: fix min/max handling in BPF_SUB

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
bpf: fix mixed signed/unsigned derived min/max value bounds

John Fastabend <john.fastabend@xxxxxxxxx>
bpf, verifier: add additional patterns to evaluate_reg_imm_alu

Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx>
net_sched: fix order of queue length updates in qdisc_replace()

Xin Long <lucien.xin@xxxxxxxxx>
net: sched: fix NULL pointer dereference when action calls some targets

Colin Ian King <colin.king@xxxxxxxxxxxxx>
irda: do not leak initialized list.dev to userspace

Huy Nguyen <huyn@xxxxxxxxxxxx>
net/mlx4_core: Enable 4K UAR if SRIOV module parameter is not enabled

Neal Cardwell <ncardwell@xxxxxxxxxx>
tcp: when rearming RTO, if RTO time is in past then fire RTO ASAP

Wei Wang <weiwan@xxxxxxxxxx>
ipv6: repair fib6 tree in failure case

Wei Wang <weiwan@xxxxxxxxxx>
ipv6: reset fn->rr_ptr when replacing route

Eric Dumazet <edumazet@xxxxxxxxxx>
tipc: fix use-after-free

Alexander Potapenko <glider@xxxxxxxxxx>
sctp: fully initialize the IPv6 address in sctp_v6_to_addr()

Eric Dumazet <edumazet@xxxxxxxxxx>
tun: handle register_netdevice() failures properly

Colin Ian King <colin.king@xxxxxxxxxxxxx>
nfp: fix infinite loop on umapping cleanup

Eric Dumazet <edumazet@xxxxxxxxxx>
ipv4: better IP_MAX_MTU enforcement

Eric Dumazet <edumazet@xxxxxxxxxx>
ptr_ring: use kmalloc_array()

Liping Zhang <zlpnobody@xxxxxxxxx>
openvswitch: fix skb_panic due to the incorrect actions attrlen

David Ahern <dsahern@xxxxxxxxx>
net: igmp: Use ingress interface rather than vrf device

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
bpf: fix bpf_trace_printk on 32 bit archs

Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx>
net_sched: remove warning from qdisc_hash_add

Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx>
net_sched/sfq: update hierarchical backlog when drop packet

Eric Dumazet <edumazet@xxxxxxxxxx>
ipv4: fix NULL dereference in free_fib_info_rcu()

Eric Dumazet <edumazet@xxxxxxxxxx>
dccp: defer ccid_hc_tx_delete() at dismantle time

Eric Dumazet <edumazet@xxxxxxxxxx>
dccp: purge write queue in dccp_destroy_sock()

Eric Dumazet <edumazet@xxxxxxxxxx>
af_key: do not use GFP_KERNEL in atomic contexts

Andreas Born <futur.andy@xxxxxxxxxxxxxx>
bonding: ratelimit failed speed/duplex update warning

Andreas Born <futur.andy@xxxxxxxxxxxxxx>
bonding: require speed/duplex only for 802.3ad, alb and tlb

Tushar Dave <tushar.n.dave@xxxxxxxxxx>
sparc64: remove unnecessary log message


-------------

Diffstat:

Makefile | 4 +-
arch/arc/include/asm/cache.h | 2 +
arch/arc/include/asm/mmu.h | 2 +
arch/arc/mm/cache.c | 50 +++++-
arch/arc/mm/tlb.c | 12 +-
arch/arm64/kernel/fpsimd.c | 2 +
arch/powerpc/include/asm/mmu_context.h | 20 ++-
arch/powerpc/include/asm/pgtable-be-types.h | 1 +
arch/powerpc/include/asm/pgtable-types.h | 1 +
arch/s390/kvm/sthyi.c | 7 +-
arch/sparc/kernel/pci_sun4v.c | 2 -
arch/x86/include/asm/fpu/internal.h | 6 +-
arch/x86/include/asm/kvm_host.h | 1 +
arch/x86/include/asm/mmu_context.h | 4 +-
arch/x86/kvm/cpuid.c | 2 +-
arch/x86/kvm/kvm_cache_regs.h | 5 -
arch/x86/kvm/mmu.h | 2 +-
arch/x86/kvm/svm.c | 7 -
arch/x86/kvm/vmx.c | 25 +--
arch/x86/kvm/x86.c | 17 +-
drivers/acpi/acpi_apd.c | 4 +-
drivers/acpi/ec.c | 17 +-
drivers/acpi/internal.h | 1 -
drivers/acpi/property.c | 2 +-
drivers/acpi/scan.c | 1 -
drivers/android/binder.c | 19 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 2 -
drivers/gpu/drm/drm_atomic.c | 11 +-
drivers/gpu/drm/drm_gem.c | 6 +-
drivers/gpu/drm/drm_plane.c | 1 +
drivers/gpu/drm/i915/gvt/cmd_parser.c | 2 +-
drivers/gpu/drm/i915/intel_bios.c | 15 +-
drivers/gpu/drm/sun4i/sun4i_drv.c | 8 +
drivers/i2c/busses/i2c-designware-platdrv.c | 14 +-
.../iio/common/hid-sensors/hid-sensor-trigger.c | 8 +-
drivers/iio/imu/adis16480.c | 2 +-
drivers/iio/magnetometer/st_magn_core.c | 4 +-
drivers/infiniband/core/uverbs_cmd.c | 2 +-
drivers/input/mouse/alps.c | 41 +++--
drivers/input/mouse/alps.h | 8 +
drivers/input/mouse/elan_i2c_core.c | 1 +
drivers/input/mouse/trackpoint.c | 3 +-
drivers/input/mouse/trackpoint.h | 3 +-
drivers/iommu/amd_iommu_types.h | 4 +-
drivers/iommu/intel-iommu.c | 4 +-
drivers/iommu/iommu-sysfs.c | 32 ++--
drivers/net/bonding/bond_main.c | 13 +-
drivers/net/ethernet/mellanox/mlx4/main.c | 4 +-
.../net/ethernet/netronome/nfp/nfp_net_common.c | 3 +-
drivers/net/tun.c | 3 +
drivers/ntb/ntb_transport.c | 4 +-
drivers/staging/rtl8188eu/os_dep/usb_intf.c | 1 +
drivers/virtio/virtio_pci_common.c | 10 +-
fs/cifs/dir.c | 18 +-
fs/cifs/smb2pdu.c | 4 +-
fs/dax.c | 10 ++
fs/nfsd/nfs4xdr.c | 6 +-
include/asm-generic/vmlinux.lds.h | 38 ++--
include/linux/bpf_verifier.h | 1 +
include/linux/fs.h | 4 +-
include/linux/iommu.h | 12 +-
include/linux/ptr_ring.h | 9 +-
include/linux/skb_array.h | 3 +-
include/net/bonding.h | 5 +
include/net/ip.h | 4 +-
include/net/sch_generic.h | 5 +-
kernel/bpf/verifier.c | 191 ++++++++++++++++++---
kernel/events/core.c | 39 ++---
kernel/fork.c | 1 +
kernel/time/timer.c | 50 +++++-
kernel/trace/bpf_trace.c | 34 +++-
kernel/trace/ftrace.c | 4 +
kernel/trace/ring_buffer.c | 14 +-
kernel/trace/ring_buffer_benchmark.c | 2 +-
kernel/trace/trace.c | 19 +-
kernel/trace/trace_events_filter.c | 4 +
kernel/trace/tracing_map.c | 11 +-
mm/madvise.c | 2 +-
mm/memblock.c | 2 +-
mm/page_alloc.c | 20 ++-
mm/shmem.c | 4 +-
net/bluetooth/bnep/core.c | 11 +-
net/bluetooth/cmtp/core.c | 17 +-
net/bluetooth/hidp/core.c | 33 ++--
net/dccp/proto.c | 19 +-
net/ipv4/fib_semantics.c | 12 +-
net/ipv4/igmp.c | 10 +-
net/ipv4/route.c | 2 +-
net/ipv4/tcp_input.c | 3 +-
net/ipv6/ip6_fib.c | 26 +--
net/irda/af_irda.c | 2 +-
net/key/af_key.c | 48 +++---
net/netfilter/nf_conntrack_expect.c | 2 +-
net/netfilter/nf_nat_core.c | 17 +-
net/netfilter/nfnetlink.c | 6 +-
net/openvswitch/actions.c | 1 +
net/openvswitch/datapath.c | 7 +-
net/openvswitch/datapath.h | 2 +
net/sched/act_ipt.c | 2 +
net/sched/sch_api.c | 3 -
net/sched/sch_sfq.c | 5 +-
net/sctp/ipv6.c | 2 +
net/sunrpc/svcsock.c | 22 ++-
net/tipc/netlink_compat.c | 6 +-
sound/core/control.c | 2 +-
sound/firewire/iso-resources.c | 7 +-
sound/firewire/motu/motu.c | 1 +
sound/pci/hda/patch_conexant.c | 1 +
sound/usb/quirks.c | 9 +-
tools/testing/selftests/ntb/ntb_test.sh | 4 +
110 files changed, 864 insertions(+), 359 deletions(-)