This is the start of the stable review cycle for the 4.11.12 release. There are 88 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri Jul 21 10:07:36 UTC 2017. Anything received after that time might be too late. The whole patch series can be found in one patch at: kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.11.12-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.11.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.11.12-rc1 Haozhong Zhang <haozhong.zhang@xxxxxxxxx> kvm: vmx: allow host to access guest MSR_IA32_BNDCFGS Jim Mattson <jmattson@xxxxxxxxxx> kvm: vmx: Check value written to IA32_BNDCFGS Jim Mattson <jmattson@xxxxxxxxxx> kvm: x86: Guest BNDCFGS requires guest MPX support Jim Mattson <jmattson@xxxxxxxxxx> kvm: vmx: Do not disable intercepts for BNDCFGS Dan Carpenter <dan.carpenter@xxxxxxxxxx> PM / QoS: return -EINVAL for bogus strings Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx> ALSA: x86: Clear the pdata.notify_lpe_audio pointer before teardown Thomas Gleixner <tglx@xxxxxxxxxxxxx> PM / wakeirq: Convert to SRCU Peter Zijlstra <peterz@xxxxxxxxxxxxx> sched/topology: Fix overlapping sched_group_mask Lauro Ramos Venancio <lvenanci@xxxxxxxxxx> sched/topology: Optimize build_group_mask() Peter Zijlstra <peterz@xxxxxxxxxxxxx> sched/topology: Fix building of overlapping sched-groups Peter Zijlstra <peterz@xxxxxxxxxxxxx> sched/fair, cpumask: Export for_each_cpu_wrap() Horia Geantă <horia.geanta@xxxxxxx> crypto: caam - fix signals handling David Gstir <david@xxxxxxxxxxxxx> crypto: caam - properly set IV after {en,de}crypt Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> crypto: sha1-ssse3 - Disable avx2 Gilad Ben-Yossef <gilad@xxxxxxxxxxxxx> crypto: atmel - only treat EBUSY as transient if backlog Martin Hicks <mort@xxxxxxxx> crypto: talitos - Extend max key length for SHA384/512-HMAC and AEAD Helge Deller <deller@xxxxxx> mm: fix overflow check in expand_upwards() Andy Lutomirski <luto@xxxxxxxxxx> selftests/capabilities: Fix the test_execve test Eric W. Biederman <ebiederm@xxxxxxxxxxxx> mnt: Make propagate_umount less slow for overlapping mount propagation trees Eric W. Biederman <ebiederm@xxxxxxxxxxxx> mnt: In propgate_umount handle visiting mounts in any order Eric W. Biederman <ebiederm@xxxxxxxxxxxx> mnt: In umount propagation reparent in a separate pass Michael Kelley <mikelley@xxxxxxxxxxxxx> Drivers: hv: vmbus: Close timing hole that can corrupt per-cpu page Johan Hovold <johan@xxxxxxxxxx> nvmem: core: fix leaks on registration errors Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx> rcu: Add memory barriers for NOCB leader wakeup Adam Borowski <kilobyte@xxxxxxxxxx> vt: fix unchecked __put_user() in tioclinux ioctls Dong Bo <dongbo4@xxxxxxxxxx> arm64: Preventing READ_IMPLIES_EXEC propagation Marc Zyngier <marc.zyngier@xxxxxxx> ARM64: dts: marvell: armada37xx: Fix timer interrupt specifiers Balbir Singh <bsingharora@xxxxxxxxx> powerpc/kexec: Fix radix to hash kexec due to IAMR/AMOR Kees Cook <keescook@xxxxxxxxxxxx> exec: Limit arg stack to at most 75% of _STK_LIM Kees Cook <keescook@xxxxxxxxxxxx> s390: reduce ELF_ET_DYN_BASE Kees Cook <keescook@xxxxxxxxxxxx> powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB Kees Cook <keescook@xxxxxxxxxxxx> arm64: move ELF_ET_DYN_BASE to 4GB / 4MB Kees Cook <keescook@xxxxxxxxxxxx> arm: move ELF_ET_DYN_BASE to 4MB Kees Cook <keescook@xxxxxxxxxxxx> binfmt_elf: use ELF_ET_DYN_BASE only for PIE Cyril Bur <cyrilbur@xxxxxxxxx> checkpatch: silence perl 5.26.0 unescaped left brace warnings Sahitya Tummala <stummala@xxxxxxxxxxxxxx> fs/dcache.c: fix spin lockup issue on nlru->lock Sahitya Tummala <stummala@xxxxxxxxxxxxxx> mm/list_lru.c: fix list_lru_count_node() to be race free Marcin Nowakowski <marcin.nowakowski@xxxxxxxxxx> kernel/extable.c: mark core_kernel_text notrace Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx> thp, mm: fix crash due race in MADV_FREE handling Ben Hutchings <ben@xxxxxxxxxxxxxxx> tools/lib/lockdep: Reduce MAX_LOCK_DEPTH to avoid overflowing lock_chain/: Depth Helge Deller <deller@xxxxxx> parisc/mm: Ensure IRQs are off in switch_mm() Thomas Bogendoerfer <tsbogend@xxxxxxxxxxxxxxxx> parisc: DMA API: return error instead of BUG_ON for dma ops on non dma devs Eric Biggers <ebiggers@xxxxxxxxxx> parisc: use compat_sys_keyctl() Helge Deller <deller@xxxxxx> parisc: Report SIGSEGV instead of SIGBUS when running out of stack Suzuki K Poulose <suzuki.poulose@xxxxxxx> irqchip/gic-v3: Fix out-of-bound access in gic_set_affinity Alex Deucher <alexander.deucher@xxxxxxx> drm/amdgpu/gfx6: properly cache mc_arb_ramcfg Srinivas Dasari <dasaris@xxxxxxxxxxxxxxxx> cfg80211: Check if NAN service ID is of expected size Srinivas Dasari <dasaris@xxxxxxxxxxxxxxxx> cfg80211: Check if PMKID attribute is of expected size Srinivas Dasari <dasaris@xxxxxxxxxxxxxxxx> cfg80211: Validate frequencies nested in NL80211_ATTR_SCAN_FREQUENCIES Srinivas Dasari <dasaris@xxxxxxxxxxxxxxxx> cfg80211: Define nla_policy for NL80211_ATTR_LOCAL_MESH_POWER_MODE Daniel Kiper <daniel.kiper@xxxxxxxxxx> efi: Process the MEMATTR table only if EFI_MEMMAP is enabled Peter S. Housel <housel@xxxxxxx> brcmfmac: Fix glom_skb leak in brcmf_sdiod_recv_chain Christophe Jaillet <christophe.jaillet@xxxxxxxxxx> brcmfmac: Fix a memory leak in error handling path in 'brcmf_cfg80211_attach' Bart Van Assche <bart.vanassche@xxxxxxxxxxx> block: Fix a blk_exit_rl() regression Nitin Gupta <nitin.m.gupta@xxxxxxxxxx> sparc64: Fix gup_huge_pmd Nagarathnam Muthusamy <nagarathnam.muthusamy@xxxxxxxxxx> Adding the type of exported symbols Nagarathnam Muthusamy <nagarathnam.muthusamy@xxxxxxxxxx> sed regex in Makefile.build requires line break between exported symbols Nagarathnam Muthusamy <nagarathnam.muthusamy@xxxxxxxxxx> Adding asm-prototypes.h for genksyms to generate crc Bert Kenward <bkenward@xxxxxxxxxxxxxx> sfc: don't read beyond unicast address list Arend van Spriel <arend.vanspriel@xxxxxxxxxxxx> brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx() Eduardo Valentin <eduval@xxxxxxxxxx> bridge: mdb: fix leak on complete_info ptr on fail path WANG Cong <xiyou.wangcong@xxxxxxxxx> tap: convert a mutex to a spinlock Guilherme G. Piccoli <gpiccoli@xxxxxxxxxxxxxxxxxx> cxgb4: fix BUG() on interrupt deallocating path of ULD Huy Nguyen <huyn@xxxxxxxxxxxx> net/mlx5e: Initialize CEE's getpermhwaddr address buffer to 0xff Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx> rds: tcp: use sock_create_lite() to create the accept socket Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx> vrf: fix bug_on triggered by rx when destroying a vrf David Ahern <dsahern@xxxxxxxxx> net: ipv6: Compare lwstate in detecting duplicate nexthops Derek Chickles <derek.chickles@xxxxxxxxxx> liquidio: fix bug in soft reset failure detection Alban Browaeys <alban.browaeys@xxxxxxxxx> net: core: Fix slab-out-of-bounds in netdev_stats_to_stats64 Jiri Benc <jbenc@xxxxxxxxxx> geneve: fix hlist corruption Jiri Benc <jbenc@xxxxxxxxxx> vxlan: fix hlist corruption Sabrina Dubroca <sd@xxxxxxxxxxxxxxx> ipv6: dad: don't remove dynamic addresses if link is down Gal Pressman <galp@xxxxxxxxxxxx> net/mlx5e: Fix TX carrier errors report in get stats ndo Mohamad Haj Yahia <mohamad@xxxxxxxxxxxx> net/mlx5: Cancel delayed recovery work when unloading the driver Michal Kubeček <mkubecek@xxxxxxx> net: handle NAPI_GRO_FREE_STOLEN_HEAD case also in napi_frags_finish() Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: prevent leaking pointer via xadd on unpriviledged Dan Carpenter <dan.carpenter@xxxxxxxxxx> rocker: move dereference before free Ido Schimmel <idosch@xxxxxxxxxxxx> mlxsw: spectrum_router: Fix NULL pointer dereference Gao Feng <gfree.wind@xxxxxxxxxxx> net: sched: Fix one possible panic when no destroy callback Jason Wang <jasowang@xxxxxxxxxx> virtio-net: serialize tx routine during reset Eric Dumazet <edumazet@xxxxxxxxxx> net: prevent sign extension in dev_get_stats() WANG Cong <xiyou.wangcong@xxxxxxxxx> tcp: reset sk_rx_dst in tcp_disconnect() Richard Cochran <richardcochran@xxxxxxxxx> net: dp83640: Avoid NULL pointer dereference. Michal Kubeček <mkubecek@xxxxxxx> net: account for current skb length when deciding about UFO Martin Habets <mhabets@xxxxxxxxxxxxxx> sfc: Fix MCDI command size for filter operations Arnd Bergmann <arnd@xxxxxxxx> netvsc: don't access netdev->num_rx_queues directly WANG Cong <xiyou.wangcong@xxxxxxxxx> ipv6: avoid unregistering inet6_dev for loopback Zach Brown <zach.brown@xxxxxx> net/phy: micrel: configure intterupts after autoneg workaround ------------- Diffstat: Makefile | 4 +- arch/arm/include/asm/elf.h | 8 +- arch/arm64/boot/dts/marvell/armada-37xx.dtsi | 12 +- arch/arm64/include/asm/elf.h | 18 +- arch/parisc/include/asm/dma-mapping.h | 11 +- arch/parisc/include/asm/mmu_context.h | 15 +- arch/parisc/kernel/syscall_table.S | 2 +- arch/parisc/mm/fault.c | 2 +- arch/powerpc/include/asm/elf.h | 13 +- arch/powerpc/kernel/misc_64.S | 12 ++ arch/s390/include/asm/elf.h | 15 +- arch/sparc/include/asm/asm-prototypes.h | 24 +++ arch/sparc/lib/atomic_64.S | 44 +++-- arch/sparc/lib/checksum_64.S | 1 + arch/sparc/lib/csum_copy.S | 1 + arch/sparc/lib/memscan_64.S | 2 + arch/sparc/lib/memset.S | 1 + arch/sparc/mm/gup.c | 4 +- arch/x86/crypto/sha1_ssse3_glue.c | 2 +- arch/x86/include/asm/elf.h | 13 +- arch/x86/include/asm/msr-index.h | 2 + arch/x86/kvm/cpuid.h | 8 + arch/x86/kvm/vmx.c | 10 +- block/blk-sysfs.c | 34 ++-- drivers/base/power/sysfs.c | 2 + drivers/base/power/wakeup.c | 32 ++-- drivers/crypto/atmel-sha.c | 4 +- drivers/crypto/caam/caamalg.c | 20 +- drivers/crypto/caam/caamhash.c | 2 +- drivers/crypto/caam/key_gen.c | 2 +- drivers/crypto/talitos.c | 7 +- drivers/firmware/efi/efi.c | 3 +- drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c | 3 +- drivers/hv/hv.c | 7 +- drivers/irqchip/irq-gic-v3.c | 3 + .../ethernet/cavium/liquidio/cn23xx_pf_device.c | 2 +- .../net/ethernet/cavium/liquidio/cn66xx_device.c | 2 +- drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | 16 +- drivers/net/ethernet/chelsio/cxgb4/cxgb4_uld.c | 42 ++-- drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 2 - drivers/net/ethernet/mellanox/mlx5/core/health.c | 15 +- drivers/net/ethernet/mellanox/mlx5/core/main.c | 2 +- drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 3 + drivers/net/ethernet/rocker/rocker_ofdpa.c | 2 +- drivers/net/ethernet/sfc/ef10.c | 16 +- drivers/net/geneve.c | 48 +++-- drivers/net/hyperv/netvsc_drv.c | 4 +- drivers/net/phy/dp83640.c | 2 +- drivers/net/phy/micrel.c | 2 + drivers/net/tap.c | 18 +- drivers/net/virtio_net.c | 1 + drivers/net/vrf.c | 11 +- drivers/net/vxlan.c | 30 ++- .../wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c | 7 +- .../broadcom/brcm80211/brcmfmac/cfg80211.c | 8 +- drivers/nvmem/core.c | 13 +- drivers/parisc/ccio-dma.c | 12 ++ drivers/parisc/dino.c | 5 +- drivers/parisc/lba_pci.c | 6 +- drivers/parisc/sba_iommu.c | 14 ++ drivers/tty/vt/vt.c | 6 +- fs/binfmt_elf.c | 59 +++++- fs/dcache.c | 5 +- fs/exec.c | 11 +- fs/mount.h | 1 + fs/namespace.c | 1 + fs/pnode.c | 212 ++++++++++++++++----- include/linux/blkdev.h | 2 + include/linux/cpumask.h | 17 ++ include/linux/list_lru.h | 1 + include/linux/mlx5/driver.h | 1 + include/net/ip6_route.h | 8 + include/net/vxlan.h | 10 +- kernel/bpf/verifier.c | 5 + kernel/extable.c | 2 +- kernel/rcu/tree_plugin.h | 2 + kernel/sched/fair.c | 45 +---- kernel/sched/topology.c | 24 ++- lib/cpumask.c | 32 ++++ mm/huge_memory.c | 2 +- mm/list_lru.c | 14 +- mm/mmap.c | 2 +- net/bridge/br_mdb.c | 3 +- net/core/dev.c | 32 ++-- net/ipv4/ip_output.c | 3 +- net/ipv4/tcp.c | 2 + net/ipv6/addrconf.c | 23 +-- net/ipv6/ip6_fib.c | 5 +- net/ipv6/ip6_output.c | 2 +- net/ipv6/route.c | 8 +- net/rds/tcp_listen.c | 2 +- net/sched/sch_api.c | 3 +- net/wireless/nl80211.c | 10 +- scripts/checkpatch.pl | 6 +- sound/x86/intel_hdmi_audio.c | 5 + tools/lib/lockdep/uinclude/linux/lockdep.h | 2 +- tools/testing/selftests/bpf/test_verifier.c | 66 +++++++ tools/testing/selftests/capabilities/test_execve.c | 7 +- 99 files changed, 892 insertions(+), 377 deletions(-)