This is the second start of the stable review cycle for the 3.18.64 release (the first try had too many problems...) There are 92 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri Aug 11 20:21:39 UTC 2017. Anything received after that time might be too late. The whole patch series can be found in one patch at: kernel.org/pub/linux/kernel/v3.x/stable-review/patch-3.18.64-rc2.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-3.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 3.18.64-rc2 zheng li <james.z.li@xxxxxxxxxxxx> ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx> mm: don't dereference struct page fields of invalid pages Jamie Iles <jamie.iles@xxxxxxxxxx> signal: protect SIGNAL_UNKILLABLE from unintentional clearing. Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx> lib/Kconfig.debug: fix frv build failure Michal Hocko <mhocko@xxxxxxxx> mm, slab: make sure that KMALLOC_MAX_SIZE will fit into MAX_ORDER Rabin Vincent <rabinv@xxxxxxxx> ARM: 8632/1: ftrace: fix syscall name matching Milan P. Gandhi <mgandhi@xxxxxxxxxx> scsi: qla2xxx: Get mutex lock before checking optrom_state Nicholas Mc Guire <hofrat@xxxxxxxxx> x86/boot: Add missing declaration of string functions Michael Chan <michael.chan@xxxxxxxxxxxx> tg3: Fix race condition in tg3_get_stats64(). Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx> sh_eth: R8A7740 supports packet shecksumming Arnd Bergmann <arnd@xxxxxxxx> wext: handle NULL extra data in iwe_stream_add_point better Wei Liu <wei.liu2@xxxxxxxxxx> xen-netback: correctly schedule rate-limited queues Florian Fainelli <f.fainelli@xxxxxxxxx> net: phy: Correctly process PHY_HALTED in phy_stop_machine() Xin Long <lucien.xin@xxxxxxxxx> sctp: fix the check for _sctp_walk_params and _sctp_walk_errors Alexander Potapenko <glider@xxxxxxxxxx> sctp: don't dereference ptr before leaving _sctp_walk_{params, errors}() Xin Long <lucien.xin@xxxxxxxxx> dccp: fix a memleak for dccp_feat_init err process WANG Cong <xiyou.wangcong@xxxxxxxxx> packet: fix use-after-free in prb_retire_rx_blk_timer_expired() Thomas Jarosch <thomas.jarosch@xxxxxxxxxxxxx> mcs7780: Fix initialization when CONFIG_VMAP_STACK is enabled WANG Cong <xiyou.wangcong@xxxxxxxxx> rtnetlink: allocate more memory for dev_set_mac_address() Mahesh Bandewar <maheshb@xxxxxxxxxx> ipv4: initialize fib_trie prior to register_netdev_notifier call. Sabrina Dubroca <sd@xxxxxxxxxxxxxxx> ipv6: avoid overflow of offset in ip6_find_1stfragopt David S. Miller <davem@xxxxxxxxxxxxx> net: Zero terminate ifr_name in dev_ifname(). Jin Qian <jinqian@xxxxxxxxxx> f2fs: sanity check checkpoint segno and blkoff Nicholas Bellinger <nab@xxxxxxxxxxxxxxx> iscsi-target: Fix delayed logout processing greater than SECONDS_FOR_LOGOUT_COMP Nicholas Bellinger <nab@xxxxxxxxxxxxxxx> iscsi-target: Fix initial login PDU asynchronous socket close OOPs Nicholas Bellinger <nab@xxxxxxxxxxxxxxx> iscsi-target: Fix early sk_data_ready LOGIN_FLAGS_READY race Jiang Yi <jiangyilism@xxxxxxxxx> iscsi-target: Always wait for kthread_should_stop() before kthread exit Nicholas Bellinger <nab@xxxxxxxxxxxxxxx> target: Avoid mappedlun symlink creation during lun shutdown Prabhakar Lad <prabhakar.csengg@xxxxxxxxx> media: platform: davinci: return -EINVAL for VPFE_CMD_S_CCDC_RAW_PARAMS ioctl Jerry Lee <jerrylee@xxxxxxxx> ext4: fix overflow caused by missing cast in ext4_resize_fs() Jan Kara <jack@xxxxxxx> ext4: fix SEEK_HOLE/SEEK_DATA for blocksize < pagesize Josh Poimboeuf <jpoimboe@xxxxxxxxxx> mm/page_alloc: Remove kernel address exposure in free_reserved_area() Wanpeng Li <wanpeng.li@xxxxxxxxxxx> KVM: async_pf: make rcu irq exit if not triggered from idle task Banajit Goswami <bgoswami@xxxxxxxxxxxxxx> ASoC: do not close shared backend dailink Sergei A. Trusov <sergei.a.trusov@xxxxx> ALSA: hda - Fix speaker output from VAIO VPCL14M1R Tejun Heo <tj@xxxxxxxxxx> workqueue: restore WQ_UNBOUND/max_active==1 to be ordered Dan Carpenter <dan.carpenter@xxxxxxxxxx> libata: array underflow in ata_find_dev() Chris Metcalf <cmetcalf@xxxxxxxxxx> tile: use global strscpy() rather than private copy Chris Metcalf <cmetcalf@xxxxxxxxxx> arch/powerpc: provide zero_bytemask() for big-endian Chris Metcalf <cmetcalf@xxxxxxxxxx> Make asm/word-at-a-time.h available on all architectures Chris Metcalf <cmetcalf@xxxxxxxxxx> word-at-a-time.h: support zero_bytemask() on alpha and tile Chris Metcalf <cmetcalf@xxxxxxxxxx> tile: add <asm/word-at-a-time.h> and enable support functions Steffen Klassert <steffen.klassert@xxxxxxxxxxx> xfrm: Don't use sk_family for socket policy lookups Mike Manning <mmanning@xxxxxxxxxxx> vlan: Propagate MAC address to VLANs Phil Reid <preid@xxxxxxxxxxxxxxxxx> spi: dw: Make debugfs name unique between instances Peter Ujfalusi <peter.ujfalusi@xxxxxx> ASoC: tlv320aic3x: Mark the RESET register as volatile Arnd Bergmann <arnd@xxxxxxxx> vfio-pci: use 32-bit comparisons for register address for gcc-4.5 Jordan Crouse <jcrouse@xxxxxxxxxxxxxx> drm/msm: Verify that MSM_SUBMIT_BO_FLAGS are set Jordan Crouse <jcrouse@xxxxxxxxxxxxxx> drm/msm: Ensure that the hardware write pointer is valid Leon Romanovsky <leonro@xxxxxxxxxxxx> net/mlx4: Remove BUG_ON from ICM allocation routine Zheng Li <james.z.li@xxxxxxxxxxxx> ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output Pali Rohár <pali.rohar@xxxxxxxxx> ARM: dts: n900: Mark eMMC slot with no-sdio and no-sd flags Chun-Hao Lin <hau@xxxxxxxxxxx> r8169: add support for RTL8168 series add-on card. Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/mce/AMD: Make the init code more robust Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx> tpm: fix a kernel memory leak in tpm-sysfs.c Eric Dumazet <edumazet@xxxxxxxxxx> net: skb_needs_check() accepts CHECKSUM_NONE for tx Kees Cook <keescook@xxxxxxxxxxxx> pstore: Use dynamic spinlock initializer Kees Cook <keescook@xxxxxxxxxxxx> pstore: Correctly initialize spinlock and flags Joel Fernandes <joelaf@xxxxxxxxxx> pstore: Allow prz to control need for locking Andrzej Hajda <a.hajda@xxxxxxxxxxx> v4l: s5c73m3: fix negation operator Al Viro <viro@xxxxxxxxxxxxxxxxxx> dentry name snapshots Valentin Vidic <Valentin.Vidic@xxxxxxxxx> ipmi/watchdog: fix watchdog timeout set on reboot Daniel Borkmann <daniel@xxxxxxxxxxxxx> net, sched: fix soft lockup in tc_classify Ben Hutchings <ben.hutchings@xxxxxxxxxxxxxxx> sh_eth: Fix ethtool operation crash when net device is down Daniel Borkmann <dborkman@xxxxxxxxxx> net: sctp: fix race for one-to-many sockets in sendmsg's auto associate Jan Stancek <jstancek@xxxxxxxxxx> ipv6: fix possible deadlock in ip6_fl_purge / ip6_fl_gc Oliver Neukum <oneukum@xxxxxxxx> kaweth: fix oops upon failed memory allocation Oliver Neukum <oneukum@xxxxxxxx> kaweth: fix firmware download Calvin Owens <calvinowens@xxxxxx> mpt3sas: Don't overreach ioc->reply_post[] during initialization Sudeep Holla <sudeep.holla@xxxxxxx> mailbox: handle empty message in tx_tick Sudeep Holla <sudeep.holla@xxxxxxx> mailbox: skip complete wait event if timer expired Sudeep Holla <sudeep.holla@xxxxxxx> mailbox: always wait in mbox_send_message for blocking Tx mode Lior David <qca_liord@xxxxxxxxxxxxxxxx> wil6210: fix deadlock when using fw_no_recovery option Annie Cherkaev <annie.cherk@xxxxxxxxx> isdn/i4l: fix buffer overflow Chris Metcalf <cmetcalf@xxxxxxxxxx> strscpy: zero any trailing garbage bytes in the destination Chris Metcalf <cmetcalf@xxxxxxxxxx> string: provide strscpy() Jia-Ju Bai <baijiaju1990@xxxxxxx> isdn: Fix a sleep-in-atomic bug Florian Fainelli <f.fainelli@xxxxxxxxx> net: phy: Do not perform software reset for Generic PHY Al Viro <viro@xxxxxxxxxxxxxxxxxx> Bluetooth: cmtp: cmtp_add_connection() should verify that it's dealing with l2cap socket Johan Hedberg <johan.hedberg@xxxxxxxxx> Bluetooth: Fix potential NULL dereference Al Viro <viro@xxxxxxxxxxxxxxxxxx> Bluetooth: bnep: bnep_add_connection() should verify that it's dealing with l2cap socket Cheah Kok Cheong <thrust73@xxxxxxxxx> Staging: comedi: comedi_fops: Avoid orphaned proc entry Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Revert "powerpc/numa: Fix percpu allocations to be NUMA aware" Paul Mackerras <paulus@xxxxxxxxxx> KVM: PPC: Book3S HV: Save/restore host values of debug registers Paul Mackerras <paulus@xxxxxxxxxx> KVM: PPC: Book3S HV: Reload HTM registers explicitly Paul Mackerras <paulus@xxxxxxxxxx> KVM: PPC: Book3S HV: Restore critical SPRs to host values on guest exit Sinclair Yeh <syeh@xxxxxxxxxx> drm/vmwgfx: Fix gcc-7.1.1 warning Ofer Heifetz <oferh@xxxxxxxxxxx> md/raid5: add thread_group worker async_tx_issue_pending_all Laurent Vivier <lvivier@xxxxxxxxxx> powerpc/pseries: Fix of_node_put() underflow during reconfig remove Eric Dumazet <edumazet@xxxxxxxxxx> net: reduce skb_warn_bad_offload() noise Joel Fernandes <joelaf@xxxxxxxxxx> pstore: Make spinlock per zone instead of global Yuejie Shi <syjcnss@xxxxxxxxx> af_key: Add lock to key dump ------------- Diffstat: Makefile | 4 +- arch/alpha/include/asm/word-at-a-time.h | 2 + arch/arc/include/asm/Kbuild | 1 + arch/arm/boot/dts/omap3-n900.dts | 2 + arch/arm/include/asm/ftrace.h | 18 +++ arch/avr32/include/asm/Kbuild | 1 + arch/blackfin/include/asm/Kbuild | 1 + arch/c6x/include/asm/Kbuild | 1 + arch/cris/include/asm/Kbuild | 1 + arch/frv/include/asm/Kbuild | 1 + arch/hexagon/include/asm/Kbuild | 1 + arch/ia64/include/asm/Kbuild | 1 + arch/m32r/include/asm/Kbuild | 1 + arch/metag/include/asm/Kbuild | 1 + arch/microblaze/include/asm/Kbuild | 1 + arch/mips/include/asm/Kbuild | 1 + arch/mn10300/include/asm/Kbuild | 1 + arch/powerpc/include/asm/Kbuild | 1 + arch/powerpc/include/asm/topology.h | 14 -- arch/powerpc/include/asm/word-at-a-time.h | 5 + arch/powerpc/kernel/setup_64.c | 4 +- arch/powerpc/kvm/book3s_hv.c | 29 +++- arch/powerpc/kvm/book3s_hv_rmhandlers.S | 37 ++++- arch/powerpc/platforms/pseries/reconfig.c | 1 - arch/s390/include/asm/Kbuild | 1 + arch/score/include/asm/Kbuild | 1 + arch/tile/Kconfig | 2 + arch/tile/gxio/mpipe.c | 33 +--- arch/tile/include/asm/Kbuild | 1 + arch/tile/include/asm/uaccess.h | 66 ++------ arch/tile/include/asm/word-at-a-time.h | 42 ++++++ arch/tile/lib/exports.c | 2 - arch/tile/lib/usercopy_32.S | 46 ------ arch/tile/lib/usercopy_64.S | 46 ------ arch/um/include/asm/Kbuild | 1 + arch/unicore32/include/asm/Kbuild | 1 + arch/x86/boot/string.c | 1 + arch/x86/boot/string.h | 9 ++ arch/x86/kernel/cpu/mcheck/mce_amd.c | 3 + arch/x86/kernel/kvm.c | 6 +- arch/xtensa/include/asm/Kbuild | 1 + drivers/ata/libata-scsi.c | 6 +- drivers/char/ipmi/ipmi_watchdog.c | 7 +- drivers/char/tpm/tpm-sysfs.c | 2 + drivers/gpu/drm/msm/adreno/adreno_gpu.c | 9 +- drivers/gpu/drm/msm/msm_gem_submit.c | 3 +- drivers/gpu/drm/msm/msm_ringbuffer.c | 3 +- drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 2 +- drivers/isdn/i4l/isdn_common.c | 1 + drivers/isdn/i4l/isdn_net.c | 5 +- drivers/isdn/i4l/isdn_ppp.c | 2 +- drivers/mailbox/mailbox.c | 13 +- drivers/md/raid5.c | 2 + drivers/media/i2c/s5c73m3/s5c73m3-ctrls.c | 2 +- drivers/media/platform/davinci/vpfe_capture.c | 22 +-- drivers/net/ethernet/broadcom/tg3.c | 3 + drivers/net/ethernet/mellanox/mlx4/icm.c | 7 +- drivers/net/ethernet/realtek/r8169.c | 1 + drivers/net/ethernet/renesas/sh_eth.c | 11 ++ drivers/net/irda/mcs7780.c | 16 +- drivers/net/phy/phy.c | 3 + drivers/net/phy/phy_device.c | 2 +- drivers/net/usb/kaweth.c | 10 +- drivers/net/wireless/ath/wil6210/main.c | 15 +- drivers/net/xen-netback/common.h | 1 + drivers/net/xen-netback/interface.c | 6 +- drivers/net/xen-netback/netback.c | 6 +- drivers/scsi/mpt3sas/mpt3sas_base.c | 33 ++-- drivers/scsi/qla2xxx/qla_attr.c | 18 ++- drivers/spi/spi-dw.c | 5 +- drivers/staging/comedi/comedi_fops.c | 6 +- drivers/target/iscsi/iscsi_target.c | 38 ++++- drivers/target/iscsi/iscsi_target_core.h | 1 + drivers/target/iscsi/iscsi_target_erl0.c | 6 +- drivers/target/iscsi/iscsi_target_erl0.h | 2 +- drivers/target/iscsi/iscsi_target_login.c | 4 + drivers/target/iscsi/iscsi_target_nego.c | 208 +++++++++++++++++--------- drivers/target/target_core_fabric_configfs.c | 5 + drivers/target/target_core_tpg.c | 3 + drivers/vfio/pci/vfio_pci_rdwr.c | 5 +- fs/dcache.c | 27 ++++ fs/debugfs/inode.c | 10 +- fs/ext4/file.c | 3 + fs/ext4/resize.c | 3 +- fs/f2fs/super.c | 16 ++ fs/namei.c | 8 +- fs/notify/fsnotify.c | 8 +- fs/pstore/ram.c | 5 +- fs/pstore/ram_core.c | 25 ++-- include/asm-generic/word-at-a-time.h | 80 +++++++++- include/linux/dcache.h | 7 + include/linux/fsnotify.h | 31 ---- include/linux/phy.h | 4 + include/linux/pstore_ram.h | 11 +- include/linux/sched.h | 10 ++ include/linux/slab.h | 4 +- include/linux/string.h | 3 + include/net/iw_handler.h | 3 +- include/net/sctp/sctp.h | 4 + include/target/target_core_base.h | 1 + kernel/signal.c | 4 +- kernel/workqueue.c | 10 ++ lib/Kconfig.debug | 2 +- lib/string.c | 89 +++++++++++ mm/page_alloc.c | 10 +- net/8021q/vlan.c | 5 + net/8021q/vlan.h | 2 + net/8021q/vlan_dev.c | 20 ++- net/bluetooth/bnep/core.c | 10 +- net/bluetooth/cmtp/core.c | 3 + net/core/dev.c | 19 ++- net/core/dev_ioctl.c | 1 + net/core/rtnetlink.c | 3 +- net/dccp/feat.c | 7 +- net/ipv4/fib_frontend.c | 9 +- net/ipv4/ip_output.c | 2 +- net/ipv6/ip6_flowlabel.c | 4 +- net/ipv6/ip6_output.c | 2 +- net/ipv6/output_core.c | 8 +- net/key/af_key.c | 46 +++++- net/packet/af_packet.c | 2 +- net/sched/cls_api.c | 4 +- net/sctp/socket.c | 8 +- net/xfrm/xfrm_policy.c | 9 +- sound/pci/hda/patch_realtek.c | 1 + sound/soc/codecs/tlv320aic3x.c | 13 ++ sound/soc/soc-pcm.c | 4 + 127 files changed, 960 insertions(+), 486 deletions(-)