This is the start of the stable review cycle for the 4.17.6 release. There are 56 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu Jul 12 18:24:40 UTC 2018. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.17.6-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.17.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.17.6-rc1 Sebastian Andrzej Siewior <bigeasy@xxxxxxxxxxxxx> Revert mm/vmstat.c: fix vmstat_update() preemption BUG Dan Carpenter <dan.carpenter@xxxxxxxxxx> staging: comedi: quatech_daqp_cs: fix no-op loop daqp_ao_insn_write() Jann Horn <jannh@xxxxxxxxxx> netfilter: nf_log: don't hold nf_log_mutex during user access Tokunori Ikegami <ikegami@xxxxxxxxxxxxxxxxxxxx> mtd: cfi_cmdset_0002: Change erase functions to check chip good only Tokunori Ikegami <ikegami@xxxxxxxxxxxxxxxxxxxx> mtd: cfi_cmdset_0002: Change erase functions to retry for error Tokunori Ikegami <ikegami@xxxxxxxxxxxxxxxxxxxx> mtd: cfi_cmdset_0002: Change definition naming to retry write operation Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx> dm: prevent DAX mounts if not supported Ross Zwisler <ross.zwisler@xxxxxxxxxxxxxxx> dax: check for QUEUE_FLAG_DAX in bdev_dax_supported() Dave Jiang <dave.jiang@xxxxxxxxx> dax: change bdev_dax_supported() to support boolean returns Darrick J. Wong <darrick.wong@xxxxxxxxxx> fs: allow per-device dax status checking for filesystems Peter Rosin <peda@xxxxxxxxxx> i2c: smbus: kill memory leak on emulated and failed DMA SMBus xfers Wenwen Wang <wang6495@xxxxxxx> i2c: core: smbus: fix a potential missing-check bug Benjamin Tissoires <benjamin.tissoires@xxxxxxxxxx> HID: core: allow concurrent registration of drivers Daniel Rosenberg <drosen@xxxxxxxxxx> HID: debug: check length before copy_to_user() Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> HID: hiddev: fix potential Spectre v1 Jason Andryuk <jandryuk@xxxxxxxxx> HID: i2c-hid: Fix "incomplete report" noise Jon Derrick <jonathan.derrick@xxxxxxxxx> ext4: check superblock mapped prior to committing Theodore Ts'o <tytso@xxxxxxx> ext4: add more mount time checks of the superblock Theodore Ts'o <tytso@xxxxxxx> ext4: add more inode number paranoia checks Theodore Ts'o <tytso@xxxxxxx> ext4: avoid running out of journal credits when appending to an inline file Theodore Ts'o <tytso@xxxxxxx> ext4: never move the system.data xattr out of the inode body Theodore Ts'o <tytso@xxxxxxx> ext4: clear i_data in ext4_inode_info when removing inline data Theodore Ts'o <tytso@xxxxxxx> ext4: include the illegal physical block in the bad map ext4_error msg Theodore Ts'o <tytso@xxxxxxx> ext4: verify the depth of extent tree in ext4_find_extent() Theodore Ts'o <tytso@xxxxxxx> ext4: only look at the bg_flags field if it is valid Theodore Ts'o <tytso@xxxxxxx> ext4: always check block group bounds in ext4_init_block_bitmap() Theodore Ts'o <tytso@xxxxxxx> ext4: make sure bitmaps and the inode table don't overlap with bg descriptors Theodore Ts'o <tytso@xxxxxxx> ext4: always verify the magic number in xattr blocks Theodore Ts'o <tytso@xxxxxxx> ext4: add corruption check in ext4_xattr_set_entry() Theodore Ts'o <tytso@xxxxxxx> jbd2: don't mark block as modified if the handle is out of credits Lyude Paul <lyude@xxxxxxxxxx> drm/amdgpu: Dynamically probe for ATIF handle (v2) Lyude Paul <lyude@xxxxxxxxxx> drm/amdgpu: Add amdgpu_atpx_get_dhandle() Mikulas Patocka <mpatocka@xxxxxxxxxx> drm/udl: fix display corruption of the last line Michel Dänzer <michel.daenzer@xxxxxxx> drm: Use kvzalloc for allocating blob property memory Paulo Alcantara <paulo@xxxxxxxx> cifs: Fix infinite loop when using hard mount option Stefano Brivio <sbrivio@xxxxxxxxxx> cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting Paulo Alcantara <paulo@xxxxxxxx> cifs: Fix memory leak in smb2_set_ea() Lars Persson <lars.persson@xxxxxxxx> cifs: Fix use after free of a mid_q_entry Roger Quadros <rogerq@xxxxxx> ARM: dts: dra7: Disable metastability workaround for USB2 Adam Ford <aford173@xxxxxxxxx> ARM: dts: omap3: Fix am3517 mdio and emac clock references Nick Dyer <nick@xxxxxxxxxxxxx> ARM: dts: imx51-zii-rdu1: fix touchscreen pinctrl Jason Gunthorpe <jgg@xxxxxxxx> vfio: Use get_user_pages_longterm correctly Lars Ellenberg <lars.ellenberg@xxxxxxxxxx> drbd: fix access after free Christian Borntraeger <borntraeger@xxxxxxxxxx> s390: Correct register corruption in critical section cleanup David Disseldorp <ddiss@xxxxxxx> scsi: target: Fix truncated PR-in ReadKeys response Raghava Aditya Renukunta <RaghavaAditya.Renukunta@xxxxxxxxxxxxx> scsi: aacraid: Fix PD performance regression over incorrect qd being set Jann Horn <jannh@xxxxxxxxxx> scsi: sg: mitigate read/write abuse Changbin Du <changbin.du@xxxxxxxxx> tracing: Fix missing return symbol in function_graph output Arnd Bergmann <arnd@xxxxxxxx> tracing: Avoid string overflow Lyude Paul <lyude@xxxxxxxxxx> drm/amdgpu: Make struct amdgpu_atif private to amdgpu_acpi.c Jouke Witteveen <j.witteveen@xxxxxxxxx> ACPI / battery: Safe unregistering of hooks Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx> ACPICA: Drop leading newlines from error messages Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx> PCI / ACPI / PM: Resume bridges w/o drivers on suspend-to-RAM Pavel Tatashin <pasha.tatashin@xxxxxxxxxx> mm: teach dump_page() to correctly output poisoned struct pages Cannon Matthews <cannonmatthews@xxxxxxxxxx> mm: hugetlb: yield when prepping struct pages Janosch Frank <frankja@xxxxxxxxxxxxx> userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/am3517.dtsi | 4 + arch/arm/boot/dts/dra7.dtsi | 2 +- arch/arm/boot/dts/imx51-zii-rdu1.dts | 2 +- arch/s390/kernel/entry.S | 4 +- drivers/acpi/acpica/uterror.c | 6 +- drivers/acpi/battery.c | 9 +- drivers/block/drbd/drbd_worker.c | 2 +- drivers/dax/super.c | 48 +++++---- drivers/gpu/drm/amd/amdgpu/amdgpu.h | 46 ++------ drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c | 131 +++++++++++++++++++---- drivers/gpu/drm/amd/amdgpu/amdgpu_atpx_handler.c | 6 ++ drivers/gpu/drm/drm_property.c | 6 +- drivers/gpu/drm/udl/udl_fb.c | 5 +- drivers/gpu/drm/udl/udl_transfer.c | 11 +- drivers/hid/hid-core.c | 5 +- drivers/hid/hid-debug.c | 8 +- drivers/hid/i2c-hid/i2c-hid.c | 2 +- drivers/hid/usbhid/hiddev.c | 11 ++ drivers/i2c/i2c-core-smbus.c | 12 ++- drivers/md/dm-table.c | 7 +- drivers/md/dm.c | 3 +- drivers/mtd/chips/cfi_cmdset_0002.c | 30 ++++-- drivers/pci/pci-acpi.c | 12 +++ drivers/scsi/aacraid/aachba.c | 15 ++- drivers/scsi/sg.c | 42 +++++++- drivers/staging/comedi/drivers/quatech_daqp_cs.c | 2 +- drivers/target/target_core_pr.c | 15 ++- drivers/vfio/vfio_iommu_type1.c | 16 ++- fs/cifs/cifsglob.h | 1 + fs/cifs/cifsproto.h | 1 + fs/cifs/cifssmb.c | 10 +- fs/cifs/connect.c | 8 +- fs/cifs/smb1ops.c | 1 + fs/cifs/smb2ops.c | 3 + fs/cifs/smb2pdu.c | 25 +++-- fs/cifs/smb2transport.c | 1 + fs/cifs/transport.c | 18 +++- fs/ext2/super.c | 3 +- fs/ext4/balloc.c | 21 ++-- fs/ext4/ext4.h | 8 -- fs/ext4/ext4_extents.h | 1 + fs/ext4/extents.c | 6 ++ fs/ext4/ialloc.c | 14 ++- fs/ext4/inline.c | 39 +------ fs/ext4/inode.c | 7 +- fs/ext4/mballoc.c | 6 +- fs/ext4/super.c | 89 ++++++++++++--- fs/ext4/xattr.c | 40 ++++--- fs/jbd2/transaction.c | 9 +- fs/userfaultfd.c | 12 ++- fs/xfs/xfs_ioctl.c | 3 +- fs/xfs/xfs_iops.c | 30 +++++- fs/xfs/xfs_super.c | 10 +- include/linux/dax.h | 11 +- include/linux/hid.h | 3 +- kernel/trace/trace_events_hist.c | 2 +- kernel/trace/trace_functions_graph.c | 5 +- mm/debug.c | 18 +++- mm/hugetlb.c | 1 + mm/vmstat.c | 2 - net/netfilter/nf_log.c | 9 +- 62 files changed, 596 insertions(+), 287 deletions(-)