This is the start of the stable review cycle for the 4.14.71 release. There are 126 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed Sep 19 21:16:12 UTC 2018. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.71-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 4.14.71-rc1 Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> mm: get rid of vmacache_flush_all() entirely Ian Kent <raven@xxxxxxxxxx> autofs: fix autofs_sbi() does not check super block type Jason Wang <jasowang@xxxxxxxxxx> tuntap: fix use after free during release Jason Wang <jasowang@xxxxxxxxxx> tun: fix use after free for ptr_ring Wei Yongjun <weiyongjun1@xxxxxxxxxx> mtd: ubi: wl: Fix error return code in ubi_wl_init() Taehee Yoo <ap420073@xxxxxxxxx> ip: frags: fix crash in ip_do_fragment() Peter Oskolkov <posk@xxxxxxxxxx> ip: process in-order fragments efficiently Peter Oskolkov <posk@xxxxxxxxxx> ip: add helpers to process in-order fragments faster. Dan Carpenter <dan.carpenter@xxxxxxxxxx> ipv4: frags: precedence bug in ip_expire() Eric Dumazet <edumazet@xxxxxxxxxx> net: sk_buff rbnode reorg Eric Dumazet <edumazet@xxxxxxxxxx> net: add rb_to_skb() and other rb tree helpers Eric Dumazet <edumazet@xxxxxxxxxx> net: pskb_trim_rcsum() and CHECKSUM_COMPLETE are friends Florian Westphal <fw@xxxxxxxxx> ipv6: defrag: drop non-last frags smaller than min mtu Peter Oskolkov <posk@xxxxxxxxxx> net: modify skb_rbtree_purge to return the truesize of all purged skbs. Eric Dumazet <edumazet@xxxxxxxxxx> net: speed up skb_rbtree_purge() Peter Oskolkov <posk@xxxxxxxxxx> ip: discard IPv4 datagrams with overlapping segments. Eric Dumazet <edumazet@xxxxxxxxxx> inet: frags: fix ip6frag_low_thresh boundary Eric Dumazet <edumazet@xxxxxxxxxx> inet: frags: get rid of ipfrag_skb_cb/FRAG_CB Eric Dumazet <edumazet@xxxxxxxxxx> inet: frags: reorganize struct netns_frags Eric Dumazet <edumazet@xxxxxxxxxx> rhashtable: reorganize struct rhashtable layout Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: frags: rewrite ip6_expire_frag_queue() Eric Dumazet <edumazet@xxxxxxxxxx> inet: frags: do not clone skb in ip_expire() Eric Dumazet <edumazet@xxxxxxxxxx> inet: frags: break the 2GB limit for frags storage Eric Dumazet <edumazet@xxxxxxxxxx> inet: frags: remove inet_frag_maybe_warn_overflow() Eric Dumazet <edumazet@xxxxxxxxxx> inet: frags: get rif of inet_frag_evicting() Eric Dumazet <edumazet@xxxxxxxxxx> inet: frags: remove some helpers Eric Dumazet <edumazet@xxxxxxxxxx> inet: frags: use rhashtables for reassembly units Eric Dumazet <edumazet@xxxxxxxxxx> rhashtable: add schedule points Eric Dumazet <edumazet@xxxxxxxxxx> ipv6: export ip6 fragments sysctl to unprivileged users Eric Dumazet <edumazet@xxxxxxxxxx> inet: frags: refactor lowpan_net_frag_init() Eric Dumazet <edumazet@xxxxxxxxxx> inet: frags: refactor ipv6_frag_init() Kees Cook <keescook@xxxxxxxxxxxx> inet: frags: Convert timers to use timer_setup() Eric Dumazet <edumazet@xxxxxxxxxx> inet: frags: refactor ipfrag_init() Eric Dumazet <edumazet@xxxxxxxxxx> inet: frags: add a pointer to struct netns_frags Eric Dumazet <edumazet@xxxxxxxxxx> inet: frags: change inet_frags_init_net() return value Jani Nikula <jani.nikula@xxxxxxxxx> drm/i915: set DP Main Stream Attribute for color range on DDI platforms Parav Pandit <parav@xxxxxxxxxxxx> RDMA/cma: Do not ignore net namespace for unbound cm_id Paul Burton <paul.burton@xxxxxxxx> MIPS: WARN_ON invalid DMA cache maintenance, not BUG_ON Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> NFSv4.1: Fix a potential layoutget/layoutrecall deadlock Chao Yu <yuchao0@xxxxxxxxxx> f2fs: fix to do sanity check with {sit,nat}_ver_bitmap_bytesize Zumeng Chen <zumeng.chen@xxxxxxxxx> mfd: ti_am335x_tscadc: Fix struct clk memory leak Geert Uytterhoeven <geert+renesas@xxxxxxxxx> iommu/ipmmu-vmsa: Fix allocation in atomic context Dan Carpenter <dan.carpenter@xxxxxxxxxx> f2fs: Fix uninitialized return in f2fs_ioc_shutdown() Chao Yu <yuchao0@xxxxxxxxxx> f2fs: fix to wait on page writeback before updating page Katsuhiro Suzuki <suzuki.katsuhiro@xxxxxxxxxxxxx> media: helene: fix xtal frequency setting at power on Mauricio Faria de Oliveira <mfo@xxxxxxxxxxxxx> partitions/aix: fix usage of uninitialized lv_info and lvname structures Mauricio Faria de Oliveira <mfo@xxxxxxxxxxxxx> partitions/aix: append null character to print data from disk Sylwester Nawrocki <s.nawrocki@xxxxxxxxxxx> media: s5p-mfc: Fix buffer look up in s5p_mfc_handle_frame_{new, copy_time} functions Nick Dyer <nick.dyer@xxxxxxxxxxx> Input: atmel_mxt_ts - only use first T9 instance John Pittman <jpittman@xxxxxxxxxx> dm cache: only allow a single io_mode cache feature to be requested Petr Machata <petrm@xxxxxxxxxxxx> net: dcb: For wild-card lookups, use priority -1, not 0 Nicholas Mc Guire <hofrat@xxxxxxxxx> MIPS: generic: fix missing of_node_put() Nicholas Mc Guire <hofrat@xxxxxxxxx> MIPS: Octeon: add missing of_node_put() Chao Yu <yuchao0@xxxxxxxxxx> f2fs: fix to do sanity check with reserved blkaddr of inline inode Peter Rosin <peda@xxxxxxxxxx> tpm/tpm_i2c_infineon: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT) Linus Walleij <linus.walleij@xxxxxxxxxx> tpm_tis_spi: Pass the SPI IRQ down to the driver Chao Yu <yuchao0@xxxxxxxxxx> f2fs: fix to skip GC if type in SSA and SIT is inconsistent Jinbum Park <jinb.park7@xxxxxxxxx> pktcdvd: Fix possible Spectre-v1 for pkt_devs Chao Yu <yuchao0@xxxxxxxxxx> f2fs: try grabbing node page lock aggressively in sync scenario Yelena Krivosheev <yelena@xxxxxxxxxxx> net: mvneta: fix mtu change on port without link Daniel Kurtz <djkurtz@xxxxxxxxxxxx> pinctrl/amd: only handle irq if it is pending and unmasked Anton Vasilyev <vasilyev@xxxxxxxxx> gpio: ml-ioh: Fix buffer underwrite on probe error path Dan Carpenter <dan.carpenter@xxxxxxxxxx> pinctrl: imx: off by one in imx_pinconf_group_dbg_show() Joerg Roedel <jroedel@xxxxxxx> x86/mm: Remove in_nmi() warning from vmalloc_fault() Marcel Holtmann <marcel@xxxxxxxxxxxx> Bluetooth: hidp: Fix handling of strncpy for hid->name information Surabhi Vishnoi <svishnoi@xxxxxxxxxxxxxx> ath10k: disable bundle mgmt tx completion event support Huaisheng Ye <yehs1@xxxxxxxxxx> tools/testing/nvdimm: kaddr and pfn can be NULL to ->direct_access() Anton Vasilyev <vasilyev@xxxxxxxxx> scsi: 3ware: fix return 0 on the error path of probe Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx> ata: libahci: Correct setting of DEVSLP register Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx> ata: libahci: Allow reconfigure of DEVSLP register Paul Burton <paul.burton@xxxxxxxx> MIPS: Fix ISA virt/bus conversion for non-zero PHYS_OFFSET Srinivas Kandagatla <srinivas.kandagatla@xxxxxxxxxx> rpmsg: core: add support to power domains for devices Loic Poulain <loic.poulain@xxxxxxxxxx> wlcore: Set rx_status boottime_ns field on rx Sven Eckelmann <sven.eckelmann@xxxxxxxxxxxx> ath10k: prevent active scans on potential unusable channels Felix Fietkau <nbd@xxxxxxxx> ath9k_hw: fix channel maximum power level test Felix Fietkau <nbd@xxxxxxxx> ath9k: report tx status on EOSP Finn Thain <fthain@xxxxxxxxxxxxxxxxxxx> macintosh/via-pmu: Add missing mmio accessors Kan Liang <kan.liang@xxxxxxxxxxxxxxx> perf evlist: Fix error out while applying initial delay and LBR Jiri Olsa <jolsa@xxxxxxxxxx> perf c2c report: Fix crash for empty browser Olga Kornievskaia <kolga@xxxxxxxxxx> NFSv4.0 fix client reference leak in callback Christophe Leroy <christophe.leroy@xxxxxx> perf tools: Allow overriding MAX_NR_CPUS at compile time Randy Dunlap <rdunlap@xxxxxxxxxxxxx> f2fs: fix defined but not used build warnings Yunlong Song <yunlong.song@xxxxxxxxxx> f2fs: do not set free of current section Chao Yu <yuchao0@xxxxxxxxxx> f2fs: fix to active page in lru list for read path Anton Vasilyev <vasilyev@xxxxxxxxx> tty: rocket: Fix possible buffer overwrite on register_PCI Michael Kelley <mikelley@xxxxxxxxxxxxx> Drivers: hv: vmbus: Cleanup synic memory free path Anton Vasilyev <vasilyev@xxxxxxxxx> firmware: vpd: Fix section enabled flag on vpd_section_destroy Dan Carpenter <dan.carpenter@xxxxxxxxxx> uio: potential double frees if __uio_register_device() fails Anton Vasilyev <vasilyev@xxxxxxxxx> misc: ti-st: Fix memory leak in the error path of probe() Philipp Zabel <p.zabel@xxxxxxxxxxxxxx> gpu: ipu-v3: default to id 0 on missing OF alias Todor Tomov <todor.tomov@xxxxxxxxxx> media: camss: csid: Configure data type and decode format properly Gaurav Kohli <gkohli@xxxxxxxxxxxxxx> timers: Clear timer_base::must_forward_clk with timer_base::lock held BingJing Chang <bingjingc@xxxxxxxxxxxx> md/raid5: fix data corruption of replacements after originals dropped Mike Christie <mchristi@xxxxxxxxxx> scsi: target: fix __transport_register_session locking Ming Lei <ming.lei@xxxxxxxxxx> blk-mq: fix updating tags depth Arun Parameswaran <arun.parameswaran@xxxxxxxxxxxx> net: phy: Fix the register offsets in Broadcom iProc mdio mux driver Anton Vasilyev <vasilyev@xxxxxxxxx> media: dw2102: Fix memleak on sequence of probes Anton Vasilyev <vasilyev@xxxxxxxxx> media: davinci: vpif_display: Mix memory leak on probe error path Roman Gushchin <guro@xxxxxx> selftests/bpf: fix a typo in map in map test Reza Arbab <arbab@xxxxxxxxxxxxx> powerpc/powernv: Fix concurrency issue with npu->mmio_atsd_usage Dmitry Osipenko <digetx@xxxxxxxxx> gpio: tegra: Move driver registration to subsys_init level Johan Hedberg <johan.hedberg@xxxxxxxxx> Bluetooth: h5: Fix missing dependency on BT_HCIUART_SERDEV Jae Hyun Yoo <jae.hyun.yoo@xxxxxxxxxxxxxxx> i2c: aspeed: Add an explicit type casting for *get_clk_reg_val Florian Fainelli <f.fainelli@xxxxxxxxx> ethtool: Remove trailing semicolon for static inline Dan Carpenter <dan.carpenter@xxxxxxxxxx> misc: mic: SCIF Fix scif_get_new_port() error handling Alexey Brodkin <abrodkin@xxxxxxxxxxxx> ARC: [plat-axs*]: Enable SWAP Tomas Winkler <tomas.winkler@xxxxxxxxx> tpm: separate cmd_ready/go_idle from runtime_pm Arnd Bergmann <arnd@xxxxxxxx> crypto: aes-generic - fix aes-generic regression on powerpc Gustavo A. R. Silva <gustavo@xxxxxxxxxxxxxx> switchtec: Fix Spectre v1 vulnerability Filippo Sironi <sironi@xxxxxxxxx> x86/microcode: Update the new microcode revision unconditionally Prarit Bhargava <prarit@xxxxxxxxxx> x86/microcode: Make sure boot_cpu_data.microcode is up-to-date Thomas Gleixner <tglx@xxxxxxxxxxxxx> cpu/hotplug: Prevent state corruption on error rollback Neeraj Upadhyay <neeraju@xxxxxxxxxxxxxx> cpu/hotplug: Adjust misplaced smb() in cpuhp_thread_fun() Takashi Iwai <tiwai@xxxxxxx> ALSA: hda - Fix cancel_work_sync() stall from jackpoll work Sean Christopherson <sean.j.christopherson@xxxxxxxxx> KVM: VMX: Do not allow reexecute_instruction() when skipping MMIO instr Pierre Morel <pmorel@xxxxxxxxxxxxx> KVM: s390: vsie: copy wrapping keys to right place Filipe Manana <fdmanana@xxxxxxxx> Btrfs: fix data corruption when deduplicating between different files Steve French <stfrench@xxxxxxxxxxxxx> smb3: check for and properly advertise directory lease support Steve French <stfrench@xxxxxxxxxxxxx> SMB3: Backup intent flag missing for directory opens with backupuid mounts Paul Burton <paul.burton@xxxxxxxx> MIPS: VDSO: Match data page cache colouring when D$ aliases Minchan Kim <minchan@xxxxxxxxxx> android: binder: fix the race mmap and alloc_new_buf_locked Konstantin Khlebnikov <khlebnikov@xxxxxxxxxxxxxx> block: bfq: swap puts in bfqg_and_blkg_put Jens Axboe <axboe@xxxxxxxxx> nbd: don't allow invalid blocksize settings James Smart <jsmart2021@xxxxxxxxx> scsi: lpfc: Correct MDS diag and nvmet configuration Felipe Balbi <felipe.balbi@xxxxxxxxxxxxxxx> i2c: i801: fix DNV's SMBCTRL register offset Shubhrajyoti Datta <shubhrajyoti.datta@xxxxxxxxxx> i2c: xiic: Make the start and the byte count write atomic ------------- Diffstat: Documentation/networking/ip-sysctl.txt | 13 +- Makefile | 4 +- arch/arc/configs/axs101_defconfig | 1 - arch/arc/configs/axs103_defconfig | 1 - arch/arc/configs/axs103_smp_defconfig | 1 - arch/mips/cavium-octeon/octeon-platform.c | 2 + arch/mips/generic/init.c | 1 + arch/mips/include/asm/io.h | 8 +- arch/mips/kernel/vdso.c | 20 + arch/mips/mm/c-r4k.c | 6 +- arch/powerpc/platforms/powernv/npu-dma.c | 5 +- arch/s390/kvm/vsie.c | 3 +- arch/x86/kernel/cpu/microcode/amd.c | 24 +- arch/x86/kernel/cpu/microcode/intel.c | 17 +- arch/x86/kvm/vmx.c | 4 +- arch/x86/mm/fault.c | 2 - block/bfq-cgroup.c | 4 +- block/blk-mq-tag.c | 8 +- block/partitions/aix.c | 13 +- crypto/Makefile | 2 +- drivers/android/binder_alloc.c | 42 +- drivers/ata/libahci.c | 20 +- drivers/block/nbd.c | 3 + drivers/block/pktcdvd.c | 4 +- drivers/bluetooth/Kconfig | 1 + drivers/char/tpm/tpm-interface.c | 50 +- drivers/char/tpm/tpm.h | 12 +- drivers/char/tpm/tpm2-space.c | 16 +- drivers/char/tpm/tpm_crb.c | 101 +--- drivers/char/tpm/tpm_i2c_infineon.c | 8 +- drivers/char/tpm/tpm_tis_spi.c | 9 +- drivers/firmware/google/vpd.c | 5 +- drivers/gpio/gpio-ml-ioh.c | 3 +- drivers/gpio/gpio-tegra.c | 2 +- drivers/gpu/drm/i915/i915_reg.h | 1 + drivers/gpu/drm/i915/intel_ddi.c | 4 + drivers/gpu/ipu-v3/ipu-common.c | 2 + drivers/hv/hv.c | 14 +- drivers/i2c/busses/i2c-aspeed.c | 2 +- drivers/i2c/busses/i2c-i801.c | 7 +- drivers/i2c/busses/i2c-xiic.c | 4 + drivers/infiniband/core/cma.c | 13 +- drivers/input/touchscreen/atmel_mxt_ts.c | 7 +- drivers/iommu/ipmmu-vmsa.c | 9 +- drivers/macintosh/via-pmu.c | 9 +- drivers/md/dm-cache-target.c | 19 +- drivers/md/raid5.c | 6 + drivers/media/dvb-frontends/helene.c | 5 +- drivers/media/platform/davinci/vpif_display.c | 24 +- .../media/platform/qcom/camss-8x16/camss-csid.c | 16 +- drivers/media/platform/s5p-mfc/s5p_mfc.c | 23 +- drivers/media/usb/dvb-usb/dw2102.c | 19 +- drivers/mfd/ti_am335x_tscadc.c | 3 +- drivers/misc/mic/scif/scif_api.c | 20 +- drivers/misc/ti-st/st_kim.c | 4 +- drivers/mtd/ubi/wl.c | 8 +- drivers/net/ethernet/marvell/mvneta.c | 1 - drivers/net/phy/mdio-mux-bcm-iproc.c | 20 +- drivers/net/tun.c | 21 +- drivers/net/wireless/ath/ath10k/mac.c | 7 + drivers/net/wireless/ath/ath10k/wmi-tlv.c | 5 + drivers/net/wireless/ath/ath10k/wmi-tlv.h | 5 + drivers/net/wireless/ath/ath9k/hw.c | 7 +- drivers/net/wireless/ath/ath9k/xmit.c | 3 +- drivers/net/wireless/ti/wlcore/rx.c | 8 +- drivers/pci/switch/switchtec.c | 4 + drivers/pinctrl/freescale/pinctrl-imx.c | 2 +- drivers/pinctrl/pinctrl-amd.c | 3 +- drivers/rpmsg/rpmsg_core.c | 7 + drivers/scsi/3w-9xxx.c | 6 +- drivers/scsi/3w-sas.c | 3 + drivers/scsi/3w-xxxx.c | 2 + drivers/scsi/lpfc/lpfc.h | 2 +- drivers/target/target_core_transport.c | 5 +- drivers/tty/rocket.c | 2 +- drivers/uio/uio.c | 3 +- fs/autofs4/autofs_i.h | 4 +- fs/autofs4/inode.c | 1 - fs/btrfs/ioctl.c | 19 + fs/cifs/inode.c | 2 + fs/cifs/smb2ops.c | 35 +- fs/cifs/smb2pdu.c | 3 + fs/f2fs/f2fs.h | 7 +- fs/f2fs/file.c | 2 +- fs/f2fs/gc.c | 8 +- fs/f2fs/inline.c | 22 + fs/f2fs/node.c | 4 +- fs/f2fs/segment.h | 3 + fs/f2fs/super.c | 21 +- fs/f2fs/sysfs.c | 10 +- fs/nfs/callback_proc.c | 4 +- fs/nfs/callback_xdr.c | 11 +- include/linux/mm_types.h | 2 +- include/linux/mm_types_task.h | 2 +- include/linux/rhashtable.h | 8 +- include/linux/skbuff.h | 50 +- include/linux/tpm.h | 2 + include/linux/vm_event_item.h | 1 - include/linux/vmacache.h | 5 - include/net/inet_frag.h | 135 +++-- include/net/ip.h | 1 - include/net/ipv6.h | 26 +- include/uapi/linux/ethtool.h | 4 +- include/uapi/linux/snmp.h | 1 + kernel/cpu.c | 11 +- kernel/time/timer.c | 29 +- lib/rhashtable.c | 2 + mm/debug.c | 4 +- mm/vmacache.c | 38 -- net/bluetooth/hidp/core.c | 2 +- net/core/skbuff.c | 31 +- net/dcb/dcbnl.c | 11 +- net/ieee802154/6lowpan/6lowpan_i.h | 26 +- net/ieee802154/6lowpan/reassembly.c | 153 +++--- net/ipv4/inet_fragment.c | 378 +++----------- net/ipv4/ip_fragment.c | 578 ++++++++++++--------- net/ipv4/proc.c | 7 +- net/ipv4/tcp_fastopen.c | 8 +- net/ipv4/tcp_input.c | 33 +- net/ipv6/netfilter/nf_conntrack_reasm.c | 105 ++-- net/ipv6/proc.c | 5 +- net/ipv6/reassembly.c | 217 ++++---- net/sched/sch_netem.c | 14 +- sound/pci/hda/hda_codec.c | 3 +- tools/perf/builtin-c2c.c | 3 + tools/perf/perf.h | 2 + tools/perf/util/evsel.c | 14 + tools/testing/nvdimm/pmem-dax.c | 12 +- tools/testing/selftests/bpf/test_verifier.c | 6 +- 129 files changed, 1473 insertions(+), 1362 deletions(-)
