[PATCH 4.11 00/88] 4.11.12-stable review

[Greg Kroah-Hartman]

This is the start of the stable review cycle for the 4.11.12 release.
There are 88 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Fri Jul 21 10:07:36 UTC 2017.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.11.12-rc1.gz
or in the git tree and branch at:
  git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.11.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Linux 4.11.12-rc1

Haozhong Zhang <haozhong.zhang@xxxxxxxxx>
    kvm: vmx: allow host to access guest MSR_IA32_BNDCFGS

Jim Mattson <jmattson@xxxxxxxxxx>
    kvm: vmx: Check value written to IA32_BNDCFGS

Jim Mattson <jmattson@xxxxxxxxxx>
    kvm: x86: Guest BNDCFGS requires guest MPX support

Jim Mattson <jmattson@xxxxxxxxxx>
    kvm: vmx: Do not disable intercepts for BNDCFGS

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
    PM / QoS: return -EINVAL for bogus strings

Ville SyrjÃlà <ville.syrjala@xxxxxxxxxxxxxxx>
    ALSA: x86: Clear the pdata.notify_lpe_audio pointer before teardown

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
    PM / wakeirq: Convert to SRCU

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
    sched/topology: Fix overlapping sched_group_mask

Lauro Ramos Venancio <lvenanci@xxxxxxxxxx>
    sched/topology: Optimize build_group_mask()

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
    sched/topology: Fix building of overlapping sched-groups

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
    sched/fair, cpumask: Export for_each_cpu_wrap()

Horia GeantÄ <horia.geanta@xxxxxxx>
    crypto: caam - fix signals handling

David Gstir <david@xxxxxxxxxxxxx>
    crypto: caam - properly set IV after {en,de}crypt

Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
    crypto: sha1-ssse3 - Disable avx2

Gilad Ben-Yossef <gilad@xxxxxxxxxxxxx>
    crypto: atmel - only treat EBUSY as transient if backlog

Martin Hicks <mort@xxxxxxxx>
    crypto: talitos - Extend max key length for SHA384/512-HMAC and AEAD

Helge Deller <deller@xxxxxx>
    mm: fix overflow check in expand_upwards()

Andy Lutomirski <luto@xxxxxxxxxx>
    selftests/capabilities: Fix the test_execve test

Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
    mnt: Make propagate_umount less slow for overlapping mount propagation trees

Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
    mnt: In propgate_umount handle visiting mounts in any order

Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
    mnt: In umount propagation reparent in a separate pass

Michael Kelley <mikelley@xxxxxxxxxxxxx>
    Drivers: hv: vmbus: Close timing hole that can corrupt per-cpu page

Johan Hovold <johan@xxxxxxxxxx>
    nvmem: core: fix leaks on registration errors

Paul E. McKenney <paulmck@xxxxxxxxxxxxxxxxxx>
    rcu: Add memory barriers for NOCB leader wakeup

Adam Borowski <kilobyte@xxxxxxxxxx>
    vt: fix unchecked __put_user() in tioclinux ioctls

Dong Bo <dongbo4@xxxxxxxxxx>
    arm64: Preventing READ_IMPLIES_EXEC propagation

Marc Zyngier <marc.zyngier@xxxxxxx>
    ARM64: dts: marvell: armada37xx: Fix timer interrupt specifiers

Balbir Singh <bsingharora@xxxxxxxxx>
    powerpc/kexec: Fix radix to hash kexec due to IAMR/AMOR

Kees Cook <keescook@xxxxxxxxxxxx>
    exec: Limit arg stack to at most 75% of _STK_LIM

Kees Cook <keescook@xxxxxxxxxxxx>
    s390: reduce ELF_ET_DYN_BASE

Kees Cook <keescook@xxxxxxxxxxxx>
    powerpc: move ELF_ET_DYN_BASE to 4GB / 4MB

Kees Cook <keescook@xxxxxxxxxxxx>
    arm64: move ELF_ET_DYN_BASE to 4GB / 4MB

Kees Cook <keescook@xxxxxxxxxxxx>
    arm: move ELF_ET_DYN_BASE to 4MB

Kees Cook <keescook@xxxxxxxxxxxx>
    binfmt_elf: use ELF_ET_DYN_BASE only for PIE

Cyril Bur <cyrilbur@xxxxxxxxx>
    checkpatch: silence perl 5.26.0 unescaped left brace warnings

Sahitya Tummala <stummala@xxxxxxxxxxxxxx>
    fs/dcache.c: fix spin lockup issue on nlru->lock

Sahitya Tummala <stummala@xxxxxxxxxxxxxx>
    mm/list_lru.c: fix list_lru_count_node() to be race free

Marcin Nowakowski <marcin.nowakowski@xxxxxxxxxx>
    kernel/extable.c: mark core_kernel_text notrace

Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx>
    thp, mm: fix crash due race in MADV_FREE handling

Ben Hutchings <ben@xxxxxxxxxxxxxxx>
    tools/lib/lockdep: Reduce MAX_LOCK_DEPTH to avoid overflowing lock_chain/: Depth

Helge Deller <deller@xxxxxx>
    parisc/mm: Ensure IRQs are off in switch_mm()

Thomas Bogendoerfer <tsbogend@xxxxxxxxxxxxxxxx>
    parisc: DMA API: return error instead of BUG_ON for dma ops on non dma devs

Eric Biggers <ebiggers@xxxxxxxxxx>
    parisc: use compat_sys_keyctl()

Helge Deller <deller@xxxxxx>
    parisc: Report SIGSEGV instead of SIGBUS when running out of stack

Suzuki K Poulose <suzuki.poulose@xxxxxxx>
    irqchip/gic-v3: Fix out-of-bound access in gic_set_affinity

Alex Deucher <alexander.deucher@xxxxxxx>
    drm/amdgpu/gfx6: properly cache mc_arb_ramcfg

Srinivas Dasari <dasaris@xxxxxxxxxxxxxxxx>
    cfg80211: Check if NAN service ID is of expected size

Srinivas Dasari <dasaris@xxxxxxxxxxxxxxxx>
    cfg80211: Check if PMKID attribute is of expected size

Srinivas Dasari <dasaris@xxxxxxxxxxxxxxxx>
    cfg80211: Validate frequencies nested in NL80211_ATTR_SCAN_FREQUENCIES

Srinivas Dasari <dasaris@xxxxxxxxxxxxxxxx>
    cfg80211: Define nla_policy for NL80211_ATTR_LOCAL_MESH_POWER_MODE

Daniel Kiper <daniel.kiper@xxxxxxxxxx>
    efi: Process the MEMATTR table only if EFI_MEMMAP is enabled

Peter S. Housel <housel@xxxxxxx>
    brcmfmac: Fix glom_skb leak in brcmf_sdiod_recv_chain

Christophe Jaillet <christophe.jaillet@xxxxxxxxxx>
    brcmfmac: Fix a memory leak in error handling path in 'brcmf_cfg80211_attach'

Bart Van Assche <bart.vanassche@xxxxxxxxxxx>
    block: Fix a blk_exit_rl() regression

Nitin Gupta <nitin.m.gupta@xxxxxxxxxx>
    sparc64: Fix gup_huge_pmd

Nagarathnam Muthusamy <nagarathnam.muthusamy@xxxxxxxxxx>
    Adding the type of exported symbols

Nagarathnam Muthusamy <nagarathnam.muthusamy@xxxxxxxxxx>
    sed regex in Makefile.build requires line break between exported symbols

Nagarathnam Muthusamy <nagarathnam.muthusamy@xxxxxxxxxx>
    Adding asm-prototypes.h for genksyms to generate crc

Bert Kenward <bkenward@xxxxxxxxxxxxxx>
    sfc: don't read beyond unicast address list

Arend van Spriel <arend.vanspriel@xxxxxxxxxxxx>
    brcmfmac: fix possible buffer overflow in brcmf_cfg80211_mgmt_tx()

Eduardo Valentin <eduval@xxxxxxxxxx>
    bridge: mdb: fix leak on complete_info ptr on fail path

WANG Cong <xiyou.wangcong@xxxxxxxxx>
    tap: convert a mutex to a spinlock

Guilherme G. Piccoli <gpiccoli@xxxxxxxxxxxxxxxxxx>
    cxgb4: fix BUG() on interrupt deallocating path of ULD

Huy Nguyen <huyn@xxxxxxxxxxxx>
    net/mlx5e: Initialize CEE's getpermhwaddr address buffer to 0xff

Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx>
    rds: tcp: use sock_create_lite() to create the accept socket

Nikolay Aleksandrov <nikolay@xxxxxxxxxxxxxxxxxxx>
    vrf: fix bug_on triggered by rx when destroying a vrf

David Ahern <dsahern@xxxxxxxxx>
    net: ipv6: Compare lwstate in detecting duplicate nexthops

Derek Chickles <derek.chickles@xxxxxxxxxx>
    liquidio: fix bug in soft reset failure detection

Alban Browaeys <alban.browaeys@xxxxxxxxx>
    net: core: Fix slab-out-of-bounds in netdev_stats_to_stats64

Jiri Benc <jbenc@xxxxxxxxxx>
    geneve: fix hlist corruption

Jiri Benc <jbenc@xxxxxxxxxx>
    vxlan: fix hlist corruption

Sabrina Dubroca <sd@xxxxxxxxxxxxxxx>
    ipv6: dad: don't remove dynamic addresses if link is down

Gal Pressman <galp@xxxxxxxxxxxx>
    net/mlx5e: Fix TX carrier errors report in get stats ndo

Mohamad Haj Yahia <mohamad@xxxxxxxxxxxx>
    net/mlx5: Cancel delayed recovery work when unloading the driver

Michal KubeÄek <mkubecek@xxxxxxx>
    net: handle NAPI_GRO_FREE_STOLEN_HEAD case also in napi_frags_finish()

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    bpf: prevent leaking pointer via xadd on unpriviledged

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
    rocker: move dereference before free

Ido Schimmel <idosch@xxxxxxxxxxxx>
    mlxsw: spectrum_router: Fix NULL pointer dereference

Gao Feng <gfree.wind@xxxxxxxxxxx>
    net: sched: Fix one possible panic when no destroy callback

Jason Wang <jasowang@xxxxxxxxxx>
    virtio-net: serialize tx routine during reset

Eric Dumazet <edumazet@xxxxxxxxxx>
    net: prevent sign extension in dev_get_stats()

WANG Cong <xiyou.wangcong@xxxxxxxxx>
    tcp: reset sk_rx_dst in tcp_disconnect()

Richard Cochran <richardcochran@xxxxxxxxx>
    net: dp83640: Avoid NULL pointer dereference.

Michal KubeÄek <mkubecek@xxxxxxx>
    net: account for current skb length when deciding about UFO

Martin Habets <mhabets@xxxxxxxxxxxxxx>
    sfc: Fix MCDI command size for filter operations

Arnd Bergmann <arnd@xxxxxxxx>
    netvsc: don't access netdev->num_rx_queues directly

WANG Cong <xiyou.wangcong@xxxxxxxxx>
    ipv6: avoid unregistering inet6_dev for loopback

Zach Brown <zach.brown@xxxxxx>
    net/phy: micrel: configure intterupts after autoneg workaround


-------------

Diffstat:

 Makefile                                           |   4 +-
 arch/arm/include/asm/elf.h                         |   8 +-
 arch/arm64/boot/dts/marvell/armada-37xx.dtsi       |  12 +-
 arch/arm64/include/asm/elf.h                       |  18 +-
 arch/parisc/include/asm/dma-mapping.h              |  11 +-
 arch/parisc/include/asm/mmu_context.h              |  15 +-
 arch/parisc/kernel/syscall_table.S                 |   2 +-
 arch/parisc/mm/fault.c                             |   2 +-
 arch/powerpc/include/asm/elf.h                     |  13 +-
 arch/powerpc/kernel/misc_64.S                      |  12 ++
 arch/s390/include/asm/elf.h                        |  15 +-
 arch/sparc/include/asm/asm-prototypes.h            |  24 +++
 arch/sparc/lib/atomic_64.S                         |  44 +++--
 arch/sparc/lib/checksum_64.S                       |   1 +
 arch/sparc/lib/csum_copy.S                         |   1 +
 arch/sparc/lib/memscan_64.S                        |   2 +
 arch/sparc/lib/memset.S                            |   1 +
 arch/sparc/mm/gup.c                                |   4 +-
 arch/x86/crypto/sha1_ssse3_glue.c                  |   2 +-
 arch/x86/include/asm/elf.h                         |  13 +-
 arch/x86/include/asm/msr-index.h                   |   2 +
 arch/x86/kvm/cpuid.h                               |   8 +
 arch/x86/kvm/vmx.c                                 |  10 +-
 block/blk-sysfs.c                                  |  34 ++--
 drivers/base/power/sysfs.c                         |   2 +
 drivers/base/power/wakeup.c                        |  32 ++--
 drivers/crypto/atmel-sha.c                         |   4 +-
 drivers/crypto/caam/caamalg.c                      |  20 +-
 drivers/crypto/caam/caamhash.c                     |   2 +-
 drivers/crypto/caam/key_gen.c                      |   2 +-
 drivers/crypto/talitos.c                           |   7 +-
 drivers/firmware/efi/efi.c                         |   3 +-
 drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c              |   3 +-
 drivers/hv/hv.c                                    |   7 +-
 drivers/irqchip/irq-gic-v3.c                       |   3 +
 .../ethernet/cavium/liquidio/cn23xx_pf_device.c    |   2 +-
 .../net/ethernet/cavium/liquidio/cn66xx_device.c   |   2 +-
 drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c    |  16 +-
 drivers/net/ethernet/chelsio/cxgb4/cxgb4_uld.c     |  42 ++--
 drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c |   2 +
 drivers/net/ethernet/mellanox/mlx5/core/en_main.c  |   2 -
 drivers/net/ethernet/mellanox/mlx5/core/health.c   |  15 +-
 drivers/net/ethernet/mellanox/mlx5/core/main.c     |   2 +-
 drivers/net/ethernet/mellanox/mlxsw/spectrum.c     |   3 +
 drivers/net/ethernet/rocker/rocker_ofdpa.c         |   2 +-
 drivers/net/ethernet/sfc/ef10.c                    |  16 +-
 drivers/net/geneve.c                               |  48 +++--
 drivers/net/hyperv/netvsc_drv.c                    |   4 +-
 drivers/net/phy/dp83640.c                          |   2 +-
 drivers/net/phy/micrel.c                           |   2 +
 drivers/net/tap.c                                  |  18 +-
 drivers/net/virtio_net.c                           |   1 +
 drivers/net/vrf.c                                  |  11 +-
 drivers/net/vxlan.c                                |  30 ++-
 .../wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c  |   7 +-
 .../broadcom/brcm80211/brcmfmac/cfg80211.c         |   8 +-
 drivers/nvmem/core.c                               |  13 +-
 drivers/parisc/ccio-dma.c                          |  12 ++
 drivers/parisc/dino.c                              |   5 +-
 drivers/parisc/lba_pci.c                           |   6 +-
 drivers/parisc/sba_iommu.c                         |  14 ++
 drivers/tty/vt/vt.c                                |   6 +-
 fs/binfmt_elf.c                                    |  59 +++++-
 fs/dcache.c                                        |   5 +-
 fs/exec.c                                          |  11 +-
 fs/mount.h                                         |   1 +
 fs/namespace.c                                     |   1 +
 fs/pnode.c                                         | 212 ++++++++++++++++-----
 include/linux/blkdev.h                             |   2 +
 include/linux/cpumask.h                            |  17 ++
 include/linux/list_lru.h                           |   1 +
 include/linux/mlx5/driver.h                        |   1 +
 include/net/ip6_route.h                            |   8 +
 include/net/vxlan.h                                |  10 +-
 kernel/bpf/verifier.c                              |   5 +
 kernel/extable.c                                   |   2 +-
 kernel/rcu/tree_plugin.h                           |   2 +
 kernel/sched/fair.c                                |  45 +----
 kernel/sched/topology.c                            |  24 ++-
 lib/cpumask.c                                      |  32 ++++
 mm/huge_memory.c                                   |   2 +-
 mm/list_lru.c                                      |  14 +-
 mm/mmap.c                                          |   2 +-
 net/bridge/br_mdb.c                                |   3 +-
 net/core/dev.c                                     |  32 ++--
 net/ipv4/ip_output.c                               |   3 +-
 net/ipv4/tcp.c                                     |   2 +
 net/ipv6/addrconf.c                                |  23 +--
 net/ipv6/ip6_fib.c                                 |   5 +-
 net/ipv6/ip6_output.c                              |   2 +-
 net/ipv6/route.c                                   |   8 +-
 net/rds/tcp_listen.c                               |   2 +-
 net/sched/sch_api.c                                |   3 +-
 net/wireless/nl80211.c                             |  10 +-
 scripts/checkpatch.pl                              |   6 +-
 sound/x86/intel_hdmi_audio.c                       |   5 +
 tools/lib/lockdep/uinclude/linux/lockdep.h         |   2 +-
 tools/testing/selftests/bpf/test_verifier.c        |  66 +++++++
 tools/testing/selftests/capabilities/test_execve.c |   7 +-
 99 files changed, 892 insertions(+), 377 deletions(-)