This is the start of the stable review cycle for the 4.18.7 release. There are 145 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sun Sep 9 21:08:26 UTC 2018. Anything received after that time might be too late.

The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.18.7-rc1.... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.18.y and the diffstat can be found below.

thanks,

greg k-h

------------- Pseudo-Shortlog of commits:

Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 4.18.7-rc1

James Morse james.morse@arm.com arm64: mm: always enable CONFIG_HOLES_IN_ZONE

Rafael J. Wysocki rafael.j.wysocki@intel.com cpuidle: menu: Retain tick when shallow state is selected

Jan Kara jack@suse.cz udf: Fix mounting of Win7 created UDF filesystems

Jeremy Cline jcline@redhat.com fs/quota: Fix spectre gadget in do_quotactl

Horia Geantă horia.geanta@nxp.com crypto: caam/qi - fix error path in xts setkey

Horia Geantă horia.geanta@nxp.com crypto: caam/jr - fix descriptor DMA unmapping

Horia Geantă horia.geanta@nxp.com crypto: caam - fix DMA mapping direction for RSA forms 2 & 3

Ard Biesheuvel ard.biesheuvel@linaro.org crypto: arm64/sm4-ce - check for the right CPU feature bit

Dave Watson davejwatson@fb.com crypto: aesni - Use unaligned loads from gcm_context_data

Ondrej Mosnacek omosnace@redhat.com crypto: vmx - Fix sleep-in-atomic bugs

Adrian Hunter adrian.hunter@intel.com perf auxtrace: Fix queue resize

Dan Williams dan.j.williams@intel.com mm, dev_pagemap: Do not clear ->mapping on final put

Eddie.Horng eddie.horng@mediatek.com cap_inode_getsecurity: use d_find_any_alias() instead of d_find_alias()

Masahiro Yamada yamada.masahiro@socionext.com kconfig: fix "Can't open ..." in parallel build

Shan Hai shan.hai@oracle.com bcache: release dc->writeback_lock properly in bch_writeback_thread()

Vishal Verma vishal.l.verma@intel.com libnvdimm: fix ars_status output length calculation

Keith Busch keith.busch@intel.com libnvdimm: Use max contiguous area for namespace size

Christian Brauner christian@brauner.io getxattr: use correct xattr length

Mikulas Patocka mpatocka@redhat.com udlfb: set line_length in dlfb_ops_set_par

Mikulas Patocka mpatocka@redhat.com udlfb: handle allocation failure

Mikulas Patocka mpatocka@redhat.com udlfb: make a local copy of fb_ops

Mikulas Patocka mpatocka@redhat.com udlfb: set optimal write delay

Mikulas Patocka mpatocka@redhat.com udlfb: don't switch if we are switching to the same videomode

Mikulas Patocka mpatocka@redhat.com udlfb: fix display corruption of the last line

Mikulas Patocka mpatocka@redhat.com udlfb: fix semaphore value leak

Mikulas Patocka mpatocka@redhat.com fb: fix lost console when the user unplugs a USB adapter

Vignesh R vigneshr@ti.com pwm: tiehrpwm: Fix disabling of output of PWMs

Vignesh R vigneshr@ti.com pwm: tiehrpwm: Don't use emulation mode bits to control PWM output

Richard Weinberger richard@nod.at ubifs: Fix synced_i_size calculation for xattr inodes

Richard Weinberger richard@nod.at ubifs: Fix directory size calculation for symlinks

Richard Weinberger richard@nod.at ubifs: xattr: Don't operate on deleted inodes

Richard Weinberger richard@nod.at ubifs: Check data node size before truncate

Richard Weinberger richard@nod.at Revert "UBIFS: Fix potential integer overflow in allocation"

Richard Weinberger richard@nod.at ubifs: Fix memory leak in lprobs self-check

Jann Horn jannh@google.com userns: move user access out of the mutex

Jann Horn jannh@google.com sys: don't hold uts_sem while accessing userspace memory

Jacob Pan jacob.jun.pan@linux.intel.com iommu/vt-d: Fix dev iotlb pfsid use

Jacob Pan jacob.jun.pan@linux.intel.com iommu/vt-d: Add definitions for PFSID

Dmitry Osipenko digetx@gmail.com iommu/ipmmu-vmsa: Don't register as BUS IOMMU if machine doesn't have IPMMU-VMSA

Peter Zijlstra peterz@infradead.org mm/tlb: Remove tlb_remove_table() non-concurrent condition

David Rivshin DRivshin@allworx.com pwm: omap-dmtimer: Return -EPROBE_DEFER if no dmtimer platform data

Roger Quadros rogerq@ti.com ARM: dts: am57xx-idk: Enable dual role for USB2 port

Jon Hunter jonathanh@nvidia.com ARM: tegra: Fix Tegra30 Cardhu PCA954x reset

Trond Myklebust trondmy@gmail.com NFSv4: Fix a sleep in atomic context in nfs4_callback_sequence()

Trond Myklebust trondmy@gmail.com NFSv4: Fix locking in pnfs_generic_recover_commit_reqs

Bill Baker Bill.Baker@Oracle.com NFSv4 client live hangs after live data migration recovery

Amir Goldstein amir73il@gmail.com nfsd: fix leaked file lock with nfs exported overlayfs

Dan Carpenter dan.carpenter@oracle.com pnfs/blocklayout: off by one in bl_map_stripe()

Maciej S. Szmigiero mail@maciej.szmigiero.name block, bfq: return nbytes and not zero from struct cftype .write() method

Max Filippov jcmvbkbc@gmail.com xtensa: increase ranges in ___invalidate_{i,d}cache_all

Max Filippov jcmvbkbc@gmail.com xtensa: limit offsets in __loop_cache_{all,page}

Paul Mackerras paulus@ozlabs.org KVM: PPC: Book3S: Fix guest DMA when guest partially backed by THP pages

Paolo Bonzini pbonzini@redhat.com KVM: VMX: fixes for vmentry_l1d_flush module parameter

Hans de Goede hdegoede@redhat.com i2c: designware: Re-init controllers with pm_disabled set on resume

Lihua Yao ylhuajnu@163.com ALSA: ac97: fix unbalanced pm_runtime_enable

Lihua Yao ylhuajnu@163.com ALSA: ac97: fix check of pm_runtime_get_sync failure

Lihua Yao ylhuajnu@163.com ALSA: ac97: fix device initialization in the compat layer

zhangyi (F) yi.zhang@huawei.com PM / sleep: wakeup: Fix build error caused by missing SRCU support

Henry Willard henry.willard@oracle.com cpufreq: governor: Avoid accessing invalid governor_data

Rafael J. Wysocki rafael.j.wysocki@intel.com cpuidle: menu: Handle stopped tick more aggressively

Rafael J. Wysocki rafael.j.wysocki@intel.com sched: idle: Avoid retaining the tick when it has been stopped

Peter Kalauskas peskal@google.com drivers/block/zram/zram_drv.c: fix bug storing backing_dev

Rafael J. Wysocki rafael.j.wysocki@intel.com ACPICA: Clear status of all events when entering sleep states

Erik Schmauss erik.schmauss@intel.com ACPICA: AML Parser: skip opcodes that open a scope upon parse failure

Amir Goldstein amir73il@gmail.com ovl: fix wrong use of impure dir cache in ovl_iterate()

Rafael David Tinoco rafael.tinoco@linaro.org mfd: hi655x: Fix regmap area declared size for hi655x

Steven Rostedt (VMware) rostedt@goodmis.org uprobes: Use synchronize_rcu() not synchronize_sched()

Kamalesh Babulal kamalesh@linux.vnet.ibm.com livepatch: Validate module/old func name length

Steven Rostedt (VMware) rostedt@goodmis.org printk/tracing: Do not trace printk_nmi_enter()

Steven Rostedt (VMware) rostedt@goodmis.org tracing/blktrace: Fix to allow setting same value

Steven Rostedt (VMware) rostedt@goodmis.org tracing: Do not call start/stop() functions when tracing_on does not change

Johan Hovold johan@kernel.org rtc: omap: fix potential crash on power off

Johan Hovold johan@kernel.org rtc: omap: fix resource leak in registration error path

Nadav Amit namit@vmware.com vmw_balloon: fix VMCI use when balloon built into kernel

Nadav Amit namit@vmware.com vmw_balloon: VMCI_DOORBELL_SET does not check status

Nadav Amit namit@vmware.com vmw_balloon: do not use 2MB without batching

Nadav Amit namit@vmware.com vmw_balloon: fix inflation of 64-bit GFNs

Greg Kroah-Hartman gregkh@linuxfoundation.org eventpoll.h: wrap casts in () properly

Chanwoo Choi cw00.choi@samsung.com extcon: Release locking when sending the notification of connector state

Lars-Peter Clausen lars@metafoo.de iio: ad9523: Fix return value for ad952x_store()

Lars-Peter Clausen lars@metafoo.de iio: ad9523: Fix displayed phase

Gustavo A. R. Silva gustavo@embeddedor.com iio: sca3000: Fix missing return in switch

Dexuan Cui decui@microsoft.com Drivers: hv: vmbus: Reset the channel callback in vmbus_onoffer_rescind()

Dexuan Cui decui@microsoft.com Drivers: hv: vmbus: Fix the offer_in_progress in vmbus_process_offer()

Tycho Andersen tycho@tycho.ws uart: fix race between uart_put_char() and uart_shutdown()

Mikulas Patocka mpatocka@redhat.com dm writecache: fix a crash due to reading past end of dirty_bitmap

Mikulas Patocka mpatocka@redhat.com dm crypt: don't decrease device limits

Ilya Dryomov idryomov@gmail.com dm cache metadata: set dirty on all cache blocks after a crash

Mike Snitzer snitzer@redhat.com dm cache metadata: save in-core policy_hint_size to on-disk superblock

Hou Tao houtao1@huawei.com dm thin: stop no_space_timeout worker when switching to write-mode

Mikulas Patocka mpatocka@redhat.com dm integrity: change 'suspending' variable from bool to int

Tomas Bortoli tomasbortoli@gmail.com net/9p/trans_fd.c: fix race-condition by flushing workqueue before the kfree()

Tomas Bortoli tomasbortoli@gmail.com net/9p/client.c: version pointer uninitialized

jiangyiwen jiangyiwen@huawei.com 9p/virtio: fix off-by-one error in sg list bounds check

piaojun piaojun@huawei.com fs/9p/xattr.c: catch the error of p9_client_clunk when setting xattr failed

Tomas Bortoli tomasbortoli@gmail.com 9p: fix multiple NULL-pointer-dereferences

Bart Van Assche bart.vanassche@wdc.com RDMA/rxe: Set wqe->status correctly if an unexpected response is received

Bart Van Assche bart.vanassche@wdc.com ib_srpt: Fix a use-after-free in __srpt_close_all_ch()

Bart Van Assche bart.vanassche@wdc.com ib_srpt: Fix a use-after-free in srpt_close_ch()

Leon Romanovsky leon@kernel.org RDMA/mlx5: Fix shift overflow in mlx5_ib_create_wq

Jason Gunthorpe jgg@ziepe.ca overflow.h: Add arithmetic shift helper

Bart Van Assche bart.vanassche@wdc.com IB/srpt: Support HCAs with more than two ports

Bart Van Assche bart.vanassche@wdc.com IB/srpt: Fix srpt_cm_req_recv() error path (2/2)

Bart Van Assche bart.vanassche@wdc.com IB/srpt: Fix srpt_cm_req_recv() error path (1/2)

Jason Gunthorpe jgg@ziepe.ca IB/mlx5: Fix leaking stack memory to userspace

Parav Pandit parav@mellanox.com IB/mlx5: Honor cnt_set_id_valid flag instead of set_id

Frederic Barrat fbarrat@linux.ibm.com ocxl: Fix page fault handler in case of fault on dying process

Vaibhav Jain vaibhav@linux.ibm.com cxl: Fix wrong comparison in cxl_adapter_context_get()

Benjamin Herrenschmidt benh@kernel.crashing.org powerpc/powernv/pci: Work around races in PCI bridge enabling

Luke Dashjr luke@dashjr.org powerpc64/ftrace: Include ftrace.h needed for enable/disable calls

Christophe Leroy christophe.leroy@c-s.fr powerpc/nohash: fix pte_access_permitted()

Ram Pai linuxram@us.ibm.com powerpc/pkeys: Preallocate execute-only key

Ram Pai linuxram@us.ibm.com powerpc/pkeys: Fix calculation of total pkeys.

Ram Pai linuxram@us.ibm.com powerpc/pkeys: Save the pkey registers before fork

Ram Pai linuxram@us.ibm.com powerpc/pkeys: key allocation/deallocation must not change pkey registers

Ram Pai linuxram@us.ibm.com powerpc/pkeys: Deny read/write/execute by default

Ram Pai linuxram@us.ibm.com powerpc/pkeys: Give all threads control of their key permissions

Mahesh Salgaonkar mahesh@linux.vnet.ibm.com powerpc/pseries: Fix endianness while restoring of r3 in MCE handler.

Nicholas Piggin npiggin@gmail.com powerpc/64s: Fix page table fragment refcount race vs speculative references

Hari Bathini hbathini@linux.ibm.com powerpc/fadump: handle crash memory ranges array index overflow

Yannik Sembritzki yannik@sembritzki.me Fix kexec forbidding kernels signed with keys in the secondary keyring to boot

Yannik Sembritzki yannik@sembritzki.me Replace magic for trusting the secondary keyring with #define

Gustavo A. R. Silva gustavo@embeddedor.com mailbox: xgene-slimpro: Fix potential NULL pointer dereference

Javier Martinez Canillas javierm@redhat.com media: Revert "[media] tvp5150: fix pad format frame height"

Daniel Mack daniel@zonque.org libertas: fix suspend and resume for SDIO connected cards

Michel Dänzer michel.daenzer@amd.com dma-buf: Move BUG_ON from _add_shared_fence to _add_shared_inplace

John Johansen john.johansen@canonical.com apparmor: fix bad debug check in apparmor_secid_to_secctx()

Bart Van Assche bart.vanassche@wdc.com block: Ensure that a request queue is dissociated from the cgroup controller

Bart Van Assche bart.vanassche@wdc.com block: Introduce blk_exit_queue()

Bart Van Assche bart.vanassche@wdc.com blkcg: Introduce blkg_root_lookup()

Ming Lei ming.lei@redhat.com block: really disable runtime-pm for blk-mq

xiao jin jin.xiao@intel.com block: blk_init_allocated_queue() set q->fq as NULL in the fail case

Mikulas Patocka mpatocka@redhat.com block: fix infinite loop if the device loses discard capability

Markus Stockhausen stockhausen@collogia.de readahead: stricter check for bdi io_pages

Sergei Shtylyov sergei.shtylyov@cogentembedded.com mmc: renesas_sdhi_internal_dmac: fix #define RST_RESERVED_BITS

Sergei Shtylyov sergei.shtylyov@cogentembedded.com mmc: renesas_sdhi_internal_dmac: mask DMAC interrupts

Adrian Hunter adrian.hunter@intel.com mmc: block: Fix unsupported parallel dispatch of requests

Janek Kotas jank@cadence.com spi: cadence: Change usleep_range() to udelay(), for atomic context

Krzysztof Kozlowski krzk@kernel.org spi: spi-fsl-dspi: Fix imprecise abort on VF500 during probe

Mika Westerberg mika.westerberg@linux.intel.com spi: pxa2xx: Add support for Intel Ice Lake

Bartosz Golaszewski bgolaszewski@baylibre.com spi: davinci: fix a NULL pointer dereference

Chirantan Ekbote chirantan@chromium.org 9p/net: Fix zero-copy path in the 9p virtio transport

Alexander Aring aring@mojatatu.com net: mac802154: tx: expand tailroom if necessary

Alexander Aring aring@mojatatu.com net: 6lowpan: fix reserved space for single frames

Boqun Feng boqun.feng@gmail.com rcu: Make expedited GPs handle CPU 0 being offline

-------------

Diffstat:

Makefile | 4 +- arch/alpha/kernel/osf_sys.c | 51 +++++---- arch/arm/boot/dts/am571x-idk.dts | 4 - arch/arm/boot/dts/am572x-idk-common.dtsi | 4 - arch/arm/boot/dts/am57xx-idk-common.dtsi | 7 +- arch/arm/boot/dts/tegra30-cardhu.dtsi | 1 + arch/arm64/Kconfig | 1 - arch/arm64/crypto/sm4-ce-glue.c | 2 +- arch/powerpc/include/asm/fadump.h | 3 - arch/powerpc/include/asm/nohash/pgtable.h | 9 +- arch/powerpc/include/asm/pkeys.h | 11 -- arch/powerpc/kernel/fadump.c | 91 +++++++++++++--- arch/powerpc/kernel/process.c | 1 + arch/powerpc/kvm/book3s_hv.c | 1 + arch/powerpc/mm/mmu_context_book3s64.c | 8 +- arch/powerpc/mm/mmu_context_iommu.c | 17 +-- arch/powerpc/mm/pgtable-book3s64.c | 17 +-- arch/powerpc/mm/pkeys.c | 134 ++++++++---------------- arch/powerpc/platforms/powernv/pci-ioda.c | 37 +++++++ arch/powerpc/platforms/pseries/ras.c | 2 +- arch/sparc/kernel/sys_sparc_32.c | 22 ++-- arch/sparc/kernel/sys_sparc_64.c | 20 ++-- arch/x86/crypto/aesni-intel_asm.S | 66 ++++++------ arch/x86/kernel/kexec-bzimage64.c | 2 +- arch/x86/kvm/vmx.c | 26 +++-- arch/xtensa/include/asm/cacheasm.h | 69 +++++++----- block/bfq-cgroup.c | 3 +- block/blk-core.c | 61 ++++++----- block/blk-lib.c | 10 ++ block/blk-sysfs.c | 15 +++ block/blk.h | 1 + certs/system_keyring.c | 3 +- crypto/asymmetric_keys/pkcs7_key_type.c | 2 +- drivers/acpi/acpica/hwsleep.c | 11 +- drivers/acpi/acpica/psloop.c | 17 +-- drivers/block/zram/zram_drv.c | 7 +- drivers/cpufreq/cpufreq_governor.c | 12 ++- drivers/cpuidle/governors/menu.c | 47 ++++++--- drivers/crypto/caam/caamalg_qi.c | 6 +- drivers/crypto/caam/caampkc.c | 20 ++-- drivers/crypto/caam/jr.c | 3 +- drivers/crypto/vmx/aes_cbc.c | 30 +++--- drivers/crypto/vmx/aes_xts.c | 21 ++-- drivers/dma-buf/reservation.c | 6 +- drivers/extcon/extcon.c | 3 +- drivers/hv/channel.c | 40 ++++--- drivers/hv/channel_mgmt.c | 10 +- drivers/i2c/busses/i2c-designware-master.c | 1 - drivers/i2c/busses/i2c-designware-platdrv.c | 7 +- drivers/iio/accel/sca3000.c | 1 + drivers/iio/frequency/ad9523.c | 4 +- drivers/infiniband/hw/mlx5/main.c | 2 +- drivers/infiniband/hw/mlx5/qp.c | 6 +- drivers/infiniband/sw/rxe/rxe_comp.c | 1 + drivers/infiniband/ulp/srpt/ib_srpt.c | 34 ++++-- drivers/infiniband/ulp/srpt/ib_srpt.h | 4 +- drivers/iommu/dmar.c | 6 +- drivers/iommu/intel-iommu.c | 18 +++- drivers/iommu/ipmmu-vmsa.c | 7 ++ drivers/mailbox/mailbox-xgene-slimpro.c | 6 +- drivers/md/bcache/writeback.c | 4 +- drivers/md/dm-cache-metadata.c | 13 ++- drivers/md/dm-crypt.c | 10 +- drivers/md/dm-integrity.c | 6 +- drivers/md/dm-thin.c | 2 + drivers/md/dm-writecache.c | 2 +- drivers/media/i2c/tvp5150.c | 2 +- drivers/mfd/hi655x-pmic.c | 2 +- drivers/misc/cxl/main.c | 2 +- drivers/misc/ocxl/link.c | 24 +++-- drivers/misc/vmw_balloon.c | 67 +++++++----- drivers/mmc/core/queue.c | 12 ++- drivers/mmc/core/queue.h | 1 + drivers/mmc/host/renesas_sdhi_internal_dmac.c | 10 +- drivers/net/wireless/marvell/libertas/dev.h | 1 + drivers/net/wireless/marvell/libertas/if_sdio.c | 30 ++++-- drivers/nvdimm/bus.c | 4 +- drivers/nvdimm/dimm_devs.c | 31 ++++++ drivers/nvdimm/namespace_devs.c | 6 +- drivers/nvdimm/nd-core.h | 8 ++ drivers/nvdimm/region_devs.c | 24 +++++ drivers/pwm/pwm-omap-dmtimer.c | 5 +- drivers/pwm/pwm-tiehrpwm.c | 14 +-- drivers/rtc/rtc-omap.c | 18 ++-- drivers/spi/spi-cadence.c | 2 +- drivers/spi/spi-davinci.c | 2 +- drivers/spi/spi-fsl-dspi.c | 24 ++--- drivers/spi/spi-pxa2xx.c | 4 + drivers/tty/serial/serial_core.c | 17 ++- drivers/video/fbdev/core/fbmem.c | 38 +++++-- drivers/video/fbdev/udlfb.c | 105 ++++++++++--------- fs/9p/xattr.c | 6 +- fs/lockd/clntlock.c | 2 +- fs/lockd/clntproc.c | 2 +- fs/lockd/svclock.c | 16 +-- fs/lockd/svcsubs.c | 4 +- fs/nfs/blocklayout/dev.c | 2 +- fs/nfs/callback_proc.c | 14 ++- fs/nfs/nfs4proc.c | 9 +- fs/nfs/pnfs_nfs.c | 16 ++- fs/nfsd/nfs4state.c | 2 +- fs/overlayfs/readdir.c | 19 +++- fs/quota/quota.c | 2 + fs/ubifs/dir.c | 5 +- fs/ubifs/journal.c | 21 +++- fs/ubifs/lprops.c | 8 +- fs/ubifs/xattr.c | 24 +++++ fs/udf/super.c | 31 +++--- fs/xattr.c | 2 +- include/linux/blk-cgroup.h | 18 ++++ include/linux/hyperv.h | 2 + include/linux/intel-iommu.h | 8 +- include/linux/lockd/lockd.h | 4 +- include/linux/mm_types.h | 5 +- include/linux/overflow.h | 31 ++++++ include/linux/sunrpc/clnt.h | 1 + include/linux/verification.h | 6 ++ include/uapi/linux/eventpoll.h | 8 +- include/video/udlfb.h | 5 +- kernel/livepatch/core.c | 6 ++ kernel/memremap.c | 1 - kernel/power/Kconfig | 1 + kernel/printk/printk_safe.c | 4 +- kernel/rcu/tree_exp.h | 9 +- kernel/sched/idle.c | 2 +- kernel/sys.c | 95 ++++++++--------- kernel/trace/blktrace.c | 4 + kernel/trace/trace.c | 4 +- kernel/trace/trace_uprobe.c | 2 +- kernel/user_namespace.c | 24 ++--- kernel/utsname_sysctl.c | 41 +++++--- mm/hmm.c | 2 + mm/memory.c | 9 -- mm/readahead.c | 12 ++- net/9p/client.c | 2 +- net/9p/trans_fd.c | 7 +- net/9p/trans_rdma.c | 3 + net/9p/trans_virtio.c | 13 ++- net/9p/trans_xen.c | 3 + net/ieee802154/6lowpan/tx.c | 21 +++- net/mac802154/tx.c | 15 ++- net/sunrpc/clnt.c | 28 +++-- scripts/kconfig/Makefile | 5 +- security/apparmor/secid.c | 1 - security/commoncap.c | 2 +- sound/ac97/bus.c | 4 +- sound/ac97/snd_ac97_compat.c | 19 +++- tools/perf/util/auxtrace.c | 3 + 148 files changed, 1374 insertions(+), 766 deletions(-)