[PATCH 3.18 00/64] 3.18.88-stable review

[Greg Kroah-Hartman <gregkh@linuxfoundation.org>]

This is the start of the stable review cycle for the 3.18.88 release.
There are 64 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sun Dec 17 09:21:53 UTC 2017.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	kernel.org/pub/linux/kernel/v3.x/stable-review/patch-3.18.88-rc1.gz
or in the git tree and branch at:
  git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-3.18.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Linux 3.18.88-rc1

Vincent Pelletier <plr.vincent@gmail.com>
    usb: gadget: ffs: Forbid usb_ep_alloc_request from sleeping

Marc Zyngier <marc.zyngier@arm.com>
    arm: KVM: Fix VTTBR_BADDR_MASK BUG_ON off-by-one

Paul Moore <paul@paul-moore.com>
    audit: ensure that 'audit=1' actually enables audit for PID 1

David Howells <dhowells@redhat.com>
    afs: Connect up the CB.ProbeUuid

Majd Dibbiny <majd@mellanox.com>
    IB/mlx5: Assign send CQ and recv CQ of UMR QP

Mark Bloch <markb@mellanox.com>
    IB/mlx4: Increase maximal message size under UD QP

Herbert Xu <herbert@gondor.apana.org.au>
    xfrm: Copy policy family in clone_policy

Arvind Yadav <arvind.yadav.cs@gmail.com>
    atm: horizon: Fix irq release error

Xin Long <lucien.xin@gmail.com>
    sctp: use the right sk after waking up from wait_buf sleep

Xin Long <lucien.xin@gmail.com>
    sctp: do not free asoc when it is already dead in sctp_sendmsg

Pavel Tatashin <pasha.tatashin@oracle.com>
    sparc64/mm: set fields in deferred pages

Chuck Lever <chuck.lever@oracle.com>
    sunrpc: Fix rpc_task_begin trace point

Trond Myklebust <trond.myklebust@primarydata.com>
    NFS: Fix a typo in nfs_rename()

Randy Dunlap <rdunlap@infradead.org>
    dynamic-debug-howto: fix optional/omitted ending line number to be LARGE instead of 0

Stephen Bates <sbates@raithlin.com>
    lib/genalloc.c: make the avail variable an atomic_long_t

Xin Long <lucien.xin@gmail.com>
    route: update fnhe_expires for redirect when the fnhe exists

Xin Long <lucien.xin@gmail.com>
    route: also update fnhe_genid when updating a route cache

Jérémy Lefaure <jeremy.lefaure@lse.epita.fr>
    EDAC, i5000, i5400: Fix definition of NRECMEMB register

Jérémy Lefaure <jeremy.lefaure@lse.epita.fr>
    EDAC, i5000, i5400: Fix use of MTR_DRAM_WIDTH macro

Jan Kara <jack@suse.cz>
    axonram: Fix gendisk handling

Chris Brandt <chris.brandt@renesas.com>
    i2c: riic: fix restart condition

Krzysztof Kozlowski <krzk@kernel.org>
    crypto: s5p-sss - Fix completing crypto request in IRQ handler

WANG Cong <xiyou.wangcong@gmail.com>
    ipv6: reorder icmpv6_init() and ip6_mr_init()

Michal Schmidt <mschmidt@redhat.com>
    bnx2x: fix possible overrun of VFPF multicast addresses array

Blomme, Maarten <Maarten.Blomme@flir.com>
    spi_ks8995: fix "BUG: key accdaa28 not in .data!"

Mark Rutland <mark.rutland@arm.com>
    arm: KVM: Survive unknown traps from guests

Wanpeng Li <wanpeng.li@hotmail.com>
    KVM: nVMX: reset nested_run_pending if the vCPU is going to be reset

Franck Demathieu <fdemathieu@gmail.com>
    irqchip/crossbar: Fix incorrect type of register size

James Smart <jsmart2021@gmail.com>
    scsi: lpfc: Fix crash during Hardware error recovery on SLI3 adapters

Tejun Heo <tj@kernel.org>
    workqueue: trigger WARN if queue_delayed_work() is called with NULL @wq

Tejun Heo <tj@kernel.org>
    libata: drop WARN from protocol error in ata_sff_qc_issue()

Christophe JAILLET <christophe.jaillet@wanadoo.fr>
    USB: gadgetfs: Fix a potential memory leak in 'dev_config()'

John Keeping <john@metanate.com>
    usb: gadget: configs: plug memory leak

Sachin Sant <sachinp@linux.vnet.ibm.com>
    selftest/powerpc: Fix false failures for skipped tests

Sasha Levin <alexander.levin@verizon.com>
    Revert "s390/kbuild: enable modversions for symbols exported from asm"

Sasha Levin <alexander.levin@verizon.com>
    Revert "drm/armada: Fix compile fail"

Eric Dumazet <edumazet@google.com>
    net/packet: fix a race in packet_bind() and packet_notifier()

Hangbin Liu <liuhangbin@gmail.com>
    sit: update frag_off info

Håkon Bugge <Haakon.Bugge@oracle.com>
    rds: Fix NULL pointer dereference in __rds_rdma_map

Dave Martin <Dave.Martin@arm.com>
    arm64: fpsimd: Prevent registers leaking from dead tasks

Andrew Honig <ahonig@google.com>
    KVM: VMX: remove I/O port 0x80 bypass on Intel hosts

Kristina Martsenko <kristina.martsenko@arm.com>
    arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one

Laurent Caumont <lcaumont2@gmail.com>
    media: dvb: i2c transfers over usb cannot be done from stack

Daniel Thompson <daniel.thompson@linaro.org>
    kdb: Fix handling of kallsyms_symbol_next() return value

Robin Murphy <robin.murphy@arm.com>
    iommu/vt-d: Fix scatterlist offset handling

Jaejoong Kim <climbbb.kim@gmail.com>
    ALSA: usb-audio: Add check return value for usb_string()

Jaejoong Kim <climbbb.kim@gmail.com>
    ALSA: usb-audio: Fix out-of-bound error

Takashi Iwai <tiwai@suse.de>
    ALSA: seq: Remove spurious WARN_ON() at timer check

Robb Glasser <rglasser@google.com>
    ALSA: pcm: prevent UAF in snd_pcm_info

Rafael J. Wysocki <rafael.j.wysocki@intel.com>
    x86/PCI: Make broadcom_postcore_init() check acpi_disabled

Eric Biggers <ebiggers@google.com>
    X.509: reject invalid BIT STRING for subjectPublicKey

Eric Biggers <ebiggers@google.com>
    KEYS: add missing permission check for request_key() destination

Eric Biggers <ebiggers@google.com>
    ASN.1: check for error from ASN1_OP_END__ACT actions

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    efi: Move some sysfs files to be read-only by root

William Breathitt Gray <vilhelm.gray@gmail.com>
    isa: Prevent NULL dereference in isa_bus driver callbacks

Paul Meyer <Paul.Meyer@microsoft.com>
    hv: kvp: Avoid reading past allocated blocks from KVP file

weiping zhang <zwp10758@gmail.com>
    virtio: release virtio index when fail to device_register

Martin Kelly <mkelly@xevo.com>
    can: usb_8dev: cancel urb on -EPIPE and -EPROTO

Martin Kelly <mkelly@xevo.com>
    can: esd_usb2: cancel urb on -EPIPE and -EPROTO

Martin Kelly <mkelly@xevo.com>
    can: ems_usb: cancel urb on -EPIPE and -EPROTO

Martin Kelly <mkelly@xevo.com>
    can: kvaser_usb: cancel urb on -EPIPE and -EPROTO

Jimmy Assarsson <jimmyassarsson@gmail.com>
    can: kvaser_usb: ratelimit errors if incomplete messages are received

Jimmy Assarsson <jimmyassarsson@gmail.com>
    can: kvaser_usb: Fix comparison bug in kvaser_usb_read_bulk_callback()

Jimmy Assarsson <jimmyassarsson@gmail.com>
    can: kvaser_usb: free buf in error paths


-------------

Diffstat:

 Makefile                                         |  4 +-
 arch/arm/include/asm/kvm_arm.h                   |  4 +-
 arch/arm/kvm/handle_exit.c                       | 19 ++++---
 arch/arm64/include/asm/kvm_arm.h                 |  3 +-
 arch/arm64/kernel/process.c                      |  9 +++
 arch/powerpc/sysdev/axonram.c                    |  5 +-
 arch/s390/include/asm/asm-prototypes.h           |  8 ---
 arch/sparc/mm/init_64.c                          |  9 ++-
 arch/x86/kvm/vmx.c                               |  9 +--
 arch/x86/pci/broadcom_bus.c                      |  2 +-
 crypto/asymmetric_keys/x509_cert_parser.c        |  2 +
 drivers/ata/libata-sff.c                         |  1 -
 drivers/atm/horizon.c                            |  2 +-
 drivers/base/isa.c                               | 10 ++--
 drivers/crypto/s5p-sss.c                         |  5 +-
 drivers/edac/i5000_edac.c                        |  8 +--
 drivers/edac/i5400_edac.c                        |  9 +--
 drivers/firmware/efi/efi.c                       |  3 +-
 drivers/firmware/efi/runtime-map.c               | 10 ++--
 drivers/gpu/drm/armada/Makefile                  |  2 -
 drivers/i2c/busses/i2c-riic.c                    |  6 +-
 drivers/infiniband/hw/mlx4/qp.c                  |  2 +-
 drivers/infiniband/hw/mlx5/main.c                |  2 +
 drivers/iommu/intel-iommu.c                      |  8 ++-
 drivers/irqchip/irq-crossbar.c                   |  8 +--
 drivers/media/usb/dvb-usb/dibusb-common.c        | 16 +++++-
 drivers/net/can/usb/ems_usb.c                    |  2 +
 drivers/net/can/usb/esd_usb2.c                   |  2 +
 drivers/net/can/usb/kvaser_usb.c                 | 13 +++--
 drivers/net/can/usb/usb_8dev.c                   |  2 +
 drivers/net/ethernet/broadcom/bnx2x/bnx2x_vfpf.c | 23 ++++----
 drivers/net/phy/spi_ks8995.c                     |  1 +
 drivers/scsi/lpfc/lpfc_els.c                     | 14 +++--
 drivers/usb/gadget/configfs.c                    |  1 +
 drivers/usb/gadget/function/f_fs.c               |  2 +-
 drivers/usb/gadget/legacy/inode.c                |  4 +-
 drivers/virtio/virtio.c                          |  2 +
 fs/afs/cmservice.c                               |  3 +
 fs/nfs/dir.c                                     |  2 +-
 include/linux/genalloc.h                         |  3 +-
 include/linux/sysfs.h                            |  6 ++
 kernel/audit.c                                   | 10 ++--
 kernel/debug/kdb/kdb_io.c                        |  2 +-
 kernel/workqueue.c                               |  1 +
 lib/asn1_decoder.c                               |  2 +
 lib/dynamic_debug.c                              |  4 ++
 lib/genalloc.c                                   | 10 ++--
 net/ipv4/route.c                                 | 14 +++--
 net/ipv6/af_inet6.c                              | 10 ++--
 net/ipv6/sit.c                                   |  1 +
 net/packet/af_packet.c                           |  5 ++
 net/rds/rdma.c                                   |  2 +-
 net/sctp/socket.c                                | 38 ++++++++-----
 net/sunrpc/sched.c                               |  3 +-
 net/xfrm/xfrm_policy.c                           |  1 +
 security/keys/request_key.c                      | 46 +++++++++++++---
 sound/core/pcm.c                                 |  2 +
 sound/core/seq/seq_timer.c                       |  2 +-
 sound/usb/mixer.c                                | 13 +++--
 tools/hv/hv_kvp_daemon.c                         | 70 +++++-------------------
 tools/testing/selftests/powerpc/harness.c        |  6 +-
 61 files changed, 288 insertions(+), 200 deletions(-)