[PATCH 4.14 000/124] 4.14.82-stable review

[Greg Kroah-Hartman <gregkh@linuxfoundation.org>]

This is the start of the stable review cycle for the 4.14.82 release.
There are 124 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed Nov 21 16:25:07 UTC 2018.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.14.82-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-4.14.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Linux 4.14.82-rc1

Doug Berger <opendmb@gmail.com>
    gpio: brcmstb: release the bgpio lock during irq handlers

Ming Lei <ming.lei@redhat.com>
    nvme-loop: fix kernel oops in case of unhandled command

Sergey Senozhatsky <sergey.senozhatsky.work@gmail.com>
    printk: Never set console_may_schedule in console_trylock()

Miklos Szeredi <mszeredi@redhat.com>
    ovl: check whiteout in ovl_create_over_whiteout()

Stefano Stabellini <stefanos@xilinx.com>
    CONFIG_XEN_PV breaks xen_create_contiguous_region on ARM

Chris Wilson <chris@chris-wilson.co.uk>
    drm/i915/execlists: Force write serialisation into context image vs execution

Chris Wilson <chris@chris-wilson.co.uk>
    drm/i915: Mark pin flags as u64

Ville Syrjälä <ville.syrjala@linux.intel.com>
    drm/i915: Don't oops during modeset shutdown after lpe audio deinit

Clint Taylor <clinton.a.taylor@intel.com>
    drm/i915/hdmi: Add HDMI 2.0 audio clock recovery N values

Chris Wilson <chris@chris-wilson.co.uk>
    drm/i915: Large page offsets for pread/pwrite

Lyude Paul <lyude@redhat.com>
    drm/i915: Skip vcpi allocation for MSTB ports that are gone

Lyude Paul <lyude@redhat.com>
    drm/i915: Don't unset intel_connector->mst_port

Ville Syrjälä <ville.syrjala@linux.intel.com>
    drm/i915: Restore vblank interrupts earlier

Lyude Paul <lyude@redhat.com>
    drm/atomic_helper: Disallow new modesets on unregistered connectors

Stanislav Lisovskiy <stanislav.lisovskiy@intel.com>
    drm/dp_mst: Check if primary mstb is null

Lyude Paul <lyude@redhat.com>
    drm/nouveau: Check backlight IDs are >= 0, not > 0

Alex Deucher <alexander.deucher@amd.com>
    drm/amdgpu: add missing CHIP_HAINAN in amdgpu_ucode_get_load_type

Marc Zyngier <marc.zyngier@arm.com>
    drm/rockchip: Allow driver to be shutdown on reboot/kexec

Ard Biesheuvel <ard.biesheuvel@linaro.org>
    efi/arm/libstub: Pack FDT after populating it

Vasily Averin <vvs@virtuozzo.com>
    mm/swapfile.c: use kvzalloc for swap_info_struct allocation

Mike Kravetz <mike.kravetz@oracle.com>
    hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444!

Arnd Bergmann <arnd@arndb.de>
    lib/ubsan.c: don't mark __ubsan_handle_builtin_unreachable as noreturn

Eric Biggers <ebiggers@google.com>
    crypto: user - fix leaking uninitialized memory to userspace

Andreas Gruenbacher <agruenba@redhat.com>
    gfs2: Put bitmap buffers in put_super

Guenter Roeck <linux@roeck-us.net>
    configfs: replace strncpy with memcpy

Miklos Szeredi <mszeredi@redhat.com>
    fuse: fix leaked notify reply

Lukas Czerner <lczerner@redhat.com>
    fuse: fix use-after-free in fuse_direct_IO()

Maciej W. Rozycki <macro@linux-mips.org>
    rtc: hctosys: Add missing range error reporting

Scott Mayhew <smayhew@redhat.com>
    nfsd: COPY and CLONE operations require the saved filehandle to be set

Frank Sorenson <sorenson@redhat.com>
    sunrpc: correct the computation for page_ptr when truncating

Christophe Leroy <christophe.leroy@c-s.fr>
    kdb: print real address of pointers instead of hashed addresses

Christophe Leroy <christophe.leroy@c-s.fr>
    kdb: use correct pointer when 'btc' calls 'btt'

Eric W. Biederman <ebiederm@xmission.com>
    mount: Prevent MNT_DETACH from disconnecting locked mounts

Eric W. Biederman <ebiederm@xmission.com>
    mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts

Eric W. Biederman <ebiederm@xmission.com>
    mount: Retest MNT_LOCKED in do_umount

Vasily Averin <vvs@virtuozzo.com>
    ext4: fix buffer leak in __ext4_read_dirblock() on error path

Vasily Averin <vvs@virtuozzo.com>
    ext4: fix buffer leak in ext4_expand_extra_isize_ea() on error path

Vasily Averin <vvs@virtuozzo.com>
    ext4: fix buffer leak in ext4_xattr_move_to_block() on error path

Vasily Averin <vvs@virtuozzo.com>
    ext4: release bs.bh before re-using in ext4_xattr_block_find()

Vasily Averin <vvs@virtuozzo.com>
    ext4: fix buffer leak in ext4_xattr_get_block() on error path

Vasily Averin <vvs@virtuozzo.com>
    ext4: fix possible leak of s_journal_flag_rwsem in error path

Theodore Ts'o <tytso@mit.edu>
    ext4: fix possible leak of sbi->s_group_desc_leak in error path

Theodore Ts'o <tytso@mit.edu>
    ext4: avoid possible double brelse() in add_new_gdb() on error path

Vasily Averin <vvs@virtuozzo.com>
    ext4: fix missing cleanup if ext4_alloc_flex_bg_array() fails while resizing

Vasily Averin <vvs@virtuozzo.com>
    ext4: avoid buffer leak in ext4_orphan_add() after prior errors

Vasily Averin <vvs@virtuozzo.com>
    ext4: avoid buffer leak on shutdown in ext4_mark_iloc_dirty()

Vasily Averin <vvs@virtuozzo.com>
    ext4: fix possible inode leak in the retry loop of ext4_resize_fs()

Vasily Averin <vvs@virtuozzo.com>
    ext4: missing !bh check in ext4_xattr_inode_write()

Vasily Averin <vvs@virtuozzo.com>
    ext4: avoid potential extra brelse in setup_new_flex_group_blocks()

Vasily Averin <vvs@virtuozzo.com>
    ext4: add missing brelse() add_new_gdb_meta_bg()'s error path

Vasily Averin <vvs@virtuozzo.com>
    ext4: add missing brelse() in set_flexbg_block_bitmap()'s error path

Vasily Averin <vvs@virtuozzo.com>
    ext4: add missing brelse() update_backups()'s error path

Michael Kelley <mikelley@microsoft.com>
    clockevents/drivers/i8253: Add support for PIT shutdown quirk

Filipe Manana <fdmanana@suse.com>
    Btrfs: fix data corruption due to cloning of eof block

Filipe Manana <fdmanana@suse.com>
    Btrfs: fix infinite loop on inode eviction after deduplication of eof block

Robbie Ko <robbieko@synology.com>
    Btrfs: fix cur_offset in the error case for nocow

Lu Fengqi <lufq.fnst@cn.fujitsu.com>
    btrfs: fix pinned underflow after transaction aborted

Mathieu Malaterre <malat@debian.org>
    watchdog/core: Add missing prototypes for weak functions

H. Peter Anvin (Intel) <hpa@zytor.com>
    arch/alpha, termios: implement BOTHER, IBSHIFT and termios2

H. Peter Anvin <hpa@zytor.com>
    termios, tty/tty_baudrate.c: fix buffer overrun

Michael Kelley <mikelley@microsoft.com>
    x86/hyper-v: Enable PIT shutdown quirk

Steven Rostedt (VMware) <rostedt@goodmis.org>
    x86/cpu/vmware: Do not trace vmware_sched_clock()

John Garry <john.garry@huawei.com>
    of, numa: Validate some distance map rules

Arnd Bergmann <arnd@arndb.de>
    mtd: docg3: don't set conflicting BCH_CONST_PARAMS option

Ard Biesheuvel <ard.biesheuvel@linaro.org>
    ARM: 8809/1: proc-v7: fix Thumb annotation of cpu_v7_hvc_switch_mm

Vasily Khoruzhick <vasilykh@arista.com>
    netfilter: conntrack: fix calculation of next bucket number in early_drop

Andrea Arcangeli <aarcange@redhat.com>
    mm: thp: relax __GFP_THISNODE for MADV_HUGEPAGE mappings

Wengang Wang <wen.gang.wang@oracle.com>
    ocfs2: free up write context when direct IO failed

Changwei Ge <ge.changwei@h3c.com>
    ocfs2: fix a misuse a of brelse after failing ocfs2_check_dir_entry

Marc Zyngier <marc.zyngier@arm.com>
    soc: ti: QMSS: Fix usage of irq_set_affinity_hint

Ming Lei <ming.lei@redhat.com>
    SCSI: fix queue cleanup race before queue initialization is done

Quinn Tran <quinn.tran@cavium.com>
    scsi: qla2xxx: Initialize port speed to avoid setting lower speed

Greg Edwards <gedwards@ddn.com>
    vhost/scsi: truncate T10 PI iov_iter to prot_bytes

Gustavo A. R. Silva <gustavo@embeddedor.com>
    reset: hisilicon: fix potential NULL pointer dereference

Mikulas Patocka <mpatocka@redhat.com>
    mach64: fix image corruption due to reading accelerator registers

Mikulas Patocka <mpatocka@redhat.com>
    mach64: fix display corruption on big endian machines

Allen Wild <allenwild93@gmail.com>
    thermal: enable broadcom menu for arm64 bcm2835

Yan, Zheng <zyan@redhat.com>
    Revert "ceph: fix dentry leak in splice_dentry()"

Ilya Dryomov <idryomov@gmail.com>
    libceph: bump CEPH_MSG_MAX_DATA_LEN

Lubomir Rintel <lkundrak@v3.sk>
    media: ov7670: make "xclk" clock optional

Chris Packham <chris.packham@alliedtelesis.co.nz>
    clk: mvebu: use correct bit for 98DX3236 NAND

Enric Balletbo i Serra <enric.balletbo@collabora.com>
    clk: rockchip: Fix static checker warning in rockchip_ddrclk_get_parent call

Ronald Wahl <rwahl@gmx.de>
    clk: at91: Fix division by zero in PLL recalc_rate()

Krzysztof Kozlowski <krzk@kernel.org>
    clk: s2mps11: Fix matching when built as module and DT node contains compatible

Richard Weinberger <richard@nod.at>
    um: Drop own definition of PTRACE_SYSEMU/_SINGLESTEP

Max Filippov <jcmvbkbc@gmail.com>
    xtensa: fix boot parameters address translation

Max Filippov <jcmvbkbc@gmail.com>
    xtensa: make sure bFLT stack is 16 byte aligned

Max Filippov <jcmvbkbc@gmail.com>
    xtensa: add NOTES section to the linker script

Huacai Chen <chenhc@lemote.com>
    MIPS: Loongson-3: Fix BRIDGE irq delivery problem

Huacai Chen <chenhc@lemote.com>
    MIPS: Loongson-3: Fix CPU UART irq delivery problem

Amir Goldstein <amir73il@gmail.com>
    ovl: fix recursive oi->lock in ovl_link()

Miklos Szeredi <mszeredi@redhat.com>
    fuse: set FR_SENT while locked

Miklos Szeredi <mszeredi@redhat.com>
    fuse: fix blocked_waitq wakeup

Kirill Tkhai <ktkhai@virtuozzo.com>
    fuse: Fix use-after-free in fuse_dev_do_write()

Kirill Tkhai <ktkhai@virtuozzo.com>
    fuse: Fix use-after-free in fuse_dev_do_read()

Quinn Tran <quinn.tran@cavium.com>
    scsi: qla2xxx: Fix re-using LoopID when handle is in use

Quinn Tran <quinn.tran@cavium.com>
    scsi: qla2xxx: shutdown chip if reset fail

Quinn Tran <quinn.tran@cavium.com>
    scsi: qla2xxx: Remove stale debug trace message from tcm_qla2xxx

Quinn Tran <quinn.tran@cavium.com>
    scsi: qla2xxx: Fix process response queue for ISP26XX and above

Himanshu Madhani <himanshu.madhani@cavium.com>
    scsi: qla2xxx: Fix incorrect port speed being set for FC adapters

Amir Goldstein <amir73il@gmail.com>
    ovl: fix error handling in ovl_verify_set_fh()

Young_X <YangX92@hotmail.com>
    cdrom: fix improper type cast, which can leat to information leak.

Dominique Martinet <dominique.martinet@cea.fr>
    9p: clear dangling pointers in p9stat_free

Dominique Martinet <dominique.martinet@cea.fr>
    9p locks: fix glock.client_id leak in do_lock

Alexandru Ardelean <alexandru.ardelean@analog.com>
    staging:iio:ad7606: fix voltage scales

Breno Leitao <leitao@debian.org>
    powerpc/selftests: Wait all threads to join

Marco Felsch <m.felsch@pengutronix.de>
    media: tvp5150: fix width alignment during set_selection()

Phil Elwell <phil@raspberrypi.org>
    sc16is7xx: Fix for multi-channel stall

Huacai Chen <chenhc@lemote.com>
    MIPS/PCI: Call pcie_bus_configure_settings() to set MPS/MRRS

Rashmica Gupta <rashmica.g@gmail.com>
    powerpc/memtrace: Remove memory in chunks

Joel Stanley <joel@jms.id.au>
    powerpc/boot: Ensure _zimage_start is a weak symbol

Dengcheng Zhu <dzhu@wavecomp.com>
    MIPS: kexec: Mark CPU offline before disabling local IRQ

Lucas Stach <l.stach@pengutronix.de>
    media: coda: don't overwrite h.264 profile_idc on decoder instance

Nicholas Mc Guire <hofrat@osadl.org>
    media: pci: cx23885: handle adding to list failure

John Garry <john.garry@huawei.com>
    drm/hisilicon: hibmc: Do not carry error code in HiBMC framebuffer pointer

Tomi Valkeinen <tomi.valkeinen@ti.com>
    drm/omap: fix memory barrier bug in DMM driver

Christophe Leroy <christophe.leroy@c-s.fr>
    powerpc/mm: Don't report hugepage tables as memory leaks when using kmemleak

Daniel Axtens <dja@axtens.net>
    powerpc/nohash: fix undefined behaviour when testing page size support

Fabio Estevam <fabio.estevam@nxp.com>
    ARM: imx_v6_v7_defconfig: Select CONFIG_TMPFS_POSIX_ACL

Miles Chen <miles.chen@mediatek.com>
    tty: check name length in tty_find_polling_driver()

Sam Bobroff <sbobroff@linux.ibm.com>
    powerpc/eeh: Fix possible null deref in eeh_dump_dev_log()

Michael Ellerman <mpe@ellerman.id.au>
    powerpc/mm: Fix page table dump to work on Radix

Nicholas Piggin <npiggin@gmail.com>
    powerpc/64/module: REL32 relocation range check

Christophe Leroy <christophe.leroy@c-s.fr>
    powerpc/traps: restore recoverability of machine_check interrupts


-------------

Diffstat:

 Makefile                                          |  4 +-
 arch/alpha/include/asm/termios.h                  |  8 +++-
 arch/alpha/include/uapi/asm/ioctls.h              |  5 ++
 arch/alpha/include/uapi/asm/termbits.h            | 17 +++++++
 arch/arm/configs/imx_v6_v7_defconfig              |  1 +
 arch/arm/mm/proc-v7.S                             |  2 +-
 arch/mips/include/asm/mach-loongson64/irq.h       |  2 +-
 arch/mips/kernel/crash.c                          |  3 ++
 arch/mips/kernel/machine_kexec.c                  |  3 ++
 arch/mips/loongson64/loongson-3/irq.c             | 56 +++--------------------
 arch/mips/pci/pci-legacy.c                        |  4 ++
 arch/powerpc/boot/crt0.S                          |  4 +-
 arch/powerpc/kernel/eeh.c                         |  5 ++
 arch/powerpc/kernel/module_64.c                   |  9 +++-
 arch/powerpc/kernel/traps.c                       |  9 +++-
 arch/powerpc/mm/dump_linuxpagetables.c            | 12 +++--
 arch/powerpc/mm/hugetlbpage.c                     |  3 ++
 arch/powerpc/mm/tlb_nohash.c                      |  3 ++
 arch/powerpc/platforms/powernv/memtrace.c         | 21 +++++++--
 arch/x86/kernel/cpu/mshyperv.c                    | 11 +++++
 arch/x86/kernel/cpu/vmware.c                      |  2 +-
 arch/x86/um/shared/sysdep/ptrace_32.h             | 10 ----
 arch/xtensa/boot/Makefile                         |  2 +-
 arch/xtensa/include/asm/processor.h               |  6 ++-
 arch/xtensa/kernel/head.S                         |  7 ++-
 arch/xtensa/kernel/vmlinux.lds.S                  |  1 +
 block/blk-core.c                                  |  5 +-
 crypto/crypto_user.c                              | 18 ++++----
 drivers/cdrom/cdrom.c                             |  2 +-
 drivers/clk/at91/clk-pll.c                        |  3 ++
 drivers/clk/clk-s2mps11.c                         | 30 ++++++++++++
 drivers/clk/hisilicon/reset.c                     |  5 +-
 drivers/clk/mvebu/clk-corediv.c                   |  2 +-
 drivers/clk/rockchip/clk-ddr.c                    |  4 --
 drivers/clocksource/i8253.c                       | 14 +++++-
 drivers/firmware/efi/libstub/fdt.c                |  4 ++
 drivers/gpio/gpio-brcmstb.c                       | 21 +++++++--
 drivers/gpu/drm/amd/amdgpu/amdgpu_ucode.c         |  1 +
 drivers/gpu/drm/drm_atomic_helper.c               | 21 ++++++++-
 drivers/gpu/drm/drm_dp_mst_topology.c             |  3 ++
 drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_fbdev.c |  1 +
 drivers/gpu/drm/i915/i915_gem.c                   | 12 +----
 drivers/gpu/drm/i915/i915_gem_gtt.h               | 28 ++++++------
 drivers/gpu/drm/i915/intel_audio.c                | 17 +++++++
 drivers/gpu/drm/i915/intel_display.c              | 23 ++++++----
 drivers/gpu/drm/i915/intel_dp_mst.c               | 41 +++++++++--------
 drivers/gpu/drm/i915/intel_lpe_audio.c            |  4 +-
 drivers/gpu/drm/i915/intel_lrc.c                  | 14 +++++-
 drivers/gpu/drm/nouveau/nouveau_backlight.c       |  4 +-
 drivers/gpu/drm/omapdrm/omap_dmm_tiler.c          | 11 +++++
 drivers/gpu/drm/rockchip/rockchip_drm_drv.c       |  6 +++
 drivers/media/i2c/ov7670.c                        | 30 +++++++-----
 drivers/media/i2c/tvp5150.c                       | 14 ++++--
 drivers/media/pci/cx23885/altera-ci.c             | 10 ++++
 drivers/media/platform/coda/coda-common.c         |  3 +-
 drivers/mtd/devices/Kconfig                       |  2 +-
 drivers/nvme/target/loop.c                        |  9 +---
 drivers/of/of_numa.c                              |  9 +++-
 drivers/rtc/hctosys.c                             |  4 +-
 drivers/scsi/qla2xxx/qla_init.c                   | 23 +++-------
 drivers/scsi/qla2xxx/qla_iocb.c                   | 17 -------
 drivers/scsi/qla2xxx/qla_mbx.c                    |  5 +-
 drivers/scsi/qla2xxx/qla_target.c                 |  3 +-
 drivers/scsi/qla2xxx/tcm_qla2xxx.c                |  4 --
 drivers/scsi/scsi_lib.c                           |  8 ++++
 drivers/soc/ti/knav_qmss.h                        |  4 +-
 drivers/soc/ti/knav_qmss_acc.c                    | 10 ++--
 drivers/soc/ti/knav_qmss_queue.c                  | 22 ++++++---
 drivers/staging/iio/adc/ad7606.c                  |  7 ++-
 drivers/thermal/Kconfig                           |  2 +-
 drivers/tty/serial/sc16is7xx.c                    | 19 +++++---
 drivers/tty/tty_baudrate.c                        |  4 +-
 drivers/tty/tty_io.c                              |  2 +-
 drivers/vhost/scsi.c                              |  4 +-
 drivers/video/fbdev/aty/mach64_accel.c            | 28 +++++-------
 fs/9p/vfs_file.c                                  | 16 ++++++-
 fs/btrfs/disk-io.c                                | 12 ++++-
 fs/btrfs/inode.c                                  |  5 +-
 fs/btrfs/ioctl.c                                  | 14 +++++-
 fs/ceph/inode.c                                   |  8 +++-
 fs/configfs/symlink.c                             |  2 +-
 fs/ext4/inode.c                                   |  5 +-
 fs/ext4/namei.c                                   |  5 +-
 fs/ext4/resize.c                                  | 28 +++++++-----
 fs/ext4/super.c                                   | 17 +++----
 fs/ext4/xattr.c                                   | 21 +++++++--
 fs/fuse/dev.c                                     | 29 +++++++++---
 fs/fuse/file.c                                    |  4 +-
 fs/gfs2/rgrp.c                                    |  3 +-
 fs/namespace.c                                    | 22 +++++++--
 fs/nfsd/nfs4proc.c                                |  3 ++
 fs/ocfs2/aops.c                                   | 12 ++++-
 fs/ocfs2/cluster/masklog.h                        |  9 ++++
 fs/ocfs2/dir.c                                    |  3 +-
 fs/overlayfs/dir.c                                |  9 ++++
 fs/overlayfs/namei.c                              |  4 +-
 include/linux/ceph/libceph.h                      |  8 +++-
 include/linux/i8253.h                             |  1 +
 include/linux/nmi.h                               |  2 +
 include/xen/xen-ops.h                             |  2 +-
 kernel/debug/kdb/kdb_bt.c                         |  4 +-
 kernel/debug/kdb/kdb_main.c                       | 14 +++---
 kernel/debug/kdb/kdb_support.c                    | 12 ++---
 kernel/printk/printk.c                            | 22 ++++-----
 lib/ubsan.c                                       |  3 +-
 mm/hugetlb.c                                      | 23 ++++++++--
 mm/mempolicy.c                                    | 32 ++++++++++++-
 mm/swapfile.c                                     |  6 +--
 net/9p/protocol.c                                 |  5 ++
 net/netfilter/nf_conntrack_core.c                 | 13 ++++--
 net/sunrpc/xdr.c                                  |  5 +-
 tools/testing/selftests/powerpc/tm/tm-tmspr.c     | 27 +++++++----
 112 files changed, 757 insertions(+), 400 deletions(-)