[PATCH 3.18 00/92] 3.18.64-stable review - take 2

[Greg Kroah-Hartman]

This is the second start of the stable review cycle for the 3.18.64
release (the first try had too many problems...)

There are 92 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Fri Aug 11 20:21:39 UTC 2017.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	kernel.org/pub/linux/kernel/v3.x/stable-review/patch-3.18.64-rc2.gz
or in the git tree and branch at:
  git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-3.18.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Linux 3.18.64-rc2

zheng li <james.z.li@xxxxxxxxxxxx>
    ipv4: Should use consistent conditional judgement for ip fragment in __ip_append_data and ip_finish_output

Ard Biesheuvel <ard.biesheuvel@xxxxxxxxxx>
    mm: don't dereference struct page fields of invalid pages

Jamie Iles <jamie.iles@xxxxxxxxxx>
    signal: protect SIGNAL_UNKILLABLE from unintentional clearing.

Sudip Mukherjee <sudipm.mukherjee@xxxxxxxxx>
    lib/Kconfig.debug: fix frv build failure

Michal Hocko <mhocko@xxxxxxxx>
    mm, slab: make sure that KMALLOC_MAX_SIZE will fit into MAX_ORDER

Rabin Vincent <rabinv@xxxxxxxx>
    ARM: 8632/1: ftrace: fix syscall name matching

Milan P. Gandhi <mgandhi@xxxxxxxxxx>
    scsi: qla2xxx: Get mutex lock before checking optrom_state

Nicholas Mc Guire <hofrat@xxxxxxxxx>
    x86/boot: Add missing declaration of string functions

Michael Chan <michael.chan@xxxxxxxxxxxx>
    tg3: Fix race condition in tg3_get_stats64().

Sergei Shtylyov <sergei.shtylyov@xxxxxxxxxxxxxxxxxx>
    sh_eth: R8A7740 supports packet shecksumming

Arnd Bergmann <arnd@xxxxxxxx>
    wext: handle NULL extra data in iwe_stream_add_point better

Wei Liu <wei.liu2@xxxxxxxxxx>
    xen-netback: correctly schedule rate-limited queues

Florian Fainelli <f.fainelli@xxxxxxxxx>
    net: phy: Correctly process PHY_HALTED in phy_stop_machine()

Xin Long <lucien.xin@xxxxxxxxx>
    sctp: fix the check for _sctp_walk_params and _sctp_walk_errors

Alexander Potapenko <glider@xxxxxxxxxx>
    sctp: don't dereference ptr before leaving _sctp_walk_{params, errors}()

Xin Long <lucien.xin@xxxxxxxxx>
    dccp: fix a memleak for dccp_feat_init err process

WANG Cong <xiyou.wangcong@xxxxxxxxx>
    packet: fix use-after-free in prb_retire_rx_blk_timer_expired()

Thomas Jarosch <thomas.jarosch@xxxxxxxxxxxxx>
    mcs7780: Fix initialization when CONFIG_VMAP_STACK is enabled

WANG Cong <xiyou.wangcong@xxxxxxxxx>
    rtnetlink: allocate more memory for dev_set_mac_address()

Mahesh Bandewar <maheshb@xxxxxxxxxx>
    ipv4: initialize fib_trie prior to register_netdev_notifier call.

Sabrina Dubroca <sd@xxxxxxxxxxxxxxx>
    ipv6: avoid overflow of offset in ip6_find_1stfragopt

David S. Miller <davem@xxxxxxxxxxxxx>
    net: Zero terminate ifr_name in dev_ifname().

Jin Qian <jinqian@xxxxxxxxxx>
    f2fs: sanity check checkpoint segno and blkoff

Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>
    iscsi-target: Fix delayed logout processing greater than SECONDS_FOR_LOGOUT_COMP

Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>
    iscsi-target: Fix initial login PDU asynchronous socket close OOPs

Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>
    iscsi-target: Fix early sk_data_ready LOGIN_FLAGS_READY race

Jiang Yi <jiangyilism@xxxxxxxxx>
    iscsi-target: Always wait for kthread_should_stop() before kthread exit

Nicholas Bellinger <nab@xxxxxxxxxxxxxxx>
    target: Avoid mappedlun symlink creation during lun shutdown

Prabhakar Lad <prabhakar.csengg@xxxxxxxxx>
    media: platform: davinci: return -EINVAL for VPFE_CMD_S_CCDC_RAW_PARAMS ioctl

Jerry Lee <jerrylee@xxxxxxxx>
    ext4: fix overflow caused by missing cast in ext4_resize_fs()

Jan Kara <jack@xxxxxxx>
    ext4: fix SEEK_HOLE/SEEK_DATA for blocksize < pagesize

Josh Poimboeuf <jpoimboe@xxxxxxxxxx>
    mm/page_alloc: Remove kernel address exposure in free_reserved_area()

Wanpeng Li <wanpeng.li@xxxxxxxxxxx>
    KVM: async_pf: make rcu irq exit if not triggered from idle task

Banajit Goswami <bgoswami@xxxxxxxxxxxxxx>
    ASoC: do not close shared backend dailink

Sergei A. Trusov <sergei.a.trusov@xxxxx>
    ALSA: hda - Fix speaker output from VAIO VPCL14M1R

Tejun Heo <tj@xxxxxxxxxx>
    workqueue: restore WQ_UNBOUND/max_active==1 to be ordered

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
    libata: array underflow in ata_find_dev()

Chris Metcalf <cmetcalf@xxxxxxxxxx>
    tile: use global strscpy() rather than private copy

Chris Metcalf <cmetcalf@xxxxxxxxxx>
    arch/powerpc: provide zero_bytemask() for big-endian

Chris Metcalf <cmetcalf@xxxxxxxxxx>
    Make asm/word-at-a-time.h available on all architectures

Chris Metcalf <cmetcalf@xxxxxxxxxx>
    word-at-a-time.h: support zero_bytemask() on alpha and tile

Chris Metcalf <cmetcalf@xxxxxxxxxx>
    tile: add <asm/word-at-a-time.h> and enable support functions

Steffen Klassert <steffen.klassert@xxxxxxxxxxx>
    xfrm: Don't use sk_family for socket policy lookups

Mike Manning <mmanning@xxxxxxxxxxx>
    vlan: Propagate MAC address to VLANs

Phil Reid <preid@xxxxxxxxxxxxxxxxx>
    spi: dw: Make debugfs name unique between instances

Peter Ujfalusi <peter.ujfalusi@xxxxxx>
    ASoC: tlv320aic3x: Mark the RESET register as volatile

Arnd Bergmann <arnd@xxxxxxxx>
    vfio-pci: use 32-bit comparisons for register address for gcc-4.5

Jordan Crouse <jcrouse@xxxxxxxxxxxxxx>
    drm/msm: Verify that MSM_SUBMIT_BO_FLAGS are set

Jordan Crouse <jcrouse@xxxxxxxxxxxxxx>
    drm/msm: Ensure that the hardware write pointer is valid

Leon Romanovsky <leonro@xxxxxxxxxxxx>
    net/mlx4: Remove BUG_ON from ICM allocation routine

Zheng Li <james.z.li@xxxxxxxxxxxx>
    ipv6: Should use consistent conditional judgement for ip6 fragment between __ip6_append_data and ip6_finish_output

Pali RohÃr <pali.rohar@xxxxxxxxx>
    ARM: dts: n900: Mark eMMC slot with no-sdio and no-sd flags

Chun-Hao Lin <hau@xxxxxxxxxxx>
    r8169: add support for RTL8168 series add-on card.

Thomas Gleixner <tglx@xxxxxxxxxxxxx>
    x86/mce/AMD: Make the init code more robust

Jarkko Sakkinen <jarkko.sakkinen@xxxxxxxxxxxxxxx>
    tpm: fix a kernel memory leak in tpm-sysfs.c

Eric Dumazet <edumazet@xxxxxxxxxx>
    net: skb_needs_check() accepts CHECKSUM_NONE for tx

Kees Cook <keescook@xxxxxxxxxxxx>
    pstore: Use dynamic spinlock initializer

Kees Cook <keescook@xxxxxxxxxxxx>
    pstore: Correctly initialize spinlock and flags

Joel Fernandes <joelaf@xxxxxxxxxx>
    pstore: Allow prz to control need for locking

Andrzej Hajda <a.hajda@xxxxxxxxxxx>
    v4l: s5c73m3: fix negation operator

Al Viro <viro@xxxxxxxxxxxxxxxxxx>
    dentry name snapshots

Valentin Vidic <Valentin.Vidic@xxxxxxxxx>
    ipmi/watchdog: fix watchdog timeout set on reboot

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    net, sched: fix soft lockup in tc_classify

Ben Hutchings <ben.hutchings@xxxxxxxxxxxxxxx>
    sh_eth: Fix ethtool operation crash when net device is down

Daniel Borkmann <dborkman@xxxxxxxxxx>
    net: sctp: fix race for one-to-many sockets in sendmsg's auto associate

Jan Stancek <jstancek@xxxxxxxxxx>
    ipv6: fix possible deadlock in ip6_fl_purge / ip6_fl_gc

Oliver Neukum <oneukum@xxxxxxxx>
    kaweth: fix oops upon failed memory allocation

Oliver Neukum <oneukum@xxxxxxxx>
    kaweth: fix firmware download

Calvin Owens <calvinowens@xxxxxx>
    mpt3sas: Don't overreach ioc->reply_post[] during initialization

Sudeep Holla <sudeep.holla@xxxxxxx>
    mailbox: handle empty message in tx_tick

Sudeep Holla <sudeep.holla@xxxxxxx>
    mailbox: skip complete wait event if timer expired

Sudeep Holla <sudeep.holla@xxxxxxx>
    mailbox: always wait in mbox_send_message for blocking Tx mode

Lior David <qca_liord@xxxxxxxxxxxxxxxx>
    wil6210: fix deadlock when using fw_no_recovery option

Annie Cherkaev <annie.cherk@xxxxxxxxx>
    isdn/i4l: fix buffer overflow

Chris Metcalf <cmetcalf@xxxxxxxxxx>
    strscpy: zero any trailing garbage bytes in the destination

Chris Metcalf <cmetcalf@xxxxxxxxxx>
    string: provide strscpy()

Jia-Ju Bai <baijiaju1990@xxxxxxx>
    isdn: Fix a sleep-in-atomic bug

Florian Fainelli <f.fainelli@xxxxxxxxx>
    net: phy: Do not perform software reset for Generic PHY

Al Viro <viro@xxxxxxxxxxxxxxxxxx>
    Bluetooth: cmtp: cmtp_add_connection() should verify that it's dealing with l2cap socket

Johan Hedberg <johan.hedberg@xxxxxxxxx>
    Bluetooth: Fix potential NULL dereference

Al Viro <viro@xxxxxxxxxxxxxxxxxx>
    Bluetooth: bnep: bnep_add_connection() should verify that it's dealing with l2cap socket

Cheah Kok Cheong <thrust73@xxxxxxxxx>
    Staging: comedi: comedi_fops: Avoid orphaned proc entry

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Revert "powerpc/numa: Fix percpu allocations to be NUMA aware"

Paul Mackerras <paulus@xxxxxxxxxx>
    KVM: PPC: Book3S HV: Save/restore host values of debug registers

Paul Mackerras <paulus@xxxxxxxxxx>
    KVM: PPC: Book3S HV: Reload HTM registers explicitly

Paul Mackerras <paulus@xxxxxxxxxx>
    KVM: PPC: Book3S HV: Restore critical SPRs to host values on guest exit

Sinclair Yeh <syeh@xxxxxxxxxx>
    drm/vmwgfx: Fix gcc-7.1.1 warning

Ofer Heifetz <oferh@xxxxxxxxxxx>
    md/raid5: add thread_group worker async_tx_issue_pending_all

Laurent Vivier <lvivier@xxxxxxxxxx>
    powerpc/pseries: Fix of_node_put() underflow during reconfig remove

Eric Dumazet <edumazet@xxxxxxxxxx>
    net: reduce skb_warn_bad_offload() noise

Joel Fernandes <joelaf@xxxxxxxxxx>
    pstore: Make spinlock per zone instead of global

Yuejie Shi <syjcnss@xxxxxxxxx>
    af_key: Add lock to key dump


-------------

Diffstat:

 Makefile                                      |   4 +-
 arch/alpha/include/asm/word-at-a-time.h       |   2 +
 arch/arc/include/asm/Kbuild                   |   1 +
 arch/arm/boot/dts/omap3-n900.dts              |   2 +
 arch/arm/include/asm/ftrace.h                 |  18 +++
 arch/avr32/include/asm/Kbuild                 |   1 +
 arch/blackfin/include/asm/Kbuild              |   1 +
 arch/c6x/include/asm/Kbuild                   |   1 +
 arch/cris/include/asm/Kbuild                  |   1 +
 arch/frv/include/asm/Kbuild                   |   1 +
 arch/hexagon/include/asm/Kbuild               |   1 +
 arch/ia64/include/asm/Kbuild                  |   1 +
 arch/m32r/include/asm/Kbuild                  |   1 +
 arch/metag/include/asm/Kbuild                 |   1 +
 arch/microblaze/include/asm/Kbuild            |   1 +
 arch/mips/include/asm/Kbuild                  |   1 +
 arch/mn10300/include/asm/Kbuild               |   1 +
 arch/powerpc/include/asm/Kbuild               |   1 +
 arch/powerpc/include/asm/topology.h           |  14 --
 arch/powerpc/include/asm/word-at-a-time.h     |   5 +
 arch/powerpc/kernel/setup_64.c                |   4 +-
 arch/powerpc/kvm/book3s_hv.c                  |  29 +++-
 arch/powerpc/kvm/book3s_hv_rmhandlers.S       |  37 ++++-
 arch/powerpc/platforms/pseries/reconfig.c     |   1 -
 arch/s390/include/asm/Kbuild                  |   1 +
 arch/score/include/asm/Kbuild                 |   1 +
 arch/tile/Kconfig                             |   2 +
 arch/tile/gxio/mpipe.c                        |  33 +---
 arch/tile/include/asm/Kbuild                  |   1 +
 arch/tile/include/asm/uaccess.h               |  66 ++------
 arch/tile/include/asm/word-at-a-time.h        |  42 ++++++
 arch/tile/lib/exports.c                       |   2 -
 arch/tile/lib/usercopy_32.S                   |  46 ------
 arch/tile/lib/usercopy_64.S                   |  46 ------
 arch/um/include/asm/Kbuild                    |   1 +
 arch/unicore32/include/asm/Kbuild             |   1 +
 arch/x86/boot/string.c                        |   1 +
 arch/x86/boot/string.h                        |   9 ++
 arch/x86/kernel/cpu/mcheck/mce_amd.c          |   3 +
 arch/x86/kernel/kvm.c                         |   6 +-
 arch/xtensa/include/asm/Kbuild                |   1 +
 drivers/ata/libata-scsi.c                     |   6 +-
 drivers/char/ipmi/ipmi_watchdog.c             |   7 +-
 drivers/char/tpm/tpm-sysfs.c                  |   2 +
 drivers/gpu/drm/msm/adreno/adreno_gpu.c       |   9 +-
 drivers/gpu/drm/msm/msm_gem_submit.c          |   3 +-
 drivers/gpu/drm/msm/msm_ringbuffer.c          |   3 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c       |   2 +-
 drivers/isdn/i4l/isdn_common.c                |   1 +
 drivers/isdn/i4l/isdn_net.c                   |   5 +-
 drivers/isdn/i4l/isdn_ppp.c                   |   2 +-
 drivers/mailbox/mailbox.c                     |  13 +-
 drivers/md/raid5.c                            |   2 +
 drivers/media/i2c/s5c73m3/s5c73m3-ctrls.c     |   2 +-
 drivers/media/platform/davinci/vpfe_capture.c |  22 +--
 drivers/net/ethernet/broadcom/tg3.c           |   3 +
 drivers/net/ethernet/mellanox/mlx4/icm.c      |   7 +-
 drivers/net/ethernet/realtek/r8169.c          |   1 +
 drivers/net/ethernet/renesas/sh_eth.c         |  11 ++
 drivers/net/irda/mcs7780.c                    |  16 +-
 drivers/net/phy/phy.c                         |   3 +
 drivers/net/phy/phy_device.c                  |   2 +-
 drivers/net/usb/kaweth.c                      |  10 +-
 drivers/net/wireless/ath/wil6210/main.c       |  15 +-
 drivers/net/xen-netback/common.h              |   1 +
 drivers/net/xen-netback/interface.c           |   6 +-
 drivers/net/xen-netback/netback.c             |   6 +-
 drivers/scsi/mpt3sas/mpt3sas_base.c           |  33 ++--
 drivers/scsi/qla2xxx/qla_attr.c               |  18 ++-
 drivers/spi/spi-dw.c                          |   5 +-
 drivers/staging/comedi/comedi_fops.c          |   6 +-
 drivers/target/iscsi/iscsi_target.c           |  38 ++++-
 drivers/target/iscsi/iscsi_target_core.h      |   1 +
 drivers/target/iscsi/iscsi_target_erl0.c      |   6 +-
 drivers/target/iscsi/iscsi_target_erl0.h      |   2 +-
 drivers/target/iscsi/iscsi_target_login.c     |   4 +
 drivers/target/iscsi/iscsi_target_nego.c      | 208 +++++++++++++++++---------
 drivers/target/target_core_fabric_configfs.c  |   5 +
 drivers/target/target_core_tpg.c              |   3 +
 drivers/vfio/pci/vfio_pci_rdwr.c              |   5 +-
 fs/dcache.c                                   |  27 ++++
 fs/debugfs/inode.c                            |  10 +-
 fs/ext4/file.c                                |   3 +
 fs/ext4/resize.c                              |   3 +-
 fs/f2fs/super.c                               |  16 ++
 fs/namei.c                                    |   8 +-
 fs/notify/fsnotify.c                          |   8 +-
 fs/pstore/ram.c                               |   5 +-
 fs/pstore/ram_core.c                          |  25 ++--
 include/asm-generic/word-at-a-time.h          |  80 +++++++++-
 include/linux/dcache.h                        |   7 +
 include/linux/fsnotify.h                      |  31 ----
 include/linux/phy.h                           |   4 +
 include/linux/pstore_ram.h                    |  11 +-
 include/linux/sched.h                         |  10 ++
 include/linux/slab.h                          |   4 +-
 include/linux/string.h                        |   3 +
 include/net/iw_handler.h                      |   3 +-
 include/net/sctp/sctp.h                       |   4 +
 include/target/target_core_base.h             |   1 +
 kernel/signal.c                               |   4 +-
 kernel/workqueue.c                            |  10 ++
 lib/Kconfig.debug                             |   2 +-
 lib/string.c                                  |  89 +++++++++++
 mm/page_alloc.c                               |  10 +-
 net/8021q/vlan.c                              |   5 +
 net/8021q/vlan.h                              |   2 +
 net/8021q/vlan_dev.c                          |  20 ++-
 net/bluetooth/bnep/core.c                     |  10 +-
 net/bluetooth/cmtp/core.c                     |   3 +
 net/core/dev.c                                |  19 ++-
 net/core/dev_ioctl.c                          |   1 +
 net/core/rtnetlink.c                          |   3 +-
 net/dccp/feat.c                               |   7 +-
 net/ipv4/fib_frontend.c                       |   9 +-
 net/ipv4/ip_output.c                          |   2 +-
 net/ipv6/ip6_flowlabel.c                      |   4 +-
 net/ipv6/ip6_output.c                         |   2 +-
 net/ipv6/output_core.c                        |   8 +-
 net/key/af_key.c                              |  46 +++++-
 net/packet/af_packet.c                        |   2 +-
 net/sched/cls_api.c                           |   4 +-
 net/sctp/socket.c                             |   8 +-
 net/xfrm/xfrm_policy.c                        |   9 +-
 sound/pci/hda/patch_realtek.c                 |   1 +
 sound/soc/codecs/tlv320aic3x.c                |  13 ++
 sound/soc/soc-pcm.c                           |   4 +
 127 files changed, 960 insertions(+), 486 deletions(-)