4.14-stable patches

4.14-stable patches

added patches:
	alsa-bcd2000-add-a-sanity-check-for-invalid-eps.patch
	alsa-caiaq-add-a-sanity-check-for-invalid-eps.patch
	alsa-line6-add-a-sanity-check-for-invalid-eps.patch
	blk_rq_map_user_iov-fix-error-override.patch
	blktrace-fix-unlocked-registration-of-tracepoints.patch
	bpf-mark-dst-unknown-on-inconsistent-s-u-bounds-adjustments.patch
	cfg80211-check-dev_set_name-return-value.patch
	crypto-x86-twofish-3way-fix-rbp-usage.patch
	dnotify-handle-errors-from-fsnotify_add_mark_locked-in-fcntl_dirnotify.patch
	drm-require-__gfp_nofail-for-the-legacy-drm_modeset_lock_all.patch
	esp-fix-gro-when-the-headers-not-fully-in-the-linear-part-of-the-skb.patch
	kcm-check-if-sk_user_data-already-set-in-kcm_attach.patch
	kcm-only-allow-tcp-sockets-to-be-attached-to-a-kcm-mux.patch
	kcov-detect-double-association-with-a-single-task.patch
	kvm-x86-check-input-paging-mode-when-cs.l-is-set.patch
	kvm-x86-fix-escape-of-guest-dr6-to-the-host.patch
	mac80211_hwsim-validate-number-of-different-channels.patch
	media-pvrusb2-properly-check-endpoint-types.patch
	mm-vmscan-make-unregister_shrinker-no-op-if-register_shrinker-failed.patch
	net-avoid-skb_warn_bad_offload-on-is_err.patch
	net_sched-gen_estimator-fix-lockdep-splat.patch
	netfilter-ipt_clusterip-fix-out-of-bounds-accesses-in-clusterip_tg_check.patch
	netfilter-on-sockopt-acquire-sock-lock-only-in-the-required-scope.patch
	netfilter-x_tables-avoid-out-of-bounds-reads-in-xt_request_find_-match-target.patch
	netfilter-x_tables-fix-int-overflow-in-xt_alloc_table_info.patch
	netfilter-xt_cgroup-initialize-info-priv-in-cgroup_mt_check_v1.patch
	netfilter-xt_rateest-acquire-xt_rateest_mutex-for-hash-insert.patch
	ptr_ring-fail-early-if-queue-occupies-more-than-kmalloc_max_size.patch
	ptr_ring-try-vmalloc-when-kmalloc-fails.patch
	rdma-netlink-fix-general-protection-fault.patch
	rds-tcp-atomically-purge-entries-from-rds_tcp_conn_list-during-netns-delete.patch
	rds-tcp-correctly-sequence-cleanup-on-netns-deletion.patch
	sctp-set-frag_point-in-sctp_setsockopt_maxseg-correctly.patch
	selinux-ensure-the-context-is-nul-terminated-in-security_context_to_sid_core.patch
	selinux-skip-bounded-transition-processing-if-the-policy-isn-t-loaded.patch
	staging-android-ion-add-__gfp_nowarn-for-system-contig-heap.patch
	staging-android-ion-switch-from-warn-to-pr_warn.patch
	usb-core-add-a-helper-function-to-check-the-validity-of-ep-type-in-urb.patch
	vhost-use-mutex_lock_nested-in-vhost_dev_lock_vqs.patch
	xfrm-check-id-proto-in-validate_tmpl.patch
	xfrm-don-t-call-xfrm_policy_cache_flush-while-holding-spinlock.patch
	xfrm-fix-rcu-usage-in-xfrm_get_type_offload.patch
	xfrm-fix-stack-out-of-bounds-read-on-socket-policy-lookup.patch
	xfrm-skip-policies-marked-as-dead-while-rehashing.patch