Merge 3.18.37 into android-3.18

Changes in 3.18.37:
	VFS: net/unix: d_backing_inode() annotations
	VFS: AF_UNIX sockets should call mknod on the top layer only
	af_unix: Fix splice-bind deadlock
	percpu: fix synchronization between chunk->map_extend_work and chunk destruction
	percpu: fix synchronization between synchronous map extension and chunk destruction
	cgroup: remove redundant cleanup in css_create
	usb: dwc3: exynos: Remove local variable for clock from probe
	usb: dwc3: exynos: Fix deferred probing storm.
	usb: gadget: fix spinlock dead lock in gadgetfs
	HID: elo: kill not flush the work
	xhci: Fix handling timeouted commands on hosts in weird states.
	usb: xhci-plat: properly handle probe deferral for devm_clk_get()
	usb: quirks: Fix sorting
	usb: quirks: Add no-lpm quirk for Acer C120 LED Projector
	USB: xhci: Add broken streams quirk for Frescologic device id 1009
	usb: musb: Ensure rx reinit occurs for shared_fifo endpoints
	usb: musb: Stop bulk endpoint while queue is rotated
	usb: host: ehci-tegra: Grab the correct UTMI pads reset
	scsi: fix race between simultaneous decrements of ->host_failed
	ARM: 8578/1: mm: ensure pmd_present only checks the valid bit
	ARM: 8579/1: mm: Fix definition of pmd_mknotpresent
	crypto: ux500 - memmove the right size
	drm/radeon: fix asic initialization for virtualized environments
	usb: common: otg-fsm: add license to usb-otg-fsm
	MIPS: KVM: Fix modular KVM under QEMU
	spi: sun4i: fix FIFO limit
	spi: sun4i: allow transfers to set transmission speed
	spi: sunxi: fix transfer timeout
	kprobes/x86: Clear TF bit in fault on single-stepping
	kernel/sysrq, watchdog, sched/core: Reset watchdog on all CPUs while processing sysrq-w
	drm/i915/ilk: Don't disable SSC source if it's in use
	nfsd4/rpc: move backchannel create logic into rpc code
	base: make module_create_drivers_dir race-free
	kvm: Fix irq route entries exceeding KVM_MAX_IRQ_ROUTES
	KEYS: potential uninitialized variable
	Btrfs: make btrfs_abort_transaction consider existence of new block groups
	btrfs: account for non-CoW'd blocks in btrfs_abort_transaction
	IB/mlx4: Properly initialize GRH TClass and FlowLabel in AHs
	can: c_can: Update D_CAN TX and RX functions to 32 bit - fix Altera Cyclone access
	can: at91_can: RX queue could get stuck at high bus load
	tracing: Handle NULL formats in hold_module_trace_bprintk_format()
	arm64: mm: remove page_mapping check in __sync_icache_dcache
	pinctrl: imx: Do not treat a PIN without MUX register as an error
	pinctrl: single: Fix missing flush of posted write for a wakeirq
	UBI: Fastmap: Fix race in ubi_eba_atomic_leb_change()
	mm: Export migrate_page_move_mapping and migrate_page_copy
	UBIFS: Implement ->migratepage()
	can: fix handling of unmodifiable configuration options fix
	can: fix oops caused by wrong rtnl dellink usage
	xen/pciback: Fix conf_space read/write overlap check.
	Input: wacom_w8001 - w8001_MAX_LENGTH should be 13
	Input: elantech - add new icbody type
	Input: elantech - add more IC body types to the list
	drm/nouveau: fix for disabled fbdev emulation
	decode_negTokenInit had wrong calling sequence
	[SMB3] Fix sec=krb5 on smb3 mounts
	cifs: dynamic allocation of ntlmssp blob
	HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands
	ALSA: hda - remove one pin from ALC292_STANDARD_PINS
	ALSA: dummy: Fix a use-after-free at closing
	Fix reconnect to not defer smb3 session reconnect long after socket reconnect
	File names with trailing period or space need special case conversion
	USB: EHCI: declare hostpc register as zero-length array
	tmpfs: don't undo fallocate past its last page
	mm: rename deactivate_page to deactivate_file_page
	mm/swap.c: flush lru pvecs on compound page arrival
	mm, compaction: skip compound pages by order in free scanner
	mm, compaction: abort free scanner if split fails
	fs/nilfs2: fix potential underflow in call to crc32_le
	powerpc/tm: Always reclaim in start_thread() for exec() class syscalls
	KVM: arm/arm64: Stop leaking vcpu pid references
	make nfs_atomic_open() call d_drop() on all ->open_context() errors.
	USB: don't free bandwidth_mutex too early
	ARC: unwind: ensure that .debug_frame is generated (vs. .eh_frame)
	arc: unwind: warn only once if DW2_UNWIND is disabled
	Revert "s390/kdump: Clear subchannel ID to signal non-CCW/SCSI IPL"
	NFS: Fix another OPEN_DOWNGRADE bug
	namespace: update event counter when umounting a deleted dentry
	locks: use file_inode()
	PCI: Move domain assignment from arm64 to generic code
	PCI: Allow a NULL "parent" pointer in pci_bus_assign_domain_nr()
	ASoC: samsung: pass DMA channels as pointers
	ALSA: usb-audio: Minor code cleanup in create_fixed_stream_quirk()
	ALSA: usb-audio: Fix double-free in error paths after snd_usb_add_audio_stream() call
	HID: logitech: fix Dual Action gamepad support
	8250: use callbacks to access UART_DLL/UART_DLM
	mtip32xx: Fix for rmmod crash when drive is in FTL rebuild
	mtip32xx: Fix broken service thread handling
	hwmon: (max1111) Return -ENODEV from max1111_read_channel if not instantiated
	PKCS#7: pkcs7_validate_trust(): initialize the _trusted output argument
	ALSA: timer: Use mod_timer() for rearming the system timer
	mm: fix invalid node in alloc_migrate_target()
	drm/udl: Use unlocked gem unreferencing
	drm/radeon: add a dpm quirk for sapphire Dual-X R7 370 2G D5
	drm/radeon: add a dpm quirk for all R7 370 parts
	tcp: convert cached rtt from usec to jiffies when feeding initial rto
	net: jme: fix suspend/resume on JMC260
	net: qca_spi: Don't clear IFF_BROADCAST
	net: qca_spi: clear IFF_TX_SKB_SHARING
	sctp: lack the check for ports in sctp_v6_cmp_addr
	qmi_wwan: add Sierra Wireless EM74xx device ID
	ipv6: re-enable fragment header matching in ipv6_find_hdr
	cdc_ncm: toggle altsetting to force reset before setup
	usbnet: cleanup after bind() in probe()
	udp6: fix UDP/IPv6 encap resubmit path
	sh_eth: fix NULL pointer dereference in sh_eth_ring_format()
	sh_eth: Remove redundant alignment adjustment
	sh_eth: Fix DMA-API usage for RX buffers
	sh_eth: fix RX buffer size alignment
	qlcnic: Remove unnecessary usage of atomic_t
	qlcnic: Fix mailbox completion handling during spurious interrupt
	ipv4: Don't do expensive useless work during inetdev destroy.
	net: Fix use after free in the recvmmsg exit path
	mlx4: add missing braces in verify_qp_parameters
	farsync: fix off-by-one bug in fst_add_one
	ath9k: fix buffer overrun for ar9287
	ppp: ensure file->private_data can't be overridden
	qlge: Fix receive packets drop.
	net: bcmgenet: fix dma api length mismatch
	ipv4: fix broadcast packets reception
	ppp: take reference on channels netns
	xfrm: Fix crash observed during device unregistration and decryption
	qmi_wwan: add "D-Link DWM-221 B1" device id
	ipv4: l2tp: fix a potential issue in l2tp_ip_recv
	ipv6: l2tp: fix a potential issue in l2tp_ip6_recv
	ip6_tunnel: set rtnl_link_ops before calling register_netdevice
	pinctrl: nomadik: fix pull debug print inversion
	[media] v4l: vsp1: Set the SRU CTRL0 register when starting the stream
	mac80211: fix unnecessary frame drops in mesh fwding
	futex: Acknowledge a new waiter in counter before plist
	powerpc: Update TM user feature bits in scan_features()
	Input: pmic8xxx-pwrkey - fix algorithm for converting trigger delay
	xen kconfig: don't "select INPUT_XEN_KBDDEV_FRONTEND"
	pinctrl: single: Fix pcs_parse_bits_in_pinctrl_entry to use __ffs than ffs
	i2c: exynos5: Fix possible ABBA deadlock by keeping I2C clock prepared
	ASoC: s3c24xx: use const snd_soc_component_driver pointer
	ASoC: ssm4567: Reset device before regcache_sync()
	efi: Expose non-blocking set_variable() wrapper to efivars
	USB: usbip: fix potential out-of-bounds write
	spi/rockchip: Make sure spi clk is on in rockchip_spi_set_cs
	regulator: s5m8767: fix get_register() error handling
	paride: make 'verbose' parameter an 'int' again
	fbdev: da8xx-fb: fix videomodes of lcd panels
	misc/bmp085: Enable building as a module
	rtc: hym8563: fix invalid year calculation
	rtc: vr41xx: Wire up alarm_irq_enable
	rtc: max77686: Properly handle regmap_irq_get_virq() error code
	drivers/misc/ad525x_dpot: AD5274 fix RDAC read back errors
	x86/mm/kmmio: Fix mmiotrace for hugepages
	ext4: fix NULL pointer dereference in ext4_mark_inode_dirty()
	perf tools: handle spaces in file names obtained from /proc/pid/maps
	perf stat: Document --detailed option
	ARM: OMAP3: Add cpuidle parameters table for omap3430
	jme: Do not enable NIC WoL functions on S0
	jme: Fix device PM wakeup API usage
	sunrpc/cache: drop reference when sunrpc_cache_pipe_upcall() detects a race
	megaraid_sas: add missing curly braces in ioctl handler
	ipvs: correct initial offset of Call-ID header search in SIP persistence engine
	nbd: ratelimit error msgs after socket close
	clk: rockchip: free memory in error cases when registering clock branches
	clk: qcom: msm8960: fix ce3_core clk enable register
	clk: versatile: sp810: support reentrance
	clk: qcom: msm8960: Fix ce3_src register offset
	lpfc: fix misleading indentation
	Input: zforce_ts - fix dual touch recognition
	proc: prevent accessing /proc/<PID>/environ until it's ready
	batman-adv: Check skb size before using encapsulated ETH+VLAN header
	batman-adv: Fix broadcast/ogm queue limit on a removed interface
	batman-adv: Reduce refcnt of removed router when updating route
	decnet: Do not build routes to devices without decnet private data.
	route: do not cache fib route info on local routes with oif
	packet: fix heap info leak in PACKET_DIAG_MCLIST sock_diag interface
	net: sched: do not requeue a NULL skb
	atl2: Disable unimplemented scatter/gather feature
	net/mlx4_en: fix spurious timestamping callbacks
	bpf: fix double-fdput in replace_map_fd_with_map_ptr()
	net_sched: introduce qdisc_replace() helper
	net_sched: update hierarchical backlog too
	sch_htb: update backlog as well
	sch_dsmark: update backlog as well
	netem: Segment GSO packets on enqueue
	net: fec: only clear a queue's work bit if the queue was emptied
	net: fix infoleak in llc
	net: fix infoleak in rtnetlink
	VSOCK: do not disconnect socket when peer has shutdown SEND only
	net: bridge: fix old ioctl unlocked net device walk
	net: fix a kernel infoleak in x25 module
	tcp: refresh skb timestamp at retransmit time
	drm/radeon: fix PLL sharing on DCE6.1 (v2)
	Btrfs: don't use src fd for printk
	tty: vt, return error when con_startup fails
	serial: samsung: Reorder the sequence of clock control when call s3c24xx_serial_set_termios()
	MIPS: Reserve nosave data for hibernation
	pipe: limit the per-user amount of pages allocated in pipes
	xfs: print name of verifier if it fails
	netlink: Fix dump skb leak/double free
	tuntap: correctly wake up process during uninit
	sfc: on MC reset, clear PIO buffer linkage in TXQs
	tcp: record TLP and ER timer stats in v6 stats
	sparc: Fix system call tracing register handling.
	sparc64: Fix bootup regressions on some Kconfig combinations.
	sparc64: Fix numa node distance initialization
	sparc64: Fix sparc64_set_context stack handling.
	sparc/PCI: Fix for panic while enabling SR-IOV
	sparc64: Take ctx_alloc_lock properly in hugetlb_setup().
	sparc: Harden signal return frame checks.
	sparc64: Fix return from trap window fill crashes.
	MIPS: Fix 64k page support for 32 bit kernels.
	netfilter: x_tables: validate e->target_offset early
	netfilter: x_tables: make sure e->next_offset covers remaining blob size
	netfilter: x_tables: fix unconditional helper
	netfilter: x_tables: don't move to non-existent next rule
	netfilter: x_tables: validate targets of jumps
	netfilter: x_tables: add and use xt_check_entry_offsets
	netfilter: x_tables: kill check_entry helper
	netfilter: x_tables: assert minimum target size
	netfilter: x_tables: add compat version of xt_check_entry_offsets
	netfilter: x_tables: check standard target size too
	netfilter: x_tables: check for bogus target offset
	netfilter: x_tables: validate all offsets and sizes in a rule
	netfilter: x_tables: don't reject valid target size on some architectures
	netfilter: arp_tables: simplify translate_compat_table args
	netfilter: ip_tables: simplify translate_compat_table args
	netfilter: ip6_tables: simplify translate_compat_table args
	netfilter: x_tables: xt_compat_match_from_user doesn't need a retval
	netfilter: x_tables: do compat validation via translate_table
	netfilter: x_tables: introduce and use xt_copy_counters_from_user
	tmpfs: fix regression hang in fallocate undo
	Linux 3.18.37

Change-Id: Id2338f31c47df4a4fc0065ac93f8e7c379c94680
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>