Merge 3.18.31 into android-3.18

Changes in 3.18.31:
	x86/iopl/64: Properly context-switch IOPL on Xen PV
	net: Clone skb before setting peeked flag
	net: Fix skb_set_peeked use-after-free bug
	ALSA: hda - Fixup inverted internal mic for Lenovo E50-80
	MAINTAINERS: return arch/sh to maintained state, with new maintainers
	irqchip: omap-intc: Improve IRQ handler
	irqchip/omap-intc: Add support for spurious irq handling
	drm/dp/mst: move GUID storage from mgr, port to only mst branch
	drm/dp/mst: Reverse order of MST enable and clearing VC payload table.
	arm64: vmemmap: use virtual projection of linear region
	arm64: account for sparsemem section alignment when choosing vmemmap offset
	powerpc: Fix dedotify for binutils >= 2.26
	ovl: fix permission checking for setattr
	fuse: break infinite loop in fuse_fill_write_pages()
	EDAC, amd64_edac: Shift wrapping issue in f1x_get_norm_dct_addr()
	crypto: ccp - Add hash state import and export support
	tty: Fix GPF in flush_to_ldisc(), part 2
	[media] media: v4l2-compat-ioctl32: fix missing length copy in put_v4l2_buffer32
	[media] pwc: Add USB id for Philips Spc880nc webcam
	crypto: ccp - Limit the amount of information exported
	crypto: ccp - Don't assume export/import areas are aligned
	net: irda: Fix use-after-free in irtty_open()
	staging: comedi: ni_tiocmd: change mistaken use of start_src for start_arg
	tools: hv: Makefile: Add hv_fcopy_daemon to Makefile
	tools/hv: Use include/uapi with __EXPORTED_HEADERS__
	ARM: dts: armada-375: use armada-370-sata for SATA
	usb: retry reset if a device times out
	HID: core: do not scan reports if the group is already set
	HID: fix hid_ignore_special_drivers module parameter
	ALSA: usb-audio: Set correct type for some UAC2 mixer controls.
	ALSA: hda - Implement loopback control switch for Realtek and other codecs
	sched: Fix crash in sched_init_numa()
	HID: multitouch: fix input mode switching on some Elan panels
	ptrace: use fsuid, fsgid, effective creds for fs access checks
	iio: adis_buffer: Fix out-of-bounds memory access
	iio: dac: mcp4725: set iio name property in sysfs
	iio: pressure: mpl115: fix temperature offset sign
	module: wrapper for symbol name.
	drm/gma500: Use correct unref in the gem bo create function
	ARM: 8457/1: psci-smp is built only for SMP
	lib/ucs2_string: Add ucs2 -> utf8 helper functions
	efi: efivar_create_sysfs_entry() should return negative error codes
	efi: Use ucs2_as_utf8 in efivarfs instead of open coding a bad version
	efi: Do variable name validation tests in utf8
	efi: Make our variable validation list include the guid
	efi: Make efivarfs entries immutable by default
	efi: Add pstore variables to the deletion whitelist
	lib/ucs2_string: Correct ucs2 -> utf8 conversion
	iw_cxgb3: Fix incorrectly returning error on success
	Btrfs: add missing brelse when superblock checksum fails
	Btrfs: igrab inode in writepage
	btrfs: statfs: report zero available if metadata are exhausted
	Btrfs: send, don't BUG_ON() when an empty symlink is found
	Btrfs: fix number of transaction units required to create symlink
	Btrfs: fix transaction handle leak on failure to create hard link
	btrfs: initialize the seq counter in struct btrfs_device
	[media] si2157: Bounds check firmware
	[media] si2157: return -EINVAL if firmware blob is too big
	kernel/resource.c: fix muxed resource handling in __request_region()
	security: let security modules use PTRACE_MODE_* with bitmasks
	btrfs: async-thread: Fix a use-after-free error for trace
	modules: fix longstanding /proc/kallsyms vs module insertion race.
	Revert "drm/radeon: call hpd_irq_event on resume"
	KVM: x86: Reload pit counters for all channels when restoring state
	KEYS: Fix handling of stored error in a negatively instantiated user key
	include/linux/poison.h: fix LIST_POISON{1,2} offset
	clk: rockchip: add pclk_cpu to the list of rk3188 critical clocks
	clk: rockchip: Add pclk_peri to critical clocks on RK3066/RK3188
	scripts/coccinelle: modernize &
	[media] adv7511: TX_EDID_PRESENT is still 1 after a disconnect
	[media] saa7134: Fix bytesperline not being set correctly for planar formats
	ext4: iterate over buffer heads correctly in move_extent_per_page()
	perf tools: Dont stop PMU parsing on alias parse error
	Bluetooth: btusb: Add new AR3012 ID 13d3:3395
	Bluetooth: Add new AR3012 ID 0489:e095
	aacraid: Fix memory leak in aac_fib_map_free
	mtd: onenand: fix deadlock in onenand_block_markbad
	x86, irq: Keep balance of IOAPIC pin reference count
	PCI: Add dev->has_secondary_link to track downstream PCIe links
	PCI: Disable IO/MEM decoding for devices with non-compliant BARs
	md/raid5: Compare apples to apples (or sectors to sectors)
	crypto: ccp - memset request context to zero during import
	Bluetooth: btusb: Add a new AR3012 ID 04ca:3014
	mmc: sdhci: fix data timeout (part 1)
	mmc: sdhci: fix data timeout (part 2)
	IB/srpt: Simplify srpt_handle_tsk_mgmt()
	[media] bttv: Width must be a multiple of 16 when capturing planar formats
	watchdog: rc32434_wdt: fix ioctl error handling
	nfsd4: fix bad bounds checking
	xfs: fix two memory leaks in xfs_attr_list.c error paths
	quota: Fix possible GPF due to uninitialised pointers
	mtip32xx: Print exact time when an internal command is interrupted
	mtip32xx: Avoid issuing standby immediate cmd during FTL rebuild
	mtip32xx: fix rmmod issue
	mtip32xx: fix crash on surprise removal of the drive
	mtip32xx: Handle safe removal during IO
	mtip32xx: fix incorrectly setting MTIP_DDF_SEC_LOCK_BIT
	mtip32xx: Handle FTL rebuild failure state during device initialization
	of: alloc anywhere from memblock if range not specified
	usb: hub: fix a typo in hub_port_init() leading to wrong logic
	KVM: i8254: change PIT discard tick policy
	x86: Add new MSRs and MSR bits used for Intel Skylake PMU support
	perf/x86/intel: Add definition for PT PMI bit
	sched/cputime: Fix steal_account_process_tick() to always return jiffies
	bcache: fix race of writeback thread starting before complete initialization
	bcache: cleaned up error handling around register_cache()
	bcache: fix cache_set_flush() NULL pointer dereference on OOM
	x86/PCI: Mark Broadwell-EP Home Agent & PCU as having non-compliant BARs
	be2iscsi: set the boot_kset pointer to NULL in case of failure
	drm/radeon: disable runtime pm on PX laptops without dGPU power control
	drm/radeon: Don't drop DP 2.7 Ghz link setup on some cards.
	sg: fix dxferp in from_to case
	jbd2: fix FS corruption possibility in jbd2_journal_destroy() on umount path
	EDAC/sb_edac: Fix computation of channel address
	Bluetooth: btusb: Add a new AR3012 ID 13d3:3472
	ALSA: hda - fix the mic mute button and led problem for a Lenovo AIO
	xtensa: ISS: don't hang if stdin EOF is reached
	xtensa: fix preemption in {clear,copy}_user_highpage
	xtensa: clear all DBREAKC registers on start
	bus: imx-weim: Take the 'status' property value into account
	ALSA: hda - Add new GPU codec ID 0x10de007d to snd-hda
	ALSA: hda - Add new GPU codec ID 0x10de0082 to snd-hda
	ALSA: hda - Add new GPU codec ID 0x10de0083 to snd-hda
	ALSA: intel8x0: Add clock quirk entry for AD1981B on IBM ThinkPad X41.
	s390/pci: extract software counters from fmb
	s390/pci: enforce fmb page boundary rule
	Input: powermate - fix oops with malicious USB descriptors
	radeon/fb: add wrapper functions around fb connector add/remove
	drm/radeon: rework fbdev handling on chips with no connectors
	md: multipath: don't hardcopy bio in .make_request path
	net: mvneta: enable change MAC address when interface is up
	HID: i2c-hid: fix OOB write in i2c_hid_set_or_send_report()
	ALSA: hda - Fix unconditional GPIO toggle via automute
	mmc: mmc_spi: Add Card Detect comments and fix CD GPIO case
	ALSA: usb-audio: Fix NULL dereference in create_fixed_stream_quirk()
	nfsd: fix deadlock secinfo+readdir compound
	ARM: dts: sunxi: Adjust touchscreen compatible for sun5i and later
	x86/iopl: Fix iopl capability check on Xen PV
	mmc: sdhci: Fix override of timeout clk wrt max_busy_timeout
	Input: ims-pcu - sanity check against missing interfaces
	Input: synaptics - handle spurious release of trackstick buttons, again
	Thermal: Ignore invalid trip points
	x86/apic: Fix suspicious RCU usage in smp_trace_call_function_interrupt()
	USB: iowarrior: fix oops with malicious USB descriptors
	USB: usb_driver_claim_interface: add sanity checking
	USB: cdc-acm: more sanity checking
	USB: uas: Reduce can_queue to MAX_CMNDS
	tracing: Fix crash from reading trace_pipe with sendfile
	splice: handle zero nr_pages in splice_to_pipe()
	ALSA: usb-audio: add Microsoft HD-5001 to quirks
	bitops: Do not default to __clear_bit() for __clear_bit_unlock()
	target: Fix target_release_cmd_kref shutdown comp leak
	KVM: VMX: avoid guest hang on invalid invept instruction
	KVM: fix spin_lock_init order on x86
	tracing: Fix trace_printk() to print when not using bprintk()
	fs/coredump: prevent fsuid=0 dumps into user-controlled directories
	rapidio/rionet: fix deadlock on SMP
	staging: comedi: ni_mio_common: fix the ni_write[blw]() functions
	ideapad-laptop: Add ideapad Y700 (15) to the no_hw_rfkill DMI list
	Input: ati_remote2 - fix crashes on detecting device with invalid descriptor
	ocfs2/dlm: fix race between convert and recovery
	ocfs2/dlm: fix BUG in dlm_move_lockres_to_recovery_list
	mm: page_alloc: pass PFN to __free_pages_bootmem
	mm: use 'unsigned int' for page order
	mm/page_alloc: prevent merging between isolated and other pageblocks
	arm64: errata: Add -mpc-relative-literal-loads to build flags
	ALSA: hda - Fix regression of monitor_present flag in eld proc file
	crypto: algif_skcipher - Require setkey before accept(2)
	crypto: algif_skcipher - Add nokey compatibility path
	crypto: algif_skcipher - Remove custom release parent function
	crypto: algif_skcipher - Fix race condition in skcipher_check_key
	Linux 3.18.31

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>