Merge 3.18.27 into android-3.18

Changes in 3.18.27:
	ovl: allow zero size xattr
	ovl: use a minimal buffer in ovl_copy_xattr
	[media] vb2: fix a regression in poll() behavior for output,streams
	[media] gspca: ov534/topro: prevent a division by 0
	[media] media: dvb-core: Don't force CAN_INVERSION_AUTO in oneshot mode
	tools lib traceevent: Fix output of %llu for 64 bit values read on 32 bit machines
	drm/radeon: call hpd_irq_event on resume
	time: Avoid signed overflow in timekeeping_get_ns()
	KVM: PPC: Fix emulation of H_SET_DABR/X on POWER8
	ovl: root: copy attr
	Bluetooth: Add support of Toshiba Broadcom based devices
	rtlwifi: fix memory leak for USB device
	wlcore/wl12xx: spi: fix oops on firmware load
	ovl: check dentry positiveness in ovl_cleanup_whiteouts()
	EDAC: Robustify workqueues destruction
	dm thin: fix race condition when destroying thin pool workqueue
	futex: Drop refcount if requeue_pi() acquired the rtmutex
	drm/radeon: fence PT updates manually v2
	drm/radeon: Fix off-by-one errors in radeon_vm_bo_set_addr
	drm/radeon: clean up fujitsu quirks
	mmc: sdio: Fix invalid vdd in voltage switch power cycle
	mmc: sdhci: Fix sdhci_runtime_pm_bus_on/off()
	udf: limit the maximum number of indirect extents in a row
	nfs: Fix race in __update_open_stateid()
	Thermal: initialize thermal zone device correctly
	Thermal: handle thermal zone device properly during system sleep
	Thermal: do thermal zone update after a cooling device registered
	posix-clock: Fix return code on the poll method's error path
	rtlwifi: rtl8188ee: Fix module parameter initialization
	rtlwifi: rtl8192de: Fix incorrect module parameter descriptions
	rtlwifi: rtl8192se: Fix module parameter initialization
	rtlwifi: rtl8192ce: Fix handling of module parameters
	rtlwifi: rtl8192cu: Add missing parameter setup
	NFS: Remove the "NFS_CAP_CHANGE_ATTR" capability
	NFS: Fix attribute cache revalidation
	rtlwifi: rtl_pci: Fix kernel panic
	bcache: fix a livelock when we cause a huge number of cache misses
	bcache: Add a cond_resched() call to gc
	bcache: clear BCACHE_DEV_UNLINK_DONE flag when attaching a backing device
	bcache: fix a leak in bch_cached_dev_run()
	bcache: unregister reboot notifier if bcache fails to unregister device
	bcache: allows use of register in udev to avoid "device_busy" error.
	bcache: prevent crash on changing writeback_running
	bcache: Change refill_dirty() to always scan entire disk if necessary
	wlcore/wl12xx: spi: fix NULL pointer dereference (Oops)
	Input: i8042 - add Fujitsu Lifebook U745 to the nomux list
	udf: Prevent buffer overrun with multi-byte characters
	udf: Check output buffer length when converting name to CS0
	drm/dp/mst: process broadcast messages correctly
	drm/dp/mst: fix in MSTB RAD initialization
	gpu: drm: drm_dp_mst_topology.c: Fix improper use of strncat
	drm/dp/mst: fix in RAD element access
	PCI: Fix minimum allocation address overwrite
	PCI: imx6: Use tabs for indentation
	PCI: host: Mark PCIe/PCI (MSI) IRQ cascade handlers as IRQF_NO_THREAD
	iwlwifi: update and fix 7265 series PCI IDs
	locks: update comments that refer to inode->i_flock
	locks: fix unlock when fcntl_setlk races with a close
	dm snapshot: fix hung bios when copy error occurs
	uml: fix hostfs mknod()
	uml: flush stdout before forking
	drm/nouveau/kms: take mode_config mutex in connector hotplug path
	s390: fix normalization bug in exception table sorting
	xfs: inode recovery readahead can race with inode buffer creation
	xfs: handle dquot buffer readahead in log recovery correctly
	Input: elantech - mark protocols v2 and v3 as semi-mt
	virtio_balloon: fix race between migration and ballooning
	parisc: Fix __ARCH_SI_PREAMBLE_SIZE
	KVM: PPC: Fix ONE_REG AltiVec support
	dmaengine: dw: Make error prints unique. Part #1
	dmaengine: dw: fix cyclic transfer setup
	dmaengine: dw: fix cyclic transfer callbacks
	mmc: mmci: fix an ages old detection error
	mmc: core: Fix error paths and messages in mmc_init_card
	mmc: core: Simplify by adding mmc_execute_tuning()
	mmc: core: enable CMD19 tuning for DDR50 mode
	mmc: core: Enable tuning according to the actual timing
	sparc64: fix incorrect sign extension in sys_sparc64_personality
	cifs: convert to print_hex_dump() instead of custom implementation
	cifs: convert printk(LEVEL...) to pr_<level>
	cifs: Ratelimit kernel log messages
	cifs: fix race between call_async() and reconnect()
	cifs_dbg() outputs an uninitialized buffer in cifs_readdir()
	m32r: fix m32104ut_defconfig build fail
	dma-debug: switch check from _text to _stext
	scripts/bloat-o-meter: fix python3 syntax error
	ocfs2/dlm: ignore cleaning the migration mle that is inuse
	zram/zcomp: use GFP_NOIO to allocate streams
	zram: try vmalloc() after kmalloc()
	mm: soft-offline: check return value in second __get_any_page() call
	memcg: only free spare array when readers are done
	panic: release stale console lock to always get the logbuf printed out
	kernel/panic.c: turn off locks debug before releasing console lock
	printk: do cond_resched() between lines while outputting to consoles
	crypto: af_alg - Disallow bind/setkey/... after accept(2)
	crypto: af_alg - Fix socket double-free when accept fails
	crypto: af_alg - Add nokey compatibility path
	mac802154: fix typo IEEE802515 to IEEE802154
	crypto: hash - Add crypto_ahash_has_setkey
	crypto: algif_hash - Require setkey before accept(2)
	crypto: af_alg - Allow af_af_alg_release_parent to be called on nokey path
	crypto: algif_hash - Remove custom release parent function
	crypto: af_alg - Forbid bind(2) when nokey child sockets are present
	crypto: algif_hash - Fix race condition in hash_check_key
	crypto: crc32c - Fix crc32c soft dependency
	IB/qib: fix mcast detach when qp not attached
	IB/qib: Support creating qps with GFP_NOIO flag
	ideapad-laptop: Add Lenovo ideapad Y700-17ISK to no_hw_rfkill dmi list
	iscsi-target: Fix potential dead-lock during node acl delete
	MIPS: Fix some missing CONFIG_CPU_MIPSR6 #ifdefs
	ACPI / PCI / hotplug: unlock in error path in acpiphp_enable_slot()
	ideapad-laptop: Add Lenovo Yoga 900 to no_hw_rfkill dmi list
	ideapad-laptop: Add Lenovo Yoga 700 to no_hw_rfkill dmi list
	usb: cdc-acm: handle unlinked urb in acm read callback
	usb: cdc-acm: send zero packet for intel 7260 modem
	cdc-acm:exclude Samsung phone 04e8:685d
	usb: hub: do not clear BOS field during reset device
	USB: cp210x: add ID for IAI USB to RS485 adaptor
	USB: visor: fix null-deref at probe
	USB: serial: visor: fix crash on detecting device without write_urbs
	USB: serial: option: Adding support for Telit LE922
	ALSA: seq: Fix incorrect sanity check at snd_seq_oss_synth_cleanup()
	ALSA: seq: Degrade the error message for too many opens
	USB: serial: ftdi_sio: add support for Yaesu SCU-18 cable
	USB: option: fix Cinterion AHxx enumeration
	ALSA: compress: Disable GET_CODEC_CAPS ioctl for some architectures
	ALSA: usb-audio: Fix TEAC UD-501/UD-503/NT-503 usb delay
	ALSA: bebob: Use a signed return type for get_formation_index
	arm64: mm: avoid calling apply_to_page_range on empty range
	powerpc/eeh: Fix PE location code
	SCSI: fix crashes in sd and sr runtime PM
	tty: Fix unsafe ldisc reference via ioctl(TIOCGETD)
	n_tty: Fix unsafe reference to "other" ldisc
	staging/speakup: Use tty_ldisc_ref() for paste kworker
	irqchip/atmel-aic: Fix wrong bit operation for IRQ priority
	seccomp: always propagate NO_NEW_PRIVS on tsync
	ALSA: dummy: Disable switching timer backend via sysfs
	drm/vmwgfx: respect 'nomodeset'
	Staging: speakup: Fix getting port information
	x86/mm/pat: Avoid truncation when converting cpa->numpages to address
	serial: 8250_pci: Add Intel Broadwell ports
	USB: fix invalid memory access in hub_activate()
	arm64: restore bogomips information in /proc/cpuinfo
	mac80211: Requeue work after scan complete for all VIF types.
	rfkill: fix rfkill_fop_read wait_event usage
	ARM: dts: at91: sama5d4: fix instance id of DBGU
	crypto: shash - Fix has_key setting
	drm/i915/dp: fall back to 18 bpp when sink capability is unknown
	ALSA: usb: Add native DSD support for Aune X1S
	ALSA: usb-audio: Add native DSD support for PS Audio NuWave DAC
	ALSA: usb-audio: Add quirk for Microsoft LifeCam HD-6000
	crypto: algif_hash - wait for crypto_ahash_init() to complete
	ALSA: seq: Fix race at closing in virmidi driver
	ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check
	ALSA: pcm: Fix potential deadlock in OSS emulation
	ALSA: seq: Fix yet another races among ALSA timer accesses
	ALSA: timer: Harden slave timer list handling
	ALSA: timer: Code cleanup
	ALSA: timer: Fix link corruption due to double start or stop
	drm: add helper to check for wc memory support
	drm/radeon: Always disable RADEON_GEM_GTT_UC along with RADEON_GEM_GTT_WC
	drm/radeon: mask out WC from BO on unsupported arches
	ALSA: hda - Add fixup for Mac Mini 7,1 model
	ALSA: rawmidi: Make snd_rawmidi_transmit() race-free
	ALSA: rawmidi: Fix race at copying & updating the position
	ALSA: seq: Fix lockdep warnings due to double mutex locks
	drivers/scsi/sg.c: mark VMA as VM_IO to prevent migration
	radix-tree: fix race in gang lookup
	xhci: call BIOS workaround to enable runtime suspend on Intel Braswell
	xhci: Workaround to get D3 working in Intel xHCI
	xhci: Move xhci_pme_quirk() behind #ifdef CONFIG_PM
	usb: xhci: handle both SSIC ports in PME stuck quirk
	usb: xhci: add a quirk bit for ssic port unused
	usb: xhci: set SSIC port unused only if xhci_suspend succeeds
	usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Broxton-M platforms
	xhci: Fix list corruption in urb dequeue at host removal
	[media] tda1004x: only update the frontend properties if locked
	ALSA: timer: Fix double unlink of active_list
	ALSA: timer: Fix leftover link at closing
	[media] saa7134-alsa: Only frees registered sound cards
	ARM: nomadik: set up MCDATDIR2
	drm: fix missing reference counting decrease
	drm: Add drm_fixp_from_fraction and drm_fixp2int_ceil
	drm/dp/mst: Calculate MST PBN with 31.32 fixed point
	dump_stack: avoid potential deadlocks
	ocfs2/dlm: clear refmap bit of recovery lock while doing local recovery cleanup
	mm: replace vma_lock_anon_vma with anon_vma_lock_read/write
	radix-tree: fix oops after radix_tree_iter_retry
	X.509: Don't strip leading 00's from key ID when constructing key description
	veth: don’t modify ip_summed; doing so treats packets with bad checksums as good.
	ipv6/addrlabel: fix ip6addrlbl_get()
	sctp: sctp should release assoc when sctp_make_abort_user return NULL in sctp_close
	connector: bump skb->users before callback invocation
	unix: properly account for FDs passed over unix sockets
	bridge: Only call /sbin/bridge-stp for the initial network namespace
	net: filter: make JITs zero A for SKF_AD_ALU_XOR_X
	net: sched: fix missing free per cpu on qstats
	net: possible use after free in dst_release
	vxlan: fix test which detect duplicate vxlan iface
	net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory
	ipv6: tcp: add rcu locking in tcp_v6_send_synack()
	tcp_yeah: don't set ssthresh below 2
	bonding: Prevent IPv6 link local address on enslaved devices
	phonet: properly unshare skbs in phonet_rcv()
	net: bpf: reject invalid shifts
	ipv6: update skb->csum when CE mark is propagated
	isdn_ppp: Add checks for allocation failure in isdn_ppp_open()
	ppp, slip: Validate VJ compression slot parameters completely
	team: Replace rcu_read_lock with a mutex in team_vlan_rx_kill_vid
	xen-netback: respect user provided max_queues
	xen-netfront: respect user provided max_queues
	xen-netfront: update num_queues to real created
	xfrm: dst_entries_init() per-net dst_ops
	Linux 3.18.27

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>