LSK Android 16.11 v3.18

* origin/tmp-4450e966:
  ARM64: Ignore Image-dtb from git point of view
  arm64: add option to build Image-dtb
  BACKPORT: lib: harden strncpy_from_user
  UPSTREAM: tracefs: Fix refcount imbalance in start_creating()
  UPSTREAM: tracing: Have mkdir and rmdir be part of tracefs
  UPSTREAM: tracing: Automatically mount tracefs on debugfs/tracing
  UPSTREAM: new primitive: debugfs_create_automount()
  UPSTREAM: debugfs: split end_creating() into success and failure cases
  UPSTREAM: debugfs: take mode-dependent parts of debugfs_get_inode() into callers
  UPSTREAM: fold debugfs_mknod() into callers
  UPSTREAM: fold debugfs_create() into caller
  UPSTREAM: fold debugfs_mkdir() into caller
  UPSTREAM: debugfs_mknod(): get rid useless arguments
  UPSTREAM: fold debugfs_link() into caller
  UPSTREAM: debugfs: kill __create_file()
  UPSTREAM: debugfs: split the beginning and the end of __create_file() off
  UPSTREAM: debugfs_{mkdir,create,link}(): get rid of redundant argument
  UPSTREAM: tracing: Convert the tracing facility over to use tracefs
  UPSTREAM: tracing: Move enabling tracepoints to just after rcu_init()
  UPSTREAM: tracing: Separate out initializing top level dir from instances
  UPSTREAM: tracing: Make tracing_init_dentry_tr() static
  UPSTREAM: tracing: Use IS_ERR() check for return value of tracing_init_dentry()
  UPSTREAM: tracefs: Add directory /sys/kernel/tracing
  UPSTREAM: tracefs: Add new tracefs file system
  ANDROID: binder: Clear binder and cookie when setting handle in flat binder struct
  ANDROID: binder: Add strong ref checks
  UPSTREAM: staging/android/ion : fix a race condition in the ion driver
  ANDROID: android-base: CONFIG_HARDENED_USERCOPY=y
  UPSTREAM: fs/proc/kcore.c: Add bounce buffer for ktext data
  UPSTREAM: fs/proc/kcore.c: Make bounce buffer global for read
  BACKPORT: arm64: Correctly bounds check virt_addr_valid
  ANDROID: dm: android-verity: Remove fec_header location constraint
  BACKPORT: audit: consistently record PIDs with task_tgid_nr()
  UPSTREAM: vmlinux.lds.h: allow arch specific handling of ro_after_init data section
  UPSTREAM: x86/vdso: Mark the vDSO code read-only after init
  UPSTREAM: lkdtm: Verify that '__ro_after_init' works correctly
  UPSTREAM: arch: Introduce post-init read-only memory
  BACKPORT: x86/mm: Always enable CONFIG_DEBUG_RODATA and remove the Kconfig option
  UPSTREAM: mm/init: Add 'rodata=off' boot cmdline parameter to disable read-only kernel mappings
  UPSTREAM: asm-generic: Consolidate mark_rodata_ro()
  UPSTREAM: arm64: make sys_call_table const
  ANDROID: fs: Fix for a (allmod) build failure.
  ANDROID: fs: FS tracepoints to track IO.
  Android: Fix build breakages.
  net: inet: diag: expose the socket mark to privileged processes.
  net: diag: make udp_diag_destroy work for mapped addresses.
  net: diag: support SOCK_DESTROY for UDP sockets
  net: diag: allow socket bytecode filters to match socket marks
  net: diag: slightly refactor the inet_diag_bc_audit error checks.
  net: diag: Add support to filter on device index
  BACKPORT: x86: fix SMAP in 32-bit environments
  UPSTREAM: ARM: alignment: fix alignment handling for uaccess changes
  UPSTREAM: ARM: software-based priviledged-no-access support
  UPSTREAM: ARM: 8431/1: fix alignement of __bug_table section entries
  UPSTREAM: ARM: domains: add memory dependencies to get_domain/set_domain
  UPSTREAM: ARM: domains: thread_info.h no longer needs asm/domains.h
  UPSTREAM: ARM: uaccess: fix undefined instruction on ARMv7M/noMMU
  UPSTREAM: ARM: entry: provide uaccess assembly macro hooks
  UPSTREAM: ARM: entry: get rid of multiple macro definitions
  UPSTREAM: ARM: 8266/1: Remove early stack deallocation from restore_user_regs
  UPSTREAM: ARM: mm: improve do_ldrd_abort macro
  UPSTREAM: ARM: swpan: fix nwfpe for uaccess changes
  UPSTREAM: ARM: domains: remove DOMAIN_TABLE
  UPSTREAM: ARM: domains: keep vectors in separate domain
  UPSTREAM: ARM: domains: get rid of manager mode for user domain
  UPSTREAM: ARM: domains: move initial domain setting value to asm/domains.h
  UPSTREAM: ARM: redo TTBR setup code for LPAE
  UPSTREAM: ARM: 8350/1: proc-feroceon: Fix feroceon_proc_info macro
  UPSTREAM: ARM: 8314/1: replace PROCINFO embedded branch with relative offset
  UPSTREAM: ARM: 8196/1: vfp: Workaround bad MVFR1 register on some Kraits
  UPSTREAM: ARM: domains: provide domain_mask()
  UPSTREAM: ARM: domains: switch to keeping domain value in register
  UPSTREAM: all arches, signal: move restart_block to struct task_struct
  UPSTREAM: ARM: 8494/1: mm: Enable PXN when running non-LPAE kernel on LPAE processor
  BACKPORT: ARM: 8235/1: Support for the PXN CPU feature on ARMv7
  UPSTREAM: perf: Fix race in swevent hash
  ANDROID: dm: Fix symbol exports for dm target callbacks
  ANDROID: dm: android-verity: Allow android-verity to be compiled as an independent module
  FROMLIST: pstore: drop pmsg bounce buffer
  UPSTREAM: usercopy: remove page-spanning test for now
  UPSTREAM: usercopy: force check_object_size() inline
  BACKPORT: usercopy: fold builtin_const check into inline function
  UPSTREAM: x86/uaccess: force copy_*_user() to be inlined
  UPSTREAM: HID: core: prevent out-of-bound readings
  UPSTREAM: sg: Fix double-free when drives detach during SG_IO
  UPSTREAM: tty: Prevent ldisc drivers from re-using stale tty fields
  BACKPORT: netfilter: nfnetlink: correctly validate length of batch messages
  cpuset: Make cpusets restore on hotplug
  UPSTREAM: Make the hardened user-copy code depend on having a hardened allocator
  UPSTREAM: usercopy: fix overlap check for kernel text
  UPSTREAM: usercopy: avoid potentially undefined behavior in pointer math
  UPSTREAM: mm: SLUB hardened usercopy support
  UPSTREAM: mm/slub: support left redzone
  UPSTREAM: mm: SLAB hardened usercopy support
  BACKPORT: arm64/uaccess: Enable hardened usercopy
  BACKPORT: ARM: uaccess: Enable hardened usercopy
  UPSTREAM: ARM: fix uaccess_with_memcpy() with SW_DOMAIN_PAN
  BACKPORT: ARM: uaccess: provide uaccess_save_and_enable() and uaccess_restore()
  BACKPORT: x86/uaccess: Enable hardened usercopy
  BACKPORT: mm: Hardened usercopy
  BACKPORT: mm: Implement stack frame object validation
  UPSTREAM: mm: Add is_migrate_cma_page
  UPSTREAM: unsafe_[get|put]_user: change interface to use a error target label
  BACKPORT: arm64: mm: fix location of _etext
  BACKPORT: ARM: 8583/1: mm: fix location of _etext
  UPSTREAM: Use the new batched user accesses in generic user string handling
  BACKPORT: Add 'unsafe' user access functions for batched accesses
  UPSTREAM: x86: reorganize SMAP handling in user space accesses
  UPSTREAM: x86/uaccess: Tell the compiler that uaccess is unlikely to fault
  UPSTREAM: x86/uaccess: fix sparse errors
  UPSTREAM: tcp: fix use after free in tcp_xmit_retransmit_queue()
  Don't show empty tag stats for unprivileged uids
  ext4 crypto: fix bugs in ext4_encrypted_zeroout()
  ext4 crypto: replace some BUG_ON()'s with error checks
  ext4 crypto: ext4_page_crypto() doesn't need a encryption context
  ext4: optimize ext4_writepage() for attempted 4k delalloc writes
  ext4 crypto: fix memory leak in ext4_bio_write_page()
  ext4: disable zeroout optimization when encryption is enabled
  ext4 crypto: remove duplicate header file
  ext4 crypto: fix spelling typo in comment
  ext4 crypto: exit cleanly if ext4_derive_key_aes() fails
  ext4 crypto: check for too-short encrypted file names
  ext4 crypto: use a jbd2 transaction when adding a crypto policy
  ext4 crypto: fail the mount if blocksize != pagesize
  ext4 crypto: fix sparse warnings in fs/ext4/ioctl.c
  ext4 crypto: fix ext4_get_crypto_ctx()'s calling convention in ext4_decrypt_one
  ext4 crypto: allocate bounce pages using GFP_NOWAIT
  ext4 crypto: release crypto resource on module exit
  ext4 crypto: handle unexpected lack of encryption keys
  ext4 crypto: allocate the right amount of memory for the on-disk symlink
  ext4 crypto: clean up error handling in ext4_fname_setup_filename
  ext4 crypto: policies may only be set on directories
  ext4 crypto: enforce crypto policy restrictions on cross-renames
  ext4 crypto: encrypt tmpfile located in encryption protected directory
  ext4 crypto: make sure the encryption info is initialized on opendir(2)
  ext4 crypto: set up encryption info for new inodes in ext4_inherit_context()
  ext4 crypto: fix memory leaks in ext4_encrypted_zeroout
  ext4 crypto: use per-inode tfm structure
  ext4 crypto: require CONFIG_CRYPTO_CTR if ext4 encryption is enabled
  ext4 crypto: shrink size of the ext4_crypto_ctx structure
  ext4 crypto: get rid of ci_mode from struct ext4_crypt_info
  ext4 crypto: use slab caches
  ext4: clean up superblock encryption mode fields
  ext4 crypto: reorganize how we store keys in the inode
  ext4 crypto: separate kernel and userspace structure for the key
  ext4 crypto: don't allocate a page when encrypting/decrypting file names
  ext4 crypto: optimize filename encryption
  ext4 crypto: Do not select from EXT4_FS_ENCRYPTION
  ext4 crypto: add padding to filenames before encrypting
  ext4 crypto: simplify and speed up filename encryption
  ext4 crypto: enable encryption feature flag
  ext4 crypto: Add symlink encryption
  ext4 crypto: enable filename encryption
  ext4 crypto: filename encryption modifications
  ext4 crypto: partial update to namei.c for fname crypto
  ext4 crypto: insert encrypted filenames into a leaf directory block
  ext4 crypto: teach ext4_htree_store_dirent() to store decrypted filenames
  ext4 crypto: filename encryption facilities
  ext4 crypto: implement the ext4 decryption read path
  ext4 crypto: implement the ext4 encryption write path
  ext4 crypto: inherit encryption policies on inode and directory create
  ext4 crypto: enforce context consistency
  ext4 crypto: add encryption key management facilities
  ext4 crypto: add ext4 encryption facilities
  ext4 crypto: add encryption policy and password salt support
  ext4 crypto: add encryption xattr support
  ext4 crypto: export ext4_empty_dir()
  ext4 crypto: add ext4 encryption Kconfig
  ext4 crypto: reserve codepoints used by the ext4 encryption feature
  ext4 crypto: add ext4_mpage_readpages()
  UPSTREAM: [media] xc2028: unlock on error in xc2028_set_config()
  UPSTREAM: [media] xc2028: avoid use after free
  ANDROID: base-cfg: enable SECCOMP config
  UPSTREAM: capabilities: ambient capabilities
  Linux 3.18.44
  x86/cpu: Fix SMAP check in PVOPS environments
  mm: remove gup_flags FOLL_WRITE games from __get_user_pages()
  Linux 3.18.43
  openrisc: fix the fix of copy_from_user()
  ARM: orion: convert the irq_reg_{readl,writel} calls to the new API
  avr32: fix 'undefined reference to `___copy_from_user'
  hexagon: Fix build failures in linux-next
  block: Do a full clone when splitting discard bios
  btrfs: ensure that file descriptor used with subvol ioctls is a dir
  fix fault_in_multipages_...() on architectures with no-op access_ok()
  ocfs2: fix start offset to ocfs2_zero_range_for_truncate()
  fanotify: fix list corruption in fanotify_get_response()
  fsnotify: add a way to stop queueing events on group shutdown
  autofs: use dentry flags to block walks during expire
  autofs races
  ocfs2/dlm: fix race between convert and migration
  can: flexcan: fix resume function
  fix minor infoleak in get_user_ex()
  avr32: fix copy_from_user()
  microblaze: fix __get_user()
  microblaze: fix copy_from_user()
  m32r: fix __get_user()
  blackfin: fix copy_from_user()
  sparc32: fix copy_from_user()
  sh: fix copy_from_user()
  sh64: failing __get_user() should zero
  score: fix copy_from_user() and friends
  score: fix __get_user/get_user
  s390: get_user() should zero on failure
  ppc32: fix copy_from_user()
  parisc: fix copy_from_user()
  openrisc: fix copy_from_user()
  mn10300: copy_from_user() should zero on access_ok() failure...
  mn10300: failing __get_user() and get_user() should zero
  mips: copy_from_user() must zero the destination on access_ok() failure
  ARC: uaccess: get_user to zero out dest in cause of fault
  metag: copy_from_user() should zero the destination on access_ok() failure
  ia64: copy_from_user() should zero the destination on access_ok() failure
  hexagon: fix strncpy_from_user() error return
  frv: fix clear_user()
  asm-generic: make get_user() clear the destination on errors
  asm-generic: {get,put}_user ptr argument evaluate only 1 time
  nl80211: validate number of probe response CSA counters
  MIPS: Add a missing ".set pop" in an early commit
  genirq: Provide irq_gc_{lock_irqsave,unlock_irqrestore}() helpers
  genirq: Generic chip: Change irq_reg_{readl,writel} arguments
  MIPS: paravirt: Fix undefined reference to smp_bootstrap
  crypto: arm64/aes-ctr - fix NULL dereference in tail processing
  crypto: skcipher - Fix blkcipher walk OOM crash
  asm-generic: make copy_from_user() zero the destination properly
  arm64: spinlocks: implement smp_mb__before_spinlock() as smp_mb()
  kvm-arm: Unmap shadow pagetables properly
  ALSA: timer: Fix zero-division by continue of uninitialized instance
  ALSA: timer: Call notifier in the same spinlock
  xhci: fix null pointer dereference in stop command timeout function
  powerpc/mm: Don't alias user region to other regions below PAGE_OFFSET
  crypto: cryptd - initialize child shash_desc on import
  ipv6: addrconf: fix dev refcont leak when DAD failed
  Btrfs: remove root_log_ctx from ctx list before btrfs_sync_log returns
  Btrfs: add missing blk_finish_plug in btrfs_sync_log()
  iio: accel: kxsd9: Fix scaling bug
  ALSA: fireworks: accessing to user space outside spinlock
  ARM: imx6: add missing BM_CLPCR_BYPASS_PMIC_READY setting for imx6sx
  ALSA: usb-audio: Add sample rate inquiry quirk for B850V3 CP2114
  ALSA: timer: fix NULL pointer dereference on memory allocation failure
  ALSA: timer: fix division by zero after SNDRV_TIMER_IOCTL_CONTINUE
  ARM: kirkwood: ib62x0: fix size of u-boot environment partition
  bus: arm-ccn: Fix XP watchpoint settings bitmask
  bus: arm-ccn: Do not attempt to configure XPs for cycle counter
  Revert "wext: Fix 32 bit iwpriv compatibility issue with 64 bit Kernel"
  ARM: OMAP3: hwmod data: Add sysc information for DSI
  ovl: fix workdir creation
  MIPS: KVM: Check for pfn noslot case
  Linux 3.18.42
  Revert "ARC: mm: don't loose PTE_SPECIAL in pte_modify()"
  x86/AMD: Apply erratum 665 on machines without a BIOS fix
  x86/paravirt: Do not trace _paravirt_ident_*() functions
  ovl: listxattr: use strnlen()
  ovl: remove posix_acl_default from workdir
  kernfs: don't depend on d_find_any_alias() when generating notifications
  dm crypt: fix free of bad values after tfm allocation failure
  dm crypt: fix error with too large bios
  NFSv4.x: Fix a refcount leak in nfs_callback_up_net
  xfs: fix superblock inprogress check
  iio: accel: kxsd9: Fix raw read return
  staging: comedi: ni_mio_common: fix AO inttrig backwards compatibility
  staging: comedi: ni_mio_common: fix wrong insn_write handler
  staging: comedi: daqboard2000: bug fix board type matching code
  cpuset: make sure new tasks conform to the current config of the cpuset
  ovl: don't copy up opaqueness
  ext4: validate that metadata blocks do not overlap superblock
  [PATCH] arm: fix handling of F_OFD_... in oabi_fcntl64()
  Linux 3.18.41
  PCI: Limit config space size for Netronome NFP4000
  PCI: Add Netronome NFP4000 PF device ID
  PCI: Limit config space size for Netronome NFP6000 family
  PCI: Add Netronome vendor and device IDs
  PCI: Support PCIe devices with short cfg_size
  net: fec: fix NULL pointer dereference in fec_enet_timeout_work
  fs/seq_file: fix out-of-bounds read
  clocksource/drivers/sun4i: Clear interrupts after stopping timer in probe function
  dm flakey: fix reads to be issued if drop_writes configured
  xenbus: don't look up transaction IDs for ordinary writes
  timekeeping: Cap array access in timekeeping_debug
  ubifs: Fix assertion in layout_in_gaps()
  Input: tegra-kbc - fix inverted reset logic
  drm: Reject page_flip for !DRIVER_MODESET
  parisc: Fix order of EREFUSED define in errno.h
  ARC: export __udivdi3 for modules
  ARC: Support syscall ABI v4
  ARC: use correct offset in pt_regs for saving/restoring user mode r25
  ARCv2: STAR 9000808988: signals involving Delay Slot
  Input: i8042 - set up shared ps2_cmd_mutex for AUX ports
  drm/radeon: fix radeon_move_blit on 32bit systems
  gpio: Fix OF build problem on UM
  bcache: RESERVE_PRIO is too small by one when prio_buckets() is a power of two.
  bcache: register_bcache(): call blkdev_put() when cache_alloc() fails
  drm/radeon: only apply the SS fractional workaround to RS[78]80
  drm/radeon: don't use fractional dividers on RS[78]80 if SS is enabled
  uprobes: Fix the memcg accounting
  ARC: Elide redundant setup of DMA callbacks
  ARC: Call trace_hardirqs_on() before enabling irqs
  cdc-acm: fix wrong pipe type on rx interrupt xfers
  drm/i915: fix aliasing_ppgtt leak
  s390/dasd: fix hanging device after clear subchannel
  crypto: caam - fix non-hmac hashes
  aacraid: Check size values after double-fetch from user
  mac80211: fix purging multicast PS buffer queue
  kernel: kcov: include missing header for ‘struct task_struct’
  DEBUG: cpufreq: fix cpu_capacity tracing build for non-smp systems
  arm: Fix #if/#ifdef typo in topology.c
  arm: Fix build error "conflicting types for 'scale_cpu_capacity'"
  UPSTREAM: af_unix: Guard against other == sk in unix_dgram_sendmsg
  UPSTREAM: ALSA: timer: Fix race among timer ioctls
  tcp: make challenge acks less predictable
  powerpc/eeh: eeh_pci_enable(): fix checking of post-request state
  ipv6: fix endianness error in icmpv6_err
  net: ipv6: Fix ping to link-local addresses.
  UPSTREAM: Bluetooth: Fix potential NULL dereference in RFCOMM bind callback
  BACKPORT: tcp: make challenge acks less predictable
  BACKPORT: ecryptfs: fix handling of directory opening
  ANDROID: net: fib: remove duplicate assignment
  arm64: defconfig: add few misc configs for development/debugging/testing
  BACKPORT: kernel: add kcov code coverage
  vmstat: make vmstat_updater deferrable again and shut down on idle
  UPSTREAM: cpuidle: Clean up fallback handling in cpuidle_idle_call()
  UPSTREAM: PM / sleep: Re-implement suspend-to-idle handling
  arch_timer: add error handling when the MPM global timer is cleared
  cpufreq: introduce cpufreq_driver_is_slow
  arm: Enable max freq invariant scheduler load-tracking and capacity support
  arm: Cpu invariant scheduler load-tracking and capacity support
  arm: topology: Define TC2 energy and provide it to the scheduler
  arm: Update arch_scale_cpu_capacity() to reflect change to define
  arm: Enable frequency invariant scheduler load-tracking support
  arm64, topology: Updates to use DT bindings for EAS costing data
  Documentation: DT bindings for energy model cost data required by EAS
  cpufreq: Max freq invariant scheduler load-tracking and cpu capacity support
  arm64: Enable frequency invariant scheduler load-tracking support
  cpufreq: Frequency invariant scheduler load-tracking support
  cgroup: reorder SUBSYS(blkio) in cgroup_subsys.h
  cpumask, nodemask: implement cpumask/nodemask_pr_args()
  Implement memory_state_time, used by qcom,cpubw
  power: Refactors the code which prints suspend time.
  Linux 3.18.40
  perf/x86: Fix undefined shift on 32-bit kernels
  nfsd: check permissions when setting ACLs
  posix_acl: Add set_posix_acl
  powerpc/pseries: Fix PCI config address for DDW
  powerpc/iommu: Remove the dependency on EEH struct in DDW mechanism
  block: fix use-after-free in seq file
  metag: Fix __cmpxchg_u32 asm constraint for CMP
  ALSA: hda: add AMD Bonaire AZ PCI ID with proper driver caps
  sysv, ipc: fix security-layer leaking
  mm/hugetlb: avoid soft lockup in set_max_huge_pages()
  dm flakey: error READ bios during the down_interval
  ftrace/recordmcount: Work around for addition of metag magic but not relocations
  balloon: check the number of available pages in leak balloon
  x86/syscalls/64: Add compat_sys_keyctl for 32-bit userspace
  ALSA: hda/realtek: Enable HP amp and mute LED on HP Folio 9480m [v3]
  drm/nouveau/fbcon: fix font width not divisible by 8
  ubi: Make volume resize power cut aware
  ubi: Fix race condition between ubi device creation and udev
  fuse: fix wrong assignment of ->flags in fuse_send_init()
  fuse: fuse_flush must check mapping->flags for errors
  fuse: fsync() did not return IO errors
  ARC: mm: don't loose PTE_SPECIAL in pte_modify()
  drm/radeon: fix firmware info version checks
  KEYS: 64-bit MIPS needs to use compat_sys_keyctl for 32-bit userspace
  KVM: PPC: Book3S HV: Save/restore TM state in H_CEDE
  KVM: PPC: Book3S HV: Pull out TM state save/restore into separate procedures
  CIFS: Fix a possible invalid memory access in smb2_query_symlink()
  fs/cifs: make share unaccessible at root level mountable
  Input: i8042 - break load dependency between atkbd/psmouse and i8042
  Documentation/module-signing.txt: Note need for version info if reusing a key
  module: Invalidate signatures on force-loaded modules
  net/irda: fix NULL pointer dereference on memory allocation failure
  fs/dcache.c: avoid soft-lockup in dput()
  dcache: let the dentry count go down to zero without taking d_lock
  nfs: don't create zero-length requests
  gpio: intel-mid: Remove potentially harmful code
  iscsi-target: Fix panic when adding second TCP connection to iSCSI session
  audit: fix a double fetch in audit_log_single_execve_arg()
  Fix broken audit tests for exec arg len
  audit: Fix check of return value of strnlen_user()
  cifs: fix crash due to race in hmac(md5) handling
  target: Fix race between iscsi-target connection shutdown + ABORT_TASK
  target: Fix missing complete during ABORT_TASK + CMD_T_FABRIC_STOP
  mtd: nand: fix bug writing 1 byte less than page size
  arm64: debug: unmask PSTATE.D earlier
  crypto: scatterwalk - Fix test in scatterwalk_done
  Bluetooth: Fix l2cap_sock_setsockopt() with optname BT_RCVMTU
  powerpc/tm: Fix stack pointer corruption in __tm_recheckpoint()
  powerpc/tm: Avoid SLB faults in treclaim/trecheckpoint when RI=0
  ext4: short-cut orphan cleanup on error
  drm/radeon: support backlight control for UNIPHY3
  KVM: nVMX: Fix memory corruption when using VMCS shadowing
  s390/mm: fix gmap tlb flush issues
  cifs: Check for existing directory when opening file with O_CREAT
  [media] media: usbtv: prevent access to free'd resources
  Bluetooth: Add support of 13d3:3490 AR3012 device
  Bluetooth: Add USB ID 13D3:3487 to ath3k
  [media] Fix RC5 decoding with Fintek CIR chipset
  [media] media: dvb_ringbuffer: Add memory barriers
  drm/radeon: Poll for both connect/disconnect on analog connectors
  drm/radeon: add a delay after ATPX dGPU power off
  ext4: validate s_reserved_gdt_blocks on mount
  ARM: dts: sunxi: Add a startup delay for fixed regulator enabled phys
  ext4: don't call ext4_should_journal_data() on the journal inode
  ext4: fix deadlock during page writeback
  ext4: check for extents that wrap around
  hp-wmi: Fix wifi cannot be hard-unblocked
  serial: samsung: Fix ERR pointer dereference on deferred probe
  of: fix memory leak related to safe_name()
  crypto: gcm - Filter out async ghash if necessary
  Update my main e-mails at the Kernel tree
  gpio: pca953x: Fix NBANK calculation for PCA9536
  PCI: Mark Atheros AR9485 and QCA9882 to avoid bus reset
  netlabel: add address family checks to netlbl_{sock,req}_delattr()
  s5p-mfc: Add release callback for memory region devs
  s5p-mfc: Set device name for reserved memory region devs
  HID: uhid: fix timeout when probe races with IO
  Revert "drm/i915/ilk: Don't disable SSC source if it's in use"
  Linux 3.18.39
  x86/quirks: Reintroduce scanning of secondary buses
  x86/quirks: Apply nvidia_bugs quirk only on root bus
  pps: do not crash when failed to register
  radix-tree: fix radix_tree_iter_retry() for tagged iterators.
  libceph: apply new_state before new_up_client on incrementals
  libceph: set 'exists' flag for newly up osd
  ovl: verify upper dentry in ovl_remove_and_whiteout()
  tty/vt/keyboard: fix OOB access in do_compute_shiftstate()
  media: fix airspy usb probe error path
  ALSA: hda: add AMD Stoney PCI ID with proper driver caps
  ALSA: hda: add new AMD PCI IDs with proper driver caps
  ALSA: hda - fix use-after-free after module unload
  posix_cpu_timer: Exit early when process has been reaped
  x86/quirks: Add early quirk to reset Apple AirPort card
  net: mvneta: set real interrupt per packet for tx_done
  ALSA: ctl: Stop notification after disconnection
  ALSA: hda/realtek - add new pin definition in alc225 pin quirk table
  ovl: Copy up underlying inode's ->i_mode to overlay inode
  ovl: handle ATTR_KILL*
  drm/ttm: Make ttm_bo_mem_compat available
  Input: xpad - validate USB endpoint count during probe
  ARM: mvebu: fix HW I/O coherency related deadlocks
  netfilter: x_tables: speed up jump target validation
  Revert "sparc64: Fix numa node distance initialization"
  Revert "MIPS: Reserve nosave data for hibernation"
  Linux 3.18.38
  UPSTREAM: ppp: defer netns reference release for ppp channel
  cpuset: Fix allow_attach hook for cpusets on android.
  cpuset: Add allow_attach hook for cpusets on android.
  UPSTREAM: KEYS: Fix ASN.1 indefinite length object parsing
  UPSTREAM: ASN.1: Fix non-match detection failure on data overrun
  ANDROID: sdcardfs: fix itnull.cocci warnings
  ANDROID: dm: android-verity: Verify header before fetching table
  4.1.28 Fix bad backport of 8f182270dfec "mm/swap.c: flush lru pvecs on compound page arrival"
  powerpc: Fix build break due to missing PPC_FEATURE2_HTM_NOSC
  ecryptfs: don't allow mmap when the lower fs doesn't support it
  xen/acpi: allow xen-acpi-processor driver to load on Xen 4.7
  xenbus: don't bail early from xenbus_dev_request_and_reply()
  Revert "ecryptfs: forbid opening files without mmap handler"
  xenbus: don't BUG() on user mode induced condition
  xenbus: Add proper handling of XS_ERROR from Xenbus for transactions.
  MIPS: Fix page table corruption on THP permission changes.
  qeth: delete napi struct when removing a qeth device
  ALSA: timer: Fix negative queue usage by racy accesses
  block: fix use-after-free in sys_ioprio_get()
  x86/amd_nb: Fix boot crash on non-AMD systems
  ALSA: au88x0: Fix calculation in vortex_wtdma_bufshift()
  ipr: Clear interrupt on croc/crocodile when running with LSI
  ALSA: echoaudio: Fix memory allocation
  Linux 3.18.37
  tmpfs: fix regression hang in fallocate undo
  netfilter: x_tables: introduce and use xt_copy_counters_from_user
  netfilter: x_tables: do compat validation via translate_table
  netfilter: x_tables: xt_compat_match_from_user doesn't need a retval
  netfilter: ip6_tables: simplify translate_compat_table args
  netfilter: ip_tables: simplify translate_compat_table args
  netfilter: arp_tables: simplify translate_compat_table args
  netfilter: x_tables: don't reject valid target size on some architectures
  netfilter: x_tables: validate all offsets and sizes in a rule
  netfilter: x_tables: check for bogus target offset
  netfilter: x_tables: check standard target size too
  netfilter: x_tables: add compat version of xt_check_entry_offsets
  netfilter: x_tables: assert minimum target size
  netfilter: x_tables: kill check_entry helper
  netfilter: x_tables: add and use xt_check_entry_offsets
  netfilter: x_tables: validate targets of jumps
  netfilter: x_tables: don't move to non-existent next rule
  netfilter: x_tables: fix unconditional helper
  netfilter: x_tables: make sure e->next_offset covers remaining blob size
  netfilter: x_tables: validate e->target_offset early
  MIPS: Fix 64k page support for 32 bit kernels.
  sparc64: Fix return from trap window fill crashes.
  sparc: Harden signal return frame checks.
  sparc64: Take ctx_alloc_lock properly in hugetlb_setup().
  sparc/PCI: Fix for panic while enabling SR-IOV
  sparc64: Fix sparc64_set_context stack handling.
  sparc64: Fix numa node distance initialization
  sparc64: Fix bootup regressions on some Kconfig combinations.
  sparc: Fix system call tracing register handling.
  tcp: record TLP and ER timer stats in v6 stats
  sfc: on MC reset, clear PIO buffer linkage in TXQs
  tuntap: correctly wake up process during uninit
  netlink: Fix dump skb leak/double free
  xfs: print name of verifier if it fails
  pipe: limit the per-user amount of pages allocated in pipes
  MIPS: Reserve nosave data for hibernation
  serial: samsung: Reorder the sequence of clock control when call s3c24xx_serial_set_termios()
  tty: vt, return error when con_startup fails
  Btrfs: don't use src fd for printk
  drm/radeon: fix PLL sharing on DCE6.1 (v2)
  tcp: refresh skb timestamp at retransmit time
  net: fix a kernel infoleak in x25 module
  net: bridge: fix old ioctl unlocked net device walk
  VSOCK: do not disconnect socket when peer has shutdown SEND only
  net: fix infoleak in rtnetlink
  net: fix infoleak in llc
  net: fec: only clear a queue's work bit if the queue was emptied
  netem: Segment GSO packets on enqueue
  sch_dsmark: update backlog as well
  sch_htb: update backlog as well
  net_sched: update hierarchical backlog too
  net_sched: introduce qdisc_replace() helper
  bpf: fix double-fdput in replace_map_fd_with_map_ptr()
  net/mlx4_en: fix spurious timestamping callbacks
  atl2: Disable unimplemented scatter/gather feature
  net: sched: do not requeue a NULL skb
  packet: fix heap info leak in PACKET_DIAG_MCLIST sock_diag interface
  route: do not cache fib route info on local routes with oif
  decnet: Do not build routes to devices without decnet private data.
  batman-adv: Reduce refcnt of removed router when updating route
  batman-adv: Fix broadcast/ogm queue limit on a removed interface
  batman-adv: Check skb size before using encapsulated ETH+VLAN header
  proc: prevent accessing /proc/<PID>/environ until it's ready
  Input: zforce_ts - fix dual touch recognition
  lpfc: fix misleading indentation
  clk: qcom: msm8960: Fix ce3_src register offset
  clk: versatile: sp810: support reentrance
  clk: qcom: msm8960: fix ce3_core clk enable register
  clk: rockchip: free memory in error cases when registering clock branches
  nbd: ratelimit error msgs after socket close
  ipvs: correct initial offset of Call-ID header search in SIP persistence engine
  megaraid_sas: add missing curly braces in ioctl handler
  sunrpc/cache: drop reference when sunrpc_cache_pipe_upcall() detects a race
  jme: Fix device PM wakeup API usage
  jme: Do not enable NIC WoL functions on S0
  ARM: OMAP3: Add cpuidle parameters table for omap3430
  perf stat: Document --detailed option
  perf tools: handle spaces in file names obtained from /proc/pid/maps
  ext4: fix NULL pointer dereference in ext4_mark_inode_dirty()
  x86/mm/kmmio: Fix mmiotrace for hugepages
  drivers/misc/ad525x_dpot: AD5274 fix RDAC read back errors
  rtc: max77686: Properly handle regmap_irq_get_virq() error code
  rtc: vr41xx: Wire up alarm_irq_enable
  rtc: hym8563: fix invalid year calculation
  misc/bmp085: Enable building as a module
  fbdev: da8xx-fb: fix videomodes of lcd panels
  paride: make 'verbose' parameter an 'int' again
  regulator: s5m8767: fix get_register() error handling
  spi/rockchip: Make sure spi clk is on in rockchip_spi_set_cs
  efi: Expose non-blocking set_variable() wrapper to efivars
  ASoC: ssm4567: Reset device before regcache_sync()
  ASoC: s3c24xx: use const snd_soc_component_driver pointer
  i2c: exynos5: Fix possible ABBA deadlock by keeping I2C clock prepared
  pinctrl: single: Fix pcs_parse_bits_in_pinctrl_entry to use __ffs than ffs
  xen kconfig: don't "select INPUT_XEN_KBDDEV_FRONTEND"
  Input: pmic8xxx-pwrkey - fix algorithm for converting trigger delay
  powerpc: Update TM user feature bits in scan_features()
  futex: Acknowledge a new waiter in counter before plist
  mac80211: fix unnecessary frame drops in mesh fwding
  [media] v4l: vsp1: Set the SRU CTRL0 register when starting the stream
  pinctrl: nomadik: fix pull debug print inversion
  ip6_tunnel: set rtnl_link_ops before calling register_netdevice
  ipv6: l2tp: fix a potential issue in l2tp_ip6_recv
  ipv4: l2tp: fix a potential issue in l2tp_ip_recv
  qmi_wwan: add "D-Link DWM-221 B1" device id
  xfrm: Fix crash observed during device unregistration and decryption
  ppp: take reference on channels netns
  ipv4: fix broadcast packets reception
  net: bcmgenet: fix dma api length mismatch
  qlge: Fix receive packets drop.
  ppp: ensure file->private_data can't be overridden
  ath9k: fix buffer overrun for ar9287
  farsync: fix off-by-one bug in fst_add_one
  mlx4: add missing braces in verify_qp_parameters
  net: Fix use after free in the recvmmsg exit path
  ipv4: Don't do expensive useless work during inetdev destroy.
  qlcnic: Fix mailbox completion handling during spurious interrupt
  qlcnic: Remove unnecessary usage of atomic_t
  sh_eth: fix RX buffer size alignment
  sh_eth: Fix DMA-API usage for RX buffers
  sh_eth: Remove redundant alignment adjustment
  sh_eth: fix NULL pointer dereference in sh_eth_ring_format()
  udp6: fix UDP/IPv6 encap resubmit path
  cdc_ncm: toggle altsetting to force reset before setup
  ipv6: re-enable fragment header matching in ipv6_find_hdr
  qmi_wwan: add Sierra Wireless EM74xx device ID
  sctp: lack the check for ports in sctp_v6_cmp_addr
  net: qca_spi: clear IFF_TX_SKB_SHARING
  net: qca_spi: Don't clear IFF_BROADCAST
  net: jme: fix suspend/resume on JMC260
  tcp: convert cached rtt from usec to jiffies when feeding initial rto
  drm/radeon: add a dpm quirk for all R7 370 parts
  drm/radeon: add a dpm quirk for sapphire Dual-X R7 370 2G D5
  drm/udl: Use unlocked gem unreferencing
  mm: fix invalid node in alloc_migrate_target()
  ALSA: timer: Use mod_timer() for rearming the system timer
  PKCS#7: pkcs7_validate_trust(): initialize the _trusted output argument
  hwmon: (max1111) Return -ENODEV from max1111_read_channel if not instantiated
  mtip32xx: Fix broken service thread handling
  mtip32xx: Fix for rmmod crash when drive is in FTL rebuild
  8250: use callbacks to access UART_DLL/UART_DLM
  HID: logitech: fix Dual Action gamepad support
  ALSA: usb-audio: Fix double-free in error paths after snd_usb_add_audio_stream() call
  ALSA: usb-audio: Minor code cleanup in create_fixed_stream_quirk()
  ASoC: samsung: pass DMA channels as pointers
  PCI: Allow a NULL "parent" pointer in pci_bus_assign_domain_nr()
  PCI: Move domain assignment from arm64 to generic code
  locks: use file_inode()
  namespace: update event counter when umounting a deleted dentry
  NFS: Fix another OPEN_DOWNGRADE bug
  Revert "s390/kdump: Clear subchannel ID to signal non-CCW/SCSI IPL"
  arc: unwind: warn only once if DW2_UNWIND is disabled
  ARC: unwind: ensure that .debug_frame is generated (vs. .eh_frame)
  make nfs_atomic_open() call d_drop() on all ->open_context() errors.
  KVM: arm/arm64: Stop leaking vcpu pid references
  powerpc/tm: Always reclaim in start_thread() for exec() class syscalls
  fs/nilfs2: fix potential underflow in call to crc32_le
  mm, compaction: abort free scanner if split fails
  mm, compaction: skip compound pages by order in free scanner
  mm/swap.c: flush lru pvecs on compound page arrival
  mm: rename deactivate_page to deactivate_file_page
  tmpfs: don't undo fallocate past its last page
  File names with trailing period or space need special case conversion
  Fix reconnect to not defer smb3 session reconnect long after socket reconnect
  ALSA: dummy: Fix a use-after-free at closing
  ALSA: hda - remove one pin from ALC292_STANDARD_PINS
  HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands
  cifs: dynamic allocation of ntlmssp blob
  [SMB3] Fix sec=krb5 on smb3 mounts
  decode_negTokenInit had wrong calling sequence
  drm/nouveau: fix for disabled fbdev emulation
  Input: elantech - add more IC body types to the list
  Input: elantech - add new icbody type
  Input: wacom_w8001 - w8001_MAX_LENGTH should be 13
  xen/pciback: Fix conf_space read/write overlap check.
  can: fix oops caused by wrong rtnl dellink usage
  can: fix handling of unmodifiable configuration options fix
  UBIFS: Implement ->migratepage()
  mm: Export migrate_page_move_mapping and migrate_page_copy
  UBI: Fastmap: Fix race in ubi_eba_atomic_leb_change()
  pinctrl: single: Fix missing flush of posted write for a wakeirq
  pinctrl: imx: Do not treat a PIN without MUX register as an error
  arm64: mm: remove page_mapping check in __sync_icache_dcache
  tracing: Handle NULL formats in hold_module_trace_bprintk_format()
  can: at91_can: RX queue could get stuck at high bus load
  can: c_can: Update D_CAN TX and RX functions to 32 bit - fix Altera Cyclone access
  IB/mlx4: Properly initialize GRH TClass and FlowLabel in AHs
  btrfs: account for non-CoW'd blocks in btrfs_abort_transaction
  Btrfs: make btrfs_abort_transaction consider existence of new block groups
  KEYS: potential uninitialized variable
  kvm: Fix irq route entries exceeding KVM_MAX_IRQ_ROUTES
  base: make module_create_drivers_dir race-free
  nfsd4/rpc: move backchannel create logic into rpc code
  drm/i915/ilk: Don't disable SSC source if it's in use
  kernel/sysrq, watchdog, sched/core: Reset watchdog on all CPUs while processing sysrq-w
  kprobes/x86: Clear TF bit in fault on single-stepping
  spi: sunxi: fix transfer timeout
  spi: sun4i: allow transfers to set transmission speed
  spi: sun4i: fix FIFO limit
  MIPS: KVM: Fix modular KVM under QEMU
  drm/radeon: fix asic initialization for virtualized environments
  crypto: ux500 - memmove the right size
  ARM: 8579/1: mm: Fix definition of pmd_mknotpresent
  ARM: 8578/1: mm: ensure pmd_present only checks the valid bit
  scsi: fix race between simultaneous decrements of ->host_failed
  HID: elo: kill not flush the work
  cgroup: remove redundant cleanup in css_create
  percpu: fix synchronization between synchronous map extension and chunk destruction
  percpu: fix synchronization between chunk->map_extend_work and chunk destruction
  af_unix: Fix splice-bind deadlock
  VFS: AF_UNIX sockets should call mknod on the top layer only
  VFS: net/unix: d_backing_inode() annotations
  android-recommended.cfg: enable fstack-protector-strong
  sdcardfs: Truncate packages_gid.list on overflow
  UPSTREAM: cdc_ncm: do not call usbnet_link_change from cdc_ncm_bind
  ANDROID: dm: allow adb disable-verity only in userdebug
  ANDROID: dm: mount as linear target if eng build
  netfilter: xt_quota2: make quota2_log work well
  ANDROID: usb: gadget: fix skip Host MAC address reassignment
  UPSTREAM: USB: usbfs: fix potential infoleak in devio
  UPSTREAM: ALSA: timer: Fix leak in events via snd_timer_user_ccallback
  UPSTREAM: ALSA: timer: Fix leak in events via snd_timer_user_tinterrupt
  UPSTREAM: ALSA: timer: Fix leak in SNDRV_TIMER_IOCTL_PARAMS
  UPSTREAM: net: validate the range we feed to iov_iter_init() in sys_sendto/sys_recvfrom
  BACKPORT: net: fix infoleak in rtnetlink
  BACKPORT: netfilter: Kconfig: get rid of parens around depends on
  cpu: send KOBJ_ONLINE event when enabling cpus
  ANDROID: dm verity fec: initialize recursion level
  ANDROID: dm verity fec: fix RS block calculation
  ANDROID: dm verity fec: pack the fec_header structure
  Linux 3.18.36
  ecryptfs: forbid opening files without mmap handler
  proc: prevent stacking filesystems on top
  wext: Fix 32 bit iwpriv compatibility issue with 64 bit Kernel
  gpio: bcm-kona: fix bcm_kona_gpio_reset() warnings
  gpiolib: Fix NULL pointer deference
  fix d_walk()/non-delayed __d_free() race
  cpufreq: intel_pstate: Fix ->set_policy() interface for no_turbo
  of: fix autoloading due to broken modalias with no 'compatible'
  x86, build: copy ldlinux.c32 to image.iso
  mnt: fs_fully_visible test the proper mount for MNT_LOCKED
  mnt: If fs_fully_visible fails call put_filesystem.
  parisc: Fix pagefault crash in unaligned __get_user() call
  of: irq: fix of_irq_get[_byname]() kernel-doc
  ALSA: hda - Fix headset mic detection problem for Dell machine
  locking/ww_mutex: Report recursive ww_mutex locking early
  irqchip/gic-v3: Fix ICC_SGI1R_EL1.INTID decoding mask
  arm64: GICv3: introduce symbolic names for GICv3 ICC_SGI1R_EL1 fields
  KVM: x86: fix OOPS after invalid KVM_SET_DEBUGREGS
  KVM: irqfd: fix NULL pointer dereference in kvm_irq_map_gsi
  ARM: fix PTRACE_SETVFPREGS on SMP systems
  drm/nouveau/fbcon: fix out-of-bounds memory accesses
  drm/fb-helper: Propagate errors from initial config failure
  scsi: Add QEMU CD-ROM to VPD Inquiry Blacklist
  mac80211: mesh: flush mesh paths unconditionally
  mac80211_hwsim: Add missing check for HWSIM_ATTR_SIGNAL
  powerpc: Use privileged SPR number for MMCR2
  powerpc: Fix definition of SIAR and SDAR registers
  powerpc/pseries/eeh: Handle RTAS delay requests in configure_bridge
  crypto: ccp - Fix AES XTS error for request sizes above 4096
  scsi_lib: correctly retry failed zero length REQ_TYPE_FS commands
  crypto: public_key: select CRYPTO_AKCIPHER
  ANDROID: dm verity fec: add missing release from fec_ktype
  ANDROID: dm verity fec: limit error correction recursion
  ANDROID: restrict access to perf events
  FROMLIST: security,perf: Allow further restriction of perf_event_open
  BACKPORT: perf tools: Document the perf sysctls
  ANDROID: dm: use default verity public key
  Linux 3.18.35
  dma-debug: avoid spinlock recursion when disabling dma-debug
  UBI: Fix static volume checks when Fastmap is used
  UBI: fix missing brace control flow
  UBI: do propagate positive error codes up
  UBI: Fastmap: Ensure that only one fastmap work is scheduled
  xen/events: Don't move disabled irqs
  xen/x86: actually allocate legacy interrupts on PV guests
  x86/xen: Override ACPI IRQ management callback __acpi_unregister_gsi
  wait/ptrace: assume __WALL if the child is traced
  sunrpc: fix stripping of padded MIC tokens
  drm/i915: Don't leave old junk in ilk active watermarks on readout
  PM / sleep: Handle failures in device_suspend_late() consistently
  Input: uinput - handle compat ioctl for UI_SET_PHYS
  cifs: Create dedicated keyring for spnego operations
  ASoC: ak4642: Enable cache usage to fix crashes on resume
  ASoC: ak4642: Fix up max_register setting
  xfs: skip stale inodes in xfs_iflush_cluster
  xfs: fix inode validity check in xfs_iflush_cluster
  xfs: xfs_iflush_cluster fails to abort on error
  cpuidle: Fix cpuidle_state_is_coupled() argument in cpuidle_enter()
  remove directory incorrectly tries to set delete on close on non-empty directories
  fs/cifs: correctly to anonymous authentication for the NTLM(v2) authentication
  fs/cifs: correctly to anonymous authentication for the NTLM(v1) authentication
  fs/cifs: correctly to anonymous authentication for the LANMAN authentication
  fs/cifs: correctly to anonymous authentication via NTLMSSP
  drm/fb_helper: Fix references to dev->mode_config.num_connector
  MIPS: MSA: Fix a link error on `_init_msa_upper' with older GCC
  PCI: Disable all BAR sizing for devices with non-compliant BARs
  ring-buffer: Prevent overflow of size in ring_buffer_resize()
  ring-buffer: Use long for nr_pages to avoid overflow failures
  ring-buffer: Move recursive check to per_cpu descriptor
  ring-buffer: Remove duplicate use of '&' in recursive code
  ring-buffer: Add unlikelys to make fast path the default
  MIPS: math-emu: Fix jalr emulation when rd == $0
  powerpc/eeh: Restore initial state in eeh_pe_reset_and_recover()
  powerpc/eeh: Don't report error in eeh_pe_reset_and_recover()
  rtlwifi: pci: use dev_kfree_skb_irq instead of kfree_skb in rtl_pci_reset_trx_ring
  rtlwifi: Fix logic error in enter/exit power-save mode
  kbuild: move -Wunused-const-variable to W=1 warning level
  irqchip/gic: Ensure ordering between read of INTACK and shared data
  gcov: disable tree-loop-im to reduce stack usage
  MIPS: KVM: Fix timer IRQ race when writing CP0_Compare
  MIPS: KVM: Fix timer IRQ race when freezing timer
  crypto: caam - fix caam_jr_alloc() ret code
  mfd: omap-usb-tll: Fix scheduling while atomic BUG
  MIPS: Avoid using unwind_stack() with usermode
  MIPS: Don't unwind to user mode with EVA
  MIPS: Fix siginfo.h to use strict posix types
  can: fix handling of unmodifiable configuration options
  arm64: Ensure pmd_present() returns false after pmd_mknotpresent()
  mm: fix huge zero page accounting in smaps report
  ext4: silence UBSAN in ext4_mb_init()
  ext4: address UBSAN warning in mb_find_order_for_block()
  ext4: fix oops on corrupted filesystem
  ACPI / osi: Fix an issue that acpi_osi=!* cannot disable ACPICA internal strings
  mcb: Fixed bar number assignment for the gdd
  thunderbolt: Fix double free of drom buffer
  QE-UART: add "fsl,t1040-ucc-uart" to of_device_id
  MIPS: ath79: make bootconsole wait for both THRE and TEMT
  ext4: clean up error handling when orphan list is corrupted
  ext4: fix hang when processing corrupted orphaned inode list
  aacraid: Fix for aac_command_thread hang
  aacraid: Relinquish CPU during timeout wait
  arm/arm64: KVM: Enforce Break-Before-Make on Stage-2 page tables
  TTY: n_gsm, fix false positive WARN_ON
  btrfs: bugfix: handle FS_IOC32_{GETFLAGS,SETFLAGS,GETVERSION} in btrfs_ioctl
  pinctrl: exynos5440: Use off-stack memory for pinctrl_gpio_range
  ath9k: Fix LED polarity for some Mini PCI AR9220 MB92 cards.
  crypto: s5p-sss - Fix missed interrupts when working with 8 kB blocks
  crypto: s5p-sss - Remove useless hash interrupt handler
  PM / Runtime: Fix error path in pm_runtime_force_resume()
  powerpc/book3s64: Fix branching to OOL handlers in relocatable kernel
  Bluetooth: vhci: Fix race at creating hci device
  cpuidle: Indicate when a device has been unregistered
  Bluetooth: vhci: purge unhandled skbs
  Bluetooth: vhci: fix open_timeout vs. hdev race
  drm/gma500: Fix possible out of bounds read
  rtlwifi: rtl8723be: Fix module parameter initialization
  xfs: disallow rw remount on fs with unknown ro-compat features
  xfs: disallow ro->rw remount on norecovery mount
  ath5k: Change led pin configuration for compaq c700 laptop
  regulator: core: Use class device list for regulator_list in late init
  dmaengine: imx-sdma: switch to dynamic context mode after script loaded
  UPSTREAM: android: binder: fix binder mmap failures
  ANDROID: dm: fix signature verification flag
  ANDROID: usb: gadget: f_midi: set fi->f to NULL when free f_midi function
  UPSTREAM: procfs: fixes pthread cross-thread naming if !PR_DUMPABLE
  ANDROID: dm: use name_to_dev_t
  dm: fix dm_substitute_devices()
  fuse: Add support for d_canonical_path
  vfs: change d_canonical_path to take two paths
  Linux 3.18.34
  nf_conntrack: avoid kernel pointer value leak in slab name
  ocfs2: fix posix_acl_create deadlock
  ocfs2: revert using ocfs2_acl_chmod to avoid inode cluster lock hang
  ocfs2: dereferencing freed pointers in ocfs2_reflink()
  ocfs2: fix SGID not inherited issue
  workqueue: fix rebind bound workers warning
  tools lib traceevent: Do not reassign parg after collapse_tree()
  tools lib traceevent: Free filter tokens in process_filter()
  ALSA: usb-audio: Yet another Phoneix Audio device quirk
  ALSA: hda - Fix subwoofer pin on ASUS N751 and N551
  ALSA: hda - Fix white noise on Asus N750JV headphone
  ALSA: hda - Asus N750JV external subwoofer fixup
  drm/i915: Bail out of pipe config compute loop on LPT
  Input: max8997-haptic - fix NULL pointer dereference
  ALSA: hda - Fix white noise on Asus UX501VW headset
  ALSA: hda - Apply fix for white noise on Asus N550JV, too
  ALSA: hda - Fix bass pin fixup for ASUS N550JX
  get_rock_ridge_filename(): handle malformed NM entries
  parisc: fix a bug when syscall number of tracee is __NR_Linux_syscalls
  parisc: Fix ptrace syscall number and return value modification
  x86/tsc: Read all ratio bits from MSR_PLATFORM_INFO
  mm, cma: prevent nr_isolated_* counters from going negative
  propogate_mnt: Handle the first propogated copy being a slave
  fs/pnode.c: treat zero mnt_group_id-s as unequal
  x86/sysfb_efi: Fix valid BAR address range check
  crypto: hash - Fix page length clamping in hash walk
  ACPICA: Dispatcher: Update thread ID for recursive method calls
  MAINTAINERS: Remove asterisk from EFI directory names
  drm/radeon: make sure vertical front porch is at least 1
  tracing: Don't display trigger file for events that can't be enabled
  Minimal fix-up of bad hashing behavior of hash_64()
  powerpc: Fix bad inline asm constraint in create_zero_mask()
  Drivers: hv: vmbus: Fix signaling logic in hv_need_to_signal_on_read()
  Drivers: hv_vmbus: Fix signal to host condition
  Drivers: hv: ring_buffer.c: fix comment style
  atomic_open(): fix the handling of create_error
  EDAC: i7core, sb_edac: Don't return NOTIFY_BAD from mce_decoder callback
  ALSA: usb-audio: Quirk for yet another Phoenix Audio devices (v2)
  mm/huge_memory: replace VM_NO_THP VM_BUG_ON with actual VMA check
  IB/security: Restrict use of the write() interface
  ARM: SoCFPGA: Fix secondary CPU startup in thumb2 kernel
  drm/i915/ddi: Fix eDP VDD handling during booting and suspend/resume
  drm/i915: Read out the power sequencer port assignment on resume on vlv/chv
  cxl: Keep IRQ mappings on context teardown
  drm/dp/mst: Restore primary hub guid on resume
  drm/dp/mst: Get validated port ref in drm_dp_update_payload_part1()
  workqueue: fix ghost PENDING flag while doing MQ IO
  ALSA: hda - Add dock support for ThinkPad X260
  MD: make bio mergeable
  [media] v4l2-dv-timings.h: fix polarity for 4k formats
  efi: Fix out-of-bounds read in variable_matches()
  iio: ak8975: Fix NULL pointer exception on early interrupt
  regmap: spmi: Fix regmap_spmi_ext_read in multi-byte case
  ata: ahci-platform: Add ports-implemented DT bindings.
  libahci: save port map for forced port map
  regulator: s2mps11: Fix invalid selector mask and voltages for buck9
  ASoC: rt5640: Correct the digital interface data select
  timers: Use proper base migration in add_timer_on()
  Linux 3.18.33
  x86 EDAC, sb_edac.c: Repair damage introduced when "fixing" channel address
  x86/mm/xen: Suppress hugetlbfs in PV guests
  s390/hugetlb: add hugepages_supported define
  mm: hugetlb: allow hugepages_supported to be architecture specific
  drm: Loongson-3 doesn't fully support wc memory
  drm/radeon: forbid mapping of userptr bo through radeon device file
  ALSA: pcxhr: Fix missing mutex unlock
  futex: Handle unlock_pi race gracefully
  Revert "drm/radeon: disable runtime pm on PX laptops without dGPU power control"
  drm/radeon: add a quirk for a XFX R9 270X
  drm/radeon: add another R7 370 quirk
  drm/radeon: add quirk for ASUS R7 370
  drm/radeon: add quirk for MSI R7 370
  powerpc: Update cpu_user_features2 in scan_features()
  powerpc: scan_features() updates incorrect bits for REAL_LE
  powerpc: Disable CPU_FTR_TM if TM is disabled by firmware
  crypto: ccp - Prevent information leakage on export
  crypto: sha1-mb - use corrcet pointer while completing jobs
  nl80211: check netlink protocol in socket release notification
  Input: gtco - fix crash on detecting device without endpoints
  Revert "PM / OPP: Disable OPPs that aren't supported by the regulator"
  Linux 3.18.32
  tcp_cubic: do not set epoch_start in the future
  Btrfs: fix list transaction->pending_ordered corruption
  Correct backport of fa3c776 ("Thermal: Ignore invalid trip points")
  tcp_cubic: better follow cubic curve after idle period
  lib: lz4: fixed zram with lz4 on big endian machines
  dmaengine: dw: fix master selection
  ALSA: usb-audio: Skip volume controls triggers hangup on Dell USB Dock
  ALSA: hda - fix front mic problem for a HP desktop
  kvm: x86: do not leak guest xcr0 into host interrupt handlers
  parisc: Unbreak handling exceptions from kernel modules
  parisc: percpu: update comments referring to __get_cpu_var
  parisc: Fix kernel crash with reversed copy_from_user()
  parisc: Avoid function pointers for kernel exception routines
  gpio: pca953x: Use correct u16 value for register word write
  Btrfs: fix file/data loss caused by fsync after rename and new inode
  Btrfs: fix fsync after truncate when no_holes feature is enabled
  Btrfs: fix fsync xattr loss in the fast fsync path
  Btrfs: fix fsync data loss after append write
  assoc_array: don't call compare_object() on a node
  ALSA: usb-audio: Add a quirk for Plantronics BT300
  rbd: use GFP_NOIO consistently for request allocations
  compiler-gcc: disable -ftracer for __noclone functions
  compiler-gcc: integrate the various compiler-gcc[345].h files
  xen/events: Mask a moving irq
  ALSA: usb-audio: Add a sample rate quirk for Phoenix Audio TMX320
  ALSA: usb-audio: Add sample rate inquiry quirk for AudioQuest DragonFly
  ALSA: usb-audio: don't try to get Outlaw RR2150 sample rate
  ext4: ignore quota mount options if the quota feature is enabled
  KVM: x86: Inject pending interrupt even if pending nmi exist
  ext4: add lockdep annotations for i_data_sem
  sd: Fix excessive capacity printing on devices with blocks bigger than 512 bytes
  drm/qxl: fix cursor position with non-zero hotspot
  ARM: OMAP2+: hwmod: Fix updating of sysconfig register
  HID: usbhid: fix inconsistent reset/resume/reset-resume behavior

Conflicts:
	Documentation/sysctl/kernel.txt
	arch/arm64/include/asm/cacheflush.h
	arch/arm64/kernel/topology.c
	arch/x86/Kconfig
	drivers/gpu/drm/i915/intel_ddi.c
	drivers/gpu/drm/i915/intel_dp.c
	drivers/gpu/drm/i915/intel_pm.c
	drivers/gpu/drm/mgag200/mgag200_fb.c
	drivers/gpu/drm/msm/msm_fbdev.c
	drivers/gpu/drm/nouveau/nv04_fbcon.c
	drivers/gpu/drm/nouveau/nv50_fbcon.c
	drivers/gpu/drm/nouveau/nvc0_fbcon.c
	drivers/gpu/drm/radeon/si_dpm.c
	drivers/hid/usbhid/hiddev.c
	drivers/md/Makefile
	drivers/media/dvb-core/dvb_ringbuffer.c
	drivers/media/tuners/tuner-xc2028.c
	drivers/misc/Kconfig
	drivers/misc/Makefile
	drivers/mmc/core/core.c
	drivers/mmc/core/host.c
	drivers/mtd/ubi/eba.c
	drivers/mtd/ubi/ubi.h
	drivers/mtd/ubi/wl.c
	drivers/net/usb/cdc_ncm.c
	drivers/net/usb/usbnet.c
	drivers/scsi/ufs/ufshcd.c
	drivers/scsi/ufs/ufshcd.h
	drivers/staging/android/binder.c
	drivers/usb/core/hcd.c
	drivers/usb/core/hub.c
	drivers/usb/core/quirks.c
	drivers/usb/dwc3/gadget.c
	drivers/usb/gadget/function/f_midi.c
	drivers/usb/host/xhci-pci.c
	drivers/usb/host/xhci.c
	drivers/usb/host/xhci.h
	drivers/usb/serial/cp210x.c
	drivers/usb/serial/option.c
	drivers/usb/serial/usb-serial-simple.c
	fs/ecryptfs/file.c
	include/linux/mmc/core.h
	include/linux/mmc/host.h
	include/linux/mmzone.h
	include/linux/sched.h
	include/linux/sched/sysctl.h
	include/trace/events/sched.h
	kernel/events/core.c
	kernel/exit.c
	kernel/power/wakeup_reason.c
	kernel/sched/Makefile
	kernel/sched/core.c
	kernel/sched/cputime.c
	kernel/sched/deadline.c
	kernel/sched/fair.c
	kernel/sched/features.h
	kernel/sched/rt.c
	kernel/sched/sched.h
	kernel/sched/stop_task.c
	kernel/sysctl.c
	lib/Kconfig.debug
	mm/Makefile
	mm/gup.c
	net/bluetooth/rfcomm/sock.c
	net/core/rtnetlink.c
	net/ipv4/netfilter/arp_tables.c
	net/ipv4/netfilter/ip_tables.c
	net/ipv4/tcp_input.c
	net/ipv6/netfilter/ip6_tables.c
	net/netfilter/nf_conntrack_core.c
	net/netfilter/xt_quota2.c
	net/socket.c
	net/unix/af_unix.c
	sound/usb/quirks.c

USB, MMC and scheduler related changes were ignored completely as
suggested by respective teams.

Signed-off-by: Imran Khan <kimran@codeaurora.org>
Change-Id: I7db1daa8c5b6af15dc8aa800830906a723e5b498