Merge 4.14.67 into android-4.14

Merge 4.14.67 into android-4.14

Changes in 4.14.67
	ext4: fix spectre gadget in ext4_mb_regular_allocator()
	drm/i915/kvmgt: Fix potential Spectre v1
	EDAC: Add missing MEM_LRDDR4 entry in edac_mem_types[]
	pty: fix O_CLOEXEC for TIOCGPTPEER
	arm: dts: armada: Fix "#cooling-cells" property's name
	vfio: ccw: fix error return in vfio_ccw_sch_event
	perf tools: Fix error index for pmu event parser
	Input: synaptics-rmi4 - fix axis-swap behavior
	IB/mlx4: Fix an error handling path in 'mlx4_ib_rereg_user_mr()'
	drm/bridge/sii8620: fix loops in EDID fetch logic
	drm/bridge/sii8620: fix potential buffer overflow
	ARC: Explicitly add -mmedium-calls to CFLAGS
	hwmon: (nct6775) Fix loop limit
	soc: imx: gpcv2: correct PGC offset
	usb: dwc3: pci: add support for Intel IceLake
	usb: gadget: ffs: Fix BUG when userland exits with submitted AIO transfers
	usb: dwc2: gadget: Fix issue in dwc2_gadget_start_isoc()
	usb: dwc3: of-simple: fix use-after-free on remove
	ACPI / EC: Use ec_no_wakeup on Thinkpad X1 Carbon 6th
	netfilter: ipv6: nf_defrag: reduce struct net memory waste
	netfilter: nf_ct_helper: Fix possible panic after nf_conntrack_helper_unregister
	selftests: pstore: return Kselftest Skip code for skipped tests
	selftests: static_keys: return Kselftest Skip code for skipped tests
	selftests: sysctl: return Kselftest Skip code for skipped tests
	selftests: user: return Kselftest Skip code for skipped tests
	selftests: zram: return Kselftest Skip code for skipped tests
	selftests: vm: return Kselftest Skip code for skipped tests
	selftests: sync: add config fragment for testing sync framework
	ARM: dts: NSP: Fix i2c controller interrupt type
	ARM: dts: NSP: Fix PCIe controllers interrupt types
	ARM: dts: BCM5301x: Fix i2c controller interrupt type
	ARM: dts: Cygnus: Fix I2C controller interrupt type
	ARM: dts: Cygnus: Fix PCIe controller interrupt type
	arm64: dts: specify 1.8V EMMC capabilities for bcm958742k
	arm64: dts: specify 1.8V EMMC capabilities for bcm958742t
	arm64: dts: ns2: Fix I2C controller interrupt type
	arm64: dts: ns2: Fix PCIe controller interrupt type
	arm64: dts: Stingray: Fix I2C controller interrupt type
	drivers/perf: xgene_pmu: Fix IOB SLOW PMU parser error
	drm: mali-dp: Enable Global SE interrupts mask for DP500
	drm/arm/malidp: Preserve LAYER_FORMAT contents when setting format
	IB/rxe: Fix missing completion for mem_reg work requests
	libahci: Fix possible Spectre-v1 pmp indexing in ahci_led_store()
	usb: dwc2: alloc dma aligned buffer for isoc split in
	usb: dwc2: fix isoc split in transfer with no data
	usb: gadget: composite: fix delayed_status race condition when set_interface
	usb: gadget: dwc2: fix memory leak in gadget_init()
	dwc2: gadget: Fix ISOC IN DDMA PID bitfield value calculation
	xen: add error handling for xenbus_printf
	pNFS: Always free the session slot on error in nfs4_layoutget_handle_exception
	scsi: xen-scsifront: add error handling for xenbus_printf
	xen/scsiback: add error handling for xenbus_printf
	arm64: dma-mapping: clear buffers allocated with FORCE_CONTIGUOUS flag
	arm64: make secondary_start_kernel() notrace
	qed: Fix possible memory leak in Rx error path handling.
	qed: Add sanity check for SIMD fastpath handler.
	qed: Do not advertise DCBX_LLD_MANAGED capability.
	enic: initialize enic->rfs_h.lock in enic_probe
	net: hamradio: use eth_broadcast_addr
	net: propagate dev_get_valid_name return code
	net: stmmac: socfpga: add additional ocp reset line for Stratix10
	nvmet: reset keep alive timer in controller enable
	block: sed-opal: Fix a couple off by one bugs
	ARC: Enable machine_desc->init_per_cpu for !CONFIG_SMP
	nbd: Add the nbd NBD_DISCONNECT_ON_CLOSE config flag.
	net: davinci_emac: match the mdio device against its compatible if possible
	sctp: fix erroneous inc of snmp SctpFragUsrMsgs
	KVM: arm/arm64: Drop resource size check for GICV window
	drm/bridge/sii8620: fix display of packed pixel modes in MHL2
	locking/lockdep: Do not record IRQ state within lockdep code
	selftests: bpf: notification about privilege required to run test_kmod.sh testing script
	mtd: dataflash: Use ULL suffix for 64-bit constants
	x86/microcode/intel: Fix memleak in save_microcode_patch()
	ipv6: mcast: fix unsolicited report interval after receiving querys
	Smack: Mark inode instant in smack_task_to_inode
	arm64: dts: msm8916: fix Coresight ETF graph connections
	batman-adv: Fix bat_ogm_iv best gw refcnt after netlink dump
	batman-adv: Fix bat_v best gw refcnt after netlink dump
	batman-adv: Avoid storing non-TT-sync flags on singular entries too
	batman-adv: Fix multicast TT issues with bogus ROAM flags
	cxgb4: when disabling dcb set txq dcb priority to 0
	iio: pressure: bmp280: fix relative humidity unit
	brcmfmac: stop watchdog before detach and free everything
	ARM: dts: am437x: make edt-ft5x06 a wakeup source
	ALSA: seq: Fix UBSAN warning at SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT ioctl
	usb: xhci: remove the code build warning
	usb: xhci: increase CRS timeout value
	NFC: pn533: Fix wrong GFP flag usage
	typec: tcpm: Fix a msecs vs jiffies bug
	kconfig: fix line numbers for if-entries in menu tree
	perf record: Support s390 random socket_id assignment
	perf test session topology: Fix test on s390
	perf report powerpc: Fix crash if callchain is empty
	perf tools: Fix a clang 7.0 compilation error
	perf bench: Fix numa report output code
	ARM: davinci: board-da850-evm: fix WP pin polarity for MMC/SD
	netfilter: nf_log: fix uninit read in nf_log_proc_dostring
	ceph: fix dentry leak in splice_dentry()
	net/mlx5: E-Switch, Disallow vlan/spoofcheck setup if not being esw manager
	nfp: cast sizeof() to int when comparing with error code
	selftests/x86/sigreturn/64: Fix spurious failures on AMD CPUs
	selftests/x86/sigreturn: Do minor cleanups
	ARM: dts: da850: Fix interrups property for gpio
	ARM64: dts: meson-gxl: fix Mali GPU compatible string
	dmaengine: pl330: report BURST residue granularity
	dmaengine: k3dma: Off by one in k3_of_dma_simple_xlate()
	ath10k: update the phymode along with bandwidth change request
	md/raid10: fix that replacement cannot complete recovery after reassemble
	dev-dax: check_vma: ratelimit dev_info-s
	nl80211: relax ht operation checks for mesh
	nl80211: check nla_parse_nested() return values
	drm/exynos: gsc: Fix support for NV16/61, YUV420/YVU420 and YUV422 modes
	drm/exynos: decon5433: Fix per-plane global alpha for XRGB modes
	drm/exynos: decon5433: Fix WINCONx reset value
	drbd: Fix drbd_request_prepare() discard handling
	bpf, s390: fix potential memleak when later bpf_jit_prog fails
	PCI: xilinx: Add missing of_node_put()
	PCI: xilinx-nwl: Add missing of_node_put()
	PCI: faraday: Add missing of_node_put()
	bnx2x: Fix receiving tx-timeout in error or recovery state.
	fsl/fman: fix parser reporting bad checksum on short frames
	dpaa_eth: DPAA SGT needs to be 256B
	acpi/nfit: fix cmd_rc for acpi_nfit_ctl to always return a value
	openrisc: entry: Fix delay slot exception detection
	m68k: fix "bad page state" oops on ColdFire boot
	objtool: Support GCC 8 '-fnoreorder-functions'
	ipvlan: call dev_change_flags when ipvlan mode is reset
	drm/amdgpu: fix swapped emit_ib_size in vce3
	x86/mm/32: Initialize the CR4 shadow before __flush_tlb_all()
	HID: wacom: Correct touch maximum XY of 2nd-gen Intuos
	ARM: imx_v6_v7_defconfig: Select ULPI support
	ARM: imx_v4_v5_defconfig: Select ULPI support
	bpf: hash map: decrement counter on error
	tracing: Use __printf markup to silence compiler
	kasan: fix shadow_size calculation error in kasan_module_alloc
	smsc75xx: Add workaround for gigabit link up hardware errata.
	drm/bridge/sii8620: Fix display of packed pixel modes
	samples/bpf: add missing <linux/if_vlan.h>
	samples/bpf: Check the result of system()
	samples/bpf: Check the error of write() and read()
	ieee802154: 6lowpan: set IFLA_LINK
	netfilter: x_tables: set module owner for icmp(6) matches
	ipv6: make ipv6_renew_options() interrupt/kernel safe
	net: qrtr: Broadcast messages only from control port
	sh_eth: fix invalid context bug while calling auto-negotiation by ethtool
	sh_eth: fix invalid context bug while changing link options by ethtool
	ravb: fix invalid context bug while calling auto-negotiation by ethtool
	ravb: fix invalid context bug while changing link options by ethtool
	ARM: pxa: irq: fix handling of ICMR registers in suspend/resume
	net/sched: act_tunnel_key: fix NULL dereference when 'goto chain' is used
	nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
	ieee802154: at86rf230: switch from BUG_ON() to WARN_ON() on problem
	ieee802154: at86rf230: use __func__ macro for debug messages
	ieee802154: fakelb: switch from BUG_ON() to WARN_ON() on problem
	gpu: host1x: Check whether size of unpin isn't 0
	drm/tegra: Fix comparison operator for buffer size
	drm/armada: fix colorkey mode property
	drm/armada: fix irq handling
	netfilter: nft_compat: explicitly reject ERROR and standard target
	netfilter: nf_conntrack: Fix possible possible crash on module loading.
	ARC: Improve cmpxchg syscall implementation
	bnxt_en: Fix inconsistent BNXT_FLAG_AGG_RINGS logic.
	bnxt_en: Always set output parameters in bnxt_get_max_rings().
	bnxt_en: Fix for system hang if request_irq fails
	scsi: qedf: Send the driver state to MFW
	scsi: qedi: Send driver state to MFW
	perf llvm-utils: Remove bashism from kernel include fetch script
	perf tools: Fix compilation errors on gcc8
	perf script python: Fix dict reference counting
	nfit: fix unchecked dereference in acpi_nfit_ctl
	RDMA/mlx5: Fix memory leak in mlx5_ib_create_srq() error path
	ARM: 8780/1: ftrace: Only set kernel memory back to read-only after boot
	ARM: DRA7/OMAP5: Enable ACTLR[0] (Enable invalidates of BTB) for secondary cores
	ARM: dts: am3517.dtsi: Disable reference to OMAP3 OTG controller
	ixgbe: Be more careful when modifying MAC filters
	tools: build: Use HOSTLDFLAGS with fixdep
	kbuild: suppress warnings from 'getconf LFS_*'
	packet: reset network header if packet shorter than ll reserved space
	qlogic: check kstrtoul() for errors
	tcp: remove DELAYED ACK events in DCTCP
	pinctrl: ingenic: Fix inverted direction for < JZ4770
	pinctrl: nsp: off by ones in nsp_pinmux_enable()
	pinctrl: nsp: Fix potential NULL dereference
	drm/nouveau/gem: off by one bugs in nouveau_gem_pushbuf_reloc_apply()
	hv/netvsc: fix handling of fallback to single queue mode
	net/ethernet/freescale/fman: fix cross-build error
	ibmvnic: Fix error recovery on login failure
	btrfs: scrub: Don't use inode page cache in scrub_handle_errored_block()
	octeon_mgmt: Fix MIX registers configuration on MTU setup
	net: usb: rtl8150: demote allmulti message to dev_dbg()
	kvmclock: fix TSC calibration for nested guests
	PCI: OF: Fix I/O space page leak
	PCI: versatile: Fix I/O space page leak
	net: qca_spi: Avoid packet drop during initial sync
	net: qca_spi: Make sure the QCA7000 reset is triggered
	net: qca_spi: Fix log level if probe fails
	tcp: identify cryptic messages as TCP seq # bugs
	soc: imx: gpc: restrict register range for regmap access
	ACPI / EC: Use ec_no_wakeup on more Thinkpad X1 Carbon 6th systems
	ARM: dts: imx6: RDU2: fix irq type for mv88e6xxx switch
	nvme: fix handling of metadata_len for NVME_IOCTL_IO_CMD
	KVM: irqfd: fix race between EPOLLHUP and irq_bypass_register_consumer
	f2fs: return error during fill_super
	f2fs: sanity check for total valid node blocks
	parisc: Remove ordered stores from syscall.S
	xfrm_user: prevent leaking 2 bytes of kernel memory
	netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state
	packet: refine ring v3 block size test to hold one frame
	net/smc: no shutdown in state SMC_LISTEN
	parisc: Remove unnecessary barriers from spinlock.h
	PCI: hotplug: Don't leak pci_slot on registration failure
	PCI: Skip MPS logic for Virtual Functions (VFs)
	PCI: pciehp: Fix use-after-free on unplug
	PCI: pciehp: Fix unprotected list iteration in IRQ handler
	i2c: core: ACPI: Properly set status byte to 0 for multi-byte writes
	i2c: imx: Fix race condition in dma read
	reiserfs: fix broken xattr handling (heap corruption, bad retval)
	Linux 4.14.67

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>