4.15-stable patches

4.15-stable patches

added patches:
	blk_rq_map_user_iov-fix-error-override.patch
	crypto-x86-twofish-3way-fix-rbp-usage.patch
	kcov-detect-double-association-with-a-single-task.patch
	kvm-x86-fix-escape-of-guest-dr6-to-the-host.patch
	media-pvrusb2-properly-check-endpoint-types.patch
	net-avoid-skb_warn_bad_offload-on-is_err.patch
	net_sched-gen_estimator-fix-lockdep-splat.patch
	netfilter-ipt_clusterip-fix-out-of-bounds-accesses-in-clusterip_tg_check.patch
	netfilter-on-sockopt-acquire-sock-lock-only-in-the-required-scope.patch
	netfilter-x_tables-avoid-out-of-bounds-reads-in-xt_request_find_-match-target.patch
	netfilter-x_tables-fix-int-overflow-in-xt_alloc_table_info.patch
	netfilter-xt_cgroup-initialize-info-priv-in-cgroup_mt_check_v1.patch
	netfilter-xt_rateest-acquire-xt_rateest_mutex-for-hash-insert.patch
	ptr_ring-fail-early-if-queue-occupies-more-than-kmalloc_max_size.patch
	ptr_ring-try-vmalloc-when-kmalloc-fails.patch
	rds-tcp-atomically-purge-entries-from-rds_tcp_conn_list-during-netns-delete.patch
	rds-tcp-correctly-sequence-cleanup-on-netns-deletion.patch
	selinux-ensure-the-context-is-nul-terminated-in-security_context_to_sid_core.patch
	selinux-skip-bounded-transition-processing-if-the-policy-isn-t-loaded.patch
	staging-android-ion-add-__gfp_nowarn-for-system-contig-heap.patch
	staging-android-ion-switch-from-warn-to-pr_warn.patch
	tun-fix-tun_napi_alloc_frags-frag-allocator.patch