Merge remote-tracking branch '4.9/tmp-184ce810' into msm-4.9

* 4.9/tmp-184ce810:
  Linux 4.9.36
  KVM: nVMX: Fix exception injection
  KVM: x86: zero base3 of unusable segments
  KVM: x86/vPMU: fix undefined shift in intel_pmu_refresh()
  KVM: x86: fix emulation of RSM and IRET instructions
  arm64: fix NULL dereference in have_cpu_die()
  mtd: nand: brcmnand: Check flash #WP pin status before nand erase/program
  i2c: brcmstb: Fix START and STOP conditions
  brcmfmac: avoid writing channel out of allocated array
  infiniband: hns: avoid gcc-7.0.1 warning for uninitialized data
  objtool: Fix another GCC jump table detection issue
  clk: scpi: don't add cpufreq device if the scpi dvfs node is disabled
  cpufreq: s3c2416: double free on driver init error path
  iommu/amd: Fix interrupt remapping when disable guest_mode
  iommu/amd: Fix incorrect error handling in amd_iommu_bind_pasid()
  iommu/dma: Don't reserve PCI I/O windows
  iommu: Handle default domain attach failure
  iommu/vt-d: Don't over-free page table directories
  ocfs2: o2hb: revert hb threshold to keep compatible
  x86/mm: Fix flush_tlb_page() on Xen
  x86/mpx: Correctly report do_mpx_bt_fault() failures to user-space
  x86/boot/KASLR: Fix kexec crash due to 'virt_addr' calculation bug
  tools arch: Sync arch/x86/lib/memcpy_64.S with the kernel
  ARM: 8685/1: ensure memblock-limit is pmd-aligned
  ARM64/ACPI: Fix BAD_MADT_GICC_ENTRY() macro implementation
  ARM: dts: OMAP3: Fix MFG ID EEPROM
  ARM: OMAP2+: omap_device: Sync omap_device and pm_runtime after probe defer
  regulator: tps65086: Fix DT node referencing in of_parse_cb
  regulator: tps65086: Fix expected switch DT node names
  spi: fix device-node leaks
  spi: When no dma_chan map buffers with spi_master's parent
  sched/loadavg: Avoid loadavg spikes caused by delayed NO_HZ accounting
  watchdog: bcm281xx: Fix use of uninitialized spinlock.
  netfilter: use skb_to_full_sk in ip_route_me_harder
  xfrm: Oops on error in pfkey_msg2xfrm_state()
  xfrm: NULL dereference on allocation failure
  xfrm: fix stack access out of bounds with CONFIG_XFRM_SUB_POLICY
  mm/vmalloc.c: huge-vmap: fail gracefully on unexpected huge vmap mappings
  ravb: Fix use-after-free on `ifconfig eth0 down`
  ip6_tunnel, ip6_gre: fix setting of DSCP on encapsulated packets
  sctp: check af before verify address in sctp_addr_id2transport
  net/mlx4_core: Eliminate warning messages for SRQ_LIMIT under SRIOV
  perf probe: Fix to probe on gcc generated functions in modules
  tipc: allocate user memory with GFP_KERNEL flag
  net: phy: dp83867: allow RGMII_TXID/RGMII_RXID interface types
  perf probe: Fix to show correct locations for events on modules
  be2net: fix MAC addr setting on privileged BE3 VFs
  be2net: don't delete MAC on close on unprivileged BE3 VFs
  be2net: fix status check in be_cmd_pmac_add()
  usb: dwc2: gadget: Fix GUSBCFG.USBTRDTIM value
  s390/ctl_reg: make __ctl_load a full memory barrier
  swiotlb: ensure that page-sized mappings are page-aligned
  coredump: Ensure proper size of sparse core files
  aio: fix lock dep warning
  perf/x86: Reject non sampling events with precise_ip
  perf/core: Fix sys_perf_event_open() vs. hotplug
  x86/mpx: Use compatible types in comparison to fix sparse error
  x86/tsc: Add the Intel Denverton Processor to native_calibrate_tsc()
  mac80211: initialize SMPS field in HT capabilities
  pmem: return EIO on read_pmem() failure
  drm/amd/powerplay: refine vce dpm update code on Cz.
  drm/amd/powerplay: fix vce cg logic error on CZ/St.
  drm/radeon/si: load special ucode for certain MC configs
  net: thunderx: acpi: fix LMAC initialization
  arm64: assembler: make adr_l work in modules under KASLR
  spi: davinci: use dma_mapping_error()
  scsi: lpfc: avoid double free of resource identifiers
  HID: i2c-hid: Add sleep between POWER ON and RESET
  perf/x86/intel: Use ULL constant to prevent undefined shift behaviour
  mac80211: recalculate min channel width on VHT opmode changes
  net: phy: marvell: fix Marvell 88E1512 used in SGMII mode
  pinctrl: intel: Set pin direction properly
  perf/x86/intel/uncore: Fix hardcoded socket 0 assumption in the Haswell init code
  drm/etnaviv: trick drm_mm into giving out a low IOVA
  Documentation: devicetree: change the mediatek ethernet compatible string
  kernel/panic.c: add missing \n
  ibmveth: Add a proper check for the availability of the checksum features
  vxlan: do not age static remote mac entries
  ip6_tunnel: must reload ipv6h in ip6ip6_tnl_xmit()
  virtio_net: fix PAGE_SIZE > 64k
  mlxsw: spectrum_router: Correctly reallocate adjacency entries
  vfio/spapr: fail tce_iommu_attach_group() when iommu_data is null
  drm/amdgpu: check ring being ready before using
  net: dsa: Check return value of phy_connect_direct()
  amd-xgbe: Check xgbe_init() return code
  platform/x86: ideapad-laptop: handle ACPI event 1
  iwlwifi: fix kernel crash when unregistering thermal zone
  scsi: virtio_scsi: Reject commands when virtqueue is broken
  xen-netfront: Fix Rx stall during network stress and OOM
  swiotlb-xen: update dev_addr after swapping pages
  virtio_console: fix a crash in config_work_handler
  Btrfs: fix truncate down when no_holes feature is enabled
  Btrfs: Fix deadlock between direct IO and fast fsync
  gianfar: Do not reuse pages from emergency reserve
  objtool: Fix IRET's opcode
  bpf: don't trigger OOM killer under pressure with map alloc
  bnxt_en: Fix "uninitialized variable" bug in TPA code path.
  xen-netback: protect resource cleaning on XenBus disconnect
  xen-netback: fix memory leaks on XenBus disconnect
  net: ethtool: Initialize buffer when querying device channel settings
  powerpc/eeh: Enable IO path on permanent error
  net: korina: Fix NAPI versus resources freeing
  perf/x86/intel: Handle exclusive threadid correctly on CPU hotplug
  net: phy: dp83848: add DP83620 PHY support
  drm/amdgpu: add support for new hainan variants
  drm/amdgpu: fix program vce instance logic error.
  qla2xxx: Fix erroneous invalid handle message
  qla2xxx: Terminate exchange if corrupted
  scsi: lpfc: Set elsiocb contexts to NULL after freeing it
  stmmac: add missing of_node_put
  scsi: sd: Fix wrong DPOFUA disable in sd_read_cache_type
  KVM: x86: fix fixing of hypercalls
  xen/blkback: don't free be structure too early
  ARM64: dts: meson-gxbb-odroidc2: fix GbE tx link breakage
  dt: bindings: net: use boolean dt properties for eee broken modes
  net: phy: use boolean dt properties for eee broken modes
  net: phy: fix sign type error in genphy_config_eee_advert
  dt-bindings: net: add EEE capability constants
  net: phy: add an option to disable EEE advertisement
  net: ethtool: add support for 2500BaseT and 5000BaseT link modes
  sparc64: Zero pages on allocation for mondo and error queues.
  sparc64: Handle PIO & MEM non-resumable errors.
  mm: numa: avoid waiting on freed migrated pages
  l2tp: take a reference on sessions used in genetlink handlers
  l2tp: hold session while sending creation notifications
  l2tp: fix duplicate session creation
  l2tp: ensure session can't get removed during pppol2tp_session_ioctl()
  l2tp: fix race in l2tp_recv_common()
  usb: gadget: f_fs: Fix possibe deadlock
  x86/mm: Fix boot crash caused by incorrect loop count calculation in sync_global_pgds()
  dm thin: do not queue freed thin mapping for next stage processing
  drm/vmwgfx: Free hash table allocated by cmdbuf managed res mgr
  gpiolib: fix filtering out unwanted events
  NFSv4.1: Fix a race in nfs4_proc_layoutget
  ALSA: hda - set input_path bitmap to zero after moving it to new place
  ALSA: hda - Fix endless loop of codec configure
  MIPS: Fix IRQ tracing & lockdep when rescheduling
  MIPS: pm-cps: Drop manual cache-line alignment of ready_count
  MIPS: Avoid accidental raw backtrace
  MIPS: head: Reorder instructions missing a delay slot
  mm, swap_cgroup: reschedule when neeed in swap_cgroup_swapoff()
  drm/ast: Handle configuration without P2A bridge
  xen/blkback: don't use xen_blkif_get() in xen-blkback kthread
  NFSv4.x/callback: Create the callback service through svc_create_pooled
  NFSv4: fix a reference leak caused WARNING messages
  netfilter: synproxy: fix conntrackd interaction
  netfilter: xt_TCPMSS: add more sanity tests on tcph->doff
  rtnetlink: add IFLA_GROUP to ifla_policy
  ipv6: Do not leak throw route references
  sfc: provide dummy definitions of vswitch functions
  net: 8021q: Fix one possible panic caused by BUG_ON in free_netdev
  decnet: always not take dst->__refcnt when inserting dst into hash table
  net/mlx5e: Fix timestamping capabilities reporting
  net/mlx5: Wait for FW readiness before initializing command interface
  net/mlx5e: Avoid doing a cleanup call if the profile doesn't have it
  sctp: return next obj by passing pos + 1 into sctp_transport_get_idx
  ipv6: fix calling in6_ifa_hold incorrectly for dad work
  igmp: add a missing spin_lock_init()
  igmp: acquire pmc lock for ip_mc_clear_src()
  proc: snmp6: Use correct type in memset
  net/mlx5e: Fix wrong indications in DIM due to counter wraparound
  net/mlx5e: Added BW check for DIM decision mechanism
  net: tipc: Fix a sleep-in-atomic bug in tipc_msg_reverse
  net: caif: Fix a sleep-in-atomic bug in cfpkt_create_pfx
  sctp: disable BH in sctp_for_each_endpoint
  Fix an intermittent pr_emerg warning about lo becoming free.
  af_unix: Add sockaddr length checks before accessing sa_family in bind and connect handlers
  net: vrf: Make add_fib_rules per network namespace flag
  net: Zero ifla_vf_info in rtnl_fill_vfinfo()
  decnet: dn_rtmsg: Improve input length sanitization in dnrmg_receive_user_skb
  net: don't call strlen on non-terminated string in dev_set_alias()
  ipv6: release dst on error in ip6_dst_lookup_tail
  UPSTREAM: selinux: enable genfscon labeling for tracefs

Change-Id: I85271d5ce79a499d0398f7d3cb32bc2d43fe7dc5
Signed-off-by: Kyle Yan <kyan@codeaurora.org>