Merge remote-tracking branch '4.9/tmp-95c782ac' into msm-4.9

* 4.9/tmp-95c782ac:
  Linux 4.9.27
  dm ioctl: prevent stack leak in dm ioctl call
  cpu/hotplug: Serialize callback invocations proper
  ceph: try getting buffer capability for readahead/fadvise
  8250_pci: Fix potential use-after-free in error path
  hwmon: (it87) Avoid registering the same chip on both SIO addresses
  scsi: storvsc: Workaround for virtual DVD SCSI version
  tpm_tis: use default timeout value if chip reports it as zero
  Handle mismatched open calls
  timerfd: Protect the might cancel mechanism proper
  ANDROID: android-base.cfg: remove USB_OTG_WAKELOCK
  ANDROID: android-base.cfg: remove defunct options
  ANDROID: usb: gadget: f_audio_source: disable the CPU C-states upon playback
  ANDROID: usb: gadget: f_mtp: Set 0xFFFFFFFF in mtp header ContainerLength field

Change-Id: Ib9941cbe151a57e14a63c1fdfd93f9d4129f7a2b
Signed-off-by: Kyle Yan <kyan@codeaurora.org>