Merge remote-tracking branch '4.9/tmp-08332893' into msm-next

* 4.9/tmp-08332893:
  Linux 4.12-rc2
  x86: fix 32-bit case of __get_user_asm_u64()
  Clean up x86 unsafe_get/put_user() type handling
  osf_wait4(): fix infoleak
  fix unsafe_put_user()
  nvmet: release the sq ref on rdma read errors
  nvmet-fc: remove target cpu scheduling flag
  nvme-fc: stop queues on error detection
  nvme-fc: require target or discovery role for fc-nvme targets
  nvme-fc: correct port role bits
  nvme: unmap CMB and remove sysfs file in reset path
  KVM: x86: prevent uninitialized variable warning in check_svme()
  KVM: x86/vPMU: fix undefined shift in intel_pmu_refresh()
  KVM: x86: zero base3 of unusable segments
  KVM: X86: Fix read out-of-bounds vulnerability in kvm pio emulation
  KVM: x86: Fix potential preemption when get the current kvmclock timestamp
  blktrace: fix integer parse
  i2c: designware: don't infer timings described by ACPI from clock rate
  arm64: dts: rockchip: fix include reference
  watchdog: bcm281xx: Fix use of uninitialized spinlock.
  watchdog: zx2967: remove redundant dev_err call in zx2967_wdt_probe()
  iTCO_wdt: all versions count down twice
  firmware: ti_sci: fix strncat length check
  ARM: remove duplicate 'const' annotations'
  arm64: defconfig: enable options needed for QCom DB410c board
  arm64: defconfig: sync with savedefconfig
  ARM: configs: add a gemini defconfig
  devicetree: Move include prefixes from arch to separate directory
  xen: make xen_flush_tlb_all() static
  xen: cleanup pvh leftovers from pv-only sources
  tracing: Make sure RCU is watching before calling a stack trace
  powerpc/mm: Fix virt_addr_valid() etc. on 64-bit hash
  xen/9pfs: p9_trans_xen_init and p9_trans_xen_exit can be static
  xen/9pfs: fix return value check in xen_9pfs_front_probe()
  watchdog: wdt_pci: fix build error if define SOFTWARE_REBOOT
  watchdog: cadence_wdt: fix timeout setting
  watchdog: pcwd_usb: fix NULL-deref at probe
  watchdog: sama5d4: fix race condition
  watchdog: sama5d4: fix WDDIS handling
  watchdog: orion: fix compile-test dependencies
  mlxsw: spectrum: Avoid possible NULL pointer dereference
  sh_eth: Do not print an error message for probe deferral
  sh_eth: Use platform device for printing before register_netdev()
  mlxsw: spectrum_router: Fix rif counter freeing routine
  mlxsw: spectrum_dpipe: Fix incorrect entry index
  firmware: Google VPD: Fix memory allocation error handling
  drm/atmel-hlcdc: Fix output initialization
  drivers: char: mem: Check for address space wraparound with mmap()
  gpu: host1x: select IOMMU_IOVA
  cxgb4: update latest firmware version supported
  qmi_wwan: add another Lenovo EM74xx device ID
  sctp: do not inherit ipv6_{mc|ac|fl}_list from parent
  udp: make *udp*_queue_rcv_skb() functions static
  bridge: netlink: check vlan_default_pvid range
  net: ethernet: faraday: To support device tree usage.
  net: x25: fix one potential use-after-free issue
  MAINTAINERS: greybus-dev list is members-only
  usb: musb: tusb6010_omap: Do not reset the other direction's packet size
  usb: musb: Fix trying to suspend while active for OTG configurations
  usb: host: xhci-plat: propagate return value of platform_get_irq()
  xhci: Fix command ring stop regression in 4.11
  xhci: remove GFP_DMA flag from allocation
  USB: xhci: fix lock-inversion problem
  usb: host: xhci-ring: don't need to clear interrupt pending for MSI enabled hcd
  usb: host: xhci-mem: allocate zeroed Scratchpad Buffer
  xhci: apply PME_STUCK_QUIRK and MISSING_CAS quirk for Denverton
  usb: xhci: trace URB before giving it back instead of after
  KVM: Silence underflow warning in avic_get_physical_id_entry()
  KVM: arm/arm64: Hold slots_lock when unregistering kvm io bus devices
  KVM: arm/arm64: Fix bug when registering redist iodevs
  bpf: adjust verifier heuristics
  ipv6: Check ip6_find_1stfragopt() return value properly.
  kprobes: Document how optimized kprobes are removed from module unload
  selftests/ftrace: Add test to remove instance with active event triggers
  selftests/ftrace: Fix bashisms
  ftrace: Remove #ifdef from code and add clear_ftrace_function_probes() stub
  ftrace/instances: Clear function triggers when removing instances
  ftrace: Simplify glob handling in unregister_ftrace_function_probe_func()
  tracing/kprobes: Enforce kprobes teardown after testing
  tracing: Move postpone selftests to core from early_initcall
  selftests/bpf: fix broken build due to types.h
  bnxt_en: Check status of firmware DCBX agent before setting DCB_CAP_DCBX_HOST.
  bnxt_en: Call bnxt_dcb_init() after getting firmware DCBX configuration.
  net: fix compile error in skb_orphan_partial()
  sparc/ftrace: Fix ftrace graph time measurement
  sparc: Fix -Wstringop-overflow warning
  sparc64: Fix mapping of 64k pages with MAP_FIXED
  ipv6: Prevent overrun when parsing v6 header options
  kbuild: skip install/check of headers right under uapi directories
  of: fdt: add missing allocation-failure check
  dtc: check.c fix compile error
  arm64/cpufeature: don't use mutex in bringup path
  neighbour: update neigh timestamps iff update is effective
  arp: honour gratuitous ARP _replies_
  USB: serial: qcserial: add more Lenovo EM74xx device IDs
  fuseblk: Fix warning in super_setup_bdi_name()
  ARM: dts: dra7: Reduce cpu thermal shutdown temperature
  dm cache: handle kmalloc failure allocating background_tracker struct
  iommu/mediatek: Include linux/dma-mapping.h
  iommu/vt-d: Flush the IOTLB to get rid of the initial kdump mappings
  iommu/dma: Don't touch invalid iova_domain members
  USB: host: xhci: use max-port define
  USB: hub: fix SS max number of ports
  USB: hub: fix non-SS hub-descriptor handling
  USB: hub: fix SS hub-descriptor handling
  USB: usbip: fix nonconforming hub descriptor
  USB: gadget: dummy_hcd: fix hub-descriptor removable fields
  doc-rst: fixed kernel-doc directives in usb/typec.rst
  USB: core: of: document reference taken by companion helper
  USB: ehci-platform: fix companion-device leak
  usb: r8a66597-hcd: select a different endpoint on timeout
  usb: r8a66597-hcd: decrease timeout
  usb: core: fix potential memory leak in error path during hcd creation
  USB: iowarrior: fix info ioctl on big-endian hosts
  USB: chaoskey: fix Alea quirk on big-endian hosts
  sisusb_con: fix coccinelle warning
  uwb: fix device quirk on big-endian hosts
  usb: misc: legousbtower: Fix memory leak
  USB: core: replace %p with %pK
  USB: ene_usb6250: fix DMA to the stack
  USB: serial: ftdi_sio: add Olimex ARM-USB-TINY(H) PIDs
  i2c: xgene: Set ACPI_COMPANION_I2C
  powerpc/mm: Fix crash in page table dump with huge pages
  drm/nouveau/fifo/gk104-: Silence a locking warning
  drm/nouveau/secboot: plug memory leak in ls_ucode_img_load_gr() error path
  drm/nouveau: Fix drm poll_helper handling
  i2c: mv64xxx: don't override deferred probing when getting irq
  uio: fix incorrect memory leak cleanup
  misc: pci_endpoint_test: select CRC32
  char: lp: fix possible integer overflow in lp_setup()
  mlx5e: add CONFIG_INET dependency
  KVM: x86: lower default for halt_poll_ns
  dm bufio: make the parameter "retain_bytes" unsigned long
  net: Improve handling of failures on link and route dumps
  net/smc: Add warning about remote memory exposure
  smc: switch to usage of IB_PD_UNSAFE_GLOBAL_RKEY
  efi-pstore: Fix read iter after pstore API refactor
  ipmr: vrf: Find VIFs using the actual device
  tcp: eliminate negative reordering in tcp_clean_rtx_queue
  memory: omap-gpmc: Fix debug output for access width
  ARM: dts: LogicPD Torpedo: Fix camera pin mux
  ARM: dts: omap4: enable CEC pin for Pandaboard A4 and ES
  ARM: dts: gta04: fix polarity of clocks for mcbsp4
  ARM: dts: dra7: Add power hold and power controller properties to palmas
  genirq: Fix chained interrupt data ordering
  staging: fsl-dpaa2/eth: add ETHERNET dependency
  staging: typec: fusb302: refactor resume retry mechanism
  staging: typec: fusb302: reset i2c_busy state in error
  usb: dwc3: keystone: check return value
  usb: gadget: f_fs: avoid out of bounds access on comp_desc
  usb: gadget: gserial: check if console kthread exists
  usb: dwc3: gadget: Prevent losing events in event cache
  usb: dwc3: gadget: Fix ISO transfer performance
  usb: dwc3: pci: add Intel Cannonlake PCI IDs
  kvm: arm/arm64: Fix use after free of stage2 page table
  kvm: arm/arm64: Force reading uncached stage2 PGD
  powerpc/kprobes: Fix handling of instruction emulation on probe re-entry
  powerpc/powernv: Set NAPSTATELOST after recovering paca on P9 DD1
  selftests/powerpc: Test TM and VMX register state
  block: xen-blkback: add null check to avoid null pointer dereference
  ldmvsw: stop the clean timer at beginning of remove
  ldmvsw: unregistering netdev before disable hardware
  net: netcp: fix check of requested timestamping filter
  dm mpath: multipath_clone_and_map must not return -EIO
  dm mpath: don't return -EIO from dm_report_EIO
  dm rq: add a missing break to map_request
  dm space map disk: fix some book keeping in the disk space map
  dm thin metadata: call precommit before saving the roots
  ipv6: avoid dad-failures for addresses with NODAD
  qed: Fix uninitialized data in aRFS infrastructure
  mdio: mux: fix device_node_continue.cocci warnings
  net/packet: fix missing net_device reference release
  net/mlx4_core: Use min3 to select number of MSI-X vectors
  macvlan: Fix performance issues with vlan tagged packets
  arm64: perf: Ignore exclude_hv when kernel is running in HYP
  arm64: Remove redundant mov from LL/SC cmpxchg
  i2c: mux: only print failure message on error
  i2c: mux: reg: rename label to indicate what it does
  i2c: mux: reg: put away the parent i2c adapter on probe failure
  KVM: nVMX: fix EPT permissions as reported in exit qualification
  KVM: VMX: Don't enable EPT A/D feature if EPT feature is disabled
  KVM: x86: Fix load damaged SSEx MXCSR register
  kvm: nVMX: off by one in vmx_write_pml_buffer()
  net: stmmac: use correct pointer when printing normal descriptor ring
  KVM: arm: rename pm_fake handler to trap_raz_wi
  KVM: arm: plug potential guest hardware debug leakage
  drm/i915: don't do allocate_va_range again on PIN_UPDATE
  drm/i915: Fix rawclk readout for g4x
  drm/i915: Fix runtime PM for LPE audio
  drm/i915/glk: Fix DSI "*ERROR* ULPS is still active" messages
  staging: rtl8723bs: remove re-positioned call to kfree in os_dep/ioctl_cfg80211.c
  s390/virtio: change virtio_feature_desc:features type to __le32
  kvm: arm/arm64: Fix race in resetting stage2 PGD
  USB: serial: io_ti: fix div-by-zero in set_termios
  USB: serial: mct_u232: fix big-endian baud-rate handling
  USB: serial: ir-usb: fix big-endian baud-rate debug printk
  staging: rtl8192e: GetTs Fix invalid TID 7 warning.
  staging: rtl8192e: rtl92e_get_eeprom_size Fix read size of EPROM_CMD.
  staging: rtl8192e: fix 2 byte alignment of register BSSIDR.
  staging: rtl8192e: rtl92e_fill_tx_desc fix write to mapped out memory.
  staging: vc04_services: Fix bulk cache maintenance
  staging: ccree: remove extraneous spin_unlock_bh() in error handler
  staging: typec: Fix sparse warnings about incorrect types
  staging: typec: fusb302: do not free gpio from managed resource
  KVM: arm/arm64: vgic-v3: Use PREbits to infer the number of ICH_APxRn_EL2 registers
  KVM: arm/arm64: vgic-v3: Do not use Active+Pending state for a HW interrupt
  KVM: arm/arm64: vgic-v2: Do not use Active+Pending state for a HW interrupt
  powerpc/tm: Fix FP and VMX register corruption
  arm: KVM: Do not use stack-protector to compile HYP code
  powerpc/modules: If mprofile-kernel is enabled add it to vermagic
  arm64: KVM: Do not use stack-protector to compile EL2 code
  staging: typec: tcpm: Fix Port Power Role field in PS_RDY messages
  staging: typec: tcpm: Respond to Discover Identity commands
  staging: typec: tcpm: Set correct flags in PD request messages
  staging: typec: tcpm: Drop duplicate PD messages
  staging: typec: fusb302: Fix chip->vbus_present init value
  staging: typec: fusb302: Fix module autoload
  staging: typec: tcpci: declare private structure as static
  staging: MAINTAINERS: add GBY as ccree maintainer
  staging/android/ion: remove useless document file
  USB: serial: ftdi_sio: fix setting latency for unprivileged users
  sched/core: Call __schedule() from do_idle() without enabling preemption
  usb: serial: option: add Telit ME910 support
  ARM: KVM: Fix tracepoint generation after move to virt/kvm/arm/
  dm cache policy smq: don't do any writebacks unless IDLE
  dm cache: simplify the IDLE vs BUSY state calculation
  dm cache: track all IO to the cache rather than just the origin device's IO
  dm cache policy smq: stop preemptively demoting blocks
  dm cache policy smq: put newly promoted entries at the top of the multiqueue
  dm cache policy smq: be more aggressive about triggering a writeback
  dm cache policy smq: only demote entries in bottom half of the clean multiqueue
  dm cache: fix incorrect 'idle_time' reset in IO tracker
  soc: imx: add PM dependency for IMX7_PM_DOMAINS
  ARM: dts: imx6sx-sdb: Remove OPP override
  ARM: dts: imx53-qsrb: Pulldown PMIC IRQ pin
  hwmon: (coretemp) Handle frozen hotplug state correctly
  net/mlx5: Use underlay QPN from the root name space
  net/mlx5e: IPoIB, Only support regular RQ for now
  net/mlx5e: Fix setup TC ndo
  net/mlx5e: Fix ethtool pause support and advertise reporting
  net/mlx5e: Use the correct pause values for ethtool advertising
  soc: bcm: brcmstb: Correctly match 7435 SoC
  dax, xfs, ext4: compile out iomap-dax paths in the FS_DAX=n case
  dax: fix false CONFIG_BLOCK dependency
  pid_ns: Fix race between setns'ed fork() and zap_pid_ns_processes()
  pid_ns: Sleep in TASK_INTERRUPTIBLE in zap_pid_ns_processes
  [CIFS] Minor cleanup of xattr query function
  fs: cifs: transport: Use time_after for time comparison
  SMB2: Fix share type handling
  cifs: cifsacl: Use a temporary ops variable to reduce code length
  raid1: prefer disk without bad blocks
  vmxnet3: ensure that adapter is in proper state during force_close
  sfc: revert changes to NIC revision numbers
  net: ch9200: add missing USB-descriptor endianness conversions
  net: irda: irda-usb: fix firmware name on big-endian hosts
  net: dsa: mv88e6xxx: add default case to switch
  sctp: fix src address selection if using secondary addresses for ipv6
  irqchip/mbigen: Fix the clear register offset calculation
  irqchip/mbigen: Fix potential NULL dereferencing
  irqchip/mbigen: Fix memory mapping code
  KVM: PPC: Book3S PR: Don't include SPAPR TCE code on non-pseries platforms
  md/r5cache: handle sync with data in write back cache
  md/r5cache: gracefully handle journal device errors for writeback mode
  KVM: PPC: Book3S PR: Check copy_to/from_user return values
  KVM: PPC: Book3S HV: Add radix checks in real-mode hypercall handlers
  net: phy: Call bus->reset() after releasing PHYs from reset
  bpf: Handle multiple variable additions into packet pointers in verifier.
  tipc: make macro tipc_wait_for_cond() smp safe
  samples/bpf: run cleanup routines when receiving SIGTERM
  ethernet: aquantia: remove redundant checks on error status
  bpf: Remove commented out debugging hack in test_align.
  qlcnic: Update version to 5.3.66
  qlcnic: Fix link configuration with autoneg disabled
  xen-netfront: avoid crashing on resume after a failure in talk_to_netback()
  net: sched: optimize class dumps
  tcp: avoid fragmenting peculiar skbs in SACK
  netem: fix skb_orphan_partial()
  xdp: refine xdp api with regards to generic xdp
  xdp: add flag to enforce driver mode
  md/raid1/10: avoid unnecessary locking
  bpf: Provide a linux/types.h override for bpf selftests.
  bpf: Add verifier test case for alignment.
  bpf: Add bpf_verify_program() to the library.
  bpf: Add strict alignment flag for BPF_PROG_LOAD.
  bpf: Do per-instruction state dumping in verifier when log_level > 1.
  bpf: Track alignment of register values in the verifier.
  bpf, arm64: fix faulty emission of map access in tail calls
  net: ethernet: ti: netcp_core: return error while dma channel open issue
  s390/qeth: add missing hash table initializations
  s390/qeth: avoid null pointer dereference on OSN
  s390/qeth: unbreak OSM and OSN support
  s390/qeth: handle sysfs error during initialization
  mdio: mux: Correct mdio_mux_init error path issues
  ipv6/dccp: do not inherit ipv6_mc_list from parent
  netxen_nic: set rcode to the return status from the call to netxen_issue_cmd
  net: qca_spi: Fix alignment issues in rx path
  driver: vrf: Fix one possible use-after-free issue
  drbd: fix request leak introduced by locking/atomic, kref: Kill kref_sub()
  Partially Revert "of: fix sparse warnings in fdt, irq, reserved mem, and resolver code"
  s390: convert debug_info.ref_count from atomic_t to refcount_t
  tee: add ARM_SMCCC dependency
  md/raid5-cache: in r5l_do_submit_io(), submit io->split_bio first
  drm/i915/gvt: avoid unnecessary vgpu switch
  Don't delay freeing mids when blocked on slow socket write of request
  CIFS: silence lockdep splat in cifs_relock_file()
  ARM: omap2+: make omap4_get_cpu1_ns_pa_addr declaration usable
  ARM64: dts: mediatek: configure some fixed mmc parameters
  arm: dts: mt7623: add clock-frequency to the a7 timer node to mt7623.dtsi
  s390: move _text symbol to address higher than zero
  s390/qdio: increase string buffer size
  s390/ccwgroup: increase string buffer size
  s390/topology: let topology_mnest_limit() return unsigned char
  s390/uaccess: use sane length for __strncpy_from_user()
  md/md0: optimize raid0 discard handling
  scsi: pmcraid: remove redundant check to see if request_size is less than zero
  scsi: lpfc: ensure els_wq is being checked before destroying it
  scsi: cxlflash: Select IRQ_POLL
  scsi: qedf: Avoid reading past end of buffer
  scsi: qedf: Cleanup the type of io_log->op
  scsi: lpfc: double lock typo in lpfc_ns_rsp()
  scsi: qedf: properly update arguments position in function call
  scsi: scsi_lib: Add #include <scsi/scsi_transport.h>
  scsi: MAINTAINERS: update OSD entries
  scsi: Skip deleted devices in __scsi_device_lookup
  scsi: lpfc: Fix panic on BFS configuration
  scsi: libfc: do not flood console with messages 'libfc: queue full ...'
  md: don't return -EAGAIN in md_allow_write for external metadata arrays
  drm/i915/gvt: not to restore in-context mmio
  drm/etnaviv: don't put fence in case of submit failure
  drm/i915/gvt: fix typo: "supporte" -> "support"
  md/raid5: make use of spin_lock_irq over local_irq_disable + spin_lock
  EDAC, amd64: Fix reporting of Chip Select sizes on Fam17h
  s390/uprobes: fix compile for !KPROBES
  s390/ftrace: fix compile for !MODULES
  s390/cputime: fix incorrect system time
  ARM64: dts: marvell: armada37xx: add pinctrl definition
  ARM64: dts: marvell: Add pinctrl nodes for Armada 3700
  soc: renesas: Provide dummy rcar_rst_read_mode_pins() for compile-testing
  arm64: marvell: enable the Armada 37xx pinctrl driver
  ARM: dts: bcm2835: add index to the ethernet alias
  ARM: dts: bcm2835: fix uart0/uart1 pins
  ARM: dts: bcm2835: fix i2c0 pins
  ARM: dts: bcm2835: fix uart0 pinctrl node names
  drm: hdlcd: Fix the calculation of the scanout start address

Change-Id: I63ed096aee27cc5e6d5b50ed6736a031e323ed45
Signed-off-by: Kyle Yan <kyan@codeaurora.org>