Merge 4.14.71 into android-4.14-p

Merge 4.14.71 into android-4.14-p

Changes in 4.14.71
	i2c: xiic: Make the start and the byte count write atomic
	i2c: i801: fix DNV's SMBCTRL register offset
	scsi: lpfc: Correct MDS diag and nvmet configuration
	nbd: don't allow invalid blocksize settings
	block: bfq: swap puts in bfqg_and_blkg_put
	android: binder: fix the race mmap and alloc_new_buf_locked
	MIPS: VDSO: Match data page cache colouring when D$ aliases
	SMB3: Backup intent flag missing for directory opens with backupuid mounts
	smb3: check for and properly advertise directory lease support
	Btrfs: fix data corruption when deduplicating between different files
	KVM: s390: vsie: copy wrapping keys to right place
	KVM: VMX: Do not allow reexecute_instruction() when skipping MMIO instr
	ALSA: hda - Fix cancel_work_sync() stall from jackpoll work
	cpu/hotplug: Adjust misplaced smb() in cpuhp_thread_fun()
	cpu/hotplug: Prevent state corruption on error rollback
	x86/microcode: Make sure boot_cpu_data.microcode is up-to-date
	x86/microcode: Update the new microcode revision unconditionally
	switchtec: Fix Spectre v1 vulnerability
	crypto: aes-generic - fix aes-generic regression on powerpc
	tpm: separate cmd_ready/go_idle from runtime_pm
	ARC: [plat-axs*]: Enable SWAP
	misc: mic: SCIF Fix scif_get_new_port() error handling
	ethtool: Remove trailing semicolon for static inline
	i2c: aspeed: Add an explicit type casting for *get_clk_reg_val
	Bluetooth: h5: Fix missing dependency on BT_HCIUART_SERDEV
	gpio: tegra: Move driver registration to subsys_init level
	powerpc/powernv: Fix concurrency issue with npu->mmio_atsd_usage
	selftests/bpf: fix a typo in map in map test
	media: davinci: vpif_display: Mix memory leak on probe error path
	media: dw2102: Fix memleak on sequence of probes
	net: phy: Fix the register offsets in Broadcom iProc mdio mux driver
	blk-mq: fix updating tags depth
	scsi: target: fix __transport_register_session locking
	md/raid5: fix data corruption of replacements after originals dropped
	timers: Clear timer_base::must_forward_clk with timer_base::lock held
	media: camss: csid: Configure data type and decode format properly
	gpu: ipu-v3: default to id 0 on missing OF alias
	misc: ti-st: Fix memory leak in the error path of probe()
	uio: potential double frees if __uio_register_device() fails
	firmware: vpd: Fix section enabled flag on vpd_section_destroy
	Drivers: hv: vmbus: Cleanup synic memory free path
	tty: rocket: Fix possible buffer overwrite on register_PCI
	f2fs: fix to active page in lru list for read path
	f2fs: do not set free of current section
	f2fs: fix defined but not used build warnings
	perf tools: Allow overriding MAX_NR_CPUS at compile time
	NFSv4.0 fix client reference leak in callback
	perf c2c report: Fix crash for empty browser
	perf evlist: Fix error out while applying initial delay and LBR
	macintosh/via-pmu: Add missing mmio accessors
	ath9k: report tx status on EOSP
	ath9k_hw: fix channel maximum power level test
	ath10k: prevent active scans on potential unusable channels
	wlcore: Set rx_status boottime_ns field on rx
	rpmsg: core: add support to power domains for devices
	MIPS: Fix ISA virt/bus conversion for non-zero PHYS_OFFSET
	ata: libahci: Allow reconfigure of DEVSLP register
	ata: libahci: Correct setting of DEVSLP register
	scsi: 3ware: fix return 0 on the error path of probe
	tools/testing/nvdimm: kaddr and pfn can be NULL to ->direct_access()
	ath10k: disable bundle mgmt tx completion event support
	Bluetooth: hidp: Fix handling of strncpy for hid->name information
	x86/mm: Remove in_nmi() warning from vmalloc_fault()
	pinctrl: imx: off by one in imx_pinconf_group_dbg_show()
	gpio: ml-ioh: Fix buffer underwrite on probe error path
	pinctrl/amd: only handle irq if it is pending and unmasked
	net: mvneta: fix mtu change on port without link
	f2fs: try grabbing node page lock aggressively in sync scenario
	pktcdvd: Fix possible Spectre-v1 for pkt_devs
	f2fs: fix to skip GC if type in SSA and SIT is inconsistent
	tpm_tis_spi: Pass the SPI IRQ down to the driver
	tpm/tpm_i2c_infineon: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT)
	f2fs: fix to do sanity check with reserved blkaddr of inline inode
	MIPS: Octeon: add missing of_node_put()
	MIPS: generic: fix missing of_node_put()
	net: dcb: For wild-card lookups, use priority -1, not 0
	dm cache: only allow a single io_mode cache feature to be requested
	Input: atmel_mxt_ts - only use first T9 instance
	media: s5p-mfc: Fix buffer look up in s5p_mfc_handle_frame_{new, copy_time} functions
	partitions/aix: append null character to print data from disk
	partitions/aix: fix usage of uninitialized lv_info and lvname structures
	media: helene: fix xtal frequency setting at power on
	f2fs: fix to wait on page writeback before updating page
	f2fs: Fix uninitialized return in f2fs_ioc_shutdown()
	iommu/ipmmu-vmsa: Fix allocation in atomic context
	mfd: ti_am335x_tscadc: Fix struct clk memory leak
	f2fs: fix to do sanity check with {sit,nat}_ver_bitmap_bytesize
	NFSv4.1: Fix a potential layoutget/layoutrecall deadlock
	MIPS: WARN_ON invalid DMA cache maintenance, not BUG_ON
	RDMA/cma: Do not ignore net namespace for unbound cm_id
	drm/i915: set DP Main Stream Attribute for color range on DDI platforms
	inet: frags: change inet_frags_init_net() return value
	inet: frags: add a pointer to struct netns_frags
	inet: frags: refactor ipfrag_init()
	inet: frags: Convert timers to use timer_setup()
	inet: frags: refactor ipv6_frag_init()
	inet: frags: refactor lowpan_net_frag_init()
	ipv6: export ip6 fragments sysctl to unprivileged users
	rhashtable: add schedule points
	inet: frags: use rhashtables for reassembly units
	inet: frags: remove some helpers
	inet: frags: get rif of inet_frag_evicting()
	inet: frags: remove inet_frag_maybe_warn_overflow()
	inet: frags: break the 2GB limit for frags storage
	inet: frags: do not clone skb in ip_expire()
	ipv6: frags: rewrite ip6_expire_frag_queue()
	rhashtable: reorganize struct rhashtable layout
	inet: frags: reorganize struct netns_frags
	inet: frags: get rid of ipfrag_skb_cb/FRAG_CB
	inet: frags: fix ip6frag_low_thresh boundary
	ip: discard IPv4 datagrams with overlapping segments.
	net: speed up skb_rbtree_purge()
	net: modify skb_rbtree_purge to return the truesize of all purged skbs.
	ipv6: defrag: drop non-last frags smaller than min mtu
	net: pskb_trim_rcsum() and CHECKSUM_COMPLETE are friends
	net: add rb_to_skb() and other rb tree helpers
	net: sk_buff rbnode reorg
	ipv4: frags: precedence bug in ip_expire()
	ip: add helpers to process in-order fragments faster.
	ip: process in-order fragments efficiently
	ip: frags: fix crash in ip_do_fragment()
	mtd: ubi: wl: Fix error return code in ubi_wl_init()
	tun: fix use after free for ptr_ring
	tuntap: fix use after free during release
	autofs: fix autofs_sbi() does not check super block type
	mm: get rid of vmacache_flush_all() entirely
	Linux 4.14.71

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>