Applied patches:

* x86/speculation/mds: Revert CPU buffer clear on double fault exit
* x86/speculation/mds: Improve CPU buffer clear documentation
* ARM: exynos: Fix a leaked reference by adding missing of_node_put
* crypto: vmx - fix copy-paste error in CTR mode
* crypto: crct10dif-generic - fix use via crypto_shash_digest()
* crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest()
* ALSA: usb-audio: Fix a memory leak bug
* ALSA: hda/hdmi - Consider eld_valid when reporting jack event
* ALSA: hda/realtek - EAPD turn on later
* ASoC: max98090: Fix restore of DAPM Muxes
* ASoC: RT5677-SPI: Disable 16Bit SPI Transfers
* mm/mincore.c: make mincore() more conservative
* ocfs2: fix ocfs2 read inode data panic in ocfs2_iget
* mfd: da9063: Fix OTP control register names to match datasheets for DA9063/63L
* tty/vt: fix write/write race in ioctl(KDSKBSENT) handler
* ext4: actually request zeroing of inode table after grow
* ext4: fix ext4_show_options for file systems w/o journal
* Btrfs: do not start a transaction at iterate_extent_inodes()
* bcache: fix a race between cache register and cacheset unregister
* bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim()
* ipmi:ssif: compare block number correctly for multi-part return messages
* crypto: gcm - Fix error return code in crypto_gcm_create_common()
* crypto: gcm - fix incompatibility between "gcm" and "gcm_base"
* crypto: chacha20poly1305 - set cra_name correctly
* crypto: salsa20 - don't access already-freed walk.iv
* crypto: arm/aes-neonbs - don't access already-freed walk.iv
* writeback: synchronize sync(2) against cgroup writeback membership switches
* fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount
* ext4: zero out the unused memory region in the extent tree block
* ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug
* KVM: x86: Skip EFER vs. guest CPUID checks for host-initiated writes
* net: avoid weird emergency message
* net/mlx4_core: Change the error print to info print
* ppp: deflate: Fix possible crash in deflate_init
* tipc: switch order of device registration to fix a crash
* tipc: fix modprobe tipc failed after switch order of device registration
* stm class: Fix channel free in stm output free path
* md: add mddev->pers to avoid potential NULL pointer dereference
* intel_th: msu: Fix single mode with IOMMU
* of: fix clang -Wunsequenced for be32_to_cpu()
* cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level()
* media: ov6650: Fix sensor possibly not detected on probe
* NFS4: Fix v4.0 client state corruption when mount
* clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider
* fuse: fix writepages on 32bit
* fuse: honor RLIMIT_FSIZE in fuse_file_fallocate
* iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114
* ceph: flush dirty inodes before proceeding with remount
* tracing: Fix partial reading of trace event's id file
* memory: tegra: Fix integer overflow on tick value calculation
* perf intel-pt: Fix instructions sampling rate
* perf intel-pt: Fix improved sample timestamp
* perf intel-pt: Fix sample timestamp wrt non-taken branches
* fbdev: sm712fb: fix brightness control on reboot, don't set SR30
* fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75
* fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F
* fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA
* fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping VRAM
* fbdev: sm712fb: fix support for 1024x768-16 mode
* fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display
* fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting
* PCI: Mark Atheros AR9462 to avoid bus reset
* dm delay: fix a crash when invalid device is specified
* xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink
* xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module
* vti4: ipip tunnel deregistration fixes.
* xfrm4: Fix uninitialized memory read in _decode_session4
* KVM: arm/arm64: Ensure vcpu target is unset on reset failure
* power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG
* ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour
* perf bench numa: Add define for RUSAGE_THREAD if not present
* Revert "Don't jump to compute_result state from check_result state"
* md/raid: raid5 preserve the writeback action after the parity check
* btrfs: Honour FITRIM range constraints during free space trim
* fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough
* ext4: do not delete unlinked inode from orphan list on failed truncate
* KVM: x86: fix return value for reserved EFER
* bio: fix improper use of smp_mb__before_atomic()
* Revert "scsi: sd: Keep disk read-only when re-reading partition"
* crypto: vmx - CTR: always increment IV as quadword
* gfs2: Fix sign extension bug in gfs2_update_stats
* Btrfs: fix race between ranged fsync and writeback of adjacent ranges
* btrfs: sysfs: don't leak memory when failing add fsid
* fbdev: fix divide error in fb_var_to_videomode
* hugetlb: use same fault hash key for shared and private mappings
* fbdev: fix WARNING in __alloc_pages_nodemask bug
* media: cpia2: Fix use-after-free in cpia2_exit
* media: vivid: use vfree() instead of kfree() for dev->bitmap_cap
* ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit
* at76c50x-usb: Don't register led_trigger if usb_register_driver failed
* perf tools: No need to include bitops.h in util.h
* gfs2: Fix lru_count going negative
* cxgb4: Fix error path in cxgb4_init_module
* mmc: core: Verify SD bus width
* powerpc/boot: Fix missing check of lseek() return value
* ASoC: imx: fix fiq dependencies
* spi: pxa2xx: fix SCR (divisor) calculation
* brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler()
* rtc: 88pm860x: prevent use-after-free on device remove
* w1: fix the resume command API
* dmaengine: pl330: _stop: clear interrupt status
* mac80211/cfg80211: update bss channel on channel switch
* ASoC: fsl_sai: Update is_slave_mode with correct value
* mwifiex: prevent an array overflow
* net: cw1200: fix a NULL pointer dereference
* bcache: return error immediately in bch_journal_replay()
* bcache: fix failure in journal relplay
* bcache: add failure check to run_cache_set() for journal replay
* bcache: avoid clang -Wunintialized warning
* x86/build: Move _etext to actual end of .text
* smpboot: Place the __percpu annotation correctly
* x86/mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault()
* mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions
* HID: logitech-hidpp: use RAP instead of FAP to get the protocol version
* pinctrl: pistachio: fix leaked of_node references
* dmaengine: at_xdmac: remove BUG_ON macro in tasklet
* media: coda: clear error return value before picture run
* media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper
* media: au0828: stop video streaming only when last user stops
* media: ov2659: make S_FMT succeed even if requested format doesn't match
* audit: fix a memory leak bug
* media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable()
* media: pvrusb2: Prevent a buffer overflow
* powerpc/numa: improve control of topology updates
* sched/core: Check quota and period overflow at usec to nsec conversion
* sched/core: Handle overflow in cpu_shares_write_u64
* USB: core: Don't unbind interfaces following device reset failure
* x86/irq/64: Limit IST stack overflow check to #DB stack
* i40e: don't allow changes to HW VLAN stripping on active port VLANs
* RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure
* hwmon: (vt1211) Use request_muxed_region for Super-IO accesses
* hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses
* hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses
* hwmon: (pc87427) Use request_muxed_region for Super-IO accesses
* hwmon: (f71805f) Use request_muxed_region for Super-IO accesses
* scsi: libsas: Do discovery on empty PHY to update PHY info
* mmc_spi: add a status check for spi_sync_locked
* mmc: sdhci-of-esdhc: add erratum eSDHC5 support
* mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
* PM / core: Propagate dev->power.wakeup_path when no callbacks
* extcon: arizona: Disable mic detect if running when driver is removed
* s390: cio: fix cio_irb declaration
* cpufreq: ppc_cbe: fix possible object reference leak
* cpufreq/pasemi: fix possible object reference leak
* cpufreq: pmac32: fix possible object reference leak
* x86/build: Keep local relocations with ld.lld
* iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion
* iio: hmc5843: fix potential NULL pointer dereferences
* iio: common: ssp_sensors: Initialize calculated_time in ssp_common_process_data
* rtlwifi: fix a potential NULL pointer dereference
* brcmfmac: fix missing checks for kmemdup
* b43: shut up clang -Wuninitialized variable warning
* brcmfmac: convert dev_init_lock mutex to completion
* brcmfmac: fix race during disconnect when USB completion is in progress
* scsi: ufs: Fix regulator load and icc-level configuration
* scsi: ufs: Avoid configuring regulator with undefined voltage range
* arm64: cpu_ops: fix a leaked reference by adding missing of_node_put
* x86/ia32: Fix ia32_restore_sigcontext() AC leak
* chardev: add additional check for minor range overlap
* HID: core: move Usage Page concatenation to Main item
* ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put
* ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put
* cxgb3/l2t: Fix undefined behaviour
* spi: tegra114: reset controller on probe
* media: wl128x: prevent two potential buffer overflows
* virtio_console: initialize vtermno value for ports
* tty: ipwireless: fix missing checks for ioremap
* rcutorture: Fix cleanup path for invalid torture_type strings
* usb: core: Add PM runtime calls to usb_hcd_platform_shutdown
* scsi: qla4xxx: avoid freeing unallocated dma memory
* media: m88ds3103: serialize reset messages in m88ds3103_set_frontend
* media: go7007: avoid clang frame overflow warning with KASAN
* media: saa7146: avoid high stack usage with clang
* scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices
* spi : spi-topcliff-pch: Fix to handle empty DMA buffers
* spi: rspi: Fix sequencer reset during initialization
* spi: Fix zero length xfer bug
* ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM
* ipv6: Consider sk_bound_dev_if when binding a raw socket to an address
* llc: fix skb leak in llc_build_and_send_ui_pkt()
* net-gro: fix use-after-free read in napi_gro_frags()
* net: stmmac: fix reset gpio free missing
* usbnet: fix kernel crash after disconnect
* tipc: Avoid copying bytes beyond the supplied data
* bnxt_en: Fix aggregation buffer leak under OOM condition.
* net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value
* crypto: vmx - ghash: do nosimd fallback manually
* xen/pciback: Don't disable PCI_COMMAND on PCI device reset.
* Revert "tipc: fix modprobe tipc failed after switch order of device registration"
* tipc: fix modprobe tipc failed after switch order of device registration -v2
* sparc64: Fix regression in non-hypervisor TLB flush xcall
* include/linux/bitops.h: sanitize rotate primitives
* xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic()
* usb: xhci: avoid null pointer deref when bos field is NULL
* USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
* USB: sisusbvga: fix oops in error path of sisusb_probe
* USB: Add LPM quirk for Surface Dock GigE adapter
* USB: rio500: refuse more than one device at a time
* USB: rio500: fix memory leak in close after disconnect
* media: usb: siano: Fix general protection fault in smsusb
* media: usb: siano: Fix false-positive "uninitialized variable" warning
* media: smsusb: better handle optional alignment
* scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove
* scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs)
* Btrfs: fix race updating log root item during fsync
* ALSA: hda/realtek - Set default power save node to 0
* drm/nouveau/i2c: Disable i2c bus access after ->fini()
* tty: serial: msm_serial: Fix XON/XOFF
* tty: max310x: Fix external crystal register setup
* memcg: make it work on sparse non-0-node systems
* kernel/signal.c: trace_signal_deliver when signal_group_exit
* CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM
* binder: Replace "%p" with "%pK" for stable
* binder: replace "%p" with "%pK"
* brcmfmac: Add length checks on firmware events
* brcmfmac: screening firmware event packet
* brcmfmac: revise handling events in receive path
* brcmfmac: fix incorrect event channel deduction
* brcmfmac: add length checks in scheduled scan result handler
* brcmfmac: add subtype check for event handling in data path
* userfaultfd: don't pin the user memory in userfaultfd_file_create()
* Revert "x86/build: Move _etext to actual end of .text"
* net: cdc_ncm: GetNtbFormat endian fix
* usb: gadget: fix request length error for isoc transfer
* media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
* ethtool: fix potential userspace buffer overflow
* neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit
* net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query
* net: rds: fix memory leak in rds_ib_flush_mr_pool
* pktgen: do not sleep with the thread lock held.
* rcu: locking and unlocking need to always be at least barriers
* parisc: Use implicit space register selection for loading the coherence index of I/O pdirs
* fuse: fallocate: fix return with locked inode
* MIPS: pistachio: Build uImage.gz by default
* genwqe: Prevent an integer overflow in the ioctl
* drm/gma500/cdv: Check vbt config bits when detecting lvds panels
* fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock
* fuse: Add FOPEN_STREAM to use stream_open()
* ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled
* ethtool: check the return value of get_regs_len
* Linux 4.4.181