Merge 'dd-staging-polaris' into 'daydreamos-msm-polaris-4.4'.

* partner/dd-staging-polaris:
  Squashed 'drivers/staging/qcacld-3.0/' changes from 60142bf693ac..408fb533da3f
  Squashed 'drivers/staging/qca-wifi-host-cmn/' changes from 0cf2f732b0de..2eb55087d1cb
  Squashed 'drivers/staging/fw-api/' changes from 305f64546e6e..bc4e569c1390
  voice_svc: Avoid double free in voice_svc driver
  ARM: dts: msm: Update GPU IB votes for 647MHz freq. plan on SDM660
  clk: qcom: Retrieve pre_div from freq_tbl for shared RCG
  net: ipc_router: Remove wakeup-source for Sensor ports
  msm: mdss: Disable ECG feature for all chipsets
  ARM: dts: msm: update icnss device node for sdm660 and sdm630
  ANDROID: binder: don't enqueue death notifications to thread todo.
  ion: fix the return value of shrinkers
  sched/walt: Fix use after free in trace_sched_update_task_ravg()
  ANDROID: binder: fix transaction leak.
  msm: camera: Change data type of data rate
  leds: qpnp-flash-v2: Add support for multi-strobe
  ath10k: update wowlan config and rekey data store method
  net: convert packet_fanout.sk_ref from atomic_t to refcount_t
  mm-camera2:isp2: Release buffer lock after use
  usb: dwc3-msm: Resume PHY before notify_connect on start_host
  refcount_t: Introduce a special purpose refcount type
  nf: xt_socket: Fix out-of-bounds in xt_socket_lookup_slow_v{4,6}
  msm: camera: sensor: Program SDR mask delay based on data rate
  msm: camera: sensor: Receive sensor output data rate information
  USB: core: harden cdc_parse_cdc_header
  Squashed 'drivers/staging/qcacld-3.0/' changes from c930b4b7dd04..60142bf693ac
  Squashed 'drivers/staging/fw-api/' changes from 4cf5372e0d4f..305f64546e6e
  usbnet: move the CDC parser into USB core
  sctp: do not peel off an assoc from one netns to another one
  netlink: Add netns check on taps
  KEYS: encrypted: fix buffer overread in valid_master_desc()
  PCI: Fix race condition with driver_override
  ANDROID: NFC: Fix possible memory corruption when handling SHDLC I-Frame commands
  net: ipc_router: Fix buffer overflow during memcpy
  mm-camera2:isp2: Release buffer lock after use
  ASoC: sdm660: Make vneg_out voltage as high and add check for impedance det
  sdcardfs: Fix sdcardfs to stop creating cases-sensitive duplicate entries.
  ath10k: enable neighbor solicitation offload in wow suspend
  clk: msm: osm: Update maximum number of bytes to read from buffer
  msm: sde: check buffer size before writing to user buffer
  msm: vidc: Fix use after free issue in set_output_buffers
  USB: f_accessory: Check dev pointer before decoding ctrl request
  ANDROID: fuse: Add null terminator to path in canonical path to avoid issue
  ath10k: deinit wow config in driver unload
  msm: kgsl: Enhance reading lm_sequence in _execute_reg_sequence()
  block: Fix oops in locked_inode_to_wb_and_lock_list()
  block: Fix bdi assignment to bdev inode when racing with disk delete
  fbdev: msm: check buffer size before writing to user buffer
  usb: gsi: Don't disable endpoints as part of flow control
  ath10k: Enable wlan firmware based on the driver mode
  ath10k: Skip reading of utf.bin file
  msm: kgsl: Update global memory base to 0XFC000000 for 64bit kernel
  msm: kgsl: Move global memory region to 0x100000000
  ALSA: usb-audio: Check out-of-bounds access by corrupted buffer descriptor
  msm: mdss: Fix for wrong length in copy_to_user
  mm-camera2:isp2: Avoid use after free buffer
  clk: qcom: osm: Update maximum number of bytes to read from buffer
  net: ipv4: fix for a race condition in raw_sendmsg
  msm: ais: isp: Handling buffer use after getting it freed
  ARM: dts: msm: Update GPU chipid for SDM636
  ion: ensure valid start address
  ASoC: sdm660: fix clock refcount for MI2S shutdown
  drm/msm: support shutdown sequence on msm driver
  msm: kgsl: Add support for A509 GPU
  drm/msm/sde: store mdss irq status in case of irq storm
  drm/msm/sde: take irq callback lock before reading cb list
  drm/msm: limit sde_dbg_dump output to current entries
  drm/msm: add input sanitization on debug dump debugfs
  drm/msm/sde: add debugfs nodes for underruns debug
  drm/msm: protect register dumps and debugfs with mutex
  drm/msm/sde: fix flush configuration for physical encoder
  drm/msm/sde: add validation checks for source split
  drm/msm: move display and event threads to realtime priority
  drm/msm : add null check on framebuffer in cleanup
  drm/msm/sde: propagate the cdm block length from the catalog
  drm/msm/sde: add ubwc equivalent tile formats
  drm/msm/sde: set the tile height for all supported formats
  drm/msm: init enum properties to default value
  msm: isp: Clear irq status if irq is set again with same value
  msm: isp: Add pingpong status to tasklet command
  clk: qcom: Remove the CLK_SET_RATE_PARENT flag for Byte intferface clk
  diag: Protect the decrement of number of diag clients
  msm: ipa: Fix to handle NULL pointer dereference
  ASoC: msm: qdsp6v2: check for buffer size before read
  asoc: msm: add check for integer overflow
  ASoC: wcd934x-dsp-cntl: Limit array size of val
  msm: mdss: Fix scalar LUT handling
  HID: usbhid: fix out-of-bounds bug
  USB: core: fix out-of-bounds access bug in usb_get_bos_descriptor()
  USB: serial: console: fix use-after-free after failed setup
  ALSA: usb-audio: Kill stray URB at exiting
  USB: uas: fix bug in handling of alternate settings
  USB: fix out-of-bounds in usb_set_configuration
  drm/msm: HPD_OFF Property for SDE HDMI Connector
  diag: Validate copying length against source buffer length
  drm/msm: add kconfig for enabling event log
  drm/msm/sde: move sde irq printing out of drm_debug area
  drm/msm/sde: check in video encoder irq if ctl was flushed
  drm/msm/sde: add rectangle utility functions to sde
  drm/msm/sde: enforce pipe priority restrictions
  drm/msm/sde: fix register debug range printing
  drm/msm: fix issue dumping sde registers
  drm/msm/sde: add sde debug bus dump support
  drm/msm: add register dumping facility to sde debug
  fbdev : do not fail vsync ioctl when display in low power state
  msm: kgsl: Fix reading lm_sequence in _execute_reg_sequence()
  diag: Handle data ready notification properly
  diag: Fix possible use-after-free issue for mdlog session info
  drm/msm/sde: setup alpha and bit format on qseedv3
  ath10k: append the wmi_op_version to testmode get_version cmd

Bug: 78464228
Bug: 80093456
Tests: Device boots and passes sanity tests.
       CTS tests pass as per userdebug expectations.

Change-Id: I3a6b7f1c9b187b6ea5427b7b4fe373761a3eec9a