Commit Graph

137 Commits

Author SHA1 Message Date
Michael Bestas
bf15dd2933 Merge tag 'ASB-2024-09-05_4.19-stable' of https://android.googlesource.com/kernel/common into android-msm-pixel-4.19
https://source.android.com/docs/security/bulletin/2024-09-01
CVE-2024-36972

* tag 'ASB-2024-09-05_4.19-stable' of https://android.googlesource.com/kernel/common: (331 commits)
  Linux 4.19.321
  drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
  ipc: remove memcg accounting for sops objects in do_semtimedop()
  scsi: aacraid: Fix double-free on probe failure
  usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes()
  usb: dwc3: st: fix probed platform device ref count on probe error path
  usb: dwc3: core: Prevent USB core invalid event buffer address access
  usb: dwc3: omap: add missing depopulate in probe error path
  USB: serial: option: add MeiG Smart SRM825L
  cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
  net: busy-poll: use ktime_get_ns() instead of local_clock()
  gtp: fix a potential NULL pointer dereference
  soundwire: stream: fix programming slave ports for non-continous port maps
  net: prevent mss overflow in skb_segment()
  ida: Fix crash in ida_free when the bitmap is empty
  net:rds: Fix possible deadlock in rds_message_put
  fbmem: Check virtual screen sizes in fb_set_var()
  fbcon: Prevent that screen size is smaller than font size
  memcg: enable accounting of ipc resources
  cgroup/cpuset: Prevent UAF in proc_cpuset_show()
  ...

 Conflicts:
	Documentation/arm64/silicon-errata.txt
	arch/arm64/include/asm/cpucaps.h
	arch/arm64/include/asm/cputype.h
	arch/arm64/kernel/cpu_errata.c
	drivers/mmc/core/mmc_test.c

Change-Id: Id6bbf5f84f4823b601b92267408ab2025b6ba9f4
2024-10-08 21:28:41 +03:00
Michael Bestas
0d750eaafc Merge tag 'ASB-2024-08-05_4.19-stable' of https://android.googlesource.com/kernel/common into android-msm-pixel-4.19
https://source.android.com/docs/security/bulletin/2024-08-01
CVE-2024-36971

* tag 'ASB-2024-08-05_4.19-stable' of https://android.googlesource.com/kernel/common: (2363 commits)
  Linux 4.19.318
  i2c: rcar: bring hardware to known state when probing
  nilfs2: fix kernel bug on rename operation of broken directory
  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
  tcp: avoid too many retransmit packets
  tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
  net: tcp: fix unexcepted socket die when snd_wnd is 0
  tcp: refactor tcp_retransmit_timer()
  libceph: fix race between delayed_work() and ceph_monc_stop()
  hpet: Support 32-bit userspace
  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
  USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k
  USB: serial: option: add Rolling RW350-GL variants
  USB: serial: option: add Netprisma LCUK54 series modules
  USB: serial: option: add support for Foxconn T99W651
  USB: serial: option: add Fibocom FM350-GL
  USB: serial: option: add Telit FN912 rmnet compositions
  USB: serial: option: add Telit generic core-dump composition
  ARM: davinci: Convert comma to semicolon
  ...

 Conflicts:
	Documentation/devicetree/bindings/sound/rt5645.txt
	android/abi_gki_aarch64.xml
	drivers/clk/qcom/clk-rcg2.c
	drivers/hwtracing/coresight/coresight-etm4x.c
	drivers/leds/leds-pwm.c
	drivers/mmc/core/host.c
	drivers/mmc/core/sdio.c
	drivers/mmc/host/cqhci.c
	drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c
	drivers/rpmsg/qcom_glink_native.c
	drivers/scsi/ufs/ufshcd.c
	drivers/thermal/thermal_core.c
	drivers/usb/dwc3/core.c
	drivers/usb/gadget/function/f_ncm.c
	fs/f2fs/gc.c
	fs/pstore/ram_core.c
	include/linux/fs.h
	include/linux/timer.h
	include/net/tcp.h
	init/initramfs.c
	kernel/events/core.c
	kernel/sched/idle.c
	kernel/time/timer.c
	mm/page_alloc.c
	net/wireless/scan.c
	scripts/checkpatch.pl

Change-Id: Ice08f3ba5dc64a093bc381710ef2408d963cb983
2024-09-06 02:00:44 +03:00
Helge Deller
f453f32f13 fbmem: Check virtual screen sizes in fb_set_var()
commit 6c11df58fd1ac0aefcb3b227f72769272b939e56 upstream.

Verify that the fbdev or drm driver correctly adjusted the virtual
screen sizes. On failure report the failing driver and reject the screen
size change.

Signed-off-by: Helge Deller <deller@gmx.de>
Reviewed-by: Geert Uytterhoeven <geert@linux-m68k.org>
Cc: stable@vger.kernel.org # v5.4+
Signed-off-by: Hugo SIMELIERE <hsimeliere.opensource@witekio.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2024-09-04 13:13:08 +02:00
Helge Deller
54eaaac622 fbcon: Prevent that screen size is smaller than font size
commit e64242caef18b4a5840b0e7a9bff37abd4f4f933 upstream.

We need to prevent that users configure a screen size which is smaller than the
currently selected font size. Otherwise rendering chars on the screen will
access memory outside the graphics memory region.

This patch adds a new function fbcon_modechange_possible() which
implements this check and which later may be extended with other checks
if necessary.  The new function is called from the FBIOPUT_VSCREENINFO
ioctl handler in fbmem.c, which will return -EINVAL if userspace asked
for a too small screen size.

Signed-off-by: Helge Deller <deller@gmx.de>
Reviewed-by: Geert Uytterhoeven <geert@linux-m68k.org>
Cc: stable@vger.kernel.org # v5.4+
Signed-off-by: Hugo SIMELIERE <hsimeliere.opensource@witekio.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2024-09-04 13:13:08 +02:00
Roman Smirnov
1fb52bc1de fbmon: prevent division by zero in fb_videomode_from_videomode()
[ Upstream commit c2d953276b8b27459baed1277a4fdd5dd9bd4126 ]

The expression htotal * vtotal can have a zero value on
overflow. It is necessary to prevent division by zero like in
fb_var_to_videomode().

Found by Linux Verification Center (linuxtesting.org) with Svace.

Signed-off-by: Roman Smirnov <r.smirnov@omp.ru>
Reviewed-by: Sergey Shtylyov <s.shtylyov@omp.ru>
Signed-off-by: Helge Deller <deller@gmx.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-04-13 12:50:16 +02:00
Nam Cao
14b84d9a23 fbdev: flush deferred work in fb_deferred_io_fsync()
commit 15e4c1f462279b4e128f27de48133e0debe9e0df upstream.

The driver's fsync() is supposed to flush any pending operation to
hardware. It is implemented in this driver by cancelling the queued
deferred IO first, then schedule it for "immediate execution" by calling
schedule_delayed_work() again with delay=0. However, setting delay=0
only means the work is scheduled immediately, it does not mean the work
is executed immediately. There is no guarantee that the work is finished
after schedule_delayed_work() returns. After this driver's fsync()
returns, there can still be pending work. Furthermore, if close() is
called by users immediately after fsync(), the pending work gets
cancelled and fsync() may do nothing.

To ensure that the deferred IO completes, use flush_delayed_work()
instead. Write operations to this driver either write to the device
directly, or invoke schedule_delayed_work(); so by flushing the
workqueue, it can be guaranteed that all previous writes make it to the
device.

Fixes: 5e841b88d2 ("fb: fsync() method for deferred I/O flush.")
Cc: stable@vger.kernel.org
Signed-off-by: Nam Cao <namcao@linutronix.de>
Reviewed-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de>
Signed-off-by: Helge Deller <deller@gmx.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2024-01-25 14:33:37 -08:00
Wilson Sung
e3167a4609 Merge android-4.19-stable (4.19.294) into android-msm-pixel-4.19-lts
Merge 4.19.294 into android-4.19-stable
Linux 4.19.294
    Revert "ARM: ep93xx: fix missing-prototype warnings"
    Revert "MIPS: Alchemy: fix dbdma2"
    Merge 4.19.293 into android-4.19-stable
Linux 4.19.293
    dma-buf/sw_sync: Avoid recursive lock during fence signal
  * clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
      include/linux/clk.h
  * scsi: core: raid_class: Remove raid_component_add()
      include/linux/raid_class.h
    scsi: snic: Fix double free in snic_tgt_create()
    irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
  * rtnetlink: Reject negative ifindexes in RTM_NEWLINK
      net/core/rtnetlink.c
  * netfilter: nf_queue: fix socket leak
      net/netfilter/nf_queue.c
  * sched/rt: pick_next_rt_entity(): check list_entry
      kernel/sched/rt.c
  * mmc: block: Fix in_flight[issue_type] value error
      drivers/mmc/core/block.c
    x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4
    PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus
    media: vcodec: Fix potential array out-of-bounds in encoder queue_setup
  * lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels
      lib/clz_ctz.c
    batman-adv: Fix batadv_v_ogm_aggr_send memory leak
    batman-adv: Fix TT global entry leak when client roamed back
    batman-adv: Do not get eth header before batadv_check_management_packet
    batman-adv: Don't increase MTU when set by user
    batman-adv: Trigger events for auto adjusted MTU
    nfsd: Fix race to FREE_STATEID and cl_revoked
    ibmveth: Use dcbf rather than dcbfl
    ipvs: fix racy memcpy in proc_do_sync_threshold
    ipvs: Improve robustness to the ipvs sysctl
  * bonding: fix macvlan over alb bond support
      drivers/net/bonding/bond_alb.c
      include/net/bonding.h
  * net: remove bond_slave_has_mac_rcu()
      include/net/bonding.h
  * net/sched: fix a qdisc modification with ambiguous command request
      net/sched/sch_api.c
    igb: Avoid starting unnecessary workqueues
    dccp: annotate data-races in dccp_poll()
  * sock: annotate data-races around prot->memory_pressure
      include/net/sock.h
      net/sctp/socket.c
  * tracing: Fix memleak due to race between current_tracer and trace
      kernel/trace/trace.c
    drm/amd/display: check TG is non-null before checking if enabled
    drm/amd/display: do not wait for mpc idle if tg is disabled
  * regmap: Account for register length in SMBus I/O limits
      drivers/base/regmap/regmap-i2c.c
    dm integrity: reduce vmalloc space footprint on 32-bit architectures
    dm integrity: increase RECALC_SECTORS to improve recalculate speed
    powerpc: Fail build if using recordmcount with binutils v2.37
    powerpc: remove leftover code of old GCC version checks
    powerpc/32: add stack protector support
    fbdev: fix potential OOB read in fast_imageblit()
    fbdev: Fix sys_imageblit() for arbitrary image widths
    fbdev: Improve performance of sys_imageblit()
    tty: serial: fsl_lpuart: add earlycon for imx8ulp platform
    Revert "tty: serial: fsl_lpuart: drop earlycon entry for i.MX8QXP"
    MIPS: cpu-features: Use boot_cpu_type for CPU type based features
    MIPS: cpu-features: Enable octeon_cache by cpu_type
    fs: dlm: fix mismatch of plock results from userspace
    fs: dlm: use dlm_plock_info for do_unlock_close
    fs: dlm: change plock interrupted message to debug again
    fs: dlm: add pid to debug log
    dlm: replace usage of found with dedicated list iterator variable
    dlm: improve plock logging if interrupted
    PCI: acpiphp: Reassign resources on bridge if necessary
    net: phy: broadcom: stub c45 read/write for 54810
  * net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure
      net/xfrm/xfrm_user.c
  * net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled
      net/ipv4/tcp_timer.c
    virtio-net: set queues after driver_ok
  * af_unix: Fix null-ptr-deref in unix_stream_sendpage().
      net/unix/af_unix.c
  * netfilter: set default timeout to 3 secs for sctp shutdown send and recv state
      net/netfilter/nf_conntrack_proto_sctp.c
    test_firmware: prevent race conditions by a correct implementation of locking
    mmc: wbsd: fix double mmc_free_host() in wbsd_init()
    cifs: Release folio lock on fscache read hit.
  * ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces.
      sound/usb/quirks-table.h
    serial: 8250: Fix oops for port->pm on uart_change_pm()
    ASoC: meson: axg-tdm-formatter: fix channel slot allocation
    ASoC: rt5665: add missed regulator_bulk_disable
  * net: do not allow gso_size to be set to GSO_BY_FRAGS
      include/linux/virtio_net.h
  * sock: Fix misuse of sk_under_memory_pressure()
      include/net/sock.h
      net/core/sock.c
    i40e: fix misleading debug logs
    team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
    netfilter: nft_dynset: disallow object maps
    selftests: mirror_gre_changes: Tighten up the TTL test match
  * xfrm: add NULL check in xfrm_update_ae_params
      net/xfrm/xfrm_user.c
  * ip_vti: fix potential slab-use-after-free in decode_session6
      net/ipv4/ip_vti.c
  * ip6_vti: fix slab-use-after-free in decode_session6
      net/ipv6/ip6_vti.c
  * xfrm: fix slab-use-after-free in decode_session6
      net/xfrm/xfrm_interface_core.c
  * xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c
      net/xfrm/Makefile
  * net: af_key: fix sadb_x_filter validation
      net/key/af_key.c
  * net: xfrm: Fix xfrm_address_filter OOB read
      net/xfrm/xfrm_user.c
    btrfs: fix BUG_ON condition in btrfs_cancel_balance
    powerpc/rtas_flash: allow user copy to flash block cache objects
    fbdev: mmp: fix value check in mmphw_probe()
    virtio-mmio: don't break lifecycle of vm_dev
    virtio-mmio: Use to_virtio_mmio_device() to simply code
    virtio-mmio: convert to devm_platform_ioremap_resource
    nfsd: Remove incorrect check in nfsd4_validate_stateid
    nfsd4: kill warnings on testing stateids with mismatched clientids
    block: fix signed int overflow in Amiga partition support
    mmc: sunxi: fix deferred probing
    mmc: bcm2835: fix deferred probing
  * mmc: Remove dev_err() usage after platform_get_irq()
      drivers/mmc/host/sdhci-msm.c
    mmc: tmio: move tmio_mmc_set_clock() to platform hook
    mmc: tmio: replace tmio_mmc_clk_stop() calls with tmio_mmc_set_clock()
    mmc: meson-gx: remove redundant mmc_request_done() call from irq context
    mmc: meson-gx: remove useless lock
  * USB: dwc3: qcom: fix NULL-deref on suspend
      drivers/usb/dwc3/dwc3-qcom.c
  * usb: dwc3: qcom: Add helper functions to enable,disable wake irqs
      drivers/usb/dwc3/dwc3-qcom.c
    irqchip/mips-gic: Use raw spinlock for gic_lock
    irqchip/mips-gic: Get rid of the reliance on irq_cpu_online()
    x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms
    powerpc/64s/radix: Fix soft dirty tracking
    powerpc: Move page table dump files in a dedicated subdirectory
    powerpc/mm: dump block address translation on book3s/32
    powerpc/mm: dump segment registers on book3s/32
    powerpc/mm: Move pgtable_t into platform headers
    powerpc/mm: move platform specific mmu-xxx.h in platform directories
    iio: addac: stx104: Fix race condition when converting analog-to-digital
    iio: addac: stx104: Fix race condition for stx104_write_raw()
    iio: adc: stx104: Implement and utilize register structures
    iio: adc: stx104: Utilize iomap interface
  * iio: add addac subdirectory
      drivers/iio/Kconfig
      drivers/iio/Makefile
      drivers/iio/addac/Kconfig
      drivers/iio/addac/Makefile
  * IMA: allow/fix UML builds
      security/integrity/ima/Kconfig
    drm/amdgpu: Fix potential fence use-after-free v2
  * Bluetooth: L2CAP: Fix use-after-free
      net/bluetooth/l2cap_core.c
    pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()
    gfs2: Fix possible data races in gfs2_show_options()
    media: platform: mediatek: vpu: fix NULL ptr dereference
  * media: v4l2-mem2mem: add lock to protect parameter num_rdy
      include/media/v4l2-mem2mem.h
    FS: JFS: Check for read-only mounted filesystem in txBegin
    FS: JFS: Fix null-ptr-deref Read in txBegin
    MIPS: dec: prom: Address -Warray-bounds warning
    fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
    udf: Fix uninitialized array access for some pathnames
  * HID: add quirk for 03f0:464a HP Elite Presenter Mouse
      drivers/hid/hid-ids.h
      drivers/hid/hid-quirks.c
  * quota: fix warning in dqgrab()
      fs/quota/dquot.c
  * quota: Properly disable quotas when add_dquot_ref() fails
      fs/quota/dquot.c
    ALSA: emu10k1: roll up loops in DSP setup code for Audigy
    drm/radeon: Fix integer overflow in radeon_cs_parser_init
    selftests: forwarding: tc_flower: Relax success criterion
  * lib/mpi: Eliminate unused umul_ppmm definitions for MIPS
      lib/mpi/longlong.h
    Merge 4.19.292 into android-4.19-stable
  * Revert "posix-timers: Ensure timer ID search-loop limit is valid"
      include/linux/sched/signal.h
      kernel/time/posix-timers.c
    Merge 4.19.291 into android-4.19-stable
    Merge 4.19.290 into android-4.19-stable
    UPSTREAM: media: usb: siano: Fix warning due to null work_func_t function pointer
  * UPSTREAM: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
      net/bluetooth/l2cap_sock.c
    UPSTREAM: net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
  * UPSTREAM: net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free
      net/sched/cls_u32.c
Linux 4.19.292
  * sch_netem: fix issues in netem_change() vs get_dist_table()
      net/sched/sch_netem.c
    alpha: remove __init annotation from exported page_is_ram()
    scsi: core: Fix possible memory leak if device_add() fails
    scsi: snic: Fix possible memory leak if device_add() fails
    scsi: 53c700: Check that command slot is not NULL
    scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
  * scsi: core: Fix legacy /proc parsing buffer overflow
      drivers/scsi/scsi_proc.c
  * netfilter: nf_tables: report use refcount overflow
      include/net/netfilter/nf_tables.h
  * netfilter: nf_tables: bogus EBUSY when deleting flowtable after flush
      include/net/netfilter/nf_tables.h
    btrfs: don't stop integrity writeback too early
    ibmvnic: Handle DMA unmapping of login buffs in release functions
  * wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
      include/net/cfg80211.h
    IB/hfi1: Fix possible panic during hotplug remove
  * drivers: net: prevent tun_build_skb() to exceed the packet size limit
      drivers/net/tun.c
    dccp: fix data-race around dp->dccps_mss_cache
  * bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
      drivers/net/bonding/bond_main.c
  * net/packet: annotate data-races around tp->status
      net/packet/af_packet.c
    mISDN: Update parameter type of dsp_cmx_send()
    drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes
    x86: Move gds_ucode_mitigated() declaration to header
    x86/mm: Fix VDSO and VVAR placement on 5-level paging machines
    x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
  * usb: dwc3: Properly handle processing of pending events
      drivers/usb/dwc3/gadget.c
    usb-storage: alauda: Fix uninit-value in alauda_check_media()
  * binder: fix memory leak in binder_init()
      drivers/android/binder.c
      drivers/android/binder_alloc.c
      drivers/android/binder_alloc.h
    iio: cros_ec: Fix the allocation size for cros_ec_command
    nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
    radix tree test suite: fix incorrect allocation size for pthreads
    drm/nouveau/gr: enable memory loads on helper invocation on all channels
    dmaengine: pl330: Return DMA_PAUSED when transaction is paused
  * ipv6: adjust ndisc_is_useropt() to also return true for PIO
      net/ipv6/ndisc.c
    mmc: moxart: read scr register without changing byte order
    sparc: fix up arch_cpu_finalize_init() build breakage.
  * UPSTREAM: net/sched: cls_fw: Fix improper refcount update leads to use-after-free
      net/sched/cls_fw.c
Linux 4.19.291
  * drm/edid: fix objtool warning in drm_cvt_modes()
      drivers/gpu/drm/drm_edid.c
    arm64: dts: stratix10: fix incorrect I2C property for SCL signal
  * drivers core: Use sysfs_emit and sysfs_emit_at for show(device *...) functions
      drivers/base/arch_topology.c
      drivers/base/cacheinfo.c
      drivers/base/core.c
      drivers/base/cpu.c
      drivers/base/firmware_loader/fallback.c
      drivers/base/platform.c
      drivers/base/power/sysfs.c
      drivers/base/soc.c
    ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node
    ARM: dts: imx6sll: fixup of operating points
    ARM: dts: imx: add usb alias
    ARM: dts: imx6sll: Make ssi node name same as other platforms
  * PM: sleep: wakeirq: fix wake irq arming
      drivers/base/power/power.h
      drivers/base/power/wakeirq.c
  * PM / wakeirq: support enabling wake-up irq after runtime_suspend called
      drivers/base/power/power.h
      drivers/base/power/runtime.c
      drivers/base/power/wakeirq.c
      include/linux/pm_wakeirq.h
    powerpc/mm/altmap: Fix altmap boundary check
    mtd: rawnand: omap_elm: Fix incorrect type in assignment
    test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation
    test_firmware: fix a memory leak with reqs buffer
    ext2: Drop fragment support
  * net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
      drivers/net/usb/usbnet.c
  * Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
      net/bluetooth/l2cap_sock.c
    fs/sysv: Null check to prevent null-ptr-deref bug
  * USB: zaurus: Add ID for A-300/B-500/C-700
      drivers/net/usb/cdc_ether.c
      drivers/net/usb/zaurus.c
    libceph: fix potential hang in ceph_osdc_notify()
    scsi: zfcp: Defer fc_rport blocking until after ADISC response
  * tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen
      net/ipv4/tcp_metrics.c
  * tcp_metrics: annotate data-races around tm->tcpm_net
      net/ipv4/tcp_metrics.c
  * tcp_metrics: annotate data-races around tm->tcpm_vals[]
      net/ipv4/tcp_metrics.c
  * tcp_metrics: annotate data-races around tm->tcpm_lock
      net/ipv4/tcp_metrics.c
  * tcp_metrics: annotate data-races around tm->tcpm_stamp
      net/ipv4/tcp_metrics.c
  * tcp_metrics: fix addr_same() helper
      net/ipv4/tcp_metrics.c
    ip6mr: Fix skb_under_panic in ip6mr_cache_report()
    net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
  * net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free
      net/sched/cls_u32.c
  * net: add missing data-race annotation for sk_ll_usec
      net/core/sock.c
  * net: add missing data-race annotations around sk->sk_peek_off
      net/core/sock.c
      net/unix/af_unix.c
  * net: sched: cls_u32: Fix match key mis-addressing
      net/sched/cls_u32.c
    perf test uprobe_from_different_cu: Skip if there is no gcc
    net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer()
    KVM: s390: fix sthyi error handling
  * word-at-a-time: use the same return type for has_zero regardless of endianness
      include/asm-generic/word-at-a-time.h
  * loop: Select I/O scheduler 'none' from inside add_disk()
      drivers/block/loop.c
  * perf: Fix function pointer case
      kernel/events/core.c
  * net/sched: cls_u32: Fix reference counter leak leading to overflow
      net/sched/cls_u32.c
    ASoC: cs42l51: fix driver to properly autoload with automatic module loading
    net/sched: sch_qfq: account for stab overhead in qfq_enqueue
  * net/sched: cls_fw: Fix improper refcount update leads to use-after-free
      net/sched/cls_fw.c
    drm/client: Fix memory leak in drm_client_target_cloned
    dm cache policy smq: ensure IO doesn't prevent cleaner policy progress
    ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register
    s390/dasd: fix hanging device after quiesce/resume
    virtio-net: fix race between set queues and probe
    serial: 8250_dw: Preserve original value of DLF register
  * serial: 8250_dw: split Synopsys DesignWare 8250 common functions
      drivers/tty/serial/8250/Kconfig
    irq-bcm6345-l1: Do not assume a fixed block to cpu mapping
    tpm_tis: Explicitly check for error code
    btrfs: check for commit error at btrfs_attach_transaction_barrier()
    hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled
    staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()
    Documentation: security-bugs.rst: clarify CVE handling
    Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group
    usb: xhci-mtk: set the dma max_seg_size
  * USB: quirks: add quirk for Focusrite Scarlett
      drivers/usb/core/quirks.c
    usb: ohci-at91: Fix the unhandle interrupt when resume
  * usb: dwc3: don't reset device side if dwc3 was configured as host-only
      drivers/usb/dwc3/core.c
    usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy
  * Revert "usb: dwc3: core: Enable AutoRetry feature in the controller"
      drivers/usb/dwc3/core.c
      drivers/usb/dwc3/core.h
    can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED
    USB: serial: simple: sort driver entries
    USB: serial: simple: add Kaufmann RKS+CAN VCP
    USB: serial: option: add Quectel EC200A module support
    USB: serial: option: support Quectel EM060K_128
  * tracing: Fix warning in trace_buffered_event_disable()
      kernel/trace/trace_events.c
  * ring-buffer: Fix wrong stat of cpu_buffer->read
      kernel/trace/ring_buffer.c
    ata: pata_ns87415: mark ns87560_tf_read static
    dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths
  * block: Fix a source code comment in include/uapi/linux/blkzoned.h
      include/uapi/linux/blkzoned.h
    ASoC: fsl_spdif: Silence output on stop
    drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb()
    RDMA/mlx4: Make check for invalid flags stricter
    benet: fix return value check in be_lancer_xmit_workarounds()
    net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64
    net/sched: mqprio: add extack to mqprio_parse_nlattr()
    net/sched: mqprio: refactor nlattr parsing to a separate function
    platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100
    team: reset team's flags when down link is P2P device
  * bonding: reset bond's flags when down link is P2P device
      drivers/net/bonding/bond_main.c
  * tcp: Reduce chance of collisions in inet6_hashfn().
      include/net/ipv6.h
  * ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address
      net/ipv6/addrconf.c
    ethernet: atheros: fix return value check in atl1e_tso_csum()
    phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()
    i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
  * ext4: fix to check return value of freeze_bdev() in ext4_shutdown()
      fs/ext4/ioctl.c
    scsi: qla2xxx: Array index may go out of bound
    scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c
    ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
    ftrace: Store the order of pages allocated in ftrace_page
    ftrace: Check if pages were allocated before calling free_pages()
  * ftrace: Add information on number of page groups allocated
      kernel/trace/trace.c
      kernel/trace/trace.h
    fs: dlm: interrupt posix locks only when process is killed
    dlm: rearrange async condition return
    dlm: cleanup plock_op vs plock_xop
    PCI/ASPM: Avoid link retraining race
    PCI/ASPM: Factor out pcie_wait_for_retrain()
    PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link()
    PCI: Rework pcie_retrain_link() wait loop
  * ext4: Fix reusing stale buffer heads from last failed mounting
      fs/ext4/super.c
  * ext4: rename journal_dev to s_journal_dev inside ext4_sb_info
      fs/ext4/ext4.h
      fs/ext4/fsmap.c
      fs/ext4/super.c
    btrfs: fix extent buffer leak after tree mod log failure at split_node()
    bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent
    bcache: remove 'int n' from parameter list of bch_bucket_alloc_set()
    bcache: use MAX_CACHES_PER_SET instead of magic number 8 in __bch_bucket_alloc_set
    gpio: tps68470: Make tps68470_gpio_output() always set the initial value
    tracing/histograms: Return an error if we fail to add histogram to hist_vars list
  * tcp: annotate data-races around fastopenq.max_qlen
      include/linux/tcp.h
      net/ipv4/tcp.c
      net/ipv4/tcp_fastopen.c
  * tcp: annotate data-races around tp->notsent_lowat
      include/net/tcp.h
      net/ipv4/tcp.c
  * tcp: annotate data-races around rskq_defer_accept
      net/ipv4/tcp.c
  * tcp: annotate data-races around tp->linger2
      net/ipv4/tcp.c
  * net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX
      include/net/tcp.h
      net/ipv4/tcp.c
    netfilter: nf_tables: can't schedule in nft_chain_validate
    netfilter: nf_tables: fix spurious set element insertion failure
  * llc: Don't drop packet from non-root netns.
      net/llc/llc_input.c
    fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe
  * Revert "tcp: avoid the lookup process failing to get sk in ehash table"
      net/ipv4/inet_hashtables.c
      net/ipv4/inet_timewait_sock.c
    net:ipv6: check return value of pskb_trim()
    net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field()
    pinctrl: amd: Use amd_pinconf_set() for all config options
    fbdev: imxfb: warn about invalid left/right margin
    spi: bcm63xx: fix max prepend length
    igb: Fix igb_down hung on surprise removal
    wifi: iwlwifi: mvm: avoid baid size integer overflow
  * wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point()
      net/wireless/wext-core.c
  * bpf: Address KCSAN report on bpf_lru_list
      kernel/bpf/bpf_lru_list.c
      kernel/bpf/bpf_lru_list.h
  * sched/fair: Don't balance task to its current running CPU
      kernel/sched/fair.c
  * posix-timers: Ensure timer ID search-loop limit is valid
      include/linux/sched/signal.h
      kernel/time/posix-timers.c
    md/raid10: prevent soft lockup while flush writes
    md: fix data corruption for raid456 when reshape restart while grow up
    nbd: Add the maximum limit of allocated index in nbd_dev_add
    debugobjects: Recheck debug_objects_enabled before reporting
  * ext4: correct inline offset when handling xattrs in inode body
      fs/ext4/xattr.c
    can: bcm: Fix UAF in bcm_proc_show()
  * fuse: revalidate: don't invalidate if interrupted
      fs/fuse/dir.c
    perf probe: Add test for regression introduced by switch to die_get_decl_file()
    tracing/histograms: Add histograms to hist_vars if they have referenced variables
  * drm/atomic: Fix potential use-after-free in nonblocking commits
      drivers/gpu/drm/drm_atomic.c
    scsi: qla2xxx: Pointer may be dereferenced
    scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()
    scsi: qla2xxx: Fix potential NULL pointer dereference
    scsi: qla2xxx: Wait for io return on terminate rport
    xtensa: ISS: fix call to split_if_spec
  * ring-buffer: Fix deadloop issue on reading trace_pipe
      kernel/trace/ring_buffer.c
    tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk
    tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error
  * Revert "8250: add support for ASIX devices with a FIFO bug"
      include/linux/serial_8250.h
    meson saradc: fix clock divider mask length
    ceph: don't let check_caps skip sending responses for revoke msgs
    hwrng: imx-rngc - fix the timeout for init and self check
    serial: atmel: don't enable IRQs prematurely
    fs: dlm: return positive pid value for F_GETLK
    md/raid0: add discard support for the 'original' layout
    misc: pci_endpoint_test: Re-init completion for every test
    misc: pci_endpoint_test: Free IRQs before removing the device
    PCI: rockchip: Use u32 variable to access 32-bit registers
    PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core
    PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked
    PCI: rockchip: Write PCI Device ID to correct register
    PCI: rockchip: Assert PCI Configuration Enable bit after probe
    PCI: qcom: Disable write access to read only registers for IP v2.3.3
  * PCI: Add function 1 DMA alias quirk for Marvell 88SE9235
      drivers/pci/quirks.c
  * PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold
      drivers/pci/pci.c
    jfs: jfs_dmap: Validate db_l2nbperpage while mounting
  * ext4: only update i_reserved_data_blocks on successful block allocation
      fs/ext4/indirect.c
      fs/ext4/inode.c
  * ext4: fix wrong unit use in ext4_mb_clear_bb
      fs/ext4/mballoc.c
    perf intel-pt: Fix CYC timestamps after standalone CBR
    SUNRPC: Fix UAF in svc_tcp_listen_data_ready()
    net: bcmgenet: Ensure MDIO unregistration has clocks enabled
    tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
    pinctrl: amd: Only use special debounce behavior for GPIO 0
    pinctrl: amd: Detect internal GPIO0 debounce handling
    pinctrl: amd: Fix mistake in handling clearing pins at startup
  * net/sched: make psched_mtu() RTNL-less safe
      include/net/pkt_sched.h
    wifi: airo: avoid uninitialized warning in airo_get_rate()
  * ipv6/addrconf: fix a potential refcount underflow for idev
      net/ipv6/addrconf.c
    NTB: ntb_tool: Add check for devm_kcalloc
    NTB: ntb_transport: fix possible memory leak while device_register() fails
    ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
    NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
    ntb: idt: Fix error handling in idt_pci_driver_init()
  * udp6: fix udp6_ehashfn() typo
      net/ipv6/udp.c
  * icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev().
      net/ipv6/icmp.c
  * vrf: Increment Icmp6InMsgs on the original netdev
      include/net/addrconf.h
      net/ipv6/icmp.c
      net/ipv6/reassembly.c
    net: mvneta: fix txq_map in case of txq_number==1
  * workqueue: clean up WORK_* constant types, clarify masking
      include/linux/workqueue.h
      kernel/workqueue.c
    net: lan743x: Don't sleep in atomic context
    netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  * netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
      net/netfilter/nf_conntrack_helper.c
    netfilter: nf_tables: fix scheduling-while-atomic splat
    netfilter: nf_tables: unbind non-anonymous set if rule construction fails
  * netfilter: nf_tables: reject unbound anonymous set before commit phase
      include/net/netfilter/nf_tables.h
  * netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
      include/net/netfilter/nf_tables.h
    netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
  * netfilter: nf_tables: use net_generic infra for transaction data
      include/net/netfilter/nf_tables.h
      include/net/netns/nftables.h
  * netfilter: add helper function to set up the nfnetlink header and use it
      include/linux/netfilter/nfnetlink.h
      net/netfilter/nf_conntrack_netlink.c
      net/netfilter/nfnetlink_log.c
      net/netfilter/nfnetlink_queue.c
    netfilter: nftables: add helper function to set the base sequence number
    netfilter: nf_tables: add rescheduling points during loop detection walks
    netfilter: nf_tables: fix nat hook table deletion
    spi: spi-fsl-spi: allow changing bits_per_word while CS is still active
    spi: spi-fsl-spi: relax message sanity checking a little
    spi: spi-fsl-spi: remove always-true conditional in fsl_spi_do_one_msg
    ARM: orion5x: fix d2net gpio initialization
    btrfs: fix race when deleting quota root from the dirty cow roots list
    jffs2: reduce stack usage in jffs2_build_xattr_subsystem()
  * integrity: Fix possible multiple allocation in integrity_inode_get()
      security/integrity/iint.c
    bcache: Remove unnecessary NULL point check in node allocations
    mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M
    mmc: core: disable TRIM on Kingston EMMC04G-M627
    NFSD: add encoding of op_recall flag for write delegation
  * ALSA: jack: Fix mutex call in snd_jack_report()
      sound/core/jack.c
    i2c: xiic: Don't try to handle more interrupt events after error
    i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process()
    sh: dma: Fix DMA channel offset calculation
    net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX
  * tcp: annotate data races in __tcp_oow_rate_limited()
      net/ipv4/tcp_input.c
  * net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode
      net/bridge/br_if.c
    powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y
  * f2fs: fix error path handling in truncate_dnode()
      fs/f2fs/node.c
    mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
    spi: bcm-qspi: return error if neither hif_mspi nor mspi is available
    Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
  * sctp: fix potential deadlock on &net->sctp.addr_wq_lock
      net/sctp/socket.c
    rtc: st-lpc: Release some resources in st_rtc_probe() in case of error
    mfd: stmpe: Only disable the regulators if they are enabled
    mfd: intel-lpss: Add missing check for platform_get_resource
    KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
    mfd: rt5033: Drop rt5033-battery sub-device
    usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
  * extcon: Fix kernel doc of property capability fields to avoid warnings
      drivers/extcon/extcon.c
  * extcon: Fix kernel doc of property fields to avoid warnings
      drivers/extcon/extcon.c
    media: usb: siano: Fix warning due to null work_func_t function pointer
  * media: videodev2.h: Fix struct v4l2_input tuner index comment
      include/uapi/linux/videodev2.h
    media: usb: Check az6007_read() return value
    sh: j2: Use ioremap() to translate device tree address into kernel memory
    w1: fix loop in w1_fini()
  * block: change all __u32 annotations to __be32 in affs_hardblocks.h
      include/uapi/linux/affs_hardblocks.h
    USB: serial: option: add LARA-R6 01B PIDs
    ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard
    ARCv2: entry: rewrite to enable use of double load/stores LDD/STD
    ARCv2: entry: avoid a branch
    ARCv2: entry: push out the Z flag unclobber from common EXCEPTION_PROLOGUE
    ARCv2: entry: comments about hardware auto-save on taken interrupts
  * modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24}
      scripts/mod/modpost.c
  * modpost: fix section mismatch message for R_ARM_ABS32
      scripts/mod/modpost.c
    crypto: nx - fix build warnings when DEBUG_FS is not enabled
    hwrng: virtio - Fix race on data_avail and actual data
    hwrng: virtio - always add a pending request
    hwrng: virtio - don't waste entropy
    hwrng: virtio - don't wait on cleanup
    hwrng: virtio - add an internal buffer
    pinctrl: at91-pio4: check return value of devm_kasprintf()
    perf dwarf-aux: Fix off-by-one in die_get_varname()
    pinctrl: cherryview: Return correct value if pin in push-pull mode
  * PCI: Add pci_clear_master() stub for non-CONFIG_PCI
      include/linux/pci.h
    scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe()
    ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer
    drm/radeon: fix possible division-by-zero errors
    fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe()
    arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1
    IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors
  * soc/fsl/qe: fix usb.c build errors
      drivers/soc/fsl/qe/Kconfig
    ASoC: es8316: Increment max value for ALC Capture Target Volume control
    ARM: ep93xx: fix missing-prototype warnings
    drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H
    Input: adxl34x - do not hardcode interrupt trigger type
    ARM: dts: BCM5301X: Drop "clock-names" from the SPI node
    Input: drv260x - sleep between polling GO bit
    radeon: avoid double free in ci_dpm_init()
  * netlink: Add __sock_i_ino() for __netlink_diag_dump().
      include/net/sock.h
      net/core/sock.c
    ipvlan: Fix return value of ipvlan_queue_xmit()
    netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value.
  * lib/ts_bm: reset initial match offset for every block of text
      lib/ts_bm.c
    gtp: Fix use-after-free in __gtp_encap_destroy().
  * netlink: do not hard code device address lenth in fdb dumps
      net/core/rtnetlink.c
  * netlink: fix potential deadlock in netlink_set_err()
      net/netlink/af_netlink.c
    wifi: ath9k: convert msecs to jiffies where needed
    wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key()
    memstick r592: make memstick_debug_get_tpc_name() static
    kexec: fix a memory leak in crash_shrink_memory()
    watchdog/perf: more properly prevent false positives with turbo modes
  * watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config
      include/linux/nmi.h
    wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown
    wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
    wifi: ray_cs: Fix an error handling path in ray_probe()
    wifi: ray_cs: Drop useless status variable in parse_addr()
    wifi: ray_cs: Utilize strnlen() in parse_addr()
    wifi: wl3501_cs: Fix an error handling path in wl3501_probe()
    wl3501_cs: use eth_hw_addr_set()
  * net: create netdev->dev_addr assignment helpers
      include/linux/etherdevice.h
      include/linux/netdevice.h
    wl3501_cs: Fix misspelling and provide missing documentation
    wl3501_cs: Remove unnecessary NULL check
    wl3501_cs: Fix a bunch of formatting issues related to function docs
    wifi: atmel: Fix an error handling path in atmel_probe()
    wifi: orinoco: Fix an error handling path in orinoco_cs_probe()
    wifi: orinoco: Fix an error handling path in spectrum_cs_probe()
    nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect()
  * nfc: constify several pointers to u8, char and sk_buff
      include/net/nfc/nfc.h
    wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan()
    samples/bpf: Fix buffer overflow in tcp_basertt
    wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx
    wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation
    evm: Complete description of evm_inode_setattr()
    ARM: 9303/1: kprobes: avoid missing-declaration warnings
  * PM: domains: fix integer overflow issues in genpd_parse_state()
      drivers/base/power/domain.c
    clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe
    clocksource/drivers/cadence-ttc: Use ttc driver as platform driver
  * clocksource/drivers: Unify the names to timer-* format
      drivers/clocksource/Makefile
    irqchip/jcore-aic: Fix missing allocation of IRQ descriptors
    irqchip/jcore-aic: Kill use of irq_create_strict_mappings()
    md/raid10: fix io loss while replacement replace rdev
    md/raid10: fix wrong setting of max_corr_read_errors
    md/raid10: fix overflow of md/safe_mode_delay
    md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
  * treewide: Remove uninitialized_var() usage
      drivers/clk/clk-gate.c
      drivers/gpu/drm/drm_edid.c
      drivers/md/dm-io.c
      drivers/md/dm-ioctl.c
      drivers/md/dm-snap-persistent.c
      drivers/md/dm-table.c
      fs/fat/dir.c
      fs/fuse/control.c
      fs/fuse/file.c
      fs/overlayfs/copy_up.c
      kernel/async.c
      kernel/audit.c
      kernel/events/core.c
      kernel/events/uprobes.c
      kernel/exit.c
      kernel/futex.c
      kernel/trace/ring_buffer.c
      lib/radix-tree.c
      mm/memcontrol.c
      mm/percpu.c
      mm/slub.c
      mm/swap.c
      net/ipv4/netfilter/nf_socket_ipv4.c
      net/ipv6/ip6_flowlabel.c
      net/ipv6/netfilter/nf_socket_ipv6.c
      net/netfilter/nf_conntrack_ftp.c
      net/netfilter/nfnetlink_log.c
      net/netfilter/nfnetlink_queue.c
      net/sched/cls_flow.c
      sound/core/control_compat.c
      sound/usb/endpoint.c
    drm/amdgpu: Validate VM ioctl flags.
    scripts/tags.sh: Resolve gtags empty index generation
  * drm/edid: Fix uninitialized variable in drm_cvt_modes()
      drivers/gpu/drm/drm_edid.c
    fbdev: imsttfb: Fix use after free bug in imsttfb_probe
    video: imsttfb: check for ioremap() failures
    x86/smp: Use dedicated cache-line for mwait_play_dead()
    gfs2: Don't deref jdesc in evict
Linux 4.19.290
    x86: fix backwards merge of GDS/SRSO bit
    xen/netback: Fix buffer overrun triggered by unusual packet
    Documentation/x86: Fix backwards on/off logic about YMM support
    x86/xen: Fix secondary processors' FPU initialization
    KVM: Add GDS_NO support to KVM
    x86/speculation: Add Kconfig option for GDS
    x86/speculation: Add force option to GDS mitigation
  * x86/speculation: Add Gather Data Sampling mitigation
      drivers/base/cpu.c
    x86/fpu: Move FPU initialization into arch_cpu_finalize_init()
    x86/fpu: Mark init functions __init
    x86/fpu: Remove cpuinfo argument from init functions
  * init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init()
      init/main.c
  * init: Invoke arch_cpu_finalize_init() earlier
      init/main.c
  * init: Remove check_bugs() leftovers
      init/main.c
    um/cpu: Switch to arch_cpu_finalize_init()
    sparc/cpu: Switch to arch_cpu_finalize_init()
    sh/cpu: Switch to arch_cpu_finalize_init()
    mips/cpu: Switch to arch_cpu_finalize_init()
    m68k/cpu: Switch to arch_cpu_finalize_init()
    ia64/cpu: Switch to arch_cpu_finalize_init()
    ARM: cpu: Switch to arch_cpu_finalize_init()
    x86/cpu: Switch to arch_cpu_finalize_init()
  * init: Provide arch_cpu_finalize_init()
      arch/Kconfig
      include/linux/cpu.h
      init/main.c
    Merge 4.19.289 into android-4.19-stable
Linux 4.19.289
    x86/cpu/amd: Add a Zenbleed fix
    x86/cpu/amd: Move the errata checking functionality up
    x86/microcode/AMD: Load late on both threads too
    Merge 4.19.288 into android-4.19-stable
Linux 4.19.288
    i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle
    x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys
    drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl
    drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl
    drm/exynos: vidi: fix a wrong error return
    ASoC: nau8824: Add quirk to active-high jack-detect
    s390/cio: unregister device when the only path is gone
    usb: gadget: udc: fix NULL dereference in remove()
    nfcsim.c: Fix error checking for debugfs_create_dir
    media: cec: core: don't set last_initiator if tx in progress
  * arm64: Add missing Set/Way CMO encodings
      arch/arm64/include/asm/sysreg.h
  * HID: wacom: Add error check to wacom_parse_and_register()
      drivers/hid/wacom_sys.c
    scsi: target: iscsi: Prevent login threads from racing between each other
  * sch_netem: acquire qdisc lock in netem_change()
      net/sched/sch_netem.c
    netfilter: nfnetlink_osf: fix module autoload
    netfilter: nf_tables: disallow element updates of bound anonymous sets
    be2net: Extend xmit workaround to BE3 chip
    mmc: usdhi60rol0: fix deferred probing
    mmc: sdhci-acpi: fix deferred probing
    mmc: omap_hsmmc: fix deferred probing
    mmc: omap: fix deferred probing
    mmc: mvsdio: fix deferred probing
    mmc: mvsdio: convert to devm_platform_ioremap_resource
    mmc: mtk-sd: fix deferred probing
    net: qca_spi: Avoid high load if QCA7000 is not available
    xfrm: Linearize the skb after offloading if needed.
    ieee802154: hwsim: Fix possible memory leaks
  * rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer()
      include/linux/rcupdate.h
    nilfs2: prevent general protection fault in nilfs_clear_dirty_page()
  * cgroup: Do not corrupt task iteration when rebinding subsystem
      kernel/cgroup/cgroup.c
    PCI: hv: Fix a race condition bug in hv_pci_query_relations()
    Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs
    nilfs2: fix buffer corruption due to concurrent device reads
    ipmi: move message error checking to avoid deadlock
  * ipmi: Make the smi watcher be disabled immediately when not needed
      include/linux/ipmi_smi.h
    x86/purgatory: remove PGO flags
    nilfs2: reject devices with insufficient block count
    serial: lantiq: add missing interrupt ack
    serial: lantiq: Do not swap register read/writes
    serial: lantiq: Use readl/writel instead of ltq_r32/ltq_w32
    serial: lantiq: Change ltq_w32_mask to asc_update_bits
    Merge 4.19.287 into android-4.19-stable
Linux 4.19.287
  * mmc: block: ensure error propagation for non-blk
      drivers/mmc/core/block.c
    powerpc: Fix defconfig choice logic when cross compiling
    drm/nouveau/kms: Fix NULL pointer dereference in nouveau_connector_detect_depth
  * neighbour: delete neigh_lookup_nodev as not used
      include/net/neighbour.h
      net/core/neighbour.c
  * net: Remove unused inline function dst_hold_and_use()
      include/net/dst.h
  * neighbour: Remove unused inline function neigh_key_eq16()
      include/net/neighbour.h
    selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET
  * net: tipc: resize nlattr array to correct size
      net/tipc/bearer.c
    net: lapbether: only support ethernet devices
    drm/nouveau: add nv_encoder pointer check for NULL
    drm/nouveau/kms: Don't change EDID when it hasn't actually changed
    drm/nouveau/dp: check for NULL nv_connector->native_mode
    igb: fix nvm.ops.read() error handling
  * sctp: fix an error code in sctp_sf_eat_auth()
      net/sctp/sm_statefuns.c
    IB/isert: Fix incorrect release of isert connection
    IB/isert: Fix possible list corruption in CMA handler
    IB/isert: Fix dead lock in ib_isert
    IB/uverbs: Fix to consider event queue closing also upon non-blocking mode
    RDMA/rxe: Fix the use-before-initialization error of resp_pkts
    RDMA/rxe: Removed unused name from rxe_task struct
    RDMA/rxe: Remove the unused variable obj
  * ping6: Fix send to link-local addresses with VRF.
      net/ipv6/ping.c
  * netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM
      net/netfilter/nfnetlink.c
  * usb: gadget: f_ncm: Fix NTP-32 support
      drivers/usb/gadget/function/f_ncm.c
  * usb: gadget: f_ncm: Add OS descriptor support
      drivers/usb/gadget/function/f_ncm.c
      drivers/usb/gadget/function/u_ncm.h
  * usb: dwc3: gadget: Reset num TRBs before giving back the request
      drivers/usb/dwc3/gadget.c
    USB: serial: option: add Quectel EM061KGL series
  * Remove DECnet support from kernel
      include/linux/netdevice.h
      include/linux/netfilter.h
      include/linux/netfilter_defs.h
      include/net/netns/netfilter.h
      include/uapi/linux/netlink.h
      net/Kconfig
      net/Makefile
      net/core/dev.c
      net/core/neighbour.c
      net/netfilter/core.c
    net: usb: qmi_wwan: add support for Compal RXM-G1
    RDMA/uverbs: Restrict usage of privileged QKEYs
    nouveau: fix client work fence deletion race
    powerpc/purgatory: remove PGO flags
    kexec: support purgatories with .text.hot sections
    nilfs2: fix possible out-of-bounds segment allocation in resize ioctl
    nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key()
    nios2: dts: Fix tse_mac "max-frame-size" property
    ocfs2: check new file size on fallocate call
    ocfs2: fix use-after-free when unmounting read-only filesystem
    xen/blkfront: Only check REQ_FUA for writes
    mips: Move initrd_start check after initrd address sanitisation.
    MIPS: Alchemy: fix dbdma2
    parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu()
  * power: supply: Fix logic checking if system is running from battery
      drivers/power/supply/power_supply_core.c
    irqchip/meson-gpio: Mark OF related data as maybe unused
  * regulator: Fix error checking for debugfs_create_dir
      drivers/regulator/core.c
  * power: supply: Ratelimit no data debug output
      drivers/power/supply/power_supply_sysfs.c
    ARM: dts: vexpress: add missing cache properties
    power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule()
    power: supply: ab8500: Fix external_power_changed race
    Merge "Merge 4.19.286 into android-4.19-stable" into android-4.19-stable
  * Revert "tcp: deny tcp_disconnect() when threads are waiting"
      include/net/sock.h
      net/ipv4/af_inet.c
      net/ipv4/inet_connection_sock.c
      net/ipv4/tcp.c
    Merge "Merge 4.19.285 into android-4.19-stable" into android-4.19-stable
    Merge 4.19.286 into android-4.19-stable
  * Revert "tcp: deny tcp_disconnect() when threads are waiting"
      include/net/sock.h
      net/ipv4/af_inet.c
      net/ipv4/inet_connection_sock.c
      net/ipv4/tcp.c
  * ANDROID: GKI: update ABI xml for incrementalfs.ko
      android/abi_gki_aarch64.xml
    Merge 4.19.285 into android-4.19-stable
Linux 4.19.286
    Revert "staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE"
    btrfs: unset reloc control if transaction commit fails in prepare_to_relocate()
    btrfs: check return value of btrfs_commit_transaction in relocation
  * ext4: only check dquot_initialize_needed() when debugging
      fs/ext4/xattr.c
    i2c: sprd: Delete i2c adapter in .remove's error path
    pinctrl: meson-axg: add missing GPIOA_18 gpio group
  * Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk
      net/bluetooth/hci_core.c
    ceph: fix use-after-free bug for inodes when flushing capsnaps
    drm/amdgpu: fix xclk freq on CHIP_STONEY
    Input: psmouse - fix OOB access in Elantech protocol
  * Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
      drivers/input/joystick/xpad.c
    batman-adv: Broken sync while rescheduling delayed work
  * lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release()
      lib/cpu_rmap.c
  * net: sched: fix possible refcount leak in tc_chain_tmplt_add()
      net/sched/cls_api.c
  * net: sched: move rtm_tca_policy declaration to include file
      include/net/pkt_sched.h
      net/sched/cls_api.c
  * rfs: annotate lockless accesses to RFS sock flow table
      include/linux/netdevice.h
      net/core/dev.c
  * rfs: annotate lockless accesses to sk->sk_rxhash
      include/net/sock.h
  * Bluetooth: L2CAP: Add missing checks for invalid DCID
      net/bluetooth/l2cap_core.c
  * Bluetooth: Fix l2cap_disconnect_req deadlock
      net/bluetooth/l2cap_core.c
    net: dsa: lan9303: allow vid != 0 in port_fdb_{add|del} methods
    spi: qup: Request DMA before enabling clocks
    i40e: fix build warnings in i40e_alloc.h
    i40iw: fix build warning in i40iw_manage_apbvt()
  * UPSTREAM: net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize
      drivers/net/usb/cdc_ncm.c
  * UPSTREAM: cdc_ncm: Fix the build warning
      drivers/net/usb/cdc_ncm.c
  * UPSTREAM: cdc_ncm: Implement the 32-bit version of NCM Transfer Block
      drivers/net/usb/cdc_ncm.c
      include/linux/usb/cdc_ncm.h
  * Revert "tcp: reduce POLLOUT events caused by TCP_NOTSENT_LOWAT"
      include/net/sock.h
      include/net/tcp.h
      net/core/stream.c
  * Revert "tcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the limit"
      net/ipv4/tcp.c
  * Revert "tcp: factor out __tcp_close() helper"
      include/net/tcp.h
      net/ipv4/tcp.c
  * Revert "tcp: add annotations around sk->sk_shutdown accesses"
      net/ipv4/af_inet.c
      net/ipv4/tcp.c
      net/ipv4/tcp_input.c
  * ANDROID: fix abi break in 4.19.284 for cpuhotplug.h
      include/linux/cpuhotplug.h
    Merge "Merge 4.19.284 into android-4.19-stable" into android-4.19-stable
    UPSTREAM: mailbox: mailbox-test: fix a locking issue in mbox_test_message_write()
    UPSTREAM: mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write()
Linux 4.19.285
    wifi: rtlwifi: 8192de: correct checking of IQK reload
  * scsi: dpt_i2o: Do not process completions with invalid addresses
      drivers/scsi/Kconfig
    scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD)
  * regmap: Account for register length when chunking
      drivers/base/regmap/regmap.c
    fbcon: Fix null-ptr-deref in soft_cursor
  * ext4: add lockdep annotations for i_data_sem for ea_inode's
      fs/ext4/ext4.h
      fs/ext4/xattr.c
  * selinux: don't use make's grouped targets feature yet
      security/selinux/Makefile
    tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK
    mmc: vub300: fix invalid response handling
    rsi: Remove unnecessary boolean condition
    regulator: da905{2,5}: Remove unnecessary array check
    hwmon: (scmi) Remove redundant pointer check
    wifi: rtlwifi: remove always-true condition pointed out by GCC 12
    lib/dynamic_debug.c: use address-of operator on section symbols
  * kernel/extable.c: use address-of operator on section symbols
      kernel/extable.c
    eth: sun: cassini: remove dead code
  * gcc-12: disable '-Wdangling-pointer' warning for now
      Makefile
    ACPI: thermal: drop an always true check
    x86/boot: Wrap literal addresses in absolute_pointer()
    ata: libata-scsi: Use correct device no in ata_find_dev()
    scsi: stex: Fix gcc 13 warnings
  * usb: gadget: f_fs: Add unbind event before functionfs_unbind
      drivers/usb/gadget/function/f_fs.c
    net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
  * iio: dac: build ad5758 driver when AD5758 is selected
      drivers/iio/dac/Makefile
    iio: dac: mcp4725: Fix i2c_master_send() return value handling
  * HID: wacom: avoid integer overflow in wacom_intuos_inout()
      drivers/hid/wacom_wac.c
  * HID: google: add jewel USB id
      drivers/hid/hid-ids.h
    iio: adc: mxs-lradc: fix the order of two cleanup operations
    mailbox: mailbox-test: fix a locking issue in mbox_test_message_write()
    atm: hide unused procfs functions
    ALSA: oss: avoid missing-prototype warnings
  * netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT
      net/netfilter/nf_conntrack_netlink.c
    wifi: b43: fix incorrect __packed annotation
  * scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed
      drivers/scsi/scsi_lib.c
  * arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
      arch/arm64/mm/fault.c
    ARM: dts: stm32: add pin map for CAN controller on stm32f7
    wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value
    media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
    media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
  * media: dvb-core: Fix use-after-free due on race condition at dvb_net
      include/media/dvb_net.h
    media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table
    media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
    media: dvb_ca_en50221: fix a size write bug
    media: netup_unidvb: fix irq init by register it at the end of probe
    media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address
    media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
    media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer
    media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer()
    media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
    media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer()
  * media: dvb_demux: fix a bug for the continuity counter
      drivers/media/dvb-core/dvb_demux.c
    ASoC: ssm2602: Add workaround for playback distortions
  * xfrm: Check if_id in inbound policy/secpath match
      net/xfrm/xfrm_policy.c
    ASoC: dwc: limit the number of overrun messages
    nbd: Fix debugfs_create_dir error checking
    fbdev: stifb: Fix info entry in sti_struct on error path
    fbdev: modedb: Add 1920x1080 at 60 Hz video mode
    media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE
    ARM: 9295/1: unwind:fix unwind abort for uleb128 case
    mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write()
    watchdog: menz069_wdt: fix watchdog initialisation
    net: dsa: mv88e6xxx: Increase wait after reset deactivation
    net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
  * udp6: Fix race condition in udp6_sendmsg & connect
      net/core/sock.c
  * net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
      net/netlink/af_netlink.c
  * ocfs2/dlm: move BITS_TO_BYTES() to bitops.h for wider use
      include/linux/bitops.h
  * net: sched: fix NULL pointer dereference in mq_attach
      net/sched/sch_api.c
  * net/sched: Prohibit regrafting ingress or clsact Qdiscs
      net/sched/sch_api.c
  * net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs
      net/sched/sch_api.c
      net/sched/sch_ingress.c
  * net/sched: sch_clsact: Only create under TC_H_CLSACT
      net/sched/sch_ingress.c
  * net/sched: sch_ingress: Only create under TC_H_INGRESS
      net/sched/sch_ingress.c
  * tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set
      net/ipv4/tcp.c
  * tcp: deny tcp_disconnect() when threads are waiting
      include/net/sock.h
      net/ipv4/af_inet.c
      net/ipv4/inet_connection_sock.c
      net/ipv4/tcp.c
  * af_packet: do not use READ_ONCE() in packet_bind()
      net/packet/af_packet.c
    amd-xgbe: fix the false linkup in xgbe_phy_status
  * af_packet: Fix data-races of pkt_sk(sk)->num.
      net/packet/af_packet.c
    netrom: fix info-leak in nr_write_internal()
    net/mlx5: fw_tracer, Fix event handling
    dmaengine: pl330: rename _start to prevent build error
  * netfilter: ctnetlink: Support offloaded conntrack entry deletion
      net/netfilter/nf_conntrack_netlink.c
  * ipv{4,6}/raw: fix output xfrm lookup wrt protocol
      include/net/ip.h
      include/uapi/linux/in.h
      net/ipv4/ip_sockglue.c
      net/ipv4/raw.c
      net/ipv6/raw.c
  * bluetooth: Add cmd validity checks at the start of hci_sock_ioctl()
      net/bluetooth/hci_sock.c
  * cdc_ncm: Fix the build warning
      drivers/net/usb/cdc_ncm.c
    power: supply: bq24190: Call power_supply_changed() after updating input current
  * power: supply: core: Refactor power_supply_set_input_current_limit_from_supplier()
      drivers/power/supply/power_supply_core.c
      include/linux/power_supply.h
    power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize
  * net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize
      drivers/net/usb/cdc_ncm.c
  * cdc_ncm: Implement the 32-bit version of NCM Transfer Block
      drivers/net/usb/cdc_ncm.c
      include/linux/usb/cdc_ncm.h
    Merge 4.19.284 into android-4.19-stable
    UPSTREAM: efi: rt-wrapper: Add missing include
  * BACKPORT: arm64: efi: Execute runtime services from a dedicated stack
      arch/arm64/include/asm/efi.h
  * Revert "uapi/linux/const.h: prefer ISO-friendly __typeof__"
      include/uapi/linux/const.h
    Merge "Merge 4.19.283 into android-4.19-stable" into android-4.19-stable
Linux 4.19.284
  * drivers: depend on HAS_IOMEM for devm_platform_ioremap_resource()
      drivers/base/platform.c
    3c589_cs: Fix an error handling path in tc589_probe()
    forcedeth: Fix an error handling path in nv_probe()
  * ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg
      include/uapi/sound/skl-tplg-interface.h
    x86/show_trace_log_lvl: Ensure stack pointer is aligned, again
    xen/pvcalls-back: fix double frees with pvcalls_new_active_socket()
  * coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet()
      drivers/hwtracing/coresight/coresight-tmc-etr.c
    power: supply: sbs-charger: Fix INHIBITED bit for Status reg
  * power: supply: bq27xxx: Fix poll_interval handling and races on remove
      include/linux/power/bq27xxx_battery.h
    power: supply: bq27xxx: Fix I2C IRQ race on remove
    power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition
  * power: supply: leds: Fix blink to LED on transition
      drivers/power/supply/power_supply_leds.c
  * ipv6: Fix out-of-bounds access in ipv6_find_tlv()
      net/ipv6/exthdrs_core.c
  * bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields
      kernel/bpf/verifier.c
  * net: fix skb leak in __skb_tstamp_tx()
      net/core/skbuff.c
    media: radio-shark: Add endpoint checks
    USB: sisusbvga: Add endpoint checks
  * USB: core: Add routines for endpoint checks in old drivers
      drivers/usb/core/usb.c
      include/linux/usb.h
  * udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().
      net/ipv4/udplite.c
      net/ipv6/udplite.c
    ALSA: hda/realtek - Fix inverted bass GPIO pin on Acer 8951G
    ALSA: hda/realtek - Fixed one of HP ALC671 platform Headset Mic supported
    parisc: Fix flush_dcache_page() for usage from irq context
    selftests/memfd: Fix unknown type name build failure
    x86/mm: Avoid incomplete Global INVLPG flushes
    btrfs: use nofs when cleaning up aborted transactions
    parisc: Allow to reboot machine after system halt
    m68k: Move signal frame following exception on 68020/030
    ALSA: hda/ca0132: add quirk for EVGA X299 DARK
    spi: fsl-cpm: Use 16 bit mode for large transfers with even size
    spi: fsl-spi: Re-organise transfer bits_per_word adaptation
    spi: spi-fsl-spi: automatically adapt bits-per-word in cpu mode
    s390/qdio: fix do_sqbs() inline assembly constraint
    s390/qdio: get rid of register asm
    vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF
    vc_screen: rewrite vcs_size to accept vc, not inode
  * usb: gadget: u_ether: Fix host MAC address case
      drivers/usb/gadget/function/u_ether.c
  * usb: gadget: u_ether: Convert prints to device prints
      drivers/usb/gadget/function/u_ether.c
  * lib/string_helpers: Introduce string_upper() and string_lower() helpers
      include/linux/string_helpers.h
    ALSA: hda/realtek: Add a quirk for HP EliteDesk 805
    ALSA: hda/realtek - ALC897 headset MIC no sound
    ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform
    ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW
    ALSA: hda/realtek - The front Mic on a HP machine doesn't work
    ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662
    ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662
    ALSA: hda/realtek - Add Headset Mic supported for HP cPC
    ALSA: hda/realtek - More constifications
    Add Acer Aspire Ethos 8951G model quirk
  * HID: wacom: Force pen out of prox if no events have been received in a while
      drivers/hid/wacom.h
      drivers/hid/wacom_sys.c
      drivers/hid/wacom_wac.c
    netfilter: nf_tables: do not allow RULE_ID to refer to another chain
    netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag
    netfilter: nf_tables: stricter validation of element data
  * netfilter: nf_tables: allow up to 64 bytes in the set element data area
      include/net/netfilter/nf_tables.h
    netfilter: nf_tables: add nft_setelem_parse_key()
    netfilter: nf_tables: validate registers coming from userspace.
  * netfilter: nftables: statify nft_parse_register()
      include/net/netfilter/nf_tables.h
  * netfilter: nftables: add nft_parse_register_store() and use it
      include/net/netfilter/nf_tables.h
      include/net/netfilter/nf_tables_core.h
      include/net/netfilter/nft_fib.h
  * netfilter: nftables: add nft_parse_register_load() and use it
      include/net/netfilter/nf_tables.h
      include/net/netfilter/nf_tables_core.h
      include/net/netfilter/nft_masq.h
      include/net/netfilter/nft_redir.h
    nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()
    tpm/tpm_tis: Disable interrupts for more Lenovo devices
    ceph: force updating the msg pointer in non-split case
    serial: Add support for Advantech PCI-1611U card
  * statfs: enforce statfs[64] structure initialization
      fs/statfs.c
    ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table
    ALSA: hda: Fix Oops by 9.1 surround channel names
    usb: typec: altmodes/displayport: fix pin_assignment_show
  * usb-storage: fix deadlock when a scsi command timeouts more than once
      drivers/usb/storage/scsiglue.c
    vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
    igb: fix bit_shift to be in [1..8] range
    cassini: Fix a memory leak in the error handling path of cas_init_one()
    net: bcmgenet: Restore phy_stop() depending upon suspend/close
    net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
    net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
    drm/exynos: fix g2d_open/close helper function definitions
    media: netup_unidvb: fix use-after-free at del_timer()
    erspan: get the proto with the md version for collect_md
  * ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode
      include/net/ip6_tunnel.h
      include/net/ip_tunnels.h
    ip6_gre: Make o_seqno start from 0 in native mode
    ip6_gre: Fix skb_under_panic in __gre6_xmit()
    serial: arc_uart: fix of_iomap leak in `arc_serial_probe`
  * drivers: provide devm_platform_ioremap_resource()
      drivers/base/platform.c
      include/linux/platform_device.h
    vsock: avoid to close connected socket after the timeout
    net: fec: Better handle pm_runtime_get() failing in .remove()
  * af_key: Reject optional tunnel/BEET mode templates in outbound policies
      net/key/af_key.c
    cpupower: Make TSC read per CPU for Mperf monitor
    btrfs: fix space cache inconsistency after error loading it from disk
    btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid
    mfd: dln2: Fix memory leak in dln2_probe()
    phy: st: miphy28lp: use _poll_timeout functions for waits
  * Input: xpad - add constants for GIP interface numbers
      drivers/input/joystick/xpad.c
    clk: tegra20: fix gcc-7 constant overflow warning
    recordmcount: Fix memory leaks in the uwrite function
  * sched: Fix KCSAN noinstr violation
      include/linux/sched/task_stack.h
    mcb-pci: Reallocate memory region to avoid memory overlapping
    serial: 8250: Reinit port->pm on port specific driver unbind
    usb: typec: tcpm: fix multiple times discover svids error
  * HID: wacom: generic: Set battery quirk only when we see battery data
      drivers/hid/wacom_wac.c
    spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3
    HID: logitech-hidpp: Reconcile USB and Unifying serials
    HID: logitech-hidpp: Don't use the USB serial for USB devices
    staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE
  * Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
      net/bluetooth/l2cap_core.c
    wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace
  * f2fs: fix to drop all dirty pages during umount() if cp_error is set
      fs/f2fs/checkpoint.c
      fs/f2fs/data.c
  * ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()
      fs/ext4/mballoc.c
  * ext4: set goal start correctly in ext4_mb_normalize_request
      fs/ext4/mballoc.c
    gfs2: Fix inode height consistency check
    scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition
  * lib: cpu_rmap: Avoid use after free on rmap->obj array entries
      lib/cpu_rmap.c
  * net: Catch invalid index in XPS mapping
      net/core/dev.c
    net: pasemi: Fix return type of pasemi_mac_start_tx()
    ext2: Check block size validity during mount
    wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex
    ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects
    ACPICA: Avoid undefined behavior: applying zero offset to null pointer
    drm/tegra: Avoid potential 32-bit integer overflow
    ACPI: EC: Fix oops when removing custom query handlers
  * firmware: arm_sdei: Fix sleep from invalid context BUG
      include/linux/cpuhotplug.h
    memstick: r592: Fix UAF bug in r592_remove due to race condition
  * regmap: cache: Return error in cache sync operations for REGCACHE_NONE
      drivers/base/regmap/regcache.c
    drm/amd/display: Use DC_LOG_DC in the trasform pixel function
    fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
  * af_unix: Fix data races around sk->sk_shutdown.
      net/unix/af_unix.c
  * af_unix: Fix a data race of sk->sk_receive_queue->qlen.
      net/unix/af_unix.c
  * net: datagram: fix data-races in datagram_poll()
      net/core/datagram.c
    ipvlan:Fix out-of-bounds caused by unclear skb->cb
  * tcp: add annotations around sk->sk_shutdown accesses
      net/ipv4/af_inet.c
      net/ipv4/tcp.c
      net/ipv4/tcp_input.c
  * tcp: factor out __tcp_close() helper
      include/net/tcp.h
      net/ipv4/tcp.c
  * tcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the limit
      net/ipv4/tcp.c
  * tcp: reduce POLLOUT events caused by TCP_NOTSENT_LOWAT
      include/net/sock.h
      include/net/tcp.h
      net/core/stream.c
  * net: annotate sk->sk_err write from do_recvmmsg()
      net/socket.c
  * netlink: annotate accesses to nlk->cb_running
      net/netlink/af_netlink.c
  * net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs().
      include/net/sock.h
  * UPSTREAM: ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
      fs/ext4/super.c
    Merge 4.19.283 into android-4.19-stable
  * UPSTREAM: ext4: fix invalid free tracking in ext4_xattr_move_to_block()
      fs/ext4/xattr.c
Linux 4.19.283
  * mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock
      mm/page_alloc.c
  * printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h
      include/linux/printk.h
    PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock
    PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors
    drbd: correctly submit flush bio on barrier
    serial: 8250: Fix serial8250_tx_empty() race with DMA Tx
  * tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
      drivers/tty/tty_io.c
      drivers/tty/tty_ioctl.c
      include/linux/tty.h
  * ext4: fix invalid free tracking in ext4_xattr_move_to_block()
      fs/ext4/xattr.c
  * ext4: remove a BUG_ON in ext4_mb_release_group_pa()
      fs/ext4/mballoc.c
  * ext4: bail out of ext4_xattr_ibody_get() fails for any reason
      fs/ext4/inline.c
  * ext4: add bounds checking in get_max_inline_xattr_value_size()
      fs/ext4/inline.c
  * ext4: improve error recovery code paths in __ext4_remount()
      fs/ext4/super.c
  * ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
      fs/ext4/super.c
  * ext4: fix WARNING in mb_find_extent
      fs/ext4/balloc.c
  * HID: wacom: Set a default resolution for older tablets
      drivers/hid/wacom_wac.c
    drm/panel: otm8009a: Set backlight parent to panel device
    ARM: dts: s5pv210: correct MIPI CSIS clock name
    ARM: dts: exynos: fix WM8960 clock name in Itop Elite
    sh: nmi_debug: fix return value of __setup handler
    sh: init: use OF_EARLY_FLATTREE for early init
    sh: math-emu: fix macro redefined warning
    platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i
    cifs: fix pcchunk length type in smb2_copychunk_range
    btrfs: print-tree: parent bytenr must be aligned to sector size
    btrfs: fix btrfs_prev_leaf() to not return the same key twice
    perf symbols: Fix return incorrect build_id size in elf_read_build_id()
    perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp()
    perf vendor events power9: Remove UTF-8 characters from JSON files
    virtio_net: suppress cpu stall when free_unused_bufs
    virtio_net: split free_unused_bufs()
    ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init`
    drm/amdgpu: add a missing lock for AMDGPU_SCHED
  * drm/amdgpu: Add command to override the context priority.
      include/uapi/drm/amdgpu_drm.h
    drm/amdgpu: Put enable gfx off feature to a delay thread
    drm/amdgpu: Add amdgpu_gfx_off_ctrl function
  * af_packet: Don't send zero-byte data in packet_sendmsg_spkt().
      net/packet/af_packet.c
    rxrpc: Fix hard call timeout units
  * net/sched: act_mirred: Add carrier check
      net/sched/act_mirred.c
  * writeback: fix call of incorrect macro
      fs/fs-writeback.c
    net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu
    net: dsa: mv88e6xxx: Add missing watchdog ops for 6320 family
  * sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()
      net/ipv6/sit.c
    relayfs: fix out-of-bounds access in relay_file_read
    kernel/relay.c: fix read_pos error when multiple readers
  * dm verity: fix error handling for check_at_most_once on FEC
      drivers/md/dm-verity-target.c
  * dm verity: skip redundant verity_handle_err() on I/O errors
      drivers/md/dm-verity-target.c
    ipmi: fix SSIF not responding under certain cond.
    ipmi_ssif: Rename idle state and check
  * ipmi: Fix how the lower layers are told to watch for messages
      include/linux/ipmi_smi.h
    ipmi: Fix SSIF flag requests
  * tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem
      drivers/base/cpu.c
      include/linux/tick.h
      kernel/time/tick-sched.c
  * nohz: Add TICK_DEP_BIT_RCU
      include/linux/tick.h
      include/trace/events/timer.h
      kernel/time/tick-sched.c
  * netfilter: nf_tables: deactivate anonymous set from preparation phase
      include/net/netfilter/nf_tables.h
    debugobject: Ensure pool refill (again)
    perf auxtrace: Fix address filter entire kernel size
  * dm ioctl: fix nested locking in table_clear() to remove deadlock concern
      drivers/md/dm-ioctl.c
    dm flakey: fix a crash with invalid table line
    dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path
    s390/dasd: fix hanging blockdevice after request requeue
  * btrfs: scrub: reject unsupported scrub flags
      include/uapi/linux/btrfs.h
    clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent
    wifi: rtl8xxxu: RTL8192EU always needs full init
    md/raid10: fix null-ptr-deref in raid10_sync_request
    nilfs2: fix infinite loop in nilfs_mdt_get_block()
    nilfs2: do not write dirty data after degenerating to read-only
    parisc: Fix argument pointer in real64_call_asm()
    dmaengine: at_xdmac: do not enable all cyclic channels
    phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port
    pwm: mtk-disp: Disable shadow registers before setting backlight values
    pwm: mtk-disp: Adjust the clocks to avoid them mismatch
    pwm: mtk-disp: Don't check the return code of pwmchip_remove()
    openrisc: Properly store r31 to pt_regs on unhandled exceptions
    RDMA/mlx5: Use correct device num_ports when modify DC
  * SUNRPC: remove the maximum number of retries in call_bind_status
      include/linux/sunrpc/sched.h
    NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease
    IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order
  * clk: add missing of_node_put() in "assigned-clocks" property parsing
      drivers/clk/clk-conf.c
    power: supply: generic-adc-battery: fix unit scaling
    RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()
    RDMA/rdmavt: Delete unnecessary NULL check
  * perf/core: Fix hardlockup failure caused by perf throttle
      kernel/events/core.c
    powerpc/rtas: use memmove for potentially overlapping buffer copy
  * macintosh: via-pmu-led: requires ATA to be set
      drivers/macintosh/Kconfig
    powerpc/sysdev/tsi108: fix resource printk format warnings
    powerpc/wii: fix resource printk format warnings
    powerpc/mpc512x: fix resource printk format warning
    macintosh/windfarm_smu_sat: Add missing of_node_put()
  * spmi: Add a check for remove callback when removing a SPMI driver
      drivers/spmi/spmi.c
    staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
    serial: 8250: Add missing wakeup event reporting
    tty: serial: fsl_lpuart: adjust buffer length to the intended size
    usb: chipidea: fix missing goto in `ci_hdrc_probe`
    sh: sq: Fix incorrect element size for allocating bitmap buffer
  * uapi/linux/const.h: prefer ISO-friendly __typeof__
      include/uapi/linux/const.h
    spi: cadence-quadspi: fix suspend-resume implementations
    mtd: spi-nor: cadence-quadspi: Handle probe deferral while requesting DMA channel
    mtd: spi-nor: cadence-quadspi: Don't initialize rx_dma_complete on failure
    mtd: spi-nor: cadence-quadspi: Make driver independent of flash geometry
    ia64: salinfo: placate defined-but-not-used warning
    ia64: mm/contig: fix section mismatch warning/error
  * of: Fix modalias string generation
      drivers/of/device.c
    vmci_host: fix a race condition in vmci_host_poll() causing GPF
    spi: fsl-spi: Fix CPM/QE mode Litte Endian
    spi: qup: Don't skip cleanup in remove's error path
    spi: qup: fix PM reference leak in spi_qup_remove()
  * linux/vt_buffer.h: allow either builtin or modular for macros
      include/linux/vt_buffer.h
    usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
    fpga: bridge: fix kernel-doc parameter description
    usb: host: xhci-rcar: remove leftover quirk handling
  * pstore: Revert pmsg_lock back to a normal mutex
      fs/pstore/pmsg.c
  * tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.
      net/core/skbuff.c
    net: amd: Fix link leak when verifying config failed
  * netlink: Use copy_to_user() for optval in netlink_getsockopt().
      net/netlink/af_netlink.c
    Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work"
  * ipv4: Fix potential uninit variable access bug in __ip_make_skb()
      net/ipv4/ip_output.c
  * netfilter: nf_tables: don't write table validation state without mutex
      include/linux/netfilter/nfnetlink.h
      net/netfilter/nfnetlink.c
    ixgbe: Enable setting RSS table to default values
    ixgbe: Allow flow hash to be set via ethtool
    wifi: iwlwifi: mvm: check firmware response size
    wifi: iwlwifi: make the loop for card preparation effective
    md/raid10: fix memleak of md thread
    md: update the optimal I/O size on reshape
    md/raid10: fix memleak for 'conf->bio_split'
    md/raid10: fix leak of 'r10bio->remaining' for recovery
  * crypto: drbg - Only fail when jent is unavailable in FIPS mode
      crypto/drbg.c
  * crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors
      crypto/drbg.c
    bpftool: Fix bug for long instructions in program CFG dumps
    wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg()
    wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg()
    rtlwifi: Replace RT_TRACE with rtl_dbg
    rtlwifi: Start changing RT_TRACE into rtl_dbg
    rtlwifi: rtl_pci: Fix memory leak when hardware init fails
    scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS
    scsi: target: iscsit: Fix TAS handling during conn cleanup
  * net/packet: convert po->auxdata to an atomic flag
      net/packet/af_packet.c
      net/packet/internal.h
  * net/packet: convert po->origdev to an atomic flag
      net/packet/af_packet.c
      net/packet/internal.h
    vlan: partially enable SIOCSHWTSTAMP in container
  * scm: fix MSG_CTRUNC setting condition for SO_PASSSEC
      include/net/scm.h
    tools: bpftool: Remove invalid \' json escape
    wifi: ath6kl: reduce WARN to dev_dbg() in callback
    wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list()
    wifi: ath9k: hif_usb: fix memory leak of remain_skbs
    wifi: ath6kl: minor fix for allocation size
    debugobject: Prevent init race with static objects
    debugobjects: Move printk out of db->lock critical sections
    debugobjects: Add percpu free pools
  * arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step
      arch/arm64/include/asm/debug-monitors.h
      arch/arm64/kernel/debug-monitors.c
    x86/ioapic: Don't return 0 from arch_dynirq_lower_bound()
    media: rc: gpio-ir-recv: Fix support for wake-up
    media: rcar_fdp1: Fix refcount leak in probe and remove function
    media: rcar_fdp1: Fix the correct variable assignments
    media: saa7134: fix use after free bug in saa7134_finidev due to race condition
    media: dm1105: Fix use after free bug in dm1105_remove due to race condition
    x86/apic: Fix atomic update of offset in reserve_eilvt_offset()
    drm/msm/adreno: drop bogus pm_runtime_set_active()
    drm/msm/adreno: Defer enabling runpm until hw_init()
  * firmware: qcom_scm: Clear download bit during reboot
      drivers/firmware/qcom_scm.c
    media: av7110: prevent underflow in write_ts_to_decoder()
  * media: uapi: add MEDIA_BUS_FMT_METADATA_FIXED media bus format.
      include/uapi/linux/media-bus-format.h
    media: bdisp: Add missing check for create_workqueue
    ARM: dts: qcom: ipq4019: Fix the PCI I/O port range
    EDAC/skx: Fix overflows on the DRAM row address mapping arrays
    EDAC, skx: Move debugfs node under EDAC's hierarchy
  * drm/probe-helper: Cancel previous job before starting new one
      drivers/gpu/drm/drm_probe_helper.c
    drm/vgem: add missing mutex_destroy
    drm/rockchip: Drop unbalanced obj unref
  * selinux: ensure av_permissions.h is built when needed
      security/selinux/Makefile
  * selinux: fix Makefile dependencies of flask.h
      security/selinux/Makefile
    ubifs: Free memory for tmpfile name
    ubi: Fix return value overwrite issue in try_write_vid_and_data()
    ubifs: Fix memleak when insert_old_idx() failed
    Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path"
    i2c: omap: Fix standard mode false ACK readings
    KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted
    reiserfs: Add security prefix to xattr name in reiserfs_security_write()
  * ring-buffer: Sync IRQ works before buffer destruction
      kernel/trace/ring_buffer.c
    pwm: meson: Fix axg ao mux parents
    MIPS: fw: Allow firmware to pass a empty env
  * xhci: fix debugfs register accesses while suspended
      drivers/usb/host/xhci-debugfs.c
  * debugfs: regset32: Add Runtime PM support
      fs/debugfs/file.c
      include/linux/debugfs.h
    staging: iio: resolver: ads1210: fix config mode
    perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE)
  * USB: dwc3: fix runtime pm imbalance on unbind
      drivers/usb/dwc3/core.c
    stmmac: debugfs entry name is not be changed when udev rename device name.
    ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750
    iio: adc: palmas_gpadc: fix NULL dereference on rmmod
    USB: serial: option: add UNISOC vendor and TOZED LT70C product
  * bluetooth: Perform careful capability checks in hci_sock_ioctl()
      net/bluetooth/hci_sock.c
    wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  * ANDROID: incremental fs: Evict inodes before freeing mount data
      fs/incfs/main.c
      fs/incfs/vfs.c
  * Revert "Revert "mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse""
      android/abi_gki_aarch64.xml
      include/linux/rmap.h
      mm/rmap.c

Bug: 299241959
Change-Id: Ib8c4ff87b1b0b720abce0f5fcdf1a51f01a472a9
Signed-off-by: Wilson Sung <wilsonsung@google.com>
Signed-off-by: ChangYan Lee <changyan@google.com>
2023-10-17 05:00:19 +00:00
Zhang Shurong
e32b0ad436 fbdev: fix potential OOB read in fast_imageblit()
[ Upstream commit c2d22806aecb24e2de55c30a06e5d6eb297d161d ]

There is a potential OOB read at fast_imageblit, for
"colortab[(*src >> 4)]" can become a negative value due to
"const char *s = image->data, *src".
This change makes sure the index for colortab always positive
or zero.

Similar commit:
https://patchwork.kernel.org/patch/11746067

Potential bug report:
https://groups.google.com/g/syzkaller-bugs/c/9ubBXKeKXf4/m/k-QXy4UgAAAJ

Signed-off-by: Zhang Shurong <zhang_shurong@foxmail.com>
Cc: stable@vger.kernel.org
Signed-off-by: Helge Deller <deller@gmx.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-08-30 16:31:52 +02:00
Thomas Zimmermann
1d41b65853 fbdev: Fix sys_imageblit() for arbitrary image widths
[ Upstream commit 61bfcb6a3b981e8f19e044ac8c3de6edbe6caf70 ]

Commit 6f29e04938bf ("fbdev: Improve performance of sys_imageblit()")
broke sys_imageblit() for image width that are not aligned to 8-bit
boundaries. Fix this by handling the trailing pixels on each line
separately. The performance improvements in the original commit do not
regress by this change.

Signed-off-by: Thomas Zimmermann <tzimmermann@suse.de>
Fixes: 6f29e04938bf ("fbdev: Improve performance of sys_imageblit()")
Reviewed-by: Javier Martinez Canillas <javierm@redhat.com>
Acked-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Tested-by: Geert Uytterhoeven <geert@linux-m68k.org>
Cc: Thomas Zimmermann <tzimmermann@suse.de>
Cc: Javier Martinez Canillas <javierm@redhat.com>
Cc: Sam Ravnborg <sam@ravnborg.org>
Link: https://patchwork.freedesktop.org/patch/msgid/20220313192952.12058-2-tzimmermann@suse.de
Stable-dep-of: c2d22806aecb ("fbdev: fix potential OOB read in fast_imageblit()")
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-08-30 16:31:52 +02:00
Thomas Zimmermann
0f19b70e9b fbdev: Improve performance of sys_imageblit()
[ Upstream commit 6f29e04938bf509fccfad490a74284cf158891ce ]

Improve the performance of sys_imageblit() by manually unrolling
the inner blitting loop and moving some invariants out. The compiler
failed to do this automatically. The resulting binary code was even
slower than the cfb_imageblit() helper, which uses the same algorithm,
but operates on I/O memory.

A microbenchmark measures the average number of CPU cycles
for sys_imageblit() after a stabilizing period of a few minutes
(i7-4790, FullHD, simpledrm, kernel with debugging). The value
for CFB is given as a reference.

  sys_imageblit(), new: 25934 cycles
  sys_imageblit(), old: 35944 cycles
  cfb_imageblit():      30566 cycles

In the optimized case, sys_imageblit() is now ~30% faster than before
and ~20% faster than cfb_imageblit().

v2:
	* move switch out of inner loop (Gerd)
	* remove test for alignment of dst1 (Sam)

Signed-off-by: Thomas Zimmermann <tzimmermann@suse.de>
Reviewed-by: Javier Martinez Canillas <javierm@redhat.com>
Acked-by: Sam Ravnborg <sam@ravnborg.org>
Link: https://patchwork.freedesktop.org/patch/msgid/20220223193804.18636-3-tzimmermann@suse.de
Stable-dep-of: c2d22806aecb ("fbdev: fix potential OOB read in fast_imageblit()")
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-08-30 16:31:52 +02:00
Helge Deller
0f747181d8 fbcon: Fix null-ptr-deref in soft_cursor
commit d78bd6cc68276bd57f766f7cb98bfe32c23ab327 upstream.

syzbot repored this bug in the softcursor code:

BUG: KASAN: null-ptr-deref in soft_cursor+0x384/0x6b4 drivers/video/fbdev/core/softcursor.c:70
Read of size 16 at addr 0000000000000200 by task kworker/u4:1/12

CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted 6.4.0-rc3-syzkaller-geb0f1697d729 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
Workqueue: events_power_efficient fb_flashcursor
Call trace:
 dump_backtrace+0x1b8/0x1e4 arch/arm64/kernel/stacktrace.c:233
 show_stack+0x2c/0x44 arch/arm64/kernel/stacktrace.c:240
 __dump_stack lib/dump_stack.c:88 [inline]
 dump_stack_lvl+0xd0/0x124 lib/dump_stack.c:106
 print_report+0xe4/0x514 mm/kasan/report.c:465
 kasan_report+0xd4/0x130 mm/kasan/report.c:572
 kasan_check_range+0x264/0x2a4 mm/kasan/generic.c:187
 __asan_memcpy+0x3c/0x84 mm/kasan/shadow.c:105
 soft_cursor+0x384/0x6b4 drivers/video/fbdev/core/softcursor.c:70
 bit_cursor+0x113c/0x1a64 drivers/video/fbdev/core/bitblit.c:377
 fb_flashcursor+0x35c/0x54c drivers/video/fbdev/core/fbcon.c:380
 process_one_work+0x788/0x12d4 kernel/workqueue.c:2405
 worker_thread+0x8e0/0xfe8 kernel/workqueue.c:2552
 kthread+0x288/0x310 kernel/kthread.c:379
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:853

This fix let bit_cursor() bail out early when a font bitmap
isn't available yet.

Signed-off-by: Helge Deller <deller@gmx.de>
Reported-by: syzbot+d910bd780e6efac35869@syzkaller.appspotmail.com
Acked-by: Sam Ravnborg <sam@ravnborg.org>
Cc: stable@kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2023-06-09 10:24:04 +02:00
Helge Deller
dd0f790537 fbdev: modedb: Add 1920x1080 at 60 Hz video mode
[ Upstream commit c8902258b2b8ecaa1b8d88c312853c5b14c2553d ]

Add typical resolution for Full-HD monitors.

Signed-off-by: Helge Deller <deller@gmx.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-06-09 10:23:57 +02:00
Wilson Sung
09d634c1ac Merge android-4.19-stable (4.19.278) into android-msm-pixel-4.19-lts
Merge 4.19.278 into android-4.19-stable
Linux 4.19.278
    ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping()
    nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties
    net: caif: Fix use-after-free in cfusbl_device_notify()
    drm/i915: Don't use BAR mappings for ring buffers with LLC
  * tipc: improve function tipc_wait_for_cond()
      net/tipc/socket.c
    media: ov5640: Fix analogue gain control
  * PCI: Add SolidRun vendor ID
      include/linux/pci_ids.h
    macintosh: windfarm: Use unsigned type for 1-bit bitfields
    alpha: fix R_ALPHA_LITERAL reloc for large modules
    MIPS: Fix a compilation issue
    Revert "spi: mt7621: Fix an error message in mt7621_spi_probe()"
  * scsi: core: Remove the /proc/scsi/${proc_name} directory earlier
      drivers/scsi/hosts.c
  * kbuild: generate modules.order only in directories visited by obj-y/m
      scripts/Makefile.build
  * kbuild: fix false-positive need-builtin calculation
      scripts/Makefile.build
    udf: Detect system inodes linked into directory hierarchy
    udf: Preserve link count of system files
    udf: Remove pointless union in udf_inode_info
    udf: reduce leakage of blocks related to named streams
    udf: Explain handling of load_nls() failure
    nfc: change order inside nfc_se_io error path
  * ext4: zero i_disksize when initializing the bootloader inode
      fs/ext4/ioctl.c
  * ext4: fix WARNING in ext4_update_inline_data
      fs/ext4/xattr.c
  * ext4: move where set the MAY_INLINE_DATA flag is set
      fs/ext4/inline.c
      fs/ext4/inode.c
  * ext4: fix another off-by-one fsmap error on 1k block filesystems
      fs/ext4/fsmap.c
  * ext4: fix RENAME_WHITEOUT handling for inline directories
      fs/ext4/namei.c
    x86/CPU/AMD: Disable XSAVES on AMD family 0x17
  * fs: prevent out-of-bounds array speculation when closing a file descriptor
      fs/file.c
    Merge 4.19.277 into android-4.19-stable
Linux 4.19.277
    staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh
    staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script
  * wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext"
      net/wireless/sme.c
    Merge 4.19.276 into android-4.19-stable
Linux 4.19.276
    thermal: intel: powerclamp: Fix cur_state for multi package system
  * f2fs: fix cgroup writeback accounting with fs-layer encryption
      fs/f2fs/data.c
    media: uvcvideo: Fix race condition with usb_kill_urb
    media: uvcvideo: Provide sync and async uvc_ctrl_status_event
  * tcp: Fix listen() regression in 4.19.270
      net/ipv4/inet_connection_sock.c
    s390/setup: init jump labels before command line parsing
    s390/maccess: add no DAT mode to kernel_write
  * Bluetooth: hci_sock: purge socket queues in the destruct() callback
      net/bluetooth/hci_sock.c
    phy: rockchip-typec: Fix unsigned comparison with less than zero
  * usb: uvc: Enumerate valid values for color matching
      include/uapi/linux/usb/video.h
    USB: ene_usb6250: Allocate enough memory for full object
    usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math
    iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word()
    iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word()
    tools/iio/iio_utils:fix memory leak
    mei: bus-fixup:upon error print return values of send and receive
    tty: serial: fsl_lpuart: disable the CTS when send break signal
  * tty: fix out-of-bounds access in tty_driver_lookup_tty()
      drivers/tty/tty_io.c
  * media: uvcvideo: Silence memcpy() run-time false positive warnings
      include/uapi/linux/uvcvideo.h
    media: uvcvideo: Handle errors from calls to usb_string
    media: uvcvideo: Handle cameras with invalid descriptors
    firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3
  * tracing: Add NULL checks for buffer in ring_buffer_free_read_page()
      kernel/trace/ring_buffer.c
    thermal: intel: quark_dts: fix error pointer dereference
    scsi: ipr: Work around fortify-string warning
    vc_screen: modify vcs_size() handling in vcs_read()
  * tcp: tcp_check_req() can be called from process context
      net/ipv4/tcp_minisocks.c
    ARM: dts: spear320-hmi: correct STMPE GPIO compatible
    nfc: fix memory leak of se_io context in nfc_genl_se_io
    9p/rdma: unmap receive dma buffer in rdma_request()/post_recv()
    9p/xen: fix connection sequence
    9p/xen: fix version parsing
  * net: fix __dev_kfree_skb_any() vs drop monitor
      net/core/dev.c
  * netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack()
      net/netfilter/nf_conntrack_netlink.c
    watchdog: pcwd_usb: Fix attempting to access uninitialized memory
  * watchdog: Fix kmemleak in watchdog_cdev_register
      drivers/watchdog/watchdog_dev.c
    watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path
    x86: um: vdso: Add '%rcx' and '%r11' to the syscall clobber list
    ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed
    ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show()
    ubifs: ubifs_writepage: Mark page dirty after writing inode failed
    ubifs: dirty_cow_znode: Fix memleak in error handling path
    ubifs: Re-statistic cleaned znode count if commit failed
    ubi: Fix possible null-ptr-deref in ubi_free_volume()
    ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume()
    ubi: Fix use-after-free when volume resizing failed
    ubifs: Reserve one leb for each journal head while doing budget
    ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1
    ubifs: Fix wrong dirty space budget for dirty inode
    ubifs: Rectify space budget for ubifs_xrename()
    ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted
    ubi: ensure that VID header offset + VID header size <= alloc, size
    um: vector: Fix memory leak in vector_config
    pwm: stm32-lp: fix the check on arr and cmp registers update
    fs/jfs: fix shift exponent db_agl2size negative
  * net/sched: Retire tcindex classifier
      net/sched/Kconfig
      net/sched/Makefile
  * kbuild: Port silent mode detection to future gnu make.
      Makefile
    wifi: ath9k: use proper statements in conditionals
    drm/radeon: Fix eDP for single-display iMac11,2
  * PCI: Avoid FLR for AMD FCH AHCI adapters
      drivers/pci/quirks.c
    scsi: ses: Fix slab-out-of-bounds in ses_intf_remove()
    scsi: ses: Fix possible desc_ptr out-of-bounds accesses
    scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses
    scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()
    scsi: ses: Don't attach if enclosure has no components
    scsi: qla2xxx: Fix erroneous link down
    scsi: qla2xxx: Fix link failure in NPIV environment
    ktest.pl: Add RUN_TIMEOUT option with default unlimited
    ktest.pl: Fix missing "end_monitor" when machine check fails
    ktest.pl: Give back console on Ctrt^C on monitor
    media: ipu3-cio2: Fix PM runtime usage_count in driver unbind
    mips: fix syscall_get_nr
    alpha: fix FEN fault handling
    rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails
    ARM: dts: exynos: correct TMU phandle in Odroid XU
    ARM: dts: exynos: correct TMU phandle in Exynos4
    dm flakey: don't corrupt the zero page
    dm flakey: fix logic when corrupting a bio
  * wifi: cfg80211: Fix use after free for wext
      net/wireless/sme.c
    wifi: rtl8xxxu: Use a longer retry limit of 48
  * ext4: refuse to create ea block when umounted
      fs/ext4/xattr.c
  * ext4: optimize ea_inode block expansion
      fs/ext4/xattr.c
    ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls()
  * irqdomain: Drop bogus fwspec-mapping error handling
      kernel/irq/irqdomain.c
  * irqdomain: Fix disassociation race
      kernel/irq/irqdomain.c
  * irqdomain: Fix association race
      kernel/irq/irqdomain.c
  * ima: Align ima_file_mmap() parameters with mmap_file LSM hook
      include/linux/ima.h
      security/security.c
    Documentation/hw-vuln: Document the interaction between IBRS and STIBP
    x86/speculation: Allow enabling STIBP with legacy IBRS
    x86/microcode/AMD: Fix mixed steppings support
    x86/microcode/AMD: Add a @cpu parameter to the reloading functions
    x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter
  * x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range
      include/linux/kprobes.h
  * x86/kprobes: Fix __recover_optprobed_insn check optimizing logic
      include/linux/kprobes.h
    x86/reboot: Disable SVM, not just VMX, when stopping CPUs
    x86/reboot: Disable virtualization in an emergency if SVM is supported
    x86/crash: Disable virt in core NMI crash handler to avoid double shootdown
    x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows)
    udf: Fix file corruption when appending just after end of preallocated extent
    udf: Do not update file length for failed writes to inline files
    udf: Do not bother merging very long extents
    udf: Truncate added extents on failed expansion
    ocfs2: fix non-auto defrag path not working issue
    ocfs2: fix defrag path triggering jbd2 ASSERT
  * f2fs: fix information leak in f2fs_move_inline_dirents()
      fs/f2fs/inline.c
    fs: hfsplus: fix UAF issue in hfsplus_put_super
    hfs: fix missing hfs_bnode_get() in __hfs_bnode_create
    ARM: dts: exynos: correct HDMI phy compatible in Exynos4
    s390/kprobes: fix current_kprobe never cleared after kprobes reenter
    s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler
    s390: discard .interp section
  * rtc: pm8xxx: fix set-alarm race
      drivers/rtc/rtc-pm8xxx.c
    firmware: coreboot: framebuffer: Ignore reserved pixel color bits
    wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu
    dm cache: add cond_resched() to various workqueue loops
    dm thin: add cond_resched() to various workqueue loops
    pinctrl: at91: use devm_kasprintf() to avoid potential leaks
    regulator: s5m8767: Bounds check id indexing into arrays
    regulator: max77802: Bounds check regulator id against opmode
    ASoC: kirkwood: Iterate over array indexes instead of using pointer math
    docs/scripts/gdb: add necessary make scripts_gdb step
    drm/msm/dsi: Add missing check for alloc_ordered_workqueue
    drm/radeon: free iio for atombios when driver shutdown
    drm/amd/display: Fix potential null-deref in dm_resume
    net/mlx5: fw_tracer: Fix debug print
    ACPI: video: Fix Lenovo Ideapad Z570 DMI match
    m68k: Check syscall_trace_enter() return code
    net: bcmgenet: Add a check for oversized packets
    ACPI: Don't build ACPICA with '-Os'
  * inet: fix fast path in __inet_hash_connect()
      net/ipv4/inet_hashtables.c
    wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds
    x86/bugs: Reset speculation control settings on init
  * timers: Prevent union confusion from unexpected restart_syscall()
      kernel/time/hrtimer.c
      kernel/time/posix-timers.c
    thermal: intel: Fix unsigned comparison with less than zero
  * rcu: Suppress smp_processor_id() complaint in synchronize_rcu_expedited_wait()
      kernel/rcu/tree_exp.h
    wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds()
    ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy
    udf: Define EFSCORRUPTED error code
  * rpmsg: glink: Avoid infinite loop on intent for missing channel
      drivers/rpmsg/qcom_glink_native.c
    media: usb: siano: Fix use after free bugs caused by do_submit_urb
    media: i2c: ov7670: 0 instead of -EINVAL was returned
    media: rc: Fix use-after-free bugs caused by ene_tx_irqsim()
    media: i2c: ov772x: Fix memleak in ov772x_probe()
    powerpc: Remove linker flag from KBUILD_AFLAGS
    media: platform: ti: Add missing check for devm_regulator_get
    MIPS: vpe-mt: drop physical_memsize
    powerpc/rtas: ensure 4KB alignment for rtas_data_buf
    powerpc/rtas: make all exports GPL
    powerpc/pseries/lparcfg: add missing RTAS retry status handling
  * clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled()
      drivers/clk/clk.c
    powerpc/powernv/ioda: Skip unallocated resources when mapping to PE
    Input: ads7846 - don't check penirq immediately for 7845
    Input: ads7846 - don't report pressure for ads7845
    mtd: rawnand: sunxi: Fix the size of the last OOB region
    mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read()
    selftests/ftrace: Fix bash specific "==" operator
    sparc: allow PM configs for sparc32 COMPILE_TEST
    perf tools: Fix auto-complete on aarch64
    perf llvm: Fix inadvertent file creation
    gfs2: jdata writepage fix
    cifs: Fix warning and UAF when destroy the MR list
    cifs: Fix lost destroy smbd connection when MR allocate failed
    nfsd: fix race to check ls_layouts
  * dm: remove flush_scheduled_work() during local_exit()
      drivers/md/dm.c
    hwmon: (mlxreg-fan) Return zero speed for broken fan
    spi: bcm63xx-hsspi: Fix multi-bit mode setting
    spi: bcm63xx-hsspi: fix pm_runtime
    scsi: aic94xx: Add missing check for dma_map_single()
    hwmon: (ltc2945) Handle error case in ltc2945_value_store
    gpio: vf610: connect GPIO label to dev name
  * ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress()
      sound/soc/soc-compress.c
    drm/mediatek: Clean dangling pointer on bind error path
    drm/mediatek: Drop unbalanced obj unref
    gpu: host1x: Don't skip assigning syncpoints to channels
    drm/msm/dpu: Add check for pstates
    drm/msm: use strscpy instead of strncpy
  * drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness
      drivers/gpu/drm/drm_mipi_dsi.c
      include/drm/drm_mipi_dsi.h
    ALSA: hda/ca0132: minor fix for allocation size
    pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups
    pinctrl: pinctrl-rockchip: Fix a bunch of kerneldoc misdemeanours
    drm/msm/hdmi: Add missing check for alloc_ordered_workqueue
    gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id()
    drm/vc4: dpi: Fix format mapping for RGB565
    drm/vc4: dpi: Add option for inverting pixel clock and output enable
  * drm: Clarify definition of the DRM_BUS_FLAG_(PIXDATA|SYNC)_* macros
      include/drm/drm_connector.h
    drm/bridge: megachips: Fix error handling in i2c_register_driver()
  * drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC
      drivers/gpu/drm/mxsfb/Kconfig
    selftest: fib_tests: Always cleanup before exit
    irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts
    irqchip/irq-brcmstb-l2: Set IRQ_LEVEL for level triggered interrupts
    can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a bus error
    wifi: mac80211: make rate u32 in sta_set_rate_info_rx()
    crypto: crypto4xx - Call dma_unmap_page when done
    wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize()
    wifi: iwl4965: Add missing check for create_singlethread_workqueue()
    wifi: iwl3945: Add missing check for create_singlethread_workqueue
    RISC-V: time: initialize hrtimer based broadcast clock event device
    m68k: /proc/hardware should depend on PROC_FS
  * crypto: rsa-pkcs1pad - Use akcipher_request_complete
      crypto/rsa-pkcs1pad.c
    rds: rds_rm_zerocopy_callback() correct order for list_add_tail()
    libbpf: Fix alen calculation in libbpf_nla_dump_errormsg()
  * Bluetooth: L2CAP: Fix potential user-after-free
      net/bluetooth/l2cap_core.c
      net/bluetooth/l2cap_sock.c
    irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe
    irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains
    net/mlx5: Enhance debug print in page allocation failure
    powercap: fix possible name leak in powercap_register_zone()
  * crypto: seqiv - Handle EBUSY correctly
      crypto/seqiv.c
    ACPI: battery: Fix missing NUL-termination with large strings
    wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback()
    wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails
    ath9k: htc: clean up statistics macros
    ath9k: hif_usb: simplify if-if to if-else
    wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function
    wifi: orinoco: check return value of hermes_write_wordrec()
    ACPICA: nsrepair: handle cases without a return value correctly
  * lib/mpi: Fix buffer overrun when SG is too long
      lib/mpi/mpicoder.c
  * genirq: Fix the return type of kstat_cpu_irqs_sum()
      include/linux/kernel_stat.h
    ACPICA: Drop port I/O validation for some regions
    wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave()
    wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave()
    wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave()
    wifi: libertas: if_usb: don't call kfree_skb() under spin_lock_irqsave()
    wifi: libertas_tf: don't call kfree_skb() under spin_lock_irqsave()
    wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid()
    wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit()
    wifi: ipw2200: fix memory leak in ipw_wdev_init()
    wifi: ipw2x00: don't call dev_kfree_skb() under spin_lock_irqsave()
    ipw2x00: switch from 'pci_' to 'dma_' API
    wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit()
    rtlwifi: fix -Wpointer-sign warning
    wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave()
    wifi: libertas: fix memory leak in lbs_init_adapter()
    wifi: rsi: Fix memory leak in rsi_coex_attach()
    block: bio-integrity: Copy flags when bio_integrity_payload is cloned
  * blk-mq: remove stale comment for blk_mq_sched_mark_restart_hctx
      block/blk-mq-sched.c
    arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node
    arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name
    arm64: dts: amlogic: meson-gx: add missing unit address to rng node name
    arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible
    arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name
    arm64: dts: meson-axg: enable SCPI
    arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name
    ARM: imx: Call ida_simple_remove() for ida_simple_get
    ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato
    ARM: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init()
    arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address
    arm64: dts: meson-gx: Fix Ethernet MAC address unit name
    ARM: zynq: Fix refcount leak in zynq_early_slcr_init
    ARM: OMAP2+: Fix memory leak in realtime_counter_init()
    HID: asus: use spinlock to safely schedule workers
    HID: asus: use spinlock to protect concurrent accesses
    HID: asus: Remove check for same LED brightness on set
    Merge 4.19.275 into android-4.19-stable
Linux 4.19.275
  * USB: core: Don't hold device lock while reading the "descriptors" sysfs file
      drivers/usb/core/hub.c
      drivers/usb/core/sysfs.c
    USB: serial: option: add support for VW/Skoda "Carstick LTE"
    dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size
    vc_screen: don't clobber return value in vcs_read
  * net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues().
      net/core/stream.c
    IB/hfi1: Assign npages earlier
    btrfs: send: limit number of clones and allocated memory size
    ACPI: NFIT: fix a potential deadlock during NFIT teardown
    ARM: dts: rockchip: add power-domains property to dp node on rk3288
  * UPSTREAM: selinux: check return value of sel_make_avc_files
      security/selinux/selinuxfs.c
    UPSTREAM: lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test
    UPSTREAM: wireguard: ratelimiter: use kvcalloc() instead of kvzalloc()
    UPSTREAM: wireguard: receive: drop handshakes if queue lock is contended
    UPSTREAM: wireguard: receive: use ring buffer for incoming handshakes
  * UPSTREAM: wireguard: device: reset peer src endpoint when netns exits
      include/net/dst_cache.h
      net/core/dst_cache.c
    UPSTREAM: wireguard: selftests: actually test for routing loops
    UPSTREAM: kasan: fix tag for large allocations when using CONFIG_SLAB
  * UPSTREAM: usb: musb: select GENERIC_PHY instead of depending on it
      drivers/usb/musb/Kconfig
  * UPSTREAM: driver core: Reject pointless SYNC_STATE_ONLY device links
      drivers/base/core.c
  * BACKPORT: PM: EM: Fix inefficient states detection
      kernel/power/energy_model.c
  * UPSTREAM: cfg80211: scan: fix RCU in cfg80211_add_nontrans_list()
      net/wireless/scan.c
  * UPSTREAM: thermal/core: Fix thermal_cooling_device_register() prototype
      include/linux/thermal.h
  * UPSTREAM: PM: EM: Increase energy calculation precision
      include/linux/energy_model.h
      kernel/power/energy_model.c
    UPSTREAM: lib/test_stackinit: Fix static initializer test
    BACKPORT: userfaultfd: do not untag user pointers
    UPSTREAM: net/xfrm/compat: Copy xfrm_spdattr_type_t atributes
  * UPSTREAM: sched/uclamp: Ignore max aggregation if rq is idle
      kernel/sched/sched.h
  * UPSTREAM: net: xfrm: fix memory leak in xfrm_user_rcv_msg
      net/xfrm/xfrm_user.c
  * UPSTREAM: f2fs: Advertise encrypted casefolding in sysfs
      fs/f2fs/sysfs.c
  * UPSTREAM: fuse: ignore PG_workingset after stealing
      fs/fuse/dev.c
  * BACKPORT: loop: Fix missing discard support when using LOOP_CONFIGURE
      drivers/block/loop.c
  * BACKPORT: nvmem: core: add a missing of_node_put
      drivers/nvmem/core.c
  * UPSTREAM: usb: typec: mux: Fix copy-paste mistake in typec_mux_match
      drivers/usb/typec/mux.c
    Merge 4.19.274 into android-4.19-stable
Linux 4.19.274
  * bpf: add missing header file include
      kernel/bpf/core.c
  * ext4: Fix function prototype mismatch for ext4_feat_ktype
      fs/ext4/sysfs.c
    wifi: mwifiex: Add missing compatible string for SD8787
  * uaccess: Add speculation barrier to copy_from_user()
      include/linux/nospec.h
      kernel/bpf/core.c
      lib/usercopy.c
    mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh
    drm/i915/gvt: fix double free bug in split_2MB_gtt_entry
  * alarmtimer: Prevent starvation by small intervals and SIG_IGN
      kernel/time/alarmtimer.c
    powerpc: dts: t208x: Disable 10G on MAC1 and MAC2
    can: kvaser_usb: hydra: help gcc-13 to figure out cmd_len
  * random: always mix cycle counter in add_latent_entropy()
      include/linux/random.h
    powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G
    wifi: rtl8xxxu: gen2: Turn on the rate control
  * BACKPORT: fscrypt: fix derivation of SipHash keys on big endian CPUs
      fs/crypto/keysetup.c
    UPSTREAM: wireguard: allowedips: free empty intermediate nodes when removing single node
    BACKPORT: wireguard: allowedips: allocate nodes in kmem_cache
    Merge "Merge 4.19.273 into android-4.19-stable" into android-4.19-stable
    Merge 4.19.273 into android-4.19-stable
Linux 4.19.273
    net: phy: meson-gxl: Add generic dummy stubs for MMD register access
    nilfs2: fix underflow in second superblock position calculations
    kvm: initialize all of the kvm_debugregs structure before sending it to userspace
    i40e: Add checking for null for nlmsg_find_attr()
  * ipv6: Fix tcp socket connection with DSCP.
      net/ipv6/tcp_ipv6.c
  * ipv6: Fix datagram socket connection with DSCP.
      net/ipv6/datagram.c
    net: mpls: fix stale pointer if allocation fails during device rename
    net: stmmac: Restrict warning on disabling DMA store and fwd mode
    bnxt_en: Fix mqprio and XDP ring checking logic
    net: stmmac: fix order of dwmac5 FlexPPS parametrization sequence
    net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path
  * dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions.
      include/net/sock.h
      net/ipv6/tcp_ipv6.c
    net: bgmac: fix BCM5358 support by setting correct flags
    i40e: add double of VLAN header when computing the max MTU
    revert "squashfs: harden sanity check in squashfs_read_xattr_id_table"
  * hugetlb: check for undefined shift on 32 bit architectures
      include/linux/hugetlb.h
    ALSA: hda/realtek - fixed wrong gpio assigned
    ALSA: hda/conexant: add a new hda codec SN6180
    mmc: sdio: fix possible resource leaks in some error paths
    Revert "x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN"
    netfilter: nft_tproxy: restrict to prerouting hook
  * aio: fix mremap after fork null-deref
      fs/aio.c
    nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association
    net/rose: Fix to not accept on connected socket
    tools/virtio: fix the vringh test for virtio ring changes
    ASoC: cs42l56: fix DT probe
    migrate: hugetlb: check for hugetlb shared PMD in node migration
  * bpf: Always return target ifindex in bpf_fib_lookup
      net/core/filter.c
    arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive
    arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive
    riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte
    usb: typec: altmodes/displayport: Fix probe pin assign check
  * usb: core: add quirk for Alcor Link AK9563 smartcard reader
      drivers/usb/core/quirks.c
    net: USB: Fix wrong-direction WARNING in plusb.c
    pinctrl: intel: Restore the pins that used to be in Direct IRQ mode
    pinctrl: intel: Convert unsigned to unsigned int
    pinctrl: single: fix potential NULL dereference
    pinctrl: aspeed: Fix confusing types in return value
    ALSA: pci: lx6464es: fix a debug loop
    selftests: forwarding: lib: quote the sysctl values
    rds: rds_rm_zerocopy_callback() use list_first_entry()
    net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY
    net: phy: meson-gxl: add g12a support
  * net: phy: add macros for PHYID matching
      include/linux/phy.h
    IB/hfi1: Restore allocated resources on failed copyout
    ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control()
    btrfs: limit device extents to the device size
    iio:adc:twl6030: Enable measurement of VAC
    thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type()
    serial: 8250_dma: Fix DMA Rx rearm race
    serial: 8250_dma: Fix DMA Rx completion race
  * Squashfs: fix handling and sanity checking of xattr_ids count
      fs/squashfs/squashfs_fs.h
  * mm/swapfile: add cond_resched() in get_swap_pages()
      mm/swapfile.c
  * mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps
      fs/proc/task_mmu.c
      include/linux/hugetlb.h
    riscv: disable generation of unwind tables
    parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case
    parisc: Fix return code of pdc_iodc_print()
    iio:adc:twl6030: Enable measurements of VUSB, VBAT and others
    iio: adc: berlin2-adc: Add missing of_node_put() in error path
    iio: hid: fix the retval in accel_3d_capture_sample
    efi: Accept version 2 of memory attributes table
    watchdog: diag288_wdt: fix __diag288() inline assembly
    watchdog: diag288_wdt: do not use stack buffers for hardware data
    fbcon: Check font dimension limits
    thermal: intel: int340x: Protect trip temperature from concurrent updates
    KVM: x86/vmx: Do not skip segment attributes if unusable bit is set
    KVM: VMX: Move caching of MSR_IA32_XSS to hardware_setup()
    KVM: VMX: Move VMX specific files to a "vmx" subdirectory
    nVMX x86: Check VMX-preemption timer controls on vmentry of L2 guests
    Input: i8042 - add Clevo PCX0DX to i8042 quirk table
    Input: i8042 - add TUXEDO devices to i8042 quirk tables
    Input: i8042 - merge quirk tables
    Input: i8042 - move __initconst to fix code styling warning
    vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF
  * usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait
      drivers/usb/gadget/function/f_fs.c
  * usb: dwc3: qcom: enable vbus override when in OTG dr-mode
      drivers/usb/dwc3/dwc3-qcom.c
  * usb: dwc3: dwc3-qcom: Fix typo in the dwc3 vbus override API
      drivers/usb/dwc3/dwc3-qcom.c
    iio: adc: stm32-dfsdm: fill module aliases
    net/x25: Fix to not accept on connected socket
    i2c: rk3x: fix a bunch of kernel-doc warnings
    scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress
    scsi: target: core: Fix warning on RT kernels
    net: openvswitch: fix flow memory leak in ovs_flow_cmd_new
    ata: libata: Fix sata_down_spd_limit() when no link speed is reported
    squashfs: harden sanity check in squashfs_read_xattr_id_table
    netrom: Fix use-after-free caused by accept on already connected socket
    ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
    bus: sunxi-rsb: Fix error handling in sunxi_rsb_init()
    firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region
    UPSTREAM: wireguard: allowedips: remove nodes in O(1)
    UPSTREAM: wireguard: allowedips: initialize list head in selftest
    UPSTREAM: wireguard: use synchronize_net rather than synchronize_rcu
    UPSTREAM: wireguard: do not use -O3
    UPSTREAM: wireguard: selftests: make sure rp_filter is disabled on vethc
    BACKPORT: wireguard: selftests: remove old conntrack kconfig value
  * BACKPORT: usb: typec: mux: Fix matching with typec_altmode_desc
      drivers/usb/typec/mux.c
  * UPSTREAM: sched/uclamp: Fix locking around cpu_util_update_eff()
      kernel/sched/core.c
  * UPSTREAM: sched/uclamp: Fix wrong implementation of cpu.uclamp.min
      kernel/sched/core.c
    UPSTREAM: usb: musb: Fix an error message
    UPSTREAM: arm64: doc: Add brk/mmap/mremap() to the Tagged Address ABI Exceptions
  * BACKPORT: selinux: add proper NULL termination to the secclass_map permissions
      security/selinux/include/classmap.h
    UPSTREAM: crypto: arm/curve25519 - Move '.fpu' after '.arch'
    UPSTREAM: libnvdimm/region: Fix nvdimm_has_flush() to handle ND_REGION_ASYNC
  * UPSTREAM: of: property: fw_devlink: do not link ".*,nr-gpios"
      drivers/of/property.c
    UPSTREAM: xfrm/compat: Cleanup WARN()s that can be user-triggered
    UPSTREAM: wireguard: selftests: test multiple parallel streams
    UPSTREAM: crypto: mips: add poly1305-core.S to .gitignore
  * BACKPORT: arm64: kasan: fix page_alloc tagging with DEBUG_VIRTUAL
      arch/arm64/include/asm/memory.h
  * UPSTREAM: crypto: mips/poly1305 - enable for all MIPS processors
      crypto/Kconfig
      drivers/net/Kconfig
    UPSTREAM: kbuild: do not include include/config/auto.conf from adjust_autoksyms.sh
  * UPSTREAM: wireguard: kconfig: use arm chacha even with no neon
      drivers/net/Kconfig
    UPSTREAM: wireguard: queueing: get rid of per-peer ring buffers
    UPSTREAM: wireguard: device: do not generate ICMP for non-IP packets
    BACKPORT: mac80211_hwsim: notify wmediumd of used MAC addresses
    BACKPORT: mac80211_hwsim: add concurrent channels scanning support over virtio
  * BACKPORT: perf_event_open: switch to copy_struct_from_user()
      kernel/events/core.c
  * BACKPORT: sched_setattr: switch to copy_struct_from_user()
      kernel/sched/core.c

Bug: 274413561
Change-Id: I4334c7024c0a0b0ff52123bda3f51c09f35ebf56
Signed-off-by: JohnnLee <johnnlee@google.com>
2023-04-11 03:17:25 +00:00
Samuel Thibault
1c3d4901fa fbcon: Check font dimension limits
commit 2b09d5d364986f724f17001ccfe4126b9b43a0be upstream.

blit_x and blit_y are u32, so fbcon currently cannot support fonts
larger than 32x32.

The 32x32 case also needs shifting an unsigned int, to properly set bit
31, otherwise we get "UBSAN: shift-out-of-bounds in fbcon_set_font",
as reported on:

http://lore.kernel.org/all/IA1PR07MB98308653E259A6F2CE94A4AFABCE9@IA1PR07MB9830.namprd07.prod.outlook.com
Kernel Branch: 6.2.0-rc5-next-20230124
Kernel config: https://drive.google.com/file/d/1F-LszDAizEEH0ZX0HcSR06v5q8FPl2Uv/view?usp=sharing
Reproducer: https://drive.google.com/file/d/1mP1jcLBY7vWCNM60OMf-ogw-urQRjNrm/view?usp=sharing

Reported-by: Sanan Hasanov <sanan.hasanov@Knights.ucf.edu>
Signed-off-by: Samuel Thibault <samuel.thibault@ens-lyon.org>
Fixes: 2d2699d984 ("fbcon: font setting should check limitation of driver")
Cc: stable@vger.kernel.org
Tested-by: Miko Larsson <mikoxyzzz@gmail.com>
Reviewed-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Helge Deller <deller@gmx.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2023-02-22 12:47:14 +01:00
Wilson Sung
9935a3fd79 Merge android-4.19-stable (4.19.269) into android-msm-pixel-4.19-lts
Merge 4.19.269 into android-4.19-stable
Linux 4.19.269
    can: esd_usb: Allow REC and TEC to return to zero
    net: mvneta: Fix an out of bounds check
  * ipv6: avoid use-after-free in ip6_fragment()
      net/ipv6/ip6_output.c
    net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq()
    xen/netback: fix build warning
    ethernet: aeroflex: fix potential skb leak in greth_init_rings()
  * tipc: Fix potential OOB in tipc_link_proto_rcv()
      net/tipc/link.c
    net: hisilicon: Fix potential use-after-free in hix5hd2_rx()
    net: hisilicon: Fix potential use-after-free in hisi_femac_rx()
    net: stmmac: fix "snps,axi-config" node property parsing
    nvme initialize core quirks before calling nvme_init_subsystem
    NFC: nci: Bounds check struct nfc_target arrays
    i40e: Disallow ip4 and ip6 l4_4_bytes
    i40e: Fix for VF MAC address 0
    i40e: Fix not setting default xps_cpus after reset
    net: mvneta: Prevent out of bounds read in mvneta_config_rss()
    xen-netfront: Fix NULL sring after live migration
    net: encx24j600: Fix invalid logic in reading of MISTAT register
    net: encx24j600: Add parentheses to fix precedence
    mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
    selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload
  * Bluetooth: Fix not cleanup led when bt_init fails
      net/bluetooth/af_bluetooth.c
    Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn()
    igb: Allocate MSI-X vector when testing
    e1000e: Fix TX dispatch condition
    gpio: amd8111: Fix PCI device reference count leak
    ca8210: Fix crash by zero initializing data
    ieee802154: cc2520: Fix error return code in cc2520_hw_init()
  * HID: core: fix shift-out-of-bounds in hid_report_raw_event
      drivers/hid/hid-core.c
    HID: hid-lg4ff: Add check for empty lbuf
    KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field
  * memcg: fix possible use-after-free in memcg_write_event_control()
      include/linux/cgroup.h
      kernel/cgroup/cgroup-internal.h
      mm/memcontrol.c
  * media: v4l2-dv-timings.c: fix too strict blanking sanity checks
      drivers/media/v4l2-core/v4l2-dv-timings.c
    rcutorture: Automatically create initrd directory
    xen/netback: don't call kfree_skb() with interrupts disabled
    xen/netback: do some code cleanup
    xen/netback: Ensure protocol headers don't fall in the non-linear area
    net: usb: qmi_wwan: add u-blox 0x1342 composition
    9p/xen: check logical size for buffer size
    fbcon: Use kzalloc() in fbcon_prepare_logo()
    regulator: twl6030: fix get status of twl6032 regulators
  * ASoC: soc-pcm: Add NULL check in BE reparenting
      sound/soc/soc-pcm.c
    ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event
    9p/fd: Use P9_HDRSZ for header size
    ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188
    ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation
    ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels
    ARM: dts: rockchip: fix ir-receiver node names
    arm: dts: rockchip: fix node name for hym8563 rtc
    ANDROID: Add allowed symbols required from Qualcomm drivers
    Merge 4.19.268 into android-4.19-stable
Linux 4.19.268
    ipc/sem: Fix dangling sem_array access in semtimedop race
    mmc: sdhci: Fix voltage switch delay
    mmc: sdhci: use FIELD_GET for preset value bit masks
    x86/ioremap: Fix page aligned size calculation in __ioremap_caller()
  * Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM
      net/bluetooth/l2cap_core.c
    x86/pm: Add enumeration check before spec MSRs save/restore setup
    x86/tsx: Add a feature bit for TSX control MSR support
    nvme: restrict management ioctls to admin
  * tcp/udp: Fix memory leak in ipv6_renew_options().
      net/ipv6/ipv6_sockglue.c
  * Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled
      lib/Kconfig.debug
  * parisc: Increase FRAME_WARN to 2048 bytes on parisc
      lib/Kconfig.debug
  * xtensa: increase size of gcc stack frame check
      lib/Kconfig.debug
  * parisc: Increase size of gcc stack frame check
      lib/Kconfig.debug
    iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init()
    pinctrl: single: Fix potential division by zero
  * ASoC: ops: Fix bounds check for _sx controls
      sound/soc/soc-ops.c
  * mm: Fix '.data.once' orphan section warning
      include/linux/mmdebug.h
  * arm64: errata: Fix KVM Spectre-v2 mitigation selection for Cortex-A57/A72
      arch/arm64/kernel/cpu_errata.c
  * arm64: Fix panic() when Spectre-v2 causes Spectre-BHB to re-allocate KVM vectors
      arch/arm64/kernel/cpu_errata.c
    pinctrl: intel: Save and restore pins in "direct IRQ" mode
    x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3
    nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry()
    tools/vm/slabinfo-gnuplot: use "grep -E" instead of "egrep"
  * error-injection: Add prompt for function error injection
      lib/Kconfig.debug
    btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit()
    hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new()
    hwmon: (coretemp) Check for null before removing sysfs attrs
    net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed
  * packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE
      net/packet/af_packet.c
  * net: tun: Fix use-after-free in tun_detach()
      drivers/net/tun.c
    net: hsr: Fix potential use-after-free
    dsa: lan9303: Correct stat name
    net/9p: Fix a potential socket leak in p9_socket_open
    net: net_netdev: Fix error handling in ntb_netdev_init_module()
  * net: phy: fix null-ptr-deref while probe() failed
      drivers/net/phy/phy_device.c
    qlcnic: fix sleep-in-atomic-context bugs caused by msleep
    can: cc770: cc770_isa_probe(): add missing free_cc770dev()
    can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev()
    net/mlx5: Fix uninitialized variable bug in outlen_write()
  * of: property: decrement node refcount in of_fwnode_get_reference_args()
      drivers/of/property.c
    hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails
    hwmon: (i5500_temp) fix missing pci_disable_device()
    scripts/faddr2line: Fix regression in name resolution on ppc64le
  * iio: light: rpr0521: add missing Kconfig dependencies
      drivers/iio/light/Kconfig
    iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw
    iio: health: afe4403: Fix oob read in afe4403_read_raw
    Revert "x86/speculation: Change FILL_RETURN_BUFFER to work with objtool"
  * v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails
      mm/frame_vector.c
  * proc: proc_skip_spaces() shouldn't think it is working on C strings
      kernel/sysctl.c
  * proc: avoid integer type confusion in get_proc_long
      kernel/sysctl.c
    spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock
    btrfs: free btrfs_path before copying inodes to userspace
    drm/amdgpu: always register an MMU notifier for userptr
    drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN
    btrfs: free btrfs_path before copying subvol info to userspace
    btrfs: free btrfs_path before copying fspath to userspace
    btrfs: free btrfs_path before copying root refs to userspace
    dm integrity: flush the journal on suspend
    net: usb: qmi_wwan: add Telit 0x103a composition
  * tcp: configurable source port perturb table size
      net/ipv4/Kconfig
      net/ipv4/inet_hashtables.c
    platform/x86: hp-wmi: Ignore Smart Experience App event
    platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017)
    platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr()
    xen/platform-pci: add missing free_irq() in error path
    serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios()
    Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode
    nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty
    ceph: avoid putting the realm twice when decoding snaps fails
    ceph: do not update snapshot context when there is no new snapshot
    iio: pressure: ms5611: fixed value compensation bug
    iio: ms5611: Simplify IO callback parameters
    nios2: add FORCE for vmlinuz.gz
    iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails
    iio: light: apds9960: fix wrong register for gesture gain
    arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency
    s390/crashdump: fix TOD programmable field size
    net: thunderx: Fix the ACPI memory leak
    nfc: st-nci: fix memory leaks in EVT_TRANSACTION
    nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION
    s390/dasd: fix no record found for raw_track_access
  * dccp/tcp: Reset saddr on failure after inet6?_hash_connect().
      net/ipv4/tcp_ipv4.c
      net/ipv6/tcp_ipv6.c
    bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending()
    NFC: nci: fix memory leak in nci_rx_data_packet()
  * xfrm: Fix ignored return value in xfrm6_init()
      net/ipv6/xfrm6_policy.c
  * tipc: check skb_linearize() return value in tipc_disc_rcv()
      net/tipc/discover.c
  * tipc: add an extra conn_get in tipc_conn_alloc
      net/tipc/topsrv.c
  * tipc: set con sock in tipc_conn_alloc
      net/tipc/topsrv.c
    net/mlx5: Fix FW tracer timestamp calculation
    Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register()
    Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work()
    net: pch_gbe: fix pci device refcount leak while module exiting
    net/qla3xxx: fix potential memleak in ql3xxx_send()
    net/mlx4: Check retval of mlx4_bitmap_init
    ARM: mxs: fix memory leak in mxs_machine_init()
    9p/fd: fix issue of list_del corruption in p9_fd_cancel()
    net: pch_gbe: fix potential memleak in pch_gbe_tx_queue()
    nfc/nci: fix race with opening and closing
    ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl
    bus: sunxi-rsb: Support atomic transfers
    ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove
    ARM: dts: am335x-pcm-953: Define fixed regulators in root node
  * af_key: Fix send_acquire race with pfkey_register
      net/key/af_key.c
    MIPS: pic32: treat port as signed integer
    RISC-V: vdso: Do not add missing symbols to version section in linker script
  * drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017)
      drivers/gpu/drm/drm_panel_orientation_quirks.c
    spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run
    wifi: mac80211: Fix ack frame idr leak when mesh has no route
  * audit: fix undefined behavior in bit shift for AUDIT_BIT
      include/uapi/linux/audit.h
    wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support
    Merge 4.19.267 into android-4.19-stable
Linux 4.19.267
    ntfs: check overflow when iterating ATTR_RECORDs
    ntfs: fix out-of-bounds read in ntfs_attr_find()
    ntfs: fix use-after-free in ntfs_attr_find()
  * mm: fs: initialize fsdata passed to write_begin/write_end interface
      fs/buffer.c
      fs/namei.c
      mm/filemap.c
    9p/trans_fd: always use O_NONBLOCK read/write
    gfs2: Switch from strlcpy to strscpy
    gfs2: Check sb_bsize_shift after reading superblock
    9p: trans_fd/p9_conn_cancel: drop client lock earlier
    kcm: close race conditions on sk_receive_queue
  * bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb()
      net/bpf/test_run.c
    kcm: avoid potential race in kcm_tx_work
    tcp: cdg: allow tcp_cdg_release() to be called multiple times
    macvlan: enforce a consistent minimal mtu
    serial: 8250: Flush DMA Rx on RLSI
    Input: i8042 - fix leaking of platform device on module removal
    scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus()
    misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()
    docs: update mediator contact information in CoC doc
    mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put()
    mmc: core: properly select voltage range without power cycle
    serial: 8250_lpss: Configure DMA also w/o DMA filter
    serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs
  * dm ioctl: fix misbehavior if list_versions races with module loading
      drivers/md/dm-ioctl.c
    iio: pressure: ms5611: changed hardcoded SPI speed to value limited
    iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init()
    iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger()
    usb: chipidea: fix deadlock in ci_otg_del_timer
  * usb: add NO_LPM quirk for Realforce 87U Keyboard
      drivers/usb/core/quirks.c
    USB: serial: option: add Fibocom FM160 0x0111 composition
    USB: serial: option: add u-blox LARA-L6 modem
    USB: serial: option: add u-blox LARA-R6 00B modem
    USB: serial: option: remove old LARA-R6 PID
    USB: serial: option: add Sierra Wireless EM9191
    speakup: fix a segfault caused by switching consoles
    slimbus: stream: correct presence rate frequencies
  * ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open()
      sound/usb/midi.c
  * ring_buffer: Do not deactivate non-existant pages
      kernel/trace/ring_buffer.c
    ftrace: Fix null pointer dereference in ftrace_add_mod()
    ftrace: Optimize the allocation for mcount entries
    ftrace: Fix the possible incorrect kernel message
    net: thunderbolt: Fix error handling in tbnet_init()
    cifs: Fix wrong return value checking when GETFLAGS
    net/x25: Fix skb leak in x25_lapb_receive_frame()
    drbd: use after free in drbd_create_device()
    xen/pcpu: fix possible memory leak in register_pcpu()
    bnxt_en: Remove debugfs when pci_register_driver failed
    net: caif: fix double disconnect client in chnl_net_open()
    mISDN: fix misuse of put_device() in mISDN_register_device()
    mISDN: fix possible memory leak in mISDN_dsp_element_register()
    net: bgmac: Drop free_netdev() from bgmac_enet_remove()
    ata: libata-transport: fix double ata_host_put() in ata_tport_add()
  * pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map
      drivers/pinctrl/devicetree.c
    parport_pc: Avoid FIFO port location truncation
    siox: fix possible memory leak in siox_device_add()
    block: sed-opal: kmalloc the cmd/resp buffers
  * ASoC: soc-utils: Remove __exit for snd_soc_util_exit()
      sound/soc/soc-utils.c
    tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send
    serial: imx: Add missing .thaw_noirq hook
    serial: 8250: omap: Flush PM QOS work on remove
    serial: 8250_omap: remove wait loop from Errata i202 workaround
  * ASoC: core: Fix use-after-free in snd_soc_exit()
      sound/soc/soc-core.c
  * Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm
      net/bluetooth/l2cap_core.c
    btrfs: remove pointless and double ulist frees in error paths of qgroup tests
    drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid
    NFSv4: Retry LOCK on OLD_STATEID during delegation return
    selftests/intel_pstate: fix build for ARCH=x86_64
    selftests/futex: fix build for clang
    spi: intel: Fix the offset to get the 64K erase opcode
    ASoC: wm8997: Revert "ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe"
    ASoC: wm5110: Revert "ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe"
    ASoC: wm5102: Revert "ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe"
    x86/cpu: Restore AMD's DE_CFG MSR after resume
  * net: tun: call napi_schedule_prep() to ensure we own a napi
      drivers/net/tun.c
    dmaengine: at_hdmac: Check return code of dma_async_device_register
    dmaengine: at_hdmac: Fix impossible condition
    dmaengine: at_hdmac: Don't allow CPU to reorder channel enable
    dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors
    dmaengine: at_hdmac: Don't start transactions at tx_submit level
    dmaengine: at_hdmac: Fix at_lli struct definition
  * cert host tools: Stop complaining about deprecated OpenSSL functions
      scripts/extract-cert.c
    udf: Fix a slab-out-of-bounds write bug in udf_find_entry()
    btrfs: selftests: fix wrong error check in btrfs_free_dummy_root()
    platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi
    drm/i915/dmabuf: fix sg_table handling in map_dma_buf
    nilfs2: fix use-after-free bug of ns_writer on remount
    nilfs2: fix deadlock in nilfs_count_free_blocks()
  * vmlinux.lds.h: Fix placement of '.data..decrypted' section
      include/asm-generic/vmlinux.lds.h
  * ALSA: usb-audio: Add DSD support for Accuphase DAC-60
      sound/usb/quirks.c
  * ALSA: usb-audio: Add quirk entry for M-Audio Micro
      sound/usb/quirks-table.h
    ALSA: hda: fix potential memleak in 'add_widget_node'
    ALSA: hda/ca0132: add quirk for EVGA Z390 DARK
    arm64: efi: Fix handling of misaligned runtime regions and drop warning
    riscv: process: fix kernel info leakage
    net: macvlan: fix memory leaks of macvlan_common_newlink
    net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open()
    ethernet: s2io: disable napi when start nic failed in s2io_card_up()
    net: cxgb3_main: disable napi when bind qsets failed in cxgb_up()
    net: nixge: disable napi when enable interrupts failed in nixge_open()
    drivers: net: xgene: disable napi when register irq failed in xgene_enet_open()
    dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove()
  * tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header
      net/tipc/netlink_compat.c
  * ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network
      net/ipv6/addrlabel.c
    drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register()
    hamradio: fix issue of dev reference count leakage in bpq_device_event()
    net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event()
  * capabilities: fix undefined behavior in bit shift for CAP_TO_MASK
      include/uapi/linux/capability.h
    net: fman: Unregister ethernet device on removal
    bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer
  * net: tun: Fix memory leaks of napi_get_frags
      drivers/net/tun.c
  * net: gso: fix panic on frag_list with mixed head alloc types
      net/core/skbuff.c
    HID: hyperv: fix possible memory leak in mousevsc_probe()
  * wifi: cfg80211: fix memory leak in query_regdb_file()
      net/wireless/reg.c
    phy: stm32: fix an error code in probe

Bug: 263916797
Change-Id: I60be0c175e5d68728cfc228e2e02317faa66c1d5
Signed-off-by: JohnnLee <johnnlee@google.com>
2023-01-10 06:37:10 +00:00
Tetsuo Handa
20e78b7d1c fbcon: Use kzalloc() in fbcon_prepare_logo()
[ Upstream commit a6a00d7e8ffd78d1cdb7a43f1278f081038c638f ]

A kernel built with syzbot's config file reported that

  scr_memcpyw(q, save, array3_size(logo_lines, new_cols, 2))

causes uninitialized "save" to be copied.

  ----------
  [drm] Initialized vgem 1.0.0 20120112 for vgem on minor 0
  [drm] Initialized vkms 1.0.0 20180514 for vkms on minor 1
  Console: switching to colour frame buffer device 128x48
  =====================================================
  BUG: KMSAN: uninit-value in do_update_region+0x4b8/0xba0
   do_update_region+0x4b8/0xba0
   update_region+0x40d/0x840
   fbcon_switch+0x3364/0x35e0
   redraw_screen+0xae3/0x18a0
   do_bind_con_driver+0x1cb3/0x1df0
   do_take_over_console+0x11cb/0x13f0
   fbcon_fb_registered+0xacc/0xfd0
   register_framebuffer+0x1179/0x1320
   __drm_fb_helper_initial_config_and_unlock+0x23ad/0x2b40
   drm_fbdev_client_hotplug+0xbea/0xda0
   drm_fbdev_generic_setup+0x65e/0x9d0
   vkms_init+0x9f3/0xc76
   (...snipped...)

  Uninit was stored to memory at:
   fbcon_prepare_logo+0x143b/0x1940
   fbcon_init+0x2c1b/0x31c0
   visual_init+0x3e7/0x820
   do_bind_con_driver+0x14a4/0x1df0
   do_take_over_console+0x11cb/0x13f0
   fbcon_fb_registered+0xacc/0xfd0
   register_framebuffer+0x1179/0x1320
   __drm_fb_helper_initial_config_and_unlock+0x23ad/0x2b40
   drm_fbdev_client_hotplug+0xbea/0xda0
   drm_fbdev_generic_setup+0x65e/0x9d0
   vkms_init+0x9f3/0xc76
   (...snipped...)

  Uninit was created at:
   __kmem_cache_alloc_node+0xb69/0x1020
   __kmalloc+0x379/0x680
   fbcon_prepare_logo+0x704/0x1940
   fbcon_init+0x2c1b/0x31c0
   visual_init+0x3e7/0x820
   do_bind_con_driver+0x14a4/0x1df0
   do_take_over_console+0x11cb/0x13f0
   fbcon_fb_registered+0xacc/0xfd0
   register_framebuffer+0x1179/0x1320
   __drm_fb_helper_initial_config_and_unlock+0x23ad/0x2b40
   drm_fbdev_client_hotplug+0xbea/0xda0
   drm_fbdev_generic_setup+0x65e/0x9d0
   vkms_init+0x9f3/0xc76
   (...snipped...)

  CPU: 2 PID: 1 Comm: swapper/0 Not tainted 6.1.0-rc4-00356-g8f2975c2bb4c #924
  Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS VirtualBox 12/01/2006
  ----------

Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/cad03d25-0ea0-32c4-8173-fd1895314bce@I-love.SAKURA.ne.jp
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-12-14 11:28:26 +01:00
Lucas Wei
2119f07e02 Merge android-4.19-stable (4.19.261) into android-msm-pixel-4.19-lts
Merge 4.19.261 into android-4.19-stable
Linux 4.19.261
    clk: iproc: Do not rely on node name for correct PLL setup
    selftests: Fix the if conditions of in test_extra_filter()
    nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
    nvme: add new line after variable declatation
  * usbnet: Fix memory leak in usbnet_disconnect()
      drivers/net/usb/usbnet.c
    Input: melfas_mip4 - fix return value check in mip4_probe()
    Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
    soc: sunxi: sram: Fix debugfs info for A64 SRAM C
    soc: sunxi: sram: Fix probe function ordering issues
    soc: sunxi: sram: Prevent the driver from being unbound
    soc: sunxi: sram: Actually claim SRAM regions
    ima: Free the entire rule if it fails to parse
    ima: Free the entire rule when deleting a list of rules
    ima: Have the LSM free its audit rule
  * mm/migrate_device.c: flush TLB while holding PTL
      mm/migrate.c
  * mm: prevent page_frag_alloc() from corrupting the memory
      mm/page_alloc.c
  * mm/page_alloc: fix race condition between build_all_zonelists and page allocation
      mm/page_alloc.c
    mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
    libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
    ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
    ARM: dts: integrator: Tag PCI host with device_type
    net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
    uas: ignore UAS for Thinkplus chips
    usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
    uas: add no-uas quirk for Hiksemi usb_disk
    Merge 4.19.260 into android-4.19-stable
Linux 4.19.260
  * ext4: make directory inode spreading reflect flexbg size
      fs/ext4/ialloc.c
    usb: dwc3: pci: Allow Elkhart Lake to utilize DSM method for PM functionality
  * workqueue: don't skip lockdep work dependency in cancel_work_sync()
      kernel/workqueue.c
    drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
    drm/amd/display: Limit user regamma to a valid value
    Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
    s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
    serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
  * serial: Create uart_xmit_advance()
      include/linux/serial_core.h
    net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD
    perf kcore_copy: Do not check /proc/modules is unchanged
    perf jit: Include program header in ELF files
    can: gs_usb: gs_can_open(): fix race dev->can.state condition
  * netfilter: ebtables: fix memory leak when blob is malformed
      net/bridge/netfilter/ebtables.c
  * of: mdio: Add of_node_put() when breaking out of for_each_xx
      drivers/of/of_mdio.c
    i40e: Fix set max_tx_rate when it is lower than 1 Mbps
    i40e: Fix VF set max MTU size
    MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
    net: team: Unsync device addresses on ndo_stop
    ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
    iavf: Fix cached head and tail value for iavf_get_tx_pending
  * netfilter: nf_conntrack_irc: Tighten matching on DCC message
      net/netfilter/nf_conntrack_irc.c
    netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
    arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
    arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
  * mm/slub: fix to return errno if kmalloc() fails
      mm/slub.c
    efi: libstub: check Shim mode using MokSBStateRT
    ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
    ALSA: hda: add Intel 5 Series / 3400 PCI DID
    ALSA: hda/tegra: set depop delay for tegra
    USB: serial: option: add Quectel RM520N
    USB: serial: option: add Quectel BG95 0x0203 composition
  * USB: core: Fix RST error in hub.c
      drivers/usb/core/hub.c
    wifi: mac80211: Fix UAF in ieee80211_scan_rx()
    usb: dwc3: pci: add support for the Intel Alder Lake-S
    usb: dwc3: pci: add support for the Intel Jasper Lake
    usb: dwc3: pci: add support for the Intel Tiger Lake PCH -H variant
    usb: dwc3: pci: add support for TigerLake Devices
    usb: dwc3: pci: Add Support for Intel Elkhart Lake Devices
    ALSA: hda/sigmatel: Fix unused variable warning for beep power change
    video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write
  * mksysmap: Fix the mismatch of 'L0' symbols in System.map
      scripts/mksysmap
    MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
    net: usb: qmi_wwan: add Quectel RM520N
    ALSA: hda/sigmatel: Keep power up while beep is enabled
    rxrpc: Fix local destruction being repeated
    regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
    ASoC: nau8824: Fix semaphore unbalance at error paths
    cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
    mvpp2: no need to check return value of debugfs_create functions
    nvmet: fix a use-after-free
    parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
    drm/meson: Correct OSD1 global alpha value
    gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
  * of: fdt: fix off-by-one error in unflatten_dt_nodes()
      drivers/of/fdt.c
    Merge 4.19.259 into android-4.19-stable
  * Revert "xhci: Add grace period after xHC start to prevent premature runtime suspend."
      drivers/usb/host/xhci-hub.c
      drivers/usb/host/xhci.c
      drivers/usb/host/xhci.h
  * Revert "USB: core: Prevent nested device-reset calls"
      drivers/usb/core/hub.c
      include/linux/usb.h
    Merge 4.19.258 into android-4.19-stable
  * Revert "mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse"
      include/linux/rmap.h
      mm/rmap.c
  * Revert "sched/deadline: Fix priority inheritance with multiple scheduling classes"
      include/linux/sched.h
      kernel/sched/core.c
      kernel/sched/deadline.c
  * Revert "kernel/sched: Remove dl_boosted flag comment"
      include/linux/sched.h
    Merge 4.19.257 into android-4.19-stable
  * Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
      fs/splice.c
    Merge 4.19.256 into android-4.19-stable
Linux 4.19.259
  * tracefs: Only clobber mode/uid/gid on remount if asked
      fs/tracefs/inode.c
    net: dp83822: disable rx error interrupt
  * mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
      mm/mmap.c
    usb: storage: Add ASUS <0x0b05:0x1932> to IGNORE_UAS
    platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
  * perf/arm_pmu_platform: fix tests for platform_get_irq() failure
      drivers/perf/arm_pmu_platform.c
    Input: iforce - add support for Boeder Force Feedback Wheel
    ieee802154: cc2520: add rc code in cc2520_tx()
    tg3: Disable tg3 device on system reboot to avoid triggering AER
    HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
    drm/msm/rd: Fix FIFO-full deadlock
Linux 4.19.258
    SUNRPC: use _bh spinlocking on ->transport_lock
    MIPS: loongson32: ls1c: Fix hang during startup
    x86/nospec: Fix i386 RSB stuffing
  * usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
      drivers/usb/dwc3/dwc3-qcom.c
      drivers/usb/dwc3/host.c
    USB: serial: ch341: fix disabled rx timer on older devices
    USB: serial: ch341: fix lost character on LCR updates
  * usb: dwc3: fix PHY disable sequence
      drivers/usb/dwc3/core.c
    sch_sfb: Also store skb len before calling child enqueue
  * tcp: fix early ETIMEDOUT after spurious non-SACK RTO
      net/ipv4/tcp_input.c
    RDMA/mlx5: Set local port to one when accessing counters
  * ipv6: sr: fix out-of-bounds read when setting HMAC data.
      net/ipv6/seg6.c
    i40e: Fix kernel crash during module removal
  * tipc: fix shift wrapping bug in map_get()
      net/tipc/monitor.c
    sch_sfb: Don't assume the skb is still around after enqueueing to child
  * netfilter: nf_conntrack_irc: Fix forged IP logic
      net/netfilter/nf_conntrack_irc.c
    netfilter: br_netfilter: Drop dst references before setting.
    soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
    scsi: mpt3sas: Fix use-after-free warning
  * debugfs: add debugfs_lookup_and_remove()
      fs/debugfs/inode.c
      include/linux/debugfs.h
    kprobes: Prohibit probes in gate area
  * ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
      sound/usb/stream.c
    ALSA: aloop: Fix random zeros in capture data when using jiffies timer
    ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
    drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
    fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
  * arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
      arch/arm64/kernel/cacheinfo.c
    parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
    parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
    drm/radeon: add a force flush to delay work when radeon
    drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
    ALSA: seq: Fix data-race at module auto-loading
    ALSA: seq: oss: Fix data-race for max_midi_devs access
    net: mac802154: Fix a condition in the receive path
    wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
  * usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
      drivers/usb/gadget/function/storage_common.c
  * USB: core: Prevent nested device-reset calls
      drivers/usb/core/hub.c
      include/linux/usb.h
    s390: fix nospec table alignments
    s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
  * usb-storage: Add ignore-residue quirk for NXP PN7462AU
      drivers/usb/storage/unusual_devs.h
    USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
    usb: dwc2: fix wrong order of phy_power_on and phy_init
  * usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
      include/linux/usb/typec_dp.h
    USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
    USB: serial: option: add Quectel EM060K modem
    USB: serial: option: add support for OPPO R11 diag port
    USB: serial: cp210x: add Decagon UCA device id
  * xhci: Add grace period after xHC start to prevent premature runtime suspend.
      drivers/usb/host/xhci-hub.c
      drivers/usb/host/xhci.c
      drivers/usb/host/xhci.h
    thunderbolt: Use the actual buffer in tb_async_error()
    hwmon: (gpio-fan) Fix array out of bounds access
    Input: rk805-pwrkey - fix module autoloading
  * clk: core: Fix runtime PM sequence in clk_core_unprepare()
      drivers/clk/clk.c
  * Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
      drivers/clk/clk.c
  * clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
      drivers/clk/clk.c
    drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported"
  * binder: fix UAF of ref->proc caused by race condition
      drivers/android/binder.c
    USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
    vt: Clear selection before changing the font
    staging: rtl8712: fix use after free bugs
    serial: fsl_lpuart: RS485 RTS polariy is inverse
    net/smc: Remove redundant refcount increase
    Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
  * tcp: annotate data-race around challenge_timestamp
      net/ipv4/tcp_input.c
    sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
    kcm: fix strp_init() order and cleanup
    ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
  * Revert "xhci: turn off port power in shutdown"
      drivers/usb/host/xhci-hub.c
      drivers/usb/host/xhci.c
      drivers/usb/host/xhci.h
    wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
    ieee802154/adf7242: defer destroy_workqueue call
  * platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
      include/linux/platform_data/x86/pmc_atom.h
    drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
    drm/msm/dsi: fix the inconsistent indenting
    net: dp83822: disable false carrier interrupt
    Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
  * fs: only do a memory barrier for the first set_buffer_uptodate()
      include/linux/buffer_head.h
    wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
    efi: capsule-loader: Fix use-after-free in efi_capsule_write
  * driver core: Don't probe devices after bus_type.match() probe deferral
      drivers/base/dd.c
    Merge 08e84df974 ("selftests: timers: clocksource-switch: fix passing errors from child") into android-mainline
    Merge 247f293432 ("drm/msm/mdp5: Fix global state lock backoff") into android-mainline
  * Revert "USB: HCD: Fix URB giveback issue in tasklet function"
      drivers/usb/core/hcd.c
      include/linux/usb/hcd.h
    Merge 9408f5a443 ("USB: HCD: Fix URB giveback issue in tasklet function") into android-mainline
    Merge 4cb392956a ("MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK") into android-mainline
Linux 4.19.257
  * net: neigh: don't call kfree_skb() under spin_lock_irqsave()
      net/core/neighbour.c
    kprobes: don't call disarm_kprobe() for disabled kprobes
  * netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
      net/netfilter/Kconfig
    s390/hypfs: avoid error message under KVM
  * neigh: fix possible DoS due to net iface start/stop loop
      net/core/neighbour.c
    drm/amd/display: clear optc underflow before turn off odm clock
  * mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse
      include/linux/rmap.h
      mm/rmap.c
    ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
    fbdev: fb_pm2fb: Avoid potential divide by zero error
    HID: hidraw: fix memory leak in hidraw_release()
    media: pvrusb2: fix memory leak in pvr_probe
    HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
  * Bluetooth: L2CAP: Fix build errors in some archs
      net/bluetooth/l2cap_core.c
  * kbuild: Fix include path in scripts/Makefile.modpost
      scripts/Makefile.modpost
    x86/bugs: Add "unknown" reporting for MMIO Stale Data
    s390/mm: do not trigger write fault when vma does not allow VM_WRITE
    selftests/bpf: Fix test_align verifier log patterns
    bpf: Fix the off-by-two error in range markings
  * arm64: map FDT as RW for early_init_dt_scan()
      arch/arm64/include/asm/mmu.h
      arch/arm64/kernel/kaslr.c
      arch/arm64/kernel/setup.c
      arch/arm64/mm/mmu.c
  * mm: Force TLB flush for PFNMAP mappings before unlink_file_vma()
      mm/mmap.c
    scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq
    md: call __md_stop_writes in md_stop
  * mm/hugetlb: fix hugetlb not supporting softdirty tracking
      mm/mmap.c
    s390: fix double free of GS and RI CBs on fork() failure
  * asm-generic: sections: refactor memory_intersects
      include/asm-generic/sections.h
  * loop: Check for overflow while configuring loop
      drivers/block/loop.c
    x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry
    btrfs: check if root is readonly while setting security xattr
    ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter
  * net: Fix a data-race around sysctl_somaxconn.
      net/socket.c
  * net: Fix a data-race around netdev_budget_usecs.
      net/core/dev.c
  * net: Fix a data-race around netdev_budget.
      net/core/dev.c
  * net: Fix a data-race around sysctl_net_busy_read.
      net/core/sock.c
  * net: Fix a data-race around sysctl_net_busy_poll.
      include/net/busy_poll.h
  * net: Fix a data-race around sysctl_tstamp_allow_data.
      net/core/skbuff.c
  * ratelimit: Fix data-races in ___ratelimit().
      lib/ratelimit.c
  * net: Fix data-races around netdev_tstamp_prequeue.
      net/core/dev.c
  * net: Fix data-races around weight_p and dev_weight_[rt]x_bias.
      net/core/dev.c
      net/core/sysctl_net_core.c
      net/sched/sch_generic.c
    netfilter: nft_tunnel: restrict it to netdev family
    netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families
    netfilter: nft_payload: do not truncate csum_offset and csum_type
    netfilter: nft_payload: report ERANGE for too long offset and length
  * netfilter: ebtables: reject blobs that don't provide all entry points
      include/linux/netfilter_bridge/ebtables.h
      net/bridge/netfilter/ebtable_broute.c
      net/bridge/netfilter/ebtables.c
    net: ipvtap - add __init/__exit annotations to module init/exit funcs
  * bonding: 802.3ad: fix no transmission of LACPDUs
      drivers/net/bonding/bond_3ad.c
    rose: check NULL rose_loopback_neigh->loopback
  * af_key: Do not call xfrm_probe_algs in parallel
      net/key/af_key.c
  * xfrm: fix refcount leak in __xfrm_policy_check()
      net/xfrm/xfrm_policy.c
  * kernel/sched: Remove dl_boosted flag comment
      include/linux/sched.h
  * sched/deadline: Fix priority inheritance with multiple scheduling classes
      include/linux/sched.h
      kernel/sched/core.c
      kernel/sched/deadline.c
  * sched/deadline: Fix stale throttling on de-/boosted tasks
      kernel/sched/deadline.c
  * sched/deadline: Unthrottle PI boosted threads while enqueuing
      kernel/sched/deadline.c
    pinctrl: amd: Don't save/restore interrupt status and wake status bits
  * kernel/sys_ni: add compat entry for fadvise64_64
      kernel/sys_ni.c
    parisc: Fix exception handler for fldw and fstw instructions
  * audit: fix potential double free on error path from fsnotify_add_inode_mark
      kernel/audit_fsnotify.c
Linux 4.19.256
    btrfs: raid56: don't trust any cached sector in __raid56_parity_recover()
    btrfs: only write the sectors in the vertical stripe which has data stripes
  * tracing/probes: Have kprobes and uprobes use $COMM too
      kernel/trace/trace_probe.c
    tee: add overflow check in register_shm_helper()
    MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0
    video: fbdev: i740fb: Check the argument of i740_calc_vclk()
    powerpc/64: Init jump labels before parse_early_param()
    smb3: check xattr value length earlier
  * f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page()
      fs/f2fs/node.c
  * ALSA: timer: Use deferred fasync helper
      sound/core/timer.c
  * ALSA: core: Add async signal helpers
      include/sound/core.h
      sound/core/misc.c
  * watchdog: export lockup_detector_reconfigure
      include/linux/nmi.h
    RISC-V: Add fast call path of crash_kexec()
    riscv: mmap with PROT_WRITE but no PROT_READ is invalid
    mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start
    vfio: Clear the caps->buf to NULL after free
    tty: serial: Fix refcount leak bug in ucc_uart.c
  * lib/list_debug.c: Detect uninitialized lists
      lib/list_debug.c
  * ext4: avoid resizing to a partial cluster size
      fs/ext4/resize.c
  * ext4: avoid remove directory when directory is corrupted
      fs/ext4/namei.c
    drivers:md:fix a potential use-after-free bug
    dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed
    cxl: Fix a memory leak in an error handling path
    gadgetfs: ep_io - wait until IRQ finishes
    clk: qcom: ipq8074: dont disable gcc_sleep_clk_src
    vboxguest: Do not use devm for irq
    usb: renesas: Fix refcount leak bug
    usb: host: ohci-ppc-of: Fix refcount leak bug
    irqchip/tegra: Fix overflow implicit truncation warnings
  * PCI: Add ACS quirk for Broadcom BCM5750x NICs
      drivers/pci/quirks.c
    drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors()
  * locking/atomic: Make test_and_*_bit() ordered on failure
      include/asm-generic/bitops/atomic.h
  * gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file
      scripts/Makefile.gcc-plugins
    igb: Add lock to avoid data race
    fec: Fix timer capture timing in `fec_ptp_enable_pps()`
    i40e: Fix to stop tx_timeout recovery if GLOBR fails
    powerpc/pci: Fix get_phb_number() locking
    netfilter: nf_tables: really skip inactive sets when allocating name
    nios2: add force_successful_syscall_return()
    nios2: restarts apply only to the first sigframe we build...
    nios2: fix syscall restart checks
    nios2: traced syscall does need to check the syscall number
    nios2: don't leave NULLs in sys_call_table[]
    nios2: page fault et.al. are *not* restartable syscalls...
    atm: idt77252: fix use-after-free bugs caused by tst_timer
    xen/xenbus: fix return type in xenbus_file_read()
    NTB: ntb_tool: uninitialized heap data in tool_fn_write()
    tools build: Switch to new openssl API for test-libcrypto
    vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout()
    vsock: Fix memory leak in vsock_connect()
    geneve: do not use RT_TOS for IPv6 flowlabel
    ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool
    pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed
    pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map
    SUNRPC: Reinitialise the backchannel request buffers before reuse
    NFSv4/pnfs: Fix a use-after-free bug in open
    NFSv4.1: RECLAIM_COMPLETE must handle EACCES
    NFSv4: Fix races in the legacy idmapper upcall
    apparmor: Fix memleak in aa_simple_write_to_buffer()
    apparmor: fix reference count leak in aa_pivotroot()
    apparmor: fix overlapping attachment computation
    apparmor: fix aa_label_asxprint return check
    apparmor: Fix failed mount permission check error message
    apparmor: fix absroot causing audited secids to begin with =
    apparmor: fix quiet_denied for file rules
    can: ems_usb: fix clang's -Wunaligned-access warning
  * tracing: Have filter accept "common_cpu" to be consistent
      kernel/trace/trace_events.c
    btrfs: fix lost error handling when looking up extended ref on log replay
    mmc: pxamci: Fix an error handling path in pxamci_probe()
    mmc: pxamci: Fix another error handling path in pxamci_probe()
    ata: libata-eh: Add missing command name
    rds: add missing barrier to release_refill
  * ALSA: info: Fix llseek return value when using callback
      sound/core/info.c
    powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E
    powerpc/mm: Split dump_pagelinuxtables flag_array table
    firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails
    net_sched: cls_route: disallow handle of 0
    net/9p: Initialize the iounit field during fid creation
  * Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression
      net/bluetooth/l2cap_core.c
  * Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP"
      drivers/net/usb/ax88179_178a.c
  * scsi: sg: Allow waiting for commands to complete on removed device
      drivers/scsi/sg.c
  * tcp: fix over estimation in sk_forced_mem_schedule()
      net/ipv4/tcp_output.c
    KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()
    KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq
  * KVM: Add infrastructure and macro to mark VM as bugged
      include/linux/kvm_host.h
    btrfs: reject log replay if there is unsupported RO compat flag
    net_sched: cls_route: remove from list when handle is 0
  * ACPI: CPPC: Do not prevent CPPC from working in the future
      include/acpi/cppc_acpi.h
    dm writecache: set a default MAX_WRITEBACK_JOBS
    dm raid: fix address sanitizer warning in raid_status
    dm raid: fix address sanitizer warning in raid_resume
    intel_th: pci: Add Meteor Lake-P support
    intel_th: pci: Add Raptor Lake-S PCH support
    intel_th: pci: Add Raptor Lake-S CPU support
  * ext4: correct the misjudgment in ext4_iget_extra_inode
      fs/ext4/inode.c
  * ext4: correct max_inline_xattr_value_size computing
      fs/ext4/inline.c
  * ext4: fix extent status tree race in writeback error recovery path
      fs/ext4/inode.c
  * ext4: update s_overhead_clusters in the superblock during an on-line resize
      fs/ext4/resize.c
  * ext4: fix use-after-free in ext4_xattr_set_entry
      fs/ext4/xattr.c
  * ext4: make sure ext4_append() always allocates new block
      fs/ext4/namei.c
  * ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h
      fs/ext4/xattr.h
  * spmi: trace: fix stack-out-of-bound access in SPMI tracing functions
      include/trace/events/spmi.h
    x86/olpc: fix 'logical not is only applied to the left hand side'
    scsi: zfcp: Fix missing auto port scan and thus missing target ports
    video: fbdev: s3fb: Check the size of screen before memset_io()
    video: fbdev: arkfb: Check the size of screen before memset_io()
    video: fbdev: vt8623fb: Check the size of screen before memset_io()
    tools/thermal: Fix possible path truncations
    video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock()
    x86/numa: Use cpumask_available instead of hardcoded NULL check
    scripts/faddr2line: Fix vmlinux detection on arm64
    genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO
    powerpc/pci: Fix PHB numbering when using opal-phbid
    kprobes: Forbid probing on trampoline and BPF code areas
    powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address
    powerpc/xive: Fix refcount leak in xive_get_max_prio
    powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader
    powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias
    powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32
    video: fbdev: sis: fix typos in SiS_GetModeID()
    video: fbdev: amba-clcd: Fix refcount leak bugs
    ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp()
    s390/zcore: fix race when reading from hardware system area
    iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop
  * mfd: t7l66xb: Drop platform disable callback
      include/linux/mfd/t7l66xb.h
  * kfifo: fix kfifo_to_user() return type
      include/linux/kfifo.h
    rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge
    iommu/exynos: Handle failed IOMMU device registration properly
    tty: n_gsm: fix missing corner cases in gsmld_poll()
    tty: n_gsm: fix DM command
    tty: n_gsm: fix wrong T1 retry count handling
    vfio/ccw: Do not change FSM state in subchannel event
    remoteproc: qcom: wcnss: Fix handling of IRQs
    tty: n_gsm: fix race condition in gsmld_write()
    tty: n_gsm: fix packet re-transmission without open control channel
    tty: n_gsm: fix non flow control frames during mux flow off
  * profiling: fix shift too large makes kernel panic
      kernel/profile.c
    serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty()
    ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe
    ASoC: codecs: da7210: add check for i2c_add_driver
    ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe
    ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe
  * jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted
      fs/jbd2/transaction.c
  * ext4: recover csum seed of tmp_inode after migrating to extents
      fs/ext4/migrate.c
    null_blk: fix ida error handling in null_add_dev()
    RDMA/rxe: Fix error unwind in rxe_create_qp()
  * mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region
      mm/mmap.c
    platform/olpc: Fix uninitialized data in debugfs write
    USB: serial: fix tty-port initialized comments
    HID: alps: Declare U1_UNICORN_LEGACY support
    mmc: cavium-thunderx: Add of_node_put() when breaking out of loop
    mmc: cavium-octeon: Add of_node_put() when breaking out of loop
  * gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data()
      drivers/gpio/gpiolib-of.c
    RDMA/hfi1: fix potential memory leak in setup_base_ctxt()
  * usb: gadget: udc: amd5536 depends on HAS_DMA
      drivers/usb/gadget/udc/Kconfig
    scsi: smartpqi: Fix DMA direction for RAID requests
    mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R
    memstick/ms_block: Fix a memory leak
    memstick/ms_block: Fix some incorrect memory allocation
    mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch
    staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback
    soundwire: bus_type: fix remove and shutdown support
    clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks
    clk: qcom: ipq8074: fix NSS port frequency tables
    misc: rtsx: Fix an error handling path in rtsx_pci_probe()
    usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe
    usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe
    fpga: altera-pr-ip: fix unsigned comparison with less than zero
    mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path
    mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release
    HID: cp2112: prevent a buffer overflow in cp2112_xfer()
    mtd: maps: Fix refcount leak in ap_flash_init
    mtd: maps: Fix refcount leak in of_flash_probe_versatile
    clk: renesas: r9a06g032: Fix UART clkgrp bitsel
    dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock
    net: rose: fix netdev reference changes
    netdevsim: Avoid allocation warnings triggered from user space
    net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS
    wifi: libertas: Fix possible refcount leak in if_usb_probe()
    wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()`
    i2c: mux-gpmux: Add of_node_put() when breaking out of loop
    i2c: cadence: Support PEC for SMBus block read
    Bluetooth: hci_intel: Add check for platform_driver_register
    can: pch_can: pch_can_error(): initialize errc before using it
  * can: error: specify the values of data[5..7] of CAN error frames
      include/uapi/linux/can/error.h
    can: usb_8dev: do not report txerr and rxerr during bus-off
    can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off
    can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off
    can: sun4i_can: do not report txerr and rxerr during bus-off
    can: hi311x: do not report txerr and rxerr during bus-off
    can: sja1000: do not report txerr and rxerr during bus-off
    can: rcar_can: do not report txerr and rxerr during bus-off
    can: pch_can: do not report txerr and rxerr during bus-off
    wifi: p54: add missing parentheses in p54_flush()
    wifi: p54: Fix an error handling path in p54spi_probe()
    selftests: timers: clocksource-switch: fix passing errors from child
    wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
    selftests: timers: valid-adjtimex: build fix for newer toolchains
  * fs: check FMODE_LSEEK to control internal pipe splicing
      fs/splice.c
    libbpf: Fix the name of a reused map
  * tcp: make retransmitted SKB fit into the send window
      net/ipv4/tcp_output.c
    mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init()
    media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment
    crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq
    drm/msm/mdp5: Fix global state lock backoff
    drm: bridge: sii8620: fix possible off-by-one
    drm/mediatek: dpi: Remove output format of YUV
    drm/rockchip: vop: Don't crash for invalid duplicate_state()
    drm/vc4: dsi: Correct DSI divider calculations
    media: hdpvr: fix error value returns in hdpvr_read
    drm: bridge: adv7511: Add check for mipi_dsi_driver_register
    wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd()
    ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
    media: tw686x: Register the irq at the end of probe
  * i2c: Fix a potential use after free
      drivers/i2c/i2c-core-base.c
    drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function
    drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers()
    wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c()
    ath10k: do not enforce interrupt trigger type
  * dm: return early from dm_pr_call() if DM device is suspended
      drivers/md/dm.c
    thermal/tools/tmon: Include pthread and time headers in tmon.h
  * nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt()
      kernel/sched/rt.c
  * regulator: of: Fix refcount leak bug in of_get_regulation_constraints()
      drivers/regulator/of_regulator.c
    arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node
    bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe()
    ARM: dts: qcom: pm8841: add required thermal-sensor-cells
    cpufreq: zynq: Fix refcount leak in zynq_get_revision
    ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init
    soc: fsl: guts: machine variable might be unset
    ARM: dts: ast2500-evb: fix board compatible
    x86/pmem: Fix platform-device leak in error path
    ARM: bcm: Fix refcount leak in bcm_kona_smc_init
    meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init
    ARM: findbit: fix overflowing offset
  * selinux: Add boundary check in put_entry()
      security/selinux/ss/policydb.h
    PM: hibernate: defer device probing when resuming from hibernation
    arm64: dts: qcom: ipq8074: fix NAND node name
    ACPI: LPSS: Fix missing check in register_device_clock()
    ACPI: PM: save NVS memory for Lenovo G40-45
    ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks
    ARM: OMAP2+: display: Fix refcount leak bug
    ARM: dts: imx6ul: fix qspi node compatible
    ARM: dts: imx6ul: fix lcdif node compatible
    ARM: dts: imx6ul: change operating-points to uint32-matrix
    ARM: dts: imx6ul: add missing properties for sram
    ext2: Add more validity checks for inode counts
  * USB: HCD: Fix URB giveback issue in tasklet function
      drivers/usb/core/hcd.c
      include/linux/usb/hcd.h
  * arm64: fix oops in concurrently setting insn_emulation sysctls
      arch/arm64/kernel/armv8_deprecated.c
  * arm64: Do not forget syscall when starting a new thread.
      arch/arm64/include/asm/processor.h
    netfilter: nf_tables: fix null deref due to zeroed list head
    netfilter: nf_tables: do not allow SET_ID to refer to another table
    MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
    powerpc/powernv: Avoid crashing if rng is NULL
    powerpc/fsl-pci: Fix Class Code of PCIe Root Port
  * PCI: Add defines for normal and subtractive PCI bridges
      include/linux/pci_ids.h
    ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr()
    md-raid10: fix KASAN warning
    serial: mvebu-uart: uart2 error bits clearing
  * fuse: limit nsec
      fs/fuse/inode.c
    iio: light: isl29028: Fix the warning in isl29028_remove()
  * bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds()
      kernel/bpf/verifier.c
    drm/amdgpu: Check BO's requested pinning domains against its preferred_domains
    drm/nouveau: fix another off-by-one in nvbios_addr
    parisc: Fix device names in /proc/iomem
  * ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh()
      fs/overlayfs/export.c
  * usbnet: Fix linkwatch use-after-free on disconnect
      drivers/net/usb/usbnet.c
    fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters
  * thermal: sysfs: Fix cooling_device_stats_setup() error code path
      drivers/thermal/thermal_sysfs.c
  * fs: Add missing umask strip in vfs_tmpfile
      fs/namei.c
  * vfs: Check the truncate maximum size in inode_newsize_ok()
      fs/attr.c
    tty: vt: initialize unicode screen buffer
    ALSA: hda/cirrus - support for iMac 12,1 model
    ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model
    KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP
    KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks
    KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0
  * HID: wacom: Don't register pad_input for touch switch
      drivers/hid/wacom_sys.c
      drivers/hid/wacom_wac.c
  * add barriers to buffer_uptodate and set_buffer_uptodate
      include/linux/buffer_head.h
    wifi: mac80211_hwsim: use 32-bit skb cookie
    wifi: mac80211_hwsim: add back erroneously removed cast
    wifi: mac80211_hwsim: fix race condition in pending packet
    ALSA: bcd2000: Fix a UAF bug on the error path of probing
    x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments
  * Makefile: link with -z noexecstack --no-warn-rwx-segments
      Makefile

Bug: 251722136
Change-Id: I935d6876eac3ce17f7ca54c64b4ce94b9331e481
Signed-off-by: Lucas Wei <lucaswei@google.com>
2022-10-26 14:55:01 +08:00
Helge Deller
220591a9f3 fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters
commit cad564ca557f8d3bb3b1fa965d9a2b3f6490ec69 upstream.

The user may use the fbcon=vc:<n1>-<n2> option to tell fbcon to take
over the given range (n1...n2) of consoles. The value for n1 and n2
needs to be a positive number and up to (MAX_NR_CONSOLES - 1).
The given values were not fully checked against those boundaries yet.

To fix the issue, convert first_fb_vc and last_fb_vc to unsigned
integers and check them against the upper boundary, and make sure that
first_fb_vc is smaller than last_fb_vc.

Cc: stable@vger.kernel.org # v4.19+
Reviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Signed-off-by: Helge Deller <deller@gmx.de>
Link: https://patchwork.freedesktop.org/patch/msgid/YpkYRMojilrtZIgM@p100
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-08-25 11:14:53 +02:00
Lucas Wei
eae5a83bf8 Merge android-4.19-stable (4.19.252) into android-msm-pixel-4.19-lts
Merge 4.19.252 into android-4.19-stable
Linux 4.19.252
    dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate
    dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate
    dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly
    dmaengine: pl330: Fix lockdep warning about non-static key
  * ida: don't use BUG_ON() for debugging
      lib/idr.c
    misc: rtsx_usb: set return value in rsp_buf alloc err path
  * misc: rtsx_usb: use separate command and response buffers
      include/linux/rtsx_usb.h
  * misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer
      include/linux/rtsx_usb.h
    i2c: cadence: Unregister the clk notifier in error path
    selftests: forwarding: fix error message in learning_test
    selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT
    selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT
    ibmvnic: Properly dispose of all skbs during a failover.
    ARM: at91: pm: use proper compatible for sama5d2's rtc
    pinctrl: sunxi: a83t: Fix NAND function name for some pins
    ARM: meson: Fix refcount leak in meson_smp_prepare_cpus
    xfs: remove incorrect ASSERT in xfs_rename
    can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits
    can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression
    can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info
    powerpc/powernv: delay rng platform device creation until later in boot
  * video: of_display_timing.h: include errno.h
      include/video/of_display_timing.h
    fbcon: Disallow setting font bigger than screen size
    iommu/vt-d: Fix PCI bus rescan device hot add
    net: rose: fix UAF bug caused by rose_t0timer_expiry
  * usbnet: fix memory leak in error case
      drivers/net/usb/usbnet.c
    can: gs_usb: gs_usb_open/close(): fix memory leak
    can: grcan: grcan_probe(): remove extra of_node_get()
    can: bcm: use call_rcu() instead of costly synchronize_rcu()
  * mm/slub: add missing TID updates on slab deactivation
      mm/slub.c
  * esp: limit skb_page_frag_refill use to a single page
      include/net/esp.h
      net/ipv4/esp4.c
      net/ipv6/esp6.c
    Merge 4.19.251 into android-4.19-stable
    Merge 4.19.250 into android-4.19-stable
  * ANDROID: revert some RNG function signature changes
      drivers/char/random.c
      include/linux/random.h
  * ANDROID: cpu/hotplug: avoid breaking Android ABI by fusing cpuhp steps
      include/linux/cpuhotplug.h
      kernel/cpu.c
    Merge 4.19.249 into android-4.19-stable
  * UPSTREAM: lib/crypto: blake2s: avoid indirect calls to compression function for Clang CFI
      include/crypto/internal/blake2s.h
      lib/crypto/blake2s.c
  * BACKPORT: lib/crypto: add prompts back to crypto libraries
      crypto/Kconfig
      lib/Kconfig
      lib/crypto/Kconfig
  * BACKPORT: lib/crypto: blake2s: include as built-in
      crypto/Kconfig
      drivers/net/Kconfig
      include/crypto/internal/blake2s.h
      lib/crypto/Kconfig
      lib/crypto/Makefile
      lib/crypto/blake2s-generic.c
      lib/crypto/blake2s.c
Linux 4.19.251
    net: usb: qmi_wwan: add Telit 0x1070 composition
    net: usb: qmi_wwan: add Telit 0x1060 composition
    xen/arm: Fix race in RB-tree based P2M accounting
    xen/blkfront: force data bouncing when backend is untrusted
    xen/netfront: force data bouncing when backend is untrusted
    xen/netfront: fix leaking data in shared pages
    xen/blkfront: fix leaking data in shared pages
  * ipv6/sit: fix ipip6_tunnel_get_prl return value
      net/ipv6/sit.c
  * sit: use min
      net/ipv6/sit.c
    net: dsa: bcm_sf2: force pause link settings
    hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails
    xen/gntdev: Avoid blocking in unmap_grant_pages()
  * net: tun: avoid disabling NAPI twice
      drivers/net/tun.c
    NFC: nxp-nci: Don't issue a zero length i2c_master_read()
    nfc: nfcmrvl: Fix irq_of_parse_and_map() return value
  * net: bonding: fix use-after-free after 802.3ad slave unbind
      drivers/net/bonding/bond_3ad.c
  * net: bonding: fix possible NULL deref in rlb code
      drivers/net/bonding/bond_alb.c
    netfilter: nft_dynset: restore set element counter when failing to update
    caif_virtio: fix race between virtio_device_ready() and ndo_open()
    net: ipv6: unexport __init-annotated seg6_hmac_net_init()
  * usbnet: fix memory allocation in helpers
      drivers/net/usb/usbnet.c
    RDMA/qedr: Fix reporting QP timeout attribute
  * net: tun: stop NAPI when detaching queues
      drivers/net/tun.c
  * net: tun: unlink NAPI from device on destruction
      drivers/net/tun.c
    selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test
    virtio-net: fix race between ndo_open() and virtio_device_ready()
  * net: usb: ax88179_178a: Fix packet receiving
      drivers/net/usb/ax88179_178a.c
    net: rose: fix UAF bugs caused by timer handler
    SUNRPC: Fix READ_PLUS crasher
    s390/archrandom: simplify back to earlier design and initialize earlier
    dm raid: fix KASAN warning in raid5_add_disks
    dm raid: fix accesses beyond end of raid member array
    nvdimm: Fix badblocks clear off-by-one error
  * UPSTREAM: crypto: poly1305 - fix poly1305_core_setkey() declaration
      include/crypto/internal/poly1305.h
      include/crypto/poly1305.h
      lib/crypto/poly1305-donna64.c
      lib/crypto/poly1305.c
  * UPSTREAM: mm: fix misplaced unlock_page in do_wp_page()
      mm/memory.c
  * BACKPORT: mm: do_wp_page() simplification
      mm/memory.c
  * UPSTREAM: mm/ksm: Remove reuse_ksm_page()
      include/linux/ksm.h
  * UPSTREAM: mm: reuse only-pte-mapped KSM page in do_wp_page()
      include/linux/ksm.h
      mm/memory.c
Linux 4.19.250
  * swiotlb: skip swiotlb_bounce when orig_addr is zero
      kernel/dma/swiotlb.c
  * net/sched: move NULL ptr check to qdisc_put() too
      net/sched/sch_generic.c
    net: mscc: ocelot: allow unregistered IP multicast flooding
  * kexec_file: drop weak attribute from arch_kexec_apply_relocations[_add]
      include/linux/kexec.h
  * fdt: Update CRC check for rng-seed
      drivers/of/fdt.c
    xen: unexport __init-annotated xen_xlate_map_ballooned_pages()
  * drm: remove drm_fb_helper_modinit
      drivers/gpu/drm/drm_crtc_helper_internal.h
      drivers/gpu/drm/drm_kms_helper_common.c
    powerpc/pseries: wire up rng during setup_arch()
  * kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt)
      Makefile
  * modpost: fix section mismatch check for exported init/exit sections
      scripts/mod/modpost.c
    ARM: cns3xxx: Fix refcount leak in cns3xxx_init
    ARM: Fix refcount leak in axxia_boot_secondary
    soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe
    ARM: exynos: Fix refcount leak in exynos_map_pmu
    ARM: dts: imx6qdl: correct PU regulator ramp delay
    powerpc/powernv: wire up rng during setup_arch
    powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address
    powerpc: Enable execve syscall exit tracepoint
    xtensa: Fix refcount leak bug in time.c
    xtensa: xtfpga: Fix refcount leak bug in setup
    iio: adc: axp288: Override TS pin bias current for some models
    iio: trigger: sysfs: fix use-after-free on remove
    iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up()
    iio: accel: mma8452: ignore the return value of reset operation
    iio:accel:bma180: rearrange iio trigger get and register
    iio:chemical:ccs811: rearrange iio trigger get and register
    usb: chipidea: udc: check request status before setting device address
  * xhci: turn off port power in shutdown
      drivers/usb/host/xhci-hub.c
      drivers/usb/host/xhci.c
      drivers/usb/host/xhci.h
    iio: adc: vf610: fix conversion mode sysfs node name
    gpio: winbond: Fix error code in winbond_gpio_get()
    virtio_net: fix xdp_rxq_info bug after suspend/resume
    igb: Make DMA faster when CPU is active on the PCIe link
    afs: Fix dynamic root getattr
    MIPS: Remove repetitive increase irq_err_count
    x86/xen: Remove undefined behavior in setup_features()
    erspan: do not assume transport header is always set
  * net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms
      net/sched/sch_netem.c
  * bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers
      drivers/net/bonding/bond_main.c
    USB: serial: option: add Quectel RM500K module support
    USB: serial: option: add Quectel EM05-G modem
    USB: serial: option: add Telit LE910Cx 0x1250 composition
  * random: quiet urandom warning ratelimit suppression message
      drivers/char/random.c
      include/linux/ratelimit.h
    dm era: commit metadata in postsuspend after worker stops
  * ata: libata: add qc->flags in ata_qc_complete_template tracepoint
      include/trace/events/libata.h
    ALSA: hda/realtek: Add quirk for Clevo PD70PNT
    ALSA: hda/conexant: Fix missing beep setup
    ALSA: hda/via: Fix missing beep setup
  * random: schedule mix_interrupt_randomness() less often
      drivers/char/random.c
    vt: drop old FONT ioctls
Linux 4.19.249
  * Revert "hwmon: Make chip parameter for with_info API mandatory"
      drivers/hwmon/hwmon.c
  * tcp: drop the hash_32() part from the index calculation
      net/ipv4/inet_hashtables.c
  * tcp: increase source port perturb table to 2^16
      net/ipv4/inet_hashtables.c
  * tcp: dynamically allocate the perturb table used by source ports
      net/ipv4/inet_hashtables.c
  * tcp: add small random increments to the source port
      net/ipv4/inet_hashtables.c
  * tcp: use different parts of the port_offset for index and offset
      net/ipv4/inet_hashtables.c
  * tcp: add some entropy in __inet_hash_connect()
      net/ipv4/inet_hashtables.c
    xprtrdma: fix incorrect header size calculations
  * usb: gadget: u_ether: fix regression in setting fixed MAC address
      drivers/usb/gadget/function/u_ether.c
    s390/mm: use non-quiescing sske for KVM switch to keyed guest
    powerpc/mm: Switch obsolete dssall to .long
    RISC-V: fix barrier() use in <vdso/processor.h>
    net: openvswitch: fix leak of nested actions
    net: openvswitch: fix misuse of the cached connection on tuple changes
    virtio-pci: Remove wrong address verification in vp_del_vqs()
  * ext4: add reserved GDT blocks check
      fs/ext4/resize.c
  * ext4: make variable "count" signed
      fs/ext4/namei.c
  * ext4: fix bug_on ext4_mb_use_inode_pa
      fs/ext4/mballoc.c
    serial: 8250: Store to lsr_save_flags after lsr read
    usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe
    usb: dwc2: Fix memory leak in dwc2_hcd_init
    USB: serial: io_ti: add Agilent E5805A support
    USB: serial: option: add support for Cinterion MV31 with new baseline
    comedi: vmk80xx: fix expression for tx buffer size
  * irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions
      drivers/irqchip/irq-gic-v3.c
    irqchip/gic/realview: Fix refcount leak in realview_gic_of_init
    faddr2line: Fix overlapping text section failures, the sequel
    certs/blacklist_hashes.c: fix const confusion in certs blacklist
    arm64: ftrace: fix branch range checks
    net: bgmac: Fix an erroneous kfree() in bgmac_remove()
    mlxsw: spectrum_cnt: Reorder counter pools
    misc: atmel-ssc: Fix IRQ check in ssc_probe
    tty: goldfish: Fix free_irq() on remove
    i40e: Fix call trace in setup_tx_descriptors
    i40e: Fix adding ADQ filter to TC0
    pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE
  * random: credit cpu and bootloader seeds by default
      drivers/char/Kconfig
    net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface netdev[napi]_alloc_frag
  * ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg
      net/l2tp/l2tp_ip6.c
    nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred
    virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed
    scsi: pmcraid: Fix missing resource cleanup in error case
    scsi: ipr: Fix missing/incorrect resource cleanup in error case
    scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology
    scsi: vmw_pvscsi: Expand vcpuHint to 16 bits
  * ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put()
      sound/soc/codecs/wm_adsp.c
    ASoC: es8328: Fix event generation for deemphasis control
    ASoC: wm8962: Fix suspend while playing music
    ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
    ASoC: cs42l56: Correct typo in minimum level for SX volume controls
    ASoC: cs42l52: Correct TLV for Bypass Volume
    ASoC: cs53l30: Correct number of volume levels on SX controls
    ASoC: cs42l52: Fix TLV scales for mixer controls
    powerpc/kasan: Silence KASAN warnings in __get_wchan()
  * random: account for arch randomness in bits
      drivers/char/random.c
  * random: mark bootloader randomness code as __init
      drivers/char/random.c
      include/linux/random.h
  * random: avoid checking crng_ready() twice in random_init()
      drivers/char/random.c
  * crypto: drbg - make reseeding from get_random_bytes() synchronous
      crypto/drbg.c
      drivers/char/random.c
      include/crypto/drbg.h
  * crypto: drbg - always try to free Jitter RNG instance
      crypto/drbg.c
  * crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed()
      crypto/drbg.c
  * crypto: drbg - track whether DRBG was seeded with !rng_is_initialized()
      crypto/drbg.c
      include/crypto/drbg.h
  * crypto: drbg - prepare for more fine-grained tracking of seeding state
      crypto/drbg.c
      include/crypto/drbg.h
  * crypto: drbg - always seeded with SP800-90B compliant noise source
      crypto/drbg.c
      include/crypto/drbg.h
  * crypto: drbg - add FIPS 140-2 CTRNG for noise source
      crypto/drbg.c
      include/crypto/drbg.h
  * Revert "random: use static branch for crng_ready()"
      drivers/char/random.c
  * random: check for signals after page of pool writes
      drivers/char/random.c
  * random: wire up fops->splice_{read,write}_iter()
      drivers/char/random.c
  * random: convert to using fops->write_iter()
      drivers/char/random.c
  * random: move randomize_page() into mm where it belongs
      drivers/char/random.c
      include/linux/mm.h
      include/linux/random.h
      mm/util.c
  * random: move initialization functions out of hot pages
      drivers/char/random.c
  * random: use proper return types on get_random_{int,long}_wait()
      drivers/char/random.c
      include/linux/random.h
  * random: remove extern from functions in header
      include/linux/random.h
  * random: use static branch for crng_ready()
      drivers/char/random.c
  * random: credit architectural init the exact amount
      drivers/char/random.c
  * random: handle latent entropy and command line from random_init()
      drivers/char/random.c
      include/linux/random.h
      init/main.c
  * random: use proper jiffies comparison macro
      drivers/char/random.c
  * random: remove ratelimiting for in-kernel unseeded randomness
      drivers/char/random.c
      lib/Kconfig.debug
  * random: avoid initializing twice in credit race
      drivers/char/random.c
  * random: use symbolic constants for crng_init states
      drivers/char/random.c
  * siphash: use one source of truth for siphash permutations
      drivers/char/random.c
      include/linux/prandom.h
      include/linux/siphash.h
      lib/siphash.c
  * random: help compiler out with fast_mix() by using simpler arguments
      drivers/char/random.c
  * random: do not use input pool from hard IRQs
      drivers/char/random.c
  * random: order timer entropy functions below interrupt functions
      drivers/char/random.c
  * random: do not pretend to handle premature next security model
      drivers/char/random.c
  * random: do not use batches when !crng_ready()
      drivers/char/random.c
  * random: insist on random_get_entropy() existing in order to simplify
      drivers/char/random.c
    xtensa: use fallback for random_get_entropy() instead of zero
    sparc: use fallback for random_get_entropy() instead of zero
    um: use fallback for random_get_entropy() instead of zero
    x86/tsc: Use fallback for random_get_entropy() instead of zero
    nios2: use fallback for random_get_entropy() instead of zero
    arm: use fallback for random_get_entropy() instead of zero
    mips: use fallback for random_get_entropy() instead of just c0 random
    m68k: use fallback for random_get_entropy() instead of zero
  * timekeeping: Add raw clock fallback for random_get_entropy()
      include/linux/timex.h
      kernel/time/timekeeping.c
    powerpc: define get_cycles macro for arch-override
    alpha: define get_cycles macro for arch-override
    parisc: define get_cycles macro for arch-override
    s390: define get_cycles macro for arch-override
    ia64: define get_cycles macro for arch-override
  * init: call time_init() before rand_initialize()
      init/main.c
    random: fix sysctl documentation nits
  * random: document crng_fast_key_erasure() destination possibility
      drivers/char/random.c
  * random: make random_get_entropy() return an unsigned long
      drivers/char/random.c
      include/linux/timex.h
  * random: check for signals every PAGE_SIZE chunk of /dev/[u]random
      drivers/char/random.c
  * random: check for signal_pending() outside of need_resched() check
      drivers/char/random.c
  * random: do not allow user to keep crng key around on stack
      drivers/char/random.c
  * random: do not split fast init input in add_hwgenerator_randomness()
      drivers/char/random.c
  * random: mix build-time latent entropy into pool at init
      drivers/char/random.c
  * random: re-add removed comment about get_random_{u32,u64} reseeding
      drivers/char/random.c
  * random: treat bootloader trust toggle the same way as cpu trust toggle
      drivers/char/Kconfig
      drivers/char/random.c
  * random: skip fast_init if hwrng provides large chunk of entropy
      drivers/char/random.c
  * random: check for signal and try earlier when generating entropy
      drivers/char/random.c
  * random: reseed more often immediately after booting
      drivers/char/random.c
  * random: make consistent usage of crng_ready()
      drivers/char/random.c
  * random: use SipHash as interrupt entropy accumulator
      drivers/char/random.c
  * random: replace custom notifier chain with standard one
      crypto/drbg.c
      drivers/char/random.c
      include/crypto/drbg.h
      include/linux/random.h
      lib/random32.c
      lib/vsprintf.c
  * random: don't let 644 read-only sysctls be written to
      drivers/char/random.c
  * random: give sysctl_random_min_urandom_seed a more sensible value
      drivers/char/random.c
  * random: do crng pre-init loading in worker rather than irq
      drivers/char/random.c
  * random: unify cycles_t and jiffies usage and types
      drivers/char/random.c
  * random: cleanup UUID handling
      drivers/char/random.c
  * random: only wake up writers after zap if threshold was passed
      drivers/char/random.c
  * random: round-robin registers as ulong, not u32
      drivers/char/random.c
  * random: clear fast pool, crng, and batches in cpuhp bring up
      drivers/char/random.c
      include/linux/cpuhotplug.h
      include/linux/random.h
      kernel/cpu.c
  * random: pull add_hwgenerator_randomness() declaration into random.h
      drivers/char/hw_random/core.c
      include/linux/hw_random.h
      include/linux/random.h
  * random: check for crng_init == 0 in add_device_randomness()
      drivers/char/random.c
  * random: unify early init crng load accounting
      drivers/char/random.c
  * random: do not take pool spinlock at boot
      drivers/char/random.c
  * random: defer fast pool mixing to worker
      drivers/char/random.c
  * random: rewrite header introductory comment
      drivers/char/random.c
  * random: group sysctl functions
      drivers/char/random.c
  * random: group userspace read/write functions
      drivers/char/random.c
  * random: group entropy collection functions
      drivers/char/random.c
  * random: group entropy extraction functions
      drivers/char/random.c
  * random: group initialization wait functions
      drivers/char/random.c
  * random: remove whitespace and reorder includes
      drivers/char/random.c
  * random: remove useless header comment
      include/linux/random.h
  * random: introduce drain_entropy() helper to declutter crng_reseed()
      drivers/char/random.c
  * random: deobfuscate irq u32/u64 contributions
      drivers/char/random.c
  * random: add proper SPDX header
      drivers/char/random.c
  * random: remove unused tracepoints
      drivers/char/random.c
      lib/random32.c
  * random: remove ifdef'd out interrupt bench
      drivers/char/random.c
  * random: tie batched entropy generation to base_crng generation
      drivers/char/random.c
  * random: zero buffer after reading entropy from userspace
      drivers/char/random.c
  * random: remove outdated INT_MAX >> 6 check in urandom_read()
      drivers/char/random.c
  * random: use hash function for crng_slow_load()
      drivers/char/random.c
      include/linux/hw_random.h
      include/linux/random.h
  * random: absorb fast pool into input pool after fast load
      drivers/char/random.c
  * random: do not xor RDRAND when writing into /dev/random
      drivers/char/random.c
  * random: ensure early RDSEED goes through mixer on init
      drivers/char/random.c
  * random: inline leaves of rand_initialize()
      drivers/char/random.c
  * random: use RDSEED instead of RDRAND in entropy extraction
      drivers/char/random.c
  * random: fix locking in crng_fast_load()
      drivers/char/random.c
  * random: remove batched entropy locking
      drivers/char/random.c
  * random: remove use_input_pool parameter from crng_reseed()
      drivers/char/random.c
  * random: make credit_entropy_bits() always safe
      drivers/char/random.c
  * random: always wake up entropy writers after extraction
      drivers/char/random.c
  * random: use linear min-entropy accumulation crediting
      drivers/char/random.c
  * random: simplify entropy debiting
      drivers/char/random.c
  * random: use computational hash for entropy extraction
      drivers/char/random.c
  * random: only call crng_finalize_init() for primary_crng
      drivers/char/random.c
  * random: access primary_pool directly rather than through pointer
      drivers/char/random.c
  * random: continually use hwgenerator randomness
      drivers/char/random.c
  * random: simplify arithmetic function flow in account()
      drivers/char/random.c
  * random: access input_pool_data directly rather than through pointer
      drivers/char/random.c
  * random: cleanup fractional entropy shift constants
      drivers/char/random.c
  * random: prepend remaining pool constants with POOL_
      drivers/char/random.c
  * random: de-duplicate INPUT_POOL constants
      drivers/char/random.c
  * random: remove unused OUTPUT_POOL constants
      drivers/char/random.c
  * random: rather than entropy_store abstraction, use global
      drivers/char/random.c
  * random: remove unused extract_entropy() reserved argument
      drivers/char/random.c
  * random: remove incomplete last_data logic
      drivers/char/random.c
  * random: cleanup integer types
      drivers/char/random.c
  * random: cleanup poolinfo abstraction
      drivers/char/random.c
  * random: fix typo in comments
      drivers/char/random.c
  * random: don't reset crng_init_cnt on urandom_read()
      drivers/char/random.c
  * random: avoid superfluous call to RDRAND in CRNG extraction
      drivers/char/random.c
  * random: early initialization of ChaCha constants
      drivers/char/random.c
  * random: initialize ChaCha20 constants with correct endianness
      drivers/char/random.c
  * random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs
      drivers/char/random.c
  * random: harmonize "crng init done" messages
      drivers/char/random.c
  * random: mix bootloader randomness into pool
      drivers/char/random.c
  * random: do not re-init if crng_reseed completes before primary init
      drivers/char/random.c
  * random: do not sign extend bytes for rotation when mixing
      drivers/char/random.c
  * random: use BLAKE2s instead of SHA1 in extraction
      drivers/char/random.c
  * random: remove unused irq_flags argument from add_interrupt_randomness()
      drivers/char/random.c
      include/linux/random.h
      kernel/irq/handle.c
  * random: document add_hwgenerator_randomness() with other input functions
      drivers/char/random.c
  * crypto: blake2s - adjust include guard naming
      include/crypto/blake2s.h
      include/crypto/internal/blake2s.h
  * crypto: blake2s - include <linux/bug.h> instead of <asm/bug.h>
      include/crypto/blake2s.h
    MAINTAINERS: co-maintain random.c
  * random: remove dead code left over from blocking pool
      drivers/char/random.c
  * random: avoid arch_get_random_seed_long() when collecting IRQ randomness
      drivers/char/random.c
  * random: add arch_get_random_*long_early()
      drivers/char/random.c
      include/linux/random.h
    powerpc: Use bool in archrandom.h
  * linux/random.h: Mark CONFIG_ARCH_RANDOM functions __must_check
      include/linux/random.h
  * linux/random.h: Use false with bool
      include/linux/random.h
  * linux/random.h: Remove arch_has_random, arch_has_random_seed
      include/linux/random.h
    s390: Remove arch_has_random, arch_has_random_seed
    powerpc: Remove arch_has_random, arch_has_random_seed
    x86: Remove arch_has_random, arch_has_random_seed
  * random: avoid warnings for !CONFIG_NUMA builds
      drivers/char/random.c
  * random: split primary/secondary crng init paths
      drivers/char/random.c
  * random: remove some dead code of poolinfo
      drivers/char/random.c
  * random: fix typo in add_timer_randomness()
      drivers/char/random.c
  * random: Add and use pr_fmt()
      drivers/char/random.c
  * random: convert to ENTROPY_BITS for better code readability
      drivers/char/random.c
  * random: remove unnecessary unlikely()
      drivers/char/random.c
  * random: remove kernel.random.read_wakeup_threshold
      drivers/char/random.c
  * random: delete code to pull data into pools
      drivers/char/random.c
  * random: remove the blocking pool
      drivers/char/random.c
  * random: fix crash on multiple early calls to add_bootloader_randomness()
      drivers/char/random.c
  * char/random: silence a lockdep splat with printk()
      drivers/char/random.c
  * random: make /dev/random be almost like /dev/urandom
      drivers/char/random.c
  * random: ignore GRND_RANDOM in getentropy(2)
      drivers/char/random.c
      include/uapi/linux/random.h
  * random: add GRND_INSECURE to return best-effort non-cryptographic bytes
      drivers/char/random.c
      include/uapi/linux/random.h
  * random: Add a urandom_read_nowait() for random APIs that don't warn
      drivers/char/random.c
  * random: Don't wake crng_init_wait when crng_init == 1
      drivers/char/random.c
  * lib/crypto: sha1: re-roll loops to reduce code size
      lib/sha1.c
  * lib/crypto: blake2s: move hmac construction into wireguard
      include/crypto/blake2s.h
      lib/crypto/blake2s.c
  * crypto: blake2s - generic C library implementation and selftest
      include/crypto/blake2s.h
      include/crypto/internal/blake2s.h
      lib/Makefile
      lib/crypto/Makefile
      lib/crypto/blake2s-generic.c
      lib/crypto/blake2s.c
  * Revert "hwrng: core - Freeze khwrng thread during suspend"
      drivers/char/random.c
  * char/random: Add a newline at the end of the file
      drivers/char/random.c
  * random: Use wait_event_freezable() in add_hwgenerator_randomness()
      drivers/char/random.c
  * fdt: add support for rng-seed
      drivers/char/Kconfig
      drivers/char/random.c
      drivers/of/fdt.c
      include/linux/random.h
  * random: Support freezable kthreads in add_hwgenerator_randomness()
      drivers/char/random.c
  * random: fix soft lockup when trying to read from an uninitialized blocking pool
      drivers/char/random.c
  * latent_entropy: avoid build error when plugin cflags are not set
      include/linux/random.h
  * random: document get_random_int() family
      drivers/char/random.c
  * random: move rand_initialize() earlier
      drivers/char/random.c
      include/linux/random.h
      init/main.c
  * random: only read from /dev/random after its pool has received 128 bits
      drivers/char/random.c
  * drivers/char/random.c: make primary_crng static
      drivers/char/random.c
  * drivers/char/random.c: remove unused stuct poolinfo::poolbits
      drivers/char/random.c
  * drivers/char/random.c: constify poolinfo_table
      drivers/char/random.c
    9p: missing chunk of "fs/9p: Don't update file type when updating file attributes"

Bug: 240880948
Change-Id: I46de87f5e1ff2146dbc394d88275d609ee871bc1
Signed-off-by: Lucas Wei <lucaswei@google.com>
2022-08-09 10:46:08 +08:00
Lucas Wei
9861f5c7bf Merge android-4.19-stable (4.19.248) into android-msm-pixel-4.19-lts
Merge 4.19.248 into android-4.19-stable
  * UPSTREAM: ext4: verify dir block before splitting it
      fs/ext4/namei.c
  * UPSTREAM: ext4: fix use-after-free in ext4_rename_dir_prepare
      fs/ext4/namei.c
  * BACKPORT: ext4: Only advertise encrypted_casefold when encryption and unicode are enabled
      fs/ext4/sysfs.c
  * BACKPORT: ext4: fix no-key deletion for encrypt+casefold
      fs/ext4/namei.c
  * BACKPORT: ext4: optimize match for casefolded encrypted dirs
      fs/ext4/ext4.h
      fs/ext4/namei.c
  * BACKPORT: ext4: handle casefolding with encryption
      fs/ext4/dir.c
      fs/ext4/ext4.h
      fs/ext4/hash.c
      fs/ext4/inline.c
      fs/ext4/namei.c
      fs/ext4/super.c
      fs/ext4/sysfs.c
  * Revert "ANDROID: ext4: Handle casefolding with encryption"
      fs/ext4/dir.c
      fs/ext4/ext4.h
      fs/ext4/hash.c
      fs/ext4/ialloc.c
      fs/ext4/inline.c
      fs/ext4/namei.c
      fs/ext4/super.c
  * Revert "ANDROID: ext4: Optimize match for casefolded encrypted dirs"
      fs/ext4/ext4.h
      fs/ext4/namei.c
  * UPSTREAM: Revert "hwmon: Make chip parameter for with_info API mandatory"
      drivers/hwmon/hwmon.c
  * ANDROID: extcon: fix allocation for edev->bnh
      drivers/extcon/extcon.c
  * Revert "drm: fix EDID struct for old ARM OABI format"
      include/drm/drm_edid.h
  * Revert "mailbox: forward the hrtimer if not queued and under a lock"
      drivers/mailbox/mailbox.c
      include/linux/mailbox_controller.h
  * Revert "ALSA: jack: Access input_dev under mutex"
      include/sound/jack.h
      sound/core/jack.c
  * Revert "ext4: fix use-after-free in ext4_rename_dir_prepare"
      fs/ext4/namei.c
  * Revert "ext4: verify dir block before splitting it"
      fs/ext4/namei.c
Linux 4.19.248
    x86/speculation/mmio: Print SMT warning
    KVM: x86/speculation: Disable Fill buffer clear within guests
    x86/speculation/mmio: Reuse SRBDS mitigation for SBDS
    x86/speculation/srbds: Update SRBDS mitigation selection
  * x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data
      drivers/base/cpu.c
      include/linux/cpu.h
    x86/speculation/mmio: Enable CPU Fill buffer clearing on idle
    x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations
    x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data
    x86/speculation: Add a common function for MD_CLEAR mitigation update
    x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug
    Documentation: Add documentation for Processor MMIO Stale Data
    x86/cpu: Add another Alder Lake CPU to the Intel family
    x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family
    x86/cpu: Add Jasper Lake to Intel family
  * cpu/speculation: Add prototype for cpu_show_srbds()
      include/linux/cpu.h
    x86/cpu: Add Elkhart Lake to Intel family
    Merge 4.19.247 into android-4.19-stable
Linux 4.19.247
  * tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd
      net/ipv4/tcp_input.c
  * mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N
      include/linux/mtd/cfi.h
    mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write
    md/raid0: Ignore RAID0 layout if the second zone has only one device
    powerpc/32: Fix overread/overwrite of thread_struct via ptrace
    Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag
    ixgbe: fix unexpected VLAN Rx in promisc mode on VF
    ixgbe: fix bcast packets Rx on VF after promisc removal
    nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling
    nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION
    mmc: block: Fix CQE recovery reset success
    ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files
    cifs: return errors during session setup during reconnects
    ALSA: hda/conexant - Fix loopback issue with CX20632
    vringh: Fix loop descriptors check in the indirect cases
  * nodemask: Fix return values to be unsigned
      include/linux/nodemask.h
      lib/nodemask.c
    nbd: fix io hung while disconnecting device
    nbd: fix race between nbd_alloc_config() and module removal
    nbd: call genl_unregister_family() first in nbd_cleanup()
  * modpost: fix undefined behavior of is_arm_mapping_symbol()
      scripts/mod/modpost.c
    drm/radeon: fix a possible null pointer dereference
    ceph: allow ceph.dir.rctime xattr to be updatable
  * Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process"
      net/key/af_key.c
    md: protect md_unregister_thread from reentrancy
  * kernfs: Separate kernfs_pr_cont_buf and rename_lock.
      fs/kernfs/dir.c
    serial: msm_serial: disable interrupts in __msm_console_write()
    staging: rtl8712: fix uninit-value in r871xu_drv_init()
    clocksource/drivers/sp804: Avoid error on multiple instances
  * extcon: Modify extcon device to be created after driver data is set
      drivers/extcon/extcon.c
    misc: rtsx: set NULL intfdata when probe fails
    usb: dwc2: gadget: don't reset gadget's driver->bus
  * USB: hcd-pci: Fully suspend across freeze/thaw cycle
      drivers/usb/core/hcd-pci.c
    drivers: usb: host: Fix deadlock in oxu_bus_suspend()
    drivers: tty: serial: Fix deadlock in sa1100_set_termios()
    USB: host: isp116x: check return value after calling platform_get_resource()
    drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()
    drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop()
    tty: Fix a possible resource leak in icom_probe
    tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()
    lkdtm/usercopy: Expand size of "out of frame" object
    iio: dummy: iio_simple_dummy: check the return value of kstrdup()
    drm: imx: fix compiler warning with gcc-12
    net: altera: Fix refcount leak in altera_tse_mdio_create
    ip_gre: test csum_start instead of transport header
    net/mlx5: Rearm the FW tracer after each tracer event
    net: ipv6: unexport __init-annotated seg6_hmac_init()
  * net: xfrm: unexport __init-annotated xfrm4_protocol_init()
      net/ipv4/xfrm4_protocol.c
  * net: mdio: unexport __init-annotated mdio_bus_init()
      drivers/net/phy/mdio_bus.c
    SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer()
    net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure
  * bpf, arm64: Clear prog->jited_len along prog->jited
      arch/arm64/net/bpf_jit_comp.c
  * af_unix: Fix a data-race in unix_dgram_peer_wake_me().
      net/unix/af_unix.c
    ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe
    xprtrdma: treat all calls not a bcall when bc_serv is NULL
    video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove()
    NFSv4: Don't hold the layoutget locks across multiple RPC calls
    m68knommu: fix undefined reference to `_init_sp'
    m68knommu: set ZERO_PAGE() to the allocated zeroed page
    i2c: cadence: Increase timeout per message if necessary
  * tracing: Avoid adding tracer option before update_tracer_options
      kernel/trace/trace.c
  * tracing: Fix sleeping function called from invalid context on RT kernel
      kernel/trace/trace.c
    mips: cpc: Fix refcount leak in mips_cpc_default_phys_base
    perf c2c: Fix sorting in percent_rmt_hitm_cmp()
  * tipc: check attribute length for bearer name
      net/tipc/bearer.c
    afs: Fix infinite loop found by xfstest generic/676
  * tcp: tcp_rtx_synack() can be called from process context
      net/ipv4/tcp_output.c
    net/mlx5e: Update netdev features after changing XDP state
    nfp: only report pause frame configuration for physical device
    ubi: ubi_create_volume: Fix use-after-free when volume creation failed
    jffs2: fix memory leak in jffs2_do_fill_super
  * modpost: fix removing numeric suffixes
      scripts/mod/modpost.c
    net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register
    net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()
    s390/crypto: fix scatterwalk_unmap() callers in AES-GCM
    clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value
    bus: ti-sysc: Fix warnings for unbind for serial
    firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle
    serial: stm32-usart: Correct CSIZE, bits, and parity
    serial: st-asc: Sanitize CSIZE and correct PARENB for CS7
    serial: sh-sci: Don't allow CS5-6
    serial: txx9: Don't allow CS5-6
    serial: digicolor-usart: Don't allow CS5-6
    serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485
    serial: meson: acquire port->lock in startup()
    rtc: mt6397: check return value after calling platform_get_resource()
    clocksource/drivers/riscv: Events are stopped during CPU suspend
    soc: rockchip: Fix refcount leak in rockchip_grf_init
    coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier
    rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails
    iio: adc: sc27xx: fix read big scale voltage not right
    usb: dwc3: pci: Fix pm_runtime_get_sync() error checking
    rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value
    pwm: lp3943: Fix duty calculation in case period was clamped
    usb: musb: Fix missing of_node_put() in omap2430_probe
    USB: storage: karma: fix rio_karma_init return
    usb: usbip: add missing device lock on tweak configuration cmd
    usb: usbip: fix a refcount leak in stub_probe()
    tty: goldfish: Use tty_port_destroy() to destroy port
    staging: greybus: codecs: fix type confusion of list iterator variable
    pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards
    md: bcache: check the return value of kzalloc() in detached_dev_do_request()
    MIPS: IP27: Remove incorrect `cpu_has_fpu' override
    RDMA/rxe: Generate a completion for unsupported/invalid opcode
    phy: qcom-qmp: fix reset-controller leak on probe errors
    blk-iolatency: Fix inflight count imbalances and IO hangs on offline
    dt-bindings: gpio: altera: correct interrupt-cells
    docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0
    phy: qcom-qmp: fix struct clk leak on probe errors
    arm64: dts: qcom: ipq8074: fix the sleep clock frequency
    gma500: fix an incorrect NULL check on list iterator
    carl9170: tx: fix an incorrect use of list iterator
  * ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control
      sound/soc/codecs/rt5514.c
    rtl818x: Prevent using not initialized queues
    hugetlb: fix huge_pmd_unshare address update
  * nodemask.h: fix compilation error with GCC12
      include/linux/nodemask.h
    iommu/msm: Fix an incorrect NULL check on list iterator
    um: Fix out-of-bounds read in LDT setup
    um: chan_user: Fix winch_tramp() return value
    mac80211: upgrade passive scan to active scan on DFS channels after beacon rx
    irqchip: irq-xtensa-mx: fix initial IRQ affinity
    irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x
    RDMA/hfi1: Fix potential integer multiplication overflow errors
    media: coda: Add more H264 levels for CODA960
    media: coda: Fix reported H264 profile
    md: fix an incorrect NULL check in md_reload_sb
    md: fix an incorrect NULL check in does_sb_need_changing
    drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX
    drm/nouveau/clk: Fix an incorrect NULL check on list iterator
    drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.
  * scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled
      drivers/scsi/ufs/ufs-qcom.c
    scsi: dc395x: Fix a missing check on list iterator
    ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock
    dlm: fix missing lkb refcount handling
    dlm: fix plock invalid read
    PCI: qcom: Fix unbalanced PHY init on probe errors
    PCI: qcom: Fix runtime PM imbalance on probe errors
  * PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299
      drivers/pci/pci.c
    tracing: Fix potential double free in create_var_ref()
  * ext4: avoid cycles in directory h-tree
      fs/ext4/namei.c
  * ext4: verify dir block before splitting it
      fs/ext4/namei.c
  * ext4: fix bug_on in ext4_writepages
      fs/ext4/inline.c
  * ext4: fix use-after-free in ext4_rename_dir_prepare
      fs/ext4/namei.c
    netfilter: nf_tables: disallow non-stateful expression in sets earlier
  * fs-writeback: writeback_sb_inodes:Recalculate 'wrote' according skipped pages
      fs/fs-writeback.c
    iwlwifi: mvm: fix assert 1F04 upon reconfig
    wifi: mac80211: fix use-after-free in chanctx code
  * f2fs: fix deadloop in foreground GC
      fs/f2fs/segment.h
    perf jevents: Fix event syntax error caused by ExtSel
    perf c2c: Use stdio interface if slang is not supported
    iommu/amd: Increase timeout waiting for GA log enablement
    dmaengine: stm32-mdma: remove GISR1 register
    video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup
    NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout
    i2c: at91: Initialize dma_buf in at91_twi_xfer()
    i2c: at91: use dma safe buffers
    iommu/mediatek: Add list_del in mtk_iommu_remove
  * f2fs: fix dereference of stale list iterator after loop body
      fs/f2fs/segment.c
    RDMA/hfi1: Prevent use of lock before it is initialized
  * mailbox: forward the hrtimer if not queued and under a lock
      drivers/mailbox/mailbox.c
      include/linux/mailbox_controller.h
    powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup
    powerpc/perf: Fix the threshold compare group constraint for power9
    Input: sparcspkr - fix refcount leak in bbc_beep_probe
  * tty: fix deadlock caused by calling printk() under tty_port->lock
      drivers/tty/tty_buffer.c
  * proc: fix dentry/inode overinstantiating under /proc/${pid}/net
      fs/proc/generic.c
      fs/proc/proc_net.c
    powerpc/4xx/cpm: Fix return value of __setup() handler
    powerpc/idle: Fix return value of __setup() handler
    powerpc/8xx: export 'cpm_setbrg' for modules
    dax: fix cache flush on PMD-mapped pages
    drivers/base/node.c: fix compaction sysfs file leak
    pinctrl: mvebu: Fix irq_of_parse_and_map() return value
    firmware: arm_scmi: Fix list protocols enumeration in the base protocol
  * scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac()
      include/scsi/libfcoe.h
    mfd: ipaq-micro: Fix error check return value of platform_get_irq()
    crypto: marvell/cesa - ECB does not IV
    ARM: dts: bcm2835-rpi-b: Fix GPIO line names
    ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT
    PCI: rockchip: Fix find_first_zero_bit() limit
    PCI: cadence: Fix find_first_zero_bit() limit
    soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc
  * soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc
      drivers/soc/qcom/smp2p.c
    rxrpc: Don't try to resend the request if we're receiving the reply
    rxrpc: Fix listen() setting the bar too high for the prealloc rings
    NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx
    ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition()
    drm: msm: fix possible memory leak in mdp5_crtc_cursor_set()
  * ext4: reject the 'commit' option on ext2 filesystems
      fs/ext4/super.c
  * sctp: read sk->sk_bound_dev_if once in sctp_rcv()
      net/sctp/input.c
    m68k: math-emu: Fix dependencies of math emulation support
  * Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout
      net/bluetooth/sco.c
    media: vsp1: Fix offset calculation for plane cropping
    media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
    media: exynos4-is: Change clk_disable to clk_disable_unprepare
    media: st-delta: Fix PM disable depth imbalance in delta_probe
    scripts/faddr2line: Fix overlapping text section failures
    regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt
    ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe
    perf/amd/ibs: Use interrupt regs ip for stack unwinding
    media: uvcvideo: Fix missing check to determine if element is found in list
    drm/msm: return an error pointer in msm_gem_prime_get_sg_table()
    drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected
    drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected
    x86/mm: Cleanup the control_va_addr_alignment() __setup handler
    irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value
    x86: Fix return value of __setup handlers
    drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()
    drm/msm/hdmi: check return value after calling platform_get_resource_byname()
    drm/msm/dsi: fix error checks and return values for DSI xmit functions
    drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume
  * x86/speculation: Add missing prototype for unpriv_ebpf_notify()
      include/linux/bpf.h
    x86/pm: Fix false positive kmemleak report in msr_build_context()
  * scsi: ufs: core: Exclude UECxx from SFR dump list
      drivers/scsi/ufs/ufshcd.c
    of: overlay: do not break notify on NOTIFY_{OK|STOP}
  * fsnotify: fix wrong lockdep annotations
      fs/notify/mark.c
  * inotify: show inotify mask flags in proc fdinfo
      fs/notify/fdinfo.c
      fs/notify/inotify/inotify.h
      fs/notify/inotify/inotify_user.c
    ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix
    spi: img-spfi: Fix pm_runtime_get_sync() error checking
    HID: elan: Fix potential double free in elan_input_configured
    HID: hid-led: fix maximum brightness for Dream Cheeky
  * efi: Add missing prototype for efi_capsule_setup_info
      include/linux/efi.h
    NFC: NULL out the dev->rfkill to prevent UAF
    spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout
  * nl80211: show SSID for P2P_GO interfaces
      net/wireless/nl80211.c
    drm/vc4: txp: Force alpha to be 0xff if it's disabled
    drm/vc4: txp: Don't set TXP_VSTART_AT_EOF
    drm/mediatek: Fix mtk_cec_mask()
    x86/delay: Fix the wrong asm constraint in delay_loop()
    ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe
    ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe
    drm/bridge: adv7511: clean up CEC adapter when probe fails
  * drm/edid: fix invalid EDID extension block filtering
      drivers/gpu/drm/drm_edid.c
    ath9k: fix ar9003_get_eepmisc
  * drm: fix EDID struct for old ARM OABI format
      include/drm/drm_edid.h
    RDMA/hfi1: Prevent panic when SDMA is disabled
  * macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled
      drivers/macintosh/Kconfig
      drivers/macintosh/Makefile
    powerpc/xics: fix refcount leak in icp_opal_init()
  * tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate
      include/trace/events/vmscan.h
  * PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()
      drivers/pci/pci.c
    ARM: hisi: Add missing of_node_put after of_find_compatible_node
    ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM
    ARM: versatile: Add missing of_node_put in dcscb_init
  * fat: add ratelimit to fat*_ent_bread()
      fs/fat/fatent.c
    ARM: OMAP1: clock: Fix UART rate reporting algorithm
    fs: jfs: fix possible NULL pointer dereference in dbFree()
    PM / devfreq: rk3399_dmc: Disable edev on remove()
    ARM: dts: ox820: align interrupt controller node name with dtschema
  * eth: tg3: silence the GCC 12 array-bounds warning
      drivers/net/ethernet/broadcom/Makefile
    rxrpc: Return an error to sendmsg if call failed
  * hwmon: Make chip parameter for with_info API mandatory
      drivers/hwmon/hwmon.c
    media: exynos4-is: Fix compile warning
    net: phy: micrel: Allow probing without .driver_data
    ASoC: rt5645: Fix errorenous cleanup order
    nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags
    openrisc: start CPU timer early in boot
    media: cec-adap.c: fix is_configuring state
    rtlwifi: Use pr_warn instead of WARN_ONCE
    ipmi:ssif: Check for NULL msg when handling events and messages
    dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC
    s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES
    ASoC: tscs454: Add endianness flag in snd_soc_component_driver
    mlxsw: spectrum_dcb: Do not warn about priority changes
  * ASoC: dapm: Don't fold register value changes into notifications
      sound/soc/soc-dapm.c
  * ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL
      net/ipv6/addrconf.c
    drm/amd/pm: fix the compile warning
  * drm/plane: Move range check for format_count earlier
      drivers/gpu/drm/drm_plane.c
    scsi: megaraid: Fix error check return value of register_chrdev()
    md/bitmap: don't set sb values if can't pass sanity check
    media: cx25821: Fix the warning when removing the module
    media: pci: cx23885: Fix the error handling in cx23885_initdev()
    media: venus: hfi: avoid null dereference in deinit
    ath9k: fix QCA9561 PA bias level
    drm/amd/pm: fix double free in si_parse_power_table()
  * ALSA: jack: Access input_dev under mutex
      include/sound/jack.h
      sound/core/jack.c
    ACPICA: Avoid cache flush inside virtual machines
    fbcon: Consistently protect deferred_takeover with console_lock()
  * ipv6: fix locking issues with loops over idev->addr_list
      include/net/if_inet6.h
      net/ipv6/addrconf.c
    ipw2x00: Fix potential NULL dereference in libipw_xmit()
    b43: Fix assigning negative value to unsigned variable
    b43legacy: Fix assigning negative value to unsigned variable
    mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue
    drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes
    btrfs: repair super block num_devices automatically
    btrfs: add "0x" prefix for unsupported optional features
  * ptrace: Reimplement PTRACE_KILL by always sending SIGKILL
      kernel/ptrace.c
  * ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP
      include/linux/ptrace.h
  * USB: new quirk for Dell Gen 2 devices
      drivers/usb/core/quirks.c
    USB: serial: option: add Quectel BG95 modem
    ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS
    binfmt_flat: do not stop relocating GOT entries prematurely on riscv
  * BACKPORT: psi: Fix uaf issue when psi trigger is destroyed while being polled
      include/linux/psi.h
      include/linux/psi_types.h
      kernel/cgroup/cgroup.c
      kernel/sched/psi.c
  * FROMGIT: Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process"
      net/key/af_key.c
    Merge 4.19.246 into android-4.19-stable
Linux 4.19.246
  * bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes
      net/core/filter.c
    NFSD: Fix possible sleep during nfsd4_release_lockowner()
    docs: submitting-patches: Fix crossref to 'The canonical patch format'
    tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe()
    tpm: Fix buffer access in tpm2_get_tpm_pt()
  * HID: multitouch: Add support for Google Whiskers Touchpad
      drivers/hid/hid-multitouch.c
  * dm verity: set DM_TARGET_IMMUTABLE feature flag
      drivers/md/dm-verity-target.c
  * dm stats: add cond_resched when looping over entries
      drivers/md/dm-stats.c
    dm crypt: make printing of the key constant-time
    dm integrity: fix error code in dm_integrity_ctr()
  * zsmalloc: fix races between asynchronous zspage free and page migration
      mm/zsmalloc.c
  * netfilter: conntrack: re-fetch conntrack after insertion
      include/net/netfilter/nf_conntrack_core.h
  * exec: Force single empty string when argv is empty
      fs/exec.c
  * block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern
      block/bio.c
    drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency()
    perf tests bp_account: Make global variable static
    perf bench: Share some global variables to fix build with gcc 10
    libtraceevent: Fix build with binutils 2.35
  * cfg80211: set custom regdomain after wiphy registration
      net/wireless/core.c
      net/wireless/reg.c
  * assoc_array: Fix BUG_ON during garbage collect
      lib/assoc_array.c
    drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI controllers
    i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging
    net: ftgmac100: Disable hardware checksum on AST2600
  * net: af_key: check encryption module availability consistency
      net/key/af_key.c
    ACPI: sysfs: Fix BERT error region memory mapping
    ACPI: sysfs: Make sparse happy about address space in use
  * secure_seq: use the 64 bits of the siphash for port offset calculation
      include/net/inet_hashtables.h
      include/net/secure_seq.h
      net/core/secure_seq.c
      net/ipv4/inet_hashtables.c
      net/ipv6/inet6_hashtables.c
  * tcp: change source port randomizarion at connect() time
      net/ipv4/inet_hashtables.c
    staging: rtl8723bs: prevent ->Ssid overflow in rtw_wx_set_scan()
    x86/pci/xen: Disable PCI/MSI[-X] masking for XEN_HVM guests

Bug: 237729727
Change-Id: I56a64d00c29e30a27ccd47323103f846dc3c002e
Signed-off-by: Lucas Wei <lucaswei@google.com>
2022-07-25 15:28:21 +08:00
Helge Deller
eae522ed28 fbcon: Disallow setting font bigger than screen size
commit 65a01e601dbba8b7a51a2677811f70f783766682 upstream.

Prevent that users set a font size which is bigger than the physical screen.
It's unlikely this may happen (because screens are usually much larger than the
fonts and each font char is limited to 32x32 pixels), but it may happen on
smaller screens/LCD displays.

Signed-off-by: Helge Deller <deller@gmx.de>
Reviewed-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Reviewed-by: Geert Uytterhoeven <geert@linux-m68k.org>
Cc: stable@vger.kernel.org # v4.14+
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-07-12 16:29:01 +02:00
Daniel Vetter
7d372549b9 fbcon: Consistently protect deferred_takeover with console_lock()
[ Upstream commit 43553559121ca90965b572cf8a1d6d0fd618b449 ]

This shouldn't be a problem in practice since until we've actually
taken over the console there's nothing we've registered with the
console/vt subsystem, so the exit/unbind path that check this can't
do the wrong thing. But it's confusing, so fix it by moving it a tad
later.

Acked-by: Sam Ravnborg <sam@ravnborg.org>
Signed-off-by: Daniel Vetter <daniel.vetter@intel.com>
Cc: Daniel Vetter <daniel@ffwll.ch>
Cc: Du Cheng <ducheng2@gmail.com>
Cc: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Cc: Claudio Suarez <cssk@net-c.es>
Cc: Thomas Zimmermann <tzimmermann@suse.de>
Link: https://patchwork.freedesktop.org/patch/msgid/20220405210335.3434130-14-daniel.vetter@ffwll.ch
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-06-14 16:59:14 +02:00
Lucas Wei
a452d64169 Merge android-4.19-stable (4.19.239) into android-msm-pixel-4.19-lts
Merge 4.19.239 into android-4.19-stable
Linux 4.19.239
    i2c: pasemi: Wait for write xfers to finish
  * smp: Fix offline cpu check in flush_smp_call_function_queue()
      kernel/smp.c
    ARM: davinci: da850-evm: Avoid NULL pointer dereference
  * ipv6: fix panic when forwarding a pkt with no in6 dev
      net/ipv6/ip6_output.c
  * ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
      sound/core/pcm_misc.c
    ALSA: hda/realtek: Add quirk for Clevo PD50PNT
    gcc-plugins: latent_entropy: use /dev/urandom
    mm: kmemleak: take a full lowmem check in kmemleak_*_phys()
  * mm, page_alloc: fix build_zonerefs_node()
      mm/page_alloc.c
    drivers: net: slip: fix NPD bug in sl_tx_timeout()
    scsi: mvsas: Add PCI ID of RocketRaid 2640
    drm/amd/display: Fix allocate_mst_payload assert on resume
  * arm64: alternatives: mark patch_alternative() as `noinstr`
      arch/arm64/kernel/alternative.c
    gpu: ipu-v3: Fix dev_dbg frequency output
    ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs
  * net: micrel: fix KS8851_MLL Kconfig
      drivers/net/ethernet/micrel/Kconfig
    scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024
    scsi: target: tcmu: Fix possible page UAF
    Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer
    drm/amdkfd: Check for potential null return of kmalloc_array()
    drm/amd: Add USBC connector ID
    cifs: potential buffer overflow in handling symlinks
    nfc: nci: add flush_workqueue to prevent uaf
    testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set
  * sctp: Initialize daddr on peeled off socket
      net/sctp/socket.c
    net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link
    mlxsw: i2c: Fix initialization error flow
    gpiolib: acpi: use correct format characters
  * veth: Ensure eth header is in skb's linear part
      drivers/net/veth.c
  * net/sched: flower: fix parsing of ethertype following VLAN header
      include/net/flow_dissector.h
      net/core/flow_dissector.c
    memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe
  * ANDROID: GKI: fix crc issue with commit 6281beee5b ("block: don't merge across cgroup boundaries if blkcg is enabled")
      block/blk-merge.c
      include/linux/blk-cgroup.h
  * Revert "PCI: Reduce warnings on possible RW1C corruption"
      drivers/pci/access.c
      include/linux/pci.h
    Merge 4.19.238 into android-4.19-stable
Linux 4.19.238
    drm/amdkfd: Use drm_priv to pass VM from KFD to amdgpu
    drm/amdgpu: Check if fd really is an amdgpu fd.
  * xfrm: policy: match with both mark and mask on user interfaces
      include/net/xfrm.h
      net/key/af_key.c
      net/xfrm/xfrm_policy.c
      net/xfrm/xfrm_user.c
    selftests: cgroup: Test open-time cgroup namespace usage for migration checks
    selftests: cgroup: Test open-time credential usage for migration checks
    selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644
  * cgroup: Use open-time cgroup namespace for process migration perm checks
      kernel/cgroup/cgroup-internal.h
      kernel/cgroup/cgroup.c
  * cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv
      kernel/cgroup/cgroup-internal.h
      kernel/cgroup/cgroup-v1.c
      kernel/cgroup/cgroup.c
  * cgroup: Use open-time credentials for process migraton perm checks
      kernel/cgroup/cgroup-v1.c
      kernel/cgroup/cgroup.c
  * mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning
      include/linux/mmzone.h
  * arm64: module: remove (NOLOAD) from linker script
      arch/arm64/kernel/module.lds
  * mm: don't skip swap entry even if zap_details specified
      mm/memory.c
    dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error"
    tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts
    tools build: Filter out options and warnings not supported by clang
  * irqchip/gic-v3: Fix GICR_CTLR.RWP polling
      drivers/irqchip/irq-gic-v3.c
    perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator
    ata: sata_dwc_460ex: Fix crash due to OOB write
  * arm64: patch_text: Fixup last cpu should be master
      arch/arm64/kernel/insn.c
    btrfs: fix qgroup reserve overflow the qgroup limit
    x86/speculation: Restore speculation related MSRs during S3 resume
    x86/pm: Save the MSR validity status at context setup
    mm/mempolicy: fix mpol_new leak in shared_policy_replace
  * mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)
      mm/mremap.c
    mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is complete
    Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning"
    drbd: Fix five use after free bugs in get_initial_state
    spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op()
    qede: confirm skb is allocated before using
    rxrpc: fix a race in rxrpc_exit_net()
    net: openvswitch: don't send internal clone attribute to the userspace.
    drm/imx: Fix memory leak in imx_pd_connector_get_modes
    net: stmmac: Fix unset max_speed difference between DT and non-DT platforms
    scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()
    Drivers: hv: vmbus: Fix potential crash on module unload
    drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()
  * KVM: arm64: Check arm64_get_bp_hardening_data() didn't return NULL
      arch/arm64/include/asm/kvm_mmu.h
  * mm: fix race between MADV_FREE reclaim and blkdev direct IO read
      mm/rmap.c
  * net: add missing SOF_TIMESTAMPING_OPT_ID support
      include/net/sock.h
      net/ipv4/raw.c
      net/ipv6/raw.c
      net/packet/af_packet.c
    parisc: Fix CPU affinity for Lasi, WAX and Dino chips
    jfs: prevent NULL deref in diFree
    virtio_console: eliminate anonymous module_init & module_exit
    serial: samsung_tty: do not unlock port->lock for uart_write_wakeup()
    NFS: swap-out must always use STABLE writes.
  * NFS: swap IO handling is slightly different for O_DIRECT IO
      include/linux/nfs_fs.h
    SUNRPC/call_alloc: async tasks mustn't block waiting for memory
  * clk: Enforce that disjoints limits are invalid
      drivers/clk/clk.c
    xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32
    NFSv4: Protect the state recovery thread against direct reclaim
    w1: w1_therm: fixes w1_seq for ds28ea00 sensors
    minix: fix bug when opening a file with O_DIRECT
  * init/main.c: return 1 from handled __setup() functions
      init/main.c
  * Bluetooth: Fix use after free in hci_send_acl
      net/bluetooth/hci_event.c
    xtensa: fix DTC warning unit_address_format
    usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm
    scsi: libfc: Fix use after free in fc_exch_abts_resp()
    MIPS: fix fortify panic when copying asm exception handlers
    bnxt_en: Eliminate unintended link toggle during FW reset
    macvtap: advertise link netns via netlink
    net/smc: correct settings of RMB window update limit
    scsi: aha152x: Fix aha152x_setup() __setup handler return value
    scsi: pm8001: Fix pm8001_mpi_task_abort_resp()
    drm/amdkfd: make CRAT table missing message informational only
  * dm ioctl: prevent potential spectre v1 gadget
      drivers/md/dm-ioctl.c
  * ipv4: Invalidate neighbour for broadcast address upon address addition
      include/net/arp.h
      net/ipv4/arp.c
      net/ipv4/fib_frontend.c
    PCI: pciehp: Add Qualcomm quirk for Command Completed erratum
  * usb: ehci: add pci device support for Aspeed platforms
      drivers/usb/host/ehci-pci.c
    iommu/arm-smmu-v3: fix event handling soft lockup
    PCI: aardvark: Fix support for MSI interrupts
    powerpc: Set crashkernel offset to mid of RMA region
    power: supply: axp20x_battery: properly report current when discharging
    scsi: bfa: Replace snprintf() with sysfs_emit()
    scsi: mvsas: Replace snprintf() with sysfs_emit()
    powerpc: dts: t104xrdb: fix phy type for FMAN 4/5
  * ptp: replace snprintf with sysfs_emit
      drivers/ptp/ptp_sysfs.c
    drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj
    ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111
  * drm: Add orientation quirk for GPD Win Max
      drivers/gpu/drm/drm_panel_orientation_quirks.c
    KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs
    ARM: 9187/1: JIVE: fix return value of __setup handler
    riscv module: remove (NOLOAD)
    rtc: wm8350: Handle error for wm8350_register_irq
    ubifs: Rectify space amount budget for mkdir/tmpfile operations
    KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated
    openvswitch: Fixed nd target mask field in the flow dump.
    um: Fix uml_mconsole stop/go
    ARM: dts: spear13xx: Update SPI dma properties
    ARM: dts: spear1340: Update serial node properties
    ASoC: topology: Allow TLV control to be either read or write
    ubi: fastmap: Return error code if memory allocation fails in add_aeb()
  * bpf: Fix comment for helper bpf_current_task_under_cgroup()
      include/uapi/linux/bpf.h
  * mm/usercopy: return 1 from hardened_usercopy __setup() handler
      mm/usercopy.c
  * mm/memcontrol: return 1 from cgroup.memory __setup() handler
      mm/memcontrol.c
  * mm/mmap: return 1 from stack_guard_gap __setup() handler
      mm/mmap.c
    ACPI: CPPC: Avoid out of bounds access when parsing _CPC data
    ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl
  * pinctrl: pinconf-generic: Print arguments for bias-pull-*
      drivers/pinctrl/pinconf-generic.c
    gfs2: Make sure FITRIM minlen is rounded up to fs block size
    can: mcba_usb: properly check endpoint type
    can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path
    ubifs: rename_whiteout: correct old_dir size computing
    ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()
    ubifs: setflags: Make dirtied_ino_d 8 bytes aligned
    ubifs: Add missing iput if do_tmpfile() failed in rename whiteout
    ubifs: Fix deadlock in concurrent rename whiteout and inode writeback
    ubifs: rename_whiteout: Fix double free for whiteout_ui->data
    KVM: x86: fix sending PV IPI
    KVM: Prevent module exit until all VMs are freed
    scsi: qla2xxx: Use correct feature type field during RFF_ID processing
    scsi: qla2xxx: Reduce false trigger to login
    scsi: qla2xxx: Fix hang due to session stuck
    scsi: qla2xxx: Fix incorrect reporting of task management failure
    scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()
    scsi: qla2xxx: Check for firmware dump already collected
    scsi: qla2xxx: Fix warning for missing error code
    scsi: qla2xxx: Fix stuck session in gpdb
    powerpc: Fix build errors with newer binutils
    powerpc/lib/sstep: Fix build errors with newer binutils
    powerpc/lib/sstep: Fix 'sthcx' instruction
    mmc: host: Return an error when ->enable_sdio_irq() ops is missing
    media: hdpvr: initialize dev->worker at hdpvr_register_videodev
    media: Revert "media: em28xx: add missing em28xx_close_extension"
    video: fbdev: sm712fb: Fix crash in smtcfb_write()
    ARM: mmp: Fix failure to remove sram device
    ARM: tegra: tamonten: Fix I2C3 pad setting
    media: cx88-mpeg: clear interrupt status register before streaming video
  * ASoC: soc-core: skip zero num_dai component in searching dai name
      sound/soc/soc-core.c
    video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit
    video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf()
    video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf()
    ARM: dts: bcm2837: Add the missing L1/L2 cache information
    ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960
    video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit
    video: fbdev: cirrusfb: check pixclock to avoid divide by zero
    video: fbdev: w100fb: Reset global state
    video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
    ntfs: add sanity check on allocation size
  * ext4: don't BUG if someone dirty pages without asking ext4 first
      fs/ext4/inode.c
    spi: tegra20: Use of_device_get_match_data()
  * PM: core: keep irq flags in device_pm_check_callbacks()
      drivers/base/power/main.c
    ACPI/APEI: Limit printable size of BERT table data
    Revert "Revert "block, bfq: honor already-setup queue merges""
    lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3
    ACPICA: Avoid walking the ACPI Namespace if it is not there
    bfq: fix use-after-free in bfq_dispatch_request
    irqchip/nvic: Release nvic_base upon failure
  * irqchip/qcom-pdc: Fix broken locking
      drivers/irqchip/qcom-pdc.c
    Fix incorrect type in assignment of ipv6 port for audit
  * loop: use sysfs_emit() in the sysfs xxx show()
      drivers/block/loop.c
    selinux: use correct type for context length
    lib/test: use after free in register_test_dev_kmod()
    NFSv4/pNFS: Fix another issue with a list iterator pointing to the head
    net/x25: Fix null-ptr-deref caused by x25_disconnect
    qlcnic: dcb: default to returning -EOPNOTSUPP
    net: phy: broadcom: Fix brcm_fet_config_init()
    xen: fix is_xen_pmu()
    clk: qcom: gcc-msm8994: Fix gpll4 width
  * netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options
      net/netfilter/nf_conntrack_proto_tcp.c
    jfs: fix divide error in dbNextAG
    kgdbts: fix return value of __setup handler
    kgdboc: fix return value of __setup handler
    tty: hvc: fix return value of __setup handler
    pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe
    pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe
    pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init
    NFS: remove unneeded check in decode_devicenotify_args()
    clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver
    clk: clps711x: Terminate clk_div_table with sentinel element
    clk: loongson1: Terminate clk_div_table with sentinel element
    clk: actions: Terminate clk_div_table with sentinel element
    remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region
  * clk: qcom: clk-rcg2: Update the frac table for pixel clock
      drivers/clk/qcom/clk-rcg2.c
    dma-debug: fix return value of __setup handlers
    iio: adc: Add check for devm_request_threaded_irq
    serial: 8250: Fix race condition in RTS-after-send handling
    serial: 8250_mid: Balance reference count for PCI DMA device
    clk: qcom: ipq8074: Use floor ops for SDCC1 clock
    staging:iio:adc:ad7280a: Fix handing of device address bit reversing.
    pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add()
    mxser: fix xmit_buf leak in activate when LSR == 0xff
    mfd: asic3: Add missing iounmap() on error asic3_mfd_probe
  * tcp: ensure PMTU updates are processed during fastopen
      net/ipv4/tcp_output.c
    selftests/bpf/test_lirc_mode2.sh: Exit with proper code
    i2c: mux: demux-pinctrl: do not deactivate a master that is not active
  * af_netlink: Fix shift out of bounds in group mask calculation
      net/netlink/af_netlink.c
    USB: storage: ums-realtek: fix error code in rts51x_read_mem()
    mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init
    MIPS: RB532: fix return value of __setup handler
    vxcan: enable local echo for sent CAN frames
    mfd: mc13xxx: Add check for mc13xxx_irq_request
    powerpc/sysdev: fix incorrect use to determine if list is empty
  * PCI: Reduce warnings on possible RW1C corruption
      drivers/pci/access.c
      include/linux/pci.h
    power: supply: wm8350-power: Add missing free in free_charger_irq
    power: supply: wm8350-power: Handle error for wm8350_register_irq
    i2c: xiic: Make bus names unique
    hv_balloon: rate-limit "Unhandled message" warning
    KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor()
    KVM: x86: Fix emulation in writing cr8
    powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit
    drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt
    power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return
    drm/tegra: Fix reference leak in tegra_dsi_ganged_probe
    ext2: correct max file size computing
    TOMOYO: fix __setup handlers return values
    scsi: pm8001: Fix abort all task initialization
    scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config()
    scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req()
    scsi: pm8001: Fix command initialization in pm80XX_send_read_log()
    dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS
    iwlwifi: Fix -EIO error code that is never returned
    HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports
    power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init
    ray_cs: Check ioremap return value
    power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe
    KVM: PPC: Fix vmx/vsx mixup in mmio emulation
    ath9k_htc: fix uninit value bugs
    drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()
  * drm/edid: Don't clear formats if using deep color
      drivers/gpu/drm/drm_edid.c
    mtd: onenand: Check for error irq
    Bluetooth: hci_serdev: call init_rwsem() before p->open()
    ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern
    drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev
    mmc: davinci_mmc: Handle error for clk_enable
    ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe
    ASoC: imx-es8328: Fix error return code in imx_es8328_probe()
    ASoC: mxs: Fix error handling in mxs_sgtl5000_probe
    ASoC: dmaengine: do not use a NULL prepare_slave_config() callback
    video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of
    ASoC: fsi: Add check for clk_enable
    ASoC: wm8350: Handle error for wm8350_register_irq
    ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe
    media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED
    ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction
    memory: emif: check the pointer temp in get_device_details()
    memory: emif: Add check for setup_interrupts
    ASoC: atmel_ssc_dai: Handle errors for clk_enable
    ASoC: mxs-saif: Handle errors for clk_enable
  * printk: fix return value of printk.devkmsg __setup handler
      kernel/printk/printk.c
    arm64: dts: broadcom: Fix sata nodename
    arm64: dts: ns2: Fix spi-cpol and spi-cpha property
    ALSA: spi: Add check for clk_enable()
    ASoC: ti: davinci-i2s: Add check for clk_enable()
    ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp()
    media: usb: go7007: s2250-board: fix leak in probe()
    media: em28xx: initialize refcount before kref_get
    soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe
    ARM: dts: qcom: ipq4019: fix sleep clock
    video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name()
    video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()
    media: coda: Fix missing put_device() call in coda_get_vdoa_data
    perf/x86/intel/pt: Fix address filter config for 32-bit kernel
  * perf/core: Fix address filter parser for multiple filters
      kernel/events/core.c
  * sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa
      kernel/sched/debug.c
    clocksource: acpi_pm: fix return value of __setup handler
    hwmon: (pmbus) Add Vin unit off handling
    crypto: ccp - ccp_dmaengine_unregister release dma channels
    ACPI: APEI: fix return value of __setup handlers
  * clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init()
      drivers/clocksource/timer-of.c
  * crypto: vmx - add missing dependencies
      drivers/crypto/vmx/Kconfig
    hwrng: atmel - disable trng on failure path
    PM: suspend: fix return value of __setup handler
    PM: hibernate: fix __setup handler error handling
  * block: don't delete queue kobject before its children
      block/blk-sysfs.c
    hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING
    hwmon: (pmbus) Add mutex to regulator ops
    spi: pxa2xx-pci: Balance reference count for PCI DMA device
    selftests/x86: Add validity check and allow field splitting
    spi: tegra114: Add missing IRQ check in tegra_spi_probe
    crypto: mxs-dcp - Fix scatterlist processing
  * crypto: authenc - Fix sleep in atomic context in decrypt_tail
      crypto/authenc.c
    regulator: qcom_smd: fix for_each_child.cocci warnings
    PCI: pciehp: Clear cmd_busy bit in polling mode
    brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio
    brcmfmac: firmware: Allocate space for default boardrev in nvram
    media: davinci: vpif: fix unbalanced runtime PM get
    DEC: Limit PMAX memory probing to R3k systems
    lib/raid6/test: fix multiple definition linking error
    thermal: int340x: Increase bitmap size
    carl9170: fix missing bit-wise or operator for tx_params
    ARM: dts: exynos: add missing HDMI supplies on SMDK5420
    ARM: dts: exynos: add missing HDMI supplies on SMDK5250
    ARM: dts: exynos: fix UART3 pins configuration in Exynos5250
    ARM: dts: at91: sama5d2: Fix PMERRLOC resource size
    video: fbdev: atari: Atari 2 bpp (STe) palette bugfix
    video: fbdev: sm712fb: Fix crash in smtcfb_read()
  * drm/edid: check basic audio support on CEA extension block
      drivers/gpu/drm/drm_edid.c
  * block: don't merge across cgroup boundaries if blkcg is enabled
      block/blk-merge.c
      include/linux/blk-cgroup.h
    drivers: hamradio: 6pack: fix UAF bug caused by mod_timer()
    ACPI: properties: Consistently return -ENOENT if there are no more references
    powerpc/kvm: Fix kvm_use_magic_page
    drbd: fix potential silent data corruption
  * mm,hwpoison: unmap poisoned page before invalidation
      mm/memory.c
    ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020
    ALSA: cs4236: fix an incorrect NULL check on list iterator
  * Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads"
      drivers/input/input.c
    qed: validate and restrict untrusted VFs vlan promisc mode
    qed: display VF trust config
    scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands
    mempolicy: mbind_range() set_policy() after vma_merge()
  * mm: invalidate hwpoison page cache page in fault path
      mm/memory.c
  * mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node
      mm/page_alloc.c
    jffs2: fix memory leak in jffs2_scan_medium
    jffs2: fix memory leak in jffs2_do_mount_fs
    jffs2: fix use-after-free in jffs2_clear_xattr_subsystem
    can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path
    pinctrl: samsung: drop pin banks references on error paths
  * f2fs: fix to unlock page correctly in error path of is_alive()
      fs/f2fs/gc.c
  * NFSD: prevent integer overflow on 32 bit systems
      include/linux/sunrpc/xdr.h
    NFSD: prevent underflow in nfssvc_decode_writeargs()
    SUNRPC: avoid race between mod_timer() and del_timer_sync()
    Documentation: update stable tree link
    Documentation: add link to stable release candidate tree
  * ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE
      kernel/ptrace.c
    clk: uniphier: Fix fixed-rate initialization
  * iio: inkern: make a best effort on offset calculation
      drivers/iio/inkern.c
  * iio: inkern: apply consumer scale when no channel scale is available
      drivers/iio/inkern.c
  * iio: inkern: apply consumer scale on IIO_VAL_INT cases
      drivers/iio/inkern.c
    iio: afe: rescale: use s64 for temporary scale calculations
  * coresight: Fix TRCCONFIGR.QE sysfs interface
      drivers/hwtracing/coresight/coresight-etm4x-sysfs.c
  * xhci: make xhci_handshake timeout for xhci_reset() adjustable
      drivers/usb/host/xhci-hub.c
      drivers/usb/host/xhci-mem.c
      drivers/usb/host/xhci.c
      drivers/usb/host/xhci.h
    USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c
    virtio-blk: Use blk_validate_block_size() to validate block size
  * block: Add a helper to validate the block size
      include/linux/blkdev.h
    tpm: fix reference counting for struct tpm_chip
  * fuse: fix pipe buffer lifetime for direct_io
      fs/fuse/dev.c
      fs/fuse/file.c
      fs/fuse/fuse_i.h
  * af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register
      net/key/af_key.c
  * spi: Fix erroneous sgs value with min_t()
      drivers/spi/spi.c
    net:mcf8390: Use platform_get_irq() to get the interrupt
  * spi: Fix invalid sgs value
      drivers/spi/spi.c
    ethernet: sun: Free the coherent when failing in probing
    virtio_console: break out of buf poll on remove
  * xfrm: fix tunnel model fragmentation behavior
      net/ipv6/xfrm6_output.c
      net/xfrm/xfrm_interface.c
  * netdevice: add the case if dev is NULL
      include/linux/netdevice.h
  * USB: serial: simple: add Nokia phone driver
      drivers/usb/serial/Kconfig
    USB: serial: pl2303: add IBM device IDs
  * ANDROID: incremental-fs: limit mount stack depth
      fs/incfs/data_mgmt.h
      fs/incfs/vfs.c
  * UPSTREAM: binderfs: use __u32 for device numbers
      include/uapi/linux/android/binderfs.h
    Revert "ANDROID: dm-bow: Protect Ranges fetched and erased from the RB tree"
    Merge 4.19.237 into android-4.19-stable
Linux 4.19.237
    llc: only change llc->dev when bind() succeeds
    nds32: fix access_ok() checks in get/put_user
    mac80211: fix potential double free on mesh join
    crypto: qat - disable registration of algorithms
    ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU
    ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3
    ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board
    netfilter: nf_tables: initialize registers in nft_do_chain()
    drivers: net: xgene: Fix regression in CRC stripping
    ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec
    ALSA: cmipci: Restore aux vol on suspend/resume
  * ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB
      sound/usb/mixer_quirks.c
  * ALSA: pcm: Add stream lock during PCM reset ioctl operations
      sound/core/pcm_native.c
    ALSA: oss: Fix PCM OSS buffer allocation overflow
    ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call
    llc: fix netdevice reference leaks in llc_ui_bind()
    thermal: int340x: fix memory leak in int3400_notify()
    staging: fbtft: fb_st7789v: reset display before initialization
  * esp: Fix possible buffer overflow in ESP transformation
      include/net/esp.h
      include/net/sock.h
      net/core/sock.c
      net/ipv4/esp4.c
      net/ipv6/esp6.c
  * net: ipv6: fix skb_over_panic in __ip6_append_data
      net/ipv6/ip6_output.c
    nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION
    Merge 4.19.236 into android-4.19-stable
Linux 4.19.236
    perf symbols: Fix symbol size calculation condition
  * Input: aiptek - properly check endpoint type
      drivers/input/tablet/aiptek.c
  * usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
      drivers/usb/gadget/udc/core.c
  * usb: gadget: rndis: prevent integer overflow in rndis_set_response()
      drivers/usb/gadget/function/rndis.c
    net: dsa: Add missing of_node_put() in dsa_port_parse_of
  * net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit()
      include/linux/if_arp.h
    drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings
    hv_netvsc: Add check for kvmalloc_array
    atm: eni: Add check for dma_map_single
  * net/packet: fix slab-out-of-bounds access in packet_recvmsg()
      net/packet/af_packet.c
    efi: fix return value of __setup handlers
    ocfs2: fix crash when initialize filecheck kobj fails
    crypto: qcom-rng - ensure buffer for generate is completely filled
  * arm64: Use the clearbhb instruction in mitigations
      arch/arm64/include/asm/assembler.h
      arch/arm64/include/asm/cpufeature.h
      arch/arm64/include/asm/sysreg.h
      arch/arm64/include/asm/vectors.h
      arch/arm64/kernel/cpu_errata.c
      arch/arm64/kernel/cpufeature.c
      arch/arm64/kernel/entry.S
  * arm64: add ID_AA64ISAR2_EL1 sys register
      arch/arm64/include/asm/cpu.h
      arch/arm64/include/asm/sysreg.h
      arch/arm64/kernel/cpufeature.c
      arch/arm64/kernel/cpuinfo.c
  * KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated
      arch/arm64/include/asm/kvm_host.h
  * arm64: Mitigate spectre style branch history side channels
      arch/arm64/Kconfig
      arch/arm64/include/asm/assembler.h
      arch/arm64/include/asm/cpufeature.h
      arch/arm64/include/asm/cputype.h
      arch/arm64/include/asm/sysreg.h
      arch/arm64/include/asm/vectors.h
      arch/arm64/kernel/cpu_errata.c
  * KVM: arm64: Add templates for BHB mitigation sequences
      arch/arm64/include/asm/cpucaps.h
      arch/arm64/include/asm/kvm_mmu.h
      arch/arm64/include/asm/mmu.h
      arch/arm64/kernel/cpu_errata.c
  * arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2
      arch/arm64/include/asm/cpufeature.h
      arch/arm64/kernel/cpu_errata.c
  * arm64: Add percpu vectors for EL1
      arch/arm64/include/asm/mmu.h
      arch/arm64/include/asm/vectors.h
      arch/arm64/kernel/cpufeature.c
      arch/arm64/kernel/entry.S
  * arm64: entry: Add macro for reading symbol addresses from the trampoline
      arch/arm64/kernel/entry.S
  * arm64: entry: Add vectors that have the bhb mitigation sequences
      arch/arm64/include/asm/assembler.h
      arch/arm64/include/asm/vectors.h
      arch/arm64/kernel/entry.S
      include/linux/arm-smccc.h
  * arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations
      arch/arm64/kernel/entry.S
  * arm64: entry: Allow the trampoline text to occupy multiple pages
      arch/arm64/include/asm/fixmap.h
      arch/arm64/include/asm/sections.h
      arch/arm64/kernel/entry.S
      arch/arm64/kernel/vmlinux.lds.S
      arch/arm64/mm/mmu.c
  * arm64: entry: Make the kpti trampoline's kpti sequence optional
      arch/arm64/kernel/entry.S
  * arm64: entry: Move trampoline macros out of ifdef'd section
      arch/arm64/kernel/entry.S
  * arm64: entry: Don't assume tramp_vectors is the start of the vectors
      arch/arm64/kernel/entry.S
  * arm64: entry: Allow tramp_alias to access symbols after the 4K boundary
      arch/arm64/kernel/entry.S
  * arm64: entry: Move the trampoline data page before the text page
      arch/arm64/include/asm/fixmap.h
      arch/arm64/kernel/entry.S
  * arm64: entry: Free up another register on kpti's tramp_exit path
      arch/arm64/kernel/entry.S
  * arm64: entry: Make the trampoline cleanup optional
      arch/arm64/kernel/entry.S
  * arm64: entry.S: Add ventry overflow sanity checks
      arch/arm64/kernel/entry.S
  * arm64: Add Cortex-X2 CPU part definition
      arch/arm64/include/asm/cputype.h
  * arm64: Add Neoverse-N2, Cortex-A710 CPU part definition
      arch/arm64/include/asm/cputype.h
  * arm64: Add part number for Arm Cortex-A77
      arch/arm64/include/asm/cputype.h
  * fs: sysfs_emit: Remove PAGE_SIZE alignment check
      fs/sysfs/file.c
  * mm: fix dereference a null pointer in migrate[_huge]_page_move_mapping()
      mm/migrate.c
  * cpuset: Fix unsafe lock order between cpuset lock and cpuslock
      kernel/cgroup/cpuset.c
    ia64: ensure proper NUMA distance and possible map initialization
  * sched/topology: Fix sched_domain_topology_level alloc in sched_init_numa()
      kernel/sched/topology.c
  * sched/topology: Make sched_init_numa() use a set for the deduplicating sort
      include/linux/topology.h
      kernel/sched/topology.c
    kselftest/vm: fix tests build with old libc
    sfc: extend the locking on mcdi->seqno
  * tcp: make tcp_read_sock() more robust
      net/ipv4/tcp.c
  * nl80211: Update bss channel on channel switch for P2P_CLIENT
      net/wireless/nl80211.c
    atm: firestream: check the return value of ioremap() in fs_init()
    can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when fully ready
  * ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE
      lib/Kconfig
    MIPS: smp: fill in sibling and core maps earlier
    ARM: dts: rockchip: fix a typo on rk3288 crypto-controller
    arm64: dts: rockchip: reorder rk3399 hdmi clocks
    arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity
  * xfrm: Fix xfrm migrate issues when address family changes
      net/xfrm/xfrm_state.c
  * xfrm: Check if_id in xfrm_migrate
      include/net/xfrm.h
      net/key/af_key.c
      net/xfrm/xfrm_policy.c
      net/xfrm/xfrm_state.c
      net/xfrm/xfrm_user.c
  * sctp: fix the processing for INIT_ACK chunk
      net/sctp/sm_statefuns.c
  * sctp: fix the processing for INIT chunk
      net/sctp/sm_statefuns.c
  * Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0"
      net/xfrm/xfrm_user.c
    Merge 4.19.235 into android-4.19-stable
Linux 4.19.235
    btrfs: unlock newly allocated extent buffer after error
  * ext4: add check to prevent attempting to resize an fs with sparse_super2
      fs/ext4/resize.c
    ARM: fix Thumb2 regression with Spectre BHB
  * virtio: acknowledge all features before access
      include/linux/virtio_config.h
  * virtio: unexport virtio_finalize_features
      include/linux/virtio.h
    riscv: Fix auipc+jalr relocation range checks
    net: macb: Fix lost RX packet wakeup race in NAPI receive
    staging: gdm724x: fix use after free in gdm_lte_rx()
    ARM: Spectre-BHB: provide empty stub for non-config
    selftests/memfd: clean up mapping in mfd_fail_write
  * tracing: Ensure trace buffer is at least 4096 bytes large
      kernel/trace/trace.c
    Revert "xen-netback: Check for hotplug-status existence before watching"
    Revert "xen-netback: remove 'hotplug-status' once it has served its purpose"
  * net-sysfs: add check for netdevice being present to speed_show
      net/core/net-sysfs.c
  * sctp: fix kernel-infoleak for SCTP sockets
      net/sctp/diag.c
    net: phy: DP83822: clear MISR2 register to disable interrupts
    gianfar: ethtool: Fix refcount leak in gfar_get_ts_info
    gpio: ts4900: Do not set DAT and OE together
    NFC: port100: fix use-after-free in port100_send_complete
  * net/mlx5: Fix size field in bufferx_reg struct
      include/linux/mlx5/mlx5_ifc.h
    ax25: Fix NULL pointer dereference in ax25_kill_by_device
    net: ethernet: lpc_eth: Handle error for clk_enable
    net: ethernet: ti: cpts: Handle error for clk_enable
    ethernet: Fix error handling in xemaclite_of_probe
    qed: return status of qed_iov_get_link
    net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare()
    ANDROID: dm-bow: Protect Ranges fetched and erased from the RB tree

Bug: 229982346
Change-Id: I590f3a34c3672086a50ac0fba0b8514a4cc2016a
Signed-off-by: Lucas Wei <lucaswei@google.com>
2022-05-12 18:44:49 +08:00
Dan Carpenter
c63cb26b4f video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name()
[ Upstream commit 78482af095abd9f4f29f1aa3fe575d25c6ae3028 ]

This code has two bugs:
1) "cnt" is 255 but the size of the buffer is 256 so the last byte is
   not used.
2) If we try to print more than 255 characters then "cnt" will be
   negative and that will trigger a WARN() in snprintf(). The fix for
   this is to use scnprintf() instead of snprintf().

We can re-write this code to be cleaner:
1) Rename "offset" to "off" because that's shorter.
2) Get rid of the "cnt" variable and just use "size - off" directly.
3) Get rid of the "read" variable and just increment "off" directly.

Fixes: 96fe6a2109 ("fbdev: Add VESA Coordinated Video Timings (CVT) support")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Helge Deller <deller@gmx.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2022-04-15 14:14:44 +02:00
Wilson Sung
9e5fcdf3d0 Merge android-4.19-stable (4.19.207) into android-msm-pixel-4.19-lts
Merge 4.19.207 into android-4.19-stable
Linux 4.19.207
    s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant
    net: renesas: sh_eth: Fix freeing wrong tx descriptor
  * ip_gre: validate csum_start only on pull
      net/ipv4/ip_gre.c
    qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
  * fq_codel: reject silly quantum parameters
      include/uapi/linux/pkt_sched.h
      net/sched/sch_fq_codel.c
  * netfilter: socket: icmp6: fix use-after-scope
      net/ipv6/netfilter/nf_socket_ipv6.c
    net: dsa: b53: Fix calculating number of switch ports
    ARC: export clear_user_page() for modules
    mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()'
  * PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
      include/linux/pci.h
  * KVM: arm64: Handle PSCI resets before userspace touches vCPU state
      virt/kvm/arm/arm.c
  * PCI: Fix pci_dev_str_match_path() alloc while atomic bug
      drivers/pci/pci.c
    mfd: axp20x: Update AXP288 volatile ranges
    NTB: perf: Fix an error code in perf_setup_inbuf()
    ethtool: Fix an error code in cxgb2.c
    block, bfq: honor already-setup queue merges
    net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
  * PCI: Add ACS quirks for Cavium multi-function devices
      drivers/pci/quirks.c
    mfd: Don't use irq_create_mapping() to resolve a mapping
    dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
    KVM: s390: index kvm->arch.idle_mask by vcpu_idx
  * mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
      include/linux/memory_hotplug.h
      mm/memory_hotplug.c
    net: hns3: pad the short tunnel frame before sending to hardware
    ibmvnic: check failover_pending in login response
    qed: Handle management FW error
  * tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
      net/ipv4/tcp_input.c
  * net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup
      net/dsa/slave.c
  * net/af_unix: fix a data-race in unix_dgram_poll
      include/linux/skbuff.h
      net/unix/af_unix.c
  * events: Reuse value read using READ_ONCE instead of re-reading it
      kernel/events/core.c
    net/mlx5: Fix potential sleeping in atomic context
  * perf machine: Initialize srcline string member in add_location struct
      tools/perf/util/machine.c
  * tipc: increase timeout in tipc_sk_enqueue()
      net/tipc/socket.c
    r6040: Restore MDIO clock frequency after MAC reset
  * net/l2tp: Fix reference count leak in l2tp_udp_recv_core
      net/l2tp/l2tp_core.c
  * dccp: don't duplicate ccid when cloning dccp sock
      net/dccp/minisocks.c
    ptp: dp83640: don't define PAGE0
  * net-caif: avoid user-triggerable WARN_ON(1)
      net/caif/chnl_net.c
  * tipc: fix an use-after-free issue in tipc_recvmsg
      net/tipc/socket.c
    x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
  * PCI: Add AMD GPU multi-function power dependencies
      drivers/pci/quirks.c
    PM: base: power: don't try to use non-existing RTC for storing data
  * arm64/sve: Use correct size when reinitialising SVE state
      arch/arm64/kernel/fpsimd.c
    bnx2x: Fix enabling network interfaces without VFs
    xen: reset legacy rtc flag for PV domU
    dm thin metadata: Fix use-after-free in dm_bm_set_read_only
    drm/amdgpu: Fix BUG_ON assert
    platform/chrome: cros_ec_proto: Send command again when timeout occurs
  * memcg: enable accounting for pids in nested pid namespaces
      kernel/pid_namespace.c
  * mm/hugetlb: initialize hugetlb_usage in mm_init
      include/linux/hugetlb.h
      kernel/fork.c
    cpufreq: powernv: Fix init_chip_info initialization in numa=off
    scsi: qla2xxx: Sync queue idx with queue_pair_map idx
    scsi: BusLogic: Fix missing pr_cont() use
  * ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup()
      fs/overlayfs/dir.c
    parisc: fix crash with signals and alloca
    net: w5100: check return value after calling platform_get_resource()
  * net: fix NULL pointer reference in cipso_v4_doi_free
      net/netlabel/netlabel_cipso_v4.c
    ath9k: fix sleeping in atomic context
    ath9k: fix OOB read ar9300_eeprom_restore_internal
    parport: remove non-zero check on count
  * ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
      sound/soc/rockchip/rockchip_i2s.c
  * ASoC: rockchip: i2s: Fix regmap_ops hang
      sound/soc/rockchip/rockchip_i2s.c
    usbip:vhci_hcd USB port can get stuck in the disabled state
    usbip: give back URBs for unsent unlink requests during cleanup
    usb: musb: musb_dsps: request_irq() after initializing musb
  * Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
      drivers/usb/host/xhci.c
  * cifs: fix wrong release in sess_alloc_buffer() failed path
      fs/cifs/sess.c
    mmc: core: Return correct emmc response in case of ioctl error
  * selftests/bpf: Enlarge select() timeout for test_maps
      tools/testing/selftests/bpf/test_maps.c
    mmc: rtsx_pci: Fix long reads when clock is prescaled
    mmc: sdhci-of-arasan: Check return value of non-void funtions
  * of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
      drivers/of/kobj.c
  * gfs2: Don't call dlm after protocol is unmounted
      fs/gfs2/lock_dlm.c
    staging: rts5208: Fix get_ms_information() heap buffer size
  * rpc: fix gss_svc_init cleanup on failure
      net/sunrpc/auth_gss/svcauth_gss.c
  * tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
      net/ipv4/tcp_fastopen.c
    serial: sh-sci: fix break handling for sysrq
  * Bluetooth: Fix handling of LE Enhanced Connection Complete
      net/bluetooth/hci_event.c
    ARM: tegra: tamonten: Fix UART pad setting
    gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
  * Bluetooth: avoid circular locks in sco_sock_connect
      net/bluetooth/sco.c
  * Bluetooth: schedule SCO timeouts with delayed_work
      net/bluetooth/sco.c
    net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
    arm64: dts: qcom: sdm660: use reg value for memory node
    ARM: dts: imx53-ppd: Fix ACHC entry
    media: tegra-cec: Handle errors of clk_prepare_enable()
    media: TDA1997x: fix tda1997x_query_dv_timings() return value
  * media: v4l2-dv-timings.c: fix wrong condition in two for-loops
      drivers/media/v4l2-core/v4l2-dv-timings.c
    media: imx258: Limit the max analogue gain to 480
    media: imx258: Rectify mismatch of VTS value
  * ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output
      sound/soc/intel/boards/bytcr_rt5640.c
  * bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler()
      drivers/net/bonding/bond_main.c
  * Bluetooth: skip invalid hci_sync_conn_complete_evt
      net/bluetooth/hci_event.c
    ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
  * samples: bpf: Fix tracex7 error raised on the missing argument
      samples/bpf/test_override_return.sh
      samples/bpf/tracex7_user.c
    staging: ks7010: Fix the initialization of the 'sleep_status' structure
    serial: 8250_pci: make setup_port() parameters explicitly unsigned
    hvsi: don't panic on tty_register_driver failure
    xtensa: ISS: don't panic in rs_init
  * serial: 8250: Define RX trigger levels for OxSemi 950 devices
      include/uapi/linux/serial_reg.h
    s390/jump_label: print real address in a case of a jump label bug
  * flow_dissector: Fix out-of-bounds warnings
      net/core/flow_dissector.c
  * ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
      net/ipv4/ip_output.c
    video: fbdev: riva: Error out if 'pixclock' equals zero
    video: fbdev: kyro: Error out if 'pixclock' equals zero
    video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
  * bpf/tests: Do not PASS tests without actually testing the result
      lib/test_bpf.c
  * bpf/tests: Fix copy-and-paste error in double word test
      lib/test_bpf.c
    drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex
    tty: serial: jsm: hold port lock when reporting modem line changes
    staging: board: Fix uninitialized spinlock when attaching genpd
  * usb: gadget: composite: Allow bMaxPower=0 if self-powered
      drivers/usb/gadget/composite.c
  * usb: gadget: u_ether: fix a potential null pointer dereference
      drivers/usb/gadget/function/u_ether.c
    usb: host: fotg210: fix the actual_length of an iso packet
    usb: host: fotg210: fix the endpoint's transactional opportunities calculation
  * Smack: Fix wrong semantics in smk_access_entry()
      security/smack/smack_access.c
  * netlink: Deal with ESRCH error in nlmsg_notify()
      net/netlink/af_netlink.c
    video: fbdev: kyro: fix a DoS bug by restricting user input
    ARM: dts: qcom: apq8064: correct clock names
    iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
  * tipc: keep the skb in rcv queue until the whole data is read
      net/tipc/socket.c
  * PCI: Use pci_update_current_state() in pci_enable_device_flags()
      drivers/pci/pci.c
    crypto: mxs-dcp - Use sg_mapping_iter to copy data
    media: dib8000: rewrite the init prbs logic
  * userfaultfd: prevent concurrent API initialization
      fs/userfaultfd.c
    MIPS: Malta: fix alignment of the devicetree buffer
  * f2fs: fix to unmap pages from userspace process in punch_hole()
      fs/f2fs/file.c
  * f2fs: fix to account missing .skipped_gc_rwsem
      fs/f2fs/gc.c
  * fscache: Fix cookie key hashing
      fs/fscache/cookie.c
      fs/fscache/internal.h
      fs/fscache/main.c
    platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call
    scsi: qedi: Fix error codes in qedi_alloc_global_queues()
    pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
    openrisc: don't printk() unconditionally
    powerpc/stacktrace: Include linux/delay.h
  * vfio: Use config not menuconfig for VFIO_NOIOMMU
      drivers/vfio/Kconfig
    pinctrl: samsung: Fix pinctrl bank pin count
    docs: Fix infiniband uverbs minor number
    RDMA/iwcm: Release resources if iw_cm module initialization fails
  * HID: input: do not report stylus battery state as "full"
      drivers/hid/hid-input.c
    PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
    PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response
    PCI: xilinx-nwl: Enable the clock through CCF
  * PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
      drivers/pci/syscall.c
  * PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
      drivers/pci/quirks.c
    ARM: 9105/1: atags_to_fdt: don't warn about stack size
    libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
    media: rc-loopback: return number of emitters rather than error
    media: uvc: don't do DMA on stack
    VMCI: fix NULL pointer dereference when unmapping queue pair
    dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
    power: supply: max17042: handle fails of reading status register
    block: bfq: fix bfq_set_next_ioprio_data()
  * crypto: public_key: fix overflow during implicit conversion
      include/crypto/public_key.h
  * arm64: head: avoid over-mapping in map_memory
      arch/arm64/include/asm/kernel-pgtable.h
      arch/arm64/kernel/head.S
    soc: aspeed: lpc-ctrl: Fix boundary check for mmap
  * tools/thermal/tmon: Add cross compiling support
      tools/thermal/tmon/Makefile
  * bpf: Fix pointer arithmetic mask tightening under state pruning
      include/linux/bpf_verifier.h
      kernel/bpf/verifier.c
  * bpf: verifier: Allocate idmap scratch in verifier env
      include/linux/bpf_verifier.h
      kernel/bpf/verifier.c
  * bpf: Fix leakage due to insufficient speculative store bypass mitigation
      include/linux/bpf_verifier.h
      kernel/bpf/verifier.c
  * bpf: Introduce BPF nospec instruction for mitigating Spectre v4
      arch/arm64/net/bpf_jit_comp.c
      include/linux/filter.h
      kernel/bpf/core.c
      kernel/bpf/disasm.c
  * selftests/bpf: fix tests due to const spill/fill
      tools/testing/selftests/bpf/test_verifier.c
  * bpf: track spill/fill of constants
      kernel/bpf/verifier.c
  * selftests/bpf: Test variable offset stack access
      tools/testing/selftests/bpf/test_verifier.c
  * bpf: Sanity check max value for var_off stack access
      kernel/bpf/verifier.c
  * bpf: Reject indirect var_off stack access in unpriv mode
      kernel/bpf/verifier.c
  * bpf: Reject indirect var_off stack access in raw mode
      kernel/bpf/verifier.c
  * bpf: Support variable offset stack access from helpers
      kernel/bpf/verifier.c
  * bpf: correct slot_type marking logic to allow more stack slot sharing
      kernel/bpf/verifier.c
      tools/testing/selftests/bpf/test_verifier.c
  * bpf/verifier: per-register parent pointers
      include/linux/bpf_verifier.h
      kernel/bpf/verifier.c
  * 9p/xen: Fix end of loop tests for list_for_each_entry
      net/9p/trans_xen.c
  * include/linux/list.h: add a macro to test if entry is pointing to the head
      include/linux/list.h
    xen: fix setting of max_pfn in shared_info
    powerpc/perf/hv-gpci: Fix counter value parsing
  * PCI/MSI: Skip masking MSI-X on Xen PV
      drivers/pci/msi.c
    blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
    blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
    btrfs: reset replace target device to allocation state on close
    rtc: tps65910: Correct driver module alias
    clk: kirkwood: Fix a clocking boot regression
    backlight: pwm_bl: Improve bootloader/kernel device handover
    fbmem: don't allow too huge resolutions
  * IMA: remove the dependency on CRYPTO_MD5
      security/integrity/ima/Kconfig
  * IMA: remove -Wmissing-prototypes warning
      security/integrity/ima/ima_mok.c
    KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
    x86/resctrl: Fix a maybe-uninitialized build warning treated as error
  * tty: Fix data race between tiocsti() and flush_to_ldisc()
      drivers/tty/tty_io.c
  * ubifs: report correct st_size for encrypted symlinks
      fs/ubifs/file.c
  * f2fs: report correct st_size for encrypted symlinks
      fs/f2fs/namei.c
  * ext4: report correct st_size for encrypted symlinks
      fs/ext4/symlink.c
  * fscrypt: add fscrypt_symlink_getattr() for computing st_size
      fs/crypto/hooks.c
  * netns: protect netns ID lookups with RCU
      net/core/net_namespace.c
  * ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
      net/ipv4/route.c
    net: qualcomm: fix QCA7000 checksum handling
  * net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
      net/sched/sch_cbq.c
  * ipv4: make exception cache less predictible
      net/ipv4/route.c
    bcma: Fix memory leak for internally-handled cores
    ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
    tty: serial: fsl_lpuart: fix the wrong mapbase value
    usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available
    usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
    i2c: mt65xx: fix IRQ check
  * CIFS: Fix a potencially linear read overflow
      fs/cifs/cifs_unicode.c
    mmc: moxart: Fix issue with uninitialized dma_slave_config
    mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
    i2c: s3c2410: fix IRQ check
    i2c: iop3xx: fix deferred probing
  * Bluetooth: add timeout sanity check to hci_inquiry
      net/bluetooth/hci_core.c
    usb: gadget: mv_u3d: request_irq() after initializing UDC
  * mac80211: Fix insufficient headroom issue for AMSDU
      net/mac80211/tx.c
    usb: phy: tahvo: add IRQ check
    usb: host: ohci-tmio: add IRQ check
  * Bluetooth: Move shutdown callback before flushing tx and rx queue
      net/bluetooth/hci_core.c
    usb: phy: twl6030: add IRQ checks
    usb: phy: fsl-usb: add IRQ check
    usb: gadget: udc: at91: add IRQ check
    drm/msm/dsi: Fix some reference counted resource leaks
  * Bluetooth: fix repeated calls to sco_sock_kill
      net/bluetooth/sco.c
    arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
    drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs
  * Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
      net/bluetooth/cmtp/cmtp.h
    soc: qcom: smsm: Fix missed interrupts if state changes while masked
  * PCI: PM: Enable PME if it can be signaled from D3cold
      drivers/pci/pci.c
  * PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
      drivers/pci/pci.c
    media: venus: venc: Fix potential null pointer dereference on pointer fmt
    media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
    i2c: highlander: add IRQ check
  * net: cipso: fix warnings in netlbl_cipsov4_add_std
      net/netlabel/netlabel_cipso_v4.c
  * tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
      net/ipv4/tcp_ipv4.c
  * Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
      net/bluetooth/sco.c
    media: go7007: remove redundant initialization
    media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
    media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
  * soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
      drivers/soc/rockchip/Kconfig
    media: TDA1997x: enable EDID support
    spi: sprd: Fix the wrong WDG_LOAD_VAL
  * certs: Trigger creation of RSA module signing key if it's not an RSA key
      certs/Makefile
    crypto: qat - use proper type for vf_mask
    clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel
  * lib/mpi: use kcalloc in mpi_resize
      lib/mpi/mpiutil.c
    spi: spi-pic32: Fix issue with uninitialized dma_slave_config
    spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
    m68k: emu: Fix invalid free in nfeth_cleanup()
  * udf_get_extendedattr() had no boundary checks.
      fs/udf/misc.c
  * fcntl: fix potential deadlock for &fasync_struct.fa_lock
      fs/fcntl.c
    crypto: qat - do not export adf_iov_putmsg()
    crypto: qat - fix naming for init/shutdown VF to PF notifications
    crypto: qat - fix reuse of completion variable
    crypto: qat - handle both source of interrupt in VF ISR
    crypto: qat - do not ignore errors from enable_vf2pf_comms()
    libata: fix ata_host_start()
    s390/cio: add dev_busid sysfs entry for each subchannel
  * power: supply: max17042_battery: fix typo in MAx17042_TOFF
      include/linux/power/max17042_battery.h
    nvme-rdma: don't update queue count when failing to set io queues
    bcache: add proper error unwinding in bcache_device_init
  * isofs: joliet: Fix iocharset=utf8 mount option
      fs/isofs/inode.c
      fs/isofs/isofs.h
      fs/isofs/joliet.c
  * udf: Check LVID earlier
      fs/udf/super.c
  * hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns()
      kernel/time/hrtimer.c
  * sched/deadline: Fix missing clock update in migrate_task_rq_dl()
      kernel/sched/deadline.c
    crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
    power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors
  * sched/deadline: Fix reset_on_fork reporting of DL tasks
      kernel/sched/deadline.c
      kernel/sched/sched.h
    crypto: mxs-dcp - Check for DMA mapping errors
  * regmap: fix the offset of register error log
      drivers/base/regmap/regmap.c
  * locking/mutex: Fix HANDOFF condition
      kernel/locking/mutex.c
  * PCI: Call Max Payload Size-related fixup quirks early
      drivers/pci/quirks.c
    x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions
    usb: mtu3: fix the wrong HS mult value
    usb: mtu3: use @mult for HS isoc or intr
    usb: host: xhci-rcar: Don't reload firmware after the completion
  * ALSA: usb-audio: Add registration quirk for JBL Quantum 800
      sound/usb/quirks.c
    Revert "btrfs: compression: don't try to compress if we don't have enough pages"
  * mm/page_alloc: speed up the iteration of max_order
      mm/page_alloc.c
    net: ll_temac: Remove left-over debug message
    powerpc/boot: Delete unneeded .globl _zimage_start
    powerpc/module64: Fix comment in R_PPC64_ENTRY handling
    crypto: talitos - reduce max key size for SEC1
  * SUNRPC/nfs: Fix return value for nfs4_callback_compound()
      fs/nfs/callback_xdr.c
      include/linux/sunrpc/svc.h
      net/sunrpc/svc.c
  * ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing table (v2)
      net/ipv4/icmp.c
    USB: serial: mos7720: improve OOM-handling in read_mos_reg()
  * igmp: Add ip_mc_list lock in ip_check_mc_rcu
      net/ipv4/igmp.c
    ARM: imx: fix missing 3rd argument in macro imx_mmdc_perf_init
    ARM: imx: add missing clk_disable_unprepare()
    media: stkwebcam: fix memory leak in stk_camera_probe
  * clk: fix build warning for orphan_list
      drivers/clk/clk.c
  * ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
      sound/core/pcm_lib.c
    ARM: 8918/2: only build return_address() if needed
  * cryptoloop: add a deprecation warning
      drivers/block/Kconfig
    perf/x86/amd/ibs: Work around erratum #1197
    perf/x86/intel/pt: Fix mask of num_address_ranges
    qede: Fix memset corruption
    net: macb: Add a NULL check on desc_ptp
    qed: Fix the VF msix vectors flow
    gpu: ipu-v3: Fix i.MX IPU-v3 offset calculations for (semi)planar U/V formats
    xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG
  * ext4: fix race writing to an inline_data file while its xattrs are changing
      fs/ext4/inline.c
    Merge 4.19.206 into android-4.19-stable
Linux 4.19.206
  * net: don't unconditionally copy_from_user a struct ifreq for socket ioctls
      include/linux/netdevice.h
      net/socket.c
    Revert "floppy: reintroduce O_NDELAY fix"
    KVM: x86/mmu: Treat NX as used (not reserved) for all !TDP shadow MMUs
    fbmem: add margin check to fb_check_caps()
    vt_kdsetmode: extend console locking
  * net/rds: dma_map_sg is entitled to merge entries
      net/rds/ib_frmr.c
    drm/nouveau/disp: power down unused DP links during init
  * drm: Copy drm_wait_vblank to user before returning
      drivers/gpu/drm/drm_ioc32.c
    qed: Fix null-pointer dereference in qed_rdma_create_qp()
    qed: qed ll2 race condition fixes
    vringh: Use wiov->used to check for read/write desc order
    virtio_pci: Support surprise removal of virtio pci device
    virtio: Improve vq->broken access to avoid any compiler optimization
  * opp: remove WARN when no valid OPPs remain
      drivers/opp/of.c
    usb: gadget: u_audio: fix race condition on endpoint stop
    net: hns3: fix get wrong pfc_en when query PFC configuration
    net: marvell: fix MVNETA_TX_IN_PRGRS bit number
    xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()'
  * ip_gre: add validation for csum_start
      net/ipv4/ip_gre.c
    e1000e: Fix the max snoop/no-snoop latency for 10M
    IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs()
  * usb: dwc3: gadget: Stop EP0 transfers during pullup disable
      drivers/usb/dwc3/gadget.c
  * usb: dwc3: gadget: Fix dwc3_calc_trbs_left()
      drivers/usb/dwc3/gadget.c
    USB: serial: option: add new VID/PID to support Fibocom FG150
    Revert "USB: serial: ch341: fix character loss at high transfer rates"
    can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters
  * once: Fix panic when module unload
      include/linux/once.h
      lib/once.c
  * netfilter: conntrack: collect all entries in one cycle
      net/netfilter/nf_conntrack_core.c
    ARC: Fix CONFIG_STACKDEPOT
  * bpf: Fix truncation handling for mod32 dst reg wrt zero
      kernel/bpf/verifier.c
  * bpf: Fix 32 bit src register truncation on div/mod
      include/linux/filter.h
      kernel/bpf/verifier.c
  * bpf: Do not use ax register in interpreter on div/mod
      kernel/bpf/core.c
  * net: qrtr: fix another OOB Read in qrtr_endpoint_post
      net/qrtr/qrtr.c

Bug: 201722185
Change-Id: Ib431fe52b39577bd49f14f4b28c49b54fa247c54
Signed-off-by: Wilson Sung <wilsonsung@google.com>
2021-10-27 08:44:16 +00:00
Tetsuo Handa
5f87c22d3d fbmem: don't allow too huge resolutions
commit 8c28051cdcbe9dfcec6bd0a4709d67a09df6edae upstream.

syzbot is reporting page fault at vga16fb_fillrect() [1], for
vga16fb_check_var() is failing to detect multiplication overflow.

  if (vxres * vyres > maxmem) {
    vyres = maxmem / vxres;
    if (vyres < yres)
      return -ENOMEM;
  }

Since no module would accept too huge resolutions where multiplication
overflow happens, let's reject in the common path.

Link: https://syzkaller.appspot.com/bug?extid=04168c8063cfdde1db5e [1]
Reported-by: syzbot <syzbot+04168c8063cfdde1db5e@syzkaller.appspotmail.com>
Debugged-by: Randy Dunlap <rdunlap@infradead.org>
Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Reviewed-by: Geert Uytterhoeven <geert+renesas@glider.be>
Cc: stable@vger.kernel.org
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/185175d6-227a-7b55-433d-b070929b262c@i-love.sakura.ne.jp
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-09-22 11:47:56 +02:00
George Kennedy
6be10fb6c1 fbmem: add margin check to fb_check_caps()
commit a49145acfb975d921464b84fe00279f99827d816 upstream.

A fb_ioctl() FBIOPUT_VSCREENINFO call with invalid xres setting
or yres setting in struct fb_var_screeninfo will result in a
KASAN: vmalloc-out-of-bounds failure in bitfill_aligned() as
the margins are being cleared. The margins are cleared in
chunks and if the xres setting or yres setting is a value of
zero upto the chunk size, the failure will occur.

Add a margin check to validate xres and yres settings.

Signed-off-by: George Kennedy <george.kennedy@oracle.com>
Reported-by: syzbot+e5fd3e65515b48c02a30@syzkaller.appspotmail.com
Reviewed-by: Dan Carpenter <dan.carpenter@oracle.com>
Cc: Dhaval Giani <dhaval.giani@oracle.com>
Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@samsung.com>
Link: https://patchwork.freedesktop.org/patch/msgid/1594149963-13801-1-git-send-email-george.kennedy@oracle.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-09-03 09:58:02 +02:00
Lucas Wei
728131a2be Merge android-4.19-stable (4.19.196) into android-msm-pixel-4.19-lts
Merge 4.19.196 into android-4.19-stable
Linux 4.19.196
    i2c: robotfuzz-osif: fix control-request directions
    nilfs2: fix memory leak in nilfs_sysfs_delete_device_group
    pinctrl: stm32: fix the reported number of GPIO lines per bank
    net: ll_temac: Avoid ndo_start_xmit returning NETDEV_TX_BUSY
    PCI: Add AMD RS690 quirk to enable 64-bit DMA
    net: qed: Fix memcpy() overflow of qed_dcbx_params()
    KVM: selftests: Fix kvm_check_cap() assertion
    r8169: Avoid memcpy() over-reading of ETH_SS_STATS
    sh_eth: Avoid memcpy() over-reading of ETH_SS_STATS
  * r8152: Avoid memcpy() over-reading of ETH_SS_STATS
      drivers/net/usb/r8152.c
  * net/packet: annotate accesses to po->ifindex
      net/packet/af_packet.c
  * net/packet: annotate accesses to po->bind
      net/packet/af_packet.c
    net: caif: fix memory leak in ldisc_open
  * inet: annotate date races around sk->sk_txhash
      include/net/sock.h
  * ping: Check return value of function 'ping_queue_rcv_skb'
      net/ipv4/ping.c
  * net: ethtool: clear heap allocations for ethtool function
      net/core/ethtool.c
    mac80211: drop multicast fragments
  * cfg80211: call cfg80211_leave_ocb when switching away from OCB
      net/wireless/util.c
    mac80211: remove warning in ieee80211_get_sband()
  * Revert "PCI: PM: Do not read power state in pci_enable_device_flags()"
      drivers/pci/pci.c
    MIPS: generic: Update node names to avoid unit addresses
  * Makefile: Move -Wno-unused-but-set-variable out of GCC only block
      Makefile
    ARM: 9081/1: fix gcc-10 thumb2-kernel regression
    drm/radeon: wait for moving fence after pinning
    drm/nouveau: wait for moving fence after pinning v2
  * module: limit enabling module.sig_enforce
      kernel/module.c
    x86/fpu: Reset state for all signal restore failures
  * usb: dwc3: core: fix kernel panic when do reboot
      drivers/usb/dwc3/core.c
  * usb: dwc3: debugfs: Add and remove endpoint dirs dynamically
      drivers/usb/dwc3/debug.h
      drivers/usb/dwc3/debugfs.c
      drivers/usb/dwc3/gadget.c
  * inet: use bigger hash table for IP ID generation
      net/ipv4/route.c
    can: bcm/raw/isotp: use per module netdevice notifier
    KVM: arm/arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST read
    tools headers UAPI: Sync linux/in.h copy with the kernel sources
    net: fec_ptp: add clock rate zero check
  * mm/slub.c: include swab.h
      mm/slub.c
  * mm/slub: clarify verification reporting
      mm/slub.c
    net: bridge: fix vlan tunnel dst refcnt when egressing
  * net: bridge: fix vlan tunnel dst null pointer dereference
      net/bridge/br_private.h
  * cfg80211: make certificate generation more robust
      net/wireless/Makefile
    dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc
    ARCv2: save ABI registers across signal handling
  * PCI: Work around Huawei Intelligent NIC VF FLR erratum
      drivers/pci/quirks.c
  * PCI: Add ACS quirk for Broadcom BCM57414 NIC
      drivers/pci/quirks.c
  * PCI: Mark some NVIDIA GPUs to avoid bus reset
      drivers/pci/quirks.c
  * PCI: Mark TI C667X to avoid bus reset
      drivers/pci/quirks.c
  * tracing: Do no increment trace_clock_global() by one
      kernel/trace/trace_clock.c
  * tracing: Do not stop recording comms if the trace file is being read
      kernel/trace/trace.c
  * tracing: Do not stop recording cmdlines when tracing is off
      kernel/trace/trace.c
  * usb: core: hub: Disable autosuspend for Cypress CY7C65632
      drivers/usb/core/hub.c
    can: mcba_usb: fix memory leak in mcba_usb
    can: bcm: fix infoleak in struct bcm_msg_head
    hwmon: (scpi-hwmon) shows the negative temperature properly
    radeon: use memcpy_to/fromio for UVD fw upload
    pinctrl: ralink: rt2880: avoid to error in calls is pin is already enabled
    ASoC: rt5659: Fix the lost powers for the HDA header
    net: ethernet: fix potential use-after-free in ec_bhf_remove
  * icmp: don't send out ICMP messages with a source address of 0.0.0.0
      include/uapi/linux/in.h
      net/ipv4/icmp.c
    net: cdc_eem: fix tx fixup skb leak
    net: hamradio: fix memory leak in mkiss_close
    be2net: Fix an error handling path in 'be_probe()'
  * net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock
      net/unix/af_unix.c
  * net: ipv4: fix memory leak in ip_mc_add1_src
      net/ipv4/igmp.c
    net: fec_ptp: fix issue caused by refactor the fec_devtype
    net: usb: fix possible use-after-free in smsc75xx_bind
  * net: cdc_ncm: switch to eth%d interface naming
      drivers/net/usb/cdc_ncm.c
  * ptp: improve max_adj check against unreasonable values
      drivers/ptp/ptp_clock.c
      include/linux/ptp_clock_kernel.h
  * ptp: ptp_clock: Publish scaled_ppm_to_ppb
      drivers/ptp/ptp_clock.c
      include/linux/ptp_clock_kernel.h
  * net: qrtr: fix OOB Read in qrtr_endpoint_post
      net/qrtr/qrtr.c
    netxen_nic: Fix an error handling path in 'netxen_nic_probe()'
    qlcnic: Fix an error handling path in 'qlcnic_probe()'
  * net: make get_net_ns return error if NET_NS is disabled
      include/linux/socket.h
      include/net/net_namespace.h
      net/core/net_namespace.c
      net/socket.c
  * net: add documentation to socket.c
      include/linux/net.h
      include/linux/socket.h
      net/socket.c
    net: stmmac: dwmac1000: Fix extended MAC address registers definition
    alx: Fix an error handling path in 'alx_probe()'
    sch_cake: Fix out of bounds when parsing TCP options and header
    netfilter: synproxy: Fix out of bounds when parsing TCP options
    net/mlx5e: Block offload of outer header csum for UDP tunnels
    net/mlx5e: Remove dependency in IPsec initialization flows
  * rtnetlink: Fix regression in bridge VLAN configuration
      net/core/rtnetlink.c
  * udp: fix race between close() and udp_abort()
      net/ipv4/udp.c
      net/ipv6/udp.c
    net: rds: fix memory leak in rds_recvmsg
  * net: ipv4: fix memory leak in netlbl_cipsov4_add_std
      net/ipv4/cipso_ipv4.c
    batman-adv: Avoid WARN_ON timing related checks
    mm/memory-failure: make sure wait for page writeback in memory_failure
    afs: Fix an IS_ERR() vs NULL check
    dmaengine: stedma40: add missing iounmap() on error in d40_probe()
  * dmaengine: QCOM_HIDMA_MGMT depends on HAS_IOMEM
      drivers/dma/qcom/Kconfig
  * dmaengine: ALTERA_MSGDMA depends on HAS_IOMEM
      drivers/dma/Kconfig
  * fib: Return the correct errno code
      net/core/fib_rules.c
  * net: Return the correct errno code
      net/compat.c
    net/x25: Return the correct errno code
  * rtnetlink: Fix missing error code in rtnl_bridge_notify()
      net/core/rtnetlink.c
  * net: ipconfig: Don't override command-line hostnames or domains
      net/ipv4/ipconfig.c
    nvme-loop: check for NVME_LOOP_Q_LIVE in nvme_loop_destroy_admin_queue()
    nvme-loop: clear NVME_LOOP_Q_LIVE when nvme_loop_configure_admin_queue() fails
    nvme-loop: reset queue count to 1 in nvme_loop_destroy_io_queues()
  * scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V
      drivers/scsi/scsi_devinfo.c
    ethernet: myri10ge: Fix missing error code in myri10ge_probe()
    scsi: target: core: Fix warning on realtime kernels
    gfs2: Fix use-after-free in gfs2_glock_shrink_scan
    HID: gt683r: add missing MODULE_DEVICE_TABLE
    gfs2: Prevent direct-I/O write fallback errors from getting lost
    ARM: OMAP2+: Fix build warning when mmc_omap is not built
  * HID: usbhid: fix info leak in hid_submit_ctrl
      drivers/hid/usbhid/hid-core.c
      include/linux/hid.h
  * HID: Add BUS_VIRTUAL to hid_connect logging
      drivers/hid/hid-core.c
    HID: hid-sensor-hub: Return error for hid_set_field() failure
  * HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for Saitek X65
      drivers/hid/hid-ids.h
      drivers/hid/hid-quirks.c
    net: ieee802154: fix null deref in parse dev addr
  * FROMGIT: bpf: Do not change gso_size during bpf_skb_change_proto()
      net/core/filter.c
    ANDROID: gki_config: disable per-cgroup pressure tracking
  * BACKPORT: cgroup: make per-cgroup pressure stall tracking configurable
      include/linux/cgroup-defs.h
      include/linux/cgroup.h
      kernel/cgroup/cgroup.c
      kernel/sched/psi.c
  * ANDROID: selinux: modify RTM_GETNEIGH{TBL}
      security/selinux/include/classmap.h
      security/selinux/include/security.h
      security/selinux/nlmsgtab.c
      security/selinux/ss/policydb.c
      security/selinux/ss/policydb.h
      security/selinux/ss/services.c
    BACKPORT: x86, lto: Pass -stack-alignment only on LLD < 13.0.0
  * ANDROID: Add CONFIG_LLD_VERSION
      init/Kconfig
      scripts/lld-version.sh
    ANDROID: GKI: Update the ABI XML
    ANDROID: GKI: Update the symbol list
  * Revert "perf/core: Fix endless multiplex timer"
      kernel/events/core.c
    Merge 4.19.195 into android-4.19-stable
Linux 4.19.195
  * proc: only require mm_struct for writing
      fs/proc/base.c
  * tracing: Correct the length check which causes memory corruption
      kernel/trace/trace.c
    ftrace: Do not blindly read the ip address in ftrace_bug()
  * scsi: core: Only put parent device if host state differs from SHOST_CREATED
      drivers/scsi/hosts.c
  * scsi: core: Put .shost_dev in failure path if host state changes to RUNNING
      drivers/scsi/hosts.c
  * scsi: core: Fix error handling of scsi_host_alloc()
      drivers/scsi/hosts.c
    NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error.
    NFSv4: Fix second deadlock in nfs4_evict_inode()
    NFS: Fix use-after-free in nfs4_init_client()
  * kvm: fix previous commit for 32-bit builds
      include/linux/kvm_host.h
    perf session: Correct buffer copying when peeking events
    NFSv4: Fix deadlock between nfs4_evict_inode() and nfs4_opendata_get_inode()
    NFS: Fix a potential NULL dereference in nfs_get_client()
    IB/mlx5: Fix initializing CQ fragments buffer
  * sched/fair: Make sure to update tg contrib for blocked load
      kernel/sched/fair.c
  * perf: Fix data race between pin_count increment/decrement
      kernel/events/core.c
  * vmlinux.lds.h: Avoid orphan section with !SMP
      include/asm-generic/vmlinux.lds.h
  * RDMA/mlx4: Do not map the core_clock page to user space unless enabled
      include/linux/mlx4/device.h
    regulator: max77620: Use device_set_of_node_from_dev()
  * regulator: core: resolve supply for boot-on/always-on regulators
      drivers/regulator/core.c
  * usb: fix various gadget panics on 10gbps cabling
      drivers/usb/gadget/config.c
  * usb: fix various gadgets null ptr deref on 10gbps cabling.
      drivers/usb/gadget/function/f_hid.c
    usb: gadget: eem: fix wrong eem header operation
    USB: serial: cp210x: fix alternate function for CP2102N QFN20
    USB: serial: quatech2: fix control-request directions
    USB: serial: omninet: add device id for Zyxel Omni 56K Plus
    USB: serial: ftdi_sio: add NovaTech OrionMX product ID
  * usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind
      drivers/usb/gadget/function/f_fs.c
    usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path
  * usb: dwc3: ep0: fix NULL pointer exception
      drivers/usb/dwc3/ep0.c
  * usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms
      include/linux/usb/pd.h
  * usb: f_ncm: only first packet of aggregate needs to start timer
      drivers/usb/gadget/function/f_ncm.c
  * USB: f_ncm: ncm_bitrate (speed) is unsigned
      drivers/usb/gadget/function/f_ncm.c
  * cgroup1: don't allow '\n' in renaming
      kernel/cgroup/cgroup-v1.c
    btrfs: return value from btrfs_mark_extent_written() in case of error
    staging: rtl8723bs: Fix uninitialized variables
  * kvm: avoid speculation-based attacks from out-of-range memslot accesses
      include/linux/kvm_host.h
  * drm: Lock pointer access in drm_master_release()
      drivers/gpu/drm/drm_auth.c
  * drm: Fix use-after-free read in drm_getunique()
      drivers/gpu/drm/drm_ioctl.c
    ARM: dts: imx6q-dhcom: Add PU,VDD1P1,VDD2P5 regulators
    ARM: dts: imx6qdl-sabresd: Assign corresponding power supply for LDOs
    i2c: mpc: implement erratum A-004447 workaround
    i2c: mpc: Make use of i2c_recover_bus()
    powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P1010 i2c controllers
    powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P2041 i2c controllers
    bnx2x: Fix missing error code in bnx2x_iov_init_one()
    MIPS: Fix kernel hang under FUNCTION_GRAPH_TRACER and PREEMPT_TRACER
    nvme-fabrics: decode host pathing error for connect
    net: appletalk: cops: Fix data race in cops_probe1
    net: macb: ensure the device is available before accessing GEMGXL control registers
    scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal
    scsi: vmw_pvscsi: Set correct residual data length
    scsi: bnx2fc: Return failure if io_req is already in ABTS processing
    RDS tcp loopback connection can hang
    net/qla3xxx: fix schedule while atomic in ql_sem_spinlock
  * wq: handle VM suspension in stall detection
      kernel/workqueue.c
  * cgroup: disable controllers at parse time
      kernel/cgroup/cgroup.c
  * net: mdiobus: get rid of a BUG_ON()
      drivers/net/phy/mdio_bus.c
  * netlink: disable IRQs for netlink_lock_table()
      net/netlink/af_netlink.c
  * bonding: init notify_work earlier to avoid uninitialized use
      drivers/net/bonding/bond_main.c
    isdn: mISDN: netjet: Fix crash in nj_probe:
    ASoC: sti-sas: add missing MODULE_DEVICE_TABLE
    ASoC: Intel: bytcr_rt5640: Add quirk for the Lenovo Miix 3-830 tablet
    ASoC: Intel: bytcr_rt5640: Add quirk for the Glavey TM800A550L tablet
    net/nfc/rawsock.c: fix a permission check bug
  * proc: Track /proc/$pid/attr/ opener mm_struct
      fs/proc/base.c
  * perf/core: Fix endless multiplex timer
      kernel/events/core.c
  * Revert "perf/cgroups: Don't rotate events for cgroups unnecessarily"
      include/linux/perf_event.h
      kernel/events/core.c
  * Revert "perf/core: Fix corner case in perf_rotate_context()"
      kernel/events/core.c
    Merge 4.19.194 into android-4.19-stable
Linux 4.19.194
    xen-pciback: redo VF placement in the virtual topology
  * sched/fair: Optimize select_idle_cpu
      kernel/sched/fair.c
    ACPI: EC: Look for ECDT EC after calling acpi_load_tables()
    ACPI: probe ECDT before loading AML tables regardless of module-level code flag
    KVM: arm64: Fix debug register indexing
    KVM: SVM: Truncate GPR value for DR and CR accesses in !64-bit mode
    btrfs: fix unmountable seed device after fstrim
  * perf/core: Fix corner case in perf_rotate_context()
      kernel/events/core.c
  * perf/cgroups: Don't rotate events for cgroups unnecessarily
      include/linux/perf_event.h
      kernel/events/core.c
    bnxt_en: Remove the setting of dev_port.
    selftests/bpf: Avoid running unprivileged tests with alignment requirements
    selftests/bpf: add "any alignment" annotation for some tests
    bpf: Apply F_NEEDS_EFFICIENT_UNALIGNED_ACCESS to more ACCEPT test cases.
    bpf: Make more use of 'any' alignment in test_verifier.c
    bpf: Adjust F_NEEDS_EFFICIENT_UNALIGNED_ACCESS handling in test_verifier.c
  * bpf: Add BPF_F_ANY_ALIGNMENT.
      include/uapi/linux/bpf.h
      kernel/bpf/syscall.c
      kernel/bpf/verifier.c
    selftests/bpf: Generalize dummy program types
    bpf: test make sure to run unpriv test cases in test_verifier
    bpf: fix test suite to enable all unpriv program types
    mm, hugetlb: fix simple resv_huge_pages underflow on UFFDIO_COPY
    btrfs: fixup error handling in fixup_inode_link_counts
    btrfs: return errors from btrfs_del_csums in cleanup_ref_head
    btrfs: fix error handling in btrfs_del_csums
    btrfs: mark ordered extent and inode with error if we fail to finish
    x86/apic: Mark _all_ legacy interrupts when IO/APIC is missing
    nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect
    ocfs2: fix data corruption by fallocate
  * pid: take a reference when initializing `cad_pid`
      init/main.c
    usb: dwc2: Fix build in periphal-only mode
  * ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed
      fs/ext4/extents.c
    ALSA: hda: Fix for mute key LED for HP Pavilion 15-CK0xx
  * ALSA: timer: Fix master timer notification
      sound/core/timer.c
  * HID: multitouch: require Finger field to mark Win8 reports as MT
      drivers/hid/hid-multitouch.c
    net: caif: fix memory leak in cfusbl_device_notify
    net: caif: fix memory leak in caif_device_notify
  * net: caif: add proper error handling
      include/net/caif/caif_dev.h
      include/net/caif/cfcnfg.h
  * net: caif: added cfserl_release function
      include/net/caif/cfserl.h
  * Bluetooth: use correct lock to prevent UAF of hdev object
      net/bluetooth/hci_sock.c
  * Bluetooth: fix the erroneous flush_work() order
      net/bluetooth/hci_core.c
  * tipc: fix unique bearer names sanity check
      net/tipc/bearer.c
  * tipc: add extack messages for bearer/media failure
      net/tipc/bearer.c
    ixgbevf: add correct exception tracing for XDP
    ieee802154: fix error return code in ieee802154_llsec_getparams()
    ieee802154: fix error return code in ieee802154_add_iface()
    netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches
    HID: i2c-hid: fix format string mismatch
    HID: pidff: fix error return code in hid_pidff_init()
    ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service
    vfio/platform: fix module_put call in error flow
    samples: vfio-mdev: fix error handing in mdpy_fb_probe()
  * vfio/pci: zap_vma_ptes() needs MMU
      drivers/vfio/pci/Kconfig
    vfio/pci: Fix error return code in vfio_ecap_init()
    efi: cper: fix snprintf() use in cper_dimm_err_location()
    efi: Allow EFI_MEMORY_XP and EFI_MEMORY_RO both to be cleared
  * nl80211: validate key indexes for cfg80211_registered_device
      net/wireless/core.h
      net/wireless/nl80211.c
      net/wireless/util.c
  * ALSA: usb: update old-style static const declaration
      sound/usb/mixer_quirks.c
  * net: usb: cdc_ncm: don't spew notifications
      drivers/net/usb/cdc_ncm.c
      include/linux/usb/usbnet.h
    Merge 4.19.193 into android-4.19-stable
Linux 4.19.193
  * usb: core: reduce power-on-good delay time of root hub
      drivers/usb/core/hub.h
    net: hns3: check the return of skb_checksum_help()
    drivers/net/ethernet: clean up unused assignments
  * hugetlbfs: hugetlb_fault_mutex_hash() cleanup
      include/linux/hugetlb.h
    MIPS: ralink: export rt_sysc_membase for rt2880_wdt.c
    MIPS: alchemy: xxs1500: add gpio-au1000.h header file
    sch_dsmark: fix a NULL deref in qdisc_reset()
  * ipv6: record frag_max_size in atomic fragments in input path
      net/ipv6/reassembly.c
    scsi: libsas: Use _safe() loop in sas_resume_port()
    ixgbe: fix large MTU request from VF
  * bpf: Set mac_len in bpf_skb_change_head
      net/core/filter.c
    ASoC: cs35l33: fix an error code in probe()
    staging: emxx_udc: fix loop in _nbu2ss_nuke()
  * mld: fix panic in mld_newpack()
      net/ipv6/mcast.c
    net: bnx2: Fix error return code in bnx2_init_board()
    openvswitch: meter: fix race when getting now_ms.
    net: mdio: octeon: Fix some double free issues
    net: mdio: thunder: Fix a double free issue in the .remove function
    net: fec: fix the potential memory leak in fec_enet_init()
    net: dsa: fix error code getting shifted with 4 in dsa_slave_get_sset_count
    net: netcp: Fix an error message
    drm/amdgpu: Fix a use-after-free
    drm/amd/amdgpu: fix refcount leak
    drm/amd/display: Disconnect non-DP with no EDID
    SMB3: incorrect file id in requests compounded with open
    platform/x86: intel_punit_ipc: Append MODULE_DEVICE_TABLE for ACPI
    platform/x86: hp-wireless: add AMD's hardware id to the supported list
    btrfs: do not BUG_ON in link_to_fixup_dir
    openrisc: Define memory barrier mb
    scsi: BusLogic: Fix 64-bit system enumeration error for Buslogic
    media: gspca: properly check for errors in po1030_probe()
    media: dvb: Add check on sp8870_readreg return
    ASoC: cs43130: handle errors in cs43130_probe() properly
    libertas: register sysfs groups properly
    dmaengine: qcom_hidma: comment platform_driver_register call
    isdn: mISDNinfineon: check/cleanup ioremap failure correctly in setup_io
    char: hpet: add checks after calling ioremap
    net: caif: remove BUG_ON(dev == NULL) in caif_xmit
    net: fujitsu: fix potential null-ptr-deref
    serial: max310x: unregister uart driver in case of failure and abort
    platform/x86: hp_accel: Avoid invoking _INI to speed up resume
    perf jevents: Fix getting maximum number of fds
    i2c: i801: Don't generate an interrupt on bus reset
    i2c: s3c2410: fix possible NULL pointer deref on read message after write
    net: dsa: fix a crash if ->get_sset_count() fails
    net: dsa: mt7530: fix VLAN traffic leaks
  * tipc: skb_linearize the head skb when reassembling msgs
      net/tipc/msg.c
  * Revert "net:tipc: Fix a double free in tipc_sk_mcast_rcv"
      net/tipc/socket.c
    net/mlx4: Fix EEPROM dump support
    drm/meson: fix shutdown crash when component not probed
    NFSv4: Fix v4.0/v4.1 SEEK_DATA return -ENOTSUPP when set NFS_V4_2 config
    NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()
    NFS: fix an incorrect limit in filelayout_decode_layout()
    Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails
    spi: mt7621: Don't leak SPI master in probe error path
    spi: mt7621: Disable clock in probe error path
    spi: gpio: Don't leak SPI master in probe error path
  * bpf: No need to simulate speculative domain for immediates
      kernel/bpf/verifier.c
  * bpf: Fix mask direction swap upon off reg sign change
      kernel/bpf/verifier.c
  * bpf: Wrap aux data inside bpf_sanitize_info container
      kernel/bpf/verifier.c
  * bpf: Fix leakage of uninitialized bpf stack under speculation
      include/linux/bpf_verifier.h
      kernel/bpf/verifier.c
    bpf: Update selftests to reflect new error states
  * bpf: Tighten speculative pointer arithmetic mask
      kernel/bpf/verifier.c
  * bpf: Move sanitize_val_alu out of op switch
      kernel/bpf/verifier.c
  * bpf: Refactor and streamline bounds check into helper
      kernel/bpf/verifier.c
  * bpf: Improve verifier error messages for users
      kernel/bpf/verifier.c
  * bpf: Rework ptr_limit into alu_limit and add common error path
      kernel/bpf/verifier.c
  * bpf: Ensure off_reg has no mixed signed bounds for all types
      kernel/bpf/verifier.c
  * bpf: Move off_reg into sanitize_ptr_alu
      kernel/bpf/verifier.c
    bpf, test_verifier: switch bpf_get_stack's 0 s> r8 test
    bpf: Test_verifier, bpf_get_stack return value add <0
  * bpf: extend is_branch_taken to registers
      kernel/bpf/verifier.c
    selftests/bpf: add selftest part of "bpf: improve verifier branch analysis"
    selftests/bpf: Test narrow loads with off > 0 in test_verifier
    bpf, selftests: Fix up some test_verifier cases for unprivileged
    bpf: fix up selftests after backports were fixed
    net: usb: fix memory leak in smsc75xx_bind
    usb: gadget: udc: renesas_usb3: Fix a race in usb3_start_pipen()
  * usb: dwc3: gadget: Properly track pending and queued SG
      drivers/usb/dwc3/gadget.c
    USB: serial: pl2303: add device id for ADLINK ND-6530 GC
    USB: serial: ftdi_sio: add IDs for IDS GmbH Products
    USB: serial: option: add Telit LE910-S1 compositions 0x7010, 0x7011
    USB: serial: ti_usb_3410_5052: add startech.com device id
    serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'
    serial: sh-sci: Fix off-by-one error in FIFO threshold register setting
  * USB: usbfs: Don't WARN about excessively large memory allocations
      drivers/usb/core/devio.c
    USB: trancevibrator: fix control-request direction
    iio: adc: ad7793: Add missing error code in ad7793_setup()
    staging: iio: cdc: ad7746: avoid overwrite of num_channels
    mei: request autosuspend after sending rx flow control
    thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue
    misc/uss720: fix memory leak in uss720_probe
    kgdb: fix gcc-11 warnings harder
  * dm snapshot: properly fix a crash when an origin has no snapshots
      drivers/md/dm-snap.c
    ath10k: Validate first subframe of A-MSDU before processing the list
    mac80211: extend protection against mixed key and fragment cache attacks
    mac80211: do not accept/forward invalid EAPOL frames
    mac80211: prevent attacks on TKIP/WEP as well
    mac80211: check defrag PN against current frame
    mac80211: add fragment cache to sta_info
    mac80211: drop A-MSDUs on old ciphers
  * cfg80211: mitigate A-MSDU aggregation attacks
      net/wireless/util.c
  * mac80211: properly handle A-MSDUs that start with an RFC 1042 header
      include/net/cfg80211.h
      net/wireless/util.c
    mac80211: prevent mixed key and fragment cache attacks
    mac80211: assure all fragments are encrypted
    net: hso: fix control-request directions
  * proc: Check /proc/$pid/attr/ writes against file opener
      fs/proc/base.c
    perf intel-pt: Fix transaction abort handling
    perf intel-pt: Fix sample instruction bytes
    iommu/vt-d: Fix sysfs leak in alloc_iommu()
    NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()
    cifs: set server->cipher_type to AES-128-CCM for SMB3.0
  * NFC: nci: fix memory leak in nci_allocate_device
      include/net/nfc/nci_core.h
  * usb: dwc3: gadget: Enable suspend events
      drivers/usb/dwc3/gadget.c
  * mm, vmstat: drop zone->lock in /proc/pagetypeinfo
      mm/vmstat.c
    Merge 4.19.192 into android-4.19-stable
  * Revert "spi: Fix use-after-free with devm_spi_alloc_*"
      drivers/spi/spi.c
      include/linux/spi/spi.h
  * Revert "modules: inherit TAINT_PROPRIETARY_MODULE"
      include/linux/module.h
      kernel/module.c
Linux 4.19.192
  * Bluetooth: SMP: Fail if remote and local public keys are identical
      net/bluetooth/smp.c
    video: hgafb: correctly handle card detect failure during probe
    tty: vt: always invoke vc->vc_sw->con_resize callback
  * vt: Fix character height handling with VT_RESIZEX
      include/linux/console_struct.h
    vgacon: Record video mode changes with VT_RESIZEX
    video: hgafb: fix potential NULL pointer dereference
    qlcnic: Add null check after calling netdev_alloc_skb
    leds: lp5523: check return value of lp5xx_read and jump to cleanup code
    net: rtlwifi: properly check for alloc_workqueue() failure
    scsi: ufs: handle cleanup correctly on devm_reset_control_get error
    net: stmicro: handle clk_prepare() failure during init
    ethernet: sun: niu: fix missing checks of niu_pci_eeprom_read()
    Revert "niu: fix missing checks of niu_pci_eeprom_read"
    Revert "qlcnic: Avoid potential NULL pointer dereference"
    Revert "rtlwifi: fix a potential NULL pointer dereference"
    Revert "media: rcar_drif: fix a memory disclosure"
    cdrom: gdrom: initialize global variable at init time
    cdrom: gdrom: deallocate struct gdrom_unit fields in remove_gdrom
    Revert "gdrom: fix a memory leak bug"
    Revert "scsi: ufs: fix a missing check of devm_reset_control_get"
  * Revert "ecryptfs: replace BUG_ON with error handling code"
      fs/ecryptfs/crypto.c
    Revert "video: imsttfb: fix potential NULL pointer dereferences"
    Revert "hwmon: (lm80) fix a missing check of bus read in lm80 probe"
    Revert "leds: lp5523: fix a missing check of return value of lp55xx_read"
    Revert "net: stmicro: fix a missing check of clk_prepare"
    Revert "video: hgafb: fix potential NULL pointer dereference"
  * dm snapshot: fix crash with transient storage and zero chunk size
      drivers/md/dm-snap.c
    xen-pciback: reconfigure also from backend watch handler
    Revert "serial: mvebu-uart: Fix to avoid a potential NULL pointer dereference"
    rapidio: handle create_workqueue() failure
    Revert "rapidio: fix a NULL pointer dereference when create_workqueue() fails"
    ALSA: hda/realtek: Add some CLOVE SSIDs of ALC293
    ALSA: hda/realtek: reset eapd coeff to default value for alc287
    Revert "ALSA: sb8: add a check for request_region"
  * ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro
      sound/firewire/Kconfig
  * ALSA: usb-audio: Validate MS endpoint descriptors
      sound/usb/midi.c
    ALSA: dice: fix stream format at middle sampling rate for Alesis iO 26
    ALSA: line6: Fix racy initialization of LINE6 MIDI
    ALSA: dice: fix stream format for TC Electronic Konnekt Live at high sampling transfer frequency
    cifs: fix memory leak in smb2_copychunk_range
  * locking/mutex: clear MUTEX_FLAGS if wait_list is empty due to signal
      kernel/locking/mutex.c
      kernel/locking/mutex.h
    nvmet: seset ns->file when open fails
  * ptrace: make ptrace() fail if the tracee changed its pid unexpectedly
      kernel/ptrace.c
    platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios
    RDMA/mlx5: Recover from fatal event in dual port mode
    scsi: qla2xxx: Fix error return code in qla82xx_write_flash_dword()
    RDMA/rxe: Clear all QP fields if creation failed
    openrisc: Fix a memory leak
    firmware: arm_scpi: Prevent the ternary sign expansion bug

Bug: 192919066
Change-Id: I94d2e40c5024fc0f1b6fac206b04c73765df4cb0
Signed-off-by: Lucas Wei <lucaswei@google.com>
2021-08-03 17:13:29 +08:00
Lucas Wei
7ec4bc1d47 Merge android-4.19-stable (4.19.191) into android-msm-pixel-4.19-lts
Merge 4.19.191 into android-4.19-stable
Linux 4.19.191
    scripts: switch explicitly to Python 3
    tweewide: Fix most Shebang lines
  * KVM: arm64: Initialize VCPU mdcr_el2 before loading it
      arch/arm64/include/asm/kvm_host.h
  * iomap: fix sub-page uptodate handling
      fs/iomap.c
      include/linux/iomap.h
  * ipv6: remove extra dev_hold() for fallback tunnels
      net/ipv6/ip6_tunnel.c
      net/ipv6/ip6_vti.c
      net/ipv6/sit.c
  * ip6_tunnel: sit: proper dev_{hold|put} in ndo_[un]init methods
      net/ipv6/ip6_tunnel.c
  * sit: proper dev_{hold|put} in ndo_[un]init methods
      net/ipv6/sit.c
    ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
    net: stmmac: Do not enable RX FIFO overflow interrupts
    lib: stackdepot: turn depot_lock spinlock to raw_spinlock
  * block: reexpand iov_iter after read/write
      fs/block_dev.c
    ALSA: hda: generic: change the DAC ctl name for LO+SPK or LO+HP
    gpiolib: acpi: Add quirk to ignore EC wakeups on Dell Venue 10 Pro 5055
    scsi: target: tcmu: Return from tcmu_handle_completions() if cmd_id not found
    ceph: fix fscache invalidation
    riscv: Workaround mcount name prior to clang-13
    scripts/recordmcount.pl: Fix RISC-V regex for clang
    ARM: 9075/1: kernel: Fix interrupted SMC calls
    um: Mark all kernel symbols as local
    Input: silead - add workaround for x86 BIOS-es which bring the chip up in a stuck state
    Input: elants_i2c - do not bind to i2c-hid compatible ACPI instantiated devices
    ACPI / hotplug / PCI: Fix reference count leak in enable_slot()
    ARM: 9066/1: ftrace: pause/unpause function graph tracer in cpu_suspend()
  * PCI: thunder: Fix compile testing
      drivers/pci/controller/pci-thunder-ecam.c
      drivers/pci/controller/pci-thunder-pem.c
      drivers/pci/pci.h
    xsk: Simplify detection of empty and full rings
    pinctrl: ingenic: Improve unreachable code generation
    isdn: capi: fix mismatched prototypes
    cxgb4: Fix the -Wmisleading-indentation warning
    usb: sl811-hcd: improve misleading indentation
    kgdb: fix gcc-11 warning on indentation
    x86/msr: Fix wr/rdmsr_safe_regs_on_cpu() prototypes
    nvme: do not try to reconfigure APST when the controller is not live
    clk: exynos7: Mark aclk_fsys1_200 as critical
  * netfilter: conntrack: Make global sysctls readonly in non-init netns
      net/netfilter/nf_conntrack_standalone.c
  * kobject_uevent: remove warning in init_uevent_argv()
      lib/kobject_uevent.c
    thermal/core/fair share: Lock the thermal zone while looping over instances
    MIPS: Avoid handcoded DIVU in `__div64_32' altogether
    MIPS: Avoid DIVU in `__div64_32' is result would be zero
    MIPS: Reinstate platform `__div64_32' handler
  * FDDI: defxx: Make MMIO the configuration default except for EISA
      drivers/net/fddi/Kconfig
    KVM: x86: Cancel pvclock_gtod_work on module removal
    cdc-wdm: untangle a circular dependency between callback and softint
    iio: tsl2583: Fix division by a zero lux_val
    iio: gyro: mpu3050: Fix reported temperature value
  * xhci: Add reset resume quirk for AMD xhci controller.
      drivers/usb/host/xhci-pci.c
  * xhci: Do not use GFP_KERNEL in (potentially) atomic context
      drivers/usb/host/xhci.c
  * usb: dwc3: gadget: Return success always for kick transfer in ep queue
      drivers/usb/dwc3/gadget.c
  * usb: core: hub: fix race condition about TRSMRCY of resume
      drivers/usb/core/hub.c
    usb: dwc2: Fix gadget DMA unmap direction
  * usb: xhci: Increase timeout for HC halt
      drivers/usb/host/xhci-ext-caps.h
    usb: dwc3: pci: Enable usb2-gadget-lpm-disable for Intel Merrifield
    usb: dwc3: omap: improve extcon initialization
  * blk-mq: Swap two calls in blk_mq_exit_queue()
      block/blk-mq.c
    ACPI: scan: Fix a memory leak in an error handling path
    usb: fotg210-hcd: Fix an error message
    iio: proximity: pulsedlight: Fix rumtime PM imbalance on error
    drm/radeon/dpm: Disable sclk switching on Oland when two 4K 60Hz monitors are connected
  * userfaultfd: release page in error path to avoid BUG_ON
      mm/shmem.c
    squashfs: fix divide error in calculate_skip()
    hfsplus: prevent corruption in shrinking truncate
    powerpc/64s: Fix crashes when toggling entry flush barrier
    powerpc/64s: Fix crashes when toggling stf barrier
    ARC: entry: fix off-by-one error in syscall number validation
    i40e: Fix use-after-free in i40e_client_subtask()
    netfilter: nftables: avoid overflows in nft_hash_buckets()
    kernel: kexec_file: fix error return code of kexec_calculate_store_digests()
  * sched/fair: Fix unfairness caused by missing load decay
      kernel/sched/fair.c
    netfilter: nfnetlink_osf: Fix a missing skb_header_pointer() NULL check
    smc: disallow TCP_ULP in smc_setsockopt()
  * net: fix nla_strcmp to handle more then one trailing null character
      lib/nlattr.c
    ksm: fix potential missing rmap_item for stable_node
    mm/hugeltb: handle the error case in hugetlb_fix_reserve_counts()
    khugepaged: fix wrong result value for trace_mm_collapse_huge_page_isolate()
    drm/radeon: Avoid power table parsing memory leaks
    drm/radeon: Fix off-by-one power_state index heap overwrite
  * netfilter: xt_SECMARK: add new revision to fix structure layout
      include/uapi/linux/netfilter/xt_SECMARK.h
      net/netfilter/xt_SECMARK.c
  * sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b
      net/sctp/sm_statefuns.c
    ethernet:enic: Fix a use after free bug in enic_hard_start_xmit
  * sctp: do asoc update earlier in sctp_sf_do_dupcook_a
      net/sctp/sm_statefuns.c
    net: hns3: disable phy loopback setting in hclge_mac_start_phy
    rtc: ds1307: Fix wday settings for rx8130
    NFSv4.2 fix handling of sr_eof in SEEK's reply
    pNFS/flexfiles: fix incorrect size check in decode_nfs_fh()
    PCI: endpoint: Fix missing destroy_workqueue()
    NFS: Deal correctly with attribute generation counter overflow
    NFSv4.2: Always flush out writes in nfs42_proc_fallocate()
  * rpmsg: qcom_glink_native: fix error return code of qcom_glink_rx_data()
      drivers/rpmsg/qcom_glink_native.c
    ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook
  * PCI: Release OF node in pci_scan_device()'s error path
      drivers/pci/probe.c
    PCI: iproc: Fix return value of iproc_msi_irq_domain_alloc()
  * f2fs: fix a redundant call to f2fs_balance_fs if an error occurs
      fs/f2fs/inline.c
    ASoC: rt286: Make RT286_SET_GPIO_* readable and writable
    ia64: module: fix symbolizer crash on fdescr
    net: ethernet: mtk_eth_soc: fix RX VLAN offload
    powerpc/iommu: Annotate nested lock for lockdep
    wl3501_cs: Fix out-of-bounds warnings in wl3501_mgmt_join
    wl3501_cs: Fix out-of-bounds warnings in wl3501_send_pkt
    powerpc/pseries: Stop calling printk in rtas_stop_self()
    samples/bpf: Fix broken tracex1 due to kprobe argument change
  * ethtool: ioctl: Fix out-of-bounds warning in store_link_ksettings_for_user()
      net/core/ethtool.c
    ASoC: rt286: Generalize support for ALC3263 codec
    powerpc/smp: Set numa node before updating mask
  * sctp: Fix out-of-bounds warning in sctp_process_asconf_param()
      net/sctp/sm_make_chunk.c
    kconfig: nconf: stop endless search loops
    selftests: Set CC to clang in lib.mk if LLVM is set
    cuse: prevent clone
    pinctrl: samsung: use 'int' for register masks in Exynos
    mac80211: clear the beacon's CRC after channel switch
  * i2c: Add I2C_AQ_NO_REP_START adapter quirk
      include/linux/i2c.h
    ASoC: Intel: bytcr_rt5640: Add quirk for the Chuwi Hi8 tablet
  * ip6_vti: proper dev_{hold|put} in ndo_[un]init methods
      net/ipv6/ip6_vti.c
  * Bluetooth: check for zapped sk before connecting
      net/bluetooth/l2cap_sock.c
  * net: bridge: when suppression is enabled exclude RARP packets
      net/bridge/br_arp_nd_proxy.c
  * Bluetooth: initialize skb_queue_head at l2cap_chan_create()
      net/bluetooth/l2cap_core.c
  * Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default
      net/bluetooth/l2cap_core.c
    ALSA: rme9652: don't disable if not enabled
    ALSA: hdspm: don't disable if not enabled
    ALSA: hdsp: don't disable if not enabled
  * i2c: bail out early when RDWR parameters are wrong
      drivers/i2c/i2c-dev.c
    net: stmmac: Set FIFO sizes for ipq806x
    ASoC: Intel: bytcr_rt5640: Enable jack-detect support on Asus T100TAF
  * tipc: convert dest node's address to network order
      net/tipc/netlink_compat.c
    fs: dlm: fix debugfs dump
    tpm: fix error return code in tpm2_get_cc_attrs_tbl()
  * Revert "fdt: Properly handle "no-map" field in the memory region"
      drivers/of/fdt.c
  * Revert "of/fdt: Make sure no-map does not remove already reserved regions"
      drivers/of/fdt.c
  * sctp: delay auto_asconf init until binding the first addr
      net/sctp/socket.c
  * Revert "net/sctp: fix race condition in sctp_destroy_sock"
      net/sctp/socket.c
  * smp: Fix smp_call_function_single_async prototype
      include/linux/smp.h
      kernel/smp.c
  * net: Only allow init netns to set default tcp cong to a restricted algo
      net/ipv4/tcp_cong.c
    mm/memory-failure: unnecessary amount of unmapping
  * mm/sparse: add the missing sparse_buffer_fini() in error branch
      mm/sparse.c
    kfifo: fix ternary sign extension bugs
    net:nfc:digital: Fix a double free in digital_tg_recv_dep_req
    RDMA/bnxt_re: Fix a double free in bnxt_qplib_alloc_res
    net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
    net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb
    arm64: dts: uniphier: Change phy-mode to RGMII-ID to enable delay pins for RTL8211E
    ARM: dts: uniphier: Change phy-mode to RGMII-ID to enable delay pins for RTL8211E
    bnxt_en: fix ternary sign extension bug in bnxt_show_temp()
    powerpc/52xx: Fix an invalid ASM expression ('addi' used instead of 'add')
    ath10k: Fix ath10k_wmi_tlv_op_pull_peer_stats_info() unlock without lock
    ath9k: Fix error check in ath9k_hw_read_revisions() for PCI devices
    net: davinci_emac: Fix incorrect masking of tx and rx error channel
  * ALSA: usb: midi: don't return -ENOMEM when usb_urb_ep_type_check fails
      sound/usb/midi.c
    RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails
    vsock/vmci: log once the failed queue pair allocation
    mwl8k: Fix a double Free in mwl8k_probe_hw
    i2c: sh7760: fix IRQ error path
    rtlwifi: 8821ae: upgrade PHY and RF parameters
    powerpc/pseries: extract host bridge from pci_bus prior to bus removal
    MIPS: pci-legacy: stop using of_pci_range_to_resource
    drm/i915/gvt: Fix error code in intel_gvt_init_device()
    ASoC: ak5558: correct reset polarity
    i2c: sh7760: add IRQ check
    i2c: jz4780: add IRQ check
    i2c: emev2: add IRQ check
    i2c: cadence: add IRQ check
    RDMA/srpt: Fix error return code in srpt_cm_req_recv()
    net: thunderx: Fix unintentional sign extension issue
    IB/hfi1: Fix error return code in parse_platform_config()
    mt7601u: fix always true expression
    mac80211: bail out if cipher schemes are invalid
    powerpc: iommu: fix build when neither PCI or IBMVIO is set
    powerpc/perf: Fix PMU constraint check for EBB events
    powerpc/64s: Fix pte update for kernel memory on radix
    liquidio: Fix unintented sign extension of a left shift of a u16
  * ALSA: usb-audio: Add error checks for usb_driver_claim_interface() calls
      sound/usb/card.c
      sound/usb/quirks.c
      sound/usb/usbaudio.h
    net: hns3: Limiting the scope of vector_ring_chain variable
    nfc: pn533: prevent potential memory corruption
  * bug: Remove redundant condition check in report_bug
      lib/bug.c
  * ALSA: core: remove redundant spin_lock pair in snd_card_disconnect
      sound/core/init.c
    powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration
    powerpc/prom: Mark identical_pvr_fixup as __init
    net: lapbether: Prevent racing when checking whether the netif is running
    perf symbols: Fix dso__fprintf_symbols_by_name() to return the number of printed chars
  * HID: plantronics: Workaround for double volume key presses
      drivers/hid/hid-ids.h
      drivers/hid/hid-plantronics.c
      include/linux/hid.h
    drivers/block/null_blk/main: Fix a double free in null_init.
  * sched/debug: Fix cgroup_path[] serialization
      kernel/sched/debug.c
    x86/events/amd/iommu: Fix sysfs type mismatch
    HSI: core: fix resource leaks in hsi_add_client_from_dt()
    mfd: stm32-timers: Avoid clearing auto reload register
    scsi: ibmvfc: Fix invalid state machine BUG_ON()
    scsi: sni_53c710: Add IRQ check
    scsi: sun3x_esp: Add IRQ check
    scsi: jazz_esp: Add IRQ check
    clk: uniphier: Fix potential infinite loop
    clk: qcom: a53-pll: Add missing MODULE_DEVICE_TABLE
    vfio/mdev: Do not allow a mdev_type to have a NULL parent pointer
    nvme: retrigger ANA log update if group descriptor isn't found
    ata: libahci_platform: fix IRQ check
    sata_mv: add IRQ checks
    pata_ipx4xx_cf: fix IRQ check
    pata_arasan_cf: fix IRQ check
    x86/kprobes: Fix to check non boostable prefixes correctly
    drm/amdkfd: fix build error with AMD_IOMMU_V2=m
    media: m88rs6000t: avoid potential out-of-bounds reads on arrays
    media: omap4iss: return error code when omap4iss_get() failed
    media: vivid: fix assignment of dev->fbuf_out_flags
    soc: aspeed: fix a ternary sign expansion bug
  * ttyprintk: Add TTY hangup callback.
      drivers/char/ttyprintk.c
    usb: dwc2: Fix hibernation between host and device modes.
    usb: dwc2: Fix host mode hibernation exit with remote wakeup flow.
    Drivers: hv: vmbus: Increase wait time for VMbus unload
    x86/platform/uv: Fix !KEXEC build failure
    platform/x86: pmc_atom: Match all Beckhoff Automation baytrail boards with critclk_systems DMI table
    usbip: vudc: fix missing unlock on error in usbip_sockfd_store()
  * firmware: qcom-scm: Fix QCOM_SCM configuration
      drivers/firmware/Kconfig
  * tty: fix return value for unsupported ioctls
      drivers/tty/tty_io.c
      include/linux/tty_driver.h
  * tty: actually undefine superseded ASYNC flags
      include/uapi/linux/tty_flags.h
    USB: cdc-acm: fix unprivileged TIOCCSERIAL
    usb: gadget: r8a66597: Add missing null check on return from platform_get_resource
    cpufreq: armada-37xx: Fix determining base CPU frequency
    cpufreq: armada-37xx: Fix driver cleanup when registration failed
    clk: mvebu: armada-37xx-periph: Fix workaround for switching from L1 to L0
    clk: mvebu: armada-37xx-periph: Fix switching CPU freq from 250 Mhz to 1 GHz
    cpufreq: armada-37xx: Fix the AVS value for load L1
    clk: mvebu: armada-37xx-periph: remove .set_parent method for CPU PM clock
    cpufreq: armada-37xx: Fix setting TBG parent for load levels
    crypto: qat - Fix a double free in adf_create_ring
    ACPI: CPPC: Replace cppc_attr with kobj_attribute
  * soc: qcom: mdt_loader: Detect truncated read of segments
      drivers/soc/qcom/mdt_loader.c
  * soc: qcom: mdt_loader: Validate that p_filesz < p_memsz
      drivers/soc/qcom/mdt_loader.c
  * spi: Fix use-after-free with devm_spi_alloc_*
      drivers/spi/spi.c
      include/linux/spi/spi.h
    staging: greybus: uart: fix unprivileged TIOCCSERIAL
    staging: rtl8192u: Fix potential infinite loop
  * irqchip/gic-v3: Fix OF_BAD_ADDR error handling
      drivers/irqchip/irq-gic-v3-mbi.c
    mtd: rawnand: gpmi: Fix a double free in gpmi_nand_init
    soundwire: stream: fix memory leak in stream config error path
    USB: gadget: udc: fix wrong pointer passed to IS_ERR() and PTR_ERR()
    usb: gadget: aspeed: fix dma map failure
    crypto: qat - fix error path in adf_isr_resource_alloc()
  * phy: marvell: ARMADA375_USBCLUSTER_PHY should not default to y, unconditionally
      drivers/phy/marvell/Kconfig
    soundwire: bus: Fix device found flag correctly
  * bus: qcom: Put child node before return
      drivers/bus/qcom-ebi2.c
    mtd: require write permissions for locking and badblock ioctls
    fotg210-udc: Complete OUT requests on short packets
    fotg210-udc: Don't DMA more than the buffer can take
    fotg210-udc: Mask GRP2 interrupts we don't handle
    fotg210-udc: Remove a dubious condition leading to fotg210_done
    fotg210-udc: Fix EP0 IN requests bigger than two packets
    fotg210-udc: Fix DMA on EP0 for length > max packet size
    crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
    crypto: qat - don't release uninitialized resources
    usb: gadget: pch_udc: Check for DMA mapping error
    usb: gadget: pch_udc: Check if driver is present before calling ->setup()
    usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits()
    x86/microcode: Check for offline CPUs before requesting new microcode
    mtd: rawnand: qcom: Return actual error code instead of -ENODEV
    mtd: Handle possible -EPROBE_DEFER from parse_mtd_partitions()
    mtd: rawnand: brcmnand: fix OOB R/W with Hamming ECC
    mtd: rawnand: fsmc: Fix error code in fsmc_nand_probe()
  * regmap: set debugfs_name to NULL after it is freed
      drivers/base/regmap/regmap-debugfs.c
    usb: typec: tcpci: Check ROLE_CONTROL while interpreting CC_STATUS
    serial: stm32: fix tx_empty condition
    serial: stm32: fix incorrect characters on console
    ARM: dts: exynos: correct PMIC interrupt trigger level on Snow
    ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250
    ARM: dts: exynos: correct PMIC interrupt trigger level on Odroid X/U3 family
    ARM: dts: exynos: correct PMIC interrupt trigger level on Midas family
    ARM: dts: exynos: correct MUIC interrupt trigger level on Midas family
    ARM: dts: exynos: correct fuel gauge interrupt trigger level on Midas family
    memory: gpmc: fix out of bounds read and dereference on gpmc_cs[]
    usb: gadget: pch_udc: Revert d3cb25a121 completely
  * ovl: fix missing revert_creds() on error path
      fs/overlayfs/copy_up.c
    KVM: s390: split kvm_s390_real_to_abs
    KVM: s390: fix guarded storage control register handling
    KVM: s390: split kvm_s390_logical_to_effective
    x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is supported
    ALSA: hda/realtek: Remove redundant entry for ALC861 Haier/Uniwill devices
    ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries
    ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries
    ALSA: hda/realtek: Re-order ALC269 Dell quirk table entries
    ALSA: hda/realtek: Re-order ALC269 HP quirk table entries
    ALSA: hda/realtek: Re-order ALC882 Clevo quirk table entries
    ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries
    ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries
    drm/radeon: fix copy of uninitialized variable back to userspace
  * cfg80211: scan: drop entry from hidden_list on overflow
      net/wireless/scan.c
    ipw2x00: potential buffer overflow in libipw_wx_set_encodeext()
    md: Fix missing unused status line of /proc/mdstat
    md: md_open returns -EBUSY when entering racing area
    md: factor out a mddev_find_locked helper from mddev_find
    md: split mddev_find
    md-cluster: fix use-after-free issue when removing rdev
    md/bitmap: wait for external bitmap writes to complete during tear down
    misc: vmw_vmci: explicitly initialize vmci_datagram payload
    misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg struct
    misc: lis3lv02d: Fix false-positive WARN on various HP models
    iio:accel:adis16201: Fix wrong axis assignment that prevents loading
    FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR
    MIPS: pci-rt2880: fix slot 0 configuration
    MIPS: pci-mt7620: fix PLL lock check
    ASoC: samsung: tm2_wm5110: check of of_parse return value
    net/nfc: fix use-after-free llcp_sock_bind/connect
  * bluetooth: eliminate the potential race condition when removing the HCI controller
      net/bluetooth/hci_request.c
    hsr: use netdev_err() instead of WARN_ONCE()
  * Bluetooth: verify AMP hci_chan before amp_destroy
      include/net/bluetooth/hci_core.h
      net/bluetooth/hci_event.c
  * modules: inherit TAINT_PROPRIETARY_MODULE
      include/linux/module.h
      kernel/module.c
  * modules: return licensing information from find_symbol
      include/linux/module.h
      kernel/module.c
  * modules: rename the licence field in struct symsearch to license
      include/linux/module.h
      kernel/module.c
  * modules: unexport __module_address
      kernel/module.c
  * modules: unexport __module_text_address
      kernel/module.c
  * modules: mark each_symbol_section static
      include/linux/module.h
      kernel/module.c
  * modules: mark find_symbol static
      include/linux/module.h
      kernel/module.c
  * modules: mark ref_module static
      include/linux/module.h
      kernel/module.c
  * dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails
      drivers/md/dm-rq.c
    dm space map common: fix division bug in sm_ll_find_free_block()
    dm persistent data: packed struct should have an aligned() attribute too
  * tracing: Restructure trace_clock_global() to never block
      kernel/trace/trace_clock.c
  * tracing: Map all PIDs to command lines
      kernel/trace/trace.c
    rsi: Use resume_noirq for SDIO
    tty: fix memory leak in vc_deallocate
    usb: dwc2: Fix session request interrupt handler
  * usb: dwc3: gadget: Fix START_TRANSFER link state check
      drivers/usb/dwc3/gadget.c
  * usb: gadget/function/f_fs string table fix for multiple languages
      drivers/usb/gadget/function/f_fs.c
  * usb: gadget: Fix double free of device descriptor pointers
      drivers/usb/gadget/config.c
    usb: gadget: dummy_hcd: fix gpf in gadget_setup
    media: dvbdev: Fix memory leak in dvb_media_device_free()
  * ext4: fix error code in ext4_commit_super
      fs/ext4/super.c
  * ext4: do not set SB_ACTIVE in ext4_orphan_cleanup()
      fs/ext4/super.c
  * ext4: fix check to prevent false positive report of incorrect used inodes
      fs/ext4/ialloc.c
    arm64: vdso: remove commas between macro name and arguments
  * posix-timers: Preserve return value in clock_adjtime32()
      kernel/time/posix-timers.c
  * Revert 337f13046f ("futex: Allow FUTEX_CLOCK_REALTIME with FUTEX_WAIT op")
      kernel/futex.c
    jffs2: check the validity of dstlen in jffs2_zlib_compress()
  * Fix misc new gcc warnings
      include/scsi/libfcoe.h
      net/bluetooth/ecdh_helper.h
  * security: commoncap: fix -Wstringop-overread warning
      security/commoncap.c
    dm raid: fix inconclusive reshape layout on fast raid4/5/6 table reload sequences
    md/raid1: properly indicate failure when ending a failed write request
    tpm: vtpm_proxy: Avoid reading host log when using a virtual device
    intel_th: pci: Add Alder Lake-M support
    powerpc: fix EDEADLOCK redefinition error in uapi/asm/errno.h
    powerpc/eeh: Fix EEH handling for hugepages in ioremap space.
    jffs2: Fix kasan slab-out-of-bounds problem
    NFSv4: Don't discard segments marked for return in _pnfs_return_layout()
    NFS: Don't discard pNFS layout segments that are marked for return
    ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure
    openvswitch: fix stack OOB read while fragmenting IPv4 packets
    mlxsw: spectrum_mr: Update egress RIF list before route's action
  * f2fs: fix to avoid out-of-bounds memory access
      fs/f2fs/node.c
    ubifs: Only check replay with inode type to judge if inode linked
  * arm64/vdso: Discard .note.gnu.property sections in vDSO
      arch/arm64/kernel/vdso/vdso.lds.S
    btrfs: fix race when picking most recent mod log operation for an old root
    ALSA: hda/realtek: Add quirk for Intel Clevo PCx0Dx
  * ALSA: usb-audio: Add dB range mapping for Sennheiser Communications Headset PC 8
      sound/usb/mixer_maps.c
  * ALSA: usb-audio: More constifications
      sound/usb/mixer.c
      sound/usb/mixer_maps.c
      sound/usb/mixer_quirks.c
      sound/usb/mixer_scarlett.c
      sound/usb/proc.c
      sound/usb/stream.c
      sound/usb/validate.c
  * ALSA: usb-audio: Explicitly set up the clock selector
      sound/usb/clock.c
    ALSA: sb: Fix two use after free in snd_sb_qsound_build
    ALSA: hda/conexant: Re-order CX5066 quirk table entries
    ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer
    s390/archrandom: add parameter check for s390_arch_random_generate
    scsi: libfc: Fix a format specifier
    scsi: lpfc: Remove unsupported mbox PORT_CAPABILITIES logic
    scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO response
    drm/amdgpu: fix NULL pointer dereference
    amdgpu: avoid incorrect %hu format string
    drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal
    media: gscpa/stv06xx: fix memory leak
    media: dvb-usb: fix memory leak in dvb_usb_adapter_init
    media: i2c: adv7842: fix possible use-after-free in adv7842_remove()
    media: i2c: adv7511-v4l2: fix possible use-after-free in adv7511_remove()
    media: adv7604: fix possible use-after-free in adv76xx_remove()
    media: tc358743: fix possible use-after-free in tc358743_remove()
    power: supply: s3c_adc_battery: fix possible use-after-free in s3c_adc_bat_remove()
    power: supply: generic-adc-battery: fix possible use-after-free in gab_remove()
    clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return
    media: vivid: update EDID
    media: em28xx: fix memory leak
    scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg()
    scsi: qla2xxx: Fix use after free in bsg
    scsi: qla2xxx: Always check the return value of qla24xx_get_isp_stats()
    drm/amdgpu : Fix asic reset regression issue introduce by 8f211fe8ac7c4f
    power: supply: Use IRQF_ONESHOT
    media: gspca/sq905.c: fix uninitialized variable
    media: media/saa7164: fix saa7164_encoder_register() memory leak bugs
    extcon: arizona: Fix some issues when HPDET IRQ fires after the jack has been unplugged
  * power: supply: bq27xxx: fix power_avg for newer ICs
      include/linux/power/bq27xxx_battery.h
  * media: drivers: media: pci: sta2x11: fix Kconfig dependency on GPIOLIB
      drivers/media/pci/sta2x11/Kconfig
    media: ite-cir: check for receive overflow
    scsi: target: pscsi: Fix warning in pscsi_complete_cmd()
    scsi: lpfc: Fix pt2pt connection does not recover after LOGO
    scsi: lpfc: Fix incorrect dbde assignment when building target abts wqe
    btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s
    phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove()
    intel_th: Consistency and off-by-one fix
    spi: omap-100k: Fix reference leak to master
    spi: dln2: Fix reference leak to master
  * xhci: fix potential array out of bounds with several interrupters
      drivers/usb/host/xhci.c
  * xhci: check control context is valid before dereferencing it.
      drivers/usb/host/xhci.c
  * usb: xhci-mtk: support quirk to disable usb2 lpm
      drivers/usb/host/xhci-mtk.h
  * perf/arm_pmu_platform: Fix error handling
      drivers/perf/arm_pmu_platform.c
    tee: optee: do not check memref size on return from Secure World
    x86/build: Propagate $(CLANG_FLAGS) to $(REALMODE_FLAGS)
  * PCI: PM: Do not read power state in pci_enable_device_flags()
      drivers/pci/pci.c
  * usb: xhci: Fix port minor revision
      drivers/usb/host/xhci-mem.c
  * usb: dwc3: gadget: Ignore EP queue requests during bus reset
      drivers/usb/dwc3/gadget.c
    usb: gadget: f_uac1: validate input parameters
    genirq/matrix: Prevent allocation counter corruption
    usb: gadget: uvc: add bInterval checking for HS mode
  * crypto: api - check for ERR pointers in crypto_destroy_tfm()
      crypto/api.c
      include/crypto/acompress.h
      include/crypto/aead.h
      include/crypto/akcipher.h
      include/crypto/hash.h
      include/crypto/kpp.h
      include/crypto/rng.h
      include/crypto/skcipher.h
    staging: wimax/i2400m: fix byte-order issue
    fbdev: zero-fill colormap in fbcmap.c
    intel_th: pci: Add Rocket Lake CPU support
    btrfs: fix metadata extent leak after failure to create subvolume
    cifs: Return correct error code from smb2_get_enc_key
    erofs: add unsupported inode i_format check
    mmc: core: Set read only for SD cards with permanent write protect bit
    mmc: core: Do a power cycle when the CMD11 fails
    mmc: block: Issue a cache flush only when it's enabled
    mmc: block: Update ext_csd.cache_ctrl if it was written
    mmc: sdhci-pci: Fix initialization of some SD cards for Intel BYT-based controllers
    scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand()
    spi: spi-ti-qspi: Free DMA resources
    mtd: rawnand: atmel: Update ecc_stats.corrected counter
    mtd: spinand: core: add missing MODULE_DEVICE_TABLE()
  * ecryptfs: fix kernel panic with null dev_name
      fs/ecryptfs/main.c
    arm64: dts: mt8173: fix property typo of 'phys' in dsi node
    arm64: dts: marvell: armada-37xx: add syscon compatible to NB clk node
    ARM: 9056/1: decompressor: fix BSS size calculation for LLVM ld.lld
    ftrace: Handle commands when closing set_ftrace_filter file
    ACPI: custom_method: fix a possible memory leak
    ACPI: custom_method: fix potential use-after-free issue
    s390/disassembler: increase ebpf disasm buffer size
  * BACKPORT: arm64: vdso32: drop -no-integrated-as flag
      arch/arm64/kernel/vdso32/Makefile
    ANDROID: GKI: update allowed list for incrementalfs.ko
  * ANDROID: dm-user: Drop additional reference
      drivers/md/dm-user.c
    ANDROID: FUSE OWNERS pointing to android-mainline OWNERS
  * UPSTREAM: sched: Fix out-of-bound access in uclamp
      kernel/sched/core.c
    Merge 4.19.190 into android-4.19-stable
Linux 4.19.190
  * ovl: allow upperdir inside lowerdir
      fs/overlayfs/super.c
    platform/x86: thinkpad_acpi: Correct thermal sensor allocation
  * USB: Add reset-resume quirk for WD19's Realtek Hub
      drivers/usb/core/quirks.c
  * USB: Add LPM quirk for Lenovo ThinkPad USB-C Dock Gen2 Ethernet
      drivers/usb/core/quirks.c
  * ALSA: usb-audio: Add MIDI quirk for Vox ToneLab EX
      sound/usb/quirks-table.h
    iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_gen2_enqueue_hcmd()
  * bpf: Fix masking negation logic upon negative dst register
      kernel/bpf/verifier.c
    mips: Do not include hi and lo in clobber list for R6
    iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_enqueue_hcmd()
  * net: usb: ax88179_178a: initialize local variables before use
      drivers/net/usb/ax88179_178a.c
    ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade()
  * ACPI: tables: x86: Reserve memory occupied by ACPI tables
      include/linux/acpi.h
    erofs: fix extended inode could cross boundary
    BACKPORT: FROMGIT: virt_wifi: Return micros for BSS TSF values
    ANDROID: Add allowed symbols requried from Qualcomm drivers
  * ANDROID: GKI: QoS: Prevent usage of dev_pm_qos_request as pm_qos_request
      drivers/base/power/qos.c
      include/linux/pm_qos.h
      kernel/power/qos.c

Bug: 189791081
Change-Id: Iab7796f3e6639b2a0b38164baa538277769efa03
Signed-off-by: Lucas Wei <lucaswei@google.com>
2021-06-14 17:29:51 +08:00
Tetsuo Handa
17d6c58c5f tty: vt: always invoke vc->vc_sw->con_resize callback
commit ffb324e6f874121f7dce5bdae5e05d02baae7269 upstream.

syzbot is reporting OOB write at vga16fb_imageblit() [1], for
resize_screen() from ioctl(VT_RESIZE) returns 0 without checking whether
requested rows/columns fit the amount of memory reserved for the graphical
screen if current mode is KD_GRAPHICS.

----------
  #include <sys/types.h>
  #include <sys/stat.h>
  #include <fcntl.h>
  #include <sys/ioctl.h>
  #include <linux/kd.h>
  #include <linux/vt.h>

  int main(int argc, char *argv[])
  {
        const int fd = open("/dev/char/4:1", O_RDWR);
        struct vt_sizes vt = { 0x4100, 2 };

        ioctl(fd, KDSETMODE, KD_GRAPHICS);
        ioctl(fd, VT_RESIZE, &vt);
        ioctl(fd, KDSETMODE, KD_TEXT);
        return 0;
  }
----------

Allow framebuffer drivers to return -EINVAL, by moving vc->vc_mode !=
KD_GRAPHICS check from resize_screen() to fbcon_resize().

Link: https://syzkaller.appspot.com/bug?extid=1f29e126cf461c4de3b3 [1]
Reported-by: syzbot <syzbot+1f29e126cf461c4de3b3@syzkaller.appspotmail.com>
Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Tested-by: syzbot <syzbot+1f29e126cf461c4de3b3@syzkaller.appspotmail.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-05-26 11:48:35 +02:00
Phillip Potter
fb10f923ff fbdev: zero-fill colormap in fbcmap.c
commit 19ab233989d0f7ab1de19a036e247afa4a0a1e9c upstream.

Use kzalloc() rather than kmalloc() for the dynamically allocated parts
of the colormap in fb_alloc_cmap_gfp, to prevent a leak of random kernel
data to userspace under certain circumstances.

Fixes a KMSAN-found infoleak bug reported by syzbot at:
https://syzkaller.appspot.com/bug?id=741578659feabd108ad9e06696f0c1f2e69c4b6e

Reported-by: syzbot+47fa9c9c648b765305b9@syzkaller.appspotmail.com
Cc: stable <stable@vger.kernel.org>
Reviewed-by: Geert Uytterhoeven <geert+renesas@glider.be>
Signed-off-by: Phillip Potter <phil@philpotter.co.uk>
Link: https://lore.kernel.org/r/20210331220719.1499743-1-phil@philpotter.co.uk
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-05-22 10:59:14 +02:00
Lucas Wei
a93de36337 Merge android-4.19-stable (4.19.189) into android-msm-pixel-4.19-lts
Merge 4.19.189 into android-4.19-stable
Linux 4.19.189
    USB: CDC-ACM: fix poison/unpoison imbalance
    net: hso: fix NULL-deref on disconnect regression
    x86/crash: Fix crash_setup_memmap_entries() out-of-bounds access
    ia64: tools: remove duplicate definition of ia64_mf() on ia64
    ia64: fix discontig.c section mismatches
    cavium/liquidio: Fix duplicate argument
    xen-netback: Check for hotplug-status existence before watching
    s390/entry: save the caller of psw_idle
    net: geneve: check skb is large enough for IPv4/IPv6 header
    ARM: dts: Fix swapped mmc order for omap3
    HID: wacom: Assign boolean values to a bool variable
    HID: alps: fix error return code in alps_input_configured()
  * HID: google: add don USB id
      drivers/hid/hid-ids.h
    perf/x86/intel/uncore: Remove uncore extra PCI dev HSWEP_PCI_PCU_3
  * locking/qrwlock: Fix ordering in queued_write_lock_slowpath()
      kernel/locking/qrwlock.c
    pinctrl: lewisburg: Update number of pins in community
  * gup: document and work around "COW can break either way" issue
      mm/gup.c
  * net: phy: marvell: fix detection of PHY on Topaz switches
      include/linux/marvell_phy.h
    ARM: 9071/1: uprobes: Don't hook on thumb instructions
    ARM: footbridge: fix PCI interrupt mapping
    ibmvnic: remove duplicate napi_schedule call in open function
    ibmvnic: remove duplicate napi_schedule call in do_reset function
    ibmvnic: avoid calling napi_disable() twice
    i40e: fix the panic when running bpf in xdpdrv mode
  * net: ip6_tunnel: Unregister catch-all devices
      net/ipv6/ip6_tunnel.c
  * net: sit: Unregister catch-all devices
      net/ipv6/sit.c
    net: davicom: Fix regulator not turned off on failed probe
    netfilter: nft_limit: avoid possible divide error in nft_limit_init
  * netfilter: conntrack: do not print icmpv6 as unknown via /proc
      net/netfilter/nf_conntrack_standalone.c
    scsi: libsas: Reset num_scatter if libata marks qc as NODATA
  * arm64: alternatives: Move length validation in alternative_{insn, endif}
      arch/arm64/include/asm/alternative.h
  * arm64: fix inline asm in load_unaligned_zeropad()
      arch/arm64/include/asm/word-at-a-time.h
  * readdir: make sure to verify directory entry for legacy interfaces too
      fs/readdir.c
  * dm verity fec: fix misaligned RS roots IO
      drivers/md/dm-verity-fec.c
      drivers/md/dm-verity-fec.h
    HID: wacom: set EV_KEY and EV_ABS only for non-HID_GENERIC type of devices
    Input: i8042 - fix Pegatron C15B ID entry
    Input: s6sy761 - fix coordinate read bit shift
    mac80211: clear sta->fast_rx when STA removed from 4-addr VLAN
    pcnet32: Use pci_resource_len to validate PCI resource
    net: ieee802154: forbid monitor for add llsec seclevel
    net: ieee802154: stop dump llsec seclevels for monitors
    net: ieee802154: forbid monitor for add llsec devkey
    net: ieee802154: stop dump llsec devkeys for monitors
    net: ieee802154: forbid monitor for add llsec dev
    net: ieee802154: stop dump llsec devs for monitors
    net: ieee802154: stop dump llsec keys for monitors
    scsi: scsi_transport_srp: Don't block target in SRP_PORT_LOST state
    ASoC: fsl_esai: Fix TDM slot setup for I2S mode
    drm/msm: Fix a5xx/a6xx timestamps
    ARM: keystone: fix integer overflow warning
  * neighbour: Disregard DEAD dst in neigh_update
      net/core/neighbour.c
    arc: kernel: Return -EFAULT if copy_to_user() fails
    lockdep: Add a missing initialization hint to the "INFO: Trying to register non-static key" message
    ARM: dts: Fix moving mmc devices with aliases for omap4 & 5
    ARM: dts: Drop duplicate sha2md5_fck to fix clk_disable race
  * dmaengine: dw: Make it dependent to HAS_IOMEM
      drivers/dma/dw/Kconfig
  * gpio: sysfs: Obey valid_mask
      drivers/gpio/gpiolib-sysfs.c
    Input: nspire-keypad - enable interrupts only when opened
  * net/sctp: fix race condition in sctp_destroy_sock
      net/sctp/socket.c
    ANDROID: GKI: update allowed list for incrementalfs.ko
  * ANDROID: fs-verity: Export function to check signatures
      fs/verity/signature.c
      include/linux/fsverity.h
  * UPSTREAM: fs-verity: move structs needed for file signing to UAPI header
      fs/verity/fsverity_private.h
      include/uapi/linux/fsverity.h
  * UPSTREAM: fs-verity: rename "file measurement" to "file digest"
      fs/verity/enable.c
      fs/verity/fsverity_private.h
      fs/verity/measure.c
      fs/verity/open.c
      fs/verity/signature.c
  * UPSTREAM: fs-verity: rename fsverity_signed_digest to fsverity_formatted_digest
      fs/verity/fsverity_private.h
      fs/verity/signature.c
  * UPSTREAM: fs-verity: remove filenames from file comments
      fs/verity/enable.c
      fs/verity/hash_algs.c
      fs/verity/init.c
      fs/verity/measure.c
      fs/verity/open.c
      fs/verity/signature.c
      fs/verity/verify.c
    ANDROID: clang: update to 12.0.5
    Merge 4.19.188 into android-4.19-stable
Linux 4.19.188
    xen/events: fix setting irq affinity
    perf map: Tighten snprintf() string precision to pass gcc check on some 32-bit arches
  * driver core: Fix locking bug in deferred_probe_timeout_work_func()
      drivers/base/dd.c
  * netfilter: x_tables: fix compat match/target pad out-of-bound write
      net/ipv4/netfilter/arp_tables.c
      net/ipv4/netfilter/ip_tables.c
      net/ipv6/netfilter/ip6_tables.c
      net/netfilter/x_tables.c
  * staging: m57621-mmc: delete driver from the tree.
      drivers/staging/Kconfig
      drivers/staging/Makefile
    net: phy: broadcom: Only advertise EEE for supported modes
    riscv,entry: fix misaligned base for excp_vect_table
  * block: only update parent bi_status when bio fail
      block/bio.c
    drm/tegra: dc: Don't set PLL clock to 0Hz
    gfs2: report "already frozen/thawed" errors
    drm/imx: imx-ldb: fix out of bounds array access warning
  * KVM: arm64: Disable guest access to trace filter controls
      arch/arm64/include/asm/kvm_arm.h
  * KVM: arm64: Hide system instruction access to Trace registers
      arch/arm64/kernel/cpufeature.c
  * Revert "net: xfrm: Localize sequence counter per network namespace"
      include/net/netns/xfrm.h
      net/xfrm/xfrm_state.c
    Merge 4.19.187 into android-4.19-stable
  * ANDROID: Incremental fs: Set credentials before reading/writing
      fs/incfs/data_mgmt.c
      fs/incfs/format.c
      fs/incfs/format.h
      fs/incfs/main.c
      fs/incfs/vfs.c
Linux 4.19.187
    Revert "cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb->prepath."
    net: ieee802154: stop dump llsec params for monitors
    net: ieee802154: forbid monitor for del llsec seclevel
    net: ieee802154: forbid monitor for set llsec params
    net: ieee802154: fix nl802154 del llsec devkey
    net: ieee802154: fix nl802154 add llsec key
    net: ieee802154: fix nl802154 del llsec dev
    net: ieee802154: fix nl802154 del llsec key
    net: ieee802154: nl-mac: fix check on panid
    net: mac802154: Fix general protection fault
    drivers: net: fix memory leak in peak_usb_create_dev
    drivers: net: fix memory leak in atusb_probe
  * net: tun: set tun->dev->addr_len during TUNSETLINK processing
      drivers/net/tun.c
  * cfg80211: remove WARN_ON() in cfg80211_sme_connect
      net/wireless/sme.c
  * net: sched: bump refcount for new action in ACT replace mode
      net/sched/act_api.c
    clk: socfpga: fix iomem pointer cast on 64-bit
    RDMA/cxgb4: check for ipv6 address properly while destroying listener
  * net/mlx5: Fix PBMC register mapping
      include/linux/mlx5/mlx5_ifc.h
  * net/mlx5: Fix placement of log_max_flow_counter
      include/linux/mlx5/mlx5_ifc.h
    s390/cpcmd: fix inline assembly register clobbering
  * workqueue: Move the position of debug_work_activate() in __queue_work()
      kernel/workqueue.c
  * clk: fix invalid usage of list cursor in unregister
      drivers/clk/clk.c
  * clk: fix invalid usage of list cursor in register
      drivers/clk/clk.c
    soc/fsl: qbman: fix conflicting alignment attributes
    ASoC: sunxi: sun4i-codec: fill ASoC card owner
    net/ncsi: Avoid channel_monitor hrtimer deadlock
    ARM: dts: imx6: pbab01: Set vmmc supply for both SD interfaces
  * net:tipc: Fix a double free in tipc_sk_mcast_rcv
      net/tipc/socket.c
    cxgb4: avoid collecting SGE_QBASE regs during traffic
    gianfar: Handle error code at MAC address change
  * sch_red: fix off-by-one checks in red_check_params()
      include/net/red.h
    amd-xgbe: Update DMA coherency values
    i40e: Fix kernel oops when i40e driver removes VF's
    i40e: Added Asym_Pause to supported link modes
    ASoC: wm8960: Fix wrong bclk and lrclk with pll enabled for some chips
  * net: xfrm: Localize sequence counter per network namespace
      include/net/netns/xfrm.h
      net/xfrm/xfrm_state.c
    regulator: bd9571mwv: Fix AVS and DVFS voltage range
  * xfrm: interface: fix ipv4 pmtu check to honor ip header df
      net/xfrm/xfrm_interface.c
    virtio_net: Add XDP meta data support
  * i2c: turn recovery error on init to debug
      drivers/i2c/i2c-core-base.c
    usbip: synchronize event handler with sysfs code paths
    usbip: vudc synchronize sysfs code paths
    usbip: stub-dev synchronize sysfs code paths
    usbip: add sysfs_lock to synchronize sysfs code paths
  * net-ipv6: bugfix - raw & sctp - switch to ipv6_can_nonlocal_bind()
      net/ipv6/raw.c
      net/sctp/ipv6.c
    net: sched: sch_teql: fix null-pointer dereference
  * net: ensure mac header is set in virtio_net_hdr_to_skb()
      include/linux/virtio_net.h
    net: hso: fix null-ptr-deref during tty device unregistration
    ice: Increase control queue timeout
    batman-adv: initialize "struct batadv_tvlv_tt_vlan_data"->reserved field
    ARM: dts: turris-omnia: configure LED[2]/INTn pin as interrupt pin
    parisc: avoid a warning on u8 cast for cmpxchg on u8 pointers
  * parisc: parisc-agp requires SBA IOMMU driver
      drivers/char/agp/Kconfig
  * fs: direct-io: fix missing sdio->boundary
      fs/direct-io.c
    ocfs2: fix deadlock between setattr and dio_end_io_write
    nds32: flush_dcache_page: use page_mapping_file to avoid races with swapoff
    ia64: fix user_stack_pointer() for ptrace()
  * net: ipv6: check for validity before dereferencing cfg->fc_nlinfo.nlh
      net/ipv6/route.c
    xen/evtchn: Change irq_info lock to raw_spinlock_t
    nfc: Avoid endless loops caused by repeated llcp_sock_connect()
    nfc: fix memory leak in llcp_sock_connect()
    nfc: fix refcount leak in llcp_sock_connect()
    nfc: fix refcount leak in llcp_sock_bind()
    ASoC: intel: atom: Stop advertising non working S24LE support
    ALSA: aloop: Fix initialization of controls
    Merge 4.19.186 into android-4.19-stable
Linux 4.19.186
  * init/Kconfig: make COMPILE_TEST depend on HAS_IOMEM
      init/Kconfig
  * init/Kconfig: make COMPILE_TEST depend on !S390
      init/Kconfig
    bpf, x86: Validate computation of branch displacements for x86-32
    bpf, x86: Validate computation of branch displacements for x86-64
    cifs: Silently ignore unknown oplock break handle
    cifs: revalidate mapping when we open files for SMB1 POSIX
    ia64: fix format strings for err_inject
    ia64: mca: allocate early mca with GFP_ATOMIC
    scsi: target: pscsi: Clean up after failure in pscsi_map_sg()
    x86/build: Turn off -fcf-protection for realmode targets
    platform/x86: thinkpad_acpi: Allow the FnLock LED to change state
    drm/msm: Ratelimit invalid-fence message
    mac80211: choose first enabled channel for monitor
    mISDN: fix crash in fritzpci
    net: pxa168_eth: Fix a potential data race in pxa168_eth_remove
    platform/x86: intel-hid: Support Lenovo ThinkPad X1 Tablet Gen 2
    bus: ti-sysc: Fix warning on unbind if reset is not deasserted
    ARM: dts: am33xx: add aliases for mmc interfaces
    Merge 4.19.185 into android-4.19-stable
Linux 4.19.185
    drivers: video: fbcon: fix NULL dereference in fbcon_cursor()
    staging: rtl8192e: Change state information from u16 to u8
    staging: rtl8192e: Fix incorrect source in memcpy()
    usb: dwc2: Fix HPRT0.PrtSusp bit setting for HiKey 960 board.
    usb: gadget: udc: amd5536udc_pci fix null-ptr-dereference
    USB: cdc-acm: fix use-after-free after probe failure
    USB: cdc-acm: fix double free on probe failure
    USB: cdc-acm: downgrade message to debug
    USB: cdc-acm: untangle a circular dependency between callback and softint
    cdc-acm: fix BREAK rx code path adding necessary calls
    usb: xhci-mtk: fix broken streams issue on 0.96 xHCI
    usb: musb: Fix suspend with devices connected for a64
  * USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem
      drivers/usb/core/quirks.c
    usbip: vhci_hcd fix shift out-of-bounds in vhci_hub_control()
    firewire: nosy: Fix a use-after-free bug in nosy_ioctl()
  * extcon: Fix error handling in extcon_dev_register
      drivers/extcon/extcon.c
  * extcon: Add stubs for extcon_register_notifier_all() functions
      include/linux/extcon.h
    pinctrl: rockchip: fix restore error in resume
    reiserfs: update reiserfs_xattrs_initialized() condition
    drm/amdgpu: check alignment on CPU page for bo map
    drm/amdgpu: fix offset calculation in amdgpu_vm_bo_clear_mappings()
  * mm: fix race by making init_zero_pfn() early_initcall
      mm/memory.c
  * tracing: Fix stack trace event size
      kernel/trace/trace.c
  * PM: runtime: Fix ordering in pm_runtime_get_suppliers()
      drivers/base/power/runtime.c
  * PM: runtime: Fix race getting/putting suppliers at probe
      drivers/base/power/runtime.c
    ALSA: hda/realtek: call alc_update_headset_mode() in hp_automute_hook
    ALSA: hda/realtek: fix a determine_headset_type issue for a Dell AIO
  * ALSA: usb-audio: Apply sample rate quirk to Logitech Connect
      sound/usb/quirks.c
  * bpf: Remove MTU check in __bpf_skb_max_len
      net/core/filter.c
    net: wan/lmc: unregister device when no matching device is found
    appletalk: Fix skb allocation size in loopback case
    net: ethernet: aquantia: Handle error cleanup of start on open
    ath10k: hold RCU lock when calling ieee80211_find_sta_by_ifaddr()
    brcmfmac: clear EAP/association status bits on linkdown events
  * ext4: do not iput inode under running transaction in ext4_rename()
      fs/ext4/namei.c
  * locking/ww_mutex: Simplify use_ww_ctx & ww_ctx handling
      kernel/locking/mutex.c
  * thermal/core: Add NULL pointer check before using cooling device stats
      drivers/thermal/thermal_sysfs.c
    ASoC: rt5659: Update MCLK rate in set_sysclk()
    staging: comedi: cb_pcidas64: fix request_irq() warn
    staging: comedi: cb_pcidas: fix request_irq() warn
    scsi: qla2xxx: Fix broken #endif placement
    scsi: st: Fix a use after free in st_open()
    vhost: Fix vhost_vq_reset()
    ASoC: cs42l42: Always wait at least 3ms after reset
    ASoC: cs42l42: Fix mixer volume control
    ASoC: cs42l42: Fix channel width support
    ASoC: cs42l42: Fix Bitclock polarity inversion
    ASoC: es8316: Simplify adc_pga_gain_tlv table
    ASoC: sgtl5000: set DAP_AVC_CTRL register to correct default value on probe
    ASoC: rt5651: Fix dac- and adc- vol-tlv values being off by a factor of 10
    ASoC: rt5640: Fix dac- and adc- vol-tlv values being off by a factor of 10
    rpc: fix NULL dereference on kmalloc failure
  * ext4: fix bh ref count on error paths
      fs/ext4/inode.c
  * ipv6: weaken the v4mapped source check
      net/ipv6/ip6_input.c
      net/ipv6/tcp_ipv6.c
  * tcp: relookup sock for RST+ACK packets handled by obsolete req sock
      include/net/inet_connection_sock.h
      net/ipv4/inet_connection_sock.c
      net/ipv4/tcp_minisocks.c
    selinux: vsock: Set SID for socket returned by accept()
  * Revert "can: dev: Move device back to init netns on owning netns delete"
      include/net/rtnetlink.h
      net/core/dev.c
    Merge 4.19.184 into android-4.19-stable
    ANDROID: Add OWNERS files referring to the respective android-mainline OWNERS
    BACKPORT: drm/virtio: Use vmalloc for command buffer allocations.
    UPSTREAM: drm/virtio: Rewrite virtio_gpu_queue_ctrl_buffer using fenced version.
Linux 4.19.184
    xen-blkback: don't leak persistent grants from xen_blkbk_map()
    can: peak_usb: Revert "can: peak_usb: add forgotten supported devices"
  * ext4: add reclaim checks to xattr code
      fs/ext4/xattr.c
    mac80211: fix double free in ibss_leave
  * net: qrtr: fix a kernel-infoleak in qrtr_recvmsg()
      net/qrtr/qrtr.c
  * net: sched: validate stab values
      include/net/red.h
  * can: dev: Move device back to init netns on owning netns delete
      include/net/rtnetlink.h
      net/core/dev.c
    x86/mem_encrypt: Correct physical address calculation in __set_clr_pte_enc()
  * locking/mutex: Fix non debug version of mutex_lock_io_nested()
      include/linux/mutex.h
    scsi: mpt3sas: Fix error return code of mpt3sas_base_attach()
    scsi: qedi: Fix error return code of qedi_alloc_global_queues()
    perf auxtrace: Fix auxtrace queue conflict
  * dm verity: add root hash pkcs#7 signature verification
      drivers/md/dm-verity-target.c
  * ACPI: scan: Use unique number for instance_no
      include/acpi/acpi_bus.h
    ACPI: scan: Rearrange memory allocation in acpi_device_add()
  * Revert "netfilter: x_tables: Update remaining dereference to RCU"
      net/ipv4/netfilter/arp_tables.c
      net/ipv4/netfilter/ip_tables.c
      net/ipv6/netfilter/ip6_tables.c
  * netfilter: x_tables: Use correct memory barriers.
      include/linux/netfilter/x_tables.h
      net/netfilter/x_tables.c
  * Revert "netfilter: x_tables: Switch synchronization to RCU"
      include/linux/netfilter/x_tables.h
      net/ipv4/netfilter/arp_tables.c
      net/ipv4/netfilter/ip_tables.c
      net/ipv6/netfilter/ip6_tables.c
      net/netfilter/x_tables.c
  * bpf: Don't do bpf_cgroup_storage_set() for kuprobe/tp programs
      include/linux/bpf.h
    RDMA/cxgb4: Fix adapter LE hash errors while destroying ipv6 listening server
    net/mlx5e: Fix error path for ethtool set-priv-flag
    arm64: kdump: update ppos when reading elfcorehdr
    drm/msm: fix shutdown hook in case GPU components failed to bind
    net: stmmac: dwmac-sun8i: Provide TX and RX fifo sizes
    net: cdc-phonet: fix data-interface release on probe failure
    mac80211: fix rate mask reset
    can: m_can: m_can_do_rx_poll(): fix extraneous msg loss warning
    can: c_can: move runtime PM enable/disable to c_can_platform
    can: c_can_pci: c_can_pci_remove(): fix use-after-free
    can: flexcan: flexcan_chip_freeze(): fix chip freeze for missing bitrate
    can: peak_usb: add forgotten supported devices
  * netfilter: ctnetlink: fix dump of the expect mask attribute
      net/netfilter/nf_conntrack_netlink.c
    ftgmac100: Restart MAC HW once
    net/qlcnic: Fix a use after free in qlcnic_83xx_get_minidump_template
    e1000e: Fix error handling in e1000_set_d0_lplu_state_82571
    e1000e: add rtnl_lock() to e1000_reset_task
    net: dsa: bcm_sf2: Qualify phydev->dev_flags based on port
  * macvlan: macvlan_count_rx() needs to be aware of preemption
      include/linux/if_macvlan.h
    libbpf: Fix INSTALL flag order
  * veth: Store queue_mapping independently of XDP prog presence
      drivers/net/veth.c
    bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD
  * dm ioctl: fix out of bounds array access when no devices
      drivers/md/dm-ioctl.c
    ARM: dts: at91-sama5d27_som1: fix phy address to 7
    arm64: dts: ls1043a: mark crypto engine dma coherent
    arm64: dts: ls1012a: mark crypto engine dma coherent
    arm64: dts: ls1046a: mark crypto engine dma coherent
    squashfs: fix xattr id and id lookup sanity checks
  * squashfs: fix inode lookup sanity checks
      fs/squashfs/squashfs_fs.h
    platform/x86: intel-vbtn: Stop reporting SW_DOCK events
    netsec: restore phy power state after controller reset
    ia64: fix ptrace(PTRACE_SYSCALL_INFO_EXIT) sign
    ia64: fix ia64_syscall_get_set_arguments() for break-based syscalls
  * block: Suppress uevent for hidden device when removed
      block/genhd.c
    nfs: we don't support removing system.nfs4_acl
  * drm/radeon: fix AGP dependency
      drivers/gpu/drm/Kconfig
  * u64_stats,lockdep: Fix u64_stats_init() vs lockdep
      include/linux/u64_stats_sync.h
    sparc64: Fix opcode filtering in handling of no fault loads
    atm: idt77252: fix null-ptr-dereference
    atm: uPD98402: fix incorrect allocation
    net: wan: fix error return code of uhdlc_init()
    net: hisilicon: hns: fix error return code of hns_nic_clear_all_rx_fetch()
    NFS: Correct size calculation for create reply length
  * nfs: fix PNFS_FLEXFILE_LAYOUT Kconfig default
      fs/nfs/Kconfig
    gpiolib: acpi: Add missing IRQF_ONESHOT
    gianfar: fix jumbo packets+napi+rx overrun crash
    sun/niu: fix wrong RXMAC_BC_FRM_CNT_COUNT count
    net: tehuti: fix error return code in bdx_probe()
    ixgbe: Fix memleak in ixgbe_configure_clsu32
  * Revert "r8152: adjust the settings about MAC clock speed down for RTL8153"
      drivers/net/usb/r8152.c
    atm: lanai: dont run lanai_dev_close if not open
    atm: eni: dont release is never initialized
    powerpc/4xx: Fix build errors from mfdcr()
    net: fec: ptp: avoid register access when ipg clock is disabled
  * ANDROID: Make vsock virtio packet buff size configurable
      include/linux/virtio_vsock.h
  * ANDROID: fix up ext4 build from 4.19.183
      fs/ext4/namei.c

Bug: 187007303
Change-Id: I7bd7cc06a4928013a8ef194a55aadbb59ff0c6c1
Signed-off-by: Lucas Wei <lucaswei@google.com>
2021-05-19 21:07:43 +08:00
Du Cheng
5369cc42ab drivers: video: fbcon: fix NULL dereference in fbcon_cursor()
commit 01faae5193d6190b7b3aa93dae43f514e866d652 upstream.

add null-check on function pointer before dereference on ops->cursor

Reported-by: syzbot+b67aaae8d3a927f68d20@syzkaller.appspotmail.com
Cc: stable <stable@vger.kernel.org>
Signed-off-by: Du Cheng <ducheng2@gmail.com>
Link: https://lore.kernel.org/r/20210312081421.452405-1-ducheng2@gmail.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-04-07 12:48:51 +02:00
Lucas Wei
e7e6a26ceb Merge LA.UM.9.12.R2.10.00.00.685.039 via branch 'qcom-msm-4.19-7250' into android-msm-pixel-4.19
Conflicts:
	modified:   arch/arm64/configs/redbull_defconfig
	modified:   arch/arm64/configs/vendor/kona_defconfig
	modified:   arch/arm64/configs/vendor/lito_defconfig
	modified:   arch/arm64/include/asm/traps.h
	modified:   arch/arm64/kernel/smp.c
	modified:   arch/arm64/mm/dma-mapping.c
	modified:   arch/arm64/mm/fault.c
	modified:   drivers/android/binder.c
	modified:   drivers/base/power/wakeup.c
	modified:   drivers/bus/mhi/core/mhi_main.c
	modified:   drivers/clk/clk.c
	modified:   drivers/clocksource/arm_arch_timer.c
	modified:   drivers/cpuidle/lpm-levels.c
	modified:   drivers/crypto/msm/qcedev.c
	modified:   drivers/devfreq/governor_memlat_trace.h
	modified:   drivers/dma-buf/dma-buf.c
	modified:   drivers/gpu/Makefile
	modified:   drivers/gpu/drm/drm_dp_mst_topology.c
	modified:   drivers/gpu/drm/drm_edid.c
	modified:   drivers/gpu/msm/Kconfig
	modified:   drivers/gpu/msm/kgsl.c
	modified:   drivers/gpu/msm/kgsl_sharedmem.c
	modified:   drivers/hwtracing/coresight/coresight-etm-perf.c
	modified:   drivers/hwtracing/coresight/coresight-tmc-etr.c
	modified:   drivers/iommu/arm-smmu.c
	modified:   drivers/iommu/io-pgtable-arm.c
	modified:   drivers/iommu/io-pgtable-fast.c
	modified:   drivers/iommu/io-pgtable.c
	modified:   drivers/iommu/iommu.c
	modified:   drivers/leds/leds-qpnp-flash-v2.c
	modified:   drivers/misc/Kconfig
	modified:   drivers/misc/qseecom.c
	modified:   drivers/mmc/core/Kconfig
	modified:   drivers/mmc/core/block.c
	modified:   drivers/mmc/host/cqhci-crypto-qti.c
	modified:   drivers/mmc/host/cqhci-crypto.c
	modified:   drivers/mmc/host/cqhci.c
	modified:   drivers/mmc/host/sdhci-msm.c
	modified:   drivers/net/ethernet/qualcomm/rmnet/rmnet_handlers.c
	modified:   drivers/net/wireless/ath/wil6210/interrupt.c
	modified:   drivers/net/wireless/ath/wil6210/wmi.c
	modified:   drivers/platform/msm/ipa/ipa_v3/ipa_qmi_service.c
	modified:   drivers/power/supply/power_supply_sysfs.c
	modified:   drivers/power/supply/qcom/Kconfig
	modified:   drivers/power/supply/qcom/Makefile
	modified:   drivers/power/supply/qcom/qg-core.h
	modified:   drivers/power/supply/qcom/qpnp-qg.c
	modified:   drivers/power/supply/qcom/qpnp-smb5.c
	modified:   drivers/power/supply/qcom/smb5-lib.c
	modified:   drivers/power/supply/qcom/smb5-lib.h
	modified:   drivers/regulator/core.c
	modified:   drivers/regulator/proxy-consumer.c
	modified:   drivers/scsi/ufs/ufs_quirks.h
	modified:   drivers/scsi/ufs/ufshcd.c
	modified:   drivers/soc/qcom/icnss.c
	modified:   drivers/soc/qcom/minidump_log.c
	modified:   drivers/soc/qcom/watchdog_v2.c
	modified:   drivers/spi/spi-geni-qcom.c
	modified:   drivers/staging/android/ion/Makefile
	modified:   drivers/staging/android/ion/ion.c
	modified:   drivers/thermal/cpu_cooling.c
	modified:   drivers/thermal/of-thermal.c
	modified:   drivers/thermal/thermal_core.c
	modified:   drivers/tty/serial/Kconfig
	modified:   drivers/tty/serial/Makefile
	modified:   drivers/tty/serial/msm_geni_serial.c
	modified:   drivers/usb/core/usb.c
	modified:   drivers/usb/dwc3/gadget.c
	modified:   drivers/usb/dwc3/gadget.h
	modified:   drivers/usb/gadget/composite.c
	modified:   drivers/usb/gadget/epautoconf.c
	modified:   drivers/usb/gadget/udc/core.c
	modified:   drivers/usb/host/xhci.c
	modified:   fs/crypto/crypto.c
	modified:   fs/crypto/keysetup.c
	modified:   fs/crypto/keysetup_v1.c
	modified:   fs/f2fs/checkpoint.c
	modified:   fs/f2fs/data.c
	modified:   fs/f2fs/f2fs.h
	modified:   fs/f2fs/node.c
	modified:   fs/incfs/Kconfig
	modified:   fs/incfs/data_mgmt.c
	modified:   fs/incfs/data_mgmt.h
	modified:   fs/incfs/vfs.c
	modified:   fs/proc/task_mmu.c
	modified:   include/drm/drm_connector.h
	modified:   include/drm/drm_dp_mst_helper.h
	modified:   include/linux/clk-provider.h
	modified:   include/linux/dma-buf.h
	modified:   include/linux/dma-mapping.h
	modified:   include/linux/fs.h
	modified:   include/linux/io-pgtable.h
	modified:   include/linux/iommu.h
	modified:   include/linux/mm.h
	modified:   include/linux/mm_types.h
	modified:   include/linux/mmc/host.h
	modified:   include/linux/mmzone.h
	modified:   include/linux/perf_event.h
	modified:   include/linux/power_supply.h
	modified:   include/linux/pwm.h
	modified:   include/linux/regulator/driver.h
	modified:   include/linux/rwsem.h
	modified:   include/linux/sched.h
	modified:   include/linux/sched/signal.h
	modified:   include/linux/sched/sysctl.h
	modified:   include/linux/sched/topology.h
	modified:   include/linux/sched/user.h
	modified:   include/linux/thermal.h
	modified:   include/linux/usb.h
	modified:   include/linux/usb/gadget.h
	modified:   include/linux/usb/hcd.h
	modified:   include/linux/vm_event_item.h
	modified:   include/net/cfg80211.h
	modified:   include/scsi/scsi_device.h
	modified:   include/soc/qcom/minidump.h
	modified:   include/soc/qcom/qmi_rmnet.h
	modified:   include/soc/qcom/socinfo.h
	modified:   include/trace/events/power.h
	modified:   include/uapi/drm/drm_mode.h
	modified:   include/uapi/linux/coresight-stm.h
	modified:   include/uapi/linux/ip.h
	modified:   include/uapi/linux/nl80211.h
	modified:   include/uapi/linux/videodev2.h
	modified:   kernel/dma/mapping.c
	modified:   kernel/dma/removed.c
	modified:   kernel/panic.c
	modified:   kernel/sched/cpupri.c
	modified:   kernel/sched/cpupri.h
	modified:   kernel/sched/fair.c
	modified:   kernel/sched/rt.c
	modified:   kernel/sched/sched.h
	modified:   kernel/sched/walt.h
	modified:   kernel/sysctl.c
	modified:   mm/Kconfig
	modified:   mm/compaction.c
	modified:   mm/oom_kill.c
	modified:   mm/page_alloc.c
	modified:   mm/vmalloc.c
	modified:   mm/vmscan.c
	modified:   net/qrtr/qrtr.c
	modified:   net/wireless/nl80211.c
	modified:   net/wireless/scan.c
	modified:   sound/core/init.c
	modified:   sound/soc/soc-core.c
	modified:   sound/usb/card.c
	modified:   sound/usb/pcm.c
	modified:   sound/usb/pcm.h
	modified:   sound/usb/usbaudio.h

Bug: 172988823
Bug: 173092548
Signed-off-by: Lucas Wei <lucaswei@google.com>
Change-Id: I9c86e3a0309b7078e7640788c00172c6e9b4cf67
2021-03-17 10:53:52 +08:00
lucaswei
3ff70092e4 Merge android-4.19-stable (4.19.160) into android-msm-pixel-4.19-lts
Merge 4.19.160 into android-4.19-stable
Linux 4.19.160
    mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault()
    x86/microcode/intel: Check patch signature before saving microcode for early loading
  * seccomp: Set PF_SUPERPRIV when checking capability
      kernel/seccomp.c
  * ptrace: Set PF_SUPERPRIV when checking capability
      kernel/ptrace.c
    s390/dasd: fix null pointer dereference for ERP requests
    s390/cpum_sf.c: fix file permission for cpum_sfb_size
    mac80211: free sta in sta_info_insert_finish() on errors
    mac80211: minstrel: fix tx status processing corner case
    mac80211: minstrel: remove deferred sampling code
    xtensa: disable preemption around cache alias management calls
  * regulator: workaround self-referent regulators
      drivers/regulator/core.c
  * regulator: avoid resolve_supply() infinite recursion
      drivers/regulator/core.c
  * regulator: fix memory leak with repeated set_machine_constraints()
      drivers/regulator/core.c
    regulator: pfuze100: limit pfuze-support-disable-sw to pfuze{100,200}
    iio: accel: kxcjk1013: Add support for KIOX010A ACPI DSM for setting tablet-mode
    iio: accel: kxcjk1013: Replace is_smo8500_device with an acpi_type enum
  * ext4: fix bogus warning in ext4_update_dx_flag()
      fs/ext4/ext4.h
    staging: rtl8723bs: Add 024c:0627 to the list of SDIO device-ids
    efivarfs: fix memory leak in efivarfs_create()
    tty: serial: imx: keep console clocks always on
    ALSA: hda/realtek: Add some Clove SSID in the ALC293(ALC1220)
    ALSA: mixart: Fix mutex deadlock
  * ALSA: ctl: fix error path at adding user-defined element set
      sound/core/control.c
  * ALSA: usb-audio: Add delay quirk for all Logitech USB devices
      sound/usb/quirks.c
    ALSA: firewire: Clean up a locking issue in copy_resp_to_buf()
    speakup: Do not let the line discipline be used several times
  * libfs: fix error cast of negative value in simple_attr_write()
      fs/libfs.c
    efi/x86: Free efi_pgd with free_pages()
    xfs: revert "xfs: fix rmap key and record comparison functions"
    fail_function: Remove a redundant mutex unlock
    regulator: ti-abb: Fix array out of bound read access on the first transition
    xfs: strengthen rmap record flags checking
    xfs: fix the minrecs logic when dealing with inode root child blocks
    can: kvaser_usb: kvaser_usb_hydra: Fix KCAN bittiming limits
    drm/sun4i: dw-hdmi: fix error return code in sun8i_dw_hdmi_bind()
    MIPS: Alchemy: Fix memleak in alchemy_clk_setup_cpu
    ASoC: qcom: lpass-platform: Fix memory leak
    can: m_can: m_can_handle_state_change(): fix state change
    can: peak_usb: fix potential integer overflow on shift of a int
    can: mcba_usb: mcba_usb_start_xmit(): first fill skb, then pass to can_put_echo_skb()
    can: ti_hecc: Fix memleak in ti_hecc_probe
    can: dev: can_restart(): post buffer from the right context
    can: af_can: prevent potential access of uninitialized member in canfd_rcv()
    can: af_can: prevent potential access of uninitialized member in can_rcv()
  * ip_tunnels: Set tunnel option flag when tunnel metadata is present
      include/net/ip_tunnels.h
    perf lock: Don't free "lock_seq_stat" if read_count isn't zero
  * Input: resistive-adc-touch - fix kconfig dependency on IIO_BUFFER
      drivers/input/touchscreen/Kconfig
    ARM: dts: imx50-evk: Fix the chip select 1 IOMUX
    arm: dts: imx6qdl-udoo: fix rgmii phy-mode for ksz9031 phy
    arm64: dts: allwinner: h5: OrangePi Prime: Fix ethernet node
    MIPS: export has_transparent_hugepage() for modules
    Input: adxl34x - clean up a data type in adxl34x_probe()
    arm64: dts: allwinner: a64: bananapi-m64: Enable RGMII RX/TX delay on PHY
    ARM: dts: sun8i: a83t: Enable both RGMII RX/TX delay on Ethernet PHY
    ARM: dts: sun8i: h3: orangepi-plus2e: Enable RGMII RX/TX delay on Ethernet PHY
    Revert "arm: sun8i: orangepi-pc-plus: Set EMAC activity LEDs to active high"
    ARM: dts: sun8i: r40: bananapi-m2-ultra: Fix ethernet node
    arm64: dts: allwinner: h5: OrangePi PC2: Fix ethernet node
    arm64: dts: allwinner: a64: Pine64 Plus: Fix ethernet node
  * vfs: remove lockdep bogosity in __sb_start_write
      fs/super.c
  * arm64: psci: Avoid printing in cpu_psci_cpu_die()
      arch/arm64/kernel/psci.c
    ACPI: button: Add DMI quirk for Medion Akoya E2228T
    selftests: kvm: Fix the segment descriptor layout to match the actual layout
  * scsi: ufs: Fix unbalanced scsi_block_reqs_cnt caused by ufshcd_hold()
      drivers/scsi/ufs/ufshcd.c
    pinctrl: rockchip: enable gpio pclk for rockchip_gpio_to_irq
    net: ftgmac100: Fix crash when removing driver
    net/ncsi: Fix netlink registration
    net: usb: qmi_wwan: Set DTR quirk for MR400
    net/mlx5: Disable QoS when min_rates on all VFs are zero
    tcp: only postpone PROBE_RTT if RTT is < current min_rtt estimate
  * sctp: change to hold/put transport for proto_unreach_timer
      net/sctp/input.c
      net/sctp/sm_sideeffect.c
      net/sctp/transport.c
    qlcnic: fix error return code in qlcnic_83xx_restart_hw()
    qed: fix error return code in qed_iwarp_ll2_start()
  * page_frag: Recover from memory pressure
      mm/page_alloc.c
    net: x25: Increase refcnt of "struct x25_neigh" in x25_rx_call_request
  * net: qualcomm: rmnet: Fix incorrect receive packet handling during cleanup
      drivers/net/ethernet/qualcomm/rmnet/rmnet_handlers.c
    net/mlx4_core: Fix init_hca fields offset
  * netlabel: fix an uninitialized warning in netlbl_unlabel_staticlist()
      net/netlabel/netlabel_unlabeled.c
  * netlabel: fix our progress tracking in netlbl_unlabel_staticlist()
      net/netlabel/netlabel_unlabeled.c
    net: Have netpoll bring-up DSA management interface
    net: dsa: mv88e6xxx: Avoid VTU corruption on 6097
  * net: bridge: add missing counters to ndo_get_stats64 callback
      net/bridge/br_device.c
    net: b44: fix error return code in b44_init_one()
    mlxsw: core: Use variable timeout for EMAD retries
    lan743x: prevent entire kernel HANG on open, for some platforms
    lan743x: fix issue causing intermittent kernel log warnings
  * inet_diag: Fix error path to cancel the meseage in inet_req_diag_fill()
      net/ipv4/inet_diag.c
    devlink: Add missing genlmsg_cancel() in devlink_nl_sb_port_pool_fill()
    bnxt_en: read EEPROM A2h address using page 0
    atm: nicstar: Unmap DMA on send error
  * ah6: fix error return code in ah6_input()
      net/ipv6/ah6.c
    Merge 4.19.159 into android-4.19-stable
Linux 4.19.159
    ACPI: GED: fix -Wformat
    KVM: x86: clflushopt should be treated as a no-op by emulation
    can: proc: can_remove_proc(): silence remove_proc_entry warning
    mac80211: always wind down STA state
    Input: sunkbd - avoid use-after-free in teardown paths
    powerpc/8xx: Always fault when _PAGE_ACCESSED is not set
    Revert "perf cs-etm: Move definition of 'traceid_list' global variable from header file"
    powerpc/64s: flush L1D after user accesses
    powerpc/uaccess: Evaluate macro arguments once, before user access is allowed
    powerpc: Fix __clear_user() with KUAP enabled
    powerpc: Implement user_access_begin and friends
    powerpc: Add a framework for user access tracking
    powerpc/64s: flush L1D on kernel entry
    powerpc/64s: move some exception handlers out of line
    ANDROID: GKI: Update ABI for incfs and dm-user
    Revert "ANDROID: Add dependencies of dm-user.ko"
  * ANDROID: Incremental fs: Add zstd compression support
      fs/incfs/Kconfig
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/format.h
      include/uapi/linux/incrementalfs.h
  * ANDROID: Incremental fs: Small improvements
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/format.c
      fs/incfs/format.h
      fs/incfs/pseudo_files.c
      fs/incfs/vfs.c
  * ANDROID: Incremental fs: Initialize mount options correctly
      fs/incfs/vfs.c
    ANDROID: Incremental fs: Fix read_log_test which failed sporadically
  * ANDROID: Incremental fs: Fix misuse of cpu_to_leXX and poll return
      fs/incfs/format.c
      fs/incfs/pseudo_files.c
  * ANDROID: Incremental fs: Add per UID read timeouts
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/pseudo_files.c
      fs/incfs/vfs.c
      include/uapi/linux/incrementalfs.h
  * ANDROID: Incremental fs: Add .incomplete folder
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/pseudo_files.c
      fs/incfs/vfs.c
  * ANDROID: Incremental fs: Fix dangling else
      fs/incfs/data_mgmt.c
  * ANDROID: Incremental fs: Fix uninitialized variable
      fs/incfs/vfs.c
  * ANDROID: Incremental fs: Fix filled block count from get filled blocks
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/format.c
      fs/incfs/format.h
      fs/incfs/pseudo_files.c
      fs/incfs/vfs.c
      fs/incfs/vfs.h
  * ANDROID: Incremental fs: Add hash block counts to IOC_IOCTL_GET_BLOCK_COUNT
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/format.c
      fs/incfs/format.h
      fs/incfs/vfs.c
      include/uapi/linux/incrementalfs.h
  * ANDROID: Incremental fs: Add INCFS_IOC_GET_BLOCK_COUNT
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/format.c
      fs/incfs/format.h
      fs/incfs/vfs.c
      include/uapi/linux/incrementalfs.h
  * ANDROID: Incremental fs: Make compatible with existing files
      fs/incfs/format.c
      fs/incfs/format.h
  * ANDROID: Incremental fs: Remove block HASH flag
      fs/incfs/format.c
      fs/incfs/format.h
  * ANDROID: Incremental fs: Remove back links and crcs
      fs/incfs/format.c
      fs/incfs/format.h
  * ANDROID: Incremental fs: Remove attributes from file
      fs/incfs/data_mgmt.c
      fs/incfs/format.c
      fs/incfs/format.h
      fs/incfs/pseudo_files.c
  * ANDROID: Incremental fs: Add .blocks_written file
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/pseudo_files.c
      fs/incfs/pseudo_files.h
      include/uapi/linux/incrementalfs.h
  * ANDROID: Incremental fs: Separate pseudo-file code
      fs/incfs/Makefile
      fs/incfs/pseudo_files.c
      fs/incfs/pseudo_files.h
      fs/incfs/vfs.c
      fs/incfs/vfs.h
  * ANDROID: Incremental fs: Add UID to pending_read
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/main.c
      fs/incfs/vfs.c
      include/uapi/linux/incrementalfs.h
  * ANDROID: Incremental fs: Create mapped file
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/format.c
      fs/incfs/format.h
      fs/incfs/vfs.c
      include/uapi/linux/incrementalfs.h
  * ANDROID: Incremental fs: Don't allow renaming .index directory.
      fs/incfs/vfs.c
  * ANDROID: Incremental fs: Fix incfs to work on virtio-9p
      fs/incfs/format.c
      fs/incfs/vfs.c
    ANDROID: Incremental fs: Allow running a single test
    ANDROID: Incremental fs: Adding perf test
    ANDROID: Incremental fs: Stress tool
  * ANDROID: Incremental fs: Use R/W locks to read/write segment blockmap.
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/vfs.c
  * ANDROID: Incremental fs: Remove unnecessary dependencies
      fs/incfs/Kconfig
  * ANDROID: Incremental fs: Remove annoying pr_debugs
      fs/incfs/data_mgmt.c
  * ANDROID: Incremental fs: dentry_revalidate should not return -EBADF.
      fs/incfs/vfs.c
  * ANDROID: Incremental fs: Fix minor bugs
      fs/incfs/data_mgmt.c
      fs/incfs/vfs.c
  * ANDROID: Incremental fs: RCU locks instead of mutex for pending_reads.
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
  * ANDROID: Incremental fs: fix up attempt to copy structures with READ/WRITE_ONCE
      fs/incfs/vfs.c
    Merge 4.19.158 into android-4.19-stable
    Revert "ANDROID: clang: update to 11.0.5"
Linux 4.19.158
    Convert trailing spaces and periods in path components
  * net: sch_generic: fix the missing new qdisc assignment bug
      net/sched/sch_generic.c
  * reboot: fix overflow parsing reboot cpu number
      kernel/reboot.c
  * Revert "kernel/reboot.c: convert simple_strtoul to kstrtoint"
      kernel/reboot.c
  * perf/core: Fix race in the perf_mmap_close() function
      kernel/events/core.c
    perf scripting python: Avoid declaring function pointers with a visibility attribute
    x86/speculation: Allow IBPB to be conditionally enabled on CPUs with always-on STIBP
  * random32: make prandom_u32() output unpredictable
      drivers/char/random.c
      include/linux/prandom.h
      kernel/time/timer.c
      lib/random32.c
    r8169: fix potential skb double free in an error path
    vrf: Fix fast path output packet handling with async Netfilter rules
  * tipc: fix memory leak in tipc_topsrv_start()
      net/tipc/topsrv.c
    net/x25: Fix null-ptr-deref in x25_connect
  * net: Update window_clamp if SOCK_RCVBUF is set
      net/ipv4/syncookies.c
      net/ipv6/syncookies.c
    net/af_iucv: fix null pointer dereference on shutdown
  * IPv6: Set SIT tunnel hard_header_len to zero
      net/ipv6/sit.c
  * swiotlb: fix "x86: Don't panic if can not alloc buffer for swiotlb"
      kernel/dma/swiotlb.c
    erofs: derive atime instead of leaving it empty
    pinctrl: amd: fix incorrect way to disable debounce filter
    pinctrl: amd: use higher precision for 512 RtcClk
    drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[]
  * don't dump the threads that had been already exiting when zapped.
      kernel/exit.c
    mmc: renesas_sdhi_core: Add missing tmio_mmc_host_free() at remove
    gpio: pcie-idio-24: Enable PEX8311 interrupts
    gpio: pcie-idio-24: Fix IRQ Enable Register value
    gpio: pcie-idio-24: Fix irq mask when masking
    selinux: Fix error return code in sel_ib_pkey_sid_slow()
    btrfs: fix potential overflow in cluster_pages_for_defrag on 32bit arch
    ocfs2: initialize ip_next_orphan
  * futex: Don't enable IRQs unconditionally in put_pi_state()
      kernel/futex.c
    mei: protect mei_cl_mtu from null dereference
    xhci: hisilicon: fix refercence leak in xhci_histb_probe
    usb: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode
  * uio: Fix use-after-free in uio_unregister_device()
      drivers/uio/uio.c
    thunderbolt: Add the missed ida_simple_remove() in ring_request_msix()
    thunderbolt: Fix memory leak if ida_simple_get() fails in enumerate_services()
    btrfs: dev-replace: fail mount if we don't have replace item with target device
    btrfs: ref-verify: fix memory leak in btrfs_ref_tree_mod
  * ext4: unlock xattr_sem properly in ext4_inline_data_truncate()
      fs/ext4/inline.c
  * ext4: correctly report "not supported" for {usr,grp}jquota when !CONFIG_QUOTA
      fs/ext4/super.c
  * perf: Fix get_recursion_context()
      kernel/events/internal.h
    cosa: Add missing kfree in error path of cosa_write
  * of/address: Fix of_node memory leak in of_dma_is_coherent
      drivers/of/address.c
    xfs: fix a missing unlock on error in xfs_fs_map_blocks
    lan743x: fix "BUG: invalid wait context" when setting rx mode
    xfs: fix brainos in the refcount scrubber's rmap fragment processor
    xfs: fix rmap key and record comparison functions
    xfs: set the unwritten bit in rmap lookup flags in xchk_bmap_get_rmapextents
    xfs: fix flags argument to rmap lookup when converting shared file rmaps
    nbd: fix a block_device refcount leak in nbd_release
    pinctrl: aspeed: Fix GPI only function problem.
    ARM: 9019/1: kprobes: Avoid fortify_panic() when copying optprobe template
    pinctrl: intel: Set default bias in case no particular value given
    mfd: sprd: Add wakeup capability for PMIC IRQ
  * tick/common: Touch watchdog in tick_unfreeze() on all CPUs
      kernel/time/tick-common.c
    tpm_tis: Disable interrupts on ThinkPad T490s
    selftests: proc: fix warning: _GNU_SOURCE redefined
    vfio: platform: fix reference leak in vfio_platform_open
    s390/smp: move rcu_cpu_starting() earlier
    iommu/amd: Increase interrupt remapping table limit to 512 entries
    scsi: scsi_dh_alua: Avoid crash during alua_bus_detach()
  * cfg80211: regulatory: Fix inconsistent format argument
      net/wireless/reg.c
    mac80211: fix use of skb payload instead of header
    drm/amd/pm: do not use ixFEATURE_STATUS for checking smc running
    drm/amd/pm: perform SMC reset on suspend/hibernation
    drm/amdgpu: perform srbm soft reset always on SDMA resume
    scsi: hpsa: Fix memory leak in hpsa_init_one()
    gfs2: check for live vs. read-only file system in gfs2_fitrim
    gfs2: Add missing truncate_inode_pages_final for sd_aspace
    gfs2: Free rd_bits later in gfs2_clear_rgrpd to fix use-after-free
    usb: gadget: goku_udc: fix potential crashes in probe
  * crypto: arm64/aes-modes - get rid of literal load of addend vector
      arch/arm64/crypto/aes-modes.S
  * netfilter: use actual socket sk rather than skb sk when routing harder
      include/linux/netfilter_ipv4.h
      include/linux/netfilter_ipv6.h
      net/ipv4/netfilter.c
      net/ipv4/netfilter/iptable_mangle.c
      net/ipv4/netfilter/nf_nat_l3proto_ipv4.c
      net/ipv4/netfilter/nf_reject_ipv4.c
      net/ipv6/netfilter.c
      net/ipv6/netfilter/ip6table_mangle.c
    ath9k_htc: Use appropriate rs_datalen type
    Btrfs: fix missing error return if writeback for extent buffer never started
    tpm: efi: Don't create binary_bios_measurements file for an empty log
    xfs: fix scrub flagging rtinherit even if there is no rt device
    xfs: flush new eof page on truncate to avoid post-eof corruption
    can: flexcan: remove FLEXCAN_QUIRK_DISABLE_MECR quirk for LS1021A
    can: peak_canfd: pucan_handle_can_rx(): fix echo management when loopback is on
    can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping
    can: peak_usb: add range checking in decode operations
  * can: can_create_echo_skb(): fix echo skb generation: always use skb_clone()
      include/linux/can/skb.h
    can: dev: __can_get_echo_skb(): fix real payload length return value for RTR frames
    can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context
    can: rx-offload: don't call kfree_skb() from IRQ context
    ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link()
    perf tools: Add missing swap for ino_generation
    netfilter: ipset: Update byte and packet counters regardless of whether they match
    xfs: set xefi_discard when creating a deferred agfl free log intent item
  * net: xfrm: fix a race condition during allocing spi
      net/xfrm/xfrm_state.c
    hv_balloon: disable warning when floor reached
  * genirq: Let GENERIC_IRQ_IPI select IRQ_DOMAIN_HIERARCHY
      kernel/irq/Kconfig
    btrfs: reschedule when cloning lots of extents
    btrfs: sysfs: init devices outside of the chunk_mutex
  * usb: dwc3: gadget: Reclaim extra TRBs after request completion
      drivers/usb/dwc3/gadget.c
  * usb: dwc3: gadget: Continue to process pending requests
      drivers/usb/dwc3/gadget.c
    nbd: don't update block size after device is started
  * time: Prevent undefined behaviour in timespec64_to_ns()
      include/linux/time64.h
      kernel/time/itimer.c
  * regulator: defer probe when trying to get voltage from unresolved supply
      drivers/regulator/core.c
  * FROMGIT: Input: Add devices for HID_QUIRK_INCREMENT_USAGE_ON_DUPLICATE
      drivers/hid/hid-ids.h
      drivers/hid/hid-quirks.c
  * ANDROID: arm64: Fix off-by-one vdso trampoline return value
      arch/arm64/include/asm/vdso.h
    ANDROID: Add dependencies of dm-user.ko
  * UPSTREAM: arm64: vdso: Add -fasynchronous-unwind-tables to cflags
      arch/arm64/kernel/vdso/Makefile
  * UPSTREAM: of: property: Fix create device links for all child-supplier dependencies
      drivers/of/property.c
  * UPSTREAM: of: property: Do not link to disabled devices
      drivers/of/property.c
  * UPSTREAM: drm: Fix doc warning in drm_connector_attach_edid_property()
      drivers/gpu/drm/drm_connector.c
  * UPSTREAM: selinux: fix non-MLS handling in mls_context_to_sid()
      security/selinux/ss/mls.c
  * UPSTREAM: drm/prime: Fix drm_gem_prime_mmap() stack use
      drivers/gpu/drm/drm_prime.c
  * UPSTREAM: crypto: chacha-generic - fix use as arm64 no-NEON fallback
      crypto/chacha_generic.c
    UPSTREAM: slab: store tagged freelist for off-slab slabmgmt
    UPSTREAM: parisc: Switch from DISCONTIGMEM to SPARSEMEM
  * UPSTREAM: cgroup: Move cgroup_parse_float() implementation out of CONFIG_SYSFS
      kernel/cgroup/cgroup.c
  * UPSTREAM: fork: don't check parent_tidptr with CLONE_PIDFD
      kernel/fork.c
  * UPSTREAM: vdso: Remove superfluous #ifdef __KERNEL__ in vdso/datapage.h
      include/vdso/datapage.h
  * UPSTREAM: arm64: compat: No need for pre-ARMv7 barriers on an ARMv8 system
      arch/arm64/include/asm/vdso/compat_barrier.h
  * UPSTREAM: timekeeping/vsyscall: Use __iter_div_u64_rem()
      kernel/time/vsyscall.c
  * UPSTREAM: kasan: remove clang version check for KASAN_STACK
      lib/Kconfig.kasan
  * UPSTREAM: page flags: prioritize kasan bits over last-cpuid
      include/linux/page-flags-layout.h
  * UPSTREAM: timekeeping/vsyscall: Prevent math overflow in BOOTTIME update
      include/linux/timekeeper_internal.h
      kernel/time/timekeeping.c
      kernel/time/vsyscall.c
    UPSTREAM: kcm: disable preemption in kcm_parse_func_strparser()
  * UPSTREAM: cfg80211: validate SSID/MBSSID element ordering assumption
      net/wireless/scan.c
    UPSTREAM: MIPS: VDSO: Fix build for binutils < 2.25
    UPSTREAM: virt_wifi: fix refcnt leak in module exit routine
  * UPSTREAM: sched/topology: Allow sched_asym_cpucapacity to be disabled
      kernel/sched/topology.c
  * UPSTREAM: scripts/tools-support-relr.sh: un-quote variables
      scripts/tools-support-relr.sh
  * UPSTREAM: fork: fix pidfd_poll()'s return type
      kernel/fork.c
    UPSTREAM: virt_wifi: fix use-after-free in virt_wifi_newlink()
  * UPSTREAM: of/platform: Unconditionally pause/resume sync state during kernel init
      drivers/of/platform.c
  * UPSTREAM: selinux: ensure the policy has been loaded before reading the sidtab stats
      security/selinux/ss/services.c
  * UPSTREAM: raid6/test: fix a compilation error
      include/linux/raid/pq.h
    UPSTREAM: PM: hibernate: fix crashes with init_on_free=1
    UPSTREAM: ARM: bcm2835_defconfig: Explicitly restore CONFIG_DEBUG_FS
    UPSTREAM: ARM: socfpga_defconfig: Add back DEBUG_FS
  * UPSTREAM: binderfs: use refcount for binder control devices too
      drivers/android/binderfs.c
    UPSTREAM: um: Fix header inclusion
  * UPSTREAM: PM: sleep: wakeup: Skip wakeup_source_sysfs_remove() if device is not there
      drivers/base/power/wakeup.c
  * UPSTREAM: Input: fix stale timestamp on key autorepeat events
      drivers/input/input.c
  * UPSTREAM: mm/filemap.c: don't bother dropping mmap_sem for zero size readahead
      mm/filemap.c
  * UPSTREAM: arm64: vdso: don't free unallocated pages
      arch/arm64/kernel/vdso.c
  * UPSTREAM: usb: typec: altmode: Fix typec_altmode_get_partner sometimes returning an invalid pointer
      drivers/usb/typec/bus.c
  * UPSTREAM: ipv6: ndisc: RFC-ietf-6man-ra-pref64-09 is now published as RFC8781
      include/net/ndisc.h
    UPSTREAM: s390/setup: init jump labels before command line parsing
  * UPSTREAM: dma-buf: free dmabuf->name in dma_buf_release()
      drivers/dma-buf/dma-buf.c
  * UPSTREAM: driver core: Don't do deferred probe in parallel with kernel_init thread
      drivers/base/base.h
      drivers/base/core.c
      drivers/base/dd.c
  * UPSTREAM: fscrypt: restrict IV_INO_LBLK_* to AES-256-XTS
      fs/crypto/policy.c
  * UPSTREAM: fscrypt: use smp_load_acquire() for fscrypt_prepared_key
      fs/crypto/fscrypt_private.h
      fs/crypto/inline_crypt.c
      fs/crypto/keysetup.c
  * UPSTREAM: mm/page_alloc: silence a KASAN false positive
      mm/page_alloc.c
  * UPSTREAM: ARM64: vdso32: Install vdso32 from vdso_install
      arch/arm64/Makefile
      arch/arm64/kernel/vdso32/Makefile
  * UPSTREAM: fscrypt: restrict IV_INO_LBLK_32 to ino_bits <= 32
      fs/crypto/policy.c
  * UPSTREAM: coresight: tmc: Fix bad register address for CLAIM
      drivers/hwtracing/coresight/coresight-tmc-etf.c
  * UPSTREAM: coresight: etm4x: Fix unused function warning
      drivers/hwtracing/coresight/coresight-etm4x.c
  * UPSTREAM: coresight: etm4x: Fix use-after-free of per-cpu etm drvdata
      drivers/hwtracing/coresight/coresight-etm4x.c
  * UPSTREAM: coresight: etm4x: Fix save/restore during cpu idle
      drivers/hwtracing/coresight/coresight-etm4x.c
      drivers/hwtracing/coresight/coresight-etm4x.h
  * UPSTREAM: coresight: etm4x: Handle unreachable sink in perf mode
      drivers/hwtracing/coresight/coresight-etm-perf.c
  * UPSTREAM: coresight: etm4x: Fix issues on trcseqevr access
      drivers/hwtracing/coresight/coresight-etm4x.c
  * UPSTREAM: coresight: etm: perf: Fix warning caused by etm_setup_aux failure
      drivers/hwtracing/coresight/coresight-etm-perf.c
  * UPSTREAM: coresight: etm4x: Fix save and restore of TRCVMIDCCTLR1 register
      drivers/hwtracing/coresight/coresight-etm4x.c
    Merge 4.19.157 into android-4.19-stable
Linux 4.19.157
    powercap: restrict energy meter to root access
  * Revert "ANDROID: Kbuild, LLVMLinux: allow overriding clang target triple"
      Makefile
      build.config.aarch64
      build.config.allmodconfig
      build.config.arm
      build.config.x86_64
    Merge 4.19.156 into android-4.19-stable
Linux 4.19.156
    arm64: dts: marvell: espressobin: Add ethernet switch aliases
  * net: dsa: read mac address from DT for slave device
      include/net/dsa.h
    tools: perf: Fix build error in v4.19.y
  * perf/core: Fix a memory leak in perf_event_parse_addr_filter()
      kernel/events/core.c
  * PM: runtime: Resume the device earlier in __device_release_driver()
      drivers/base/dd.c
    Revert "ARC: entry: fix potential EFA clobber when TIF_SYSCALL_TRACE"
    ARC: stack unwinding: avoid indefinite looping
    usb: mtu3: fix panic in mtu3_gadget_stop()
  * USB: Add NO_LPM quirk for Kingston flash drive
      drivers/usb/core/quirks.c
    USB: serial: option: add Telit FN980 composition 0x1055
    USB: serial: option: add LE910Cx compositions 0x1203, 0x1230, 0x1231
    USB: serial: option: add Quectel EC200T module support
    USB: serial: cyberjack: fix write-URB completion race
    serial: txx9: add missing platform_driver_unregister() on error in serial_txx9_init
    serial: 8250_mtk: Fix uart_get_baud_rate warning
  * fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent
      kernel/fork.c
    vt: Disable KD_FONT_OP_COPY
    ACPI: NFIT: Fix comparison to '-ENXIO'
    drm/vc4: drv: Add error handding for bind
    vsock: use ns_capable_noaudit() on socket create
  * scsi: core: Don't start concurrent async scan on same host
      drivers/scsi/scsi_scan.c
  * blk-cgroup: Pre-allocate tree node on blkg_conf_prep
      block/blk-cgroup.c
  * blk-cgroup: Fix memleak on error path
      block/blk-cgroup.c
  * of: Fix reserved-memory overlap detection
      drivers/of/of_reserved_mem.c
    x86/kexec: Use up-to-dated screen_info copy to fill boot params
    ARM: dts: sun4i-a10: fix cpu_alert temperature
  * futex: Handle transient "ownerless" rtmutex state correctly
      kernel/futex.c
  * tracing: Fix out of bounds write in get_trace_buf
      kernel/trace/trace.c
  * ftrace: Handle tracing when switching between context
      kernel/trace/trace.h
  * ftrace: Fix recursion check for NMI test
      kernel/trace/trace.h
  * ring-buffer: Fix recursion protection transitions between interrupt context
      kernel/trace/ring_buffer.c
    gfs2: Wake up when sd_glock_disposal becomes zero
  * mm: always have io_remap_pfn_range() set pgprot_decrypted()
      include/asm-generic/pgtable.h
      include/linux/mm.h
  * kthread_worker: prevent queuing delayed work from timer_fn when it is being canceled
      kernel/kthread.c
    lib/crc32test: remove extra local_irq_disable/enable
    mm: mempolicy: fix potential pte_unmap_unlock pte error
  * ALSA: usb-audio: Add implicit feedback quirk for MODX
      sound/usb/pcm.c
  * ALSA: usb-audio: Add implicit feedback quirk for Qu-16
      sound/usb/pcm.c
  * ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas devices
      sound/usb/quirks.c
  * ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2
      sound/usb/pcm.c
    Fonts: Replace discarded const qualifier
    btrfs: tree-checker: fix the error message for transid error
    btrfs: tree-checker: Verify inode item
    btrfs: tree-checker: Enhance chunk checker to validate chunk profile
    btrfs: tree-checker: Fix wrong check on max devid
    btrfs: tree-checker: Verify dev item
    btrfs: tree-checker: Check chunk item at tree block read time
    btrfs: tree-checker: Make btrfs_check_chunk_valid() return EUCLEAN instead of EIO
    btrfs: tree-checker: Make chunk item checker messages more readable
    btrfs: Move btrfs_check_chunk_valid() to tree-check.[ch] and export it
    btrfs: Don't submit any btree write bio if the fs has errors
    Btrfs: fix unwritten extent buffers and hangs on future writeback attempts
    btrfs: extent_io: add proper error handling to lock_extent_buffer_for_io()
    btrfs: extent_io: Handle errors better in btree_write_cache_pages()
    btrfs: extent_io: Handle errors better in extent_write_full_page()
    btrfs: flush write bio if we loop in extent_write_cache_pages
    Revert "btrfs: flush write bio if we loop in extent_write_cache_pages"
    btrfs: extent_io: Move the BUG_ON() in flush_write_bio() one level up
    btrfs: extent_io: Kill the forward declaration of flush_write_bio
  * blktrace: fix debugfs use after free
      kernel/trace/blktrace.c
    sfp: Fix error handing in sfp_probe()
  * sctp: Fix COMM_LOST/CANT_STR_ASSOC err reporting on big-endian platforms
      net/sctp/sm_sideeffect.c
    net: usb: qmi_wwan: add Telit LE910Cx 0x1230 composition
    gianfar: Account for Tx PTP timestamp in the skb headroom
    gianfar: Replace skb_realloc_headroom with skb_cow_head for PTP
    chelsio/chtls: fix always leaking ctrl_skb
    chelsio/chtls: fix memory leaks caused by a race
    cadence: force nonlinear buffers to be cloned
  * ptrace: fix task_join_group_stop() for the case when current is traced
      kernel/signal.c
  * tipc: fix use-after-free in tipc_bcast_get_mode
      net/tipc/core.c
    drm/i915: Break up error capture compression loops with cond_resched()
  * ANDROID: fuse: Add support for d_canonical_path
      fs/fuse/dev.c
      fs/fuse/dir.c
      fs/fuse/fuse_i.h
      include/uapi/linux/fuse.h
  * ANDROID: vfs: add d_canonical_path for stacked filesystem support
      fs/notify/inotify/inotify_user.c
      include/linux/dcache.h
      include/linux/fsnotify.h
  * ANDROID: Temporarily disable XFRM_USER_COMPAT filtering
      net/xfrm/xfrm_state.c
      net/xfrm/xfrm_user.c
    Merge 4.19.155 into android-4.19-stable
Linux 4.19.155
    staging: octeon: Drop on uncorrectable alignment or FCS error
    staging: octeon: repair "fixed-link" support
    staging: comedi: cb_pcidas: Allow 2-channel commands for AO subdevice
  * KVM: arm64: Fix AArch32 handling of DBGD{CCINT,SCRext} and DBGVCR
      arch/arm64/include/asm/kvm_host.h
  * device property: Don't clear secondary pointer for shared primary firmware node
      drivers/base/core.c
  * device property: Keep secondary firmware node secondary by type
      drivers/base/core.c
    ARM: s3c24xx: fix missing system reset
    ARM: samsung: fix PM debug build with DEBUG_LL but !MMU
    arm: dts: mt7623: add missing pause for switchport
  * hil/parisc: Disable HIL driver when it gets stuck
      include/linux/hil_mlc.h
    cachefiles: Handle readpage error correctly
  * arm64: berlin: Select DW_APB_TIMER_OF
      arch/arm64/Kconfig.platforms
    tty: make FONTX ioctl use the tty pointer they were actually passed
    rtc: rx8010: don't modify the global rtc ops
    drm/ttm: fix eviction valuable range check.
  * ext4: fix invalid inode checksum
      fs/ext4/inode.c
  * ext4: fix error handling code in add_new_gdb
      fs/ext4/resize.c
  * ext4: fix leaking sysfs kobject after failed mount
      fs/ext4/super.c
    vringh: fix __vringh_iov() when riov and wiov are different
  * ring-buffer: Return 0 on success from ring_buffer_resize()
      kernel/trace/ring_buffer.c
    9P: Cast to loff_t before multiplying
    libceph: clear con->out_msg on Policy::stateful_server faults
    ceph: promote to unsigned long long before shifting
    drm/amd/display: Don't invoke kgdb_breakpoint() unconditionally
    drm/amdgpu: don't map BO in reserved region
    i2c: imx: Fix external abort on interrupt in exit paths
    ia64: fix build error with !COREDUMP
    ubi: check kthread_should_stop() after the setting of task state
    perf python scripting: Fix printable strings in python3 scripts
    ubifs: dent: Fix some potential memory leaks while iterating entries
    NFSD: Add missing NFSv2 .pc_func methods
  * NFSv4.2: support EXCHGID4_FLAG_SUPP_FENCE_OPS 4.2 EXCHANGE_ID flag
      include/uapi/linux/nfs4.h
    powerpc: Fix undetected data corruption with P9N DD2.1 VSX CI load emulation
    powerpc/powernv/elog: Fix race while processing OPAL error log event.
    powerpc: Warn about use of smt_snooze_delay
    powerpc/rtas: Restrict RTAS requests from userspace
    s390/stp: add locking to sysfs functions
    powerpc/drmem: Make lmb_size 64 bit
    iio:gyro:itg3200: Fix timestamp alignment and prevent data leak.
    iio:adc:ti-adc12138 Fix alignment issue with timestamp
    iio:adc:ti-adc0832 Fix alignment issue with timestamp
    iio:light:si1145: Fix timestamp alignment and prevent data leak.
    dmaengine: dma-jz4780: Fix race in jz4780_dma_tx_status
    udf: Fix memory leak when mounting
    HID: wacom: Avoid entering wacom_wac_pen_report for pad / battery
    vt: keyboard, extend func_buf_lock to readers
    vt: keyboard, simplify vt_kdgkbsent
    drm/i915: Force VT'd workarounds when running as a guest OS
    usb: host: fsl-mph-dr-of: check return of dma_set_mask()
    usb: typec: tcpm: reset hard_reset_count for any disconnect
    usb: cdc-acm: fix cooldown mechanism
  * usb: dwc3: core: don't trigger runtime pm when remove driver
      drivers/usb/dwc3/core.c
  * usb: dwc3: core: add phy cleanup for probe error handling
      drivers/usb/dwc3/core.c
  * usb: dwc3: gadget: Check MPS of the request length
      drivers/usb/dwc3/gadget.c
  * usb: dwc3: ep0: Fix ZLP for OUT ep0 requests
      drivers/usb/dwc3/ep0.c
  * usb: xhci: Workaround for S3 issue on AMD SNPS 3.0 xHC
      drivers/usb/host/xhci-pci.c
      drivers/usb/host/xhci.h
    btrfs: fix use-after-free on readahead extent after failure to create it
    btrfs: cleanup cow block on error
    btrfs: use kvzalloc() to allocate clone_roots in btrfs_ioctl_send()
    btrfs: send, recompute reference path after orphanization of a directory
    btrfs: reschedule if necessary when logging directory items
    btrfs: improve device scanning messages
    btrfs: qgroup: fix wrong qgroup metadata reserve for delayed inode
    scsi: qla2xxx: Fix crash on session cleanup with unload
    scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove()
    w1: mxc_w1: Fix timeout resolution problem leading to bus error
    acpi-cpufreq: Honor _PSD table setting on new AMD CPUs
    ACPI: debug: don't allow debugging when ACPI is disabled
    ACPI: video: use ACPI backlight for HP 635 Notebook
    ACPI / extlog: Check for RDMSR failure
    ACPI: button: fix handling lid state changes when input device closed
    NFS: fix nfs_path in case of a rename retry
  * fs: Don't invalidate page buffers in block_write_full_page()
      fs/buffer.c
    media: uvcvideo: Fix uvc_ctrl_fixup_xu_info() not having any effect
    leds: bcm6328, bcm6358: use devres LED registering function
    perf/x86/amd/ibs: Fix raw sample data accumulation
    perf/x86/amd/ibs: Don't include randomized bits in get_ibs_op_count()
    mmc: sdhci-acpi: AMDI0040: Set SDHCI_QUIRK2_PRESET_VALUE_BROKEN
    md/raid5: fix oops during stripe resizing
    nvme-rdma: fix crash when connect rejected
  * sgl_alloc_order: fix memory leak
      lib/scatterlist.c
    nbd: make the config put is called before the notifying the waiter
    ARM: dts: s5pv210: remove dedicated 'audio-subsystem' node
    ARM: dts: s5pv210: move PMU node out of clock controller
    ARM: dts: s5pv210: remove DMA controller bus node name to fix dtschema warnings
    memory: emif: Remove bogus debugfs error handling
    ARM: dts: omap4: Fix sgx clock rate for 4430
    arm64: dts: renesas: ulcb: add full-pwr-cycle-in-suspend into eMMC nodes
    cifs: handle -EINTR in cifs_setattr
    gfs2: add validation checks for size of superblock
  * ext4: Detect already used quota file early
      fs/ext4/super.c
    drivers: watchdog: rdc321x_wdt: Fix race condition bugs
    net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid
    clk: ti: clockdomain: fix static checker warning
  * rpmsg: glink: Use complete_all for open states
      drivers/rpmsg/qcom_glink_native.c
    bnxt_en: Log unknown link speed appropriately.
    md/bitmap: md_bitmap_get_counter returns wrong blocks
    btrfs: fix replace of seed device
    drm/amd/display: HDMI remote sink need mode validation for Linux
    power: supply: test_power: add missing newlines when printing parameters by sysfs
    bus/fsl_mc: Do not rely on caller to provide non NULL mc_io
    drivers/net/wan/hdlc_fr: Correctly handle special skb->protocol values
    ACPI: Add out of bounds and numa_off protections to pxm_to_node()
    xfs: don't free rt blocks when we're doing a REMAP bunmapi call
  * arm64/mm: return cpu_all_mask when node is NUMA_NO_NODE
      arch/arm64/include/asm/numa.h
  * usb: xhci: omit duplicate actions when suspending a runtime suspended host.
      drivers/usb/host/xhci.c
  * uio: free uio id after uio file node is freed
      drivers/uio/uio.c
    USB: adutux: fix debugging
    cpufreq: sti-cpufreq: add stih418 support
    riscv: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO
    media: uvcvideo: Fix dereference of out-of-bound list iterator
    kgdb: Make "kgdbcon" work properly with "kgdb_earlycon"
    ia64: kprobes: Use generic kretprobe trampoline handler
  * printk: reduce LOG_BUF_SHIFT range for H8300
      init/Kconfig
  * arm64: topology: Stop using MPIDR for topology information
      arch/arm64/kernel/topology.c
    drm/bridge/synopsys: dsi: add support for non-continuous HS clock
    mmc: via-sdmmc: Fix data race bug
    media: imx274: fix frame interval handling
    media: tw5864: check status of tw5864_frameinterval_get
  * usb: typec: tcpm: During PR_SWAP, source caps should be sent only after tSwapSourceStart
      include/linux/usb/pd.h
    media: platform: Improve queue set up flow for bug fixing
  * media: videodev2.h: RGB BT2020 and HSV are always full range
      include/uapi/linux/videodev2.h
    drm/brige/megachips: Add checking if ge_b850v3_lvds_init() is working correctly
    ath10k: fix VHT NSS calculation when STBC is enabled
    ath10k: start recovery process when payload length exceeds max htc length for sdio
    video: fbdev: pvr2fb: initialize variables
    xfs: fix realtime bitmap/summary file truncation when growing rt volume
    power: supply: bq27xxx: report "not charging" on all types
    ARM: 8997/2: hw_breakpoint: Handle inexact watchpoint addresses
    um: change sigio_spinlock to a mutex
  * f2fs: fix to check segment boundary during SIT page readahead
      fs/f2fs/checkpoint.c
  * f2fs: fix uninit-value in f2fs_lookup
      fs/f2fs/dir.c
  * f2fs: add trace exit in exception path
      fs/f2fs/checkpoint.c
    sparc64: remove mm_cpumask clearing to fix kthread_use_mm race
    powerpc: select ARCH_WANT_IRQS_OFF_ACTIVATE_MM
  * mm: fix exec activate_mm vs TLB shootdown and lazy tlb switching race
      arch/Kconfig
      fs/exec.c
    powerpc/powernv/smp: Fix spurious DBG() warning
  * futex: Fix incorrect should_fail_futex() handling
      kernel/futex.c
    ata: sata_nv: Fix retrieving of active qcs
    RDMA/qedr: Fix memory leak in iWARP CM
    mlxsw: core: Fix use-after-free in mlxsw_emad_trans_finish()
    x86/unwind/orc: Fix inactive tasks with stack pointer in %sp on GCC 10 compiled kernels
    xen/events: block rogue events for some time
    xen/events: defer eoi in case of excessive number of events
    xen/events: use a common cpu hotplug hook for event channels
    xen/events: switch user event channels to lateeoi model
    xen/pciback: use lateeoi irq binding
    xen/pvcallsback: use lateeoi irq binding
    xen/scsiback: use lateeoi irq binding
    xen/netback: use lateeoi irq binding
    xen/blkback: use lateeoi irq binding
  * xen/events: add a new "late EOI" evtchn framework
      include/xen/events.h
    xen/events: fix race in evtchn_fifo_unmask()
    xen/events: add a proper barrier to 2-level uevent unmasking
    xen/events: avoid removing an event channel while handling it
    xen/events: don't use chip_data for legacy IRQs
  * Revert "block: ratelimit handle_bad_sector() message"
      block/blk-core.c
  * fscrypt: fix race where ->lookup() marks plaintext dentry as ciphertext
      fs/crypto/fname.c
      fs/crypto/hooks.c
      fs/ext4/ext4.h
      fs/ext4/namei.c
      fs/f2fs/namei.c
      include/linux/fscrypt.h
  * fscrypt: only set dentry_operations on ciphertext dentries
      fs/crypto/hooks.c
  * fs, fscrypt: clear DCACHE_ENCRYPTED_NAME when unaliasing directory
      fs/dcache.c
  * fscrypt: fix race allowing rename() and link() of ciphertext dentries
      fs/crypto/hooks.c
      include/linux/fscrypt.h
  * fscrypt: clean up and improve dentry revalidation
      fs/crypto/crypto.c
      fs/crypto/hooks.c
      include/linux/dcache.h
      include/linux/fscrypt.h
  * fscrypt: return -EXDEV for incompatible rename or link into encrypted dir
      fs/crypto/hooks.c
      fs/crypto/policy.c
      include/linux/fscrypt.h
    ata: sata_rcar: Fix DMA boundary mask
    serial: pl011: Fix lockdep splat when handling magic-sysrq interrupt
  * mtd: lpddr: Fix bad logic in print_drs_error
      include/linux/mtd/pfow.h
    RDMA/addr: Fix race with netevent_callback()/rdma_addr_cancel()
    cxl: Rework error message for incompatible slots
    p54: avoid accessing the data mapped to streaming DMA
    evm: Check size of security.evm before using it
  * bpf: Fix comment for helper bpf_current_task_under_cgroup()
      include/uapi/linux/bpf.h
  * fuse: fix page dereference after free
      fs/fuse/dev.c
    x86/xen: disable Firmware First mode for correctable memory errors
    arch/x86/amd/ibs: Fix re-arming IBS Fetch
    cxgb4: set up filter action after rewrites
    r8169: fix issue with forced threading in combination with shared interrupts
  * tipc: fix memory leak caused by tipc_buf_append()
      net/tipc/msg.c
  * tcp: Prevent low rmem stalls with SO_RCVLOWAT.
      net/ipv4/tcp.c
      net/ipv4/tcp_input.c
    ravb: Fix bit fields checking in ravb_hwtstamp_get()
  * netem: fix zero division in tabledist
      net/sched/sch_netem.c
    mlxsw: core: Fix memory leak on module removal
    gtp: fix an use-before-init in gtp_newlink()
    chelsio/chtls: fix tls record info to user
    chelsio/chtls: fix memory leaks in CPL handlers
    chelsio/chtls: fix deadlock issue
    efivarfs: Replace invalid slashes with exclamation marks in dentries.
    x86/PCI: Fix intel_mid_pci.c build error when ACPI is not enabled
  * arm64: link with -z norelro regardless of CONFIG_RELOCATABLE
      arch/arm64/Makefile
  * arm64: Run ARCH_WORKAROUND_1 enabling code on all CPUs
      arch/arm64/kernel/cpu_errata.c
  * scripts/setlocalversion: make git describe output more reliable
      scripts/setlocalversion
    objtool: Support Clang non-section symbols in ORC generation
    ANDROID: GKI: Enable DEBUG_INFO_DWARF4
  * UPSTREAM: mm/sl[uo]b: export __kmalloc_track(_node)_caller
      mm/slub.c
  * BACKPORT: xfrm/compat: Translate 32-bit user_policy from sockptr
      include/net/xfrm.h
      net/xfrm/xfrm_state.c
  * BACKPORT: xfrm/compat: Add 32=>64-bit messages translator
      include/net/xfrm.h
      net/xfrm/Kconfig
      net/xfrm/xfrm_user.c
  * UPSTREAM: xfrm/compat: Attach xfrm dumps to 64=>32 bit translator
      net/xfrm/xfrm_user.c
  * UPSTREAM: xfrm/compat: Add 64=>32-bit messages translator
      include/net/xfrm.h
      net/xfrm/xfrm_user.c
  * BACKPORT: xfrm: Provide API to register translator module
      include/net/xfrm.h
      net/xfrm/Kconfig
      net/xfrm/Makefile
      net/xfrm/xfrm_state.c
  * ANDROID: Publish uncompressed Image on aarch64
      build.config.aarch64
    FROMLIST: crypto: arm64/poly1305-neon - reorder PAC authentication with SP update
    UPSTREAM: crypto: arm64/chacha - fix chacha_4block_xor_neon() for big endian
    UPSTREAM: crypto: arm64/chacha - fix hchacha_block_neon() for big endian
    Merge 4.19.154 into android-4.19-stable
Linux 4.19.154
  * usb: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets.
      drivers/usb/gadget/function/f_ncm.c
    eeprom: at25: set minimum read/write access stride to 1
    USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync().
    usb: cdc-acm: add quirk to blacklist ETAS ES58X devices
    tty: serial: fsl_lpuart: fix lpuart32_poll_get_char
    net: korina: cast KSEG0 address to pointer in kfree
    ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n()
  * scsi: ufs: ufs-qcom: Fix race conditions caused by ufs_qcom_testbus_config()
      drivers/scsi/ufs/ufs-qcom.c
  * usb: core: Solve race condition in anchor cleanup functions
      drivers/usb/core/urb.c
    brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach
    mwifiex: don't call del_timer_sync() on uninitialized timer
    reiserfs: Fix memory leak in reiserfs_parse_options()
    ipvs: Fix uninit-value in do_ip_vs_set_ctl()
    tty: ipwireless: fix error handling
    scsi: qedi: Fix list_del corruption while removing active I/O
    scsi: qedi: Protect active command list to avoid list corruption
    Fix use after free in get_capset_info callback.
    rtl8xxxu: prevent potential memory leak
    brcmsmac: fix memory leak in wlc_phy_attach_lcnphy
    scsi: ibmvfc: Fix error return in ibmvfc_probe()
  * Bluetooth: Only mark socket zapped after unlocking
      net/bluetooth/l2cap_sock.c
  * usb: ohci: Default to per-port over-current protection
      drivers/usb/host/ohci-hcd.c
    xfs: make sure the rt allocator doesn't run off the end
    reiserfs: only call unlock_new_inode() if I_NEW
    misc: rtsx: Fix memory leak in rtsx_pci_probe
    ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs()
    can: flexcan: flexcan_chip_stop(): add error handling and propagate error value
  * usb: dwc3: simple: add support for Hikey 970
      drivers/usb/dwc3/dwc3-of-simple.c
    USB: cdc-acm: handle broken union descriptors
    udf: Avoid accessing uninitialized data on failed inode read
    udf: Limit sparing table size
    usb: gadget: function: printer: fix use-after-free in __lock_acquire
    misc: vop: add round_up(x,4) for vring_size to avoid kernel panic
    mic: vop: copy data to kernel space then write to io memory
  * scsi: target: core: Add CONTROL field for trace events
      include/scsi/scsi_common.h
      include/trace/events/target.h
    scsi: mvumi: Fix error return in mvumi_io_attach()
    PM: hibernate: remove the bogus call to get_gendisk() in software_resume()
    mac80211: handle lack of sband->bitrates in rates
    ip_gre: set dev->hard_header_len and dev->needed_headroom properly
    ntfs: add check for mft record size in superblock
    media: venus: core: Fix runtime PM imbalance in venus_probe
    fs: dlm: fix configfs memory leak
    media: saa7134: avoid a shift overflow
    mmc: sdio: Check for CISTPL_VERS_1 buffer size
    media: uvcvideo: Ensure all probed info is returned to v4l2
    media: media/pci: prevent memory leak in bttv_probe
    media: bdisp: Fix runtime PM imbalance on error
    media: platform: sti: hva: Fix runtime PM imbalance on error
    media: platform: s3c-camif: Fix runtime PM imbalance on error
    media: vsp1: Fix runtime PM imbalance on error
    media: exynos4-is: Fix a reference count leak
    media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync
    media: exynos4-is: Fix several reference count leaks due to pm_runtime_get_sync
    media: sti: Fix reference count leaks
    media: st-delta: Fix reference count leak in delta_run_work
    media: ati_remote: sanity check for both endpoints
    media: firewire: fix memory leak
    crypto: ccp - fix error handling
  * block: ratelimit handle_bad_sector() message
      block/blk-core.c
    i2c: core: Restore acpi_walk_dep_device_list() getting called after registering the ACPI i2c devs
  * perf: correct SNOOPX field offset
      include/uapi/linux/perf_event.h
  * sched/features: Fix !CONFIG_JUMP_LABEL case
      kernel/sched/core.c
      kernel/sched/sched.h
    NTB: hw: amd: fix an issue about leak system resources
    nvmet: fix uninitialized work for zero kato
    powerpc/powernv/dump: Fix race while processing OPAL dump
    arm64: dts: zynqmp: Remove additional compatible string for i2c IPs
    ARM: dts: owl-s500: Fix incorrect PPI interrupt specifiers
    arm64: dts: qcom: msm8916: Fix MDP/DSI interrupts
    arm64: dts: qcom: pm8916: Remove invalid reg size from wcd_codec
    memory: fsl-corenet-cf: Fix handling of platform_get_irq() error
    memory: omap-gpmc: Fix build error without CONFIG_OF
    memory: omap-gpmc: Fix a couple off by ones
    ARM: dts: sun8i: r40: bananapi-m2-ultra: Fix dcdc1 regulator
    ARM: dts: imx6sl: fix rng node
    netfilter: nf_fwd_netdev: clear timestamp in forwarding path
  * netfilter: conntrack: connection timeout after re-register
      net/netfilter/nf_conntrack_proto_tcp.c
    KVM: x86: emulating RDPID failure shall return #UD rather than #GP
    Input: sun4i-ps2 - fix handling of platform_get_irq() error
    Input: twl4030_keypad - fix handling of platform_get_irq() error
    Input: omap4-keypad - fix handling of platform_get_irq() error
    Input: ep93xx_keypad - fix handling of platform_get_irq() error
    Input: stmfts - fix a & vs && typo
    Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume()
    SUNRPC: fix copying of multiple pages in gss_read_proxy_verf()
    vfio iommu type1: Fix memory leak in vfio_iommu_type1_pin_pages
    vfio/pci: Clear token on bypass registration failure
  * ext4: limit entries returned when counting fsmap records
      fs/ext4/fsmap.c
    svcrdma: fix bounce buffers for unaligned offsets and multiple pages
    watchdog: sp5100: Fix definition of EFCH_PM_DECODEEN3
  * watchdog: Use put_device on error
      drivers/watchdog/watchdog_dev.c
  * watchdog: Fix memleak in watchdog_cdev_register
      drivers/watchdog/watchdog_dev.c
    clk: bcm2835: add missing release if devm_clk_hw_register fails
    clk: at91: clk-main: update key before writing AT91_CKGR_MOR
    clk: rockchip: Initialize hw to error to avoid undefined behavior
    pwm: img: Fix null pointer access in probe
    rpmsg: smd: Fix a kobj leak in in qcom_smd_parse_edge()
    PCI: iproc: Set affinity mask on MSI interrupts
  * i2c: rcar: Auto select RESET_CONTROLLER
      drivers/i2c/busses/Kconfig
  * mailbox: avoid timer start from callback
      drivers/mailbox/mailbox.c
    rapidio: fix the missed put_device() for rio_mport_add_riodev
    rapidio: fix error handling path
    ramfs: fix nommu mmap with gaps in the page cache
  * lib/crc32.c: fix trivial typo in preprocessor condition
      lib/crc32.c
  * f2fs: wait for sysfs kobject removal before freeing f2fs_sb_info
      fs/f2fs/sysfs.c
    IB/rdmavt: Fix sizeof mismatch
    cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_reboot_notifier
    powerpc/perf/hv-gpci: Fix starting index value
    powerpc/perf: Exclude pmc5/6 from the irrelevant PMU group constraints
  * overflow: Include header file with SIZE_MAX declaration
      include/linux/overflow.h
    kdb: Fix pager search for multi-line strings
    RDMA/hns: Fix missing sq_sig_type when querying QP
    RDMA/hns: Set the unsupported wr opcode
    perf intel-pt: Fix "context_switch event has no tid" error
    RDMA/cma: Consolidate the destruction of a cma_multicast in one place
    RDMA/cma: Remove dead code for kernel rdmacm multicast
    powerpc/64s/radix: Fix mm_cpumask trimming race vs kthread_use_mm
    powerpc/tau: Disable TAU between measurements
    powerpc/tau: Check processor type before enabling TAU interrupt
    ANDROID: GKI: update the ABI xml
    Merge 4.19.153 into android-4.19-stable
Linux 4.19.153
    powerpc/tau: Remove duplicated set_thresholds() call
    powerpc/tau: Convert from timer to workqueue
    powerpc/tau: Use appropriate temperature sample interval
    RDMA/qedr: Fix inline size returned for iWARP
    RDMA/qedr: Fix use of uninitialized field
    xfs: fix high key handling in the rt allocator's query_range function
    xfs: limit entries returned when counting fsmap records
    arc: plat-hsdk: fix kconfig dependency warning when !RESET_CONTROLLER
    ARM: 9007/1: l2c: fix prefetch bits init in L2X0_AUX_CTRL using DT values
    mtd: mtdoops: Don't write panic data twice
    powerpc/pseries: explicitly reschedule during drmem_lmb list traversal
    mtd: lpddr: fix excessive stack usage with clang
    RDMA/ucma: Add missing locking around rdma_leave_multicast()
    RDMA/ucma: Fix locking for ctx->events_reported
    powerpc/icp-hv: Fix missing of_node_put() in success path
    powerpc/pseries: Fix missing of_node_put() in rng_init()
    IB/mlx4: Adjust delayed work when a dup is observed
    IB/mlx4: Fix starvation in paravirt mux/demux
  * mm, oom_adj: don't loop through tasks in __set_oom_adj when not necessary
      fs/proc/base.c
      include/linux/oom.h
      include/linux/sched/coredump.h
      kernel/fork.c
      mm/oom_kill.c
  * mm/memcg: fix device private memcg accounting
      mm/memcontrol.c
  * netfilter: nf_log: missing vlan offload tag and proto
      include/net/netfilter/nf_log.h
      net/ipv4/netfilter/nf_log_ipv4.c
      net/ipv6/netfilter/nf_log_ipv6.c
      net/netfilter/nf_log_common.c
    net: korina: fix kfree of rx/tx descriptor array
    ipvs: clear skb->tstamp in forwarding path
    mwifiex: fix double free
    platform/x86: mlx-platform: Remove PSU EEPROM configuration
    scsi: be2iscsi: Fix a theoretical leak in beiscsi_create_eqs()
    scsi: target: tcmu: Fix warning: 'page' may be used uninitialized
    usb: dwc2: Fix INTR OUT transfers in DDMA mode.
  * nl80211: fix non-split wiphy information
      net/wireless/nl80211.c
  * usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well
      drivers/usb/gadget/function/u_ether.c
  * usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above.
      drivers/usb/gadget/function/f_ncm.c
    iwlwifi: mvm: split a print to avoid a WARNING in ROC
    mfd: sm501: Fix leaks in probe()
    net: enic: Cure the enic api locking trainwreck
    qtnfmac: fix resource leaks on unsupported iftype error return path
  * HID: hid-input: fix stylus battery reporting
      drivers/hid/hid-input.c
    slimbus: qcom-ngd-ctrl: disable ngd in qmi server down callback
    slimbus: core: do not enter to clock pause mode in core
    slimbus: core: check get_addr before removing laddr ida
  * quota: clear padding in v2r1_mem2diskdqb()
      fs/quota/quota_v2.c
    usb: dwc2: Fix parameter type in function pointer prototype
    ALSA: seq: oss: Avoid mutex lock for a long-time ioctl
    misc: mic: scif: Fix error handling path
    ath6kl: wmi: prevent a shift wrapping bug in ath6kl_wmi_delete_pstream_cmd()
    net: dsa: rtl8366rb: Support all 4096 VLANs
    net: dsa: rtl8366: Skip PVID setting if not requested
    net: dsa: rtl8366: Refactor VLAN/PVID init
    net: dsa: rtl8366: Check validity of passed VLANs
    cpufreq: armada-37xx: Add missing MODULE_DEVICE_TABLE
    net: stmmac: use netif_tx_start|stop_all_queues() function
    net/mlx5: Don't call timecounter cyc2time directly from 1PPS flow
    pinctrl: mcp23s08: Fix mcp23x17 precious range
    pinctrl: mcp23s08: Fix mcp23x17_regmap initialiser
    HID: roccat: add bounds checking in kone_sysfs_write_settings()
    video: fbdev: radeon: Fix memleak in radeonfb_pci_register
    video: fbdev: sis: fix null ptr dereference
    video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value error
    drivers/virt/fsl_hypervisor: Fix error handling path
    pwm: lpss: Add range limit check for the base_unit register value
    pwm: lpss: Fix off by one error in base_unit math in pwm_lpss_prepare()
  * pty: do tty_flip_buffer_push without port->lock in pty_write
      drivers/tty/pty.c
    tty: hvcs: Don't NULL tty->driver_data until hvcs_cleanup()
  * tty: serial: earlycon dependency
      drivers/tty/serial/Kconfig
    VMCI: check return value of get_user_pages_fast() for errors
    backlight: sky81452-backlight: Fix refcount imbalance on error
    scsi: csiostor: Fix wrong return value in csio_hw_prep_fw()
    scsi: qla2xxx: Fix wrong return value in qla_nvme_register_hba()
    scsi: qla4xxx: Fix an error handling path in 'qla4xxx_get_host_stats()'
    drm/gma500: fix error check
    staging: rtl8192u: Do not use GFP_KERNEL in atomic context
    mwifiex: Do not use GFP_KERNEL in atomic context
    brcmfmac: check ndev pointer
    ASoC: qcom: lpass-cpu: fix concurrency issue
    ASoC: qcom: lpass-platform: fix memory leak
    wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680
    ath10k: Fix the size used in a 'dma_free_coherent()' call in an error handling path
    ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb()
    ath6kl: prevent potential array overflow in ath6kl_add_new_sta()
    Bluetooth: hci_uart: Cancel init work before unregistering
    ath10k: provide survey info as accumulated data
    spi: spi-s3c64xx: Check return values
    spi: spi-s3c64xx: swap s3c64xx_spi_set_cs() and s3c64xx_enable_datapath()
  * pinctrl: bcm: fix kconfig dependency warning when !GPIOLIB
      drivers/pinctrl/bcm/Kconfig
  * regulator: resolve supply after creating regulator
      drivers/regulator/core.c
    media: ti-vpe: Fix a missing check and reference count leak
    media: stm32-dcmi: Fix a reference count leak
    media: s5p-mfc: Fix a reference count leak
    media: camss: Fix a reference count leak.
    media: platform: fcp: Fix a reference count leak.
    media: rockchip/rga: Fix a reference count leak.
    media: rcar-vin: Fix a reference count leak.
    media: tc358743: cleanup tc358743_cec_isr
    media: tc358743: initialize variable
    media: mx2_emmaprp: Fix memleak in emmaprp_probe
    cypto: mediatek - fix leaks in mtk_desc_ring_alloc
    hwmon: (pmbus/max34440) Fix status register reads for MAX344{51,60,61}
    crypto: omap-sham - fix digcnt register handling with export/import
    media: omap3isp: Fix memleak in isp_probe
    media: uvcvideo: Silence shift-out-of-bounds warning
    media: uvcvideo: Set media controller entity functions
    media: m5mols: Check function pointer in m5mols_sensor_power
    media: Revert "media: exynos4-is: Add missed check for pinctrl_lookup_state()"
    media: tuner-simple: fix regression in simple_set_radio_freq
    crypto: picoxcell - Fix potential race condition bug
    crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call
    crypto: mediatek - Fix wrong return value in mtk_desc_ring_alloc()
    crypto: algif_skcipher - EBUSY on aio should be an error
    x86/events/amd/iommu: Fix sizeof mismatch
    x86/nmi: Fix nmi_handle() duration miscalculation
    drivers/perf: xgene_pmu: Fix uninitialized resource struct
    x86/fpu: Allow multiple bits in clearcpuid= parameter
    EDAC/ti: Fix handling of platform_get_irq() error
    EDAC/i5100: Fix error handling order in i5100_init_one()
    crypto: algif_aead - Do not set MAY_BACKLOG on the async path
    ima: Don't ignore errors from crypto_shash_update()
    KVM: SVM: Initialize prev_ga_tag before use
    KVM: x86/mmu: Commit zap of remaining invalid pages when recovering lpages
    cifs: Return the error from crypt_message when enc/dec key not found.
    cifs: remove bogus debug code
    ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887
  * icmp: randomize the global rate limiter
      net/ipv4/icmp.c
    r8169: fix operation under forced interrupt threading
  * tcp: fix to update snd_wl1 in bulk receiver fast path
      net/ipv4/tcp_input.c
    nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in nfc_genl_fw_download()
    net/sched: act_tunnel_key: fix OOB write in case of IPv6 ERSPAN tunnels
    net: hdlc_raw_eth: Clear the IFF_TX_SKB_SHARING flag after calling ether_setup
    net: hdlc: In hdlc_rcv, check to make sure dev is an HDLC device
    chelsio/chtls: correct function return and return type
    chelsio/chtls: correct netdevice for vlan interface
    chelsio/chtls: fix socket lock
    ALSA: bebob: potential info leak in hwdep_read()
  * binder: fix UAF when releasing todo list
      drivers/android/binder.c
    net/tls: sendfile fails with ktls offload
    r8169: fix data corruption issue on RTL8402
  * net/ipv4: always honour route mtu during forwarding
      include/net/ip.h
  * tipc: fix the skb_unshare() in tipc_buf_append()
      net/tipc/msg.c
    net: usb: qmi_wwan: add Cellient MPL200 card
    net/smc: fix valid DMBE buffer sizes
  * net: fix pos incrementment in ipv6_route_seq_next
      net/ipv6/ip6_fib.c
    net: fec: Fix PHY init after phy_reset_after_clk_enable()
    net: fec: Fix phy_device lookup for phy_reset_after_clk_enable()
    mlx4: handle non-napi callers to napi_poll
  * ipv4: Restore flowi4_oif update before call to xfrm_lookup_route
      net/ipv4/route.c
    ibmveth: Identify ingress large send packets.
    ibmveth: Switch order of ibmveth_helper calls.
    ANDROID: clang: update to 11.0.5
  * FROMLIST: arm64: link with -z norelro regardless of CONFIG_RELOCATABLE
      arch/arm64/Makefile
    ANDROID: GKI: enable CONFIG_WIREGUARD
    UPSTREAM: wireguard: peerlookup: take lock before checking hash in replace operation
    UPSTREAM: wireguard: noise: take lock when removing handshake entry from table
    UPSTREAM: wireguard: queueing: make use of ip_tunnel_parse_protocol
  * UPSTREAM: net: ip_tunnel: add header_ops for layer 3 devices
      include/net/ip_tunnels.h
      net/ipv4/ip_tunnel_core.c
    UPSTREAM: wireguard: receive: account for napi_gro_receive never returning GRO_DROP
    UPSTREAM: wireguard: device: avoid circular netns references
    UPSTREAM: wireguard: noise: do not assign initiation time in if condition
    UPSTREAM: wireguard: noise: separate receive counter from send counter
    UPSTREAM: wireguard: queueing: preserve flow hash across packet scrubbing
    UPSTREAM: wireguard: noise: read preshared key while taking lock
    UPSTREAM: wireguard: selftests: use newer iproute2 for gcc-10
    UPSTREAM: wireguard: send/receive: use explicit unlikely branch instead of implicit coalescing
    UPSTREAM: wireguard: selftests: initalize ipv6 members to NULL to squelch clang warning
    UPSTREAM: wireguard: send/receive: cond_resched() when processing worker ringbuffers
    UPSTREAM: wireguard: socket: remove errant restriction on looping to self
    UPSTREAM: wireguard: selftests: use normal kernel stack size on ppc64
    UPSTREAM: wireguard: receive: use tunnel helpers for decapsulating ECN markings
    UPSTREAM: wireguard: queueing: cleanup ptr_ring in error path of packet_queue_init
    UPSTREAM: wireguard: send: remove errant newline from packet_encrypt_worker
    UPSTREAM: wireguard: noise: error out precomputed DH during handshake rather than config
    UPSTREAM: wireguard: receive: remove dead code from default packet type case
    UPSTREAM: wireguard: queueing: account for skb->protocol==0
    UPSTREAM: wireguard: selftests: remove duplicated include <sys/types.h>
    UPSTREAM: wireguard: socket: remove extra call to synchronize_net
    UPSTREAM: wireguard: send: account for mtu=0 devices
    UPSTREAM: wireguard: receive: reset last_under_load to zero
    UPSTREAM: wireguard: selftests: reduce complexity and fix make races
    UPSTREAM: wireguard: device: use icmp_ndo_send helper
    UPSTREAM: wireguard: selftests: tie socket waiting to target pid
    UPSTREAM: wireguard: selftests: ensure non-addition of peers with failed precomputation
    UPSTREAM: wireguard: noise: reject peers with low order public keys
    UPSTREAM: wireguard: allowedips: fix use-after-free in root_remove_peer_lists
  * UPSTREAM: net: skbuff: disambiguate argument and member for skb_list_walk_safe helper
      include/linux/skbuff.h
  * UPSTREAM: net: introduce skb_list_walk_safe for skb segment walking
      include/linux/skbuff.h
    UPSTREAM: wireguard: socket: mark skbs as not on list when receiving via gro
    UPSTREAM: wireguard: queueing: do not account for pfmemalloc when clearing skb header
    UPSTREAM: wireguard: selftests: remove ancient kernel compatibility code
    UPSTREAM: wireguard: allowedips: use kfree_rcu() instead of call_rcu()
    UPSTREAM: wireguard: main: remove unused include <linux/version.h>
  * UPSTREAM: wireguard: global: fix spelling mistakes in comments
      include/uapi/linux/wireguard.h
  * UPSTREAM: wireguard: Kconfig: select parent dependency for crypto
      drivers/net/Kconfig
    UPSTREAM: wireguard: selftests: import harness makefile for test suite
  * UPSTREAM: net: WireGuard secure network tunnel
      drivers/net/Kconfig
      drivers/net/Makefile
      include/uapi/linux/wireguard.h
  * UPSTREAM: timekeeping: Boot should be boottime for coarse ns accessor
      include/linux/timekeeping.h
  * UPSTREAM: timekeeping: Add missing _ns functions for coarse accessors
      include/linux/timekeeping.h
  * UPSTREAM: icmp: introduce helper for nat'd source address in network device context
      include/linux/icmpv6.h
      include/net/icmp.h
      net/ipv4/icmp.c
      net/ipv6/ip6_icmp.c
    UPSTREAM: crypto: poly1305-x86_64 - Use XORL r32,32
    UPSTREAM: crypto: curve25519-x86_64 - Use XORL r32,32
    UPSTREAM: crypto: arm/poly1305 - Add prototype for poly1305_blocks_neon
    UPSTREAM: crypto: arm/curve25519 - include <linux/scatterlist.h>
    UPSTREAM: crypto: x86/curve25519 - Remove unused carry variables
  * UPSTREAM: crypto: x86/chacha-sse3 - use unaligned loads for state array
      include/crypto/chacha.h
  * UPSTREAM: crypto: lib/chacha20poly1305 - Add missing function declaration
      include/crypto/chacha20poly1305.h
    UPSTREAM: crypto: arch/lib - limit simd usage to 4k chunks
    UPSTREAM: crypto: arm[64]/poly1305 - add artifact to .gitignore files
    UPSTREAM: crypto: x86/curve25519 - leave r12 as spare register
    UPSTREAM: crypto: x86/curve25519 - replace with formally verified implementation
    UPSTREAM: crypto: arm64/chacha - correctly walk through blocks
  * UPSTREAM: crypto: x86/curve25519 - support assemblers with no adx support
      include/crypto/curve25519.h
    UPSTREAM: crypto: chacha20poly1305 - prevent integer overflow on large input
  * UPSTREAM: crypto: Kconfig - allow tests to be disabled when manager is disabled
      crypto/Kconfig
    UPSTREAM: crypto: arm/chacha - fix build failured when kernel mode NEON is disabled
    UPSTREAM: crypto: x86/poly1305 - emit does base conversion itself
    UPSTREAM: crypto: chacha20poly1305 - add back missing test vectors and test chunking
    UPSTREAM: crypto: x86/poly1305 - fix .gitignore typo
  * UPSTREAM: crypto: curve25519 - Fix selftest build error
      lib/crypto/Makefile
    UPSTREAM: crypto: {arm,arm64,mips}/poly1305 - remove redundant non-reduction from emit
  * UPSTREAM: crypto: x86/poly1305 - wire up faster implementations for kernel
      lib/crypto/Kconfig
    UPSTREAM: crypto: x86/poly1305 - import unmodified cryptogams implementation
  * UPSTREAM: crypto: poly1305 - add new 32 and 64-bit generic versions
      crypto/poly1305_generic.c
      include/crypto/internal/poly1305.h
      include/crypto/nhpoly1305.h
      include/crypto/poly1305.h
      lib/crypto/Makefile
      lib/crypto/poly1305-donna64.c
      lib/crypto/poly1305.c
  * UPSTREAM: crypto: lib/curve25519 - re-add selftests
      lib/crypto/Makefile
    UPSTREAM: crypto: arm/curve25519 - add arch-specific key generation function
  * UPSTREAM: crypto: chacha - fix warning message in header file
      include/crypto/internal/chacha.h
    UPSTREAM: crypto: arch - conditionalize crypto api in arch glue for lib code
    UPSTREAM: crypto: lib/chacha20poly1305 - use chacha20_crypt()
    UPSTREAM: crypto: x86/chacha - only unregister algorithms if registered
  * UPSTREAM: crypto: chacha_generic - remove unnecessary setkey() functions
      crypto/chacha_generic.c
  * UPSTREAM: crypto: lib/chacha20poly1305 - reimplement crypt_from_sg() routine
      include/crypto/chacha20poly1305.h
  * UPSTREAM: crypto: chacha20poly1305 - import construction and selftest from Zinc
      include/crypto/chacha20poly1305.h
      lib/crypto/Kconfig
      lib/crypto/Makefile
    UPSTREAM: crypto: arm/curve25519 - wire up NEON implementation
    UPSTREAM: crypto: arm/curve25519 - import Bernstein and Schwabe's Curve25519 ARM implementation
  * UPSTREAM: crypto: curve25519 - x86_64 library and KPP implementations
      crypto/Kconfig
    UPSTREAM: crypto: lib/curve25519 - work around Clang stack spilling issue
  * UPSTREAM: crypto: curve25519 - implement generic KPP driver
      crypto/Kconfig
      crypto/Makefile
  * UPSTREAM: crypto: curve25519 - add kpp selftest
      crypto/testmgr.c
  * UPSTREAM: crypto: curve25519 - generic C library implementations
      include/crypto/curve25519.h
      lib/crypto/Kconfig
      lib/crypto/Makefile
  * UPSTREAM: crypto: blake2s - x86_64 SIMD implementation
      crypto/Kconfig
  * UPSTREAM: crypto: blake2s - implement generic shash driver
      crypto/Kconfig
      crypto/Makefile
      include/crypto/internal/blake2s.h
  * UPSTREAM: crypto: testmgr - add test cases for Blake2s
      crypto/testmgr.c
  * UPSTREAM: crypto: blake2s - generic C library implementation and selftest
      include/crypto/blake2s.h
      include/crypto/internal/blake2s.h
      lib/crypto/Kconfig
      lib/crypto/Makefile
  * UPSTREAM: crypto: mips/poly1305 - incorporate OpenSSL/CRYPTOGAMS optimized implementation
      crypto/Kconfig
      lib/crypto/Kconfig
  * UPSTREAM: crypto: arm/poly1305 - incorporate OpenSSL/CRYPTOGAMS NEON implementation
      lib/crypto/Kconfig
  * UPSTREAM: crypto: arm64/poly1305 - incorporate OpenSSL/CRYPTOGAMS NEON implementation
      arch/arm64/crypto/Kconfig
      arch/arm64/crypto/Makefile
      lib/crypto/Kconfig
  * UPSTREAM: crypto: x86/poly1305 - expose existing driver as poly1305 library
      crypto/Kconfig
      lib/crypto/Kconfig
  * UPSTREAM: crypto: x86/poly1305 - depend on generic library not generic shash
      crypto/Kconfig
      crypto/poly1305_generic.c
      include/crypto/internal/poly1305.h
  * UPSTREAM: crypto: poly1305 - expose init/update/final library interface
      crypto/poly1305_generic.c
      include/crypto/poly1305.h
      lib/crypto/Kconfig
      lib/crypto/poly1305.c
  * UPSTREAM: crypto: x86/poly1305 - unify Poly1305 state struct with generic code
      crypto/poly1305_generic.c
      include/crypto/internal/poly1305.h
      include/crypto/poly1305.h
  * UPSTREAM: crypto: poly1305 - move core routines into a separate library
      crypto/Kconfig
      crypto/poly1305_generic.c
      include/crypto/internal/poly1305.h
      include/crypto/poly1305.h
      lib/crypto/Kconfig
      lib/crypto/Makefile
      lib/crypto/poly1305.c
  * UPSTREAM: crypto: chacha - unexport chacha_generic routines
      crypto/chacha_generic.c
      include/crypto/internal/chacha.h
  * UPSTREAM: crypto: mips/chacha - wire up accelerated 32r2 code from Zinc
      crypto/Kconfig
    UPSTREAM: crypto: mips/chacha - import 32r2 ChaCha code from Zinc
    UPSTREAM: crypto: arm/chacha - expose ARM ChaCha routine as library function
    UPSTREAM: crypto: arm/chacha - remove dependency on generic ChaCha driver
    UPSTREAM: crypto: arm/chacha - import Eric Biggers's scalar accelerated ChaCha code
  * UPSTREAM: crypto: arm64/chacha - expose arm64 ChaCha routine as library function
      arch/arm64/crypto/Kconfig
  * UPSTREAM: crypto: arm64/chacha - depend on generic chacha library instead of crypto driver
      arch/arm64/crypto/Kconfig
    UPSTREAM: crypto: arm64/chacha - use combined SIMD/ALU routine for more speed
    UPSTREAM: crypto: arm64/chacha - optimize for arbitrary length inputs
  * UPSTREAM: crypto: x86/chacha - expose SIMD ChaCha routine as library function
      crypto/Kconfig
      include/crypto/chacha.h
  * UPSTREAM: crypto: x86/chacha - depend on generic chacha library instead of crypto driver
      crypto/Kconfig
  * UPSTREAM: crypto: chacha - move existing library code into lib/crypto
      crypto/Kconfig
      crypto/chacha_generic.c
      include/crypto/chacha.h
      include/crypto/internal/chacha.h
      lib/Makefile
      lib/crypto/Kconfig
      lib/crypto/Makefile
      lib/crypto/libchacha.c
  * UPSTREAM: crypto: lib - tidy up lib/crypto Kconfig and Makefile
      crypto/Kconfig
      lib/Makefile
      lib/crypto/Kconfig
      lib/crypto/Makefile
  * UPSTREAM: crypto: chacha - constify ctx and iv arguments
      crypto/chacha_generic.c
      include/crypto/chacha.h
    UPSTREAM: crypto: x86/poly1305 - Clear key material from stack in SSE2 variant
    UPSTREAM: crypto: xchacha20 - fix comments for test vectors
    UPSTREAM: crypto: xchacha - add test vector from XChaCha20 draft RFC
  * UPSTREAM: crypto: arm64/chacha - add XChaCha12 support
      arch/arm64/crypto/Kconfig
  * UPSTREAM: crypto: arm64/chacha20 - refactor to allow varying number of rounds
      arch/arm64/crypto/Makefile
  * UPSTREAM: crypto: arm64/chacha20 - add XChaCha20 support
      arch/arm64/crypto/Kconfig
    UPSTREAM: crypto: x86/chacha - avoid sleeping under kernel_fpu_begin()
    UPSTREAM: crypto: x86/chacha - yield the FPU occasionally
  * UPSTREAM: crypto: x86/chacha - add XChaCha12 support
      crypto/Kconfig
    UPSTREAM: crypto: x86/chacha20 - refactor to allow varying number of rounds
  * UPSTREAM: crypto: x86/chacha20 - add XChaCha20 support
      crypto/Kconfig
    UPSTREAM: crypto: x86/chacha20 - Add a 4-block AVX-512VL variant
    UPSTREAM: crypto: x86/chacha20 - Add a 2-block AVX-512VL variant
    UPSTREAM: crypto: x86/chacha20 - Add a 8-block AVX-512VL variant
    UPSTREAM: crypto: x86/chacha20 - Add a 4-block AVX2 variant
    UPSTREAM: crypto: x86/chacha20 - Add a 2-block AVX2 variant
    UPSTREAM: crypto: x86/chacha20 - Use larger block functions more aggressively
    UPSTREAM: crypto: x86/chacha20 - Support partial lengths in 8-block AVX2 variant
    UPSTREAM: crypto: x86/chacha20 - Support partial lengths in 4-block SSSE3 variant
    UPSTREAM: crypto: x86/chacha20 - Support partial lengths in 1-block SSSE3 variant
    ANDROID: GKI: Enable CONFIG_USB_ANNOUNCE_NEW_DEVICES
    ANDROID: GKI: Enable CONFIG_X86_X2APIC
  * ANDROID: move builds to use gas prebuilts
      build.config.aarch64
      build.config.arm
      build.config.x86_64
  * UPSTREAM: binder: fix UAF when releasing todo list
      drivers/android/binder.c
    Merge 4.19.152 into android-4.19-stable
Linux 4.19.152
    crypto: qat - check cipher length for aead AES-CBC-HMAC-SHA
    crypto: bcm - Verify GCM/CCM key length in setkey
    drivers/net/ethernet/marvell/mvmdio.c: Fix non OF case
    reiserfs: Fix oops during mount
    reiserfs: Initialize inode keys properly
    USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters
    USB: serial: pl2303: add device-id for HP GC device
    staging: comedi: check validity of wMaxPacketSize of usb endpoints found
    USB: serial: option: Add Telit FT980-KS composition
    USB: serial: option: add Cellient MPL200 card
    media: usbtv: Fix refcounting mixup
  * Bluetooth: Disconnect if E0 is used for Level 4
      include/net/bluetooth/hci_core.h
      net/bluetooth/hci_conn.c
      net/bluetooth/hci_event.c
  * Bluetooth: Fix update of connection state in `hci_encrypt_cfm`
      include/net/bluetooth/hci_core.h
  * Bluetooth: Consolidate encryption handling in hci_encrypt_cfm
      include/net/bluetooth/hci_core.h
      net/bluetooth/hci_event.c
  * Bluetooth: MGMT: Fix not checking if BT_HS is enabled
      net/bluetooth/mgmt.c
  * Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel
      include/net/bluetooth/l2cap.h
      net/bluetooth/l2cap_core.c
      net/bluetooth/l2cap_sock.c
  * Bluetooth: A2MP: Fix not initializing all members
      net/bluetooth/a2mp.c
    ARM: 8867/1: vdso: pass --be8 to linker if necessary
    ARM: 8939/1: kbuild: use correct nm executable
    ARM: 8858/1: vdso: use $(LD) instead of $(CC) to link VDSO
    perf cs-etm: Move definition of 'traceid_list' global variable from header file
  * FROMLIST: arm64: vdso32: Allow ld.lld to properly link the VDSO
      arch/arm64/kernel/vdso32/Makefile
    Merge 4.19.151 into android-4.19-stable
Linux 4.19.151
  * net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails
      drivers/net/usb/rtl8150.c
  * mm: khugepaged: recalculate min_free_kbytes after memory hotplug as expected by khugepaged
      include/linux/khugepaged.h
      mm/page_alloc.c
    mmc: core: don't set limits.discard_granularity as 0
  * perf: Fix task_function_call() error handling
      kernel/events/core.c
    rxrpc: Fix server keyring leak
    rxrpc: Fix some missing _bh annotations on locking conn->state_lock
    rxrpc: Downgrade the BUG() for unsupported token type in rxrpc_read()
    rxrpc: Fix rxkad token xdr encoding
    net/mlx5e: Fix VLAN create flow
    net/mlx5e: Fix VLAN cleanup flow
  * net: usb: ax88179_178a: fix missing stop entry in driver_info
      drivers/net/usb/ax88179_178a.c
  * mdio: fix mdio-thunder.c dependency & build error
      drivers/net/phy/Kconfig
  * bonding: set dev->needed_headroom in bond_setup_by_slave()
      drivers/net/bonding/bond_main.c
  * xfrm: Use correct address family in xfrm_state_find
      net/xfrm/xfrm_state.c
  * platform/x86: fix kconfig dependency warning for FUJITSU_LAPTOP
      drivers/platform/x86/Kconfig
    net: stmmac: removed enabling eee in EEE set callback
  * xfrm: clone whole liftime_cur structure in xfrm_do_migrate
      net/xfrm/xfrm_state.c
  * xfrm: clone XFRMA_SEC_CTX in xfrm_do_migrate
      net/xfrm/xfrm_state.c
  * xfrm: clone XFRMA_REPLAY_ESN_VAL in xfrm_do_migrate
      include/net/xfrm.h
  * xfrm: clone XFRMA_SET_MARK in xfrm_do_migrate
      net/xfrm/xfrm_state.c
    drm/amdgpu: prevent double kfree ttm->sg
    openvswitch: handle DNAT tuple collision
    net: team: fix memory leak in __team_options_register
    team: set dev->needed_headroom in team_setup_by_port()
  * sctp: fix sctp_auth_init_hmacs() error path
      net/sctp/auth.c
    i2c: owl: Clear NACK and BUS error bits
    i2c: meson: fixup rate calculation with filter delay
    i2c: meson: fix clock setting overwrite
    cifs: Fix incomplete memory allocation on setxattr path
  * xfrmi: drop ignore_df check before updating pmtu
      net/xfrm/xfrm_interface.c
    mm/khugepaged: fix filemap page_to_pgoff(page) != offset
    macsec: avoid use-after-free in macsec_handle_frame()
    nvme-core: put ctrl ref when module ref get fail
    arm64: dts: stratix10: add status to qspi dts node
    mtd: rawnand: sunxi: Fix the probe error path
    i2c: i801: Exclude device from suspend direct complete optimization
    perf top: Fix stdio interface input handling with glibc 2.28+
  * driver core: Fix probe_count imbalance in really_probe()
      drivers/base/dd.c
    platform/x86: thinkpad_acpi: re-initialize ACPI buffer size when reuse
    platform/x86: intel-vbtn: Switch to an allow-list for SW_TABLET_MODE reporting
    platform/x86: thinkpad_acpi: initialize tp_nvram_state variable
    platform/x86: intel-vbtn: Fix SW_TABLET_MODE always reporting 1 on the HP Pavilion 11 x360
  * usermodehelper: reset umask to default before executing user process
      kernel/umh.c
    drm/nouveau/mem: guard against NULL pointer access in mem_del
  * net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key()
      net/wireless/nl80211.c
    Revert "ravb: Fixed to be able to unload modules"
    fbcon: Fix global-out-of-bounds read in fbcon_get_font()
  * Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts
      include/linux/font.h
  * fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h
      include/linux/font.h
    Merge 4.19.150 into android-4.19-stable
Linux 4.19.150
  * netfilter: ctnetlink: add a range check for l3/l4 protonum
      net/netfilter/nf_conntrack_netlink.c
  * ep_create_wakeup_source(): dentry name can change under you...
      fs/eventpoll.c
  * epoll: EPOLL_CTL_ADD: close the race in decision to take fast path
      fs/eventpoll.c
  * epoll: replace ->visited/visited_list with generation count
      fs/eventpoll.c
  * epoll: do not insert into poll queues until all sanity checks are done
      fs/eventpoll.c
  * net/packet: fix overflow in tpacket_rcv
      net/packet/af_packet.c
  * mm: don't rely on system state to detect hot-plug operations
      include/linux/node.h
  * mm: replace memmap_context by meminit_context
      include/linux/mm.h
      include/linux/mmzone.h
      mm/page_alloc.c
  * random32: Restore __latent_entropy attribute on net_rand_state
      lib/random32.c
    Input: trackpoint - enable Synaptics trackpoints
    i2c: cpm: Fix i2c_ram structure
    iommu/exynos: add missing put_device() call in exynos_iommu_of_xlate()
    clk: samsung: exynos4: mark 'chipid' clock as CLK_IGNORE_UNUSED
    nfs: Fix security label length not being reset
    pinctrl: mvebu: Fix i2c sda definition for 98DX3236
    gpio: sprd: Clear interrupt when setting the type as edge
    nvme-fc: fail new connections to a deleted host or remote port
    spi: fsl-espi: Only process interrupts for expected events
    mac80211: do not allow bigger VHT MPDUs than the hardware supports
    drivers/net/wan/hdlc: Set skb->protocol before transmitting
    drivers/net/wan/lapbether: Make skb->protocol consistent with the header
    nvme-core: get/put ctrl and transport module in nvme_dev_open/release()
    rndis_host: increase sleep time in the query-response loop
    net: dec: de2104x: Increase receive ring size for Tulip
    drm/sun4i: mixer: Extend regmap max_register
    drivers/net/wan/hdlc_fr: Add needed_headroom for PVC devices
    drm/amdgpu: restore proper ref count in amdgpu_display_crtc_set_config
    ftrace: Move RCU is watching check after recursion check
    Input: i8042 - add nopnp quirk for Acer Aspire 5 A515
    net: virtio_vsock: Enhance connection semantics
  * vsock/virtio: add transport parameter to the virtio_transport_reset_no_sock()
      include/linux/virtio_vsock.h
    vsock/virtio: stop workers during the .remove()
    vsock/virtio: use RCU to avoid use-after-free on the_virtio_vsock
    clk: socfpga: stratix10: fix the divider for the emac_ptp_free_clk
    gpio: tc35894: fix up tc35894 interrupt configuration
    gpio: mockup: fix resource leak in error path
  * USB: gadget: f_ncm: Fix NDP16 datagram validation
      drivers/usb/gadget/function/f_ncm.c
    mmc: sdhci: Workaround broken command queuing on Intel GLK based IRBIS models
  * ANDROID: use arm-linux-androidkernel- for CROSS_COMPILE_COMPAT
      build.config.aarch64
    ANDROID: build.config.common: enable LLVM=1
    Merge 4.19.149 into android-4.19-stable
Linux 4.19.149
  * KVM: arm64: Assume write fault on S1PTW permission fault on instruction fetch
      arch/arm64/include/asm/kvm_emulate.h
    ata: sata_mv, avoid trigerrable BUG_ON
  * ata: make qc_prep return ata_completion_errors
      include/linux/libata.h
  * ata: define AC_ERR_OK
      include/linux/libata.h
    kprobes: Fix compiler warning for !CONFIG_KPROBES_ON_FTRACE
    s390/zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl
  * mm, THP, swap: fix allocating cluster for swapfile by mistake
      mm/swapfile.c
    kprobes: Fix to check probe enabled before disarm_kprobe_ftrace()
    s390/dasd: Fix zero write for FBA devices
    tracing: fix double free
    KVM: SVM: Add a dedicated INVD intercept routine
    KVM: x86: Reset MMU context if guest toggles CR4.SMAP or CR4.PKE
    MIPS: Add the missing 'CPU_1074K' into __get_cpu_type()
  * regmap: fix page selection for noinc reads
      drivers/base/regmap/regmap.c
    ALSA: asihpi: fix iounmap in error handler
  * bpf: Fix a rcu warning for bpffs map pretty-print
      kernel/bpf/inode.c
    batman-adv: mcast: fix duplicate mcast packets from BLA backbone to mesh
    batman-adv: mcast: fix duplicate mcast packets in BLA backbone from mesh
    batman-adv: Add missing include for in_interrupt()
    drm/sun4i: sun8i-csc: Secondary CSC register correction
    net: qed: RDMA personality shouldn't fail VF load
    drm/vc4/vc4_hdmi: fill ASoC card owner
  * bpf: Fix clobbering of r2 in bpf_gen_ld_abs
      net/core/filter.c
    mac802154: tx: fix use-after-free
    batman-adv: mcast/TT: fix wrongly dropped or rerouted packets
    atm: eni: fix the missed pci_disable_device() for eni_init_one()
    batman-adv: bla: fix type misuse for backbone_gw hash indexing
    mwifiex: Increase AES key storage size to 256 bits
    clocksource/drivers/h8300_timer8: Fix wrong return value in h8300_8timer_init()
    ieee802154/adf7242: check status of adf7242_read_reg
    ieee802154: fix one possible memleak in ca8210_dev_com_init
    objtool: Fix noreturn detection for ignored functions
  * i2c: core: Call i2c_acpi_install_space_handler() before i2c_acpi_register_devices()
      drivers/i2c/i2c-core-base.c
    drm/amdkfd: fix a memory leak issue
    lockdep: fix order in trace_hardirqs_off_caller()
    s390/init: add missing __init annotations
    RISC-V: Take text_mutex in ftrace_init_nop()
    ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN Converter9 2-in-1
    ASoC: wm8994: Ensure the device is resumed in wm89xx_mic_detect functions
    ASoC: wm8994: Skip setting of the WM8994_MICBIAS register for WM1811
    nvme: explicitly update mpath disk capacity on revalidation
    net: openvswitch: use div_u64() for 64-by-32 divisions
    perf parse-events: Use strcmp() to compare the PMU name
    ubi: fastmap: Free unused fastmap anchor peb during detach
    btrfs: qgroup: fix data leak caused by race between writeback and truncate
    vfio/pci: fix racy on error and request eventfd ctx
    selftests/x86/syscall_nt: Clear weird flags after each test
    scsi: libfc: Skip additional kref updating work event
    scsi: libfc: Handling of extra kref
    nvme: fix possible deadlock when I/O is blocked
    cifs: Fix double add page to memcg when cifs_readpages
    vfio/pci: Clear error and request eventfd ctx after releasing
    x86/speculation/mds: Mark mds_user_clear_cpu_buffers() __always_inline
    mtd: parser: cmdline: Support MTD names containing one or more colons
    rapidio: avoid data race between file operation callbacks and mport_cdev_add().
  * mm/swap_state: fix a data race in swapin_nr_pages
      mm/swap_state.c
    ceph: fix potential race in ceph_check_caps
    PCI: tegra: Fix runtime PM imbalance on error
    mtd: rawnand: omap_elm: Fix runtime PM imbalance on error
    wlcore: fix runtime pm imbalance in wlcore_regdomain_config
    wlcore: fix runtime pm imbalance in wl1271_tx_work
    ASoC: img-i2s-out: Fix runtime PM imbalance on error
    perf kcore_copy: Fix module map when there are no modules loaded
    perf metricgroup: Free metric_events on error
    perf util: Fix memory leak of prefix_if_not_in
    perf stat: Fix duration_time value for higher intervals
    perf trace: Fix the selection for architectures to generate the errno name tables
    perf evsel: Fix 2 memory leaks
    vfio/pci: fix memory leaks of eventfd ctx
    btrfs: don't force read-only after error in drop snapshot
  * usb: dwc3: Increase timeout for CmdAct cleared by device controller
      drivers/usb/dwc3/gadget.c
  * printk: handle blank console arguments passed in.
      kernel/printk/printk.c
    drm/nouveau/dispnv50: fix runtime pm imbalance on error
    drm/nouveau: fix runtime pm imbalance on error
    drm/nouveau/debugfs: fix runtime pm imbalance on error
    e1000: Do not perform reset in reset_task if we are already down
  * arm64/cpufeature: Drop TraceFilt feature exposure from ID_DFR0 register
      arch/arm64/kernel/cpufeature.c
    scsi: cxlflash: Fix error return code in cxlflash_probe()
    USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int
  * fuse: don't check refcount after stealing page
      fs/fuse/dev.c
    powerpc/traps: Make unrecoverable NMIs die instead of panic
    ALSA: hda: Fix potential race in unsol event handler
    tty: serial: samsung: Correct clock selection logic
  * tipc: fix memory leak in service subscripting
      net/tipc/topsrv.c
    USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe()
  * Bluetooth: Handle Inquiry Cancel error after Inquiry Complete
      net/bluetooth/hci_event.c
    phy: samsung: s5pv210-usb2: Add delay after reset
    power: supply: max17040: Correct voltage reading
    perf mem2node: Avoid double free related to realloc
    atm: fix a memory leak of vcc->user_back
    dt-bindings: sound: wm8994: Correct required supplies based on actual implementaion
  * arm64: cpufeature: Relax checks for AArch32 support at EL[0-2]
      arch/arm64/kernel/cpufeature.c
    sparc64: vcc: Fix error return code in vcc_probe()
    staging:r8188eu: avoid skb_clone for amsdu to msdu conversion
    scsi: aacraid: Fix error handling paths in aac_probe_one()
    net: openvswitch: use u64 for meter bucket
    KVM: arm64: vgic-its: Fix memory leak on the error path of vgic_add_lpi()
    drivers: char: tlclk.c: Avoid data race between init and interrupt handler
  * bdev: Reduce time holding bd_mutex in sync in blkdev_close()
      fs/block_dev.c
    KVM: Remove CREATE_IRQCHIP/SET_PIT2 race
    serial: uartps: Wait for tx_empty in console setup
    scsi: qedi: Fix termination timeouts in session logout
  * mm/mmap.c: initialize align_offset explicitly for vm_unmapped_area
      mm/mmap.c
    nvmet-rdma: fix double free of rdma queue
  * mm/vmscan.c: fix data races using kswapd_classzone_idx
      mm/vmscan.c
  * mm/filemap.c: clear page error before actual read
      mm/filemap.c
    mm/kmemleak.c: use address-of operator on section symbols
  * NFS: Fix races nfs_page_group_destroy() vs nfs_destroy_unlinked_subrequests()
      include/linux/nfs_page.h
    PCI: pciehp: Fix MSI interrupt race
  * ALSA: usb-audio: Fix case when USB MIDI interface has more than one extra endpoint descriptor
      sound/usb/midi.c
    ubifs: Fix out-of-bounds memory access caused by abnormal value of node_len
  * PCI: Use ioremap(), not phys_to_virt() for platform ROM
      drivers/pci/rom.c
      include/linux/pci.h
    svcrdma: Fix leak of transport addresses
    SUNRPC: Fix a potential buffer overflow in 'svc_print_xprts()'
    scsi: hpsa: correct race condition in offload enabled
    RDMA/rxe: Set sys_image_guid to be aligned with HW IB devices
    nvme: Fix controller creation races with teardown flow
    nvme-multipath: do not reset on unknown status
    tools: gpio-hammer: Avoid potential overflow in main
    cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_work_fn
    perf cpumap: Fix snprintf overflow check
    serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout
    serial: 8250_omap: Fix sleeping function called from invalid context during probe
    serial: 8250_port: Don't service RX FIFO if throttled
    perf parse-events: Fix 3 use after frees found with clang ASAN
    thermal: rcar_thermal: Handle probe error gracefully
  * tracing: Use address-of operator on section symbols
      kernel/trace/trace.c
    drm/msm/a5xx: Always set an OPP supported hardware value
    drm/msm: fix leaks if initialization fails
    KVM: PPC: Book3S HV: Treat TM-related invalid form instructions on P9 like the valid ones
    RDMA/cm: Remove a race freeing timewait_info
    nfsd: Don't add locks to closed or closing open stateids
    rtc: ds1374: fix possible race condition
    rtc: sa1100: fix possible race condition
    tpm: ibmvtpm: Wait for buffer to be set before proceeding
  * ext4: mark block bitmap corrupted when found instead of BUGON
      fs/ext4/mballoc.c
    xfs: mark dir corrupt when lookup-by-hash fails
    xfs: don't ever return a stale pointer from __xfs_dir3_free_read
    media: tda10071: fix unsigned sign extension overflow
  * Bluetooth: L2CAP: handle l2cap config request during open state
      net/bluetooth/l2cap_core.c
    scsi: aacraid: Disabling TM path and only processing IOP reset
    ath10k: use kzalloc to read for ath10k_sdio_hif_diag_read
    drm/amd/display: Stop if retimer is not available
    drm/amdgpu: increase atombios cmd timeout
  * mm: avoid data corruption on CoW fault into PFN-mapped VMA
      mm/memory.c
    perf jevents: Fix leak of mapfile memory
  * ext4: fix a data race at inode->i_disksize
      fs/ext4/inode.c
  * timekeeping: Prevent 32bit truncation in scale64_check_overflow()
      kernel/time/timekeeping.c
  * Bluetooth: guard against controllers sending zero'd events
      net/bluetooth/hci_event.c
    media: go7007: Fix URB type for interrupt handling
    bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host removal
  * random: fix data races at timer_rand_state
      drivers/char/random.c
    firmware: arm_sdei: Use cpus_read_lock() to avoid races with cpuhp
    drm/amd/display: dal_ddc_i2c_payloads_create can fail causing panic
    dmaengine: tegra-apb: Prevent race conditions on channel's freeing
    dmaengine: stm32-dma: use vchan_terminate_vdesc() in .terminate_all
  * bpf: Remove recursion prevention from rcu free callback
      kernel/bpf/hashtab.c
    x86/pkeys: Add check for pkey "overflow"
    media: staging/imx: Missing assignment in imx_media_capture_device_register()
    dmaengine: stm32-mdma: use vchan_terminate_vdesc() in .terminate_all
    KVM: x86: fix incorrect comparison in trace event
    RDMA/rxe: Fix configuration of atomic queue pair attributes
    perf test: Fix test trace+probe_vfs_getname.sh on s390
  * ALSA: usb-audio: Don't create a mixer element with bogus volume range
      sound/usb/mixer.c
    mt76: clear skb pointers from rx aggregation reorder buffer during cleanup
    crypto: chelsio - This fixes the kernel panic which occurs during a libkcapi test
    clk: stratix10: use do_div() for 64-bit calculation
    drm/omap: fix possible object reference leak
    scsi: lpfc: Fix coverity errors in fmdi attribute handling
    scsi: lpfc: Fix RQ buffer leakage when no IOCBs available
  * selinux: sel_avc_get_stat_idx should increase position index
      security/selinux/selinuxfs.c
  * audit: CONFIG_CHANGE don't log internal bookkeeping as an event
      kernel/audit_watch.c
  * skbuff: fix a data race in skb_queue_len()
      include/linux/skbuff.h
      net/unix/af_unix.c
    ALSA: hda: Clear RIRB status before reading WP
    KVM: fix overflow of zero page refcount with ksm running
  * Bluetooth: prefetch channel before killing sock
      net/bluetooth/l2cap_sock.c
  * mm: pagewalk: fix termination condition in walk_pte_range()
      mm/pagewalk.c
  * mm/swapfile.c: swap_next should increase position index
      mm/swapfile.c
  * Bluetooth: Fix refcount use-after-free issue
      net/bluetooth/l2cap_core.c
      net/bluetooth/l2cap_sock.c
    tools/power/x86/intel_pstate_tracer: changes for python 3 compatibility
    selftests/ftrace: fix glob selftest
    ceph: ensure we have a new cap before continuing in fill_inode
    ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter
    ARM: 8948/1: Prevent OOB access in stacktrace
  * tracing: Set kernel_stack's caller size properly
      kernel/trace/trace_entries.h
    Bluetooth: btrtl: Use kvmalloc for FW allocations
    powerpc/eeh: Only dump stack once if an MMIO loop is detected
    s390/cpum_sf: Use kzalloc and minor changes
    dmaengine: zynqmp_dma: fix burst length configuration
  * scsi: ufs: Fix a race condition in the tracing code
      drivers/scsi/ufs/ufshcd.c
  * scsi: ufs: Make ufshcd_add_command_trace() easier to read
      drivers/scsi/ufs/ufshcd.c
    ACPI: EC: Reference count query handlers under lock
  * sctp: move trace_sctp_probe_path into sctp_outq_sack
      include/trace/events/sctp.h
      net/sctp/outqueue.c
    media: ti-vpe: cal: Restrict DMA to avoid memory corruption
  * seqlock: Require WRITE_ONCE surrounding raw_seqcount_barrier
      include/linux/seqlock.h
  * ipv6_route_seq_next should increase position index
      net/ipv6/ip6_fib.c
  * rt_cpu_seq_next should increase position index
      net/ipv4/route.c
  * neigh_stat_seq_next() should increase position index
      net/core/neighbour.c
    xfs: fix log reservation overflows when allocating large rt extents
    KVM: arm/arm64: vgic: Fix potential double free dist->spis in __kvm_vgic_destroy()
  * kernel/sys.c: avoid copying possible padding bytes in copy_to_user
      kernel/sys.c
    ASoC: max98090: remove msleep in PLL unlocked workaround
    CIFS: Properly process SMB3 lease breaks
  * debugfs: Fix !DEBUG_FS debugfs_create_automount
      include/linux/debugfs.h
    scsi: pm80xx: Cleanup command when a reset times out
    gfs2: clean up iopen glock mess in gfs2_create_inode
  * mmc: core: Fix size overflow for mmc partitions
      include/linux/mmc/card.h
    ubi: Fix producing anchor PEBs
    RDMA/iw_cgxb4: Fix an error handling path in 'c4iw_connect()'
    xfs: fix attr leaf header freemap.size underflow
  * fix dget_parent() fastpath race
      fs/dcache.c
    RDMA/i40iw: Fix potential use after free
    RDMA/qedr: Fix potential use after free
    dmaengine: mediatek: hsdma_probe: fixed a memory leak when devm_request_irq fails
    bcache: fix a lost wake-up problem caused by mca_cannibalize_lock
  * tracing: Adding NULL checks for trace_array descriptor pointer
      kernel/trace/trace.c
      kernel/trace/trace_events.c
    tpm_crb: fix fTPM on AMD Zen+ CPUs
    drm/amdgpu/powerplay/smu7: fix AVFS handling with custom powerplay table
  * mfd: mfd-core: Protect against NULL call-back function pointer
      drivers/mfd/mfd-core.c
    mtd: cfi_cmdset_0002: don't free cfi->cfiq in error path of cfi_amdstd_setup()
    drm/amdgpu/powerplay: fix AVFS handling with custom powerplay table
    clk/ti/adpll: allocate room for terminating null
  * net: silence data-races on sk_backlog.tail
      include/net/sock.h
      net/ipv4/tcp.c
    scsi: lpfc: Fix kernel crash at lpfc_nvme_info_show during remote port bounce
    scsi: fnic: fix use after free
    PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out
    leds: mlxreg: Fix possible buffer overflow
  * lib/string.c: implement stpcpy
      lib/string.c
    ALSA: hda/realtek: Enable front panel headset LED on Lenovo ThinkStation P520
    ALSA: hda/realtek - Couldn't detect Mic if booting with headset plugged
  * ALSA: usb-audio: Add delay quirk for H570e USB headsets
      sound/usb/quirks.c
    x86/ioapic: Unbreak check_timer()
    arch/x86/lib/usercopy_64.c: fix __copy_user_flushcache() cache writeback
    media: smiapp: Fix error handling at NVM reading
    ASoC: kirkwood: fix IRQ error handling
    gma/gma500: fix a memory disclosure bug due to uninitialized bytes
    m68k: q40: Fix info-leak in rtc_ioctl
    scsi: aacraid: fix illegal IO beyond last LBA
  * mm: fix double page fault on arm64 if PTE_AF is cleared
      mm/memory.c
    ath10k: fix memory leak for tpc_stats_final
    ath10k: fix array out-of-bounds access
  * dma-fence: Serialise signal enabling (dma_fence_enable_sw_signaling)
      drivers/dma-buf/dma-fence.c
  * media: mc-device.c: fix memleak in media_device_register_entity
      drivers/media/media-device.c
  * selinux: allow labeling before policy is loaded
      security/selinux/hooks.c
    ANDROID: GKI: prevent removal of monitored symbols
    ANDROID: Refresh ABI.xmls with libabigail 1.8.0-98bbf30d
    Merge 4.19.148 into android-4.19-stable
Linux 4.19.148
    serial: 8250: Avoid error message on reprobe
  * tcp_bbr: adapt cwnd based on ack aggregation estimation
      include/net/inet_connection_sock.h
    tcp_bbr: refactor bbr_target_cwnd() for general inflight provisioning
  * mm: memcg: fix memcg reclaim soft lockup
      mm/vmscan.c
  * kbuild: support LLVM=1 to switch the default tools to Clang/LLVM
      Makefile
  * kbuild: replace AS=clang with LLVM_IAS=1
      Makefile
  * kbuild: remove AS variable
      Makefile
  * x86/boot: kbuild: allow readelf executable to be specified
      Makefile
    net: wan: wanxl: use $(M68KCC) instead of $(M68KAS) for rebuilding firmware
  * net: wan: wanxl: use allow to pass CROSS_COMPILE_M68k for rebuilding firmware
      drivers/net/wan/Kconfig
    Documentation/llvm: fix the name of llvm-size
    Documentation/llvm: add documentation on building w/ Clang/LLVM
  * kbuild: add OBJSIZE variable for the size tool
      Makefile
    MAINTAINERS: add CLANG/LLVM BUILD SUPPORT info
  * ipv4: Update exception handling for multipath routes via same device
      net/ipv4/route.c
  * net: add __must_check to skb_put_padto()
      include/linux/skbuff.h
  * net: qrtr: check skb_put_padto() return value
      net/qrtr/qrtr.c
  * net: phy: Avoid NPD upon phy_detach() when driver is unbound
      drivers/net/phy/phy_device.c
    bnxt_en: Protect bnxt_set_eee() and bnxt_set_pauseparam() with mutex.
    bnxt_en: return proper error codes in bnxt_show_temp
  * tipc: use skb_unshare() instead in tipc_buf_append()
      net/tipc/msg.c
  * tipc: fix shutdown() of connection oriented socket
      net/tipc/socket.c
  * tipc: Fix memory leak in tipc_group_create_member()
      net/tipc/group.c
    nfp: use correct define to return NONE fec
  * net: sch_generic: aviod concurrent reset and enqueue op for lockless qdisc
      net/sched/sch_generic.c
  * net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMAC
      net/ipv6/Kconfig
    net: dsa: rtl8366: Properly clear member config
    net: DCB: Validate DCB_ATTR_DCB_BUFFER argument
  * ipv6: avoid lockdep issue in fib6_del()
      net/ipv6/ip6_fib.c
  * ip: fix tos reflection in ack and reset packets
      net/ipv4/ip_output.c
    hdlc_ppp: add range checks in ppp_cp_parse_cr()
    geneve: add transport ports in route lookup for geneve
    cxgb4: Fix offset when clearing filter byte counters
    mm/thp: fix __split_huge_pmd_locked() for migration PMD
    kprobes: fix kill kprobe which has been marked as gone
    KVM: fix memory leak in kvm_io_bus_unregister_dev()
  * af_key: pfkey_dump needs parameter validation
      net/key/af_key.c
    ANDROID: drop KERNEL_DIR setting in build.config.common
    Merge 4.19.147 into android-4.19-stable
Linux 4.19.147
    x86/defconfig: Enable CONFIG_USB_XHCI_HCD=y
    powerpc/dma: Fix dma_map_ops::get_required_mask
  * ehci-hcd: Move include to keep CRC stable
      drivers/usb/host/ehci-hcd.c
      drivers/usb/host/ehci-hub.c
    x86/boot/compressed: Disable relocation relaxation
    serial: 8250_pci: Add Realtek 816a and 816b
    Input: i8042 - add Entroware Proteus EL07R4 to nomux and reset lists
    Input: trackpoint - add new trackpoint variant IDs
  * percpu: fix first chunk size calculation for populated bitmap
      mm/percpu.c
    Revert "ALSA: hda - Fix silent audio output and corrupted input on MSI X570-A PRO"
    i2c: i801: Fix resume bug
    usblp: fix race between disconnect() and read()
    USB: UAS: fix disconnect by unplugging a hub
  * USB: quirks: Add USB_QUIRK_IGNORE_REMOTE_WAKEUP quirk for BYD zhaoxin notebook
      drivers/usb/core/quirks.c
    drm/mediatek: Add missing put_device() call in mtk_hdmi_dt_parse_pdata()
    drm/mediatek: Add exception handing in mtk_drm_probe() if component init fail
    MIPS: SNI: Fix spurious interrupts
    fbcon: Fix user font detection test at fbcon_resize().
    perf test: Free formats for perf pmu parse test
    MIPS: SNI: Fix MIPS_L1_CACHE_SHIFT
    perf test: Fix the "signal" test inline assembly
    Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload
    ASoC: qcom: Set card->owner to avoid warnings
    clk: rockchip: Fix initialization of mux_pll_src_4plls_p
    clk: davinci: Use the correct size when allocating memory
  * KVM: MIPS: Change the definition of kvm type
      include/uapi/linux/kvm.h
  * spi: Fix memory leak on splited transfers
      drivers/spi/spi.c
  * i2c: algo: pca: Reapply i2c bus settings after reset
      include/linux/i2c-algo-pca.h
  * f2fs: Return EOF on unaligned end of file DIO read
      fs/f2fs/data.c
  * f2fs: fix indefinite loop scanning for free nid
      fs/f2fs/node.c
    nvme-rdma: cancel async events before freeing event struct
    nvme-fc: cancel async events before freeing event struct
    openrisc: Fix cache API compile issue when not inlining
    rapidio: Replace 'select' DMAENGINES 'with depends on'
    SUNRPC: stop printk reading past end of string
    NFS: Zero-stateid SETATTR should first return delegation
    spi: spi-loopback-test: Fix out-of-bounds read
    regulator: pwm: Fix machine constraints application
    scsi: lpfc: Fix FLOGI/PLOGI receive race condition in pt2pt discovery
    scsi: libfc: Fix for double free()
    scsi: pm8001: Fix memleak in pm8001_exec_internal_task_abort
    NFSv4.1 handle ERR_DELAY error reclaiming locking state on delegation recall
    hv_netvsc: Remove "unlikely" from netvsc_select_queue
  * net: handle the return value of pskb_carve_frag_list() correctly
      net/core/skbuff.c
    RDMA/bnxt_re: Restrict the max_gids to 256
    gfs2: initialize transaction tr_ailX_lists earlier
    scsi: qla2xxx: Reduce holding sess_lock to prevent CPU lock-up
    scsi: qla2xxx: Move rport registration out of internal work_list
    scsi: qla2xxx: Update rscn_rcvd field to more meaningful scan_needed
    dsa: Allow forwarding of redirected IGMP traffic
    ANDROID: Refresh ABI.xmls with libabigail 1.8.0-1dca710a
    ANDROID: KMI symbol lists: migrate section name
    Merge 4.19.146 into android-4.19-stable
Linux 4.19.146
  * gcov: add support for GCC 10.1
      kernel/gcov/Kconfig
    usb: typec: ucsi: acpi: Check the _DEP dependencies
  * usb: Fix out of sync data toggle if a configured device is reconfigured
      drivers/usb/core/message.c
    USB: serial: option: add support for SIM7070/SIM7080/SIM7090 modules
    USB: serial: option: support dynamic Quectel USB compositions
    USB: serial: ftdi_sio: add IDs for Xsens Mti USB converter
  * usb: core: fix slab-out-of-bounds Read in read_descriptors
      drivers/usb/core/sysfs.c
    phy: qcom-qmp: Use correct values for ipq8074 PCIe Gen2 PHY init
    staging: greybus: audio: fix uninitialized value issue
    video: fbdev: fix OOB read in vga_8planes_imageblit()
    ARM: dts: vfxxx: Add syscon compatible with OCOTP
    KVM: VMX: Don't freeze guest when event delivery causes an APIC-access exit
    fbcon: remove now unusued 'softback_lines' cursor() argument
    fbcon: remove soft scrollback code
  * vgacon: remove software scrollback support
      drivers/video/console/Kconfig
    RDMA/rxe: Fix the parent sysfs read when the interface has 15 chars
    rbd: require global CAP_SYS_ADMIN for mapping and unmapping
    drm/msm: Disable preemption on all 5xx targets
    drm/tve200: Stabilize enable/disable
    scsi: target: iscsi: Fix hang in iscsit_access_np() when getting tpg->np_login_sem
    scsi: target: iscsi: Fix data digest calculation
  * regulator: push allocation in set_consumer_device_supply() out of lock
      drivers/regulator/core.c
    btrfs: fix wrong address when faulting in pages in the search ioctl
    btrfs: fix lockdep splat in add_missing_dev
    btrfs: require only sector size alignment for parent eb bytenr
    staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb()
    iio:accel:mma8452: Fix timestamp alignment and prevent data leak.
    iio:accel:mma7455: Fix timestamp alignment and prevent data leak.
    iio: accel: kxsd9: Fix alignment of local buffer.
    iio:chemical:ccs811: Fix timestamp alignment and prevent data leak.
    iio:light:max44000 Fix timestamp alignment and prevent data leak.
    iio:magnetometer:ak8975 Fix alignment and data leak issues.
    iio:adc:ti-adc081c Fix alignment and data leak issues
    iio:adc:max1118 Fix alignment of timestamp and data leak issues
    iio:adc:ina2xx Fix timestamp alignment issue.
    iio:adc:ti-adc084s021 Fix alignment and data leak issues.
    iio:accel:bmc150-accel: Fix timestamp alignment and prevent data leak.
    iio:light:ltr501 Fix timestamp alignment issue.
    iio: adc: ti-ads1015: fix conversion when CONFIG_PM is not set
    iio: adc: mcp3422: fix locking on error path
    iio: adc: mcp3422: fix locking scope
  * gcov: Disable gcov build with GCC 10
      kernel/gcov/Kconfig
    iommu/amd: Do not use IOMMUv2 functionality when SME is active
    drm/amdgpu: Fix bug in reporting voltage for CIK
    ALSA: hda: fix a runtime pm issue in SOF when integrated GPU is disabled
    cpufreq: intel_pstate: Fix intel_pstate_get_hwp_max() for turbo disabled
    cpufreq: intel_pstate: Refuse to turn off with HWP enabled
    ARC: [plat-hsdk]: Switch ethernet phy-mode to rgmii-id
    HID: elan: Fix memleak in elan_input_configured
    drivers/net/wan/hdlc_cisco: Add hard_header_len
  * HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for all Saitek X52 devices
      drivers/hid/hid-ids.h
      drivers/hid/hid-quirks.c
    nvme-rdma: serialize controller teardown sequences
    nvme-fabrics: don't check state NVME_CTRL_NEW for request acceptance
  * irqchip/eznps: Fix build error for !ARC700 builds
      include/soc/nps/common.h
    xfs: initialize the shortform attr header padding entry
    drivers/net/wan/lapbether: Set network_header before transmitting
    ALSA: hda: Fix 2 channel swapping for Tegra
    firestream: Fix memleak in fs_open
    NFC: st95hf: Fix memleak in st95hf_in_send_cmd
    drivers/net/wan/lapbether: Added needed_tailroom
  * netfilter: conntrack: allow sctp hearbeat after connection re-use
      include/linux/netfilter/nf_conntrack_sctp.h
      net/netfilter/nf_conntrack_proto_sctp.c
    dmaengine: acpi: Put the CSRT table after using it
    ARC: HSDK: wireup perf irq
    arm64: dts: ns2: Fixed QSPI compatible string
    ARM: dts: BCM5301X: Fixed QSPI compatible string
    ARM: dts: NSP: Fixed QSPI compatible string
    ARM: dts: bcm: HR2: Fixed QSPI compatible string
    mmc: sdhci-msm: Add retries when all tuning phases are found valid
    RDMA/core: Fix reported speed and width
    scsi: libsas: Set data_dir as DMA_NONE if libata marks qc as NODATA
    drm/sun4i: Fix dsi dcs long write function
    RDMA/bnxt_re: Do not report transparent vlan from QP1
    RDMA/rxe: Drop pointless checks in rxe_init_ports
    RDMA/rxe: Fix memleak in rxe_mem_init_user
    ARM: dts: ls1021a: fix QuadSPI-memory reg range
    ARM: dts: socfpga: fix register entry for timer3 on Arria10
    ARM: dts: logicpd-som-lv-baseboard: Fix broken audio
    ARM: dts: logicpd-torpedo-baseboard: Fix broken audio
    ANDROID: ABI: refresh with latest libabigail 94f5d4ae

Change-Id: Iae064df7e1dd74cd417c0f1b30a86a2f26686ac1
Signed-off-by: Lucas Wei <lucaswei@google.com>
2021-01-27 11:46:29 +08:00
lucaswei
93b7e2f852 Merge android-4.19-stable (4.19.145) into android-msm-pixel-4.19-lts
Merge 4.19.145 into android-4.19-stable
Linux 4.19.145
    net/mlx5e: Don't support phys switch id if not in switchdev mode
  * net: disable netpoll on fresh napis
      net/core/dev.c
  * tipc: fix shutdown() of connectionless socket
      net/tipc/socket.c
  * sctp: not disable bh in the whole sctp_get_port_local()
      net/sctp/socket.c
    net: usb: dm9601: Add USB ID of Keenetic Plus DSL
  * netlabel: fix problems with mapping removal
      net/netlabel/netlabel_domainhash.c
  * block: ensure bdi->io_pages is always initialized
      block/blk-core.c
    ALSA; firewire-tascam: exclude Tascam FE-8 from detection
  * FROMGIT: binder: print warnings when detecting oneway spamming.
      drivers/android/binder.c
      drivers/android/binder_alloc.c
      drivers/android/binder_alloc.h
    Merge 4.19.144 into android-4.19-stable
Linux 4.19.144
  * net: usb: Fix uninit-was-stored issue in asix_read_phy_addr()
      drivers/net/usb/asix_common.c
  * cfg80211: regulatory: reject invalid hints
      net/wireless/reg.c
    mm/hugetlb: fix a race between hugetlb sysctl handlers
    checkpatch: fix the usage of capture group ( ... )
    vfio/pci: Fix SR-IOV VF handling with MMIO blocking
  * KVM: arm64: Set HCR_EL2.PTW to prevent AT taking synchronous exception
      arch/arm64/include/asm/kvm_arm.h
  * KVM: arm64: Survive synchronous exceptions caused by AT instructions
      arch/arm64/include/asm/kvm_asm.h
    KVM: arm64: Defer guest entry when an asynchronous exception is pending
  * KVM: arm64: Add kvm_extable for vaxorcism code
      arch/arm64/include/asm/kvm_asm.h
      arch/arm64/kernel/vmlinux.lds.S
  * mm: slub: fix conversion of freelist_corrupted()
      mm/slub.c
    dm thin metadata: Avoid returning cmd->bm wild pointer on error
    dm cache metadata: Avoid returning cmd->bm wild pointer on error
    dm writecache: handle DAX to partitions on persistent memory correctly
  * libata: implement ATA_HORKAGE_MAX_TRIM_128M and apply to Sandisks
      include/linux/libata.h
  * block: allow for_each_bvec to support zero len bvec
      include/linux/bvec.h
    affs: fix basic permission bits to actually work
    media: rc: uevent sysfs file races with rc_unregister_device()
    media: rc: do not access device via sysfs after rc_unregister_device()
    ALSA: hda - Fix silent audio output and corrupted input on MSI X570-A PRO
    ALSA: firewire-digi00x: exclude Avid Adrenaline from detection
    ALSA: hda/hdmi: always check pin power status in i915 pin fixup
    ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
    ALSA: ca0106: fix error code handling
    usb: qmi_wwan: add D-Link DWM-222 A2 device ID
    net: usb: qmi_wwan: add Telit 0x1050 composition
    btrfs: fix potential deadlock in the search ioctl
  * uaccess: Add non-pagefault user-space write function
      include/linux/uaccess.h
      mm/maccess.c
  * uaccess: Add non-pagefault user-space read functions
      include/linux/uaccess.h
      mm/maccess.c
    btrfs: set the lockdep class for log tree extent buffers
    btrfs: Remove extraneous extent_buffer_get from tree_mod_log_rewind
    btrfs: Remove redundant extent_buffer_get in get_old_root
    vfio-pci: Invalidate mmaps and block MMIO access on disabled memory
    vfio-pci: Fault mmaps to enable vma tracking
    vfio/type1: Support faulting PFNMAP vmas
    btrfs: drop path before adding new uuid tree entry
    xfs: don't update mtime on COW faults
    ext2: don't update mtime on COW faults
  * include/linux/log2.h: add missing () around n in roundup_pow_of_two()
      include/linux/log2.h
    thermal: ti-soc-thermal: Fix bogus thermal shutdowns for omap4430
    iommu/vt-d: Serialize IOMMU GCMD register modifications
    x86, fakenuma: Fix invalid starting node ID
    tg3: Fix soft lockup when tg3_reset_task() fails.
    perf jevents: Fix suspicious code in fixregex()
    xfs: fix xfs_bmap_validate_extent_raw when checking attr fork of rt files
    net: gemini: Fix another missing clk_disable_unprepare() in probe
  * fix regression in "epoll: Keep a reference on files added to the check list"
      fs/eventpoll.c
    net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init()
    perf tools: Correct SNOOPX field offset
    nvmet-fc: Fix a missed _irqsave version of spin_lock in 'nvmet_fc_fod_op_done()'
  * netfilter: nfnetlink: nfnetlink_unicast() reports EAGAIN instead of ENOBUFS
      include/linux/netfilter/nfnetlink.h
      net/netfilter/nfnetlink.c
      net/netfilter/nfnetlink_log.c
      net/netfilter/nfnetlink_queue.c
    selftests/bpf: Fix massive output from test_maps
    bnxt: don't enable NAPI until rings are ready
    xfs: fix boundary test in xfs_attr_shortform_verify
    bnxt_en: fix HWRM error when querying VF temperature
    bnxt_en: Fix PCI AER error recovery flow
    bnxt_en: Check for zero dir entries in NVRAM.
    bnxt_en: Don't query FW when netif_running() is false.
    gtp: add GTPA_LINK info to msg sent to userspace
    dmaengine: pl330: Fix burst length if burst size is smaller than bus width
    net: arc_emac: Fix memleak in arc_mdio_probe
    ravb: Fixed to be able to unload modules
    net: systemport: Fix memleak in bcm_sysport_probe
    net: hns: Fix memleak in hns_nic_dev_probe
  * netfilter: nf_tables: fix destination register zeroing
      include/net/netfilter/nf_tables.h
  * netfilter: nf_tables: incorrect enum nft_list_attributes definition
      include/uapi/linux/netfilter/nf_tables.h
    netfilter: nf_tables: add NFTA_SET_USERDATA if not null
    MIPS: BMIPS: Also call bmips_cpu_setup() for secondary cores
    MIPS: mm: BMIPS5000 has inclusive physical caches
    dmaengine: at_hdmac: check return value of of_find_device_by_node() in at_dma_xlate()
    batman-adv: bla: use netif_rx_ni when not in interrupt context
    batman-adv: Fix own OGM check in aggregated OGMs
    batman-adv: Avoid uninitialized chaddr when handling DHCP
  * dmaengine: of-dma: Fix of_dma_router_xlate's of_dma_xlate handling
      drivers/dma/of-dma.c
    xen/xenbus: Fix granting of vmalloc'd memory
    s390: don't trace preemption in percpu macros
  * cpuidle: Fixup IRQ state
      drivers/cpuidle/cpuidle.c
    ceph: don't allow setlease on cephfs
    drm/msm/a6xx: fix gmu start on newer firmware
    nvmet: Disable keep-alive timer when kato is cleared to 0h
    hwmon: (applesmc) check status earlier.
    drm/msm: add shutdown support for display platform_driver
    tty: serial: qcom_geni_serial: Drop __init from qcom_geni_console_setup
    scsi: target: tcmu: Optimize use of flush_dcache_page
    scsi: target: tcmu: Fix size in calls to tcmu_flush_dcache_range
    perf record/stat: Explicitly call out event modifiers in the documentation
  * HID: core: Sanitize event code and type when mapping input
      drivers/hid/hid-input.c
      drivers/hid/hid-multitouch.c
      include/linux/hid.h
  * HID: core: Correctly handle ReportSize being zero
      drivers/hid/hid-core.c
    Merge 4.19.143 into android-4.19-stable
Linux 4.19.143
  * ALSA: usb-audio: Update documentation comment for MS2109 quirk
      sound/usb/quirks-table.h
  * HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()
      drivers/hid/usbhid/hiddev.c
    tpm: Unify the mismatching TPM space buffer sizes
  * usb: dwc3: gadget: Handle ZLP for sg requests
      drivers/usb/dwc3/gadget.c
  * usb: dwc3: gadget: Fix handling ZLP
      drivers/usb/dwc3/gadget.c
  * usb: dwc3: gadget: Don't setup more than requested
      drivers/usb/dwc3/gadget.c
    btrfs: check the right error variable in btrfs_del_dir_entries_in_log
    usb: storage: Add unusual_uas entry for Sony PSZ drives
    USB: cdc-acm: rework notification_buffer resizing
  * USB: gadget: u_f: Unbreak offset calculation in VLAs
      drivers/usb/gadget/u_f.h
  * USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb()
      drivers/usb/gadget/function/f_ncm.c
  * USB: gadget: u_f: add overflow checks to VLA macros
      drivers/usb/gadget/u_f.h
    usb: host: ohci-exynos: Fix error handling in exynos_ohci_probe()
  * USB: Ignore UAS for JMicron JMS567 ATA/ATAPI Bridge
      drivers/usb/storage/unusual_devs.h
  * USB: quirks: Ignore duplicate endpoint on Sound Devices MixPre-D
      drivers/usb/core/quirks.c
  * USB: quirks: Add no-lpm quirk for another Raydium touchscreen
      drivers/usb/core/quirks.c
    usb: uas: Add quirk for PNY Pro Elite
    USB: yurex: Fix bad gfp argument
    drm/amd/pm: correct Vega12 swctf limit setting
    drm/amd/pm: correct Vega10 swctf limit setting
    drm/amdgpu: Fix buffer overflow in INFO ioctl
    irqchip/stm32-exti: Avoid losing interrupts due to clearing pending bits by mistake
    genirq/matrix: Deal with the sillyness of for_each_cpu() on UP
  * device property: Fix the secondary firmware node handling in set_primary_fwnode()
      drivers/base/core.c
  * PM: sleep: core: Fix the handling of pending runtime resume requests
      drivers/base/power/main.c
  * xhci: Always restore EP_SOFT_CLEAR_TOGGLE even if ep reset failed
      drivers/usb/host/xhci.c
  * xhci: Do warm-reset when both CAS and XDEV_RESUME are set
      drivers/usb/host/xhci-hub.c
  * usb: host: xhci: fix ep context print mismatch in debugfs
      drivers/usb/host/xhci-debugfs.c
    XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information.
  * writeback: Fix sync livelock due to b_dirty_time processing
      fs/fs-writeback.c
      include/trace/events/writeback.h
  * writeback: Avoid skipping inode writeback
      fs/fs-writeback.c
      include/linux/fs.h
  * writeback: Protect inode->i_io_list with inode->i_lock
      fs/fs-writeback.c
    serial: 8250: change lock order in serial8250_do_startup()
    serial: 8250_exar: Fix number of ports for Commtech PCIe cards
    serial: pl011: Don't leak amba_ports entry on driver register error
    serial: pl011: Fix oops on -EPROBE_DEFER
    serial: samsung: Removes the IRQ not found warning
    vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize()
    vt: defer kfree() of vc_screenbuf in vc_do_resize()
  * USB: lvtest: return proper error code in probe
      drivers/usb/misc/lvstest.c
    fbcon: prevent user font height or width change from causing potential out-of-bounds access
    btrfs: fix space cache memory leak after transaction abort
    btrfs: reset compression level for lzo on remount
  * blk-mq: order adding requests to hctx->dispatch and checking SCHED_RESTART
      block/blk-mq-sched.c
      block/blk-mq.c
    HID: i2c-hid: Always sleep 60ms after I2C_HID_PWR_ON commands
  * block: loop: set discard granularity and alignment for block device backed loop
      drivers/block/loop.c
    powerpc/perf: Fix soft lockups due to missed interrupt accounting
    net: gianfar: Add of_node_put() before goto statement
    macvlan: validate setting of multiple remote source MAC addresses
    Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command"
    scsi: qla2xxx: Fix null pointer access during disconnect from subsystem
    scsi: qla2xxx: Check if FW supports MQ before enabling
  * scsi: ufs: Clean up completed request without interrupt notification
      drivers/scsi/ufs/ufshcd.c
  * scsi: ufs: Improve interrupt handling for shared interrupts
      drivers/scsi/ufs/ufshcd.c
  * scsi: ufs: Fix possible infinite loop in ufshcd_hold
      drivers/scsi/ufs/ufshcd.c
    scsi: fcoe: Fix I/O path allocation
    ASoC: wm8994: Avoid attempts to read unreadable registers
    s390/cio: add cond_resched() in the slow_eval_known_fn() loop
    spi: stm32: fix stm32_spi_prepare_mbr in case of odd clk_rate
  * fs: prevent BUG_ON in submit_bh_wbc()
      fs/buffer.c
      fs/ext4/super.c
  * ext4: correctly restore system zone info when remount fails
      fs/ext4/block_validity.c
      fs/ext4/super.c
  * ext4: handle error of ext4_setup_system_zone() on remount
      fs/ext4/super.c
  * ext4: handle option set by mount flags correctly
      fs/ext4/super.c
  * jbd2: abort journal if free a async write error metadata buffer
      fs/jbd2/transaction.c
  * ext4: handle read only external journal device
      fs/ext4/super.c
  * ext4: don't BUG on inconsistent journal feature
      fs/ext4/super.c
  * jbd2: make sure jh have b_transaction set in refile/unfile_buffer
      fs/jbd2/transaction.c
    usb: gadget: f_tcm: Fix some resource leaks in some error paths
    i2c: rcar: in slave mode, clear NACK earlier
    null_blk: fix passing of REQ_FUA flag in null_handle_rq
    nvme-fc: Fix wrong return value in __nvme_fc_init_request()
    drm/msm/adreno: fix updating ring fence
    media: gpio-ir-tx: improve precision of transmitted signal due to scheduling
    Revert "ath10k: fix DMA related firmware crashes on multiple devices"
  * efi: provide empty efi_enter_virtual_mode implementation
      include/linux/efi.h
    USB: sisusbvga: Fix a potential UB casued by left shifting a negative value
    powerpc/spufs: add CONFIG_COREDUMP dependency
    KVM: arm64: Fix symbol dependency in __hyp_call_panic_nvhe
    EDAC/ie31200: Fallback if host bridge device is already initialized
    scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del()
    ceph: fix potential mdsc use-after-free crash
    scsi: iscsi: Do not put host in iscsi_set_flashnode_param()
    btrfs: file: reserve qgroup space after the hole punch range is locked
    locking/lockdep: Fix overflow in presentation of average lock-time
    drm/nouveau: Fix reference count leak in nouveau_connector_detect
    drm/nouveau: fix reference count leak in nv50_disp_atomic_commit
    drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open
  * f2fs: fix use-after-free issue
      fs/f2fs/super.c
  * HID: quirks: add NOGET quirk for Logitech GROUP
      drivers/hid/hid-ids.h
      drivers/hid/hid-quirks.c
    cec-api: prevent leaking memory through hole in structure
    mips/vdso: Fix resource leaks in genvdso.c
    rtlwifi: rtl8192cu: Prevent leaking urb
    ARM: dts: ls1021a: output PPS signal on FIPER2
  * PCI: Fix pci_create_slot() reference count leak
      drivers/pci/slot.c
    omapfb: fix multiple reference count leaks due to pm_runtime_get_sync
  * f2fs: fix error path in do_recover_data()
      fs/f2fs/f2fs.h
      fs/f2fs/inline.c
      fs/f2fs/node.c
      fs/f2fs/recovery.c
    selftests/powerpc: Purge extra count_pmc() calls of ebb selftests
    xfs: Don't allow logging of XFS_ISTALE inodes
    scsi: lpfc: Fix shost refcount mismatch when deleting vport
    drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails
    drm/amdgpu: fix ref count leak in amdgpu_display_crtc_set_config
    drm/amd/display: fix ref count leak in amdgpu_drm_ioctl
    drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms
    drm/radeon: fix multiple reference count leak
    drm/amdkfd: Fix reference count leaks.
  * iommu/iova: Don't BUG on invalid PFNs
      drivers/iommu/iova.c
    scsi: target: tcmu: Fix crash on ARM during cmd completion
  * blktrace: ensure our debugfs dir exists
      kernel/trace/blktrace.c
    media: pci: ttpci: av7110: fix possible buffer overflow caused by bad DMA value in debiirq()
    powerpc/xive: Ignore kmemleak false positives
    arm64: dts: qcom: msm8916: Pull down PDM GPIOs during sleep
    mfd: intel-lpss: Add Intel Emmitsburg PCH PCI IDs
    ASoC: tegra: Fix reference count leaks.
    ASoC: img-parallel-out: Fix a reference count leak
    ASoC: img: Fix a reference count leak in img_i2s_in_set_fmt
    ALSA: pci: delete repeated words in comments
    ipvlan: fix device features
    net: ena: Make missed_tx stat incremental
  * tipc: fix uninit skb->data in tipc_nl_compat_dumpit()
      net/tipc/netlink_compat.c
    net/smc: Prevent kernel-infoleak in __smc_diag_dump()
  * net: qrtr: fix usage of idr in port assignment to socket
      net/qrtr/qrtr.c
  * net: Fix potential wrong skb->protocol in skb_vlan_untag()
      net/core/skbuff.c
  * gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY
      net/ipv6/ip6_tunnel.c
    powerpc/64s: Don't init FSCR_DSCR in __init_FSCR()
    ANDROID: gki_defconfig: initialize locals with zeroes
  * UPSTREAM: security: allow using Clang's zero initialization for stack variables
      Makefile
      init/main.c
      security/Kconfig.hardening
  * Revert "binder: Prevent context manager from incrementing ref 0"
      drivers/android/binder.c
    ANDROID: GKI: update the ABI xml
    BACKPORT: recordmcount: support >64k sections
  * UPSTREAM: arm64: vdso: Build vDSO with -ffixed-x18
      arch/arm64/kernel/vdso/Makefile
  * UPSTREAM: cgroup: Remove unused cgrp variable
      kernel/cgroup/cgroup.c
  * UPSTREAM: cgroup: freezer: call cgroup_enter_frozen() with preemption disabled in ptrace_stop()
      kernel/signal.c
  * UPSTREAM: cgroup: freezer: fix frozen state inheritance
      kernel/cgroup/cgroup.c
  * UPSTREAM: signal: unconditionally leave the frozen state in ptrace_stop()
      kernel/signal.c
  * BACKPORT: cgroup: cgroup v2 freezer
      include/linux/cgroup-defs.h
      include/linux/cgroup.h
      include/linux/sched/jobctl.h
      kernel/cgroup/Makefile
      kernel/cgroup/cgroup.c
      kernel/cgroup/freezer.c
      kernel/fork.c
      kernel/signal.c
  * UPSTREAM: cgroup: implement __cgroup_task_count() helper
      kernel/cgroup/cgroup-internal.h
      kernel/cgroup/cgroup-v1.c
      kernel/cgroup/cgroup.c
  * UPSTREAM: cgroup: rename freezer.c into legacy_freezer.c
      kernel/cgroup/Makefile
  * UPSTREAM: cgroup: remove extra cgroup_migrate_finish() call
      kernel/cgroup/cgroup.c
  * UPSTREAM: cgroup: saner refcounting for cgroup_root
      kernel/cgroup/cgroup-internal.h
      kernel/cgroup/cgroup-v1.c
      kernel/cgroup/cgroup.c
  * UPSTREAM: cgroup: Add named hierarchy disabling to cgroup_no_v1 boot param
      kernel/cgroup/cgroup-v1.c
  * UPSTREAM: cgroup: remove unnecessary unlikely()
      kernel/cgroup/cgroup.c
  * UPSTREAM: cgroup: Simplify cgroup_ancestor
      include/linux/cgroup.h
    Merge 4.19.142 into android-4.19-stable
Linux 4.19.142
    KVM: arm64: Only reschedule if MMU_NOTIFIER_RANGE_BLOCKABLE is not set
  * KVM: Pass MMU notifier range flags to kvm_unmap_hva_range()
      arch/arm64/include/asm/kvm_host.h
  * clk: Evict unregistered clks from parent caches
      drivers/clk/clk.c
    xen: don't reschedule in preemption off sections
    mm/hugetlb: fix calculation of adjust_range_if_pmd_sharing_possible
  * do_epoll_ctl(): clean the failure exits up a bit
      fs/eventpoll.c
  * epoll: Keep a reference on files added to the check list
      fs/eventpoll.c
    efi: add missed destroy_workqueue when efisubsys_init fails
    powerpc/pseries: Do not initiate shutdown when system is running on UPS
    net: dsa: b53: check for timeout
    hv_netvsc: Fix the queue_mapping in netvsc_vf_xmit()
    net: gemini: Fix missing free_netdev() in error path of gemini_ethernet_port_probe()
    net: ena: Prevent reset after device destruction
  * bonding: fix active-backup failover for current ARP slave
      drivers/net/bonding/bond_main.c
    afs: Fix NULL deref in afs_dynroot_depopulate()
    RDMA/bnxt_re: Do not add user qps to flushlist
    Fix build error when CONFIG_ACPI is not set/enabled:
    efi: avoid error message when booting under Xen
    kconfig: qconf: fix signal connection to invalid slots
    kconfig: qconf: do not limit the pop-up menu to the first row
    kvm: x86: Toggling CR4.PKE does not load PDPTEs in PAE mode
    kvm: x86: Toggling CR4.SMAP does not load PDPTEs in PAE mode
    vfio/type1: Add proper error unwind for vfio_iommu_replay()
    ASoC: intel: Fix memleak in sst_media_open
    ASoC: msm8916-wcd-analog: fix register Interrupt offset
    s390/ptrace: fix storage key handling
    s390/runtime_instrumentation: fix storage key handling
  * bonding: fix a potential double-unregister
      drivers/net/bonding/bond_main.c
  * bonding: show saner speed for broadcast mode
      drivers/net/bonding/bond_main.c
    net: fec: correct the error path for regulator disable in probe
    i40e: Fix crash during removing i40e driver
    i40e: Set RX_ONLY mode for unicast promiscuous on VLAN
    ASoC: q6routing: add dummy register read/write function
  * ext4: don't allow overlapping system zones
      fs/ext4/block_validity.c
  * ext4: fix potential negative array index in do_split()
      fs/ext4/namei.c
  * fs/signalfd.c: fix inconsistent return codes for signalfd4
      fs/signalfd.c
    alpha: fix annotation of io{read,write}{16,32}be()
    xfs: Fix UBSAN null-ptr-deref in xfs_sysfs_init
    tools/testing/selftests/cgroup/cgroup_util.c: cg_read_strcmp: fix null pointer dereference
    virtio_ring: Avoid loop when vq is broken in virtqueue_poll
    scsi: libfc: Free skb in fc_disc_gpn_id_resp() for valid cases
    cpufreq: intel_pstate: Fix cpuinfo_max_freq when MSR_TURBO_RATIO_LIMIT is 0
    ceph: fix use-after-free for fsc->mdsc
    jffs2: fix UAF problem
    xfs: fix inode quota reservation checks
    svcrdma: Fix another Receive buffer leak
    m68knommu: fix overwriting of bits in ColdFire V3 cache control
    Input: psmouse - add a newline when printing 'proto' by sysfs
    media: vpss: clean up resources in init
    rtc: goldfish: Enable interrupt in set_alarm() when necessary
    media: budget-core: Improve exception handling in budget_register()
    scsi: target: tcmu: Fix crash in tcmu_flush_dcache_range on ARM
  * scsi: ufs: Add DELAY_BEFORE_LPM quirk for Micron devices
      drivers/scsi/ufs/ufs_quirks.h
      drivers/scsi/ufs/ufshcd.c
  * spi: Prevent adding devices below an unregistering controller
      drivers/spi/Kconfig
      drivers/spi/spi.c
  * kthread: Do not preempt current task if it is going to call schedule()
      kernel/kthread.c
    drm/amd/display: fix pow() crashing when given base 0
    scsi: zfcp: Fix use-after-free in request timeout handlers
  * jbd2: add the missing unlock_buffer() in the error path of jbd2_write_superblock()
      fs/jbd2/journal.c
  * ext4: fix checking of directory entry validity for inline directories
      fs/ext4/namei.c
  * mm, page_alloc: fix core hung in free_pcppages_bulk()
      mm/page_alloc.c
  * mm: include CMA pages in lowmem_reserve at boot
      mm/page_alloc.c
    kernel/relay.c: fix memleak on destroy relay channel
    romfs: fix uninitialized memory leak in romfs_dev_read()
    btrfs: sysfs: use NOFS for device creation
    btrfs: inode: fix NULL pointer dereference if inode doesn't need compression
    btrfs: Move free_pages_out label in inline extent handling branch in compress_file_range
    btrfs: don't show full path of bind mounts in subvol=
    btrfs: export helpers for subvolume name/id resolution
    khugepaged: adjust VM_BUG_ON_MM() in __khugepaged_enter()
    khugepaged: khugepaged_test_exit() check mmget_still_valid()
    perf probe: Fix memory leakage when the probe point is not found
    drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset()
  * ANDROID: tty: fix tty name overflow
      drivers/tty/serdev/serdev-ttyport.c
  * ANDROID: Revert "PCI: Probe bridge window attributes once at enumeration-time"
      drivers/pci/probe.c
      drivers/pci/setup-bus.c
      include/linux/pci.h
    Merge 4.19.141 into android-4.19-stable
Linux 4.19.141
    drm/amdgpu: Fix bug where DPM is not enabled after hibernate and resume
  * drm: Added orientation quirk for ASUS tablet model T103HAF
      drivers/gpu/drm/drm_panel_orientation_quirks.c
    arm64: dts: marvell: espressobin: add ethernet alias
    khugepaged: retract_page_tables() remember to test exit
    sh: landisk: Add missing initialization of sh_io_port_base
    tools build feature: Quote CC and CXX for their arguments
    perf bench mem: Always memset source before memcpy
    ALSA: echoaudio: Fix potential Oops in snd_echo_resume()
    mfd: dln2: Run event handler loop under spinlock
    test_kmod: avoid potential double free in trigger_config_run_type()
    fs/ufs: avoid potential u32 multiplication overflow
    fs/minix: remove expected error message in block_to_path()
    fs/minix: fix block limit check for V1 filesystems
    fs/minix: set s_maxbytes correctly
    nfs: Fix getxattr kernel panic and memory overflow
    net: qcom/emac: add missed clk_disable_unprepare in error path of emac_clks_phase1_init
    drm/vmwgfx: Fix two list_for_each loop exit tests
    drm/vmwgfx: Use correct vmw_legacy_display_unit pointer
    Input: sentelic - fix error return when fsp_reg_write fails
  * watchdog: initialize device before misc_register
      drivers/watchdog/watchdog_dev.c
    scsi: lpfc: nvmet: Avoid hang / use-after-free again when destroying targetport
    openrisc: Fix oops caused when dumping stack
    i2c: rcar: avoid race when unregistering slave
    tools build feature: Use CC and CXX from parent
    pwm: bcm-iproc: handle clk_get_rate() return
    clk: clk-atlas6: fix return value check in atlas6_clk_init()
    i2c: rcar: slave: only send STOP event when we have been addressed
  * iommu/vt-d: Enforce PASID devTLB field mask
      include/linux/intel-iommu.h
    iommu/omap: Check for failure of a call to omap_iommu_dump_ctx
    selftests/powerpc: ptrace-pkey: Don't update expected UAMOR value
    selftests/powerpc: ptrace-pkey: Update the test to mark an invalid pkey correctly
    selftests/powerpc: ptrace-pkey: Rename variables to make it easier to follow code
  * dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue()
      drivers/md/dm-rq.c
    gpu: ipu-v3: image-convert: Combine rotate/no-rotate irq handlers
    mmc: renesas_sdhi_internal_dmac: clean up the code for dma complete
    USB: serial: ftdi_sio: clean up receive processing
    USB: serial: ftdi_sio: make process-packet buffer unsigned
    media: rockchip: rga: Only set output CSC mode for RGB input
    media: rockchip: rga: Introduce color fmt macros and refactor CSC mode logic
    RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah()
    RDMA/ipoib: Return void from ipoib_ib_dev_stop()
    mfd: arizona: Ensure 32k clock is put on driver unbind and error
    drm/imx: imx-ldb: Disable both channels for split mode in enc->disable()
    remoteproc: qcom: q6v5: Update running state before requesting stop
    perf intel-pt: Fix FUP packet state
  * module: Correctly truncate sysfs sections output
      kernel/module.c
    pseries: Fix 64 bit logical memory block panic
    watchdog: f71808e_wdt: clear watchdog timeout occurred flag
    watchdog: f71808e_wdt: remove use of wrong watchdog_info option
    watchdog: f71808e_wdt: indicate WDIOF_CARDRESET support in watchdog_info.options
  * tracing: Use trace_sched_process_free() instead of exit() for pid tracing
      kernel/trace/trace_events.c
    tracing/hwlat: Honor the tracing_cpumask
    kprobes: Fix NULL pointer dereference at kprobe_ftrace_handler
    ftrace: Setup correct FTRACE_FL_REGS flags for module
  * mm/page_counter.c: fix protection usage propagation
      mm/page_counter.c
    ocfs2: change slot number type s16 to u16
    ext2: fix missing percpu_counter_inc
    MIPS: CPU#0 is not hotpluggable
  * driver core: Avoid binding drivers to dead devices
      drivers/base/dd.c
    mac80211: fix misplaced while instead of if
    bcache: fix overflow in offset_to_stripe()
    bcache: allocate meta data pages as compound pages
    md/raid5: Fix Force reconstruct-write io stuck in degraded raid5
  * net/compat: Add missing sock updates for SCM_RIGHTS
      include/net/sock.h
      net/compat.c
      net/core/sock.c
    net: stmmac: dwmac1000: provide multicast filter fallback
    net: ethernet: stmmac: Disable hardware multicast filter
    media: vsp1: dl: Fix NULL pointer dereference on unbind
    powerpc: Fix circular dependency between percpu.h and mmu.h
    powerpc: Allow 4224 bytes of stack expansion for the signal frame
    cifs: Fix leak when handling lease break for cached root fid
    xtensa: fix xtensa_pmu_setup prototype
    iio: dac: ad5592r: fix unbalanced mutex unlocks in ad5592r_read_raw()
    dt-bindings: iio: io-channel-mux: Fix compatible string in example code
    btrfs: fix return value mixup in btrfs_get_extent
    btrfs: fix memory leaks after failure to lookup checksums during inode logging
    btrfs: only search for left_info if there is no right_info in try_merge_free_space
    btrfs: fix messages after changing compression level by remount
    btrfs: open device without device_list_mutex
    btrfs: don't traverse into the seed devices in show_devname
    btrfs: ref-verify: fix memory leak in add_block_entry
    btrfs: don't allocate anonymous block device for user invisible roots
    btrfs: free anon block device right after subvolume deletion
  * PCI: Probe bridge window attributes once at enumeration-time
      drivers/pci/probe.c
      drivers/pci/setup-bus.c
      include/linux/pci.h
    PCI: qcom: Add support for tx term offset for rev 2.1.0
    PCI: qcom: Define some PARF params needed for ipq8064 SoC
  * PCI: Add device even if driver attach failed
      drivers/pci/bus.c
  * PCI: Mark AMD Navi10 GPU rev 0x00 ATS as broken
      drivers/pci/quirks.c
    PCI: hotplug: ACPI: Fix context refcounting in acpiphp_grab_context()
  * genirq/affinity: Make affinity setting if activated opt-in
      drivers/irqchip/irq-gic-v3-its.c
      include/linux/irq.h
      kernel/irq/manage.c
    smb3: warn on confusing error scenario with sec=krb5
    ANDROID: ABI: update the ABI xml representation
  * Revert "ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109"
      sound/usb/card.h
      sound/usb/pcm.c
      sound/usb/quirks.c
      sound/usb/stream.c
    Merge 4.19.140 into android-4.19-stable
Linux 4.19.140
    xen/gntdev: Fix dmabuf import with non-zero sgt offset
    xen/balloon: make the balloon wait interruptible
    xen/balloon: fix accounting in alloc_xenballooned_pages error path
    irqdomain/treewide: Free firmware node after domain removal
    ARM: 8992/1: Fix unwind_frame for clang-built kernels
    parisc: mask out enable and reserved bits from sba imask
    parisc: Implement __smp_store_release and __smp_load_acquire barriers
    mtd: rawnand: qcom: avoid write to unavailable register
  * spi: spidev: Align buffers for DMA
      drivers/spi/spidev.c
  * include/asm-generic/vmlinux.lds.h: align ro_after_init
      include/asm-generic/vmlinux.lds.h
    cpufreq: dt: fix oops on armada37xx
    NFS: Don't return layout segments that are in use
    NFS: Don't move layouts to plh_return_segs list while in use
    drm/ttm/nouveau: don't call tt destroy callback on alloc failure.
    9p: Fix memory leak in v9fs_mount
  * ALSA: usb-audio: add quirk for Pioneer DDJ-RB
      sound/usb/quirks-table.h
    fs/minix: reject too-large maximum file size
    fs/minix: don't allow getting deleted inodes
    fs/minix: check return value of sb_getblk()
  * bitfield.h: don't compile-time validate _val in FIELD_FIT
      include/linux/bitfield.h
    crypto: cpt - don't sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not specified
    crypto: ccp - Fix use of merged scatterlists
    crypto: qat - fix double free in qat_uclo_create_batch_init_list
    crypto: hisilicon - don't sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not specified
  * pstore: Fix linking when crypto API disabled
      fs/pstore/platform.c
  * ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109
      sound/usb/card.h
      sound/usb/pcm.c
      sound/usb/quirks.c
      sound/usb/stream.c
  * ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109
      sound/usb/quirks-table.h
  * ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support
      sound/usb/mixer_quirks.c
    ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO
    USB: serial: cp210x: enable usb generic throttle/unthrottle
    USB: serial: cp210x: re-enable auto-RTS on open
  * net: initialize fastreuse on inet_inherit_port
      net/ipv4/inet_hashtables.c
  * net: refactor bind_bucket fastreuse into helper
      include/net/inet_connection_sock.h
      net/ipv4/inet_connection_sock.c
    net/tls: Fix kmap usage
  * net: Set fput_needed iff FDPUT_FPUT is set
      net/socket.c
    net/nfc/rawsock.c: add CAP_NET_RAW check.
    drivers/net/wan/lapbether: Added needed_headroom and a skb->len check
  * af_packet: TPACKET_V3: fix fill status rwlock imbalance
      net/packet/af_packet.c
    crypto: aesni - add compatibility with IAS
    x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task
    svcrdma: Fix page leak in svc_rdma_recv_read_chunk()
    pinctrl-single: fix pcs_parse_pinconf() return value
    ocfs2: fix unbalanced locking
    dlm: Fix kobject memleak
    fsl/fman: fix eth hash table allocation
    fsl/fman: check dereferencing null pointer
    fsl/fman: fix unreachable code
    fsl/fman: fix dereference null return value
    fsl/fman: use 32-bit unsigned integer
    net: spider_net: Fix the size used in a 'dma_free_coherent()' call
    liquidio: Fix wrong return value in cn23xx_get_pf_num()
    net: ethernet: aquantia: Fix wrong return value
    tools, build: Propagate build failures from tools/build/Makefile.build
    wl1251: fix always return 0 error
    s390/qeth: don't process empty bridge port events
    ASoC: meson: axg-tdm-interface: fix link fmt setup
    selftests/powerpc: Fix online CPU selection
  * PCI: Release IVRS table in AMD ACS quirk
      drivers/pci/quirks.c
    selftests/powerpc: Fix CPU affinity for child process
    powerpc/boot: Fix CONFIG_PPC_MPC52XX references
    net: dsa: rtl8366: Fix VLAN set-up
    net: dsa: rtl8366: Fix VLAN semantics
    Bluetooth: hci_serdev: Only unregister device if it was registered
    Bluetooth: hci_h5: Set HCI_UART_RESET_ON_INIT to correct flags
    power: supply: check if calc_soc succeeded in pm860x_init_battery
  * Smack: prevent underflow in smk_set_cipso()
      security/smack/smackfs.c
  * Smack: fix another vsscanf out of bounds
      security/smack/smackfs.c
    RDMA/core: Fix return error value in _ib_modify_qp() to negative
    PCI: cadence: Fix updating Vendor ID and Subsystem Vendor ID register
    net: dsa: mv88e6xxx: MV88E6097 does not support jumbo configuration
    scsi: mesh: Fix panic after host or bus reset
    usb: dwc2: Fix error path in gadget registration
    MIPS: OCTEON: add missing put_device() call in dwc3_octeon_device_init()
    coresight: tmc: Fix TMC mode read in tmc_read_unprepare_etb()
    thermal: ti-soc-thermal: Fix reversed condition in ti_thermal_expose_sensor()
  * usb: core: fix quirks_param_set() writing to a const pointer
      drivers/usb/core/quirks.c
    USB: serial: iuu_phoenix: fix led-activity helpers
    drm/imx: tve: fix regulator_disable error path
    powerpc/book3s64/pkeys: Use PVR check instead of cpu feature
    PCI/ASPM: Add missing newline in sysfs 'policy'
    staging: rtl8192u: fix a dubious looking mask before a shift
    RDMA/rxe: Prevent access to wr->next ptr afrer wr is posted to send queue
    RDMA/qedr: SRQ's bug fixes
    powerpc/vdso: Fix vdso cpu truncation
    mwifiex: Prevent memory corruption handling keys
    scsi: scsi_debug: Add check for sdebug_max_queue during module init
    drm/bridge: sil_sii8620: initialize return of sii8620_readb
    phy: exynos5-usbdrd: Calibrating makes sense only for USB2.0 PHY
    drm: panel: simple: Fix bpc for LG LB070WV8 panel
  * leds: core: Flush scheduled work for system suspend
      drivers/leds/led-class.c
  * PCI: Fix pci_cfg_wait queue locking problem
      drivers/pci/access.c
    RDMA/rxe: Skip dgid check in loopback mode
    xfs: fix reflink quota reservation accounting error
    xfs: don't eat an EIO/ENOSPC writeback error when scrubbing data fork
    media: exynos4-is: Add missed check for pinctrl_lookup_state()
    media: firewire: Using uninitialized values in node_probe()
  * ipvs: allow connection reuse for unconfirmed conntrack
      include/net/ip_vs.h
    scsi: eesox: Fix different dev_id between request_irq() and free_irq()
    scsi: powertec: Fix different dev_id between request_irq() and free_irq()
    drm/radeon: fix array out-of-bounds read and write issues
    cxl: Fix kobject memleak
  * drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline
      drivers/gpu/drm/drm_mipi_dsi.c
    scsi: cumana_2: Fix different dev_id between request_irq() and free_irq()
    ASoC: Intel: bxt_rt298: add missing .owner field
    media: omap3isp: Add missed v4l2_ctrl_handler_free() for preview_init_entities()
    leds: lm355x: avoid enum conversion warning
    drm/arm: fix unintentional integer overflow on left shift
    drm/etnaviv: Fix error path on failure to enable bus clk
    iio: improve IIO_CONCENTRATION channel type description
    ath10k: Acquire tx_lock in tx error paths
    video: pxafb: Fix the function used to balance a 'dma_alloc_coherent()' call
    console: newport_con: fix an issue about leak related system resources
    video: fbdev: sm712fb: fix an issue about iounmap for a wrong address
    agp/intel: Fix a memory leak on module initialisation failure
    drm/msm: ratelimit crtc event overflow error
    ACPICA: Do not increment operation_region reference counts for field units
    bcache: fix super block seq numbers comparision in register_cache_set()
    dyndbg: fix a BUG_ON in ddebug_describe_flags
    usb: bdc: Halt controller on suspend
    bdc: Fix bug causing crash after multiple disconnects
    usb: gadget: net2280: fix memory leak on probe error handling paths
    gpu: host1x: debug: Fix multiple channels emitting messages simultaneously
    iwlegacy: Check the return value of pcie_capability_read_*()
    brcmfmac: set state of hanger slot to FREE when flushing PSQ
    brcmfmac: To fix Bss Info flag definition Bug
    brcmfmac: keep SDIO watchdog running when console_interval is non-zero
  * mm/mmap.c: Add cond_resched() for exit_mmap() CPU stalls
      mm/mmap.c
    irqchip/irq-mtk-sysirq: Replace spinlock with raw_spinlock
    drm/radeon: disable AGP by default
  * drm/debugfs: fix plain echo to connector "force" attribute
      drivers/gpu/drm/drm_debugfs.c
    usb: mtu3: clear dual mode of u3port when disable device
    drm/nouveau: fix multiple instances of reference count leaks
    drm/etnaviv: fix ref count leak via pm_runtime_get_sync
    arm64: dts: hisilicon: hikey: fixes to comply with adi, adv7533 DT binding
    md-cluster: fix wild pointer of unlock_all_bitmaps()
    video: fbdev: neofb: fix memory leak in neo_scan_monitor()
    crypto: aesni - Fix build with LLVM_IAS=1
    drm/radeon: Fix reference count leaks caused by pm_runtime_get_sync
    drm/amdgpu: avoid dereferencing a NULL pointer
    fs/btrfs: Add cond_resched() for try_release_extent_mapping() stalls
  * loop: be paranoid on exit and prevent new additions / removals
      drivers/block/loop.c
    Bluetooth: add a mutex lock to avoid UAF in do_enale_set
  * soc: qcom: rpmh-rsc: Set suppress_bind_attrs flag
      drivers/soc/qcom/rpmh-rsc.c
    drm/tilcdc: fix leak & null ref in panel_connector_get_modes
    ARM: socfpga: PM: add missing put_device() call in socfpga_setup_ocram_self_refresh()
    spi: lantiq: fix: Rx overflow error in full duplex mode
    ARM: at91: pm: add missing put_device() call in at91_pm_sram_init()
    ARM: dts: gose: Fix ports node name for adv7612
    ARM: dts: gose: Fix ports node name for adv7180
    platform/x86: intel-vbtn: Fix return value check in check_acpi_dev()
    platform/x86: intel-hid: Fix return value check in check_acpi_dev()
    m68k: mac: Fix IOP status/control register writes
    m68k: mac: Don't send IOP message until channel is idle
    clk: scmi: Fix min and max rate when registering clocks with discrete rates
    arm64: dts: exynos: Fix silent hang after boot on Espresso
    firmware: arm_scmi: Fix SCMI genpd domain probing
    crypto: ccree - fix resource leak on error path
    arm64: dts: qcom: msm8916: Replace invalid bias-pull-none property
  * EDAC: Fix reference count leaks
      drivers/edac/edac_device_sysfs.c
      drivers/edac/edac_pci_sysfs.c
    arm64: dts: rockchip: fix rk3399-puma gmac reset gpio
    arm64: dts: rockchip: fix rk3399-puma vcc5v0-host gpio
    arm64: dts: rockchip: fix rk3368-lion gmac reset gpio
  * sched: correct SD_flags returned by tl->sd_flags()
      kernel/sched/topology.c
  * sched/fair: Fix NOHZ next idle balance
      kernel/sched/fair.c
    x86/mce/inject: Fix a wrong assignment of i_mce.status
  * cgroup: add missing skcd->no_refcnt check in cgroup_sk_clone()
      kernel/cgroup/cgroup.c
  * HID: input: Fix devices that return multiple bytes in battery report
      drivers/hid/hid-input.c
  * tracepoint: Mark __tracepoint_string's __used
      include/linux/tracepoint.h
  * ANDROID: fix a bug in quota2
      net/netfilter/xt_quota2.c
    ANDROID: Update the ABI xml based on the new driver core padding
  * ANDROID: GKI: add some padding to some driver core structures
      include/linux/device.h
      include/linux/fwnode.h
    ANDROID: GKI: Update the ABI xml representation
  * ANDROID: sched: add "frozen" field to task_struct
      include/linux/sched.h
  * ANDROID: cgroups: add v2 freezer ABI changes
      include/linux/cgroup-defs.h
  * ANDROID: cgroups: ABI padding
      include/linux/cgroup-defs.h
    Merge 4.19.139 into android-4.19-stable
Linux 4.19.139
  * Smack: fix use-after-free in smk_write_relabel_self()
      security/smack/smackfs.c
    i40e: Memory leak in i40e_config_iwarp_qvlist
    i40e: Fix of memory leak and integer truncation in i40e_virtchnl.c
    i40e: Wrong truncation from u16 to u8
    i40e: add num_vectors checker in iwarp handler
    rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
    selftests/net: relax cpu affinity requirement in msg_zerocopy test
    Revert "vxlan: fix tos value before xmit"
    openvswitch: Prevent kernel-infoleak in ovs_ct_put_key()
    net: thunderx: use spin_lock_bh in nicvf_set_rx_mode_task()
  * net: gre: recompute gre csum for sctp over gre tunnels
      net/ipv4/gre_offload.c
    hv_netvsc: do not use VF device if link is down
    net: lan78xx: replace bogus endpoint lookup
    vxlan: Ensure FDB dump is performed under RCU
    net: ethernet: mtk_eth_soc: fix MTU warnings
  * ipv6: fix memory leaks on IPV6_ADDRFORM path
      include/net/addrconf.h
      net/ipv6/anycast.c
      net/ipv6/ipv6_sockglue.c
  * ipv4: Silence suspicious RCU usage warning
      net/ipv4/fib_trie.c
  * xattr: break delegations in {set,remove}xattr
      fs/xattr.c
      include/linux/xattr.h
  * Drivers: hv: vmbus: Ignore CHANNELMSG_TL_CONNECT_RESULT(23)
      include/linux/hyperv.h
    tools lib traceevent: Fix memory leak in process_dynamic_array_len
    atm: fix atm_dev refcnt leaks in atmtcp_remove_persistent
    igb: reinit_locked() should be called with rtnl_lock
  * cfg80211: check vendor command doit pointer before use
      net/wireless/nl80211.c
    firmware: Fix a reference count leak.
    usb: hso: check for return value in hso_serial_common_create()
    i2c: slave: add sanity check when unregistering
    i2c: slave: improve sanity check when registering
    drm/nouveau/fbcon: zero-initialise the mode_cmd2 structure
    drm/nouveau/fbcon: fix module unload when fbcon init has failed for some reason
    net/9p: validate fds in p9_fd_open
    leds: 88pm860x: fix use-after-free on unbind
    leds: lm3533: fix use-after-free on unbind
    leds: da903x: fix use-after-free on unbind
    leds: wm831x-status: fix use-after-free on unbind
    mtd: properly check all write ioctls for permissions
    vgacon: Fix for missing check in scrollback handling
  * binder: Prevent context manager from incrementing ref 0
      drivers/android/binder.c
    omapfb: dss: Fix max fclk divider for omap36xx
  * Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt()
      net/bluetooth/hci_event.c
  * Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_evt()
      net/bluetooth/hci_event.c
  * Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
      net/bluetooth/hci_event.c
  * staging: android: ashmem: Fix lockdep warning for write operation
      drivers/staging/android/ashmem.c
    ALSA: seq: oss: Serialize ioctls
    Revert "ALSA: hda: call runtime_allow() for all hda controllers"
  * usb: xhci: Fix ASMedia ASM1142 DMA addressing
      drivers/usb/host/xhci-pci.c
  * usb: xhci: define IDs for various ASMedia host controllers
      drivers/usb/host/xhci-pci.c
    USB: iowarrior: fix up report size handling for some devices
    USB: serial: qcserial: add EM7305 QDL product ID
  * BACKPORT: loop: Fix wrong masking of status flags
      drivers/block/loop.c
  * BACKPORT: loop: Add LOOP_CONFIGURE ioctl
      drivers/block/loop.c
      include/uapi/linux/loop.h
  * BACKPORT: loop: Clean up LOOP_SET_STATUS lo_flags handling
      drivers/block/loop.c
      include/uapi/linux/loop.h
  * BACKPORT: loop: Rework lo_ioctl() __user argument casting
      drivers/block/loop.c
  * BACKPORT: loop: Move loop_set_status_from_info() and friends up
      drivers/block/loop.c
  * BACKPORT: loop: Factor out configuring loop from status
      drivers/block/loop.c
  * BACKPORT: loop: Remove figure_loop_size()
      drivers/block/loop.c
  * BACKPORT: loop: Refactor loop_set_status() size calculation
      drivers/block/loop.c
  * BACKPORT: loop: Factor out setting loop device size
      drivers/block/loop.c
  * BACKPORT: loop: Remove sector_t truncation checks
      drivers/block/loop.c
  * BACKPORT: loop: Call loop_config_discard() only after new config is applied
      drivers/block/loop.c
    Merge 4.19.138 into android-4.19-stable
Linux 4.19.138
  * ext4: fix direct I/O read error
      fs/ext4/inode.c
  * random32: move the pseudo-random 32-bit definitions to prandom.h
      include/linux/prandom.h
      include/linux/random.h
  * random32: remove net_rand_state from the latent entropy gcc plugin
      include/linux/random.h
      lib/random32.c
  * random: fix circular include dependency on arm64 after addition of percpu.h
      include/linux/random.h
    ARM: percpu.h: fix build error
  * random32: update the net random state on interrupt and activity
      drivers/char/random.c
      include/linux/random.h
      kernel/time/timer.c
      lib/random32.c
    ANDROID: GKI: update the ABI xml
  * ANDROID: GKI: power: Add property to enable/disable cc toggle
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
    ANDROID: Enforce KMI stability
    Merge 4.19.137 into android-4.19-stable
Linux 4.19.137
    x86/i8259: Use printk_deferred() to prevent deadlock
    KVM: LAPIC: Prevent setting the tscdeadline timer if the lapic is hw disabled
    xen-netfront: fix potential deadlock in xennet_remove()
    cxgb4: add missing release on skb in uld_send()
    x86/unwind/orc: Fix ORC for newly forked tasks
    Revert "i2c: cadence: Fix the hold bit setting"
    net: ethernet: ravb: exit if re-initialization fails in tx timeout
    parisc: add support for cmpxchg on u8 pointers
    nfc: s3fwrn5: add missing release on skb in s3fwrn5_recv_frame
    qed: Disable "MFW indication via attention" SPAM every 5 minutes
    usb: hso: Fix debug compile warning on sparc32
    net/mlx5e: fix bpf_prog reference count leaks in mlx5e_alloc_rq
    net: gemini: Fix missing clk_disable_unprepare() in error path of gemini_ethernet_port_probe()
  * Bluetooth: fix kernel oops in store_pending_adv_report
      net/bluetooth/hci_event.c
  * arm64: csum: Fix handling of bad packets
      arch/arm64/include/asm/checksum.h
  * arm64/alternatives: move length validation inside the subsection
      arch/arm64/include/asm/alternative.h
    mac80211: mesh: Free pending skb when destroying a mpath
    mac80211: mesh: Free ie data when leaving mesh
  * bpf: Fix map leak in HASH_OF_MAPS map
      kernel/bpf/hashtab.c
    ibmvnic: Fix IRQ mapping disposal in error path
    mlxsw: core: Free EMAD transactions using kfree_rcu()
    mlxsw: core: Increase scope of RCU read-side critical section
    mlx4: disable device on shutdown
    net: lan78xx: fix transfer-buffer memory leak
    net: lan78xx: add missing endpoint sanity check
    net/mlx5: Verify Hardware supports requested ptp function on a given pin
    sh: Fix validation of system call number
    selftests/net: psock_fanout: fix clang issues for target arch PowerPC
    selftests/net: rxtimestamp: fix clang issues for target arch PowerPC
  * xfrm: Fix crash when the hold queue is used.
      include/net/xfrm.h
    net/x25: Fix null-ptr-deref in x25_disconnect
    net/x25: Fix x25_neigh refcnt leak when x25 disconnect
    xfs: fix missed wakeup on l_flush_wait
    rds: Prevent kernel-infoleak in rds_notify_queue_get()
  * drm: hold gem reference until object is no longer accessed
      drivers/gpu/drm/drm_gem.c
    drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl()
    Revert "drm/amdgpu: Fix NULL dereference in dpm sysfs handlers"
    ARM: 8986/1: hw_breakpoint: Don't invoke overflow handler on uaccess watchpoints
  * wireless: Use offsetof instead of custom macro.
      include/uapi/linux/wireless.h
    9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work
  * PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge
      drivers/pci/quirks.c
    Btrfs: fix selftests failure due to uninitialized i_mode in test inodes
  * sctp: implement memory accounting on tx path
      net/sctp/socket.c
    btrfs: inode: Verify inode mode to avoid NULL pointer dereference
    drm/amd/display: prevent memory leak
    ath9k: release allocated buffer if timed out
    ath9k_htc: release allocated buffer if timed out
  * tracing: Have error path in predicate_parse() free its allocated memory
      kernel/trace/trace_events_filter.c
    drm/amdgpu: fix multiple memory leaks in acp_hw_init
    iio: imu: adis16400: fix memory leak
    media: rc: prevent memory leak in cx23888_ir_probe
    crypto: ccp - Release all allocated memory if sha type is invalid
  * ANDROID: GKI: kernel: tick-sched: Move wake callback registration code
      kernel/time/tick-sched.c
    Merge 4.19.136 into android-4.19-stable
Linux 4.19.136
  * regmap: debugfs: check count when read regmap file
      drivers/base/regmap/regmap-debugfs.c
  * rtnetlink: Fix memory(net_device) leak when ->newlink fails
      net/core/rtnetlink.c
  * udp: Improve load balancing for SO_REUSEPORT.
      net/ipv4/udp.c
      net/ipv6/udp.c
  * udp: Copy has_conns in reuseport_grow().
      net/core/sock_reuseport.c
  * sctp: shrink stream outq when fails to do addstream reconf
      net/sctp/stream.c
  * sctp: shrink stream outq only when new outcnt < old outcnt
      net/sctp/stream.c
    AX.25: Prevent integer overflows in connect and sendmsg
  * tcp: allow at most one TLP probe per flight
      include/linux/tcp.h
      net/ipv4/tcp_input.c
      net/ipv4/tcp_output.c
    rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA
  * qrtr: orphan socket in qrtr_release()
      net/qrtr/qrtr.c
  * net: udp: Fix wrong clean up for IS_UDPLITE macro
      net/ipv4/udp.c
      net/ipv6/udp.c
  * net-sysfs: add a newline when printing 'tx_timeout' by sysfs
      net/core/net-sysfs.c
    ip6_gre: fix null-ptr-deref in ip6gre_init_net()
    drivers/net/wan/x25_asy: Fix to make it work
  * dev: Defer free of skbs in flush_backlog
      net/core/dev.c
    AX.25: Prevent out-of-bounds read in ax25_sendmsg()
    AX.25: Fix out-of-bounds read in ax25_connect()

Change-Id: Icec947c4e82f9b19199b4507b521f7a9285c6e03
Signed-off-by: lucaswei <lucaswei@google.com>
2020-12-03 21:29:38 +08:00
lucaswei
1c4149c525 Merge android-4.19-stable (4.19.135) into android-msm-pixel-4.19-lts
Merge 4.19.135 into android-4.19-stable
Linux 4.19.135
    ath9k: Fix regression with Atheros 9271
    ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb
  * dm integrity: fix integrity recalculation that is improperly skipped
      drivers/md/dm.c
      include/linux/device-mapper.h
  * ASoC: qcom: Drop HAS_DMA dependency to fix link failure
      sound/soc/qcom/Kconfig
  * ASoC: rt5670: Add new gpio1_is_ext_spk_en quirk and enable it on the Lenovo Miix 2 10
      include/sound/rt5670.h
  * x86, vmlinux.lds: Page-align end of ..page_aligned sections
      include/asm-generic/vmlinux.lds.h
    parisc: Add atomic64_set_release() define to avoid CPU soft lockups
    drm/amd/powerplay: fix a crash when overclocking Vega M
    drm/amdgpu: Fix NULL dereference in dpm sysfs handlers
  * io-mapping: indicate mapping failure
      include/linux/io-mapping.h
  * mm: memcg/slab: fix memory leak at non-root kmem_cache destroy
      mm/slab_common.c
  * mm: memcg/slab: synchronize access to kmem_cache dying flag using a spinlock
      mm/slab_common.c
  * mm/memcg: fix refcount error while moving and swapping
      mm/memcontrol.c
  * Makefile: Fix GCC_TOOLCHAIN_DIR prefix for Clang cross compilation
      Makefile
    vt: Reject zero-sized screen buffer size.
    fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
    serial: 8250_mtk: Fix high-speed baud rates clamping
    serial: 8250: fix null-ptr-deref in serial8250_start_tx()
    staging: comedi: addi_apci_1564: check INSN_CONFIG_DIGITAL_TRIG shift
    staging: comedi: addi_apci_1500: check INSN_CONFIG_DIGITAL_TRIG shift
    staging: comedi: ni_6527: fix INSN_CONFIG_DIGITAL_TRIG support
    staging: comedi: addi_apci_1032: check INSN_CONFIG_DIGITAL_TRIG shift
    staging: wlan-ng: properly check endpoint types
    Revert "cifs: Fix the target file was deleted when rename failed."
  * usb: xhci: Fix ASM2142/ASM3142 DMA addressing
      drivers/usb/host/xhci-pci.c
    usb: xhci-mtk: fix the failure of bandwidth allocation
  * binder: Don't use mmput() from shrinker function.
      drivers/android/binder_alloc.c
    RISC-V: Upgrade smp_mb__after_spinlock() to iorw,iorw
    x86: math-emu: Fix up 'cmp' insn for clang ias
  * arm64: Use test_tsk_thread_flag() for checking TIF_SINGLESTEP
      arch/arm64/kernel/debug-monitors.c
    hwmon: (scmi) Fix potential buffer overflow in scmi_hwmon_probe()
    hwmon: (adm1275) Make sure we are reading enough data for different chips
    usb: gadget: udc: gr_udc: fix memleak on error handling path in gr_ep_init()
    Input: synaptics - enable InterTouch for ThinkPad X1E 1st gen
    dmaengine: ioat setting ioat timeout as module parameter
    hwmon: (aspeed-pwm-tacho) Avoid possible buffer overflow
  * regmap: dev_get_regmap_match(): fix string comparison
      drivers/base/regmap/regmap.c
    spi: mediatek: use correct SPI_CFG2_REG MACRO
  * Input: add `SW_MACHINE_COVER`
      include/linux/mod_devicetable.h
      include/uapi/linux/input-event-codes.h
    dmaengine: tegra210-adma: Fix runtime PM imbalance on error
  * HID: apple: Disable Fn-key key-re-mapping on clone keyboards
      drivers/hid/hid-apple.c
    HID: steam: fixes race in handling device list.
    HID: alps: support devices with report id 2
    HID: i2c-hid: add Mediacom FlexBook edge13 to descriptor override
    scripts/gdb: fix lx-symbols 'gdb.error' while loading modules
    scripts/decode_stacktrace: strip basepath from all paths
    serial: exar: Fix GPIO configuration for Sealevel cards based on XR17V35X
  * bonding: check return value of register_netdevice() in bond_newlink()
      drivers/net/bonding/bond_netlink.c
    i2c: rcar: always clear ICSAR to avoid side effects
    net: ethernet: ave: Fix error returns in ave_init
    ipvs: fix the connection sync failed in some cases
    qed: suppress "don't support RoCE & iWARP" flooding on HW init
    mlxsw: destroy workqueue when trap_register in mlxsw_emad_init
  * bonding: check error value of register_netdevice() immediately
      drivers/net/bonding/bond_main.c
    net: smc91x: Fix possible memory leak in smc_drv_probe()
    drm: sun4i: hdmi: Fix inverted HPD result
    ieee802154: fix one possible memleak in adf7242_probe
    net: dp83640: fix SIOCSHWTSTAMP to update the struct with actual configuration
  * ax88172a: fix ax88172a_unbind() failures
      drivers/net/usb/ax88172a.c
    hippi: Fix a size used in a 'pci_free_consistent()' in an error handling path
    fpga: dfl: fix bug in port reset handshake
    bnxt_en: Fix race when modifying pause settings.
    btrfs: fix page leaks after failure to lock page for delalloc
    btrfs: fix mount failure caused by race with umount
    btrfs: fix double free on ulist after backref resolution failure
    ASoC: rt5670: Correct RT5670_LDO_SEL_MASK
  * ALSA: info: Drop WARN_ON() from buffer NULL sanity check
      sound/core/info.c
  * uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression
      kernel/events/uprobes.c
    IB/umem: fix reference count leak in ib_umem_odp_get()
  * tipc: clean up skb list lock handling on send path
      net/tipc/bcast.c
      net/tipc/group.c
      net/tipc/link.c
      net/tipc/node.c
      net/tipc/socket.c
    spi: spi-fsl-dspi: Exit the ISR with IRQ_NONE when it's not ours
    SUNRPC reverting d03727b248d0 ("NFSv4 fix CLOSE not waiting for direct IO compeletion")
    irqdomain/treewide: Keep firmware node unconditionally allocated
  * fuse: fix weird page warning
      fs/fuse/dev.c
    drivers/firmware/psci: Fix memory leakage in alloc_init_cpu_groups()
    drm/nouveau/i2c/g94-: increase NV_PMGR_DP_AUXCTL_TRANSACTREQ timeout
    net: sky2: initialize return of gm_phy_read
    drivers/net/wan/lapbether: Fixed the value of hard_header_len
    xtensa: update *pos in cpuinfo_op.next
    xtensa: fix __sync_fetch_and_{and,or}_4 declarations
    scsi: scsi_transport_spi: Fix function pointer check
    mac80211: allow rx of mesh eapol frames with default rx key
    pinctrl: amd: fix npins for uart0 in kerncz_groups
    gpio: arizona: put pm_runtime in case of failure
    gpio: arizona: handle pm_runtime_get_sync failure case
  * soc: qcom: rpmh: Dirt can only make you dirtier, not cleaner
      drivers/soc/qcom/rpmh.c
    ANDROID: build: update ABI definitions
  * ANDROID: update the kernel release format for GKI
      Makefile
      scripts/setlocalversion
  * ANDROID: Incremental fs: magic number compatible 32-bit
      fs/incfs/vfs.c
  * ANDROID: kbuild: don't merge .*..compoundliteral in modules
      scripts/module-lto.lds.S
  * ANDROID: GKI: preserve ABI for struct sock_cgroup_data
      include/linux/cgroup-defs.h
  * Revert "genetlink: remove genl_bind"
      include/net/genetlink.h
      net/netlink/genetlink.c
  * Revert "arm64/alternatives: use subsections for replacement sequences"
      arch/arm64/include/asm/alternative.h
      arch/arm64/kernel/vmlinux.lds.S
    Merge 4.19.134 into android-4.19-stable
Linux 4.19.134
    spi: sprd: switch the sequence of setting WDG_LOAD_LOW and _HIGH
  * rxrpc: Fix trace string
      include/trace/events/rxrpc.h
    libceph: don't omit recovery_deletes in target_copy()
  * printk: queue wake_up_klogd irq_work only if per-CPU areas are ready
      include/linux/printk.h
      init/main.c
      kernel/printk/internal.h
      kernel/printk/printk.c
      kernel/printk/printk_safe.c
  * genirq/affinity: Handle affinity setting on inactive interrupts correctly
      kernel/irq/manage.c
  * sched/fair: handle case of task_h_load() returning 0
      kernel/sched/fair.c
  * sched: Fix unreliable rseq cpu_id for new tasks
      kernel/sched/core.c
  * arm64: compat: Ensure upper 32 bits of x0 are zero on syscall return
      arch/arm64/include/asm/syscall.h
      arch/arm64/kernel/syscall.c
  * arm64: ptrace: Consistently use pseudo-singlestep exceptions
      arch/arm64/include/asm/thread_info.h
      arch/arm64/kernel/ptrace.c
      arch/arm64/kernel/signal.c
      arch/arm64/kernel/syscall.c
  * arm64: ptrace: Override SPSR.SS when single-stepping is enabled
      arch/arm64/include/asm/debug-monitors.h
      arch/arm64/kernel/debug-monitors.c
      arch/arm64/kernel/ptrace.c
  * thermal/drivers/cpufreq_cooling: Fix wrong frequency converted from power
      drivers/thermal/cpu_cooling.c
    misc: atmel-ssc: lock with mutex instead of spinlock
    dmaengine: fsl-edma: Fix NULL pointer exception in fsl_edma_tx_handler
    intel_th: Fix a NULL dereference when hub driver is not loaded
    intel_th: pci: Add Emmitsburg PCH support
    intel_th: pci: Add Tiger Lake PCH-H support
    intel_th: pci: Add Jasper Lake CPU support
    powerpc/book3s64/pkeys: Fix pkey_access_permitted() for execute disable pkey
    hwmon: (emc2103) fix unable to change fan pwm1_enable attribute
    riscv: use 16KB kernel stack on 64-bit
    MIPS: Fix build for LTS kernel caused by backporting lpj adjustment
  * timer: Fix wheel index calculation on last level
      kernel/time/timer.c
  * timer: Prevent base->clk from moving backward
      kernel/time/timer.c
    uio_pdrv_genirq: fix use without device tree and no interrupt
    Input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list
    mei: bus: don't clean driver pointer
  * Revert "zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()"
      drivers/block/zram/zram_drv.c
  * fuse: Fix parameter for FS_IOC_{GET,SET}FLAGS
      fs/fuse/file.c
  * ovl: fix unneeded call to ovl_change_flags()
      fs/overlayfs/file.c
  * ovl: relax WARN_ON() when decoding lower directory file handle
      fs/overlayfs/export.c
  * ovl: inode reference leak in ovl_is_inuse true case.
      fs/overlayfs/super.c
    serial: mxs-auart: add missed iounmap() in probe failure and remove
    virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc serial
    virt: vbox: Fix guest capabilities mask check
  * virt: vbox: Fix VBGL_IOCTL_VMMDEV_REQUEST_BIG and _LOG req numbers to match upstream
      include/uapi/linux/vboxguest.h
    USB: serial: option: add Quectel EG95 LTE modem
    USB: serial: option: add GosunCn GM500 series
    USB: serial: ch341: add new Product ID for CH340
    USB: serial: cypress_m8: enable Simply Automated UPB PIM
    USB: serial: iuu_phoenix: fix memory corruption
    usb: gadget: function: fix missing spinlock in f_uac1_legacy
    usb: chipidea: core: add wakeup support for extcon
    usb: dwc2: Fix shutdown callback in platform
    USB: c67x00: fix use after free in c67x00_giveback_urb
    ALSA: hda/realtek - Enable Speaker for ASUS UX533 and UX534
    ALSA: hda/realtek - change to suitable link model for ASUS platform
  * ALSA: usb-audio: Fix race against the error recovery URB submission
      sound/usb/midi.c
    ALSA: line6: Sync the pending work cancel at disconnection
    ALSA: line6: Perform sanity check for each URB creation
  * HID: quirks: Ignore Simply Automated UPB PIM
      drivers/hid/hid-ids.h
      drivers/hid/hid-quirks.c
  * HID: quirks: Always poll Obins Anne Pro 2 keyboard
      drivers/hid/hid-ids.h
      drivers/hid/hid-quirks.c
  * HID: magicmouse: do not set up autorepeat
      drivers/hid/hid-magicmouse.c
    slimbus: core: Fix mismatch in of_node_get/put
    mtd: rawnand: oxnas: Release all devices in the _remove() path
    mtd: rawnand: oxnas: Unregister all devices on error
    mtd: rawnand: oxnas: Keep track of registered devices
    mtd: rawnand: brcmnand: fix CS0 layout
    mtd: rawnand: timings: Fix default tR_max and tCCS_min timings
    mtd: rawnand: marvell: Fix probe error path
    mtd: rawnand: marvell: Use nand_cleanup() when the device is not yet registered
  * soc: qcom: rpmh-rsc: Allow using free WAKE TCS for active request
      drivers/soc/qcom/rpmh-rsc.c
  * soc: qcom: rpmh-rsc: Clear active mode configuration for wake TCS
      drivers/soc/qcom/rpmh-rsc.c
  * soc: qcom: rpmh: Invalidate SLEEP and WAKE TCSes before flushing new data
      drivers/soc/qcom/rpmh.c
  * soc: qcom: rpmh: Update dirty flag only when data changes
      drivers/soc/qcom/rpmh.c
    perf stat: Zero all the 'ena' and 'run' array slot stats for interval mode
    apparmor: ensure that dfa state tables have entries
    copy_xstate_to_kernel: Fix typo which caused GDB regression
  * regmap: debugfs: Don't sleep while atomic for fast_io regmaps
      drivers/base/regmap/regmap-debugfs.c
    ARM: dts: socfpga: Align L2 cache-controller nodename with dtschema
    Revert "thermal: mediatek: fix register index error"
    staging: comedi: verify array index is correct before using it
    usb: gadget: udc: atmel: fix uninitialized read in debug printk
    spi: spi-sun6i: sun6i_spi_transfer_one(): fix setting of clock rate
    arm64: dts: meson: add missing gxl rng clock
    phy: sun4i-usb: fix dereference of pointer phy0 before it is null checked
    iio:health:afe4404 Fix timestamp alignment and prevent data leak.
  * ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Flight S
      sound/usb/quirks.c
    ACPI: video: Use native backlight on Acer TravelMate 5735Z
    Input: mms114 - add extra compatible for mms345l
  * ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Alpha S
      sound/usb/quirks.c
    ACPI: video: Use native backlight on Acer Aspire 5783z
  * ALSA: usb-audio: Rewrite registration quirk handling
      sound/usb/card.c
      sound/usb/quirks.c
      sound/usb/quirks.h
    mmc: sdhci: do not enable card detect interrupt for gpio cd type
    doc: dt: bindings: usb: dwc3: Update entries for disabling SS instances in park mode
  * ALSA: usb-audio: Create a registration quirk for Kingston HyperX Amp (0951:16d8)
      sound/usb/card.c
      sound/usb/quirks.c
      sound/usb/quirks.h
  * scsi: sr: remove references to BLK_DEV_SR_VENDOR, leave it enabled
      drivers/scsi/Kconfig
    ARM: at91: pm: add quirk for sam9x60's ulp1
  * HID: quirks: Remove ITE 8595 entry from hid_have_special_driver
      drivers/hid/hid-quirks.c
    net: sfp: add some quirks for GPON modules
    net: sfp: add support for module quirks
  * Revert "usb/ehci-platform: Set PM runtime as active on resume"
      drivers/usb/host/ehci-platform.c
  * Revert "usb/xhci-plat: Set PM runtime as active on resume"
      drivers/usb/host/xhci-plat.c
  * Revert "usb/ohci-platform: Fix a warning when hibernating"
      drivers/usb/host/ohci-platform.c
  * of: of_mdio: Correct loop scanning logic
      drivers/of/of_mdio.c
    net: dsa: bcm_sf2: Fix node reference count
    spi: spi-fsl-dspi: Fix lockup if device is shutdown during SPI transfer
    spi: fix initial SPI_SR value in spi-fsl-dspi
    iio:health:afe4403 Fix timestamp alignment and prevent data leak.
    iio:pressure:ms5611 Fix buffer element alignment
    iio:humidity:hts221 Fix alignment and data leak issues
    iio: pressure: zpa2326: handle pm_runtime_get_sync failure
    iio: mma8452: Add missed iio_device_unregister() call in mma8452_probe()
    iio: magnetometer: ak8974: Fix runtime PM imbalance on error
    iio:humidity:hdc100x Fix alignment and data leak issues
    iio:magnetometer:ak8974: Fix alignment and data leak issues
  * arm64/alternatives: don't patch up internal branches
      arch/arm64/kernel/alternative.c
    i2c: eg20t: Load module automatically if ID matches
    gfs2: read-only mounts should grab the sd_freeze_gl glock
    tpm_tis: extra chip->ops check on error path in tpm_tis_core_init
  * arm64/alternatives: use subsections for replacement sequences
      arch/arm64/include/asm/alternative.h
      arch/arm64/kernel/vmlinux.lds.S
    m68k: mm: fix node memblock init
    m68k: nommu: register start of the memory with memblock
    drm/exynos: fix ref count leak in mic_pre_enable
    drm/msm: fix potential memleak in error branch
  * vlan: consolidate VLAN parsing code and limit max parsing depth
      include/linux/if_vlan.h
  * sched: consistently handle layer3 header accesses in the presence of VLANs
      include/linux/if_vlan.h
      include/net/inet_ecn.h
      include/net/pkt_sched.h
      net/core/filter.c
      net/sched/act_skbedit.c
      net/sched/cls_api.c
      net/sched/cls_flow.c
      net/sched/em_meta.c
  * cgroup: Fix sock_cgroup_data on big-endian.
      include/linux/cgroup-defs.h
  * cgroup: fix cgroup_sk_alloc() for sk_clone_lock()
      include/linux/cgroup-defs.h
      include/linux/cgroup.h
      kernel/cgroup/cgroup.c
      net/core/sock.c
  * tcp: md5: allow changing MD5 keys in all socket states
      net/ipv4/tcp.c
  * tcp: md5: refine tcp_md5_do_add()/tcp_md5_hash_key() barriers
      net/ipv4/tcp.c
      net/ipv4/tcp_ipv4.c
  * tcp: md5: do not send silly options in SYNCOOKIES
      net/ipv4/tcp_output.c
  * tcp: md5: add missing memory barriers in tcp_md5_do_add()/tcp_md5_hash_key()
      net/ipv4/tcp.c
      net/ipv4/tcp_ipv4.c
  * tcp: make sure listeners don't initialize congestion-control state
      net/ipv4/tcp.c
      net/ipv4/tcp_cong.c
  * tcp: fix SO_RCVLOWAT possible hangs under high mem pressure
      net/ipv4/tcp_input.c
    net: usb: qmi_wwan: add support for Quectel EG95 LTE modem
    net_sched: fix a memory leak in atm_tc_init()
  * net: Added pointer check for dst->ops->neigh_lookup in dst_neigh_lookup_skb
      include/net/dst.h
    llc: make sure applications use ARPHRD_ETHER
  * l2tp: remove skb_dst_set() from l2tp_xmit_skb()
      net/l2tp/l2tp_core.c
  * ipv4: fill fl4_icmp_{type,code} in ping_v4_sendmsg
      net/ipv4/ping.c
  * genetlink: remove genl_bind
      include/net/genetlink.h
      net/netlink/genetlink.c
  * net: rmnet: fix lower interface leak
      drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c
    perf: Make perf able to build with latest libbfd
  * UPSTREAM: media: v4l2-ctrl: Add H264 profile and levels
      drivers/media/v4l2-core/v4l2-ctrls.c
      include/uapi/linux/v4l2-controls.h
  * UPSTREAM: media: v4l2-ctrl: Add control for h.264 chroma qp offset
      drivers/media/v4l2-core/v4l2-ctrls.c
      include/uapi/linux/v4l2-controls.h
  * ANDROID: GKI: ASoC: compress: revert some code to avoid race condition
      sound/core/compress_offload.c
    ANDROID: GKI: Update the ABI xml representation.
  * ANDROID: GKI: kernel: tick-sched: Add an API for wakeup callbacks
      include/linux/tick.h
      kernel/time/tick-sched.c
  * ANDROID: ASoC: Compress: Check and set pcm_new driver op
      sound/soc/soc-compress.c
    Revert "ANDROID: GKI: arm64: gki_defconfig: Disable CONFIG_ARM64_TAGGED_ADDR_ABI"
    ANDROID: arm64: configs: enabe CONFIG_TMPFS
  * Revert "ALSA: compress: fix partial_drain completion state"
      include/sound/compress_driver.h
      sound/core/compress_offload.c
    Merge 4.19.133 into android-4.19-stable
    ANDROID: GKI: enable CONFIG_EXT4_FS_POSIX_ACL.
    ANDROID: GKI: set CONFIG_STATIC_USERMODEHELPER_PATH
Linux 4.19.133
    s390/mm: fix huge pte soft dirty copying
    ARC: elf: use right ELF_ARCH
    ARC: entry: fix potential EFA clobber when TIF_SYSCALL_TRACE
  * dm: use noio when sending kobject event
      drivers/md/dm.c
    drm/radeon: fix double free
    btrfs: fix fatal extent_buffer readahead vs releasepage race
    Revert "ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb"
  * bpf: Check correct cred for CAP_SYSLOG in bpf_dump_raw_ok()
      include/linux/filter.h
      kernel/bpf/syscall.c
      net/core/sysctl_net_core.c
    kprobes: Do not expose probe addresses to non-CAP_SYSLOG
  * module: Do not expose section addresses to non-CAP_SYSLOG
      kernel/module.c
  * module: Refactor section attr into bin attribute
      kernel/module.c
  * kernel: module: Use struct_size() helper
      kernel/module.c
  * kallsyms: Refactor kallsyms_show_value() to take cred
      include/linux/filter.h
      include/linux/kallsyms.h
      kernel/kallsyms.c
      kernel/module.c
    KVM: x86: Mark CR4.TSD as being possibly owned by the guest
    KVM: x86: Inject #GP if guest attempts to toggle CR4.LA57 in 64-bit mode
    KVM: x86: bit 8 of non-leaf PDPEs is not reserved
    KVM: arm64: Stop clobbering x0 for HVC_SOFT_RESTART
  * KVM: arm64: Fix definition of PAGE_HYP_DEVICE
      arch/arm64/include/asm/pgtable-prot.h
  * ALSA: usb-audio: add quirk for MacroSilicon MS2109
      sound/usb/quirks-table.h
    ALSA: hda - let hs_mic be picked ahead of hp_mic
    ALSA: opl3: fix infoleak in opl3
    mlxsw: spectrum_router: Remove inappropriate usage of WARN_ON()
    net: macb: mark device wake capable when "magic-packet" property present
    bnxt_en: fix NULL dereference in case SR-IOV configuration fails
    cxgb4: fix all-mask IP address comparison
    nbd: Fix memory leak in nbd_add_socket
    arm64: kgdb: Fix single-step exception handling oops
  * ALSA: compress: fix partial_drain completion state
      include/sound/compress_driver.h
      sound/core/compress_offload.c
    net: hns3: fix use-after-free when doing self test
    smsc95xx: avoid memory leak in smsc95xx_bind
    smsc95xx: check return value of smsc95xx_reset
    net: cxgb4: fix return error value in t4_prep_fw
    drm/mediatek: Check plane visibility in atomic_update
  * net: qrtr: Fix an out of bounds read qrtr_endpoint_post()
      net/qrtr/qrtr.c
    x86/entry: Increase entry_stack size to a full page
    nvme-rdma: assign completion vector correctly
    block: release bip in a right way in error path
    usb: dwc3: pci: Fix reference count leak in dwc3_pci_resume_work
    scsi: mptscsih: Fix read sense data size
    ARM: imx6: add missing put_device() call in imx6q_suspend_init()
    cifs: update ctime and mtime during truncate
    s390/kasan: fix early pgm check handler execution
  * drm: panel-orientation-quirks: Use generic orientation-data for Acer S1003
      drivers/gpu/drm/drm_panel_orientation_quirks.c
  * drm: panel-orientation-quirks: Add quirk for Asus T101HA panel
      drivers/gpu/drm/drm_panel_orientation_quirks.c
    i40e: protect ring accesses with READ- and WRITE_ONCE
    ixgbe: protect ring accesses with READ- and WRITE_ONCE
  * spi: spidev: fix a potential use-after-free in spidev_release()
      drivers/spi/spidev.c
  * spi: spidev: fix a race between spidev_release and spidev_remove
      drivers/spi/spidev.c
    gpu: host1x: Detach driver on unregister
    drm/tegra: hub: Do not enable orphaned window group
    ARM: dts: omap4-droid4: Fix spi configuration and increase rate
  * regmap: fix alignment issue
      drivers/base/regmap/regmap.c
    spi: spi-fsl-dspi: Fix external abort on interrupt in resume or exit paths
    spi: spi-fsl-dspi: use IRQF_SHARED mode to request IRQ
    spi: spi-fsl-dspi: Fix lockup if device is removed during SPI transfer
    spi: spi-fsl-dspi: Adding shutdown hook
    KVM: s390: reduce number of IO pins to 1
    ANDROID: GKI: update abi based on padding fields being added
  * ANDROID: GKI: USB: Gadget: add Android ABI padding to struct usb_gadget
      include/linux/usb/gadget.h
  * ANDROID: GKI: sound/usb/card.h: add Android ABI padding to struct snd_usb_endpoint
      sound/usb/card.h
  * ANDROID: fscrypt: fix DUN contiguity with inline encryption + IV_INO_LBLK_32 policies
      fs/crypto/bio.c
      fs/crypto/inline_crypt.c
  * ANDROID: f2fs: add back compress inode check
      fs/f2fs/f2fs.h
    Merge 4.19.132 into android-4.19-stable
Linux 4.19.132
  * efi: Make it possible to disable efivar_ssdt entirely
      drivers/firmware/efi/Kconfig
    dm zoned: assign max_io_len correctly
  * irqchip/gic: Atomically update affinity
      drivers/irqchip/irq-gic.c
    MIPS: Add missing EHB in mtc0 -> mfc0 sequence for DSPen
    cifs: Fix the target file was deleted when rename failed.
    SMB3: Honor lease disabling for multiuser mounts
    SMB3: Honor persistent/resilient handle flags for multiuser mounts
    SMB3: Honor 'seal' flag for multiuser mounts
  * Revert "ALSA: usb-audio: Improve frames size computation"
      sound/usb/card.h
      sound/usb/endpoint.c
      sound/usb/endpoint.h
      sound/usb/pcm.c
    nfsd: apply umask on fs without ACL support
    i2c: mlxcpld: check correct size of maximum RECV_LEN packet
    i2c: algo-pca: Add 0x78 as SCL stuck low status for PCA9665
    nvme: fix a crash in nvme_mpath_add_disk
    SMB3: Honor 'posix' flag for multiuser mounts
    virtio-blk: free vblk-vqs in error path of virtblk_probe()
    drm: sun4i: hdmi: Remove extra HPD polling
    hwmon: (acpi_power_meter) Fix potential memory leak in acpi_power_meter_add()
    hwmon: (max6697) Make sure the OVERT mask is set correctly
    cxgb4: fix SGE queue dump destination buffer context
    cxgb4: use correct type for all-mask IP address comparison
    cxgb4: parse TC-U32 key values and masks natively
    cxgb4: use unaligned conversion for fetching timestamp
    drm/msm/dpu: fix error return code in dpu_encoder_init
  * crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock()
      include/crypto/if_alg.h
    kgdb: Avoid suspicious RCU usage warning
    nvme-multipath: fix deadlock between ana_work and scan_work
    nvme-multipath: set bdi capabilities once
    s390/debug: avoid kernel warning on too large number of pages
    usb: usbtest: fix missing kfree(dev->buf) in usbtest_disconnect
  * mm/slub: fix stack overruns with SLUB_STATS
      mm/slub.c
  * mm/slub.c: fix corrupted freechain in deactivate_slab()
      mm/slub.c
    usbnet: smsc95xx: Fix use-after-free after removal
    EDAC/amd64: Read back the scrub rate PCI register on F15h
  * mm: fix swap cache node allocation mask
      mm/swap_state.c
    btrfs: fix a block group ref counter leak after failure to remove block group
    ANDROID: Update ABI representation for libabigail update
    ANDROID: Update the ABI representation
    ANDROID: Update the ABI xml representation
  * ANDROID: GKI: fix ABI diffs caused by GPU heap and pool vmstat additions
      include/linux/mmzone.h
      mm/vmstat.c
  * ANDROID: sched: consider stune boost margin when computing energy
      kernel/sched/cpufreq_schedutil.c
      kernel/sched/fair.c
      kernel/sched/sched.h
      kernel/sched/tune.c
      kernel/sched/tune.h
    ANDROID: GKI: move abi files to android/
    ANDROID: GKI: drop unneeded "_whitelist" off of symbol filenames
  * UPSTREAM: binder: fix null deref of proc->context
      drivers/android/binder.c
  * ANDROID: cpufreq: schedutil: maintain raw cache when next_f is not changed
      kernel/sched/cpufreq_schedutil.c
  * UPSTREAM: net: bpf: Make bpf_ktime_get_ns() available to non GPL programs
      kernel/bpf/helpers.c
    UPSTREAM: usb: musb: mediatek: add reset FADDR to zero in reset interrupt handle
  * ANDROID: GKI: scripts: Makefile: update the lz4 command (#2)
      scripts/Makefile.lib
    ANDROID: Update the ABI xml representation
  * Revert "drm/dsi: Fix byte order of DCS set/get brightness"
      drivers/gpu/drm/drm_mipi_dsi.c
      include/drm/drm_mipi_dsi.h
    Merge 4.19.131 into android-4.19-stable
Linux 4.19.131
    Revert "tty: hvc: Fix data abort due to race in hvc_open"
    xfs: add agf freeblocks verify in xfs_agf_verify
    dm writecache: add cond_resched to loop in persistent_memory_claim()
    dm writecache: correct uncommitted_block when discarding uncommitted entry
    NFSv4 fix CLOSE not waiting for direct IO compeletion
    pNFS/flexfiles: Fix list corruption if the mirror count changes
    SUNRPC: Properly set the @subbuf parameter of xdr_buf_subsegment()
    sunrpc: fixed rollback in rpc_gssd_dummy_populate()
    Staging: rtl8723bs: prevent buffer overflow in update_sta_support_rate()
    drm/radeon: fix fb_div check in ni_init_smc_spll_table()
  * drm: rcar-du: Fix build error
      drivers/gpu/drm/rcar-du/Kconfig
  * ring-buffer: Zero out time extend if it is nested and not absolute
      kernel/trace/ring_buffer.c
  * tracing: Fix event trigger to accept redundant spaces
      kernel/trace/trace_events_trigger.c
  * arm64: perf: Report the PC value in REGS_ABI_32 mode
      arch/arm64/kernel/perf_regs.c
    ocfs2: fix panic on nfs server over ocfs2
    ocfs2: fix value of OCFS2_INVALID_SLOT
    ocfs2: load global_inode_alloc
    ocfs2: avoid inode removal while nfsd is accessing it
  * mm/slab: use memzero_explicit() in kzfree()
      mm/slab_common.c
    btrfs: fix failure of RWF_NOWAIT write into prealloc extent beyond eof
    btrfs: fix data block group relocation failure due to concurrent scrub
    x86/asm/64: Align start of __clear_user() loop to 16-bytes
    KVM: nVMX: Plumb L2 GPA through to PML emulation
    KVM: X86: Fix MSR range of APIC registers in X2APIC mode
    erofs: fix partially uninitialized misuse in z_erofs_onlinepage_fixup
    ACPI: sysfs: Fix pm_profile_attr type
    ALSA: hda/realtek - Add quirk for MSI GE63 laptop
    ALSA: hda: Add NVIDIA codec IDs 9a & 9d through a0 to patch table
    RISC-V: Don't allow write+exec only page mapping request in mmap
  * blktrace: break out of blktrace setup on concurrent calls
      kernel/trace/blktrace.c
  * kbuild: improve cc-option to clean up all temporary files
      scripts/Kbuild.include
  * arm64: sve: Fix build failure when ARM64_SVE=y and SYSCTL=n
      arch/arm64/kernel/fpsimd.c
    s390/vdso: fix vDSO clock_getres()
    s390/ptrace: fix setting syscall number
    net: alx: fix race condition in alx_remove
    ibmvnic: Harden device login requests
    hwrng: ks-sa - Fix runtime PM imbalance on error
    riscv/atomic: Fix sign extension for RV64I
    drm/amd/display: Use kfree() to free rgb_user in calculate_user_regamma_ramp()
    ata/libata: Fix usage of page address by page_address in ata_scsi_mode_select_xlat function
    sata_rcar: handle pm_runtime_get_sync failure cases
  * sched/core: Fix PI boosting between RT and DEADLINE tasks
      kernel/sched/core.c
  * sched/deadline: Initialize ->dl_boosted
      kernel/sched/deadline.c
  * i2c: core: check returned size of emulated smbus block read
      drivers/i2c/i2c-core-smbus.c
    i2c: fsi: Fix the port number field in status register
    net: bcmgenet: use hardware padding of runt frames
    netfilter: ipset: fix unaligned atomic access
    usb: gadget: udc: Potential Oops in error handling code
    ARM: imx5: add missing put_device() call in imx_suspend_alloc_ocram()
    cxgb4: move handling L2T ARP failures to caller
    net: qed: fix excessive QM ILT lines consumption
    net: qed: fix NVMe login fails over VFs
  * net: qed: fix left elements count calculation
      include/linux/qed/qed_chain.h
    RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads()
    ASoC: rockchip: Fix a reference count leak.
    RDMA/cma: Protect bind_list and listen_list while finding matching cm id
    RDMA/qedr: Fix KASAN: use-after-free in ucma_event_handler+0x532
    rxrpc: Fix handling of rwind from an ACK packet
    ARM: dts: NSP: Correct FA2 mailbox node
  * regmap: Fix memory leak from regmap_register_patch
      drivers/base/regmap/regmap.c
    x86/resctrl: Fix a NULL vs IS_ERR() static checker warning in rdt_cdp_peer_get()
    ARM: dts: Fix duovero smsc interrupt for suspend
    ASoC: fsl_ssi: Fix bclk calculation for mono channel
    regualtor: pfuze100: correct sw1a/sw2 on pfuze3000
    efi/esrt: Fix reference count leak in esre_create_sysfs_entry.
    ASoC: q6asm: handle EOS correctly
  * xfrm: Fix double ESP trailer insertion in IPsec crypto offload.
      include/net/xfrm.h
      net/xfrm/xfrm_device.c
    cifs/smb3: Fix data inconsistent when zero file range
    cifs/smb3: Fix data inconsistent when punch hole
    IB/mad: Fix use after free when destroying MAD agent
  * loop: replace kill_bdev with invalidate_bdev
      drivers/block/loop.c
    cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip
  * xhci: Return if xHCI doesn't support LPM
      drivers/usb/host/xhci.c
  * xhci: Fix enumeration issue when setting max packet size for FS devices.
      drivers/usb/host/xhci.c
  * xhci: Fix incorrect EP_STATE_MASK
      drivers/usb/host/xhci.h
    scsi: zfcp: Fix panic on ERP timeout for previously dismissed ERP action
  * ALSA: usb-audio: Fix OOB access of mixer element list
      sound/usb/mixer.c
      sound/usb/mixer.h
      sound/usb/mixer_quirks.c
  * ALSA: usb-audio: add quirk for Samsung USBC Headset (AKG)
      sound/usb/quirks.c
  * ALSA: usb-audio: add quirk for Denon DCD-1500RE
      sound/usb/quirks.c
    usb: typec: tcpci_rt1711h: avoid screaming irq causing boot hangs
    usb: host: ehci-exynos: Fix error check in exynos_ehci_probe()
  * xhci: Poll for U0 after disabling USB2 LPM
      drivers/usb/host/xhci.c
    usb: host: xhci-mtk: avoid runtime suspend when removing hcd
  * USB: ehci: reopen solution for Synopsys HC bug
      drivers/usb/host/ehci-pci.c
  * usb: add USB_QUIRK_DELAY_INIT for Logitech C922
      drivers/usb/core/quirks.c
    usb: dwc2: Postponed gadget registration to the udc class driver
    USB: ohci-sm501: Add missed iounmap() in remove
  * net: core: reduce recursion limit value
      include/linux/netdevice.h
  * net: Do not clear the sock TX queue in sk_set_socket()
      include/net/sock.h
      net/core/sock.c
  * net: Fix the arp error in some cases
      net/ipv4/fib_semantics.c
    sch_cake: don't call diffserv parsing code when it is not needed
  * tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT
      net/ipv4/tcp_cubic.c
    sch_cake: fix a few style nits
    sch_cake: don't try to reallocate or unshare skb unconditionally
  * ip_tunnel: fix use-after-free in ip_tunnel_lookup()
      net/ipv4/ip_tunnel.c
  * net: phy: Check harder for errors in get_phy_id()
      drivers/net/phy/phy_device.c
    ip6_gre: fix use-after-free in ip6gre_tunnel_lookup()
    tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes
  * tcp: grow window for OOO packets only for SACK flows
      net/ipv4/tcp_input.c
  * tcp: don't ignore ECN CWR on pure ACK
      net/ipv4/tcp_input.c
  * sctp: Don't advertise IPv4 addresses if ipv6only is set on the socket
      include/net/sctp/constants.h
      net/sctp/associola.c
      net/sctp/bind_addr.c
      net/sctp/protocol.c
    rxrpc: Fix notification call on completion of discarded calls
    rocker: fix incorrect error handling in dma_rings_init
  * net: usb: ax88179_178a: fix packet alignment padding
      drivers/net/usb/ax88179_178a.c
  * net: increment xmit_recursion level in dev_direct_xmit()
      net/core/dev.c
      net/core/sock.c
  * net: use correct this_cpu primitive in dev_recursion_level
      include/linux/netdevice.h
  * net: place xmit recursion in softnet data
      include/linux/netdevice.h
      net/core/dev.c
      net/core/filter.c
  * net: fix memleak in register_netdevice()
      net/core/dev.c
  * net: bridge: enfore alignment for ethernet address
      net/bridge/br_private.h
  * mld: fix memory leak in ipv6_mc_destroy_dev()
      net/ipv6/mcast.c
    ibmveth: Fix max MTU limit
    apparmor: don't try to replace stale label in ptraceme check
    ALSA: hda/realtek - Enable micmute LED on and HP system
    ALSA: hda/realtek: Enable mute LED on an HP system
    ALSA: hda/realtek - Enable the headset of ASUS B9450FA with ALC294
    fix a braino in "sparc32: fix register window handling in genregs32_[gs]et()"
    i2c: tegra: Fix Maximum transfer size
    i2c: tegra: Add missing kerneldoc for some fields
    i2c: tegra: Cleanup kerneldoc comments
    EDAC/amd64: Add Family 17h Model 30h PCI IDs
  * net: sched: export __netdev_watchdog_up()
      net/sched/sch_generic.c
    net: bcmgenet: remove HFB_CTRL access
    mtd: rawnand: marvell: Fix the condition on a return code
    fanotify: fix ignore mask logic for events on child and on dir
    block/bio-integrity: don't free 'buf' if bio_integrity_add_page() failed
  * net: be more gentle about silly gso requests coming from user
      include/linux/virtio_net.h
  * ANDROID: lib/vdso: do not update timespec if clock_getres() fails
      lib/vdso/gettimeofday.c
  * Revert "ANDROID: fscrypt: add key removal notifier chain"
      fs/crypto/keyring.c
      include/linux/fscrypt.h
    ANDROID: update the ABI xml and qcom whitelist
  * ANDROID: fs: export vfs_{read|write}
      fs/read_write.c
    ANDROID: GKI: update abi definitions now that sdcardfs is gone
  * Revert "ANDROID: sdcardfs: Enable modular sdcardfs"
      fs/fs_struct.c
      fs/read_write.c
      security/security.c
  * Revert "ANDROID: vfs: Add setattr2 for filesystems with per mount permissions"
      fs/attr.c
      fs/coredump.c
      fs/inode.c
      fs/namei.c
      fs/open.c
      fs/utimes.c
      include/linux/fs.h
  * Revert "ANDROID: vfs: fix export symbol type"
      fs/attr.c
  * Revert "ANDROID: vfs: Add permission2 for filesystems with per mount permissions"
      fs/attr.c
      fs/exec.c
      fs/namei.c
      fs/notify/inotify/inotify_user.c
      fs/open.c
      fs/xattr.c
      include/linux/fs.h
      include/linux/namei.h
  * Revert "ANDROID: vfs: fix export symbol types"
      fs/namei.c
  * Revert "ANDROID: vfs: add d_canonical_path for stacked filesystem support"
      fs/notify/inotify/inotify_user.c
      include/linux/dcache.h
      include/linux/fsnotify.h
  * Revert "ANDROID: fs: Restore vfs_path_lookup() export"
      fs/internal.h
      include/linux/namei.h
  * ANDROID: sdcardfs: remove sdcardfs from system
      fs/Kconfig
      fs/Makefile
  * Revert "ALSA: usb-audio: Improve frames size computation"
      sound/usb/card.h
      sound/usb/endpoint.c
      sound/usb/endpoint.h
      sound/usb/pcm.c
    Merge 4.19.130 into android-4.19-stable
  * ANDROID: Makefile: append BUILD_NUMBER to version string when defined
      Makefile
    ANDROID: GKI: Update ABI for incremental fs
    ANDROID: GKI: Update cuttlefish whitelist
    ANDROID: GKI: Disable INCREMENTAL_FS on x86 too
  * ANDROID: cpufreq: schedutil: drop cache when update skipped due to rate limit
      kernel/sched/cpufreq_schedutil.c
Linux 4.19.130
    KVM: x86/mmu: Set mmio_value to '0' if reserved #PF can't be generated
    kvm: x86: Fix reserved bits related calculation errors caused by MKTME
    kvm: x86: Move kvm_set_mmio_spte_mask() from x86.c to mmu.c
  * md: add feature flag MD_FEATURE_RAID0_LAYOUT
      include/uapi/linux/raid/md_p.h
    Revert "dpaa_eth: fix usage as DSA master, try 3"
  * net: core: device_rename: Use rwsem instead of a seqcount
      net/core/dev.c
  * sched/rt, net: Use CONFIG_PREEMPTION.patch
      net/core/dev.c
  * kretprobe: Prevent triggering kretprobe from within kprobe_flush_task
      include/linux/kprobes.h
    net: octeon: mgmt: Repair filling of RX ring
    e1000e: Do not wake up the system via WOL if device wakeup is disabled
    kprobes: Fix to protect kick_kprobe_optimizer() by kprobe_mutex
  * crypto: algboss - don't wait during notifier callback
      crypto/algboss.c
    crypto: algif_skcipher - Cap recv SG list at ctx->used
    drm/i915/icl+: Fix hotplug interrupt disabling after storm detection
    drm/i915: Whitelist context-local timestamp in the gen9 cmdparser
    s390: fix syscall_get_error for compat processes
    mtd: rawnand: tmio: Fix the probe error path
    mtd: rawnand: mtk: Fix the probe error path
    mtd: rawnand: plat_nand: Fix the probe error path
    mtd: rawnand: socrates: Fix the probe error path
    mtd: rawnand: oxnas: Fix the probe error path
    mtd: rawnand: oxnas: Add of_node_put()
    mtd: rawnand: orion: Fix the probe error path
    mtd: rawnand: xway: Fix the probe error path
    mtd: rawnand: sharpsl: Fix the probe error path
    mtd: rawnand: diskonchip: Fix the probe error path
  * mtd: rawnand: Pass a nand_chip object to nand_release()
      include/linux/mtd/rawnand.h
  * mtd: rawnand: Pass a nand_chip object to nand_scan()
      include/linux/mtd/rawnand.h
  * block: nr_sects_write(): Disable preemption on seqcount write
      include/linux/genhd.h
    x86/boot/compressed: Relax sed symbol type regex for LLVM ld.lld
  * drm/dp_mst: Increase ACT retry timeout to 3s
      drivers/gpu/drm/drm_dp_mst_topology.c
  * ext4: avoid race conditions when remounting with options that change dax
      fs/ext4/super.c
  * ext4: fix partial cluster initialization when splitting extent
      fs/ext4/extents.c
  * selinux: fix double free
      security/selinux/ss/services.c
    drm/amdgpu: Replace invalid device ID with a valid device ID
    drm/qxl: Use correct notify port address when creating cursor ring
  * drm/dp_mst: Reformat drm_dp_check_act_status() a bit
      drivers/gpu/drm/drm_dp_mst_topology.c
  * drm: encoder_slave: fix refcouting error for modules
      drivers/gpu/drm/drm_encoder_slave.c
  * libata: Use per port sync for detach
      include/linux/libata.h
  * arm64: hw_breakpoint: Don't invoke overflow handler on uaccess watchpoints
      arch/arm64/kernel/hw_breakpoint.c
  * block: Fix use-after-free in blkdev_get()
      fs/block_dev.c
    afs: afs_write_end() should change i_size under the right lock
    afs: Fix non-setting of mtime when writing into mmap
    bcache: fix potential deadlock problem in btree_gc_coalesce
  * ext4: stop overwrite the errcode in ext4_setup_super
      fs/ext4/super.c
    perf report: Fix NULL pointer dereference in hists__fprintf_nr_sample_events()
  * usb/ehci-platform: Set PM runtime as active on resume
      drivers/usb/host/ehci-platform.c
  * usb: host: ehci-platform: add a quirk to avoid stuck
      drivers/usb/host/ehci-platform.c
      include/linux/usb/ehci_def.h
  * usb/xhci-plat: Set PM runtime as active on resume
      drivers/usb/host/xhci-plat.c
    xdp: Fix xsk_generic_xmit errno
  * net/filter: Permit reading NET in load_bytes_relative when MAC not set
      net/core/filter.c
    x86/idt: Keep spurious entries unset in system_vectors
    scsi: acornscsi: Fix an error handling path in acornscsi_probe()
    drm/sun4i: hdmi ddc clk: Fix size of m divider
    ASoC: rt5645: Add platform-data for Asus T101HA
    ASoC: Intel: bytcr_rt5640: Add quirk for Toshiba Encore WT10-A tablet
  * ASoC: core: only convert non DPCM link to DPCM link
      sound/soc/soc-core.c
    afs: Fix memory leak in afs_put_sysnames()
    selftests/net: in timestamping, strncpy needs to preserve null byte
    drivers/perf: hisi: Fix wrong value for all counters enable
    NTB: ntb_test: Fix bug when counting remote files
    NTB: perf: Fix race condition when run with ntb_test
    NTB: perf: Fix support for hardware that doesn't have port numbers
    NTB: perf: Don't require one more memory window than number of peers
    NTB: Revert the change to use the NTB device dev for DMA allocations
    NTB: ntb_tool: reading the link file should not end in a NULL byte
    ntb_tool: pass correct struct device to dma_alloc_coherent
    ntb_perf: pass correct struct device to dma_alloc_coherent
    gfs2: fix use-after-free on transaction ail lists
  * blktrace: fix endianness for blk_log_remap()
      kernel/trace/blktrace.c
  * blktrace: fix endianness in get_pdu_int()
      kernel/trace/blktrace.c
  * blktrace: use errno instead of bi_status
      kernel/trace/blktrace.c
    selftests/vm/pkeys: fix alloc_random_pkey() to make it really random
  * elfnote: mark all .note sections SHF_ALLOC
      include/linux/elfnote.h
  * include/linux/bitops.h: avoid clang shift-count-overflow warnings
      include/linux/bitops.h
  * lib/zlib: remove outdated and incorrect pre-increment optimization
      lib/zlib_inflate/inffast.c
    geneve: change from tx_error to tx_dropped on missing metadata
    crypto: omap-sham - add proper load balancing support for multicore
    pinctrl: freescale: imx: Fix an error handling path in 'imx_pinctrl_probe()'
    pinctrl: imxl: Fix an error handling path in 'imx1_pinctrl_core_probe()'
  * scsi: ufs: Don't update urgent bkops level when toggling auto bkops
      drivers/scsi/ufs/ufshcd.c
    scsi: iscsi: Fix reference count leak in iscsi_boot_create_kobj
    gfs2: Allow lock_nolock mount to specify jid=X
    openrisc: Fix issue with argument clobbering for clone/fork
    rxrpc: Adjust /proc/net/rxrpc/calls to display call->debug_id not user_ID
    vfio/mdev: Fix reference count leak in add_mdev_supported_type
    ASoC: fsl_asrc_dma: Fix dma_chan leak when config DMA channel failed
    extcon: adc-jack: Fix an error handling path in 'adc_jack_probe()'
    powerpc/4xx: Don't unmap NULL mbase
  * of: Fix a refcounting bug in __of_attach_node_sysfs()
      drivers/of/kobj.c
    NFSv4.1 fix rpc_call_done assignment for BIND_CONN_TO_SESSION
    net: sunrpc: Fix off-by-one issues in 'rpc_ntop6'
    clk: sprd: return correct type of value for _sprd_pll_recalc_rate
    KVM: PPC: Book3S HV: Ignore kmemleak false positives
  * scsi: ufs-qcom: Fix scheduling while atomic issue
      drivers/scsi/ufs/ufs-qcom.c
    clk: bcm2835: Fix return type of bcm2835_register_gate
    scsi: target: tcmu: Fix a use after free in tcmu_check_expired_queue_cmd()
    ASoC: fix incomplete error-handling in img_i2s_in_probe.
    x86/apic: Make TSC deadline timer detection message visible
    RDMA/iw_cxgb4: cleanup device debugfs entries on ULD remove
  * usb: gadget: Fix issue with config_ep_by_speed function
      drivers/usb/gadget/composite.c
      include/linux/usb/composite.h
    usb: gadget: fix potential double-free in m66592_probe.
    usb: gadget: lpc32xx_udc: don't dereference ep pointer before null check
    USB: gadget: udc: s3c2410_udc: Remove pointless NULL check in s3c2410_udc_nuke
    usb: dwc2: gadget: move gadget resume after the core is in L0 state
    watchdog: da9062: No need to ping manually before setting timeout
    IB/cma: Fix ports memory leak in cma_configfs
    PCI: dwc: Fix inner MSI IRQ domain registration
    PCI/PTM: Inherit Switch Downstream Port PTM settings from Upstream Port
    dm zoned: return NULL if dmz_get_zone_for_reclaim() fails to find a zone
    powerpc/64s/pgtable: fix an undefined behaviour
    arm64: tegra: Fix ethernet phy-mode for Jetson Xavier
    scsi: target: tcmu: Userspace must not complete queued commands
    clk: samsung: exynos5433: Add IGNORE_UNUSED flag to sclk_i2s1
    fpga: dfl: afu: Corrected error handling levels
    tty: n_gsm: Fix bogus i++ in gsm_data_kick
    USB: host: ehci-mxc: Add error handling in ehci_mxc_drv_probe()
    ASoC: Intel: bytcr_rt5640: Add quirk for Toshiba Encore WT8-A tablet
    drm/msm/mdp5: Fix mdp5_init error path for failed mdp5_kms allocation
  * usb/ohci-platform: Fix a warning when hibernating
      drivers/usb/host/ohci-platform.c
    vfio-pci: Mask cap zero
    powerpc/ps3: Fix kexec shutdown hang
    powerpc/pseries/ras: Fix FWNMI_VALID off by one
    ipmi: use vzalloc instead of kmalloc for user creation
  * HID: Add quirks for Trust Panora Graphic Tablet
      drivers/hid/hid-ids.h
      drivers/hid/hid-quirks.c
    tty: n_gsm: Fix waking up upper tty layer when room available
    tty: n_gsm: Fix SOF skipping
    powerpc/64: Don't initialise init_task->thread.regs
  * PCI: Fix pci_register_host_bridge() device_register() error handling
      drivers/pci/probe.c
    clk: ti: composite: fix memory leak
    dlm: remove BUG() before panic()
    pinctrl: rockchip: fix memleak in rockchip_dt_node_to_map
    scsi: mpt3sas: Fix double free warnings
    power: supply: smb347-charger: IRQSTAT_D is volatile
    power: supply: lp8788: Fix an error handling path in 'lp8788_charger_probe()'
    scsi: qla2xxx: Fix warning after FC target reset
    PCI/ASPM: Allow ASPM on links to PCIe-to-PCI/PCI-X Bridges
    PCI: rcar: Fix incorrect programming of OB windows
  * drivers: base: Fix NULL pointer exception in __platform_driver_probe() if a driver developer is foolish
      drivers/base/platform.c
    serial: amba-pl011: Make sure we initialize the port.lock spinlock
    i2c: pxa: fix i2c_pxa_scream_blue_murder() debug output
    PCI: v3-semi: Fix a memory leak in v3_pci_probe() error handling paths
    staging: sm750fb: add missing case while setting FB_VISUAL
  * usb: dwc3: gadget: Properly handle failed kick_transfer
      drivers/usb/dwc3/gadget.c
    thermal/drivers/ti-soc-thermal: Avoid dereferencing ERR_PTR
    slimbus: ngd: get drvdata from correct device
    tty: hvc: Fix data abort due to race in hvc_open
    s390/qdio: put thinint indicator after early error
  * ALSA: usb-audio: Fix racy list management in output queue
      sound/usb/endpoint.c
  * ALSA: usb-audio: Improve frames size computation
      sound/usb/card.h
      sound/usb/endpoint.c
      sound/usb/endpoint.h
      sound/usb/pcm.c
    staging: gasket: Fix mapping refcnt leak when register/store fails
    staging: gasket: Fix mapping refcnt leak when put attribute fails
  * firmware: qcom_scm: fix bogous abuse of dma-direct internals
      drivers/firmware/qcom_scm.c
    pinctrl: rza1: Fix wrong array assignment of rza1l_swio_entries
    scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing
    gpio: dwapb: Append MODULE_ALIAS for platform driver
    ARM: dts: sun8i-h2-plus-bananapi-m2-zero: Fix led polarity
    scsi: qedi: Do not flush offload work if ARP not resolved
    arm64: dts: mt8173: fix unit name warnings
    staging: greybus: fix a missing-check bug in gb_lights_light_config()
    x86/purgatory: Disable various profiling and sanitizing options
    apparmor: fix nnp subset test for unconfined
    scsi: ibmvscsi: Don't send host info in adapter info MAD after LPM
    scsi: sr: Fix sr_probe() missing deallocate of device minor
    ASoC: meson: add missing free_irq() in error path
    apparmor: check/put label on apparmor_sk_clone_security()
    apparmor: fix introspection of of task mode for unconfined tasks
  * mksysmap: Fix the mismatch of '.L' symbols in System.map
      scripts/mksysmap
    NTB: Fix the default port and peer numbers for legacy drivers
    NTB: ntb_pingpong: Choose doorbells based on port number
    yam: fix possible memory leak in yam_init_driver
    pwm: img: Call pm_runtime_put() in pm_runtime_get_sync() failed case
    powerpc/crashkernel: Take "mem=" option into account
    PCI: vmd: Filter resource type bits from shadow register
    nfsd: Fix svc_xprt refcnt leak when setup callback client failed
    powerpc/perf/hv-24x7: Fix inconsistent output values incase multiple hv-24x7 events run
    clk: clk-flexgen: fix clock-critical handling
    scsi: lpfc: Fix lpfc_nodelist leak when processing unsolicited event
    mfd: wm8994: Fix driver operation if loaded as modules
    gpio: dwapb: Call acpi_gpiochip_free_interrupts() on GPIO chip de-registration
    m68k/PCI: Fix a memory leak in an error handling path
    RDMA/mlx5: Add init2init as a modify command
    vfio/pci: fix memory leaks in alloc_perm_bits()
    ps3disk: use the default segment boundary
    PCI: aardvark: Don't blindly enable ASPM L0s and don't write to read-only register
    dm mpath: switch paths in dm_blk_ioctl() code path
    serial: 8250: Fix max baud limit in generic 8250 port
    usblp: poison URBs upon disconnect
    clk: samsung: Mark top ISP and CAM clocks on Exynos542x as critical
    i2c: pxa: clear all master action bits in i2c_pxa_stop_message()
  * f2fs: report delalloc reserve as non-free in statfs for project quota
      fs/f2fs/super.c
    iio: bmp280: fix compensation of humidity
    scsi: qla2xxx: Fix issue with adapter's stopping state
  * PCI: Allow pci_resize_resource() for devices on root bus
      drivers/pci/setup-res.c
    ALSA: isa/wavefront: prevent out of bounds write in ioctl
    ALSA: hda/realtek - Introduce polarity for micmute LED GPIO
    scsi: qedi: Check for buffer overflow in qedi_set_path()
    ARM: integrator: Add some Kconfig selections
    ASoC: davinci-mcasp: Fix dma_chan refcnt leak when getting dma type
    backlight: lp855x: Ensure regulators are disabled on probe failure
    clk: qcom: msm8916: Fix the address location of pll->config_reg
    remoteproc: Fix IDR initialisation in rproc_alloc()
    iio: pressure: bmp280: Tolerate IRQ before registering
    i2c: piix4: Detect secondary SMBus controller on AMD AM4 chipsets
    ASoC: tegra: tegra_wm8903: Support nvidia, headset property
    clk: sunxi: Fix incorrect usage of round_down()
  * power: supply: bq24257_charger: Replace depends on REGMAP_I2C with select
      drivers/power/supply/Kconfig
  * ANDROID: ext4: Optimize match for casefolded encrypted dirs
      fs/ext4/ext4.h
      fs/ext4/namei.c
  * ANDROID: ext4: Handle casefolding with encryption
      fs/ext4/dir.c
      fs/ext4/ext4.h
      fs/ext4/hash.c
      fs/ext4/ialloc.c
      fs/ext4/inline.c
      fs/ext4/namei.c
      fs/ext4/super.c
    Merge remote-tracking branch 'aosp/upstream-f2fs-stable-linux-4.19.y' into android-4.19-stable
  * ANDROID: extcon: Remove redundant EXPORT_SYMBOL_GPL
      include/linux/extcon.h
    ANDROID: update the ABI xml representation
  * ANDROID: GKI: cfg80211: add ABI changes for CONFIG_NL80211_TESTMODE
      include/net/cfg80211.h
      include/net/mac80211.h
    ANDROID: gki_defconfig: x86: Enable KERNEL_LZ4
  * ANDROID: GKI: scripts: Makefile: update the lz4 command
      scripts/Makefile.lib
  * FROMLIST: f2fs: fix use-after-free when accessing bio->bi_crypt_context
      fs/f2fs/data.c
    Merge remote-tracking branch 'aosp/upstream-f2fs-stable-linux-4.19.y' into android-4.19-stable
  * UPSTREAM: fdt: Update CRC check for rng-seed
      drivers/of/fdt.c
    ANDROID: GKI: Update ABI for incremental fs
    ANDROID: GKI: Update whitelist and defconfig for incfs
    ANDROID: Use depmod from the hermetic toolchain
    Merge 4.19.129 into android-4.19-stable
Linux 4.19.129
    perf symbols: Fix debuginfo search for Ubuntu
    perf probe: Check address correctness by map instead of _etext
    perf probe: Fix to check blacklist address correctly
    perf probe: Do not show the skipped events
    w1: omap-hdq: cleanup to add missing newline for some dev_dbg
    mtd: rawnand: pasemi: Fix the probe error path
    mtd: rawnand: brcmnand: fix hamming oob layout
  * sunrpc: clean up properly in gss_mech_unregister()
      include/linux/sunrpc/gss_api.h
      include/linux/sunrpc/svcauth_gss.h
    sunrpc: svcauth_gss_register_pseudoflavor must reject duplicate registrations.
  * kbuild: force to build vmlinux if CONFIG_MODVERSION=y
      Makefile
    powerpc/64s: Save FSCR to init_task.thread.fscr after feature init
    powerpc/64s: Don't let DT CPU features set FSCR_DSCR
    drivers/macintosh: Fix memleak in windfarm_pm112 driver
    ARM: dts: s5pv210: Set keep-power-in-suspend for SDHCI1 on Aries
    ARM: dts: at91: sama5d2_ptc_ek: fix vbus pin
    ARM: dts: exynos: Fix GPIO polarity for thr GalaxyS3 CM36651 sensor's bus
    ARM: tegra: Correct PL310 Auxiliary Control Register initialization
  * kernel/cpu_pm: Fix uninitted local in cpu_pm
      kernel/cpu_pm.c
    alpha: fix memory barriers so that they conform to the specification
    dm crypt: avoid truncating the logical block size
    sparc64: fix misuses of access_process_vm() in genregs32_[sg]et()
    sparc32: fix register window handling in genregs32_[gs]et()
    gnss: sirf: fix error return code in sirf_probe()
    pinctrl: samsung: Save/restore eint_mask over suspend for EINT_TYPE GPIOs
    pinctrl: samsung: Correct setting of eint wakeup mask on s5pv210
    power: vexpress: add suppress_bind_attrs to true
    igb: Report speed and duplex as unknown when device is runtime suspended
    media: ov5640: fix use of destroyed mutex
    b43_legacy: Fix connection problem with WPA3
    b43: Fix connection problem with WPA3
    b43legacy: Fix case where channel status is corrupted
    Bluetooth: hci_bcm: fix freeing not-requested IRQ
    media: go7007: fix a miss of snd_card_free
    carl9170: remove P2P_GO support
    e1000e: Relax condition to trigger reset for ME workaround
    e1000e: Disable TSO for buffer overrun workaround
  * PCI: Program MPS for RCiEP devices
      drivers/pci/probe.c
    ima: Call ima_calc_boot_aggregate() in ima_eventdigest_init()
    btrfs: fix wrong file range cleanup after an error filling dealloc range
    btrfs: fix error handling when submitting direct I/O bio
  * PCI: Generalize multi-function power dependency device links
      drivers/pci/quirks.c
  * PCI: Unify ACS quirk desired vs provided checking
      drivers/pci/quirks.c
  * PCI: Make ACS quirk implementations more uniform
      drivers/pci/quirks.c
  * serial: 8250_pci: Move Pericom IDs to pci_ids.h
      include/linux/pci_ids.h
  * PCI: Add Loongson vendor ID
      include/linux/pci_ids.h
  * x86/amd_nb: Add Family 19h PCI IDs
      include/linux/pci_ids.h
  * PCI: vmd: Add device id for VMD device 8086:9A0B
      include/linux/pci_ids.h
  * PCI: Add Amazon's Annapurna Labs vendor ID
      include/linux/pci_ids.h
  * PCI: Add Genesys Logic, Inc. Vendor ID
      include/linux/pci_ids.h
  * ALSA: lx6464es - add support for LX6464ESe pci express variant
      include/linux/pci_ids.h
  * x86/amd_nb: Add PCI device IDs for family 17h, model 70h
      include/linux/pci_ids.h
  * PCI: mediatek: Add controller support for MT7629
      include/linux/pci_ids.h
  * PCI: Enable NVIDIA HDA controllers
      drivers/pci/quirks.c
      include/linux/pci_ids.h
  * PCI: Add NVIDIA GPU multi-function power dependencies
      drivers/pci/quirks.c
  * PCI: Add Synopsys endpoint EDDA Device ID
      include/linux/pci_ids.h
    misc: pci_endpoint_test: Add support to test PCI EP in AM654x
    misc: pci_endpoint_test: Add the layerscape EP device support
  * PCI: Move Rohm Vendor ID to generic list
      include/linux/pci_ids.h
  * PCI: Move Synopsys HAPS platform device IDs
      drivers/usb/dwc3/dwc3-haps.c
      include/linux/pci_ids.h
  * PCI: add USR vendor id and use it in r8169 and w6692 driver
      include/linux/pci_ids.h
  * x86/amd_nb: Add PCI device IDs for family 17h, model 30h
      include/linux/pci_ids.h
  * hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs
      include/linux/pci_ids.h
  * pci:ipmi: Move IPMI PCI class id defines to pci_ids.h
      include/linux/pci_ids.h
  * PCI: Remove unused NFP32xx IDs
      include/linux/pci_ids.h
  * PCI: Add ACS quirk for Intel Root Complex Integrated Endpoints
      drivers/pci/quirks.c
  * PCI: Add ACS quirk for iProc PAXB
      drivers/pci/quirks.c
  * PCI: Avoid FLR for AMD Starship USB 3.0
      drivers/pci/quirks.c
  * PCI: Avoid FLR for AMD Matisse HD Audio & USB 3.0
      drivers/pci/quirks.c
  * PCI: Avoid Pericom USB controller OHCI/EHCI PME# defect
      drivers/pci/quirks.c
  * ext4: fix race between ext4_sync_parent() and rename()
      fs/ext4/fsync.c
  * ext4: fix error pointer dereference
      fs/ext4/xattr.c
  * ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max
      fs/ext4/ext4_extents.h
    evm: Fix possible memory leak in evm_calc_hmac_or_hash()
    ima: Directly assign the ima_default_policy pointer to ima_rules
    ima: Fix ima digest hash table key calculation
  * mm: initialize deferred pages with interrupts enabled
      include/linux/mmzone.h
      mm/page_alloc.c
    mm: thp: make the THP mapcount atomic against __split_huge_pmd_locked()
    btrfs: send: emit file capabilities after chown
    btrfs: include non-missing as a qualifier for the latest_bdev
  * string.h: fix incompatibility between FORTIFY_SOURCE and KASAN
      include/linux/string.h
    platform/x86: intel-vbtn: Only blacklist SW_TABLET_MODE on the 9 / "Laptop" chasis-type
    platform/x86: intel-hid: Add a quirk to support HP Spectre X2 (2015)
    platform/x86: hp-wmi: Convert simple_strtoul() to kstrtou32()
  * cpuidle: Fix three reference count leaks
      drivers/cpuidle/sysfs.c
    spi: dw: Return any value retrieved from the dma_transfer callback
    mmc: sdhci-esdhc-imx: fix the mask for tuning start point
    ixgbe: fix signed-integer-overflow warning
    mmc: via-sdmmc: Respect the cmd->busy_timeout from the mmc core
    staging: greybus: sdio: Respect the cmd->busy_timeout from the mmc core
    mmc: sdhci-msm: Set SDHCI_QUIRK_MULTIBLOCK_READ_ACMD12 quirk
    bcache: fix refcount underflow in bcache_device_free()
    MIPS: Fix IRQ tracing when call handle_fpe() and handle_msa_fpe()
  * PCI: Don't disable decoding when mmio_always_on is set
      drivers/pci/probe.c
    macvlan: Skip loopback packets in RX handler
    btrfs: qgroup: mark qgroup inconsistent if we're inherting snapshot to a new qgroup
    m68k: mac: Don't call via_flush_cache() on Mac IIfx
    x86/mm: Stop printing BRK addresses
    crypto: stm32/crc32 - fix multi-instance
    crypto: stm32/crc32 - fix run-time self test issue.
    crypto: stm32/crc32 - fix ext4 chksum BUG_ON()
    mips: Add udelay lpj numbers adjustment
    mips: MAAR: Use more precise address mask
    x86/boot: Correct relocation destination on old linkers
    mwifiex: Fix memory corruption in dump_station
    rtlwifi: Fix a double free in _rtl_usb_tx_urb_setup()
    net/mlx5e: IPoIB, Drop multicast packets that this interface sent
  * veth: Adjust hard_start offset on redirect XDP frames
      drivers/net/veth.c
    md: don't flush workqueue unconditionally in md_open
    mt76: avoid rx reorder buffer overflow
    net: qed*: Reduce RX and TX default ring count when running inside kdump kernel
    wcn36xx: Fix error handling path in 'wcn36xx_probe()'
    ath10k: Remove msdu from idr when management pkt send fails
    nvme: refine the Qemu Identify CNS quirk
    platform/x86: intel-vbtn: Also handle tablet-mode switch on "Detachable" and "Portable" chassis-types
    platform/x86: intel-vbtn: Do not advertise switches to userspace if they are not there
    platform/x86: intel-vbtn: Split keymap into buttons and switches parts
    platform/x86: intel-vbtn: Use acpi_evaluate_integer()
    xfs: fix duplicate verification from xfs_qm_dqflush()
    xfs: reset buffer write failure state on successful completion
  * kgdb: Fix spurious true from in_dbg_master()
      include/linux/kgdb.h
    mips: cm: Fix an invalid error code of INTVN_*_ERR
    MIPS: Truncate link address into 32bit for 32bit kernel
    Crypto/chcr: fix for ccm(aes) failed test
    xfs: clean up the error handling in xfs_swap_extents
    powerpc/spufs: fix copy_to_user while atomic
    net: allwinner: Fix use correct return type for ndo_start_xmit()
    media: cec: silence shift wrapping warning in __cec_s_log_addrs()
    net: lpc-enet: fix error return code in lpc_mii_init()
    drivers/perf: hisi: Fix typo in events attribute array
  * sched/core: Fix illegal RCU from offline CPUs
      include/linux/sched/mm.h
      kernel/cpu.c
      kernel/sched/core.c
  * exit: Move preemption fixup up, move blocking operations down
      kernel/exit.c
  * lib/mpi: Fix 64-bit MIPS build with Clang
      lib/mpi/longlong.h
    net: bcmgenet: set Rx mode before starting netif
    selftests/bpf: Fix memory leak in extract_build_id()
    netfilter: nft_nat: return EOPNOTSUPP if type or flags are not supported
  * audit: fix a net reference leak in audit_list_rules_send()
      kernel/audit.c
      kernel/audit.h
      kernel/auditfilter.c
    Bluetooth: btbcm: Add 2 missing models to subver tables
    MIPS: Make sparse_init() using top-down allocation
    media: platform: fcp: Set appropriate DMA parameters
    media: dvb: return -EREMOTEIO on i2c transfer failure.
  * audit: fix a net reference leak in audit_send_reply()
      kernel/audit.c
    dt-bindings: display: mediatek: control dpi pins mode to avoid leakage
    e1000: Distribute switch variables for initialization
    tools api fs: Make xxx__mountpoint() more scalable
    brcmfmac: fix wrong location to get firmware feature
  * staging: android: ion: use vmap instead of vm_map_ram
      drivers/staging/android/ion/ion_heap.c
    net: vmxnet3: fix possible buffer overflow caused by bad DMA value in vmxnet3_get_rss()
  * x86/kvm/hyper-v: Explicitly align hcall param for kvm_hyperv_exit
      include/uapi/linux/kvm.h
    spi: dw: Fix Rx-only DMA transfers
    mmc: meson-mx-sdio: trigger a soft reset after a timeout or CRC error
    batman-adv: Revert "disable ethtool link speed detection when auto negotiation off"
    ARM: 8978/1: mm: make act_mm() respect THREAD_SIZE
    btrfs: do not ignore error from btrfs_next_leaf() when inserting checksums
    clocksource: dw_apb_timer_of: Fix missing clockevent timers
    clocksource: dw_apb_timer: Make CPU-affiliation being optional
    spi: dw: Enable interrupts in accordance with DMA xfer mode
    kgdb: Prevent infinite recursive entries to the debugger
    kgdb: Disable WARN_CONSOLE_UNLOCKED for all kgdb
  * Bluetooth: Add SCO fallback for invalid LMP parameters error
      net/bluetooth/hci_event.c
    MIPS: Loongson: Build ATI Radeon GPU driver as module
    ixgbe: Fix XDP redirect on archs with PAGE_SIZE above 4K
  * arm64: insn: Fix two bugs in encoding 32-bit logical immediates
      arch/arm64/kernel/insn.c
    spi: dw: Zero DMA Tx and Rx configurations on stack
  * arm64: cacheflush: Fix KGDB trap detection
      arch/arm64/include/asm/cacheflush.h
    efi/libstub/x86: Work around LLVM ELF quirk build regression
    net: ena: fix error returning in ena_com_get_hash_function()
    net: atlantic: make hw_get_regs optional
    spi: pxa2xx: Apply CS clk quirk to BXT
    objtool: Ignore empty alternatives
    media: si2157: Better check for running tuner in init
  * crypto: ccp -- don't "select" CONFIG_DMADEVICES
      drivers/crypto/ccp/Kconfig
    drm: bridge: adv7511: Extend list of audio sample rates
    ACPI: GED: use correct trigger type field in _Exx / _Lxx handling
  * KVM: arm64: Synchronize sysreg state on injecting an AArch32 exception
      arch/arm64/include/asm/kvm_host.h
    xen/pvcalls-back: test for errors when calling backend_connect()
    mmc: sdio: Fix potential NULL pointer error in mmc_sdio_init_card()
    ARM: dts: at91: sama5d2_ptc_ek: fix sdmmc0 node description
    mmc: sdhci-msm: Clear tuning done flag while hs400 tuning
    agp/intel: Reinforce the barrier after GTT updates
  * perf: Add cond_resched() to task_function_call()
      kernel/events/core.c
  * fat: don't allow to mount if the FAT length == 0
      fs/fat/inode.c
  * mm/slub: fix a memory leak in sysfs_slab_add()
      mm/slub.c
    drm/vkms: Hold gem object while still in-use
  * Smack: slab-out-of-bounds in vsscanf
      security/smack/smackfs.c
    ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb
    ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb
    ath9k: Fix use-after-free Write in ath9k_htc_rx_msg
    ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx
    scsi: megaraid_sas: TM command refire leads to controller firmware crash
  * KVM: arm64: Make vcpu_cp1x() work on Big Endian hosts
      arch/arm64/include/asm/kvm_host.h
    KVM: MIPS: Fix VPN2_MASK definition for variable cpu_vmbits
    KVM: MIPS: Define KVM_ENTRYHI_ASID to cpu_asid_mask(&boot_cpu_data)
    KVM: nVMX: Consult only the "basic" exit reason when routing nested exit
    KVM: nSVM: leave ASID aside in copy_vmcb_control_area
    KVM: nSVM: fix condition for filtering async PF
    video: fbdev: w100fb: Fix a potential double free.
  * proc: Use new_inode not new_inode_pseudo
      fs/proc/inode.c
      fs/proc/self.c
      fs/proc/thread_self.c
  * ovl: initialize error in ovl_copy_xattr
      fs/overlayfs/copy_up.c
    selftests/net: in rxtimestamp getopt_long needs terminating null entry
    crypto: virtio: Fix dest length calculation in __virtio_crypto_skcipher_do_req()
    crypto: virtio: Fix src/dst scatterlist calculation in __virtio_crypto_skcipher_do_req()
    crypto: virtio: Fix use-after-free in virtio_crypto_skcipher_finalize_req()
    spi: pxa2xx: Fix runtime PM ref imbalance on probe error
    spi: pxa2xx: Balance runtime PM enable/disable on error
    spi: bcm2835: Fix controller unregister order
    spi: pxa2xx: Fix controller unregister order
  * spi: Fix controller unregister order
      drivers/spi/spi.c
  * spi: No need to assign dummy value in spi_unregister_controller()
      drivers/spi/spi.c
    x86/speculation: PR_SPEC_FORCE_DISABLE enforcement for indirect branches.
    x86/speculation: Avoid force-disabling IBPB based on STIBP and enhanced IBRS.
    x86/speculation: Add support for STIBP always-on preferred mode
    x86/speculation: Change misspelled STIPB to STIBP
    KVM: x86: only do L1TF workaround on affected processors
    KVM: x86/mmu: Consolidate "is MMIO SPTE" code
    kvm: x86: Fix L1TF mitigation for shadow MMU
  * KVM: x86: Fix APIC page invalidation race
      include/linux/kvm_host.h
  * x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned
      include/linux/set_memory.h
  * ALSA: pcm: disallow linking stream to itself
      sound/core/pcm_native.c
    crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated
  * PM: runtime: clk: Fix clk_pm_runtime_get() error path
      drivers/clk/clk.c
    spi: bcm-qspi: when tx/rx buffer is NULL set to 0
    spi: bcm2835aux: Fix controller unregister order
    spi: dw: Fix controller unregister order
    nilfs2: fix null pointer dereference at nilfs_segctor_do_construct()
  * cgroup, blkcg: Prepare some symbols for module and !CONFIG_CGROUP usages
      fs/fs-writeback.c
    ACPI: PM: Avoid using power resources if there are none for D0
    ACPI: GED: add support for _Exx / _Lxx handler methods
    ACPI: CPPC: Fix reference count leak in acpi_cppc_processor_probe()
    ACPI: sysfs: Fix reference count leak in acpi_sysfs_add_hotplug_profile()
  * ALSA: usb-audio: Add vendor, product and profile name for HP Thunderbolt Dock
      sound/usb/quirks-table.h
  * ALSA: usb-audio: Fix inconsistent card PM state after resume
      sound/usb/card.c
      sound/usb/usbaudio.h
    ALSA: hda/realtek - add a pintbl quirk for several Lenovo machines
    ALSA: es1688: Add the missed snd_card_free()
    efi/efivars: Add missing kobject_put() in sysfs entry creation error path
    x86/reboot/quirks: Add MacBook6,1 reboot quirk
    x86/speculation: Prevent rogue cross-process SSBD shutdown
    x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs
    x86_64: Fix jiffies ODR violation
    btrfs: tree-checker: Check level for leaves and nodes
  * aio: fix async fsync creds
      fs/aio.c
  * mm: add kvfree_sensitive() for freeing sensitive data objects
      include/linux/mm.h
      mm/util.c
      security/keys/internal.h
      security/keys/keyctl.c
    perf probe: Accept the instance number of kretprobe event
    x86/cpu/amd: Make erratum #1054 a legacy erratum
    RDMA/uverbs: Make the event_queue fds return POLLERR when disassociated
    ath9k_htc: Silence undersized packet warnings
    powerpc/xive: Clear the page tables for the ESB IO mapping
    drivers/net/ibmvnic: Update VNIC protocol version reporting
    Input: synaptics - add a second working PNP_ID for Lenovo T470s
  * sched/fair: Don't NUMA balance for kthreads
      kernel/sched/fair.c
    ARM: 8977/1: ptrace: Fix mask for thumb breakpoint hook
    Input: mms114 - fix handling of mms345l
    crypto: talitos - fix ECB and CBC algs ivsize
    btrfs: Detect unbalanced tree with empty leaf before crashing btree operations
    btrfs: merge btrfs_find_device and find_device
  * lib: Reduce user_access_begin() boundaries in strncpy_from_user() and strnlen_user()
      lib/strncpy_from_user.c
      lib/strnlen_user.c
    x86: uaccess: Inhibit speculation past access_ok() in user_access_begin()
    arch/openrisc: Fix issues with access_ok()
    Fix 'acccess_ok()' on alpha and SH
  * make 'user_access_begin()' do 'access_ok()'
      include/linux/uaccess.h
      kernel/compat.c
      kernel/exit.c
      lib/strncpy_from_user.c
      lib/strnlen_user.c
    selftests: bpf: fix use of undeclared RET_IF macro
  * tun: correct header offsets in napi frags mode
      drivers/net/tun.c
    vxlan: Avoid infinite loop when suppressing NS messages with invalid options
  * bridge: Avoid infinite loop when suppressing NS messages with invalid options
      net/bridge/br_arp_nd_proxy.c
    net_failover: fixed rollback in net_failover_open()
  * ipv6: fix IPV6_ADDRFORM operation logic
      net/ipv6/ipv6_sockglue.c
  * writeback: Drop I_DIRTY_TIME_EXPIRE
      fs/ext4/inode.c
      fs/fs-writeback.c
      include/linux/fs.h
      include/trace/events/writeback.h
  * writeback: Fix sync livelock due to b_dirty_time processing
      fs/fs-writeback.c
      include/trace/events/writeback.h
  * writeback: Avoid skipping inode writeback
      fs/fs-writeback.c
      include/linux/fs.h
  * writeback: Protect inode->i_io_list with inode->i_lock
      fs/fs-writeback.c
  * Revert "writeback: Avoid skipping inode writeback"
      fs/fs-writeback.c
      include/linux/fs.h
    ANDROID: gki_defconfig: increase vbus_draw to 500mA
  * fscrypt: remove stale definition
      include/linux/fscrypt.h
  * fs-verity: remove unnecessary extern keywords
      fs/verity/fsverity_private.h
      include/linux/fsverity.h
  * fs-verity: fix all kerneldoc warnings
      fs/verity/enable.c
      fs/verity/fsverity_private.h
      fs/verity/measure.c
      fs/verity/open.c
      fs/verity/signature.c
      fs/verity/verify.c
      include/linux/fsverity.h
  * fscrypt: add support for IV_INO_LBLK_32 policies
      fs/crypto/crypto.c
      fs/crypto/fscrypt_private.h
      fs/crypto/keyring.c
      fs/crypto/keysetup.c
      fs/crypto/policy.c
      include/uapi/linux/fscrypt.h
  * fscrypt: make test_dummy_encryption use v2 by default
      fs/crypto/policy.c
  * fscrypt: support test_dummy_encryption=v2
      fs/crypto/keysetup.c
      fs/crypto/policy.c
      fs/ext4/ext4.h
      fs/ext4/super.c
      fs/ext4/sysfs.c
      fs/f2fs/f2fs.h
      fs/f2fs/super.c
      fs/f2fs/sysfs.c
      include/linux/fscrypt.h
  * fscrypt: add fscrypt_add_test_dummy_key()
      fs/crypto/fscrypt_private.h
      fs/crypto/keyring.c
  * linux/parser.h: add include guards
      include/linux/parser.h
  * fscrypt: remove unnecessary extern keywords
      fs/crypto/fscrypt_private.h
      include/linux/fscrypt.h
  * fscrypt: name all function parameters
      include/linux/fscrypt.h
  * fscrypt: fix all kerneldoc warnings
      fs/crypto/crypto.c
      fs/crypto/fname.c
      fs/crypto/fscrypt_private.h
      fs/crypto/hooks.c
      fs/crypto/keysetup.c
      fs/crypto/policy.c
      include/linux/fscrypt.h
    ANDROID: Update the ABI
  * ANDROID: GKI: power: power-supply: Add POWER_SUPPLY_PROP_CHARGER_STATUS property
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: add dev to usb_gsi_request
      include/linux/usb/gadget.h
  * ANDROID: GKI: dma-buf: add dent_count to dma_buf
      include/linux/dma-buf.h
    Merge remote-tracking branch 'aosp/upstream-f2fs-stable-linux-4.19.y' into android-4.19-stable
    ANDROID: Update the ABI xml and whitelist
    ANDROID: GKI: update whitelist
  * ANDROID: extcon: Export symbol of `extcon_get_edev_name`
      drivers/extcon/extcon.c
      include/linux/extcon.h
  * ANDROID: kbuild: merge more sections with LTO
      scripts/module-lto.lds.S
  * UPSTREAM: timekeeping/vsyscall: Update VDSO data unconditionally
      arch/arm64/include/asm/vdso/vsyscall.h
      include/asm-generic/vdso/vsyscall.h
      kernel/time/vsyscall.c
  * ANDROID: GKI: Revert "genetlink: disallow subscribing to unknown mcast groups"
      net/netlink/genetlink.c
  * BACKPORT: usb: musb: Add support for MediaTek musb controller
      drivers/usb/musb/Kconfig
    UPSTREAM: usb: musb: Add musb_clearb/w() interface
    UPSTREAM: usb: musb: Add noirq type of dma create interface
    UPSTREAM: usb: musb: Add get/set toggle hooks
    UPSTREAM: dt-bindings: usb: musb: Add support for MediaTek musb controller
    Merge 4.19.128 into android-4.19-stable
  * FROMGIT: driver core: Remove unnecessary is_fwnode_dev variable in device_add()
      drivers/base/core.c
  * FROMGIT: driver core: Remove check in driver_deferred_probe_force_trigger()
      drivers/base/dd.c
  * FROMGIT: of: platform: Batch fwnode parsing when adding all top level devices
      drivers/of/platform.c
  * FROMGIT: BACKPORT: driver core: fw_devlink: Add support for batching fwnode parsing
      drivers/base/base.h
      drivers/base/core.c
      drivers/base/dd.c
      include/linux/fwnode.h
  * BACKPORT: driver core: Look for waiting consumers only for a fwnode's primary device
      drivers/base/core.c
  * BACKPORT: driver core: Add device links from fwnode only for the primary device
      drivers/base/core.c
Linux 4.19.128
    Revert "net/mlx5: Annotate mutex destroy for root ns"
  * uprobes: ensure that uprobe->offset and ->ref_ctr_offset are properly aligned
      kernel/events/uprobes.c
    x86/speculation: Add Ivy Bridge to affected list
    x86/speculation: Add SRBDS vulnerability and mitigation documentation
  * x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation
      drivers/base/cpu.c
    x86/cpu: Add 'table' argument to cpu_matches()
  * x86/cpu: Add a steppings field to struct x86_cpu_id
      include/linux/mod_devicetable.h
  * nvmem: qfprom: remove incorrect write support
      drivers/nvmem/qfprom.c
    CDC-ACM: heed quirk also in error handling
    staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK
    tty: hvc_console, fix crashes on parallel open/close
    vt: keyboard: avoid signed integer overflow in k_ascii
    usb: musb: Fix runtime PM imbalance on error
    usb: musb: start session in resume for host port
    iio: vcnl4000: Fix i2c swapped word reading.
    USB: serial: option: add Telit LE910C1-EUX compositions
    USB: serial: usb_wwan: do not resubmit rx urb on fatal errors
    USB: serial: qcserial: add DW5816e QDL support
  * net: check untrusted gso_size at kernel entry
      include/linux/virtio_net.h
    vsock: fix timeout in vsock_accept()
    NFC: st21nfca: add missed kfree_skb() in an error path
    net: usb: qmi_wwan: add Telit LE910C1-EUX composition
  * l2tp: do not use inet_hash()/inet_unhash()
      net/l2tp/l2tp_ip.c
      net/l2tp/l2tp_ip6.c
  * l2tp: add sk_family checks to l2tp_validate_socket
      net/l2tp/l2tp_core.c
  * devinet: fix memleak in inetdev_init()
      net/ipv4/devinet.c
  * Revert "ANDROID: Remove default y on BRIDGE_IGMP_SNOOPING"
      net/bridge/Kconfig
    ANDROID: Update the ABI xml and whitelist
    ANDROID: GKI: update whitelist
  * ANDROID: arch: arm64: vdso: export the symbols for time()
      arch/arm64/include/asm/vdso/compat_gettimeofday.h
      arch/arm64/include/asm/vdso/gettimeofday.h
      arch/arm64/kernel/vdso/vdso.lds.S
      arch/arm64/kernel/vdso/vgettimeofday.c
      arch/arm64/kernel/vdso32/vdso.lds.S
      arch/arm64/kernel/vdso32/vgettimeofday.c
  * ANDROID: Incremental fs: Remove dependency on PKCS7_MESSAGE_PARSER
      fs/incfs/Kconfig
      fs/incfs/integrity.c
    ANDROID: dm-bow: Add block_size option
  * f2fs: attach IO flags to the missing cases
      fs/f2fs/data.c
  * f2fs: add node_io_flag for bio flags likewise data_io_flag
      fs/f2fs/data.c
      fs/f2fs/f2fs.h
      fs/f2fs/sysfs.c
    f2fs: remove unused parameter of f2fs_put_rpages_mapping()
  * f2fs: handle readonly filesystem in f2fs_ioc_shutdown()
      fs/f2fs/file.c
  * f2fs: avoid utf8_strncasecmp() with unstable name
      fs/f2fs/dir.c
  * f2fs: don't return vmalloc() memory from f2fs_kmalloc()
      fs/f2fs/checkpoint.c
      fs/f2fs/f2fs.h
      fs/f2fs/node.c
      fs/f2fs/super.c
    ANDROID: GKI: set CONFIG_BLK_DEV_LOOP_MIN_COUNT to 16
  * ANDROID: Incremental fs: Cache successful hash calculations
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/vfs.c
  * ANDROID: Incremental fs: Fix four error-path bugs
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
    Merge 4.19.127 into android-4.19-stable
Linux 4.19.127
    net: smsc911x: Fix runtime PM imbalance on error
    net: ethernet: stmmac: Enable interface clocks on probe for IPQ806x
    net/ethernet/freescale: rework quiesce/activate for ucc_geth
    null_blk: return error for invalid zone size
    s390/mm: fix set_huge_pte_at() for empty ptes
  * drm/edid: Add Oculus Rift S to non-desktop list
      drivers/gpu/drm/drm_edid.c
    net: bmac: Fix read of MAC address from ROM
    x86/mmiotrace: Use cpumask_available() for cpumask_var_t variables
    i2c: altera: Fix race between xfer_msg and isr thread
    evm: Fix RCU list related warnings
    ARC: [plat-eznps]: Restrict to CONFIG_ISA_ARCOMPACT
    ARC: Fix ICCM & DCCM runtime size checks
    s390/ftrace: save traced function caller
    spi: dw: use "smp_mb()" to avoid sending spi data error
    powerpc/powernv: Avoid re-registration of imc debugfs directory
    scsi: hisi_sas: Check sas_port before using it
    drm/i915: fix port checks for MST support on gen >= 11
    airo: Fix read overflows sending packets
    net: dsa: mt7530: set CPU port to fallback mode
  * scsi: ufs: Release clock if DMA map fails
      drivers/scsi/ufs/ufshcd.c
  * mmc: fix compilation of user API
      include/uapi/linux/mmc/ioctl.h
    kernel/relay.c: handle alloc_percpu returning NULL in relay_open
    p54usb: add AirVasT USB stick device-id
    HID: i2c-hid: add Schneider SCL142ALM to descriptor override
  * HID: sony: Fix for broken buttons on DS3 USB dongles
      drivers/hid/hid-sony.c
  * mm: Fix mremap not considering huge pmd devmap
      mm/mremap.c
    libnvdimm: Fix endian conversion issues 
  * Revert "cgroup: Add memory barriers to plug cgroup_rstat_updated() race window"
      kernel/cgroup/rstat.c
  * f2fs: fix retry logic in f2fs_write_cache_pages()
      fs/f2fs/data.c
    ANDROID: Update ABI representation
    Merge 4.19.126 into android-4.19-stable
Linux 4.19.126
  * mm/vmalloc.c: don't dereference possible NULL pointer in __vunmap()
      mm/vmalloc.c
  * netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build
      include/linux/netfilter/nf_conntrack_pptp.h
      net/netfilter/nf_conntrack_pptp.c
  * bonding: Fix reference count leak in bond_sysfs_slave_add.
      drivers/net/bonding/bond_sysfs_slave.c
    crypto: chelsio/chtls: properly set tp->lsndtime
    qlcnic: fix missing release in qlcnic_83xx_interrupt_test.
    xsk: Add overflow check for u64 division, stored into u32
    bnxt_en: Fix accumulation of bp->net_stats_prev.
    esp6: get the right proto for transport mode in esp6_gso_encap
  * netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code
      include/linux/netfilter/nf_conntrack_pptp.h
      net/ipv4/netfilter/nf_nat_pptp.c
      net/netfilter/nf_conntrack_pptp.c
    netfilter: nfnetlink_cthelper: unbreak userspace helper support
    netfilter: ipset: Fix subcounter update skip
    netfilter: nft_reject_bridge: enable reject with bridge vlan
  * ip_vti: receive ipip packet by calling ip_tunnel_rcv
      net/ipv4/ip_vti.c
  * vti4: eliminated some duplicate code.
      net/ipv4/ip_vti.c
  * xfrm: fix error in comment
      include/uapi/linux/xfrm.h
  * xfrm: fix a NULL-ptr deref in xfrm_local_error
      net/xfrm/xfrm_output.c
  * xfrm: fix a warning in xfrm_policy_insert_list
      net/xfrm/xfrm_policy.c
  * xfrm interface: fix oops when deleting a x-netns interface
      net/xfrm/xfrm_interface.c
  * xfrm: call xfrm_output_gso when inner_protocol is set in xfrm_output
      net/xfrm/xfrm_output.c
  * xfrm: allow to accept packets with ipv6 NEXTHDR_HOP in xfrm_input
      net/xfrm/xfrm_input.c
    copy_xstate_to_kernel(): don't leave parts of destination uninitialized
    x86/dma: Fix max PFN arithmetic overflow on 32 bit systems
    mac80211: mesh: fix discovery timer re-arming issue / crash
  * RDMA/core: Fix double destruction of uobject
      include/rdma/uverbs_std_types.h
    mmc: core: Fix recursive locking issue in CQE recovery path
    parisc: Fix kernel panic in mem_init()
  * iommu: Fix reference count leak in iommu_group_alloc.
      drivers/iommu/iommu.c
  * include/asm-generic/topology.h: guard cpumask_of_node() macro argument
      include/asm-generic/topology.h
  * fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info()
      fs/binfmt_elf.c
  * mm: remove VM_BUG_ON(PageSlab()) from page_mapcount()
      include/linux/mm.h
    IB/ipoib: Fix double free of skb in case of multicast traffic in CM mode
    libceph: ignore pool overlay and cache logic on redirects
    ALSA: hda/realtek - Add new codec supported for ALC287
  * ALSA: usb-audio: Quirks for Gigabyte TRX40 Aorus Master onboard audio
      sound/usb/mixer_maps.c
      sound/usb/quirks-table.h
  * exec: Always set cap_ambient in cap_bprm_set_creds
      security/commoncap.c
  * ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC
      sound/usb/mixer.c
    ALSA: hda/realtek - Add a model for Thinkpad T570 without DAC workaround
  * ALSA: hwdep: fix a left shifting 1 by 31 UB bug
      sound/core/hwdep.c
    RDMA/pvrdma: Fix missing pci disable in pvrdma_pci_probe()
    mmc: block: Fix use-after-free issue for rpmb
    ARM: dts: bcm: HR2: Fix PPI interrupt types
    ARM: dts: bcm2835-rpi-zero-w: Fix led polarity
    ARM: dts/imx6q-bx50v3: Set display interface clock parents
    IB/qib: Call kobject_put() when kobject_init_and_add() fails
    gpio: exar: Fix bad handling for ida_simple_get error path
    ARM: uaccess: fix DACR mismatch with nested exceptions
    ARM: uaccess: integrate uaccess_save and uaccess_restore
    ARM: uaccess: consolidate uaccess asm to asm/uaccess-asm.h
    ARM: 8843/1: use unified assembler in headers
    ARM: 8970/1: decompressor: increase tag size
    Input: synaptics-rmi4 - fix error return code in rmi_driver_probe()
    Input: synaptics-rmi4 - really fix attn_data use-after-free
    Input: i8042 - add ThinkPad S230u to i8042 reset list
    Input: dlink-dir685-touchkeys - fix a typo in driver name
  * Input: xpad - add custom init packet for Xbox One S controllers
      drivers/input/joystick/xpad.c
  * Input: evdev - call input_flush_device() on release(), not flush()
      drivers/input/evdev.c
    Input: usbtouchscreen - add support for BonXeon TP
    samples: bpf: Fix build error
    cifs: Fix null pointer check in cifs_read
    riscv: stacktrace: Fix undefined reference to `walk_stackframe'
    IB/i40iw: Remove bogus call to netdev_master_upper_dev_get()
  * net: freescale: select CONFIG_FIXED_PHY where needed
      drivers/net/ethernet/freescale/Kconfig
      drivers/net/ethernet/freescale/dpaa/Kconfig
    usb: gadget: legacy: fix redundant initialization warnings
    usb: dwc3: pci: Enable extcon driver for Intel Merrifield
    cachefiles: Fix race between read_waiter and read_copier involving op->to_do
    gfs2: move privileged user check to gfs2_quota_lock_check
    net: microchip: encx24j600: add missed kthread_stop
  * ALSA: usb-audio: add mapping for ASRock TRX40 Creator
      sound/usb/mixer_maps.c
      sound/usb/quirks-table.h
    gpio: tegra: mask GPIO IRQs during IRQ shutdown
    ARM: dts: rockchip: fix pinctrl sub nodename for spi in rk322x.dtsi
    ARM: dts: rockchip: swap clock-names of gpu nodes
    arm64: dts: rockchip: swap interrupts interrupt-names rk3399 gpu node
    arm64: dts: rockchip: fix status for &gmac2phy in rk3328-evb.dts
    ARM: dts: rockchip: fix phy nodename for rk3228-evb
    mlxsw: spectrum: Fix use-after-free of split/unsplit/type_set in case reload fails
    net/mlx4_core: fix a memory leak bug.
    net: sun: fix missing release regions in cas_init_one().
    net/mlx5: Annotate mutex destroy for root ns
    net/mlx5e: Update netdev txq on completions during closure
  * sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed
      net/sctp/sm_statefuns.c
  * sctp: Don't add the shutdown timer if its already been added
      net/sctp/sm_sideeffect.c
  * r8152: support additional Microsoft Surface Ethernet Adapter variant
      drivers/net/usb/cdc_ether.c
      drivers/net/usb/r8152.c
  * net sched: fix reporting the first-time use timestamp
      include/net/act_api.h
  * net: revert "net: get rid of an signed integer overflow in ip_idents_reserve()"
      net/ipv4/route.c
  * net: qrtr: Fix passing invalid reference to qrtr_local_enqueue()
      net/qrtr/qrtr.c
  * net/mlx5: Add command entry handling completion
      include/linux/mlx5/driver.h
    net: ipip: fix wrong address family in init error path
  * net: inet_csk: Fix so_reuseport bind-address cache in tb->fast*
      net/ipv4/inet_connection_sock.c
  * __netif_receive_skb_core: pass skb by reference
      net/core/dev.c
    net: dsa: mt7530: fix roaming from DSA user ports
    dpaa_eth: fix usage as DSA master, try 3
    ax25: fix setsockopt(SO_BINDTODEVICE)
  * ANDROID: modules: fix lockprove warning
      kernel/module.c
    FROMGIT: USB: dummy-hcd: use configurable endpoint naming scheme
    UPSTREAM: usb: raw-gadget: fix null-ptr-deref when reenabling endpoints
    UPSTREAM: usb: raw-gadget: documentation updates
  * UPSTREAM: usb: raw-gadget: support stalling/halting/wedging endpoints
      include/uapi/linux/usb/raw_gadget.h
  * UPSTREAM: usb: raw-gadget: fix gadget endpoint selection
      include/uapi/linux/usb/raw_gadget.h
  * UPSTREAM: usb: raw-gadget: improve uapi headers comments
      include/uapi/linux/usb/raw_gadget.h
    UPSTREAM: usb: raw-gadget: fix return value of ep read ioctls
    UPSTREAM: usb: raw-gadget: fix raw_event_queue_fetch locking
    UPSTREAM: usb: raw-gadget: Fix copy_to/from_user() checks
  * f2fs: fix wrong discard space
      fs/f2fs/segment.c
    f2fs: compress: don't compress any datas after cp stop
  * f2fs: remove unneeded return value of __insert_discard_tree()
      fs/f2fs/segment.c
  * f2fs: fix wrong value of tracepoint parameter
      fs/f2fs/namei.c
  * f2fs: protect new segment allocation in expand_inode_data
      fs/f2fs/file.c
  * f2fs: code cleanup by removing ifdef macro surrounding
      fs/f2fs/file.c
      fs/f2fs/namei.c
      fs/f2fs/xattr.h
  * writeback: Avoid skipping inode writeback
      fs/fs-writeback.c
      include/linux/fs.h
    ANDROID: GKI: Update the ABI
    ANDROID: GKI: update whitelist
  * ANDROID: GKI: support mm_event for FS/IO/UFS path
      include/linux/blk_types.h
      include/linux/mm_event.h
      mm/mm_event.c
  * ANDROID: net: bpf: permit redirect from ingress L3 to egress L2 devices at near max mtu
      net/core/filter.c
  * FROMGIT: driver core: Update device link status correctly for SYNC_STATE_ONLY links
      drivers/base/core.c
  * UPSTREAM: driver core: Fix handling of SYNC_STATE_ONLY + STATELESS device links
      drivers/base/core.c
  * BACKPORT: driver core: Fix SYNC_STATE_ONLY device link implementation
      drivers/base/core.c
    ANDROID: Bulk update the ABI xml and qcom whitelist
  * Revert "ANDROID: Incremental fs: Avoid continually recalculating hashes"
      fs/incfs/data_mgmt.c
  * f2fs: avoid inifinite loop to wait for flushing node pages at cp_error
      fs/f2fs/node.c
    f2fs: compress: fix zstd data corruption
  * f2fs: add compressed/gc data read IO stat
      fs/f2fs/data.c
      fs/f2fs/f2fs.h
      fs/f2fs/gc.c
      fs/f2fs/sysfs.c
      include/trace/events/f2fs.h
  * f2fs: fix potential use-after-free issue
      fs/f2fs/data.c
  * f2fs: compress: don't handle non-compressed data in workqueue
      fs/f2fs/data.c
  * f2fs: remove redundant assignment to variable err
      fs/f2fs/namei.c
  * f2fs: refactor resize_fs to avoid meta updates in progress
      fs/f2fs/checkpoint.c
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
      fs/f2fs/gc.c
      fs/f2fs/super.c
      include/trace/events/f2fs.h
  * f2fs: use round_up to enhance calculation
      fs/f2fs/file.c
  * f2fs: introduce F2FS_IOC_RESERVE_COMPRESS_BLOCKS
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
  * f2fs: Avoid double lock for cp_rwsem during checkpoint
      fs/f2fs/checkpoint.c
      fs/f2fs/f2fs.h
      fs/f2fs/node.c
  * f2fs: report delalloc reserve as non-free in statfs for project quota
      fs/f2fs/super.c
  * f2fs: Fix wrong stub helper update_sit_info
      fs/f2fs/f2fs.h
    f2fs: compress: let lz4 compressor handle output buffer budget properly
  * f2fs: remove blk_plugging in block_operations
      fs/f2fs/checkpoint.c
  * f2fs: introduce F2FS_IOC_RELEASE_COMPRESS_BLOCKS
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
  * f2fs: shrink spinlock coverage
      fs/f2fs/node.c
      fs/f2fs/node.h
  * f2fs: correctly fix the parent inode number during fsync()
      fs/f2fs/file.c
  * f2fs: introduce mempool for {,de}compress intermediate page allocation
      fs/f2fs/f2fs.h
      fs/f2fs/super.c
  * f2fs: introduce f2fs_bmap_compress()
      fs/f2fs/data.c
  * f2fs: support fiemap on compressed inode
      fs/f2fs/data.c
  * f2fs: support partial truncation on compressed inode
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
  * f2fs: remove redundant compress inode check
      fs/f2fs/f2fs.h
  * f2fs: use strcmp() in parse_options()
      fs/f2fs/super.c
  * f2fs: Use the correct style for SPDX License Identifier
      fs/f2fs/acl.h
      fs/f2fs/f2fs.h
      fs/f2fs/gc.h
      fs/f2fs/node.h
      fs/f2fs/segment.h
      fs/f2fs/trace.h
      fs/f2fs/xattr.h

Change-Id: I2a678a32a4d72309fd00887a7ac56241293304a9
Signed-off-by: lucaswei <lucaswei@google.com>
2020-10-27 15:33:35 +08:00
Peilin Ye
43198a5b1c fbcon: Fix global-out-of-bounds read in fbcon_get_font()
commit 5af08640795b2b9a940c9266c0260455377ae262 upstream.

fbcon_get_font() is reading out-of-bounds. A malicious user may resize
`vc->vc_font.height` to a large value, causing fbcon_get_font() to
read out of `fontdata`.

fbcon_get_font() handles both built-in and user-provided fonts.
Fortunately, recently we have added FONT_EXTRA_WORDS support for built-in
fonts, so fix it by adding range checks using FNTSIZE().

This patch depends on patch "fbdev, newport_con: Move FONT_EXTRA_WORDS
macros into linux/font.h", and patch "Fonts: Support FONT_EXTRA_WORDS
macros for built-in fonts".

Cc: stable@vger.kernel.org
Reported-and-tested-by: syzbot+29d4ed7f3bdedf2aa2fd@syzkaller.appspotmail.com
Link: https://syzkaller.appspot.com/bug?id=08b8be45afea11888776f897895aef9ad1c3ecfd
Signed-off-by: Peilin Ye <yepeilin.cs@gmail.com>
Reviewed-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/b34544687a1a09d6de630659eb7a773f4953238b.1600953813.git.yepeilin.cs@gmail.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-10-14 10:31:21 +02:00
Peilin Ye
7b9eaa7241 fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h
commit bb0890b4cd7f8203e3aa99c6d0f062d6acdaad27 upstream.

drivers/video/console/newport_con.c is borrowing FONT_EXTRA_WORDS macros
from drivers/video/fbdev/core/fbcon.h. To keep things simple, move all
definitions into <linux/font.h>.

Since newport_con now uses four extra words, initialize the fourth word in
newport_set_font() properly.

Cc: stable@vger.kernel.org
Signed-off-by: Peilin Ye <yepeilin.cs@gmail.com>
Reviewed-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/7fb8bc9b0abc676ada6b7ac0e0bd443499357267.1600953813.git.yepeilin.cs@gmail.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-10-14 10:31:21 +02:00
Tetsuo Handa
76fe92986c fbcon: Fix user font detection test at fbcon_resize().
[ Upstream commit ec0972adecb391a8d8650832263a4790f3bfb4df ]

syzbot is reporting OOB read at fbcon_resize() [1], for
commit 39b3cffb8cf31117 ("fbcon: prevent user font height or width change
 from causing potential out-of-bounds access") is by error using
registered_fb[con2fb_map[vc->vc_num]]->fbcon_par->p->userfont (which was
set to non-zero) instead of fb_display[vc->vc_num].userfont (which remains
zero for that display).

We could remove tricky userfont flag [2], for we can determine it by
comparing address of the font data and addresses of built-in font data.
But since that commit is failing to fix the original OOB read [3], this
patch keeps the change minimal in case we decide to revert altogether.

[1] https://syzkaller.appspot.com/bug?id=ebcbbb6576958a496500fee9cf7aa83ea00b5920
[2] https://syzkaller.appspot.com/text?tag=Patch&x=14030853900000
[3] https://syzkaller.appspot.com/bug?id=6fba8c186d97cf1011ab17660e633b1cc4e080c9

Reported-by: syzbot <syzbot+b38b1ef6edf0c74a8d97@syzkaller.appspotmail.com>
Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Fixes: 39b3cffb8cf31117 ("fbcon: prevent user font height or width change from causing potential out-of-bounds access")
Cc: George Kennedy <george.kennedy@oracle.com>
Link: https://lore.kernel.org/r/f6e3e611-8704-1263-d163-f52c906a4f06@I-love.SAKURA.ne.jp
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-09-23 12:11:00 +02:00
Srinivasarao P
90264576e2 Merge android-4.19-stable.125 (a483478) into msm-4.19
* refs/heads/tmp-a483478:
  UPSTREAM: arm64: vdso: Build vDSO with -ffixed-x18
  Revert "drm/dsi: Fix byte order of DCS set/get brightness"
  Reverting below patches from android-4.19-stable.125
  Linux 4.19.125
  rxrpc: Fix ack discard
  rxrpc: Trace discarded ACKs
  iio: adc: stm32-dfsdm: fix device used to request dma
  iio: adc: stm32-dfsdm: Use dma_request_chan() instead dma_request_slave_channel()
  iio: adc: stm32-adc: fix device used to request dma
  iio: adc: stm32-adc: Use dma_request_chan() instead dma_request_slave_channel()
  x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
  rxrpc: Fix a memory leak in rxkad_verify_response()
  rapidio: fix an error in get_user_pages_fast() error handling
  ipack: tpci200: fix error return code in tpci200_register()
  mei: release me_cl object reference
  misc: rtsx: Add short delay after exit from ASPM
  iio: dac: vf610: Fix an error handling path in 'vf610_dac_probe()'
  iio: sca3000: Remove an erroneous 'get_device()'
  staging: greybus: Fix uninitialized scalar variable
  staging: iio: ad2s1210: Fix SPI reading
  Revert "gfs2: Don't demote a glock until its revokes are written"
  brcmfmac: abort and release host after error
  tty: serial: qcom_geni_serial: Fix wrap around of TX buffer
  cxgb4/cxgb4vf: Fix mac_hlist initialization and free
  cxgb4: free mac_hlist properly
  net: bcmgenet: abort suspend on error
  net: bcmgenet: code movement
  Revert "net/ibmvnic: Fix EOI when running in XIVE mode"
  media: fdp1: Fix R-Car M3-N naming in debug message
  thunderbolt: Drop duplicated get_switch_at_route()
  staging: most: core: replace strcpy() by strscpy()
  libnvdimm/btt: Fix LBA masking during 'free list' population
  libnvdimm/btt: Remove unnecessary code in btt_freelist_init
  nfit: Add Hyper-V NVDIMM DSM command set to white list
  powerpc/64s: Disable STRICT_KERNEL_RWX
  powerpc: Remove STRICT_KERNEL_RWX incompatibility with RELOCATABLE
  drm/i915/gvt: Init DPLL/DDI vreg for virtual display instead of inheritance.
  dmaengine: owl: Use correct lock in owl_dma_get_pchan()
  dmaengine: tegra210-adma: Fix an error handling path in 'tegra_adma_probe()'
  apparmor: Fix aa_label refcnt leak in policy_update
  apparmor: fix potential label refcnt leak in aa_change_profile
  apparmor: Fix use-after-free in aa_audit_rule_init
  drm/etnaviv: fix perfmon domain interation
  ALSA: hda/realtek - Add more fixup entries for Clevo machines
  ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Xtreme
  ALSA: pcm: fix incorrect hw_base increase
  ALSA: iec1712: Initialize STDSP24 properly when using the model=staudio option
  padata: purge get_cpu and reorder_via_wq from padata_do_serial
  padata: initialize pd->cpu with effective cpumask
  padata: Replace delayed timer with immediate workqueue in padata_reorder
  ARM: futex: Address build warning
  platform/x86: asus-nb-wmi: Do not load on Asus T100TA and T200TA
  USB: core: Fix misleading driver bug report
  stmmac: fix pointer check after utilization in stmmac_interrupt
  ceph: fix double unlock in handle_cap_export()
  HID: quirks: Add HID_QUIRK_NO_INIT_REPORTS quirk for Dell K12A keyboard-dock
  gtp: set NLM_F_MULTI flag in gtp_genl_dump_pdp()
  x86/apic: Move TSC deadline timer debug printk
  HID: i2c-hid: reset Synaptics SYNA2393 on resume
  scsi: ibmvscsi: Fix WARN_ON during event pool release
  component: Silence bind error on -EPROBE_DEFER
  aquantia: Fix the media type of AQC100 ethernet controller in the driver
  vhost/vsock: fix packet delivery order to monitoring devices
  configfs: fix config_item refcnt leak in configfs_rmdir()
  scsi: qla2xxx: Delete all sessions before unregister local nvme port
  scsi: qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV
  HID: alps: ALPS_1657 is too specific; use U1_UNICORN_LEGACY instead
  HID: alps: Add AUI1657 device ID
  HID: multitouch: add eGalaxTouch P80H84 support
  gcc-common.h: Update for GCC 10
  ubi: Fix seq_file usage in detailed_erase_block_info debugfs file
  i2c: mux: demux-pinctrl: Fix an error handling path in 'i2c_demux_pinctrl_probe()'
  iommu/amd: Fix over-read of ACPI UID from IVRS table
  ubifs: remove broken lazytime support
  fix multiplication overflow in copy_fdtable()
  mtd: spinand: Propagate ECC information to the MTD structure
  ima: Fix return value of ima_write_policy()
  evm: Check also if *tfm is an error pointer in init_desc()
  ima: Set file->f_mode instead of file->f_flags in ima_calc_file_hash()
  riscv: set max_pfn to the PFN of the last page
  KVM: SVM: Fix potential memory leak in svm_cpu_init()
  i2c: dev: Fix the race between the release of i2c_dev and cdev
  ubsan: build ubsan.c more conservatively
  x86/uaccess, ubsan: Fix UBSAN vs. SMAP
  ANDROID: scsi: ufs: Handle clocks when lrbp fails
  ANDROID: fscrypt: handle direct I/O with IV_INO_LBLK_32
  BACKPORT: FROMLIST: fscrypt: add support for IV_INO_LBLK_32 policies
  ANDROID: Update the ABI xml and qcom whitelist
  ANDROID: Fix build.config.gki-debug
  Linux 4.19.124
  Makefile: disallow data races on gcc-10 as well
  KVM: x86: Fix off-by-one error in kvm_vcpu_ioctl_x86_setup_mce
  ARM: dts: r8a7740: Add missing extal2 to CPG node
  arm64: dts: renesas: r8a77980: Fix IPMMU VIP[01] nodes
  ARM: dts: r8a73a4: Add missing CMT1 interrupts
  arm64: dts: rockchip: Rename dwc3 device nodes on rk3399 to make dtc happy
  arm64: dts: rockchip: Replace RK805 PMIC node name with "pmic" on rk3328 boards
  clk: Unlink clock if failed to prepare or enable
  Revert "ALSA: hda/realtek: Fix pop noise on ALC225"
  usb: gadget: legacy: fix error return code in cdc_bind()
  usb: gadget: legacy: fix error return code in gncm_bind()
  usb: gadget: audio: Fix a missing error return value in audio_bind()
  usb: gadget: net2272: Fix a memory leak in an error handling path in 'net2272_plat_probe()'
  dwc3: Remove check for HWO flag in dwc3_gadget_ep_reclaim_trb_sg()
  clk: rockchip: fix incorrect configuration of rk3228 aclk_gpu* clocks
  exec: Move would_dump into flush_old_exec
  x86/unwind/orc: Fix error handling in __unwind_start()
  x86: Fix early boot crash on gcc-10, third try
  cifs: fix leaked reference on requeued write
  ARM: dts: imx27-phytec-phycard-s-rdk: Fix the I2C1 pinctrl entries
  ARM: dts: dra7: Fix bus_dma_limit for PCIe
  usb: xhci: Fix NULL pointer dereference when enqueuing trbs from urb sg list
  USB: gadget: fix illegal array access in binding with UDC
  usb: host: xhci-plat: keep runtime active when removing host
  usb: core: hub: limit HUB_QUIRK_DISABLE_AUTOSUSPEND to USB5534B
  ALSA: usb-audio: Add control message quirk delay for Kingston HyperX headset
  ALSA: rawmidi: Fix racy buffer resize under concurrent accesses
  ALSA: hda/realtek - Limit int mic boost for Thinkpad T530
  gcc-10: avoid shadowing standard library 'free()' in crypto
  gcc-10: disable 'restrict' warning for now
  gcc-10: disable 'stringop-overflow' warning for now
  gcc-10: disable 'array-bounds' warning for now
  gcc-10: disable 'zero-length-bounds' warning for now
  Stop the ad-hoc games with -Wno-maybe-initialized
  kbuild: compute false-positive -Wmaybe-uninitialized cases in Kconfig
  gcc-10 warnings: fix low-hanging fruit
  pnp: Use list_for_each_entry() instead of open coding
  hwmon: (da9052) Synchronize access with mfd
  IB/mlx4: Test return value of calls to ib_get_cached_pkey
  netfilter: nft_set_rbtree: Introduce and use nft_rbtree_interval_start()
  arm64: fix the flush_icache_range arguments in machine_kexec
  netfilter: conntrack: avoid gcc-10 zero-length-bounds warning
  NFSv4: Fix fscache cookie aux_data to ensure change_attr is included
  nfs: fscache: use timespec64 in inode auxdata
  NFS: Fix fscache super_cookie index_key from changing after umount
  mmc: block: Fix request completion in the CQE timeout path
  mmc: core: Check request type before completing the request
  i40iw: Fix error handling in i40iw_manage_arp_cache()
  pinctrl: cherryview: Add missing spinlock usage in chv_gpio_irq_handler
  pinctrl: baytrail: Enable pin configuration setting for GPIO chip
  gfs2: Another gfs2_walk_metadata fix
  ALSA: hda/realtek - Fix S3 pop noise on Dell Wyse
  ipc/util.c: sysvipc_find_ipc() incorrectly updates position index
  drm/qxl: lost qxl_bo_kunmap_atomic_page in qxl_image_init_helper()
  ALSA: hda/hdmi: fix race in monitor detection during probe
  cpufreq: intel_pstate: Only mention the BIOS disabling turbo mode once
  dmaengine: mmp_tdma: Reset channel error on release
  dmaengine: pch_dma.c: Avoid data race between probe and irq handler
  riscv: fix vdso build with lld
  tcp: fix SO_RCVLOWAT hangs with fat skbs
  net: tcp: fix rx timestamp behavior for tcp_recvmsg
  netprio_cgroup: Fix unlimited memory leak of v2 cgroups
  net: ipv4: really enforce backoff for redirects
  net: dsa: loop: Add module soft dependency
  hinic: fix a bug of ndo_stop
  virtio_net: fix lockdep warning on 32 bit
  tcp: fix error recovery in tcp_zerocopy_receive()
  Revert "ipv6: add mtu lock check in __ip6_rt_update_pmtu"
  pppoe: only process PADT targeted at local interfaces
  net: phy: fix aneg restart in phy_ethtool_set_eee
  netlabel: cope with NULL catmap
  net: fix a potential recursive NETDEV_FEAT_CHANGE
  mmc: sdhci-acpi: Add SDHCI_QUIRK2_BROKEN_64_BIT_DMA for AMDI0040
  scsi: sg: add sg_remove_request in sg_write
  virtio-blk: handle block_device_operations callbacks after hot unplug
  drop_monitor: work around gcc-10 stringop-overflow warning
  net: moxa: Fix a potential double 'free_irq()'
  net/sonic: Fix a resource leak in an error handling path in 'jazz_sonic_probe()'
  shmem: fix possible deadlocks on shmlock_user_lock
  net: dsa: Do not make user port errors fatal
  ANDROID: rtc: class: call hctosys in resource managed registration
  ANDROID: GKI: Update the ABI xml and whitelist
  ANDROID: power_supply: Add RTX power-supply property
  f2fs: flush dirty meta pages when flushing them
  f2fs: fix checkpoint=disable:%u%%
  f2fs: rework filename handling
  f2fs: split f2fs_d_compare() from f2fs_match_name()
  f2fs: don't leak filename in f2fs_try_convert_inline_dir()
  ANDROID: clang: update to 11.0.1
  FROMLIST: x86_64: fix jiffies ODR violation
  ANDROID: arm64: vdso: Fix removing SCS flags
  ANDROID: GKI: Update the ABI xml and whitelist
  ANDROID: Incremental fs: wake up log pollers less often
  ANDROID: Incremental fs: Fix scheduling while atomic error
  ANDROID: Incremental fs: Avoid continually recalculating hashes
  ANDROID: export: Disable symbol trimming on modules
  ANDROID: GKI: Update the ABI xml and whitelist
  ANDROID: fscrypt: set dun_bytes more precisely
  ANDROID: dm-default-key: set dun_bytes more precisely
  ANDROID: block: backport the ability to specify max_dun_bytes
  ANDROID: Revert "ANDROID: GKI: gki_defconfig: CONFIG_DM_DEFAULT_KEY=m"
  Linux 4.19.123
  ipc/mqueue.c: change __do_notify() to bypass check_kill_permission()
  scripts/decodecode: fix trapping instruction formatting
  objtool: Fix stack offset tracking for indirect CFAs
  netfilter: nf_osf: avoid passing pointer to local var
  netfilter: nat: never update the UDP checksum when it's 0
  x86/unwind/orc: Fix premature unwind stoppage due to IRET frames
  x86/unwind/orc: Fix error path for bad ORC entry type
  x86/unwind/orc: Prevent unwinding before ORC initialization
  x86/unwind/orc: Don't skip the first frame for inactive tasks
  x86/entry/64: Fix unwind hints in rewind_stack_do_exit()
  x86/entry/64: Fix unwind hints in kernel exit path
  x86/entry/64: Fix unwind hints in register clearing code
  batman-adv: Fix refcnt leak in batadv_v_ogm_process
  batman-adv: Fix refcnt leak in batadv_store_throughput_override
  batman-adv: Fix refcnt leak in batadv_show_throughput_override
  batman-adv: fix batadv_nc_random_weight_tq
  KVM: VMX: Mark RCX, RDX and RSI as clobbered in vmx_vcpu_run()'s asm blob
  KVM: VMX: Explicitly reference RCX as the vmx_vcpu pointer in asm blobs
  coredump: fix crash when umh is disabled
  staging: gasket: Check the return value of gasket_get_bar_index()
  mm/page_alloc: fix watchdog soft lockups during set_zone_contiguous()
  arm64: hugetlb: avoid potential NULL dereference
  KVM: arm64: Fix 32bit PC wrap-around
  KVM: arm: vgic: Fix limit condition when writing to GICD_I[CS]ACTIVER
  tracing: Add a vmalloc_sync_mappings() for safe measure
  USB: serial: garmin_gps: add sanity checking for data length
  USB: uas: add quirk for LaCie 2Big Quadra
  HID: usbhid: Fix race between usbhid_close() and usbhid_stop()
  sctp: Fix bundling of SHUTDOWN with COOKIE-ACK
  HID: wacom: Read HID_DG_CONTACTMAX directly for non-generic devices
  net: stricter validation of untrusted gso packets
  bnxt_en: Fix VF anti-spoof filter setup.
  bnxt_en: Improve AER slot reset.
  net/mlx5: Fix command entry leak in Internal Error State
  net/mlx5: Fix forced completion access non initialized command entry
  bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features().
  tipc: fix partial topology connection closure
  sch_sfq: validate silly quantum values
  sch_choke: avoid potential panic in choke_reset()
  net: usb: qmi_wwan: add support for DW5816e
  net_sched: sch_skbprio: add message validation to skbprio_change()
  net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc()
  net: macsec: preserve ingress frame ordering
  fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks
  dp83640: reverse arguments to list_add_tail
  vt: fix unicode console freeing with a common interface
  tracing/kprobes: Fix a double initialization typo
  USB: serial: qcserial: Add DW5816e support
  ANDROID: usb: gadget: Add missing inline qualifier to stub functions
  ANDROID: Drop ABI monitoring from KASAN build config
  ANDROID: Rename build.config.gki.arch_kasan
  ANDROID: GKI: Enable CONFIG_STATIC_USERMODEHELPER
  ANDROID: dm-default-key: Update key size for wrapped keys
  ANDROID: gki_defconfig: enable CONFIG_MMC_CRYPTO
  ANDROID: mmc: MMC crypto API
  ANDROID: GKI: Update the ABI xml and whitelist
  ANDROID: GKI: add missing exports for cam_smmu_api.ko
  Linux 4.19.122
  drm/atomic: Take the atomic toys away from X
  cgroup, netclassid: remove double cond_resched
  mac80211: add ieee80211_is_any_nullfunc()
  platform/x86: GPD pocket fan: Fix error message when temp-limits are out of range
  ALSA: hda: Match both PCI ID and SSID for driver blacklist
  hexagon: define ioremap_uc
  hexagon: clean up ioremap
  mfd: intel-lpss: Use devm_ioremap_uc for MMIO
  lib: devres: add a helper function for ioremap_uc
  drm/amdgpu: Fix oops when pp_funcs is unset in ACPI event
  sctp: Fix SHUTDOWN CTSN Ack in the peer restart case
  net: systemport: suppress warnings on failed Rx SKB allocations
  net: bcmgenet: suppress warnings on failed Rx SKB allocations
  lib/mpi: Fix building for powerpc with clang
  scripts/config: allow colons in option strings for sed
  s390/ftrace: fix potential crashes when switching tracers
  cifs: protect updating server->dstaddr with a spinlock
  ASoC: rsnd: Fix "status check failed" spam for multi-SSI
  ASoC: rsnd: Don't treat master SSI in multi SSI setup as parent
  net: stmmac: Fix sub-second increment
  net: stmmac: fix enabling socfpga's ptp_ref_clock
  wimax/i2400m: Fix potential urb refcnt leak
  drm/amdgpu: Correctly initialize thermal controller for GPUs with Powerplay table v0 (e.g Hawaii)
  ASoC: codecs: hdac_hdmi: Fix incorrect use of list_for_each_entry
  ASoC: rsnd: Fix HDMI channel mapping for multi-SSI mode
  ASoC: rsnd: Fix parent SSI start/stop in multi-SSI mode
  usb: dwc3: gadget: Properly set maxpacket limit
  ASoC: sgtl5000: Fix VAG power-on handling
  selftests/ipc: Fix test failure seen after initial test run
  ASoC: topology: Check return value of pcm_new_ver
  powerpc/pci/of: Parse unassigned resources
  vhost: vsock: kick send_pkt worker once device is started
  ANDROID: GKI: fix build warning on 32bits due to ASoC msm change
  ANDROID: GKI: fix build error on 32bits due to ASoC msm change
  ANDROID: GKI: update abi definition due to FAIR_GROUP_SCHED removal
  ANDROID: GKI: Remove FAIR_GROUP_SCHED
  ANDROID: GKI: BULK update ABI XML representation and qcom whitelist
  ANDROID: build.config.gki.aarch64: Enable WHITELIST_STRICT_MODE
  ANDROID: GKI: Update the ABI xml and qcom whitelist
  ANDROID: remove unused variable
  ANDROID: Drop ABI monitoring from KASAN build config
  Linux 4.19.121
  mmc: meson-mx-sdio: remove the broken ->card_busy() op
  mmc: meson-mx-sdio: Set MMC_CAP_WAIT_WHILE_BUSY
  mmc: sdhci-msm: Enable host capabilities pertains to R1b response
  mmc: sdhci-pci: Fix eMMC driver strength for BYT-based controllers
  mmc: sdhci-xenon: fix annoying 1.8V regulator warning
  mmc: cqhci: Avoid false "cqhci: CQE stuck on" by not open-coding timeout loop
  btrfs: transaction: Avoid deadlock due to bad initialization timing of fs_info::journal_info
  btrfs: fix partial loss of prealloc extent past i_size after fsync
  selinux: properly handle multiple messages in selinux_netlink_send()
  dmaengine: dmatest: Fix iteration non-stop logic
  nfs: Fix potential posix_acl refcnt leak in nfs3_set_acl
  ALSA: opti9xx: shut up gcc-10 range warning
  iommu/amd: Fix legacy interrupt remapping for x2APIC-enabled system
  scsi: target/iblock: fix WRITE SAME zeroing
  iommu/qcom: Fix local_base status check
  vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn()
  vfio: avoid possible overflow in vfio_iommu_type1_pin_pages
  RDMA/core: Fix race between destroy and release FD object
  RDMA/core: Prevent mixed use of FDs between shared ufiles
  RDMA/mlx4: Initialize ib_spec on the stack
  RDMA/mlx5: Set GRH fields in query QP on RoCE
  scsi: qla2xxx: check UNLOADING before posting async work
  scsi: qla2xxx: set UNLOADING before waiting for session deletion
  dm multipath: use updated MPATHF_QUEUE_IO on mapping for bio-based mpath
  dm writecache: fix data corruption when reloading the target
  dm verity fec: fix hash block number in verity_fec_decode
  PM: hibernate: Freeze kernel threads in software_resume()
  PM: ACPI: Output correct message on target power state
  ALSA: pcm: oss: Place the plugin buffer overflow checks correctly
  ALSA: hda/hdmi: fix without unlocked before return
  ALSA: usb-audio: Correct a typo of NuPrime DAC-10 USB ID
  ALSA: hda/realtek - Two front mics on a Lenovo ThinkCenter
  btrfs: fix block group leak when removing fails
  drm/qxl: qxl_release use after free
  drm/qxl: qxl_release leak in qxl_hw_surface_alloc()
  drm/qxl: qxl_release leak in qxl_draw_dirty_fb()
  drm/edid: Fix off-by-one in DispID DTD pixel clock
  ANDROID: GKI: Bulk update ABI XML representation
  ANDROID: GKI: Enable net testing options
  ANDROID: gki_defconfig: Enable CONFIG_REMOTEPROC
  ANDROID: Rename build.config.gki.arch_kasan
  ANDROID: GKI: Update ABI for IOMMU
  ANDROID: Incremental fs: Fix issues with very large files
  ANDROID: Correct build.config branch name
  ANDROID: GKI: Bulk update ABI XML representation and whitelist.
  UPSTREAM: vdso: Fix clocksource.h macro detection
  ANDROID: GKI: update abi definition due to added padding
  ANDROID: GKI: networking: add Android ABI padding to a lot of networking structures
  ANDROID: GKI: dma-mapping.h: add Android ABI padding to a structure
  ANDROID: GKI: ioport.h: add Android ABI padding to a structure
  ANDROID: GKI: iomap.h: add Android ABI padding to a structure
  ANDROID: GKI: genhd.h: add Android ABI padding to some structures
  ANDROID: GKI: hrtimer.h: add Android ABI padding to a structure
  ANDROID: GKI: ethtool.h: add Android ABI padding to a structure
  ANDROID: GKI: sched: add Android ABI padding to some structures
  ANDROID: GKI: kernfs.h: add Android ABI padding to some structures
  ANDROID: GKI: kobject.h: add Android ABI padding to some structures
  ANDROID: GKI: mm.h: add Android ABI padding to a structure
  ANDROID: GKI: mmu_notifier.h: add Android ABI padding to some structures
  ANDROID: GKI: pci: add Android ABI padding to some structures
  ANDROID: GKI: irqdomain.h: add Android ABI padding to a structure
  ANDROID: GKI: blk_types.h: add Android ABI padding to a structure
  ANDROID: GKI: scsi.h: add Android ABI padding to a structure
  ANDROID: GKI: quota.h: add Android ABI padding to some structures
  ANDROID: GKI: timer.h: add Android ABI padding to a structure
  ANDROID: GKI: user_namespace.h: add Android ABI padding to a structure
  FROMGIT: f2fs: fix missing check for f2fs_unlock_op
  Linux 4.19.120
  propagate_one(): mnt_set_mountpoint() needs mount_lock
  ext4: check for non-zero journal inum in ext4_calculate_overhead
  qed: Fix use after free in qed_chain_free
  bpf, x86_32: Fix clobbering of dst for BPF_JSET
  hwmon: (jc42) Fix name to have no illegal characters
  ext4: convert BUG_ON's to WARN_ON's in mballoc.c
  ext4: increase wait time needed before reuse of deleted inode numbers
  ext4: use matching invalidatepage in ext4_writepage
  arm64: Delete the space separator in __emit_inst
  ALSA: hda: call runtime_allow() for all hda controllers
  xen/xenbus: ensure xenbus_map_ring_valloc() returns proper grant status
  objtool: Support Clang non-section symbols in ORC dump
  objtool: Fix CONFIG_UBSAN_TRAP unreachable warnings
  scsi: target: tcmu: reset_ring should reset TCMU_DEV_BIT_BROKEN
  scsi: target: fix PR IN / READ FULL STATUS for FC
  ALSA: hda: Explicitly permit using autosuspend if runtime PM is supported
  ALSA: hda: Keep the controller initialization even if no codecs found
  xfs: fix partially uninitialized structure in xfs_reflink_remap_extent
  x86: hyperv: report value of misc_features
  net: fec: set GPR bit on suspend by DT configuration.
  bpf, x86: Fix encoding for lower 8-bit registers in BPF_STX BPF_B
  xfs: clear PF_MEMALLOC before exiting xfsaild thread
  mm: shmem: disable interrupt when acquiring info->lock in userfaultfd_copy path
  bpf, x86_32: Fix incorrect encoding in BPF_LDX zero-extension
  perf/core: fix parent pid/tid in task exit events
  net/mlx5: Fix failing fw tracer allocation on s390
  cpumap: Avoid warning when CONFIG_DEBUG_PER_CPU_MAPS is enabled
  ARM: dts: bcm283x: Disable dsi0 node
  PCI: Move Apex Edge TPU class quirk to fix BAR assignment
  PCI: Avoid ASMedia XHCI USB PME# from D0 defect
  svcrdma: Fix leak of svc_rdma_recv_ctxt objects
  svcrdma: Fix trace point use-after-free race
  xfs: acquire superblock freeze protection on eofblocks scans
  net/cxgb4: Check the return from t4_query_params properly
  rxrpc: Fix DATA Tx to disable nofrag for UDP on AF_INET6 socket
  i2c: altera: use proper variable to hold errno
  nfsd: memory corruption in nfsd4_lock()
  ASoC: wm8960: Fix wrong clock after suspend & resume
  ASoC: tas571x: disable regulators on failed probe
  ASoC: q6dsp6: q6afe-dai: add missing channels to MI2S DAIs
  iio:ad7797: Use correct attribute_group
  usb: gadget: udc: bdc: Remove unnecessary NULL checks in bdc_req_complete
  usb: dwc3: gadget: Do link recovery for SS and SSP
  binder: take read mode of mmap_sem in binder_alloc_free_page()
  include/uapi/linux/swab.h: fix userspace breakage, use __BITS_PER_LONG for swap
  mtd: cfi: fix deadloop in cfi_cmdset_0002.c do_write_buffer
  remoteproc: Fix wrong rvring index computation
  FROMLIST: PM / devfreq: Restart previous governor if new governor fails to start
  ANDROID: GKI: arm64: Enable GZIP and LZ4 kernel compression modes
  ANDROID: GKI: arm64: gki_defconfig: Set arm_smmu configuration
  ANDROID: GKI: iommu/arm-smmu: Modularize ARM SMMU driver
  ANDROID: GKI: iommu: Snapshot of vendor changes
  ANDROID: GKI: Additions to ARM SMMU register definitions
  ANDROID: GKI: iommu/io-pgtable-arm: LPAE related updates by vendor
  ANDROID: GKI: common: dma-mapping: make dma_common_contiguous_remap more robust
  ANDROID: GKI: dma-coherent: Expose device base address and size
  ANDROID: GKI: arm64: add support for NO_KERNEL_MAPPING and STRONGLY_ORDERED
  ANDROID: GKI: dma-mapping: Add dma_remap functions
  ANDROID: GKI: arm64: Support early fixup for CMA
  ANDROID: GKI: iommu: dma-mapping-fast: Fast ARMv7/v8 Long Descriptor Format
  ANDROID: GKI: arm64: dma-mapping: add support for IOMMU mapper
  ANDROID: GKI: add ARCH_NR_GPIO for ABI match
  ANDROID: GKI: kernel: Export symbol of `cpu_do_idle`
  ANDROID: GKI: kernel: Export symbols needed by msm_minidump.ko and minidump_log.ko (again)
  ANDROID: GKI: add missing exports for __flush_dcache_area
  ANDROID: GKI: arm64: Export caching APIs
  ANDROID: GKI: arm64: provide dma cache routines with same API as 32 bit
  ANDROID: gki_defconfig: add FORTIFY_SOURCE, remove SPMI_MSM_PMIC_ARB
  Revert "ANDROID: GKI: spmi: pmic-arb: don't enable SPMI_MSM_PMIC_ARB by default"
  ANDROID: GKI: update abi definitions after adding padding
  ANDROID: GKI: elevator: add Android ABI padding to some structures
  ANDROID: GKI: dentry: add Android ABI padding to some structures
  ANDROID: GKI: bio: add Android ABI padding to some structures
  ANDROID: GKI: scsi: add Android ABI padding to some structures
  ANDROID: GKI: ufs: add Android ABI padding to some structures
  ANDROID: GKI: workqueue.h: add Android ABI padding to some structures
  ANDROID: GKI: fs.h: add Android ABI padding to some structures
  ANDROID: GKI: USB: add Android ABI padding to some structures
  ANDROID: GKI: mm: add Android ABI padding to some structures
  ANDROID: GKI: mount.h: add Android ABI padding to some structures
  ANDROID: GKI: sched.h: add Android ABI padding to some structures
  ANDROID: GKI: sock.h: add Android ABI padding to some structures
  ANDROID: GKI: module.h: add Android ABI padding to some structures
  ANDROID: GKI: device.h: add Android ABI padding to some structures
  ANDROID: GKI: phy: add Android ABI padding to some structures
  ANDROID: GKI: add android_kabi.h
  ANDROID: ABI: update due to previous changes in the tree
  BACKPORT: sched/core: Fix reset-on-fork from RT with uclamp
  ANDROID: GKI: Add support for missing V4L2 symbols
  ANDROID: GKI: Bulk update ABI XML representation
  ANDROID: GKI: arm64: psci: Support for OS initiated scheme
  ANDROID: GKI: net: add counter for number of frames coalesced in GRO
  ANDROID: GKI: cfg80211: Include length of kek in rekey data
  BACKPORT: loop: change queue block size to match when using DIO
  ANDROID: Incremental fs: Add setattr call
  ANDROID: GKI: enable CONFIG_RTC_SYSTOHC
  ANDROID: GKI: ipv4: add vendor padding to __IPV4_DEVCONF_* enums
  Revert "ANDROID: GKI: ipv4: increase __IPV4_DEVCONF_MAX to 64"
  ANDROID: driver: gpu: drm: fix export symbol types
  ANDROID: SoC: core: fix export symbol type
  ANDROID: ufshcd-crypto: fix export symbol type
  ANDROID: GKI: drivers: mailbox: fix race resulting in multiple message submission
  ANDROID: GKI: arm64: gki_defconfig: Enable a few thermal configs
  Revert "ANDROID: GKI: add base.h include to match MODULE_VERSIONS"
  FROMLIST: thermal: Make cooling device trip point writable from sysfs
  ANDROID: GKI: drivers: thermal: cpu_cooling: Use CPU ID as cooling device ID
  ANDROID: GKI: PM / devfreq: Allow min freq to be 0
  ANDROID: GKI: arm64: gki_defconfig: Enable REGULATOR_PROXY_CONSUMER
  ANDROID: GKI: Bulk Update ABI XML representation
  ANDROID: KASAN support for GKI remove CONFIG_CC_WERROR
  ANDROID: KASAN support for GKI
  ANDROID: virt_wifi: fix export symbol types
  ANDROID: vfs: fix export symbol type
  ANDROID: vfs: fix export symbol types
  ANDROID: fscrypt: fix export symbol type
  ANDROID: cfi: fix export symbol types
  ANDROID: bpf: fix export symbol type
  Linux 4.19.119
  s390/mm: fix page table upgrade vs 2ndary address mode accesses
  xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT
  serial: sh-sci: Make sure status register SCxSR is read in correct sequence
  xhci: prevent bus suspend if a roothub port detected a over-current condition
  usb: f_fs: Clear OS Extended descriptor counts to zero in ffs_data_reset()
  usb: dwc3: gadget: Fix request completion check
  UAS: fix deadlock in error handling and PM flushing work
  UAS: no use logging any details in case of ENODEV
  cdc-acm: introduce a cool down
  cdc-acm: close race betrween suspend() and acm_softint
  staging: vt6656: Power save stop wake_up_count wrap around.
  staging: vt6656: Fix pairwise key entry save.
  staging: vt6656: Fix drivers TBTT timing counter.
  staging: vt6656: Fix calling conditions of vnt_set_bss_mode
  staging: vt6656: Don't set RCR_MULTICAST or RCR_BROADCAST by default.
  vt: don't use kmalloc() for the unicode screen buffer
  vt: don't hardcode the mem allocation upper bound
  staging: comedi: Fix comedi_device refcnt leak in comedi_open
  staging: comedi: dt2815: fix writing hi byte of analog output
  powerpc/setup_64: Set cache-line-size based on cache-block-size
  ARM: imx: provide v7_cpu_resume() only on ARM_CPU_SUSPEND=y
  iwlwifi: mvm: beacon statistics shouldn't go backwards
  iwlwifi: pcie: actually release queue memory in TVQM
  ASoC: dapm: fixup dapm kcontrol widget
  audit: check the length of userspace generated audit records
  usb-storage: Add unusual_devs entry for JMicron JMS566
  tty: rocket, avoid OOB access
  tty: hvc: fix buffer overflow during hvc_alloc().
  KVM: VMX: Enable machine check support for 32bit targets
  KVM: Check validity of resolved slot when searching memslots
  KVM: s390: Return last valid slot if approx index is out-of-bounds
  tpm: ibmvtpm: retry on H_CLOSED in tpm_ibmvtpm_send()
  tpm/tpm_tis: Free IRQ if probing fails
  ALSA: usb-audio: Filter out unsupported sample rates on Focusrite devices
  ALSA: usb-audio: Fix usb audio refcnt leak when getting spdif
  ALSA: hda/realtek - Add new codec supported for ALC245
  ALSA: hda/realtek - Fix unexpected init_amp override
  ALSA: usx2y: Fix potential NULL dereference
  tools/vm: fix cross-compile build
  mm/ksm: fix NULL pointer dereference when KSM zero page is enabled
  mm/hugetlb: fix a addressing exception caused by huge_pte_offset
  vmalloc: fix remap_vmalloc_range() bounds checks
  USB: hub: Fix handling of connect changes during sleep
  USB: core: Fix free-while-in-use bug in the USB S-Glibrary
  USB: early: Handle AMD's spec-compliant identifiers, too
  USB: Add USB_QUIRK_DELAY_CTRL_MSG and USB_QUIRK_DELAY_INIT for Corsair K70 RGB RAPIDFIRE
  USB: sisusbvga: Change port variable from signed to unsigned
  fs/namespace.c: fix mountpoint reference counter race
  iio: xilinx-xadc: Make sure not exceed maximum samplerate
  iio: xilinx-xadc: Fix sequencer configuration for aux channels in simultaneous mode
  iio: xilinx-xadc: Fix clearing interrupt when enabling trigger
  iio: xilinx-xadc: Fix ADC-B powerdown
  iio: adc: stm32-adc: fix sleep in atomic context
  iio: st_sensors: rely on odr mask to know if odr can be set
  iio: core: remove extra semi-colon from devm_iio_device_register() macro
  ALSA: usb-audio: Add connector notifier delegation
  ALSA: usb-audio: Add static mapping table for ALC1220-VB-based mobos
  ALSA: hda: Remove ASUS ROG Zenith from the blacklist
  KEYS: Avoid false positive ENOMEM error on key read
  mlxsw: Fix some IS_ERR() vs NULL bugs
  vrf: Check skb for XFRM_TRANSFORMED flag
  xfrm: Always set XFRM_TRANSFORMED in xfrm{4,6}_output_finish
  net: dsa: b53: b53_arl_rw_op() needs to select IVL or SVL
  net: dsa: b53: Rework ARL bin logic
  net: dsa: b53: Fix ARL register definitions
  net: dsa: b53: Lookup VID in ARL searches when VLAN is enabled
  vrf: Fix IPv6 with qdisc and xfrm
  team: fix hang in team_mode_get()
  tcp: cache line align MAX_TCP_HEADER
  sched: etf: do not assume all sockets are full blown
  net/x25: Fix x25_neigh refcnt leak when receiving frame
  net: stmmac: dwmac-meson8b: Add missing boundary to RGMII TX clock array
  net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node
  net: bcmgenet: correct per TX/RX ring statistics
  macvlan: fix null dereference in macvlan_device_event()
  macsec: avoid to set wrong mtu
  ipv6: fix restrict IPV6_ADDRFORM operation
  cxgb4: fix large delays in PTP synchronization
  cxgb4: fix adapter crash due to wrong MC size
  x86/KVM: Clean up host's steal time structure
  x86/KVM: Make sure KVM_VCPU_FLUSH_TLB flag is not missed
  x86/kvm: Cache gfn to pfn translation
  x86/kvm: Introduce kvm_(un)map_gfn()
  KVM: Properly check if "page" is valid in kvm_vcpu_unmap
  kvm: fix compile on s390 part 2
  kvm: fix compilation on s390
  kvm: fix compilation on aarch64
  KVM: Introduce a new guest mapping API
  KVM: nVMX: Always sync GUEST_BNDCFGS when it comes from vmcs01
  KVM: VMX: Zero out *all* general purpose registers after VM-Exit
  f2fs: fix to avoid memory leakage in f2fs_listxattr
  blktrace: fix dereference after null check
  blktrace: Protect q->blk_trace with RCU
  net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup
  net: ipv6: add net argument to ip6_dst_lookup_flow
  PCI/ASPM: Allow re-enabling Clock PM
  scsi: smartpqi: fix call trace in device discovery
  virtio-blk: improve virtqueue error to BLK_STS
  tracing/selftests: Turn off timeout setting
  drm/amd/display: Not doing optimize bandwidth if flip pending.
  xhci: Ensure link state is U3 after setting USB_SS_PORT_LS_U3
  ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN MPWIN895CL tablet
  perf/core: Disable page faults when getting phys address
  pwm: bcm2835: Dynamically allocate base
  pwm: renesas-tpu: Fix late Runtime PM enablement
  Revert "powerpc/64: irq_work avoid interrupt when called with hardware irqs enabled"
  loop: Better discard support for block devices
  s390/cio: avoid duplicated 'ADD' uevents
  kconfig: qconf: Fix a few alignment issues
  ipc/util.c: sysvipc_find_ipc() should increase position index
  selftests: kmod: fix handling test numbers above 9
  kernel/gcov/fs.c: gcov_seq_next() should increase position index
  nvme: fix deadlock caused by ANA update wrong locking
  ASoC: Intel: atom: Take the drv->lock mutex before calling sst_send_slot_map()
  scsi: iscsi: Report unbind session event when the target has been removed
  pwm: rcar: Fix late Runtime PM enablement
  ceph: don't skip updating wanted caps when cap is stale
  ceph: return ceph_mdsc_do_request() errors from __get_parent()
  scsi: lpfc: Fix crash in target side cable pulls hitting WAIT_FOR_UNREG
  scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login
  watchdog: reset last_hw_keepalive time at start
  arm64: Silence clang warning on mismatched value/register sizes
  arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space
  arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419
  arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419
  arm64: Add part number for Neoverse N1
  vti4: removed duplicate log message.
  crypto: mxs-dcp - make symbols 'sha1_null_hash' and 'sha256_null_hash' static
  bpftool: Fix printing incorrect pointer in btf_dump_ptr
  drm/msm: Use the correct dma_sync calls harder
  ext4: fix extent_status fragmentation for plain files
  ANDROID: abi_gki_aarch64_cuttlefish_whitelist: remove stale symbols
  ANDROID: GKI: ipv4: increase __IPV4_DEVCONF_MAX to 64
  ANDROID: GKI: power: add missing export for POWER_RESET_QCOM=m
  BACKPORT: cfg80211: Support key configuration for Beacon protection (BIGTK)
  BACKPORT: cfg80211: Enhance the AKM advertizement to support per interface.
  UPSTREAM: sysrq: Use panic() to force a crash
  ANDROID: GKI: kernel: sound: update codec options with block size
  ANDROID: add compat cross compiler
  ANDROID: x86/vdso: disable LTO only for VDSO
  BACKPORT: arm64: vdso32: Enable Clang Compilation
  UPSTREAM: arm64: compat: vdso: Expose BUILD_VDSO32
  BACKPORT: lib/vdso: Enable common headers
  BACKPORT: arm: vdso: Enable arm to use common headers
  BACKPORT: x86/vdso: Enable x86 to use common headers
  BACKPORT: mips: vdso: Enable mips to use common headers
  UPSTREAM: arm64: vdso32: Include common headers in the vdso library
  UPSTREAM: arm64: vdso: Include common headers in the vdso library
  UPSTREAM: arm64: Introduce asm/vdso/processor.h
  BACKPORT: arm64: vdso32: Code clean up
  UPSTREAM: linux/elfnote.h: Replace elf.h with UAPI equivalent
  UPSTREAM: scripts: Fix the inclusion order in modpost
  UPSTREAM: common: Introduce processor.h
  UPSTREAM: linux/ktime.h: Extract common header for vDSO
  UPSTREAM: linux/jiffies.h: Extract common header for vDSO
  UPSTREAM: linux/time64.h: Extract common header for vDSO
  BACKPORT: linux/time32.h: Extract common header for vDSO
  BACKPORT: linux/time.h: Extract common header for vDSO
  UPSTREAM: linux/math64.h: Extract common header for vDSO
  BACKPORT: linux/clocksource.h: Extract common header for vDSO
  BACKPORT: mips: Introduce asm/vdso/clocksource.h
  BACKPORT: arm64: Introduce asm/vdso/clocksource.h
  BACKPORT: arm: Introduce asm/vdso/clocksource.h
  BACKPORT: x86: Introduce asm/vdso/clocksource.h
  UPSTREAM: linux/limits.h: Extract common header for vDSO
  BACKPORT: linux/kernel.h: split *_MAX and *_MIN macros into <linux/limits.h>
  BACKPORT: linux/bits.h: Extract common header for vDSO
  UPSTREAM: linux/const.h: Extract common header for vDSO
  BACKPORT: arm64: vdso: fix flip/flop vdso build bug
  UPSTREAM: lib/vdso: Allow the high resolution parts to be compiled out
  UPSTREAM: lib/vdso: Only read hrtimer_res when needed in __cvdso_clock_getres()
  UPSTREAM: lib/vdso: Mark do_hres() and do_coarse() as __always_inline
  UPSTREAM: lib/vdso: Avoid duplication in __cvdso_clock_getres()
  UPSTREAM: lib/vdso: Let do_coarse() return 0 to simplify the callsite
  UPSTREAM: lib/vdso: Remove checks on return value for 32 bit vDSO
  UPSTREAM: lib/vdso: Build 32 bit specific functions in the right context
  UPSTREAM: lib/vdso: Make __cvdso_clock_getres() static
  UPSTREAM: lib/vdso: Make clock_getres() POSIX compliant again
  UPSTREAM: lib/vdso/32: Provide legacy syscall fallbacks
  UPSTREAM: lib/vdso: Move fallback invocation to the callers
  UPSTREAM: lib/vdso/32: Remove inconsistent NULL pointer checks
  UPSTREAM: lib/vdso: Make delta calculation work correctly
  UPSTREAM: arm64: compat: Fix syscall number of compat_clock_getres
  BACKPORT: arm64: lse: Fix LSE atomics with LLVM
  UPSTREAM: mips: Fix gettimeofday() in the vdso library
  UPSTREAM: mips: vdso: Fix __arch_get_hw_counter()
  BACKPORT: arm64: Kconfig: Make CONFIG_COMPAT_VDSO a proper Kconfig option
  UPSTREAM: arm64: vdso32: Rename COMPATCC to CC_COMPAT
  UPSTREAM: arm64: vdso32: Pass '--target' option to clang via VDSO_CAFLAGS
  UPSTREAM: arm64: vdso32: Don't use KBUILD_CPPFLAGS unconditionally
  UPSTREAM: arm64: vdso32: Move definition of COMPATCC into vdso32/Makefile
  UPSTREAM: arm64: Default to building compat vDSO with clang when CONFIG_CC_IS_CLANG
  UPSTREAM: lib: vdso: Remove CROSS_COMPILE_COMPAT_VDSO
  UPSTREAM: arm64: vdso32: Remove jump label config option in Makefile
  UPSTREAM: arm64: vdso32: Detect binutils support for dmb ishld
  BACKPORT: arm64: vdso: Remove stale files from old assembly implementation
  UPSTREAM: arm64: vdso32: Fix broken compat vDSO build warnings
  UPSTREAM: mips: compat: vdso: Use legacy syscalls as fallback
  BACKPORT: arm64: Relax Documentation/arm64/tagged-pointers.rst
  BACKPORT: arm64: Add tagged-address-abi.rst to index.rst
  UPSTREAM: arm64: vdso: Fix Makefile regression
  UPSTREAM: mips: vdso: Fix flip/flop vdso building bug
  UPSTREAM: mips: vdso: Fix source path
  UPSTREAM: mips: Add clock_gettime64 entry point
  UPSTREAM: mips: Add clock_getres entry point
  BACKPORT: mips: Add support for generic vDSO
  BACKPORT: arm64: vdso: Explicitly add build-id option
  BACKPORT: arm64: vdso: use $(LD) instead of $(CC) to link VDSO
  BACKPORT: arm64: vdso: Cleanup Makefiles
  UPSTREAM: arm64: vdso: Fix population of AT_SYSINFO_EHDR for compat vdso
  UPSTREAM: arm64: vdso: Fix compilation with clang older than 8
  UPSTREAM: arm64: compat: Fix __arch_get_hw_counter() implementation
  UPSTREAM: arm64: Fix __arch_get_hw_counter() implementation
  UPSTREAM: x86/vdso/32: Use 32bit syscall fallback
  UPSTREAM: x86/vdso: Fix flip/flop vdso build bug
  UPSTREAM: x86/vdso: Give the [ph]vclock_page declarations real types
  UPSTREAM: x86/vdso: Add clock_gettime64() entry point
  BACKPORT: x86/vdso: Add clock_getres() entry point
  BACKPORT: x86/vdso: Switch to generic vDSO implementation
  UPSTREAM: x86/segments: Introduce the 'CPUNODE' naming to better document the segment limit CPU/node NR trick
  UPSTREAM: x86/vdso: Initialize the CPU/node NR segment descriptor earlier
  UPSTREAM: x86/vdso: Introduce helper functions for CPU and node number
  UPSTREAM: x86/segments/64: Rename the GDT PER_CPU entry to CPU_NUMBER
  BACKPORT: arm64: vdso: Enable vDSO compat support
  UPSTREAM: arm64: compat: Get sigreturn trampolines from vDSO
  UPSTREAM: arm64: elf: VDSO code page discovery
  UPSTREAM: arm64: compat: VDSO setup for compat layer
  UPSTREAM: arm64: vdso: Refactor vDSO code
  BACKPORT: arm64: compat: Add vDSO
  UPSTREAM: arm64: compat: Generate asm offsets for signals
  UPSTREAM: arm64: compat: Expose signal related structures
  UPSTREAM: arm64: compat: Add missing syscall numbers
  BACKPORT: arm64: vdso: Substitute gettimeofday() with C implementation
  UPSTREAM: timekeeping: Provide a generic update_vsyscall() implementation
  UPSTREAM: lib/vdso: Add compat support
  UPSTREAM: lib/vdso: Provide generic VDSO implementation
  UPSTREAM: vdso: Define standardized vdso_datapage
  UPSTREAM: hrtimer: Split out hrtimer defines into separate header
  UPSTREAM: nds32: Fix vDSO clock_getres()
  UPSTREAM: arm64: compat: Reduce address limit for 64K pages
  BACKPORT: arm64: compat: Add KUSER_HELPERS config option
  UPSTREAM: arm64: compat: Refactor aarch32_alloc_vdso_pages()
  BACKPORT: arm64: compat: Split kuser32
  UPSTREAM: arm64: compat: Alloc separate pages for vectors and sigpage
  ANDROID: GKI: Update ABI XML representation
  ANDROID: GKI: Enable GENERIC_IRQ_CHIP
  ANDROID: GKI: power_supply: Add FG_TYPE power-supply property
  ANDROID: GKI: mm: export mm_trace_rss_stat for modules to report RSS changes
  ANDROID: GKI: gki_defconfig: Enable CONFIG_LEDS_TRIGGER_TRANSIENT
  ANDROID: GKI: gki_defconfig: Enable CONFIG_CPU_FREQ_STAT
  ANDROID: GKI: arm64: gki_defconfig: Disable HW tracing features
  ANDROID: GKI: gki_defconfig: Enable CONFIG_I2C_CHARDEV
  ANDROID: Incremental fs: Use simple compression in log buffer
  ANDROID: GKI: usb: core: Add support to parse config summary capability descriptors
  ANDROID: GKI: Update ABI XML representation
  ANDROID: dm-bow: Fix not to skip trim at framented range
  ANDROID: Remove VLA from uid_sys_stats.c
  f2fs: fix missing check for f2fs_unlock_op
  ANDROID: fix wakeup reason findings
  UPSTREAM: cfg80211: fix and clean up cfg80211_gen_new_bssid()
  UPSTREAM: cfg80211: save multi-bssid properties
  UPSTREAM: cfg80211: make BSSID generation function inline
  UPSTREAM: cfg80211: parse multi-bssid only if HW supports it
  UPSTREAM: cfg80211: Move Multiple BSS info to struct cfg80211_bss to be visible
  UPSTREAM: cfg80211: Properly track transmitting and non-transmitting BSS
  UPSTREAM: cfg80211: use for_each_element() for multi-bssid parsing
  UPSTREAM: cfg80211: Parsing of Multiple BSSID information in scanning
  UPSTREAM: cfg80211/nl80211: Offload OWE processing to user space in AP mode
  ANDROID: GKI: cfg80211: Sync nl80211 commands/feature with upstream
  ANDROID: GKI: gki_defconfig: Enable FW_LOADER_USER_HELPER*
  ANDROID: GKI: arm64: gki_defconfig: Disable CONFIG_ARM64_TAGGED_ADDR_ABI
  ANDROID: GKI: gki_defconfig: CONFIG_CHR_DEV_SG=y
  ANDROID: GKI: gki_defconfig: CONFIG_DM_DEFAULT_KEY=m
  ANDROID: update the ABI xml representation
  ANDROID: init: GKI: enable hidden configs for GPU
  Linux 4.19.118
  bpf: fix buggy r0 retval refinement for tracing helpers
  KEYS: Don't write out to userspace while holding key semaphore
  mtd: phram: fix a double free issue in error path
  mtd: lpddr: Fix a double free in probe()
  mtd: spinand: Explicitly use MTD_OPS_RAW to write the bad block marker to OOB
  locktorture: Print ratio of acquisitions, not failures
  tty: evh_bytechan: Fix out of bounds accesses
  iio: si1133: read 24-bit signed integer for measurement
  fbdev: potential information leak in do_fb_ioctl()
  net: dsa: bcm_sf2: Fix overflow checks
  f2fs: fix to wait all node page writeback
  iommu/amd: Fix the configuration of GCR3 table root pointer
  libnvdimm: Out of bounds read in __nd_ioctl()
  power: supply: axp288_fuel_gauge: Broaden vendor check for Intel Compute Sticks.
  ext2: fix debug reference to ext2_xattr_cache
  ext2: fix empty body warnings when -Wextra is used
  iommu/vt-d: Fix mm reference leak
  drm/vc4: Fix HDMI mode validation
  f2fs: fix NULL pointer dereference in f2fs_write_begin()
  NFS: Fix memory leaks in nfs_pageio_stop_mirroring()
  drm/amdkfd: kfree the wrong pointer
  x86: ACPI: fix CPU hotplug deadlock
  KVM: s390: vsie: Fix possible race when shadowing region 3 tables
  compiler.h: fix error in BUILD_BUG_ON() reporting
  percpu_counter: fix a data race at vm_committed_as
  include/linux/swapops.h: correct guards for non_swap_entry()
  cifs: Allocate encryption header through kmalloc
  um: ubd: Prevent buffer overrun on command completion
  ext4: do not commit super on read-only bdev
  s390/cpum_sf: Fix wrong page count in error message
  powerpc/maple: Fix declaration made after definition
  s390/cpuinfo: fix wrong output when CPU0 is offline
  NFS: direct.c: Fix memory leak of dreq when nfs_get_lock_context fails
  NFSv4/pnfs: Return valid stateids in nfs_layout_find_inode_by_stateid()
  rtc: 88pm860x: fix possible race condition
  soc: imx: gpc: fix power up sequencing
  clk: tegra: Fix Tegra PMC clock out parents
  power: supply: bq27xxx_battery: Silence deferred-probe error
  clk: at91: usb: continue if clk_hw_round_rate() return zero
  x86/Hyper-V: Report crash data in die() when panic_on_oops is set
  x86/Hyper-V: Report crash register data when sysctl_record_panic_msg is not set
  x86/Hyper-V: Trigger crash enlightenment only once during system crash.
  x86/Hyper-V: Free hv_panic_page when fail to register kmsg dump
  x86/Hyper-V: Unload vmbus channel in hv panic callback
  xsk: Add missing check on user supplied headroom size
  rbd: call rbd_dev_unprobe() after unwatching and flushing notifies
  rbd: avoid a deadlock on header_rwsem when flushing notifies
  video: fbdev: sis: Remove unnecessary parentheses and commented code
  lib/raid6: use vdupq_n_u8 to avoid endianness warnings
  x86/Hyper-V: Report crash register data or kmsg before running crash kernel
  of: overlay: kmemleak in dup_and_fixup_symbol_prop()
  of: unittest: kmemleak in of_unittest_overlay_high_level()
  of: unittest: kmemleak in of_unittest_platform_populate()
  of: unittest: kmemleak on changeset destroy
  ALSA: hda: Don't release card at firmware loading error
  irqchip/mbigen: Free msi_desc on device teardown
  netfilter: nf_tables: report EOPNOTSUPP on unsupported flags/object type
  ARM: dts: imx6: Use gpc for FEC interrupt controller to fix wake on LAN.
  arm, bpf: Fix bugs with ALU64 {RSH, ARSH} BPF_K shift by 0
  watchdog: sp805: fix restart handler
  ext4: use non-movable memory for superblock readahead
  scsi: sg: add sg_remove_request in sg_common_write
  objtool: Fix switch table detection in .text.unlikely
  arm, bpf: Fix offset overflow for BPF_MEM BPF_DW
  ANDROID: GKI: Bulk update ABI report.
  ANDROID: GKI: qos: Register irq notify after adding the qos request
  ANDROID: GKI: Add dual role mode to usb_dr_modes array
  UPSTREAM: virtio-gpu api: comment feature flags
  ANDROID: arch:arm64: Increase kernel command line size
  ANDROID: GKI: Add special linux_banner_ptr for modules
  Revert "ANDROID: GKI: Make linux_banner a C pointer"
  ANDROID: GKI: PM / devfreq: Add new flag to do simple clock scaling
  ANDROID: GKI: Resolve ABI diff for struct snd_usb_audio
  ANDROID: GKI: Bulk update ABI
  ANDROID: GKI: Update the whitelist for qcom SoCs
  ANDROID: GKI: arm64: gki_defconfig: Set CONFIG_SCSI_UFSHCD=m
  ANDROID: GKI: scsi: add option to override the command timeout
  ANDROID: GKI: scsi: Adjust DBD setting in mode sense for caching mode page per LLD
  ANDROID: add ion_stat tracepoint to common kernel
  UPSTREAM: gpu/trace: add a gpu total memory usage tracepoint
  Linux 4.19.117
  mm/vmalloc.c: move 'area->pages' after if statement
  wil6210: remove reset file from debugfs
  wil6210: make sure Rx ring sizes are correlated
  wil6210: add general initialization/size checks
  wil6210: ignore HALP ICR if already handled
  wil6210: check rx_buff_mgmt before accessing it
  x86/resctrl: Fix invalid attempt at removing the default resource group
  x86/resctrl: Preserve CDP enable over CPU hotplug
  x86/microcode/AMD: Increase microcode PATCH_MAX_SIZE
  scsi: target: fix hang when multiple threads try to destroy the same iscsi session
  scsi: target: remove boilerplate code
  kvm: x86: Host feature SSBD doesn't imply guest feature SPEC_CTRL_SSBD
  ext4: do not zeroout extents beyond i_disksize
  drm/amd/powerplay: force the trim of the mclk dpm_levels if OD is enabled
  usb: dwc3: gadget: Don't clear flags before transfer ended
  usb: dwc3: gadget: don't enable interrupt when disabling endpoint
  mac80211_hwsim: Use kstrndup() in place of kasprintf()
  btrfs: check commit root generation in should_ignore_root
  tracing: Fix the race between registering 'snapshot' event trigger and triggering 'snapshot' operation
  keys: Fix proc_keys_next to increase position index
  ALSA: usb-audio: Check mapping at creating connector controls, too
  ALSA: usb-audio: Don't create jack controls for PCM terminals
  ALSA: usb-audio: Don't override ignore_ctl_error value from the map
  ALSA: usb-audio: Filter error from connector kctl ops, too
  ASoC: Intel: mrfld: return error codes when an error occurs
  ASoC: Intel: mrfld: fix incorrect check on p->sink
  ext4: fix incorrect inodes per group in error message
  ext4: fix incorrect group count in ext4_fill_super error message
  pwm: pca9685: Fix PWM/GPIO inter-operation
  jbd2: improve comments about freeing data buffers whose page mapping is NULL
  scsi: ufs: Fix ufshcd_hold() caused scheduling while atomic
  ovl: fix value of i_ino for lower hardlink corner case
  net: dsa: mt7530: fix tagged frames pass-through in VLAN-unaware mode
  net: stmmac: dwmac-sunxi: Provide TX and RX fifo sizes
  net: revert default NAPI poll timeout to 2 jiffies
  net: qrtr: send msgs from local of same id as broadcast
  net: ipv6: do not consider routes via gateways for anycast address check
  net: ipv4: devinet: Fix crash when add/del multicast IP with autojoin
  hsr: check protocol version in hsr_newlink()
  amd-xgbe: Use __napi_schedule() in BH context
  ANDROID: GKI: drivers: of-thermal: Relate thermal zones using same sensor
  ANDROID: GKI: Bulk ABI update
  ANDROID: GKI: dma: Add set_dma_mask hook to struct dma_map_ops
  ANDROID: GKI: ABI update due to recent patches
  FROMLIST: drm/prime: add support for virtio exported objects
  FROMLIST: dma-buf: add support for virtio exported objects
  UPSTREAM: drm/virtio: module_param_named() requires linux/moduleparam.h
  UPSTREAM: drm/virtio: fix resource id creation race
  UPSTREAM: drm/virtio: make resource id workaround runtime switchable.
  BACKPORT: drm/virtio: Drop deprecated load/unload initialization
  ANDROID: GKI: Add DRM_TTM config to GKI
  ANDROID: Bulk update the ABI xml representation
  ANDROID: GKI: spmi: pmic-arb: don't enable SPMI_MSM_PMIC_ARB by default
  ANDROID: GKI: attribute page lock and waitqueue functions as sched
  ANDROID: GKI: extcon: Fix Add usage of blocking notifier chain
  ANDROID: GKI: USB: pd: Extcon fix for C current
  ANDROID: drm/dsi: Fix byte order of DCS set/get brightness
  ANDROID: GKI: mm: Export symbols to modularize CONFIG_MSM_DRM
  ANDROID: GKI: ALSA: compress: Add support to send codec specific data
  ANDROID: GKI: ALSA: Compress - dont use lock for all ioctls
  ANDROID: GKI: ASoC: msm: qdsp6v2: add support for AMR_WB_PLUS offload
  ANDROID: GKI: msm: dolby: MAT and THD audiocodec name modification
  ANDROID: GKI: asoc: msm: Add support for compressed perf mode
  ANDROID: GKI: msm: audio: support for gapless_pcm
  ANDROID: GKI: uapi: msm: dolby: Support for TrueHD and MAT decoders
  ANDROID: GKI: ASoC: msm: qdsp6v2: Add TrueHD HDMI compress pass-though
  ANDROID: GKI: ALSA: compress: Add APTX format support in ALSA
  ANDROID: GKI: msm: qdsp6v2: Add timestamp support for compress capture
  ANDROID: GKI: SoC: msm: Add support for meta data in compressed TX
  ANDROID: GKI: ALSA: compress: Add DSD format support for ALSA
  ANDROID: GKI: ASoC: msm: qdsp6v2: add support for ALAC and APE offload
  ANDROID: GKI: SoC: msm: Add compressed TX and passthrough support
  ANDROID: GKI: ASoC: msm: qdsp6v2: Add FLAC in compress offload path
  ANDROID: GKI: ASoC: msm: add support for different compressed formats
  ANDROID: GKI: ASoC: msm: Update the encode option and sample rate
  ANDROID: GKI: Enable CONFIG_SND_VERBOSE_PROCFS in gki_defconfig
  ANDROID: GKI: Add hidden CONFIG_SND_SOC_COMPRESS to gki_defconfig
  ANDROID: GKI: ALSA: pcm: add locks for accessing runtime resource
  ANDROID: GKI: Update ABI for DRM changes
  ANDROID: GKI: Add drm_dp_send_dpcd_{read,write} accessor functions
  ANDROID: GKI: drm: Add drm_dp_mst_get_max_sdp_streams_supported accessor function
  ANDROID: GKI: drm: Add drm_dp_mst_has_fec accessor function
  ANDROID: GKI: Add 'dsc_info' to struct drm_dp_mst_port
  ANDROID: GKI: usb: Add support to handle USB SMMU S1 address
  ANDROID: GKI: usb: Add helper APIs to return xhci phys addresses
  ANDROID: Add C protos for dma_buf/drm_prime get_uuid
  ANDROID: GKI: Make linux_banner a C pointer
  ANDROID: GKI: Add 'refresh_rate', 'id' to struct drm_panel_notifier
  ANDROID: GKI: Add 'i2c_mutex' to struct drm_dp_aux
  ANDROID: GKI: Add 'checksum' to struct drm_connector
  Revert "BACKPORT: drm: Add HDR source metadata property"
  Revert "BACKPORT: drm: Parse HDR metadata info from EDID"
  ANDROID: drm: Add DP colorspace property
  ANDROID: GKI: drm: Initialize display->hdmi when parsing vsdb
  ANDROID: drivers: gpu: drm: add support to batch commands
  ANDROID: ABI: update the qcom whitelist
  ANDROID: GKI: ARM64: smp: add vendor field pending_ipi
  ANDROID: gki_defconfig: enable msm serial early console
  ANDROID: serial: msm_geni_serial_console : Add Earlycon support
  ANDROID: GKI: serial: core: export uart_console_device
  f2fs: fix quota_sync failure due to f2fs_lock_op
  f2fs: support read iostat
  f2fs: Fix the accounting of dcc->undiscard_blks
  f2fs: fix to handle error path of f2fs_ra_meta_pages()
  f2fs: report the discard cmd errors properly
  f2fs: fix long latency due to discard during umount
  f2fs: add tracepoint for f2fs iostat
  f2fs: introduce sysfs/data_io_flag to attach REQ_META/FUA
  ANDROID: GKI: update abi definition due to previous changes in the tree
  Linux 4.19.116
  efi/x86: Fix the deletion of variables in mixed mode
  mfd: dln2: Fix sanity checking for endpoints
  etnaviv: perfmon: fix total and idle HI cyleces readout
  misc: echo: Remove unnecessary parentheses and simplify check for zero
  powerpc/fsl_booke: Avoid creating duplicate tlb1 entry
  ftrace/kprobe: Show the maxactive number on kprobe_events
  drm: Remove PageReserved manipulation from drm_pci_alloc
  drm/dp_mst: Fix clearing payload state on topology disable
  Revert "drm/dp_mst: Remove VCPI while disabling topology mgr"
  crypto: ccree - only try to map auth tag if needed
  crypto: ccree - dec auth tag size from cryptlen map
  crypto: ccree - don't mangle the request assoclen
  crypto: ccree - zero out internal struct before use
  crypto: ccree - improve error handling
  crypto: caam - update xts sector size for large input length
  dm zoned: remove duplicate nr_rnd_zones increase in dmz_init_zone()
  btrfs: use nofs allocations for running delayed items
  powerpc: Make setjmp/longjmp signature standard
  powerpc: Add attributes for setjmp/longjmp
  scsi: mpt3sas: Fix kernel panic observed on soft HBA unplug
  powerpc/kprobes: Ignore traps that happened in real mode
  powerpc/xive: Use XIVE_BAD_IRQ instead of zero to catch non configured IPIs
  powerpc/hash64/devmap: Use H_PAGE_THP_HUGE when setting up huge devmap PTE entries
  powerpc/64/tm: Don't let userspace set regs->trap via sigreturn
  powerpc/powernv/idle: Restore AMR/UAMOR/AMOR after idle
  xen/blkfront: fix memory allocation flags in blkfront_setup_indirect()
  ipmi: fix hung processes in __get_guid()
  libata: Return correct status in sata_pmp_eh_recover_pm() when ATA_DFLAG_DETACH is set
  hfsplus: fix crash and filesystem corruption when deleting files
  cpufreq: powernv: Fix use-after-free
  kmod: make request_module() return an error when autoloading is disabled
  clk: ingenic/jz4770: Exit with error if CGU init failed
  Input: i8042 - add Acer Aspire 5738z to nomux list
  s390/diag: fix display of diagnose call statistics
  perf tools: Support Python 3.8+ in Makefile
  ocfs2: no need try to truncate file beyond i_size
  fs/filesystems.c: downgrade user-reachable WARN_ONCE() to pr_warn_once()
  ext4: fix a data race at inode->i_blocks
  NFS: Fix a page leak in nfs_destroy_unlinked_subrequests()
  powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable
  drm/etnaviv: rework perfmon query infrastructure
  rtc: omap: Use define directive for PIN_CONFIG_ACTIVE_HIGH
  selftests: vm: drop dependencies on page flags from mlock2 tests
  arm64: armv8_deprecated: Fix undef_hook mask for thumb setend
  scsi: zfcp: fix missing erp_lock in port recovery trigger for point-to-point
  dm verity fec: fix memory leak in verity_fec_dtr
  dm writecache: add cond_resched to avoid CPU hangs
  arm64: dts: allwinner: h6: Fix PMU compatible
  net: qualcomm: rmnet: Allow configuration updates to existing devices
  mm: Use fixed constant in page_frag_alloc instead of size + 1
  tools: gpio: Fix out-of-tree build regression
  x86/speculation: Remove redundant arch_smt_update() invocation
  powerpc/pseries: Drop pointless static qualifier in vpa_debugfs_init()
  erofs: correct the remaining shrink objects
  crypto: mxs-dcp - fix scatterlist linearization for hash
  btrfs: fix missing semaphore unlock in btrfs_sync_file
  btrfs: fix missing file extent item for hole after ranged fsync
  btrfs: drop block from cache on error in relocation
  btrfs: set update the uuid generation as soon as possible
  Btrfs: fix crash during unmount due to race with delayed inode workers
  mtd: spinand: Do not erase the block before writing a bad block marker
  mtd: spinand: Stop using spinand->oobbuf for buffering bad block markers
  CIFS: Fix bug which the return value by asynchronous read is error
  KVM: VMX: fix crash cleanup when KVM wasn't used
  KVM: x86: Gracefully handle __vmalloc() failure during VM allocation
  KVM: VMX: Always VMCLEAR in-use VMCSes during crash with kexec support
  KVM: x86: Allocate new rmap and large page tracking when moving memslot
  KVM: s390: vsie: Fix delivery of addressing exceptions
  KVM: s390: vsie: Fix region 1 ASCE sanity shadow address checks
  KVM: nVMX: Properly handle userspace interrupt window request
  x86/entry/32: Add missing ASM_CLAC to general_protection entry
  signal: Extend exec_id to 64bits
  ath9k: Handle txpower changes even when TPC is disabled
  MIPS: OCTEON: irq: Fix potential NULL pointer dereference
  MIPS/tlbex: Fix LDDIR usage in setup_pw() for Loongson-3
  pstore: pstore_ftrace_seq_next should increase position index
  irqchip/versatile-fpga: Apply clear-mask earlier
  KEYS: reaching the keys quotas correctly
  tpm: tpm2_bios_measurements_next should increase position index
  tpm: tpm1_bios_measurements_next should increase position index
  tpm: Don't make log failures fatal
  PCI: endpoint: Fix for concurrent memory allocation in OB address region
  PCI: Add boot interrupt quirk mechanism for Xeon chipsets
  PCI/ASPM: Clear the correct bits when enabling L1 substates
  PCI: pciehp: Fix indefinite wait on sysfs requests
  nvme: Treat discovery subsystems as unique subsystems
  nvme-fc: Revert "add module to ops template to allow module references"
  thermal: devfreq_cooling: inline all stubs for CONFIG_DEVFREQ_THERMAL=n
  acpi/x86: ignore unspecified bit positions in the ACPI global lock field
  media: ti-vpe: cal: fix disable_irqs to only the intended target
  ALSA: hda/realtek - Add quirk for MSI GL63
  ALSA: hda/realtek - Remove now-unnecessary XPS 13 headphone noise fixups
  ALSA: hda/realtek - Set principled PC Beep configuration for ALC256
  ALSA: doc: Document PC Beep Hidden Register on Realtek ALC256
  ALSA: pcm: oss: Fix regression by buffer overflow fix
  ALSA: ice1724: Fix invalid access for enumerated ctl items
  ALSA: hda: Fix potential access overflow in beep helper
  ALSA: hda: Add driver blacklist
  ALSA: usb-audio: Add mixer workaround for TRX40 and co
  usb: gadget: composite: Inform controller driver of self-powered
  usb: gadget: f_fs: Fix use after free issue as part of queue failure
  ASoC: topology: use name_prefix for new kcontrol
  ASoC: dpcm: allow start or stop during pause for backend
  ASoC: dapm: connect virtual mux with default value
  ASoC: fix regwmask
  slub: improve bit diffusion for freelist ptr obfuscation
  uapi: rename ext2_swab() to swab() and share globally in swab.h
  IB/mlx5: Replace tunnel mpls capability bits for tunnel_offloads
  btrfs: track reloc roots based on their commit root bytenr
  btrfs: remove a BUG_ON() from merge_reloc_roots()
  btrfs: qgroup: ensure qgroup_rescan_running is only set when the worker is at least queued
  block, bfq: fix use-after-free in bfq_idle_slice_timer_body
  locking/lockdep: Avoid recursion in lockdep_count_{for,back}ward_deps()
  firmware: fix a double abort case with fw_load_sysfs_fallback
  md: check arrays is suspended in mddev_detach before call quiesce operations
  irqchip/gic-v4: Provide irq_retrigger to avoid circular locking dependency
  usb: dwc3: core: add support for disabling SS instances in park mode
  media: i2c: ov5695: Fix power on and off sequences
  block: Fix use-after-free issue accessing struct io_cq
  genirq/irqdomain: Check pointer in irq_domain_alloc_irqs_hierarchy()
  efi/x86: Ignore the memory attributes table on i386
  x86/boot: Use unsigned comparison for addresses
  gfs2: Don't demote a glock until its revokes are written
  pstore/platform: fix potential mem leak if pstore_init_fs failed
  libata: Remove extra scsi_host_put() in ata_scsi_add_hosts()
  media: i2c: video-i2c: fix build errors due to 'imply hwmon'
  PCI/switchtec: Fix init_completion race condition with poll_wait()
  selftests/x86/ptrace_syscall_32: Fix no-vDSO segfault
  sched: Avoid scale real weight down to zero
  irqchip/versatile-fpga: Handle chained IRQs properly
  block: keep bdi->io_pages in sync with max_sectors_kb for stacked devices
  x86: Don't let pgprot_modify() change the page encryption bit
  xhci: bail out early if driver can't accress host in resume
  null_blk: fix spurious IO errors after failed past-wp access
  null_blk: Handle null_add_dev() failures properly
  null_blk: Fix the null_add_dev() error path
  firmware: arm_sdei: fix double-lock on hibernate with shared events
  media: venus: hfi_parser: Ignore HEVC encoding for V1
  cpufreq: imx6q: Fixes unwanted cpu overclocking on i.MX6ULL
  i2c: st: fix missing struct parameter description
  qlcnic: Fix bad kzalloc null test
  cxgb4/ptp: pass the sign of offset delta in FW CMD
  hinic: fix wrong para of wait_for_completion_timeout
  hinic: fix a bug of waitting for IO stopped
  net: vxge: fix wrong __VA_ARGS__ usage
  bus: sunxi-rsb: Return correct data when mixing 16-bit and 8-bit reads
  ARM: dts: sun8i-a83t-tbs-a711: HM5065 doesn't like such a high voltage
  ANDROID: build.config.allmodconfig: Re-enable XFS_FS
  FROMGIT: of: property: Add device link support for extcon
  ANDROID: GKI: arm64: gki_defconfig: enable CONFIG_MM_EVENT_STAT
  ANDROID: GKI: add fields from per-process mm event tracking feature
  ANDROID: GKI: fix ABI diffs caused by ION heap and pool vmstat additions
  UPSTREAM: GKI: panic/reboot: allow specifying reboot_mode for panic only
  ANDROID: GKI: of: property: Add device link support for phys property
  ANDROID: GKI: usb: phy: Fix ABI diff for usb_otg_state
  ANDROID: GKI: usb: phy: Fix ABI diff due to usb_phy.drive_dp_pulse
  ANDROID: GKI: usb: phy: Fix ABI diff for usb_phy_type and usb_phy.reset
  ANDROID: gki_defconfig: enable CONFIG_GPIO_SYSFS
  ANDROID: GKI: qcom: Fix compile issue when setting msm_lmh_dcvs as a module
  ANDROID: GKI: drivers: cpu_cooling: allow platform freq mitigation
  ANDROID: GKI: ASoC: Add locking in DAPM widget power update
  ANDROID: GKI: ASoC: jack: Fix buttons enum value
  ANDROID: GKI: ALSA: jack: Add support to report second microphone
  ANDROID: GKI: ALSA: jack: Update supported jack switch types
  ANDROID: GKI: ALSA: jack: update jack types
  ANDROID: GKI: Export symbols arm_cpuidle_suspend, cpuidle_dev and cpuidle_register_governor
  ANDROID: GKI: usb: hcd: Add USB atomic notifier callback for HC died error
  ANDROID: media: increase video max frame number
  BACKPORT: nvmem: core: add NVMEM_SYSFS Kconfig
  UPSTREAM: nvmem: add support for cell info
  UPSTREAM: nvmem: remove the global cell list
  UPSTREAM: nvmem: use kref
  UPSTREAM: nvmem: use list_for_each_entry_safe in nvmem_device_remove_all_cells()
  UPSTREAM: nvmem: provide nvmem_dev_name()
  ANDROID: GKI: Bulk ABI update
  ANDROID: GKI: cpuhotplug: adding hotplug enums for vendor code
  ANDROID: Incremental fs: Fix create_file performance
  ANDROID: build.config.common: Add BUILDTOOLS_PREBUILT_BIN
  UPSTREAM: kheaders: include only headers into kheaders_data.tar.xz
  UPSTREAM: kheaders: remove meaningless -R option of 'ls'
  ANDROID: GKI: of: platform: initialize of_reserved_mem
  ANDROID: driver: gpu: drm: add notifier for panel related events
  ANDROID: include: drm: support unicasting mipi cmds to dsi ctrls
  ANDROID: include: drm: increase DRM max property count to 64
  BACKPORT: drm: Add HDMI colorspace property
  ANDROID: drm: edid: add support for additional CEA extension blocks
  BACKPORT: drm: Parse HDR metadata info from EDID
  BACKPORT: drm: Add HDR source metadata property
  BACKPORT: drm/dp_mst: Parse FEC capability on MST ports
  ANDROID: GKI: ABI update for DRM changes
  ANDROID: ABI: add missing elf variables to representation
  ANDROID: GKI: power_supply: Add PROP_MOISTURE_DETECTION_ENABLED
  ANDROID: include: drm: add the definitions for DP Link Compliance tests
  ANDROID: drivers: gpu: drm: fix bugs encountered while fuzzing
  FROMLIST: power_supply: Add additional health properties to the header
  UPSTREAM: power: supply: core: Update sysfs-class-power ABI document
  UPSTREAM: Merge remote-tracking branch 'aosp/upstream-f2fs-stable-linux-4.19.y' into android-4.19 (v5.7-rc1)
  ANDROID: drivers: gpu: drm: add support for secure framebuffer
  ANDROID: include: uapi: drm: add additional QCOM modifiers
  ANDROID: drm: dsi: add two DSI mode flags for BLLP
  ANDROID: include: uapi: drm: add additional drm mode flags
  UPSTREAM: drm: plug memory leak on drm_setup() failure
  UPSTREAM: drm: factor out drm_close_helper() function
  ANDROID: GKI: Bulk ABI update
  BACKPORT: nl80211: Add per peer statistics to compute FCS error rate
  ANDROID: GKI: sound: usb: Add snd_usb_enable_audio_stream/find_snd_usb_substream
  ANDROID: GKI: add dma-buf includes
  ANDROID: GKI: sched: struct fields for Per-Sched-domain over utilization
  ANDROID: GKI: Add vendor fields to root_domain
  ANDROID: gki_defconfig: Enable CONFIG_IRQ_TIME_ACCOUNTING
  ANDROID: fix allmodconfig build to use the right toolchain
  ANDROID: fix allmodconfig build to use the right toolchain
  ANDROID: GKI: Update ABI
  Revert "UPSTREAM: mm, page_alloc: spread allocations across zones before introducing fragmentation"
  Revert "UPSTREAM: mm: use alloc_flags to record if kswapd can wake"
  Revert "BACKPORT: mm: move zone watermark accesses behind an accessor"
  Revert "BACKPORT: mm: reclaim small amounts of memory when an external fragmentation event occurs"
  Revert "BACKPORT: mm, compaction: be selective about what pageblocks to clear skip hints"
  ANDROID: GKI: panic: add vendor callback function in panic()
  UPSTREAM: GKI: thermal: make device_register's type argument const
  ANDROID: GKI: add base.h include to match MODULE_VERSIONS
  ANDROID: update the ABI based on the new whitelist
  ANDROID: GKI: fdt: export symbols required by modules
  ANDROID: GKI: drivers: of: Add APIs to find DDR device rank, HBB
  ANDROID: GKI: security: Add mmap export symbols for modules
  ANDROID: GKI: arch: add stub symbols for boot_reason and cold_boot
  ANDROID: GKI: USB: Fix ABI diff for struct usb_bus
  ANDROID: GKI: USB: Resolve ABI diff for usb_gadget and usb_gadget_ops
  ANDROID: GKI: add hidden V4L2_MEM2MEM_DEV
  ANDROID: GKI: enable VIDEO_V4L2_SUBDEV_API
  ANDROID: GKI: export symbols from abi_gki_aarch64_qcom_whitelist
  ANDROID: Update the whitelist for qcom SoCs
  ANDROID: Incremental fs: Fix compound page usercopy crash
  ANDROID: Incremental fs: Clean up incfs_test build process
  ANDROID: Incremental fs: make remount log buffer change atomic
  ANDROID: Incremental fs: Optimize get_filled_block
  ANDROID: Incremental fs: Fix mislabeled __user ptrs
  ANDROID: Incremental fs: Use 64-bit int for file_size when writing hash blocks
  Linux 4.19.115
  drm/msm: Use the correct dma_sync calls in msm_gem
  drm_dp_mst_topology: fix broken drm_dp_sideband_parse_remote_dpcd_read()
  usb: dwc3: don't set gadget->is_otg flag
  rpmsg: glink: Remove chunk size word align warning
  arm64: Fix size of __early_cpu_boot_status
  drm/msm: stop abusing dma_map/unmap for cache
  clk: qcom: rcg: Return failure for RCG update
  fbcon: fix null-ptr-deref in fbcon_switch
  RDMA/cm: Update num_paths in cma_resolve_iboe_route error flow
  Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl
  RDMA/cma: Teach lockdep about the order of rtnl and lock
  RDMA/ucma: Put a lock around every call to the rdma_cm layer
  ceph: canonicalize server path in place
  ceph: remove the extra slashes in the server path
  IB/hfi1: Fix memory leaks in sysfs registration and unregistration
  IB/hfi1: Call kobject_put() when kobject_init_and_add() fails
  ASoC: jz4740-i2s: Fix divider written at incorrect offset in register
  hwrng: imx-rngc - fix an error path
  tools/accounting/getdelays.c: fix netlink attribute length
  usb: dwc3: gadget: Wrap around when skip TRBs
  random: always use batched entropy for get_random_u{32,64}
  mlxsw: spectrum_flower: Do not stop at FLOW_ACTION_VLAN_MANGLE
  slcan: Don't transmit uninitialized stack data in padding
  net: stmmac: dwmac1000: fix out-of-bounds mac address reg setting
  net: phy: micrel: kszphy_resume(): add delay after genphy_resume() before accessing PHY registers
  net: dsa: bcm_sf2: Ensure correct sub-node is parsed
  net: dsa: bcm_sf2: Do not register slave MDIO bus with OF
  ipv6: don't auto-add link-local address to lag ports
  mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
  include/linux/notifier.h: SRCU: fix ctags
  bitops: protect variables in set_mask_bits() macro
  padata: always acquire cpu_hotplug_lock before pinst->lock
  net: Fix Tx hash bound checking
  rxrpc: Fix sendmsg(MSG_WAITALL) handling
  ALSA: hda/ca0132 - Add Recon3Di quirk to handle integrated sound on EVGA X99 Classified motherboard
  power: supply: axp288_charger: Add special handling for HP Pavilion x2 10
  extcon: axp288: Add wakeup support
  mei: me: add cedar fork device ids
  coresight: do not use the BIT() macro in the UAPI header
  misc: pci_endpoint_test: Avoid using module parameter to determine irqtype
  misc: pci_endpoint_test: Fix to support > 10 pci-endpoint-test devices
  misc: rtsx: set correct pcr_ops for rts522A
  media: rc: IR signal for Panasonic air conditioner too long
  drm/etnaviv: replace MMU flush marker with flush sequence
  tools/power turbostat: Fix missing SYS_LPI counter on some Chromebooks
  tools/power turbostat: Fix gcc build warnings
  drm/amdgpu: fix typo for vcn1 idle check
  initramfs: restore default compression behavior
  drm/bochs: downgrade pci_request_region failure from error to warning
  drm/amd/display: Add link_rate quirk for Apple 15" MBP 2017
  nvme-rdma: Avoid double freeing of async event data
  sctp: fix possibly using a bad saddr with a given dst
  sctp: fix refcount bug in sctp_wfree
  net, ip_tunnel: fix interface lookup with no key
  ipv4: fix a RCU-list lock in fib_triestat_seq_show
  ANDROID: GKI: export symbols required by SPECTRA_CAMERA
  ANDROID: GKI: ARM/ARM64: Introduce arch_read_hardware_id
  ANDROID: GKI: drivers: base: soc: export symbols for socinfo
  ANDROID: GKI: Update ABI
  ANDROID: GKI: ASoC: msm: fix integer overflow for long duration offload playback
  ANDROID: GKI: Bulk ABI update
  Revert "ANDROID: GKI: mm: add struct/enum fields for SPECULATIVE_PAGE_FAULTS"
  ANDROID: GKI: Revert "arm64: kill flush_cache_all()"
  ANDROID: GKI: Revert "arm64: Remove unused macros from assembler.h"
  ANDROID: GKI: kernel/dma, mm/cma: Export symbols needed by vendor modules
  ANDROID: GKI: mm: Export symbols __next_zones_zonelist and zone_watermark_ok_safe
  ANDROID: GKI: mm/memblock: export memblock_overlaps_memory
  ANDROID: GKI: net, skbuff: export symbols needed by vendor drivers
  ANDROID: GKI: Add stub __cpu_isolated_mask symbol
  ANDROID: GKI: sched: stub sched_isolate symbols
  ANDROID: GKI: export saved_command_line
  ANDROID: GKI: Update ABI
  ANDROID: GKI: ASoC: core: Update ALSA core to issue restart in underrun.
  ANDROID: GKI: SoC: pcm: Add a restart callback field to struct snd_pcm_ops
  ANDROID: GKI: SoC: pcm: Add fields to struct snd_pcm_ops and struct snd_soc_component_driver
  ANDROID: GKI: ASoC: core: Add compat_ioctl callback to struct snd_pcm_ops
  ANDROID: GKI: ALSA: core: modify, rename and export create_subdir API
  ANDROID: GKI: usb: Add helper API to issue stop endpoint command
  ANDROID: GKI: Thermal: thermal_zone_get_cdev_by_name added
  ANDROID: GKI: add missing exports for CONFIG_ARM_SMMU=m
  ANDROID: power: wakeup_reason: wake reason enhancements
  BACKPORT: FROMGIT: kbuild: mkcompile_h: Include $LD version in /proc/version
  ANDROID: GKI: kernel: Export symbols needed by msm_minidump.ko and minidump_log.ko
  ubifs: wire up FS_IOC_GET_ENCRYPTION_NONCE
  f2fs: wire up FS_IOC_GET_ENCRYPTION_NONCE
  ext4: wire up FS_IOC_GET_ENCRYPTION_NONCE
  fscrypt: add FS_IOC_GET_ENCRYPTION_NONCE ioctl
  ANDROID: Bulk update the ABI xml
  ANDROID: gki_defconfig: add CONFIG_IPV6_SUBTREES
  ANDROID: GKI: arm64: reserve space in cpu_hwcaps and cpu_hwcap_keys arrays
  ANDROID: GKI: of: reserved_mem: Fix kmemleak crash on no-map region
  ANDROID: GKI: sched: add task boost vendor fields to task_struct
  ANDROID: GKI: mm: add rss counter for unreclaimable pages
  ANDROID: GKI: irqdomain: add bus token DOMAIN_BUS_WAKEUP
  ANDROID: GKI: arm64: fault: do_tlb_conf_fault_cb register fault callback
  ANDROID: GKI: QoS: Enhance framework to support cpu/irq specific QoS requests
  ANDROID: GKI: Bulk ABI update
  ANDROID: GKI: PM/devfreq: Do not switch governors from sysfs when device is suspended
  ANDROID: GKI: PM / devfreq: Fix race condition between suspend/resume and governor_store
  ANDROID: GKI: PM / devfreq: Introduce a sysfs lock
  ANDROID: GKI: regmap: irq: Add support to clear ack registers
  ANDROID: GKI: Remove SCHED_AUTOGROUP
  ANDROID: ignore compiler tag __must_check for GENKSYMS
  ANDROID: GKI: Bulk update ABI
  ANDROID: GKI: Fix ABI diff for struct thermal_cooling_device_ops
  ANDROID: GKI: ASoC: soc-core: export function to find components
  ANDROID: GKI: thermal: thermal_sys: Add configurable thermal trip points.
  ANDROID: fscrypt: fall back to filesystem-layer crypto when needed
  ANDROID: block: require drivers to declare supported crypto key type(s)
  ANDROID: block: make blk_crypto_start_using_mode() properly check for support
  ANDROID: GKI: power: supply: format regression
  ANDROID: GKI: kobject: increase number of kobject uevent pointers to 64
  ANDROID: GKI: drivers: video: backlight: Fix ABI diff for struct backlight_device
  ANDROID: GKI: usb: xhci: Add support for secondary interrupters
  ANDROID: GKI: usb: host: xhci: Add support for usb core indexing
  ANDROID: gki_defconfig: enable USB_XHCI_HCD
  ANDROID: gki_defconfig: enable CONFIG_BRIDGE
  ANDROID: GKI: Update ABI report
  ANDROID: GKI: arm64: smp: Add set_update_ipi_history_callback
  ANDROID: kbuild: ensure __cfi_check is correctly aligned
  f2fs: keep inline_data when compression conversion
  f2fs: fix to disable compression on directory
  f2fs: add missing CONFIG_F2FS_FS_COMPRESSION
  f2fs: switch discard_policy.timeout to bool type
  f2fs: fix to verify tpage before releasing in f2fs_free_dic()
  f2fs: show compression in statx
  f2fs: clean up dic->tpages assignment
  f2fs: compress: support zstd compress algorithm
  f2fs: compress: add .{init,destroy}_decompress_ctx callback
  f2fs: compress: fix to call missing destroy_compress_ctx()
  f2fs: change default compression algorithm
  f2fs: clean up {cic,dic}.ref handling
  f2fs: fix to use f2fs_readpage_limit() in f2fs_read_multi_pages()
  f2fs: xattr.h: Make stub helpers inline
  f2fs: fix to avoid double unlock
  f2fs: fix potential .flags overflow on 32bit architecture
  f2fs: fix NULL pointer dereference in f2fs_verity_work()
  f2fs: fix to clear PG_error if fsverity failed
  f2fs: don't call fscrypt_get_encryption_info() explicitly in f2fs_tmpfile()
  f2fs: don't trigger data flush in foreground operation
  f2fs: fix NULL pointer dereference in f2fs_write_begin()
  f2fs: clean up f2fs_may_encrypt()
  f2fs: fix to avoid potential deadlock
  f2fs: don't change inode status under page lock
  f2fs: fix potential deadlock on compressed quota file
  f2fs: delete DIO read lock
  f2fs: don't mark compressed inode dirty during f2fs_iget()
  f2fs: fix to account compressed blocks in f2fs_compressed_blocks()
  f2fs: xattr.h: Replace zero-length array with flexible-array member
  f2fs: fix to update f2fs_super_block fields under sb_lock
  f2fs: Add a new CP flag to help fsck fix resize SPO issues
  f2fs: Fix mount failure due to SPO after a successful online resize FS
  f2fs: use kmem_cache pool during inline xattr lookups
  f2fs: skip migration only when BG_GC is called
  f2fs: fix to show tracepoint correctly
  f2fs: avoid __GFP_NOFAIL in f2fs_bio_alloc
  f2fs: introduce F2FS_IOC_GET_COMPRESS_BLOCKS
  f2fs: fix to avoid triggering IO in write path
  f2fs: add prefix for f2fs slab cache name
  f2fs: introduce DEFAULT_IO_TIMEOUT
  f2fs: skip GC when section is full
  f2fs: add migration count iff migration happens
  f2fs: clean up bggc mount option
  f2fs: clean up lfs/adaptive mount option
  f2fs: fix to show norecovery mount option
  f2fs: clean up parameter of macro XATTR_SIZE()
  f2fs: clean up codes with {f2fs_,}data_blkaddr()
  f2fs: show mounted time
  f2fs: Use scnprintf() for avoiding potential buffer overflow
  f2fs: allow to clear F2FS_COMPR_FL flag
  f2fs: fix to check dirty pages during compressed inode conversion
  f2fs: fix to account compressed inode correctly
  f2fs: fix wrong check on F2FS_IOC_FSSETXATTR
  f2fs: fix to avoid use-after-free in f2fs_write_multi_pages()
  f2fs: fix to avoid using uninitialized variable
  f2fs: fix inconsistent comments
  f2fs: remove i_sem lock coverage in f2fs_setxattr()
  f2fs: cover last_disk_size update with spinlock
  f2fs: fix to check i_compr_blocks correctly
  FROMLIST: kmod: make request_module() return an error when autoloading is disabled
  ANDROID: GKI: Update ABI report
  ANDROID: GKI: ARM64: dma-mapping: export symbol arch_setup_dma_ops
  ANDROID: GKI: ARM: dma-mapping: export symbol arch_setup_dma_ops
  ANDROID: GKI: ASoC: dapm: Avoid static route b/w cpu and codec dai
  ANDROID: GKI: ASoC: pcm: Add support for hostless playback/capture
  ANDROID: GKI: ASoC: core - add hostless DAI support
  ANDROID: GKI: drivers: thermal: Resolve ABI diff for struct thermal_zone_device_ops
  ANDROID: GKI: drivers: thermal: Add support for getting trip temperature
  ANDROID: GKI: Add functions of_thermal_handle_trip/of_thermal_handle_trip_temp
  ANDROID: GKI: drivers: thermal: Add post suspend evaluate flag to thermal zone devicetree
  UPSTREAM: loop: Only freeze block queue when needed.
  UPSTREAM: loop: Only change blocksize when needed.
  ANDROID: Fix wq fp check for CFI builds
  ANDROID: GKI: update abi definition after CONFIG_DEBUG_LIST was enabled
  ANDROID: gki_defconfig: enable CONFIG_DEBUG_LIST
  ANDROID: GKI: Update ABI definition
  ANDROID: GKI: remove condition causing sk_buff struct ABI differences
  ANDROID: GKI: Export symbol arch_timer_mem_get_cval
  ANDROID: GKI: pwm: core: Add option to config PWM duty/period with u64 data length
  ANDROID: Update ABI whitelist for qcom SoCs
  ANDROID: Incremental fs: Fix remount
  ANDROID: Incremental fs: Protect get_fill_block, and add a field
  ANDROID: Incremental fs: Fix crash polling 0 size read_log
  ANDROID: Incremental fs: get_filled_blocks: better index_out
  ANDROID: GKI: of: property: Add device links support for "qcom,wrapper-dev"
  ANDROID: GKI: update abi definitions due to recent changes
  ANDROID: GKI: clk: Initialize in stack clk_init_data to 0 in all drivers
  ANDROID: GKI: drivers: clksource: Add API to return cval
  ANDROID: GKI: clk: Add support for voltage voting
  ANDROID: GKI: kernel: Export task and IRQ affinity symbols
  ANDROID: GKI: regulator: core: Add support for regulator providers with sync state
  ANDROID: GKI: regulator: Call proxy-consumer functions for each regulator registered
  ANDROID: GKI: regulator: Add proxy consumer driver
  ANDROID: GKI: regulator: core: allow long device tree supply regulator property names
  ANDROID: GKI: Revert "regulator: Enable supply regulator if child rail is enabled."
  ANDROID: GKI: regulator: Remove redundant set_mode call in drms_uA_update
  ANDROID: GKI: net: Add the get current NAPI context API
  ANDROID: GKI: remove DRM_KMS_CMA_HELPER from GKI configuration
  ANDROID: GKI: edac: Fix ABI diffs in edac_device_ctl_info struct
  ANDROID: GKI: pwm: Add different PWM output types support
  UPSTREAM: cfg80211: Authentication offload to user space in AP mode
  Linux 4.19.114
  arm64: dts: ls1046ardb: set RGMII interfaces to RGMII_ID mode
  arm64: dts: ls1043a-rdb: correct RGMII delay mode to rgmii-id
  ARM: dts: N900: fix onenand timings
  ARM: dts: imx6: phycore-som: fix arm and soc minimum voltage
  ARM: bcm2835-rpi-zero-w: Add missing pinctrl name
  ARM: dts: oxnas: Fix clear-mask property
  perf map: Fix off by one in strncpy() size argument
  arm64: alternative: fix build with clang integrated assembler
  net: ks8851-ml: Fix IO operations, again
  gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 CHT + AXP288 model
  bpf: Explicitly memset some bpf info structures declared on the stack
  bpf: Explicitly memset the bpf_attr structure
  platform/x86: pmc_atom: Add Lex 2I385SW to critclk_systems DMI table
  vt: vt_ioctl: fix use-after-free in vt_in_use()
  vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
  vt: vt_ioctl: remove unnecessary console allocation checks
  vt: switch vt_dont_switch to bool
  vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines
  vt: selection, introduce vc_is_sel
  mac80211: fix authentication with iwlwifi/mvm
  mac80211: Check port authorization in the ieee80211_tx_dequeue() case
  media: xirlink_cit: add missing descriptor sanity checks
  media: stv06xx: add missing descriptor sanity checks
  media: dib0700: fix rc endpoint lookup
  media: ov519: add missing endpoint sanity checks
  libfs: fix infoleak in simple_attr_read()
  ahci: Add Intel Comet Lake H RAID PCI ID
  staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback
  staging: wlan-ng: fix ODEBUG bug in prism2sta_disconnect_usb
  staging: rtl8188eu: Add ASUS USB-N10 Nano B1 to device table
  media: usbtv: fix control-message timeouts
  media: flexcop-usb: fix endpoint sanity check
  usb: musb: fix crash with highmen PIO and usbmon
  USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback
  USB: cdc-acm: restore capability check order
  USB: serial: option: add Wistron Neweb D19Q1
  USB: serial: option: add BroadMobi BM806U
  USB: serial: option: add support for ASKEY WWHC050
  mac80211: set IEEE80211_TX_CTRL_PORT_CTRL_PROTO for nl80211 TX
  mac80211: add option for setting control flags
  Revert "r8169: check that Realtek PHY driver module is loaded"
  vti6: Fix memory leak of skb if input policy check fails
  bpf/btf: Fix BTF verification of enum members in struct/union
  netfilter: nft_fwd_netdev: validate family and chain type
  netfilter: flowtable: reload ip{v6}h in nf_flow_tuple_ip{v6}
  afs: Fix some tracing details
  xfrm: policy: Fix doulbe free in xfrm_policy_timer
  xfrm: add the missing verify_sec_ctx_len check in xfrm_add_acquire
  xfrm: fix uctx len check in verify_sec_ctx_len
  RDMA/mlx5: Block delay drop to unprivileged users
  vti[6]: fix packet tx through bpf_redirect() in XinY cases
  xfrm: handle NETDEV_UNREGISTER for xfrm device
  genirq: Fix reference leaks on irq affinity notifiers
  RDMA/core: Ensure security pkey modify is not lost
  gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 BYT + AXP288 model
  gpiolib: acpi: Rework honor_wakeup option into an ignore_wake option
  gpiolib: acpi: Correct comment for HP x2 10 honor_wakeup quirk
  mac80211: mark station unauthorized before key removal
  nl80211: fix NL80211_ATTR_CHANNEL_WIDTH attribute type
  scsi: sd: Fix optimal I/O size for devices that change reported values
  scripts/dtc: Remove redundant YYLOC global declaration
  tools: Let O= makes handle a relative path with -C option
  perf probe: Do not depend on dwfl_module_addrsym()
  ARM: dts: omap5: Add bus_dma_limit for L3 bus
  ARM: dts: dra7: Add bus_dma_limit for L3 bus
  ceph: check POOL_FLAG_FULL/NEARFULL in addition to OSDMAP_FULL/NEARFULL
  Input: avoid BIT() macro usage in the serio.h UAPI header
  Input: synaptics - enable RMI on HP Envy 13-ad105ng
  Input: raydium_i2c_ts - fix error codes in raydium_i2c_boot_trigger()
  i2c: hix5hd2: add missed clk_disable_unprepare in remove
  ftrace/x86: Anotate text_mutex split between ftrace_arch_code_modify_post_process() and ftrace_arch_code_modify_prepare()
  sxgbe: Fix off by one in samsung driver strncpy size arg
  dpaa_eth: Remove unnecessary boolean expression in dpaa_get_headroom
  mac80211: Do not send mesh HWMP PREQ if HWMP is disabled
  scsi: ipr: Fix softlockup when rescanning devices in petitboot
  s390/qeth: handle error when backing RX buffer
  fsl/fman: detect FMan erratum A050385
  arm64: dts: ls1043a: FMan erratum A050385
  dt-bindings: net: FMan erratum A050385
  cgroup1: don't call release_agent when it is ""
  drivers/of/of_mdio.c:fix of_mdiobus_register()
  cpupower: avoid multiple definition with gcc -fno-common
  nfs: add minor version to nfs_server_key for fscache
  cgroup-v1: cgroup_pidlist_next should update position index
  hsr: set .netnsok flag
  hsr: add restart routine into hsr_get_node_list()
  hsr: use rcu_read_lock() in hsr_get_node_{list/status}()
  vxlan: check return value of gro_cells_init()
  tcp: repair: fix TCP_QUEUE_SEQ implementation
  r8169: re-enable MSI on RTL8168c
  net: phy: mdio-mux-bcm-iproc: check clk_prepare_enable() return value
  net: dsa: mt7530: Change the LINK bit to reflect the link status
  net: ip_gre: Accept IFLA_INFO_DATA-less configuration
  net: ip_gre: Separate ERSPAN newlink / changelink callbacks
  bnxt_en: Reset rings if ring reservation fails during open()
  bnxt_en: fix memory leaks in bnxt_dcbnl_ieee_getets()
  slcan: not call free_netdev before rtnl_unlock in slcan_open
  NFC: fdp: Fix a signedness bug in fdp_nci_send_patch()
  net: stmmac: dwmac-rk: fix error path in rk_gmac_probe
  net_sched: keep alloc_hash updated after hash allocation
  net_sched: cls_route: remove the right filter from hashtable
  net: qmi_wwan: add support for ASKEY WWHC050
  net/packet: tpacket_rcv: avoid a producer race condition
  net: mvneta: Fix the case where the last poll did not process all rx
  net: dsa: Fix duplicate frames flooded by learning
  net: cbs: Fix software cbs to consider packet sending time
  mlxsw: spectrum_mr: Fix list iteration in error path
  macsec: restrict to ethernet devices
  hsr: fix general protection fault in hsr_addr_is_self()
  geneve: move debug check after netdev unregister
  Revert "drm/dp_mst: Skip validating ports during destruction, just ref"
  mmc: sdhci-tegra: Fix busy detection by enabling MMC_CAP_NEED_RSP_BUSY
  mmc: sdhci-omap: Fix busy detection by enabling MMC_CAP_NEED_RSP_BUSY
  mmc: core: Respect MMC_CAP_NEED_RSP_BUSY for eMMC sleep command
  mmc: core: Respect MMC_CAP_NEED_RSP_BUSY for erase/trim/discard
  mmc: core: Allow host controllers to require R1B for CMD6
  f2fs: fix to avoid potential deadlock
  f2fs: add missing function name in kernel message
  f2fs: recycle unused compress_data.chksum feild
  f2fs: fix to avoid NULL pointer dereference
  f2fs: fix leaking uninitialized memory in compressed clusters
  f2fs: fix the panic in do_checkpoint()
  f2fs: fix to wait all node page writeback
  mm/swapfile.c: move inode_lock out of claim_swapfile
  fscrypt: don't evict dirty inodes after removing key

 Conflicts:
	Documentation/arm64/silicon-errata.txt
	Documentation/devicetree/bindings
	Documentation/devicetree/bindings/net/fsl-fman.txt
	arch/arm/kernel/setup.c
	arch/arm/kernel/smp.c
	arch/arm/mm/dma-mapping.c
	arch/arm64/Kconfig
	arch/arm64/Makefile
	arch/arm64/include/asm/cpucaps.h
	arch/arm64/include/asm/cputype.h
	arch/arm64/include/asm/proc-fns.h
	arch/arm64/include/asm/traps.h
	arch/arm64/kernel/arm64ksyms.c
	arch/arm64/kernel/cpu_errata.c
	arch/arm64/kernel/setup.c
	arch/arm64/kernel/smp.c
	arch/arm64/mm/dma-mapping.c
	arch/arm64/mm/fault.c
	arch/arm64/mm/proc.S
	drivers/base/power/wakeup.c
	drivers/clk/clk.c
	drivers/clk/qcom/clk-rcg2.c
	drivers/clocksource/arm_arch_timer.c
	drivers/devfreq/devfreq.c
	drivers/devfreq/governor_simpleondemand.c
	drivers/dma-buf/dma-buf.c
	drivers/extcon/extcon.c
	drivers/gpu/Makefile
	drivers/gpu/drm/drm_connector.c
	drivers/gpu/drm/drm_dp_mst_topology.c
	drivers/gpu/drm/drm_edid.c
	drivers/gpu/drm/drm_file.c
	drivers/gpu/drm/drm_panel.c
	drivers/gpu/drm/drm_property.c
	drivers/iommu/Kconfig
	drivers/iommu/Makefile
	drivers/iommu/arm-smmu.c
	drivers/iommu/dma-iommu.c
	drivers/iommu/dma-mapping-fast.c
	drivers/iommu/io-pgtable-arm.c
	drivers/iommu/io-pgtable-fast.c
	drivers/iommu/io-pgtable.c
	drivers/iommu/iommu.c
	drivers/irqchip/irq-gic-v3.c
	drivers/media/v4l2-core/v4l2-ioctl.c
	drivers/mmc/core/Kconfig
	drivers/mmc/core/block.c
	drivers/mmc/core/queue.c
	drivers/mmc/host/cqhci.c
	drivers/mmc/host/sdhci-msm.c
	drivers/net/wireless/ath/wil6210/interrupt.c
	drivers/net/wireless/ath/wil6210/main.c
	drivers/net/wireless/ath/wil6210/wil6210.h
	drivers/net/wireless/ath/wil6210/wmi.c
	drivers/nvmem/core.c
	drivers/nvmem/nvmem-sysfs.c
	drivers/of/fdt.c
	drivers/power/supply/power_supply_sysfs.c
	drivers/pwm/sysfs.c
	drivers/regulator/core.c
	drivers/scsi/sd.c
	drivers/scsi/ufs/ufshcd.c
	drivers/tty/serial/Kconfig
	drivers/tty/serial/Makefile
	drivers/usb/common/common.c
	fs/crypto/crypto.c
	fs/f2fs/checkpoint.c
	fs/f2fs/f2fs.h
	include/drm/drm_connector.h
	include/drm/drm_dp_mst_helper.h
	include/drm/drm_panel.h
	include/linux/clk-provider.h
	include/linux/dma-buf.h
	include/linux/dma-mapping-fast.h
	include/linux/dma-mapping.h
	include/linux/extcon.h
	include/linux/io-pgtable.h
	include/linux/iommu.h
	include/linux/kobject.h
	include/linux/mm.h
	include/linux/mm_types.h
	include/linux/mmc/host.h
	include/linux/netdevice.h
	include/linux/power_supply.h
	include/linux/pwm.h
	include/linux/regulator/driver.h
	include/linux/thermal.h
	include/linux/vm_event_item.h
	include/net/cfg80211.h
	include/scsi/scsi_device.h
	include/sound/pcm.h
	include/sound/soc.h
	include/uapi/drm/drm_mode.h
	include/uapi/linux/coresight-stm.h
	include/uapi/linux/ip.h
	include/uapi/linux/nl80211.h
	include/uapi/linux/videodev2.h
	include/uapi/sound/compress_offload.h
	kernel/dma/coherent.c
	kernel/dma/mapping.c
	kernel/panic.c
	kernel/power/qos.c
	kernel/sched/sched.h
	mm/Kconfig
	mm/filemap.c
	mm/swapfile.c
	mm/vmalloc.c
	mm/vmstat.c
	net/qrtr/qrtr.c
	net/wireless/nl80211.c
	net/wireless/scan.c
	sound/core/compress_offload.c
	sound/soc/soc-core.c
	sound/usb/card.c
	sound/usb/pcm.c
	sound/usb/pcm.h
	sound/usb/usbaudio.h

 Fixed build errors:
	drivers/base/power/main.c
	drivers/thermal/thermal_core.c
	drivers/cpuidle/lpm-levels.c
	include/soc/qcom/lpm_levels.h

Change-Id: Idf25b239f53681bdfa2ef371a91720fadf1a3f01
Signed-off-by: Srinivasarao P <spathi@codeaurora.org>
2020-09-20 23:45:10 +05:30
Linus Torvalds
e8b41a9558 fbcon: remove now unusued 'softback_lines' cursor() argument
commit 06a0df4d1b8b13b551668e47b11fd7629033b7df upstream.

Since the softscroll code got removed, this argument is always zero and
makes no sense any more.

Tested-by: Yuan Ming <yuanmingbuaa@gmail.com>
Tested-by: Willy Tarreau <w@1wt.eu>
Reviewed-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-09-17 13:45:30 +02:00
Linus Torvalds
770adb5d2b fbcon: remove soft scrollback code
commit 50145474f6ef4a9c19205b173da6264a644c7489 upstream.

This (and the VGA soft scrollback) turns out to have various nasty small
special cases that nobody really is willing to fight.  The soft
scrollback code was really useful a few decades ago when you typically
used the console interactively as the main way to interact with the
machine, but that just isn't the case any more.

So it's not worth dragging along.

Tested-by: Yuan Ming <yuanmingbuaa@gmail.com>
Tested-by: Willy Tarreau <w@1wt.eu>
Acked-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@samsung.com>
Acked-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Reviewed-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-09-17 13:45:30 +02:00
lucaswei
d43b6a3c5a Merge android-4.19-stable (4.19.125) into android-msm-pixel-4.19-lts
Merge 4.19.125 into android-4.19-stable
    Merge remote-tracking branch 'aosp/upstream-f2fs-stable-linux-4.19.y' into android-4.19-stable
Linux 4.19.125
    rxrpc: Fix ack discard
  * rxrpc: Trace discarded ACKs
      include/trace/events/rxrpc.h
    iio: adc: stm32-dfsdm: fix device used to request dma
    iio: adc: stm32-dfsdm: Use dma_request_chan() instead dma_request_slave_channel()
    iio: adc: stm32-adc: fix device used to request dma
    iio: adc: stm32-adc: Use dma_request_chan() instead dma_request_slave_channel()
    x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
    rxrpc: Fix a memory leak in rxkad_verify_response()
    rapidio: fix an error in get_user_pages_fast() error handling
    ipack: tpci200: fix error return code in tpci200_register()
    mei: release me_cl object reference
    misc: rtsx: Add short delay after exit from ASPM
    iio: dac: vf610: Fix an error handling path in 'vf610_dac_probe()'
    iio: sca3000: Remove an erroneous 'get_device()'
    staging: greybus: Fix uninitialized scalar variable
    staging: iio: ad2s1210: Fix SPI reading
    Revert "gfs2: Don't demote a glock until its revokes are written"
    brcmfmac: abort and release host after error
    tty: serial: qcom_geni_serial: Fix wrap around of TX buffer
    cxgb4/cxgb4vf: Fix mac_hlist initialization and free
    cxgb4: free mac_hlist properly
    net: bcmgenet: abort suspend on error
    net: bcmgenet: code movement
    Revert "net/ibmvnic: Fix EOI when running in XIVE mode"
    media: fdp1: Fix R-Car M3-N naming in debug message
    thunderbolt: Drop duplicated get_switch_at_route()
    staging: most: core: replace strcpy() by strscpy()
    libnvdimm/btt: Fix LBA masking during 'free list' population
    libnvdimm/btt: Remove unnecessary code in btt_freelist_init
  * nfit: Add Hyper-V NVDIMM DSM command set to white list
      include/uapi/linux/ndctl.h
    powerpc/64s: Disable STRICT_KERNEL_RWX
    powerpc: Remove STRICT_KERNEL_RWX incompatibility with RELOCATABLE
    drm/i915/gvt: Init DPLL/DDI vreg for virtual display instead of inheritance.
    dmaengine: owl: Use correct lock in owl_dma_get_pchan()
    dmaengine: tegra210-adma: Fix an error handling path in 'tegra_adma_probe()'
    apparmor: Fix aa_label refcnt leak in policy_update
    apparmor: fix potential label refcnt leak in aa_change_profile
    apparmor: Fix use-after-free in aa_audit_rule_init
    drm/etnaviv: fix perfmon domain interation
    ALSA: hda/realtek - Add more fixup entries for Clevo machines
    ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Xtreme
  * ALSA: pcm: fix incorrect hw_base increase
      sound/core/pcm_lib.c
    ALSA: iec1712: Initialize STDSP24 properly when using the model=staudio option
    padata: purge get_cpu and reorder_via_wq from padata_do_serial
    padata: initialize pd->cpu with effective cpumask
  * padata: Replace delayed timer with immediate workqueue in padata_reorder
      include/linux/padata.h
    ARM: futex: Address build warning
    platform/x86: asus-nb-wmi: Do not load on Asus T100TA and T200TA
  * USB: core: Fix misleading driver bug report
      drivers/usb/core/message.c
    stmmac: fix pointer check after utilization in stmmac_interrupt
    ceph: fix double unlock in handle_cap_export()
  * HID: quirks: Add HID_QUIRK_NO_INIT_REPORTS quirk for Dell K12A keyboard-dock
      drivers/hid/hid-ids.h
      drivers/hid/hid-quirks.c
    gtp: set NLM_F_MULTI flag in gtp_genl_dump_pdp()
    x86/apic: Move TSC deadline timer debug printk
  * HID: i2c-hid: reset Synaptics SYNA2393 on resume
      drivers/hid/hid-ids.h
    scsi: ibmvscsi: Fix WARN_ON during event pool release
  * component: Silence bind error on -EPROBE_DEFER
      drivers/base/component.c
    aquantia: Fix the media type of AQC100 ethernet controller in the driver
    vhost/vsock: fix packet delivery order to monitoring devices
  * configfs: fix config_item refcnt leak in configfs_rmdir()
      fs/configfs/dir.c
    scsi: qla2xxx: Delete all sessions before unregister local nvme port
    scsi: qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV
  * HID: alps: ALPS_1657 is too specific; use U1_UNICORN_LEGACY instead
      drivers/hid/hid-ids.h
  * HID: alps: Add AUI1657 device ID
      drivers/hid/hid-ids.h
  * HID: multitouch: add eGalaxTouch P80H84 support
      drivers/hid/hid-ids.h
      drivers/hid/hid-multitouch.c
  * gcc-common.h: Update for GCC 10
      scripts/gcc-plugins/gcc-common.h
    ubi: Fix seq_file usage in detailed_erase_block_info debugfs file
    i2c: mux: demux-pinctrl: Fix an error handling path in 'i2c_demux_pinctrl_probe()'
    iommu/amd: Fix over-read of ACPI UID from IVRS table
    ubifs: remove broken lazytime support
  * fix multiplication overflow in copy_fdtable()
      fs/file.c
    mtd: spinand: Propagate ECC information to the MTD structure
    ima: Fix return value of ima_write_policy()
    evm: Check also if *tfm is an error pointer in init_desc()
    ima: Set file->f_mode instead of file->f_flags in ima_calc_file_hash()
    riscv: set max_pfn to the PFN of the last page
    KVM: SVM: Fix potential memory leak in svm_cpu_init()
  * i2c: dev: Fix the race between the release of i2c_dev and cdev
      drivers/i2c/i2c-dev.c
  * ubsan: build ubsan.c more conservatively
      lib/Makefile
  * x86/uaccess, ubsan: Fix UBSAN vs. SMAP
      lib/Makefile
  * ANDROID: scsi: ufs: Handle clocks when lrbp fails
      drivers/scsi/ufs/ufshcd.c
  * ANDROID: fscrypt: handle direct I/O with IV_INO_LBLK_32
      fs/crypto/crypto.c
      fs/crypto/inline_crypt.c
      fs/direct-io.c
      fs/ext4/inode.c
      fs/f2fs/f2fs.h
      include/linux/fscrypt.h
  * BACKPORT: FROMLIST: fscrypt: add support for IV_INO_LBLK_32 policies
      fs/crypto/crypto.c
      fs/crypto/fscrypt_private.h
      fs/crypto/inline_crypt.c
      fs/crypto/keyring.c
      fs/crypto/keysetup.c
      fs/crypto/policy.c
      include/uapi/linux/fscrypt.h
    ANDROID: Update the ABI xml and qcom whitelist
    ANDROID: Fix build.config.gki-debug
    Merge 4.19.124 into android-4.19-stable
Linux 4.19.124
  * Makefile: disallow data races on gcc-10 as well
      Makefile
    KVM: x86: Fix off-by-one error in kvm_vcpu_ioctl_x86_setup_mce
    ARM: dts: r8a7740: Add missing extal2 to CPG node
    arm64: dts: renesas: r8a77980: Fix IPMMU VIP[01] nodes
    ARM: dts: r8a73a4: Add missing CMT1 interrupts
    arm64: dts: rockchip: Rename dwc3 device nodes on rk3399 to make dtc happy
    arm64: dts: rockchip: Replace RK805 PMIC node name with "pmic" on rk3328 boards
  * clk: Unlink clock if failed to prepare or enable
      drivers/clk/clk.c
    Revert "ALSA: hda/realtek: Fix pop noise on ALC225"
    usb: gadget: legacy: fix error return code in cdc_bind()
    usb: gadget: legacy: fix error return code in gncm_bind()
    usb: gadget: audio: Fix a missing error return value in audio_bind()
    usb: gadget: net2272: Fix a memory leak in an error handling path in 'net2272_plat_probe()'
  * dwc3: Remove check for HWO flag in dwc3_gadget_ep_reclaim_trb_sg()
      drivers/usb/dwc3/gadget.c
    clk: rockchip: fix incorrect configuration of rk3228 aclk_gpu* clocks
  * exec: Move would_dump into flush_old_exec
      fs/exec.c
    x86/unwind/orc: Fix error handling in __unwind_start()
  * x86: Fix early boot crash on gcc-10, third try
      include/linux/compiler.h
      init/main.c
    cifs: fix leaked reference on requeued write
    ARM: dts: imx27-phytec-phycard-s-rdk: Fix the I2C1 pinctrl entries
    ARM: dts: dra7: Fix bus_dma_limit for PCIe
  * usb: xhci: Fix NULL pointer dereference when enqueuing trbs from urb sg list
      drivers/usb/host/xhci-ring.c
  * USB: gadget: fix illegal array access in binding with UDC
      drivers/usb/gadget/configfs.c
  * usb: host: xhci-plat: keep runtime active when removing host
      drivers/usb/host/xhci-plat.c
  * usb: core: hub: limit HUB_QUIRK_DISABLE_AUTOSUSPEND to USB5534B
      drivers/usb/core/hub.c
  * ALSA: usb-audio: Add control message quirk delay for Kingston HyperX headset
      sound/usb/quirks.c
  * ALSA: rawmidi: Fix racy buffer resize under concurrent accesses
      include/sound/rawmidi.h
      sound/core/rawmidi.c
    ALSA: hda/realtek - Limit int mic boost for Thinkpad T530
  * gcc-10: avoid shadowing standard library 'free()' in crypto
      crypto/xts.c
  * gcc-10: disable 'restrict' warning for now
      Makefile
  * gcc-10: disable 'stringop-overflow' warning for now
      Makefile
  * gcc-10: disable 'array-bounds' warning for now
      Makefile
  * gcc-10: disable 'zero-length-bounds' warning for now
      Makefile
  * Stop the ad-hoc games with -Wno-maybe-initialized
      Makefile
      init/Kconfig
      kernel/trace/Kconfig
  * kbuild: compute false-positive -Wmaybe-uninitialized cases in Kconfig
      Makefile
      init/Kconfig
      kernel/trace/Kconfig
  * gcc-10 warnings: fix low-hanging fruit
      include/linux/fs.h
      include/linux/tty.h
  * pnp: Use list_for_each_entry() instead of open coding
      include/linux/pnp.h
    hwmon: (da9052) Synchronize access with mfd
    IB/mlx4: Test return value of calls to ib_get_cached_pkey
    netfilter: nft_set_rbtree: Introduce and use nft_rbtree_interval_start()
    arm64: fix the flush_icache_range arguments in machine_kexec
  * netfilter: conntrack: avoid gcc-10 zero-length-bounds warning
      include/net/netfilter/nf_conntrack.h
      net/netfilter/nf_conntrack_core.c
    NFSv4: Fix fscache cookie aux_data to ensure change_attr is included
    nfs: fscache: use timespec64 in inode auxdata
    NFS: Fix fscache super_cookie index_key from changing after umount
    mmc: block: Fix request completion in the CQE timeout path
    mmc: core: Check request type before completing the request
    i40iw: Fix error handling in i40iw_manage_arp_cache()
    pinctrl: cherryview: Add missing spinlock usage in chv_gpio_irq_handler
    pinctrl: baytrail: Enable pin configuration setting for GPIO chip
    gfs2: Another gfs2_walk_metadata fix
    ALSA: hda/realtek - Fix S3 pop noise on Dell Wyse
    ipc/util.c: sysvipc_find_ipc() incorrectly updates position index
    drm/qxl: lost qxl_bo_kunmap_atomic_page in qxl_image_init_helper()
    ALSA: hda/hdmi: fix race in monitor detection during probe
    cpufreq: intel_pstate: Only mention the BIOS disabling turbo mode once
    dmaengine: mmp_tdma: Reset channel error on release
    dmaengine: pch_dma.c: Avoid data race between probe and irq handler
    riscv: fix vdso build with lld
  * tcp: fix SO_RCVLOWAT hangs with fat skbs
      include/net/tcp.h
      net/ipv4/tcp.c
      net/ipv4/tcp_input.c
  * net: tcp: fix rx timestamp behavior for tcp_recvmsg
      net/ipv4/tcp.c
    netprio_cgroup: Fix unlimited memory leak of v2 cgroups
  * net: ipv4: really enforce backoff for redirects
      net/ipv4/route.c
    net: dsa: loop: Add module soft dependency
    hinic: fix a bug of ndo_stop
    virtio_net: fix lockdep warning on 32 bit
  * tcp: fix error recovery in tcp_zerocopy_receive()
      net/ipv4/tcp.c
  * Revert "ipv6: add mtu lock check in __ip6_rt_update_pmtu"
      net/ipv6/route.c
  * pppoe: only process PADT targeted at local interfaces
      drivers/net/ppp/pppoe.c
  * net: phy: fix aneg restart in phy_ethtool_set_eee
      drivers/net/phy/phy.c
  * netlabel: cope with NULL catmap
      net/ipv4/cipso_ipv4.c
      net/ipv6/calipso.c
      net/netlabel/netlabel_kapi.c
  * net: fix a potential recursive NETDEV_FEAT_CHANGE
      net/core/dev.c
    mmc: sdhci-acpi: Add SDHCI_QUIRK2_BROKEN_64_BIT_DMA for AMDI0040
  * scsi: sg: add sg_remove_request in sg_write
      drivers/scsi/sg.c
    virtio-blk: handle block_device_operations callbacks after hot unplug
    drop_monitor: work around gcc-10 stringop-overflow warning
    net: moxa: Fix a potential double 'free_irq()'
    net/sonic: Fix a resource leak in an error handling path in 'jazz_sonic_probe()'
  * shmem: fix possible deadlocks on shmlock_user_lock
      mm/shmem.c
    net: dsa: Do not make user port errors fatal
  * ANDROID: rtc: class: call hctosys in resource managed registration
      drivers/rtc/class.c
    ANDROID: GKI: Update the ABI xml and whitelist
  * ANDROID: power_supply: Add RTX power-supply property
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * f2fs: flush dirty meta pages when flushing them
      fs/f2fs/checkpoint.c
  * f2fs: fix checkpoint=disable:%u%%
      fs/f2fs/f2fs.h
      fs/f2fs/super.c
  * f2fs: rework filename handling
      fs/f2fs/dir.c
      fs/f2fs/f2fs.h
      fs/f2fs/hash.c
      fs/f2fs/inline.c
      fs/f2fs/namei.c
      fs/f2fs/recovery.c
  * f2fs: split f2fs_d_compare() from f2fs_match_name()
      fs/f2fs/dir.c
      fs/f2fs/f2fs.h
  * f2fs: don't leak filename in f2fs_try_convert_inline_dir()
      fs/f2fs/inline.c
    ANDROID: clang: update to 11.0.1
    FROMLIST: x86_64: fix jiffies ODR violation
  * ANDROID: arm64: vdso: Fix removing SCS flags
      arch/arm64/kernel/vdso/Makefile
    Merge branch 'android-4.19' into android-4.19-stable
    ANDROID: GKI: Update the ABI xml and whitelist
  * ANDROID: Incremental fs: wake up log pollers less often
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
  * ANDROID: Incremental fs: Fix scheduling while atomic error
      fs/incfs/vfs.c
  * ANDROID: Incremental fs: Avoid continually recalculating hashes
      fs/incfs/data_mgmt.c
  * ANDROID: export: Disable symbol trimming on modules
      include/linux/export.h
    ANDROID: GKI: Update the ABI xml and whitelist
  * ANDROID: fscrypt: set dun_bytes more precisely
      fs/crypto/inline_crypt.c
  * ANDROID: dm-default-key: set dun_bytes more precisely
      drivers/md/dm-default-key.c
  * ANDROID: block: backport the ability to specify max_dun_bytes
      block/blk-crypto.c
      block/keyslot-manager.c
      drivers/md/dm-default-key.c
      drivers/scsi/ufs/ufshcd-crypto.c
      fs/crypto/inline_crypt.c
      include/linux/bio-crypt-ctx.h
      include/linux/blk-crypto.h
      include/linux/keyslot-manager.h
    ANDROID: Revert "ANDROID: GKI: gki_defconfig: CONFIG_DM_DEFAULT_KEY=m"
    Merge 4.19.123 into android-4.19
Linux 4.19.123
    ipc/mqueue.c: change __do_notify() to bypass check_kill_permission()
    scripts/decodecode: fix trapping instruction formatting
    objtool: Fix stack offset tracking for indirect CFAs
    netfilter: nf_osf: avoid passing pointer to local var
  * netfilter: nat: never update the UDP checksum when it's 0
      net/netfilter/nf_nat_proto_udp.c
    x86/unwind/orc: Fix premature unwind stoppage due to IRET frames
    x86/unwind/orc: Fix error path for bad ORC entry type
    x86/unwind/orc: Prevent unwinding before ORC initialization
    x86/unwind/orc: Don't skip the first frame for inactive tasks
    x86/entry/64: Fix unwind hints in rewind_stack_do_exit()
    x86/entry/64: Fix unwind hints in kernel exit path
    x86/entry/64: Fix unwind hints in register clearing code
    batman-adv: Fix refcnt leak in batadv_v_ogm_process
    batman-adv: Fix refcnt leak in batadv_store_throughput_override
    batman-adv: Fix refcnt leak in batadv_show_throughput_override
    batman-adv: fix batadv_nc_random_weight_tq
    KVM: VMX: Mark RCX, RDX and RSI as clobbered in vmx_vcpu_run()'s asm blob
    KVM: VMX: Explicitly reference RCX as the vmx_vcpu pointer in asm blobs
  * coredump: fix crash when umh is disabled
      fs/coredump.c
      kernel/umh.c
    staging: gasket: Check the return value of gasket_get_bar_index()
  * mm/page_alloc: fix watchdog soft lockups during set_zone_contiguous()
      mm/page_alloc.c
    arm64: hugetlb: avoid potential NULL dereference
    KVM: arm64: Fix 32bit PC wrap-around
    KVM: arm: vgic: Fix limit condition when writing to GICD_I[CS]ACTIVER
  * tracing: Add a vmalloc_sync_mappings() for safe measure
      kernel/trace/trace.c
    USB: serial: garmin_gps: add sanity checking for data length
    USB: uas: add quirk for LaCie 2Big Quadra
  * HID: usbhid: Fix race between usbhid_close() and usbhid_stop()
      drivers/hid/usbhid/hid-core.c
      drivers/hid/usbhid/usbhid.h
  * sctp: Fix bundling of SHUTDOWN with COOKIE-ACK
      net/sctp/sm_statefuns.c
    HID: wacom: Read HID_DG_CONTACTMAX directly for non-generic devices
  * net: stricter validation of untrusted gso packets
      include/linux/virtio_net.h
    bnxt_en: Fix VF anti-spoof filter setup.
    bnxt_en: Improve AER slot reset.
    net/mlx5: Fix command entry leak in Internal Error State
    net/mlx5: Fix forced completion access non initialized command entry
    bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features().
  * tipc: fix partial topology connection closure
      net/tipc/topsrv.c
    sch_sfq: validate silly quantum values
    sch_choke: avoid potential panic in choke_reset()
    net: usb: qmi_wwan: add support for DW5816e
    net_sched: sch_skbprio: add message validation to skbprio_change()
    net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc()
    net: macsec: preserve ingress frame ordering
    fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks
    dp83640: reverse arguments to list_add_tail
    vt: fix unicode console freeing with a common interface
    tracing/kprobes: Fix a double initialization typo
    USB: serial: qcserial: Add DW5816e support
  * ANDROID: usb: gadget: Add missing inline qualifier to stub functions
      include/linux/usb/gadget.h
    ANDROID: Drop ABI monitoring from KASAN build config
    ANDROID: Rename build.config.gki.arch_kasan
    ANDROID: GKI: Enable CONFIG_STATIC_USERMODEHELPER
  * ANDROID: dm-default-key: Update key size for wrapped keys
      drivers/md/dm-default-key.c
    ANDROID: gki_defconfig: enable CONFIG_MMC_CRYPTO
  * ANDROID: mmc: MMC crypto API
      drivers/mmc/core/Kconfig
      include/linux/mmc/core.h
      include/linux/mmc/host.h
    ANDROID: GKI: Update the ABI xml and whitelist
  * ANDROID: GKI: add missing exports for cam_smmu_api.ko
      drivers/iommu/dma-iommu.c
    Merge 4.19.122 into android-4.19
Linux 4.19.122
  * drm/atomic: Take the atomic toys away from X
      drivers/gpu/drm/drm_ioctl.c
    cgroup, netclassid: remove double cond_resched
  * mac80211: add ieee80211_is_any_nullfunc()
      include/linux/ieee80211.h
    platform/x86: GPD pocket fan: Fix error message when temp-limits are out of range
    ALSA: hda: Match both PCI ID and SSID for driver blacklist
    hexagon: define ioremap_uc
    hexagon: clean up ioremap
    mfd: intel-lpss: Use devm_ioremap_uc for MMIO
  * lib: devres: add a helper function for ioremap_uc
      include/linux/io.h
      lib/devres.c
    drm/amdgpu: Fix oops when pp_funcs is unset in ACPI event
  * sctp: Fix SHUTDOWN CTSN Ack in the peer restart case
      net/sctp/sm_make_chunk.c
    net: systemport: suppress warnings on failed Rx SKB allocations
    net: bcmgenet: suppress warnings on failed Rx SKB allocations
  * lib/mpi: Fix building for powerpc with clang
      lib/mpi/longlong.h
    scripts/config: allow colons in option strings for sed
    s390/ftrace: fix potential crashes when switching tracers
    cifs: protect updating server->dstaddr with a spinlock
    ASoC: rsnd: Fix "status check failed" spam for multi-SSI
    ASoC: rsnd: Don't treat master SSI in multi SSI setup as parent
    net: stmmac: Fix sub-second increment
    net: stmmac: fix enabling socfpga's ptp_ref_clock
    wimax/i2400m: Fix potential urb refcnt leak
    drm/amdgpu: Correctly initialize thermal controller for GPUs with Powerplay table v0 (e.g Hawaii)
    ASoC: codecs: hdac_hdmi: Fix incorrect use of list_for_each_entry
    ASoC: rsnd: Fix HDMI channel mapping for multi-SSI mode
    ASoC: rsnd: Fix parent SSI start/stop in multi-SSI mode
  * usb: dwc3: gadget: Properly set maxpacket limit
      drivers/usb/dwc3/core.h
      drivers/usb/dwc3/gadget.c
    ASoC: sgtl5000: Fix VAG power-on handling
    selftests/ipc: Fix test failure seen after initial test run
    ASoC: topology: Check return value of pcm_new_ver
    powerpc/pci/of: Parse unassigned resources
    vhost: vsock: kick send_pkt worker once device is started
    ANDROID: GKI: fix build warning on 32bits due to ASoC msm change
    ANDROID: GKI: fix build error on 32bits due to ASoC msm change
    ANDROID: GKI: update abi definition due to FAIR_GROUP_SCHED removal
    ANDROID: GKI: Remove FAIR_GROUP_SCHED
    ANDROID: GKI: BULK update ABI XML representation and qcom whitelist
    ANDROID: build.config.gki.aarch64: Enable WHITELIST_STRICT_MODE
    ANDROID: GKI: Update the ABI xml and qcom whitelist
  * ANDROID: remove unused variable
      fs/f2fs/xattr.c
    ANDROID: Drop ABI monitoring from KASAN build config
    Merge 4.19.121 into android-4.19
Linux 4.19.121
    mmc: meson-mx-sdio: remove the broken ->card_busy() op
    mmc: meson-mx-sdio: Set MMC_CAP_WAIT_WHILE_BUSY
    mmc: sdhci-msm: Enable host capabilities pertains to R1b response
    mmc: sdhci-pci: Fix eMMC driver strength for BYT-based controllers
    mmc: sdhci-xenon: fix annoying 1.8V regulator warning
    mmc: cqhci: Avoid false "cqhci: CQE stuck on" by not open-coding timeout loop
    btrfs: transaction: Avoid deadlock due to bad initialization timing of fs_info::journal_info
    btrfs: fix partial loss of prealloc extent past i_size after fsync
  * selinux: properly handle multiple messages in selinux_netlink_send()
      security/selinux/hooks.c
    dmaengine: dmatest: Fix iteration non-stop logic
    nfs: Fix potential posix_acl refcnt leak in nfs3_set_acl
    ALSA: opti9xx: shut up gcc-10 range warning
    iommu/amd: Fix legacy interrupt remapping for x2APIC-enabled system
    scsi: target/iblock: fix WRITE SAME zeroing
    iommu/qcom: Fix local_base status check
    vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn()
    vfio: avoid possible overflow in vfio_iommu_type1_pin_pages
    RDMA/core: Fix race between destroy and release FD object
    RDMA/core: Prevent mixed use of FDs between shared ufiles
    RDMA/mlx4: Initialize ib_spec on the stack
    RDMA/mlx5: Set GRH fields in query QP on RoCE
    scsi: qla2xxx: check UNLOADING before posting async work
    scsi: qla2xxx: set UNLOADING before waiting for session deletion
    dm multipath: use updated MPATHF_QUEUE_IO on mapping for bio-based mpath
    dm writecache: fix data corruption when reloading the target
  * dm verity fec: fix hash block number in verity_fec_decode
      drivers/md/dm-verity-fec.c
    PM: hibernate: Freeze kernel threads in software_resume()
    PM: ACPI: Output correct message on target power state
    ALSA: pcm: oss: Place the plugin buffer overflow checks correctly
    ALSA: hda/hdmi: fix without unlocked before return
  * ALSA: usb-audio: Correct a typo of NuPrime DAC-10 USB ID
      sound/usb/quirks.c
    ALSA: hda/realtek - Two front mics on a Lenovo ThinkCenter
    btrfs: fix block group leak when removing fails
    drm/qxl: qxl_release use after free
    drm/qxl: qxl_release leak in qxl_hw_surface_alloc()
    drm/qxl: qxl_release leak in qxl_draw_dirty_fb()
  * drm/edid: Fix off-by-one in DispID DTD pixel clock
      drivers/gpu/drm/drm_edid.c
    ANDROID: GKI: Bulk update ABI XML representation
    ANDROID: GKI: Enable net testing options
    ANDROID: gki_defconfig: Enable CONFIG_REMOTEPROC
    ANDROID: Rename build.config.gki.arch_kasan
    ANDROID: GKI: Update ABI for IOMMU
  * ANDROID: Incremental fs: Fix issues with very large files
      fs/incfs/vfs.c
    ANDROID: Correct build.config branch name
    ANDROID: GKI: Bulk update ABI XML representation and whitelist.
  * UPSTREAM: vdso: Fix clocksource.h macro detection
      include/vdso/clocksource.h
    Merge 4.19.120 into android-4.19
    ANDROID: GKI: update abi definition due to added padding
  * ANDROID: GKI: networking: add Android ABI padding to a lot of networking structures
      include/linux/ipv6.h
      include/linux/net.h
      include/linux/netdevice.h
      include/linux/skbuff.h
  * ANDROID: GKI: dma-mapping.h: add Android ABI padding to a structure
      include/linux/dma-mapping.h
  * ANDROID: GKI: ioport.h: add Android ABI padding to a structure
      include/linux/ioport.h
  * ANDROID: GKI: iomap.h: add Android ABI padding to a structure
      include/linux/iomap.h
  * ANDROID: GKI: genhd.h: add Android ABI padding to some structures
      include/linux/genhd.h
  * ANDROID: GKI: hrtimer.h: add Android ABI padding to a structure
      include/linux/hrtimer.h
  * ANDROID: GKI: ethtool.h: add Android ABI padding to a structure
      include/linux/ethtool.h
  * ANDROID: GKI: sched: add Android ABI padding to some structures
      include/linux/sched/topology.h
      include/linux/sched/user.h
  * ANDROID: GKI: kernfs.h: add Android ABI padding to some structures
      include/linux/kernfs.h
  * ANDROID: GKI: kobject.h: add Android ABI padding to some structures
      include/linux/kobject.h
  * ANDROID: GKI: mm.h: add Android ABI padding to a structure
      include/linux/mm.h
  * ANDROID: GKI: mmu_notifier.h: add Android ABI padding to some structures
      include/linux/mmu_notifier.h
  * ANDROID: GKI: pci: add Android ABI padding to some structures
      drivers/pci/pci.h
      include/linux/pci.h
  * ANDROID: GKI: irqdomain.h: add Android ABI padding to a structure
      include/linux/irqdomain.h
  * ANDROID: GKI: blk_types.h: add Android ABI padding to a structure
      include/linux/blk_types.h
  * ANDROID: GKI: scsi.h: add Android ABI padding to a structure
      drivers/scsi/sd.h
  * ANDROID: GKI: quota.h: add Android ABI padding to some structures
      include/linux/quota.h
  * ANDROID: GKI: timer.h: add Android ABI padding to a structure
      include/linux/timer.h
  * ANDROID: GKI: user_namespace.h: add Android ABI padding to a structure
      include/linux/user_namespace.h
    FROMGIT: f2fs: fix missing check for f2fs_unlock_op
Linux 4.19.120
  * propagate_one(): mnt_set_mountpoint() needs mount_lock
      fs/pnode.c
  * ext4: check for non-zero journal inum in ext4_calculate_overhead
      fs/ext4/super.c
  * qed: Fix use after free in qed_chain_free
      include/linux/qed/qed_chain.h
    bpf, x86_32: Fix clobbering of dst for BPF_JSET
    hwmon: (jc42) Fix name to have no illegal characters
  * ext4: convert BUG_ON's to WARN_ON's in mballoc.c
      fs/ext4/mballoc.c
  * ext4: increase wait time needed before reuse of deleted inode numbers
      fs/ext4/ialloc.c
  * ext4: use matching invalidatepage in ext4_writepage
      fs/ext4/inode.c
  * arm64: Delete the space separator in __emit_inst
      arch/arm64/include/asm/sysreg.h
    ALSA: hda: call runtime_allow() for all hda controllers
    xen/xenbus: ensure xenbus_map_ring_valloc() returns proper grant status
    objtool: Support Clang non-section symbols in ORC dump
    objtool: Fix CONFIG_UBSAN_TRAP unreachable warnings
    scsi: target: tcmu: reset_ring should reset TCMU_DEV_BIT_BROKEN
    scsi: target: fix PR IN / READ FULL STATUS for FC
    ALSA: hda: Explicitly permit using autosuspend if runtime PM is supported
    ALSA: hda: Keep the controller initialization even if no codecs found
    xfs: fix partially uninitialized structure in xfs_reflink_remap_extent
    x86: hyperv: report value of misc_features
    net: fec: set GPR bit on suspend by DT configuration.
    bpf, x86: Fix encoding for lower 8-bit registers in BPF_STX BPF_B
    xfs: clear PF_MEMALLOC before exiting xfsaild thread
  * mm: shmem: disable interrupt when acquiring info->lock in userfaultfd_copy path
      mm/shmem.c
    bpf, x86_32: Fix incorrect encoding in BPF_LDX zero-extension
  * perf/core: fix parent pid/tid in task exit events
      kernel/events/core.c
    net/mlx5: Fix failing fw tracer allocation on s390
  * cpumap: Avoid warning when CONFIG_DEBUG_PER_CPU_MAPS is enabled
      kernel/bpf/cpumap.c
    ARM: dts: bcm283x: Disable dsi0 node
  * PCI: Move Apex Edge TPU class quirk to fix BAR assignment
      drivers/pci/quirks.c
  * PCI: Avoid ASMedia XHCI USB PME# from D0 defect
      drivers/pci/quirks.c
  * svcrdma: Fix leak of svc_rdma_recv_ctxt objects
      include/linux/sunrpc/svc_rdma.h
  * svcrdma: Fix trace point use-after-free race
      include/trace/events/rpcrdma.h
    xfs: acquire superblock freeze protection on eofblocks scans
    net/cxgb4: Check the return from t4_query_params properly
    rxrpc: Fix DATA Tx to disable nofrag for UDP on AF_INET6 socket
    i2c: altera: use proper variable to hold errno
    nfsd: memory corruption in nfsd4_lock()
    ASoC: wm8960: Fix wrong clock after suspend & resume
    ASoC: tas571x: disable regulators on failed probe
    ASoC: q6dsp6: q6afe-dai: add missing channels to MI2S DAIs
    iio:ad7797: Use correct attribute_group
    usb: gadget: udc: bdc: Remove unnecessary NULL checks in bdc_req_complete
  * usb: dwc3: gadget: Do link recovery for SS and SSP
      drivers/usb/dwc3/gadget.c
  * binder: take read mode of mmap_sem in binder_alloc_free_page()
      drivers/android/binder_alloc.c
  * include/uapi/linux/swab.h: fix userspace breakage, use __BITS_PER_LONG for swap
      include/uapi/linux/swab.h
    mtd: cfi: fix deadloop in cfi_cmdset_0002.c do_write_buffer
    remoteproc: Fix wrong rvring index computation
  * FROMLIST: PM / devfreq: Restart previous governor if new governor fails to start
      drivers/devfreq/devfreq.c
  * ANDROID: GKI: arm64: Enable GZIP and LZ4 kernel compression modes
      arch/arm64/Kconfig
    ANDROID: GKI: arm64: gki_defconfig: Set arm_smmu configuration
  * ANDROID: GKI: iommu/arm-smmu: Modularize ARM SMMU driver
      drivers/iommu/Kconfig
      drivers/iommu/arm-smmu.c
  * ANDROID: GKI: iommu: Snapshot of vendor changes
      arch/arm64/mm/dma-mapping.c
      drivers/iommu/dma-iommu.c
      drivers/iommu/io-pgtable.c
      drivers/iommu/iommu.c
      drivers/iommu/iova.c
      include/linux/dma-iommu.h
      include/linux/dma-mapping.h
      include/linux/io-pgtable.h
      include/linux/iommu.h
      include/linux/iova.h
      include/trace/events/iommu.h
  * ANDROID: GKI: Additions to ARM SMMU register definitions
      drivers/iommu/arm-smmu-regs.h
  * ANDROID: GKI: iommu/io-pgtable-arm: LPAE related updates by vendor
      drivers/iommu/io-pgtable-arm.c
  * ANDROID: GKI: common: dma-mapping: make dma_common_contiguous_remap more robust
      kernel/dma/mapping.c
  * ANDROID: GKI: dma-coherent: Expose device base address and size
      include/linux/dma-mapping.h
      kernel/dma/coherent.c
  * ANDROID: GKI: arm64: add support for NO_KERNEL_MAPPING and STRONGLY_ORDERED
      arch/arm64/mm/dma-mapping.c
  * ANDROID: GKI: dma-mapping: Add dma_remap functions
      arch/arm64/mm/dma-mapping.c
      include/linux/dma-mapping.h
      kernel/dma/mapping.c
  * ANDROID: GKI: arm64: Support early fixup for CMA
      arch/arm64/include/asm/dma-contiguous.h
      arch/arm64/mm/mmu.c
  * ANDROID: GKI: iommu: dma-mapping-fast: Fast ARMv7/v8 Long Descriptor Format
      arch/arm64/include/asm/dma-iommu.h
      arch/arm64/mm/dma-mapping.c
      drivers/iommu/Kconfig
      drivers/iommu/Makefile
      drivers/iommu/dma-mapping-fast.c
      drivers/iommu/io-pgtable-fast.c
      drivers/iommu/io-pgtable.c
      include/linux/dma-mapping-fast.h
      include/linux/io-pgtable-fast.h
      include/linux/io-pgtable.h
  * ANDROID: GKI: arm64: dma-mapping: add support for IOMMU mapper
      arch/arm64/Kconfig
      arch/arm64/include/asm/device.h
      arch/arm64/include/asm/dma-iommu.h
      arch/arm64/mm/dma-mapping.c
      drivers/iommu/Kconfig
  * ANDROID: GKI: add ARCH_NR_GPIO for ABI match
      arch/arm64/Kconfig
  * ANDROID: GKI: kernel: Export symbol of `cpu_do_idle`
      arch/arm64/kernel/arm64ksyms.c
  * ANDROID: GKI: kernel: Export symbols needed by msm_minidump.ko and minidump_log.ko (again)
      arch/arm64/kernel/arm64ksyms.c
  * ANDROID: GKI: add missing exports for __flush_dcache_area
      arch/arm64/kernel/arm64ksyms.c
  * ANDROID: GKI: arm64: Export caching APIs
      arch/arm64/kernel/arm64ksyms.c
  * ANDROID: GKI: arm64: provide dma cache routines with same API as 32 bit
      arch/arm64/include/asm/cacheflush.h
      arch/arm64/mm/cache.S
    ANDROID: gki_defconfig: add FORTIFY_SOURCE, remove SPMI_MSM_PMIC_ARB
  * Revert "ANDROID: GKI: spmi: pmic-arb: don't enable SPMI_MSM_PMIC_ARB by default"
      drivers/spmi/Kconfig
    ANDROID: GKI: update abi definitions after adding padding
  * ANDROID: GKI: elevator: add Android ABI padding to some structures
      include/linux/elevator.h
  * ANDROID: GKI: dentry: add Android ABI padding to some structures
      include/linux/dcache.h
  * ANDROID: GKI: bio: add Android ABI padding to some structures
      include/linux/bio.h
  * ANDROID: GKI: scsi: add Android ABI padding to some structures
      include/scsi/scsi_cmnd.h
      include/scsi/scsi_device.h
      include/scsi/scsi_host.h
  * ANDROID: GKI: ufs: add Android ABI padding to some structures
      drivers/scsi/ufs/ufshcd.h
  * ANDROID: GKI: workqueue.h: add Android ABI padding to some structures
      include/linux/workqueue.h
  * ANDROID: GKI: fs.h: add Android ABI padding to some structures
      include/linux/fs.h
  * ANDROID: GKI: USB: add Android ABI padding to some structures
      include/linux/usb.h
      include/linux/usb/hcd.h
      include/linux/usb/usbnet.h
  * ANDROID: GKI: mm: add Android ABI padding to some structures
      include/linux/mm_types.h
      include/linux/mmzone.h
  * ANDROID: GKI: mount.h: add Android ABI padding to some structures
      include/linux/mount.h
  * ANDROID: GKI: sched.h: add Android ABI padding to some structures
      include/linux/sched.h
      include/linux/sched/signal.h
  * ANDROID: GKI: sock.h: add Android ABI padding to some structures
      include/net/sock.h
  * ANDROID: GKI: module.h: add Android ABI padding to some structures
      include/linux/module.h
  * ANDROID: GKI: device.h: add Android ABI padding to some structures
      include/linux/device.h
  * ANDROID: GKI: phy: add Android ABI padding to some structures
      include/linux/phy.h
  * ANDROID: GKI: add android_kabi.h
      include/linux/android_kabi.h
    ANDROID: ABI: update due to previous changes in the tree
  * BACKPORT: sched/core: Fix reset-on-fork from RT with uclamp
      kernel/sched/core.c
  * ANDROID: GKI: Add support for missing V4L2 symbols
      drivers/media/v4l2-core/v4l2-ioctl.c
      include/uapi/linux/videodev2.h
    ANDROID: GKI: Bulk update ABI XML representation
  * ANDROID: GKI: arm64: psci: Support for OS initiated scheme
      drivers/firmware/psci.c
  * ANDROID: GKI: net: add counter for number of frames coalesced in GRO
      include/linux/netdevice.h
  * ANDROID: GKI: cfg80211: Include length of kek in rekey data
      include/net/cfg80211.h
      net/wireless/nl80211.c
  * BACKPORT: loop: change queue block size to match when using DIO
      drivers/block/loop.c
  * ANDROID: Incremental fs: Add setattr call
      fs/incfs/vfs.c
    ANDROID: GKI: enable CONFIG_RTC_SYSTOHC
  * ANDROID: GKI: ipv4: add vendor padding to __IPV4_DEVCONF_* enums
      include/uapi/linux/ip.h
  * Revert "ANDROID: GKI: ipv4: increase __IPV4_DEVCONF_MAX to 64"
      include/uapi/linux/ip.h
  * ANDROID: driver: gpu: drm: fix export symbol types
      drivers/gpu/drm/drm_panel.c
  * ANDROID: SoC: core: fix export symbol type
      sound/soc/soc-core.c
  * ANDROID: ufshcd-crypto: fix export symbol type
      drivers/scsi/ufs/ufshcd-crypto.c
  * ANDROID: GKI: drivers: mailbox: fix race resulting in multiple message submission
      drivers/mailbox/mailbox.c
    ANDROID: GKI: arm64: gki_defconfig: Enable a few thermal configs
  * Revert "ANDROID: GKI: add base.h include to match MODULE_VERSIONS"
      drivers/thermal/thermal_core.c
  * FROMLIST: thermal: Make cooling device trip point writable from sysfs
      drivers/thermal/thermal_core.c
      drivers/thermal/thermal_core.h
      drivers/thermal/thermal_sysfs.c
  * ANDROID: GKI: drivers: thermal: cpu_cooling: Use CPU ID as cooling device ID
      drivers/thermal/cpu_cooling.c
  * ANDROID: GKI: PM / devfreq: Allow min freq to be 0
      drivers/devfreq/devfreq.c
    ANDROID: GKI: arm64: gki_defconfig: Enable REGULATOR_PROXY_CONSUMER
    ANDROID: GKI: Bulk Update ABI XML representation
    ANDROID: KASAN support for GKI remove CONFIG_CC_WERROR
    ANDROID: KASAN support for GKI
    ANDROID: virt_wifi: fix export symbol types
  * ANDROID: vfs: fix export symbol type
      fs/attr.c
  * ANDROID: vfs: fix export symbol types
      fs/namei.c
  * ANDROID: fscrypt: fix export symbol type
      fs/crypto/fname.c
  * ANDROID: cfi: fix export symbol types
      kernel/cfi.c
  * ANDROID: bpf: fix export symbol type
      kernel/bpf/core.c
    Merge 4.19.119 into android-4.19
Linux 4.19.119
    s390/mm: fix page table upgrade vs 2ndary address mode accesses
    xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT
    serial: sh-sci: Make sure status register SCxSR is read in correct sequence
  * xhci: prevent bus suspend if a roothub port detected a over-current condition
      drivers/usb/host/xhci-hub.c
  * usb: f_fs: Clear OS Extended descriptor counts to zero in ffs_data_reset()
      drivers/usb/gadget/function/f_fs.c
  * usb: dwc3: gadget: Fix request completion check
      drivers/usb/dwc3/gadget.c
    UAS: fix deadlock in error handling and PM flushing work
    UAS: no use logging any details in case of ENODEV
    cdc-acm: introduce a cool down
    cdc-acm: close race betrween suspend() and acm_softint
    staging: vt6656: Power save stop wake_up_count wrap around.
    staging: vt6656: Fix pairwise key entry save.
    staging: vt6656: Fix drivers TBTT timing counter.
    staging: vt6656: Fix calling conditions of vnt_set_bss_mode
    staging: vt6656: Don't set RCR_MULTICAST or RCR_BROADCAST by default.
    vt: don't use kmalloc() for the unicode screen buffer
    vt: don't hardcode the mem allocation upper bound
    staging: comedi: Fix comedi_device refcnt leak in comedi_open
    staging: comedi: dt2815: fix writing hi byte of analog output
    powerpc/setup_64: Set cache-line-size based on cache-block-size
    ARM: imx: provide v7_cpu_resume() only on ARM_CPU_SUSPEND=y
    iwlwifi: mvm: beacon statistics shouldn't go backwards
    iwlwifi: pcie: actually release queue memory in TVQM
  * ASoC: dapm: fixup dapm kcontrol widget
      sound/soc/soc-dapm.c
  * audit: check the length of userspace generated audit records
      kernel/audit.c
  * usb-storage: Add unusual_devs entry for JMicron JMS566
      drivers/usb/storage/unusual_devs.h
    tty: rocket, avoid OOB access
    tty: hvc: fix buffer overflow during hvc_alloc().
    KVM: VMX: Enable machine check support for 32bit targets
  * KVM: Check validity of resolved slot when searching memslots
      include/linux/kvm_host.h
    KVM: s390: Return last valid slot if approx index is out-of-bounds
    tpm: ibmvtpm: retry on H_CLOSED in tpm_ibmvtpm_send()
    tpm/tpm_tis: Free IRQ if probing fails
  * ALSA: usb-audio: Filter out unsupported sample rates on Focusrite devices
      sound/usb/format.c
  * ALSA: usb-audio: Fix usb audio refcnt leak when getting spdif
      sound/usb/mixer_quirks.c
    ALSA: hda/realtek - Add new codec supported for ALC245
    ALSA: hda/realtek - Fix unexpected init_amp override
    ALSA: usx2y: Fix potential NULL dereference
    tools/vm: fix cross-compile build
    mm/ksm: fix NULL pointer dereference when KSM zero page is enabled
    mm/hugetlb: fix a addressing exception caused by huge_pte_offset
  * vmalloc: fix remap_vmalloc_range() bounds checks
      include/linux/vmalloc.h
      mm/vmalloc.c
  * USB: hub: Fix handling of connect changes during sleep
      drivers/usb/core/hub.c
  * USB: core: Fix free-while-in-use bug in the USB S-Glibrary
      drivers/usb/core/message.c
    USB: early: Handle AMD's spec-compliant identifiers, too
  * USB: Add USB_QUIRK_DELAY_CTRL_MSG and USB_QUIRK_DELAY_INIT for Corsair K70 RGB RAPIDFIRE
      drivers/usb/core/quirks.c
    USB: sisusbvga: Change port variable from signed to unsigned
  * fs/namespace.c: fix mountpoint reference counter race
      fs/namespace.c
    iio: xilinx-xadc: Make sure not exceed maximum samplerate
    iio: xilinx-xadc: Fix sequencer configuration for aux channels in simultaneous mode
    iio: xilinx-xadc: Fix clearing interrupt when enabling trigger
    iio: xilinx-xadc: Fix ADC-B powerdown
    iio: adc: stm32-adc: fix sleep in atomic context
    iio: st_sensors: rely on odr mask to know if odr can be set
  * iio: core: remove extra semi-colon from devm_iio_device_register() macro
      include/linux/iio/iio.h
  * ALSA: usb-audio: Add connector notifier delegation
      sound/usb/mixer.c
      sound/usb/mixer.h
      sound/usb/mixer_maps.c
  * ALSA: usb-audio: Add static mapping table for ALC1220-VB-based mobos
      sound/usb/mixer.c
      sound/usb/mixer_maps.c
      sound/usb/quirks-table.h
    ALSA: hda: Remove ASUS ROG Zenith from the blacklist
  * KEYS: Avoid false positive ENOMEM error on key read
      security/keys/internal.h
      security/keys/keyctl.c
    mlxsw: Fix some IS_ERR() vs NULL bugs
    vrf: Check skb for XFRM_TRANSFORMED flag
  * xfrm: Always set XFRM_TRANSFORMED in xfrm{4,6}_output_finish
      net/ipv4/xfrm4_output.c
      net/ipv6/xfrm6_output.c
    net: dsa: b53: b53_arl_rw_op() needs to select IVL or SVL
    net: dsa: b53: Rework ARL bin logic
    net: dsa: b53: Fix ARL register definitions
    net: dsa: b53: Lookup VID in ARL searches when VLAN is enabled
    vrf: Fix IPv6 with qdisc and xfrm
    team: fix hang in team_mode_get()
  * tcp: cache line align MAX_TCP_HEADER
      include/net/tcp.h
    sched: etf: do not assume all sockets are full blown
    net/x25: Fix x25_neigh refcnt leak when receiving frame
    net: stmmac: dwmac-meson8b: Add missing boundary to RGMII TX clock array
    net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node
    net: bcmgenet: correct per TX/RX ring statistics
    macvlan: fix null dereference in macvlan_device_event()
    macsec: avoid to set wrong mtu
  * ipv6: fix restrict IPV6_ADDRFORM operation
      net/ipv6/ipv6_sockglue.c
    cxgb4: fix large delays in PTP synchronization
    cxgb4: fix adapter crash due to wrong MC size
    x86/KVM: Clean up host's steal time structure
    x86/KVM: Make sure KVM_VCPU_FLUSH_TLB flag is not missed
  * x86/kvm: Cache gfn to pfn translation
      include/linux/kvm_host.h
      include/linux/kvm_types.h
  * x86/kvm: Introduce kvm_(un)map_gfn()
      include/linux/kvm_host.h
    KVM: Properly check if "page" is valid in kvm_vcpu_unmap
    kvm: fix compile on s390 part 2
    kvm: fix compilation on s390
    kvm: fix compilation on aarch64
  * KVM: Introduce a new guest mapping API
      include/linux/kvm_host.h
    KVM: nVMX: Always sync GUEST_BNDCFGS when it comes from vmcs01
    KVM: VMX: Zero out *all* general purpose registers after VM-Exit
  * f2fs: fix to avoid memory leakage in f2fs_listxattr
      fs/f2fs/xattr.c
  * blktrace: fix dereference after null check
      kernel/trace/blktrace.c
  * blktrace: Protect q->blk_trace with RCU
      include/linux/blkdev.h
      include/linux/blktrace_api.h
      kernel/trace/blktrace.c
  * net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup
      include/net/addrconf.h
      net/ipv6/addrconf_core.c
      net/ipv6/af_inet6.c
      net/tipc/udp_media.c
  * net: ipv6: add net argument to ip6_dst_lookup_flow
      include/net/ipv6.h
      net/ipv6/af_inet6.c
      net/ipv6/datagram.c
      net/ipv6/inet6_connection_sock.c
      net/ipv6/ip6_output.c
      net/ipv6/raw.c
      net/ipv6/syncookies.c
      net/ipv6/tcp_ipv6.c
      net/l2tp/l2tp_ip6.c
      net/sctp/ipv6.c
    PCI/ASPM: Allow re-enabling Clock PM
    scsi: smartpqi: fix call trace in device discovery
    virtio-blk: improve virtqueue error to BLK_STS
    tracing/selftests: Turn off timeout setting
    drm/amd/display: Not doing optimize bandwidth if flip pending.
  * xhci: Ensure link state is U3 after setting USB_SS_PORT_LS_U3
      drivers/usb/host/xhci-hub.c
    ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN MPWIN895CL tablet
  * perf/core: Disable page faults when getting phys address
      kernel/events/core.c
    pwm: bcm2835: Dynamically allocate base
    pwm: renesas-tpu: Fix late Runtime PM enablement
    Revert "powerpc/64: irq_work avoid interrupt when called with hardware irqs enabled"
  * loop: Better discard support for block devices
      drivers/block/loop.c
    s390/cio: avoid duplicated 'ADD' uevents
    kconfig: qconf: Fix a few alignment issues
    ipc/util.c: sysvipc_find_ipc() should increase position index
    selftests: kmod: fix handling test numbers above 9
    kernel/gcov/fs.c: gcov_seq_next() should increase position index
    nvme: fix deadlock caused by ANA update wrong locking
    ASoC: Intel: atom: Take the drv->lock mutex before calling sst_send_slot_map()
    scsi: iscsi: Report unbind session event when the target has been removed
    pwm: rcar: Fix late Runtime PM enablement
    ceph: don't skip updating wanted caps when cap is stale
    ceph: return ceph_mdsc_do_request() errors from __get_parent()
    scsi: lpfc: Fix crash in target side cable pulls hitting WAIT_FOR_UNREG
    scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login
  * watchdog: reset last_hw_keepalive time at start
      drivers/watchdog/watchdog_dev.c
  * arm64: Silence clang warning on mismatched value/register sizes
      arch/arm64/kernel/sys_compat.c
  * arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space
      arch/arm64/kernel/sys_compat.c
  * arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419
      arch/arm64/include/asm/cache.h
      arch/arm64/kernel/traps.c
  * arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419
      arch/arm64/Kconfig
      arch/arm64/include/asm/cpucaps.h
      arch/arm64/kernel/cpu_errata.c
      arch/arm64/kernel/traps.c
  * arm64: Add part number for Neoverse N1
      arch/arm64/include/asm/cputype.h
  * vti4: removed duplicate log message.
      net/ipv4/ip_vti.c
    crypto: mxs-dcp - make symbols 'sha1_null_hash' and 'sha256_null_hash' static
    bpftool: Fix printing incorrect pointer in btf_dump_ptr
    drm/msm: Use the correct dma_sync calls harder
  * ext4: fix extent_status fragmentation for plain files
      fs/ext4/extents.c
    ANDROID: abi_gki_aarch64_cuttlefish_whitelist: remove stale symbols
  * ANDROID: GKI: ipv4: increase __IPV4_DEVCONF_MAX to 64
      include/uapi/linux/ip.h
  * ANDROID: GKI: power: add missing export for POWER_RESET_QCOM=m
      arch/arm64/kernel/process.c
      arch/arm64/mm/init.c
  * BACKPORT: cfg80211: Support key configuration for Beacon protection (BIGTK)
      include/net/cfg80211.h
      include/uapi/linux/nl80211.h
      net/wireless/nl80211.c
      net/wireless/rdev-ops.h
      net/wireless/sme.c
      net/wireless/trace.h
      net/wireless/util.c
  * BACKPORT: cfg80211: Enhance the AKM advertizement to support per interface.
      include/net/cfg80211.h
      include/uapi/linux/nl80211.h
      net/wireless/nl80211.c
  * UPSTREAM: sysrq: Use panic() to force a crash
      drivers/tty/sysrq.c
  * ANDROID: GKI: kernel: sound: update codec options with block size
      include/uapi/sound/compress_params.h
    ANDROID: add compat cross compiler
    ANDROID: x86/vdso: disable LTO only for VDSO
  * BACKPORT: arm64: vdso32: Enable Clang Compilation
      arch/arm64/kernel/vdso32/Makefile
  * UPSTREAM: arm64: compat: vdso: Expose BUILD_VDSO32
      arch/arm64/include/asm/vdso/compat_gettimeofday.h
  * BACKPORT: lib/vdso: Enable common headers
      include/vdso/datapage.h
      lib/vdso/gettimeofday.c
    BACKPORT: arm: vdso: Enable arm to use common headers
    BACKPORT: x86/vdso: Enable x86 to use common headers
    BACKPORT: mips: vdso: Enable mips to use common headers
  * UPSTREAM: arm64: vdso32: Include common headers in the vdso library
      arch/arm64/include/asm/vdso/compat_gettimeofday.h
      arch/arm64/kernel/vdso32/vgettimeofday.c
  * UPSTREAM: arm64: vdso: Include common headers in the vdso library
      arch/arm64/include/asm/vdso/gettimeofday.h
      arch/arm64/kernel/vdso/vgettimeofday.c
  * UPSTREAM: arm64: Introduce asm/vdso/processor.h
      arch/arm64/include/asm/processor.h
      arch/arm64/include/asm/vdso/processor.h
  * BACKPORT: arm64: vdso32: Code clean up
      arch/arm64/include/asm/vdso/compat_gettimeofday.h
      arch/arm64/kernel/vdso32/vgettimeofday.c
  * UPSTREAM: linux/elfnote.h: Replace elf.h with UAPI equivalent
      include/linux/elfnote.h
  * UPSTREAM: scripts: Fix the inclusion order in modpost
      scripts/mod/modpost.c
  * UPSTREAM: common: Introduce processor.h
      include/vdso/processor.h
  * UPSTREAM: linux/ktime.h: Extract common header for vDSO
      include/linux/ktime.h
      include/vdso/ktime.h
  * UPSTREAM: linux/jiffies.h: Extract common header for vDSO
      include/linux/jiffies.h
      include/vdso/jiffies.h
  * UPSTREAM: linux/time64.h: Extract common header for vDSO
      include/linux/time64.h
      include/vdso/time64.h
  * BACKPORT: linux/time32.h: Extract common header for vDSO
      include/linux/time32.h
      include/vdso/time32.h
  * BACKPORT: linux/time.h: Extract common header for vDSO
      include/linux/time.h
      include/vdso/time.h
  * UPSTREAM: linux/math64.h: Extract common header for vDSO
      include/linux/math64.h
      include/vdso/math64.h
  * BACKPORT: linux/clocksource.h: Extract common header for vDSO
      include/linux/clocksource.h
      include/vdso/clocksource.h
    BACKPORT: mips: Introduce asm/vdso/clocksource.h
  * BACKPORT: arm64: Introduce asm/vdso/clocksource.h
      arch/arm64/include/asm/clocksource.h
      arch/arm64/include/asm/vdso/clocksource.h
    BACKPORT: arm: Introduce asm/vdso/clocksource.h
    BACKPORT: x86: Introduce asm/vdso/clocksource.h
  * UPSTREAM: linux/limits.h: Extract common header for vDSO
      include/linux/limits.h
      include/vdso/limits.h
  * BACKPORT: linux/kernel.h: split *_MAX and *_MIN macros into <linux/limits.h>
      include/linux/kernel.h
      include/linux/limits.h
      include/uapi/linux/limits.h
  * BACKPORT: linux/bits.h: Extract common header for vDSO
      include/linux/bits.h
      include/vdso/bits.h
  * UPSTREAM: linux/const.h: Extract common header for vDSO
      include/linux/const.h
      include/vdso/const.h
  * BACKPORT: arm64: vdso: fix flip/flop vdso build bug
      arch/arm64/kernel/vdso/Makefile
      arch/arm64/kernel/vdso32/Makefile
  * UPSTREAM: lib/vdso: Allow the high resolution parts to be compiled out
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso: Only read hrtimer_res when needed in __cvdso_clock_getres()
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso: Mark do_hres() and do_coarse() as __always_inline
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso: Avoid duplication in __cvdso_clock_getres()
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso: Let do_coarse() return 0 to simplify the callsite
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso: Remove checks on return value for 32 bit vDSO
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso: Build 32 bit specific functions in the right context
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso: Make __cvdso_clock_getres() static
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso: Make clock_getres() POSIX compliant again
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso/32: Provide legacy syscall fallbacks
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso: Move fallback invocation to the callers
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso/32: Remove inconsistent NULL pointer checks
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso: Make delta calculation work correctly
      lib/vdso/gettimeofday.c
  * UPSTREAM: arm64: compat: Fix syscall number of compat_clock_getres
      arch/arm64/include/asm/unistd.h
  * BACKPORT: arm64: lse: Fix LSE atomics with LLVM
      arch/arm64/include/asm/lse.h
    UPSTREAM: mips: Fix gettimeofday() in the vdso library
    UPSTREAM: mips: vdso: Fix __arch_get_hw_counter()
  * BACKPORT: arm64: Kconfig: Make CONFIG_COMPAT_VDSO a proper Kconfig option
      arch/arm64/Kconfig
      arch/arm64/Makefile
  * UPSTREAM: arm64: vdso32: Rename COMPATCC to CC_COMPAT
      arch/arm64/kernel/vdso32/Makefile
  * UPSTREAM: arm64: vdso32: Pass '--target' option to clang via VDSO_CAFLAGS
      arch/arm64/kernel/vdso32/Makefile
  * UPSTREAM: arm64: vdso32: Don't use KBUILD_CPPFLAGS unconditionally
      arch/arm64/kernel/vdso32/Makefile
  * UPSTREAM: arm64: vdso32: Move definition of COMPATCC into vdso32/Makefile
      arch/arm64/Makefile
      arch/arm64/kernel/vdso32/Makefile
  * UPSTREAM: arm64: Default to building compat vDSO with clang when CONFIG_CC_IS_CLANG
      arch/arm64/Makefile
  * UPSTREAM: lib: vdso: Remove CROSS_COMPILE_COMPAT_VDSO
      lib/vdso/Kconfig
  * UPSTREAM: arm64: vdso32: Remove jump label config option in Makefile
      arch/arm64/kernel/vdso32/Makefile
  * UPSTREAM: arm64: vdso32: Detect binutils support for dmb ishld
      arch/arm64/include/asm/vdso/compat_barrier.h
      arch/arm64/kernel/vdso32/Makefile
    BACKPORT: arm64: vdso: Remove stale files from old assembly implementation
  * UPSTREAM: arm64: vdso32: Fix broken compat vDSO build warnings
      arch/arm64/Kconfig
      arch/arm64/Makefile
      arch/arm64/kernel/vdso32/Makefile
    UPSTREAM: mips: compat: vdso: Use legacy syscalls as fallback
    BACKPORT: arm64: Relax Documentation/arm64/tagged-pointers.rst
    BACKPORT: arm64: Add tagged-address-abi.rst to index.rst
  * UPSTREAM: arm64: vdso: Fix Makefile regression
      arch/arm64/Makefile
    UPSTREAM: mips: vdso: Fix flip/flop vdso building bug
    UPSTREAM: mips: vdso: Fix source path
    UPSTREAM: mips: Add clock_gettime64 entry point
    UPSTREAM: mips: Add clock_getres entry point
    BACKPORT: mips: Add support for generic vDSO
  * BACKPORT: arm64: vdso: Explicitly add build-id option
      arch/arm64/kernel/vdso/Makefile
  * BACKPORT: arm64: vdso: use $(LD) instead of $(CC) to link VDSO
      arch/arm64/kernel/vdso/Makefile
  * BACKPORT: arm64: vdso: Cleanup Makefiles
      arch/arm64/kernel/vdso/Makefile
      arch/arm64/kernel/vdso32/Makefile
  * UPSTREAM: arm64: vdso: Fix population of AT_SYSINFO_EHDR for compat vdso
      arch/arm64/include/asm/elf.h
  * UPSTREAM: arm64: vdso: Fix compilation with clang older than 8
      arch/arm64/kernel/vdso/Makefile
  * UPSTREAM: arm64: compat: Fix __arch_get_hw_counter() implementation
      arch/arm64/include/asm/vdso/compat_gettimeofday.h
  * UPSTREAM: arm64: Fix __arch_get_hw_counter() implementation
      arch/arm64/include/asm/vdso/gettimeofday.h
    UPSTREAM: x86/vdso/32: Use 32bit syscall fallback
    UPSTREAM: x86/vdso: Fix flip/flop vdso build bug
    UPSTREAM: x86/vdso: Give the [ph]vclock_page declarations real types
    UPSTREAM: x86/vdso: Add clock_gettime64() entry point
    BACKPORT: x86/vdso: Add clock_getres() entry point
    BACKPORT: x86/vdso: Switch to generic vDSO implementation
    UPSTREAM: x86/segments: Introduce the 'CPUNODE' naming to better document the segment limit CPU/node NR trick
    UPSTREAM: x86/vdso: Initialize the CPU/node NR segment descriptor earlier
    UPSTREAM: x86/vdso: Introduce helper functions for CPU and node number
    UPSTREAM: x86/segments/64: Rename the GDT PER_CPU entry to CPU_NUMBER
  * BACKPORT: arm64: vdso: Enable vDSO compat support
      arch/arm64/Kconfig
      arch/arm64/Makefile
      arch/arm64/kernel/Makefile
  * UPSTREAM: arm64: compat: Get sigreturn trampolines from vDSO
      arch/arm64/include/asm/vdso.h
      arch/arm64/kernel/signal32.c
  * UPSTREAM: arm64: elf: VDSO code page discovery
      arch/arm64/include/asm/elf.h
  * UPSTREAM: arm64: compat: VDSO setup for compat layer
      arch/arm64/kernel/vdso.c
  * UPSTREAM: arm64: vdso: Refactor vDSO code
      arch/arm64/kernel/vdso.c
  * BACKPORT: arm64: compat: Add vDSO
      arch/arm64/include/asm/vdso/compat_barrier.h
      arch/arm64/include/asm/vdso/compat_gettimeofday.h
      arch/arm64/kernel/vdso32/Makefile
      arch/arm64/kernel/vdso32/note.c
      arch/arm64/kernel/vdso32/sigreturn.S
      arch/arm64/kernel/vdso32/vdso.S
      arch/arm64/kernel/vdso32/vdso.lds.S
      arch/arm64/kernel/vdso32/vgettimeofday.c
  * UPSTREAM: arm64: compat: Generate asm offsets for signals
      arch/arm64/kernel/asm-offsets.c
  * UPSTREAM: arm64: compat: Expose signal related structures
      arch/arm64/include/asm/signal32.h
      arch/arm64/kernel/signal32.c
  * UPSTREAM: arm64: compat: Add missing syscall numbers
      arch/arm64/include/asm/unistd.h
  * BACKPORT: arm64: vdso: Substitute gettimeofday() with C implementation
      arch/arm64/Kconfig
      arch/arm64/include/asm/vdso/gettimeofday.h
      arch/arm64/include/asm/vdso/vsyscall.h
      arch/arm64/kernel/asm-offsets.c
      arch/arm64/kernel/vdso.c
      arch/arm64/kernel/vdso/Makefile
      arch/arm64/kernel/vdso/vgettimeofday.c
  * UPSTREAM: timekeeping: Provide a generic update_vsyscall() implementation
      include/asm-generic/vdso/vsyscall.h
      include/vdso/vsyscall.h
      kernel/time/Makefile
      kernel/time/vsyscall.c
  * UPSTREAM: lib/vdso: Add compat support
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso: Provide generic VDSO implementation
      include/vdso/helpers.h
      lib/Kconfig
      lib/vdso/Kconfig
      lib/vdso/Makefile
      lib/vdso/gettimeofday.c
  * UPSTREAM: vdso: Define standardized vdso_datapage
      include/vdso/datapage.h
  * UPSTREAM: hrtimer: Split out hrtimer defines into separate header
      include/linux/hrtimer.h
      include/linux/hrtimer_defs.h
    UPSTREAM: nds32: Fix vDSO clock_getres()
  * UPSTREAM: arm64: compat: Reduce address limit for 64K pages
      arch/arm64/include/asm/processor.h
  * BACKPORT: arm64: compat: Add KUSER_HELPERS config option
      arch/arm64/Kconfig
      arch/arm64/kernel/Makefile
      arch/arm64/kernel/kuser32.S
      arch/arm64/kernel/vdso.c
  * UPSTREAM: arm64: compat: Refactor aarch32_alloc_vdso_pages()
      arch/arm64/kernel/vdso.c
  * BACKPORT: arm64: compat: Split kuser32
      arch/arm64/kernel/Makefile
      arch/arm64/kernel/kuser32.S
  * UPSTREAM: arm64: compat: Alloc separate pages for vectors and sigpage
      arch/arm64/include/asm/elf.h
      arch/arm64/include/asm/signal32.h
      arch/arm64/kernel/signal32.c
      arch/arm64/kernel/vdso.c
    ANDROID: GKI: Update ABI XML representation
  * ANDROID: GKI: Enable GENERIC_IRQ_CHIP
      init/Kconfig.gki
  * ANDROID: GKI: power_supply: Add FG_TYPE power-supply property
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: mm: export mm_trace_rss_stat for modules to report RSS changes
      mm/memory.c
    ANDROID: GKI: gki_defconfig: Enable CONFIG_LEDS_TRIGGER_TRANSIENT
    ANDROID: GKI: gki_defconfig: Enable CONFIG_CPU_FREQ_STAT
    ANDROID: GKI: arm64: gki_defconfig: Disable HW tracing features
    ANDROID: GKI: gki_defconfig: Enable CONFIG_I2C_CHARDEV
  * ANDROID: Incremental fs: Use simple compression in log buffer
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/vfs.c
  * ANDROID: GKI: usb: core: Add support to parse config summary capability descriptors
      drivers/usb/core/config.c
      drivers/usb/core/generic.c
      include/linux/usb.h
      include/uapi/linux/usb/ch9.h
    ANDROID: GKI: Update ABI XML representation
    ANDROID: dm-bow: Fix not to skip trim at framented range
  * ANDROID: Remove VLA from uid_sys_stats.c
      drivers/misc/uid_sys_stats.c
    f2fs: fix missing check for f2fs_unlock_op
  * ANDROID: fix wakeup reason findings
      kernel/power/wakeup_reason.c
  * UPSTREAM: cfg80211: fix and clean up cfg80211_gen_new_bssid()
      include/net/cfg80211.h
  * UPSTREAM: cfg80211: save multi-bssid properties
      include/net/cfg80211.h
      net/wireless/scan.c
  * UPSTREAM: cfg80211: make BSSID generation function inline
      include/net/cfg80211.h
      net/wireless/scan.c
  * UPSTREAM: cfg80211: parse multi-bssid only if HW supports it
      include/net/cfg80211.h
      net/wireless/scan.c
  * UPSTREAM: cfg80211: Move Multiple BSS info to struct cfg80211_bss to be visible
      include/net/cfg80211.h
      net/wireless/core.h
      net/wireless/scan.c
  * UPSTREAM: cfg80211: Properly track transmitting and non-transmitting BSS
      net/wireless/core.h
      net/wireless/scan.c
  * UPSTREAM: cfg80211: use for_each_element() for multi-bssid parsing
      net/wireless/scan.c
  * UPSTREAM: cfg80211: Parsing of Multiple BSSID information in scanning
      net/wireless/core.h
      net/wireless/scan.c
  * UPSTREAM: cfg80211/nl80211: Offload OWE processing to user space in AP mode
      include/net/cfg80211.h
      include/uapi/linux/nl80211.h
      net/wireless/nl80211.c
      net/wireless/rdev-ops.h
      net/wireless/trace.h
  * ANDROID: GKI: cfg80211: Sync nl80211 commands/feature with upstream
      include/uapi/linux/nl80211.h
    ANDROID: GKI: gki_defconfig: Enable FW_LOADER_USER_HELPER*
    ANDROID: GKI: arm64: gki_defconfig: Disable CONFIG_ARM64_TAGGED_ADDR_ABI
    ANDROID: GKI: gki_defconfig: CONFIG_CHR_DEV_SG=y
    ANDROID: GKI: gki_defconfig: CONFIG_DM_DEFAULT_KEY=m
    ANDROID: update the ABI xml representation
  * ANDROID: init: GKI: enable hidden configs for GPU
      init/Kconfig.gki
    Merge 4.19.118 into android-4.19
Linux 4.19.118
  * bpf: fix buggy r0 retval refinement for tracing helpers
      kernel/bpf/verifier.c
  * KEYS: Don't write out to userspace while holding key semaphore
      include/keys/big_key-type.h
      include/keys/user-type.h
      include/linux/key-type.h
      net/dns_resolver/dns_key.c
      security/keys/keyctl.c
      security/keys/keyring.c
      security/keys/request_key_auth.c
      security/keys/user_defined.c
    mtd: phram: fix a double free issue in error path
    mtd: lpddr: Fix a double free in probe()
    mtd: spinand: Explicitly use MTD_OPS_RAW to write the bad block marker to OOB
    locktorture: Print ratio of acquisitions, not failures
    tty: evh_bytechan: Fix out of bounds accesses
    iio: si1133: read 24-bit signed integer for measurement
    fbdev: potential information leak in do_fb_ioctl()
    net: dsa: bcm_sf2: Fix overflow checks
  * f2fs: fix to wait all node page writeback
      fs/f2fs/node.c
    iommu/amd: Fix the configuration of GCR3 table root pointer
    libnvdimm: Out of bounds read in __nd_ioctl()
    power: supply: axp288_fuel_gauge: Broaden vendor check for Intel Compute Sticks.
    ext2: fix debug reference to ext2_xattr_cache
    ext2: fix empty body warnings when -Wextra is used
    iommu/vt-d: Fix mm reference leak
    drm/vc4: Fix HDMI mode validation
  * f2fs: fix NULL pointer dereference in f2fs_write_begin()
      fs/f2fs/super.c
    NFS: Fix memory leaks in nfs_pageio_stop_mirroring()
    drm/amdkfd: kfree the wrong pointer
  * x86: ACPI: fix CPU hotplug deadlock
      include/acpi/processor.h
    KVM: s390: vsie: Fix possible race when shadowing region 3 tables
  * compiler.h: fix error in BUILD_BUG_ON() reporting
      include/linux/compiler.h
  * percpu_counter: fix a data race at vm_committed_as
      include/linux/percpu_counter.h
  * include/linux/swapops.h: correct guards for non_swap_entry()
      include/linux/swapops.h
    cifs: Allocate encryption header through kmalloc
    um: ubd: Prevent buffer overrun on command completion
  * ext4: do not commit super on read-only bdev
      fs/ext4/super.c
    s390/cpum_sf: Fix wrong page count in error message
    powerpc/maple: Fix declaration made after definition
    s390/cpuinfo: fix wrong output when CPU0 is offline
    NFS: direct.c: Fix memory leak of dreq when nfs_get_lock_context fails
    NFSv4/pnfs: Return valid stateids in nfs_layout_find_inode_by_stateid()
    rtc: 88pm860x: fix possible race condition
    soc: imx: gpc: fix power up sequencing
    clk: tegra: Fix Tegra PMC clock out parents
    power: supply: bq27xxx_battery: Silence deferred-probe error
    clk: at91: usb: continue if clk_hw_round_rate() return zero
    x86/Hyper-V: Report crash data in die() when panic_on_oops is set
    x86/Hyper-V: Report crash register data when sysctl_record_panic_msg is not set
    x86/Hyper-V: Trigger crash enlightenment only once during system crash.
    x86/Hyper-V: Free hv_panic_page when fail to register kmsg dump
    x86/Hyper-V: Unload vmbus channel in hv panic callback
    xsk: Add missing check on user supplied headroom size
    rbd: call rbd_dev_unprobe() after unwatching and flushing notifies
    rbd: avoid a deadlock on header_rwsem when flushing notifies
    video: fbdev: sis: Remove unnecessary parentheses and commented code
    lib/raid6: use vdupq_n_u8 to avoid endianness warnings
    x86/Hyper-V: Report crash register data or kmsg before running crash kernel
    of: overlay: kmemleak in dup_and_fixup_symbol_prop()
    of: unittest: kmemleak in of_unittest_overlay_high_level()
    of: unittest: kmemleak in of_unittest_platform_populate()
    of: unittest: kmemleak on changeset destroy
    ALSA: hda: Don't release card at firmware loading error
    irqchip/mbigen: Free msi_desc on device teardown
    netfilter: nf_tables: report EOPNOTSUPP on unsupported flags/object type
    ARM: dts: imx6: Use gpc for FEC interrupt controller to fix wake on LAN.
    arm, bpf: Fix bugs with ALU64 {RSH, ARSH} BPF_K shift by 0
    watchdog: sp805: fix restart handler
  * ext4: use non-movable memory for superblock readahead
      fs/buffer.c
      fs/ext4/inode.c
      fs/ext4/super.c
      include/linux/buffer_head.h
  * scsi: sg: add sg_remove_request in sg_common_write
      drivers/scsi/sg.c
    objtool: Fix switch table detection in .text.unlikely
    arm, bpf: Fix offset overflow for BPF_MEM BPF_DW
    ANDROID: GKI: Bulk update ABI report.
  * ANDROID: GKI: qos: Register irq notify after adding the qos request
      kernel/power/qos.c
  * ANDROID: GKI: Add dual role mode to usb_dr_modes array
      drivers/usb/common/common.c
  * UPSTREAM: virtio-gpu api: comment feature flags
      include/uapi/linux/virtio_gpu.h
  * ANDROID: arch:arm64: Increase kernel command line size
      arch/arm64/include/uapi/asm/setup.h
  * ANDROID: GKI: Add special linux_banner_ptr for modules
      include/linux/printk.h
      init/version.c
  * Revert "ANDROID: GKI: Make linux_banner a C pointer"
      include/linux/printk.h
      init/version.c
  * ANDROID: GKI: PM / devfreq: Add new flag to do simple clock scaling
      drivers/devfreq/governor_simpleondemand.c
      include/linux/devfreq.h
  * ANDROID: GKI: Resolve ABI diff for struct snd_usb_audio
      sound/usb/card.c
      sound/usb/stream.c
      sound/usb/usbaudio.h
    ANDROID: GKI: Bulk update ABI
    ANDROID: GKI: Update the whitelist for qcom SoCs
    ANDROID: GKI: arm64: gki_defconfig: Set CONFIG_SCSI_UFSHCD=m
  * ANDROID: GKI: scsi: add option to override the command timeout
      drivers/scsi/scsi_lib.c
      drivers/scsi/sd.c
      drivers/scsi/sg.c
      include/scsi/scsi_device.h
  * ANDROID: GKI: scsi: Adjust DBD setting in mode sense for caching mode page per LLD
      drivers/scsi/sd.c
      include/scsi/scsi_host.h
  * ANDROID: add ion_stat tracepoint to common kernel
      drivers/staging/android/ion/Makefile
      drivers/staging/android/ion/ion.c
      lib/vsprintf.c
  * UPSTREAM: gpu/trace: add a gpu total memory usage tracepoint
      drivers/Kconfig
      drivers/gpu/Makefile
      drivers/gpu/trace/Kconfig
      drivers/gpu/trace/Makefile
      drivers/gpu/trace/trace_gpu_mem.c
      include/trace/events/gpu_mem.h
    Merge 4.19.117 into android-4.19
Linux 4.19.117
  * mm/vmalloc.c: move 'area->pages' after if statement
      mm/vmalloc.c
    wil6210: remove reset file from debugfs
    wil6210: make sure Rx ring sizes are correlated
    wil6210: add general initialization/size checks
    wil6210: ignore HALP ICR if already handled
    wil6210: check rx_buff_mgmt before accessing it
    x86/resctrl: Fix invalid attempt at removing the default resource group
    x86/resctrl: Preserve CDP enable over CPU hotplug
    x86/microcode/AMD: Increase microcode PATCH_MAX_SIZE
  * scsi: target: fix hang when multiple threads try to destroy the same iscsi session
      include/target/iscsi/iscsi_target_core.h
    scsi: target: remove boilerplate code
    kvm: x86: Host feature SSBD doesn't imply guest feature SPEC_CTRL_SSBD
  * ext4: do not zeroout extents beyond i_disksize
      fs/ext4/extents.c
    drm/amd/powerplay: force the trim of the mclk dpm_levels if OD is enabled
  * usb: dwc3: gadget: Don't clear flags before transfer ended
      drivers/usb/dwc3/gadget.c
  * usb: dwc3: gadget: don't enable interrupt when disabling endpoint
      drivers/usb/dwc3/gadget.c
    mac80211_hwsim: Use kstrndup() in place of kasprintf()
    btrfs: check commit root generation in should_ignore_root
  * tracing: Fix the race between registering 'snapshot' event trigger and triggering 'snapshot' operation
      kernel/trace/trace_events_trigger.c
  * keys: Fix proc_keys_next to increase position index
      security/keys/proc.c
  * ALSA: usb-audio: Check mapping at creating connector controls, too
      sound/usb/mixer.c
      sound/usb/mixer_maps.c
  * ALSA: usb-audio: Don't create jack controls for PCM terminals
      sound/usb/mixer.c
  * ALSA: usb-audio: Don't override ignore_ctl_error value from the map
      sound/usb/mixer.c
  * ALSA: usb-audio: Filter error from connector kctl ops, too
      sound/usb/mixer.c
    ASoC: Intel: mrfld: return error codes when an error occurs
    ASoC: Intel: mrfld: fix incorrect check on p->sink
  * ext4: fix incorrect inodes per group in error message
      fs/ext4/super.c
  * ext4: fix incorrect group count in ext4_fill_super error message
      fs/ext4/super.c
    pwm: pca9685: Fix PWM/GPIO inter-operation
  * jbd2: improve comments about freeing data buffers whose page mapping is NULL
      fs/jbd2/commit.c
  * scsi: ufs: Fix ufshcd_hold() caused scheduling while atomic
      drivers/scsi/ufs/ufshcd.c
  * ovl: fix value of i_ino for lower hardlink corner case
      fs/overlayfs/inode.c
    net: dsa: mt7530: fix tagged frames pass-through in VLAN-unaware mode
    net: stmmac: dwmac-sunxi: Provide TX and RX fifo sizes
  * net: revert default NAPI poll timeout to 2 jiffies
      net/core/dev.c
  * net: qrtr: send msgs from local of same id as broadcast
      net/qrtr/qrtr.c
  * net: ipv6: do not consider routes via gateways for anycast address check
      include/net/ip6_route.h
  * net: ipv4: devinet: Fix crash when add/del multicast IP with autojoin
      net/ipv4/devinet.c
    hsr: check protocol version in hsr_newlink()
    amd-xgbe: Use __napi_schedule() in BH context
  * ANDROID: GKI: drivers: of-thermal: Relate thermal zones using same sensor
      drivers/thermal/of-thermal.c
    ANDROID: GKI: Bulk ABI update
  * ANDROID: GKI: dma: Add set_dma_mask hook to struct dma_map_ops
      include/linux/dma-mapping.h
    Merge remote-tracking branch 'aosp/upstream-f2fs-stable-linux-4.19.y' into android-4.19
    ANDROID: GKI: ABI update due to recent patches
    Merge 4.19.116 into android-4.19
  * FROMLIST: drm/prime: add support for virtio exported objects
      drivers/gpu/drm/drm_prime.c
      include/drm/drm_drv.h
  * FROMLIST: dma-buf: add support for virtio exported objects
      drivers/dma-buf/dma-buf.c
      include/linux/dma-buf.h
    UPSTREAM: drm/virtio: module_param_named() requires linux/moduleparam.h
    UPSTREAM: drm/virtio: fix resource id creation race
    UPSTREAM: drm/virtio: make resource id workaround runtime switchable.
    BACKPORT: drm/virtio: Drop deprecated load/unload initialization
  * ANDROID: GKI: Add DRM_TTM config to GKI
      init/Kconfig.gki
    ANDROID: Bulk update the ABI xml representation
  * ANDROID: GKI: spmi: pmic-arb: don't enable SPMI_MSM_PMIC_ARB by default
      drivers/spmi/Kconfig
  * ANDROID: GKI: attribute page lock and waitqueue functions as sched
      include/linux/pagemap.h
      include/linux/wait.h
      kernel/sched/wait.c
      mm/filemap.c
  * ANDROID: GKI: extcon: Fix Add usage of blocking notifier chain
      drivers/extcon/extcon.c
      include/linux/extcon.h
  * ANDROID: GKI: USB: pd: Extcon fix for C current
      include/linux/extcon.h
  * ANDROID: drm/dsi: Fix byte order of DCS set/get brightness
      drivers/gpu/drm/drm_mipi_dsi.c
      include/drm/drm_mipi_dsi.h
  * ANDROID: GKI: mm: Export symbols to modularize CONFIG_MSM_DRM
      mm/vmalloc.c
  * ANDROID: GKI: ALSA: compress: Add support to send codec specific data
      include/sound/compress_driver.h
      include/uapi/sound/compress_offload.h
      sound/core/compress_offload.c
      sound/soc/soc-compress.c
  * ANDROID: GKI: ALSA: Compress - dont use lock for all ioctls
      sound/core/compress_offload.c
  * ANDROID: GKI: ASoC: msm: qdsp6v2: add support for AMR_WB_PLUS offload
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: msm: dolby: MAT and THD audiocodec name modification
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: asoc: msm: Add support for compressed perf mode
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: msm: audio: support for gapless_pcm
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: uapi: msm: dolby: Support for TrueHD and MAT decoders
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: ASoC: msm: qdsp6v2: Add TrueHD HDMI compress pass-though
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: ALSA: compress: Add APTX format support in ALSA
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: msm: qdsp6v2: Add timestamp support for compress capture
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: SoC: msm: Add support for meta data in compressed TX
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: ALSA: compress: Add DSD format support for ALSA
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: ASoC: msm: qdsp6v2: add support for ALAC and APE offload
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: SoC: msm: Add compressed TX and passthrough support
      include/uapi/sound/compress_offload.h
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: ASoC: msm: qdsp6v2: Add FLAC in compress offload path
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: ASoC: msm: add support for different compressed formats
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: ASoC: msm: Update the encode option and sample rate
      include/uapi/sound/compress_params.h
    ANDROID: GKI: Enable CONFIG_SND_VERBOSE_PROCFS in gki_defconfig
  * ANDROID: GKI: Add hidden CONFIG_SND_SOC_COMPRESS to gki_defconfig
      init/Kconfig.gki
  * ANDROID: GKI: ALSA: pcm: add locks for accessing runtime resource
      include/sound/pcm.h
    ANDROID: GKI: Update ABI for DRM changes
  * ANDROID: GKI: Add drm_dp_send_dpcd_{read,write} accessor functions
      drivers/gpu/drm/drm_dp_mst_topology.c
      include/drm/drm_dp_mst_helper.h
  * ANDROID: GKI: drm: Add drm_dp_mst_get_max_sdp_streams_supported accessor function
      drivers/gpu/drm/drm_dp_mst_topology.c
      include/drm/drm_dp_mst_helper.h
  * ANDROID: GKI: drm: Add drm_dp_mst_has_fec accessor function
      drivers/gpu/drm/drm_dp_mst_topology.c
      include/drm/drm_dp_mst_helper.h
  * ANDROID: GKI: Add 'dsc_info' to struct drm_dp_mst_port
      drivers/gpu/drm/drm_dp_mst_topology.c
      include/drm/drm_dp_mst_helper.h
  * ANDROID: GKI: usb: Add support to handle USB SMMU S1 address
      drivers/usb/core/hcd.c
      drivers/usb/core/usb.c
      drivers/usb/host/xhci.c
      include/linux/usb.h
      include/linux/usb/hcd.h
  * ANDROID: GKI: usb: Add helper APIs to return xhci phys addresses
      drivers/usb/core/hcd.c
      drivers/usb/core/usb.c
      drivers/usb/host/xhci.c
      include/linux/usb.h
      include/linux/usb/hcd.h
  * ANDROID: Add C protos for dma_buf/drm_prime get_uuid
      include/drm/drm_prime.h
      include/linux/dma-buf.h
  * ANDROID: GKI: Make linux_banner a C pointer
      include/linux/printk.h
      init/version.c
  * ANDROID: GKI: Add 'refresh_rate', 'id' to struct drm_panel_notifier
      include/drm/drm_panel.h
  * ANDROID: GKI: Add 'i2c_mutex' to struct drm_dp_aux
      include/drm/drm_dp_helper.h
  * ANDROID: GKI: Add 'checksum' to struct drm_connector
      include/drm/drm_connector.h
  * Revert "BACKPORT: drm: Add HDR source metadata property"
      drivers/gpu/drm/drm_atomic.c
      drivers/gpu/drm/drm_connector.c
      include/drm/drm_connector.h
      include/drm/drm_mode_config.h
      include/linux/hdmi.h
      include/uapi/drm/drm_mode.h
  * Revert "BACKPORT: drm: Parse HDR metadata info from EDID"
      drivers/gpu/drm/drm_edid.c
  * ANDROID: drm: Add DP colorspace property
      drivers/gpu/drm/drm_connector.c
      include/drm/drm_connector.h
  * ANDROID: GKI: drm: Initialize display->hdmi when parsing vsdb
      drivers/gpu/drm/drm_edid.c
  * ANDROID: drivers: gpu: drm: add support to batch commands
      drivers/gpu/drm/drm_mipi_dsi.c
      include/drm/drm_mipi_dsi.h
    ANDROID: ABI: update the qcom whitelist
  * ANDROID: GKI: ARM64: smp: add vendor field pending_ipi
      arch/arm64/kernel/smp.c
    ANDROID: gki_defconfig: enable msm serial early console
  * ANDROID: serial: msm_geni_serial_console : Add Earlycon support
      drivers/tty/serial/Kconfig
      drivers/tty/serial/Makefile
      drivers/tty/serial/msm_geni_serial_console.c
  * ANDROID: GKI: serial: core: export uart_console_device
      drivers/tty/serial/serial_core.c
  * f2fs: fix quota_sync failure due to f2fs_lock_op
      fs/f2fs/data.c
  * f2fs: support read iostat
      fs/f2fs/checkpoint.c
      fs/f2fs/data.c
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
      fs/f2fs/gc.c
      fs/f2fs/node.c
      fs/f2fs/sysfs.c
      include/trace/events/f2fs.h
  * f2fs: Fix the accounting of dcc->undiscard_blks
      fs/f2fs/segment.c
  * f2fs: fix to handle error path of f2fs_ra_meta_pages()
      fs/f2fs/checkpoint.c
  * f2fs: report the discard cmd errors properly
      fs/f2fs/segment.c
  * f2fs: fix long latency due to discard during umount
      fs/f2fs/segment.c
  * f2fs: add tracepoint for f2fs iostat
      fs/f2fs/f2fs.h
      fs/f2fs/super.c
      fs/f2fs/sysfs.c
      include/trace/events/f2fs.h
  * f2fs: introduce sysfs/data_io_flag to attach REQ_META/FUA
      fs/f2fs/data.c
      fs/f2fs/f2fs.h
      fs/f2fs/sysfs.c
    ANDROID: GKI: update abi definition due to previous changes in the tree
Linux 4.19.116
    efi/x86: Fix the deletion of variables in mixed mode
    mfd: dln2: Fix sanity checking for endpoints
    etnaviv: perfmon: fix total and idle HI cyleces readout
    misc: echo: Remove unnecessary parentheses and simplify check for zero
    powerpc/fsl_booke: Avoid creating duplicate tlb1 entry
    ftrace/kprobe: Show the maxactive number on kprobe_events
  * drm: Remove PageReserved manipulation from drm_pci_alloc
      drivers/gpu/drm/drm_pci.c
  * drm/dp_mst: Fix clearing payload state on topology disable
      drivers/gpu/drm/drm_dp_mst_topology.c
  * Revert "drm/dp_mst: Remove VCPI while disabling topology mgr"
      drivers/gpu/drm/drm_dp_mst_topology.c
    crypto: ccree - only try to map auth tag if needed
    crypto: ccree - dec auth tag size from cryptlen map
    crypto: ccree - don't mangle the request assoclen
    crypto: ccree - zero out internal struct before use
    crypto: ccree - improve error handling
    crypto: caam - update xts sector size for large input length
    dm zoned: remove duplicate nr_rnd_zones increase in dmz_init_zone()
    btrfs: use nofs allocations for running delayed items
    powerpc: Make setjmp/longjmp signature standard
    powerpc: Add attributes for setjmp/longjmp
    scsi: mpt3sas: Fix kernel panic observed on soft HBA unplug
    powerpc/kprobes: Ignore traps that happened in real mode
    powerpc/xive: Use XIVE_BAD_IRQ instead of zero to catch non configured IPIs
    powerpc/hash64/devmap: Use H_PAGE_THP_HUGE when setting up huge devmap PTE entries
    powerpc/64/tm: Don't let userspace set regs->trap via sigreturn
    powerpc/powernv/idle: Restore AMR/UAMOR/AMOR after idle
    xen/blkfront: fix memory allocation flags in blkfront_setup_indirect()
    ipmi: fix hung processes in __get_guid()
    libata: Return correct status in sata_pmp_eh_recover_pm() when ATA_DFLAG_DETACH is set
    hfsplus: fix crash and filesystem corruption when deleting files
    cpufreq: powernv: Fix use-after-free
  * kmod: make request_module() return an error when autoloading is disabled
      kernel/kmod.c
    clk: ingenic/jz4770: Exit with error if CGU init failed
    Input: i8042 - add Acer Aspire 5738z to nomux list
    s390/diag: fix display of diagnose call statistics
    perf tools: Support Python 3.8+ in Makefile
    ocfs2: no need try to truncate file beyond i_size
  * fs/filesystems.c: downgrade user-reachable WARN_ONCE() to pr_warn_once()
      fs/filesystems.c
  * ext4: fix a data race at inode->i_blocks
      fs/ext4/inode.c
    NFS: Fix a page leak in nfs_destroy_unlinked_subrequests()
    powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable
    drm/etnaviv: rework perfmon query infrastructure
    rtc: omap: Use define directive for PIN_CONFIG_ACTIVE_HIGH
    selftests: vm: drop dependencies on page flags from mlock2 tests
  * arm64: armv8_deprecated: Fix undef_hook mask for thumb setend
      arch/arm64/kernel/armv8_deprecated.c
    scsi: zfcp: fix missing erp_lock in port recovery trigger for point-to-point
  * dm verity fec: fix memory leak in verity_fec_dtr
      drivers/md/dm-verity-fec.c
    dm writecache: add cond_resched to avoid CPU hangs
    arm64: dts: allwinner: h6: Fix PMU compatible
  * net: qualcomm: rmnet: Allow configuration updates to existing devices
      drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c
  * mm: Use fixed constant in page_frag_alloc instead of size + 1
      mm/page_alloc.c
    tools: gpio: Fix out-of-tree build regression
  * x86/speculation: Remove redundant arch_smt_update() invocation
      kernel/cpu.c
    powerpc/pseries: Drop pointless static qualifier in vpa_debugfs_init()
    erofs: correct the remaining shrink objects
    crypto: mxs-dcp - fix scatterlist linearization for hash
    btrfs: fix missing semaphore unlock in btrfs_sync_file
    btrfs: fix missing file extent item for hole after ranged fsync
    btrfs: drop block from cache on error in relocation
    btrfs: set update the uuid generation as soon as possible
    Btrfs: fix crash during unmount due to race with delayed inode workers
    mtd: spinand: Do not erase the block before writing a bad block marker
    mtd: spinand: Stop using spinand->oobbuf for buffering bad block markers
    CIFS: Fix bug which the return value by asynchronous read is error
    KVM: VMX: fix crash cleanup when KVM wasn't used
    KVM: x86: Gracefully handle __vmalloc() failure during VM allocation
    KVM: VMX: Always VMCLEAR in-use VMCSes during crash with kexec support
    KVM: x86: Allocate new rmap and large page tracking when moving memslot
    KVM: s390: vsie: Fix delivery of addressing exceptions
    KVM: s390: vsie: Fix region 1 ASCE sanity shadow address checks
    KVM: nVMX: Properly handle userspace interrupt window request
    x86/entry/32: Add missing ASM_CLAC to general_protection entry
  * signal: Extend exec_id to 64bits
      fs/exec.c
      include/linux/sched.h
      kernel/signal.c
    ath9k: Handle txpower changes even when TPC is disabled
    MIPS: OCTEON: irq: Fix potential NULL pointer dereference
    MIPS/tlbex: Fix LDDIR usage in setup_pw() for Loongson-3
  * pstore: pstore_ftrace_seq_next should increase position index
      fs/pstore/inode.c
    irqchip/versatile-fpga: Apply clear-mask earlier
  * KEYS: reaching the keys quotas correctly
      security/keys/key.c
      security/keys/keyctl.c
    tpm: tpm2_bios_measurements_next should increase position index
    tpm: tpm1_bios_measurements_next should increase position index
    tpm: Don't make log failures fatal
  * PCI: endpoint: Fix for concurrent memory allocation in OB address region
      include/linux/pci-epc.h
  * PCI: Add boot interrupt quirk mechanism for Xeon chipsets
      drivers/pci/quirks.c
    PCI/ASPM: Clear the correct bits when enabling L1 substates
    PCI: pciehp: Fix indefinite wait on sysfs requests
    nvme: Treat discovery subsystems as unique subsystems
  * nvme-fc: Revert "add module to ops template to allow module references"
      include/linux/nvme-fc-driver.h
  * thermal: devfreq_cooling: inline all stubs for CONFIG_DEVFREQ_THERMAL=n
      include/linux/devfreq_cooling.h
    acpi/x86: ignore unspecified bit positions in the ACPI global lock field
    media: ti-vpe: cal: fix disable_irqs to only the intended target
    ALSA: hda/realtek - Add quirk for MSI GL63
    ALSA: hda/realtek - Remove now-unnecessary XPS 13 headphone noise fixups
    ALSA: hda/realtek - Set principled PC Beep configuration for ALC256
    ALSA: doc: Document PC Beep Hidden Register on Realtek ALC256
    ALSA: pcm: oss: Fix regression by buffer overflow fix
    ALSA: ice1724: Fix invalid access for enumerated ctl items
    ALSA: hda: Fix potential access overflow in beep helper
    ALSA: hda: Add driver blacklist
  * ALSA: usb-audio: Add mixer workaround for TRX40 and co
      sound/usb/mixer_maps.c
  * usb: gadget: composite: Inform controller driver of self-powered
      drivers/usb/gadget/composite.c
  * usb: gadget: f_fs: Fix use after free issue as part of queue failure
      drivers/usb/gadget/function/f_fs.c
    ASoC: topology: use name_prefix for new kcontrol
  * ASoC: dpcm: allow start or stop during pause for backend
      sound/soc/soc-pcm.c
  * ASoC: dapm: connect virtual mux with default value
      sound/soc/soc-dapm.c
  * ASoC: fix regwmask
      sound/soc/soc-ops.c
  * slub: improve bit diffusion for freelist ptr obfuscation
      mm/slub.c
  * uapi: rename ext2_swab() to swab() and share globally in swab.h
      include/linux/swab.h
      include/uapi/linux/swab.h
      lib/find_bit.c
  * IB/mlx5: Replace tunnel mpls capability bits for tunnel_offloads
      include/linux/mlx5/mlx5_ifc.h
    btrfs: track reloc roots based on their commit root bytenr
    btrfs: remove a BUG_ON() from merge_reloc_roots()
    btrfs: qgroup: ensure qgroup_rescan_running is only set when the worker is at least queued
    block, bfq: fix use-after-free in bfq_idle_slice_timer_body
    locking/lockdep: Avoid recursion in lockdep_count_{for,back}ward_deps()
  * firmware: fix a double abort case with fw_load_sysfs_fallback
      drivers/base/firmware_loader/fallback.c
    md: check arrays is suspended in mddev_detach before call quiesce operations
  * irqchip/gic-v4: Provide irq_retrigger to avoid circular locking dependency
      drivers/irqchip/irq-gic-v3-its.c
  * usb: dwc3: core: add support for disabling SS instances in park mode
      drivers/usb/dwc3/core.c
      drivers/usb/dwc3/core.h
    media: i2c: ov5695: Fix power on and off sequences
  * block: Fix use-after-free issue accessing struct io_cq
      block/blk-ioc.c
      include/linux/iocontext.h
  * genirq/irqdomain: Check pointer in irq_domain_alloc_irqs_hierarchy()
      kernel/irq/irqdomain.c
    efi/x86: Ignore the memory attributes table on i386
    x86/boot: Use unsigned comparison for addresses
    gfs2: Don't demote a glock until its revokes are written
  * pstore/platform: fix potential mem leak if pstore_init_fs failed
      fs/pstore/platform.c
    libata: Remove extra scsi_host_put() in ata_scsi_add_hosts()
    media: i2c: video-i2c: fix build errors due to 'imply hwmon'
    PCI/switchtec: Fix init_completion race condition with poll_wait()
    selftests/x86/ptrace_syscall_32: Fix no-vDSO segfault
  * sched: Avoid scale real weight down to zero
      kernel/sched/sched.h
    irqchip/versatile-fpga: Handle chained IRQs properly
  * block: keep bdi->io_pages in sync with max_sectors_kb for stacked devices
      block/blk-settings.c
    x86: Don't let pgprot_modify() change the page encryption bit
  * xhci: bail out early if driver can't accress host in resume
      drivers/usb/host/xhci.c
    null_blk: fix spurious IO errors after failed past-wp access
    null_blk: Handle null_add_dev() failures properly
    null_blk: Fix the null_add_dev() error path
    firmware: arm_sdei: fix double-lock on hibernate with shared events
    media: venus: hfi_parser: Ignore HEVC encoding for V1
    cpufreq: imx6q: Fixes unwanted cpu overclocking on i.MX6ULL
    i2c: st: fix missing struct parameter description
    qlcnic: Fix bad kzalloc null test
    cxgb4/ptp: pass the sign of offset delta in FW CMD
    hinic: fix wrong para of wait_for_completion_timeout
    hinic: fix a bug of waitting for IO stopped
    net: vxge: fix wrong __VA_ARGS__ usage
    bus: sunxi-rsb: Return correct data when mixing 16-bit and 8-bit reads
    ARM: dts: sun8i-a83t-tbs-a711: HM5065 doesn't like such a high voltage
    ANDROID: build.config.allmodconfig: Re-enable XFS_FS
  * FROMGIT: of: property: Add device link support for extcon
      drivers/of/property.c
    ANDROID: GKI: arm64: gki_defconfig: enable CONFIG_MM_EVENT_STAT
  * ANDROID: GKI: add fields from per-process mm event tracking feature
      include/linux/mm_event.h
      include/linux/sched.h
      mm/Kconfig
      mm/Makefile
      mm/mm_event.c
  * ANDROID: GKI: fix ABI diffs caused by ION heap and pool vmstat additions
      include/linux/mmzone.h
      mm/vmstat.c
  * UPSTREAM: GKI: panic/reboot: allow specifying reboot_mode for panic only
      include/linux/reboot.h
      kernel/panic.c
      kernel/reboot.c
  * ANDROID: GKI: of: property: Add device link support for phys property
      drivers/of/property.c
  * ANDROID: GKI: usb: phy: Fix ABI diff for usb_otg_state
      include/linux/usb/phy.h
  * ANDROID: GKI: usb: phy: Fix ABI diff due to usb_phy.drive_dp_pulse
      include/linux/usb/phy.h
  * ANDROID: GKI: usb: phy: Fix ABI diff for usb_phy_type and usb_phy.reset
      include/linux/usb/phy.h
    ANDROID: gki_defconfig: enable CONFIG_GPIO_SYSFS
  * ANDROID: GKI: qcom: Fix compile issue when setting msm_lmh_dcvs as a module
      kernel/trace/power-traces.c
  * ANDROID: GKI: drivers: cpu_cooling: allow platform freq mitigation
      drivers/thermal/cpu_cooling.c
      include/linux/cpu_cooling.h
  * ANDROID: GKI: ASoC: Add locking in DAPM widget power update
      include/sound/soc.h
      sound/soc/soc-core.c
      sound/soc/soc-dapm.c
  * ANDROID: GKI: ASoC: jack: Fix buttons enum value
      include/sound/jack.h
  * ANDROID: GKI: ALSA: jack: Add support to report second microphone
      include/sound/jack.h
      include/uapi/linux/input-event-codes.h
      sound/core/jack.c
  * ANDROID: GKI: ALSA: jack: Update supported jack switch types
      include/linux/mod_devicetable.h
      include/sound/jack.h
      include/uapi/linux/input-event-codes.h
      sound/core/jack.c
  * ANDROID: GKI: ALSA: jack: update jack types
      include/sound/jack.h
  * ANDROID: GKI: Export symbols arm_cpuidle_suspend, cpuidle_dev and cpuidle_register_governor
      arch/arm64/kernel/cpuidle.c
      drivers/cpuidle/cpuidle.c
  * ANDROID: GKI: usb: hcd: Add USB atomic notifier callback for HC died error
      drivers/usb/core/hcd.c
      drivers/usb/core/notify.c
      drivers/usb/core/usb.h
      include/linux/usb.h
  * ANDROID: media: increase video max frame number
      include/media/videobuf2-core.h
      include/uapi/linux/videodev2.h
  * BACKPORT: nvmem: core: add NVMEM_SYSFS Kconfig
      drivers/nvmem/Kconfig
      drivers/nvmem/Makefile
      drivers/nvmem/core.c
      drivers/nvmem/nvmem-sysfs.c
      drivers/nvmem/nvmem.h
  * UPSTREAM: nvmem: add support for cell info
      drivers/nvmem/core.c
      include/linux/nvmem-provider.h
  * UPSTREAM: nvmem: remove the global cell list
      drivers/nvmem/core.c
  * UPSTREAM: nvmem: use kref
      drivers/nvmem/core.c
  * UPSTREAM: nvmem: use list_for_each_entry_safe in nvmem_device_remove_all_cells()
      drivers/nvmem/core.c
  * UPSTREAM: nvmem: provide nvmem_dev_name()
      drivers/nvmem/core.c
      include/linux/nvmem-consumer.h
    ANDROID: GKI: Bulk ABI update
  * ANDROID: GKI: cpuhotplug: adding hotplug enums for vendor code
      include/linux/cpuhotplug.h
  * ANDROID: Incremental fs: Fix create_file performance
      fs/incfs/format.c
    ANDROID: build.config.common: Add BUILDTOOLS_PREBUILT_BIN
  * UPSTREAM: kheaders: include only headers into kheaders_data.tar.xz
      kernel/gen_kheaders.sh
  * UPSTREAM: kheaders: remove meaningless -R option of 'ls'
      kernel/gen_kheaders.sh
  * ANDROID: GKI: of: platform: initialize of_reserved_mem
      drivers/of/platform.c
  * ANDROID: driver: gpu: drm: add notifier for panel related events
      drivers/gpu/drm/drm_panel.c
      include/drm/drm_connector.h
      include/drm/drm_panel.h
  * ANDROID: include: drm: support unicasting mipi cmds to dsi ctrls
      include/drm/drm_mipi_dsi.h
  * ANDROID: include: drm: increase DRM max property count to 64
      include/drm/drm_mode_object.h
  * BACKPORT: drm: Add HDMI colorspace property
      drivers/gpu/drm/drm_atomic.c
      drivers/gpu/drm/drm_connector.c
      include/drm/drm_connector.h
  * ANDROID: drm: edid: add support for additional CEA extension blocks
      drivers/gpu/drm/drm_edid.c
      include/drm/drm_connector.h
      include/drm/drm_edid.h
  * BACKPORT: drm: Parse HDR metadata info from EDID
      drivers/gpu/drm/drm_edid.c
  * BACKPORT: drm: Add HDR source metadata property
      drivers/gpu/drm/drm_atomic.c
      drivers/gpu/drm/drm_connector.c
      include/drm/drm_connector.h
      include/drm/drm_mode_config.h
      include/linux/hdmi.h
      include/uapi/drm/drm_mode.h
  * BACKPORT: drm/dp_mst: Parse FEC capability on MST ports
      drivers/gpu/drm/drm_dp_mst_topology.c
      include/drm/drm_dp_mst_helper.h
    ANDROID: GKI: ABI update for DRM changes
    ANDROID: ABI: add missing elf variables to representation
  * ANDROID: GKI: power_supply: Add PROP_MOISTURE_DETECTION_ENABLED
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: include: drm: add the definitions for DP Link Compliance tests
      include/drm/drm_dp_helper.h
  * ANDROID: drivers: gpu: drm: fix bugs encountered while fuzzing
      drivers/gpu/drm/drm_file.c
      drivers/gpu/drm/drm_property.c
  * FROMLIST: power_supply: Add additional health properties to the header
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
    UPSTREAM: power: supply: core: Update sysfs-class-power ABI document
  * UPSTREAM: Merge remote-tracking branch 'aosp/upstream-f2fs-stable-linux-4.19.y' into android-4.19 (v5.7-rc1)
      fs/f2fs/Kconfig
      fs/f2fs/checkpoint.c
      fs/f2fs/data.c
      fs/f2fs/debug.c
      fs/f2fs/dir.c
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
      fs/f2fs/gc.c
      fs/f2fs/inode.c
      fs/f2fs/namei.c
      fs/f2fs/node.c
      fs/f2fs/recovery.c
      fs/f2fs/segment.c
      fs/f2fs/segment.h
      fs/f2fs/shrinker.c
      fs/f2fs/super.c
      fs/f2fs/sysfs.c
      fs/f2fs/xattr.c
      fs/f2fs/xattr.h
      include/linux/f2fs_fs.h
      include/trace/events/f2fs.h
      mm/swapfile.c
  * ANDROID: drivers: gpu: drm: add support for secure framebuffer
      drivers/gpu/drm/drm_framebuffer.c
      include/uapi/drm/drm_mode.h
  * ANDROID: include: uapi: drm: add additional QCOM modifiers
      include/uapi/drm/drm_fourcc.h
  * ANDROID: drm: dsi: add two DSI mode flags for BLLP
      include/drm/drm_mipi_dsi.h
  * ANDROID: include: uapi: drm: add additional drm mode flags
      include/uapi/drm/drm_mode.h
  * UPSTREAM: drm: plug memory leak on drm_setup() failure
      drivers/gpu/drm/drm_file.c
  * UPSTREAM: drm: factor out drm_close_helper() function
      drivers/gpu/drm/drm_file.c
    ANDROID: GKI: Bulk ABI update
  * BACKPORT: nl80211: Add per peer statistics to compute FCS error rate
      include/net/cfg80211.h
      include/uapi/linux/nl80211.h
      net/wireless/nl80211.c
  * ANDROID: GKI: sound: usb: Add snd_usb_enable_audio_stream/find_snd_usb_substream
      sound/usb/card.c
      sound/usb/card.h
      sound/usb/pcm.c
      sound/usb/pcm.h
      sound/usb/usbaudio.h
  * ANDROID: GKI: add dma-buf includes
      drivers/dma-buf/dma-buf.c
  * ANDROID: GKI: sched: struct fields for Per-Sched-domain over utilization
      include/linux/sched/topology.h
  * ANDROID: GKI: Add vendor fields to root_domain
      kernel/sched/sched.h
    ANDROID: gki_defconfig: Enable CONFIG_IRQ_TIME_ACCOUNTING
    ANDROID: fix allmodconfig build to use the right toolchain
    ANDROID: fix allmodconfig build to use the right toolchain
    ANDROID: GKI: Update ABI
  * Revert "UPSTREAM: mm, page_alloc: spread allocations across zones before introducing fragmentation"
      mm/internal.h
      mm/page_alloc.c
  * Revert "UPSTREAM: mm: use alloc_flags to record if kswapd can wake"
      mm/internal.h
      mm/page_alloc.c
  * Revert "BACKPORT: mm: move zone watermark accesses behind an accessor"
      include/linux/mmzone.h
      mm/compaction.c
      mm/page_alloc.c
  * Revert "BACKPORT: mm: reclaim small amounts of memory when an external fragmentation event occurs"
      include/linux/mm.h
      include/linux/mmzone.h
      kernel/sysctl.c
      mm/page_alloc.c
      mm/vmscan.c
  * Revert "BACKPORT: mm, compaction: be selective about what pageblocks to clear skip hints"
      include/linux/mmzone.h
      mm/compaction.c
  * ANDROID: GKI: panic: add vendor callback function in panic()
      include/linux/kernel.h
      kernel/panic.c
  * UPSTREAM: GKI: thermal: make device_register's type argument const
      drivers/thermal/thermal_core.c
      include/linux/thermal.h
  * ANDROID: GKI: add base.h include to match MODULE_VERSIONS
      drivers/thermal/thermal_core.c
    ANDROID: update the ABI based on the new whitelist
  * ANDROID: GKI: fdt: export symbols required by modules
      drivers/of/fdt.c
  * ANDROID: GKI: drivers: of: Add APIs to find DDR device rank, HBB
      drivers/of/fdt.c
      include/linux/of_fdt.h
  * ANDROID: GKI: security: Add mmap export symbols for modules
      security/min_addr.c
  * ANDROID: GKI: arch: add stub symbols for boot_reason and cold_boot
      arch/arm64/kernel/setup.c
  * ANDROID: GKI: USB: Fix ABI diff for struct usb_bus
      drivers/usb/core/driver.c
      include/linux/usb.h
  * ANDROID: GKI: USB: Resolve ABI diff for usb_gadget and usb_gadget_ops
      drivers/usb/gadget/udc/core.c
      include/linux/usb/gadget.h
  * ANDROID: GKI: add hidden V4L2_MEM2MEM_DEV
      init/Kconfig.gki
    ANDROID: GKI: enable VIDEO_V4L2_SUBDEV_API
  * ANDROID: GKI: export symbols from abi_gki_aarch64_qcom_whitelist
      arch/arm64/mm/mmu.c
      drivers/base/core.c
      drivers/clocksource/arm_arch_timer.c
      drivers/cpuidle/governor.c
      drivers/gpu/drm/drm_atomic_helper.c
      drivers/gpu/drm/drm_modes.c
      fs/kernfs/symlink.c
      kernel/params.c
      kernel/power/main.c
      kernel/power/qos.c
      kernel/power/suspend.c
      kernel/printk/printk.c
      kernel/time/tick-sched.c
      lib/ioremap.c
      lib/plist.c
      mm/memblock.c
      mm/mmap.c
      security/security.c
      sound/usb/helper.c
    ANDROID: Update the whitelist for qcom SoCs
  * ANDROID: Incremental fs: Fix compound page usercopy crash
      fs/incfs/data_mgmt.c
      fs/incfs/vfs.c
    ANDROID: Incremental fs: Clean up incfs_test build process
  * ANDROID: Incremental fs: make remount log buffer change atomic
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/vfs.c
  * ANDROID: Incremental fs: Optimize get_filled_block
      fs/incfs/data_mgmt.c
      fs/incfs/format.c
  * ANDROID: Incremental fs: Fix mislabeled __user ptrs
      fs/incfs/data_mgmt.c
      fs/incfs/integrity.c
      fs/incfs/vfs.c
  * ANDROID: Incremental fs: Use 64-bit int for file_size when writing hash blocks
      fs/incfs/format.c
      fs/incfs/format.h
    Merge remote-tracking branch 'aosp/upstream-f2fs-stable-linux-4.19.y' into android-4.19 (v5.7-rc1)
    Merge remote-tracking branch 'aosp/android-4.19' into android-4.19-stable
    ubifs: wire up FS_IOC_GET_ENCRYPTION_NONCE
  * f2fs: wire up FS_IOC_GET_ENCRYPTION_NONCE
      fs/f2fs/file.c
  * ext4: wire up FS_IOC_GET_ENCRYPTION_NONCE
      fs/ext4/ioctl.c
  * fscrypt: add FS_IOC_GET_ENCRYPTION_NONCE ioctl
      fs/crypto/fscrypt_private.h
      fs/crypto/keysetup.c
      fs/crypto/policy.c
      include/linux/fscrypt.h
      include/uapi/linux/fscrypt.h
  * f2fs: keep inline_data when compression conversion
      fs/f2fs/file.c
  * f2fs: fix to disable compression on directory
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
  * f2fs: add missing CONFIG_F2FS_FS_COMPRESSION
      fs/f2fs/sysfs.c
  * f2fs: switch discard_policy.timeout to bool type
      fs/f2fs/f2fs.h
      fs/f2fs/segment.c
    f2fs: fix to verify tpage before releasing in f2fs_free_dic()
  * f2fs: show compression in statx
      fs/f2fs/file.c
    f2fs: clean up dic->tpages assignment
  * f2fs: compress: support zstd compress algorithm
      fs/f2fs/Kconfig
      fs/f2fs/f2fs.h
      fs/f2fs/super.c
      include/trace/events/f2fs.h
    f2fs: compress: add .{init,destroy}_decompress_ctx callback
    f2fs: compress: fix to call missing destroy_compress_ctx()
  * f2fs: change default compression algorithm
      fs/f2fs/super.c
    f2fs: clean up {cic,dic}.ref handling
  * f2fs: fix to use f2fs_readpage_limit() in f2fs_read_multi_pages()
      fs/f2fs/data.c
  * f2fs: xattr.h: Make stub helpers inline
      fs/f2fs/xattr.h
  * f2fs: fix to avoid double unlock
      fs/f2fs/data.c
  * f2fs: fix potential .flags overflow on 32bit architecture
      fs/f2fs/f2fs.h
      fs/f2fs/inode.c
  * f2fs: fix NULL pointer dereference in f2fs_verity_work()
      fs/f2fs/data.c
    f2fs: fix to clear PG_error if fsverity failed
  * f2fs: don't call fscrypt_get_encryption_info() explicitly in f2fs_tmpfile()
      fs/f2fs/namei.c
  * f2fs: don't trigger data flush in foreground operation
      fs/f2fs/f2fs.h
      fs/f2fs/gc.c
      fs/f2fs/node.c
      fs/f2fs/segment.c
  * f2fs: fix NULL pointer dereference in f2fs_write_begin()
      fs/f2fs/super.c
  * f2fs: clean up f2fs_may_encrypt()
      fs/f2fs/dir.c
      fs/f2fs/f2fs.h
      fs/f2fs/namei.c
  * f2fs: fix to avoid potential deadlock
      fs/f2fs/data.c
  * f2fs: don't change inode status under page lock
      fs/f2fs/dir.c
    f2fs: fix potential deadlock on compressed quota file
  * f2fs: delete DIO read lock
      fs/f2fs/data.c
  * f2fs: don't mark compressed inode dirty during f2fs_iget()
      fs/f2fs/f2fs.h
    f2fs: fix to account compressed blocks in f2fs_compressed_blocks()
  * f2fs: xattr.h: Replace zero-length array with flexible-array member
      fs/f2fs/xattr.h
  * f2fs: fix to update f2fs_super_block fields under sb_lock
      fs/f2fs/gc.c
  * f2fs: Add a new CP flag to help fsck fix resize SPO issues
      fs/f2fs/checkpoint.c
      include/linux/f2fs_fs.h
  * f2fs: Fix mount failure due to SPO after a successful online resize FS
      fs/f2fs/gc.c
  * f2fs: use kmem_cache pool during inline xattr lookups
      fs/f2fs/f2fs.h
      fs/f2fs/super.c
      fs/f2fs/xattr.c
      fs/f2fs/xattr.h
  * f2fs: skip migration only when BG_GC is called
      fs/f2fs/gc.c
  * f2fs: fix to show tracepoint correctly
      fs/f2fs/file.c
  * f2fs: avoid __GFP_NOFAIL in f2fs_bio_alloc
      fs/f2fs/data.c
      fs/f2fs/f2fs.h
  * f2fs: introduce F2FS_IOC_GET_COMPRESS_BLOCKS
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
  * f2fs: fix to avoid triggering IO in write path
      fs/f2fs/data.c
      fs/f2fs/f2fs.h
  * f2fs: add prefix for f2fs slab cache name
      fs/f2fs/data.c
      fs/f2fs/node.c
      fs/f2fs/segment.c
  * f2fs: introduce DEFAULT_IO_TIMEOUT
      fs/f2fs/checkpoint.c
      fs/f2fs/data.c
      fs/f2fs/f2fs.h
      fs/f2fs/gc.c
      fs/f2fs/inode.c
      fs/f2fs/node.c
      fs/f2fs/recovery.c
      fs/f2fs/segment.c
      fs/f2fs/super.c
  * f2fs: skip GC when section is full
      fs/f2fs/gc.c
  * f2fs: add migration count iff migration happens
      fs/f2fs/gc.c
  * f2fs: clean up bggc mount option
      fs/f2fs/f2fs.h
      fs/f2fs/gc.c
      fs/f2fs/super.c
  * f2fs: clean up lfs/adaptive mount option
      fs/f2fs/data.c
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
      fs/f2fs/gc.c
      fs/f2fs/segment.c
      fs/f2fs/super.c
  * f2fs: fix to show norecovery mount option
      fs/f2fs/f2fs.h
      fs/f2fs/super.c
  * f2fs: clean up parameter of macro XATTR_SIZE()
      fs/f2fs/xattr.c
      fs/f2fs/xattr.h
  * f2fs: clean up codes with {f2fs_,}data_blkaddr()
      fs/f2fs/data.c
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
      fs/f2fs/gc.c
      fs/f2fs/node.c
      fs/f2fs/recovery.c
  * f2fs: show mounted time
      fs/f2fs/debug.c
      fs/f2fs/segment.c
      fs/f2fs/segment.h
      fs/f2fs/sysfs.c
  * f2fs: Use scnprintf() for avoiding potential buffer overflow
      fs/f2fs/sysfs.c
  * f2fs: allow to clear F2FS_COMPR_FL flag
      fs/f2fs/file.c
  * f2fs: fix to check dirty pages during compressed inode conversion
      fs/f2fs/f2fs.h
  * f2fs: fix to account compressed inode correctly
      fs/f2fs/f2fs.h
  * f2fs: fix wrong check on F2FS_IOC_FSSETXATTR
      fs/f2fs/file.c
    f2fs: fix to avoid use-after-free in f2fs_write_multi_pages()
  * f2fs: fix to avoid using uninitialized variable
      fs/f2fs/file.c
  * f2fs: fix inconsistent comments
      fs/f2fs/checkpoint.c
      fs/f2fs/data.c
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
      fs/f2fs/gc.c
      fs/f2fs/inode.c
      fs/f2fs/namei.c
      fs/f2fs/node.c
      fs/f2fs/shrinker.c
      fs/f2fs/super.c
  * f2fs: remove i_sem lock coverage in f2fs_setxattr()
      fs/f2fs/xattr.c
  * f2fs: cover last_disk_size update with spinlock
      fs/f2fs/data.c
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
      fs/f2fs/super.c
  * f2fs: fix to check i_compr_blocks correctly
      fs/f2fs/inode.c
    Merge android-4.19 into android-4.19-stable
    ANDROID: GKI: Removed cuttlefish configs
    f2fs: fix to avoid potential deadlock
  * f2fs: add missing function name in kernel message
      fs/f2fs/f2fs.h
      fs/f2fs/node.c
  * f2fs: recycle unused compress_data.chksum feild
      fs/f2fs/f2fs.h
    f2fs: fix to avoid NULL pointer dereference
    f2fs: fix leaking uninitialized memory in compressed clusters
  * f2fs: fix the panic in do_checkpoint()
      fs/f2fs/checkpoint.c
      fs/f2fs/f2fs.h
      fs/f2fs/super.c
  * f2fs: fix to wait all node page writeback
      fs/f2fs/node.c
  * mm/swapfile.c: move inode_lock out of claim_swapfile
      mm/swapfile.c
  * fscrypt: don't evict dirty inodes after removing key
      fs/crypto/keysetup.c

Change-Id: I9ca86223eb4183aa40011ade86b74cc3beaabd4a
Signed-off-by: lucaswei <lucaswei@google.com>
2020-09-16 21:37:23 +08:00
George Kennedy
72f099805d fbcon: prevent user font height or width change from causing potential out-of-bounds access
commit 39b3cffb8cf3111738ea993e2757ab382253d86a upstream.

Add a check to fbcon_resize() to ensure that a possible change to user font
height or user font width will not allow a font data out-of-bounds access.
NOTE: must use original charcount in calculation as font charcount can
change and cannot be used to determine the font data allocated size.

Signed-off-by: George Kennedy <george.kennedy@oracle.com>
Cc: stable <stable@vger.kernel.org>
Reported-by: syzbot+38a3699c7eaf165b97a6@syzkaller.appspotmail.com
Link: https://lore.kernel.org/r/1596213192-6635-1-git-send-email-george.kennedy@oracle.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-09-03 11:24:27 +02:00
lucaswei
54f6dd2f81 Merge android-4.19-stable (4.19.115) into android-msm-pixel-4.19-lts
Merge 4.19.115 into android-4.19
Linux 4.19.115
    drm/msm: Use the correct dma_sync calls in msm_gem
  * drm_dp_mst_topology: fix broken drm_dp_sideband_parse_remote_dpcd_read()
      drivers/gpu/drm/drm_dp_mst_topology.c
  * usb: dwc3: don't set gadget->is_otg flag
      drivers/usb/dwc3/gadget.c
  * rpmsg: glink: Remove chunk size word align warning
      drivers/rpmsg/qcom_glink_native.c
  * arm64: Fix size of __early_cpu_boot_status
      arch/arm64/kernel/head.S
    drm/msm: stop abusing dma_map/unmap for cache
  * clk: qcom: rcg: Return failure for RCG update
      drivers/clk/qcom/clk-rcg2.c
    fbcon: fix null-ptr-deref in fbcon_switch
    RDMA/cm: Update num_paths in cma_resolve_iboe_route error flow
    Bluetooth: RFCOMM: fix ODEBUG bug in rfcomm_dev_ioctl
    RDMA/cma: Teach lockdep about the order of rtnl and lock
    RDMA/ucma: Put a lock around every call to the rdma_cm layer
    ceph: canonicalize server path in place
    ceph: remove the extra slashes in the server path
    IB/hfi1: Fix memory leaks in sysfs registration and unregistration
    IB/hfi1: Call kobject_put() when kobject_init_and_add() fails
    ASoC: jz4740-i2s: Fix divider written at incorrect offset in register
    hwrng: imx-rngc - fix an error path
    tools/accounting/getdelays.c: fix netlink attribute length
  * usb: dwc3: gadget: Wrap around when skip TRBs
      drivers/usb/dwc3/gadget.c
  * random: always use batched entropy for get_random_u{32,64}
      drivers/char/random.c
    mlxsw: spectrum_flower: Do not stop at FLOW_ACTION_VLAN_MANGLE
    slcan: Don't transmit uninitialized stack data in padding
    net: stmmac: dwmac1000: fix out-of-bounds mac address reg setting
    net: phy: micrel: kszphy_resume(): add delay after genphy_resume() before accessing PHY registers
    net: dsa: bcm_sf2: Ensure correct sub-node is parsed
    net: dsa: bcm_sf2: Do not register slave MDIO bus with OF
  * ipv6: don't auto-add link-local address to lag ports
      net/ipv6/addrconf.c
    mm: mempolicy: require at least one nodeid for MPOL_PREFERRED
  * include/linux/notifier.h: SRCU: fix ctags
      include/linux/notifier.h
  * bitops: protect variables in set_mask_bits() macro
      include/linux/bitops.h
    padata: always acquire cpu_hotplug_lock before pinst->lock
  * net: Fix Tx hash bound checking
      net/core/dev.c
    rxrpc: Fix sendmsg(MSG_WAITALL) handling
    ALSA: hda/ca0132 - Add Recon3Di quirk to handle integrated sound on EVGA X99 Classified motherboard
    power: supply: axp288_charger: Add special handling for HP Pavilion x2 10
    extcon: axp288: Add wakeup support
    mei: me: add cedar fork device ids
  * coresight: do not use the BIT() macro in the UAPI header
      include/uapi/linux/coresight-stm.h
    misc: pci_endpoint_test: Avoid using module parameter to determine irqtype
    misc: pci_endpoint_test: Fix to support > 10 pci-endpoint-test devices
    misc: rtsx: set correct pcr_ops for rts522A
    media: rc: IR signal for Panasonic air conditioner too long
    drm/etnaviv: replace MMU flush marker with flush sequence
    tools/power turbostat: Fix missing SYS_LPI counter on some Chromebooks
    tools/power turbostat: Fix gcc build warnings
    drm/amdgpu: fix typo for vcn1 idle check
  * initramfs: restore default compression behavior
      usr/Kconfig
    drm/bochs: downgrade pci_request_region failure from error to warning
    drm/amd/display: Add link_rate quirk for Apple 15" MBP 2017
    nvme-rdma: Avoid double freeing of async event data
  * sctp: fix possibly using a bad saddr with a given dst
      net/sctp/ipv6.c
      net/sctp/protocol.c
  * sctp: fix refcount bug in sctp_wfree
      net/sctp/socket.c
  * net, ip_tunnel: fix interface lookup with no key
      net/ipv4/ip_tunnel.c
  * ipv4: fix a RCU-list lock in fib_triestat_seq_show
      net/ipv4/fib_trie.c
  * ANDROID: GKI: export symbols required by SPECTRA_CAMERA
      drivers/media/v4l2-core/v4l2-ioctl.c
      drivers/media/v4l2-core/v4l2-subdev.c
  * ANDROID: GKI: ARM/ARM64: Introduce arch_read_hardware_id
      arch/arm64/include/asm/system_misc.h
      arch/arm64/kernel/cpuinfo.c
  * ANDROID: GKI: drivers: base: soc: export symbols for socinfo
      drivers/base/soc.c
    ANDROID: GKI: Update ABI
  * ANDROID: GKI: ASoC: msm: fix integer overflow for long duration offload playback
      include/uapi/sound/compress_offload.h
      sound/core/compress_offload.c
    ANDROID: GKI: Bulk ABI update
  * Revert "ANDROID: GKI: mm: add struct/enum fields for SPECULATIVE_PAGE_FAULTS"
      include/linux/mm.h
      include/linux/mm_types.h
      include/linux/vm_event_item.h
      mm/vmstat.c
  * ANDROID: GKI: Revert "arm64: kill flush_cache_all()"
      arch/arm64/include/asm/cacheflush.h
      arch/arm64/include/asm/proc-fns.h
      arch/arm64/mm/cache.S
      arch/arm64/mm/flush.c
      arch/arm64/mm/proc.S
  * ANDROID: GKI: Revert "arm64: Remove unused macros from assembler.h"
      arch/arm64/include/asm/assembler.h
  * ANDROID: GKI: kernel/dma, mm/cma: Export symbols needed by vendor modules
      kernel/dma/contiguous.c
      mm/cma.c
  * ANDROID: GKI: mm: Export symbols __next_zones_zonelist and zone_watermark_ok_safe
      mm/mmzone.c
      mm/page_alloc.c
  * ANDROID: GKI: mm/memblock: export memblock_overlaps_memory
      mm/memblock.c
  * ANDROID: GKI: net, skbuff: export symbols needed by vendor drivers
      net/core/skbuff.c
  * ANDROID: GKI: Add stub __cpu_isolated_mask symbol
      kernel/cpu.c
  * ANDROID: GKI: sched: stub sched_isolate symbols
      kernel/sched/Makefile
  * ANDROID: GKI: export saved_command_line
      init/main.c
    ANDROID: GKI: Update ABI
  * ANDROID: GKI: ASoC: core: Update ALSA core to issue restart in underrun.
      include/sound/pcm.h
      sound/core/pcm_native.c
  * ANDROID: GKI: SoC: pcm: Add a restart callback field to struct snd_pcm_ops
      include/sound/pcm.h
  * ANDROID: GKI: SoC: pcm: Add fields to struct snd_pcm_ops and struct snd_soc_component_driver
      include/sound/pcm.h
      include/sound/soc.h
  * ANDROID: GKI: ASoC: core: Add compat_ioctl callback to struct snd_pcm_ops
      include/sound/pcm.h
  * ANDROID: GKI: ALSA: core: modify, rename and export create_subdir API
      include/sound/info.h
      sound/core/info.c
  * ANDROID: GKI: usb: Add helper API to issue stop endpoint command
      drivers/usb/core/hcd.c
      drivers/usb/core/usb.c
      drivers/usb/host/xhci.c
      include/linux/usb.h
      include/linux/usb/hcd.h
  * ANDROID: GKI: Thermal: thermal_zone_get_cdev_by_name added
      drivers/thermal/thermal_core.c
      include/linux/thermal.h
  * ANDROID: GKI: add missing exports for CONFIG_ARM_SMMU=m
      drivers/iommu/iommu-sysfs.c
      drivers/iommu/iommu-traces.c
      drivers/iommu/iommu.c
      drivers/of/base.c
      drivers/pci/pci.c
      drivers/pci/search.c
      include/trace/events/iommu.h
  * ANDROID: power: wakeup_reason: wake reason enhancements
      drivers/base/power/main.c
      drivers/base/power/wakeup.c
      drivers/irqchip/irq-gic-v3.c
      include/linux/wakeup_reason.h
      kernel/irq/chip.c
      kernel/power/process.c
      kernel/power/suspend.c
      kernel/power/wakeup_reason.c
  * BACKPORT: FROMGIT: kbuild: mkcompile_h: Include $LD version in /proc/version
      init/Makefile
      scripts/mkcompile_h
  * ANDROID: GKI: kernel: Export symbols needed by msm_minidump.ko and minidump_log.ko
      init/version.c
      mm/percpu.c
    ANDROID: Bulk update the ABI xml
    ANDROID: gki_defconfig: add CONFIG_IPV6_SUBTREES
  * ANDROID: GKI: arm64: reserve space in cpu_hwcaps and cpu_hwcap_keys arrays
      arch/arm64/include/asm/cpucaps.h
  * ANDROID: GKI: of: reserved_mem: Fix kmemleak crash on no-map region
      drivers/of/of_reserved_mem.c
  * ANDROID: GKI: sched: add task boost vendor fields to task_struct
      include/linux/sched.h
  * ANDROID: GKI: mm: add rss counter for unreclaimable pages
      include/linux/mm_types_task.h
  * ANDROID: GKI: irqdomain: add bus token DOMAIN_BUS_WAKEUP
      include/linux/irqdomain.h
  * ANDROID: GKI: arm64: fault: do_tlb_conf_fault_cb register fault callback
      arch/arm64/include/asm/traps.h
      arch/arm64/mm/fault.c
  * ANDROID: GKI: QoS: Enhance framework to support cpu/irq specific QoS requests
      include/linux/pm_qos.h
      kernel/power/qos.c
    ANDROID: GKI: Bulk ABI update
  * ANDROID: GKI: PM/devfreq: Do not switch governors from sysfs when device is suspended
      drivers/devfreq/devfreq.c
      include/linux/devfreq.h
  * ANDROID: GKI: PM / devfreq: Fix race condition between suspend/resume and governor_store
      drivers/devfreq/devfreq.c
      include/linux/devfreq.h
  * ANDROID: GKI: PM / devfreq: Introduce a sysfs lock
      drivers/devfreq/devfreq.c
      include/linux/devfreq.h
  * ANDROID: GKI: regmap: irq: Add support to clear ack registers
      drivers/base/regmap/regmap-irq.c
      include/linux/regmap.h
    ANDROID: GKI: Remove SCHED_AUTOGROUP
  * ANDROID: ignore compiler tag __must_check for GENKSYMS
      include/linux/compiler_types.h
    ANDROID: GKI: Bulk update ABI
  * ANDROID: GKI: Fix ABI diff for struct thermal_cooling_device_ops
      include/linux/thermal.h
  * ANDROID: GKI: ASoC: soc-core: export function to find components
      include/sound/soc.h
      sound/soc/soc-core.c
  * ANDROID: GKI: thermal: thermal_sys: Add configurable thermal trip points.
      include/linux/thermal.h
  * ANDROID: fscrypt: fall back to filesystem-layer crypto when needed
      fs/crypto/fscrypt_private.h
      fs/crypto/inline_crypt.c
      fs/crypto/keysetup.c
  * ANDROID: block: require drivers to declare supported crypto key type(s)
      block/blk-crypto-fallback.c
      block/blk-crypto.c
      block/keyslot-manager.c
      drivers/md/dm-default-key.c
      drivers/md/dm.c
      drivers/scsi/ufs/ufshcd-crypto.c
      fs/crypto/inline_crypt.c
      include/linux/blk-crypto.h
      include/linux/keyslot-manager.h
  * ANDROID: block: make blk_crypto_start_using_mode() properly check for support
      block/blk-crypto-fallback.c
      block/blk-crypto-internal.h
      block/blk-crypto.c
      include/linux/blk-crypto.h
  * ANDROID: GKI: power: supply: format regression
      drivers/power/supply/power_supply_sysfs.c
  * ANDROID: GKI: kobject: increase number of kobject uevent pointers to 64
      include/linux/kobject.h
  * ANDROID: GKI: drivers: video: backlight: Fix ABI diff for struct backlight_device
      include/linux/backlight.h
  * ANDROID: GKI: usb: xhci: Add support for secondary interrupters
      drivers/usb/core/hcd.c
      drivers/usb/core/usb.c
      drivers/usb/host/xhci-mem.c
      drivers/usb/host/xhci.c
      drivers/usb/host/xhci.h
      include/linux/usb.h
      include/linux/usb/hcd.h
  * ANDROID: GKI: usb: host: xhci: Add support for usb core indexing
      drivers/usb/host/xhci.h
    ANDROID: gki_defconfig: enable USB_XHCI_HCD
    ANDROID: gki_defconfig: enable CONFIG_BRIDGE
    ANDROID: GKI: Update ABI report
  * ANDROID: GKI: arm64: smp: Add set_update_ipi_history_callback
      arch/arm64/include/asm/smp.h
      arch/arm64/kernel/smp.c
  * ANDROID: kbuild: ensure __cfi_check is correctly aligned
      Makefile
      scripts/Makefile
  * FROMLIST: kmod: make request_module() return an error when autoloading is disabled
      kernel/kmod.c
    ANDROID: GKI: Update ABI report
  * ANDROID: GKI: ARM64: dma-mapping: export symbol arch_setup_dma_ops
      arch/arm64/mm/dma-mapping.c
    ANDROID: GKI: ARM: dma-mapping: export symbol arch_setup_dma_ops
  * ANDROID: GKI: ASoC: dapm: Avoid static route b/w cpu and codec dai
      include/sound/soc.h
      sound/soc/soc-dapm.c
  * ANDROID: GKI: ASoC: pcm: Add support for hostless playback/capture
      include/sound/soc.h
      sound/soc/soc-pcm.c
  * ANDROID: GKI: ASoC: core - add hostless DAI support
      include/sound/soc.h
      sound/soc/soc-pcm.c
  * ANDROID: GKI: drivers: thermal: Resolve ABI diff for struct thermal_zone_device_ops
      include/linux/thermal.h
  * ANDROID: GKI: drivers: thermal: Add support for getting trip temperature
      drivers/thermal/of-thermal.c
      include/linux/thermal.h
  * ANDROID: GKI: Add functions of_thermal_handle_trip/of_thermal_handle_trip_temp
      drivers/thermal/of-thermal.c
      drivers/thermal/thermal_core.c
      drivers/thermal/thermal_core.h
      include/linux/thermal.h
  * ANDROID: GKI: drivers: thermal: Add post suspend evaluate flag to thermal zone devicetree
      drivers/thermal/of-thermal.c
      drivers/thermal/thermal_core.c
      include/linux/thermal.h
  * UPSTREAM: loop: Only freeze block queue when needed.
      drivers/block/loop.c
  * UPSTREAM: loop: Only change blocksize when needed.
      drivers/block/loop.c
  * ANDROID: Fix wq fp check for CFI builds
      kernel/workqueue.c
    ANDROID: GKI: update abi definition after CONFIG_DEBUG_LIST was enabled
    ANDROID: gki_defconfig: enable CONFIG_DEBUG_LIST
    ANDROID: GKI: Update ABI definition
  * ANDROID: GKI: remove condition causing sk_buff struct ABI differences
      include/linux/skbuff.h
  * ANDROID: GKI: Export symbol arch_timer_mem_get_cval
      drivers/clocksource/arm_arch_timer.c
  * ANDROID: GKI: pwm: core: Add option to config PWM duty/period with u64 data length
      drivers/pwm/core.c
      drivers/pwm/sysfs.c
      include/linux/pwm.h
    ANDROID: Update ABI whitelist for qcom SoCs
  * ANDROID: Incremental fs: Fix remount
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/vfs.c
  * ANDROID: Incremental fs: Protect get_fill_block, and add a field
      fs/incfs/data_mgmt.c
      fs/incfs/vfs.c
      include/uapi/linux/incrementalfs.h
  * ANDROID: Incremental fs: Fix crash polling 0 size read_log
      fs/incfs/data_mgmt.c
  * ANDROID: Incremental fs: get_filled_blocks: better index_out
      fs/incfs/data_mgmt.c
      fs/incfs/format.c
      fs/incfs/format.h
  * ANDROID: GKI: of: property: Add device links support for "qcom,wrapper-dev"
      drivers/of/property.c
    ANDROID: GKI: update abi definitions due to recent changes
    Merge 4.19.114 into android-4.19
  * ANDROID: GKI: clk: Initialize in stack clk_init_data to 0 in all drivers
      drivers/clk/clk-composite.c
      drivers/clk/clk-divider.c
      drivers/clk/clk-fixed-factor.c
      drivers/clk/clk-fixed-rate.c
      drivers/clk/clk-fractional-divider.c
      drivers/clk/clk-gate.c
      drivers/clk/clk-mux.c
      drivers/clk/clk-xgene.c
  * ANDROID: GKI: drivers: clksource: Add API to return cval
      drivers/clocksource/arm_arch_timer.c
      include/clocksource/arm_arch_timer.h
  * ANDROID: GKI: clk: Add support for voltage voting
      drivers/clk/clk.c
      include/linux/clk-provider.h
  * ANDROID: GKI: kernel: Export task and IRQ affinity symbols
      kernel/irq/manage.c
      kernel/sched/core.c
  * ANDROID: GKI: regulator: core: Add support for regulator providers with sync state
      drivers/regulator/core.c
      drivers/regulator/proxy-consumer.c
      include/linux/regulator/driver.h
  * ANDROID: GKI: regulator: Call proxy-consumer functions for each regulator registered
      drivers/regulator/core.c
      include/linux/regulator/driver.h
  * ANDROID: GKI: regulator: Add proxy consumer driver
      drivers/regulator/Kconfig
      drivers/regulator/Makefile
      drivers/regulator/proxy-consumer.c
      include/linux/regulator/proxy-consumer.h
  * ANDROID: GKI: regulator: core: allow long device tree supply regulator property names
      drivers/regulator/core.c
  * ANDROID: GKI: Revert "regulator: Enable supply regulator if child rail is enabled."
      drivers/regulator/core.c
  * ANDROID: GKI: regulator: Remove redundant set_mode call in drms_uA_update
      drivers/regulator/core.c
  * ANDROID: GKI: net: Add the get current NAPI context API
      include/linux/netdevice.h
      net/core/dev.c
  * ANDROID: GKI: remove DRM_KMS_CMA_HELPER from GKI configuration
      init/Kconfig.gki
  * ANDROID: GKI: edac: Fix ABI diffs in edac_device_ctl_info struct
      drivers/edac/edac_device.h
  * ANDROID: GKI: pwm: Add different PWM output types support
      drivers/pwm/core.c
      include/linux/pwm.h
  * UPSTREAM: cfg80211: Authentication offload to user space in AP mode
      include/net/cfg80211.h
      include/uapi/linux/nl80211.h
      net/wireless/nl80211.c
  * ANDROID: Incremental fs: Fix four resource bugs
      fs/incfs/vfs.c
    ANDROID: Bulk update the ABI xml based on the referenced bugs.
Linux 4.19.114
    arm64: dts: ls1046ardb: set RGMII interfaces to RGMII_ID mode
    arm64: dts: ls1043a-rdb: correct RGMII delay mode to rgmii-id
    ARM: dts: N900: fix onenand timings
    ARM: dts: imx6: phycore-som: fix arm and soc minimum voltage
    ARM: bcm2835-rpi-zero-w: Add missing pinctrl name
    ARM: dts: oxnas: Fix clear-mask property
    perf map: Fix off by one in strncpy() size argument
  * arm64: alternative: fix build with clang integrated assembler
      arch/arm64/include/asm/alternative.h
    net: ks8851-ml: Fix IO operations, again
    gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 CHT + AXP288 model
  * bpf: Explicitly memset some bpf info structures declared on the stack
      kernel/bpf/btf.c
      kernel/bpf/syscall.c
  * bpf: Explicitly memset the bpf_attr structure
      kernel/bpf/syscall.c
    platform/x86: pmc_atom: Add Lex 2I385SW to critclk_systems DMI table
    vt: vt_ioctl: fix use-after-free in vt_in_use()
    vt: vt_ioctl: fix VT_DISALLOCATE freeing in-use virtual console
    vt: vt_ioctl: remove unnecessary console allocation checks
  * vt: switch vt_dont_switch to bool
      include/linux/vt_kern.h
    vt: ioctl, switch VT_IS_IN_USE and VT_BUSY to inlines
  * vt: selection, introduce vc_is_sel
      include/linux/selection.h
    mac80211: fix authentication with iwlwifi/mvm
    mac80211: Check port authorization in the ieee80211_tx_dequeue() case
    media: xirlink_cit: add missing descriptor sanity checks
    media: stv06xx: add missing descriptor sanity checks
    media: dib0700: fix rc endpoint lookup
    media: ov519: add missing endpoint sanity checks
  * libfs: fix infoleak in simple_attr_read()
      fs/libfs.c
    ahci: Add Intel Comet Lake H RAID PCI ID
    staging: wlan-ng: fix use-after-free Read in hfa384x_usbin_callback
    staging: wlan-ng: fix ODEBUG bug in prism2sta_disconnect_usb
    staging: rtl8188eu: Add ASUS USB-N10 Nano B1 to device table
    media: usbtv: fix control-message timeouts
    media: flexcop-usb: fix endpoint sanity check
    usb: musb: fix crash with highmen PIO and usbmon
    USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback
    USB: cdc-acm: restore capability check order
    USB: serial: option: add Wistron Neweb D19Q1
    USB: serial: option: add BroadMobi BM806U
    USB: serial: option: add support for ASKEY WWHC050
    mac80211: set IEEE80211_TX_CTRL_PORT_CTRL_PROTO for nl80211 TX
    mac80211: add option for setting control flags
    Revert "r8169: check that Realtek PHY driver module is loaded"
  * vti6: Fix memory leak of skb if input policy check fails
      net/ipv6/ip6_vti.c
  * bpf/btf: Fix BTF verification of enum members in struct/union
      kernel/bpf/btf.c
    netfilter: nft_fwd_netdev: validate family and chain type
    netfilter: flowtable: reload ip{v6}h in nf_flow_tuple_ip{v6}
  * afs: Fix some tracing details
      include/trace/events/afs.h
  * xfrm: policy: Fix doulbe free in xfrm_policy_timer
      net/xfrm/xfrm_policy.c
  * xfrm: add the missing verify_sec_ctx_len check in xfrm_add_acquire
      net/xfrm/xfrm_user.c
  * xfrm: fix uctx len check in verify_sec_ctx_len
      net/xfrm/xfrm_user.c
    RDMA/mlx5: Block delay drop to unprivileged users
  * vti[6]: fix packet tx through bpf_redirect() in XinY cases
      net/ipv4/Kconfig
      net/ipv4/ip_vti.c
      net/ipv6/ip6_vti.c
  * xfrm: handle NETDEV_UNREGISTER for xfrm device
      net/xfrm/xfrm_device.c
  * genirq: Fix reference leaks on irq affinity notifiers
      kernel/irq/manage.c
    RDMA/core: Ensure security pkey modify is not lost
    gpiolib: acpi: Add quirk to ignore EC wakeups on HP x2 10 BYT + AXP288 model
    gpiolib: acpi: Rework honor_wakeup option into an ignore_wake option
    gpiolib: acpi: Correct comment for HP x2 10 honor_wakeup quirk
    mac80211: mark station unauthorized before key removal
  * nl80211: fix NL80211_ATTR_CHANNEL_WIDTH attribute type
      net/wireless/nl80211.c
  * scsi: sd: Fix optimal I/O size for devices that change reported values
      drivers/scsi/sd.c
    scripts/dtc: Remove redundant YYLOC global declaration
    tools: Let O= makes handle a relative path with -C option
    perf probe: Do not depend on dwfl_module_addrsym()
    ARM: dts: omap5: Add bus_dma_limit for L3 bus
    ARM: dts: dra7: Add bus_dma_limit for L3 bus
  * ceph: check POOL_FLAG_FULL/NEARFULL in addition to OSDMAP_FULL/NEARFULL
      include/linux/ceph/osdmap.h
      include/linux/ceph/rados.h
  * Input: avoid BIT() macro usage in the serio.h UAPI header
      include/uapi/linux/serio.h
    Input: synaptics - enable RMI on HP Envy 13-ad105ng
    Input: raydium_i2c_ts - fix error codes in raydium_i2c_boot_trigger()
    i2c: hix5hd2: add missed clk_disable_unprepare in remove
    ftrace/x86: Anotate text_mutex split between ftrace_arch_code_modify_post_process() and ftrace_arch_code_modify_prepare()
    sxgbe: Fix off by one in samsung driver strncpy size arg
    dpaa_eth: Remove unnecessary boolean expression in dpaa_get_headroom
    mac80211: Do not send mesh HWMP PREQ if HWMP is disabled
    scsi: ipr: Fix softlockup when rescanning devices in petitboot
    s390/qeth: handle error when backing RX buffer
  * fsl/fman: detect FMan erratum A050385
      drivers/net/ethernet/freescale/fman/Kconfig
    arm64: dts: ls1043a: FMan erratum A050385
    dt-bindings: net: FMan erratum A050385
  * cgroup1: don't call release_agent when it is ""
      kernel/cgroup/cgroup-v1.c
  * drivers/of/of_mdio.c:fix of_mdiobus_register()
      drivers/of/of_mdio.c
    cpupower: avoid multiple definition with gcc -fno-common
    nfs: add minor version to nfs_server_key for fscache
  * cgroup-v1: cgroup_pidlist_next should update position index
      kernel/cgroup/cgroup-v1.c
    hsr: set .netnsok flag
    hsr: add restart routine into hsr_get_node_list()
    hsr: use rcu_read_lock() in hsr_get_node_{list/status}()
    vxlan: check return value of gro_cells_init()
  * tcp: repair: fix TCP_QUEUE_SEQ implementation
      net/ipv4/tcp.c
    r8169: re-enable MSI on RTL8168c
    net: phy: mdio-mux-bcm-iproc: check clk_prepare_enable() return value
    net: dsa: mt7530: Change the LINK bit to reflect the link status
    net: ip_gre: Accept IFLA_INFO_DATA-less configuration
    net: ip_gre: Separate ERSPAN newlink / changelink callbacks
    bnxt_en: Reset rings if ring reservation fails during open()
    bnxt_en: fix memory leaks in bnxt_dcbnl_ieee_getets()
    slcan: not call free_netdev before rtnl_unlock in slcan_open
    NFC: fdp: Fix a signedness bug in fdp_nci_send_patch()
    net: stmmac: dwmac-rk: fix error path in rk_gmac_probe
    net_sched: keep alloc_hash updated after hash allocation
    net_sched: cls_route: remove the right filter from hashtable
    net: qmi_wwan: add support for ASKEY WWHC050
  * net/packet: tpacket_rcv: avoid a producer race condition
      net/packet/af_packet.c
      net/packet/internal.h
    net: mvneta: Fix the case where the last poll did not process all rx
    net: dsa: Fix duplicate frames flooded by learning
    net: cbs: Fix software cbs to consider packet sending time
    mlxsw: spectrum_mr: Fix list iteration in error path
    macsec: restrict to ethernet devices
    hsr: fix general protection fault in hsr_addr_is_self()
    geneve: move debug check after netdev unregister
  * Revert "drm/dp_mst: Skip validating ports during destruction, just ref"
      drivers/gpu/drm/drm_dp_mst_topology.c
    mmc: sdhci-tegra: Fix busy detection by enabling MMC_CAP_NEED_RSP_BUSY
    mmc: sdhci-omap: Fix busy detection by enabling MMC_CAP_NEED_RSP_BUSY
    mmc: core: Respect MMC_CAP_NEED_RSP_BUSY for eMMC sleep command
    mmc: core: Respect MMC_CAP_NEED_RSP_BUSY for erase/trim/discard
  * mmc: core: Allow host controllers to require R1B for CMD6
      include/linux/mmc/host.h
  * ANDROID: GKI: block: resolve ABI diff when CONFIG_BLK_DEV_BSG is unset
      include/linux/blkdev.h
      include/linux/bsg.h
  * ANDROID: GKI: bfq-iosched: update struct elevator_mq_ops ABI
      include/linux/elevator.h
  * ANDROID: GKI: locking/rwsem: add vendor field to struct rw_semaphore
      include/linux/rwsem.h
  * ANDROID: GKI: fs: add umount_end() function to struct super_operations
      include/linux/fs.h
  * ANDROID: GKI: perf: Add fields for CPU hotplug feature
      include/linux/perf_event.h
  * ANDROID: GKI: perf: Add field for struct perf_event
      include/linux/perf_event.h
  * ANDROID: GKI: cpuset: add field for task affinity for cpusets
      include/linux/sched.h
      init/init_task.c
    UPSTREAM: ubifs: wire up FS_IOC_GET_ENCRYPTION_NONCE
  * UPSTREAM: f2fs: wire up FS_IOC_GET_ENCRYPTION_NONCE
      fs/f2fs/file.c
  * UPSTREAM: ext4: wire up FS_IOC_GET_ENCRYPTION_NONCE
      fs/ext4/ioctl.c
  * UPSTREAM: fscrypt: add FS_IOC_GET_ENCRYPTION_NONCE ioctl
      fs/crypto/fscrypt_private.h
      fs/crypto/keysetup.c
      fs/crypto/policy.c
      include/linux/fscrypt.h
      include/uapi/linux/fscrypt.h
  * UPSTREAM: usb: raw_gadget: fix compilation warnings in uapi headers
      include/uapi/linux/usb/raw_gadget.h
  * BACKPORT: usb: gadget: add raw-gadget interface
      drivers/usb/gadget/legacy/Kconfig
      drivers/usb/gadget/legacy/Makefile
      include/uapi/linux/usb/raw_gadget.h
  * UPSTREAM: usb: gadget: move choice ... endchoice to legacy/Kconfig
      drivers/usb/gadget/Kconfig
      drivers/usb/gadget/legacy/Kconfig
  * UPSTREAM: ipv6: ndisc: add support for 'PREF64' dns64 prefix identifier
      include/net/ndisc.h
      net/ipv6/ndisc.c
    ANDROID: GKI: Removed cuttlefish configs
    ANDROID: clang: update to 10.0.5
  * FROMLIST: arm64: define __alloc_zeroed_user_highpage
      arch/arm64/include/asm/page.h
  * ANDROID: Incremental fs: Add INCFS_IOC_GET_FILLED_BLOCKS
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/format.c
      fs/incfs/format.h
      fs/incfs/vfs.c
      include/uapi/linux/incrementalfs.h
  * ANDROID: Incremental fs: Fix two typos
      fs/incfs/data_mgmt.c
      fs/incfs/integrity.c
    ANDROID: GKI: Update ABI
  * ANDROID: GKI: power_supply: add more soc properties
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
    ANDROID: GKI: Update ABI
  * ANDROID: GKI: google_battery: return string type for serial_number property
      drivers/power/supply/power_supply_sysfs.c
  * ANDROID: GKI: power: supply: Add APSD based power-supply properties
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power: supply: Remove "Wipower" PSY type
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power: supply: Add support for HVDCP_3P5
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power_supply: Define Debug Accessory Mode
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power: supply: Add POWER_SUPPLY_PROP_AICL_*
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power: supply: Add POWER_SUPPLY_PROP_ALIGNMENT
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power_supply: Add CP_ISNS_SLAVE power supply property
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power_supply: add properties to report parallel connection topology
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power_supply: add POWER_SUPPLY_PROP_IRQ_STATUS property
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power: supply: add CHARGE_CHARGER_STATE property
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power: supply: Add POWER_SUPPLY_PROP_PTMC_ID
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power: supply: Add POWER_SUPPLY_PROP_OTG_FASTROLESWAP
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power: supply: Add VOLTAGE_STEP property
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power: supply: Add AICL_DONE parameter
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power_supply: Add operating frequency property
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power: supply: Add POWER_SUPPLY_PROP_CC_UAH
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power: supply: Add POWER_SUPPLY_PROP_VOLTAGE_FIFO
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power: supply: Add capacity and resistance estimates
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power_supply: Add vendor specific dead battery property
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power-supply: add ADAPTER_DETAILS power supply property
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power: supply: Add POWER_SUPPLY_PROP_CHARGE_DISABLE
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power: power_supply: Add property to display skin thermal status
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power_supply: Add properties to support PPS constant current(CC) mode
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power: power_supply: Add REAL_CAPACITY property
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power_supply: Add VOLTAGE_MAX_LIMIT power supply property
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power_supply: Add DC_RESET power-supply property
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power_supply: Add "THERM_ICL_LIMIT" property
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power_supply: add CHIP_VERSION property
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power-supply: Add VOLTAGE_VPH power supply property
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power_supply: Add SCALE_MODE_EN power-supply property
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power_supply: Add local extensions of string property names properly
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power_supply: add batt_age_level property
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power-supply: Add CC_SOC power supply property
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power_supply: add property to disable QC userspace optimizations
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power: power_supply: Add FG_RESET power supply property
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power_supply: Add power supply type "Charge Pump"
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power: supply: Add snapshot of power supply framework files
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power: power_supply: Add property CHARGE_COUNTER_EXT and 64-bit precision properties
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power: power_supply: add POWER_SUPPLY_PROP_CHARGE_ENABLED
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power: power_supply: add POWER_SUPPLY_PROP_USB_OTG
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: power: power_supply: Add custom property for USB High Current mode
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
    UPSTREAM: coresight: Potential uninitialized variable in probe()
    ANDROID: GKI: Update ABI.
  * ANDROID: GKI: Add API to create pagetable mappings.
      arch/arm64/mm/mmu.c
      include/linux/memblock.h
  * ANDROID: GKI: drivers: usb: Add functions usb_func_ep_queue/usb_func_wakeup
      drivers/usb/gadget/composite.c
      drivers/usb/gadget/udc/core.c
      include/linux/usb/composite.h
      include/linux/usb/gadget.h
  * ANDROID: GKI: Add API usb_ep_autoconfig_by_name
      drivers/usb/gadget/epautoconf.c
      include/linux/usb/gadget.h
  * ANDROID: GKI: usb: core: Add helper function to return controller id
      drivers/usb/core/hcd.c
      drivers/usb/core/usb.c
      include/linux/usb.h
      include/linux/usb/hcd.h
    ANDROID: dm-bow: Fix free_show value is incorrect
    ANDROID: GKI: update ABI after fixing cfg80211_chan_def diff
  * BACKPORT: nl80211: Add support for EDMG channels
      include/net/cfg80211.h
      include/uapi/linux/nl80211.h
      net/wireless/chan.c
      net/wireless/nl80211.c
      net/wireless/util.c
  * FROMGIT: sched/rt: cpupri_find: Trigger a full search as fallback
      kernel/sched/cpupri.c
  * FROMGIT: sched/rt: Remove unnecessary push for unfit tasks
      kernel/sched/rt.c
  * BACKPORT: FROMGIT: sched/rt: Allow pulling unfitting task
      kernel/sched/rt.c
  * FROMGIT: sched/rt: Optimize cpupri_find() on non-heterogenous systems
      kernel/sched/cpupri.c
      kernel/sched/cpupri.h
      kernel/sched/rt.c
  * FROMGIT: sched/rt: Re-instate old behavior in select_task_rq_rt()
      kernel/sched/rt.c
  * BACKPORT: FROMGIT: sched/rt: cpupri_find: Implement fallback mechanism for !fit case
      kernel/sched/cpupri.c
    ANDROID: GKI: re-enable LTO, CFI and SCS
    Merge 4.19.113 into android-4.19
Linux 4.19.113
    staging: greybus: loopback_test: fix potential path truncations
    staging: greybus: loopback_test: fix potential path truncation
    drm/bridge: dw-hdmi: fix AVI frame colorimetry
  * arm64: smp: fix crash_smp_send_stop() behaviour
      arch/arm64/kernel/smp.c
  * arm64: smp: fix smp_send_stop() behaviour
      arch/arm64/kernel/smp.c
    ALSA: hda/realtek: Fix pop noise on ALC225
  * Revert "ipv6: Fix handling of LLA with VRF and sockets bound to VRF"
      net/ipv6/tcp_ipv6.c
    Revert "vrf: mark skb for multicast or link-local as enslaved to VRF"
  * futex: Unbreak futex hashing
      kernel/futex.c
  * futex: Fix inode life-time issue
      fs/inode.c
      include/linux/fs.h
      include/linux/futex.h
      kernel/futex.c
  * kbuild: Disable -Wpointer-to-enum-cast
      scripts/Makefile.extrawarn
    iio: light: vcnl4000: update sampling periods for vcnl4200
    USB: cdc-acm: fix rounding error in TIOCSSERIAL
    USB: cdc-acm: fix close_delay and closing_wait units in TIOCSSERIAL
  * x86/mm: split vmalloc_sync_all()
      include/linux/vmalloc.h
      kernel/notifier.c
      mm/vmalloc.c
  * page-flags: fix a crash at SetPageError(THP_SWAP)
      include/linux/page-flags.h
  * mm, slub: prevent kmalloc_node crashes and memory leaks
      mm/slub.c
  * mm: slub: be more careful about the double cmpxchg of freelist
      mm/slub.c
  * memcg: fix NULL pointer dereference in __mem_cgroup_usage_unregister_event
      mm/memcontrol.c
  * drm/lease: fix WARNING in idr_destroy
      drivers/gpu/drm/drm_lease.c
    drm/amd/amdgpu: Fix GPR read from debugfs (v2)
    btrfs: fix log context list corruption after rename whiteout error
  * xhci: Do not open code __print_symbolic() in xhci trace events
      drivers/usb/host/xhci-trace.h
  * rtc: max8907: add missing select REGMAP_IRQ
      drivers/rtc/Kconfig
    intel_th: pci: Add Elkhart Lake CPU support
    intel_th: Fix user-visible error codes
    staging/speakup: fix get_word non-space look-ahead
    staging: greybus: loopback_test: fix poll-mask build breakage
    staging: rtl8188eu: Add device id for MERCUSYS MW150US v2
    mmc: sdhci-of-at91: fix cd-gpios for SAMA5D2
    mmc: rtsx_pci: Fix support for speed-modes that relies on tuning
    iio: adc: at91-sama5d2_adc: fix differential channels in triggered mode
    iio: magnetometer: ak8974: Fix negative raw values in sysfs
    iio: trigger: stm32-timer: disable master mode when stopping
    iio: st_sensors: remap SMO8840 to LIS2DH12
    ALSA: pcm: oss: Remove WARNING from snd_pcm_plug_alloc() checks
    ALSA: pcm: oss: Avoid plugin buffer overflow
    ALSA: seq: oss: Fix running status after receiving sysex
    ALSA: seq: virmidi: Fix running status after receiving sysex
    ALSA: line6: Fix endless MIDI read loop
  * usb: xhci: apply XHCI_SUSPEND_DELAY to AMD XHCI controller 1022:145c
      drivers/usb/host/xhci-pci.c
    USB: serial: pl2303: add device-id for HP LD381
  * usb: host: xhci-plat: add a shutdown
      drivers/usb/host/xhci-plat.c
    USB: serial: option: add ME910G1 ECM composition 0x110b
  * usb: quirks: add NO_LPM quirk for RTL8153 based ethernet adapters
      drivers/usb/core/quirks.c
  * USB: Disable LPM on WD19's Realtek Hub
      drivers/usb/core/quirks.c
    parse-maintainers: Mark as executable
    block, bfq: fix overwrite of bfq_group pointer in bfq_find_set_group()
    xenbus: req->err should be updated before req->state
    xenbus: req->body should be updated before req->state
    drm/amd/display: fix dcc swath size calculations on dcn1
    drm/amd/display: Clear link settings on MST disable connector
    riscv: avoid the PIC offset of static percpu data in module beyond 2G limits
    dm integrity: use dm_bio_record and dm_bio_restore
    dm bio record: save/restore bi_end_io and bi_integrity
    altera-stapl: altera_get_note: prevent write beyond end of 'key'
    drivers/perf: arm_pmu_acpi: Fix incorrect checking of gicc pointer
    drm/exynos: dsi: fix workaround for the legacy clock name
    drm/exynos: dsi: propagate error value and silence meaningless warning
    spi/zynqmp: remove entry that causes a cs glitch
    spi: pxa2xx: Add CS control clock quirk
    ARM: dts: dra7: Add "dma-ranges" property to PCIe RC DT nodes
    powerpc: Include .BTF section
    spi: qup: call spi_qup_pm_resume_runtime before suspending
    drm/mediatek: Find the cursor plane instead of hard coding it
    ANDROID: ABI: Update ABI with CONFIG_SOC_BUS enabled
  * ANDROID: GKI: Add CONFIG_SOC_BUS to gki_defconfig
      init/Kconfig.gki
    ANDROID: kbuild: do not merge .section..* into .section in modules
  * ANDROID: scsi: ufs: add ->map_sg_crypto() variant op
      drivers/scsi/ufs/ufshcd-crypto.c
      drivers/scsi/ufs/ufshcd-crypto.h
      drivers/scsi/ufs/ufshcd.c
      drivers/scsi/ufs/ufshcd.h
    ANDROID: GKI: Update ABI after fixing vm_event_item diffs
  * ANDROID: GKI: mm: vmstat: add pageoutclean
      include/linux/vm_event_item.h
      mm/filemap.c
      mm/vmstat.c
  * ANDROID: GKI: mm: add struct/enum fields for SPECULATIVE_PAGE_FAULTS
      include/linux/mm.h
      include/linux/mm_types.h
      include/linux/vm_event_item.h
      mm/vmstat.c
    ANDROID: GKI: Update ABI after fixing mm diffs
  * ANDROID: GKI: Add write_pending and max_writes fields to swap_info_struct
      include/linux/swap.h
  * ANDROID: GKI: memblock: Add memblock_overlaps_memory() to fix ABI diff
      include/linux/memblock.h
      mm/memblock.c
  * ANDROID: GKI: net: remove conditional members causing ABI diffs
      include/net/net_namespace.h
      include/net/netns/netfilter.h
      include/net/netns/x_tables.h
  * ANDROID: GKI: mm: introduce NR_UNRECLAIMABLE_PAGES
      include/linux/mmzone.h
      mm/vmstat.c
    ANDROID: GKI: Update ABI
  * ANDROID: GKI: sound: soc: Resolve ABI diff for struct snd_compr_stream
      include/sound/compress_driver.h
      include/sound/soc.h
  * ANDROID: GKI: sound: pcm: Add field hw_no_buffer to snd_pcm_substream
      include/sound/pcm.h
  * ANDROID: GKI: ALSA: core: Add snd_soc_card_change_online_state() API
      include/sound/core.h
      include/sound/soc.h
      sound/core/init.c
      sound/soc/soc-core.c
  * ANDROID: GKI: SoC: core: Introduce macro SOC_SINGLE_MULTI_EXT
      include/sound/soc.h
      sound/soc/soc-core.c
  * ANDROID: GKI: ALSA: PCM: User control API implementation
      include/sound/pcm.h
      sound/core/pcm.c
      sound/core/pcm_lib.c
  * ANDROID: GKI: ALSA: PCM: volume API implementation
      include/sound/pcm.h
      sound/core/pcm.c
      sound/core/pcm_lib.c
  * ANDROID: GKI: kernel: tick-sched: Add API to get the next wakeup for a CPU
      include/linux/tick.h
      kernel/time/tick-sched.c
  * ANDROID: GKI: extcon: Add extcon_register_blocking_notifier API.
      drivers/extcon/extcon.c
      drivers/extcon/extcon.h
      include/linux/extcon.h
  * UPSTREAM: bpf: Explicitly memset some bpf info structures declared on the stack
      kernel/bpf/btf.c
      kernel/bpf/syscall.c
  * UPSTREAM: bpf: Explicitly memset the bpf_attr structure
      kernel/bpf/syscall.c
    ANDROID: ABI: Update abi after enabling CONFIG_USB_PHY
  * ANDROID: GKI: Enable CONFIG_USB_PHY for usb drivers like dwc3
      init/Kconfig.gki
  * UPSTREAM: driver core: Add device link support for SYNC_STATE_ONLY flag
      drivers/base/core.c
      include/linux/device.h
  * ANDROID: Conflict fix for merging 4.19.112
      drivers/base/core.c
    Merge 4.19.112 into android-4.19
  * Revert "ANDROID: driver core: Add device link support for SYNC_STATE_ONLY flag"
      drivers/base/core.c
      include/linux/device.h
    ANDROID: update the ABI xml representation
  * ANDROID: GKI: Enable V4L2 hidden configs
      init/Kconfig.gki
Linux 4.19.112
  * ipv4: ensure rcu_read_lock() in cipso_v4_error()
      net/ipv4/cipso_ipv4.c
    efi: Fix debugobjects warning on 'efi_rts_work'
  * HID: google: add moonball USB id
      drivers/hid/hid-ids.h
  * mm: slub: add missing TID bump in kmem_cache_alloc_bulk()
      mm/slub.c
    ARM: 8958/1: rename missed uaccess .fixup section
    ARM: 8957/1: VDSO: Match ARMv8 timer in cntvct_functional()
  * net: qrtr: fix len of skb_put_padto in qrtr_node_enqueue
      net/qrtr/qrtr.c
  * driver core: Fix creation of device links with PM-runtime flags
      drivers/base/core.c
  * driver core: Remove device link creation limitation
      drivers/base/core.c
      drivers/base/power/runtime.c
      include/linux/device.h
  * driver core: Add device link flag DL_FLAG_AUTOPROBE_CONSUMER
      drivers/base/core.c
      drivers/base/dd.c
      include/linux/device.h
  * driver core: Make driver core own stateful device links
      drivers/base/core.c
  * driver core: Fix adding device links to probing suppliers
      drivers/base/core.c
  * driver core: Remove the link if there is no driver with AUTO flag
      drivers/base/core.c
    mmc: sdhci-omap: Fix Tuning procedure for temperatures < -20C
    mmc: sdhci-omap: Don't finish_mrq() on a command error during tuning
    wimax: i2400: Fix memory leak in i2400m_op_rfkill_sw_toggle
    wimax: i2400: fix memory leak
  * jbd2: fix data races at struct journal_head
      fs/jbd2/transaction.c
    sfc: fix timestamp reconstruction at 16-bit rollover points
  * net: rmnet: fix packet forwarding in rmnet bridge mode
      drivers/net/ethernet/qualcomm/rmnet/rmnet_handlers.c
  * net: rmnet: fix bridge mode bugs
      drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c
      drivers/net/ethernet/qualcomm/rmnet/rmnet_config.h
      drivers/net/ethernet/qualcomm/rmnet/rmnet_vnd.c
      drivers/net/ethernet/qualcomm/rmnet/rmnet_vnd.h
  * net: rmnet: use upper/lower device infrastructure
      drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c
  * net: rmnet: do not allow to change mux id if mux id is duplicated
      drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c
  * net: rmnet: remove rcu_read_lock in rmnet_force_unassociate_device()
      drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c
  * net: rmnet: fix suspicious RCU usage
      drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c
      drivers/net/ethernet/qualcomm/rmnet/rmnet_config.h
      drivers/net/ethernet/qualcomm/rmnet/rmnet_handlers.c
  * net: rmnet: fix NULL pointer dereference in rmnet_changelink()
      drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c
  * net: rmnet: fix NULL pointer dereference in rmnet_newlink()
      drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c
    hinic: fix a bug of setting hw_ioctxt
    hinic: fix a irq affinity bug
    slip: not call free_netdev before rtnl_unlock in slip_open
  * signal: avoid double atomic counter increments for user accounting
      kernel/signal.c
    mac80211: rx: avoid RCU list traversal under mutex
    net: ks8851-ml: Fix IRQ handling and locking
    net: usb: qmi_wwan: restore mtu min/max values after raw_ip switch
    scsi: libfc: free response frame from GPN_ID
  * cfg80211: check reg_rule for NULL in handle_channel_custom()
      net/wireless/reg.c
    HID: i2c-hid: add Trekstor Surfbook E11B to descriptor override
  * HID: apple: Add support for recent firmware on Magic Keyboards
      drivers/hid/hid-apple.c
    ACPI: watchdog: Allow disabling WDAT at boot
  * mmc: host: Fix Kconfig warnings on keystone_defconfig
      drivers/mmc/host/Kconfig
  * mmc: sdhci-omap: Workaround errata regarding SDR104/HS200 tuning failures (i929)
      drivers/mmc/host/Kconfig
    mmc: sdhci-omap: Add platform specific reset callback
    perf/amd/uncore: Replace manual sampling check with CAP_NO_INTERRUPT flag
    ANDROID: GKI: Enable CONFIG_BACKLIGHT_CLASS_DEVICE in gki_defconfig
  * ANDROID: Incremental fs: Add INCFS_IOC_PERMIT_FILL
      fs/incfs/vfs.c
      include/uapi/linux/incrementalfs.h
  * ANDROID: Incremental fs: Remove signature checks from kernel
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/format.c
      fs/incfs/format.h
      fs/incfs/integrity.c
      fs/incfs/integrity.h
      fs/incfs/vfs.c
      include/uapi/linux/incrementalfs.h
  * ANDROID: Incremental fs: Pad hash blocks
      fs/incfs/integrity.c
  * ANDROID: Incremental fs: Make fill block an ioctl
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/vfs.c
      include/uapi/linux/incrementalfs.h
  * ANDROID: Incremental fs: Remove all access_ok checks
      fs/incfs/vfs.c
    Merge 4.19.111 into android-4.19
Linux 4.19.111
    batman-adv: Avoid free/alloc race when handling OGM2 buffer
    efi: Add a sanity check to efivar_store_raw()
    net/smc: cancel event worker during device removal
    net/smc: check for valid ib_client_data
  * ipv6: restrict IPV6_ADDRFORM operation
      net/ipv6/ipv6_sockglue.c
    i2c: acpi: put device when verifying client fails
    iommu/vt-d: Ignore devices with out-of-spec domain number
    iommu/vt-d: Fix the wrong printing in RHSA parsing
    netfilter: nft_tunnel: add missing attribute validation for tunnels
    netfilter: nft_payload: add missing attribute validation for payload csum flags
    netfilter: cthelper: add missing attribute validation for cthelper
    perf bench futex-wake: Restore thread count default to online CPU count
  * nl80211: add missing attribute validation for channel switch
      net/wireless/nl80211.c
  * nl80211: add missing attribute validation for beacon report scanning
      net/wireless/nl80211.c
  * nl80211: add missing attribute validation for critical protocol indication
      net/wireless/nl80211.c
    i2c: gpio: suppress error on probe defer
    drm/i915/gvt: Fix unnecessary schedule timer when no vGPU exits
  * pinctrl: core: Remove extra kref_get which blocks hogs being freed
      drivers/pinctrl/core.c
    pinctrl: meson-gxl: fix GPIOX sdio pins
    batman-adv: Don't schedule OGM for disabled interface
    iommu/vt-d: Fix a bug in intel_iommu_iova_to_phys() for huge page
    iommu/vt-d: dmar: replace WARN_TAINT with pr_warn + add_taint
  * iommu/dma: Fix MSI reservation allocation
      drivers/iommu/dma-iommu.c
    x86/mce: Fix logic and comments around MSR_PPIN_CTL
    mt76: fix array overflow on receiving too many fragments for a packet
  * efi: Make efi_rts_work accessible to efi page fault handler
      include/linux/efi.h
    efi: Fix a race and a buffer overflow while reading efivars via sysfs
    macintosh: windfarm: fix MODINFO regression
    ARC: define __ALIGN_STR and __ALIGN symbols for ARC
    KVM: x86: clear stale x86_emulate_ctxt->intercept value
    gfs2_atomic_open(): fix O_EXCL|O_CREAT handling on cold dcache
  * cifs_atomic_open(): fix double-put on late allocation failure
      fs/open.c
    ktest: Add timeout for ssh sync testing
    drm/amd/display: remove duplicated assignment to grph_obj_type
  * workqueue: don't use wq_select_unbound_cpu() for bound works
      kernel/workqueue.c
  * netfilter: x_tables: xt_mttg_seq_next should increase position index
      net/netfilter/x_tables.c
    netfilter: xt_recent: recent_seq_next should increase position index
    netfilter: synproxy: synproxy_cpu_seq_next should increase position index
  * netfilter: nf_conntrack: ct_cpu_seq_next should increase position index
      net/netfilter/nf_conntrack_standalone.c
    iommu/vt-d: quirk_ioat_snb_local_iommu: replace WARN_TAINT with pr_warn + add_taint
    virtio-blk: fix hw_queue stopped on arbitrary error
    iwlwifi: mvm: Do not require PHY_SKU NVM section for 3168 devices
  * cgroup: Iterate tasks that did not finish do_exit()
      include/linux/cgroup.h
      kernel/cgroup/cgroup.c
  * cgroup: cgroup_procs_next should increase position index
      kernel/cgroup/cgroup.c
    macvlan: add cond_resched() during multicast processing
    net: fec: validate the new settings in fec_enet_set_coalesce()
  * slip: make slhc_compress() more robust against malicious packets
      drivers/net/slip/slhc.c
  * bonding/alb: make sure arp header is pulled before accessing it
      drivers/net/bonding/bond_alb.c
    devlink: validate length of region addr/len
  * tipc: add missing attribute validation for MTU property
      net/tipc/netlink.c
  * net/ipv6: remove the old peer route if change it to a new one
      net/ipv6/addrconf.c
  * net/ipv6: need update peer route when modify metric
      net/ipv6/addrconf.c
    selftests/net/fib_tests: update addr_metric_test for peer route testing
  * net: phy: fix MDIO bus PM PHY resuming
      drivers/net/phy/phy_device.c
      include/linux/phy.h
    nfc: add missing attribute validation for vendor subcommand
    nfc: add missing attribute validation for deactivate target
    nfc: add missing attribute validation for SE API
    team: add missing attribute validation for array index
    team: add missing attribute validation for port ifindex
    net: fq: add missing attribute validation for orphan mask
    macsec: add missing attribute validation for port
    can: add missing attribute validation for termination
    nl802154: add missing attribute validation for dev_type
    nl802154: add missing attribute validation
  * fib: add missing attribute validation for tun_id
      include/net/fib_rules.h
    devlink: validate length of param values
  * net: memcg: fix lockdep splat in inet_csk_accept()
      net/ipv4/inet_connection_sock.c
  * net: memcg: late association of sock to memcg
      mm/memcontrol.c
      net/core/sock.c
      net/ipv4/inet_connection_sock.c
  * cgroup: memcg: net: do not associate sock with unrelated cgroup
      kernel/cgroup/cgroup.c
      mm/memcontrol.c
    bnxt_en: reinitialize IRQs when MTU is modified
    sfc: detach from cb_page in efx_copy_channel()
  * r8152: check disconnect status after long sleep
      drivers/net/usb/r8152.c
    net: systemport: fix index check to avoid an array out of bounds access
    net: stmmac: dwmac1000: Disable ACS if enhanced descs are not used
  * net/packet: tpacket_rcv: do not increment ring index on drop
      net/packet/af_packet.c
    net: nfc: fix bounds checking bugs on "pipe"
    net: macsec: update SCI upon MAC address change.
  * netlink: Use netlink header as base to calculate bad attribute offset
      net/netlink/af_netlink.c
  * net/ipv6: use configured metric when add peer route
      net/ipv6/addrconf.c
    ipvlan: don't deref eth hdr before checking it's set
    ipvlan: do not use cond_resched_rcu() in ipvlan_process_multicast()
    ipvlan: do not add hardware address of master to its unicast filter list
    ipvlan: add cond_resched_rcu() while processing muticast backlog
  * ipv6/addrconf: call ipv6_mc_up() for non-Ethernet interface
      net/ipv6/addrconf.c
  * inet_diag: return classid for all socket types
      include/linux/inet_diag.h
      net/ipv4/inet_diag.c
      net/ipv4/udp_diag.c
      net/sctp/diag.c
  * gre: fix uninit-value in __iptunnel_pull_header
      net/ipv4/gre_demux.c
    cgroup, netclassid: periodically release file_lock on classid updating
  * net: phy: Avoid multiple suspends
      drivers/net/phy/phy_device.c
  * phy: Revert toggling reset changes.
      drivers/net/phy/phy_device.c
  * ANDROID: kbuild: fix module linker script flags for LTO
      Makefile
  * ANDROID: kbuild: avoid excessively long argument lists
      scripts/Makefile.build
  * UPSTREAM: cgroup: Iterate tasks that did not finish do_exit()
      include/linux/cgroup.h
      kernel/cgroup/cgroup.c
    ANDROID: update the ABI xml representation
    Revert "ANDROID: gki_defconfig: Temporarily disable CFI"
  * ANDROID: GKI: dma-buf: Add support for XXX_cpu_access_umapped ops
      drivers/dma-buf/dma-buf.c
      include/linux/dma-buf.h
      include/uapi/linux/dma-buf.h
  * ANDROID: GKI: dma-buf: Add support to set a destructor on a dma-buf
      drivers/dma-buf/dma-buf.c
      include/linux/dma-buf.h
  * ANDROID: GKI: dma-buf: use spinlock to protect set/get name operation
      drivers/dma-buf/dma-buf.c
      include/linux/dma-buf.h
  * ANDROID: GKI: dma-buf: Add support to get flags associated with a buffer
      drivers/dma-buf/dma-buf.c
      include/linux/dma-buf.h
  * ANDROID: GKI: dma-buf: Add support for mapping buffers with DMA attributes
      include/linux/dma-buf.h
  * ANDROID: GKI: dma-buf: Add support for partial cache maintenance
      drivers/dma-buf/dma-buf.c
      include/linux/dma-buf.h
  * ANDROID: GKI: arm64: mm: Support setting removed_dma_ops in arch_setup_dma_ops
      arch/arm64/mm/dma-mapping.c
      include/linux/dma-removed.h
  * ANDROID: GKI: drivers: Add dma removed ops
      include/linux/device.h
      kernel/dma/Makefile
      kernel/dma/removed.c
  * ANDROID: GKI: add dma_map_ops remap/unremap operations
      arch/arm64/mm/dma-mapping.c
      include/linux/dma-mapping.h
    ANDROID: Add build.config files for ARM 32-bit
    ANDROID: GKI: update abi due to CONFIG_JUMP_LABEL being enabled
    ANDROID: GKI: enable CONFIG_JUMP_LABEL
    ANDROID: Add build.config.gki-debug.x86_64
    ANDROID: Add build.config.gki-debug.aarch64

Change-Id: Ifef77d2201a3833e4970cc7617d45814990bc3cb
Signed-off-by: lucaswei <lucaswei@google.com>
2020-08-25 20:09:36 +08:00
Tetsuo Handa
dd58bd1b95 fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
commit 033724d6864245a11f8e04c066002e6ad22b3fd0 upstream.

syzbot is reporting general protection fault in bitfill_aligned() [1]
caused by integer underflow in bit_clear_margins(). The cause of this
problem is when and how do_vc_resize() updates vc->vc_{cols,rows}.

If vc_do_resize() fails (e.g. kzalloc() fails) when var.xres or var.yres
is going to shrink, vc->vc_{cols,rows} will not be updated. This allows
bit_clear_margins() to see info->var.xres < (vc->vc_cols * cw) or
info->var.yres < (vc->vc_rows * ch). Unexpectedly large rw or bh will
try to overrun the __iomem region and causes general protection fault.

Also, vc_resize(vc, 0, 0) does not set vc->vc_{cols,rows} = 0 due to

  new_cols = (cols ? cols : vc->vc_cols);
  new_rows = (lines ? lines : vc->vc_rows);

exception. Since cols and lines are calculated as

  cols = FBCON_SWAP(ops->rotate, info->var.xres, info->var.yres);
  rows = FBCON_SWAP(ops->rotate, info->var.yres, info->var.xres);
  cols /= vc->vc_font.width;
  rows /= vc->vc_font.height;
  vc_resize(vc, cols, rows);

in fbcon_modechanged(), var.xres < vc->vc_font.width makes cols = 0
and var.yres < vc->vc_font.height makes rows = 0. This means that

  const int fd = open("/dev/fb0", O_ACCMODE);
  struct fb_var_screeninfo var = { };
  ioctl(fd, FBIOGET_VSCREENINFO, &var);
  var.xres = var.yres = 1;
  ioctl(fd, FBIOPUT_VSCREENINFO, &var);

easily reproduces integer underflow bug explained above.

Of course, callers of vc_resize() are not handling vc_do_resize() failure
is bad. But we can't avoid vc_resize(vc, 0, 0) which returns 0. Therefore,
as a band-aid workaround, this patch checks integer underflow in
"struct fbcon_ops"->clear_margins call, assuming that
vc->vc_cols * vc->vc_font.width and vc->vc_rows * vc->vc_font.heigh do not
cause integer overflow.

[1] https://syzkaller.appspot.com/bug?id=a565882df74fa76f10d3a6fec4be31098dbb37c6

Reported-and-tested-by: syzbot <syzbot+e5fd3e65515b48c02a30@syzkaller.appspotmail.com>
Signed-off-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
Acked-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Cc: stable <stable@vger.kernel.org>
Link: https://lore.kernel.org/r/20200715015102.3814-1-penguin-kernel@I-love.SAKURA.ne.jp
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-07-29 10:16:56 +02:00
Nirmal Abraham
69c26a7f62 fbdev: msm: snapshot of mdss driver
This is a snapshot of mdss driver from msm-4.14
as of commit '15e898828d1e (fbdev: msm: Avoid UAF
in mdss_dsi_cmd_write)'.

Change-Id: I16fe01fd45855d5c268c210ec61f09c6fa625761
Signed-off-by: Nirmal Abraham <nabrah@codeaurora.org>
Signed-off-by: Althaf Neelanchirayil <aneelanc@codeaurora.org>
2020-06-17 06:00:22 +05:30
Dan Carpenter
7b24ff9e00 fbdev: potential information leak in do_fb_ioctl()
commit d3d19d6fc5736a798b118971935ce274f7deaa82 upstream.

The "fix" struct has a 2 byte hole after ->ywrapstep and the
"fix = info->fix;" assignment doesn't necessarily clear it.  It depends
on the compiler.  The solution is just to replace the assignment with an
memcpy().

Fixes: 1f5e31d7e5 ("fbmem: don't call copy_from/to_user() with mutex held")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Cc: Andrew Morton <akpm@linux-foundation.org>
Cc: Arnd Bergmann <arnd@arndb.de>
Cc: "Eric W. Biederman" <ebiederm@xmission.com>
Cc: Andrea Righi <righi.andrea@gmail.com>
Cc: Daniel Vetter <daniel.vetter@ffwll.ch>
Cc: Sam Ravnborg <sam@ravnborg.org>
Cc: Maarten Lankhorst <maarten.lankhorst@linux.intel.com>
Cc: Daniel Thompson <daniel.thompson@linaro.org>
Cc: Peter Rosin <peda@axentia.se>
Cc: Jani Nikula <jani.nikula@intel.com>
Cc: Gerd Hoffmann <kraxel@redhat.com>
Signed-off-by: Bartlomiej Zolnierkiewicz <b.zolnierkie@samsung.com>
Link: https://patchwork.freedesktop.org/patch/msgid/20200113100132.ixpaymordi24n3av@kili.mountain
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-04-23 10:30:22 +02:00
Qiujun Huang
e9944eb667 fbcon: fix null-ptr-deref in fbcon_switch
commit b139f8b00db4a8ea75a4174346eafa48041aa489 upstream.

Set logo_shown to FBCON_LOGO_CANSHOW when the vc was deallocated.

syzkaller report: https://lkml.org/lkml/2020/3/27/403
general protection fault, probably for non-canonical address
0xdffffc000000006c: 0000 [#1] SMP KASAN
KASAN: null-ptr-deref in range [0x0000000000000360-0x0000000000000367]
RIP: 0010:fbcon_switch+0x28f/0x1740
drivers/video/fbdev/core/fbcon.c:2260

Call Trace:
redraw_screen+0x2a8/0x770 drivers/tty/vt/vt.c:1008
vc_do_resize+0xfe7/0x1360 drivers/tty/vt/vt.c:1295
fbcon_init+0x1221/0x1ab0 drivers/video/fbdev/core/fbcon.c:1219
visual_init+0x305/0x5c0 drivers/tty/vt/vt.c:1062
do_bind_con_driver+0x536/0x890 drivers/tty/vt/vt.c:3542
do_take_over_console+0x453/0x5b0 drivers/tty/vt/vt.c:4122
do_fbcon_takeover+0x10b/0x210 drivers/video/fbdev/core/fbcon.c:588
fbcon_fb_registered+0x26b/0x340 drivers/video/fbdev/core/fbcon.c:3259
do_register_framebuffer drivers/video/fbdev/core/fbmem.c:1664 [inline]
register_framebuffer+0x56e/0x980 drivers/video/fbdev/core/fbmem.c:1832
dlfb_usb_probe.cold+0x1743/0x1ba3 drivers/video/fbdev/udlfb.c:1735
usb_probe_interface+0x310/0x800 drivers/usb/core/driver.c:374

accessing vc_cons[logo_shown].d->vc_top causes the bug.

Reported-by: syzbot+732528bae351682f1f27@syzkaller.appspotmail.com
Signed-off-by: Qiujun Huang <hqjagain@gmail.com>
Acked-by: Sam Ravnborg <sam@ravnborg.org>
Cc: stable@vger.kernel.org
Signed-off-by: Daniel Vetter <daniel.vetter@ffwll.ch>
Link: https://patchwork.freedesktop.org/patch/msgid/20200329085647.25133-1-hqjagain@gmail.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-04-13 10:45:14 +02:00