Commit Graph

1800 Commits

Author SHA1 Message Date
Michael Bestas
157dbbdf4f Merge tag 'ASB-2024-12-05_4.19-stable' of https://android.googlesource.com/kernel/common into android-msm-pixel-4.19
https://source.android.com/docs/security/bulletin/2024-12-01

* tag 'ASB-2024-12-05_4.19-stable' of https://android.googlesource.com/kernel/common: (401 commits)
  Linux 4.19.324
  9p: fix slab cache name creation for real
  net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition
  fs: Fix uninitialized value issue in from_kuid and from_kgid
  powerpc/powernv: Free name on error in opal_event_init()
  sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML
  bpf: use kvzmalloc to allocate BPF verifier environment
  HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad
  9p: Avoid creating multiple slab caches with the same name
  ALSA: usb-audio: Add endianness annotations
  vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
  hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer
  ALSA: usb-audio: Add quirks for Dell WD19 dock
  ALSA: usb-audio: Support jack detection on Dell dock
  ALSA: usb-audio: Add custom mixer status quirks for RME CC devices
  ALSA: pcm: Return 0 when size < start_threshold in capture
  ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()
  irqchip/gic-v3: Force propagation of the active state with a read-back
  USB: serial: option: add Quectel RG650V
  USB: serial: option: add Fibocom FG132 0x0112 composition
  ...

 Conflicts:
	drivers/usb/dwc3/core.c
	drivers/usb/dwc3/core.h
	drivers/usb/dwc3/gadget.c
	fs/f2fs/f2fs.h
	fs/f2fs/file.c
	fs/f2fs/xattr.c
	net/qrtr/qrtr.c

Change-Id: Icc02e115a2066e9732ea14ccb5fca6ee021cc94c
2024-12-16 01:51:21 +02:00
Breno Leitao
11a772d537 KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
commit 49f683b41f28918df3e51ddc0d928cb2e934ccdb upstream.

Use {READ,WRITE}_ONCE() to access kvm->last_boosted_vcpu to ensure the
loads and stores are atomic.  In the extremely unlikely scenario the
compiler tears the stores, it's theoretically possible for KVM to attempt
to get a vCPU using an out-of-bounds index, e.g. if the write is split
into multiple 8-bit stores, and is paired with a 32-bit load on a VM with
257 vCPUs:

  CPU0                              CPU1
  last_boosted_vcpu = 0xff;

                                    (last_boosted_vcpu = 0x100)
                                    last_boosted_vcpu[15:8] = 0x01;
  i = (last_boosted_vcpu = 0x1ff)
                                    last_boosted_vcpu[7:0] = 0x00;

  vcpu = kvm->vcpu_array[0x1ff];

As detected by KCSAN:

  BUG: KCSAN: data-race in kvm_vcpu_on_spin [kvm] / kvm_vcpu_on_spin [kvm]

  write to 0xffffc90025a92344 of 4 bytes by task 4340 on cpu 16:
  kvm_vcpu_on_spin (arch/x86/kvm/../../../virt/kvm/kvm_main.c:4112) kvm
  handle_pause (arch/x86/kvm/vmx/vmx.c:5929) kvm_intel
  vmx_handle_exit (arch/x86/kvm/vmx/vmx.c:?
		 arch/x86/kvm/vmx/vmx.c:6606) kvm_intel
  vcpu_run (arch/x86/kvm/x86.c:11107 arch/x86/kvm/x86.c:11211) kvm
  kvm_arch_vcpu_ioctl_run (arch/x86/kvm/x86.c:?) kvm
  kvm_vcpu_ioctl (arch/x86/kvm/../../../virt/kvm/kvm_main.c:?) kvm
  __se_sys_ioctl (fs/ioctl.c:52 fs/ioctl.c:904 fs/ioctl.c:890)
  __x64_sys_ioctl (fs/ioctl.c:890)
  x64_sys_call (arch/x86/entry/syscall_64.c:33)
  do_syscall_64 (arch/x86/entry/common.c:?)
  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130)

  read to 0xffffc90025a92344 of 4 bytes by task 4342 on cpu 4:
  kvm_vcpu_on_spin (arch/x86/kvm/../../../virt/kvm/kvm_main.c:4069) kvm
  handle_pause (arch/x86/kvm/vmx/vmx.c:5929) kvm_intel
  vmx_handle_exit (arch/x86/kvm/vmx/vmx.c:?
			arch/x86/kvm/vmx/vmx.c:6606) kvm_intel
  vcpu_run (arch/x86/kvm/x86.c:11107 arch/x86/kvm/x86.c:11211) kvm
  kvm_arch_vcpu_ioctl_run (arch/x86/kvm/x86.c:?) kvm
  kvm_vcpu_ioctl (arch/x86/kvm/../../../virt/kvm/kvm_main.c:?) kvm
  __se_sys_ioctl (fs/ioctl.c:52 fs/ioctl.c:904 fs/ioctl.c:890)
  __x64_sys_ioctl (fs/ioctl.c:890)
  x64_sys_call (arch/x86/entry/syscall_64.c:33)
  do_syscall_64 (arch/x86/entry/common.c:?)
  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130)

  value changed: 0x00000012 -> 0x00000000

Fixes: 217ece6129 ("KVM: use yield_to instead of sleep in kvm_vcpu_on_spin")
Cc: stable@vger.kernel.org
Signed-off-by: Breno Leitao <leitao@debian.org>
Link: https://lore.kernel.org/r/20240510092353.2261824-1-leitao@debian.org
Signed-off-by: Sean Christopherson <seanjc@google.com>
Signed-off-by: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2024-11-08 16:19:19 +01:00
Michael Bestas
0d750eaafc Merge tag 'ASB-2024-08-05_4.19-stable' of https://android.googlesource.com/kernel/common into android-msm-pixel-4.19
https://source.android.com/docs/security/bulletin/2024-08-01
CVE-2024-36971

* tag 'ASB-2024-08-05_4.19-stable' of https://android.googlesource.com/kernel/common: (2363 commits)
  Linux 4.19.318
  i2c: rcar: bring hardware to known state when probing
  nilfs2: fix kernel bug on rename operation of broken directory
  SUNRPC: Fix RPC client cleaned up the freed pipefs dentries
  tcp: avoid too many retransmit packets
  tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
  net: tcp: fix unexcepted socket die when snd_wnd is 0
  tcp: refactor tcp_retransmit_timer()
  libceph: fix race between delayed_work() and ceph_monc_stop()
  hpet: Support 32-bit userspace
  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
  USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k
  USB: serial: option: add Rolling RW350-GL variants
  USB: serial: option: add Netprisma LCUK54 series modules
  USB: serial: option: add support for Foxconn T99W651
  USB: serial: option: add Fibocom FM350-GL
  USB: serial: option: add Telit FN912 rmnet compositions
  USB: serial: option: add Telit generic core-dump composition
  ARM: davinci: Convert comma to semicolon
  ...

 Conflicts:
	Documentation/devicetree/bindings/sound/rt5645.txt
	android/abi_gki_aarch64.xml
	drivers/clk/qcom/clk-rcg2.c
	drivers/hwtracing/coresight/coresight-etm4x.c
	drivers/leds/leds-pwm.c
	drivers/mmc/core/host.c
	drivers/mmc/core/sdio.c
	drivers/mmc/host/cqhci.c
	drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c
	drivers/rpmsg/qcom_glink_native.c
	drivers/scsi/ufs/ufshcd.c
	drivers/thermal/thermal_core.c
	drivers/usb/dwc3/core.c
	drivers/usb/gadget/function/f_ncm.c
	fs/f2fs/gc.c
	fs/pstore/ram_core.c
	include/linux/fs.h
	include/linux/timer.h
	include/net/tcp.h
	init/initramfs.c
	kernel/events/core.c
	kernel/sched/idle.c
	kernel/time/timer.c
	mm/page_alloc.c
	net/wireless/scan.c
	scripts/checkpatch.pl

Change-Id: Ice08f3ba5dc64a093bc381710ef2408d963cb983
2024-09-06 02:00:44 +03:00
Sean Christopherson
ab2c2f5d95 KVM: Always flush async #PF workqueue when vCPU is being destroyed
[ Upstream commit 3d75b8aa5c29058a512db29da7cbee8052724157 ]

Always flush the per-vCPU async #PF workqueue when a vCPU is clearing its
completion queue, e.g. when a VM and all its vCPUs is being destroyed.
KVM must ensure that none of its workqueue callbacks is running when the
last reference to the KVM _module_ is put.  Gifting a reference to the
associated VM prevents the workqueue callback from dereferencing freed
vCPU/VM memory, but does not prevent the KVM module from being unloaded
before the callback completes.

Drop the misguided VM refcount gifting, as calling kvm_put_kvm() from
async_pf_execute() if kvm_put_kvm() flushes the async #PF workqueue will
result in deadlock.  async_pf_execute() can't return until kvm_put_kvm()
finishes, and kvm_put_kvm() can't return until async_pf_execute() finishes:

 WARNING: CPU: 8 PID: 251 at virt/kvm/kvm_main.c:1435 kvm_put_kvm+0x2d/0x320 [kvm]
 Modules linked in: vhost_net vhost vhost_iotlb tap kvm_intel kvm irqbypass
 CPU: 8 PID: 251 Comm: kworker/8:1 Tainted: G        W          6.6.0-rc1-e7af8d17224a-x86/gmem-vm #119
 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015
 Workqueue: events async_pf_execute [kvm]
 RIP: 0010:kvm_put_kvm+0x2d/0x320 [kvm]
 Call Trace:
  <TASK>
  async_pf_execute+0x198/0x260 [kvm]
  process_one_work+0x145/0x2d0
  worker_thread+0x27e/0x3a0
  kthread+0xba/0xe0
  ret_from_fork+0x2d/0x50
  ret_from_fork_asm+0x11/0x20
  </TASK>
 ---[ end trace 0000000000000000 ]---
 INFO: task kworker/8:1:251 blocked for more than 120 seconds.
       Tainted: G        W          6.6.0-rc1-e7af8d17224a-x86/gmem-vm #119
 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
 task:kworker/8:1     state:D stack:0     pid:251   ppid:2      flags:0x00004000
 Workqueue: events async_pf_execute [kvm]
 Call Trace:
  <TASK>
  __schedule+0x33f/0xa40
  schedule+0x53/0xc0
  schedule_timeout+0x12a/0x140
  __wait_for_common+0x8d/0x1d0
  __flush_work.isra.0+0x19f/0x2c0
  kvm_clear_async_pf_completion_queue+0x129/0x190 [kvm]
  kvm_arch_destroy_vm+0x78/0x1b0 [kvm]
  kvm_put_kvm+0x1c1/0x320 [kvm]
  async_pf_execute+0x198/0x260 [kvm]
  process_one_work+0x145/0x2d0
  worker_thread+0x27e/0x3a0
  kthread+0xba/0xe0
  ret_from_fork+0x2d/0x50
  ret_from_fork_asm+0x11/0x20
  </TASK>

If kvm_clear_async_pf_completion_queue() actually flushes the workqueue,
then there's no need to gift async_pf_execute() a reference because all
invocations of async_pf_execute() will be forced to complete before the
vCPU and its VM are destroyed/freed.  And that in turn fixes the module
unloading bug as __fput() won't do module_put() on the last vCPU reference
until the vCPU has been freed, e.g. if closing the vCPU file also puts the
last reference to the KVM module.

Note that kvm_check_async_pf_completion() may also take the work item off
the completion queue and so also needs to flush the work queue, as the
work will not be seen by kvm_clear_async_pf_completion_queue().  Waiting
on the workqueue could theoretically delay a vCPU due to waiting for the
work to complete, but that's a very, very small chance, and likely a very
small delay.  kvm_arch_async_page_present_queued() unconditionally makes a
new request, i.e. will effectively delay entering the guest, so the
remaining work is really just:

        trace_kvm_async_pf_completed(addr, cr2_or_gpa);

        __kvm_vcpu_wake_up(vcpu);

        mmput(mm);

and mmput() can't drop the last reference to the page tables if the vCPU is
still alive, i.e. the vCPU won't get stuck tearing down page tables.

Add a helper to do the flushing, specifically to deal with "wakeup all"
work items, as they aren't actually work items, i.e. are never placed in a
workqueue.  Trying to flush a bogus workqueue entry rightly makes
__flush_work() complain (kudos to whoever added that sanity check).

Note, commit 5f6de5cbebee ("KVM: Prevent module exit until all VMs are
freed") *tried* to fix the module refcounting issue by having VMs grab a
reference to the module, but that only made the bug slightly harder to hit
as it gave async_pf_execute() a bit more time to complete before the KVM
module could be unloaded.

Fixes: af585b921e ("KVM: Halt vcpu if page it tries to access is swapped out")
Cc: stable@vger.kernel.org
Cc: David Matlack <dmatlack@google.com>
Reviewed-by: Xu Yilun <yilun.xu@intel.com>
Reviewed-by: Vitaly Kuznetsov <vkuznets@redhat.com>
Link: https://lore.kernel.org/r/20240110011533.503302-2-seanjc@google.com
Signed-off-by: Sean Christopherson <seanjc@google.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-04-13 12:50:03 +02:00
Oliver Upton
e790830986 KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
commit 85a71ee9a0700f6c18862ef3b0011ed9dad99aca upstream.

It is possible that an LPI mapped in a different ITS gets unmapped while
handling the MOVALL command. If that is the case, there is no state that
can be migrated to the destination. Silently ignore it and continue
migrating other LPIs.

Cc: stable@vger.kernel.org
Fixes: ff9c114394 ("KVM: arm/arm64: GICv4: Handle MOVALL applied to a vPE")
Signed-off-by: Oliver Upton <oliver.upton@linux.dev>
Link: https://lore.kernel.org/r/20240221092732.4126848-3-oliver.upton@linux.dev
Signed-off-by: Marc Zyngier <maz@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2024-03-01 13:06:11 +01:00
Oliver Upton
c2462b26fa KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
commit 8d3a7dfb801d157ac423261d7cd62c33e95375f8 upstream.

vgic_get_irq() may not return a valid descriptor if there is no ITS that
holds a valid translation for the specified INTID. If that is the case,
it is safe to silently ignore it and continue processing the LPI pending
table.

Cc: stable@vger.kernel.org
Fixes: 33d3bc9556 ("KVM: arm64: vgic-its: Read initial LPI pending table")
Signed-off-by: Oliver Upton <oliver.upton@linux.dev>
Link: https://lore.kernel.org/r/20240221092732.4126848-2-oliver.upton@linux.dev
Signed-off-by: Marc Zyngier <maz@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2024-03-01 13:06:11 +01:00
Wilson Sung
05a5973ef4 Merge android-4.19-stable (4.19.266) into android-msm-pixel-4.19-lts
Merge 4.19.266 into android-4.19-stable
Linux 4.19.266
    x86/speculation: Add RSB VM Exit protections
    x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts
    x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current
    x86/speculation: Disable RRSBA behavior
    x86/bugs: Add Cannon lake to RETBleed affected CPU list
    x86/cpu/amd: Enumerate BTC_NO
    x86/common: Stamp out the stepping madness
    x86/speculation: Fill RSB on vmexit for IBRS
    KVM: VMX: Fix IBRS handling after vmexit
    KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS
    x86/speculation: Remove x86_spec_ctrl_mask
    x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit
    x86/speculation: Fix SPEC_CTRL write on SMT state change
    x86/speculation: Fix firmware entry SPEC_CTRL handling
    x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n
    x86/speculation: Change FILL_RETURN_BUFFER to work with objtool
    intel_idle: Disable IBRS during long idle
    x86/bugs: Report Intel retbleed vulnerability
    x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation()
    x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS
    x86/bugs: Optimize SPEC_CTRL MSR writes
    x86/entry: Add kernel IBRS implementation
    x86/entry: Remove skip_r11rcx
    x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value
    x86/bugs: Add AMD retbleed= boot parameter
  * x86/bugs: Report AMD retbleed vulnerability
      drivers/base/cpu.c
      include/linux/cpu.h
    x86/cpufeatures: Move RETPOLINE flags to word 11
  * x86/cpu: Add a steppings field to struct x86_cpu_id
      include/linux/kvm_host.h
      include/linux/mod_devicetable.h
    x86/cpu: Add consistent CPU match macros
  * x86/devicetable: Move x86 specific macro out of generic code
      include/linux/mod_devicetable.h
    x86/cpufeature: Fix various quality problems in the <asm/cpu_device_hd.h> header
    x86/cpufeature: Add facility to check for min microcode revisions
  * Revert "x86/cpu: Add a steppings field to struct x86_cpu_id"
      include/linux/mod_devicetable.h
    Revert "x86/speculation: Add RSB VM Exit protections"
  * ANDROID: preserve CRC for some DRM functions
      include/linux/bits.h
  * Revert "tcp/udp: Make early_demux back namespacified."
      include/net/protocol.h
      include/net/tcp.h
      include/net/udp.h
      net/ipv4/af_inet.c
      net/ipv4/ip_input.c
      net/ipv4/sysctl_net_ipv4.c
      net/ipv6/ip6_input.c
      net/ipv6/tcp_ipv6.c
      net/ipv6/udp.c
    Merge 4.19.265 into android-4.19-stable
Linux 4.19.265
    wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker()
  * linux/bits.h: make BIT(), GENMASK(), and friends available in assembly
      include/linux/bits.h
    KVM: x86: emulator: update the emulation mode after CR0 write
    KVM: x86: emulator: introduce emulator_recalc_and_set_mode
    KVM: x86: emulator: em_sysexit should update ctxt->mode
    KVM: x86: Mask off reserved bits in CPUID.80000008H
  * ext4: fix warning in 'ext4_da_release_space'
      fs/ext4/migrate.c
    parisc: Avoid printing the hardware path twice
    parisc: Export iosapic_serial_irq() symbol for serial port driver
  * parisc: Make 8250_gsc driver dependend on CONFIG_PARISC
      drivers/tty/serial/8250/Kconfig
  * efi: random: reduce seed size to 32 bytes
      include/linux/efi.h
  * ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices
      sound/usb/quirks-table.h
      sound/usb/quirks.c
  * capabilities: fix potential memleak on error path from vfs_getxattr_alloc()
      security/commoncap.c
    tracing/histogram: Update document for KEYS_MAX size
    kprobe: reverse kp->flags when arm_kprobe failed
  * tcp/udp: Make early_demux back namespacified.
      include/net/protocol.h
      include/net/tcp.h
      include/net/udp.h
      net/ipv4/af_inet.c
      net/ipv4/ip_input.c
      net/ipv4/sysctl_net_ipv4.c
      net/ipv6/ip6_input.c
      net/ipv6/tcp_ipv6.c
      net/ipv6/udp.c
    btrfs: fix type of parameter generation in btrfs_get_dentry
    block, bfq: protect 'bfqd->queued' by 'bfqd->lock'
  * Bluetooth: L2CAP: Fix attempting to access uninitialized memory
      net/bluetooth/l2cap_core.c
    i2c: xiic: Add platform module alias
  * HID: saitek: add madcatz variant of MMO7 mouse device ID
      drivers/hid/hid-ids.h
      drivers/hid/hid-quirks.c
    media: dvb-frontends/drxk: initialize err to 0
    media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE
    media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE
  * ipv6: fix WARNING in ip6_route_net_exit_late()
      net/ipv6/route.c
  * net, neigh: Fix null-ptr-deref in neigh_table_clear()
      net/core/neighbour.c
  * net: mdio: fix undefined behavior in bit shift for __mdiobus_register
      drivers/net/phy/mdio_bus.c
  * Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
      net/bluetooth/l2cap_core.c
  * Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu
      net/bluetooth/l2cap_core.c
    btrfs: fix ulist leaks in error paths of qgroup self tests
    btrfs: fix inode list leak during backref walking at resolve_indirect_refs()
    isdn: mISDN: netjet: fix wrong check of device registration
    mISDN: fix possible memory leak in mISDN_register_device()
    rose: Fix NULL pointer dereference in rose_send_frame()
    ipvs: fix WARNING in ip_vs_app_net_cleanup()
    ipvs: fix WARNING in __ip_vs_cleanup_batch()
    ipvs: use explicitly signed chars
  * net: tun: fix bugs for oversize packet when napi frags enabled
      drivers/net/tun.c
    net: sched: Fix use after free in red_enqueue()
    ata: pata_legacy: fix pdc20230_set_piomode()
    net: fec: fix improper use of NETDEV_TX_BUSY
    nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send()
    nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()
    RDMA/qedr: clean up work queue on failure in qedr_alloc_resources()
    net: dsa: Fix possible memory leaks in dsa_loop_init()
    nfs4: Fix kmemleak when allocate slot failed
    NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot
    NFSv4.1: Handle RECLAIM_COMPLETE trunking errors
    BACKPORT: ARM: 9039/1: assembler: generalize byte swapping macro into rev_l
    BACKPORT: ARM: 9035/1: uncompress: Add be32tocpu macro
    Merge 4.19.264 into android-4.19-stable
Linux 4.19.264
    can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive
    net/mlx5e: Do not increment ESN when updating IPsec ESN state
    net: ehea: fix possible memory leak in ehea_register_port()
    openvswitch: switch from WARN to pr_warn
    ALSA: aoa: Fix I2S device accounting
    ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev()
  * PM: domains: Fix handling of unavailable/disabled idle states
      drivers/base/power/domain.c
    net: ksz884x: fix missing pci_disable_device() on error in pcidev_init()
    i40e: Fix flow-type by setting GL_HASH_INSET registers
    i40e: Fix VF hang when reset is triggered on another VF
    i40e: Fix ethtool rx-flow-hash setting for X722
  * media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced'
      include/uapi/linux/videodev2.h
  * media: v4l2-dv-timings: add sanity checks for blanking values
      drivers/media/v4l2-core/v4l2-dv-timings.c
    media: vivid: dev->bitmap_cap wasn't freed in all cases
    media: vivid: s_fbuf: add more sanity checks
    PM: hibernate: Allow hybrid sleep to work with s2idle
    can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path
  * tcp: fix indefinite deferral of RTO with SACK reneging
      net/ipv4/tcp_input.c
    net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY
  * net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed
      net/core/net_namespace.c
    kcm: annotate data-races around kcm->rx_wait
    kcm: annotate data-races around kcm->rx_psock
    amd-xgbe: add the bit rate quirk for Molex cables
    amd-xgbe: fix the SFP compliance codes check for DAC cables
    x86/unwind/orc: Fix unreliable stack dump with gcov
    net: netsec: fix error handling in netsec_register_mdio()
  * tipc: fix a null-ptr-deref in tipc_topsrv_accept
      net/tipc/topsrv.c
    ALSA: ac97: fix possible memory leak in snd_ac97_dev_register()
    arc: iounmap() arg is volatile
    drm/msm: Fix return type of mdp4_lvds_connector_mode_valid
    net: ieee802154: fix error return code in dgram_bind()
    mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages
    xen/gntdev: Prevent leaking grants
    Xen/gntdev: don't ignore kernel unmapping error
    s390/futex: add missing EX_TABLE entry to __futex_atomic_op()
    perf auxtrace: Fix address filter symbol name match for modules
  * kernfs: fix use-after-free in __kernfs_remove
      fs/kernfs/dir.c
    mmc: core: Fix kernel panic when remove non-standard SDIO card
    drm/msm/hdmi: fix memory corruption with too many bridges
    drm/msm/dsi: fix memory corruption with too many bridges
    mac802154: Fix LQI recording
    fbdev: smscufx: Fix several use-after-free bugs
    iio: light: tsl2583: Fix module unloading
    tools: iio: iio_utils: fix digit calculation
  * xhci: Remove device endpoints from bandwidth list when freeing the device
      drivers/usb/host/xhci-mem.c
  * usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller
      drivers/usb/host/xhci-pci.c
    usb: bdc: change state when port disconnected
  * usb: dwc3: gadget: Don't set IMI for no_interrupt
      drivers/usb/dwc3/gadget.c
  * usb: dwc3: gadget: Stop processing more requests on IMI
      drivers/usb/dwc3/gadget.c
  * USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM
      drivers/usb/core/quirks.c
    ALSA: au88x0: use explicitly signed char
    ALSA: Use del_timer_sync() before freeing timer
    can: kvaser_usb: Fix possible completions during init_completion
  * mm: /proc/pid/smaps_rollup: fix no vma's null-deref
      fs/proc/task_mmu.c
    hv_netvsc: Fix race between VF offering and VF association message from host
  * Makefile.debug: re-enable debug info for .S files
      Makefile
    ACPI: video: Force backlight native for more TongFang devices
  * media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls
      drivers/media/v4l2-core/v4l2-mem2mem.c
    iommu/vt-d: Clean up si_domain in the init_dmars() error path
    net: hns: fix possible memory leak in hnae_ae_register()
    net: sched: cake: fix null pointer access issue when cake_init() fails
    net/atm: fix proc_mpc_write incorrect return value
  * HID: magicmouse: Do not set BTN_MOUSE on double report
      drivers/hid/hid-magicmouse.c
  * tipc: fix an information leak in tipc_topsrv_kern_subscr
      net/tipc/topsrv.c
  * tipc: Fix recognition of trial period
      net/tipc/discover.c
    ACPI: extlog: Handle multiple records
    btrfs: fix processing of delayed tree block refs during backref walking
    btrfs: fix processing of delayed data refs during backref walking
  * r8152: add PID for the Lenovo OneLink+ Dock
      drivers/net/usb/cdc_ether.c
      drivers/net/usb/r8152.c
  * arm64: errata: Remove AES hwcap for COMPAT tasks
      arch/arm64/Kconfig
      arch/arm64/include/asm/cpucaps.h
      arch/arm64/kernel/cpu_errata.c
      arch/arm64/kernel/cpufeature.c
    media: venus: dec: Handle the case where find_format fails
    KVM: arm64: vgic: Fix exit condition in scan_its_table()
    ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS
    ata: ahci-imx: Fix MODULE_ALIAS
    hwmon/coretemp: Handle large core ID value
    x86/microcode/AMD: Apply the patch early on every logical thread
    ocfs2: fix BUG when iput after ocfs2_mknod fails
    ocfs2: clear dinode links count in case of error
    Merge 4.19.263 into android-4.19-stable
  * UPSTREAM: once: fix section mismatch on clang builds
      include/linux/once.h
    Revert "serial: 8250: Fix restoring termios speed after suspend"
    UPSTREAM: ARM: 8788/1: ftrace: remove old mcount support
Linux 4.19.263
  * once: fix section mismatch on clang builds
      include/linux/once.h
    Merge 4.19.262 into android-4.19-stable
Linux 4.19.262
    gcov: support GCC 12.1 and newer compilers
    thermal: intel_powerclamp: Use first online CPU as control_cpu
  * inet: fully convert sk->sk_rx_dst to RCU rules
      include/net/sock.h
      net/ipv4/af_inet.c
      net/ipv4/tcp.c
      net/ipv4/tcp_input.c
      net/ipv4/tcp_ipv4.c
      net/ipv4/udp.c
      net/ipv6/tcp_ipv6.c
      net/ipv6/udp.c
    efi: libstub: drop pointless get_memory_map() call
    md: Replace snprintf with scnprintf
  * ext4: continue to expand file system when the target size doesn't reach
      fs/ext4/resize.c
    net/ieee802154: don't warn zero-sized raw_sendmsg()
  * net: ieee802154: return -EINVAL for unknown addr type
      include/net/ieee802154_netdev.h
    perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc
    clk: bcm2835: Make peripheral PLLC critical
    usb: idmouse: fix an uninit-value in idmouse_open
    nvme: copy firmware_rev on each init
  * Revert "usb: storage: Add quirk for Samsung Fit flash"
      drivers/usb/storage/unusual_devs.h
    usb: musb: Fix musb_gadget.c rxstate overflow bug
  * usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info()
      drivers/usb/host/xhci-mem.c
    md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d
    HID: roccat: Fix use-after-free in roccat_read()
    ata: libahci_platform: Sanity check the DT child nodes number
    staging: vt6655: fix potential memory leak
    power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type()
    nbd: Fix hung when signal interrupts nbd_start_device_ioctl()
    scsi: 3w-9xxx: Avoid disabling device if failing to enable it
    media: cx88: Fix a null-ptr-deref bug in buffer_prepare()
    ARM: dts: imx6sx: add missing properties for sram
    ARM: dts: imx6sll: add missing properties for sram
    ARM: dts: imx6sl: add missing properties for sram
    ARM: dts: imx6qp: add missing properties for sram
    ARM: dts: imx6dl: add missing properties for sram
    ARM: dts: imx6q: add missing properties for sram
    ARM: dts: imx7d-sdb: config the max pressure for tsc2046
    drm/amdgpu: fix initial connector audio value
    platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading
  * drm: panel-orientation-quirks: Add quirk for Anbernic Win600
      drivers/gpu/drm/drm_panel_orientation_quirks.c
    drm/vc4: vec: Fix timings for VEC modes
    drm/amd/display: fix overflow on MIN_I64 definition
  * drm: Prevent drm_copy_field() to attempt copying a NULL pointer
      drivers/gpu/drm/drm_ioctl.c
  * drm: Use size_t type for len variable in drm_copy_field()
      drivers/gpu/drm/drm_ioctl.c
  * r8152: Rate limit overflow messages
      drivers/net/usb/r8152.c
  * Bluetooth: L2CAP: Fix user-after-free
      net/bluetooth/l2cap_core.c
  * net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory
      net/core/stream.c
    wifi: rt2x00: correctly set BBP register 86 for MT7620
    wifi: rt2x00: set SoC wmac clock register
    wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620
    wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620
    can: bcm: check the result of can_send() in bcm_can_tx()
  * Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times
      net/bluetooth/hci_sysfs.c
  * Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create()
      net/bluetooth/l2cap_core.c
    wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()
  * xfrm: Update ipcomp_scratches with NULL when freed
      net/xfrm/xfrm_ipcomp.c
    wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg()
  * tcp: annotate data-race around tcp_md5sig_pool_populated
      net/ipv4/tcp.c
    openvswitch: Fix overreporting of drops in dropwatch
    openvswitch: Fix double reporting of drops in dropwatch
    wifi: brcmfmac: fix invalid address access when enabling SCAN log level
    NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data
    thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash
    powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue
    MIPS: BCM47XX: Cast memcmp() of function to (void *)
    ACPI: video: Add Toshiba Satellite/Portege Z830 quirk
  * f2fs: fix race condition on setting FI_NO_EXTENT flag
      fs/f2fs/extent_cache.c
    crypto: cavium - prevent integer overflow loading firmware
  * iommu/iova: Fix module config properly
      include/linux/iova.h
    iommu/omap: Fix buffer overflow in debugfs
    powerpc: Fix SPE Power ISA properties for e500v1 platforms
    powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5
    x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition
    powerpc/powernv: add missing of_node_put() in opal_export_attrs()
    powerpc/pci_dn: Add missing of_node_put()
    powerpc/sysdev/fsl_msi: Add missing of_node_put()
    powerpc/math_emu/efp: Include module.h
    mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg
    clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe
    clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration
  * spmi: pmic-arb: correct duplicate APID to PPID mapping logic
      drivers/spmi/spmi-pmic-arb.c
    dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup()
    mfd: sm501: Add check for platform_driver_register()
    mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init()
    mfd: lp8788: Fix an error handling path in lp8788_probe()
    mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq()
    mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe()
    fsi: core: Check error number after calling ida_simple_get
    serial: 8250: Fix restoring termios speed after suspend
    firmware: google: Test spinlock on panic path to avoid lockups
    staging: vt6655: fix some erroneous memory clean-up loops
    phy: qualcomm: call clk_disable_unprepare in the error handling
    drivers: serial: jsm: fix some leaks in probe
    usb: gadget: function: fix dangling pnp_string in f_printer.c
  * xhci: Don't show warning for reinit on known broken suspend
      drivers/usb/host/xhci.c
    md/raid5: Ensure stripe_fill happens on non-read IO with journal
  * ata: fix ata_id_has_dipm()
      include/linux/ata.h
  * ata: fix ata_id_has_ncq_autosense()
      include/linux/ata.h
  * ata: fix ata_id_has_devslp()
      include/linux/ata.h
  * ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting()
      include/linux/ata.h
    mtd: devices: docg3: check the return value of devm_ioremap() in the probe
    dyndbg: let query-modname override actual module name
  * dyndbg: fix module.dyndbg handling
      include/linux/dynamic_debug.h
    RDMA/rxe: Fix the error caused by qp->sk
    RDMA/rxe: Fix "kernel NULL pointer dereference" error
    media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init
    tty: xilinx_uartps: Fix the ignore_status
    media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop
    HSI: omap_ssi_port: Fix dma_map_sg error check
    HSI: omap_ssi: Fix refcount leak in ssi_probe
    clk: tegra20: Fix refcount leak in tegra20_clock_init
    clk: tegra: Fix refcount leak in tegra114_clock_init
    clk: tegra: Fix refcount leak in tegra210_clock_init
    clk: berlin: Add of_node_put() for of_get_parent()
    clk: oxnas: Hold reference returned by of_get_parent()
    iio: ABI: Fix wrong format of differential capacitance channel ABI.
  * iio: inkern: only release the device node when done with it
      drivers/iio/inkern.c
    iio: adc: at91-sama5d2_adc: check return status for pressure and touch
    iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX
    ARM: dts: exynos: fix polarity of VBUS GPIO of Origen
    ARM: Drop CMDLINE_* dependency on ATAGS
    ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family
    ARM: dts: kirkwood: lsxl: remove first ethernet port
    ARM: dts: kirkwood: lsxl: fix serial line
    ARM: dts: turris-omnia: Fix mpp26 pin name and comment
  * soc: qcom: smem_state: Add refcounting for the 'state->of_node'
      drivers/soc/qcom/smem_state.c
    soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe()
    memory: of: Fix refcount leak bug in of_get_ddr_timings()
    ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe
    ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe
    ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe
    mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe()
    ALSA: dmaengine: increment buffer pointer atomically
    drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx
    ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API
    mmc: au1xmmc: Fix an error handling path in au1xmmc_probe()
    drm/bridge: megachips: Fix a null pointer dereference bug
    platform/x86: msi-laptop: Fix resource cleanup
    platform/x86: msi-laptop: Fix old-ec check for backlight registering
    platform/chrome: fix double-free in chromeos_laptop_prepare()
  * drm/mipi-dsi: Detach devices when removing the host
      drivers/gpu/drm/drm_mipi_dsi.c
    drm: bridge: adv7511: fix CEC power down control register offset
    net: mvpp2: fix mvpp2 debugfs leak
  * once: add DO_ONCE_SLOW() for sleepable contexts
      include/linux/once.h
      lib/once.c
      net/ipv4/inet_hashtables.c
    bnx2x: fix potential memory leak in bnx2x_tpa_stop()
    net: rds: don't hold sock lock when cancelling work from rds_tcp_reset_callbacks()
  * tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited
      include/linux/tcp.h
      include/net/tcp.h
      net/ipv4/tcp.c
      net/ipv4/tcp_output.c
  * sctp: handle the error returned from sctp_auth_asoc_init_active_key
      net/sctp/auth.c
    mISDN: fix use-after-free bugs in l1oip timer handlers
    vhost/vsock: Use kvmalloc/kvfree for larger packets.
    spi: s3c64xx: Fix large transfers with DMA
    netfilter: nft_fib: Fix for rpath check with VRF devices
    spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe
  * bpf: Ensure correct locking around vulnerable function find_vpid()
      kernel/bpf/syscall.c
    net: fs_enet: Fix wrong check in do_pd_setup
    wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration
  * bpf: btf: fix truncated last_member_type_id in btf_struct_resolve
      kernel/bpf/btf.c
    wifi: rtl8xxxu: Fix skb misuse in TX queue selection
    spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime()
    spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume()
    wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse()
    spi: mt7621: Fix an error message in mt7621_spi_probe()
    bpftool: Fix a wrong type cast in btf_dumper_int
    wifi: mac80211: allow bw change during channel switch in mesh
    wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()
    sh: machvec: Use char[] for section boundaries
    selinux: use "grep -E" instead of "egrep"
    KVM: nVMX: Unconditionally purge queued/injected events on nested "exit"
    KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility
  * ring-buffer: Fix race between reset page and reading page
      kernel/trace/ring_buffer.c
  * ring-buffer: Check pending waiters when doing wake ups as well
      kernel/trace/ring_buffer.c
  * ring-buffer: Allow splice to read previous partially read pages
      kernel/trace/ring_buffer.c
    ftrace: Properly unset FTRACE_HASH_FL_MOD
    livepatch: fix race between fork and KLP transition
  * ext4: place buffer head allocation before handle start
      fs/ext4/inode.c
  * ext4: make ext4_lazyinit_thread freezable
      fs/ext4/super.c
  * ext4: fix null-ptr-deref in ext4_write_info
      fs/ext4/super.c
  * ext4: avoid crash when inline data creation follows DIO write
      fs/ext4/file.c
    nilfs2: fix use-after-free bug of struct nilfs_root
    riscv: fix build with binutils 2.38
    btrfs: fix race between quota enable and quota rescan ioctl
    fbdev: smscufx: Fix use-after-free in ufx_ops_open()
  * PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge
      drivers/pci/setup-res.c
    UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
    riscv: Allow PROT_WRITE-only mmap()
    parisc: fbdev/stifb: Align graphics memory size to 4MB
  * Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
      fs/splice.c
    regulator: qcom_rpm: Fix circular deferral regression
  * quota: Check next/prev free block number after reading from quota file
      fs/quota/quota_tree.c
  * HID: multitouch: Add memory barriers
      drivers/hid/hid-multitouch.c
    fs: dlm: handle -EBUSY first in lock arg validation
    fs: dlm: fix race between test_bit() and queue_work()
    can: kvaser_usb_leaf: Fix CAN state after restart
    can: kvaser_usb_leaf: Fix TX queue out of sync after restart
    can: kvaser_usb_leaf: Fix overread with an invalid command
    can: kvaser_usb: Fix use of uninitialized completion
  * usb: add quirks for Lenovo OneLink+ Dock
      drivers/usb/core/quirks.c
    iio: dac: ad5593r: Fix i2c read protocol requirements
    mtd: rawnand: atmel: Unmap streaming DMA mappings
    ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530
  * ALSA: usb-audio: Fix NULL dererence at error path
      sound/usb/endpoint.c
  * ALSA: usb-audio: Fix potential memory leaks
      sound/usb/endpoint.c
  * ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free()
      sound/core/rawmidi.c
    ALSA: oss: Fix potential deadlock at unregistration
  * Input: xpad - fix wireless 360 controller breaking after suspend
      drivers/input/joystick/xpad.c
  * Input: xpad - add supported devices as contributed on github
      drivers/input/joystick/xpad.c
    wifi: mac80211_hwsim: avoid mac80211 warning on bad rate
  * random: use expired timer rather than wq for mixing fast pool
      drivers/char/random.c
  * random: avoid reading two cache lines on irq randomness
      drivers/char/random.c
  * random: restore O_NONBLOCK support
      drivers/char/mem.c
      drivers/char/random.c
    USB: serial: qcserial: add new usb-id for Dell branded EM7455
  * scsi: stex: Properly zero out the passthrough command structure
      include/scsi/scsi_cmnd.h
    ALSA: hda: Fix position reporting on Poulsbo
  * random: clamp credited irq bits to maximum mixed
      drivers/char/random.c
    ceph: don't truncate file in atomic_open
    nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure
    nilfs2: fix leak of nilfs_root in case of writer thread creation failure
    nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level()
  * rpmsg: qcom: glink: replace strncpy() with strscpy_pad()
      drivers/rpmsg/qcom_glink_native.c
    mmc: core: Terminate infinite loop in SD-UHS voltage switch
    mmc: core: Replace with already defined values for readability
    USB: serial: ftdi_sio: fix 300 bps rate for SIO
    usb: mon: make mmapped memory read only
    um: Cleanup compiler warning in arch/x86/um/tls_32.c
    um: Cleanup syscall_handler_t cast in syscalls_32.h
  * net/ieee802154: fix uninit value bug in dgram_sendmsg
      include/net/ieee802154_netdev.h
    scsi: qedf: Fix a UAF bug in __qedf_probe()
    ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer
    dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure
    dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property
    firmware: arm_scmi: Add SCMI PM driver remove routine
  * fs: fix UAF/GPF bug in nilfs_mdt_destroy
      fs/inode.c
    ARM: fix function graph tracer and unwinder dependencies
    docs: update mediator information in CoC docs
  * Makefile.extrawarn: Move -Wcast-function-type-strict to W=1
      scripts/Makefile.extrawarn
  * BACKPORT: arm64: compat: vdso: Use legacy syscalls as fallback
      arch/arm64/include/asm/vdso/compat_gettimeofday.h
    ANDROID: Drop explicit 'CONFIG_INIT_STACK_ALL_ZERO=y' from gki_defconfig
  * UPSTREAM: hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero
      Makefile
      security/Kconfig.hardening
  * UPSTREAM: hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO
      Makefile
      security/Kconfig.hardening
  * UPSTREAM: hardening: Clarify Kconfig text for auto-var-init
      security/Kconfig.hardening
  * ANDROID: Fix kenelci build-break for !CONFIG_PERF_EVENTS
      kernel/cpu.c
  * UPSTREAM: f2fs: guarantee to write dirty data when enabling checkpoint back
      fs/f2fs/file.c
      fs/f2fs/super.c

Bug: 260299968
Change-Id: I609eaa63e46c0600536923fa7da78ef66f5db237
Signed-off-by: Wilson Sung <wilsonsung@google.com>
Signed-off-by: JohnnLee <johnnlee@google.com>
2022-12-14 02:48:01 +00:00
Eric Ren
87f4765c7e KVM: arm64: vgic: Fix exit condition in scan_its_table()
commit c000a2607145d28b06c697f968491372ea56c23a upstream.

With some PCIe topologies, restoring a guest fails while
parsing the ITS device tables.

Reproducer hints:
1. Create ARM virt VM with pxb-pcie bus which adds
   extra host bridges, with qemu command like:

```
  -device pxb-pcie,bus_nr=8,id=pci.x,numa_node=0,bus=pcie.0 \
  -device pcie-root-port,..,bus=pci.x \
  ...
  -device pxb-pcie,bus_nr=37,id=pci.y,numa_node=1,bus=pcie.0 \
  -device pcie-root-port,..,bus=pci.y \
  ...

```
2. Ensure the guest uses 2-level device table
3. Perform VM migration which calls save/restore device tables

In that setup, we get a big "offset" between 2 device_ids,
which makes unsigned "len" round up a big positive number,
causing the scan loop to continue with a bad GPA. For example:

1. L1 table has 2 entries;
2. and we are now scanning at L2 table entry index 2075 (pointed
   to by L1 first entry)
3. if next device id is 9472, we will get a big offset: 7397;
4. with unsigned 'len', 'len -= offset * esz', len will underflow to a
   positive number, mistakenly into next iteration with a bad GPA;
   (It should break out of the current L2 table scanning, and jump
   into the next L1 table entry)
5. that bad GPA fails the guest read.

Fix it by stopping the L2 table scan when the next device id is
outside of the current table, allowing the scan to continue from
the next L1 table entry.

Thanks to Eric Auger for the fix suggestion.

Fixes: 920a7a8fa9 ("KVM: arm64: vgic-its: Add infrastructure for tableookup")
Suggested-by: Eric Auger <eric.auger@redhat.com>
Signed-off-by: Eric Ren <renzhengeek@gmail.com>
[maz: commit message tidy-up]
Signed-off-by: Marc Zyngier <maz@kernel.org>
Cc: stable@vger.kernel.org
Link: https://lore.kernel.org/r/d9c3a564af9e2c5bf63f48a7dcbf08cd593c5c0b.1665802985.git.renzhengeek@gmail.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-11-03 23:52:24 +09:00
Lucas Wei
2119f07e02 Merge android-4.19-stable (4.19.261) into android-msm-pixel-4.19-lts
Merge 4.19.261 into android-4.19-stable
Linux 4.19.261
    clk: iproc: Do not rely on node name for correct PLL setup
    selftests: Fix the if conditions of in test_extra_filter()
    nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices
    nvme: add new line after variable declatation
  * usbnet: Fix memory leak in usbnet_disconnect()
      drivers/net/usb/usbnet.c
    Input: melfas_mip4 - fix return value check in mip4_probe()
    Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time"
    soc: sunxi: sram: Fix debugfs info for A64 SRAM C
    soc: sunxi: sram: Fix probe function ordering issues
    soc: sunxi: sram: Prevent the driver from being unbound
    soc: sunxi: sram: Actually claim SRAM regions
    ima: Free the entire rule if it fails to parse
    ima: Free the entire rule when deleting a list of rules
    ima: Have the LSM free its audit rule
  * mm/migrate_device.c: flush TLB while holding PTL
      mm/migrate.c
  * mm: prevent page_frag_alloc() from corrupting the memory
      mm/page_alloc.c
  * mm/page_alloc: fix race condition between build_all_zonelists and page allocation
      mm/page_alloc.c
    mmc: moxart: fix 4-bit bus width and remove 8-bit bus width
    libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205
    ntfs: fix BUG_ON in ntfs_lookup_inode_by_name()
    ARM: dts: integrator: Tag PCI host with device_type
    net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455
    uas: ignore UAS for Thinkplus chips
    usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS
    uas: add no-uas quirk for Hiksemi usb_disk
    Merge 4.19.260 into android-4.19-stable
Linux 4.19.260
  * ext4: make directory inode spreading reflect flexbg size
      fs/ext4/ialloc.c
    usb: dwc3: pci: Allow Elkhart Lake to utilize DSM method for PM functionality
  * workqueue: don't skip lockdep work dependency in cancel_work_sync()
      kernel/workqueue.c
    drm/rockchip: Fix return type of cdn_dp_connector_mode_valid
    drm/amd/display: Limit user regamma to a valid value
    Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region
    s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup
    serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting
  * serial: Create uart_xmit_advance()
      include/linux/serial_core.h
    net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD
    perf kcore_copy: Do not check /proc/modules is unchanged
    perf jit: Include program header in ELF files
    can: gs_usb: gs_can_open(): fix race dev->can.state condition
  * netfilter: ebtables: fix memory leak when blob is malformed
      net/bridge/netfilter/ebtables.c
  * of: mdio: Add of_node_put() when breaking out of for_each_xx
      drivers/of/of_mdio.c
    i40e: Fix set max_tx_rate when it is lower than 1 Mbps
    i40e: Fix VF set max MTU size
    MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko
    net: team: Unsync device addresses on ndo_stop
    ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header
    iavf: Fix cached head and tail value for iavf_get_tx_pending
  * netfilter: nf_conntrack_irc: Tighten matching on DCC message
      net/netfilter/nf_conntrack_irc.c
    netfilter: nf_conntrack_sip: fix ct_sip_walk_headers
    arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma
    arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz
  * mm/slub: fix to return errno if kmalloc() fails
      mm/slub.c
    efi: libstub: check Shim mode using MokSBStateRT
    ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop
    ALSA: hda: add Intel 5 Series / 3400 PCI DID
    ALSA: hda/tegra: set depop delay for tegra
    USB: serial: option: add Quectel RM520N
    USB: serial: option: add Quectel BG95 0x0203 composition
  * USB: core: Fix RST error in hub.c
      drivers/usb/core/hub.c
    wifi: mac80211: Fix UAF in ieee80211_scan_rx()
    usb: dwc3: pci: add support for the Intel Alder Lake-S
    usb: dwc3: pci: add support for the Intel Jasper Lake
    usb: dwc3: pci: add support for the Intel Tiger Lake PCH -H variant
    usb: dwc3: pci: add support for TigerLake Devices
    usb: dwc3: pci: Add Support for Intel Elkhart Lake Devices
    ALSA: hda/sigmatel: Fix unused variable warning for beep power change
    video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write
  * mksysmap: Fix the mismatch of 'L0' symbols in System.map
      scripts/mksysmap
    MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping()
    net: usb: qmi_wwan: add Quectel RM520N
    ALSA: hda/sigmatel: Keep power up while beep is enabled
    rxrpc: Fix local destruction being repeated
    regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe()
    ASoC: nau8824: Fix semaphore unbalance at error paths
    cifs: don't send down the destination address to sendmsg for a SOCK_STREAM
    mvpp2: no need to check return value of debugfs_create functions
    nvmet: fix a use-after-free
    parisc: ccio-dma: Add missing iounmap in error path in ccio_probe()
    drm/meson: Correct OSD1 global alpha value
    gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx
  * of: fdt: fix off-by-one error in unflatten_dt_nodes()
      drivers/of/fdt.c
    Merge 4.19.259 into android-4.19-stable
  * Revert "xhci: Add grace period after xHC start to prevent premature runtime suspend."
      drivers/usb/host/xhci-hub.c
      drivers/usb/host/xhci.c
      drivers/usb/host/xhci.h
  * Revert "USB: core: Prevent nested device-reset calls"
      drivers/usb/core/hub.c
      include/linux/usb.h
    Merge 4.19.258 into android-4.19-stable
  * Revert "mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse"
      include/linux/rmap.h
      mm/rmap.c
  * Revert "sched/deadline: Fix priority inheritance with multiple scheduling classes"
      include/linux/sched.h
      kernel/sched/core.c
      kernel/sched/deadline.c
  * Revert "kernel/sched: Remove dl_boosted flag comment"
      include/linux/sched.h
    Merge 4.19.257 into android-4.19-stable
  * Revert "fs: check FMODE_LSEEK to control internal pipe splicing"
      fs/splice.c
    Merge 4.19.256 into android-4.19-stable
Linux 4.19.259
  * tracefs: Only clobber mode/uid/gid on remount if asked
      fs/tracefs/inode.c
    net: dp83822: disable rx error interrupt
  * mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region()
      mm/mmap.c
    usb: storage: Add ASUS <0x0b05:0x1932> to IGNORE_UAS
    platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes
  * perf/arm_pmu_platform: fix tests for platform_get_irq() failure
      drivers/perf/arm_pmu_platform.c
    Input: iforce - add support for Boeder Force Feedback Wheel
    ieee802154: cc2520: add rc code in cc2520_tx()
    tg3: Disable tg3 device on system reboot to avoid triggering AER
    HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo
    drm/msm/rd: Fix FIFO-full deadlock
Linux 4.19.258
    SUNRPC: use _bh spinlocking on ->transport_lock
    MIPS: loongson32: ls1c: Fix hang during startup
    x86/nospec: Fix i386 RSB stuffing
  * usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
      drivers/usb/dwc3/dwc3-qcom.c
      drivers/usb/dwc3/host.c
    USB: serial: ch341: fix disabled rx timer on older devices
    USB: serial: ch341: fix lost character on LCR updates
  * usb: dwc3: fix PHY disable sequence
      drivers/usb/dwc3/core.c
    sch_sfb: Also store skb len before calling child enqueue
  * tcp: fix early ETIMEDOUT after spurious non-SACK RTO
      net/ipv4/tcp_input.c
    RDMA/mlx5: Set local port to one when accessing counters
  * ipv6: sr: fix out-of-bounds read when setting HMAC data.
      net/ipv6/seg6.c
    i40e: Fix kernel crash during module removal
  * tipc: fix shift wrapping bug in map_get()
      net/tipc/monitor.c
    sch_sfb: Don't assume the skb is still around after enqueueing to child
  * netfilter: nf_conntrack_irc: Fix forged IP logic
      net/netfilter/nf_conntrack_irc.c
    netfilter: br_netfilter: Drop dst references before setting.
    soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
    scsi: mpt3sas: Fix use-after-free warning
  * debugfs: add debugfs_lookup_and_remove()
      fs/debugfs/inode.c
      include/linux/debugfs.h
    kprobes: Prohibit probes in gate area
  * ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()
      sound/usb/stream.c
    ALSA: aloop: Fix random zeros in capture data when using jiffies timer
    ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()
    drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly
    fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init()
  * arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level
      arch/arm64/kernel/cacheinfo.c
    parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines
    parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources()
    drm/radeon: add a force flush to delay work when radeon
    drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup.
    ALSA: seq: Fix data-race at module auto-loading
    ALSA: seq: oss: Fix data-race for max_midi_devs access
    net: mac802154: Fix a condition in the receive path
    wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
  * usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS
      drivers/usb/gadget/function/storage_common.c
  * USB: core: Prevent nested device-reset calls
      drivers/usb/core/hub.c
      include/linux/usb.h
    s390: fix nospec table alignments
    s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages
  * usb-storage: Add ignore-residue quirk for NXP PN7462AU
      drivers/usb/storage/unusual_devs.h
    USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020)
    usb: dwc2: fix wrong order of phy_power_on and phy_init
  * usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles
      include/linux/usb/typec_dp.h
    USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode
    USB: serial: option: add Quectel EM060K modem
    USB: serial: option: add support for OPPO R11 diag port
    USB: serial: cp210x: add Decagon UCA device id
  * xhci: Add grace period after xHC start to prevent premature runtime suspend.
      drivers/usb/host/xhci-hub.c
      drivers/usb/host/xhci.c
      drivers/usb/host/xhci.h
    thunderbolt: Use the actual buffer in tb_async_error()
    hwmon: (gpio-fan) Fix array out of bounds access
    Input: rk805-pwrkey - fix module autoloading
  * clk: core: Fix runtime PM sequence in clk_core_unprepare()
      drivers/clk/clk.c
  * Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops"
      drivers/clk/clk.c
  * clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops
      drivers/clk/clk.c
    drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported"
  * binder: fix UAF of ref->proc caused by race condition
      drivers/android/binder.c
    USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id
    vt: Clear selection before changing the font
    staging: rtl8712: fix use after free bugs
    serial: fsl_lpuart: RS485 RTS polariy is inverse
    net/smc: Remove redundant refcount increase
    Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb"
  * tcp: annotate data-race around challenge_timestamp
      net/ipv4/tcp_input.c
    sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb
    kcm: fix strp_init() order and cleanup
    ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler
  * Revert "xhci: turn off port power in shutdown"
      drivers/usb/host/xhci-hub.c
      drivers/usb/host/xhci.c
      drivers/usb/host/xhci.h
    wifi: cfg80211: debugfs: fix return type in ht40allow_map_read()
    ieee802154/adf7242: defer destroy_workqueue call
  * platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask
      include/linux/platform_data/x86/pmc_atom.h
    drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg
    drm/msm/dsi: fix the inconsistent indenting
    net: dp83822: disable false carrier interrupt
    Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()"
  * fs: only do a memory barrier for the first set_buffer_uptodate()
      include/linux/buffer_head.h
    wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd()
    efi: capsule-loader: Fix use-after-free in efi_capsule_write
  * driver core: Don't probe devices after bus_type.match() probe deferral
      drivers/base/dd.c
    Merge 08e84df974 ("selftests: timers: clocksource-switch: fix passing errors from child") into android-mainline
    Merge 247f293432 ("drm/msm/mdp5: Fix global state lock backoff") into android-mainline
  * Revert "USB: HCD: Fix URB giveback issue in tasklet function"
      drivers/usb/core/hcd.c
      include/linux/usb/hcd.h
    Merge 9408f5a443 ("USB: HCD: Fix URB giveback issue in tasklet function") into android-mainline
    Merge 4cb392956a ("MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK") into android-mainline
Linux 4.19.257
  * net: neigh: don't call kfree_skb() under spin_lock_irqsave()
      net/core/neighbour.c
    kprobes: don't call disarm_kprobe() for disabled kprobes
  * netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y
      net/netfilter/Kconfig
    s390/hypfs: avoid error message under KVM
  * neigh: fix possible DoS due to net iface start/stop loop
      net/core/neighbour.c
    drm/amd/display: clear optc underflow before turn off odm clock
  * mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse
      include/linux/rmap.h
      mm/rmap.c
    ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead
    fbdev: fb_pm2fb: Avoid potential divide by zero error
    HID: hidraw: fix memory leak in hidraw_release()
    media: pvrusb2: fix memory leak in pvr_probe
    HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report
  * Bluetooth: L2CAP: Fix build errors in some archs
      net/bluetooth/l2cap_core.c
  * kbuild: Fix include path in scripts/Makefile.modpost
      scripts/Makefile.modpost
    x86/bugs: Add "unknown" reporting for MMIO Stale Data
    s390/mm: do not trigger write fault when vma does not allow VM_WRITE
    selftests/bpf: Fix test_align verifier log patterns
    bpf: Fix the off-by-two error in range markings
  * arm64: map FDT as RW for early_init_dt_scan()
      arch/arm64/include/asm/mmu.h
      arch/arm64/kernel/kaslr.c
      arch/arm64/kernel/setup.c
      arch/arm64/mm/mmu.c
  * mm: Force TLB flush for PFNMAP mappings before unlink_file_vma()
      mm/mmap.c
    scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq
    md: call __md_stop_writes in md_stop
  * mm/hugetlb: fix hugetlb not supporting softdirty tracking
      mm/mmap.c
    s390: fix double free of GS and RI CBs on fork() failure
  * asm-generic: sections: refactor memory_intersects
      include/asm-generic/sections.h
  * loop: Check for overflow while configuring loop
      drivers/block/loop.c
    x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry
    btrfs: check if root is readonly while setting security xattr
    ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter
  * net: Fix a data-race around sysctl_somaxconn.
      net/socket.c
  * net: Fix a data-race around netdev_budget_usecs.
      net/core/dev.c
  * net: Fix a data-race around netdev_budget.
      net/core/dev.c
  * net: Fix a data-race around sysctl_net_busy_read.
      net/core/sock.c
  * net: Fix a data-race around sysctl_net_busy_poll.
      include/net/busy_poll.h
  * net: Fix a data-race around sysctl_tstamp_allow_data.
      net/core/skbuff.c
  * ratelimit: Fix data-races in ___ratelimit().
      lib/ratelimit.c
  * net: Fix data-races around netdev_tstamp_prequeue.
      net/core/dev.c
  * net: Fix data-races around weight_p and dev_weight_[rt]x_bias.
      net/core/dev.c
      net/core/sysctl_net_core.c
      net/sched/sch_generic.c
    netfilter: nft_tunnel: restrict it to netdev family
    netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families
    netfilter: nft_payload: do not truncate csum_offset and csum_type
    netfilter: nft_payload: report ERANGE for too long offset and length
  * netfilter: ebtables: reject blobs that don't provide all entry points
      include/linux/netfilter_bridge/ebtables.h
      net/bridge/netfilter/ebtable_broute.c
      net/bridge/netfilter/ebtables.c
    net: ipvtap - add __init/__exit annotations to module init/exit funcs
  * bonding: 802.3ad: fix no transmission of LACPDUs
      drivers/net/bonding/bond_3ad.c
    rose: check NULL rose_loopback_neigh->loopback
  * af_key: Do not call xfrm_probe_algs in parallel
      net/key/af_key.c
  * xfrm: fix refcount leak in __xfrm_policy_check()
      net/xfrm/xfrm_policy.c
  * kernel/sched: Remove dl_boosted flag comment
      include/linux/sched.h
  * sched/deadline: Fix priority inheritance with multiple scheduling classes
      include/linux/sched.h
      kernel/sched/core.c
      kernel/sched/deadline.c
  * sched/deadline: Fix stale throttling on de-/boosted tasks
      kernel/sched/deadline.c
  * sched/deadline: Unthrottle PI boosted threads while enqueuing
      kernel/sched/deadline.c
    pinctrl: amd: Don't save/restore interrupt status and wake status bits
  * kernel/sys_ni: add compat entry for fadvise64_64
      kernel/sys_ni.c
    parisc: Fix exception handler for fldw and fstw instructions
  * audit: fix potential double free on error path from fsnotify_add_inode_mark
      kernel/audit_fsnotify.c
Linux 4.19.256
    btrfs: raid56: don't trust any cached sector in __raid56_parity_recover()
    btrfs: only write the sectors in the vertical stripe which has data stripes
  * tracing/probes: Have kprobes and uprobes use $COMM too
      kernel/trace/trace_probe.c
    tee: add overflow check in register_shm_helper()
    MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0
    video: fbdev: i740fb: Check the argument of i740_calc_vclk()
    powerpc/64: Init jump labels before parse_early_param()
    smb3: check xattr value length earlier
  * f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page()
      fs/f2fs/node.c
  * ALSA: timer: Use deferred fasync helper
      sound/core/timer.c
  * ALSA: core: Add async signal helpers
      include/sound/core.h
      sound/core/misc.c
  * watchdog: export lockup_detector_reconfigure
      include/linux/nmi.h
    RISC-V: Add fast call path of crash_kexec()
    riscv: mmap with PROT_WRITE but no PROT_READ is invalid
    mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start
    vfio: Clear the caps->buf to NULL after free
    tty: serial: Fix refcount leak bug in ucc_uart.c
  * lib/list_debug.c: Detect uninitialized lists
      lib/list_debug.c
  * ext4: avoid resizing to a partial cluster size
      fs/ext4/resize.c
  * ext4: avoid remove directory when directory is corrupted
      fs/ext4/namei.c
    drivers:md:fix a potential use-after-free bug
    dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed
    cxl: Fix a memory leak in an error handling path
    gadgetfs: ep_io - wait until IRQ finishes
    clk: qcom: ipq8074: dont disable gcc_sleep_clk_src
    vboxguest: Do not use devm for irq
    usb: renesas: Fix refcount leak bug
    usb: host: ohci-ppc-of: Fix refcount leak bug
    irqchip/tegra: Fix overflow implicit truncation warnings
  * PCI: Add ACS quirk for Broadcom BCM5750x NICs
      drivers/pci/quirks.c
    drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors()
  * locking/atomic: Make test_and_*_bit() ordered on failure
      include/asm-generic/bitops/atomic.h
  * gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file
      scripts/Makefile.gcc-plugins
    igb: Add lock to avoid data race
    fec: Fix timer capture timing in `fec_ptp_enable_pps()`
    i40e: Fix to stop tx_timeout recovery if GLOBR fails
    powerpc/pci: Fix get_phb_number() locking
    netfilter: nf_tables: really skip inactive sets when allocating name
    nios2: add force_successful_syscall_return()
    nios2: restarts apply only to the first sigframe we build...
    nios2: fix syscall restart checks
    nios2: traced syscall does need to check the syscall number
    nios2: don't leave NULLs in sys_call_table[]
    nios2: page fault et.al. are *not* restartable syscalls...
    atm: idt77252: fix use-after-free bugs caused by tst_timer
    xen/xenbus: fix return type in xenbus_file_read()
    NTB: ntb_tool: uninitialized heap data in tool_fn_write()
    tools build: Switch to new openssl API for test-libcrypto
    vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout()
    vsock: Fix memory leak in vsock_connect()
    geneve: do not use RT_TOS for IPv6 flowlabel
    ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool
    pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed
    pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map
    SUNRPC: Reinitialise the backchannel request buffers before reuse
    NFSv4/pnfs: Fix a use-after-free bug in open
    NFSv4.1: RECLAIM_COMPLETE must handle EACCES
    NFSv4: Fix races in the legacy idmapper upcall
    apparmor: Fix memleak in aa_simple_write_to_buffer()
    apparmor: fix reference count leak in aa_pivotroot()
    apparmor: fix overlapping attachment computation
    apparmor: fix aa_label_asxprint return check
    apparmor: Fix failed mount permission check error message
    apparmor: fix absroot causing audited secids to begin with =
    apparmor: fix quiet_denied for file rules
    can: ems_usb: fix clang's -Wunaligned-access warning
  * tracing: Have filter accept "common_cpu" to be consistent
      kernel/trace/trace_events.c
    btrfs: fix lost error handling when looking up extended ref on log replay
    mmc: pxamci: Fix an error handling path in pxamci_probe()
    mmc: pxamci: Fix another error handling path in pxamci_probe()
    ata: libata-eh: Add missing command name
    rds: add missing barrier to release_refill
  * ALSA: info: Fix llseek return value when using callback
      sound/core/info.c
    powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E
    powerpc/mm: Split dump_pagelinuxtables flag_array table
    firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails
    net_sched: cls_route: disallow handle of 0
    net/9p: Initialize the iounit field during fid creation
  * Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression
      net/bluetooth/l2cap_core.c
  * Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP"
      drivers/net/usb/ax88179_178a.c
  * scsi: sg: Allow waiting for commands to complete on removed device
      drivers/scsi/sg.c
  * tcp: fix over estimation in sk_forced_mem_schedule()
      net/ipv4/tcp_output.c
    KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast()
    KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq
  * KVM: Add infrastructure and macro to mark VM as bugged
      include/linux/kvm_host.h
    btrfs: reject log replay if there is unsupported RO compat flag
    net_sched: cls_route: remove from list when handle is 0
  * ACPI: CPPC: Do not prevent CPPC from working in the future
      include/acpi/cppc_acpi.h
    dm writecache: set a default MAX_WRITEBACK_JOBS
    dm raid: fix address sanitizer warning in raid_status
    dm raid: fix address sanitizer warning in raid_resume
    intel_th: pci: Add Meteor Lake-P support
    intel_th: pci: Add Raptor Lake-S PCH support
    intel_th: pci: Add Raptor Lake-S CPU support
  * ext4: correct the misjudgment in ext4_iget_extra_inode
      fs/ext4/inode.c
  * ext4: correct max_inline_xattr_value_size computing
      fs/ext4/inline.c
  * ext4: fix extent status tree race in writeback error recovery path
      fs/ext4/inode.c
  * ext4: update s_overhead_clusters in the superblock during an on-line resize
      fs/ext4/resize.c
  * ext4: fix use-after-free in ext4_xattr_set_entry
      fs/ext4/xattr.c
  * ext4: make sure ext4_append() always allocates new block
      fs/ext4/namei.c
  * ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h
      fs/ext4/xattr.h
  * spmi: trace: fix stack-out-of-bound access in SPMI tracing functions
      include/trace/events/spmi.h
    x86/olpc: fix 'logical not is only applied to the left hand side'
    scsi: zfcp: Fix missing auto port scan and thus missing target ports
    video: fbdev: s3fb: Check the size of screen before memset_io()
    video: fbdev: arkfb: Check the size of screen before memset_io()
    video: fbdev: vt8623fb: Check the size of screen before memset_io()
    tools/thermal: Fix possible path truncations
    video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock()
    x86/numa: Use cpumask_available instead of hardcoded NULL check
    scripts/faddr2line: Fix vmlinux detection on arm64
    genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO
    powerpc/pci: Fix PHB numbering when using opal-phbid
    kprobes: Forbid probing on trampoline and BPF code areas
    powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address
    powerpc/xive: Fix refcount leak in xive_get_max_prio
    powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader
    powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias
    powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32
    video: fbdev: sis: fix typos in SiS_GetModeID()
    video: fbdev: amba-clcd: Fix refcount leak bugs
    ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp()
    s390/zcore: fix race when reading from hardware system area
    iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop
  * mfd: t7l66xb: Drop platform disable callback
      include/linux/mfd/t7l66xb.h
  * kfifo: fix kfifo_to_user() return type
      include/linux/kfifo.h
    rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge
    iommu/exynos: Handle failed IOMMU device registration properly
    tty: n_gsm: fix missing corner cases in gsmld_poll()
    tty: n_gsm: fix DM command
    tty: n_gsm: fix wrong T1 retry count handling
    vfio/ccw: Do not change FSM state in subchannel event
    remoteproc: qcom: wcnss: Fix handling of IRQs
    tty: n_gsm: fix race condition in gsmld_write()
    tty: n_gsm: fix packet re-transmission without open control channel
    tty: n_gsm: fix non flow control frames during mux flow off
  * profiling: fix shift too large makes kernel panic
      kernel/profile.c
    serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty()
    ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe
    ASoC: codecs: da7210: add check for i2c_add_driver
    ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe
    ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe
  * jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted
      fs/jbd2/transaction.c
  * ext4: recover csum seed of tmp_inode after migrating to extents
      fs/ext4/migrate.c
    null_blk: fix ida error handling in null_add_dev()
    RDMA/rxe: Fix error unwind in rxe_create_qp()
  * mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region
      mm/mmap.c
    platform/olpc: Fix uninitialized data in debugfs write
    USB: serial: fix tty-port initialized comments
    HID: alps: Declare U1_UNICORN_LEGACY support
    mmc: cavium-thunderx: Add of_node_put() when breaking out of loop
    mmc: cavium-octeon: Add of_node_put() when breaking out of loop
  * gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data()
      drivers/gpio/gpiolib-of.c
    RDMA/hfi1: fix potential memory leak in setup_base_ctxt()
  * usb: gadget: udc: amd5536 depends on HAS_DMA
      drivers/usb/gadget/udc/Kconfig
    scsi: smartpqi: Fix DMA direction for RAID requests
    mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R
    memstick/ms_block: Fix a memory leak
    memstick/ms_block: Fix some incorrect memory allocation
    mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch
    staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback
    soundwire: bus_type: fix remove and shutdown support
    clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks
    clk: qcom: ipq8074: fix NSS port frequency tables
    misc: rtsx: Fix an error handling path in rtsx_pci_probe()
    usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe
    usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe
    fpga: altera-pr-ip: fix unsigned comparison with less than zero
    mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path
    mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release
    HID: cp2112: prevent a buffer overflow in cp2112_xfer()
    mtd: maps: Fix refcount leak in ap_flash_init
    mtd: maps: Fix refcount leak in of_flash_probe_versatile
    clk: renesas: r9a06g032: Fix UART clkgrp bitsel
    dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock
    net: rose: fix netdev reference changes
    netdevsim: Avoid allocation warnings triggered from user space
    net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS
    wifi: libertas: Fix possible refcount leak in if_usb_probe()
    wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()`
    i2c: mux-gpmux: Add of_node_put() when breaking out of loop
    i2c: cadence: Support PEC for SMBus block read
    Bluetooth: hci_intel: Add check for platform_driver_register
    can: pch_can: pch_can_error(): initialize errc before using it
  * can: error: specify the values of data[5..7] of CAN error frames
      include/uapi/linux/can/error.h
    can: usb_8dev: do not report txerr and rxerr during bus-off
    can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off
    can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off
    can: sun4i_can: do not report txerr and rxerr during bus-off
    can: hi311x: do not report txerr and rxerr during bus-off
    can: sja1000: do not report txerr and rxerr during bus-off
    can: rcar_can: do not report txerr and rxerr during bus-off
    can: pch_can: do not report txerr and rxerr during bus-off
    wifi: p54: add missing parentheses in p54_flush()
    wifi: p54: Fix an error handling path in p54spi_probe()
    selftests: timers: clocksource-switch: fix passing errors from child
    wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()
    selftests: timers: valid-adjtimex: build fix for newer toolchains
  * fs: check FMODE_LSEEK to control internal pipe splicing
      fs/splice.c
    libbpf: Fix the name of a reused map
  * tcp: make retransmitted SKB fit into the send window
      net/ipv4/tcp_output.c
    mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init()
    media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment
    crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq
    drm/msm/mdp5: Fix global state lock backoff
    drm: bridge: sii8620: fix possible off-by-one
    drm/mediatek: dpi: Remove output format of YUV
    drm/rockchip: vop: Don't crash for invalid duplicate_state()
    drm/vc4: dsi: Correct DSI divider calculations
    media: hdpvr: fix error value returns in hdpvr_read
    drm: bridge: adv7511: Add check for mipi_dsi_driver_register
    wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd()
    ath9k: fix use-after-free in ath9k_hif_usb_rx_cb
    media: tw686x: Register the irq at the end of probe
  * i2c: Fix a potential use after free
      drivers/i2c/i2c-core-base.c
    drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function
    drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers()
    wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c()
    ath10k: do not enforce interrupt trigger type
  * dm: return early from dm_pr_call() if DM device is suspended
      drivers/md/dm.c
    thermal/tools/tmon: Include pthread and time headers in tmon.h
  * nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt()
      kernel/sched/rt.c
  * regulator: of: Fix refcount leak bug in of_get_regulation_constraints()
      drivers/regulator/of_regulator.c
    arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node
    bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe()
    ARM: dts: qcom: pm8841: add required thermal-sensor-cells
    cpufreq: zynq: Fix refcount leak in zynq_get_revision
    ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init
    soc: fsl: guts: machine variable might be unset
    ARM: dts: ast2500-evb: fix board compatible
    x86/pmem: Fix platform-device leak in error path
    ARM: bcm: Fix refcount leak in bcm_kona_smc_init
    meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init
    ARM: findbit: fix overflowing offset
  * selinux: Add boundary check in put_entry()
      security/selinux/ss/policydb.h
    PM: hibernate: defer device probing when resuming from hibernation
    arm64: dts: qcom: ipq8074: fix NAND node name
    ACPI: LPSS: Fix missing check in register_device_clock()
    ACPI: PM: save NVS memory for Lenovo G40-45
    ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks
    ARM: OMAP2+: display: Fix refcount leak bug
    ARM: dts: imx6ul: fix qspi node compatible
    ARM: dts: imx6ul: fix lcdif node compatible
    ARM: dts: imx6ul: change operating-points to uint32-matrix
    ARM: dts: imx6ul: add missing properties for sram
    ext2: Add more validity checks for inode counts
  * USB: HCD: Fix URB giveback issue in tasklet function
      drivers/usb/core/hcd.c
      include/linux/usb/hcd.h
  * arm64: fix oops in concurrently setting insn_emulation sysctls
      arch/arm64/kernel/armv8_deprecated.c
  * arm64: Do not forget syscall when starting a new thread.
      arch/arm64/include/asm/processor.h
    netfilter: nf_tables: fix null deref due to zeroed list head
    netfilter: nf_tables: do not allow SET_ID to refer to another table
    MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
    powerpc/powernv: Avoid crashing if rng is NULL
    powerpc/fsl-pci: Fix Class Code of PCIe Root Port
  * PCI: Add defines for normal and subtractive PCI bridges
      include/linux/pci_ids.h
    ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr()
    md-raid10: fix KASAN warning
    serial: mvebu-uart: uart2 error bits clearing
  * fuse: limit nsec
      fs/fuse/inode.c
    iio: light: isl29028: Fix the warning in isl29028_remove()
  * bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds()
      kernel/bpf/verifier.c
    drm/amdgpu: Check BO's requested pinning domains against its preferred_domains
    drm/nouveau: fix another off-by-one in nvbios_addr
    parisc: Fix device names in /proc/iomem
  * ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh()
      fs/overlayfs/export.c
  * usbnet: Fix linkwatch use-after-free on disconnect
      drivers/net/usb/usbnet.c
    fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters
  * thermal: sysfs: Fix cooling_device_stats_setup() error code path
      drivers/thermal/thermal_sysfs.c
  * fs: Add missing umask strip in vfs_tmpfile
      fs/namei.c
  * vfs: Check the truncate maximum size in inode_newsize_ok()
      fs/attr.c
    tty: vt: initialize unicode screen buffer
    ALSA: hda/cirrus - support for iMac 12,1 model
    ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model
    KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP
    KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks
    KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0
  * HID: wacom: Don't register pad_input for touch switch
      drivers/hid/wacom_sys.c
      drivers/hid/wacom_wac.c
  * add barriers to buffer_uptodate and set_buffer_uptodate
      include/linux/buffer_head.h
    wifi: mac80211_hwsim: use 32-bit skb cookie
    wifi: mac80211_hwsim: add back erroneously removed cast
    wifi: mac80211_hwsim: fix race condition in pending packet
    ALSA: bcd2000: Fix a UAF bug on the error path of probing
    x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments
  * Makefile: link with -z noexecstack --no-warn-rwx-segments
      Makefile

Bug: 251722136
Change-Id: I935d6876eac3ce17f7ca54c64b4ce94b9331e481
Signed-off-by: Lucas Wei <lucaswei@google.com>
2022-10-26 14:55:01 +08:00
Sean Christopherson
055afe675f KVM: Add infrastructure and macro to mark VM as bugged
commit 0b8f11737cffc1a406d1134b58687abc29d76b52 upstream

Signed-off-by: Sean Christopherson <sean.j.christopherson@intel.com>
Signed-off-by: Isaku Yamahata <isaku.yamahata@intel.com>
Reviewed-by: Paolo Bonzini <pbonzini@redhat.com>
Message-Id: <3a0998645c328bf0895f1290e61821b70f048549.1625186503.git.isaku.yamahata@intel.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
[SG: Adjusted context for kernel version 4.19]
Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-08-25 11:15:31 +02:00
Lucas Wei
a452d64169 Merge android-4.19-stable (4.19.239) into android-msm-pixel-4.19-lts
Merge 4.19.239 into android-4.19-stable
Linux 4.19.239
    i2c: pasemi: Wait for write xfers to finish
  * smp: Fix offline cpu check in flush_smp_call_function_queue()
      kernel/smp.c
    ARM: davinci: da850-evm: Avoid NULL pointer dereference
  * ipv6: fix panic when forwarding a pkt with no in6 dev
      net/ipv6/ip6_output.c
  * ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
      sound/core/pcm_misc.c
    ALSA: hda/realtek: Add quirk for Clevo PD50PNT
    gcc-plugins: latent_entropy: use /dev/urandom
    mm: kmemleak: take a full lowmem check in kmemleak_*_phys()
  * mm, page_alloc: fix build_zonerefs_node()
      mm/page_alloc.c
    drivers: net: slip: fix NPD bug in sl_tx_timeout()
    scsi: mvsas: Add PCI ID of RocketRaid 2640
    drm/amd/display: Fix allocate_mst_payload assert on resume
  * arm64: alternatives: mark patch_alternative() as `noinstr`
      arch/arm64/kernel/alternative.c
    gpu: ipu-v3: Fix dev_dbg frequency output
    ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs
  * net: micrel: fix KS8851_MLL Kconfig
      drivers/net/ethernet/micrel/Kconfig
    scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024
    scsi: target: tcmu: Fix possible page UAF
    Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer
    drm/amdkfd: Check for potential null return of kmalloc_array()
    drm/amd: Add USBC connector ID
    cifs: potential buffer overflow in handling symlinks
    nfc: nci: add flush_workqueue to prevent uaf
    testing/selftests/mqueue: Fix mq_perf_tests to free the allocated cpu set
  * sctp: Initialize daddr on peeled off socket
      net/sctp/socket.c
    net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link
    mlxsw: i2c: Fix initialization error flow
    gpiolib: acpi: use correct format characters
  * veth: Ensure eth header is in skb's linear part
      drivers/net/veth.c
  * net/sched: flower: fix parsing of ethertype following VLAN header
      include/net/flow_dissector.h
      net/core/flow_dissector.c
    memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe
  * ANDROID: GKI: fix crc issue with commit 6281beee5b ("block: don't merge across cgroup boundaries if blkcg is enabled")
      block/blk-merge.c
      include/linux/blk-cgroup.h
  * Revert "PCI: Reduce warnings on possible RW1C corruption"
      drivers/pci/access.c
      include/linux/pci.h
    Merge 4.19.238 into android-4.19-stable
Linux 4.19.238
    drm/amdkfd: Use drm_priv to pass VM from KFD to amdgpu
    drm/amdgpu: Check if fd really is an amdgpu fd.
  * xfrm: policy: match with both mark and mask on user interfaces
      include/net/xfrm.h
      net/key/af_key.c
      net/xfrm/xfrm_policy.c
      net/xfrm/xfrm_user.c
    selftests: cgroup: Test open-time cgroup namespace usage for migration checks
    selftests: cgroup: Test open-time credential usage for migration checks
    selftests: cgroup: Make cg_create() use 0755 for permission instead of 0644
  * cgroup: Use open-time cgroup namespace for process migration perm checks
      kernel/cgroup/cgroup-internal.h
      kernel/cgroup/cgroup.c
  * cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv
      kernel/cgroup/cgroup-internal.h
      kernel/cgroup/cgroup-v1.c
      kernel/cgroup/cgroup.c
  * cgroup: Use open-time credentials for process migraton perm checks
      kernel/cgroup/cgroup-v1.c
      kernel/cgroup/cgroup.c
  * mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning
      include/linux/mmzone.h
  * arm64: module: remove (NOLOAD) from linker script
      arch/arm64/kernel/module.lds
  * mm: don't skip swap entry even if zap_details specified
      mm/memory.c
    dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error"
    tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts
    tools build: Filter out options and warnings not supported by clang
  * irqchip/gic-v3: Fix GICR_CTLR.RWP polling
      drivers/irqchip/irq-gic-v3.c
    perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator
    ata: sata_dwc_460ex: Fix crash due to OOB write
  * arm64: patch_text: Fixup last cpu should be master
      arch/arm64/kernel/insn.c
    btrfs: fix qgroup reserve overflow the qgroup limit
    x86/speculation: Restore speculation related MSRs during S3 resume
    x86/pm: Save the MSR validity status at context setup
    mm/mempolicy: fix mpol_new leak in shared_policy_replace
  * mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)
      mm/mremap.c
    mmc: renesas_sdhi: don't overwrite TAP settings when HS400 tuning is complete
    Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning"
    drbd: Fix five use after free bugs in get_initial_state
    spi: bcm-qspi: fix MSPI only access with bcm_qspi_exec_mem_op()
    qede: confirm skb is allocated before using
    rxrpc: fix a race in rxrpc_exit_net()
    net: openvswitch: don't send internal clone attribute to the userspace.
    drm/imx: Fix memory leak in imx_pd_connector_get_modes
    net: stmmac: Fix unset max_speed difference between DT and non-DT platforms
    scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()
    Drivers: hv: vmbus: Fix potential crash on module unload
    drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()
  * KVM: arm64: Check arm64_get_bp_hardening_data() didn't return NULL
      arch/arm64/include/asm/kvm_mmu.h
  * mm: fix race between MADV_FREE reclaim and blkdev direct IO read
      mm/rmap.c
  * net: add missing SOF_TIMESTAMPING_OPT_ID support
      include/net/sock.h
      net/ipv4/raw.c
      net/ipv6/raw.c
      net/packet/af_packet.c
    parisc: Fix CPU affinity for Lasi, WAX and Dino chips
    jfs: prevent NULL deref in diFree
    virtio_console: eliminate anonymous module_init & module_exit
    serial: samsung_tty: do not unlock port->lock for uart_write_wakeup()
    NFS: swap-out must always use STABLE writes.
  * NFS: swap IO handling is slightly different for O_DIRECT IO
      include/linux/nfs_fs.h
    SUNRPC/call_alloc: async tasks mustn't block waiting for memory
  * clk: Enforce that disjoints limits are invalid
      drivers/clk/clk.c
    xen: delay xen_hvm_init_time_ops() if kdump is boot on vcpu>=32
    NFSv4: Protect the state recovery thread against direct reclaim
    w1: w1_therm: fixes w1_seq for ds28ea00 sensors
    minix: fix bug when opening a file with O_DIRECT
  * init/main.c: return 1 from handled __setup() functions
      init/main.c
  * Bluetooth: Fix use after free in hci_send_acl
      net/bluetooth/hci_event.c
    xtensa: fix DTC warning unit_address_format
    usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm
    scsi: libfc: Fix use after free in fc_exch_abts_resp()
    MIPS: fix fortify panic when copying asm exception handlers
    bnxt_en: Eliminate unintended link toggle during FW reset
    macvtap: advertise link netns via netlink
    net/smc: correct settings of RMB window update limit
    scsi: aha152x: Fix aha152x_setup() __setup handler return value
    scsi: pm8001: Fix pm8001_mpi_task_abort_resp()
    drm/amdkfd: make CRAT table missing message informational only
  * dm ioctl: prevent potential spectre v1 gadget
      drivers/md/dm-ioctl.c
  * ipv4: Invalidate neighbour for broadcast address upon address addition
      include/net/arp.h
      net/ipv4/arp.c
      net/ipv4/fib_frontend.c
    PCI: pciehp: Add Qualcomm quirk for Command Completed erratum
  * usb: ehci: add pci device support for Aspeed platforms
      drivers/usb/host/ehci-pci.c
    iommu/arm-smmu-v3: fix event handling soft lockup
    PCI: aardvark: Fix support for MSI interrupts
    powerpc: Set crashkernel offset to mid of RMA region
    power: supply: axp20x_battery: properly report current when discharging
    scsi: bfa: Replace snprintf() with sysfs_emit()
    scsi: mvsas: Replace snprintf() with sysfs_emit()
    powerpc: dts: t104xrdb: fix phy type for FMAN 4/5
  * ptp: replace snprintf with sysfs_emit
      drivers/ptp/ptp_sysfs.c
    drm/amd/amdgpu/amdgpu_cs: fix refcount leak of a dma_fence obj
    ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111
  * drm: Add orientation quirk for GPD Win Max
      drivers/gpu/drm/drm_panel_orientation_quirks.c
    KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs
    ARM: 9187/1: JIVE: fix return value of __setup handler
    riscv module: remove (NOLOAD)
    rtc: wm8350: Handle error for wm8350_register_irq
    ubifs: Rectify space amount budget for mkdir/tmpfile operations
    KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated
    openvswitch: Fixed nd target mask field in the flow dump.
    um: Fix uml_mconsole stop/go
    ARM: dts: spear13xx: Update SPI dma properties
    ARM: dts: spear1340: Update serial node properties
    ASoC: topology: Allow TLV control to be either read or write
    ubi: fastmap: Return error code if memory allocation fails in add_aeb()
  * bpf: Fix comment for helper bpf_current_task_under_cgroup()
      include/uapi/linux/bpf.h
  * mm/usercopy: return 1 from hardened_usercopy __setup() handler
      mm/usercopy.c
  * mm/memcontrol: return 1 from cgroup.memory __setup() handler
      mm/memcontrol.c
  * mm/mmap: return 1 from stack_guard_gap __setup() handler
      mm/mmap.c
    ACPI: CPPC: Avoid out of bounds access when parsing _CPC data
    ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl
  * pinctrl: pinconf-generic: Print arguments for bias-pull-*
      drivers/pinctrl/pinconf-generic.c
    gfs2: Make sure FITRIM minlen is rounded up to fs block size
    can: mcba_usb: properly check endpoint type
    can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path
    ubifs: rename_whiteout: correct old_dir size computing
    ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()
    ubifs: setflags: Make dirtied_ino_d 8 bytes aligned
    ubifs: Add missing iput if do_tmpfile() failed in rename whiteout
    ubifs: Fix deadlock in concurrent rename whiteout and inode writeback
    ubifs: rename_whiteout: Fix double free for whiteout_ui->data
    KVM: x86: fix sending PV IPI
    KVM: Prevent module exit until all VMs are freed
    scsi: qla2xxx: Use correct feature type field during RFF_ID processing
    scsi: qla2xxx: Reduce false trigger to login
    scsi: qla2xxx: Fix hang due to session stuck
    scsi: qla2xxx: Fix incorrect reporting of task management failure
    scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()
    scsi: qla2xxx: Check for firmware dump already collected
    scsi: qla2xxx: Fix warning for missing error code
    scsi: qla2xxx: Fix stuck session in gpdb
    powerpc: Fix build errors with newer binutils
    powerpc/lib/sstep: Fix build errors with newer binutils
    powerpc/lib/sstep: Fix 'sthcx' instruction
    mmc: host: Return an error when ->enable_sdio_irq() ops is missing
    media: hdpvr: initialize dev->worker at hdpvr_register_videodev
    media: Revert "media: em28xx: add missing em28xx_close_extension"
    video: fbdev: sm712fb: Fix crash in smtcfb_write()
    ARM: mmp: Fix failure to remove sram device
    ARM: tegra: tamonten: Fix I2C3 pad setting
    media: cx88-mpeg: clear interrupt status register before streaming video
  * ASoC: soc-core: skip zero num_dai component in searching dai name
      sound/soc/soc-core.c
    video: fbdev: udlfb: replace snprintf in show functions with sysfs_emit
    video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf()
    video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf()
    ARM: dts: bcm2837: Add the missing L1/L2 cache information
    ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960
    video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit
    video: fbdev: cirrusfb: check pixclock to avoid divide by zero
    video: fbdev: w100fb: Reset global state
    video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
    ntfs: add sanity check on allocation size
  * ext4: don't BUG if someone dirty pages without asking ext4 first
      fs/ext4/inode.c
    spi: tegra20: Use of_device_get_match_data()
  * PM: core: keep irq flags in device_pm_check_callbacks()
      drivers/base/power/main.c
    ACPI/APEI: Limit printable size of BERT table data
    Revert "Revert "block, bfq: honor already-setup queue merges""
    lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3
    ACPICA: Avoid walking the ACPI Namespace if it is not there
    bfq: fix use-after-free in bfq_dispatch_request
    irqchip/nvic: Release nvic_base upon failure
  * irqchip/qcom-pdc: Fix broken locking
      drivers/irqchip/qcom-pdc.c
    Fix incorrect type in assignment of ipv6 port for audit
  * loop: use sysfs_emit() in the sysfs xxx show()
      drivers/block/loop.c
    selinux: use correct type for context length
    lib/test: use after free in register_test_dev_kmod()
    NFSv4/pNFS: Fix another issue with a list iterator pointing to the head
    net/x25: Fix null-ptr-deref caused by x25_disconnect
    qlcnic: dcb: default to returning -EOPNOTSUPP
    net: phy: broadcom: Fix brcm_fet_config_init()
    xen: fix is_xen_pmu()
    clk: qcom: gcc-msm8994: Fix gpll4 width
  * netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options
      net/netfilter/nf_conntrack_proto_tcp.c
    jfs: fix divide error in dbNextAG
    kgdbts: fix return value of __setup handler
    kgdboc: fix return value of __setup handler
    tty: hvc: fix return value of __setup handler
    pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe
    pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe
    pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init
    NFS: remove unneeded check in decode_devicenotify_args()
    clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver
    clk: clps711x: Terminate clk_div_table with sentinel element
    clk: loongson1: Terminate clk_div_table with sentinel element
    clk: actions: Terminate clk_div_table with sentinel element
    remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region
  * clk: qcom: clk-rcg2: Update the frac table for pixel clock
      drivers/clk/qcom/clk-rcg2.c
    dma-debug: fix return value of __setup handlers
    iio: adc: Add check for devm_request_threaded_irq
    serial: 8250: Fix race condition in RTS-after-send handling
    serial: 8250_mid: Balance reference count for PCI DMA device
    clk: qcom: ipq8074: Use floor ops for SDCC1 clock
    staging:iio:adc:ad7280a: Fix handing of device address bit reversing.
    pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add()
    mxser: fix xmit_buf leak in activate when LSR == 0xff
    mfd: asic3: Add missing iounmap() on error asic3_mfd_probe
  * tcp: ensure PMTU updates are processed during fastopen
      net/ipv4/tcp_output.c
    selftests/bpf/test_lirc_mode2.sh: Exit with proper code
    i2c: mux: demux-pinctrl: do not deactivate a master that is not active
  * af_netlink: Fix shift out of bounds in group mask calculation
      net/netlink/af_netlink.c
    USB: storage: ums-realtek: fix error code in rts51x_read_mem()
    mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init
    MIPS: RB532: fix return value of __setup handler
    vxcan: enable local echo for sent CAN frames
    mfd: mc13xxx: Add check for mc13xxx_irq_request
    powerpc/sysdev: fix incorrect use to determine if list is empty
  * PCI: Reduce warnings on possible RW1C corruption
      drivers/pci/access.c
      include/linux/pci.h
    power: supply: wm8350-power: Add missing free in free_charger_irq
    power: supply: wm8350-power: Handle error for wm8350_register_irq
    i2c: xiic: Make bus names unique
    hv_balloon: rate-limit "Unhandled message" warning
    KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor()
    KVM: x86: Fix emulation in writing cr8
    powerpc/Makefile: Don't pass -mcpu=powerpc64 when building 32-bit
    drm/bridge: cdns-dsi: Make sure to to create proper aliases for dt
    power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return
    drm/tegra: Fix reference leak in tegra_dsi_ganged_probe
    ext2: correct max file size computing
    TOMOYO: fix __setup handlers return values
    scsi: pm8001: Fix abort all task initialization
    scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config()
    scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req()
    scsi: pm8001: Fix command initialization in pm80XX_send_read_log()
    dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS
    iwlwifi: Fix -EIO error code that is never returned
    HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports
    power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init
    ray_cs: Check ioremap return value
    power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe
    KVM: PPC: Fix vmx/vsx mixup in mmio emulation
    ath9k_htc: fix uninit value bugs
    drm/amd/display: Fix a NULL pointer dereference in amdgpu_dm_connector_add_common_modes()
  * drm/edid: Don't clear formats if using deep color
      drivers/gpu/drm/drm_edid.c
    mtd: onenand: Check for error irq
    Bluetooth: hci_serdev: call init_rwsem() before p->open()
    ath10k: fix memory overwrite of the WoWLAN wakeup packet pattern
    drm/bridge: Fix free wrong object in sii8620_init_rcp_input_dev
    mmc: davinci_mmc: Handle error for clk_enable
    ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe
    ASoC: imx-es8328: Fix error return code in imx_es8328_probe()
    ASoC: mxs: Fix error handling in mxs_sgtl5000_probe
    ASoC: dmaengine: do not use a NULL prepare_slave_config() callback
    video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of
    ASoC: fsi: Add check for clk_enable
    ASoC: wm8350: Handle error for wm8350_register_irq
    ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe
    media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED
    ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction
    memory: emif: check the pointer temp in get_device_details()
    memory: emif: Add check for setup_interrupts
    ASoC: atmel_ssc_dai: Handle errors for clk_enable
    ASoC: mxs-saif: Handle errors for clk_enable
  * printk: fix return value of printk.devkmsg __setup handler
      kernel/printk/printk.c
    arm64: dts: broadcom: Fix sata nodename
    arm64: dts: ns2: Fix spi-cpol and spi-cpha property
    ALSA: spi: Add check for clk_enable()
    ASoC: ti: davinci-i2s: Add check for clk_enable()
    ASoC: rt5663: check the return value of devm_kzalloc() in rt5663_parse_dp()
    media: usb: go7007: s2250-board: fix leak in probe()
    media: em28xx: initialize refcount before kref_get
    soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe
    ARM: dts: qcom: ipq4019: fix sleep clock
    video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name()
    video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()
    media: coda: Fix missing put_device() call in coda_get_vdoa_data
    perf/x86/intel/pt: Fix address filter config for 32-bit kernel
  * perf/core: Fix address filter parser for multiple filters
      kernel/events/core.c
  * sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa
      kernel/sched/debug.c
    clocksource: acpi_pm: fix return value of __setup handler
    hwmon: (pmbus) Add Vin unit off handling
    crypto: ccp - ccp_dmaengine_unregister release dma channels
    ACPI: APEI: fix return value of __setup handlers
  * clocksource/drivers/timer-of: Check return value of of_iomap in timer_of_base_init()
      drivers/clocksource/timer-of.c
  * crypto: vmx - add missing dependencies
      drivers/crypto/vmx/Kconfig
    hwrng: atmel - disable trng on failure path
    PM: suspend: fix return value of __setup handler
    PM: hibernate: fix __setup handler error handling
  * block: don't delete queue kobject before its children
      block/blk-sysfs.c
    hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING
    hwmon: (pmbus) Add mutex to regulator ops
    spi: pxa2xx-pci: Balance reference count for PCI DMA device
    selftests/x86: Add validity check and allow field splitting
    spi: tegra114: Add missing IRQ check in tegra_spi_probe
    crypto: mxs-dcp - Fix scatterlist processing
  * crypto: authenc - Fix sleep in atomic context in decrypt_tail
      crypto/authenc.c
    regulator: qcom_smd: fix for_each_child.cocci warnings
    PCI: pciehp: Clear cmd_busy bit in polling mode
    brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio
    brcmfmac: firmware: Allocate space for default boardrev in nvram
    media: davinci: vpif: fix unbalanced runtime PM get
    DEC: Limit PMAX memory probing to R3k systems
    lib/raid6/test: fix multiple definition linking error
    thermal: int340x: Increase bitmap size
    carl9170: fix missing bit-wise or operator for tx_params
    ARM: dts: exynos: add missing HDMI supplies on SMDK5420
    ARM: dts: exynos: add missing HDMI supplies on SMDK5250
    ARM: dts: exynos: fix UART3 pins configuration in Exynos5250
    ARM: dts: at91: sama5d2: Fix PMERRLOC resource size
    video: fbdev: atari: Atari 2 bpp (STe) palette bugfix
    video: fbdev: sm712fb: Fix crash in smtcfb_read()
  * drm/edid: check basic audio support on CEA extension block
      drivers/gpu/drm/drm_edid.c
  * block: don't merge across cgroup boundaries if blkcg is enabled
      block/blk-merge.c
      include/linux/blk-cgroup.h
    drivers: hamradio: 6pack: fix UAF bug caused by mod_timer()
    ACPI: properties: Consistently return -ENOENT if there are no more references
    powerpc/kvm: Fix kvm_use_magic_page
    drbd: fix potential silent data corruption
  * mm,hwpoison: unmap poisoned page before invalidation
      mm/memory.c
    ALSA: hda/realtek: Fix audio regression on Mi Notebook Pro 2020
    ALSA: cs4236: fix an incorrect NULL check on list iterator
  * Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads"
      drivers/input/input.c
    qed: validate and restrict untrusted VFs vlan promisc mode
    qed: display VF trust config
    scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands
    mempolicy: mbind_range() set_policy() after vma_merge()
  * mm: invalidate hwpoison page cache page in fault path
      mm/memory.c
  * mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node
      mm/page_alloc.c
    jffs2: fix memory leak in jffs2_scan_medium
    jffs2: fix memory leak in jffs2_do_mount_fs
    jffs2: fix use-after-free in jffs2_clear_xattr_subsystem
    can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path
    pinctrl: samsung: drop pin banks references on error paths
  * f2fs: fix to unlock page correctly in error path of is_alive()
      fs/f2fs/gc.c
  * NFSD: prevent integer overflow on 32 bit systems
      include/linux/sunrpc/xdr.h
    NFSD: prevent underflow in nfssvc_decode_writeargs()
    SUNRPC: avoid race between mod_timer() and del_timer_sync()
    Documentation: update stable tree link
    Documentation: add link to stable release candidate tree
  * ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE
      kernel/ptrace.c
    clk: uniphier: Fix fixed-rate initialization
  * iio: inkern: make a best effort on offset calculation
      drivers/iio/inkern.c
  * iio: inkern: apply consumer scale when no channel scale is available
      drivers/iio/inkern.c
  * iio: inkern: apply consumer scale on IIO_VAL_INT cases
      drivers/iio/inkern.c
    iio: afe: rescale: use s64 for temporary scale calculations
  * coresight: Fix TRCCONFIGR.QE sysfs interface
      drivers/hwtracing/coresight/coresight-etm4x-sysfs.c
  * xhci: make xhci_handshake timeout for xhci_reset() adjustable
      drivers/usb/host/xhci-hub.c
      drivers/usb/host/xhci-mem.c
      drivers/usb/host/xhci.c
      drivers/usb/host/xhci.h
    USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c
    virtio-blk: Use blk_validate_block_size() to validate block size
  * block: Add a helper to validate the block size
      include/linux/blkdev.h
    tpm: fix reference counting for struct tpm_chip
  * fuse: fix pipe buffer lifetime for direct_io
      fs/fuse/dev.c
      fs/fuse/file.c
      fs/fuse/fuse_i.h
  * af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register
      net/key/af_key.c
  * spi: Fix erroneous sgs value with min_t()
      drivers/spi/spi.c
    net:mcf8390: Use platform_get_irq() to get the interrupt
  * spi: Fix invalid sgs value
      drivers/spi/spi.c
    ethernet: sun: Free the coherent when failing in probing
    virtio_console: break out of buf poll on remove
  * xfrm: fix tunnel model fragmentation behavior
      net/ipv6/xfrm6_output.c
      net/xfrm/xfrm_interface.c
  * netdevice: add the case if dev is NULL
      include/linux/netdevice.h
  * USB: serial: simple: add Nokia phone driver
      drivers/usb/serial/Kconfig
    USB: serial: pl2303: add IBM device IDs
  * ANDROID: incremental-fs: limit mount stack depth
      fs/incfs/data_mgmt.h
      fs/incfs/vfs.c
  * UPSTREAM: binderfs: use __u32 for device numbers
      include/uapi/linux/android/binderfs.h
    Revert "ANDROID: dm-bow: Protect Ranges fetched and erased from the RB tree"
    Merge 4.19.237 into android-4.19-stable
Linux 4.19.237
    llc: only change llc->dev when bind() succeeds
    nds32: fix access_ok() checks in get/put_user
    mac80211: fix potential double free on mesh join
    crypto: qat - disable registration of algorithms
    ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU
    ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3
    ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board
    netfilter: nf_tables: initialize registers in nft_do_chain()
    drivers: net: xgene: Fix regression in CRC stripping
    ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec
    ALSA: cmipci: Restore aux vol on suspend/resume
  * ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB
      sound/usb/mixer_quirks.c
  * ALSA: pcm: Add stream lock during PCM reset ioctl operations
      sound/core/pcm_native.c
    ALSA: oss: Fix PCM OSS buffer allocation overflow
    ASoC: sti: Fix deadlock via snd_pcm_stop_xrun() call
    llc: fix netdevice reference leaks in llc_ui_bind()
    thermal: int340x: fix memory leak in int3400_notify()
    staging: fbtft: fb_st7789v: reset display before initialization
  * esp: Fix possible buffer overflow in ESP transformation
      include/net/esp.h
      include/net/sock.h
      net/core/sock.c
      net/ipv4/esp4.c
      net/ipv6/esp6.c
  * net: ipv6: fix skb_over_panic in __ip6_append_data
      net/ipv6/ip6_output.c
    nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION
    Merge 4.19.236 into android-4.19-stable
Linux 4.19.236
    perf symbols: Fix symbol size calculation condition
  * Input: aiptek - properly check endpoint type
      drivers/input/tablet/aiptek.c
  * usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
      drivers/usb/gadget/udc/core.c
  * usb: gadget: rndis: prevent integer overflow in rndis_set_response()
      drivers/usb/gadget/function/rndis.c
    net: dsa: Add missing of_node_put() in dsa_port_parse_of
  * net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit()
      include/linux/if_arp.h
    drm/panel: simple: Fix Innolux G070Y2-L01 BPP settings
    hv_netvsc: Add check for kvmalloc_array
    atm: eni: Add check for dma_map_single
  * net/packet: fix slab-out-of-bounds access in packet_recvmsg()
      net/packet/af_packet.c
    efi: fix return value of __setup handlers
    ocfs2: fix crash when initialize filecheck kobj fails
    crypto: qcom-rng - ensure buffer for generate is completely filled
  * arm64: Use the clearbhb instruction in mitigations
      arch/arm64/include/asm/assembler.h
      arch/arm64/include/asm/cpufeature.h
      arch/arm64/include/asm/sysreg.h
      arch/arm64/include/asm/vectors.h
      arch/arm64/kernel/cpu_errata.c
      arch/arm64/kernel/cpufeature.c
      arch/arm64/kernel/entry.S
  * arm64: add ID_AA64ISAR2_EL1 sys register
      arch/arm64/include/asm/cpu.h
      arch/arm64/include/asm/sysreg.h
      arch/arm64/kernel/cpufeature.c
      arch/arm64/kernel/cpuinfo.c
  * KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated
      arch/arm64/include/asm/kvm_host.h
  * arm64: Mitigate spectre style branch history side channels
      arch/arm64/Kconfig
      arch/arm64/include/asm/assembler.h
      arch/arm64/include/asm/cpufeature.h
      arch/arm64/include/asm/cputype.h
      arch/arm64/include/asm/sysreg.h
      arch/arm64/include/asm/vectors.h
      arch/arm64/kernel/cpu_errata.c
  * KVM: arm64: Add templates for BHB mitigation sequences
      arch/arm64/include/asm/cpucaps.h
      arch/arm64/include/asm/kvm_mmu.h
      arch/arm64/include/asm/mmu.h
      arch/arm64/kernel/cpu_errata.c
  * arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2
      arch/arm64/include/asm/cpufeature.h
      arch/arm64/kernel/cpu_errata.c
  * arm64: Add percpu vectors for EL1
      arch/arm64/include/asm/mmu.h
      arch/arm64/include/asm/vectors.h
      arch/arm64/kernel/cpufeature.c
      arch/arm64/kernel/entry.S
  * arm64: entry: Add macro for reading symbol addresses from the trampoline
      arch/arm64/kernel/entry.S
  * arm64: entry: Add vectors that have the bhb mitigation sequences
      arch/arm64/include/asm/assembler.h
      arch/arm64/include/asm/vectors.h
      arch/arm64/kernel/entry.S
      include/linux/arm-smccc.h
  * arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations
      arch/arm64/kernel/entry.S
  * arm64: entry: Allow the trampoline text to occupy multiple pages
      arch/arm64/include/asm/fixmap.h
      arch/arm64/include/asm/sections.h
      arch/arm64/kernel/entry.S
      arch/arm64/kernel/vmlinux.lds.S
      arch/arm64/mm/mmu.c
  * arm64: entry: Make the kpti trampoline's kpti sequence optional
      arch/arm64/kernel/entry.S
  * arm64: entry: Move trampoline macros out of ifdef'd section
      arch/arm64/kernel/entry.S
  * arm64: entry: Don't assume tramp_vectors is the start of the vectors
      arch/arm64/kernel/entry.S
  * arm64: entry: Allow tramp_alias to access symbols after the 4K boundary
      arch/arm64/kernel/entry.S
  * arm64: entry: Move the trampoline data page before the text page
      arch/arm64/include/asm/fixmap.h
      arch/arm64/kernel/entry.S
  * arm64: entry: Free up another register on kpti's tramp_exit path
      arch/arm64/kernel/entry.S
  * arm64: entry: Make the trampoline cleanup optional
      arch/arm64/kernel/entry.S
  * arm64: entry.S: Add ventry overflow sanity checks
      arch/arm64/kernel/entry.S
  * arm64: Add Cortex-X2 CPU part definition
      arch/arm64/include/asm/cputype.h
  * arm64: Add Neoverse-N2, Cortex-A710 CPU part definition
      arch/arm64/include/asm/cputype.h
  * arm64: Add part number for Arm Cortex-A77
      arch/arm64/include/asm/cputype.h
  * fs: sysfs_emit: Remove PAGE_SIZE alignment check
      fs/sysfs/file.c
  * mm: fix dereference a null pointer in migrate[_huge]_page_move_mapping()
      mm/migrate.c
  * cpuset: Fix unsafe lock order between cpuset lock and cpuslock
      kernel/cgroup/cpuset.c
    ia64: ensure proper NUMA distance and possible map initialization
  * sched/topology: Fix sched_domain_topology_level alloc in sched_init_numa()
      kernel/sched/topology.c
  * sched/topology: Make sched_init_numa() use a set for the deduplicating sort
      include/linux/topology.h
      kernel/sched/topology.c
    kselftest/vm: fix tests build with old libc
    sfc: extend the locking on mcdi->seqno
  * tcp: make tcp_read_sock() more robust
      net/ipv4/tcp.c
  * nl80211: Update bss channel on channel switch for P2P_CLIENT
      net/wireless/nl80211.c
    atm: firestream: check the return value of ioremap() in fs_init()
    can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when fully ready
  * ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE
      lib/Kconfig
    MIPS: smp: fill in sibling and core maps earlier
    ARM: dts: rockchip: fix a typo on rk3288 crypto-controller
    arm64: dts: rockchip: reorder rk3399 hdmi clocks
    arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity
  * xfrm: Fix xfrm migrate issues when address family changes
      net/xfrm/xfrm_state.c
  * xfrm: Check if_id in xfrm_migrate
      include/net/xfrm.h
      net/key/af_key.c
      net/xfrm/xfrm_policy.c
      net/xfrm/xfrm_state.c
      net/xfrm/xfrm_user.c
  * sctp: fix the processing for INIT_ACK chunk
      net/sctp/sm_statefuns.c
  * sctp: fix the processing for INIT chunk
      net/sctp/sm_statefuns.c
  * Revert "xfrm: state and policy should fail if XFRMA_IF_ID 0"
      net/xfrm/xfrm_user.c
    Merge 4.19.235 into android-4.19-stable
Linux 4.19.235
    btrfs: unlock newly allocated extent buffer after error
  * ext4: add check to prevent attempting to resize an fs with sparse_super2
      fs/ext4/resize.c
    ARM: fix Thumb2 regression with Spectre BHB
  * virtio: acknowledge all features before access
      include/linux/virtio_config.h
  * virtio: unexport virtio_finalize_features
      include/linux/virtio.h
    riscv: Fix auipc+jalr relocation range checks
    net: macb: Fix lost RX packet wakeup race in NAPI receive
    staging: gdm724x: fix use after free in gdm_lte_rx()
    ARM: Spectre-BHB: provide empty stub for non-config
    selftests/memfd: clean up mapping in mfd_fail_write
  * tracing: Ensure trace buffer is at least 4096 bytes large
      kernel/trace/trace.c
    Revert "xen-netback: Check for hotplug-status existence before watching"
    Revert "xen-netback: remove 'hotplug-status' once it has served its purpose"
  * net-sysfs: add check for netdevice being present to speed_show
      net/core/net-sysfs.c
  * sctp: fix kernel-infoleak for SCTP sockets
      net/sctp/diag.c
    net: phy: DP83822: clear MISR2 register to disable interrupts
    gianfar: ethtool: Fix refcount leak in gfar_get_ts_info
    gpio: ts4900: Do not set DAT and OE together
    NFC: port100: fix use-after-free in port100_send_complete
  * net/mlx5: Fix size field in bufferx_reg struct
      include/linux/mlx5/mlx5_ifc.h
    ax25: Fix NULL pointer dereference in ax25_kill_by_device
    net: ethernet: lpc_eth: Handle error for clk_enable
    net: ethernet: ti: cpts: Handle error for clk_enable
    ethernet: Fix error handling in xemaclite_of_probe
    qed: return status of qed_iov_get_link
    net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare()
    ANDROID: dm-bow: Protect Ranges fetched and erased from the RB tree

Bug: 229982346
Change-Id: I590f3a34c3672086a50ac0fba0b8514a4cc2016a
Signed-off-by: Lucas Wei <lucaswei@google.com>
2022-05-12 18:44:49 +08:00
David Matlack
c7e4e89455 KVM: Prevent module exit until all VMs are freed
commit 5f6de5cbebee925a612856fce6f9182bb3eee0db upstream.

Tie the lifetime the KVM module to the lifetime of each VM via
kvm.users_count. This way anything that grabs a reference to the VM via
kvm_get_kvm() cannot accidentally outlive the KVM module.

Prior to this commit, the lifetime of the KVM module was tied to the
lifetime of /dev/kvm file descriptors, VM file descriptors, and vCPU
file descriptors by their respective file_operations "owner" field.
This approach is insufficient because references grabbed via
kvm_get_kvm() do not prevent closing any of the aforementioned file
descriptors.

This fixes a long standing theoretical bug in KVM that at least affects
async page faults. kvm_setup_async_pf() grabs a reference via
kvm_get_kvm(), and drops it in an asynchronous work callback. Nothing
prevents the VM file descriptor from being closed and the KVM module
from being unloaded before this callback runs.

Fixes: af585b921e ("KVM: Halt vcpu if page it tries to access is swapped out")
Fixes: 3d3aab1b97 ("KVM: set owner of cpu and vm file operations")
Cc: stable@vger.kernel.org
Suggested-by: Ben Gardon <bgardon@google.com>
[ Based on a patch from Ben implemented for Google's kernel. ]
Signed-off-by: David Matlack <dmatlack@google.com>
Message-Id: <20220303183328.1499189-2-dmatlack@google.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-04-15 14:14:57 +02:00
Eva Huang
f2a5119774 Merge branch 'android-msm-pixel-4.19-sc-security' into android-msm-pixel-4.19-sc-qpr3
Jun 2022.1

Bug: 213600138
Change-Id: If53fd00f47cc76aae00aad7d2a9197fa9f2524c2
2022-04-08 16:43:08 +08:00
James Morse
95ec3dd6ec KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated
commit a5905d6af492ee6a4a2205f0d550b3f931b03d03 upstream.

KVM allows the guest to discover whether the ARCH_WORKAROUND SMCCC are
implemented, and to preserve that state during migration through its
firmware register interface.

Add the necessary boiler plate for SMCCC_ARCH_WORKAROUND_3.

Bug: 215557547
Reviewed-by: Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
Reviewed-by: Catalin Marinas <catalin.marinas@arm.com>
[ kvm code moved to virt/kvm/arm, removed fw regs ABI. Added 32bit stub ]
Signed-off-by: James Morse <james.morse@arm.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Change-Id: Id2b42a3db040dae66cf32bcbcfcbaf66f0dcf736
2022-03-30 16:07:15 +08:00
James Morse
5f051d32b0 KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated
commit a5905d6af492ee6a4a2205f0d550b3f931b03d03 upstream.

KVM allows the guest to discover whether the ARCH_WORKAROUND SMCCC are
implemented, and to preserve that state during migration through its
firmware register interface.

Add the necessary boiler plate for SMCCC_ARCH_WORKAROUND_3.

Reviewed-by: Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
Reviewed-by: Catalin Marinas <catalin.marinas@arm.com>
[ kvm code moved to virt/kvm/arm, removed fw regs ABI. Added 32bit stub ]
Signed-off-by: James Morse <james.morse@arm.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-03-23 09:10:43 +01:00
Wilson Sung
1f2a734bc2 Merge android-4.19-stable (4.19.215) into android-msm-pixel-4.19-sc-lts
Merge 4.19.215 into android-4.19-stable
Linux 4.19.215
  * sctp: add vtag check in sctp_sf_ootb
      net/sctp/sm_statefuns.c
  * sctp: add vtag check in sctp_sf_do_8_5_1_E_sa
      net/sctp/sm_statefuns.c
  * sctp: add vtag check in sctp_sf_violation
      net/sctp/sm_statefuns.c
  * sctp: fix the processing for COOKIE_ECHO chunk
      net/sctp/sm_statefuns.c
  * sctp: use init_tag from inithdr for ABORT chunk
      net/sctp/sm_statefuns.c
  * net: nxp: lpc_eth.c: avoid hang when bringing interface down
      drivers/net/ethernet/nxp/lpc_eth.c
  * net: ethernet: microchip: lan743x: Fix dma allocation failure by using dma_set_mask_and_coherent
      drivers/net/ethernet/microchip/lan743x_main.c
  * net: ethernet: microchip: lan743x: Fix driver crash when lan743x_pm_resume fails
      drivers/net/ethernet/microchip/lan743x_main.c
  * nios2: Make NIOS2_DTB_SOURCE_BOOL depend on !COMPILE_TEST
      arch/nios2/platform/Kconfig.platform
  * net: Prevent infinite while loop in skb_tx_hash()
      net/core/dev.c
  * net: batman-adv: fix error handling
      net/batman-adv/bridge_loop_avoidance.c
      net/batman-adv/main.c
      net/batman-adv/network-coding.c
      net/batman-adv/translation-table.c
  * regmap: Fix possible double-free in regcache_rbtree_exit()
      drivers/base/regmap/regcache-rbtree.c
  * arm64: dts: allwinner: h5: NanoPI Neo 2: Fix ethernet node
      arch/arm64/boot/dts/allwinner/sun50i-h5-nanopi-neo2.dts
  * RDMA/mlx5: Set user priority for DCT
      drivers/infiniband/hw/mlx5/qp.c
  * net: lan78xx: fix division by zero in send path
      drivers/net/usb/lan78xx.c
  * mmc: sdhci-esdhc-imx: clear the buffer_read_ready to reset standard tuning circuit
      drivers/mmc/host/sdhci-esdhc-imx.c
  * mmc: sdhci: Map more voltage level to SDHCI_POWER_330
      drivers/mmc/host/sdhci.c
  * mmc: dw_mmc: exynos: fix the finding clock sample value
      drivers/mmc/host/dw_mmc-exynos.c
  * mmc: cqhci: clear HALT state after CQE enable
      drivers/mmc/host/cqhci.c
  * mmc: vub300: fix control-message timeouts
      drivers/mmc/host/vub300.c
  * ipv6: make exception cache less predictible
      net/ipv6/route.c
  * ipv6: use siphash in rt6_exception_hash()
      net/ipv6/route.c
  * ipv4: use siphash instead of Jenkins in fnhe_hashfun()
      net/ipv4/route.c
  * Revert "net: mdiobus: Fix memory leak in __mdiobus_register"
      drivers/net/phy/mdio_bus.c
  * nfc: port100: fix using -ERRNO as command type mask
      drivers/nfc/port100.c
  * ata: sata_mv: Fix the error handling of mv_chip_id()
      drivers/ata/sata_mv.c
  * usbnet: fix error return code in usbnet_probe()
      drivers/net/usb/usbnet.c
  * usbnet: sanity check for maxpacket
      drivers/net/usb/usbnet.c
  * ARM: 8819/1: Remove '-p' from LDFLAGS
      arch/arm/Makefile
      arch/arm/boot/bootp/Makefile
      arch/arm/boot/compressed/Makefile
  * arm64: Avoid premature usercopy failure
      arch/arm64/lib/copy_from_user.S
      arch/arm64/lib/copy_in_user.S
      arch/arm64/lib/copy_to_user.S
  * powerpc/bpf: Fix BPF_MOD when imm == 1
      arch/powerpc/net/bpf_jit_comp64.c
  * ARM: 9141/1: only warn about XIP address when not compile testing
      arch/arm/kernel/vmlinux-xip.lds.S
  * ARM: 9139/1: kprobes: fix arch_init_kprobes() prototype
      arch/arm/probes/kprobes/core.c
  * ARM: 9134/1: remove duplicate memcpy() definition
      arch/arm/boot/compressed/decompress.c
  * ARM: 9133/1: mm: proc-macros: ensure *_tlb_fns are 4B aligned
      arch/arm/mm/proc-macros.S
    Merge 4.19.214 into android-4.19-stable
  * ANDROID: Incremental fs: Fix dentry get/put imbalance on vfs_mkdir() failure
      fs/incfs/vfs.c
Linux 4.19.214
  * ARM: 9122/1: select HAVE_FUTEX_CMPXCHG
      arch/arm/Kconfig
  * tracing: Have all levels of checks prevent recursion
      kernel/trace/ftrace.c
      kernel/trace/trace.h
      kernel/trace/trace_functions.c
  * net: mdiobus: Fix memory leak in __mdiobus_register
      drivers/net/phy/mdio_bus.c
  * scsi: core: Fix shost->cmd_per_lun calculation in scsi_add_host_with_dma()
      drivers/scsi/hosts.c
  * ALSA: hda: avoid write to STATESTS if controller is in reset
      sound/hda/hdac_controller.c
  * platform/x86: intel_scu_ipc: Update timeout value in comment
      drivers/platform/x86/intel_scu_ipc.c
  * isdn: mISDN: Fix sleeping function called from invalid context
      drivers/isdn/hardware/mISDN/netjet.c
  * ARM: dts: spear3xx: Fix gmac node
      arch/arm/boot/dts/spear3xx.dtsi
  * net: stmmac: add support for dwmac 3.40a
      drivers/net/ethernet/stmicro/stmmac/dwmac-generic.c
      drivers/net/ethernet/stmicro/stmmac/stmmac_platform.c
  * btrfs: deal with errors when checking if a dir entry exists during log replay
      fs/btrfs/tree-log.c
  * gcc-plugins/structleak: add makefile var for disabling structleak
      scripts/Makefile.gcc-plugins
  * netfilter: Kconfig: use 'default y' instead of 'm' for bool config option
      net/netfilter/Kconfig
  * isdn: cpai: check ctr->cnr to avoid array index out of bound
      drivers/isdn/capi/kcapi.c
  * nfc: nci: fix the UAF of rf_conn_info object
      net/nfc/nci/rsp.c
  * mm, slub: fix mismatch between reconstructed freelist depth and cnt
      mm/slub.c
  * ASoC: DAPM: Fix missing kctl change notifications
      sound/soc/soc-dapm.c
  * ALSA: hda/realtek: Add quirk for Clevo PC50HS
      sound/pci/hda/patch_realtek.c
  * ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset
      sound/usb/quirks-table.h
  * vfs: check fd has read access in kernel_read_file_from_fd()
      fs/exec.c
  * elfcore: correct reference to CONFIG_UML
      include/linux/elfcore.h
  * ocfs2: mount fails with buffer overflow in strlen
      fs/ocfs2/super.c
  * ocfs2: fix data corruption after conversion from inline format
      fs/ocfs2/alloc.c
  * can: peak_pci: peak_pci_remove(): fix UAF
      drivers/net/can/sja1000/peak_pci.c
  * can: peak_usb: pcan_usb_fd_decode_status(): fix back to ERROR_ACTIVE state notification
      drivers/net/can/usb/peak_usb/pcan_usb_fd.c
  * can: rcar_can: fix suspend/resume
      drivers/net/can/rcar/rcar_can.c
  * net: hns3: disable sriov before unload hclge layer
      drivers/net/ethernet/hisilicon/hns3/hnae3.c
      drivers/net/ethernet/hisilicon/hns3/hnae3.h
      drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_main.c
  * net: hns3: add limit ets dwrr bandwidth cannot be 0
      drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c
  * NIOS2: irqflags: rename a redefined register name
      arch/nios2/include/asm/irqflags.h
      arch/nios2/include/asm/registers.h
  * lan78xx: select CRC32
      drivers/net/usb/Kconfig
  * netfilter: ipvs: make global sysctl readonly in non-init netns
      net/netfilter/ipvs/ip_vs_ctl.c
  * ASoC: wm8960: Fix clock configuration on slave mode
      sound/soc/codecs/wm8960.c
  * dma-debug: fix sg checks in debug_dma_map_sg()
      kernel/dma/debug.c
  * NFSD: Keep existing listeners on portlist error
      fs/nfsd/nfsctl.c
  * xtensa: xtfpga: Try software restart before simulating CPU reset
      arch/xtensa/platforms/xtfpga/setup.c
  * xtensa: xtfpga: use CONFIG_USE_OF instead of CONFIG_OF
      arch/xtensa/platforms/xtfpga/setup.c
  * ARM: dts: at91: sama5d2_som1_ek: disable ISC node by default
      arch/arm/boot/dts/at91-sama5d27_som1_ek.dts
    Merge 4.19.213 into android-4.19-stable
  * UPSTREAM: crypto: arm/blake2s - fix for big endian
      arch/arm/crypto/blake2s-core.S
  * ANDROID: gki_defconfig: enable BLAKE2b support
      arch/arm64/configs/gki_defconfig
      arch/x86/configs/gki_defconfig
  * BACKPORT: crypto: arm/blake2b - add NEON-accelerated BLAKE2b
      arch/arm/crypto/Kconfig
      arch/arm/crypto/Makefile
      arch/arm/crypto/blake2b-neon-core.S
      arch/arm/crypto/blake2b-neon-glue.c
  * BACKPORT: crypto: blake2b - update file comment
      crypto/blake2b_generic.c
  * BACKPORT: crypto: blake2b - sync with blake2s implementation
      crypto/blake2b_generic.c
      include/crypto/blake2b.h
      include/crypto/internal/blake2b.h
  * UPSTREAM: wireguard: Kconfig: select CRYPTO_BLAKE2S_ARM
      drivers/net/Kconfig
  * UPSTREAM: crypto: arm/blake2s - add ARM scalar optimized BLAKE2s
      arch/arm/crypto/Kconfig
      arch/arm/crypto/Makefile
      arch/arm/crypto/blake2s-core.S
      arch/arm/crypto/blake2s-glue.c
  * UPSTREAM: crypto: blake2s - include <linux/bug.h> instead of <asm/bug.h>
      include/crypto/blake2s.h
  * UPSTREAM: crypto: blake2s - adjust include guard naming
      include/crypto/blake2s.h
      include/crypto/internal/blake2s.h
  * UPSTREAM: crypto: blake2s - add comment for blake2s_state fields
      include/crypto/blake2s.h
  * UPSTREAM: crypto: blake2s - optimize blake2s initialization
      include/crypto/blake2s.h
      include/crypto/internal/blake2s.h
  * BACKPORT: crypto: blake2s - share the "shash" API boilerplate code
      arch/x86/crypto/blake2s-glue.c
      crypto/blake2s_generic.c
      include/crypto/internal/blake2s.h
  * UPSTREAM: crypto: blake2s - move update and final logic to internal/blake2s.h
      include/crypto/internal/blake2s.h
      lib/crypto/blake2s.c
  * UPSTREAM: crypto: blake2s - remove unneeded includes
      crypto/blake2s_generic.c
  * UPSTREAM: crypto: x86/blake2s - define shash_alg structs using macros
      arch/x86/crypto/blake2s-glue.c
  * UPSTREAM: crypto: blake2s - define shash_alg structs using macros
      crypto/blake2s_generic.c
  * UPSTREAM: crypto: lib/blake2s - Move selftest prototype into header file
      include/crypto/internal/blake2s.h
      lib/crypto/blake2s-selftest.c
      lib/crypto/blake2s.c
  * UPSTREAM: crypto: blake2b - Fix clang optimization for ARMv7-M
      crypto/blake2b_generic.c
  * UPSTREAM: crypto: blake2b - rename tfm context and _setkey callback
      crypto/blake2b_generic.c
  * UPSTREAM: crypto: blake2b - merge _update to api callback
      crypto/blake2b_generic.c
  * UPSTREAM: crypto: blake2b - open code set last block helper
      crypto/blake2b_generic.c
  * UPSTREAM: crypto: blake2b - delete unused structs or members
      crypto/blake2b_generic.c
  * UPSTREAM: crypto: blake2b - simplify key init
      crypto/blake2b_generic.c
  * UPSTREAM: crypto: blake2b - merge blake2 init to api callback
      crypto/blake2b_generic.c
  * UPSTREAM: crypto: blake2b - merge _final implementation to callback
      crypto/blake2b_generic.c
  * BACKPORT: crypto: testmgr - add test vectors for blake2b
      crypto/testmgr.c
      crypto/testmgr.h
  * BACKPORT: crypto: blake2b - add blake2b generic implementation
      crypto/Kconfig
      crypto/Makefile
      crypto/blake2b_generic.c
Linux 4.19.213
  * r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256
      drivers/net/usb/Kconfig
  * qed: Fix missing error code in qed_slowpath_start()
      drivers/net/ethernet/qlogic/qed/qed_main.c
  * mqprio: Correct stats in mqprio_dump_class_stats().
      net/sched/sch_mqprio.c
  * acpi/arm64: fix next_platform_timer() section mismatch error
      drivers/acpi/arm64/gtdt.c
  * drm/msm/dsi: fix off by one in dsi_bus_clk_enable error handling
      drivers/gpu/drm/msm/dsi/dsi_host.c
  * drm/msm/dsi: Fix an error code in msm_dsi_modeset_init()
      drivers/gpu/drm/msm/dsi/dsi.c
  * drm/msm: Fix null pointer dereference on pointer edp
      drivers/gpu/drm/msm/edp/edp_ctrl.c
  * platform/mellanox: mlxreg-io: Fix argument base in kstrtou32() call
      drivers/platform/mellanox/mlxreg-io.c
  * pata_legacy: fix a couple uninitialized variable bugs
      drivers/ata/pata_legacy.c
  * NFC: digital: fix possible memory leak in digital_in_send_sdd_req()
      net/nfc/digital_technology.c
  * NFC: digital: fix possible memory leak in digital_tg_listen_mdaa()
      net/nfc/digital_core.c
  * nfc: fix error handling of nfc_proto_register()
      net/nfc/af_nfc.c
  * ethernet: s2io: fix setting mac address during resume
      drivers/net/ethernet/neterion/s2io.c
  * net: encx24j600: check error in devm_regmap_init_encx24j600
      drivers/net/ethernet/microchip/encx24j600-regmap.c
      drivers/net/ethernet/microchip/encx24j600.c
      drivers/net/ethernet/microchip/encx24j600_hw.h
  * net: korina: select CRC32
      drivers/net/ethernet/Kconfig
  * net: arc: select CRC32
      drivers/net/ethernet/arc/Kconfig
  * sctp: account stream padding length for reconf chunk
      net/sctp/sm_make_chunk.c
  * iio: dac: ti-dac5571: fix an error code in probe()
      drivers/iio/dac/ti-dac5571.c
  * iio: ssp_sensors: fix error code in ssp_print_mcu_debug()
      drivers/iio/common/ssp_sensors/ssp_spi.c
  * iio: ssp_sensors: add more range checking in ssp_parse_dataframe()
      drivers/iio/common/ssp_sensors/ssp_spi.c
  * iio: light: opt3001: Fixed timeout error when 0 lux
      drivers/iio/light/opt3001.c
  * iio: adc128s052: Fix the error handling path of 'adc128_probe()'
      drivers/iio/adc/ti-adc128s052.c
  * iio: adc: aspeed: set driver data when adc probe.
      drivers/iio/adc/aspeed_adc.c
  * x86/Kconfig: Do not enable AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT automatically
      arch/x86/Kconfig
  * nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells
      drivers/nvmem/core.c
  * virtio: write back F_VERSION_1 before validate
      drivers/virtio/virtio.c
  * USB: serial: option: add prod. id for Quectel EG91
      drivers/usb/serial/option.c
  * USB: serial: option: add Telit LE910Cx composition 0x1204
      drivers/usb/serial/option.c
  * USB: serial: option: add Quectel EC200S-CN module support
      drivers/usb/serial/option.c
  * USB: serial: qcserial: add EM9191 QDL support
      drivers/usb/serial/qcserial.c
  * Input: xpad - add support for another USB ID of Nacon GC-100
      drivers/input/joystick/xpad.c
  * usb: musb: dsps: Fix the probe error path
      drivers/usb/musb/musb_dsps.c
  * efi: Change down_interruptible() in virt_efi_reset_system() to down_trylock()
      drivers/firmware/efi/runtime-wrappers.c
  * efi/cper: use stack buffer for error record decoding
      drivers/firmware/efi/cper.c
  * cb710: avoid NULL pointer subtraction
      drivers/misc/cb710/sgbuf2.c
  * xhci: Enable trust tx length quirk for Fresco FL11 USB controller
      drivers/usb/host/xhci-pci.c
  * xhci: Fix command ring pointer corruption while aborting a command
      drivers/usb/host/xhci-ring.c
  * xhci: guard accesses to ep_state in xhci_endpoint_reset()
      drivers/usb/host/xhci.c
  * mei: me: add Ice Lake-N device id.
      drivers/misc/mei/hw-me-regs.h
      drivers/misc/mei/pci-me.c
  * x86/resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails
      arch/x86/kernel/cpu/intel_rdt.c
  * btrfs: check for error when looking up inode during dir entry replay
      fs/btrfs/tree-log.c
  * btrfs: deal with errors when adding inode reference during log replay
      fs/btrfs/tree-log.c
  * btrfs: deal with errors when replaying dir entry during log replay
      fs/btrfs/tree-log.c
  * s390: fix strrchr() implementation
      arch/s390/lib/string.c
  * nds32/ftrace: Fix Error: invalid operands (*UND* and *UND* sections) for `^'
      scripts/recordmcount.pl
  * ALSA: hda/realtek - ALC236 headset MIC recording issue
      sound/pci/hda/patch_realtek.c
  * ALSA: hda/realtek: Add quirk for Clevo X170KM-G
      sound/pci/hda/patch_realtek.c
  * ALSA: hda/realtek: Complete partial device name to avoid ambiguity
      sound/pci/hda/patch_realtek.c
  * ALSA: seq: Fix a potential UAF by wrong private_free call order
      sound/core/seq_device.c
    Merge 4.19.212 into android-4.19-stable
Linux 4.19.212
  * sched: Always inline is_percpu_thread()
      include/linux/sched.h
  * perf/x86: Reset destroy callback on event init failure
      arch/x86/events/core.c
  * scsi: virtio_scsi: Fix spelling mistake "Unsupport" -> "Unsupported"
      drivers/scsi/virtio_scsi.c
  * scsi: ses: Fix unsigned comparison with less than zero
      drivers/scsi/ses.c
  * net: sun: SUNVNET_COMMON should depend on INET
      drivers/net/ethernet/sun/Kconfig
  * mac80211: check return value of rhashtable_init
      net/mac80211/mesh_pathtbl.c
  * net: prevent user from passing illegal stab size
      include/net/pkt_sched.h
      net/sched/sch_api.c
  * m68k: Handle arrivals of multiple signals correctly
      arch/m68k/kernel/signal.c
  * mac80211: Drop frames from invalid MAC address in ad-hoc mode
      net/mac80211/rx.c
  * netfilter: ip6_tables: zero-initialize fragment offset
      net/ipv6/netfilter/ip6_tables.c
  * HID: apple: Fix logical maximum and usage maximum of Magic Keyboard JIS
      drivers/hid/hid-apple.c
  * net: phy: bcm7xxx: Fixed indirect MMD operations
      drivers/net/phy/bcm7xxx.c
    Merge 4.19.211 into android-4.19-stable
  * Revert "lib/timerqueue: Rely on rbtree semantics for next timer"
      include/linux/timerqueue.h
      lib/timerqueue.c
    Merge 4.19.210 into android-4.19-stable
Linux 4.19.211
  * x86/Kconfig: Correct reference to MWINCHIP3D
      arch/x86/Kconfig
  * i2c: acpi: fix resource leak in reconfiguration device addition
      drivers/i2c/i2c-core-acpi.c
  * i40e: Fix freeing of uninitialized misc IRQ vector
      drivers/net/ethernet/intel/i40e/i40e_main.c
  * i40e: fix endless loop under rtnl
      drivers/net/ethernet/intel/i40e/i40e_main.c
  * rtnetlink: fix if_nlmsg_stats_size() under estimation
      net/core/rtnetlink.c
  * drm/nouveau/debugfs: fix file release memory leak
      drivers/gpu/drm/nouveau/nouveau_debugfs.c
  * netlink: annotate data races around nlk->bound
      net/netlink/af_netlink.c
  * net: sfp: Fix typo in state machine debug string
      drivers/net/phy/sfp.c
  * net: bridge: use nla_total_size_64bit() in br_get_linkxstats_size()
      net/bridge/br_netlink.c
  * ARM: imx6: disable the GIC CPU interface before calling stby-poweroff sequence
      arch/arm/mach-imx/pm-imx6.c
  * ptp_pch: Load module automatically if ID matches
      drivers/ptp/ptp_pch.c
  * powerpc/fsl/dts: Fix phy-connection-type for fm1mac3
      arch/powerpc/boot/dts/fsl/t1023rdb.dts
  * net_sched: fix NULL deref in fifo_set_limit()
      net/sched/sch_fifo.c
  * phy: mdio: fix memory leak
      drivers/net/phy/mdio_bus.c
  * bpf: Fix integer overflow in prealloc_elems_and_freelist()
      kernel/bpf/stackmap.c
  * bpf, arm: Fix register clobbering in div/mod implementation
      arch/arm/net/bpf_jit_32.c
  * xtensa: call irqchip_init only when CONFIG_USE_OF is selected
      arch/xtensa/kernel/irq.c
  * bpf, mips: Validate conditional branch offsets
      arch/mips/net/bpf_jit.c
  * ARM: dts: qcom: apq8064: use compatible which contains chipid
      arch/arm/boot/dts/qcom-apq8064.dtsi
  * ARM: dts: omap3430-sdp: Fix NAND device node
      arch/arm/boot/dts/omap3430-sdp.dts
  * xen/balloon: fix cancelled balloon action
      drivers/xen/balloon.c
  * nfsd4: Handle the NFSv4 READDIR 'dircount' hint being zero
      fs/nfsd/nfs4xdr.c
  * ovl: fix missing negative dentry check in ovl_rename()
      fs/overlayfs/dir.c
  * xen/privcmd: fix error handling in mmap-resource processing
      drivers/xen/privcmd.c
  * USB: cdc-acm: fix break reporting
      drivers/usb/class/cdc-acm.c
  * USB: cdc-acm: fix racy tty buffer accesses
      drivers/usb/class/cdc-acm.c
  * Partially revert "usb: Kconfig: using select for USB_COMMON dependency"
      drivers/usb/Kconfig
  * ANDROID: Different fix for KABI breakage in 4.19.209 in struct sock
      include/net/sock.h
  * ANDROID: GKI: update .xml file for struct sock change
      android/abi_gki_aarch64.xml
Linux 4.19.210
  * lib/timerqueue: Rely on rbtree semantics for next timer
      include/linux/timerqueue.h
      lib/timerqueue.c
  * libata: Add ATA_HORKAGE_NO_NCQ_ON_ATI for Samsung 860 and 870 SSD.
      drivers/ata/libata-core.c
      include/linux/libata.h
  * tools/vm/page-types: remove dependency on opt_file for idle page tracking
      tools/vm/page-types.c
  * scsi: ses: Retry failed Send/Receive Diagnostic commands
      drivers/scsi/ses.c
  * selftests: be sure to make khdr before other targets
      tools/testing/selftests/lib.mk
  * usb: dwc2: check return value after calling platform_get_resource()
      drivers/usb/dwc2/hcd.c
  * usb: testusb: Fix for showing the connection speed
      tools/usb/testusb.c
  * scsi: sd: Free scsi_disk device via put_device()
      drivers/scsi/sd.c
  * ext2: fix sleeping in atomic bugs on error
      fs/ext2/balloc.c
  * sparc64: fix pci_iounmap() when CONFIG_PCI is not set
      arch/sparc/lib/iomap.c
  * xen-netback: correct success/error reporting for the SKB-with-fraglist case
      drivers/net/xen-netback/netback.c
  * net: mdio: introduce a shutdown method to mdio device drivers
      drivers/net/phy/mdio_device.c
      include/linux/mdio.h
  * ANDROID: Fix up KABI breakage in 4.19.209 in struct sock
      include/net/sock.h
    Merge 4.19.209 into android-4.19-stable
  * FROMLIST: dm-verity: skip verity_handle_error on I/O errors
      drivers/md/dm-verity-target.c
Linux 4.19.209
  * cred: allow get_cred() and put_cred() to be given NULL.
      include/linux/cred.h
  * HID: usbhid: free raw_report buffers in usbhid_stop
      drivers/hid/usbhid/hid-core.c
  * netfilter: ipset: Fix oversized kvmalloc() calls
      net/netfilter/ipset/ip_set_hash_gen.h
  * HID: betop: fix slab-out-of-bounds Write in betop_probe
      drivers/hid/hid-betopff.c
  * crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
      drivers/crypto/ccp/ccp-ops.c
  * usb: hso: remove the bailout parameter
      drivers/net/usb/hso.c
  * usb: hso: fix error handling code of hso_create_net_device
      drivers/net/usb/hso.c
  * hso: fix bailout in error case of probe
      drivers/net/usb/hso.c
  * ARM: 9098/1: ftrace: MODULE_PLT: Fix build problem without DYNAMIC_FTRACE
      arch/arm/kernel/module-plts.c
  * ARM: 9079/1: ftrace: Add MODULE_PLTS support
      arch/arm/include/asm/ftrace.h
      arch/arm/include/asm/module.h
      arch/arm/kernel/ftrace.c
      arch/arm/kernel/module-plts.c
  * ARM: 9078/1: Add warn suppress parameter to arm_gen_branch_link()
      arch/arm/include/asm/insn.h
      arch/arm/kernel/ftrace.c
      arch/arm/kernel/insn.c
  * ARM: 9077/1: PLT: Move struct plt_entries definition to header
      arch/arm/include/asm/module.h
      arch/arm/kernel/module-plts.c
  * EDAC/synopsys: Fix wrong value type assignment for edac_mode
      drivers/edac/synopsys_edac.c
  * net: udp: annotate data race around udp_sk(sk)->corkflag
      net/ipv4/udp.c
      net/ipv6/udp.c
  * ext4: fix potential infinite loop in ext4_dx_readdir()
      fs/ext4/dir.c
  * ipack: ipoctal: fix module reference leak
      drivers/ipack/devices/ipoctal.c
  * ipack: ipoctal: fix missing allocation-failure check
      drivers/ipack/devices/ipoctal.c
  * ipack: ipoctal: fix tty-registration error handling
      drivers/ipack/devices/ipoctal.c
  * ipack: ipoctal: fix tty registration race
      drivers/ipack/devices/ipoctal.c
  * ipack: ipoctal: fix stack information leak
      drivers/ipack/devices/ipoctal.c
  * elf: don't use MAP_FIXED_NOREPLACE for elf interpreter mappings
      fs/binfmt_elf.c
  * af_unix: fix races in sk_peer_pid and sk_peer_cred accesses
      include/net/sock.h
      net/core/sock.c
      net/unix/af_unix.c
  * scsi: csiostor: Add module softdep on cxgb4
      drivers/scsi/csiostor/csio_init.c
  * Revert "block, bfq: honor already-setup queue merges"
      block/bfq-iosched.c
  * e100: fix buffer overrun in e100_get_regs
      drivers/net/ethernet/intel/e100.c
  * e100: fix length calculation in e100_get_regs_len
      drivers/net/ethernet/intel/e100.c
  * hwmon: (tmp421) fix rounding for negative values
      drivers/hwmon/tmp421.c
  * hwmon: (tmp421) report /PVLD condition as fault
      drivers/hwmon/tmp421.c
  * hwmon: (tmp421) Replace S_<PERMS> with octal values
      drivers/hwmon/tmp421.c
  * sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb
      net/sctp/input.c
  * mac80211: limit injected vht mcs/nss in ieee80211_parse_tx_radiotap
      net/mac80211/tx.c
  * mac80211: Fix ieee80211_amsdu_aggregate frag_tail bug
      net/mac80211/tx.c
  * hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs
      drivers/hwmon/mlxreg-fan.c
  * ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
      net/netfilter/ipvs/ip_vs_conn.c
  * drm/amd/display: Pass PCI deviceid into DC
      drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c
  * x86/kvmclock: Move this_cpu_pvti into kvmclock.h
      arch/x86/include/asm/kvmclock.h
      arch/x86/kernel/kvmclock.c
  * mac80211: fix use-after-free in CCMP/GCMP RX
      net/mac80211/wpa.c
  * cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
      drivers/cpufreq/cpufreq_governor_attr_set.c
  * cpufreq: schedutil: Use kobject release() method to free sugov_tunables
      kernel/sched/cpufreq_schedutil.c
  * tty: Fix out-of-bound vmalloc access in imageblit
      drivers/tty/vt/vt.c
  * qnx4: work around gcc false positive warning bug
      fs/qnx4/dir.c
  * xen/balloon: fix balloon kthread freezing
      drivers/xen/balloon.c
  * tcp: adjust rto_base in retransmits_timed_out()
      net/ipv4/tcp_timer.c
  * tcp: create a helper to model exponential backoff
      net/ipv4/tcp_timer.c
  * tcp: always set retrans_stamp on recovery
      net/ipv4/tcp_output.c
      net/ipv4/tcp_timer.c
  * tcp: address problems caused by EDT misshaps
      net/ipv4/tcp_input.c
      net/ipv4/tcp_timer.c
  * PCI: aardvark: Fix checking for PIO status
      drivers/pci/controller/pci-aardvark.c
  * arm64: dts: marvell: armada-37xx: Extend PCIe MEM space
      arch/arm64/boot/dts/marvell/armada-37xx.dtsi
  * erofs: fix up erofs_lookup tracepoint
      drivers/staging/erofs/include/trace/events/erofs.h
  * spi: Fix tegra20 build with CONFIG_PM=n
      drivers/spi/spi-tegra20-slink.c
  * net: 6pack: Fix tx timeout and slot time
      drivers/net/hamradio/6pack.c
  * alpha: Declare virt_to_phys and virt_to_bus parameter as pointer to volatile
      arch/alpha/include/asm/io.h
  * arm64: Mark __stack_chk_guard as __ro_after_init
      arch/arm64/kernel/process.c
  * parisc: Use absolute_pointer() to define PAGE0
      arch/parisc/include/asm/page.h
  * qnx4: avoid stringop-overread errors
      fs/qnx4/dir.c
  * sparc: avoid stringop-overread errors
      arch/sparc/kernel/mdesc.c
  * net: i825xx: Use absolute_pointer for memcpy from fixed memory location
      drivers/net/ethernet/i825xx/82596.c
  * compiler.h: Introduce absolute_pointer macro
      include/linux/compiler.h
  * nvme-multipath: fix ANA state updates when a namespace is not present
      drivers/nvme/host/multipath.c
  * xen/balloon: use a kernel thread instead a workqueue
      drivers/xen/balloon.c
  * m68k: Double cast io functions to unsigned long
      arch/m68k/include/asm/raw_io.h
  * net: stmmac: allow CSR clock of 300MHz
      drivers/net/ethernet/stmicro/stmmac/stmmac_main.c
  * net: macb: fix use after free on rmmod
      drivers/net/ethernet/cadence/macb_pci.c
  * blktrace: Fix uaf in blk_trace access after removing by sysfs
      kernel/trace/blktrace.c
  * md: fix a lock order reversal in md_alloc
      drivers/md/md.c
  * irqchip/gic-v3-its: Fix potential VPE leak on error
      drivers/irqchip/irq-gic-v3-its.c
  * irqchip/goldfish-pic: Select GENERIC_IRQ_CHIP to fix build
      drivers/irqchip/Kconfig
  * thermal/core: Potential buffer overflow in thermal_build_list_of_policies()
      drivers/thermal/thermal_core.c
  * fpga: machxo2-spi: Fix missing error code in machxo2_write_complete()
      drivers/fpga/machxo2-spi.c
  * fpga: machxo2-spi: Return an error on failure
      drivers/fpga/machxo2-spi.c
  * tty: synclink_gt: rename a conflicting function name
      drivers/tty/synclink_gt.c
  * tty: synclink_gt, drop unneeded forward declarations
      drivers/tty/synclink_gt.c
  * scsi: iscsi: Adjust iface sysfs attr detection
      drivers/scsi/scsi_transport_iscsi.c
  * net/mlx4_en: Don't allow aRFS for encapsulated packets
      drivers/net/ethernet/mellanox/mlx4/en_netdev.c
  * gpio: uniphier: Fix void functions to remove return value
      drivers/gpio/gpio-uniphier.c
  * net/smc: add missing error check in smc_clc_prfx_set()
      net/smc/smc_clc.c
  * bnxt_en: Fix TX timeout when TX ring size is set to the smallest
      drivers/net/ethernet/broadcom/bnxt/bnxt.c
      drivers/net/ethernet/broadcom/bnxt/bnxt.h
      drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c
  * net: hso: fix muxed tty registration
      drivers/net/usb/hso.c
  * serial: mvebu-uart: fix driver's tx_empty callback
      drivers/tty/serial/mvebu-uart.c
  * mcb: fix error handling in mcb_alloc_bus()
      drivers/mcb/mcb-core.c
  * USB: serial: option: add device id for Foxconn T99W265
      drivers/usb/serial/option.c
  * USB: serial: option: remove duplicate USB device ID
      drivers/usb/serial/option.c
  * USB: serial: option: add Telit LN920 compositions
      drivers/usb/serial/option.c
  * USB: serial: mos7840: remove duplicated 0xac24 device ID
      drivers/usb/serial/mos7840.c
  * Re-enable UAS for LaCie Rugged USB3-FW with fk quirk
      drivers/usb/storage/unusual_uas.h
  * staging: greybus: uart: fix tty use after free
      drivers/staging/greybus/uart.c
  * USB: cdc-acm: fix minor-number release
      drivers/usb/class/cdc-acm.c
      drivers/usb/class/cdc-acm.h
  * USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter
      drivers/usb/serial/cp210x.c
  * usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c
      drivers/usb/storage/unusual_devs.h
  * xen/x86: fix PV trap handling on secondary processors
      arch/x86/xen/enlighten_pv.c
  * cifs: fix incorrect check for null pointer in header_assemble
      fs/cifs/connect.c
  * usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned()
      drivers/usb/musb/tusb6010.c
  * usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA
      drivers/usb/dwc2/gadget.c
  * usb: gadget: r8a66597: fix a loop in set_feature()
      drivers/usb/gadget/udc/r8a66597-udc.c
  * ocfs2: drop acl cache for directories too
      fs/ocfs2/dlmglue.c
    Merge 4.19.208 into android-4.19-stable
  * ANDROID: GKI: update ABI xml
      android/abi_gki_aarch64
      android/abi_gki_aarch64.xml
  * ANDROID: GKI: Update aarch64 cuttlefish symbol list
      android/abi_gki_aarch64_cuttlefish
  * ANDROID: GKI: rework the ANDROID_KABI_USE() macro to not use __UNIQUE()
      include/linux/android_kabi.h
  * BACKPORT: loop: Set correct device size when using LOOP_CONFIGURE
      drivers/block/loop.c
Linux 4.19.208
  * drm/nouveau/nvkm: Replace -ENOSYS with -ENODEV
      drivers/gpu/drm/nouveau/nvkm/engine/device/ctrl.c
  * blk-throttle: fix UAF by deleteing timer in blk_throtl_exit()
      block/blk-throttle.c
  * pwm: stm32-lp: Don't modify HW state in .remove() callback
      drivers/pwm/pwm-stm32-lp.c
  * pwm: rockchip: Don't modify HW state in .remove() callback
      drivers/pwm/pwm-rockchip.c
  * pwm: img: Don't modify HW state in .remove() callback
      drivers/pwm/pwm-img.c
  * nilfs2: fix memory leak in nilfs_sysfs_delete_snapshot_group
      fs/nilfs2/sysfs.c
  * nilfs2: fix memory leak in nilfs_sysfs_create_snapshot_group
      fs/nilfs2/sysfs.c
  * nilfs2: fix memory leak in nilfs_sysfs_delete_##name##_group
      fs/nilfs2/sysfs.c
  * nilfs2: fix memory leak in nilfs_sysfs_create_##name##_group
      fs/nilfs2/sysfs.c
  * nilfs2: fix NULL pointer in nilfs_##name##_attr_release
      fs/nilfs2/sysfs.c
  * nilfs2: fix memory leak in nilfs_sysfs_create_device_group
      fs/nilfs2/sysfs.c
  * ceph: lockdep annotations for try_nonblocking_invalidate
      fs/ceph/caps.c
  * dmaengine: xilinx_dma: Set DMA mask for coherent APIs
      drivers/dma/xilinx/xilinx_dma.c
  * dmaengine: ioat: depends on !UML
      drivers/dma/Kconfig
  * dmaengine: sprd: Add missing MODULE_DEVICE_TABLE
      drivers/dma/sprd-dma.c
  * parisc: Move pci_dev_is_behind_card_dino to where it is used
      drivers/parisc/dino.c
  * drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION()
      arch/arm64/kernel/cacheinfo.c
      arch/mips/kernel/cacheinfo.c
      arch/riscv/kernel/cacheinfo.c
      arch/x86/kernel/cpu/cacheinfo.c
      include/linux/cacheinfo.h
  * Kconfig.debug: drop selecting non-existing HARDLOCKUP_DETECTOR_ARCH
      lib/Kconfig.debug
  * pwm: lpc32xx: Don't modify HW state in .probe() after the PWM chip was registered
      drivers/pwm/pwm-lpc32xx.c
  * profiling: fix shift-out-of-bounds bugs
      kernel/profile.c
  * nilfs2: use refcount_dec_and_lock() to fix potential UAF
      fs/nilfs2/the_nilfs.c
  * prctl: allow to setup brk for et_dyn executables
      kernel/sys.c
  * 9p/trans_virtio: Remove sysfs file on probe failure
      net/9p/trans_virtio.c
  * thermal/drivers/exynos: Fix an error code in exynos_tmu_probe()
      drivers/thermal/samsung/exynos_tmu.c
  * dmaengine: acpi: Avoid comparison GSI with Linux vIRQ
      drivers/dma/acpi-dma.c
  * sctp: add param size validation for SCTP_PARAM_SET_PRIMARY
      net/sctp/sm_make_chunk.c
  * sctp: validate chunk size in __rcv_asconf_lookup
      net/sctp/input.c
  * tracing/kprobe: Fix kprobe_on_func_entry() modification
      kernel/trace/trace_kprobe.c
  * crypto: talitos - fix max key size for sha384 and sha512
      drivers/crypto/talitos.c
  * apparmor: remove duplicate macro list_entry_is_head()
      security/apparmor/apparmorfs.c
  * rcu: Fix missed wakeup of exp_wq waiters
      kernel/rcu/tree_exp.h
  * KVM: remember position in kvm->vcpus array
      include/linux/kvm_host.h
      virt/kvm/kvm_main.c
  * s390/bpf: Fix optimizing out zero-extensions
      arch/s390/net/bpf_jit_comp.c

Bug: 205088357
Change-Id: Ifdb3da9a34bc271beb7ba680c041b10081d7e74c
Signed-off-by: JohnnLee <johnnlee@google.com>
2021-11-24 03:31:04 +00:00
Wilson Sung
64110158fb Merge android-4.19-stable (4.19.207) into android-msm-pixel-4.19-sc-lts
Merge 4.19.207 into android-4.19-stable
Linux 4.19.207
  * s390/bpf: Fix 64-bit subtraction of the -0x80000000 constant
      arch/s390/net/bpf_jit_comp.c
  * net: renesas: sh_eth: Fix freeing wrong tx descriptor
      drivers/net/ethernet/renesas/sh_eth.c
  * ip_gre: validate csum_start only on pull
      net/ipv4/ip_gre.c
  * qlcnic: Remove redundant unlock in qlcnic_pinit_from_rom
      drivers/net/ethernet/qlogic/qlcnic/qlcnic_init.c
  * fq_codel: reject silly quantum parameters
      include/uapi/linux/pkt_sched.h
      net/sched/sch_fq_codel.c
  * netfilter: socket: icmp6: fix use-after-scope
      net/ipv6/netfilter/nf_socket_ipv6.c
  * net: dsa: b53: Fix calculating number of switch ports
      drivers/net/dsa/b53/b53_common.c
  * ARC: export clear_user_page() for modules
      arch/arc/mm/cache.c
  * mtd: rawnand: cafe: Fix a resource leak in the error handling path of 'cafe_nand_probe()'
      drivers/mtd/nand/raw/cafe_nand.c
  * PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n
      include/linux/pci.h
  * KVM: arm64: Handle PSCI resets before userspace touches vCPU state
      virt/kvm/arm/arm.c
  * PCI: Fix pci_dev_str_match_path() alloc while atomic bug
      drivers/pci/pci.c
  * mfd: axp20x: Update AXP288 volatile ranges
      drivers/mfd/axp20x.c
  * NTB: perf: Fix an error code in perf_setup_inbuf()
      drivers/ntb/test/ntb_perf.c
  * ethtool: Fix an error code in cxgb2.c
      drivers/net/ethernet/chelsio/cxgb/cxgb2.c
  * block, bfq: honor already-setup queue merges
      block/bfq-iosched.c
  * net: usb: cdc_mbim: avoid altsetting toggling for Telit LN920
      drivers/net/usb/cdc_mbim.c
  * PCI: Add ACS quirks for Cavium multi-function devices
      drivers/pci/quirks.c
  * mfd: Don't use irq_create_mapping() to resolve a mapping
      drivers/mfd/ab8500-core.c
      drivers/mfd/stmpe.c
      drivers/mfd/tc3589x.c
      drivers/mfd/wm8994-irq.c
    dt-bindings: mtd: gpmc: Fix the ECC bytes vs. OOB bytes equation
  * KVM: s390: index kvm->arch.idle_mask by vcpu_idx
      arch/s390/kvm/interrupt.c
      arch/s390/kvm/kvm-s390.h
  * mm/memory_hotplug: use "unsigned long" for PFN in zone_for_pfn_range()
      include/linux/memory_hotplug.h
      mm/memory_hotplug.c
  * net: hns3: pad the short tunnel frame before sending to hardware
      drivers/net/ethernet/hisilicon/hns3/hns3_enet.c
  * ibmvnic: check failover_pending in login response
      drivers/net/ethernet/ibm/ibmvnic.c
  * qed: Handle management FW error
      drivers/net/ethernet/qlogic/qed/qed_mcp.c
  * tcp: fix tp->undo_retrans accounting in tcp_sacktag_one()
      net/ipv4/tcp_input.c
  * net: dsa: destroy the phylink instance on any error in dsa_slave_phy_setup
      net/dsa/slave.c
  * net/af_unix: fix a data-race in unix_dgram_poll
      include/linux/skbuff.h
      net/unix/af_unix.c
  * events: Reuse value read using READ_ONCE instead of re-reading it
      kernel/events/core.c
  * net/mlx5: Fix potential sleeping in atomic context
      drivers/net/ethernet/mellanox/mlx5/core/fs_core.c
  * perf machine: Initialize srcline string member in add_location struct
      tools/perf/util/machine.c
  * tipc: increase timeout in tipc_sk_enqueue()
      net/tipc/socket.c
  * r6040: Restore MDIO clock frequency after MAC reset
      drivers/net/ethernet/rdc/r6040.c
  * net/l2tp: Fix reference count leak in l2tp_udp_recv_core
      net/l2tp/l2tp_core.c
  * dccp: don't duplicate ccid when cloning dccp sock
      net/dccp/minisocks.c
  * ptp: dp83640: don't define PAGE0
      drivers/net/phy/dp83640_reg.h
  * net-caif: avoid user-triggerable WARN_ON(1)
      net/caif/chnl_net.c
  * tipc: fix an use-after-free issue in tipc_recvmsg
      net/tipc/socket.c
  * x86/mm: Fix kern_addr_valid() to cope with existing but not present entries
      arch/x86/mm/init_64.c
  * PCI: Add AMD GPU multi-function power dependencies
      drivers/pci/quirks.c
  * PM: base: power: don't try to use non-existing RTC for storing data
      drivers/base/power/trace.c
  * arm64/sve: Use correct size when reinitialising SVE state
      arch/arm64/kernel/fpsimd.c
  * bnx2x: Fix enabling network interfaces without VFs
      drivers/net/ethernet/broadcom/bnx2x/bnx2x_sriov.c
  * xen: reset legacy rtc flag for PV domU
      arch/x86/xen/enlighten_pv.c
  * dm thin metadata: Fix use-after-free in dm_bm_set_read_only
      drivers/md/dm-thin-metadata.c
      drivers/md/persistent-data/dm-block-manager.c
  * drm/amdgpu: Fix BUG_ON assert
      drivers/gpu/drm/amd/amdgpu/amdgpu_object.c
  * platform/chrome: cros_ec_proto: Send command again when timeout occurs
      drivers/platform/chrome/cros_ec_proto.c
  * memcg: enable accounting for pids in nested pid namespaces
      kernel/pid_namespace.c
  * mm/hugetlb: initialize hugetlb_usage in mm_init
      include/linux/hugetlb.h
      kernel/fork.c
  * cpufreq: powernv: Fix init_chip_info initialization in numa=off
      drivers/cpufreq/powernv-cpufreq.c
  * scsi: qla2xxx: Sync queue idx with queue_pair_map idx
      drivers/scsi/qla2xxx/qla_nvme.c
  * scsi: BusLogic: Fix missing pr_cont() use
      drivers/scsi/BusLogic.c
  * ovl: fix BUG_ON() in may_delete() when called from ovl_cleanup()
      fs/overlayfs/dir.c
  * parisc: fix crash with signals and alloca
      arch/parisc/kernel/signal.c
  * net: w5100: check return value after calling platform_get_resource()
      drivers/net/ethernet/wiznet/w5100.c
  * net: fix NULL pointer reference in cipso_v4_doi_free
      net/netlabel/netlabel_cipso_v4.c
  * ath9k: fix sleeping in atomic context
      drivers/net/wireless/ath/ath9k/hw.c
  * ath9k: fix OOB read ar9300_eeprom_restore_internal
      drivers/net/wireless/ath/ath9k/ar9003_eeprom.c
  * parport: remove non-zero check on count
      drivers/parport/ieee1284_ops.c
  * ASoC: rockchip: i2s: Fixup config for DAIFMT_DSP_A/B
      sound/soc/rockchip/rockchip_i2s.c
  * ASoC: rockchip: i2s: Fix regmap_ops hang
      sound/soc/rockchip/rockchip_i2s.c
  * usbip:vhci_hcd USB port can get stuck in the disabled state
      drivers/usb/usbip/vhci_hcd.c
  * usbip: give back URBs for unsent unlink requests during cleanup
      drivers/usb/usbip/vhci_hcd.c
  * usb: musb: musb_dsps: request_irq() after initializing musb
      drivers/usb/musb/musb_dsps.c
  * Revert "USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set"
      drivers/usb/host/xhci.c
  * cifs: fix wrong release in sess_alloc_buffer() failed path
      fs/cifs/sess.c
  * mmc: core: Return correct emmc response in case of ioctl error
      drivers/mmc/core/block.c
  * selftests/bpf: Enlarge select() timeout for test_maps
      tools/testing/selftests/bpf/test_maps.c
  * mmc: rtsx_pci: Fix long reads when clock is prescaled
      drivers/mmc/host/rtsx_pci_sdmmc.c
  * mmc: sdhci-of-arasan: Check return value of non-void funtions
      drivers/mmc/host/sdhci-of-arasan.c
  * of: Don't allow __of_attached_node_sysfs() without CONFIG_SYSFS
      drivers/of/kobj.c
  * gfs2: Don't call dlm after protocol is unmounted
      fs/gfs2/lock_dlm.c
  * staging: rts5208: Fix get_ms_information() heap buffer size
      drivers/staging/rts5208/rtsx_scsi.c
  * rpc: fix gss_svc_init cleanup on failure
      net/sunrpc/auth_gss/svcauth_gss.c
  * tcp: enable data-less, empty-cookie SYN with TFO_SERVER_COOKIE_NOT_REQD
      net/ipv4/tcp_fastopen.c
  * serial: sh-sci: fix break handling for sysrq
      drivers/tty/serial/sh-sci.c
  * Bluetooth: Fix handling of LE Enhanced Connection Complete
      net/bluetooth/hci_event.c
  * ARM: tegra: tamonten: Fix UART pad setting
      arch/arm/boot/dts/tegra20-tamonten.dtsi
  * gpu: drm: amd: amdgpu: amdgpu_i2c: fix possible uninitialized-variable access in amdgpu_i2c_router_select_ddc_port()
      drivers/gpu/drm/amd/amdgpu/amdgpu_i2c.c
  * Bluetooth: avoid circular locks in sco_sock_connect
      net/bluetooth/sco.c
  * Bluetooth: schedule SCO timeouts with delayed_work
      net/bluetooth/sco.c
  * net: ethernet: stmmac: Do not use unreachable() in ipq806x_gmac_probe()
      drivers/net/ethernet/stmicro/stmmac/dwmac-ipq806x.c
  * arm64: dts: qcom: sdm660: use reg value for memory node
      arch/arm64/boot/dts/qcom/ipq8074-hk01.dts
  * ARM: dts: imx53-ppd: Fix ACHC entry
      arch/arm/boot/dts/imx53-ppd.dts
  * media: tegra-cec: Handle errors of clk_prepare_enable()
      drivers/media/platform/tegra-cec/tegra_cec.c
  * media: TDA1997x: fix tda1997x_query_dv_timings() return value
      drivers/media/i2c/tda1997x.c
  * media: v4l2-dv-timings.c: fix wrong condition in two for-loops
      drivers/media/v4l2-core/v4l2-dv-timings.c
  * media: imx258: Limit the max analogue gain to 480
      drivers/media/i2c/imx258.c
  * media: imx258: Rectify mismatch of VTS value
      drivers/media/i2c/imx258.c
  * ASoC: Intel: bytcr_rt5640: Move "Platform Clock" routes to the maps for the matching in-/output
      sound/soc/intel/boards/bytcr_rt5640.c
  * bonding: 3ad: fix the concurrency between __bond_release_one() and bond_3ad_state_machine_handler()
      drivers/net/bonding/bond_main.c
  * Bluetooth: skip invalid hci_sync_conn_complete_evt
      net/bluetooth/hci_event.c
  * ata: sata_dwc_460ex: No need to call phy_exit() befre phy_init()
      drivers/ata/sata_dwc_460ex.c
  * samples: bpf: Fix tracex7 error raised on the missing argument
      samples/bpf/test_override_return.sh
      samples/bpf/tracex7_user.c
  * staging: ks7010: Fix the initialization of the 'sleep_status' structure
      drivers/staging/ks7010/ks7010_sdio.c
  * serial: 8250_pci: make setup_port() parameters explicitly unsigned
      drivers/tty/serial/8250/8250_pci.c
  * hvsi: don't panic on tty_register_driver failure
      drivers/tty/hvc/hvsi.c
  * xtensa: ISS: don't panic in rs_init
      arch/xtensa/platforms/iss/console.c
  * serial: 8250: Define RX trigger levels for OxSemi 950 devices
      drivers/tty/serial/8250/8250_port.c
      include/uapi/linux/serial_reg.h
  * s390/jump_label: print real address in a case of a jump label bug
      arch/s390/kernel/jump_label.c
  * flow_dissector: Fix out-of-bounds warnings
      net/core/flow_dissector.c
  * ipv4: ip_output.c: Fix out-of-bounds warning in ip_copy_addrs()
      net/ipv4/ip_output.c
  * video: fbdev: riva: Error out if 'pixclock' equals zero
      drivers/video/fbdev/riva/fbdev.c
  * video: fbdev: kyro: Error out if 'pixclock' equals zero
      drivers/video/fbdev/kyro/fbdev.c
  * video: fbdev: asiliantfb: Error out if 'pixclock' equals zero
      drivers/video/fbdev/asiliantfb.c
  * bpf/tests: Do not PASS tests without actually testing the result
      lib/test_bpf.c
  * bpf/tests: Fix copy-and-paste error in double word test
      lib/test_bpf.c
  * drm/amd/amdgpu: Update debugfs link_settings output link_rate field in hex
      drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c
  * tty: serial: jsm: hold port lock when reporting modem line changes
      drivers/tty/serial/jsm/jsm_neo.c
      drivers/tty/serial/jsm/jsm_tty.c
  * staging: board: Fix uninitialized spinlock when attaching genpd
      drivers/staging/board/board.c
  * usb: gadget: composite: Allow bMaxPower=0 if self-powered
      drivers/usb/gadget/composite.c
  * usb: gadget: u_ether: fix a potential null pointer dereference
      drivers/usb/gadget/function/u_ether.c
  * usb: host: fotg210: fix the actual_length of an iso packet
      drivers/usb/host/fotg210-hcd.c
      drivers/usb/host/fotg210.h
  * usb: host: fotg210: fix the endpoint's transactional opportunities calculation
      drivers/usb/host/fotg210-hcd.c
  * Smack: Fix wrong semantics in smk_access_entry()
      security/smack/smack_access.c
  * netlink: Deal with ESRCH error in nlmsg_notify()
      net/netlink/af_netlink.c
  * video: fbdev: kyro: fix a DoS bug by restricting user input
      drivers/video/fbdev/kyro/fbdev.c
  * ARM: dts: qcom: apq8064: correct clock names
      arch/arm/boot/dts/qcom-apq8064.dtsi
  * iio: dac: ad5624r: Fix incorrect handling of an optional regulator.
      drivers/iio/dac/ad5624r_spi.c
  * tipc: keep the skb in rcv queue until the whole data is read
      net/tipc/socket.c
  * PCI: Use pci_update_current_state() in pci_enable_device_flags()
      drivers/pci/pci.c
  * crypto: mxs-dcp - Use sg_mapping_iter to copy data
      drivers/crypto/mxs-dcp.c
  * media: dib8000: rewrite the init prbs logic
      drivers/media/dvb-frontends/dib8000.c
  * userfaultfd: prevent concurrent API initialization
      fs/userfaultfd.c
  * MIPS: Malta: fix alignment of the devicetree buffer
      arch/mips/mti-malta/malta-dtshim.c
  * f2fs: fix to unmap pages from userspace process in punch_hole()
      fs/f2fs/file.c
  * f2fs: fix to account missing .skipped_gc_rwsem
      fs/f2fs/gc.c
  * fscache: Fix cookie key hashing
      fs/fscache/cookie.c
      fs/fscache/internal.h
      fs/fscache/main.c
  * platform/x86: dell-smbios-wmi: Add missing kfree in error-exit from run_smbios_call
      drivers/platform/x86/dell-smbios-wmi.c
  * scsi: qedi: Fix error codes in qedi_alloc_global_queues()
      drivers/scsi/qedi/qedi_main.c
  * pinctrl: single: Fix error return code in pcs_parse_bits_in_pinctrl_entry()
      drivers/pinctrl/pinctrl-single.c
  * openrisc: don't printk() unconditionally
      arch/openrisc/kernel/entry.S
  * powerpc/stacktrace: Include linux/delay.h
      arch/powerpc/kernel/stacktrace.c
  * vfio: Use config not menuconfig for VFIO_NOIOMMU
      drivers/vfio/Kconfig
  * pinctrl: samsung: Fix pinctrl bank pin count
      drivers/pinctrl/samsung/pinctrl-samsung.c
  * docs: Fix infiniband uverbs minor number
      Documentation/admin-guide/devices.txt
  * RDMA/iwcm: Release resources if iw_cm module initialization fails
      drivers/infiniband/core/iwcm.c
  * HID: input: do not report stylus battery state as "full"
      drivers/hid/hid-input.c
  * PCI: aardvark: Fix masking and unmasking legacy INTx interrupts
      drivers/pci/controller/pci-aardvark.c
  * PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response
      drivers/pci/controller/pci-aardvark.c
  * PCI: xilinx-nwl: Enable the clock through CCF
      drivers/pci/controller/pcie-xilinx-nwl.c
  * PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure
      drivers/pci/syscall.c
  * PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported
      drivers/pci/quirks.c
  * ARM: 9105/1: atags_to_fdt: don't warn about stack size
      arch/arm/boot/compressed/Makefile
  * libata: add ATA_HORKAGE_NO_NCQ_TRIM for Samsung 860 and 870 SSDs
      drivers/ata/libata-core.c
  * media: rc-loopback: return number of emitters rather than error
      drivers/media/rc/rc-loopback.c
  * media: uvc: don't do DMA on stack
      drivers/media/usb/uvc/uvc_v4l2.c
  * VMCI: fix NULL pointer dereference when unmapping queue pair
      drivers/misc/vmw_vmci/vmci_queue_pair.c
  * dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()
      drivers/md/dm-crypt.c
  * power: supply: max17042: handle fails of reading status register
      drivers/power/supply/max17042_battery.c
  * block: bfq: fix bfq_set_next_ioprio_data()
      block/bfq-iosched.c
  * crypto: public_key: fix overflow during implicit conversion
      include/crypto/public_key.h
  * arm64: head: avoid over-mapping in map_memory
      arch/arm64/include/asm/kernel-pgtable.h
      arch/arm64/kernel/head.S
  * soc: aspeed: lpc-ctrl: Fix boundary check for mmap
      drivers/misc/aspeed-lpc-ctrl.c
  * tools/thermal/tmon: Add cross compiling support
      tools/thermal/tmon/Makefile
  * bpf: Fix pointer arithmetic mask tightening under state pruning
      include/linux/bpf_verifier.h
      kernel/bpf/verifier.c
  * bpf: verifier: Allocate idmap scratch in verifier env
      include/linux/bpf_verifier.h
      kernel/bpf/verifier.c
  * bpf: Fix leakage due to insufficient speculative store bypass mitigation
      include/linux/bpf_verifier.h
      kernel/bpf/verifier.c
  * bpf: Introduce BPF nospec instruction for mitigating Spectre v4
      arch/arm/net/bpf_jit_32.c
      arch/arm64/net/bpf_jit_comp.c
      arch/mips/net/ebpf_jit.c
      arch/powerpc/net/bpf_jit_comp64.c
      arch/s390/net/bpf_jit_comp.c
      arch/sparc/net/bpf_jit_comp_64.c
      arch/x86/net/bpf_jit_comp.c
      arch/x86/net/bpf_jit_comp32.c
      include/linux/filter.h
      kernel/bpf/core.c
      kernel/bpf/disasm.c
  * selftests/bpf: fix tests due to const spill/fill
      tools/testing/selftests/bpf/test_verifier.c
  * bpf: track spill/fill of constants
      kernel/bpf/verifier.c
  * selftests/bpf: Test variable offset stack access
      tools/testing/selftests/bpf/test_verifier.c
  * bpf: Sanity check max value for var_off stack access
      kernel/bpf/verifier.c
  * bpf: Reject indirect var_off stack access in unpriv mode
      kernel/bpf/verifier.c
  * bpf: Reject indirect var_off stack access in raw mode
      kernel/bpf/verifier.c
  * bpf: Support variable offset stack access from helpers
      kernel/bpf/verifier.c
  * bpf: correct slot_type marking logic to allow more stack slot sharing
      kernel/bpf/verifier.c
      tools/testing/selftests/bpf/test_verifier.c
  * bpf/verifier: per-register parent pointers
      include/linux/bpf_verifier.h
      kernel/bpf/verifier.c
  * 9p/xen: Fix end of loop tests for list_for_each_entry
      net/9p/trans_xen.c
  * include/linux/list.h: add a macro to test if entry is pointing to the head
      include/linux/list.h
  * xen: fix setting of max_pfn in shared_info
      arch/x86/xen/p2m.c
  * powerpc/perf/hv-gpci: Fix counter value parsing
      arch/powerpc/perf/hv-gpci.c
  * PCI/MSI: Skip masking MSI-X on Xen PV
      drivers/pci/msi.c
  * blk-zoned: allow BLKREPORTZONE without CAP_SYS_ADMIN
      block/blk-zoned.c
  * blk-zoned: allow zone management send operations without CAP_SYS_ADMIN
      block/blk-zoned.c
  * btrfs: reset replace target device to allocation state on close
      fs/btrfs/volumes.c
  * rtc: tps65910: Correct driver module alias
      drivers/rtc/rtc-tps65910.c
  * clk: kirkwood: Fix a clocking boot regression
      drivers/clk/mvebu/kirkwood.c
  * backlight: pwm_bl: Improve bootloader/kernel device handover
      drivers/video/backlight/pwm_bl.c
  * fbmem: don't allow too huge resolutions
      drivers/video/fbdev/core/fbmem.c
  * IMA: remove the dependency on CRYPTO_MD5
      security/integrity/ima/Kconfig
  * IMA: remove -Wmissing-prototypes warning
      security/integrity/ima/ima_mok.c
  * KVM: x86: Update vCPU's hv_clock before back to guest when tsc_offset is adjusted
      arch/x86/kvm/x86.c
  * x86/resctrl: Fix a maybe-uninitialized build warning treated as error
      arch/x86/kernel/cpu/intel_rdt_monitor.c
  * tty: Fix data race between tiocsti() and flush_to_ldisc()
      drivers/tty/tty_io.c
  * ubifs: report correct st_size for encrypted symlinks
      fs/ubifs/file.c
  * f2fs: report correct st_size for encrypted symlinks
      fs/f2fs/namei.c
  * ext4: report correct st_size for encrypted symlinks
      fs/ext4/symlink.c
  * fscrypt: add fscrypt_symlink_getattr() for computing st_size
      fs/crypto/hooks.c
  * netns: protect netns ID lookups with RCU
      net/core/net_namespace.c
  * ipv4: fix endianness issue in inet_rtm_getroute_build_skb()
      net/ipv4/route.c
  * net: qualcomm: fix QCA7000 checksum handling
      drivers/net/ethernet/qualcomm/qca_spi.c
      drivers/net/ethernet/qualcomm/qca_uart.c
  * net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed
      net/sched/sch_cbq.c
  * ipv4: make exception cache less predictible
      net/ipv4/route.c
  * bcma: Fix memory leak for internally-handled cores
      drivers/bcma/main.c
  * ath6kl: wmi: fix an error code in ath6kl_wmi_sync_point()
      drivers/net/wireless/ath/ath6kl/wmi.c
  * tty: serial: fsl_lpuart: fix the wrong mapbase value
      drivers/tty/serial/fsl_lpuart.c
  * usb: bdc: Fix an error handling path in 'bdc_probe()' when no suitable DMA config is available
      drivers/usb/gadget/udc/bdc/bdc_core.c
  * usb: ehci-orion: Handle errors of clk_prepare_enable() in probe
      drivers/usb/host/ehci-orion.c
  * i2c: mt65xx: fix IRQ check
      drivers/i2c/busses/i2c-mt65xx.c
  * CIFS: Fix a potencially linear read overflow
      fs/cifs/cifs_unicode.c
  * mmc: moxart: Fix issue with uninitialized dma_slave_config
      drivers/mmc/host/moxart-mmc.c
  * mmc: dw_mmc: Fix issue with uninitialized dma_slave_config
      drivers/mmc/host/dw_mmc.c
  * i2c: s3c2410: fix IRQ check
      drivers/i2c/busses/i2c-s3c2410.c
  * i2c: iop3xx: fix deferred probing
      drivers/i2c/busses/i2c-iop3xx.c
  * Bluetooth: add timeout sanity check to hci_inquiry
      net/bluetooth/hci_core.c
  * usb: gadget: mv_u3d: request_irq() after initializing UDC
      drivers/usb/gadget/udc/mv_u3d_core.c
  * mac80211: Fix insufficient headroom issue for AMSDU
      net/mac80211/tx.c
  * usb: phy: tahvo: add IRQ check
      drivers/usb/phy/phy-tahvo.c
  * usb: host: ohci-tmio: add IRQ check
      drivers/usb/host/ohci-tmio.c
  * Bluetooth: Move shutdown callback before flushing tx and rx queue
      net/bluetooth/hci_core.c
  * usb: phy: twl6030: add IRQ checks
      drivers/usb/phy/phy-twl6030-usb.c
  * usb: phy: fsl-usb: add IRQ check
      drivers/usb/phy/phy-fsl-usb.c
  * usb: gadget: udc: at91: add IRQ check
      drivers/usb/gadget/udc/at91_udc.c
  * drm/msm/dsi: Fix some reference counted resource leaks
      drivers/gpu/drm/msm/dsi/dsi.c
  * Bluetooth: fix repeated calls to sco_sock_kill
      net/bluetooth/sco.c
  * arm64: dts: exynos: correct GIC CPU interfaces address range on Exynos7
      arch/arm64/boot/dts/exynos/exynos7.dtsi
  * drm/msm/dpu: make dpu_hw_ctl_clear_all_blendstages clear necessary LMs
      drivers/gpu/drm/msm/disp/dpu1/dpu_hw_ctl.c
  * Bluetooth: increase BTNAMSIZ to 21 chars to fix potential buffer overflow
      net/bluetooth/cmtp/cmtp.h
  * soc: qcom: smsm: Fix missed interrupts if state changes while masked
      drivers/soc/qcom/smsm.c
  * PCI: PM: Enable PME if it can be signaled from D3cold
      drivers/pci/pci.c
  * PCI: PM: Avoid forcing PCI_D0 for wakeup reasons inconsistently
      drivers/pci/pci.c
  * media: venus: venc: Fix potential null pointer dereference on pointer fmt
      drivers/media/platform/qcom/venus/venc.c
  * media: em28xx-input: fix refcount bug in em28xx_usb_disconnect
      drivers/media/usb/em28xx/em28xx-input.c
  * i2c: highlander: add IRQ check
      drivers/i2c/busses/i2c-highlander.c
  * net: cipso: fix warnings in netlbl_cipsov4_add_std
      net/netlabel/netlabel_cipso_v4.c
  * tcp: seq_file: Avoid skipping sk during tcp_seek_last_pos
      net/ipv4/tcp_ipv4.c
  * Bluetooth: sco: prevent information leak in sco_conn_defer_accept()
      net/bluetooth/sco.c
  * media: go7007: remove redundant initialization
      drivers/media/usb/go7007/go7007-driver.c
  * media: dvb-usb: fix uninit-value in vp702x_read_mac_addr
      drivers/media/usb/dvb-usb/vp702x.c
  * media: dvb-usb: fix uninit-value in dvb_usb_adapter_dvb_init
      drivers/media/usb/dvb-usb/nova-t-usb2.c
  * soc: rockchip: ROCKCHIP_GRF should not default to y, unconditionally
      drivers/soc/rockchip/Kconfig
  * media: TDA1997x: enable EDID support
      drivers/media/i2c/tda1997x.c
  * spi: sprd: Fix the wrong WDG_LOAD_VAL
      drivers/spi/spi-sprd-adi.c
  * certs: Trigger creation of RSA module signing key if it's not an RSA key
      certs/Makefile
  * crypto: qat - use proper type for vf_mask
      drivers/crypto/qat/qat_common/adf_isr.c
  * clocksource/drivers/sh_cmt: Fix wrong setting if don't request IRQ for clock source channel
      drivers/clocksource/sh_cmt.c
  * lib/mpi: use kcalloc in mpi_resize
      lib/mpi/mpiutil.c
  * spi: spi-pic32: Fix issue with uninitialized dma_slave_config
      drivers/spi/spi-pic32.c
  * spi: spi-fsl-dspi: Fix issue with uninitialized dma_slave_config
      drivers/spi/spi-fsl-dspi.c
  * m68k: emu: Fix invalid free in nfeth_cleanup()
      arch/m68k/emu/nfeth.c
  * udf_get_extendedattr() had no boundary checks.
      fs/udf/misc.c
  * fcntl: fix potential deadlock for &fasync_struct.fa_lock
      fs/fcntl.c
  * crypto: qat - do not export adf_iov_putmsg()
      drivers/crypto/qat/qat_common/adf_pf2vf_msg.c
  * crypto: qat - fix naming for init/shutdown VF to PF notifications
      drivers/crypto/qat/qat_c3xxxvf/adf_c3xxxvf_hw_data.c
      drivers/crypto/qat/qat_c62xvf/adf_c62xvf_hw_data.c
      drivers/crypto/qat/qat_common/adf_common_drv.h
      drivers/crypto/qat/qat_common/adf_vf2pf_msg.c
      drivers/crypto/qat/qat_dh895xccvf/adf_dh895xccvf_hw_data.c
  * crypto: qat - fix reuse of completion variable
      drivers/crypto/qat/qat_common/adf_pf2vf_msg.c
  * crypto: qat - handle both source of interrupt in VF ISR
      drivers/crypto/qat/qat_common/adf_vf_isr.c
  * crypto: qat - do not ignore errors from enable_vf2pf_comms()
      drivers/crypto/qat/qat_common/adf_init.c
  * libata: fix ata_host_start()
      drivers/ata/libata-core.c
  * s390/cio: add dev_busid sysfs entry for each subchannel
      drivers/s390/cio/css.c
  * power: supply: max17042_battery: fix typo in MAx17042_TOFF
      drivers/power/supply/max17042_battery.c
      include/linux/power/max17042_battery.h
  * nvme-rdma: don't update queue count when failing to set io queues
      drivers/nvme/host/rdma.c
  * bcache: add proper error unwinding in bcache_device_init
      drivers/md/bcache/super.c
  * isofs: joliet: Fix iocharset=utf8 mount option
      fs/isofs/inode.c
      fs/isofs/isofs.h
      fs/isofs/joliet.c
  * udf: Check LVID earlier
      fs/udf/super.c
  * hrtimer: Avoid double reprogramming in __hrtimer_start_range_ns()
      kernel/time/hrtimer.c
  * sched/deadline: Fix missing clock update in migrate_task_rq_dl()
      kernel/sched/deadline.c
  * crypto: omap-sham - clear dma flags only after omap_sham_update_dma_stop()
      drivers/crypto/omap-sham.c
  * power: supply: axp288_fuel_gauge: Report register-address on readb / writeb errors
      drivers/power/supply/axp288_fuel_gauge.c
  * sched/deadline: Fix reset_on_fork reporting of DL tasks
      kernel/sched/deadline.c
      kernel/sched/sched.h
  * crypto: mxs-dcp - Check for DMA mapping errors
      drivers/crypto/mxs-dcp.c
  * regmap: fix the offset of register error log
      drivers/base/regmap/regmap.c
  * locking/mutex: Fix HANDOFF condition
      kernel/locking/mutex.c
  * PCI: Call Max Payload Size-related fixup quirks early
      drivers/pci/quirks.c
  * x86/reboot: Limit Dell Optiplex 990 quirk to early BIOS versions
      arch/x86/kernel/reboot.c
  * usb: mtu3: fix the wrong HS mult value
      drivers/usb/mtu3/mtu3_gadget.c
  * usb: mtu3: use @mult for HS isoc or intr
      drivers/usb/mtu3/mtu3_gadget.c
  * usb: host: xhci-rcar: Don't reload firmware after the completion
      drivers/usb/host/xhci-rcar.c
  * ALSA: usb-audio: Add registration quirk for JBL Quantum 800
      sound/usb/quirks.c
  * Revert "btrfs: compression: don't try to compress if we don't have enough pages"
      fs/btrfs/inode.c
  * mm/page_alloc: speed up the iteration of max_order
      mm/page_alloc.c
  * net: ll_temac: Remove left-over debug message
      drivers/net/ethernet/xilinx/ll_temac_main.c
  * powerpc/boot: Delete unneeded .globl _zimage_start
      arch/powerpc/boot/crt0.S
  * powerpc/module64: Fix comment in R_PPC64_ENTRY handling
      arch/powerpc/kernel/module_64.c
  * crypto: talitos - reduce max key size for SEC1
      drivers/crypto/talitos.c
  * SUNRPC/nfs: Fix return value for nfs4_callback_compound()
      fs/nfs/callback_xdr.c
      include/linux/sunrpc/svc.h
      net/sunrpc/svc.c
  * ipv4/icmp: l3mdev: Perform icmp error route lookup on source device routing table (v2)
      net/ipv4/icmp.c
  * USB: serial: mos7720: improve OOM-handling in read_mos_reg()
      drivers/usb/serial/mos7720.c
  * igmp: Add ip_mc_list lock in ip_check_mc_rcu
      net/ipv4/igmp.c
  * ARM: imx: fix missing 3rd argument in macro imx_mmdc_perf_init
      arch/arm/mach-imx/mmdc.c
  * ARM: imx: add missing clk_disable_unprepare()
      arch/arm/mach-imx/mmdc.c
  * media: stkwebcam: fix memory leak in stk_camera_probe
      drivers/media/usb/stkwebcam/stk-webcam.c
  * clk: fix build warning for orphan_list
      drivers/clk/clk.c
  * ALSA: pcm: fix divide error in snd_pcm_lib_ioctl
      sound/core/pcm_lib.c
  * ARM: 8918/2: only build return_address() if needed
      arch/arm/kernel/Makefile
      arch/arm/kernel/return_address.c
  * cryptoloop: add a deprecation warning
      drivers/block/Kconfig
      drivers/block/cryptoloop.c
  * perf/x86/amd/ibs: Work around erratum #1197
      arch/x86/events/amd/ibs.c
  * perf/x86/intel/pt: Fix mask of num_address_ranges
      arch/x86/events/intel/pt.c
  * qede: Fix memset corruption
      drivers/net/ethernet/qlogic/qede/qede_main.c
  * net: macb: Add a NULL check on desc_ptp
      drivers/net/ethernet/cadence/macb_ptp.c
  * qed: Fix the VF msix vectors flow
      drivers/net/ethernet/qlogic/qed/qed_main.c
  * gpu: ipu-v3: Fix i.MX IPU-v3 offset calculations for (semi)planar U/V formats
      drivers/gpu/ipu-v3/ipu-cpmem.c
  * xtensa: fix kconfig unmet dependency warning for HAVE_FUTEX_CMPXCHG
      arch/xtensa/Kconfig
  * ext4: fix race writing to an inline_data file while its xattrs are changing
      fs/ext4/inline.c
    Merge 4.19.206 into android-4.19-stable
Linux 4.19.206
  * net: don't unconditionally copy_from_user a struct ifreq for socket ioctls
      include/linux/netdevice.h
      net/socket.c
  * Revert "floppy: reintroduce O_NDELAY fix"
      drivers/block/floppy.c
  * KVM: x86/mmu: Treat NX as used (not reserved) for all !TDP shadow MMUs
      arch/x86/kvm/mmu.c
  * fbmem: add margin check to fb_check_caps()
      drivers/video/fbdev/core/fbmem.c
  * vt_kdsetmode: extend console locking
      drivers/tty/vt/vt_ioctl.c
  * net/rds: dma_map_sg is entitled to merge entries
      net/rds/ib_frmr.c
  * drm/nouveau/disp: power down unused DP links during init
      drivers/gpu/drm/nouveau/nvkm/engine/disp/dp.c
      drivers/gpu/drm/nouveau/nvkm/engine/disp/dp.h
      drivers/gpu/drm/nouveau/nvkm/engine/disp/outp.c
  * drm: Copy drm_wait_vblank to user before returning
      drivers/gpu/drm/drm_ioc32.c
  * qed: Fix null-pointer dereference in qed_rdma_create_qp()
      drivers/net/ethernet/qlogic/qed/qed_rdma.c
  * qed: qed ll2 race condition fixes
      drivers/net/ethernet/qlogic/qed/qed_ll2.c
  * vringh: Use wiov->used to check for read/write desc order
      drivers/vhost/vringh.c
  * virtio_pci: Support surprise removal of virtio pci device
      drivers/virtio/virtio_pci_common.c
  * virtio: Improve vq->broken access to avoid any compiler optimization
      drivers/virtio/virtio_ring.c
  * opp: remove WARN when no valid OPPs remain
      drivers/opp/of.c
  * usb: gadget: u_audio: fix race condition on endpoint stop
      drivers/usb/gadget/function/u_audio.c
  * net: hns3: fix get wrong pfc_en when query PFC configuration
      drivers/net/ethernet/hisilicon/hns3/hns3pf/hclge_dcb.c
  * net: marvell: fix MVNETA_TX_IN_PRGRS bit number
      drivers/net/ethernet/marvell/mvneta.c
  * xgene-v2: Fix a resource leak in the error handling path of 'xge_probe()'
      drivers/net/ethernet/apm/xgene-v2/main.c
  * ip_gre: add validation for csum_start
      net/ipv4/ip_gre.c
  * e1000e: Fix the max snoop/no-snoop latency for 10M
      drivers/net/ethernet/intel/e1000e/ich8lan.c
      drivers/net/ethernet/intel/e1000e/ich8lan.h
  * IB/hfi1: Fix possible null-pointer dereference in _extend_sdma_tx_descs()
      drivers/infiniband/hw/hfi1/sdma.c
  * usb: dwc3: gadget: Stop EP0 transfers during pullup disable
      drivers/usb/dwc3/gadget.c
  * usb: dwc3: gadget: Fix dwc3_calc_trbs_left()
      drivers/usb/dwc3/gadget.c
  * USB: serial: option: add new VID/PID to support Fibocom FG150
      drivers/usb/serial/option.c
  * Revert "USB: serial: ch341: fix character loss at high transfer rates"
      drivers/usb/serial/ch341.c
  * can: usb: esd_usb2: esd_usb2_rx_event(): fix the interchange of the CAN RX and TX error counters
      drivers/net/can/usb/esd_usb2.c
  * once: Fix panic when module unload
      include/linux/once.h
      lib/once.c
  * netfilter: conntrack: collect all entries in one cycle
      net/netfilter/nf_conntrack_core.c
  * ARC: Fix CONFIG_STACKDEPOT
      arch/arc/kernel/vmlinux.lds.S
  * bpf: Fix truncation handling for mod32 dst reg wrt zero
      kernel/bpf/verifier.c
  * bpf: Fix 32 bit src register truncation on div/mod
      include/linux/filter.h
      kernel/bpf/verifier.c
  * bpf: Do not use ax register in interpreter on div/mod
      kernel/bpf/core.c
  * net: qrtr: fix another OOB Read in qrtr_endpoint_post
      net/qrtr/qrtr.c

Bug: 201722185
Change-Id: I9358b0613a7072cae3b28ae826bd9d6243fdad48
Signed-off-by: Wilson Sung <wilsonsung@google.com>
2021-10-27 08:44:25 +00:00
Radim Krčmář
41d2efaed5 KVM: remember position in kvm->vcpus array
commit 8750e72a79dda2f665ce17b62049f4d62130d991 upstream.

Fetching an index for any vcpu in kvm->vcpus array by traversing
the entire array everytime is costly.
This patch remembers the position of each vcpu in kvm->vcpus array
by storing it in vcpus_idx under kvm_vcpu structure.

Signed-off-by: Radim Krčmář <rkrcmar@redhat.com>
Signed-off-by: Nitesh Narayan Lal <nitesh@redhat.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
[borntraeger@de.ibm.com]: backport to 4.19 (also fits for 5.4)
Signed-off-by: Christian Borntraeger <borntraeger@de.ibm.com>
Acked-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-09-26 13:39:46 +02:00
Oliver Upton
b6e5cd323d KVM: arm64: Handle PSCI resets before userspace touches vCPU state
[ Upstream commit 6826c6849b46aaa91300201213701eb861af4ba0 ]

The CPU_ON PSCI call takes a payload that KVM uses to configure a
destination vCPU to run. This payload is non-architectural state and not
exposed through any existing UAPI. Effectively, we have a race between
CPU_ON and userspace saving/restoring a guest: if the target vCPU isn't
ran again before the VMM saves its state, the requested PC and context
ID are lost. When restored, the target vCPU will be runnable and start
executing at its old PC.

We can avoid this race by making sure the reset payload is serviced
before userspace can access a vCPU's state.

Fixes: 358b28f09f0a ("arm/arm64: KVM: Allow a VCPU to fully reset itself")
Signed-off-by: Oliver Upton <oupton@google.com>
Signed-off-by: Marc Zyngier <maz@kernel.org>
Link: https://lore.kernel.org/r/20210818202133.1106786-3-oupton@google.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-09-22 11:48:13 +02:00
Lucas Wei
b72ce4cfa5 Merge android-4.19-stable (4.19.202) into android-msm-pixel-4.19-sc-lts
Merge 4.19.202 into android-4.19-stable
Linux 4.19.202
    spi: mediatek: Fix fifo transfer
  * padata: add separate cpuhp node for CPUHP_PADATA_DEAD
      include/linux/padata.h
  * padata: validate cpumask without removed CPU during offline
      include/linux/cpuhotplug.h
    Revert "watchdog: iTCO_wdt: Account for rebooting on second timeout"
    firmware: arm_scmi: Ensure drivers provide a probe function
    drm/i915: Ensure intel_engine_init_execlist() builds with Clang
  * Revert "Bluetooth: Shutdown controller after workqueues are flushed or cancelled"
      net/bluetooth/hci_core.c
  * bdi: add a ->dev_name field to struct backing_dev_info
      include/linux/backing-dev-defs.h
      mm/backing-dev.c
  * bdi: use bdi_dev_name() to get device name
      block/blk-cgroup.c
      include/trace/events/wbt.h
  * bdi: move bdi_dev_name out of line
      include/linux/backing-dev.h
      mm/backing-dev.c
  * net: Fix zero-copy head len calculation.
      net/core/skbuff.c
    qed: fix possible unpaired spin_{un}lock_bh in _qed_mcp_cmd_and_union()
  * r8152: Fix potential PM refcount imbalance
      drivers/net/usb/r8152.c
    ASoC: tlv320aic31xx: fix reversed bclk/wclk master bits
  * regulator: rt5033: Fix n_voltages settings for BUCK and LDO
      include/linux/mfd/rt5033-private.h
    btrfs: mark compressed range uptodate only if all bio succeed
    Merge 4.19.201 into android-4.19-stable
Linux 4.19.201
    i40e: Add additional info to PHY type error
    Revert "perf map: Fix dso->nsinfo refcounting"
    powerpc/pseries: Fix regression while building external modules
    can: hi311x: fix a signedness bug in hi3110_cmd()
    sis900: Fix missing pci_disable_device() in probe and remove
    tulip: windbond-840: Fix missing pci_disable_device() in probe and remove
  * sctp: fix return value check in __sctp_rcv_asconf_lookup
      net/sctp/input.c
    net/mlx5: Fix flow table chaining
  * net: llc: fix skb_over_panic
      include/net/llc_pdu.h
    mlx4: Fix missing error code in mlx4_load_one()
  * tipc: fix sleeping in tipc accept routine
      net/tipc/socket.c
    i40e: Fix log TC creation failure when max num of queues is exceeded
    i40e: Fix logic of disabling queues
    netfilter: nft_nat: allow to specify layer 4 protocol NAT only
  * netfilter: conntrack: adjust stop timestamp to real expiry value
      net/netfilter/nf_conntrack_core.c
  * cfg80211: Fix possible memory leak in function cfg80211_bss_update
      net/wireless/scan.c
    nfc: nfcsim: fix use after free during module unload
    NIU: fix incorrect error return, missed in previous revert
    can: esd_usb2: fix memory leak
    can: ems_usb: fix memory leak
    can: usb_8dev: fix memory leak
    can: mcba_usb_start(): add missing urb->transfer_dma initialization
    can: raw: raw_setsockopt(): fix raw_rcv panic for sock UAF
    ocfs2: issue zeroout to EOF blocks
    ocfs2: fix zero out valid data
    x86/kvm: fix vcpu-id indexed array sizes
    btrfs: fix rw device counting in __btrfs_free_extra_devids
    x86/asm: Ensure asm/proto.h can be included stand-alone
  * gro: ensure frag0 meets IP header alignment
      include/linux/skbuff.h
      net/core/dev.c
  * virtio_net: Do not pull payload in skb->head
      include/linux/virtio_net.h
    Merge 4.19.200 into android-4.19-stable
Linux 4.19.200
    ARM: dts: versatile: Fix up interrupt controller node names
    cifs: fix the out of range assignment to bit fields in parse_server_interfaces
    firmware: arm_scmi: Fix range check for the maximum number of pending messages
    firmware: arm_scmi: Fix possible scmi_linux_errmap buffer overflow
    hfs: add lock nesting notation to hfs_find_init
    hfs: fix high memory mapping in hfs_bnode_read
    hfs: add missing clean-up in hfs_fill_super
  * sctp: move 198 addresses from unusable to private scope
      include/net/sctp/constants.h
      net/sctp/protocol.c
  * net: annotate data race around sk_ll_usec
      include/net/busy_poll.h
      net/core/sock.c
    net/802/garp: fix memleak in garp_request_join()
    net/802/mrp: fix memleak in mrp_request_join()
  * workqueue: fix UAF in pwq_unbound_release_workfn()
      kernel/workqueue.c
  * af_unix: fix garbage collect vs MSG_PEEK
      net/unix/af_unix.c
  * net: split out functions related to registering inflight socket files
      include/net/af_unix.h
      net/Makefile
      net/unix/Kconfig
      net/unix/Makefile
      net/unix/af_unix.c
      net/unix/garbage.c
      net/unix/scm.c
      net/unix/scm.h
    KVM: x86: determine if an exception has an error code only when injecting it.
    iio: dac: ds4422/ds4424 drop of_node check
    selftest: fix build error in tools/testing/selftests/vm/userfaultfd.c
  * ANDROID: staging: ion: move buffer kmap from begin/end_cpu_access()
      drivers/staging/android/ion/ion.c
    Merge 4.19.199 into android-4.19-stable
Linux 4.19.199
  * xhci: add xhci_get_virt_ep() helper
      drivers/usb/host/xhci-ring.c
      drivers/usb/host/xhci.h
    spi: spi-fsl-dspi: Fix a resource leak in an error handling path
  * PCI: Mark AMD Navi14 GPU ATS as broken
      drivers/pci/quirks.c
    btrfs: compression: don't try to compress if we don't have enough pages
    iio: accel: bma180: Fix BMA25x bandwidth register values
    iio: accel: bma180: Use explicit member assignment
    net: bcmgenet: ensure EXT_ENERGY_DET_MASK is clear
    net: dsa: mv88e6xxx: use correct .stats_set_histogram() on Topaz
    KVM: Use kvm_pfn_t for local PFN variable in hva_to_pfn_remapped()
    KVM: do not allow mapping valid but non-reference-counted pages
    KVM: do not assume PTE is writable after follow_pfn
  * drm: Return -ENOTTY for non-drm ioctls
      drivers/gpu/drm/drm_ioctl.c
      include/drm/drm_ioctl.h
    nds32: fix up stack guard gap
    selftest: use mmap instead of posix_memalign to allocate memory
    ixgbe: Fix packet corruption due to missing DMA sync
    media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf()
  * tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop.
      kernel/trace/ring_buffer.c
    usb: dwc2: gadget: Fix sending zero length packet in DDMA mode.
    USB: serial: cp210x: add ID for CEL EM3588 USB ZigBee stick
    USB: serial: cp210x: fix comments for GE CS1000
    USB: serial: option: add support for u-blox LARA-R6 family
    usb: renesas_usbhs: Fix superfluous irqs happen after usb_pkt_pop()
    usb: max-3421: Prevent corruption of freed memory
    USB: usb-storage: Add LaCie Rugged USB3-FW to IGNORE_UAS
  * usb: hub: Fix link power management max exit latency (MEL) calculations
      drivers/usb/core/hub.c
  * usb: hub: Disable USB 3 device initiated lpm if exit latency is too high
      drivers/usb/core/hub.c
    KVM: PPC: Book3S: Fix H_RTAS rets buffer overflow
  * xhci: Fix lost USB 2 remote wake
      drivers/usb/host/xhci-hub.c
    ALSA: sb: Fix potential ABBA deadlock in CSP driver
  * ALSA: usb-audio: Add registration quirk for JBL Quantum headsets
      sound/usb/quirks.c
    s390/ftrace: fix ftrace_update_ftrace_func implementation
    Revert "MIPS: add PMD table accounting into MIPS'pmd_alloc_one"
  * proc: Avoid mixing integer types in mem_rw()
      fs/proc/base.c
    drm/panel: raspberrypi-touchscreen: Prevent double-free
  * net: sched: cls_api: Fix the the wrong parameter
      net/sched/cls_api.c
  * sctp: update active_key for asoc when old key is being replaced
      net/sctp/auth.c
  * Revert "USB: quirks: ignore remote wake-up on Fibocom L850-GL LTE modem"
      drivers/usb/core/quirks.c
    nvme-pci: don't WARN_ON in nvme_reset_work if ctrl.state is not RESETTING
    net/sched: act_skbmod: Skip non-Ethernet packets
  * net/tcp_fastopen: fix data races around tfo_active_disable_stamp
      net/ipv4/tcp_fastopen.c
    spi: cadence: Correct initialisation of runtime PM again
    scsi: target: Fix protect handling in WRITE SAME(32)
    scsi: iscsi: Fix iface sysfs attr detection
    netrom: Decrease sock refcount when sock timers expire
    KVM: PPC: Fix kvm_arch_vcpu_ioctl vcpu_load leak
    net: decnet: Fix sleeping inside in af_decnet
    net: fix uninit-value in caif_seqpkt_sendmsg
    bpftool: Check malloc return value in mount_bpffs_for_pin
    s390/bpf: Perform r1 range checking before accessing jit->seen_reg[r1]
    liquidio: Fix unintentional sign extension issue on left shift of u16
    spi: mediatek: fix fifo rx mode
    perf probe-file: Delete namelist in del_events() on the error path
    perf test bpf: Free obj_buf
    perf lzma: Close lzma stream on exit
    perf dso: Fix memory leak in dso__new_map()
    perf probe: Fix dso->nsinfo refcounting
    perf map: Fix dso->nsinfo refcounting
    nvme-pci: do not call nvme_dev_remove_admin from nvme_remove
  * ipv6: fix 'disable_policy' for fwd packets
      net/ipv6/ip6_output.c
    igb: Fix position of assignment to *ring
    igb: Check if num of q_vectors is smaller than max before array access
    iavf: Fix an error handling path in 'iavf_probe()'
    e1000e: Fix an error handling path in 'e1000_probe()'
    fm10k: Fix an error handling path in 'fm10k_probe()'
    igb: Fix an error handling path in 'igb_probe()'
    ixgbe: Fix an error handling path in 'ixgbe_probe()'
    igb: Fix use-after-free error during reset
  * net: ip_tunnel: fix mtu calculation for ETHER tunnel devices
      net/ipv4/ip_tunnel.c
  * udp: annotate data races around unix_sk(sk)->gso_size
      net/ipv4/udp.c
      net/ipv6/udp.c
    bpftool: Properly close va_list 'ap' by va_end() on error
  * ipv6: tcp: drop silly ICMPv6 packet too big messages
      net/ipv4/tcp_output.c
      net/ipv6/tcp_ipv6.c
  * tcp: annotate data races around tp->mtu_info
      net/ipv4/tcp_ipv4.c
      net/ipv6/tcp_ipv6.c
  * dma-buf/sync_file: Don't leak fences on merge failure
      drivers/dma-buf/sync_file.c
  * net: validate lwtstate->data before returning from skb_tunnel_info()
      include/net/dst_metadata.h
  * net: send SYNACK packet with accepted fwmark
      net/ipv6/tcp_ipv6.c
    net: ti: fix UAF in tlan_remove_one
    net: qcom/emac: fix UAF in emac_remove
    net: moxa: fix UAF in moxart_mac_probe
    net: bcmgenet: Ensure all TX/RX queues DMAs are disabled
  * net: bridge: sync fdb to new unicast-filtering ports
      net/bridge/br_if.c
  * netfilter: ctnetlink: suspicious RCU usage in ctnetlink_dump_helpinfo
      net/netfilter/nf_conntrack_netlink.c
  * net: ipv6: fix return value of ip6_skb_dst_mtu
      include/net/ip6_route.h
      net/ipv6/xfrm6_output.c
    net: dsa: mv88e6xxx: enable .rmu_disable() on Topaz
    dm writecache: fix writing beyond end of underlying device when shrinking
    dm writecache: return the exact table values that were set
  * mm: slab: fix kmem_cache_create failed when sysfs node not destroyed
      mm/slab_common.c
  * sched/fair: Fix CFS bandwidth hrtimer expiry type
      kernel/sched/fair.c
    scsi: libfc: Fix array index out of bound exception
    scsi: libsas: Add LUN number check in .slave_alloc callback
    scsi: aic7xxx: Fix unintentional sign extension issue on left shift of u8
    rtc: max77686: Do not enforce (incorrect) interrupt trigger type
  * kbuild: mkcompile_h: consider timestamp if KBUILD_BUILD_TIMESTAMP is set
      scripts/mkcompile_h
  * thermal/core: Correct function name thermal_zone_device_unregister()
      drivers/thermal/thermal_core.c
    arm64: dts: ls208xa: remove bus-num from dspi node
    soc/tegra: fuse: Fix Tegra234-only builds
    ARM: dts: stm32: move stmmac axi config in ethernet node on stm32mp15
    ARM: dts: stm32: fix i2c node name on stm32f746 to prevent warnings
    ARM: dts: rockchip: fix supply properties in io-domains nodes
    arm64: dts: juno: Update SCPI nodes as per the YAML schema
    ARM: dts: stm32: fix timer nodes on STM32 MCU to prevent warnings
    ARM: dts: stm32: fix RCC node name on stm32f429 MCU
    ARM: dts: stm32: fix gpio-keys node on STM32 MCU boards
    rtc: mxc_v2: add missing MODULE_DEVICE_TABLE
    ARM: imx: pm-imx5: Fix references to imx5_cpu_suspend_info
    ARM: dts: imx6: phyFLEX: Fix UART hardware flow control
    ARM: dts: Hurricane 2: Fix NAND nodes names
    ARM: dts: BCM63xx: Fix NAND nodes names
    ARM: NSP: dts: fix NAND nodes names
    ARM: Cygnus: dts: fix NAND nodes names
    ARM: brcmstb: dts: fix NAND nodes names
    reset: ti-syscon: fix to_ti_syscon_reset_data macro
    arm64: dts: rockchip: Fix power-controller node names for rk3328
    ARM: dts: rockchip: Fix power-controller node names for rk3288
    ARM: dts: rockchip: Fix IOMMU nodes properties on rk322x
    ARM: dts: rockchip: Fix the timer clocks order
    arm64: dts: rockchip: fix pinctrl sleep nodename for rk3399.dtsi
    ARM: dts: rockchip: fix pinctrl sleep nodename for rk3036-kylin and rk3288
    ARM: dts: gemini: add device_type on pci
    ARM: dts: gemini: rename mdio to the right name
  * ANDROID: generate_initcall_order.pl: Use two dash long options for llvm-nm
      scripts/generate_initcall_order.pl
  * Revert "media: subdev: disallow ioctl for saa6588/davinci"
      include/media/v4l2-subdev.h
  * ANDROID: GKI: fix up crc change in ip.h
      include/net/ip.h
    Merge 4.19.198 into android-4.19-stable
Linux 4.19.198
  * seq_file: disallow extremely large seq buffer allocations
      fs/seq_file.c
    scsi: scsi_dh_alua: Fix signedness bug in alua_rtpg()
  * net: bridge: multicast: fix PIM hello router port marking race
      net/bridge/br_multicast.c
    MIPS: vdso: Invalid GIC access through VDSO
    mips: disable branch profiling in boot/decompress.o
    mips: always link byteswap helpers into decompressor
    scsi: be2iscsi: Fix an error handling path in beiscsi_dev_probe()
    ARM: dts: imx6q-dhcom: Add gpios pinctrl for i2c bus recovery
    ARM: dts: imx6q-dhcom: Fix ethernet plugin detection problems
    ARM: dts: imx6q-dhcom: Fix ethernet reset time properties
    ARM: dts: am437x: align ti,pindir-d0-out-d1-in property with dt-shema
    ARM: dts: am335x: align ti,pindir-d0-out-d1-in property with dt-shema
    memory: fsl_ifc: fix leak of private memory on probe failure
    memory: fsl_ifc: fix leak of IO mapping on probe failure
  * reset: bail if try_module_get() fails
      drivers/reset/core.c
    ARM: dts: BCM5301X: Fixup SPI binding
    ARM: dts: r8a7779, marzen: Fix DU clock names
    arm64: dts: renesas: v3msk: Fix memory size
  * rtc: fix snprintf() checking in is_rtc_hctosys()
      drivers/rtc/rtc-proc.c
    memory: atmel-ebi: add missing of_node_put for loop iteration
    ARM: dts: exynos: fix PWM LED max brightness on Odroid XU4
    ARM: dts: exynos: fix PWM LED max brightness on Odroid HC1
    ARM: dts: exynos: fix PWM LED max brightness on Odroid XU/XU3
    reset: a10sr: add missing of_match_table reference
    hexagon: use common DISCARDS macro
    NFSv4/pNFS: Don't call _nfs4_pnfs_v3_ds_connect multiple times
    ALSA: isa: Fix error return code in snd_cmi8330_probe()
    virtio_net: move tx vq operation under tx queue lock
    x86/fpu: Limit xstate copy size in xstateregs_set()
    PCI: iproc: Support multi-MSI only on uniprocessor kernel
    PCI: iproc: Fix multi-MSI base vector number allocation
    ubifs: Set/Clear I_LINKABLE under i_lock for whiteout inode
    nfs: fix acl memory leak of posix_acl_create()
    watchdog: aspeed: fix hardware timeout calculation
    um: fix error return code in winch_tramp()
    um: fix error return code in slip_open()
    NFSv4: Initialise connection to the server in nfs4_alloc_client()
  * power: supply: rt5033_battery: Fix device tree enumeration
      drivers/power/supply/Kconfig
    PCI/sysfs: Fix dsm_label_utf16s_to_utf8s() buffer overrun
  * f2fs: add MODULE_SOFTDEP to ensure crc32 is included in the initramfs
      fs/f2fs/super.c
    virtio_console: Assure used length from device is limited
    virtio_net: Fix error handling in virtnet_restore()
    virtio-blk: Fix memory leak among suspend/resume procedure
    ACPI: video: Add quirk for the Dell Vostro 3350
    ACPI: AMBA: Fix resource name in /proc/iomem
    pwm: tegra: Don't modify HW state in .remove callback
    power: supply: ab8500: add missing MODULE_DEVICE_TABLE
    power: supply: charger-manager: add missing MODULE_DEVICE_TABLE
  * NFS: nfs_find_open_context() may only select open files
      include/linux/nfs_fs.h
    ceph: remove bogus checks and WARN_ONs from ceph_set_page_dirty
    orangefs: fix orangefs df output.
    PCI: tegra: Add missing MODULE_DEVICE_TABLE
    x86/fpu: Return proper error codes from user access functions
    watchdog: iTCO_wdt: Account for rebooting on second timeout
    watchdog: Fix possible use-after-free by calling del_timer_sync()
    watchdog: sc520_wdt: Fix possible use-after-free in wdt_turnoff()
    watchdog: Fix possible use-after-free in wdt_startup()
    ARM: 9087/1: kprobes: test-thumb: fix for LLVM_IAS=1
    power: reset: gpio-poweroff: add missing MODULE_DEVICE_TABLE
    power: supply: max17042: Do not enforce (incorrect) interrupt trigger type
    power: supply: ab8500: Avoid NULL pointers
    pwm: spear: Don't modify HW state in .remove callback
  * lib/decompress_unlz4.c: correctly handle zero-padding around initrds.
      lib/decompress_unlz4.c
  * i2c: core: Disable client irq on reboot/shutdown
      drivers/i2c/i2c-core-base.c
    intel_th: Wait until port is in reset before programming it
    staging: rtl8723bs: fix macro value for 2.4Ghz only device
    ALSA: hda: Add IRQ check for platform_get_irq()
    backlight: lm3630a: Fix return code of .update_status() callback
    powerpc/boot: Fixup device-tree on little endian
    usb: gadget: hid: fix error return code in hid_bind()
  * usb: gadget: f_hid: fix endianness issue with descriptors
      drivers/usb/gadget/function/f_hid.c
  * ALSA: bebob: add support for ToneWeal FW66
      sound/firewire/Kconfig
    Input: hideep - fix the uninitialized use in hideep_nvm_unlock()
  * ASoC: soc-core: Fix the error return code in snd_soc_of_parse_audio_routing()
      sound/soc/soc-core.c
    gpio: pca953x: Add support for the On Semi pca9655
    selftests/powerpc: Fix "no_handler" EBB selftest
    ALSA: ppc: fix error return code in snd_pmac_probe()
    gpio: zynq: Check return value of pm_runtime_get_sync
    powerpc/ps3: Add dma_mask to ps3_dma_region
    ALSA: sb: Fix potential double-free of CSP mixer elements
    selftests: timers: rtcpie: skip test if default RTC device does not exist
    s390/sclp_vt220: fix console name to match device
    mfd: da9052/stmpe: Add and modify MODULE_DEVICE_TABLE
    scsi: qedi: Fix null ref during abort handling
    scsi: iscsi: Fix shost->max_id use
  * scsi: iscsi: Fix conn use after free during resets
      include/scsi/libiscsi.h
  * scsi: iscsi: Add iscsi_cls_conn refcount helpers
      include/scsi/scsi_transport_iscsi.h
    fs/jfs: Fix missing error code in lmLogInit()
    scsi: scsi_dh_alua: Check for negative result value
    tty: serial: 8250: serial_cs: Fix a memory leak in error handling path
    ALSA: ac97: fix PM reference leak in ac97_bus_remove()
  * scsi: core: Cap scsi_host cmd_per_lun at can_queue
      drivers/scsi/hosts.c
    scsi: lpfc: Fix crash when lpfc_sli4_hba_setup() fails to initialize the SGLs
    scsi: lpfc: Fix "Unexpected timeout" error in direct attach topology
    w1: ds2438: fixing bug that would always get page0
  * Revert "ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro"
      sound/firewire/Kconfig
    misc/libmasm/module: Fix two use after free in ibmasm_init_one
    tty: serial: fsl_lpuart: fix the potential risk of division or modulo by zero
    PCI: aardvark: Fix kernel panic during PIO transfer
    PCI: aardvark: Don't rely on jiffies while holding spinlock
    tracing: Do not reference char * as a string in histograms
  * scsi: core: Fix bad pointer dereference when ehandler kthread is invalid
      drivers/scsi/hosts.c
    KVM: X86: Disable hardware breakpoints unconditionally before kvm_x86->run()
    KVM: x86: Use guest MAXPHYADDR from CPUID.0x8000_0008 iff TDP is enabled
  * smackfs: restrict bytes count in smk_set_cipso()
      security/smack/smackfs.c
    jfs: fix GPF in diFree
    pinctrl: mcp23s08: Fix missing unlock on error in mcp23s08_irq()
    media: uvcvideo: Fix pixel format change for Elgato Cam Link 4K
    media: gspca/sunplus: fix zero-length control requests
    media: gspca/sq905: fix control-request direction
    media: zr364xx: fix memory leak in zr364xx_start_readpipe
    media: dtv5100: fix control-request directions
  * media: subdev: disallow ioctl for saa6588/davinci
      include/media/v4l2-subdev.h
    PCI: aardvark: Fix checking for PIO Non-posted Request
  * PCI: Leave Apple Thunderbolt controllers on for s2idle or standby
      drivers/pci/quirks.c
    dm btree remove: assign new_root only when removal succeeds
  * coresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer()
      drivers/hwtracing/coresight/coresight-tmc-etf.c
    ipack/carriers/tpci200: Fix a double free in tpci200_pci_probe
  * tracing: Resize tgid_map to pid_max, not PID_MAX_DEFAULT
      kernel/trace/trace.c
  * tracing: Simplify & fix saved_tgids logic
      kernel/trace/trace.c
  * seq_buf: Fix overflow in seq_buf_putmem_hex()
      lib/seq_buf.c
  * power: supply: ab8500: Fix an old bug
      include/linux/mfd/abx500/ux500_chargalg.h
    ipmi/watchdog: Stop watchdog timer when the current action is 'none'
    qemu_fw_cfg: Make fw_cfg_rev_attr a proper kobj_attribute
    ASoC: tegra: Set driver_name=tegra for all machine drivers
  * clocksource/arm_arch_timer: Improve Allwinner A64 timer workaround
      drivers/clocksource/arm_arch_timer.c
  * cpu/hotplug: Cure the cpusets trainwreck
      kernel/cpu.c
    ata: ahci_sunxi: Disable DIPM
    mmc: core: Allow UHS-I voltage switch for SDSC cards if supported
    mmc: core: clear flags before allowing to retune
    mmc: sdhci: Fix warning message when accessing RPMB in HS400 mode
    drm/msm/mdp4: Fix modifier support enabling
    pinctrl/amd: Add device HID for new AMD GPIO controller
    drm/amd/display: fix incorrrect valid irq check
    drm/radeon: Add the missed drm_gem_object_put() in radeon_user_framebuffer_create()
  * usb: gadget: f_fs: Fix setting of device and driver data cross-references
      drivers/usb/gadget/function/f_fs.c
    powerpc/barrier: Avoid collision with clang's __lwsync macro
  * fuse: reject internal errno
      fs/fuse/dev.c
    serial: mvebu-uart: fix calculation of clock divisor
    serial: mvebu-uart: clarify the baud rate derivation
  * bdi: Do not use freezable workqueue
      mm/backing-dev.c
  * fscrypt: don't ignore minor_hash when hash is 0
      fs/crypto/fname.c
    MIPS: set mips32r5 for virt extensions
  * sctp: add size validation when walking chunks
      net/sctp/input.c
  * sctp: validate from_addr_param return
      include/net/sctp/structs.h
      net/sctp/bind_addr.c
      net/sctp/input.c
      net/sctp/ipv6.c
      net/sctp/protocol.c
      net/sctp/sm_make_chunk.c
    Bluetooth: btusb: fix bt fiwmare downloading failure issue for qca btsoc.
  * Bluetooth: Shutdown controller after workqueues are flushed or cancelled
      net/bluetooth/hci_core.c
  * Bluetooth: Fix the HCI to MGMT status conversion table
      net/bluetooth/mgmt.c
    RDMA/cma: Fix rdma_resolve_route() memory leak
  * net: ip: avoid OOM kills with large UDP sends over loopback
      net/ipv4/ip_output.c
      net/ipv6/ip6_output.c
    media, bpf: Do not copy more entries than user space requested
  * wireless: wext-spy: Fix out-of-bounds warning
      net/wireless/wext-spy.c
    sfc: error code if SRIOV cannot be disabled
    sfc: avoid double pci_remove of VFs
    iwlwifi: pcie: free IML DMA memory allocation
    iwlwifi: mvm: don't change band on bound PHY contexts
    RDMA/rxe: Don't overwrite errno from ib_umem_get()
    vsock: notify server to shutdown when client has pending signal
    atm: nicstar: register the interrupt handler in the right place
    atm: nicstar: use 'dma_free_coherent' instead of 'kfree'
    MIPS: add PMD table accounting into MIPS'pmd_alloc_one
    rtl8xxxu: Fix device info for RTL8192EU devices
  * net: fix mistake path for netdev_features_strings
      include/linux/netdev_features.h
      include/uapi/linux/ethtool.h
    cw1200: add missing MODULE_DEVICE_TABLE
    wl1251: Fix possible buffer overflow in wl1251_cmd_scan
    wlcore/wl12xx: Fix wl12xx get_mac error if device is in ELP
  * xfrm: Fix error reporting in xfrm_state_construct.
      net/xfrm/xfrm_user.c
  * selinux: use __GFP_NOWARN with GFP_NOWAIT in the AVC
      security/selinux/avc.c
    fjes: check return value after calling platform_get_resource()
    net: micrel: check return value after calling platform_get_resource()
    net: mvpp2: check return value after calling platform_get_resource()
    net: bcmgenet: check return value after calling platform_get_resource()
    virtio_net: Remove BUG() to avoid machine dead
    ice: set the value of global config lock timeout longer
    pinctrl: mcp23s08: fix race condition in irq handler
    dm space maps: don't reset space map allocation cursor when committing
    RDMA/cxgb4: Fix missing error code in create_qp()
  * ipv6: use prandom_u32() for ID generation
      net/ipv6/output_core.c
    clk: tegra: Ensure that PLLU configuration is applied properly
    clk: renesas: r8a77995: Add ZA2 clock
    e100: handle eeprom as little endian
    udf: Fix NULL pointer dereference in udf_symlink function
    drm/virtio: Fix double free on probe failure
    reiserfs: add check for invalid 1st journal block
  * net: Treat __napi_schedule_irqoff() as __napi_schedule() on PREEMPT_RT
      net/core/dev.c
    atm: nicstar: Fix possible use-after-free in nicstar_cleanup()
    mISDN: fix possible use-after-free in HFC_cleanup()
    atm: iphase: fix possible use-after-free in ia_module_exit()
    hugetlb: clear huge pte during flush function on mips platform
    drm/amd/display: fix use_max_lb flag for 420 pixel formats
    net: pch_gbe: Use proper accessors to BE data in pch_ptp_match()
    drm/amd/amdgpu/sriov disable all ip hw status by default
  * drm/zte: Don't select DRM_KMS_FB_HELPER
      drivers/gpu/drm/zte/Kconfig
  * drm/mxsfb: Don't select DRM_KMS_FB_HELPER
      drivers/gpu/drm/mxsfb/Kconfig
    mmc: vub3000: fix control-request direction
    mmc: block: Disable CMDQ on the ioctl path
    perf llvm: Return -ENOMEM when asprintf() fails
    selftests/vm/pkeys: fix alloc_random_pkey() to make it really, really random
    mm/huge_memory.c: don't discard hugepage if other processes are mapping it
    vfio/pci: Handle concurrent vma faults
    arm64: dts: marvell: armada-37xx: Fix reg for standard variant of UART
    serial: mvebu-uart: correctly calculate minimal possible baudrate
    powerpc: Offline CPU in stop_this_cpu()
    leds: ktd2692: Fix an error handling path
    leds: as3645a: Fix error return code in as3645a_parse_node()
  * configfs: fix memleak in configfs_release_bin_file
      fs/configfs/file.c
    ASoC: atmel-i2s: Fix usage of capture and playback at the same time
    extcon: max8997: Add missing modalias string
    extcon: sm5502: Drop invalid register write in sm5502_reg_data
    phy: ti: dm816x: Fix the error handling path in 'dm816x_usb_phy_probe()
    scsi: mpt3sas: Fix error return value in _scsih_expander_add()
    mtd: rawnand: marvell: add missing clk_disable_unprepare() on error in marvell_nfc_resume()
  * of: Fix truncation of memory sizes on 32-bit platforms
      drivers/of/fdt.c
      drivers/of/of_reserved_mem.c
    ASoC: cs42l42: Correct definition of CS42L42_ADC_PDN_MASK
    iio: prox: isl29501: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
    serial: 8250: Actually allow UPF_MAGIC_MULTIPLIER baud rates
    staging: mt7621-dts: fix pci address for PCI memory range
    staging: gdm724x: check for overflow in gdm_lte_netif_rx()
    staging: gdm724x: check for buffer overflow in gdm_lte_multi_sdu_pkt()
    iio: adc: ti-ads8688: Fix alignment of buffer in iio_push_to_buffers_with_timestamp()
    iio: adc: mxs-lradc: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
    iio: adc: hx711: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
    eeprom: idt_89hpesx: Restore printing the unsupported fwnode name
    eeprom: idt_89hpesx: Put fwnode in matching case during ->probe()
    s390: appldata depends on PROC_SYSCTL
    visorbus: fix error return code in visorchipset_init()
    fsi/sbefifo: Fix reset timeout
    fsi/sbefifo: Clean up correct FIFO when receiving reset request from SBE
    fsi: scom: Reset the FSI2PIB engine for any error
    fsi: core: Fix return of error values on failures
    scsi: FlashPoint: Rename si_flags field
    tty: nozomi: Fix the error handling path of 'nozomi_card_init()'
    char: pcmcia: error out if 'num_bytes_read' is greater than 4 in set_protocol()
    Input: hil_kbd - fix error return code in hil_dev_connect()
    ASoC: rsnd: tidyup loop on rsnd_adg_clk_query()
    ASoC: hisilicon: fix missing clk_disable_unprepare() on error in hi6210_i2s_startup()
    iio: potentiostat: lmp91000: Fix alignment of buffer in iio_push_to_buffers_with_timestamp()
    iio: light: tcs3472: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
    iio: light: tcs3414: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
    iio: light: isl29125: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
    iio: prox: as3935: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
    iio: prox: pulsed-light: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
    iio: prox: srf08: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
    iio: humidity: am2315: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
    iio: gyro: bmg160: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
    iio: adc: vf610: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
    iio: adc: ti-ads1015: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
    iio: accel: stk8ba50: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
    iio: accel: stk8312: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
    iio: accel: kxcjk-1013: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
    iio: accel: hid: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
    iio: accel: bma220: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
    iio: accel: bma180: Fix buffer alignment in iio_push_to_buffers_with_timestamp()
    iio: adis_buffer: do not return ints in irq handlers
    mwifiex: re-fix for unaligned accesses
    tty: nozomi: Fix a resource leak in an error handling function
    RDMA/mlx5: Don't access NULL-cleared mpi pointer
    net: sched: fix warning in tcindex_alloc_perfect_hash
  * net: lwtunnel: handle MTU calculation in forwading
      include/net/ip.h
      include/net/ip6_route.h
      net/ipv4/route.c
  * writeback: fix obtain a reference to a freeing memcg css
      fs/fs-writeback.c
  * Bluetooth: Fix handling of HCI_LE_Advertising_Set_Terminated event
      net/bluetooth/hci_event.c
  * Bluetooth: mgmt: Fix slab-out-of-bounds in tlv_data_is_valid
      net/bluetooth/mgmt.c
  * ipv6: fix out-of-bound access in ip6_parse_tlv()
      net/ipv6/exthdrs.c
    ibmvnic: free tx_pool if tso_pool alloc fails
    Revert "ibmvnic: remove duplicate napi_schedule call in open function"
    i40e: Fix autoneg disabling for non-10GBaseT links
    i40e: Fix error handling in i40e_vsi_open
  * bpf: Do not change gso_size during bpf_skb_change_proto()
      net/core/filter.c
  * ipv6: exthdrs: do not blindly use init_net
      net/ipv6/exthdrs.c
    net: bcmgenet: Fix attaching to PYH failed on RPi 4B
    mac80211: remove iwlwifi specific workaround NDPs of null_response
    ieee802154: hwsim: avoid possible crash in hwsim_del_edge_nl()
    ieee802154: hwsim: Fix memory leak in hwsim_add_one
  * net/ipv4: swap flow ports when validating source
      net/ipv4/fib_frontend.c
    vxlan: add missing rcu_read_lock() in neigh_reduce()
    pkt_sched: sch_qfq: fix qfq_change_class() error path
    net: ethernet: ezchip: fix error handling
    net: ethernet: ezchip: fix UAF in nps_enet_remove
    net: ethernet: aeroflex: fix UAF in greth_of_remove
    samples/bpf: Fix the error return code of xdp_redirect's main()
    RDMA/rxe: Fix qp reference counting for atomic ops
    netfilter: nft_tproxy: restrict support to TCP and UDP transport protocols
    netfilter: nft_osf: check for TCP packet before further processing
    netfilter: nft_exthdr: check for IPv6 packet before further processing
    RDMA/mlx5: Don't add slave port to unaffiliated list
  * netlabel: Fix memory leak in netlbl_mgmt_add_common
      net/netlabel/netlabel_mgmt.c
    ath10k: Fix an error code in ath10k_add_interface()
    brcmsmac: mac80211_if: Fix a resource leak in an error handling path
    brcmfmac: correctly report average RSSI in station info
    brcmfmac: fix setting of station info chains bitmask
    ssb: Fix error return code in ssb_bus_scan()
    wcn36xx: Move hal_buf allocation to devm_kmalloc in probe
    ieee802154: hwsim: Fix possible memory leak in hwsim_subscribe_all_others
  * wireless: carl9170: fix LEDS build errors & warnings
      drivers/net/wireless/ath/carl9170/Kconfig
    tools/bpftool: Fix error return code in do_batch()
    drm: qxl: ensure surf.data is ininitialized
    RDMA/rxe: Fix failure during driver load
    ehea: fix error return code in ehea_restart_qps()
    drm/rockchip: cdn-dp-core: add missing clk_disable_unprepare() on error in cdn_dp_grf_write()
    net: pch_gbe: Propagate error from devm_gpio_request_one()
    net: mvpp2: Put fwnode in error case during ->probe()
    ocfs2: fix snprintf() checking
    blk-wbt: make sure throttle is enabled properly
  * blk-wbt: introduce a new disable state to prevent false positive by rwb_enabled()
      block/blk-wbt.h
    ACPI: sysfs: Fix a buffer overrun problem with description_show()
    crypto: nx - Fix RCU warning in nx842_OF_upd_status
    spi: spi-sun6i: Fix chipselect/clock bug
    btrfs: clear log tree recovering status if starting transaction fails
    hwmon: (max31790) Fix fan speed reporting for fan7..12
    hwmon: (max31722) Remove non-standard ACPI device IDs
    media: s5p-g2d: Fix a memory leak on ctx->fh.m2m_ctx
    mmc: usdhi6rol0: fix error return code in usdhi6_probe()
    media: siano: Fix out-of-bounds warnings in smscore_load_firmware_family2()
    media: gspca/gl860: fix zero-length control requests
    media: tc358743: Fix error return code in tc358743_probe_of()
    media: exynos4-is: Fix a use after free in isp_video_release
    pata_ep93xx: fix deferred probing
    media: rc: i2c: Fix an error message
    crypto: ccp - Fix a resource leak in an error handling path
    evm: fix writing <securityfs>/evm overflow
    pata_octeon_cf: avoid WARN_ON() in ata_host_activate()
    media: I2C: change 'RST' to "RSET" to fix multiple build errors
    pata_rb532_cf: fix deferred probing
    sata_highbank: fix deferred probing
    crypto: ux500 - Fix error return code in hash_hw_final()
    crypto: ixp4xx - dma_unmap the correct address
    media: s5p_cec: decrement usage count if disabled
    ia64: mca_drv: fix incorrect array size calculation
    HID: wacom: Correct base usage for capacitive ExpressKey status bits
    ACPI: tables: Add custom DSDT file as makefile prerequisite
  * clocksource: Retry clock read if long delays detected
      kernel/time/clocksource.c
    platform/x86: toshiba_acpi: Fix missing error code in toshiba_acpi_setup_keyboard()
    ACPI: bus: Call kobject_put() in acpi_init() error path
    ACPICA: Fix memory leak caused by _CID repair function
    fs: dlm: fix memory leak when fenced
  * random32: Fix implicit truncation warning in prandom_seed_state()
      include/linux/prandom.h
    fs: dlm: cancel work sync othercon
  * block_dump: remove block_dump feature in mark_inode_dirty()
      fs/fs-writeback.c
    ACPI: EC: Make more Asus laptops use ECDT _GPE
  * lib: vsprintf: Fix handling of number field widths in vsscanf
      lib/kstrtox.c
      lib/kstrtox.h
      lib/vsprintf.c
    hv_utils: Fix passing zero to 'PTR_ERR' warning
    ACPI: processor idle: Fix up C-state latency if not ordered
    EDAC/ti: Add missing MODULE_DEVICE_TABLE
  * HID: do not use down_interruptible() when unbinding devices
      drivers/hid/hid-core.c
    regulator: da9052: Ensure enough delay time for .set_voltage_time_sel
  * btrfs: disable build on platforms having page size 256K
      fs/btrfs/Kconfig
    btrfs: abort transaction if we fail to update the delayed inode
    btrfs: fix error handling in __btrfs_update_delayed_inode
    media: imx-csi: Skip first few frames from a BT.656 source
    media: siano: fix device register error path
    media: dvb_net: avoid speculation from net slot
  * crypto: shash - avoid comparing pointers to exported functions under CFI
      crypto/shash.c
      include/crypto/internal/hash.h
    mmc: via-sdmmc: add a check against NULL pointer dereference
    media: dvd_usb: memory leak in cinergyt2_fe_attach
    media: st-hva: Fix potential NULL pointer dereferences
    media: bt8xx: Fix a missing check bug in bt878_probe
  * media: v4l2-core: Avoid the dangling pointer in v4l2_fh_release
      drivers/media/v4l2-core/v4l2-fh.c
    media: em28xx: Fix possible memory leak of em28xx struct
  * sched/fair: Fix ascii art by relpacing tabs
      kernel/sched/fair.c
    crypto: qat - remove unused macro in FW loader
    crypto: qat - check return code of qat_hal_rd_rel_reg()
    media: pvrusb2: fix warning in pvr2_i2c_core_done
    media: cobalt: fix race condition in setting HPD
    media: cpia2: fix memory leak in cpia2_usb_probe
    crypto: nx - add missing MODULE_DEVICE_TABLE
    regulator: uniphier: Add missing MODULE_DEVICE_TABLE
    spi: omap-100k: Fix the length judgment problem
    spi: spi-topcliff-pch: Fix potential double free in pch_spi_process_messages()
    spi: spi-loopback-test: Fix 'tx_buf' might be 'rx_buf'
  * spi: Make of_register_spi_device also set the fwnode
      drivers/spi/spi.c
  * fuse: check connected before queueing on fpq->io
      fs/fuse/dev.c
    evm: Refuse EVM_ALLOW_METADATA_WRITES only if an HMAC key is loaded
    evm: Execute evm_inode_init_security() only when an HMAC key is loaded
    powerpc/stacktrace: Fix spurious "stale" traces in raise_backtrace_ipi()
  * seq_buf: Make trace_seq_putmem_hex() support data longer than 8
      lib/seq_buf.c
  * tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing
      include/linux/tracepoint.h
      kernel/trace/bpf_trace.c
      kernel/tracepoint.c
    tracing/histograms: Fix parsing of "sym-offset" modifier
    rsi: fix AP mode with WPA failure due to encrypted EAPOL
    rsi: Assign beacon rate settings to the correct rate_info descriptor field
    ssb: sdio: Don't overwrite const buffer if block_write fails
    ath9k: Fix kernel NULL pointer dereference during ath_reset_internal()
    serial_cs: remove wrong GLOBETROTTER.cis entry
    serial_cs: Add Option International GSM-Ready 56K/ISDN modem
    serial: sh-sci: Stop dmaengine transfer in sci_stop_tx()
    iio: ltr501: ltr501_read_ps(): add missing endianness conversion
    iio: ltr501: ltr559: fix initialization of LTR501_ALS_CONTR
    iio: ltr501: mark register holding upper 8 bits of ALS_DATA{0,1} and PS_DATA as volatile, too
    iio: light: tcs3472: do not free unallocated IRQ
    rtc: stm32: Fix unbalanced clk_disable_unprepare() on probe error path
    s390/cio: dont call css_wait_for_slow_path() inside a lock
    SUNRPC: Should wake up the privileged task firstly.
    SUNRPC: Fix the batch tasks count wraparound.
    can: peak_pciefd: pucan_handle_status(): fix a potential starvation issue in TX path
    can: gw: synchronize rcu operations before removing gw job entry
    can: bcm: delay release of struct bcm_op after synchronize_rcu()
  * ext4: use ext4_grp_locked_error in mb_find_extent
      fs/ext4/mballoc.c
  * ext4: fix avefreec in find_group_orlov
      fs/ext4/ialloc.c
  * ext4: remove check for zero nr_to_scan in ext4_es_scan()
      fs/ext4/extents_status.c
  * ext4: correct the cache_nr in tracepoint ext4_es_shrink_exit
      fs/ext4/extents_status.c
  * ext4: return error code when ext4_fill_flex_info() fails
      fs/ext4/super.c
  * ext4: fix kernel infoleak via ext4_extent_header
      fs/ext4/extents.c
  * ext4: cleanup in-core orphan list if ext4_truncate() failed to get a transaction handle
      fs/ext4/super.c
    btrfs: clear defrag status of a root if starting transaction fails
    btrfs: send: fix invalid path for unlink operations after parent orphanization
    ARM: dts: at91: sama5d4: fix pinctrl muxing
    arm_pmu: Fix write counter incorrect in ARMv7 big-endian mode
    Input: joydev - prevent use of not validated data in JSIOCSBTNMAP ioctl
  * iov_iter_fault_in_readable() should do nothing in xarray case
      lib/iov_iter.c
    ntfs: fix validity check for file name attribute
  * xhci: solve a double free problem while doing s4
      drivers/usb/host/xhci-mem.c
  * usb: typec: Add the missed altmode_id_remove() in typec_register_altmode()
      drivers/usb/typec/class.c
  * usb: dwc3: Fix debugfs creation flow
      drivers/usb/dwc3/core.c
    USB: cdc-acm: blacklist Heimann USB Appset device
    usb: gadget: eem: fix echo command packet response issue
    net: can: ems_usb: fix use-after-free in ems_usb_disconnect()
    Input: usbtouchscreen - fix control-request directions
    media: dvb-usb: fix wrong definition
  * ALSA: usb-audio: Fix OOB access at proc output
      sound/usb/mixer.c
  * ALSA: usb-audio: fix rate on Ozone Z90 USB headset
      sound/usb/format.c
  * scsi: core: Retry I/O for Notify (Enable Spinup) Required error
      drivers/scsi/scsi_lib.c
  * Revert "clocksource/drivers/timer-ti-dm: Handle dra7 timer wrap errata i940"
      include/linux/cpuhotplug.h
    Merge 4.19.197 into android-4.19-stable
Linux 4.19.197
  * clocksource/drivers/timer-ti-dm: Handle dra7 timer wrap errata i940
      include/linux/cpuhotplug.h
    clocksource/drivers/timer-ti-dm: Prepare to handle dra7 timer wrap issue
    clocksource/drivers/timer-ti-dm: Add clockevent and clocksource support
    ARM: OMAP: replace setup_irq() by request_irq()
    KVM: SVM: Call SEV Guest Decommission if ASID binding fails
    xen/events: reset active flag for lateeoi events later
  * kthread: prevent deadlock when kthread_mod_delayed_work() races with kthread_cancel_delayed_work_sync()
      kernel/kthread.c
  * kthread_worker: split code for canceling the delayed work timer
      kernel/kthread.c
    ARM: dts: imx6qdl-sabresd: Remove incorrect power supply assignment
    KVM: SVM: Periodically schedule when unregistering regions on destroy
  * ext4: eliminate bogus error in ext4_data_block_valid_rcu()
      fs/ext4/block_validity.c
    drm/nouveau: fix dma_address check for CPU/GPU sync
    scsi: sr: Return appropriate error code when disk is ejected
  * mm, futex: fix shared futex pgoff on shmem huge page
      include/linux/hugetlb.h
      include/linux/pagemap.h
      kernel/futex.c
  * mm/thp: another PVMW_SYNC fix in page_vma_mapped_walk()
      mm/page_vma_mapped.c
  * mm/thp: fix page_vma_mapped_walk() if THP mapped by ptes
      mm/page_vma_mapped.c
  * mm: page_vma_mapped_walk(): get vma_address_end() earlier
      mm/page_vma_mapped.c
  * mm: page_vma_mapped_walk(): use goto instead of while (1)
      mm/page_vma_mapped.c
  * mm: page_vma_mapped_walk(): add a level of indentation
      mm/page_vma_mapped.c
  * mm: page_vma_mapped_walk(): crossing page table boundary
      mm/page_vma_mapped.c
  * mm: page_vma_mapped_walk(): prettify PVMW_MIGRATION block
      mm/page_vma_mapped.c
  * mm: page_vma_mapped_walk(): use pmde for *pvmw->pmd
      mm/page_vma_mapped.c
  * mm: page_vma_mapped_walk(): settle PageHuge on entry
      mm/page_vma_mapped.c
  * mm: page_vma_mapped_walk(): use page for pvmw->page
      mm/page_vma_mapped.c
    mm: thp: replace DEBUG_VM BUG with VM_WARN when unmap fails for split
  * mm/thp: unmap_mapping_page() to fix THP truncate_cleanup_page()
      include/linux/mm.h
      mm/memory.c
      mm/truncate.c
  * mm/thp: fix page_address_in_vma() on file THP tails
      mm/rmap.c
  * mm/thp: fix vma_address() if virtual address below file offset
      mm/internal.h
      mm/page_vma_mapped.c
      mm/rmap.c
  * mm/thp: try_to_unmap() use TTU_SYNC for safe splitting
      include/linux/rmap.h
      mm/page_vma_mapped.c
      mm/rmap.c
  * mm/thp: make is_huge_zero_pmd() safe and quicker
      include/linux/huge_mm.h
  * mm/thp: fix __split_huge_pmd_locked() on shmem migration entry
      mm/pgtable-generic.c
  * mm/rmap: use page_not_mapped in try_to_unmap()
      mm/rmap.c
  * mm/rmap: remove unneeded semicolon in page_not_mapped()
      mm/rmap.c
  * mm: add VM_WARN_ON_ONCE_PAGE() macro
      include/linux/mmdebug.h

Bug: 196282886
Change-Id: I0555a0539a4547b90a2647a24737b194add45248
Signed-off-by: Lucas Wei <lucaswei@google.com>
2021-08-18 20:49:33 +08:00
Lucas Wei
6db4d918f5 Merge android-4.19-stable (4.19.196) into android-msm-pixel-4.19-sc-lts
Merge 4.19.196 into android-4.19-stable
Linux 4.19.196
    i2c: robotfuzz-osif: fix control-request directions
    nilfs2: fix memory leak in nilfs_sysfs_delete_device_group
    pinctrl: stm32: fix the reported number of GPIO lines per bank
    net: ll_temac: Avoid ndo_start_xmit returning NETDEV_TX_BUSY
    PCI: Add AMD RS690 quirk to enable 64-bit DMA
    net: qed: Fix memcpy() overflow of qed_dcbx_params()
    KVM: selftests: Fix kvm_check_cap() assertion
    r8169: Avoid memcpy() over-reading of ETH_SS_STATS
    sh_eth: Avoid memcpy() over-reading of ETH_SS_STATS
  * r8152: Avoid memcpy() over-reading of ETH_SS_STATS
      drivers/net/usb/r8152.c
  * net/packet: annotate accesses to po->ifindex
      net/packet/af_packet.c
  * net/packet: annotate accesses to po->bind
      net/packet/af_packet.c
    net: caif: fix memory leak in ldisc_open
  * inet: annotate date races around sk->sk_txhash
      include/net/sock.h
  * ping: Check return value of function 'ping_queue_rcv_skb'
      net/ipv4/ping.c
  * net: ethtool: clear heap allocations for ethtool function
      net/core/ethtool.c
    mac80211: drop multicast fragments
  * cfg80211: call cfg80211_leave_ocb when switching away from OCB
      net/wireless/util.c
    mac80211: remove warning in ieee80211_get_sband()
  * Revert "PCI: PM: Do not read power state in pci_enable_device_flags()"
      drivers/pci/pci.c
    MIPS: generic: Update node names to avoid unit addresses
  * Makefile: Move -Wno-unused-but-set-variable out of GCC only block
      Makefile
    ARM: 9081/1: fix gcc-10 thumb2-kernel regression
    drm/radeon: wait for moving fence after pinning
    drm/nouveau: wait for moving fence after pinning v2
  * module: limit enabling module.sig_enforce
      kernel/module.c
    x86/fpu: Reset state for all signal restore failures
  * usb: dwc3: core: fix kernel panic when do reboot
      drivers/usb/dwc3/core.c
  * usb: dwc3: debugfs: Add and remove endpoint dirs dynamically
      drivers/usb/dwc3/debug.h
      drivers/usb/dwc3/debugfs.c
      drivers/usb/dwc3/gadget.c
  * inet: use bigger hash table for IP ID generation
      net/ipv4/route.c
    can: bcm/raw/isotp: use per module netdevice notifier
    KVM: arm/arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST read
    tools headers UAPI: Sync linux/in.h copy with the kernel sources
    net: fec_ptp: add clock rate zero check
  * mm/slub.c: include swab.h
      mm/slub.c
  * mm/slub: clarify verification reporting
      mm/slub.c
    net: bridge: fix vlan tunnel dst refcnt when egressing
  * net: bridge: fix vlan tunnel dst null pointer dereference
      net/bridge/br_private.h
  * cfg80211: make certificate generation more robust
      net/wireless/Makefile
    dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc
    ARCv2: save ABI registers across signal handling
  * PCI: Work around Huawei Intelligent NIC VF FLR erratum
      drivers/pci/quirks.c
  * PCI: Add ACS quirk for Broadcom BCM57414 NIC
      drivers/pci/quirks.c
  * PCI: Mark some NVIDIA GPUs to avoid bus reset
      drivers/pci/quirks.c
  * PCI: Mark TI C667X to avoid bus reset
      drivers/pci/quirks.c
  * tracing: Do no increment trace_clock_global() by one
      kernel/trace/trace_clock.c
  * tracing: Do not stop recording comms if the trace file is being read
      kernel/trace/trace.c
  * tracing: Do not stop recording cmdlines when tracing is off
      kernel/trace/trace.c
  * usb: core: hub: Disable autosuspend for Cypress CY7C65632
      drivers/usb/core/hub.c
    can: mcba_usb: fix memory leak in mcba_usb
    can: bcm: fix infoleak in struct bcm_msg_head
    hwmon: (scpi-hwmon) shows the negative temperature properly
    radeon: use memcpy_to/fromio for UVD fw upload
    pinctrl: ralink: rt2880: avoid to error in calls is pin is already enabled
    ASoC: rt5659: Fix the lost powers for the HDA header
    net: ethernet: fix potential use-after-free in ec_bhf_remove
  * icmp: don't send out ICMP messages with a source address of 0.0.0.0
      include/uapi/linux/in.h
      net/ipv4/icmp.c
    net: cdc_eem: fix tx fixup skb leak
    net: hamradio: fix memory leak in mkiss_close
    be2net: Fix an error handling path in 'be_probe()'
  * net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock
      net/unix/af_unix.c
  * net: ipv4: fix memory leak in ip_mc_add1_src
      net/ipv4/igmp.c
    net: fec_ptp: fix issue caused by refactor the fec_devtype
    net: usb: fix possible use-after-free in smsc75xx_bind
  * net: cdc_ncm: switch to eth%d interface naming
      drivers/net/usb/cdc_ncm.c
  * ptp: improve max_adj check against unreasonable values
      drivers/ptp/ptp_clock.c
      include/linux/ptp_clock_kernel.h
  * ptp: ptp_clock: Publish scaled_ppm_to_ppb
      drivers/ptp/ptp_clock.c
      include/linux/ptp_clock_kernel.h
  * net: qrtr: fix OOB Read in qrtr_endpoint_post
      net/qrtr/qrtr.c
    netxen_nic: Fix an error handling path in 'netxen_nic_probe()'
    qlcnic: Fix an error handling path in 'qlcnic_probe()'
  * net: make get_net_ns return error if NET_NS is disabled
      include/linux/socket.h
      include/net/net_namespace.h
      net/core/net_namespace.c
      net/socket.c
  * net: add documentation to socket.c
      include/linux/net.h
      include/linux/socket.h
      net/socket.c
    net: stmmac: dwmac1000: Fix extended MAC address registers definition
    alx: Fix an error handling path in 'alx_probe()'
    sch_cake: Fix out of bounds when parsing TCP options and header
    netfilter: synproxy: Fix out of bounds when parsing TCP options
    net/mlx5e: Block offload of outer header csum for UDP tunnels
    net/mlx5e: Remove dependency in IPsec initialization flows
  * rtnetlink: Fix regression in bridge VLAN configuration
      net/core/rtnetlink.c
  * udp: fix race between close() and udp_abort()
      net/ipv4/udp.c
      net/ipv6/udp.c
    net: rds: fix memory leak in rds_recvmsg
  * net: ipv4: fix memory leak in netlbl_cipsov4_add_std
      net/ipv4/cipso_ipv4.c
    batman-adv: Avoid WARN_ON timing related checks
    mm/memory-failure: make sure wait for page writeback in memory_failure
    afs: Fix an IS_ERR() vs NULL check
    dmaengine: stedma40: add missing iounmap() on error in d40_probe()
  * dmaengine: QCOM_HIDMA_MGMT depends on HAS_IOMEM
      drivers/dma/qcom/Kconfig
  * dmaengine: ALTERA_MSGDMA depends on HAS_IOMEM
      drivers/dma/Kconfig
  * fib: Return the correct errno code
      net/core/fib_rules.c
  * net: Return the correct errno code
      net/compat.c
    net/x25: Return the correct errno code
  * rtnetlink: Fix missing error code in rtnl_bridge_notify()
      net/core/rtnetlink.c
  * net: ipconfig: Don't override command-line hostnames or domains
      net/ipv4/ipconfig.c
    nvme-loop: check for NVME_LOOP_Q_LIVE in nvme_loop_destroy_admin_queue()
    nvme-loop: clear NVME_LOOP_Q_LIVE when nvme_loop_configure_admin_queue() fails
    nvme-loop: reset queue count to 1 in nvme_loop_destroy_io_queues()
  * scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V
      drivers/scsi/scsi_devinfo.c
    ethernet: myri10ge: Fix missing error code in myri10ge_probe()
    scsi: target: core: Fix warning on realtime kernels
    gfs2: Fix use-after-free in gfs2_glock_shrink_scan
    HID: gt683r: add missing MODULE_DEVICE_TABLE
    gfs2: Prevent direct-I/O write fallback errors from getting lost
    ARM: OMAP2+: Fix build warning when mmc_omap is not built
  * HID: usbhid: fix info leak in hid_submit_ctrl
      drivers/hid/usbhid/hid-core.c
      include/linux/hid.h
  * HID: Add BUS_VIRTUAL to hid_connect logging
      drivers/hid/hid-core.c
    HID: hid-sensor-hub: Return error for hid_set_field() failure
  * HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for Saitek X65
      drivers/hid/hid-ids.h
      drivers/hid/hid-quirks.c
    net: ieee802154: fix null deref in parse dev addr
  * FROMGIT: bpf: Do not change gso_size during bpf_skb_change_proto()
      net/core/filter.c
    ANDROID: gki_config: disable per-cgroup pressure tracking
  * BACKPORT: cgroup: make per-cgroup pressure stall tracking configurable
      include/linux/cgroup-defs.h
      include/linux/cgroup.h
      kernel/cgroup/cgroup.c
      kernel/sched/psi.c
  * ANDROID: selinux: modify RTM_GETNEIGH{TBL}
      security/selinux/include/classmap.h
      security/selinux/include/security.h
      security/selinux/nlmsgtab.c
      security/selinux/ss/policydb.c
      security/selinux/ss/policydb.h
      security/selinux/ss/services.c
    BACKPORT: x86, lto: Pass -stack-alignment only on LLD < 13.0.0
  * ANDROID: Add CONFIG_LLD_VERSION
      init/Kconfig
      scripts/lld-version.sh
    ANDROID: GKI: Update the ABI XML
    ANDROID: GKI: Update the symbol list
  * Revert "perf/core: Fix endless multiplex timer"
      kernel/events/core.c
    Merge 4.19.195 into android-4.19-stable
Linux 4.19.195
  * proc: only require mm_struct for writing
      fs/proc/base.c
  * tracing: Correct the length check which causes memory corruption
      kernel/trace/trace.c
    ftrace: Do not blindly read the ip address in ftrace_bug()
  * scsi: core: Only put parent device if host state differs from SHOST_CREATED
      drivers/scsi/hosts.c
  * scsi: core: Put .shost_dev in failure path if host state changes to RUNNING
      drivers/scsi/hosts.c
  * scsi: core: Fix error handling of scsi_host_alloc()
      drivers/scsi/hosts.c
    NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error.
    NFSv4: Fix second deadlock in nfs4_evict_inode()
    NFS: Fix use-after-free in nfs4_init_client()
  * kvm: fix previous commit for 32-bit builds
      include/linux/kvm_host.h
    perf session: Correct buffer copying when peeking events
    NFSv4: Fix deadlock between nfs4_evict_inode() and nfs4_opendata_get_inode()
    NFS: Fix a potential NULL dereference in nfs_get_client()
    IB/mlx5: Fix initializing CQ fragments buffer
  * sched/fair: Make sure to update tg contrib for blocked load
      kernel/sched/fair.c
  * perf: Fix data race between pin_count increment/decrement
      kernel/events/core.c
  * vmlinux.lds.h: Avoid orphan section with !SMP
      include/asm-generic/vmlinux.lds.h
  * RDMA/mlx4: Do not map the core_clock page to user space unless enabled
      include/linux/mlx4/device.h
    regulator: max77620: Use device_set_of_node_from_dev()
  * regulator: core: resolve supply for boot-on/always-on regulators
      drivers/regulator/core.c
  * usb: fix various gadget panics on 10gbps cabling
      drivers/usb/gadget/config.c
  * usb: fix various gadgets null ptr deref on 10gbps cabling.
      drivers/usb/gadget/function/f_hid.c
    usb: gadget: eem: fix wrong eem header operation
    USB: serial: cp210x: fix alternate function for CP2102N QFN20
    USB: serial: quatech2: fix control-request directions
    USB: serial: omninet: add device id for Zyxel Omni 56K Plus
    USB: serial: ftdi_sio: add NovaTech OrionMX product ID
  * usb: gadget: f_fs: Ensure io_completion_wq is idle during unbind
      drivers/usb/gadget/function/f_fs.c
    usb: typec: ucsi: Clear PPM capability data in ucsi_init() error path
  * usb: dwc3: ep0: fix NULL pointer exception
      drivers/usb/dwc3/ep0.c
  * usb: pd: Set PD_T_SINK_WAIT_CAP to 310ms
      include/linux/usb/pd.h
  * usb: f_ncm: only first packet of aggregate needs to start timer
      drivers/usb/gadget/function/f_ncm.c
  * USB: f_ncm: ncm_bitrate (speed) is unsigned
      drivers/usb/gadget/function/f_ncm.c
  * cgroup1: don't allow '\n' in renaming
      kernel/cgroup/cgroup-v1.c
    btrfs: return value from btrfs_mark_extent_written() in case of error
    staging: rtl8723bs: Fix uninitialized variables
  * kvm: avoid speculation-based attacks from out-of-range memslot accesses
      include/linux/kvm_host.h
  * drm: Lock pointer access in drm_master_release()
      drivers/gpu/drm/drm_auth.c
  * drm: Fix use-after-free read in drm_getunique()
      drivers/gpu/drm/drm_ioctl.c
    ARM: dts: imx6q-dhcom: Add PU,VDD1P1,VDD2P5 regulators
    ARM: dts: imx6qdl-sabresd: Assign corresponding power supply for LDOs
    i2c: mpc: implement erratum A-004447 workaround
    i2c: mpc: Make use of i2c_recover_bus()
    powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P1010 i2c controllers
    powerpc/fsl: set fsl,i2c-erratum-a004447 flag for P2041 i2c controllers
    bnx2x: Fix missing error code in bnx2x_iov_init_one()
    MIPS: Fix kernel hang under FUNCTION_GRAPH_TRACER and PREEMPT_TRACER
    nvme-fabrics: decode host pathing error for connect
    net: appletalk: cops: Fix data race in cops_probe1
    net: macb: ensure the device is available before accessing GEMGXL control registers
    scsi: target: qla2xxx: Wait for stop_phase1 at WWN removal
    scsi: vmw_pvscsi: Set correct residual data length
    scsi: bnx2fc: Return failure if io_req is already in ABTS processing
    RDS tcp loopback connection can hang
    net/qla3xxx: fix schedule while atomic in ql_sem_spinlock
  * wq: handle VM suspension in stall detection
      kernel/workqueue.c
  * cgroup: disable controllers at parse time
      kernel/cgroup/cgroup.c
  * net: mdiobus: get rid of a BUG_ON()
      drivers/net/phy/mdio_bus.c
  * netlink: disable IRQs for netlink_lock_table()
      net/netlink/af_netlink.c
  * bonding: init notify_work earlier to avoid uninitialized use
      drivers/net/bonding/bond_main.c
    isdn: mISDN: netjet: Fix crash in nj_probe:
    ASoC: sti-sas: add missing MODULE_DEVICE_TABLE
    ASoC: Intel: bytcr_rt5640: Add quirk for the Lenovo Miix 3-830 tablet
    ASoC: Intel: bytcr_rt5640: Add quirk for the Glavey TM800A550L tablet
    net/nfc/rawsock.c: fix a permission check bug
  * proc: Track /proc/$pid/attr/ opener mm_struct
      fs/proc/base.c
  * perf/core: Fix endless multiplex timer
      kernel/events/core.c
  * Revert "perf/cgroups: Don't rotate events for cgroups unnecessarily"
      include/linux/perf_event.h
      kernel/events/core.c
  * Revert "perf/core: Fix corner case in perf_rotate_context()"
      kernel/events/core.c
    Merge 4.19.194 into android-4.19-stable
Linux 4.19.194
    xen-pciback: redo VF placement in the virtual topology
  * sched/fair: Optimize select_idle_cpu
      kernel/sched/fair.c
    ACPI: EC: Look for ECDT EC after calling acpi_load_tables()
    ACPI: probe ECDT before loading AML tables regardless of module-level code flag
    KVM: arm64: Fix debug register indexing
    KVM: SVM: Truncate GPR value for DR and CR accesses in !64-bit mode
    btrfs: fix unmountable seed device after fstrim
  * perf/core: Fix corner case in perf_rotate_context()
      kernel/events/core.c
  * perf/cgroups: Don't rotate events for cgroups unnecessarily
      include/linux/perf_event.h
      kernel/events/core.c
    bnxt_en: Remove the setting of dev_port.
    selftests/bpf: Avoid running unprivileged tests with alignment requirements
    selftests/bpf: add "any alignment" annotation for some tests
    bpf: Apply F_NEEDS_EFFICIENT_UNALIGNED_ACCESS to more ACCEPT test cases.
    bpf: Make more use of 'any' alignment in test_verifier.c
    bpf: Adjust F_NEEDS_EFFICIENT_UNALIGNED_ACCESS handling in test_verifier.c
  * bpf: Add BPF_F_ANY_ALIGNMENT.
      include/uapi/linux/bpf.h
      kernel/bpf/syscall.c
      kernel/bpf/verifier.c
    selftests/bpf: Generalize dummy program types
    bpf: test make sure to run unpriv test cases in test_verifier
    bpf: fix test suite to enable all unpriv program types
    mm, hugetlb: fix simple resv_huge_pages underflow on UFFDIO_COPY
    btrfs: fixup error handling in fixup_inode_link_counts
    btrfs: return errors from btrfs_del_csums in cleanup_ref_head
    btrfs: fix error handling in btrfs_del_csums
    btrfs: mark ordered extent and inode with error if we fail to finish
    x86/apic: Mark _all_ legacy interrupts when IO/APIC is missing
    nfc: fix NULL ptr dereference in llcp_sock_getname() after failed connect
    ocfs2: fix data corruption by fallocate
  * pid: take a reference when initializing `cad_pid`
      init/main.c
    usb: dwc2: Fix build in periphal-only mode
  * ext4: fix bug on in ext4_es_cache_extent as ext4_split_extent_at failed
      fs/ext4/extents.c
    ALSA: hda: Fix for mute key LED for HP Pavilion 15-CK0xx
  * ALSA: timer: Fix master timer notification
      sound/core/timer.c
  * HID: multitouch: require Finger field to mark Win8 reports as MT
      drivers/hid/hid-multitouch.c
    net: caif: fix memory leak in cfusbl_device_notify
    net: caif: fix memory leak in caif_device_notify
  * net: caif: add proper error handling
      include/net/caif/caif_dev.h
      include/net/caif/cfcnfg.h
  * net: caif: added cfserl_release function
      include/net/caif/cfserl.h
  * Bluetooth: use correct lock to prevent UAF of hdev object
      net/bluetooth/hci_sock.c
  * Bluetooth: fix the erroneous flush_work() order
      net/bluetooth/hci_core.c
  * tipc: fix unique bearer names sanity check
      net/tipc/bearer.c
  * tipc: add extack messages for bearer/media failure
      net/tipc/bearer.c
    ixgbevf: add correct exception tracing for XDP
    ieee802154: fix error return code in ieee802154_llsec_getparams()
    ieee802154: fix error return code in ieee802154_add_iface()
    netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches
    HID: i2c-hid: fix format string mismatch
    HID: pidff: fix error return code in hid_pidff_init()
    ipvs: ignore IP_VS_SVC_F_HASHED flag when adding service
    vfio/platform: fix module_put call in error flow
    samples: vfio-mdev: fix error handing in mdpy_fb_probe()
  * vfio/pci: zap_vma_ptes() needs MMU
      drivers/vfio/pci/Kconfig
    vfio/pci: Fix error return code in vfio_ecap_init()
    efi: cper: fix snprintf() use in cper_dimm_err_location()
    efi: Allow EFI_MEMORY_XP and EFI_MEMORY_RO both to be cleared
  * nl80211: validate key indexes for cfg80211_registered_device
      net/wireless/core.h
      net/wireless/nl80211.c
      net/wireless/util.c
  * ALSA: usb: update old-style static const declaration
      sound/usb/mixer_quirks.c
  * net: usb: cdc_ncm: don't spew notifications
      drivers/net/usb/cdc_ncm.c
      include/linux/usb/usbnet.h
    Merge 4.19.193 into android-4.19-stable
Linux 4.19.193
  * usb: core: reduce power-on-good delay time of root hub
      drivers/usb/core/hub.h
    net: hns3: check the return of skb_checksum_help()
    drivers/net/ethernet: clean up unused assignments
  * hugetlbfs: hugetlb_fault_mutex_hash() cleanup
      include/linux/hugetlb.h
    MIPS: ralink: export rt_sysc_membase for rt2880_wdt.c
    MIPS: alchemy: xxs1500: add gpio-au1000.h header file
    sch_dsmark: fix a NULL deref in qdisc_reset()
  * ipv6: record frag_max_size in atomic fragments in input path
      net/ipv6/reassembly.c
    scsi: libsas: Use _safe() loop in sas_resume_port()
    ixgbe: fix large MTU request from VF
  * bpf: Set mac_len in bpf_skb_change_head
      net/core/filter.c
    ASoC: cs35l33: fix an error code in probe()
    staging: emxx_udc: fix loop in _nbu2ss_nuke()
  * mld: fix panic in mld_newpack()
      net/ipv6/mcast.c
    net: bnx2: Fix error return code in bnx2_init_board()
    openvswitch: meter: fix race when getting now_ms.
    net: mdio: octeon: Fix some double free issues
    net: mdio: thunder: Fix a double free issue in the .remove function
    net: fec: fix the potential memory leak in fec_enet_init()
    net: dsa: fix error code getting shifted with 4 in dsa_slave_get_sset_count
    net: netcp: Fix an error message
    drm/amdgpu: Fix a use-after-free
    drm/amd/amdgpu: fix refcount leak
    drm/amd/display: Disconnect non-DP with no EDID
    SMB3: incorrect file id in requests compounded with open
    platform/x86: intel_punit_ipc: Append MODULE_DEVICE_TABLE for ACPI
    platform/x86: hp-wireless: add AMD's hardware id to the supported list
    btrfs: do not BUG_ON in link_to_fixup_dir
    openrisc: Define memory barrier mb
    scsi: BusLogic: Fix 64-bit system enumeration error for Buslogic
    media: gspca: properly check for errors in po1030_probe()
    media: dvb: Add check on sp8870_readreg return
    ASoC: cs43130: handle errors in cs43130_probe() properly
    libertas: register sysfs groups properly
    dmaengine: qcom_hidma: comment platform_driver_register call
    isdn: mISDNinfineon: check/cleanup ioremap failure correctly in setup_io
    char: hpet: add checks after calling ioremap
    net: caif: remove BUG_ON(dev == NULL) in caif_xmit
    net: fujitsu: fix potential null-ptr-deref
    serial: max310x: unregister uart driver in case of failure and abort
    platform/x86: hp_accel: Avoid invoking _INI to speed up resume
    perf jevents: Fix getting maximum number of fds
    i2c: i801: Don't generate an interrupt on bus reset
    i2c: s3c2410: fix possible NULL pointer deref on read message after write
    net: dsa: fix a crash if ->get_sset_count() fails
    net: dsa: mt7530: fix VLAN traffic leaks
  * tipc: skb_linearize the head skb when reassembling msgs
      net/tipc/msg.c
  * Revert "net:tipc: Fix a double free in tipc_sk_mcast_rcv"
      net/tipc/socket.c
    net/mlx4: Fix EEPROM dump support
    drm/meson: fix shutdown crash when component not probed
    NFSv4: Fix v4.0/v4.1 SEEK_DATA return -ENOTSUPP when set NFS_V4_2 config
    NFS: Don't corrupt the value of pg_bytes_written in nfs_do_recoalesce()
    NFS: fix an incorrect limit in filelayout_decode_layout()
    Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails
    spi: mt7621: Don't leak SPI master in probe error path
    spi: mt7621: Disable clock in probe error path
    spi: gpio: Don't leak SPI master in probe error path
  * bpf: No need to simulate speculative domain for immediates
      kernel/bpf/verifier.c
  * bpf: Fix mask direction swap upon off reg sign change
      kernel/bpf/verifier.c
  * bpf: Wrap aux data inside bpf_sanitize_info container
      kernel/bpf/verifier.c
  * bpf: Fix leakage of uninitialized bpf stack under speculation
      include/linux/bpf_verifier.h
      kernel/bpf/verifier.c
    bpf: Update selftests to reflect new error states
  * bpf: Tighten speculative pointer arithmetic mask
      kernel/bpf/verifier.c
  * bpf: Move sanitize_val_alu out of op switch
      kernel/bpf/verifier.c
  * bpf: Refactor and streamline bounds check into helper
      kernel/bpf/verifier.c
  * bpf: Improve verifier error messages for users
      kernel/bpf/verifier.c
  * bpf: Rework ptr_limit into alu_limit and add common error path
      kernel/bpf/verifier.c
  * bpf: Ensure off_reg has no mixed signed bounds for all types
      kernel/bpf/verifier.c
  * bpf: Move off_reg into sanitize_ptr_alu
      kernel/bpf/verifier.c
    bpf, test_verifier: switch bpf_get_stack's 0 s> r8 test
    bpf: Test_verifier, bpf_get_stack return value add <0
  * bpf: extend is_branch_taken to registers
      kernel/bpf/verifier.c
    selftests/bpf: add selftest part of "bpf: improve verifier branch analysis"
    selftests/bpf: Test narrow loads with off > 0 in test_verifier
    bpf, selftests: Fix up some test_verifier cases for unprivileged
    bpf: fix up selftests after backports were fixed
    net: usb: fix memory leak in smsc75xx_bind
    usb: gadget: udc: renesas_usb3: Fix a race in usb3_start_pipen()
  * usb: dwc3: gadget: Properly track pending and queued SG
      drivers/usb/dwc3/gadget.c
    USB: serial: pl2303: add device id for ADLINK ND-6530 GC
    USB: serial: ftdi_sio: add IDs for IDS GmbH Products
    USB: serial: option: add Telit LE910-S1 compositions 0x7010, 0x7011
    USB: serial: ti_usb_3410_5052: add startech.com device id
    serial: rp2: use 'request_firmware' instead of 'request_firmware_nowait'
    serial: sh-sci: Fix off-by-one error in FIFO threshold register setting
  * USB: usbfs: Don't WARN about excessively large memory allocations
      drivers/usb/core/devio.c
    USB: trancevibrator: fix control-request direction
    iio: adc: ad7793: Add missing error code in ad7793_setup()
    staging: iio: cdc: ad7746: avoid overwrite of num_channels
    mei: request autosuspend after sending rx flow control
    thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue
    misc/uss720: fix memory leak in uss720_probe
    kgdb: fix gcc-11 warnings harder
  * dm snapshot: properly fix a crash when an origin has no snapshots
      drivers/md/dm-snap.c
    ath10k: Validate first subframe of A-MSDU before processing the list
    mac80211: extend protection against mixed key and fragment cache attacks
    mac80211: do not accept/forward invalid EAPOL frames
    mac80211: prevent attacks on TKIP/WEP as well
    mac80211: check defrag PN against current frame
    mac80211: add fragment cache to sta_info
    mac80211: drop A-MSDUs on old ciphers
  * cfg80211: mitigate A-MSDU aggregation attacks
      net/wireless/util.c
  * mac80211: properly handle A-MSDUs that start with an RFC 1042 header
      include/net/cfg80211.h
      net/wireless/util.c
    mac80211: prevent mixed key and fragment cache attacks
    mac80211: assure all fragments are encrypted
    net: hso: fix control-request directions
  * proc: Check /proc/$pid/attr/ writes against file opener
      fs/proc/base.c
    perf intel-pt: Fix transaction abort handling
    perf intel-pt: Fix sample instruction bytes
    iommu/vt-d: Fix sysfs leak in alloc_iommu()
    NFSv4: Fix a NULL pointer dereference in pnfs_mark_matching_lsegs_return()
    cifs: set server->cipher_type to AES-128-CCM for SMB3.0
  * NFC: nci: fix memory leak in nci_allocate_device
      include/net/nfc/nci_core.h
  * usb: dwc3: gadget: Enable suspend events
      drivers/usb/dwc3/gadget.c
  * mm, vmstat: drop zone->lock in /proc/pagetypeinfo
      mm/vmstat.c
    Merge 4.19.192 into android-4.19-stable
  * Revert "spi: Fix use-after-free with devm_spi_alloc_*"
      drivers/spi/spi.c
      include/linux/spi/spi.h
  * Revert "modules: inherit TAINT_PROPRIETARY_MODULE"
      include/linux/module.h
      kernel/module.c
Linux 4.19.192
  * Bluetooth: SMP: Fail if remote and local public keys are identical
      net/bluetooth/smp.c
    video: hgafb: correctly handle card detect failure during probe
    tty: vt: always invoke vc->vc_sw->con_resize callback
  * vt: Fix character height handling with VT_RESIZEX
      include/linux/console_struct.h
    vgacon: Record video mode changes with VT_RESIZEX
    video: hgafb: fix potential NULL pointer dereference
    qlcnic: Add null check after calling netdev_alloc_skb
    leds: lp5523: check return value of lp5xx_read and jump to cleanup code
    net: rtlwifi: properly check for alloc_workqueue() failure
    scsi: ufs: handle cleanup correctly on devm_reset_control_get error
    net: stmicro: handle clk_prepare() failure during init
    ethernet: sun: niu: fix missing checks of niu_pci_eeprom_read()
    Revert "niu: fix missing checks of niu_pci_eeprom_read"
    Revert "qlcnic: Avoid potential NULL pointer dereference"
    Revert "rtlwifi: fix a potential NULL pointer dereference"
    Revert "media: rcar_drif: fix a memory disclosure"
    cdrom: gdrom: initialize global variable at init time
    cdrom: gdrom: deallocate struct gdrom_unit fields in remove_gdrom
    Revert "gdrom: fix a memory leak bug"
    Revert "scsi: ufs: fix a missing check of devm_reset_control_get"
  * Revert "ecryptfs: replace BUG_ON with error handling code"
      fs/ecryptfs/crypto.c
    Revert "video: imsttfb: fix potential NULL pointer dereferences"
    Revert "hwmon: (lm80) fix a missing check of bus read in lm80 probe"
    Revert "leds: lp5523: fix a missing check of return value of lp55xx_read"
    Revert "net: stmicro: fix a missing check of clk_prepare"
    Revert "video: hgafb: fix potential NULL pointer dereference"
  * dm snapshot: fix crash with transient storage and zero chunk size
      drivers/md/dm-snap.c
    xen-pciback: reconfigure also from backend watch handler
    Revert "serial: mvebu-uart: Fix to avoid a potential NULL pointer dereference"
    rapidio: handle create_workqueue() failure
    Revert "rapidio: fix a NULL pointer dereference when create_workqueue() fails"
    ALSA: hda/realtek: Add some CLOVE SSIDs of ALC293
    ALSA: hda/realtek: reset eapd coeff to default value for alc287
    Revert "ALSA: sb8: add a check for request_region"
  * ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro
      sound/firewire/Kconfig
  * ALSA: usb-audio: Validate MS endpoint descriptors
      sound/usb/midi.c
    ALSA: dice: fix stream format at middle sampling rate for Alesis iO 26
    ALSA: line6: Fix racy initialization of LINE6 MIDI
    ALSA: dice: fix stream format for TC Electronic Konnekt Live at high sampling transfer frequency
    cifs: fix memory leak in smb2_copychunk_range
  * locking/mutex: clear MUTEX_FLAGS if wait_list is empty due to signal
      kernel/locking/mutex.c
      kernel/locking/mutex.h
    nvmet: seset ns->file when open fails
  * ptrace: make ptrace() fail if the tracee changed its pid unexpectedly
      kernel/ptrace.c
    platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios
    RDMA/mlx5: Recover from fatal event in dual port mode
    scsi: qla2xxx: Fix error return code in qla82xx_write_flash_dword()
    RDMA/rxe: Clear all QP fields if creation failed
    openrisc: Fix a memory leak
    firmware: arm_scpi: Prevent the ternary sign expansion bug

Bug: 192919066
Change-Id: I1ba1e52b689f0e8557ef93ae731827dd10175db6
Signed-off-by: Lucas Wei <lucaswei@google.com>
2021-08-03 17:15:25 +08:00
Sean Christopherson
fbb7f6a05a KVM: Use kvm_pfn_t for local PFN variable in hva_to_pfn_remapped()
commit a9545779ee9e9e103648f6f2552e73cfe808d0f4 upstream.

Use kvm_pfn_t, a.k.a. u64, for the local 'pfn' variable when retrieving
a so called "remapped" hva/pfn pair.  In theory, the hva could resolve to
a pfn in high memory on a 32-bit kernel.

This bug was inadvertantly exposed by commit bd2fae8da794 ("KVM: do not
assume PTE is writable after follow_pfn"), which added an error PFN value
to the mix, causing gcc to comlain about overflowing the unsigned long.

  arch/x86/kvm/../../../virt/kvm/kvm_main.c: In function ‘hva_to_pfn_remapped’:
  include/linux/kvm_host.h:89:30: error: conversion from ‘long long unsigned int’
                                  to ‘long unsigned int’ changes value from
                                  ‘9218868437227405314’ to ‘2’ [-Werror=overflow]
   89 | #define KVM_PFN_ERR_RO_FAULT (KVM_PFN_ERR_MASK + 2)
      |                              ^
virt/kvm/kvm_main.c:1935:9: note: in expansion of macro ‘KVM_PFN_ERR_RO_FAULT’

Cc: stable@vger.kernel.org
Fixes: add6a0cd1c ("KVM: MMU: try to fix up page faults before giving up")
Signed-off-by: Sean Christopherson <seanjc@google.com>
Message-Id: <20210208201940.1258328-1-seanjc@google.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-07-28 11:13:51 +02:00
Nicholas Piggin
117777467b KVM: do not allow mapping valid but non-reference-counted pages
commit f8be156be163a052a067306417cd0ff679068c97 upstream.

It's possible to create a region which maps valid but non-refcounted
pages (e.g., tail pages of non-compound higher order allocations). These
host pages can then be returned by gfn_to_page, gfn_to_pfn, etc., family
of APIs, which take a reference to the page, which takes it from 0 to 1.
When the reference is dropped, this will free the page incorrectly.

Fix this by only taking a reference on valid pages if it was non-zero,
which indicates it is participating in normal refcounting (and can be
released with put_page).

This addresses CVE-2021-22543.

Signed-off-by: Nicholas Piggin <npiggin@gmail.com>
Tested-by: Paolo Bonzini <pbonzini@redhat.com>
Cc: stable@vger.kernel.org
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-07-28 11:13:51 +02:00
Paolo Bonzini
918e0039ec KVM: do not assume PTE is writable after follow_pfn
commit bd2fae8da794b55bf2ac02632da3a151b10e664c upstream.

In order to convert an HVA to a PFN, KVM usually tries to use
the get_user_pages family of functinso.  This however is not
possible for VM_IO vmas; in that case, KVM instead uses follow_pfn.

In doing this however KVM loses the information on whether the
PFN is writable.  That is usually not a problem because the main
use of VM_IO vmas with KVM is for BARs in PCI device assignment,
however it is a bug.  To fix it, use follow_pte and check pte_write
while under the protection of the PTE lock.  The information can
be used to fail hva_to_pfn_remapped or passed back to the
caller via *writable.

Usage of follow_pfn was introduced in commit add6a0cd1c ("KVM: MMU: try to fix
up page faults before giving up", 2016-07-05); however, even older version
have the same issue, all the way back to commit 2e2e3738af ("KVM:
Handle vma regions with no backing page", 2008-07-20), as they also did
not check whether the PFN was writable.

Fixes: 2e2e3738af ("KVM: Handle vma regions with no backing page")
Reported-by: David Stevens <stevensd@google.com>
Cc: 3pvd@google.com
Cc: Jann Horn <jannh@google.com>
Cc: Jason Gunthorpe <jgg@ziepe.ca>
Cc: stable@vger.kernel.org
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
[OP: backport to 4.19, adjust follow_pte() -> follow_pte_pmd()]
Signed-off-by: Ovidiu Panait <ovidiu.panait@windriver.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-07-28 11:13:51 +02:00
Eric Auger
43336ea7d9 KVM: arm/arm64: Fix KVM_VGIC_V3_ADDR_TYPE_REDIST read
commit 94ac0835391efc1a30feda6fc908913ec012951e upstream.

When reading the base address of the a REDIST region
through KVM_VGIC_V3_ADDR_TYPE_REDIST we expect the
redistributor region list to be populated with a single
element.

However list_first_entry() expects the list to be non empty.
Instead we should use list_first_entry_or_null which effectively
returns NULL if the list is empty.

Fixes: dbd9733ab6 ("KVM: arm/arm64: Replace the single rdist region by a list")
Cc: <Stable@vger.kernel.org> # v4.18+
Signed-off-by: Eric Auger <eric.auger@redhat.com>
Reported-by: Gavin Shan <gshan@redhat.com>
Signed-off-by: Marc Zyngier <maz@kernel.org>
Link: https://lore.kernel.org/r/20210412150034.29185-1-eric.auger@redhat.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-06-30 08:48:27 -04:00
Lucas Wei
7ec4bc1d47 Merge android-4.19-stable (4.19.191) into android-msm-pixel-4.19-lts
Merge 4.19.191 into android-4.19-stable
Linux 4.19.191
    scripts: switch explicitly to Python 3
    tweewide: Fix most Shebang lines
  * KVM: arm64: Initialize VCPU mdcr_el2 before loading it
      arch/arm64/include/asm/kvm_host.h
  * iomap: fix sub-page uptodate handling
      fs/iomap.c
      include/linux/iomap.h
  * ipv6: remove extra dev_hold() for fallback tunnels
      net/ipv6/ip6_tunnel.c
      net/ipv6/ip6_vti.c
      net/ipv6/sit.c
  * ip6_tunnel: sit: proper dev_{hold|put} in ndo_[un]init methods
      net/ipv6/ip6_tunnel.c
  * sit: proper dev_{hold|put} in ndo_[un]init methods
      net/ipv6/sit.c
    ip6_gre: proper dev_{hold|put} in ndo_[un]init methods
    net: stmmac: Do not enable RX FIFO overflow interrupts
    lib: stackdepot: turn depot_lock spinlock to raw_spinlock
  * block: reexpand iov_iter after read/write
      fs/block_dev.c
    ALSA: hda: generic: change the DAC ctl name for LO+SPK or LO+HP
    gpiolib: acpi: Add quirk to ignore EC wakeups on Dell Venue 10 Pro 5055
    scsi: target: tcmu: Return from tcmu_handle_completions() if cmd_id not found
    ceph: fix fscache invalidation
    riscv: Workaround mcount name prior to clang-13
    scripts/recordmcount.pl: Fix RISC-V regex for clang
    ARM: 9075/1: kernel: Fix interrupted SMC calls
    um: Mark all kernel symbols as local
    Input: silead - add workaround for x86 BIOS-es which bring the chip up in a stuck state
    Input: elants_i2c - do not bind to i2c-hid compatible ACPI instantiated devices
    ACPI / hotplug / PCI: Fix reference count leak in enable_slot()
    ARM: 9066/1: ftrace: pause/unpause function graph tracer in cpu_suspend()
  * PCI: thunder: Fix compile testing
      drivers/pci/controller/pci-thunder-ecam.c
      drivers/pci/controller/pci-thunder-pem.c
      drivers/pci/pci.h
    xsk: Simplify detection of empty and full rings
    pinctrl: ingenic: Improve unreachable code generation
    isdn: capi: fix mismatched prototypes
    cxgb4: Fix the -Wmisleading-indentation warning
    usb: sl811-hcd: improve misleading indentation
    kgdb: fix gcc-11 warning on indentation
    x86/msr: Fix wr/rdmsr_safe_regs_on_cpu() prototypes
    nvme: do not try to reconfigure APST when the controller is not live
    clk: exynos7: Mark aclk_fsys1_200 as critical
  * netfilter: conntrack: Make global sysctls readonly in non-init netns
      net/netfilter/nf_conntrack_standalone.c
  * kobject_uevent: remove warning in init_uevent_argv()
      lib/kobject_uevent.c
    thermal/core/fair share: Lock the thermal zone while looping over instances
    MIPS: Avoid handcoded DIVU in `__div64_32' altogether
    MIPS: Avoid DIVU in `__div64_32' is result would be zero
    MIPS: Reinstate platform `__div64_32' handler
  * FDDI: defxx: Make MMIO the configuration default except for EISA
      drivers/net/fddi/Kconfig
    KVM: x86: Cancel pvclock_gtod_work on module removal
    cdc-wdm: untangle a circular dependency between callback and softint
    iio: tsl2583: Fix division by a zero lux_val
    iio: gyro: mpu3050: Fix reported temperature value
  * xhci: Add reset resume quirk for AMD xhci controller.
      drivers/usb/host/xhci-pci.c
  * xhci: Do not use GFP_KERNEL in (potentially) atomic context
      drivers/usb/host/xhci.c
  * usb: dwc3: gadget: Return success always for kick transfer in ep queue
      drivers/usb/dwc3/gadget.c
  * usb: core: hub: fix race condition about TRSMRCY of resume
      drivers/usb/core/hub.c
    usb: dwc2: Fix gadget DMA unmap direction
  * usb: xhci: Increase timeout for HC halt
      drivers/usb/host/xhci-ext-caps.h
    usb: dwc3: pci: Enable usb2-gadget-lpm-disable for Intel Merrifield
    usb: dwc3: omap: improve extcon initialization
  * blk-mq: Swap two calls in blk_mq_exit_queue()
      block/blk-mq.c
    ACPI: scan: Fix a memory leak in an error handling path
    usb: fotg210-hcd: Fix an error message
    iio: proximity: pulsedlight: Fix rumtime PM imbalance on error
    drm/radeon/dpm: Disable sclk switching on Oland when two 4K 60Hz monitors are connected
  * userfaultfd: release page in error path to avoid BUG_ON
      mm/shmem.c
    squashfs: fix divide error in calculate_skip()
    hfsplus: prevent corruption in shrinking truncate
    powerpc/64s: Fix crashes when toggling entry flush barrier
    powerpc/64s: Fix crashes when toggling stf barrier
    ARC: entry: fix off-by-one error in syscall number validation
    i40e: Fix use-after-free in i40e_client_subtask()
    netfilter: nftables: avoid overflows in nft_hash_buckets()
    kernel: kexec_file: fix error return code of kexec_calculate_store_digests()
  * sched/fair: Fix unfairness caused by missing load decay
      kernel/sched/fair.c
    netfilter: nfnetlink_osf: Fix a missing skb_header_pointer() NULL check
    smc: disallow TCP_ULP in smc_setsockopt()
  * net: fix nla_strcmp to handle more then one trailing null character
      lib/nlattr.c
    ksm: fix potential missing rmap_item for stable_node
    mm/hugeltb: handle the error case in hugetlb_fix_reserve_counts()
    khugepaged: fix wrong result value for trace_mm_collapse_huge_page_isolate()
    drm/radeon: Avoid power table parsing memory leaks
    drm/radeon: Fix off-by-one power_state index heap overwrite
  * netfilter: xt_SECMARK: add new revision to fix structure layout
      include/uapi/linux/netfilter/xt_SECMARK.h
      net/netfilter/xt_SECMARK.c
  * sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b
      net/sctp/sm_statefuns.c
    ethernet:enic: Fix a use after free bug in enic_hard_start_xmit
  * sctp: do asoc update earlier in sctp_sf_do_dupcook_a
      net/sctp/sm_statefuns.c
    net: hns3: disable phy loopback setting in hclge_mac_start_phy
    rtc: ds1307: Fix wday settings for rx8130
    NFSv4.2 fix handling of sr_eof in SEEK's reply
    pNFS/flexfiles: fix incorrect size check in decode_nfs_fh()
    PCI: endpoint: Fix missing destroy_workqueue()
    NFS: Deal correctly with attribute generation counter overflow
    NFSv4.2: Always flush out writes in nfs42_proc_fallocate()
  * rpmsg: qcom_glink_native: fix error return code of qcom_glink_rx_data()
      drivers/rpmsg/qcom_glink_native.c
    ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook
  * PCI: Release OF node in pci_scan_device()'s error path
      drivers/pci/probe.c
    PCI: iproc: Fix return value of iproc_msi_irq_domain_alloc()
  * f2fs: fix a redundant call to f2fs_balance_fs if an error occurs
      fs/f2fs/inline.c
    ASoC: rt286: Make RT286_SET_GPIO_* readable and writable
    ia64: module: fix symbolizer crash on fdescr
    net: ethernet: mtk_eth_soc: fix RX VLAN offload
    powerpc/iommu: Annotate nested lock for lockdep
    wl3501_cs: Fix out-of-bounds warnings in wl3501_mgmt_join
    wl3501_cs: Fix out-of-bounds warnings in wl3501_send_pkt
    powerpc/pseries: Stop calling printk in rtas_stop_self()
    samples/bpf: Fix broken tracex1 due to kprobe argument change
  * ethtool: ioctl: Fix out-of-bounds warning in store_link_ksettings_for_user()
      net/core/ethtool.c
    ASoC: rt286: Generalize support for ALC3263 codec
    powerpc/smp: Set numa node before updating mask
  * sctp: Fix out-of-bounds warning in sctp_process_asconf_param()
      net/sctp/sm_make_chunk.c
    kconfig: nconf: stop endless search loops
    selftests: Set CC to clang in lib.mk if LLVM is set
    cuse: prevent clone
    pinctrl: samsung: use 'int' for register masks in Exynos
    mac80211: clear the beacon's CRC after channel switch
  * i2c: Add I2C_AQ_NO_REP_START adapter quirk
      include/linux/i2c.h
    ASoC: Intel: bytcr_rt5640: Add quirk for the Chuwi Hi8 tablet
  * ip6_vti: proper dev_{hold|put} in ndo_[un]init methods
      net/ipv6/ip6_vti.c
  * Bluetooth: check for zapped sk before connecting
      net/bluetooth/l2cap_sock.c
  * net: bridge: when suppression is enabled exclude RARP packets
      net/bridge/br_arp_nd_proxy.c
  * Bluetooth: initialize skb_queue_head at l2cap_chan_create()
      net/bluetooth/l2cap_core.c
  * Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default
      net/bluetooth/l2cap_core.c
    ALSA: rme9652: don't disable if not enabled
    ALSA: hdspm: don't disable if not enabled
    ALSA: hdsp: don't disable if not enabled
  * i2c: bail out early when RDWR parameters are wrong
      drivers/i2c/i2c-dev.c
    net: stmmac: Set FIFO sizes for ipq806x
    ASoC: Intel: bytcr_rt5640: Enable jack-detect support on Asus T100TAF
  * tipc: convert dest node's address to network order
      net/tipc/netlink_compat.c
    fs: dlm: fix debugfs dump
    tpm: fix error return code in tpm2_get_cc_attrs_tbl()
  * Revert "fdt: Properly handle "no-map" field in the memory region"
      drivers/of/fdt.c
  * Revert "of/fdt: Make sure no-map does not remove already reserved regions"
      drivers/of/fdt.c
  * sctp: delay auto_asconf init until binding the first addr
      net/sctp/socket.c
  * Revert "net/sctp: fix race condition in sctp_destroy_sock"
      net/sctp/socket.c
  * smp: Fix smp_call_function_single_async prototype
      include/linux/smp.h
      kernel/smp.c
  * net: Only allow init netns to set default tcp cong to a restricted algo
      net/ipv4/tcp_cong.c
    mm/memory-failure: unnecessary amount of unmapping
  * mm/sparse: add the missing sparse_buffer_fini() in error branch
      mm/sparse.c
    kfifo: fix ternary sign extension bugs
    net:nfc:digital: Fix a double free in digital_tg_recv_dep_req
    RDMA/bnxt_re: Fix a double free in bnxt_qplib_alloc_res
    net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
    net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb
    arm64: dts: uniphier: Change phy-mode to RGMII-ID to enable delay pins for RTL8211E
    ARM: dts: uniphier: Change phy-mode to RGMII-ID to enable delay pins for RTL8211E
    bnxt_en: fix ternary sign extension bug in bnxt_show_temp()
    powerpc/52xx: Fix an invalid ASM expression ('addi' used instead of 'add')
    ath10k: Fix ath10k_wmi_tlv_op_pull_peer_stats_info() unlock without lock
    ath9k: Fix error check in ath9k_hw_read_revisions() for PCI devices
    net: davinci_emac: Fix incorrect masking of tx and rx error channel
  * ALSA: usb: midi: don't return -ENOMEM when usb_urb_ep_type_check fails
      sound/usb/midi.c
    RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails
    vsock/vmci: log once the failed queue pair allocation
    mwl8k: Fix a double Free in mwl8k_probe_hw
    i2c: sh7760: fix IRQ error path
    rtlwifi: 8821ae: upgrade PHY and RF parameters
    powerpc/pseries: extract host bridge from pci_bus prior to bus removal
    MIPS: pci-legacy: stop using of_pci_range_to_resource
    drm/i915/gvt: Fix error code in intel_gvt_init_device()
    ASoC: ak5558: correct reset polarity
    i2c: sh7760: add IRQ check
    i2c: jz4780: add IRQ check
    i2c: emev2: add IRQ check
    i2c: cadence: add IRQ check
    RDMA/srpt: Fix error return code in srpt_cm_req_recv()
    net: thunderx: Fix unintentional sign extension issue
    IB/hfi1: Fix error return code in parse_platform_config()
    mt7601u: fix always true expression
    mac80211: bail out if cipher schemes are invalid
    powerpc: iommu: fix build when neither PCI or IBMVIO is set
    powerpc/perf: Fix PMU constraint check for EBB events
    powerpc/64s: Fix pte update for kernel memory on radix
    liquidio: Fix unintented sign extension of a left shift of a u16
  * ALSA: usb-audio: Add error checks for usb_driver_claim_interface() calls
      sound/usb/card.c
      sound/usb/quirks.c
      sound/usb/usbaudio.h
    net: hns3: Limiting the scope of vector_ring_chain variable
    nfc: pn533: prevent potential memory corruption
  * bug: Remove redundant condition check in report_bug
      lib/bug.c
  * ALSA: core: remove redundant spin_lock pair in snd_card_disconnect
      sound/core/init.c
    powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration
    powerpc/prom: Mark identical_pvr_fixup as __init
    net: lapbether: Prevent racing when checking whether the netif is running
    perf symbols: Fix dso__fprintf_symbols_by_name() to return the number of printed chars
  * HID: plantronics: Workaround for double volume key presses
      drivers/hid/hid-ids.h
      drivers/hid/hid-plantronics.c
      include/linux/hid.h
    drivers/block/null_blk/main: Fix a double free in null_init.
  * sched/debug: Fix cgroup_path[] serialization
      kernel/sched/debug.c
    x86/events/amd/iommu: Fix sysfs type mismatch
    HSI: core: fix resource leaks in hsi_add_client_from_dt()
    mfd: stm32-timers: Avoid clearing auto reload register
    scsi: ibmvfc: Fix invalid state machine BUG_ON()
    scsi: sni_53c710: Add IRQ check
    scsi: sun3x_esp: Add IRQ check
    scsi: jazz_esp: Add IRQ check
    clk: uniphier: Fix potential infinite loop
    clk: qcom: a53-pll: Add missing MODULE_DEVICE_TABLE
    vfio/mdev: Do not allow a mdev_type to have a NULL parent pointer
    nvme: retrigger ANA log update if group descriptor isn't found
    ata: libahci_platform: fix IRQ check
    sata_mv: add IRQ checks
    pata_ipx4xx_cf: fix IRQ check
    pata_arasan_cf: fix IRQ check
    x86/kprobes: Fix to check non boostable prefixes correctly
    drm/amdkfd: fix build error with AMD_IOMMU_V2=m
    media: m88rs6000t: avoid potential out-of-bounds reads on arrays
    media: omap4iss: return error code when omap4iss_get() failed
    media: vivid: fix assignment of dev->fbuf_out_flags
    soc: aspeed: fix a ternary sign expansion bug
  * ttyprintk: Add TTY hangup callback.
      drivers/char/ttyprintk.c
    usb: dwc2: Fix hibernation between host and device modes.
    usb: dwc2: Fix host mode hibernation exit with remote wakeup flow.
    Drivers: hv: vmbus: Increase wait time for VMbus unload
    x86/platform/uv: Fix !KEXEC build failure
    platform/x86: pmc_atom: Match all Beckhoff Automation baytrail boards with critclk_systems DMI table
    usbip: vudc: fix missing unlock on error in usbip_sockfd_store()
  * firmware: qcom-scm: Fix QCOM_SCM configuration
      drivers/firmware/Kconfig
  * tty: fix return value for unsupported ioctls
      drivers/tty/tty_io.c
      include/linux/tty_driver.h
  * tty: actually undefine superseded ASYNC flags
      include/uapi/linux/tty_flags.h
    USB: cdc-acm: fix unprivileged TIOCCSERIAL
    usb: gadget: r8a66597: Add missing null check on return from platform_get_resource
    cpufreq: armada-37xx: Fix determining base CPU frequency
    cpufreq: armada-37xx: Fix driver cleanup when registration failed
    clk: mvebu: armada-37xx-periph: Fix workaround for switching from L1 to L0
    clk: mvebu: armada-37xx-periph: Fix switching CPU freq from 250 Mhz to 1 GHz
    cpufreq: armada-37xx: Fix the AVS value for load L1
    clk: mvebu: armada-37xx-periph: remove .set_parent method for CPU PM clock
    cpufreq: armada-37xx: Fix setting TBG parent for load levels
    crypto: qat - Fix a double free in adf_create_ring
    ACPI: CPPC: Replace cppc_attr with kobj_attribute
  * soc: qcom: mdt_loader: Detect truncated read of segments
      drivers/soc/qcom/mdt_loader.c
  * soc: qcom: mdt_loader: Validate that p_filesz < p_memsz
      drivers/soc/qcom/mdt_loader.c
  * spi: Fix use-after-free with devm_spi_alloc_*
      drivers/spi/spi.c
      include/linux/spi/spi.h
    staging: greybus: uart: fix unprivileged TIOCCSERIAL
    staging: rtl8192u: Fix potential infinite loop
  * irqchip/gic-v3: Fix OF_BAD_ADDR error handling
      drivers/irqchip/irq-gic-v3-mbi.c
    mtd: rawnand: gpmi: Fix a double free in gpmi_nand_init
    soundwire: stream: fix memory leak in stream config error path
    USB: gadget: udc: fix wrong pointer passed to IS_ERR() and PTR_ERR()
    usb: gadget: aspeed: fix dma map failure
    crypto: qat - fix error path in adf_isr_resource_alloc()
  * phy: marvell: ARMADA375_USBCLUSTER_PHY should not default to y, unconditionally
      drivers/phy/marvell/Kconfig
    soundwire: bus: Fix device found flag correctly
  * bus: qcom: Put child node before return
      drivers/bus/qcom-ebi2.c
    mtd: require write permissions for locking and badblock ioctls
    fotg210-udc: Complete OUT requests on short packets
    fotg210-udc: Don't DMA more than the buffer can take
    fotg210-udc: Mask GRP2 interrupts we don't handle
    fotg210-udc: Remove a dubious condition leading to fotg210_done
    fotg210-udc: Fix EP0 IN requests bigger than two packets
    fotg210-udc: Fix DMA on EP0 for length > max packet size
    crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
    crypto: qat - don't release uninitialized resources
    usb: gadget: pch_udc: Check for DMA mapping error
    usb: gadget: pch_udc: Check if driver is present before calling ->setup()
    usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits()
    x86/microcode: Check for offline CPUs before requesting new microcode
    mtd: rawnand: qcom: Return actual error code instead of -ENODEV
    mtd: Handle possible -EPROBE_DEFER from parse_mtd_partitions()
    mtd: rawnand: brcmnand: fix OOB R/W with Hamming ECC
    mtd: rawnand: fsmc: Fix error code in fsmc_nand_probe()
  * regmap: set debugfs_name to NULL after it is freed
      drivers/base/regmap/regmap-debugfs.c
    usb: typec: tcpci: Check ROLE_CONTROL while interpreting CC_STATUS
    serial: stm32: fix tx_empty condition
    serial: stm32: fix incorrect characters on console
    ARM: dts: exynos: correct PMIC interrupt trigger level on Snow
    ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250
    ARM: dts: exynos: correct PMIC interrupt trigger level on Odroid X/U3 family
    ARM: dts: exynos: correct PMIC interrupt trigger level on Midas family
    ARM: dts: exynos: correct MUIC interrupt trigger level on Midas family
    ARM: dts: exynos: correct fuel gauge interrupt trigger level on Midas family
    memory: gpmc: fix out of bounds read and dereference on gpmc_cs[]
    usb: gadget: pch_udc: Revert d3cb25a121 completely
  * ovl: fix missing revert_creds() on error path
      fs/overlayfs/copy_up.c
    KVM: s390: split kvm_s390_real_to_abs
    KVM: s390: fix guarded storage control register handling
    KVM: s390: split kvm_s390_logical_to_effective
    x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is supported
    ALSA: hda/realtek: Remove redundant entry for ALC861 Haier/Uniwill devices
    ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries
    ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries
    ALSA: hda/realtek: Re-order ALC269 Dell quirk table entries
    ALSA: hda/realtek: Re-order ALC269 HP quirk table entries
    ALSA: hda/realtek: Re-order ALC882 Clevo quirk table entries
    ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries
    ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries
    drm/radeon: fix copy of uninitialized variable back to userspace
  * cfg80211: scan: drop entry from hidden_list on overflow
      net/wireless/scan.c
    ipw2x00: potential buffer overflow in libipw_wx_set_encodeext()
    md: Fix missing unused status line of /proc/mdstat
    md: md_open returns -EBUSY when entering racing area
    md: factor out a mddev_find_locked helper from mddev_find
    md: split mddev_find
    md-cluster: fix use-after-free issue when removing rdev
    md/bitmap: wait for external bitmap writes to complete during tear down
    misc: vmw_vmci: explicitly initialize vmci_datagram payload
    misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg struct
    misc: lis3lv02d: Fix false-positive WARN on various HP models
    iio:accel:adis16201: Fix wrong axis assignment that prevents loading
    FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR
    MIPS: pci-rt2880: fix slot 0 configuration
    MIPS: pci-mt7620: fix PLL lock check
    ASoC: samsung: tm2_wm5110: check of of_parse return value
    net/nfc: fix use-after-free llcp_sock_bind/connect
  * bluetooth: eliminate the potential race condition when removing the HCI controller
      net/bluetooth/hci_request.c
    hsr: use netdev_err() instead of WARN_ONCE()
  * Bluetooth: verify AMP hci_chan before amp_destroy
      include/net/bluetooth/hci_core.h
      net/bluetooth/hci_event.c
  * modules: inherit TAINT_PROPRIETARY_MODULE
      include/linux/module.h
      kernel/module.c
  * modules: return licensing information from find_symbol
      include/linux/module.h
      kernel/module.c
  * modules: rename the licence field in struct symsearch to license
      include/linux/module.h
      kernel/module.c
  * modules: unexport __module_address
      kernel/module.c
  * modules: unexport __module_text_address
      kernel/module.c
  * modules: mark each_symbol_section static
      include/linux/module.h
      kernel/module.c
  * modules: mark find_symbol static
      include/linux/module.h
      kernel/module.c
  * modules: mark ref_module static
      include/linux/module.h
      kernel/module.c
  * dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails
      drivers/md/dm-rq.c
    dm space map common: fix division bug in sm_ll_find_free_block()
    dm persistent data: packed struct should have an aligned() attribute too
  * tracing: Restructure trace_clock_global() to never block
      kernel/trace/trace_clock.c
  * tracing: Map all PIDs to command lines
      kernel/trace/trace.c
    rsi: Use resume_noirq for SDIO
    tty: fix memory leak in vc_deallocate
    usb: dwc2: Fix session request interrupt handler
  * usb: dwc3: gadget: Fix START_TRANSFER link state check
      drivers/usb/dwc3/gadget.c
  * usb: gadget/function/f_fs string table fix for multiple languages
      drivers/usb/gadget/function/f_fs.c
  * usb: gadget: Fix double free of device descriptor pointers
      drivers/usb/gadget/config.c
    usb: gadget: dummy_hcd: fix gpf in gadget_setup
    media: dvbdev: Fix memory leak in dvb_media_device_free()
  * ext4: fix error code in ext4_commit_super
      fs/ext4/super.c
  * ext4: do not set SB_ACTIVE in ext4_orphan_cleanup()
      fs/ext4/super.c
  * ext4: fix check to prevent false positive report of incorrect used inodes
      fs/ext4/ialloc.c
    arm64: vdso: remove commas between macro name and arguments
  * posix-timers: Preserve return value in clock_adjtime32()
      kernel/time/posix-timers.c
  * Revert 337f13046f ("futex: Allow FUTEX_CLOCK_REALTIME with FUTEX_WAIT op")
      kernel/futex.c
    jffs2: check the validity of dstlen in jffs2_zlib_compress()
  * Fix misc new gcc warnings
      include/scsi/libfcoe.h
      net/bluetooth/ecdh_helper.h
  * security: commoncap: fix -Wstringop-overread warning
      security/commoncap.c
    dm raid: fix inconclusive reshape layout on fast raid4/5/6 table reload sequences
    md/raid1: properly indicate failure when ending a failed write request
    tpm: vtpm_proxy: Avoid reading host log when using a virtual device
    intel_th: pci: Add Alder Lake-M support
    powerpc: fix EDEADLOCK redefinition error in uapi/asm/errno.h
    powerpc/eeh: Fix EEH handling for hugepages in ioremap space.
    jffs2: Fix kasan slab-out-of-bounds problem
    NFSv4: Don't discard segments marked for return in _pnfs_return_layout()
    NFS: Don't discard pNFS layout segments that are marked for return
    ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure
    openvswitch: fix stack OOB read while fragmenting IPv4 packets
    mlxsw: spectrum_mr: Update egress RIF list before route's action
  * f2fs: fix to avoid out-of-bounds memory access
      fs/f2fs/node.c
    ubifs: Only check replay with inode type to judge if inode linked
  * arm64/vdso: Discard .note.gnu.property sections in vDSO
      arch/arm64/kernel/vdso/vdso.lds.S
    btrfs: fix race when picking most recent mod log operation for an old root
    ALSA: hda/realtek: Add quirk for Intel Clevo PCx0Dx
  * ALSA: usb-audio: Add dB range mapping for Sennheiser Communications Headset PC 8
      sound/usb/mixer_maps.c
  * ALSA: usb-audio: More constifications
      sound/usb/mixer.c
      sound/usb/mixer_maps.c
      sound/usb/mixer_quirks.c
      sound/usb/mixer_scarlett.c
      sound/usb/proc.c
      sound/usb/stream.c
      sound/usb/validate.c
  * ALSA: usb-audio: Explicitly set up the clock selector
      sound/usb/clock.c
    ALSA: sb: Fix two use after free in snd_sb_qsound_build
    ALSA: hda/conexant: Re-order CX5066 quirk table entries
    ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer
    s390/archrandom: add parameter check for s390_arch_random_generate
    scsi: libfc: Fix a format specifier
    scsi: lpfc: Remove unsupported mbox PORT_CAPABILITIES logic
    scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO response
    drm/amdgpu: fix NULL pointer dereference
    amdgpu: avoid incorrect %hu format string
    drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal
    media: gscpa/stv06xx: fix memory leak
    media: dvb-usb: fix memory leak in dvb_usb_adapter_init
    media: i2c: adv7842: fix possible use-after-free in adv7842_remove()
    media: i2c: adv7511-v4l2: fix possible use-after-free in adv7511_remove()
    media: adv7604: fix possible use-after-free in adv76xx_remove()
    media: tc358743: fix possible use-after-free in tc358743_remove()
    power: supply: s3c_adc_battery: fix possible use-after-free in s3c_adc_bat_remove()
    power: supply: generic-adc-battery: fix possible use-after-free in gab_remove()
    clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return
    media: vivid: update EDID
    media: em28xx: fix memory leak
    scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg()
    scsi: qla2xxx: Fix use after free in bsg
    scsi: qla2xxx: Always check the return value of qla24xx_get_isp_stats()
    drm/amdgpu : Fix asic reset regression issue introduce by 8f211fe8ac7c4f
    power: supply: Use IRQF_ONESHOT
    media: gspca/sq905.c: fix uninitialized variable
    media: media/saa7164: fix saa7164_encoder_register() memory leak bugs
    extcon: arizona: Fix some issues when HPDET IRQ fires after the jack has been unplugged
  * power: supply: bq27xxx: fix power_avg for newer ICs
      include/linux/power/bq27xxx_battery.h
  * media: drivers: media: pci: sta2x11: fix Kconfig dependency on GPIOLIB
      drivers/media/pci/sta2x11/Kconfig
    media: ite-cir: check for receive overflow
    scsi: target: pscsi: Fix warning in pscsi_complete_cmd()
    scsi: lpfc: Fix pt2pt connection does not recover after LOGO
    scsi: lpfc: Fix incorrect dbde assignment when building target abts wqe
    btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s
    phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove()
    intel_th: Consistency and off-by-one fix
    spi: omap-100k: Fix reference leak to master
    spi: dln2: Fix reference leak to master
  * xhci: fix potential array out of bounds with several interrupters
      drivers/usb/host/xhci.c
  * xhci: check control context is valid before dereferencing it.
      drivers/usb/host/xhci.c
  * usb: xhci-mtk: support quirk to disable usb2 lpm
      drivers/usb/host/xhci-mtk.h
  * perf/arm_pmu_platform: Fix error handling
      drivers/perf/arm_pmu_platform.c
    tee: optee: do not check memref size on return from Secure World
    x86/build: Propagate $(CLANG_FLAGS) to $(REALMODE_FLAGS)
  * PCI: PM: Do not read power state in pci_enable_device_flags()
      drivers/pci/pci.c
  * usb: xhci: Fix port minor revision
      drivers/usb/host/xhci-mem.c
  * usb: dwc3: gadget: Ignore EP queue requests during bus reset
      drivers/usb/dwc3/gadget.c
    usb: gadget: f_uac1: validate input parameters
    genirq/matrix: Prevent allocation counter corruption
    usb: gadget: uvc: add bInterval checking for HS mode
  * crypto: api - check for ERR pointers in crypto_destroy_tfm()
      crypto/api.c
      include/crypto/acompress.h
      include/crypto/aead.h
      include/crypto/akcipher.h
      include/crypto/hash.h
      include/crypto/kpp.h
      include/crypto/rng.h
      include/crypto/skcipher.h
    staging: wimax/i2400m: fix byte-order issue
    fbdev: zero-fill colormap in fbcmap.c
    intel_th: pci: Add Rocket Lake CPU support
    btrfs: fix metadata extent leak after failure to create subvolume
    cifs: Return correct error code from smb2_get_enc_key
    erofs: add unsupported inode i_format check
    mmc: core: Set read only for SD cards with permanent write protect bit
    mmc: core: Do a power cycle when the CMD11 fails
    mmc: block: Issue a cache flush only when it's enabled
    mmc: block: Update ext_csd.cache_ctrl if it was written
    mmc: sdhci-pci: Fix initialization of some SD cards for Intel BYT-based controllers
    scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand()
    spi: spi-ti-qspi: Free DMA resources
    mtd: rawnand: atmel: Update ecc_stats.corrected counter
    mtd: spinand: core: add missing MODULE_DEVICE_TABLE()
  * ecryptfs: fix kernel panic with null dev_name
      fs/ecryptfs/main.c
    arm64: dts: mt8173: fix property typo of 'phys' in dsi node
    arm64: dts: marvell: armada-37xx: add syscon compatible to NB clk node
    ARM: 9056/1: decompressor: fix BSS size calculation for LLVM ld.lld
    ftrace: Handle commands when closing set_ftrace_filter file
    ACPI: custom_method: fix a possible memory leak
    ACPI: custom_method: fix potential use-after-free issue
    s390/disassembler: increase ebpf disasm buffer size
  * BACKPORT: arm64: vdso32: drop -no-integrated-as flag
      arch/arm64/kernel/vdso32/Makefile
    ANDROID: GKI: update allowed list for incrementalfs.ko
  * ANDROID: dm-user: Drop additional reference
      drivers/md/dm-user.c
    ANDROID: FUSE OWNERS pointing to android-mainline OWNERS
  * UPSTREAM: sched: Fix out-of-bound access in uclamp
      kernel/sched/core.c
    Merge 4.19.190 into android-4.19-stable
Linux 4.19.190
  * ovl: allow upperdir inside lowerdir
      fs/overlayfs/super.c
    platform/x86: thinkpad_acpi: Correct thermal sensor allocation
  * USB: Add reset-resume quirk for WD19's Realtek Hub
      drivers/usb/core/quirks.c
  * USB: Add LPM quirk for Lenovo ThinkPad USB-C Dock Gen2 Ethernet
      drivers/usb/core/quirks.c
  * ALSA: usb-audio: Add MIDI quirk for Vox ToneLab EX
      sound/usb/quirks-table.h
    iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_gen2_enqueue_hcmd()
  * bpf: Fix masking negation logic upon negative dst register
      kernel/bpf/verifier.c
    mips: Do not include hi and lo in clobber list for R6
    iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_enqueue_hcmd()
  * net: usb: ax88179_178a: initialize local variables before use
      drivers/net/usb/ax88179_178a.c
    ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade()
  * ACPI: tables: x86: Reserve memory occupied by ACPI tables
      include/linux/acpi.h
    erofs: fix extended inode could cross boundary
    BACKPORT: FROMGIT: virt_wifi: Return micros for BSS TSF values
    ANDROID: Add allowed symbols requried from Qualcomm drivers
  * ANDROID: GKI: QoS: Prevent usage of dev_pm_qos_request as pm_qos_request
      drivers/base/power/qos.c
      include/linux/pm_qos.h
      kernel/power/qos.c

Bug: 189791081
Change-Id: Iab7796f3e6639b2a0b38164baa538277769efa03
Signed-off-by: Lucas Wei <lucaswei@google.com>
2021-06-14 17:29:51 +08:00
Alexandru Elisei
9e43d5e4f8 KVM: arm64: Initialize VCPU mdcr_el2 before loading it
commit 263d6287da1433aba11c5b4046388f2cdf49675c upstream.

When a VCPU is created, the kvm_vcpu struct is initialized to zero in
kvm_vm_ioctl_create_vcpu(). On VHE systems, the first time
vcpu.arch.mdcr_el2 is loaded on hardware is in vcpu_load(), before it is
set to a sensible value in kvm_arm_setup_debug() later in the run loop. The
result is that KVM executes for a short time with MDCR_EL2 set to zero.

This has several unintended consequences:

* Setting MDCR_EL2.HPMN to 0 is constrained unpredictable according to ARM
  DDI 0487G.a, page D13-3820. The behavior specified by the architecture
  in this case is for the PE to behave as if MDCR_EL2.HPMN is set to a
  value less than or equal to PMCR_EL0.N, which means that an unknown
  number of counters are now disabled by MDCR_EL2.HPME, which is zero.

* The host configuration for the other debug features controlled by
  MDCR_EL2 is temporarily lost. This has been harmless so far, as Linux
  doesn't use the other fields, but that might change in the future.

Let's avoid both issues by initializing the VCPU's mdcr_el2 field in
kvm_vcpu_vcpu_first_run_init(), thus making sure that the MDCR_EL2 register
has a consistent value after each vcpu_load().

Fixes: d5a21bcc29 ("KVM: arm64: Move common VHE/non-VHE trap config in separate functions")
Signed-off-by: Alexandru Elisei <alexandru.elisei@arm.com>
Signed-off-by: Marc Zyngier <maz@kernel.org>
Link: https://lore.kernel.org/r/20210407144857.199746-3-alexandru.elisei@arm.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-05-22 10:59:50 +02:00
Lucas Wei
5ff9988b08 Merge android-4.19-stable (4.19.183) into android-msm-pixel-4.19-lts
Merge 4.19.183 into android-4.19-stable
    ANDROID: refresh ABI XML to new version
    ANDROID: refresh ABI XML
Linux 4.19.183
    cifs: Fix preauth hash corruption
    x86/apic/of: Fix CPU devicetree-node lookups
  * genirq: Disable interrupts for force threaded handlers
      kernel/irq/manage.c
  * ext4: fix potential error in ext4_do_update_inode
      fs/ext4/inode.c
  * ext4: do not try to set xattr into ea_inode if value is empty
      fs/ext4/xattr.c
  * ext4: find old entry again if failed to rename whiteout
      fs/ext4/namei.c
    x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
    x86: Move TS_COMPAT back to asm/thread_info.h
  * kernel, fs: Introduce and use set_restart_fn() and arch_set_restart_data()
      fs/select.c
      include/linux/thread_info.h
      kernel/futex.c
      kernel/time/alarmtimer.c
      kernel/time/hrtimer.c
      kernel/time/posix-cpu-timers.c
    x86/ioapic: Ignore IRQ2 again
    perf/x86/intel: Fix a crash caused by zero PEBS status
    PCI: rpadlpar: Fix potential drc_name corruption in store functions
    iio: hid-sensor-temperature: Fix issues of timestamp channel
    iio: hid-sensor-prox: Fix scale not correct issue
    iio: hid-sensor-humidity: Fix alignment issue of timestamp channel
    iio: gyro: mpu3050: Fix error handling in mpu3050_trigger_handler
    iio: adis16400: Fix an error code in adis16400_initial_setup()
    iio:adc:qcom-spmi-vadc: add default scale to LR_MUX2_BAT_ID channel
  * iio:adc:stm32-adc: Add HAS_IOMEM dependency
      drivers/iio/adc/Kconfig
  * usb: gadget: configfs: Fix KASAN use-after-free
      drivers/usb/gadget/configfs.c
  * USB: replace hardcode maximum usb string length by definition
      drivers/usb/gadget/composite.c
      drivers/usb/gadget/configfs.c
      drivers/usb/gadget/usbstring.c
      include/uapi/linux/usb/ch9.h
    usbip: Fix incorrect double assignment to udc->ud.tcp_rx
  * usb-storage: Add quirk to defeat Kindle's automatic unload
      drivers/usb/storage/transport.c
      drivers/usb/storage/unusual_devs.h
      include/linux/usb_usual.h
    powerpc: Force inlining of cpu_has_feature() to avoid build failure
    nvme-rdma: fix possible hang when failing to set io queues
    scsi: lpfc: Fix some error codes in debugfs
  * net/qrtr: fix __netdev_alloc_skb call
      net/qrtr/qrtr.c
    sunrpc: fix refcount leak for rpc auth modules
    svcrdma: disable timeouts on rdma backchannel
    NFSD: Repair misuse of sv_lock in 5.10.16-rt30.
    nvmet: don't check iosqes,iocqes for discovery controllers
    ASoC: fsl_ssi: Fix TDM slot setup for I2S mode
    btrfs: fix slab cache flags for free space tree bitmap
    btrfs: fix race when cloning extent buffer during rewind of an old root
    tools build: Check if gettid() is available before providing helper
    tools build feature: Check if eventfd() is available
    tools build feature: Check if get_current_dir_name() is available
    perf tools: Use %define api.pure full instead of %pure-parser
    lkdtm: don't move ctors to .rodata
  * vmlinux.lds.h: Create section for protection against instrumentation
      include/asm-generic/sections.h
      include/asm-generic/vmlinux.lds.h
      include/linux/compiler.h
      include/linux/compiler_types.h
      scripts/mod/modpost.c
  * Revert "PM: runtime: Update device status before letting suppliers suspend"
      drivers/base/power/runtime.c
    ALSA: hda: generic: Fix the micmute led init state
    ASoC: ak5558: Add MODULE_DEVICE_TABLE
    ASoC: ak4458: Add MODULE_DEVICE_TABLE
    ANDROID: clang: update to 12.0.4
    Merge 4.19.182 into android-4.19-stable
Linux 4.19.182
    net: dsa: b53: Support setting learning on port
    net: dsa: tag_mtk: fix 802.1ad VLAN egress
  * bpf: Add sanity check for upper ptr_limit
      kernel/bpf/verifier.c
  * bpf: Simplify alu_limit masking for pointer arithmetic
      kernel/bpf/verifier.c
  * bpf: Fix off-by-one for area size in creating mask to left
      kernel/bpf/verifier.c
  * bpf: Prohibit alu ops for pointer types not defining ptr_limit
      kernel/bpf/verifier.c
  * KVM: arm64: nvhe: Save the SPE context early
      arch/arm64/include/asm/kvm_hyp.h
  * ext4: check journal inode extents more carefully
      fs/ext4/block_validity.c
      fs/ext4/ext4.h
      fs/ext4/extents.c
      fs/ext4/indirect.c
      fs/ext4/inode.c
      fs/ext4/mballoc.c
  * Revert "net: Introduce parse_protocol header_ops callback"
      include/linux/netdevice.h
  * Revert "net: check if protocol extracted by virtio_net_hdr_set_proto is correct"
      include/linux/virtio_net.h
    Merge 4.19.181 into android-4.19-stable
Linux 4.19.181
    xen/events: avoid handling the same event on two cpus at the same time
    xen/events: don't unmask an event channel when an eoi is pending
    xen/events: reset affinity of 2-level event when tearing it down
    KVM: arm64: Fix exclusive limit for IPA size
    hwmon: (lm90) Fix max6658 sporadic wrong temperature reading
    x86/unwind/orc: Disable KASAN checking in the ORC unwinder, part 2
    binfmt_misc: fix possible deadlock in bm_register_write
    powerpc/64s: Fix instruction encoding for lis in ppc_function_entry()
  * include/linux/sched/mm.h: use rcu_dereference in in_vfork()
      include/linux/sched/mm.h
  * stop_machine: mark helpers __always_inline
      include/linux/stop_machine.h
  * hrtimer: Update softirq_expires_next correctly after __hrtimer_get_next_event()
      kernel/time/hrtimer.c
  * configfs: fix a use-after-free in __configfs_open_file
      fs/configfs/file.c
    block: rsxx: fix error return code of rsxx_pci_probe()
    NFSv4.2: fix return value of _nfs4_get_security_label()
    sh_eth: fix TRSCER mask for R7S72100
    staging: comedi: pcl818: Fix endian problem for AI command data
    staging: comedi: pcl711: Fix endian problem for AI command data
    staging: comedi: me4000: Fix endian problem for AI command data
    staging: comedi: dmm32at: Fix endian problem for AI command data
    staging: comedi: das800: Fix endian problem for AI command data
    staging: comedi: das6402: Fix endian problem for AI command data
    staging: comedi: adv_pci1710: Fix endian problem for AI command data
    staging: comedi: addi_apci_1500: Fix endian problem for command sample
    staging: comedi: addi_apci_1032: Fix endian problem for COS sample
    staging: rtl8192e: Fix possible buffer overflow in _rtl92e_wx_set_scan
    staging: rtl8712: Fix possible buffer overflow in r8712_sitesurvey_cmd
    staging: ks7010: prevent buffer overflow in ks_wlan_set_scan()
    staging: rtl8188eu: fix potential memory corruption in rtw_check_beacon_data()
    staging: rtl8712: unterminated string leads to read overflow
    staging: rtl8188eu: prevent ->ssid overflow in rtw_wx_set_scan()
    staging: rtl8192u: fix ->ssid overflow in r8192_wx_set_scan()
    usbip: fix vudc usbip_sockfd_store races leading to gpf
    usbip: fix vhci_hcd attach_store() races leading to gpf
    usbip: fix stub_dev usbip_sockfd_store() races leading to gpf
    usbip: fix vudc to check for stream socket
    usbip: fix vhci_hcd to check for stream socket
    usbip: fix stub_dev to check for stream socket
    USB: serial: cp210x: add some more GE USB IDs
    USB: serial: cp210x: add ID for Acuity Brands nLight Air Adapter
    USB: serial: ch341: add new Product ID
    USB: serial: io_edgeport: fix memory leak in edge_startup
  * usb: xhci: Fix ASMedia ASM1042A and ASM3242 DMA addressing
      drivers/usb/host/xhci-pci.c
  * xhci: Improve detection of device initiated wake signal.
      drivers/usb/host/xhci.c
    usb: renesas_usbhs: Clear PIPECFG for re-enabling pipe with other EPNUM
    USB: usblp: fix a hang in poll() if disconnected
  * usb: dwc3: qcom: Honor wakeup enabled/disabled state
      drivers/usb/dwc3/dwc3-qcom.c
    usb: gadget: f_uac1: stop playback on function disable
    usb: gadget: f_uac2: always increase endpoint max_packet_size by one audio slot
  * USB: gadget: u_ether: Fix a configfs return code
      drivers/usb/gadget/function/u_ether_configfs.h
    Goodix Fingerprint device is not a modem
    mmc: cqhci: Fix random crash when remove mmc module/card
    mmc: core: Fix partition switch time for eMMC
    s390/dasd: fix hanging IO request during DASD driver unbind
    s390/dasd: fix hanging DASD driver unbind
  * Revert 95ebabde382c ("capabilities: Don't allow writing ambiguous v3 file capabilities")
      security/commoncap.c
  * ALSA: usb-audio: Apply the control quirk to Plantronics headsets
      sound/usb/quirks.c
  * ALSA: usb-audio: Fix "cannot get freq eq" errors on Dell AE515 sound bar
      sound/usb/quirks.c
    ALSA: hda: Avoid spurious unsol event handling during S3/S4
    ALSA: hda: Drop the BATCH workaround for AMD controllers
    ALSA: hda/hdmi: Cancel pending works before suspend
  * ALSA: usb: Add Plantronics C320-M USB ctrl msg delay quirk
      sound/usb/quirks.c
    scsi: target: core: Prevent underflow for service actions
  * scsi: target: core: Add cmd length set before cmd complete
      include/target/target_core_backend.h
    scsi: libiscsi: Fix iscsi_prep_scsi_cmd_pdu() error handling
    s390/smp: __smp_rescan_cpus() - move cpumask away from stack
    i40e: Fix memory leak in i40e_probe
  * PCI: Fix pci_register_io_range() memory leak
      drivers/pci/pci.c
      lib/logic_pio.c
    PCI: mediatek: Add missing of_node_put() to fix reference leak
    PCI: xgene-msi: Fix race in installing chained irq handler
    sparc64: Use arch_validate_flags() to validate ADI flag
    sparc32: Limit memblock allocation to low memory
    powerpc/perf: Record counter overflow always if SAMPLE_IP is unset
    powerpc: improve handling of unrecoverable system reset
    powerpc/pci: Add ppc_md.discover_phbs()
    mmc: mediatek: fix race condition between msdc_request_timeout and irq
    mmc: mxs-mmc: Fix a resource leak in an error handling path in 'mxs_mmc_probe()'
    udf: fix silent AED tagLocation corruption
    i2c: rcar: optimize cacheline to minimize HW race condition
  * net: phy: fix save wrong speed and duplex problem if autoneg is on
      drivers/net/phy/phy.c
    media: v4l: vsp1: Fix bru null pointer access
    media: v4l: vsp1: Fix uif null pointer access
    media: usbtv: Fix deadlock on suspend
    sh_eth: fix TRSCER mask for R7S9210
    s390/cio: return -EFAULT if copy_to_user() fails
    drm: meson_drv add shutdown function
  * drm/compat: Clear bounce structures
      drivers/gpu/drm/drm_ioc32.c
    s390/cio: return -EFAULT if copy_to_user() fails again
    perf traceevent: Ensure read cmdlines are null terminated.
    selftests: forwarding: Fix race condition in mirror installation
    net: stmmac: fix watchdog timeout during suspend/resume stress test
    net: stmmac: stop each tx channel independently
  * net: qrtr: fix error return code of qrtr_sendmsg()
      net/qrtr/qrtr.c
    net: davicom: Fix regulator not turned off on driver removal
    net: davicom: Fix regulator not turned off on failed probe
    net: lapbether: Remove netif_start_queue / netif_stop_queue
  * cipso,calipso: resolve a number of problems with the DOI refcounts
      net/ipv4/cipso_ipv4.c
      net/ipv6/calipso.c
      net/netlabel/netlabel_cipso_v4.c
    net: usb: qmi_wwan: allow qmimux add/del with master up
  * net: sched: avoid duplicates in classes dump
      net/sched/sch_api.c
    net: stmmac: fix incorrect DMA channel intr enable setting of EQoS v4.10
    net/mlx4_en: update moderation when config reset
    net: avoid infinite loop in mpls_gso_segment when mpls_hlen == 0
  * net: check if protocol extracted by virtio_net_hdr_set_proto is correct
      include/linux/virtio_net.h
    sh_eth: fix TRSCER mask for SH771x
  * Revert "mm, slub: consider rest of partial list if acquire_slab() fails"
      mm/slub.c
    scripts/recordmcount.{c,pl}: support -ffunction-sections .text.* section names
    cifs: return proper error code in statfs(2)
  * tcp: add sanity tests to TCP_QUEUE_SEQ
      net/ipv4/tcp.c
  * tcp: annotate tp->write_seq lockless reads
      include/net/tcp.h
      net/ipv4/tcp.c
      net/ipv4/tcp_diag.c
      net/ipv4/tcp_ipv4.c
      net/ipv4/tcp_minisocks.c
      net/ipv4/tcp_output.c
      net/ipv6/tcp_ipv6.c
  * tcp: annotate tp->copied_seq lockless reads
      net/ipv4/tcp.c
      net/ipv4/tcp_diag.c
      net/ipv4/tcp_input.c
      net/ipv4/tcp_ipv4.c
      net/ipv4/tcp_minisocks.c
      net/ipv4/tcp_output.c
      net/ipv6/tcp_ipv6.c
    mt76: dma: do not report truncated frames to mac80211
  * netfilter: x_tables: gpf inside xt_find_revision()
      net/netfilter/x_tables.c
    can: flexcan: enable RX FIFO after FRZ/HALT valid
    can: flexcan: assert FRZ bit in flexcan_chip_freeze()
  * can: skb: can_skb_set_owner(): fix ref counting if socket was closed before setting skb ownership
      include/linux/can/skb.h
  * net: Introduce parse_protocol header_ops callback
      include/linux/netdevice.h
  * net: Fix gro aggregation for udp encaps with zero csum
      net/ipv4/udp_offload.c
    ath9k: fix transmitting to stations in dynamic SMPS mode
    ethernet: alx: fix order of calls on resume
  * uapi: nfnetlink_cthelper.h: fix userspace compilation error
      include/uapi/linux/netfilter/nfnetlink_cthelper.h
  * FROMGIT: configfs: fix a use-after-free in __configfs_open_file
      fs/configfs/file.c
    ANDROID: GKI: Enable CONFIG_BT for x86
  * Revert "Revert "zram: close udev startup race condition as default groups""
      drivers/block/zram/zram_drv.c
  * Revert "block: genhd: add 'groups' argument to device_add_disk"
      block/genhd.c
      drivers/scsi/sd.c
      include/linux/genhd.h
    Revert "nvme: register ns_id attributes as default sysfs groups"
    Revert "aoe: register default groups with device_add_disk()"
  * Revert "zram: register default groups with device_add_disk()"
      drivers/block/zram/zram_drv.c
    Revert "virtio-blk: modernize sysfs attribute creation"
    Merge 4.19.180 into android-4.19-stable
Linux 4.19.180
    mmc: sdhci-of-dwcmshc: set SDHCI_QUIRK2_PRESET_VALUE_BROKEN
    drm/msm/a5xx: Remove overwriting A5XX_PC_DBG_ECO_CNTL register
  * misc: eeprom_93xx46: Add quirk to support Microchip 93LC46B eeprom
      include/linux/eeprom_93xx46.h
  * PCI: Add function 1 DMA alias quirk for Marvell 9215 SATA controller
      drivers/pci/quirks.c
    ASoC: Intel: bytcr_rt5640: Add quirk for ARCHOS Cesium 140
    media: cx23885: add more quirks for reset DMA on some AMD IOMMU
  * HID: mf: add support for 0079:1846 Mayflash/Dragonrise USB Gamecube Adapter
      drivers/hid/hid-ids.h
      drivers/hid/hid-quirks.c
    platform/x86: acer-wmi: Add ACER_CAP_KBD_DOCK quirk for the Aspire Switch 10E SW3-016
    platform/x86: acer-wmi: Add support for SW_TABLET_MODE on Switch devices
    platform/x86: acer-wmi: Add ACER_CAP_SET_FUNCTION_MODE capability flag
    platform/x86: acer-wmi: Add new force_caps module parameter
    platform/x86: acer-wmi: Cleanup accelerometer device handling
    platform/x86: acer-wmi: Cleanup ACER_CAP_FOO defines
    mwifiex: pcie: skip cancel_work_sync() on reset failure path
    iommu/amd: Fix sleeping in atomic in increase_address_space()
  * dm table: fix zoned iterate_devices based device capability checks
      drivers/md/dm-table.c
  * dm table: fix DAX iterate_devices based device capability checks
      drivers/md/dm-table.c
  * dm table: fix iterate_devices based device capability checks
      drivers/md/dm-table.c
  * net: dsa: add GRO support via gro_cells
      net/dsa/Kconfig
    r8169: fix resuming from suspend on RTL8105e if machine runs on battery
  * dm verity: fix FEC for RS roots unaligned to block size
      drivers/md/dm-verity-fec.c
    rsxx: Return -EFAULT if copy_to_user() fails
  * RDMA/rxe: Fix missing kconfig dependency on CRYPTO
      drivers/infiniband/sw/rxe/Kconfig
    ALSA: ctxfi: cthw20k2: fix mask on conf to allow 4 bits
    virtio-blk: modernize sysfs attribute creation
  * zram: register default groups with device_add_disk()
      drivers/block/zram/zram_drv.c
    aoe: register default groups with device_add_disk()
    nvme: register ns_id attributes as default sysfs groups
  * block: genhd: add 'groups' argument to device_add_disk
      block/genhd.c
      drivers/scsi/sd.c
      include/linux/genhd.h
  * Revert "zram: close udev startup race condition as default groups"
      drivers/block/zram/zram_drv.c
    usbip: tools: fix build error for multiple definition
    drm/amdgpu: fix parameter error of RREG32_PCIE() in amdgpu_regs_pcie
  * dm bufio: subtract the number of initial sectors in dm_bufio_get_device_size
      drivers/md/dm-bufio.c
  * PM: runtime: Update device status before letting suppliers suspend
      drivers/base/power/runtime.c
    btrfs: unlock extents in btrfs_zero_range in case of quota reservation errors
    btrfs: free correct amount of space in btrfs_delayed_inode_reserve_metadata
    btrfs: validate qgroup inherit for SNAP_CREATE_V2 ioctl
    btrfs: fix raid6 qstripe kmap
    btrfs: raid56: simplify tracking of Q stripe presence
  * ANDROID: GKI: hack up fs/sysfs/file.c to prevent GENKSYMS change
      fs/sysfs/file.c
  * Revert "arm64: Avoid redundant type conversions in xchg() and cmpxchg()"
      arch/arm64/include/asm/atomic_ll_sc.h
      arch/arm64/include/asm/atomic_lse.h
      arch/arm64/include/asm/cmpxchg.h
    Merge 4.19.179 into android-4.19-stable
Linux 4.19.179
    ALSA: hda/realtek: Apply dual codec quirks for MSI Godlike X570 board
    ALSA: hda/realtek: Add quirk for Clevo NH55RZQ
  * media: v4l: ioctl: Fix memory leak in video_usercopy
      drivers/media/v4l2-core/v4l2-ioctl.c
  * swap: fix swapfile read/write offset
      mm/page_io.c
      mm/swapfile.c
  * zsmalloc: account the number of compacted pages correctly
      drivers/block/zram/zram_drv.c
      include/linux/zsmalloc.h
      mm/zsmalloc.c
    xen-netback: respect gnttab_map_refs()'s return value
    Xen/gnttab: handle p2m update errors on a per-slot basis
    scsi: iscsi: Verify lengths on passthrough PDUs
    scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE
  * sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output
      fs/sysfs/file.c
      include/linux/sysfs.h
    scsi: iscsi: Restrict sessions and handles to admin capabilities
    ASoC: Intel: bytcr_rt5640: Add quirk for the Acer One S1002 tablet
    ASoC: Intel: bytcr_rt5640: Add quirk for the Voyo Winpad A15 tablet
    ASoC: Intel: bytcr_rt5640: Add quirk for the Estar Beauty HD MID 7316R tablet
    parisc: Bump 64-bit IRQ stack size to 64 KB
    btrfs: fix error handling in commit_fs_roots
  * f2fs: fix to set/clear I_LINKABLE under i_lock
      fs/f2fs/namei.c
  * f2fs: handle unallocated section and zone on pinned/atgc
      fs/f2fs/segment.h
    media: uvcvideo: Allow entities with no pads
    drm/amd/display: Guard against NULL pointer deref when get_i2c_info fails
  * PCI: Add a REBAR size quirk for Sapphire RX 5600 XT Pulse
      drivers/pci/pci.c
    crypto: tcrypt - avoid signed overflow in byte count
    staging: most: sound: add sanity check for function argument
  * Bluetooth: Fix null pointer dereference in amp_read_loc_assoc_final_data
      net/bluetooth/amp.c
    x86/build: Treat R_386_PLT32 relocation as R_386_PC32
    ath10k: fix wmi mgmt tx queue full due to race condition
    pktgen: fix misuse of BUG_ON() in pktgen_thread_worker()
    Bluetooth: hci_h5: Set HCI_QUIRK_SIMULTANEOUS_DISCOVERY for btrtl
    wlcore: Fix command execute failure 19 for wl12xx
    vt/consolemap: do font sum unsigned
    x86/reboot: Add Zotac ZBOX CI327 nano PCI reboot quirk
    staging: fwserial: Fix error handling in fwserial_create
    rsi: Move card interrupt handling to RX thread
    rsi: Fix TX EAPOL packet handling against iwlwifi AP
    dt-bindings: net: btusb: DT fix s/interrupt-name/interrupt-names/
  * net: bridge: use switchdev for port flags set through sysfs too
      net/bridge/br_sysfs_if.c
    mm/hugetlb.c: fix unnecessary address expansion of pmd sharing
  * net: fix up truesize of cloned skb in skb_prepare_for_shift()
      net/core/skbuff.c
  * smackfs: restrict bytes count in smackfs write functions
      security/smack/smackfs.c
    xfs: Fix assert failure in xfs_setattr_size()
    media: mceusb: sanity check for prescaler value
    udlfb: Fix memory leak in dlfb_usb_probe
    JFS: more checks for invalid superblock
    MIPS: VDSO: Use CLANG_FLAGS instead of filtering out '--target='
  * arm64: Use correct ll/sc atomic constraints
      arch/arm64/include/asm/atomic_ll_sc.h
  * arm64: cmpxchg: Use "K" instead of "L" for ll/sc immediate constraint
      arch/arm64/include/asm/atomic_ll_sc.h
  * arm64: Avoid redundant type conversions in xchg() and cmpxchg()
      arch/arm64/include/asm/atomic_ll_sc.h
      arch/arm64/include/asm/atomic_lse.h
      arch/arm64/include/asm/cmpxchg.h
  * arm64 module: set plt* section addresses to 0x0
      arch/arm64/kernel/module.lds
    virtio/s390: implement virtio-ccw revision 2 correctly
    drm/virtio: use kvmalloc for large allocations
    hugetlb: fix update_and_free_page contig page struct assumption
    net: usb: qmi_wwan: support ZTE P685M modem
    ANDROID: clang: update to 12.0.3
  * Revert "block: split .sysfs_lock into two locks"
      block/blk-core.c
      block/blk-mq-sysfs.c
      block/blk-sysfs.c
      block/blk.h
      block/elevator.c
      include/linux/blkdev.h
  * Revert "block: fix race between switching elevator and removing queues"
      block/blk-sysfs.c
  * Revert "block: don't release queue's sysfs lock during switching elevator"
      block/blk-sysfs.c
      block/elevator.c
  * Revert "dm: fix deadlock when swapping to encrypted device"
      drivers/md/dm-core.h
      drivers/md/dm.c
      include/linux/device-mapper.h
    Merge 4.19.178 into android-4.19-stable
Linux 4.19.178
    ARM: dts: aspeed: Add LCLK to lpc-snoop
    net: qrtr: Fix memory leak in qrtr_tun_open
    dm era: Update in-core bitset after committing the metadata
  * net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending
      include/linux/icmpv6.h
      include/linux/ipv6.h
      include/net/icmp.h
      net/ipv4/icmp.c
      net/ipv6/icmp.c
      net/ipv6/ip6_icmp.c
  * ipv6: silence compilation warning for non-IPV6 builds
      include/linux/icmpv6.h
  * ipv6: icmp6: avoid indirect call for icmpv6_send()
      include/linux/icmpv6.h
      net/ipv6/icmp.c
      net/ipv6/ip6_icmp.c
  * xfrm: interface: use icmp_ndo_send helper
      net/xfrm/xfrm_interface.c
    sunvnet: use icmp_ndo_send helper
    gtp: use icmp_ndo_send helper
  * icmp: allow icmpv6_ndo_send to work with CONFIG_IPV6=n
      include/linux/icmpv6.h
  * icmp: introduce helper for nat'd source address in network device context
      include/linux/icmpv6.h
      include/net/icmp.h
      net/ipv4/icmp.c
      net/ipv6/ip6_icmp.c
    dm era: only resize metadata in preresume
    dm era: Reinitialize bitset cache before digesting a new writeset
    dm era: Use correct value size in equality function of writeset tree
    dm era: Fix bitset memory leaks
    dm era: Verify the data block size hasn't changed
    dm era: Recover committed writeset after crash
  * dm: fix deadlock when swapping to encrypted device
      drivers/md/dm-core.h
      drivers/md/dm.c
      include/linux/device-mapper.h
    gfs2: Don't skip dlm unlock if glock has an lvb
    sparc32: fix a user-triggerable oops in clear_user()
  * f2fs: fix out-of-repair __setattr_copy()
      fs/f2fs/file.c
    cpufreq: intel_pstate: Get per-CPU max freq via MSR_HWP_CAPABILITIES if available
  * printk: fix deadlock when kernel panic
      kernel/printk/printk_safe.c
    gpio: pcf857x: Fix missing first interrupt
    mmc: sdhci-esdhc-imx: fix kernel panic when remove module
  * module: Ignore _GLOBAL_OFFSET_TABLE_ when warning for undefined symbols
      kernel/module.c
  * arm64: Extend workaround for erratum 1024718 to all versions of Cortex-A55
      arch/arm64/Kconfig
      arch/arm64/kernel/cpufeature.c
    libnvdimm/dimm: Avoid race between probe and available_slots_show()
  * hugetlb: fix copy_huge_page_from_user contig page struct assumption
      mm/memory.c
    x86: fix seq_file iteration for pat/memtype.c
    seq_file: document how per-entry resources are managed.
    fs/affs: release old buffer head on error path
    mtd: spi-nor: hisi-sfc: Put child node np on error path
    watchdog: mei_wdt: request stop on unregister
  * arm64: uprobe: Return EOPNOTSUPP for AARCH32 instruction probing
      arch/arm64/kernel/probes/uprobes.c
    floppy: reintroduce O_NDELAY fix
    x86/reboot: Force all cpus to exit VMX root if VMX is supported
    media: ipu3-cio2: Fix mbus_code processing in cio2_subdev_set_fmt()
    staging: rtl8188eu: Add Edimax EW-7811UN V2 to device table
    staging: gdm724x: Fix DMA from stack
    staging/mt7621-dma: mtk-hsdma.c->hsdma-mt7621.c
    dts64: mt7622: fix slow sd card access
  * pstore: Fix typo in compression option name
      fs/pstore/platform.c
    drivers/misc/vmw_vmci: restrict too big queue size in qp_host_alloc_queue
    misc: rtsx: init of rts522a add OCP power off when no card is present
  * seccomp: Add missing return in non-void function
      kernel/seccomp.c
    crypto: sun4i-ss - handle BigEndian for cipher
    crypto: sun4i-ss - checking sg length is not sufficient
  * crypto: arm64/sha - add missing module aliases
      arch/arm64/crypto/sha1-ce-glue.c
      arch/arm64/crypto/sha2-ce-glue.c
    btrfs: fix extent buffer leak on failure to copy root
    btrfs: fix reloc root leak with 0 ref reloc roots on recovery
    btrfs: abort the transaction if we fail to inc ref in btrfs_copy_root
    KEYS: trusted: Fix migratable=1 failing
    tpm_tis: Clean up locality release
    tpm_tis: Fix check_locality for correct locality acquisition
    ALSA: hda/realtek: modify EAPD in the ALC886
    USB: serial: mos7720: fix error code in mos7720_write()
    USB: serial: mos7840: fix error code in mos7840_write()
    USB: serial: ftdi_sio: fix FTX sub-integer prescaler
  * usb: dwc3: gadget: Fix dep->interval for fullspeed interrupt
      drivers/usb/dwc3/gadget.c
  * usb: dwc3: gadget: Fix setting of DEPCFG.bInterval_m1
      drivers/usb/dwc3/gadget.c
    usb: musb: Fix runtime PM race in musb_queue_resume_work
    USB: serial: option: update interface mapping for ZTE P685M
    Input: i8042 - add ASUS Zenbook Flip to noselftest list
    Input: joydev - prevent potential read overflow in ioctl
  * Input: xpad - add support for PowerA Enhanced Wired Controller for Xbox Series X|S
      drivers/input/joystick/xpad.c
    Input: raydium_ts_i2c - do not send zero length
    HID: wacom: Ignore attempts to overwrite the touch_max value from HID
    ACPI: configfs: add missing check after configfs_register_default_group()
    ACPI: property: Fix fwnode string properties matching
  * blk-settings: align max_sectors on "logical_block_size" boundary
      block/blk-settings.c
  * scsi: bnx2fc: Fix Kconfig warning & CNIC build errors
      drivers/scsi/bnx2fc/Kconfig
  * mm/rmap: fix potential pte_unmap on an not mapped pte
      include/linux/rmap.h
    i2c: brcmstb: Fix brcmstd_send_i2c_cmd condition
  * arm64: Add missing ISB after invalidating TLB in __primary_switch
      arch/arm64/kernel/head.S
    r8169: fix jumbo packet handling on RTL8168e
    mm/hugetlb: fix potential double free in hugetlb_register_node() error path
  * mm/memory.c: fix potential pte_unmap_unlock pte error
      mm/memory.c
    ocfs2: fix a use after free on error
    vxlan: move debug check after netdev unregister
    net/mlx4_core: Add missed mlx4_free_cmd_mailbox()
    i40e: Fix add TC filter for IPv6
    i40e: Fix VFs not created
    i40e: Fix overwriting flow control settings during driver loading
    i40e: Add zero-initialization of AQ command structures
    i40e: Fix flow for IPv6 next header (extension header)
    regmap: sdw: use _no_pm functions in regmap_read/write
  * ext4: fix potential htree index checksum corruption
      fs/ext4/namei.c
    drm/msm/dsi: Correct io_start for MSM8994 (20nm PHY)
  * PCI: Align checking of syscall user config accessors
      drivers/pci/syscall.c
    VMCI: Use set_page_dirty_lock() when unregistering guest memory
    pwm: rockchip: rockchip_pwm_probe(): Remove superfluous clk_unprepare()
    misc: eeprom_93xx46: Add module alias to avoid breaking support for non device tree users
    misc: eeprom_93xx46: Fix module alias to enable module autoprobe
    sparc64: only select COMPAT_BINFMT_ELF if BINFMT_ELF is set
    Input: elo - fix an error code in elo_connect()
    perf test: Fix unaligned access in sample parsing test
    perf intel-pt: Fix missing CYC processing in PSB
    Input: sur40 - fix an error code in sur40_probe()
    spi: pxa2xx: Fix the controller numbering for Wildcat Point
    clk: qcom: gcc-msm8998: Fix Alpha PLL type for all GPLLs
    powerpc/8xx: Fix software emulation interrupt
    powerpc/pseries/dlpar: handle ibm, configure-connector delay status
    mfd: wm831x-auxadc: Prevent use after free in wm831x_auxadc_read_irq()
    spi: stm32: properly handle 0 byte transfer
    RDMA/rxe: Correct skb on loopback path
    RDMA/rxe: Fix coding error in rxe_recv.c
    perf tools: Fix DSO filtering when not finding a map for a sampled address
  * tracepoint: Do not fail unregistering a probe due to memory failure
      kernel/tracepoint.c
  * amba: Fix resource leak for drivers without .remove
      drivers/amba/bus.c
    ARM: 9046/1: decompressor: Do not clear SCTLR.nTLSMD for ARMv7+ cores
    mmc: renesas_sdhi_internal_dmac: Fix DMA buffer alignment from 8 to 128-bytes
    mmc: usdhi6rol0: Fix a resource leak in the error handling path of the probe
    powerpc/47x: Disable 256k page size
    KVM: PPC: Make the VMX instruction emulation routines static
    IB/umad: Return EPOLLERR in case of when device disassociated
    IB/umad: Return EIO in case of when device disassociated
    auxdisplay: ht16k33: Fix refresh rate handling
    isofs: release buffer head before return
    regulator: s5m8767: Drop regulators OF node reference
    spi: atmel: Put allocated master before return
  * certs: Fix blacklist flag type confusion
      include/linux/key.h
      security/keys/key.c
    regulator: axp20x: Fix reference cout leak
    clk: sunxi-ng: h6: Fix clock divider range on some clocks
    RDMA/mlx5: Use the correct obj_id upon DEVX TIR creation
    clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined
  * rtc: s5m: select REGMAP_I2C
      drivers/rtc/Kconfig
    power: reset: at91-sama5d2_shdwc: fix wkupdbc mask
  * of/fdt: Make sure no-map does not remove already reserved regions
      drivers/of/fdt.c
  * fdt: Properly handle "no-map" field in the memory region
      drivers/of/fdt.c
    mfd: bd9571mwv: Use devm_mfd_add_devices()
    dmaengine: hsu: disable spurious interrupt
    dmaengine: owl-dma: Fix a resource leak in the remove function
    dmaengine: fsldma: Fix a resource leak in an error handling path of the probe function
    dmaengine: fsldma: Fix a resource leak in the remove function
  * HID: core: detect and skip invalid inputs to snto32()
      drivers/hid/hid-core.c
    clk: sunxi-ng: h6: Fix CEC clock
    spi: cadence-quadspi: Abort read if dummy cycles required are too many
  * quota: Fix memory leak when handling corrupted quota file
      fs/quota/quota_v2.c
    clk: meson: clk-pll: fix initializing the old rate (fallback) for a PLL
  * capabilities: Don't allow writing ambiguous v3 file capabilities
      security/commoncap.c
    jffs2: fix use after free in jffs2_sum_write_data()
    fs/jfs: fix potential integer overflow on shift of a int
  * ima: Free IMA measurement buffer after kexec syscall
      include/linux/kexec.h
    ima: Free IMA measurement buffer on error
  * crypto: ecdh_helper - Ensure 'len >= secret.len' in decode_key()
      crypto/ecdh_helper.c
    hwrng: timeriomem - Fix cooldown period calculation
    btrfs: clarify error returns values in __load_free_space_cache
    Drivers: hv: vmbus: Avoid use-after-free in vmbus_onoffer_rescind()
    drm/amdgpu: Prevent shift wrapping in amdgpu_read_mask()
  * f2fs: fix to avoid inconsistent quota data
      fs/f2fs/file.c
      fs/f2fs/inline.c
    ASoC: cpcap: fix microphone timeslot mask
    ata: ahci_brcm: Add back regulators management
    crypto: talitos - Work around SEC6 ERRATA (AES-CTR mode data size error)
    media: uvcvideo: Accept invalid bFormatIndex and bFrameIndex values
    media: pxa_camera: declare variable when DEBUG is defined
    media: cx25821: Fix a bug when reallocating some dma memory
    media: qm1d1c0042: fix error return code in qm1d1c0042_init()
    media: lmedm04: Fix misuse of comma
    drm/amd/display: Fix 10/12 bpc setup in DCE output bit depth reduction.
    crypto: bcm - Rename struct device_private to bcm_device_private
    ASoC: cs42l56: fix up error handling in probe
    media: tm6000: Fix memleak in tm6000_start_stream
    media: media/pci: Fix memleak in empress_init
    media: em28xx: Fix use-after-free in em28xx_alloc_urbs
    media: vsp1: Fix an error handling path in the probe function
    media: camss: missing error code in msm_video_register()
    media: i2c: ov5670: Fix PIXEL_RATE minimum value
    MIPS: lantiq: Explicitly compare LTQ_EBU_PCC_ISTAT against 0
    MIPS: c-r4k: Fix section mismatch for loongson2_sc_init
    drm/amdgpu: Fix macro name _AMDGPU_TRACE_H_ in preprocessor if condition
    crypto: sun4i-ss - fix kmap usage
    gma500: clean up error handling in init
    drm/gma500: Fix error return code in psb_driver_load()
  * fbdev: aty: SPARC64 requires FB_ATY_CT
      drivers/video/fbdev/Kconfig
    net: mvneta: Remove per-cpu queue mapping for Armada 3700
    net: amd-xgbe: Fix network fluctuations when using 1G BELFUSE SFP
    net: amd-xgbe: Reset link when the link never comes back
    net: amd-xgbe: Fix NETDEV WATCHDOG transmit queue timeout warning
    net: amd-xgbe: Reset the PHY rx data path when mailbox command timeout
    ibmvnic: skip send_request_unmap for timeout reset
    ibmvnic: add memory barrier to protect long term buffer
    b43: N-PHY: Fix the update of coef for the PHY revision >= 3case
    cxgb4/chtls/cxgbit: Keeping the max ofld immediate data size same in cxgb4 and ulds
  * tcp: fix SO_RCVLOWAT related hangs under mem pressure
      include/net/tcp.h
  * bpf: Fix bpf_fib_lookup helper MTU check for SKB ctx
      net/core/filter.c
    mac80211: fix potential overflow when multiplying to u32 integers
    xen/netback: fix spurious event detection for common event case
    bnxt_en: reverse order of TX disable and carrier off
    ibmvnic: Set to CLOSED state even on error
    ath9k: fix data bus crash when setting nf_override via debugfs
  * bpf_lru_list: Read double-checked variable once without lock
      kernel/bpf/bpf_lru_list.c
    soc: aspeed: snoop: Add clock control logic
    ARM: s3c: fix fiq for clang IAS
    arm64: dts: msm8916: Fix reserved and rfsa nodes unit address
    ARM: dts: armada388-helios4: assign pinctrl to each fan
    ARM: dts: armada388-helios4: assign pinctrl to LEDs
    staging: rtl8723bs: wifi_regd.c: Fix incorrect number of regulatory rules
    usb: dwc2: Make "trimming xfer length" a debug message
    usb: dwc2: Abort transaction after errors with unknown reason
    usb: dwc2: Do not update data length if it is 0 on inbound transfers
    ARM: dts: Configure missing thermal interrupt for 4430
    memory: ti-aemif: Drop child node when jumping out loop
  * Bluetooth: Put HCI device if inquiry procedure interrupts
      net/bluetooth/hci_core.c
  * Bluetooth: drop HCI device reference before return
      net/bluetooth/a2mp.c
    usb: gadget: u_audio: Free requests only after callback
  * ACPICA: Fix exception code class checks
      include/acpi/acexcep.h
    cpufreq: brcmstb-avs-cpufreq: Fix resource leaks in ->remove()
    cpufreq: brcmstb-avs-cpufreq: Free resources in error path
    arm64: dts: allwinner: A64: Limit MMC2 bus frequency to 150 MHz
    arm64: dts: allwinner: Drop non-removable from SoPine/LTS SD card
    arm64: dts: allwinner: A64: properly connect USB PHY to port 0
  * bpf: Avoid warning when re-casting __bpf_call_base into __bpf_call_base_args
      include/linux/filter.h
    arm64: dts: exynos: correct PMIC interrupt trigger level on Espresso
    arm64: dts: exynos: correct PMIC interrupt trigger level on TM2
    ARM: dts: exynos: correct PMIC interrupt trigger level on Odroid XU3 family
    ARM: dts: exynos: correct PMIC interrupt trigger level on Arndale Octa
    ARM: dts: exynos: correct PMIC interrupt trigger level on Spring
    ARM: dts: exynos: correct PMIC interrupt trigger level on Rinato
    ARM: dts: exynos: correct PMIC interrupt trigger level on Monk
    ARM: dts: exynos: correct PMIC interrupt trigger level on Artik 5
  * Bluetooth: Fix initializing response id after clearing struct
      net/bluetooth/a2mp.c
    Bluetooth: btqcomsmd: Fix a resource leak in error handling paths in the probe function
    ath10k: Fix error handling in case of CE pipe init failure
  * random: fix the RNDRESEEDCRNG ioctl
      drivers/char/random.c
    MIPS: vmlinux.lds.S: add missing PAGE_ALIGNED_DATA() section
  * ALSA: usb-audio: Fix PCM buffer allocation in non-vmalloc mode
      sound/usb/pcm.c
    bfq: Avoid false bfq queue merging
    PCI: qcom: Use PHY_REFCLK_USE_PAD only for ipq8064
    kdb: Make memory allocations more robust
  * vmlinux.lds.h: add DWARF v5 sections
      include/asm-generic/vmlinux.lds.h
  * locking/static_key: Fix false positive warnings on concurrent dec/inc
      kernel/jump_label.c
  * jump_label/lockdep: Assert we hold the hotplug lock for _cpuslocked() operations
      kernel/jump_label.c
    scripts/recordmcount.pl: support big endian for ARCH sh
    cifs: Set CIFS_MOUNT_USE_PREFIX_PATH flag on setting cifs_sb->prepath.
    NET: usb: qmi_wwan: Adding support for Cinterion MV31
  * block: don't release queue's sysfs lock during switching elevator
      block/blk-sysfs.c
      block/elevator.c
  * block: fix race between switching elevator and removing queues
      block/blk-sysfs.c
  * block: split .sysfs_lock into two locks
      block/blk-core.c
      block/blk-mq-sysfs.c
      block/blk-sysfs.c
      block/blk.h
      block/elevator.c
      include/linux/blkdev.h
  * block: add helper for checking if queue is registered
      block/blk-sysfs.c
      block/elevator.c
      include/linux/blkdev.h
  * scripts: set proper OpenSSL include dir also for sign-file
      scripts/Makefile
  * scripts: use pkg-config to locate libcrypto
      scripts/Makefile
    arm64: tegra: Add power-domain for Tegra210 HDA
    ntfs: check for valid standard information attribute
  * usb: quirks: add quirk to start video capture on ELMO L-12F document camera reliable
      drivers/usb/core/quirks.c
  * USB: quirks: sort quirk entries
      drivers/usb/core/quirks.c
  * HID: make arrays usage and value to be the same
      drivers/hid/hid-core.c
    ANDROID: syscalls/x86: use a weak function for IA32 compat syscalls
    ANDROID: Adding kprobes build configs for Cuttlefish
  * UPSTREAM: locking/static_key: Fix false positive warnings on concurrent dec/inc
      kernel/jump_label.c
  * UPSTREAM: jump_label/lockdep: Assert we hold the hotplug lock for _cpuslocked() operations
      kernel/jump_label.c
    ANDROID: Add symbol of _proc_mkdir

Bug: 184596728
Change-Id: I0dddfc3da829cf53c4716a6df1072ed3396b6f4a
Signed-off-by: Lucas Wei <lucaswei@google.com>
2021-04-26 16:14:00 +08:00
Marc Zyngier
5c603b65ab KVM: arm64: Fix exclusive limit for IPA size
Commit 262b003d059c6671601a19057e9fe1a5e7f23722 upstream.

When registering a memslot, we check the size and location of that
memslot against the IPA size to ensure that we can provide guest
access to the whole of the memory.

Unfortunately, this check rejects memslot that end-up at the exact
limit of the addressing capability for a given IPA size. For example,
it refuses the creation of a 2GB memslot at 0x8000000 with a 32bit
IPA space.

Fix it by relaxing the check to accept a memslot reaching the
limit of the IPA space.

Fixes: c3058d5da2 ("arm/arm64: KVM: Ensure memslots are within KVM_PHYS_SIZE")
Reviewed-by: Eric Auger <eric.auger@redhat.com>
Signed-off-by: Marc Zyngier <maz@kernel.org>
Cc: stable@vger.kernel.org # 4.4, 4.9, 4.14, 4.19
Reviewed-by: Andrew Jones <drjones@redhat.com>
Link: https://lore.kernel.org/r/20210311100016.3830038-3-maz@kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-03-17 16:43:51 +01:00
Lucas Wei
ee773cdcc6 Merge android-4.19-stable (4.19.177) into android-msm-pixel-4.19-lts
Merge 4.19.177 into android-4.19-stable
Linux 4.19.177
    kvm: check tlbs_dirty directly
    scsi: qla2xxx: Fix crash during driver load on big endian machines
    xen-blkback: fix error handling in xen_blkbk_map()
    xen-scsiback: don't "handle" error by BUG()
    xen-netback: don't "handle" error by BUG()
    xen-blkback: don't "handle" error by BUG()
    xen/arm: don't ignore return errors from set_phys_to_machine
  * Xen/gntdev: correct error checking in gntdev_map_grant_pages()
      include/xen/grant_table.h
    Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages()
    Xen/x86: also check kernel mapping in set_foreign_p2m_mapping()
    Xen/x86: don't bail early from clear_foreign_p2m_mapping()
  * net: qrtr: Fix port ID for control messages
      net/qrtr/qrtr.c
    KVM: SEV: fix double locking due to incorrect backport
    x86/build: Disable CET instrumentation in the kernel for 32-bit too
  * ovl: expand warning in ovl_d_real()
      fs/overlayfs/super.c
    net/qrtr: restrict user-controlled length in qrtr_tun_write_iter()
    net/rds: restrict iovecs length for RDS_CMSG_RDMA_ARGS
    vsock: fix locking in vsock_shutdown()
    vsock/virtio: update credit only if socket is not closed
  * net: watchdog: hold device global xmit lock during tx disable
      include/linux/netdevice.h
    net/vmw_vsock: improve locking in vsock_connect_timeout()
  * net: fix iteration for sctp transport seq_files
      net/sctp/proc.c
    usb: dwc3: ulpi: Replace CPU-based busyloop with Protocol-based one
    usb: dwc3: ulpi: fix checkpatch warning
    h8300: fix PREEMPTION build, TI_PRE_COUNT undefined
    i2c: stm32f7: fix configuration of the digital filter
  * firmware_loader: align .builtin_fw to 8
      include/asm-generic/vmlinux.lds.h
    net: hns3: add a check for queue_id in hclge_reset_vf_queue()
  * netfilter: conntrack: skip identical origin tuple in same zone only
      net/netfilter/nf_conntrack_core.c
    net: stmmac: set TxQ mode back to DCB after disabling CBS
    xen/netback: avoid race in xenvif_rx_ring_slots_available()
    netfilter: flowtable: fix tcp and udp header checksum update
    netfilter: xt_recent: Fix attempt to update deleted entry
  * bpf: Check for integer overflow when using roundup_pow_of_two()
      kernel/bpf/stackmap.c
    mt76: dma: fix a possible memory leak in mt76_add_fragment()
    ARM: kexec: fix oops after TLB are invalidated
    ARM: ensure the signal page contains defined contents
    ARM: dts: lpc32xx: Revert set default clock rate of HCLK PLL
    bfq-iosched: Revert "bfq: Fix computation of shallow depth"
    riscv: virt_addr_valid must check the address belongs to linear mapping
    drm/amd/display: Free atomic state after drm_atomic_commit
    drm/amd/display: Fix dc_sink kref count in emulated_link_detect
  * ovl: skip getxattr of security labels
      fs/overlayfs/copy_up.c
  * cap: fix conversions on getxattr
      security/commoncap.c
  * ovl: perform vfs_getxattr() with mounter creds
      fs/overlayfs/inode.c
    platform/x86: hp-wmi: Disable tablet-mode reporting by default
    arm64: dts: rockchip: Fix PCIe DT properties on rk3399
  * arm/xen: Don't probe xenbus as part of an early initcall
      include/xen/xenbus.h
  * tracing: Check length before giving out the filter buffer
      kernel/trace/trace.c
  * tracing: Do not count ftrace events in top level enable output
      kernel/trace/trace_events.c
    ANDROID: build_config: drop CONFIG_KASAN_PANIC_ON_WARN
    Merge 4.19.176 into android-4.19-stable
Linux 4.19.176
  * regulator: Fix lockdep warning resolving supplies
      drivers/regulator/core.c
  * regulator: core: Clean enabling always-on regulators + their supplies
      drivers/regulator/core.c
  * regulator: core: enable power when setting up constraints
      drivers/regulator/core.c
    squashfs: add more sanity checks in xattr id lookup
    squashfs: add more sanity checks in inode lookup
    squashfs: add more sanity checks in id lookup
  * blk-mq: don't hold q->sysfs_lock in blk_mq_map_swqueue
      block/blk-mq.c
  * block: don't hold q->sysfs_lock in elevator_init_mq
      block/elevator.c
    Fix unsynchronized access to sev members through svm_register_enc_region
  * memcg: fix a crash in wb_workfn when a device disappears
      fs/fs-writeback.c
      include/linux/backing-dev.h
      include/trace/events/writeback.h
      mm/backing-dev.c
  * include/trace/events/writeback.h: fix -Wstringop-truncation warnings
      include/trace/events/writeback.h
  * lib/string: Add strscpy_pad() function
      include/linux/string.h
      lib/string.c
    SUNRPC: Handle 0 length opaque XDR object data properly
  * SUNRPC: Move simple_get_bytes and simple_get_netobj into private header
      include/linux/sunrpc/xdr.h
    iwlwifi: mvm: guard against device removal in reprobe
    iwlwifi: pcie: fix context info memory leak
    iwlwifi: pcie: add a NULL check in iwl_pcie_txq_unmap
    iwlwifi: mvm: take mutex for calling iwl_mvm_get_sync_time()
    pNFS/NFSv4: Try to return invalid layout in pnfs_layout_process()
    chtls: Fix potential resource leak
  * regulator: core: avoid regulator_resolve_supply() race condition
      drivers/regulator/core.c
  * af_key: relax availability checks for skb size calculation
      net/key/af_key.c
    remoteproc: qcom_q6v5_mss: Validate MBA firmware size before load
    remoteproc: qcom_q6v5_mss: Validate modem blob firmware size before load
  * fgraph: Initialize tracing_graph_pause at task creation
      init/init_task.c
  * block: fix NULL pointer dereference in register_disk
      block/genhd.c
  * tracing/kprobe: Fix to support kretprobe events on unloaded modules
      include/linux/kprobes.h
  * BACKPORT: bpf: add bpf_ktime_get_boot_ns()
      include/linux/bpf.h
      include/uapi/linux/bpf.h
      kernel/bpf/core.c
      kernel/bpf/helpers.c
      kernel/trace/bpf_trace.c
      net/core/filter.c
    Merge 4.19.175 into android-4.19-stable
Linux 4.19.175
    net: dsa: mv88e6xxx: override existent unicast portvec in port_fdb_add
  * net: ip_tunnel: fix mtu calculation
      net/ipv4/ip_tunnel.c
    md: Set prev_flush_start and flush_bio in an atomic way
    iommu/vt-d: Do not use flush-queue when caching-mode is on
  * Input: xpad - sync supported devices with fork on GitHub
      drivers/input/joystick/xpad.c
    x86/apic: Add extra serialization for non-serializing MSRs
  * x86/build: Disable CET instrumentation in the kernel
      Makefile
    mm: thp: fix MADV_REMOVE deadlock on shmem THP
    mm: hugetlb: remove VM_BUG_ON_PAGE from page_huge_active
    mm: hugetlb: fix a race between isolating and freeing page
    mm: hugetlb: fix a race between freeing and dissolving the page
  * mm: hugetlbfs: fix cannot migrate the fallocated HugeTLB page
      include/linux/hugetlb.h
    ARM: footbridge: fix dc21285 PCI configuration accessors
    KVM: SVM: Treat SVM as unsupported when running as an SEV guest
    nvme-pci: avoid the deepest sleep state on Kingston A2000 SSDs
    mmc: core: Limit retries when analyse of SDIO tuples fails
    smb3: Fix out-of-bounds bug in SMB2_negotiate()
    cifs: report error instead of invalid when revalidating a dentry fails
  * xhci: fix bounce buffer usage for non-sg list case
      drivers/usb/host/xhci-ring.c
  * genirq/msi: Activate Multi-MSI early when MSI_FLAG_ACTIVATE_EARLY is set
      include/linux/msi.h
      kernel/irq/msi.c
    kretprobe: Avoid re-registration of the same kretprobe earlier
    mac80211: fix station rate table updates on assoc
  * ovl: fix dentry leak in ovl_get_redirect
      fs/overlayfs/dir.c
  * usb: dwc3: fix clock issue during resume in OTG mode
      drivers/usb/dwc3/core.c
    usb: dwc2: Fix endpoint direction check in ep_from_windex
    usb: renesas_usbhs: Clear pipe running flag in usbhs_pkt_pop()
    USB: usblp: don't call usb_set_interface if there's a single alt
    USB: gadget: legacy: fix an error code in eth_bind()
  * memblock: do not start bottom-up allocations with kernel_end
      mm/memblock.c
    net: mvpp2: TCAM entry enable should be written after SRAM data
    net: lapb: Copy the skb before sending a packet
    arm64: dts: ls1046a: fix dcfg address range
    rxrpc: Fix deadlock around release of dst cached on udp tunnel
    Input: i8042 - unbreak Pegatron C15B
  * elfcore: fix building with clang
      include/linux/elfcore.h
      kernel/Makefile
    USB: serial: option: Adding support for Cinterion MV31
    USB: serial: cp210x: add new VID/PID for supporting Teraoka AD2000
    USB: serial: cp210x: add pid/vid for WSDA-200-USB
  * UPSTREAM: dma-buf: Fix SET_NAME ioctl uapi
      drivers/dma-buf/dma-buf.c
      include/uapi/linux/dma-buf.h
    ANDROID: GKI: Update ABI for coresight-clk-amba-dummy.ko.
    Merge 4.19.174 into android-4.19-stable
Linux 4.19.174
  * workqueue: Restrict affinity change to rescuer
      kernel/workqueue.c
  * kthread: Extract KTHREAD_IS_PER_CPU
      include/linux/kthread.h
      kernel/kthread.c
      kernel/smpboot.c
    objtool: Don't fail on missing symbol table
    selftests/powerpc: Only test lwm/stmw on big endian
    scsi: ibmvfc: Set default timeout to avoid crash during migration
    mac80211: fix fast-rx encryption check
    scsi: libfc: Avoid invoking response handler twice if ep is already completed
    scsi: scsi_transport_srp: Don't block target in failfast state
    x86: __always_inline __{rd,wr}msr()
    platform/x86: intel-vbtn: Support for tablet mode on Dell Inspiron 7352
    platform/x86: touchscreen_dmi: Add swap-x-y quirk for Goodix touchscreen on Estar Beauty HD tablet
    phy: cpcap-usb: Fix warning for missing regulator_disable
  * net_sched: gen_estimator: support large ewma log
      net/core/gen_estimator.c
  * sysctl: handle overflow in proc_get_long
      kernel/sysctl.c
    ACPI: thermal: Do not call acpi_thermal_check() directly
    ibmvnic: Ensure that CRQ entry read are correctly ordered
    net: dsa: bcm_sf2: put device node before return
    Merge 4.19.173 into android-4.19-stable
Linux 4.19.173
  * tcp: fix TLP timer not set when CA_STATE changes from DISORDER to OPEN
      include/net/tcp.h
      net/ipv4/tcp_input.c
      net/ipv4/tcp_recovery.c
    team: protect features update by RCU to avoid deadlock
    NFC: fix possible resource leak
    NFC: fix resource leak when target index is invalid
    rxrpc: Fix memory leak in rxrpc_lookup_local
  * iommu/vt-d: Don't dereference iommu_device if IOMMU_API is not built
      include/linux/intel-iommu.h
    iommu/vt-d: Gracefully handle DMAR units with no supported address widths
    can: dev: prevent potential information leak in can_fill_info()
    net/mlx5: Fix memory leak on flow table creation error flow
    mac80211: pause TX while changing interface type
    iwlwifi: pcie: reschedule in long-running memory reads
    iwlwifi: pcie: use jiffies for memory read spin time limit
    pNFS/NFSv4: Fix a layout segment leak in pnfs_layout_process()
    RDMA/cxgb4: Fix the reported max_recv_sge value
  * xfrm: fix disable_xfrm sysctl when used on xfrm interfaces
      net/xfrm/xfrm_policy.c
  * xfrm: Fix oops in xfrm_replay_advance_bmp
      net/xfrm/xfrm_input.c
    netfilter: nft_dynset: add timeout extension to template
    ARM: imx: build suspend-imx6.S with arm instruction set
    xen-blkfront: allow discard-* nodes to be optional
    mt7601u: fix rx buffer refcounting
    mt7601u: fix kernel crash unplugging the device
  * leds: trigger: fix potential deadlock with libata
      drivers/leds/led-triggers.c
    xen: Fix XenStore initialisation for XS_LOCAL
    KVM: x86: get smi pending status correctly
    KVM: x86/pmu: Fix HW_REF_CPU_CYCLES event pseudo-encoding in intel_arch_events[]
    drivers: soc: atmel: add null entry at the end of at91_soc_allowed_list[]
    drivers: soc: atmel: Avoid calling at91_soc_init on non AT91 SoCs
    PM: hibernate: flush swap writer after marking
    net: usb: qmi_wwan: added support for Thales Cinterion PLSx3 modem family
  * wext: fix NULL-ptr-dereference with cfg80211's lack of commit()
      net/wireless/wext-core.c
    ARM: dts: imx6qdl-gw52xx: fix duplicate regulator naming
    media: rc: ensure that uevent can be read directly after rc device register
    ALSA: hda/via: Apply the workaround generically for Clevo machines
    xen/privcmd: allow fetching resource sizes
    kernel: kexec: remove the lock operation of system_transition_mutex
    ACPI: sysfs: Prefer "compatible" modalias
    nbd: freeze the queue while we're adding connections
    Revert "Revert "ANDROID: enable LLVM_IAS=1 for clang's integrated assembler for x86_64""
    ANDROID: GKI: Update ABI
    ANDROID: GKI: Update cuttlefish symbol list
  * ANDROID: GKI: fix up abi issues with 4.19.172
      include/linux/sched.h
    Merge 4.19.172 into android-4.19-stable
Linux 4.19.172
  * fs: fix lazytime expiration handling in __writeback_single_inode()
      fs/fs-writeback.c
  * writeback: Drop I_DIRTY_TIME_EXPIRE
      fs/ext4/inode.c
      fs/fs-writeback.c
      include/linux/fs.h
      include/trace/events/writeback.h
    dm integrity: conditionally disable "recalculate" feature
    tools: Factor HOSTCC, HOSTLD, HOSTAR definitions
  * tracing: Fix race in trace_open and buffer resize call
      kernel/trace/ring_buffer.c
    HID: wacom: Correct NULL dereference on AES pen proximity
  * futex: Handle faults correctly for PI futexes
      kernel/futex.c
  * futex: Simplify fixup_pi_state_owner()
      kernel/futex.c
  * futex: Use pi_state_update_owner() in put_pi_state()
      kernel/futex.c
  * rtmutex: Remove unused argument from rt_mutex_proxy_unlock()
      kernel/futex.c
      kernel/locking/rtmutex.c
      kernel/locking/rtmutex_common.h
  * futex: Provide and use pi_state_update_owner()
      kernel/futex.c
  * futex: Replace pointless printk in fixup_owner()
      kernel/futex.c
  * futex: Ensure the correct return value from futex_lock_pi()
      kernel/futex.c
  * futex: Prevent exit livelock
      kernel/futex.c
  * futex: Provide distinct return value when owner is exiting
      kernel/futex.c
  * futex: Add mutex around futex exit
      include/linux/futex.h
      include/linux/sched.h
      kernel/futex.c
  * futex: Provide state handling for exec() as well
      kernel/futex.c
  * futex: Sanitize exit state handling
      kernel/futex.c
  * futex: Mark the begin of futex exit explicitly
      include/linux/futex.h
      kernel/exit.c
      kernel/futex.c
  * futex: Set task::futex_state to DEAD right after handling futex exit
      kernel/exit.c
      kernel/futex.c
  * futex: Split futex_mm_release() for exit/exec
      include/linux/futex.h
      kernel/fork.c
      kernel/futex.c
  * exit/exec: Seperate mm_release()
      fs/exec.c
      include/linux/sched/mm.h
      kernel/exit.c
      kernel/fork.c
  * futex: Replace PF_EXITPIDONE with a state
      include/linux/futex.h
      include/linux/sched.h
      kernel/exit.c
      kernel/futex.c
  * futex: Move futex exit handling into futex code
      include/linux/compat.h
      include/linux/futex.h
      kernel/fork.c
      kernel/futex.c
  * Revert "mm/slub: fix a memory leak in sysfs_slab_add()"
      mm/slub.c
    gpio: mvebu: fix pwm .get_state period calculation
  * FROMGIT: f2fs: flush data when enabling checkpoint back
      fs/f2fs/super.c
    ANDROID: GKI: Added the get_task_pid function

Bug: 181732917
Change-Id: I371506c789fee218749bb057bc7b8d159970847c
Signed-off-by: Lucas Wei <lucaswei@google.com>
2021-03-12 15:01:56 +08:00
Lucas Wei
598e89bf33 Merge android-4.19-stable (4.19.171) into android-msm-pixel-4.19-lts
Merge 4.19.171 into android-4.19-stable
Linux 4.19.171
    net: dsa: b53: fix an off by one in checking "vlan->vid"
  * net: Disable NETIF_F_HW_TLS_RX when RXCSUM is disabled
      net/core/dev.c
    net: mscc: ocelot: allow offloading of bridge on top of LAG
  * ipv6: set multicast flag on the multicast route
      net/ipv6/addrconf.c
  * net_sched: reject silly cell_log in qdisc_get_rtab()
      net/sched/sch_api.c
    net_sched: avoid shift-out-of-bounds in tcindex_set_parms()
  * ipv6: create multicast route with RTPROT_KERNEL
      net/ipv6/addrconf.c
  * udp: mask TOS bits in udp_v4_early_demux()
      net/ipv4/udp.c
    kasan: fix incorrect arguments passing in kasan_add_zero_shadow
    kasan: fix unaligned address is unhandled in kasan_remove_zero_shadow
  * skbuff: back tiny skbs with kmalloc() in __netdev_alloc_skb() too
      net/core/skbuff.c
    sh_eth: Fix power down vs. is_opened flag ordering
    sh: dma: fix kconfig dependency for G2_DMA
  * netfilter: rpfilter: mask ecn bits before fib lookup
      net/ipv4/netfilter/ipt_rpfilter.c
  * driver core: Extend device_is_dependent()
      drivers/base/core.c
    xhci: tegra: Delay for disabling LFPS detector
  * xhci: make sure TRB is fully written before giving it to the controller
      drivers/usb/host/xhci-ring.c
  * usb: bdc: Make bdc pci driver depend on BROKEN
      drivers/usb/gadget/udc/bdc/Kconfig
  * usb: udc: core: Use lock when write to soft_connect
      drivers/usb/gadget/udc/core.c
    usb: gadget: aspeed: fix stop dma register setting.
  * USB: ehci: fix an interrupt calltrace error
      drivers/usb/host/ehci-hub.c
  * ehci: fix EHCI host controller initialization sequence
      drivers/usb/host/ehci-hcd.c
    serial: mvebu-uart: fix tx lost characters at power off
    stm class: Fix module init return on allocation failure
    intel_th: pci: Add Alder Lake-P support
    irqchip/mips-cpu: Set IPI domain parent chip
    iio: ad5504: Fix setting power-down state
    can: peak_usb: fix use after free bugs
    can: vxcan: vxcan_xmit: fix use after free bug
    can: dev: can_restart: fix use after free bug
    selftests: net: fib_tests: remove duplicate log test
    platform/x86: intel-vbtn: Drop HP Stream x360 Convertible PC 11 from allow-list
    i2c: octeon: check correct size of maximum RECV_LEN packet
    scsi: megaraid_sas: Fix MEGASAS_IOC_FIRMWARE regression
    drm/nouveau/kms/nv50-: fix case where notifier buffer is at offset 0
    drm/nouveau/mmu: fix vram heap sizing
    drm/nouveau/i2c/gm200: increase width of aux semaphore owner fields
    drm/nouveau/privring: ack interrupts the same way as RM
    drm/nouveau/bios: fix issue shadowing expansion ROMs
  * xen: Fix event channel callback via INTX/GSI
      include/xen/xenbus.h
    clk: tegra30: Add hda clock default rates to clock driver
  * HID: Ignore battery for Elan touchscreen on ASUS UX550
      drivers/hid/hid-ids.h
      drivers/hid/hid-input.c
    riscv: Fix kernel time_init()
    scsi: qedi: Correct max length of CHAP secret
  * scsi: ufs: Correct the LUN used in eh_device_reset_handler() callback
      drivers/scsi/ufs/ufshcd.c
    ASoC: Intel: haswell: Add missing pm_ops
  * drm/atomic: put state on error path
      drivers/gpu/drm/drm_atomic_helper.c
    dm integrity: fix a crash if "recalculate" used without "internal_hash"
  * dm: avoid filesystem lookup in dm_get_dev_t()
      drivers/md/dm-table.c
    mmc: sdhci-xenon: fix 1.8v regulator stabilization
    mmc: core: don't initialize block size from ext_csd if not present
    btrfs: fix lockdep splat in btrfs_recover_relocation
    ACPI: scan: Make acpi_bus_get_device() clear return pointer on error
    ALSA: hda/via: Add minimum mute flag
    ALSA: seq: oss: Fix missing error check in snd_seq_oss_synth_make_info()
    i2c: bpmp-tegra: Ignore unknown I2C_M flags
  * Revert "ANDROID: Incremental fs: RCU locks instead of mutex for pending_reads."
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
  * Revert "ANDROID: Incremental fs: Fix minor bugs"
      fs/incfs/data_mgmt.c
      fs/incfs/vfs.c
  * Revert "ANDROID: Incremental fs: dentry_revalidate should not return -EBADF."
      fs/incfs/vfs.c
  * Revert "ANDROID: Incremental fs: Remove annoying pr_debugs"
      fs/incfs/data_mgmt.c
  * Revert "ANDROID: Incremental fs: Remove unnecessary dependencies"
      fs/incfs/Kconfig
  * Revert "ANDROID: Incremental fs: Use R/W locks to read/write segment blockmap."
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/vfs.c
    Revert "ANDROID: Incremental fs: Stress tool"
    Revert "ANDROID: Incremental fs: Adding perf test"
    Revert "ANDROID: Incremental fs: Allow running a single test"
  * Revert "ANDROID: Incremental fs: Fix incfs to work on virtio-9p"
      fs/incfs/format.c
      fs/incfs/vfs.c
  * Revert "ANDROID: Incremental fs: Don't allow renaming .index directory."
      fs/incfs/vfs.c
  * Revert "ANDROID: Incremental fs: Create mapped file"
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/format.c
      fs/incfs/format.h
      fs/incfs/vfs.c
      include/uapi/linux/incrementalfs.h
  * Revert "ANDROID: Incremental fs: Add UID to pending_read"
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/main.c
      fs/incfs/vfs.c
      include/uapi/linux/incrementalfs.h
  * Revert "ANDROID: Incremental fs: Separate pseudo-file code"
      fs/incfs/Makefile
      fs/incfs/pseudo_files.c
      fs/incfs/pseudo_files.h
      fs/incfs/vfs.c
      fs/incfs/vfs.h
  * Revert "ANDROID: Incremental fs: Add .blocks_written file"
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/pseudo_files.c
      fs/incfs/pseudo_files.h
      include/uapi/linux/incrementalfs.h
  * Revert "ANDROID: Incremental fs: Remove attributes from file"
      fs/incfs/data_mgmt.c
      fs/incfs/format.c
      fs/incfs/format.h
      fs/incfs/pseudo_files.c
  * Revert "ANDROID: Incremental fs: Remove back links and crcs"
      fs/incfs/format.c
      fs/incfs/format.h
  * Revert "ANDROID: Incremental fs: Remove block HASH flag"
      fs/incfs/format.c
      fs/incfs/format.h
  * Revert "ANDROID: Incremental fs: Make compatible with existing files"
      fs/incfs/format.c
      fs/incfs/format.h
  * Revert "ANDROID: Incremental fs: Add INCFS_IOC_GET_BLOCK_COUNT"
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/format.c
      fs/incfs/format.h
      fs/incfs/vfs.c
      include/uapi/linux/incrementalfs.h
  * Revert "ANDROID: Incremental fs: Add hash block counts to IOC_IOCTL_GET_BLOCK_COUNT"
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/format.c
      fs/incfs/format.h
      fs/incfs/vfs.c
      include/uapi/linux/incrementalfs.h
  * Revert "ANDROID: Incremental fs: Fix filled block count from get filled blocks"
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/format.c
      fs/incfs/format.h
      fs/incfs/pseudo_files.c
      fs/incfs/vfs.c
      fs/incfs/vfs.h
  * Revert "ANDROID: Incremental fs: Fix uninitialized variable"
      fs/incfs/vfs.c
  * Revert "ANDROID: Incremental fs: Fix dangling else"
      fs/incfs/data_mgmt.c
  * Revert "ANDROID: Incremental fs: Add .incomplete folder"
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/pseudo_files.c
      fs/incfs/vfs.c
  * Revert "ANDROID: Incremental fs: Add per UID read timeouts"
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/pseudo_files.c
      fs/incfs/vfs.c
      include/uapi/linux/incrementalfs.h
  * Revert "ANDROID: Incremental fs: Fix misuse of cpu_to_leXX and poll return"
      fs/incfs/format.c
      fs/incfs/pseudo_files.c
    Revert "ANDROID: Incremental fs: Fix read_log_test which failed sporadically"
  * Revert "ANDROID: Incremental fs: Initialize mount options correctly"
      fs/incfs/vfs.c
  * Revert "ANDROID: Incremental fs: Small improvements"
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/format.c
      fs/incfs/format.h
      fs/incfs/pseudo_files.c
      fs/incfs/vfs.c
  * Revert "ANDROID: Incremental fs: Add zstd compression support"
      fs/incfs/Kconfig
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/format.h
      include/uapi/linux/incrementalfs.h
  * Revert "ANDROID: Incremental fs: Add zstd feature flag"
      fs/incfs/main.c
      include/uapi/linux/incrementalfs.h
  * Revert "ANDROID: Incremental fs: Add v2 feature flag"
      fs/incfs/main.c
      include/uapi/linux/incrementalfs.h
  * Revert "ANDROID: Incremental fs: Change per UID timeouts to microseconds"
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/pseudo_files.c
      fs/incfs/vfs.c
      include/uapi/linux/incrementalfs.h
    Revert "ANDROID: Incremental fs: Fix incfs_test use of atol, open"
  * Revert "ANDROID: Incremental fs: Set credentials before reading/writing"
      fs/incfs/data_mgmt.c
      fs/incfs/format.c
      fs/incfs/format.h
      fs/incfs/pseudo_files.c
    ANDROID: GKI: Update ABI for clang bump
    ANDROID: clang: update to 12.0.1
    Revert "ANDROID: enable LLVM_IAS=1 for clang's integrated assembler for x86_64"
    ANDROID: enable LLVM_IAS=1 for clang's integrated assembler for x86_64
    Merge 4.19.170 into android-4.19-stable
Linux 4.19.170
    spi: cadence: cache reference clock rate during probe
  * net: ipv6: Validate GSO SKB before finish IPv6 processing
      net/ipv6/ip6_output.c
  * net: skbuff: disambiguate argument and member for skb_list_walk_safe helper
      include/linux/skbuff.h
  * net: introduce skb_list_walk_safe for skb segment walking
      include/linux/skbuff.h
  * tipc: fix NULL deref in tipc_link_xmit()
      net/tipc/link.c
    rxrpc: Fix handling of an unsupported token type in rxrpc_read()
  * net: avoid 32 x truesize under-estimation for tiny skbs
      net/core/skbuff.c
  * net: sit: unregister_netdevice on newlink's error path
      net/ipv6/sit.c
    net: stmmac: Fixed mtu channged by cache aligned
    rxrpc: Call state should be read with READ_ONCE() under some circumstances
    net: dcb: Accept RTM_GETDCB messages carrying set-like DCB commands
    net: dcb: Validate netlink message in DCB handler
  * esp: avoid unneeded kmap_atomic call
      net/ipv4/esp4.c
      net/ipv6/esp6.c
    rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request
    net: mvpp2: Remove Pause and Asym_Pause support
    netxen_nic: fix MSI/MSI-x interrupts
  * udp: Prevent reuseport_select_sock from reading uninitialized socks
      net/core/sock_reuseport.c
    nfsd4: readdirplus shouldn't return parent of export
    crypto: x86/crc32c - fix building with clang ias
  * dm integrity: fix flush with external metadata device
      drivers/md/dm-bufio.c
      include/linux/dm-bufio.h
  * compiler.h: Raise minimum version of GCC to 5.1 for arm64
      include/linux/compiler-gcc.h
  * usb: ohci: Make distrust_firmware param default to false
      drivers/usb/host/ohci-hcd.c
    ANDROID: GKI: Update the ABI xml and symbol list
  * ANDROID: GKI: genirq: export `kstat_irqs_usr` for watchdog
      kernel/irq/irqdesc.c
  * ANDROID: GKI: soc: qcom: export `irq_stack_ptr`
      arch/arm64/kernel/irq.c
  * ANDROID: ASoC: core: add locked version of soc_find_component
      sound/soc/soc-core.c
  * ANDROID: dm-user: Fix the list walk-and-delete code
      drivers/md/dm-user.c
    Merge 4.19.169 into android-4.19-stable
Linux 4.19.169
  * kbuild: enforce -Werror=return-type
      Makefile
  * netfilter: nf_nat: Fix memleak in nf_nat_init
      net/netfilter/nf_nat_core.c
  * netfilter: conntrack: fix reading nf_conntrack_buckets
      net/netfilter/nf_conntrack_standalone.c
    ALSA: fireface: Fix integer overflow in transmit_midi_msg()
    ALSA: firewire-tascam: Fix integer overflow in midi_port_work()
  * dm: eliminate potential source of excessive kernel log noise
      drivers/md/dm.c
    net: sunrpc: interpret the return value of kstrtou32 correctly
  * mm, slub: consider rest of partial list if acquire_slab() fails
      mm/slub.c
    RDMA/mlx5: Fix wrong free of blue flame register on error
    RDMA/usnic: Fix memleak in find_free_vf_and_create_qp_grp
  * ext4: fix superblock checksum failure when setting password salt
      fs/ext4/ioctl.c
    NFS: nfs_igrab_and_active must first reference the superblock
    NFS/pNFS: Fix a leak of the layout 'plh_outstanding' counter
    pNFS: Mark layout for return if return-on-close was not sent
    NFS4: Fix use-after-free in trace_event_raw_event_nfs4_set_lock
    ASoC: Intel: fix error code cnl_set_dsp_D0()
    ASoC: meson: axg-tdm-interface: fix loopback
  * dump_common_audit_data(): fix racy accesses to ->d_name
      security/lsm_audit.c
    ima: Remove __init annotation from ima_pcrread()
    ARM: picoxcell: fix missing interrupt-parent properties
    drm/msm: Call msm_init_vram before binding the gpu
  * ACPI: scan: add stub acpi_create_platform_device() for !CONFIG_ACPI
      include/linux/acpi.h
    net: ethernet: fs_enet: Add missing MODULE_LICENSE
  * misdn: dsp: select CONFIG_BITREVERSE
      drivers/isdn/mISDN/Kconfig
    arch/arc: add copy_user_page() to <asm/page.h> to fix build error on ARC
    bfq: Fix computation of shallow depth
    ethernet: ucc_geth: fix definition and size of ucc_geth_tx_global_pram
    btrfs: fix transaction leak and crash after RO remount caused by qgroup rescan
    ARC: build: add boot_targets to PHONY
    ARC: build: add uImage.lzma to the top-level target
    ARC: build: remove non-existing bootpImage from KBUILD_IMAGE
  * ext4: fix bug for rename with RENAME_WHITEOUT
      fs/ext4/namei.c
  * r8152: Add Lenovo Powered USB-C Travel Hub
      drivers/net/usb/cdc_ether.c
      drivers/net/usb/r8152.c
    dm integrity: fix the maximum number of arguments
  * dm snapshot: flush merged data before committing metadata
      drivers/md/dm-snap.c
    mm/hugetlb: fix potential missing huge page size info
    ACPI: scan: Harden acpi_device_add() against device ID overflows
    MIPS: relocatable: fix possible boot hangup with KASLR enabled
    MIPS: boot: Fix unaligned access with CONFIG_MIPS_RAW_APPENDED_DTB
  * tracing/kprobes: Do the notrace functions check without kprobes on ftrace
      kernel/trace/Kconfig
    x86/hyperv: check cpu mask after interrupt has been disabled
  * ASoC: dapm: remove widget from dirty list on free
      sound/soc/soc-dapm.c
  * Revert "BACKPORT: FROMGIT: mm: improve mprotect(R|W) efficiency on pages referenced once"
      mm/mprotect.c
    Merge 4.19.168 into android-4.19-stable
Linux 4.19.168
  * regmap: debugfs: Fix a reversed if statement in regmap_debugfs_init()
      drivers/base/regmap/regmap-debugfs.c
  * net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet
      net/core/skbuff.c
  * block: fix use-after-free in disk_part_iter_next
      block/genhd.c
    KVM: arm64: Don't access PMCR_EL0 when no PMU is available
  * wan: ds26522: select CONFIG_BITREVERSE
      drivers/net/wan/Kconfig
  * regmap: debugfs: Fix a memory leak when calling regmap_attach_dev
      drivers/base/regmap/regmap-debugfs.c
    net/mlx5e: Fix two double free cases
    net/mlx5e: Fix memleak in mlx5e_create_l2_table_groups
    iommu/intel: Fix memleak in intel_irq_remapping_alloc
  * lightnvm: select CONFIG_CRC32
      drivers/lightnvm/Kconfig
  * block: rsxx: select CONFIG_CRC32
      drivers/block/Kconfig
  * wil6210: select CONFIG_CRC32
      drivers/net/wireless/ath/wil6210/Kconfig
    dmaengine: xilinx_dma: fix mixed_enum_type coverity warning
    dmaengine: xilinx_dma: fix incompatible param warning in _child_probe()
    dmaengine: xilinx_dma: check dma_async_device_register return value
    dmaengine: mediatek: mtk-hsdma: Fix a resource leak in the error handling path of the probe function
    spi: stm32: FIFO threshold level - fix align packet size
    cpufreq: powernow-k8: pass policy rather than use cpufreq_cpu_get()
    i2c: sprd: use a specific timeout to avoid system hang up issue
    ARM: OMAP2+: omap_device: fix idling of devices during probe
    HID: wacom: Fix memory leakage caused by kfifo_alloc
    iio: imu: st_lsm6dsx: fix edge-trigger interrupts
    iio: imu: st_lsm6dsx: flip irq return logic
    spi: pxa2xx: Fix use-after-free on unbind
    drm/i915: Fix mismatch between misplaced vma check and vma insert
  * vmlinux.lds.h: Add PGO and AutoFDO input sections
      include/asm-generic/vmlinux.lds.h
    x86/resctrl: Don't move a task to the same resource group
    x86/resctrl: Use an IPI instead of task_work_add() to update PQR_ASSOC MSR
    chtls: Fix chtls resources release sequence
    chtls: Added a check to avoid NULL pointer dereference
    chtls: Replace skb_dequeue with skb_peek
    chtls: Fix panic when route to peer not configured
    chtls: Remove invalid set_tcb call
    chtls: Fix hardware tid leak
  * net: ipv6: fib: flush exceptions when purging route
      net/ipv6/ip6_fib.c
  * net: fix pmtu check in nopmtudisc mode
      net/ipv4/ip_tunnel.c
  * net: ip: always refragment ip defragmented packets
      net/ipv4/ip_output.c
    net/sonic: Fix some resource leaks in error handling paths
    net: vlan: avoid leaks on register_vlan_dev() failures
    net: stmmac: dwmac-sun8i: Balance internal PHY power
    net: stmmac: dwmac-sun8i: Balance internal PHY resource references
    net: hns3: fix the number of queues actually used by ARQ
  * net: cdc_ncm: correct overhead in delayed_ndp_size
      drivers/net/usb/cdc_ncm.c
  * BACKPORT: FROMGIT: mm: improve mprotect(R|W) efficiency on pages referenced once
      mm/mprotect.c
  * ANDROID: dm-user: fix typo in channel_free
      drivers/md/dm-user.c
    Merge 4.19.167 into android-4.19-stable
  * ANDROID: dm-user: Add some missing static
      drivers/md/dm-user.c
Linux 4.19.167
    scsi: target: Fix XCOPY NAA identifier lookup
    KVM: x86: fix shift out of bounds reported by UBSAN
    x86/mtrr: Correct the range check before performing MTRR type lookups
    netfilter: xt_RATEEST: reject non-null terminated string from userspace
    netfilter: ipset: fix shift-out-of-bounds in htable_bits()
  * netfilter: x_tables: Update remaining dereference to RCU
      net/ipv4/netfilter/arp_tables.c
      net/ipv4/netfilter/ip_tables.c
      net/ipv6/netfilter/ip6_tables.c
    xen/pvh: correctly setup the PV EFI interface for dom0
  * Revert "device property: Keep secondary firmware node secondary by type"
      drivers/base/core.c
    btrfs: send: fix wrong file path when there is an inode with a pending rmdir
    ALSA: hda/realtek - Fix speaker volume control on Lenovo C940
    ALSA: hda/conexant: add a new hda codec CX11970
    ALSA: hda/via: Fix runtime PM for Clevo W35xSS
    x86/mm: Fix leak of pmd ptlock
    USB: serial: keyspan_pda: remove unused variable
  * usb: gadget: configfs: Fix use-after-free issue with udc_name
      drivers/usb/gadget/configfs.c
  * usb: gadget: configfs: Preserve function ordering after bind failure
      drivers/usb/gadget/configfs.c
  * usb: gadget: Fix spinlock lockup on usb_function_deactivate
      drivers/usb/gadget/composite.c
    USB: gadget: legacy: fix return error code in acm_ms_bind()
  * usb: gadget: u_ether: Fix MTU size mismatch with RX packet size
      drivers/usb/gadget/function/u_ether.c
    usb: gadget: function: printer: Fix a memory leak for interface descriptor
    usb: gadget: f_uac2: reset wMaxPacketSize
  * usb: gadget: select CONFIG_CRC32
      drivers/usb/gadget/Kconfig
  * ALSA: usb-audio: Fix UBSAN warnings for MIDI jacks
      sound/usb/midi.c
    USB: usblp: fix DMA to stack
    USB: yurex: fix control-URB timeout handling
    USB: serial: option: add Quectel EM160R-GL
    USB: serial: option: add LongSung M5710 module support
    USB: serial: iuu_phoenix: fix DMA from stack
    usb: uas: Add PNY USB Portable SSD to unusual_uas
    usb: usbip: vhci_hcd: protect shift size
  * USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set
      drivers/usb/host/xhci.c
    usb: chipidea: ci_hdrc_imx: add missing put_device() call in usbmisc_get_init_data()
  * usb: dwc3: ulpi: Use VStsDone to detect PHY regs access completion
      drivers/usb/dwc3/core.h
    USB: cdc-wdm: Fix use after free in service_outstanding_interrupt().
    USB: cdc-acm: blacklist another IR Droid device
  * usb: gadget: enable super speed plus
      drivers/usb/gadget/configfs.c
    staging: mt7621-dma: Fix a resource leak in an error handling path
  * crypto: ecdh - avoid buffer overflow in ecdh_set_secret()
      crypto/ecdh.c
    video: hyperv_fb: Fix the mmap() regression for v5.4.y and older
    Bluetooth: revert: hci_h5: close serdev device and free hu in h5_close
    net: systemport: set dev->max_mtu to UMAC_MAX_MTU_SIZE
  * net-sysfs: take the rtnl lock when accessing xps_rxqs_map and num_tc
      net/core/net-sysfs.c
  * net-sysfs: take the rtnl lock when storing xps_rxqs
      net/core/net-sysfs.c
  * net: sched: prevent invalid Scell_log shift count
      include/net/red.h
    vhost_net: fix ubuf refcount incorrectly when sendmsg fails
    r8169: work around power-saving bug on some chip versions
    net: usb: qmi_wwan: add Quectel EM160R-GL
  * CDC-NCM: remove "connected" log message
      drivers/net/usb/cdc_ncm.c
    net: hdlc_ppp: Fix issues when mod_timer is called while timer is running
  * erspan: fix version 1 check in gre_parse_header()
      net/ipv4/gre_demux.c
    net: hns: fix return value check in __lb_other_process()
  * ipv4: Ignore ECN bits for fib lookups in fib_compute_spec_dst()
      net/ipv4/fib_frontend.c
  * tun: fix return value when the number of iovs exceeds MAX_SKB_FRAGS
      drivers/net/tun.c
    net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered
  * net-sysfs: take the rtnl lock when accessing xps_cpus_map and num_tc
      net/core/net-sysfs.c
  * net-sysfs: take the rtnl lock when storing xps_cpus
      net/core/net-sysfs.c
    net: ethernet: Fix memleak in ethoc_probe
    net/ncsi: Use real net-device for response handler
    virtio_net: Fix recursive call to cpus_read_lock()
    qede: fix offload for IPIP tunnel packets
    net: mvpp2: Fix GoP port 3 Networking Complex Control configurations
    atm: idt77252: call pci_disable_device() on error path
    ethernet: ucc_geth: set dev->max_mtu to 1518
    ethernet: ucc_geth: fix use-after-free in ucc_geth_remove()
    net: mvpp2: prs: fix PPPoE with ipv6 packet parse
    net: mvpp2: Add TCAM entry to drop flow control pause frames
    i40e: Fix Error I40E_AQ_RC_EINVAL when removing VFs
  * proc: fix lookup in /proc/net subdirectories after setns(2)
      fs/proc/generic.c
      fs/proc/internal.h
      fs/proc/proc_net.c
      include/linux/proc_fs.h
  * proc: change ->nlink under proc_subdir_lock
      fs/proc/generic.c
    depmod: handle the case of /sbin/depmod without /sbin in PATH
  * lib/genalloc: fix the overflow when size is too big
      lib/genalloc.c
    scsi: scsi_transport_spi: Set RQF_PM for domain validation commands
    scsi: ide: Do not set the RQF_PREEMPT flag for sense requests
    scsi: ufs-pci: Ensure UFS device is in PowerDown mode for suspend-to-disk ->poweroff()
  * scsi: ufs: Fix wrong print message in dev_err()
      drivers/scsi/ufs/ufshcd.c
  * workqueue: Kick a worker based on the actual activation of delayed works
      kernel/workqueue.c
  * kbuild: don't hardcode depmod path
      Makefile
    ANDROID: enable LLVM_IAS=1 for clang's integrated assembler for aarch64
  * Revert "ANDROID: arm64: lse: fix LSE atomics with LTO"
      arch/arm64/include/asm/lse.h
  * ANDROID: uapi: Add dm-user structure definition
      include/uapi/linux/dm-user.h
  * ANDROID: dm: dm-user: New target that proxies BIOs to userspace
      drivers/md/Kconfig
      drivers/md/Makefile
      drivers/md/dm-user.c
    ANDROID: GKI: Enable XFRM_MIGRATE
    Merge 4.19.166 into android-4.19-stable
Linux 4.19.166
    mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start
    iio:magnetometer:mag3110: Fix alignment and data leak issues.
    iio:imu:bmi160: Fix alignment and data leak issues
  * kdev_t: always inline major/minor helper functions
      include/linux/kdev_t.h
    dmaengine: at_hdmac: add missing kfree() call in at_dma_xlate()
    dmaengine: at_hdmac: add missing put_device() call in at_dma_xlate()
    dmaengine: at_hdmac: Substitute kzalloc with kmalloc
    Revert "mtd: spinand: Fix OOB read"
    Merge 4.19.165 into android-4.19-stable
Linux 4.19.165
  * dm verity: skip verity work if I/O error when system is shutting down
      drivers/md/dm-verity-target.c
  * ALSA: pcm: Clear the full allocated memory at hw_params
      sound/core/pcm_native.c
  * module: delay kobject uevent until after module init call
      kernel/module.c
    NFSv4: Fix a pNFS layout related use-after-free race when freeing the inode
    powerpc: sysdev: add missing iounmap() on error in mpic_msgr_probe()
  * quota: Don't overflow quota file offsets
      fs/quota/quota_tree.c
  * module: set MODULE_STATE_GOING state when a module fails to load
      kernel/module.c
    rtc: sun6i: Fix memleak in sun6i_rtc_clk_init
  * fcntl: Fix potential deadlock in send_sig{io, urg}()
      fs/fcntl.c
  * ALSA: rawmidi: Access runtime->avail always in spinlock
      sound/core/rawmidi.c
    ALSA: seq: Use bool for snd_seq_queue internal flags
    media: gp8psk: initialize stats at power control logic
    misc: vmw_vmci: fix kernel info-leak by initializing dbells in vmci_ctx_get_chkpt_doorbells()
    reiserfs: add check for an invalid ih_entry_count
    Bluetooth: hci_h5: close serdev device and free hu in h5_close
  * of: fix linker-section match-table corruption
      include/linux/of.h
    null_blk: Fix zone size initialization
    xen/gntdev.c: Mark pages as dirty
    powerpc/bitops: Fix possible undefined behaviour with fls() and fls64()
    KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits
    KVM: SVM: relax conditions for allowing MSR_IA32_SPEC_CTRL accesses
  * uapi: move constants from <linux/kernel.h> to <linux/const.h>
      include/uapi/linux/const.h
      include/uapi/linux/ethtool.h
      include/uapi/linux/kernel.h
      include/uapi/linux/lightnvm.h
      include/uapi/linux/mroute6.h
      include/uapi/linux/netfilter/x_tables.h
      include/uapi/linux/netlink.h
      include/uapi/linux/sysctl.h
  * ext4: don't remount read-only with errors=continue on reboot
      fs/ext4/super.c
    vfio/pci: Move dummy_resources_list init in vfio_pci_probe()
    ubifs: prevent creating duplicate encrypted filenames
  * f2fs: prevent creating duplicate encrypted filenames
      fs/f2fs/f2fs.h
  * ext4: prevent creating duplicate encrypted filenames
      fs/ext4/namei.c
  * fscrypt: add fscrypt_is_nokey_name()
      fs/crypto/hooks.c
    md/raid10: initialize r10_bio->read_slot before use.
  * ANDROID: usb: f_accessory: Don't drop NULL reference in acc_disconnect()
      drivers/usb/gadget/function/f_accessory.c
  * ANDROID: usb: f_accessory: Avoid bitfields for shared variables
      drivers/usb/gadget/function/f_accessory.c
  * ANDROID: usb: f_accessory: Cancel any pending work before teardown
      drivers/usb/gadget/function/f_accessory.c
  * ANDROID: usb: f_accessory: Don't corrupt global state on double registration
      drivers/usb/gadget/function/f_accessory.c
  * ANDROID: usb: f_accessory: Fix teardown ordering in acc_release()
      drivers/usb/gadget/function/f_accessory.c
  * ANDROID: usb: f_accessory: Add refcounting to global 'acc_dev'
      drivers/usb/gadget/function/f_accessory.c
  * ANDROID: usb: f_accessory: Wrap '_acc_dev' in get()/put() accessors
      drivers/usb/gadget/function/f_accessory.c
  * ANDROID: usb: f_accessory: Remove useless assignment
      drivers/usb/gadget/function/f_accessory.c
  * ANDROID: usb: f_accessory: Remove useless non-debug prints
      drivers/usb/gadget/function/f_accessory.c
  * ANDROID: usb: f_accessory: Remove stale comments
      drivers/usb/gadget/function/f_accessory.c
  * ANDROID: USB: f_accessory: Check dev pointer before decoding ctrl request
      drivers/usb/gadget/function/f_accessory.c
  * ANDROID: usb: gadget: f_accessory: fix CTS test stuck
      drivers/usb/gadget/function/f_accessory.c
  * Revert "seq_buf: Avoid type mismatch for seq_buf_init"
      include/linux/seq_buf.h
      include/linux/trace_seq.h
    Merge 4.19.164 into android-4.19-stable
Linux 4.19.164
    platform/x86: mlx-platform: remove an unused variable
  * PCI: Fix pci_slot_release() NULL pointer dereference
      drivers/pci/slot.c
    platform/x86: intel-vbtn: Allow switch events on Acer Switch Alpha 12
    libnvdimm/namespace: Fix reaping of invalidated block-window-namespace labels
    xenbus/xenbus_backend: Disallow pending watch messages
  * xen/xenbus: Count pending messages for each watch
      include/xen/xenbus.h
    xen/xenbus/xen_bus_type: Support will_handle watch callback
  * xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path()
      include/xen/xenbus.h
  * xen/xenbus: Allow watches discard events before queueing
      include/xen/xenbus.h
    xen-blkback: set ring->xenblkd to NULL after kthread_stop()
    clk: mvebu: a3700: fix the XTAL MODE pin to MPP1_9
    pinctrl: sunxi: Always call chained_irq_{enter, exit} in sunxi_pinctrl_irq_handler
    md/cluster: fix deadlock when node is doing resync job
    md/cluster: block reshape with remote resync job
    iio:imu:bmi160: Fix too large a buffer.
    iio:pressure:mpl3115: Force alignment of buffer
    iio:light:st_uvis25: Fix timestamp alignment and prevent data leak.
    iio:light:rpr0521: Fix timestamp alignment and prevent data leak.
    iio: adc: rockchip_saradc: fix missing clk_disable_unprepare() on error in rockchip_saradc_resume
    iio: buffer: Fix demux update
    scsi: lpfc: Re-fix use after free in lpfc_rq_buf_free()
    scsi: lpfc: Fix invalid sleeping context in lpfc_sli4_nvmet_alloc()
    mtd: rawnand: qcom: Fix DMA sync on FLASH_STATUS register read
    mtd: parser: cmdline: Fix parsing of part-names with colons
    mtd: spinand: Fix OOB read
  * soc: qcom: smp2p: Safely acquire spinlock without IRQs
      drivers/soc/qcom/smp2p.c
    spi: mt7621: fix missing clk_disable_unprepare() on error in mt7621_spi_probe
    spi: st-ssc4: Fix unbalanced pm_runtime_disable() in probe error path
    spi: sc18is602: Don't leak SPI master in probe error path
    spi: rb4xx: Don't leak SPI master in probe error path
    spi: pic32: Don't leak DMA channels in probe error path
    spi: davinci: Fix use-after-free on unbind
    spi: spi-sh: Fix use-after-free on unbind
    drm/dp_aux_dev: check aux_dev before use in drm_dp_aux_dev_get_by_minor()
    jfs: Fix array index bounds check in dbAdjTree
    jffs2: Fix GC exit abnormally
    ubifs: wbuf: Don't leak kernel memory to flash
    SMB3.1.1: do not log warning message if server doesn't populate salt
    SMB3: avoid confusing warning message on mount to Azure
    ceph: fix race in concurrent __ceph_remove_cap invocations
    ima: Don't modify file descriptor mode on the fly
    powerpc/powernv/memtrace: Fix crashing the kernel when enabling concurrently
    powerpc/powernv/memtrace: Don't leak kernel memory to user space
    powerpc/xmon: Change printk() to pr_cont()
    powerpc/rtas: Fix typo of ibm,open-errinjct in RTAS filter
    powerpc: Fix incorrect stw{, ux, u, x} instructions in __set_pte_at
    ARM: dts: at91: sama5d2: fix CAN message ram offset and size
    ARM: dts: pandaboard: fix pinmux for gpio user button of Pandaboard ES
  * KVM: arm64: Introduce handling of AArch32 TTBCR2 traps
      arch/arm64/include/asm/kvm_host.h
  * ext4: fix deadlock with fs freezing and EA inodes
      fs/ext4/inode.c
  * ext4: fix a memory leak of ext4_free_data
      fs/ext4/mballoc.c
    USB: serial: keyspan_pda: fix write unthrottling
    USB: serial: keyspan_pda: fix tx-unthrottle use-after-free
    USB: serial: keyspan_pda: fix write-wakeup use-after-free
    USB: serial: keyspan_pda: fix stalled writes
    USB: serial: keyspan_pda: fix write deadlock
    USB: serial: keyspan_pda: fix dropped unthrottle interrupts
    USB: serial: digi_acceleport: fix write-wakeup deadlocks
    USB: serial: mos7720: fix parallel-port state restore
    EDAC/amd64: Fix PCI component registration
  * crypto: ecdh - avoid unaligned accesses in ecdh_set_secret()
      crypto/ecdh.c
    powerpc/perf: Exclude kernel samples while counting events in user space.
    staging: comedi: mf6x4: Fix AI end-of-conversion detection
    s390/dasd: fix list corruption of lcu list
    s390/dasd: fix list corruption of pavgroup group list
    s390/dasd: prevent inconsistent LCU device data
    s390/dasd: fix hanging device offline processing
    s390/kexec_file: fix diag308 subcode when loading crash kernel
    s390/smp: perform initial CPU reset also for SMT siblings
  * ALSA: usb-audio: Disable sample read check if firmware doesn't give back
      sound/usb/clock.c
  * ALSA: usb-audio: Add VID to support native DSD reproduction on FiiO devices
      sound/usb/quirks.c
    ALSA: hda/realtek: Apply jack fixup for Quanta NL3
    ALSA: hda/realtek: Add quirk for MSI-GP73
    ALSA: pcm: oss: Fix a few more UBSAN fixes
    ALSA: hda/realtek - Enable headset mic of ASUS Q524UQK with ALC255
    ALSA: hda/realtek - Enable headset mic of ASUS X430UN with ALC256
    ALSA: hda: Fix regressions on clear and reconfig sysfs
    ACPI: PNP: compare the string length in the matching_id()
    Revert "ACPI / resources: Use AE_CTRL_TERMINATE to terminate resources walks"
  * PM: ACPI: PCI: Drop acpi_pm_set_bridge_wakeup()
      include/acpi/acpi_bus.h
    ALSA: hda/ca0132 - Change Input Source enum strings.
    Input: cyapa_gen6 - fix out-of-bounds stack access
    media: ipu3-cio2: Make the field on subdev format V4L2_FIELD_NONE
    media: ipu3-cio2: Validate mbus format in setting subdev format
    media: ipu3-cio2: Serialise access to pad format
    media: ipu3-cio2: Return actual subdev format
    media: ipu3-cio2: Remove traces of returned buffers
    media: netup_unidvb: Don't leak SPI master in probe error path
    media: sunxi-cir: ensure IR is handled when it is continuous
    media: gspca: Fix memory leak in probe
    Input: goodix - add upside-down quirk for Teclast X98 Pro tablet
    Input: cros_ec_keyb - send 'scancodes' in addition to key events
    lwt: Disable BH too in run_lwt_bpf()
  * fix namespaced fscaps when !CONFIG_SECURITY
      include/linux/security.h
  * cfg80211: initialize rekey_data
      net/wireless/nl80211.c
    ARM: sunxi: Add machine match for the Allwinner V3 SoC
  * kconfig: fix return value of do_error_if()
      scripts/kconfig/preprocess.c
    clk: sunxi-ng: Make sure divider tables have sentinel
    clk: s2mps11: Fix a resource leak in error handling paths in the probe function
    qlcnic: Fix error code in probe
    perf record: Fix memory leak when using '--user-regs=?' to list registers
    pwm: lp3943: Dynamically allocate PWM chip base
    pwm: zx: Add missing cleanup in error path
    clk: ti: Fix memleak in ti_fapll_synth_setup
  * watchdog: coh901327: add COMMON_CLK dependency
      drivers/watchdog/Kconfig
    watchdog: qcom: Avoid context switch in restart handler
    libnvdimm/label: Return -ENXIO for no slot in __blk_label_update
    net: korina: fix return value
    net: allwinner: Fix some resources leak in the error handling path of the probe and in the remove function
    net: bcmgenet: Fix a resource leak in an error handling path in the probe functin
    checkpatch: fix unescaped left brace
    powerpc/ps3: use dma_mapping_error()
    nfc: s3fwrn5: Release the nfc firmware
    um: chan_xterm: Fix fd leak
    um: tty: Fix handling of close in tty lines
    um: Monitor error events in IRQ controller
  * watchdog: Fix potential dereferencing of null pointer
      drivers/watchdog/watchdog_core.c
    watchdog: sprd: check busy bit before new loading rather than after that
    watchdog: sprd: remove watchdog disable from resume fail path
  * watchdog: sirfsoc: Add missing dependency on HAS_IOMEM
      drivers/watchdog/Kconfig
    irqchip/alpine-msi: Fix freeing of interrupts on allocation error path
  * ASoC: wm_adsp: remove "ctl" from list on error in wm_adsp_create_control()
      sound/soc/codecs/wm_adsp.c
    mac80211: don't set set TDLS STA bandwidth wider than possible
    extcon: max77693: Fix modalias string
    clk: tegra: Fix duplicated SE clock entry
    bus: fsl-mc: fix error return code in fsl_mc_object_allocate()
    x86/kprobes: Restore BTF if the single-stepping is cancelled
    nfs_common: need lock during iterate through the list
    nfsd: Fix message level for normal termination
    speakup: fix uninitialized flush_lock
    usb: oxu210hp-hcd: Fix memory leak in oxu_create
    usb: ehci-omap: Fix PM disable depth umbalance in ehci_hcd_omap_probe
    powerpc/pseries/hibernation: remove redundant cacheinfo update
    powerpc/pseries/hibernation: drop pseries_suspend_begin() from suspend ops
    platform/x86: mlx-platform: Fix item counter assignment for MSN2700, MSN24xx systems
    scsi: fnic: Fix error return code in fnic_probe()
  * seq_buf: Avoid type mismatch for seq_buf_init
      include/linux/seq_buf.h
      include/linux/trace_seq.h
    scsi: pm80xx: Fix error return in pm8001_pci_probe()
    scsi: qedi: Fix missing destroy_workqueue() on error in __qedi_probe
    cpufreq: scpi: Add missing MODULE_ALIAS
    cpufreq: loongson1: Add missing MODULE_ALIAS
    cpufreq: st: Add missing MODULE_DEVICE_TABLE
    cpufreq: mediatek: Add missing MODULE_DEVICE_TABLE
    cpufreq: highbank: Add missing MODULE_DEVICE_TABLE
  * clocksource/drivers/arm_arch_timer: Correct fault programming of CNTKCTL_EL1.EVNTI
      drivers/clocksource/arm_arch_timer.c
  * dm ioctl: fix error return code in target_message
      drivers/md/dm-ioctl.c
    ASoC: jz4740-i2s: add missed checks for clk_get()
    net/mlx5: Properly convey driver version to firmware
    memstick: r592: Fix error return in r592_probe()
    arm64: dts: rockchip: Fix UART pull-ups on rk3328
    pinctrl: falcon: add missing put_device() call in pinctrl_falcon_probe()
    ARM: dts: at91: sama5d2: map securam as device
    clocksource/drivers/cadence_ttc: Fix memory leak in ttc_setup_clockevent()
    media: saa7146: fix array overflow in vidioc_s_audio()
    vfio-pci: Use io_remap_pfn_range() for PCI IO memory
    NFS: switch nfsiod to be an UNBOUND workqueue.
    lockd: don't use interval-based rebinding over TCP
  * SUNRPC: xprt_load_transport() needs to support the netid "rdma6"
      include/linux/sunrpc/xprt.h
    NFSv4.2: condition READDIR's mask for security label based on LSM state
    ath10k: Release some resources in an error handling path
    ath10k: Fix an error handling path
    ath10k: Fix the parsing error in service available event
    platform/x86: dell-smbios-base: Fix error return code in dell_smbios_init
    ARM: dts: at91: at91sam9rl: fix ADC triggers
    arm64: dts: meson: fix spi-max-frequency on Khadas VIM2
    PCI: iproc: Fix out-of-bound array accesses
  * PCI: Fix overflow in command-line resource alignment requests
      drivers/pci/pci.c
  * PCI: Bounds-check command-line resource alignment requests
      drivers/pci/pci.c
  * genirq/irqdomain: Don't try to free an interrupt that has no mapping
      kernel/irq/irqdomain.c
    power: supply: bq24190_charger: fix reference leak
    power: supply: axp288_charger: Fix HP Pavilion x2 10 DMI matching
    arm64: dts: rockchip: Set dr_mode to "host" for OTG on rk3328-roc-cc
    ARM: dts: Remove non-existent i2c1 from 98dx3236
    HSI: omap_ssi: Don't jump to free ID in ssi_add_controller()
    slimbus: qcom-ngd-ctrl: Avoid sending power requests without QMI
    media: max2175: fix max2175_set_csm_mode() error code
    mips: cdmm: fix use-after-free in mips_cdmm_bus_discover
    samples: bpf: Fix lwt_len_hist reusing previous BPF map
    platform/x86: mlx-platform: Remove PSU EEPROM from MSN274x platform configuration
    platform/x86: mlx-platform: Remove PSU EEPROM from default platform configuration
    media: siano: fix memory leak of debugfs members in smsdvb_hotplug
    dmaengine: mv_xor_v2: Fix error return code in mv_xor_v2_probe()
    cw1200: fix missing destroy_workqueue() on error in cw1200_init_common
    orinoco: Move context allocation after processing the skb
    ARM: dts: at91: sama5d3_xplained: add pincontrol for USB Host
    ARM: dts: at91: sama5d4_xplained: add pincontrol for USB Host
    memstick: fix a double-free bug in memstick_check
    RDMA/cxgb4: Validate the number of CQEs
    Input: omap4-keypad - fix runtime PM error handling
    drivers: soc: ti: knav_qmss_queue: Fix error return code in knav_queue_probe
    soc: ti: Fix reference imbalance in knav_dma_probe
    soc: ti: knav_qmss: fix reference leak in knav_queue_probe
  * spi: fix resource leak for drivers without .remove callback
      drivers/spi/spi.c
    crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe
    crypto: crypto4xx - Replace bitwise OR with logical OR in crypto4xx_build_pd
    powerpc/feature: Fix CPU_FTRS_ALWAYS by removing CPU_FTRS_GENERIC_32
    spi: mxs: fix reference leak in mxs_spi_probe
    usb/max3421: fix return error code in max3421_probe()
    Input: ads7846 - fix unaligned access on 7845
    Input: ads7846 - fix integer overflow on Rt calculation
    Input: ads7846 - fix race that causes missing releases
    drm/omap: dmm_tiler: fix return error code in omap_dmm_probe()
    video: fbdev: atmel_lcdfb: fix return error code in atmel_lcdfb_of_init()
    media: solo6x10: fix missing snd_card_free in error handling case
  * scsi: core: Fix VPD LUN ID designator priorities
      drivers/scsi/scsi_lib.c
  * ASoC: meson: fix COMPILE_TEST error
      sound/soc/meson/Kconfig
    media: mtk-vcodec: add missing put_device() call in mtk_vcodec_release_dec_pm()
    media: tm6000: Fix sizeof() mismatches
    staging: gasket: interrupt: fix the missed eventfd_ctx_put() in gasket_interrupt.c
    staging: greybus: codecs: Fix reference counter leak in error handling
    crypto: qat - fix status check in qat_hal_put_rel_rd_xfer()
    MIPS: BCM47XX: fix kconfig dependency bug for BCM47XX_BCMA
    RDMa/mthca: Work around -Wenum-conversion warning
    ASoC: arizona: Fix a wrong free in wm8997_probe
    ASoC: wm8998: Fix PM disable depth imbalance on error
    mwifiex: fix mwifiex_shutdown_sw() causing sw reset failure
    spi: bcm63xx-hsspi: fix missing clk_disable_unprepare() on error in bcm63xx_hsspi_resume
    spi: tegra114: fix reference leak in tegra spi ops
    spi: tegra20-sflash: fix reference leak in tegra_sflash_resume
    spi: tegra20-slink: fix reference leak in slink ops of tegra20
    spi: spi-ti-qspi: fix reference leak in ti_qspi_setup
    Bluetooth: hci_h5: fix memory leak in h5_close
  * Bluetooth: Fix null pointer dereference in hci_event_packet()
      net/bluetooth/hci_event.c
    arm64: dts: exynos: Correct psci compatible used on Exynos7
    arm64: dts: exynos: Include common syscon restart/poweroff for Exynos7
  * selinux: fix inode_doinit_with_dentry() LABEL_INVALID error handling
      security/selinux/hooks.c
  * ASoC: pcm: DRAIN support reactivation
      sound/soc/soc-pcm.c
    drm/msm/dsi_pll_10nm: restore VCO rate during restore_state
    spi: img-spfi: fix reference leak in img_spfi_resume
    powerpc/64: Set up a kernel stack for secondaries before cpu_restore()
    crypto: inside-secure - Fix sizeof() mismatch
    crypto: talitos - Fix return type of current_desc_hdr()
    crypto: talitos - Endianess in current_desc_hdr()
  * sched: Reenable interrupts in do_sched_yield()
      kernel/sched/core.c
  * sched/deadline: Fix sched_dl_global_validate()
      kernel/sched/deadline.c
      kernel/sched/sched.h
    x86/apic: Fix x2apic enablement without interrupt remapping
    ARM: p2v: fix handling of LPAE translation in BE mode
    x86/mm/ident_map: Check for errors from ident_pud_init()
    RDMA/rxe: Compute PSN windows correctly
    ARM: dts: aspeed: s2600wf: Fix VGA memory region location
  * selinux: fix error initialization in inode_doinit_with_dentry()
      security/selinux/hooks.c
    RDMA/bnxt_re: Set queue pair state when being queried
    soc: qcom: geni: More properly switch to DMA mode
    soc: mediatek: Check if power domains can be powered on at boot time
    soc: renesas: rmobile-sysc: Fix some leaks in rmobile_init_pm_domains()
    drm/tve200: Fix handling of platform_get_irq() error
    drm/gma500: fix double free of gma_connector
    perf cs-etm: Move definition of 'traceid_list' global variable from header file
    perf cs-etm: Change tuple from traceID-CPU# to traceID-metadata
    md: fix a warning caused by a race between concurrent md_ioctl()s
  * crypto: af_alg - avoid undefined behavior accessing salg_name
      include/uapi/linux/if_alg.h
    media: msi2500: assign SPI bus number dynamically
  * quota: Sanity-check quota file headers on load
      fs/quota/quota_v2.c
  * Bluetooth: Fix slab-out-of-bounds read in hci_le_direct_adv_report_evt()
      net/bluetooth/hci_event.c
  * serial_core: Check for port state when tty is in error state
      drivers/tty/serial/serial_core.c
    HID: i2c-hid: add Vero K147 to descriptor override
    scsi: megaraid_sas: Check user-provided offsets
  * coresight: tmc-etr: Check if page is valid before dma_map_page()
      drivers/hwtracing/coresight/coresight-tmc-etr.c
    ARM: dts: exynos: fix USB 3.0 pins supply being turned off on Odroid XU
    ARM: dts: exynos: fix USB 3.0 VBUS control and over-current pins on Exynos5410
    ARM: dts: exynos: fix roles of USB 3.0 ports on Odroid XU
    usb: chipidea: ci_hdrc_imx: Pass DISABLE_DEVICE_STREAMING flag to imx6ul
    USB: gadget: f_rndis: fix bitrate for SuperSpeed and above
  * usb: gadget: f_fs: Re-use SS descriptors for SuperSpeedPlus
      drivers/usb/gadget/function/f_fs.c
  * USB: gadget: f_midi: setup SuperSpeed Plus descriptors
      drivers/usb/gadget/function/f_midi.c
    USB: gadget: f_acm: add support for SuperSpeed Plus
    USB: serial: option: add interface-number sanity check to flag handling
    soc/tegra: fuse: Fix index bug in get_process_id
  * dm table: Remove BUG_ON(in_interrupt())
      drivers/md/dm-table.c
    scsi: mpt3sas: Increase IOCInit request timeout to 30s
    vxlan: Copy needed_tailroom from lowerdev
    vxlan: Add needed_headroom for lower device
  * arm64: syscall: exit userspace before unmasking exceptions
      arch/arm64/kernel/syscall.c
    drm/tegra: sor: Disable clocks on error in tegra_sor_init()
  * kernel/cpu: add arch override for clear_tasks_mm_cpumask() mm handling
      kernel/cpu.c
    drm/tegra: replace idr_init() by idr_init_base()
    ixgbe: avoid premature Rx buffer reuse
    RDMA/cm: Fix an attempt to use non-valid pointer when cleaning timewait
    selftests/bpf/test_offload.py: Reset ethtool features after failed setting
    gpio: eic-sprd: break loop when getting NULL device resource
  * netfilter: x_tables: Switch synchronization to RCU
      include/linux/netfilter/x_tables.h
      net/ipv4/netfilter/arp_tables.c
      net/ipv4/netfilter/ip_tables.c
      net/ipv6/netfilter/ip6_tables.c
      net/netfilter/x_tables.c
  * block: factor out requeue handling from dispatch code
      block/blk-mq.c
    clk: renesas: r9a06g032: Drop __packed for portability
    can: softing: softing_netdev_open(): fix error handling
    xsk: Fix xsk_poll()'s return type
  * scsi: bnx2i: Requires MMU
      drivers/scsi/bnx2i/Kconfig
    gpio: mvebu: fix potential user-after-free on probe
    ARM: dts: sun8i: v3s: fix GIC node memory range
    pinctrl: baytrail: Avoid clearing debounce value when turning it off
    pinctrl: merrifield: Set default bias in case no particular value given
    x86/resctrl: Fix incorrect local bandwidth when mba_sc is enabled
    x86/resctrl: Remove unused struct mbm_state::chunks_bw
  * arm64: Change .weak to SYM_FUNC_START_WEAK_PI for arch/arm64/lib/mem*.S
      arch/arm64/lib/memcpy.S
      arch/arm64/lib/memmove.S
      arch/arm64/lib/memset.S
  * arm64: lse: Fix LSE atomics with LLVM
      arch/arm64/include/asm/lse.h
  * arm64: lse: fix LSE atomics with LLVM's integrated assembler
      arch/arm64/include/asm/atomic_lse.h
      arch/arm64/include/asm/lse.h
  * drm: fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi
      drivers/gpu/drm/drm_dp_mst_topology.c
    drm/xen-front: Fix misused IS_ERR_OR_NULL checks
    serial: 8250_omap: Avoid FIFO corruption caused by MDR1 access
    ALSA: pcm: oss: Fix potential out-of-bounds shift
  * USB: sisusbvga: Make console support depend on BROKEN
      drivers/usb/misc/sisusbvga/Kconfig
  * USB: UAS: introduce a quirk to set no_write_same
      drivers/usb/storage/usb.c
      include/linux/usb_usual.h
  * xhci: Give USB2 ports time to enter U3 in bus suspend
      drivers/usb/host/xhci-hub.c
  * ALSA: usb-audio: Fix control 'access overflow' errors from chmap
      sound/usb/stream.c
  * ALSA: usb-audio: Fix potential out-of-bounds shift
      sound/usb/format.c
  * USB: add RESET_RESUME quirk for Snapscan 1212
      drivers/usb/core/quirks.c
    USB: dummy-hcd: Fix uninitialized array use in init()
    ktest.pl: If size of log is too big to email, email error message
    net: bridge: vlan: fix error return code in __vlan_add()
    net: stmmac: dwmac-meson8b: fix mask definition of the m250_sel mux
    net: stmmac: delete the eee_ctrl_timer after napi disabled
    net/mlx4_en: Handle TX error CQE
    lan743x: fix for potential NULL pointer dereference with bare card
    net/mlx4_en: Avoid scheduling restart task if it is already running
  * tcp: fix cwnd-limited bug for TSO deferral where we send nothing
      net/ipv4/tcp_output.c
  * tcp: select sane initial rcvq_space.space for big MSS
      net/ipv4/tcp_input.c
    net: stmmac: free tx skb buffer in stmmac_resume()
    mac80211: mesh: fix mesh_pathtbl_init() error path
    PCI: qcom: Add missing reset for ipq806x
  * compiler.h: fix barrier_data() on clang
      include/linux/compiler-clang.h
      include/linux/compiler-gcc.h
      include/linux/compiler.h
    x86/apic/vector: Fix ordering in vector assignment
    x86/membarrier: Get rid of a dubious optimization
    x86/mm/mem_encrypt: Fix definition of PMD_FLAGS_DEC_WP
    scsi: be2iscsi: Revert "Fix a theoretical leak in beiscsi_create_eqs()"
  * kbuild: avoid static_assert for genksyms
      include/linux/build_bug.h
    mmc: block: Fixup condition for CMD13 polling for RPMB requests
    pinctrl: amd: remove debounce filter setting in IRQ type setting
    Input: i8042 - add Acer laptops to the i8042 reset list
    Input: cm109 - do not stomp on control URB
    platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
    platform/x86: acer-wmi: add automatic keyboard background light toggle key as KEY_LIGHTS_TOGGLE
    platform/x86: thinkpad_acpi: Add BAT1 is primary battery quirk for Thinkpad Yoga 11e 4th gen
    platform/x86: thinkpad_acpi: Do not report SW_TABLET_MODE on Yoga 11e
    soc: fsl: dpio: Get the cpumask through cpumask_of(cpu)
  * irqchip/gic-v3-its: Unconditionally save/restore the ITS state on suspend
      drivers/irqchip/irq-gic-v3-its.c
  * scsi: ufs: Make sure clk scaling happens only when HBA is runtime ACTIVE
      drivers/scsi/ufs/ufshcd.c
    ARC: stack unwinding: don't assume non-current task is sleeping
    powerpc: Drop -me200 addition to build flags
    iwlwifi: mvm: fix kernel panic in case of assert during CSA
    arm64: dts: rockchip: Assign a fixed index to mmc devices on rk3399 boards.
    iwlwifi: pcie: limit memory read spin time
    spi: bcm2835aux: Restore err assignment in bcm2835aux_spi_probe
    spi: bcm2835aux: Fix use-after-free on unbind
    x86/lib: Change .weak to SYM_FUNC_START_WEAK for arch/x86/lib/mem*_64.S
  * Kbuild: do not emit debug info for assembly with LLVM_IAS=1
      Makefile
    ANDROID: GKI: Update the ABI xml representation
  * ANDROID: Incremental fs: Set credentials before reading/writing
      fs/incfs/data_mgmt.c
      fs/incfs/format.c
      fs/incfs/format.h
      fs/incfs/pseudo_files.c
    ANDROID: Incremental fs: Fix incfs_test use of atol, open
  * ANDROID: Incremental fs: Change per UID timeouts to microseconds
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/pseudo_files.c
      fs/incfs/vfs.c
      include/uapi/linux/incrementalfs.h
  * ANDROID: Incremental fs: Add v2 feature flag
      fs/incfs/main.c
      include/uapi/linux/incrementalfs.h
  * ANDROID: Incremental fs: Add zstd feature flag
      fs/incfs/main.c
      include/uapi/linux/incrementalfs.h
    Merge 4.19.163 into android-4.19-stable
Linux 4.19.163
    Revert "geneve: pull IP header before ECN decapsulation"
    x86/insn-eval: Use new for_each_insn_prefix() macro to loop over prefixes bytes
    netfilter: nf_tables: avoid false-postive lockdep splat
    Input: i8042 - fix error return code in i8042_setup_aux()
    dm writecache: remove BUG() and fail gracefully instead
    i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc()
    gfs2: check for empty rgrp tree in gfs2_ri_update
  * tracing: Fix userstacktrace option for instances
      kernel/trace/trace.c
      kernel/trace/trace.h
    spi: bcm2835: Release the DMA channel if probe fails after dma_init
    spi: bcm2835: Fix use-after-free on unbind
    spi: bcm-qspi: Fix use-after-free on unbind
  * spi: Introduce device-managed SPI controller allocation
      drivers/spi/spi.c
      include/linux/spi/spi.h
    iommu/amd: Set DTE[IntTabLen] to represent 512 IRTEs
    speakup: Reject setting the speakup line discipline outside of speakup
    i2c: imx: Check for I2SR_IAL after every byte
    i2c: imx: Fix reset of I2SR_IAL flag
    x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes
  * mm/swapfile: do not sleep with a spin lock held
      mm/swapfile.c
  * mm: list_lru: set shrinker map bit when child nr_items is not zero
      mm/list_lru.c
  * dm: remove invalid sparse __acquires and __releases annotations
      drivers/md/dm.c
    dm writecache: fix the maximum number of arguments
    scsi: mpt3sas: Fix ioctl timeout
    i2c: imx: Don't generate STOP condition if arbitration has been lost
    cifs: fix potential use-after-free in cifs_echo_request()
    ftrace: Fix updating FTRACE_FL_TRAMP
    ALSA: hda/generic: Add option to enforce preferred_dacs pairs
    ALSA: hda/realtek - Add new codec supported for ALC897
    ALSA: hda/realtek: Enable headset of ASUS UX482EG & B9400CEA with ALC294
    ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model
  * tty: Fix ->session locking
      drivers/tty/tty_io.c
      drivers/tty/tty_jobctrl.c
      include/linux/tty.h
  * tty: Fix ->pgrp locking in tiocspgrp()
      drivers/tty/tty_jobctrl.c
    USB: serial: option: fix Quectel BG96 matching
    USB: serial: option: add support for Thales Cinterion EXS82
    USB: serial: option: add Fibocom NL668 variants
    USB: serial: ch341: sort device-id entries
    USB: serial: ch341: add new Product ID for CH341A
    USB: serial: kl5kusb105: fix memleak on open
  * usb: gadget: f_fs: Use local copy of descriptors for userspace copy
      drivers/usb/gadget/function/f_fs.c
    pinctrl: baytrail: Fix pin being driven low for a while on gpiod_get(..., GPIOD_OUT_HIGH)
    pinctrl: baytrail: Replace WARN with dev_info_once when setting direct-irq pin to output
    ANDROID: Add symbol of get_next_event_cpu back
    ANDROID: x86: configs: gki: add missing CONFIG_BLK_CGROUP
    ANDROID: Add allowed symbols from sctp.ko and qrtr.ko
    Merge 4.19.162 into android-4.19-stable
Linux 4.19.162
    RDMA/i40iw: Address an mmap handler exploit in i40iw
    tracing: Remove WARN_ON in start_thread()
    Input: i8042 - add ByteSpeed touchpad to noloop table
  * Input: xpad - support Ardwiino Controllers
      drivers/input/joystick/xpad.c
  * ALSA: usb-audio: US16x08: fix value count for level meters
      sound/usb/mixer_us16x08.c
    dt-bindings: net: correct interrupt flags in examples
    chelsio/chtls: fix panic during unload reload chtls
    net/mlx5: Fix wrong address reclaim when command interface is down
    net: mvpp2: Fix error return code in mvpp2_open()
    chelsio/chtls: fix a double free in chtls_setkey()
    net: pasemi: fix error return code in pasemi_mac_open()
    cxgb3: fix error return code in t3_sge_alloc_qset()
    net/x25: prevent a couple of overflows
    net: ip6_gre: set dev->hard_header_len when using header_ops
    geneve: pull IP header before ECN decapsulation
    ibmvnic: Fix TX completion error handling
    ibmvnic: Ensure that SCRQ entry reads are correctly ordered
  * ipv4: Fix tos mask in inet_rtm_getroute()
      net/ipv4/route.c
    netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal
  * bonding: wait for sysfs kobject destruction before freeing struct slave
      drivers/net/bonding/bond_main.c
      drivers/net/bonding/bond_sysfs_slave.c
      include/net/bonding.h
    i40e: Fix removing driver while bare-metal VFs pass traffic
    ibmvnic: fix call_netdevice_notifiers in do_reset
  * net/tls: Protect from calling tls_dev_del for TLS RX twice
      include/net/tls.h
    usbnet: ipheth: fix connectivity with iOS 14
  * tun: honor IOCB_NOWAIT flag
      drivers/net/tun.c
  * tcp: Set INET_ECN_xmit configuration in tcp_reinit_congestion_control
      net/ipv4/tcp_cong.c
  * sock: set sk_err to ee_errno on dequeue from errq
      net/core/skbuff.c
    rose: Fix Null pointer dereference in rose_send_frame()
    net/tls: missing received data after fast remote close
    net/af_iucv: set correct sk_protocol for child sockets
  * ipv6: addrlabel: fix possible memory leak in ip6addrlbl_net_init
      net/ipv6/addrlabel.c
  * FROMLIST: Kbuild: do not emit debug info for assembly with LLVM_IAS=1
      Makefile
  * ANDROID: kbuild: use grep -F instead of fgrep
      scripts/Kbuild.include
  * ANDROID: GKI: usb: gadget: support claiming indexed endpoints by name
      drivers/usb/gadget/epautoconf.c
  * UPSTREAM: arm64: sysreg: Clean up instructions for modifying PSTATE fields
      arch/arm64/include/asm/sysreg.h
      arch/arm64/kernel/cpufeature.c
    Revert "Revert "ANDROID: clang: update to 11.0.5""
  * ANDROID: kbuild: speed up ksym_dep_filter
      scripts/Kbuild.include
  * Revert "drm/atomic_helper: Stop modesets on unregistered connectors harder"
      drivers/gpu/drm/drm_atomic.c
      drivers/gpu/drm/drm_atomic_helper.c
      drivers/gpu/drm/drm_connector.c
      include/drm/drm_connector.h
    Merge 4.19.161 into android-4.19-stable
Linux 4.19.161
  * USB: core: Fix regression in Hercules audio card
      drivers/usb/core/quirks.c
    x86/resctrl: Add necessary kernfs_put() calls to prevent refcount leak
    x86/resctrl: Remove superfluous kernfs_get() calls to prevent refcount leak
    x86/speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb
    usb: gadget: Fix memleak in gadgetfs_fill_super
  * USB: quirks: Add USB_QUIRK_DISCONNECT_SUSPEND quirk for Lenovo A630Z TIO built-in usb-audio card
      drivers/usb/core/quirks.c
  * usb: gadget: f_midi: Fix memleak in f_midi_alloc
      drivers/usb/gadget/function/f_midi.c
  * USB: core: Change %pK for __user pointers to %px
      drivers/usb/core/devio.c
    perf probe: Fix to die_entrypc() returns error correctly
    can: m_can: fix nominal bitiming tseg2 min for version >= 3.1
    platform/x86: toshiba_acpi: Fix the wrong variable assignment
    platform/x86: thinkpad_acpi: Send tablet mode switch at wakeup time
    can: gs_usb: fix endianess problem with candleLight firmware
    efivarfs: revert "fix memory leak in efivarfs_create()"
    optee: add writeback to valid memory type
    ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq
    ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues
    net: ena: set initial DMA width to avoid intel iommu issue
    nfc: s3fwrn5: use signed integer for parsing GPIO numbers
    IB/mthca: fix return value of error branch in mthca_init_cq()
    s390/qeth: fix tear down of async TX buffers
    cxgb4: fix the panic caused by non smac rewrite
    bnxt_en: Release PCI regions when DMA mask setup fails during probe.
    video: hyperv_fb: Fix the cache type when mapping the VRAM
    bnxt_en: fix error return code in bnxt_init_board()
    bnxt_en: fix error return code in bnxt_init_one()
  * scsi: ufs: Fix race between shutdown and runtime resume flow
      drivers/scsi/ufs/ufshcd.c
    ARM: dts: dra76x: m_can: fix order of clocks
    batman-adv: set .owner to THIS_MODULE
    phy: tegra: xusb: Fix dangling pointer on probe failure
    xtensa: uaccess: Add missing __user to strncpy_from_user() prototype
    perf/x86: fix sysfs type mismatches
    scsi: target: iscsi: Fix cmd abort fabric stop race
  * scsi: libiscsi: Fix NOP race condition
      include/scsi/libiscsi.h
    dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size
    nvme: free sq/cq dbbuf pointers when dbbuf set fails
  * proc: don't allow async path resolution of /proc/self components
      fs/proc/self.c
  * HID: Add Logitech Dinovo Edge battery quirk
      drivers/hid/hid-ids.h
      drivers/hid/hid-input.c
    x86/xen: don't unbind uninitialized lock_kicker_irq
    dmaengine: xilinx_dma: use readl_poll_timeout_atomic variant
  * HID: add HID_QUIRK_INCREMENT_USAGE_ON_DUPLICATE for Gamevice devices
      drivers/hid/hid-ids.h
      drivers/hid/hid-quirks.c
    HID: hid-sensor-hub: Fix issue with devices with no report ID
    Input: i8042 - allow insmod to succeed on devices without an i8042 controller
  * HID: add support for Sega Saturn
      drivers/hid/hid-ids.h
      drivers/hid/hid-quirks.c
  * HID: cypress: Support Varmilo Keyboards' media hotkeys
      drivers/hid/hid-ids.h
    ALSA: hda/hdmi: fix incorrect locking in hdmi_pcm_close
  * drm/atomic_helper: Stop modesets on unregistered connectors harder
      drivers/gpu/drm/drm_atomic.c
      drivers/gpu/drm/drm_atomic_helper.c
      drivers/gpu/drm/drm_connector.c
      include/drm/drm_connector.h
  * arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect()
      arch/arm64/include/asm/pgtable.h
  * arm64: pgtable: Fix pte_accessible()
      arch/arm64/include/asm/pgtable.h
    KVM: x86: Fix split-irqchip vs interrupt injection window request
    KVM: x86: handle !lapic_in_kernel case in kvm_cpu_*_extint
    KVM: arm64: vgic-v3: Drop the reporting of GICR_TYPER.Last for userspace
  * wireless: Use linux/stddef.h instead of stddef.h
      include/uapi/linux/wireless.h
    btrfs: fix lockdep splat when reading qgroup config on mount
    btrfs: don't access possibly stale fs_info data for printing duplicate device
  * netfilter: clear skb->next in NF_HOOK_LIST()
      include/linux/netfilter.h
    perf event: Check ref_reloc_sym before using it
  * ANDROID: vmlinux.lds.h: merge compound literal sections
      include/asm-generic/vmlinux.lds.h
  * BACKPORT: sched/fair: Fix overutilized update in enqueue_task_fair()
      kernel/sched/fair.c

Bug: 180663378
Change-Id: Ie10d7527ff7d181fa122bbe77d6869c2b65cbe4e
Signed-off-by: Lucas Wei <lucaswei@google.com>
2021-02-26 10:41:51 +08:00
Lai Jiangshan
fc1e3f5d1d kvm: check tlbs_dirty directly
commit 88bf56d04bc3564542049ec4ec168a8b60d0b48c upstream

In kvm_mmu_notifier_invalidate_range_start(), tlbs_dirty is used as:
        need_tlb_flush |= kvm->tlbs_dirty;
with need_tlb_flush's type being int and tlbs_dirty's type being long.

It means that tlbs_dirty is always used as int and the higher 32 bits
is useless.  We need to check tlbs_dirty in a correct way and this
change checks it directly without propagating it to need_tlb_flush.

Note: it's _extremely_ unlikely this neglecting of higher 32 bits can
cause problems in practice.  It would require encountering tlbs_dirty
on a 4 billion count boundary, and KVM would need to be using shadow
paging or be running a nested guest.

Cc: stable@vger.kernel.org
Fixes: a4ee1ca4a3 ("KVM: MMU: delay flush all tlbs on sync_page path")
Signed-off-by: Lai Jiangshan <laijs@linux.alibaba.com>
Message-Id: <20201217154118.16497-1-jiangshanlai@gmail.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
[sudip: adjust context]
Signed-off-by: Sudip Mukherjee <sudipm.mukherjee@gmail.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-02-23 15:01:00 +01:00
lucaswei
3ff70092e4 Merge android-4.19-stable (4.19.160) into android-msm-pixel-4.19-lts
Merge 4.19.160 into android-4.19-stable
Linux 4.19.160
    mm/userfaultfd: do not access vma->vm_mm after calling handle_userfault()
    x86/microcode/intel: Check patch signature before saving microcode for early loading
  * seccomp: Set PF_SUPERPRIV when checking capability
      kernel/seccomp.c
  * ptrace: Set PF_SUPERPRIV when checking capability
      kernel/ptrace.c
    s390/dasd: fix null pointer dereference for ERP requests
    s390/cpum_sf.c: fix file permission for cpum_sfb_size
    mac80211: free sta in sta_info_insert_finish() on errors
    mac80211: minstrel: fix tx status processing corner case
    mac80211: minstrel: remove deferred sampling code
    xtensa: disable preemption around cache alias management calls
  * regulator: workaround self-referent regulators
      drivers/regulator/core.c
  * regulator: avoid resolve_supply() infinite recursion
      drivers/regulator/core.c
  * regulator: fix memory leak with repeated set_machine_constraints()
      drivers/regulator/core.c
    regulator: pfuze100: limit pfuze-support-disable-sw to pfuze{100,200}
    iio: accel: kxcjk1013: Add support for KIOX010A ACPI DSM for setting tablet-mode
    iio: accel: kxcjk1013: Replace is_smo8500_device with an acpi_type enum
  * ext4: fix bogus warning in ext4_update_dx_flag()
      fs/ext4/ext4.h
    staging: rtl8723bs: Add 024c:0627 to the list of SDIO device-ids
    efivarfs: fix memory leak in efivarfs_create()
    tty: serial: imx: keep console clocks always on
    ALSA: hda/realtek: Add some Clove SSID in the ALC293(ALC1220)
    ALSA: mixart: Fix mutex deadlock
  * ALSA: ctl: fix error path at adding user-defined element set
      sound/core/control.c
  * ALSA: usb-audio: Add delay quirk for all Logitech USB devices
      sound/usb/quirks.c
    ALSA: firewire: Clean up a locking issue in copy_resp_to_buf()
    speakup: Do not let the line discipline be used several times
  * libfs: fix error cast of negative value in simple_attr_write()
      fs/libfs.c
    efi/x86: Free efi_pgd with free_pages()
    xfs: revert "xfs: fix rmap key and record comparison functions"
    fail_function: Remove a redundant mutex unlock
    regulator: ti-abb: Fix array out of bound read access on the first transition
    xfs: strengthen rmap record flags checking
    xfs: fix the minrecs logic when dealing with inode root child blocks
    can: kvaser_usb: kvaser_usb_hydra: Fix KCAN bittiming limits
    drm/sun4i: dw-hdmi: fix error return code in sun8i_dw_hdmi_bind()
    MIPS: Alchemy: Fix memleak in alchemy_clk_setup_cpu
    ASoC: qcom: lpass-platform: Fix memory leak
    can: m_can: m_can_handle_state_change(): fix state change
    can: peak_usb: fix potential integer overflow on shift of a int
    can: mcba_usb: mcba_usb_start_xmit(): first fill skb, then pass to can_put_echo_skb()
    can: ti_hecc: Fix memleak in ti_hecc_probe
    can: dev: can_restart(): post buffer from the right context
    can: af_can: prevent potential access of uninitialized member in canfd_rcv()
    can: af_can: prevent potential access of uninitialized member in can_rcv()
  * ip_tunnels: Set tunnel option flag when tunnel metadata is present
      include/net/ip_tunnels.h
    perf lock: Don't free "lock_seq_stat" if read_count isn't zero
  * Input: resistive-adc-touch - fix kconfig dependency on IIO_BUFFER
      drivers/input/touchscreen/Kconfig
    ARM: dts: imx50-evk: Fix the chip select 1 IOMUX
    arm: dts: imx6qdl-udoo: fix rgmii phy-mode for ksz9031 phy
    arm64: dts: allwinner: h5: OrangePi Prime: Fix ethernet node
    MIPS: export has_transparent_hugepage() for modules
    Input: adxl34x - clean up a data type in adxl34x_probe()
    arm64: dts: allwinner: a64: bananapi-m64: Enable RGMII RX/TX delay on PHY
    ARM: dts: sun8i: a83t: Enable both RGMII RX/TX delay on Ethernet PHY
    ARM: dts: sun8i: h3: orangepi-plus2e: Enable RGMII RX/TX delay on Ethernet PHY
    Revert "arm: sun8i: orangepi-pc-plus: Set EMAC activity LEDs to active high"
    ARM: dts: sun8i: r40: bananapi-m2-ultra: Fix ethernet node
    arm64: dts: allwinner: h5: OrangePi PC2: Fix ethernet node
    arm64: dts: allwinner: a64: Pine64 Plus: Fix ethernet node
  * vfs: remove lockdep bogosity in __sb_start_write
      fs/super.c
  * arm64: psci: Avoid printing in cpu_psci_cpu_die()
      arch/arm64/kernel/psci.c
    ACPI: button: Add DMI quirk for Medion Akoya E2228T
    selftests: kvm: Fix the segment descriptor layout to match the actual layout
  * scsi: ufs: Fix unbalanced scsi_block_reqs_cnt caused by ufshcd_hold()
      drivers/scsi/ufs/ufshcd.c
    pinctrl: rockchip: enable gpio pclk for rockchip_gpio_to_irq
    net: ftgmac100: Fix crash when removing driver
    net/ncsi: Fix netlink registration
    net: usb: qmi_wwan: Set DTR quirk for MR400
    net/mlx5: Disable QoS when min_rates on all VFs are zero
    tcp: only postpone PROBE_RTT if RTT is < current min_rtt estimate
  * sctp: change to hold/put transport for proto_unreach_timer
      net/sctp/input.c
      net/sctp/sm_sideeffect.c
      net/sctp/transport.c
    qlcnic: fix error return code in qlcnic_83xx_restart_hw()
    qed: fix error return code in qed_iwarp_ll2_start()
  * page_frag: Recover from memory pressure
      mm/page_alloc.c
    net: x25: Increase refcnt of "struct x25_neigh" in x25_rx_call_request
  * net: qualcomm: rmnet: Fix incorrect receive packet handling during cleanup
      drivers/net/ethernet/qualcomm/rmnet/rmnet_handlers.c
    net/mlx4_core: Fix init_hca fields offset
  * netlabel: fix an uninitialized warning in netlbl_unlabel_staticlist()
      net/netlabel/netlabel_unlabeled.c
  * netlabel: fix our progress tracking in netlbl_unlabel_staticlist()
      net/netlabel/netlabel_unlabeled.c
    net: Have netpoll bring-up DSA management interface
    net: dsa: mv88e6xxx: Avoid VTU corruption on 6097
  * net: bridge: add missing counters to ndo_get_stats64 callback
      net/bridge/br_device.c
    net: b44: fix error return code in b44_init_one()
    mlxsw: core: Use variable timeout for EMAD retries
    lan743x: prevent entire kernel HANG on open, for some platforms
    lan743x: fix issue causing intermittent kernel log warnings
  * inet_diag: Fix error path to cancel the meseage in inet_req_diag_fill()
      net/ipv4/inet_diag.c
    devlink: Add missing genlmsg_cancel() in devlink_nl_sb_port_pool_fill()
    bnxt_en: read EEPROM A2h address using page 0
    atm: nicstar: Unmap DMA on send error
  * ah6: fix error return code in ah6_input()
      net/ipv6/ah6.c
    Merge 4.19.159 into android-4.19-stable
Linux 4.19.159
    ACPI: GED: fix -Wformat
    KVM: x86: clflushopt should be treated as a no-op by emulation
    can: proc: can_remove_proc(): silence remove_proc_entry warning
    mac80211: always wind down STA state
    Input: sunkbd - avoid use-after-free in teardown paths
    powerpc/8xx: Always fault when _PAGE_ACCESSED is not set
    Revert "perf cs-etm: Move definition of 'traceid_list' global variable from header file"
    powerpc/64s: flush L1D after user accesses
    powerpc/uaccess: Evaluate macro arguments once, before user access is allowed
    powerpc: Fix __clear_user() with KUAP enabled
    powerpc: Implement user_access_begin and friends
    powerpc: Add a framework for user access tracking
    powerpc/64s: flush L1D on kernel entry
    powerpc/64s: move some exception handlers out of line
    ANDROID: GKI: Update ABI for incfs and dm-user
    Revert "ANDROID: Add dependencies of dm-user.ko"
  * ANDROID: Incremental fs: Add zstd compression support
      fs/incfs/Kconfig
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/format.h
      include/uapi/linux/incrementalfs.h
  * ANDROID: Incremental fs: Small improvements
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/format.c
      fs/incfs/format.h
      fs/incfs/pseudo_files.c
      fs/incfs/vfs.c
  * ANDROID: Incremental fs: Initialize mount options correctly
      fs/incfs/vfs.c
    ANDROID: Incremental fs: Fix read_log_test which failed sporadically
  * ANDROID: Incremental fs: Fix misuse of cpu_to_leXX and poll return
      fs/incfs/format.c
      fs/incfs/pseudo_files.c
  * ANDROID: Incremental fs: Add per UID read timeouts
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/pseudo_files.c
      fs/incfs/vfs.c
      include/uapi/linux/incrementalfs.h
  * ANDROID: Incremental fs: Add .incomplete folder
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/pseudo_files.c
      fs/incfs/vfs.c
  * ANDROID: Incremental fs: Fix dangling else
      fs/incfs/data_mgmt.c
  * ANDROID: Incremental fs: Fix uninitialized variable
      fs/incfs/vfs.c
  * ANDROID: Incremental fs: Fix filled block count from get filled blocks
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/format.c
      fs/incfs/format.h
      fs/incfs/pseudo_files.c
      fs/incfs/vfs.c
      fs/incfs/vfs.h
  * ANDROID: Incremental fs: Add hash block counts to IOC_IOCTL_GET_BLOCK_COUNT
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/format.c
      fs/incfs/format.h
      fs/incfs/vfs.c
      include/uapi/linux/incrementalfs.h
  * ANDROID: Incremental fs: Add INCFS_IOC_GET_BLOCK_COUNT
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/format.c
      fs/incfs/format.h
      fs/incfs/vfs.c
      include/uapi/linux/incrementalfs.h
  * ANDROID: Incremental fs: Make compatible with existing files
      fs/incfs/format.c
      fs/incfs/format.h
  * ANDROID: Incremental fs: Remove block HASH flag
      fs/incfs/format.c
      fs/incfs/format.h
  * ANDROID: Incremental fs: Remove back links and crcs
      fs/incfs/format.c
      fs/incfs/format.h
  * ANDROID: Incremental fs: Remove attributes from file
      fs/incfs/data_mgmt.c
      fs/incfs/format.c
      fs/incfs/format.h
      fs/incfs/pseudo_files.c
  * ANDROID: Incremental fs: Add .blocks_written file
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/pseudo_files.c
      fs/incfs/pseudo_files.h
      include/uapi/linux/incrementalfs.h
  * ANDROID: Incremental fs: Separate pseudo-file code
      fs/incfs/Makefile
      fs/incfs/pseudo_files.c
      fs/incfs/pseudo_files.h
      fs/incfs/vfs.c
      fs/incfs/vfs.h
  * ANDROID: Incremental fs: Add UID to pending_read
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/main.c
      fs/incfs/vfs.c
      include/uapi/linux/incrementalfs.h
  * ANDROID: Incremental fs: Create mapped file
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/format.c
      fs/incfs/format.h
      fs/incfs/vfs.c
      include/uapi/linux/incrementalfs.h
  * ANDROID: Incremental fs: Don't allow renaming .index directory.
      fs/incfs/vfs.c
  * ANDROID: Incremental fs: Fix incfs to work on virtio-9p
      fs/incfs/format.c
      fs/incfs/vfs.c
    ANDROID: Incremental fs: Allow running a single test
    ANDROID: Incremental fs: Adding perf test
    ANDROID: Incremental fs: Stress tool
  * ANDROID: Incremental fs: Use R/W locks to read/write segment blockmap.
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/vfs.c
  * ANDROID: Incremental fs: Remove unnecessary dependencies
      fs/incfs/Kconfig
  * ANDROID: Incremental fs: Remove annoying pr_debugs
      fs/incfs/data_mgmt.c
  * ANDROID: Incremental fs: dentry_revalidate should not return -EBADF.
      fs/incfs/vfs.c
  * ANDROID: Incremental fs: Fix minor bugs
      fs/incfs/data_mgmt.c
      fs/incfs/vfs.c
  * ANDROID: Incremental fs: RCU locks instead of mutex for pending_reads.
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
  * ANDROID: Incremental fs: fix up attempt to copy structures with READ/WRITE_ONCE
      fs/incfs/vfs.c
    Merge 4.19.158 into android-4.19-stable
    Revert "ANDROID: clang: update to 11.0.5"
Linux 4.19.158
    Convert trailing spaces and periods in path components
  * net: sch_generic: fix the missing new qdisc assignment bug
      net/sched/sch_generic.c
  * reboot: fix overflow parsing reboot cpu number
      kernel/reboot.c
  * Revert "kernel/reboot.c: convert simple_strtoul to kstrtoint"
      kernel/reboot.c
  * perf/core: Fix race in the perf_mmap_close() function
      kernel/events/core.c
    perf scripting python: Avoid declaring function pointers with a visibility attribute
    x86/speculation: Allow IBPB to be conditionally enabled on CPUs with always-on STIBP
  * random32: make prandom_u32() output unpredictable
      drivers/char/random.c
      include/linux/prandom.h
      kernel/time/timer.c
      lib/random32.c
    r8169: fix potential skb double free in an error path
    vrf: Fix fast path output packet handling with async Netfilter rules
  * tipc: fix memory leak in tipc_topsrv_start()
      net/tipc/topsrv.c
    net/x25: Fix null-ptr-deref in x25_connect
  * net: Update window_clamp if SOCK_RCVBUF is set
      net/ipv4/syncookies.c
      net/ipv6/syncookies.c
    net/af_iucv: fix null pointer dereference on shutdown
  * IPv6: Set SIT tunnel hard_header_len to zero
      net/ipv6/sit.c
  * swiotlb: fix "x86: Don't panic if can not alloc buffer for swiotlb"
      kernel/dma/swiotlb.c
    erofs: derive atime instead of leaving it empty
    pinctrl: amd: fix incorrect way to disable debounce filter
    pinctrl: amd: use higher precision for 512 RtcClk
    drm/gma500: Fix out-of-bounds access to struct drm_device.vblank[]
  * don't dump the threads that had been already exiting when zapped.
      kernel/exit.c
    mmc: renesas_sdhi_core: Add missing tmio_mmc_host_free() at remove
    gpio: pcie-idio-24: Enable PEX8311 interrupts
    gpio: pcie-idio-24: Fix IRQ Enable Register value
    gpio: pcie-idio-24: Fix irq mask when masking
    selinux: Fix error return code in sel_ib_pkey_sid_slow()
    btrfs: fix potential overflow in cluster_pages_for_defrag on 32bit arch
    ocfs2: initialize ip_next_orphan
  * futex: Don't enable IRQs unconditionally in put_pi_state()
      kernel/futex.c
    mei: protect mei_cl_mtu from null dereference
    xhci: hisilicon: fix refercence leak in xhci_histb_probe
    usb: cdc-acm: Add DISABLE_ECHO for Renesas USB Download mode
  * uio: Fix use-after-free in uio_unregister_device()
      drivers/uio/uio.c
    thunderbolt: Add the missed ida_simple_remove() in ring_request_msix()
    thunderbolt: Fix memory leak if ida_simple_get() fails in enumerate_services()
    btrfs: dev-replace: fail mount if we don't have replace item with target device
    btrfs: ref-verify: fix memory leak in btrfs_ref_tree_mod
  * ext4: unlock xattr_sem properly in ext4_inline_data_truncate()
      fs/ext4/inline.c
  * ext4: correctly report "not supported" for {usr,grp}jquota when !CONFIG_QUOTA
      fs/ext4/super.c
  * perf: Fix get_recursion_context()
      kernel/events/internal.h
    cosa: Add missing kfree in error path of cosa_write
  * of/address: Fix of_node memory leak in of_dma_is_coherent
      drivers/of/address.c
    xfs: fix a missing unlock on error in xfs_fs_map_blocks
    lan743x: fix "BUG: invalid wait context" when setting rx mode
    xfs: fix brainos in the refcount scrubber's rmap fragment processor
    xfs: fix rmap key and record comparison functions
    xfs: set the unwritten bit in rmap lookup flags in xchk_bmap_get_rmapextents
    xfs: fix flags argument to rmap lookup when converting shared file rmaps
    nbd: fix a block_device refcount leak in nbd_release
    pinctrl: aspeed: Fix GPI only function problem.
    ARM: 9019/1: kprobes: Avoid fortify_panic() when copying optprobe template
    pinctrl: intel: Set default bias in case no particular value given
    mfd: sprd: Add wakeup capability for PMIC IRQ
  * tick/common: Touch watchdog in tick_unfreeze() on all CPUs
      kernel/time/tick-common.c
    tpm_tis: Disable interrupts on ThinkPad T490s
    selftests: proc: fix warning: _GNU_SOURCE redefined
    vfio: platform: fix reference leak in vfio_platform_open
    s390/smp: move rcu_cpu_starting() earlier
    iommu/amd: Increase interrupt remapping table limit to 512 entries
    scsi: scsi_dh_alua: Avoid crash during alua_bus_detach()
  * cfg80211: regulatory: Fix inconsistent format argument
      net/wireless/reg.c
    mac80211: fix use of skb payload instead of header
    drm/amd/pm: do not use ixFEATURE_STATUS for checking smc running
    drm/amd/pm: perform SMC reset on suspend/hibernation
    drm/amdgpu: perform srbm soft reset always on SDMA resume
    scsi: hpsa: Fix memory leak in hpsa_init_one()
    gfs2: check for live vs. read-only file system in gfs2_fitrim
    gfs2: Add missing truncate_inode_pages_final for sd_aspace
    gfs2: Free rd_bits later in gfs2_clear_rgrpd to fix use-after-free
    usb: gadget: goku_udc: fix potential crashes in probe
  * crypto: arm64/aes-modes - get rid of literal load of addend vector
      arch/arm64/crypto/aes-modes.S
  * netfilter: use actual socket sk rather than skb sk when routing harder
      include/linux/netfilter_ipv4.h
      include/linux/netfilter_ipv6.h
      net/ipv4/netfilter.c
      net/ipv4/netfilter/iptable_mangle.c
      net/ipv4/netfilter/nf_nat_l3proto_ipv4.c
      net/ipv4/netfilter/nf_reject_ipv4.c
      net/ipv6/netfilter.c
      net/ipv6/netfilter/ip6table_mangle.c
    ath9k_htc: Use appropriate rs_datalen type
    Btrfs: fix missing error return if writeback for extent buffer never started
    tpm: efi: Don't create binary_bios_measurements file for an empty log
    xfs: fix scrub flagging rtinherit even if there is no rt device
    xfs: flush new eof page on truncate to avoid post-eof corruption
    can: flexcan: remove FLEXCAN_QUIRK_DISABLE_MECR quirk for LS1021A
    can: peak_canfd: pucan_handle_can_rx(): fix echo management when loopback is on
    can: peak_usb: peak_usb_get_ts_time(): fix timestamp wrapping
    can: peak_usb: add range checking in decode operations
  * can: can_create_echo_skb(): fix echo skb generation: always use skb_clone()
      include/linux/can/skb.h
    can: dev: __can_get_echo_skb(): fix real payload length return value for RTR frames
    can: dev: can_get_echo_skb(): prevent call to kfree_skb() in hard IRQ context
    can: rx-offload: don't call kfree_skb() from IRQ context
    ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link()
    perf tools: Add missing swap for ino_generation
    netfilter: ipset: Update byte and packet counters regardless of whether they match
    xfs: set xefi_discard when creating a deferred agfl free log intent item
  * net: xfrm: fix a race condition during allocing spi
      net/xfrm/xfrm_state.c
    hv_balloon: disable warning when floor reached
  * genirq: Let GENERIC_IRQ_IPI select IRQ_DOMAIN_HIERARCHY
      kernel/irq/Kconfig
    btrfs: reschedule when cloning lots of extents
    btrfs: sysfs: init devices outside of the chunk_mutex
  * usb: dwc3: gadget: Reclaim extra TRBs after request completion
      drivers/usb/dwc3/gadget.c
  * usb: dwc3: gadget: Continue to process pending requests
      drivers/usb/dwc3/gadget.c
    nbd: don't update block size after device is started
  * time: Prevent undefined behaviour in timespec64_to_ns()
      include/linux/time64.h
      kernel/time/itimer.c
  * regulator: defer probe when trying to get voltage from unresolved supply
      drivers/regulator/core.c
  * FROMGIT: Input: Add devices for HID_QUIRK_INCREMENT_USAGE_ON_DUPLICATE
      drivers/hid/hid-ids.h
      drivers/hid/hid-quirks.c
  * ANDROID: arm64: Fix off-by-one vdso trampoline return value
      arch/arm64/include/asm/vdso.h
    ANDROID: Add dependencies of dm-user.ko
  * UPSTREAM: arm64: vdso: Add -fasynchronous-unwind-tables to cflags
      arch/arm64/kernel/vdso/Makefile
  * UPSTREAM: of: property: Fix create device links for all child-supplier dependencies
      drivers/of/property.c
  * UPSTREAM: of: property: Do not link to disabled devices
      drivers/of/property.c
  * UPSTREAM: drm: Fix doc warning in drm_connector_attach_edid_property()
      drivers/gpu/drm/drm_connector.c
  * UPSTREAM: selinux: fix non-MLS handling in mls_context_to_sid()
      security/selinux/ss/mls.c
  * UPSTREAM: drm/prime: Fix drm_gem_prime_mmap() stack use
      drivers/gpu/drm/drm_prime.c
  * UPSTREAM: crypto: chacha-generic - fix use as arm64 no-NEON fallback
      crypto/chacha_generic.c
    UPSTREAM: slab: store tagged freelist for off-slab slabmgmt
    UPSTREAM: parisc: Switch from DISCONTIGMEM to SPARSEMEM
  * UPSTREAM: cgroup: Move cgroup_parse_float() implementation out of CONFIG_SYSFS
      kernel/cgroup/cgroup.c
  * UPSTREAM: fork: don't check parent_tidptr with CLONE_PIDFD
      kernel/fork.c
  * UPSTREAM: vdso: Remove superfluous #ifdef __KERNEL__ in vdso/datapage.h
      include/vdso/datapage.h
  * UPSTREAM: arm64: compat: No need for pre-ARMv7 barriers on an ARMv8 system
      arch/arm64/include/asm/vdso/compat_barrier.h
  * UPSTREAM: timekeeping/vsyscall: Use __iter_div_u64_rem()
      kernel/time/vsyscall.c
  * UPSTREAM: kasan: remove clang version check for KASAN_STACK
      lib/Kconfig.kasan
  * UPSTREAM: page flags: prioritize kasan bits over last-cpuid
      include/linux/page-flags-layout.h
  * UPSTREAM: timekeeping/vsyscall: Prevent math overflow in BOOTTIME update
      include/linux/timekeeper_internal.h
      kernel/time/timekeeping.c
      kernel/time/vsyscall.c
    UPSTREAM: kcm: disable preemption in kcm_parse_func_strparser()
  * UPSTREAM: cfg80211: validate SSID/MBSSID element ordering assumption
      net/wireless/scan.c
    UPSTREAM: MIPS: VDSO: Fix build for binutils < 2.25
    UPSTREAM: virt_wifi: fix refcnt leak in module exit routine
  * UPSTREAM: sched/topology: Allow sched_asym_cpucapacity to be disabled
      kernel/sched/topology.c
  * UPSTREAM: scripts/tools-support-relr.sh: un-quote variables
      scripts/tools-support-relr.sh
  * UPSTREAM: fork: fix pidfd_poll()'s return type
      kernel/fork.c
    UPSTREAM: virt_wifi: fix use-after-free in virt_wifi_newlink()
  * UPSTREAM: of/platform: Unconditionally pause/resume sync state during kernel init
      drivers/of/platform.c
  * UPSTREAM: selinux: ensure the policy has been loaded before reading the sidtab stats
      security/selinux/ss/services.c
  * UPSTREAM: raid6/test: fix a compilation error
      include/linux/raid/pq.h
    UPSTREAM: PM: hibernate: fix crashes with init_on_free=1
    UPSTREAM: ARM: bcm2835_defconfig: Explicitly restore CONFIG_DEBUG_FS
    UPSTREAM: ARM: socfpga_defconfig: Add back DEBUG_FS
  * UPSTREAM: binderfs: use refcount for binder control devices too
      drivers/android/binderfs.c
    UPSTREAM: um: Fix header inclusion
  * UPSTREAM: PM: sleep: wakeup: Skip wakeup_source_sysfs_remove() if device is not there
      drivers/base/power/wakeup.c
  * UPSTREAM: Input: fix stale timestamp on key autorepeat events
      drivers/input/input.c
  * UPSTREAM: mm/filemap.c: don't bother dropping mmap_sem for zero size readahead
      mm/filemap.c
  * UPSTREAM: arm64: vdso: don't free unallocated pages
      arch/arm64/kernel/vdso.c
  * UPSTREAM: usb: typec: altmode: Fix typec_altmode_get_partner sometimes returning an invalid pointer
      drivers/usb/typec/bus.c
  * UPSTREAM: ipv6: ndisc: RFC-ietf-6man-ra-pref64-09 is now published as RFC8781
      include/net/ndisc.h
    UPSTREAM: s390/setup: init jump labels before command line parsing
  * UPSTREAM: dma-buf: free dmabuf->name in dma_buf_release()
      drivers/dma-buf/dma-buf.c
  * UPSTREAM: driver core: Don't do deferred probe in parallel with kernel_init thread
      drivers/base/base.h
      drivers/base/core.c
      drivers/base/dd.c
  * UPSTREAM: fscrypt: restrict IV_INO_LBLK_* to AES-256-XTS
      fs/crypto/policy.c
  * UPSTREAM: fscrypt: use smp_load_acquire() for fscrypt_prepared_key
      fs/crypto/fscrypt_private.h
      fs/crypto/inline_crypt.c
      fs/crypto/keysetup.c
  * UPSTREAM: mm/page_alloc: silence a KASAN false positive
      mm/page_alloc.c
  * UPSTREAM: ARM64: vdso32: Install vdso32 from vdso_install
      arch/arm64/Makefile
      arch/arm64/kernel/vdso32/Makefile
  * UPSTREAM: fscrypt: restrict IV_INO_LBLK_32 to ino_bits <= 32
      fs/crypto/policy.c
  * UPSTREAM: coresight: tmc: Fix bad register address for CLAIM
      drivers/hwtracing/coresight/coresight-tmc-etf.c
  * UPSTREAM: coresight: etm4x: Fix unused function warning
      drivers/hwtracing/coresight/coresight-etm4x.c
  * UPSTREAM: coresight: etm4x: Fix use-after-free of per-cpu etm drvdata
      drivers/hwtracing/coresight/coresight-etm4x.c
  * UPSTREAM: coresight: etm4x: Fix save/restore during cpu idle
      drivers/hwtracing/coresight/coresight-etm4x.c
      drivers/hwtracing/coresight/coresight-etm4x.h
  * UPSTREAM: coresight: etm4x: Handle unreachable sink in perf mode
      drivers/hwtracing/coresight/coresight-etm-perf.c
  * UPSTREAM: coresight: etm4x: Fix issues on trcseqevr access
      drivers/hwtracing/coresight/coresight-etm4x.c
  * UPSTREAM: coresight: etm: perf: Fix warning caused by etm_setup_aux failure
      drivers/hwtracing/coresight/coresight-etm-perf.c
  * UPSTREAM: coresight: etm4x: Fix save and restore of TRCVMIDCCTLR1 register
      drivers/hwtracing/coresight/coresight-etm4x.c
    Merge 4.19.157 into android-4.19-stable
Linux 4.19.157
    powercap: restrict energy meter to root access
  * Revert "ANDROID: Kbuild, LLVMLinux: allow overriding clang target triple"
      Makefile
      build.config.aarch64
      build.config.allmodconfig
      build.config.arm
      build.config.x86_64
    Merge 4.19.156 into android-4.19-stable
Linux 4.19.156
    arm64: dts: marvell: espressobin: Add ethernet switch aliases
  * net: dsa: read mac address from DT for slave device
      include/net/dsa.h
    tools: perf: Fix build error in v4.19.y
  * perf/core: Fix a memory leak in perf_event_parse_addr_filter()
      kernel/events/core.c
  * PM: runtime: Resume the device earlier in __device_release_driver()
      drivers/base/dd.c
    Revert "ARC: entry: fix potential EFA clobber when TIF_SYSCALL_TRACE"
    ARC: stack unwinding: avoid indefinite looping
    usb: mtu3: fix panic in mtu3_gadget_stop()
  * USB: Add NO_LPM quirk for Kingston flash drive
      drivers/usb/core/quirks.c
    USB: serial: option: add Telit FN980 composition 0x1055
    USB: serial: option: add LE910Cx compositions 0x1203, 0x1230, 0x1231
    USB: serial: option: add Quectel EC200T module support
    USB: serial: cyberjack: fix write-URB completion race
    serial: txx9: add missing platform_driver_unregister() on error in serial_txx9_init
    serial: 8250_mtk: Fix uart_get_baud_rate warning
  * fork: fix copy_process(CLONE_PARENT) race with the exiting ->real_parent
      kernel/fork.c
    vt: Disable KD_FONT_OP_COPY
    ACPI: NFIT: Fix comparison to '-ENXIO'
    drm/vc4: drv: Add error handding for bind
    vsock: use ns_capable_noaudit() on socket create
  * scsi: core: Don't start concurrent async scan on same host
      drivers/scsi/scsi_scan.c
  * blk-cgroup: Pre-allocate tree node on blkg_conf_prep
      block/blk-cgroup.c
  * blk-cgroup: Fix memleak on error path
      block/blk-cgroup.c
  * of: Fix reserved-memory overlap detection
      drivers/of/of_reserved_mem.c
    x86/kexec: Use up-to-dated screen_info copy to fill boot params
    ARM: dts: sun4i-a10: fix cpu_alert temperature
  * futex: Handle transient "ownerless" rtmutex state correctly
      kernel/futex.c
  * tracing: Fix out of bounds write in get_trace_buf
      kernel/trace/trace.c
  * ftrace: Handle tracing when switching between context
      kernel/trace/trace.h
  * ftrace: Fix recursion check for NMI test
      kernel/trace/trace.h
  * ring-buffer: Fix recursion protection transitions between interrupt context
      kernel/trace/ring_buffer.c
    gfs2: Wake up when sd_glock_disposal becomes zero
  * mm: always have io_remap_pfn_range() set pgprot_decrypted()
      include/asm-generic/pgtable.h
      include/linux/mm.h
  * kthread_worker: prevent queuing delayed work from timer_fn when it is being canceled
      kernel/kthread.c
    lib/crc32test: remove extra local_irq_disable/enable
    mm: mempolicy: fix potential pte_unmap_unlock pte error
  * ALSA: usb-audio: Add implicit feedback quirk for MODX
      sound/usb/pcm.c
  * ALSA: usb-audio: Add implicit feedback quirk for Qu-16
      sound/usb/pcm.c
  * ALSA: usb-audio: add usb vendor id as DSD-capable for Khadas devices
      sound/usb/quirks.c
  * ALSA: usb-audio: Add implicit feedback quirk for Zoom UAC-2
      sound/usb/pcm.c
    Fonts: Replace discarded const qualifier
    btrfs: tree-checker: fix the error message for transid error
    btrfs: tree-checker: Verify inode item
    btrfs: tree-checker: Enhance chunk checker to validate chunk profile
    btrfs: tree-checker: Fix wrong check on max devid
    btrfs: tree-checker: Verify dev item
    btrfs: tree-checker: Check chunk item at tree block read time
    btrfs: tree-checker: Make btrfs_check_chunk_valid() return EUCLEAN instead of EIO
    btrfs: tree-checker: Make chunk item checker messages more readable
    btrfs: Move btrfs_check_chunk_valid() to tree-check.[ch] and export it
    btrfs: Don't submit any btree write bio if the fs has errors
    Btrfs: fix unwritten extent buffers and hangs on future writeback attempts
    btrfs: extent_io: add proper error handling to lock_extent_buffer_for_io()
    btrfs: extent_io: Handle errors better in btree_write_cache_pages()
    btrfs: extent_io: Handle errors better in extent_write_full_page()
    btrfs: flush write bio if we loop in extent_write_cache_pages
    Revert "btrfs: flush write bio if we loop in extent_write_cache_pages"
    btrfs: extent_io: Move the BUG_ON() in flush_write_bio() one level up
    btrfs: extent_io: Kill the forward declaration of flush_write_bio
  * blktrace: fix debugfs use after free
      kernel/trace/blktrace.c
    sfp: Fix error handing in sfp_probe()
  * sctp: Fix COMM_LOST/CANT_STR_ASSOC err reporting on big-endian platforms
      net/sctp/sm_sideeffect.c
    net: usb: qmi_wwan: add Telit LE910Cx 0x1230 composition
    gianfar: Account for Tx PTP timestamp in the skb headroom
    gianfar: Replace skb_realloc_headroom with skb_cow_head for PTP
    chelsio/chtls: fix always leaking ctrl_skb
    chelsio/chtls: fix memory leaks caused by a race
    cadence: force nonlinear buffers to be cloned
  * ptrace: fix task_join_group_stop() for the case when current is traced
      kernel/signal.c
  * tipc: fix use-after-free in tipc_bcast_get_mode
      net/tipc/core.c
    drm/i915: Break up error capture compression loops with cond_resched()
  * ANDROID: fuse: Add support for d_canonical_path
      fs/fuse/dev.c
      fs/fuse/dir.c
      fs/fuse/fuse_i.h
      include/uapi/linux/fuse.h
  * ANDROID: vfs: add d_canonical_path for stacked filesystem support
      fs/notify/inotify/inotify_user.c
      include/linux/dcache.h
      include/linux/fsnotify.h
  * ANDROID: Temporarily disable XFRM_USER_COMPAT filtering
      net/xfrm/xfrm_state.c
      net/xfrm/xfrm_user.c
    Merge 4.19.155 into android-4.19-stable
Linux 4.19.155
    staging: octeon: Drop on uncorrectable alignment or FCS error
    staging: octeon: repair "fixed-link" support
    staging: comedi: cb_pcidas: Allow 2-channel commands for AO subdevice
  * KVM: arm64: Fix AArch32 handling of DBGD{CCINT,SCRext} and DBGVCR
      arch/arm64/include/asm/kvm_host.h
  * device property: Don't clear secondary pointer for shared primary firmware node
      drivers/base/core.c
  * device property: Keep secondary firmware node secondary by type
      drivers/base/core.c
    ARM: s3c24xx: fix missing system reset
    ARM: samsung: fix PM debug build with DEBUG_LL but !MMU
    arm: dts: mt7623: add missing pause for switchport
  * hil/parisc: Disable HIL driver when it gets stuck
      include/linux/hil_mlc.h
    cachefiles: Handle readpage error correctly
  * arm64: berlin: Select DW_APB_TIMER_OF
      arch/arm64/Kconfig.platforms
    tty: make FONTX ioctl use the tty pointer they were actually passed
    rtc: rx8010: don't modify the global rtc ops
    drm/ttm: fix eviction valuable range check.
  * ext4: fix invalid inode checksum
      fs/ext4/inode.c
  * ext4: fix error handling code in add_new_gdb
      fs/ext4/resize.c
  * ext4: fix leaking sysfs kobject after failed mount
      fs/ext4/super.c
    vringh: fix __vringh_iov() when riov and wiov are different
  * ring-buffer: Return 0 on success from ring_buffer_resize()
      kernel/trace/ring_buffer.c
    9P: Cast to loff_t before multiplying
    libceph: clear con->out_msg on Policy::stateful_server faults
    ceph: promote to unsigned long long before shifting
    drm/amd/display: Don't invoke kgdb_breakpoint() unconditionally
    drm/amdgpu: don't map BO in reserved region
    i2c: imx: Fix external abort on interrupt in exit paths
    ia64: fix build error with !COREDUMP
    ubi: check kthread_should_stop() after the setting of task state
    perf python scripting: Fix printable strings in python3 scripts
    ubifs: dent: Fix some potential memory leaks while iterating entries
    NFSD: Add missing NFSv2 .pc_func methods
  * NFSv4.2: support EXCHGID4_FLAG_SUPP_FENCE_OPS 4.2 EXCHANGE_ID flag
      include/uapi/linux/nfs4.h
    powerpc: Fix undetected data corruption with P9N DD2.1 VSX CI load emulation
    powerpc/powernv/elog: Fix race while processing OPAL error log event.
    powerpc: Warn about use of smt_snooze_delay
    powerpc/rtas: Restrict RTAS requests from userspace
    s390/stp: add locking to sysfs functions
    powerpc/drmem: Make lmb_size 64 bit
    iio:gyro:itg3200: Fix timestamp alignment and prevent data leak.
    iio:adc:ti-adc12138 Fix alignment issue with timestamp
    iio:adc:ti-adc0832 Fix alignment issue with timestamp
    iio:light:si1145: Fix timestamp alignment and prevent data leak.
    dmaengine: dma-jz4780: Fix race in jz4780_dma_tx_status
    udf: Fix memory leak when mounting
    HID: wacom: Avoid entering wacom_wac_pen_report for pad / battery
    vt: keyboard, extend func_buf_lock to readers
    vt: keyboard, simplify vt_kdgkbsent
    drm/i915: Force VT'd workarounds when running as a guest OS
    usb: host: fsl-mph-dr-of: check return of dma_set_mask()
    usb: typec: tcpm: reset hard_reset_count for any disconnect
    usb: cdc-acm: fix cooldown mechanism
  * usb: dwc3: core: don't trigger runtime pm when remove driver
      drivers/usb/dwc3/core.c
  * usb: dwc3: core: add phy cleanup for probe error handling
      drivers/usb/dwc3/core.c
  * usb: dwc3: gadget: Check MPS of the request length
      drivers/usb/dwc3/gadget.c
  * usb: dwc3: ep0: Fix ZLP for OUT ep0 requests
      drivers/usb/dwc3/ep0.c
  * usb: xhci: Workaround for S3 issue on AMD SNPS 3.0 xHC
      drivers/usb/host/xhci-pci.c
      drivers/usb/host/xhci.h
    btrfs: fix use-after-free on readahead extent after failure to create it
    btrfs: cleanup cow block on error
    btrfs: use kvzalloc() to allocate clone_roots in btrfs_ioctl_send()
    btrfs: send, recompute reference path after orphanization of a directory
    btrfs: reschedule if necessary when logging directory items
    btrfs: improve device scanning messages
    btrfs: qgroup: fix wrong qgroup metadata reserve for delayed inode
    scsi: qla2xxx: Fix crash on session cleanup with unload
    scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove()
    w1: mxc_w1: Fix timeout resolution problem leading to bus error
    acpi-cpufreq: Honor _PSD table setting on new AMD CPUs
    ACPI: debug: don't allow debugging when ACPI is disabled
    ACPI: video: use ACPI backlight for HP 635 Notebook
    ACPI / extlog: Check for RDMSR failure
    ACPI: button: fix handling lid state changes when input device closed
    NFS: fix nfs_path in case of a rename retry
  * fs: Don't invalidate page buffers in block_write_full_page()
      fs/buffer.c
    media: uvcvideo: Fix uvc_ctrl_fixup_xu_info() not having any effect
    leds: bcm6328, bcm6358: use devres LED registering function
    perf/x86/amd/ibs: Fix raw sample data accumulation
    perf/x86/amd/ibs: Don't include randomized bits in get_ibs_op_count()
    mmc: sdhci-acpi: AMDI0040: Set SDHCI_QUIRK2_PRESET_VALUE_BROKEN
    md/raid5: fix oops during stripe resizing
    nvme-rdma: fix crash when connect rejected
  * sgl_alloc_order: fix memory leak
      lib/scatterlist.c
    nbd: make the config put is called before the notifying the waiter
    ARM: dts: s5pv210: remove dedicated 'audio-subsystem' node
    ARM: dts: s5pv210: move PMU node out of clock controller
    ARM: dts: s5pv210: remove DMA controller bus node name to fix dtschema warnings
    memory: emif: Remove bogus debugfs error handling
    ARM: dts: omap4: Fix sgx clock rate for 4430
    arm64: dts: renesas: ulcb: add full-pwr-cycle-in-suspend into eMMC nodes
    cifs: handle -EINTR in cifs_setattr
    gfs2: add validation checks for size of superblock
  * ext4: Detect already used quota file early
      fs/ext4/super.c
    drivers: watchdog: rdc321x_wdt: Fix race condition bugs
    net: 9p: initialize sun_server.sun_path to have addr's value only when addr is valid
    clk: ti: clockdomain: fix static checker warning
  * rpmsg: glink: Use complete_all for open states
      drivers/rpmsg/qcom_glink_native.c
    bnxt_en: Log unknown link speed appropriately.
    md/bitmap: md_bitmap_get_counter returns wrong blocks
    btrfs: fix replace of seed device
    drm/amd/display: HDMI remote sink need mode validation for Linux
    power: supply: test_power: add missing newlines when printing parameters by sysfs
    bus/fsl_mc: Do not rely on caller to provide non NULL mc_io
    drivers/net/wan/hdlc_fr: Correctly handle special skb->protocol values
    ACPI: Add out of bounds and numa_off protections to pxm_to_node()
    xfs: don't free rt blocks when we're doing a REMAP bunmapi call
  * arm64/mm: return cpu_all_mask when node is NUMA_NO_NODE
      arch/arm64/include/asm/numa.h
  * usb: xhci: omit duplicate actions when suspending a runtime suspended host.
      drivers/usb/host/xhci.c
  * uio: free uio id after uio file node is freed
      drivers/uio/uio.c
    USB: adutux: fix debugging
    cpufreq: sti-cpufreq: add stih418 support
    riscv: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO
    media: uvcvideo: Fix dereference of out-of-bound list iterator
    kgdb: Make "kgdbcon" work properly with "kgdb_earlycon"
    ia64: kprobes: Use generic kretprobe trampoline handler
  * printk: reduce LOG_BUF_SHIFT range for H8300
      init/Kconfig
  * arm64: topology: Stop using MPIDR for topology information
      arch/arm64/kernel/topology.c
    drm/bridge/synopsys: dsi: add support for non-continuous HS clock
    mmc: via-sdmmc: Fix data race bug
    media: imx274: fix frame interval handling
    media: tw5864: check status of tw5864_frameinterval_get
  * usb: typec: tcpm: During PR_SWAP, source caps should be sent only after tSwapSourceStart
      include/linux/usb/pd.h
    media: platform: Improve queue set up flow for bug fixing
  * media: videodev2.h: RGB BT2020 and HSV are always full range
      include/uapi/linux/videodev2.h
    drm/brige/megachips: Add checking if ge_b850v3_lvds_init() is working correctly
    ath10k: fix VHT NSS calculation when STBC is enabled
    ath10k: start recovery process when payload length exceeds max htc length for sdio
    video: fbdev: pvr2fb: initialize variables
    xfs: fix realtime bitmap/summary file truncation when growing rt volume
    power: supply: bq27xxx: report "not charging" on all types
    ARM: 8997/2: hw_breakpoint: Handle inexact watchpoint addresses
    um: change sigio_spinlock to a mutex
  * f2fs: fix to check segment boundary during SIT page readahead
      fs/f2fs/checkpoint.c
  * f2fs: fix uninit-value in f2fs_lookup
      fs/f2fs/dir.c
  * f2fs: add trace exit in exception path
      fs/f2fs/checkpoint.c
    sparc64: remove mm_cpumask clearing to fix kthread_use_mm race
    powerpc: select ARCH_WANT_IRQS_OFF_ACTIVATE_MM
  * mm: fix exec activate_mm vs TLB shootdown and lazy tlb switching race
      arch/Kconfig
      fs/exec.c
    powerpc/powernv/smp: Fix spurious DBG() warning
  * futex: Fix incorrect should_fail_futex() handling
      kernel/futex.c
    ata: sata_nv: Fix retrieving of active qcs
    RDMA/qedr: Fix memory leak in iWARP CM
    mlxsw: core: Fix use-after-free in mlxsw_emad_trans_finish()
    x86/unwind/orc: Fix inactive tasks with stack pointer in %sp on GCC 10 compiled kernels
    xen/events: block rogue events for some time
    xen/events: defer eoi in case of excessive number of events
    xen/events: use a common cpu hotplug hook for event channels
    xen/events: switch user event channels to lateeoi model
    xen/pciback: use lateeoi irq binding
    xen/pvcallsback: use lateeoi irq binding
    xen/scsiback: use lateeoi irq binding
    xen/netback: use lateeoi irq binding
    xen/blkback: use lateeoi irq binding
  * xen/events: add a new "late EOI" evtchn framework
      include/xen/events.h
    xen/events: fix race in evtchn_fifo_unmask()
    xen/events: add a proper barrier to 2-level uevent unmasking
    xen/events: avoid removing an event channel while handling it
    xen/events: don't use chip_data for legacy IRQs
  * Revert "block: ratelimit handle_bad_sector() message"
      block/blk-core.c
  * fscrypt: fix race where ->lookup() marks plaintext dentry as ciphertext
      fs/crypto/fname.c
      fs/crypto/hooks.c
      fs/ext4/ext4.h
      fs/ext4/namei.c
      fs/f2fs/namei.c
      include/linux/fscrypt.h
  * fscrypt: only set dentry_operations on ciphertext dentries
      fs/crypto/hooks.c
  * fs, fscrypt: clear DCACHE_ENCRYPTED_NAME when unaliasing directory
      fs/dcache.c
  * fscrypt: fix race allowing rename() and link() of ciphertext dentries
      fs/crypto/hooks.c
      include/linux/fscrypt.h
  * fscrypt: clean up and improve dentry revalidation
      fs/crypto/crypto.c
      fs/crypto/hooks.c
      include/linux/dcache.h
      include/linux/fscrypt.h
  * fscrypt: return -EXDEV for incompatible rename or link into encrypted dir
      fs/crypto/hooks.c
      fs/crypto/policy.c
      include/linux/fscrypt.h
    ata: sata_rcar: Fix DMA boundary mask
    serial: pl011: Fix lockdep splat when handling magic-sysrq interrupt
  * mtd: lpddr: Fix bad logic in print_drs_error
      include/linux/mtd/pfow.h
    RDMA/addr: Fix race with netevent_callback()/rdma_addr_cancel()
    cxl: Rework error message for incompatible slots
    p54: avoid accessing the data mapped to streaming DMA
    evm: Check size of security.evm before using it
  * bpf: Fix comment for helper bpf_current_task_under_cgroup()
      include/uapi/linux/bpf.h
  * fuse: fix page dereference after free
      fs/fuse/dev.c
    x86/xen: disable Firmware First mode for correctable memory errors
    arch/x86/amd/ibs: Fix re-arming IBS Fetch
    cxgb4: set up filter action after rewrites
    r8169: fix issue with forced threading in combination with shared interrupts
  * tipc: fix memory leak caused by tipc_buf_append()
      net/tipc/msg.c
  * tcp: Prevent low rmem stalls with SO_RCVLOWAT.
      net/ipv4/tcp.c
      net/ipv4/tcp_input.c
    ravb: Fix bit fields checking in ravb_hwtstamp_get()
  * netem: fix zero division in tabledist
      net/sched/sch_netem.c
    mlxsw: core: Fix memory leak on module removal
    gtp: fix an use-before-init in gtp_newlink()
    chelsio/chtls: fix tls record info to user
    chelsio/chtls: fix memory leaks in CPL handlers
    chelsio/chtls: fix deadlock issue
    efivarfs: Replace invalid slashes with exclamation marks in dentries.
    x86/PCI: Fix intel_mid_pci.c build error when ACPI is not enabled
  * arm64: link with -z norelro regardless of CONFIG_RELOCATABLE
      arch/arm64/Makefile
  * arm64: Run ARCH_WORKAROUND_1 enabling code on all CPUs
      arch/arm64/kernel/cpu_errata.c
  * scripts/setlocalversion: make git describe output more reliable
      scripts/setlocalversion
    objtool: Support Clang non-section symbols in ORC generation
    ANDROID: GKI: Enable DEBUG_INFO_DWARF4
  * UPSTREAM: mm/sl[uo]b: export __kmalloc_track(_node)_caller
      mm/slub.c
  * BACKPORT: xfrm/compat: Translate 32-bit user_policy from sockptr
      include/net/xfrm.h
      net/xfrm/xfrm_state.c
  * BACKPORT: xfrm/compat: Add 32=>64-bit messages translator
      include/net/xfrm.h
      net/xfrm/Kconfig
      net/xfrm/xfrm_user.c
  * UPSTREAM: xfrm/compat: Attach xfrm dumps to 64=>32 bit translator
      net/xfrm/xfrm_user.c
  * UPSTREAM: xfrm/compat: Add 64=>32-bit messages translator
      include/net/xfrm.h
      net/xfrm/xfrm_user.c
  * BACKPORT: xfrm: Provide API to register translator module
      include/net/xfrm.h
      net/xfrm/Kconfig
      net/xfrm/Makefile
      net/xfrm/xfrm_state.c
  * ANDROID: Publish uncompressed Image on aarch64
      build.config.aarch64
    FROMLIST: crypto: arm64/poly1305-neon - reorder PAC authentication with SP update
    UPSTREAM: crypto: arm64/chacha - fix chacha_4block_xor_neon() for big endian
    UPSTREAM: crypto: arm64/chacha - fix hchacha_block_neon() for big endian
    Merge 4.19.154 into android-4.19-stable
Linux 4.19.154
  * usb: gadget: f_ncm: allow using NCM in SuperSpeed Plus gadgets.
      drivers/usb/gadget/function/f_ncm.c
    eeprom: at25: set minimum read/write access stride to 1
    USB: cdc-wdm: Make wdm_flush() interruptible and add wdm_fsync().
    usb: cdc-acm: add quirk to blacklist ETAS ES58X devices
    tty: serial: fsl_lpuart: fix lpuart32_poll_get_char
    net: korina: cast KSEG0 address to pointer in kfree
    ath10k: check idx validity in __ath10k_htt_rx_ring_fill_n()
  * scsi: ufs: ufs-qcom: Fix race conditions caused by ufs_qcom_testbus_config()
      drivers/scsi/ufs/ufs-qcom.c
  * usb: core: Solve race condition in anchor cleanup functions
      drivers/usb/core/urb.c
    brcm80211: fix possible memleak in brcmf_proto_msgbuf_attach
    mwifiex: don't call del_timer_sync() on uninitialized timer
    reiserfs: Fix memory leak in reiserfs_parse_options()
    ipvs: Fix uninit-value in do_ip_vs_set_ctl()
    tty: ipwireless: fix error handling
    scsi: qedi: Fix list_del corruption while removing active I/O
    scsi: qedi: Protect active command list to avoid list corruption
    Fix use after free in get_capset_info callback.
    rtl8xxxu: prevent potential memory leak
    brcmsmac: fix memory leak in wlc_phy_attach_lcnphy
    scsi: ibmvfc: Fix error return in ibmvfc_probe()
  * Bluetooth: Only mark socket zapped after unlocking
      net/bluetooth/l2cap_sock.c
  * usb: ohci: Default to per-port over-current protection
      drivers/usb/host/ohci-hcd.c
    xfs: make sure the rt allocator doesn't run off the end
    reiserfs: only call unlock_new_inode() if I_NEW
    misc: rtsx: Fix memory leak in rtsx_pci_probe
    ath9k: hif_usb: fix race condition between usb_get_urb() and usb_kill_anchored_urbs()
    can: flexcan: flexcan_chip_stop(): add error handling and propagate error value
  * usb: dwc3: simple: add support for Hikey 970
      drivers/usb/dwc3/dwc3-of-simple.c
    USB: cdc-acm: handle broken union descriptors
    udf: Avoid accessing uninitialized data on failed inode read
    udf: Limit sparing table size
    usb: gadget: function: printer: fix use-after-free in __lock_acquire
    misc: vop: add round_up(x,4) for vring_size to avoid kernel panic
    mic: vop: copy data to kernel space then write to io memory
  * scsi: target: core: Add CONTROL field for trace events
      include/scsi/scsi_common.h
      include/trace/events/target.h
    scsi: mvumi: Fix error return in mvumi_io_attach()
    PM: hibernate: remove the bogus call to get_gendisk() in software_resume()
    mac80211: handle lack of sband->bitrates in rates
    ip_gre: set dev->hard_header_len and dev->needed_headroom properly
    ntfs: add check for mft record size in superblock
    media: venus: core: Fix runtime PM imbalance in venus_probe
    fs: dlm: fix configfs memory leak
    media: saa7134: avoid a shift overflow
    mmc: sdio: Check for CISTPL_VERS_1 buffer size
    media: uvcvideo: Ensure all probed info is returned to v4l2
    media: media/pci: prevent memory leak in bttv_probe
    media: bdisp: Fix runtime PM imbalance on error
    media: platform: sti: hva: Fix runtime PM imbalance on error
    media: platform: s3c-camif: Fix runtime PM imbalance on error
    media: vsp1: Fix runtime PM imbalance on error
    media: exynos4-is: Fix a reference count leak
    media: exynos4-is: Fix a reference count leak due to pm_runtime_get_sync
    media: exynos4-is: Fix several reference count leaks due to pm_runtime_get_sync
    media: sti: Fix reference count leaks
    media: st-delta: Fix reference count leak in delta_run_work
    media: ati_remote: sanity check for both endpoints
    media: firewire: fix memory leak
    crypto: ccp - fix error handling
  * block: ratelimit handle_bad_sector() message
      block/blk-core.c
    i2c: core: Restore acpi_walk_dep_device_list() getting called after registering the ACPI i2c devs
  * perf: correct SNOOPX field offset
      include/uapi/linux/perf_event.h
  * sched/features: Fix !CONFIG_JUMP_LABEL case
      kernel/sched/core.c
      kernel/sched/sched.h
    NTB: hw: amd: fix an issue about leak system resources
    nvmet: fix uninitialized work for zero kato
    powerpc/powernv/dump: Fix race while processing OPAL dump
    arm64: dts: zynqmp: Remove additional compatible string for i2c IPs
    ARM: dts: owl-s500: Fix incorrect PPI interrupt specifiers
    arm64: dts: qcom: msm8916: Fix MDP/DSI interrupts
    arm64: dts: qcom: pm8916: Remove invalid reg size from wcd_codec
    memory: fsl-corenet-cf: Fix handling of platform_get_irq() error
    memory: omap-gpmc: Fix build error without CONFIG_OF
    memory: omap-gpmc: Fix a couple off by ones
    ARM: dts: sun8i: r40: bananapi-m2-ultra: Fix dcdc1 regulator
    ARM: dts: imx6sl: fix rng node
    netfilter: nf_fwd_netdev: clear timestamp in forwarding path
  * netfilter: conntrack: connection timeout after re-register
      net/netfilter/nf_conntrack_proto_tcp.c
    KVM: x86: emulating RDPID failure shall return #UD rather than #GP
    Input: sun4i-ps2 - fix handling of platform_get_irq() error
    Input: twl4030_keypad - fix handling of platform_get_irq() error
    Input: omap4-keypad - fix handling of platform_get_irq() error
    Input: ep93xx_keypad - fix handling of platform_get_irq() error
    Input: stmfts - fix a & vs && typo
    Input: imx6ul_tsc - clean up some errors in imx6ul_tsc_resume()
    SUNRPC: fix copying of multiple pages in gss_read_proxy_verf()
    vfio iommu type1: Fix memory leak in vfio_iommu_type1_pin_pages
    vfio/pci: Clear token on bypass registration failure
  * ext4: limit entries returned when counting fsmap records
      fs/ext4/fsmap.c
    svcrdma: fix bounce buffers for unaligned offsets and multiple pages
    watchdog: sp5100: Fix definition of EFCH_PM_DECODEEN3
  * watchdog: Use put_device on error
      drivers/watchdog/watchdog_dev.c
  * watchdog: Fix memleak in watchdog_cdev_register
      drivers/watchdog/watchdog_dev.c
    clk: bcm2835: add missing release if devm_clk_hw_register fails
    clk: at91: clk-main: update key before writing AT91_CKGR_MOR
    clk: rockchip: Initialize hw to error to avoid undefined behavior
    pwm: img: Fix null pointer access in probe
    rpmsg: smd: Fix a kobj leak in in qcom_smd_parse_edge()
    PCI: iproc: Set affinity mask on MSI interrupts
  * i2c: rcar: Auto select RESET_CONTROLLER
      drivers/i2c/busses/Kconfig
  * mailbox: avoid timer start from callback
      drivers/mailbox/mailbox.c
    rapidio: fix the missed put_device() for rio_mport_add_riodev
    rapidio: fix error handling path
    ramfs: fix nommu mmap with gaps in the page cache
  * lib/crc32.c: fix trivial typo in preprocessor condition
      lib/crc32.c
  * f2fs: wait for sysfs kobject removal before freeing f2fs_sb_info
      fs/f2fs/sysfs.c
    IB/rdmavt: Fix sizeof mismatch
    cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_reboot_notifier
    powerpc/perf/hv-gpci: Fix starting index value
    powerpc/perf: Exclude pmc5/6 from the irrelevant PMU group constraints
  * overflow: Include header file with SIZE_MAX declaration
      include/linux/overflow.h
    kdb: Fix pager search for multi-line strings
    RDMA/hns: Fix missing sq_sig_type when querying QP
    RDMA/hns: Set the unsupported wr opcode
    perf intel-pt: Fix "context_switch event has no tid" error
    RDMA/cma: Consolidate the destruction of a cma_multicast in one place
    RDMA/cma: Remove dead code for kernel rdmacm multicast
    powerpc/64s/radix: Fix mm_cpumask trimming race vs kthread_use_mm
    powerpc/tau: Disable TAU between measurements
    powerpc/tau: Check processor type before enabling TAU interrupt
    ANDROID: GKI: update the ABI xml
    Merge 4.19.153 into android-4.19-stable
Linux 4.19.153
    powerpc/tau: Remove duplicated set_thresholds() call
    powerpc/tau: Convert from timer to workqueue
    powerpc/tau: Use appropriate temperature sample interval
    RDMA/qedr: Fix inline size returned for iWARP
    RDMA/qedr: Fix use of uninitialized field
    xfs: fix high key handling in the rt allocator's query_range function
    xfs: limit entries returned when counting fsmap records
    arc: plat-hsdk: fix kconfig dependency warning when !RESET_CONTROLLER
    ARM: 9007/1: l2c: fix prefetch bits init in L2X0_AUX_CTRL using DT values
    mtd: mtdoops: Don't write panic data twice
    powerpc/pseries: explicitly reschedule during drmem_lmb list traversal
    mtd: lpddr: fix excessive stack usage with clang
    RDMA/ucma: Add missing locking around rdma_leave_multicast()
    RDMA/ucma: Fix locking for ctx->events_reported
    powerpc/icp-hv: Fix missing of_node_put() in success path
    powerpc/pseries: Fix missing of_node_put() in rng_init()
    IB/mlx4: Adjust delayed work when a dup is observed
    IB/mlx4: Fix starvation in paravirt mux/demux
  * mm, oom_adj: don't loop through tasks in __set_oom_adj when not necessary
      fs/proc/base.c
      include/linux/oom.h
      include/linux/sched/coredump.h
      kernel/fork.c
      mm/oom_kill.c
  * mm/memcg: fix device private memcg accounting
      mm/memcontrol.c
  * netfilter: nf_log: missing vlan offload tag and proto
      include/net/netfilter/nf_log.h
      net/ipv4/netfilter/nf_log_ipv4.c
      net/ipv6/netfilter/nf_log_ipv6.c
      net/netfilter/nf_log_common.c
    net: korina: fix kfree of rx/tx descriptor array
    ipvs: clear skb->tstamp in forwarding path
    mwifiex: fix double free
    platform/x86: mlx-platform: Remove PSU EEPROM configuration
    scsi: be2iscsi: Fix a theoretical leak in beiscsi_create_eqs()
    scsi: target: tcmu: Fix warning: 'page' may be used uninitialized
    usb: dwc2: Fix INTR OUT transfers in DDMA mode.
  * nl80211: fix non-split wiphy information
      net/wireless/nl80211.c
  * usb: gadget: u_ether: enable qmult on SuperSpeed Plus as well
      drivers/usb/gadget/function/u_ether.c
  * usb: gadget: f_ncm: fix ncm_bitrate for SuperSpeed and above.
      drivers/usb/gadget/function/f_ncm.c
    iwlwifi: mvm: split a print to avoid a WARNING in ROC
    mfd: sm501: Fix leaks in probe()
    net: enic: Cure the enic api locking trainwreck
    qtnfmac: fix resource leaks on unsupported iftype error return path
  * HID: hid-input: fix stylus battery reporting
      drivers/hid/hid-input.c
    slimbus: qcom-ngd-ctrl: disable ngd in qmi server down callback
    slimbus: core: do not enter to clock pause mode in core
    slimbus: core: check get_addr before removing laddr ida
  * quota: clear padding in v2r1_mem2diskdqb()
      fs/quota/quota_v2.c
    usb: dwc2: Fix parameter type in function pointer prototype
    ALSA: seq: oss: Avoid mutex lock for a long-time ioctl
    misc: mic: scif: Fix error handling path
    ath6kl: wmi: prevent a shift wrapping bug in ath6kl_wmi_delete_pstream_cmd()
    net: dsa: rtl8366rb: Support all 4096 VLANs
    net: dsa: rtl8366: Skip PVID setting if not requested
    net: dsa: rtl8366: Refactor VLAN/PVID init
    net: dsa: rtl8366: Check validity of passed VLANs
    cpufreq: armada-37xx: Add missing MODULE_DEVICE_TABLE
    net: stmmac: use netif_tx_start|stop_all_queues() function
    net/mlx5: Don't call timecounter cyc2time directly from 1PPS flow
    pinctrl: mcp23s08: Fix mcp23x17 precious range
    pinctrl: mcp23s08: Fix mcp23x17_regmap initialiser
    HID: roccat: add bounds checking in kone_sysfs_write_settings()
    video: fbdev: radeon: Fix memleak in radeonfb_pci_register
    video: fbdev: sis: fix null ptr dereference
    video: fbdev: vga16fb: fix setting of pixclock because a pass-by-value error
    drivers/virt/fsl_hypervisor: Fix error handling path
    pwm: lpss: Add range limit check for the base_unit register value
    pwm: lpss: Fix off by one error in base_unit math in pwm_lpss_prepare()
  * pty: do tty_flip_buffer_push without port->lock in pty_write
      drivers/tty/pty.c
    tty: hvcs: Don't NULL tty->driver_data until hvcs_cleanup()
  * tty: serial: earlycon dependency
      drivers/tty/serial/Kconfig
    VMCI: check return value of get_user_pages_fast() for errors
    backlight: sky81452-backlight: Fix refcount imbalance on error
    scsi: csiostor: Fix wrong return value in csio_hw_prep_fw()
    scsi: qla2xxx: Fix wrong return value in qla_nvme_register_hba()
    scsi: qla4xxx: Fix an error handling path in 'qla4xxx_get_host_stats()'
    drm/gma500: fix error check
    staging: rtl8192u: Do not use GFP_KERNEL in atomic context
    mwifiex: Do not use GFP_KERNEL in atomic context
    brcmfmac: check ndev pointer
    ASoC: qcom: lpass-cpu: fix concurrency issue
    ASoC: qcom: lpass-platform: fix memory leak
    wcn36xx: Fix reported 802.11n rx_highest rate wcn3660/wcn3680
    ath10k: Fix the size used in a 'dma_free_coherent()' call in an error handling path
    ath9k: Fix potential out of bounds in ath9k_htc_txcompletion_cb()
    ath6kl: prevent potential array overflow in ath6kl_add_new_sta()
    Bluetooth: hci_uart: Cancel init work before unregistering
    ath10k: provide survey info as accumulated data
    spi: spi-s3c64xx: Check return values
    spi: spi-s3c64xx: swap s3c64xx_spi_set_cs() and s3c64xx_enable_datapath()
  * pinctrl: bcm: fix kconfig dependency warning when !GPIOLIB
      drivers/pinctrl/bcm/Kconfig
  * regulator: resolve supply after creating regulator
      drivers/regulator/core.c
    media: ti-vpe: Fix a missing check and reference count leak
    media: stm32-dcmi: Fix a reference count leak
    media: s5p-mfc: Fix a reference count leak
    media: camss: Fix a reference count leak.
    media: platform: fcp: Fix a reference count leak.
    media: rockchip/rga: Fix a reference count leak.
    media: rcar-vin: Fix a reference count leak.
    media: tc358743: cleanup tc358743_cec_isr
    media: tc358743: initialize variable
    media: mx2_emmaprp: Fix memleak in emmaprp_probe
    cypto: mediatek - fix leaks in mtk_desc_ring_alloc
    hwmon: (pmbus/max34440) Fix status register reads for MAX344{51,60,61}
    crypto: omap-sham - fix digcnt register handling with export/import
    media: omap3isp: Fix memleak in isp_probe
    media: uvcvideo: Silence shift-out-of-bounds warning
    media: uvcvideo: Set media controller entity functions
    media: m5mols: Check function pointer in m5mols_sensor_power
    media: Revert "media: exynos4-is: Add missed check for pinctrl_lookup_state()"
    media: tuner-simple: fix regression in simple_set_radio_freq
    crypto: picoxcell - Fix potential race condition bug
    crypto: ixp4xx - Fix the size used in a 'dma_free_coherent()' call
    crypto: mediatek - Fix wrong return value in mtk_desc_ring_alloc()
    crypto: algif_skcipher - EBUSY on aio should be an error
    x86/events/amd/iommu: Fix sizeof mismatch
    x86/nmi: Fix nmi_handle() duration miscalculation
    drivers/perf: xgene_pmu: Fix uninitialized resource struct
    x86/fpu: Allow multiple bits in clearcpuid= parameter
    EDAC/ti: Fix handling of platform_get_irq() error
    EDAC/i5100: Fix error handling order in i5100_init_one()
    crypto: algif_aead - Do not set MAY_BACKLOG on the async path
    ima: Don't ignore errors from crypto_shash_update()
    KVM: SVM: Initialize prev_ga_tag before use
    KVM: x86/mmu: Commit zap of remaining invalid pages when recovering lpages
    cifs: Return the error from crypt_message when enc/dec key not found.
    cifs: remove bogus debug code
    ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887
  * icmp: randomize the global rate limiter
      net/ipv4/icmp.c
    r8169: fix operation under forced interrupt threading
  * tcp: fix to update snd_wl1 in bulk receiver fast path
      net/ipv4/tcp_input.c
    nfc: Ensure presence of NFC_ATTR_FIRMWARE_NAME attribute in nfc_genl_fw_download()
    net/sched: act_tunnel_key: fix OOB write in case of IPv6 ERSPAN tunnels
    net: hdlc_raw_eth: Clear the IFF_TX_SKB_SHARING flag after calling ether_setup
    net: hdlc: In hdlc_rcv, check to make sure dev is an HDLC device
    chelsio/chtls: correct function return and return type
    chelsio/chtls: correct netdevice for vlan interface
    chelsio/chtls: fix socket lock
    ALSA: bebob: potential info leak in hwdep_read()
  * binder: fix UAF when releasing todo list
      drivers/android/binder.c
    net/tls: sendfile fails with ktls offload
    r8169: fix data corruption issue on RTL8402
  * net/ipv4: always honour route mtu during forwarding
      include/net/ip.h
  * tipc: fix the skb_unshare() in tipc_buf_append()
      net/tipc/msg.c
    net: usb: qmi_wwan: add Cellient MPL200 card
    net/smc: fix valid DMBE buffer sizes
  * net: fix pos incrementment in ipv6_route_seq_next
      net/ipv6/ip6_fib.c
    net: fec: Fix PHY init after phy_reset_after_clk_enable()
    net: fec: Fix phy_device lookup for phy_reset_after_clk_enable()
    mlx4: handle non-napi callers to napi_poll
  * ipv4: Restore flowi4_oif update before call to xfrm_lookup_route
      net/ipv4/route.c
    ibmveth: Identify ingress large send packets.
    ibmveth: Switch order of ibmveth_helper calls.
    ANDROID: clang: update to 11.0.5
  * FROMLIST: arm64: link with -z norelro regardless of CONFIG_RELOCATABLE
      arch/arm64/Makefile
    ANDROID: GKI: enable CONFIG_WIREGUARD
    UPSTREAM: wireguard: peerlookup: take lock before checking hash in replace operation
    UPSTREAM: wireguard: noise: take lock when removing handshake entry from table
    UPSTREAM: wireguard: queueing: make use of ip_tunnel_parse_protocol
  * UPSTREAM: net: ip_tunnel: add header_ops for layer 3 devices
      include/net/ip_tunnels.h
      net/ipv4/ip_tunnel_core.c
    UPSTREAM: wireguard: receive: account for napi_gro_receive never returning GRO_DROP
    UPSTREAM: wireguard: device: avoid circular netns references
    UPSTREAM: wireguard: noise: do not assign initiation time in if condition
    UPSTREAM: wireguard: noise: separate receive counter from send counter
    UPSTREAM: wireguard: queueing: preserve flow hash across packet scrubbing
    UPSTREAM: wireguard: noise: read preshared key while taking lock
    UPSTREAM: wireguard: selftests: use newer iproute2 for gcc-10
    UPSTREAM: wireguard: send/receive: use explicit unlikely branch instead of implicit coalescing
    UPSTREAM: wireguard: selftests: initalize ipv6 members to NULL to squelch clang warning
    UPSTREAM: wireguard: send/receive: cond_resched() when processing worker ringbuffers
    UPSTREAM: wireguard: socket: remove errant restriction on looping to self
    UPSTREAM: wireguard: selftests: use normal kernel stack size on ppc64
    UPSTREAM: wireguard: receive: use tunnel helpers for decapsulating ECN markings
    UPSTREAM: wireguard: queueing: cleanup ptr_ring in error path of packet_queue_init
    UPSTREAM: wireguard: send: remove errant newline from packet_encrypt_worker
    UPSTREAM: wireguard: noise: error out precomputed DH during handshake rather than config
    UPSTREAM: wireguard: receive: remove dead code from default packet type case
    UPSTREAM: wireguard: queueing: account for skb->protocol==0
    UPSTREAM: wireguard: selftests: remove duplicated include <sys/types.h>
    UPSTREAM: wireguard: socket: remove extra call to synchronize_net
    UPSTREAM: wireguard: send: account for mtu=0 devices
    UPSTREAM: wireguard: receive: reset last_under_load to zero
    UPSTREAM: wireguard: selftests: reduce complexity and fix make races
    UPSTREAM: wireguard: device: use icmp_ndo_send helper
    UPSTREAM: wireguard: selftests: tie socket waiting to target pid
    UPSTREAM: wireguard: selftests: ensure non-addition of peers with failed precomputation
    UPSTREAM: wireguard: noise: reject peers with low order public keys
    UPSTREAM: wireguard: allowedips: fix use-after-free in root_remove_peer_lists
  * UPSTREAM: net: skbuff: disambiguate argument and member for skb_list_walk_safe helper
      include/linux/skbuff.h
  * UPSTREAM: net: introduce skb_list_walk_safe for skb segment walking
      include/linux/skbuff.h
    UPSTREAM: wireguard: socket: mark skbs as not on list when receiving via gro
    UPSTREAM: wireguard: queueing: do not account for pfmemalloc when clearing skb header
    UPSTREAM: wireguard: selftests: remove ancient kernel compatibility code
    UPSTREAM: wireguard: allowedips: use kfree_rcu() instead of call_rcu()
    UPSTREAM: wireguard: main: remove unused include <linux/version.h>
  * UPSTREAM: wireguard: global: fix spelling mistakes in comments
      include/uapi/linux/wireguard.h
  * UPSTREAM: wireguard: Kconfig: select parent dependency for crypto
      drivers/net/Kconfig
    UPSTREAM: wireguard: selftests: import harness makefile for test suite
  * UPSTREAM: net: WireGuard secure network tunnel
      drivers/net/Kconfig
      drivers/net/Makefile
      include/uapi/linux/wireguard.h
  * UPSTREAM: timekeeping: Boot should be boottime for coarse ns accessor
      include/linux/timekeeping.h
  * UPSTREAM: timekeeping: Add missing _ns functions for coarse accessors
      include/linux/timekeeping.h
  * UPSTREAM: icmp: introduce helper for nat'd source address in network device context
      include/linux/icmpv6.h
      include/net/icmp.h
      net/ipv4/icmp.c
      net/ipv6/ip6_icmp.c
    UPSTREAM: crypto: poly1305-x86_64 - Use XORL r32,32
    UPSTREAM: crypto: curve25519-x86_64 - Use XORL r32,32
    UPSTREAM: crypto: arm/poly1305 - Add prototype for poly1305_blocks_neon
    UPSTREAM: crypto: arm/curve25519 - include <linux/scatterlist.h>
    UPSTREAM: crypto: x86/curve25519 - Remove unused carry variables
  * UPSTREAM: crypto: x86/chacha-sse3 - use unaligned loads for state array
      include/crypto/chacha.h
  * UPSTREAM: crypto: lib/chacha20poly1305 - Add missing function declaration
      include/crypto/chacha20poly1305.h
    UPSTREAM: crypto: arch/lib - limit simd usage to 4k chunks
    UPSTREAM: crypto: arm[64]/poly1305 - add artifact to .gitignore files
    UPSTREAM: crypto: x86/curve25519 - leave r12 as spare register
    UPSTREAM: crypto: x86/curve25519 - replace with formally verified implementation
    UPSTREAM: crypto: arm64/chacha - correctly walk through blocks
  * UPSTREAM: crypto: x86/curve25519 - support assemblers with no adx support
      include/crypto/curve25519.h
    UPSTREAM: crypto: chacha20poly1305 - prevent integer overflow on large input
  * UPSTREAM: crypto: Kconfig - allow tests to be disabled when manager is disabled
      crypto/Kconfig
    UPSTREAM: crypto: arm/chacha - fix build failured when kernel mode NEON is disabled
    UPSTREAM: crypto: x86/poly1305 - emit does base conversion itself
    UPSTREAM: crypto: chacha20poly1305 - add back missing test vectors and test chunking
    UPSTREAM: crypto: x86/poly1305 - fix .gitignore typo
  * UPSTREAM: crypto: curve25519 - Fix selftest build error
      lib/crypto/Makefile
    UPSTREAM: crypto: {arm,arm64,mips}/poly1305 - remove redundant non-reduction from emit
  * UPSTREAM: crypto: x86/poly1305 - wire up faster implementations for kernel
      lib/crypto/Kconfig
    UPSTREAM: crypto: x86/poly1305 - import unmodified cryptogams implementation
  * UPSTREAM: crypto: poly1305 - add new 32 and 64-bit generic versions
      crypto/poly1305_generic.c
      include/crypto/internal/poly1305.h
      include/crypto/nhpoly1305.h
      include/crypto/poly1305.h
      lib/crypto/Makefile
      lib/crypto/poly1305-donna64.c
      lib/crypto/poly1305.c
  * UPSTREAM: crypto: lib/curve25519 - re-add selftests
      lib/crypto/Makefile
    UPSTREAM: crypto: arm/curve25519 - add arch-specific key generation function
  * UPSTREAM: crypto: chacha - fix warning message in header file
      include/crypto/internal/chacha.h
    UPSTREAM: crypto: arch - conditionalize crypto api in arch glue for lib code
    UPSTREAM: crypto: lib/chacha20poly1305 - use chacha20_crypt()
    UPSTREAM: crypto: x86/chacha - only unregister algorithms if registered
  * UPSTREAM: crypto: chacha_generic - remove unnecessary setkey() functions
      crypto/chacha_generic.c
  * UPSTREAM: crypto: lib/chacha20poly1305 - reimplement crypt_from_sg() routine
      include/crypto/chacha20poly1305.h
  * UPSTREAM: crypto: chacha20poly1305 - import construction and selftest from Zinc
      include/crypto/chacha20poly1305.h
      lib/crypto/Kconfig
      lib/crypto/Makefile
    UPSTREAM: crypto: arm/curve25519 - wire up NEON implementation
    UPSTREAM: crypto: arm/curve25519 - import Bernstein and Schwabe's Curve25519 ARM implementation
  * UPSTREAM: crypto: curve25519 - x86_64 library and KPP implementations
      crypto/Kconfig
    UPSTREAM: crypto: lib/curve25519 - work around Clang stack spilling issue
  * UPSTREAM: crypto: curve25519 - implement generic KPP driver
      crypto/Kconfig
      crypto/Makefile
  * UPSTREAM: crypto: curve25519 - add kpp selftest
      crypto/testmgr.c
  * UPSTREAM: crypto: curve25519 - generic C library implementations
      include/crypto/curve25519.h
      lib/crypto/Kconfig
      lib/crypto/Makefile
  * UPSTREAM: crypto: blake2s - x86_64 SIMD implementation
      crypto/Kconfig
  * UPSTREAM: crypto: blake2s - implement generic shash driver
      crypto/Kconfig
      crypto/Makefile
      include/crypto/internal/blake2s.h
  * UPSTREAM: crypto: testmgr - add test cases for Blake2s
      crypto/testmgr.c
  * UPSTREAM: crypto: blake2s - generic C library implementation and selftest
      include/crypto/blake2s.h
      include/crypto/internal/blake2s.h
      lib/crypto/Kconfig
      lib/crypto/Makefile
  * UPSTREAM: crypto: mips/poly1305 - incorporate OpenSSL/CRYPTOGAMS optimized implementation
      crypto/Kconfig
      lib/crypto/Kconfig
  * UPSTREAM: crypto: arm/poly1305 - incorporate OpenSSL/CRYPTOGAMS NEON implementation
      lib/crypto/Kconfig
  * UPSTREAM: crypto: arm64/poly1305 - incorporate OpenSSL/CRYPTOGAMS NEON implementation
      arch/arm64/crypto/Kconfig
      arch/arm64/crypto/Makefile
      lib/crypto/Kconfig
  * UPSTREAM: crypto: x86/poly1305 - expose existing driver as poly1305 library
      crypto/Kconfig
      lib/crypto/Kconfig
  * UPSTREAM: crypto: x86/poly1305 - depend on generic library not generic shash
      crypto/Kconfig
      crypto/poly1305_generic.c
      include/crypto/internal/poly1305.h
  * UPSTREAM: crypto: poly1305 - expose init/update/final library interface
      crypto/poly1305_generic.c
      include/crypto/poly1305.h
      lib/crypto/Kconfig
      lib/crypto/poly1305.c
  * UPSTREAM: crypto: x86/poly1305 - unify Poly1305 state struct with generic code
      crypto/poly1305_generic.c
      include/crypto/internal/poly1305.h
      include/crypto/poly1305.h
  * UPSTREAM: crypto: poly1305 - move core routines into a separate library
      crypto/Kconfig
      crypto/poly1305_generic.c
      include/crypto/internal/poly1305.h
      include/crypto/poly1305.h
      lib/crypto/Kconfig
      lib/crypto/Makefile
      lib/crypto/poly1305.c
  * UPSTREAM: crypto: chacha - unexport chacha_generic routines
      crypto/chacha_generic.c
      include/crypto/internal/chacha.h
  * UPSTREAM: crypto: mips/chacha - wire up accelerated 32r2 code from Zinc
      crypto/Kconfig
    UPSTREAM: crypto: mips/chacha - import 32r2 ChaCha code from Zinc
    UPSTREAM: crypto: arm/chacha - expose ARM ChaCha routine as library function
    UPSTREAM: crypto: arm/chacha - remove dependency on generic ChaCha driver
    UPSTREAM: crypto: arm/chacha - import Eric Biggers's scalar accelerated ChaCha code
  * UPSTREAM: crypto: arm64/chacha - expose arm64 ChaCha routine as library function
      arch/arm64/crypto/Kconfig
  * UPSTREAM: crypto: arm64/chacha - depend on generic chacha library instead of crypto driver
      arch/arm64/crypto/Kconfig
    UPSTREAM: crypto: arm64/chacha - use combined SIMD/ALU routine for more speed
    UPSTREAM: crypto: arm64/chacha - optimize for arbitrary length inputs
  * UPSTREAM: crypto: x86/chacha - expose SIMD ChaCha routine as library function
      crypto/Kconfig
      include/crypto/chacha.h
  * UPSTREAM: crypto: x86/chacha - depend on generic chacha library instead of crypto driver
      crypto/Kconfig
  * UPSTREAM: crypto: chacha - move existing library code into lib/crypto
      crypto/Kconfig
      crypto/chacha_generic.c
      include/crypto/chacha.h
      include/crypto/internal/chacha.h
      lib/Makefile
      lib/crypto/Kconfig
      lib/crypto/Makefile
      lib/crypto/libchacha.c
  * UPSTREAM: crypto: lib - tidy up lib/crypto Kconfig and Makefile
      crypto/Kconfig
      lib/Makefile
      lib/crypto/Kconfig
      lib/crypto/Makefile
  * UPSTREAM: crypto: chacha - constify ctx and iv arguments
      crypto/chacha_generic.c
      include/crypto/chacha.h
    UPSTREAM: crypto: x86/poly1305 - Clear key material from stack in SSE2 variant
    UPSTREAM: crypto: xchacha20 - fix comments for test vectors
    UPSTREAM: crypto: xchacha - add test vector from XChaCha20 draft RFC
  * UPSTREAM: crypto: arm64/chacha - add XChaCha12 support
      arch/arm64/crypto/Kconfig
  * UPSTREAM: crypto: arm64/chacha20 - refactor to allow varying number of rounds
      arch/arm64/crypto/Makefile
  * UPSTREAM: crypto: arm64/chacha20 - add XChaCha20 support
      arch/arm64/crypto/Kconfig
    UPSTREAM: crypto: x86/chacha - avoid sleeping under kernel_fpu_begin()
    UPSTREAM: crypto: x86/chacha - yield the FPU occasionally
  * UPSTREAM: crypto: x86/chacha - add XChaCha12 support
      crypto/Kconfig
    UPSTREAM: crypto: x86/chacha20 - refactor to allow varying number of rounds
  * UPSTREAM: crypto: x86/chacha20 - add XChaCha20 support
      crypto/Kconfig
    UPSTREAM: crypto: x86/chacha20 - Add a 4-block AVX-512VL variant
    UPSTREAM: crypto: x86/chacha20 - Add a 2-block AVX-512VL variant
    UPSTREAM: crypto: x86/chacha20 - Add a 8-block AVX-512VL variant
    UPSTREAM: crypto: x86/chacha20 - Add a 4-block AVX2 variant
    UPSTREAM: crypto: x86/chacha20 - Add a 2-block AVX2 variant
    UPSTREAM: crypto: x86/chacha20 - Use larger block functions more aggressively
    UPSTREAM: crypto: x86/chacha20 - Support partial lengths in 8-block AVX2 variant
    UPSTREAM: crypto: x86/chacha20 - Support partial lengths in 4-block SSSE3 variant
    UPSTREAM: crypto: x86/chacha20 - Support partial lengths in 1-block SSSE3 variant
    ANDROID: GKI: Enable CONFIG_USB_ANNOUNCE_NEW_DEVICES
    ANDROID: GKI: Enable CONFIG_X86_X2APIC
  * ANDROID: move builds to use gas prebuilts
      build.config.aarch64
      build.config.arm
      build.config.x86_64
  * UPSTREAM: binder: fix UAF when releasing todo list
      drivers/android/binder.c
    Merge 4.19.152 into android-4.19-stable
Linux 4.19.152
    crypto: qat - check cipher length for aead AES-CBC-HMAC-SHA
    crypto: bcm - Verify GCM/CCM key length in setkey
    drivers/net/ethernet/marvell/mvmdio.c: Fix non OF case
    reiserfs: Fix oops during mount
    reiserfs: Initialize inode keys properly
    USB: serial: ftdi_sio: add support for FreeCalypso JTAG+UART adapters
    USB: serial: pl2303: add device-id for HP GC device
    staging: comedi: check validity of wMaxPacketSize of usb endpoints found
    USB: serial: option: Add Telit FT980-KS composition
    USB: serial: option: add Cellient MPL200 card
    media: usbtv: Fix refcounting mixup
  * Bluetooth: Disconnect if E0 is used for Level 4
      include/net/bluetooth/hci_core.h
      net/bluetooth/hci_conn.c
      net/bluetooth/hci_event.c
  * Bluetooth: Fix update of connection state in `hci_encrypt_cfm`
      include/net/bluetooth/hci_core.h
  * Bluetooth: Consolidate encryption handling in hci_encrypt_cfm
      include/net/bluetooth/hci_core.h
      net/bluetooth/hci_event.c
  * Bluetooth: MGMT: Fix not checking if BT_HS is enabled
      net/bluetooth/mgmt.c
  * Bluetooth: L2CAP: Fix calling sk_filter on non-socket based channel
      include/net/bluetooth/l2cap.h
      net/bluetooth/l2cap_core.c
      net/bluetooth/l2cap_sock.c
  * Bluetooth: A2MP: Fix not initializing all members
      net/bluetooth/a2mp.c
    ARM: 8867/1: vdso: pass --be8 to linker if necessary
    ARM: 8939/1: kbuild: use correct nm executable
    ARM: 8858/1: vdso: use $(LD) instead of $(CC) to link VDSO
    perf cs-etm: Move definition of 'traceid_list' global variable from header file
  * FROMLIST: arm64: vdso32: Allow ld.lld to properly link the VDSO
      arch/arm64/kernel/vdso32/Makefile
    Merge 4.19.151 into android-4.19-stable
Linux 4.19.151
  * net: usb: rtl8150: set random MAC address when set_ethernet_addr() fails
      drivers/net/usb/rtl8150.c
  * mm: khugepaged: recalculate min_free_kbytes after memory hotplug as expected by khugepaged
      include/linux/khugepaged.h
      mm/page_alloc.c
    mmc: core: don't set limits.discard_granularity as 0
  * perf: Fix task_function_call() error handling
      kernel/events/core.c
    rxrpc: Fix server keyring leak
    rxrpc: Fix some missing _bh annotations on locking conn->state_lock
    rxrpc: Downgrade the BUG() for unsupported token type in rxrpc_read()
    rxrpc: Fix rxkad token xdr encoding
    net/mlx5e: Fix VLAN create flow
    net/mlx5e: Fix VLAN cleanup flow
  * net: usb: ax88179_178a: fix missing stop entry in driver_info
      drivers/net/usb/ax88179_178a.c
  * mdio: fix mdio-thunder.c dependency & build error
      drivers/net/phy/Kconfig
  * bonding: set dev->needed_headroom in bond_setup_by_slave()
      drivers/net/bonding/bond_main.c
  * xfrm: Use correct address family in xfrm_state_find
      net/xfrm/xfrm_state.c
  * platform/x86: fix kconfig dependency warning for FUJITSU_LAPTOP
      drivers/platform/x86/Kconfig
    net: stmmac: removed enabling eee in EEE set callback
  * xfrm: clone whole liftime_cur structure in xfrm_do_migrate
      net/xfrm/xfrm_state.c
  * xfrm: clone XFRMA_SEC_CTX in xfrm_do_migrate
      net/xfrm/xfrm_state.c
  * xfrm: clone XFRMA_REPLAY_ESN_VAL in xfrm_do_migrate
      include/net/xfrm.h
  * xfrm: clone XFRMA_SET_MARK in xfrm_do_migrate
      net/xfrm/xfrm_state.c
    drm/amdgpu: prevent double kfree ttm->sg
    openvswitch: handle DNAT tuple collision
    net: team: fix memory leak in __team_options_register
    team: set dev->needed_headroom in team_setup_by_port()
  * sctp: fix sctp_auth_init_hmacs() error path
      net/sctp/auth.c
    i2c: owl: Clear NACK and BUS error bits
    i2c: meson: fixup rate calculation with filter delay
    i2c: meson: fix clock setting overwrite
    cifs: Fix incomplete memory allocation on setxattr path
  * xfrmi: drop ignore_df check before updating pmtu
      net/xfrm/xfrm_interface.c
    mm/khugepaged: fix filemap page_to_pgoff(page) != offset
    macsec: avoid use-after-free in macsec_handle_frame()
    nvme-core: put ctrl ref when module ref get fail
    arm64: dts: stratix10: add status to qspi dts node
    mtd: rawnand: sunxi: Fix the probe error path
    i2c: i801: Exclude device from suspend direct complete optimization
    perf top: Fix stdio interface input handling with glibc 2.28+
  * driver core: Fix probe_count imbalance in really_probe()
      drivers/base/dd.c
    platform/x86: thinkpad_acpi: re-initialize ACPI buffer size when reuse
    platform/x86: intel-vbtn: Switch to an allow-list for SW_TABLET_MODE reporting
    platform/x86: thinkpad_acpi: initialize tp_nvram_state variable
    platform/x86: intel-vbtn: Fix SW_TABLET_MODE always reporting 1 on the HP Pavilion 11 x360
  * usermodehelper: reset umask to default before executing user process
      kernel/umh.c
    drm/nouveau/mem: guard against NULL pointer access in mem_del
  * net: wireless: nl80211: fix out-of-bounds access in nl80211_del_key()
      net/wireless/nl80211.c
    Revert "ravb: Fixed to be able to unload modules"
    fbcon: Fix global-out-of-bounds read in fbcon_get_font()
  * Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts
      include/linux/font.h
  * fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h
      include/linux/font.h
    Merge 4.19.150 into android-4.19-stable
Linux 4.19.150
  * netfilter: ctnetlink: add a range check for l3/l4 protonum
      net/netfilter/nf_conntrack_netlink.c
  * ep_create_wakeup_source(): dentry name can change under you...
      fs/eventpoll.c
  * epoll: EPOLL_CTL_ADD: close the race in decision to take fast path
      fs/eventpoll.c
  * epoll: replace ->visited/visited_list with generation count
      fs/eventpoll.c
  * epoll: do not insert into poll queues until all sanity checks are done
      fs/eventpoll.c
  * net/packet: fix overflow in tpacket_rcv
      net/packet/af_packet.c
  * mm: don't rely on system state to detect hot-plug operations
      include/linux/node.h
  * mm: replace memmap_context by meminit_context
      include/linux/mm.h
      include/linux/mmzone.h
      mm/page_alloc.c
  * random32: Restore __latent_entropy attribute on net_rand_state
      lib/random32.c
    Input: trackpoint - enable Synaptics trackpoints
    i2c: cpm: Fix i2c_ram structure
    iommu/exynos: add missing put_device() call in exynos_iommu_of_xlate()
    clk: samsung: exynos4: mark 'chipid' clock as CLK_IGNORE_UNUSED
    nfs: Fix security label length not being reset
    pinctrl: mvebu: Fix i2c sda definition for 98DX3236
    gpio: sprd: Clear interrupt when setting the type as edge
    nvme-fc: fail new connections to a deleted host or remote port
    spi: fsl-espi: Only process interrupts for expected events
    mac80211: do not allow bigger VHT MPDUs than the hardware supports
    drivers/net/wan/hdlc: Set skb->protocol before transmitting
    drivers/net/wan/lapbether: Make skb->protocol consistent with the header
    nvme-core: get/put ctrl and transport module in nvme_dev_open/release()
    rndis_host: increase sleep time in the query-response loop
    net: dec: de2104x: Increase receive ring size for Tulip
    drm/sun4i: mixer: Extend regmap max_register
    drivers/net/wan/hdlc_fr: Add needed_headroom for PVC devices
    drm/amdgpu: restore proper ref count in amdgpu_display_crtc_set_config
    ftrace: Move RCU is watching check after recursion check
    Input: i8042 - add nopnp quirk for Acer Aspire 5 A515
    net: virtio_vsock: Enhance connection semantics
  * vsock/virtio: add transport parameter to the virtio_transport_reset_no_sock()
      include/linux/virtio_vsock.h
    vsock/virtio: stop workers during the .remove()
    vsock/virtio: use RCU to avoid use-after-free on the_virtio_vsock
    clk: socfpga: stratix10: fix the divider for the emac_ptp_free_clk
    gpio: tc35894: fix up tc35894 interrupt configuration
    gpio: mockup: fix resource leak in error path
  * USB: gadget: f_ncm: Fix NDP16 datagram validation
      drivers/usb/gadget/function/f_ncm.c
    mmc: sdhci: Workaround broken command queuing on Intel GLK based IRBIS models
  * ANDROID: use arm-linux-androidkernel- for CROSS_COMPILE_COMPAT
      build.config.aarch64
    ANDROID: build.config.common: enable LLVM=1
    Merge 4.19.149 into android-4.19-stable
Linux 4.19.149
  * KVM: arm64: Assume write fault on S1PTW permission fault on instruction fetch
      arch/arm64/include/asm/kvm_emulate.h
    ata: sata_mv, avoid trigerrable BUG_ON
  * ata: make qc_prep return ata_completion_errors
      include/linux/libata.h
  * ata: define AC_ERR_OK
      include/linux/libata.h
    kprobes: Fix compiler warning for !CONFIG_KPROBES_ON_FTRACE
    s390/zcrypt: Fix ZCRYPT_PERDEV_REQCNT ioctl
  * mm, THP, swap: fix allocating cluster for swapfile by mistake
      mm/swapfile.c
    kprobes: Fix to check probe enabled before disarm_kprobe_ftrace()
    s390/dasd: Fix zero write for FBA devices
    tracing: fix double free
    KVM: SVM: Add a dedicated INVD intercept routine
    KVM: x86: Reset MMU context if guest toggles CR4.SMAP or CR4.PKE
    MIPS: Add the missing 'CPU_1074K' into __get_cpu_type()
  * regmap: fix page selection for noinc reads
      drivers/base/regmap/regmap.c
    ALSA: asihpi: fix iounmap in error handler
  * bpf: Fix a rcu warning for bpffs map pretty-print
      kernel/bpf/inode.c
    batman-adv: mcast: fix duplicate mcast packets from BLA backbone to mesh
    batman-adv: mcast: fix duplicate mcast packets in BLA backbone from mesh
    batman-adv: Add missing include for in_interrupt()
    drm/sun4i: sun8i-csc: Secondary CSC register correction
    net: qed: RDMA personality shouldn't fail VF load
    drm/vc4/vc4_hdmi: fill ASoC card owner
  * bpf: Fix clobbering of r2 in bpf_gen_ld_abs
      net/core/filter.c
    mac802154: tx: fix use-after-free
    batman-adv: mcast/TT: fix wrongly dropped or rerouted packets
    atm: eni: fix the missed pci_disable_device() for eni_init_one()
    batman-adv: bla: fix type misuse for backbone_gw hash indexing
    mwifiex: Increase AES key storage size to 256 bits
    clocksource/drivers/h8300_timer8: Fix wrong return value in h8300_8timer_init()
    ieee802154/adf7242: check status of adf7242_read_reg
    ieee802154: fix one possible memleak in ca8210_dev_com_init
    objtool: Fix noreturn detection for ignored functions
  * i2c: core: Call i2c_acpi_install_space_handler() before i2c_acpi_register_devices()
      drivers/i2c/i2c-core-base.c
    drm/amdkfd: fix a memory leak issue
    lockdep: fix order in trace_hardirqs_off_caller()
    s390/init: add missing __init annotations
    RISC-V: Take text_mutex in ftrace_init_nop()
    ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN Converter9 2-in-1
    ASoC: wm8994: Ensure the device is resumed in wm89xx_mic_detect functions
    ASoC: wm8994: Skip setting of the WM8994_MICBIAS register for WM1811
    nvme: explicitly update mpath disk capacity on revalidation
    net: openvswitch: use div_u64() for 64-by-32 divisions
    perf parse-events: Use strcmp() to compare the PMU name
    ubi: fastmap: Free unused fastmap anchor peb during detach
    btrfs: qgroup: fix data leak caused by race between writeback and truncate
    vfio/pci: fix racy on error and request eventfd ctx
    selftests/x86/syscall_nt: Clear weird flags after each test
    scsi: libfc: Skip additional kref updating work event
    scsi: libfc: Handling of extra kref
    nvme: fix possible deadlock when I/O is blocked
    cifs: Fix double add page to memcg when cifs_readpages
    vfio/pci: Clear error and request eventfd ctx after releasing
    x86/speculation/mds: Mark mds_user_clear_cpu_buffers() __always_inline
    mtd: parser: cmdline: Support MTD names containing one or more colons
    rapidio: avoid data race between file operation callbacks and mport_cdev_add().
  * mm/swap_state: fix a data race in swapin_nr_pages
      mm/swap_state.c
    ceph: fix potential race in ceph_check_caps
    PCI: tegra: Fix runtime PM imbalance on error
    mtd: rawnand: omap_elm: Fix runtime PM imbalance on error
    wlcore: fix runtime pm imbalance in wlcore_regdomain_config
    wlcore: fix runtime pm imbalance in wl1271_tx_work
    ASoC: img-i2s-out: Fix runtime PM imbalance on error
    perf kcore_copy: Fix module map when there are no modules loaded
    perf metricgroup: Free metric_events on error
    perf util: Fix memory leak of prefix_if_not_in
    perf stat: Fix duration_time value for higher intervals
    perf trace: Fix the selection for architectures to generate the errno name tables
    perf evsel: Fix 2 memory leaks
    vfio/pci: fix memory leaks of eventfd ctx
    btrfs: don't force read-only after error in drop snapshot
  * usb: dwc3: Increase timeout for CmdAct cleared by device controller
      drivers/usb/dwc3/gadget.c
  * printk: handle blank console arguments passed in.
      kernel/printk/printk.c
    drm/nouveau/dispnv50: fix runtime pm imbalance on error
    drm/nouveau: fix runtime pm imbalance on error
    drm/nouveau/debugfs: fix runtime pm imbalance on error
    e1000: Do not perform reset in reset_task if we are already down
  * arm64/cpufeature: Drop TraceFilt feature exposure from ID_DFR0 register
      arch/arm64/kernel/cpufeature.c
    scsi: cxlflash: Fix error return code in cxlflash_probe()
    USB: EHCI: ehci-mv: fix less than zero comparison of an unsigned int
  * fuse: don't check refcount after stealing page
      fs/fuse/dev.c
    powerpc/traps: Make unrecoverable NMIs die instead of panic
    ALSA: hda: Fix potential race in unsol event handler
    tty: serial: samsung: Correct clock selection logic
  * tipc: fix memory leak in service subscripting
      net/tipc/topsrv.c
    USB: EHCI: ehci-mv: fix error handling in mv_ehci_probe()
  * Bluetooth: Handle Inquiry Cancel error after Inquiry Complete
      net/bluetooth/hci_event.c
    phy: samsung: s5pv210-usb2: Add delay after reset
    power: supply: max17040: Correct voltage reading
    perf mem2node: Avoid double free related to realloc
    atm: fix a memory leak of vcc->user_back
    dt-bindings: sound: wm8994: Correct required supplies based on actual implementaion
  * arm64: cpufeature: Relax checks for AArch32 support at EL[0-2]
      arch/arm64/kernel/cpufeature.c
    sparc64: vcc: Fix error return code in vcc_probe()
    staging:r8188eu: avoid skb_clone for amsdu to msdu conversion
    scsi: aacraid: Fix error handling paths in aac_probe_one()
    net: openvswitch: use u64 for meter bucket
    KVM: arm64: vgic-its: Fix memory leak on the error path of vgic_add_lpi()
    drivers: char: tlclk.c: Avoid data race between init and interrupt handler
  * bdev: Reduce time holding bd_mutex in sync in blkdev_close()
      fs/block_dev.c
    KVM: Remove CREATE_IRQCHIP/SET_PIT2 race
    serial: uartps: Wait for tx_empty in console setup
    scsi: qedi: Fix termination timeouts in session logout
  * mm/mmap.c: initialize align_offset explicitly for vm_unmapped_area
      mm/mmap.c
    nvmet-rdma: fix double free of rdma queue
  * mm/vmscan.c: fix data races using kswapd_classzone_idx
      mm/vmscan.c
  * mm/filemap.c: clear page error before actual read
      mm/filemap.c
    mm/kmemleak.c: use address-of operator on section symbols
  * NFS: Fix races nfs_page_group_destroy() vs nfs_destroy_unlinked_subrequests()
      include/linux/nfs_page.h
    PCI: pciehp: Fix MSI interrupt race
  * ALSA: usb-audio: Fix case when USB MIDI interface has more than one extra endpoint descriptor
      sound/usb/midi.c
    ubifs: Fix out-of-bounds memory access caused by abnormal value of node_len
  * PCI: Use ioremap(), not phys_to_virt() for platform ROM
      drivers/pci/rom.c
      include/linux/pci.h
    svcrdma: Fix leak of transport addresses
    SUNRPC: Fix a potential buffer overflow in 'svc_print_xprts()'
    scsi: hpsa: correct race condition in offload enabled
    RDMA/rxe: Set sys_image_guid to be aligned with HW IB devices
    nvme: Fix controller creation races with teardown flow
    nvme-multipath: do not reset on unknown status
    tools: gpio-hammer: Avoid potential overflow in main
    cpufreq: powernv: Fix frame-size-overflow in powernv_cpufreq_work_fn
    perf cpumap: Fix snprintf overflow check
    serial: 8250: 8250_omap: Terminate DMA before pushing data on RX timeout
    serial: 8250_omap: Fix sleeping function called from invalid context during probe
    serial: 8250_port: Don't service RX FIFO if throttled
    perf parse-events: Fix 3 use after frees found with clang ASAN
    thermal: rcar_thermal: Handle probe error gracefully
  * tracing: Use address-of operator on section symbols
      kernel/trace/trace.c
    drm/msm/a5xx: Always set an OPP supported hardware value
    drm/msm: fix leaks if initialization fails
    KVM: PPC: Book3S HV: Treat TM-related invalid form instructions on P9 like the valid ones
    RDMA/cm: Remove a race freeing timewait_info
    nfsd: Don't add locks to closed or closing open stateids
    rtc: ds1374: fix possible race condition
    rtc: sa1100: fix possible race condition
    tpm: ibmvtpm: Wait for buffer to be set before proceeding
  * ext4: mark block bitmap corrupted when found instead of BUGON
      fs/ext4/mballoc.c
    xfs: mark dir corrupt when lookup-by-hash fails
    xfs: don't ever return a stale pointer from __xfs_dir3_free_read
    media: tda10071: fix unsigned sign extension overflow
  * Bluetooth: L2CAP: handle l2cap config request during open state
      net/bluetooth/l2cap_core.c
    scsi: aacraid: Disabling TM path and only processing IOP reset
    ath10k: use kzalloc to read for ath10k_sdio_hif_diag_read
    drm/amd/display: Stop if retimer is not available
    drm/amdgpu: increase atombios cmd timeout
  * mm: avoid data corruption on CoW fault into PFN-mapped VMA
      mm/memory.c
    perf jevents: Fix leak of mapfile memory
  * ext4: fix a data race at inode->i_disksize
      fs/ext4/inode.c
  * timekeeping: Prevent 32bit truncation in scale64_check_overflow()
      kernel/time/timekeeping.c
  * Bluetooth: guard against controllers sending zero'd events
      net/bluetooth/hci_event.c
    media: go7007: Fix URB type for interrupt handling
    bus: hisi_lpc: Fixup IO ports addresses to avoid use-after-free in host removal
  * random: fix data races at timer_rand_state
      drivers/char/random.c
    firmware: arm_sdei: Use cpus_read_lock() to avoid races with cpuhp
    drm/amd/display: dal_ddc_i2c_payloads_create can fail causing panic
    dmaengine: tegra-apb: Prevent race conditions on channel's freeing
    dmaengine: stm32-dma: use vchan_terminate_vdesc() in .terminate_all
  * bpf: Remove recursion prevention from rcu free callback
      kernel/bpf/hashtab.c
    x86/pkeys: Add check for pkey "overflow"
    media: staging/imx: Missing assignment in imx_media_capture_device_register()
    dmaengine: stm32-mdma: use vchan_terminate_vdesc() in .terminate_all
    KVM: x86: fix incorrect comparison in trace event
    RDMA/rxe: Fix configuration of atomic queue pair attributes
    perf test: Fix test trace+probe_vfs_getname.sh on s390
  * ALSA: usb-audio: Don't create a mixer element with bogus volume range
      sound/usb/mixer.c
    mt76: clear skb pointers from rx aggregation reorder buffer during cleanup
    crypto: chelsio - This fixes the kernel panic which occurs during a libkcapi test
    clk: stratix10: use do_div() for 64-bit calculation
    drm/omap: fix possible object reference leak
    scsi: lpfc: Fix coverity errors in fmdi attribute handling
    scsi: lpfc: Fix RQ buffer leakage when no IOCBs available
  * selinux: sel_avc_get_stat_idx should increase position index
      security/selinux/selinuxfs.c
  * audit: CONFIG_CHANGE don't log internal bookkeeping as an event
      kernel/audit_watch.c
  * skbuff: fix a data race in skb_queue_len()
      include/linux/skbuff.h
      net/unix/af_unix.c
    ALSA: hda: Clear RIRB status before reading WP
    KVM: fix overflow of zero page refcount with ksm running
  * Bluetooth: prefetch channel before killing sock
      net/bluetooth/l2cap_sock.c
  * mm: pagewalk: fix termination condition in walk_pte_range()
      mm/pagewalk.c
  * mm/swapfile.c: swap_next should increase position index
      mm/swapfile.c
  * Bluetooth: Fix refcount use-after-free issue
      net/bluetooth/l2cap_core.c
      net/bluetooth/l2cap_sock.c
    tools/power/x86/intel_pstate_tracer: changes for python 3 compatibility
    selftests/ftrace: fix glob selftest
    ceph: ensure we have a new cap before continuing in fill_inode
    ar5523: Add USB ID of SMCWUSBT-G2 wireless adapter
    ARM: 8948/1: Prevent OOB access in stacktrace
  * tracing: Set kernel_stack's caller size properly
      kernel/trace/trace_entries.h
    Bluetooth: btrtl: Use kvmalloc for FW allocations
    powerpc/eeh: Only dump stack once if an MMIO loop is detected
    s390/cpum_sf: Use kzalloc and minor changes
    dmaengine: zynqmp_dma: fix burst length configuration
  * scsi: ufs: Fix a race condition in the tracing code
      drivers/scsi/ufs/ufshcd.c
  * scsi: ufs: Make ufshcd_add_command_trace() easier to read
      drivers/scsi/ufs/ufshcd.c
    ACPI: EC: Reference count query handlers under lock
  * sctp: move trace_sctp_probe_path into sctp_outq_sack
      include/trace/events/sctp.h
      net/sctp/outqueue.c
    media: ti-vpe: cal: Restrict DMA to avoid memory corruption
  * seqlock: Require WRITE_ONCE surrounding raw_seqcount_barrier
      include/linux/seqlock.h
  * ipv6_route_seq_next should increase position index
      net/ipv6/ip6_fib.c
  * rt_cpu_seq_next should increase position index
      net/ipv4/route.c
  * neigh_stat_seq_next() should increase position index
      net/core/neighbour.c
    xfs: fix log reservation overflows when allocating large rt extents
    KVM: arm/arm64: vgic: Fix potential double free dist->spis in __kvm_vgic_destroy()
  * kernel/sys.c: avoid copying possible padding bytes in copy_to_user
      kernel/sys.c
    ASoC: max98090: remove msleep in PLL unlocked workaround
    CIFS: Properly process SMB3 lease breaks
  * debugfs: Fix !DEBUG_FS debugfs_create_automount
      include/linux/debugfs.h
    scsi: pm80xx: Cleanup command when a reset times out
    gfs2: clean up iopen glock mess in gfs2_create_inode
  * mmc: core: Fix size overflow for mmc partitions
      include/linux/mmc/card.h
    ubi: Fix producing anchor PEBs
    RDMA/iw_cgxb4: Fix an error handling path in 'c4iw_connect()'
    xfs: fix attr leaf header freemap.size underflow
  * fix dget_parent() fastpath race
      fs/dcache.c
    RDMA/i40iw: Fix potential use after free
    RDMA/qedr: Fix potential use after free
    dmaengine: mediatek: hsdma_probe: fixed a memory leak when devm_request_irq fails
    bcache: fix a lost wake-up problem caused by mca_cannibalize_lock
  * tracing: Adding NULL checks for trace_array descriptor pointer
      kernel/trace/trace.c
      kernel/trace/trace_events.c
    tpm_crb: fix fTPM on AMD Zen+ CPUs
    drm/amdgpu/powerplay/smu7: fix AVFS handling with custom powerplay table
  * mfd: mfd-core: Protect against NULL call-back function pointer
      drivers/mfd/mfd-core.c
    mtd: cfi_cmdset_0002: don't free cfi->cfiq in error path of cfi_amdstd_setup()
    drm/amdgpu/powerplay: fix AVFS handling with custom powerplay table
    clk/ti/adpll: allocate room for terminating null
  * net: silence data-races on sk_backlog.tail
      include/net/sock.h
      net/ipv4/tcp.c
    scsi: lpfc: Fix kernel crash at lpfc_nvme_info_show during remote port bounce
    scsi: fnic: fix use after free
    PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out
    leds: mlxreg: Fix possible buffer overflow
  * lib/string.c: implement stpcpy
      lib/string.c
    ALSA: hda/realtek: Enable front panel headset LED on Lenovo ThinkStation P520
    ALSA: hda/realtek - Couldn't detect Mic if booting with headset plugged
  * ALSA: usb-audio: Add delay quirk for H570e USB headsets
      sound/usb/quirks.c
    x86/ioapic: Unbreak check_timer()
    arch/x86/lib/usercopy_64.c: fix __copy_user_flushcache() cache writeback
    media: smiapp: Fix error handling at NVM reading
    ASoC: kirkwood: fix IRQ error handling
    gma/gma500: fix a memory disclosure bug due to uninitialized bytes
    m68k: q40: Fix info-leak in rtc_ioctl
    scsi: aacraid: fix illegal IO beyond last LBA
  * mm: fix double page fault on arm64 if PTE_AF is cleared
      mm/memory.c
    ath10k: fix memory leak for tpc_stats_final
    ath10k: fix array out-of-bounds access
  * dma-fence: Serialise signal enabling (dma_fence_enable_sw_signaling)
      drivers/dma-buf/dma-fence.c
  * media: mc-device.c: fix memleak in media_device_register_entity
      drivers/media/media-device.c
  * selinux: allow labeling before policy is loaded
      security/selinux/hooks.c
    ANDROID: GKI: prevent removal of monitored symbols
    ANDROID: Refresh ABI.xmls with libabigail 1.8.0-98bbf30d
    Merge 4.19.148 into android-4.19-stable
Linux 4.19.148
    serial: 8250: Avoid error message on reprobe
  * tcp_bbr: adapt cwnd based on ack aggregation estimation
      include/net/inet_connection_sock.h
    tcp_bbr: refactor bbr_target_cwnd() for general inflight provisioning
  * mm: memcg: fix memcg reclaim soft lockup
      mm/vmscan.c
  * kbuild: support LLVM=1 to switch the default tools to Clang/LLVM
      Makefile
  * kbuild: replace AS=clang with LLVM_IAS=1
      Makefile
  * kbuild: remove AS variable
      Makefile
  * x86/boot: kbuild: allow readelf executable to be specified
      Makefile
    net: wan: wanxl: use $(M68KCC) instead of $(M68KAS) for rebuilding firmware
  * net: wan: wanxl: use allow to pass CROSS_COMPILE_M68k for rebuilding firmware
      drivers/net/wan/Kconfig
    Documentation/llvm: fix the name of llvm-size
    Documentation/llvm: add documentation on building w/ Clang/LLVM
  * kbuild: add OBJSIZE variable for the size tool
      Makefile
    MAINTAINERS: add CLANG/LLVM BUILD SUPPORT info
  * ipv4: Update exception handling for multipath routes via same device
      net/ipv4/route.c
  * net: add __must_check to skb_put_padto()
      include/linux/skbuff.h
  * net: qrtr: check skb_put_padto() return value
      net/qrtr/qrtr.c
  * net: phy: Avoid NPD upon phy_detach() when driver is unbound
      drivers/net/phy/phy_device.c
    bnxt_en: Protect bnxt_set_eee() and bnxt_set_pauseparam() with mutex.
    bnxt_en: return proper error codes in bnxt_show_temp
  * tipc: use skb_unshare() instead in tipc_buf_append()
      net/tipc/msg.c
  * tipc: fix shutdown() of connection oriented socket
      net/tipc/socket.c
  * tipc: Fix memory leak in tipc_group_create_member()
      net/tipc/group.c
    nfp: use correct define to return NONE fec
  * net: sch_generic: aviod concurrent reset and enqueue op for lockless qdisc
      net/sched/sch_generic.c
  * net: ipv6: fix kconfig dependency warning for IPV6_SEG6_HMAC
      net/ipv6/Kconfig
    net: dsa: rtl8366: Properly clear member config
    net: DCB: Validate DCB_ATTR_DCB_BUFFER argument
  * ipv6: avoid lockdep issue in fib6_del()
      net/ipv6/ip6_fib.c
  * ip: fix tos reflection in ack and reset packets
      net/ipv4/ip_output.c
    hdlc_ppp: add range checks in ppp_cp_parse_cr()
    geneve: add transport ports in route lookup for geneve
    cxgb4: Fix offset when clearing filter byte counters
    mm/thp: fix __split_huge_pmd_locked() for migration PMD
    kprobes: fix kill kprobe which has been marked as gone
    KVM: fix memory leak in kvm_io_bus_unregister_dev()
  * af_key: pfkey_dump needs parameter validation
      net/key/af_key.c
    ANDROID: drop KERNEL_DIR setting in build.config.common
    Merge 4.19.147 into android-4.19-stable
Linux 4.19.147
    x86/defconfig: Enable CONFIG_USB_XHCI_HCD=y
    powerpc/dma: Fix dma_map_ops::get_required_mask
  * ehci-hcd: Move include to keep CRC stable
      drivers/usb/host/ehci-hcd.c
      drivers/usb/host/ehci-hub.c
    x86/boot/compressed: Disable relocation relaxation
    serial: 8250_pci: Add Realtek 816a and 816b
    Input: i8042 - add Entroware Proteus EL07R4 to nomux and reset lists
    Input: trackpoint - add new trackpoint variant IDs
  * percpu: fix first chunk size calculation for populated bitmap
      mm/percpu.c
    Revert "ALSA: hda - Fix silent audio output and corrupted input on MSI X570-A PRO"
    i2c: i801: Fix resume bug
    usblp: fix race between disconnect() and read()
    USB: UAS: fix disconnect by unplugging a hub
  * USB: quirks: Add USB_QUIRK_IGNORE_REMOTE_WAKEUP quirk for BYD zhaoxin notebook
      drivers/usb/core/quirks.c
    drm/mediatek: Add missing put_device() call in mtk_hdmi_dt_parse_pdata()
    drm/mediatek: Add exception handing in mtk_drm_probe() if component init fail
    MIPS: SNI: Fix spurious interrupts
    fbcon: Fix user font detection test at fbcon_resize().
    perf test: Free formats for perf pmu parse test
    MIPS: SNI: Fix MIPS_L1_CACHE_SHIFT
    perf test: Fix the "signal" test inline assembly
    Drivers: hv: vmbus: Add timeout to vmbus_wait_for_unload
    ASoC: qcom: Set card->owner to avoid warnings
    clk: rockchip: Fix initialization of mux_pll_src_4plls_p
    clk: davinci: Use the correct size when allocating memory
  * KVM: MIPS: Change the definition of kvm type
      include/uapi/linux/kvm.h
  * spi: Fix memory leak on splited transfers
      drivers/spi/spi.c
  * i2c: algo: pca: Reapply i2c bus settings after reset
      include/linux/i2c-algo-pca.h
  * f2fs: Return EOF on unaligned end of file DIO read
      fs/f2fs/data.c
  * f2fs: fix indefinite loop scanning for free nid
      fs/f2fs/node.c
    nvme-rdma: cancel async events before freeing event struct
    nvme-fc: cancel async events before freeing event struct
    openrisc: Fix cache API compile issue when not inlining
    rapidio: Replace 'select' DMAENGINES 'with depends on'
    SUNRPC: stop printk reading past end of string
    NFS: Zero-stateid SETATTR should first return delegation
    spi: spi-loopback-test: Fix out-of-bounds read
    regulator: pwm: Fix machine constraints application
    scsi: lpfc: Fix FLOGI/PLOGI receive race condition in pt2pt discovery
    scsi: libfc: Fix for double free()
    scsi: pm8001: Fix memleak in pm8001_exec_internal_task_abort
    NFSv4.1 handle ERR_DELAY error reclaiming locking state on delegation recall
    hv_netvsc: Remove "unlikely" from netvsc_select_queue
  * net: handle the return value of pskb_carve_frag_list() correctly
      net/core/skbuff.c
    RDMA/bnxt_re: Restrict the max_gids to 256
    gfs2: initialize transaction tr_ailX_lists earlier
    scsi: qla2xxx: Reduce holding sess_lock to prevent CPU lock-up
    scsi: qla2xxx: Move rport registration out of internal work_list
    scsi: qla2xxx: Update rscn_rcvd field to more meaningful scan_needed
    dsa: Allow forwarding of redirected IGMP traffic
    ANDROID: Refresh ABI.xmls with libabigail 1.8.0-1dca710a
    ANDROID: KMI symbol lists: migrate section name
    Merge 4.19.146 into android-4.19-stable
Linux 4.19.146
  * gcov: add support for GCC 10.1
      kernel/gcov/Kconfig
    usb: typec: ucsi: acpi: Check the _DEP dependencies
  * usb: Fix out of sync data toggle if a configured device is reconfigured
      drivers/usb/core/message.c
    USB: serial: option: add support for SIM7070/SIM7080/SIM7090 modules
    USB: serial: option: support dynamic Quectel USB compositions
    USB: serial: ftdi_sio: add IDs for Xsens Mti USB converter
  * usb: core: fix slab-out-of-bounds Read in read_descriptors
      drivers/usb/core/sysfs.c
    phy: qcom-qmp: Use correct values for ipq8074 PCIe Gen2 PHY init
    staging: greybus: audio: fix uninitialized value issue
    video: fbdev: fix OOB read in vga_8planes_imageblit()
    ARM: dts: vfxxx: Add syscon compatible with OCOTP
    KVM: VMX: Don't freeze guest when event delivery causes an APIC-access exit
    fbcon: remove now unusued 'softback_lines' cursor() argument
    fbcon: remove soft scrollback code
  * vgacon: remove software scrollback support
      drivers/video/console/Kconfig
    RDMA/rxe: Fix the parent sysfs read when the interface has 15 chars
    rbd: require global CAP_SYS_ADMIN for mapping and unmapping
    drm/msm: Disable preemption on all 5xx targets
    drm/tve200: Stabilize enable/disable
    scsi: target: iscsi: Fix hang in iscsit_access_np() when getting tpg->np_login_sem
    scsi: target: iscsi: Fix data digest calculation
  * regulator: push allocation in set_consumer_device_supply() out of lock
      drivers/regulator/core.c
    btrfs: fix wrong address when faulting in pages in the search ioctl
    btrfs: fix lockdep splat in add_missing_dev
    btrfs: require only sector size alignment for parent eb bytenr
    staging: wlan-ng: fix out of bounds read in prism2sta_probe_usb()
    iio:accel:mma8452: Fix timestamp alignment and prevent data leak.
    iio:accel:mma7455: Fix timestamp alignment and prevent data leak.
    iio: accel: kxsd9: Fix alignment of local buffer.
    iio:chemical:ccs811: Fix timestamp alignment and prevent data leak.
    iio:light:max44000 Fix timestamp alignment and prevent data leak.
    iio:magnetometer:ak8975 Fix alignment and data leak issues.
    iio:adc:ti-adc081c Fix alignment and data leak issues
    iio:adc:max1118 Fix alignment of timestamp and data leak issues
    iio:adc:ina2xx Fix timestamp alignment issue.
    iio:adc:ti-adc084s021 Fix alignment and data leak issues.
    iio:accel:bmc150-accel: Fix timestamp alignment and prevent data leak.
    iio:light:ltr501 Fix timestamp alignment issue.
    iio: adc: ti-ads1015: fix conversion when CONFIG_PM is not set
    iio: adc: mcp3422: fix locking on error path
    iio: adc: mcp3422: fix locking scope
  * gcov: Disable gcov build with GCC 10
      kernel/gcov/Kconfig
    iommu/amd: Do not use IOMMUv2 functionality when SME is active
    drm/amdgpu: Fix bug in reporting voltage for CIK
    ALSA: hda: fix a runtime pm issue in SOF when integrated GPU is disabled
    cpufreq: intel_pstate: Fix intel_pstate_get_hwp_max() for turbo disabled
    cpufreq: intel_pstate: Refuse to turn off with HWP enabled
    ARC: [plat-hsdk]: Switch ethernet phy-mode to rgmii-id
    HID: elan: Fix memleak in elan_input_configured
    drivers/net/wan/hdlc_cisco: Add hard_header_len
  * HID: quirks: Set INCREMENT_USAGE_ON_DUPLICATE for all Saitek X52 devices
      drivers/hid/hid-ids.h
      drivers/hid/hid-quirks.c
    nvme-rdma: serialize controller teardown sequences
    nvme-fabrics: don't check state NVME_CTRL_NEW for request acceptance
  * irqchip/eznps: Fix build error for !ARC700 builds
      include/soc/nps/common.h
    xfs: initialize the shortform attr header padding entry
    drivers/net/wan/lapbether: Set network_header before transmitting
    ALSA: hda: Fix 2 channel swapping for Tegra
    firestream: Fix memleak in fs_open
    NFC: st95hf: Fix memleak in st95hf_in_send_cmd
    drivers/net/wan/lapbether: Added needed_tailroom
  * netfilter: conntrack: allow sctp hearbeat after connection re-use
      include/linux/netfilter/nf_conntrack_sctp.h
      net/netfilter/nf_conntrack_proto_sctp.c
    dmaengine: acpi: Put the CSRT table after using it
    ARC: HSDK: wireup perf irq
    arm64: dts: ns2: Fixed QSPI compatible string
    ARM: dts: BCM5301X: Fixed QSPI compatible string
    ARM: dts: NSP: Fixed QSPI compatible string
    ARM: dts: bcm: HR2: Fixed QSPI compatible string
    mmc: sdhci-msm: Add retries when all tuning phases are found valid
    RDMA/core: Fix reported speed and width
    scsi: libsas: Set data_dir as DMA_NONE if libata marks qc as NODATA
    drm/sun4i: Fix dsi dcs long write function
    RDMA/bnxt_re: Do not report transparent vlan from QP1
    RDMA/rxe: Drop pointless checks in rxe_init_ports
    RDMA/rxe: Fix memleak in rxe_mem_init_user
    ARM: dts: ls1021a: fix QuadSPI-memory reg range
    ARM: dts: socfpga: fix register entry for timer3 on Arria10
    ARM: dts: logicpd-som-lv-baseboard: Fix broken audio
    ARM: dts: logicpd-torpedo-baseboard: Fix broken audio
    ANDROID: ABI: refresh with latest libabigail 94f5d4ae

Change-Id: Iae064df7e1dd74cd417c0f1b30a86a2f26686ac1
Signed-off-by: Lucas Wei <lucaswei@google.com>
2021-01-27 11:46:29 +08:00
lucaswei
93b7e2f852 Merge android-4.19-stable (4.19.145) into android-msm-pixel-4.19-lts
Merge 4.19.145 into android-4.19-stable
Linux 4.19.145
    net/mlx5e: Don't support phys switch id if not in switchdev mode
  * net: disable netpoll on fresh napis
      net/core/dev.c
  * tipc: fix shutdown() of connectionless socket
      net/tipc/socket.c
  * sctp: not disable bh in the whole sctp_get_port_local()
      net/sctp/socket.c
    net: usb: dm9601: Add USB ID of Keenetic Plus DSL
  * netlabel: fix problems with mapping removal
      net/netlabel/netlabel_domainhash.c
  * block: ensure bdi->io_pages is always initialized
      block/blk-core.c
    ALSA; firewire-tascam: exclude Tascam FE-8 from detection
  * FROMGIT: binder: print warnings when detecting oneway spamming.
      drivers/android/binder.c
      drivers/android/binder_alloc.c
      drivers/android/binder_alloc.h
    Merge 4.19.144 into android-4.19-stable
Linux 4.19.144
  * net: usb: Fix uninit-was-stored issue in asix_read_phy_addr()
      drivers/net/usb/asix_common.c
  * cfg80211: regulatory: reject invalid hints
      net/wireless/reg.c
    mm/hugetlb: fix a race between hugetlb sysctl handlers
    checkpatch: fix the usage of capture group ( ... )
    vfio/pci: Fix SR-IOV VF handling with MMIO blocking
  * KVM: arm64: Set HCR_EL2.PTW to prevent AT taking synchronous exception
      arch/arm64/include/asm/kvm_arm.h
  * KVM: arm64: Survive synchronous exceptions caused by AT instructions
      arch/arm64/include/asm/kvm_asm.h
    KVM: arm64: Defer guest entry when an asynchronous exception is pending
  * KVM: arm64: Add kvm_extable for vaxorcism code
      arch/arm64/include/asm/kvm_asm.h
      arch/arm64/kernel/vmlinux.lds.S
  * mm: slub: fix conversion of freelist_corrupted()
      mm/slub.c
    dm thin metadata: Avoid returning cmd->bm wild pointer on error
    dm cache metadata: Avoid returning cmd->bm wild pointer on error
    dm writecache: handle DAX to partitions on persistent memory correctly
  * libata: implement ATA_HORKAGE_MAX_TRIM_128M and apply to Sandisks
      include/linux/libata.h
  * block: allow for_each_bvec to support zero len bvec
      include/linux/bvec.h
    affs: fix basic permission bits to actually work
    media: rc: uevent sysfs file races with rc_unregister_device()
    media: rc: do not access device via sysfs after rc_unregister_device()
    ALSA: hda - Fix silent audio output and corrupted input on MSI X570-A PRO
    ALSA: firewire-digi00x: exclude Avid Adrenaline from detection
    ALSA: hda/hdmi: always check pin power status in i915 pin fixup
    ALSA: pcm: oss: Remove superfluous WARN_ON() for mulaw sanity check
    ALSA: ca0106: fix error code handling
    usb: qmi_wwan: add D-Link DWM-222 A2 device ID
    net: usb: qmi_wwan: add Telit 0x1050 composition
    btrfs: fix potential deadlock in the search ioctl
  * uaccess: Add non-pagefault user-space write function
      include/linux/uaccess.h
      mm/maccess.c
  * uaccess: Add non-pagefault user-space read functions
      include/linux/uaccess.h
      mm/maccess.c
    btrfs: set the lockdep class for log tree extent buffers
    btrfs: Remove extraneous extent_buffer_get from tree_mod_log_rewind
    btrfs: Remove redundant extent_buffer_get in get_old_root
    vfio-pci: Invalidate mmaps and block MMIO access on disabled memory
    vfio-pci: Fault mmaps to enable vma tracking
    vfio/type1: Support faulting PFNMAP vmas
    btrfs: drop path before adding new uuid tree entry
    xfs: don't update mtime on COW faults
    ext2: don't update mtime on COW faults
  * include/linux/log2.h: add missing () around n in roundup_pow_of_two()
      include/linux/log2.h
    thermal: ti-soc-thermal: Fix bogus thermal shutdowns for omap4430
    iommu/vt-d: Serialize IOMMU GCMD register modifications
    x86, fakenuma: Fix invalid starting node ID
    tg3: Fix soft lockup when tg3_reset_task() fails.
    perf jevents: Fix suspicious code in fixregex()
    xfs: fix xfs_bmap_validate_extent_raw when checking attr fork of rt files
    net: gemini: Fix another missing clk_disable_unprepare() in probe
  * fix regression in "epoll: Keep a reference on files added to the check list"
      fs/eventpoll.c
    net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init()
    perf tools: Correct SNOOPX field offset
    nvmet-fc: Fix a missed _irqsave version of spin_lock in 'nvmet_fc_fod_op_done()'
  * netfilter: nfnetlink: nfnetlink_unicast() reports EAGAIN instead of ENOBUFS
      include/linux/netfilter/nfnetlink.h
      net/netfilter/nfnetlink.c
      net/netfilter/nfnetlink_log.c
      net/netfilter/nfnetlink_queue.c
    selftests/bpf: Fix massive output from test_maps
    bnxt: don't enable NAPI until rings are ready
    xfs: fix boundary test in xfs_attr_shortform_verify
    bnxt_en: fix HWRM error when querying VF temperature
    bnxt_en: Fix PCI AER error recovery flow
    bnxt_en: Check for zero dir entries in NVRAM.
    bnxt_en: Don't query FW when netif_running() is false.
    gtp: add GTPA_LINK info to msg sent to userspace
    dmaengine: pl330: Fix burst length if burst size is smaller than bus width
    net: arc_emac: Fix memleak in arc_mdio_probe
    ravb: Fixed to be able to unload modules
    net: systemport: Fix memleak in bcm_sysport_probe
    net: hns: Fix memleak in hns_nic_dev_probe
  * netfilter: nf_tables: fix destination register zeroing
      include/net/netfilter/nf_tables.h
  * netfilter: nf_tables: incorrect enum nft_list_attributes definition
      include/uapi/linux/netfilter/nf_tables.h
    netfilter: nf_tables: add NFTA_SET_USERDATA if not null
    MIPS: BMIPS: Also call bmips_cpu_setup() for secondary cores
    MIPS: mm: BMIPS5000 has inclusive physical caches
    dmaengine: at_hdmac: check return value of of_find_device_by_node() in at_dma_xlate()
    batman-adv: bla: use netif_rx_ni when not in interrupt context
    batman-adv: Fix own OGM check in aggregated OGMs
    batman-adv: Avoid uninitialized chaddr when handling DHCP
  * dmaengine: of-dma: Fix of_dma_router_xlate's of_dma_xlate handling
      drivers/dma/of-dma.c
    xen/xenbus: Fix granting of vmalloc'd memory
    s390: don't trace preemption in percpu macros
  * cpuidle: Fixup IRQ state
      drivers/cpuidle/cpuidle.c
    ceph: don't allow setlease on cephfs
    drm/msm/a6xx: fix gmu start on newer firmware
    nvmet: Disable keep-alive timer when kato is cleared to 0h
    hwmon: (applesmc) check status earlier.
    drm/msm: add shutdown support for display platform_driver
    tty: serial: qcom_geni_serial: Drop __init from qcom_geni_console_setup
    scsi: target: tcmu: Optimize use of flush_dcache_page
    scsi: target: tcmu: Fix size in calls to tcmu_flush_dcache_range
    perf record/stat: Explicitly call out event modifiers in the documentation
  * HID: core: Sanitize event code and type when mapping input
      drivers/hid/hid-input.c
      drivers/hid/hid-multitouch.c
      include/linux/hid.h
  * HID: core: Correctly handle ReportSize being zero
      drivers/hid/hid-core.c
    Merge 4.19.143 into android-4.19-stable
Linux 4.19.143
  * ALSA: usb-audio: Update documentation comment for MS2109 quirk
      sound/usb/quirks-table.h
  * HID: hiddev: Fix slab-out-of-bounds write in hiddev_ioctl_usage()
      drivers/hid/usbhid/hiddev.c
    tpm: Unify the mismatching TPM space buffer sizes
  * usb: dwc3: gadget: Handle ZLP for sg requests
      drivers/usb/dwc3/gadget.c
  * usb: dwc3: gadget: Fix handling ZLP
      drivers/usb/dwc3/gadget.c
  * usb: dwc3: gadget: Don't setup more than requested
      drivers/usb/dwc3/gadget.c
    btrfs: check the right error variable in btrfs_del_dir_entries_in_log
    usb: storage: Add unusual_uas entry for Sony PSZ drives
    USB: cdc-acm: rework notification_buffer resizing
  * USB: gadget: u_f: Unbreak offset calculation in VLAs
      drivers/usb/gadget/u_f.h
  * USB: gadget: f_ncm: add bounds checks to ncm_unwrap_ntb()
      drivers/usb/gadget/function/f_ncm.c
  * USB: gadget: u_f: add overflow checks to VLA macros
      drivers/usb/gadget/u_f.h
    usb: host: ohci-exynos: Fix error handling in exynos_ohci_probe()
  * USB: Ignore UAS for JMicron JMS567 ATA/ATAPI Bridge
      drivers/usb/storage/unusual_devs.h
  * USB: quirks: Ignore duplicate endpoint on Sound Devices MixPre-D
      drivers/usb/core/quirks.c
  * USB: quirks: Add no-lpm quirk for another Raydium touchscreen
      drivers/usb/core/quirks.c
    usb: uas: Add quirk for PNY Pro Elite
    USB: yurex: Fix bad gfp argument
    drm/amd/pm: correct Vega12 swctf limit setting
    drm/amd/pm: correct Vega10 swctf limit setting
    drm/amdgpu: Fix buffer overflow in INFO ioctl
    irqchip/stm32-exti: Avoid losing interrupts due to clearing pending bits by mistake
    genirq/matrix: Deal with the sillyness of for_each_cpu() on UP
  * device property: Fix the secondary firmware node handling in set_primary_fwnode()
      drivers/base/core.c
  * PM: sleep: core: Fix the handling of pending runtime resume requests
      drivers/base/power/main.c
  * xhci: Always restore EP_SOFT_CLEAR_TOGGLE even if ep reset failed
      drivers/usb/host/xhci.c
  * xhci: Do warm-reset when both CAS and XDEV_RESUME are set
      drivers/usb/host/xhci-hub.c
  * usb: host: xhci: fix ep context print mismatch in debugfs
      drivers/usb/host/xhci-debugfs.c
    XEN uses irqdesc::irq_data_common::handler_data to store a per interrupt XEN data pointer which contains XEN specific information.
  * writeback: Fix sync livelock due to b_dirty_time processing
      fs/fs-writeback.c
      include/trace/events/writeback.h
  * writeback: Avoid skipping inode writeback
      fs/fs-writeback.c
      include/linux/fs.h
  * writeback: Protect inode->i_io_list with inode->i_lock
      fs/fs-writeback.c
    serial: 8250: change lock order in serial8250_do_startup()
    serial: 8250_exar: Fix number of ports for Commtech PCIe cards
    serial: pl011: Don't leak amba_ports entry on driver register error
    serial: pl011: Fix oops on -EPROBE_DEFER
    serial: samsung: Removes the IRQ not found warning
    vt_ioctl: change VT_RESIZEX ioctl to check for error return from vc_resize()
    vt: defer kfree() of vc_screenbuf in vc_do_resize()
  * USB: lvtest: return proper error code in probe
      drivers/usb/misc/lvstest.c
    fbcon: prevent user font height or width change from causing potential out-of-bounds access
    btrfs: fix space cache memory leak after transaction abort
    btrfs: reset compression level for lzo on remount
  * blk-mq: order adding requests to hctx->dispatch and checking SCHED_RESTART
      block/blk-mq-sched.c
      block/blk-mq.c
    HID: i2c-hid: Always sleep 60ms after I2C_HID_PWR_ON commands
  * block: loop: set discard granularity and alignment for block device backed loop
      drivers/block/loop.c
    powerpc/perf: Fix soft lockups due to missed interrupt accounting
    net: gianfar: Add of_node_put() before goto statement
    macvlan: validate setting of multiple remote source MAC addresses
    Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command"
    scsi: qla2xxx: Fix null pointer access during disconnect from subsystem
    scsi: qla2xxx: Check if FW supports MQ before enabling
  * scsi: ufs: Clean up completed request without interrupt notification
      drivers/scsi/ufs/ufshcd.c
  * scsi: ufs: Improve interrupt handling for shared interrupts
      drivers/scsi/ufs/ufshcd.c
  * scsi: ufs: Fix possible infinite loop in ufshcd_hold
      drivers/scsi/ufs/ufshcd.c
    scsi: fcoe: Fix I/O path allocation
    ASoC: wm8994: Avoid attempts to read unreadable registers
    s390/cio: add cond_resched() in the slow_eval_known_fn() loop
    spi: stm32: fix stm32_spi_prepare_mbr in case of odd clk_rate
  * fs: prevent BUG_ON in submit_bh_wbc()
      fs/buffer.c
      fs/ext4/super.c
  * ext4: correctly restore system zone info when remount fails
      fs/ext4/block_validity.c
      fs/ext4/super.c
  * ext4: handle error of ext4_setup_system_zone() on remount
      fs/ext4/super.c
  * ext4: handle option set by mount flags correctly
      fs/ext4/super.c
  * jbd2: abort journal if free a async write error metadata buffer
      fs/jbd2/transaction.c
  * ext4: handle read only external journal device
      fs/ext4/super.c
  * ext4: don't BUG on inconsistent journal feature
      fs/ext4/super.c
  * jbd2: make sure jh have b_transaction set in refile/unfile_buffer
      fs/jbd2/transaction.c
    usb: gadget: f_tcm: Fix some resource leaks in some error paths
    i2c: rcar: in slave mode, clear NACK earlier
    null_blk: fix passing of REQ_FUA flag in null_handle_rq
    nvme-fc: Fix wrong return value in __nvme_fc_init_request()
    drm/msm/adreno: fix updating ring fence
    media: gpio-ir-tx: improve precision of transmitted signal due to scheduling
    Revert "ath10k: fix DMA related firmware crashes on multiple devices"
  * efi: provide empty efi_enter_virtual_mode implementation
      include/linux/efi.h
    USB: sisusbvga: Fix a potential UB casued by left shifting a negative value
    powerpc/spufs: add CONFIG_COREDUMP dependency
    KVM: arm64: Fix symbol dependency in __hyp_call_panic_nvhe
    EDAC/ie31200: Fallback if host bridge device is already initialized
    scsi: fcoe: Memory leak fix in fcoe_sysfs_fcf_del()
    ceph: fix potential mdsc use-after-free crash
    scsi: iscsi: Do not put host in iscsi_set_flashnode_param()
    btrfs: file: reserve qgroup space after the hole punch range is locked
    locking/lockdep: Fix overflow in presentation of average lock-time
    drm/nouveau: Fix reference count leak in nouveau_connector_detect
    drm/nouveau: fix reference count leak in nv50_disp_atomic_commit
    drm/nouveau/drm/noveau: fix reference count leak in nouveau_fbcon_open
  * f2fs: fix use-after-free issue
      fs/f2fs/super.c
  * HID: quirks: add NOGET quirk for Logitech GROUP
      drivers/hid/hid-ids.h
      drivers/hid/hid-quirks.c
    cec-api: prevent leaking memory through hole in structure
    mips/vdso: Fix resource leaks in genvdso.c
    rtlwifi: rtl8192cu: Prevent leaking urb
    ARM: dts: ls1021a: output PPS signal on FIPER2
  * PCI: Fix pci_create_slot() reference count leak
      drivers/pci/slot.c
    omapfb: fix multiple reference count leaks due to pm_runtime_get_sync
  * f2fs: fix error path in do_recover_data()
      fs/f2fs/f2fs.h
      fs/f2fs/inline.c
      fs/f2fs/node.c
      fs/f2fs/recovery.c
    selftests/powerpc: Purge extra count_pmc() calls of ebb selftests
    xfs: Don't allow logging of XFS_ISTALE inodes
    scsi: lpfc: Fix shost refcount mismatch when deleting vport
    drm/amdgpu/display: fix ref count leak when pm_runtime_get_sync fails
    drm/amdgpu: fix ref count leak in amdgpu_display_crtc_set_config
    drm/amd/display: fix ref count leak in amdgpu_drm_ioctl
    drm/amdgpu: fix ref count leak in amdgpu_driver_open_kms
    drm/radeon: fix multiple reference count leak
    drm/amdkfd: Fix reference count leaks.
  * iommu/iova: Don't BUG on invalid PFNs
      drivers/iommu/iova.c
    scsi: target: tcmu: Fix crash on ARM during cmd completion
  * blktrace: ensure our debugfs dir exists
      kernel/trace/blktrace.c
    media: pci: ttpci: av7110: fix possible buffer overflow caused by bad DMA value in debiirq()
    powerpc/xive: Ignore kmemleak false positives
    arm64: dts: qcom: msm8916: Pull down PDM GPIOs during sleep
    mfd: intel-lpss: Add Intel Emmitsburg PCH PCI IDs
    ASoC: tegra: Fix reference count leaks.
    ASoC: img-parallel-out: Fix a reference count leak
    ASoC: img: Fix a reference count leak in img_i2s_in_set_fmt
    ALSA: pci: delete repeated words in comments
    ipvlan: fix device features
    net: ena: Make missed_tx stat incremental
  * tipc: fix uninit skb->data in tipc_nl_compat_dumpit()
      net/tipc/netlink_compat.c
    net/smc: Prevent kernel-infoleak in __smc_diag_dump()
  * net: qrtr: fix usage of idr in port assignment to socket
      net/qrtr/qrtr.c
  * net: Fix potential wrong skb->protocol in skb_vlan_untag()
      net/core/skbuff.c
  * gre6: Fix reception with IP6_TNL_F_RCV_DSCP_COPY
      net/ipv6/ip6_tunnel.c
    powerpc/64s: Don't init FSCR_DSCR in __init_FSCR()
    ANDROID: gki_defconfig: initialize locals with zeroes
  * UPSTREAM: security: allow using Clang's zero initialization for stack variables
      Makefile
      init/main.c
      security/Kconfig.hardening
  * Revert "binder: Prevent context manager from incrementing ref 0"
      drivers/android/binder.c
    ANDROID: GKI: update the ABI xml
    BACKPORT: recordmcount: support >64k sections
  * UPSTREAM: arm64: vdso: Build vDSO with -ffixed-x18
      arch/arm64/kernel/vdso/Makefile
  * UPSTREAM: cgroup: Remove unused cgrp variable
      kernel/cgroup/cgroup.c
  * UPSTREAM: cgroup: freezer: call cgroup_enter_frozen() with preemption disabled in ptrace_stop()
      kernel/signal.c
  * UPSTREAM: cgroup: freezer: fix frozen state inheritance
      kernel/cgroup/cgroup.c
  * UPSTREAM: signal: unconditionally leave the frozen state in ptrace_stop()
      kernel/signal.c
  * BACKPORT: cgroup: cgroup v2 freezer
      include/linux/cgroup-defs.h
      include/linux/cgroup.h
      include/linux/sched/jobctl.h
      kernel/cgroup/Makefile
      kernel/cgroup/cgroup.c
      kernel/cgroup/freezer.c
      kernel/fork.c
      kernel/signal.c
  * UPSTREAM: cgroup: implement __cgroup_task_count() helper
      kernel/cgroup/cgroup-internal.h
      kernel/cgroup/cgroup-v1.c
      kernel/cgroup/cgroup.c
  * UPSTREAM: cgroup: rename freezer.c into legacy_freezer.c
      kernel/cgroup/Makefile
  * UPSTREAM: cgroup: remove extra cgroup_migrate_finish() call
      kernel/cgroup/cgroup.c
  * UPSTREAM: cgroup: saner refcounting for cgroup_root
      kernel/cgroup/cgroup-internal.h
      kernel/cgroup/cgroup-v1.c
      kernel/cgroup/cgroup.c
  * UPSTREAM: cgroup: Add named hierarchy disabling to cgroup_no_v1 boot param
      kernel/cgroup/cgroup-v1.c
  * UPSTREAM: cgroup: remove unnecessary unlikely()
      kernel/cgroup/cgroup.c
  * UPSTREAM: cgroup: Simplify cgroup_ancestor
      include/linux/cgroup.h
    Merge 4.19.142 into android-4.19-stable
Linux 4.19.142
    KVM: arm64: Only reschedule if MMU_NOTIFIER_RANGE_BLOCKABLE is not set
  * KVM: Pass MMU notifier range flags to kvm_unmap_hva_range()
      arch/arm64/include/asm/kvm_host.h
  * clk: Evict unregistered clks from parent caches
      drivers/clk/clk.c
    xen: don't reschedule in preemption off sections
    mm/hugetlb: fix calculation of adjust_range_if_pmd_sharing_possible
  * do_epoll_ctl(): clean the failure exits up a bit
      fs/eventpoll.c
  * epoll: Keep a reference on files added to the check list
      fs/eventpoll.c
    efi: add missed destroy_workqueue when efisubsys_init fails
    powerpc/pseries: Do not initiate shutdown when system is running on UPS
    net: dsa: b53: check for timeout
    hv_netvsc: Fix the queue_mapping in netvsc_vf_xmit()
    net: gemini: Fix missing free_netdev() in error path of gemini_ethernet_port_probe()
    net: ena: Prevent reset after device destruction
  * bonding: fix active-backup failover for current ARP slave
      drivers/net/bonding/bond_main.c
    afs: Fix NULL deref in afs_dynroot_depopulate()
    RDMA/bnxt_re: Do not add user qps to flushlist
    Fix build error when CONFIG_ACPI is not set/enabled:
    efi: avoid error message when booting under Xen
    kconfig: qconf: fix signal connection to invalid slots
    kconfig: qconf: do not limit the pop-up menu to the first row
    kvm: x86: Toggling CR4.PKE does not load PDPTEs in PAE mode
    kvm: x86: Toggling CR4.SMAP does not load PDPTEs in PAE mode
    vfio/type1: Add proper error unwind for vfio_iommu_replay()
    ASoC: intel: Fix memleak in sst_media_open
    ASoC: msm8916-wcd-analog: fix register Interrupt offset
    s390/ptrace: fix storage key handling
    s390/runtime_instrumentation: fix storage key handling
  * bonding: fix a potential double-unregister
      drivers/net/bonding/bond_main.c
  * bonding: show saner speed for broadcast mode
      drivers/net/bonding/bond_main.c
    net: fec: correct the error path for regulator disable in probe
    i40e: Fix crash during removing i40e driver
    i40e: Set RX_ONLY mode for unicast promiscuous on VLAN
    ASoC: q6routing: add dummy register read/write function
  * ext4: don't allow overlapping system zones
      fs/ext4/block_validity.c
  * ext4: fix potential negative array index in do_split()
      fs/ext4/namei.c
  * fs/signalfd.c: fix inconsistent return codes for signalfd4
      fs/signalfd.c
    alpha: fix annotation of io{read,write}{16,32}be()
    xfs: Fix UBSAN null-ptr-deref in xfs_sysfs_init
    tools/testing/selftests/cgroup/cgroup_util.c: cg_read_strcmp: fix null pointer dereference
    virtio_ring: Avoid loop when vq is broken in virtqueue_poll
    scsi: libfc: Free skb in fc_disc_gpn_id_resp() for valid cases
    cpufreq: intel_pstate: Fix cpuinfo_max_freq when MSR_TURBO_RATIO_LIMIT is 0
    ceph: fix use-after-free for fsc->mdsc
    jffs2: fix UAF problem
    xfs: fix inode quota reservation checks
    svcrdma: Fix another Receive buffer leak
    m68knommu: fix overwriting of bits in ColdFire V3 cache control
    Input: psmouse - add a newline when printing 'proto' by sysfs
    media: vpss: clean up resources in init
    rtc: goldfish: Enable interrupt in set_alarm() when necessary
    media: budget-core: Improve exception handling in budget_register()
    scsi: target: tcmu: Fix crash in tcmu_flush_dcache_range on ARM
  * scsi: ufs: Add DELAY_BEFORE_LPM quirk for Micron devices
      drivers/scsi/ufs/ufs_quirks.h
      drivers/scsi/ufs/ufshcd.c
  * spi: Prevent adding devices below an unregistering controller
      drivers/spi/Kconfig
      drivers/spi/spi.c
  * kthread: Do not preempt current task if it is going to call schedule()
      kernel/kthread.c
    drm/amd/display: fix pow() crashing when given base 0
    scsi: zfcp: Fix use-after-free in request timeout handlers
  * jbd2: add the missing unlock_buffer() in the error path of jbd2_write_superblock()
      fs/jbd2/journal.c
  * ext4: fix checking of directory entry validity for inline directories
      fs/ext4/namei.c
  * mm, page_alloc: fix core hung in free_pcppages_bulk()
      mm/page_alloc.c
  * mm: include CMA pages in lowmem_reserve at boot
      mm/page_alloc.c
    kernel/relay.c: fix memleak on destroy relay channel
    romfs: fix uninitialized memory leak in romfs_dev_read()
    btrfs: sysfs: use NOFS for device creation
    btrfs: inode: fix NULL pointer dereference if inode doesn't need compression
    btrfs: Move free_pages_out label in inline extent handling branch in compress_file_range
    btrfs: don't show full path of bind mounts in subvol=
    btrfs: export helpers for subvolume name/id resolution
    khugepaged: adjust VM_BUG_ON_MM() in __khugepaged_enter()
    khugepaged: khugepaged_test_exit() check mmget_still_valid()
    perf probe: Fix memory leakage when the probe point is not found
    drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset()
  * ANDROID: tty: fix tty name overflow
      drivers/tty/serdev/serdev-ttyport.c
  * ANDROID: Revert "PCI: Probe bridge window attributes once at enumeration-time"
      drivers/pci/probe.c
      drivers/pci/setup-bus.c
      include/linux/pci.h
    Merge 4.19.141 into android-4.19-stable
Linux 4.19.141
    drm/amdgpu: Fix bug where DPM is not enabled after hibernate and resume
  * drm: Added orientation quirk for ASUS tablet model T103HAF
      drivers/gpu/drm/drm_panel_orientation_quirks.c
    arm64: dts: marvell: espressobin: add ethernet alias
    khugepaged: retract_page_tables() remember to test exit
    sh: landisk: Add missing initialization of sh_io_port_base
    tools build feature: Quote CC and CXX for their arguments
    perf bench mem: Always memset source before memcpy
    ALSA: echoaudio: Fix potential Oops in snd_echo_resume()
    mfd: dln2: Run event handler loop under spinlock
    test_kmod: avoid potential double free in trigger_config_run_type()
    fs/ufs: avoid potential u32 multiplication overflow
    fs/minix: remove expected error message in block_to_path()
    fs/minix: fix block limit check for V1 filesystems
    fs/minix: set s_maxbytes correctly
    nfs: Fix getxattr kernel panic and memory overflow
    net: qcom/emac: add missed clk_disable_unprepare in error path of emac_clks_phase1_init
    drm/vmwgfx: Fix two list_for_each loop exit tests
    drm/vmwgfx: Use correct vmw_legacy_display_unit pointer
    Input: sentelic - fix error return when fsp_reg_write fails
  * watchdog: initialize device before misc_register
      drivers/watchdog/watchdog_dev.c
    scsi: lpfc: nvmet: Avoid hang / use-after-free again when destroying targetport
    openrisc: Fix oops caused when dumping stack
    i2c: rcar: avoid race when unregistering slave
    tools build feature: Use CC and CXX from parent
    pwm: bcm-iproc: handle clk_get_rate() return
    clk: clk-atlas6: fix return value check in atlas6_clk_init()
    i2c: rcar: slave: only send STOP event when we have been addressed
  * iommu/vt-d: Enforce PASID devTLB field mask
      include/linux/intel-iommu.h
    iommu/omap: Check for failure of a call to omap_iommu_dump_ctx
    selftests/powerpc: ptrace-pkey: Don't update expected UAMOR value
    selftests/powerpc: ptrace-pkey: Update the test to mark an invalid pkey correctly
    selftests/powerpc: ptrace-pkey: Rename variables to make it easier to follow code
  * dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue()
      drivers/md/dm-rq.c
    gpu: ipu-v3: image-convert: Combine rotate/no-rotate irq handlers
    mmc: renesas_sdhi_internal_dmac: clean up the code for dma complete
    USB: serial: ftdi_sio: clean up receive processing
    USB: serial: ftdi_sio: make process-packet buffer unsigned
    media: rockchip: rga: Only set output CSC mode for RGB input
    media: rockchip: rga: Introduce color fmt macros and refactor CSC mode logic
    RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah()
    RDMA/ipoib: Return void from ipoib_ib_dev_stop()
    mfd: arizona: Ensure 32k clock is put on driver unbind and error
    drm/imx: imx-ldb: Disable both channels for split mode in enc->disable()
    remoteproc: qcom: q6v5: Update running state before requesting stop
    perf intel-pt: Fix FUP packet state
  * module: Correctly truncate sysfs sections output
      kernel/module.c
    pseries: Fix 64 bit logical memory block panic
    watchdog: f71808e_wdt: clear watchdog timeout occurred flag
    watchdog: f71808e_wdt: remove use of wrong watchdog_info option
    watchdog: f71808e_wdt: indicate WDIOF_CARDRESET support in watchdog_info.options
  * tracing: Use trace_sched_process_free() instead of exit() for pid tracing
      kernel/trace/trace_events.c
    tracing/hwlat: Honor the tracing_cpumask
    kprobes: Fix NULL pointer dereference at kprobe_ftrace_handler
    ftrace: Setup correct FTRACE_FL_REGS flags for module
  * mm/page_counter.c: fix protection usage propagation
      mm/page_counter.c
    ocfs2: change slot number type s16 to u16
    ext2: fix missing percpu_counter_inc
    MIPS: CPU#0 is not hotpluggable
  * driver core: Avoid binding drivers to dead devices
      drivers/base/dd.c
    mac80211: fix misplaced while instead of if
    bcache: fix overflow in offset_to_stripe()
    bcache: allocate meta data pages as compound pages
    md/raid5: Fix Force reconstruct-write io stuck in degraded raid5
  * net/compat: Add missing sock updates for SCM_RIGHTS
      include/net/sock.h
      net/compat.c
      net/core/sock.c
    net: stmmac: dwmac1000: provide multicast filter fallback
    net: ethernet: stmmac: Disable hardware multicast filter
    media: vsp1: dl: Fix NULL pointer dereference on unbind
    powerpc: Fix circular dependency between percpu.h and mmu.h
    powerpc: Allow 4224 bytes of stack expansion for the signal frame
    cifs: Fix leak when handling lease break for cached root fid
    xtensa: fix xtensa_pmu_setup prototype
    iio: dac: ad5592r: fix unbalanced mutex unlocks in ad5592r_read_raw()
    dt-bindings: iio: io-channel-mux: Fix compatible string in example code
    btrfs: fix return value mixup in btrfs_get_extent
    btrfs: fix memory leaks after failure to lookup checksums during inode logging
    btrfs: only search for left_info if there is no right_info in try_merge_free_space
    btrfs: fix messages after changing compression level by remount
    btrfs: open device without device_list_mutex
    btrfs: don't traverse into the seed devices in show_devname
    btrfs: ref-verify: fix memory leak in add_block_entry
    btrfs: don't allocate anonymous block device for user invisible roots
    btrfs: free anon block device right after subvolume deletion
  * PCI: Probe bridge window attributes once at enumeration-time
      drivers/pci/probe.c
      drivers/pci/setup-bus.c
      include/linux/pci.h
    PCI: qcom: Add support for tx term offset for rev 2.1.0
    PCI: qcom: Define some PARF params needed for ipq8064 SoC
  * PCI: Add device even if driver attach failed
      drivers/pci/bus.c
  * PCI: Mark AMD Navi10 GPU rev 0x00 ATS as broken
      drivers/pci/quirks.c
    PCI: hotplug: ACPI: Fix context refcounting in acpiphp_grab_context()
  * genirq/affinity: Make affinity setting if activated opt-in
      drivers/irqchip/irq-gic-v3-its.c
      include/linux/irq.h
      kernel/irq/manage.c
    smb3: warn on confusing error scenario with sec=krb5
    ANDROID: ABI: update the ABI xml representation
  * Revert "ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109"
      sound/usb/card.h
      sound/usb/pcm.c
      sound/usb/quirks.c
      sound/usb/stream.c
    Merge 4.19.140 into android-4.19-stable
Linux 4.19.140
    xen/gntdev: Fix dmabuf import with non-zero sgt offset
    xen/balloon: make the balloon wait interruptible
    xen/balloon: fix accounting in alloc_xenballooned_pages error path
    irqdomain/treewide: Free firmware node after domain removal
    ARM: 8992/1: Fix unwind_frame for clang-built kernels
    parisc: mask out enable and reserved bits from sba imask
    parisc: Implement __smp_store_release and __smp_load_acquire barriers
    mtd: rawnand: qcom: avoid write to unavailable register
  * spi: spidev: Align buffers for DMA
      drivers/spi/spidev.c
  * include/asm-generic/vmlinux.lds.h: align ro_after_init
      include/asm-generic/vmlinux.lds.h
    cpufreq: dt: fix oops on armada37xx
    NFS: Don't return layout segments that are in use
    NFS: Don't move layouts to plh_return_segs list while in use
    drm/ttm/nouveau: don't call tt destroy callback on alloc failure.
    9p: Fix memory leak in v9fs_mount
  * ALSA: usb-audio: add quirk for Pioneer DDJ-RB
      sound/usb/quirks-table.h
    fs/minix: reject too-large maximum file size
    fs/minix: don't allow getting deleted inodes
    fs/minix: check return value of sb_getblk()
  * bitfield.h: don't compile-time validate _val in FIELD_FIT
      include/linux/bitfield.h
    crypto: cpt - don't sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not specified
    crypto: ccp - Fix use of merged scatterlists
    crypto: qat - fix double free in qat_uclo_create_batch_init_list
    crypto: hisilicon - don't sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not specified
  * pstore: Fix linking when crypto API disabled
      fs/pstore/platform.c
  * ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109
      sound/usb/card.h
      sound/usb/pcm.c
      sound/usb/quirks.c
      sound/usb/stream.c
  * ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109
      sound/usb/quirks-table.h
  * ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support
      sound/usb/mixer_quirks.c
    ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO
    USB: serial: cp210x: enable usb generic throttle/unthrottle
    USB: serial: cp210x: re-enable auto-RTS on open
  * net: initialize fastreuse on inet_inherit_port
      net/ipv4/inet_hashtables.c
  * net: refactor bind_bucket fastreuse into helper
      include/net/inet_connection_sock.h
      net/ipv4/inet_connection_sock.c
    net/tls: Fix kmap usage
  * net: Set fput_needed iff FDPUT_FPUT is set
      net/socket.c
    net/nfc/rawsock.c: add CAP_NET_RAW check.
    drivers/net/wan/lapbether: Added needed_headroom and a skb->len check
  * af_packet: TPACKET_V3: fix fill status rwlock imbalance
      net/packet/af_packet.c
    crypto: aesni - add compatibility with IAS
    x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task
    svcrdma: Fix page leak in svc_rdma_recv_read_chunk()
    pinctrl-single: fix pcs_parse_pinconf() return value
    ocfs2: fix unbalanced locking
    dlm: Fix kobject memleak
    fsl/fman: fix eth hash table allocation
    fsl/fman: check dereferencing null pointer
    fsl/fman: fix unreachable code
    fsl/fman: fix dereference null return value
    fsl/fman: use 32-bit unsigned integer
    net: spider_net: Fix the size used in a 'dma_free_coherent()' call
    liquidio: Fix wrong return value in cn23xx_get_pf_num()
    net: ethernet: aquantia: Fix wrong return value
    tools, build: Propagate build failures from tools/build/Makefile.build
    wl1251: fix always return 0 error
    s390/qeth: don't process empty bridge port events
    ASoC: meson: axg-tdm-interface: fix link fmt setup
    selftests/powerpc: Fix online CPU selection
  * PCI: Release IVRS table in AMD ACS quirk
      drivers/pci/quirks.c
    selftests/powerpc: Fix CPU affinity for child process
    powerpc/boot: Fix CONFIG_PPC_MPC52XX references
    net: dsa: rtl8366: Fix VLAN set-up
    net: dsa: rtl8366: Fix VLAN semantics
    Bluetooth: hci_serdev: Only unregister device if it was registered
    Bluetooth: hci_h5: Set HCI_UART_RESET_ON_INIT to correct flags
    power: supply: check if calc_soc succeeded in pm860x_init_battery
  * Smack: prevent underflow in smk_set_cipso()
      security/smack/smackfs.c
  * Smack: fix another vsscanf out of bounds
      security/smack/smackfs.c
    RDMA/core: Fix return error value in _ib_modify_qp() to negative
    PCI: cadence: Fix updating Vendor ID and Subsystem Vendor ID register
    net: dsa: mv88e6xxx: MV88E6097 does not support jumbo configuration
    scsi: mesh: Fix panic after host or bus reset
    usb: dwc2: Fix error path in gadget registration
    MIPS: OCTEON: add missing put_device() call in dwc3_octeon_device_init()
    coresight: tmc: Fix TMC mode read in tmc_read_unprepare_etb()
    thermal: ti-soc-thermal: Fix reversed condition in ti_thermal_expose_sensor()
  * usb: core: fix quirks_param_set() writing to a const pointer
      drivers/usb/core/quirks.c
    USB: serial: iuu_phoenix: fix led-activity helpers
    drm/imx: tve: fix regulator_disable error path
    powerpc/book3s64/pkeys: Use PVR check instead of cpu feature
    PCI/ASPM: Add missing newline in sysfs 'policy'
    staging: rtl8192u: fix a dubious looking mask before a shift
    RDMA/rxe: Prevent access to wr->next ptr afrer wr is posted to send queue
    RDMA/qedr: SRQ's bug fixes
    powerpc/vdso: Fix vdso cpu truncation
    mwifiex: Prevent memory corruption handling keys
    scsi: scsi_debug: Add check for sdebug_max_queue during module init
    drm/bridge: sil_sii8620: initialize return of sii8620_readb
    phy: exynos5-usbdrd: Calibrating makes sense only for USB2.0 PHY
    drm: panel: simple: Fix bpc for LG LB070WV8 panel
  * leds: core: Flush scheduled work for system suspend
      drivers/leds/led-class.c
  * PCI: Fix pci_cfg_wait queue locking problem
      drivers/pci/access.c
    RDMA/rxe: Skip dgid check in loopback mode
    xfs: fix reflink quota reservation accounting error
    xfs: don't eat an EIO/ENOSPC writeback error when scrubbing data fork
    media: exynos4-is: Add missed check for pinctrl_lookup_state()
    media: firewire: Using uninitialized values in node_probe()
  * ipvs: allow connection reuse for unconfirmed conntrack
      include/net/ip_vs.h
    scsi: eesox: Fix different dev_id between request_irq() and free_irq()
    scsi: powertec: Fix different dev_id between request_irq() and free_irq()
    drm/radeon: fix array out-of-bounds read and write issues
    cxl: Fix kobject memleak
  * drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline
      drivers/gpu/drm/drm_mipi_dsi.c
    scsi: cumana_2: Fix different dev_id between request_irq() and free_irq()
    ASoC: Intel: bxt_rt298: add missing .owner field
    media: omap3isp: Add missed v4l2_ctrl_handler_free() for preview_init_entities()
    leds: lm355x: avoid enum conversion warning
    drm/arm: fix unintentional integer overflow on left shift
    drm/etnaviv: Fix error path on failure to enable bus clk
    iio: improve IIO_CONCENTRATION channel type description
    ath10k: Acquire tx_lock in tx error paths
    video: pxafb: Fix the function used to balance a 'dma_alloc_coherent()' call
    console: newport_con: fix an issue about leak related system resources
    video: fbdev: sm712fb: fix an issue about iounmap for a wrong address
    agp/intel: Fix a memory leak on module initialisation failure
    drm/msm: ratelimit crtc event overflow error
    ACPICA: Do not increment operation_region reference counts for field units
    bcache: fix super block seq numbers comparision in register_cache_set()
    dyndbg: fix a BUG_ON in ddebug_describe_flags
    usb: bdc: Halt controller on suspend
    bdc: Fix bug causing crash after multiple disconnects
    usb: gadget: net2280: fix memory leak on probe error handling paths
    gpu: host1x: debug: Fix multiple channels emitting messages simultaneously
    iwlegacy: Check the return value of pcie_capability_read_*()
    brcmfmac: set state of hanger slot to FREE when flushing PSQ
    brcmfmac: To fix Bss Info flag definition Bug
    brcmfmac: keep SDIO watchdog running when console_interval is non-zero
  * mm/mmap.c: Add cond_resched() for exit_mmap() CPU stalls
      mm/mmap.c
    irqchip/irq-mtk-sysirq: Replace spinlock with raw_spinlock
    drm/radeon: disable AGP by default
  * drm/debugfs: fix plain echo to connector "force" attribute
      drivers/gpu/drm/drm_debugfs.c
    usb: mtu3: clear dual mode of u3port when disable device
    drm/nouveau: fix multiple instances of reference count leaks
    drm/etnaviv: fix ref count leak via pm_runtime_get_sync
    arm64: dts: hisilicon: hikey: fixes to comply with adi, adv7533 DT binding
    md-cluster: fix wild pointer of unlock_all_bitmaps()
    video: fbdev: neofb: fix memory leak in neo_scan_monitor()
    crypto: aesni - Fix build with LLVM_IAS=1
    drm/radeon: Fix reference count leaks caused by pm_runtime_get_sync
    drm/amdgpu: avoid dereferencing a NULL pointer
    fs/btrfs: Add cond_resched() for try_release_extent_mapping() stalls
  * loop: be paranoid on exit and prevent new additions / removals
      drivers/block/loop.c
    Bluetooth: add a mutex lock to avoid UAF in do_enale_set
  * soc: qcom: rpmh-rsc: Set suppress_bind_attrs flag
      drivers/soc/qcom/rpmh-rsc.c
    drm/tilcdc: fix leak & null ref in panel_connector_get_modes
    ARM: socfpga: PM: add missing put_device() call in socfpga_setup_ocram_self_refresh()
    spi: lantiq: fix: Rx overflow error in full duplex mode
    ARM: at91: pm: add missing put_device() call in at91_pm_sram_init()
    ARM: dts: gose: Fix ports node name for adv7612
    ARM: dts: gose: Fix ports node name for adv7180
    platform/x86: intel-vbtn: Fix return value check in check_acpi_dev()
    platform/x86: intel-hid: Fix return value check in check_acpi_dev()
    m68k: mac: Fix IOP status/control register writes
    m68k: mac: Don't send IOP message until channel is idle
    clk: scmi: Fix min and max rate when registering clocks with discrete rates
    arm64: dts: exynos: Fix silent hang after boot on Espresso
    firmware: arm_scmi: Fix SCMI genpd domain probing
    crypto: ccree - fix resource leak on error path
    arm64: dts: qcom: msm8916: Replace invalid bias-pull-none property
  * EDAC: Fix reference count leaks
      drivers/edac/edac_device_sysfs.c
      drivers/edac/edac_pci_sysfs.c
    arm64: dts: rockchip: fix rk3399-puma gmac reset gpio
    arm64: dts: rockchip: fix rk3399-puma vcc5v0-host gpio
    arm64: dts: rockchip: fix rk3368-lion gmac reset gpio
  * sched: correct SD_flags returned by tl->sd_flags()
      kernel/sched/topology.c
  * sched/fair: Fix NOHZ next idle balance
      kernel/sched/fair.c
    x86/mce/inject: Fix a wrong assignment of i_mce.status
  * cgroup: add missing skcd->no_refcnt check in cgroup_sk_clone()
      kernel/cgroup/cgroup.c
  * HID: input: Fix devices that return multiple bytes in battery report
      drivers/hid/hid-input.c
  * tracepoint: Mark __tracepoint_string's __used
      include/linux/tracepoint.h
  * ANDROID: fix a bug in quota2
      net/netfilter/xt_quota2.c
    ANDROID: Update the ABI xml based on the new driver core padding
  * ANDROID: GKI: add some padding to some driver core structures
      include/linux/device.h
      include/linux/fwnode.h
    ANDROID: GKI: Update the ABI xml representation
  * ANDROID: sched: add "frozen" field to task_struct
      include/linux/sched.h
  * ANDROID: cgroups: add v2 freezer ABI changes
      include/linux/cgroup-defs.h
  * ANDROID: cgroups: ABI padding
      include/linux/cgroup-defs.h
    Merge 4.19.139 into android-4.19-stable
Linux 4.19.139
  * Smack: fix use-after-free in smk_write_relabel_self()
      security/smack/smackfs.c
    i40e: Memory leak in i40e_config_iwarp_qvlist
    i40e: Fix of memory leak and integer truncation in i40e_virtchnl.c
    i40e: Wrong truncation from u16 to u8
    i40e: add num_vectors checker in iwarp handler
    rxrpc: Fix race between recvmsg and sendmsg on immediate call failure
    selftests/net: relax cpu affinity requirement in msg_zerocopy test
    Revert "vxlan: fix tos value before xmit"
    openvswitch: Prevent kernel-infoleak in ovs_ct_put_key()
    net: thunderx: use spin_lock_bh in nicvf_set_rx_mode_task()
  * net: gre: recompute gre csum for sctp over gre tunnels
      net/ipv4/gre_offload.c
    hv_netvsc: do not use VF device if link is down
    net: lan78xx: replace bogus endpoint lookup
    vxlan: Ensure FDB dump is performed under RCU
    net: ethernet: mtk_eth_soc: fix MTU warnings
  * ipv6: fix memory leaks on IPV6_ADDRFORM path
      include/net/addrconf.h
      net/ipv6/anycast.c
      net/ipv6/ipv6_sockglue.c
  * ipv4: Silence suspicious RCU usage warning
      net/ipv4/fib_trie.c
  * xattr: break delegations in {set,remove}xattr
      fs/xattr.c
      include/linux/xattr.h
  * Drivers: hv: vmbus: Ignore CHANNELMSG_TL_CONNECT_RESULT(23)
      include/linux/hyperv.h
    tools lib traceevent: Fix memory leak in process_dynamic_array_len
    atm: fix atm_dev refcnt leaks in atmtcp_remove_persistent
    igb: reinit_locked() should be called with rtnl_lock
  * cfg80211: check vendor command doit pointer before use
      net/wireless/nl80211.c
    firmware: Fix a reference count leak.
    usb: hso: check for return value in hso_serial_common_create()
    i2c: slave: add sanity check when unregistering
    i2c: slave: improve sanity check when registering
    drm/nouveau/fbcon: zero-initialise the mode_cmd2 structure
    drm/nouveau/fbcon: fix module unload when fbcon init has failed for some reason
    net/9p: validate fds in p9_fd_open
    leds: 88pm860x: fix use-after-free on unbind
    leds: lm3533: fix use-after-free on unbind
    leds: da903x: fix use-after-free on unbind
    leds: wm831x-status: fix use-after-free on unbind
    mtd: properly check all write ioctls for permissions
    vgacon: Fix for missing check in scrollback handling
  * binder: Prevent context manager from incrementing ref 0
      drivers/android/binder.c
    omapfb: dss: Fix max fclk divider for omap36xx
  * Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt()
      net/bluetooth/hci_event.c
  * Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_evt()
      net/bluetooth/hci_event.c
  * Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt()
      net/bluetooth/hci_event.c
  * staging: android: ashmem: Fix lockdep warning for write operation
      drivers/staging/android/ashmem.c
    ALSA: seq: oss: Serialize ioctls
    Revert "ALSA: hda: call runtime_allow() for all hda controllers"
  * usb: xhci: Fix ASMedia ASM1142 DMA addressing
      drivers/usb/host/xhci-pci.c
  * usb: xhci: define IDs for various ASMedia host controllers
      drivers/usb/host/xhci-pci.c
    USB: iowarrior: fix up report size handling for some devices
    USB: serial: qcserial: add EM7305 QDL product ID
  * BACKPORT: loop: Fix wrong masking of status flags
      drivers/block/loop.c
  * BACKPORT: loop: Add LOOP_CONFIGURE ioctl
      drivers/block/loop.c
      include/uapi/linux/loop.h
  * BACKPORT: loop: Clean up LOOP_SET_STATUS lo_flags handling
      drivers/block/loop.c
      include/uapi/linux/loop.h
  * BACKPORT: loop: Rework lo_ioctl() __user argument casting
      drivers/block/loop.c
  * BACKPORT: loop: Move loop_set_status_from_info() and friends up
      drivers/block/loop.c
  * BACKPORT: loop: Factor out configuring loop from status
      drivers/block/loop.c
  * BACKPORT: loop: Remove figure_loop_size()
      drivers/block/loop.c
  * BACKPORT: loop: Refactor loop_set_status() size calculation
      drivers/block/loop.c
  * BACKPORT: loop: Factor out setting loop device size
      drivers/block/loop.c
  * BACKPORT: loop: Remove sector_t truncation checks
      drivers/block/loop.c
  * BACKPORT: loop: Call loop_config_discard() only after new config is applied
      drivers/block/loop.c
    Merge 4.19.138 into android-4.19-stable
Linux 4.19.138
  * ext4: fix direct I/O read error
      fs/ext4/inode.c
  * random32: move the pseudo-random 32-bit definitions to prandom.h
      include/linux/prandom.h
      include/linux/random.h
  * random32: remove net_rand_state from the latent entropy gcc plugin
      include/linux/random.h
      lib/random32.c
  * random: fix circular include dependency on arm64 after addition of percpu.h
      include/linux/random.h
    ARM: percpu.h: fix build error
  * random32: update the net random state on interrupt and activity
      drivers/char/random.c
      include/linux/random.h
      kernel/time/timer.c
      lib/random32.c
    ANDROID: GKI: update the ABI xml
  * ANDROID: GKI: power: Add property to enable/disable cc toggle
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
    ANDROID: Enforce KMI stability
    Merge 4.19.137 into android-4.19-stable
Linux 4.19.137
    x86/i8259: Use printk_deferred() to prevent deadlock
    KVM: LAPIC: Prevent setting the tscdeadline timer if the lapic is hw disabled
    xen-netfront: fix potential deadlock in xennet_remove()
    cxgb4: add missing release on skb in uld_send()
    x86/unwind/orc: Fix ORC for newly forked tasks
    Revert "i2c: cadence: Fix the hold bit setting"
    net: ethernet: ravb: exit if re-initialization fails in tx timeout
    parisc: add support for cmpxchg on u8 pointers
    nfc: s3fwrn5: add missing release on skb in s3fwrn5_recv_frame
    qed: Disable "MFW indication via attention" SPAM every 5 minutes
    usb: hso: Fix debug compile warning on sparc32
    net/mlx5e: fix bpf_prog reference count leaks in mlx5e_alloc_rq
    net: gemini: Fix missing clk_disable_unprepare() in error path of gemini_ethernet_port_probe()
  * Bluetooth: fix kernel oops in store_pending_adv_report
      net/bluetooth/hci_event.c
  * arm64: csum: Fix handling of bad packets
      arch/arm64/include/asm/checksum.h
  * arm64/alternatives: move length validation inside the subsection
      arch/arm64/include/asm/alternative.h
    mac80211: mesh: Free pending skb when destroying a mpath
    mac80211: mesh: Free ie data when leaving mesh
  * bpf: Fix map leak in HASH_OF_MAPS map
      kernel/bpf/hashtab.c
    ibmvnic: Fix IRQ mapping disposal in error path
    mlxsw: core: Free EMAD transactions using kfree_rcu()
    mlxsw: core: Increase scope of RCU read-side critical section
    mlx4: disable device on shutdown
    net: lan78xx: fix transfer-buffer memory leak
    net: lan78xx: add missing endpoint sanity check
    net/mlx5: Verify Hardware supports requested ptp function on a given pin
    sh: Fix validation of system call number
    selftests/net: psock_fanout: fix clang issues for target arch PowerPC
    selftests/net: rxtimestamp: fix clang issues for target arch PowerPC
  * xfrm: Fix crash when the hold queue is used.
      include/net/xfrm.h
    net/x25: Fix null-ptr-deref in x25_disconnect
    net/x25: Fix x25_neigh refcnt leak when x25 disconnect
    xfs: fix missed wakeup on l_flush_wait
    rds: Prevent kernel-infoleak in rds_notify_queue_get()
  * drm: hold gem reference until object is no longer accessed
      drivers/gpu/drm/drm_gem.c
    drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl()
    Revert "drm/amdgpu: Fix NULL dereference in dpm sysfs handlers"
    ARM: 8986/1: hw_breakpoint: Don't invoke overflow handler on uaccess watchpoints
  * wireless: Use offsetof instead of custom macro.
      include/uapi/linux/wireless.h
    9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work
  * PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge
      drivers/pci/quirks.c
    Btrfs: fix selftests failure due to uninitialized i_mode in test inodes
  * sctp: implement memory accounting on tx path
      net/sctp/socket.c
    btrfs: inode: Verify inode mode to avoid NULL pointer dereference
    drm/amd/display: prevent memory leak
    ath9k: release allocated buffer if timed out
    ath9k_htc: release allocated buffer if timed out
  * tracing: Have error path in predicate_parse() free its allocated memory
      kernel/trace/trace_events_filter.c
    drm/amdgpu: fix multiple memory leaks in acp_hw_init
    iio: imu: adis16400: fix memory leak
    media: rc: prevent memory leak in cx23888_ir_probe
    crypto: ccp - Release all allocated memory if sha type is invalid
  * ANDROID: GKI: kernel: tick-sched: Move wake callback registration code
      kernel/time/tick-sched.c
    Merge 4.19.136 into android-4.19-stable
Linux 4.19.136
  * regmap: debugfs: check count when read regmap file
      drivers/base/regmap/regmap-debugfs.c
  * rtnetlink: Fix memory(net_device) leak when ->newlink fails
      net/core/rtnetlink.c
  * udp: Improve load balancing for SO_REUSEPORT.
      net/ipv4/udp.c
      net/ipv6/udp.c
  * udp: Copy has_conns in reuseport_grow().
      net/core/sock_reuseport.c
  * sctp: shrink stream outq when fails to do addstream reconf
      net/sctp/stream.c
  * sctp: shrink stream outq only when new outcnt < old outcnt
      net/sctp/stream.c
    AX.25: Prevent integer overflows in connect and sendmsg
  * tcp: allow at most one TLP probe per flight
      include/linux/tcp.h
      net/ipv4/tcp_input.c
      net/ipv4/tcp_output.c
    rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA
  * qrtr: orphan socket in qrtr_release()
      net/qrtr/qrtr.c
  * net: udp: Fix wrong clean up for IS_UDPLITE macro
      net/ipv4/udp.c
      net/ipv6/udp.c
  * net-sysfs: add a newline when printing 'tx_timeout' by sysfs
      net/core/net-sysfs.c
    ip6_gre: fix null-ptr-deref in ip6gre_init_net()
    drivers/net/wan/x25_asy: Fix to make it work
  * dev: Defer free of skbs in flush_backlog
      net/core/dev.c
    AX.25: Prevent out-of-bounds read in ax25_sendmsg()
    AX.25: Fix out-of-bounds read in ax25_connect()

Change-Id: Icec947c4e82f9b19199b4507b521f7a9285c6e03
Signed-off-by: lucaswei <lucaswei@google.com>
2020-12-03 21:29:38 +08:00
Zenghui Yu
53ee75b86b KVM: arm64: vgic-v3: Drop the reporting of GICR_TYPER.Last for userspace
commit 23bde34771f1ea92fb5e6682c0d8c04304d34b3b upstream.

It was recently reported that if GICR_TYPER is accessed before the RD base
address is set, we'll suffer from the unset @rdreg dereferencing. Oops...

	gpa_t last_rdist_typer = rdreg->base + GICR_TYPER +
			(rdreg->free_index - 1) * KVM_VGIC_V3_REDIST_SIZE;

It's "expected" that users will access registers in the redistributor if
the RD has been properly configured (e.g., the RD base address is set). But
it hasn't yet been covered by the existing documentation.

Per discussion on the list [1], the reporting of the GICR_TYPER.Last bit
for userspace never actually worked. And it's difficult for us to emulate
it correctly given that userspace has the flexibility to access it any
time. Let's just drop the reporting of the Last bit for userspace for now
(userspace should have full knowledge about it anyway) and it at least
prevents kernel from panic ;-)

[1] https://lore.kernel.org/kvmarm/c20865a267e44d1e2c0d52ce4e012263@kernel.org/

Fixes: ba7b3f1275 ("KVM: arm/arm64: Revisit Redistributor TYPER last bit computation")
Reported-by: Keqian Zhu <zhukeqian1@huawei.com>
Signed-off-by: Zenghui Yu <yuzenghui@huawei.com>
Signed-off-by: Marc Zyngier <maz@kernel.org>
Reviewed-by: Eric Auger <eric.auger@redhat.com>
Link: https://lore.kernel.org/r/20201117151629.1738-1-yuzenghui@huawei.com
Cc: stable@vger.kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-12-02 08:48:07 +01:00
lucaswei
1c4149c525 Merge android-4.19-stable (4.19.135) into android-msm-pixel-4.19-lts
Merge 4.19.135 into android-4.19-stable
Linux 4.19.135
    ath9k: Fix regression with Atheros 9271
    ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb
  * dm integrity: fix integrity recalculation that is improperly skipped
      drivers/md/dm.c
      include/linux/device-mapper.h
  * ASoC: qcom: Drop HAS_DMA dependency to fix link failure
      sound/soc/qcom/Kconfig
  * ASoC: rt5670: Add new gpio1_is_ext_spk_en quirk and enable it on the Lenovo Miix 2 10
      include/sound/rt5670.h
  * x86, vmlinux.lds: Page-align end of ..page_aligned sections
      include/asm-generic/vmlinux.lds.h
    parisc: Add atomic64_set_release() define to avoid CPU soft lockups
    drm/amd/powerplay: fix a crash when overclocking Vega M
    drm/amdgpu: Fix NULL dereference in dpm sysfs handlers
  * io-mapping: indicate mapping failure
      include/linux/io-mapping.h
  * mm: memcg/slab: fix memory leak at non-root kmem_cache destroy
      mm/slab_common.c
  * mm: memcg/slab: synchronize access to kmem_cache dying flag using a spinlock
      mm/slab_common.c
  * mm/memcg: fix refcount error while moving and swapping
      mm/memcontrol.c
  * Makefile: Fix GCC_TOOLCHAIN_DIR prefix for Clang cross compilation
      Makefile
    vt: Reject zero-sized screen buffer size.
    fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins.
    serial: 8250_mtk: Fix high-speed baud rates clamping
    serial: 8250: fix null-ptr-deref in serial8250_start_tx()
    staging: comedi: addi_apci_1564: check INSN_CONFIG_DIGITAL_TRIG shift
    staging: comedi: addi_apci_1500: check INSN_CONFIG_DIGITAL_TRIG shift
    staging: comedi: ni_6527: fix INSN_CONFIG_DIGITAL_TRIG support
    staging: comedi: addi_apci_1032: check INSN_CONFIG_DIGITAL_TRIG shift
    staging: wlan-ng: properly check endpoint types
    Revert "cifs: Fix the target file was deleted when rename failed."
  * usb: xhci: Fix ASM2142/ASM3142 DMA addressing
      drivers/usb/host/xhci-pci.c
    usb: xhci-mtk: fix the failure of bandwidth allocation
  * binder: Don't use mmput() from shrinker function.
      drivers/android/binder_alloc.c
    RISC-V: Upgrade smp_mb__after_spinlock() to iorw,iorw
    x86: math-emu: Fix up 'cmp' insn for clang ias
  * arm64: Use test_tsk_thread_flag() for checking TIF_SINGLESTEP
      arch/arm64/kernel/debug-monitors.c
    hwmon: (scmi) Fix potential buffer overflow in scmi_hwmon_probe()
    hwmon: (adm1275) Make sure we are reading enough data for different chips
    usb: gadget: udc: gr_udc: fix memleak on error handling path in gr_ep_init()
    Input: synaptics - enable InterTouch for ThinkPad X1E 1st gen
    dmaengine: ioat setting ioat timeout as module parameter
    hwmon: (aspeed-pwm-tacho) Avoid possible buffer overflow
  * regmap: dev_get_regmap_match(): fix string comparison
      drivers/base/regmap/regmap.c
    spi: mediatek: use correct SPI_CFG2_REG MACRO
  * Input: add `SW_MACHINE_COVER`
      include/linux/mod_devicetable.h
      include/uapi/linux/input-event-codes.h
    dmaengine: tegra210-adma: Fix runtime PM imbalance on error
  * HID: apple: Disable Fn-key key-re-mapping on clone keyboards
      drivers/hid/hid-apple.c
    HID: steam: fixes race in handling device list.
    HID: alps: support devices with report id 2
    HID: i2c-hid: add Mediacom FlexBook edge13 to descriptor override
    scripts/gdb: fix lx-symbols 'gdb.error' while loading modules
    scripts/decode_stacktrace: strip basepath from all paths
    serial: exar: Fix GPIO configuration for Sealevel cards based on XR17V35X
  * bonding: check return value of register_netdevice() in bond_newlink()
      drivers/net/bonding/bond_netlink.c
    i2c: rcar: always clear ICSAR to avoid side effects
    net: ethernet: ave: Fix error returns in ave_init
    ipvs: fix the connection sync failed in some cases
    qed: suppress "don't support RoCE & iWARP" flooding on HW init
    mlxsw: destroy workqueue when trap_register in mlxsw_emad_init
  * bonding: check error value of register_netdevice() immediately
      drivers/net/bonding/bond_main.c
    net: smc91x: Fix possible memory leak in smc_drv_probe()
    drm: sun4i: hdmi: Fix inverted HPD result
    ieee802154: fix one possible memleak in adf7242_probe
    net: dp83640: fix SIOCSHWTSTAMP to update the struct with actual configuration
  * ax88172a: fix ax88172a_unbind() failures
      drivers/net/usb/ax88172a.c
    hippi: Fix a size used in a 'pci_free_consistent()' in an error handling path
    fpga: dfl: fix bug in port reset handshake
    bnxt_en: Fix race when modifying pause settings.
    btrfs: fix page leaks after failure to lock page for delalloc
    btrfs: fix mount failure caused by race with umount
    btrfs: fix double free on ulist after backref resolution failure
    ASoC: rt5670: Correct RT5670_LDO_SEL_MASK
  * ALSA: info: Drop WARN_ON() from buffer NULL sanity check
      sound/core/info.c
  * uprobes: Change handle_swbp() to send SIGTRAP with si_code=SI_KERNEL, to fix GDB regression
      kernel/events/uprobes.c
    IB/umem: fix reference count leak in ib_umem_odp_get()
  * tipc: clean up skb list lock handling on send path
      net/tipc/bcast.c
      net/tipc/group.c
      net/tipc/link.c
      net/tipc/node.c
      net/tipc/socket.c
    spi: spi-fsl-dspi: Exit the ISR with IRQ_NONE when it's not ours
    SUNRPC reverting d03727b248d0 ("NFSv4 fix CLOSE not waiting for direct IO compeletion")
    irqdomain/treewide: Keep firmware node unconditionally allocated
  * fuse: fix weird page warning
      fs/fuse/dev.c
    drivers/firmware/psci: Fix memory leakage in alloc_init_cpu_groups()
    drm/nouveau/i2c/g94-: increase NV_PMGR_DP_AUXCTL_TRANSACTREQ timeout
    net: sky2: initialize return of gm_phy_read
    drivers/net/wan/lapbether: Fixed the value of hard_header_len
    xtensa: update *pos in cpuinfo_op.next
    xtensa: fix __sync_fetch_and_{and,or}_4 declarations
    scsi: scsi_transport_spi: Fix function pointer check
    mac80211: allow rx of mesh eapol frames with default rx key
    pinctrl: amd: fix npins for uart0 in kerncz_groups
    gpio: arizona: put pm_runtime in case of failure
    gpio: arizona: handle pm_runtime_get_sync failure case
  * soc: qcom: rpmh: Dirt can only make you dirtier, not cleaner
      drivers/soc/qcom/rpmh.c
    ANDROID: build: update ABI definitions
  * ANDROID: update the kernel release format for GKI
      Makefile
      scripts/setlocalversion
  * ANDROID: Incremental fs: magic number compatible 32-bit
      fs/incfs/vfs.c
  * ANDROID: kbuild: don't merge .*..compoundliteral in modules
      scripts/module-lto.lds.S
  * ANDROID: GKI: preserve ABI for struct sock_cgroup_data
      include/linux/cgroup-defs.h
  * Revert "genetlink: remove genl_bind"
      include/net/genetlink.h
      net/netlink/genetlink.c
  * Revert "arm64/alternatives: use subsections for replacement sequences"
      arch/arm64/include/asm/alternative.h
      arch/arm64/kernel/vmlinux.lds.S
    Merge 4.19.134 into android-4.19-stable
Linux 4.19.134
    spi: sprd: switch the sequence of setting WDG_LOAD_LOW and _HIGH
  * rxrpc: Fix trace string
      include/trace/events/rxrpc.h
    libceph: don't omit recovery_deletes in target_copy()
  * printk: queue wake_up_klogd irq_work only if per-CPU areas are ready
      include/linux/printk.h
      init/main.c
      kernel/printk/internal.h
      kernel/printk/printk.c
      kernel/printk/printk_safe.c
  * genirq/affinity: Handle affinity setting on inactive interrupts correctly
      kernel/irq/manage.c
  * sched/fair: handle case of task_h_load() returning 0
      kernel/sched/fair.c
  * sched: Fix unreliable rseq cpu_id for new tasks
      kernel/sched/core.c
  * arm64: compat: Ensure upper 32 bits of x0 are zero on syscall return
      arch/arm64/include/asm/syscall.h
      arch/arm64/kernel/syscall.c
  * arm64: ptrace: Consistently use pseudo-singlestep exceptions
      arch/arm64/include/asm/thread_info.h
      arch/arm64/kernel/ptrace.c
      arch/arm64/kernel/signal.c
      arch/arm64/kernel/syscall.c
  * arm64: ptrace: Override SPSR.SS when single-stepping is enabled
      arch/arm64/include/asm/debug-monitors.h
      arch/arm64/kernel/debug-monitors.c
      arch/arm64/kernel/ptrace.c
  * thermal/drivers/cpufreq_cooling: Fix wrong frequency converted from power
      drivers/thermal/cpu_cooling.c
    misc: atmel-ssc: lock with mutex instead of spinlock
    dmaengine: fsl-edma: Fix NULL pointer exception in fsl_edma_tx_handler
    intel_th: Fix a NULL dereference when hub driver is not loaded
    intel_th: pci: Add Emmitsburg PCH support
    intel_th: pci: Add Tiger Lake PCH-H support
    intel_th: pci: Add Jasper Lake CPU support
    powerpc/book3s64/pkeys: Fix pkey_access_permitted() for execute disable pkey
    hwmon: (emc2103) fix unable to change fan pwm1_enable attribute
    riscv: use 16KB kernel stack on 64-bit
    MIPS: Fix build for LTS kernel caused by backporting lpj adjustment
  * timer: Fix wheel index calculation on last level
      kernel/time/timer.c
  * timer: Prevent base->clk from moving backward
      kernel/time/timer.c
    uio_pdrv_genirq: fix use without device tree and no interrupt
    Input: i8042 - add Lenovo XiaoXin Air 12 to i8042 nomux list
    mei: bus: don't clean driver pointer
  * Revert "zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()"
      drivers/block/zram/zram_drv.c
  * fuse: Fix parameter for FS_IOC_{GET,SET}FLAGS
      fs/fuse/file.c
  * ovl: fix unneeded call to ovl_change_flags()
      fs/overlayfs/file.c
  * ovl: relax WARN_ON() when decoding lower directory file handle
      fs/overlayfs/export.c
  * ovl: inode reference leak in ovl_is_inuse true case.
      fs/overlayfs/super.c
    serial: mxs-auart: add missed iounmap() in probe failure and remove
    virtio: virtio_console: add missing MODULE_DEVICE_TABLE() for rproc serial
    virt: vbox: Fix guest capabilities mask check
  * virt: vbox: Fix VBGL_IOCTL_VMMDEV_REQUEST_BIG and _LOG req numbers to match upstream
      include/uapi/linux/vboxguest.h
    USB: serial: option: add Quectel EG95 LTE modem
    USB: serial: option: add GosunCn GM500 series
    USB: serial: ch341: add new Product ID for CH340
    USB: serial: cypress_m8: enable Simply Automated UPB PIM
    USB: serial: iuu_phoenix: fix memory corruption
    usb: gadget: function: fix missing spinlock in f_uac1_legacy
    usb: chipidea: core: add wakeup support for extcon
    usb: dwc2: Fix shutdown callback in platform
    USB: c67x00: fix use after free in c67x00_giveback_urb
    ALSA: hda/realtek - Enable Speaker for ASUS UX533 and UX534
    ALSA: hda/realtek - change to suitable link model for ASUS platform
  * ALSA: usb-audio: Fix race against the error recovery URB submission
      sound/usb/midi.c
    ALSA: line6: Sync the pending work cancel at disconnection
    ALSA: line6: Perform sanity check for each URB creation
  * HID: quirks: Ignore Simply Automated UPB PIM
      drivers/hid/hid-ids.h
      drivers/hid/hid-quirks.c
  * HID: quirks: Always poll Obins Anne Pro 2 keyboard
      drivers/hid/hid-ids.h
      drivers/hid/hid-quirks.c
  * HID: magicmouse: do not set up autorepeat
      drivers/hid/hid-magicmouse.c
    slimbus: core: Fix mismatch in of_node_get/put
    mtd: rawnand: oxnas: Release all devices in the _remove() path
    mtd: rawnand: oxnas: Unregister all devices on error
    mtd: rawnand: oxnas: Keep track of registered devices
    mtd: rawnand: brcmnand: fix CS0 layout
    mtd: rawnand: timings: Fix default tR_max and tCCS_min timings
    mtd: rawnand: marvell: Fix probe error path
    mtd: rawnand: marvell: Use nand_cleanup() when the device is not yet registered
  * soc: qcom: rpmh-rsc: Allow using free WAKE TCS for active request
      drivers/soc/qcom/rpmh-rsc.c
  * soc: qcom: rpmh-rsc: Clear active mode configuration for wake TCS
      drivers/soc/qcom/rpmh-rsc.c
  * soc: qcom: rpmh: Invalidate SLEEP and WAKE TCSes before flushing new data
      drivers/soc/qcom/rpmh.c
  * soc: qcom: rpmh: Update dirty flag only when data changes
      drivers/soc/qcom/rpmh.c
    perf stat: Zero all the 'ena' and 'run' array slot stats for interval mode
    apparmor: ensure that dfa state tables have entries
    copy_xstate_to_kernel: Fix typo which caused GDB regression
  * regmap: debugfs: Don't sleep while atomic for fast_io regmaps
      drivers/base/regmap/regmap-debugfs.c
    ARM: dts: socfpga: Align L2 cache-controller nodename with dtschema
    Revert "thermal: mediatek: fix register index error"
    staging: comedi: verify array index is correct before using it
    usb: gadget: udc: atmel: fix uninitialized read in debug printk
    spi: spi-sun6i: sun6i_spi_transfer_one(): fix setting of clock rate
    arm64: dts: meson: add missing gxl rng clock
    phy: sun4i-usb: fix dereference of pointer phy0 before it is null checked
    iio:health:afe4404 Fix timestamp alignment and prevent data leak.
  * ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Flight S
      sound/usb/quirks.c
    ACPI: video: Use native backlight on Acer TravelMate 5735Z
    Input: mms114 - add extra compatible for mms345l
  * ALSA: usb-audio: Add registration quirk for Kingston HyperX Cloud Alpha S
      sound/usb/quirks.c
    ACPI: video: Use native backlight on Acer Aspire 5783z
  * ALSA: usb-audio: Rewrite registration quirk handling
      sound/usb/card.c
      sound/usb/quirks.c
      sound/usb/quirks.h
    mmc: sdhci: do not enable card detect interrupt for gpio cd type
    doc: dt: bindings: usb: dwc3: Update entries for disabling SS instances in park mode
  * ALSA: usb-audio: Create a registration quirk for Kingston HyperX Amp (0951:16d8)
      sound/usb/card.c
      sound/usb/quirks.c
      sound/usb/quirks.h
  * scsi: sr: remove references to BLK_DEV_SR_VENDOR, leave it enabled
      drivers/scsi/Kconfig
    ARM: at91: pm: add quirk for sam9x60's ulp1
  * HID: quirks: Remove ITE 8595 entry from hid_have_special_driver
      drivers/hid/hid-quirks.c
    net: sfp: add some quirks for GPON modules
    net: sfp: add support for module quirks
  * Revert "usb/ehci-platform: Set PM runtime as active on resume"
      drivers/usb/host/ehci-platform.c
  * Revert "usb/xhci-plat: Set PM runtime as active on resume"
      drivers/usb/host/xhci-plat.c
  * Revert "usb/ohci-platform: Fix a warning when hibernating"
      drivers/usb/host/ohci-platform.c
  * of: of_mdio: Correct loop scanning logic
      drivers/of/of_mdio.c
    net: dsa: bcm_sf2: Fix node reference count
    spi: spi-fsl-dspi: Fix lockup if device is shutdown during SPI transfer
    spi: fix initial SPI_SR value in spi-fsl-dspi
    iio:health:afe4403 Fix timestamp alignment and prevent data leak.
    iio:pressure:ms5611 Fix buffer element alignment
    iio:humidity:hts221 Fix alignment and data leak issues
    iio: pressure: zpa2326: handle pm_runtime_get_sync failure
    iio: mma8452: Add missed iio_device_unregister() call in mma8452_probe()
    iio: magnetometer: ak8974: Fix runtime PM imbalance on error
    iio:humidity:hdc100x Fix alignment and data leak issues
    iio:magnetometer:ak8974: Fix alignment and data leak issues
  * arm64/alternatives: don't patch up internal branches
      arch/arm64/kernel/alternative.c
    i2c: eg20t: Load module automatically if ID matches
    gfs2: read-only mounts should grab the sd_freeze_gl glock
    tpm_tis: extra chip->ops check on error path in tpm_tis_core_init
  * arm64/alternatives: use subsections for replacement sequences
      arch/arm64/include/asm/alternative.h
      arch/arm64/kernel/vmlinux.lds.S
    m68k: mm: fix node memblock init
    m68k: nommu: register start of the memory with memblock
    drm/exynos: fix ref count leak in mic_pre_enable
    drm/msm: fix potential memleak in error branch
  * vlan: consolidate VLAN parsing code and limit max parsing depth
      include/linux/if_vlan.h
  * sched: consistently handle layer3 header accesses in the presence of VLANs
      include/linux/if_vlan.h
      include/net/inet_ecn.h
      include/net/pkt_sched.h
      net/core/filter.c
      net/sched/act_skbedit.c
      net/sched/cls_api.c
      net/sched/cls_flow.c
      net/sched/em_meta.c
  * cgroup: Fix sock_cgroup_data on big-endian.
      include/linux/cgroup-defs.h
  * cgroup: fix cgroup_sk_alloc() for sk_clone_lock()
      include/linux/cgroup-defs.h
      include/linux/cgroup.h
      kernel/cgroup/cgroup.c
      net/core/sock.c
  * tcp: md5: allow changing MD5 keys in all socket states
      net/ipv4/tcp.c
  * tcp: md5: refine tcp_md5_do_add()/tcp_md5_hash_key() barriers
      net/ipv4/tcp.c
      net/ipv4/tcp_ipv4.c
  * tcp: md5: do not send silly options in SYNCOOKIES
      net/ipv4/tcp_output.c
  * tcp: md5: add missing memory barriers in tcp_md5_do_add()/tcp_md5_hash_key()
      net/ipv4/tcp.c
      net/ipv4/tcp_ipv4.c
  * tcp: make sure listeners don't initialize congestion-control state
      net/ipv4/tcp.c
      net/ipv4/tcp_cong.c
  * tcp: fix SO_RCVLOWAT possible hangs under high mem pressure
      net/ipv4/tcp_input.c
    net: usb: qmi_wwan: add support for Quectel EG95 LTE modem
    net_sched: fix a memory leak in atm_tc_init()
  * net: Added pointer check for dst->ops->neigh_lookup in dst_neigh_lookup_skb
      include/net/dst.h
    llc: make sure applications use ARPHRD_ETHER
  * l2tp: remove skb_dst_set() from l2tp_xmit_skb()
      net/l2tp/l2tp_core.c
  * ipv4: fill fl4_icmp_{type,code} in ping_v4_sendmsg
      net/ipv4/ping.c
  * genetlink: remove genl_bind
      include/net/genetlink.h
      net/netlink/genetlink.c
  * net: rmnet: fix lower interface leak
      drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c
    perf: Make perf able to build with latest libbfd
  * UPSTREAM: media: v4l2-ctrl: Add H264 profile and levels
      drivers/media/v4l2-core/v4l2-ctrls.c
      include/uapi/linux/v4l2-controls.h
  * UPSTREAM: media: v4l2-ctrl: Add control for h.264 chroma qp offset
      drivers/media/v4l2-core/v4l2-ctrls.c
      include/uapi/linux/v4l2-controls.h
  * ANDROID: GKI: ASoC: compress: revert some code to avoid race condition
      sound/core/compress_offload.c
    ANDROID: GKI: Update the ABI xml representation.
  * ANDROID: GKI: kernel: tick-sched: Add an API for wakeup callbacks
      include/linux/tick.h
      kernel/time/tick-sched.c
  * ANDROID: ASoC: Compress: Check and set pcm_new driver op
      sound/soc/soc-compress.c
    Revert "ANDROID: GKI: arm64: gki_defconfig: Disable CONFIG_ARM64_TAGGED_ADDR_ABI"
    ANDROID: arm64: configs: enabe CONFIG_TMPFS
  * Revert "ALSA: compress: fix partial_drain completion state"
      include/sound/compress_driver.h
      sound/core/compress_offload.c
    Merge 4.19.133 into android-4.19-stable
    ANDROID: GKI: enable CONFIG_EXT4_FS_POSIX_ACL.
    ANDROID: GKI: set CONFIG_STATIC_USERMODEHELPER_PATH
Linux 4.19.133
    s390/mm: fix huge pte soft dirty copying
    ARC: elf: use right ELF_ARCH
    ARC: entry: fix potential EFA clobber when TIF_SYSCALL_TRACE
  * dm: use noio when sending kobject event
      drivers/md/dm.c
    drm/radeon: fix double free
    btrfs: fix fatal extent_buffer readahead vs releasepage race
    Revert "ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb"
  * bpf: Check correct cred for CAP_SYSLOG in bpf_dump_raw_ok()
      include/linux/filter.h
      kernel/bpf/syscall.c
      net/core/sysctl_net_core.c
    kprobes: Do not expose probe addresses to non-CAP_SYSLOG
  * module: Do not expose section addresses to non-CAP_SYSLOG
      kernel/module.c
  * module: Refactor section attr into bin attribute
      kernel/module.c
  * kernel: module: Use struct_size() helper
      kernel/module.c
  * kallsyms: Refactor kallsyms_show_value() to take cred
      include/linux/filter.h
      include/linux/kallsyms.h
      kernel/kallsyms.c
      kernel/module.c
    KVM: x86: Mark CR4.TSD as being possibly owned by the guest
    KVM: x86: Inject #GP if guest attempts to toggle CR4.LA57 in 64-bit mode
    KVM: x86: bit 8 of non-leaf PDPEs is not reserved
    KVM: arm64: Stop clobbering x0 for HVC_SOFT_RESTART
  * KVM: arm64: Fix definition of PAGE_HYP_DEVICE
      arch/arm64/include/asm/pgtable-prot.h
  * ALSA: usb-audio: add quirk for MacroSilicon MS2109
      sound/usb/quirks-table.h
    ALSA: hda - let hs_mic be picked ahead of hp_mic
    ALSA: opl3: fix infoleak in opl3
    mlxsw: spectrum_router: Remove inappropriate usage of WARN_ON()
    net: macb: mark device wake capable when "magic-packet" property present
    bnxt_en: fix NULL dereference in case SR-IOV configuration fails
    cxgb4: fix all-mask IP address comparison
    nbd: Fix memory leak in nbd_add_socket
    arm64: kgdb: Fix single-step exception handling oops
  * ALSA: compress: fix partial_drain completion state
      include/sound/compress_driver.h
      sound/core/compress_offload.c
    net: hns3: fix use-after-free when doing self test
    smsc95xx: avoid memory leak in smsc95xx_bind
    smsc95xx: check return value of smsc95xx_reset
    net: cxgb4: fix return error value in t4_prep_fw
    drm/mediatek: Check plane visibility in atomic_update
  * net: qrtr: Fix an out of bounds read qrtr_endpoint_post()
      net/qrtr/qrtr.c
    x86/entry: Increase entry_stack size to a full page
    nvme-rdma: assign completion vector correctly
    block: release bip in a right way in error path
    usb: dwc3: pci: Fix reference count leak in dwc3_pci_resume_work
    scsi: mptscsih: Fix read sense data size
    ARM: imx6: add missing put_device() call in imx6q_suspend_init()
    cifs: update ctime and mtime during truncate
    s390/kasan: fix early pgm check handler execution
  * drm: panel-orientation-quirks: Use generic orientation-data for Acer S1003
      drivers/gpu/drm/drm_panel_orientation_quirks.c
  * drm: panel-orientation-quirks: Add quirk for Asus T101HA panel
      drivers/gpu/drm/drm_panel_orientation_quirks.c
    i40e: protect ring accesses with READ- and WRITE_ONCE
    ixgbe: protect ring accesses with READ- and WRITE_ONCE
  * spi: spidev: fix a potential use-after-free in spidev_release()
      drivers/spi/spidev.c
  * spi: spidev: fix a race between spidev_release and spidev_remove
      drivers/spi/spidev.c
    gpu: host1x: Detach driver on unregister
    drm/tegra: hub: Do not enable orphaned window group
    ARM: dts: omap4-droid4: Fix spi configuration and increase rate
  * regmap: fix alignment issue
      drivers/base/regmap/regmap.c
    spi: spi-fsl-dspi: Fix external abort on interrupt in resume or exit paths
    spi: spi-fsl-dspi: use IRQF_SHARED mode to request IRQ
    spi: spi-fsl-dspi: Fix lockup if device is removed during SPI transfer
    spi: spi-fsl-dspi: Adding shutdown hook
    KVM: s390: reduce number of IO pins to 1
    ANDROID: GKI: update abi based on padding fields being added
  * ANDROID: GKI: USB: Gadget: add Android ABI padding to struct usb_gadget
      include/linux/usb/gadget.h
  * ANDROID: GKI: sound/usb/card.h: add Android ABI padding to struct snd_usb_endpoint
      sound/usb/card.h
  * ANDROID: fscrypt: fix DUN contiguity with inline encryption + IV_INO_LBLK_32 policies
      fs/crypto/bio.c
      fs/crypto/inline_crypt.c
  * ANDROID: f2fs: add back compress inode check
      fs/f2fs/f2fs.h
    Merge 4.19.132 into android-4.19-stable
Linux 4.19.132
  * efi: Make it possible to disable efivar_ssdt entirely
      drivers/firmware/efi/Kconfig
    dm zoned: assign max_io_len correctly
  * irqchip/gic: Atomically update affinity
      drivers/irqchip/irq-gic.c
    MIPS: Add missing EHB in mtc0 -> mfc0 sequence for DSPen
    cifs: Fix the target file was deleted when rename failed.
    SMB3: Honor lease disabling for multiuser mounts
    SMB3: Honor persistent/resilient handle flags for multiuser mounts
    SMB3: Honor 'seal' flag for multiuser mounts
  * Revert "ALSA: usb-audio: Improve frames size computation"
      sound/usb/card.h
      sound/usb/endpoint.c
      sound/usb/endpoint.h
      sound/usb/pcm.c
    nfsd: apply umask on fs without ACL support
    i2c: mlxcpld: check correct size of maximum RECV_LEN packet
    i2c: algo-pca: Add 0x78 as SCL stuck low status for PCA9665
    nvme: fix a crash in nvme_mpath_add_disk
    SMB3: Honor 'posix' flag for multiuser mounts
    virtio-blk: free vblk-vqs in error path of virtblk_probe()
    drm: sun4i: hdmi: Remove extra HPD polling
    hwmon: (acpi_power_meter) Fix potential memory leak in acpi_power_meter_add()
    hwmon: (max6697) Make sure the OVERT mask is set correctly
    cxgb4: fix SGE queue dump destination buffer context
    cxgb4: use correct type for all-mask IP address comparison
    cxgb4: parse TC-U32 key values and masks natively
    cxgb4: use unaligned conversion for fetching timestamp
    drm/msm/dpu: fix error return code in dpu_encoder_init
  * crypto: af_alg - fix use-after-free in af_alg_accept() due to bh_lock_sock()
      include/crypto/if_alg.h
    kgdb: Avoid suspicious RCU usage warning
    nvme-multipath: fix deadlock between ana_work and scan_work
    nvme-multipath: set bdi capabilities once
    s390/debug: avoid kernel warning on too large number of pages
    usb: usbtest: fix missing kfree(dev->buf) in usbtest_disconnect
  * mm/slub: fix stack overruns with SLUB_STATS
      mm/slub.c
  * mm/slub.c: fix corrupted freechain in deactivate_slab()
      mm/slub.c
    usbnet: smsc95xx: Fix use-after-free after removal
    EDAC/amd64: Read back the scrub rate PCI register on F15h
  * mm: fix swap cache node allocation mask
      mm/swap_state.c
    btrfs: fix a block group ref counter leak after failure to remove block group
    ANDROID: Update ABI representation for libabigail update
    ANDROID: Update the ABI representation
    ANDROID: Update the ABI xml representation
  * ANDROID: GKI: fix ABI diffs caused by GPU heap and pool vmstat additions
      include/linux/mmzone.h
      mm/vmstat.c
  * ANDROID: sched: consider stune boost margin when computing energy
      kernel/sched/cpufreq_schedutil.c
      kernel/sched/fair.c
      kernel/sched/sched.h
      kernel/sched/tune.c
      kernel/sched/tune.h
    ANDROID: GKI: move abi files to android/
    ANDROID: GKI: drop unneeded "_whitelist" off of symbol filenames
  * UPSTREAM: binder: fix null deref of proc->context
      drivers/android/binder.c
  * ANDROID: cpufreq: schedutil: maintain raw cache when next_f is not changed
      kernel/sched/cpufreq_schedutil.c
  * UPSTREAM: net: bpf: Make bpf_ktime_get_ns() available to non GPL programs
      kernel/bpf/helpers.c
    UPSTREAM: usb: musb: mediatek: add reset FADDR to zero in reset interrupt handle
  * ANDROID: GKI: scripts: Makefile: update the lz4 command (#2)
      scripts/Makefile.lib
    ANDROID: Update the ABI xml representation
  * Revert "drm/dsi: Fix byte order of DCS set/get brightness"
      drivers/gpu/drm/drm_mipi_dsi.c
      include/drm/drm_mipi_dsi.h
    Merge 4.19.131 into android-4.19-stable
Linux 4.19.131
    Revert "tty: hvc: Fix data abort due to race in hvc_open"
    xfs: add agf freeblocks verify in xfs_agf_verify
    dm writecache: add cond_resched to loop in persistent_memory_claim()
    dm writecache: correct uncommitted_block when discarding uncommitted entry
    NFSv4 fix CLOSE not waiting for direct IO compeletion
    pNFS/flexfiles: Fix list corruption if the mirror count changes
    SUNRPC: Properly set the @subbuf parameter of xdr_buf_subsegment()
    sunrpc: fixed rollback in rpc_gssd_dummy_populate()
    Staging: rtl8723bs: prevent buffer overflow in update_sta_support_rate()
    drm/radeon: fix fb_div check in ni_init_smc_spll_table()
  * drm: rcar-du: Fix build error
      drivers/gpu/drm/rcar-du/Kconfig
  * ring-buffer: Zero out time extend if it is nested and not absolute
      kernel/trace/ring_buffer.c
  * tracing: Fix event trigger to accept redundant spaces
      kernel/trace/trace_events_trigger.c
  * arm64: perf: Report the PC value in REGS_ABI_32 mode
      arch/arm64/kernel/perf_regs.c
    ocfs2: fix panic on nfs server over ocfs2
    ocfs2: fix value of OCFS2_INVALID_SLOT
    ocfs2: load global_inode_alloc
    ocfs2: avoid inode removal while nfsd is accessing it
  * mm/slab: use memzero_explicit() in kzfree()
      mm/slab_common.c
    btrfs: fix failure of RWF_NOWAIT write into prealloc extent beyond eof
    btrfs: fix data block group relocation failure due to concurrent scrub
    x86/asm/64: Align start of __clear_user() loop to 16-bytes
    KVM: nVMX: Plumb L2 GPA through to PML emulation
    KVM: X86: Fix MSR range of APIC registers in X2APIC mode
    erofs: fix partially uninitialized misuse in z_erofs_onlinepage_fixup
    ACPI: sysfs: Fix pm_profile_attr type
    ALSA: hda/realtek - Add quirk for MSI GE63 laptop
    ALSA: hda: Add NVIDIA codec IDs 9a & 9d through a0 to patch table
    RISC-V: Don't allow write+exec only page mapping request in mmap
  * blktrace: break out of blktrace setup on concurrent calls
      kernel/trace/blktrace.c
  * kbuild: improve cc-option to clean up all temporary files
      scripts/Kbuild.include
  * arm64: sve: Fix build failure when ARM64_SVE=y and SYSCTL=n
      arch/arm64/kernel/fpsimd.c
    s390/vdso: fix vDSO clock_getres()
    s390/ptrace: fix setting syscall number
    net: alx: fix race condition in alx_remove
    ibmvnic: Harden device login requests
    hwrng: ks-sa - Fix runtime PM imbalance on error
    riscv/atomic: Fix sign extension for RV64I
    drm/amd/display: Use kfree() to free rgb_user in calculate_user_regamma_ramp()
    ata/libata: Fix usage of page address by page_address in ata_scsi_mode_select_xlat function
    sata_rcar: handle pm_runtime_get_sync failure cases
  * sched/core: Fix PI boosting between RT and DEADLINE tasks
      kernel/sched/core.c
  * sched/deadline: Initialize ->dl_boosted
      kernel/sched/deadline.c
  * i2c: core: check returned size of emulated smbus block read
      drivers/i2c/i2c-core-smbus.c
    i2c: fsi: Fix the port number field in status register
    net: bcmgenet: use hardware padding of runt frames
    netfilter: ipset: fix unaligned atomic access
    usb: gadget: udc: Potential Oops in error handling code
    ARM: imx5: add missing put_device() call in imx_suspend_alloc_ocram()
    cxgb4: move handling L2T ARP failures to caller
    net: qed: fix excessive QM ILT lines consumption
    net: qed: fix NVMe login fails over VFs
  * net: qed: fix left elements count calculation
      include/linux/qed/qed_chain.h
    RDMA/mad: Fix possible memory leak in ib_mad_post_receive_mads()
    ASoC: rockchip: Fix a reference count leak.
    RDMA/cma: Protect bind_list and listen_list while finding matching cm id
    RDMA/qedr: Fix KASAN: use-after-free in ucma_event_handler+0x532
    rxrpc: Fix handling of rwind from an ACK packet
    ARM: dts: NSP: Correct FA2 mailbox node
  * regmap: Fix memory leak from regmap_register_patch
      drivers/base/regmap/regmap.c
    x86/resctrl: Fix a NULL vs IS_ERR() static checker warning in rdt_cdp_peer_get()
    ARM: dts: Fix duovero smsc interrupt for suspend
    ASoC: fsl_ssi: Fix bclk calculation for mono channel
    regualtor: pfuze100: correct sw1a/sw2 on pfuze3000
    efi/esrt: Fix reference count leak in esre_create_sysfs_entry.
    ASoC: q6asm: handle EOS correctly
  * xfrm: Fix double ESP trailer insertion in IPsec crypto offload.
      include/net/xfrm.h
      net/xfrm/xfrm_device.c
    cifs/smb3: Fix data inconsistent when zero file range
    cifs/smb3: Fix data inconsistent when punch hole
    IB/mad: Fix use after free when destroying MAD agent
  * loop: replace kill_bdev with invalidate_bdev
      drivers/block/loop.c
    cdc-acm: Add DISABLE_ECHO quirk for Microchip/SMSC chip
  * xhci: Return if xHCI doesn't support LPM
      drivers/usb/host/xhci.c
  * xhci: Fix enumeration issue when setting max packet size for FS devices.
      drivers/usb/host/xhci.c
  * xhci: Fix incorrect EP_STATE_MASK
      drivers/usb/host/xhci.h
    scsi: zfcp: Fix panic on ERP timeout for previously dismissed ERP action
  * ALSA: usb-audio: Fix OOB access of mixer element list
      sound/usb/mixer.c
      sound/usb/mixer.h
      sound/usb/mixer_quirks.c
  * ALSA: usb-audio: add quirk for Samsung USBC Headset (AKG)
      sound/usb/quirks.c
  * ALSA: usb-audio: add quirk for Denon DCD-1500RE
      sound/usb/quirks.c
    usb: typec: tcpci_rt1711h: avoid screaming irq causing boot hangs
    usb: host: ehci-exynos: Fix error check in exynos_ehci_probe()
  * xhci: Poll for U0 after disabling USB2 LPM
      drivers/usb/host/xhci.c
    usb: host: xhci-mtk: avoid runtime suspend when removing hcd
  * USB: ehci: reopen solution for Synopsys HC bug
      drivers/usb/host/ehci-pci.c
  * usb: add USB_QUIRK_DELAY_INIT for Logitech C922
      drivers/usb/core/quirks.c
    usb: dwc2: Postponed gadget registration to the udc class driver
    USB: ohci-sm501: Add missed iounmap() in remove
  * net: core: reduce recursion limit value
      include/linux/netdevice.h
  * net: Do not clear the sock TX queue in sk_set_socket()
      include/net/sock.h
      net/core/sock.c
  * net: Fix the arp error in some cases
      net/ipv4/fib_semantics.c
    sch_cake: don't call diffserv parsing code when it is not needed
  * tcp_cubic: fix spurious HYSTART_DELAY exit upon drop in min RTT
      net/ipv4/tcp_cubic.c
    sch_cake: fix a few style nits
    sch_cake: don't try to reallocate or unshare skb unconditionally
  * ip_tunnel: fix use-after-free in ip_tunnel_lookup()
      net/ipv4/ip_tunnel.c
  * net: phy: Check harder for errors in get_phy_id()
      drivers/net/phy/phy_device.c
    ip6_gre: fix use-after-free in ip6gre_tunnel_lookup()
    tg3: driver sleeps indefinitely when EEH errors exceed eeh_max_freezes
  * tcp: grow window for OOO packets only for SACK flows
      net/ipv4/tcp_input.c
  * tcp: don't ignore ECN CWR on pure ACK
      net/ipv4/tcp_input.c
  * sctp: Don't advertise IPv4 addresses if ipv6only is set on the socket
      include/net/sctp/constants.h
      net/sctp/associola.c
      net/sctp/bind_addr.c
      net/sctp/protocol.c
    rxrpc: Fix notification call on completion of discarded calls
    rocker: fix incorrect error handling in dma_rings_init
  * net: usb: ax88179_178a: fix packet alignment padding
      drivers/net/usb/ax88179_178a.c
  * net: increment xmit_recursion level in dev_direct_xmit()
      net/core/dev.c
      net/core/sock.c
  * net: use correct this_cpu primitive in dev_recursion_level
      include/linux/netdevice.h
  * net: place xmit recursion in softnet data
      include/linux/netdevice.h
      net/core/dev.c
      net/core/filter.c
  * net: fix memleak in register_netdevice()
      net/core/dev.c
  * net: bridge: enfore alignment for ethernet address
      net/bridge/br_private.h
  * mld: fix memory leak in ipv6_mc_destroy_dev()
      net/ipv6/mcast.c
    ibmveth: Fix max MTU limit
    apparmor: don't try to replace stale label in ptraceme check
    ALSA: hda/realtek - Enable micmute LED on and HP system
    ALSA: hda/realtek: Enable mute LED on an HP system
    ALSA: hda/realtek - Enable the headset of ASUS B9450FA with ALC294
    fix a braino in "sparc32: fix register window handling in genregs32_[gs]et()"
    i2c: tegra: Fix Maximum transfer size
    i2c: tegra: Add missing kerneldoc for some fields
    i2c: tegra: Cleanup kerneldoc comments
    EDAC/amd64: Add Family 17h Model 30h PCI IDs
  * net: sched: export __netdev_watchdog_up()
      net/sched/sch_generic.c
    net: bcmgenet: remove HFB_CTRL access
    mtd: rawnand: marvell: Fix the condition on a return code
    fanotify: fix ignore mask logic for events on child and on dir
    block/bio-integrity: don't free 'buf' if bio_integrity_add_page() failed
  * net: be more gentle about silly gso requests coming from user
      include/linux/virtio_net.h
  * ANDROID: lib/vdso: do not update timespec if clock_getres() fails
      lib/vdso/gettimeofday.c
  * Revert "ANDROID: fscrypt: add key removal notifier chain"
      fs/crypto/keyring.c
      include/linux/fscrypt.h
    ANDROID: update the ABI xml and qcom whitelist
  * ANDROID: fs: export vfs_{read|write}
      fs/read_write.c
    ANDROID: GKI: update abi definitions now that sdcardfs is gone
  * Revert "ANDROID: sdcardfs: Enable modular sdcardfs"
      fs/fs_struct.c
      fs/read_write.c
      security/security.c
  * Revert "ANDROID: vfs: Add setattr2 for filesystems with per mount permissions"
      fs/attr.c
      fs/coredump.c
      fs/inode.c
      fs/namei.c
      fs/open.c
      fs/utimes.c
      include/linux/fs.h
  * Revert "ANDROID: vfs: fix export symbol type"
      fs/attr.c
  * Revert "ANDROID: vfs: Add permission2 for filesystems with per mount permissions"
      fs/attr.c
      fs/exec.c
      fs/namei.c
      fs/notify/inotify/inotify_user.c
      fs/open.c
      fs/xattr.c
      include/linux/fs.h
      include/linux/namei.h
  * Revert "ANDROID: vfs: fix export symbol types"
      fs/namei.c
  * Revert "ANDROID: vfs: add d_canonical_path for stacked filesystem support"
      fs/notify/inotify/inotify_user.c
      include/linux/dcache.h
      include/linux/fsnotify.h
  * Revert "ANDROID: fs: Restore vfs_path_lookup() export"
      fs/internal.h
      include/linux/namei.h
  * ANDROID: sdcardfs: remove sdcardfs from system
      fs/Kconfig
      fs/Makefile
  * Revert "ALSA: usb-audio: Improve frames size computation"
      sound/usb/card.h
      sound/usb/endpoint.c
      sound/usb/endpoint.h
      sound/usb/pcm.c
    Merge 4.19.130 into android-4.19-stable
  * ANDROID: Makefile: append BUILD_NUMBER to version string when defined
      Makefile
    ANDROID: GKI: Update ABI for incremental fs
    ANDROID: GKI: Update cuttlefish whitelist
    ANDROID: GKI: Disable INCREMENTAL_FS on x86 too
  * ANDROID: cpufreq: schedutil: drop cache when update skipped due to rate limit
      kernel/sched/cpufreq_schedutil.c
Linux 4.19.130
    KVM: x86/mmu: Set mmio_value to '0' if reserved #PF can't be generated
    kvm: x86: Fix reserved bits related calculation errors caused by MKTME
    kvm: x86: Move kvm_set_mmio_spte_mask() from x86.c to mmu.c
  * md: add feature flag MD_FEATURE_RAID0_LAYOUT
      include/uapi/linux/raid/md_p.h
    Revert "dpaa_eth: fix usage as DSA master, try 3"
  * net: core: device_rename: Use rwsem instead of a seqcount
      net/core/dev.c
  * sched/rt, net: Use CONFIG_PREEMPTION.patch
      net/core/dev.c
  * kretprobe: Prevent triggering kretprobe from within kprobe_flush_task
      include/linux/kprobes.h
    net: octeon: mgmt: Repair filling of RX ring
    e1000e: Do not wake up the system via WOL if device wakeup is disabled
    kprobes: Fix to protect kick_kprobe_optimizer() by kprobe_mutex
  * crypto: algboss - don't wait during notifier callback
      crypto/algboss.c
    crypto: algif_skcipher - Cap recv SG list at ctx->used
    drm/i915/icl+: Fix hotplug interrupt disabling after storm detection
    drm/i915: Whitelist context-local timestamp in the gen9 cmdparser
    s390: fix syscall_get_error for compat processes
    mtd: rawnand: tmio: Fix the probe error path
    mtd: rawnand: mtk: Fix the probe error path
    mtd: rawnand: plat_nand: Fix the probe error path
    mtd: rawnand: socrates: Fix the probe error path
    mtd: rawnand: oxnas: Fix the probe error path
    mtd: rawnand: oxnas: Add of_node_put()
    mtd: rawnand: orion: Fix the probe error path
    mtd: rawnand: xway: Fix the probe error path
    mtd: rawnand: sharpsl: Fix the probe error path
    mtd: rawnand: diskonchip: Fix the probe error path
  * mtd: rawnand: Pass a nand_chip object to nand_release()
      include/linux/mtd/rawnand.h
  * mtd: rawnand: Pass a nand_chip object to nand_scan()
      include/linux/mtd/rawnand.h
  * block: nr_sects_write(): Disable preemption on seqcount write
      include/linux/genhd.h
    x86/boot/compressed: Relax sed symbol type regex for LLVM ld.lld
  * drm/dp_mst: Increase ACT retry timeout to 3s
      drivers/gpu/drm/drm_dp_mst_topology.c
  * ext4: avoid race conditions when remounting with options that change dax
      fs/ext4/super.c
  * ext4: fix partial cluster initialization when splitting extent
      fs/ext4/extents.c
  * selinux: fix double free
      security/selinux/ss/services.c
    drm/amdgpu: Replace invalid device ID with a valid device ID
    drm/qxl: Use correct notify port address when creating cursor ring
  * drm/dp_mst: Reformat drm_dp_check_act_status() a bit
      drivers/gpu/drm/drm_dp_mst_topology.c
  * drm: encoder_slave: fix refcouting error for modules
      drivers/gpu/drm/drm_encoder_slave.c
  * libata: Use per port sync for detach
      include/linux/libata.h
  * arm64: hw_breakpoint: Don't invoke overflow handler on uaccess watchpoints
      arch/arm64/kernel/hw_breakpoint.c
  * block: Fix use-after-free in blkdev_get()
      fs/block_dev.c
    afs: afs_write_end() should change i_size under the right lock
    afs: Fix non-setting of mtime when writing into mmap
    bcache: fix potential deadlock problem in btree_gc_coalesce
  * ext4: stop overwrite the errcode in ext4_setup_super
      fs/ext4/super.c
    perf report: Fix NULL pointer dereference in hists__fprintf_nr_sample_events()
  * usb/ehci-platform: Set PM runtime as active on resume
      drivers/usb/host/ehci-platform.c
  * usb: host: ehci-platform: add a quirk to avoid stuck
      drivers/usb/host/ehci-platform.c
      include/linux/usb/ehci_def.h
  * usb/xhci-plat: Set PM runtime as active on resume
      drivers/usb/host/xhci-plat.c
    xdp: Fix xsk_generic_xmit errno
  * net/filter: Permit reading NET in load_bytes_relative when MAC not set
      net/core/filter.c
    x86/idt: Keep spurious entries unset in system_vectors
    scsi: acornscsi: Fix an error handling path in acornscsi_probe()
    drm/sun4i: hdmi ddc clk: Fix size of m divider
    ASoC: rt5645: Add platform-data for Asus T101HA
    ASoC: Intel: bytcr_rt5640: Add quirk for Toshiba Encore WT10-A tablet
  * ASoC: core: only convert non DPCM link to DPCM link
      sound/soc/soc-core.c
    afs: Fix memory leak in afs_put_sysnames()
    selftests/net: in timestamping, strncpy needs to preserve null byte
    drivers/perf: hisi: Fix wrong value for all counters enable
    NTB: ntb_test: Fix bug when counting remote files
    NTB: perf: Fix race condition when run with ntb_test
    NTB: perf: Fix support for hardware that doesn't have port numbers
    NTB: perf: Don't require one more memory window than number of peers
    NTB: Revert the change to use the NTB device dev for DMA allocations
    NTB: ntb_tool: reading the link file should not end in a NULL byte
    ntb_tool: pass correct struct device to dma_alloc_coherent
    ntb_perf: pass correct struct device to dma_alloc_coherent
    gfs2: fix use-after-free on transaction ail lists
  * blktrace: fix endianness for blk_log_remap()
      kernel/trace/blktrace.c
  * blktrace: fix endianness in get_pdu_int()
      kernel/trace/blktrace.c
  * blktrace: use errno instead of bi_status
      kernel/trace/blktrace.c
    selftests/vm/pkeys: fix alloc_random_pkey() to make it really random
  * elfnote: mark all .note sections SHF_ALLOC
      include/linux/elfnote.h
  * include/linux/bitops.h: avoid clang shift-count-overflow warnings
      include/linux/bitops.h
  * lib/zlib: remove outdated and incorrect pre-increment optimization
      lib/zlib_inflate/inffast.c
    geneve: change from tx_error to tx_dropped on missing metadata
    crypto: omap-sham - add proper load balancing support for multicore
    pinctrl: freescale: imx: Fix an error handling path in 'imx_pinctrl_probe()'
    pinctrl: imxl: Fix an error handling path in 'imx1_pinctrl_core_probe()'
  * scsi: ufs: Don't update urgent bkops level when toggling auto bkops
      drivers/scsi/ufs/ufshcd.c
    scsi: iscsi: Fix reference count leak in iscsi_boot_create_kobj
    gfs2: Allow lock_nolock mount to specify jid=X
    openrisc: Fix issue with argument clobbering for clone/fork
    rxrpc: Adjust /proc/net/rxrpc/calls to display call->debug_id not user_ID
    vfio/mdev: Fix reference count leak in add_mdev_supported_type
    ASoC: fsl_asrc_dma: Fix dma_chan leak when config DMA channel failed
    extcon: adc-jack: Fix an error handling path in 'adc_jack_probe()'
    powerpc/4xx: Don't unmap NULL mbase
  * of: Fix a refcounting bug in __of_attach_node_sysfs()
      drivers/of/kobj.c
    NFSv4.1 fix rpc_call_done assignment for BIND_CONN_TO_SESSION
    net: sunrpc: Fix off-by-one issues in 'rpc_ntop6'
    clk: sprd: return correct type of value for _sprd_pll_recalc_rate
    KVM: PPC: Book3S HV: Ignore kmemleak false positives
  * scsi: ufs-qcom: Fix scheduling while atomic issue
      drivers/scsi/ufs/ufs-qcom.c
    clk: bcm2835: Fix return type of bcm2835_register_gate
    scsi: target: tcmu: Fix a use after free in tcmu_check_expired_queue_cmd()
    ASoC: fix incomplete error-handling in img_i2s_in_probe.
    x86/apic: Make TSC deadline timer detection message visible
    RDMA/iw_cxgb4: cleanup device debugfs entries on ULD remove
  * usb: gadget: Fix issue with config_ep_by_speed function
      drivers/usb/gadget/composite.c
      include/linux/usb/composite.h
    usb: gadget: fix potential double-free in m66592_probe.
    usb: gadget: lpc32xx_udc: don't dereference ep pointer before null check
    USB: gadget: udc: s3c2410_udc: Remove pointless NULL check in s3c2410_udc_nuke
    usb: dwc2: gadget: move gadget resume after the core is in L0 state
    watchdog: da9062: No need to ping manually before setting timeout
    IB/cma: Fix ports memory leak in cma_configfs
    PCI: dwc: Fix inner MSI IRQ domain registration
    PCI/PTM: Inherit Switch Downstream Port PTM settings from Upstream Port
    dm zoned: return NULL if dmz_get_zone_for_reclaim() fails to find a zone
    powerpc/64s/pgtable: fix an undefined behaviour
    arm64: tegra: Fix ethernet phy-mode for Jetson Xavier
    scsi: target: tcmu: Userspace must not complete queued commands
    clk: samsung: exynos5433: Add IGNORE_UNUSED flag to sclk_i2s1
    fpga: dfl: afu: Corrected error handling levels
    tty: n_gsm: Fix bogus i++ in gsm_data_kick
    USB: host: ehci-mxc: Add error handling in ehci_mxc_drv_probe()
    ASoC: Intel: bytcr_rt5640: Add quirk for Toshiba Encore WT8-A tablet
    drm/msm/mdp5: Fix mdp5_init error path for failed mdp5_kms allocation
  * usb/ohci-platform: Fix a warning when hibernating
      drivers/usb/host/ohci-platform.c
    vfio-pci: Mask cap zero
    powerpc/ps3: Fix kexec shutdown hang
    powerpc/pseries/ras: Fix FWNMI_VALID off by one
    ipmi: use vzalloc instead of kmalloc for user creation
  * HID: Add quirks for Trust Panora Graphic Tablet
      drivers/hid/hid-ids.h
      drivers/hid/hid-quirks.c
    tty: n_gsm: Fix waking up upper tty layer when room available
    tty: n_gsm: Fix SOF skipping
    powerpc/64: Don't initialise init_task->thread.regs
  * PCI: Fix pci_register_host_bridge() device_register() error handling
      drivers/pci/probe.c
    clk: ti: composite: fix memory leak
    dlm: remove BUG() before panic()
    pinctrl: rockchip: fix memleak in rockchip_dt_node_to_map
    scsi: mpt3sas: Fix double free warnings
    power: supply: smb347-charger: IRQSTAT_D is volatile
    power: supply: lp8788: Fix an error handling path in 'lp8788_charger_probe()'
    scsi: qla2xxx: Fix warning after FC target reset
    PCI/ASPM: Allow ASPM on links to PCIe-to-PCI/PCI-X Bridges
    PCI: rcar: Fix incorrect programming of OB windows
  * drivers: base: Fix NULL pointer exception in __platform_driver_probe() if a driver developer is foolish
      drivers/base/platform.c
    serial: amba-pl011: Make sure we initialize the port.lock spinlock
    i2c: pxa: fix i2c_pxa_scream_blue_murder() debug output
    PCI: v3-semi: Fix a memory leak in v3_pci_probe() error handling paths
    staging: sm750fb: add missing case while setting FB_VISUAL
  * usb: dwc3: gadget: Properly handle failed kick_transfer
      drivers/usb/dwc3/gadget.c
    thermal/drivers/ti-soc-thermal: Avoid dereferencing ERR_PTR
    slimbus: ngd: get drvdata from correct device
    tty: hvc: Fix data abort due to race in hvc_open
    s390/qdio: put thinint indicator after early error
  * ALSA: usb-audio: Fix racy list management in output queue
      sound/usb/endpoint.c
  * ALSA: usb-audio: Improve frames size computation
      sound/usb/card.h
      sound/usb/endpoint.c
      sound/usb/endpoint.h
      sound/usb/pcm.c
    staging: gasket: Fix mapping refcnt leak when register/store fails
    staging: gasket: Fix mapping refcnt leak when put attribute fails
  * firmware: qcom_scm: fix bogous abuse of dma-direct internals
      drivers/firmware/qcom_scm.c
    pinctrl: rza1: Fix wrong array assignment of rza1l_swio_entries
    scsi: qedf: Fix crash when MFW calls for protocol stats while function is still probing
    gpio: dwapb: Append MODULE_ALIAS for platform driver
    ARM: dts: sun8i-h2-plus-bananapi-m2-zero: Fix led polarity
    scsi: qedi: Do not flush offload work if ARP not resolved
    arm64: dts: mt8173: fix unit name warnings
    staging: greybus: fix a missing-check bug in gb_lights_light_config()
    x86/purgatory: Disable various profiling and sanitizing options
    apparmor: fix nnp subset test for unconfined
    scsi: ibmvscsi: Don't send host info in adapter info MAD after LPM
    scsi: sr: Fix sr_probe() missing deallocate of device minor
    ASoC: meson: add missing free_irq() in error path
    apparmor: check/put label on apparmor_sk_clone_security()
    apparmor: fix introspection of of task mode for unconfined tasks
  * mksysmap: Fix the mismatch of '.L' symbols in System.map
      scripts/mksysmap
    NTB: Fix the default port and peer numbers for legacy drivers
    NTB: ntb_pingpong: Choose doorbells based on port number
    yam: fix possible memory leak in yam_init_driver
    pwm: img: Call pm_runtime_put() in pm_runtime_get_sync() failed case
    powerpc/crashkernel: Take "mem=" option into account
    PCI: vmd: Filter resource type bits from shadow register
    nfsd: Fix svc_xprt refcnt leak when setup callback client failed
    powerpc/perf/hv-24x7: Fix inconsistent output values incase multiple hv-24x7 events run
    clk: clk-flexgen: fix clock-critical handling
    scsi: lpfc: Fix lpfc_nodelist leak when processing unsolicited event
    mfd: wm8994: Fix driver operation if loaded as modules
    gpio: dwapb: Call acpi_gpiochip_free_interrupts() on GPIO chip de-registration
    m68k/PCI: Fix a memory leak in an error handling path
    RDMA/mlx5: Add init2init as a modify command
    vfio/pci: fix memory leaks in alloc_perm_bits()
    ps3disk: use the default segment boundary
    PCI: aardvark: Don't blindly enable ASPM L0s and don't write to read-only register
    dm mpath: switch paths in dm_blk_ioctl() code path
    serial: 8250: Fix max baud limit in generic 8250 port
    usblp: poison URBs upon disconnect
    clk: samsung: Mark top ISP and CAM clocks on Exynos542x as critical
    i2c: pxa: clear all master action bits in i2c_pxa_stop_message()
  * f2fs: report delalloc reserve as non-free in statfs for project quota
      fs/f2fs/super.c
    iio: bmp280: fix compensation of humidity
    scsi: qla2xxx: Fix issue with adapter's stopping state
  * PCI: Allow pci_resize_resource() for devices on root bus
      drivers/pci/setup-res.c
    ALSA: isa/wavefront: prevent out of bounds write in ioctl
    ALSA: hda/realtek - Introduce polarity for micmute LED GPIO
    scsi: qedi: Check for buffer overflow in qedi_set_path()
    ARM: integrator: Add some Kconfig selections
    ASoC: davinci-mcasp: Fix dma_chan refcnt leak when getting dma type
    backlight: lp855x: Ensure regulators are disabled on probe failure
    clk: qcom: msm8916: Fix the address location of pll->config_reg
    remoteproc: Fix IDR initialisation in rproc_alloc()
    iio: pressure: bmp280: Tolerate IRQ before registering
    i2c: piix4: Detect secondary SMBus controller on AMD AM4 chipsets
    ASoC: tegra: tegra_wm8903: Support nvidia, headset property
    clk: sunxi: Fix incorrect usage of round_down()
  * power: supply: bq24257_charger: Replace depends on REGMAP_I2C with select
      drivers/power/supply/Kconfig
  * ANDROID: ext4: Optimize match for casefolded encrypted dirs
      fs/ext4/ext4.h
      fs/ext4/namei.c
  * ANDROID: ext4: Handle casefolding with encryption
      fs/ext4/dir.c
      fs/ext4/ext4.h
      fs/ext4/hash.c
      fs/ext4/ialloc.c
      fs/ext4/inline.c
      fs/ext4/namei.c
      fs/ext4/super.c
    Merge remote-tracking branch 'aosp/upstream-f2fs-stable-linux-4.19.y' into android-4.19-stable
  * ANDROID: extcon: Remove redundant EXPORT_SYMBOL_GPL
      include/linux/extcon.h
    ANDROID: update the ABI xml representation
  * ANDROID: GKI: cfg80211: add ABI changes for CONFIG_NL80211_TESTMODE
      include/net/cfg80211.h
      include/net/mac80211.h
    ANDROID: gki_defconfig: x86: Enable KERNEL_LZ4
  * ANDROID: GKI: scripts: Makefile: update the lz4 command
      scripts/Makefile.lib
  * FROMLIST: f2fs: fix use-after-free when accessing bio->bi_crypt_context
      fs/f2fs/data.c
    Merge remote-tracking branch 'aosp/upstream-f2fs-stable-linux-4.19.y' into android-4.19-stable
  * UPSTREAM: fdt: Update CRC check for rng-seed
      drivers/of/fdt.c
    ANDROID: GKI: Update ABI for incremental fs
    ANDROID: GKI: Update whitelist and defconfig for incfs
    ANDROID: Use depmod from the hermetic toolchain
    Merge 4.19.129 into android-4.19-stable
Linux 4.19.129
    perf symbols: Fix debuginfo search for Ubuntu
    perf probe: Check address correctness by map instead of _etext
    perf probe: Fix to check blacklist address correctly
    perf probe: Do not show the skipped events
    w1: omap-hdq: cleanup to add missing newline for some dev_dbg
    mtd: rawnand: pasemi: Fix the probe error path
    mtd: rawnand: brcmnand: fix hamming oob layout
  * sunrpc: clean up properly in gss_mech_unregister()
      include/linux/sunrpc/gss_api.h
      include/linux/sunrpc/svcauth_gss.h
    sunrpc: svcauth_gss_register_pseudoflavor must reject duplicate registrations.
  * kbuild: force to build vmlinux if CONFIG_MODVERSION=y
      Makefile
    powerpc/64s: Save FSCR to init_task.thread.fscr after feature init
    powerpc/64s: Don't let DT CPU features set FSCR_DSCR
    drivers/macintosh: Fix memleak in windfarm_pm112 driver
    ARM: dts: s5pv210: Set keep-power-in-suspend for SDHCI1 on Aries
    ARM: dts: at91: sama5d2_ptc_ek: fix vbus pin
    ARM: dts: exynos: Fix GPIO polarity for thr GalaxyS3 CM36651 sensor's bus
    ARM: tegra: Correct PL310 Auxiliary Control Register initialization
  * kernel/cpu_pm: Fix uninitted local in cpu_pm
      kernel/cpu_pm.c
    alpha: fix memory barriers so that they conform to the specification
    dm crypt: avoid truncating the logical block size
    sparc64: fix misuses of access_process_vm() in genregs32_[sg]et()
    sparc32: fix register window handling in genregs32_[gs]et()
    gnss: sirf: fix error return code in sirf_probe()
    pinctrl: samsung: Save/restore eint_mask over suspend for EINT_TYPE GPIOs
    pinctrl: samsung: Correct setting of eint wakeup mask on s5pv210
    power: vexpress: add suppress_bind_attrs to true
    igb: Report speed and duplex as unknown when device is runtime suspended
    media: ov5640: fix use of destroyed mutex
    b43_legacy: Fix connection problem with WPA3
    b43: Fix connection problem with WPA3
    b43legacy: Fix case where channel status is corrupted
    Bluetooth: hci_bcm: fix freeing not-requested IRQ
    media: go7007: fix a miss of snd_card_free
    carl9170: remove P2P_GO support
    e1000e: Relax condition to trigger reset for ME workaround
    e1000e: Disable TSO for buffer overrun workaround
  * PCI: Program MPS for RCiEP devices
      drivers/pci/probe.c
    ima: Call ima_calc_boot_aggregate() in ima_eventdigest_init()
    btrfs: fix wrong file range cleanup after an error filling dealloc range
    btrfs: fix error handling when submitting direct I/O bio
  * PCI: Generalize multi-function power dependency device links
      drivers/pci/quirks.c
  * PCI: Unify ACS quirk desired vs provided checking
      drivers/pci/quirks.c
  * PCI: Make ACS quirk implementations more uniform
      drivers/pci/quirks.c
  * serial: 8250_pci: Move Pericom IDs to pci_ids.h
      include/linux/pci_ids.h
  * PCI: Add Loongson vendor ID
      include/linux/pci_ids.h
  * x86/amd_nb: Add Family 19h PCI IDs
      include/linux/pci_ids.h
  * PCI: vmd: Add device id for VMD device 8086:9A0B
      include/linux/pci_ids.h
  * PCI: Add Amazon's Annapurna Labs vendor ID
      include/linux/pci_ids.h
  * PCI: Add Genesys Logic, Inc. Vendor ID
      include/linux/pci_ids.h
  * ALSA: lx6464es - add support for LX6464ESe pci express variant
      include/linux/pci_ids.h
  * x86/amd_nb: Add PCI device IDs for family 17h, model 70h
      include/linux/pci_ids.h
  * PCI: mediatek: Add controller support for MT7629
      include/linux/pci_ids.h
  * PCI: Enable NVIDIA HDA controllers
      drivers/pci/quirks.c
      include/linux/pci_ids.h
  * PCI: Add NVIDIA GPU multi-function power dependencies
      drivers/pci/quirks.c
  * PCI: Add Synopsys endpoint EDDA Device ID
      include/linux/pci_ids.h
    misc: pci_endpoint_test: Add support to test PCI EP in AM654x
    misc: pci_endpoint_test: Add the layerscape EP device support
  * PCI: Move Rohm Vendor ID to generic list
      include/linux/pci_ids.h
  * PCI: Move Synopsys HAPS platform device IDs
      drivers/usb/dwc3/dwc3-haps.c
      include/linux/pci_ids.h
  * PCI: add USR vendor id and use it in r8169 and w6692 driver
      include/linux/pci_ids.h
  * x86/amd_nb: Add PCI device IDs for family 17h, model 30h
      include/linux/pci_ids.h
  * hwmon/k10temp, x86/amd_nb: Consolidate shared device IDs
      include/linux/pci_ids.h
  * pci:ipmi: Move IPMI PCI class id defines to pci_ids.h
      include/linux/pci_ids.h
  * PCI: Remove unused NFP32xx IDs
      include/linux/pci_ids.h
  * PCI: Add ACS quirk for Intel Root Complex Integrated Endpoints
      drivers/pci/quirks.c
  * PCI: Add ACS quirk for iProc PAXB
      drivers/pci/quirks.c
  * PCI: Avoid FLR for AMD Starship USB 3.0
      drivers/pci/quirks.c
  * PCI: Avoid FLR for AMD Matisse HD Audio & USB 3.0
      drivers/pci/quirks.c
  * PCI: Avoid Pericom USB controller OHCI/EHCI PME# defect
      drivers/pci/quirks.c
  * ext4: fix race between ext4_sync_parent() and rename()
      fs/ext4/fsync.c
  * ext4: fix error pointer dereference
      fs/ext4/xattr.c
  * ext4: fix EXT_MAX_EXTENT/INDEX to check for zeroed eh_max
      fs/ext4/ext4_extents.h
    evm: Fix possible memory leak in evm_calc_hmac_or_hash()
    ima: Directly assign the ima_default_policy pointer to ima_rules
    ima: Fix ima digest hash table key calculation
  * mm: initialize deferred pages with interrupts enabled
      include/linux/mmzone.h
      mm/page_alloc.c
    mm: thp: make the THP mapcount atomic against __split_huge_pmd_locked()
    btrfs: send: emit file capabilities after chown
    btrfs: include non-missing as a qualifier for the latest_bdev
  * string.h: fix incompatibility between FORTIFY_SOURCE and KASAN
      include/linux/string.h
    platform/x86: intel-vbtn: Only blacklist SW_TABLET_MODE on the 9 / "Laptop" chasis-type
    platform/x86: intel-hid: Add a quirk to support HP Spectre X2 (2015)
    platform/x86: hp-wmi: Convert simple_strtoul() to kstrtou32()
  * cpuidle: Fix three reference count leaks
      drivers/cpuidle/sysfs.c
    spi: dw: Return any value retrieved from the dma_transfer callback
    mmc: sdhci-esdhc-imx: fix the mask for tuning start point
    ixgbe: fix signed-integer-overflow warning
    mmc: via-sdmmc: Respect the cmd->busy_timeout from the mmc core
    staging: greybus: sdio: Respect the cmd->busy_timeout from the mmc core
    mmc: sdhci-msm: Set SDHCI_QUIRK_MULTIBLOCK_READ_ACMD12 quirk
    bcache: fix refcount underflow in bcache_device_free()
    MIPS: Fix IRQ tracing when call handle_fpe() and handle_msa_fpe()
  * PCI: Don't disable decoding when mmio_always_on is set
      drivers/pci/probe.c
    macvlan: Skip loopback packets in RX handler
    btrfs: qgroup: mark qgroup inconsistent if we're inherting snapshot to a new qgroup
    m68k: mac: Don't call via_flush_cache() on Mac IIfx
    x86/mm: Stop printing BRK addresses
    crypto: stm32/crc32 - fix multi-instance
    crypto: stm32/crc32 - fix run-time self test issue.
    crypto: stm32/crc32 - fix ext4 chksum BUG_ON()
    mips: Add udelay lpj numbers adjustment
    mips: MAAR: Use more precise address mask
    x86/boot: Correct relocation destination on old linkers
    mwifiex: Fix memory corruption in dump_station
    rtlwifi: Fix a double free in _rtl_usb_tx_urb_setup()
    net/mlx5e: IPoIB, Drop multicast packets that this interface sent
  * veth: Adjust hard_start offset on redirect XDP frames
      drivers/net/veth.c
    md: don't flush workqueue unconditionally in md_open
    mt76: avoid rx reorder buffer overflow
    net: qed*: Reduce RX and TX default ring count when running inside kdump kernel
    wcn36xx: Fix error handling path in 'wcn36xx_probe()'
    ath10k: Remove msdu from idr when management pkt send fails
    nvme: refine the Qemu Identify CNS quirk
    platform/x86: intel-vbtn: Also handle tablet-mode switch on "Detachable" and "Portable" chassis-types
    platform/x86: intel-vbtn: Do not advertise switches to userspace if they are not there
    platform/x86: intel-vbtn: Split keymap into buttons and switches parts
    platform/x86: intel-vbtn: Use acpi_evaluate_integer()
    xfs: fix duplicate verification from xfs_qm_dqflush()
    xfs: reset buffer write failure state on successful completion
  * kgdb: Fix spurious true from in_dbg_master()
      include/linux/kgdb.h
    mips: cm: Fix an invalid error code of INTVN_*_ERR
    MIPS: Truncate link address into 32bit for 32bit kernel
    Crypto/chcr: fix for ccm(aes) failed test
    xfs: clean up the error handling in xfs_swap_extents
    powerpc/spufs: fix copy_to_user while atomic
    net: allwinner: Fix use correct return type for ndo_start_xmit()
    media: cec: silence shift wrapping warning in __cec_s_log_addrs()
    net: lpc-enet: fix error return code in lpc_mii_init()
    drivers/perf: hisi: Fix typo in events attribute array
  * sched/core: Fix illegal RCU from offline CPUs
      include/linux/sched/mm.h
      kernel/cpu.c
      kernel/sched/core.c
  * exit: Move preemption fixup up, move blocking operations down
      kernel/exit.c
  * lib/mpi: Fix 64-bit MIPS build with Clang
      lib/mpi/longlong.h
    net: bcmgenet: set Rx mode before starting netif
    selftests/bpf: Fix memory leak in extract_build_id()
    netfilter: nft_nat: return EOPNOTSUPP if type or flags are not supported
  * audit: fix a net reference leak in audit_list_rules_send()
      kernel/audit.c
      kernel/audit.h
      kernel/auditfilter.c
    Bluetooth: btbcm: Add 2 missing models to subver tables
    MIPS: Make sparse_init() using top-down allocation
    media: platform: fcp: Set appropriate DMA parameters
    media: dvb: return -EREMOTEIO on i2c transfer failure.
  * audit: fix a net reference leak in audit_send_reply()
      kernel/audit.c
    dt-bindings: display: mediatek: control dpi pins mode to avoid leakage
    e1000: Distribute switch variables for initialization
    tools api fs: Make xxx__mountpoint() more scalable
    brcmfmac: fix wrong location to get firmware feature
  * staging: android: ion: use vmap instead of vm_map_ram
      drivers/staging/android/ion/ion_heap.c
    net: vmxnet3: fix possible buffer overflow caused by bad DMA value in vmxnet3_get_rss()
  * x86/kvm/hyper-v: Explicitly align hcall param for kvm_hyperv_exit
      include/uapi/linux/kvm.h
    spi: dw: Fix Rx-only DMA transfers
    mmc: meson-mx-sdio: trigger a soft reset after a timeout or CRC error
    batman-adv: Revert "disable ethtool link speed detection when auto negotiation off"
    ARM: 8978/1: mm: make act_mm() respect THREAD_SIZE
    btrfs: do not ignore error from btrfs_next_leaf() when inserting checksums
    clocksource: dw_apb_timer_of: Fix missing clockevent timers
    clocksource: dw_apb_timer: Make CPU-affiliation being optional
    spi: dw: Enable interrupts in accordance with DMA xfer mode
    kgdb: Prevent infinite recursive entries to the debugger
    kgdb: Disable WARN_CONSOLE_UNLOCKED for all kgdb
  * Bluetooth: Add SCO fallback for invalid LMP parameters error
      net/bluetooth/hci_event.c
    MIPS: Loongson: Build ATI Radeon GPU driver as module
    ixgbe: Fix XDP redirect on archs with PAGE_SIZE above 4K
  * arm64: insn: Fix two bugs in encoding 32-bit logical immediates
      arch/arm64/kernel/insn.c
    spi: dw: Zero DMA Tx and Rx configurations on stack
  * arm64: cacheflush: Fix KGDB trap detection
      arch/arm64/include/asm/cacheflush.h
    efi/libstub/x86: Work around LLVM ELF quirk build regression
    net: ena: fix error returning in ena_com_get_hash_function()
    net: atlantic: make hw_get_regs optional
    spi: pxa2xx: Apply CS clk quirk to BXT
    objtool: Ignore empty alternatives
    media: si2157: Better check for running tuner in init
  * crypto: ccp -- don't "select" CONFIG_DMADEVICES
      drivers/crypto/ccp/Kconfig
    drm: bridge: adv7511: Extend list of audio sample rates
    ACPI: GED: use correct trigger type field in _Exx / _Lxx handling
  * KVM: arm64: Synchronize sysreg state on injecting an AArch32 exception
      arch/arm64/include/asm/kvm_host.h
    xen/pvcalls-back: test for errors when calling backend_connect()
    mmc: sdio: Fix potential NULL pointer error in mmc_sdio_init_card()
    ARM: dts: at91: sama5d2_ptc_ek: fix sdmmc0 node description
    mmc: sdhci-msm: Clear tuning done flag while hs400 tuning
    agp/intel: Reinforce the barrier after GTT updates
  * perf: Add cond_resched() to task_function_call()
      kernel/events/core.c
  * fat: don't allow to mount if the FAT length == 0
      fs/fat/inode.c
  * mm/slub: fix a memory leak in sysfs_slab_add()
      mm/slub.c
    drm/vkms: Hold gem object while still in-use
  * Smack: slab-out-of-bounds in vsscanf
      security/smack/smackfs.c
    ath9k: Fix general protection fault in ath9k_hif_usb_rx_cb
    ath9x: Fix stack-out-of-bounds Write in ath9k_hif_usb_rx_cb
    ath9k: Fix use-after-free Write in ath9k_htc_rx_msg
    ath9k: Fix use-after-free Read in ath9k_wmi_ctrl_rx
    scsi: megaraid_sas: TM command refire leads to controller firmware crash
  * KVM: arm64: Make vcpu_cp1x() work on Big Endian hosts
      arch/arm64/include/asm/kvm_host.h
    KVM: MIPS: Fix VPN2_MASK definition for variable cpu_vmbits
    KVM: MIPS: Define KVM_ENTRYHI_ASID to cpu_asid_mask(&boot_cpu_data)
    KVM: nVMX: Consult only the "basic" exit reason when routing nested exit
    KVM: nSVM: leave ASID aside in copy_vmcb_control_area
    KVM: nSVM: fix condition for filtering async PF
    video: fbdev: w100fb: Fix a potential double free.
  * proc: Use new_inode not new_inode_pseudo
      fs/proc/inode.c
      fs/proc/self.c
      fs/proc/thread_self.c
  * ovl: initialize error in ovl_copy_xattr
      fs/overlayfs/copy_up.c
    selftests/net: in rxtimestamp getopt_long needs terminating null entry
    crypto: virtio: Fix dest length calculation in __virtio_crypto_skcipher_do_req()
    crypto: virtio: Fix src/dst scatterlist calculation in __virtio_crypto_skcipher_do_req()
    crypto: virtio: Fix use-after-free in virtio_crypto_skcipher_finalize_req()
    spi: pxa2xx: Fix runtime PM ref imbalance on probe error
    spi: pxa2xx: Balance runtime PM enable/disable on error
    spi: bcm2835: Fix controller unregister order
    spi: pxa2xx: Fix controller unregister order
  * spi: Fix controller unregister order
      drivers/spi/spi.c
  * spi: No need to assign dummy value in spi_unregister_controller()
      drivers/spi/spi.c
    x86/speculation: PR_SPEC_FORCE_DISABLE enforcement for indirect branches.
    x86/speculation: Avoid force-disabling IBPB based on STIBP and enhanced IBRS.
    x86/speculation: Add support for STIBP always-on preferred mode
    x86/speculation: Change misspelled STIPB to STIBP
    KVM: x86: only do L1TF workaround on affected processors
    KVM: x86/mmu: Consolidate "is MMIO SPTE" code
    kvm: x86: Fix L1TF mitigation for shadow MMU
  * KVM: x86: Fix APIC page invalidation race
      include/linux/kvm_host.h
  * x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned
      include/linux/set_memory.h
  * ALSA: pcm: disallow linking stream to itself
      sound/core/pcm_native.c
    crypto: cavium/nitrox - Fix 'nitrox_get_first_device()' when ndevlist is fully iterated
  * PM: runtime: clk: Fix clk_pm_runtime_get() error path
      drivers/clk/clk.c
    spi: bcm-qspi: when tx/rx buffer is NULL set to 0
    spi: bcm2835aux: Fix controller unregister order
    spi: dw: Fix controller unregister order
    nilfs2: fix null pointer dereference at nilfs_segctor_do_construct()
  * cgroup, blkcg: Prepare some symbols for module and !CONFIG_CGROUP usages
      fs/fs-writeback.c
    ACPI: PM: Avoid using power resources if there are none for D0
    ACPI: GED: add support for _Exx / _Lxx handler methods
    ACPI: CPPC: Fix reference count leak in acpi_cppc_processor_probe()
    ACPI: sysfs: Fix reference count leak in acpi_sysfs_add_hotplug_profile()
  * ALSA: usb-audio: Add vendor, product and profile name for HP Thunderbolt Dock
      sound/usb/quirks-table.h
  * ALSA: usb-audio: Fix inconsistent card PM state after resume
      sound/usb/card.c
      sound/usb/usbaudio.h
    ALSA: hda/realtek - add a pintbl quirk for several Lenovo machines
    ALSA: es1688: Add the missed snd_card_free()
    efi/efivars: Add missing kobject_put() in sysfs entry creation error path
    x86/reboot/quirks: Add MacBook6,1 reboot quirk
    x86/speculation: Prevent rogue cross-process SSBD shutdown
    x86/PCI: Mark Intel C620 MROMs as having non-compliant BARs
    x86_64: Fix jiffies ODR violation
    btrfs: tree-checker: Check level for leaves and nodes
  * aio: fix async fsync creds
      fs/aio.c
  * mm: add kvfree_sensitive() for freeing sensitive data objects
      include/linux/mm.h
      mm/util.c
      security/keys/internal.h
      security/keys/keyctl.c
    perf probe: Accept the instance number of kretprobe event
    x86/cpu/amd: Make erratum #1054 a legacy erratum
    RDMA/uverbs: Make the event_queue fds return POLLERR when disassociated
    ath9k_htc: Silence undersized packet warnings
    powerpc/xive: Clear the page tables for the ESB IO mapping
    drivers/net/ibmvnic: Update VNIC protocol version reporting
    Input: synaptics - add a second working PNP_ID for Lenovo T470s
  * sched/fair: Don't NUMA balance for kthreads
      kernel/sched/fair.c
    ARM: 8977/1: ptrace: Fix mask for thumb breakpoint hook
    Input: mms114 - fix handling of mms345l
    crypto: talitos - fix ECB and CBC algs ivsize
    btrfs: Detect unbalanced tree with empty leaf before crashing btree operations
    btrfs: merge btrfs_find_device and find_device
  * lib: Reduce user_access_begin() boundaries in strncpy_from_user() and strnlen_user()
      lib/strncpy_from_user.c
      lib/strnlen_user.c
    x86: uaccess: Inhibit speculation past access_ok() in user_access_begin()
    arch/openrisc: Fix issues with access_ok()
    Fix 'acccess_ok()' on alpha and SH
  * make 'user_access_begin()' do 'access_ok()'
      include/linux/uaccess.h
      kernel/compat.c
      kernel/exit.c
      lib/strncpy_from_user.c
      lib/strnlen_user.c
    selftests: bpf: fix use of undeclared RET_IF macro
  * tun: correct header offsets in napi frags mode
      drivers/net/tun.c
    vxlan: Avoid infinite loop when suppressing NS messages with invalid options
  * bridge: Avoid infinite loop when suppressing NS messages with invalid options
      net/bridge/br_arp_nd_proxy.c
    net_failover: fixed rollback in net_failover_open()
  * ipv6: fix IPV6_ADDRFORM operation logic
      net/ipv6/ipv6_sockglue.c
  * writeback: Drop I_DIRTY_TIME_EXPIRE
      fs/ext4/inode.c
      fs/fs-writeback.c
      include/linux/fs.h
      include/trace/events/writeback.h
  * writeback: Fix sync livelock due to b_dirty_time processing
      fs/fs-writeback.c
      include/trace/events/writeback.h
  * writeback: Avoid skipping inode writeback
      fs/fs-writeback.c
      include/linux/fs.h
  * writeback: Protect inode->i_io_list with inode->i_lock
      fs/fs-writeback.c
  * Revert "writeback: Avoid skipping inode writeback"
      fs/fs-writeback.c
      include/linux/fs.h
    ANDROID: gki_defconfig: increase vbus_draw to 500mA
  * fscrypt: remove stale definition
      include/linux/fscrypt.h
  * fs-verity: remove unnecessary extern keywords
      fs/verity/fsverity_private.h
      include/linux/fsverity.h
  * fs-verity: fix all kerneldoc warnings
      fs/verity/enable.c
      fs/verity/fsverity_private.h
      fs/verity/measure.c
      fs/verity/open.c
      fs/verity/signature.c
      fs/verity/verify.c
      include/linux/fsverity.h
  * fscrypt: add support for IV_INO_LBLK_32 policies
      fs/crypto/crypto.c
      fs/crypto/fscrypt_private.h
      fs/crypto/keyring.c
      fs/crypto/keysetup.c
      fs/crypto/policy.c
      include/uapi/linux/fscrypt.h
  * fscrypt: make test_dummy_encryption use v2 by default
      fs/crypto/policy.c
  * fscrypt: support test_dummy_encryption=v2
      fs/crypto/keysetup.c
      fs/crypto/policy.c
      fs/ext4/ext4.h
      fs/ext4/super.c
      fs/ext4/sysfs.c
      fs/f2fs/f2fs.h
      fs/f2fs/super.c
      fs/f2fs/sysfs.c
      include/linux/fscrypt.h
  * fscrypt: add fscrypt_add_test_dummy_key()
      fs/crypto/fscrypt_private.h
      fs/crypto/keyring.c
  * linux/parser.h: add include guards
      include/linux/parser.h
  * fscrypt: remove unnecessary extern keywords
      fs/crypto/fscrypt_private.h
      include/linux/fscrypt.h
  * fscrypt: name all function parameters
      include/linux/fscrypt.h
  * fscrypt: fix all kerneldoc warnings
      fs/crypto/crypto.c
      fs/crypto/fname.c
      fs/crypto/fscrypt_private.h
      fs/crypto/hooks.c
      fs/crypto/keysetup.c
      fs/crypto/policy.c
      include/linux/fscrypt.h
    ANDROID: Update the ABI
  * ANDROID: GKI: power: power-supply: Add POWER_SUPPLY_PROP_CHARGER_STATUS property
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: add dev to usb_gsi_request
      include/linux/usb/gadget.h
  * ANDROID: GKI: dma-buf: add dent_count to dma_buf
      include/linux/dma-buf.h
    Merge remote-tracking branch 'aosp/upstream-f2fs-stable-linux-4.19.y' into android-4.19-stable
    ANDROID: Update the ABI xml and whitelist
    ANDROID: GKI: update whitelist
  * ANDROID: extcon: Export symbol of `extcon_get_edev_name`
      drivers/extcon/extcon.c
      include/linux/extcon.h
  * ANDROID: kbuild: merge more sections with LTO
      scripts/module-lto.lds.S
  * UPSTREAM: timekeeping/vsyscall: Update VDSO data unconditionally
      arch/arm64/include/asm/vdso/vsyscall.h
      include/asm-generic/vdso/vsyscall.h
      kernel/time/vsyscall.c
  * ANDROID: GKI: Revert "genetlink: disallow subscribing to unknown mcast groups"
      net/netlink/genetlink.c
  * BACKPORT: usb: musb: Add support for MediaTek musb controller
      drivers/usb/musb/Kconfig
    UPSTREAM: usb: musb: Add musb_clearb/w() interface
    UPSTREAM: usb: musb: Add noirq type of dma create interface
    UPSTREAM: usb: musb: Add get/set toggle hooks
    UPSTREAM: dt-bindings: usb: musb: Add support for MediaTek musb controller
    Merge 4.19.128 into android-4.19-stable
  * FROMGIT: driver core: Remove unnecessary is_fwnode_dev variable in device_add()
      drivers/base/core.c
  * FROMGIT: driver core: Remove check in driver_deferred_probe_force_trigger()
      drivers/base/dd.c
  * FROMGIT: of: platform: Batch fwnode parsing when adding all top level devices
      drivers/of/platform.c
  * FROMGIT: BACKPORT: driver core: fw_devlink: Add support for batching fwnode parsing
      drivers/base/base.h
      drivers/base/core.c
      drivers/base/dd.c
      include/linux/fwnode.h
  * BACKPORT: driver core: Look for waiting consumers only for a fwnode's primary device
      drivers/base/core.c
  * BACKPORT: driver core: Add device links from fwnode only for the primary device
      drivers/base/core.c
Linux 4.19.128
    Revert "net/mlx5: Annotate mutex destroy for root ns"
  * uprobes: ensure that uprobe->offset and ->ref_ctr_offset are properly aligned
      kernel/events/uprobes.c
    x86/speculation: Add Ivy Bridge to affected list
    x86/speculation: Add SRBDS vulnerability and mitigation documentation
  * x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation
      drivers/base/cpu.c
    x86/cpu: Add 'table' argument to cpu_matches()
  * x86/cpu: Add a steppings field to struct x86_cpu_id
      include/linux/mod_devicetable.h
  * nvmem: qfprom: remove incorrect write support
      drivers/nvmem/qfprom.c
    CDC-ACM: heed quirk also in error handling
    staging: rtl8712: Fix IEEE80211_ADDBA_PARAM_BUF_SIZE_MASK
    tty: hvc_console, fix crashes on parallel open/close
    vt: keyboard: avoid signed integer overflow in k_ascii
    usb: musb: Fix runtime PM imbalance on error
    usb: musb: start session in resume for host port
    iio: vcnl4000: Fix i2c swapped word reading.
    USB: serial: option: add Telit LE910C1-EUX compositions
    USB: serial: usb_wwan: do not resubmit rx urb on fatal errors
    USB: serial: qcserial: add DW5816e QDL support
  * net: check untrusted gso_size at kernel entry
      include/linux/virtio_net.h
    vsock: fix timeout in vsock_accept()
    NFC: st21nfca: add missed kfree_skb() in an error path
    net: usb: qmi_wwan: add Telit LE910C1-EUX composition
  * l2tp: do not use inet_hash()/inet_unhash()
      net/l2tp/l2tp_ip.c
      net/l2tp/l2tp_ip6.c
  * l2tp: add sk_family checks to l2tp_validate_socket
      net/l2tp/l2tp_core.c
  * devinet: fix memleak in inetdev_init()
      net/ipv4/devinet.c
  * Revert "ANDROID: Remove default y on BRIDGE_IGMP_SNOOPING"
      net/bridge/Kconfig
    ANDROID: Update the ABI xml and whitelist
    ANDROID: GKI: update whitelist
  * ANDROID: arch: arm64: vdso: export the symbols for time()
      arch/arm64/include/asm/vdso/compat_gettimeofday.h
      arch/arm64/include/asm/vdso/gettimeofday.h
      arch/arm64/kernel/vdso/vdso.lds.S
      arch/arm64/kernel/vdso/vgettimeofday.c
      arch/arm64/kernel/vdso32/vdso.lds.S
      arch/arm64/kernel/vdso32/vgettimeofday.c
  * ANDROID: Incremental fs: Remove dependency on PKCS7_MESSAGE_PARSER
      fs/incfs/Kconfig
      fs/incfs/integrity.c
    ANDROID: dm-bow: Add block_size option
  * f2fs: attach IO flags to the missing cases
      fs/f2fs/data.c
  * f2fs: add node_io_flag for bio flags likewise data_io_flag
      fs/f2fs/data.c
      fs/f2fs/f2fs.h
      fs/f2fs/sysfs.c
    f2fs: remove unused parameter of f2fs_put_rpages_mapping()
  * f2fs: handle readonly filesystem in f2fs_ioc_shutdown()
      fs/f2fs/file.c
  * f2fs: avoid utf8_strncasecmp() with unstable name
      fs/f2fs/dir.c
  * f2fs: don't return vmalloc() memory from f2fs_kmalloc()
      fs/f2fs/checkpoint.c
      fs/f2fs/f2fs.h
      fs/f2fs/node.c
      fs/f2fs/super.c
    ANDROID: GKI: set CONFIG_BLK_DEV_LOOP_MIN_COUNT to 16
  * ANDROID: Incremental fs: Cache successful hash calculations
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/vfs.c
  * ANDROID: Incremental fs: Fix four error-path bugs
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
    Merge 4.19.127 into android-4.19-stable
Linux 4.19.127
    net: smsc911x: Fix runtime PM imbalance on error
    net: ethernet: stmmac: Enable interface clocks on probe for IPQ806x
    net/ethernet/freescale: rework quiesce/activate for ucc_geth
    null_blk: return error for invalid zone size
    s390/mm: fix set_huge_pte_at() for empty ptes
  * drm/edid: Add Oculus Rift S to non-desktop list
      drivers/gpu/drm/drm_edid.c
    net: bmac: Fix read of MAC address from ROM
    x86/mmiotrace: Use cpumask_available() for cpumask_var_t variables
    i2c: altera: Fix race between xfer_msg and isr thread
    evm: Fix RCU list related warnings
    ARC: [plat-eznps]: Restrict to CONFIG_ISA_ARCOMPACT
    ARC: Fix ICCM & DCCM runtime size checks
    s390/ftrace: save traced function caller
    spi: dw: use "smp_mb()" to avoid sending spi data error
    powerpc/powernv: Avoid re-registration of imc debugfs directory
    scsi: hisi_sas: Check sas_port before using it
    drm/i915: fix port checks for MST support on gen >= 11
    airo: Fix read overflows sending packets
    net: dsa: mt7530: set CPU port to fallback mode
  * scsi: ufs: Release clock if DMA map fails
      drivers/scsi/ufs/ufshcd.c
  * mmc: fix compilation of user API
      include/uapi/linux/mmc/ioctl.h
    kernel/relay.c: handle alloc_percpu returning NULL in relay_open
    p54usb: add AirVasT USB stick device-id
    HID: i2c-hid: add Schneider SCL142ALM to descriptor override
  * HID: sony: Fix for broken buttons on DS3 USB dongles
      drivers/hid/hid-sony.c
  * mm: Fix mremap not considering huge pmd devmap
      mm/mremap.c
    libnvdimm: Fix endian conversion issues 
  * Revert "cgroup: Add memory barriers to plug cgroup_rstat_updated() race window"
      kernel/cgroup/rstat.c
  * f2fs: fix retry logic in f2fs_write_cache_pages()
      fs/f2fs/data.c
    ANDROID: Update ABI representation
    Merge 4.19.126 into android-4.19-stable
Linux 4.19.126
  * mm/vmalloc.c: don't dereference possible NULL pointer in __vunmap()
      mm/vmalloc.c
  * netfilter: nf_conntrack_pptp: fix compilation warning with W=1 build
      include/linux/netfilter/nf_conntrack_pptp.h
      net/netfilter/nf_conntrack_pptp.c
  * bonding: Fix reference count leak in bond_sysfs_slave_add.
      drivers/net/bonding/bond_sysfs_slave.c
    crypto: chelsio/chtls: properly set tp->lsndtime
    qlcnic: fix missing release in qlcnic_83xx_interrupt_test.
    xsk: Add overflow check for u64 division, stored into u32
    bnxt_en: Fix accumulation of bp->net_stats_prev.
    esp6: get the right proto for transport mode in esp6_gso_encap
  * netfilter: nf_conntrack_pptp: prevent buffer overflows in debug code
      include/linux/netfilter/nf_conntrack_pptp.h
      net/ipv4/netfilter/nf_nat_pptp.c
      net/netfilter/nf_conntrack_pptp.c
    netfilter: nfnetlink_cthelper: unbreak userspace helper support
    netfilter: ipset: Fix subcounter update skip
    netfilter: nft_reject_bridge: enable reject with bridge vlan
  * ip_vti: receive ipip packet by calling ip_tunnel_rcv
      net/ipv4/ip_vti.c
  * vti4: eliminated some duplicate code.
      net/ipv4/ip_vti.c
  * xfrm: fix error in comment
      include/uapi/linux/xfrm.h
  * xfrm: fix a NULL-ptr deref in xfrm_local_error
      net/xfrm/xfrm_output.c
  * xfrm: fix a warning in xfrm_policy_insert_list
      net/xfrm/xfrm_policy.c
  * xfrm interface: fix oops when deleting a x-netns interface
      net/xfrm/xfrm_interface.c
  * xfrm: call xfrm_output_gso when inner_protocol is set in xfrm_output
      net/xfrm/xfrm_output.c
  * xfrm: allow to accept packets with ipv6 NEXTHDR_HOP in xfrm_input
      net/xfrm/xfrm_input.c
    copy_xstate_to_kernel(): don't leave parts of destination uninitialized
    x86/dma: Fix max PFN arithmetic overflow on 32 bit systems
    mac80211: mesh: fix discovery timer re-arming issue / crash
  * RDMA/core: Fix double destruction of uobject
      include/rdma/uverbs_std_types.h
    mmc: core: Fix recursive locking issue in CQE recovery path
    parisc: Fix kernel panic in mem_init()
  * iommu: Fix reference count leak in iommu_group_alloc.
      drivers/iommu/iommu.c
  * include/asm-generic/topology.h: guard cpumask_of_node() macro argument
      include/asm-generic/topology.h
  * fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info()
      fs/binfmt_elf.c
  * mm: remove VM_BUG_ON(PageSlab()) from page_mapcount()
      include/linux/mm.h
    IB/ipoib: Fix double free of skb in case of multicast traffic in CM mode
    libceph: ignore pool overlay and cache logic on redirects
    ALSA: hda/realtek - Add new codec supported for ALC287
  * ALSA: usb-audio: Quirks for Gigabyte TRX40 Aorus Master onboard audio
      sound/usb/mixer_maps.c
      sound/usb/quirks-table.h
  * exec: Always set cap_ambient in cap_bprm_set_creds
      security/commoncap.c
  * ALSA: usb-audio: mixer: volume quirk for ESS Technology Asus USB DAC
      sound/usb/mixer.c
    ALSA: hda/realtek - Add a model for Thinkpad T570 without DAC workaround
  * ALSA: hwdep: fix a left shifting 1 by 31 UB bug
      sound/core/hwdep.c
    RDMA/pvrdma: Fix missing pci disable in pvrdma_pci_probe()
    mmc: block: Fix use-after-free issue for rpmb
    ARM: dts: bcm: HR2: Fix PPI interrupt types
    ARM: dts: bcm2835-rpi-zero-w: Fix led polarity
    ARM: dts/imx6q-bx50v3: Set display interface clock parents
    IB/qib: Call kobject_put() when kobject_init_and_add() fails
    gpio: exar: Fix bad handling for ida_simple_get error path
    ARM: uaccess: fix DACR mismatch with nested exceptions
    ARM: uaccess: integrate uaccess_save and uaccess_restore
    ARM: uaccess: consolidate uaccess asm to asm/uaccess-asm.h
    ARM: 8843/1: use unified assembler in headers
    ARM: 8970/1: decompressor: increase tag size
    Input: synaptics-rmi4 - fix error return code in rmi_driver_probe()
    Input: synaptics-rmi4 - really fix attn_data use-after-free
    Input: i8042 - add ThinkPad S230u to i8042 reset list
    Input: dlink-dir685-touchkeys - fix a typo in driver name
  * Input: xpad - add custom init packet for Xbox One S controllers
      drivers/input/joystick/xpad.c
  * Input: evdev - call input_flush_device() on release(), not flush()
      drivers/input/evdev.c
    Input: usbtouchscreen - add support for BonXeon TP
    samples: bpf: Fix build error
    cifs: Fix null pointer check in cifs_read
    riscv: stacktrace: Fix undefined reference to `walk_stackframe'
    IB/i40iw: Remove bogus call to netdev_master_upper_dev_get()
  * net: freescale: select CONFIG_FIXED_PHY where needed
      drivers/net/ethernet/freescale/Kconfig
      drivers/net/ethernet/freescale/dpaa/Kconfig
    usb: gadget: legacy: fix redundant initialization warnings
    usb: dwc3: pci: Enable extcon driver for Intel Merrifield
    cachefiles: Fix race between read_waiter and read_copier involving op->to_do
    gfs2: move privileged user check to gfs2_quota_lock_check
    net: microchip: encx24j600: add missed kthread_stop
  * ALSA: usb-audio: add mapping for ASRock TRX40 Creator
      sound/usb/mixer_maps.c
      sound/usb/quirks-table.h
    gpio: tegra: mask GPIO IRQs during IRQ shutdown
    ARM: dts: rockchip: fix pinctrl sub nodename for spi in rk322x.dtsi
    ARM: dts: rockchip: swap clock-names of gpu nodes
    arm64: dts: rockchip: swap interrupts interrupt-names rk3399 gpu node
    arm64: dts: rockchip: fix status for &gmac2phy in rk3328-evb.dts
    ARM: dts: rockchip: fix phy nodename for rk3228-evb
    mlxsw: spectrum: Fix use-after-free of split/unsplit/type_set in case reload fails
    net/mlx4_core: fix a memory leak bug.
    net: sun: fix missing release regions in cas_init_one().
    net/mlx5: Annotate mutex destroy for root ns
    net/mlx5e: Update netdev txq on completions during closure
  * sctp: Start shutdown on association restart if in SHUTDOWN-SENT state and socket is closed
      net/sctp/sm_statefuns.c
  * sctp: Don't add the shutdown timer if its already been added
      net/sctp/sm_sideeffect.c
  * r8152: support additional Microsoft Surface Ethernet Adapter variant
      drivers/net/usb/cdc_ether.c
      drivers/net/usb/r8152.c
  * net sched: fix reporting the first-time use timestamp
      include/net/act_api.h
  * net: revert "net: get rid of an signed integer overflow in ip_idents_reserve()"
      net/ipv4/route.c
  * net: qrtr: Fix passing invalid reference to qrtr_local_enqueue()
      net/qrtr/qrtr.c
  * net/mlx5: Add command entry handling completion
      include/linux/mlx5/driver.h
    net: ipip: fix wrong address family in init error path
  * net: inet_csk: Fix so_reuseport bind-address cache in tb->fast*
      net/ipv4/inet_connection_sock.c
  * __netif_receive_skb_core: pass skb by reference
      net/core/dev.c
    net: dsa: mt7530: fix roaming from DSA user ports
    dpaa_eth: fix usage as DSA master, try 3
    ax25: fix setsockopt(SO_BINDTODEVICE)
  * ANDROID: modules: fix lockprove warning
      kernel/module.c
    FROMGIT: USB: dummy-hcd: use configurable endpoint naming scheme
    UPSTREAM: usb: raw-gadget: fix null-ptr-deref when reenabling endpoints
    UPSTREAM: usb: raw-gadget: documentation updates
  * UPSTREAM: usb: raw-gadget: support stalling/halting/wedging endpoints
      include/uapi/linux/usb/raw_gadget.h
  * UPSTREAM: usb: raw-gadget: fix gadget endpoint selection
      include/uapi/linux/usb/raw_gadget.h
  * UPSTREAM: usb: raw-gadget: improve uapi headers comments
      include/uapi/linux/usb/raw_gadget.h
    UPSTREAM: usb: raw-gadget: fix return value of ep read ioctls
    UPSTREAM: usb: raw-gadget: fix raw_event_queue_fetch locking
    UPSTREAM: usb: raw-gadget: Fix copy_to/from_user() checks
  * f2fs: fix wrong discard space
      fs/f2fs/segment.c
    f2fs: compress: don't compress any datas after cp stop
  * f2fs: remove unneeded return value of __insert_discard_tree()
      fs/f2fs/segment.c
  * f2fs: fix wrong value of tracepoint parameter
      fs/f2fs/namei.c
  * f2fs: protect new segment allocation in expand_inode_data
      fs/f2fs/file.c
  * f2fs: code cleanup by removing ifdef macro surrounding
      fs/f2fs/file.c
      fs/f2fs/namei.c
      fs/f2fs/xattr.h
  * writeback: Avoid skipping inode writeback
      fs/fs-writeback.c
      include/linux/fs.h
    ANDROID: GKI: Update the ABI
    ANDROID: GKI: update whitelist
  * ANDROID: GKI: support mm_event for FS/IO/UFS path
      include/linux/blk_types.h
      include/linux/mm_event.h
      mm/mm_event.c
  * ANDROID: net: bpf: permit redirect from ingress L3 to egress L2 devices at near max mtu
      net/core/filter.c
  * FROMGIT: driver core: Update device link status correctly for SYNC_STATE_ONLY links
      drivers/base/core.c
  * UPSTREAM: driver core: Fix handling of SYNC_STATE_ONLY + STATELESS device links
      drivers/base/core.c
  * BACKPORT: driver core: Fix SYNC_STATE_ONLY device link implementation
      drivers/base/core.c
    ANDROID: Bulk update the ABI xml and qcom whitelist
  * Revert "ANDROID: Incremental fs: Avoid continually recalculating hashes"
      fs/incfs/data_mgmt.c
  * f2fs: avoid inifinite loop to wait for flushing node pages at cp_error
      fs/f2fs/node.c
    f2fs: compress: fix zstd data corruption
  * f2fs: add compressed/gc data read IO stat
      fs/f2fs/data.c
      fs/f2fs/f2fs.h
      fs/f2fs/gc.c
      fs/f2fs/sysfs.c
      include/trace/events/f2fs.h
  * f2fs: fix potential use-after-free issue
      fs/f2fs/data.c
  * f2fs: compress: don't handle non-compressed data in workqueue
      fs/f2fs/data.c
  * f2fs: remove redundant assignment to variable err
      fs/f2fs/namei.c
  * f2fs: refactor resize_fs to avoid meta updates in progress
      fs/f2fs/checkpoint.c
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
      fs/f2fs/gc.c
      fs/f2fs/super.c
      include/trace/events/f2fs.h
  * f2fs: use round_up to enhance calculation
      fs/f2fs/file.c
  * f2fs: introduce F2FS_IOC_RESERVE_COMPRESS_BLOCKS
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
  * f2fs: Avoid double lock for cp_rwsem during checkpoint
      fs/f2fs/checkpoint.c
      fs/f2fs/f2fs.h
      fs/f2fs/node.c
  * f2fs: report delalloc reserve as non-free in statfs for project quota
      fs/f2fs/super.c
  * f2fs: Fix wrong stub helper update_sit_info
      fs/f2fs/f2fs.h
    f2fs: compress: let lz4 compressor handle output buffer budget properly
  * f2fs: remove blk_plugging in block_operations
      fs/f2fs/checkpoint.c
  * f2fs: introduce F2FS_IOC_RELEASE_COMPRESS_BLOCKS
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
  * f2fs: shrink spinlock coverage
      fs/f2fs/node.c
      fs/f2fs/node.h
  * f2fs: correctly fix the parent inode number during fsync()
      fs/f2fs/file.c
  * f2fs: introduce mempool for {,de}compress intermediate page allocation
      fs/f2fs/f2fs.h
      fs/f2fs/super.c
  * f2fs: introduce f2fs_bmap_compress()
      fs/f2fs/data.c
  * f2fs: support fiemap on compressed inode
      fs/f2fs/data.c
  * f2fs: support partial truncation on compressed inode
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
  * f2fs: remove redundant compress inode check
      fs/f2fs/f2fs.h
  * f2fs: use strcmp() in parse_options()
      fs/f2fs/super.c
  * f2fs: Use the correct style for SPDX License Identifier
      fs/f2fs/acl.h
      fs/f2fs/f2fs.h
      fs/f2fs/gc.h
      fs/f2fs/node.h
      fs/f2fs/segment.h
      fs/f2fs/trace.h
      fs/f2fs/xattr.h

Change-Id: I2a678a32a4d72309fd00887a7ac56241293304a9
Signed-off-by: lucaswei <lucaswei@google.com>
2020-10-27 15:33:35 +08:00
Marc Zyngier
1fa2c32e37 KVM: arm64: Assume write fault on S1PTW permission fault on instruction fetch
commit c4ad98e4b72cb5be30ea282fce935248f2300e62 upstream.

KVM currently assumes that an instruction abort can never be a write.
This is in general true, except when the abort is triggered by
a S1PTW on instruction fetch that tries to update the S1 page tables
(to set AF, for example).

This can happen if the page tables have been paged out and brought
back in without seeing a direct write to them (they are thus marked
read only), and the fault handling code will make the PT executable(!)
instead of writable. The guest gets stuck forever.

In these conditions, the permission fault must be considered as
a write so that the Stage-1 update can take place. This is essentially
the I-side equivalent of the problem fixed by 60e21a0ef5 ("arm64: KVM:
Take S1 walks into account when determining S2 write faults").

Update kvm_is_write_fault() to return true on IABT+S1PTW, and introduce
kvm_vcpu_trap_is_exec_fault() that only return true when no faulting
on a S1 fault. Additionally, kvm_vcpu_dabt_iss1tw() is renamed to
kvm_vcpu_abt_iss1tw(), as the above makes it plain that it isn't
specific to data abort.

Signed-off-by: Marc Zyngier <maz@kernel.org>
Reviewed-by: Will Deacon <will@kernel.org>
Cc: stable@vger.kernel.org
Link: https://lore.kernel.org/r/20200915104218.1284701-2-maz@kernel.org
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-10-01 13:14:54 +02:00
Zenghui Yu
7c451f583f KVM: arm64: vgic-its: Fix memory leak on the error path of vgic_add_lpi()
[ Upstream commit 57bdb436ce869a45881d8aa4bc5dac8e072dd2b6 ]

If we're going to fail out the vgic_add_lpi(), let's make sure the
allocated vgic_irq memory is also freed. Though it seems that both
cases are unlikely to fail.

Signed-off-by: Zenghui Yu <yuzenghui@huawei.com>
Signed-off-by: Marc Zyngier <maz@kernel.org>
Link: https://lore.kernel.org/r/20200414030349.625-3-yuzenghui@huawei.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-10-01 13:14:42 +02:00
Zhuang Yanying
58f79f42e5 KVM: fix overflow of zero page refcount with ksm running
[ Upstream commit 7df003c85218b5f5b10a7f6418208f31e813f38f ]

We are testing Virtual Machine with KSM on v5.4-rc2 kernel,
and found the zero_page refcount overflow.
The cause of refcount overflow is increased in try_async_pf
(get_user_page) without being decreased in mmu_set_spte()
while handling ept violation.
In kvm_release_pfn_clean(), only unreserved page will call
put_page. However, zero page is reserved.
So, as well as creating and destroy vm, the refcount of
zero page will continue to increase until it overflows.

step1:
echo 10000 > /sys/kernel/pages_to_scan/pages_to_scan
echo 1 > /sys/kernel/pages_to_scan/run
echo 1 > /sys/kernel/pages_to_scan/use_zero_pages

step2:
just create several normal qemu kvm vms.
And destroy it after 10s.
Repeat this action all the time.

After a long period of time, all domains hang because
of the refcount of zero page overflow.

Qemu print error log as follow:
 …
 error: kvm run failed Bad address
 EAX=00006cdc EBX=00000008 ECX=80202001 EDX=078bfbfd
 ESI=ffffffff EDI=00000000 EBP=00000008 ESP=00006cc4
 EIP=000efd75 EFL=00010002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
 ES =0010 00000000 ffffffff 00c09300 DPL=0 DS   [-WA]
 CS =0008 00000000 ffffffff 00c09b00 DPL=0 CS32 [-RA]
 SS =0010 00000000 ffffffff 00c09300 DPL=0 DS   [-WA]
 DS =0010 00000000 ffffffff 00c09300 DPL=0 DS   [-WA]
 FS =0010 00000000 ffffffff 00c09300 DPL=0 DS   [-WA]
 GS =0010 00000000 ffffffff 00c09300 DPL=0 DS   [-WA]
 LDT=0000 00000000 0000ffff 00008200 DPL=0 LDT
 TR =0000 00000000 0000ffff 00008b00 DPL=0 TSS32-busy
 GDT=     000f7070 00000037
 IDT=     000f70ae 00000000
 CR0=00000011 CR2=00000000 CR3=00000000 CR4=00000000
 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
 DR6=00000000ffff0ff0 DR7=0000000000000400
 EFER=0000000000000000
 Code=00 01 00 00 00 e9 e8 00 00 00 c7 05 4c 55 0f 00 01 00 00 00 <8b> 35 00 00 01 00 8b 3d 04 00 01 00 b8 d8 d3 00 00 c1 e0 08 0c ea a3 00 00 01 00 c7 05 04
 …

Meanwhile, a kernel warning is departed.

 [40914.836375] WARNING: CPU: 3 PID: 82067 at ./include/linux/mm.h:987 try_get_page+0x1f/0x30
 [40914.836412] CPU: 3 PID: 82067 Comm: CPU 0/KVM Kdump: loaded Tainted: G           OE     5.2.0-rc2 #5
 [40914.836415] RIP: 0010:try_get_page+0x1f/0x30
 [40914.836417] Code: 40 00 c3 0f 1f 84 00 00 00 00 00 48 8b 47 08 a8 01 75 11 8b 47 34 85 c0 7e 10 f0 ff 47 34 b8 01 00 00 00 c3 48 8d 78 ff eb e9 <0f> 0b 31 c0 c3 66 90 66 2e 0f 1f 84 00 0
 0 00 00 00 48 8b 47 08 a8
 [40914.836418] RSP: 0018:ffffb4144e523988 EFLAGS: 00010286
 [40914.836419] RAX: 0000000080000000 RBX: 0000000000000326 RCX: 0000000000000000
 [40914.836420] RDX: 0000000000000000 RSI: 00004ffdeba10000 RDI: ffffdf07093f6440
 [40914.836421] RBP: ffffdf07093f6440 R08: 800000424fd91225 R09: 0000000000000000
 [40914.836421] R10: ffff9eb41bfeebb8 R11: 0000000000000000 R12: ffffdf06bbd1e8a8
 [40914.836422] R13: 0000000000000080 R14: 800000424fd91225 R15: ffffdf07093f6440
 [40914.836423] FS:  00007fb60ffff700(0000) GS:ffff9eb4802c0000(0000) knlGS:0000000000000000
 [40914.836425] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
 [40914.836426] CR2: 0000000000000000 CR3: 0000002f220e6002 CR4: 00000000003626e0
 [40914.836427] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
 [40914.836427] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
 [40914.836428] Call Trace:
 [40914.836433]  follow_page_pte+0x302/0x47b
 [40914.836437]  __get_user_pages+0xf1/0x7d0
 [40914.836441]  ? irq_work_queue+0x9/0x70
 [40914.836443]  get_user_pages_unlocked+0x13f/0x1e0
 [40914.836469]  __gfn_to_pfn_memslot+0x10e/0x400 [kvm]
 [40914.836486]  try_async_pf+0x87/0x240 [kvm]
 [40914.836503]  tdp_page_fault+0x139/0x270 [kvm]
 [40914.836523]  kvm_mmu_page_fault+0x76/0x5e0 [kvm]
 [40914.836588]  vcpu_enter_guest+0xb45/0x1570 [kvm]
 [40914.836632]  kvm_arch_vcpu_ioctl_run+0x35d/0x580 [kvm]
 [40914.836645]  kvm_vcpu_ioctl+0x26e/0x5d0 [kvm]
 [40914.836650]  do_vfs_ioctl+0xa9/0x620
 [40914.836653]  ksys_ioctl+0x60/0x90
 [40914.836654]  __x64_sys_ioctl+0x16/0x20
 [40914.836658]  do_syscall_64+0x5b/0x180
 [40914.836664]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
 [40914.836666] RIP: 0033:0x7fb61cb6bfc7

Signed-off-by: LinFeng <linfeng23@huawei.com>
Signed-off-by: Zhuang Yanying <ann.zhuangyanying@huawei.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-10-01 13:14:32 +02:00
Miaohe Lin
8b3a8c6a73 KVM: arm/arm64: vgic: Fix potential double free dist->spis in __kvm_vgic_destroy()
[ Upstream commit 0bda9498dd45280e334bfe88b815ebf519602cc3 ]

In kvm_vgic_dist_init() called from kvm_vgic_map_resources(), if
dist->vgic_model is invalid, dist->spis will be freed without set
dist->spis = NULL. And in vgicv2 resources clean up path,
__kvm_vgic_destroy() will be called to free allocated resources.
And dist->spis will be freed again in clean up chain because we
forget to set dist->spis = NULL in kvm_vgic_dist_init() failed
path. So double free would happen.

Signed-off-by: Miaohe Lin <linmiaohe@huawei.com>
Signed-off-by: Marc Zyngier <maz@kernel.org>
Reviewed-by: Eric Auger <eric.auger@redhat.com>
Link: https://lore.kernel.org/r/1574923128-19956-1-git-send-email-linmiaohe@huawei.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-10-01 13:14:29 +02:00
Rustam Kovhaev
19184bd06f KVM: fix memory leak in kvm_io_bus_unregister_dev()
[ Upstream commit f65886606c2d3b562716de030706dfe1bea4ed5e ]

when kmalloc() fails in kvm_io_bus_unregister_dev(), before removing
the bus, we should iterate over all other devices linked to it and call
kvm_iodevice_destructor() for them

Fixes: 90db10434b ("KVM: kvm_io_bus_unregister_dev() should never fail")
Cc: stable@vger.kernel.org
Reported-and-tested-by: syzbot+f196caa45793d6374707@syzkaller.appspotmail.com
Link: https://syzkaller.appspot.com/bug?extid=f196caa45793d6374707
Signed-off-by: Rustam Kovhaev <rkovhaev@gmail.com>
Reviewed-by: Vitaly Kuznetsov <vkuznets@redhat.com>
Message-Id: <20200907185535.233114-1-rkovhaev@gmail.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-09-26 18:01:28 +02:00
lucaswei
d43b6a3c5a Merge android-4.19-stable (4.19.125) into android-msm-pixel-4.19-lts
Merge 4.19.125 into android-4.19-stable
    Merge remote-tracking branch 'aosp/upstream-f2fs-stable-linux-4.19.y' into android-4.19-stable
Linux 4.19.125
    rxrpc: Fix ack discard
  * rxrpc: Trace discarded ACKs
      include/trace/events/rxrpc.h
    iio: adc: stm32-dfsdm: fix device used to request dma
    iio: adc: stm32-dfsdm: Use dma_request_chan() instead dma_request_slave_channel()
    iio: adc: stm32-adc: fix device used to request dma
    iio: adc: stm32-adc: Use dma_request_chan() instead dma_request_slave_channel()
    x86/unwind/orc: Fix unwind_get_return_address_ptr() for inactive tasks
    rxrpc: Fix a memory leak in rxkad_verify_response()
    rapidio: fix an error in get_user_pages_fast() error handling
    ipack: tpci200: fix error return code in tpci200_register()
    mei: release me_cl object reference
    misc: rtsx: Add short delay after exit from ASPM
    iio: dac: vf610: Fix an error handling path in 'vf610_dac_probe()'
    iio: sca3000: Remove an erroneous 'get_device()'
    staging: greybus: Fix uninitialized scalar variable
    staging: iio: ad2s1210: Fix SPI reading
    Revert "gfs2: Don't demote a glock until its revokes are written"
    brcmfmac: abort and release host after error
    tty: serial: qcom_geni_serial: Fix wrap around of TX buffer
    cxgb4/cxgb4vf: Fix mac_hlist initialization and free
    cxgb4: free mac_hlist properly
    net: bcmgenet: abort suspend on error
    net: bcmgenet: code movement
    Revert "net/ibmvnic: Fix EOI when running in XIVE mode"
    media: fdp1: Fix R-Car M3-N naming in debug message
    thunderbolt: Drop duplicated get_switch_at_route()
    staging: most: core: replace strcpy() by strscpy()
    libnvdimm/btt: Fix LBA masking during 'free list' population
    libnvdimm/btt: Remove unnecessary code in btt_freelist_init
  * nfit: Add Hyper-V NVDIMM DSM command set to white list
      include/uapi/linux/ndctl.h
    powerpc/64s: Disable STRICT_KERNEL_RWX
    powerpc: Remove STRICT_KERNEL_RWX incompatibility with RELOCATABLE
    drm/i915/gvt: Init DPLL/DDI vreg for virtual display instead of inheritance.
    dmaengine: owl: Use correct lock in owl_dma_get_pchan()
    dmaengine: tegra210-adma: Fix an error handling path in 'tegra_adma_probe()'
    apparmor: Fix aa_label refcnt leak in policy_update
    apparmor: fix potential label refcnt leak in aa_change_profile
    apparmor: Fix use-after-free in aa_audit_rule_init
    drm/etnaviv: fix perfmon domain interation
    ALSA: hda/realtek - Add more fixup entries for Clevo machines
    ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Xtreme
  * ALSA: pcm: fix incorrect hw_base increase
      sound/core/pcm_lib.c
    ALSA: iec1712: Initialize STDSP24 properly when using the model=staudio option
    padata: purge get_cpu and reorder_via_wq from padata_do_serial
    padata: initialize pd->cpu with effective cpumask
  * padata: Replace delayed timer with immediate workqueue in padata_reorder
      include/linux/padata.h
    ARM: futex: Address build warning
    platform/x86: asus-nb-wmi: Do not load on Asus T100TA and T200TA
  * USB: core: Fix misleading driver bug report
      drivers/usb/core/message.c
    stmmac: fix pointer check after utilization in stmmac_interrupt
    ceph: fix double unlock in handle_cap_export()
  * HID: quirks: Add HID_QUIRK_NO_INIT_REPORTS quirk for Dell K12A keyboard-dock
      drivers/hid/hid-ids.h
      drivers/hid/hid-quirks.c
    gtp: set NLM_F_MULTI flag in gtp_genl_dump_pdp()
    x86/apic: Move TSC deadline timer debug printk
  * HID: i2c-hid: reset Synaptics SYNA2393 on resume
      drivers/hid/hid-ids.h
    scsi: ibmvscsi: Fix WARN_ON during event pool release
  * component: Silence bind error on -EPROBE_DEFER
      drivers/base/component.c
    aquantia: Fix the media type of AQC100 ethernet controller in the driver
    vhost/vsock: fix packet delivery order to monitoring devices
  * configfs: fix config_item refcnt leak in configfs_rmdir()
      fs/configfs/dir.c
    scsi: qla2xxx: Delete all sessions before unregister local nvme port
    scsi: qla2xxx: Fix hang when issuing nvme disconnect-all in NPIV
  * HID: alps: ALPS_1657 is too specific; use U1_UNICORN_LEGACY instead
      drivers/hid/hid-ids.h
  * HID: alps: Add AUI1657 device ID
      drivers/hid/hid-ids.h
  * HID: multitouch: add eGalaxTouch P80H84 support
      drivers/hid/hid-ids.h
      drivers/hid/hid-multitouch.c
  * gcc-common.h: Update for GCC 10
      scripts/gcc-plugins/gcc-common.h
    ubi: Fix seq_file usage in detailed_erase_block_info debugfs file
    i2c: mux: demux-pinctrl: Fix an error handling path in 'i2c_demux_pinctrl_probe()'
    iommu/amd: Fix over-read of ACPI UID from IVRS table
    ubifs: remove broken lazytime support
  * fix multiplication overflow in copy_fdtable()
      fs/file.c
    mtd: spinand: Propagate ECC information to the MTD structure
    ima: Fix return value of ima_write_policy()
    evm: Check also if *tfm is an error pointer in init_desc()
    ima: Set file->f_mode instead of file->f_flags in ima_calc_file_hash()
    riscv: set max_pfn to the PFN of the last page
    KVM: SVM: Fix potential memory leak in svm_cpu_init()
  * i2c: dev: Fix the race between the release of i2c_dev and cdev
      drivers/i2c/i2c-dev.c
  * ubsan: build ubsan.c more conservatively
      lib/Makefile
  * x86/uaccess, ubsan: Fix UBSAN vs. SMAP
      lib/Makefile
  * ANDROID: scsi: ufs: Handle clocks when lrbp fails
      drivers/scsi/ufs/ufshcd.c
  * ANDROID: fscrypt: handle direct I/O with IV_INO_LBLK_32
      fs/crypto/crypto.c
      fs/crypto/inline_crypt.c
      fs/direct-io.c
      fs/ext4/inode.c
      fs/f2fs/f2fs.h
      include/linux/fscrypt.h
  * BACKPORT: FROMLIST: fscrypt: add support for IV_INO_LBLK_32 policies
      fs/crypto/crypto.c
      fs/crypto/fscrypt_private.h
      fs/crypto/inline_crypt.c
      fs/crypto/keyring.c
      fs/crypto/keysetup.c
      fs/crypto/policy.c
      include/uapi/linux/fscrypt.h
    ANDROID: Update the ABI xml and qcom whitelist
    ANDROID: Fix build.config.gki-debug
    Merge 4.19.124 into android-4.19-stable
Linux 4.19.124
  * Makefile: disallow data races on gcc-10 as well
      Makefile
    KVM: x86: Fix off-by-one error in kvm_vcpu_ioctl_x86_setup_mce
    ARM: dts: r8a7740: Add missing extal2 to CPG node
    arm64: dts: renesas: r8a77980: Fix IPMMU VIP[01] nodes
    ARM: dts: r8a73a4: Add missing CMT1 interrupts
    arm64: dts: rockchip: Rename dwc3 device nodes on rk3399 to make dtc happy
    arm64: dts: rockchip: Replace RK805 PMIC node name with "pmic" on rk3328 boards
  * clk: Unlink clock if failed to prepare or enable
      drivers/clk/clk.c
    Revert "ALSA: hda/realtek: Fix pop noise on ALC225"
    usb: gadget: legacy: fix error return code in cdc_bind()
    usb: gadget: legacy: fix error return code in gncm_bind()
    usb: gadget: audio: Fix a missing error return value in audio_bind()
    usb: gadget: net2272: Fix a memory leak in an error handling path in 'net2272_plat_probe()'
  * dwc3: Remove check for HWO flag in dwc3_gadget_ep_reclaim_trb_sg()
      drivers/usb/dwc3/gadget.c
    clk: rockchip: fix incorrect configuration of rk3228 aclk_gpu* clocks
  * exec: Move would_dump into flush_old_exec
      fs/exec.c
    x86/unwind/orc: Fix error handling in __unwind_start()
  * x86: Fix early boot crash on gcc-10, third try
      include/linux/compiler.h
      init/main.c
    cifs: fix leaked reference on requeued write
    ARM: dts: imx27-phytec-phycard-s-rdk: Fix the I2C1 pinctrl entries
    ARM: dts: dra7: Fix bus_dma_limit for PCIe
  * usb: xhci: Fix NULL pointer dereference when enqueuing trbs from urb sg list
      drivers/usb/host/xhci-ring.c
  * USB: gadget: fix illegal array access in binding with UDC
      drivers/usb/gadget/configfs.c
  * usb: host: xhci-plat: keep runtime active when removing host
      drivers/usb/host/xhci-plat.c
  * usb: core: hub: limit HUB_QUIRK_DISABLE_AUTOSUSPEND to USB5534B
      drivers/usb/core/hub.c
  * ALSA: usb-audio: Add control message quirk delay for Kingston HyperX headset
      sound/usb/quirks.c
  * ALSA: rawmidi: Fix racy buffer resize under concurrent accesses
      include/sound/rawmidi.h
      sound/core/rawmidi.c
    ALSA: hda/realtek - Limit int mic boost for Thinkpad T530
  * gcc-10: avoid shadowing standard library 'free()' in crypto
      crypto/xts.c
  * gcc-10: disable 'restrict' warning for now
      Makefile
  * gcc-10: disable 'stringop-overflow' warning for now
      Makefile
  * gcc-10: disable 'array-bounds' warning for now
      Makefile
  * gcc-10: disable 'zero-length-bounds' warning for now
      Makefile
  * Stop the ad-hoc games with -Wno-maybe-initialized
      Makefile
      init/Kconfig
      kernel/trace/Kconfig
  * kbuild: compute false-positive -Wmaybe-uninitialized cases in Kconfig
      Makefile
      init/Kconfig
      kernel/trace/Kconfig
  * gcc-10 warnings: fix low-hanging fruit
      include/linux/fs.h
      include/linux/tty.h
  * pnp: Use list_for_each_entry() instead of open coding
      include/linux/pnp.h
    hwmon: (da9052) Synchronize access with mfd
    IB/mlx4: Test return value of calls to ib_get_cached_pkey
    netfilter: nft_set_rbtree: Introduce and use nft_rbtree_interval_start()
    arm64: fix the flush_icache_range arguments in machine_kexec
  * netfilter: conntrack: avoid gcc-10 zero-length-bounds warning
      include/net/netfilter/nf_conntrack.h
      net/netfilter/nf_conntrack_core.c
    NFSv4: Fix fscache cookie aux_data to ensure change_attr is included
    nfs: fscache: use timespec64 in inode auxdata
    NFS: Fix fscache super_cookie index_key from changing after umount
    mmc: block: Fix request completion in the CQE timeout path
    mmc: core: Check request type before completing the request
    i40iw: Fix error handling in i40iw_manage_arp_cache()
    pinctrl: cherryview: Add missing spinlock usage in chv_gpio_irq_handler
    pinctrl: baytrail: Enable pin configuration setting for GPIO chip
    gfs2: Another gfs2_walk_metadata fix
    ALSA: hda/realtek - Fix S3 pop noise on Dell Wyse
    ipc/util.c: sysvipc_find_ipc() incorrectly updates position index
    drm/qxl: lost qxl_bo_kunmap_atomic_page in qxl_image_init_helper()
    ALSA: hda/hdmi: fix race in monitor detection during probe
    cpufreq: intel_pstate: Only mention the BIOS disabling turbo mode once
    dmaengine: mmp_tdma: Reset channel error on release
    dmaengine: pch_dma.c: Avoid data race between probe and irq handler
    riscv: fix vdso build with lld
  * tcp: fix SO_RCVLOWAT hangs with fat skbs
      include/net/tcp.h
      net/ipv4/tcp.c
      net/ipv4/tcp_input.c
  * net: tcp: fix rx timestamp behavior for tcp_recvmsg
      net/ipv4/tcp.c
    netprio_cgroup: Fix unlimited memory leak of v2 cgroups
  * net: ipv4: really enforce backoff for redirects
      net/ipv4/route.c
    net: dsa: loop: Add module soft dependency
    hinic: fix a bug of ndo_stop
    virtio_net: fix lockdep warning on 32 bit
  * tcp: fix error recovery in tcp_zerocopy_receive()
      net/ipv4/tcp.c
  * Revert "ipv6: add mtu lock check in __ip6_rt_update_pmtu"
      net/ipv6/route.c
  * pppoe: only process PADT targeted at local interfaces
      drivers/net/ppp/pppoe.c
  * net: phy: fix aneg restart in phy_ethtool_set_eee
      drivers/net/phy/phy.c
  * netlabel: cope with NULL catmap
      net/ipv4/cipso_ipv4.c
      net/ipv6/calipso.c
      net/netlabel/netlabel_kapi.c
  * net: fix a potential recursive NETDEV_FEAT_CHANGE
      net/core/dev.c
    mmc: sdhci-acpi: Add SDHCI_QUIRK2_BROKEN_64_BIT_DMA for AMDI0040
  * scsi: sg: add sg_remove_request in sg_write
      drivers/scsi/sg.c
    virtio-blk: handle block_device_operations callbacks after hot unplug
    drop_monitor: work around gcc-10 stringop-overflow warning
    net: moxa: Fix a potential double 'free_irq()'
    net/sonic: Fix a resource leak in an error handling path in 'jazz_sonic_probe()'
  * shmem: fix possible deadlocks on shmlock_user_lock
      mm/shmem.c
    net: dsa: Do not make user port errors fatal
  * ANDROID: rtc: class: call hctosys in resource managed registration
      drivers/rtc/class.c
    ANDROID: GKI: Update the ABI xml and whitelist
  * ANDROID: power_supply: Add RTX power-supply property
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * f2fs: flush dirty meta pages when flushing them
      fs/f2fs/checkpoint.c
  * f2fs: fix checkpoint=disable:%u%%
      fs/f2fs/f2fs.h
      fs/f2fs/super.c
  * f2fs: rework filename handling
      fs/f2fs/dir.c
      fs/f2fs/f2fs.h
      fs/f2fs/hash.c
      fs/f2fs/inline.c
      fs/f2fs/namei.c
      fs/f2fs/recovery.c
  * f2fs: split f2fs_d_compare() from f2fs_match_name()
      fs/f2fs/dir.c
      fs/f2fs/f2fs.h
  * f2fs: don't leak filename in f2fs_try_convert_inline_dir()
      fs/f2fs/inline.c
    ANDROID: clang: update to 11.0.1
    FROMLIST: x86_64: fix jiffies ODR violation
  * ANDROID: arm64: vdso: Fix removing SCS flags
      arch/arm64/kernel/vdso/Makefile
    Merge branch 'android-4.19' into android-4.19-stable
    ANDROID: GKI: Update the ABI xml and whitelist
  * ANDROID: Incremental fs: wake up log pollers less often
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
  * ANDROID: Incremental fs: Fix scheduling while atomic error
      fs/incfs/vfs.c
  * ANDROID: Incremental fs: Avoid continually recalculating hashes
      fs/incfs/data_mgmt.c
  * ANDROID: export: Disable symbol trimming on modules
      include/linux/export.h
    ANDROID: GKI: Update the ABI xml and whitelist
  * ANDROID: fscrypt: set dun_bytes more precisely
      fs/crypto/inline_crypt.c
  * ANDROID: dm-default-key: set dun_bytes more precisely
      drivers/md/dm-default-key.c
  * ANDROID: block: backport the ability to specify max_dun_bytes
      block/blk-crypto.c
      block/keyslot-manager.c
      drivers/md/dm-default-key.c
      drivers/scsi/ufs/ufshcd-crypto.c
      fs/crypto/inline_crypt.c
      include/linux/bio-crypt-ctx.h
      include/linux/blk-crypto.h
      include/linux/keyslot-manager.h
    ANDROID: Revert "ANDROID: GKI: gki_defconfig: CONFIG_DM_DEFAULT_KEY=m"
    Merge 4.19.123 into android-4.19
Linux 4.19.123
    ipc/mqueue.c: change __do_notify() to bypass check_kill_permission()
    scripts/decodecode: fix trapping instruction formatting
    objtool: Fix stack offset tracking for indirect CFAs
    netfilter: nf_osf: avoid passing pointer to local var
  * netfilter: nat: never update the UDP checksum when it's 0
      net/netfilter/nf_nat_proto_udp.c
    x86/unwind/orc: Fix premature unwind stoppage due to IRET frames
    x86/unwind/orc: Fix error path for bad ORC entry type
    x86/unwind/orc: Prevent unwinding before ORC initialization
    x86/unwind/orc: Don't skip the first frame for inactive tasks
    x86/entry/64: Fix unwind hints in rewind_stack_do_exit()
    x86/entry/64: Fix unwind hints in kernel exit path
    x86/entry/64: Fix unwind hints in register clearing code
    batman-adv: Fix refcnt leak in batadv_v_ogm_process
    batman-adv: Fix refcnt leak in batadv_store_throughput_override
    batman-adv: Fix refcnt leak in batadv_show_throughput_override
    batman-adv: fix batadv_nc_random_weight_tq
    KVM: VMX: Mark RCX, RDX and RSI as clobbered in vmx_vcpu_run()'s asm blob
    KVM: VMX: Explicitly reference RCX as the vmx_vcpu pointer in asm blobs
  * coredump: fix crash when umh is disabled
      fs/coredump.c
      kernel/umh.c
    staging: gasket: Check the return value of gasket_get_bar_index()
  * mm/page_alloc: fix watchdog soft lockups during set_zone_contiguous()
      mm/page_alloc.c
    arm64: hugetlb: avoid potential NULL dereference
    KVM: arm64: Fix 32bit PC wrap-around
    KVM: arm: vgic: Fix limit condition when writing to GICD_I[CS]ACTIVER
  * tracing: Add a vmalloc_sync_mappings() for safe measure
      kernel/trace/trace.c
    USB: serial: garmin_gps: add sanity checking for data length
    USB: uas: add quirk for LaCie 2Big Quadra
  * HID: usbhid: Fix race between usbhid_close() and usbhid_stop()
      drivers/hid/usbhid/hid-core.c
      drivers/hid/usbhid/usbhid.h
  * sctp: Fix bundling of SHUTDOWN with COOKIE-ACK
      net/sctp/sm_statefuns.c
    HID: wacom: Read HID_DG_CONTACTMAX directly for non-generic devices
  * net: stricter validation of untrusted gso packets
      include/linux/virtio_net.h
    bnxt_en: Fix VF anti-spoof filter setup.
    bnxt_en: Improve AER slot reset.
    net/mlx5: Fix command entry leak in Internal Error State
    net/mlx5: Fix forced completion access non initialized command entry
    bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features().
  * tipc: fix partial topology connection closure
      net/tipc/topsrv.c
    sch_sfq: validate silly quantum values
    sch_choke: avoid potential panic in choke_reset()
    net: usb: qmi_wwan: add support for DW5816e
    net_sched: sch_skbprio: add message validation to skbprio_change()
    net/mlx4_core: Fix use of ENOSPC around mlx4_counter_alloc()
    net: macsec: preserve ingress frame ordering
    fq_codel: fix TCA_FQ_CODEL_DROP_BATCH_SIZE sanity checks
    dp83640: reverse arguments to list_add_tail
    vt: fix unicode console freeing with a common interface
    tracing/kprobes: Fix a double initialization typo
    USB: serial: qcserial: Add DW5816e support
  * ANDROID: usb: gadget: Add missing inline qualifier to stub functions
      include/linux/usb/gadget.h
    ANDROID: Drop ABI monitoring from KASAN build config
    ANDROID: Rename build.config.gki.arch_kasan
    ANDROID: GKI: Enable CONFIG_STATIC_USERMODEHELPER
  * ANDROID: dm-default-key: Update key size for wrapped keys
      drivers/md/dm-default-key.c
    ANDROID: gki_defconfig: enable CONFIG_MMC_CRYPTO
  * ANDROID: mmc: MMC crypto API
      drivers/mmc/core/Kconfig
      include/linux/mmc/core.h
      include/linux/mmc/host.h
    ANDROID: GKI: Update the ABI xml and whitelist
  * ANDROID: GKI: add missing exports for cam_smmu_api.ko
      drivers/iommu/dma-iommu.c
    Merge 4.19.122 into android-4.19
Linux 4.19.122
  * drm/atomic: Take the atomic toys away from X
      drivers/gpu/drm/drm_ioctl.c
    cgroup, netclassid: remove double cond_resched
  * mac80211: add ieee80211_is_any_nullfunc()
      include/linux/ieee80211.h
    platform/x86: GPD pocket fan: Fix error message when temp-limits are out of range
    ALSA: hda: Match both PCI ID and SSID for driver blacklist
    hexagon: define ioremap_uc
    hexagon: clean up ioremap
    mfd: intel-lpss: Use devm_ioremap_uc for MMIO
  * lib: devres: add a helper function for ioremap_uc
      include/linux/io.h
      lib/devres.c
    drm/amdgpu: Fix oops when pp_funcs is unset in ACPI event
  * sctp: Fix SHUTDOWN CTSN Ack in the peer restart case
      net/sctp/sm_make_chunk.c
    net: systemport: suppress warnings on failed Rx SKB allocations
    net: bcmgenet: suppress warnings on failed Rx SKB allocations
  * lib/mpi: Fix building for powerpc with clang
      lib/mpi/longlong.h
    scripts/config: allow colons in option strings for sed
    s390/ftrace: fix potential crashes when switching tracers
    cifs: protect updating server->dstaddr with a spinlock
    ASoC: rsnd: Fix "status check failed" spam for multi-SSI
    ASoC: rsnd: Don't treat master SSI in multi SSI setup as parent
    net: stmmac: Fix sub-second increment
    net: stmmac: fix enabling socfpga's ptp_ref_clock
    wimax/i2400m: Fix potential urb refcnt leak
    drm/amdgpu: Correctly initialize thermal controller for GPUs with Powerplay table v0 (e.g Hawaii)
    ASoC: codecs: hdac_hdmi: Fix incorrect use of list_for_each_entry
    ASoC: rsnd: Fix HDMI channel mapping for multi-SSI mode
    ASoC: rsnd: Fix parent SSI start/stop in multi-SSI mode
  * usb: dwc3: gadget: Properly set maxpacket limit
      drivers/usb/dwc3/core.h
      drivers/usb/dwc3/gadget.c
    ASoC: sgtl5000: Fix VAG power-on handling
    selftests/ipc: Fix test failure seen after initial test run
    ASoC: topology: Check return value of pcm_new_ver
    powerpc/pci/of: Parse unassigned resources
    vhost: vsock: kick send_pkt worker once device is started
    ANDROID: GKI: fix build warning on 32bits due to ASoC msm change
    ANDROID: GKI: fix build error on 32bits due to ASoC msm change
    ANDROID: GKI: update abi definition due to FAIR_GROUP_SCHED removal
    ANDROID: GKI: Remove FAIR_GROUP_SCHED
    ANDROID: GKI: BULK update ABI XML representation and qcom whitelist
    ANDROID: build.config.gki.aarch64: Enable WHITELIST_STRICT_MODE
    ANDROID: GKI: Update the ABI xml and qcom whitelist
  * ANDROID: remove unused variable
      fs/f2fs/xattr.c
    ANDROID: Drop ABI monitoring from KASAN build config
    Merge 4.19.121 into android-4.19
Linux 4.19.121
    mmc: meson-mx-sdio: remove the broken ->card_busy() op
    mmc: meson-mx-sdio: Set MMC_CAP_WAIT_WHILE_BUSY
    mmc: sdhci-msm: Enable host capabilities pertains to R1b response
    mmc: sdhci-pci: Fix eMMC driver strength for BYT-based controllers
    mmc: sdhci-xenon: fix annoying 1.8V regulator warning
    mmc: cqhci: Avoid false "cqhci: CQE stuck on" by not open-coding timeout loop
    btrfs: transaction: Avoid deadlock due to bad initialization timing of fs_info::journal_info
    btrfs: fix partial loss of prealloc extent past i_size after fsync
  * selinux: properly handle multiple messages in selinux_netlink_send()
      security/selinux/hooks.c
    dmaengine: dmatest: Fix iteration non-stop logic
    nfs: Fix potential posix_acl refcnt leak in nfs3_set_acl
    ALSA: opti9xx: shut up gcc-10 range warning
    iommu/amd: Fix legacy interrupt remapping for x2APIC-enabled system
    scsi: target/iblock: fix WRITE SAME zeroing
    iommu/qcom: Fix local_base status check
    vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn()
    vfio: avoid possible overflow in vfio_iommu_type1_pin_pages
    RDMA/core: Fix race between destroy and release FD object
    RDMA/core: Prevent mixed use of FDs between shared ufiles
    RDMA/mlx4: Initialize ib_spec on the stack
    RDMA/mlx5: Set GRH fields in query QP on RoCE
    scsi: qla2xxx: check UNLOADING before posting async work
    scsi: qla2xxx: set UNLOADING before waiting for session deletion
    dm multipath: use updated MPATHF_QUEUE_IO on mapping for bio-based mpath
    dm writecache: fix data corruption when reloading the target
  * dm verity fec: fix hash block number in verity_fec_decode
      drivers/md/dm-verity-fec.c
    PM: hibernate: Freeze kernel threads in software_resume()
    PM: ACPI: Output correct message on target power state
    ALSA: pcm: oss: Place the plugin buffer overflow checks correctly
    ALSA: hda/hdmi: fix without unlocked before return
  * ALSA: usb-audio: Correct a typo of NuPrime DAC-10 USB ID
      sound/usb/quirks.c
    ALSA: hda/realtek - Two front mics on a Lenovo ThinkCenter
    btrfs: fix block group leak when removing fails
    drm/qxl: qxl_release use after free
    drm/qxl: qxl_release leak in qxl_hw_surface_alloc()
    drm/qxl: qxl_release leak in qxl_draw_dirty_fb()
  * drm/edid: Fix off-by-one in DispID DTD pixel clock
      drivers/gpu/drm/drm_edid.c
    ANDROID: GKI: Bulk update ABI XML representation
    ANDROID: GKI: Enable net testing options
    ANDROID: gki_defconfig: Enable CONFIG_REMOTEPROC
    ANDROID: Rename build.config.gki.arch_kasan
    ANDROID: GKI: Update ABI for IOMMU
  * ANDROID: Incremental fs: Fix issues with very large files
      fs/incfs/vfs.c
    ANDROID: Correct build.config branch name
    ANDROID: GKI: Bulk update ABI XML representation and whitelist.
  * UPSTREAM: vdso: Fix clocksource.h macro detection
      include/vdso/clocksource.h
    Merge 4.19.120 into android-4.19
    ANDROID: GKI: update abi definition due to added padding
  * ANDROID: GKI: networking: add Android ABI padding to a lot of networking structures
      include/linux/ipv6.h
      include/linux/net.h
      include/linux/netdevice.h
      include/linux/skbuff.h
  * ANDROID: GKI: dma-mapping.h: add Android ABI padding to a structure
      include/linux/dma-mapping.h
  * ANDROID: GKI: ioport.h: add Android ABI padding to a structure
      include/linux/ioport.h
  * ANDROID: GKI: iomap.h: add Android ABI padding to a structure
      include/linux/iomap.h
  * ANDROID: GKI: genhd.h: add Android ABI padding to some structures
      include/linux/genhd.h
  * ANDROID: GKI: hrtimer.h: add Android ABI padding to a structure
      include/linux/hrtimer.h
  * ANDROID: GKI: ethtool.h: add Android ABI padding to a structure
      include/linux/ethtool.h
  * ANDROID: GKI: sched: add Android ABI padding to some structures
      include/linux/sched/topology.h
      include/linux/sched/user.h
  * ANDROID: GKI: kernfs.h: add Android ABI padding to some structures
      include/linux/kernfs.h
  * ANDROID: GKI: kobject.h: add Android ABI padding to some structures
      include/linux/kobject.h
  * ANDROID: GKI: mm.h: add Android ABI padding to a structure
      include/linux/mm.h
  * ANDROID: GKI: mmu_notifier.h: add Android ABI padding to some structures
      include/linux/mmu_notifier.h
  * ANDROID: GKI: pci: add Android ABI padding to some structures
      drivers/pci/pci.h
      include/linux/pci.h
  * ANDROID: GKI: irqdomain.h: add Android ABI padding to a structure
      include/linux/irqdomain.h
  * ANDROID: GKI: blk_types.h: add Android ABI padding to a structure
      include/linux/blk_types.h
  * ANDROID: GKI: scsi.h: add Android ABI padding to a structure
      drivers/scsi/sd.h
  * ANDROID: GKI: quota.h: add Android ABI padding to some structures
      include/linux/quota.h
  * ANDROID: GKI: timer.h: add Android ABI padding to a structure
      include/linux/timer.h
  * ANDROID: GKI: user_namespace.h: add Android ABI padding to a structure
      include/linux/user_namespace.h
    FROMGIT: f2fs: fix missing check for f2fs_unlock_op
Linux 4.19.120
  * propagate_one(): mnt_set_mountpoint() needs mount_lock
      fs/pnode.c
  * ext4: check for non-zero journal inum in ext4_calculate_overhead
      fs/ext4/super.c
  * qed: Fix use after free in qed_chain_free
      include/linux/qed/qed_chain.h
    bpf, x86_32: Fix clobbering of dst for BPF_JSET
    hwmon: (jc42) Fix name to have no illegal characters
  * ext4: convert BUG_ON's to WARN_ON's in mballoc.c
      fs/ext4/mballoc.c
  * ext4: increase wait time needed before reuse of deleted inode numbers
      fs/ext4/ialloc.c
  * ext4: use matching invalidatepage in ext4_writepage
      fs/ext4/inode.c
  * arm64: Delete the space separator in __emit_inst
      arch/arm64/include/asm/sysreg.h
    ALSA: hda: call runtime_allow() for all hda controllers
    xen/xenbus: ensure xenbus_map_ring_valloc() returns proper grant status
    objtool: Support Clang non-section symbols in ORC dump
    objtool: Fix CONFIG_UBSAN_TRAP unreachable warnings
    scsi: target: tcmu: reset_ring should reset TCMU_DEV_BIT_BROKEN
    scsi: target: fix PR IN / READ FULL STATUS for FC
    ALSA: hda: Explicitly permit using autosuspend if runtime PM is supported
    ALSA: hda: Keep the controller initialization even if no codecs found
    xfs: fix partially uninitialized structure in xfs_reflink_remap_extent
    x86: hyperv: report value of misc_features
    net: fec: set GPR bit on suspend by DT configuration.
    bpf, x86: Fix encoding for lower 8-bit registers in BPF_STX BPF_B
    xfs: clear PF_MEMALLOC before exiting xfsaild thread
  * mm: shmem: disable interrupt when acquiring info->lock in userfaultfd_copy path
      mm/shmem.c
    bpf, x86_32: Fix incorrect encoding in BPF_LDX zero-extension
  * perf/core: fix parent pid/tid in task exit events
      kernel/events/core.c
    net/mlx5: Fix failing fw tracer allocation on s390
  * cpumap: Avoid warning when CONFIG_DEBUG_PER_CPU_MAPS is enabled
      kernel/bpf/cpumap.c
    ARM: dts: bcm283x: Disable dsi0 node
  * PCI: Move Apex Edge TPU class quirk to fix BAR assignment
      drivers/pci/quirks.c
  * PCI: Avoid ASMedia XHCI USB PME# from D0 defect
      drivers/pci/quirks.c
  * svcrdma: Fix leak of svc_rdma_recv_ctxt objects
      include/linux/sunrpc/svc_rdma.h
  * svcrdma: Fix trace point use-after-free race
      include/trace/events/rpcrdma.h
    xfs: acquire superblock freeze protection on eofblocks scans
    net/cxgb4: Check the return from t4_query_params properly
    rxrpc: Fix DATA Tx to disable nofrag for UDP on AF_INET6 socket
    i2c: altera: use proper variable to hold errno
    nfsd: memory corruption in nfsd4_lock()
    ASoC: wm8960: Fix wrong clock after suspend & resume
    ASoC: tas571x: disable regulators on failed probe
    ASoC: q6dsp6: q6afe-dai: add missing channels to MI2S DAIs
    iio:ad7797: Use correct attribute_group
    usb: gadget: udc: bdc: Remove unnecessary NULL checks in bdc_req_complete
  * usb: dwc3: gadget: Do link recovery for SS and SSP
      drivers/usb/dwc3/gadget.c
  * binder: take read mode of mmap_sem in binder_alloc_free_page()
      drivers/android/binder_alloc.c
  * include/uapi/linux/swab.h: fix userspace breakage, use __BITS_PER_LONG for swap
      include/uapi/linux/swab.h
    mtd: cfi: fix deadloop in cfi_cmdset_0002.c do_write_buffer
    remoteproc: Fix wrong rvring index computation
  * FROMLIST: PM / devfreq: Restart previous governor if new governor fails to start
      drivers/devfreq/devfreq.c
  * ANDROID: GKI: arm64: Enable GZIP and LZ4 kernel compression modes
      arch/arm64/Kconfig
    ANDROID: GKI: arm64: gki_defconfig: Set arm_smmu configuration
  * ANDROID: GKI: iommu/arm-smmu: Modularize ARM SMMU driver
      drivers/iommu/Kconfig
      drivers/iommu/arm-smmu.c
  * ANDROID: GKI: iommu: Snapshot of vendor changes
      arch/arm64/mm/dma-mapping.c
      drivers/iommu/dma-iommu.c
      drivers/iommu/io-pgtable.c
      drivers/iommu/iommu.c
      drivers/iommu/iova.c
      include/linux/dma-iommu.h
      include/linux/dma-mapping.h
      include/linux/io-pgtable.h
      include/linux/iommu.h
      include/linux/iova.h
      include/trace/events/iommu.h
  * ANDROID: GKI: Additions to ARM SMMU register definitions
      drivers/iommu/arm-smmu-regs.h
  * ANDROID: GKI: iommu/io-pgtable-arm: LPAE related updates by vendor
      drivers/iommu/io-pgtable-arm.c
  * ANDROID: GKI: common: dma-mapping: make dma_common_contiguous_remap more robust
      kernel/dma/mapping.c
  * ANDROID: GKI: dma-coherent: Expose device base address and size
      include/linux/dma-mapping.h
      kernel/dma/coherent.c
  * ANDROID: GKI: arm64: add support for NO_KERNEL_MAPPING and STRONGLY_ORDERED
      arch/arm64/mm/dma-mapping.c
  * ANDROID: GKI: dma-mapping: Add dma_remap functions
      arch/arm64/mm/dma-mapping.c
      include/linux/dma-mapping.h
      kernel/dma/mapping.c
  * ANDROID: GKI: arm64: Support early fixup for CMA
      arch/arm64/include/asm/dma-contiguous.h
      arch/arm64/mm/mmu.c
  * ANDROID: GKI: iommu: dma-mapping-fast: Fast ARMv7/v8 Long Descriptor Format
      arch/arm64/include/asm/dma-iommu.h
      arch/arm64/mm/dma-mapping.c
      drivers/iommu/Kconfig
      drivers/iommu/Makefile
      drivers/iommu/dma-mapping-fast.c
      drivers/iommu/io-pgtable-fast.c
      drivers/iommu/io-pgtable.c
      include/linux/dma-mapping-fast.h
      include/linux/io-pgtable-fast.h
      include/linux/io-pgtable.h
  * ANDROID: GKI: arm64: dma-mapping: add support for IOMMU mapper
      arch/arm64/Kconfig
      arch/arm64/include/asm/device.h
      arch/arm64/include/asm/dma-iommu.h
      arch/arm64/mm/dma-mapping.c
      drivers/iommu/Kconfig
  * ANDROID: GKI: add ARCH_NR_GPIO for ABI match
      arch/arm64/Kconfig
  * ANDROID: GKI: kernel: Export symbol of `cpu_do_idle`
      arch/arm64/kernel/arm64ksyms.c
  * ANDROID: GKI: kernel: Export symbols needed by msm_minidump.ko and minidump_log.ko (again)
      arch/arm64/kernel/arm64ksyms.c
  * ANDROID: GKI: add missing exports for __flush_dcache_area
      arch/arm64/kernel/arm64ksyms.c
  * ANDROID: GKI: arm64: Export caching APIs
      arch/arm64/kernel/arm64ksyms.c
  * ANDROID: GKI: arm64: provide dma cache routines with same API as 32 bit
      arch/arm64/include/asm/cacheflush.h
      arch/arm64/mm/cache.S
    ANDROID: gki_defconfig: add FORTIFY_SOURCE, remove SPMI_MSM_PMIC_ARB
  * Revert "ANDROID: GKI: spmi: pmic-arb: don't enable SPMI_MSM_PMIC_ARB by default"
      drivers/spmi/Kconfig
    ANDROID: GKI: update abi definitions after adding padding
  * ANDROID: GKI: elevator: add Android ABI padding to some structures
      include/linux/elevator.h
  * ANDROID: GKI: dentry: add Android ABI padding to some structures
      include/linux/dcache.h
  * ANDROID: GKI: bio: add Android ABI padding to some structures
      include/linux/bio.h
  * ANDROID: GKI: scsi: add Android ABI padding to some structures
      include/scsi/scsi_cmnd.h
      include/scsi/scsi_device.h
      include/scsi/scsi_host.h
  * ANDROID: GKI: ufs: add Android ABI padding to some structures
      drivers/scsi/ufs/ufshcd.h
  * ANDROID: GKI: workqueue.h: add Android ABI padding to some structures
      include/linux/workqueue.h
  * ANDROID: GKI: fs.h: add Android ABI padding to some structures
      include/linux/fs.h
  * ANDROID: GKI: USB: add Android ABI padding to some structures
      include/linux/usb.h
      include/linux/usb/hcd.h
      include/linux/usb/usbnet.h
  * ANDROID: GKI: mm: add Android ABI padding to some structures
      include/linux/mm_types.h
      include/linux/mmzone.h
  * ANDROID: GKI: mount.h: add Android ABI padding to some structures
      include/linux/mount.h
  * ANDROID: GKI: sched.h: add Android ABI padding to some structures
      include/linux/sched.h
      include/linux/sched/signal.h
  * ANDROID: GKI: sock.h: add Android ABI padding to some structures
      include/net/sock.h
  * ANDROID: GKI: module.h: add Android ABI padding to some structures
      include/linux/module.h
  * ANDROID: GKI: device.h: add Android ABI padding to some structures
      include/linux/device.h
  * ANDROID: GKI: phy: add Android ABI padding to some structures
      include/linux/phy.h
  * ANDROID: GKI: add android_kabi.h
      include/linux/android_kabi.h
    ANDROID: ABI: update due to previous changes in the tree
  * BACKPORT: sched/core: Fix reset-on-fork from RT with uclamp
      kernel/sched/core.c
  * ANDROID: GKI: Add support for missing V4L2 symbols
      drivers/media/v4l2-core/v4l2-ioctl.c
      include/uapi/linux/videodev2.h
    ANDROID: GKI: Bulk update ABI XML representation
  * ANDROID: GKI: arm64: psci: Support for OS initiated scheme
      drivers/firmware/psci.c
  * ANDROID: GKI: net: add counter for number of frames coalesced in GRO
      include/linux/netdevice.h
  * ANDROID: GKI: cfg80211: Include length of kek in rekey data
      include/net/cfg80211.h
      net/wireless/nl80211.c
  * BACKPORT: loop: change queue block size to match when using DIO
      drivers/block/loop.c
  * ANDROID: Incremental fs: Add setattr call
      fs/incfs/vfs.c
    ANDROID: GKI: enable CONFIG_RTC_SYSTOHC
  * ANDROID: GKI: ipv4: add vendor padding to __IPV4_DEVCONF_* enums
      include/uapi/linux/ip.h
  * Revert "ANDROID: GKI: ipv4: increase __IPV4_DEVCONF_MAX to 64"
      include/uapi/linux/ip.h
  * ANDROID: driver: gpu: drm: fix export symbol types
      drivers/gpu/drm/drm_panel.c
  * ANDROID: SoC: core: fix export symbol type
      sound/soc/soc-core.c
  * ANDROID: ufshcd-crypto: fix export symbol type
      drivers/scsi/ufs/ufshcd-crypto.c
  * ANDROID: GKI: drivers: mailbox: fix race resulting in multiple message submission
      drivers/mailbox/mailbox.c
    ANDROID: GKI: arm64: gki_defconfig: Enable a few thermal configs
  * Revert "ANDROID: GKI: add base.h include to match MODULE_VERSIONS"
      drivers/thermal/thermal_core.c
  * FROMLIST: thermal: Make cooling device trip point writable from sysfs
      drivers/thermal/thermal_core.c
      drivers/thermal/thermal_core.h
      drivers/thermal/thermal_sysfs.c
  * ANDROID: GKI: drivers: thermal: cpu_cooling: Use CPU ID as cooling device ID
      drivers/thermal/cpu_cooling.c
  * ANDROID: GKI: PM / devfreq: Allow min freq to be 0
      drivers/devfreq/devfreq.c
    ANDROID: GKI: arm64: gki_defconfig: Enable REGULATOR_PROXY_CONSUMER
    ANDROID: GKI: Bulk Update ABI XML representation
    ANDROID: KASAN support for GKI remove CONFIG_CC_WERROR
    ANDROID: KASAN support for GKI
    ANDROID: virt_wifi: fix export symbol types
  * ANDROID: vfs: fix export symbol type
      fs/attr.c
  * ANDROID: vfs: fix export symbol types
      fs/namei.c
  * ANDROID: fscrypt: fix export symbol type
      fs/crypto/fname.c
  * ANDROID: cfi: fix export symbol types
      kernel/cfi.c
  * ANDROID: bpf: fix export symbol type
      kernel/bpf/core.c
    Merge 4.19.119 into android-4.19
Linux 4.19.119
    s390/mm: fix page table upgrade vs 2ndary address mode accesses
    xfs: Fix deadlock between AGI and AGF with RENAME_WHITEOUT
    serial: sh-sci: Make sure status register SCxSR is read in correct sequence
  * xhci: prevent bus suspend if a roothub port detected a over-current condition
      drivers/usb/host/xhci-hub.c
  * usb: f_fs: Clear OS Extended descriptor counts to zero in ffs_data_reset()
      drivers/usb/gadget/function/f_fs.c
  * usb: dwc3: gadget: Fix request completion check
      drivers/usb/dwc3/gadget.c
    UAS: fix deadlock in error handling and PM flushing work
    UAS: no use logging any details in case of ENODEV
    cdc-acm: introduce a cool down
    cdc-acm: close race betrween suspend() and acm_softint
    staging: vt6656: Power save stop wake_up_count wrap around.
    staging: vt6656: Fix pairwise key entry save.
    staging: vt6656: Fix drivers TBTT timing counter.
    staging: vt6656: Fix calling conditions of vnt_set_bss_mode
    staging: vt6656: Don't set RCR_MULTICAST or RCR_BROADCAST by default.
    vt: don't use kmalloc() for the unicode screen buffer
    vt: don't hardcode the mem allocation upper bound
    staging: comedi: Fix comedi_device refcnt leak in comedi_open
    staging: comedi: dt2815: fix writing hi byte of analog output
    powerpc/setup_64: Set cache-line-size based on cache-block-size
    ARM: imx: provide v7_cpu_resume() only on ARM_CPU_SUSPEND=y
    iwlwifi: mvm: beacon statistics shouldn't go backwards
    iwlwifi: pcie: actually release queue memory in TVQM
  * ASoC: dapm: fixup dapm kcontrol widget
      sound/soc/soc-dapm.c
  * audit: check the length of userspace generated audit records
      kernel/audit.c
  * usb-storage: Add unusual_devs entry for JMicron JMS566
      drivers/usb/storage/unusual_devs.h
    tty: rocket, avoid OOB access
    tty: hvc: fix buffer overflow during hvc_alloc().
    KVM: VMX: Enable machine check support for 32bit targets
  * KVM: Check validity of resolved slot when searching memslots
      include/linux/kvm_host.h
    KVM: s390: Return last valid slot if approx index is out-of-bounds
    tpm: ibmvtpm: retry on H_CLOSED in tpm_ibmvtpm_send()
    tpm/tpm_tis: Free IRQ if probing fails
  * ALSA: usb-audio: Filter out unsupported sample rates on Focusrite devices
      sound/usb/format.c
  * ALSA: usb-audio: Fix usb audio refcnt leak when getting spdif
      sound/usb/mixer_quirks.c
    ALSA: hda/realtek - Add new codec supported for ALC245
    ALSA: hda/realtek - Fix unexpected init_amp override
    ALSA: usx2y: Fix potential NULL dereference
    tools/vm: fix cross-compile build
    mm/ksm: fix NULL pointer dereference when KSM zero page is enabled
    mm/hugetlb: fix a addressing exception caused by huge_pte_offset
  * vmalloc: fix remap_vmalloc_range() bounds checks
      include/linux/vmalloc.h
      mm/vmalloc.c
  * USB: hub: Fix handling of connect changes during sleep
      drivers/usb/core/hub.c
  * USB: core: Fix free-while-in-use bug in the USB S-Glibrary
      drivers/usb/core/message.c
    USB: early: Handle AMD's spec-compliant identifiers, too
  * USB: Add USB_QUIRK_DELAY_CTRL_MSG and USB_QUIRK_DELAY_INIT for Corsair K70 RGB RAPIDFIRE
      drivers/usb/core/quirks.c
    USB: sisusbvga: Change port variable from signed to unsigned
  * fs/namespace.c: fix mountpoint reference counter race
      fs/namespace.c
    iio: xilinx-xadc: Make sure not exceed maximum samplerate
    iio: xilinx-xadc: Fix sequencer configuration for aux channels in simultaneous mode
    iio: xilinx-xadc: Fix clearing interrupt when enabling trigger
    iio: xilinx-xadc: Fix ADC-B powerdown
    iio: adc: stm32-adc: fix sleep in atomic context
    iio: st_sensors: rely on odr mask to know if odr can be set
  * iio: core: remove extra semi-colon from devm_iio_device_register() macro
      include/linux/iio/iio.h
  * ALSA: usb-audio: Add connector notifier delegation
      sound/usb/mixer.c
      sound/usb/mixer.h
      sound/usb/mixer_maps.c
  * ALSA: usb-audio: Add static mapping table for ALC1220-VB-based mobos
      sound/usb/mixer.c
      sound/usb/mixer_maps.c
      sound/usb/quirks-table.h
    ALSA: hda: Remove ASUS ROG Zenith from the blacklist
  * KEYS: Avoid false positive ENOMEM error on key read
      security/keys/internal.h
      security/keys/keyctl.c
    mlxsw: Fix some IS_ERR() vs NULL bugs
    vrf: Check skb for XFRM_TRANSFORMED flag
  * xfrm: Always set XFRM_TRANSFORMED in xfrm{4,6}_output_finish
      net/ipv4/xfrm4_output.c
      net/ipv6/xfrm6_output.c
    net: dsa: b53: b53_arl_rw_op() needs to select IVL or SVL
    net: dsa: b53: Rework ARL bin logic
    net: dsa: b53: Fix ARL register definitions
    net: dsa: b53: Lookup VID in ARL searches when VLAN is enabled
    vrf: Fix IPv6 with qdisc and xfrm
    team: fix hang in team_mode_get()
  * tcp: cache line align MAX_TCP_HEADER
      include/net/tcp.h
    sched: etf: do not assume all sockets are full blown
    net/x25: Fix x25_neigh refcnt leak when receiving frame
    net: stmmac: dwmac-meson8b: Add missing boundary to RGMII TX clock array
    net: netrom: Fix potential nr_neigh refcnt leak in nr_add_node
    net: bcmgenet: correct per TX/RX ring statistics
    macvlan: fix null dereference in macvlan_device_event()
    macsec: avoid to set wrong mtu
  * ipv6: fix restrict IPV6_ADDRFORM operation
      net/ipv6/ipv6_sockglue.c
    cxgb4: fix large delays in PTP synchronization
    cxgb4: fix adapter crash due to wrong MC size
    x86/KVM: Clean up host's steal time structure
    x86/KVM: Make sure KVM_VCPU_FLUSH_TLB flag is not missed
  * x86/kvm: Cache gfn to pfn translation
      include/linux/kvm_host.h
      include/linux/kvm_types.h
  * x86/kvm: Introduce kvm_(un)map_gfn()
      include/linux/kvm_host.h
    KVM: Properly check if "page" is valid in kvm_vcpu_unmap
    kvm: fix compile on s390 part 2
    kvm: fix compilation on s390
    kvm: fix compilation on aarch64
  * KVM: Introduce a new guest mapping API
      include/linux/kvm_host.h
    KVM: nVMX: Always sync GUEST_BNDCFGS when it comes from vmcs01
    KVM: VMX: Zero out *all* general purpose registers after VM-Exit
  * f2fs: fix to avoid memory leakage in f2fs_listxattr
      fs/f2fs/xattr.c
  * blktrace: fix dereference after null check
      kernel/trace/blktrace.c
  * blktrace: Protect q->blk_trace with RCU
      include/linux/blkdev.h
      include/linux/blktrace_api.h
      kernel/trace/blktrace.c
  * net: ipv6_stub: use ip6_dst_lookup_flow instead of ip6_dst_lookup
      include/net/addrconf.h
      net/ipv6/addrconf_core.c
      net/ipv6/af_inet6.c
      net/tipc/udp_media.c
  * net: ipv6: add net argument to ip6_dst_lookup_flow
      include/net/ipv6.h
      net/ipv6/af_inet6.c
      net/ipv6/datagram.c
      net/ipv6/inet6_connection_sock.c
      net/ipv6/ip6_output.c
      net/ipv6/raw.c
      net/ipv6/syncookies.c
      net/ipv6/tcp_ipv6.c
      net/l2tp/l2tp_ip6.c
      net/sctp/ipv6.c
    PCI/ASPM: Allow re-enabling Clock PM
    scsi: smartpqi: fix call trace in device discovery
    virtio-blk: improve virtqueue error to BLK_STS
    tracing/selftests: Turn off timeout setting
    drm/amd/display: Not doing optimize bandwidth if flip pending.
  * xhci: Ensure link state is U3 after setting USB_SS_PORT_LS_U3
      drivers/usb/host/xhci-hub.c
    ASoC: Intel: bytcr_rt5640: Add quirk for MPMAN MPWIN895CL tablet
  * perf/core: Disable page faults when getting phys address
      kernel/events/core.c
    pwm: bcm2835: Dynamically allocate base
    pwm: renesas-tpu: Fix late Runtime PM enablement
    Revert "powerpc/64: irq_work avoid interrupt when called with hardware irqs enabled"
  * loop: Better discard support for block devices
      drivers/block/loop.c
    s390/cio: avoid duplicated 'ADD' uevents
    kconfig: qconf: Fix a few alignment issues
    ipc/util.c: sysvipc_find_ipc() should increase position index
    selftests: kmod: fix handling test numbers above 9
    kernel/gcov/fs.c: gcov_seq_next() should increase position index
    nvme: fix deadlock caused by ANA update wrong locking
    ASoC: Intel: atom: Take the drv->lock mutex before calling sst_send_slot_map()
    scsi: iscsi: Report unbind session event when the target has been removed
    pwm: rcar: Fix late Runtime PM enablement
    ceph: don't skip updating wanted caps when cap is stale
    ceph: return ceph_mdsc_do_request() errors from __get_parent()
    scsi: lpfc: Fix crash in target side cable pulls hitting WAIT_FOR_UNREG
    scsi: lpfc: Fix kasan slab-out-of-bounds error in lpfc_unreg_login
  * watchdog: reset last_hw_keepalive time at start
      drivers/watchdog/watchdog_dev.c
  * arm64: Silence clang warning on mismatched value/register sizes
      arch/arm64/kernel/sys_compat.c
  * arm64: compat: Workaround Neoverse-N1 #1542419 for compat user-space
      arch/arm64/kernel/sys_compat.c
  * arm64: Fake the IminLine size on systems affected by Neoverse-N1 #1542419
      arch/arm64/include/asm/cache.h
      arch/arm64/kernel/traps.c
  * arm64: errata: Hide CTR_EL0.DIC on systems affected by Neoverse-N1 #1542419
      arch/arm64/Kconfig
      arch/arm64/include/asm/cpucaps.h
      arch/arm64/kernel/cpu_errata.c
      arch/arm64/kernel/traps.c
  * arm64: Add part number for Neoverse N1
      arch/arm64/include/asm/cputype.h
  * vti4: removed duplicate log message.
      net/ipv4/ip_vti.c
    crypto: mxs-dcp - make symbols 'sha1_null_hash' and 'sha256_null_hash' static
    bpftool: Fix printing incorrect pointer in btf_dump_ptr
    drm/msm: Use the correct dma_sync calls harder
  * ext4: fix extent_status fragmentation for plain files
      fs/ext4/extents.c
    ANDROID: abi_gki_aarch64_cuttlefish_whitelist: remove stale symbols
  * ANDROID: GKI: ipv4: increase __IPV4_DEVCONF_MAX to 64
      include/uapi/linux/ip.h
  * ANDROID: GKI: power: add missing export for POWER_RESET_QCOM=m
      arch/arm64/kernel/process.c
      arch/arm64/mm/init.c
  * BACKPORT: cfg80211: Support key configuration for Beacon protection (BIGTK)
      include/net/cfg80211.h
      include/uapi/linux/nl80211.h
      net/wireless/nl80211.c
      net/wireless/rdev-ops.h
      net/wireless/sme.c
      net/wireless/trace.h
      net/wireless/util.c
  * BACKPORT: cfg80211: Enhance the AKM advertizement to support per interface.
      include/net/cfg80211.h
      include/uapi/linux/nl80211.h
      net/wireless/nl80211.c
  * UPSTREAM: sysrq: Use panic() to force a crash
      drivers/tty/sysrq.c
  * ANDROID: GKI: kernel: sound: update codec options with block size
      include/uapi/sound/compress_params.h
    ANDROID: add compat cross compiler
    ANDROID: x86/vdso: disable LTO only for VDSO
  * BACKPORT: arm64: vdso32: Enable Clang Compilation
      arch/arm64/kernel/vdso32/Makefile
  * UPSTREAM: arm64: compat: vdso: Expose BUILD_VDSO32
      arch/arm64/include/asm/vdso/compat_gettimeofday.h
  * BACKPORT: lib/vdso: Enable common headers
      include/vdso/datapage.h
      lib/vdso/gettimeofday.c
    BACKPORT: arm: vdso: Enable arm to use common headers
    BACKPORT: x86/vdso: Enable x86 to use common headers
    BACKPORT: mips: vdso: Enable mips to use common headers
  * UPSTREAM: arm64: vdso32: Include common headers in the vdso library
      arch/arm64/include/asm/vdso/compat_gettimeofday.h
      arch/arm64/kernel/vdso32/vgettimeofday.c
  * UPSTREAM: arm64: vdso: Include common headers in the vdso library
      arch/arm64/include/asm/vdso/gettimeofday.h
      arch/arm64/kernel/vdso/vgettimeofday.c
  * UPSTREAM: arm64: Introduce asm/vdso/processor.h
      arch/arm64/include/asm/processor.h
      arch/arm64/include/asm/vdso/processor.h
  * BACKPORT: arm64: vdso32: Code clean up
      arch/arm64/include/asm/vdso/compat_gettimeofday.h
      arch/arm64/kernel/vdso32/vgettimeofday.c
  * UPSTREAM: linux/elfnote.h: Replace elf.h with UAPI equivalent
      include/linux/elfnote.h
  * UPSTREAM: scripts: Fix the inclusion order in modpost
      scripts/mod/modpost.c
  * UPSTREAM: common: Introduce processor.h
      include/vdso/processor.h
  * UPSTREAM: linux/ktime.h: Extract common header for vDSO
      include/linux/ktime.h
      include/vdso/ktime.h
  * UPSTREAM: linux/jiffies.h: Extract common header for vDSO
      include/linux/jiffies.h
      include/vdso/jiffies.h
  * UPSTREAM: linux/time64.h: Extract common header for vDSO
      include/linux/time64.h
      include/vdso/time64.h
  * BACKPORT: linux/time32.h: Extract common header for vDSO
      include/linux/time32.h
      include/vdso/time32.h
  * BACKPORT: linux/time.h: Extract common header for vDSO
      include/linux/time.h
      include/vdso/time.h
  * UPSTREAM: linux/math64.h: Extract common header for vDSO
      include/linux/math64.h
      include/vdso/math64.h
  * BACKPORT: linux/clocksource.h: Extract common header for vDSO
      include/linux/clocksource.h
      include/vdso/clocksource.h
    BACKPORT: mips: Introduce asm/vdso/clocksource.h
  * BACKPORT: arm64: Introduce asm/vdso/clocksource.h
      arch/arm64/include/asm/clocksource.h
      arch/arm64/include/asm/vdso/clocksource.h
    BACKPORT: arm: Introduce asm/vdso/clocksource.h
    BACKPORT: x86: Introduce asm/vdso/clocksource.h
  * UPSTREAM: linux/limits.h: Extract common header for vDSO
      include/linux/limits.h
      include/vdso/limits.h
  * BACKPORT: linux/kernel.h: split *_MAX and *_MIN macros into <linux/limits.h>
      include/linux/kernel.h
      include/linux/limits.h
      include/uapi/linux/limits.h
  * BACKPORT: linux/bits.h: Extract common header for vDSO
      include/linux/bits.h
      include/vdso/bits.h
  * UPSTREAM: linux/const.h: Extract common header for vDSO
      include/linux/const.h
      include/vdso/const.h
  * BACKPORT: arm64: vdso: fix flip/flop vdso build bug
      arch/arm64/kernel/vdso/Makefile
      arch/arm64/kernel/vdso32/Makefile
  * UPSTREAM: lib/vdso: Allow the high resolution parts to be compiled out
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso: Only read hrtimer_res when needed in __cvdso_clock_getres()
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso: Mark do_hres() and do_coarse() as __always_inline
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso: Avoid duplication in __cvdso_clock_getres()
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso: Let do_coarse() return 0 to simplify the callsite
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso: Remove checks on return value for 32 bit vDSO
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso: Build 32 bit specific functions in the right context
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso: Make __cvdso_clock_getres() static
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso: Make clock_getres() POSIX compliant again
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso/32: Provide legacy syscall fallbacks
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso: Move fallback invocation to the callers
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso/32: Remove inconsistent NULL pointer checks
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso: Make delta calculation work correctly
      lib/vdso/gettimeofday.c
  * UPSTREAM: arm64: compat: Fix syscall number of compat_clock_getres
      arch/arm64/include/asm/unistd.h
  * BACKPORT: arm64: lse: Fix LSE atomics with LLVM
      arch/arm64/include/asm/lse.h
    UPSTREAM: mips: Fix gettimeofday() in the vdso library
    UPSTREAM: mips: vdso: Fix __arch_get_hw_counter()
  * BACKPORT: arm64: Kconfig: Make CONFIG_COMPAT_VDSO a proper Kconfig option
      arch/arm64/Kconfig
      arch/arm64/Makefile
  * UPSTREAM: arm64: vdso32: Rename COMPATCC to CC_COMPAT
      arch/arm64/kernel/vdso32/Makefile
  * UPSTREAM: arm64: vdso32: Pass '--target' option to clang via VDSO_CAFLAGS
      arch/arm64/kernel/vdso32/Makefile
  * UPSTREAM: arm64: vdso32: Don't use KBUILD_CPPFLAGS unconditionally
      arch/arm64/kernel/vdso32/Makefile
  * UPSTREAM: arm64: vdso32: Move definition of COMPATCC into vdso32/Makefile
      arch/arm64/Makefile
      arch/arm64/kernel/vdso32/Makefile
  * UPSTREAM: arm64: Default to building compat vDSO with clang when CONFIG_CC_IS_CLANG
      arch/arm64/Makefile
  * UPSTREAM: lib: vdso: Remove CROSS_COMPILE_COMPAT_VDSO
      lib/vdso/Kconfig
  * UPSTREAM: arm64: vdso32: Remove jump label config option in Makefile
      arch/arm64/kernel/vdso32/Makefile
  * UPSTREAM: arm64: vdso32: Detect binutils support for dmb ishld
      arch/arm64/include/asm/vdso/compat_barrier.h
      arch/arm64/kernel/vdso32/Makefile
    BACKPORT: arm64: vdso: Remove stale files from old assembly implementation
  * UPSTREAM: arm64: vdso32: Fix broken compat vDSO build warnings
      arch/arm64/Kconfig
      arch/arm64/Makefile
      arch/arm64/kernel/vdso32/Makefile
    UPSTREAM: mips: compat: vdso: Use legacy syscalls as fallback
    BACKPORT: arm64: Relax Documentation/arm64/tagged-pointers.rst
    BACKPORT: arm64: Add tagged-address-abi.rst to index.rst
  * UPSTREAM: arm64: vdso: Fix Makefile regression
      arch/arm64/Makefile
    UPSTREAM: mips: vdso: Fix flip/flop vdso building bug
    UPSTREAM: mips: vdso: Fix source path
    UPSTREAM: mips: Add clock_gettime64 entry point
    UPSTREAM: mips: Add clock_getres entry point
    BACKPORT: mips: Add support for generic vDSO
  * BACKPORT: arm64: vdso: Explicitly add build-id option
      arch/arm64/kernel/vdso/Makefile
  * BACKPORT: arm64: vdso: use $(LD) instead of $(CC) to link VDSO
      arch/arm64/kernel/vdso/Makefile
  * BACKPORT: arm64: vdso: Cleanup Makefiles
      arch/arm64/kernel/vdso/Makefile
      arch/arm64/kernel/vdso32/Makefile
  * UPSTREAM: arm64: vdso: Fix population of AT_SYSINFO_EHDR for compat vdso
      arch/arm64/include/asm/elf.h
  * UPSTREAM: arm64: vdso: Fix compilation with clang older than 8
      arch/arm64/kernel/vdso/Makefile
  * UPSTREAM: arm64: compat: Fix __arch_get_hw_counter() implementation
      arch/arm64/include/asm/vdso/compat_gettimeofday.h
  * UPSTREAM: arm64: Fix __arch_get_hw_counter() implementation
      arch/arm64/include/asm/vdso/gettimeofday.h
    UPSTREAM: x86/vdso/32: Use 32bit syscall fallback
    UPSTREAM: x86/vdso: Fix flip/flop vdso build bug
    UPSTREAM: x86/vdso: Give the [ph]vclock_page declarations real types
    UPSTREAM: x86/vdso: Add clock_gettime64() entry point
    BACKPORT: x86/vdso: Add clock_getres() entry point
    BACKPORT: x86/vdso: Switch to generic vDSO implementation
    UPSTREAM: x86/segments: Introduce the 'CPUNODE' naming to better document the segment limit CPU/node NR trick
    UPSTREAM: x86/vdso: Initialize the CPU/node NR segment descriptor earlier
    UPSTREAM: x86/vdso: Introduce helper functions for CPU and node number
    UPSTREAM: x86/segments/64: Rename the GDT PER_CPU entry to CPU_NUMBER
  * BACKPORT: arm64: vdso: Enable vDSO compat support
      arch/arm64/Kconfig
      arch/arm64/Makefile
      arch/arm64/kernel/Makefile
  * UPSTREAM: arm64: compat: Get sigreturn trampolines from vDSO
      arch/arm64/include/asm/vdso.h
      arch/arm64/kernel/signal32.c
  * UPSTREAM: arm64: elf: VDSO code page discovery
      arch/arm64/include/asm/elf.h
  * UPSTREAM: arm64: compat: VDSO setup for compat layer
      arch/arm64/kernel/vdso.c
  * UPSTREAM: arm64: vdso: Refactor vDSO code
      arch/arm64/kernel/vdso.c
  * BACKPORT: arm64: compat: Add vDSO
      arch/arm64/include/asm/vdso/compat_barrier.h
      arch/arm64/include/asm/vdso/compat_gettimeofday.h
      arch/arm64/kernel/vdso32/Makefile
      arch/arm64/kernel/vdso32/note.c
      arch/arm64/kernel/vdso32/sigreturn.S
      arch/arm64/kernel/vdso32/vdso.S
      arch/arm64/kernel/vdso32/vdso.lds.S
      arch/arm64/kernel/vdso32/vgettimeofday.c
  * UPSTREAM: arm64: compat: Generate asm offsets for signals
      arch/arm64/kernel/asm-offsets.c
  * UPSTREAM: arm64: compat: Expose signal related structures
      arch/arm64/include/asm/signal32.h
      arch/arm64/kernel/signal32.c
  * UPSTREAM: arm64: compat: Add missing syscall numbers
      arch/arm64/include/asm/unistd.h
  * BACKPORT: arm64: vdso: Substitute gettimeofday() with C implementation
      arch/arm64/Kconfig
      arch/arm64/include/asm/vdso/gettimeofday.h
      arch/arm64/include/asm/vdso/vsyscall.h
      arch/arm64/kernel/asm-offsets.c
      arch/arm64/kernel/vdso.c
      arch/arm64/kernel/vdso/Makefile
      arch/arm64/kernel/vdso/vgettimeofday.c
  * UPSTREAM: timekeeping: Provide a generic update_vsyscall() implementation
      include/asm-generic/vdso/vsyscall.h
      include/vdso/vsyscall.h
      kernel/time/Makefile
      kernel/time/vsyscall.c
  * UPSTREAM: lib/vdso: Add compat support
      lib/vdso/gettimeofday.c
  * UPSTREAM: lib/vdso: Provide generic VDSO implementation
      include/vdso/helpers.h
      lib/Kconfig
      lib/vdso/Kconfig
      lib/vdso/Makefile
      lib/vdso/gettimeofday.c
  * UPSTREAM: vdso: Define standardized vdso_datapage
      include/vdso/datapage.h
  * UPSTREAM: hrtimer: Split out hrtimer defines into separate header
      include/linux/hrtimer.h
      include/linux/hrtimer_defs.h
    UPSTREAM: nds32: Fix vDSO clock_getres()
  * UPSTREAM: arm64: compat: Reduce address limit for 64K pages
      arch/arm64/include/asm/processor.h
  * BACKPORT: arm64: compat: Add KUSER_HELPERS config option
      arch/arm64/Kconfig
      arch/arm64/kernel/Makefile
      arch/arm64/kernel/kuser32.S
      arch/arm64/kernel/vdso.c
  * UPSTREAM: arm64: compat: Refactor aarch32_alloc_vdso_pages()
      arch/arm64/kernel/vdso.c
  * BACKPORT: arm64: compat: Split kuser32
      arch/arm64/kernel/Makefile
      arch/arm64/kernel/kuser32.S
  * UPSTREAM: arm64: compat: Alloc separate pages for vectors and sigpage
      arch/arm64/include/asm/elf.h
      arch/arm64/include/asm/signal32.h
      arch/arm64/kernel/signal32.c
      arch/arm64/kernel/vdso.c
    ANDROID: GKI: Update ABI XML representation
  * ANDROID: GKI: Enable GENERIC_IRQ_CHIP
      init/Kconfig.gki
  * ANDROID: GKI: power_supply: Add FG_TYPE power-supply property
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: GKI: mm: export mm_trace_rss_stat for modules to report RSS changes
      mm/memory.c
    ANDROID: GKI: gki_defconfig: Enable CONFIG_LEDS_TRIGGER_TRANSIENT
    ANDROID: GKI: gki_defconfig: Enable CONFIG_CPU_FREQ_STAT
    ANDROID: GKI: arm64: gki_defconfig: Disable HW tracing features
    ANDROID: GKI: gki_defconfig: Enable CONFIG_I2C_CHARDEV
  * ANDROID: Incremental fs: Use simple compression in log buffer
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/vfs.c
  * ANDROID: GKI: usb: core: Add support to parse config summary capability descriptors
      drivers/usb/core/config.c
      drivers/usb/core/generic.c
      include/linux/usb.h
      include/uapi/linux/usb/ch9.h
    ANDROID: GKI: Update ABI XML representation
    ANDROID: dm-bow: Fix not to skip trim at framented range
  * ANDROID: Remove VLA from uid_sys_stats.c
      drivers/misc/uid_sys_stats.c
    f2fs: fix missing check for f2fs_unlock_op
  * ANDROID: fix wakeup reason findings
      kernel/power/wakeup_reason.c
  * UPSTREAM: cfg80211: fix and clean up cfg80211_gen_new_bssid()
      include/net/cfg80211.h
  * UPSTREAM: cfg80211: save multi-bssid properties
      include/net/cfg80211.h
      net/wireless/scan.c
  * UPSTREAM: cfg80211: make BSSID generation function inline
      include/net/cfg80211.h
      net/wireless/scan.c
  * UPSTREAM: cfg80211: parse multi-bssid only if HW supports it
      include/net/cfg80211.h
      net/wireless/scan.c
  * UPSTREAM: cfg80211: Move Multiple BSS info to struct cfg80211_bss to be visible
      include/net/cfg80211.h
      net/wireless/core.h
      net/wireless/scan.c
  * UPSTREAM: cfg80211: Properly track transmitting and non-transmitting BSS
      net/wireless/core.h
      net/wireless/scan.c
  * UPSTREAM: cfg80211: use for_each_element() for multi-bssid parsing
      net/wireless/scan.c
  * UPSTREAM: cfg80211: Parsing of Multiple BSSID information in scanning
      net/wireless/core.h
      net/wireless/scan.c
  * UPSTREAM: cfg80211/nl80211: Offload OWE processing to user space in AP mode
      include/net/cfg80211.h
      include/uapi/linux/nl80211.h
      net/wireless/nl80211.c
      net/wireless/rdev-ops.h
      net/wireless/trace.h
  * ANDROID: GKI: cfg80211: Sync nl80211 commands/feature with upstream
      include/uapi/linux/nl80211.h
    ANDROID: GKI: gki_defconfig: Enable FW_LOADER_USER_HELPER*
    ANDROID: GKI: arm64: gki_defconfig: Disable CONFIG_ARM64_TAGGED_ADDR_ABI
    ANDROID: GKI: gki_defconfig: CONFIG_CHR_DEV_SG=y
    ANDROID: GKI: gki_defconfig: CONFIG_DM_DEFAULT_KEY=m
    ANDROID: update the ABI xml representation
  * ANDROID: init: GKI: enable hidden configs for GPU
      init/Kconfig.gki
    Merge 4.19.118 into android-4.19
Linux 4.19.118
  * bpf: fix buggy r0 retval refinement for tracing helpers
      kernel/bpf/verifier.c
  * KEYS: Don't write out to userspace while holding key semaphore
      include/keys/big_key-type.h
      include/keys/user-type.h
      include/linux/key-type.h
      net/dns_resolver/dns_key.c
      security/keys/keyctl.c
      security/keys/keyring.c
      security/keys/request_key_auth.c
      security/keys/user_defined.c
    mtd: phram: fix a double free issue in error path
    mtd: lpddr: Fix a double free in probe()
    mtd: spinand: Explicitly use MTD_OPS_RAW to write the bad block marker to OOB
    locktorture: Print ratio of acquisitions, not failures
    tty: evh_bytechan: Fix out of bounds accesses
    iio: si1133: read 24-bit signed integer for measurement
    fbdev: potential information leak in do_fb_ioctl()
    net: dsa: bcm_sf2: Fix overflow checks
  * f2fs: fix to wait all node page writeback
      fs/f2fs/node.c
    iommu/amd: Fix the configuration of GCR3 table root pointer
    libnvdimm: Out of bounds read in __nd_ioctl()
    power: supply: axp288_fuel_gauge: Broaden vendor check for Intel Compute Sticks.
    ext2: fix debug reference to ext2_xattr_cache
    ext2: fix empty body warnings when -Wextra is used
    iommu/vt-d: Fix mm reference leak
    drm/vc4: Fix HDMI mode validation
  * f2fs: fix NULL pointer dereference in f2fs_write_begin()
      fs/f2fs/super.c
    NFS: Fix memory leaks in nfs_pageio_stop_mirroring()
    drm/amdkfd: kfree the wrong pointer
  * x86: ACPI: fix CPU hotplug deadlock
      include/acpi/processor.h
    KVM: s390: vsie: Fix possible race when shadowing region 3 tables
  * compiler.h: fix error in BUILD_BUG_ON() reporting
      include/linux/compiler.h
  * percpu_counter: fix a data race at vm_committed_as
      include/linux/percpu_counter.h
  * include/linux/swapops.h: correct guards for non_swap_entry()
      include/linux/swapops.h
    cifs: Allocate encryption header through kmalloc
    um: ubd: Prevent buffer overrun on command completion
  * ext4: do not commit super on read-only bdev
      fs/ext4/super.c
    s390/cpum_sf: Fix wrong page count in error message
    powerpc/maple: Fix declaration made after definition
    s390/cpuinfo: fix wrong output when CPU0 is offline
    NFS: direct.c: Fix memory leak of dreq when nfs_get_lock_context fails
    NFSv4/pnfs: Return valid stateids in nfs_layout_find_inode_by_stateid()
    rtc: 88pm860x: fix possible race condition
    soc: imx: gpc: fix power up sequencing
    clk: tegra: Fix Tegra PMC clock out parents
    power: supply: bq27xxx_battery: Silence deferred-probe error
    clk: at91: usb: continue if clk_hw_round_rate() return zero
    x86/Hyper-V: Report crash data in die() when panic_on_oops is set
    x86/Hyper-V: Report crash register data when sysctl_record_panic_msg is not set
    x86/Hyper-V: Trigger crash enlightenment only once during system crash.
    x86/Hyper-V: Free hv_panic_page when fail to register kmsg dump
    x86/Hyper-V: Unload vmbus channel in hv panic callback
    xsk: Add missing check on user supplied headroom size
    rbd: call rbd_dev_unprobe() after unwatching and flushing notifies
    rbd: avoid a deadlock on header_rwsem when flushing notifies
    video: fbdev: sis: Remove unnecessary parentheses and commented code
    lib/raid6: use vdupq_n_u8 to avoid endianness warnings
    x86/Hyper-V: Report crash register data or kmsg before running crash kernel
    of: overlay: kmemleak in dup_and_fixup_symbol_prop()
    of: unittest: kmemleak in of_unittest_overlay_high_level()
    of: unittest: kmemleak in of_unittest_platform_populate()
    of: unittest: kmemleak on changeset destroy
    ALSA: hda: Don't release card at firmware loading error
    irqchip/mbigen: Free msi_desc on device teardown
    netfilter: nf_tables: report EOPNOTSUPP on unsupported flags/object type
    ARM: dts: imx6: Use gpc for FEC interrupt controller to fix wake on LAN.
    arm, bpf: Fix bugs with ALU64 {RSH, ARSH} BPF_K shift by 0
    watchdog: sp805: fix restart handler
  * ext4: use non-movable memory for superblock readahead
      fs/buffer.c
      fs/ext4/inode.c
      fs/ext4/super.c
      include/linux/buffer_head.h
  * scsi: sg: add sg_remove_request in sg_common_write
      drivers/scsi/sg.c
    objtool: Fix switch table detection in .text.unlikely
    arm, bpf: Fix offset overflow for BPF_MEM BPF_DW
    ANDROID: GKI: Bulk update ABI report.
  * ANDROID: GKI: qos: Register irq notify after adding the qos request
      kernel/power/qos.c
  * ANDROID: GKI: Add dual role mode to usb_dr_modes array
      drivers/usb/common/common.c
  * UPSTREAM: virtio-gpu api: comment feature flags
      include/uapi/linux/virtio_gpu.h
  * ANDROID: arch:arm64: Increase kernel command line size
      arch/arm64/include/uapi/asm/setup.h
  * ANDROID: GKI: Add special linux_banner_ptr for modules
      include/linux/printk.h
      init/version.c
  * Revert "ANDROID: GKI: Make linux_banner a C pointer"
      include/linux/printk.h
      init/version.c
  * ANDROID: GKI: PM / devfreq: Add new flag to do simple clock scaling
      drivers/devfreq/governor_simpleondemand.c
      include/linux/devfreq.h
  * ANDROID: GKI: Resolve ABI diff for struct snd_usb_audio
      sound/usb/card.c
      sound/usb/stream.c
      sound/usb/usbaudio.h
    ANDROID: GKI: Bulk update ABI
    ANDROID: GKI: Update the whitelist for qcom SoCs
    ANDROID: GKI: arm64: gki_defconfig: Set CONFIG_SCSI_UFSHCD=m
  * ANDROID: GKI: scsi: add option to override the command timeout
      drivers/scsi/scsi_lib.c
      drivers/scsi/sd.c
      drivers/scsi/sg.c
      include/scsi/scsi_device.h
  * ANDROID: GKI: scsi: Adjust DBD setting in mode sense for caching mode page per LLD
      drivers/scsi/sd.c
      include/scsi/scsi_host.h
  * ANDROID: add ion_stat tracepoint to common kernel
      drivers/staging/android/ion/Makefile
      drivers/staging/android/ion/ion.c
      lib/vsprintf.c
  * UPSTREAM: gpu/trace: add a gpu total memory usage tracepoint
      drivers/Kconfig
      drivers/gpu/Makefile
      drivers/gpu/trace/Kconfig
      drivers/gpu/trace/Makefile
      drivers/gpu/trace/trace_gpu_mem.c
      include/trace/events/gpu_mem.h
    Merge 4.19.117 into android-4.19
Linux 4.19.117
  * mm/vmalloc.c: move 'area->pages' after if statement
      mm/vmalloc.c
    wil6210: remove reset file from debugfs
    wil6210: make sure Rx ring sizes are correlated
    wil6210: add general initialization/size checks
    wil6210: ignore HALP ICR if already handled
    wil6210: check rx_buff_mgmt before accessing it
    x86/resctrl: Fix invalid attempt at removing the default resource group
    x86/resctrl: Preserve CDP enable over CPU hotplug
    x86/microcode/AMD: Increase microcode PATCH_MAX_SIZE
  * scsi: target: fix hang when multiple threads try to destroy the same iscsi session
      include/target/iscsi/iscsi_target_core.h
    scsi: target: remove boilerplate code
    kvm: x86: Host feature SSBD doesn't imply guest feature SPEC_CTRL_SSBD
  * ext4: do not zeroout extents beyond i_disksize
      fs/ext4/extents.c
    drm/amd/powerplay: force the trim of the mclk dpm_levels if OD is enabled
  * usb: dwc3: gadget: Don't clear flags before transfer ended
      drivers/usb/dwc3/gadget.c
  * usb: dwc3: gadget: don't enable interrupt when disabling endpoint
      drivers/usb/dwc3/gadget.c
    mac80211_hwsim: Use kstrndup() in place of kasprintf()
    btrfs: check commit root generation in should_ignore_root
  * tracing: Fix the race between registering 'snapshot' event trigger and triggering 'snapshot' operation
      kernel/trace/trace_events_trigger.c
  * keys: Fix proc_keys_next to increase position index
      security/keys/proc.c
  * ALSA: usb-audio: Check mapping at creating connector controls, too
      sound/usb/mixer.c
      sound/usb/mixer_maps.c
  * ALSA: usb-audio: Don't create jack controls for PCM terminals
      sound/usb/mixer.c
  * ALSA: usb-audio: Don't override ignore_ctl_error value from the map
      sound/usb/mixer.c
  * ALSA: usb-audio: Filter error from connector kctl ops, too
      sound/usb/mixer.c
    ASoC: Intel: mrfld: return error codes when an error occurs
    ASoC: Intel: mrfld: fix incorrect check on p->sink
  * ext4: fix incorrect inodes per group in error message
      fs/ext4/super.c
  * ext4: fix incorrect group count in ext4_fill_super error message
      fs/ext4/super.c
    pwm: pca9685: Fix PWM/GPIO inter-operation
  * jbd2: improve comments about freeing data buffers whose page mapping is NULL
      fs/jbd2/commit.c
  * scsi: ufs: Fix ufshcd_hold() caused scheduling while atomic
      drivers/scsi/ufs/ufshcd.c
  * ovl: fix value of i_ino for lower hardlink corner case
      fs/overlayfs/inode.c
    net: dsa: mt7530: fix tagged frames pass-through in VLAN-unaware mode
    net: stmmac: dwmac-sunxi: Provide TX and RX fifo sizes
  * net: revert default NAPI poll timeout to 2 jiffies
      net/core/dev.c
  * net: qrtr: send msgs from local of same id as broadcast
      net/qrtr/qrtr.c
  * net: ipv6: do not consider routes via gateways for anycast address check
      include/net/ip6_route.h
  * net: ipv4: devinet: Fix crash when add/del multicast IP with autojoin
      net/ipv4/devinet.c
    hsr: check protocol version in hsr_newlink()
    amd-xgbe: Use __napi_schedule() in BH context
  * ANDROID: GKI: drivers: of-thermal: Relate thermal zones using same sensor
      drivers/thermal/of-thermal.c
    ANDROID: GKI: Bulk ABI update
  * ANDROID: GKI: dma: Add set_dma_mask hook to struct dma_map_ops
      include/linux/dma-mapping.h
    Merge remote-tracking branch 'aosp/upstream-f2fs-stable-linux-4.19.y' into android-4.19
    ANDROID: GKI: ABI update due to recent patches
    Merge 4.19.116 into android-4.19
  * FROMLIST: drm/prime: add support for virtio exported objects
      drivers/gpu/drm/drm_prime.c
      include/drm/drm_drv.h
  * FROMLIST: dma-buf: add support for virtio exported objects
      drivers/dma-buf/dma-buf.c
      include/linux/dma-buf.h
    UPSTREAM: drm/virtio: module_param_named() requires linux/moduleparam.h
    UPSTREAM: drm/virtio: fix resource id creation race
    UPSTREAM: drm/virtio: make resource id workaround runtime switchable.
    BACKPORT: drm/virtio: Drop deprecated load/unload initialization
  * ANDROID: GKI: Add DRM_TTM config to GKI
      init/Kconfig.gki
    ANDROID: Bulk update the ABI xml representation
  * ANDROID: GKI: spmi: pmic-arb: don't enable SPMI_MSM_PMIC_ARB by default
      drivers/spmi/Kconfig
  * ANDROID: GKI: attribute page lock and waitqueue functions as sched
      include/linux/pagemap.h
      include/linux/wait.h
      kernel/sched/wait.c
      mm/filemap.c
  * ANDROID: GKI: extcon: Fix Add usage of blocking notifier chain
      drivers/extcon/extcon.c
      include/linux/extcon.h
  * ANDROID: GKI: USB: pd: Extcon fix for C current
      include/linux/extcon.h
  * ANDROID: drm/dsi: Fix byte order of DCS set/get brightness
      drivers/gpu/drm/drm_mipi_dsi.c
      include/drm/drm_mipi_dsi.h
  * ANDROID: GKI: mm: Export symbols to modularize CONFIG_MSM_DRM
      mm/vmalloc.c
  * ANDROID: GKI: ALSA: compress: Add support to send codec specific data
      include/sound/compress_driver.h
      include/uapi/sound/compress_offload.h
      sound/core/compress_offload.c
      sound/soc/soc-compress.c
  * ANDROID: GKI: ALSA: Compress - dont use lock for all ioctls
      sound/core/compress_offload.c
  * ANDROID: GKI: ASoC: msm: qdsp6v2: add support for AMR_WB_PLUS offload
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: msm: dolby: MAT and THD audiocodec name modification
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: asoc: msm: Add support for compressed perf mode
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: msm: audio: support for gapless_pcm
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: uapi: msm: dolby: Support for TrueHD and MAT decoders
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: ASoC: msm: qdsp6v2: Add TrueHD HDMI compress pass-though
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: ALSA: compress: Add APTX format support in ALSA
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: msm: qdsp6v2: Add timestamp support for compress capture
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: SoC: msm: Add support for meta data in compressed TX
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: ALSA: compress: Add DSD format support for ALSA
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: ASoC: msm: qdsp6v2: add support for ALAC and APE offload
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: SoC: msm: Add compressed TX and passthrough support
      include/uapi/sound/compress_offload.h
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: ASoC: msm: qdsp6v2: Add FLAC in compress offload path
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: ASoC: msm: add support for different compressed formats
      include/uapi/sound/compress_params.h
  * ANDROID: GKI: ASoC: msm: Update the encode option and sample rate
      include/uapi/sound/compress_params.h
    ANDROID: GKI: Enable CONFIG_SND_VERBOSE_PROCFS in gki_defconfig
  * ANDROID: GKI: Add hidden CONFIG_SND_SOC_COMPRESS to gki_defconfig
      init/Kconfig.gki
  * ANDROID: GKI: ALSA: pcm: add locks for accessing runtime resource
      include/sound/pcm.h
    ANDROID: GKI: Update ABI for DRM changes
  * ANDROID: GKI: Add drm_dp_send_dpcd_{read,write} accessor functions
      drivers/gpu/drm/drm_dp_mst_topology.c
      include/drm/drm_dp_mst_helper.h
  * ANDROID: GKI: drm: Add drm_dp_mst_get_max_sdp_streams_supported accessor function
      drivers/gpu/drm/drm_dp_mst_topology.c
      include/drm/drm_dp_mst_helper.h
  * ANDROID: GKI: drm: Add drm_dp_mst_has_fec accessor function
      drivers/gpu/drm/drm_dp_mst_topology.c
      include/drm/drm_dp_mst_helper.h
  * ANDROID: GKI: Add 'dsc_info' to struct drm_dp_mst_port
      drivers/gpu/drm/drm_dp_mst_topology.c
      include/drm/drm_dp_mst_helper.h
  * ANDROID: GKI: usb: Add support to handle USB SMMU S1 address
      drivers/usb/core/hcd.c
      drivers/usb/core/usb.c
      drivers/usb/host/xhci.c
      include/linux/usb.h
      include/linux/usb/hcd.h
  * ANDROID: GKI: usb: Add helper APIs to return xhci phys addresses
      drivers/usb/core/hcd.c
      drivers/usb/core/usb.c
      drivers/usb/host/xhci.c
      include/linux/usb.h
      include/linux/usb/hcd.h
  * ANDROID: Add C protos for dma_buf/drm_prime get_uuid
      include/drm/drm_prime.h
      include/linux/dma-buf.h
  * ANDROID: GKI: Make linux_banner a C pointer
      include/linux/printk.h
      init/version.c
  * ANDROID: GKI: Add 'refresh_rate', 'id' to struct drm_panel_notifier
      include/drm/drm_panel.h
  * ANDROID: GKI: Add 'i2c_mutex' to struct drm_dp_aux
      include/drm/drm_dp_helper.h
  * ANDROID: GKI: Add 'checksum' to struct drm_connector
      include/drm/drm_connector.h
  * Revert "BACKPORT: drm: Add HDR source metadata property"
      drivers/gpu/drm/drm_atomic.c
      drivers/gpu/drm/drm_connector.c
      include/drm/drm_connector.h
      include/drm/drm_mode_config.h
      include/linux/hdmi.h
      include/uapi/drm/drm_mode.h
  * Revert "BACKPORT: drm: Parse HDR metadata info from EDID"
      drivers/gpu/drm/drm_edid.c
  * ANDROID: drm: Add DP colorspace property
      drivers/gpu/drm/drm_connector.c
      include/drm/drm_connector.h
  * ANDROID: GKI: drm: Initialize display->hdmi when parsing vsdb
      drivers/gpu/drm/drm_edid.c
  * ANDROID: drivers: gpu: drm: add support to batch commands
      drivers/gpu/drm/drm_mipi_dsi.c
      include/drm/drm_mipi_dsi.h
    ANDROID: ABI: update the qcom whitelist
  * ANDROID: GKI: ARM64: smp: add vendor field pending_ipi
      arch/arm64/kernel/smp.c
    ANDROID: gki_defconfig: enable msm serial early console
  * ANDROID: serial: msm_geni_serial_console : Add Earlycon support
      drivers/tty/serial/Kconfig
      drivers/tty/serial/Makefile
      drivers/tty/serial/msm_geni_serial_console.c
  * ANDROID: GKI: serial: core: export uart_console_device
      drivers/tty/serial/serial_core.c
  * f2fs: fix quota_sync failure due to f2fs_lock_op
      fs/f2fs/data.c
  * f2fs: support read iostat
      fs/f2fs/checkpoint.c
      fs/f2fs/data.c
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
      fs/f2fs/gc.c
      fs/f2fs/node.c
      fs/f2fs/sysfs.c
      include/trace/events/f2fs.h
  * f2fs: Fix the accounting of dcc->undiscard_blks
      fs/f2fs/segment.c
  * f2fs: fix to handle error path of f2fs_ra_meta_pages()
      fs/f2fs/checkpoint.c
  * f2fs: report the discard cmd errors properly
      fs/f2fs/segment.c
  * f2fs: fix long latency due to discard during umount
      fs/f2fs/segment.c
  * f2fs: add tracepoint for f2fs iostat
      fs/f2fs/f2fs.h
      fs/f2fs/super.c
      fs/f2fs/sysfs.c
      include/trace/events/f2fs.h
  * f2fs: introduce sysfs/data_io_flag to attach REQ_META/FUA
      fs/f2fs/data.c
      fs/f2fs/f2fs.h
      fs/f2fs/sysfs.c
    ANDROID: GKI: update abi definition due to previous changes in the tree
Linux 4.19.116
    efi/x86: Fix the deletion of variables in mixed mode
    mfd: dln2: Fix sanity checking for endpoints
    etnaviv: perfmon: fix total and idle HI cyleces readout
    misc: echo: Remove unnecessary parentheses and simplify check for zero
    powerpc/fsl_booke: Avoid creating duplicate tlb1 entry
    ftrace/kprobe: Show the maxactive number on kprobe_events
  * drm: Remove PageReserved manipulation from drm_pci_alloc
      drivers/gpu/drm/drm_pci.c
  * drm/dp_mst: Fix clearing payload state on topology disable
      drivers/gpu/drm/drm_dp_mst_topology.c
  * Revert "drm/dp_mst: Remove VCPI while disabling topology mgr"
      drivers/gpu/drm/drm_dp_mst_topology.c
    crypto: ccree - only try to map auth tag if needed
    crypto: ccree - dec auth tag size from cryptlen map
    crypto: ccree - don't mangle the request assoclen
    crypto: ccree - zero out internal struct before use
    crypto: ccree - improve error handling
    crypto: caam - update xts sector size for large input length
    dm zoned: remove duplicate nr_rnd_zones increase in dmz_init_zone()
    btrfs: use nofs allocations for running delayed items
    powerpc: Make setjmp/longjmp signature standard
    powerpc: Add attributes for setjmp/longjmp
    scsi: mpt3sas: Fix kernel panic observed on soft HBA unplug
    powerpc/kprobes: Ignore traps that happened in real mode
    powerpc/xive: Use XIVE_BAD_IRQ instead of zero to catch non configured IPIs
    powerpc/hash64/devmap: Use H_PAGE_THP_HUGE when setting up huge devmap PTE entries
    powerpc/64/tm: Don't let userspace set regs->trap via sigreturn
    powerpc/powernv/idle: Restore AMR/UAMOR/AMOR after idle
    xen/blkfront: fix memory allocation flags in blkfront_setup_indirect()
    ipmi: fix hung processes in __get_guid()
    libata: Return correct status in sata_pmp_eh_recover_pm() when ATA_DFLAG_DETACH is set
    hfsplus: fix crash and filesystem corruption when deleting files
    cpufreq: powernv: Fix use-after-free
  * kmod: make request_module() return an error when autoloading is disabled
      kernel/kmod.c
    clk: ingenic/jz4770: Exit with error if CGU init failed
    Input: i8042 - add Acer Aspire 5738z to nomux list
    s390/diag: fix display of diagnose call statistics
    perf tools: Support Python 3.8+ in Makefile
    ocfs2: no need try to truncate file beyond i_size
  * fs/filesystems.c: downgrade user-reachable WARN_ONCE() to pr_warn_once()
      fs/filesystems.c
  * ext4: fix a data race at inode->i_blocks
      fs/ext4/inode.c
    NFS: Fix a page leak in nfs_destroy_unlinked_subrequests()
    powerpc/pseries: Avoid NULL pointer dereference when drmem is unavailable
    drm/etnaviv: rework perfmon query infrastructure
    rtc: omap: Use define directive for PIN_CONFIG_ACTIVE_HIGH
    selftests: vm: drop dependencies on page flags from mlock2 tests
  * arm64: armv8_deprecated: Fix undef_hook mask for thumb setend
      arch/arm64/kernel/armv8_deprecated.c
    scsi: zfcp: fix missing erp_lock in port recovery trigger for point-to-point
  * dm verity fec: fix memory leak in verity_fec_dtr
      drivers/md/dm-verity-fec.c
    dm writecache: add cond_resched to avoid CPU hangs
    arm64: dts: allwinner: h6: Fix PMU compatible
  * net: qualcomm: rmnet: Allow configuration updates to existing devices
      drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c
  * mm: Use fixed constant in page_frag_alloc instead of size + 1
      mm/page_alloc.c
    tools: gpio: Fix out-of-tree build regression
  * x86/speculation: Remove redundant arch_smt_update() invocation
      kernel/cpu.c
    powerpc/pseries: Drop pointless static qualifier in vpa_debugfs_init()
    erofs: correct the remaining shrink objects
    crypto: mxs-dcp - fix scatterlist linearization for hash
    btrfs: fix missing semaphore unlock in btrfs_sync_file
    btrfs: fix missing file extent item for hole after ranged fsync
    btrfs: drop block from cache on error in relocation
    btrfs: set update the uuid generation as soon as possible
    Btrfs: fix crash during unmount due to race with delayed inode workers
    mtd: spinand: Do not erase the block before writing a bad block marker
    mtd: spinand: Stop using spinand->oobbuf for buffering bad block markers
    CIFS: Fix bug which the return value by asynchronous read is error
    KVM: VMX: fix crash cleanup when KVM wasn't used
    KVM: x86: Gracefully handle __vmalloc() failure during VM allocation
    KVM: VMX: Always VMCLEAR in-use VMCSes during crash with kexec support
    KVM: x86: Allocate new rmap and large page tracking when moving memslot
    KVM: s390: vsie: Fix delivery of addressing exceptions
    KVM: s390: vsie: Fix region 1 ASCE sanity shadow address checks
    KVM: nVMX: Properly handle userspace interrupt window request
    x86/entry/32: Add missing ASM_CLAC to general_protection entry
  * signal: Extend exec_id to 64bits
      fs/exec.c
      include/linux/sched.h
      kernel/signal.c
    ath9k: Handle txpower changes even when TPC is disabled
    MIPS: OCTEON: irq: Fix potential NULL pointer dereference
    MIPS/tlbex: Fix LDDIR usage in setup_pw() for Loongson-3
  * pstore: pstore_ftrace_seq_next should increase position index
      fs/pstore/inode.c
    irqchip/versatile-fpga: Apply clear-mask earlier
  * KEYS: reaching the keys quotas correctly
      security/keys/key.c
      security/keys/keyctl.c
    tpm: tpm2_bios_measurements_next should increase position index
    tpm: tpm1_bios_measurements_next should increase position index
    tpm: Don't make log failures fatal
  * PCI: endpoint: Fix for concurrent memory allocation in OB address region
      include/linux/pci-epc.h
  * PCI: Add boot interrupt quirk mechanism for Xeon chipsets
      drivers/pci/quirks.c
    PCI/ASPM: Clear the correct bits when enabling L1 substates
    PCI: pciehp: Fix indefinite wait on sysfs requests
    nvme: Treat discovery subsystems as unique subsystems
  * nvme-fc: Revert "add module to ops template to allow module references"
      include/linux/nvme-fc-driver.h
  * thermal: devfreq_cooling: inline all stubs for CONFIG_DEVFREQ_THERMAL=n
      include/linux/devfreq_cooling.h
    acpi/x86: ignore unspecified bit positions in the ACPI global lock field
    media: ti-vpe: cal: fix disable_irqs to only the intended target
    ALSA: hda/realtek - Add quirk for MSI GL63
    ALSA: hda/realtek - Remove now-unnecessary XPS 13 headphone noise fixups
    ALSA: hda/realtek - Set principled PC Beep configuration for ALC256
    ALSA: doc: Document PC Beep Hidden Register on Realtek ALC256
    ALSA: pcm: oss: Fix regression by buffer overflow fix
    ALSA: ice1724: Fix invalid access for enumerated ctl items
    ALSA: hda: Fix potential access overflow in beep helper
    ALSA: hda: Add driver blacklist
  * ALSA: usb-audio: Add mixer workaround for TRX40 and co
      sound/usb/mixer_maps.c
  * usb: gadget: composite: Inform controller driver of self-powered
      drivers/usb/gadget/composite.c
  * usb: gadget: f_fs: Fix use after free issue as part of queue failure
      drivers/usb/gadget/function/f_fs.c
    ASoC: topology: use name_prefix for new kcontrol
  * ASoC: dpcm: allow start or stop during pause for backend
      sound/soc/soc-pcm.c
  * ASoC: dapm: connect virtual mux with default value
      sound/soc/soc-dapm.c
  * ASoC: fix regwmask
      sound/soc/soc-ops.c
  * slub: improve bit diffusion for freelist ptr obfuscation
      mm/slub.c
  * uapi: rename ext2_swab() to swab() and share globally in swab.h
      include/linux/swab.h
      include/uapi/linux/swab.h
      lib/find_bit.c
  * IB/mlx5: Replace tunnel mpls capability bits for tunnel_offloads
      include/linux/mlx5/mlx5_ifc.h
    btrfs: track reloc roots based on their commit root bytenr
    btrfs: remove a BUG_ON() from merge_reloc_roots()
    btrfs: qgroup: ensure qgroup_rescan_running is only set when the worker is at least queued
    block, bfq: fix use-after-free in bfq_idle_slice_timer_body
    locking/lockdep: Avoid recursion in lockdep_count_{for,back}ward_deps()
  * firmware: fix a double abort case with fw_load_sysfs_fallback
      drivers/base/firmware_loader/fallback.c
    md: check arrays is suspended in mddev_detach before call quiesce operations
  * irqchip/gic-v4: Provide irq_retrigger to avoid circular locking dependency
      drivers/irqchip/irq-gic-v3-its.c
  * usb: dwc3: core: add support for disabling SS instances in park mode
      drivers/usb/dwc3/core.c
      drivers/usb/dwc3/core.h
    media: i2c: ov5695: Fix power on and off sequences
  * block: Fix use-after-free issue accessing struct io_cq
      block/blk-ioc.c
      include/linux/iocontext.h
  * genirq/irqdomain: Check pointer in irq_domain_alloc_irqs_hierarchy()
      kernel/irq/irqdomain.c
    efi/x86: Ignore the memory attributes table on i386
    x86/boot: Use unsigned comparison for addresses
    gfs2: Don't demote a glock until its revokes are written
  * pstore/platform: fix potential mem leak if pstore_init_fs failed
      fs/pstore/platform.c
    libata: Remove extra scsi_host_put() in ata_scsi_add_hosts()
    media: i2c: video-i2c: fix build errors due to 'imply hwmon'
    PCI/switchtec: Fix init_completion race condition with poll_wait()
    selftests/x86/ptrace_syscall_32: Fix no-vDSO segfault
  * sched: Avoid scale real weight down to zero
      kernel/sched/sched.h
    irqchip/versatile-fpga: Handle chained IRQs properly
  * block: keep bdi->io_pages in sync with max_sectors_kb for stacked devices
      block/blk-settings.c
    x86: Don't let pgprot_modify() change the page encryption bit
  * xhci: bail out early if driver can't accress host in resume
      drivers/usb/host/xhci.c
    null_blk: fix spurious IO errors after failed past-wp access
    null_blk: Handle null_add_dev() failures properly
    null_blk: Fix the null_add_dev() error path
    firmware: arm_sdei: fix double-lock on hibernate with shared events
    media: venus: hfi_parser: Ignore HEVC encoding for V1
    cpufreq: imx6q: Fixes unwanted cpu overclocking on i.MX6ULL
    i2c: st: fix missing struct parameter description
    qlcnic: Fix bad kzalloc null test
    cxgb4/ptp: pass the sign of offset delta in FW CMD
    hinic: fix wrong para of wait_for_completion_timeout
    hinic: fix a bug of waitting for IO stopped
    net: vxge: fix wrong __VA_ARGS__ usage
    bus: sunxi-rsb: Return correct data when mixing 16-bit and 8-bit reads
    ARM: dts: sun8i-a83t-tbs-a711: HM5065 doesn't like such a high voltage
    ANDROID: build.config.allmodconfig: Re-enable XFS_FS
  * FROMGIT: of: property: Add device link support for extcon
      drivers/of/property.c
    ANDROID: GKI: arm64: gki_defconfig: enable CONFIG_MM_EVENT_STAT
  * ANDROID: GKI: add fields from per-process mm event tracking feature
      include/linux/mm_event.h
      include/linux/sched.h
      mm/Kconfig
      mm/Makefile
      mm/mm_event.c
  * ANDROID: GKI: fix ABI diffs caused by ION heap and pool vmstat additions
      include/linux/mmzone.h
      mm/vmstat.c
  * UPSTREAM: GKI: panic/reboot: allow specifying reboot_mode for panic only
      include/linux/reboot.h
      kernel/panic.c
      kernel/reboot.c
  * ANDROID: GKI: of: property: Add device link support for phys property
      drivers/of/property.c
  * ANDROID: GKI: usb: phy: Fix ABI diff for usb_otg_state
      include/linux/usb/phy.h
  * ANDROID: GKI: usb: phy: Fix ABI diff due to usb_phy.drive_dp_pulse
      include/linux/usb/phy.h
  * ANDROID: GKI: usb: phy: Fix ABI diff for usb_phy_type and usb_phy.reset
      include/linux/usb/phy.h
    ANDROID: gki_defconfig: enable CONFIG_GPIO_SYSFS
  * ANDROID: GKI: qcom: Fix compile issue when setting msm_lmh_dcvs as a module
      kernel/trace/power-traces.c
  * ANDROID: GKI: drivers: cpu_cooling: allow platform freq mitigation
      drivers/thermal/cpu_cooling.c
      include/linux/cpu_cooling.h
  * ANDROID: GKI: ASoC: Add locking in DAPM widget power update
      include/sound/soc.h
      sound/soc/soc-core.c
      sound/soc/soc-dapm.c
  * ANDROID: GKI: ASoC: jack: Fix buttons enum value
      include/sound/jack.h
  * ANDROID: GKI: ALSA: jack: Add support to report second microphone
      include/sound/jack.h
      include/uapi/linux/input-event-codes.h
      sound/core/jack.c
  * ANDROID: GKI: ALSA: jack: Update supported jack switch types
      include/linux/mod_devicetable.h
      include/sound/jack.h
      include/uapi/linux/input-event-codes.h
      sound/core/jack.c
  * ANDROID: GKI: ALSA: jack: update jack types
      include/sound/jack.h
  * ANDROID: GKI: Export symbols arm_cpuidle_suspend, cpuidle_dev and cpuidle_register_governor
      arch/arm64/kernel/cpuidle.c
      drivers/cpuidle/cpuidle.c
  * ANDROID: GKI: usb: hcd: Add USB atomic notifier callback for HC died error
      drivers/usb/core/hcd.c
      drivers/usb/core/notify.c
      drivers/usb/core/usb.h
      include/linux/usb.h
  * ANDROID: media: increase video max frame number
      include/media/videobuf2-core.h
      include/uapi/linux/videodev2.h
  * BACKPORT: nvmem: core: add NVMEM_SYSFS Kconfig
      drivers/nvmem/Kconfig
      drivers/nvmem/Makefile
      drivers/nvmem/core.c
      drivers/nvmem/nvmem-sysfs.c
      drivers/nvmem/nvmem.h
  * UPSTREAM: nvmem: add support for cell info
      drivers/nvmem/core.c
      include/linux/nvmem-provider.h
  * UPSTREAM: nvmem: remove the global cell list
      drivers/nvmem/core.c
  * UPSTREAM: nvmem: use kref
      drivers/nvmem/core.c
  * UPSTREAM: nvmem: use list_for_each_entry_safe in nvmem_device_remove_all_cells()
      drivers/nvmem/core.c
  * UPSTREAM: nvmem: provide nvmem_dev_name()
      drivers/nvmem/core.c
      include/linux/nvmem-consumer.h
    ANDROID: GKI: Bulk ABI update
  * ANDROID: GKI: cpuhotplug: adding hotplug enums for vendor code
      include/linux/cpuhotplug.h
  * ANDROID: Incremental fs: Fix create_file performance
      fs/incfs/format.c
    ANDROID: build.config.common: Add BUILDTOOLS_PREBUILT_BIN
  * UPSTREAM: kheaders: include only headers into kheaders_data.tar.xz
      kernel/gen_kheaders.sh
  * UPSTREAM: kheaders: remove meaningless -R option of 'ls'
      kernel/gen_kheaders.sh
  * ANDROID: GKI: of: platform: initialize of_reserved_mem
      drivers/of/platform.c
  * ANDROID: driver: gpu: drm: add notifier for panel related events
      drivers/gpu/drm/drm_panel.c
      include/drm/drm_connector.h
      include/drm/drm_panel.h
  * ANDROID: include: drm: support unicasting mipi cmds to dsi ctrls
      include/drm/drm_mipi_dsi.h
  * ANDROID: include: drm: increase DRM max property count to 64
      include/drm/drm_mode_object.h
  * BACKPORT: drm: Add HDMI colorspace property
      drivers/gpu/drm/drm_atomic.c
      drivers/gpu/drm/drm_connector.c
      include/drm/drm_connector.h
  * ANDROID: drm: edid: add support for additional CEA extension blocks
      drivers/gpu/drm/drm_edid.c
      include/drm/drm_connector.h
      include/drm/drm_edid.h
  * BACKPORT: drm: Parse HDR metadata info from EDID
      drivers/gpu/drm/drm_edid.c
  * BACKPORT: drm: Add HDR source metadata property
      drivers/gpu/drm/drm_atomic.c
      drivers/gpu/drm/drm_connector.c
      include/drm/drm_connector.h
      include/drm/drm_mode_config.h
      include/linux/hdmi.h
      include/uapi/drm/drm_mode.h
  * BACKPORT: drm/dp_mst: Parse FEC capability on MST ports
      drivers/gpu/drm/drm_dp_mst_topology.c
      include/drm/drm_dp_mst_helper.h
    ANDROID: GKI: ABI update for DRM changes
    ANDROID: ABI: add missing elf variables to representation
  * ANDROID: GKI: power_supply: Add PROP_MOISTURE_DETECTION_ENABLED
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
  * ANDROID: include: drm: add the definitions for DP Link Compliance tests
      include/drm/drm_dp_helper.h
  * ANDROID: drivers: gpu: drm: fix bugs encountered while fuzzing
      drivers/gpu/drm/drm_file.c
      drivers/gpu/drm/drm_property.c
  * FROMLIST: power_supply: Add additional health properties to the header
      drivers/power/supply/power_supply_sysfs.c
      include/linux/power_supply.h
    UPSTREAM: power: supply: core: Update sysfs-class-power ABI document
  * UPSTREAM: Merge remote-tracking branch 'aosp/upstream-f2fs-stable-linux-4.19.y' into android-4.19 (v5.7-rc1)
      fs/f2fs/Kconfig
      fs/f2fs/checkpoint.c
      fs/f2fs/data.c
      fs/f2fs/debug.c
      fs/f2fs/dir.c
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
      fs/f2fs/gc.c
      fs/f2fs/inode.c
      fs/f2fs/namei.c
      fs/f2fs/node.c
      fs/f2fs/recovery.c
      fs/f2fs/segment.c
      fs/f2fs/segment.h
      fs/f2fs/shrinker.c
      fs/f2fs/super.c
      fs/f2fs/sysfs.c
      fs/f2fs/xattr.c
      fs/f2fs/xattr.h
      include/linux/f2fs_fs.h
      include/trace/events/f2fs.h
      mm/swapfile.c
  * ANDROID: drivers: gpu: drm: add support for secure framebuffer
      drivers/gpu/drm/drm_framebuffer.c
      include/uapi/drm/drm_mode.h
  * ANDROID: include: uapi: drm: add additional QCOM modifiers
      include/uapi/drm/drm_fourcc.h
  * ANDROID: drm: dsi: add two DSI mode flags for BLLP
      include/drm/drm_mipi_dsi.h
  * ANDROID: include: uapi: drm: add additional drm mode flags
      include/uapi/drm/drm_mode.h
  * UPSTREAM: drm: plug memory leak on drm_setup() failure
      drivers/gpu/drm/drm_file.c
  * UPSTREAM: drm: factor out drm_close_helper() function
      drivers/gpu/drm/drm_file.c
    ANDROID: GKI: Bulk ABI update
  * BACKPORT: nl80211: Add per peer statistics to compute FCS error rate
      include/net/cfg80211.h
      include/uapi/linux/nl80211.h
      net/wireless/nl80211.c
  * ANDROID: GKI: sound: usb: Add snd_usb_enable_audio_stream/find_snd_usb_substream
      sound/usb/card.c
      sound/usb/card.h
      sound/usb/pcm.c
      sound/usb/pcm.h
      sound/usb/usbaudio.h
  * ANDROID: GKI: add dma-buf includes
      drivers/dma-buf/dma-buf.c
  * ANDROID: GKI: sched: struct fields for Per-Sched-domain over utilization
      include/linux/sched/topology.h
  * ANDROID: GKI: Add vendor fields to root_domain
      kernel/sched/sched.h
    ANDROID: gki_defconfig: Enable CONFIG_IRQ_TIME_ACCOUNTING
    ANDROID: fix allmodconfig build to use the right toolchain
    ANDROID: fix allmodconfig build to use the right toolchain
    ANDROID: GKI: Update ABI
  * Revert "UPSTREAM: mm, page_alloc: spread allocations across zones before introducing fragmentation"
      mm/internal.h
      mm/page_alloc.c
  * Revert "UPSTREAM: mm: use alloc_flags to record if kswapd can wake"
      mm/internal.h
      mm/page_alloc.c
  * Revert "BACKPORT: mm: move zone watermark accesses behind an accessor"
      include/linux/mmzone.h
      mm/compaction.c
      mm/page_alloc.c
  * Revert "BACKPORT: mm: reclaim small amounts of memory when an external fragmentation event occurs"
      include/linux/mm.h
      include/linux/mmzone.h
      kernel/sysctl.c
      mm/page_alloc.c
      mm/vmscan.c
  * Revert "BACKPORT: mm, compaction: be selective about what pageblocks to clear skip hints"
      include/linux/mmzone.h
      mm/compaction.c
  * ANDROID: GKI: panic: add vendor callback function in panic()
      include/linux/kernel.h
      kernel/panic.c
  * UPSTREAM: GKI: thermal: make device_register's type argument const
      drivers/thermal/thermal_core.c
      include/linux/thermal.h
  * ANDROID: GKI: add base.h include to match MODULE_VERSIONS
      drivers/thermal/thermal_core.c
    ANDROID: update the ABI based on the new whitelist
  * ANDROID: GKI: fdt: export symbols required by modules
      drivers/of/fdt.c
  * ANDROID: GKI: drivers: of: Add APIs to find DDR device rank, HBB
      drivers/of/fdt.c
      include/linux/of_fdt.h
  * ANDROID: GKI: security: Add mmap export symbols for modules
      security/min_addr.c
  * ANDROID: GKI: arch: add stub symbols for boot_reason and cold_boot
      arch/arm64/kernel/setup.c
  * ANDROID: GKI: USB: Fix ABI diff for struct usb_bus
      drivers/usb/core/driver.c
      include/linux/usb.h
  * ANDROID: GKI: USB: Resolve ABI diff for usb_gadget and usb_gadget_ops
      drivers/usb/gadget/udc/core.c
      include/linux/usb/gadget.h
  * ANDROID: GKI: add hidden V4L2_MEM2MEM_DEV
      init/Kconfig.gki
    ANDROID: GKI: enable VIDEO_V4L2_SUBDEV_API
  * ANDROID: GKI: export symbols from abi_gki_aarch64_qcom_whitelist
      arch/arm64/mm/mmu.c
      drivers/base/core.c
      drivers/clocksource/arm_arch_timer.c
      drivers/cpuidle/governor.c
      drivers/gpu/drm/drm_atomic_helper.c
      drivers/gpu/drm/drm_modes.c
      fs/kernfs/symlink.c
      kernel/params.c
      kernel/power/main.c
      kernel/power/qos.c
      kernel/power/suspend.c
      kernel/printk/printk.c
      kernel/time/tick-sched.c
      lib/ioremap.c
      lib/plist.c
      mm/memblock.c
      mm/mmap.c
      security/security.c
      sound/usb/helper.c
    ANDROID: Update the whitelist for qcom SoCs
  * ANDROID: Incremental fs: Fix compound page usercopy crash
      fs/incfs/data_mgmt.c
      fs/incfs/vfs.c
    ANDROID: Incremental fs: Clean up incfs_test build process
  * ANDROID: Incremental fs: make remount log buffer change atomic
      fs/incfs/data_mgmt.c
      fs/incfs/data_mgmt.h
      fs/incfs/vfs.c
  * ANDROID: Incremental fs: Optimize get_filled_block
      fs/incfs/data_mgmt.c
      fs/incfs/format.c
  * ANDROID: Incremental fs: Fix mislabeled __user ptrs
      fs/incfs/data_mgmt.c
      fs/incfs/integrity.c
      fs/incfs/vfs.c
  * ANDROID: Incremental fs: Use 64-bit int for file_size when writing hash blocks
      fs/incfs/format.c
      fs/incfs/format.h
    Merge remote-tracking branch 'aosp/upstream-f2fs-stable-linux-4.19.y' into android-4.19 (v5.7-rc1)
    Merge remote-tracking branch 'aosp/android-4.19' into android-4.19-stable
    ubifs: wire up FS_IOC_GET_ENCRYPTION_NONCE
  * f2fs: wire up FS_IOC_GET_ENCRYPTION_NONCE
      fs/f2fs/file.c
  * ext4: wire up FS_IOC_GET_ENCRYPTION_NONCE
      fs/ext4/ioctl.c
  * fscrypt: add FS_IOC_GET_ENCRYPTION_NONCE ioctl
      fs/crypto/fscrypt_private.h
      fs/crypto/keysetup.c
      fs/crypto/policy.c
      include/linux/fscrypt.h
      include/uapi/linux/fscrypt.h
  * f2fs: keep inline_data when compression conversion
      fs/f2fs/file.c
  * f2fs: fix to disable compression on directory
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
  * f2fs: add missing CONFIG_F2FS_FS_COMPRESSION
      fs/f2fs/sysfs.c
  * f2fs: switch discard_policy.timeout to bool type
      fs/f2fs/f2fs.h
      fs/f2fs/segment.c
    f2fs: fix to verify tpage before releasing in f2fs_free_dic()
  * f2fs: show compression in statx
      fs/f2fs/file.c
    f2fs: clean up dic->tpages assignment
  * f2fs: compress: support zstd compress algorithm
      fs/f2fs/Kconfig
      fs/f2fs/f2fs.h
      fs/f2fs/super.c
      include/trace/events/f2fs.h
    f2fs: compress: add .{init,destroy}_decompress_ctx callback
    f2fs: compress: fix to call missing destroy_compress_ctx()
  * f2fs: change default compression algorithm
      fs/f2fs/super.c
    f2fs: clean up {cic,dic}.ref handling
  * f2fs: fix to use f2fs_readpage_limit() in f2fs_read_multi_pages()
      fs/f2fs/data.c
  * f2fs: xattr.h: Make stub helpers inline
      fs/f2fs/xattr.h
  * f2fs: fix to avoid double unlock
      fs/f2fs/data.c
  * f2fs: fix potential .flags overflow on 32bit architecture
      fs/f2fs/f2fs.h
      fs/f2fs/inode.c
  * f2fs: fix NULL pointer dereference in f2fs_verity_work()
      fs/f2fs/data.c
    f2fs: fix to clear PG_error if fsverity failed
  * f2fs: don't call fscrypt_get_encryption_info() explicitly in f2fs_tmpfile()
      fs/f2fs/namei.c
  * f2fs: don't trigger data flush in foreground operation
      fs/f2fs/f2fs.h
      fs/f2fs/gc.c
      fs/f2fs/node.c
      fs/f2fs/segment.c
  * f2fs: fix NULL pointer dereference in f2fs_write_begin()
      fs/f2fs/super.c
  * f2fs: clean up f2fs_may_encrypt()
      fs/f2fs/dir.c
      fs/f2fs/f2fs.h
      fs/f2fs/namei.c
  * f2fs: fix to avoid potential deadlock
      fs/f2fs/data.c
  * f2fs: don't change inode status under page lock
      fs/f2fs/dir.c
    f2fs: fix potential deadlock on compressed quota file
  * f2fs: delete DIO read lock
      fs/f2fs/data.c
  * f2fs: don't mark compressed inode dirty during f2fs_iget()
      fs/f2fs/f2fs.h
    f2fs: fix to account compressed blocks in f2fs_compressed_blocks()
  * f2fs: xattr.h: Replace zero-length array with flexible-array member
      fs/f2fs/xattr.h
  * f2fs: fix to update f2fs_super_block fields under sb_lock
      fs/f2fs/gc.c
  * f2fs: Add a new CP flag to help fsck fix resize SPO issues
      fs/f2fs/checkpoint.c
      include/linux/f2fs_fs.h
  * f2fs: Fix mount failure due to SPO after a successful online resize FS
      fs/f2fs/gc.c
  * f2fs: use kmem_cache pool during inline xattr lookups
      fs/f2fs/f2fs.h
      fs/f2fs/super.c
      fs/f2fs/xattr.c
      fs/f2fs/xattr.h
  * f2fs: skip migration only when BG_GC is called
      fs/f2fs/gc.c
  * f2fs: fix to show tracepoint correctly
      fs/f2fs/file.c
  * f2fs: avoid __GFP_NOFAIL in f2fs_bio_alloc
      fs/f2fs/data.c
      fs/f2fs/f2fs.h
  * f2fs: introduce F2FS_IOC_GET_COMPRESS_BLOCKS
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
  * f2fs: fix to avoid triggering IO in write path
      fs/f2fs/data.c
      fs/f2fs/f2fs.h
  * f2fs: add prefix for f2fs slab cache name
      fs/f2fs/data.c
      fs/f2fs/node.c
      fs/f2fs/segment.c
  * f2fs: introduce DEFAULT_IO_TIMEOUT
      fs/f2fs/checkpoint.c
      fs/f2fs/data.c
      fs/f2fs/f2fs.h
      fs/f2fs/gc.c
      fs/f2fs/inode.c
      fs/f2fs/node.c
      fs/f2fs/recovery.c
      fs/f2fs/segment.c
      fs/f2fs/super.c
  * f2fs: skip GC when section is full
      fs/f2fs/gc.c
  * f2fs: add migration count iff migration happens
      fs/f2fs/gc.c
  * f2fs: clean up bggc mount option
      fs/f2fs/f2fs.h
      fs/f2fs/gc.c
      fs/f2fs/super.c
  * f2fs: clean up lfs/adaptive mount option
      fs/f2fs/data.c
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
      fs/f2fs/gc.c
      fs/f2fs/segment.c
      fs/f2fs/super.c
  * f2fs: fix to show norecovery mount option
      fs/f2fs/f2fs.h
      fs/f2fs/super.c
  * f2fs: clean up parameter of macro XATTR_SIZE()
      fs/f2fs/xattr.c
      fs/f2fs/xattr.h
  * f2fs: clean up codes with {f2fs_,}data_blkaddr()
      fs/f2fs/data.c
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
      fs/f2fs/gc.c
      fs/f2fs/node.c
      fs/f2fs/recovery.c
  * f2fs: show mounted time
      fs/f2fs/debug.c
      fs/f2fs/segment.c
      fs/f2fs/segment.h
      fs/f2fs/sysfs.c
  * f2fs: Use scnprintf() for avoiding potential buffer overflow
      fs/f2fs/sysfs.c
  * f2fs: allow to clear F2FS_COMPR_FL flag
      fs/f2fs/file.c
  * f2fs: fix to check dirty pages during compressed inode conversion
      fs/f2fs/f2fs.h
  * f2fs: fix to account compressed inode correctly
      fs/f2fs/f2fs.h
  * f2fs: fix wrong check on F2FS_IOC_FSSETXATTR
      fs/f2fs/file.c
    f2fs: fix to avoid use-after-free in f2fs_write_multi_pages()
  * f2fs: fix to avoid using uninitialized variable
      fs/f2fs/file.c
  * f2fs: fix inconsistent comments
      fs/f2fs/checkpoint.c
      fs/f2fs/data.c
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
      fs/f2fs/gc.c
      fs/f2fs/inode.c
      fs/f2fs/namei.c
      fs/f2fs/node.c
      fs/f2fs/shrinker.c
      fs/f2fs/super.c
  * f2fs: remove i_sem lock coverage in f2fs_setxattr()
      fs/f2fs/xattr.c
  * f2fs: cover last_disk_size update with spinlock
      fs/f2fs/data.c
      fs/f2fs/f2fs.h
      fs/f2fs/file.c
      fs/f2fs/super.c
  * f2fs: fix to check i_compr_blocks correctly
      fs/f2fs/inode.c
    Merge android-4.19 into android-4.19-stable
    ANDROID: GKI: Removed cuttlefish configs
    f2fs: fix to avoid potential deadlock
  * f2fs: add missing function name in kernel message
      fs/f2fs/f2fs.h
      fs/f2fs/node.c
  * f2fs: recycle unused compress_data.chksum feild
      fs/f2fs/f2fs.h
    f2fs: fix to avoid NULL pointer dereference
    f2fs: fix leaking uninitialized memory in compressed clusters
  * f2fs: fix the panic in do_checkpoint()
      fs/f2fs/checkpoint.c
      fs/f2fs/f2fs.h
      fs/f2fs/super.c
  * f2fs: fix to wait all node page writeback
      fs/f2fs/node.c
  * mm/swapfile.c: move inode_lock out of claim_swapfile
      mm/swapfile.c
  * fscrypt: don't evict dirty inodes after removing key
      fs/crypto/keysetup.c

Change-Id: I9ca86223eb4183aa40011ade86b74cc3beaabd4a
Signed-off-by: lucaswei <lucaswei@google.com>
2020-09-16 21:37:23 +08:00
Will Deacon
0f09071279 KVM: arm64: Only reschedule if MMU_NOTIFIER_RANGE_BLOCKABLE is not set
commit b5331379bc62611d1026173a09c73573384201d9 upstream.

When an MMU notifier call results in unmapping a range that spans multiple
PGDs, we end up calling into cond_resched_lock() when crossing a PGD boundary,
since this avoids running into RCU stalls during VM teardown. Unfortunately,
if the VM is destroyed as a result of OOM, then blocking is not permitted
and the call to the scheduler triggers the following BUG():

 | BUG: sleeping function called from invalid context at arch/arm64/kvm/mmu.c:394
 | in_atomic(): 1, irqs_disabled(): 0, non_block: 1, pid: 36, name: oom_reaper
 | INFO: lockdep is turned off.
 | CPU: 3 PID: 36 Comm: oom_reaper Not tainted 5.8.0 #1
 | Hardware name: QEMU QEMU Virtual Machine, BIOS 0.0.0 02/06/2015
 | Call trace:
 |  dump_backtrace+0x0/0x284
 |  show_stack+0x1c/0x28
 |  dump_stack+0xf0/0x1a4
 |  ___might_sleep+0x2bc/0x2cc
 |  unmap_stage2_range+0x160/0x1ac
 |  kvm_unmap_hva_range+0x1a0/0x1c8
 |  kvm_mmu_notifier_invalidate_range_start+0x8c/0xf8
 |  __mmu_notifier_invalidate_range_start+0x218/0x31c
 |  mmu_notifier_invalidate_range_start_nonblock+0x78/0xb0
 |  __oom_reap_task_mm+0x128/0x268
 |  oom_reap_task+0xac/0x298
 |  oom_reaper+0x178/0x17c
 |  kthread+0x1e4/0x1fc
 |  ret_from_fork+0x10/0x30

Use the new 'flags' argument to kvm_unmap_hva_range() to ensure that we
only reschedule if MMU_NOTIFIER_RANGE_BLOCKABLE is set in the notifier
flags.

Cc: <stable@vger.kernel.org>
Fixes: 8b3405e345 ("kvm: arm/arm64: Fix locking for kvm_free_stage2_pgd")
Cc: Marc Zyngier <maz@kernel.org>
Cc: Suzuki K Poulose <suzuki.poulose@arm.com>
Cc: James Morse <james.morse@arm.com>
Signed-off-by: Will Deacon <will@kernel.org>
Message-Id: <20200811102725.7121-3-will@kernel.org>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
[will: Backport to 4.19; use 'blockable' instead of non-existent MMU_NOTIFIER_RANGE_BLOCKABLE flag]
Signed-off-by: Will Deacon <will@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-08-26 10:31:07 +02:00
Will Deacon
a53dc16499 KVM: Pass MMU notifier range flags to kvm_unmap_hva_range()
commit fdfe7cbd58806522e799e2a50a15aee7f2cbb7b6 upstream.

The 'flags' field of 'struct mmu_notifier_range' is used to indicate
whether invalidate_range_{start,end}() are permitted to block. In the
case of kvm_mmu_notifier_invalidate_range_start(), this field is not
forwarded on to the architecture-specific implementation of
kvm_unmap_hva_range() and therefore the backend cannot sensibly decide
whether or not to block.

Add an extra 'flags' parameter to kvm_unmap_hva_range() so that
architectures are aware as to whether or not they are permitted to block.

Cc: <stable@vger.kernel.org>
Cc: Marc Zyngier <maz@kernel.org>
Cc: Suzuki K Poulose <suzuki.poulose@arm.com>
Cc: James Morse <james.morse@arm.com>
Signed-off-by: Will Deacon <will@kernel.org>
Message-Id: <20200811102725.7121-2-will@kernel.org>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
[will: Backport to 4.19; use 'blockable' instead of non-existent range flags]
Signed-off-by: Will Deacon <will@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-08-26 10:31:07 +02:00
Marc Zyngier
929fccde38 KVM: arm64: Synchronize sysreg state on injecting an AArch32 exception
commit 0370964dd3ff7d3d406f292cb443a927952cbd05 upstream.

On a VHE system, the EL1 state is left in the CPU most of the time,
and only syncronized back to memory when vcpu_put() is called (most
of the time on preemption).

Which means that when injecting an exception, we'd better have a way
to either:
(1) write directly to the EL1 sysregs
(2) synchronize the state back to memory, and do the changes there

For an AArch64, we already do (1), so we are safe. Unfortunately,
doing the same thing for AArch32 would be pretty invasive. Instead,
we can easily implement (2) by calling the put/load architectural
backends, and keep preemption disabled. We can then reload the
state back into EL1.

Cc: stable@vger.kernel.org
Reported-by: James Morse <james.morse@arm.com>
Signed-off-by: Marc Zyngier <maz@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-06-22 09:05:09 +02:00
Eiichi Tsukata
351533725d KVM: x86: Fix APIC page invalidation race
[ Upstream commit e649b3f0188f8fd34dd0dde8d43fd3312b902fb2 ]

Commit b1394e745b ("KVM: x86: fix APIC page invalidation") tried
to fix inappropriate APIC page invalidation by re-introducing arch
specific kvm_arch_mmu_notifier_invalidate_range() and calling it from
kvm_mmu_notifier_invalidate_range_start. However, the patch left a
possible race where the VMCS APIC address cache is updated *before*
it is unmapped:

  (Invalidator) kvm_mmu_notifier_invalidate_range_start()
  (Invalidator) kvm_make_all_cpus_request(kvm, KVM_REQ_APIC_PAGE_RELOAD)
  (KVM VCPU) vcpu_enter_guest()
  (KVM VCPU) kvm_vcpu_reload_apic_access_page()
  (Invalidator) actually unmap page

Because of the above race, there can be a mismatch between the
host physical address stored in the APIC_ACCESS_PAGE VMCS field and
the host physical address stored in the EPT entry for the APIC GPA
(0xfee0000).  When this happens, the processor will not trap APIC
accesses, and will instead show the raw contents of the APIC-access page.
Because Windows OS periodically checks for unexpected modifications to
the LAPIC register, this will show up as a BSOD crash with BugCheck
CRITICAL_STRUCTURE_CORRUPTION (109) we are currently seeing in
https://bugzilla.redhat.com/show_bug.cgi?id=1751017.

The root cause of the issue is that kvm_arch_mmu_notifier_invalidate_range()
cannot guarantee that no additional references are taken to the pages in
the range before kvm_mmu_notifier_invalidate_range_end().  Fortunately,
this case is supported by the MMU notifier API, as documented in
include/linux/mmu_notifier.h:

	 * If the subsystem
         * can't guarantee that no additional references are taken to
         * the pages in the range, it has to implement the
         * invalidate_range() notifier to remove any references taken
         * after invalidate_range_start().

The fix therefore is to reload the APIC-access page field in the VMCS
from kvm_mmu_notifier_invalidate_range() instead of ..._range_start().

Cc: stable@vger.kernel.org
Fixes: b1394e745b ("KVM: x86: fix APIC page invalidation")
Fixes: https://bugzilla.kernel.org/show_bug.cgi?id=197951
Signed-off-by: Eiichi Tsukata <eiichi.tsukata@nutanix.com>
Message-Id: <20200606042627.61070-1-eiichi.tsukata@nutanix.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-06-22 09:05:04 +02:00
Ivaylo Georgiev
cb4e55266e Merge android-4.19.110:wq(1984fff) into msm-4.19
* refs/heads/tmp-1984fff:
  Revert "ANDROID: staging: android: ion: enable modularizing the ion driver"
  Revert "BACKPORT: sched/rt: Make RT capacity-aware"
  Revert "ANDROID: GKI: Add devm_thermal_of_virtual_sensor_register API."
  Linux 4.19.110
  KVM: SVM: fix up incorrect backport
  ANDROID: gki_defconfig: Enable USB_CONFIGFS_MASS_STORAGE
  UPSTREAM: arm64: memory: Add missing brackets to untagged_addr() macro
  UPSTREAM: mm: Avoid creating virtual address aliases in brk()/mmap()/mremap()
  ANDROID: Add TPM support and the vTPM proxy to Cuttlefish.
  Revert "ANDROID: tty: serdev: Fix broken serial console input"
  ANDROID: serdev: restrict claim of platform devices
  ANDROID: update the ABI xml representation
  ANDROID: GKI: add a USB TypeC vendor field for ABI compat
  UPSTREAM: usb: typec: mux: Switch to use fwnode_property_count_uXX()
  UPSTREAM: usb: typec: Make sure an alt mode exist before getting its partner
  UPSTREAM: usb: typec: Registering real device entries for the muxes
  UPSTREAM: usb: typec: mux: remove redundant check on variable match
  UPSTREAM: usb: typec: mux: Fix unsigned comparison with less than zero
  UPSTREAM: usb: typec: mux: Find the muxes by also matching against the device node
  UPSTREAM: usb: typec: Find the ports by also matching against the device node
  UPSTREAM: usb: typec: Rationalize the API for the muxes
  UPSTREAM: device property: Add helpers to count items in an array
  UPSTREAM: platform/x86: intel_cht_int33fe: Remove old style mux connections
  UPSTREAM: platform/x86: intel_cht_int33fe: Prepare for better mux naming scheme
  UPSTREAM: usb: typec: Prepare alt mode enter/exit reporting for UCSI alt mode support
  ANDROID: GKI: Update ABI
  ANDROID: GKI: drivers: of: Add API to find ddr device type
  UPSTREAM: Input: reset device timestamp on sync
  UPSTREAM: Input: allow drivers specify timestamp for input events
  ANDROID: GKI: usb: dwc3: Add USB_DR_MODE_DRD as dual role mode
  ANDROID: GKI: Add devm_thermal_of_virtual_sensor_register API.
  UPSTREAM: crypto: skcipher - Introduce crypto_sync_skcipher
  ANDROID: GKI: cfg80211: Add AP stopped interface
  UPSTREAM: device connection: Add fwnode member to struct device_connection
  FROMGIT: kallsyms: unexport kallsyms_lookup_name() and kallsyms_on_each_symbol()
  FROMGIT: samples/hw_breakpoint: drop use of kallsyms_lookup_name()
  FROMGIT: samples/hw_breakpoint: drop HW_BREAKPOINT_R when reporting writes
  UPSTREAM: fscrypt: don't evict dirty inodes after removing key
  ANDROID: gki_defconfig: Enable CONFIG_VM_EVENT_COUNTERS
  ANDROID: gki_defconfig: Enable CONFIG_CLEANCACHE
  ANDROID: Update ABI representation
  ANDROID: gki_defconfig: disable CONFIG_DEBUG_DEVRES
  Linux 4.19.109
  scsi: pm80xx: Fixed kernel panic during error recovery for SATA drive
  dm integrity: fix a deadlock due to offloading to an incorrect workqueue
  efi/x86: Handle by-ref arguments covering multiple pages in mixed mode
  efi/x86: Align GUIDs to their size in the mixed mode runtime wrapper
  powerpc: fix hardware PMU exception bug on PowerVM compatibility mode systems
  dmaengine: coh901318: Fix a double lock bug in dma_tc_handle()
  hwmon: (adt7462) Fix an error return in ADT7462_REG_VOLT()
  ARM: dts: imx7-colibri: Fix frequency for sd/mmc
  ARM: dts: am437x-idk-evm: Fix incorrect OPP node names
  ARM: imx: build v7_cpu_resume() unconditionally
  IB/hfi1, qib: Ensure RCU is locked when accessing list
  RMDA/cm: Fix missing ib_cm_destroy_id() in ib_cm_insert_listen()
  RDMA/iwcm: Fix iwcm work deallocation
  ARM: dts: imx6: phycore-som: fix emmc supply
  phy: mapphone-mdm6600: Fix write timeouts with shorter GPIO toggle interval
  phy: mapphone-mdm6600: Fix timeouts by adding wake-up handling
  drm/sun4i: de2/de3: Remove unsupported VI layer formats
  drm/sun4i: Fix DE2 VI layer format support
  ASoC: dapm: Correct DAPM handling of active widgets during shutdown
  ASoC: pcm512x: Fix unbalanced regulator enable call in probe error path
  ASoC: pcm: Fix possible buffer overflow in dpcm state sysfs output
  dmaengine: imx-sdma: remove dma_slave_config direction usage and leave sdma_event_enable()
  ASoC: intel: skl: Fix possible buffer overflow in debug outputs
  ASoC: intel: skl: Fix pin debug prints
  ASoC: topology: Fix memleak in soc_tplg_manifest_load()
  ASoC: topology: Fix memleak in soc_tplg_link_elems_load()
  spi: bcm63xx-hsspi: Really keep pll clk enabled
  ARM: dts: ls1021a: Restore MDIO compatible to gianfar
  dm writecache: verify watermark during resume
  dm: report suspended device during destroy
  dm cache: fix a crash due to incorrect work item cancelling
  dmaengine: tegra-apb: Prevent race conditions of tasklet vs free list
  dmaengine: tegra-apb: Fix use-after-free
  x86/pkeys: Manually set X86_FEATURE_OSPKE to preserve existing changes
  media: v4l2-mem2mem.c: fix broken links
  vt: selection, push sel_lock up
  vt: selection, push console lock down
  vt: selection, close sel_buffer race
  serial: 8250_exar: add support for ACCES cards
  tty:serial:mvebu-uart:fix a wrong return
  arm: dts: dra76x: Fix mmc3 max-frequency
  fat: fix uninit-memory access for partial initialized inode
  mm: fix possible PMD dirty bit lost in set_pmd_migration_entry()
  mm, numa: fix bad pmd by atomically check for pmd_trans_huge when marking page tables prot_numa
  vgacon: Fix a UAF in vgacon_invert_region
  usb: core: port: do error out if usb_autopm_get_interface() fails
  usb: core: hub: do error out if usb_autopm_get_interface() fails
  usb: core: hub: fix unhandled return by employing a void function
  usb: dwc3: gadget: Update chain bit correctly when using sg list
  usb: quirks: add NO_LPM quirk for Logitech Screen Share
  usb: storage: Add quirk for Samsung Fit flash
  cifs: don't leak -EAGAIN for stat() during reconnect
  ALSA: hda/realtek - Fix silent output on Gigabyte X570 Aorus Master
  ALSA: hda/realtek - Add Headset Mic supported
  net: thunderx: workaround BGX TX Underflow issue
  x86/xen: Distribute switch variables for initialization
  ice: Don't tell the OS that link is going down
  nvme: Fix uninitialized-variable warning
  s390/qdio: fill SL with absolute addresses
  x86/boot/compressed: Don't declare __force_order in kaslr_64.c
  s390: make 'install' not depend on vmlinux
  s390/cio: cio_ignore_proc_seq_next should increase position index
  watchdog: da9062: do not ping the hw during stop()
  net: ks8851-ml: Fix 16-bit IO operation
  net: ks8851-ml: Fix 16-bit data access
  net: ks8851-ml: Remove 8-bit bus accessors
  net: dsa: b53: Ensure the default VID is untagged
  selftests: forwarding: use proto icmp for {gretap, ip6gretap}_mac testing
  drm/msm/dsi/pll: call vco set rate explicitly
  drm/msm/dsi: save pll state before dsi host is powered off
  scsi: megaraid_sas: silence a warning
  drm: msm: Fix return type of dsi_mgr_connector_mode_valid for kCFI
  drm/msm/mdp5: rate limit pp done timeout warnings
  usb: gadget: serial: fix Tx stall after buffer overflow
  usb: gadget: ffs: ffs_aio_cancel(): Save/restore IRQ flags
  usb: gadget: composite: Support more than 500mA MaxPower
  selftests: fix too long argument
  serial: ar933x_uart: set UART_CS_{RX,TX}_READY_ORIDE
  ALSA: hda: do not override bus codec_mask in link_get()
  kprobes: Fix optimize_kprobe()/unoptimize_kprobe() cancellation logic
  RDMA/core: Fix use of logical OR in get_new_pps
  RDMA/core: Fix pkey and port assignment in get_new_pps
  net: dsa: bcm_sf2: Forcibly configure IMP port for 1Gb/sec
  ALSA: hda/realtek - Fix a regression for mute led on Lenovo Carbon X1
  EDAC/amd64: Set grain per DIMM
  ANDROID: Fix kernelci build-break for arm32
  ANDROID: enable CONFIG_WATCHDOG_CORE=y
  ANDROID: kbuild: align UNUSED_KSYMS_WHITELIST with upstream
  FROMLIST: f2fs: fix wrong check on F2FS_IOC_FSSETXATTR
  FROMGIT: driver core: Reevaluate dev->links.need_for_probe as suppliers are added
  FROMGIT: driver core: Call sync_state() even if supplier has no consumers
  FROMGIT: of: property: Add device link support for power-domains and hwlocks
  UPSTREAM: binder: prevent UAF for binderfs devices II
  UPSTREAM: binder: prevent UAF for binderfs devices
  ANDROID: GKI: enable PM_GENERIC_DOMAINS by default
  ANDROID: GKI: pci: framework: disable auto suspend link
  ANDROID: GKI: gpio: Add support for hierarchical IRQ domains
  ANDROID: GKI: of: property: Add device links support for pinctrl-[0-3]
  ANDROID: GKI: of: property: Ignore properties that start with "qcom,"
  ANDROID: GKI: of: property: Add support for parsing qcom,msm-bus,name property
  ANDROID: GKI: genirq: Export symbols to compile irqchip drivers as modules
  ANDROID: GKI: of: irq: add helper to remap interrupts to another irqdomain
  ANDROID: GKI: genirq/irqdomain: add export symbols for modularizing
  ANDROID: GKI: genirq: Introduce irq_chip_get/set_parent_state calls
  ANDROID: Update ABI representation
  ANDROID: arm64: gki_defconfig: disable CONFIG_ZONE_DMA32
  ANDROID: GKI: drivers: thermal: Fix ABI diff for struct thermal_cooling_device
  ANDROID: GKI: drivers: thermal: Indicate in DT the trips are for temperature falling
  ANDROID: Update ABI representation
  ANDROID: Update ABI whitelist for qcom SoCs
  ANDROID: gki_defconfig: enable CONFIG_TYPEC
  ANDROID: Fix kernelci build-break on !CONFIG_CMA builds
  ANDROID: GKI: mm: fix cma accounting in zone_watermark_ok
  ANDROID: CC_FLAGS_CFI add -fno-sanitize-blacklist
  FROMLIST: lib: test_stackinit.c: XFAIL switch variable init tests
  Linux 4.19.108
  audit: always check the netlink payload length in audit_receive_msg()
  mm, thp: fix defrag setting if newline is not used
  mm/huge_memory.c: use head to check huge zero page
  netfilter: nf_flowtable: fix documentation
  netfilter: nft_tunnel: no need to call htons() when dumping ports
  thermal: brcmstb_thermal: Do not use DT coefficients
  KVM: x86: Remove spurious clearing of async #PF MSR
  KVM: x86: Remove spurious kvm_mmu_unload() from vcpu destruction path
  perf hists browser: Restore ESC as "Zoom out" of DSO/thread/etc
  pwm: omap-dmtimer: put_device() after of_find_device_by_node()
  kprobes: Set unoptimized flag after unoptimizing code
  drivers: net: xgene: Fix the order of the arguments of 'alloc_etherdev_mqs()'
  perf stat: Fix shadow stats for clock events
  perf stat: Use perf_evsel__is_clocki() for clock events
  sched/fair: Fix O(nr_cgroups) in the load balancing path
  sched/fair: Optimize update_blocked_averages()
  KVM: Check for a bad hva before dropping into the ghc slow path
  KVM: SVM: Override default MMIO mask if memory encryption is enabled
  mwifiex: delete unused mwifiex_get_intf_num()
  mwifiex: drop most magic numbers from mwifiex_process_tdls_action_frame()
  namei: only return -ECHILD from follow_dotdot_rcu()
  net: ena: make ena rxfh support ETH_RSS_HASH_NO_CHANGE
  net/smc: no peer ID in CLC decline for SMCD
  net: atlantic: fix potential error handling
  net: atlantic: fix use after free kasan warn
  net: netlink: cap max groups which will be considered in netlink_bind()
  s390/qeth: vnicc Fix EOPNOTSUPP precedence
  usb: charger: assign specific number for enum value
  hv_netvsc: Fix unwanted wakeup in netvsc_attach()
  drm/i915/gvt: Separate display reset from ALL_ENGINES reset
  drm/i915/gvt: Fix orphan vgpu dmabuf_objs' lifetime
  i2c: jz4780: silence log flood on txabrt
  i2c: altera: Fix potential integer overflow
  MIPS: VPE: Fix a double free and a memory leak in 'release_vpe()'
  HID: hiddev: Fix race in in hiddev_disconnect()
  HID: alps: Fix an error handling path in 'alps_input_configured()'
  vhost: Check docket sk_family instead of call getname
  amdgpu/gmc_v9: save/restore sdpif regs during S3
  Revert "PM / devfreq: Modify the device name as devfreq(X) for sysfs"
  tracing: Disable trace_printk() on post poned tests
  macintosh: therm_windtunnel: fix regression when instantiating devices
  HID: core: increase HID report buffer size to 8KiB
  HID: core: fix off-by-one memset in hid_report_raw_event()
  HID: ite: Only bind to keyboard USB interface on Acer SW5-012 keyboard dock
  KVM: VMX: check descriptor table exits on instruction emulation
  ACPI: watchdog: Fix gas->access_width usage
  ACPICA: Introduce ACPI_ACCESS_BYTE_WIDTH() macro
  audit: fix error handling in audit_data_to_entry()
  ext4: potential crash on allocation error in ext4_alloc_flex_bg_array()
  net/tls: Fix to avoid gettig invalid tls record
  qede: Fix race between rdma destroy workqueue and link change event
  ipv6: Fix nlmsg_flags when splitting a multipath route
  ipv6: Fix route replacement with dev-only route
  sctp: move the format error check out of __sctp_sf_do_9_1_abort
  nfc: pn544: Fix occasional HW initialization failure
  net: sched: correct flower port blocking
  net: phy: restore mdio regs in the iproc mdio driver
  net: mscc: fix in frame extraction
  net: fib_rules: Correctly set table field when table number exceeds 8 bits
  sysrq: Remove duplicated sysrq message
  sysrq: Restore original console_loglevel when sysrq disabled
  cfg80211: add missing policy for NL80211_ATTR_STATUS_CODE
  cifs: Fix mode output in debugging statements
  net: ena: ena-com.c: prevent NULL pointer dereference
  net: ena: ethtool: use correct value for crc32 hash
  net: ena: fix incorrectly saving queue numbers when setting RSS indirection table
  net: ena: rss: store hash function as values and not bits
  net: ena: rss: fix failure to get indirection table
  net: ena: fix incorrect default RSS key
  net: ena: add missing ethtool TX timestamping indication
  net: ena: fix uses of round_jiffies()
  net: ena: fix potential crash when rxfh key is NULL
  soc/tegra: fuse: Fix build with Tegra194 configuration
  ARM: dts: sti: fixup sound frame-inversion for stihxxx-b2120.dtsi
  qmi_wwan: unconditionally reject 2 ep interfaces
  qmi_wwan: re-add DW5821e pre-production variant
  s390/zcrypt: fix card and queue total counter wrap
  cfg80211: check wiphy driver existence for drvinfo report
  mac80211: consider more elements in parsing CRC
  dax: pass NOWAIT flag to iomap_apply
  drm/msm: Set dma maximum segment size for mdss
  ipmi:ssif: Handle a possible NULL pointer reference
  iwlwifi: pcie: fix rb_allocator workqueue allocation
  irqchip/gic-v3-its: Fix misuse of GENMASK macro
  ANDROID: Update ABI representation
  ANDROID: abi_gki_aarch64_whitelist: add module_layout and task_struct
  ANDROID: gki_defconfig: disable KPROBES, update ABI
  ANDROID: GKI: mm: add cma pcp list
  ANDROID: GKI: cma: redirect page allocation to CMA
  BACKPORT: mm, compaction: be selective about what pageblocks to clear skip hints
  BACKPORT: mm: reclaim small amounts of memory when an external fragmentation event occurs
  BACKPORT: mm: move zone watermark accesses behind an accessor
  UPSTREAM: mm: use alloc_flags to record if kswapd can wake
  UPSTREAM: mm, page_alloc: spread allocations across zones before introducing fragmentation
  ANDROID: GKI: update abi for ufshcd changes
  ANDROID: Unconditionally create bridge tracepoints
  ANDROID: gki_defconfig: Enable MFD_SYSCON on x86
  ANDROID: scsi: ufs: allow ufs variants to override sg entry size
  ANDROID: Re-add default y for VIRTIO_PCI_LEGACY
  ANDROID: GKI: build in HVC_DRIVER
  ANDROID: Removed default m for virtual sw crypto device
  ANDROID: Remove default y on BRIDGE_IGMP_SNOOPING
  ANDROID: GKI: Added missing SND configs
  FROMLIST: ufs: fix a bug on printing PRDT
  UPSTREAM: sched/uclamp: Reject negative values in cpu_uclamp_write()
  ANDROID: gki_defconfig: Disable CONFIG_RT_GROUP_SCHED
  ANDROID: GKI: Remove CONFIG_BRIDGE from arm64 config
  ANDROID: Add ABI Whitelist for qcom
  ANDROID: Enable HID_NINTENDO as y
  FROMLIST: HID: nintendo: add nintendo switch controller driver
  UPSTREAM: regulator/of_get_regulator: add child path to find the regulator supplier
  ANDROID: gki_defconfig: Remove 'BRIDGE_NETFILTER is not set'
  BACKPORT: net: disable BRIDGE_NETFILTER by default
  ANDROID: kbuild: fix UNUSED_KSYMS_WHITELIST backport
  Linux 4.19.107
  Revert "char/random: silence a lockdep splat with printk()"
  s390/mm: Explicitly compare PAGE_DEFAULT_KEY against zero in storage_key_init_range
  xen: Enable interrupts when calling _cond_resched()
  ata: ahci: Add shutdown to freeze hardware resources of ahci
  rxrpc: Fix call RCU cleanup using non-bh-safe locks
  netfilter: xt_hashlimit: limit the max size of hashtable
  ALSA: seq: Fix concurrent access to queue current tick/time
  ALSA: seq: Avoid concurrent access to queue flags
  ALSA: rawmidi: Avoid bit fields for state flags
  bpf, offload: Replace bitwise AND by logical AND in bpf_prog_offload_info_fill
  genirq/proc: Reject invalid affinity masks (again)
  iommu/vt-d: Fix compile warning from intel-svm.h
  ecryptfs: replace BUG_ON with error handling code
  staging: greybus: use after free in gb_audio_manager_remove_all()
  staging: rtl8723bs: fix copy of overlapping memory
  usb: dwc2: Fix in ISOC request length checking
  usb: gadget: composite: Fix bMaxPower for SuperSpeedPlus
  scsi: Revert "target: iscsi: Wait for all commands to finish before freeing a session"
  scsi: Revert "RDMA/isert: Fix a recently introduced regression related to logout"
  Revert "dmaengine: imx-sdma: Fix memory leak"
  Btrfs: fix btrfs_wait_ordered_range() so that it waits for all ordered extents
  btrfs: do not check delayed items are empty for single transaction cleanup
  btrfs: reset fs_root to NULL on error in open_ctree
  btrfs: fix bytes_may_use underflow in prealloc error condtition
  KVM: apic: avoid calculating pending eoi from an uninitialized val
  KVM: nVMX: handle nested posted interrupts when apicv is disabled for L1
  KVM: nVMX: Check IO instruction VM-exit conditions
  KVM: nVMX: Refactor IO bitmap checks into helper function
  ext4: fix race between writepages and enabling EXT4_EXTENTS_FL
  ext4: rename s_journal_flag_rwsem to s_writepages_rwsem
  ext4: fix mount failure with quota configured as module
  ext4: fix potential race between s_flex_groups online resizing and access
  ext4: fix potential race between s_group_info online resizing and access
  ext4: fix potential race between online resizing and write operations
  ext4: add cond_resched() to __ext4_find_entry()
  ext4: fix a data race in EXT4_I(inode)->i_disksize
  drm/nouveau/kms/gv100-: Re-set LUT after clearing for modesets
  lib/stackdepot.c: fix global out-of-bounds in stack_slabs
  tty: serial: qcom_geni_serial: Fix RX cancel command failure
  tty: serial: qcom_geni_serial: Remove xfer_mode variable
  tty: serial: qcom_geni_serial: Remove set_rfr_wm() and related variables
  tty: serial: qcom_geni_serial: Remove use of *_relaxed() and mb()
  tty: serial: qcom_geni_serial: Remove interrupt storm
  tty: serial: qcom_geni_serial: Fix UART hang
  KVM: x86: don't notify userspace IOAPIC on edge-triggered interrupt EOI
  KVM: nVMX: Don't emulate instructions in guest mode
  xhci: apply XHCI_PME_STUCK_QUIRK to Intel Comet Lake platforms
  drm/amdgpu/soc15: fix xclk for raven
  mm/vmscan.c: don't round up scan size for online memory cgroup
  genirq/irqdomain: Make sure all irq domain flags are distinct
  nvme-multipath: Fix memory leak with ana_log_buf
  mm/memcontrol.c: lost css_put in memcg_expand_shrinker_maps()
  Revert "ipc,sem: remove uneeded sem_undo_list lock usage in exit_sem()"
  MAINTAINERS: Update drm/i915 bug filing URL
  serdev: ttyport: restore client ops on deregistration
  tty: serial: imx: setup the correct sg entry for tx dma
  tty/serial: atmel: manage shutdown in case of RS485 or ISO7816 mode
  serial: 8250: Check UPF_IRQ_SHARED in advance
  x86/cpu/amd: Enable the fixed Instructions Retired counter IRPERF
  x86/mce/amd: Fix kobject lifetime
  x86/mce/amd: Publish the bank pointer only after setup has succeeded
  jbd2: fix ocfs2 corrupt when clearing block group bits
  powerpc/tm: Fix clearing MSR[TS] in current when reclaiming on signal delivery
  staging: rtl8723bs: Fix potential overuse of kernel memory
  staging: rtl8723bs: Fix potential security hole
  staging: rtl8188eu: Fix potential overuse of kernel memory
  staging: rtl8188eu: Fix potential security hole
  usb: dwc3: gadget: Check for IOC/LST bit in TRB->ctrl fields
  usb: dwc2: Fix SET/CLEAR_FEATURE and GET_STATUS flows
  USB: hub: Fix the broken detection of USB3 device in SMSC hub
  USB: hub: Don't record a connect-change event during reset-resume
  USB: Fix novation SourceControl XL after suspend
  usb: uas: fix a plug & unplug racing
  USB: quirks: blacklist duplicate ep on Sound Devices USBPre2
  USB: core: add endpoint-blacklist quirk
  usb: host: xhci: update event ring dequeue pointer on purpose
  xhci: Fix memory leak when caching protocol extended capability PSI tables - take 2
  xhci: fix runtime pm enabling for quirky Intel hosts
  xhci: Force Maximum Packet size for Full-speed bulk devices to valid range.
  staging: vt6656: fix sign of rx_dbm to bb_pre_ed_rssi.
  staging: android: ashmem: Disallow ashmem memory from being remapped
  vt: vt_ioctl: fix race in VT_RESIZEX
  vt: selection, handle pending signals in paste_selection
  vt: fix scrollback flushing on background consoles
  floppy: check FDC index for errors before assigning it
  USB: misc: iowarrior: add support for the 100 device
  USB: misc: iowarrior: add support for the 28 and 28L devices
  USB: misc: iowarrior: add support for 2 OEMed devices
  thunderbolt: Prevent crash if non-active NVMem file is read
  ecryptfs: fix a memory leak bug in ecryptfs_init_messaging()
  ecryptfs: fix a memory leak bug in parse_tag_1_packet()
  ASoC: sun8i-codec: Fix setting DAI data format
  ALSA: hda/realtek - Apply quirk for yet another MSI laptop
  ALSA: hda/realtek - Apply quirk for MSI GP63, too
  ALSA: hda: Use scnprintf() for printing texts for sysfs/procfs
  iommu/qcom: Fix bogus detach logic
  UPSTREAM: sched/psi: Fix OOB write when writing 0 bytes to PSI files
  UPSTREAM: psi: Fix a division error in psi poll()
  UPSTREAM: sched/psi: Fix sampling error and rare div0 crashes with cgroups and high uptime
  UPSTREAM: sched/psi: Correct overly pessimistic size calculation
  ANDROID: build.config.gki.aarch64: enable symbol trimming
  FROMLIST: f2fs: Handle casefolding with Encryption
  FROMLIST: fscrypt: Have filesystems handle their d_ops
  FROMLIST: ext4: Use generic casefolding support
  FROMLIST: f2fs: Use generic casefolding support
  FROMLIST: Add standard casefolding support
  FROMLIST: unicode: Add utf8_casefold_hash
  ANDROID: sdcardfs: fix -ENOENT lookup race issue
  ANDROID: gki_defconfig: Enable CONFIG_RD_LZ4
  ANDROID: gki: Enable BINFMT_MISC as part of GKI
  ANDROID: gki_defconfig: disable CONFIG_CRYPTO_MD4
  ANDROID: dm: Add wrapped key support in dm-default-key
  ANDROID: dm: add support for passing through derive_raw_secret
  ANDROID: block: Prevent crypto fallback for wrapped keys
  BACKPORT: FROMLIST: kbuild: generate autoksyms.h early
  BACKPORT: FROMLIST: kbuild: split adjust_autoksyms.sh in two parts
  BACKPORT: FROMLIST: kbuild: allow symbol whitelisting with TRIM_UNUSED_KSYMS
  ANDROID: kbuild: use modules.order in adjust_autoksyms.sh
  UPSTREAM: kbuild: source include/config/auto.conf instead of ${KCONFIG_CONFIG}
  ANDROID: Disable wq fp check in CFI builds
  ANDROID: increase limit on sched-tune boost groups
  BACKPORT: nvmem: core: fix regression in of_nvmem_cell_get()
  BACKPORT: nvmem: hide unused nvmem_find_cell_by_index function
  BACKPORT: nvmem: resolve cells from DT at registration time
  Linux 4.19.106
  drm/amdgpu/display: handle multiple numbers of fclks in dcn_calcs.c (v2)
  mlxsw: spectrum_dpipe: Add missing error path
  virtio_balloon: prevent pfn array overflow
  cifs: log warning message (once) if out of disk space
  help_next should increase position index
  NFS: Fix memory leaks
  drm/amdgpu/smu10: fix smu10_get_clock_by_type_with_voltage
  drm/amdgpu/smu10: fix smu10_get_clock_by_type_with_latency
  brd: check and limit max_part par
  microblaze: Prevent the overflow of the start
  iwlwifi: mvm: Fix thermal zone registration
  irqchip/gic-v3-its: Reference to its_invall_cmd descriptor when building INVALL
  bcache: explicity type cast in bset_bkey_last()
  reiserfs: prevent NULL pointer dereference in reiserfs_insert_item()
  lib/scatterlist.c: adjust indentation in __sg_alloc_table
  ocfs2: fix a NULL pointer dereference when call ocfs2_update_inode_fsync_trans()
  radeon: insert 10ms sleep in dce5_crtc_load_lut
  trigger_next should increase position index
  ftrace: fpid_next() should increase position index
  drm/nouveau/disp/nv50-: prevent oops when no channel method map provided
  irqchip/gic-v3: Only provision redistributors that are enabled in ACPI
  rbd: work around -Wuninitialized warning
  ceph: check availability of mds cluster on mount after wait timeout
  bpf: map_seq_next should always increase position index
  cifs: fix NULL dereference in match_prepath
  iwlegacy: ensure loop counter addr does not wrap and cause an infinite loop
  hostap: Adjust indentation in prism2_hostapd_add_sta
  ARM: 8951/1: Fix Kexec compilation issue.
  jbd2: make sure ESHUTDOWN to be recorded in the journal superblock
  jbd2: switch to use jbd2_journal_abort() when failed to submit the commit record
  selftests: bpf: Reset global state between reuseport test runs
  iommu/vt-d: Remove unnecessary WARN_ON_ONCE()
  bcache: cached_dev_free needs to put the sb page
  powerpc/sriov: Remove VF eeh_dev state when disabling SR-IOV
  drm/nouveau/mmu: fix comptag memory leak
  ALSA: hda - Add docking station support for Lenovo Thinkpad T420s
  driver core: platform: fix u32 greater or equal to zero comparison
  s390/ftrace: generate traced function stack frame
  s390: adjust -mpacked-stack support check for clang 10
  x86/decoder: Add TEST opcode to Group3-2
  kbuild: use -S instead of -E for precise cc-option test in Kconfig
  ALSA: hda/hdmi - add retry logic to parse_intel_hdmi()
  irqchip/mbigen: Set driver .suppress_bind_attrs to avoid remove problems
  remoteproc: Initialize rproc_class before use
  module: avoid setting info->name early in case we can fall back to info->mod->name
  btrfs: device stats, log when stats are zeroed
  btrfs: safely advance counter when looking up bio csums
  btrfs: fix possible NULL-pointer dereference in integrity checks
  pwm: Remove set but not set variable 'pwm'
  ide: serverworks: potential overflow in svwks_set_pio_mode()
  cmd64x: potential buffer overflow in cmd64x_program_timings()
  pwm: omap-dmtimer: Remove PWM chip in .remove before making it unfunctional
  x86/mm: Fix NX bit clearing issue in kernel_map_pages_in_pgd
  f2fs: fix memleak of kobject
  watchdog/softlockup: Enforce that timestamp is valid on boot
  drm/amd/display: fixup DML dependencies
  arm64: fix alternatives with LLVM's integrated assembler
  scsi: iscsi: Don't destroy session if there are outstanding connections
  f2fs: free sysfs kobject
  f2fs: set I_LINKABLE early to avoid wrong access by vfs
  iommu/arm-smmu-v3: Use WRITE_ONCE() when changing validity of an STE
  usb: musb: omap2430: Get rid of musb .set_vbus for omap2430 glue
  drm/vmwgfx: prevent memory leak in vmw_cmdbuf_res_add
  drm/nouveau/fault/gv100-: fix memory leak on module unload
  drm/nouveau/drm/ttm: Remove set but not used variable 'mem'
  drm/nouveau: Fix copy-paste error in nouveau_fence_wait_uevent_handler
  drm/nouveau/gr/gk20a,gm200-: add terminators to method lists read from fw
  drm/nouveau/secboot/gm20b: initialize pointer in gm20b_secboot_new()
  vme: bridges: reduce stack usage
  bpf: Return -EBADRQC for invalid map type in __bpf_tx_xdp_map
  driver core: Print device when resources present in really_probe()
  driver core: platform: Prevent resouce overflow from causing infinite loops
  visorbus: fix uninitialized variable access
  tty: synclink_gt: Adjust indentation in several functions
  tty: synclinkmp: Adjust indentation in several functions
  ASoC: atmel: fix build error with CONFIG_SND_ATMEL_SOC_DMA=m
  wan: ixp4xx_hss: fix compile-testing on 64-bit
  x86/nmi: Remove irq_work from the long duration NMI handler
  Input: edt-ft5x06 - work around first register access error
  rcu: Use WRITE_ONCE() for assignments to ->pprev for hlist_nulls
  efi/x86: Don't panic or BUG() on non-critical error conditions
  soc/tegra: fuse: Correct straps' address for older Tegra124 device trees
  IB/hfi1: Add software counter for ctxt0 seq drop
  staging: rtl8188: avoid excessive stack usage
  udf: Fix free space reporting for metadata and virtual partitions
  usbip: Fix unsafe unaligned pointer usage
  ARM: dts: stm32: Add power-supply for DSI panel on stm32f469-disco
  drm: remove the newline for CRC source name.
  mlx5: work around high stack usage with gcc
  ACPI: button: Add DMI quirk for Razer Blade Stealth 13 late 2019 lid switch
  tools lib api fs: Fix gcc9 stringop-truncation compilation error
  ALSA: sh: Fix compile warning wrt const
  clk: uniphier: Add SCSSI clock gate for each channel
  ALSA: sh: Fix unused variable warnings
  clk: sunxi-ng: add mux and pll notifiers for A64 CPU clock
  RDMA/rxe: Fix error type of mmap_offset
  reset: uniphier: Add SCSSI reset control for each channel
  pinctrl: sh-pfc: sh7269: Fix CAN function GPIOs
  PM / devfreq: rk3399_dmc: Add COMPILE_TEST and HAVE_ARM_SMCCC dependency
  x86/vdso: Provide missing include file
  crypto: chtls - Fixed memory leak
  dmaengine: imx-sdma: Fix memory leak
  dmaengine: Store module owner in dma_device struct
  selinux: ensure we cleanup the internal AVC counters on error in avc_update()
  ARM: dts: r8a7779: Add device node for ARM global timer
  drm/mediatek: handle events when enabling/disabling crtc
  scsi: aic7xxx: Adjust indentation in ahc_find_syncrate
  scsi: ufs: Complete pending requests in host reset and restore path
  ACPICA: Disassembler: create buffer fields in ACPI_PARSE_LOAD_PASS1
  orinoco: avoid assertion in case of NULL pointer
  rtlwifi: rtl_pci: Fix -Wcast-function-type
  iwlegacy: Fix -Wcast-function-type
  ipw2x00: Fix -Wcast-function-type
  b43legacy: Fix -Wcast-function-type
  ALSA: usx2y: Adjust indentation in snd_usX2Y_hwdep_dsp_status
  netfilter: nft_tunnel: add the missing ERSPAN_VERSION nla_policy
  fore200e: Fix incorrect checks of NULL pointer dereference
  r8169: check that Realtek PHY driver module is loaded
  reiserfs: Fix spurious unlock in reiserfs_fill_super() error handling
  media: v4l2-device.h: Explicitly compare grp{id,mask} to zero in v4l2_device macros
  PCI: Increase D3 delay for AMD Ryzen5/7 XHCI controllers
  PCI: Add generic quirk for increasing D3hot delay
  media: cx23885: Add support for AVerMedia CE310B
  PCI: iproc: Apply quirk_paxc_bridge() for module as well as built-in
  ARM: dts: imx6: rdu2: Limit USBH1 to Full Speed
  ARM: dts: imx6: rdu2: Disable WP for USDHC2 and USDHC3
  arm64: dts: qcom: msm8996: Disable USB2 PHY suspend by core
  selinux: ensure we cleanup the internal AVC counters on error in avc_insert()
  arm: dts: allwinner: H3: Add PMU node
  arm64: dts: allwinner: H6: Add PMU mode
  selinux: fall back to ref-walk if audit is required
  NFC: port100: Convert cpu_to_le16(le16_to_cpu(E1) + E2) to use le16_add_cpu().
  net/wan/fsl_ucc_hdlc: reject muram offsets above 64K
  regulator: rk808: Lower log level on optional GPIOs being not available
  drm/amdgpu: Ensure ret is always initialized when using SOC15_WAIT_ON_RREG
  drm/amdgpu: remove 4 set but not used variable in amdgpu_atombios_get_connector_info_from_object_table
  clk: qcom: rcg2: Don't crash if our parent can't be found; return an error
  kconfig: fix broken dependency in randconfig-generated .config
  KVM: s390: ENOTSUPP -> EOPNOTSUPP fixups
  nbd: add a flush_workqueue in nbd_start_device
  drm/amd/display: Retrain dongles when SINK_COUNT becomes non-zero
  ath10k: Correct the DMA direction for management tx buffers
  ext4, jbd2: ensure panic when aborting with zero errno
  ARM: 8952/1: Disable kmemleak on XIP kernels
  tracing: Fix very unlikely race of registering two stat tracers
  tracing: Fix tracing_stat return values in error handling paths
  powerpc/iov: Move VF pdev fixup into pcibios_fixup_iov()
  s390/pci: Fix possible deadlock in recover_store()
  pwm: omap-dmtimer: Simplify error handling
  x86/sysfb: Fix check for bad VRAM size
  jbd2: clear JBD2_ABORT flag before journal_reset to update log tail info when load journal
  kselftest: Minimise dependency of get_size on C library interfaces
  clocksource/drivers/bcm2835_timer: Fix memory leak of timer
  usb: dwc2: Fix IN FIFO allocation
  usb: gadget: udc: fix possible sleep-in-atomic-context bugs in gr_probe()
  uio: fix a sleep-in-atomic-context bug in uio_dmem_genirq_irqcontrol()
  sparc: Add .exit.data section.
  MIPS: Loongson: Fix potential NULL dereference in loongson3_platform_init()
  efi/x86: Map the entire EFI vendor string before copying it
  pinctrl: baytrail: Do not clear IRQ flags on direct-irq enabled pins
  media: sti: bdisp: fix a possible sleep-in-atomic-context bug in bdisp_device_run()
  char/random: silence a lockdep splat with printk()
  iommu/vt-d: Fix off-by-one in PASID allocation
  gpio: gpio-grgpio: fix possible sleep-in-atomic-context bugs in grgpio_irq_map/unmap()
  powerpc/powernv/iov: Ensure the pdn for VFs always contains a valid PE number
  media: i2c: mt9v032: fix enum mbus codes and frame sizes
  pxa168fb: Fix the function used to release some memory in an error handling path
  pinctrl: sh-pfc: sh7264: Fix CAN function GPIOs
  gianfar: Fix TX timestamping with a stacked DSA driver
  ALSA: ctl: allow TLV read operation for callback type of element in locked case
  ext4: fix ext4_dax_read/write inode locking sequence for IOCB_NOWAIT
  leds: pca963x: Fix open-drain initialization
  brcmfmac: Fix use after free in brcmf_sdio_readframes()
  cpu/hotplug, stop_machine: Fix stop_machine vs hotplug order
  drm/gma500: Fixup fbdev stolen size usage evaluation
  KVM: nVMX: Use correct root level for nested EPT shadow page tables
  Revert "KVM: VMX: Add non-canonical check on writes to RTIT address MSRs"
  Revert "KVM: nVMX: Use correct root level for nested EPT shadow page tables"
  net/sched: flower: add missing validation of TCA_FLOWER_FLAGS
  net/sched: matchall: add missing validation of TCA_MATCHALL_FLAGS
  net: dsa: tag_qca: Make sure there is headroom for tag
  net/smc: fix leak of kernel memory to user space
  enic: prevent waking up stopped tx queues over watchdog reset
  core: Don't skip generic XDP program execution for cloned SKBs
  ANDROID: arm64: update the abi with the new gki_defconfig
  ANDROID: arm64: gki_defconfig: disable CONFIG_DEBUG_PREEMPT
  ANDROID: GKI: arm64: gki_defconfig: follow-up to removing DRM_MSM driver
  ANDROID: drm/msm: Remove Kconfig default
  ANDROID: GKI: arm64: gki_defconfig: remove qcom,cmd-db driver
  ANDROID: GKI: drivers: qcom: cmd-db: Allow compiling qcom,cmd-db driver as module
  ANDROID: GKI: arm64: gki_defconfig: remove qcom,rpmh-rsc driver
  ANDROID: GKI: drivers: qcom: rpmh-rsc: Add tristate support for qcom,rpmh-rsc driver
  ANDROID: ufs, block: fix crypto power management and move into block layer
  ANDROID: rtc: class: support hctosys from modular RTC drivers
  ANDROID: Incremental fs: Support xattrs
  ANDROID: abi update for 4.19.105
  UPSTREAM: random: ignore GRND_RANDOM in getentropy(2)
  UPSTREAM: random: add GRND_INSECURE to return best-effort non-cryptographic bytes
  UPSTREAM: linux/random.h: Mark CONFIG_ARCH_RANDOM functions __must_check
  UPSTREAM: linux/random.h: Use false with bool
  UPSTREAM: linux/random.h: Remove arch_has_random, arch_has_random_seed
  UPSTREAM: random: remove some dead code of poolinfo
  UPSTREAM: random: fix typo in add_timer_randomness()
  UPSTREAM: random: Add and use pr_fmt()
  UPSTREAM: random: convert to ENTROPY_BITS for better code readability
  UPSTREAM: random: remove unnecessary unlikely()
  UPSTREAM: random: remove kernel.random.read_wakeup_threshold
  UPSTREAM: random: delete code to pull data into pools
  UPSTREAM: random: remove the blocking pool
  UPSTREAM: random: make /dev/random be almost like /dev/urandom
  UPSTREAM: random: Add a urandom_read_nowait() for random APIs that don't warn
  UPSTREAM: random: Don't wake crng_init_wait when crng_init == 1
  UPSTREAM: char/random: silence a lockdep splat with printk()
  BACKPORT: fdt: add support for rng-seed
  BACKPORT: arm64: map FDT as RW for early_init_dt_scan()
  UPSTREAM: random: fix soft lockup when trying to read from an uninitialized blocking pool
  UPSTREAM: random: document get_random_int() family
  UPSTREAM: random: move rand_initialize() earlier
  UPSTREAM: random: only read from /dev/random after its pool has received 128 bits
  UPSTREAM: drivers/char/random.c: make primary_crng static
  UPSTREAM: drivers/char/random.c: remove unused stuct poolinfo::poolbits
  UPSTREAM: drivers/char/random.c: constify poolinfo_table
  ANDROID: clang: update to 10.0.4
  Linux 4.19.105
  KVM: x86/mmu: Fix struct guest_walker arrays for 5-level paging
  jbd2: do not clear the BH_Mapped flag when forgetting a metadata buffer
  jbd2: move the clearing of b_modified flag to the journal_unmap_buffer()
  NFSv4.1 make cachethis=no for writes
  hwmon: (pmbus/ltc2978) Fix PMBus polling of MFR_COMMON definitions.
  perf/x86/intel: Fix inaccurate period in context switch for auto-reload
  s390/time: Fix clk type in get_tod_clock
  RDMA/core: Fix protection fault in get_pkey_idx_qp_list
  RDMA/rxe: Fix soft lockup problem due to using tasklets in softirq
  RDMA/hfi1: Fix memory leak in _dev_comp_vect_mappings_create
  RDMA/core: Fix invalid memory access in spec_filter_size
  IB/rdmavt: Reset all QPs when the device is shut down
  IB/hfi1: Close window for pq and request coliding
  IB/hfi1: Acquire lock to release TID entries when user file is closed
  nvme: fix the parameter order for nvme_get_log in nvme_get_fw_slot_info
  perf/x86/amd: Add missing L2 misses event spec to AMD Family 17h's event map
  KVM: nVMX: Use correct root level for nested EPT shadow page tables
  arm64: ssbs: Fix context-switch when SSBS is present on all CPUs
  ARM: npcm: Bring back GPIOLIB support
  btrfs: log message when rw remount is attempted with unclean tree-log
  btrfs: print message when tree-log replay starts
  btrfs: ref-verify: fix memory leaks
  Btrfs: fix race between using extent maps and merging them
  ext4: improve explanation of a mount failure caused by a misconfigured kernel
  ext4: add cond_resched() to ext4_protect_reserved_inode
  ext4: fix checksum errors with indexed dirs
  ext4: fix support for inode sizes > 1024 bytes
  ext4: don't assume that mmp_nodename/bdevname have NUL
  ALSA: usb-audio: Add clock validity quirk for Denon MC7000/MCX8000
  ALSA: usb-audio: sound: usb: usb true/false for bool return type
  arm64: nofpsmid: Handle TIF_FOREIGN_FPSTATE flag cleanly
  arm64: cpufeature: Set the FP/SIMD compat HWCAP bits properly
  ALSA: usb-audio: Apply sample rate quirk for Audioengine D1
  ALSA: hda/realtek - Fix silent output on MSI-GL73
  ALSA: usb-audio: Fix UAC2/3 effect unit parsing
  Input: synaptics - remove the LEN0049 dmi id from topbuttonpad list
  Input: synaptics - enable SMBus on ThinkPad L470
  Input: synaptics - switch T470s to RMI4 by default
  ANDROID: Fix ABI representation after enabling CONFIG_NET_NS
  ANDROID: gki_defconfig: Enable CONFIG_NET_NS
  ANDROID: gki_defconfig: Enable XDP_SOCKETS
  UPSTREAM: sched/topology: Introduce a sysctl for Energy Aware Scheduling
  ANDROID: gki_defconfig: Enable MAC80211_RC_MINSTREL
  ANDROID: f2fs: remove unused function
  ANDROID: virtio: virtio_input: pass _DIRECT only if the device advertises _DIRECT
  ANDROID: cf build: Use merge_configs
  ANDROID: net: bpf: Allow TC programs to call BPF_FUNC_skb_change_head
  ANDROID: gki_defconfig: Disable SDCARD_FS
  Linux 4.19.104
  padata: fix null pointer deref of pd->pinst
  serial: uartps: Move the spinlock after the read of the tx empty
  x86/stackframe, x86/ftrace: Add pt_regs frame annotations
  x86/stackframe: Move ENCODE_FRAME_POINTER to asm/frame.h
  scsi: megaraid_sas: Do not initiate OCR if controller is not in ready state
  libertas: make lbs_ibss_join_existing() return error code on rates overflow
  libertas: don't exit from lbs_ibss_join_existing() with RCU read lock held
  mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv()
  mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status()
  pinctrl: sh-pfc: r8a7778: Fix duplicate SDSELF_B and SD1_CLK_B
  media: i2c: adv748x: Fix unsafe macros
  crypto: atmel-sha - fix error handling when setting hmac key
  crypto: artpec6 - return correct error code for failed setkey()
  mtd: sharpslpart: Fix unsigned comparison to zero
  mtd: onenand_base: Adjust indentation in onenand_read_ops_nolock
  KVM: arm64: pmu: Don't increment SW_INCR if PMCR.E is unset
  KVM: arm: Make inject_abt32() inject an external abort instead
  KVM: arm: Fix DFSR setting for non-LPAE aarch32 guests
  KVM: arm/arm64: Fix young bit from mmu notifier
  arm64: ptrace: nofpsimd: Fail FP/SIMD regset operations
  arm64: cpufeature: Fix the type of no FP/SIMD capability
  ARM: 8949/1: mm: mark free_memmap as __init
  KVM: arm/arm64: vgic-its: Fix restoration of unmapped collections
  iommu/arm-smmu-v3: Populate VMID field for CMDQ_OP_TLBI_NH_VA
  powerpc/pseries: Allow not having ibm, hypertas-functions::hcall-multi-tce for DDW
  powerpc/pseries/vio: Fix iommu_table use-after-free refcount warning
  tools/power/acpi: fix compilation error
  ARM: dts: at91: sama5d3: define clock rate range for tcb1
  ARM: dts: at91: sama5d3: fix maximum peripheral clock rates
  ARM: dts: am43xx: add support for clkout1 clock
  ARM: dts: at91: Reenable UART TX pull-ups
  platform/x86: intel_mid_powerbtn: Take a copy of ddata
  ARC: [plat-axs10x]: Add missing multicast filter number to GMAC node
  rtc: cmos: Stop using shared IRQ
  rtc: hym8563: Return -EINVAL if the time is known to be invalid
  spi: spi-mem: Fix inverted logic in op sanity check
  spi: spi-mem: Add extra sanity checks on the op param
  gpio: zynq: Report gpio direction at boot
  serial: uartps: Add a timeout to the tx empty wait
  NFSv4: try lease recovery on NFS4ERR_EXPIRED
  NFS/pnfs: Fix pnfs_generic_prepare_to_resend_writes()
  NFS: Revalidate the file size on a fatal write error
  nfs: NFS_SWAP should depend on SWAP
  PCI: Don't disable bridge BARs when assigning bus resources
  PCI/switchtec: Fix vep_vector_number ioread width
  ath10k: pci: Only dump ATH10K_MEM_REGION_TYPE_IOREG when safe
  PCI/IOV: Fix memory leak in pci_iov_add_virtfn()
  scsi: ufs: Fix ufshcd_probe_hba() reture value in case ufshcd_scsi_add_wlus() fails
  RDMA/uverbs: Verify MR access flags
  RDMA/core: Fix locking in ib_uverbs_event_read
  RDMA/netlink: Do not always generate an ACK for some netlink operations
  IB/mlx4: Fix memory leak in add_gid error flow
  hv_sock: Remove the accept port restriction
  ASoC: pcm: update FE/BE trigger order based on the command
  ANDROID: gki_defconfig: Add CONFIG_UNICODE
  ANDROID: added memory initialization tests to cuttlefish config
  ANDROID: gki_defconfig: enable CONFIG_RUNTIME_TESTING_MENU
  fs-verity: use u64_to_user_ptr()
  fs-verity: use mempool for hash requests
  fs-verity: implement readahead of Merkle tree pages
  fs-verity: implement readahead for FS_IOC_ENABLE_VERITY
  fscrypt: improve format of no-key names
  ubifs: allow both hash and disk name to be provided in no-key names
  ubifs: don't trigger assertion on invalid no-key filename
  fscrypt: clarify what is meant by a per-file key
  fscrypt: derive dirhash key for casefolded directories
  fscrypt: don't allow v1 policies with casefolding
  fscrypt: add "fscrypt_" prefix to fname_encrypt()
  fscrypt: don't print name of busy file when removing key
  fscrypt: document gfp_flags for bounce page allocation
  fscrypt: optimize fscrypt_zeroout_range()
  fscrypt: remove redundant bi_status check
  fscrypt: Allow modular crypto algorithms
  FROMLIST: rename missed uaccess .fixup section
  ANDROID: f2fs: fix missing blk-crypto changes
  ANDROID: gki_defconfig: enable heap and stack initialization.
  UPSTREAM: lib/test_stackinit: Handle Clang auto-initialization pattern
  UPSTREAM: lib: Introduce test_stackinit module
  fscrypt: include <linux/ioctl.h> in UAPI header
  fscrypt: don't check for ENOKEY from fscrypt_get_encryption_info()
  fscrypt: remove fscrypt_is_direct_key_policy()
  fscrypt: move fscrypt_valid_enc_modes() to policy.c
  fscrypt: check for appropriate use of DIRECT_KEY flag earlier
  fscrypt: split up fscrypt_supported_policy() by policy version
  fscrypt: introduce fscrypt_needs_contents_encryption()
  fscrypt: move fscrypt_d_revalidate() to fname.c
  fscrypt: constify inode parameter to filename encryption functions
  fscrypt: constify struct fscrypt_hkdf parameter to fscrypt_hkdf_expand()
  fscrypt: verify that the crypto_skcipher has the correct ivsize
  fscrypt: use crypto_skcipher_driver_name()
  fscrypt: support passing a keyring key to FS_IOC_ADD_ENCRYPTION_KEY
  keys: Export lookup_user_key to external users
  UPSTREAM: dynamic_debug: allow to work if debugfs is disabled
  UPSTREAM: lib: dynamic_debug: no need to check return value of debugfs_create functions
  ANDROID: ABI/Whitelist: update for Cuttlefish
  ANDROID: update ABI representation and GKI whitelist
  ANDROID: gki_defconfig: Set CONFIG_ANDROID_BINDERFS=y
  Linux 4.19.103
  rxrpc: Fix service call disconnection
  perf/core: Fix mlock accounting in perf_mmap()
  clocksource: Prevent double add_timer_on() for watchdog_timer
  x86/apic/msi: Plug non-maskable MSI affinity race
  cifs: fail i/o on soft mounts if sessionsetup errors out
  mm/page_alloc.c: fix uninitialized memmaps on a partially populated last section
  mm: return zero_resv_unavail optimization
  mm: zero remaining unavailable struct pages
  KVM: Play nice with read-only memslots when querying host page size
  KVM: Use vcpu-specific gva->hva translation when querying host page size
  KVM: nVMX: vmread should not set rflags to specify success in case of #PF
  KVM: VMX: Add non-canonical check on writes to RTIT address MSRs
  KVM: x86: Use gpa_t for cr2/gpa to fix TDP support on 32-bit KVM
  KVM: x86/mmu: Apply max PA check for MMIO sptes to 32-bit KVM
  btrfs: flush write bio if we loop in extent_write_cache_pages
  drm/dp_mst: Remove VCPI while disabling topology mgr
  drm: atmel-hlcdc: enable clock before configuring timing engine
  btrfs: free block groups after free'ing fs trees
  btrfs: use bool argument in free_root_pointers()
  ext4: fix deadlock allocating crypto bounce page from mempool
  net: dsa: b53: Always use dev->vlan_enabled in b53_configure_vlan()
  net: macb: Limit maximum GEM TX length in TSO
  net: macb: Remove unnecessary alignment check for TSO
  net/mlx5: IPsec, fix memory leak at mlx5_fpga_ipsec_delete_sa_ctx
  net/mlx5: IPsec, Fix esp modify function attribute
  net: systemport: Avoid RBUF stuck in Wake-on-LAN mode
  net_sched: fix a resource leak in tcindex_set_parms()
  net: mvneta: move rx_dropped and rx_errors in per-cpu stats
  net: dsa: bcm_sf2: Only 7278 supports 2Gb/sec IMP port
  bonding/alb: properly access headers in bond_alb_xmit()
  mfd: rn5t618: Mark ADC control register volatile
  mfd: da9062: Fix watchdog compatible string
  ubi: Fix an error pointer dereference in error handling code
  ubi: fastmap: Fix inverted logic in seen selfcheck
  nfsd: Return the correct number of bytes written to the file
  nfsd: fix jiffies/time_t mixup in LRU list
  nfsd: fix delay timer on 32-bit architectures
  IB/core: Fix ODP get user pages flow
  IB/mlx5: Fix outstanding_pi index for GSI qps
  net: tulip: Adjust indentation in {dmfe, uli526x}_init_module
  net: smc911x: Adjust indentation in smc911x_phy_configure
  ppp: Adjust indentation into ppp_async_input
  NFC: pn544: Adjust indentation in pn544_hci_check_presence
  drm: msm: mdp4: Adjust indentation in mdp4_dsi_encoder_enable
  powerpc/44x: Adjust indentation in ibm4xx_denali_fixup_memsize
  ext2: Adjust indentation in ext2_fill_super
  phy: qualcomm: Adjust indentation in read_poll_timeout
  scsi: ufs: Recheck bkops level if bkops is disabled
  scsi: qla4xxx: Adjust indentation in qla4xxx_mem_free
  scsi: csiostor: Adjust indentation in csio_device_reset
  scsi: qla2xxx: Fix the endianness of the qla82xx_get_fw_size() return type
  percpu: Separate decrypted varaibles anytime encryption can be enabled
  drm/amd/dm/mst: Ignore payload update failures
  clk: tegra: Mark fuse clock as critical
  KVM: s390: do not clobber registers during guest reset/store status
  KVM: x86: Free wbinvd_dirty_mask if vCPU creation fails
  KVM: x86: Don't let userspace set host-reserved cr4 bits
  x86/kvm: Be careful not to clear KVM_VCPU_FLUSH_TLB bit
  KVM: PPC: Book3S PR: Free shared page if mmu initialization fails
  KVM: PPC: Book3S HV: Uninit vCPU if vcore creation fails
  KVM: x86: Fix potential put_fpu() w/o load_fpu() on MPX platform
  KVM: x86: Protect MSR-based index computations in fixed_msr_to_seg_unit() from Spectre-v1/L1TF attacks
  KVM: x86: Protect x86_decode_insn from Spectre-v1/L1TF attacks
  KVM: x86: Protect MSR-based index computations from Spectre-v1/L1TF attacks in x86.c
  KVM: x86: Protect ioapic_read_indirect() from Spectre-v1/L1TF attacks
  KVM: x86: Protect MSR-based index computations in pmu.h from Spectre-v1/L1TF attacks
  KVM: x86: Protect ioapic_write_indirect() from Spectre-v1/L1TF attacks
  KVM: x86: Protect kvm_hv_msr_[get|set]_crash_data() from Spectre-v1/L1TF attacks
  KVM: x86: Protect kvm_lapic_reg_write() from Spectre-v1/L1TF attacks
  KVM: x86: Protect DR-based index computations from Spectre-v1/L1TF attacks
  KVM: x86: Protect pmu_intel.c from Spectre-v1/L1TF attacks
  KVM: x86: Refactor prefix decoding to prevent Spectre-v1/L1TF attacks
  KVM: x86: Refactor picdev_write() to prevent Spectre-v1/L1TF attacks
  aio: prevent potential eventfd recursion on poll
  eventfd: track eventfd_signal() recursion depth
  bcache: add readahead cache policy options via sysfs interface
  watchdog: fix UAF in reboot notifier handling in watchdog core code
  xen/balloon: Support xend-based toolstack take two
  tools/kvm_stat: Fix kvm_exit filter name
  media: rc: ensure lirc is initialized before registering input device
  drm/rect: Avoid division by zero
  gfs2: fix O_SYNC write handling
  gfs2: move setting current->backing_dev_info
  sunrpc: expiry_time should be seconds not timeval
  mwifiex: fix unbalanced locking in mwifiex_process_country_ie()
  iwlwifi: don't throw error when trying to remove IGTK
  ARM: tegra: Enable PLLP bypass during Tegra124 LP1
  Btrfs: fix race between adding and putting tree mod seq elements and nodes
  btrfs: set trans->drity in btrfs_commit_transaction
  Btrfs: fix missing hole after hole punching and fsync when using NO_HOLES
  jbd2_seq_info_next should increase position index
  NFS: Directory page cache pages need to be locked when read
  NFS: Fix memory leaks and corruption in readdir
  scsi: qla2xxx: Fix unbound NVME response length
  crypto: picoxcell - adjust the position of tasklet_init and fix missed tasklet_kill
  crypto: api - Fix race condition in crypto_spawn_alg
  crypto: atmel-aes - Fix counter overflow in CTR mode
  crypto: pcrypt - Do not clear MAY_SLEEP flag in original request
  crypto: ccp - set max RSA modulus size for v3 platform devices as well
  samples/bpf: Don't try to remove user's homedir on clean
  ftrace: Protect ftrace_graph_hash with ftrace_sync
  ftrace: Add comment to why rcu_dereference_sched() is open coded
  tracing: Annotate ftrace_graph_notrace_hash pointer with __rcu
  tracing: Annotate ftrace_graph_hash pointer with __rcu
  padata: Remove broken queue flushing
  dm writecache: fix incorrect flush sequence when doing SSD mode commit
  dm: fix potential for q->make_request_fn NULL pointer
  dm crypt: fix benbi IV constructor crash if used in authenticated mode
  dm space map common: fix to ensure new block isn't already in use
  dm zoned: support zone sizes smaller than 128MiB
  of: Add OF_DMA_DEFAULT_COHERENT & select it on powerpc
  PM: core: Fix handling of devices deleted during system-wide resume
  f2fs: code cleanup for f2fs_statfs_project()
  f2fs: fix miscounted block limit in f2fs_statfs_project()
  f2fs: choose hardlimit when softlimit is larger than hardlimit in f2fs_statfs_project()
  ovl: fix wrong WARN_ON() in ovl_cache_update_ino()
  power: supply: ltc2941-battery-gauge: fix use-after-free
  scsi: qla2xxx: Fix mtcp dump collection failure
  scripts/find-unused-docs: Fix massive false positives
  crypto: ccree - fix PM race condition
  crypto: ccree - fix pm wrongful error reporting
  crypto: ccree - fix backlog memory leak
  crypto: api - Check spawn->alg under lock in crypto_drop_spawn
  mfd: axp20x: Mark AXP20X_VBUS_IPSOUT_MGMT as volatile
  hv_balloon: Balloon up according to request page number
  mmc: sdhci-of-at91: fix memleak on clk_get failure
  PCI: keystone: Fix link training retries initiation
  crypto: geode-aes - convert to skcipher API and make thread-safe
  ubifs: Fix deadlock in concurrent bulk-read and writepage
  ubifs: Fix FS_IOC_SETFLAGS unexpectedly clearing encrypt flag
  ubifs: don't trigger assertion on invalid no-key filename
  ubifs: Reject unsupported ioctl flags explicitly
  alarmtimer: Unregister wakeup source when module get fails
  ACPI / battery: Deal better with neither design nor full capacity not being reported
  ACPI / battery: Use design-cap for capacity calculations if full-cap is not available
  ACPI / battery: Deal with design or full capacity being reported as -1
  ACPI: video: Do not export a non working backlight interface on MSI MS-7721 boards
  mmc: spi: Toggle SPI polarity, do not hardcode it
  PCI: tegra: Fix return value check of pm_runtime_get_sync()
  smb3: fix signing verification of large reads
  powerpc/pseries: Advance pfn if section is not present in lmb_is_removable()
  powerpc/xmon: don't access ASDR in VMs
  s390/mm: fix dynamic pagetable upgrade for hugetlbfs
  MIPS: boot: fix typo in 'vmlinux.lzma.its' target
  MIPS: fix indentation of the 'RELOCS' message
  KVM: arm64: Only sign-extend MMIO up to register width
  KVM: arm/arm64: Correct AArch32 SPSR on exception entry
  KVM: arm/arm64: Correct CPSR on exception entry
  KVM: arm64: Correct PSTATE on exception entry
  ALSA: hda: Add Clevo W65_67SB the power_save blacklist
  platform/x86: intel_scu_ipc: Fix interrupt support
  irqdomain: Fix a memory leak in irq_domain_push_irq()
  lib/test_kasan.c: fix memory leak in kmalloc_oob_krealloc_more()
  media: v4l2-rect.h: fix v4l2_rect_map_inside() top/left adjustments
  media: v4l2-core: compat: ignore native command codes
  media/v4l2-core: set pages dirty upon releasing DMA buffers
  mm: move_pages: report the number of non-attempted pages
  mm/memory_hotplug: fix remove_memory() lockdep splat
  ALSA: dummy: Fix PCM format loop in proc output
  ALSA: usb-audio: Fix endianess in descriptor validation
  usb: gadget: f_ecm: Use atomic_t to track in-flight request
  usb: gadget: f_ncm: Use atomic_t to track in-flight request
  usb: gadget: legacy: set max_speed to super-speed
  usb: typec: tcpci: mask event interrupts when remove driver
  brcmfmac: Fix memory leak in brcmf_usbdev_qinit
  rcu: Avoid data-race in rcu_gp_fqs_check_wake()
  tracing: Fix sched switch start/stop refcount racy updates
  ipc/msg.c: consolidate all xxxctl_down() functions
  mfd: dln2: More sanity checking for endpoints
  media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors
  rxrpc: Fix NULL pointer deref due to call->conn being cleared on disconnect
  rxrpc: Fix missing active use pinning of rxrpc_local object
  rxrpc: Fix insufficient receive notification generation
  rxrpc: Fix use-after-free in rxrpc_put_local()
  tcp: clear tp->segs_{in|out} in tcp_disconnect()
  tcp: clear tp->data_segs{in|out} in tcp_disconnect()
  tcp: clear tp->delivered in tcp_disconnect()
  tcp: clear tp->total_retrans in tcp_disconnect()
  bnxt_en: Fix TC queue mapping.
  net: stmmac: Delete txtimer in suspend()
  net_sched: fix an OOB access in cls_tcindex
  net: hsr: fix possible NULL deref in hsr_handle_frame()
  l2tp: Allow duplicate session creation with UDP
  gtp: use __GFP_NOWARN to avoid memalloc warning
  cls_rsvp: fix rsvp_policy
  sparc32: fix struct ipc64_perm type definition
  iwlwifi: mvm: fix NVM check for 3168 devices
  printk: fix exclusive_console replaying
  udf: Allow writing to 'Rewritable' partitions
  x86/cpu: Update cached HLE state on write to TSX_CTRL_CPUID_CLEAR
  ocfs2: fix oops when writing cloned file
  media: iguanair: fix endpoint sanity check
  kernel/module: Fix memleak in module_add_modinfo_attrs()
  ovl: fix lseek overflow on 32bit
  Revert "drm/sun4i: dsi: Change the start delay calculation"
  ANDROID: Revert "ANDROID: gki_defconfig: removed CONFIG_PM_WAKELOCKS"
  ANDROID: dm: prevent default-key from being enabled without needed hooks
  ANDROID: gki: x86: Enable PCI_MSI, WATCHDOG, HPET
  ANDROID: Incremental fs: Fix crash on failed lookup
  ANDROID: Incremental fs: Make files writeable
  ANDROID: update abi for 4.19.102
  ANDROID: Incremental fs: Remove C++-style comments
  Linux 4.19.102
  mm/migrate.c: also overwrite error when it is bigger than zero
  perf report: Fix no libunwind compiled warning break s390 issue
  btrfs: do not zero f_bavail if we have available space
  net: Fix skb->csum update in inet_proto_csum_replace16().
  l2t_seq_next should increase position index
  seq_tab_next() should increase position index
  net: fsl/fman: rename IF_MODE_XGMII to IF_MODE_10G
  net/fsl: treat fsl,erratum-a011043
  powerpc/fsl/dts: add fsl,erratum-a011043
  qlcnic: Fix CPU soft lockup while collecting firmware dump
  ARM: dts: am43x-epos-evm: set data pin directions for spi0 and spi1
  r8152: get default setting of WOL before initializing
  airo: Add missing CAP_NET_ADMIN check in AIROOLDIOCTL/SIOCDEVPRIVATE
  airo: Fix possible info leak in AIROOLDIOCTL/SIOCDEVPRIVATE
  tee: optee: Fix compilation issue with nommu
  ARM: 8955/1: virt: Relax arch timer version check during early boot
  scsi: fnic: do not queue commands during fwreset
  xfrm: interface: do not confirm neighbor when do pmtu update
  xfrm interface: fix packet tx through bpf_redirect()
  vti[6]: fix packet tx through bpf_redirect()
  ARM: dts: am335x-boneblack-common: fix memory size
  iwlwifi: Don't ignore the cap field upon mcc update
  riscv: delete temporary files
  bnxt_en: Fix ipv6 RFS filter matching logic.
  net: dsa: bcm_sf2: Configure IMP port for 2Gb/sec
  netfilter: nft_tunnel: ERSPAN_VERSION must not be null
  wireless: wext: avoid gcc -O3 warning
  mac80211: Fix TKIP replay protection immediately after key setup
  cfg80211: Fix radar event during another phy CAC
  wireless: fix enabling channel 12 for custom regulatory domain
  parisc: Use proper printk format for resource_size_t
  qmi_wwan: Add support for Quectel RM500Q
  ASoC: sti: fix possible sleep-in-atomic
  platform/x86: GPD pocket fan: Allow somewhat lower/higher temperature limits
  igb: Fix SGMII SFP module discovery for 100FX/LX.
  ixgbe: Fix calculation of queue with VFs and flow director on interface flap
  ixgbevf: Remove limit of 10 entries for unicast filter list
  ASoC: rt5640: Fix NULL dereference on module unload
  clk: mmp2: Fix the order of timer mux parents
  mac80211: mesh: restrict airtime metric to peered established plinks
  clk: sunxi-ng: h6-r: Fix AR100/R_APB2 parent order
  rseq: Unregister rseq for clone CLONE_VM
  tools lib traceevent: Fix memory leakage in filter_event
  soc: ti: wkup_m3_ipc: Fix race condition with rproc_boot
  ARM: dts: beagle-x15-common: Model 5V0 regulator
  ARM: dts: am57xx-beagle-x15/am57xx-idk: Remove "gpios" for endpoint dt nodes
  ARM: dts: sun8i: a83t: Correct USB3503 GPIOs polarity
  media: si470x-i2c: Move free() past last use of 'radio'
  cgroup: Prevent double killing of css when enabling threaded cgroup
  Bluetooth: Fix race condition in hci_release_sock()
  ttyprintk: fix a potential deadlock in interrupt context issue
  tomoyo: Use atomic_t for statistics counter
  media: dvb-usb/dvb-usb-urb.c: initialize actlen to 0
  media: gspca: zero usb_buf
  media: vp7045: do not read uninitialized values if usb transfer fails
  media: af9005: uninitialized variable printked
  media: digitv: don't continue if remote control state can't be read
  reiserfs: Fix memory leak of journal device string
  mm/mempolicy.c: fix out of bounds write in mpol_parse_str()
  ext4: validate the debug_want_extra_isize mount option at parse time
  arm64: kbuild: remove compressed images on 'make ARCH=arm64 (dist)clean'
  tools lib: Fix builds when glibc contains strlcpy()
  PM / devfreq: Add new name attribute for sysfs
  perf c2c: Fix return type for histogram sorting comparision functions
  rsi: fix use-after-free on failed probe and unbind
  rsi: add hci detach for hibernation and poweroff
  crypto: pcrypt - Fix user-after-free on module unload
  x86/resctrl: Fix a deadlock due to inaccurate reference
  x86/resctrl: Fix use-after-free due to inaccurate refcount of rdtgroup
  x86/resctrl: Fix use-after-free when deleting resource groups
  vfs: fix do_last() regression
  ANDROID: update abi definitions
  BACKPORT: clk: core: clarify the check for runtime PM
  UPSTREAM: sched/fair/util_est: Implement faster ramp-up EWMA on utilization increases
  ANDROID: Re-use SUGOV_RT_MAX_FREQ to control uclamp rt behavior
  BACKPORT: sched/fair: Make EAS wakeup placement consider uclamp restrictions
  BACKPORT: sched/fair: Make task_fits_capacity() consider uclamp restrictions
  ANDROID: sched/core: Move SchedTune task API into UtilClamp wrappers
  ANDROID: sched/core: Add a latency-sensitive flag to uclamp
  ANDROID: sched/tune: Move SchedTune cpu API into UtilClamp wrappers
  ANDROID: init: kconfig: Only allow sched tune if !uclamp
  FROMGIT: sched/core: Fix size of rq::uclamp initialization
  FROMGIT: sched/uclamp: Fix a bug in propagating uclamp value in new cgroups
  FROMGIT: sched/uclamp: Rename uclamp_util_with() into uclamp_rq_util_with()
  FROMGIT: sched/uclamp: Make uclamp util helpers use and return UL values
  FROMGIT: sched/uclamp: Remove uclamp_util()
  BACKPORT: sched/rt: Make RT capacity-aware
  UPSTREAM: tools headers UAPI: Sync sched.h with the kernel
  UPSTREAM: sched/uclamp: Fix overzealous type replacement
  UPSTREAM: sched/uclamp: Fix incorrect condition
  UPSTREAM: sched/core: Fix compilation error when cgroup not selected
  UPSTREAM: sched/core: Fix uclamp ABI bug, clean up and robustify sched_read_attr() ABI logic and code
  UPSTREAM: sched/uclamp: Always use 'enum uclamp_id' for clamp_id values
  UPSTREAM: sched/uclamp: Update CPU's refcount on TG's clamp changes
  UPSTREAM: sched/uclamp: Use TG's clamps to restrict TASK's clamps
  UPSTREAM: sched/uclamp: Propagate system defaults to the root group
  UPSTREAM: sched/uclamp: Propagate parent clamps
  UPSTREAM: sched/uclamp: Extend CPU's cgroup controller
  BACKPORT: sched/uclamp: Add uclamp support to energy_compute()
  UPSTREAM: sched/uclamp: Add uclamp_util_with()
  BACKPORT: sched/cpufreq, sched/uclamp: Add clamps for FAIR and RT tasks
  UPSTREAM: sched/uclamp: Set default clamps for RT tasks
  UPSTREAM: sched/uclamp: Reset uclamp values on RESET_ON_FORK
  UPSTREAM: sched/uclamp: Extend sched_setattr() to support utilization clamping
  UPSTREAM: sched/core: Allow sched_setattr() to use the current policy
  UPSTREAM: sched/uclamp: Add system default clamps
  UPSTREAM: sched/uclamp: Enforce last task's UCLAMP_MAX
  UPSTREAM: sched/uclamp: Add bucket local max tracking
  UPSTREAM: sched/uclamp: Add CPU's clamp buckets refcounting
  UPSTREAM: cgroup: add cgroup_parse_float()
  Linux 4.19.101
  KVM: arm64: Write arch.mdcr_el2 changes since last vcpu_load on VHE
  block: fix 32 bit overflow in __blkdev_issue_discard()
  block: cleanup __blkdev_issue_discard()
  random: try to actively add entropy rather than passively wait for it
  crypto: af_alg - Use bh_lock_sock in sk_destruct
  rsi: fix non-atomic allocation in completion handler
  rsi: fix memory leak on failed URB submission
  rsi: fix use-after-free on probe errors
  sched/fair: Fix insertion in rq->leaf_cfs_rq_list
  sched/fair: Add tmp_alone_branch assertion
  usb-storage: Disable UAS on JMicron SATA enclosure
  ARM: OMAP2+: SmartReflex: add omap_sr_pdata definition
  iommu/amd: Support multiple PCI DMA aliases in IRQ Remapping
  PCI: Add DMA alias quirk for Intel VCA NTB
  platform/x86: dell-laptop: disable kbd backlight on Inspiron 10xx
  HID: steam: Fix input device disappearing
  atm: eni: fix uninitialized variable warning
  gpio: max77620: Add missing dependency on GPIOLIB_IRQCHIP
  net: wan: sdla: Fix cast from pointer to integer of different size
  drivers/net/b44: Change to non-atomic bit operations on pwol_mask
  spi: spi-dw: Add lock protect dw_spi rx/tx to prevent concurrent calls
  watchdog: rn5t618_wdt: fix module aliases
  watchdog: max77620_wdt: fix potential build errors
  phy: cpcap-usb: Prevent USB line glitches from waking up modem
  phy: qcom-qmp: Increase PHY ready timeout
  drivers/hid/hid-multitouch.c: fix a possible null pointer access.
  HID: Add quirk for incorrect input length on Lenovo Y720
  HID: ite: Add USB id match for Acer SW5-012 keyboard dock
  HID: Add quirk for Xin-Mo Dual Controller
  arc: eznps: fix allmodconfig kconfig warning
  HID: multitouch: Add LG MELF0410 I2C touchscreen support
  net_sched: fix ops->bind_class() implementations
  net_sched: ematch: reject invalid TCF_EM_SIMPLE
  zd1211rw: fix storage endpoint lookup
  rtl8xxxu: fix interface sanity check
  brcmfmac: fix interface sanity check
  ath9k: fix storage endpoint lookup
  cifs: Fix memory allocation in __smb2_handle_cancelled_cmd()
  crypto: chelsio - fix writing tfm flags to wrong place
  iio: st_gyro: Correct data for LSM9DS0 gyro
  mei: me: add comet point (lake) H device ids
  component: do not dereference opaque pointer in debugfs
  serial: 8250_bcm2835aux: Fix line mismatch on driver unbind
  staging: vt6656: Fix false Tx excessive retries reporting.
  staging: vt6656: use NULLFUCTION stack on mac80211
  staging: vt6656: correct packet types for CTS protect, mode.
  staging: wlan-ng: ensure error return is actually returned
  staging: most: net: fix buffer overflow
  usb: dwc3: turn off VBUS when leaving host mode
  USB: serial: ir-usb: fix IrLAP framing
  USB: serial: ir-usb: fix link-speed handling
  USB: serial: ir-usb: add missing endpoint sanity check
  usb: dwc3: pci: add ID for the Intel Comet Lake -V variant
  rsi_91x_usb: fix interface sanity check
  orinoco_usb: fix interface sanity check
  ANDROID: gki: Removed cf modules from gki_defconfig
  ANDROID: Remove default y for VIRTIO_PCI_LEGACY
  ANDROID: gki_defconfig: Remove SND_8X0
  ANDROID: gki: Fixed some typos in Kconfig.gki
  ANDROID: modularize BLK_MQ_VIRTIO
  ANDROID: kallsyms: strip hashes from function names with ThinLTO
  ANDROID: Incremental fs: Remove unneeded compatibility typedef
  ANDROID: Incremental fs: Enable incrementalfs in GKI
  ANDROID: Incremental fs: Fix sparse errors
  ANDROID: Fixing incremental fs style issues
  ANDROID: Make incfs selftests pass
  ANDROID: Initial commit of Incremental FS
  ANDROID: gki_defconfig: Enable req modules in GKI
  ANDROID: gki_defconfig: Set IKHEADERS back to =y
  UPSTREAM: UAPI: ndctl: Remove use of PAGE_SIZE
  Linux 4.19.100
  mm/memory_hotplug: shrink zones when offlining memory
  mm/memory_hotplug: fix try_offline_node()
  mm/memunmap: don't access uninitialized memmap in memunmap_pages()
  drivers/base/node.c: simplify unregister_memory_block_under_nodes()
  mm/hotplug: kill is_dev_zone() usage in __remove_pages()
  mm/memory_hotplug: remove "zone" parameter from sparse_remove_one_section
  mm/memory_hotplug: make unregister_memory_block_under_nodes() never fail
  mm/memory_hotplug: remove memory block devices before arch_remove_memory()
  mm/memory_hotplug: create memory block devices after arch_add_memory()
  drivers/base/memory: pass a block_id to init_memory_block()
  mm/memory_hotplug: allow arch_remove_memory() without CONFIG_MEMORY_HOTREMOVE
  s390x/mm: implement arch_remove_memory()
  mm/memory_hotplug: make __remove_pages() and arch_remove_memory() never fail
  powerpc/mm: Fix section mismatch warning
  mm/memory_hotplug: make __remove_section() never fail
  mm/memory_hotplug: make unregister_memory_section() never fail
  mm, memory_hotplug: update a comment in unregister_memory()
  drivers/base/memory.c: clean up relics in function parameters
  mm/memory_hotplug: release memory resource after arch_remove_memory()
  mm, memory_hotplug: add nid parameter to arch_remove_memory
  drivers/base/memory.c: remove an unnecessary check on NR_MEM_SECTIONS
  mm, sparse: pass nid instead of pgdat to sparse_add_one_section()
  mm, sparse: drop pgdat_resize_lock in sparse_add/remove_one_section()
  mm/memory_hotplug: make remove_memory() take the device_hotplug_lock
  net/x25: fix nonblocking connect
  netfilter: nf_tables: add __nft_chain_type_get()
  netfilter: ipset: use bitmap infrastructure completely
  scsi: iscsi: Avoid potential deadlock in iscsi_if_rx func
  media: v4l2-ioctl.c: zero reserved fields for S/TRY_FMT
  libertas: Fix two buffer overflows at parsing bss descriptor
  coresight: tmc-etf: Do not call smp_processor_id from preemptible
  coresight: etb10: Do not call smp_processor_id from preemptible
  crypto: geode-aes - switch to skcipher for cbc(aes) fallback
  sd: Fix REQ_OP_ZONE_REPORT completion handling
  tracing: Fix histogram code when expression has same var as value
  tracing: Remove open-coding of hist trigger var_ref management
  tracing: Use hist trigger's var_ref array to destroy var_refs
  net/sonic: Prevent tx watchdog timeout
  net/sonic: Fix CAM initialization
  net/sonic: Fix command register usage
  net/sonic: Quiesce SONIC before re-initializing descriptor memory
  net/sonic: Fix receive buffer replenishment
  net/sonic: Improve receive descriptor status flag check
  net/sonic: Avoid needless receive descriptor EOL flag updates
  net/sonic: Fix receive buffer handling
  net/sonic: Fix interface error stats collection
  net/sonic: Use MMIO accessors
  net/sonic: Clear interrupt flags immediately
  net/sonic: Add mutual exclusion for accessing shared state
  do_last(): fetch directory ->i_mode and ->i_uid before it's too late
  tracing: xen: Ordered comparison of function pointers
  scsi: RDMA/isert: Fix a recently introduced regression related to logout
  hwmon: (nct7802) Fix voltage limits to wrong registers
  netfilter: nft_osf: add missing check for DREG attribute
  Input: sun4i-ts - add a check for devm_thermal_zone_of_sensor_register
  Input: pegasus_notetaker - fix endpoint sanity check
  Input: aiptek - fix endpoint sanity check
  Input: gtco - fix endpoint sanity check
  Input: sur40 - fix interface sanity checks
  Input: pm8xxx-vib - fix handling of separate enable register
  Documentation: Document arm64 kpti control
  mmc: sdhci: fix minimum clock rate for v3 controller
  mmc: tegra: fix SDR50 tuning override
  ARM: 8950/1: ftrace/recordmcount: filter relocation types
  Revert "Input: synaptics-rmi4 - don't increment rmiaddr for SMBus transfers"
  Input: keyspan-remote - fix control-message timeouts
  tracing: trigger: Replace unneeded RCU-list traversals
  PCI: Mark AMD Navi14 GPU rev 0xc5 ATS as broken
  hwmon: (core) Do not use device managed functions for memory allocations
  hwmon: (adt7475) Make volt2reg return same reg as reg2volt input
  afs: Fix characters allowed into cell names
  tun: add mutex_unlock() call and napi.skb clearing in tun_get_user()
  tcp: do not leave dangling pointers in tp->highest_sack
  tcp_bbr: improve arithmetic division in bbr_update_bw()
  Revert "udp: do rmem bulk free even if the rx sk queue is empty"
  net: usb: lan78xx: Add .ndo_features_check
  net-sysfs: Fix reference count leak
  net-sysfs: Call dev_hold always in rx_queue_add_kobject
  net-sysfs: Call dev_hold always in netdev_queue_add_kobject
  net-sysfs: fix netdev_queue_add_kobject() breakage
  net-sysfs: Fix reference count leak in rx|netdev_queue_add_kobject
  net_sched: fix datalen for ematch
  net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link()
  net, ip_tunnel: fix namespaces move
  net, ip6_tunnel: fix namespaces move
  net: ip6_gre: fix moving ip6gre between namespaces
  net: cxgb3_main: Add CAP_NET_ADMIN check to CHELSIO_GET_MEM
  net: bcmgenet: Use netif_tx_napi_add() for TX NAPI
  ipv6: sr: remove SKB_GSO_IPXIP6 on End.D* actions
  gtp: make sure only SOCK_DGRAM UDP sockets are accepted
  firestream: fix memory leaks
  can, slip: Protect tty->disc_data in write_wakeup and close with RCU
  ANDROID: update abi definitions
  UPSTREAM: staging: most: net: fix buffer overflow
  ANDROID: gki_defconfig: Enable CONFIG_BTT
  ANDROID: gki_defconfig: Temporarily disable CFI
  f2fs: fix race conditions in ->d_compare() and ->d_hash()
  f2fs: fix dcache lookup of !casefolded directories
  f2fs: Add f2fs stats to sysfs
  f2fs: delete duplicate information on sysfs nodes
  f2fs: change to use rwsem for gc_mutex
  f2fs: update f2fs document regarding to fsync_mode
  f2fs: add a way to turn off ipu bio cache
  f2fs: code cleanup for f2fs_statfs_project()
  f2fs: fix miscounted block limit in f2fs_statfs_project()
  f2fs: show the CP_PAUSE reason in checkpoint traces
  f2fs: fix deadlock allocating bio_post_read_ctx from mempool
  f2fs: remove unneeded check for error allocating bio_post_read_ctx
  f2fs: convert inline_dir early before starting rename
  f2fs: fix memleak of kobject
  f2fs: fix to add swap extent correctly
  mm: export add_swap_extent()
  f2fs: run fsck when getting bad inode during GC
  f2fs: support data compression
  f2fs: free sysfs kobject
  f2fs: declare nested quota_sem and remove unnecessary sems
  f2fs: don't put new_page twice in f2fs_rename
  f2fs: set I_LINKABLE early to avoid wrong access by vfs
  f2fs: don't keep META_MAPPING pages used for moving verity file blocks
  f2fs: introduce private bioset
  f2fs: cleanup duplicate stats for atomic files
  f2fs: set GFP_NOFS when moving inline dentries
  f2fs: should avoid recursive filesystem ops
  f2fs: keep quota data on write_begin failure
  f2fs: call f2fs_balance_fs outside of locked page
  f2fs: preallocate DIO blocks when forcing buffered_io
  Linux 4.19.99
  m68k: Call timer_interrupt() with interrupts disabled
  arm64: dts: meson-gxm-khadas-vim2: fix uart_A bluetooth node
  serial: stm32: fix clearing interrupt error flags
  IB/iser: Fix dma_nents type definition
  usb: dwc3: Allow building USB_DWC3_QCOM without EXTCON
  samples/bpf: Fix broken xdp_rxq_info due to map order assumptions
  arm64: dts: juno: Fix UART frequency
  drm/radeon: fix bad DMA from INTERRUPT_CNTL2
  dmaengine: ti: edma: fix missed failure handling
  afs: Remove set but not used variables 'before', 'after'
  affs: fix a memory leak in affs_remount
  mmc: core: fix wl1251 sdio quirks
  mmc: sdio: fix wl1251 vendor id
  i2c: stm32f7: report dma error during probe
  packet: fix data-race in fanout_flow_is_huge()
  net: neigh: use long type to store jiffies delta
  hv_netvsc: flag software created hash value
  MIPS: Loongson: Fix return value of loongson_hwmon_init
  dpaa_eth: avoid timestamp read on error paths
  dpaa_eth: perform DMA unmapping before read
  hwrng: omap3-rom - Fix missing clock by probing with device tree
  drm: panel-lvds: Potential Oops in probe error handling
  afs: Fix large file support
  hv_netvsc: Fix send_table offset in case of a host bug
  hv_netvsc: Fix offset usage in netvsc_send_table()
  net: qca_spi: Move reset_count to struct qcaspi
  afs: Fix missing timeout reset
  bpf, offload: Unlock on error in bpf_offload_dev_create()
  xsk: Fix registration of Rx-only sockets
  net: netem: correct the parent's backlog when corrupted packet was dropped
  net: netem: fix error path for corrupted GSO frames
  arm64: hibernate: check pgd table allocation
  firmware: dmi: Fix unlikely out-of-bounds read in save_mem_devices
  dmaengine: imx-sdma: fix size check for sdma script_number
  vhost/test: stop device before reset
  drm/msm/dsi: Implement reset correctly
  net/smc: receive pending data after RCV_SHUTDOWN
  net/smc: receive returns without data
  tcp: annotate lockless access to tcp_memory_pressure
  net: add {READ|WRITE}_ONCE() annotations on ->rskq_accept_head
  net: avoid possible false sharing in sk_leave_memory_pressure()
  act_mirred: Fix mirred_init_module error handling
  s390/qeth: Fix initialization of vnicc cmd masks during set online
  s390/qeth: Fix error handling during VNICC initialization
  sctp: add chunks to sk_backlog when the newsk sk_socket is not set
  net: stmmac: fix disabling flexible PPS output
  net: stmmac: fix length of PTP clock's name string
  ip6erspan: remove the incorrect mtu limit for ip6erspan
  llc: fix sk_buff refcounting in llc_conn_state_process()
  llc: fix another potential sk_buff leak in llc_ui_sendmsg()
  mac80211: accept deauth frames in IBSS mode
  rxrpc: Fix trace-after-put looking at the put connection record
  net: stmmac: gmac4+: Not all Unicast addresses may be available
  nvme: retain split access workaround for capability reads
  net: sched: cbs: Avoid division by zero when calculating the port rate
  net: ethernet: stmmac: Fix signedness bug in ipq806x_gmac_of_parse()
  net: nixge: Fix a signedness bug in nixge_probe()
  of: mdio: Fix a signedness bug in of_phy_get_and_connect()
  net: axienet: fix a signedness bug in probe
  net: stmmac: dwmac-meson8b: Fix signedness bug in probe
  net: socionext: Fix a signedness bug in ave_probe()
  net: netsec: Fix signedness bug in netsec_probe()
  net: broadcom/bcmsysport: Fix signedness in bcm_sysport_probe()
  net: hisilicon: Fix signedness bug in hix5hd2_dev_probe()
  cxgb4: Signedness bug in init_one()
  net: aquantia: Fix aq_vec_isr_legacy() return value
  iommu/amd: Wait for completion of IOTLB flush in attach_device
  crypto: hisilicon - Matching the dma address for dma_pool_free()
  bpf: fix BTF limits
  powerpc/mm/mce: Keep irqs disabled during lockless page table walk
  clk: actions: Fix factor clk struct member access
  mailbox: qcom-apcs: fix max_register value
  f2fs: fix to avoid accessing uninitialized field of inode page in is_alive()
  bnxt_en: Increase timeout for HWRM_DBG_COREDUMP_XX commands
  um: Fix off by one error in IRQ enumeration
  net/rds: Fix 'ib_evt_handler_call' element in 'rds_ib_stat_names'
  RDMA/cma: Fix false error message
  ath10k: adjust skb length in ath10k_sdio_mbox_rx_packet
  gpio/aspeed: Fix incorrect number of banks
  pinctrl: iproc-gpio: Fix incorrect pinconf configurations
  net: sonic: replace dev_kfree_skb in sonic_send_packet
  hwmon: (shtc1) fix shtc1 and shtw1 id mask
  ixgbe: sync the first fragment unconditionally
  btrfs: use correct count in btrfs_file_write_iter()
  Btrfs: fix inode cache waiters hanging on path allocation failure
  Btrfs: fix inode cache waiters hanging on failure to start caching thread
  Btrfs: fix hang when loading existing inode cache off disk
  scsi: fnic: fix msix interrupt allocation
  f2fs: fix error path of f2fs_convert_inline_page()
  f2fs: fix wrong error injection path in inc_valid_block_count()
  ARM: dts: logicpd-som-lv: Fix i2c2 and i2c3 Pin mux
  rtlwifi: Fix file release memory leak
  net: hns3: fix error VF index when setting VLAN offload
  net: sonic: return NETDEV_TX_OK if failed to map buffer
  led: triggers: Fix dereferencing of null pointer
  xsk: avoid store-tearing when assigning umem
  xsk: avoid store-tearing when assigning queues
  ARM: dts: aspeed-g5: Fixe gpio-ranges upper limit
  tty: serial: fsl_lpuart: Use appropriate lpuart32_* I/O funcs
  wcn36xx: use dynamic allocation for large variables
  ath9k: dynack: fix possible deadlock in ath_dynack_node_{de}init
  netfilter: ctnetlink: honor IPS_OFFLOAD flag
  iio: dac: ad5380: fix incorrect assignment to val
  bcache: Fix an error code in bch_dump_read()
  usb: typec: tps6598x: Fix build error without CONFIG_REGMAP_I2C
  bcma: fix incorrect update of BCMA_CORE_PCI_MDIO_DATA
  irqdomain: Add the missing assignment of domain->fwnode for named fwnode
  staging: greybus: light: fix a couple double frees
  x86, perf: Fix the dependency of the x86 insn decoder selftest
  power: supply: Init device wakeup after device_add()
  net/sched: cbs: Set default link speed to 10 Mbps in cbs_set_port_rate
  hwmon: (lm75) Fix write operations for negative temperatures
  Partially revert "kfifo: fix kfifo_alloc() and kfifo_init()"
  rxrpc: Fix lack of conn cleanup when local endpoint is cleaned up [ver #2]
  ahci: Do not export local variable ahci_em_messages
  iommu/mediatek: Fix iova_to_phys PA start for 4GB mode
  media: em28xx: Fix exception handling in em28xx_alloc_urbs()
  mips: avoid explicit UB in assignment of mips_io_port_base
  rtc: pcf2127: bugfix: read rtc disables watchdog
  ARM: 8896/1: VDSO: Don't leak kernel addresses
  media: atmel: atmel-isi: fix timeout value for stop streaming
  i40e: reduce stack usage in i40e_set_fc
  mac80211: minstrel_ht: fix per-group max throughput rate initialization
  rtc: rv3029: revert error handling patch to rv3029_eeprom_write()
  dmaengine: dw: platform: Switch to acpi_dma_controller_register()
  ASoC: sun4i-i2s: RX and TX counter registers are swapped
  powerpc/64s/radix: Fix memory hot-unplug page table split
  signal: Allow cifs and drbd to receive their terminating signals
  bnxt_en: Fix handling FRAG_ERR when NVM_INSTALL_UPDATE cmd fails
  drm: rcar-du: lvds: Fix bridge_to_rcar_lvds
  tools: bpftool: fix format strings and arguments for jsonw_printf()
  tools: bpftool: fix arguments for p_err() in do_event_pipe()
  net/rds: Add a few missing rds_stat_names entries
  ASoC: wm8737: Fix copy-paste error in wm8737_snd_controls
  ASoC: cs4349: Use PM ops 'cs4349_runtime_pm'
  ASoC: es8328: Fix copy-paste error in es8328_right_line_controls
  RDMA/hns: bugfix for slab-out-of-bounds when loading hip08 driver
  RDMA/hns: Bugfix for slab-out-of-bounds when unloading hip08 driver
  ext4: set error return correctly when ext4_htree_store_dirent fails
  crypto: caam - free resources in case caam_rng registration failed
  cxgb4: smt: Add lock for atomic_dec_and_test
  spi: bcm-qspi: Fix BSPI QUAD and DUAL mode support when using flex mode
  net: fix bpf_xdp_adjust_head regression for generic-XDP
  iio: tsl2772: Use devm_add_action_or_reset for tsl2772_chip_off
  cifs: fix rmmod regression in cifs.ko caused by force_sig changes
  net/mlx5: Fix mlx5_ifc_query_lag_out_bits
  ARM: dts: stm32: add missing vdda-supply to adc on stm32h743i-eval
  tipc: reduce risk of wakeup queue starvation
  arm64: dts: renesas: r8a77995: Fix register range of display node
  ALSA: aoa: onyx: always initialize register read value
  crypto: ccp - Reduce maximum stack usage
  x86/kgbd: Use NMI_VECTOR not APIC_DM_NMI
  mic: avoid statically declaring a 'struct device'.
  media: rcar-vin: Clean up correct notifier in error path
  usb: host: xhci-hub: fix extra endianness conversion
  qed: reduce maximum stack frame size
  libertas_tf: Use correct channel range in lbtf_geo_init
  PM: sleep: Fix possible overflow in pm_system_cancel_wakeup()
  clk: sunxi-ng: v3s: add the missing PLL_DDR1
  drm/panel: make drm_panel.h self-contained
  xfrm interface: ifname may be wrong in logs
  scsi: libfc: fix null pointer dereference on a null lport
  ARM: stm32: use "depends on" instead of "if" after prompt
  xdp: fix possible cq entry leak
  x86/pgtable/32: Fix LOWMEM_PAGES constant
  net/tls: fix socket wmem accounting on fallback with netem
  net: pasemi: fix an use-after-free in pasemi_mac_phy_init()
  ceph: fix "ceph.dir.rctime" vxattr value
  PCI: mobiveil: Fix the valid check for inbound and outbound windows
  PCI: mobiveil: Fix devfn check in mobiveil_pcie_valid_device()
  PCI: mobiveil: Remove the flag MSI_FLAG_MULTI_PCI_MSI
  RDMA/hns: Fixs hw access invalid dma memory error
  fsi: sbefifo: Don't fail operations when in SBE IPL state
  devres: allow const resource arguments
  fsi/core: Fix error paths on CFAM init
  ACPI: PM: Introduce "poweroff" callbacks for ACPI PM domain and LPSS
  ACPI: PM: Simplify and fix PM domain hibernation callbacks
  PM: ACPI/PCI: Resume all devices during hibernation
  um: Fix IRQ controller regression on console read
  xprtrdma: Fix use-after-free in rpcrdma_post_recvs
  rxrpc: Fix uninitialized error code in rxrpc_send_data_packet()
  mfd: intel-lpss: Release IDA resources
  iommu/amd: Make iommu_disable safer
  bnxt_en: Suppress error messages when querying DSCP DCB capabilities.
  bnxt_en: Fix ethtool selftest crash under error conditions.
  fork,memcg: alloc_thread_stack_node needs to set tsk->stack
  backlight: pwm_bl: Fix heuristic to determine number of brightness levels
  tools: bpftool: use correct argument in cgroup errors
  nvmem: imx-ocotp: Change TIMING calculation to u-boot algorithm
  nvmem: imx-ocotp: Ensure WAIT bits are preserved when setting timing
  clk: qcom: Fix -Wunused-const-variable
  dmaengine: hsu: Revert "set HSU_CH_MTSR to memory width"
  perf/ioctl: Add check for the sample_period value
  ip6_fib: Don't discard nodes with valid routing information in fib6_locate_1()
  drm/msm/a3xx: remove TPL1 regs from snapshot
  arm64: dts: allwinner: h6: Pine H64: Add interrupt line for RTC
  net/sched: cbs: Fix error path of cbs_module_init
  ARM: dts: iwg20d-q7-common: Fix SDHI1 VccQ regularor
  rtc: pcf8563: Clear event flags and disable interrupts before requesting irq
  rtc: pcf8563: Fix interrupt trigger method
  ASoC: ti: davinci-mcasp: Fix slot mask settings when using multiple AXRs
  net/af_iucv: always register net_device notifier
  net/af_iucv: build proper skbs for HiperTransport
  net/udp_gso: Allow TX timestamp with UDP GSO
  net: netem: fix backlog accounting for corrupted GSO frames
  drm/msm/mdp5: Fix mdp5_cfg_init error return
  IB/hfi1: Handle port down properly in pio
  bpf: fix the check that forwarding is enabled in bpf_ipv6_fib_lookup
  powerpc/pseries/mobility: rebuild cacheinfo hierarchy post-migration
  powerpc/cacheinfo: add cacheinfo_teardown, cacheinfo_rebuild
  qed: iWARP - fix uninitialized callback
  qed: iWARP - Use READ_ONCE and smp_store_release to access ep->state
  ASoC: meson: axg-tdmout: right_j is not supported
  ASoC: meson: axg-tdmin: right_j is not supported
  ntb_hw_switchtec: potential shift wrapping bug in switchtec_ntb_init_sndev()
  firmware: arm_scmi: update rate_discrete in clock_describe_rates_get
  firmware: arm_scmi: fix bitfield definitions for SENSOR_DESC attributes
  phy: usb: phy-brcm-usb: Remove sysfs attributes upon driver removal
  iommu/vt-d: Duplicate iommu_resv_region objects per device list
  arm64: dts: meson-gxm-khadas-vim2: fix Bluetooth support
  arm64: dts: meson-gxm-khadas-vim2: fix gpio-keys-polled node
  serial: stm32: fix a recursive locking in stm32_config_rs485
  mpls: fix warning with multi-label encap
  arm64: dts: renesas: ebisu: Remove renesas, no-ether-link property
  crypto: inside-secure - fix queued len computation
  crypto: inside-secure - fix zeroing of the request in ahash_exit_inv
  media: vivid: fix incorrect assignment operation when setting video mode
  clk: sunxi-ng: sun50i-h6-r: Fix incorrect W1 clock gate register
  cpufreq: brcmstb-avs-cpufreq: Fix types for voltage/frequency
  cpufreq: brcmstb-avs-cpufreq: Fix initial command check
  phy: qcom-qusb2: fix missing assignment of ret when calling clk_prepare_enable
  net: don't clear sock->sk early to avoid trouble in strparser
  RDMA/uverbs: check for allocation failure in uapi_add_elm()
  net: core: support XDP generic on stacked devices.
  netvsc: unshare skb in VF rx handler
  crypto: talitos - fix AEAD processing.
  net: hns3: fix a memory leak issue for hclge_map_unmap_ring_to_vf_vector
  inet: frags: call inet_frags_fini() after unregister_pernet_subsys()
  signal/cifs: Fix cifs_put_tcp_session to call send_sig instead of force_sig
  signal/bpfilter: Fix bpfilter_kernl to use send_sig not force_sig
  iommu: Use right function to get group for device
  iommu: Add missing new line for dma type
  misc: sgi-xp: Properly initialize buf in xpc_get_rsvd_page_pa
  serial: stm32: fix wakeup source initialization
  serial: stm32: Add support of TC bit status check
  serial: stm32: fix transmit_chars when tx is stopped
  serial: stm32: fix rx data length when parity enabled
  serial: stm32: fix rx error handling
  serial: stm32: fix word length configuration
  crypto: ccp - Fix 3DES complaint from ccp-crypto module
  crypto: ccp - fix AES CFB error exposed by new test vectors
  spi: spi-fsl-spi: call spi_finalize_current_message() at the end
  RDMA/qedr: Fix incorrect device rate.
  arm64: dts: meson: libretech-cc: set eMMC as removable
  dmaengine: tegra210-adma: Fix crash during probe
  clk: meson: axg: spread spectrum is on mpll2
  clk: meson: gxbb: no spread spectrum on mpll0
  ARM: dts: sun8i-h3: Fix wifi in Beelink X2 DT
  afs: Fix double inc of vnode->cb_break
  afs: Fix lock-wait/callback-break double locking
  afs: Don't invalidate callback if AFS_VNODE_DIR_VALID not set
  afs: Fix key leak in afs_release() and afs_evict_inode()
  EDAC/mc: Fix edac_mc_find() in case no device is found
  thermal: cpu_cooling: Actually trace CPU load in thermal_power_cpu_get_power
  thermal: rcar_gen3_thermal: fix interrupt type
  backlight: lm3630a: Return 0 on success in update_status functions
  netfilter: nf_tables: correct NFT_LOGLEVEL_MAX value
  kdb: do a sanity check on the cpu in kdb_per_cpu()
  nfp: bpf: fix static check error through tightening shift amount adjustment
  ARM: riscpc: fix lack of keyboard interrupts after irq conversion
  pwm: meson: Don't disable PWM when setting duty repeatedly
  pwm: meson: Consider 128 a valid pre-divider
  netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule
  crypto: caam - fix caam_dump_sg that iterates through scatterlist
  platform/x86: alienware-wmi: printing the wrong error code
  media: davinci/vpbe: array underflow in vpbe_enum_outputs()
  media: omap_vout: potential buffer overflow in vidioc_dqbuf()
  ALSA: aica: Fix a long-time build breakage
  l2tp: Fix possible NULL pointer dereference
  vfio/mdev: Fix aborting mdev child device removal if one fails
  vfio/mdev: Follow correct remove sequence
  vfio/mdev: Avoid release parent reference during error path
  afs: Fix the afs.cell and afs.volume xattr handlers
  ath10k: Fix encoding for protected management frames
  lightnvm: pblk: fix lock order in pblk_rb_tear_down_check
  mmc: core: fix possible use after free of host
  watchdog: rtd119x_wdt: Fix remove function
  dmaengine: tegra210-adma: restore channel status
  net: ena: fix ena_com_fill_hash_function() implementation
  net: ena: fix incorrect test of supported hash function
  net: ena: fix: Free napi resources when ena_up() fails
  net: ena: fix swapped parameters when calling ena_com_indirect_table_fill_entry
  iommu/vt-d: Make kernel parameter igfx_off work with vIOMMU
  RDMA/rxe: Consider skb reserve space based on netdev of GID
  IB/mlx5: Add missing XRC options to QP optional params mask
  dwc2: gadget: Fix completed transfer size calculation in DDMA
  usb: gadget: fsl: fix link error against usb-gadget module
  ASoC: fix valid stream condition
  packet: in recvmsg msg_name return at least sizeof sockaddr_ll
  ARM: dts: logicpd-som-lv: Fix MMC1 card detect
  PCI: iproc: Enable iProc config read for PAXBv2
  netfilter: nft_flow_offload: add entry to flowtable after confirmation
  KVM: PPC: Book3S HV: Fix lockdep warning when entering the guest
  scsi: qla2xxx: Avoid that qlt_send_resp_ctio() corrupts memory
  scsi: qla2xxx: Fix error handling in qlt_alloc_qfull_cmd()
  scsi: qla2xxx: Fix a format specifier
  irqchip/gic-v3-its: fix some definitions of inner cacheability attributes
  s390/kexec_file: Fix potential segment overlap in ELF loader
  coresight: catu: fix clang build warning
  NFS: Don't interrupt file writeout due to fatal errors
  afs: Further fix file locking
  afs: Fix AFS file locking to allow fine grained locks
  ALSA: usb-audio: Handle the error from snd_usb_mixer_apply_create_quirk()
  dmaengine: axi-dmac: Don't check the number of frames for alignment
  6lowpan: Off by one handling ->nexthdr
  media: ov2659: fix unbalanced mutex_lock/unlock
  ARM: dts: ls1021: Fix SGMII PCS link remaining down after PHY disconnect
  powerpc: vdso: Make vdso32 installation conditional in vdso_install
  net: hns3: fix loop condition of hns3_get_tx_timeo_queue_info()
  selftests/ipc: Fix msgque compiler warnings
  usb: typec: tcpm: Notify the tcpc to start connection-detection for SRPs
  tipc: set sysctl_tipc_rmem and named_timeout right range
  platform/x86: alienware-wmi: fix kfree on potentially uninitialized pointer
  soc: amlogic: meson-gx-pwrc-vpu: Fix power on/off register bitmask
  PCI: dwc: Fix dw_pcie_ep_find_capability() to return correct capability offset
  staging: android: vsoc: fix copy_from_user overrun
  perf/core: Fix the address filtering fix
  hwmon: (w83627hf) Use request_muxed_region for Super-IO accesses
  net: hns3: fix for vport->bw_limit overflow problem
  PCI: rockchip: Fix rockchip_pcie_ep_assert_intx() bitwise operations
  ARM: pxa: ssp: Fix "WARNING: invalid free of devm_ allocated data"
  brcmfmac: fix leak of mypkt on error return path
  scsi: target/core: Fix a race condition in the LUN lookup code
  rxrpc: Fix detection of out of order acks
  firmware: arm_scmi: fix of_node leak in scmi_mailbox_check
  ACPI: button: reinitialize button state upon resume
  clk: qcom: Skip halt checks on gcc_pcie_0_pipe_clk for 8998
  net/sched: cbs: fix port_rate miscalculation
  of: use correct function prototype for of_overlay_fdt_apply()
  scsi: qla2xxx: Unregister chrdev if module initialization fails
  drm/vmwgfx: Remove set but not used variable 'restart'
  bpf: Add missed newline in verifier verbose log
  ehea: Fix a copy-paste err in ehea_init_port_res
  rtc: mt6397: Don't call irq_dispose_mapping.
  rtc: Fix timestamp value for RTC_TIMESTAMP_BEGIN_1900
  arm64/vdso: don't leak kernel addresses
  drm/fb-helper: generic: Call drm_client_add() after setup is done
  spi: bcm2835aux: fix driver to not allow 65535 (=-1) cs-gpios
  soc/fsl/qe: Fix an error code in qe_pin_request()
  bus: ti-sysc: Fix sysc_unprepare() when no clocks have been allocated
  spi: tegra114: configure dma burst size to fifo trig level
  spi: tegra114: flush fifos
  spi: tegra114: terminate dma and reset on transfer timeout
  spi: tegra114: fix for unpacked mode transfers
  spi: tegra114: clear packed bit for unpacked mode
  media: tw5864: Fix possible NULL pointer dereference in tw5864_handle_frame
  media: davinci-isif: avoid uninitialized variable use
  soc: qcom: cmd-db: Fix an error code in cmd_db_dev_probe()
  net: dsa: Avoid null pointer when failing to connect to PHY
  ARM: OMAP2+: Fix potentially uninitialized return value for _setup_reset()
  net: phy: don't clear BMCR in genphy_soft_reset
  ARM: dts: sun9i: optimus: Fix fixed-regulators
  arm64: dts: allwinner: a64: Add missing PIO clocks
  ARM: dts: sun8i: a33: Reintroduce default pinctrl muxing
  m68k: mac: Fix VIA timer counter accesses
  tipc: tipc clang warning
  jfs: fix bogus variable self-initialization
  crypto: ccree - reduce kernel stack usage with clang
  regulator: tps65086: Fix tps65086_ldoa1_ranges for selector 0xB
  media: cx23885: check allocation return
  media: wl128x: Fix an error code in fm_download_firmware()
  media: cx18: update *pos correctly in cx18_read_pos()
  media: ivtv: update *pos correctly in ivtv_read_pos()
  soc: amlogic: gx-socinfo: Add mask for each SoC packages
  regulator: lp87565: Fix missing register for LP87565_BUCK_0
  net: sh_eth: fix a missing check of of_get_phy_mode
  net/mlx5e: IPoIB, Fix RX checksum statistics update
  net/mlx5: Fix multiple updates of steering rules in parallel
  xen, cpu_hotplug: Prevent an out of bounds access
  drivers/rapidio/rio_cm.c: fix potential oops in riocm_ch_listen()
  nfp: fix simple vNIC mailbox length
  scsi: megaraid_sas: reduce module load time
  x86/mm: Remove unused variable 'cpu'
  nios2: ksyms: Add missing symbol exports
  PCI: Fix "try" semantics of bus and slot reset
  rbd: clear ->xferred on error from rbd_obj_issue_copyup()
  media: dvb/earth-pt1: fix wrong initialization for demod blocks
  powerpc/mm: Check secondary hash page table
  net: aquantia: fixed instack structure overflow
  NFSv4/flexfiles: Fix invalid deref in FF_LAYOUT_DEVID_NODE()
  NFS: Add missing encode / decode sequence_maxsz to v4.2 operations
  iommu/vt-d: Fix NULL pointer reference in intel_svm_bind_mm()
  hwrng: bcm2835 - fix probe as platform device
  net: sched: act_csum: Fix csum calc for tagged packets
  netfilter: nft_set_hash: bogus element self comparison from deactivation path
  netfilter: nft_set_hash: fix lookups with fixed size hash on big endian
  ath10k: Fix length of wmi tlv command for protected mgmt frames
  regulator: wm831x-dcdc: Fix list of wm831x_dcdc_ilim from mA to uA
  ARM: 8849/1: NOMMU: Fix encodings for PMSAv8's PRBAR4/PRLAR4
  ARM: 8848/1: virt: Align GIC version check with arm64 counterpart
  ARM: 8847/1: pm: fix HYP/SVC mode mismatch when MCPM is used
  iommu: Fix IOMMU debugfs fallout
  mmc: sdhci-brcmstb: handle mmc_of_parse() errors during probe
  NFS/pnfs: Bulk destroy of layouts needs to be safe w.r.t. umount
  platform/x86: wmi: fix potential null pointer dereference
  clocksource/drivers/exynos_mct: Fix error path in timer resources initialization
  clocksource/drivers/sun5i: Fail gracefully when clock rate is unavailable
  perf, pt, coresight: Fix address filters for vmas with non-zero offset
  perf: Copy parent's address filter offsets on clone
  NFS: Fix a soft lockup in the delegation recovery code
  powerpc/64s: Fix logic when handling unknown CPU features
  staging: rtlwifi: Use proper enum for return in halmac_parse_psd_data_88xx
  fs/nfs: Fix nfs_parse_devname to not modify it's argument
  net: dsa: fix unintended change of bridge interface STP state
  ASoC: qcom: Fix of-node refcount unbalance in apq8016_sbc_parse_of()
  driver core: Fix PM-runtime for links added during consumer probe
  drm/nouveau: fix missing break in switch statement
  drm/nouveau/pmu: don't print reply values if exec is false
  drm/nouveau/bios/ramcfg: fix missing parentheses when calculating RON
  net/mlx5: Delete unused FPGA QPN variable
  net: dsa: qca8k: Enable delay for RGMII_ID mode
  regulator: pv88090: Fix array out-of-bounds access
  regulator: pv88080: Fix array out-of-bounds access
  regulator: pv88060: Fix array out-of-bounds access
  brcmfmac: create debugfs files for bus-specific layer
  cdc-wdm: pass return value of recover_from_urb_loss
  dmaengine: mv_xor: Use correct device for DMA API
  staging: r8822be: check kzalloc return or bail
  KVM: PPC: Release all hardware TCE tables attached to a group
  mdio_bus: Fix PTR_ERR() usage after initialization to constant
  hwmon: (pmbus/tps53679) Fix driver info initialization in probe routine
  vfio_pci: Enable memory accesses before calling pci_map_rom
  media: sh: migor: Include missing dma-mapping header
  mt76: usb: fix possible memory leak in mt76u_buf_free
  net: dsa: b53: Do not program CPU port's PVID
  net: dsa: b53: Properly account for VLAN filtering
  net: dsa: b53: Fix default VLAN ID
  keys: Timestamp new keys
  block: don't use bio->bi_vcnt to figure out segment number
  usb: phy: twl6030-usb: fix possible use-after-free on remove
  PCI: endpoint: functions: Use memcpy_fromio()/memcpy_toio()
  driver core: Fix possible supplier PM-usage counter imbalance
  RDMA/mlx5: Fix memory leak in case we fail to add an IB device
  pinctrl: sh-pfc: sh73a0: Fix fsic_spdif pin groups
  pinctrl: sh-pfc: r8a7792: Fix vin1_data18_b pin group
  pinctrl: sh-pfc: r8a7791: Fix scifb2_data_c pin group
  pinctrl: sh-pfc: emev2: Add missing pinmux functions
  ntb_hw_switchtec: NT req id mapping table register entry number should be 512
  ntb_hw_switchtec: debug print 64bit aligned crosslink BAR Numbers
  drm/etnaviv: potential NULL dereference
  xsk: add missing smp_rmb() in xsk_mmap
  ipmi: kcs_bmc: handle devm_kasprintf() failure case
  iw_cxgb4: use tos when finding ipv6 routes
  iw_cxgb4: use tos when importing the endpoint
  fbdev: chipsfb: remove set but not used variable 'size'
  rtc: pm8xxx: fix unintended sign extension
  rtc: 88pm80x: fix unintended sign extension
  rtc: 88pm860x: fix unintended sign extension
  net/smc: original socket family in inet_sock_diag
  rtc: ds1307: rx8130: Fix alarm handling
  net: phy: fixed_phy: Fix fixed_phy not checking GPIO
  ath10k: fix dma unmap direction for management frames
  arm64: dts: msm8916: remove bogus argument to the cpu clock
  thermal: mediatek: fix register index error
  rtc: ds1672: fix unintended sign extension
  clk: ingenic: jz4740: Fix gating of UDC clock
  staging: most: cdev: add missing check for cdev_add failure
  iwlwifi: mvm: fix RSS config command
  drm/xen-front: Fix mmap attributes for display buffers
  ARM: dts: lpc32xx: phy3250: fix SD card regulator voltage
  ARM: dts: lpc32xx: fix ARM PrimeCell LCD controller clocks property
  ARM: dts: lpc32xx: fix ARM PrimeCell LCD controller variant
  ARM: dts: lpc32xx: reparent keypad controller to SIC1
  ARM: dts: lpc32xx: add required clocks property to keypad device node
  driver core: Do not call rpm_put_suppliers() in pm_runtime_drop_link()
  driver core: Fix handling of runtime PM flags in device_link_add()
  driver core: Do not resume suppliers under device_links_write_lock()
  driver core: Avoid careless re-use of existing device links
  driver core: Fix DL_FLAG_AUTOREMOVE_SUPPLIER device link flag handling
  crypto: crypto4xx - Fix wrong ppc4xx_trng_probe()/ppc4xx_trng_remove() arguments
  driver: uio: fix possible use-after-free in __uio_register_device
  driver: uio: fix possible memory leak in __uio_register_device
  tty: ipwireless: Fix potential NULL pointer dereference
  bus: ti-sysc: Fix timer handling with drop pm_runtime_irq_safe()
  iwlwifi: mvm: fix A-MPDU reference assignment
  arm64: dts: allwinner: h6: Move GIC device node fix base address ordering
  ip_tunnel: Fix route fl4 init in ip_md_tunnel_xmit
  net/mlx5: Take lock with IRQs disabled to avoid deadlock
  iwlwifi: mvm: avoid possible access out of array.
  clk: sunxi-ng: sun8i-a23: Enable PLL-MIPI LDOs when ungating it
  ARM: dts: sun8i-a23-a33: Move NAND controller device node to sort by address
  net: hns3: fix bug of ethtool_ops.get_channels for VF
  spi/topcliff_pch: Fix potential NULL dereference on allocation error
  rtc: cmos: ignore bogus century byte
  IB/mlx5: Don't override existing ip_protocol
  media: tw9910: Unregister subdevice with v4l2-async
  net: hns3: fix wrong combined count returned by ethtool -l
  IB/iser: Pass the correct number of entries for dma mapped SGL
  ASoC: imx-sgtl5000: put of nodes if finding codec fails
  crypto: tgr192 - fix unaligned memory access
  crypto: brcm - Fix some set-but-not-used warning
  kbuild: mark prepare0 as PHONY to fix external module build
  media: s5p-jpeg: Correct step and max values for V4L2_CID_JPEG_RESTART_INTERVAL
  drm/etnaviv: NULL vs IS_ERR() buf in etnaviv_core_dump()
  memory: tegra: Don't invoke Tegra30+ specific memory timing setup on Tegra20
  net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ9031
  RDMA/iw_cxgb4: Fix the unchecked ep dereference
  spi: cadence: Correct initialisation of runtime PM
  arm64: dts: apq8016-sbc: Increase load on l11 for SDCARD
  drm/shmob: Fix return value check in shmob_drm_probe
  RDMA/qedr: Fix out of bounds index check in query pkey
  RDMA/ocrdma: Fix out of bounds index check in query pkey
  IB/usnic: Fix out of bounds index check in query pkey
  fork, memcg: fix cached_stacks case
  drm/fb-helper: generic: Fix setup error path
  drm/etnaviv: fix some off by one bugs
  ARM: dts: r8a7743: Remove generic compatible string from iic3
  drm: Fix error handling in drm_legacy_addctx
  remoteproc: qcom: q6v5-mss: Add missing regulator for MSM8996
  remoteproc: qcom: q6v5-mss: Add missing clocks for MSM8996
  arm64: defconfig: Re-enable bcm2835-thermal driver
  MIPS: BCM63XX: drop unused and broken DSP platform device
  clk: dove: fix refcount leak in dove_clk_init()
  clk: mv98dx3236: fix refcount leak in mv98dx3236_clk_init()
  clk: armada-xp: fix refcount leak in axp_clk_init()
  clk: kirkwood: fix refcount leak in kirkwood_clk_init()
  clk: armada-370: fix refcount leak in a370_clk_init()
  clk: vf610: fix refcount leak in vf610_clocks_init()
  clk: imx7d: fix refcount leak in imx7d_clocks_init()
  clk: imx6sx: fix refcount leak in imx6sx_clocks_init()
  clk: imx6q: fix refcount leak in imx6q_clocks_init()
  clk: samsung: exynos4: fix refcount leak in exynos4_get_xom()
  clk: socfpga: fix refcount leak
  clk: ti: fix refcount leak in ti_dt_clocks_register()
  clk: qoriq: fix refcount leak in clockgen_init()
  clk: highbank: fix refcount leak in hb_clk_init()
  fork,memcg: fix crash in free_thread_stack on memcg charge fail
  Input: nomadik-ske-keypad - fix a loop timeout test
  vxlan: changelink: Fix handling of default remotes
  net: hns3: fix error handling int the hns3_get_vector_ring_chain
  pinctrl: sh-pfc: sh7734: Remove bogus IPSR10 value
  pinctrl: sh-pfc: sh7269: Add missing PCIOR0 field
  pinctrl: sh-pfc: r8a77995: Remove bogus SEL_PWM[0-3]_3 configurations
  pinctrl: sh-pfc: sh7734: Add missing IPSR11 field
  pinctrl: sh-pfc: r8a77980: Add missing MOD_SEL0 field
  pinctrl: sh-pfc: r8a77970: Add missing MOD_SEL0 field
  pinctrl: sh-pfc: r8a7794: Remove bogus IPSR9 field
  pinctrl: sh-pfc: sh73a0: Add missing TO pin to tpu4_to3 group
  pinctrl: sh-pfc: r8a7791: Remove bogus marks from vin1_b_data18 group
  pinctrl: sh-pfc: r8a7791: Remove bogus ctrl marks from qspi_data4_b group
  pinctrl: sh-pfc: r8a7740: Add missing LCD0 marks to lcd0_data24_1 group
  pinctrl: sh-pfc: r8a7740: Add missing REF125CK pin to gether_gmii group
  ipv6: add missing tx timestamping on IPPROTO_RAW
  switchtec: Remove immediate status check after submitting MRPC command
  staging: bcm2835-camera: fix module autoloading
  staging: bcm2835-camera: Abort probe if there is no camera
  mailbox: ti-msgmgr: Off by one in ti_msgmgr_of_xlate()
  IB/rxe: Fix incorrect cache cleanup in error flow
  OPP: Fix missing debugfs supply directory for OPPs
  IB/hfi1: Correctly process FECN and BECN in packets
  net: phy: Fix not to call phy_resume() if PHY is not attached
  arm64: dts: renesas: r8a7795-es1: Add missing power domains to IPMMU nodes
  arm64: dts: meson-gx: Add hdmi_5v regulator as hdmi tx supply
  drm/dp_mst: Skip validating ports during destruction, just ref
  net: always initialize pagedlen
  drm: rcar-du: Fix vblank initialization
  drm: rcar-du: Fix the return value in case of error in 'rcar_du_crtc_set_crc_source()'
  exportfs: fix 'passing zero to ERR_PTR()' warning
  bus: ti-sysc: Add mcasp optional clocks flag
  pinctrl: meson-gxl: remove invalid GPIOX tsin_a pins
  ASoC: sun8i-codec: add missing route for ADC
  pcrypt: use format specifier in kobject_add
  ARM: dts: bcm283x: Correct mailbox register sizes
  ASoC: wm97xx: fix uninitialized regmap pointer problem
  NTB: ntb_hw_idt: replace IS_ERR_OR_NULL with regular NULL checks
  mlxsw: spectrum: Set minimum shaper on MC TCs
  mlxsw: reg: QEEC: Add minimum shaper fields
  net: hns3: add error handler for hns3_nic_init_vector_data()
  drm/sun4i: hdmi: Fix double flag assignation
  net: socionext: Add dummy PHY register read in phy_write()
  tipc: eliminate message disordering during binding table update
  powerpc/kgdb: add kgdb_arch_set/remove_breakpoint()
  netfilter: nf_flow_table: do not remove offload when other netns's interface is down
  RDMA/bnxt_re: Add missing spin lock initialization
  rtlwifi: rtl8821ae: replace _rtl8821ae_mrate_idx_to_arfr_id with generic version
  powerpc/pseries/memory-hotplug: Fix return value type of find_aa_index
  pwm: lpss: Release runtime-pm reference from the driver's remove callback
  netfilter: nft_osf: usage from output path is not valid
  staging: comedi: ni_mio_common: protect register write overflow
  iwlwifi: nvm: get num of hw addresses from firmware
  ALSA: usb-audio: update quirk for B&W PX to remove microphone
  of: Fix property name in of_node_get_device_type
  drm/msm: fix unsigned comparison with less than zero
  mei: replace POLL* with EPOLL* for write queues.
  cfg80211: regulatory: make initialization more robust
  usb: gadget: fsl_udc_core: check allocation return value and cleanup on failure
  usb: dwc3: add EXTCON dependency for qcom
  genirq/debugfs: Reinstate full OF path for domain name
  IB/hfi1: Add mtu check for operational data VLs
  IB/rxe: replace kvfree with vfree
  mailbox: mediatek: Add check for possible failure of kzalloc
  ASoC: wm9712: fix unused variable warning
  signal/ia64: Use the force_sig(SIGSEGV,...) in ia64_rt_sigreturn
  signal/ia64: Use the generic force_sigsegv in setup_frame
  drm/hisilicon: hibmc: Don't overwrite fb helper surface depth
  bridge: br_arp_nd_proxy: set icmp6_router if neigh has NTF_ROUTER
  PCI: iproc: Remove PAXC slot check to allow VF support
  firmware: coreboot: Let OF core populate platform device
  ARM: qcom_defconfig: Enable MAILBOX
  apparmor: don't try to replace stale label in ptrace access check
  ALSA: hda: fix unused variable warning
  apparmor: Fix network performance issue in aa_label_sk_perm
  iio: fix position relative kernel version
  drm/virtio: fix bounds check in virtio_gpu_cmd_get_capset()
  ixgbe: don't clear IPsec sa counters on HW clearing
  ARM: dts: at91: nattis: make the SD-card slot work
  ARM: dts: at91: nattis: set the PRLUD and HIPOW signals low
  drm/sti: do not remove the drm_bridge that was never added
  ipmi: Fix memory leak in __ipmi_bmc_register
  watchdog: sprd: Fix the incorrect pointer getting from driver data
  soc: aspeed: Fix snoop_file_poll()'s return type
  perf map: No need to adjust the long name of modules
  crypto: sun4i-ss - fix big endian issues
  mt7601u: fix bbp version check in mt7601u_wait_bbp_ready
  tipc: fix wrong timeout input for tipc_wait_for_cond()
  tipc: update mon's self addr when node addr generated
  powerpc/archrandom: fix arch_get_random_seed_int()
  powerpc/pseries: Enable support for ibm,drc-info property
  SUNRPC: Fix svcauth_gss_proxy_init()
  mfd: intel-lpss: Add default I2C device properties for Gemini Lake
  i2c: i2c-stm32f7: fix 10-bits check in slave free id search loop
  i2c: stm32f7: rework slave_id allocation
  xfs: Sanity check flags of Q_XQUOTARM call
  Revert "efi: Fix debugobjects warning on 'efi_rts_work'"
  FROMGIT: ext4: Add EXT4_IOC_FSGETXATTR/EXT4_IOC_FSSETXATTR to compat_ioctl.
  ANDROID: gki_defconfig: Set IKHEADERS back to =m
  ANDROID: gki_defconfig: enable NVDIMM/PMEM options
  UPSTREAM: virtio-pmem: Add virtio pmem driver
  UPSTREAM: libnvdimm: nd_region flush callback support
  UPSTREAM: libnvdimm/of_pmem: Provide a unique name for bus provider
  UPSTREAM: libnvdimm/of_pmem: Fix platform_no_drv_owner.cocci warnings
  ANDROID: x86: gki_defconfig: enable LTO and CFI
  ANDROID: x86: map CFI jump tables in pti_clone_entry_text
  ANDROID: BACKPORT: x86, module: Ignore __typeid__ relocations
  ANDROID: BACKPORT: x86, relocs: Ignore __typeid__ relocations
  ANDROID: BACKPORT: x86/extable: Do not mark exception callback as CFI
  FROMLIST: crypto, x86/sha: Eliminate casts on asm implementations
  UPSTREAM: crypto: x86 - Rename functions to avoid conflict with crypto/sha256.h
  UPSTREAM: x86/vmlinux: Actually use _etext for the end of the text segment
  ANDROID: update ABI following inline crypto changes
  ANDROID: gki_defconfig: enable dm-default-key
  ANDROID: dm: add dm-default-key target for metadata encryption
  ANDROID: dm: enable may_passthrough_inline_crypto on some targets
  ANDROID: dm: add support for passing through inline crypto support
  ANDROID: block: Introduce passthrough keyslot manager
  ANDROID: ext4, f2fs: enable direct I/O with inline encryption
  FROMLIST: scsi: ufs: add program_key() variant op
  ANDROID: block: export symbols needed for modules to use inline crypto
  ANDROID: block: fix some inline crypto bugs
  UPSTREAM: mm/page_io.c: annotate refault stalls from swap_readpage
  UPSTREAM: lib/test_meminit.c: add bulk alloc/free tests
  UPSTREAM: lib/test_meminit: add a kmem_cache_alloc_bulk() test
  UPSTREAM: mm/slub.c: init_on_free=1 should wipe freelist ptr for bulk allocations
  ANDROID: mm/cma.c: Export symbols
  ANDROID: gki_defconfig: Set CONFIG_ION=m
  ANDROID: lib/plist: Export symbol plist_add
  ANDROID: staging: android: ion: enable modularizing the ion driver
  Revert "ANDROID: security,perf: Allow further restriction of perf_event_open"
  ANDROID: selinux: modify RTM_GETLINK permission
  FROMLIST: security: selinux: allow per-file labelling for binderfs
  BACKPORT: tracing: Remove unnecessary DEBUG_FS dependency
  BACKPORT: debugfs: Fix !DEBUG_FS debugfs_create_automount
  ANDROID: update abi for 4.19.98
  Linux 4.19.98
  hwmon: (pmbus/ibm-cffps) Switch LEDs to blocking brightness call
  regulator: ab8500: Remove SYSCLKREQ from enum ab8505_regulator_id
  clk: sprd: Use IS_ERR() to validate the return value of syscon_regmap_lookup_by_phandle()
  perf probe: Fix wrong address verification
  scsi: core: scsi_trace: Use get_unaligned_be*()
  scsi: qla2xxx: fix rports not being mark as lost in sync fabric scan
  scsi: qla2xxx: Fix qla2x00_request_irqs() for MSI
  scsi: target: core: Fix a pr_debug() argument
  scsi: bnx2i: fix potential use after free
  scsi: qla4xxx: fix double free bug
  scsi: esas2r: unlock on error in esas2r_nvram_read_direct()
  reiserfs: fix handling of -EOPNOTSUPP in reiserfs_for_each_xattr
  drm/nouveau/mmu: qualify vmm during dtor
  drm/nouveau/bar/gf100: ensure BAR is mapped
  drm/nouveau/bar/nv50: check bar1 vmm return value
  mtd: devices: fix mchp23k256 read and write
  Revert "arm64: dts: juno: add dma-ranges property"
  arm64: dts: marvell: Fix CP110 NAND controller node multi-line comment alignment
  tick/sched: Annotate lockless access to last_jiffies_update
  cfg80211: check for set_wiphy_params
  arm64: dts: meson-gxl-s905x-khadas-vim: fix gpio-keys-polled node
  cw1200: Fix a signedness bug in cw1200_load_firmware()
  irqchip: Place CONFIG_SIFIVE_PLIC into the menu
  tcp: refine rule to allow EPOLLOUT generation under mem pressure
  xen/blkfront: Adjust indentation in xlvbd_alloc_gendisk
  mlxsw: spectrum_qdisc: Include MC TCs in Qdisc counters
  mlxsw: spectrum: Wipe xstats.backlog of down ports
  sh_eth: check sh_eth_cpu_data::dual_port when dumping registers
  tcp: fix marked lost packets not being retransmitted
  r8152: add missing endpoint sanity check
  ptp: free ptp device pin descriptors properly
  net/wan/fsl_ucc_hdlc: fix out of bounds write on array utdm_info
  net: usb: lan78xx: limit size of local TSO packets
  net: hns: fix soft lockup when there is not enough memory
  net: dsa: tag_qca: fix doubled Tx statistics
  hv_netvsc: Fix memory leak when removing rndis device
  macvlan: use skb_reset_mac_header() in macvlan_queue_xmit()
  batman-adv: Fix DAT candidate selection on little endian systems
  NFC: pn533: fix bulk-message timeout
  netfilter: nf_tables: fix flowtable list del corruption
  netfilter: nf_tables: store transaction list locally while requesting module
  netfilter: nf_tables: remove WARN and add NLA_STRING upper limits
  netfilter: nft_tunnel: fix null-attribute check
  netfilter: arp_tables: init netns pointer in xt_tgdtor_param struct
  netfilter: fix a use-after-free in mtype_destroy()
  cfg80211: fix page refcount issue in A-MSDU decap
  cfg80211: fix memory leak in cfg80211_cqm_rssi_update
  cfg80211: fix deadlocks in autodisconnect work
  bpf: Fix incorrect verifier simulation of ARSH under ALU32
  arm64: dts: agilex/stratix10: fix pmu interrupt numbers
  mm/huge_memory.c: thp: fix conflict of above-47bit hint address and PMD alignment
  mm/huge_memory.c: make __thp_get_unmapped_area static
  net: stmmac: Enable 16KB buffer size
  net: stmmac: 16KB buffer must be 16 byte aligned
  ARM: dts: imx7: Fix Toradex Colibri iMX7S 256MB NAND flash support
  ARM: dts: imx6q-icore-mipi: Use 1.5 version of i.Core MX6DL
  ARM: dts: imx6qdl: Add Engicam i.Core 1.5 MX6
  mm/page-writeback.c: avoid potential division by zero in wb_min_max_ratio()
  btrfs: fix memory leak in qgroup accounting
  btrfs: do not delete mismatched root refs
  btrfs: fix invalid removal of root ref
  btrfs: rework arguments of btrfs_unlink_subvol
  mm: memcg/slab: call flush_memcg_workqueue() only if memcg workqueue is valid
  mm/shmem.c: thp, shmem: fix conflict of above-47bit hint address and PMD alignment
  perf report: Fix incorrectly added dimensions as switch perf data file
  perf hists: Fix variable name's inconsistency in hists__for_each() macro
  x86/resctrl: Fix potential memory leak
  drm/i915: Add missing include file <linux/math64.h>
  x86/efistub: Disable paging at mixed mode entry
  x86/CPU/AMD: Ensure clearing of SME/SEV features is maintained
  x86/resctrl: Fix an imbalance in domain_remove_cpu()
  usb: core: hub: Improved device recognition on remote wakeup
  ptrace: reintroduce usage of subjective credentials in ptrace_has_cap()
  LSM: generalize flag passing to security_capable
  ARM: dts: am571x-idk: Fix gpios property to have the correct gpio number
  block: fix an integer overflow in logical block size
  Fix built-in early-load Intel microcode alignment
  arm64: dts: allwinner: a64: olinuxino: Fix SDIO supply regulator
  ALSA: usb-audio: fix sync-ep altsetting sanity check
  ALSA: seq: Fix racy access for queue timer in proc read
  ALSA: dice: fix fallback from protocol extension into limited functionality
  ARM: dts: imx6q-dhcom: Fix SGTL5000 VDDIO regulator connection
  ASoC: msm8916-wcd-analog: Fix MIC BIAS Internal1
  ASoC: msm8916-wcd-analog: Fix selected events for MIC BIAS External1
  scsi: mptfusion: Fix double fetch bug in ioctl
  scsi: fnic: fix invalid stack access
  USB: serial: quatech2: handle unbound ports
  USB: serial: keyspan: handle unbound ports
  USB: serial: io_edgeport: add missing active-port sanity check
  USB: serial: io_edgeport: handle unbound ports on URB completion
  USB: serial: ch341: handle unbound port at reset_resume
  USB: serial: suppress driver bind attributes
  USB: serial: option: add support for Quectel RM500Q in QDL mode
  USB: serial: opticon: fix control-message timeouts
  USB: serial: option: Add support for Quectel RM500Q
  USB: serial: simple: Add Motorola Solutions TETRA MTP3xxx and MTP85xx
  iio: buffer: align the size of scan bytes to size of the largest element
  ASoC: msm8916-wcd-digital: Reset RX interpolation path after use
  clk: Don't try to enable critical clocks if prepare failed
  ARM: dts: imx6q-dhcom: fix rtc compatible
  dt-bindings: reset: meson8b: fix duplicate reset IDs
  clk: qcom: gcc-sdm845: Add missing flag to votable GDSCs
  ARM: dts: meson8: fix the size of the PMU registers
  ANDROID: gki: Make GKI specific modules builtins
  ANDROID: fscrypt: add support for hardware-wrapped keys
  ANDROID: block: add KSM op to derive software secret from wrapped key
  ANDROID: block: provide key size as input to inline crypto APIs
  ANDROID: ufshcd-crypto: export cap find API
  ANDROID: build config for cuttlefish ramdisk
  ANDROID: Update ABI representation and whitelist
  Linux 4.19.97
  ocfs2: call journal flush to mark journal as empty after journal recovery when mount
  hexagon: work around compiler crash
  hexagon: parenthesize registers in asm predicates
  ioat: ioat_alloc_ring() failure handling.
  dmaengine: k3dma: Avoid null pointer traversal
  drm/arm/mali: make malidp_mw_connector_helper_funcs static
  MIPS: Prevent link failure with kcov instrumentation
  mips: cacheinfo: report shared CPU map
  rseq/selftests: Turn off timeout setting
  selftests: firmware: Fix it to do root uid check and skip
  scsi: libcxgbi: fix NULL pointer dereference in cxgbi_device_destroy()
  gpio: mpc8xxx: Add platform device to gpiochip->parent
  rtc: brcmstb-waketimer: add missed clk_disable_unprepare
  rtc: msm6242: Fix reading of 10-hour digit
  f2fs: fix potential overflow
  rtlwifi: Remove unnecessary NULL check in rtl_regd_init
  spi: atmel: fix handling of cs_change set on non-last xfer
  mtd: spi-nor: fix silent truncation in spi_nor_read_raw()
  mtd: spi-nor: fix silent truncation in spi_nor_read()
  iommu/mediatek: Correct the flush_iotlb_all callback
  media: exynos4-is: Fix recursive locking in isp_video_release()
  media: v4l: cadence: Fix how unsued lanes are handled in 'csi2rx_start()'
  media: rcar-vin: Fix incorrect return statement in rvin_try_format()
  media: ov6650: Fix .get_fmt() V4L2_SUBDEV_FORMAT_TRY support
  media: ov6650: Fix some format attributes not under control
  media: ov6650: Fix incorrect use of JPEG colorspace
  tty: serial: pch_uart: correct usage of dma_unmap_sg
  tty: serial: imx: use the sg count from dma_map_sg
  powerpc/powernv: Disable native PCIe port management
  PCI/PTM: Remove spurious "d" from granularity message
  PCI: dwc: Fix find_next_bit() usage
  compat_ioctl: handle SIOCOUTQNSD
  af_unix: add compat_ioctl support
  arm64: dts: apq8096-db820c: Increase load on l21 for SDCARD
  scsi: sd: enable compat ioctls for sed-opal
  pinctrl: lewisburg: Update pin list according to v1.1v6
  pinctl: ti: iodelay: fix error checking on pinctrl_count_index_with_args call
  clk: samsung: exynos5420: Preserve CPU clocks configuration during suspend/resume
  mei: fix modalias documentation
  iio: imu: adis16480: assign bias value only if operation succeeded
  NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn
  NFSv2: Fix a typo in encode_sattr()
  crypto: virtio - implement missing support for output IVs
  xprtrdma: Fix completion wait during device removal
  platform/x86: GPD pocket fan: Use default values when wrong modparams are given
  platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0
  scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI
  scsi: enclosure: Fix stale device oops with hot replug
  RDMA/srpt: Report the SCSI residual to the initiator
  RDMA/mlx5: Return proper error value
  btrfs: simplify inode locking for RWF_NOWAIT
  drm/ttm: fix incrementing the page pointer for huge pages
  drm/ttm: fix start page for huge page check in ttm_put_pages()
  afs: Fix missing cell comparison in afs_test_super()
  cifs: Adjust indentation in smb2_open_file
  s390/qeth: Fix vnicc_is_in_use if rx_bcast not set
  s390/qeth: fix false reporting of VNIC CHAR config failure
  hsr: reset network header when supervision frame is created
  gpio: Fix error message on out-of-range GPIO in lookup table
  iommu: Remove device link to group on failure
  gpio: zynq: Fix for bug in zynq_gpio_restore_context API
  mtd: onenand: omap2: Pass correct flags for prep_dma_memcpy
  ASoC: stm32: spdifrx: fix race condition in irq handler
  ASoC: stm32: spdifrx: fix inconsistent lock state
  ASoC: soc-core: Set dpcm_playback / dpcm_capture
  RDMA/bnxt_re: Fix Send Work Entry state check while polling completions
  RDMA/bnxt_re: Avoid freeing MR resources if dereg fails
  rtc: mt6397: fix alarm register overwrite
  drm/i915: Fix use-after-free when destroying GEM context
  dccp: Fix memleak in __feat_register_sp
  RDMA: Fix goto target to release the allocated memory
  iwlwifi: pcie: fix memory leaks in iwl_pcie_ctxt_info_gen3_init
  iwlwifi: dbg_ini: fix memory leak in alloc_sgtable
  media: usb:zr364xx:Fix KASAN:null-ptr-deref Read in zr364xx_vidioc_querycap
  f2fs: check if file namelen exceeds max value
  f2fs: check memory boundary by insane namelen
  f2fs: Move err variable to function scope in f2fs_fill_dentries()
  mac80211: Do not send Layer 2 Update frame before authorization
  cfg80211/mac80211: make ieee80211_send_layer2_update a public function
  fs/select: avoid clang stack usage warning
  ethtool: reduce stack usage with clang
  HID: hidraw, uhid: Always report EPOLLOUT
  HID: hidraw: Fix returning EPOLLOUT from hidraw_poll
  hidraw: Return EPOLLOUT from hidraw_poll
  ANDROID: update ABI whitelist
  ANDROID: update kernel ABI for CONFIG_DUMMY
  GKI: enable CONFIG_DUMMY=y
  UPSTREAM: kcov: fix struct layout for kcov_remote_arg
  UPSTREAM: vhost, kcov: collect coverage from vhost_worker
  UPSTREAM: usb, kcov: collect coverage from hub_event
  ANDROID: update kernel ABI for kcov changes
  UPSTREAM: kcov: remote coverage support
  UPSTREAM: kcov: improve CONFIG_ARCH_HAS_KCOV help text
  UPSTREAM: kcov: convert kcov.refcount to refcount_t
  UPSTREAM: kcov: no need to check return value of debugfs_create functions
  GKI: enable CONFIG_NETFILTER_XT_MATCH_QUOTA2_LOG=y
  Linux 4.19.96
  drm/i915/gen9: Clear residual context state on context switch
  netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present
  netfilter: conntrack: dccp, sctp: handle null timeout argument
  netfilter: arp_tables: init netns pointer in xt_tgchk_param struct
  phy: cpcap-usb: Fix flakey host idling and enumerating of devices
  phy: cpcap-usb: Fix error path when no host driver is loaded
  USB: Fix: Don't skip endpoint descriptors with maxpacket=0
  HID: hiddev: fix mess in hiddev_open()
  ath10k: fix memory leak
  rtl8xxxu: prevent leaking urb
  scsi: bfa: release allocated memory in case of error
  mwifiex: pcie: Fix memory leak in mwifiex_pcie_alloc_cmdrsp_buf
  mwifiex: fix possible heap overflow in mwifiex_process_country_ie()
  tty: always relink the port
  tty: link tty and port before configuring it as console
  serdev: Don't claim unsupported ACPI serial devices
  staging: rtl8188eu: Add device code for TP-Link TL-WN727N v5.21
  staging: comedi: adv_pci1710: fix AI channels 16-31 for PCI-1713
  usb: musb: dma: Correct parameter passed to IRQ handler
  usb: musb: Disable pullup at init
  usb: musb: fix idling for suspend after disconnect interrupt
  USB: serial: option: add ZLP support for 0x1bc7/0x9010
  staging: vt6656: set usb_set_intfdata on driver fail.
  gpiolib: acpi: Add honor_wakeup module-option + quirk mechanism
  gpiolib: acpi: Turn dmi_system_id table into a generic quirk table
  can: can_dropped_invalid_skb(): ensure an initialized headroom in outgoing CAN sk_buffs
  can: mscan: mscan_rx_poll(): fix rx path lockup when returning from polling to irq mode
  can: gs_usb: gs_usb_probe(): use descriptors of current altsetting
  can: kvaser_usb: fix interface sanity check
  drm/dp_mst: correct the shifting in DP_REMOTE_I2C_READ
  drm/fb-helper: Round up bits_per_pixel if possible
  drm/sun4i: tcon: Set RGB DCLK min. divider based on hardware model
  Input: input_event - fix struct padding on sparc64
  Input: add safety guards to input_set_keycode()
  HID: hid-input: clear unmapped usages
  HID: uhid: Fix returning EPOLLOUT from uhid_char_poll
  HID: Fix slab-out-of-bounds read in hid_field_extract
  tracing: Change offset type to s32 in preempt/irq tracepoints
  tracing: Have stack tracer compile when MCOUNT_INSN_SIZE is not defined
  kernel/trace: Fix do not unregister tracepoints when register sched_migrate_task fail
  ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen
  ALSA: hda/realtek - Set EAPD control to default for ALC222
  ALSA: hda/realtek - Add new codec supported for ALCS1200A
  ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5
  usb: chipidea: host: Disable port power only if previously enabled
  i2c: fix bus recovery stop mode timing
  chardev: Avoid potential use-after-free in 'chrdev_open()'
  ANDROID: Enable HID_STEAM, HID_SONY, JOYSTICK_XPAD as y
  ANDROID: gki_defconfig: Enable blk-crypto fallback
  BACKPORT: FROMLIST: Update Inline Encryption from v5 to v6 of patch series
  docs: fs-verity: mention statx() support
  f2fs: support STATX_ATTR_VERITY
  ext4: support STATX_ATTR_VERITY
  statx: define STATX_ATTR_VERITY
  docs: fs-verity: document first supported kernel version
  f2fs: add support for IV_INO_LBLK_64 encryption policies
  ext4: add support for IV_INO_LBLK_64 encryption policies
  fscrypt: add support for IV_INO_LBLK_64 policies
  fscrypt: avoid data race on fscrypt_mode::logged_impl_name
  fscrypt: zeroize fscrypt_info before freeing
  fscrypt: remove struct fscrypt_ctx
  fscrypt: invoke crypto API for ESSIV handling

Conflicts:
	Documentation/devicetree/bindings
	Documentation/devicetree/bindings/bus/ti-sysc.txt
	Documentation/devicetree/bindings/thermal/thermal.txt
	Documentation/sysctl/vm.txt
	arch/arm64/mm/mmu.c
	block/blk-crypto-fallback.c
	block/blk-merge.c
	block/keyslot-manager.c
	drivers/char/Kconfig
	drivers/clk/qcom/clk-rcg2.c
	drivers/gpio/gpiolib.c
	drivers/hid/hid-quirks.c
	drivers/irqchip/Kconfig
	drivers/md/Kconfig
	drivers/md/dm-default-key.c
	drivers/md/dm.c
	drivers/nvmem/core.c
	drivers/of/Kconfig
	drivers/of/fdt.c
	drivers/of/irq.c
	drivers/scsi/ufs/ufshcd-crypto.c
	drivers/scsi/ufs/ufshcd.c
	drivers/scsi/ufs/ufshcd.h
	drivers/scsi/ufs/ufshci.h
	drivers/usb/dwc3/gadget.c
	drivers/usb/gadget/composite.c
	drivers/usb/gadget/function/f_fs.c
	fs/crypto/bio.c
	fs/crypto/fname.c
	fs/crypto/fscrypt_private.h
	fs/crypto/keyring.c
	fs/crypto/keysetup.c
	fs/f2fs/data.c
	fs/f2fs/file.c
	include/crypto/skcipher.h
	include/linux/gfp.h
	include/linux/keyslot-manager.h
	include/linux/of_fdt.h
	include/sound/soc.h
	kernel/sched/cpufreq_schedutil.c
	kernel/sched/fair.c
	kernel/sched/psi.c
	kernel/sched/rt.c
	kernel/sched/sched.h
	kernel/sched/topology.c
	kernel/sched/tune.h
	kernel/sysctl.c
	mm/compaction.c
	mm/page_alloc.c
	mm/vmscan.c
	security/commoncap.c
	security/selinux/avc.c

Change-Id: I9a08175c4892e533ecde8da847f75dc4874b303a
Signed-off-by: Ivaylo Georgiev <irgeorgiev@codeaurora.org>
2020-05-28 18:06:23 +05:30
Marc Zyngier
c4e52d72fe KVM: arm64: Fix 32bit PC wrap-around
commit 0225fd5e0a6a32af7af0aefac45c8ebf19dc5183 upstream.

In the unlikely event that a 32bit vcpu traps into the hypervisor
on an instruction that is located right at the end of the 32bit
range, the emulation of that instruction is going to increment
PC past the 32bit range. This isn't great, as userspace can then
observe this value and get a bit confused.

Conversly, userspace can do things like (in the context of a 64bit
guest that is capable of 32bit EL0) setting PSTATE to AArch64-EL0,
set PC to a 64bit value, change PSTATE to AArch32-USR, and observe
that PC hasn't been truncated. More confusion.

Fix both by:
- truncating PC increments for 32bit guests
- sanitizing all 32bit regs every time a core reg is changed by
  userspace, and that PSTATE indicates a 32bit mode.

Cc: stable@vger.kernel.org
Acked-by: Will Deacon <will@kernel.org>
Signed-off-by: Marc Zyngier <maz@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-05-14 07:57:20 +02:00
Marc Zyngier
93adb6ec34 KVM: arm: vgic: Fix limit condition when writing to GICD_I[CS]ACTIVER
commit 1c32ca5dc6d00012f0c964e5fdd7042fcc71efb1 upstream.

When deciding whether a guest has to be stopped we check whether this
is a private interrupt or not. Unfortunately, there's an off-by-one bug
here, and we fail to recognize a whole range of interrupts as being
global (GICv2 SPIs 32-63).

Fix the condition from > to be >=.

Cc: stable@vger.kernel.org
Fixes: abd7229626 ("KVM: arm/arm64: Simplify active_change_prepare and plug race")
Reported-by: André Przywara <andre.przywara@arm.com>
Signed-off-by: Marc Zyngier <maz@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-05-14 07:57:20 +02:00
Boris Ostrovsky
ccfc73e56d x86/kvm: Cache gfn to pfn translation
commit 917248144db5d7320655dbb41d3af0b8a0f3d589 upstream.

__kvm_map_gfn()'s call to gfn_to_pfn_memslot() is
* relatively expensive
* in certain cases (such as when done from atomic context) cannot be called

Stashing gfn-to-pfn mapping should help with both cases.

This is part of CVE-2019-3016.

Signed-off-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>
Reviewed-by: Joao Martins <joao.m.martins@oracle.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Signed-off-by: Ben Hutchings <ben.hutchings@codethink.co.uk>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-04-29 16:31:19 +02:00