crosshatch: update kernel-and-modules prebuilt

Linux version 4.9.270-gf7ed924d3847-ab7466577 (android-build@abfarm-
    east4-080) (Android (7284624, based on r416183b) clang version
    12.0.5 (https://android.googlesource.com/toolchain/llvm-project
    c935d99d7cf2016289302412d708641d52d2f7ee)) #0 SMP PREEMPT Thu Jun
    17 06:23:06 UTC 2021

private/msm-google: (285 changes)
  f7ed924d LTS: Merge android-4.9-q (4.9.270) into android-msm-pixel-4.9
  38b773b4 Merge android-4.9-q (4.9.270) into android-msm-pixel-4.9-lts
  2417f5b5 Merge android-msm-pixel-4.9-rvc-qpr3 into android-msm-pixel-4.9
  c4689af9 Merge branch 'android-msm-pixel-4.9-rvc-security' into android-msm-pixel-4.9-rvc-qpr3
  56ea5f66 msm: kgsl: Allocate user_ctxt_record based on preemption feature flag
  c2bf9d3f Merge 4.9.270 into android-4.9-q
  b56da4ca Linux 4.9.270
  6555a006 Bluetooth: SMP: Fail if remote and local public keys are identical
  cb0c5c0c video: hgafb: correctly handle card detect failure during probe
  85093a02 iio: tsl2583: Fix division by a zero lux_val
  51a17f52 tty: vt: always invoke vc->vc_sw->con_resize callback
  3bd3a8ca vt: Fix character height handling with VT_RESIZEX
  a48e9382 vgacon: Record video mode changes with VT_RESIZEX
  4a09e55b video: hgafb: fix potential NULL pointer dereference
  7399a2b6 qlcnic: Add null check after calling netdev_alloc_skb
  73ed4b69 leds: lp5523: check return value of lp5xx_read and jump to cleanup code
  bde0d2c1 net: rtlwifi: properly check for alloc_workqueue() failure
  2c892f13 net: stmicro: handle clk_prepare() failure during init
  3b3aa390 ethernet: sun: niu: fix missing checks of niu_pci_eeprom_read()
  4ff4a358 Revert "niu: fix missing checks of niu_pci_eeprom_read"
  96ae6d0e Revert "qlcnic: Avoid potential NULL pointer dereference"
  dfb2059d Revert "rtlwifi: fix a potential NULL pointer dereference"
  2daacd64 cdrom: gdrom: initialize global variable at init time
  be197135 cdrom: gdrom: deallocate struct gdrom_unit fields in remove_gdrom
  42c91a5c Revert "gdrom: fix a memory leak bug"
  2f1aed55 Revert "ecryptfs: replace BUG_ON with error handling code"
  eadb0924 Revert "video: imsttfb: fix potential NULL pointer dereferences"
  d6f00b71 Revert "hwmon: (lm80) fix a missing check of bus read in lm80 probe"
  d8f29fb4 Revert "leds: lp5523: fix a missing check of return value of lp55xx_read"
  41ea6052 Revert "net: stmicro: fix a missing check of clk_prepare"
  1f889bb3 Revert "video: hgafb: fix potential NULL pointer dereference"
  5d8ec847 dm snapshot: fix crash with transient storage and zero chunk size
  f29f1cb2 xen-pciback: reconfigure also from backend watch handler
  2d773545 rapidio: handle create_workqueue() failure
  752580ff Revert "rapidio: fix a NULL pointer dereference when create_workqueue() fails"
  dd3d39a1 Revert "ALSA: sb8: add a check for request_region"
  6810a690 ALSA: bebob/oxfw: fix Kconfig entry for Mackie d.2 Pro
  44a9a71c ALSA: usb-audio: Validate MS endpoint descriptors
  02303132 ALSA: line6: Fix racy initialization of LINE6 MIDI
  5716a370 cifs: fix memory leak in smb2_copychunk_range
  aa039ddb ptrace: make ptrace() fail if the tracee changed its pid unexpectedly
  42300783 scsi: qla2xxx: Fix error return code in qla82xx_write_flash_dword()
  c65391dd RDMA/rxe: Clear all QP fields if creation failed
  30b34dcb openrisc: Fix a memory leak
  e7f15a9e Merge 4.9.269 into android-4.9-q
  265f4a0e Linux 4.9.269
  2bab1206 ipv6: remove extra dev_hold() for fallback tunnels
  8829057f xhci: Do not use GFP_KERNEL in (potentially) atomic context
  de327b40 ip6_tunnel: sit: proper dev_{hold|put} in ndo_[un]init methods
  8b0978af sit: proper dev_{hold|put} in ndo_[un]init methods
  02969df9 lib: stackdepot: turn depot_lock spinlock to raw_spinlock
  94e075e6 ALSA: hda: generic: change the DAC ctl name for LO+SPK or LO+HP
  2bb7f54b ceph: fix fscache invalidation
  139f5dc4 um: Mark all kernel symbols as local
  0d5db1c9 Input: silead - add workaround for x86 BIOS-es which bring the chip up in a stuck state
  f7017057 ACPI / hotplug / PCI: Fix reference count leak in enable_slot()
  5a0bd055 isdn: capi: fix mismatched prototypes
  27364c44 cxgb4: Fix the -Wmisleading-indentation warning
  9f147312 usb: sl811-hcd: improve misleading indentation
  41be9c52 kgdb: fix gcc-11 warning on indentation
  cb7d2be7 extcon: adc-jack: Fix incompatible pointer type warning
  21a5c21c x86/msr: Fix wr/rdmsr_safe_regs_on_cpu() prototypes
  7204228a clk: exynos7: Mark aclk_fsys1_200 as critical
  da50f56e netfilter: conntrack: Make global sysctls readonly in non-init netns
  a36d9baf kobject_uevent: remove warning in init_uevent_argv()
  c13f0734 dm ioctl: fix out of bounds array access when no devices
  2da11226 thermal/core/fair share: Lock the thermal zone while looping over instances
  19b263c9 MIPS: Avoid handcoded DIVU in `__div64_32' altogether
  c0d2b72b MIPS: Avoid DIVU in `__div64_32' is result would be zero
  8b560935 MIPS: Reinstate platform `__div64_32' handler
  87c455b2 FDDI: defxx: Make MMIO the configuration default except for EISA
  eeebfa16 KVM: x86: Cancel pvclock_gtod_work on module removal
  c4307d4d usb: core: hub: fix race condition about TRSMRCY of resume
  ffaf6042 usb: dwc2: Fix gadget DMA unmap direction
  9334723b usb: xhci: Increase timeout for HC halt
  6901a4f7 ACPI: scan: Fix a memory leak in an error handling path
  e9035d80 usb: fotg210-hcd: Fix an error message
  2b205f91 iio: proximity: pulsedlight: Fix rumtime PM imbalance on error
  d4224ea9 squashfs: fix divide error in calculate_skip()
  0c25a7bb powerpc/64s: Fix crashes when toggling entry flush barrier
  5375b067 ARC: entry: fix off-by-one error in syscall number validation
  9fe9bb14 kernel: kexec_file: fix error return code of kexec_calculate_store_digests()
  9fe7601b ksm: fix potential missing rmap_item for stable_node
  5e9562fa mm/hugeltb: handle the error case in hugetlb_fix_reserve_counts()
  d5e95afd khugepaged: fix wrong result value for trace_mm_collapse_huge_page_isolate()
  854087e9 drm/radeon: Fix off-by-one power_state index heap overwrite
  d3104ec7 sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b
  4fc6ebdd NFSv4.2 fix handling of sr_eof in SEEK's reply
  c621f365 pNFS/flexfiles: fix incorrect size check in decode_nfs_fh()
  6e15fb6c NFS: Deal correctly with attribute generation counter overflow
  1a3a24e3 NFSv4.2: Always flush out writes in nfs42_proc_fallocate()
  555a70f7 ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook
  c864ded8 PCI: Release OF node in pci_scan_device()'s error path
  e12d8b1c f2fs: fix a redundant call to f2fs_balance_fs if an error occurs
  2101b9c6 ASoC: rt286: Make RT286_SET_GPIO_* readable and writable
  849ad3fb net: ethernet: mtk_eth_soc: fix RX VLAN offload
  d84f318a powerpc/iommu: Annotate nested lock for lockdep
  36e19654 wl3501_cs: Fix out-of-bounds warnings in wl3501_mgmt_join
  39d696c2 wl3501_cs: Fix out-of-bounds warnings in wl3501_send_pkt
  525a2ca6 powerpc/pseries: Stop calling printk in rtas_stop_self()
  55d94a1d samples/bpf: Fix broken tracex1 due to kprobe argument change
  96ee5c0d ASoC: rt286: Generalize support for ALC3263 codec
  0383673a sctp: Fix out-of-bounds warning in sctp_process_asconf_param()
  01d09d41 kconfig: nconf: stop endless search loops
  6bbf2229 selftests: Set CC to clang in lib.mk if LLVM is set
  82c4a2ee cuse: prevent clone
  6d0bc23d mac80211: clear the beacon's CRC after channel switch
  bbb53239 ip6_vti: proper dev_{hold|put} in ndo_[un]init methods
  a7167a70 Bluetooth: initialize skb_queue_head at l2cap_chan_create()
  24deabdb Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default
  21619026 ALSA: rme9652: don't disable if not enabled
  38d1f61c ALSA: hdspm: don't disable if not enabled
  fee8dd9a ALSA: hdsp: don't disable if not enabled
  d25b0289 net: stmmac: Set FIFO sizes for ipq806x
  315938b0 tipc: convert dest node's address to network order
  5c85044f fs: dlm: fix debugfs dump
  51222297 Revert "fdt: Properly handle "no-map" field in the memory region"
  146fe282 Revert "of/fdt: Make sure no-map does not remove already reserved regions"
  89e55e90 sctp: delay auto_asconf init until binding the first addr
  5dafc07a Revert "net/sctp: fix race condition in sctp_destroy_sock"
  58a2306a kfifo: fix ternary sign extension bugs
  312e4bc8 net:nfc:digital: Fix a double free in digital_tg_recv_dep_req
  c7f75d11 net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
  02850400 powerpc/52xx: Fix an invalid ASM expression ('addi' used instead of 'add')
  910737fb ath9k: Fix error check in ath9k_hw_read_revisions() for PCI devices
  f5b87e25 net: davinci_emac: Fix incorrect masking of tx and rx error channel
  90f6c294 RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails
  5d3daa28 vsock/vmci: log once the failed queue pair allocation
  3d1e38b2 mwl8k: Fix a double Free in mwl8k_probe_hw
  e79848e2 i2c: sh7760: fix IRQ error path
  284957e9 powerpc/pseries: extract host bridge from pci_bus prior to bus removal
  1290caaa MIPS: pci-legacy: stop using of_pci_range_to_resource
  ba5e6149 i2c: sh7760: add IRQ check
  ff7cda8d i2c: jz4780: add IRQ check
  e9b4cac1 i2c: emev2: add IRQ check
  19c17bfa i2c: cadence: add IRQ check
  10c5d455 net: thunderx: Fix unintentional sign extension issue
  f0a02e2f mt7601u: fix always true expression
  7a26eae7 mac80211: bail out if cipher schemes are invalid
  01ffcc8a powerpc: iommu: fix build when neither PCI or IBMVIO is set
  2e1ac1d4 powerpc/perf: Fix PMU constraint check for EBB events
  7c8e283f liquidio: Fix unintented sign extension of a left shift of a u16
  6ef6f03f ALSA: usb-audio: Add error checks for usb_driver_claim_interface() calls
  d0ad174f nfc: pn533: prevent potential memory corruption
  3935960e ALSA: core: remove redundant spin_lock pair in snd_card_disconnect
  79d2afe6 powerpc/prom: Mark identical_pvr_fixup as __init
  41b321bb net: lapbether: Prevent racing when checking whether the netif is running
  071372ed perf symbols: Fix dso__fprintf_symbols_by_name() to return the number of printed chars
  a9104f65 HID: plantronics: Workaround for double volume key presses
  04e7be5c x86/events/amd/iommu: Fix sysfs type mismatch
  08557db2 HSI: core: fix resource leaks in hsi_add_client_from_dt()
  a8deef45 scsi: sni_53c710: Add IRQ check
  5f1eb035 scsi: sun3x_esp: Add IRQ check
  17bb1c72 scsi: jazz_esp: Add IRQ check
  5966f7b0 clk: uniphier: Fix potential infinite loop
  d15fd630 media: dvb-usb-remote: fix dvb_usb_nec_rc_key_to_event type mismatch
  07391893 scsi: fcoe: Fix mismatched fcoe_wwn_from_mac declaration
  597a1cd2 ata: libahci_platform: fix IRQ check
  48f03db2 sata_mv: add IRQ checks
  ee3fa23f pata_ipx4xx_cf: fix IRQ check
  4199e48f pata_arasan_cf: fix IRQ check
  769c516c media: m88rs6000t: avoid potential out-of-bounds reads on arrays
  0e892ce2 media: omap4iss: return error code when omap4iss_get() failed
  3c0aa185 media: vivid: fix assignment of dev->fbuf_out_flags
  c7e812a6 ttyprintk: Add TTY hangup callback.
  9e5f64bb Drivers: hv: vmbus: Increase wait time for VMbus unload
  2ab6e37f x86/platform/uv: Fix !KEXEC build failure
  af0d8dad firmware: qcom-scm: Fix QCOM_SCM configuration
  2707118b tty: fix return value for unsupported ioctls
  6f1a2aa4 tty: actually undefine superseded ASYNC flags
  ff0a02ce USB: cdc-acm: fix unprivileged TIOCCSERIAL
  57f35fb3 usb: gadget: r8a66597: Add missing null check on return from platform_get_resource
  eb526e86 crypto: qat - Fix a double free in adf_create_ring
  a00d41af staging: greybus: uart: fix unprivileged TIOCCSERIAL
  e04675b6 staging: rtl8192u: Fix potential infinite loop
  eb40f8a3 mtd: rawnand: gpmi: Fix a double free in gpmi_nand_init
  70b6c9f1 crypto: qat - fix error path in adf_isr_resource_alloc()
  a6191e91 bus: qcom: Put child node before return
  9625b00c mtd: require write permissions for locking and badblock ioctls
  8e3f1894 fotg210-udc: Complete OUT requests on short packets
  4028f506 fotg210-udc: Don't DMA more than the buffer can take
  d2cba2fe fotg210-udc: Mask GRP2 interrupts we don't handle
  44393cf1 fotg210-udc: Remove a dubious condition leading to fotg210_done
  c6191479 fotg210-udc: Fix EP0 IN requests bigger than two packets
  c507ca91 fotg210-udc: Fix DMA on EP0 for length > max packet size
  f4c4e071 crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
  952ce02e crypto: qat - don't release uninitialized resources
  ee84a94c usb: gadget: pch_udc: Check for DMA mapping error
  23591da2 usb: gadget: pch_udc: Check if driver is present before calling ->setup()
  6dd41ceb usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits()
  607938e2 serial: stm32: fix incorrect characters on console
  a0285e90 ARM: dts: exynos: correct PMIC interrupt trigger level on Snow
  3b16c832 ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250
  a9e6199b memory: gpmc: fix out of bounds read and dereference on gpmc_cs[]
  22d7a559 usb: gadget: pch_udc: Revert d3cb25a12138 completely
  3db4eb97 ALSA: hda/realtek: Remove redundant entry for ALC861 Haier/Uniwill devices
  4d0f986e ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries
  d4c109bb ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries
  669a6802 ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries
  711a0078 ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries
  68d08ecb drm/radeon: fix copy of uninitialized variable back to userspace
  211a6cd0 cfg80211: scan: drop entry from hidden_list on overflow
  fc54ad31 ipw2x00: potential buffer overflow in libipw_wx_set_encodeext()
  f8ea6807 md: md_open returns -EBUSY when entering racing area
  e5f2afec md: factor out a mddev_find_locked helper from mddev_find
  830ba94c md-cluster: fix use-after-free issue when removing rdev
  859b47a4 tracing: Restructure trace_clock_global() to never block
  e1bf31b7 tracing: Map all PIDs to command lines
  27b1e95a tracing: Use strlcpy() instead of strcpy() in __trace_find_cmdline()
  e17731c2 tracing: Treat recording comm for idle task as a success
  4e772cfd misc: vmw_vmci: explicitly initialize vmci_datagram payload
  7998c148 misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg struct
  800e3605 misc: lis3lv02d: Fix false-positive WARN on various HP models
  3b27e0e6 FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR
  ccddad6d net/nfc: fix use-after-free llcp_sock_bind/connect
  34f1f8ae bluetooth: eliminate the potential race condition when removing the HCI controller
  dd2b3cab hsr: use netdev_err() instead of WARN_ONCE()
  31f20a6e Bluetooth: verify AMP hci_chan before amp_destroy
  8ae01852 dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails
  a104a5e7 dm space map common: fix division bug in sm_ll_find_free_block()
  6b1d9e13 dm persistent data: packed struct should have an aligned() attribute too
  82d706f9 usb: gadget/function/f_fs string table fix for multiple languages
  1ed2c7f7 usb: gadget: Fix double free of device descriptor pointers
  0cd20ff5 usb: gadget: dummy_hcd: fix gpf in gadget_setup
  06854b94 media: dvbdev: Fix memory leak in dvb_media_device_free()
  b6f9c34d ext4: fix error code in ext4_commit_super
  d2e121be ext4: fix check to prevent false positive report of incorrect used inodes
  e9cb474d ftrace: Handle commands when closing set_ftrace_filter file
  a1eb8782 Revert 337f13046ff0 ("futex: Allow FUTEX_CLOCK_REALTIME with FUTEX_WAIT op")
  6fa27e51 jffs2: check the validity of dstlen in jffs2_zlib_compress()
  a5036f7f powerpc: fix EDEADLOCK redefinition error in uapi/asm/errno.h
  6716dbaf powerpc/eeh: Fix EEH handling for hugepages in ioremap space.
  20e988dd jffs2: Fix kasan slab-out-of-bounds problem
  80e34f49 NFSv4: Don't discard segments marked for return in _pnfs_return_layout()
  23e17ec1 openvswitch: fix stack OOB read while fragmenting IPv4 packets
  73e167ff arm64/vdso: Discard .note.gnu.property sections in vDSO
  ce1fddfa ALSA: sb: Fix two use after free in snd_sb_qsound_build
  21276f29 ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer
  e4d341e6 scsi: libfc: Fix a format specifier
  9e644061 scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO response
  592a02e8 drm/amdgpu: fix NULL pointer dereference
  f13842fc drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal
  e98dd972 media: gscpa/stv06xx: fix memory leak
  88a064c6 media: dvb-usb: fix memory leak in dvb_usb_adapter_init
  5f157d3d media: i2c: adv7842: fix possible use-after-free in adv7842_remove()
  b1d4aba9 media: i2c: adv7511-v4l2: fix possible use-after-free in adv7511_remove()
  e06cc565 media: adv7604: fix possible use-after-free in adv76xx_remove()
  87cc386f power: supply: s3c_adc_battery: fix possible use-after-free in s3c_adc_bat_remove()
  d42d49bf power: supply: generic-adc-battery: fix possible use-after-free in gab_remove()
  67537124 clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return
  9ce2a83b media: em28xx: fix memory leak
  e60ce2a4 scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg()
  07293def scsi: qla2xxx: Always check the return value of qla24xx_get_isp_stats()
  9874fab9 power: supply: Use IRQF_ONESHOT
  ff6c9140 media: gspca/sq905.c: fix uninitialized variable
  5f15c0dd media: media/saa7164: fix saa7164_encoder_register() memory leak bugs
  c3698831 extcon: arizona: Fix some issues when HPDET IRQ fires after the jack has been unplugged
  d58e73c2 media: ite-cir: check for receive overflow
  daf446c1 scsi: target: pscsi: Fix warning in pscsi_complete_cmd()
  35721513 btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s
  0956dcc7 phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove()
  1ab733b0 intel_th: Consistency and off-by-one fix
  002bb417 spi: omap-100k: Fix reference leak to master
  be199459 spi: dln2: Fix reference leak to master
  9b95c63c x86/build: Propagate $(CLANG_FLAGS) to $(REALMODE_FLAGS)
  80d37f24 PCI: PM: Do not read power state in pci_enable_device_flags()
  a7dc1bf5 usb: xhci: Fix port minor revision
  14751cf5 usb: dwc3: gadget: Ignore EP queue requests during bus reset
  8f0c7731 usb: gadget: uvc: add bInterval checking for HS mode
  4cfdf95e staging: wimax/i2400m: fix byte-order issue
  2fc2662c fbdev: zero-fill colormap in fbcmap.c
  b771b465 btrfs: fix metadata extent leak after failure to create subvolume
  c66b0d5e mmc: core: Set read only for SD cards with permanent write protect bit
  57859c63 mmc: core: Do a power cycle when the CMD11 fails
  00a99e17 ecryptfs: fix kernel panic with null dev_name
  b080e179 arm64: dts: mt8173: fix property typo of 'phys' in dsi node
  b14abdfd ACPI: custom_method: fix a possible memory leak
  8b04d57f ACPI: custom_method: fix potential use-after-free issue
  cde6e800 s390/disassembler: increase ebpf disasm buffer size
  8cfb2e0b platform/x86: thinkpad_acpi: Correct thermal sensor allocation
  14c8aecf USB: Add reset-resume quirk for WD19's Realtek Hub
  640a188b USB: Add LPM quirk for Lenovo ThinkPad USB-C Dock Gen2 Ethernet
  e2a28116 ALSA: usb-audio: Add MIDI quirk for Vox ToneLab EX
  c6dac1da iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_enqueue_hcmd()
  3a095a50 net: usb: ax88179_178a: initialize local variables before use

private/msm-google/techpack/audio: (4 changes)
  46ffdacb Merge android-msm-pixel-4.9-rvc-qpr3 into android-msm-pixel-4.9
  ffff3fbc Merge branch 'android-msm-pixel-4.9-rvc-security' into android-msm-pixel-4.9-rvc-qpr3
  4fe4b205 dsp: add change to enable preemption at cal_utils_dealloc_cal.
  0011b2a4 dsp: add change to handle use-after-free in cal_utils_is_cal_stale

Bug: 178998606
Bug: 179039763
Bug: 187073199
Bug: 189715825
Bug: 189791081
Pick-Prebuilt: 374913097
Build-Id: 7466577
Change-Id: I5acdbd2362ce50d3c22843813c283281686f8196
Signed-off-by: SecurityBot <android-nexus-securitybot@system.gserviceaccount.com>
247 files changed