bonito: update kernel-and-modules prebuilt [ DO NOT MERGE ]

Linux version 4.9.292-g4db3004dff43-ab8051070 (android-
    build@abfarm-01169) (Android (7284624, based on r416183b) clang
    version 12.0.5 (https://android.googlesource.com/toolchain/llvm-
    project c935d99d7cf2016289302412d708641d52d2f7ee)) #0 SMP PREEMPT
    Fri Jan 7 00:10:40 UTC 2022

private/msm-google: (304 changes)
  4db3004d UPSTREAM: f2fs: guarantee to write dirty data when enabling checkpoint back
  b157907c LTS: Merge android-4.9-q (4.9.292) into android-msm-pixel-4.9-sc-v2
  5e783f43 serial: msm_geni_serial: Fix console log false start issue
  67711e47 Merge android-4.9-q (4.9.292) into android-msm-pixel-4.9-sc-lts
  362f255c arm64: configs: Enable CONFIG_HID_WACOM
  0b84e6ee Merge 4.9.292 into android-4.9-q
  575a0d95 Linux 4.9.292
  011f6c92 serial: core: fix transmit-buffer reset and memleak
  65af6fe3 serial: pl011: Add ACPI SBSA UART match id
  4413b78a tty: serial: msm_serial: Deactivate RX DMA for polling support
  e3de8612 vgacon: Propagate console boot parameters before calling `vc_resize'
  cfc102a9 parisc: Fix "make install" on newer debian releases
  38276325 net/rds: correct socket tunable error in rds_tcp_tune()
  0d604c14 siphash: use _unaligned version by default
  b4f217d6 net: qlogic: qlcnic: Fix a NULL pointer dereference in qlcnic_83xx_add_rings()
  bced91c7 natsemi: xtensa: fix section mismatch warnings
  a043f5a6 fget: check that the fd still exists after getting a ref to it
  0917c0b0 fs: add fget_many() and fput_many()
  bcd39331 sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl
  91ba94d3 sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl
  2117fbc3 kprobes: Limit max data_size of the kretprobe instances
  67549e61 vrf: Reset IPCB/IP6CB when processing outbound pkts in vrf dev xmit
  890fefa2 net: ethernet: dec: tulip: de4x5: fix possible array overflows in type3_infoblock()
  142ead3d net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound
  948968f8 ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port()
  ba3bebbd scsi: iscsi: Unblock session then wake up error handler
  551105df thermal: core: Reset previous low and high trip during thermal zone init
  67891733 s390/setup: avoid using memblock_enforce_memory_limit
  fb770d48 platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after S3 deep
  10ade6a1 net: return correct error code
  233171ea hugetlb: take PMD sharing into account when flushing tlb/caches
  d1a09284 NFSv42: Fix pagecache invalidation after COPY/CLONE
  cc927c1d shm: extend forced shm destroy to support objects from several IPC nses
  c648eaa3 tty: hvc: replace BUG_ON() with negative return value
  fbee0b5c xen/netfront: don't trust the backend response data blindly
  37093de8 xen/netfront: disentangle tx_skb_freelist
  4a8de7f8 xen/netfront: don't read data from request on the ring page
  d1227fc1 xen/netfront: read response from backend only once
  967fe453 xen/blkfront: don't trust the backend response data blindly
  f5aa5841 xen/blkfront: don't take local copy of a request from the ring page
  496e5d57 xen/blkfront: read response from backend only once
  c8c9ba5f xen: sync include/xen/interface/io/ring.h with Xen's newest version
  b97f5af5 fuse: release pipe buf after last use
  57c076e6 NFC: add NCI_UNREG flag to eliminate the race
  33a7d698 proc/vmcore: fix clearing user buffer by properly using clear_user()
  c42c5698 vhost/vsock: fix incorrect used length reported to the guest
  8e80bf5d hugetlbfs: flush TLBs correctly after huge_pmd_unshare
  41a3f516 tracing: Check pid filtering when creating events
  935efb0d tcp_cubic: fix spurious Hystart ACK train detections for not-cwnd-limited flows
  6dc28547 PM: hibernate: use correct mode for swsusp_close()
  db80f49e drm/vc4: fix error code in vc4_create_object()
  58ef2c7a scsi: mpt3sas: Fix kernel panic during drive powercycle test
  7afc6600 ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE
  b660d95c NFSv42: Don't fail clone() unless the OP_CLONE operation failed
  3ada7ad7 net: ieee802154: handle iftypes as u32
  6fb4a5b7 ASoC: topology: Add missing rwsem around snd_ctl_remove() calls
  d1d3b4b4 ARM: dts: BCM5301X: Add interrupt properties to GPIO node
  53e4683c tracing: Fix pid filtering when triggers are attached
  d8cc719f xen: detect uninitialized xenbus in xenbus_init
  a4fd853e xen: don't continue xenstore initialization in case of errors
  b4f9fe9a fuse: fix page stealing
  91866803 staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
  1a569231 ALSA: ctxfi: Fix out-of-range access
  404fb109 binder: fix test regression due to sender_euid change
  c193fcec usb: hub: Fix locking issues with address0_mutex
  b13daa1c usb: hub: Fix usb enumeration issue due to address0 race
  339e9af5 USB: serial: option: add Fibocom FM101-GL variants
  ea2ee27e USB: serial: option: add Telit LE910S1 0x9200 composition
  16b34e53 staging: ion: Prevent incorrect reference counting behavour
  58fa83d9 Merge 4.9.291 into android-4.9-q
  5fd8594b Linux 4.9.291
  077cb856 soc/tegra: pmc: Fix imbalanced clock disabling in error code path
  146934b1 usb: max-3421: Use driver data instead of maintaining a list of bound devices
  e406b0e1 ASoC: DAPM: Cover regression by kctl change notification fix
  9e953d93 batman-adv: Don't always reallocate the fragmentation skb head
  88d145ee batman-adv: Reserve needed_*room for fragments
  b1f84b43 batman-adv: Consider fragmentation for needed_headroom
  d670b96a batman-adv: mcast: fix duplicate mcast packets from BLA backbone to mesh
  a9063487 batman-adv: mcast: fix duplicate mcast packets in BLA backbone from LAN
  c36d7d5c batman-adv: Fix own OGM check in aggregated OGMs
  8bfeeb15 batman-adv: Keep fragments equally sized
  78ef13e3 drm/amdgpu: fix set scaling mode Full/Full aspect/Center not works on vga and dvi connectors
  d79ef042 drm/udl: fix control-message timeout
  0738cdb6 cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
  92842fc9 parisc/sticon: fix reverse colors
  637d652d btrfs: fix memory ordering between normal and ordered work functions
  6bf727ad mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag
  9a423fb8 hexagon: export raw I/O routines for modules
  d81d5508 tun: fix bonding active backup with arp monitoring
  2fd8c48f perf/x86/intel/uncore: Fix IIO event constraints for Skylake Server
  770ca9cc perf/x86/intel/uncore: Fix filter_tid mask for CHA events on Skylake Server
  ff169909 NFC: reorder the logic in nfc_{un,}register_device
  4a59a368 NFC: reorganize the functions in nci_request
  18a18172 platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()'
  28f874a1 mips: bcm63xx: add support for clk_get_parent()
  3a9ecf33 iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset
  21c6e6e4 net: bnx2x: fix variable dereferenced before check
  99744387 sched/core: Mitigate race cpus_share_cache()/update_top_cache_domain()
  0f3a44e0 mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set
  b511867e sh: define __BIG_ENDIAN for math-emu
  3300eb8a sh: fix kconfig unmet dependency warning for FRAME_POINTER
  911b48b1 maple: fix wrong return value of maple_bus_init().
  480e46b8 sh: check return code of request_irq
  c7b0a539 powerpc/dcr: Use cmplwi instead of 3-argument cmpli
  cb09c760 ALSA: gus: fix null pointer dereference on pointer block
  01fbe09c powerpc/5200: dts: fix memory node unit name
  5816c036 scsi: target: Fix alua_tg_pt_gps_count tracking
  57fd3d83 scsi: target: Fix ordered tag handling
  bcd25a94 MIPS: sni: Fix the build
  b1ffc16e tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
  2f18f97a usb: host: ohci-tmio: check return value after calling platform_get_resource()
  7086e37b ARM: dts: omap: fix gpmc,mux-add-data type
  ad19f704 scsi: advansys: Fix kernel pointer leak
  b3f43659 usb: musb: tusb6010: check return value after calling platform_get_resource()
  ec70d80a scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
  14cf22e8 PCI/MSI: Destroy sysfs before freeing entries
  e2149103 parisc/entry: fix trace test in syscall exit path
  5ae4974c net: mdio-mux: fix unbalanced put_device
  2a75be38 PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
  973b61a5 mm, oom: do not trigger out_of_memory from the #PF
  226b3c79 mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks
  f6ba0a9f powerpc/bpf: Fix BPF_SUB when imm == 0x80000000
  7a524c94 powerpc/bpf: Validate branch ranges
  a72b2f67 ARM: 9156/1: drop cc-option fallbacks for architecture selection
  d3b3184c USB: chipidea: fix interrupt deadlock
  472970a3 vsock: prevent unnecessary refcnt inc for nonblocking connect
  4a85c43a nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
  df69e763 llc: fix out-of-bound array index in llc_sk_dev_hash()
  fdcd8b63 mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration()
  b2bcf8fd bonding: Fix a use-after-free problem when bond_sysfs_slave_add() failed
  e8b8ac3b ACPI: PMIC: Fix intel_pmic_regs_handler() read accesses
  d90a9fb2 net: davinci_emac: Fix interrupt pacing disable
  848b2123 xen-pciback: Fix return in pm_ctrl_init()
  71755b12 i2c: xlr: Fix a resource leak in the error handling path of 'xlr_i2c_probe()'
  5ac3a634 scsi: qla2xxx: Turn off target reset during issue_lip
  ce5020ff watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
  f96f743a m68k: set a default value for MEMORY_RESERVE
  9a85ec13 dmaengine: dmaengine_desc_callback_valid(): Check for `callback_result`
  e1e27f9f netfilter: nfnetlink_queue: fix OOB when mac header was cleared
  05d9522a auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string
  311d7eb5 dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
  941c42fc mtd: spi-nor: hisi-sfc: Remove excessive clk_disable_unprepare()
  f0b6ae56 fs: orangefs: fix error return code of orangefs_revalidate_lookup()
  e92fac39 PCI: aardvark: Don't spam about PIO Response Status
  75bcf7ee drm/plane-helper: fix uninitialized variable reference
  16645db2 pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds
  52355fd4 power: supply: bq27xxx: Fix kernel crash on IRQ handler register error
  00b6103b serial: xilinx_uartps: Fix race condition causing stuck TX
  4d3092fe RDMA/mlx4: Return missed an error if device doesn't support steering
  09cc73bb scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
  c9323d26 power: supply: rt5033_battery: Change voltage values to µV
  6971cfba usb: gadget: hid: fix error code in do_config()
  dff3c294 serial: 8250_dw: Drop wrong use of ACPI_PTR()
  988471bf video: fbdev: chipsfb: use memset_io() instead of memset()
  b52958eb memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
  2f4ee906 soc/tegra: Fix an error handling path in tegra_powergate_power_up()
  9ef07b41 arm: dts: omap3-gta04a4: accelerometer irq fix
  b9bd1b50 JFS: fix memleak in jfs_mount
  e77b7002 MIPS: loongson64: make CPU_LOONGSON64 depends on MIPS_FP_SUPPORT
  b2810048 scsi: dc395: Fix error case unwinding
  c56e51a3 ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
  dce40d2c RDMA/rxe: Fix wrong port_cap_flags
  8c1f8ee5 crypto: pcrypt - Delay write to padata->info
  9d04e381 libertas: Fix possible memory leak in probe and disconnect
  ef32674e libertas_tf: Fix possible memory leak in probe and disconnect
  50d9b55d samples/kretprobes: Fix return value if register_kretprobe() failed
  5ee20e81 irq: mips: avoid nested irq_enter()
  5b479a4a s390/gmap: don't unconditionally call pte_unmap_unlock() in __gmap_zap()
  a269586a smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
  33c82dce phy: micrel: ksz8041nl: do not use power down mode
  4ed75c70 mwifiex: Send DELBA requests according to spec
  7acd98da platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
  3f3fde65 mmc: mxs-mmc: disable regulator on error and in the remove function
  7737b104 net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
  96393660 drm/msm: uninitialized variable in msm_gem_import()
  ba266809 ath10k: fix max antenna gain unit
  c68a9243 hwmon: Fix possible memleak in __hwmon_device_register()
  d6035f5c memstick: jmb38x_ms: use appropriate free function in jmb38x_ms_alloc_host()
  5460176e memstick: avoid out-of-range warning
  a97b984a b43: fix a lower bounds test
  482899b0 b43legacy: fix a lower bounds test
  e0d0694e crypto: qat - disregard spurious PFVF interrupts
  57dd5d8a crypto: qat - detect PFVF collision after ACK
  b5c7450c ath9k: Fix potential interrupt storm on queue reset
  84d93e04 cpuidle: Fix kobject memory leaks in error paths
  dc0a7af8 media: si470x: Avoid card name truncation
  e1f12efe media: mtk-vpu: Fix a resource leak in the error handling path of 'mtk_vpu_probe()'
  265b66ff media: dvb-usb: fix ununit-value in az6027_rc_query
  abd8bb72 cgroup: Make rebind_subsystems() disable v2 controllers all at once
  15362e6b parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
  8f83d6fe parisc: fix warning in flush_tlb_all
  4cf3ef90 spi: bcm-qspi: Fix missing clk_disable_unprepare() on error in bcm_qspi_probe()
  d1d2acf8 ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
  538c974c ARM: clang: Do not rely on lr register for stacktrace
  5e44e73d smackfs: use __GFP_NOFAIL for smk_cipso_doi()
  b430a496 iwlwifi: mvm: disable RX-diversity in powersave
  28502eb0 PM: hibernate: Get block device exclusively in swsusp_check()
  5a277907 mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
  a2395774 tracing/cfi: Fix cmp_entries_* functions signature mismatch
  ad78ed60 lib/xz: Validate the value before assigning it to an enum variable
  9cea212f lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression
  6c7d2db7 memstick: r592: Fix a UAF bug when removing the driver
  a1d2c265 ACPI: battery: Accept charges over the design capacity as full
  4bc8426a ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create()
  9c5e0638 tracefs: Have tracefs directories not set OTH permission bits by default
  e162fc16 media: usb: dvd-usb: fix uninit-value bug in dibusb_read_eeprom_byte()
  95b622cd ACPICA: Avoid evaluating methods too early during system resume
  f5888710 ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
  121221d6 media: mceusb: return without resubmitting URB in case of -EPROTO error.
  6a00cc96 media: s5p-mfc: fix possible null-pointer dereference in s5p_mfc_probe()
  aa1a0676 media: uvcvideo: Set capability in s_param
  0adf706b media: netup_unidvb: handle interrupt properly according to the firmware
  05282c94 media: mt9p031: Fix corrupted frame after restarting stream
  f3436be8 x86: Increase exception stack sizes
  7e175e32 smackfs: Fix use-after-free in netlbl_catmap_walk()
  dd339667 locking/lockdep: Avoid RCU-induced noinstr fail
  4ff07b34 MIPS: lantiq: dma: reset correct number of channel
  ac9ab5df MIPS: lantiq: dma: add small delay after reset
  783ab950 platform/x86: wmi: do not fail if disabling fails
  d19ea7da Bluetooth: fix use-after-free error in lock_sock_nested()
  9bbe312e Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
  8f3a74d0 USB: iowarrior: fix control-message timeouts
  9890ebcc USB: serial: keyspan: fix memleak on probe errors
  cbe80531 iio: dac: ad5446: Fix ad5622_write() return value
  0dde8a8c quota: correct error number in free_dqentry()
  f7dd331a quota: check block number when reading the block in quota file
  3f2410ff PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG
  d95acd8b ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
  61a2ded8 ALSA: mixer: oss: Fix racy access to slots
  d4787831 serial: core: Fix initializing and restoring termios speed
  662abe01 powerpc/85xx: Fix oops when mpc85xx_smp_guts_ids node cannot be found
  deae21da power: supply: max17042_battery: use VFSOC for capacity when no rsns
  0e38bf8e power: supply: max17042_battery: Prevent int underflow in set_soc_threshold
  6c682718 signal/mips: Update (_save|_restore)_fp_context to fail with -EFAULT
  0045dd6e signal: Remove the bogus sigkill_pending in ptrace_stop
  f024a12b RDMA/qedr: Fix NULL deref for query_qp on the GSI QP
  86786759 wcn36xx: handle connection loss indication
  fda1896f mwifiex: Read a PCI register after writing the TX ring write pointer
  600eb269 wcn36xx: Fix HT40 capability for 2Ghz band
  a5907f33 evm: mark evm_fixmode as __ro_after_init
  fbb6e289 rtl8187: fix control-message timeouts
  4b8efa9e PCI: Mark Atheros QCA6174 to avoid bus reset
  2da164dc ath6kl: fix control-message timeout
  0d8c7796 ath6kl: fix division by zero in send path
  99072887 mwifiex: fix division by zero in fw download path
  d1529a3c EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
  89d24fb6 regulator: dt-bindings: samsung,s5m8767: correct s5m8767,pmic-buck-default-dvs-idx property
  3f430d60 regulator: s5m8767: do not use reset value as DVS voltage if GPIO DVS is disabled
  1ad9070d hwmon: (pmbus/lm25066) Add offset coefficients
  69bd41dc btrfs: fix lost error handling when replaying directory deletes
  c785a64a vmxnet3: do not stop tx queues after netif_device_detach()
  787e8993 watchdog: Fix OMAP watchdog early handling
  d2552a32 spi: spl022: fix Microwire full duplex mode
  a68d351a xen/netfront: stop tx queues during live migration
  04564454 bpf: Prevent increasing bpf_jit_limit above max
  524489b3 mmc: winbond: don't build on M68K
  0a8bed55 hyperv/vmbus: include linux/bitops.h
  2a566fd3 sfc: Don't use netif_info before net_device setup
  92dd22e3 x86/irq: Ensure PI wakeup handler is unregistered before module unload
  404680c7 ALSA: timer: Unconditionally unlink slave instances, too
  d0991a99 ALSA: timer: Fix use-after-free problem
  280b47ed ALSA: synth: missing check for possible NULL after the call to kstrdup
  aece550b ALSA: line6: fix control and interrupt message timeouts
  3e36632b ALSA: 6fire: fix control and bulk message timeouts
  d58077a8 ALSA: ua101: fix division by zero at probe
  e1d47c1e media: ite-cir: IR receiver stop working after receive overflow
  7ef18373 parisc: Fix ptrace check on syscall return
  1d6476f0 mmc: dw_mmc: Dont wait for DRTO on Write RSP error
  2c8fa09e ocfs2: fix data corruption on truncate
  985d5b3f libata: fix read log timeout value
  03eea2b5 Input: i8042 - Add quirk for Fujitsu Lifebook T725
  2bcb68f8 Input: elantench - fix misreporting trackpoint coordinates
  397ae8d1 xhci: Fix USB 3.1 enumeration issues by increasing roothub power-on-good delay
  22d4a6da binder: use cred instead of task for selinux checks
  443fc43d binder: use euid from cred instead of using task
  2cf6889f ANDROID: arm64: process: Match upstream formatting when dumping memory areas
  31cca228 FROMGIT: binder: fix test regression due to sender_euid change
  a69d9cd3 BACKPORT: binder: use cred instead of task for selinux checks
  a0e450ac UPSTREAM: binder: use euid from cred instead of using task
  0de1fb12 Merge 4.9.290 into android-4.9-q
  ab95ef83 Linux 4.9.290
  032f9ee6 rsi: fix control-message timeout
  5d9b6a5d staging: rtl8192u: fix control-message timeouts
  4e14bab3 staging: r8712u: fix control-message timeout
  1def6c03 comedi: vmk80xx: fix bulk and interrupt message timeouts
  7cfb35db comedi: vmk80xx: fix bulk-buffer overflow
  ec85bcff comedi: vmk80xx: fix transfer-buffer overflows
  aa397384 comedi: ni_usb6501: fix NULL-deref in command paths
  365a346c comedi: dt9812: fix DMA buffers on stack
  9ec33a9b isofs: Fix out of bound access for corrupted isofs image
  7dca9fa4 printk/console: Allow to disable console output by using console="" or console=null
  e08c3704 usb-storage: Add compatibility quirk flags for iODD 2531/2541
  69d178d1 usb: musb: Balance list entry in musb_gadget_queue
  906a7359 usb: gadget: Mark USB_FSL_QE broken on 64-bit
  3f57c3f6 IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
  d5288613 IB/qib: Use struct_size() helper
  acc2f2bd Revert "x86/kvm: fix vcpu-id indexed array sizes"
  88b912e0 usb: hso: fix error handling code of hso_create_net_device
  b10dd066 net: hso: register netdev later to avoid a race condition
  ce7452ad ARM: 9120/1: Revert "amba: make use of -1 IRQs warn"
  5928b788 arch: pgtable: define MAX_POSSIBLE_PHYSMEM_BITS where needed
  215321a0 mm/zsmalloc: Prepare to variable MAX_PHYSMEM_BITS
  8e4814a4 scsi: core: Put LLD module refcnt after SCSI device is released
  09db023b UPSTREAM: security: selinux: allow per-file labeling for bpffs

Bug: 178379135
Bug: 194154334
Bug: 194449609
Bug: 200440527
Bug: 200688826
Bug: 210364486
Bug: 211946493
Pick-Prebuilt: 420218584
Build-Id: 8051070
Change-Id: I39c446a2b446cfa22a06427fe8d11c890966c10a
Signed-off-by: Wilson Sung <wilsonsung@google.com>
114 files changed