wahoo: update kernel prebuilt [ DO NOT MERGE ]

304be4e0be49 LTS: Merge upstream-linux-4.4.y (4.4.200) into android-msm-wahoo-4.4-qt-qpr2
6a2051791f5c Merge branch 'android-msm-wahoo-4.4-qt-qpr1' into android-msm-wahoo-4.4-qt-qpr2
e3f0ab3137ca qcacld-3.0: Validate number of requested EIDs in beacon request
0d002616a42f qcacmn: Fix zero size malloc when memory debug is disabled
ea68ab5c509c Merge upstream-linux-4.4.y (4.4.200) into android-msm-wahoo-4.4-qt-lts
1b8629e7c9b5 Linux 4.4.200
bb756a3f302c fs/dcache: move security_d_instantiate() behind attaching dentry to inode
87fb5df32174 alarmtimer: Change remaining ENOTSUPP to EOPNOTSUPP
9370e15d54f1 ARM: fix the cockup in the previous patch
52117da87994 ARM: ensure that processor vtables is not lost after boot
7e1992962129 ARM: spectre-v2: per-CPU vtables to work around big.Little systems
4628d245b5f5 ARM: add PROC_VTABLE and PROC_TABLE macros
afa68159e492 ARM: clean up per-processor check_bugs method call
0350343ee6fd ARM: split out processor lookup
14899ca00b30 ARM: make lookup_processor_type() non-__init
2e9ae9a66fbb ARM: 8810/1: vfp: Fix wrong assignement to ufp_exc
56e635e9c9ba ARM: 8796/1: spectre-v1,v1.1: provide helpers for address sanitization
6bb42e6d1400 ARM: 8795/1: spectre-v1.1: use put_user() for __put_user()
f8c5a575c5dd ARM: 8794/1: uaccess: Prevent speculative use of the current addr_limit
796e5eb9683b ARM: 8793/1: signal: replace __put_user_error with __put_user
b905a10fd986 ARM: 8792/1: oabi-compat: copy oabi events using __copy_to_user()
8d81dfc05007 ARM: 8791/1: vfp: use __copy_to_user() when saving VFP state
97af4d1a2fee ARM: 8789/1: signal: copy registers using __copy_to_user()
e0a0a5eede17 ARM: spectre-v1: mitigate user accesses
3ff229a261ff ARM: spectre-v1: use get_user() for __get_user()
5156abdf3eb8 ARM: use __inttype() in get_user()
0253fb210164 ARM: oabi-compat: copy semops using __copy_from_user()
318625c2b852 ARM: vfp: use __copy_from_user() when restoring VFP state
d9230bf9127d ARM: signal: copy registers using __copy_from_user()
e4f30ae336f6 ARM: spectre-v1: fix syscall entry
362508264436 ARM: spectre-v1: add array_index_mask_nospec() implementation
8143a0f9c063 ARM: spectre-v1: add speculation barrier (csdb) macros
0df031995c65 ARM: spectre-v2: warn about incorrect context switching functions
81482138c8a5 ARM: spectre-v2: add firmware based hardening
a645847f4435 ARM: spectre-v2: harden user aborts in kernel space
4d027736deef ARM: spectre-v2: add Cortex A8 and A15 validation of the IBE bit
521bb23af00c ARM: spectre-v2: harden branch predictor on context switches
22b1077759ad ARM: spectre: add Kconfig symbol for CPUs vulnerable to Spectre
564f56594e9f ARM: bugs: add support for per-processor bug checking
71dd24046bfd ARM: bugs: hook processor bug checking into SMP and suspend paths
1797ff1ac57c ARM: bugs: prepare processor bug infrastructure
6ba73321bb93 ARM: add more CPU part numbers for Cortex and Brahma B15 CPUs
8ca266df65a4 arm/arm64: smccc-1.1: Handle function result as parameters
1b8430525195 arm/arm64: smccc-1.1: Make return values unsigned long
0d4e2980b38b arm/arm64: smccc: Add SMCCC-specific return codes
deb97e65fa57 arm/arm64: smccc: Implement SMCCC v1.1 inline primitive
36329b1d312e arm/arm64: smccc: Make function identifiers an unsigned quantity
2217fa9f8875 firmware/psci: Expose SMCCC version through psci_ops
0a65b836f2bf firmware/psci: Expose PSCI conduit
d10ce9593da9 arm64: KVM: Report SMCCC_ARCH_WORKAROUND_1 BP hardening support
f13582bcc607 arm/arm64: KVM: Advertise SMCCC v1.1
3759abdf7aa7 ARM: Move system register accessors to asm/cp15.h
a6e65291d418 ARM: uaccess: remove put_user() code duplication
8e0a4c101250 ARM: 8481/2: drivers: psci: replace psci firmware calls
596efa35fb66 ARM: 8480/2: arm64: add implementation for arm-smccc
91719b66d595 ARM: 8479/2: add implementation for arm-smccc
36e7c2e68760 ARM: 8478/2: arm/arm64: add arm-smccc
b4fe083f59a6 ARM: 8051/1: put_user: fix possible data corruption in put_user
e4cea4d4c5d9 dmaengine: qcom: bam_dma: Fix resource leak
491cd03f3b44 net/flow_dissector: switch to siphash
993e400581c3 inet: stop leaking jiffies on the wire
1475db309435 net/mlx4_core: Dynamically set guaranteed amount of counters per VF
a1014da65697 vxlan: check tun_info options_len properly
af26f04e074f net: add READ_ONCE() annotation in __skb_wait_for_more_packets()
8ac802ed7049 net: Zeroing the structure ethtool_wolinfo in ethtool_get_wol()
4ef32dfb62cb net: hisilicon: Fix ping latency when deal with high throughput
2f036ae97f3d net: fix sk_page_frag() recursion from memory reclaim
888913ed7d7a dccp: do not leak jiffies on the wire
ad56882f0cba cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs
771fd6cdb9f8 MIPS: bmips: mark exception vectors as char arrays
265c6b8ab54c of: unittest: fix memory leak in unittest_data_add
550049416024 scsi: target: core: Do not overwrite CDB byte 1
5952dc84e22d perf kmem: Fix memory leak in compact_gfp_flags()
e45c51514417 scsi: fix kconfig dependency warning related to 53C700_LE_ON_BE
880c4664458b scsi: sni_53c710: fix compilation error
15d24beb35ad ARM: mm: fix alignment handler faults under memory pressure
c8561c787235 ARM: dts: logicpd-torpedo-som: Remove twl_keypad
04f85d1992c0 ASoc: rockchip: i2s: Fix RPM imbalance
43de4298fb86 regulator: pfuze100-regulator: Variable "val" in pfuze100_regulator_probe() could be uninitialized
e5b219fb25c8 regulator: ti-abb: Fix timeout in ti_abb_wait_txdone/ti_abb_clear_all_txdone
5fc9e98768f7 kbuild: add -fcf-protection=none when using retpoline flags
d486a86f38dc Linux 4.4.199
125df47aea12 Revert "ALSA: hda: Flush interrupts on disabling"
22668f45d6ad xfs: Correctly invert xfs_buftarg LRU isolation logic
90edf68180bf sctp: not bind the socket in sctp_connect
157fdfe11eeb sctp: fix the issue that flags are ignored when using kernel_connect
09ee754c6233 sch_netem: fix rcu splat in netem_enqueue()
06ddf07c8e61 net: usb: sr9800: fix uninitialized local variable
4366f9e3e873 bonding: fix potential NULL deref in bond_update_slave_arr
96ff6ba50ab2 llc: fix sk_buff leak in llc_conn_service()
60d89113d079 llc: fix sk_buff leak in llc_sap_state_process()
3da8d0e777fa rtlwifi: Fix potential overflow on P2P code
1cdb53607683 s390/cmm: fix information leak in cmm_timeout_handler()
3af30fce8990 nl80211: fix validation of mesh path nexthop
b71884864684 HID: fix error message in hid_open_report()
2be873faad36 HID: Fix assumption that devices have inputs
31e00ffd70c1 USB: serial: whiteheat: fix line-speed endianness
9ab42e29bdb0 USB: serial: whiteheat: fix potential slab corruption
cacf9fa26603 USB: ldusb: fix control-message timeout
bb04ad572e76 USB: ldusb: fix ring-buffer locking
85c9ece11264 USB: gadget: Reject endpoints with 0 maxpacket value
57d1b568570e UAS: Revert commit 3ae62a42090f ("UAS: fix alignment of scatter/gather segments")
cb1f3cec555d ALSA: bebob: Fix prototype of helper function to return negative value
6cdc9e836cb3 fuse: truncate pending writes on O_TRUNC
eb4b7a625cfe fuse: flush dirty data/metadata before non-truncate setattr
d7619be74f34 ath6kl: fix a NULL-ptr-deref bug in ath6kl_usb_alloc_urb_from_pipe()
6370781b38cf thunderbolt: Use 32-bit writes when writing ring producer/consumer
509231507848 USB: legousbtower: fix a signedness bug in tower_probe()
b36612b863c8 tracing: Initialize iter->seq after zeroing in tracing_read_pipe()
e4cec9236988 NFSv4: Fix leak of clp->cl_acceptor string
7a5c21af789d MIPS: fw: sni: Fix out of bounds init of o32 stack
23d94f1fec0a fs: ocfs2: fix a possible null-pointer dereference in ocfs2_info_scan_inode_alloc()
3cbc762f5c76 fs: ocfs2: fix possible null-pointer dereferences in ocfs2_xa_prepare_entry()
20cd8a5d2224 efi/x86: Do not clean dummy variable in kexec path
492fbc76b94e efi/cper: Fix endianness of PCIe class code
5290a8f6585b serial: mctrl_gpio: Check for NULL pointer
2a2437482cc0 fs: cifs: mute -Wunused-const-variable message
f8ae287cff07 RDMA/iwcm: Fix a lock inversion issue
bd7d309e52f9 perf map: Fix overlapped map handling
74ebfbc9ec0c iio: fix center temperature of bmc150-accel-core
3d11387f82bf exec: load_script: Do not exec truncated interpreter path
fcc987e8792a usb: handle warm-reset port requests on hub resume
b3ffb896a356 scripts/setlocalversion: Improve -dirty check with git-status --no-optional-locks
78c5c5e077ae x86/cpu: Add Atom Tremont (Jacobsville)
548967e63513 sc16is7xx: Fix for "Unexpected interrupt: 8"
d9b19e637bd9 dm: Use kzalloc for all structs with embedded biosets/mempools
40dbcbebf0e0 dm snapshot: rework COW throttling to fix deadlock
e10ef97a2ec4 dm snapshot: introduce account_start_copy() and account_end_copy()
eda053db0782 dm snapshot: use mutex instead of rw_semaphore
da259d0284b6 Linux 4.4.198
3cd0698561d3 RDMA/cxgb4: Do not dma memory off of the stack
23e0c38d3099 net: sched: Fix memory exposure from short TCA_U32_SEL
439a1962649e PCI: PM: Fix pci_power_up()
b3310bf507ee xen/netback: fix error path of xenvif_connect_data()
8bfa06ea6e81 cpufreq: Avoid cpufreq_suspend() deadlock on system shutdown
44137b2cfad1 memstick: jmb38x_ms: Fix an error handling path in 'jmb38x_ms_probe()'
df514f91210c btrfs: block-group: Fix a memory leak due to missing btrfs_put_block_group()
0fef1c7da4b4 CIFS: avoid using MID 0xFFFF
b7f9ec253c28 parisc: Fix vmap memory leak in ioremap()/iounmap()
e1eccccb24b8 xtensa: drop EXPORT_SYMBOL for outs*/ins*
cff989b79e3d mm/slub: fix a deadlock in show_slab_objects()
8af008849fe5 scsi: zfcp: fix reaction on bit error threshold notification
b5b88cda3e8f drm/edid: Add 6 bpc quirk for SDC panel in Lenovo G50
86962d9a79b0 mac80211: Reject malformed SSID elements
3ca40f2f6015 cfg80211: wext: avoid copying malformed SSIDs
65ac31fb6e6d ASoC: rsnd: Reinitialize bit clock inversion flag for every format setting
a7d04d58621d scsi: core: try to get module before removing device
44d3e9852350 USB: ldusb: fix read info leaks
3e4cf06e1938 USB: usblp: fix use-after-free on disconnect
a81304eb043c USB: ldusb: fix memleak on disconnect
be742b0bd9e9 USB: serial: ti_usb_3410_5052: fix port-close races
ebcfd766cde6 usb: udc: lpc32xx: fix bad bit shift operation
5610f75e5ba8 USB: legousbtower: fix memleak on disconnect
eb4058d8daf8 memfd: Fix locking when tagging pins
85088e38708c ipv4: Return -ENETUNREACH if we can't create route but saddr is valid
ca0cd16beccc net: avoid potential infinite loop in tc_ctl_action()
9befdc6645ac sctp: change sctp_prot .no_autobind with true
0ed0978c29db net: bcmgenet: Set phydev->dev_flags only for internal PHYs
571e5f93e756 net: bcmgenet: Fix RGMII_MODE_EN value for GENET v1/2/3
896bb98754dc loop: Add LOOP_SET_DIRECT_IO to compat ioctl
27add8a99692 namespace: fix namespace.pl script to support relative paths
74b2bee56dc0 net: hisilicon: Fix usage of uninitialized variable in function mdio_sc_cfg_reg_write()
ebc93dc0b776 mips: Loongson: Fix the link time qualifier of 'serial_exit()'
4f7a59b56a61 nl80211: fix null pointer dereference
eb5aa18fbb9c ARM: dts: am4372: Set memory bandwidth limit for DISPC
d08c1d749087 ARM: OMAP2+: Fix missing reset done flag for am3 and am43
36f88520f1e9 scsi: qla2xxx: Fix unbound sleep in fcport delete path.
b0ba41e0a977 scsi: megaraid: disable device when probe failed after enabled device
aa64c3afcb8c scsi: ufs: skip shutdown if hba is not powered
04858540ca84 Linux 4.4.197
748edae843c3 xfs: clear sb->s_fs_info on mount failure
f9c94a02d4c5 x86/asm: Fix MWAITX C-state hint value
35fa86e42bf4 tracing: Get trace_array reference for available_tracers files
d1de6f689d82 media: stkwebcam: fix runtime PM after driver unbind
91fdb3cf4cf5 CIFS: Force revalidate inode when dentry is stale
4701063a62a6 cifs: Check uniqueid for SMB2+ and return -ESTALE if necessary
c712daafe23b Staging: fbtft: fix memory leak in fbtft_framebuffer_alloc
bf0313653f03 arm64: Rename cpuid_feature field extract routines
8eba41684829 arm64: capabilities: Handle sign of the feature bit
db02f78d9609 kernel/sysctl.c: do not override max_threads provided by userspace
9dc8594cd7b7 CIFS: Force reval dentry if LOOKUP_REVAL flag is set
3ca705b89bb4 CIFS: Gracefully handle QueryInfo errors during open
6d4d8a07ba56 perf llvm: Don't access out-of-scope array
07bc13c09be6 iio: light: opt3001: fix mutex unlock race
2a736f3547c6 iio: adc: ad799x: fix probe error handling
cab8f7da72a9 staging: vt6655: Fix memory leak in vt6655_probe
a9640a94bb6f USB: legousbtower: fix use-after-free on release
72ff2f621462 USB: legousbtower: fix open after failed reset request
28f2c9460ea5 USB: legousbtower: fix potential NULL-deref on disconnect
2e0bcd20f6c7 USB: legousbtower: fix deadlock on disconnect
ce29fc8d8297 USB: legousbtower: fix slab info leak at probe
d6952c7b39b2 usb: renesas_usbhs: gadget: Fix usb_ep_set_{halt,wedge}() behavior
6207b7b8f096 usb: renesas_usbhs: gadget: Do not discard queues in usb_ep_set_{halt,wedge}()
0d86daeb0016 USB: dummy-hcd: fix power budget for SuperSpeed mode
c841eeea7497 USB: microtek: fix info-leak at probe
78b2e65cb55f USB: usblcd: fix I/O after disconnect
3ec2dabc9e44 USB: serial: fix runtime PM after driver unbind
22727bde284b USB: serial: option: add support for Cinterion CLS8 devices
2b08f6ffd9d8 USB: serial: option: add Telit FN980 compositions
35526e63dcae USB: serial: ftdi_sio: add device IDs for Sienna and Echelon PL-20
883457a6af8d USB: serial: keyspan: fix NULL-derefs on open() and write()
858841b7cb12 serial: uartlite: fix exit path null pointer
107ef3bb5e74 USB: ldusb: fix NULL-derefs on driver unbind
ebfb3be3b0af USB: chaoskey: fix use-after-free on release
8f7520133878 USB: usblp: fix runtime PM after driver unbind
ac7266d990f7 USB: iowarrior: fix use-after-free after driver unbind
ded3c707e373 USB: iowarrior: fix use-after-free on release
f723d7ea08e2 USB: iowarrior: fix use-after-free on disconnect
f14fed62a96b USB: adutux: fix use-after-free on release
ffb59e0701a9 USB: adutux: fix NULL-derefs on disconnect
cd3cfbafe8eb USB: adutux: fix use-after-free on disconnect
d5b8fadb2a05 USB: adutux: remove redundant variable minor
557b03eb4491 xhci: Increase STS_SAVE timeout in xhci_suspend()
384f906e724c usb: xhci: wait for CNR controller not ready bit in xhci resume
0cd0bbdad9a4 xhci: Check all endpoints for LPM timeout
8af575b89e49 xhci: Prevent device initiated U1/U2 link pm if exit latency is too long
f88d1294ee78 USB: usb-skeleton: fix NULL-deref on disconnect
d3488daeaa27 USB: usb-skeleton: fix runtime PM after driver unbind
591e060b72f4 USB: yurex: fix NULL-derefs on disconnect
d777eecf20bd USB: yurex: Don't retry on unexpected errors
b5583d6963d0 USB: rio500: Remove Rio 500 kernel driver
43b7a9d0d62a panic: ensure preemption is disabled during panic()
82ea9d14f753 ASoC: sgtl5000: Improve VAG power and mute control
fd27e0779cf6 nl80211: validate beacon head
a698649b8e32 cfg80211: Use const more consistently in for_each_element macros
933f4f10c928 cfg80211: add and use strongly typed element iteration macros
a3cda6a02043 crypto: caam - fix concurrency issue in givencrypt descriptor
0f714ca2b3f3 perf stat: Fix a segmentation fault when using repeat forever
bacdf1ea1671 tools lib traceevent: Do not free tep->cmdlines in add_new_comm() on failure
65514877299b kernel/elfcore.c: include proper prototypes
d082c610bce7 fuse: fix memleak in cuse_channel_open
b30c56ee03b6 thermal: Fix use-after-free when unregistering thermal zone device
e4165f2d4a4e drm/amdgpu: Check for valid number of registers to read
78ba94e80f84 ceph: fix directories inode i_blkbits initialization
6390b01bb706 xen/pci: reserve MCFG areas earlier
06453e2abdd2 9p: avoid attaching writeback_fid on mmap with type PRIVATE
5deaece94aa9 fs: nfs: Fix possible null-pointer dereferences in encode_attrs()
b1b8f7b23a28 ima: always return negative code for error
ef1bcee5e92e cfg80211: initialize on-stack chandefs
1fb673245b24 ieee802154: atusb: fix use-after-free at disconnect
448ad4ac56f8 crypto: qat - Silence smp_processor_id() warning
62db62a43134 can: mcp251x: mcp251x_hw_reset(): allow more time after a reset
cc5d103da444 powerpc/powernv: Restrict OPAL symbol map to only be readable by root
d4a8a6d767ce ASoC: Define a set of DAPM pre/post-up events
59b3647b86fc KVM: nVMX: handle page fault in vmread fix
a179b845b982 s390/cio: exclude subchannels with no parent from pseudo check
ea947b87349e s390/cio: avoid calling strlen on null pointer
399b4e062f76 s390/topology: avoid firing events before kobjs are created
126ed52d7cea KVM: s390: Test for bad access register and size at the start of S390_MEM_OP

Linux version 4.4.200-g304be4e0be49 (android-
    build@xpcd4.ams.corp.google.com) (Android (5484270 based on
    r353983c) clang version 9.0.3
    (https://android.googlesource.com/toolchain/clang
    745b335211bb9eadfa6aa6301f84715cee4b37c5)
    (https://android.googlesource.com/toolchain/llvm
    60cf23e54e46c807513f7a36d0a7b777920b5881) (based on LLVM
    9.0.3svn)) #1 SMP PREEMPT Tue Nov 26 09:58:42 UTC 2019

Bug: 115649143
Bug: 144843138
Change-Id: Id6a78b88622838903392672bc7cb813cd12e3219
Pick-Prebuilt: 281129176
Source-Branch: android-msm-wahoo-4.4-qt-qpr2
Signed-off-by: lucaswei <lucaswei@google.com>
128 files changed