wahoo: update kernel prebuilt [ DO NOT MERGE ]
c01daea54c34 LTS: Merge android-4.4 (4.4.185) into android-msm-wahoo-4.4-qt-qpr1
22a75d00d2d5 ANDROID: overlayfs: Fix a regression in commit b24be4acd
ac95e0aad784 ANDROID: overlayfs ovl_create_of_link regression
a8987107bfd5 Revert "scsi: ufs: Fix regulator load and icc-level configuration"
fe8fbead5e6f Revert "scsi: ufs: Avoid configuring regulator with undefined voltage range"
d8f568c21992 misc: mnh: Fix race condition in legacy fw transfer
b98ba1c968a5 misc: mnh: Double check PMIC VBAT before boot
4ac67e6a5752 Merge android-4.4 (4.4.185) into android-msm-wahoo-4.4-qt-lts
f5fa370f84a4 soc: tas2557: do not use stack memory for i2c transfers
14e11966c8e7 Merge 4.4.185 into android-4.4
7bbf48947605 Linux 4.4.185
f66168a2a2eb dmaengine: imx-sdma: remove BD_INTR for channel0
2fec7f2e38bc KVM: x86: degrade WARN to pr_warn_ratelimited
c0309c7835cd arm64, vdso: Define vdso_{start,end} as array
a62a40c8a3ff ARC: handle gcc generated __builtin_trap for older compiler
1ed8ed6d2119 tty: rocket: fix incorrect forward declaration of 'rp_init()'
986543fcf50c btrfs: Ensure replaced device doesn't have pending chunk allocation
adbf2b44e8f1 lib/mpi: Fix karactx leak in mpi_powm
52e0b9fcd6f6 ALSA: usb-audio: fix sign unintended sign extension on left shifts
3864c897a7d9 ALSA: firewire-lib/fireworks: fix miss detection of received MIDI messages
13088bad036a ALSA: seq: fix incorrect order of dest_client/dest_ports arguments
6e5d6d15daa3 crypto: user - prevent operating on larval algorithms
54562d2b0be5 ptrace: Fix ->ptracer_cred handling for PTRACE_TRACEME
18eee992e8e8 MIPS: Workaround GCC __builtin_unreachable reordering bug
2fbaa1af066f bug.h: work around GCC PR82365 in BUG()
2f8180ff3386 swiotlb: Make linux/swiotlb.h standalone includible
f1a9886ddd3a mfd: omap-usb-tll: Fix register offsets
a1877fd325cd MIPS: math-emu: do not use bools for arithmetic
014275fd848f ARC: fix build warning in elf.h
a414c474578a ARC: Assume multiplier is always present
b3e8f6bc2f41 scsi: hpsa: correct ioaccel2 chaining
8978dce0c235 usb: gadget: udc: lpc32xx: allocate descriptor with GFP_ATOMIC
53f1c783ecc0 usb: gadget: fusb300_udc: Fix memory leak of fusb300->ep[i]
5b3f570661f4 ASoC: max98090: remove 24-bit format support if RJ is 0
05d6e618f64b spi: bitbang: Fix NULL pointer dereference in spi_unregister_master
d4dcab6232e9 ASoC : cs4265 : readable register too low
3c738429d03e um: Compile with modern headers
993699d9de09 Bluetooth: Fix faulty expression for minimum encryption key size check
b3c963d51a02 net: check before dereferencing netdev_ops during busy poll
ec109e6a9a1b bonding: Always enable vlan tx offload
012e59ea8777 ipv4: Use return value of inet_iif() for __raw_v4_lookup in the while loop
8b4c9dfab314 team: Always enable vlan tx offload
36ad5e8b3833 tipc: check msg->req data len in tipc_nl_compat_bearer_disable
253c7176af9f tipc: change to use register_pernet_device
92598c5db140 sctp: change to hold sk after auth shkey is created successfully
a892d74963c8 cpu/speculation: Warn on unsupported mitigations= parameter
8ac3c1abffbb x86/speculation: Allow guests to use SSBD even if host does not
b24be4acd17a ovl: modify ovl_permission() to do checks on two inodes
485ac3d91b2d KVM: X86: Fix scan ioapic use-before-initialization
33da943746bd net/9p: include trans_common.h to fix missing prototype warning.
33e0f07f6f29 9p: p9dirent_read: check network-provided name length
3479b3c35e82 9p/rdma: remove useless check in cm_event_handler
1275a5cf02a3 9p: acl: fix uninitialized iattr access
87451738cb17 9p/rdma: do not disconnect on down_interruptible EAGAIN
6052d03fc9e3 perf help: Remove needless use of strncpy()
e1f60e369ad5 perf ui helpline: Use strlcpy() as a shorter form of strncpy() + explicit set nul
c7c680979b50 mac80211: drop robust management frames from unknown TA
3aca04068aa3 cfg80211: fix memory leak of wiphy device name
b79e58acda3f SMB3: retry on STATUS_INSUFFICIENT_RESOURCES instead of failing write
59f9ad4b789d Bluetooth: Fix regression with minimum encryption key size alignment
75de0ddd3100 Bluetooth: Align minimum encryption key size for LE and BR/EDR connections
892b9bf41b25 ARM: imx: cpuidle-imx6sx: Restrict the SW2ISO increase to i.MX6SX
562f962142e2 can: purge socket error queue on sock destruct
b4fd1ed2b172 can: flexcan: fix timeout when set small bitrate
d38cac353bc5 btrfs: start readahead also in seed devices
95c82386950c Btrfs: fix race between readahead and device replace/removal
66f0f0fdb9b9 hwmon: (pmbus/core) Treat parameters as paged if on multiple pages
4847348903fb s390/qeth: fix VLAN attribute in bridge_hostnotify udev event
3b63a2e8812a scsi: ufs: Check that space was properly alloced in copy_query_response
d367346c5b43 scripts/checkstack.pl: Fix arm64 wrong or unknown architecture
37515df6b488 sparc: perf: fix updated event period in response to PERF_EVENT_IOC_PERIOD
9df6837e2220 net: hns: Fix loopback test failed at copper ports
629877b5a33c MIPS: uprobes: remove set but not used variable 'epc'
a66d44b69a16 IB/hfi1: Insure freeze_work work_struct is canceled on shutdown
96fdfe5665d4 parisc: Fix compiler warnings in float emulation code
ececcbae0a3a parport: Fix mem leak in parport_register_dev_model
961705817841 apparmor: enforce nullbyte at end of tag string
4b6818e02588 Input: uinput - add compat ioctl number translation for UI_*_FF_UPLOAD
9a7435e1a5b9 usb: chipidea: udc: workaround for endpoint conflict issue
9efccd7745a1 gcc-9: silence 'address-of-packed-member' warning
f7247666a71a tracing: Silence GCC 9 array bounds warning
93709767272b scsi: vmw_pscsi: Fix use-after-free in pvscsi_queue_lck()
bd6042e9c373 mm/page_idle.c: fix oops because end_pfn is larger than max_pfn
fb7adf69e00d fs/binfmt_flat.c: make load_flat_shared_library() work
d657433f124d ANDROID: Fixes to locking around handle_lmk_event
c93a1fab248c ANDROID: Avoid taking multiple locks in handle_lmk_event
282d84add5d7 Merge 4.4.184 into android-4.4
72d1ee93e931 Linux 4.4.184
46c7b5d6f2a5 tcp: refine memory limit test in tcp_fragment()
94fd42809f7d Merge 4.4.183 into android-4.4
308743255040 Linux 4.4.183
df7ba8162ca1 Abort file_remove_privs() for non-reg. files
8f6345a11caa coredump: fix race condition between mmget_not_zero()/get_task_mm() and core dumping
3692bc31c1ff Revert "crypto: crypto4xx - properly set IV after de- and encrypt"
39c7c903c63d scsi: libsas: delete sas port if expander discover failed
a272035ea1bf scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route()
af8cd6101bf5 net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs
b25c62cc16e0 KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list
7ef8d778cf3e ia64: fix build errors by exporting paddr_to_nid()
432030b25b86 configfs: Fix use-after-free when accessing sd->s_dentry
d5a18c8609f3 i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr
be1b9df5bba1 net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE()
0bb6c295e463 gpio: fix gpio-adp5588 build errors
dd961efe8dee perf/ring_buffer: Add ordering to rb->nest increment
8abd8a9a975e perf/ring_buffer: Fix exposing a temporarily decreased data_head
3e74b3f05abf x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor
f4678b7808e7 mISDN: make sure device name is NUL terminated
e2f9c0f73454 sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg
753aa7556089 neigh: fix use-after-free read in pneigh_get_next
709d8771fab7 lapb: fixed leak of control-blocks.
1777c35e8d47 ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero
6f057abd08d1 be2net: Fix number of Rx queues used for flow hashing
7139a9f6246d ax25: fix inconsistent lock state in ax25_destroy_timer
f1a5c6b083bc USB: serial: option: add Telit 0x1260 and 0x1261 compositions
a67d65958e2a USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode
b8ee804bba8f USB: serial: pl2303: add Allied Telesis VT-Kit3
f14747c88170 USB: usb-storage: Add new ID to ums-realtek
038c192699a9 USB: Fix chipmunk-like voice when using Logitech C270 for recording audio.
8f6b0e59d2a0 drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define()
6e0c7e73232f drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read
ce391e4cdef8 KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION
a1b9c6b4cba0 KVM: x86/pmu: do not mask the value that is written to fixed PMUs
7caddacf863f usbnet: ipheth: fix racing condition
f80a35fcb9e9 scsi: bnx2fc: fix incorrect cast to u64 on shift operation
da51a322f197 scsi: lpfc: add check for loss of ndlp when sending RRQ
3a2ff1088c2a Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var
1f8233ca3a48 ASoC: cs42xx8: Add regcache mask dirty
91f1fc1ae409 cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css()
8b47af927e2e bcache: fix stack corruption by PRECEDING_KEY()
a2aabf288bf7 i2c: acorn: fix i2c warning
d774bd27b4f5 ptrace: restore smp_rmb() in __ptrace_may_access()
5aff00ee839a signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO
0b871fc866eb fs/ocfs2: fix race in ocfs2_dentry_attach_lock()
c05fed507582 mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node
be499b84c3bd libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk
d7a18814fff9 ALSA: seq: Cover unsubscribe_port() in list_mutex
4282a0b1db65 Revert "Bluetooth: Align minimum encryption key size for LE and BR/EDR connections"
cd23996afa14 futex: Fix futex lock the wrong page
38fbd5c2d572 ARM: exynos: Fix undefined instruction during Exynos5422 resume
5767587907fd pwm: Fix deadlock warning when removing PWM device
113a78a0a537 ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on Arndale Octa
78184953a2ed pwm: tiehrpwm: Update shadow register for disabling PWMs
d24e22cde8b3 dmaengine: idma64: Use actual device for DMA transfers
533171620cd5 gpio: gpio-omap: add check for off wake capable gpios
3b4652ba9d78 PCI: xilinx: Check for __get_free_pages() failure
c869210e0ac6 video: imsttfb: fix potential NULL pointer dereferences
5c7fbc5f6a7d video: hgafb: fix potential NULL pointer dereference
bea8fa863ce9 PCI: rcar: Fix a potential NULL pointer dereference
76208df36d7a PCI: rpadlpar: Fix leaked device_node references in add/remove paths
100468652e5a ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA
927d2be77e6c ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA
8aee025af280 ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA
b49501f51371 clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288
4270dc6a7a79 soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher
845676341c2d platform/chrome: cros_ec_proto: check for NULL transfer function
c7155e51cf85 x86/PCI: Fix PCI IRQ routing table memory leak
198a54f07f51 nfsd: allow fh_want_write to be called twice
e6779b264d69 fuse: retrieve: cap requested size to negotiated max_write
742cb74bf108 nvmem: core: fix read buffer in place
750c55e69cca ALSA: hda - Register irq handler after the chip initialization
09ad374f23ce iommu/vt-d: Set intel_iommu_gfx_mapped correctly
9e4ed17b9416 f2fs: fix to do sanity check on valid block count of segment
534ef922376e f2fs: fix to avoid panic in do_recover_data()
90a238a8a2d2 ntp: Allow TAI-UTC offset to be set to zero
25be7d51a012 drm/bridge: adv7511: Fix low refresh rate selection
8fdebdd06c4b perf/x86/intel: Allow PEBS multi-entry in watermark mode
dee1ba919ca2 mfd: twl6040: Fix device init errors for ACCCTL register
4110c4188853 mfd: intel-lpss: Set the device in reset state when init
1bef19130b5b kernel/sys.c: prctl: fix false positive in validate_prctl_map()
937fa1624a1f mm/cma_debug.c: fix the break condition in cma_maxchunk_get()
fceb0be41836 mm/cma.c: fix crash on CMA allocation if bitmap allocation fails
9c8d4d77e3aa hugetlbfs: on restore reserve error path retain subpool reservation
d8129a5d7a9d ipc: prevent lockup on alloc_msg and free_msg
50c0db539937 sysctl: return -EINVAL if val violates minmax
8b9241b052a2 fs/fat/file.c: issue flush after the writeback of FAT
eee21eb4a635 ANDROID: kernel: cgroup: cpuset: Clear cpus_requested for empty buf
f1adac4c222b ANDROID: kernel: cgroup: cpuset: Add missing allocation of cpus_requested in alloc_trial_cpuset
9c4ab5729952 Merge 4.4.182 into android-4.4
33790f2eda73 Linux 4.4.182
f938ae0ce5ef tcp: enforce tcp_min_snd_mss in tcp_mtu_probing()
e757d052f3b8 tcp: add tcp_min_snd_mss sysctl
ad472d3a9483 tcp: tcp_fragment() should apply sane memory limits
4657ee0fe05e tcp: limit payload size of sacked skbs
1cc130f95ec7 UPSTREAM: binder: check for overflow when alloc for security context
784672577648 BACKPORT: binder: fix race between munmap() and direct reclaim
bd858d730975 Merge 4.4.181 into android-4.4
d7b7345c3a5d Linux 4.4.181
f1d7eebd9d67 ethtool: check the return value of get_regs_len
647f72b0d75c ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled
c9696a8f3e64 fuse: Add FOPEN_STREAM to use stream_open()
3bf0c459615a fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock
0f5fab865ae9 drm/gma500/cdv: Check vbt config bits when detecting lvds panels
e087f7519114 genwqe: Prevent an integer overflow in the ioctl
59565e894518 MIPS: pistachio: Build uImage.gz by default
8061c23f5378 fuse: fallocate: fix return with locked inode
cf30c1953467 parisc: Use implicit space register selection for loading the coherence index of I/O pdirs
f0d1e74c8120 rcu: locking and unlocking need to always be at least barriers
44657dbba7c4 pktgen: do not sleep with the thread lock held.
eded0b11c7a3 net: rds: fix memory leak in rds_ib_flush_mr_pool
54dd5e352cf7 net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query
cc475966e5f7 neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit
e5c6de6694ed ethtool: fix potential userspace buffer overflow
8795708bc939 media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
2b13a9580ef9 usb: gadget: fix request length error for isoc transfer
8b15aae1baa2 net: cdc_ncm: GetNtbFormat endian fix
613b4bc1951d Revert "x86/build: Move _etext to actual end of .text"
6ad730b83178 userfaultfd: don't pin the user memory in userfaultfd_file_create()
4e06554db5e5 brcmfmac: add subtype check for event handling in data path
993b68aa3ef7 brcmfmac: add length checks in scheduled scan result handler
35bcfbad5d94 brcmfmac: fix incorrect event channel deduction
8c12de962667 brcmfmac: revise handling events in receive path
5f4688a15c24 brcmfmac: screening firmware event packet
6da841e9ae87 brcmfmac: Add length checks on firmware events
c55a2cffa5ca bnx2x: disable GSO where gso_size is too big for hardware
a33b6d4c8bc7 net: create skb_gso_validate_mac_len()
c53c1a821d62 binder: replace "%p" with "%pK"
5280efe442b2 binder: Replace "%p" with "%pK" for stable
336c16621785 CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM
360f8fe46f74 kernel/signal.c: trace_signal_deliver when signal_group_exit
7a47d1873120 memcg: make it work on sparse non-0-node systems
5db0a9c3cc52 tty: max310x: Fix external crystal register setup
e498745310d0 tty: serial: msm_serial: Fix XON/XOFF
986adddb9d8f drm/nouveau/i2c: Disable i2c bus access after ->fini()
bf8f6b43c2e7 ALSA: hda/realtek - Set default power save node to 0
494447b90d6d Btrfs: fix race updating log root item during fsync
af34de02a6a7 scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs)
e85d002556ea scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove
8282730a0afa media: smsusb: better handle optional alignment
0bce1ea89712 media: usb: siano: Fix false-positive "uninitialized variable" warning
b1782be70e1e media: usb: siano: Fix general protection fault in smsusb
d52c0ffb383f USB: rio500: fix memory leak in close after disconnect
b92be99a0c8b USB: rio500: refuse more than one device at a time
ee9d750e9ac8 USB: Add LPM quirk for Surface Dock GigE adapter
30e66d7d2fb9 USB: sisusbvga: fix oops in error path of sisusb_probe
018b7ea9ca24 USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
f5e1ec93b208 usb: xhci: avoid null pointer deref when bos field is NULL
017e6726a4fb xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic()
ec70e2c130d6 include/linux/bitops.h: sanitize rotate primitives
fbbc4fe02a31 sparc64: Fix regression in non-hypervisor TLB flush xcall
5bce46edeb72 tipc: fix modprobe tipc failed after switch order of device registration -v2
416d252ba926 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
f1613a9e1bdc xen/pciback: Don't disable PCI_COMMAND on PCI device reset.
383687e15cd0 crypto: vmx - ghash: do nosimd fallback manually
61ba8e9f51b3 net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value
1d33a3ebd945 bnxt_en: Fix aggregation buffer leak under OOM condition.
7d423301240b tipc: Avoid copying bytes beyond the supplied data
332bff9d9a08 usbnet: fix kernel crash after disconnect
16ffb5f7c335 net: stmmac: fix reset gpio free missing
4f9c73aa2930 net-gro: fix use-after-free read in napi_gro_frags()
5cbaa135a0e1 llc: fix skb leak in llc_build_and_send_ui_pkt()
36a7222071d1 ipv6: Consider sk_bound_dev_if when binding a raw socket to an address
9fbf1ac57c7a ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM
0984cb76d294 spi: Fix zero length xfer bug
854415f37aae spi: rspi: Fix sequencer reset during initialization
c927451887c1 spi : spi-topcliff-pch: Fix to handle empty DMA buffers
445c07409179 scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices
3a5d11332896 media: saa7146: avoid high stack usage with clang
5a96cf10dc5c media: go7007: avoid clang frame overflow warning with KASAN
0e9f0805eeea media: m88ds3103: serialize reset messages in m88ds3103_set_frontend
9effa38946b6 scsi: qla4xxx: avoid freeing unallocated dma memory
95f0bb0a6c83 usb: core: Add PM runtime calls to usb_hcd_platform_shutdown
1909121a6192 rcutorture: Fix cleanup path for invalid torture_type strings
1081d04a0443 tty: ipwireless: fix missing checks for ioremap
c05b2ed7bc1b virtio_console: initialize vtermno value for ports
348ec7b9a1c1 media: wl128x: prevent two potential buffer overflows
557ae685914b spi: tegra114: reset controller on probe
5e75d5e2cd0c cxgb3/l2t: Fix undefined behaviour
dc2a8861fdb8 ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put
971e4a273242 ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put
5db3c5adf44a HID: core: move Usage Page concatenation to Main item
cb7872f12835 chardev: add additional check for minor range overlap
5680f59f0f15 x86/ia32: Fix ia32_restore_sigcontext() AC leak
94032b2e05c9 arm64: cpu_ops: fix a leaked reference by adding missing of_node_put
04f45a555ec3 scsi: ufs: Avoid configuring regulator with undefined voltage range
60bcfed2ad60 scsi: ufs: Fix regulator load and icc-level configuration
0a597d2badef brcmfmac: fix race during disconnect when USB completion is in progress
f95ab00ab455 brcmfmac: convert dev_init_lock mutex to completion
db74ef82ca8b b43: shut up clang -Wuninitialized variable warning
951fbf92381a brcmfmac: fix missing checks for kmemdup
1d3ee4d7fc6a rtlwifi: fix a potential NULL pointer dereference
6d7b052d8466 iio: common: ssp_sensors: Initialize calculated_time in ssp_common_process_data
e98ef6767e41 iio: hmc5843: fix potential NULL pointer dereferences
a86d06179423 iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion
4400dcd69478 x86/build: Keep local relocations with ld.lld
75ffb58460e3 cpufreq: pmac32: fix possible object reference leak
3d041608fd4b cpufreq/pasemi: fix possible object reference leak
4d02f33a4f42 cpufreq: ppc_cbe: fix possible object reference leak
6be923556aad s390: cio: fix cio_irb declaration
65e3cb04a5a2 extcon: arizona: Disable mic detect if running when driver is removed
db7eb206560c PM / core: Propagate dev->power.wakeup_path when no callbacks
066a286679b4 mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
6a783be705ba mmc: sdhci-of-esdhc: add erratum eSDHC5 support
8b0e6af16ae6 mmc_spi: add a status check for spi_sync_locked
a30e90a8eb3a scsi: libsas: Do discovery on empty PHY to update PHY info
915defac2a9a hwmon: (f71805f) Use request_muxed_region for Super-IO accesses
0eb8a476ffc5 hwmon: (pc87427) Use request_muxed_region for Super-IO accesses
79deb6abd1f5 hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses
92b4d16997c4 hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses
e3e58378c678 hwmon: (vt1211) Use request_muxed_region for Super-IO accesses
488920af3bb3 RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure
2ff310e6dae2 i40e: don't allow changes to HW VLAN stripping on active port VLANs
bc791e819503 x86/irq/64: Limit IST stack overflow check to #DB stack
3557f0857767 USB: core: Don't unbind interfaces following device reset failure
6f5e198878fb sched/core: Handle overflow in cpu_shares_write_u64
9812286a63a1 sched/core: Check quota and period overflow at usec to nsec conversion
9d4961a415ed powerpc/numa: improve control of topology updates
82077215ed25 media: pvrusb2: Prevent a buffer overflow
ca865598abf1 media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable()
a8e0739d465e audit: fix a memory leak bug
ff3038fe657d media: ov2659: make S_FMT succeed even if requested format doesn't match
2d97a3abcf2f media: au0828: stop video streaming only when last user stops
115ccd9ca776 media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper
1433d7a0937b media: coda: clear error return value before picture run
5cadb7ae715f dmaengine: at_xdmac: remove BUG_ON macro in tasklet
af8b5d7d9477 pinctrl: pistachio: fix leaked of_node references
74dd38a5a447 HID: logitech-hidpp: use RAP instead of FAP to get the protocol version
9bffc62051a9 mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions
ae6b1f761180 x86/mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault()
b059848e119f smpboot: Place the __percpu annotation correctly
28d8827a09b0 x86/build: Move _etext to actual end of .text
d3eb2caf6d41 bcache: avoid clang -Wunintialized warning
7bf3463abc95 bcache: add failure check to run_cache_set() for journal replay
d4547049bb7f bcache: fix failure in journal relplay
5789884b98ab bcache: return error immediately in bch_journal_replay()
50d25ca802f5 net: cw1200: fix a NULL pointer dereference
af2fb022b390 mwifiex: prevent an array overflow
4b24af093631 ASoC: fsl_sai: Update is_slave_mode with correct value
c1045350a6c4 mac80211/cfg80211: update bss channel on channel switch
a3c50ef9fd43 dmaengine: pl330: _stop: clear interrupt status
958848a1d97c w1: fix the resume command API
e4163587c4ee rtc: 88pm860x: prevent use-after-free on device remove
a898d150956b brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler()
5e1a879d9ab3 spi: pxa2xx: fix SCR (divisor) calculation
3d521a6fba45 ASoC: imx: fix fiq dependencies
af283aba93bb powerpc/boot: Fix missing check of lseek() return value
dba032038c95 mmc: core: Verify SD bus width
333e8303d6e0 cxgb4: Fix error path in cxgb4_init_module
6948c6bc17d6 gfs2: Fix lru_count going negative
635c71d11234 tools include: Adopt linux/bits.h
ed2faf464d9b perf tools: No need to include bitops.h in util.h
a1f254dc06f9 at76c50x-usb: Don't register led_trigger if usb_register_driver failed
f5e4337e4a9c ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit
e39af96f4dc1 media: vivid: use vfree() instead of kfree() for dev->bitmap_cap
a04e71a0dbc6 media: cpia2: Fix use-after-free in cpia2_exit
28eeeb86046e fbdev: fix WARNING in __alloc_pages_nodemask bug
bf8474c64846 hugetlb: use same fault hash key for shared and private mappings
6bc153907900 fbdev: fix divide error in fb_var_to_videomode
5c9a20390c01 btrfs: sysfs: don't leak memory when failing add fsid
0fa88718cdc5 Btrfs: fix race between ranged fsync and writeback of adjacent ranges
2f5ac0bd2ef7 gfs2: Fix sign extension bug in gfs2_update_stats
8aae5e98fec2 crypto: vmx - CTR: always increment IV as quadword
582bb52e4803 Revert "scsi: sd: Keep disk read-only when re-reading partition"
bd020b331706 bio: fix improper use of smp_mb__before_atomic()
603212bdc59c KVM: x86: fix return value for reserved EFER
75d63b131b73 ext4: do not delete unlinked inode from orphan list on failed truncate
31943685dd49 fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough
7d64186e7910 btrfs: Honour FITRIM range constraints during free space trim
57e84e4c073d md/raid: raid5 preserve the writeback action after the parity check
9013f4870848 Revert "Don't jump to compute_result state from check_result state"
0c57364fa0f4 perf bench numa: Add define for RUSAGE_THREAD if not present
66ee750cfdd7 ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour
fc0208b3428d power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG
dd37fa44dffa KVM: arm/arm64: Ensure vcpu target is unset on reset failure
fe4f461ba517 xfrm4: Fix uninitialized memory read in _decode_session4
cd0848733f25 vti4: ipip tunnel deregistration fixes.
8fd94b65d207 xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module
86040d722b29 xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink
daea41651d43 dm delay: fix a crash when invalid device is specified
566004721c90 PCI: Mark Atheros AR9462 to avoid bus reset
0dc2ad06ddad fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting
4673eae95b53 fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display
c996722f7fff fbdev: sm712fb: fix support for 1024x768-16 mode
ebfadb510e3c fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping VRAM
c92bde52742c fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA
0d5cd17ce037 fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F
ca5ce8db7f23 fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75
6c2fb5beecba fbdev: sm712fb: fix brightness control on reboot, don't set SR30
dbc86a927d66 perf intel-pt: Fix sample timestamp wrt non-taken branches
eedc9a210f9f perf intel-pt: Fix improved sample timestamp
f5da0aeca525 perf intel-pt: Fix instructions sampling rate
a5b2e4b6ac21 memory: tegra: Fix integer overflow on tick value calculation
11988047b39a tracing: Fix partial reading of trace event's id file
a7929c94860e ceph: flush dirty inodes before proceeding with remount
3c99cd905ba9 iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114
40857ab73988 fuse: honor RLIMIT_FSIZE in fuse_file_fallocate
73724958d129 fuse: fix writepages on 32bit
12060f4740ca clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider
4676a07add08 NFS4: Fix v4.0 client state corruption when mount
e8623e7a8f4b media: ov6650: Fix sensor possibly not detected on probe
dffc9e5ffae5 cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level()
b8ab0c4effb8 of: fix clang -Wunsequenced for be32_to_cpu()
2a98d346396a intel_th: msu: Fix single mode with IOMMU
bc065776c31e md: add mddev->pers to avoid potential NULL pointer dereference
ade291d2230a stm class: Fix channel free in stm output free path
65d14634b694 tipc: fix modprobe tipc failed after switch order of device registration
ff69bb4be643 tipc: switch order of device registration to fix a crash
2ff783f3e05e ppp: deflate: Fix possible crash in deflate_init
dd20e0c039fe net/mlx4_core: Change the error print to info print
b2f72a431142 net: avoid weird emergency message
70064f7ea100 KVM: x86: Skip EFER vs. guest CPUID checks for host-initiated writes
5e9bc16ff49f ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug
98529ecd313b ext4: zero out the unused memory region in the extent tree block
9ff6372e5a6b fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount
bfce20eaf18e writeback: synchronize sync(2) against cgroup writeback membership switches
cd042379c6ad crypto: arm/aes-neonbs - don't access already-freed walk.iv
b70e97ae5d8e crypto: salsa20 - don't access already-freed walk.iv
6dc48d059646 crypto: chacha20poly1305 - set cra_name correctly
b82055365307 crypto: gcm - fix incompatibility between "gcm" and "gcm_base"
de087dd9f5c6 crypto: gcm - Fix error return code in crypto_gcm_create_common()
064d0c5a9ae6 ipmi:ssif: compare block number correctly for multi-part return messages
bef039b2419e bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim()
5651075a1ce3 bcache: fix a race between cache register and cacheset unregister
686e4352e3d8 Btrfs: do not start a transaction at iterate_extent_inodes()
b268b6e501ed ext4: fix ext4_show_options for file systems w/o journal
f3b9c26f191b ext4: actually request zeroing of inode table after grow
e5100e7fa78e tty/vt: fix write/write race in ioctl(KDSKBSENT) handler
592a36c59f4c mfd: da9063: Fix OTP control register names to match datasheets for DA9063/63L
e3a74fbc42ca ocfs2: fix ocfs2 read inode data panic in ocfs2_iget
b614485b6b93 mm/mincore.c: make mincore() more conservative
80cc516ed783 ASoC: RT5677-SPI: Disable 16Bit SPI Transfers
e6bf706cee3f ASoC: max98090: Fix restore of DAPM Muxes
2a8188c68e0a ALSA: hda/realtek - EAPD turn on later
1bbb08c8ab6a ALSA: hda/hdmi - Consider eld_valid when reporting jack event
2d8956305ae8 ALSA: usb-audio: Fix a memory leak bug
b1c1888ad6c9 crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest()
2ee7c2310cd0 crypto: crct10dif-generic - fix use via crypto_shash_digest()
2ee0dd38a0a0 crypto: vmx - fix copy-paste error in CTR mode
f7dee0816e5d ARM: exynos: Fix a leaked reference by adding missing of_node_put
ce814dc7e811 x86/speculation/mds: Improve CPU buffer clear documentation
4d68e2bf3834 x86/speculation/mds: Revert CPU buffer clear on double fault exit
e4e5a975f4ae Merge remote-tracking branch 'origin/upstream-f2fs-stable-linux-4.4.y' into android-4.4
2d812ba62ee4 f2fs: link f2fs quota ops for sysfile
6dc3fb0ba854 fs: sdcardfs: Add missing option to show_options
Linux version 4.4.185-gc01daea54c34 (android-build@abfarm-us-
east1-c-0042) (Android (5484270 based on r353983c) clang version
9.0.3 (https://android.googlesource.com/toolchain/clang
745b335211bb9eadfa6aa6301f84715cee4b37c5)
(https://android.googlesource.com/toolchain/llvm
60cf23e54e46c807513f7a36d0a7b777920b5881) (based on LLVM
9.0.3svn)) #1 SMP PREEMPT Thu Aug 1 22:39:42 UTC 2019
Bug: 109821005
Bug: 111524987
Bug: 112955896
Bug: 115649143
Bug: 120025196
Bug: 120444281
Bug: 127298877
Bug: 130571081
Bug: 131124114
Bug: 133257717
Bug: 133479338
Bug: 134051784
Bug: 136125093
Bug: 137541192
Bug: 137617133
Bug: 137827669
Bug: 137827828
Change-Id: I100e054574b0ae6ec33a0e2d45f88a65083acd95
Pick-Prebuilt: 255958347
Source-Branch: android-msm-wahoo-4.4-qt-qpr1
Signed-off-by: Robin Peng <robinpeng@google.com>
128 files changed
