https://source.android.com/security/bulletin/2021-04-01
CVE-2020-15436
CVE-2020-29368
CVE-2020-25705
Merge 4.9.264 into android-4.9-p

Changes in 4.9.264
	net: fec: ptp: avoid register access when ipg clock is disabled
	powerpc/4xx: Fix build errors from mfdcr()
	atm: eni: dont release is never initialized
	atm: lanai: dont run lanai_dev_close if not open
	ixgbe: Fix memleak in ixgbe_configure_clsu32
	net: tehuti: fix error return code in bdx_probe()
	sun/niu: fix wrong RXMAC_BC_FRM_CNT_COUNT count
	nfs: fix PNFS_FLEXFILE_LAYOUT Kconfig default
	NFS: Correct size calculation for create reply length
	net: wan: fix error return code of uhdlc_init()
	atm: uPD98402: fix incorrect allocation
	atm: idt77252: fix null-ptr-dereference
	u64_stats,lockdep: Fix u64_stats_init() vs lockdep
	nfs: we don't support removing system.nfs4_acl
	ia64: fix ia64_syscall_get_set_arguments() for break-based syscalls
	ia64: fix ptrace(PTRACE_SYSCALL_INFO_EXIT) sign
	x86/tlb: Flush global mappings when KAISER is disabled
	squashfs: fix inode lookup sanity checks
	squashfs: fix xattr id and id lookup sanity checks
	arm64: dts: ls1043a: mark crypto engine dma coherent
	bus: omap_l3_noc: mark l3 irqs as IRQF_NO_THREAD
	macvlan: macvlan_count_rx() needs to be aware of preemption
	net: dsa: bcm_sf2: Qualify phydev->dev_flags based on port
	e1000e: add rtnl_lock() to e1000_reset_task
	e1000e: Fix error handling in e1000_set_d0_lplu_state_82571
	net/qlcnic: Fix a use after free in qlcnic_83xx_get_minidump_template
	can: c_can_pci: c_can_pci_remove(): fix use-after-free
	can: c_can: move runtime PM enable/disable to c_can_platform
	can: m_can: m_can_do_rx_poll(): fix extraneous msg loss warning
	mac80211: fix rate mask reset
	net: cdc-phonet: fix data-interface release on probe failure
	RDMA/cxgb4: Fix adapter LE hash errors while destroying ipv6 listening server
	ACPI: scan: Rearrange memory allocation in acpi_device_add()
	ACPI: scan: Use unique number for instance_no
	perf auxtrace: Fix auxtrace queue conflict
	idr: add ida_is_empty
	futex: Use smp_store_release() in mark_wake_futex()
	futex,rt_mutex: Introduce rt_mutex_init_waiter()
	futex: Rework futex_lock_pi() to use rt_mutex_*_proxy_lock()
	futex: Drop hb->lock before enqueueing on the rtmutex
	futex: Avoid freeing an active timer
	futex,rt_mutex: Fix rt_mutex_cleanup_proxy_lock()
	futex: Handle early deadlock return correctly
	futex: Fix (possible) missed wakeup
	locking/futex: Allow low-level atomic operations to return -EAGAIN
	arm64: futex: Bound number of LDXR/STXR loops in FUTEX_WAKE_OP
	futex: Prevent robust futex exit race
	futex: Fix incorrect should_fail_futex() handling
	futex: Handle transient "ownerless" rtmutex state correctly
	can: dev: Move device back to init netns on owning netns delete
	net: sched: validate stab values
	net: qrtr: fix a kernel-infoleak in qrtr_recvmsg()
	mac80211: fix double free in ibss_leave
	xen-blkback: don't leak persistent grants from xen_blkbk_map()
	Linux 4.9.264

Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
Change-Id: I5ad9a516cb12473dda8eb36b5e709beee0e305c5