Linux version 4.14.285-g5f00bf266851-ab8874763 (android-
    build@abfarm-2004-0498) (Android (7284624, based on r416183b)
    clang version 12.0.5
    (https://android.googlesource.com/toolchain/llvm-project


    c935d99d7cf2016289302412d708641d52d2f7ee), LLD 12.0.5
    (/buildbot/src/android/llvm-toolchain/out/llvm-project/lld
    c935d99d7cf2016289302412d708641d52d2f7ee)) #1 SMP PREEMPT Wed Jul
    27 08:03:28 UTC 2022

private/msm-google: (500 changes)
  5f00bf26 LTS: Merge android-4.14-stable (4.14.285) into android-msm-pixel-4.14
  62e3f91a ANDROID: cgroup: Fix for a partially backported patch
  39be092f Revert "extcon: Modify extcon device to be created after driver data is set"
  d01646ca early_random: Fill HW rng with add_bootloader_randomness
  3ad0b610 Merge android-4.14-stable (4.14.285) into android-msm-pixel-4.14-lts
  ab5ac89e Merge android-msm-pixel-4.14-tm-qpr1 into android-msm-pixel-4.14
  e48444eb ASoC: ops: Shift tested values in snd_soc_put_volsw_sx() by +min
  d5dfb934 BACKPORT: FROMGIT: Binder: add TF_UPDATE_TXN to replace outdated txn
  6119c0e7 Merge android-msm-pixel-4.14-tm-qpr1 into android-msm-pixel-4.14
  f82011a8 Merge android-msm-pixel-4.14-tm into android-msm-pixel-4.14-tm-qpr1
  e333cb86 Merge branch 'android-msm-pixel-4.14-tm-security' into android-msm-pixel-4.14-tm
  fa57475c msm: adsprpc: Handle UAF in fastrpc debugfs read
  d73f58ab Merge 4.14.285 into android-4.14-stable
  6ce4b7e0 UPSTREAM: lib/vsprintf: Hash printed address for netdev bits fallback
  eb8143f9 UPSTREAM: lib/vsprintf: Prepare for more general use of ptr_to_id()
  8fd5652b UPSTREAM: lib/vsprintf: Make ptr argument conts in ptr_to_id()
  54275e67 UPSTREAM: vsprintf: Replace memory barrier with static_key for random_ptr_key update
  9f5d3c79 UPSTREAM: lib/test_printf.c: accept "ptrval" as valid result for plain 'p' tests
  c3ad4c81 UPSTREAM: lib/vsprintf: Do not handle %pO[^F] as %px
  035eef00 BACKPORT: l2tp: fix race in pppol2tp_release with session object destroy
  1085f8d9 BACKPORT: l2tp: don't use inet_shutdown on ppp session destroy
  5d2923ec Merge android-msm-pixel-4.14-tm-qpr1 into android-msm-pixel-4.14
  f051383e Linux 4.14.285
  6a2659e2 tcp: drop the hash_32() part from the index calculation
  9044e70f tcp: increase source port perturb table to 2^16
  9c251cc4 tcp: dynamically allocate the perturb table used by source ports
  43995cd1 tcp: add small random increments to the source port
  f1e99d0a tcp: use different parts of the port_offset for index and offset
  76d3468b tcp: add some entropy in __inet_hash_connect()
  4779af1e xprtrdma: fix incorrect header size calculations
  dbc86569 usb: gadget: u_ether: fix regression in setting fixed MAC address
  1de03ea1 s390/mm: use non-quiescing sske for KVM switch to keyed guest
  1819c764 l2tp: fix race in pppol2tp_release with session object destroy
  352dce3a l2tp: don't use inet_shutdown on ppp session destroy
  f064b12b virtio-pci: Remove wrong address verification in vp_del_vqs()
  7c921328 ext4: add reserved GDT blocks check
  d1d3f02c ext4: make variable "count" signed
  a37c1359 ext4: fix bug_on ext4_mb_use_inode_pa
  2bdcf89a serial: 8250: Store to lsr_save_flags after lsr read
  0ef6917c usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe
  981ee406 usb: dwc2: Fix memory leak in dwc2_hcd_init
  88dfdbc8 USB: serial: io_ti: add Agilent E5805A support
  26cc6879 USB: serial: option: add support for Cinterion MV31 with new baseline
  822e2303 comedi: vmk80xx: fix expression for tx buffer size
  486f68f8 irqchip/gic/realview: Fix refcount leak in realview_gic_of_init
  1baa2f92 certs/blacklist_hashes.c: fix const confusion in certs blacklist
  bbb14cc9 arm64: ftrace: fix branch range checks
  cd646907 net: bgmac: Fix an erroneous kfree() in bgmac_remove()
  6b689129 misc: atmel-ssc: Fix IRQ check in ssc_probe
  c4b0b8ed tty: goldfish: Fix free_irq() on remove
  5ba9956c i40e: Fix call trace in setup_tx_descriptors
  290e3215 pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE
  7112098b random: credit cpu and bootloader seeds by default
  9c1f4408 net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface netdev[napi]_alloc_frag
  0e818d43 ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg
  f21f9083 nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred
  eef6d16c virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed
  c2f62621 scsi: pmcraid: Fix missing resource cleanup in error case
  9ae7bde7 scsi: ipr: Fix missing/incorrect resource cleanup in error case
  ee2eec09 scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology
  0b656479 scsi: vmw_pvscsi: Expand vcpuHint to 16 bits
  2fa58a76 ASoC: wm8962: Fix suspend while playing music
  1ac5efee ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
  74301547 ASoC: cs42l56: Correct typo in minimum level for SX volume controls
  f469f014 ASoC: cs42l52: Correct TLV for Bypass Volume
  e9892f40 ASoC: cs53l30: Correct number of volume levels on SX controls
  c44eafbd ASoC: cs42l52: Fix TLV scales for mixer controls
  d4bfd485 random: account for arch randomness in bits
  5e70c1a8 random: mark bootloader randomness code as __init
  aafc845f random: avoid checking crng_ready() twice in random_init()
  9ed7b5bf crypto: drbg - make reseeding from get_random_bytes() synchronous
  eb86176a crypto: drbg - always try to free Jitter RNG instance
  31a5afe0 crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed()
  b05392dc crypto: drbg - track whether DRBG was seeded with !rng_is_initialized()
  b1fb007a crypto: drbg - prepare for more fine-grained tracking of seeding state
  80bc8308 crypto: drbg - always seeded with SP800-90B compliant noise source
  0c03d073 crypto: drbg - add FIPS 140-2 CTRNG for noise source
  fcff2416 Revert "random: use static branch for crng_ready()"
  09b3d357 random: check for signals after page of pool writes
  72389322 random: wire up fops->splice_{read,write}_iter()
  17685dd5 random: convert to using fops->write_iter()
  225c0df1 random: move randomize_page() into mm where it belongs
  d77e58ee random: move initialization functions out of hot pages
  25f97736 random: use proper return types on get_random_{int,long}_wait()
  c24fb5a3 random: remove extern from functions in header
  b0eabe21 random: use static branch for crng_ready()
  37fe03f2 random: credit architectural init the exact amount
  b16b1b66 random: handle latent entropy and command line from random_init()
  1bed234f random: use proper jiffies comparison macro
  319b965f random: remove ratelimiting for in-kernel unseeded randomness
  0251a5fd random: avoid initializing twice in credit race
  4ddc38d3 random: use symbolic constants for crng_init states
  66b2dde0 siphash: use one source of truth for siphash permutations
  eb2fb967 random: help compiler out with fast_mix() by using simpler arguments
  18aa432e random: do not use input pool from hard IRQs
  e4728fd1 random: order timer entropy functions below interrupt functions
  71db2372 random: do not pretend to handle premature next security model
  fed6de0e random: do not use batches when !crng_ready()
  70cf7fb6 random: insist on random_get_entropy() existing in order to simplify
  cf8717e1 xtensa: use fallback for random_get_entropy() instead of zero
  ac7fbc3d sparc: use fallback for random_get_entropy() instead of zero
  d78483f5 um: use fallback for random_get_entropy() instead of zero
  4373bcb9 x86/tsc: Use fallback for random_get_entropy() instead of zero
  f869f2e7 nios2: use fallback for random_get_entropy() instead of zero
  7605b265 arm: use fallback for random_get_entropy() instead of zero
  abb6b7e1 mips: use fallback for random_get_entropy() instead of just c0 random
  63959c58 m68k: use fallback for random_get_entropy() instead of zero
  2142a4d8 timekeeping: Add raw clock fallback for random_get_entropy()
  0a182df6 powerpc: define get_cycles macro for arch-override
  d969c988 alpha: define get_cycles macro for arch-override
  faf62b74 parisc: define get_cycles macro for arch-override
  0da28452 s390: define get_cycles macro for arch-override
  e154c03c ia64: define get_cycles macro for arch-override
  4798c86f init: call time_init() before rand_initialize()
  70e65f65 random: fix sysctl documentation nits
  80052026 random: document crng_fast_key_erasure() destination possibility
  4fab8d78 random: make random_get_entropy() return an unsigned long
  50339a2a random: check for signals every PAGE_SIZE chunk of /dev/[u]random
  cf8136b3 random: check for signal_pending() outside of need_resched() check
  04d681d8 random: do not allow user to keep crng key around on stack
  8a4646c1 random: do not split fast init input in add_hwgenerator_randomness()
  bba3aac2 random: mix build-time latent entropy into pool at init
  cd852448 random: re-add removed comment about get_random_{u32,u64} reseeding
  eed01a6b random: treat bootloader trust toggle the same way as cpu trust toggle
  df5104c1 random: skip fast_init if hwrng provides large chunk of entropy
  2e7ef351 random: check for signal and try earlier when generating entropy
  05237705 random: reseed more often immediately after booting
  f6296073 random: make consistent usage of crng_ready()
  d9a694a9 random: use SipHash as interrupt entropy accumulator
  c8e06a4d random: replace custom notifier chain with standard one
  d2c884e4 random: don't let 644 read-only sysctls be written to
  dd9970a9 random: give sysctl_random_min_urandom_seed a more sensible value
  3e3d705c random: do crng pre-init loading in worker rather than irq
  ddb672cf random: unify cycles_t and jiffies usage and types
  55add4d8 random: cleanup UUID handling
  430374f4 random: only wake up writers after zap if threshold was passed
  23fc6dcd random: round-robin registers as ulong, not u32
  40b5b4b6 random: clear fast pool, crng, and batches in cpuhp bring up
  57a23e72 random: pull add_hwgenerator_randomness() declaration into random.h
  5357d828 random: check for crng_init == 0 in add_device_randomness()
  535d2806 random: unify early init crng load accounting
  58e0c4ff random: do not take pool spinlock at boot
  80adfc1f random: defer fast pool mixing to worker
  b3fa3d15 random: rewrite header introductory comment
  57332ead random: group sysctl functions
  c3502a79 random: group userspace read/write functions
  496b91b6 random: group entropy collection functions
  2ee36c83 random: group entropy extraction functions
  25061d36 random: group initialization wait functions
  ee5705cf random: remove whitespace and reorder includes
  388e4979 random: remove useless header comment
  65419e90 random: introduce drain_entropy() helper to declutter crng_reseed()
  e0a5363f random: deobfuscate irq u32/u64 contributions
  fabaab48 random: add proper SPDX header
  707c01fe random: remove unused tracepoints
  f8a196cf random: remove ifdef'd out interrupt bench
  15c96d9c random: tie batched entropy generation to base_crng generation
  93ce4028 random: zero buffer after reading entropy from userspace
  21682884 random: remove outdated INT_MAX >> 6 check in urandom_read()
  acbf6f48 random: use hash function for crng_slow_load()
  5a595c18 random: absorb fast pool into input pool after fast load
  2d9c1b42 random: do not xor RDRAND when writing into /dev/random
  4ceb0d57 random: ensure early RDSEED goes through mixer on init
  13c423b6 random: inline leaves of rand_initialize()
  d0841f7e random: use RDSEED instead of RDRAND in entropy extraction
  909f3974 random: fix locking in crng_fast_load()
  839a45e6 random: remove batched entropy locking
  8c39bfd9 random: remove use_input_pool parameter from crng_reseed()
  6605171c random: make credit_entropy_bits() always safe
  f82262f2 random: always wake up entropy writers after extraction
  bb375abd random: use linear min-entropy accumulation crediting
  62a2b4bd random: simplify entropy debiting
  ccf535b5 random: use computational hash for entropy extraction
  7ad714b9 random: only call crng_finalize_init() for primary_crng
  7beef135 random: access primary_pool directly rather than through pointer
  35e31291 random: continually use hwgenerator randomness
  5c539eee random: simplify arithmetic function flow in account()
  166f9970 random: access input_pool_data directly rather than through pointer
  56384519 random: cleanup fractional entropy shift constants
  a88fa6c0 random: prepend remaining pool constants with POOL_
  9199ceba random: de-duplicate INPUT_POOL constants
  3653dd77 random: remove unused OUTPUT_POOL constants
  55349296 random: rather than entropy_store abstraction, use global
  482583b7 random: try to actively add entropy rather than passively wait for it
  ac800f0b random: remove unused extract_entropy() reserved argument
  0c8cc8db random: remove incomplete last_data logic
  f450937d random: cleanup integer types
  91393740 crypto: chacha20 - Fix chacha20_block() keystream alignment (again)
  45b1bfbd random: cleanup poolinfo abstraction
  da31a024 random: fix typo in comments
  28601bec random: don't reset crng_init_cnt on urandom_read()
  d15b7abb random: avoid superfluous call to RDRAND in CRNG extraction
  4d4b3fc0 random: early initialization of ChaCha constants
  84647efd random: initialize ChaCha20 constants with correct endianness
  048cc34c random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs
  5d3c00a7 random: harmonize "crng init done" messages
  66794cda random: mix bootloader randomness into pool
  e59fd7eb random: do not re-init if crng_reseed completes before primary init
  eaa94d93 random: do not sign extend bytes for rotation when mixing
  1f89b317 random: use BLAKE2s instead of SHA1 in extraction
  5a0fda8f random: remove unused irq_flags argument from add_interrupt_randomness()
  5cdbdd83 random: document add_hwgenerator_randomness() with other input functions
  b44b759b crypto: blake2s - adjust include guard naming
  34dc98ce crypto: blake2s - include <linux/bug.h> instead of <asm/bug.h>
  9404e8c9 MAINTAINERS: co-maintain random.c
  5ab8e04f random: remove dead code left over from blocking pool
  1fb7c4da random: avoid arch_get_random_seed_long() when collecting IRQ randomness
  6aa1f386 random: add arch_get_random_*long_early()
  3d80af75 powerpc: Use bool in archrandom.h
  4682b96e linux/random.h: Mark CONFIG_ARCH_RANDOM functions __must_check
  b7d3392a linux/random.h: Use false with bool
  cacc99ee linux/random.h: Remove arch_has_random, arch_has_random_seed
  596bcf59 s390: Remove arch_has_random, arch_has_random_seed
  1cb0d7df powerpc: Remove arch_has_random, arch_has_random_seed
  3ebd5da6 x86: Remove arch_has_random, arch_has_random_seed
  c5948834 random: avoid warnings for !CONFIG_NUMA builds
  b0a6d6a7 random: split primary/secondary crng init paths
  03fafcef random: remove some dead code of poolinfo
  a15f8c15 random: fix typo in add_timer_randomness()
  8edfa1c6 random: Add and use pr_fmt()
  5088389a random: convert to ENTROPY_BITS for better code readability
  ea13b4ac random: remove unnecessary unlikely()
  051278bf random: remove kernel.random.read_wakeup_threshold
  3ae32ecd random: delete code to pull data into pools
  ba173440 random: remove the blocking pool
  5eadd290 random: fix crash on multiple early calls to add_bootloader_randomness()
  64bfe2ee char/random: silence a lockdep splat with printk()
  9aefae44 random: make /dev/random be almost like /dev/urandom
  aa38e379 random: ignore GRND_RANDOM in getentropy(2)
  a7b5560f random: add GRND_INSECURE to return best-effort non-cryptographic bytes
  32d4b398 random: Add a urandom_read_nowait() for random APIs that don't warn
  3a8e277b random: Don't wake crng_init_wait when crng_init == 1
  42b10f67 lib/crypto: sha1: re-roll loops to reduce code size
  66680715 lib/crypto: blake2s: move hmac construction into wireguard
  6adb419f crypto: blake2s - generic C library implementation and selftest
  a83bdc08 crypto: Deduplicate le32_to_cpu_array() and cpu_to_le32_array()
  b7c853ad Revert "hwrng: core - Freeze khwrng thread during suspend"
  9ea16743 char/random: Add a newline at the end of the file
  c1f7c987 random: Use wait_event_freezable() in add_hwgenerator_randomness()
  eb1e322c fdt: add support for rng-seed
  0b33f93d random: Support freezable kthreads in add_hwgenerator_randomness()
  eaabe771 random: fix soft lockup when trying to read from an uninitialized blocking pool
  138b6da6 latent_entropy: avoid build error when plugin cflags are not set
  b30c2834 random: document get_random_int() family
  50622066 random: move rand_initialize() earlier
  fd5e41d6 random: only read from /dev/random after its pool has received 128 bits
  72ed3248 drivers/char/random.c: make primary_crng static
  14c55b81 drivers/char/random.c: remove unused stuct poolinfo::poolbits
  c5d75e6d drivers/char/random.c: constify poolinfo_table
  08d453ec random: make CPU trust a boot parameter
  4395f231 random: Make crng state queryable
  61698499 random: remove preempt disabled region
  923eb780 random: add a config option to trust the CPU's hwrng
  005e7ac0 random: Return nbytes filled from hw RNG
  e5572bef random: Fix whitespace pre random-bytes work
  3beefa25 drivers/char/random.c: remove unused dont_count_entropy
  d3146b90 random: optimize add_interrupt_randomness
  d218c093 random: always fill buffer in get_random_bytes_wait
  f83ff022 crypto: chacha20 - Fix keystream alignment for chacha20_block()
  a0764df5 9p: missing chunk of "fs/9p: Don't update file type when updating file attributes"
  ed0705d6 UPSTREAM: ext4: verify dir block before splitting it
  9fcc8943 UPSTREAM: ext4: fix use-after-free in ext4_rename_dir_prepare
  0de9832a BACKPORT: ext4: Only advertise encrypted_casefold when encryption and unicode are enabled
  4b074ce7 BACKPORT: ext4: fix no-key deletion for encrypt+casefold
  11f9a185 BACKPORT: ext4: optimize match for casefolded encrypted dirs
  7a148e11 BACKPORT: ext4: handle casefolding with encryption
  bfec958d Revert "ANDROID: ext4: Handle casefolding with encryption"
  0bedb200 Revert "ANDROID: ext4: Optimize match for casefolded encrypted dirs"
  ca62b046 can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path
  ebe6b429 Merge 4.14.284 into android-4.14-stable
  35003896 LTS: Merge android-4.14-stable (4.14.281) into android-msm-pixel-4.14-tm-qpr1
  83bf9688 Revert "ext4: fix use-after-free in ext4_rename_dir_prepare"
  b72b380f Revert "ext4: verify dir block before splitting it"
  3228fc5f FROMGIT: Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process"
  34e2f0e0 Merge android-4.14-stable (4.14.281) into android-msm-pixel-4.14-tm-lts
  84bae268 Linux 4.14.284
  66b7fb8b x86/speculation/mmio: Print SMT warning
  ac87ab44 KVM: x86/speculation: Disable Fill buffer clear within guests
  532c3a51 x86/speculation/mmio: Reuse SRBDS mitigation for SBDS
  ed4fa769 x86/speculation/srbds: Update SRBDS mitigation selection
  ae620928 x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data
  e0fccc13 x86/speculation/mmio: Enable CPU Fill buffer clearing on idle
  87e9881d x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations
  d6087dda x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data
  ba0a1237 x86/speculation: Add a common function for MD_CLEAR mitigation update
  c00f2194 x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug
  62cf367c Documentation: Add documentation for Processor MMIO Stale Data
  5437104b x86/cpu: Add another Alder Lake CPU to the Intel family
  cfc27e49 x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family
  cd92e864 x86/cpu: Add Comet Lake to the Intel CPU models header
  1f7e53f7 x86/CPU: Add more Icelake model numbers
  60eef5eb x86/CPU: Add Icelake model number
  619d3a91 x86/cpu: Add Cannonlake to Intel family
  19249646 x86/cpu: Add Jasper Lake to Intel family
  008649ae cpu/speculation: Add prototype for cpu_show_srbds()
  ec8a6a1e x86/cpu: Add Elkhart Lake to Intel family
  bc1a5b8c Merge 4.14.283 into android-4.14-stable
  1ccc597f Linux 4.14.283
  42726877 tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd
  c1f61bc6 PCI: qcom: Fix unbalanced PHY init on probe errors
  a91d7bb9 mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N
  46a9d87e mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write
  c2e66819 md/raid0: Ignore RAID0 layout if the second zone has only one device
  d13c94c4 powerpc/32: Fix overread/overwrite of thread_struct via ptrace
  c850f24a Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag
  fd39e5a2 ixgbe: fix unexpected VLAN Rx in promisc mode on VF
  7d093d26 ixgbe: fix bcast packets Rx on VF after promisc removal
  d221ce54 nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling
  03878a86 nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION
  2e6e05be ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files
  1ac5e469 cifs: return errors during session setup during reconnects
  83be2cc3 ALSA: hda/conexant - Fix loopback issue with CX20632
  29c3f932 vringh: Fix loop descriptors check in the indirect cases
  3966522c nodemask: Fix return values to be unsigned
  67e40313 nbd: fix io hung while disconnecting device
  165cf2e0 nbd: fix race between nbd_alloc_config() and module removal
  8a1435c8 nbd: call genl_unregister_family() first in nbd_cleanup()
  35b2527d modpost: fix undefined behavior of is_arm_mapping_symbol()
  16a0f0b6 drm/radeon: fix a possible null pointer dereference
  a7afaf79 Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process"
  9f8131fd md: protect md_unregister_thread from reentrancy
  a393b6fa kernfs: Separate kernfs_pr_cont_buf and rename_lock.
  66412d89 serial: msm_serial: disable interrupts in __msm_console_write()
  277faa44 staging: rtl8712: fix uninit-value in r871xu_drv_init()
  3ba2db7c clocksource/drivers/sp804: Avoid error on multiple instances
  6e721f3a extcon: Modify extcon device to be created after driver data is set
  42ecf1aa misc: rtsx: set NULL intfdata when probe fails
  efb15ff4 usb: dwc2: gadget: don't reset gadget's driver->bus
  7b063f1e USB: hcd-pci: Fully suspend across freeze/thaw cycle
  a3d38018 drivers: usb: host: Fix deadlock in oxu_bus_suspend()
  85e20f8b drivers: tty: serial: Fix deadlock in sa1100_set_termios()
  7bffda15 USB: host: isp116x: check return value after calling platform_get_resource()
  381045dc drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()
  d703d912 tty: Fix a possible resource leak in icom_probe
  078212ad tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()
  9a04367c lkdtm/usercopy: Expand size of "out of frame" object
  27342801 iio: dummy: iio_simple_dummy: check the return value of kstrdup()
  7c49390c drm: imx: fix compiler warning with gcc-12
  1fd12298 net: altera: Fix refcount leak in altera_tse_mdio_create
  64aef8ef net: ipv6: unexport __init-annotated seg6_hmac_init()
  e53cd381 net: xfrm: unexport __init-annotated xfrm4_protocol_init()
  ab64ec2c net: mdio: unexport __init-annotated mdio_bus_init()
  d0c01793 SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer()
  58f2a2d1 net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure
  a4d3e5f1 ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe
  8e3943c5 xprtrdma: treat all calls not a bcall when bc_serv is NULL
  0de02945 video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove()
  81680187 m68knommu: fix undefined reference to `_init_sp'
  bcbca17f m68knommu: set ZERO_PAGE() to the allocated zeroed page
  d449c827 i2c: cadence: Increase timeout per message if necessary
  0816ec55 tracing: Avoid adding tracer option before update_tracer_options
  be1f323f tracing: Fix sleeping function called from invalid context on RT kernel
  bed70256 mips: cpc: Fix refcount leak in mips_cpc_default_phys_base
  7229bdf3 perf c2c: Fix sorting in percent_rmt_hitm_cmp()
  c348b0f8 tcp: tcp_rtx_synack() can be called from process context
  25ff1e3a ubi: ubi_create_volume: Fix use-after-free when volume creation failed
  4da8763a jffs2: fix memory leak in jffs2_do_fill_super
  ffd84704 modpost: fix removing numeric suffixes
  dc1cf8c6 net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register
  5ba81f82 net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()
  c73d6e3c clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value
  ed38d043 firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle
  12aa6d0e serial: st-asc: Sanitize CSIZE and correct PARENB for CS7
  b5bd69a8 serial: sh-sci: Don't allow CS5-6
  ce1c7c6b serial: txx9: Don't allow CS5-6
  d204e6b9 serial: digicolor-usart: Don't allow CS5-6
  d01b980c serial: meson: acquire port->lock in startup()
  79fa3f57 rtc: mt6397: check return value after calling platform_get_resource()
  d5422f32 soc: rockchip: Fix refcount leak in rockchip_grf_init
  c2c7824b coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier
  7ce90fcb rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value
  82036c41 pwm: lp3943: Fix duty calculation in case period was clamped
  8f83ffad USB: storage: karma: fix rio_karma_init return
  86ec2a7f usb: usbip: add missing device lock on tweak configuration cmd
  f20d2d3b usb: usbip: fix a refcount leak in stub_probe()
  241fcb79 tty: goldfish: Use tty_port_destroy() to destroy port
  c528c393 staging: greybus: codecs: fix type confusion of list iterator variable
  f45d40ee pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards
  5b732a9e netfilter: nf_tables: disallow non-stateful expression in sets earlier
  d8a9bd30 MIPS: IP27: Remove incorrect `cpu_has_fpu' override
  d798cacd RDMA/rxe: Generate a completion for unsupported/invalid opcode
  b7b5fbca phy: qcom-qmp: fix reset-controller leak on probe errors
  b8031cbf dt-bindings: gpio: altera: correct interrupt-cells
  f99b4ac6 docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0
  b999d48b phy: qcom-qmp: fix struct clk leak on probe errors
  b4ccbf57 arm64: dts: qcom: ipq8074: fix the sleep clock frequency
  7ef2fb38 gma500: fix an incorrect NULL check on list iterator
  11cc228a carl9170: tx: fix an incorrect use of list iterator
  661f58bb ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control
  d7e30dfc rtl818x: Prevent using not initialized queues
  b290caf5 hugetlb: fix huge_pmd_unshare address update
  339aab23 nodemask.h: fix compilation error with GCC12
  903e2016 iommu/msm: Fix an incorrect NULL check on list iterator
  ef1dc929 um: Fix out-of-bounds read in LDT setup
  663797b0 um: chan_user: Fix winch_tramp() return value
  051ab37a mac80211: upgrade passive scan to active scan on DFS channels after beacon rx
  58f660cc irqchip: irq-xtensa-mx: fix initial IRQ affinity
  284efcae irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x
  a89cb7dd RDMA/hfi1: Fix potential integer multiplication overflow errors
  e84f1fbe md: fix an incorrect NULL check in md_reload_sb
  7a4de924 md: fix an incorrect NULL check in does_sb_need_changing
  cd7f2dbe drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX
  c5f0254e drm/nouveau/clk: Fix an incorrect NULL check on list iterator
  aa25acbe drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.
  cf90ea49 scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled
  198ad040 scsi: dc395x: Fix a missing check on list iterator
  02480e2e ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock
  827b6032 dlm: fix missing lkb refcount handling
  72f2f689 dlm: fix plock invalid read
  24b8206f ext4: avoid cycles in directory h-tree
  d27d3cad ext4: verify dir block before splitting it
  b2b78f5b ext4: fix bug_on in ext4_writepages
  97f802a6 ext4: fix use-after-free in ext4_rename_dir_prepare
  6040bb13 fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages
  dc10d46d iwlwifi: mvm: fix assert 1F04 upon reconfig
  4ba81e79 wifi: mac80211: fix use-after-free in chanctx code
  14f1efd1 perf jevents: Fix event syntax error caused by ExtSel
  3ea3da72 perf c2c: Use stdio interface if slang is not supported
  29c32c21 iommu/amd: Increase timeout waiting for GA log enablement
  2e2e2c71 video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup
  67a85406 iommu/mediatek: Add list_del in mtk_iommu_remove
  e75b5ea2 mailbox: forward the hrtimer if not queued and under a lock
  51e25fbf powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup
  ee9230f0 powerpc/perf: Fix the threshold compare group constraint for power9
  f13064b0 Input: sparcspkr - fix refcount leak in bbc_beep_probe
  4c253caf tty: fix deadlock caused by calling printk() under tty_port->lock
  f1c87fd0 powerpc/4xx/cpm: Fix return value of __setup() handler
  b20eb7bf powerpc/idle: Fix return value of __setup() handler
  0df363b6 powerpc/8xx: export 'cpm_setbrg' for modules
  60673265 drivers/base/node.c: fix compaction sysfs file leak
  07c674e2 pinctrl: mvebu: Fix irq_of_parse_and_map() return value
  14a76215 scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac()
  6b23c0d1 mfd: ipaq-micro: Fix error check return value of platform_get_irq()
  4a756255 ARM: dts: bcm2835-rpi-b: Fix GPIO line names
  5037af84 ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT
  056e7ea2 soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc
  7f868a3a soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc
  456a7052 rxrpc: Don't try to resend the request if we're receiving the reply
  616f7649 rxrpc: Fix listen() setting the bar too high for the prealloc rings
  a6ded4a0 ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition()
  dd6a9303 sctp: read sk->sk_bound_dev_if once in sctp_rcv()
  7f1577c4 m68k: math-emu: Fix dependencies of math emulation support
  7d61dbd7 Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout
  2e004fe9 media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
  31ef1754 media: exynos4-is: Change clk_disable to clk_disable_unprepare
  f68a6bb7 media: st-delta: Fix PM disable depth imbalance in delta_probe
  6ca675f4 regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt
  d42601e9 ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe
  abd16c67 media: uvcvideo: Fix missing check to determine if element is found in list
  7edcb158 drm/msm: return an error pointer in msm_gem_prime_get_sg_table()
  25bbc261 x86/mm: Cleanup the control_va_addr_alignment() __setup handler
  bb6683f9 irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value
  b557d3b3 x86: Fix return value of __setup handlers
  fcd6a886 drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()
  c1bfacf0 drm/msm/hdmi: check return value after calling platform_get_resource_byname()
  ac70d51f drm/msm/dsi: fix error checks and return values for DSI xmit functions
  2a2b72ac x86/pm: Fix false positive kmemleak report in msr_build_context()
  cd576452 fsnotify: fix wrong lockdep annotations
  8625b6bf inotify: show inotify mask flags in proc fdinfo
  a048e0c3 ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix
  863f3c2a spi: img-spfi: Fix pm_runtime_get_sync() error checking
  27d43ea2 HID: hid-led: fix maximum brightness for Dream Cheeky
  e2db2ab9 efi: Add missing prototype for efi_capsule_setup_info
  f8127012 NFC: NULL out the dev->rfkill to prevent UAF
  7e0f7d9c spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout
  160c9561 drm/mediatek: Fix mtk_cec_mask()
  0f1dd763 x86/delay: Fix the wrong asm constraint in delay_loop()
  bc2afeca ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe
  1e932aba ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe
  c3cd4fec ath9k: fix ar9003_get_eepmisc
  f705882f drm: fix EDID struct for old ARM OABI format
  33794e8e RDMA/hfi1: Prevent panic when SDMA is disabled
  fab948d4 macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled
  53f3f7f7 powerpc/xics: fix refcount leak in icp_opal_init()
  232db352 tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate
  c3c6dc18 PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()
  f8da78b2 ARM: hisi: Add missing of_node_put after of_find_compatible_node
  56f548ef ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM
  bbdfb7d4 ARM: versatile: Add missing of_node_put in dcscb_init
  4b554103 fat: add ratelimit to fat*_ent_bread()
  50f077af ARM: OMAP1: clock: Fix UART rate reporting algorithm
  070ddf59 fs: jfs: fix possible NULL pointer dereference in dbFree()
  a38a9824 ARM: dts: ox820: align interrupt controller node name with dtschema
  d5ef9f9b eth: tg3: silence the GCC 12 array-bounds warning
  93dbcff8 rxrpc: Return an error to sendmsg if call failed
  db2b757e media: exynos4-is: Fix compile warning
  7dcb4046 net: phy: micrel: Allow probing without .driver_data
  236d29c5 ASoC: rt5645: Fix errorenous cleanup order
  9e649471 nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags
  d96ed055 openrisc: start CPU timer early in boot
  7023fd8f rtlwifi: Use pr_warn instead of WARN_ONCE
  e3d0eb39 ipmi:ssif: Check for NULL msg when handling events and messages
  d956fe6b dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC
  30cf47a6 s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES
  9f30da95 ASoC: dapm: Don't fold register value changes into notifications
  15e3fbfc ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL
  b1132596 drm/amd/pm: fix the compile warning
  2a551c11 scsi: megaraid: Fix error check return value of register_chrdev()
  5beb85ff media: cx25821: Fix the warning when removing the module
  6041d1a0 media: pci: cx23885: Fix the error handling in cx23885_initdev()

private/msm-google-modules/wlan/qca-wifi-host-cmn: (2 changes)
  d42aaa70 Merge android-msm-pixel-4.14-tm-qpr1 into android-msm-pixel-4.14
  8e54eec6 qcacmn: Address synchronization issue in 11d state machine

private/msm-google-modules/wlan/qcacld-3.0: (3 changes)
  6b3c53e4 Merge android-msm-pixel-4.14-tm-qpr1 into android-msm-pixel-4.14
  d608c12f qcacld-3.0: Allow unprotected diassoc frame when keys are not installed
  52260b9b qcacld-3.0: Drop duplicate auth/assoc frames

private/msm-google/techpack/audio: (1 change)
  67286fc3 asoc: Expose mixer control to set noirq capture volume

Bug: 78533979
Bug: 186777253
Bug: 228095650
Bug: 228694483
Bug: 231624308
Bug: 232204808
Bug: 232443639
Bug: 233410456
Bug: 233713524
Bug: 234091309
Bug: 236042696
Bug: 236690716
Bug: 237729727
Bug: 237991015
Bug: 238572661
Bug: 238701371
Pick-Prebuilt: 463475892
Build-Id: 8874763
Processing-Config: kernel_headers
Change-Id: Ie15af0b50249863e3e61e8f9b82714f442f3466e
Signed-off-by: Lucas Wei <lucaswei@google.com>