Change-Id: I58fe5db676c148d7b0942a2f2e126d16e7ff4a9d

Linux version 4.14.289-g3b72fa8e3a98-ab9066967 (android-
    build@abfarm-2004-0511) (Android (7284624, based on r416183b)
    clang version 12.0.5
    (https://android.googlesource.com/toolchain/llvm-project


    c935d99d7cf2016289302412d708641d52d2f7ee), LLD 12.0.5
    (/buildbot/src/android/llvm-toolchain/out/llvm-project/lld
    c935d99d7cf2016289302412d708641d52d2f7ee)) #1 SMP PREEMPT Thu Sep
    15 02:38:10 UTC 2022

private/msm-google: (3 changes)
  3b72fa8e fbdev: msm: check for valid fence before using objects
  7eecd325 msm: mdp3: fix the use after free problem
  7b1a1cc3 usb: dwc3: gadget: Fix null pointer exception

Bug: 228137851
Bug: 238117846
Bug: 238118608
Pick-Prebuilt: 474437523
Build-Id: 9066967
Processing-Config: kernel_headers
Change-Id: I9f819e69fc74f399619a3e43965d9e67bbd7d9a2
Signed-off-by: Ken Huang <kenbshuang@google.com>

[automerger skipped] coral: update kernel-and-modules prebuilt am: abe9b3b0 -s ours am: 7d00fc0b -s ours

am skip reason: Merged-In I233dde4219fbab66ce0a75d068ea386a987f1edb with SHA-1 7302a395 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/coral-kernel/+/19896771



Change-Id: I25437133746541b8cae4a94b50972c5a2a79758d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

am skip reason: Merged-In I233dde4219fbab66ce0a75d068ea386a987f1edb with SHA-1 7302a395 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/coral-kernel/+/19896771



Change-Id: Id84ffe3b29f33985285d94e1cea282d51f536bc6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Linux version 4.14.276-ga97c0175aeb3-ab9040639 (android-
    build@abfarm-2004-0313) (Android (7284624, based on r416183b)
    clang version 12.0.5
    (https://android.googlesource.com/toolchain/llvm-project


    c935d99d7cf2016289302412d708641d52d2f7ee), LLD 12.0.5
    (/buildbot/src/android/llvm-toolchain/out/llvm-project/lld
    c935d99d7cf2016289302412d708641d52d2f7ee)) #1 SMP PREEMPT Thu Sep
    8 05:47:53 UTC 2022

private/msm-google: (1 change)
  a97c0175 Revert "google_charger: reset the DC AICL when current limit is disabled by thermal daemon"

Bug: 243683011
Pick-Prebuilt: 472886937
Build-Id: 9040639
Processing-Config: kernel_headers
Merged-In: I233dde4219fbab66ce0a75d068ea386a987f1edb
Change-Id: I297b55e62a4b8226e2567f0bb9e27b663533cc74
Signed-off-by: Jack Wu <wjack@google.com>

Linux version 4.14.289-gf007c6bdead4-ab8953612 (android-
    build@abfarm-2004-0510) (Android (7284624, based on r416183b)
    clang version 12.0.5
    (https://android.googlesource.com/toolchain/llvm-project


    c935d99d7cf2016289302412d708641d52d2f7ee), LLD 12.0.5
    (/buildbot/src/android/llvm-toolchain/out/llvm-project/lld
    c935d99d7cf2016289302412d708641d52d2f7ee)) #1 SMP PREEMPT Tue Aug
    16 15:03:20 UTC 2022

private/msm-google: (149 changes)
  f007c6bd LTS: Merge android-4.14-stable (4.14.289) into android-msm-pixel-4.14-tm-qpr1
  b96ccc0d Merge android-msm-pixel-4.14-tm into android-msm-pixel-4.14-tm-qpr1
  ecab2e0c Merge branch 'android-msm-pixel-4.14-tm-security' into android-msm-pixel-4.14-tm
  29a4ac85 regulator: Remove __init from exported symbol
  edba7407 Merge android-4.14-stable (4.14.289) into android-msm-pixel-4.14-tm-lts
  fb38b840 Merge android-msm-pixel-4.14-tm into android-msm-pixel-4.14-tm-qpr1
  b683cd85 FROMLIST: binder: fix UAF of ref->proc caused by race condition
  872de667 arm64/dts: sunfish: AACR/BHI coefficients
  380d5741 ASoC: ops: Shift tested values in snd_soc_put_volsw_sx() by +min
  83c1fc11 FROMGIT: arm64: fix oops in concurrently setting insn_emulation sysctls
  4064e50f google_battery: add new AACR calculation option
  73f6c0fd Merge 4.14.289 into android-4.14-stable
  9c3bf9cf Linux 4.14.289
  d3892a74 can: m_can: m_can_tx_handler(): fix use after free of skb
  4efb260a mm: invalidate hwpoison page cache page in fault path
  48969dfb serial: 8250: fix return error code in serial8250_request_std_resource()
  b17dbd5a tty: serial: samsung_tty: set dma burst_size to 1
  11f2be20 usb: dwc3: gadget: Fix event pending check
  c7352449 USB: serial: ftdi_sio: add Belimo device ids
  31d3649b signal handling: don't use BUG_ON() for debugging
  a24eebed x86: Clear .brk area at early boot
  08fb5e4f irqchip: or1k-pic: Undefine mask_ack for level triggered hardware
  37f99b36 ASoC: wm5110: Fix DRE control
  2a0fcbf8 ASoC: ops: Fix off by one in range control validation
  9ec5a97f net: sfp: fix memory leak in sfp_probe()
  6bfe4446 NFC: nxp-nci: don't print header length mismatch on i2c error
  7bc9e7f7 net: tipc: fix possible refcount leak in tipc_sk_create()
  78185256 platform/x86: hp-wmi: Ignore Sanitization Mode event
  37c16fc2 cpufreq: pmac32-cpufreq: Fix refcount leak bug
  85b9029d netfilter: br_netfilter: do not skip all hooks with 0 priority
  0de3313b virtio_mmio: Restore guest page size on resume
  f69d10db virtio_mmio: Add missing PM calls to freeze/restore
  b9072305 sfc: fix kernel panic when creating VF
  7dcb50a8 seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors
  f461f1ad seg6: fix skb checksum evaluation in SRH encapsulation/insertion
  c9e75bb2 sfc: fix use after free when disabling sriov
  fa4bb704 ipv4: Fix data-races around sysctl_ip_dynaddr.
  aa40aa4c icmp: Fix a data-race around sysctl_icmp_ratemask.
  e68a87c2 icmp: Fix a data-race around sysctl_icmp_ratelimit.
  ad9734eb ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero
  53ecd09e icmp: Fix data-races around sysctl.
  c321e99d cipso: Fix data-races around sysctl.
  f9324197 net: Fix data-races around sysctl_mem.
  20243034 inetpeer: Fix data-races around sysctl.
  a3d742c6 ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle
  f4a5311d xhci: make xhci_handshake timeout for xhci_reset() adjustable
  e97d0b01 xhci: bail out early if driver can't accress host in resume
  77548936 net: dsa: bcm_sf2: force pause link settings
  e1692c9f nilfs2: fix incorrect masking of permission flags for symlinks
  05f76582 cgroup: Use separate src/dst nodes when preloading css_sets for migration
  9b2e1842 ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction
  9198ee7c ARM: 9213/1: Print message about disabled Spectre workarounds only once
  98d0dcf8 net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer
  d5320c6a xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue
  72d7df5f ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model
  1696b3df ALSA: hda - Add fixup for Dell Latitidue E5430
  63da7267 ANDROID: cgroup: Fix for a partially backported patch
  f213da61 msm: kgsl: Perform cache flush on the pages obtained using get_user_pages()
  7c0c59bd Merge 4.14.288 into android-4.14-stable
  424a46ea Linux 4.14.288
  83b1e3ca dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate
  61b4ef19 dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate
  bce1b24d dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly
  b91312b5 ida: don't use BUG_ON() for debugging
  cebc792b i2c: cadence: Unregister the clk notifier in error path
  54896239 pinctrl: sunxi: a83t: Fix NAND function name for some pins
  a9989c72 xfs: remove incorrect ASSERT in xfs_rename
  62f4859d powerpc/powernv: delay rng platform device creation until later in boot
  dac29e2b video: of_display_timing.h: include errno.h
  f7e7c2ad fbcon: Disallow setting font bigger than screen size
  2dc85f33 iommu/vt-d: Fix PCI bus rescan device hot add
  f89c7ae9 net: rose: fix UAF bug caused by rose_t0timer_expiry
  5269209f usbnet: fix memory leak in error case
  c1d806bc can: gs_usb: gs_usb_open/close(): fix memory leak
  1e92fc73 can: grcan: grcan_probe(): remove extra of_node_get()
  d6a59745 mm/slub: add missing TID updates on slab deactivation
  2c66b0c9 esp: limit skb_page_frag_refill use to a single page
  0069fed6 Merge 4.14.287 into android-4.14-stable
  1048779a Linux 4.14.287
  e65a3994 net: usb: qmi_wwan: add Telit 0x1070 composition
  1d30cf5b net: usb: qmi_wwan: add Telit 0x1060 composition
  01b86faa xen/arm: Fix race in RB-tree based P2M accounting
  0b065906 xen/blkfront: force data bouncing when backend is untrusted
  019eaffb xen/netfront: force data bouncing when backend is untrusted
  f2c6f208 xen/netfront: fix leaking data in shared pages
  44dc5bca xen/blkfront: fix leaking data in shared pages
  57e7b026 net: Rename and export copy_skb_header
  778b407b ipv6/sit: fix ipip6_tunnel_get_prl return value
  de67923f sit: use min
  5745aa0d hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails
  2fe26a9a xen/gntdev: Avoid blocking in unmap_grant_pages()
  28d23c3b NFC: nxp-nci: Don't issue a zero length i2c_master_read()
  37b51fe7 nfc: nfcmrvl: Fix irq_of_parse_and_map() return value
  b90ac603 net: bonding: fix use-after-free after 802.3ad slave unbind
  ca638bfe net: bonding: fix possible NULL deref in rlb code
  47fbca31 netfilter: nft_dynset: restore set element counter when failing to update
  85d55a18 caif_virtio: fix race between virtio_device_ready() and ndo_open()
  cfd8430c net: ipv6: unexport __init-annotated seg6_hmac_net_init()
  de393720 usbnet: fix memory allocation in helpers
  51e04827 RDMA/qedr: Fix reporting QP timeout attribute
  1e0b6809 net: usb: ax88179_178a: Fix packet receiving
  597b3bbe net: rose: fix UAF bugs caused by timer handler
  b549fcd0 SUNRPC: Fix READ_PLUS crasher
  836a2cea s390/archrandom: simplify back to earlier design and initialize earlier
  2fb29287 dm raid: fix KASAN warning in raid5_add_disks
  5e161a88 dm raid: fix accesses beyond end of raid member array
  e468764b nvdimm: Fix badblocks clear off-by-one error
  437e22dc UPSTREAM: mm: fix misplaced unlock_page in do_wp_page()
  bbf34693 BACKPORT: mm: do_wp_page() simplification
  c46a7693 UPSTREAM: mm/ksm: Remove reuse_ksm_page()
  bc757c22 UPSTREAM: mm: reuse only-pte-mapped KSM page in do_wp_page()
  e1c62d43 Merge 4.14.286 into android-4.14-stable
  ed2e96e1 Linux 4.14.286
  87fe5447 swiotlb: skip swiotlb_bounce when orig_addr is zero
  6af88cc6 kexec_file: drop weak attribute from arch_kexec_apply_relocations[_add]
  2d83b654 fdt: Update CRC check for rng-seed
  f319c9b4 xen: unexport __init-annotated xen_xlate_map_ballooned_pages()
  580bd75f drm: remove drm_fb_helper_modinit
  9b8f98d2 powerpc/pseries: wire up rng during setup_arch()
  ac0d234f modpost: fix section mismatch check for exported init/exit sections
  45bebbc8 ARM: cns3xxx: Fix refcount leak in cns3xxx_init
  b385cb59 ARM: Fix refcount leak in axxia_boot_secondary
  31d09571 ARM: exynos: Fix refcount leak in exynos_map_pmu
  1e1dc702 ARM: dts: imx6qdl: correct PU regulator ramp delay
  e8bf6231 powerpc/powernv: wire up rng during setup_arch
  62214fdd powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address
  8e27187a powerpc: Enable execve syscall exit tracepoint
  7de4502a xtensa: Fix refcount leak bug in time.c
  35d7e961 xtensa: xtfpga: Fix refcount leak bug in setup
  a1c8501f iio: adc: axp288: Override TS pin bias current for some models
  fd5d8fb2 iio: trigger: sysfs: fix use-after-free on remove
  6003e8b2 iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up()
  504152ac iio: accel: mma8452: ignore the return value of reset operation
  0ab58f6a iio:accel:bma180: rearrange iio trigger get and register
  23d93eaa usb: chipidea: udc: check request status before setting device address
  9cac4d8e iio: adc: vf610: fix conversion mode sysfs node name
  ac879dbe igb: Make DMA faster when CPU is active on the PCIe link
  439bd713 MIPS: Remove repetitive increase irq_err_count
  37d24ef2 x86/xen: Remove undefined behavior in setup_features()
  160eb5fc bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers
  6d778c2a USB: serial: option: add Quectel RM500K module support
  39fb012c USB: serial: option: add Quectel EM05-G modem
  30710dda USB: serial: option: add Telit LE910Cx 0x1250 composition
  97e6ead0 random: quiet urandom warning ratelimit suppression message
  91c20499 dm era: commit metadata in postsuspend after worker stops
  42c75fc8 ata: libata: add qc->flags in ata_qc_complete_template tracepoint
  f2944c94 random: schedule mix_interrupt_randomness() less often
  259742e9 vt: drop old FONT ioctls
  3b0e467d diag: Ensure dci entry is valid before sending the packet

private/msm-google-modules/wlan/qcacld-3.0: (2 changes)
  77c2d11c qcacld-3.0: Update rssi and seqno as part of roam sync indication
  59d39e9e qcacld-3.0: Fill bssid, bss description from roam synch indication BSSID

private/msm-google/techpack/audio: (3 changes)
  591d8c85 Merge android-msm-pixel-4.14-tm into android-msm-pixel-4.14-tm-qpr1
  c105c834 Merge branch 'android-msm-pixel-4.14-tm-security' into android-msm-pixel-4.14-tm
  4f206a31 asoc: Expose mixer control to set noirq capture volume

Bug: 176847924 (ACK)
Bug: 213629074
Bug: 228095839
Bug: 233410456
Bug: 236042696
Bug: 237540956
Bug: 237547109
Bug: 237991015
Bug: 238045452
Bug: 238572661
Bug: 238840970
Bug: 239090393
Bug: 239630375
Bug: 240880948
Bug: 240936839
Pick-Prebuilt: 467872900
Build-Id: 8953612
Processing-Config: kernel_headers
Change-Id: I20b9dbe283e909a8ab6243fd76ba492f7275a323
Signed-off-by: Lucas Wei <lucaswei@google.com>

[automerger skipped] coral: update kernel-and-modules prebuilt am: 1f7d34e0 -s ours am: bbec2e4f -s ours

am skip reason: Merged-In I233dde4219fbab66ce0a75d068ea386a987f1edb with SHA-1 7302a395 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/coral-kernel/+/19591070



Change-Id: I4fada7121bf28629769cbba2bccde97e28e2dc98
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

am skip reason: Merged-In I233dde4219fbab66ce0a75d068ea386a987f1edb with SHA-1 7302a395 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/coral-kernel/+/19591070



Change-Id: I7675f582c53bf6e27ad736c3f5bf0185251537fc
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Linux version 4.14.276-gecab2e0c9918-ab8931408 (android-
    build@abfarm-2004-0286) (Android (7284624, based on r416183b)
    clang version 12.0.5
    (https://android.googlesource.com/toolchain/llvm-project


    c935d99d7cf2016289302412d708641d52d2f7ee), LLD 12.0.5
    (/buildbot/src/android/llvm-toolchain/out/llvm-project/lld
    c935d99d7cf2016289302412d708641d52d2f7ee)) #1 SMP PREEMPT Wed Aug
    10 20:40:15 UTC 2022

private/msm-google: (6 changes)
  ecab2e0c Merge branch 'android-msm-pixel-4.14-tm-security' into android-msm-pixel-4.14-tm
  b683cd85 FROMLIST: binder: fix UAF of ref->proc caused by race condition
  380d5741 ASoC: ops: Shift tested values in snd_soc_put_volsw_sx() by +min
  83c1fc11 FROMGIT: arm64: fix oops in concurrently setting insn_emulation sysctls
  f213da61 msm: kgsl: Perform cache flush on the pages obtained using get_user_pages()
  3b0e467d diag: Ensure dci entry is valid before sending the packet

private/msm-google/techpack/audio: (2 changes)
  c105c834 Merge branch 'android-msm-pixel-4.14-tm-security' into android-msm-pixel-4.14-tm
  4f206a31 asoc: Expose mixer control to set noirq capture volume

Bug: 213629074
Bug: 228095839
Bug: 236042696
Bug: 237540956
Bug: 237547109
Bug: 237991015
Bug: 239630375
Pick-Prebuilt: 452152873
Build-Id: 8931408
Processing-Config: kernel_headers
Merged-In: I233dde4219fbab66ce0a75d068ea386a987f1edb
Change-Id: Ie06671a4a8bc857481c6c78362ce9fcaa7f3ba7e
Signed-off-by: SecurityBot <android-nexus-securitybot@system.gserviceaccount.com>

Linux version 4.14.285-g0c81f3f5e649-ab8874766 (android-
    build@abfarm-2004-0299) (Android (7284624, based on r416183b)
    clang version 12.0.5
    (https://android.googlesource.com/toolchain/llvm-project


    c935d99d7cf2016289302412d708641d52d2f7ee), LLD 12.0.5
    (/buildbot/src/android/llvm-toolchain/out/llvm-project/lld
    c935d99d7cf2016289302412d708641d52d2f7ee)) #1 SMP PREEMPT Wed Jul
    27 08:00:06 UTC 2022

private/msm-google: (500 changes)
  0c81f3f5 LTS: Merge android-4.14-stable (4.14.285) into android-msm-pixel-4.14-tm-qpr1
  6b895c6b ANDROID: cgroup: Fix for a partially backported patch
  7d7589fd Revert "extcon: Modify extcon device to be created after driver data is set"
  9e286987 early_random: Fill HW rng with add_bootloader_randomness
  fa61e293 Merge android-4.14-stable (4.14.285) into android-msm-pixel-4.14-tm-lts
  e48444eb ASoC: ops: Shift tested values in snd_soc_put_volsw_sx() by +min
  d5dfb934 BACKPORT: FROMGIT: Binder: add TF_UPDATE_TXN to replace outdated txn
  f82011a8 Merge android-msm-pixel-4.14-tm into android-msm-pixel-4.14-tm-qpr1
  e333cb86 Merge branch 'android-msm-pixel-4.14-tm-security' into android-msm-pixel-4.14-tm
  fa57475c msm: adsprpc: Handle UAF in fastrpc debugfs read
  d73f58ab Merge 4.14.285 into android-4.14-stable
  6ce4b7e0 UPSTREAM: lib/vsprintf: Hash printed address for netdev bits fallback
  eb8143f9 UPSTREAM: lib/vsprintf: Prepare for more general use of ptr_to_id()
  8fd5652b UPSTREAM: lib/vsprintf: Make ptr argument conts in ptr_to_id()
  54275e67 UPSTREAM: vsprintf: Replace memory barrier with static_key for random_ptr_key update
  9f5d3c79 UPSTREAM: lib/test_printf.c: accept "ptrval" as valid result for plain 'p' tests
  c3ad4c81 UPSTREAM: lib/vsprintf: Do not handle %pO[^F] as %px
  035eef00 BACKPORT: l2tp: fix race in pppol2tp_release with session object destroy
  1085f8d9 BACKPORT: l2tp: don't use inet_shutdown on ppp session destroy
  f051383e Linux 4.14.285
  6a2659e2 tcp: drop the hash_32() part from the index calculation
  9044e70f tcp: increase source port perturb table to 2^16
  9c251cc4 tcp: dynamically allocate the perturb table used by source ports
  43995cd1 tcp: add small random increments to the source port
  f1e99d0a tcp: use different parts of the port_offset for index and offset
  76d3468b tcp: add some entropy in __inet_hash_connect()
  4779af1e xprtrdma: fix incorrect header size calculations
  dbc86569 usb: gadget: u_ether: fix regression in setting fixed MAC address
  1de03ea1 s390/mm: use non-quiescing sske for KVM switch to keyed guest
  1819c764 l2tp: fix race in pppol2tp_release with session object destroy
  352dce3a l2tp: don't use inet_shutdown on ppp session destroy
  f064b12b virtio-pci: Remove wrong address verification in vp_del_vqs()
  7c921328 ext4: add reserved GDT blocks check
  d1d3f02c ext4: make variable "count" signed
  a37c1359 ext4: fix bug_on ext4_mb_use_inode_pa
  2bdcf89a serial: 8250: Store to lsr_save_flags after lsr read
  0ef6917c usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe
  981ee406 usb: dwc2: Fix memory leak in dwc2_hcd_init
  88dfdbc8 USB: serial: io_ti: add Agilent E5805A support
  26cc6879 USB: serial: option: add support for Cinterion MV31 with new baseline
  822e2303 comedi: vmk80xx: fix expression for tx buffer size
  486f68f8 irqchip/gic/realview: Fix refcount leak in realview_gic_of_init
  1baa2f92 certs/blacklist_hashes.c: fix const confusion in certs blacklist
  bbb14cc9 arm64: ftrace: fix branch range checks
  cd646907 net: bgmac: Fix an erroneous kfree() in bgmac_remove()
  6b689129 misc: atmel-ssc: Fix IRQ check in ssc_probe
  c4b0b8ed tty: goldfish: Fix free_irq() on remove
  5ba9956c i40e: Fix call trace in setup_tx_descriptors
  290e3215 pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE
  7112098b random: credit cpu and bootloader seeds by default
  9c1f4408 net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface netdev[napi]_alloc_frag
  0e818d43 ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg
  f21f9083 nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred
  eef6d16c virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed
  c2f62621 scsi: pmcraid: Fix missing resource cleanup in error case
  9ae7bde7 scsi: ipr: Fix missing/incorrect resource cleanup in error case
  ee2eec09 scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology
  0b656479 scsi: vmw_pvscsi: Expand vcpuHint to 16 bits
  2fa58a76 ASoC: wm8962: Fix suspend while playing music
  1ac5efee ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo()
  74301547 ASoC: cs42l56: Correct typo in minimum level for SX volume controls
  f469f014 ASoC: cs42l52: Correct TLV for Bypass Volume
  e9892f40 ASoC: cs53l30: Correct number of volume levels on SX controls
  c44eafbd ASoC: cs42l52: Fix TLV scales for mixer controls
  d4bfd485 random: account for arch randomness in bits
  5e70c1a8 random: mark bootloader randomness code as __init
  aafc845f random: avoid checking crng_ready() twice in random_init()
  9ed7b5bf crypto: drbg - make reseeding from get_random_bytes() synchronous
  eb86176a crypto: drbg - always try to free Jitter RNG instance
  31a5afe0 crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed()
  b05392dc crypto: drbg - track whether DRBG was seeded with !rng_is_initialized()
  b1fb007a crypto: drbg - prepare for more fine-grained tracking of seeding state
  80bc8308 crypto: drbg - always seeded with SP800-90B compliant noise source
  0c03d073 crypto: drbg - add FIPS 140-2 CTRNG for noise source
  fcff2416 Revert "random: use static branch for crng_ready()"
  09b3d357 random: check for signals after page of pool writes
  72389322 random: wire up fops->splice_{read,write}_iter()
  17685dd5 random: convert to using fops->write_iter()
  225c0df1 random: move randomize_page() into mm where it belongs
  d77e58ee random: move initialization functions out of hot pages
  25f97736 random: use proper return types on get_random_{int,long}_wait()
  c24fb5a3 random: remove extern from functions in header
  b0eabe21 random: use static branch for crng_ready()
  37fe03f2 random: credit architectural init the exact amount
  b16b1b66 random: handle latent entropy and command line from random_init()
  1bed234f random: use proper jiffies comparison macro
  319b965f random: remove ratelimiting for in-kernel unseeded randomness
  0251a5fd random: avoid initializing twice in credit race
  4ddc38d3 random: use symbolic constants for crng_init states
  66b2dde0 siphash: use one source of truth for siphash permutations
  eb2fb967 random: help compiler out with fast_mix() by using simpler arguments
  18aa432e random: do not use input pool from hard IRQs
  e4728fd1 random: order timer entropy functions below interrupt functions
  71db2372 random: do not pretend to handle premature next security model
  fed6de0e random: do not use batches when !crng_ready()
  70cf7fb6 random: insist on random_get_entropy() existing in order to simplify
  cf8717e1 xtensa: use fallback for random_get_entropy() instead of zero
  ac7fbc3d sparc: use fallback for random_get_entropy() instead of zero
  d78483f5 um: use fallback for random_get_entropy() instead of zero
  4373bcb9 x86/tsc: Use fallback for random_get_entropy() instead of zero
  f869f2e7 nios2: use fallback for random_get_entropy() instead of zero
  7605b265 arm: use fallback for random_get_entropy() instead of zero
  abb6b7e1 mips: use fallback for random_get_entropy() instead of just c0 random
  63959c58 m68k: use fallback for random_get_entropy() instead of zero
  2142a4d8 timekeeping: Add raw clock fallback for random_get_entropy()
  0a182df6 powerpc: define get_cycles macro for arch-override
  d969c988 alpha: define get_cycles macro for arch-override
  faf62b74 parisc: define get_cycles macro for arch-override
  0da28452 s390: define get_cycles macro for arch-override
  e154c03c ia64: define get_cycles macro for arch-override
  4798c86f init: call time_init() before rand_initialize()
  70e65f65 random: fix sysctl documentation nits
  80052026 random: document crng_fast_key_erasure() destination possibility
  4fab8d78 random: make random_get_entropy() return an unsigned long
  50339a2a random: check for signals every PAGE_SIZE chunk of /dev/[u]random
  cf8136b3 random: check for signal_pending() outside of need_resched() check
  04d681d8 random: do not allow user to keep crng key around on stack
  8a4646c1 random: do not split fast init input in add_hwgenerator_randomness()
  bba3aac2 random: mix build-time latent entropy into pool at init
  cd852448 random: re-add removed comment about get_random_{u32,u64} reseeding
  eed01a6b random: treat bootloader trust toggle the same way as cpu trust toggle
  df5104c1 random: skip fast_init if hwrng provides large chunk of entropy
  2e7ef351 random: check for signal and try earlier when generating entropy
  05237705 random: reseed more often immediately after booting
  f6296073 random: make consistent usage of crng_ready()
  d9a694a9 random: use SipHash as interrupt entropy accumulator
  c8e06a4d random: replace custom notifier chain with standard one
  d2c884e4 random: don't let 644 read-only sysctls be written to
  dd9970a9 random: give sysctl_random_min_urandom_seed a more sensible value
  3e3d705c random: do crng pre-init loading in worker rather than irq
  ddb672cf random: unify cycles_t and jiffies usage and types
  55add4d8 random: cleanup UUID handling
  430374f4 random: only wake up writers after zap if threshold was passed
  23fc6dcd random: round-robin registers as ulong, not u32
  40b5b4b6 random: clear fast pool, crng, and batches in cpuhp bring up
  57a23e72 random: pull add_hwgenerator_randomness() declaration into random.h
  5357d828 random: check for crng_init == 0 in add_device_randomness()
  535d2806 random: unify early init crng load accounting
  58e0c4ff random: do not take pool spinlock at boot
  80adfc1f random: defer fast pool mixing to worker
  b3fa3d15 random: rewrite header introductory comment
  57332ead random: group sysctl functions
  c3502a79 random: group userspace read/write functions
  496b91b6 random: group entropy collection functions
  2ee36c83 random: group entropy extraction functions
  25061d36 random: group initialization wait functions
  ee5705cf random: remove whitespace and reorder includes
  388e4979 random: remove useless header comment
  65419e90 random: introduce drain_entropy() helper to declutter crng_reseed()
  e0a5363f random: deobfuscate irq u32/u64 contributions
  fabaab48 random: add proper SPDX header
  707c01fe random: remove unused tracepoints
  f8a196cf random: remove ifdef'd out interrupt bench
  15c96d9c random: tie batched entropy generation to base_crng generation
  93ce4028 random: zero buffer after reading entropy from userspace
  21682884 random: remove outdated INT_MAX >> 6 check in urandom_read()
  acbf6f48 random: use hash function for crng_slow_load()
  5a595c18 random: absorb fast pool into input pool after fast load
  2d9c1b42 random: do not xor RDRAND when writing into /dev/random
  4ceb0d57 random: ensure early RDSEED goes through mixer on init
  13c423b6 random: inline leaves of rand_initialize()
  d0841f7e random: use RDSEED instead of RDRAND in entropy extraction
  909f3974 random: fix locking in crng_fast_load()
  839a45e6 random: remove batched entropy locking
  8c39bfd9 random: remove use_input_pool parameter from crng_reseed()
  6605171c random: make credit_entropy_bits() always safe
  f82262f2 random: always wake up entropy writers after extraction
  bb375abd random: use linear min-entropy accumulation crediting
  62a2b4bd random: simplify entropy debiting
  ccf535b5 random: use computational hash for entropy extraction
  7ad714b9 random: only call crng_finalize_init() for primary_crng
  7beef135 random: access primary_pool directly rather than through pointer
  35e31291 random: continually use hwgenerator randomness
  5c539eee random: simplify arithmetic function flow in account()
  166f9970 random: access input_pool_data directly rather than through pointer
  56384519 random: cleanup fractional entropy shift constants
  a88fa6c0 random: prepend remaining pool constants with POOL_
  9199ceba random: de-duplicate INPUT_POOL constants
  3653dd77 random: remove unused OUTPUT_POOL constants
  55349296 random: rather than entropy_store abstraction, use global
  482583b7 random: try to actively add entropy rather than passively wait for it
  ac800f0b random: remove unused extract_entropy() reserved argument
  0c8cc8db random: remove incomplete last_data logic
  f450937d random: cleanup integer types
  91393740 crypto: chacha20 - Fix chacha20_block() keystream alignment (again)
  45b1bfbd random: cleanup poolinfo abstraction
  da31a024 random: fix typo in comments
  28601bec random: don't reset crng_init_cnt on urandom_read()
  d15b7abb random: avoid superfluous call to RDRAND in CRNG extraction
  4d4b3fc0 random: early initialization of ChaCha constants
  84647efd random: initialize ChaCha20 constants with correct endianness
  048cc34c random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs
  5d3c00a7 random: harmonize "crng init done" messages
  66794cda random: mix bootloader randomness into pool
  e59fd7eb random: do not re-init if crng_reseed completes before primary init
  eaa94d93 random: do not sign extend bytes for rotation when mixing
  1f89b317 random: use BLAKE2s instead of SHA1 in extraction
  5a0fda8f random: remove unused irq_flags argument from add_interrupt_randomness()
  5cdbdd83 random: document add_hwgenerator_randomness() with other input functions
  b44b759b crypto: blake2s - adjust include guard naming
  34dc98ce crypto: blake2s - include <linux/bug.h> instead of <asm/bug.h>
  9404e8c9 MAINTAINERS: co-maintain random.c
  5ab8e04f random: remove dead code left over from blocking pool
  1fb7c4da random: avoid arch_get_random_seed_long() when collecting IRQ randomness
  6aa1f386 random: add arch_get_random_*long_early()
  3d80af75 powerpc: Use bool in archrandom.h
  4682b96e linux/random.h: Mark CONFIG_ARCH_RANDOM functions __must_check
  b7d3392a linux/random.h: Use false with bool
  cacc99ee linux/random.h: Remove arch_has_random, arch_has_random_seed
  596bcf59 s390: Remove arch_has_random, arch_has_random_seed
  1cb0d7df powerpc: Remove arch_has_random, arch_has_random_seed
  3ebd5da6 x86: Remove arch_has_random, arch_has_random_seed
  c5948834 random: avoid warnings for !CONFIG_NUMA builds
  b0a6d6a7 random: split primary/secondary crng init paths
  03fafcef random: remove some dead code of poolinfo
  a15f8c15 random: fix typo in add_timer_randomness()
  8edfa1c6 random: Add and use pr_fmt()
  5088389a random: convert to ENTROPY_BITS for better code readability
  ea13b4ac random: remove unnecessary unlikely()
  051278bf random: remove kernel.random.read_wakeup_threshold
  3ae32ecd random: delete code to pull data into pools
  ba173440 random: remove the blocking pool
  5eadd290 random: fix crash on multiple early calls to add_bootloader_randomness()
  64bfe2ee char/random: silence a lockdep splat with printk()
  9aefae44 random: make /dev/random be almost like /dev/urandom
  aa38e379 random: ignore GRND_RANDOM in getentropy(2)
  a7b5560f random: add GRND_INSECURE to return best-effort non-cryptographic bytes
  32d4b398 random: Add a urandom_read_nowait() for random APIs that don't warn
  3a8e277b random: Don't wake crng_init_wait when crng_init == 1
  42b10f67 lib/crypto: sha1: re-roll loops to reduce code size
  66680715 lib/crypto: blake2s: move hmac construction into wireguard
  6adb419f crypto: blake2s - generic C library implementation and selftest
  a83bdc08 crypto: Deduplicate le32_to_cpu_array() and cpu_to_le32_array()
  b7c853ad Revert "hwrng: core - Freeze khwrng thread during suspend"
  9ea16743 char/random: Add a newline at the end of the file
  c1f7c987 random: Use wait_event_freezable() in add_hwgenerator_randomness()
  eb1e322c fdt: add support for rng-seed
  0b33f93d random: Support freezable kthreads in add_hwgenerator_randomness()
  eaabe771 random: fix soft lockup when trying to read from an uninitialized blocking pool
  138b6da6 latent_entropy: avoid build error when plugin cflags are not set
  b30c2834 random: document get_random_int() family
  50622066 random: move rand_initialize() earlier
  fd5e41d6 random: only read from /dev/random after its pool has received 128 bits
  72ed3248 drivers/char/random.c: make primary_crng static
  14c55b81 drivers/char/random.c: remove unused stuct poolinfo::poolbits
  c5d75e6d drivers/char/random.c: constify poolinfo_table
  08d453ec random: make CPU trust a boot parameter
  4395f231 random: Make crng state queryable
  61698499 random: remove preempt disabled region
  923eb780 random: add a config option to trust the CPU's hwrng
  005e7ac0 random: Return nbytes filled from hw RNG
  e5572bef random: Fix whitespace pre random-bytes work
  3beefa25 drivers/char/random.c: remove unused dont_count_entropy
  d3146b90 random: optimize add_interrupt_randomness
  d218c093 random: always fill buffer in get_random_bytes_wait
  f83ff022 crypto: chacha20 - Fix keystream alignment for chacha20_block()
  a0764df5 9p: missing chunk of "fs/9p: Don't update file type when updating file attributes"
  ed0705d6 UPSTREAM: ext4: verify dir block before splitting it
  9fcc8943 UPSTREAM: ext4: fix use-after-free in ext4_rename_dir_prepare
  0de9832a BACKPORT: ext4: Only advertise encrypted_casefold when encryption and unicode are enabled
  4b074ce7 BACKPORT: ext4: fix no-key deletion for encrypt+casefold
  11f9a185 BACKPORT: ext4: optimize match for casefolded encrypted dirs
  7a148e11 BACKPORT: ext4: handle casefolding with encryption
  bfec958d Revert "ANDROID: ext4: Handle casefolding with encryption"
  0bedb200 Revert "ANDROID: ext4: Optimize match for casefolded encrypted dirs"
  ca62b046 can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path
  ebe6b429 Merge 4.14.284 into android-4.14-stable
  83bf9688 Revert "ext4: fix use-after-free in ext4_rename_dir_prepare"
  b72b380f Revert "ext4: verify dir block before splitting it"
  84bae268 Linux 4.14.284
  66b7fb8b x86/speculation/mmio: Print SMT warning
  ac87ab44 KVM: x86/speculation: Disable Fill buffer clear within guests
  532c3a51 x86/speculation/mmio: Reuse SRBDS mitigation for SBDS
  ed4fa769 x86/speculation/srbds: Update SRBDS mitigation selection
  ae620928 x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data
  e0fccc13 x86/speculation/mmio: Enable CPU Fill buffer clearing on idle
  87e9881d x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations
  d6087dda x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data
  ba0a1237 x86/speculation: Add a common function for MD_CLEAR mitigation update
  c00f2194 x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug
  62cf367c Documentation: Add documentation for Processor MMIO Stale Data
  5437104b x86/cpu: Add another Alder Lake CPU to the Intel family
  cfc27e49 x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family
  cd92e864 x86/cpu: Add Comet Lake to the Intel CPU models header
  1f7e53f7 x86/CPU: Add more Icelake model numbers
  60eef5eb x86/CPU: Add Icelake model number
  619d3a91 x86/cpu: Add Cannonlake to Intel family
  19249646 x86/cpu: Add Jasper Lake to Intel family
  008649ae cpu/speculation: Add prototype for cpu_show_srbds()
  ec8a6a1e x86/cpu: Add Elkhart Lake to Intel family
  bc1a5b8c Merge 4.14.283 into android-4.14-stable
  1ccc597f Linux 4.14.283
  42726877 tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd
  c1f61bc6 PCI: qcom: Fix unbalanced PHY init on probe errors
  a91d7bb9 mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N
  46a9d87e mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write
  c2e66819 md/raid0: Ignore RAID0 layout if the second zone has only one device
  d13c94c4 powerpc/32: Fix overread/overwrite of thread_struct via ptrace
  c850f24a Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag
  fd39e5a2 ixgbe: fix unexpected VLAN Rx in promisc mode on VF
  7d093d26 ixgbe: fix bcast packets Rx on VF after promisc removal
  d221ce54 nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling
  03878a86 nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION
  2e6e05be ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files
  1ac5e469 cifs: return errors during session setup during reconnects
  83be2cc3 ALSA: hda/conexant - Fix loopback issue with CX20632
  29c3f932 vringh: Fix loop descriptors check in the indirect cases
  3966522c nodemask: Fix return values to be unsigned
  67e40313 nbd: fix io hung while disconnecting device
  165cf2e0 nbd: fix race between nbd_alloc_config() and module removal
  8a1435c8 nbd: call genl_unregister_family() first in nbd_cleanup()
  35b2527d modpost: fix undefined behavior of is_arm_mapping_symbol()
  16a0f0b6 drm/radeon: fix a possible null pointer dereference
  a7afaf79 Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process"
  9f8131fd md: protect md_unregister_thread from reentrancy
  a393b6fa kernfs: Separate kernfs_pr_cont_buf and rename_lock.
  66412d89 serial: msm_serial: disable interrupts in __msm_console_write()
  277faa44 staging: rtl8712: fix uninit-value in r871xu_drv_init()
  3ba2db7c clocksource/drivers/sp804: Avoid error on multiple instances
  6e721f3a extcon: Modify extcon device to be created after driver data is set
  42ecf1aa misc: rtsx: set NULL intfdata when probe fails
  efb15ff4 usb: dwc2: gadget: don't reset gadget's driver->bus
  7b063f1e USB: hcd-pci: Fully suspend across freeze/thaw cycle
  a3d38018 drivers: usb: host: Fix deadlock in oxu_bus_suspend()
  85e20f8b drivers: tty: serial: Fix deadlock in sa1100_set_termios()
  7bffda15 USB: host: isp116x: check return value after calling platform_get_resource()
  381045dc drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop()
  d703d912 tty: Fix a possible resource leak in icom_probe
  078212ad tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()
  9a04367c lkdtm/usercopy: Expand size of "out of frame" object
  27342801 iio: dummy: iio_simple_dummy: check the return value of kstrdup()
  7c49390c drm: imx: fix compiler warning with gcc-12
  1fd12298 net: altera: Fix refcount leak in altera_tse_mdio_create
  64aef8ef net: ipv6: unexport __init-annotated seg6_hmac_init()
  e53cd381 net: xfrm: unexport __init-annotated xfrm4_protocol_init()
  ab64ec2c net: mdio: unexport __init-annotated mdio_bus_init()
  d0c01793 SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer()
  58f2a2d1 net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure
  a4d3e5f1 ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe
  8e3943c5 xprtrdma: treat all calls not a bcall when bc_serv is NULL
  0de02945 video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove()
  81680187 m68knommu: fix undefined reference to `_init_sp'
  bcbca17f m68knommu: set ZERO_PAGE() to the allocated zeroed page
  d449c827 i2c: cadence: Increase timeout per message if necessary
  0816ec55 tracing: Avoid adding tracer option before update_tracer_options
  be1f323f tracing: Fix sleeping function called from invalid context on RT kernel
  bed70256 mips: cpc: Fix refcount leak in mips_cpc_default_phys_base
  7229bdf3 perf c2c: Fix sorting in percent_rmt_hitm_cmp()
  c348b0f8 tcp: tcp_rtx_synack() can be called from process context
  25ff1e3a ubi: ubi_create_volume: Fix use-after-free when volume creation failed
  4da8763a jffs2: fix memory leak in jffs2_do_fill_super
  ffd84704 modpost: fix removing numeric suffixes
  dc1cf8c6 net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register
  5ba81f82 net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry()
  c73d6e3c clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value
  ed38d043 firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle
  12aa6d0e serial: st-asc: Sanitize CSIZE and correct PARENB for CS7
  b5bd69a8 serial: sh-sci: Don't allow CS5-6
  ce1c7c6b serial: txx9: Don't allow CS5-6
  d204e6b9 serial: digicolor-usart: Don't allow CS5-6
  d01b980c serial: meson: acquire port->lock in startup()
  79fa3f57 rtc: mt6397: check return value after calling platform_get_resource()
  d5422f32 soc: rockchip: Fix refcount leak in rockchip_grf_init
  c2c7824b coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier
  7ce90fcb rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value
  82036c41 pwm: lp3943: Fix duty calculation in case period was clamped
  8f83ffad USB: storage: karma: fix rio_karma_init return
  86ec2a7f usb: usbip: add missing device lock on tweak configuration cmd
  f20d2d3b usb: usbip: fix a refcount leak in stub_probe()
  241fcb79 tty: goldfish: Use tty_port_destroy() to destroy port
  c528c393 staging: greybus: codecs: fix type confusion of list iterator variable
  f45d40ee pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards
  5b732a9e netfilter: nf_tables: disallow non-stateful expression in sets earlier
  d8a9bd30 MIPS: IP27: Remove incorrect `cpu_has_fpu' override
  d798cacd RDMA/rxe: Generate a completion for unsupported/invalid opcode
  b7b5fbca phy: qcom-qmp: fix reset-controller leak on probe errors
  b8031cbf dt-bindings: gpio: altera: correct interrupt-cells
  f99b4ac6 docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0
  b999d48b phy: qcom-qmp: fix struct clk leak on probe errors
  b4ccbf57 arm64: dts: qcom: ipq8074: fix the sleep clock frequency
  7ef2fb38 gma500: fix an incorrect NULL check on list iterator
  11cc228a carl9170: tx: fix an incorrect use of list iterator
  661f58bb ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control
  d7e30dfc rtl818x: Prevent using not initialized queues
  b290caf5 hugetlb: fix huge_pmd_unshare address update
  339aab23 nodemask.h: fix compilation error with GCC12
  903e2016 iommu/msm: Fix an incorrect NULL check on list iterator
  ef1dc929 um: Fix out-of-bounds read in LDT setup
  663797b0 um: chan_user: Fix winch_tramp() return value
  051ab37a mac80211: upgrade passive scan to active scan on DFS channels after beacon rx
  58f660cc irqchip: irq-xtensa-mx: fix initial IRQ affinity
  284efcae irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x
  a89cb7dd RDMA/hfi1: Fix potential integer multiplication overflow errors
  e84f1fbe md: fix an incorrect NULL check in md_reload_sb
  7a4de924 md: fix an incorrect NULL check in does_sb_need_changing
  cd7f2dbe drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX
  c5f0254e drm/nouveau/clk: Fix an incorrect NULL check on list iterator
  aa25acbe drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.
  cf90ea49 scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled
  198ad040 scsi: dc395x: Fix a missing check on list iterator
  02480e2e ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock
  827b6032 dlm: fix missing lkb refcount handling
  72f2f689 dlm: fix plock invalid read
  24b8206f ext4: avoid cycles in directory h-tree
  d27d3cad ext4: verify dir block before splitting it
  b2b78f5b ext4: fix bug_on in ext4_writepages
  97f802a6 ext4: fix use-after-free in ext4_rename_dir_prepare
  6040bb13 fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages
  dc10d46d iwlwifi: mvm: fix assert 1F04 upon reconfig
  4ba81e79 wifi: mac80211: fix use-after-free in chanctx code
  14f1efd1 perf jevents: Fix event syntax error caused by ExtSel
  3ea3da72 perf c2c: Use stdio interface if slang is not supported
  29c32c21 iommu/amd: Increase timeout waiting for GA log enablement
  2e2e2c71 video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup
  67a85406 iommu/mediatek: Add list_del in mtk_iommu_remove
  e75b5ea2 mailbox: forward the hrtimer if not queued and under a lock
  51e25fbf powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup
  ee9230f0 powerpc/perf: Fix the threshold compare group constraint for power9
  f13064b0 Input: sparcspkr - fix refcount leak in bbc_beep_probe
  4c253caf tty: fix deadlock caused by calling printk() under tty_port->lock
  f1c87fd0 powerpc/4xx/cpm: Fix return value of __setup() handler
  b20eb7bf powerpc/idle: Fix return value of __setup() handler
  0df363b6 powerpc/8xx: export 'cpm_setbrg' for modules
  60673265 drivers/base/node.c: fix compaction sysfs file leak
  07c674e2 pinctrl: mvebu: Fix irq_of_parse_and_map() return value
  14a76215 scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac()
  6b23c0d1 mfd: ipaq-micro: Fix error check return value of platform_get_irq()
  4a756255 ARM: dts: bcm2835-rpi-b: Fix GPIO line names
  5037af84 ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT
  056e7ea2 soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc
  7f868a3a soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc
  456a7052 rxrpc: Don't try to resend the request if we're receiving the reply
  616f7649 rxrpc: Fix listen() setting the bar too high for the prealloc rings
  a6ded4a0 ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition()
  dd6a9303 sctp: read sk->sk_bound_dev_if once in sctp_rcv()
  7f1577c4 m68k: math-emu: Fix dependencies of math emulation support
  7d61dbd7 Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout
  2e004fe9 media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
  31ef1754 media: exynos4-is: Change clk_disable to clk_disable_unprepare
  f68a6bb7 media: st-delta: Fix PM disable depth imbalance in delta_probe
  6ca675f4 regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt
  d42601e9 ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe
  abd16c67 media: uvcvideo: Fix missing check to determine if element is found in list
  7edcb158 drm/msm: return an error pointer in msm_gem_prime_get_sg_table()
  25bbc261 x86/mm: Cleanup the control_va_addr_alignment() __setup handler
  bb6683f9 irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value
  b557d3b3 x86: Fix return value of __setup handlers
  fcd6a886 drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()
  c1bfacf0 drm/msm/hdmi: check return value after calling platform_get_resource_byname()
  ac70d51f drm/msm/dsi: fix error checks and return values for DSI xmit functions
  2a2b72ac x86/pm: Fix false positive kmemleak report in msr_build_context()
  cd576452 fsnotify: fix wrong lockdep annotations
  8625b6bf inotify: show inotify mask flags in proc fdinfo
  a048e0c3 ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix
  863f3c2a spi: img-spfi: Fix pm_runtime_get_sync() error checking
  27d43ea2 HID: hid-led: fix maximum brightness for Dream Cheeky
  e2db2ab9 efi: Add missing prototype for efi_capsule_setup_info
  f8127012 NFC: NULL out the dev->rfkill to prevent UAF
  7e0f7d9c spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout
  160c9561 drm/mediatek: Fix mtk_cec_mask()
  0f1dd763 x86/delay: Fix the wrong asm constraint in delay_loop()
  bc2afeca ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe
  1e932aba ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe
  c3cd4fec ath9k: fix ar9003_get_eepmisc
  f705882f drm: fix EDID struct for old ARM OABI format
  33794e8e RDMA/hfi1: Prevent panic when SDMA is disabled
  fab948d4 macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled
  53f3f7f7 powerpc/xics: fix refcount leak in icp_opal_init()
  232db352 tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate
  c3c6dc18 PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()
  f8da78b2 ARM: hisi: Add missing of_node_put after of_find_compatible_node
  56f548ef ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM
  bbdfb7d4 ARM: versatile: Add missing of_node_put in dcscb_init
  4b554103 fat: add ratelimit to fat*_ent_bread()
  50f077af ARM: OMAP1: clock: Fix UART rate reporting algorithm
  070ddf59 fs: jfs: fix possible NULL pointer dereference in dbFree()
  a38a9824 ARM: dts: ox820: align interrupt controller node name with dtschema
  d5ef9f9b eth: tg3: silence the GCC 12 array-bounds warning
  93dbcff8 rxrpc: Return an error to sendmsg if call failed
  db2b757e media: exynos4-is: Fix compile warning
  7dcb4046 net: phy: micrel: Allow probing without .driver_data
  236d29c5 ASoC: rt5645: Fix errorenous cleanup order
  9e649471 nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags
  d96ed055 openrisc: start CPU timer early in boot
  7023fd8f rtlwifi: Use pr_warn instead of WARN_ONCE
  e3d0eb39 ipmi:ssif: Check for NULL msg when handling events and messages
  d956fe6b dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC
  30cf47a6 s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES
  9f30da95 ASoC: dapm: Don't fold register value changes into notifications
  15e3fbfc ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL
  b1132596 drm/amd/pm: fix the compile warning
  2a551c11 scsi: megaraid: Fix error check return value of register_chrdev()
  5beb85ff media: cx25821: Fix the warning when removing the module
  6041d1a0 media: pci: cx23885: Fix the error handling in cx23885_initdev()
  2533acb6 media: venus: hfi: avoid null dereference in deinit
  d92b6a6d ath9k: fix QCA9561 PA bias level
  6c5bdaa1 drm/amd/pm: fix double free in si_parse_power_table()
  8487a881 ALSA: jack: Access input_dev under mutex
  209a3aef ACPICA: Avoid cache flush inside virtual machines
  b4628e0d ipw2x00: Fix potential NULL dereference in libipw_xmit()

private/msm-google-modules/wlan/qca-wifi-host-cmn: (1 change)
  8e54eec6 qcacmn: Address synchronization issue in 11d state machine

private/msm-google-modules/wlan/qcacld-3.0: (2 changes)
  d608c12f qcacld-3.0: Allow unprotected diassoc frame when keys are not installed
  52260b9b qcacld-3.0: Drop duplicate auth/assoc frames

Bug: 78533979
Bug: 186777253
Bug: 228095650
Bug: 228694483
Bug: 231624308
Bug: 232204808
Bug: 232443639
Bug: 233410456
Bug: 234091309
Bug: 236690716 (ACK)
Bug: 237729727
Bug: 237991015
Bug: 238572661
Bug: 238701371
Pick-Prebuilt: 463475892
Build-Id: 8874766
Processing-Config: kernel_headers
Change-Id: I436af11a2957c49978b68d0a18dcdd958b33fb41
Signed-off-by: Lucas Wei <lucaswei@google.com>

[automerger skipped] coral: update kernel-and-modules prebuilt am: a10a0cb0 -s ours am: a8e0d60f -s ours

am skip reason: Merged-In I233dde4219fbab66ce0a75d068ea386a987f1edb with SHA-1 7302a395 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/coral-kernel/+/19205917



Change-Id: Ib671f7290d01d79c688a1e15e123598c896237db
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

[automerger skipped] coral: update kernel-and-modules prebuilt am: 452771ef -s ours am: b570b5ab -s ours

am skip reason: Merged-In I233dde4219fbab66ce0a75d068ea386a987f1edb with SHA-1 7302a395 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/coral-kernel/+/18868516



Change-Id: I7487cae943e7cecf144ca0b02c4c9f8eddecea65
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

am skip reason: Merged-In I233dde4219fbab66ce0a75d068ea386a987f1edb with SHA-1 7302a395 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/coral-kernel/+/19205917



Change-Id: I0ccbff58dcb06ddbb87182546e013932dc7a1679
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

am skip reason: Merged-In I233dde4219fbab66ce0a75d068ea386a987f1edb with SHA-1 7302a395 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/coral-kernel/+/18868516



Change-Id: I2b28d88c225ae95f62a4d56d7190a1643e2f19bb
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Linux version 4.14.276-ge333cb8619d0-ab8811257 (android-
    build@abfarm-64-central-00311) (Android (7284624, based on
    r416183b) clang version 12.0.5
    (https://android.googlesource.com/toolchain/llvm-project


    c935d99d7cf2016289302412d708641d52d2f7ee), LLD 12.0.5
    (/buildbot/src/android/llvm-toolchain/out/llvm-project/lld
    c935d99d7cf2016289302412d708641d52d2f7ee)) #1 SMP PREEMPT Fri Jul
    8 12:00:53 UTC 2022

private/msm-google: (3 changes)
  e333cb86 Merge branch 'android-msm-pixel-4.14-tm-security' into android-msm-pixel-4.14-tm
  fa57475c msm: adsprpc: Handle UAF in fastrpc debugfs read
  ca62b046 can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path

Bug: 228095650
Bug: 228694483
Bug: 232443639
Pick-Prebuilt: 452152873
Build-Id: 8811257
Processing-Config: kernel_headers
Merged-In: I233dde4219fbab66ce0a75d068ea386a987f1edb
Change-Id: Ibacc1f30b664bf13e101128e327bf63e193ebd83
Signed-off-by: SecurityBot <android-nexus-securitybot@system.gserviceaccount.com>

Linux version 4.14.281-g3500389692c9-ab8752537 (android-
    build@abfarm-64-central-00213) (Android (7284624, based on
    r416183b) clang version 12.0.5
    (https://android.googlesource.com/toolchain/llvm-project


    c935d99d7cf2016289302412d708641d52d2f7ee), LLD 12.0.5
    (/buildbot/src/android/llvm-toolchain/out/llvm-project/lld
    c935d99d7cf2016289302412d708641d52d2f7ee)) #1 SMP PREEMPT Wed Jun
    22 03:29:53 UTC 2022

private/msm-google: (235 changes)
  35003896 LTS: Merge android-4.14-stable (4.14.281) into android-msm-pixel-4.14-tm-qpr1
  3228fc5f FROMGIT: Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process"
  34e2f0e0 Merge android-4.14-stable (4.14.281) into android-msm-pixel-4.14-tm-lts
  3deaebb9 Merge android-msm-pixel-4.14-tm into android-msm-pixel-4.14-tm-qpr1
  8ae7b4ca Merge branch 'android-msm-pixel-4.14-tm-security' into android-msm-pixel-4.14-tm
  d6860494 net/sched: cls_u32: fix netns refcount changes in u32_change()
  1aaf17cb adsprpc: only trigger ADSP SSR if the command is ADSP domain
  332ee465 nfc: Add mutex lock to avoid use-after-free
  b01c9886 Revert module-lto related patches
  ae2c86d1 arm64/dts: increase adaptive charge rate from 0.08C to 0.15C
  74ca64ee Merge android-msm-pixel-4.14-tm into android-msm-pixel-4.14-tm-qpr1
  d1f639fd mm: backing-dev: Take a reference to the bdi in use to prevent UAF
  9f827b07 fs: explicitly unregister per-superblock BDIs
  ed96eb7f Merge android-msm-pixel-4.14-tm into android-msm-pixel-4.14-tm-qpr1
  2fbe1b33 usb: dwc3: Handle charging behavior when usb data is disabled
  3bf62440 Merge 4.14.281 into android-4.14-stable
  501eec4f Linux 4.14.281
  aaf166f3 Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""
  971e5dad swiotlb: fix info leak with DMA_FROM_DEVICE
  d37dc122 net: atlantic: verify hw_head_ lies within TX buffer ring
  59bfc563 net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe()
  f3f6a40a ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one()
  c5e8f441 mac80211: fix rx reordering with non explicit / psmp ack policy
  ec9639d9 scsi: qla2xxx: Fix missed DMA unmap for aborted commands
  eb3d6cdf perf bench numa: Address compiler error on s390
  1e70037d gpio: mvebu/pwm: Refuse requests with inverted polarity
  6bfcb2b9 gpio: gpio-vf610: do not touch other bits when set the target bit
  3f672198 net: bridge: Clear offload_fwd_mark when passing frame up bridge interface.
  0236adfb igb: skip phy status check where unavailable
  a7e49f1a ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2
  77217269 ARM: 9196/1: spectre-bhb: enable for Cortex-A15
  afa5fe03 net: af_key: add check for pfkey_broadcast in function pfkey_process
  732acfaa NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc
  e5f273c5 net/qla3xxx: Fix a test in ql_reset_work()
  b79bc9f2 clk: at91: generated: consider range when calculating best rate
  5fd9a74b net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup()
  2bee202d net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf()
  327b6689 mmc: core: Default to generic_cmd6_time as timeout in __mmc_switch()
  d471e9e6 mmc: block: Use generic_cmd6_time when modifying INAND_CMD38_ARG_EXT_CSD
  0aa3b639 mmc: core: Specify timeouts for BKOPS and CACHE_FLUSH for eMMC
  e2eed8c3 drm/dp/mst: fix a possible memory leak in fetch_monitor_name()
  dee63319 perf: Fix sys_perf_event_open() race against self
  02fe93d1 ALSA: wavefront: Proper check of get_user() error
  2db68a7c ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame()
  39bdc65b drbd: remove usage of list iterator variable after loop
  2ca4712e MIPS: lantiq: check the return value of kzalloc()
  79e309c1 Input: stmfts - fix reference leak in stmfts_input_open
  9cc62ef5 Input: add bounds checking to input_set_capability()
  9c4a3cec um: Cleanup syscall_handler_t definition/cast, fix warning
  dc650d53 floppy: use a statically allocated error counter
  75875577 msm: kgsl: Add a sysfs node to control performance counter reads
  69d81103 msm: kgsl: Zap performance counters across context switches
  04a1e538 virtio-blk: Use blk_validate_block_size() to validate block size
  3f8076ff ANDROID: dm-bow: Protect Ranges fetched and erased from the RB tree
  25b4b0ab esp: Fix possible buffer overflow in ESP transformation
  60fd4e75 fuse: fix pipe buffer lifetime for direct_io
  6db27dda staging: ion: Prevent incorrect reference counting behavour
  489c9941 Syncup 8585584 to tm related branches
  39bb8c75 Syncup 8585584 to tm related branches
  a72baefb Syncup 8585584 to tm related branches
  53e3d6df Merge android-msm-pixel-4.14-tm into android-msm-pixel-4.14-tm-qpr1
  2cf46d4b Merge 4.14.280 into android-4.14-stable
  dffb5c6f Linux 4.14.280
  bae1a3b8 tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe()
  1f0f6cff ping: fix address binding wrt vrf
  7ed96e91 drm/vmwgfx: Initialize drm_mode_fb_cmd2
  7a34036e cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp()
  a390b1cb USB: serial: option: add Fibocom MA510 modem
  c06d4652 USB: serial: option: add Fibocom L610 modem
  bfc9af1f USB: serial: qcserial: add support for Sierra Wireless EM7590
  38a7be0d USB: serial: pl2303: add device id for HP LM930 Display
  d353241a usb: cdc-wdm: fix reading stuck on device close
  a14619ff tcp: resalt the secret every 10 seconds
  9e8cad4d ASoC: ops: Validate input values in snd_soc_put_volsw_range()
  3218ecf6 ASoC: max98090: Generate notifications on changes for custom control
  ee46fbb0 ASoC: max98090: Reject invalid values in custom control put()
  76e9dd91 hwmon: (f71882fg) Fix negative temperature
  7d3240b4 net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe()
  dc25553c net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending
  c555d482 s390/lcs: fix variable dereferenced before check
  d886b429 s390/ctcm: fix potential memory leak
  84043557 s390/ctcm: fix variable dereferenced before check
  4ae7fe63 hwmon: (ltq-cputemp) restrict it to SOC_XWAY
  a9287cd9 mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection
  98a29c31 netlink: do not reset transport header in netlink_recvmsg()
  f92f3bd8 ipv4: drop dst in multicast routing path
  39eb33b6 net: Fix features skip in for_each_netdev_feature()
  5ed837a7 batman-adv: Don't skb_split skbuffs with frag_list
  587752ea Merge 4.14.279 into android-4.14-stable
  5a1040c1 Merge android-msm-pixel-4.14-sc-qpr3 into android-msm-pixel-4.14-tm
  690285a9 Linux 4.14.279
  9508190f VFS: Fix memory leak caused by concurrently mounting fs with subtype
  7e913360 ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock
  e7786c44 ALSA: pcm: Fix races among concurrent prealloc proc writes
  a1d54f97 ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls
  73867cb2 ALSA: pcm: Fix races among concurrent read/write and buffer changes
  a42aa926 ALSA: pcm: Fix races among concurrent hw_params and hw_free calls
  e4901b98 mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic()
  b273e8cf mm: hugetlb: fix missing cache flush in copy_huge_page_from_user()
  7cba38d2 mmc: rtsx: add 74 Clocks in power on flow
  fd129b65 Bluetooth: Fix the creation of hdev->name
  c0406482 can: grcan: only use the NAPI poll budget for RX
  8adae6c7 can: grcan: grcan_probe(): fix broken system id check for errata workaround needs
  8053f03e block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit
  0ec92c59 MIPS: Use address-of operator on section symbols
  9271f84d LTS: Merge android-4.14-stable (4.14.276) into android-msm-pixel-4.14-tm
  8b585d4c Merge 4.14.278 into android-4.14-stable
  569d1abf Linux 4.14.278
  1777ae09 PCI: aardvark: Fix reading MSI interrupt number
  e7e0b620 PCI: aardvark: Clear all MSIs at setup
  c3cd91f8 dm: interlock pending dm_io and dm_wait_for_bios_completion
  d35aef9c dm: fix mempool NULL pointer race when completing IO
  c71bf322 net: ipv6: ensure we call ipv6_mc_down() at most once
  a29a8672 kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU
  317b1274 net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter()
  86ba85fe btrfs: always log symlinks in full mode
  f9d34cb2 smsc911x: allow using IRQ0
  f1256ed8 net: emaclite: Add error handling for of_address_to_resource()
  85745e56 ASoC: dmaengine: Restore NULL prepare_slave_config() callback
  16fbc210 hwmon: (adt7470) Fix warning on module removal
  c33b2aff NFC: netlink: fix sleep in atomic bug when firmware download timeout
  ced30680 nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs
  6f0ac4cd nfc: replace improper check device_is_registered() in netlink related functions
  f00811fd can: grcan: use ofdev->dev when allocating DMA memory
  3fe89449 can: grcan: grcan_close(): fix deadlock
  09b432bb ASoC: wm8958: Fix change notifications for DSP controls
  7cc93846 firewire: core: extend card->lock in fw_core_handle_bus_reset
  86a7058c firewire: remove check of list iterator against head past the loop body
  1269a656 firewire: fix potential uaf in outbound_phy_packet_callback()
  a176498e Revert "SUNRPC: attempt AF_LOCAL connect on setup"
  84749917 ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes
  4bf68b36 parisc: Merge model and model name into one line in /proc/cpuinfo
  a64e4e7b MIPS: Fix CP0 counter erratum detection for R4k CPUs
  d2b8e8fb drm/vgem: Close use-after-free race in vgem_gem_create
  a87ec461 tty: n_gsm: fix incorrect UA handling
  7b722590 tty: n_gsm: fix wrong command frame length field encoding
  3275bd48 tty: n_gsm: fix wrong command retry handling
  52126280 tty: n_gsm: fix missing explicit ldisc flush
  1f9247bc tty: n_gsm: fix insufficient txframe size
  da0fc1a6 tty: n_gsm: fix malformed counter for out of frame data
  e5afac8d tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2
  6e0925dc x86/cpu: Load microcode during restore_processor_state()
  a40f23a9 drivers: net: hippi: Fix deadlock in rr_close()
  079b2f6c cifs: destage any unwritten data to the server before calling copychunk_write
  71af6d6e x86: __memcpy_flushcache: fix wrong alignment if size > 2^32
  b96335a4 ASoC: wm8731: Disable the regulator when probing fails
  7396d253 bnx2x: fix napi API usage sequence
  c6e4ee69 net: bcmgenet: hide status block before TX timestamping
  2327c385 clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource()
  b5b207f6 bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create()
  38c2fcba tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT
  5ec1be29 ip_gre: Make o_seqno start from 0 in native mode
  3fce1792 pinctrl: pistachio: fix use of irq_of_parse_and_map()
  22741425 sctp: check asoc strreset_chunk in sctp_generate_reconf_event
  7d3c0c12 mtd: rawnand: Fix return value check of wait_for_completion_timeout
  223c5b57 ipvs: correctly print the memory size of ip_vs_conn_tab
  05a83f0b ARM: dts: Fix mmc order for omap3-gta04
  b1041bc2 ARM: OMAP2+: Fix refcount leak in omap_gic_of_init
  500a7173 phy: samsung: exynos5250-sata: fix missing device put in probe error paths
  e1743f44 phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe
  f9928bd9 ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue
  165cddba USB: Fix xhci event ring dequeue pointer ERDP update issue
  00e2b8f7 hex2bin: fix access beyond string end
  98d80ee7 hex2bin: make the function hex_to_bin constant-time
  4e8b2c5d serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device
  354e20da serial: 8250: Also set sticky MCR bits in console restoration
  25af9438 usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind()
  900c008b usb: gadget: uvc: Fix crash when encoding data for usb request
  1d7c29f0 usb: misc: fix improper handling of refcount in uss720_probe()
  a4ed806c iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on()
  8d745840 iio: dac: ad5446: Fix read_raw not returning set value
  c6622726 iio: dac: ad5592r: Fix the missing return value.
  0b3787fc xhci: stop polling roothubs after shutdown
  263c67a4 USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions
  ffc09fb3 USB: serial: option: add support for Cinterion MV32-WA/MV32-WB
  1aa553fa USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader
  98f23429 USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS
  bf9c3fa3 USB: quirks: add STRING quirk for VCOM device
  97a1b90d USB: quirks: add a Realtek card reader
  1a511091 usb: mtu3: fix USB 3.0 dual-role-switch from device to host
  a9ae9dc2 lightnvm: disable the subsystem
  f3fc8b1b Revert "net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link"
  0511cdd4 net/sched: cls_u32: fix netns refcount changes in u32_change()
  1a15c23a hamradio: remove needs_free_netdev to avoid UAF
  feb3d627 hamradio: defer 6pack kfree after unregister_netdev
  b7fa84ae floppy: disable FDRAWCMD by default
  dbc92b7a Merge branch 'android-msm-pixel-4.14-sc-security' into android-msm-pixel-4.14-sc-qpr3
  b8367075 net/packet: fix slab-out-of-bounds access in packet_recvmsg()
  d2aa262b atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
  1f81516a Merge 4.14.277 into android-4.14-stable
  e3a56aaa Linux 4.14.277
  1b95e7ff Revert "net: micrel: fix KS8851_MLL Kconfig"
  093ab7f9 ax25: Fix UAF bugs in ax25 timers
  33121098 ax25: Fix NULL pointer dereferences in ax25 timers
  0b0ae8b9 ax25: fix NPD bug in ax25_disconnect
  62accd46 ax25: fix UAF bug in ax25_send_control()
  c44a453f ax25: Fix refcount leaks caused by ax25_cb_del()
  b8c07f33 ax25: fix UAF bugs of net_device caused by rebinding operation
  9f444ded ax25: fix reference count leaks of ax25_dev
  ef0a2a05 ax25: add refcount in ax25_dev to avoid UAF bugs
  4142a864 block/compat_ioctl: fix range check in BLKGETSIZE
  618a931c staging: ion: Prevent incorrect reference counting behavour
  ad933197 ext4: force overhead calculation if the s_overhead_cluster makes no sense
  a22946d5 ext4: fix overhead calculation to account for the reserved gdt blocks
  28352d88 ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
  501185c1 ext4: fix symlink file size not match to file content
  5e89947d ARC: entry: fix syscall_trace_exit argument
  56a16045 e1000e: Fix possible overflow in LTR decoding
  bbec3559 ASoC: soc-dapm: fix two incorrect uses of list iterator
  6cde4a87 openvswitch: fix OOB access in reserve_sfa_size()
  f5a59fe2 powerpc/perf: Fix power9 event alternatives
  c77597aa dma: at_xdmac: fix a missing check on list iterator
  d56661ff ata: pata_marvell: Check the 'bmdma_addr' beforing reading
  2016098e stat: fix inconsistency between struct stat and struct compat_stat
  326f0588 net: macb: Restart tx only if queue pointer is lagging
  f7fe17fa drm/msm/mdp5: check the return of kzalloc()
  d0dc14c1 brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant
  8df540c5 cifs: Check the IOCB_DIRECT flag, not O_DIRECT
  3828c558 vxlan: fix error return code in vxlan_fdb_append
  251375fb ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant
  9bc79ebd platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative
  56dacbb1 ARM: vexpress/spc: Avoid negative array index when !SMP
  57ba9f22 netlink: reset network and mac headers in netlink_dump()
  fe90cb45 net/packet: fix packet_sock xmit return value checking
  2c89b4d0 dmaengine: imx-sdma: Fix error checking in sdma_event_remap
  90187e02 tcp: Fix potential use-after-free due to double kfree()
  9175c96e tcp: fix race condition when creating child sockets from syncookies
  cba852b3 ALSA: usb-audio: Clear MIDI port active flag after draining
  419adf11 gfs2: assign rgrp glock before compute_bitstructs
  a5e22591 can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path
  b45bda0c tracing: Dump stacktrace trigger to the corresponding instance
  34a11aff tracing: Have traceon and traceoff trigger honor the instance
  a148698a mm: page_alloc: fix building error on -Werror=array-compare
  ab4d82d4 etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead
  baa591fd msm: kgsl: Fix out of bound write in adreno_profile_submit_time

private/msm-google-modules/wlan/qca-wifi-host-cmn: (6 changes)
  64b2f90b Merge android-msm-pixel-4.14-tm into android-msm-pixel-4.14-tm-qpr1
  749407f8 Syncup 8585584 to tm related branches
  141c2ace Syncup 8585584 to tm related branches
  021b9ab4 Merge android-msm-pixel-4.14-tm into android-msm-pixel-4.14-tm-qpr1
  f610e3c6 qcacmn: Use active scan request for P2P Device mode
  77bfcb4a qcacmn: Use active scan request for P2P Device mode

private/msm-google-modules/wlan/qcacld-3.0: (6 changes)
  6ae2789b Merge android-msm-pixel-4.14-tm into android-msm-pixel-4.14-tm-qpr1
  b96ee706 Syncup 8585584 to tm related branches
  f4cc5bea Syncup 8585584 to tm related branches
  7f647cc4 Merge android-msm-pixel-4.14-tm into android-msm-pixel-4.14-tm-qpr1
  aab76f7b qcacld-3.0: Fix array OOB for duplicate rate
  f4918118 qcacld-3.0: Fix array OOB for duplicate rate

Bug: 182815710
Bug: 193434313
Bug: 195565510
Bug: 200839015
Bug: 205573273
Bug: 207093880
Bug: 208269510
Bug: 209469958
Bug: 211125453
Bug: 216140062
Bug: 221009551
Bug: 224546354
Bug: 226679409
Bug: 226679849
Bug: 227452856
Bug: 229184979
Bug: 229347408
Bug: 229982346
Bug: 230967268
Bug: 232784417
Bug: 233075473
Bug: 233576726
Bug: 233713524
Pick-Prebuilt: 456394514
Build-Id: 8752537
Processing-Config: kernel_headers
Change-Id: Ia44a2b7a63ea1a74d9130839db5e34564631f7ed
Signed-off-by: Lucas Wei <lucaswei@google.com>

Linux version 4.14.276-g8ae7b4ca8564-ab8715030 (android-build@abfarm-
    east4-044) (Android (7284624, based on r416183b) clang version
    12.0.5 (https://android.googlesource.com/toolchain/llvm-project


    c935d99d7cf2016289302412d708641d52d2f7ee), LLD 12.0.5
    (/buildbot/src/android/llvm-toolchain/out/llvm-project/lld
    c935d99d7cf2016289302412d708641d52d2f7ee)) #1 SMP PREEMPT Mon Jun
    13 10:05:49 UTC 2022

private/msm-google: (14 changes)
  8ae7b4ca Merge branch 'android-msm-pixel-4.14-tm-security' into android-msm-pixel-4.14-tm
  d6860494 net/sched: cls_u32: fix netns refcount changes in u32_change()
  1aaf17cb adsprpc: only trigger ADSP SSR if the command is ADSP domain
  332ee465 nfc: Add mutex lock to avoid use-after-free
  ae2c86d1 arm64/dts: increase adaptive charge rate from 0.08C to 0.15C
  d1f639fd mm: backing-dev: Take a reference to the bdi in use to prevent UAF
  9f827b07 fs: explicitly unregister per-superblock BDIs
  2fbe1b33 usb: dwc3: Handle charging behavior when usb data is disabled
  04a1e538 virtio-blk: Use blk_validate_block_size() to validate block size
  3f8076ff ANDROID: dm-bow: Protect Ranges fetched and erased from the RB tree
  25b4b0ab esp: Fix possible buffer overflow in ESP transformation
  60fd4e75 fuse: fix pipe buffer lifetime for direct_io
  6db27dda staging: ion: Prevent incorrect reference counting behavour
  489c9941 Syncup 8585584 to tm related branches

Bug: 182815710
Bug: 195565510
Bug: 205573273
Bug: 208269510
Bug: 216140062
Bug: 221009551
Bug: 226679409
Bug: 226679849
Bug: 227452856
Bug: 229347408
Bug: 230967268
Bug: 233075473
Bug: 233576726
Pick-Prebuilt: 452152873
Build-Id: 8715030
Processing-Config: kernel_headers
Merged-In: I233dde4219fbab66ce0a75d068ea386a987f1edb
Change-Id: I532b4b1ec512864bedf1634c4c6b20790f85a578
Signed-off-by: SecurityBot <android-nexus-securitybot@system.gserviceaccount.com>

[automerger skipped] coral: update kernel-and-modules prebuilt am: bae35b8c -s ours am: 64fdcf21 -s ours

am skip reason: Merged-In I233dde4219fbab66ce0a75d068ea386a987f1edb with SHA-1 7302a395 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/coral-kernel/+/18596152



Change-Id: I686cd63a07ef3a87b6629b47ea990af157b938de
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

am skip reason: Merged-In I233dde4219fbab66ce0a75d068ea386a987f1edb with SHA-1 7302a395 is already in history

Original change: https://googleplex-android-review.googlesource.com/c/device/google/coral-kernel/+/18596152



Change-Id: Id8ea7b0e9d2196b0b05c89c2c6b3b3faa7cf085e
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Linux version 4.14.276-g758755778602-ab8639155 (android-
    build@abfarm-64-central-00314) (Android (7284624, based on
    r416183b) clang version 12.0.5
    (https://android.googlesource.com/toolchain/llvm-project


    c935d99d7cf2016289302412d708641d52d2f7ee), LLD 12.0.5
    (/buildbot/src/android/llvm-toolchain/out/llvm-project/lld
    c935d99d7cf2016289302412d708641d52d2f7ee)) #1 SMP PREEMPT Wed May
    25 04:13:49 UTC 2022

private/msm-google: (9 changes)
  75875577 msm: kgsl: Add a sysfs node to control performance counter reads
  69d81103 msm: kgsl: Zap performance counters across context switches
  a72baefb Syncup 8585584 to tm related branches
  5a1040c1 Merge android-msm-pixel-4.14-sc-qpr3 into android-msm-pixel-4.14-tm
  9271f84d LTS: Merge android-4.14-stable (4.14.276) into android-msm-pixel-4.14-tm
  dbc92b7a Merge branch 'android-msm-pixel-4.14-sc-security' into android-msm-pixel-4.14-sc-qpr3
  b8367075 net/packet: fix slab-out-of-bounds access in packet_recvmsg()
  d2aa262b atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
  baa591fd msm: kgsl: Fix out of bound write in adreno_profile_submit_time

private/msm-google-modules/wlan/qca-wifi-host-cmn: (2 changes)
  141c2ace Syncup 8585584 to tm related branches
  77bfcb4a qcacmn: Use active scan request for P2P Device mode

private/msm-google-modules/wlan/qcacld-3.0: (2 changes)
  f4cc5bea Syncup 8585584 to tm related branches
  f4918118 qcacld-3.0: Fix array OOB for duplicate rate

Bug: 193434313
Bug: 200839015
Bug: 207093880
Bug: 209469958
Bug: 211125453
Bug: 224546354
Bug: 229184979
Bug: 229982346
Bug: 233576726
Pick-Prebuilt: 450834513
Build-Id: 8639155
Processing-Config: kernel_headers
Merged-In: I233dde4219fbab66ce0a75d068ea386a987f1edb
Change-Id: I15becc3306b5123144c39034bd064d68e520b056
Signed-off-by: Wilson Sung <wilsonsung@google.com>

Original change: https://googleplex-android-review.googlesource.com/c/device/google/coral-kernel/+/18555792



Change-Id: If870c4dfd9d4c27fff53318f59b99182dc169193
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Original change: https://googleplex-android-review.googlesource.com/c/device/google/coral-kernel/+/18555792



Change-Id: Ifa4d0537296a95943d64a787224b36f66ed6af15
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Reason for revert: branch switching done.

Bug: 229943497
Change-Id: I661831b60f2d42c1a0ce9df44a310ea8f7a016ef

Original change: https://googleplex-android-review.googlesource.com/c/device/google/coral-kernel/+/18555344



Change-Id: Idf697b8a4f9ab1ca4fe00f4b43bf76a568fa6f5b
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Original change: https://googleplex-android-review.googlesource.com/c/device/google/coral-kernel/+/18555344



Change-Id: If5a7f2c421ebfaad7df3216fe02b6325040d2859
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Bug: 229943497
Change-Id: Ia369cb7bfbd171e4d30c256badf9b424338f731a

Original change: https://googleplex-android-review.googlesource.com/c/device/google/coral-kernel/+/18368614



Change-Id: Ib13acf986b8d9a453a1de40577b5a5098b5c8548
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Original change: https://googleplex-android-review.googlesource.com/c/device/google/coral-kernel/+/18368614



Change-Id: I1031e92535b92cd57f5a50d997b95acf6829d62d
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Original change: https://googleplex-android-review.googlesource.com/c/device/google/coral-kernel/+/18368624



Change-Id: Id621b82564f7add11ee35dc1fe78c9d71d0e6e54
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Original change: https://googleplex-android-review.googlesource.com/c/device/google/coral-kernel/+/18368624



Change-Id: I094bb4700f241f9e68ab3f03188bc46441ade53c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Linux version 4.14.276-g88a6a4c60691-ab8585584 (android-
    build@abfarm422) (Android (7284624, based on r416183b) clang
    version 12.0.5 (https://android.googlesource.com/toolchain/llvm-


    project c935d99d7cf2016289302412d708641d52d2f7ee), LLD 12.0.5
    (/buildbot/src/android/llvm-toolchain/out/llvm-project/lld
    c935d99d7cf2016289302412d708641d52d2f7ee)) #1 SMP PREEMPT Fri May
    13 12:24:38 UTC 2022

private/msm-google: (388 changes)
  88a6a4c6 LTS: Merge android-4.14-stable (4.14.276) into android-msm-pixel-4.14
  52c1caea arm64: Disable CONFIG_MITIGATE_SPECTRE_BRANCH_HISTORY
  c8380dcc Merge android-4.14-stable (4.14.276) into android-msm-pixel-4.14-lts
  b296bf0c Merge 4.14.276 into android-4.14-stable
  15a1c6b6 Linux 4.14.276
  bdbbb9ce i2c: pasemi: Wait for write xfers to finish
  0f088623 smp: Fix offline cpu check in flush_smp_call_function_queue()
  a12b356d ARM: davinci: da850-evm: Avoid NULL pointer dereference
  c3b2f23b ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
  846737e6 gcc-plugins: latent_entropy: use /dev/urandom
  07f108f1 mm: kmemleak: take a full lowmem check in kmemleak_*_phys()
  bd945e1e mm, page_alloc: fix build_zonerefs_node()
  3fdb033f drivers: net: slip: fix NPD bug in sl_tx_timeout()
  f2c1d05d scsi: mvsas: Add PCI ID of RocketRaid 2640
  726236c5 gpu: ipu-v3: Fix dev_dbg frequency output
  9599f366 ata: libata-core: Disable READ LOG DMA EXT for Samsung 840 EVOs
  84ddee4e net: micrel: fix KS8851_MLL Kconfig
  43427547 scsi: ibmvscsis: Increase INITIAL_SRP_LIMIT to 1024
  d7c5d79e scsi: target: tcmu: Fix possible page UAF
  3e876ea9 Drivers: hv: vmbus: Prevent load re-ordering when reading ring buffer
  40bf32db drm/amdkfd: Check for potential null return of kmalloc_array()
  47416843 drm/amd: Add USBC connector ID
  1316c285 cifs: potential buffer overflow in handling symlinks
  9d243aff nfc: nci: add flush_workqueue to prevent uaf
  75e105d0 net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link
  5867c4e8 mlxsw: i2c: Fix initialization error flow
  64f42625 gpiolib: acpi: use correct format characters
  d417a859 veth: Ensure eth header is in skb's linear part
  0b9cafca memory: atmel-ebi: Fix missing of_node_put in atmel_ebi_probe
  94c29157 xfrm: policy: match with both mark and mask on user interfaces
  2337c825 cgroup: Use open-time cgroup namespace for process migration perm checks
  f1ce7855 cgroup: Allocate cgroup_file_ctx for kernfs_open_file->priv
  a70bcf9e cgroup: Use open-time credentials for process migraton perm checks
  45ac758e mm/sparsemem: fix 'mem_section' will never be NULL gcc 12 warning
  324d3d66 arm64: module: remove (NOLOAD) from linker script
  d3cb86e6 mm: don't skip swap entry even if zap_details specified
  e05a6ae6 dmaengine: Revert "dmaengine: shdma: Fix runtime PM imbalance on error"
  f31fb76d tools build: Use $(shell ) instead of `` to get embedded libperl's ccopts
  9cb43410 perf: qcom_l2_pmu: fix an incorrect NULL check on list iterator
  1af9f319 arm64: patch_text: Fixup last cpu should be master
  0355387e btrfs: fix qgroup reserve overflow the qgroup limit
  7b5f1702 x86/speculation: Restore speculation related MSRs during S3 resume
  ef460056 x86/pm: Save the MSR validity status at context setup
  5e16dc53 mm/mempolicy: fix mpol_new leak in shared_policy_replace
  eeaf28e2 mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0)
  05343514 Revert "mmc: sdhci-xenon: fix annoying 1.8V regulator warning"
  dcf6be17 drbd: Fix five use after free bugs in get_initial_state
  38bf605b drm/imx: Fix memory leak in imx_pd_connector_get_modes
  5c6c1014 net: stmmac: Fix unset max_speed difference between DT and non-DT platforms
  1e0c0131 scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one()
  dd3a74d9 drm/amdgpu: fix off by one in amdgpu_gfx_kiq_acquire()
  106392f5 mm: fix race between MADV_FREE reclaim and blkdev direct IO read
  add668be net: add missing SOF_TIMESTAMPING_OPT_ID support
  a96c57a7 ipv6: add missing tx timestamping on IPPROTO_RAW
  52b66c46 parisc: Fix CPU affinity for Lasi, WAX and Dino chips
  33bd2435 jfs: prevent NULL deref in diFree
  7deaddb7 virtio_console: eliminate anonymous module_init & module_exit
  18f72552 serial: samsung_tty: do not unlock port->lock for uart_write_wakeup()
  7e907c02 NFS: swap-out must always use STABLE writes.
  4e70b564 NFS: swap IO handling is slightly different for O_DIRECT IO
  5364fe29 SUNRPC/call_alloc: async tasks mustn't block waiting for memory
  aba111de w1: w1_therm: fixes w1_seq for ds28ea00 sensors
  a861234d init/main.c: return 1 from handled __setup() functions
  643a6c26 Bluetooth: Fix use after free in hci_send_acl
  cac5d2a9 xtensa: fix DTC warning unit_address_format
  2e50be51 usb: dwc3: omap: fix "unbalanced disables for smps10_out1" on omap5evm
  499d1984 scsi: libfc: Fix use after free in fc_exch_abts_resp()
  e7036df7 MIPS: fix fortify panic when copying asm exception handlers
  44011dcc bnxt_en: Eliminate unintended link toggle during FW reset
  6abfcac7 macvtap: advertise link netns via netlink
  841304d1 net/smc: correct settings of RMB window update limit
  273a2e62 scsi: aha152x: Fix aha152x_setup() __setup handler return value
  3a15300f scsi: pm8001: Fix pm8001_mpi_task_abort_resp()
  58880025 dm ioctl: prevent potential spectre v1 gadget
  5e580cce iommu/arm-smmu-v3: fix event handling soft lockup
  d7f87c78 PCI: aardvark: Fix support for MSI interrupts
  3fc06760 powerpc: Set crashkernel offset to mid of RMA region
  724e76c0 power: supply: axp20x_battery: properly report current when discharging
  f3372007 scsi: bfa: Replace snprintf() with sysfs_emit()
  d065ad74 scsi: mvsas: Replace snprintf() with sysfs_emit()
  0dff88c6 powerpc: dts: t104xrdb: fix phy type for FMAN 4/5
  8eff95bc ptp: replace snprintf with sysfs_emit
  ed3dfdaa ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111
  f15c05f4 KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs
  3166859b ARM: 9187/1: JIVE: fix return value of __setup handler
  0e2c26dd rtc: wm8350: Handle error for wm8350_register_irq
  f7e252d7 ubifs: Rectify space amount budget for mkdir/tmpfile operations
  3362843a KVM: x86: Forbid VMM to set SYNIC/STIMER MSRs when SynIC wasn't activated
  1dd67893 openvswitch: Fixed nd target mask field in the flow dump.
  5fc5e965 ARM: dts: spear13xx: Update SPI dma properties
  89f1b6ab ARM: dts: spear1340: Update serial node properties
  bab8585e ASoC: topology: Allow TLV control to be either read or write
  801d547f ubi: fastmap: Return error code if memory allocation fails in add_aeb()
  7ebdd69e mm/memcontrol: return 1 from cgroup.memory __setup() handler
  c8acbd29 mm/mmap: return 1 from stack_guard_gap __setup() handler
  d208ea44 ACPI: CPPC: Avoid out of bounds access when parsing _CPC data
  f149b1bd ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl
  37850c72 pinctrl: pinconf-generic: Print arguments for bias-pull-*
  a598bd99 gfs2: Make sure FITRIM minlen is rounded up to fs block size
  5598442e can: mcba_usb: properly check endpoint type
  cdced101 can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path
  d6a8cbe9 ubifs: rename_whiteout: correct old_dir size computing
  defaaeaa ubifs: setflags: Make dirtied_ino_d 8 bytes aligned
  a94ab3ad ubifs: Add missing iput if do_tmpfile() failed in rename whiteout
  8b3c7be1 ubifs: rename_whiteout: Fix double free for whiteout_ui->data
  c1dd3547 KVM: Prevent module exit until all VMs are freed
  43195a0c scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair()
  70f94258 scsi: qla2xxx: Fix warning for missing error code
  66632fdd powerpc/lib/sstep: Fix build errors with newer binutils
  aebe0422 powerpc/lib/sstep: Fix 'sthcx' instruction
  3fac2cb5 mmc: host: Return an error when ->enable_sdio_irq() ops is missing
  dd551d0a media: hdpvr: initialize dev->worker at hdpvr_register_videodev
  0ec74667 video: fbdev: sm712fb: Fix crash in smtcfb_write()
  82d919fb ARM: mmp: Fix failure to remove sram device
  3733f47f ARM: tegra: tamonten: Fix I2C3 pad setting
  a85f8e3f media: cx88-mpeg: clear interrupt status register before streaming video
  7c58a0a8 ASoC: soc-core: skip zero num_dai component in searching dai name
  a1310632 video: fbdev: omapfb: panel-tpo-td043mtea1: Use sysfs_emit() instead of snprintf()
  f419488d video: fbdev: omapfb: panel-dsi-cm: Use sysfs_emit() instead of snprintf()
  4ee0f9aa ARM: dts: bcm2837: Add the missing L1/L2 cache information
  85cd89ab ARM: dts: qcom: fix gic_irq_domain_translate warnings for msm8960
  4f50db5f video: fbdev: omapfb: acx565akm: replace snprintf with sysfs_emit
  1d3fb464 video: fbdev: cirrusfb: check pixclock to avoid divide by zero
  944db001 video: fbdev: w100fb: Reset global state
  580e5d38 video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
  21d49023 ntfs: add sanity check on allocation size
  d666dfaa ext4: don't BUG if someone dirty pages without asking ext4 first
  29b0cbee spi: tegra20: Use of_device_get_match_data()
  78c4d68b PM: core: keep irq flags in device_pm_check_callbacks()
  160fd763 ACPI/APEI: Limit printable size of BERT table data
  9e496fc3 ACPICA: Avoid walking the ACPI Namespace if it is not there
  f7790ed2 irqchip/nvic: Release nvic_base upon failure
  79dc4070 Fix incorrect type in assignment of ipv6 port for audit
  27f5f2b8 loop: use sysfs_emit() in the sysfs xxx show()
  87b05d87 selinux: use correct type for context length
  fdf2c2e4 lib/test: use after free in register_test_dev_kmod()
  9b54b4d0 NFSv4/pNFS: Fix another issue with a list iterator pointing to the head
  85864278 net/x25: Fix null-ptr-deref caused by x25_disconnect
  c517359d qlcnic: dcb: default to returning -EOPNOTSUPP
  85b7ffb1 net: phy: broadcom: Fix brcm_fet_config_init()
  e9f72105 xen: fix is_xen_pmu()
  6923164d netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options
  c73c5c56 jfs: fix divide error in dbNextAG
  b245b17e kgdbts: fix return value of __setup handler
  c7a24a17 kgdboc: fix return value of __setup handler
  3f99d9dd tty: hvc: fix return value of __setup handler
  d4d5cc4b pinctrl/rockchip: Add missing of_node_put() in rockchip_pinctrl_probe
  0356d4b6 pinctrl: nomadik: Add missing of_node_put() in nmk_pinctrl_probe
  4f514e6a pinctrl: mediatek: Fix missing of_node_put() in mtk_pctrl_init
  a5ddd85b NFS: remove unneeded check in decode_devicenotify_args()
  e5ec5b77 clk: tegra: tegra124-emc: Fix missing put_device() call in emc_ensure_emc_driver
  492a7a07 clk: clps711x: Terminate clk_div_table with sentinel element
  c5f00a4b clk: loongson1: Terminate clk_div_table with sentinel element
  29922729 remoteproc: qcom_wcnss: Add missing of_node_put() in wcnss_alloc_memory_region
  775be231 clk: qcom: clk-rcg2: Update the frac table for pixel clock
  35b1cf7e iio: adc: Add check for devm_request_threaded_irq
  48db011d serial: 8250: Fix race condition in RTS-after-send handling
  1345af48 serial: 8250_mid: Balance reference count for PCI DMA device
  96219d36 staging:iio:adc:ad7280a: Fix handing of device address bit reversing.
  fac80bb2 pwm: lpc18xx-sct: Initialize driver data and hardware before pwmchip_add()
  125b7c92 mxser: fix xmit_buf leak in activate when LSR == 0xff
  edaccad5 mfd: asic3: Add missing iounmap() on error asic3_mfd_probe
  5082185e tcp: ensure PMTU updates are processed during fastopen
  97452456 i2c: mux: demux-pinctrl: do not deactivate a master that is not active
  ac5883a8 af_netlink: Fix shift out of bounds in group mask calculation
  9e2e19d0 USB: storage: ums-realtek: fix error code in rts51x_read_mem()
  0856bf27 mtd: rawnand: atmel: fix refcount issue in atmel_nand_controller_init
  bf273a71 MIPS: RB532: fix return value of __setup handler
  42161237 vxcan: enable local echo for sent CAN frames
  f9a945d8 mfd: mc13xxx: Add check for mc13xxx_irq_request
  9aeea41f powerpc/sysdev: fix incorrect use to determine if list is empty
  1c63f5ab PCI: Reduce warnings on possible RW1C corruption
  ae64b838 power: supply: wm8350-power: Add missing free in free_charger_irq
  8daeb3d5 power: supply: wm8350-power: Handle error for wm8350_register_irq
  820c1730 i2c: xiic: Make bus names unique
  de7055a0 KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor()
  d4300353 KVM: x86: Fix emulation in writing cr8
  117d2bc5 power: supply: bq24190_charger: Fix bq24190_vbus_is_enabled() wrong false return
  5e8fdb63 drm/tegra: Fix reference leak in tegra_dsi_ganged_probe
  94fe9ee8 ext2: correct max file size computing
  f00f9327 TOMOYO: fix __setup handlers return values
  d6ec4471 scsi: pm8001: Fix abort all task initialization
  cf54511c scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config()
  913d460f scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req()
  b90cf4f2 scsi: pm8001: Fix command initialization in pm80XX_send_read_log()
  455750e8 dm crypt: fix get_key_size compiler warning if !CONFIG_KEYS
  c120ca23 iwlwifi: Fix -EIO error code that is never returned
  628f57bb HID: i2c-hid: fix GET/SET_REPORT for unnumbered reports
  19aa3c98 power: supply: ab8500: Fix memory leak in ab8500_fg_sysfs_init
  a2ccf3fd ray_cs: Check ioremap return value
  ab079f40 power: reset: gemini-poweroff: Fix IRQ check in gemini_poweroff_probe
  e352acdd ath9k_htc: fix uninit value bugs
  97aa6361 drm/edid: Don't clear formats if using deep color
  a94ef82d mtd: onenand: Check for error irq
  9674267a ASoC: msm8916-wcd-digital: Fix missing clk_disable_unprepare() in msm8916_wcd_digital_probe
  467dc431 ASoC: imx-es8328: Fix error return code in imx_es8328_probe()
  790d2628 ASoC: mxs: Fix error handling in mxs_sgtl5000_probe
  e49f0ced ASoC: dmaengine: do not use a NULL prepare_slave_config() callback
  8fc66b55 video: fbdev: omapfb: Add missing of_node_put() in dvic_probe_of
  dbb6095c ASoC: fsi: Add check for clk_enable
  d1ab8ed6 ASoC: wm8350: Handle error for wm8350_register_irq
  f8b7b9a0 ASoC: atmel: Add missing of_node_put() in at91sam9g20ek_audio_probe
  03054f22 media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED
  b2b65c90 ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction
  c4733b0a memory: emif: check the pointer temp in get_device_details()
  54eee30e memory: emif: Add check for setup_interrupts
  6e61d024 ASoC: atmel_ssc_dai: Handle errors for clk_enable
  e4baf488 ASoC: mxs-saif: Handle errors for clk_enable
  74de43ca printk: fix return value of printk.devkmsg __setup handler
  0458a23b arm64: dts: broadcom: Fix sata nodename
  5851281e arm64: dts: ns2: Fix spi-cpol and spi-cpha property
  f349bf08 ALSA: spi: Add check for clk_enable()
  47e99b32 ASoC: ti: davinci-i2s: Add check for clk_enable()
  a97130cd media: usb: go7007: s2250-board: fix leak in probe()
  8a8ddc41 soc: ti: wkup_m3_ipc: Fix IRQ check in wkup_m3_ipc_probe
  1c445ce9 ARM: dts: qcom: ipq4019: fix sleep clock
  817cd6ad video: fbdev: fbcvt.c: fix printing in fb_cvt_print_name()
  0fd28dae video: fbdev: smscufx: Fix null-ptr-deref in ufx_usb_probe()
  c7bc9395 media: coda: Fix missing put_device() call in coda_get_vdoa_data
  a615ea94 perf/x86/intel/pt: Fix address filter config for 32-bit kernel
  1b306bed perf/core: Fix address filter parser for multiple filters
  55dc09d4 sched/debug: Remove mpol_get/put and task_lock/unlock from sched_show_numa
  54aa7c1e clocksource: acpi_pm: fix return value of __setup handler
  e6ee35c4 hwmon: (pmbus) Add Vin unit off handling
  6233be14 crypto: ccp - ccp_dmaengine_unregister release dma channels
  12fdc58d ACPI: APEI: fix return value of __setup handlers
  5e018fa2 crypto: vmx - add missing dependencies
  85f3f6b5 hwrng: atmel - disable trng on failure path
  0f009684 PM: suspend: fix return value of __setup handler
  566dee27 PM: hibernate: fix __setup handler error handling
  eb027637 hwmon: (sch56xx-common) Replace WDOG_ACTIVE with WDOG_HW_RUNNING
  282e1791 hwmon: (pmbus) Add mutex to regulator ops
  f4ba8ad2 spi: pxa2xx-pci: Balance reference count for PCI DMA device
  0fec0765 selftests/x86: Add validity check and allow field splitting
  99fc432a spi: tegra114: Add missing IRQ check in tegra_spi_probe
  f655997d crypto: mxs-dcp - Fix scatterlist processing
  582ba286 crypto: authenc - Fix sleep in atomic context in decrypt_tail
  312366a6 PCI: pciehp: Clear cmd_busy bit in polling mode
  fb223974 brcmfmac: pcie: Replace brcmf_pcie_copy_mem_todev with memcpy_toio
  c4c71724 brcmfmac: firmware: Allocate space for default boardrev in nvram
  8e720f0f media: davinci: vpif: fix unbalanced runtime PM get
  ba12400e DEC: Limit PMAX memory probing to R3k systems
  1c01f607 lib/raid6/test: fix multiple definition linking error
  4339a4a6 thermal: int340x: Increase bitmap size
  f02e2636 carl9170: fix missing bit-wise or operator for tx_params
  5dbda4d9 ARM: dts: exynos: add missing HDMI supplies on SMDK5420
  42c50c50 ARM: dts: exynos: add missing HDMI supplies on SMDK5250
  edea2626 ARM: dts: exynos: fix UART3 pins configuration in Exynos5250
  75cb145a ARM: dts: at91: sama5d2: Fix PMERRLOC resource size
  36ffb3d2 video: fbdev: atari: Atari 2 bpp (STe) palette bugfix
  2a616cc4 video: fbdev: sm712fb: Fix crash in smtcfb_read()
  a2793cb5 drivers: hamradio: 6pack: fix UAF bug caused by mod_timer()
  923339c7 ACPI: properties: Consistently return -ENOENT if there are no more references
  0452d32b drbd: fix potential silent data corruption
  db9a101f ALSA: cs4236: fix an incorrect NULL check on list iterator
  385cc5a9 Revert "Input: clear BTN_RIGHT/MIDDLE on buttonpads"
  5305bf60 qed: validate and restrict untrusted VFs vlan promisc mode
  a45b2074 qed: display VF trust config
  2bf80bc8 scsi: libsas: Fix sas_ata_qc_issue() handling of NCQ NON DATA commands
  ce6d45f1 mempolicy: mbind_range() set_policy() after vma_merge()
  4d6d259e mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node
  b36bccb0 jffs2: fix memory leak in jffs2_scan_medium
  9a0f6610 jffs2: fix memory leak in jffs2_do_mount_fs
  3bd24541 jffs2: fix use-after-free in jffs2_clear_xattr_subsystem
  29d967c1 can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path
  e4bc03a9 pinctrl: samsung: drop pin banks references on error paths
  438068f4 NFSD: prevent underflow in nfssvc_decode_writeargs()
  dd7d3a60 SUNRPC: avoid race between mod_timer() and del_timer_sync()
  2b54b8a6 Documentation: update stable tree link
  baa81082 Documentation: add link to stable release candidate tree
  f1442ed8 ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE
  c2fbfa07 clk: uniphier: Fix fixed-rate initialization
  969a2985 iio: inkern: make a best effort on offset calculation
  40e7d188 iio: inkern: apply consumer scale when no channel scale is available
  bfa6a051 iio: inkern: apply consumer scale on IIO_VAL_INT cases
  0ee84d70 coresight: Fix TRCCONFIGR.QE sysfs interface
  afed7e5f USB: usb-storage: Fix use of bitfields for hardware data in ene_ub6250.c
  87dbe032 virtio-blk: Use blk_validate_block_size() to validate block size
  cb55a760 block: Add a helper to validate the block size
  473a66f9 tpm: fix reference counting for struct tpm_chip
  0ab55e14 fuse: fix pipe buffer lifetime for direct_io
  fcdaaeb7 af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register
  7a3d208f spi: Fix erroneous sgs value with min_t()
  fa13ca63 spi: Fix invalid sgs value
  e4ba28fb ethernet: sun: Free the coherent when failing in probing
  ce1a7ed7 virtio_console: break out of buf poll on remove
  46291a4f netdevice: add the case if dev is NULL
  4c0cfd55 USB: serial: simple: add Nokia phone driver
  6485772c USB: serial: pl2303: add IBM device IDs
  6e240531 ANDROID: incremental-fs: limit mount stack depth
  1848ba7e UPSTREAM: binderfs: use __u32 for device numbers
  b5814a7d Merge 4.14.275 into android-4.14-stable
  74766a97 Linux 4.14.275
  2e53c83e arm64: Use the clearbhb instruction in mitigations
  c20917a7 arm64: add ID_AA64ISAR2_EL1 sys register
  067b8175 KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated
  3e390412 arm64: Mitigate spectre style branch history side channels
  0b1c660d KVM: arm64: Add templates for BHB mitigation sequences
  e2ee0b0d arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2
  913fa37c arm64: Add percpu vectors for EL1
  1291f9f7 arm64: entry: Add macro for reading symbol addresses from the trampoline
  6932c825 arm64: entry: Add vectors that have the bhb mitigation sequences
  7bcd194d arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations
  64bb608e arm64: entry: Allow the trampoline text to occupy multiple pages
  55424700 arm64: entry: Make the kpti trampoline's kpti sequence optional
  10fbae21 arm64: entry: Move trampoline macros out of ifdef'd section
  dc8f7c10 arm64: entry: Don't assume tramp_vectors is the start of the vectors
  e4b37f25 arm64: entry: Allow tramp_alias to access symbols after the 4K boundary
  2ca20e30 arm64: entry: Move the trampoline data page before the text page
  041f3c09 arm64: entry: Free up another register on kpti's tramp_exit path
  c199e434 arm64: entry: Make the trampoline cleanup optional
  e92de6ac arm64: entry.S: Add ventry overflow sanity checks
  63271842 arm64: Add Cortex-X2 CPU part definition
  80c55ca1 arm64: Add Neoverse-N2, Cortex-A710 CPU part definition
  60cf0854 arm64: Add part number for Arm Cortex-A77
  52d19a0f arm64: Add part number for Neoverse N1
  3aee35ff arm64: Make ARM64_ERRATUM_1188873 depend on COMPAT
  786ec176 arm64: Add silicon-errata.txt entry for ARM erratum 1188873
  6bfdf5a6 arm64: arch_timer: avoid unused function warning
  9aeb4a5a arm64: arch_timer: Add workaround for ARM erratum 1188873
  c529afa1 Merge 4.14.274 into android-4.14-stable
  af1af6eb Linux 4.14.274
  f25366d9 llc: only change llc->dev when bind() succeeds
  c1d9c362 mac80211: fix potential double free on mesh join
  29116501 crypto: qat - disable registration of algorithms
  c2ddbb72 ACPI: video: Force backlight native for Clevo NL5xRU and NL5xNU
  419906dd ACPI: battery: Add device HID and quirk for Microsoft Surface Go 3
  1b5146d4 ACPI / x86: Work around broken XSDT on Advantech DAC-BJ01 board
  a3cc3286 netfilter: nf_tables: initialize registers in nft_do_chain()
  6c35f6cd drivers: net: xgene: Fix regression in CRC stripping
  7115e8d6 ALSA: pci: fix reading of swapped values from pcmreg in AC97 codec
  d097387e ALSA: cmipci: Restore aux vol on suspend/resume
  c5034a73 ALSA: usb-audio: Add mute TLV for playback volumes on RODE NT-USB
  11a63e57 ALSA: pcm: Add stream lock during PCM reset ioctl operations
  0f294bc0 llc: fix netdevice reference leaks in llc_ui_bind()
  f0ddc518 thermal: int340x: fix memory leak in int3400_notify()
  97f4a463 staging: fbtft: fb_st7789v: reset display before initialization
  2c8abafd esp: Fix possible buffer overflow in ESP transformation
  5149b895 net: ipv6: fix skb_over_panic in __ip6_append_data
  d908d277 nfc: st21nfca: Fix potential buffer overflows in EVT_TRANSACTION
  ff318e0e Merge 4.14.273 into android-4.14-stable
  004bfaaf Linux 4.14.273
  01064d85 perf symbols: Fix symbol size calculation condition
  fc8033a5 Input: aiptek - properly check endpoint type
  e2d3a700 usb: gadget: Fix use-after-free bug by not setting udc->dev.driver
  c7953cf0 usb: gadget: rndis: prevent integer overflow in rndis_set_response()
  a5b9b649 net: handle ARPHRD_PIMREG in dev_is_mac_header_xmit()
  c7a9b80d atm: eni: Add check for dma_map_single
  b1e27cda net/packet: fix slab-out-of-bounds access in packet_recvmsg()
  6c7f2aaf efi: fix return value of __setup handlers
  d6ea7565 fs: sysfs_emit: Remove PAGE_SIZE alignment check
  b8fe47f8 kselftest/vm: fix tests build with old libc
  707a248f sfc: extend the locking on mcdi->seqno
  b630da9e tcp: make tcp_read_sock() more robust
  a3d04dd8 nl80211: Update bss channel on channel switch for P2P_CLIENT
  7cf4345b atm: firestream: check the return value of ioremap() in fs_init()
  53207668 can: rcar_canfd: rcar_canfd_channel_probe(): register the CAN device when fully ready
  724eceda ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE
  32813321 MIPS: smp: fill in sibling and core maps earlier
  dd26db6c ARM: dts: rockchip: fix a typo on rk3288 crypto-controller
  26fe3777 arm64: dts: rockchip: fix rk3399-puma eMMC HS400 signal integrity
  d429be3b xfrm: Fix xfrm migrate issues when address family changes
  8a7952ec sctp: fix the processing for INIT_ACK chunk
  878cc8e4 sctp: fix the processing for INIT chunk
  00973e13 Merge 4.14.272 into android-4.14-stable
  eb045674 Linux 4.14.272
  e0956dd9 btrfs: unlock newly allocated extent buffer after error
  227610ef ext4: add check to prevent attempting to resize an fs with sparse_super2
  8319ad4e ARM: fix Thumb2 regression with Spectre BHB
  5864f2be virtio: acknowledge all features before access
  3bfbae14 virtio: unexport virtio_finalize_features
  83a9c886 staging: gdm724x: fix use after free in gdm_lte_rx()
  ca8c9fd3 ARM: Spectre-BHB: provide empty stub for non-config
  086e3685 selftests/memfd: clean up mapping in mfd_fail_write
  33d11cef tracing: Ensure trace buffer is at least 4096 bytes large
  e8c17cd6 Revert "xen-netback: Check for hotplug-status existence before watching"
  1306c1bb Revert "xen-netback: remove 'hotplug-status' once it has served its purpose"
  081369ad net-sysfs: add check for netdevice being present to speed_show
  41a2864c sctp: fix kernel-infoleak for SCTP sockets
  29875491 gpio: ts4900: Do not set DAT and OE together
  32e866ae NFC: port100: fix use-after-free in port100_send_complete
  a4688533 net/mlx5: Fix size field in bufferx_reg struct
  d03aba82 ax25: Fix NULL pointer dereference in ax25_kill_by_device
  890d399d net: ethernet: lpc_eth: Handle error for clk_enable
  27e0eb1c net: ethernet: ti: cpts: Handle error for clk_enable
  b7220f8e ethernet: Fix error handling in xemaclite_of_probe
  d7ba28a3 qed: return status of qed_iov_get_link
  9ace998a net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare()

Bug: 211066171
Bug: 211161296
Bug: 211213635
Bug: 211914587
Bug: 213137376
Bug: 213140206
Bug: 213215835
Bug: 228263403
Bug: 229982346
Pick-Prebuilt: 448434752
Build-Id: 8585584
Processing-Config: kernel_headers
Change-Id: I43fb345d0edae7d3999d89998cd94ee97c12e0b6
Signed-off-by: Lucas Wei <lucaswei@google.com>

Linux version 4.14.271-gdffdd7b6a203-ab8578179 (android-build@abfarm-
    east4-092) (Android (7284624, based on r416183b) clang version
    12.0.5 (https://android.googlesource.com/toolchain/llvm-project


    c935d99d7cf2016289302412d708641d52d2f7ee), LLD 12.0.5
    (/buildbot/src/android/llvm-toolchain/out/llvm-project/lld
    c935d99d7cf2016289302412d708641d52d2f7ee)) #1 SMP PREEMPT Thu May
    12 10:18:30 UTC 2022

private/msm-google: (1 change)
  dffdd7b6 msm: adsprpc: fix bad array access with invalid channel id

private/msm-google-modules/wlan/qca-wifi-host-cmn: (1 change)
  88f0d015 qcacmn: Use active scan request for P2P Device mode

private/msm-google-modules/wlan/qcacld-3.0: (1 change)
  34a95cf5 qcacld-3.0: Fix array OOB for duplicate rate

Bug: 200839015
Bug: 211125453
Bug: 227264184
Pick-Prebuilt: 448402938
Build-Id: 8578179
Processing-Config: kernel_headers
Test: build passed, boot to home
Change-Id: I294961db30f68bbea0941b6bdd60216041c2025f
Signed-off-by: JJ Lee <leejj@google.com>

Original change: https://googleplex-android-review.googlesource.com/c/device/google/coral-kernel/+/18179771



Change-Id: Ic762d083465534de6651ae9d38c0ccf33f555c57
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Original change: https://googleplex-android-review.googlesource.com/c/device/google/coral-kernel/+/18179771



Change-Id: Icf2a98728819757bde771b64234228e68973d8b6
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Linux version 4.14.271-gb31699bad777-ab8511340 (android-
    build@abfarm592) (Android (7284624, based on r416183b) clang
    version 12.0.5 (https://android.googlesource.com/toolchain/llvm-


    project c935d99d7cf2016289302412d708641d52d2f7ee), LLD 12.0.5
    (/buildbot/src/android/llvm-toolchain/out/llvm-project/lld
    c935d99d7cf2016289302412d708641d52d2f7ee)) #1 SMP PREEMPT Thu Apr
    28 09:26:28 UTC 2022

private/msm-google: (2 changes)
  b31699ba msm: vidc: Add changes to set opb color format
  ce498af4 UPSTREAM: f2fs: should not truncate blocks during roll-forward recovery

Bug: 210947256
Bug: 223740163
Pick-Prebuilt: 446234819
Build-Id: 8511340
Processing-Config: kernel_headers
Change-Id: I7f3273f25ffdac26dc5ee344aca6ef8ccfff3b71
Signed-off-by: SecurityBot <android-nexus-securitybot@system.gserviceaccount.com>

Original change: https://googleplex-android-review.googlesource.com/c/device/google/coral-kernel/+/18160665



Change-Id: I3d5d145a3cc1407d71730314e2fdaa820a143757
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Original change: https://googleplex-android-review.googlesource.com/c/device/google/coral-kernel/+/18160665



Change-Id: Ibd116fc7fe371c91ef4d55aa923d761eb6823903
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>

Linux version 4.14.271-g27dd124fe8ac-ab8496349 (android-
    build@abfarm754) (Android (7284624, based on r416183b) clang
    version 12.0.5 (https://android.googlesource.com/toolchain/llvm-


    project c935d99d7cf2016289302412d708641d52d2f7ee), LLD 12.0.5
    (/buildbot/src/android/llvm-toolchain/out/llvm-project/lld
    c935d99d7cf2016289302412d708641d52d2f7ee)) #1 SMP PREEMPT Mon Apr
    25 08:50:20 UTC 2022

private/msm-google: (4 changes)
  27dd124f Merge android-msm-pixel-4.14-sc-qpr3 into android-msm-pixel-4.14
  84ae9632 Revert "ANDROID: mm: backing-dev: Take a reference to the bdi in use to prevent UAF"
  2a1a0776 Revert "fs: sysfs_emit: Remove PAGE_SIZE alignment check"
  dd60242a fs: sysfs_emit: Remove PAGE_SIZE alignment check

Bug: 229060710
Bug: 229207047
Pick-Prebuilt: 446346680
Build-Id: 8496349
Processing-Config: kernel_headers
Change-Id: Iff928e6ee9e3d7ca22f26af6c5e812b6a3ef5a4b
Signed-off-by: Eva Huang <evahuang@google.com>

Original change: https://googleplex-android-review.googlesource.com/c/device/google/coral-kernel/+/17823152



Change-Id: I1712c37aeb4c6be94fb6779b848cd950e08f305c
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>