sunfish: update kernel-and-modules prebuilt

Linux version 4.14.281-ga39a4edc2e8d-ab8752535 (android-build@abfarm-
    east4-066) (Android (7284624, based on r416183b) clang version
    12.0.5 (https://android.googlesource.com/toolchain/llvm-project
    c935d99d7cf2016289302412d708641d52d2f7ee), LLD 12.0.5
    (/buildbot/src/android/llvm-toolchain/out/llvm-project/lld
    c935d99d7cf2016289302412d708641d52d2f7ee)) #1 SMP PREEMPT Wed Jun
    22 03:20:10 UTC 2022

private/msm-google: (239 changes)
  a39a4edc LTS: Merge android-4.14-stable (4.14.281) into android-msm-pixel-4.14
  46883558 FROMGIT: Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process"
  5b0f8fc5 Merge android-4.14-stable (4.14.281) into android-msm-pixel-4.14-lts
  078273bf Merge android-msm-pixel-4.14-tm-qpr1 into android-msm-pixel-4.14
  3deaebb9 Merge android-msm-pixel-4.14-tm into android-msm-pixel-4.14-tm-qpr1
  8ae7b4ca Merge branch 'android-msm-pixel-4.14-tm-security' into android-msm-pixel-4.14-tm
  d6860494 net/sched: cls_u32: fix netns refcount changes in u32_change()
  1aaf17cb adsprpc: only trigger ADSP SSR if the command is ADSP domain
  332ee465 nfc: Add mutex lock to avoid use-after-free
  b01c9886 Revert module-lto related patches
  ae2c86d1 arm64/dts: increase adaptive charge rate from 0.08C to 0.15C
  2db5af60 Merge android-msm-pixel-4.14-tm-qpr1 into android-msm-pixel-4.14
  74ca64ee Merge android-msm-pixel-4.14-tm into android-msm-pixel-4.14-tm-qpr1
  d1f639fd mm: backing-dev: Take a reference to the bdi in use to prevent UAF
  9f827b07 fs: explicitly unregister per-superblock BDIs
  8e9d3453 Merge android-msm-pixel-4.14-tm-qpr1 into android-msm-pixel-4.14
  ed96eb7f Merge android-msm-pixel-4.14-tm into android-msm-pixel-4.14-tm-qpr1
  2fbe1b33 usb: dwc3: Handle charging behavior when usb data is disabled
  3bf62440 Merge 4.14.281 into android-4.14-stable
  501eec4f Linux 4.14.281
  aaf166f3 Reinstate some of "swiotlb: rework "fix info leak with DMA_FROM_DEVICE""
  971e5dad swiotlb: fix info leak with DMA_FROM_DEVICE
  d37dc122 net: atlantic: verify hw_head_ lies within TX buffer ring
  59bfc563 net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe()
  f3f6a40a ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one()
  c5e8f441 mac80211: fix rx reordering with non explicit / psmp ack policy
  ec9639d9 scsi: qla2xxx: Fix missed DMA unmap for aborted commands
  eb3d6cdf perf bench numa: Address compiler error on s390
  1e70037d gpio: mvebu/pwm: Refuse requests with inverted polarity
  6bfcb2b9 gpio: gpio-vf610: do not touch other bits when set the target bit
  3f672198 net: bridge: Clear offload_fwd_mark when passing frame up bridge interface.
  0236adfb igb: skip phy status check where unavailable
  a7e49f1a ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2
  77217269 ARM: 9196/1: spectre-bhb: enable for Cortex-A15
  afa5fe03 net: af_key: add check for pfkey_broadcast in function pfkey_process
  732acfaa NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc
  e5f273c5 net/qla3xxx: Fix a test in ql_reset_work()
  b79bc9f2 clk: at91: generated: consider range when calculating best rate
  5fd9a74b net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup()
  2bee202d net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf()
  327b6689 mmc: core: Default to generic_cmd6_time as timeout in __mmc_switch()
  d471e9e6 mmc: block: Use generic_cmd6_time when modifying INAND_CMD38_ARG_EXT_CSD
  0aa3b639 mmc: core: Specify timeouts for BKOPS and CACHE_FLUSH for eMMC
  e2eed8c3 drm/dp/mst: fix a possible memory leak in fetch_monitor_name()
  dee63319 perf: Fix sys_perf_event_open() race against self
  02fe93d1 ALSA: wavefront: Proper check of get_user() error
  2db68a7c ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame()
  39bdc65b drbd: remove usage of list iterator variable after loop
  2ca4712e MIPS: lantiq: check the return value of kzalloc()
  79e309c1 Input: stmfts - fix reference leak in stmfts_input_open
  9cc62ef5 Input: add bounds checking to input_set_capability()
  9c4a3cec um: Cleanup syscall_handler_t definition/cast, fix warning
  dc650d53 floppy: use a statically allocated error counter
  75875577 msm: kgsl: Add a sysfs node to control performance counter reads
  69d81103 msm: kgsl: Zap performance counters across context switches
  04a1e538 virtio-blk: Use blk_validate_block_size() to validate block size
  3f8076ff ANDROID: dm-bow: Protect Ranges fetched and erased from the RB tree
  25b4b0ab esp: Fix possible buffer overflow in ESP transformation
  60fd4e75 fuse: fix pipe buffer lifetime for direct_io
  6db27dda staging: ion: Prevent incorrect reference counting behavour
  489c9941 Syncup 8585584 to tm related branches
  39bb8c75 Syncup 8585584 to tm related branches
  a72baefb Syncup 8585584 to tm related branches
  9d9615ba Merge android-msm-pixel-4.14-tm-qpr1 into android-msm-pixel-4.14
  53e3d6df Merge android-msm-pixel-4.14-tm into android-msm-pixel-4.14-tm-qpr1
  2cf46d4b Merge 4.14.280 into android-4.14-stable
  dffb5c6f Linux 4.14.280
  bae1a3b8 tty/serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe()
  1f0f6cff ping: fix address binding wrt vrf
  7ed96e91 drm/vmwgfx: Initialize drm_mode_fb_cmd2
  7a34036e cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp()
  a390b1cb USB: serial: option: add Fibocom MA510 modem
  c06d4652 USB: serial: option: add Fibocom L610 modem
  bfc9af1f USB: serial: qcserial: add support for Sierra Wireless EM7590
  38a7be0d USB: serial: pl2303: add device id for HP LM930 Display
  d353241a usb: cdc-wdm: fix reading stuck on device close
  a14619ff tcp: resalt the secret every 10 seconds
  9e8cad4d ASoC: ops: Validate input values in snd_soc_put_volsw_range()
  3218ecf6 ASoC: max98090: Generate notifications on changes for custom control
  ee46fbb0 ASoC: max98090: Reject invalid values in custom control put()
  76e9dd91 hwmon: (f71882fg) Fix negative temperature
  7d3240b4 net: sfc: ef10: fix memory leak in efx_ef10_mtd_probe()
  dc25553c net/smc: non blocking recvmsg() return -EAGAIN when no data and signal_pending
  c555d482 s390/lcs: fix variable dereferenced before check
  d886b429 s390/ctcm: fix potential memory leak
  84043557 s390/ctcm: fix variable dereferenced before check
  4ae7fe63 hwmon: (ltq-cputemp) restrict it to SOC_XWAY
  a9287cd9 mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection
  98a29c31 netlink: do not reset transport header in netlink_recvmsg()
  f92f3bd8 ipv4: drop dst in multicast routing path
  39eb33b6 net: Fix features skip in for_each_netdev_feature()
  5ed837a7 batman-adv: Don't skb_split skbuffs with frag_list
  587752ea Merge 4.14.279 into android-4.14-stable
  5a1040c1 Merge android-msm-pixel-4.14-sc-qpr3 into android-msm-pixel-4.14-tm
  690285a9 Linux 4.14.279
  9508190f VFS: Fix memory leak caused by concurrently mounting fs with subtype
  7e913360 ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock
  e7786c44 ALSA: pcm: Fix races among concurrent prealloc proc writes
  a1d54f97 ALSA: pcm: Fix races among concurrent prepare and hw_params/hw_free calls
  73867cb2 ALSA: pcm: Fix races among concurrent read/write and buffer changes
  a42aa926 ALSA: pcm: Fix races among concurrent hw_params and hw_free calls
  e4901b98 mm: userfaultfd: fix missing cache flush in mcopy_atomic_pte() and __mcopy_atomic()
  b273e8cf mm: hugetlb: fix missing cache flush in copy_huge_page_from_user()
  7cba38d2 mmc: rtsx: add 74 Clocks in power on flow
  fd129b65 Bluetooth: Fix the creation of hdev->name
  c0406482 can: grcan: only use the NAPI poll budget for RX
  8adae6c7 can: grcan: grcan_probe(): fix broken system id check for errata workaround needs
  8053f03e block: drbd: drbd_nl: Make conversion to 'enum drbd_ret_code' explicit
  0ec92c59 MIPS: Use address-of operator on section symbols
  9271f84d LTS: Merge android-4.14-stable (4.14.276) into android-msm-pixel-4.14-tm
  8b585d4c Merge 4.14.278 into android-4.14-stable
  569d1abf Linux 4.14.278
  1777ae09 PCI: aardvark: Fix reading MSI interrupt number
  e7e0b620 PCI: aardvark: Clear all MSIs at setup
  c3cd91f8 dm: interlock pending dm_io and dm_wait_for_bios_completion
  d35aef9c dm: fix mempool NULL pointer race when completing IO
  c71bf322 net: ipv6: ensure we call ipv6_mc_down() at most once
  a29a8672 kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU
  317b1274 net: igmp: respect RCU rules in ip_mc_source() and ip_mc_msfilter()
  86ba85fe btrfs: always log symlinks in full mode
  f9d34cb2 smsc911x: allow using IRQ0
  f1256ed8 net: emaclite: Add error handling for of_address_to_resource()
  85745e56 ASoC: dmaengine: Restore NULL prepare_slave_config() callback
  16fbc210 hwmon: (adt7470) Fix warning on module removal
  c33b2aff NFC: netlink: fix sleep in atomic bug when firmware download timeout
  ced30680 nfc: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs
  6f0ac4cd nfc: replace improper check device_is_registered() in netlink related functions
  f00811fd can: grcan: use ofdev->dev when allocating DMA memory
  3fe89449 can: grcan: grcan_close(): fix deadlock
  09b432bb ASoC: wm8958: Fix change notifications for DSP controls
  7cc93846 firewire: core: extend card->lock in fw_core_handle_bus_reset
  86a7058c firewire: remove check of list iterator against head past the loop body
  1269a656 firewire: fix potential uaf in outbound_phy_packet_callback()
  a176498e Revert "SUNRPC: attempt AF_LOCAL connect on setup"
  84749917 ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes
  4bf68b36 parisc: Merge model and model name into one line in /proc/cpuinfo
  a64e4e7b MIPS: Fix CP0 counter erratum detection for R4k CPUs
  d2b8e8fb drm/vgem: Close use-after-free race in vgem_gem_create
  a87ec461 tty: n_gsm: fix incorrect UA handling
  7b722590 tty: n_gsm: fix wrong command frame length field encoding
  3275bd48 tty: n_gsm: fix wrong command retry handling
  52126280 tty: n_gsm: fix missing explicit ldisc flush
  1f9247bc tty: n_gsm: fix insufficient txframe size
  da0fc1a6 tty: n_gsm: fix malformed counter for out of frame data
  e5afac8d tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2
  6e0925dc x86/cpu: Load microcode during restore_processor_state()
  a40f23a9 drivers: net: hippi: Fix deadlock in rr_close()
  079b2f6c cifs: destage any unwritten data to the server before calling copychunk_write
  71af6d6e x86: __memcpy_flushcache: fix wrong alignment if size > 2^32
  b96335a4 ASoC: wm8731: Disable the regulator when probing fails
  7396d253 bnx2x: fix napi API usage sequence
  c6e4ee69 net: bcmgenet: hide status block before TX timestamping
  2327c385 clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource()
  b5b207f6 bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create()
  38c2fcba tcp: fix potential xmit stalls caused by TCP_NOTSENT_LOWAT
  5ec1be29 ip_gre: Make o_seqno start from 0 in native mode
  3fce1792 pinctrl: pistachio: fix use of irq_of_parse_and_map()
  22741425 sctp: check asoc strreset_chunk in sctp_generate_reconf_event
  7d3c0c12 mtd: rawnand: Fix return value check of wait_for_completion_timeout
  223c5b57 ipvs: correctly print the memory size of ip_vs_conn_tab
  05a83f0b ARM: dts: Fix mmc order for omap3-gta04
  b1041bc2 ARM: OMAP2+: Fix refcount leak in omap_gic_of_init
  500a7173 phy: samsung: exynos5250-sata: fix missing device put in probe error paths
  e1743f44 phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe
  f9928bd9 ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue
  165cddba USB: Fix xhci event ring dequeue pointer ERDP update issue
  00e2b8f7 hex2bin: fix access beyond string end
  98d80ee7 hex2bin: make the function hex_to_bin constant-time
  4e8b2c5d serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device
  354e20da serial: 8250: Also set sticky MCR bits in console restoration
  25af9438 usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind()
  900c008b usb: gadget: uvc: Fix crash when encoding data for usb request
  1d7c29f0 usb: misc: fix improper handling of refcount in uss720_probe()
  a4ed806c iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on()
  8d745840 iio: dac: ad5446: Fix read_raw not returning set value
  c6622726 iio: dac: ad5592r: Fix the missing return value.
  0b3787fc xhci: stop polling roothubs after shutdown
  263c67a4 USB: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions
  ffc09fb3 USB: serial: option: add support for Cinterion MV32-WA/MV32-WB
  1aa553fa USB: serial: cp210x: add PIDs for Kamstrup USB Meter Reader
  98f23429 USB: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS
  bf9c3fa3 USB: quirks: add STRING quirk for VCOM device
  97a1b90d USB: quirks: add a Realtek card reader
  1a511091 usb: mtu3: fix USB 3.0 dual-role-switch from device to host
  a9ae9dc2 lightnvm: disable the subsystem
  f3fc8b1b Revert "net: ethernet: stmmac: fix altr_tse_pcs function when using a fixed-link"
  0511cdd4 net/sched: cls_u32: fix netns refcount changes in u32_change()
  1a15c23a hamradio: remove needs_free_netdev to avoid UAF
  feb3d627 hamradio: defer 6pack kfree after unregister_netdev
  b7fa84ae floppy: disable FDRAWCMD by default
  dbc92b7a Merge branch 'android-msm-pixel-4.14-sc-security' into android-msm-pixel-4.14-sc-qpr3
  b8367075 net/packet: fix slab-out-of-bounds access in packet_recvmsg()
  d2aa262b atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait
  1f81516a Merge 4.14.277 into android-4.14-stable
  e3a56aaa Linux 4.14.277
  1b95e7ff Revert "net: micrel: fix KS8851_MLL Kconfig"
  093ab7f9 ax25: Fix UAF bugs in ax25 timers
  33121098 ax25: Fix NULL pointer dereferences in ax25 timers
  0b0ae8b9 ax25: fix NPD bug in ax25_disconnect
  62accd46 ax25: fix UAF bug in ax25_send_control()
  c44a453f ax25: Fix refcount leaks caused by ax25_cb_del()
  b8c07f33 ax25: fix UAF bugs of net_device caused by rebinding operation
  9f444ded ax25: fix reference count leaks of ax25_dev
  ef0a2a05 ax25: add refcount in ax25_dev to avoid UAF bugs
  4142a864 block/compat_ioctl: fix range check in BLKGETSIZE
  618a931c staging: ion: Prevent incorrect reference counting behavour
  ad933197 ext4: force overhead calculation if the s_overhead_cluster makes no sense
  a22946d5 ext4: fix overhead calculation to account for the reserved gdt blocks
  28352d88 ext4: limit length to bitmap_maxbytes - blocksize in punch_hole
  501185c1 ext4: fix symlink file size not match to file content
  5e89947d ARC: entry: fix syscall_trace_exit argument
  56a16045 e1000e: Fix possible overflow in LTR decoding
  bbec3559 ASoC: soc-dapm: fix two incorrect uses of list iterator
  6cde4a87 openvswitch: fix OOB access in reserve_sfa_size()
  f5a59fe2 powerpc/perf: Fix power9 event alternatives
  c77597aa dma: at_xdmac: fix a missing check on list iterator
  d56661ff ata: pata_marvell: Check the 'bmdma_addr' beforing reading
  2016098e stat: fix inconsistency between struct stat and struct compat_stat
  326f0588 net: macb: Restart tx only if queue pointer is lagging
  f7fe17fa drm/msm/mdp5: check the return of kzalloc()
  d0dc14c1 brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant
  8df540c5 cifs: Check the IOCB_DIRECT flag, not O_DIRECT
  3828c558 vxlan: fix error return code in vxlan_fdb_append
  251375fb ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant
  9bc79ebd platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative
  56dacbb1 ARM: vexpress/spc: Avoid negative array index when !SMP
  57ba9f22 netlink: reset network and mac headers in netlink_dump()
  fe90cb45 net/packet: fix packet_sock xmit return value checking
  2c89b4d0 dmaengine: imx-sdma: Fix error checking in sdma_event_remap
  90187e02 tcp: Fix potential use-after-free due to double kfree()
  9175c96e tcp: fix race condition when creating child sockets from syncookies
  cba852b3 ALSA: usb-audio: Clear MIDI port active flag after draining
  419adf11 gfs2: assign rgrp glock before compute_bitstructs
  a5e22591 can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path
  b45bda0c tracing: Dump stacktrace trigger to the corresponding instance
  34a11aff tracing: Have traceon and traceoff trigger honor the instance
  a148698a mm: page_alloc: fix building error on -Werror=array-compare
  ab4d82d4 etherdevice: Adjust ether_addr* prototypes to silence -Wstringop-overead
  baa591fd msm: kgsl: Fix out of bound write in adreno_profile_submit_time

private/msm-google-modules/wlan/qca-wifi-host-cmn: (8 changes)
  b9801ced Merge android-msm-pixel-4.14-tm-qpr1 into android-msm-pixel-4.14
  64b2f90b Merge android-msm-pixel-4.14-tm into android-msm-pixel-4.14-tm-qpr1
  749407f8 Syncup 8585584 to tm related branches
  141c2ace Syncup 8585584 to tm related branches
  8dac3a4e Merge android-msm-pixel-4.14-tm-qpr1 into android-msm-pixel-4.14
  021b9ab4 Merge android-msm-pixel-4.14-tm into android-msm-pixel-4.14-tm-qpr1
  f610e3c6 qcacmn: Use active scan request for P2P Device mode
  77bfcb4a qcacmn: Use active scan request for P2P Device mode

private/msm-google-modules/wlan/qcacld-3.0: (8 changes)
  23539fe9 Merge android-msm-pixel-4.14-tm-qpr1 into android-msm-pixel-4.14
  6ae2789b Merge android-msm-pixel-4.14-tm into android-msm-pixel-4.14-tm-qpr1
  b96ee706 Syncup 8585584 to tm related branches
  f4cc5bea Syncup 8585584 to tm related branches
  8d7177de Merge android-msm-pixel-4.14-tm-qpr1 into android-msm-pixel-4.14
  7f647cc4 Merge android-msm-pixel-4.14-tm into android-msm-pixel-4.14-tm-qpr1
  aab76f7b qcacld-3.0: Fix array OOB for duplicate rate
  f4918118 qcacld-3.0: Fix array OOB for duplicate rate

Bug: 182815710
Bug: 193434313
Bug: 195565510
Bug: 200839015
Bug: 205573273
Bug: 207093880
Bug: 208269510
Bug: 209469958
Bug: 211125453
Bug: 216140062
Bug: 221009551
Bug: 224546354
Bug: 226679409
Bug: 226679849
Bug: 227452856
Bug: 229184979
Bug: 229347408
Bug: 229982346
Bug: 230967268
Bug: 232784417
Bug: 233075473
Bug: 233576726
Bug: 233713524
Pick-Prebuilt: 456394514
Build-Id: 8752535
Processing-Config: kernel_headers
Change-Id: Ic031c26d6173e460263d3e4f37a3cb8319f49c7b
Signed-off-by: Lucas Wei <[email protected]>
750 files changed