Merge LA.UM.7.5.2.r1-03300-8x96.0 of https://source.codeaurora.org/quic/la/kernel/msm-4.4 into lineage-16.0

313e787f28bb Merge "power: qpnp-smbcharger: Change ordering of EXTCON_USB_SPEED" into kernel.lnx.4.4.r37-rel
dfa5b807ec2c Merge changes I0ab244e6,I05a4aa96 into kernel.lnx.4.4.r37-rel
c900b4827149 msm: ipa: Fix array out of bound and use after NULL check
b562b057dd2a msm: ipa: Fix pointer checked for NULL may be used
216dfe7e7a14 usb: phy-msm-susb-qmp: Add checks to check clk_enabled
2c0a97a53f77 power: qpnp-smbcharger: Change ordering of EXTCON_USB_SPEED
56d12bfe26c3 Merge commit '09d42880fd9f4d04317f030021b85323b8f8b9b9' into HEAD
09d42880fd9f Merge "msm: camera_v2: isp: update the frame drop during error case"
19d79e95f10c Merge "msm:camera: add trace log support for VFE events"
3ae0451881ca Merge "msm: camera_v2: Remove sysfs bind/unbind files"
45b4ac208b7b msm:camera: add trace log support for VFE events
5974bd4025ea msm: camera_v2: Fix page fault issue in camera ISP
ed8c0918eeb1 Merge "icnss: Reduce the shutdown timeout from 50sec to 15sec"
7e4d8780224c Merge "drm/msm/dsi-staging: Add range check in debugfs_dump_info_read"
978400398a92 icnss: Reduce the shutdown timeout from 50sec to 15sec
4e08c8cbacd4 msm: camera_v2: Remove sysfs bind/unbind files
79a8f215703e Merge "ASoC: sdm660_cdc: Set speaker amplifier enable bit"
c0f636f83226 Merge "cnss2: Update board data file name format"
bd48b0a101e8 Merge "msm: kgsl: Add missing check for snapshot IB dump"
2f5e49a21882 Merge "defconfig: msm: Disable EXT2 and EXT3 FS configs for MSM8998"
46ece1ae20ad Merge "sched/walt: Fix the memory leak of idle task load pointers"
78540133736a Merge "soc: qcom: smem: validate fields of shared structures"
196d97abd323 Merge "Merge android-4.4.183 (94fd428) into msm-4.4"
fad4d2e83739 Merge "msm: kgsl: Change data type for GPU ib vote"
54d23a97a07e Merge "drivers: thermal: Use FCAP scm call instead of DMAX in LMH DCVSh"
1379d11803dd msm: kgsl: Add missing check for snapshot IB dump
2c8f4699fdd0 defconfig: msm: Disable EXT2 and EXT3 FS configs for MSM8998
fcc47ec62ae1 soc: qcom: smem: validate fields of shared structures
7151def9c713 ASoC: sdm660_cdc: Set speaker amplifier enable bit
f395d5810f27 sched/walt: Fix the memory leak of idle task load pointers
03f0af3c211e drivers: thermal: Use FCAP scm call instead of DMAX in LMH DCVSh
f6ee0c2bb45d drivers: thermal: Use FCAP scm call instead of DMAX in KTM
cb7df67908b0 msm: kgsl: Change data type for GPU ib vote
c94369b4c1fc cnss2: print firmware cap info in stats
9a1c2880320b Merge android-4.4.183 (94fd428) into msm-4.4
94fd42809f7d Merge 4.4.183 into android-4.4
308743255040 Linux 4.4.183
df7ba8162ca1 Abort file_remove_privs() for non-reg. files
8f6345a11caa coredump: fix race condition between mmget_not_zero()/get_task_mm() and core dumping
3692bc31c1ff Revert "crypto: crypto4xx - properly set IV after de- and encrypt"
39c7c903c63d scsi: libsas: delete sas port if expander discover failed
a272035ea1bf scsi: libcxgbi: add a check for NULL pointer in cxgbi_check_route()
af8cd6101bf5 net: sh_eth: fix mdio access in sh_eth_close() for R-Car Gen2 and RZ/A1 SoCs
b25c62cc16e0 KVM: PPC: Book3S: Use new mutex to synchronize access to rtas token list
7ef8d778cf3e ia64: fix build errors by exporting paddr_to_nid()
432030b25b86 configfs: Fix use-after-free when accessing sd->s_dentry
d5a18c8609f3 i2c: dev: fix potential memory leak in i2cdev_ioctl_rdwr
be1b9df5bba1 net: tulip: de4x5: Drop redundant MODULE_DEVICE_TABLE()
0bb6c295e463 gpio: fix gpio-adp5588 build errors
dd961efe8dee perf/ring_buffer: Add ordering to rb->nest increment
8abd8a9a975e perf/ring_buffer: Fix exposing a temporarily decreased data_head
3e74b3f05abf x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor
f4678b7808e7 mISDN: make sure device name is NUL terminated
e2f9c0f73454 sunhv: Fix device naming inconsistency between sunhv_console and sunhv_reg
753aa7556089 neigh: fix use-after-free read in pneigh_get_next
709d8771fab7 lapb: fixed leak of control-blocks.
1777c35e8d47 ipv6: flowlabel: fl6_sock_lookup() must use atomic_inc_not_zero
6f057abd08d1 be2net: Fix number of Rx queues used for flow hashing
7139a9f6246d ax25: fix inconsistent lock state in ax25_destroy_timer
f1a5c6b083bc USB: serial: option: add Telit 0x1260 and 0x1261 compositions
a67d65958e2a USB: serial: option: add support for Simcom SIM7500/SIM7600 RNDIS mode
b8ee804bba8f USB: serial: pl2303: add Allied Telesis VT-Kit3
f14747c88170 USB: usb-storage: Add new ID to ums-realtek
038c192699a9 USB: Fix chipmunk-like voice when using Logitech C270 for recording audio.
8f6b0e59d2a0 drm/vmwgfx: NULL pointer dereference from vmw_cmd_dx_view_define()
6e0c7e73232f drm/vmwgfx: integer underflow in vmw_cmd_dx_set_shader() leading to an invalid read
ce391e4cdef8 KVM: s390: fix memory slot handling for KVM_SET_USER_MEMORY_REGION
a1b9c6b4cba0 KVM: x86/pmu: do not mask the value that is written to fixed PMUs
7caddacf863f usbnet: ipheth: fix racing condition
f80a35fcb9e9 scsi: bnx2fc: fix incorrect cast to u64 on shift operation
da51a322f197 scsi: lpfc: add check for loss of ndlp when sending RRQ
3a2ff1088c2a Drivers: misc: fix out-of-bounds access in function param_set_kgdbts_var
1f8233ca3a48 ASoC: cs42xx8: Add regcache mask dirty
91f1fc1ae409 cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css()
8b47af927e2e bcache: fix stack corruption by PRECEDING_KEY()
a2aabf288bf7 i2c: acorn: fix i2c warning
d774bd27b4f5 ptrace: restore smp_rmb() in __ptrace_may_access()
5aff00ee839a signal/ptrace: Don't leak unitialized kernel memory with PTRACE_PEEK_SIGINFO
0b871fc866eb fs/ocfs2: fix race in ocfs2_dentry_attach_lock()
c05fed507582 mm/list_lru.c: fix memory leak in __memcg_init_list_lru_node
be499b84c3bd libata: Extend quirks for the ST1000LM024 drives with NOLPM quirk
d7a18814fff9 ALSA: seq: Cover unsubscribe_port() in list_mutex
4282a0b1db65 Revert "Bluetooth: Align minimum encryption key size for LE and BR/EDR connections"
cd23996afa14 futex: Fix futex lock the wrong page
38fbd5c2d572 ARM: exynos: Fix undefined instruction during Exynos5422 resume
5767587907fd pwm: Fix deadlock warning when removing PWM device
113a78a0a537 ARM: dts: exynos: Always enable necessary APIO_1V8 and ABB_1V8 regulators on Arndale Octa
78184953a2ed pwm: tiehrpwm: Update shadow register for disabling PWMs
d24e22cde8b3 dmaengine: idma64: Use actual device for DMA transfers
533171620cd5 gpio: gpio-omap: add check for off wake capable gpios
3b4652ba9d78 PCI: xilinx: Check for __get_free_pages() failure
c869210e0ac6 video: imsttfb: fix potential NULL pointer dereferences
5c7fbc5f6a7d video: hgafb: fix potential NULL pointer dereference
bea8fa863ce9 PCI: rcar: Fix a potential NULL pointer dereference
76208df36d7a PCI: rpadlpar: Fix leaked device_node references in add/remove paths
100468652e5a ARM: dts: imx6qdl: Specify IMX6QDL_CLK_IPG as "ipg" clock to SDMA
927d2be77e6c ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ipg" clock to SDMA
8aee025af280 ARM: dts: imx6sx: Specify IMX6SX_CLK_IPG as "ahb" clock to SDMA
b49501f51371 clk: rockchip: Turn on "aclk_dmac1" for suspend on rk3288
4270dc6a7a79 soc: mediatek: pwrap: Zero initialize rdata in pwrap_init_cipher
845676341c2d platform/chrome: cros_ec_proto: check for NULL transfer function
c7155e51cf85 x86/PCI: Fix PCI IRQ routing table memory leak
198a54f07f51 nfsd: allow fh_want_write to be called twice
e6779b264d69 fuse: retrieve: cap requested size to negotiated max_write
742cb74bf108 nvmem: core: fix read buffer in place
750c55e69cca ALSA: hda - Register irq handler after the chip initialization
09ad374f23ce iommu/vt-d: Set intel_iommu_gfx_mapped correctly
9e4ed17b9416 f2fs: fix to do sanity check on valid block count of segment
534ef922376e f2fs: fix to avoid panic in do_recover_data()
90a238a8a2d2 ntp: Allow TAI-UTC offset to be set to zero
25be7d51a012 drm/bridge: adv7511: Fix low refresh rate selection
8fdebdd06c4b perf/x86/intel: Allow PEBS multi-entry in watermark mode
dee1ba919ca2 mfd: twl6040: Fix device init errors for ACCCTL register
4110c4188853 mfd: intel-lpss: Set the device in reset state when init
1bef19130b5b kernel/sys.c: prctl: fix false positive in validate_prctl_map()
937fa1624a1f mm/cma_debug.c: fix the break condition in cma_maxchunk_get()
fceb0be41836 mm/cma.c: fix crash on CMA allocation if bitmap allocation fails
9c8d4d77e3aa hugetlbfs: on restore reserve error path retain subpool reservation
d8129a5d7a9d ipc: prevent lockup on alloc_msg and free_msg
50c0db539937 sysctl: return -EINVAL if val violates minmax
8b9241b052a2 fs/fat/file.c: issue flush after the writeback of FAT
335e20ca9562 Merge "soc: qcom: glink_spi_xprt: Sanitize input for short cmd"
abc2a59bfdb9 Merge "soc: qcom: hab: add error handling when dt item is missing"
9998d2e52dd4 mm: add /proc/pid/smaps_rollup
a2165163680e Merge "msm: ais: sensor: actuator: fix out of bound read for bivcm region params"
7ec9476039c1 soc: qcom: hab: add error handling when dt item is missing
7967865bb4c4 msm: ais: sensor: actuator: fix out of bound read for bivcm region params
14f9c777669f Merge "Merge android-4.4.182 (9c4ab57) into msm-4.4"
eee21eb4a635 ANDROID: kernel: cgroup: cpuset: Clear cpus_requested for empty buf
f1adac4c222b ANDROID: kernel: cgroup: cpuset: Add missing allocation of cpus_requested in alloc_trial_cpuset
291c54b284a4 i2c: virtio: reallocate memory for each msg buffer
ca64572d5459 Merge changes  into msm-4.4
a32f2cd75906 Merge android-4.4.182 (9c4ab57) into msm-4.4
2ae4cde5790c Merge "i2c: refine the driver of i2c virtualization"
9c4ab5729952 Merge 4.4.182 into android-4.4
33790f2eda73 Linux 4.4.182
f938ae0ce5ef tcp: enforce tcp_min_snd_mss in tcp_mtu_probing()
e757d052f3b8 tcp: add tcp_min_snd_mss sysctl
ad472d3a9483 tcp: tcp_fragment() should apply sane memory limits
4657ee0fe05e tcp: limit payload size of sacked skbs
17c66e9e49a1 Merge "msm: vidc: add additional check to avoid out of bound access"
4e933027e684 Merge "Merge android-4.4.181 (bd858d7) into msm-4.4"
be5afd934314 i2c: refine the driver of i2c virtualization
f1057f82fa62 msm: vidc: add additional check to avoid out of bound access
c176a066dfd3 diag: dci: Correct out of bounds check in processing dci pkt rsp
cc47c2c325b9 Merge "msm: adsprpc: maintain local copy of rpra offloaded to DSP"
1f3eb68e71cd msm: adsprpc: maintain local copy of rpra offloaded to DSP
a50f44266d21 Merge "diag: Prevent out-of-bound access while processing userspace data"
c658076e45e0 Merge "ASoC: msm: Add support for AVS version check"
f328b4d28d25 Merge "arm: dts: msm: Add avs-version dt property for 8996"
5dbfa1533af8 diag: Prevent out-of-bound access while processing userspace data
eb0322ea9b07 arm: dts: msm: Add avs-version dt property for 8996
5ef154a26639 Merge android-4.4.181 (bd858d7) into msm-4.4
7caeb5cb7c4f soc: qcom: glink_spi_xprt: Sanitize input for short cmd
17fd8dbacb92 Merge "soc: qcom: hab: add missing variable declaration"
1cc130f95ec7 UPSTREAM: binder: check for overflow when alloc for security context
784672577648 BACKPORT: binder: fix race between munmap() and direct reclaim
849ecbea5548 soc: qcom: hab: add missing variable declaration
bd858d730975 Merge 4.4.181 into android-4.4
0434b31d567e Merge "dwc3-msm: Fix dwc3_drd_state_string for undefined state"
411c38c969a7 Merge "usb: dwc3-msm: Ensure hardware is reset during role change"
8dce56fa0ccf Merge "usb: dwc3-msm: add enum for drd_states to remove otg_state usage"
d7b7345c3a5d Linux 4.4.181
f1d7eebd9d67 ethtool: check the return value of get_regs_len
647f72b0d75c ipv4: Define __ipv4_neigh_lookup_noref when CONFIG_INET is disabled
c9696a8f3e64 fuse: Add FOPEN_STREAM to use stream_open()
3bf0c459615a fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock
0f5fab865ae9 drm/gma500/cdv: Check vbt config bits when detecting lvds panels
e087f7519114 genwqe: Prevent an integer overflow in the ioctl
59565e894518 MIPS: pistachio: Build uImage.gz by default
8061c23f5378 fuse: fallocate: fix return with locked inode
cf30c1953467 parisc: Use implicit space register selection for loading the coherence index of I/O pdirs
f0d1e74c8120 rcu: locking and unlocking need to always be at least barriers
44657dbba7c4 pktgen: do not sleep with the thread lock held.
eded0b11c7a3 net: rds: fix memory leak in rds_ib_flush_mr_pool
54dd5e352cf7 net/mlx4_en: ethtool, Remove unsupported SFP EEPROM high pages query
cc475966e5f7 neighbor: Call __ipv4_neigh_lookup_noref in neigh_xmit
e5c6de6694ed ethtool: fix potential userspace buffer overflow
8795708bc939 media: uvcvideo: Fix uvc_alloc_entity() allocation alignment
2b13a9580ef9 usb: gadget: fix request length error for isoc transfer
8b15aae1baa2 net: cdc_ncm: GetNtbFormat endian fix
613b4bc1951d Revert "x86/build: Move _etext to actual end of .text"
6ad730b83178 userfaultfd: don't pin the user memory in userfaultfd_file_create()
4e06554db5e5 brcmfmac: add subtype check for event handling in data path
993b68aa3ef7 brcmfmac: add length checks in scheduled scan result handler
35bcfbad5d94 brcmfmac: fix incorrect event channel deduction
8c12de962667 brcmfmac: revise handling events in receive path
5f4688a15c24 brcmfmac: screening firmware event packet
6da841e9ae87 brcmfmac: Add length checks on firmware events
c55a2cffa5ca bnx2x: disable GSO where gso_size is too big for hardware
a33b6d4c8bc7 net: create skb_gso_validate_mac_len()
c53c1a821d62 binder: replace "%p" with "%pK"
5280efe442b2 binder: Replace "%p" with "%pK" for stable
336c16621785 CIFS: cifs_read_allocate_pages: don't iterate through whole page array on ENOMEM
360f8fe46f74 kernel/signal.c: trace_signal_deliver when signal_group_exit
7a47d1873120 memcg: make it work on sparse non-0-node systems
5db0a9c3cc52 tty: max310x: Fix external crystal register setup
e498745310d0 tty: serial: msm_serial: Fix XON/XOFF
986adddb9d8f drm/nouveau/i2c: Disable i2c bus access after ->fini()
bf8f6b43c2e7 ALSA: hda/realtek - Set default power save node to 0
494447b90d6d Btrfs: fix race updating log root item during fsync
af34de02a6a7 scsi: zfcp: fix to prevent port_remove with pure auto scan LUNs (only sdevs)
e85d002556ea scsi: zfcp: fix missing zfcp_port reference put on -EBUSY from port_remove
8282730a0afa media: smsusb: better handle optional alignment
0bce1ea89712 media: usb: siano: Fix false-positive "uninitialized variable" warning
b1782be70e1e media: usb: siano: Fix general protection fault in smsusb
d52c0ffb383f USB: rio500: fix memory leak in close after disconnect
b92be99a0c8b USB: rio500: refuse more than one device at a time
ee9d750e9ac8 USB: Add LPM quirk for Surface Dock GigE adapter
30e66d7d2fb9 USB: sisusbvga: fix oops in error path of sisusb_probe
018b7ea9ca24 USB: Fix slab-out-of-bounds write in usb_get_bos_descriptor
f5e1ec93b208 usb: xhci: avoid null pointer deref when bos field is NULL
017e6726a4fb xhci: Convert xhci_handshake() to use readl_poll_timeout_atomic()
ec70e2c130d6 include/linux/bitops.h: sanitize rotate primitives
fbbc4fe02a31 sparc64: Fix regression in non-hypervisor TLB flush xcall
5bce46edeb72 tipc: fix modprobe tipc failed after switch order of device registration -v2
416d252ba926 Revert "tipc: fix modprobe tipc failed after switch order of device registration"
f1613a9e1bdc xen/pciback: Don't disable PCI_COMMAND on PCI device reset.
383687e15cd0 crypto: vmx - ghash: do nosimd fallback manually
61ba8e9f51b3 net: mvpp2: fix bad MVPP2_TXQ_SCHED_TOKEN_CNTR_REG queue value
1d33a3ebd945 bnxt_en: Fix aggregation buffer leak under OOM condition.
7d423301240b tipc: Avoid copying bytes beyond the supplied data
332bff9d9a08 usbnet: fix kernel crash after disconnect
16ffb5f7c335 net: stmmac: fix reset gpio free missing
4f9c73aa2930 net-gro: fix use-after-free read in napi_gro_frags()
5cbaa135a0e1 llc: fix skb leak in llc_build_and_send_ui_pkt()
36a7222071d1 ipv6: Consider sk_bound_dev_if when binding a raw socket to an address
9fbf1ac57c7a ASoC: davinci-mcasp: Fix clang warning without CONFIG_PM
0984cb76d294 spi: Fix zero length xfer bug
854415f37aae spi: rspi: Fix sequencer reset during initialization
c927451887c1 spi : spi-topcliff-pch: Fix to handle empty DMA buffers
445c07409179 scsi: lpfc: Fix SLI3 commands being issued on SLI4 devices
3a5d11332896 media: saa7146: avoid high stack usage with clang
5a96cf10dc5c media: go7007: avoid clang frame overflow warning with KASAN
0e9f0805eeea media: m88ds3103: serialize reset messages in m88ds3103_set_frontend
9effa38946b6 scsi: qla4xxx: avoid freeing unallocated dma memory
95f0bb0a6c83 usb: core: Add PM runtime calls to usb_hcd_platform_shutdown
1909121a6192 rcutorture: Fix cleanup path for invalid torture_type strings
1081d04a0443 tty: ipwireless: fix missing checks for ioremap
c05b2ed7bc1b virtio_console: initialize vtermno value for ports
348ec7b9a1c1 media: wl128x: prevent two potential buffer overflows
557ae685914b spi: tegra114: reset controller on probe
5e75d5e2cd0c cxgb3/l2t: Fix undefined behaviour
dc2a8861fdb8 ASoC: fsl_utils: fix a leaked reference by adding missing of_node_put
971e4a273242 ASoC: eukrea-tlv320: fix a leaked reference by adding missing of_node_put
5db3c5adf44a HID: core: move Usage Page concatenation to Main item
cb7872f12835 chardev: add additional check for minor range overlap
5680f59f0f15 x86/ia32: Fix ia32_restore_sigcontext() AC leak
94032b2e05c9 arm64: cpu_ops: fix a leaked reference by adding missing of_node_put
04f45a555ec3 scsi: ufs: Avoid configuring regulator with undefined voltage range
60bcfed2ad60 scsi: ufs: Fix regulator load and icc-level configuration
0a597d2badef brcmfmac: fix race during disconnect when USB completion is in progress
f95ab00ab455 brcmfmac: convert dev_init_lock mutex to completion
db74ef82ca8b b43: shut up clang -Wuninitialized variable warning
951fbf92381a brcmfmac: fix missing checks for kmemdup
1d3ee4d7fc6a rtlwifi: fix a potential NULL pointer dereference
6d7b052d8466 iio: common: ssp_sensors: Initialize calculated_time in ssp_common_process_data
e98ef6767e41 iio: hmc5843: fix potential NULL pointer dereferences
a86d06179423 iio: ad_sigma_delta: Properly handle SPI bus locking vs CS assertion
4400dcd69478 x86/build: Keep local relocations with ld.lld
75ffb58460e3 cpufreq: pmac32: fix possible object reference leak
3d041608fd4b cpufreq/pasemi: fix possible object reference leak
4d02f33a4f42 cpufreq: ppc_cbe: fix possible object reference leak
6be923556aad s390: cio: fix cio_irb declaration
65e3cb04a5a2 extcon: arizona: Disable mic detect if running when driver is removed
db7eb206560c PM / core: Propagate dev->power.wakeup_path when no callbacks
066a286679b4 mmc: sdhci-of-esdhc: add erratum eSDHC-A001 and A-008358 support
6a783be705ba mmc: sdhci-of-esdhc: add erratum eSDHC5 support
8b0e6af16ae6 mmc_spi: add a status check for spi_sync_locked
a30e90a8eb3a scsi: libsas: Do discovery on empty PHY to update PHY info
915defac2a9a hwmon: (f71805f) Use request_muxed_region for Super-IO accesses
0eb8a476ffc5 hwmon: (pc87427) Use request_muxed_region for Super-IO accesses
79deb6abd1f5 hwmon: (smsc47b397) Use request_muxed_region for Super-IO accesses
92b4d16997c4 hwmon: (smsc47m1) Use request_muxed_region for Super-IO accesses
e3e58378c678 hwmon: (vt1211) Use request_muxed_region for Super-IO accesses
488920af3bb3 RDMA/cxgb4: Fix null pointer dereference on alloc_skb failure
2ff310e6dae2 i40e: don't allow changes to HW VLAN stripping on active port VLANs
bc791e819503 x86/irq/64: Limit IST stack overflow check to #DB stack
3557f0857767 USB: core: Don't unbind interfaces following device reset failure
6f5e198878fb sched/core: Handle overflow in cpu_shares_write_u64
9812286a63a1 sched/core: Check quota and period overflow at usec to nsec conversion
9d4961a415ed powerpc/numa: improve control of topology updates
82077215ed25 media: pvrusb2: Prevent a buffer overflow
ca865598abf1 media: au0828: Fix NULL pointer dereference in au0828_analog_stream_enable()
a8e0739d465e audit: fix a memory leak bug
ff3038fe657d media: ov2659: make S_FMT succeed even if requested format doesn't match
2d97a3abcf2f media: au0828: stop video streaming only when last user stops
115ccd9ca776 media: ov6650: Move v4l2_clk_get() to ov6650_video_probe() helper
1433d7a0937b media: coda: clear error return value before picture run
5cadb7ae715f dmaengine: at_xdmac: remove BUG_ON macro in tasklet
af8b5d7d9477 pinctrl: pistachio: fix leaked of_node references
74dd38a5a447 HID: logitech-hidpp: use RAP instead of FAP to get the protocol version
9bffc62051a9 mm/uaccess: Use 'unsigned long' to placate UBSAN warnings on older GCC versions
ae6b1f761180 x86/mm: Remove in_nmi() warning from 64-bit implementation of vmalloc_fault()
b059848e119f smpboot: Place the __percpu annotation correctly
28d8827a09b0 x86/build: Move _etext to actual end of .text
d3eb2caf6d41 bcache: avoid clang -Wunintialized warning
7bf3463abc95 bcache: add failure check to run_cache_set() for journal replay
d4547049bb7f bcache: fix failure in journal relplay
5789884b98ab bcache: return error immediately in bch_journal_replay()
50d25ca802f5 net: cw1200: fix a NULL pointer dereference
af2fb022b390 mwifiex: prevent an array overflow
4b24af093631 ASoC: fsl_sai: Update is_slave_mode with correct value
c1045350a6c4 mac80211/cfg80211: update bss channel on channel switch
a3c50ef9fd43 dmaengine: pl330: _stop: clear interrupt status
958848a1d97c w1: fix the resume command API
e4163587c4ee rtc: 88pm860x: prevent use-after-free on device remove
a898d150956b brcm80211: potential NULL dereference in brcmf_cfg80211_vndr_cmds_dcmd_handler()
5e1a879d9ab3 spi: pxa2xx: fix SCR (divisor) calculation
3d521a6fba45 ASoC: imx: fix fiq dependencies
af283aba93bb powerpc/boot: Fix missing check of lseek() return value
dba032038c95 mmc: core: Verify SD bus width
333e8303d6e0 cxgb4: Fix error path in cxgb4_init_module
6948c6bc17d6 gfs2: Fix lru_count going negative
635c71d11234 tools include: Adopt linux/bits.h
ed2faf464d9b perf tools: No need to include bitops.h in util.h
a1f254dc06f9 at76c50x-usb: Don't register led_trigger if usb_register_driver failed
f5e4337e4a9c ssb: Fix possible NULL pointer dereference in ssb_host_pcmcia_exit
e39af96f4dc1 media: vivid: use vfree() instead of kfree() for dev->bitmap_cap
a04e71a0dbc6 media: cpia2: Fix use-after-free in cpia2_exit
28eeeb86046e fbdev: fix WARNING in __alloc_pages_nodemask bug
bf8474c64846 hugetlb: use same fault hash key for shared and private mappings
6bc153907900 fbdev: fix divide error in fb_var_to_videomode
5c9a20390c01 btrfs: sysfs: don't leak memory when failing add fsid
0fa88718cdc5 Btrfs: fix race between ranged fsync and writeback of adjacent ranges
2f5ac0bd2ef7 gfs2: Fix sign extension bug in gfs2_update_stats
8aae5e98fec2 crypto: vmx - CTR: always increment IV as quadword
582bb52e4803 Revert "scsi: sd: Keep disk read-only when re-reading partition"
bd020b331706 bio: fix improper use of smp_mb__before_atomic()
603212bdc59c KVM: x86: fix return value for reserved EFER
75d63b131b73 ext4: do not delete unlinked inode from orphan list on failed truncate
31943685dd49 fbdev: sm712fb: fix memory frequency by avoiding a switch/case fallthrough
7d64186e7910 btrfs: Honour FITRIM range constraints during free space trim
57e84e4c073d md/raid: raid5 preserve the writeback action after the parity check
9013f4870848 Revert "Don't jump to compute_result state from check_result state"
0c57364fa0f4 perf bench numa: Add define for RUSAGE_THREAD if not present
66ee750cfdd7 ufs: fix braino in ufs_get_inode_gid() for solaris UFS flavour
fc0208b3428d power: supply: sysfs: prevent endless uevent loop with CONFIG_POWER_SUPPLY_DEBUG
dd37fa44dffa KVM: arm/arm64: Ensure vcpu target is unset on reset failure
fe4f461ba517 xfrm4: Fix uninitialized memory read in _decode_session4
cd0848733f25 vti4: ipip tunnel deregistration fixes.
8fd94b65d207 xfrm6_tunnel: Fix potential panic when unloading xfrm6_tunnel module
86040d722b29 xfrm: policy: Fix out-of-bound array accesses in __xfrm_policy_unlink
daea41651d43 dm delay: fix a crash when invalid device is specified
566004721c90 PCI: Mark Atheros AR9462 to avoid bus reset
0dc2ad06ddad fbdev: sm712fb: fix crashes and garbled display during DPMS modesetting
4673eae95b53 fbdev: sm712fb: use 1024x768 by default on non-MIPS, fix garbled display
c996722f7fff fbdev: sm712fb: fix support for 1024x768-16 mode
ebfadb510e3c fbdev: sm712fb: fix crashes during framebuffer writes by correctly mapping VRAM
c92bde52742c fbdev: sm712fb: fix boot screen glitch when sm712fb replaces VGA
0d5cd17ce037 fbdev: sm712fb: fix white screen of death on reboot, don't set CR3B-CR3F
ca5ce8db7f23 fbdev: sm712fb: fix VRAM detection, don't set SR70/71/74/75
6c2fb5beecba fbdev: sm712fb: fix brightness control on reboot, don't set SR30
dbc86a927d66 perf intel-pt: Fix sample timestamp wrt non-taken branches
eedc9a210f9f perf intel-pt: Fix improved sample timestamp
f5da0aeca525 perf intel-pt: Fix instructions sampling rate
a5b2e4b6ac21 memory: tegra: Fix integer overflow on tick value calculation
11988047b39a tracing: Fix partial reading of trace event's id file
a7929c94860e ceph: flush dirty inodes before proceeding with remount
3c99cd905ba9 iommu/tegra-smmu: Fix invalid ASID bits on Tegra30/114
40857ab73988 fuse: honor RLIMIT_FSIZE in fuse_file_fallocate
73724958d129 fuse: fix writepages on 32bit
12060f4740ca clk: tegra: Fix PLLM programming on Tegra124+ when PMC overrides divider
4676a07add08 NFS4: Fix v4.0 client state corruption when mount
e8623e7a8f4b media: ov6650: Fix sensor possibly not detected on probe
dffc9e5ffae5 cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level()
b8ab0c4effb8 of: fix clang -Wunsequenced for be32_to_cpu()
2a98d346396a intel_th: msu: Fix single mode with IOMMU
bc065776c31e md: add mddev->pers to avoid potential NULL pointer dereference
ade291d2230a stm class: Fix channel free in stm output free path
65d14634b694 tipc: fix modprobe tipc failed after switch order of device registration
ff69bb4be643 tipc: switch order of device registration to fix a crash
2ff783f3e05e ppp: deflate: Fix possible crash in deflate_init
dd20e0c039fe net/mlx4_core: Change the error print to info print
b2f72a431142 net: avoid weird emergency message
70064f7ea100 KVM: x86: Skip EFER vs. guest CPUID checks for host-initiated writes
5e9bc16ff49f ALSA: hda/realtek - Fix for Lenovo B50-70 inverted internal microphone bug
98529ecd313b ext4: zero out the unused memory region in the extent tree block
9ff6372e5a6b fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount
bfce20eaf18e writeback: synchronize sync(2) against cgroup writeback membership switches
cd042379c6ad crypto: arm/aes-neonbs - don't access already-freed walk.iv
b70e97ae5d8e crypto: salsa20 - don't access already-freed walk.iv
6dc48d059646 crypto: chacha20poly1305 - set cra_name correctly
b82055365307 crypto: gcm - fix incompatibility between "gcm" and "gcm_base"
de087dd9f5c6 crypto: gcm - Fix error return code in crypto_gcm_create_common()
064d0c5a9ae6 ipmi:ssif: compare block number correctly for multi-part return messages
bef039b2419e bcache: never set KEY_PTRS of journal key to 0 in journal_reclaim()
5651075a1ce3 bcache: fix a race between cache register and cacheset unregister
686e4352e3d8 Btrfs: do not start a transaction at iterate_extent_inodes()
b268b6e501ed ext4: fix ext4_show_options for file systems w/o journal
f3b9c26f191b ext4: actually request zeroing of inode table after grow
e5100e7fa78e tty/vt: fix write/write race in ioctl(KDSKBSENT) handler
592a36c59f4c mfd: da9063: Fix OTP control register names to match datasheets for DA9063/63L
e3a74fbc42ca ocfs2: fix ocfs2 read inode data panic in ocfs2_iget
b614485b6b93 mm/mincore.c: make mincore() more conservative
80cc516ed783 ASoC: RT5677-SPI: Disable 16Bit SPI Transfers
e6bf706cee3f ASoC: max98090: Fix restore of DAPM Muxes
2a8188c68e0a ALSA: hda/realtek - EAPD turn on later
1bbb08c8ab6a ALSA: hda/hdmi - Consider eld_valid when reporting jack event
2d8956305ae8 ALSA: usb-audio: Fix a memory leak bug
b1c1888ad6c9 crypto: x86/crct10dif-pcl - fix use via crypto_shash_digest()
2ee7c2310cd0 crypto: crct10dif-generic - fix use via crypto_shash_digest()
2ee0dd38a0a0 crypto: vmx - fix copy-paste error in CTR mode
f7dee0816e5d ARM: exynos: Fix a leaked reference by adding missing of_node_put
ce814dc7e811 x86/speculation/mds: Improve CPU buffer clear documentation
4d68e2bf3834 x86/speculation/mds: Revert CPU buffer clear on double fault exit
b1d850962510 ASoC: msm: Add support for AVS version check
fbf98df8d02a cnss2: Update board data file name format
5e073ffd6668 drm/msm/dsi-staging: Add range check in debugfs_dump_info_read
9600b86489f9 dwc3-msm: Fix dwc3_drd_state_string for undefined state
cc96e0915225 usb: dwc3-msm: Ensure hardware is reset during role change
02d74bda3466 usb: dwc3-msm: add enum for drd_states to remove otg_state usage
e4e5a975f4ae Merge remote-tracking branch 'origin/upstream-f2fs-stable-linux-4.4.y' into android-4.4
2d812ba62ee4 f2fs: link f2fs quota ops for sysfile
6dc3fb0ba854 fs: sdcardfs: Add missing option to show_options

* Excluded commits:
8be3b55c4cc7 msm: camera_v2: isp: update the frame drop during error case
28e17c1f6505 msm: camera_v2: isp: handle frame drop due to scheduling latency

Change-Id: Ib67f22a311625da7dd130d2491ef9e035b1db54f
Signed-off-by: Davide Garberi <dade.garberi@gmail.com>

1 files changed, 6 insertions, 0 deletions

diff --git a/ipc/msgutil.c b/ipc/msgutil.c
index ed81aafd2392..9467307487f7 100644
--- a/ipc/msgutil.c
+++ b/ipc/msgutil.c
@@ -18,6 +18,7 @@
 #include <linux/utsname.h>
 #include <linux/proc_ns.h>
 #include <linux/uaccess.h>
+#include <linux/sched.h>
 
 #include "util.h"
 
@@ -66,6 +67,9 @@ static struct msg_msg *alloc_msg(size_t len)
 	pseg = &msg->next;
 	while (len > 0) {
 		struct msg_msgseg *seg;
+
+		cond_resched();
+
 		alen = min(len, DATALEN_SEG);
 		seg = kmalloc(sizeof(*seg) + alen, GFP_KERNEL);
 		if (seg == NULL)
@@ -178,6 +182,8 @@ void free_msg(struct msg_msg *msg)
 	kfree(msg);
 	while (seg != NULL) {
 		struct msg_msgseg *tmp = seg->next;
+
+		cond_resched();
 		kfree(seg);
 		seg = tmp;
 	}