Merge tag 'android11-5.4.292_r00' into android11-5.4

This merges the android11-5.4.292_r00 tag into the android11-5.4 branch,
catching it up with the latest LTS releases.

It contains the following commits:

*   9b78f083 Merge 5.4.292 into android11-5.4-lts
|\
| * 1b01d9c3 Linux 5.4.292
| * 28090298 jfs: add index corruption check to DT_GETPAGE()
| * 3d6fd5b9 jfs: fix slab-out-of-bounds read in ea_get()
| * 42561fe6 tracing: Fix use-after-free in print_graph_function_flags during tracer switching
| * 922a7003 mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
| * a7d0f84a ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP
| * 618d5612 x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
| * c0189c02 x86/tsc: Always save/restore TSC sched_clock() on suspend/resume
| * 2414095a ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()
| * a1ef4447 can: flexcan: only change CAN state when link up in system PM
| * 661cf5d1 arcnet: Add NULL check in com20020pci_probe()
| * 5309432c net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy
| * 87c53a1c ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
| * 42df95e5 vsock: avoid timeout during connect() if the socket is closing
| * 7abc8318 net_sched: skbprio: Remove overly strict queue assertions
| * 1ad9166c netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
| * b9f29803 ntb: intel: Fix using link status DB's
| * f56951f2 ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
| * 829bd613 spufs: fix a leak in spufs_create_context()
| * b1eef06d spufs: fix a leak on spufs_new_file() failure
| * 52141566 hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
| * 12d344d7 can: statistics: use atomic access in hot path
| * d6ae75c3 locking/semaphore: Use wake_q to wake up processes outside lock critical section
| * 0ab44f03 sched/deadline: Use online cpus for validating runtime
| * 04039a38 affs: don't write overlarge OFS data block size fields
| * 739499e1 affs: generate OFS sequence numbers starting at 1
| * f5302f67 wifi: iwlwifi: fw: allocate chained SG tables for dump
| * 99bd6444 sched/smt: Always inline sched_smt_active()
| * da3b90f7 octeontx2-af: Fix mbox INTR handler when num VFs > 64
| * 4a760b68 ring-buffer: Fix bytes_dropped calculation issue
| * 536f7f35 objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
| * 6601c04a fs/procfs: fix the comment above proc_pid_wchan()
| * 38dffe99 perf python: Check if there is space to copy all the event
| * 213ee3d7 perf python: Decrement the refcount of just created event on failure
| * 58edf5e6 perf python: Fixup description of sample.id event member
| * ef34840b ocfs2: validate l_tree_depth to avoid out-of-bounds access
| * 8a3ebead kexec: initialize ELF lowest address to ULONG_MAX
| * 46680699 perf units: Fix insufficient array space
| * d1696caf iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio
| * 61c6dc3b coresight: catu: Fix number of pages while using 64k pages
| * 99c737ec isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
| * 85a17b9a x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
| * 2bf98cc7 mfd: sm501: Switch to BIT() to mitigate integer overflows
| * 3b97d770 RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
| * a4be0b57 power: supply: max77693: Fix wrong conversion of charge input threshold value
| * b26152f5 x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
| * 62ae4a1b clk: amlogic: g12a: fix mmc A peripheral clock
| * 450a1d9e clk: amlogic: gxbb: drop non existing 32k clock parent
| * d15e95d7 clk: amlogic: g12b: fix cluster A parent data
| * 0c23a6f1 IB/mad: Check available slots before posting receive WRs
| * 64f805c3 clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
| * f53c2937 pinctrl: renesas: rza2: Fix missing of_node_put() call
| * 37e63b0a lib: 842: Improve error handling in sw842_compress()
| * 794d6b4b bpf: Use preempt_count() directly in bpf_send_signal_common()
| * 67176000 clk: amlogic: gxbb: drop incorrect flag on 32k clock
| * 90ab169f fbdev: sm501fb: Add some geometry checks.
| * 38b9a21a mdacon: rework dependency list
| * ab846209 fbdev: au1100fb: Move a variable assignment behind a null pointer check
| * ed8bf338 PCI: pciehp: Don't enable HPIE when resuming in poll mode
| * 70a83ba1 PCI: Remove stray put_device() in pci_register_host_bridge()
| * c6f9613a PCI/portdrv: Only disable pciehp interrupts early when needed
| * 0a0f9aec PCI/ASPM: Fix link state exit during switch upstream function removal
| * 6038b90c drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member
| * b66baefc ALSA: hda/realtek: Always honor no_shutup_pins
| * fc50ed31 perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
| * c6d87a55 lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()
| * 41b5a588 PM: sleep: Fix handling devices with direct_complete set on errors
| * d0d21c8e thermal: int340x: Add NULL check for adev
| * cc4b1610 EDAC/ie31200: Fix the error path order of ie31200_init()
| * 563493f2 EDAC/ie31200: Fix the DIMM size mask for several SoCs
| * eb96456b EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
| * 095a5cba selinux: Chain up tool resolving errors in install_policy.sh
| * e6748cbb x86/platform: Only allow CONFIG_EISA for 32-bit
| * 3b2e1ce7 x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct()
| * 73cee9b5 cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
| * c918f836 x86/mm/pat: cpa-test: fix length for CPA_ARRAY test
| * 0d510e17 serial: 8250_dma: terminate correct DMA in tx_dma_flush()
| * 914c5e5b memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
| * e206041b net: usb: usbnet: restore usb%d name exception for local mac addresses
| * 52ea3f58 net: usb: qmi_wwan: add Telit Cinterion FE990B composition
| * c960ab00 net: usb: qmi_wwan: add Telit Cinterion FN990B composition
| * 16eed55a tty: serial: 8250: Add some more device IDs
| * b7e4d3d7 counter: stm32-lptimer-cnt: fix error handling when enabling
| * 6488b96a netfilter: socket: Lookup orig tuple for IPv6 SNAT
| * 0387a57c ARM: Remove address checking for MMUless devices
| * 1c078dad ARM: 9351/1: fault: Add "cut here" line for prefetch aborts
| * 11bb0596 ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed()
| * ab92f51c atm: Fix NULL pointer dereference
| * b93e9fd3 HID: hid-plantronics: Add mic mute mapping and generalize quirks
| * ece47d92 ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names
| * 0effb378 drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
| * 9bd50100 batman-adv: Ignore own maximum aggregation size during RX
| * 8310e6a1 ARM: shmobile: smp: Enforce shmobile_smp_* alignment
| * 450cd5f5 mmc: atmel-mci: Add missing clk_disable_unprepare()
| * a354b8bb drm/v3d: Don't run jobs that have errors flagged in its fence
| * d3e4439a i2c: omap: fix IRQ storms
| * 9dcf9db1 net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
| * 50e28809 net: atm: fix use after free in lec_send()
| * f400408c ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
| * 16267a50 ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
| * b3d607e3 Bluetooth: Fix error code in chan_alloc_skb_cb()
| * 2cf52286 RDMA/hns: Fix wrong value of max_sge_rd
| * 7cfd80fa RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
| * 4f0f8379 xfrm_output: Force software GSO only in tunnel mode
| * d5413251 firmware: imx-scu: fix OF node leak in .probe()
| * c9e2b3b2 i2c: sis630: Fix an error handling path in sis630_probe()
| * 20521ee7 i2c: ali15x3: Fix an error handling path in ali15x3_probe()
| * 75148adf i2c: ali1535: Fix an error handling path in ali1535_probe()
| * f26d8271 ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
| * 5d45755d drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
| * 880295b6 qlcnic: fix memory leak issues in qlcnic_sriov_common.c
| * cca3ab74 drm/amd/display: Assign normalized_pix_clk when color depth = 14
| * 31ed3586 drm/atomic: Filter out redundant DPMS calls
| * d509c473 x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
| * 2175d3c1 USB: serial: option: match on interface class for Telit FN990B
| * f26a86f8 USB: serial: option: fix Telit Cinterion FE990A name
| * 57f6ae8b USB: serial: option: add Telit Cinterion FE990B compositions
| * abb9f684 USB: serial: ftdi_sio: add support for Altera USB Blaster 3
| * 8d8e2c99 block: fix 'kmem_cache of name 'bio-108' already exists'
| * f6e43f6a drm/nouveau: Do not override forced connector status
| * f8e635b7 x86/irq: Define trace events conditionally
| * 34468b2e fuse: don't truncate cached, mutated symlink
| * e7fa90c0 nvme: only allow entering LIVE from CONNECTING state
| * 36256b24 sctp: Fix undefined behavior in left shift operation
| * 72f67636 nvmet-rdma: recheck queue state is LIVE in state lock in recv done
| * 3dbbc37d ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
| * 8b3c9b69 s390/cio: Fix CHPID "configure" attribute caching
| * 9af297ae HID: ignore non-functional sensor in HP 5MP Camera
| * bfa6d90d HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
| * cc4d9d3a ACPI: resource: IRQ override for Eluktronics MECH-17
| * afa27b7c scsi: qla1280: Fix kernel oops when debug level > 2
| * a858cd58 iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
| * 6752747a powercap: call put_device() on an error path in powercap_register_control_type()
| * 66beda69 hrtimers: Mark is_migration_base() with __always_inline
| * 27b2f3dc nvme-fc: go straight to connecting state when initializing
| * bb728b55 net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
| * aaeefb98 netfilter: nft_exthdr: fix offset with ipv4_find_option()
| * e05d9938 net_sched: Prevent creation of classes with TC_H_ROOT
| * ab45c0ee ipvs: prevent integer overflow in do_ip_vs_get_ctl()
| * f522229c netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
| * ca61dc0c Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
| * 1485aaf8 drivers/hv: Replace binary semaphore with mutex
| * 6a3c34e8 netpoll: hold rcu read lock in __netpoll_send_skb()
| * 413691c5 netpoll: netpoll_send_skb() returns transmit status
| * e3235e04 netpoll: move netpoll_send_skb() out of line
| * ddf54580 netpoll: remove dev argument from netpoll_send_skb_on_dev()
| * 0945ed0e netpoll: Fix use correct return type for ndo_start_xmit()
| * 9cc1b39f pinctrl: bcm281xx: Fix incorrect regmap max_registers value
| * cf387cde sctp: sysctl: auth_enable: avoid using current->nsproxy
| * 5599b212 sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
| * 19573dcd Revert "sctp: sysctl: auth_enable: avoid using current->nsproxy"
| * 2ced96df Revert "sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy"
| * 769f2099 sched/isolation: Prevent boot crash when the boot CPU is nohz_full
| * 9f89d4ad clockevents/drivers/i8253: Fix stop sequence for timer 0
| * 549de58d vlan: fix memory leak in vlan_newlink()
* | 51aa3bfe Revert "tasklet: Introduce new initialization API"
* | fa82985d Revert "net: usb: rtl8150: use new tasklet API"
* | 2461d9a3 Revert "net: usb: rtl8150: enable basic endpoint checking"
* | eb00272a Revert "usb: xhci: Add timeout argument in address_device USB HCD callback"
* | 4364e0f8 Revert "usb: xhci: Fix NULL pointer dereference on certain command aborts"
* | d6a7c6fa Merge 5.4.291 into android11-5.4-lts
|\|
| * 52bcf31d Linux 5.4.291
| * 7f24cff7 eeprom: digsy_mtc: Make GPIO lookup table match the device
| * cec8c0ac slimbus: messaging: Free transaction ID in delayed interrupt scenario
| * 56190848 intel_th: pci: Add Panther Lake-P/U support
| * 3940fe7d intel_th: pci: Add Panther Lake-H support
| * 8740a9dd intel_th: pci: Add Arrow Lake support
| * 32c114a5 Squashfs: check the inode number is not the invalid value of zero
| * e722515d xhci: pci: Fix indentation in the PCI device ID definitions
| * 19b39188 usb: gadget: Check bmAttributes only if configuration is valid
| * 9af1d5c4 usb: gadget: Fix setting self-powered state on suspend
| * 7367e87b usb: gadget: Set self-powered based on MaxPower and bmAttributes
| * 094b49de usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
| * b654e4c7 usb: typec: ucsi: increase timeout for PPM reset operations
| * dcd592ab usb: atm: cxacru: fix a flaw in existing endpoint checks
| * 4cd847a7 usb: renesas_usbhs: Flush the notify_hotplug_work
| * a5c8be59 usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
| * 97f8c815 usb: renesas_usbhs: Use devm_usb_get_phy()
| * d1968eda usb: renesas_usbhs: Call clk_put()
| * 0971d857 Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
| * efbddfb9 gpio: rcar: Fix missing of_node_put() call
| * a3895a36 net: ipv6: fix missing dst ref drop in ila lwtunnel
| * c2fb9104 net: ipv6: fix dst ref loop in ila lwtunnel
| * 4ca4dce1 net-timestamp: support TCP GSO case for a few missing flags
| * 7f1564b2 vlan: enforce underlying device type
| * d685096c ppp: Fix KMSAN uninit-value warning with bpf
| * 797bb943 be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
| * f5a7fa42 drm/sched: Fix preprocessor guard
| * 7a115f43 hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
| * cd1c4432 llc: do not use skb_get() before dev_queue_xmit()
| * b205ac53 hwmon: (ad7314) Validate leading zero bits and return error
| * 90b2aee4 hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
| * d51369e7 hwmon: (pmbus) Initialise page count in pmbus_identify()
| * 990fff69 caif_virtio: fix wrong pointer check in cfv_probe()
| * 9f28205d net: gso: fix ownership in __udp_gso_segment
| * 0c1fb475 HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
| * 8ecee2b0 HID: google: fix unused variable warning under !CONFIG_ACPI
| * 38f0d398 wifi: iwlwifi: limit printed string from FW file
| * b7f3090f mm/page_alloc: fix uninitialized variable
| * d4ec862c rapidio: fix an API misues when rio_add_net() fails
| * 6d22953c rapidio: add check for rio_add_net() in rio_scan_alloc_net()
| * 5ea856d9 wifi: nl80211: reject cooked mode if it is set along with other flags
| * 62b1a9bb wifi: cfg80211: regulatory: improve invalid hints checking
| * 62c602f3 x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
| * c67b103a x86/cpu: Validate CPUID leaf 0x2 EDX output
| * 0d127542 x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
| * 9616539e platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
| * 1f754827 drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
| * 19abf50b ALSA: hda/realtek: update ALC222 depop optimize
| * 07bc341d ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
| * 6db423b0 HID: appleir: Fix potential NULL dereference at raw event handle
| * 38807477 Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'"
| * f1f5e415 drm/amdgpu: disable BAR resize on Dell G5 SE
| * d6566c66 drm/amdgpu: Check extended configuration space register when system uses large bar
| * fa996df8 drm/amdgpu: skip BAR resizing if the bios already did it
| * 8acbf4a8 acct: perform last write from workqueue
| * 8d30d9dd kernel/acct.c: use dedicated helper to access rlimit values
| * 1b18a011 kernel/acct.c: use #elif instead of #end and #elif
| * 6e9e0f22 drop_monitor: fix incorrect initialization order
| * 78285b53 pfifo_tail_enqueue: Drop new packet when sch->limit == 0
| * 321794b7 sched/core: Prevent rescheduling when interrupts are disabled
| * 4af1aff3 phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk
| * 074f4e62 phy: tegra: xusb: reset VBUS & ID OVERRIDE
| * 5f2dbabb usbnet: gl620a: fix endpoint checking in genelink_bind()
| * 81382297 perf/core: Fix low freq setting via IOC_PERIOD
| * 5b3d32f6 ftrace: Avoid potential division by zero in function_stat_show()
| * 58446f98 x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems
| * 7ff67d19 net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination.
| * 747010ed ipvs: Always clear ipvs_property flag in skb_scrub_packet()
| * aa91462f ASoC: es8328: fix route from DAC to output
| * a15efcf8 net: cadence: macb: Synchronize stats calculations
| * c75c6e6e net: loopback: Avoid sending IP packets without an Ethernet header
| * a049c2d8 sunrpc: suppress warnings for unused procfs functions
| * 1c334629 batman-adv: Drop unmanaged ELP metric worker
| * 77bff7bb batman-adv: Ignore neighbor throughput metrics in error case
| * fe7343b8 acct: block access to kernel internal filesystems
| * 521ad61f ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED
| * d64c6ca4 nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()
| * 3eb49113 tee: optee: Fix supplicant wait loop
| * 3c6e8129 power: supply: da9150-fg: fix potential overflow
| * 607b0b1c flow_dissector: Fix port range key handling in BPF conversion
| * c67e2356 flow_dissector: Fix handling of mixed port and port-range keys
| * 895d0484 net: extract port range fields from fl_flow_key
| * d37e36db geneve: Suppress list corruption splat in geneve_destroy_tunnels().
| * 7f86fb07 gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().
| * d5e86e27 geneve: Fix use-after-free in geneve_find_dev().
| * 97de5852 powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC
| * 206c9a8f ALSA: hda/realtek: Fixup ALC225 depop procedure
| * 85d63c55 ALSA: hda/realtek - Add type for ALC287
| * 2ecb6632 powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline
| * fc4f8ac3 powerpc/64s/mm: Move __real_pte stubs into hash-4k.h
| * 727dee08 USB: gadget: f_midi: f_midi_complete to call queue_work
| * 89019ab7 usb/gadget: f_midi: Replace tasklet with work
| * ec42b4a0 usb/gadget: f_midi: convert tasklets to use new tasklet_setup() API
| * 19aad69c usb: dwc3: Fix timeout issue during controller enter/exit from halt state
| * 935e842f usb: dwc3: Increase DWC3 controller halt timeout
| * 72f2c0b7 memcg: fix soft lockup in the OOM process
| * de3f6e7a mm: update mark_victim tracepoints fields
| * 3758d1ed crypto: testmgr - some more fixes to RSA test vectors
| * 5ecee5d5 crypto: testmgr - populate RSA CRT parameters in RSA test vectors
| * 3a2f1eb7 crypto: testmgr - fix version number of RSA tests
| * 1bd5831c crypto: testmgr - Fix wrong test case of RSA
| * 321cc1d8 crypto: testmgr - fix wrong key length for pkcs1pad
| * 87bc3cb2 driver core: bus: Fix double free in driver API bus_register()
| * 01968029 scsi: storvsc: Set correct data length for sending SCSI command without payload
| * eab83178 vlan: move dev_put into vlan_dev_uninit
| * b195d229 vlan: introduce vlan_dev_free_egress_priority
| * 480afcbe ima: Fix use-after-free on a dentry's dname.name
| * 785c78ed pps: Fix a use-after-free
| * 41d3c605 btrfs: avoid monopolizing a core when activating a swap file
| * ed0c0c7d Revert "btrfs: avoid monopolizing a core when activating a swap file"
| * 67f70e61 x86/i8253: Disable PIT timer 0 when not in use
| * 81b605bb parport_pc: add support for ASIX AX99100
| * 14ffcc45 serial: 8250_pci: add support for ASIX AX99100
| * 753ad96c can: ems_pci: move ASIX AX99100 ids to pci_ids.h
| * e1fc4a90 nilfs2: protect access to buffers with no active references
| * 7d0544ba nilfs2: do not force clear folio if buffer is referenced
| * 1ca6d471 nilfs2: do not output warnings when clearing dirty buffers
| * 24d59c41 alpha: replace hardcoded stack offsets with autogenerated ones
| * 10a1f3fe ndisc: extend RCU protection in ndisc_send_skb()
| * e85a25d1 openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
| * 10f555e3 arp: use RCU protection in arp_xmit()
| * e1aed6be neighbour: use RCU protection in __neigh_notify()
| * c5d53d3a neighbour: delete redundant judgment statements
| * 96fc896d ndisc: use RCU protection in ndisc_alloc_skb()
| * 78ad0574 ipv6: use RCU protection in ip6_default_advmss()
| * 8cc8e128 ipv4: use RCU protection in inet_select_addr()
| * 15529811 ipv4: use RCU protection in rt_is_expired()
| * 7f86ac1f net: add dev_net_rcu() helper
| * fde36de3 net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
| * ef539316 regmap-irq: Add missing kfree()
| * a3e77da9 partitions: mac: fix handling of bogus partition table
| * 9cb4edb2 gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock
| * 7ec1e5e9 alpha: align stack for page fault and user unaligned trap handlers
| * bbec5998 serial: 8250: Fix fifo underflow on flush
| * ab4f7b1d alpha: make stack 16-byte aligned (most cases)
| * 1abecca5 can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero
| * 85069553 can: c_can: fix unbalanced runtime PM disable in error path
| * 039cc7d9 USB: serial: option: drop MeiG Smart defines
| * 6621ddcd USB: serial: option: fix Telit Cinterion FN990A name
| * b95bd124 USB: serial: option: add Telit Cinterion FN990B compositions
| * 2b038768 USB: serial: option: add MeiG Smart SLM828
| * 7cfb70e9 usb: cdc-acm: Fix handling of oversized fragments
| * a4e1ae5c usb: cdc-acm: Check control transfer buffer size before access
| * 42b30501 USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk
| * 49f07710 USB: hub: Ignore non-compliant devices with too many configs or interfaces
| * 3a983390 usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
| * a0a18484 USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone
| * a120aad6 USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist
| * 2b8a7cfe USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI
| * 1c231617 usb: dwc2: gadget: remove of_node reference upon udc_stop
| * 3d921d29 usb: gadget: udc: renesas_usb3: Fix compiler warning
| * 27a15815 usb: roles: set switch registered flag early on
| * 167422a0 batman-adv: fix panic during interface removal
| * c4edbd54 ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V
| * 18b7f841 orangefs: fix a oob in orangefs_debug_write
| * c0c082fe Grab mm lock before grabbing pt lock
| * d85ab22d vfio/pci: Enable iowrite64 and ioread64 for vfio pci
| * dde407d9 media: cxd2841er: fix 64-bit division on gcc-9
| * e9d30ea7 x86/xen: allow larger contiguous memory regions in PV guests
| * 386c8657 xen: remove a confusing comment on auto-translated guest I/O
| * 69c84cf3 gpio: bcm-kona: Add missing newline to dev_err format string
| * f40d5f01 gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ
| * 9b4d03e5 gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0
| * 4371ac7b arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
| * 7c30483d team: better TEAM_OPTION_TYPE_STRING validation
| * 6ccaa579 vrf: use RCU protection in l3mdev_l3_out()
| * a4b3863f ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu()
| * a04d96ef HID: multitouch: Add NULL check in mt_input_configured
| * 3cb901b8 ocfs2: check dir i_size in ocfs2_find_entry
| * 16e8693e MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static
| * fdc1e724 ptp: Ensure info->enable callback is always set
| * 70dc66d0 net/ncsi: wait for the last response to Deselect Package before configuring channel
| * b04fd7cd misc: fastrpc: Fix registered buffer page address
| * 2535f15d mtd: onenand: Fix uninitialized retlen in do_otp_read()
| * bd249109 NFC: nci: Add bounds checking in nci_hci_create_pipe()
| * 76499379 nilfs2: fix possible int overflows in nilfs_fiemap()
| * cd3e22b2 ocfs2: handle a symlink read error correctly
| * 970ef46c ocfs2: fix incorrect CPU endianness conversion causing mount failure
| * 9377cdc1 vfio/platform: check the bounds of read/write syscalls
| * 406c63ce nvmem: core: improve range check for nvmem_cell_write()
| * 8c735ef8 crypto: qce - unregister previously registered algos in error path
| * f933d3b2 crypto: qce - fix goto jump in error path
| * d7b11ef0 media: uvcvideo: Remove redundant NULL assignment
| * 4823ab37 media: uvcvideo: Fix event flags in uvc_ctrl_send_events
| * 85b3a788 media: ov5640: fix get_light_freq on auto
| * 5d50d51d soc: qcom: smem_state: fix missing of_node_put in error path
| * 6e3e74dd kbuild: Move -Wenum-enum-conversion to W=2
| * 1130e26e powerpc/pseries/eeh: Fix get PE state translation
| * 0367db43 serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use
| * 8119f3af serial: sh-sci: Drop __initdata macro for port_cfg
| * 7445fa05 soc: qcom: socinfo: Avoid out of bounds read of serial number
| * cc4e1d76 usb: gadget: f_tcm: Don't prepare BOT write request twice
| * 54e7215e usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint
| * 6e10b792 usb: gadget: f_tcm: Decrement command ref count on cleanup
| * 5e051636 usb: gadget: f_tcm: Translate error to sense
| * 2326e191 wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
| * b64e9092 HID: hid-sensor-hub: don't use stale platform-data on remove
| * 4aac5315 of: reserved-memory: Fix using wrong number of cells to get property 'alignment'
| * 8c4178d2 of: Fix of_find_node_opts_by_path() handling of alias+path+options
| * b3f14fcc of: Correct child specifier used as input of the 2nd nexus node
| * 7cd71d75 perf bench: Fix undefined behavior in cmpworker()
| * 523003eb clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate
| * 5d549136 clk: qcom: clk-alpha-pll: fix alpha mode configuration
| * a9a7672f Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
| * 737c74bc drm/komeda: Add check for komeda_get_layer_fourcc_list()
| * a5ddf262 KVM: s390: vsie: fix some corner-cases when grabbing vsie pages
| * 5cce2ed6 KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
| * db9088f4 arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma
| * 0b6be54d binfmt_flat: Fix integer overflow bug on 32 bit systems
| * 15e94cfe m68k: vga: Fix I/O defines
| * c763d341 s390/futex: Fix FUTEX_OP_ANDN implementation
| * 2f50af0c leds: lp8860: Write full EEPROM, not only half of it
| * 619708ef cpufreq: s3c64xx: Fix compilation warning
| * a2bfaf4c tun: revert fix group permission check
| * e395fec7 netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
| * b8bf5c3f net: rose: lock the socket in rose_bind()
| * 4fae092c udp: gso: do not drop small packets when PMTU reduces
| * 558d3ace tg3: Disable tg3 PCIe AER on system reboot
| * fe8b241e gpu: drm_dp_cec: fix broken CEC adapter properties check
| * 309b4939 firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry
| * 3a1aeef3 nvme: handle connectivity loss in nvme_set_queue_count
| * fd8bfaeb usb: xhci: Fix NULL pointer dereference on certain command aborts
| * 7032df57 usb: xhci: Add timeout argument in address_device USB HCD callback
| * 431be4f7 net: usb: rtl8150: enable basic endpoint checking
| * 88892dab net: usb: rtl8150: use new tasklet API
| * 21dc5a1d tasklet: Introduce new initialization API
| * 579fac0e kbuild: userprogs: use correct lld when linking through clang
| * 44fe1efb sched: sch_cake: add bounds checks to host bulk flow fairness counts
| * 2a29413a media: uvcvideo: Remove dangling pointers
| * 1df994d8 media: uvcvideo: Only save async fh if success
| * b38c6c26 nilfs2: handle errors that nilfs_prepare_chunk() may return
| * 620e0369 nilfs2: eliminate staggered calls to kunmap in nilfs_rename
| * 49d80141 nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link
| * dff1553c spi-mxs: Fix chipselect glitch
| * 7220b244 x86/mm: Don't disable PCID when INVLPG has been fixed by microcode
| * 96c2ddba APEI: GHES: Have GHES honor the panic= setting
| * 8bec50f4 HID: Wacom: Add PCI Wacom device support
| * 7283aa97 mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id
| * c67efabd tomoyo: don't emit warning in tomoyo_write_control()
| * 0a457223 wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy()
| * ea7e57d5 mmc: core: Respect quirk_max_rate for non-UHS SDIO card
| * 369c063e tun: fix group permission check
| * 54c14022 printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
| * 9bc723d8 x86/amd_nb: Restrict init function to AMD-based systems
| * 7c4d23b6 sched: Don't try to catch up excess steal time.
| * 49c8a023 btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling
| * cee55b12 btrfs: fix use-after-free when attempting to join an aborted transaction
| * ab476f0a btrfs: output the reason for open_ctree() failure
| * 7cb72dc0 usb: gadget: f_tcm: Don't free command immediately
| * d6e5ba25 media: uvcvideo: Fix double free in error path
| * 3a002e40 HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections
| * 3b269db6 usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE
| * 0692c819 drivers/card_reader/rtsx_usb: Restore interrupt based detection
| * 270c48e6 ktest.pl: Check kernelrelease return in get_version
| * d763fa3b NFSD: Reset cb_seq_status after NFS4ERR_DELAY
| * 2ac1d470 hexagon: Fix unbalanced spinlock in die()
| * bfac5209 hexagon: fix using plain integer as NULL pointer warning in cmpxchg
| * 884385cb genksyms: fix memory leak when the same symbol is read from *.symref file
| * a149fe31 genksyms: fix memory leak when the same symbol is added from source
| * a78fbf97 net: sh_eth: Fix missing rtnl lock in suspend/resume path
| * 64cd1206 vsock: Allow retrying on connect() failure
| * 093c20a3 perf trace: Fix runtime error of index out of bounds
| * db79e982 net: davicom: fix UAF in dm9000_drv_remove
| * 52f5aff3 net: rose: fix timer races against user threads
| * a51dedd5 PM: hibernate: Add error handling for syscore_suspend()
| * 71a0fcb6 ipmr: do not call mr_mfc_uses_dev() for unres entries
| * 6ffa1908 net: fec: implement TSO descriptor cleanup
| * 428aff8f ubifs: skip dumping tnc tree when zroot is null
| * 21cd59fc rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
| * 5057f4d0 dmaengine: ti: edma: fix OF node reference leaks in edma_driver
| * 9fdcd003 module: Extend the preempt disabled section in dereference_symbol_descriptor().
| * ab3e71ae ocfs2: mark dquot as inactive if failed to start trans while releasing dquot
| * b4beb4a9 scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails
| * 9274ff68 scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1
| * 01ace074 staging: media: imx: fix OF node leak in imx_media_add_of_subdevs()
| * 7c22a9c3 media: uvcvideo: Propagate buf->error to userspace
| * 12a73f44 media: camif-core: Add check for clk_enable()
| * 35654e1c media: mipi-csis: Add check for clk_enable()
| * a0a94370 PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy()
| * 406429d8 media: lmedm04: Handle errors for lme2510_int_read
| * a6a31b4c media: lmedm04: Use GFP_KERNEL for URB allocation/submission.
| * 82e6f016 media: rc: iguanair: handle timeouts
| * 9b9a7e66 fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device()
| * e87fee83 ARM: dts: mediatek: mt7623: fix IR nodename
| * f3606e14 arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names
| * 9cd56af0 arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property
| * 2b759f78 rdma/cxgb4: Prevent potential integer overflow on 32bit
| * c4e639ac RDMA/mlx4: Avoid false error about access to uninitialized gids array
| * feba1308 bpf: Send signals asynchronously if !preemptible
| * 66ad33b3 perf report: Fix misleading help message about --demangle
| * 819d7f38 perf top: Don't complain about lack of vmlinux when not resolving some kernel samples
| * 8899c514 padata: fix sysfs store callback check
| * 4bd8444a ktest.pl: Remove unused declarations in run_bisect_test function
| * 3d13beb4 perf header: Fix one memory leakage in process_bpf_prog_info()
| * 7789f9f7 perf header: Fix one memory leakage in process_bpf_btf()
| * 3b22b8a1 ASoC: sun4i-spdif: Add clock multiplier settings
| * 0b920758 tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind
| * cd796e26 net: sched: Disallow replacing of child qdisc from one parent to another
| * cb53e470 net/mlxfw: Drop hard coded max FW flash image size
| * d0e0f9c8 net: let net.core.dev_weight always be non-zero
| * a2428720 clk: analogbits: Fix incorrect calculation of vco rate delta
| * 39f5d44f selftests: harness: fix printing of mismatch values in __EXPECT()
| * 822a5a05 selftests/harness: Display signed values correctly
| * a84063de wifi: wlcore: fix unbalanced pm_runtime calls
| * d0c5fd20 regulator: of: Implement the unwind path of of_regulator_match()
| * 0a7794b9 team: prevent adding a device which is already a team device lower
| * 6f4354ca cpupower: fix TSC MHz calculation
| * 167483d9 wifi: rtlwifi: pci: wait for firmware loading before releasing memory
| * 85b67b4c wifi: rtlwifi: fix memory leaks and invalid access at probe error path
| * f801e754 wifi: rtlwifi: remove unused check_buddy_priv
| * 4f6d6cbf wifi: rtlwifi: remove unused dualmac control leftovers
| * bbac1dd0 wifi: rtlwifi: remove unused timer and related code
| * 0f02775e rtlwifi: replace usage of found with dedicated list iterator variable
| * 088e47ef dt-bindings: mmc: controller: clarify the address-cells description
| * 88f04590 wifi: rtlwifi: usb: fix workqueue leak when probe fails
| * 1faa2647 wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step
| * f5dad52e rtlwifi: rtl8192se Rename RT_TRACE to rtl_dbg
| * ee74aec7 wifi: rtlwifi: do not complete firmware loading needlessly
| * 1a8a17c5 ipmi: ipmb: Add check devm_kasprintf() returned value
| * a713ba71 drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
| * b4a95da4 drm/etnaviv: Fix page property being used for non writecombine buffers
| * 092bb58e partitions: ldm: remove the initial kernel-doc notation
| * e70a5784 nbd: don't allow reconnect after disconnect
| * f84e0240 afs: Fix directory format encoding struct
| * ed6c8c1f overflow: Allow mixed type arguments
| * 0f6dd567 overflow: Correct check_shl_overflow() comment
| * dbf89a4d overflow: Add __must_check attribute to check_*() helpers
| * 08c32d67 udf: Fix use of check_add_overflow() with mixed type arguments
| * a4c54df0 perf cs-etm: Add missing variable in cs_etm__process_queues()
* 6e905d8b Merge branch 'android11-5.4' into android11-5.4-lts

Change-Id: I83d45c04bbee6185721829195b1bf0ddbd437f16
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>