Merge tag 'android11-5.4.295_r00' into android11-5.4

This merges the android11-5.4.295_r00 tag into the android11-5.4 branch,
catching it up with the latest LTS releases.

It contains the following commits:

*   978aeb58 Merge 5.4.295 into android11-5.4-lts
|\
| * 39ed7800 Linux 5.4.295
| * 5d848699 scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops
| * 64773b3e arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
| * 7b8f3c72 perf: Fix sample vs do_exit()
| * cc2f923e s390/pci: Fix __pcilg_mio_inuser() inline assembly
| * b9dc8b84 rtc: test: Fix invalid format specifier.
| * 5c1a34ff jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
| * 753f142f mm/huge_memory: fix dereferencing invalid pmd migration entry
| * afef20f4 rtc: Make rtc_time64_to_tm() support dates before 1970
| * 31d87dda rtc: Improve performance of rtc_time64_to_tm(). Add tests.
| * 59892d18 xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create
| * 78a4b8e3 posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
| * 0fee1b2b ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms
| * b9ffe75f ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
| * 6a4c1721 ARM: dts: am335x-bone-common: Add GPIO PHY reset on revision C3 board
| * fcfccf56 net: atm: fix /proc/net/atm/lec handling
| * e91274cc net: atm: add lec_mutex
| * 956f1499 calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
| * 3998283e tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
| * 49188652 tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior
| * c19c0943 atm: atmtcp: Free invalid length skb in atmtcp_c_send().
| * 2919297b mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
| * 0140d3d3 wifi: carl9170: do not ping device which has failed to load firmware
| * ed52e965 aoe: clean device rq_list in aoedev_downdev()
| * c14c02a7 hwmon: (occ) fix unaligned accesses
| * 738066cd drm/nouveau/bl: increase buffer size to avoid truncate warning
| * 2b9109de erofs: remove unused trace event erofs_destroy_inode
| * de2b7d13 ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
| * 6357f20e ALSA: hda/intel: Add Thinkpad E15 to PM deny list
| * 82ff0cc5 Input: sparcspkr - avoid unannotated fall-through
| * 7a6d6b68 HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
| * 5e0d0099 atm: Revert atm_account_tx() if copy_from_iter_full() fails.
| * a21966e5 selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
| * 48222a33 scsi: s390: zfcp: Ensure synchronous unit_add
| * 8bc89302 scsi: storvsc: Increase the timeouts to storvsc_timeout
| * 7e860296 jffs2: check jffs2_prealloc_raw_node_refs() result in few other places
| * 337f80f3 jffs2: check that raw node were preallocated before writing summary
| * a8b5ea2e drivers/rapidio/rio_cm.c: prevent possible heap overwrite
| * a8b7347f Revert "x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2" on v6.6 and older
| * ba649593 powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery
| * 65594ec9 platform/x86: dell_rbu: Stop overwriting data buffer
| * e6ff2952 platform: Add Surface platform directory
| * 882ff6d3 Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first"
| * 77a06908 tee: Prevent size calculation wraparound on 32-bit kernels
| * 54edad2d ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY
| * 41a4c323 bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
| * df5bd729 watchdog: da9052_wdt: respect TWDMIN
| * 87260763 i40e: fix MMIO write access to an invalid page in i40e_clear_hw
| * 7e372262 sock: Correct error checking condition for (assign|release)_proto_idx()
| * ac7bfaa0 scsi: lpfc: Use memcpy() for BIOS version
| * 4f10da4e vxlan: Do not treat dst cache initialization errors as fatal
| * 90cba782 clk: rockchip: rk3036: mark ddrphy as critical
| * 7c24ad36 wifi: mac80211: do not offer a mesh path if forwarding is disabled
| * db876c0a net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info
| * 7db634f5 pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get()
| * e29b3da9 pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction()
| * 31683586 pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction()
| * ecbd6b4d pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name()
| * de9b7586 ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT
| * bcaf3c2f tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows
| * 17c42ca3 tcp: always seek for minimal rtt in tcp_rcv_rtt_update()
| * 17813543 net: dlink: add synchronization for stats update
| * 8094640c sctp: Do not wake readers in __sctp_write_space()
| * c5ea7c6d emulex/benet: correct command version selection in be_cmd_get_stats()
| * aa588740 i2c: designware: Invoke runtime suspend on quick slave re-registration
| * 9a9fd402 net: macb: Check return value of dma_set_mask_and_coherent()
| * 7f33b484 cpufreq: Force sync policy boost with global boost on sysfs update
| * d4292853 nios2: force update_mmu_cache on spurious tlb-permission--related pagefaults
| * b0d92b94 media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode()
| * 45f5a37b media: tc358743: ignore video while HPD is low
| * 8a8b7733 drm/amdkfd: Set SDMA_RLCx_IB_CNTL/SWITCH_INSIDE_IB
| * 0d50231d jfs: Fix null-ptr-deref in jfs_ioc_trim
| * c17707f2 drm/amdgpu/gfx9: fix CSIB handling
| * 3ba40789 drm/amdgpu/gfx8: fix CSIB handling
| * 81af4b34 jfs: fix array-index-out-of-bounds read in add_missing_indices
| * 9a3b711f drm/amdgpu/gfx7: fix CSIB handling
| * d7f3ca1c drm/amdgpu/gfx10: fix CSIB handling
| * 8c498591 drm/msm/a6xx: Increase HFI response timeout
| * 63074eed drm/amd/display: Add NULL pointer checks in dm_force_atomic_commit()
| * ceb810de media: uapi: v4l: Fix V4L2_TYPE_IS_OUTPUT condition
| * 9c60c173 drm/msm/hdmi: add runtime PM calls to DDC transfer function
| * 08493880 drm/bridge: analogix_dp: Add irq flag IRQF_NO_AUTOEN instead of calling disable_irq()
| * 88dec581 sunrpc: update nextcheck time when adding new cache entries
| * 25595910 drm/amdgpu/gfx6: fix CSIB handling
| * 08155845 ACPI: battery: negate current when discharging
| * 44050a6c PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn()
| * a9f710fc power: supply: bq27xxx: Retrieve again when busy
| * 1e0e629e ACPICA: fix acpi parse and parseext cache leaks
| * 2ca55d22 ACPICA: Avoid sequence overread in call to strncmp()
| * 4fa430a8 ACPICA: fix acpi operand cache leak in dswstate.c
| * 00680259 iio: adc: ad7606_spi: fix reg write value mask
| * acf5c9d8 PCI: Fix lock symmetry in pci_slot_unlock()
| * 300f5432 PCI: Add ACS quirk for Loongson PCIe
| * 0ac228f7 uio_hv_generic: Use correct size for interrupt and monitor pages
| * e66a241c regulator: max14577: Add error check for max14577_read_reg()
| * 39fe75f0 mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS
| * 34d5ea7e staging: iio: ad5933: Correct settling cycles encoding per datasheet
| * 119766de net: ch9200: fix uninitialised access during mii_nway_restart
| * d064c687 ftrace: Fix UAF when lookup kallsym after ftrace disabled
| * 92311f8d dm-mirror: fix a tiny race condition
| * 3b443407 mtd: nand: sunxi: Add randomizer configuration before randomizer enable
| * b1f30e7c mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk
| * b36ad2dd mm: fix ratelimit_pages update error in dirty_ratio_handler()
| * 5f1e1573 ipc: fix to protect IPCS lookups using RCU
| * 6a5cda7f parisc: fix building with gcc-15
| * e44532b1 vgacon: Add check for vc_origin address range in vgacon_scroll()
| * ee20216f fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
| * 0d02410d EDAC/altera: Use correct write width with the INTTEST register
| * a514fca2 NFC: nci: uart: Set tty->disc_data only in success path
| * d9a55869 f2fs: prevent kernel warning due to negative i_nlink from corrupted image
| * c1b9d140 Input: ims-pcu - check record size in ims_pcu_flash_firmware()
| * 922200f0 ext4: fix calculation of credits for extent tree modification
| * d3dfc60e ext4: inline: fix len overflow in ext4_prepare_inline_data
| * e5d5647b bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device
| * 67d66a5e ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
| * 175925ab ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap()
| * ee141706 media: v4l2-dev: fix error handling in __video_register_device()
| * 658029a3 media: gspca: Add error handling for stv06xx_read_sensor()
| * b51ce65c wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723
| * bf78a270 nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
| * 12134f79 wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
| * aad09bbe gfs2: move msleep to sleepable context
| * 64d0e07a configfs: Do not override creating attribute file failure in populate_attrs()
| * c50b9bb3 net: usb: aqc111: debug info before sanitation
| * 2186f01c calipso: unlock rcu before returning -EAFNOSUPPORT
| * bddb8079 xen/arm: call uaccess_ttbr0_enable for dm_op hypercall
| * b2ce37d8 usb: Flush altsetting 0 endpoints before reinitializating them after reset.
| * ae57ce58 fs/filesystems: Fix potential unsigned integer underflow in fs_name()
| * ff70bd8f net/mdiobus: Fix potential out-of-bounds read/write access
| * f4c6337d drm/amd/display: Do not add '-mhard-float' to dcn2{1,0}_resource.o for clang
| * d3e33456 drm/amd/display: Do not add '-mhard-float' to dml_ccflags for clang
| * 92b75456 MIPS: Move '-Wa,-msoft-float' check from as-option to cc-option
| * c33417f3 x86/boot/compressed: prefer cc-option for CFLAGS additions
| * 38c9d4f8 net: mdio: C22 is now optional, EOPNOTSUPP if not provided
| * da1f38bc net_sched: tbf: fix a race in tbf_change()
| * 2790c4ec net_sched: red: fix a race in __red_change()
| * 53d11560 net_sched: prio: fix a race in prio_tune()
| * 21498209 net/mlx5: Fix return value when searching for existing flow group
| * 2fa390ee net/mlx5: Wait for inactive autogroups
| * 6ab93dce i40e: retry VFLR handling if there is ongoing VF reset
| * 4b4c8fd1 i40e: return false from i40e_reset_vf if reset is in progress
| * c337efb2 net_sched: sch_sfq: fix a potential crash on gso_skb handling
| * b0760028 scsi: iscsi: Fix incorrect error path labels for flashnode operations
| * 72c14aed NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes
| * d2211e6e NFSD: Fix ia_size underflow
| * 69aff1b7 Input: synaptics-rmi - fix crash with unsupported versions of F34
| * b475d189 Input: synaptics-rmi4 - convert to use sysfs_emit() APIs
| * eab11dcd pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id()
| * 787937c4 do_change_type(): refuse to operate on unmounted/not ours mounts
| * 36d91620 PM: sleep: Fix power.is_suspended cleanup for direct-complete devices
| * b0122774 ice: create new Tx scheduler nodes for new queues only
| * 737f13ac Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION
| * 589c0971 net/mlx4_en: Prevent potential integer overflow calculating Hz
| * 85ae8372 vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl()
| * a05ebe38 serial: Fix potential null-ptr-deref in mlb_usio_probe()
| * 095cc0b5 usb: renesas_usbhs: Reorder clock handling and power management in probe
| * 55d4b273 rtc: Fix offset calculation for .start_secs < 0
| * 5023b764 rtc: sh: assign correct interrupts with DT
| * a972ec94 perf record: Fix incorrect --user-regs comments
| * eed18824 perf tests switch-tracking: Fix timestamp comparison
| * 49d0662f mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE
| * 24358eb4 mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove()
| * 7b44dbda rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send()
| * 0ea2f7e9 perf scripts python: exported-sql-viewer.py: Fix pattern matching with Python 3
| * 43fe88b9 perf ui browser hists: Set actions->thread before calling do_zoom_thread()
| * 9027ce4c fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
| * 2beee9cf soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()
| * c07c8b4e soc: aspeed: lpc: Fix impossible judgment condition
| * 81e5357d arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou
| * 4e4c974a ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device
| * 12e4431e bus: fsl-mc: fix double-free on mc_dev
| * 2f11add2 nilfs2: do not propagate ENOENT error from nilfs_btree_propagate()
| * 67d59697 nilfs2: add pointer check for nilfs_direct_propagate()
| * db7096ea Squashfs: check return result of sb_min_blocksize
| * 21bcf72e ARM: dts: at91: at91sam9263: fix NAND chip selects
| * d5373a0a ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select
| * ce87f4c1 f2fs: fix to correct check conditions in f2fs_cross_rename
| * ab752ebd f2fs: use d_inode(dentry) cleanup dentry->d_inode
| * fc2da884 calipso: Don't call calipso functions for AF_INET sk.
| * 961ad559 net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy
| * 8c976552 net: usb: aqc111: fix error handling of usbnet read calls
| * 48af842f netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy
| * e5ce9df1 wifi: ath9k_htc: Abort software beacon handling if disabled
| * 44ebe361 bpf: Fix WARN() in get_bpf_raw_tp_regs
| * 264a5cf0 pinctrl: at91: Fix possible out-of-boundary access
| * ac7fca66 ktls, sockmap: Fix missing uncharge operation
| * 6d1ab8bf netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it
| * 879d3e0d f2fs: clean up w/ fscrypt_is_bounce_page()
| * ceb20ec6 RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
| * a052c91a wifi: rtw88: do not ignore hardware read error during DPK
| * 64f82c02 net: ncsi: Fix GCPS 64-bit member variables
| * 49bc7bf3 f2fs: fix to do sanity check on sbi->total_valid_block_count
| * 6a2be474 drm/tegra: rgb: Fix the unbound reference count
| * 833d0ace drm/vkms: Adjust vkms_state->active_planes allocation type
| * e443e547 drm: rcar-du: Fix memory leak in rcar_du_vsps_init()
| * 593f0060 selftests/seccomp: fix syscall_restart test for arm compat
| * 5c1d85c9 firmware: psci: Fix refcount leak in psci_dt_init
| * 629a2417 m68k: mac: Fix macintosh_config for Mac II
| * dc796cda drm/vmwgfx: Add seqno waiter for sync_files
| * 5571f36f spi: sh-msiof: Fix maximum DMA transfer size
| * d79fee3b ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions"
| * a3c189e7 x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges()
| * 8eb5b081 PM: wakeup: Delete space in the end of string shown by pm_show_wakelocks()
| * 80bf28fd EDAC/skx_common: Fix general protection fault
| * 8517d3af crypto: marvell/cesa - Avoid empty transfer descriptor
| * 32d3e804 crypto: marvell/cesa - Handle zero-length skcipher requests
| * b48773f8 x86/cpu: Sanitize CPUID(0x80000000) output
| * 5b4da569 perf/core: Fix broken throttling when max_samples_per_tick=1
| * 7bf56bd7 gfs2: gfs2_create_inode error handling fix
| * 076d281e netfilter: nft_socket: fix sk refcount leaks
| * e49e994c thunderbolt: Do not double dequeue a configuration request
| * 768668e1 usb: usbtmc: Fix timeout value in get_stb
| * 90da5d98 usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device
| * 5db9d2c5 usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE
| * 0ce2e102 pinctrl: armada-37xx: set GPIO output value before setting direction
| * 33b1b38a pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31
| * 26fd2dbc tracing: Fix compilation warning on arm32
* b3fbf764 Merge android11-5.4 into android11-5.4-lts

Change-Id: I5dc61fb04bfb3b890a77c22b1f6312ada2cc46df
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>