Merge tag 'android11-5.4.296_r00' into android11-5.4

This merges the android11-5.4.296_r00 tag into the android11-5.4 branch,
catching it up with the latest LTS releases.

It contains the following commits:

* 4b4c88cf Merge android11-5.4 into android11-5.4-lts
* 76f45415 Revert "drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling"
* 02f0aeff Merge 5.4.296 into android11-5.4-lts
* 04b7726c Linux 5.4.296
* ecdb2327 net: ipv6: Discard next-hop MTU less than minimum link MTU
* b2fdd7f1 x86/mm: Disable hugetlb page table sharing on 32-bit
* e6902968 Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID
* 35f1a536 HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
* 99599f99 HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
* 7549410b vt: add missing notification when switching back to text mode
* 1987e681 net: usb: qmi_wwan: add SIMCom 8230C composition
* 553017c6 atm: idt77252: Add missing `dma_map_error()`
* e260f4d4 bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
* 2da77aa6 bnxt_en: Fix DCB ETS validation
* 6807ef10 can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
* 7c0beeab net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
* b92bedf7 net: appletalk: Fix device refcount leak in atrtr_create()
* d8a6853d md/raid1: Fix stack memory use after return in raid1_reshape
* c1958270 wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
* b96d700a dma-buf: fix timeout handling in dma_resv_wait_timeout v2
* 221244b0 Input: xpad - support Acer NGR 200 Controller
* 6edf13f1 Input: xpad - add VID for Turtle Beach controllers
* f01afc1e Input: xpad - add support for Amazon Game Controller
* 5f523936 NFSv4/flexfiles: Fix handling of NFS level errors in I/O
* 9b6f73ae flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes
* c60a54b3 RDMA/mlx5: Fix vport loopback for MPV device
* 07100f3b netlink: Fix rmem check in netlink_broadcast_deliver().
* 23791e92 netlink: make sure we allow at least one dump skb
* 2a668b17 pwm: mediatek: Ensure to disable clocks in error path
* e0098a11 Revert "ACPI: battery: negate current when discharging"
* 18d58a46 usb: gadget: u_serial: Fix race condition in TTY wakeup
* 549a9c78 drm/sched: Increment job count before swapping tail spsc queue
* 6a89563c pinctrl: qcom: msm: mark certain pins as invalid for interrupts
* 7c2bc303 x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
* d6720de3 x86/mce: Don't remove sysfs if thresholding sysfs init fails
* a3e80b2f x86/mce/amd: Fix threshold limit reset
* bf0ca6a1 rxrpc: Fix oops due to non-existence of prealloc backlog struct
* 923a276c net/sched: Abort __tc_modify_qdisc if parent class does not exist
* 9ec7e943 atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
* f493f31a atm: clip: Fix infinite recursive call of clip_push().
* 2fb37ab3 atm: clip: Fix memory leak of struct clip_vcc.
* a4c5785f atm: clip: Fix potential null-ptr-deref in to_atmarpd().
* 03dcdd25 tipc: Fix use-after-free in tipc_conn_close().
* 9da02515 netlink: Fix wraparounds of sk->sk_rmem_alloc.
* 16a58e9a fix proc_sys_compare() handling of in-lookup dentries
* 42e9cf27 proc: Clear the pieces of proc_inode that proc_evict_inode cares about
* b4e72c0b drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
* a801f7b0 staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher()
* e9bd89e6 media: uvcvideo: Rollback non processed entities on error
* daf9c48d media: uvcvideo: Send control events for partial succeeds
* a99f3157 media: uvcvideo: Return the number of processed controls
* 82191a21 ACPI: PAD: fix crash in exit_round_robin()
* 749d9076 usb: typec: displayport: Fix potential deadlock
* 0722035a Logitech C-270 even more broken
* 94e0918e rose: fix dangling neighbour pointers in rose_rt_device_down()
* 9de013fa net: rose: Fix fall-through warnings for Clang
* 60b75773 drm/i915/gt: Fix timeline left held on VMA alloc error
* 6d2d7410 drm/i915/selftests: Change mock_request() to return error pointers
* fb6c27aa spi: spi-fsl-dspi: Clear completion counter before initiating transfer
* 50a387e1 spi: spi-fsl-dspi: Fix interrupt-less DMA mode taking an XSPI code path
* 3f6491c3 spi: spi-fsl-dspi: Rename fifo_{read,write} and {tx,cmd}_fifo_write
* 3cef0d2a dpaa2-eth: fix xdp_rxq_info leak
* 568a6afd ethernet: atl1: Add missing DMA mapping error checks and count errors
* e2dec6cd btrfs: use btrfs_record_snapshot_destroy() during rmdir
* ef761cce btrfs: propagate last_unlink_trans earlier when doing a rmdir
* c6f8ded6 RDMA/mlx5: Fix CC counters query for MPV
* 40af2a15 RDMA/core: Create and destroy counters in the ib_core
* eaf0a33e scsi: ufs: core: Fix spelling of a sysfs attribute name
* b9c403d1 drm/v3d: Disable interrupts before resetting the GPU
* ea4664df mtk-sd: reset host->mrq on prepare_data() error
* 5ac9e9e2 mtk-sd: Prevent memory corruption from DMA map failure
* 0f495797 mmc: mediatek: use data instead of mrq parameter from msdc_{un}prepare_data()
* a3cd5ae7 regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
* 285e4fb5 regulator: gpio: Add input_supply support in gpio_regulator_config
* b49d224d ACPICA: Refuse to evaluate a method if arguments are missing
* 7a2afdc5 wifi: ath6kl: remove WARN on bad firmware input
* 48293b9c wifi: mac80211: drop invalid source address OCB frames
* f2aec106 powerpc: Fix struct termio related ioctl macros
* 2b61eebb ata: pata_cs5536: fix build on 32-bit UML
* 78c0ba1d ALSA: sb: Force to disable DMAs once when DMA mode is changed
* 3b290923 net/sched: Always pass notifications when child class becomes empty
* 73c38e67 nui: Fix dma_mapping_error() check
* 32bc854b enic: fix incorrect MTU comparison in enic_change_mtu()
* 02478969 amd-xgbe: align CL37 AN sequence as per databook
* 80e9028f lib: test_objagg: Set error message in check_expect_hints_stats()
* 71ac65eb drm/exynos: fimd: Guard display clock control with runtime PM calls
* 9b506d95 btrfs: fix missing error handling when searching for inode refs during log replay
* 5e6d24e6 scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()
* 8785701f nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
* 716b555f RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
* 7121f483 platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment
* 35fcc9ea mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data
* c93bc959 usb: typec: altmodes/displayport: do not index invalid pin_assignments
* e7e91494 Revert "mmc: sdhci: Disable SD card clock before changing parameters"
* 8e56691a mmc: sdhci: Add a helper function for dump register in dynamic debug mode
* 19c2cc01 vsock/vmci: Clear the vmci transport packet properly when initializing it
* c0694156 btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
* a7ae98c2 arm64: Restrict pagetable teardown to avoid false warning
* 88e47ded s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS
* c1a4677f drm/bridge: cdns-dsi: Check return value when getting default PHY config
* 7aa42abc drm/bridge: cdns-dsi: Fix connecting to next bridge
* 0ad37214 drm/bridge: cdns-dsi: Fix the clock variable for mode_valid()
* e52589c0 drm/tegra: Assign plane type before registration
* 57b0ad4f HID: wacom: fix kobject reference count leak
* ee49c0e9 HID: wacom: fix memory leak on sysfs attribute creation failure
* e0d64695 HID: wacom: fix memory leak on kobject creation failure
* a30260dc dm-raid: fix variable in journal device check
* 397df6d9 Bluetooth: L2CAP: Fix L2CAP MTU negotiation
* 2a8dcee6 atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
* a434395b net: enetc: Correct endianness handling in _enetc_rd_reg64
* a304adc2 um: ubd: Add missing error check in start_io_thread()
* 04ec06ad vsock/uapi: fix linux/vm_sockets.h userspace compilation errors
* 14f42b7b wifi: mac80211: fix beacon interval calculation overflow
* 5925f9f2 attach_recursive_mnt(): do not lock the covering tree when sliding something under it
* 24ff7d46 ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()
* 585be561 i2c: robotfuzz-osif: disable zero-length read messages
* e34167ae i2c: tiny-usb: disable zero-length read messages
* 013dcdf6 RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
* 33e120ff RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private
* 57597d8d media: vivid: Change the siize of the composing
* 725a7c2a media: omap3isp: use sgtable-based scatterlist wrappers
* 77829a5f media: cxusb: no longer judge rbuf when the write fails
* 1301d405 media: cxusb: use dev_dbg() rather than hand-rolled debug
* 95ae5ee6 jfs: validate AG parameters in dbMount() to prevent crashes
* 7d17153a fs/jfs: consolidate sanity checking in dbMount
* 80efe2d9 ASoC: meson: meson-card-utils: use of_property_present() for DT parsing
* f1195eb2 of: Add of_property_present() helper
* 9c473626 of: property: define of_property_read_u{8,16,32,64}_array() unconditionally
* 20fa617f kbuild: hdrcheck: fix cross build with clang
* 25661f95 kbuild: add --target to correctly cross-compile UAPI headers with Clang
* 223f497f bpfilter: match bit size of bpfilter_umh to that of the kernel
* 44516427 kbuild: use -MMD instead of -MD to exclude system headers from dependency
* 74095bbb VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
* b4239bfb VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF
* 094353c1 ovl: Check for NULL d_inode() in ovl_dentry_upper()
* 6fd52bfe ceph: fix possible integer overflow in ceph_zero_objects()
* 471722bb ALSA: hda: Ignore unsol events for cards being shut down
* e0359c66 usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode
* df670116 usb: cdc-wdm: avoid setting WDM_READ for ZLP-s
* 13d8f52c usb: Add checks for snprintf() calls in usb_alloc_dev()
* 5015eed4 tty: serial: uartlite: register uart driver in init
* 0861b9cb usb: potential integer overflow in usbg_make_tpg()
* 70ee697b iio: pressure: zpa2326: Use aligned_s64 for the timestamp
* 6b23e4e7 md/md-bitmap: fix dm-raid max_write_behind setting
* fce4e6a5 dmaengine: xilinx_dma: Set dma_device directions
* 2ad0c96d mfd: max14577: Fix wakeup source leaks on device unbind
* 48f8227a mailbox: Not protect module_put with spin_lock_irqsave
* 81610469 cifs: Fix cifs_query_path_info() for Windows NT servers

Change-Id: I846696f18af0af53cdc74e698d6a529ad06d7c12
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>