Merge tag 'android11-5.4.274_r00' into branch 'android11-5.4'

This is the merge of the upstream 5.4.274 relelease into the
android11-5.4 branch.  Included in here are the following commits:

* 181edea1 Revert "timers: Rename del_timer_sync() to timer_delete_sync()"
*   46cf3302 Merge 5.4.274 into android11-5.4-lts
|\
| * 0dbd436f Linux 5.4.274
| * fba9c24c firmware: meson_sm: fix to avoid potential NULL pointer dereference
| * 35a5acfa ip_gre: do not report erspan version on GRE interface
| * 61206032 erspan: Check IFLA_GRE_ERSPAN_VER is set.
| * 7f12ecf4 VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
| * d006b709 Bluetooth: btintel: Fixe build regression
| * 0bf9fd89 x86/alternative: Don't call text_poke() in lazy TLB mode
| * 67944e6d drm/i915/gt: Reset queue_priority_hint on parking
| * 09e6bb53 x86/mm/pat: fix VM_PAT handling in COW mappings
| * 6e5da7d6 virtio: reenable config if freezing device failed
| * e7bda8f5 drm/vkms: call drm_atomic_helper_shutdown before drm_dev_put()
| * 7a529c90 tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
| * 9a3b9090 netfilter: nf_tables: discard table flag update with pending basechain deletion
| * 61ac7284 netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
| * 0a14e162 netfilter: nf_tables: release batch on table validation from abort path
| * 41bad13c netfilter: nf_tables: reject new basechain after table flag update
| * 72d091b7 fbmon: prevent division by zero in fb_videomode_from_videomode()
| * 77f34b9a fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
| * 0eab73ff usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
| * 261a8314 usb: typec: tcpci: add generic tcpci fallback compatible
| * fcc68c95 tools: iio: replace seekdir() in iio_generic_buffer
| * 97832659 ktest: force $buildonly = 1 for 'make_warnings_file' test type
| * 71de6050 Input: allocate keycode for Display refresh rate toggle
| * edd073c7 block: prevent division by zero in blk_rq_stat_sum()
| * 73daab5b Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
| * 4256e146 SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
| * 08a07d5a drm/amd/display: Fix nanosec stat overflow
| * 4a35b778 media: sta2x11: fix irq handler cast
| * 2c1f8404 isofs: handle CDs with bad root inode but good Joliet root directory
| * e2cd3243 scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
| * 1b4fe801 sysv: don't call sb_bread() with pointers_lock held
| * e04cae53 Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
| * 68a69bb2 Bluetooth: btintel: Fix null ptr deref in btintel_read_version
| * 024529c2 btrfs: send: handle path ref underflow in header iterate_inode_ref()
| * a9252c8c btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
| * 576164bd btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
| * 41aff62b tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
| * 97ad3fc4 ionic: set adminq irq affinity
| * 67611c11 arm64: dts: rockchip: fix rk3399 hdmi ports node
| * 223145f8 arm64: dts: rockchip: fix rk3328 hdmi ports node
| * 60d417f3 panic: Flush kernel log buffer at the end
| * f15eca95 VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
| * dec0f1b0 wifi: ath9k: fix LNA selection in ath_ant_try_scan()
| * 485b5d1d s390/entry: align system call table on 8 bytes
| * 976b1b26 x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
| * 039458c0 ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
| * fc4387dc ata: sata_mv: Fix PCI device ID table declaration compilation warning
| * 0e9207b0 scsi: mylex: Fix sysfs buffer lengths
| * d887674f ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
| * 51788440 ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
| * 9c112717 net: ravb: Always process TX descriptor ring
| * e54a0c79 erspan: make sure erspan_base_hdr is present in skb->head
| * 959fe471 erspan: Add type I version 0 support.
| * 19d7e7c1 init: open /initrd.image with O_LARGEFILE
| * 32e34d96 initramfs: switch initramfs unpacking to struct file based APIs
| * 13b2d815 fs: add a vfs_fchmod helper
| * 8eba8d11 fs: add a vfs_fchown helper
| * 9550632b staging: vc04_services: fix information leak in create_component()
| * bbd974d4 staging: vc04_services: changen strncpy() to strscpy_pad()
| * d07aab3c staging: mmal-vchiq: Fix client_component for 64 bit kernel
| * 50bc5a96 staging: mmal-vchiq: Allocate and free components as required
| * 9dcf0fcb i40e: fix vf may be used uninitialized in this function warning
| * 9c525819 ipv6: Fix infinite recursion in fib6_dump_done().
| * 73fac254 selftests: reuseaddr_conflict: add missing new line at the end of the output
| * 2882bb3b net: stmmac: fix rx queue priority assignment
| * f356eb2f net/sched: act_skbmod: prevent kernel-infoleak
| * f7990498 bpf, sockmap: Prevent lock inversion deadlock in map delete elem
| * a347bc8e netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
| * f4e14695 netfilter: nf_tables: flush pending destroy work before exit_net release
| * ab81b3d2 mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
| * 144c56d5 Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
| * 07afdfd8 vfio/platform: Create persistent IRQ handlers
| * b18fa894 vfio/pci: Create persistent INTx handler
| * 3777fa4c vfio: Introduce interface to flush virqfd inject workqueue
| * 1e71b644 vfio/pci: Lock external INTx masking ops
| * 26389925 vfio/pci: Disable auto-enable of exclusive INTx IRQ
| * bcd46782 net/rds: fix possible cp null dereference
| * 49ce99ae netfilter: nf_tables: disallow timeout for anonymous sets
| * f5450973 Bluetooth: Fix TOCTOU in HCI debugfs implementation
| * 5c8b9272 Bluetooth: hci_event: set the conn encrypted before conn establishes
| * 9d161e8a x86/cpufeatures: Add new word for scattered features
| * ff7a4adb r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
| * e78f6046 dm integrity: fix out-of-range warning
| * 44e62f5d tcp: properly terminate timers for kernel sockets
| * a4bb81d8 ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa()
| * 03fe2596 nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
| * 12d6a568 USB: core: Fix deadlock in usb_deauthorize_interface()
| * ea9a4fce scsi: lpfc: Correct size for wqe for memset()
| * fa24c1a4 x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled
| * d7a68eee scsi: qla2xxx: Fix command flush on cable pull
| * 68d95188 usb: udc: remove warning when queue disabled ep
| * a79ac9f3 usb: dwc2: gadget: LPM flow fix
| * 693bbbcc usb: dwc2: host: Fix ISOC flow in DDMA mode
| * eb97df08 usb: dwc2: host: Fix hibernation flow
| * 4cf44c9f usb: dwc2: host: Fix remote wakeup from hibernation
| * 0053f15d scsi: core: Fix unremoved procfs host directory regression
| * 4206ad65 ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
| * 3afdcc4e usb: cdc-wdm: close race between read and workqueue
| * b9a7339a mmc: core: Avoid negative index with array access
| * fd20d84b mmc: core: Initialize mmc_blk_ioc_data
| * c7a9b1b7 exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
| * be1dd925 wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
| * 747d4ee7 mm/migrate: set swap entry values of THP tail pages properly.
| * 7f75e937 mm/memory-failure: fix an incorrect use of tail pages
| * 815be99d vt: fix memory overlapping when deleting chars in the buffer
| * d6077e0d bounds: support non-power-of-two CONFIG_NR_CPUS
| * 282e4dea powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
| * 34b5d2ff efivarfs: Request at most 512 bytes for variable names
| * 37a65df6 perf/core: Fix reentry problem in perf_output_read_group()
| * 86102171 loop: loop_set_status_from_info() check before assignment
| * b40877b8 loop: Check for overflow while configuring loop
| * f4476da8 loop: Factor out configuring loop from status
| * 7423a124 loop: Refactor loop_set_status() size calculation
| * 3c9e7e8c loop: Factor out setting loop device size
| * e08b2e41 loop: Remove sector_t truncation checks
| * ea3bec64 loop: Call loop_config_discard() only after new config is applied
| * 2ea70777 Revert "loop: Check for overflow while configuring loop"
| * 735e525d btrfs: allocate btrfs_ioctl_defrag_range_args on stack
| * 501561d8 printk: Update @console_may_schedule in console_trylock_spinning()
| * 9470f5b2 xen/events: close evtchn after mapping cleanup
| * 03b19c7f x86/speculation: Support intra-function call validation
| * f8f25fde objtool: Add support for intra-function calls
| * eafb2936 objtool: is_fentry_call() crashes if call has no destination
| * 396dbbc1 fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
| * ff734209 vt: fix unicode buffer corruption when deleting characters
| * 741dee50 tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
| * d79cd5c2 usb: port: Don't try to peer unused USB ports based on location
| * a766761d usb: gadget: ncm: Fix handling of zero block length packets
| * eb7b01ca USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
| * 9e93b411 ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
| * 57ae281a xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
| * 0920c618 netfilter: nf_tables: reject constant set with timeout
| * e9a0d3f3 netfilter: nf_tables: disallow anonymous set with timeout flag
| * edcf1a3f netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout
| * 1ba8fdef comedi: comedi_test: Prevent timers rescheduling during deletion
| * e7d4cff5 dm snapshot: fix lockup in dm_exception_table_exit
| * 35ff8175 ahci: asm1064: asm1166: don't limit reported ports
| * 86e248c2 ahci: asm1064: correct count of reported ports
| * 89c43577 x86/CPU/AMD: Update the Zenbleed microcode revisions
| * 32eaee72 nilfs2: prevent kernel bug at submit_bh_wbc()
| * 6503d76d nilfs2: use a more common logging style
| * 9cbe1ad5 nilfs2: fix failure to detect DAT corruption in btree and direct mappings
| * f2cee08a memtest: use {READ,WRITE}_ONCE in memory scanning
| * 673fb93c drm/vc4: hdmi: do not return negative values from .get_modes()
| * 7ecbec89 drm/imx/ipuv3: do not return negative values from .get_modes()
| * 348aa3d4 drm/exynos: do not return negative values from .get_modes()
| * 9daddee0 s390/zcrypt: fix reference counting on zcrypt card objects
| * ff50716b soc: fsl: qbman: Use raw spinlock for cgr_lock
| * f248ecc1 soc: fsl: qbman: Add CGR update function
| * 6e962951 soc: fsl: qbman: Add helper for sanity checking cgr ops
| * 62c3ecd2 soc: fsl: qbman: Always disable interrupts when taking cgr_lock
| * 3f91ba96 ring-buffer: Fix full_waiters_pending in poll
| * f7578a3b ring-buffer: Fix resetting of shortest_full
| * b0beb669 vfio/platform: Disable virqfds on cleanup
| * b046ab16 kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
| * 31722ed2 speakup: Fix 8bit characters from direct synth
| * b2b93a38 slimbus: core: Remove usage of the deprecated ida_simple_xx() API
| * aec74a14 nvmem: meson-efuse: fix function pointer type mismatch
| * 525ae72d firmware: meson_sm: Rework driver as a proper platform driver
| * ee4e9c19 ext4: fix corruption during on-line resize
| * 1a560f19 hwmon: (amc6821) add of_match table
| * d7bc1877 mmc: core: Fix switch on gp3 partition
| * 24019e5a dm-raid: fix lockdep waring in "pers->hot_add_disk"
| * 0b949dc2 Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
| * 47d8aafc PCI/PM: Drain runtime-idle callbacks before driver removal
| * ec6f7c08 PCI: Drop pci_device_remove() test of pci_dev->driver
| * 287a9a9b btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
| * ab95a420 fuse: don't unhash root
| * c180d65d mmc: tmio: avoid concurrent runs of mmc_request_done()
| * 2e94147e PM: sleep: wakeirq: fix wake irq warning in system suspend
| * bd140aef USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
| * b11cd74c USB: serial: option: add MeiG Smart SLM320 product
| * f5167c50 USB: serial: cp210x: add ID for MGP Instruments PDS100
| * 4fda3ad1 USB: serial: add device ID for VeriFone adapter
| * 3f01bf96 USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
| * 4fc30a31 powerpc/fsl: Fix mfpmr build errors with newer binutils
| * 86bf75d9 clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
| * b2dfb216 clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
| * 83fe1bbd clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
| * ddcd5ea7 PM: suspend: Set mem_sleep_current during kernel command line setup
| * 42dcb0a3 parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
| * 10e031fb parisc: Fix csum_ipv6_magic on 64-bit systems
| * 4dc4793c parisc: Fix csum_ipv6_magic on 32-bit systems
| * 89cb6c71 parisc: Fix ip_fast_csum
| * 331b43d7 parisc: Do not hardcode registers in checksum functions
| * 64a1ccfa mtd: rawnand: meson: fix scrambling mode value in command macro
| * a1d549ae ubi: correct the calculation of fastmap size
| * 4e09d521 ubi: Check for too small LEB size in VTBL code
| * 778c6ad4 ubifs: Set page uptodate in the correct place
| * f52d7663 fat: fix uninitialized field in nostale filehandles
| * b224a3b8 ext4: correct best extent lstart adjustment logic
| * e8b25c7b selftests/mqueue: Set timeout to 180 seconds
| * 8e81cd58 crypto: qat - resolve race condition during AER recovery
| * 5a9f7e91 crypto: qat - fix double free during reset
| * fca0c42c sparc: vDSO: fix return value of __setup handler
| * 75159bce sparc64: NMI watchdog: fix return value of __setup handler
| * 82e25cc1 KVM: Always flush async #PF workqueue when vCPU is being destroyed
| * ce6e52ca media: xc4000: Fix atomicity violation in xc4000_get_frequency
| * 7d271b79 serial: max310x: fix NULL pointer dereference in I2C instantiation
| * d453dd48 arm: dts: marvell: Fix maxium->maxim typo in brownstone dts
| * 36f6b763 ARM: dts: mmp2-brownstone: Don't redeclare phandle references
| * 60f9cecf smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
| * cec55e30 smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
| * 9a353d80 clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
| * a7923ece media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
| * 8e3f03f4 wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
| * df420917 timers: Rename del_timer_sync() to timer_delete_sync()
| * ef5f71db timers: Use del_timer_sync() even on UP
| * 9ec9c420 timers: Update kernel-doc for various functions
| * c513b791 x86/bugs: Use sysfs_emit()
| * 922bc61d x86/cpu: Support AMD Automatic IBRS
| * d9caea5f Documentation/hw-vuln: Update spectre doc
| * 8b056470 amdkfd: use calloc instead of kzalloc to avoid integer overflow
* | ff7463a1 Reapply "media: ttpci: fix two memleaks in budget_av_attach"
* | 7cc70986 Revert "media: rename VFL_TYPE_GRABBER to _VIDEO"
* | b8c488bb Revert "media: media/pci: rename VFL_TYPE_GRABBER to _VIDEO"
* | be024bb2 Revert "media: ttpci: fix two memleaks in budget_av_attach"
* | d873f54a Revert "net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()"
* | 960240ce Merge 5.4.273 into android11-5.4-lts
|\|
| * 24489321 Linux 5.4.273
| * b37f0304 regmap: Add missing map->bus check
| * 55f8ea67 spi: spi-mt65xx: Fix NULL pointer access in interrupt handler
| * 59426454 bpf: report RCU QS in cpumap kthread
| * 3ffe591b rcu: add a helper to report consolidated flavor QS
| * 2531f907 netfilter: nf_tables: do not compare internal table flags on updates
| * 71002d9e ARM: dts: sun8i-h2-plus-bananapi-m2-zero: add regulator nodes vcc-dram and vcc1v2
| * 94cb17e5 octeontx2-af: Use separate handlers for interrupts
| * 4f37d3a7 net/bnx2x: Prevent access to a freed page in page_pool
| * 69f9f558 hsr: Handle failures in module init
| * f781fb51 rds: introduce acquire/release ordering in acquire/release_in_xmit()
| * 84c51041 packet: annotate data-races around ignore_outgoing
| * 889ed056 hsr: Fix uninit-value access in hsr_get_node()
| * 48cef94b s390/vtime: fix average steal time calculation
| * 305c31b9 octeontx2-af: Use matching wake_up API variant in CGX command interface
| * b63362b3 usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin
| * 254b27c4 staging: greybus: fix get_channel_from_mode() failure path
| * f6bf49e7 serial: 8250_exar: Don't remove GPIO device on suspend
| * 8dd52ab7 rtc: mt6397: select IRQ_DOMAIN instead of depending on it
| * ca6279d1 kconfig: fix infinite loop when expanding a macro at the end of file
| * a8cc354a tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT
| * f1c9a0c3 serial: max310x: fix syntax error in IRQ error message
| * bd2f4df2 tty: vt: fix 20 vs 0x20 typo in EScsiignore
| * 854ebf45 afs: Revert "afs: Hide silly-rename files from userspace"
| * afcbba70 NFS: Fix an off by one in root_nfs_cat()
| * bcc3ec2b watchdog: stm32_iwdg: initialize default timeout
| * e95eeb7f net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr()
| * 3b8415da scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn
| * 2b38dbd7 RDMA/device: Fix a race between mad_client and cm_client init
| * 39b1af7b scsi: csiostor: Avoid function pointer casts
| * 6d5dc96b ALSA: usb-audio: Stop parsing channels bits when all channels are found.
| * d7ae7d12 clk: Fix clk_core_get NULL dereference
| * a1129b09 sparc32: Fix section mismatch in leon_pci_grpci
| * c8c038be backlight: lp8788: Fully initialize backlight_properties during probe
| * 8c351a9e backlight: lm3639: Fully initialize backlight_properties during probe
| * 12a0153f backlight: da9052: Fully initialize backlight_properties during probe
| * 1c8d8c6b backlight: lm3630a: Don't set bl->props.brightness in get_brightness
| * 40a89f1b backlight: lm3630a: Initialize backlight_properties on init
| * bb9981f9 powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc.
| * a6e96cc2 drm/msm/dpu: add division of drm_display_mode's hskew parameter
| * 41eec45c powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks
| * dfde84cc drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
| * af37aed0 media: ttpci: fix two memleaks in budget_av_attach
| * 353f980a media: media/pci: rename VFL_TYPE_GRABBER to _VIDEO
| * fa83fca5 media: rename VFL_TYPE_GRABBER to _VIDEO
| * 25f57655 media: v4l2-core: correctly validate video and metadata ioctls
| * 291cda0b media: go7007: fix a memleak in go7007_load_encoder
| * fa8b4729 media: dvb-frontends: avoid stack overflow warnings with clang
| * d29ed089 media: pvrusb2: fix uaf in pvr2_context_set_notify
| * 86c10c56 drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int()
| * 23d57b99 ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs
| * 8df143c6 mtd: rawnand: lpc32xx_mlc: fix irq handler prototype
| * d9d4d136 mtd: maps: physmap-core: fix flash size larger than 32-bit
| * a8c73f04 crypto: arm/sha - fix function cast warnings
| * 4b6569e1 mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref
| * ac117067 mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref
| * 3472fa83 drm/tegra: put drm_gem_object ref on error in tegra_fb_create
| * f27aaaec clk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister()
| * 44163c73 PCI: Mark 3ware-9650SE Root Port Extended Tags as broken
| * 9b074f2e drm/mediatek: dsi: Fix DSI RGB666 formats and definitions
| * 2e1120e4 clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times
| * d2f3c762 media: pvrusb2: fix pvr2_stream_callback casts
| * e9d391cc media: pvrusb2: remove redundant NULL check
| * 013fb505 media: go7007: add check of return value of go7007_read_addr()
| * 8c2e4efe media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak
| * cf958086 perf stat: Avoid metric-only segv
| * 9e411c40 ALSA: seq: fix function cast warnings
| * a0ae3335 drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode()
| * 9df9108a perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str()
| * 79ab8193 PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
| * 00b07b49 quota: Fix rcu annotations of inode dquot pointers
| * 49669f8e quota: Fix potential NULL pointer dereference
| * ff29b5f9 quota: simplify drop_dquot_ref()
| * 68435ffc clk: qcom: reset: Ensure write completion on reset de/assertion
| * 026d3984 clk: qcom: reset: Commonize the de/assert functions
| * 48846ddc clk: qcom: reset: support resetting multiple bits
| * 7f82802d clk: qcom: reset: Allow specifying custom reset delay
| * f20c3270 media: edia: dvbdev: fix a use-after-free
| * 0175f2d3 media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity
| * 8269ab16 media: v4l2-tpg: fix some memleaks in tpg_alloc
| * 2e6892b2 media: em28xx: annotate unchecked call to media_device_register()
| * 639155da perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample()
| * e019d87e drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'
| * 1d4d6741 perf record: Fix possible incorrect free in record__switch_output()
| * adc8a916 PCI/DPC: Print all TLP Prefixes, not just the first
| * daf21394 media: tc358743: register v4l2 async device only after successful setup
| * ba34d8a5 dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA
| * cc31a90e drm/rockchip: lvds: do not overwrite error code
| * f1dfd026 drm: Don't treat 0 as -1 in drm_fixp2int_ceil
| * b061b28b drm/rockchip: inno_hdmi: Fix video timing
| * 91dc47cd drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe()
| * 030d46f8 drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe()
| * b4cb57ec drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe()
| * e04e773f drm/tegra: dsi: Make use of the helper function dev_err_probe()
| * 85f28e98 gpu: host1x: mipi: Update tegra_mipi_request() to be node based
| * f05631a8 drm/tegra: dsi: Add missing check for of_find_device_by_node
| * da7ece21 dm: call the resume method on internal suspend
| * 6070692e dm raid: fix false positive for requeue needed during reshape
| * 3b1e8a61 nfp: flower: handle acti_netdevs allocation failure
| * e06f0d3f net/x25: fix incorrect parameter validation in the x25_getsockopt() function
| * 26843eef net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function
| * b9979cae udp: fix incorrect parameter validation in the udp_lib_getsockopt() function
| * 1bd08e53 l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function
| * 2e7f3cab tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function
| * fb6639c7 net: hns3: fix port duplex configure error in IMP reset
| * ec6bb01e net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
| * a9f5faf2 ipv6: fib6_rules: flush route cache when rule is changed
| * 21e5fa46 bpf: Fix stackmap overflow check on 32-bit arches
| * 92c81fbb bpf: Fix hashtab overflow check on 32-bit arches
| * 8a8b6a24 sr9800: Add check for usbnet_get_endpoints
| * 54a03e4a Bluetooth: hci_core: Fix possible buffer overflow
| * f6177a17 Bluetooth: Remove superfluous call to hci_conn_check_pending()
| * 03df15b5 igb: Fix missing time sync events
| * 141897c5 igb: move PEROUT and EXTTS isr logic to separate functions
| * 8081d80a mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function
| * bfa9d86d SUNRPC: fix some memleaks in gssx_dec_option_array
| * 52018aa1 x86, relocs: Ignore relocations in .notes section
| * 450ac90e ACPI: scan: Fix device check notification handling
| * 33b498a1 ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node
| * 0655698d ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address
| * 8deafa61 ARM: dts: imx6dl-yapp4: Move phy reset into switch node
| * 174e3c8e ARM: dts: arm: realview: Fix development chip ROM compatible value
| * de8abc89 net: ena: Remove ena_select_queue
| * f434eaca net: ena: cosmetic: fix line break issues
| * a4fc14a6 wifi: brcmsmac: avoid function pointer casts
| * 6234e09e iommu/amd: Mark interrupt as managed
| * 073b5bbb bus: tegra-aconnect: Update dependency to ARCH_TEGRA
| * ea96bf3f ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
| * 2eb2a5d6 arm64: dts: qcom: msm8996: Pad addresses
| * a8f36506 arm64: dts: qcom: msm8996: Move regulator consumers to db820c
| * 1f685fa0 arm64: dts: qcom: msm8996: Use node references in db820c
| * adcf4eeb arm64: dts: qcom: db820c: Move non-soc entries out of /soc
| * 6bbbd2fd bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly
| * 6f51d61a bpf: Factor out bpf_spin_lock into helpers.
| * cf0d888e bpf: Add typecast to bpf helpers to help BTF generation
| * e1f7fef6 arm64: dts: mediatek: mt7622: add missing "device_type" to memory nodes
| * bea9573c wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
| * 6fd90614 net: blackhole_dev: fix build warning for ethh set but not used
| * ef036a05 af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc().
| * 4bdfc38a sock_diag: annotate data-races around sock_diag_handlers[family]
| * 76ac9c14 wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir()
| * e556006d wifi: wilc1000: fix RCU usage in connect path
| * 1bda3ff1 wifi: wilc1000: fix declarations ordering
| * 8c6210d1 wifi: b43: Disable QoS for bcm4331
| * 12062b14 wifi: b43: Stop correct queue in DMA worker when QoS is disabled
| * c668f0f8 b43: main: Fix use true/false for bool type
| * 47ec637b wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled
| * 31aaf172 wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
| * 801be440 b43: dma: Fix use true/false for bool type variable
| * 88a9dffa wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
| * be269709 timekeeping: Fix cross-timestamp interpolation for non-x86
| * fee4e84c timekeeping: Fix cross-timestamp interpolation corner case decision
| * 7cec7d83 timekeeping: Fix cross-timestamp interpolation on counter wrap
| * 1a54aa50 aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
| * 72dacc72 fs/select: rework stack allocation hack for clang
| * 44214d74 nbd: null check for nla_nest_start
| * 772a7def do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
| * 3f6186cc ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll
| * 9f27f4d5 ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode
| * f1d3be9e ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC
| * 5f3c1393 Input: gpio_keys_polled - suppress deferred probe error for gpio
| * fa14a153 ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet
| * da17f556 firewire: core: use long bus reset on gap count error
| * 5f369efd Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security
| * 6e9c1139 scsi: mpt3sas: Prevent sending diag_reset when the controller is ready
| * 2daa2a8e btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve
| * 890a1b31 dm-verity, dm-crypt: align "struct bvec_iter" correctly
| * 5d8afc25 block: sed-opal: handle empty atoms when parsing response
| * 745718d0 parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check
| * b43b1a70 net/iucv: fix the allocation size of iucv_path_table array
| * c411a3c8 RDMA/mlx5: Relax DEVX access upon modify commands
| * 69dd0a99 HID: multitouch: Add required quirk for Synaptics 0xcddc device
| * 7d7fa0be MIPS: Clear Cause.BD in instruction_pointer_set
| * 025a8a96 x86/xen: Add some null pointer checking to smp.c
| * 4c00abb5 ASoC: rt5645: Make LattePanda board DMI match more precise
| * ef5de5d5 selftests: tls: use exact comparison in recv_partial
| * cfb24022 io_uring: drop any code related to SCM_RIGHTS
| * 2692b8a0 io_uring/unix: drop usage of io_uring socket
* | f509fa9b Revert "regmap: allow to define reg_update_bits for no bus configuration"
* | 012b5ece Revert "regmap: Add bulk read/write callbacks into regmap_config"
* | 0efa1aa8 Revert "serial: max310x: fix IO data corruption in batched operations"
* | 43bbe91c Revert "geneve: make sure to pull inner header in geneve_rx()"
* | ee2f1c68 Merge 5.4.272 into android11-5.4-lts
|\|
| * 84075826 Linux 5.4.272
| * 345ced40 arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
| * 1b3d8cbd arm64: dts: qcom: add PDC interrupt controller for SDM845
| * 59b3583d serial: max310x: fix IO data corruption in batched operations
| * f5c252aa serial: max310x: implement I2C support
| * 112094ef serial: max310x: make accessing revision id interface-agnostic
| * b96b0179 regmap: Add bulk read/write callbacks into regmap_config
| * 758c6799 regmap: allow to define reg_update_bits for no bus configuration
| * 9a7bbea2 serial: max310x: Unprepare and disable clock in error path
| * 664a6a90 getrusage: use sig->stats_lock rather than lock_task_sighand()
| * 2b34f603 getrusage: use __for_each_thread()
| * c50a0594 getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
| * ef8a8b36 getrusage: add the "signal_struct *sig" local variable
| * f184f219 y2038: rusage: use __kernel_old_timeval
| * c7441c77 hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
| * f2ab3eaa hv_netvsc: use netif_is_bond_master() instead of open code
| * 9b5ef7a5 hv_netvsc: Make netvsc/VF binding check both MAC and serial number
| * 5402ec57 Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
| * bf6bb361 serial: max310x: prevent infinite while() loop in port startup
| * 7e30e5c1 serial: max310x: use a separate regmap for each port
| * 3fb7c9bc serial: max310x: use regmap methods for SPI batch operations
| * 2c9c830d serial: max310x: Make use of device properties
| * b765176a serial: max310x: fail probe if clock crystal is unstable
| * 81670013 serial: max310x: Try to get crystal clock rate from property
| * c76dcad5 serial: max310x: Use devm_clk_get_optional() to get the input clock
| * b569d91e um: allow not setting extra rpaths in the linux binary
| * 47c68ede selftests: mm: fix map_hugetlb failure on 64K page size systems
| * f9055fa2 netrom: Fix data-races around sysctl_net_busy_read
| * 07bbccd1 netrom: Fix a data-race around sysctl_netrom_link_fails_count
| * c4309e5f netrom: Fix a data-race around sysctl_netrom_routing_control
| * cbba77ab netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
| * 89aa78a3 netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
| * 1f60795d netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
| * 80578681 netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
| * f716a682 netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
| * eadec8da netrom: Fix a data-race around sysctl_netrom_transport_timeout
| * eda02a0b netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser
| * 1e84b108 netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
| * 7f615232 netrom: Fix a data-race around sysctl_netrom_default_path_quality
| * 4bafcc43 netfilter: nf_conntrack_h323: Add protection for bmp length out of range
| * 6ec30320 netfilter: nft_ct: fix l3num expectations with inet pseudo family
| * 997efea2 net/rds: fix WARNING in rds_conn_connect_if_down
| * 664f9c64 net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
| * d9fefc51 net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
| * 59d2a407 geneve: make sure to pull inner header in geneve_rx()
| * a248b1f5 ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
| * 7f087784 net: lan78xx: fix runtime PM count underflow on link stop
| * 81934a2a lan78xx: Fix race conditions in suspend/resume handling
| * 57b9c48c lan78xx: Fix partial packet errors on suspend/resume
| * e68b46e9 lan78xx: Add missing return code checks
| * b1cc23ff lan78xx: Fix white space and style issues
* | 79ed7de6 Merge branch 'android11-5.4' into branch 'android11-5.4-lts'
* | 26385fa1 UPSTREAM: arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
* | e1dfe2d3 UPSTREAM: arm64: dts: qcom: add PDC interrupt controller for SDM845
* | 40df6b55 Merge 5.4.271 into android11-5.4-lts
|\|
| * 3fec063b Linux 5.4.271
| * 9162730a gpio: 74x164: Enable output pins after registers are reset
| * 1dde8ef4 fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
| * 037d5a94 cachefiles: fix memory leak in cachefiles_add_cache()
| * ace0fdf7 x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers
| * 9d660e5a mmc: core: Fix eMMC initialization with 1-bit bus connection
| * 3cc5fb82 dmaengine: fsl-qdma: init irq after reg initialization
| * 518d78b4 dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
| * c6652e20 btrfs: dev-replace: properly validate device names
| * 0cfbb26e wifi: nl80211: reject iftype change with mesh ID change
| * ec92aa2c gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
| * 5c78be00 afs: Fix endless loop in directory parsing
| * 26dda65b ALSA: Drop leftover snd-rtctimer stuff from Makefile
| * 7394abc8 power: supply: bq27xxx-i2c: Do not free non existing IRQ
| * 950d4d74 efi/capsule-loader: fix incorrect allocation size
| * b9fbc441 rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back
| * 260410c5 netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
| * 20f6f150 Bluetooth: Enforce validation on max value of connection interval
| * 79820a7e Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST
| * 98fb98fd Bluetooth: Avoid potential use-after-free in hci_error_reset
| * 6e0000a4 net: usb: dm9601: fix wrong return value in dm9601_mdio_read
| * 69624e28 lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
| * 9d4ffb5b ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
| * f5f11f7e tun: Fix xdp_rxq_info's queue_index when detaching
| * f81e94d2 net: ip_tunnel: prevent perpetual headroom growth
| * 9ae51361 netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
* | 7dde2bcd ANDROID: GKI: update .xml file due to USB changes in 5.4.270
* | 1ac7c39f Merge 5.4.270 into android11-5.4-lts
|\|
| * e133c1ee Linux 5.4.270
| * 7a543382 scripts/bpf: Fix xdp_md forward declaration typo
| * b4eea7a0 fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
| * c28fc1aa drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
| * 29db9725 drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
| * ae4360cb netfilter: nf_tables: set dormant flag on hook register failure
| * f3101439 tls: stop recv() if initial process_rx_list gave us non-DATA
| * a26742ad tls: rx: drop pointless else after goto
| * c1287c1d tls: rx: jump to a more appropriate label
| * 06de2302 s390: use the correct count for __iowrite64_copy()
| * 7eee00fe packet: move from strlcpy with unused retval to strscpy
| * 82831e3f ipv6: sr: fix possible use-after-free and null-ptr-deref
| * 5c27d85a afs: Increase buffer size in afs_update_volume_status()
| * 799a4afa ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
| * 5888f342 ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
| * a50cb1d6 nouveau: fix function cast warnings
| * fe031dfc scsi: jazz_esp: Only build if SCSI core is builtin
| * dd90af71 bpf, scripts: Correct GPL license name
| * 1f18b5bb scripts/bpf: teach bpf_helpers_doc.py to dump BPF helper definitions
| * 48ebca0a RDMA/srpt: fix function pointer cast warnings
| * 31076337 RDMA/srpt: Make debug output more detailed
| * 6e461952 RDMA/bnxt_re: Return error for SRQ resize
| * cecfb90c IB/hfi1: Fix a memleak in init_credit_return
| * bbcf7233 usb: roles: don't get/set_role() when usb_role_switch is unregistered
| * a31cf46d usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
| * aad6132a usb: cdns3: fix memory double free when handle zero packet
| * cfa9abb5 usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
| * 999a8bb7 ARM: ep93xx: Add terminator to gpiod_lookup_table
| * c1d3a84a l2tp: pass correct message length to ip6_append_data
| * caf4a67c PCI/MSI: Prevent MSI hardware interrupt number truncation
| * f8cbd179 gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
| * 0dccbb93 dm-crypt: don't modify the data when using authenticated encryption
| * 5833024a IB/hfi1: Fix sdma.h tx->num_descs off-by-one error
| * 6ede985c PCI: tegra: Fix OF node reference leak
| * e04a2afd PCI: tegra: Fix reporting GPIO error value
| * e3fc0809 arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node
| * efd63c23 drm/amdgpu: Fix type of second parameter in trans_msg() callback
| * f691ab24 iomap: Set all uptodate bits for an Uptodate page
| * 45227ae3 dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata()
| * 3770c38c x86/alternatives: Disable KASAN in apply_alternatives()
| * f45dc10a drm/amdgpu: Check for valid number of registers to read
| * 90aa9135 Revert "drm/sun4i: dsi: Change the start delay calculation"
| * 7000efb6 ALSA: hda/realtek - Enable micmute LED on and HP system
| * 82c53047 selftests/bpf: Avoid running unprivileged tests with alignment requirements
| * 81e03f63 net: bridge: clear bridge's private skb space on xmit
| * 82174d6b spi: mt7621: Fix an error message in mt7621_spi_probe()
| * 954a7a00 pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups
| * 759756e2 pinctrl: pinctrl-rockchip: Fix a bunch of kerneldoc misdemeanours
| * 99dc5685 tcp: add annotations around sk->sk_shutdown accesses
| * 41ca9386 tcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the limit
| * 5a9dc14d tcp: factor out __tcp_close() helper
| * d4286764 pmdomain: renesas: r8a77980-sysc: CR7 must be always on
| * 3bc35da6 s390/qeth: Fix potential loss of L3-IP@ in case of network issues
| * b7bfaea8 virtio-blk: Ensure no requests in virtqueues before deleting vqs.
| * d124ab01 firewire: core: send bus reset promptly on gap count error
| * b5854f92 scsi: lpfc: Use unsigned type for num_sge
| * 60635f8a hwmon: (coretemp) Enlarge per package core count limit
| * 6d338fb1 nvmet-fc: abort command when there is no binding
| * ac524b7b netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
| * 6f5015ce ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
| * c3a25d4f nvmet-tcp: fix nvme tcp ida memory leak
| * 5068cb91 regulator: pwm-regulator: Add validity checks in continuous .get_voltage
| * 6b92b1bc ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
| * 260fc962 ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
| * bccb418e ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
| * e896bf48 ahci: asm1166: correct count of reported ports
| * 6db07619 fbdev: sis: Error out if pixclock equals zero
| * 84dce0f6 fbdev: savage: Error out if pixclock equals zero
| * 85720b69 wifi: mac80211: fix race condition on enabling fast-xmit
| * d3032de2 wifi: cfg80211: fix missing interfaces when dumping
| * bb3813a6 dmaengine: fsl-qdma: increase size of 'irq_name'
| * a7229c75 dmaengine: shdma: increase size of 'dev_id'
| * 11f3fe50 scsi: target: core: Add TMF to tmr_list handling
| * d2fc4134 sched/rt: Disallow writing invalid values to sched_rt_period_us
| * b69677bf sched/rt: Fix sysctl_sched_rr_timeslice intial value
| * 429aaf14 userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
| * b0911b8d nilfs2: replace WARN_ONs for invalid DAT metadata block requests
| * febd7432 memcg: add refcnt for pcpu stock to avoid UAF problem in drain_all_stock()
| * d7b5bdb5 sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
| * 010dc505 net/sched: Retire dsmark qdisc
| * 40e8abb8 net/sched: Retire ATM qdisc
| * 493685f3 net/sched: Retire CBQ qdisc
| * 9d17e735 KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
| * 68799371 KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
* | 3298a76a Revert "bpf: Add map and need_defer parameters to .map_fd_put_ptr()"
* | 241e0d86 Revert "hrtimer: Report offline hrtimer enqueue"
* | ce97b1b6 Revert "drm/mipi-dsi: Fix detach call without attach"
* | 806fb883 Merge 5.4.269 into android11-5.4-lts
|/
* 6e1f54a4 Linux 5.4.269
* e9aa8e5a of: gpio unittest kfree() wrong object
* 6ac89659 of: unittest: fix EXPECT text for gpio hog errors
* 7dd275ce net: bcmgenet: Fix EEE implementation
* 10c586da Revert "Revert "mtd: rawnand: gpmi: Fix setting busy timeout setting""
* 25b42be4 netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
* 3dd76beb lsm: new security_file_ioctl_compat() hook
* efdf6440 drm/msm/dsi: Enable runtime PM
* fef59ee6 PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
* 835ed5ef PM: runtime: add devm_pm_runtime_enable helper
* d31c8721 nilfs2: fix potential bug in end_buffer_async_write
* 2441a640 sched/membarrier: reduce the ability to hammer on sys_membarrier
* cd1022ea net: prevent mss overflow in skb_segment()
* 6587af96 netfilter: ipset: Missing gc cancellations fixed
* c7f2733e netfilter: ipset: fix performance regression in swap operation
* d04acadb KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
* 4705a9fc mips: Fix max_mapnr being uninitialized on early stages
* 5e0854b6 arch, mm: remove stale mentions of DISCONIGMEM
* c324e271 bus: moxtet: Add spi device table
* 7f71d981 Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
* 60e09228 tracing: Inform kmemleak of saved_cmdlines allocation
* fbe86124 pmdomain: core: Move the unused cleanup to a _sync initcall
* 08de58ab can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
* a257ffde irqchip/irq-brcmstb-l2: Add write memory barrier before exit
* 91a7c002 nfp: flower: prevent re-adding mac index for bonded port
* b22c9a37 nfp: use correct macro for LengthSelect in BAR config
* 862ee442 nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
* a6efe6db nilfs2: fix data corruption in dsync block recovery for small block sizes
* 6ce7d5e6 ALSA: hda/conexant: Add quirk for SWS JS201D
* 6b8bdc50 mmc: slot-gpio: Allow non-sleeping GPIO ro
* 4f2fde50 x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
* 4c7b1d08 x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
* ed14ab26 serial: max310x: improve crystal stable clock detection
* 5814a904 serial: max310x: set default value when reading clock ready bit
* ef60665e ring-buffer: Clean ring_buffer_poll_wait() error return
* 7200170e iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
* 720d0112 staging: iio: ad5933: fix type mismatch regression
* 77e7a316 tracing: Fix wasted memory in saved_cmdlines logic
* afbcad9a ext4: fix double-free of blocks due to wrong extents moved_len
* 15238f4b misc: fastrpc: Mark all sessions as invalid in cb_remove
* 42beab16 binder: signal epoll threads of self-work
* 93a52449 ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
* 9086b27e xen-netback: properly sync TX responses
* 71349abe nfc: nci: free rx_data_reassembly skb on NCI device cleanup
* 4ae191ef kbuild: Fix changing ELF file type for output of gen_btf for big endian
* 750a4e59 firewire: core: correct documentation of fw_csr_string() kernel API
* 2209fc6e scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock"
* d074d5ff i2c: i801: Fix block process call transactions
* 4de1489d i2c: i801: Remove i801_set_block_buffer_mode
* df112ccb usb: f_mass_storage: forbid async queue when shutdown happen
* addaa862 USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
* dbaca8fa HID: wacom: Do not register input devices until after hid_hw_start
* e13bed5c HID: wacom: generic: Avoid reporting a serial of '0' to userspace
* 1f12e4b3 mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
* 8ffd5590 tracing/trigger: Fix to return error if failed to alloc snapshot
* a67f1f83 i40e: Fix waiting for queues of all VSIs to be disabled
* 9a3a82af MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
* 422d5243 ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
* 91b48c63 spi: ppc4xx: Drop write-only variable
* 61da1f41 of: unittest: Fix compile in the non-dynamic case
* f6997a24 of: unittest: add overlay gpio test to catch gpio hog problem
* 89485251 btrfs: send: return EOPNOTSUPP on unknown flags
* 863837df btrfs: forbid deleting live subvol qgroup
* d25031ba btrfs: forbid creating subvol qgroups
* 10e9cb39 netfilter: nft_set_rbtree: skip end interval element from gc
* 7fde2acc net: stmmac: xgmac: fix a typo of register name in DPP safety handling
* b9ff931f net: stmmac: xgmac: use #define for string constants
* 88c7e1e7 vhost: use kzalloc() instead of kmalloc() followed by memset()
* 09e77c7d Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
* a012efe0 hrtimer: Report offline hrtimer enqueue
* 4a589de9 USB: serial: cp210x: add ID for IMST iM871A-USB
* cd0ab7f2 USB: serial: option: add Fibocom FM101-GL variant
* 896695af USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
* 11ca9624 net/af_iucv: clean up a try_then_request_module()
* 1c748815 netfilter: nft_ct: reject direction for ct id
* 8e2a84c6 netfilter: nft_compat: restrict match/target protocol to u16
* f139a4c6 netfilter: nft_compat: reject unused compat flag
* 56fae816 ppp_async: limit MRU to 64K
* 6f70f0b4 tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
* ef1f56f2 rxrpc: Fix response to PING RESPONSE ACKs to a dead call
* 5993f121 inet: read sk->sk_family once in inet_recv_error()
* 7c96975c hwmon: (coretemp) Fix bogus core_id to attr name mapping
* 1eb74c00 hwmon: (coretemp) Fix out-of-bounds memory access
* 51d76b72 hwmon: (aspeed-pwm-tacho) mutex for tach reading
* df096593 atm: idt77252: fix a memleak in open_card_ubr0
* a0ac20fd selftests: net: avoid just another constant wait
* e9837c83 net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
* 8398d8d7 phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
* 0cb90f27 dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
* 6ff48273 phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
* 1c75fe45 dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
* c2636094 dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
* 817bedcd bonding: remove print in bond_verify_device_path
* e9512069 HID: apple: Add 2021 magic keyboard FN key mapping
* 5991ab89 HID: apple: Swap the Fn and Left Control keys on Apple keyboards
* 6d4771ab HID: apple: Add support for the 2021 Magic Keyboard
* 67f56ef9 net: sysfs: Fix /sys/class/net/<iface> path
* b169ffde af_unix: fix lockdep positive in sk_diag_dump_icons()
* b3dace37 net: ipv4: fix a memleak in ip_setup_cork
* f549f340 netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
* 06608603 netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
* 64babb17 llc: call sock_orphan() at release time
* 2a09d178 ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
* 7f1a2491 ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
* a10e95d6 ixgbe: Refactor overtemp event handling
* 2d533ddc ixgbe: Refactor returning internal error codes
* 980c806f ixgbe: Remove non-inclusive language
* 7c03b748 net: remove unneeded break
* b81f679a scsi: isci: Fix an error code problem in isci_io_request_build()
* 12f58dce wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
* ad2bd6cd perf: Fix the nr_addr_filters fix
* 34da3b9f drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()'
* 6ab4fd50 ceph: fix deadlock or deadcode of misusing dget()
* ecd7744a blk-mq: fix IO hang from sbitmap wakeup race
* 97710547 virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
* 884b7462 libsubcmd: Fix memory leak in uniq()
* 3e06e9b9 PCI/AER: Decode Requester ID when no error info found
* 133bf750 fs/kernfs/dir: obey S_ISGID
* 17c252f1 usb: hub: Replace hardcoded quirk value with BIT() macro
* d8c29354 PCI: switchtec: Fix stdev_release() crash after surprise hot remove
* a32a24da PCI: Only override AMD USB controller if required
* e2048eb3 mfd: ti_am335x_tscadc: Fix TI SoC dependencies
* 838cbe01 i3c: master: cdns: Update maximum prescaler value for i2c clock
* a6946682 um: net: Fix return type of uml_net_start_xmit()
* c8115f2b um: Don't use vfprintf() for os_info()
* 735a29ce um: Fix naming clash between UML and scheduler
* ddd1f258 leds: trigger: panic: Don't register panic notifier if creating the trigger failed
* 9052b3e0 drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
* 548f9a37 drm/amdgpu: Let KFD sync with VM fences
* 15d67457 clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
* 105444e2 clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
* 8a96f1ca drm/msm/dpu: Ratelimit framedone timeout msgs
* 4d181fe9 media: ddbridge: fix an error code problem in ddb_probe
* 615e3adc IB/ipoib: Fix mcast list locking
* fb703d31 drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
* c1b2e5e8 ALSA: hda: Intel: add HDA_ARL PCI ID support
* c91bda92 PCI: add INTEL_HDA_ARL to pci_ids.h
* fbbee078 media: rockchip: rga: fix swizzling for RGB formats
* acb1bffe media: stk1160: Fixed high volume of stk1160_dbg messages
* 67997250 drm/mipi-dsi: Fix detach call without attach
* d778e10d drm/framebuffer: Fix use of uninitialized variable
* da980f8d drm/drm_file: fix use of uninitialized variable
* 00a5feb0 RDMA/IPoIB: Fix error code return in ipoib_mcast_join
* b0f907a4 fast_dput(): handle underflows gracefully
* 12ba5b9c ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
* 9fceaf81 f2fs: fix to check return value of f2fs_reserve_new_block()
* 52240224 wifi: cfg80211: free beacon_ies when overridden from hidden BSS
* 18c2989c wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
* 8ec36f2d wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
* f3b7a31b arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
* c3f22192 arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
* 351b37b8 md: Whenassemble the array, consult the superblock of the freshest device
* 6f2cd02f block: prevent an integer overflow in bvec_try_merge_hw_page
* fb9c25ea ARM: dts: imx23/28: Fix the DMA controller node name
* c48e75a7 ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
* 83b1ccec ARM: dts: imx27-apf27dev: Fix LED name
* 06c3f592 ARM: dts: imx25/27: Pass timing0
* 826e8fa4 ARM: dts: imx1: Fix sram node
* 05f309a3 ARM: dts: imx27: Fix sram node
* 1e35a4cf ARM: dts: imx: Use flash@0,0 pattern
* 30cfab1c ARM: dts: imx25/27-eukrea: Fix RTC node name
* ca14da9a ARM: dts: rockchip: fix rk3036 hdmi ports node
* e9ac3e33 scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
* f5a87505 scsi: libfc: Don't schedule abort twice
* eb6f68ec bpf: Add map and need_defer parameters to .map_fd_put_ptr()
* f11f0fd1 wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
* 53dd674b ARM: dts: imx7s: Fix nand-controller #size-cells
* a86ce367 ARM: dts: imx7s: Fix lcdif compatible
* 183edc0a ARM: dts: imx7d: Fix coresight funnel ports
* 6c50e561 bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
* 4d981d92 PCI: Add no PM reset quirk for NVIDIA Spectrum devices
* 0e8c8aa8 scsi: lpfc: Fix possible file string name overflow when updating firmware
* cbd0b626 selftests/bpf: Fix pyperf180 compilation failure with clang18
* 982bdaa0 selftests/bpf: satisfy compiler by having explicit return in btf test
* e1f113b5 wifi: rt2x00: restart beacon queue when hardware reset
* b183fe87 ext4: avoid online resizing failures due to oversized flex bg
* 92c3c5cf ext4: remove unnecessary check from alloc_flex_gd()
* 7cb19e13 ext4: unify the type of flexbg_size to unsigned int
* 360c28a2 ext4: fix inconsistent between segment fstrim and full fstrim
* ec107554 ecryptfs: Reject casefold directory inodes
* 7a96d85b SUNRPC: Fix a suspicious RCU usage warning
* 5e63c9ae KVM: s390: fix setting of fpc register
* 6d0822f2 s390/ptrace: handle setting of fpc register correctly
* de6a91ae jfs: fix array-index-out-of-bounds in diNewExt
* 592d29eb rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
* f4a0b576 afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
* 3f4cba4c crypto: stm32/crc32 - fix parsing list of devices
* e9f6ac50 pstore/ram: Fix crash when setting number of cpus to an odd number
* 93df0a2a jfs: fix uaf in jfs_evict_inode
* 3f8217c3 jfs: fix array-index-out-of-bounds in dbAdjTree
* 1b9d6828 jfs: fix slab-out-of-bounds Read in dtSearch
* fd3486a8 UBSAN: array-index-out-of-bounds in dtSplitRoot
* 98f9537f FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
* d2049af7 ACPI: extlog: fix NULL pointer dereference check
* 0d2adafb PNP: ACPI: fix fortify warning
* b0b96859 ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
* 20277842 audit: Send netlink ACK before setting connection in auditd_set
* 27756ae3 regulator: core: Only increment use_count when enable_count changes
* aed181fb perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
* 980d5fe9 x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
* 0580f440 powerpc/lib: Validate size for vector operations
* 7cd81d23 powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
* 9bf6c6f0 powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
* 17146804 powerpc: Fix build error due to is_valid_bugaddr()
* f6781add powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
* 3cdbfac1 x86/entry/ia32: Ensure s32 is sign extended to s64
* aa8bd0d9 tick/sched: Preserve number of idle sleeps across CPU hotplug events
* 200d17b2 mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
* b2b0d407 spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
* 344e8f33 gpio: eic-sprd: Clear interrupt after set the interrupt type
* f81d6783 drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
* 83d86b4a drm/exynos: fix accidental on-stack copy of exynos_drm_plane
* 3e835d6e drm/bridge: nxp-ptn3460: simplify some error checking
* 021e2149 drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
* 9dd334a8 drm: Don't unref the same fb many times by mistake due to deadlock handling
* 5624d628 gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
* 4e66422f netfilter: nf_tables: reject QUEUE/DROP verdict parameters
* bd517df3 rbd: don't move requests to the running list on errors
* 69a08762 btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
* d0bf04c9 btrfs: don't warn if discard range is not aligned to sector
* 927d1a3d btrfs: tree-checker: fix inline ref size in error messages
* 5c9e576b btrfs: ref-verify: free ref cache before clearing mount opt
* d3d6162e net: fec: fix the unhandled context fault from smmu
* 3422bfda fjes: fix memleaks in fjes_hw_setup
* 07bcc3cd netfilter: nf_tables: validate NFPROTO_* family
* b55e492f netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
* 2501afe6 net/mlx5e: fix a double-free in arfs_create_groups
* bca555e8 net/mlx5: Use kfree(ft->g) in arfs_create_groups()
* 0917d771 net/mlx5: DR, Use the right GVMI number for drop action
* 4f4dc709 netlink: fix potential sleeping issue in mqueue_flush_file
* da709480 tcp: Add memory barrier to tcp_push()
* 01d15b68 afs: Hide silly-rename files from userspace
* dad9b28f tracing: Ensure visibility when inserting an element into tracing_map
* a37ae111 net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
* b8e8838f llc: Drop support for ETH_P_TR_802_2.
* b643d0de llc: make llc_ui_sendmsg() more robust against bonding changes
* 06f30fdb vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
* 1fea9969 net/smc: fix illegal rmb_desc access in SMC-D connection dump
* 5c6183f3 x86/CPU/AMD: Fix disabling XSAVES on AMD family 0x17 due to erratum
* 7e180b70 powerpc: Use always instead of always-y in for crtsavres.o
* 457ef4fe fs: move S_ISGID stripping into the vfs_*() helpers
* 0cb0093f fs: add mode_strip_sgid() helper
* 635a0039 mtd: spinand: macronix: Fix MX35LFxGE4AD page size
* 3f4e6601 block: Remove special-casing of compound pages
* 0785e298 rename(): fix the locking of subdirectories
* f0824ca2 ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path
* a1e80a33 nouveau/vmm: don't set addr on the fail path to avoid warning
* f49f9e80 mmc: core: Use mrq.sbc in close-ended ffu
* e15b1553 arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
* 830c9979 parisc/firmware: Fix F-extend for PDC addresses
* dd50fe18 rpmsg: virtio: Free driver_override when rpmsg_remove()
* 5030d4c7 hwrng: core - Fix page fault dead lock on mmap-ed hwrng
* 5bc17b4f PM: hibernate: Enforce ordering during image compression/decompression
* cf6889bb crypto: api - Disallow identical driver names
* a7edaf40 ext4: allow for the last group to be marked as trimmed
* e2ecfd55 serial: sc16is7xx: add check for unsupported SPI modes during probe
* 120b65f8 spi: introduce SPI_MODE_X_MASK macro
* 2b708e6b serial: sc16is7xx: set safe default SPI clock frequency
* e53321b3 units: add the HZ macros
* 34d74cf3 units: change from 'L' to 'UL'
* 7478445a units: Add Watt units
* b6179745 include/linux/units.h: add helpers for kelvin to/from Celsius conversion
* 2ed05a8c PCI: mediatek: Clear interrupt status before dispatching handler

Change-Id: I1ddbcc9d61402546e16694894da56199a22ec74d
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>