Merge tag 'android11-5.4.299_r00' into android11-5.4

This merges the android11-5.4.299_r00 tag into the android11-5.4 branch,
catching it up with the latest LTS releases.

It contains the following commits:

*   8b500987 Merge 5.4.299 into android11-5.4-lts
|\
| * 08c21a7a Linux 5.4.299
| * 7d92591a dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status()
| * 1be4500c cifs: fix integer overflow in match_server()
| * 72c8557e spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort
| * dc5fdb36 spi: spi-fsl-lpspi: Set correct chip-select polarity bit
| * 82224aa8 spi: spi-fsl-lpspi: Fix transmissions when using CONT
| * 5b60ed40 pcmcia: Add error handling for add_interval() in do_validate_mem()
| * 2baa6c01 ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model
| * d3a2d5b7 randstruct: gcc-plugin: Fix attribute addition
| * e34c5bbe randstruct: gcc-plugin: Remove bogus void member
| * 76825d6a vmxnet3: update MTU after device quiesce
| * 26dc498a net: dsa: microchip: linearize skb for tail-tagging switches
| * 183037e8 net: dsa: microchip: update tag_ksz masks for KSZ9477 family
| * 249bcc91 dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status()
| * 2d5f203f ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup
| * b26db1bb gpio: pca953x: fix IRQ storm on system wake up
| * a9c56ccb iio: light: opt3001: fix deadlock due to concurrent flag access
| * f991dd32 iio: chemical: pms7003: use aligned_s64 for timestamp
| * 283114fe KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
| * 89737f65 cpufreq/sched: Explicitly synchronize limits_changed flag handling
| * 872f2c34 mm/slub: avoid accessing metadata when pointer is invalid in object_err()
| * ab34084f scsi: lpfc: Fix buffer free/clear order in deferred receive path
| * 352fbf61 mm/khugepaged: fix ->anon_vma race
| * ea832ec0 e1000e: fix heap overflow in e1000_set_eeprom
| * 30fc4724 batman-adv: fix OOB read/write in network-coding decode
| * 6c9b0357 drm/amdgpu: drop hw access in non-DC audio fini
| * 9eb0118b wifi: mwifiex: Initialize the chan_stats array to zero
| * b990c8c6 pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()
| * ec1b3e6d ALSA: usb-audio: Add mute TLV for playback volumes on some devices
| * 9ca6a040 ppp: fix memory leak in pad_compress_skb
| * d0e34c9f net: atm: fix memory leak in atm_register_sysfs when device_register fail
| * 42b46684 ax25: properly unshare skbs in ax25_kiss_rcv()
| * fce2c735 ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init()
| * b2c46859 net: thunder_bgx: decrement cleanup index before use
| * 10d3eb2a net: thunder_bgx: add a missing of_node_put
| * 00ad0311 wifi: libertas: cap SSID len in lbs_associate()
| * 6381da82 wifi: cw1200: cap SSID length in cw1200_do_join()
| * 6220de8a net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets
| * 971feafe i40e: Fix potential invalid access when MAC list is empty
| * 8937d2fe icmp: fix icmp_ndo_send address translation for reply direction
| * 615378d5 mISDN: Fix memory leak in dsp_hwec_enable()
| * 2577bc37 xirc2ps_cs: fix register access when enabling FullDuplex
| * 964cbb19 Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
| * 73aefc14 netfilter: conntrack: helper: Replace -EEXIST by -EBUSY
| * a8bb681e wifi: cfg80211: fix use-after-free in cmp_bss()
| * f84794ad powerpc: boot: Remove leading zero in label in udelay()
* | 4617bff4 Merge 5.4.298 into android11-5.4-lts
|\|
| * bbe1a55e Linux 5.4.298
| * 2f1a24ba Revert "drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS"
| * f987081b net: usb: qmi_wwan: add Telit Cinterion LE910C4-WWX new compositions
| * 990d8a84 Revert "drm/amdgpu: fix incorrect vm flags to map bo"
| * 22ddb5ec HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()
| * 6bb9d3da HID: wacom: Add a new Art Pen 2
| * 9a9e4a83 HID: asus: fix UAF via HID_CLAIMED_INPUT validation
| * 72777fc3 KVM: x86: use array_index_nospec with indices that come from guest
| * 0f63fbab efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
| * 45e4b365 sctp: initialize more fields in sctp_v6_from_sk()
| * c107fd06 net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts
| * 8472b9d8 net/mlx5e: Set local Xoff after FW update
| * 72a2d4bc net/mlx5e: Update and set Xon/Xoff upon port speed set
| * 5c0fe21f net/mlx5e: Update and set Xon/Xoff upon MTU set
| * f49a44b9 net: dlink: fix multicast stats being counted incorrectly
| * b502f16b atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
| * da965f75 net/atm: remove the atmdev_ops {get, set}sockopt methods
| * dc205c08 Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced
| * 935ea874 powerpc/kvm: Fix ifdef to remove build warning
| * b43f5c7f net: ipv4: fix regression in local-broadcast routes
| * 821193f4 vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put()
| * e9d29c66 scsi: core: sysfs: Correct sysfs attributes access rights
| * f299353e ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
| * 18ba4a7a pinctrl: STMFX: add missing HAS_IOMEM dependency
* | ede3e90a Revert "PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports"
* | e6bbe8cf Revert "PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()"
* | 0f7dff11 Merge 5.4.297 into android11-5.4-lts
|\|
| * c25f780e Linux 5.4.297
| * fa728ded alloc_fdtable(): change calling conventions.
| * 7a0208c5 s390/hypfs: Enable limited access during lockdown
| * bb79734b s390/hypfs: Avoid unnecessary ioctl registration in debugfs
| * de987b46 ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
| * 1fb7c840 net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
| * 7689ab22 net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
| * c4f464cf ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
| * 89dfc928 ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
| * 6cd6e75c ALSA: usb-audio: Fix size validation in convert_chmap_v3()
| * d0225f41 scsi: qla4xxx: Prevent a potential error pointer dereference
| * ef49d17e usb: xhci: Fix slot_id resource race conflict
| * 6cd3f13a nfs: fix UAF in direct writes
| * ee389fca NFS: Fix up commit deadlocks
| * fe87e2d0 cifs: Fix UAF in cifs_demultiplex_thread()
| * 6894717a Bluetooth: fix use-after-free in device_for_each_child()
| * 6b1a3968 act_mirred: use the backlog for nested calls to mirred ingress
| * cfae16e8 net/sched: act_mirred: better wording on protection against excessive stack growth
| * 02ca0423 net/sched: act_mirred: refactor the handle of xmit
| * 7192eb73 selftests: forwarding: tc_actions.sh: add matchall mirror test
| * 4d6f20bf net: sched: don't expose action qstats to skb_tc_reinsert()
| * b7b56a5f net: sched: extract qstats update code into functions
| * dc15bd56 net: sched: extract bstats update code into function
| * 306e2719 net: sched: extract common action counters update code into function
| * f11d3137 mm: perform the mapping_map_writable() check after call_mmap()
| * 55933e95 mm: update memfd seal write check to include F_SEAL_WRITE
| * 6a8b539c mm: drop the assumption that VM_SHARED always implies writable
| * 7a742a95 codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
| * 4f9cd311 sch_qfq: make qfq_qlen_notify() idempotent
| * 9a5fd5c2 sch_hfsc: make hfsc_qlen_notify() idempotent
| * fcf09d75 sch_drr: make drr_qlen_notify() idempotent
| * d5514a1d btrfs: populate otime when logging an inode item
| * 8226db23 media: venus: hfi: explicitly release IRQ during teardown
| * ee4d13f5 f2fs: fix to avoid out-of-boundary access in dnode page
| * 18c2b2bd media: venus: protect against spurious interrupts during probe
| * 7e23a595 media: qcom: camss: cleanup media device allocated resource on error path
| * 6242f1a3 media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
| * 2402adce drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
| * e1fe95f9 pwm: mediatek: Fix duty and period setting
| * 2c8e684d pwm: mediatek: Handle hardware enable and clock enable separately
| * f070b317 pwm: mediatek: Implement .apply() callback
| * 2964dbe6 media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
| * 93c8931a media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
| * fad9206d media: v4l2-ctrls: always copy the controls on completion
| * 685ac667 ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
| * 1096eb63 soc: qcom: mdt_loader: Ensure we don't read past the ELF header
| * 7d5b5250 rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
| * 07dad577 usb: musb: omap2430: fix device leak at unbind
| * 95eb0d97 NFS: Fix the setting of capabilities when automounting a new filesystem
| * 51e2e084 NFS: Fix up handling of outstanding layoutcommit in nfs_update_inode()
| * 46c44bb4 NFSv4: Fix nfs4_bitmap_copy_adjust()
| * 2cbf9f51 usb: typec: fusb302: cache PD RX state
| * 0e35cac6 cdc-acm: fix race between initial clearing halt and open
| * 46ce8549 USB: cdc-acm: do not log successful probe on later errors
| * c7b6ea0e mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
| * 6742e342 mm/kmemleak: turn kmemleak_lock and object->lock to raw_spinlock_t
| * 55e0bf41 ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
| * 550e12ef x86/fpu: Delay instruction pointer fixup until after warning
| * 69683d17 mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
| * 3f252a73 nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
| * 11cfbcfe pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov
| * e70f5ee4 tracing: Add down_write(trace_event_sem) when adding trace event
| * b25dad54 usb: hub: Don't try to recover devices lost during warm reset.
| * 1bd92465 usb: hub: avoid warm port reset during USB3 disconnect
| * 3dbc0ed9 x86/mce/amd: Add default names for MCA banks and blocks
| * 19e7a581 iio: hid-sensor-prox: Fix incorrect OFFSET calculation
| * 44e904a1 f2fs: fix to do sanity check on ino and xnid
| * 6ae674a2 mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n
| * a773caa6 mm/zsmalloc.c: convert to use kmem_cache_zalloc in cache_alloc_zspage()
| * 0e0d8c68 drm/sched: Remove optimization that causes hang when killing dependent jobs
| * 35370d3b ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
| * 7262154d net: usbnet: Fix the wrong netif_carrier_on() call
| * 4251ee9d net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
| * 607b3426 PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
| * 8e8b5f12 ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value
| * 454d732d comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
| * 6f38c638 comedi: Fix initialization of data for instructions that write to subdevice
| * 16ecad3f kbuild: Add KBUILD_CPPFLAGS to as-option invocation
| * cbf2b29d kbuild: add $(CLANG_FLAGS) to KBUILD_CPPFLAGS
| * dfd69889 kbuild: Add CLANG_FLAGS to as-instr
| * 3a1f2155 mips: Include KBUILD_CPPFLAGS in CHECKFLAGS invocation
| * 678a7813 kbuild: Update assembler calls to use proper flags and language target
| * d9f193f3 ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS
| * 0c169913 usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
| * f93fb614 USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
| * a648cc7c usb: storage: realtek_cr: Use correct byte order for bcs->Residue
| * eb2223e2 USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
| * deef90c5 usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
| * 04318dba iio: proximity: isl29501: fix buffered read on big-endian systems
| * 12064e18 ftrace: Also allocate and copy hash for reading of filter files
| * e4c2515a fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
| * 3e3e50ce use uniform permission checks for all mount propagation changes
| * ce750f69 move_mount: allow to add a mount into an existing group
| * 70a09115 fs/buffer: fix use-after-free when call bh_read() helper
| * 3fe19a2c drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
| * cfed22d5 drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
| * b0e2eee1 squashfs: fix memory leak in squashfs_fill_super
| * c4ebc069 memstick: Fix deadlock by moving removing flag earlier
| * 0520c89f media: venus: Add a check for packet size after reading from shared memory
| * aca1b4f7 media: ov2659: Fix memory leaks in ov2659_probe()
| * c35e7c7a media: usbtv: Lock resolution while streaming
| * cf55b84f media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
| * 21950b84 media: gspca: Add bounds checking to firmware parser
| * 31f339e3 soc/tegra: pmc: Ensure power-domains are in a known state
| * f683d611 jbd2: prevent softlockup in jbd2_log_do_checkpoint()
| * f6419ccc PCI: endpoint: Fix configfs group removal on driver teardown
| * 80ea6e69 PCI: endpoint: Fix configfs group list head handling
| * 4a389f6d mtd: rawnand: fsmc: Add missing check after DMA map
| * d198239d pwm: imx-tpm: Reset counter if CMOD is 0
| * 1d7f9ad7 wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
| * 3525cec1 zynq_fpga: use sgtable-based scatterlist wrappers
| * 328cb473 ata: libata-scsi: Fix ata_to_sense_error() status handling
| * 9b127551 ext4: fix reserved gdt blocks handling in fsmap
| * 4381083b ext4: fix fsmap end of range reporting with bigalloc
| * 0b92af41 ext4: check fast symlink for ea_inode correctly
| * 4cddd68a Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
| * 8526b968 vt: defkeymap: Map keycodes above 127 to K_HOLE
| * 4a005134 vt: keyboard: Don't process Unicode characters in K_OFF mode
| * 57df8e2a usb: dwc3: meson-g12a: fix device leaks at unbind
| * 22ac4969 usb: gadget: udc: renesas_usb3: fix device leak at unbind
| * c280a442 usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
| * d1401dee m68k: Fix lost column on framebuffer debug console
| * 8f5a65f5 cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
| * 0b882f00 serial: 8250: fix panic due to PSLVERR
| * 17b95626 media: uvcvideo: Do not mark valid metadata as invalid
| * 9ad55421 media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
| * 9f1f4e95 mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
| * 8987732a parisc: Makefile: fix a typo in palo.conf
| * 7684e16e btrfs: fix log tree replay failure due to file with 0 links and extents
| * 0a364524 thunderbolt: Fix copy+paste error in match_service_id()
| * fe67122b comedi: fix race between polling and detaching
| * 5546bf7a misc: rtsx: usb: Ensure mmc child device is active when card is present
| * defdc6ee drm/amdgpu: fix incorrect vm flags to map bo
| * 896cbd43 scsi: lpfc: Remove redundant assignment to avoid memory leak
| * f3751c16 rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
| * 579b85f8 pNFS: Fix uninited ptr deref in block/scsi layout
| * 132f6448 pNFS: Handle RPC size limit for layoutcommits
| * a0799e0b pNFS: Fix disk addr range check in block/scsi layout
| * bd281003 pNFS: Fix stripe mapping in block/scsi layout
| * a69c5d81 net: phy: smsc: add proper reset flags for LAN8710A
| * a5635e80 ipmi: Fix strcpy source and destination the same
| * 5b2775e5 kconfig: lxdialog: fix 'space' to (de)select options
| * 0589cc97 kconfig: gconf: fix potential memory leak in renderer_edited()
| * dca77647 kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
| * fb2ff258 ipmi: Use dev_warn_ratelimited() for incorrect message warnings
| * 8732ba1a scsi: aacraid: Stop using PCI_IRQ_AFFINITY
| * ff139a19 scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
| * 1bdd9338 kconfig: nconf: Ensure null termination where strncpy is used
| * 6d150a17 kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
| * 1518eb08 i3c: don't fail if GETHDRCAP is unsupported
| * 76274030 PCI: pnv_php: Work around switches with broken presence detection
| * da16cbda i3c: add missing include to internal header
| * 75996055 media: uvcvideo: Fix bandwidth issue for Alcor camera
| * 7a41ecfc media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
| * bc07cae4 media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
| * efeb5879 media: usb: hdpvr: disable zero-length read messages
| * 44070233 media: tc358743: Increase FIFO trigger level to 374
| * bb0b1ac7 media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
| * 321cb5a3 media: tc358743: Check I2C succeeded during probe
| * e0b208c4 pinctrl: stm32: Manage irq affinity settings
| * 0f798374 scsi: mpt3sas: Correctly handle ATA device errors
| * 6711ce7e scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
| * 9bba1a99 RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
| * ab18e48a MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
| * 5bdb9553 jfs: upper bound check of tree index in dbAllocAG
| * 9f896c3d jfs: Regular file corruption check
| * 89fff8e3 jfs: truncate good inode pages when hard link is 0
| * 684c92bb scsi: bfa: Double-free fix
| * 52f07958 MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
| * 790f6baa watchdog: dw_wdt: Fix default timeout
| * 6ade1576 fs/orangefs: use snprintf() instead of sprintf()
| * f53af99f scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
| * 8085a732 ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
| * 9f69a595 cifs: Fix calling CIFSFindFirst() for root path without msearch
| * 86ae9f0e vhost: fail early when __vhost_add_used() fails
| * bcef6373 net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
| * ce72da68 uapi: in6: restore visibility of most IPv6 socket options
| * eae64c49 net: ncsi: Fix buffer overflow in fetching version id
| * 91f81e28 net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
| * 3650c263 net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
| * 0648dbd7 net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
| * 1870f42b wifi: iwlegacy: Check rate_idx range after addition
| * 95e9175c netmem: fix skb_frag_address_safe with unreadable skbs
| * 1764376a wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
| * ecd425c5 wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
| * 137d67e9 wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
| * ecb68d57 net: fec: allow disable coalescing
| * dca836a0 (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
| * 0c02d35d s390/stp: Remove udelay from stp_sync_clock()
| * aaa6dc2d wifi: iwlwifi: mvm: fix scan request validation
| * 893caa1e net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
| * 83ea1eb2 net: ipv4: fix incorrect MTU in broadcast routes
| * 731bb6ba wifi: cfg80211: Fix interface type validation
| * 74f58f38 rcu: Protect ->defer_qs_iw_pending from data race
| * 54e755bd net: ag71xx: Add missing check after DMA map
| * 128ed836 et131x: Add missing check after DMA map
| * 72dff025 be2net: Use correct byte order and format string for TCP seq and ack_seq
| * 92d523fa s390/time: Use monotonic clock in get_cycles()
| * 79d464ed wifi: cfg80211: reject HTC bit for management frames
| * 061d2462 ktest.pl: Prevent recursion of default variable options
| * f1aa0fb4 ASoC: codecs: rt5640: Retry DEVICE_ID verification
| * a9310a0f ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
| * 04fa6f5e ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
| * cfff555f platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
| * 1b5c6a60 pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
| * c41fef8b usb: core: usb_submit_urb: downgrade type check
| * 98e92be2 ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
| * 1fca8006 ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
| * a35952fb mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
| * 36bfbdad ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
| * 6783224b ACPI: processor: fix acpi_object initialization
| * f829e4b3 PM: sleep: console: Fix the black screen issue
| * f948542e thermal: sysfs: Return ENODATA instead of EAGAIN for reads
| * 2f6af290 PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
| * efea60c8 selftests: tracing: Use mutex_unlock for testing glob filter
| * b28c1a14 ARM: tegra: Use I/O memcpy to write to IRAM
| * 4cfa95dc gpio: tps65912: check the return value of regmap_update_bits()
| * d8e03f70 ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed
| * 3c6bf7a3 ARM: rockchip: fix kernel hang during smp initialization
| * a242ace7 cpufreq: Exit governor when failed to start old governor
| * 608ab9ff usb: xhci: Avoid showing errors during surprise removal
| * 0913e923 usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
| * fcd65f35 usb: xhci: Avoid showing warnings for dying controller
| * 86b225d5 selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t
| * c698f6d0 usb: xhci: print xhci->xhc_state when queue_command failed
| * 41d4cb81 securityfs: don't pin dentries twice, once is enough...
| * 1db925b7 hfs: fix not erasing deleted b-tree node issue
| * 0336bfe9 drbd: add missing kref_get in handle_write_conflicts
| * a47a7ef1 udf: Verify partition map count
| * 105036ca arm64: Handle KCOV __init vs inline mismatches
| * bb0eea8e hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
| * 73f7da50 hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
| * 032f7ed6 hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
| * e7d2dc24 hfs: fix slab-out-of-bounds in hfs_bnode_read()
| * d0194e39 sctp: linearize cloned gso packets in sctp_rcv
| * 586892e3 netfilter: ctnetlink: fix refcount leak on table dump
| * 7ac418e5 udp: also consider secpath when evaluating ipsec use for checksumming
| * cb4b5f4a ACPI: processor: perflib: Move problematic pr->performance check
| * bd844a24 ACPI: processor: perflib: Fix initial _PPC limit application
| * b8cb1b57 Documentation: ACPI: Fix parent device references
| * b4159c5a fs: Prevent file descriptor table allocations exceeding INT_MAX
| * 94447427 sunvdc: Balance device refcount in vdc_port_mpgroup_check
| * 6797a995 NFSD: detect mismatch of file handle and delegation stateid in OPEN op
| * 736881a2 net: dpaa: fix device leak when querying time stamp info
| * aecfeb82 net: gianfar: fix device leak when querying time stamp info
| * 47d49fd0 netlink: avoid infinite retry looping in netlink_unicast()
| * 799c06ad ALSA: usb-audio: Validate UAC3 cluster segment descriptors
| * 1666207b ALSA: usb-audio: Validate UAC3 power domain descriptors, too
| * 6d96e0c7 io_uring: don't use int for ABI
| * dba96dfa usb: gadget : fix use-after-free in composite_dev_cleanup()
| * 020f1053 MIPS: mm: tlb-r4k: Uniquify TLB entries on init
| * 1db292bc USB: serial: option: add Foxconn T99W709
| * c04a2c1c vsock: Do not allow binding to VMADDR_PORT_ANY
| * 18f13f2a net/packet: fix a race in packet_set_ring() and packet_notifier()
| * e4346ffe perf/core: Prevent VMA split of buffer mappings
| * 5ffda7f3 perf/core: Exit early on perf_mmap() fail
| * db3984eb perf/core: Don't leak AUX buffer refcount on allocation failure
| * 8ff1aa99 pptp: fix pptp_xmit() error path
| * 0fbf5e36 smb: client: let recv_done() cleanup before notifying the callers.
| * 3697e37e benet: fix BUG when creating VFs
| * 72f97d3c net: drop UFO packets in udp_rcv_segment()
| * 5dc60b2a ipv6: reject malicious packets in ipv6_gso_segment()
| * 97b8c5d3 pptp: ensure minimal skb length in pptp_xmit()
| * 7bf4c6e5 netpoll: prevent hanging NAPI when netcons gets enabled
| * 7f8eca87 NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
| * 18834f5e pci/hotplug/pnv-php: Wrap warnings in macro
| * 0f28008b pci/hotplug/pnv-php: Improve error msg on power state change failure
| * 651a71f9 usb: chipidea: udc: fix sleeping function called from invalid context
| * dc0172c7 f2fs: fix to avoid out-of-boundary access in devs.path
| * 15df5980 f2fs: fix to avoid panic in f2fs_evict_inode
| * 37e78cad f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
| * 75024aae rtc: pcf8563: fix incorrect maximum clock rate handling
| * 53ac364d rtc: hym8563: fix incorrect maximum clock rate handling
| * 0a9ac7f4 rtc: ds1307: fix incorrect maximum clock rate handling
| * a784d5b3 module: Restore the moduleparam prefix length check
| * ebd1205f bpf: Check flow_dissector ctx accesses are aligned
| * 89f46981 mtd: rawnand: atmel: set pmecc data setup time
| * 2e1fcf6e mtd: rawnand: atmel: Fix dma_mapping_error() address
| * 9b38fb31 jfs: fix metapage reference count leak in dbAllocCtl
| * 69373502 fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
| * e4c864a1 crypto: qat - fix seq_file position update in adf_ring_next()
| * 91eea098 dmaengine: nbpfaxi: Add missing check after DMA map
| * 5733fa26 dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
| * 80d0535f fs/orangefs: Allow 2 more characters in do_c_string()
| * 397098da soundwire: stream: restore params when prepare ports fail
| * 84e68a8b crypto: img-hash - Fix dma_unmap_sg() nents value
| * 9a7c00f3 hwrng: mtk - handle devm_pm_runtime_enable errors
| * 61f9762e watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
| * fc293c4a scsi: isci: Fix dma_unmap_sg() nents value
| * 8d795569 scsi: mvsas: Fix dma_unmap_sg() nents value
| * 0d725957 scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
| * 15700b23 clk: sunxi-ng: v3s: Fix de clock definition
| * e6841818 perf tests bp_account: Fix leaked file descriptor
| * a25ab6df crypto: ccp - Fix crash when rebind ccp device for ccp.ko
| * abe9813d pinctrl: sunxi: Fix memory leak on krealloc failure
| * 05b5621b power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
| * 77e9ad7a clk: davinci: Add NULL check in davinci_lpsc_clk_register()
| * a0d2de55 mtd: fix possible integer overflow in erase_xfer()
| * b890f3d8 crypto: marvell/cesa - Fix engine load inaccuracy
| * 816a2c19 PCI: rockchip-host: Fix "Unexpected Completion" log message
| * 423778c8 vrf: Drop existing dst reference in vrf_ip6_input_dst
| * 0577db57 selftests: rtnetlink.sh: remove esp4_offload after test
| * 66d41268 netfilter: xt_nfacct: don't assume acct name is null-terminated
| * caf0f743 can: kvaser_usb: Assign netdev.dev_port based on device channel index
| * 0fa86e3c can: kvaser_pciefd: Store device channel index
| * 37272a32 wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE
| * ed0b809f Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
| * 92c6f0d4 mwl8k: Add missing check after DMA map
| * 5111d4d2 wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
| * ad340a4b net/sched: Restrict conditions for adding duplicating netems to qdisc tree
| * 39dd4db6 arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
| * 3584fa93 netfilter: nf_tables: adjust lockdep assertions handling
| * 25e053cb drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
| * aec49221 m68k: Don't unregister boot console needlessly
| * 2cbd59d0 tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
| * c80832d4 iwlwifi: Add missing check for alloc_ordered_workqueue
| * ee8cff46 wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
| * e64732eb wifi: rtl818x: Kill URBs before clearing tx status queue
| * c3b69f0f caif: reduce stack size, again
| * 78561ada bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure
| * 6ba20ff3 bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
| * 9ca96350 staging: nvec: Fix incorrect null termination of battery manufacturer
| * 3bbdc668 samples: mei: Fix building on musl libc
| * 6e6f1902 cpufreq: Init policy->rwsem before it may be possibly used
| * c1289b6f ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface
| * d12d31cd usb: early: xhci-dbc: Fix early_ioremap leak
| * c3bfaf9c Revert "vmci: Prevent the dispatching of uninitialized payloads"
| * 7465f4f1 pps: fix poll support
| * 2c86366c vmci: Prevent the dispatching of uninitialized payloads
| * 83ea0c7b staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
| * 6ea0251d ARM: dts: vfxxx: Correctly use two tuples for timer address
| * a30ce41d ASoC: ops: dynamically allocate struct snd_ctl_elem_value
| * 0807e4ac hfsplus: remove mutex_lock check in hfsplus_free_extents
| * eac07e80 ASoC: Intel: fix SND_SOC_SOF dependencies
| * 02bdbb8d ethernet: intel: fix building with large NR_CPUS
| * e5d396f4 usb: phy: mxs: disconnect line when USB charger is attached
| * 4eb4ad45 usb: chipidea: add USB PHY event
| * f2b6a88c usb: chipidea: introduce CI_HDRC_CONTROLLER_VBUS_EVENT glue layer use
| * 770809a9 usb: chipidea: udc: protect usb interrupt enable
| * 4fbf6bb0 usb: chipidea: udc: add new API ci_hdrc_gadget_connect
| * 6c77bc70 ALSA: hda: Add missing NVIDIA HDA codec IDs
| * 451c43bb comedi: comedi_test: Fix possible deletion of uninitialized timers
| * dd298c0b nilfs2: reject invalid file types when reading inodes
| * cbec4406 i2c: qup: jump out of the loop in case of timeout
| * 23cc07ce net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
| * b35694ff net: appletalk: Fix use-after-free in AARP proxy probe
| * 7dc69383 net: appletalk: fix kerneldoc warnings
| * 8b36f61d RDMA/core: Rate limit GID cache warning messages
| * 7574892e regulator: core: fix NULL dereference on unbind due to stale coupling data
| * c72cd4c9 usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
| * 042959e9 usb: hub: fix detection of high tier USB3 devices behind suspended hubs
| * e0936ff5 net_sched: sch_sfq: reject invalid perturb period
| * 8fadc871 net_sched: sch_sfq: move the limit validation
| * 7bb9498f net_sched: sch_sfq: use a temporary work area for validating configuration
| * e12f6013 net_sched: sch_sfq: don't allow 1 packet limit
| * 843cacb8 net_sched: sch_sfq: handle bigger packets
| * 74d5d257 net_sched: sch_sfq: annotate data-races around q->perturb_period
| * 4a1b82ee power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition
| * 38af1d0e power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync
| * b23879ea power: supply: bq24190_charger: Fix runtime PM imbalance on error
| * c7e68db9 xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
| * 773e95c2 virtio-net: ensure the received length does not exceed allocated size
| * 5e45c136 ASoC: fsl_sai: Force a software reset when starting in consumer mode
| * 3451944a usb: dwc3: qcom: Don't leave BCR asserted
| * 4ea93e0e usb: musb: fix gadget state on disconnect
| * fed3570e net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
| * ba48d399 net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
| * 8d3dd53f Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
| * 9adf57c0 Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
| * 24a855e2 Bluetooth: SMP: If an unallowed command is received consider it a failure
| * 262cd18f Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
| * 0a263ccb usb: net: sierra: check for no status endpoint
| * aa7a22c4 net/sched: sch_qfq: Fix race condition on qfq_aggregate
| * 04d49e2b net: emaclite: Fix missing pointer increment in aligned_read()
| * 4c2981bf comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
| * c1a1ddba comedi: Fix some signed shift left operations
| * a15e9c17 comedi: das6402: Fix bit shift out of bounds
| * 539bdff8 comedi: das16m1: Fix bit shift out of bounds
| * a8869224 comedi: aio_iiro_16: Fix bit shift out of bounds
| * 374d9b3e comedi: pcl812: Fix bit shift out of bounds
| * fedfd16c iio: adc: stm32-adc: Fix race in installing chained IRQ handler
| * 14760b52 iio: adc: max1363: Reorder mode_list[] entries
| * 016f13e0 iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
| * 62e51f51 soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
| * e4e47982 soc: aspeed: lpc-snoop: Cleanup resources in stack-order
| * 5a671424 mmc: sdhci_am654: Workaround for Errata i2312
| * 43b52cb4 mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models
| * 25ca5762 mmc: bcm2835: Fix dma_unmap_sg() nents value
| * 6894d179 memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
| * b4c2fd8d isofs: Verify inode mode when loading from disk
| * 84fff8e6 dmaengine: nbpfaxi: Fix memory corruption in probe()
| * 36031c3f af_packet: fix soft lockup issue caused by tpacket_snd()
| * aabd21a2 af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
| * 02c153c6 phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
| * dd8e8314 HID: core: do not bypass hid_hw_raw_request
| * 964affce HID: core: ensure __hid_request reserves the report ID as the first byte
| * 7228e36c HID: core: ensure the allocated report buffer can contain the reserved report ID
| * fe96b632 pch_uart: Fix dma_sync_sg_for_device() nents value
| * d3aae775 Input: xpad - set correct controller type for Acer NGR200
| * e64ec950 i2c: stm32: fix the device used for the DMA map
| * 78b41148 usb: gadget: configfs: Fix OOB read on empty string write
| * bc5c5490 USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
| * aad2f69c USB: serial: option: add Foxconn T99W640
| * d5e3bcff USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
* b2efed2e Merge android11-5.4 into android11-5.4-lts

Change-Id: I243bb8fda5a66059f4239ce33208b7fae6b1eac0
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>