Merge tag 'android12-5.4.302_r00' into android12-5.4

This merges the android12-5.4.302_r00 tag into the android12-5.4 branch,
catching it up with the latest LTS releases.

It contains the following commits:

*   ac9818bd36ad Merge 5.4.302 into android12-5.4-lts
|\
| * 9e3157c56ec7 Linux 5.4.302
| * c4e746651bd7 Input: pegasus-notetaker - fix potential out-of-bounds access
| * a643fecbcac0 Input: remove third argument of usb_maxpacket()
| * 2c6d5032871a usb: deprecate the third argument of usb_maxpacket()
| * ce9e6c5f2a77 ata: libata-scsi: Fix system suspend for a security locked drive
| * 1d1596d68a6f fs/proc: fix uaf in proc_readdir_de()
| * e45dfc536837 pmdomain: imx: Fix reference count leak in imx_gpc_remove
| * 18249a167ffd pmdomain: arm: scmi: Fix genpd leak on provider registration failure
| * 8e6a50edad11 net: netpoll: fix incorrect refcount handling causing incorrect cleanup
| * 274eed81c52c net: qede: Initialize qede_ll_ops with designated initializer
| * 3d2e0711ecbf uio_hv_generic: Set event for all channels on the device
| * af6b10a13fc0 net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error
| * 52437be5aab6 ALSA: usb-audio: fix uac2 clock source at terminal parser
| * e6a7b787ca21 mm/page_alloc: fix hash table order logging in alloc_large_system_hash()
| * 59cd20f678cb kconfig/nconf: Initialize the default locale at startup
| * 518a59533c12 kconfig/mconf: Initialize the default locale at startup
| * 3f71753935d6 vsock: Ignore signal/timeout on connect() if already established
| * 06f1dd1de0d3 s390/ctcm: Fix double-kfree
| * 3415faa1fcb4 net: openvswitch: remove never-working support for setting nsh fields
| * 607333b38f6b mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()
| * 1c74ded6a18a MIPS: Malta: Fix !EVA SOC-it PCI MMIO
| * 63f511d3855f scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
| * 11eeee00c94d scsi: sg: Do not sleep in atomic context
| * 7bfd959187f2 Input: cros_ec_keyb - fix an invalid memory access
| * 48d59b60dd5d be2net: pass wrb_params in case of OS2BMC
| * b086e52f7c83 HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155
| * 475032fa2bb8 isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
| * 1f0ab37f1075 EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection
| * 66ed3bf48541 EDAC/altera: Handle OCRAM ECC enable after warm reset
| * 1b796dd045e0 spi: Try to get ACPI GPIO IRQ earlier
| * 69d35c12168f ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe
| * af5a7f06b63d strparser: Fix signed/unsigned mismatch bug
| * b7a984e9a22f gcov: add support for GCC 15
| * 850f1ea245bd mm/ksm: fix flag-dropping behavior in ksm_madvise
| * 23aea9c74aee ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd
| * e58559845021 drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
| * 335c071417cc ASoC: cs4271: Fix regulator leak on probe failure
| * 31a148f1d06f regulator: fixed: fix GPIO descriptor leak on register failure
| * 81e24e73ca73 regulator: fixed: use dev_err_probe for register
| * b38db473f546 Bluetooth: L2CAP: export l2cap_chan_hold for modules
| * 2576c2f43fa5 net_sched: limit try_bulk_dequeue_skb() batches
| * 08f5ecb3c0b2 net_sched: remove need_resched() from qdisc_run()
| * 4170b07e2b6b net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps
| * ad2467e71407 net/mlx5e: Fix maxrate wraparound in threshold between units
| * 918e063304f9 net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
| * be0715d4f3db wifi: mac80211: skip rate verification for not captured PSDUs
| * 272c55f51268 net: mdio: fix resource leak in mdiobus_register_device()
| * 5f541300b02e tipc: Fix use-after-free in tipc_mon_reinit_self().
| * 201fee25fd20 tipc: simplify the finalize work queue
| * 0e0413e33151 sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
| * 203a0dace3e2 sctp: get netns from asoc and ep base
| * 05d5df491373 Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions
| * 9b1a83c6784a Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion
| * ea46a1d217bc Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
| * 297dbf87989e Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
| * e78b093badf9 net: fec: correct rx_bytes statistic for the case SHIFT16 is set
| * c2ec6ebd8e94 ASoC: max98090/91: fixed max98091 ALSA widget powering up/down
| * 8c79e31d2e64 HID: quirks: avoid Cooler Master MM712 dongle wakeup bug
| * 06ab1272b568 NFS4: Fix state renewals missing after boot
| * 46326dde8474 compiler_types: Move unused static inline functions warning to W=2
| * 788b15a1efee extcon: adc-jack: Cleanup wakeup source only if it was enabled
| * 9649275aee90 tracing: Fix memory leaks in create_field_var()
| * d693c47fb902 net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
| * b106a68df065 sctp: Prevent TOCTOU out-of-bounds write
| * 5add5db8b1ed sctp: Hold RCU read lock while iterating over address list
| * df9575104e02 net: dsa: b53: stop reading ARL entries if search is done
| * 41ca514a9a2e net: dsa: b53: fix enabling ip multicast
| * ebe2678916ad net: dsa: b53: fix resetting speed and pause on forced link
| * a62ee3d6bb61 net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
| * 7218ad915038 net: dsa/b53: change b53_force_port_config() pause argument
| * bb10c0723b1b net: vlan: sync VLAN features with lower device
| * 3b88b1e46b8e ceph: add checking of wait_for_completion_killable() return value
| * 996bfaa7372d fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
| * 7d06e91943ea ACPI: property: Return present device nodes only on fwnode interface
| * 76e881b62bed 9p: sysfs_init: don't hardcode error to ENOMEM
| * 1831e39b09ce 9p: fix /sys/fs/9p/caches overwriting itself
| * 4c821ffa2ab5 fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink
| * 8de07ebecf27 ACPICA: Update dsmethod.c to get rid of unused variable warning
| * c6564ff6b53c orangefs: fix xattr related buffer overflow...
| * 3614d5bf023b page_pool: Clamp pool size to max 16K pages
| * 39a7d40314b6 Bluetooth: bcsp: receive data only if registered
| * 57707135755b Bluetooth: SCO: Fix UAF on sco_conn_free
| * 0c5e86a18461 net: macb: avoid dealing with endianness in macb_set_hwaddr()
| * 6025f641a0e3 nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing
| * 0123f9754ba2 NFSv4.1: fix mount hang after CREATE_SESSION failure
| * c627673e3d22 NFSv4: handle ERR_GRACE on delegation recalls
| * b10afc5fb5b1 remoteproc: qcom: q6v5: Avoid handling handover twice
| * 0c38d95aa2ba sparc/module: Add R_SPARC_UA64 relocation handling
| * 4dbc4e8cd5e9 net: intel: fm10k: Fix parameter idx set but not used
| * d6af7fce2e16 jfs: fix uninitialized waitqueue in transaction manager
| * 19cce65709a8 jfs: Verify inode mode when loading from disk
| * 58894600b548 ipv6: np->rxpmtu race annotation
| * ac91ada020c1 usb: xhci: plat: Facilitate using autosuspend for xhci plat devices
| * e9d2ab8795d1 usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs
| * 7d18c7616e72 allow finish_no_open(file, ERR_PTR(-E...))
| * 166972f62a21 scsi: lpfc: Define size of debugfs entry for xri rebalancing
| * e50586bbdac5 scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET
| * 0dc59e2673c6 selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency
| * b08669127e80 net/cls_cgroup: Fix task_get_classid() during qdisc run
| * 9cfaa6b71500 selftests: Replace sleep with slowwait
| * 731088e8cbd6 selftests: Disable dad for ipv6 in fcnal-test.sh
| * 42207042a3e1 media: redrat3: use int type to store negative error codes
| * f18cc90244b9 net: sh_eth: Disable WoL if system can not suspend
| * f60168e62fd3 phy: cadence: cdns-dphy: Enable lower resolutions in dphy
| * 3248107d0094 usb: gadget: f_hid: Fix zero length packet transfer
| * 0ee184e03926 net: call cond_resched() less often in __release_sock()
| * efa440ab4f60 ALSA: usb-audio: apply quirk for MOONDROP Quark2
| * 579f823455b3 net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms
| * b8461af1f2e3 dmaengine: dw-edma: Set status for callback_result
| * 99eb4e5dca06 dmaengine: mv_xor: match alloc_wc and free_wc
| * 7e81e14edd4f dmaengine: sh: setup_xref error handling
| * ed72c6385d1a scsi: pm8001: Use int instead of u32 to store error codes
| * 30928ea5f75a mips: lantiq: xway: sysctrl: rename stp clock
| * 9da5dddafcbb mips: lantiq: danube: add missing device_type in pci node
| * c09c5057cd04 mips: lantiq: danube: add missing properties to cpu node
| * 8218f0a55863 media: fix uninitialized symbol warnings
| * eb6e1fb9b913 drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption
| * c756f712eafc extcon: adc-jack: Fix wakeup source leaks on device unbind
| * 23eebe1c1c57 rds: Fix endianness annotation for RDS_MPATH_HASH
| * ce179e243474 PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call
| * b872d6f0d514 net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV.
| * e3efebfee61c net: When removing nexthops, don't call synchronize_net if it is not necessary
| * 87ac021c847d char: misc: Does not request module for miscdevice with dynamic minor
| * a3f918b791cd usb: gadget: f_ncm: Fix MAC assignment NCM ethernet
| * 206eed62a9f3 iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register
| * 519737af11c0 media: imon: make send_packet() more robust
| * 2da805a61ef5 net: ipv6: fix field-spanning memcpy warning in AH output
| * b4684a71d969 bridge: Redirect to backup port when port is administratively down
| * 19d8ac1a1116 powerpc/eeh: Use result of error_detected() in uevent
| * d6cbf916f241 x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall
| * 422970ca8df2 media: pci: ivtv: Don't create fake v4l2_fh
| * 3dca940d8492 drm/amdkfd: return -ENOTTY for unsupported IOCTLs
| * 0f2fce4b19ca selftests/net: Ensure assert() triggers in psock_tpacket.c
| * 00e6691f6cfb selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8
| * 72ee532421e8 PCI: Disable MSI on RDC PCI to PCIe bridges
| * dd7e0326b77a drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf()
| * e29ee40c2e6e mfd: madera: Work around false-positive -Wininitialized warning
| * 1237d51acb42 mfd: stmpe-i2c: Add missing MODULE_LICENSE
| * 9ab5a73d9ead mfd: stmpe: Remove IRQ domain upon removal
| * 9f4bd38944d3 tools/power x86_energy_perf_policy: Prefer driver HWP limits
| * 3c37caffe381 tools/power x86_energy_perf_policy: Enhance HWP enable
| * caf2c648edd6 tools/cpupower: Fix incorrect size in cpuidle_state_disable()
| * e424f1553df6 hwmon: (dell-smm) Add support for Dell OptiPlex 7040
| * 98fd1968a3d1 uprobe: Do not emulate/sstep original instruction when ip is changed
| * 503ea51be247 clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel
| * 0ccb6f690dd1 video: backlight: lp855x_bl: Set correct EPROM start for LP8556
| * adf5bf933442 tee: allow a driver to allocate a tee_device without a pool
| * 53b9a6fb219e ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method()
| * 363f28adc0e0 mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card
| * 3eeccdb6b099 irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment
| * 5d4f0c29f34a arc: Fix __fls() const-foldability via __builtin_clzl()
| * b02352dd2e6c cpufreq/longhaul: handle NULL policy in longhaul_exit
| * b5d562b4d426 selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2
| * f56a6751ce2f ACPI: video: force native for Lenovo 82K8
| * 0e2e0078da1b memstick: Add timeout to prevent indefinite waiting
| * a83b52e69393 mmc: host: renesas_sdhi: Fix the actual clock
| * 43bfea81e61b bpf: Don't use %pK through printk
| * fef692cbce9a spi: loopback-test: Don't use %pK through printk
| * 9ff6994c8091 soc: qcom: smem: Fix endian-unaware access of num_entries
| * b00d2572c16e usb: gadget: f_fs: Fix epfile null pointer access after ep enable.
| * e04a33540409 serial: 8250_dw: handle reset control deassert error
| * 71e98d9b72a9 serial: 8250_dw: Use devm_add_action_or_reset()
| * fabb861b507a serial: 8250_dw: Use devm_clk_get_optional() to get the input clock
| * 12afe2c625fb can: gs_usb: increase max interface to U8_MAX
| * c21831f36fc7 devcoredump: Fix circular locking dependency with devcd->mutex.
| * d216cf7e2497 net: ravb: Enforce descriptor type ordering
| * 7c525ad1743d x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID
| * c863b9c7b4e9 wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode
| * 53ff969f355e net: phy: dp83867: Disable EEE support as not implemented
| * c0f05129e573 regmap: slimbus: fix bus_context pointer in regmap init calls
| * 38007a71ae47 drm/etnaviv: fix flush sequence logic
| * 285d4b953f2c usbnet: Prevents free active kevent
| * d958d9a62032 wifi: ath10k: Fix memory leak on unsupported WMI command
| * 01800cee9426 ASoC: qdsp6: q6asm: do not sleep while atomic
| * ab258b14da65 fbdev: valkyriefb: Fix reference count leak in valkyriefb_init
| * a567ecce511c fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS
| * a10cede006f9 fbdev: bitblit: bound-check glyph index in bit_putcs*
| * 3f803ccf5a0c ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
| * 6b3e0d5e44c8 fbdev: atyfb: Check if pll_ops->init_pll failed
| * ff4b007e5576 net: usb: asix_devices: Check return value of usbnet_get_endpoints
| * 7ad8aa66358b btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot()
| * 1657166c1f60 x86/bugs: Fix reporting of LFENCE retpoline
| * 71d84658a613 net/sched: sch_qfq: Fix null-deref in agg_dequeue
* b6480a1833a6 Merge android12-5.4 into android12-5.4-lts

Change-Id: I6ba2bc8b406e9544d78777e1918d1658bed4cc62
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>