This is the 5.4.302 stable release

-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCgAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmkwI4sACgkQONu9yGCS
 aT46Mg//f9a0IiDkO2ybqt7JAStVCkQ5MM2CgPjlgHGyns6hWyxUES5twrVrTO0v
 mdYmeXLztyFSArUHMnoWcUK1O4IVUVK32SX3eEMFy81ojX+LpYm/m5TZg3tU1rvq
 jaTE0i6ihmwG48ciB63i28TxQfhY8QuVJTEV400Ro+ILY2hs1l6c6DYf9i0S/v4g
 gKDQpzuwR0AnGNFI+D6D6D0D8jbLVcBYnAndyvDrLYTIILczf7nJ66ZePYTBvlg3
 rIiIMjG0BX0V2ctPmez3mz0BDTpnZY4pwIwIG8K/bX4UZrgOKJPSZWh1SzbASaGN
 vTJQwRs9nGHvM/kK9CUUsi1+hhaAl7UmQEiRJ06BkXlR7chFCcL/fI/VEQjf12wL
 dyw6/RR/rXPxLbLxCYk+9C9ANTE/ByirLKSeJkNT/yoeiCSpaFuKxtoYkNslBK/B
 i0/Qweez0IzJuVUtUp/2/PrkNKyCaEbbqhDerbnLhU/0lcnT0fkFlFoLLLNzxNdt
 hj6RRJrcpoQB+Qrkf0+5Sxx6W1feP5clZJ2nRSL+rtUNEzCWk7HVh4GprCyvDn6i
 xjINN9Yh40suJkuKaE0+IrPF1tcL3/128OaT3e0VlL57wK5M4YmJTwrb7g4mlR2/
 31Z4bL1IFYju9WYPW2fWHrdrZUH4h22vLcpW6Q/VFdG0wTC6wVc=
 =Wt2i
 -----END PGP SIGNATURE-----

Merge tag 'android11-5.4.302_r00' into android11-5.4

This merges the android11-5.4.302_r00 tag into the android11-5.4 branch,
catching it up with the latest LTS releases.

It contains the following commits:

*   ca00e0f525 Merge 5.4.302 into android11-5.4-lts
|\
| * 9e3157c56e Linux 5.4.302
| * c4e746651b Input: pegasus-notetaker - fix potential out-of-bounds access
| * a643fecbca Input: remove third argument of usb_maxpacket()
| * 2c6d503287 usb: deprecate the third argument of usb_maxpacket()
| * ce9e6c5f2a ata: libata-scsi: Fix system suspend for a security locked drive
| * 1d1596d68a fs/proc: fix uaf in proc_readdir_de()
| * e45dfc5368 pmdomain: imx: Fix reference count leak in imx_gpc_remove
| * 18249a167f pmdomain: arm: scmi: Fix genpd leak on provider registration failure
| * 8e6a50edad net: netpoll: fix incorrect refcount handling causing incorrect cleanup
| * 274eed81c5 net: qede: Initialize qede_ll_ops with designated initializer
| * 3d2e0711ec uio_hv_generic: Set event for all channels on the device
| * af6b10a13f net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error
| * 52437be5aa ALSA: usb-audio: fix uac2 clock source at terminal parser
| * e6a7b787ca mm/page_alloc: fix hash table order logging in alloc_large_system_hash()
| * 59cd20f678 kconfig/nconf: Initialize the default locale at startup
| * 518a59533c kconfig/mconf: Initialize the default locale at startup
| * 3f71753935 vsock: Ignore signal/timeout on connect() if already established
| * 06f1dd1de0 s390/ctcm: Fix double-kfree
| * 3415faa1fc net: openvswitch: remove never-working support for setting nsh fields
| * 607333b38f mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()
| * 1c74ded6a1 MIPS: Malta: Fix !EVA SOC-it PCI MMIO
| * 63f511d385 scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
| * 11eeee00c9 scsi: sg: Do not sleep in atomic context
| * 7bfd959187 Input: cros_ec_keyb - fix an invalid memory access
| * 48d59b60dd be2net: pass wrb_params in case of OS2BMC
| * b086e52f7c HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155
| * 475032fa2b isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
| * 1f0ab37f10 EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection
| * 66ed3bf485 EDAC/altera: Handle OCRAM ECC enable after warm reset
| * 1b796dd045 spi: Try to get ACPI GPIO IRQ earlier
| * 69d35c1216 ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe
| * af5a7f06b6 strparser: Fix signed/unsigned mismatch bug
| * b7a984e9a2 gcov: add support for GCC 15
| * 850f1ea245 mm/ksm: fix flag-dropping behavior in ksm_madvise
| * 23aea9c74a ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd
| * e585598450 drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
| * 335c071417 ASoC: cs4271: Fix regulator leak on probe failure
| * 31a148f1d0 regulator: fixed: fix GPIO descriptor leak on register failure
| * 81e24e73ca regulator: fixed: use dev_err_probe for register
| * b38db473f5 Bluetooth: L2CAP: export l2cap_chan_hold for modules
| * 2576c2f43f net_sched: limit try_bulk_dequeue_skb() batches
| * 08f5ecb3c0 net_sched: remove need_resched() from qdisc_run()
| * 4170b07e2b net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps
| * ad2467e714 net/mlx5e: Fix maxrate wraparound in threshold between units
| * 918e063304 net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak
| * be0715d4f3 wifi: mac80211: skip rate verification for not captured PSDUs
| * 272c55f512 net: mdio: fix resource leak in mdiobus_register_device()
| * 5f541300b0 tipc: Fix use-after-free in tipc_mon_reinit_self().
| * 201fee25fd tipc: simplify the finalize work queue
| * 0e0413e331 sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
| * 203a0dace3 sctp: get netns from asoc and ep base
| * 05d5df4913 Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions
| * 9b1a83c678 Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion
| * ea46a1d217 Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
| * 297dbf8798 Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
| * e78b093bad net: fec: correct rx_bytes statistic for the case SHIFT16 is set
| * c2ec6ebd8e ASoC: max98090/91: fixed max98091 ALSA widget powering up/down
| * 8c79e31d2e HID: quirks: avoid Cooler Master MM712 dongle wakeup bug
| * 06ab1272b5 NFS4: Fix state renewals missing after boot
| * 46326dde84 compiler_types: Move unused static inline functions warning to W=2
| * 788b15a1ef extcon: adc-jack: Cleanup wakeup source only if it was enabled
| * 9649275aee tracing: Fix memory leaks in create_field_var()
| * d693c47fb9 net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
| * b106a68df0 sctp: Prevent TOCTOU out-of-bounds write
| * 5add5db8b1 sctp: Hold RCU read lock while iterating over address list
| * df9575104e net: dsa: b53: stop reading ARL entries if search is done
| * 41ca514a9a net: dsa: b53: fix enabling ip multicast
| * ebe2678916 net: dsa: b53: fix resetting speed and pause on forced link
| * a62ee3d6bb net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
| * 7218ad9150 net: dsa/b53: change b53_force_port_config() pause argument
| * bb10c0723b net: vlan: sync VLAN features with lower device
| * 3b88b1e46b ceph: add checking of wait_for_completion_killable() return value
| * 996bfaa737 fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
| * 7d06e91943 ACPI: property: Return present device nodes only on fwnode interface
| * 76e881b62b 9p: sysfs_init: don't hardcode error to ENOMEM
| * 1831e39b09 9p: fix /sys/fs/9p/caches overwriting itself
| * 4c821ffa2a fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink
| * 8de07ebecf ACPICA: Update dsmethod.c to get rid of unused variable warning
| * c6564ff6b5 orangefs: fix xattr related buffer overflow...
| * 3614d5bf02 page_pool: Clamp pool size to max 16K pages
| * 39a7d40314 Bluetooth: bcsp: receive data only if registered
| * 5770713575 Bluetooth: SCO: Fix UAF on sco_conn_free
| * 0c5e86a184 net: macb: avoid dealing with endianness in macb_set_hwaddr()
| * 6025f641a0 nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing
| * 0123f9754b NFSv4.1: fix mount hang after CREATE_SESSION failure
| * c627673e3d NFSv4: handle ERR_GRACE on delegation recalls
| * b10afc5fb5 remoteproc: qcom: q6v5: Avoid handling handover twice
| * 0c38d95aa2 sparc/module: Add R_SPARC_UA64 relocation handling
| * 4dbc4e8cd5 net: intel: fm10k: Fix parameter idx set but not used
| * d6af7fce2e jfs: fix uninitialized waitqueue in transaction manager
| * 19cce65709 jfs: Verify inode mode when loading from disk
| * 58894600b5 ipv6: np->rxpmtu race annotation
| * ac91ada020 usb: xhci: plat: Facilitate using autosuspend for xhci plat devices
| * e9d2ab8795 usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs
| * 7d18c7616e allow finish_no_open(file, ERR_PTR(-E...))
| * 166972f62a scsi: lpfc: Define size of debugfs entry for xri rebalancing
| * e50586bbda scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET
| * 0dc59e2673 selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency
| * b08669127e net/cls_cgroup: Fix task_get_classid() during qdisc run
| * 9cfaa6b715 selftests: Replace sleep with slowwait
| * 731088e8cb selftests: Disable dad for ipv6 in fcnal-test.sh
| * 42207042a3 media: redrat3: use int type to store negative error codes
| * f18cc90244 net: sh_eth: Disable WoL if system can not suspend
| * f60168e62f phy: cadence: cdns-dphy: Enable lower resolutions in dphy
| * 3248107d00 usb: gadget: f_hid: Fix zero length packet transfer
| * 0ee184e039 net: call cond_resched() less often in __release_sock()
| * efa440ab4f ALSA: usb-audio: apply quirk for MOONDROP Quark2
| * 579f823455 net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms
| * b8461af1f2 dmaengine: dw-edma: Set status for callback_result
| * 99eb4e5dca dmaengine: mv_xor: match alloc_wc and free_wc
| * 7e81e14edd dmaengine: sh: setup_xref error handling
| * ed72c6385d scsi: pm8001: Use int instead of u32 to store error codes
| * 30928ea5f7 mips: lantiq: xway: sysctrl: rename stp clock
| * 9da5dddafc mips: lantiq: danube: add missing device_type in pci node
| * c09c5057cd mips: lantiq: danube: add missing properties to cpu node
| * 8218f0a558 media: fix uninitialized symbol warnings
| * eb6e1fb9b9 drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption
| * c756f712ea extcon: adc-jack: Fix wakeup source leaks on device unbind
| * 23eebe1c1c rds: Fix endianness annotation for RDS_MPATH_HASH
| * ce179e2434 PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call
| * b872d6f0d5 net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV.
| * e3efebfee6 net: When removing nexthops, don't call synchronize_net if it is not necessary
| * 87ac021c84 char: misc: Does not request module for miscdevice with dynamic minor
| * a3f918b791 usb: gadget: f_ncm: Fix MAC assignment NCM ethernet
| * 206eed62a9 iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register
| * 519737af11 media: imon: make send_packet() more robust
| * 2da805a61e net: ipv6: fix field-spanning memcpy warning in AH output
| * b4684a71d9 bridge: Redirect to backup port when port is administratively down
| * 19d8ac1a11 powerpc/eeh: Use result of error_detected() in uevent
| * d6cbf916f2 x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall
| * 422970ca8d media: pci: ivtv: Don't create fake v4l2_fh
| * 3dca940d84 drm/amdkfd: return -ENOTTY for unsupported IOCTLs
| * 0f2fce4b19 selftests/net: Ensure assert() triggers in psock_tpacket.c
| * 00e6691f6c selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8
| * 72ee532421 PCI: Disable MSI on RDC PCI to PCIe bridges
| * dd7e0326b7 drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf()
| * e29ee40c2e mfd: madera: Work around false-positive -Wininitialized warning
| * 1237d51acb mfd: stmpe-i2c: Add missing MODULE_LICENSE
| * 9ab5a73d9e mfd: stmpe: Remove IRQ domain upon removal
| * 9f4bd38944 tools/power x86_energy_perf_policy: Prefer driver HWP limits
| * 3c37caffe3 tools/power x86_energy_perf_policy: Enhance HWP enable
| * caf2c648ed tools/cpupower: Fix incorrect size in cpuidle_state_disable()
| * e424f1553d hwmon: (dell-smm) Add support for Dell OptiPlex 7040
| * 98fd1968a3 uprobe: Do not emulate/sstep original instruction when ip is changed
| * 503ea51be2 clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel
| * 0ccb6f690d video: backlight: lp855x_bl: Set correct EPROM start for LP8556
| * adf5bf9334 tee: allow a driver to allocate a tee_device without a pool
| * 53b9a6fb21 ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method()
| * 363f28adc0 mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card
| * 3eeccdb6b0 irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment
| * 5d4f0c29f3 arc: Fix __fls() const-foldability via __builtin_clzl()
| * b02352dd2e cpufreq/longhaul: handle NULL policy in longhaul_exit
| * b5d562b4d4 selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2
| * f56a6751ce ACPI: video: force native for Lenovo 82K8
| * 0e2e0078da memstick: Add timeout to prevent indefinite waiting
| * a83b52e693 mmc: host: renesas_sdhi: Fix the actual clock
| * 43bfea81e6 bpf: Don't use %pK through printk
| * fef692cbce spi: loopback-test: Don't use %pK through printk
| * 9ff6994c80 soc: qcom: smem: Fix endian-unaware access of num_entries
| * b00d2572c1 usb: gadget: f_fs: Fix epfile null pointer access after ep enable.
| * e04a335404 serial: 8250_dw: handle reset control deassert error
| * 71e98d9b72 serial: 8250_dw: Use devm_add_action_or_reset()
| * fabb861b50 serial: 8250_dw: Use devm_clk_get_optional() to get the input clock
| * 12afe2c625 can: gs_usb: increase max interface to U8_MAX
| * c21831f36f devcoredump: Fix circular locking dependency with devcd->mutex.
| * d216cf7e24 net: ravb: Enforce descriptor type ordering
| * 7c525ad174 x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID
| * c863b9c7b4 wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode
| * 53ff969f35 net: phy: dp83867: Disable EEE support as not implemented
| * c0f05129e5 regmap: slimbus: fix bus_context pointer in regmap init calls
| * 38007a71ae drm/etnaviv: fix flush sequence logic
| * 285d4b953f usbnet: Prevents free active kevent
| * d958d9a620 wifi: ath10k: Fix memory leak on unsupported WMI command
| * 01800cee94 ASoC: qdsp6: q6asm: do not sleep while atomic
| * ab258b14da fbdev: valkyriefb: Fix reference count leak in valkyriefb_init
| * a567ecce51 fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS
| * a10cede006 fbdev: bitblit: bound-check glyph index in bit_putcs*
| * 3f803ccf5a ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
| * 6b3e0d5e44 fbdev: atyfb: Check if pll_ops->init_pll failed
| * ff4b007e55 net: usb: asix_devices: Check return value of usbnet_get_endpoints
| * 7ad8aa6635 btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot()
| * 1657166c1f x86/bugs: Fix reporting of LFENCE retpoline
| * 71d84658a6 net/sched: sch_qfq: Fix null-deref in agg_dequeue
* 7bf580b201 Merge android11-5.4 into android11-5.4-lts

Change-Id: If5d09649c228737a5d2dbe105c7f1874181f7d3b
Signed-off-by: Greg Kroah-Hartman <[email protected]>

net/bridge/br_forward.c

@@ -142,7 +142,8 @@ void br_forward(const struct net_bridge_port *to,
 		goto out;
 
 	/* redirect to backup link if the destination port is down */
-	if (rcu_access_pointer(to->backup_port) && !netif_carrier_ok(to->dev)) {
+	if (rcu_access_pointer(to->backup_port) &&
+	    (!netif_carrier_ok(to->dev) || !netif_running(to->dev))) {
 		struct net_bridge_port *backup_port;
 
 		backup_port = rcu_dereference(to->backup_port);