Merge tag 'android12-5.10.240_r00' into android12-5.10

This merges the android12-5.10.240_r00 tag into the android12-5.10 branch,
catching it up with the latest LTS releases.

It contains the following commits:

* badf54d0 Merge android12-5.10 into android12-5.10-lts
* d32c80ba Revert "vm_sockets: Add flags field in the vsock address data structure"
* 75080868 Revert "vm_sockets: Add VMADDR_FLAG_TO_HOST vsock flag"
* 3a75dfd5 Revert "af_vsock: Set VMADDR_FLAG_TO_HOST flag on the receive path"
* f46b1927 Revert "af_vsock: Assign the vsock transport considering the vsock address flags"
* d1d6db1a Revert "vsock: Fix transport_* TOCTOU"
* cab4cd3c Merge 5.10.240 into android12-5.10-lts
* d5eca7eb Linux 5.10.240
* 48900d83 rseq: Fix segfault on registration when rseq_cs is non-zero
* a8a08f1e x86/process: Move the buffer clearing before MONITOR
* 6fea1a4e KVM: SVM: Advertise TSA CPUID bits to guests
* 6457a8c0 KVM: x86: add support for CPUID leaf 0x80000021
* 78192f51 x86/bugs: Add a Transient Scheduler Attacks mitigation
* b9d08aeb x86/bugs: Rename MDS machinery to something more generic
* 155d13ca x86/mm: Disable hugetlb page table sharing on 32-bit
* 80cf6848 vhost-scsi: protect vq->log_used with vq->mutex
* 3eba9ff0 Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID
* 7ac00f01 HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
* c8b516a6 HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
* 99e25c7b vt: add missing notification when switching back to text mode
* fd0fe812 net: usb: qmi_wwan: add SIMCom 8230C composition
* 8806629f um: vector: Reduce stack usage in vector_eth_configure()
* 694e78d3 atm: idt77252: Add missing `dma_map_error()`
* 16ae3066 bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
* fdf47c29 bnxt_en: Fix DCB ETS validation
* cb124975 net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
* 4c83b70b can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
* 69214734 net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
* a7852b01 net: appletalk: Fix device refcount leak in atrtr_create()
* 12b00ec9 md/raid1: Fix stack memory use after return in raid1_reshape
* 014c34dc wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
* 6689454d dma-buf: fix timeout handling in dma_resv_wait_timeout v2
* b51f7e6f Input: xpad - support Acer NGR 200 Controller
* a226c3f8 Input: xpad - add VID for Turtle Beach controllers
* 0d72bbfe Input: xpad - add support for Amazon Game Controller
* 5db2f768 netlink: make sure we allow at least one dump skb
* a363f571 netlink: Fix rmem check in netlink_broadcast_deliver().
* 8e221225 pwm: mediatek: Ensure to disable clocks in error path
* 07e49c6a rtc: lib_test: add MODULE_LICENSE
* a9c058b0 ethernet: atl1: Add missing DMA mapping error checks and count errors
* 4ea0b1c3 Revert "ACPI: battery: negate current when discharging"
* d43657b5 usb: gadget: u_serial: Fix race condition in TTY wakeup
* e62f51d0 drm/sched: Increment job count before swapping tail spsc queue
* 3f8fc02c pinctrl: qcom: msm: mark certain pins as invalid for interrupts
* 7c0366cc x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
* 8f7851a9 x86/mce: Don't remove sysfs if thresholding sysfs init fails
* 0c6bb356 x86/mce/amd: Fix threshold limit reset
* 0aac2488 x86/its: FineIBT-paranoid vs ITS
* 31967b44 x86/its: Fix build errors when CONFIG_MODULES=n
* ac1b649e x86/its: Use dynamic thunks for indirect branches
* 85208456 x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc()
* 129947ac x86/its: Add "vmexit" option to skip mitigation on some CPUs
* 116a42f0 x86/its: Enable Indirect Target Selection mitigation
* 07d828c0 x86/its: Fix undefined reference to cpu_wants_rethunk_at()
* f5709d90 x86/its: Add support for ITS-safe return thunk
* d9e2ba54 x86/alternatives: Remove faulty optimization
* ad40aa1f x86/alternative: Optimize returns patching
* ae00968a x86/its: Add support for ITS-safe indirect thunk
* c06b48bf x86/alternatives: Teach text_poke_bp() to patch Jcc.d32 instructions
* 09c33d19 x86/alternatives: Introduce int3_emulate_jcc()
* 3c9fea6f x86/its: Enumerate Indirect Target Selection (ITS) bug
* 5402d778 x86/bhi: Define SPEC_CTRL_BHI_DIS_S
* cda93610 Documentation: x86/bugs/its: Add ITS documentation
* f7afb3ff rxrpc: Fix oops due to non-existence of prealloc backlog struct
* 87ed20fb fs/proc: do_task_stat: use __for_each_thread()
* 90436e72 net/sched: Abort __tc_modify_qdisc if parent class does not exist
* a16fbe60 atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
* 12516634 atm: clip: Fix infinite recursive call of clip_push().
* 9e4dbeee atm: clip: Fix memory leak of struct clip_vcc.
* 70eac9ba atm: clip: Fix potential null-ptr-deref in to_atmarpd().
* 964c7ce7 net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
* 59d8f05a net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
* 4328279c vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
* 8667e8d0 vsock: Fix transport_* TOCTOU
* 833da12e af_vsock: Assign the vsock transport considering the vsock address flags
* 0e7a8ad0 af_vsock: Set VMADDR_FLAG_TO_HOST flag on the receive path
* 29dbdd23 vm_sockets: Add VMADDR_FLAG_TO_HOST vsock flag
* 40e6fbd0 vm_sockets: Add flags field in the vsock address data structure
* c5496ee6 vsock: Fix transport_{g2h,h2g} TOCTOU
* 15a6f497 tipc: Fix use-after-free in tipc_conn_close().
* c4ceaac5 netlink: Fix wraparounds of sk->sk_rmem_alloc.
* f95a9a0a fix proc_sys_compare() handling of in-lookup dentries
* d7ef1afd perf: Revert to requiring CAP_SYS_ADMIN for uprobes
* 8f2d162c ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
* a2130463 drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
* 416d681f staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher()
* f18d7269 media: uvcvideo: Rollback non processed entities on error
* 522eb435 media: uvcvideo: Send control events for partial succeeds
* 14154b3e media: uvcvideo: Return the number of processed controls
* d214ffa6 ACPI: PAD: fix crash in exit_round_robin()
* eb08fca5 usb: typec: displayport: Fix potential deadlock
* 4b31e276 Logitech C-270 even more broken
* d842e72f xhci: dbc: Flush queued requests before stopping dbc
* 33bd90a5 xhci: dbctty: disable ECHO flag by default
* fdbf8bcd dpaa2-eth: fix xdp_rxq_info leak
* b5207325 net: dpaa2-eth: rearrange variable in dpaa2_eth_get_ethtool_stats
* 166ecef0 dpaa2-eth: Update SINGLE_STEP register access
* cb2c378a dpaa2-eth: Update dpni_get_single_step_cfg command
* d20d07f8 dpaa2-eth: rename dpaa2_eth_xdp_release_buf into dpaa2_eth_recycle_buf
* 9672f9f0 btrfs: use btrfs_record_snapshot_destroy() during rmdir
* b0d162c8 btrfs: propagate last_unlink_trans earlier when doing a rmdir
* db5f19a4 NFSv4/flexfiles: Fix handling of NFS level errors in I/O
* bf79245f flexfiles/pNFS: update stats on NFS4ERR_DELAY for v4.1 DSes
* a8f6150b RDMA/mlx5: Fix vport loopback for MPV device
* 2446e25e drm/v3d: Disable interrupts before resetting the GPU
* d029500c mtk-sd: reset host->mrq on prepare_data() error
* d5477157 mtk-sd: Prevent memory corruption from DMA map failure
* 7f5475bc mmc: mediatek: use data instead of mrq parameter from msdc_{un}prepare_data()
* 9fe71972 regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
* e38c1548 rcu: Return early if callback is not specified
* 2219e498 ACPICA: Refuse to evaluate a method if arguments are missing
* e6c49f0b wifi: ath6kl: remove WARN on bad firmware input
* d4ccd3b5 wifi: mac80211: drop invalid source address OCB frames
* 70ddb813 scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
* d50e80f6 powerpc: Fix struct termio related ioctl macros
* fd2560c2 ata: pata_cs5536: fix build on 32-bit UML
* e1c4e540 ALSA: sb: Force to disable DMAs once when DMA mode is changed
* e9921b57 net/sched: Always pass notifications when child class becomes empty
* c125405b nui: Fix dma_mapping_error() check
* fe62a35f rose: fix dangling neighbour pointers in rose_rt_device_down()
* eed1f9ab net: rose: Fix fall-through warnings for Clang
* 2573fedb enic: fix incorrect MTU comparison in enic_change_mtu()
* aec3bf6f amd-xgbe: align CL37 AN sequence as per databook
* 669d19a5 lib: test_objagg: Set error message in check_expect_hints_stats()
* e47d7d6e drm/i915/gt: Fix timeline left held on VMA alloc error
* 3f441124 drm/i915/selftests: Change mock_request() to return error pointers
* c4446723 spi: spi-fsl-dspi: Clear completion counter before initiating transfer
* 52e068f6 drm/exynos: fimd: Guard display clock control with runtime PM calls
* 52f8a4fd btrfs: fix missing error handling when searching for inode refs during log replay
* 070c8c2d RDMA/mlx5: Fix CC counters query for MPV
* 2baca6a2 scsi: ufs: core: Fix spelling of a sysfs attribute name
* 96a6d229 scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()
* 0fff13f3 scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database()
* 08287df6 NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
* 412534a1 nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
* 972e968a RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
* df060fb0 platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment
* d22e6c8f mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data
* 114a977e usb: typec: altmodes/displayport: do not index invalid pin_assignments
* 8ac2f131 Revert "mmc: sdhci: Disable SD card clock before changing parameters"
* 8b62c689 mmc: sdhci: Add a helper function for dump register in dynamic debug mode
* 1c1bcb0e vsock/vmci: Clear the vmci transport packet properly when initializing it
* ee1f5d18 rtc: cmos: use spin_lock_irqsave in cmos_interrupt
* 1fee82cc arm64: Restrict pagetable teardown to avoid false warning
* 3881c193 Revert "ipv6: save dontfrag in cork"
* a2893d3c s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS
* 54dbe61b PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time
* d079c09e drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready
* eda2c25a drm/bridge: cdns-dsi: Check return value when getting default PHY config
* dc77f4f0 drm/bridge: cdns-dsi: Fix connecting to next bridge
* 130eca8c drm/bridge: cdns-dsi: Fix the clock variable for mode_valid()
* 72afc963 drm/amdkfd: Fix race in GWS queue scheduling
* f03b2a15 drm/udl: Unregister device before cleaning up on disconnect
* ab390ab8 drm/tegra: Fix a possible null pointer dereference
* c4baefce drm/tegra: Assign plane type before registration
* 8488c952 HID: wacom: fix kobject reference count leak
* 60ce381b HID: wacom: fix memory leak on sysfs attribute creation failure
* fead8ecf HID: wacom: fix memory leak on kobject creation failure
* 6d8f8479 btrfs: update superblock's device bytes_used when dropping chunk
* 47159078 dm-raid: fix variable in journal device check
* f084a3e3 Bluetooth: L2CAP: Fix L2CAP MTU negotiation
* 331a3a11 dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive
* 4bb1bb43 atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
* ddc7b7b8 net: enetc: Correct endianness handling in _enetc_rd_reg64
* e9da8640 um: ubd: Add missing error check in start_io_thread()
* 162ac883 vsock/uapi: fix linux/vm_sockets.h userspace compilation errors
* 48939325 wifi: mac80211: fix beacon interval calculation overflow
* d6c6216a libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
* 451b9495 attach_recursive_mnt(): do not lock the covering tree when sliding something under it
* 2dc1c3ed ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()
* 41f6420e atm: clip: prevent NULL deref in clip_push()
* 8bc5879c i2c: robotfuzz-osif: disable zero-length read messages
* 4e093e67 i2c: tiny-usb: disable zero-length read messages
* 2254d038 net_sched: sch_sfq: reject invalid perturb period
* 85d6dde1 PCI: cadence-ep: Correct PBA offset in .set_msix() callback
* 3d19fa73 uio_hv_generic: Align ring size to system page
* 6d748a08 uio_hv_generic: Query the ringbuffer size for device
* ab839c2c Drivers: hv: vmbus: Add utility function for querying ring size
* c111cd18 Drivers: hv: Rename 'alloced' to 'allocated'
* 9eeb2d81 Drivers: hv: vmbus: Fix duplicate CPU assignments within a device
* 4564cc9a uio: uio_hv_generic: use devm_kzalloc() for private data alloc
* bf7eff5e RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
* 904b6938 RDMA/core: Use refcount_t instead of atomic_t on refcount of iwcm_id_private
* b189e5c2 f2fs: don't over-report free space or inodes in statvfs
* ffb241bb can: tcan4x5x: fix power regulator retrieval during probe
* bd3cb558 media: omap3isp: use sgtable-based scatterlist wrappers
* a4259e72 jfs: validate AG parameters in dbMount() to prevent crashes
* 7448fd8d fs/jfs: consolidate sanity checking in dbMount
* eb14934a usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx()
* 3a4097f4 usb: typec: tcpci_maxim: add terminating newlines to logging
* 1b33e13d usb: typec: tcpci_maxim: remove redundant assignment
* ee35c221 usb: typec: tcpci_maxim: Fix uninitialized return variable
* 468aec88 VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
* d4198f67 VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF
* 0eacf8aa ovl: Check for NULL d_inode() in ovl_dentry_upper()
* 9da0ec75 ceph: fix possible integer overflow in ceph_zero_objects()
* 279beb11 ALSA: hda: Add new pci id for AMD GPU display HD audio controller
* 990b6b3c ALSA: hda: Ignore unsol events for cards being shut down
* e3fb6c2c usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode
* 846f10d8 usb: cdc-wdm: avoid setting WDM_READ for ZLP-s
* 65c364ce usb: Add checks for snprintf() calls in usb_alloc_dev()
* 27772cbb usb: common: usb-conn-gpio: use a unique name for usb connector device
* 603a83e5 usb: potential integer overflow in usbg_make_tpg()
* f52313b5 um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h
* 139fce94 iio: pressure: zpa2326: Use aligned_s64 for the timestamp
* d5468193 bcache: fix NULL pointer in cache_set_flush()
* f768d19d md/md-bitmap: fix dm-raid max_write_behind setting
* 761dc6dd dmaengine: xilinx_dma: Set dma_device directions
* 3f895098 hwmon: (pmbus/max34440) Fix support for max34451
* c05e3543 leds: multicolor: Fix intensity setting while SW blinking
* bd0a4fee mfd: max14577: Fix wakeup source leaks on device unbind
* e693e083 mailbox: Not protect module_put with spin_lock_irqsave
* 45e48f36 NFSv4.2: fix listxattr to return selinux security label
* 51efea7e cifs: Fix cifs_query_path_info() for Windows NT servers

Change-Id: I24504755cb73cbe2ee0ec5f3b4679369c5057e09
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>