Merge tag 'android12-5.10.228_r00' into android12-5.10

This merges up to the 5.10.228 LTS release into the android12-5.10
branch.  Changes included in here are:

* 38dc270c Revert "genetlink: hold RCU in genlmsg_mcast()"
*   c515597a Merge 02874ca5 ("tracing: Consider the NULL character when validating the event length") into android12-5.10-lts
|\
| * 02874ca5 tracing: Consider the NULL character when validating the event length
| * df848523 jfs: Fix sanity check in dbMount
| * 8605ca4b arm64: Force position-independent veneers
| * 0329056e ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
| * 75f828e9 drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
| * 649d6465 iomap: update ki_pos a little later in iomap_dio_complete
| * c9b77438 exec: don't WARN for racy path_noexec check
| * 20e27c77 block, bfq: fix procress reference leakage for bfqq in merge chain
| * bf83ba3c KVM: s390: gaccess: Check if guest address is in memslot
| * 6e1659b6 KVM: s390: gaccess: Cleanup access to guest pages
| * 472088ff KVM: s390: gaccess: Refactor access address range check
| * 511ca935 KVM: s390: gaccess: Refactor gpa and length calculation
| * cf9ddf9e arm64: probes: Fix uprobes for big-endian kernels
| * 7f1ef591 arm64:uprobe fix the uprobe SWBP_INSN in big-endian
| * 6c151aeb Bluetooth: bnep: fix wild-memory-access in proto_unregister
| * 5c345c47 s390: Initialize psw mask in perf_arch_fetch_caller_regs()
| * 6af43ec3 usb: typec: altmode should keep reference to parent
| * ed31aba8 smb: client: fix OOBs when building SMB2_IOCTL request
| * 8c1e6717 scsi: target: core: Fix null-ptr-deref in target_alloc_device()
| * 4af714e8 genetlink: hold RCU in genlmsg_mcast()
| * b6321146 net: systemport: fix potential memory leak in bcm_sysport_xmit()
| * f48eaf4e net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
| * aacf6e28 net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
| * 56dbb74b macsec: don't increment counters for an unrelated SA
| * 2c7dd3ca drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
| * df6fed0a RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
| * 78aaf54a RDMA/bnxt_re: Return more meaningful error
| * 718609f5 ipv4: give an IPv4 dev to blackhole_netdev
| * 59df170b RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
| * 9076d449 ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
| * dbe51dd5 RDMA/bnxt_re: Add a check for memory allocation
| * c17e5cbb RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
* | 012423e6 Merge 5.10.228 into android12-5.10-lts
|\|
| * 5a8fa04b Linux 5.10.228
| * 2abe57d6 ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2
| * 25e86fb0 powerpc/mm: Always update max/min_low_pfn in mem_topology_setup()
| * c1d04768 nilfs2: propagate directory read errors from nilfs_find_entry()
| * c38add9a tcp: fix mptcp DSS corruption due to large pmtu xmit
| * fde99e97 mptcp: handle consistently DSS corruption
| * 609937aa mptcp: track and update contiguous data status
| * b7d7b7fc irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
| * 6f44a5fc x86/entry_32: Clear CPU buffers after register restore in NMI return
| * 9ab38a1c x86/entry_32: Do not clobber user EFLAGS.ZF
| * 84628057 x86/apic: Always explicitly disarm TSC-deadline timer
| * e475220d x86/resctrl: Annotate get_mem_config() functions as __init
| * 1826b6d6 parport: Proper fix for array out-of-bounds access
| * 9f8ddf14 USB: serial: option: add Telit FN920C04 MBIM compositions
| * 0fc55ec9 USB: serial: option: add support for Quectel EG916Q-GL
| * 608b626f xhci: Fix incorrect stream context type macro
| * fc2cb5e3 Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
| * 63d6a3b0 Bluetooth: Remove debugfs directory on module init failure
| * 51665574 iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
| * f80375f2 iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
| * dc99dfa2 iio: light: opt3001: add missing full-scale range value
| * bf3ab8e1 iio: light: veml6030: fix IIO device retrieval from embedded device
| * 2d06787b iio: light: veml6030: fix ALS sensor resolution
| * ffc41743 iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency()
| * 9504153a iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
| * c2713363 iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
| * c4c2211b iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
| * 3abc1ebe iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
| * 0782809c drm/vmwgfx: Handle surface check failure correctly
| * df75c78b drm/radeon: Fix encoder->possible_clones
| * 6ddcaee2 io_uring/sqpoll: close race on waiting for sqring entries
| * 3bc6d0f8 blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
| * eca3edf8 x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
| * e7c0f8ca x86/bugs: Skip RSB fill at VMEXIT
| * 0ab77a47 x86/entry: Have entry_ibpb() invalidate return predictions
| * c5e57863 x86/cpufeatures: Add a IBPB_NO_RET BUG flag
| * 77fa2606 x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
| * dfa4b5d4 KVM: s390: Change virtual to physical address access in diag 0x258 handler
| * d0470950 s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
| * b12ef2d4 io_uring/sqpoll: do not put cpumask on stack
| * 66b98c4f io_uring/sqpoll: retain test for whether the CPU is valid
| * 54a987b4 io_uring/sqpoll: do not allow pinning outside of cpuset
| * 71fbc3af KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
| * e8e599a6 wifi: mac80211: fix potential key use-after-free
| * 417d5838 mm/swapfile: skip HugeTLB pages for unuse_vma
| * 043f0552 fat: fix uninitialized variable
| * bf1a0222 irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
| * cafa5942 net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY
| * ce43c48c arm64: probes: Fix simulate_ldr*_literal()
| * 3728b4eb arm64: probes: Remove broken LDR (literal) uprobe support
| * 673a1c5a posix-clock: Fix missing timespec64 check in pc_clock_settime()
| * dbe05556 net: enetc: add missing static descriptor and inline keyword
| * 5f47cdee ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
* | af2f7573 Revert "xfrm: Pass flowi_oif or l3mdev as oif to xfrm_dst_lookup"
* | 705b0910 Revert "net: Handle l3mdev in ip_tunnel_init_flow"
* | 0ba46537 Merge 5.10.227 into android12-5.10-lts
|\|
| * eac1c5bf Linux 5.10.227
| * 93500164 net: dsa: microchip: fix build warning
| * 9f76a9d1 RDMA/hns: Fix uninitialized variable
* | 7ad1ad5a Merge 4911610c ("ext4: fix warning in ext4_dio_write_end_io()") into android12-5.10-lts
|\|
| * 4911610c ext4: fix warning in ext4_dio_write_end_io()
* | b585ecc2 Merge 05cc42d6 ("netfilter: ip6t_rpfilter: Fix regression with VRF interfaces") into android12-5.10-lts
|\|
| * 05cc42d6 netfilter: ip6t_rpfilter: Fix regression with VRF interfaces
| * 95f62e5a net: vrf: determine the dst using the original ifindex for multicast
| * 3adb1be0 net: seg6: fix seg6_lookup_any_nexthop() to handle VRFs using flowi_l3mdev
| * ab6c9463 net: Handle l3mdev in ip_tunnel_init_flow
| * 0825c5ff xfrm: Pass flowi_oif or l3mdev as oif to xfrm_dst_lookup
| * 4bf1bd3f net: geneve: add missing netlink policy and size for IFLA_GENEVE_INNER_PROTO_INHERIT
| * 73f75d2b nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
| * 548d0102 net: dsa: lan9303: ensure chip reset and wait for READY status
| * 68ad5da6 net: Fix an unsafe loop on the list
| * fcda074c hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
| * e7a1d51b usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
| * 1d7fc802 usb: xhci: Fix problem with xhci resume from suspend
| * f8dea2fe usb: dwc3: core: Stop processing of pending events if controller is halted
* | 9b1caf05 Merge a7564b16 ("Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"") into android12-5.10-lts
|\|
| * a7564b16 Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
| * 8669bca5 HID: plantronics: Workaround for an unexcepted opposite volume key
| * 799a06ca hwmon: (adm9240) Add missing dependency on REGMAP_I2C
| * ab6bc15e hwmon: (tmp513) Add missing dependency on REGMAP_I2C
| * 1d5f85f1 resource: fix region_intersects() vs add_memory_driver_managed()
| * 36b05432 slip: make slhc_remember() more robust against malicious packets
| * 30d91a47 ppp: fix ppp_async_encode() illegal access
* | 4098b691 Revert "net: Add l3mdev index to flow struct and avoid oif reset for port devices"
* | 5cb5d157 Revert "netfilter: rpfilter/fib: Populate flowic_l3mdev field"
* | 6fc602a2 Revert "netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces."
* | 72535290 Revert "netfilter: fib: check correct rtable in vrf setups"
* | 81d8cb7a Merge 3502b1a2 ("netfilter: fib: check correct rtable in vrf setups") into android12-5.10-lts
|\|
| * 3502b1a2 netfilter: fib: check correct rtable in vrf setups
| * 037145e2 netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces.
| * d98558fe netfilter: rpfilter/fib: Populate flowic_l3mdev field
| * 740de198 net: Add l3mdev index to flow struct and avoid oif reset for port devices
* | ff0e27a0 Merge 265bf63e ("sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start") into android12-5.10-lts
|\|
| * 265bf63e sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
| * 23e139f9 net: ibm: emac: mal: fix wrong goto
| * adbc3eef net/sched: accept TCA_STAB only for root qdisc
| * d79af3af igb: Do not bring the device up after non-fatal error
| * c70e05b9 gpio: aspeed: Use devm_clk api to manage clock source
| * 36fd66cb gpio: aspeed: Add the flush write to ensure the write complete.
* | ca21e0d3 Merge 0e91c4b4 ("net: dsa: b53: fix jumbo frames on 10/100 ports") into android12-5.10-lts
|\|
| * 0e91c4b4 net: dsa: b53: fix jumbo frames on 10/100 ports
| * a7c9402b net: dsa: b53: allow lower MTUs on BCM5325/5365
| * 9f3407aa net: dsa: b53: fix max MTU for BCM5325/BCM5365
| * 0109267c net: dsa: b53: fix max MTU for 1g switches
| * a625acf2 net: dsa: b53: fix jumbo frame mtu check
| * e13ffbf5 net: phy: bcm84881: Fix some error handling paths
| * ef44274d Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
| * cce8419b netfilter: br_netfilter: fix panic with metadata_dst skb
| * 8a517d18 tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
| * fe238ddf tcp: fix to allow timestamp undo if no retransmits were sent
* | 6c71f56f Merge 21b5af7f ("net: phy: dp83869: fix memory corruption when enabling fiber") into android12-5.10-lts
|\|
| * 21b5af7f net: phy: dp83869: fix memory corruption when enabling fiber
| * f892165c NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
| * 64f1b492 SUNRPC: Fix integer overflow in decode_rc_list()
| * 1fc13f6a ice: fix VLAN replay after reset
| * 993ce09f NFSD: Mark filecache "down" if init fails
* | e22e091f Merge de5a059e ("RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt") into android12-5.10-lts
|\|
| * de5a059e RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
| * 252f147b fbdev: sisfb: Fix strbuf array overflow
| * f4149eec drm/amd/display: Check null pointer before dereferencing se
| * 56452dbc driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
| * d8ac7378 tools/iio: Add memory allocation failure check for trigger_name
| * 4ce662fe virtio_pmem: Check device status before requesting flush
| * 30ea3866 usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
| * 4c83143f usb: chipidea: udc: enable suspend interrupt after usb reset
| * b677b94a clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
| * 37c181e3 media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
| * b6501896 ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
| * 63047187 PCI: Mark Creative Labs EMU20k2 INTx masking as broken
| * a28703d4 i2c: i801: Use a different adapter-name for IDF adapters
| * e4f21845 PCI: Add ACS quirk for Qualcomm SA8775P
| * f3e0a8b7 clk: bcm: bcm53573: fix OF node leak in init
| * b10c1ca9 PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
| * 713adaf0 RDMA/mad: Improve handling of timed out WRs of mad agent
| * 24318116 ktest.pl: Avoid false positives with grub2 skip regex
| * 345d3c0b s390/cpum_sf: Remove WARN_ON_ONCE statements
| * c2097d5e ext4: nested locking for xattr inode
| * dced2c9d s390/mm: Add cond_resched() to cmm_alloc/free_pages()
| * 1cd19781 s390/facility: Disable compile time optimization for decompressor code
| * 029aa36b bpf: Check percpu map value size first
| * 4f4a6d70 Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
| * 546fb43a tracing/kprobes: Fix symbol counting logic by looking at modules as well
| * 90a6a070 tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols
* | 2a22a03c Merge 2622c805 ("kallsyms: Make module_kallsyms_on_each_symbol generally available") into android12-5.10-lts
|\|
| * 2622c805 kallsyms: Make module_kallsyms_on_each_symbol generally available
| * 2aa861ec kallsyms: Make kallsyms_on_each_symbol generally available
| * 9b82d737 virtio_console: fix misc probe bugs
| * f2fd1a95 tracing: Have saved_cmdlines arrays all in one allocation
| * 25b00216 s390/zcore: release dump save area on restart or power down
| * 0b4dc46f s390/zcore: no need to check return value of debugfs_create functions
| * 421795b0 drm/crtc: fix uninitialized variable use even harder
| * a009e88c tracing: Remove precision vsnprintf() check from print event
| * 6063d72b net: ethernet: cortina: Drop TSO support
| * 39fffca5 unicode: Don't special case ignorable code points
| * 6592347f vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
| * 2f6da71e ext4: fix inode tree inconsistency caused by ENOMEM
| * da964de4 ACPI: battery: Fix possible crash when unregistering a battery hook
| * 20557232 ACPI: battery: Simplify battery hook locking
| * 991e8b0b r8169: add tally counter fields added with RTL8125
| * 238d5c54 r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
| * 281edfa1 clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
* | 96a51395 Merge 570e2576 ("drm/rockchip: vop: clear DMA stop bit on RK3066") into android12-5.10-lts
|\|
| * 570e2576 drm/rockchip: vop: clear DMA stop bit on RK3066
| * 411e2e1d drm/rockchip: support gamma control on RK3399
| * 1aeaa7e8 drm/rockchip: define gamma registers for RK3399
| * f561b48d uprobes: fix kernel info leak via "[uprobes]" vma
* | 042d3e26 Merge 24afda04 ("arm64: errata: Expand speculative SSBS workaround once more") into android12-5.10-lts
|\|
| * 24afda04 arm64: errata: Expand speculative SSBS workaround once more
| * 9df353ca arm64: cputype: Add Neoverse-N3 definitions
| * c45edd59 arm64: Add Cortex-715 CPU part definition
* | ce691439 Revert "ext4: properly sync file size update after O_SYNC direct IO"
* | f46870ab Revert "ext4: dax: fix overflowing extents beyond inode size when partially writing"
* | 5d9c8486 Merge f8a7c342 ("ext4: dax: fix overflowing extents beyond inode size when partially writing") into android12-5.10-lts
|\|
| * f8a7c342 ext4: dax: fix overflowing extents beyond inode size when partially writing
* | 8fb88ba5 Merge dde4c1e1 ("ext4: properly sync file size update after O_SYNC direct IO") into android12-5.10-lts
|\|
| * dde4c1e1 ext4: properly sync file size update after O_SYNC direct IO
* | e62d85f9 Merge 6ff56ef7 ("i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled") into android12-5.10-lts
|\|
| * 6ff56ef7 i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
* | b5e0cda1 Merge d223126b ("i2c: xiic: Use devm_clk_get_enabled()") into android12-5.10-lts
|\|
| * d223126b i2c: xiic: Use devm_clk_get_enabled()
* | ed3c3589 Merge 9bd3443e ("i2c: xiic: Simplify with dev_err_probe()") into android12-5.10-lts
|\|
| * 9bd3443e i2c: xiic: Simplify with dev_err_probe()
* | 93d28c0f Merge 8b55076b ("kconfig: qconf: fix buffer overflow in debug links") into android12-5.10-lts
|\|
| * 8b55076b kconfig: qconf: fix buffer overflow in debug links
* | 6e988ae3 Merge bfab5fbc ("drm/sched: Add locking to drm_sched_entity_modify_sched") into android12-5.10-lts
|\|
| * bfab5fbc drm/sched: Add locking to drm_sched_entity_modify_sched
* | 25d36c65 Merge c54aa7d7 ("gpio: davinci: fix lazy disable") into android12-5.10-lts
|\|
| * c54aa7d7 gpio: davinci: fix lazy disable
* | 9fbdcfe7 Merge 70b60c8d ("btrfs: wait for fixup workers before stopping cleaner kthread during umount") into android12-5.10-lts
|\|
| * 70b60c8d btrfs: wait for fixup workers before stopping cleaner kthread during umount
* | d476e18c Merge d73d48ac ("btrfs: fix a NULL pointer dereference when failed to start a new trasacntion") into android12-5.10-lts
|\|
| * d73d48ac btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
* | 657f0754 Merge 67db431b ("ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]") into android12-5.10-lts
|\|
| * 67db431b ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
* | 17c42250 Merge 1a819c7f ("ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]") into android12-5.10-lts
|\|
| * 1a819c7f ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
* | c5324042 Revert "clk: qcom: clk-rpmh: Fix overflow in BCM vote"
* | 509ddbb2 Merge f976d964 ("Input: adp5589-keys - fix adp5589_gpio_get_value()") into android12-5.10-lts
|\|
| * f976d964 Input: adp5589-keys - fix adp5589_gpio_get_value()
| * bf8363e4 rtc: at91sam9: fix OF node leak in probe() error path
| * e33fe25b net: stmmac: Fix zero-division error when disabling tc cbs
| * 68e57931 tomoyo: fallback to realpath if symlink's pathname does not exist
| * 68c77a70 iio: magnetometer: ak8975: Fix reading for ak099xx sensors
| * 1d108095 clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
| * 60b69683 media: venus: fix use after free bug in venus_remove due to race condition
| * 4445bc6e clk: qcom: clk-rpmh: Fix overflow in BCM vote
| * 3f73da56 media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
| * 5443e70f media: sun4i_csi: Implement link validate for sun4i_csi subdev
| * ed0d5103 clk: rockchip: fix error for unknown clocks
| * f63461af aoe: fix the potential use-after-free problem in more places
| * 7ae7ada2 NFSD: Fix NFSv4's PUTPUBFH operation
| * 0ea4333c nfsd: map the EBADMSG to nfserr_io to avoid warning
| * 96cad5da nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
| * f692160d exfat: fix memory leak in exfat_load_bitmap()
| * e01e9ae4 riscv: define ILLEGAL_POINTER_VALUE for 64bit
| * 61b84013 ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
| * bf605ae9 ocfs2: fix null-ptr-deref when journal load failed.
| * 3f1ca6ba ocfs2: remove unreasonable unlock in ocfs2_read_blocks
| * 14114d81 ocfs2: cancel dqi_sync_work before freeing oinfo
| * aac31d65 ocfs2: reserve space for inline xattr before attaching reflink tree
| * 8e3bf366 ocfs2: fix uninit-value in ocfs2_get_block()
| * ff1500fe ocfs2: fix the la space leak when unmounting an ocfs2 volume
| * a5437858 mm: krealloc: consider spare memory for __GFP_ZERO
| * 7fabacb3 jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
| * 481e8f18 jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
| * 2bda8973 drm: omapdrm: Add missing check for alloc_ordered_workqueue
| * 3e886287 of/irq: Support #msi-cells=<0> in of_msi_get_domain
| * a63fdf20 parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
| * ea7dead2 parisc: Fix 64-bit userspace syscall path
| * 25ec5c87 ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
| * 6766937d ext4: update orig_path in ext4_find_extent()
| * b6c29c8f ext4: fix double brelse() the buffer of the extents path
| * 5e811066 ext4: aovid use-after-free in ext4_ext_insert_extent()
| * 8c26d9e5 ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
| * 4286a041 ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
| * 7bcdef04 ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
| * e52f9335 ext4: fix slab-use-after-free in ext4_split_extent_at()
| * 133ff0d7 ext4: no need to continue when the number of entries is 1
* | 6a00671a Merge 2c08dfc9 ("ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9") into android12-5.10-lts
|\|
| * 2c08dfc9 ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
| * c36ff694 ALSA: line6: add hw monitor volume control to POD HD500X
| * 64d315ae ALSA: core: add isascii() check to card ID generator
| * b078a7ee drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
| * afa99905 parisc: Fix itlb miss handler for 64-bit programs
| * d6b22a2d perf/core: Fix small negative period being ignored
| * 8ab638bb spi: bcm63xx: Fix module autoloading
| * f53c2b55 firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
| * 2c1effc2 i2c: xiic: Wait for TX empty to avoid missed TX NAKs
| * 46c72b01 i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
| * 9b8bc33a i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
| * 10dde0c1 selftests/mm: fix charge_reserved_hugetlb.sh test
| * e45803c7 selftests: vDSO: fix vDSO symbols lookup for powerpc64
| * 76242231 selftests: breakpoints: use remaining time to check if suspend succeed
| * eda94fc7 spi: s3c64xx: fix timeout counters in flush_fifo
| * e3b57186 spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
| * 53b1999c ext4: fix i_data_sem unlock order in ext4_ind_migrate()
| * b0cb4561 ext4: avoid use-after-free in ext4_ext_show_leaf()
| * a34416ec ext4: ext4_search_dir should return a proper error
| * e82df17e of/irq: Refer to actual buffer size in of_irq_parse_one()
| * 29f38894 drm/amd/pm: ensure the fw_info is not null before using it
| * 0a377fca drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
| * aec72bfb scsi: aacraid: Rearrange order of struct aac_srb_unit
| * cf387300 drm/printer: Allow NULL data in devcoredump printer
| * f9213351 drm/amd/display: Initialize get_bytes_per_element's default to 1
| * 7ab69af5 drm/amd/display: Fix index out of bounds in DCN30 color transformation
| * c130a3c0 drm/amd/display: Fix index out of bounds in degamma hardware format translation
| * ad89f833 drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
| * 0167d570 drm/amd/display: Check stream before comparing them
| * e2743d0a platform/x86: touchscreen_dmi: add nanote-next quirk
| * 831e8a81 drm/amdgpu: enable gfxoff quirk on HP 705G4
| * e407715e drm/amdgpu: add raven1 gfxoff quirk
| * 8b1dcf25 jfs: Fix uninit-value access of new_ea in ea_buffer
| * 2451e591 jfs: check if leafidx greater than num leaves per dmap tree
| * fd026b6b jfs: Fix uaf in dbFreeBits
| * f9db7bb1 jfs: UBSAN: shift-out-of-bounds in dbFindBits
| * 8d54001f drm/amd/display: Check null pointers before using dc->clk_mgr
| * 49ded709 ata: sata_sil: Rename sil_blacklist to sil_quirks
* | b48eba85 Merge 1ebfa666 ("drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream") into android12-5.10-lts
|\|
| * 1ebfa666 drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
| * de9e7f68 iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
| * 5652c448 iommu/vt-d: Always reserve a domain ID for identity setup
| * 9e493f00 power: reset: brcmstb: Do not go into infinite loop if reset fails
| * d9245b92 iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
| * ceff6f5e rcuscale: Provide clear error when async specified without primitives
| * e6897e29 fbdev: pxafb: Fix possible use after free in pxafb_task()
| * 79681036 x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
| * 98111af3 ALSA: hdsp: Break infinite MIDI input flush loop
| * 219587bc ALSA: asihpi: Fix potential OOB array access
| * e2b200c5 ALSA: usb-audio: Add logitech Audio profile quirk
| * 35733d1a ALSA: usb-audio: Define macros for quirk table entries
| * 6ee6835f signal: Replace BUG_ON()s
| * aa4e9056 nfp: Use IRQF_NO_AUTOEN flag in request_irq()
| * 1756918f wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
| * 47be40b6 proc: add config & param to block forcing mem writes
| * 02c1725e ACPICA: iasl: handle empty connection_node
| * 95a91802 tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
| * b7cbdd6b net: atlantic: Avoid warning about potential string truncation
| * a479b653 ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
| * 669d337a ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
| * bf60b4f5 net: mvpp2: Increase size of queue_name buffer
| * e2b25589 tipc: guard against string buffer overrun
| * cbb67e24 ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
| * a40e7a2b ACPI: EC: Do not release locks during operation region accesses
| * 7cd00410 wifi: rtw88: select WANT_DEV_COREDUMP
| * 0f26f269 wifi: ath11k: fix array out-of-bound access in SoC stats
| * 1f61d509 blk_iocost: fix more out of bound shifts
| * 62b8a46b net: sched: consistently use rcu_replace_pointer() in taprio_change()
* | baa474b0 Merge 74c63fd0 ("ACPICA: Fix memory leak if acpi_ps_get_next_field() fails") into android12-5.10-lts
|\|
| * 74c63fd0 ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
| * 30cd2158 ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
| * 4440bac6 net: hisilicon: hns_mdio: fix OF node leak in probe()
| * 12455428 net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
| * ac6e862b net: hisilicon: hip04: fix OF node leak in probe()
| * a7f0073f net/xen-netback: prevent UAF in xenvif_flush_hash()
| * ed418cad ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
| * b02eb7c8 wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
| * 2171e1d7 wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
| * 000bab87 f2fs: Require FMODE_WRITE for atomic write ioctls
| * b820cb91 ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
| * f7785c44 ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
| * f10d29b1 ALSA: hda/realtek: Fix the push button function for the ALC257
| * 7c930442 ALSA: mixer_oss: Remove some incorrect kfree_const() usages
| * f13b04cf Bluetooth: L2CAP: Fix not validating setsockopt user input
| * 4ec4641d media: usbtv: Remove useless locks in usbtv_video_free()
| * a73d9964 i2c: xiic: Try re-initialization on bus busy timeout
| * c9668503 i2c: xiic: improve error message when transfer fails to start
| * 2d320d9d i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path
| * 148fdc3c i2c: xiic: Fix RX IRQ busy check
| * 30def367 i2c: xiic: Switch from waitqueue to completion
| * 6da4bbeb i2c: xiic: Fix broken locking on tx_msg
| * dd70c8a8 sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
| * 16b66c46 ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
| * 566a931a net: add more sanity checks to qdisc_pkt_len_init()
| * ba26060a net: avoid potential underflow in qdisc_pkt_len_init() with UFO
| * 185df159 net: ethernet: lantiq_etop: fix memory disclosure
| * c8bb4e2d Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
* | 6f91c026 Merge 53175495 ("netfilter: nf_tables: prevent nf_skb_duplicated corruption") into android12-5.10-lts
|\|
| * 53175495 netfilter: nf_tables: prevent nf_skb_duplicated corruption
| * 7675fe97 net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
| * 181fbbdd netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
* | 6136b834 Merge cdd86fb7 ("net/mlx5: Added cond_resched() to crdump collection") into android12-5.10-lts
|\|
| * cdd86fb7 net/mlx5: Added cond_resched() to crdump collection
| * ca36d6c1 net/mlx5: Fix error path in multi-packet WQE transmit
| * fd7fcd80 ieee802154: Fix build error
| * f55e003d ceph: remove the incorrect Fw reference check when dirtying pages
| * 32ee7882 mailbox: bcm2835: Fix timeout during suspend mode
| * 3948c73c mailbox: rockchip: fix a typo in module autoloading
| * 6b9a551b spi: lpspi: Simplify some error message
| * 767b71f2 usb: yurex: Fix inconsistent locking bug in yurex_read()
| * 9f1c4ede i2c: isch: Add missed 'else'
| * 742a1b69 i2c: aspeed: Update the stop sw state when the bus recovery occurs
| * 52f7cab2 mm: only enforce minimum stack gap size if it's sensible
| * 1472dd89 lockdep: fix deadlock issue between lockdep and rcu
| * 118a0c3e xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
| * cc1de441 usb: renesas-xhci: Remove renesas_xhci_pci_exit()
| * 0f8e74a0 pps: add an error check in parport_attach
| * 0e508348 pps: remove usage of the deprecated ida_simple_xx() API
| * 47a632e5 USB: misc: yurex: fix race between read and write
| * bf509ca6 usb: yurex: Replace snprintf() with the safer scnprintf() variant
| * 6ea76e19 soc: versatile: realview: fix soc_dev leak during device remove
| * 6b3b2531 soc: versatile: realview: fix memory leak during device remove
| * 263d04df PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
| * 6dacc0b6 PCI: xilinx-nwl: Use irq_data_get_irq_chip_data()
| * 46c40794 padata: use integer wrap around to prevent deadlock on seq_nr overflow
| * 7d0079d6 nfs: fix memory leak in error path of nfs4_do_reclaim
| * a239ff33 fs: Fix file_set_fowner LSM hook inconsistencies
| * 47a68c75 vfs: fix race between evice_inodes() and find_inode()&iput()
| * 0eecd2ee arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
| * b2cb101b arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
| * d41d6653 hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
| * 1b2137f6 hwrng: mtk - Use devm_pm_runtime_enable
| * cef1056e f2fs: avoid potential int overflow in sanity_check_area_boundary()
| * 85c2f7bd f2fs: prevent possible int overflow in dir_block_index()
| * 5e3a031d debugobjects: Fix conditions in fill_pool()
| * dbffe7be wifi: rtw88: 8822c: Fix reported RX band width
| * 44f18167 perf/x86/intel/pt: Fix sampling synchronization
| * f76b69ab efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
| * 45a765f4 ACPI: resource: Add another DMI match for the TongFang GMxXGxx
| * 4b081991 ACPI: sysfs: validate return type of _STR method
| * 2e20b69b drbd: Add NULL check for net_conf to prevent dereference in state validation
| * 62720f2d drbd: Fix atomicity violation in drbd_uuid_set_bm()
| * a295fa38 crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
| * c7148bf4 tty: rp2: Fix reset with non forgiving PCIe host bridges
| * c30558e6 firmware_loader: Block path traversal
| * e89f9250 bus: integrator-lm: fix OF node leak in probe()
| * 61c12c72 USB: class: CDC-ACM: fix race between get_serial and set_serial
| * fa83e1df USB: misc: cypress_cy7c63: check for short transfer
| * 1c5cd41b USB: appledisplay: close race between probe and completion handler
| * 84f4d447 drm/amd/display: Round calculated vtotal
| * 60aadf84 Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
| * 13175be7 Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
| * bf3f1aff Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
| * cb9897b9 soc: versatile: integrator: fix OF node leak in probe() error path
| * c55ebcb2 ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
| * aaaf3cd0 Remove *.orig pattern from .gitignore
| * f291dc4c mptcp: fix sometimes-uninitialized warning
| * 2dbc4b7b selinux,smack: don't bypass permissions check in inode_setsecctx hook
| * 4b81a9f9 bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
| * 0e6378dd Revert "bpf: Eliminate rlimit-based memory accounting for devmap maps"
| * bfe249c1 Revert "bpf: Fix DEVMAP_HASH overflow check on 32-bit arches"
| * 89262014 x86/mm: Switch to new Intel CPU model defines
| * 089aece0 powercap: RAPL: fix invalid initialization for pl4_supported field
| * ba624f65 Input: goodix - use the new soc_intel_is_byt() helper
| * 50460579 drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
* | f6317d30 Merge e0dbda9f ("netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS") into android12-5.10-lts
|\|
| * e0dbda9f netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
* | 0e233e78 Merge db9c5f08 ("netfilter: nf_tables: Keep deleted flowtable hooks until after RCU") into android12-5.10-lts
|\|
| * db9c5f08 netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
* | e45c637a Merge 6c36857f ("net: qrtr: Update packets cloning when broadcasting") into android12-5.10-lts
|\|
| * 6c36857f net: qrtr: Update packets cloning when broadcasting
* | 8acb7118 Merge ec31cf42 ("tcp: check skb is non-NULL in tcp_rto_delta_us()") into android12-5.10-lts
|\|
| * ec31cf42 tcp: check skb is non-NULL in tcp_rto_delta_us()
* | 69acbd57 Merge 98d14164 ("net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL") into android12-5.10-lts
|\|
| * 98d14164 net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
* | 13cdfa4c Merge 338a0582 ("net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition") into android12-5.10-lts
|\|
| * 338a0582 net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
* | 973b583b Merge dcf48ab3 ("netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()") into android12-5.10-lts
|\|
| * dcf48ab3 netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
* | 0407f5e4 Merge 1429a926 ("Revert "dm: requeue IO if mapping table not yet available"") into android12-5.10-lts
|\|
| * 1429a926 Revert "dm: requeue IO if mapping table not yet available"
| * 0c170b1e vhost_vdpa: assign irq bypass producer token correctly
| * 10348fb6 vdpa: Add eventfd for the vdpa callback
| * 64add9aa interconnect: qcom: sm8250: Enable sync_state
| * d4951dd1 coresight: tmc: sg: Do not leak sg_table
| * cf067424 iio: adc: ad7606: fix standby gpio state to match the documentation
| * 1ea56cd9 iio: adc: ad7606: fix oversampling gpio array
| * b7413dbc spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
| * 0ed35dd5 spi: lpspi: release requested DMA channels
| * d612d419 spi: lpspi: Silence error message upon deferred probe
| * 6f2eeba7 f2fs: reduce expensive checkpoint trigger frequency
| * 3dc483f0 f2fs: remove unneeded check condition in __f2fs_setxattr()
| * 87aceb1c f2fs: fix to update i_ctime in __f2fs_setxattr()
| * db930da9 f2fs: fix typo
| * 7b5476f0 f2fs: enhance to update i_mode and acl atomically in f2fs_setattr()
| * 0f1d007b nfsd: return -EINVAL when namelen is 0
| * 9f03f001 nfsd: call cache_put if xdr_reserve_space returns NULL
| * 40d57873 ntb_perf: Fix printk format
| * ef7e3423 ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
| * dd598ac5 RDMA/cxgb4: Added NULL check for lookup_atid
| * 502dac90 riscv: Fix fp alignment bug in perf_callchain_user()
| * 322911a2 RDMA/hns: Optimize hem allocation performance
| * 07f0f643 RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
| * 1e6195dc RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
| * 6258c4fb RDMA/hns: Refactor root BT allocation for MTR
| * d06fbe0b RDMA/hns: Add mapped page count checking for MTR
| * 2a2894e9 watchdog: imx_sc_wdt: Don't disable WDT in suspend
| * 5353f8ec pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
| * d8c75b8a pinctrl: mvebu: Use devm_platform_get_and_ioremap_resource()
| * 60073591 nfsd: fix refcount leak when file is unhashed after being found
| * 6fcb4bbb nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
* | da5751e5 Revert "device property: Add const qualifier to device_get_match_data() parameter"
* | 47d930c2 Revert "i2c: Add i2c_get_match_data()"
* | a99e4337 Revert "hwmon: (max16065) Remove use of i2c_match_id()"
* | 9c428fa3 Revert "hwmon: (max16065) Fix alarm attributes"
* | 246d613c Revert "cgroup: Make operations on the cgroup root_list RCU safe"
* | 77867ef6 Revert "cgroup: Move rcu_head up near the top of cgroup_root"
* | 8cf71990 Revert "inet: inet_defrag: prevent sk release while still in use"
* | 3ce45320 Revert "bareudp: Pull inner IP header in bareudp_udp_encap_recv()."
* | 9e57ad45 Merge 0ce9d893 ("clk: ti: dra7-atl: Fix leak of of_nodes") into android12-5.10-lts
|\|
| * 0ce9d893 clk: ti: dra7-atl: Fix leak of of_nodes
| * 88ba7cd9 pinctrl: single: fix missing error code in pcs_probe()
| * 2efe8da2 RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
| * f2995189 PCI: xilinx-nwl: Fix register misspelling
| * c289903b PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
| * badbd736 drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
| * 6ae3b9ae drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
| * 45f826f6 clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
| * ca34aa37 clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
| * 11396ba4 perf time-utils: Fix 32-bit nsec parsing
| * a10a7d6d perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time
| * 72766072 perf sched timehist: Fix missing free of session in perf_sched__timehist()
| * ea837ae5 bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
| * d20674f3 nilfs2: fix potential oob read in nilfs_btree_check_delete()
| * e2290906 nilfs2: determine empty node blocks as corrupted
| * 24bf4074 nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
| * 7fc22c3b ext4: avoid OOB when system.data xattr changes underneath the filesystem
| * e65f6987 ext4: return error on ext4_find_inline_entry
| * 2e073a57 ext4: avoid negative min_clusters in find_group_orlov()
| * 22d591d9 ext4: avoid potential buffer_head leak in __ext4_new_inode()
| * 08c63b79 ext4: avoid buffer_head leak in ext4_mark_inode_used()
| * c4227a38 smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
| * 4766ba10 ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
| * 3a1a31a3 kthread: fix task state in kthread worker if being frozen
| * 28fbbd0c kthread: add kthread_work tracepoints
| * dd417529 xz: cleanup CRC32 edits from 2018
| * 4e1c8c12 selftests/bpf: Fix C++ compile error from missing _Bool type
| * 9374068b selftests/bpf: Fix error compiling test_lru_map.c
| * c2db6acd selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
| * 3467a941 selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
| * 5ad69f5a selftests/bpf: Fix compiling flow_dissector.c with musl-libc
| * 306efef8 selftests/bpf: Fix compiling kfree_skb.c with musl-libc
| * cc52d528 selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
| * 04eb60af selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
| * 2c9b2289 tpm: Clean up TPM space after command failure
| * a0a8b7be xen/swiotlb: add alignment check for dma buffers
| * cb9134aa xen: use correct end address of kernel for conflict checking
| * 86da3c79 drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
| * 02657ced drm/msm: fix %s null argument error
| * 72fa5f70 ipmi: docs: don't advertise deprecated sysfs entries
| * e9e482e1 drm/msm/a5xx: workaround early ring-buffer emptiness check
| * d041301f drm/msm: Drop priv->lastctx
| * 9dffbbd7 drm/msm: Add priv->mm_lock to protect active/inactive lists
| * 5ce4075d drm/msm/a5xx: fix races in preemption evaluation stage
| * cfca8b26 drm/msm/a5xx: properly clear preemption records on resume
| * fe93cd66 drm/msm/a5xx: disable preemption in submits by default
| * 14531e3b drm/msm: Fix incorrect file name output in adreno_request_fw()
| * 0338e66c jfs: fix out-of-bounds in dbNextAG() and diAlloc()
| * 36820265 drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
| * 6b38aedf drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
| * 5f37e8c4 drm/rockchip: vop: Allow 4096px width scaling
| * e37fead0 drm/radeon: properly handle vbios fake edid sizing
| * af2fb608 drm/radeon: Replace one-element array with flexible-array member
| * 5f943045 drm/amdgpu: properly handle vbios fake edid sizing
| * cd881056 drm/amdgpu: Replace one-element array with flexible-array member
| * 65f9be03 drm/stm: Fix an error handling path in stm_drm_platform_probe()
| * 278ec259 mtd: powernv: Add check devm_kasprintf() returned value
| * 7661e90a fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
| * 9fb482fd power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
| * 5c1997f7 power: supply: axp20x_battery: Remove design from min and max voltage
| * c59f57f3 power: supply: axp20x_battery: allow disabling battery charging
| * 8202306e hwmon: (ntc_thermistor) fix module autoloading
| * 9efa5838 mtd: slram: insert break after errors in parsing the map
| * d7a7dd29 hwmon: (max16065) Fix alarm attributes
| * 932559f2 hwmon: (max16065) Remove use of i2c_match_id()
| * 514a1508 i2c: Add i2c_get_match_data()
| * 167e4371 device property: Add const qualifier to device_get_match_data() parameter
| * aeed49dd hwmon: (max16065) Fix overflows seen when writing limits
| * cdb20b70 m68k: Fix kernel_clone_args.flags in m68k_clone()
| * 42a9899e clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
| * 97586fbd reset: berlin: fix OF node leak in probe() error path
| * ad0b53e4 ARM: versatile: fix OF node leak in CPUs prepare
| * 06ceed8e ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
| * fb3cd974 ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
| * 5f19060a spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
| * 63c7417a spi: ppc4xx: handle irq_of_parse_and_map() errors
| * 4bc4272e block: fix potential invalid pointer dereference in blk_add_partition
| * 4d2760df block: print symbolic error name instead of error code
| * 3630a188 block, bfq: don't break merge chain in bfq_split_bfqq()
| * a819a496 block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
| * e1277ae7 block, bfq: fix possible UAF for bfqq->bic with merge chain
| * cab9ff7f net: tipc: avoid possible garbage value
| * 20750374 net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
| * 3df68f37 r8169: disable ALDPS per default for RTL8125
| * 5755eabd net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
| * e296245c bareudp: Pull inner IP header on xmit.
| * b48fae67 geneve: Fix incorrect inner network header offset when innerprotoinherit is set
| * 3b84799e net: geneve: support IPv4/IPv6 as inner protocol
| * 76851c70 bareudp: Pull inner IP header in bareudp_udp_encap_recv().
| * cb1f7ef1 bareudp: allow redirecting bareudp packets to eth devices
| * 2accdb38 Bluetooth: btusb: Fix not handling ZPL/short-transfer
| * 3703e18a can: m_can: m_can_close(): stop clocks after device has been shut down
| * b6dce5b5 can: m_can: Add support for transceiver as phy
| * 5cc00913 can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
| * 1a11a1a5 sock_map: Add a cond_resched() in sock_hash_free()
| * 557418e1 wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
| * f232916f wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
| * 793e01f9 wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
| * f8e0ca30 wifi: mt76: mt7915: fix rx filter setting for bfee functionality
| * 635ccdcd wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
| * 7b0724f7 cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
| * 0723ddb2 netfilter: nf_tables: reject expiration higher than timeout
| * 39c1012f netfilter: nf_tables: reject element expiration with no timeout
| * 1c0c097d netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
| * 4bb45904 can: j1939: use correct function name in comment
| * b0947eca padata: Honor the caller's alignment in case of chunk_size 0
| * 60da2507 mount: handle OOM on mnt_warn_timestamp_expiry
| * f0a39ba6 fs/namespace: fnic: Switch to use %ptTd
| * 396e9c5c mount: warn only once about timestamp range expiration
| * 9722aa53 fs: explicitly unregister per-superblock BDIs
| * 005dcd6b ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
| * a0c1e2da wifi: rtw88: always wait for both firmware loading attempts
| * 16e0ab9e USB: usbtmc: prevent kernel-usb-infoleak
| * 50cff34d USB: serial: pl2303: add device id for Macrosilicon MS3020
| * 31292316 usb: dwc3: Fix a typo in field name
| * 4abf1841 cgroup: Move rcu_head up near the top of cgroup_root
| * 65fd90e3 gpiolib: cdev: Ignore reconfiguration without direction
| * 1880a324 ftrace: Fix possible use-after-free issue in ftrace_location()
| * e6be2e1e x86/ibt,ftrace: Search for __fentry__ location
| * 9705f447 inet: inet_defrag: prevent sk release while still in use
| * 0e7814b0 mptcp: pm: Fix uaf in __timer_delete_sync
| * 6a53e5de mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
| * a684b45a mptcp: export lookup_anno_list_by_saddr
| * 9d682e89 gpio: prevent potential speculation leaks in gpio_device_get_desc()
| * 5badd0ae netfilter: nf_tables: missing iterator type in lookup walk
| * ff89db14 netfilter: nft_set_pipapo: walk over current view on netlink dump
| * 45a81667 cgroup: Make operations on the cgroup root_list RCU safe
| * 57a3d898 ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
| * 34759b7e ocfs2: add bounds checking to ocfs2_xattr_find_entry()
| * d5624db2 x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
| * bbd11db4 spi: bcm63xx: Enable module autoloading
| * 040511d9 drm: komeda: Fix an issue related to normalized zpos
| * 3d39061b ASoC: tda7419: fix module autoloading
| * 9c6d4649 ASoC: intel: fix module autoloading
| * de46b1d2 wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
| * db81677f wifi: iwlwifi: lower message level for FW buffer destination
| * dd34ef88 net: ftgmac100: Ensure tx descriptor updates are visible
| * 1a8e8528 microblaze: don't treat zero reserved memory regions as error
| * 2e505214 pinctrl: at91: make it work with current gpiolib
| * 9f08d024 ALSA: hda/realtek - FIxed ALC285 headphone no sound
| * fff183aa ALSA: hda/realtek - Fixed ALC256 headphone no sound
| * 0f4da063 ASoC: allow module autoloading for table db1200_pids
| * 007180fc dma-buf: heaps: Fix off-by-one in CMA heap fault handler
| * 5a2cc2bb ASoC: meson: axg-card: fix 'use-after-free'
* | 1f05cd74 Merge ae96b02b ("soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"") into android12-5.10-lts
|\|
| * ae96b02b soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
| * 60926054 spi: nxp-fspi: fix the KASAN report out-of-bounds bug
| * 1f31f51b net: dpaa: Pad packets to ETH_ZLEN
| * f2b13ec2 net: ftgmac100: Enable TX interrupt to avoid TX timeout
| * 392f6a97 fou: fix initialization of grc
| * b9063702 net/mlx5e: Add missing link modes to ptys2ethtool_map
| * 097cc803 net/mlx5: Update the list of the PCI supported devices
| * e7a9cca3 ice: fix accounting for filters shared by multiple VSIs
| * a38c552a hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev >= 1.2
| * b9d15b50 hwmon: (pmbus) Introduce and use write_byte_data callback
| * e829dbaf minmax: reduce min/max macro expansion in atomisp driver
| * 78078862 arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
| * 14341f28 NFS: Avoid unnecessary rescanning of the per-server delegation list
| * 4f0e4916 Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
| * 00d54431 drm/msm/adreno: Fix error return if missing firmware-name
| * 44eb6658 scripts: kconfig: merge_config: config files: add a trailing newline
| * 9deecde6 Input: synaptics - enable SMBus for HP Elitebook 840 G2
| * 3f7183e2 Input: ads7846 - ratelimit the spi_sync error message
| * f0858905 btrfs: update target inode's ctime on unlink
| * 43662ba6 powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
| * acb4baa4 net: phy: vitesse: repair vsc73xx autonegotiation
| * 3b9ca023 net: ethernet: use ip_hdrlen() instead of bit shift
| * b06bb81e usbnet: ipheth: fix carrier detection in modes 1 and 4
* | 84413279 Revert "Merge 8a30bee7 ("usb: dwc3: core: update LC timer as per USB Spec V3.2") into android12-5.10-lts"
* | 18eef3d5 Merge 8a30bee7 ("usb: dwc3: core: update LC timer as per USB Spec V3.2") into android12-5.10-lts
|\|
| * 8a30bee7 usb: dwc3: core: update LC timer as per USB Spec V3.2
| * 1ac06676 usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after resume bug
| * 6b3af2ad usb: dwc3: Decouple USB 2.0 L1 & L2 events
* e477d44e Merge branch 'android12-5.10' into android12-5.10-lts

Change-Id: I8bacb03dd3c3b30729c5ec54bdd57a03f6ff7fe1
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>