Merge tag 'android12-5.10.218_r00' into android12-5.10

This merges the 5.10.218 LTS kernel into the android12-5.10 branch.
Included in here are the following commits:

*   3a2d2273 Merge 5.10.218 into android12-5.10-lts
|\
| * 61458c86 Linux 5.10.218
| * 04a5842e docs: kernel_include.py: Cope with docutils 0.21
| * b5fb355c serial: kgdboc: Fix NMI-safety problems from keyboard reset code
| * 7ed7748c usb: typec: ucsi: displayport: Fix potential deadlock
| * 0eb29623 drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
| * c48ab6a4 btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
| * 99951b62 mptcp: ensure snd_nxt is properly initialized on connect
| * f2277d9e firmware: arm_scmi: Harden accesses to the reset domains
| * 546751d9 KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
| * 05c9e3fc netlink: annotate lockless accesses to nlk->max_recvmsg_len
| * eb15243b ima: fix deadlock when traversing "ima_default_rules".
| * db7aa45c net: bcmgenet: synchronize UMAC_CMD access
| * b8d75bb0 net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
| * 719225b0 Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
| * 1424ab4b x86/xen: Drop USERGS_SYSRET64 paravirt call
| * 8869c291 pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
* | dde5ece4 Merge 5.10.217 into android12-5.10-lts
|\|
| * ce3838db Linux 5.10.217
| * fb5b347e md: fix kmemleak of rdev->serial
| * ad2011ea keys: Fix overwrite of key expiration on instantiation
| * 324be157 regulator: core: fix debugfs creation regression
| * 7788fc8a hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
| * 0c3248bc net: fix out-of-bounds access in ops_init
| * 3cd68235 drm/vmwgfx: Fix invalid reads in fence signaled events
| * 49e09118 mei: me: add lunar lake point M DID
| * 41d8ac23 dyndbg: fix old BUG_ON in >control parser
| * 7fbcbb96 ASoC: tegra: Fix DSPK 16-bit playback
| * f6c807e8 net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
| * 367766ff tipc: fix UAF in error path
| * e2648b3d iio: accel: mxc4005: Interrupt handling fixes
| * 0ba169bb iio:imu: adis16475: Fix sync mode setting
| * e6ba44f8 ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
| * 72410925 usb: dwc3: core: Prevent phy suspend during init
| * 15165b52 usb: xhci-plat: Don't include xhci.h
| * ffb06cb3 usb: gadget: f_fs: Fix a race condition when processing setup packets.
| * 31cfe4e1 usb: gadget: composite: fix OS descriptors w_value logic
| * 3afc842e usb: ohci: Prevent missed ohci interrupts
| * 399ca46d usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
| * 3a970e41 usb: typec: ucsi: Fix connector check on init
| * 3b0b6b32 usb: typec: ucsi: Check for notifications after init
| * 09b3536d arm64: dts: qcom: Fix 'interrupt-map' parent address cells
| * cca330c5 firewire: nosy: ensure user_length is taken into account when fetching packet contents
| * a2fb0eef btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
| * 3284447d net: hns3: use appropriate barrier function after setting a bit value
| * 674c951a ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
| * 9a2a5cd8 net: bridge: fix corrupted ethernet header on multicast-to-unicast
| * e7eb0737 kcov: Remove kcov include from sched.h and move it to its users.
| * f085e02f phonet: fix rtm_phonet_notify() skb allocation
| * b33ae32b hwmon: (corsair-cpro) Protect ccp->wait_input_report with a spinlock
| * 5b37ce7b hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
| * 549e740b hwmon: (corsair-cpro) Use a separate buffer for sending commands
| * 6c8f44b0 rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
| * 06acb75e Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
| * 33a6e921 Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
| * 1d9cf078 tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
| * 413c33b9 tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
| * a4b76067 xfrm: Preserve vlan tags for transport mode software GRO
| * 17f8b8d4 net:usb:qmi_wwan: support Rolling modules
| * e0909629 drm/nouveau/dp: Don't probe eDP ports twice harder
| * 09be6fa6 fs/9p: drop inodes immediately on non-.L too
| * c43463fa clk: Don't hold prepare_lock when calling kref_put()
| * c8e9cc2f gpio: crystalcove: Use -ENOTSUPP consistently
| * 09c733cd gpio: wcove: Use -ENOTSUPP consistently
| * dca2b31c 9p: explicitly deny setlease attempts
| * c38c4530 fs/9p: translate O_TRUNC into OTRUNC
| * 5a605930 fs/9p: only translate RWX permissions for plain 9P2000
| * a79b53d0 selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
| * 7c355faa MIPS: scall: Save thread_info.syscall unconditionally on entry
| * 09888cff gpu: host1x: Do not setup DMA for virtual devices
| * 62accf6c blk-iocost: avoid out of bounds shift
| * 7ba3962c scsi: target: Fix SELinux error when systemd-modules loads the target module
| * b34fdb24 btrfs: always clear PERTRANS metadata during commit
| * e2a3a1df btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
| * 2214d3a5 tools/power turbostat: Fix Bzy_MHz documentation typo
| * 413dbd60 tools/power turbostat: Fix added raw MSR output
| * fa273f31 firewire: ohci: mask bus reset interrupts between ISR and bottom half
| * e8b125df ata: sata_gemini: Check clk_enable() result
| * 1fb7ab9a net: bcmgenet: Reset RBUF on first open
| * 602dd9d9 ALSA: line6: Zero-initialize message buffers
| * e2f5d61b btrfs: return accurate error code on open failure in open_fs_devices()
| * ad498539 scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
| * d21475d2 net: mark racy access on sk->sk_rcvbuf
| * a762b8e0 wifi: cfg80211: fix rdev_dump_mpp() arguments order
| * a2171255 wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
| * a7fb16ff gfs2: Fix invalid metadata access in punch_hole
| * e7e50ac5 scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
| * 4404465a KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
| * 4563a0af KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
| * bfc78b46 clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
| * 7df798dd net: gro: add flush check in udp_gro_receive_segment
| * adbce6d2 tipc: fix a possible memleak in tipc_buf_append
| * faa83a77 net: core: reject skb_copy(_expand) for fraglist GSO skbs
| * 48ab384d net: bridge: fix multicast-to-unicast with fraglist GSO
| * a0e3faf2 net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
| * ea621314 cxgb4: Properly lock TX queue for the selftest.
| * aa50658c ASoC: meson: cards: select SND_DYNAMIC_MINORS
| * f25b4c82 ASoC: Fix 7/8 spaces indentation in Kconfig
| * bf9e84ae net: qede: use return from qede_parse_actions()
| * 99c9baff net: qede: use return from qede_parse_flow_attr() for flow_spec
| * fff2c7a0 net: qede: use return from qede_parse_flow_attr() for flower
| * 4a0c24cc net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
| * 96a592f1 s390/vdso: Add CFI for RA register to asm macro vdso_func
| * 553b2f6c net l2tp: drop flow hash on forward
| * bbccf0ca nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
| * bcdac70a octeontx2-af: avoid off-by-one read from userspace
| * 6f0f19b7 bna: ensure the copied buf is NUL terminated
| * 78ad3b01 s390/mm: Fix clearing storage keys for huge pages
| * e93c82fa s390/mm: Fix storage key clearing for guest huge pages
| * 3994f81a regulator: mt6360: De-capitalize devicetree regulator subnodes
| * 35ab679e pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
| * 5ea5d061 power: rt9455: hide unused rt9455_boost_voltage_values
| * d4891d81 nfs: Handle error of rpc_proc_register() in nfs_net_init().
| * afdbc21a nfs: make the rpc_stat per net namespace
| * 6eef21eb nfs: expose /proc/net/sunrpc/nfs in net namespaces
| * 95ebd5fc sunrpc: add a struct rpc_stats arg to rpc_create_args
| * a3f1a387 pinctrl: mediatek: paris: Rework support for PIN_CONFIG_{INPUT,OUTPUT}_ENABLE
| * e0e916a2 pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback
| * d676152a pinctrl: mediatek: paris: Rework mtk_pinconf_{get,set} switch/case logic
| * 288bc4aa pinctrl: core: delete incorrect free in pinctrl_enable()
| * 734d2dad pinctrl/meson: fix typo in PDM's pin name
| * 20c91ac1 pinctrl: pinctrl-aspeed-g6: Fix register offset for pinconf of GPIOR-T
| * c850f71f eeprom: at24: fix memory corruption race condition
| * ec9dbdde eeprom: at24: Probe for DDR3 thermal sensor in the SPD case
| * b2643d25 eeprom: at24: Use dev_err_probe for nvmem register failure
| * 5a730a16 wifi: nl80211: don't free NULL coalescing rule
| * 00d09857 dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state"
| * db6740b4 dmaengine: pl330: issue_pending waits until WFP state
* | d39363d4 ANDROID: update .xml file due to struct clk_core abi change
* | c15c1199 Merge 5.10.216 into android12-5.10-lts
|\|
| * 39fbb15b Linux 5.10.216
| * 1897993b riscv: Disable STACKPROTECTOR_PER_TASK if GCC_PLUGIN_RANDSTRUCT is enabled
| * ba7bc80d serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
| * 16affc4d udp: preserve the connected status if only UDP cmsg
| * 66297b2c bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS
| * 5095b930 HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
| * 5fd72404 i2c: smbus: fix NULL function pointer dereference
| * 04bf2e5f riscv: Fix TASK_SIZE on 64-bit NOMMU
| * d5cc3498 riscv: fix VMALLOC_START definition
| * fcdd5bb4 dma: xilinx_dpdma: Fix locking
| * 5129f84b idma64: Don't try to serve interrupts when device is powered off
| * 4d051d6f dmaengine: owl: fix register access functions
| * ab31bc50 tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge()
| * 74e5e560 tcp: Clean up kernel listener's reqsk in inet_twsk_purge()
| * 179a890e mtd: diskonchip: work around ubsan link failure
| * f99de42b stackdepot: respect __GFP_NOLOCKDEP allocation flag
| * c9d5f3b5 net: b44: set pause params only when interface is up
| * f3a2f186 ethernet: Add helper for assigning packet type when dest address does not match device address
| * aa44d215 irqchip/gic-v3-its: Prevent double free on error
| * 5ab19dc5 drm/amdgpu: Fix leak when GPU memory allocation fails
| * 48a92487 drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
| * b2d5ef07 arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
| * af6d6a92 cpu: Re-enable CPU mitigations by default for !X86 architectures
| * 30189e54 btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
| * 6dc5afe8 Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
| * de657b21 Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
| * 087de000 PM / devfreq: Fix buffer overflow in trans_stat_show
| * 772a23d6 tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
| * ffbeb5d4 tracing: Show size of requested perf buffer
| * 98f282c3 net/mlx5e: Fix a race in command alloc flow
| * 2862578f Revert "crypto: api - Disallow identical driver names"
| * 0dc0637e serial: mxs-auart: add spinlock around changing cts state
| * fc955bde serial: core: Provide port lock wrappers
| * ae7c8f52 af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
| * dd0eb1da net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
| * d5103799 iavf: Fix TC config comparison with existing adapter TC config
| * 3a4677b2 i40e: Report MFS in decimal base instead of hex
| * fbbb2404 i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
| * e4bb6da2 netfilter: nf_tables: honor table dormant flag from netdev release event path
| * 857ed800 mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
| * 09846c23 mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
| * 1d76bd2a mlxsw: spectrum_acl_tcam: Fix warning during rehash
| * 617e98ba mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
| * 3c443a34 mlxsw: spectrum_acl_tcam: Rate limit error message
| * a429a912 mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
| * e24d2487 mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
| * e1ad8eaa mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
| * 35880c3f net: openvswitch: Fix Use-After-Free in ovs_ct_exit
| * aca5dada ipvs: Fix checksumming on GSO of SCTP packets
| * 0caff3e6 net: gtp: Fix Use-After-Free in gtp_dellink
| * 9bda5e2f net: usb: ax88179_178a: stop lying about skb->truesize
| * 7da0f916 ipv4: check for NULL idev in ip_route_use_hint()
| * c676c68e NFC: trf7970a: disable all regulators on removal
| * 6496fadf mlxsw: core: Unregister EMAD trap using FORWARD action
| * e860a870 vxlan: drop packets from invalid src-address
| * 4dc8beb8 wifi: iwlwifi: mvm: remove old PASN station when adding a new one
| * b4a29e18 ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
| * 4c7a2f71 arm64: dts: mediatek: mt2712: fix validation errors
| * 755703e6 arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
| * ed993f74 arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
| * 819da78e arm64: dts: mediatek: mt7622: fix IR nodename
| * 55d07efd arm64: dts: mediatek: mt7622: fix clock controllers
| * 136c8e01 arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
| * 57ff0904 arm64: dts: mediatek: mt7622: add support for coherent DMA
| * f9930871 arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
| * 759796d7 arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
| * 38db853f arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
| * 7061c7ef nilfs2: fix OOB in nilfs_set_de_type
| * 13d76b2f nouveau: fix instmem race condition around ptr stores
| * 1fd7db5c drm/amdgpu: validate the parameters of bo mapping operations more clearly
| * 2ef607ea init/main.c: Fix potential static_command_line memory overflow
| * 84bd4c2a fs: sysfs: Fix reference leak in sysfs_break_active_protection()
| * 6401038a speakup: Avoid crash on very long word
| * bf786df6 mei: me: disable RPL-S on SPS and IGN firmwares
| * 5160b4bd usb: Disable USB3 LPM at shutdown
| * 26fde0ea usb: dwc2: host: Fix dereference issue in DDMA completion flow.
| * ab92e11b Revert "usb: cdc-wdm: close race between read and workqueue"
| * ba11df45 USB: serial: option: add Telit FN920C04 rmnet compositions
| * 33b29a50 USB: serial: option: add Rolling RW101-GL and RW135-GL support
| * 6e7cdfd6 USB: serial: option: support Quectel EM060K sub-models
| * b5c3ecee USB: serial: option: add Lonsung U8300/U9300 product
| * e32faa0e USB: serial: option: add support for Fibocom FM650/FG650
| * 3366e4fd USB: serial: option: add Fibocom FM135-GL variants
| * ab86cf6f serial/pmac_zilog: Remove flawed mitigation for rx irq flood
| * f15370e3 comedi: vmk80xx: fix incomplete endpoint checking
| * 5a7e30d9 thunderbolt: Fix wake configurations after device unplug
| * e6245ed8 thunderbolt: Avoid notify PM core about runtime PM resume
| * 48a1f83c binder: check offset alignment in binder_get_object()
| * 2e212ae0 x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ
| * 4af115f1 clk: Get runtime PM before walking tree during disable_unused
| * d339ce27 clk: Initialize struct clk_core kref earlier
| * 83e6e77f clk: Print an info line before disabling unused clocks
| * c04fc244 clk: remove extra empty line
| * f5591ad6 clk: Mark 'all_lists' as const
| * bde446f1 clk: Remove prepare_lock hold assertion in __clk_release()
| * f3d4f017 drm/panel: visionox-rm69299: don't unregister DSI device
| * 097c7918 drm: nv04: Fix out of bounds access
| * 5ebbbeb2 RDMA/mlx5: Fix port number for counter query in multi-port configuration
| * 40c48586 RDMA/cm: Print the old state when cm_destroy_id gets timeout
| * 2e45acd1 RDMA/rxe: Fix the problem "mutex_destroy missing"
| * 14cdb43d tun: limit printing rate when illegal packet received by tun dev
| * e3b887a9 netfilter: nft_set_pipapo: do not free live element
| * 934e66e2 netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
| * 26ebefff Revert "tracing/trigger: Fix to return error if failed to alloc snapshot"
| * 5062d1f4 kprobes: Fix possible use-after-free issue on kprobe registration
| * 1d9ff611 selftests/ftrace: Limit length in subsystem-enable tests
| * 9abc3e6f riscv: process: Fix kernel gp leakage
| * 11a821ee riscv: Enable per-task stack canaries
| * 4c5e9eaa btrfs: record delayed inode root in transaction
| * c38ea6f1 irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
| * 85df831d x86/apic: Force native_apic_mem_read() to use the MOV instruction
| * 4979a581 selftests: timers: Fix abs() warning in posix_timers test
| * 30da4180 x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
| * a75a785d vhost: Add smp_rmb() in vhost_vq_avail_empty()
| * 41586487 drm/client: Fully protect modes[] with dev->mode_config.mutex
| * fb9f76b2 btrfs: qgroup: correctly model root qgroup rsv in convert
| * b43ff117 mailbox: imx: fix suspend failue
| * 5ef15c06 iommu/vt-d: Allocate local memory for page request queue
| * b26aa765 net: ena: Fix incorrect descriptor free behavior
| * c3b3b0c1 net: ena: Wrong missing IO completions check order
| * 02c42a27 net: ena: Fix potential sign extension issue
| * 2e2a0378 af_unix: Fix garbage collector racing against connect()
| * 14bea27d af_unix: Do not use atomic ops for unix_sk(sk)->inflight.
| * 3d90ca91 net/mlx5: Properly link new fs rules into the tree
| * cf4bc359 netfilter: complete validation of user input
| * b0e30c37 Bluetooth: SCO: Fix not validating setsockopt user input
| * 3fb02ec5 ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
| * 9e55a650 ipv4/route: avoid unused-but-set-variable warning
| * 1afc86bc ipv6: fib: hide unused 'pn' variable
| * 434aabb6 octeontx2-af: Fix NIX SQ mode and BP config
| * 10204df9 geneve: fix header validation in geneve[6]_xmit_skb
| * a82984b3 xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
| * 69fbe5bf u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
| * 583b7b85 net: openvswitch: fix unwanted error log on timeout policy probing
| * e252fc82 nouveau: fix function cast warning
| * 7dc2f7b2 media: cec: core: remove length check of Timer Status
| * 8478394f Bluetooth: Fix memory leak in hci_req_sync_complete()
| * 70a8be9d batman-adv: Avoid infinite loop trying to resize local TT
* | ce4609a5 ANDROID: mark DRM_VMWGFX as BROKEN
* | 48fcb2da Revert "ANDROID: Setting up GS before calling __restore_processor_state."
* | be9f128e Revert "block: introduce zone_write_granularity limit"
* | 767bb1b3 Revert "block: Clear zone limits for a non-zoned stacked queue"
* | 213d8963 Revert "scsi: sd: Fix wrong zone_write_granularity value during revalidate"
* | eaaff97d Revert "PCI/ERR: Cache RCEC EA Capability offset in pci_init_capabilities()"
* | 60f9b585 Revert "PCI: Cache PCIe Device Capabilities register"
* | 54292b67 Revert "PCI: Work around Intel I210 ROM BAR overlap defect"
* | a4a9cf2a Revert "PCI/ASPM: Make Intel DG2 L1 acceptable latency unlimited"
* | 49a81ed5 Revert "PCI/DPC: Quirk PIO log size for certain Intel Root Ports"
* | 478632cd Revert "PCI/DPC: Quirk PIO log size for Intel Ice Lake Root Ports"
* | 58574fb6 Revert "PCI/DPC: Quirk PIO log size for Intel Raptor Lake Root Ports"
* | 3f602a77 Revert "timers: Rename del_timer_sync() to timer_delete_sync()"
* | 9100d24d Merge 5.10.215 into android12-5.10-lts
|\|
| * e2e4e7b4 Linux 5.10.215
| * cea750c9 x86/head/64: Re-enable stack protection
| * 0bdc64e9 x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
| * 85d11ded scsi: sd: Fix wrong zone_write_granularity value during revalidate
| * 44900a8b kbuild: dummy-tools: adjust to stricter stackprotector check
| * 682f6ca9 VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
| * f7d846ac Bluetooth: btintel: Fixe build regression
| * fe34587a drm/i915/gt: Reset queue_priority_hint on parking
| * c2b2430b x86/mm/pat: fix VM_PAT handling in COW mappings
| * 3b29694d virtio: reenable config if freezing device failed
| * ada28eb4 tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
| * b58d0ac3 netfilter: nf_tables: discard table flag update with pending basechain deletion
| * 2cee2ff7 netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
| * 453c8da7 netfilter: nf_tables: release batch on table validation from abort path
| * 951838fe fbmon: prevent division by zero in fb_videomode_from_videomode()
| * c6e0de1e drivers/nvme: Add quirks for device 126f:2262
| * 19536fe4 fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
| * e9efe31e usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
| * 8406161f usb: typec: tcpci: add generic tcpci fallback compatible
| * e0184c95 tools: iio: replace seekdir() in iio_generic_buffer
| * 91698804 ring-buffer: use READ_ONCE() to read cpu_buffer->commit_page in concurrent environment
| * 694b7fa7 ktest: force $buildonly = 1 for 'make_warnings_file' test type
| * 804ed6c3 platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
| * 95bd7e31 Input: allocate keycode for Display refresh rate toggle
| * d4b856aa RDMA/cm: add timeout to cm_destroy_id wait
| * b0cb5564 block: prevent division by zero in blk_rq_stat_sum()
| * d2341dc4 libperf evlist: Avoid out-of-bounds access
| * 5e0a89c4 Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
| * 4b676584 SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
| * 0b5668a8 drm/amd/display: Fix nanosec stat overflow
| * 48882b48 ext4: forbid commit inconsistent quota data when errors=remount-ro
| * 6545e130 ext4: add a hint for block bitmap corrupt state in mb_groups
| * 2fef0059 media: sta2x11: fix irq handler cast
| * bd12d39a isofs: handle CDs with bad root inode but good Joliet root directory
| * c473288f scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
| * 674c1c42 sysv: don't call sb_bread() with pointers_lock held
| * 94b01bdf pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
| * fd238540 Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
| * 86e9b47e Bluetooth: btintel: Fix null ptr deref in btintel_read_version
| * bc4d1ebc net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
| * 4720d590 btrfs: send: handle path ref underflow in header iterate_inode_ref()
| * 0002df73 btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
| * 87299cda btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
| * a2e43c53 tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
| * 98e2b97a pstore/zone: Add a null pointer check to the psz_kmsg_read
| * a3cd1104 ionic: set adminq irq affinity
| * bd365f06 arm64: dts: rockchip: fix rk3399 hdmi ports node
| * 3ea47172 arm64: dts: rockchip: fix rk3328 hdmi ports node
| * 5b71a921 panic: Flush kernel log buffer at the end
| * ad78c504 VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
| * 46e219d8 wifi: ath9k: fix LNA selection in ath_ant_try_scan()
| * 1a038ea9 objtool: Add asm version of STACK_FRAME_NON_STANDARD
| * bb5fb12c x86/cpufeatures: Add CPUID_LNX_5 to track recently added Linux-defined word
| * c137ee44 mptcp: don't account accept() of non-MPC client as fallback to TCP
| * aae64646 x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
| * f5e9b93f x86/bugs: Fix the SRSO mitigation on Zen3/4
| * 2cba2ba2 riscv: Fix spurious errors from __get/put_kernel_nofault
| * 9fd381fe s390/entry: align system call table on 8 bytes
| * f5e65b78 x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
| * 3127b2ee of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
| * 7f62d985 driver core: Introduce device_link_wait_removal()
| * 976b0215 ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
| * 75c33487 ata: sata_mv: Fix PCI device ID table declaration compilation warning
| * ca222955 scsi: mylex: Fix sysfs buffer lengths
| * dff4cd7d ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
| * aa5936f5 ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
| * 21d2994c arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
| * a6186caf arm64: dts: qcom: sc7180: Remove clock for bluetooth on Trogdor
| * ae5f35ff net: ravb: Always process TX descriptor ring
| * 3391b157 udp: do not accept non-tunnel GSO skbs landing in a tunnel
| * 43183be8 Revert "usb: phy: generic: Get the vbus supply"
| * 00810a24 scsi: qla2xxx: Update manufacturer detail
| * 20414bdc scsi: qla2xxx: Update manufacturer details
| * b8e82128 i40e: fix vf may be used uninitialized in this function warning
| * a88765b0 i40e: fix i40e_count_filters() to count only active/new filters
| * 6ebcf688 octeontx2-pf: check negative error code in otx2_open()
| * 360edeb6 udp: do not transition UDP GRO fraglist partial checksums to unnecessary
| * fd307f2d ipv6: Fix infinite recursion in fib6_dump_done().
| * ed2bdbf5 selftests: reuseaddr_conflict: add missing new line at the end of the output
| * b14b9f95 erspan: make sure erspan_base_hdr is present in skb->head
| * 42852763 net: stmmac: fix rx queue priority assignment
| * 5e45dc44 net/sched: act_skbmod: prevent kernel-infoleak
| * dd54b48d bpf, sockmap: Prevent lock inversion deadlock in map delete elem
| * aedc6cfb vboxsf: Avoid an spurious warning if load_nls_xxx() fails
| * 0f038242 netfilter: validate user input for expected length
| * 940d41ca netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
| * 46c44819 netfilter: nf_tables: flush pending destroy work before exit_net release
| * 7b6fba69 netfilter: nf_tables: reject new basechain after table flag update
| * 8f6dfa1f block: add check that partition length needs to be aligned with block size
| * e7ea043b x86/srso: Add SRSO mitigation for Hygon processors
| * af47e6a9 mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
| * a15bcaa7 Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
| * 1eff09ac io_uring: ensure '0' is returned on file registration success
| * a563fc18 vfio/fsl-mc: Block calling interrupt handler without trigger
| * 09452c8f vfio/platform: Create persistent IRQ handlers
| * 27d40bf7 vfio/pci: Create persistent INTx handler
| * d6f77b5e vfio: Introduce interface to flush virqfd inject workqueue
| * 3dd9be6c vfio/pci: Lock external INTx masking ops
| * 561d5e19 vfio/pci: Disable auto-enable of exclusive INTx IRQ
| * cfb786b0 net/rds: fix possible cp null dereference
| * 6f3ae02b netfilter: nf_tables: disallow timeout for anonymous sets
| * e4708807 Bluetooth: Fix TOCTOU in HCI debugfs implementation
| * 71605692 Bluetooth: hci_event: set the conn encrypted before conn establishes
| * 89583ff1 x86/cpufeatures: Add new word for scattered features
| * 77a82b96 r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
| * e4be2df1 dm integrity: fix out-of-range warning
| * c5830669 Octeontx2-af: fix pause frame configuration in GMP mode
| * 9970e059 bpf: Protect against int overflow for stack access size
| * e8ed357a ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
| * e3e27d2b tcp: properly terminate timers for kernel sockets
| * 10b1273d ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa()
| * 755e53bb nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
| * e4517095 USB: core: Fix deadlock in usb_deauthorize_interface()
| * bb22d368 scsi: lpfc: Correct size for wqe for memset()
| * f4964266 PCI/DPC: Quirk PIO log size for Intel Ice Lake Root Ports
| * 34a81f52 x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled
| * 72ba1687 scsi: qla2xxx: Delay I/O Abort on PCI error
| * 67b2d358 scsi: qla2xxx: Fix command flush on cable pull
| * a56b2033 scsi: qla2xxx: Split FCE|EFT trace control
| * db0f08a6 usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
| * e9042f4e usb: typec: ucsi: Ack unsupported commands
| * 3e944ddc usb: udc: remove warning when queue disabled ep
| * fd84c4eb usb: dwc2: gadget: LPM flow fix
| * db4fa0c8 usb: dwc2: host: Fix ISOC flow in DDMA mode
| * 85ebae77 usb: dwc2: host: Fix hibernation flow
| * c63869e9 usb: dwc2: host: Fix remote wakeup from hibernation
| * 8e047bc5 USB: core: Add hub_get() and hub_put() routines
| * 6f495325 staging: vc04_services: fix information leak in create_component()
| * 3be3809b staging: vc04_services: changen strncpy() to strscpy_pad()
| * 5c2386ba scsi: core: Fix unremoved procfs host directory regression
| * aa39e687 ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
| * 9b319f4a usb: cdc-wdm: close race between read and workqueue
| * 6d9395ba net: ll_temac: platform_get_resource replaced by wrong function
| * 2b539c88 mmc: core: Avoid negative index with array access
| * bce3a983 mmc: core: Initialize mmc_blk_ioc_data
| * 51c99c67 hexagon: vmlinux.lds.S: handle attributes section
| * 73b3ea46 exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
| * e8b067c4 wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
| * f8f76b75 init: open /initrd.image with O_LARGEFILE
| * 2e5fe740 mm/migrate: set swap entry values of THP tail pages properly.
| * 38753f1a mm/memory-failure: fix an incorrect use of tail pages
| * 4e37416e serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
| * 9c5f4014 powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
| * f33255cc efivarfs: Request at most 512 bytes for variable names
| * 33414e56 perf/core: Fix reentry problem in perf_output_read_group()
| * 91cf85f7 KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests
| * 66d5260f x86/rfds: Mitigate Register File Data Sampling (RFDS)
| * 5fbd9f6c Documentation/hw-vuln: Add documentation for RFDS
| * 6e04cae3 x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set
| * b9a97767 KVM/VMX: Move VERW closer to VMentry for MDS mitigation
| * 52aad34e KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH
| * 6192d9ed x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key
| * 50f021f0 x86/entry_32: Add VERW just before userspace transition
| * edc702b4 x86/entry_64: Add VERW just before userspace transition
| * 35e36eac x86/bugs: Add asm helpers for executing VERW
| * 8b20c6f8 x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
| * b4223584 btrfs: allocate btrfs_ioctl_defrag_range_args on stack
| * 3377090b printk: Update @console_may_schedule in console_trylock_spinning()
| * 0fc88aeb xen/events: close evtchn after mapping cleanup
| * bc40ded9 tee: optee: Fix kernel panic caused by incorrect error handling
| * 94eb0293 fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
| * 1ce408f7 vt: fix unicode buffer corruption when deleting characters
| * 28924c43 mei: me: add arrow lake point H DID
| * 4ba385d2 mei: me: add arrow lake point S DID
| * bb664ed9 tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
| * 1d142479 usb: port: Don't try to peer unused USB ports based on location
| * ef846cdb usb: gadget: ncm: Fix handling of zero block length packets
| * 284fb100 USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
| * 24427b02 ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
| * 2d13b796 KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region()
| * 6406c55f xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
| * d2951b72 Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
| * 2863e2f0 netfilter: nf_tables: reject constant set with timeout
| * fe40ffbc netfilter: nf_tables: disallow anonymous set with timeout flag
| * e2d45f46 netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout
| * 449b8bdc cpufreq: brcmstb-avs-cpufreq: fix up "add check for cpufreq_cpu_get's return value"
| * ac816bbb comedi: comedi_test: Prevent timers rescheduling during deletion
| * d430e298 scripts: kernel-doc: Fix syntax error due to undeclared args variable
| * d0838b07 x86/pm: Work around false positive kmemleak report in msr_build_context()
| * f5948717 x86/stackprotector/32: Make the canary into a regular percpu variable
| * 6d225474 vxge: remove unnecessary cast in kfree()
| * 9759ff19 dm snapshot: fix lockup in dm_exception_table_exit
| * b074a76c drm/amd/display: Fix noise issue on HDMI AV mute
| * 1a77ee0f drm/amd/display: Return the correct HDCP error code
| * 2f832915 ahci: asm1064: asm1166: don't limit reported ports
| * ce4c5d27 ahci: asm1064: correct count of reported ports
| * 493aa6bd wireguard: netlink: access device through ctx instead of peer
| * f52be46e wireguard: netlink: check for dangling peer via is_dead instead of empty list
| * ec5098d4 net: hns3: tracing: fix hclgevf trace event strings
| * bce7345e x86/CPU/AMD: Update the Zenbleed microcode revisions
| * 224ec95f cpufreq: dt: always allocate zeroed cpumask
| * f0fe7ad5 nilfs2: prevent kernel bug at submit_bh_wbc()
| * c3b5c5c3 nilfs2: fix failure to detect DAT corruption in btree and direct mappings
| * 7607860a memtest: use {READ,WRITE}_ONCE in memory scanning
| * c734f9c1 drm/vc4: hdmi: do not return negative values from .get_modes()
| * 51c519d7 drm/imx/ipuv3: do not return negative values from .get_modes()
| * a8cb3b07 drm/exynos: do not return negative values from .get_modes()
| * 9aaa60f3 drm/panel: do not return negative error codes from drm_panel_get_modes()
| * 6470078a s390/zcrypt: fix reference counting on zcrypt card objects
| * 32edca2f soc: fsl: qbman: Use raw spinlock for cgr_lock
| * 39ed969a soc: fsl: qbman: Add CGR update function
| * c542f3a7 soc: fsl: qbman: Add helper for sanity checking cgr ops
| * dd199e5b soc: fsl: qbman: Always disable interrupts when taking cgr_lock
| * 47ad5c13 ring-buffer: Fix full_waiters_pending in poll
| * 616a78bd ring-buffer: Fix resetting of shortest_full
| * 756934d8 ring-buffer: Do not set shortest_full when full target is hit
| * 3d4873cf ring-buffer: Fix waking up ring buffer readers
| * ad68ce49 vfio/platform: Disable virqfds on cleanup
| * ef73db1c PCI: dwc: endpoint: Fix advertised resizable BAR size
| * 70077e0a kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
| * 4595d90b nfs: fix UAF in direct writes
| * 7e55155d PCI/AER: Block runtime suspend when handling errors
| * 648906b6 PCI/ERR: Clear AER status only when we control AER
| * bb317bba speakup: Fix 8bit characters from direct synth
| * 92eac4c0 usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
| * a799864b usb: gadget: tegra-xudc: Use dev_err_probe()
| * 350aeb14 phy: tegra: xusb: Add API to retrieve the port number of phy
| * 0213b8bf slimbus: core: Remove usage of the deprecated ida_simple_xx() API
| * b45970fc nvmem: meson-efuse: fix function pointer type mismatch
| * e8e8b197 ext4: fix corruption during on-line resize
| * 89bc7ed7 hwmon: (amc6821) add of_match table
| * 37005a1b drm/etnaviv: Restore some id values
| * a1d62c06 mmc: core: Fix switch on gp3 partition
| * d85c11c9 mm: swap: fix race between free_swap_and_cache() and swapoff()
| * 068ab275 mac802154: fix llsec key resources release in mac802154_llsec_key_del
| * 1302344f dm-raid: fix lockdep waring in "pers->hot_add_disk"
| * b0732674 Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
| * be7f399e PCI/DPC: Quirk PIO log size for Intel Raptor Lake Root Ports
| * a654d0a1 PCI/DPC: Quirk PIO log size for certain Intel Root Ports
| * 51411a4d PCI/ASPM: Make Intel DG2 L1 acceptable latency unlimited
| * 81d9ca15 PCI: Work around Intel I210 ROM BAR overlap defect
| * 619013d7 PCI: Cache PCIe Device Capabilities register
| * 1f5ea9e3 PCI/ERR: Cache RCEC EA Capability offset in pci_init_capabilities()
| * bbe068b2 PCI/PM: Drain runtime-idle callbacks before driver removal
| * 39f7310e PCI: Drop pci_device_remove() test of pci_dev->driver
| * d2a97097 btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
| * d7800338 serial: Lock console when calling into driver before registration
| * 590326a5 printk/console: Split out code that enables default console
| * a0e82725 usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
| * c71ac059 fuse: don't unhash root
| * 853f0c0d fuse: fix root lookup with nonzero generation
| * ab166a94 mmc: tmio: avoid concurrent runs of mmc_request_done()
| * 40dda054 PM: sleep: wakeirq: fix wake irq warning in system suspend
| * ad5b7fc6 USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
| * fec4dea5 USB: serial: option: add MeiG Smart SLM320 product
| * 76b49790 USB: serial: cp210x: add ID for MGP Instruments PDS100
| * cc235a4b USB: serial: add device ID for VeriFone adapter
| * dccd6497 USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
| * a51a65d3 powerpc/fsl: Fix mfpmr build errors with newer binutils
| * 3ff4a0f6 clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
| * a09aecb6 clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
| * 851cc19b clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
| * ae60e334 clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
| * 0aa06ebe PM: suspend: Set mem_sleep_current during kernel command line setup
| * 47cad45f parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
| * d4a20501 parisc: Fix csum_ipv6_magic on 64-bit systems
| * 2a318f10 parisc: Fix csum_ipv6_magic on 32-bit systems
| * 27b0db8d parisc: Fix ip_fast_csum
| * 8b8019f9 parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
| * c2f8af10 mtd: rawnand: meson: fix scrambling mode value in command macro
| * 7a9337af ubi: correct the calculation of fastmap size
| * 0a16a633 ubi: Check for too small LEB size in VTBL code
| * 8f599ab6 ubifs: Set page uptodate in the correct place
| * a276c595 fat: fix uninitialized field in nostale filehandles
| * 83a2275f bounds: support non-power-of-two CONFIG_NR_CPUS
| * 96661f8c block: Clear zone limits for a non-zoned stacked queue
| * 6b4bb49e block: introduce zone_write_granularity limit
| * 0eb348f4 ext4: correct best extent lstart adjustment logic
| * 8f5dfcbf selftests/mqueue: Set timeout to 180 seconds
| * d0309255 crypto: qat - resolve race condition during AER recovery
| * 02fa834f crypto: qat - fix double free during reset
| * 6796844c sparc: vDSO: fix return value of __setup handler
| * 308b721d sparc64: NMI watchdog: fix return value of __setup handler
| * f8730d63 KVM: Always flush async #PF workqueue when vCPU is being destroyed
| * 7936e5c8 media: xc4000: Fix atomicity violation in xc4000_get_frequency
| * c45e53c2 serial: max310x: fix NULL pointer dereference in I2C instantiation
| * c560327d drm/vmwgfx: Fix possible null pointer derefence with invalid contexts
| * 675ebda6 drm/vmwgfx: Fix some static checker warnings
| * dc7cd107 drm/vmwgfx/vmwgfx_cmdbuf_res: Remove unused variable 'ret'
| * b6fc792b drm/vmwgfx: switch over to the new pin interface v2
| * 1502b87c drm/vmwgfx: stop using ttm_bo_create v2
| * 7f0de642 arm: dts: marvell: Fix maxium->maxim typo in brownstone dts
| * fbda83d0 smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
| * a354d9e3 smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
| * 1c18c154 clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
| * b3afaa40 media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
| * bacb8c3a wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
| * d8166e8a timers: Rename del_timer_sync() to timer_delete_sync()
| * fa576cdd timers: Use del_timer_sync() even on UP
| * 127dbb3d timers: Update kernel-doc for various functions
| * 6487fb01 x86/bugs: Use sysfs_emit()
| * d3084b03 x86/cpu: Support AMD Automatic IBRS
| * 2c1a5049 Documentation/hw-vuln: Update spectre doc
| * fcbd99b3 amdkfd: use calloc instead of kzalloc to avoid integer overflow
* e9b3e47f Merge branch 'android12-5.10' into branch 'android12-5.10-lts'

Change-Id: If920bf57647a5b27994daf5704a4cb27f1d651bb
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>