Merge tag 'android13-5.10.236_r00' into android13-5.10

This merges the android13-5.10.236_r00 tag into the android13-5.10 branch,
catching it up with the latest LTS releases.

It contains the following commits:

* ba8b8b19 Revert "can: statistics: use atomic access in hot path"
* 360e9497 Revert "netfilter: conntrack: convert to refcount_t api"
* 37767d91 Revert "netfilter: conntrack: fix crash due to confirmed bit load reordering"
* 1e30309b Revert "netfilter: nft_ct: fix use after free when attaching zone template"
* 8eda9d77 Revert "netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template."
* 64ba81f6 ANDROID: fix build error in trace_events_synth.c
*   652541f8 Merge 5.10.236 into android13-5.10-lts
|\
| * 7222a9d1 Linux 5.10.236
| * 2233f99a tracing: Do not use PERF enums when perf is not defined
| * 4c71a552 x86/kexec: Fix double-free of elf header buffer
| * 5f67ec3d netfilter: conntrack: fix crash due to confirmed bit load reordering
| * 2d290dd2 NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up
| * b874cdef nfsd: put dl_stid if fail to queue dl_recall
| * 50e48f4f jfs: add index corruption check to DT_GETPAGE()
| * 50afcee7 jfs: fix slab-out-of-bounds read in ea_get()
| * e47f472a ext4: fix OOB read when checking dotdot dir
| * 04a5feec ext4: don't over-report free space or inodes in statvfs
| * 72848b81 tracing: Ensure module defining synth event cannot be unloaded while tracing
| * de7b3091 tracing: Fix use-after-free in print_graph_function_flags during tracer switching
| * 757d8cad mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
| * c491c8cd ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP
| * 4b65cff0 acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
| * 556d4460 x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
| * 5434d4e7 x86/tsc: Always save/restore TSC sched_clock() on suspend/resume
| * 0e4840ae btrfs: handle errors from btrfs_dec_ref() properly
| * d9cc23cc ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()
| * 2fd32a65 drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
| * befd1dc6 drm/amd/pm: Fix negative array index read
| * f6c87153 tty: serial: fsl_lpuart: disable transmitter before changing RS485 related registers
| * a95f16d6 tty: serial: fsl_lpuart: use UARTMODIR register bits for lpuart32 platform
| * 5ba7906d can: flexcan: only change CAN state when link up in system PM
| * 905a34dc arcnet: Add NULL check in com20020pci_probe()
| * a2cb85f9 net: fix geneve_opt length integer overflow
| * c4a0c564 net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy
| * b3990890 ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
| * 31d49eb4 netfilter: nft_tunnel: fix geneve_opt type confusion addition
| * b860c787 tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().
| * 48c2ee18 vsock: avoid timeout during connect() if the socket is closing
| * 1284733b net_sched: skbprio: Remove overly strict queue assertions
| * 1e38f7a6 netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
| * 4adf416e ntb: intel: Fix using link status DB's
| * 5b6857bb ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
| * 410c787d spufs: fix a leak in spufs_create_context()
| * 132925bd spufs: fix a leak on spufs_new_file() failure
| * f8982abe hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
| * 9d257888 can: statistics: use atomic access in hot path
| * 29f29bd7 ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx
| * f6d1bc15 locking/semaphore: Use wake_q to wake up processes outside lock critical section
| * 177310d6 sched/deadline: Use online cpus for validating runtime
| * 1a6261d3 platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4 tablet
| * b25254ce affs: don't write overlarge OFS data block size fields
| * 3c1ace82 affs: generate OFS sequence numbers starting at 1
| * 273c7ffd nvme-pci: skip CMB blocks incompatible with PCI P2P DMA
| * 644e692a nvme-pci: clean up CMBMSC when registering CMB fails
| * 448302d2 nvme-tcp: fix possible UAF in nvme_tcp_poll
| * 3999a5bf wifi: iwlwifi: fw: allocate chained SG tables for dump
| * 41800e19 sched/smt: Always inline sched_smt_active()
| * b88fb8a1 octeontx2-af: Fix mbox INTR handler when num VFs > 64
| * 5d7c77ef ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid
| * 19a17cb7 ring-buffer: Fix bytes_dropped calculation issue
| * 0f548970 rtnetlink: Allocate vfinfo size for VF GUIDs when supported
| * 3b2fbcdf exfat: fix the infinite loop in exfat_find_last_cluster()
| * 976a8578 objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
| * 7626edb0 fs/procfs: fix the comment above proc_pid_wchan()
| * 09061ac5 perf python: Check if there is space to copy all the event
| * d9b8016b perf python: Don't keep a raw_data pointer to consumed ring buffer space
| * 6c968fae perf python: Decrement the refcount of just created event on failure
| * faf50fd6 perf python: Fixup description of sample.id event member
| * a2208044 NFSv4: Don't trigger uneccessary scans for return-on-close delegations
| * 538ed8b0 ocfs2: validate l_tree_depth to avoid out-of-bounds access
| * 21995985 kexec: initialize ELF lowest address to ULONG_MAX
| * 9b19a134 perf units: Fix insufficient array space
| * 735b21e7 iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio
| * cc22c7eb coresight: catu: Fix number of pages while using 64k pages
| * 5dca0aa2 isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
| * 9b1df0f0 crypto: hisilicon/sec2 - fix for aead auth key length
| * 00da664a x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
| * 9453e3bf mfd: sm501: Switch to BIT() to mitigate integer overflows
| * 856d9e5d RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
| * 1c69a95e power: supply: max77693: Fix wrong conversion of charge input threshold value
| * 7ff8e8fa x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
| * 7db2bca5 clk: amlogic: g12a: fix mmc A peripheral clock
| * b9778cd8 clk: amlogic: gxbb: drop non existing 32k clock parent
| * a6f2d9da clk: amlogic: g12b: fix cluster A parent data
| * dfc5eb98 pinctrl: tegra: Set SFIO mode to Mux Register
| * 9b87d509 IB/mad: Check available slots before posting receive WRs
| * 5ad1f219 clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
| * e00415fc pinctrl: renesas: rza2: Fix missing of_node_put() call
| * 35688561 lib: 842: Improve error handling in sw842_compress()
| * 98e173ee bpf: Use preempt_count() directly in bpf_send_signal_common()
| * 00307934 clk: samsung: Fix UBSAN panic in samsung_clk_init()
| * 86795e1b remoteproc: qcom_q6v5_pas: Make single-PD handling more robust
| * e87fbf55 clk: amlogic: gxbb: drop incorrect flag on 32k clock
| * 46b51f92 fbdev: sm501fb: Add some geometry checks.
| * 1362c48b mdacon: rework dependency list
| * ae87a6a5 fbdev: au1100fb: Move a variable assignment behind a null pointer check
| * 8c8ca001 PCI: pciehp: Don't enable HPIE when resuming in poll mode
| * c3bc9f9b drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()
| * b66223a9 PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe
| * c172f69d PCI: Remove stray put_device() in pci_register_host_bridge()
| * d86fca40 drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()
| * 936d101a PCI/portdrv: Only disable pciehp interrupts early when needed
| * faec2743 PCI: brcmstb: Use internal register to change link capability
| * 508ead92 PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload
| * 62db339e PCI/ASPM: Fix link state exit during switch upstream function removal
| * 2d8293af drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member
| * 6af1d772 drm/mediatek: mtk_hdmi: Unregister audio platform device on failure
| * 3c42f15c drm: xlnx: zynqmp: Fix max dma segment size
| * 843f99a1 drm/dp_mst: Fix drm RAD print
| * f6d04cb7 ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible
| * fc0d4521 ALSA: hda/realtek: Always honor no_shutup_pins
| * ef0398cf perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
| * 93dea41f lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()
| * c76e2aac PM: sleep: Fix handling devices with direct_complete set on errors
| * bc7b5f78 thermal: int340x: Add NULL check for adev
| * ff7d19f4 EDAC/ie31200: Fix the error path order of ie31200_init()
| * 0b420dec EDAC/ie31200: Fix the DIMM size mask for several SoCs
| * 07e74ae7 EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
| * 159b1b94 selinux: Chain up tool resolving errors in install_policy.sh
| * 51c36f0d PM: sleep: Adjust check before setting power.must_resume
| * 183fced9 x86/platform: Only allow CONFIG_EISA for 32-bit
| * 86bcbd11 x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct()
| * bae63372 cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
| * 93df8d07 cpufreq: scpi: compare kHz instead of Hz
| * c4eba6d9 x86/mm/pat: cpa-test: fix length for CPA_ARRAY test
| * 8658c753 watch_queue: fix pipe accounting mismatch
| * 2e539b17 i2c: dev: check return value when calling dev_set_name()
| * 96352360 media: i2c: et8ek8: Don't strip remove function when driver is builtin
| * 6f18079d serial: 8250_dma: terminate correct DMA in tx_dma_flush()
| * 9dfaf4d7 memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
| * 9b76030a net: usb: usbnet: restore usb%d name exception for local mac addresses
| * a34d2524 net: usb: qmi_wwan: add Telit Cinterion FE990B composition
| * efb29ad3 net: usb: qmi_wwan: add Telit Cinterion FN990B composition
| * d211d5d9 tty: serial: 8250: Add some more device IDs
| * 3b9b1cc8 counter: microchip-tcb-capture: Fix undefined counter channel state on probe
| * 6555a926 counter: stm32-lptimer-cnt: fix error handling when enabling
| * 58eb8653 ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx
| * 58ab63d3 netfilter: socket: Lookup orig tuple for IPv6 SNAT
| * 5cc7f929 ARM: Remove address checking for MMUless devices
| * 379cbca0 ARM: 9351/1: fault: Add "cut here" line for prefetch aborts
| * 47308738 ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed()
| * 1505f9b7 atm: Fix NULL pointer dereference
| * 0494bc6a HID: hid-plantronics: Add mic mute mapping and generalize quirks
| * 8ede8a6a ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names
| * 5b4d9d20 drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
| * 72a222b6 soc: qcom: pdr: Fix the potential deadlock
| * 56c8a98c batman-adv: Ignore own maximum aggregation size during RX
| * 6deb9e85 bpf, sockmap: Fix race between element replace and close()
| * baaa50c6 Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
| * 1336b886 drm/amdgpu: Fix even more out of bound writes from debugfs
| * 42fb88d8 ARM: shmobile: smp: Enforce shmobile_smp_* alignment
| * eda27958 proc: fix UAF in proc_get_inode()
| * 3e306e4e mmc: atmel-mci: Add missing clk_disable_unprepare()
| * 3a9c46af regulator: check that dummy regulator has been probed before using it
| * 15eb8b4c drm/v3d: Don't run jobs that have errors flagged in its fence
| * 34354194 i2c: omap: fix IRQ storms
| * ed642b8b net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
| * 8cd90c7d net: atm: fix use after free in lec_send()
| * 45d35070 ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
| * 1bd12dfc ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
| * 1bd68db7 Bluetooth: Fix error code in chan_alloc_skb_cb()
| * 42444f49 RDMA/hns: Fix wrong value of max_sge_rd
| * 461eb4dd RDMA/hns: Fix soft lockup during bt pages loop
| * 79511f70 RDMA/hns: Remove redundant 'phy_addr' in hns_roce_hem_list_find_mtt()
| * 7a3d1b36 RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
| * 7ebb5928 ARM: dts: bcm2711: Don't mark timer regs unconfigured
| * da8d15cc RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx
| * b5f7b222 ARM: dts: bcm2711: PL011 UARTs are actually r1p5
| * 67f498a8 xfrm_output: Force software GSO only in tunnel mode
| * f6db1a83 firmware: imx-scu: fix OF node leak in .probe()
| * 26542291 drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params
| * bb79a283 drm/amd/display: Check for invalid input params when building scaling params
| * 71b1af48 drm/amd/display: fix odm scaling
| * 2bca9523 drm/amd/display: Reject too small viewport size when validating plane
| * b66d6f75 drm/amd/display/dc/core/dc_resource: Staticify local functions
| * eab21737 drm/amd/display: Check plane scaling against format specific hw plane caps.
| * e12b473d i2c: sis630: Fix an error handling path in sis630_probe()
| * 369b1017 i2c: ali15x3: Fix an error handling path in ali15x3_probe()
| * bb3a6e18 i2c: ali1535: Fix an error handling path in ali1535_probe()
| * f27d5627 ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
| * 108633cc drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
| * 61ec81c1 qlcnic: fix memory leak issues in qlcnic_sriov_common.c
| * 06acfdef drm/amd/display: Fix slab-use-after-free on hdcp_work
| * 0174a2e5 drm/amd/display: Assign normalized_pix_clk when color depth = 14
| * 1f1123e6 drm/atomic: Filter out redundant DPMS calls
| * 985a536e x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
| * 89abfad9 USB: serial: option: match on interface class for Telit FN990B
| * 8b5bfa60 USB: serial: option: fix Telit Cinterion FE990A name
| * 9d4ac993 USB: serial: option: add Telit Cinterion FE990B compositions
| * a28dcf38 USB: serial: ftdi_sio: add support for Altera USB Blaster 3
| * 9097f6f2 block: fix 'kmem_cache of name 'bio-108' already exists'
| * 7e8ba774 drm/nouveau: Do not override forced connector status
| * 6b8b70e3 mptcp: safety check before fallback
| * 58ce1812 x86/irq: Define trace events conditionally
| * 20814c46 fuse: don't truncate cached, mutated symlink
| * f8b3beb7 ASoC: tas2764: Set the SDOUT polarity correctly
| * 255bb433 ASoC: tas2764: Fix power control mask
| * b795785d ASoC: tas2770: Fix volume scale
| * 244eef77 nvme: only allow entering LIVE from CONNECTING state
| * be2f5df1 sctp: Fix undefined behavior in left shift operation
| * 2223b729 nvmet-rdma: recheck queue state is LIVE in state lock in recv done
| * f0330a04 ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
| * cf5d83b8 ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
| * 12fa8652 ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
| * a48ba683 thermal/cpufreq_cooling: Remove structure member documentation
| * a4eb3ffd s390/cio: Fix CHPID "configure" attribute caching
| * b6c6c2d8 HID: ignore non-functional sensor in HP 5MP Camera
| * 418a9ce7 HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
| * 9adc841a vboxsf: fix building with GCC 15
| * dd4cb224 alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
| * e66a5be6 ACPI: resource: IRQ override for Eluktronics MECH-17
| * 11a8dac1 scsi: qla1280: Fix kernel oops when debug level > 2
| * f763c82d iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
| * f07aea03 powercap: call put_device() on an error path in powercap_register_control_type()
| * 5ae6c711 hrtimers: Mark is_migration_base() with __always_inline
| * bead9715 nvme-fc: go straight to connecting state when initializing
| * 53da52d3 net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
| * 3fe61bfe netfilter: nft_exthdr: fix offset with ipv4_find_option()
| * 7a82fe67 net_sched: Prevent creation of classes with TC_H_ROOT
| * 4c384a66 ipvs: prevent integer overflow in do_ip_vs_get_ctl()
| * 2a154ce7 netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
| * 15bdd937 net/mlx5: handle errors in mlx5_chains_create_table()
| * 5e6ed018 Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
| * c4be43f4 netpoll: hold rcu read lock in __netpoll_send_skb()
| * ef2bc940 ice: fix memory leak in aRFS after reset
| * 4e318e5e netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
| * 2c3c5ea3 netfilter: nft_ct: fix use after free when attaching zone template
| * f483ed6e netfilter: conntrack: convert to refcount_t api
| * 16f84193 pinctrl: bcm281xx: Fix incorrect regmap max_registers value
| * c05fc165 fbdev: hyperv_fb: iounmap() the correct memory when removing a device
| * 23cf39dc x86/kexec: fix memory leak of elf header buffer
| * 61224533 KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
| * f26422ea ipv6: Fix signed integer overflow in __ip6_append_data
| * 99dd8bfd sched/isolation: Prevent boot crash when the boot CPU is nohz_full
| * 9c096d9a clockevents/drivers/i8253: Fix stop sequence for timer 0
| * df27729a vlan: fix memory leak in vlan_newlink()
* | 7148b8d0 ANDROID: fix build warning in mokvar-table.c
* | cd3fd4ea Revert "NFSD: fix hang in nfsd4_shutdown_callback"
* | b788602e Merge 5.10.235 into android13-5.10-lts
|\|
| * 551461a1 Linux 5.10.235
| * cb9950ea net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels
| * 90d2c935 udf: Fix use of check_add_overflow() with mixed type arguments
| * 421b2640 perf cs-etm: Add missing variable in cs_etm__process_queues()
| * 55d300e7 usb: xhci: Enable the TRB overfetch quirk on VIA VL805
| * 474c73d5 btrfs: bring back the incorrectly removed extent buffer lock recursion support
| * 85e81103 crypto: hisilicon/qm - inject error before stopping queue
| * 01d7fa95 kbuild: userprogs: use correct lld when linking through clang
| * b1a1743a sched: sch_cake: add bounds checks to host bulk flow fairness counts
| * c6acb650 vsock: Orphan socket after transport release
| * e7754d56 vsock: Keep the binding until socket destruction
| * e11d808f bpf, vsock: Invoke proto::close on close()
| * caed2516 Revert "media: uvcvideo: Require entities to have a non-zero unique ID"
| * 653993f4 media: uvcvideo: Remove dangling pointers
| * 3ef93b24 media: uvcvideo: Only save async fh if success
| * f70bd2d8 nilfs2: handle errors that nilfs_prepare_chunk() may return
| * 19dfe647 nilfs2: eliminate staggered calls to kunmap in nilfs_rename
| * db30e16d nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link
| * 07b2ae8a spi-mxs: Fix chipselect glitch
| * 2d007197 mtd: rawnand: cadence: fix unchecked dereference
| * 1cb11ddb eeprom: digsy_mtc: Make GPIO lookup table match the device
| * a32e5198 slimbus: messaging: Free transaction ID in delayed interrupt scenario
| * 3414ddc3 intel_th: pci: Add Panther Lake-P/U support
| * 47220f1e intel_th: pci: Add Panther Lake-H support
| * 16283147 intel_th: pci: Add Arrow Lake support
| * 097715cb mei: me: add panther lake P DID
| * 4a1b6f89 Squashfs: check the inode number is not the invalid value of zero
| * 2cb80807 xhci: pci: Fix indentation in the PCI device ID definitions
| * d7256759 usb: gadget: Check bmAttributes only if configuration is valid
| * 2b3a4faf usb: gadget: Fix setting self-powered state on suspend
| * 1624cd20 usb: gadget: Set self-powered based on MaxPower and bmAttributes
| * 94319fa4 usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
| * 84d46384 usb: typec: ucsi: increase timeout for PPM reset operations
| * 319529e0 usb: atm: cxacru: fix a flaw in existing endpoint checks
| * 394965f9 usb: renesas_usbhs: Flush the notify_hotplug_work
| * 791eb73e usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
| * c15ae155 usb: renesas_usbhs: Use devm_usb_get_phy()
| * 96c4293b usb: renesas_usbhs: Call clk_put()
| * 8813cc1f Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
| * f3328d20 gpio: rcar: Fix missing of_node_put() call
| * cbbd128b net: ipv6: fix missing dst ref drop in ila lwtunnel
| * 81b81dd8 net: ipv6: fix dst ref loop in ila lwtunnel
| * bcc9162d net-timestamp: support TCP GSO case for a few missing flags
| * fa40ebef vlan: enforce underlying device type
| * 2f591cb1 ppp: Fix KMSAN uninit-value warning with bpf
| * 7cfae862 be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
| * 0afa62fc drm/sched: Fix preprocessor guard
| * 73bd81d2 hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
| * 13f3f872 llc: do not use skb_get() before dev_queue_xmit()
| * 8b530798 ALSA: usx2y: validate nrpacks module parameter on probe
| * d6f5c69b hwmon: (ad7314) Validate leading zero bits and return error
| * 7a2f931a hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
| * bababb69 hwmon: (pmbus) Initialise page count in pmbus_identify()
| * 7b5fe589 caif_virtio: fix wrong pointer check in cfv_probe()
| * a2d1cca9 net: gso: fix ownership in __udp_gso_segment
| * ca63d883 nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
| * d3faae7f HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
| * 02dd9d31 HID: google: fix unused variable warning under !CONFIG_ACPI
| * c0e626f2 wifi: iwlwifi: limit printed string from FW file
| * a1ffae9d mm/page_alloc: fix uninitialized variable
| * 6ff79d06 block: fix conversion of GPT partition name to 7-bit
| * 2e43d6db s390/traps: Fix test_monitor_call() inline assembly
| * 88ddad53 rapidio: fix an API misues when rio_add_net() fails
| * 4f3509cf rapidio: add check for rio_add_net() in rio_scan_alloc_net()
| * 351eb7ac wifi: nl80211: reject cooked mode if it is set along with other flags
| * da3f5995 wifi: cfg80211: regulatory: improve invalid hints checking
| * 510e5f8a x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
| * 2684c915 x86/cpu: Validate CPUID leaf 0x2 EDX output
| * 925b9a7b x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
| * e16f88ae platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
| * 3b1d9276 drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
| * adea597f ALSA: hda/realtek: update ALC222 depop optimize
| * 47862075 ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
| * fd6aa1f8 gpio: aggregator: protect driver attr handlers against module unload
| * 0df1ac8e HID: appleir: Fix potential NULL dereference at raw event handle
| * f23a7440 Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'"
| * 46c0454f efi: Don't map the entire mokvar table to determine its size
| * e06e0fc2 drm/amdgpu: disable BAR resize on Dell G5 SE
| * 515f06ee drm/amdgpu: Check extended configuration space register when system uses large bar
| * f277e479 smb: client: Add check for next_buffer in receive_encrypted_standard()
| * b03782ae acct: perform last write from workqueue
| * 2065b03e kernel/acct.c: use dedicated helper to access rlimit values
| * a96692f0 kernel/acct.c: use #elif instead of #end and #elif
| * 29f9cdca drop_monitor: fix incorrect initialization order
| * 7a9723ec pfifo_tail_enqueue: Drop new packet when sch->limit == 0
| * 8045b302 intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly
| * 1651f573 sched/core: Prevent rescheduling when interrupts are disabled
| * c348280e vmlinux.lds: Ensure that const vars with relocations are mapped R/O
| * 494ec285 mptcp: always handle address removal under msk socket lock
| * ad04fcee phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk
| * eb0f0d4d phy: tegra: xusb: reset VBUS & ID OVERRIDE
| * 24dd9711 usbnet: gl620a: fix endpoint checking in genelink_bind()
| * f32d7b4d i2c: npcm: disable interrupt enable bit before devm_request_irq
| * e4c50d26 perf/core: Fix low freq setting via IOC_PERIOD
| * ca381f60 ftrace: Avoid potential division by zero in function_stat_show()
| * 42b5b506 x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems
| * e78b5441 net: ipv6: fix dst ref loop on input in rpl lwt
| * b26f015d net: ipv6: rpl_iptunnel: mitigate 2-realloc issue
| * ae4a0483 include: net: add static inline dst_dev_overhead() to dst.h
| * 8dd2086c net: use indirect call helpers for dst_output
| * 20949620 net: use indirect call helpers for dst_input
| * 4c0e051d net: ipv6: rpl_iptunnel: simplify the return expression of rpl_do_srh()
| * ccee8ab6 net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination.
| * abc6a794 tcp: Defer ts_recent changes until req is owned
| * d56f7c08 ipvs: Always clear ipvs_property flag in skb_scrub_packet()
| * f88e9ccf ASoC: es8328: fix route from DAC to output
| * 41699e52 net: cadence: macb: Synchronize stats calculations
| * 4fdd9537 net: loopback: Avoid sending IP packets without an Ethernet header
| * 9e441462 Bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response
| * fed49c96 ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports
| * 88e22cab sunrpc: suppress warnings for unused procfs functions
| * 175e2911 RDMA/mlx5: Fix bind QP error cleanup flow
| * 9bb2f901 IB/mlx5: Set and get correct qp_num for a DCT QP
| * 21288f87 x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit
| * 687382aa mtd: rawnand: cadence: fix incorrect device in dma_unmap_single
| * 0cae7c28 mtd: rawnand: cadence: use dma_map_resource for sdma address
| * 7eff4ec2 mtd: rawnand: cadence: fix error code in cadence_nand_init()
| * 524fb2b8 acct: block access to kernel internal filesystems
| * 28835869 ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED
| * e976ea6c nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()
| * 0180cf03 tee: optee: Fix supplicant wait loop
| * 3ca0463b bpf: skip non exist keys in generic_map_lookup_batch
| * d5066511 power: supply: da9150-fg: fix potential overflow
| * c0d512a8 flow_dissector: Fix port range key handling in BPF conversion
| * 25bba7ae flow_dissector: Fix handling of mixed port and port-range keys
| * f555aa61 net: extract port range fields from fl_flow_key
| * ba2402f2 geneve: Suppress list corruption splat in geneve_destroy_tunnels().
| * 33eb925c gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().
| * 5a0538ac geneve: Fix use-after-free in geneve_find_dev().
| * f8d4c5b6 powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC
| * a2bf0e27 ALSA: hda/realtek: Fixup ALC225 depop procedure
| * 138cbc30 powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline
| * 91550c6d powerpc/64s/mm: Move __real_pte stubs into hash-4k.h
| * 1f109234 USB: gadget: f_midi: f_midi_complete to call queue_work
| * 3635523e usb/gadget: f_midi: Replace tasklet with work
| * dd232fd6 usb: dwc3: Fix timeout issue during controller enter/exit from halt state
| * 90e2820c usb: dwc3: Increase DWC3 controller halt timeout
| * a0019971 batman-adv: Drop unmanaged ELP metric worker
| * cbd4d407 batman-adv: Drop initialization of flexible ethtool_link_ksettings
| * 596201a3 batman-adv: Add new include for min/max helpers
| * a676c040 tpm: Change to kvalloc() in eventlog/acpi.c
| * 9890bd6a tpm: Use managed allocation for bios event log
| * 03db7997 drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event()
| * b09a1490 drm/probe-helper: Create a HPD IRQ event helper for a single connector
| * 11039985 memcg: fix soft lockup in the OOM process
| * aff9e489 mm: update mark_victim tracepoints fields
| * e4c5b0fc crypto: testmgr - some more fixes to RSA test vectors
| * c878aed1 crypto: testmgr - populate RSA CRT parameters in RSA test vectors
| * 3ac082a0 crypto: testmgr - fix version number of RSA tests
| * 7ec888b2 crypto: testmgr - Fix wrong test case of RSA
| * 87ea3e29 crypto: testmgr - fix wrong key length for pkcs1pad
| * f6100701 arm64: mte: Do not allow PROT_MTE on MAP_HUGETLB user mappings
| * 0e5919d0 nvme-pci: fix multiple races in nvme_setup_io_queues
| * 1e973465 vlan: move dev_put into vlan_dev_uninit
| * 62d7ad2c vlan: introduce vlan_dev_free_egress_priority
| * edf287bc ima: Fix use-after-free on a dentry's dname.name
| * 1a7735ab pps: Fix a use-after-free
| * 339ee27e btrfs: avoid monopolizing a core when activating a swap file
| * c093749b Revert "btrfs: avoid monopolizing a core when activating a swap file"
| * eab8746d x86/i8253: Disable PIT timer 0 when not in use
| * 7be13b73 f2fs: fix to wait dio completion
| * 42065e34 selftests: rtnetlink: update netdevsim ipsec output format
| * 9bed3f66 netdevsim: print human readable IP address
| * f08cfd1f parport_pc: add support for ASIX AX99100
| * 015e26c7 serial: 8250_pci: add support for ASIX AX99100
| * 8bcd8a76 can: ems_pci: move ASIX AX99100 ids to pci_ids.h
| * 72cf688d nilfs2: protect access to buffers with no active references
| * 4d042811 nilfs2: do not force clear folio if buffer is referenced
| * 95c96b95 nilfs2: do not output warnings when clearing dirty buffers
| * 29ecfd43 alpha: replace hardcoded stack offsets with autogenerated ones
| * 507dcb0c x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0
| * 392d2826 kdb: Do not assume write() callback available
| * 31115d1e drm/tidss: Clear the interrupt status for interrupts being disabled
| * 0a6161a3 drm/tidss: Fix issue in irq handling causing irq-flood issue
| * 4d576202 ndisc: extend RCU protection in ndisc_send_skb()
| * a8816b3f openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
| * 307cd1e2 arp: use RCU protection in arp_xmit()
| * 8666e9aa neighbour: use RCU protection in __neigh_notify()
| * 650864ae neighbour: delete redundant judgment statements
| * c30893ef ndisc: use RCU protection in ndisc_alloc_skb()
| * d02f30d2 ipv6: use RCU protection in ip6_default_advmss()
| * c7665524 ipv4: use RCU protection in inet_select_addr()
| * 93182c21 ipv4: use RCU protection in rt_is_expired()
| * 0c009aaa net: add dev_net_rcu() helper
| * 7f56db2b net: treat possible_net_t net pointer as an RCU one and add read_pnet_rcu()
| * d9c217fa clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context
| * 2d7b140f clocksource: Use pr_info() for "Checking clocksource synchronization" message
| * 9d31e111 clocksource: Replace cpumask_weight() with cpumask_empty()
| * f420d5ab clocksource: Replace deprecated CPU-hotplug functions.
| * 91a6562c clocksource: Limit number of CPUs checked for clock synchronization
| * 241b5f0f mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw()
| * a23bd544 arm64: Handle .ARM.attributes section in linker scripts
| * c3761c78 regmap-irq: Add missing kfree()
| * 213ba5bd partitions: mac: fix handling of bogus partition table
| * ade914be gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock
| * 08613fb9 alpha: align stack for page fault and user unaligned trap handlers
| * 7c47e637 serial: 8250: Fix fifo underflow on flush
| * a387fb2f efi: Avoid cold plugged memory for placing the kernel
| * 16c151af alpha: make stack 16-byte aligned (most cases)
| * b6256a62 can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero
| * dfbf2848 can: c_can: fix unbalanced runtime PM disable in error path
| * 69ff9fe2 USB: serial: option: drop MeiG Smart defines
| * b144eb76 USB: serial: option: fix Telit Cinterion FN990A name
| * af687711 USB: serial: option: add Telit Cinterion FN990B compositions
| * c810d5f0 USB: serial: option: add MeiG Smart SLM828
| * 427da423 usb: cdc-acm: Fix handling of oversized fragments
| * 90dd2f1b usb: cdc-acm: Check control transfer buffer size before access
| * d9c27bd1 USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk
| * d343fe0f USB: hub: Ignore non-compliant devices with too many configs or interfaces
| * 9f36a89d usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
| * 9df01382 USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone
| * d8e78d35 USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist
| * df717285 usb: core: fix pipe creation for get_bMaxPacketSize0
| * 328d3dfb USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI
| * 0458e65b usb: dwc2: gadget: remove of_node reference upon udc_stop
| * ceb5bb55 usb: gadget: udc: renesas_usb3: Fix compiler warning
| * a303068a usb: roles: set switch registered flag early on
| * 142d9140 perf/x86/intel: Ensure LBRs are disabled when a CPU is starting
| * e58c817c batman-adv: Ignore neighbor throughput metrics in error case
| * ce3f1545 batman-adv: fix panic during interface removal
| * 29d7cf7e ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V
| * 09d472a1 orangefs: fix a oob in orangefs_debug_write
| * a879019f Grab mm lock before grabbing pt lock
| * 6da3d0bc vfio/pci: Enable iowrite64 and ioread64 for vfio pci
| * 40ebe3cf PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P
| * 52d3512f media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
| * f4eb7fb2 media: cxd2841er: fix 64-bit division on gcc-9
| * cde441a6 x86/xen: allow larger contiguous memory regions in PV guests
| * 26e9f5c9 xen: remove a confusing comment on auto-translated guest I/O
| * 2e54d798 gpio: bcm-kona: Add missing newline to dev_err format string
| * 7d487369 gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ
| * 8193bd82 gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0
| * e4fde331 arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
| * 7f5af50f team: better TEAM_OPTION_TYPE_STRING validation
| * 20a3489b vrf: use RCU protection in l3mdev_l3_out()
| * 1e1d11a9 ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu()
| * a6bfd385 HID: multitouch: Add NULL check in mt_input_configured
| * abed6802 NFSD: fix hang in nfsd4_shutdown_callback
| * 8a1737ae nfsd: clear acl_access/acl_default after releasing them
| * 152a663f mptcp: prevent excessive coalescing on receive
| * f34a875e ocfs2: check dir i_size in ocfs2_find_entry
| * 23f48b56 MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static
| * 9df3a928 ptp: Ensure info->enable callback is always set
| * bc114b72 net/ncsi: wait for the last response to Deselect Package before configuring channel
| * 49a69e13 misc: fastrpc: Fix registered buffer page address
| * e39e7958 mtd: onenand: Fix uninitialized retlen in do_otp_read()
| * 674e17c5 NFC: nci: Add bounds checking in nci_hci_create_pipe()
| * 58b1c688 nilfs2: fix possible int overflows in nilfs_fiemap()
| * afa8003f ocfs2: handle a symlink read error correctly
| * c999d9ba ocfs2: fix incorrect CPU endianness conversion causing mount failure
| * 26259b44 pnfs/flexfiles: retry getting layout segment for reads
| * ed81d82b vfio/platform: check the bounds of read/write syscalls
| * 61717062 nvmem: core: improve range check for nvmem_cell_write()
| * 51c7001d nvmem: qcom-spmi-sdam: Set size in struct nvmem_config
| * 9e403fea crypto: qce - unregister previously registered algos in error path
| * e063d1d5 crypto: qce - fix goto jump in error path
| * 583793b1 media: uvcvideo: Remove redundant NULL assignment
| * 5681e1cb media: uvcvideo: Fix event flags in uvc_ctrl_send_events
| * d8ff1432 media: ov5640: fix get_light_freq on auto
| * 052a33c0 media: mc: fix endpoint iteration
| * a30a686e soc: qcom: smem_state: fix missing of_node_put in error path
| * 476ccb7a iio: light: as73211: fix channel handling in only-color triggered buffer
| * 622bae0f x86/boot: Use '-std=gnu11' to fix build with GCC 15
| * 8fc87604 kbuild: Move -Wenum-enum-conversion to W=2
| * a48b8564 scsi: storvsc: Set correct data length for sending SCSI command without payload
| * 3a5a7894 scsi: qla2xxx: Move FCE Trace buffer allocation to user control
| * 80724ed8 ALSA: hda/realtek: Enable headset mic on Positivo C6400
| * ad4dd8f5 dm-crypt: track tag_offset in convert_context
| * f3546ff9 dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit()
| * 25dfe181 powerpc/pseries/eeh: Fix get PE state translation
| * 23a32b7a serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use
| * e176a9c5 serial: sh-sci: Drop __initdata macro for port_cfg
| * 2495c659 soc: qcom: socinfo: Avoid out of bounds read of serial number
| * b6358f4c usb: gadget: f_tcm: Don't prepare BOT write request twice
| * 3fba3523 usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint
| * b77748d7 usb: gadget: f_tcm: Decrement command ref count on cleanup
| * b8b131c6 usb: gadget: f_tcm: Translate error to sense
| * 59ff4fa6 wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
| * c99e0a75 wifi: rtlwifi: rtl8821ae: Fix media status report
| * d6c62954 HID: hid-sensor-hub: don't use stale platform-data on remove
| * f26782f1 of: reserved-memory: Fix using wrong number of cells to get property 'alignment'
| * e6797f2b of: Fix of_find_node_opts_by_path() handling of alias+path+options
| * 9e155e82 of: Correct child specifier used as input of the 2nd nexus node
| * c0b865e2 perf bench: Fix undefined behavior in cmpworker()
| * 943d8fa1 efi: libstub: Use '-std=gnu11' to fix build with GCC 15
| * ffb494f1 blk-cgroup: Fix class @block_class's subsystem refcount leakage
| * d4a35dcb clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate
| * 623e4ea8 clk: qcom: clk-alpha-pll: fix alpha mode configuration
| * bcad38d7 clk: sunxi-ng: a100: enable MMC clock reparenting
| * 24f64a42 Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection
| * 8e605f58 Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
| * 05e510e2 drm/komeda: Add check for komeda_get_layer_fourcc_list()
| * c533a9c2 KVM: s390: vsie: fix some corner-cases when grabbing vsie pages
| * 09d50ccf KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
| * da720521 arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma
| * 6fb98e05 binfmt_flat: Fix integer overflow bug on 32 bit systems
| * aff0b7cf m68k: vga: Fix I/O defines
| * 3e5ffe0d s390/futex: Fix FUTEX_OP_ANDN implementation
| * 3f76f75e drm/modeset: Handle tiled displays in pan_display_atomic.
| * 9c0f70f8 leds: lp8860: Write full EEPROM, not only half of it
| * 501e9791 cpufreq: s3c64xx: Fix compilation warning
| * e522c21d tun: revert fix group permission check
| * 7f31d74f netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
| * 62456bd9 x86/xen: add FRAME_END to xen_hypercall_hvm()
| * d80e4842 x86/xen: fix xen_hypercall_hvm() to not clobber %rbx
| * ed00c5f9 net: rose: lock the socket in rose_bind()
| * e3671062 net: atlantic: fix warning during hot unplug
| * 70efcbb4 gpio: pca953x: Improve interrupt support
| * 41e185f5 udp: gso: do not drop small packets when PMTU reduces
| * bc5dc5f0 tg3: Disable tg3 PCIe AER on system reboot
| * c7f54466 gpu: drm_dp_cec: fix broken CEC adapter properties check
| * 7736b17b firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry
| * 15ab2cf7 nvme: handle connectivity loss in nvme_set_queue_count
* | e0b88ee5 Merge b4425395 ("usb: xhci: Fix NULL pointer dereference on certain command aborts") into android13-5.10-lts
|\|
| * b4425395 usb: xhci: Fix NULL pointer dereference on certain command aborts
* | 029f52de Revert "usb: xhci: Add timeout argument in address_device USB HCD callback"
* | 142a7cf8 Merge 5fed2108 ("usb: xhci: Add timeout argument in address_device USB HCD callback") into android13-5.10-lts
|\|
| * 5fed2108 usb: xhci: Add timeout argument in address_device USB HCD callback
* | 2afb6720 Merge 8f78a2b9 ("net: usb: rtl8150: enable basic endpoint checking") into android13-5.10-lts
|\|
| * 8f78a2b9 net: usb: rtl8150: enable basic endpoint checking
| * b1bfdfab net: usb: rtl8150: use new tasklet API
| * 213b3407 x86/mm: Don't disable PCID when INVLPG has been fixed by microcode
| * 76e69a8e Input: allocate keycode for phone linking
| * 0494817d selftests/net/ipsec: Fix Null pointer dereference in rtattr_pack()
| * ee04adf9 tipc: re-order conditions in tipc_crypto_key_rcv()
| * a3a9c515 mmc: sdhci-msm: Correctly set the load for the regulator
| * 50cd42e6 APEI: GHES: Have GHES honor the panic= setting
| * 5f9e7397 i2c: Force ELAN06FA touchpad I2C bus freq to 100KHz
| * 4f4cf2b2 net/mlx5: use do_aux_work for PHC overflow checks
| * b280e05c HID: Wacom: Add PCI Wacom device support
| * 23687460 mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id
| * f6b37b3e tomoyo: don't emit warning in tomoyo_write_control()
| * 13ef16c4 wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy()
| * d97d809a mmc: core: Respect quirk_max_rate for non-UHS SDIO card
| * 931ba6b9 tun: fix group permission check
| * 976284b9 safesetid: check size of policy writes
| * dfb7b179 printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
| * fa05c3a7 x86/amd_nb: Restrict init function to AMD-based systems
| * 52ecfa7c lockdep: Fix upper limit for LOCKDEP_*_BITS configs
| * ccef5dc3 sched: Don't try to catch up excess steal time.
| * 30d47240 btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling
| * c7a53757 btrfs: fix use-after-free when attempting to join an aborted transaction
| * 0f2587a0 btrfs: output the reason for open_ctree() failure
| * 38229c35 usb: gadget: f_tcm: Don't free command immediately
| * 87522ef1 media: uvcvideo: Fix double free in error path
| * 05dd7d10 HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections
| * ff98b6a9 usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE
| * 3f60d759 usb: gadget: f_tcm: Fix Get/SetInterface return value
| * 41822c1d drivers/card_reader/rtsx_usb: Restore interrupt based detection
| * a853b361 ktest.pl: Check kernelrelease return in get_version
| * 6b467c8f netfilter: nf_tables: reject mismatching sum of field_len with set key length
| * dfeb38a6 NFSD: Reset cb_seq_status after NFS4ERR_DELAY
| * 1601007c hexagon: Fix unbalanced spinlock in die()
| * 7f2e4877 hexagon: fix using plain integer as NULL pointer warning in cmpxchg
| * a13772b4 genksyms: fix memory leak when the same symbol is read from *.symref file
| * f34bbd20 genksyms: fix memory leak when the same symbol is added from source
| * d11aabf4 net: hsr: fix fill_frame_info() regression vs VLAN packets
| * 1c0aef67 net: sh_eth: Fix missing rtnl lock in suspend/resume path
| * d94d613a bgmac: reduce max frame size to support just MTU 1500
| * 11582ef4 vsock: Allow retrying on connect() failure
| * e0bf5708 perf trace: Fix runtime error of index out of bounds
| * a53cb720 net: davicom: fix UAF in dm9000_drv_remove
| * d9a70791 net: netdevsim: try to close UDP port harness races
| * 0d5bca3b net: rose: fix timer races against user threads
| * 98e74da1 PM: hibernate: Add error handling for syscore_suspend()
| * 53df27fd ipmr: do not call mr_mfc_uses_dev() for unres entries
| * ef252f20 net: fec: implement TSO descriptor cleanup
| * 622d92a6 net: hns3: fix oops when unload drivers paralleling
| * 6211c11f ubifs: skip dumping tnc tree when zroot is null
| * 6f2a8ca9 rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
| * 7e14ab3b dmaengine: ti: edma: fix OF node reference leaks in edma_driver
| * 1528765e xfrm: replay: Fix the update of replay_esn->oseq_hi for GSO
| * 3ac4439b tools/bootconfig: Fix the wrong format specifier
| * fc221316 NFSv4.2: fix COPY_NOTIFY xdr buf size calculation
| * 68fa7eae module: Extend the preempt disabled section in dereference_symbol_descriptor().
| * 08c89760 ocfs2: mark dquot as inactive if failed to start trans while releasing dquot
| * 10a20852 scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails
| * 337ec8ca scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1
| * 7a47e14c PCI: rcar-ep: Fix incorrect variable used when calling devm_request_mem_region()
| * 83d75cf9 staging: media: imx: fix OF node leak in imx_media_add_of_subdevs()
| * aaae1818 mtd: hyperbus: hbmc-am654: fix an OF node reference leak
| * 8d98660b media: uvcvideo: Propagate buf->error to userspace
| * 644fec4c media: camif-core: Add check for clk_enable()
| * 5d28c53f media: mipi-csis: Add check for clk_enable()
| * 8bae2ad6 media: marvell: Add check for clk_enable()
| * 2aaf5bc7 PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy()
| * f9e1a701 media: lmedm04: Handle errors for lme2510_int_read
| * ac66f922 media: lmedm04: Use GFP_KERNEL for URB allocation/submission.
| * ba7a42df media: rc: iguanair: handle timeouts
| * 52e6c295 fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device()
| * a303b24a ARM: dts: mediatek: mt7623: fix IR nodename
| * fa954b59 arm64: dts: qcom: sm8250: correct sleep clock frequency
| * 2aa7b06f arm64: dts: qcom: msm8994: correct sleep clock frequency
| * 8c7447fd arm64: dts: qcom: msm8916: correct sleep clock frequency
| * 58e1bb5a arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names
| * da978b53 arm64: dts: mediatek: mt8173-elm: Fix MT6397 PMIC sub-node names
| * 82ff7ee5 arm64: dts: mediatek: mt8173-elm: Drop regulator-compatible property
| * d4ff7afe arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property
| * d64148a1 rdma/cxgb4: Prevent potential integer overflow on 32bit
| * 47dbdfb2 RDMA/mlx4: Avoid false error about access to uninitialized gids array
| * 3ade8294 arm64: dts: mediatek: mt8516: reserve 192 KiB for TF-A
| * a318835b arm64: dts: mediatek: mt8516: add i2c clock-div property
| * e6f2834a arm64: dts: mediatek: mt8516: remove 2 invalid i2c clocks
| * 4ee01821 arm64: dts: mediatek: mt8516: fix wdt irq type
| * c85f0ae8 arm64: dts: mediatek: mt8516: fix GICv2 range
| * f4f1b116 padata: avoid UAF for reorder_work
| * 75a31aff padata: add pd get/put refcnt helper
| * f78170be padata: fix UAF in padata_reorder
| * ce51eab2 bpf: Send signals asynchronously if !preemptible
| * de559aaa perf report: Fix misleading help message about --demangle
| * 8bd2cbf0 perf top: Don't complain about lack of vmlinux when not resolving some kernel samples
| * bc6a38a7 padata: fix sysfs store callback check
| * 6a19e9a4 ktest.pl: Remove unused declarations in run_bisect_test function
| * 646221ef perf bpf: Fix two memory leakages when calling perf_env__insert_bpf_prog_info()
| * d6d4ba7c perf env: Conditionally compile BPF support code on having HAVE_LIBBPF_SUPPORT
| * a52e573c perf header: Fix one memory leakage in process_bpf_prog_info()
| * 13f7e5b1 perf header: Fix one memory leakage in process_bpf_btf()
| * a6e27a9b ASoC: sun4i-spdif: Add clock multiplier settings
| * ac75f4e1 tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind
| * 4bdd4499 net/rose: prevent integer overflows in rose_setsockopt()
| * 321990fd net: ethernet: ti: am65-cpsw: fix freeing IRQ in am65_cpsw_nuss_remove_tx_chns()
| * fe18c21d net: sched: Disallow replacing of child qdisc from one parent to another
| * 47c4b079 net/mlxfw: Drop hard coded max FW flash image size
| * c337c088 net: let net.core.dev_weight always be non-zero
| * 7794f44c pwm: stm32: Add check for clk_enable()
| * eaf756c4 clk: analogbits: Fix incorrect calculation of vco rate delta
| * e7d017ef wifi: cfg80211: adjust allocation of colocated AP data
| * 7b881995 wifi: cfg80211: Handle specific BSSID in 6GHz scanning
| * 197418c3 selftests: harness: fix printing of mismatch values in __EXPECT()
| * c5f32589 cpufreq: ACPI: Fix max-frequency computation
| * c768e730 wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO
| * bfe59ae7 net/smc: fix data error when recvmsg with MSG_PEEK flag
| * f2bcc398 wifi: wlcore: fix unbalanced pm_runtime calls
| * 1d8593a5 regulator: of: Implement the unwind path of of_regulator_match()
| * 62ff1615 team: prevent adding a device which is already a team device lower
| * 1f0641f9 clk: imx8mp: Fix clkout1/2 support
| * bccf2464 cpufreq: schedutil: Fix superfluous updates caused by need_freq_update
* | 094fc377 Merge 9d091e87 ("cpufreq: schedutil: Simplify sugov_update_next_freq()") into android13-5.10-lts
|\|
| * 9d091e87 cpufreq: schedutil: Simplify sugov_update_next_freq()
* | fc9aa814 Merge 51b34226 ("leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata()") into android13-5.10-lts
|\|
| * 51b34226 leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata()
| * 55254bc0 cpupower: fix TSC MHz calculation
| * 225e8411 ACPI: fan: cleanup resources in the error path of .probe()
| * 7be8dd42 wifi: rtlwifi: pci: wait for firmware loading before releasing memory
| * 455e0f40 wifi: rtlwifi: fix memory leaks and invalid access at probe error path
| * c35b3164 wifi: rtlwifi: destroy workqueue at rtl_deinit_core
| * 1b9cbd8a wifi: rtlwifi: remove unused check_buddy_priv
| * 8313adcc wifi: rtlwifi: remove unused dualmac control leftovers
| * 36f97dcb wifi: rtlwifi: remove unused timer and related code
| * 3f024e12 rtlwifi: replace usage of found with dedicated list iterator variable
| * c9631129 dt-bindings: mmc: controller: clarify the address-cells description
| * 9ca9cfd0 spi: zynq-qspi: Add check for clk_enable()
| * 7ee19035 wifi: rtlwifi: usb: fix workqueue leak when probe fails
| * 8e051a32 wifi: rtlwifi: fix init_sw_vars leak when probe fails
| * f0b54846 wifi: rtlwifi: wait for firmware loading before releasing memory
| * 8993a5af rtlwifi: remove redundant assignment to variable err
| * cc5f444d wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step
| * 15473990 wifi: rtlwifi: do not complete firmware loading needlessly
| * caac5203 ipmi: ipmb: Add check devm_kasprintf() returned value
| * 7cced5fc genirq: Make handle_enforce_irqctx() unconditionally available
| * c47066ed drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table
| * 8f708a04 drm/etnaviv: Fix page property being used for non writecombine buffers
| * de4d0fd9 afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call
| * 59ebff2a select: Fix unbalanced user_access_end()
| * 27793f97 partitions: ldm: remove the initial kernel-doc notation
| * 957d6e50 nvme: Add error check for xa_store in nvme_get_effects_log
| * 6bef6222 nbd: don't allow reconnect after disconnect
| * 2e5246e6 afs: Fix directory format encoding struct
| * 643e6e8d afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY
* 3f5f2283 Merge branch 'android13-5.10' into android13-5.10-lts

Change-Id: Iebc312f0e6a9019b2acd573772db2866db47951b
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>