Merge 5.10.227 into android13-5.10-lts

Changes in 5.10.227
	usb: dwc3: Decouple USB 2.0 L1 & L2 events
	usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after resume bug
	usb: dwc3: core: update LC timer as per USB Spec V3.2
	usbnet: ipheth: fix carrier detection in modes 1 and 4
	net: ethernet: use ip_hdrlen() instead of bit shift
	net: phy: vitesse: repair vsc73xx autonegotiation
	powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
	btrfs: update target inode's ctime on unlink
	Input: ads7846 - ratelimit the spi_sync error message
	Input: synaptics - enable SMBus for HP Elitebook 840 G2
	scripts: kconfig: merge_config: config files: add a trailing newline
	drm/msm/adreno: Fix error return if missing firmware-name
	Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
	NFS: Avoid unnecessary rescanning of the per-server delegation list
	arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
	minmax: reduce min/max macro expansion in atomisp driver
	hwmon: (pmbus) Introduce and use write_byte_data callback
	hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev >= 1.2
	ice: fix accounting for filters shared by multiple VSIs
	net/mlx5: Update the list of the PCI supported devices
	net/mlx5e: Add missing link modes to ptys2ethtool_map
	fou: fix initialization of grc
	net: ftgmac100: Enable TX interrupt to avoid TX timeout
	net: dpaa: Pad packets to ETH_ZLEN
	spi: nxp-fspi: fix the KASAN report out-of-bounds bug
	soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
	ASoC: meson: axg-card: fix 'use-after-free'
	dma-buf: heaps: Fix off-by-one in CMA heap fault handler
	ASoC: allow module autoloading for table db1200_pids
	ALSA: hda/realtek - Fixed ALC256 headphone no sound
	ALSA: hda/realtek - FIxed ALC285 headphone no sound
	pinctrl: at91: make it work with current gpiolib
	microblaze: don't treat zero reserved memory regions as error
	net: ftgmac100: Ensure tx descriptor updates are visible
	wifi: iwlwifi: lower message level for FW buffer destination
	wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
	ASoC: intel: fix module autoloading
	ASoC: tda7419: fix module autoloading
	drm: komeda: Fix an issue related to normalized zpos
	spi: bcm63xx: Enable module autoloading
	x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
	ocfs2: add bounds checking to ocfs2_xattr_find_entry()
	ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
	cgroup: Make operations on the cgroup root_list RCU safe
	netfilter: nft_set_pipapo: walk over current view on netlink dump
	netfilter: nf_tables: missing iterator type in lookup walk
	gpio: prevent potential speculation leaks in gpio_device_get_desc()
	mptcp: export lookup_anno_list_by_saddr
	mptcp: validate 'id' when stopping the ADD_ADDR retransmit timer
	mptcp: pm: Fix uaf in __timer_delete_sync
	inet: inet_defrag: prevent sk release while still in use
	x86/ibt,ftrace: Search for __fentry__ location
	ftrace: Fix possible use-after-free issue in ftrace_location()
	gpiolib: cdev: Ignore reconfiguration without direction
	cgroup: Move rcu_head up near the top of cgroup_root
	usb: dwc3: Fix a typo in field name
	USB: serial: pl2303: add device id for Macrosilicon MS3020
	USB: usbtmc: prevent kernel-usb-infoleak
	wifi: rtw88: always wait for both firmware loading attempts
	ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
	fs: explicitly unregister per-superblock BDIs
	mount: warn only once about timestamp range expiration
	fs/namespace: fnic: Switch to use %ptTd
	mount: handle OOM on mnt_warn_timestamp_expiry
	padata: Honor the caller's alignment in case of chunk_size 0
	can: j1939: use correct function name in comment
	netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
	netfilter: nf_tables: reject element expiration with no timeout
	netfilter: nf_tables: reject expiration higher than timeout
	cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
	wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
	wifi: mt76: mt7915: fix rx filter setting for bfee functionality
	wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
	wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
	wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
	sock_map: Add a cond_resched() in sock_hash_free()
	can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
	can: m_can: Add support for transceiver as phy
	can: m_can: m_can_close(): stop clocks after device has been shut down
	Bluetooth: btusb: Fix not handling ZPL/short-transfer
	bareudp: allow redirecting bareudp packets to eth devices
	bareudp: Pull inner IP header in bareudp_udp_encap_recv().
	net: geneve: support IPv4/IPv6 as inner protocol
	geneve: Fix incorrect inner network header offset when innerprotoinherit is set
	bareudp: Pull inner IP header on xmit.
	net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
	r8169: disable ALDPS per default for RTL8125
	net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
	net: tipc: avoid possible garbage value
	block, bfq: fix possible UAF for bfqq->bic with merge chain
	block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
	block, bfq: don't break merge chain in bfq_split_bfqq()
	block: print symbolic error name instead of error code
	block: fix potential invalid pointer dereference in blk_add_partition
	spi: ppc4xx: handle irq_of_parse_and_map() errors
	spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
	ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
	ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
	ARM: versatile: fix OF node leak in CPUs prepare
	reset: berlin: fix OF node leak in probe() error path
	clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
	m68k: Fix kernel_clone_args.flags in m68k_clone()
	hwmon: (max16065) Fix overflows seen when writing limits
	device property: Add const qualifier to device_get_match_data() parameter
	i2c: Add i2c_get_match_data()
	hwmon: (max16065) Remove use of i2c_match_id()
	hwmon: (max16065) Fix alarm attributes
	mtd: slram: insert break after errors in parsing the map
	hwmon: (ntc_thermistor) fix module autoloading
	power: supply: axp20x_battery: allow disabling battery charging
	power: supply: axp20x_battery: Remove design from min and max voltage
	power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
	fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
	mtd: powernv: Add check devm_kasprintf() returned value
	drm/stm: Fix an error handling path in stm_drm_platform_probe()
	drm/amdgpu: Replace one-element array with flexible-array member
	drm/amdgpu: properly handle vbios fake edid sizing
	drm/radeon: Replace one-element array with flexible-array member
	drm/radeon: properly handle vbios fake edid sizing
	drm/rockchip: vop: Allow 4096px width scaling
	drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
	drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
	jfs: fix out-of-bounds in dbNextAG() and diAlloc()
	drm/msm: Fix incorrect file name output in adreno_request_fw()
	drm/msm/a5xx: disable preemption in submits by default
	drm/msm/a5xx: properly clear preemption records on resume
	drm/msm/a5xx: fix races in preemption evaluation stage
	drm/msm: Add priv->mm_lock to protect active/inactive lists
	drm/msm: Drop priv->lastctx
	drm/msm/a5xx: workaround early ring-buffer emptiness check
	ipmi: docs: don't advertise deprecated sysfs entries
	drm/msm: fix %s null argument error
	drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
	xen: use correct end address of kernel for conflict checking
	xen/swiotlb: add alignment check for dma buffers
	tpm: Clean up TPM space after command failure
	selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
	selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
	selftests/bpf: Fix compiling kfree_skb.c with musl-libc
	selftests/bpf: Fix compiling flow_dissector.c with musl-libc
	selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
	selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
	selftests/bpf: Fix error compiling test_lru_map.c
	selftests/bpf: Fix C++ compile error from missing _Bool type
	xz: cleanup CRC32 edits from 2018
	kthread: add kthread_work tracepoints
	kthread: fix task state in kthread worker if being frozen
	ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
	smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
	ext4: avoid buffer_head leak in ext4_mark_inode_used()
	ext4: avoid potential buffer_head leak in __ext4_new_inode()
	ext4: avoid negative min_clusters in find_group_orlov()
	ext4: return error on ext4_find_inline_entry
	ext4: avoid OOB when system.data xattr changes underneath the filesystem
	nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
	nilfs2: determine empty node blocks as corrupted
	nilfs2: fix potential oob read in nilfs_btree_check_delete()
	bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
	perf sched timehist: Fix missing free of session in perf_sched__timehist()
	perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time
	perf time-utils: Fix 32-bit nsec parsing
	clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
	clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
	drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
	drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
	PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
	PCI: xilinx-nwl: Fix register misspelling
	RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
	pinctrl: single: fix missing error code in pcs_probe()
	clk: ti: dra7-atl: Fix leak of of_nodes
	nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
	nfsd: fix refcount leak when file is unhashed after being found
	pinctrl: mvebu: Use devm_platform_get_and_ioremap_resource()
	pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
	watchdog: imx_sc_wdt: Don't disable WDT in suspend
	RDMA/hns: Add mapped page count checking for MTR
	RDMA/hns: Refactor root BT allocation for MTR
	RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
	RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
	RDMA/hns: Optimize hem allocation performance
	riscv: Fix fp alignment bug in perf_callchain_user()
	RDMA/cxgb4: Added NULL check for lookup_atid
	ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
	ntb_perf: Fix printk format
	nfsd: call cache_put if xdr_reserve_space returns NULL
	nfsd: return -EINVAL when namelen is 0
	f2fs: enhance to update i_mode and acl atomically in f2fs_setattr()
	f2fs: fix typo
	f2fs: fix to update i_ctime in __f2fs_setxattr()
	f2fs: remove unneeded check condition in __f2fs_setxattr()
	f2fs: reduce expensive checkpoint trigger frequency
	spi: lpspi: Silence error message upon deferred probe
	spi: lpspi: release requested DMA channels
	spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
	iio: adc: ad7606: fix oversampling gpio array
	iio: adc: ad7606: fix standby gpio state to match the documentation
	coresight: tmc: sg: Do not leak sg_table
	interconnect: qcom: sm8250: Enable sync_state
	vdpa: Add eventfd for the vdpa callback
	vhost_vdpa: assign irq bypass producer token correctly
	Revert "dm: requeue IO if mapping table not yet available"
	netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
	net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
	net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
	tcp: check skb is non-NULL in tcp_rto_delta_us()
	net: qrtr: Update packets cloning when broadcasting
	netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
	netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
	drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
	Input: goodix - use the new soc_intel_is_byt() helper
	powercap: RAPL: fix invalid initialization for pl4_supported field
	x86/mm: Switch to new Intel CPU model defines
	Revert "bpf: Fix DEVMAP_HASH overflow check on 32-bit arches"
	Revert "bpf: Eliminate rlimit-based memory accounting for devmap maps"
	bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
	selinux,smack: don't bypass permissions check in inode_setsecctx hook
	mptcp: fix sometimes-uninitialized warning
	Remove *.orig pattern from .gitignore
	ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
	soc: versatile: integrator: fix OF node leak in probe() error path
	Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
	Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
	Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
	drm/amd/display: Round calculated vtotal
	USB: appledisplay: close race between probe and completion handler
	USB: misc: cypress_cy7c63: check for short transfer
	USB: class: CDC-ACM: fix race between get_serial and set_serial
	bus: integrator-lm: fix OF node leak in probe()
	firmware_loader: Block path traversal
	tty: rp2: Fix reset with non forgiving PCIe host bridges
	crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
	drbd: Fix atomicity violation in drbd_uuid_set_bm()
	drbd: Add NULL check for net_conf to prevent dereference in state validation
	ACPI: sysfs: validate return type of _STR method
	ACPI: resource: Add another DMI match for the TongFang GMxXGxx
	efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
	perf/x86/intel/pt: Fix sampling synchronization
	wifi: rtw88: 8822c: Fix reported RX band width
	debugobjects: Fix conditions in fill_pool()
	f2fs: prevent possible int overflow in dir_block_index()
	f2fs: avoid potential int overflow in sanity_check_area_boundary()
	hwrng: mtk - Use devm_pm_runtime_enable
	hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
	arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
	arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
	vfs: fix race between evice_inodes() and find_inode()&iput()
	fs: Fix file_set_fowner LSM hook inconsistencies
	nfs: fix memory leak in error path of nfs4_do_reclaim
	padata: use integer wrap around to prevent deadlock on seq_nr overflow
	PCI: xilinx-nwl: Use irq_data_get_irq_chip_data()
	PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
	soc: versatile: realview: fix memory leak during device remove
	soc: versatile: realview: fix soc_dev leak during device remove
	usb: yurex: Replace snprintf() with the safer scnprintf() variant
	USB: misc: yurex: fix race between read and write
	pps: remove usage of the deprecated ida_simple_xx() API
	pps: add an error check in parport_attach
	usb: renesas-xhci: Remove renesas_xhci_pci_exit()
	xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
	lockdep: fix deadlock issue between lockdep and rcu
	mm: only enforce minimum stack gap size if it's sensible
	i2c: aspeed: Update the stop sw state when the bus recovery occurs
	i2c: isch: Add missed 'else'
	usb: yurex: Fix inconsistent locking bug in yurex_read()
	spi: lpspi: Simplify some error message
	mailbox: rockchip: fix a typo in module autoloading
	mailbox: bcm2835: Fix timeout during suspend mode
	ceph: remove the incorrect Fw reference check when dirtying pages
	ieee802154: Fix build error
	net/mlx5: Fix error path in multi-packet WQE transmit
	net/mlx5: Added cond_resched() to crdump collection
	netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
	net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
	netfilter: nf_tables: prevent nf_skb_duplicated corruption
	Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
	net: ethernet: lantiq_etop: fix memory disclosure
	net: avoid potential underflow in qdisc_pkt_len_init() with UFO
	net: add more sanity checks to qdisc_pkt_len_init()
	ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
	sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
	i2c: xiic: Fix broken locking on tx_msg
	i2c: xiic: Switch from waitqueue to completion
	i2c: xiic: Fix RX IRQ busy check
	i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path
	i2c: xiic: improve error message when transfer fails to start
	i2c: xiic: Try re-initialization on bus busy timeout
	media: usbtv: Remove useless locks in usbtv_video_free()
	Bluetooth: L2CAP: Fix not validating setsockopt user input
	ALSA: mixer_oss: Remove some incorrect kfree_const() usages
	ALSA: hda/realtek: Fix the push button function for the ALC257
	ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
	ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
	f2fs: Require FMODE_WRITE for atomic write ioctls
	wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
	wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
	ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
	net/xen-netback: prevent UAF in xenvif_flush_hash()
	net: hisilicon: hip04: fix OF node leak in probe()
	net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
	net: hisilicon: hns_mdio: fix OF node leak in probe()
	ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
	ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
	net: sched: consistently use rcu_replace_pointer() in taprio_change()
	blk_iocost: fix more out of bound shifts
	wifi: ath11k: fix array out-of-bound access in SoC stats
	wifi: rtw88: select WANT_DEV_COREDUMP
	ACPI: EC: Do not release locks during operation region accesses
	ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
	tipc: guard against string buffer overrun
	net: mvpp2: Increase size of queue_name buffer
	ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
	ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
	net: atlantic: Avoid warning about potential string truncation
	tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
	ACPICA: iasl: handle empty connection_node
	proc: add config & param to block forcing mem writes
	wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
	nfp: Use IRQF_NO_AUTOEN flag in request_irq()
	signal: Replace BUG_ON()s
	ALSA: usb-audio: Define macros for quirk table entries
	ALSA: usb-audio: Add logitech Audio profile quirk
	ALSA: asihpi: Fix potential OOB array access
	ALSA: hdsp: Break infinite MIDI input flush loop
	x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
	fbdev: pxafb: Fix possible use after free in pxafb_task()
	rcuscale: Provide clear error when async specified without primitives
	iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
	power: reset: brcmstb: Do not go into infinite loop if reset fails
	iommu/vt-d: Always reserve a domain ID for identity setup
	iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
	drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
	ata: sata_sil: Rename sil_blacklist to sil_quirks
	drm/amd/display: Check null pointers before using dc->clk_mgr
	jfs: UBSAN: shift-out-of-bounds in dbFindBits
	jfs: Fix uaf in dbFreeBits
	jfs: check if leafidx greater than num leaves per dmap tree
	jfs: Fix uninit-value access of new_ea in ea_buffer
	drm/amdgpu: add raven1 gfxoff quirk
	drm/amdgpu: enable gfxoff quirk on HP 705G4
	platform/x86: touchscreen_dmi: add nanote-next quirk
	drm/amd/display: Check stream before comparing them
	drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
	drm/amd/display: Fix index out of bounds in degamma hardware format translation
	drm/amd/display: Fix index out of bounds in DCN30 color transformation
	drm/amd/display: Initialize get_bytes_per_element's default to 1
	drm/printer: Allow NULL data in devcoredump printer
	scsi: aacraid: Rearrange order of struct aac_srb_unit
	drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
	drm/amd/pm: ensure the fw_info is not null before using it
	of/irq: Refer to actual buffer size in of_irq_parse_one()
	ext4: ext4_search_dir should return a proper error
	ext4: avoid use-after-free in ext4_ext_show_leaf()
	ext4: fix i_data_sem unlock order in ext4_ind_migrate()
	spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
	spi: s3c64xx: fix timeout counters in flush_fifo
	selftests: breakpoints: use remaining time to check if suspend succeed
	selftests: vDSO: fix vDSO symbols lookup for powerpc64
	selftests/mm: fix charge_reserved_hugetlb.sh test
	i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
	i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
	i2c: xiic: Wait for TX empty to avoid missed TX NAKs
	firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
	spi: bcm63xx: Fix module autoloading
	perf/core: Fix small negative period being ignored
	parisc: Fix itlb miss handler for 64-bit programs
	drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
	ALSA: core: add isascii() check to card ID generator
	ALSA: line6: add hw monitor volume control to POD HD500X
	ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
	ext4: no need to continue when the number of entries is 1
	ext4: fix slab-use-after-free in ext4_split_extent_at()
	ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
	ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
	ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
	ext4: aovid use-after-free in ext4_ext_insert_extent()
	ext4: fix double brelse() the buffer of the extents path
	ext4: update orig_path in ext4_find_extent()
	ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
	parisc: Fix 64-bit userspace syscall path
	parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
	of/irq: Support #msi-cells=<0> in of_msi_get_domain
	drm: omapdrm: Add missing check for alloc_ordered_workqueue
	jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
	jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
	mm: krealloc: consider spare memory for __GFP_ZERO
	ocfs2: fix the la space leak when unmounting an ocfs2 volume
	ocfs2: fix uninit-value in ocfs2_get_block()
	ocfs2: reserve space for inline xattr before attaching reflink tree
	ocfs2: cancel dqi_sync_work before freeing oinfo
	ocfs2: remove unreasonable unlock in ocfs2_read_blocks
	ocfs2: fix null-ptr-deref when journal load failed.
	ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
	riscv: define ILLEGAL_POINTER_VALUE for 64bit
	exfat: fix memory leak in exfat_load_bitmap()
	nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
	nfsd: map the EBADMSG to nfserr_io to avoid warning
	NFSD: Fix NFSv4's PUTPUBFH operation
	aoe: fix the potential use-after-free problem in more places
	clk: rockchip: fix error for unknown clocks
	media: sun4i_csi: Implement link validate for sun4i_csi subdev
	media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
	clk: qcom: clk-rpmh: Fix overflow in BCM vote
	media: venus: fix use after free bug in venus_remove due to race condition
	clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
	iio: magnetometer: ak8975: Fix reading for ak099xx sensors
	tomoyo: fallback to realpath if symlink's pathname does not exist
	net: stmmac: Fix zero-division error when disabling tc cbs
	rtc: at91sam9: fix OF node leak in probe() error path
	Input: adp5589-keys - fix adp5589_gpio_get_value()
	ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
	ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
	btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
	btrfs: wait for fixup workers before stopping cleaner kthread during umount
	gpio: davinci: fix lazy disable
	drm/sched: Add locking to drm_sched_entity_modify_sched
	kconfig: qconf: fix buffer overflow in debug links
	i2c: xiic: Simplify with dev_err_probe()
	i2c: xiic: Use devm_clk_get_enabled()
	i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
	ext4: properly sync file size update after O_SYNC direct IO
	ext4: dax: fix overflowing extents beyond inode size when partially writing
	arm64: Add Cortex-715 CPU part definition
	arm64: cputype: Add Neoverse-N3 definitions
	arm64: errata: Expand speculative SSBS workaround once more
	uprobes: fix kernel info leak via "[uprobes]" vma
	drm/rockchip: define gamma registers for RK3399
	drm/rockchip: support gamma control on RK3399
	drm/rockchip: vop: clear DMA stop bit on RK3066
	clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
	r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
	r8169: add tally counter fields added with RTL8125
	ACPI: battery: Simplify battery hook locking
	ACPI: battery: Fix possible crash when unregistering a battery hook
	ext4: fix inode tree inconsistency caused by ENOMEM
	vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
	unicode: Don't special case ignorable code points
	net: ethernet: cortina: Drop TSO support
	tracing: Remove precision vsnprintf() check from print event
	drm/crtc: fix uninitialized variable use even harder
	s390/zcore: no need to check return value of debugfs_create functions
	s390/zcore: release dump save area on restart or power down
	tracing: Have saved_cmdlines arrays all in one allocation
	virtio_console: fix misc probe bugs
	kallsyms: Make kallsyms_on_each_symbol generally available
	kallsyms: Make module_kallsyms_on_each_symbol generally available
	tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols
	tracing/kprobes: Fix symbol counting logic by looking at modules as well
	Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
	bpf: Check percpu map value size first
	s390/facility: Disable compile time optimization for decompressor code
	s390/mm: Add cond_resched() to cmm_alloc/free_pages()
	ext4: nested locking for xattr inode
	s390/cpum_sf: Remove WARN_ON_ONCE statements
	ktest.pl: Avoid false positives with grub2 skip regex
	RDMA/mad: Improve handling of timed out WRs of mad agent
	PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
	clk: bcm: bcm53573: fix OF node leak in init
	PCI: Add ACS quirk for Qualcomm SA8775P
	i2c: i801: Use a different adapter-name for IDF adapters
	PCI: Mark Creative Labs EMU20k2 INTx masking as broken
	ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
	media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
	clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
	usb: chipidea: udc: enable suspend interrupt after usb reset
	usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
	virtio_pmem: Check device status before requesting flush
	tools/iio: Add memory allocation failure check for trigger_name
	driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
	drm/amd/display: Check null pointer before dereferencing se
	fbdev: sisfb: Fix strbuf array overflow
	RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
	NFSD: Mark filecache "down" if init fails
	ice: fix VLAN replay after reset
	SUNRPC: Fix integer overflow in decode_rc_list()
	NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
	net: phy: dp83869: fix memory corruption when enabling fiber
	tcp: fix to allow timestamp undo if no retransmits were sent
	tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
	netfilter: br_netfilter: fix panic with metadata_dst skb
	Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
	net: phy: bcm84881: Fix some error handling paths
	net: dsa: b53: fix jumbo frame mtu check
	net: dsa: b53: fix max MTU for 1g switches
	net: dsa: b53: fix max MTU for BCM5325/BCM5365
	net: dsa: b53: allow lower MTUs on BCM5325/5365
	net: dsa: b53: fix jumbo frames on 10/100 ports
	gpio: aspeed: Add the flush write to ensure the write complete.
	gpio: aspeed: Use devm_clk api to manage clock source
	igb: Do not bring the device up after non-fatal error
	net/sched: accept TCA_STAB only for root qdisc
	net: ibm: emac: mal: fix wrong goto
	sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
	net: Add l3mdev index to flow struct and avoid oif reset for port devices
	netfilter: rpfilter/fib: Populate flowic_l3mdev field
	netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces.
	netfilter: fib: check correct rtable in vrf setups
	ppp: fix ppp_async_encode() illegal access
	slip: make slhc_remember() more robust against malicious packets
	resource: fix region_intersects() vs add_memory_driver_managed()
	hwmon: (tmp513) Add missing dependency on REGMAP_I2C
	hwmon: (adm9240) Add missing dependency on REGMAP_I2C
	HID: plantronics: Workaround for an unexcepted opposite volume key
	Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
	usb: dwc3: core: Stop processing of pending events if controller is halted
	usb: xhci: Fix problem with xhci resume from suspend
	usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
	hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
	net: Fix an unsafe loop on the list
	net: dsa: lan9303: ensure chip reset and wait for READY status
	nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
	net: geneve: add missing netlink policy and size for IFLA_GENEVE_INNER_PROTO_INHERIT
	xfrm: Pass flowi_oif or l3mdev as oif to xfrm_dst_lookup
	net: Handle l3mdev in ip_tunnel_init_flow
	net: seg6: fix seg6_lookup_any_nexthop() to handle VRFs using flowi_l3mdev
	net: vrf: determine the dst using the original ifindex for multicast
	netfilter: ip6t_rpfilter: Fix regression with VRF interfaces
	ext4: fix warning in ext4_dio_write_end_io()
	RDMA/hns: Fix uninitialized variable
	net: dsa: microchip: fix build warning
	Linux 5.10.227

Change-Id: I54b0fabf978533e3c321cd22857b8ef9bd17e3e6
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>