This reverts commit 8082cc99 which is
commit b3883ab5 upstream.

It breaks the Android kernel abi and can be brought back in the future
in an abi-safe way if it is really needed.

Bug: 161946584
Change-Id: Ibe6d74a96dd665e39c32618207d2df190e769c67
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

This reverts commit 85d79478 which is
commit 2e1f2d9a upstream.

It breaks the Android kernel abi and can be brought back in the future
in an abi-safe way if it is really needed.

Bug: 161946584
Change-Id: I16bdb88a23acb5148cb53af95b47e75c14ce83c3
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

This reverts commit 738845b0 which is
commit 3f42b142 upstream.

It breaks the Android kernel abi and can be brought back in the future
in an abi-safe way if it is really needed.

Bug: 161946584
Change-Id: Ied21b43d2f2d803f37646a0eca94c399f447c504
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

This reverts commit c7137900 which is
commit 1ca1ba46 upstream.

It breaks the Android kernel abi and can be brought back in the future
in an abi-safe way if it is really needed.

Bug: 161946584
Change-Id: I64aa85a2666f61fb1589d8ed8531750bac1e43fc
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

Changes in 5.10.213
	mmc: mmci: stm32: use a buffer for unaligned DMA requests
	mmc: mmci: stm32: fix DMA API overlapping mappings warning
	lan78xx: Fix white space and style issues
	lan78xx: Add missing return code checks
	lan78xx: Fix partial packet errors on suspend/resume
	lan78xx: Fix race conditions in suspend/resume handling
	net: lan78xx: fix runtime PM count underflow on link stop
	ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able
	i40e: disable NAPI right after disabling irqs when handling xsk_pool
	tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string
	geneve: make sure to pull inner header in geneve_rx()
	net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink()
	net/ipv6: avoid possible UAF in ip6_route_mpath_notify()
	cpumap: Zero-initialise xdp_rxq_info struct before running XDP program
	net/rds: fix WARNING in rds_conn_connect_if_down
	netfilter: nft_ct: fix l3num expectations with inet pseudo family
	netfilter: nf_conntrack_h323: Add protection for bmp length out of range
	netrom: Fix a data-race around sysctl_netrom_default_path_quality
	netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser
	netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser
	netrom: Fix a data-race around sysctl_netrom_transport_timeout
	netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries
	netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay
	netrom: Fix a data-race around sysctl_netrom_transport_busy_delay
	netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size
	netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout
	netrom: Fix a data-race around sysctl_netrom_routing_control
	netrom: Fix a data-race around sysctl_netrom_link_fails_count
	netrom: Fix data-races around sysctl_net_busy_read
	selftests/mm: switch to bash from sh
	selftests: mm: fix map_hugetlb failure on 64K page size systems
	um: allow not setting extra rpaths in the linux binary
	xhci: remove extra loop in interrupt context
	xhci: prevent double-fetch of transfer and transfer event TRBs
	xhci: process isoc TD properly when there was a transaction error mid TD.
	xhci: handle isoc Babble and Buffer Overrun events properly
	serial: max310x: Use devm_clk_get_optional() to get the input clock
	serial: max310x: Try to get crystal clock rate from property
	serial: max310x: fail probe if clock crystal is unstable
	serial: max310x: Make use of device properties
	serial: max310x: use regmap methods for SPI batch operations
	serial: max310x: use a separate regmap for each port
	serial: max310x: prevent infinite while() loop in port startup
	net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr
	bpf: net: Change sk_getsockopt() to take the sockptr_t argument
	lsm: make security_socket_getpeersec_stream() sockptr_t safe
	lsm: fix default return value of the socket_getpeersec_*() hooks
	ext4: make ext4_es_insert_extent() return void
	ext4: refactor ext4_da_map_blocks()
	ext4: convert to exclusive lock while inserting delalloc extents
	Drivers: hv: vmbus: Add vmbus_requestor data structure for VMBus hardening
	hv_netvsc: Use vmbus_requestor to generate transaction IDs for VMBus hardening
	hv_netvsc: Wait for completion on request SWITCH_DATA_PATH
	hv_netvsc: Process NETDEV_GOING_DOWN on VF hot remove
	hv_netvsc: Make netvsc/VF binding check both MAC and serial number
	hv_netvsc: use netif_is_bond_master() instead of open code
	hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
	mm/hugetlb: change hugetlb_reserve_pages() to type bool
	mm: hugetlb pages should not be reserved by shmat() if SHM_NORESERVE
	getrusage: add the "signal_struct *sig" local variable
	getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand()
	getrusage: use __for_each_thread()
	getrusage: use sig->stats_lock rather than lock_task_sighand()
	serial: max310x: Unprepare and disable clock in error path
	Drivers: hv: vmbus: Drop error message when 'No request id available'
	regmap: allow to define reg_update_bits for no bus configuration
	regmap: Add bulk read/write callbacks into regmap_config
	serial: max310x: make accessing revision id interface-agnostic
	serial: max310x: implement I2C support
	serial: max310x: fix IO data corruption in batched operations
	Linux 5.10.213

Change-Id: Idce0bf6a49776023e27144aa57faeac809b5564c
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

Changes in 5.10.212
	platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names
	crypto: virtio/akcipher - Fix stack overflow on memcpy
	mtd: spinand: gigadevice: Support GD5F1GQ5UExxG
	mtd: spinand: gigadevice: Fix the get ecc status issue
	netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter
	net: ip_tunnel: prevent perpetual headroom growth
	tun: Fix xdp_rxq_info's queue_index when detaching
	ipv6: fix potential "struct net" leak in inet6_rtm_getaddr()
	lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected
	net: usb: dm9601: fix wrong return value in dm9601_mdio_read
	Bluetooth: Avoid potential use-after-free in hci_error_reset
	Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR
	Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST
	Bluetooth: Enforce validation on max value of connection interval
	netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate()
	rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back
	efi/capsule-loader: fix incorrect allocation size
	power: supply: bq27xxx-i2c: Do not free non existing IRQ
	ALSA: Drop leftover snd-rtctimer stuff from Makefile
	afs: Fix endless loop in directory parsing
	riscv: Sparse-Memory/vmemmap out-of-bounds fix
	tomoyo: fix UAF write bug in tomoyo_write_control()
	gtp: fix use-after-free and null-ptr-deref in gtp_newlink()
	wifi: nl80211: reject iftype change with mesh ID change
	btrfs: dev-replace: properly validate device names
	dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read
	dmaengine: fsl-qdma: init irq after reg initialization
	mmc: core: Fix eMMC initialization with 1-bit bus connection
	mmc: sdhci-xenon: add timeout for PHY init complete
	mmc: sdhci-xenon: fix PHY init clock stability
	pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation
	x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers
	mptcp: fix possible deadlock in subflow diag
	ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks()
	cachefiles: fix memory leak in cachefiles_add_cache()
	fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super
	gpio: 74x164: Enable output pins after registers are reset
	gpiolib: Fix the error path order in gpiochip_add_data_with_key()
	gpio: fix resource unwinding order in error path
	mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
	mptcp: fix double-free on socket dismantle
	Linux 5.10.212

Change-Id: Iaeb2b9724fabdf36dea66f6dc7de27e63c4d852f
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

This reverts commit 8affdbb3 which is
commit b8adb69a upstream.

It breaks the Android kernel abi and can be brought back in the future
in an abi-safe way if it is really needed.

Bug: 161946584
Change-Id: Ib22d4d7d600994c79e87c929870ba31cc5a4aad3
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

This reverts commit f6ce9056 which is
commit b5f0de6d upstream.

It breaks the Android kernel abi and can be brought back in the future
in an abi-safe way if it is really needed.

Bug: 161946584
Change-Id: I809e53c4e3449a45ecd1fdec260986011b88206e
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

This reverts commit dbc9b22d which is
commit a7d60277 upstream.

It breaks the Android kernel abi and can be brought back in the future
in an abi-safe way if it is really needed.

Bug: 161946584
Change-Id: I3fb6c3a65b627f454c746e3b1b1dd236947c6035
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

This reverts commit e279bf8e which is
commit 1c9be138 upstream.

It breaks the Android kernel abi and can be brought back in the future
in an abi-safe way if it is really needed.  It's not a "real" break, and
we can work around it, but this really does not affect Android systems,
so it's safe to drop for now.

Bug: 161946584
Change-Id: Ic12e606a51d05425d81a81d520b800bc24c6eac4
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

This reverts commit eb369345 which is
commit b787a3e7 upstream.

It breaks the Android kernel abi and can be brought back in the future
in an abi-safe way if it is really needed.  It's not a "real" break, and
we can work around it, but this really does not affect Android systems,
so it's safe to drop for now.

Bug: 161946584
Change-Id: I82f2a6b9ecb9ebaef30df164859305605f477f24
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

Changes in 5.10.211
	net/sched: Retire CBQ qdisc
	net/sched: Retire ATM qdisc
	net/sched: Retire dsmark qdisc
	smb: client: fix OOB in receive_encrypted_standard()
	smb: client: fix potential OOBs in smb2_parse_contexts()
	smb: client: fix parsing of SMB3.1.1 POSIX create context
	sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset
	userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb
	zonefs: Improve error handling
	sched/rt: Fix sysctl_sched_rr_timeslice intial value
	sched/rt: Disallow writing invalid values to sched_rt_period_us
	scsi: target: core: Add TMF to tmr_list handling
	dmaengine: shdma: increase size of 'dev_id'
	dmaengine: fsl-qdma: increase size of 'irq_name'
	wifi: cfg80211: fix missing interfaces when dumping
	wifi: mac80211: fix race condition on enabling fast-xmit
	fbdev: savage: Error out if pixclock equals zero
	fbdev: sis: Error out if pixclock equals zero
	spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected
	ahci: asm1166: correct count of reported ports
	ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers
	ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found()
	ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal()
	dmaengine: ti: edma: Add some null pointer checks to the edma_probe
	regulator: pwm-regulator: Add validity checks in continuous .get_voltage
	nvmet-tcp: fix nvme tcp ida memory leak
	ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616
	spi: sh-msiof: avoid integer overflow in constants
	netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new
	nvme-fc: do not wait in vain when unloading module
	nvmet-fcloop: swap the list_add_tail arguments
	nvmet-fc: release reference on target port
	nvmet-fc: abort command when there is no binding
	ext4: correct the hole length returned by ext4_map_blocks()
	Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table
	efi: runtime: Fix potential overflow of soft-reserved region size
	efi: Don't add memblocks for soft-reserved memory
	hwmon: (coretemp) Enlarge per package core count limit
	scsi: lpfc: Use unsigned type for num_sge
	firewire: core: send bus reset promptly on gap count error
	virtio-blk: Ensure no requests in virtqueues before deleting vqs.
	pmdomain: renesas: r8a77980-sysc: CR7 must be always on
	ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
	irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
	ARM: dts: imx: Set default tuning step for imx6sx usdhc
	ASoC: fsl_micfil: register platform component before registering cpu dai
	media: av7110: prevent underflow in write_ts_to_decoder()
	hvc/xen: prevent concurrent accesses to the shared ring
	hsr: Avoid double remove of a node.
	x86/uaccess: Implement macros for CMPXCHG on user addresses
	seccomp: Invalidate seccomp mode to catch death failures
	block: ataflop: fix breakage introduced at blk-mq refactoring
	powerpc/watchpoint: Workaround P10 DD1 issue with VSX-32 byte instructions
	powerpc/watchpoints: Annotate atomic context in more places
	cifs: add a warning when the in-flight count goes negative
	mtd: spinand: macronix: Add support for MX35LFxGE4AD
	ASoC: Intel: boards: harden codec property handling
	ASoC: Intel: boards: get codec device with ACPI instead of bus search
	ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use
	task_stack, x86/cea: Force-inline stack helpers
	btrfs: tree-checker: check for overlapping extent items
	btrfs: introduce btrfs_lookup_match_dir
	btrfs: unify lookup return value when dir entry is missing
	btrfs: do not pin logs too early during renames
	lan743x: fix for potential NULL pointer dereference with bare card
	platform/x86: intel-vbtn: Support for tablet mode on HP Pavilion 13 x360 PC
	iwlwifi: mvm: do more useful queue sync accounting
	iwlwifi: mvm: write queue_sync_state only for sync
	jbd2: remove redundant buffer io error checks
	jbd2: recheck chechpointing non-dirty buffer
	jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
	x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm()
	erofs: fix lz4 inplace decompression
	IB/hfi1: Fix sdma.h tx->num_descs off-by-one error
	s390/cio: fix invalid -EBUSY on ccw_device_start
	dm-crypt: don't modify the data when using authenticated encryption
	KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler
	KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table()
	gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp()
	PCI/MSI: Prevent MSI hardware interrupt number truncation
	l2tp: pass correct message length to ip6_append_data
	ARM: ep93xx: Add terminator to gpiod_lookup_table
	Revert "x86/ftrace: Use alternative RET encoding"
	x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR
	x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch()
	x86/ftrace: Use alternative RET encoding
	x86/returnthunk: Allow different return thunks
	Revert "x86/alternative: Make custom return thunk unconditional"
	x86/alternative: Make custom return thunk unconditional
	usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable()
	usb: cdns3: fix memory double free when handle zero packet
	usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs
	usb: roles: fix NULL pointer issue when put module's reference
	usb: roles: don't get/set_role() when usb_role_switch is unregistered
	mptcp: fix lockless access in subflow ULP diag
	IB/hfi1: Fix a memleak in init_credit_return
	RDMA/bnxt_re: Return error for SRQ resize
	RDMA/srpt: Support specifying the srpt_service_guid parameter
	RDMA/qedr: Fix qedr_create_user_qp error flow
	arm64: dts: rockchip: set num-cs property for spi on px30
	RDMA/srpt: fix function pointer cast warnings
	bpf, scripts: Correct GPL license name
	scsi: jazz_esp: Only build if SCSI core is builtin
	nouveau: fix function cast warnings
	ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid
	ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid
	afs: Increase buffer size in afs_update_volume_status()
	ipv6: sr: fix possible use-after-free and null-ptr-deref
	packet: move from strlcpy with unused retval to strscpy
	net: dev: Convert sa_data to flexible array in struct sockaddr
	s390: use the correct count for __iowrite64_copy()
	tls: rx: jump to a more appropriate label
	tls: rx: drop pointless else after goto
	tls: stop recv() if initial process_rx_list gave us non-DATA
	netfilter: nf_tables: set dormant flag on hook register failure
	drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3
	drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set
	drm/amd/display: Fix memory leak in dm_sw_fini()
	block: ataflop: more blk-mq refactoring fixes
	fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio
	arp: Prevent overflow in arp_req_get().
	ext4: regenerate buddy after block freeing failed if under fc replay
	Linux 5.10.211

Note, this merges away the following commit:
	a0180e94 ("erofs: fix lz4 inplace decompression")
as it conflicted too badly with the existing erofs changes in this
branch that are not upstream.  If it is needed, it can be brought back
in the future in a safe way.

Change-Id: Id7772759482fca3aea48fb03a62e34f526a19a04
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

This reverts commit b1f576be which is
commit dad6a09f upstream.

It breaks the Android kernel abi and can be brought back in the future
in an abi-safe way if it is really needed.

Bug: 161946584
Change-Id: I3946038162ecfa5fafc8721ac4aaa8545ed540e2
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

This reverts commit 7efadce4 which is
commit b8e162f9 upstream.

It breaks the Android kernel abi and can be brought back in the future
in an abi-safe way if it is really needed.

Bug: 161946584
Change-Id: I4d61091819d54c290cfe08152daab17cfb7a3fa5
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

This reverts commit f5944853 which is
commit 4373534a upstream.

It breaks the Android kernel abi and can be brought back in the future
in an abi-safe way if it is really needed.

Bug: 161946584
Change-Id: Ib6ac4094ad3b8f6361d92438635e34edb1b8b4b7
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

This reverts commit 9878c660 which is
commit 4e6c9011 upstream.

It breaks the Android kernel abi and can be brought back in the future
in an abi-safe way if it is really needed.

Bug: 161946584
Change-Id: I847a8663af86499ef850cc8fcd592d7467f2b01b
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

This reverts commit 80700978 which is
commit 20c20bd1 upstream.

It breaks the Android kernel abi and can be brought back in the future
in an abi-safe way if it is really needed.

Bug: 161946584
Change-Id: I884aeffbf2f42c9345f083da594f208e6db4bc9d
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

This reverts commit 425a441c which is
commit 90d50b8d upstream.

It breaks the Android kernel abi and can be brought back in the future
in an abi-safe way if it is really needed.

Bug: 161946584
Change-Id: Icadd1f376dcf40c38d733025b32bcfc8f10e2caa
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

This reverts commit dfd8b9d2 which is
commit 8925c31c upstream.

It breaks the Android kernel abi and can be brought back in the future
in an abi-safe way if it is really needed.

Bug: 161946584
Change-Id: I4e137aa48fb787f1600c7133d62f4a273f22fbf9
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

This reverts commit 84bf7b87 which is
commit 59c221f8 upstream.

It breaks the Android kernel abi and can be brought back in the future
in an abi-safe way if it is really needed.

Bug: 161946584
Change-Id: Iba320d6a91720f36a89029762c28133427af93dd
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

This reverts commit 00f09825 which is
commit 0c2a5f47 upstream.

It breaks the Android kernel abi and can be brought back in the future
in an abi-safe way if it is really needed.

Bug: 161946584
Change-Id: I8753cedb8cc8783030a376a32a28137267949144
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

This reverts commit a9bc3287 which is
commit 8d975c15 upstream.

It breaks the Android kernel abi and can be brought back in the future
in an abi-safe way if it is really needed.

Bug: 161946584
Change-Id: Ia92fc478b9ac9162d29900ba8b944c3c0fa42576
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

Changes in 5.10.210
	usb: cdns3: Fixes for sparse warnings
	usb: cdns3: fix uvc failure work since sg support enabled
	usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
	usb: cdns3: fix iso transfer error when mult is not zero
	usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
	PCI: mediatek: Clear interrupt status before dispatching handler
	units: change from 'L' to 'UL'
	units: add the HZ macros
	serial: sc16is7xx: set safe default SPI clock frequency
	spi: introduce SPI_MODE_X_MASK macro
	serial: sc16is7xx: add check for unsupported SPI modes during probe
	iio: adc: ad7091r: Set alert bit in config register
	iio: adc: ad7091r: Allow users to configure device events
	iio: adc: ad7091r: Enable internal vref if external vref is not supplied
	dmaengine: fix NULL pointer in channel unregistration function
	iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.
	ext4: allow for the last group to be marked as trimmed
	crypto: api - Disallow identical driver names
	PM: hibernate: Enforce ordering during image compression/decompression
	hwrng: core - Fix page fault dead lock on mmap-ed hwrng
	crypto: s390/aes - Fix buffer overread in CTR mode
	rpmsg: virtio: Free driver_override when rpmsg_remove()
	bus: mhi: host: Drop chan lock before queuing buffers
	parisc/firmware: Fix F-extend for PDC addresses
	async: Split async_schedule_node_domain()
	async: Introduce async_schedule_dev_nocall()
	arm64: dts: qcom: sdm845: fix USB wakeup interrupt types
	arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts
	lsm: new security_file_ioctl_compat() hook
	scripts/get_abi: fix source path leak
	mmc: core: Use mrq.sbc in close-ended ffu
	mmc: mmc_spi: remove custom DMA mapped buffers
	rtc: Adjust failure return code for cmos_set_alarm()
	nouveau/vmm: don't set addr on the fail path to avoid warning
	ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path
	rename(): fix the locking of subdirectories
	block: Remove special-casing of compound pages
	stddef: Introduce DECLARE_FLEX_ARRAY() helper
	smb3: Replace smb2pdu 1-element arrays with flex-arrays
	mm: vmalloc: introduce array allocation functions
	KVM: use __vcalloc for very large allocations
	net/smc: fix illegal rmb_desc access in SMC-D connection dump
	tcp: make sure init the accept_queue's spinlocks once
	bnxt_en: Wait for FLR to complete during probe
	vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING
	llc: make llc_ui_sendmsg() more robust against bonding changes
	llc: Drop support for ETH_P_TR_802_2.
	net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv
	tracing: Ensure visibility when inserting an element into tracing_map
	afs: Hide silly-rename files from userspace
	tcp: Add memory barrier to tcp_push()
	netlink: fix potential sleeping issue in mqueue_flush_file
	ipv6: init the accept_queue's spinlocks in inet6_create
	net/mlx5: DR, Use the right GVMI number for drop action
	net/mlx5e: fix a double-free in arfs_create_groups
	netfilter: nf_tables: restrict anonymous set and map names to 16 bytes
	netfilter: nf_tables: validate NFPROTO_* family
	net: mvpp2: clear BM pool before initialization
	selftests: netdevsim: fix the udp_tunnel_nic test
	fjes: fix memleaks in fjes_hw_setup
	net: fec: fix the unhandled context fault from smmu
	btrfs: ref-verify: free ref cache before clearing mount opt
	btrfs: tree-checker: fix inline ref size in error messages
	btrfs: don't warn if discard range is not aligned to sector
	btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args
	btrfs: don't abort filesystem when attempting to snapshot deleted subvolume
	rbd: don't move requests to the running list on errors
	exec: Fix error handling in begin_new_exec()
	wifi: iwlwifi: fix a memory corruption
	netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain
	netfilter: nf_tables: reject QUEUE/DROP verdict parameters
	gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04
	drm: Don't unref the same fb many times by mistake due to deadlock handling
	drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking
	drm/tidss: Fix atomic_flush check
	drm/bridge: nxp-ptn3460: simplify some error checking
	PM: sleep: Use dev_printk() when possible
	PM: sleep: Avoid calling put_device() under dpm_list_mtx
	PM: core: Remove unnecessary (void *) conversions
	PM: sleep: Fix possible deadlocks in core system-wide PM code
	fs/pipe: move check to pipe_has_watch_queue()
	pipe: wakeup wr_wait after setting max_usage
	ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12
	arm64: dts: qcom: sc7180: Use pdc interrupts for USB instead of GIC interrupts
	arm64: dts: qcom: sc7180: fix USB wakeup interrupt types
	media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run
	mm: use __pfn_to_section() instead of open coding it
	mm/sparsemem: fix race in accessing memory_section->usage
	btrfs: remove err variable from btrfs_delete_subvolume
	btrfs: avoid copying BTRFS_ROOT_SUBVOL_DEAD flag to snapshot of subvolume being deleted
	drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33]
	drm/exynos: fix accidental on-stack copy of exynos_drm_plane
	drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume
	gpio: eic-sprd: Clear interrupt after set the interrupt type
	spi: bcm-qspi: fix SFDP BFPT read by usig mspi read
	mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan
	tick/sched: Preserve number of idle sleeps across CPU hotplug events
	x86/entry/ia32: Ensure s32 is sign extended to s64
	powerpc/mm: Fix null-pointer dereference in pgtable_cache_add
	drivers/perf: pmuv3: don't expose SW_INCR event in sysfs
	powerpc: Fix build error due to is_valid_bugaddr()
	powerpc/mm: Fix build failures due to arch_reserved_kernel_pages()
	x86/boot: Ignore NMIs during very early boot
	powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE
	powerpc/lib: Validate size for vector operations
	x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel
	perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file
	debugobjects: Stop accessing objects after releasing hash bucket lock
	regulator: core: Only increment use_count when enable_count changes
	audit: Send netlink ACK before setting connection in auditd_set
	ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop
	PNP: ACPI: fix fortify warning
	ACPI: extlog: fix NULL pointer dereference check
	PM / devfreq: Synchronize devfreq_monitor_[start/stop]
	ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events
	FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree
	UBSAN: array-index-out-of-bounds in dtSplitRoot
	jfs: fix slab-out-of-bounds Read in dtSearch
	jfs: fix array-index-out-of-bounds in dbAdjTree
	jfs: fix uaf in jfs_evict_inode
	pstore/ram: Fix crash when setting number of cpus to an odd number
	crypto: stm32/crc32 - fix parsing list of devices
	afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu()
	afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*()
	rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock()
	jfs: fix array-index-out-of-bounds in diNewExt
	s390/ptrace: handle setting of fpc register correctly
	KVM: s390: fix setting of fpc register
	SUNRPC: Fix a suspicious RCU usage warning
	ecryptfs: Reject casefold directory inodes
	ext4: fix inconsistent between segment fstrim and full fstrim
	ext4: unify the type of flexbg_size to unsigned int
	ext4: remove unnecessary check from alloc_flex_gd()
	ext4: avoid online resizing failures due to oversized flex bg
	wifi: rt2x00: restart beacon queue when hardware reset
	selftests/bpf: satisfy compiler by having explicit return in btf test
	selftests/bpf: Fix pyperf180 compilation failure with clang18
	scsi: lpfc: Fix possible file string name overflow when updating firmware
	PCI: Add no PM reset quirk for NVIDIA Spectrum devices
	bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk
	scsi: arcmsr: Support new PCI device IDs 1883 and 1886
	ARM: dts: imx7d: Fix coresight funnel ports
	ARM: dts: imx7s: Fix lcdif compatible
	ARM: dts: imx7s: Fix nand-controller #size-cells
	wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()
	bpf: Add map and need_defer parameters to .map_fd_put_ptr()
	scsi: libfc: Don't schedule abort twice
	scsi: libfc: Fix up timeout error in fc_fcp_rec_error()
	bpf: Set uattr->batch.count as zero before batched update or deletion
	ARM: dts: rockchip: fix rk3036 hdmi ports node
	ARM: dts: imx25/27-eukrea: Fix RTC node name
	ARM: dts: imx: Use flash@0,0 pattern
	ARM: dts: imx27: Fix sram node
	ARM: dts: imx1: Fix sram node
	ionic: pass opcode to devcmd_wait
	block/rnbd-srv: Check for unlikely string overflow
	ARM: dts: imx25: Fix the iim compatible string
	ARM: dts: imx25/27: Pass timing0
	ARM: dts: imx27-apf27dev: Fix LED name
	ARM: dts: imx23-sansa: Use preferred i2c-gpios properties
	ARM: dts: imx23/28: Fix the DMA controller node name
	net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path
	block: prevent an integer overflow in bvec_try_merge_hw_page
	md: Whenassemble the array, consult the superblock of the freshest device
	arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property
	arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property
	wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices
	wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift()
	wifi: cfg80211: free beacon_ies when overridden from hidden BSS
	Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066
	Bluetooth: L2CAP: Fix possible multiple reject send
	i40e: Fix VF disable behavior to block all traffic
	f2fs: fix to check return value of f2fs_reserve_new_block()
	ALSA: hda: Refer to correct stream index at loops
	ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument
	fast_dput(): handle underflows gracefully
	RDMA/IPoIB: Fix error code return in ipoib_mcast_join
	drm/amd/display: Fix tiled display misalignment
	f2fs: fix write pointers on zoned device after roll forward
	drm/drm_file: fix use of uninitialized variable
	drm/framebuffer: Fix use of uninitialized variable
	drm/mipi-dsi: Fix detach call without attach
	media: stk1160: Fixed high volume of stk1160_dbg messages
	media: rockchip: rga: fix swizzling for RGB formats
	PCI: add INTEL_HDA_ARL to pci_ids.h
	ALSA: hda: Intel: add HDA_ARL PCI ID support
	ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL
	drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time
	IB/ipoib: Fix mcast list locking
	media: ddbridge: fix an error code problem in ddb_probe
	drm/msm/dpu: Ratelimit framedone timeout msgs
	clk: hi3620: Fix memory leak in hi3620_mmc_clk_init()
	clk: mmp: pxa168: Fix memory leak in pxa168_clk_init()
	watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786
	drm/amdgpu: Let KFD sync with VM fences
	drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()'
	leds: trigger: panic: Don't register panic notifier if creating the trigger failed
	um: Fix naming clash between UML and scheduler
	um: Don't use vfprintf() for os_info()
	um: net: Fix return type of uml_net_start_xmit()
	i3c: master: cdns: Update maximum prescaler value for i2c clock
	xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import
	mfd: ti_am335x_tscadc: Fix TI SoC dependencies
	PCI: Only override AMD USB controller if required
	PCI: switchtec: Fix stdev_release() crash after surprise hot remove
	usb: hub: Replace hardcoded quirk value with BIT() macro
	tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE
	fs/kernfs/dir: obey S_ISGID
	PCI/AER: Decode Requester ID when no error info found
	libsubcmd: Fix memory leak in uniq()
	virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings
	blk-mq: fix IO hang from sbitmap wakeup race
	ceph: fix deadlock or deadcode of misusing dget()
	drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()'
	drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()'
	perf: Fix the nr_addr_filters fix
	wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update
	drm: using mul_u32_u32() requires linux/math64.h
	scsi: isci: Fix an error code problem in isci_io_request_build()
	scsi: core: Introduce enum scsi_disposition
	scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler
	ip6_tunnel: use dev_sw_netstats_rx_add()
	ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()
	net-zerocopy: Refactor frag-is-remappable test.
	tcp: add sanity checks to rx zerocopy
	ixgbe: Remove non-inclusive language
	ixgbe: Refactor returning internal error codes
	ixgbe: Refactor overtemp event handling
	ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550()
	ipv6: Ensure natural alignment of const ipv6 loopback and router addresses
	llc: call sock_orphan() at release time
	netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger
	netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations
	net: ipv4: fix a memleak in ip_setup_cork
	af_unix: fix lockdep positive in sk_diag_dump_icons()
	net: sysfs: Fix /sys/class/net/<iface> path
	HID: apple: Add support for the 2021 Magic Keyboard
	HID: apple: Add 2021 magic keyboard FN key mapping
	bonding: remove print in bond_verify_device_path
	uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++
	PM: sleep: Fix error handling in dpm_prepare()
	dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools
	dmaengine: ti: k3-udma: Report short packet errors
	dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA
	dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA
	phy: renesas: rcar-gen3-usb2: Fix returning wrong error code
	dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV
	phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP
	drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case
	net: stmmac: xgmac: fix handling of DPP safety error for DMA channels
	selftests: net: avoid just another constant wait
	tunnels: fix out of bounds access when building IPv6 PMTU error
	atm: idt77252: fix a memleak in open_card_ubr0
	hwmon: (aspeed-pwm-tacho) mutex for tach reading
	hwmon: (coretemp) Fix out-of-bounds memory access
	hwmon: (coretemp) Fix bogus core_id to attr name mapping
	inet: read sk->sk_family once in inet_recv_error()
	rxrpc: Fix response to PING RESPONSE ACKs to a dead call
	tipc: Check the bearer type before calling tipc_udp_nl_bearer_add()
	ppp_async: limit MRU to 64K
	netfilter: nft_compat: reject unused compat flag
	netfilter: nft_compat: restrict match/target protocol to u16
	netfilter: nft_ct: reject direction for ct id
	netfilter: nft_set_pipapo: store index in scratch maps
	netfilter: nft_set_pipapo: add helper to release pcpu scratch area
	netfilter: nft_set_pipapo: remove scratch_aligned pointer
	scsi: core: Move scsi_host_busy() out of host lock if it is for per-command
	blk-iocost: Fix an UBSAN shift-out-of-bounds warning
	net/af_iucv: clean up a try_then_request_module()
	USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e
	USB: serial: option: add Fibocom FM101-GL variant
	USB: serial: cp210x: add ID for IMST iM871A-USB
	usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK
	hrtimer: Report offline hrtimer enqueue
	Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU
	Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID
	vhost: use kzalloc() instead of kmalloc() followed by memset()
	clocksource: Skip watchdog check for large watchdog intervals
	net: stmmac: xgmac: use #define for string constants
	net: stmmac: xgmac: fix a typo of register name in DPP safety handling
	netfilter: nft_set_rbtree: skip end interval element from gc
	btrfs: forbid creating subvol qgroups
	btrfs: do not ASSERT() if the newly created subvolume already got read
	btrfs: forbid deleting live subvol qgroup
	btrfs: send: return EOPNOTSUPP on unknown flags
	of: unittest: Fix compile in the non-dynamic case
	net: openvswitch: limit the number of recursions from action sets
	spi: ppc4xx: Drop write-only variable
	ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work()
	net: sysfs: Fix /sys/class/net/<iface> path for statistics
	MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler
	i40e: Fix waiting for queues of all VSIs to be disabled
	tracing/trigger: Fix to return error if failed to alloc snapshot
	mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again
	ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32
	ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx
	HID: wacom: generic: Avoid reporting a serial of '0' to userspace
	HID: wacom: Do not register input devices until after hid_hw_start
	usb: ucsi_acpi: Fix command completion handling
	USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT
	usb: f_mass_storage: forbid async queue when shutdown happen
	media: ir_toy: fix a memleak in irtoy_tx
	powerpc/kasan: Fix addr error caused by page alignment
	i2c: i801: Remove i801_set_block_buffer_mode
	i2c: i801: Fix block process call transactions
	modpost: trim leading spaces when processing source files list
	scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock"
	lsm: fix the logic in security_inode_getsecctx()
	firewire: core: correct documentation of fw_csr_string() kernel API
	kbuild: Fix changing ELF file type for output of gen_btf for big endian
	nfc: nci: free rx_data_reassembly skb on NCI device cleanup
	net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame()
	xen-netback: properly sync TX responses
	ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL
	binder: signal epoll threads of self-work
	misc: fastrpc: Mark all sessions as invalid in cb_remove
	ext4: fix double-free of blocks due to wrong extents moved_len
	tracing: Fix wasted memory in saved_cmdlines logic
	staging: iio: ad5933: fix type mismatch regression
	iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC
	iio: accel: bma400: Fix a compilation problem
	media: rc: bpf attach/detach requires write permission
	hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove
	ring-buffer: Clean ring_buffer_poll_wait() error return
	serial: max310x: set default value when reading clock ready bit
	serial: max310x: improve crystal stable clock detection
	x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6
	x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
	mmc: slot-gpio: Allow non-sleeping GPIO ro
	ALSA: hda/conexant: Add quirk for SWS JS201D
	nilfs2: fix data corruption in dsync block recovery for small block sizes
	nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
	crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked
	nfp: use correct macro for LengthSelect in BAR config
	nfp: flower: prevent re-adding mac index for bonded port
	wifi: mac80211: reload info pointer in ieee80211_tx_dequeue()
	irqchip/irq-brcmstb-l2: Add write memory barrier before exit
	irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update
	s390/qeth: Fix potential loss of L3-IP@ in case of network issues
	ceph: prevent use-after-free in encode_cap_msg()
	of: property: fix typo in io-channels
	can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER)
	pmdomain: core: Move the unused cleanup to a _sync initcall
	tracing: Inform kmemleak of saved_cmdlines allocation
	Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
	bus: moxtet: Add spi device table
	PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
	mips: Fix max_mapnr being uninitialized on early stages
	crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init
	serial: Add rs485_supported to uart_port
	serial: 8250_exar: Fill in rs485_supported
	serial: 8250_exar: Set missing rs485_supported flag
	scripts/decode_stacktrace.sh: silence stderr messages from addr2line/nm
	scripts/decode_stacktrace.sh: support old bash version
	scripts: decode_stacktrace: demangle Rust symbols
	scripts/decode_stacktrace.sh: optionally use LLVM utilities
	netfilter: ipset: fix performance regression in swap operation
	netfilter: ipset: Missing gc cancellations fixed
	hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range()
	Revert "arm64: Stash shadow stack pointer in the task struct on interrupt"
	net: prevent mss overflow in skb_segment()
	sched/membarrier: reduce the ability to hammer on sys_membarrier
	nilfs2: fix potential bug in end_buffer_async_write
	nilfs2: replace WARN_ONs for invalid DAT metadata block requests
	dm: limit the number of targets and parameter size area
	PM: runtime: add devm_pm_runtime_enable helper
	PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
	drm/msm/dsi: Enable runtime PM
	netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval()
	net: bcmgenet: Fix EEE implementation
	PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq()
	Linux 5.10.210

Change-Id: Ia049e9701c1d13e31a2e3b48d9030f9bb5b13c50
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

Merge f7266903 ("arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts") into android13-5.10-lts

Steps on the way to 5.10.210

Change-Id: I79784c14ae0a4c8258eafb39de747de46aa12a79
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

Merge 69ca89d8 ("rpmsg: virtio: Free driver_override when rpmsg_remove()") into android13-5.10-lts

Steps on the way to 5.10.210

Change-Id: I4db9765892de91062e4d29baa48c8a1b2999c4ea
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

Merge 981a31b7 ("PM: hibernate: Enforce ordering during image compression/decompression") into android13-5.10-lts

Steps on the way to 5.10.210

Change-Id: I9244f99408764d9623e926eb7bab119cc30a33cb
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

This reverts commit 462c383e which is
commit 27016f75 upstream.

Seems that Pixel devices break because of this (they have a duplicated
name for their driver?)  Revert this for now, but someone really needs
to get those Pixel drivers upstream and fixed...

Bug: 335718233
Change-Id: Ie465403c40fe75fee5934ea160b86a4c77ef8f17
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

Steps on the way to 5.10.210

Change-Id: I885d634ad823c8b69a600ca155a94023d78b3237
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

Merge fa949122 ("ext4: allow for the last group to be marked as trimmed") into android13-5.10-lts

Steps on the way to 5.10.210

Change-Id: I2e62f22fb0d6c48b221d312deb8b22155580db07
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

Merge d173ef12 ("iio:adc:ad7091r: Move exports into IIO_AD7091R namespace.") into android13-5.10-lts

Steps on the way to 5.10.210

Change-Id: Idb5efbeda9022409617b6ba2f0f5a93f89dafade
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

Merge 9de69732 ("dmaengine: fix NULL pointer in channel unregistration function") into android13-5.10-lts

Steps on the way to 5.10.210

Change-Id: I061645c50e179c687c5322a16401bc6ef5cef7b0
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

Merge f37f4a0c ("PCI: mediatek: Clear interrupt status before dispatching handler") into android13-5.10-lts

Steps on the way to 5.10.210

Change-Id: Ie296144938697bdddaf94f574c226f12e18f82f2
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

Catches the LTS branch up with changes in the normal one.  Included in
here are the following commits:

* 687b86b1 ANDROID: GKI: db845c: Update symbols list and ABI on devm_pm_runtime_enable
* 7859c5c9 FROMLIST: binder: check offset alignment in binder_get_object()
* 9f408f56 Merge tag 'android13-5.10.209_r00' into android13-5.10
* 6bc28fdf ANDROID: userfaultfd: abort uffdio ops if mmap_lock is contended
* 4a4450b4 ANDROID: userfaultfd: add MMAP_TRYLOCK mode for COPY/ZEROPAGE
* 582c6d18 ANDROID: userfaultfd: allow SPF for UFFD_FEATURE_SIGBUS on private+anon
* 40cc63fc UPSTREAM: net: tls, update curr on splice as well
* f1026393 UPSTREAM: netfilter: nft_set_rbtree: skip end interval element from gc

Change-Id: I17e2e6c1ffc563e417da78d3b4aa09acf5a0599c
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

android13-5.10 is broken on Dragonboard 845c because of
recently added symbol devm_pm_runtime_enable.

So updated the symbols list by running:
  "BUILD_CONFIG=common/build.config.db845c \
    KMI_SYMBOL_LIST_ADD_ONLY=1 build/build_abi.sh -s"

And the abi_gki_aarch64 ABI by running:
  "BUILD_CONFIG=common/build.config.gki.aarch64 \
    ABI_DEFINITION=abi_gki_aarch64.xml KMI_SYMBOL_LIST_ADD_ONLY=1 \
     build/build_abi.sh --update --print-report"

========================================================
1 function symbol(s) added
  'int devm_pm_runtime_enable(struct device *)'

========================================================

Fixes: 57ffa73b ("UPSTREAM: drm/msm/dsi: Enable runtime PM")

Change-Id: I0b73aacc098faac40195b83304cb746a7510b96f
Signed-off-by: Yongqin Liu <yongqin.liu@linaro.org>

Commit 6d98eb95 ("binder: avoid potential data leakage when copying
txn") introduced changes to how binder objects are copied. In doing so,
it unintentionally removed an offset alignment check done through calls
to binder_alloc_copy_from_buffer() -> check_buffer().

These calls were replaced in binder_get_object() with copy_from_user(),
so now an explicit offset alignment check is needed here. This avoids
later complications when unwinding the objects gets harder.

It is worth noting this check existed prior to commit 7a67a393
("binder: add function to copy binder object from buffer"), likely
removed due to redundancy at the time.

Fixes: 6d98eb95 ("binder: avoid potential data leakage when copying txn")
Cc:  <stable@vger.kernel.org>
Acked-by: Todd Kjos <tkjos@google.com>
Signed-off-by: Carlos Llamas <cmllamas@google.com>

Bug: 320661088
Link: https://lore.kernel.org/all/20240330190115.1877819-1-cmllamas@google.com/


Signed-off-by: Carlos Llamas <cmllamas@google.com>
Change-Id: Iaddabaa28de7ba7b7d35dbb639d38ca79dbc5077

This merges up to the 5.10.209 LTS release into the android13-5.10
branch.  Included in here are the following commits:

*   dd976ecc Merge "Merge branch 'android13-5.10' into branch 'android13-5.10-lts'" into android13-5.10-lts
|\
| * 383a88b6 Merge branch 'android13-5.10' into branch 'android13-5.10-lts'
* | 57ffa73b UPSTREAM: drm/msm/dsi: Enable runtime PM
* | cb4b3425 UPSTREAM: PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
* | 4e5de5bd UPSTREAM: PM: runtime: add devm_pm_runtime_enable helper
|/
* fc10db4b Merge android13-5.10 into android13-5.10-lts
*   87a5e148 Merge 5.10.209 into android13-5.10-lts
|\
| * 16ad71c2 Linux 5.10.209
| * 66e4f4a8 arm64: dts: armada-3720-turris-mox: set irq type for RTC
| * 2e23761b i2c: s3c24xx: fix transferring more than one message in polling mode
| * da60686b i2c: s3c24xx: fix read transfers in polling mode
| * 8ba74e90 selftests: mlxsw: qos_pfc: Adjust the test to support 8 lanes
| * 3e1ca806 selftests: mlxsw: qos_pfc: Convert to iproute2 dcb
| * 56750ea5 mlxsw: spectrum_acl_tcam: Fix stack corruption
| * a9b233b2 mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
| * d3669ebc mlxsw: spectrum_acl_tcam: Make fini symmetric to init
| * a557dbda mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
| * 936d06d6 mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
| * e8bfdf63 mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
| * f90b1ceb ethtool: netlink: Add missing ethnl_ops_begin/complete
| * b44e1aec kdb: Fix a potential buffer overflow in kdb_local()
| * 977c2cf5 ipvs: avoid stat macros calls from preemptible context
| * 00a86f81 netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description
| * 9a4d2526 netfilter: nf_tables: skip dead set elements in netlink dump
| * 2d4c0798 netfilter: nf_tables: do not allow mismatch field size and set key length
| * b099b495 net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe
| * 6c8a5bbc net: ravb: Fix dma_addr_t truncation in error case
| * ba77c8b4 net: phy: micrel: populate .soft_reset for KSZ9131
| * 1658d7a7 net: ethernet: ti: am65-cpsw: Fix max mtu to fit ethernet frames
| * 2295c223 net: qualcomm: rmnet: fix global oob in rmnet_policy
| * b55808b9 s390/pci: fix max size calculation in zpci_memcpy_toio()
| * 178b4373 PCI: keystone: Fix race condition when initializing PHYs
| * 0de2e620 nvmet-tcp: Fix the H2C expected PDU len calculation
| * 17227646 serial: imx: Correct clock error message in function probe()
| * 5ff00408 apparmor: avoid crash when parsed profile name is empty
| * 866d32bf perf env: Avoid recursively taking env->bpf_progs.lock
| * 39669fae nvmet-tcp: fix a crash in nvmet_req_complete()
| * f775f262 nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
| * 1550b870 usb: cdc-acm: return correct error code on unsupported break
| * d7c74b01 tty: use 'if' in send_break() instead of 'goto'
| * 3483ca03 tty: don't check for signal_pending() in send_break()
| * 2cf81d34 tty: early return from send_break() on TTY_DRIVER_HARDWARE_BREAK
| * 4e76dbd7 tty: change tty_write_lock()'s ndelay parameter to bool
| * abcc25a2 perf genelf: Set ELF program header addresses properly
| * 1e17feb4 iio: adc: ad9467: fix scale setting
| * a3167e5a iio: adc: ad9467: don't ignore error codes
| * 00e916d9 iio: adc: ad9467: fix reset gpio handling
| * 8083d684 iio: adc: ad9467: Benefit from devm_clk_get_enabled() to simplify
| * 6e04a9d3 serial: imx: fix tx statemachine deadlock
| * 6746f3e8 software node: Let args be NULL in software_node_get_reference_args
| * 381bea33 acpi: property: Let args be NULL in __acpi_node_get_property_reference
| * 7166e8e9 libapi: Add missing linux/types.h header to get the __u64 type on io.h
| * bc57f3ef serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed
| * 89b97e6b power: supply: cw2015: correct time_to_empty units in sysfs
| * 5e3995ec MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup()
| * c3ed63f6 MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup()
| * 9995dee8 mips: Fix incorrect max_low_pfn adjustment
| * 5cdda623 mips: dmi: Fix early remap on MIPS32
| * b1528687 leds: aw2013: Select missing dependency REGMAP_I2C
| * 927626a2 mfd: syscon: Fix null pointer dereference in of_syscon_register()
| * c964a059 HID: wacom: Correct behavior when processing some confidence == false touches
| * c7883c9f iio: adc: ad7091r: Pass iio_dev to event handler
| * ba7be666 KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
| * 9b5a2785 KVM: arm64: vgic-v4: Restore pending state on host userspace write
| * 7521ea8f x86/kvm: Do not try to disable kvmclock if it was not enabled
| * 322c5fe4 wifi: mwifiex: configure BSSID consistently when starting AP
| * ba8a4fba wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors
| * 3dc3122b wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code
| * 5e9142b6 iommu/arm-smmu-qcom: Add missing GMU entry to match table
| * 394c6c0b Bluetooth: Fix atomicity violation in {min,max}_key_size_set
| * 3b8d7a1b rootfs: Fix support for rootfstype= when root= is given
| * 8c0b563e io_uring/rw: ensure io->bytes_done is always initialized
| * daa61bac pwm: jz4740: Don't use dev_err_probe() in .request()
| * a7d4ec56 fbdev: flush deferred work in fb_deferred_io_fsync()
| * ff2d54d9 ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx
| * b5c2a326 ALSA: oxygen: Fix right channel of capture volume mixer
| * 57f34589 serial: imx: Ensure that imx_uart_rs485_config() is called with enabled clock
| * b7747ca5 usb: mon: Fix atomicity violation in mon_bin_vma_fault
| * 5e5ab50e usb: typec: class: fix typec_altmode_put_partner to put plugs
| * baaa6d8e Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs"
| * f5c09e1d usb: chipidea: wait controller resume finished for wakeup irq
| * 084de4c6 Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-only"
| * 1af04235 Revert "usb: dwc3: Soft reset phy on probe for host"
| * 32538886 usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart
| * e70b1728 usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host()
| * d65cade5 tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug
| * 7e7a0d86 binder: fix race between mmput() and do_exit()
| * cce8ba6f xen-netback: don't produce zero-size SKB frags
| * d1e68ad2 net: ethernet: mtk_eth_soc: remove duplicate if statements
| * 8a294639 kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list
| * c02cdc2c Revert "ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek"
| * 79026a2d virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session()
| * dfdb686d virtio-crypto: fix memory-leak
| * c3b3389a dma-mapping: Fix build error unused-value
| * 0dfe57f1 Input: atkbd - use ab83 as id when skipping the getid command
| * c8c1158f binder: fix use-after-free in shinker's callback
| * abbb9092 binder: fix unused alloc->free_async_space
| * fa62c905 binder: fix async space check for 0-sized buffers
| * 4533e762 keys, dns: Fix size check of V1 server-list header
| * 9e8a31c1 of: unittest: Fix of_count_phandle_with_args() expected value message
| * d5f49034 of: Fix double free in of_parse_phandle_with_args_map
| * c9ee325b IB/iser: Prevent invalidating wrong MR
| * bedecbb5 mmc: sdhci_omap: Fix TI SoC dependencies
| * 613af7d5 mmc: sdhci_am654: Fix TI SoC dependencies
| * 8da3a51f pwm: stm32: Fix enable count for clk in .probe()
| * e33e1bdb pwm: stm32: Use hweight32 in stm32_pwm_detect_channels
| * 5af4ce2a pwm: stm32: Use regmap_clear_bits and regmap_set_bits where applicable
| * bed5ec2a clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw
| * 764b78b9 clk: fixed-rate: add devm_clk_hw_register_fixed_rate
| * e5236e58 clk: si5341: fix an error code problem in si5341_output_clk_set_rate
| * 428381fb watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused
| * d83662bb watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling
| * 6c93290d watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO
| * cbc15095 watchdog: set cdev owner before adding
| * e4f4a2cb drivers: clk: zynqmp: update divider round rate logic
| * af0b8619 clk: zynqmp: Add a check for NULL pointer
| * 45b4ea38 clk: zynqmp: make bestdiv unsigned
| * 7fdcd873 drivers: clk: zynqmp: calculate closest mux rate
| * 6cccbfaf clk: qcom: videocc-sm8150: Add missing PLL config property
| * 84ee0457 clk: qcom: videocc-sm8150: Update the videocc resets
| * 74bbdacf dt-bindings: clock: Update the videocc resets for sm8150
| * 0c8ba693 gpu/drm/radeon: fix two memleaks in radeon_vm_init
| * 520e213a drivers/amd/pm: fix a use-after-free in kv_parse_power_table
| * aeed2b4e drm/amd/pm: fix a double-free in si_dpm_init
| * d53fee9e drm/amdgpu/debugfs: fix error code when smc register accessors are NULL
| * 56a79c68 media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path of m88ds3103_probe()
| * b5ebb9b4 media: dvbdev: drop refcount on error path in dvb_device_open()
| * 9284f409 f2fs: fix to update iostat correctly in f2fs_filemap_fault()
| * 40d36882 f2fs: fix to check compress file in f2fs_move_file_range()
| * b8642875 media: rkisp1: Disable runtime PM in probe error path
| * 962b3573 clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config
| * 21a30b59 media: cx231xx: fix a memleak in cx231xx_init_isoc
| * abd50ceb drm/bridge: tc358767: Fix return value on error case
| * 3f6932b5 drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table
| * e646308e drm/radeon/dpm: fix a memleak in sumo_parse_power_table
| * 57ca7984 drm/radeon: check the alloc_workqueue return value in radeon_crtc_init()
| * c20a6aa0 drm/drv: propagate errors from drm_modeset_register_all()
| * da5e0feb drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks
| * b704eabe drm/msm/mdp4: flush vblank event on disable
| * 96f58568 ASoC: cs35l34: Fix GPIO name and drop legacy include
| * defe0327 ASoC: cs35l33: Fix GPIO name and drop legacy include
| * 1421b066 drm/radeon: check return value of radeon_ring_lock()
| * 99244692 drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check()
| * ca267f79 drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg()
| * 6f866885 f2fs: fix to avoid dirent corruption
| * 13ea8af9 drm/bridge: Fix typo in post_disable() description
| * 3233d8bf media: pvrusb2: fix use after free on context disconnection
| * 53926e2a drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
| * 1eb7ceae drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer
| * b1a07165 rcu: Create an unrcu_pointer() to remove __rcu from a pointer
| * 1d1d5b90 drm/panel-elida-kd35t133: hold panel in reset for unprepare
| * 7794c148 RDMA/usnic: Silence uninitialized symbol smatch warnings
| * d807f4ef ARM: davinci: always select CONFIG_CPU_ARM926T
| * da23bd70 ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
| * 4e09df9b Bluetooth: btmtkuart: fix recv_buf() return value
| * fd54d166 Bluetooth: Fix bogus check for re-auth no supported with non-ssp
| * 15be96e1 netfilter: nf_tables: mark newset as dead on transaction abort
| * 6f39bea6 wifi: rtlwifi: rtl8192se: using calculate_bit_shift()
| * c7138266 wifi: rtlwifi: rtl8192ee: using calculate_bit_shift()
| * 99f56c3f wifi: rtlwifi: rtl8192de: using calculate_bit_shift()
| * b75b68dd rtlwifi: rtl8192de: make arrays static const, makes object smaller
| * df14e432 wifi: rtlwifi: rtl8192ce: using calculate_bit_shift()
| * 016781c1 wifi: rtlwifi: rtl8192cu: using calculate_bit_shift()
| * bf277a76 wifi: rtlwifi: rtl8192c: using calculate_bit_shift()
| * 483c975e wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift()
| * 31b651a7 wifi: rtlwifi: add calculate_bit_shift()
| * 64299791 dma-mapping: clear dev->dma_mem to NULL after freeing it
| * a6dd1095 dma-mapping: Add dma_release_coherent_memory to DMA API
| * ad43344a virtio/vsock: fix logic which reduces credit update messages
| * 30ae0c66 selftests/net: fix grep checking for fib_nexthop_multiprefix
| * 7a0f8295 scsi: hisi_sas: Replace with standard error code return value
| * afea95d3 bpf: Fix verification of indirect var-off stack access
| * 419ab8f7 arm64: dts: qcom: sdm845-db845c: correct LED panic indicator
| * 812cebdc arm64: dts: qcom: qrb5165-rb5: correct LED panic indicator
| * ba31bb08 scsi: fnic: Return error if vmalloc() failed
| * 2757f179 bpf: fix check for attempt to corrupt spilled pointer
| * 7e98bbeb arm64: dts: ti: k3-am65-main: Fix DSS irq trigger type
| * d49863ed wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior
| * 2799324d firmware: meson_sm: populate platform devices from sm device tree data
| * 3959dbb3 firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create()
| * 01f9feb5 net/ncsi: Fix netlink major/minor version numbers
| * 7bcddd12 ncsi: internal.h: Fix a spello
| * ae98b7f7 ARM: dts: qcom: apq8064: correct XOADC register address
| * 4675cacd wifi: libertas: stop selecting wext
| * 24d8aef5 wifi: ath11k: Defer on rproc_get failure
| * 91f31115 bpf: Add crosstask check to __bpf_get_stack
| * d5d181df bpf, lpm: Fix check prefixlen before walking trie
| * eb0eac57 wifi: rtw88: fix RX filter in FIF_ALLMULTI flag
| * d8caf15a NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT
| * 722c700d blocklayoutdriver: Fix reference leak of pnfs_device_node
| * 4518dc46 crypto: scomp - fix req->dst buffer overflow
| * 1798c8fd crypto: sahara - do not resize req->src when doing hash operations
| * 67ae336f crypto: sahara - fix processing hash requests with req->nbytes < sg->length
| * b3287c8a crypto: sahara - improve error handling in sahara_sha_process()
| * 98985eda crypto: sahara - fix wait_for_completion_timeout() error handling
| * 69451bf9 crypto: sahara - fix ahash reqsize
| * d8d95808 crypto: sahara - handle zero-length aes requests
| * b839648d crypto: sahara - avoid skcipher fallback code duplication
| * 14f57a01 crypto: virtio - Wait for tasklet to complete on device remove
| * 5c28478a gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
| * 57c7b331 gfs2: Also reflect single-block allocations in rgd->rd_extfail_pt
| * 22f63f9b Revert "gfs2: Don't reject a supposedly full bitmap if we have blocks reserved"
| * cd48d2a8 fs: indicate request originates from old mount API
| * acd413da pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
| * c60fd7a6 crypto: sahara - fix error handling in sahara_hw_descriptor_create()
| * 25b7ca74 crypto: sahara - fix processing requests with cryptlen < sg->length
| * fc91d32c crypto: sahara - fix ahash selftest failure
| * 4f4786b8 crypto: sahara - fix cbc selftest failure
| * ccdb86c3 crypto: sahara - remove FLAGS_NEW_KEY logic
| * 7f807dc0 crypto: af_alg - Disallow multiple in-flight AIO requests
| * 97f9d045 crypto: ccp - fix memleak in ccp_init_dm_workarea
| * 95586bb7 crypto: sa2ul - Return crypto_aead_setkey to transfer the error
| * 0eb69890 crypto: virtio - Handle dataq logic with tasklet
| * 0dee72f9 virtio-crypto: wait ctrl queue instead of busy polling
| * 4ee475e7 virtio-crypto: use private buffer for control request
| * 7d386768 virtio-crypto: change code style
| * 1ff57428 virtio-crypto: implement RSA algorithm
| * f32dfee5 virtio-crypto: introduce akcipher service
| * b2092cdc virtio_crypto: Introduce VIRTIO_CRYPTO_NOSPC
| * 1bc7a682 selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket
| * 001a3f59 mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
| * 1d7b39c8 ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error
| * 46e3dc02 spi: sh-msiof: Enforce fixed DTDL for R-Car H3
| * 94c74232 efivarfs: force RO when remounting if SetVariable is not supported
| * 44a88650 calipso: fix memory leak in netlbl_calipso_add_pass()
| * 5ac84b01 netlabel: remove unused parameter in netlbl_netlink_auditinfo()
| * 47210a57 net: netlabel: Fix kerneldoc warnings
| * d5ce66bd cpufreq: scmi: process the result of devm_of_clk_add_hw_provider()
| * fda13092 cpufreq: Use of_property_present() for testing DT property presence
| * ba7c7e35 of: Add of_property_present() helper
| * ded221bf of: property: define of_property_read_u{8,16,32,64}_array() unconditionally
| * f39c3d57 ACPI: LPIT: Avoid u32 multiplication overflow
| * c4e1a0ef ACPI: video: check for error while searching for backlight device parent
| * 11ac297a mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response
| * f8df7c98 spi: spi-zynqmp-gqspi: fix driver kconfig dependencies
| * 5a669f35 powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
| * a67a04ad powerpc/powernv: Add a null pointer check in opal_powercap_init()
| * e6ad05e3 powerpc/powernv: Add a null pointer check in opal_event_init()
| * 1eefa93f powerpc/powernv: Add a null pointer check to scom_debug_init_one()
| * 428ab6a9 selftests/powerpc: Fix error handling in FPU/VMX preemption tests
| * b582aa1f powerpc/pseries/memhp: Fix access beyond end of drmem array
| * f2ec4187 powerpc/pseries/memhotplug: Quieten some DLPAR operations
| * 81dce186 powerpc/44x: select I2C for CURRITUCK
| * d67339e9 powerpc: Remove in_kernel_text()
| * ecbbd90e powerpc: add crtsavres.o to always-y instead of extra-y
| * 6aa7865b EDAC/thunderx: Fix possible out-of-bounds string access
| * 36dbbfff x86/lib: Fix overflow when counting digits
| * 83da4fc5 coresight: etm4x: Fix width of CCITMIN field
| * 67d3d17e PCI: Add ACS quirk for more Zhaoxin Root Ports
| * e5457b54 parport: parport_serial: Add Brainboxes device IDs and geometry
| * 937293ff parport: parport_serial: Add Brainboxes BAR details
| * 5e0be122 uio: Fix use-after-free in uio_open
| * 214aac20 binder: fix comment on binder_alloc_new_buf() return value
| * 689f1312 binder: fix trivial typo of binder_free_buf_locked()
| * e18d6075 binder: use EPOLLERR from eventpoll.h
| * 19d949b3 ACPI: resource: Add another DMI match for the TongFang GMxXGxx
| * f138fb6e drm/crtc: fix uninitialized variable use
| * 7ba78e08 ARM: sun9i: smp: fix return code check of of_property_match_string
| * 01d89184 net: qrtr: ns: Return 0 if server port is not present
| * dbf8b0d9 ida: Fix crash in ida_free when the bitmap is empty
| * d8a07ba1 i2c: rk3x: fix potential spinlock recursion on poll
| * a57c59c8 Input: xpad - add Razer Wolverine V2 support
| * 86e4e2ee ARC: fix spare error
| * 9700ff5a s390/scm: fix virtual vs physical address confusion
| * 6e171558 Input: i8042 - add nomux quirk for Acer P459-G2-M
| * b0e82ef6 Input: atkbd - skip ATKBD_CMD_GETID in translated mode
| * 6f161408 reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning
| * 8d6913d0 ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI
| * 439f3bbf tracing: Add size check when printing trace_marker output
| * bc6619c9 tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing
| * c0f1db73 jbd2: fix soft lockup in journal_finish_inode_data_buffers()
| * cd94f81f neighbour: Don't let neigh_forced_gc() disable preemption for long
| * 3887ba71 drm/crtc: Fix uninit-value bug in drm_mode_setcrtc
| * 956b740f jbd2: correct the printing of write_flags in jbd2_write_superblock()
| * 656d6841 clk: rockchip: rk3128: Fix HCLK_OTG gate register
| * 05644e63 drm/exynos: fix a wrong error checking
| * 0fc35b0d drm/exynos: fix a potential error pointer dereference
| * fb2f34d9 nvme: introduce helper function to get ctrl state
| * a8b1ddee ASoC: da7219: Support low DC impedance headset
| * 1059aa41 net/tg3: fix race condition in tg3_reset_task()
| * 44ad1b9e nouveau/tu102: flush all pdbs on vmm flush
| * ffe13302 ASoC: rt5650: add mutex to avoid the jack detection failure
| * 8b50b177 ASoC: cs43130: Fix incorrect frame delay configuration
| * 921ff9f2 ASoC: cs43130: Fix the position of const qualifier
| * 304529d5 ASoC: Intel: Skylake: mem leak in skl register function
| * 1e31b47b ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16
| * 9c89777c ASoC: Intel: Skylake: Fix mem leak in few functions
| * c7808301 ASoC: wm8974: Correct boost mixer inputs
| * 06a33eec nvme-core: check for too small lba shift
| * 974f127f drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
| * 52a33dbe debugfs: fix automount d_fsdata usage
| * 65bde47a mptcp: fix uninit-value in mptcp_incoming_options
| * 6b00598b ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro
| * 94e19205 pinctrl: lochnagar: Don't build on MIPS
| * 3e477400 f2fs: explicitly null-terminate the xattr list
* | 1a7db458 Revert "ipv6: remove max_size check inline with ipv4"
* |   d7e8b57d Merge "Merge 5.10.208 into android13-5.10-lts" into android13-5.10-lts
|\ \
| * | 4f160ce6 Merge 5.10.208 into android13-5.10-lts
| |\|
| | * 3fee45ee Linux 5.10.208
| | * 929ba864 Revert "nvme: use command_id instead of req->tag in trace_nvme_complete_rq()"
| | * 8a10841c PCI: Disable ATS for specific Intel IPU E2000 devices
| | * b74a0c4d PCI: Extract ATS disabling to a helper function
| | * 25d1e7be netfilter: nf_tables: Reject tables of unsupported family
| | * 03585b18 drm/qxl: fix UAF on handle creation
| | * dd56c579 ipv6: remove max_size check inline with ipv4
| | * c6b2a6b8 net: tls, update curr on splice as well
| | * d36b6b15 powerpc: update ppc_save_regs to save current r1 in pt_regs
| | * ae64985e mmc: sdhci-sprd: Fix eMMC init failure after hw reset
| | * f7796d76 mmc: core: Cancel delayed work before releasing host
| | * c29da60e mmc: rpmb: fixes pause retune on all RPMB partitions.
| | * c82efcaa mmc: meson-mx-sdhc: Fix initialization frozen issue
| | * 73704c6b mm: fix unmap_mapping_range high bits shift bug
| | * 4aca0af4 i2c: core: Fix atomic xfer check for non-preempt config
| | * 0ba8c7ef x86/kprobes: fix incorrect return address calculation in kprobe_emulate_call_indirect
| | * 23c006a7 firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards
| | * 70168fdc mm/memory-failure: check the mapcount of the precise page
| | * 18203c44 net: Implement missing SO_TIMESTAMPING_NEW cmsg support
| | * 701b03fc bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters()
| | * cfbf618e asix: Add check for usbnet_get_endpoints
| | * 0fc5fe6e net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues
| | * c492f9c7 net/qla3xxx: switch from 'pci_' to 'dma_' API
| | * 53e92564 i40e: Restore VF MSI-X state during PCI reset
| | * 6d3465c3 ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux
| | * e08399e8 ASoC: meson: g12a-toacodec: Fix event generation
| | * 51e88b2c ASoC: meson: g12a-tohdmitx: Validate written enum values
| | * 85f8d007 ASoC: meson: g12a-toacodec: Validate written enum values
| | * 21ecce24 i40e: fix use-after-free in i40e_aqc_add_filters()
| | * f8c03fd8 net: Save and restore msg_namelen in sock_sendmsg
| | * 06ce3b8e netfilter: nft_immediate: drop chain reference counter on error
| | * cf3c516d netfilter: nftables: add loop check helper function
| | * 4366b7e1 net: bcmgenet: Fix FCS generation for fragmented skbuffs
| | * d1eb7953 sfc: fix a double-free bug in efx_probe_filters
| | * cb69cad4 ARM: sun9i: smp: Fix array-index-out-of-bounds read in sunxi_mc_smp_init
| | * 8abb7ab7 net: sched: em_text: fix possible memory leak in em_text_destroy()
| | * ecdfb097 i40e: Fix filter input checks to prevent config with invalid values
| | * 8d4ae760 drm/i915/dp: Fix passing the correct DPCD_REV for drm_dp_set_phy_test_pattern
| | * 3ff48251 octeontx2-af: Fix marking couple of structure as __packed
| | * 6adeb15c nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local
| | * 74c9135d ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP ProBook 440 G6
| | * 132ba71b block: Don't invalidate pagecache for invalid falloc modes
| | * ef1d1d7c keys, dns: Fix missing size check of V1 server-list header
* | | ec631d62 ANDROID: db845c: Enable device tree overlay support
|/ /
* | d25beb65 Merge 5.10.207 into android13-5.10-lts
|\|
| * 03a0e87f Linux 5.10.207
| * a7fd5c7b scsi: core: Always send batch on reset or error handling command
| * e3041967 Revert "scsi: core: Add scsi_prot_ref_tag() helper"
| * f60f60e1 Revert "scsi: core: Introduce scsi_get_sector()"
| * a5edb407 Revert "scsi: core: Make scsi_get_lba() return the LBA"
| * 21292977 Revert "scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request"
| * cea19678 Revert "scsi: core: Use a structure member to track the SCSI command submitter"
| * 6963d049 Revert "scsi: core: Always send batch on reset or error handling command"
* | 97244112 Revert "ANDROID: GKI: Fix abi break in struct scsi_cmd"
* | 72168970 ANDROID: GKI: Fix abi break in struct scsi_cmd
* | 4c25bd58 Merge 5.10.206 into android13-5.10-lts
|/
* cf13ba74 Linux 5.10.206
* 2df1e188 spi: atmel: Fix PDC transfer setup bug
* 2a0a658e Bluetooth: SMP: Fix crash when receiving new connection when debug is enabled
* ecd50f82 Revert "MIPS: Loongson64: Enable DMA noncoherent support"
* 9175341b dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata()
* 73117ea0 netfilter: nf_tables: skip set commit for deleted/destroyed sets
* 8bf79dec tracing: Fix blocked reader of snapshot buffer
* 0afe4202 ring-buffer: Fix wake ups when buffer_percent is set to 100
* 9db5239d scsi: core: Always send batch on reset or error handling command
* f2d30198 scsi: core: Use a structure member to track the SCSI command submitter
* df83ca8e scsi: core: Use scsi_cmd_to_rq() instead of scsi_cmnd.request
* d054858a scsi: core: Make scsi_get_lba() return the LBA
* f230e6d4 scsi: core: Introduce scsi_get_sector()
* 294d66c3 scsi: core: Add scsi_prot_ref_tag() helper
* 929f475e spi: atmel: Fix CS and initialization bug
* 23d9267c spi: atmel: Switch to transfer_one transfer method
* db1b14ee Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
* 0c54b79d smb: client: fix OOB in smbCalcSize()
* 203a412e smb: client: fix OOB in SMB2_query_info_init()
* 79e158dd usb: fotg210-hcd: delete an incorrect bounds test
* da448f14 Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE
* 4bc91214 Bluetooth: use inclusive language in SMP
* e219c311 Bluetooth: SMP: Convert BT_ERR/BT_DBG to bt_dev_err/bt_dev_dbg
* cdbc4a11 ARM: dts: Fix occasional boot hang for am3 usb
* 1e2db012 9p/net: fix possible memory leak in p9_check_errors()
* c4a22227 x86/alternatives: Sync core before enabling interrupts
* 7d407ef1 lib/vsprintf: Fix %pfwf when current node refcount == 0
* 565fadc3 bus: ti-sysc: Flush posted write only after srst_udelay
* e50cfb54 tracing / synthetic: Disable events after testing in synth_event_gen_test_init()
* cd6e4159 dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp
* 786788bb net: ks8851: Fix TX stall caused by TX buffer overrun
* 391c1019 net: rfkill: gpio: set GPIO direction
* 6d7b8e5a net: 9p: avoid freeing uninit memory in p9pdu_vreadf
* 45b63f09 Input: soc_button_array - add mapping for airplane mode button
* 2aa744ad Bluetooth: L2CAP: Send reject on command corrupted request
* 25a6fdd2 Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent
* 71e1c765 USB: serial: option: add Quectel RM500Q R13 firmware support
* d521896b USB: serial: option: add Foxconn T99W265 with new baseline
* d0cf8a4b USB: serial: option: add Quectel EG912Y module support
* f41f44ce USB: serial: ftdi_sio: update Actisense PIDs constant names
* 20d84a19 wifi: cfg80211: fix certs build to not depend on file order
* 7a0a5cbf wifi: cfg80211: Add my certificate
* 9dcf50da iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma()
* abbebddb iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table
* c40db298 scsi: bnx2fc: Fix skb double free in bnx2fc_rcv()
* e3749f85 Input: ipaq-micro-keys - add error handling for devm_kmemdup
* b5f67cea iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw
* 505df1c0 interconnect: Treat xlate() returning NULL node as an error
* cc5eec86 btrfs: do not allow non subvolume root targets for snapshot
* bd267af1 smb: client: fix NULL deref in asn1_ber_decoder()
* 41350e81 ALSA: hda/hdmi: add force-connect quirk for NUC5CPYB
* a4692c38 ALSA: hda/hdmi: Add quirk to force pin connectivity on NUC10
* e032ddb0 pinctrl: at91-pio4: use dedicated lock class for IRQ
* 0b85149a i2c: aspeed: Handle the coalesced stop conditions with the start conditions.
* 3dce7a52 afs: Fix overwriting of result of DNS query
* 97be1e86 keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
* 9e0d18f9 net: check dev->gso_max_size in gso_features_check()
* 59dc16ce net: warn if gso_type isn't set for a GSO SKB
* 63ad66d4 afs: Fix dynamic root lookup DNS check
* 65d2c287 afs: Fix the dynamic root's d_delete to always delete unused dentries
* a3218319 net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev()
* 12e5a471 net/rose: fix races in rose_kill_by_device()
* be0988c9 ethernet: atheros: fix a memleak in atl1e_setup_ring_resources
* 8b6f8bfe net: sched: ife: fix potential use-after-free
* f245312e net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors
* e8ba688a net/mlx5: Fix fw tracer first block check
* fc4c53f8 net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list()
* 50aa92e6 Revert "net/mlx5e: fix double free of encap_header"
* b851889e wifi: mac80211: mesh_plink: fix matches_local logic
* 717f08fb s390/vx: fix save/restore of fpu kernel context
* c48219fa reset: Fix crash when freeing non-existent optional resets
* c999682c ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init
* dbc8edb8 smb: client: fix OOB in smb2_query_reparse_point()
* bc3c5749 ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE

Change-Id: I2da138082b8656c4f272176444b2de177e6d1846
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

Tested-by: Pavel Machek (CIP) <pavel@denx.de>
Tested-by: Dominique Martinet <dominique.martinet@atmark-techno.com>
Tested-by: Linux Kernel Functional Testing <lkft@linaro.org>
Tested-by: Florian Fainelli <florian.fainelli@broadcom.com>
Tested-by: kernelci.org bot <bot@kernelci.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

[ Upstream commit 3f42b142 ]

After upgrading from 5.16 to 6.1, our board with a MAX14830 started
producing lots of garbage data over UART. Bisection pointed out commit
285e76fc as the culprit. That patch tried to replace hand-written
code which I added in 2b4bac48 ("serial: max310x: Use batched reads
when reasonably safe") with the generic regmap infrastructure for
batched operations.

Unfortunately, the `regmap_raw_read` and `regmap_raw_write` which were
used are actually functions which perform IO over *multiple* registers.
That's not what is needed for accessing these Tx/Rx FIFOs; the
appropriate functions are the `_noinc_` versions, not the `_raw_` ones.

Fix this regression by using `regmap_noinc_read()` and
`regmap_noinc_write()` along with the necessary `regmap_config` setup;
with this patch in place, our board communicates happily again. Since
our board uses SPI for talking to this chip, the I2C part is completely
untested.

Fixes: 285e76fc ("serial: max310x: use regmap methods for SPI batch operations")
Cc: stable@vger.kernel.org
Reviewed-by: Andy Shevchenko <andy.shevchenko@gmail.com>
Signed-off-by: Jan Kundrát <jan.kundrat@cesnet.cz>
Link: https://lore.kernel.org/r/79db8e82aadb0e174bc82b9996423c3503c8fb37.1680732084.git.jan.kundrat@cesnet.cz


Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

[ Upstream commit 2e1f2d9a ]

I2C implementation on this chip has a few key differences
compared to SPI, as described in previous patches.
 * extended register space access needs no extra logic
 * slave address is used to select which UART to communicate
   with

To accommodate these differences, add an I2C interface config,
set the RevID register address and implement an empty method
for setting the GlobalCommand register, since no special handling
is needed for the extended register space.

To handle the port-specific slave address, create an I2C dummy
device for each port, except the base one (UART0), which is
expected to be the one specified in firmware, and create a
regmap for each I2C device.
Add minimum and maximum slave addresses to each devtype for
sanity checking.

Also, use a separate regmap config with no write_flag_mask,
since I2C has a R/W bit in its slave address, and set the
max register to the address of the RevID register, since the
extended register space needs no extra logic.

Finally, add the I2C driver.

Reviewed-by: Andy Shevchenko <andy.shevchenko@gmail.com>
Signed-off-by: Cosmin Tanislav <cosmin.tanislav@analog.com>
Link: https://lore.kernel.org/r/20220605144659.4169853-5-demonsingur@gmail.com


Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Stable-dep-of: 3f42b142 ("serial: max310x: fix IO data corruption in batched operations")
Signed-off-by: Sasha Levin <sashal@kernel.org>

[ Upstream commit b3883ab5 ]

SPI can only use 5 address bits, since one bit is reserved for
specifying R/W and 2 bits are used to specify the UART port.
To access registers that have addresses past 0x1F, an extended
register space can be enabled by writing to the GlobalCommand
register (address 0x1F).

I2C uses 8 address bits. The R/W bit is placed in the slave
address, and so is the UART port. Because of this, registers
that have addresses higher than 0x1F can be accessed normally.

To access the RevID register, on SPI, 0xCE must be written to
the 0x1F address to enable the extended register space, after
which the RevID register is accessible at address 0x5. 0xCD
must be written to the 0x1F address to disable the extended
register space.

On I2C, the RevID register is accessible at address 0x25.

Create an interface config struct, and add a method for
toggling the extended register space and a member for the RevId
register address. Implement these for SPI.

Reviewed-by: Andy Shevchenko <andy.shevchenko@gmail.com>
Signed-off-by: Cosmin Tanislav <cosmin.tanislav@analog.com>
Link: https://lore.kernel.org/r/20220605144659.4169853-4-demonsingur@gmail.com


Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Stable-dep-of: 3f42b142 ("serial: max310x: fix IO data corruption in batched operations")
Signed-off-by: Sasha Levin <sashal@kernel.org>