Merge tag 'android13-5.15.170_r00' into android13-5.15

This merges up to the 5.15.170 LTS release into the android13-5.15
branch.  Changes included in here are:

* 1f9202a6 UPSTREAM: ACPI: PRM: Clean up guid type in struct prm_handler_info
*   74cdbb40 Merge 0d0d55b3 ("riscv: Remove duplicated GET_RM") into android13-5.15-lts
|\
| * 0d0d55b3 riscv: Remove duplicated GET_RM
| * 6ad44aa8 riscv: Remove unused GENERATING_ASM_OFFSETS
| * f6070925 riscv: Use '%u' to format the output of 'cpu'
| * ddb04c81 riscv: efi: Set NX compat flag in PE/COFF header
| * 1c54b0b0 riscv: vdso: Prevent the compiler from inserting calls to memset()
| * 69548bb6 nilfs2: fix potential deadlock with newly created symlinks
| * 7a59817f iio: light: veml6030: fix microlux value calculation
| * 4f588fff iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
| * 2f39548f staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
| * 8ac22fe1 wifi: iwlegacy: Clear stale interrupts before resuming device
| * 705be2dc wifi: ath10k: Fix memory leak in management tx
| * b2bcbe54 wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
| * 4749d336 Revert "driver core: Fix uevent_show() vs driver detach race"
| * c4f90f09 xhci: Use pm_runtime_get to prevent RPM on unsupported systems
| * 78a6caa0 xhci: Fix Link TRB DMA in command ring stopped completion event
| * 39188463 usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
| * 14d1e392 usb: phy: Fix API devm_usb_put_phy() can not release the phy
| * f9889e5f usbip: tools: Fix detach_port() invalid port error path
| * 057b5b97 misc: sgi-gru: Don't disable preemption in GRU driver
| * 9ce8e1d7 NFS: remove revoked delegation from server's delegation list
| * cb1711e6 net: amd: mvme147: Fix probe banner message
| * e1d57c29 scsi: scsi_transport_fc: Allow setting rport state to current state
| * 60fb94ef fs/ntfs3: Additional check in ni_clear()
| * 47e8a174 fs/ntfs3: Fix possible deadlock in mi_read
| * 759016b1 fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
| * e5ae7859 fs/ntfs3: Check if more than chunk-size bytes are written
| * c46d6b02 ACPI: CPPC: Make rmw_lock a raw_spin_lock
| * 564caf17 firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state()
| * b1d2de8a netfilter: nft_payload: sanitize offset and length before calling skb_checksum()
| * 9f605135 net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
| * ba22ea01 netfilter: Fix use-after-free in get_info()
| * 86c8ebe0 bpf: Fix out-of-bounds write in trie_get_next_key()
| * c2150f66 netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write()
| * 05df1b1d net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
| * 86833e4e gtp: allow -1 to be specified as file description from userspace
| * 5edcb3fd ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
| * ece593fc net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
| * 720be854 ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
| * 3f45d590 wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
| * daa426f1 wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
| * 120d8ce6 mac80211: Add support to trigger sta disconnect on hardware restart
| * 41c8acb3 mac80211: do drv_reconfig_complete() before restarting all
| * 730dc081 RDMA/bnxt_re: synchronize the qp-handle table array
| * adf37466 RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
| * 15d3b173 RDMA/cxgb4: Dump vendor specific QP details
| * 1c3beef5 wifi: brcm80211: BRCM_TRACING should depend on TRACING
| * e97b59cd wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
| * 52f47de4 mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
| * a69d18e8 cgroup: Fix potential overflow issue when checking max_depth
| * 8df52929 ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
| * 6ef99e50 ACPI: PRM: Change handler_addr type to void pointer
| * 0a1b0b04 ACPI: PRM: Remove unnecessary blank lines
| * 0f62358c ksmbd: fix user-after-free from session log off
| * 7bed9773 selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test
* | 431fb555 Merge 5.15.170 into android13-5.15-lts
|\|
| * 72244eab Linux 5.15.170
| * 2d08a6c3 xfrm: validate new SA's prefixlen using SA family when sel.family is unset
| * a8e691fe ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
| * b5cd035e net: phy: dp83822: Fix reset pin definitions
| * 399927f0 serial: protect uart_port_dtr_rts() in uart_shutdown() too
| * fcfc61f6 selinux: improve error checking in sel_write_load()
| * b7a396f7 hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
| * 610d4cea xfrm: fix one more kernel-infoleak in algo dumping
| * 385e2f3e ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
| * 58cb697d KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
| * dc39799f openat2: explicitly return -E2BIG for (usize > PAGE_SIZE)
| * 822203f6 nilfs2: fix kernel bug due to missing clearing of buffer delay flag
| * 681c9917 ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue
| * c5a3aaa3 ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
| * 60322877 drm/amd: Guard against bad data for ATIF ACPI method
| * df75b21a btrfs: zoned: fix zone unusable accounting for freed reserved extent
| * 6c6774cd ALSA: hda/realtek: Update default depop procedure
| * 7d4eb9e2 ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
| * b4007d5f bpf,perf: Fix perf_event_detach_bpf_prog error handling
| * e56e0ec1 posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
| * b96eff3d r8169: avoid unsolicited interrupts
| * 99961299 net: sched: fix use-after-free in taprio_change()
| * cc1c98da net: usb: usbnet: fix name regression
| * c9a0aed5 net: wwan: fix global oob in wwan_rtnl_policy
| * 90baa455 netfilter: xtables: fix typo causing some targets not to load on IPv6
| * 7dbd5b9f net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
| * 38eb5966 net: plip: fix break; causing plip to never transmit
| * 919ab6e2 be2net: fix potential memory leak in be_xmit()
| * 9c6ce55e net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
* | 25200983 Merge 45cb99c5 ("xfrm: respect ip protocols rules criteria when performing dst lookups") into android13-5.15-lts
|\|
| * 45cb99c5 xfrm: respect ip protocols rules criteria when performing dst lookups
| * 253843ec xfrm: extract dst lookup parameters into a struct
* | 8f485cd2 Merge b86b0d6e ("tracing: Consider the NULL character when validating the event length") into android13-5.15-lts
|\|
| * b86b0d6e tracing: Consider the NULL character when validating the event length
| * cdf3ab1c jfs: Fix sanity check in dbMount
| * f9e6e1f0 platform/x86: dell-sysman: add support for alienware products
| * 4b520c11 ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
| * 0e13fe42 arm64/uprobes: change the uprobe_opcode_t typedef to fix the sparse warning
| * e1ce098e platform/x86: dell-wmi: Ignore suspend notifications
| * 4fc0d866 udf: fix uninit-value use in udf_get_fileshortad
| * f952a334 arm64: Force position-independent veneers
| * 11db74f6 ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
| * 0bb2cb78 ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to default regs values
| * 34a42227 drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
| * b723f964 exec: don't WARN for racy path_noexec check
| * dd5db407 block, bfq: fix procress reference leakage for bfqq in merge chain
* | fa1d8b6c Merge 07353089 ("usb: dwc3: core: Fix system suspend on TI AM62 platforms") into android13-5.15-lts
|\|
| * 07353089 usb: dwc3: core: Fix system suspend on TI AM62 platforms
| * 81213d20 XHCI: Separate PORT and CAPs macros into dedicated file
| * c3f39268 usb: gadget: Add function wakeup support
* | 9efd694e Revert "genetlink: hold RCU in genlmsg_mcast()"
* | 41a431a7 ANDROID: GKI: fix up build break where timer_delete_sync() was used
* | 249b164c Merge 6a5de875 ("KVM: s390: gaccess: Check if guest address is in memslot") into android13-5.15-lts
|\|
| * 6a5de875 KVM: s390: gaccess: Check if guest address is in memslot
| * cbb31278 KVM: s390: gaccess: Cleanup access to guest pages
| * 567e7bcb KVM: s390: gaccess: Refactor access address range check
| * 1f1c1ccd KVM: s390: gaccess: Refactor gpa and length calculation
| * cf60d19d arm64: probes: Fix uprobes for big-endian kernels
| * acfb32d4 arm64:uprobe fix the uprobe SWBP_INSN in big-endian
| * fa58e23e Bluetooth: bnep: fix wild-memory-access in proto_unregister
| * 42d83e5f s390: Initialize psw mask in perf_arch_fetch_caller_regs()
| * 87474406 usb: typec: altmode should keep reference to parent
| * e07d05b7 smb: client: fix OOBs when building SMB2_IOCTL request
| * 39e02fa9 scsi: target: core: Fix null-ptr-deref in target_alloc_device()
| * 03ca631c genetlink: hold RCU in genlmsg_mcast()
| * 8459d61f tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
| * 5febfc54 net: systemport: fix potential memory leak in bcm_sysport_xmit()
| * 9e006c17 net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
| * 23114519 net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
| * 1eaa5819 net: ethernet: aeroflex: fix potential memory leak in greth_start_xmit_gbit()
| * 09839c24 macsec: don't increment counters for an unrelated SA
| * 75df8b53 octeontx2-af: Fix potential integer overflows on integer shifts
| * 213d1ff6 net: usb: usbnet: fix race in probe failure
| * b340df74 drm/msm: Allocate memory for disp snapshot with kvzalloc()
| * 42cf0450 drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
| * d125fbf1 drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
| * de5857fa RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
| * e810e6d4 RDMA/bnxt_re: Return more meaningful error
| * ca83bc31 ipv4: give an IPv4 dev to blackhole_netdev
| * 6a0c627c RDMA/irdma: Fix misspelling of "accept*"
| * 2e78ecb1 RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
| * 4e19aca8 ALSA: hda/cs8409: Fix possible NULL dereference
| * 208d3ede ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
| * e8143c06 x86/resctrl: Avoid overflow in MB settings in bw_validate()
| * 322a19ba RDMA/bnxt_re: Add a check for memory allocation
| * 0a2430b1 RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
| * fe068afb bpf: devmap: provide rxq after redirect
| * 4e1e4285 bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
* | 548ca9fb BACKPORT: udf: Allocate name buffer in directory iterator on heap
* | 1721891c Merge 5.15.169 into android13-5.15-lts
|/
* 74cdd62c Linux 5.15.169
* f7484772 ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2
* eb817fe2 powerpc/mm: Always update max/min_low_pfn in mem_topology_setup()
* edf81460 nilfs2: propagate directory read errors from nilfs_find_entry()
* 5b88612e mptcp: prevent MPC handshake on port-based signal endpoints
* 35301636 mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
* 2b1281f9 mptcp: fallback when MPTCP opts are dropped after 1st data
* 9729010a tcp: fix mptcp DSS corruption due to large pmtu xmit
* 12c1676d mptcp: handle consistently DSS corruption
* 6654efe2 mptcp: track and update contiguous data status
* 755b9532 irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
* 655f5d46 pinctrl: ocelot: fix system hang on level based interrupts
* b6400eb0 x86/entry_32: Clear CPU buffers after register restore in NMI return
* a6f4701f x86/entry_32: Do not clobber user EFLAGS.ZF
* 12dd888f x86/apic: Always explicitly disarm TSC-deadline timer
* 7861ca27 x86/resctrl: Annotate get_mem_config() functions as __init
* 44031190 parport: Proper fix for array out-of-bounds access
* 88a89207 USB: serial: option: add Telit FN920C04 MBIM compositions
* d062bbc5 USB: serial: option: add support for Quectel EG916Q-GL
* b6ae69ec xhci: Mitigate failed set dequeue pointer commands
* dca9429c xhci: Fix incorrect stream context type macro
* 7c270acf Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
* 04bba471 Bluetooth: Remove debugfs directory on module init failure
* bb76a6ec iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
* 7db9bcb8 iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
* c202eadb iio: light: opt3001: add missing full-scale range value
* 50039aec iio: light: veml6030: fix IIO device retrieval from embedded device
* cf95ce2c iio: light: veml6030: fix ALS sensor resolution
* 3cf71f6f iio: hid-sensors: Fix an error handling path in _hid_sensor_set_report_latency()
* 37be5d0d iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
* e209a51a iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
* 51a9a143 iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
* 605c0d55 iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
* 572006a0 drm/vmwgfx: Handle surface check failure correctly
* fda5dc80 drm/radeon: Fix encoder->possible_clones
* e8dd8013 io_uring/sqpoll: close race on waiting for sqring entries
* 455a4697 blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
* 0b263c20 x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
* 0cced32e x86/bugs: Skip RSB fill at VMEXIT
* e421c683 x86/entry: Have entry_ibpb() invalidate return predictions
* 1e0398ac x86/cpufeatures: Add a IBPB_NO_RET BUG flag
* 43bdd2ea x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
* dad88f26 KVM: s390: Change virtual to physical address access in diag 0x258 handler
* 41693253 s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
* 0bd9a30c iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
* 07efbee2 io_uring/sqpoll: do not put cpumask on stack
* 939007d2 io_uring/sqpoll: retain test for whether the CPU is valid
* 592e7864 io_uring/sqpoll: do not allow pinning outside of cpuset
* 3ae63a8c drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
* 82bd728a KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
* b825e0f9 dm-crypt, dm-verity: disable tasklets
* e8a834eb wifi: mac80211: fix potential key use-after-free
* d0ae6ffa secretmem: disable memfd_secret() if arch cannot set direct map
* e41710f5 mm/swapfile: skip HugeTLB pages for unuse_vma
* cc1102b5 fat: fix uninitialized variable
* 1043b645 irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
* c81dcaa9 net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-link PHY
* 659fae60 arm64: probes: Fix simulate_ldr*_literal()
* ad4bc35a arm64: probes: Remove broken LDR (literal) uprobe support
* c8789fbe posix-clock: Fix missing timespec64 check in pc_clock_settime()
* dcc72074 net: enetc: add missing static descriptor and inline keyword
* 6430aaae net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
* 9c439311 udf: Fix bogus checksum computation in udf_rename()
* 4a1d95fc udf: Don't return bh from udf_expand_dir_adinicb()
* dfb34bb9 udf: Handle error when expanding directory
* cb2b0325 udf: Remove old directory iteration code
* 0003d349 udf: Convert udf_link() to new directory iteration code
* 25815ac6 udf: Convert udf_mkdir() to new directory iteration code
* feeb42a7 udf: Convert udf_add_nondir() to new directory iteration
* f3c2fe1d udf: Implement adding of dir entries using new iteration code
* 55b445b2 udf: Convert udf_unlink() to new directory iteration code
* 8c32b93e udf: Convert udf_rmdir() to new directory iteration code
* 6decbe20 udf: Convert empty_dir() to new directory iteration code
* dd74f6d3 udf: Convert udf_get_parent() to new directory iteration code
* 8cd380c6 udf: Convert udf_lookup() to use new directory iteration code
* 39d52a11 udf: Convert udf_readdir() to new directory iteration
* 626860c4 udf: Convert udf_rename() to new directory iteration code
* e6355892 udf: Provide function to mark entry as deleted using new directory iteration code
* a48e84cc udf: Implement searching for directory entry using new iteration code
* 7add383b udf: Move udf_expand_dir_adinicb() to its callsite
* 31119244 udf: Convert udf_expand_dir_adinicb() to new directory iteration
* de268ec6 udf: New directory iteration code
* 46dcafa9 ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2

Change-Id: Ia3a5aae9de7eed202b824371a4f2dcf8b7e35642
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>