Here's a link to the config we use: https://cos.googlesource.com/third_party/kernel/+/refs/heads/cos-6.1/arch/x8...
Also, no issue here in this thread. The buggy commit looks like this one here: 459c7c565ac3: ovl: unprivieged mounts
Since this landed on 5.11, 5.10 doesn't need a backport.