Merge tag 'android14-5.15.137_r00' into branch 'android14-5.15'

This merges the 5.15.y LTS releases up to 5.15.137 into the
android14-5.15 branch.

Include in here are the following commits:

* 575f85f9 Revert "ipv4/fib: send notify when delete source address routes"
* b4bfba5c Revert "perf: Disallow mis-matched inherited group reads"
* 2173e8b3 Revert "xfrm: fix a data-race in xfrm_gen_index()"
* f0fd3e24 Revert "Bluetooth: hci_core: Fix build warnings"
* 2fbc60aa ANDROID: GKI: arm64: drop CONFIG_DEBUG_PREEMPT forced disable
*   72549967 Merge 5.15.137 into android14-5.15-lts
|\
| * 12952a23 Linux 5.15.137
| * dff33880 xfrm6: fix inet6_dev refcount underflow problem
| * 5a9d05a4 Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name
| * a6df96ee Bluetooth: hci_sock: fix slab oob read in create_monitor_event
| * c08d609f phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
| * e1b030b1 phy: mapphone-mdm6600: Fix runtime PM for remove
| * 59f1095a phy: mapphone-mdm6600: Fix runtime disable on probe
| * b618062c serial: 8250: omap: Move uart_write() inside PM section
| * 67f29cd2 ASoC: pxa: fix a memory leak in probe()
| * 76d04c33 gpio: vf610: set value before the direction to avoid a glitch
| * 4b129e39 platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events
| * e1a058cc platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e
| * c6bbe51d platform/surface: platform_profile: Propagate error if profile registration fails
| * a73c8d71 s390/cio: fix a memleak in css_alloc_subchannel
| * c8b6c2df selftests/ftrace: Add new test case which checks non unique symbol
| * 3ad81e6a s390/pci: fix iommu bitmap allocation
| * 71d224ac perf: Disallow mis-matched inherited group reads
| * 5aa89a11 USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
| * 8c376d86 USB: serial: option: add entry for Sierra EM9191 with new firmware
| * 48322121 USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
| * e750fb71 nvme-rdma: do not try to stop unallocated queues
| * a9fd6d44 nvme-pci: add BOGUS_NID for Intel 0a54 device
| * 071382bd ACPI: irq: Fix incorrect return value in acpi_register_gsi()
| * 431a5010 NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server
| * 5762e72e pNFS: Fix a hang in nfs4_evict_inode()
| * 5a3abee2 Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()"
| * 24959825 mmc: core: Capture correct oemid-bits for eMMC cards
| * 8041e7b7 mmc: core: sdio: hold retuning if sdio in 1-bit mode
| * 262029c0 mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw
| * 3e363db1 mtd: physmap-core: Restore map_rom fallback
| * 71823463 mtd: spinand: micron: correct bitmask for ecc status
| * a50d2f17 mtd: rawnand: arasan: Ensure program page operations are successful
| * ae53c92e mtd: rawnand: marvell: Ensure program page operations are successful
| * c0ca2ab2 mtd: rawnand: pl353: Ensure program page operations are successful
| * a7070628 mtd: rawnand: qcom: Unmap the right resource upon probe failure
| * 3f928d13 net: fix ifname in netlink ntf during netns move
| * ac43ec29 net: move from strlcpy with unused retval to strscpy
| * 30e2db40 net: introduce a function to check if a netdev name is in use
| * 38ba5479 Bluetooth: hci_event: Fix using memcmp when comparing keys
| * 3b2da6d6 net/mlx5: Handle fw tracer change ownership event based on MTRC
| * f6e26382 platform/x86: touchscreen_dmi: Add info for the Positivo C4128B
| * ca56d8af HID: multitouch: Add required quirk for Synaptics 0xcd7e device
| * ca5bec7e btrfs: error out when reallocating block for defrag using a stale transaction
| * 2692fd37 btrfs: error when COWing block from a root that is being deleted
| * ef491d95 btrfs: error out when COWing block using a stale transaction
| * f89ed0a0 btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c
| * df486b75 drm: panel-orientation-quirks: Add quirk for One Mix 2S
| * d5ba30ee ipv4/fib: send notify when delete source address routes
| * 9d07b7ab sky2: Make sure there is at least one frag_addr available
| * f652eb4a regulator/core: Revert "fix kobject release warning and memory leak in regulator_register()"
| * aa77b187 wifi: cfg80211: avoid leaking stack data into trace
| * 30a2285a wifi: mac80211: allow transmitting EAPOL frames with tainted key
| * b64eb31a wifi: cfg80211: Fix 6GHz scan configuration
| * bbec1724 Bluetooth: hci_core: Fix build warnings
| * 02b0e699 Bluetooth: Avoid redundant authentication
| * 38681af2 Bluetooth: btusb: add shutdown function for QCA6174
| * e6e9a32c HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event
| * 06aabf77 wifi: iwlwifi: Ensure ack flag is properly cleared.
| * 6063f6f6 wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len
| * 59ebfeb7 tracing: relax trace_event_eval_update() execution with cond_resched()
| * 3d85fb39 ata: libata-eh: Fix compilation warning in ata_eh_link_report()
| * 89e3cc1b ata: libata-core: Fix compilation warning in ata_dev_config_ncq()
| * 137c658e gpio: timberdale: Fix potential deadlock on &tgpio->lock
| * 68f106c2 overlayfs: set ctime when setting mtime and atime
| * ef3c62e2 i2c: mux: Avoid potential false error message in i2c_mux_add_adapter
| * e2f64f3e btrfs: initialize start_slot in btrfs_log_prealloc_extents
| * 266dab0c btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1
| * bc424f18 fs-writeback: do not requeue a clean inode having skipped pages
| * 92609823 ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone
| * 3898d8d6 ksmbd: not allow to open file if delelete on close bit is set
| * d3dc26c4 nfp: flower: avoid rmmod nfp crash issues
| * 6c52b121 mctp: perform route lookups under a RCU read-side lock
| * db3f17e5 mctp: Allow local delivery to the null EID
| * 29017ab1 powerpc/47x: Fix 47x syscall return crash
| * 558ee0fa powerpc/32s: Do kuep_lock() and kuep_unlock() in assembly
| * d00f4ae3 powerpc/32s: Remove capability to disable KUEP at boottime
| * fcb3f09e drm/atomic-helper: relax unregistered connector check
| * 403d201d perf/x86/lbr: Filter vsyscall addresses
| * 419ac18d perf/x86: Move branch classifier
| * 030099bc perf: Add irq and exception return branch types
| * ae80d529 iio: adc: ad7192: Correct reference voltage
| * 569a126f iio: cros_ec: fix an use-after-free in cros_ec_sensors_push_data()
| * a9c47189 iio: core: introduce iio_device_{claim|release}_buffer_mode() APIs
| * eafbb196 iio: core: Hide read accesses to iio_dev->currentmode
| * 91972134 iio: Un-inline iio_buffer_enabled()
| * 7f74bc91 serial: 8250_omap: Fix errors with no_console_suspend
| * d67d831e serial: 8250: omap: Fix imprecise external abort for omap_8250_pm()
| * aff3019b selftests/mm: fix awk usage in charge_reserved_hugetlb.sh and hugetlb_reparenting_test.sh that may cause error
| * 4f1d3d1c net: pktgen: Fix interface flags printing
| * 8bdf95e2 netfilter: nf_tables: revert do not remove elements if set backend implements .abort
| * cc19daa0 netfilter: nf_tables: do not remove elements if set backend implements .abort
| * db337206 netfilter: nft_set_rbtree: .deactivate fails if element has expired
| * 44768cad neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section
| * b33179db net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve
| * 0426d7bc bonding: Return pointer to data after pull on skb
| * 66982023 net: dsa: bcm_sf2: Fix possible memory leak in bcm_sf2_mdio_register()
| * 0ea47686 i40e: prevent crash on probe if hw registers have invalid values
| * f9202217 net: usb: smsc95xx: Fix an error code in smsc95xx_reset()
| * a2ceb30c ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr
| * a270aa7a tun: prevent negative ifindex
| * 9d55719f tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb
| * 8ae34429 tcp: fix excessive TLP and RACK timeouts from HZ rounding
| * 8b6b4ca4 net: rfkill: gpio: prevent value glitch during probe
| * 4df9ba0d net: ipv6: fix return value check in esp_remove_trailer
| * a9651e66 net: ipv4: fix return value check in esp_remove_trailer
| * 26a3c734 xfrm: interface: use DEV_STATS_INC()
| * f8bc4b70 xfrm: fix a data-race in xfrm_gen_index()
| * b660e58e qed: fix LL2 RX buffer allocation
| * d35f398b ASoC: codecs: wcd938x: fix unbind tear down order
| * d182d8ed ASoC: codecs: wcd938x: drop bogus bind error handling
| * 8d32a6b6 ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors
| * 6df571a6 ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind
| * 36eabe87 drm/i915: Retry gtt fault when out of fence registers
| * 34f62612 nvmet-tcp: Fix a possible UAF in queue intialization setup
| * 04e0eef7 netfilter: nft_payload: fix wrong mac header matching
| * efe43d1b fs/ntfs3: fix deadlock in mark_as_free_ex
| * ab40c7ab fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea()
| * 24badb9d fs/ntfs3: Fix possible null-pointer dereference in hdr_find_e()
| * ff38d2a7 tcp: check mptcp-level constraints for backlog coalescing
| * 582f7993 x86/sev: Check for user-space IOIO pointing to kernel space
| * 5c2c01be x86/sev: Check IOBM for IOIO exceptions from user-space
| * 6797c6d0 x86/sev: Disable MMIO emulation from user mode
| * 0b4e772a KVM: x86: Mask LVTPC when handling a PMI
| * f61c43be regmap: fix NULL deref on lookup
| * ffdc881f nfc: nci: fix possible NULL pointer dereference in send_acknowledge()
| * d42aeae1 ice: reset first in crash dump kernels
| * e42cecb5 ice: fix over-shifted variable
| * f6c093b9 Bluetooth: avoid memcmp() out of bounds warning
| * e5f8b43c Bluetooth: hci_event: Fix coding style
| * 1597c1ed Bluetooth: vhci: Fix race when opening vhci device
| * 1ef07152 Bluetooth: Fix a refcnt underflow problem for hci_conn
| * dd6b62fd Bluetooth: Reject connection with the device which has same BD_ADDR
| * 848a05c4 Bluetooth: hci_event: Ignore NULL link key
| * e7a2aa77 xfs: don't expose internal symlink metadata buffers to the vfs
| * fe5c6fbc Documentation: sysctl: align cells in second content column
| * 18158446 lib/Kconfig.debug: do not enable DEBUG_PREEMPT by default
* | 045b9e5d Merge branch 'android14-5.15' into branch 'android14-5.15-lts'
* | 0a427f18 Revert "net: add sysctl accept_ra_min_rtr_lft"
* | 9144a81d Revert "net: change accept_ra_min_rtr_lft to affect all RA lifetimes"
* | 7b3ee41b Revert "net: release reference to inet6_dev pointer"
* | 6e12d0e4 Revert "scsi: core: Use a structure member to track the SCSI command submitter"
* | 85619280 Revert "scsi: core: Rename scsi_mq_done() into scsi_done() and export it"
* | d22695f2 Revert "scsi: ib_srp: Call scsi_done() directly"
* | 52a4732d Revert "RDMA/srp: Do not call scsi_done() from srp_abort()"
* | 3f8a032c Revert "net: macsec: indicate next pn update when offloading"
* | 3f8e18a0 Revert "net: phy: mscc: macsec: reject PN update requests"
* | fec7f6b9 Merge 5.15.136 into android14-5.15-lts
|\|
| * 00c03985 Linux 5.15.136
| * 5266b5b6 eth: remove remaining copies of the NAPI_POLL_WEIGHT define
| * 528f0ba9 usb: hub: Guard against accesses to uninitialized BOS descriptors
| * 542a3f1a Revert "kernel/sched: Modify initial boot task idle setup"
| * 737ce551 arm64: armv8_deprecated: fix unused-function error
| * 2e10931e arm64: armv8_deprecated: rework deprected instruction handling
| * abd4aa08 arm64: armv8_deprecated: move aarch32 helper earlier
| * f10abdb0 arm64: armv8_deprecated move emulation functions
| * 0b4eec01 arm64: armv8_deprecated: fold ops into insn_emulation
| * a8d2910b arm64: rework EL0 MRS emulation
| * 057f9123 arm64: factor insn read out of call_undef_hook()
| * 3f82927c arm64: factor out EL1 SSBS emulation hook
| * 474385ad arm64: split EL0/EL1 UNDEF handlers
| * de035863 arm64: allow kprobes on EL0 handlers
| * 7154e2db arm64: rework BTI exception handling
| * cd5ceadc arm64: rework FPAC exception handling
| * b6358002 arm64: consistently pass ESR_ELx to die()
| * 7ddb1ef2 arm64: die(): pass 'err' as long
| * 9a3e177e arm64: report EL1 UNDEFs better
| * d6808be3 powerpc/64e: Fix wrong test in __ptep_test_and_clear_young()
| * 9c0dc3e2 powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE
| * 4da05eba dmaengine: mediatek: Fix deadlock caused by synchronize_irq()
| * 82f61b2d dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq
| * ecba5afe x86/alternatives: Disable KASAN in apply_alternatives()
| * cbd2aac0 usb: cdnsp: Fixes issue with dequeuing not queued requests
| * 7014807f usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call
| * 50259cf7 usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
| * 308f1924 counter: microchip-tcb-capture: Fix the use of internal GCLK logic
| * 5a6ce81d pinctrl: avoid unsafe code pattern in find_pinctrl()
| * 1c790191 cgroup: Remove duplicates in cgroup v1 tasks file
| * 1680c829 tee: amdtee: fix use-after-free vulnerability in amdtee_close_session
| * b8ec40a9 Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case
| * d092630e Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table
| * 7cea6fa2 Input: xpad - add PXN V900 support
| * 6ff4e50e Input: psmouse - fix fast_reconnect function for PS/2 mode
| * 6a4a3963 Input: powermate - fix use-after-free in powermate_config_complete
| * 6ad7f52d ceph: fix type promotion bug on 32bit systems
| * c0c4acd5 ceph: fix incorrect revoked caps assert in ceph_fill_file_size()
| * 58f0e632 libceph: use kernel_connect()
| * d727b97f thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding
| * 04c38bed thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge
| * a586742a mcb: remove is_added flag from mcb_device struct
| * 4382d1a9 x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs
| * 76316700 ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA
| * 510d4a01 drm/amd/display: Don't set dpms_off for seamless boot
| * 9cb61ab9 drm/amdgpu: add missing NULL check
| * f9a1af37 iio: pressure: ms5611: ms5611_prom_is_valid false negative bug
| * 09b8ed95 iio: pressure: dps310: Adjust Timeout Settings
| * 4c80ecef iio: pressure: bmp280: Fix NULL pointer exception
| * a625de7e usb: musb: Modify the "HWVers" register address
| * eb28694f usb: musb: Get the musb_qh poniter after musb_giveback
| * ee881418 usb: cdns3: Modify the return value of cdns_set_active () to void when CONFIG_PM_SLEEP is disabled
| * 3b2dbc4f usb: dwc3: Soft reset phy on probe for host
| * 42c56e01 net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read
| * 524f4536 usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer
| * 1d8e7fe8 xhci: Keep interrupt disabled in initialization until host is running.
| * cb34e3b2 dmaengine: stm32-mdma: abort resume if no ongoing transfer
| * d56dbfe7 media: mtk-jpeg: Fix use after free bug due to uncanceled work
| * 5e13e69d net: release reference to inet6_dev pointer
| * aade10d5 net: change accept_ra_min_rtr_lft to affect all RA lifetimes
| * 8f12d2d6 net: add sysctl accept_ra_min_rtr_lft
| * bc9f6cbe workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask()
| * 25dd54b9 nfc: nci: assert requested protocol is valid
| * b2bb3b43 pinctrl: renesas: rzn1: Enable missing PINMUX
| * c4140dd7 net/smc: Fix pos miscalculation in statistics
| * d888d3f7 net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn()
| * 249a1fdb net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp
| * 2112cacb ixgbe: fix crash with empty VF macvlan list
| * 935a1533 net: phy: mscc: macsec: reject PN update requests
| * 667fe910 net: macsec: indicate next pn update when offloading
| * 2dcb31e6 bpf: Fix verifier log for async callback return values
| * 6a217af2 drm/vmwgfx: fix typo of sizeof argument
| * 72ef7088 riscv, bpf: Sign-extend return values
| * 7795592e riscv, bpf: Factor out emit_call for kernel and bpf context
| * 58941cc7 xen-netback: use default TX queue size for vifs
| * cffdced1 eth: remove copies of the NAPI_POLL_WEIGHT define
| * 5c360eec mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type
| * 84c6aa0a ieee802154: ca8210: Fix a potential UAF in ca8210_probe
| * 616761cf ravb: Fix use-after-free issue in ravb_tx_timeout_work()
| * 30ebd417 ravb: Fix up dma_free_coherent() call in ravb_remove()
| * 3f39de2b drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow
| * 85ae07d4 drm/msm/dsi: fix irq_of_parse_and_map() error checking
| * 9a890c7d drm/msm/dsi: skip the wait for video mode done if not applicable
| * b9de60b6 drm/msm/dp: do not reinitialize phy unless retry during link training
| * afe5f596 KEYS: trusted: Remove redundant static calls usage
| * 20e73ece KEYS: trusted: allow use of kernel RNG for key material
| * a01d68b6 ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset
| * 5b5e5829 net: prevent address rewrite in kernel_bind()
| * 56e96b38 quota: Fix slow quotaoff
| * 28ddc1e0 HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
| * b930f0f7 lib/test_meminit: fix off-by-one error in test_pages()
| * 982bd86f platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section mismatch warning
| * 124cf0ea platform/x86: think-lmi: Fix reference leak
| * 3d2a16f8 of: overlay: Reorder struct fragment fields kerneldoc
| * 10f4a0b6 perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7
| * b7966e21 RDMA/cxgb4: Check skb value for failure to allocate
| * b9bdffb3 RDMA/srp: Do not call scsi_done() from srp_abort()
| * 7d499958 scsi: ib_srp: Call scsi_done() directly
| * d2746cdf scsi: core: Rename scsi_mq_done() into scsi_done() and export it
| * 8f2350e2 scsi: core: Use a structure member to track the SCSI command submitter
| * 29298c85 iommu/vt-d: Avoid memory allocation in iommu_suspend()
* | 9b75bddd Revert "netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp"
* | ca18f7a2 Merge 5.15.135 into android14-5.15-lts
|\|
| * 02e21884 Linux 5.15.135
| * c8af81a9 xen/events: replace evtchn_rwlock with RCU
| * c346494e parisc: Restore __ldcw_align for PA-RISC 2.0 processors
| * 694e1373 ksmbd: fix uaf in smb20_oplock_break_ack
| * e914c3a4 RDMA/mlx5: Fix NULL string error
| * 81b7bf36 RDMA/siw: Fix connection failure handling
| * 5d8bd138 RDMA/uverbs: Fix typo of sizeof argument
| * 60c9ed88 RDMA/cma: Fix truncation compilation warning in make_cma_ports
| * 7f6136ce RDMA/cma: Initialize ib_sa_multicast structure to 0 when join
| * 1dd6095f gpio: pxa: disable pinctrl calls for MMP_GPIO
| * 844fcf4c gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config()
| * 1878d666 IB/mlx4: Fix the size of a buffer in add_port_entries()
| * 718d9b44 of: dynamic: Fix potential memory leak in of_changeset_action()
| * e0878f38 RDMA/core: Require admin capabilities to set system parameters
| * 18a83906 dm zoned: free dmz->ddev array in dmz_put_zoned_devices
| * 8781fe25 HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit
| * 949ccc91 HID: sony: remove duplicate NULL check before calling usb_free_urb()
| * a02c02ad sctp: update hb timer immediately after users change hb_interval
| * 7783b471 sctp: update transport state when processing a dupcook packet
| * 1abac613 tcp: fix delayed ACKs for MSS boundary condition
| * 821b3b00 tcp: fix quick-ack counting to count actual ACKs of new data
| * 24fb22bd tipc: fix a potential deadlock on &tx->lock
| * 2e53585e net: stmmac: dwmac-stm32: fix resume on STM32 MCU
| * 74e56932 ipv4: Set offload_failed flag in fibmatch results
| * a4b9bbd1 netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure
| * 88497f74 netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp
| * 0c9cf5e8 ibmveth: Remove condition to recompute TCP header checksum.
| * 5a899e2c net: ethernet: ti: am65-cpsw: Fix error code in am65_cpsw_nuss_init_tx_chns()
| * 4837a192 net: nfc: llcp: Add lock when modifying device list
| * cda10784 net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg
| * 2801a1dd net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent
| * cb145e6c ptp: ocp: Fix error handling in ptp_ocp_device_init
| * cd118995 ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data()
| * 147d89ee net: fix possible store tearing in neigh_periodic_work()
| * bdb4fcf1 modpost: add missing else to the "of" check
| * bc8b89b6 bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets
| * 9fb4dfb8 NFSv4: Fix a nfs4_state_manager() race
| * fcdd79fd ima: rework CONFIG_IMA dependency block
| * b67adca1 scsi: target: core: Fix deadlock due to recursive locking
| * 9a103e0b ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig
| * bb6aee06 regmap: rbtree: Fix wrong register marked as in-cache when creating new node
| * 0cee8c1b wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling
| * 3f6fbbcc drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close()
| * ebad2e4c bpf: Fix tr dereferencing
| * 5afb9963 wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet
| * 7c8faa31 wifi: iwlwifi: mvm: Fix a memory corruption issue
| * 5db7af53 iwlwifi: avoid void pointer arithmetic
| * 6ff75f52 wifi: iwlwifi: dbg_ini: fix structure packing
| * 0ea2a634 ubi: Refuse attaching if mtd's erasesize is 0
| * bb0707fd HID: sony: Fix a potential memory leak in sony_probe()
| * 8afbacf6 arm64: Add Cortex-A520 CPU part definition
| * 0da6d21b drm/amd: Fix detection of _PR3 on the PCIe root port
| * 1ad7ccd4 net: prevent rewrite of msg_name in sock_sendmsg()
| * 0fb3df94 net: replace calls to sock->ops->connect() with kernel_connect()
| * 37b54e8a wifi: mwifiex: Fix tlv_buf_left calculation
| * e80f55d6 qed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info
| * 1e69422e vringh: don't use vringh_kiov_advance() in vringh_iov_xfer()
| * 4e2f8395 scsi: zfcp: Fix a double put in zfcp_port_enqueue()
| * 310bca64 Revert "clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz"
| * 3f59e635 block: fix use-after-free of q->q_usage_counter
| * b75b017b rbd: take header_rwsem in rbd_dev_refresh() only when updating
| * 33229d78 rbd: decouple parent info read-in from updating rbd_dev
| * ab73e7ed rbd: decouple header read-in from updating rbd_dev->header
| * b4ddad3f rbd: move rbd_dev_refresh() definition
| * bb1fae81 iommu/arm-smmu-v3: Avoid constructing invalid range commands
| * c4edc7b5 iommu/arm-smmu-v3: Set TTL invalidation hint better
| * a98ad3ad arm64: Avoid repeated AA64MMFR1_EL1 register read on pagefault path
| * aad6ba17 ring-buffer: Fix bytes info in per_cpu buffer stats
| * 8012d0b0 ring-buffer: remove obsolete comment for free_buffer_page()
| * 65a218ca NFSv4: Fix a state manager thread deadlock regression
| * 8454a2f5 NFS: rename nfs_client_kset to nfs_kset
| * f8b0b6a8 NFS: Cleanup unused rpc_clnt variable
| * 686746be ASoC: tegra: Fix redundant PLLA and PLLA_OUT0 updates
| * 0a210e63 ASoC: soc-utils: Export snd_soc_dai_is_dummy() symbol
| * b4f7f155 spi: zynqmp-gqspi: fix clock imbalance on probe failure
| * e514f897 spi: zynqmp-gqspi: Convert to platform remove callback returning void
* | aaa8347a Merge 5.15.134 into android14-5.15-lts
|\|
| * 1edcec18 Linux 5.15.134
| * 09a68302 netfilter: nf_tables: fix kdoc warnings after gc rework
| * 66cb6d74 drm/meson: fix memory leak on ->hpd_notify callback
| * 91f1f025 fs: binfmt_elf_efpic: fix personality for ELF-FDPIC
| * 1cae7473 ata: libata-sata: increase PMP SRST timeout to 10s
| * e74adc58 ata: libata-core: Do not register PM operations for SAS ports
| * 4cbd55a8 ata: libata-core: Fix port and device removal
| * ddc525ff ata: libata-core: Fix ata_port_request_pm() locking
| * 2990a195 net: thunderbolt: Fix TCPv6 GSO checksum calculation
| * 132a5ae4 bpf: Fix BTF_ID symbol generation collision in tools/
| * 58d560e9 bpf: Fix BTF_ID symbol generation collision
| * f8673f65 btrfs: properly report 0 avail for very full file systems
| * b5d00cd7 ring-buffer: Update "shortest_full" in polling
| * 00d2cb80 proc: nommu: /proc/<pid>/maps: release mmap read lock
| * 40527ebb Revert "SUNRPC dont update timeout value on connection reset"
| * a2b1d486 io_uring/fs: remove sqe->rw_flags checking from LINKAT
| * 111fe77c sched/rt: Fix live lock between select_fallback_rq() and RT push
| * 3569ad59 kernel/sched: Modify initial boot task idle setup
| * 07f78e97 i2c: i801: unregister tco_pdev in i801_probe() error path
| * 70df8b9c ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES
| * a7e0c10a ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q
| * 0c5fd85f netfilter: nf_tables: disallow rule removal from chain binding
| * 3936e871 nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
| * 2b837f13 serial: 8250_port: Check IRQ data before use
| * a48d2bcd Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux"
| * 78e70c62 misc: rtsx: Fix some platforms can not boot and move the l1ss judgment to probe
| * f090a8b4 x86/srso: Add SRSO mitigation for Hygon processors
| * f5a60475 iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range
| * efce75bd Smack:- Use overlay inode label in smack_inode_copy_up()
| * 0e345048 smack: Retrieve transmuting information in smack_inode_getsecurity()
| * 3586b3fe smack: Record transmuting in smk_transmuted
| * 9690ad55 nvme-pci: always return an ERR_PTR from nvme_pci_alloc_dev
| * 3c29c6e8 scsi: qla2xxx: Fix NULL pointer dereference in target mode
| * 6e5e4223 i40e: fix potential NULL pointer dereferencing of pf->vf i40e_sync_vsi_filters()
| * aff3994d watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running
| * 83a30e94 watchdog: iTCO_wdt: No need to stop the timer in probe
| * 1e8c573f nvme-pci: do not set the NUMA node of device if it has none
| * 182d13da nvme-pci: factor out a nvme_pci_alloc_dev helper
| * af58072e nvme-pci: factor the iod mempool creation into a helper
| * c8bc4493 cgroup: Fix suspicious rcu_dereference_check() usage warning
| * ce6b88a5 sched/cpuacct: Optimize away RCU read lock
| * b1deb155 perf build: Define YYNOMEM as YYNOABORT for bison < 3.81
| * 86e65ffc fbdev/sh7760fb: Depend on FB=y
| * 4bf0044f ncsi: Propagate carrier gain/loss events to the NCSI controller
| * 288990ec powerpc/watchpoints: Annotate atomic context in more places
| * 47a94e87 powerpc/watchpoint: Disable pagefaults when getting user instruction
| * 7eb09f70 powerpc/watchpoints: Disable preemption in thread_change_pc()
| * 134b01a3 media: vb2: frame_vector.c: replace WARN_ONCE with a comment
| * baf7cf0f ASoC: imx-rpmsg: Set ignore_pmdown_time for dai_link
| * 9da93c74 bpf: Clarify error expectations from bpf_clone_redirect
| * e1a8b79a ASoC: fsl: imx-pcm-rpmsg: Add SNDRV_PCM_INFO_BATCH flag
| * 45e028ac spi: stm32: add a delay before SPI disable
| * 25850bf8 spi: nxp-fspi: reset the FLSHxCR1 registers
| * 50662d21 ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset()
| * 8e3cdab9 smb3: correct places where ENOTSUPP is used instead of preferred EOPNOTSUPP
| * d540a437 scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command
| * fde57d7b scsi: pm80xx: Use phy-specific SAS address when sending PHY_START command
| * a1589abd drm/amdgpu: Handle null atom context in VBIOS info ioctl
| * fd334cfd drm/amd/display: Don't check registers, if using AUX BL control
| * a8bc0f63 platform/mellanox: mlxbf-bootctl: add NET dependency into Kconfig
| * 344f2f3e ring-buffer: Do not attempt to read past "commit"
| * 3db9b420 selftests: fix dependency checker script
| * 4aa90e62 btrfs: improve error message after failure to add delayed dir index item
| * 53e7c559 ring-buffer: Avoid softlockup in ring_buffer_resize()
| * b4874f72 selftests/ftrace: Correctly enable event in instance-event.tc
| * 8c5c9ecb scsi: ufs: core: Move __ufshcd_send_uic_cmd() outside host_lock
| * e08e61d5 scsi: qedf: Add synchronization between I/O completions and abort
| * ada7fcba parisc: irq: Make irq_stack_union static to avoid sparse warning
| * b7e376a2 parisc: drivers: Fix sparse warning
| * d8c6fad0 parisc: iosapic.c: Fix sparse warnings
| * 1ecdcfec parisc: sba: Fix compile warning wrt list of SBA devices
| * bd1ec7f9 spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain
| * ff05ed4a spi: sun6i: reduce DMA RX transfer width to single byte
| * ac0d0680 dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock
| * d938c3d2 i2c: npcm7xx: Fix callback completion ordering
| * 0c615323 gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip
| * 2a47ee15 soc: imx8m: Enable OCOTP clock for imx8mm before reading registers
| * 7c59b882 xtensa: boot/lib: fix function prototypes
| * 70460e81 xtensa: boot: don't add include-dirs
| * bc51434b xtensa: iss/network: make functions static
| * 8e0f78a8 xtensa: add default definition for XCHAL_HAVE_DIV32
| * be57fc50 firmware: imx-dsp: Fix an error handling path in imx_dsp_setup_channels()
| * 1df81ea9 power: supply: ucs1002: fix error code in ucs1002_get_property()
| * 6937e44f bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up
| * 0e75aa86 ARM: dts: ti: omap: motorola-mapphone: Fix abe_clkctrl warning on boot
| * 1b39eae1 ARM: dts: ti: omap: Fix bandgap thermal cells addressing for omap3/4
| * fcbf770c ARM: dts: omap: correct indentation
| * f5e12de3 treewide: Replace GPLv2 boilerplate/reference with SPDX - gpl-2.0_56.RULE (part 1)
| * 6829bc79 clk: tegra: fix error return case for recalc_rate
| * 78277b09 bus: ti-sysc: Fix missing AM35xx SoC matching
| * 5435a49b bus: ti-sysc: Use fsleep() instead of usleep_range() in sysc_reset()
| * c39df101 drm/bridge: ti-sn65dsi83: Do not generate HFP/HBP/HSA and EOT packet
| * 4bf10fd5 MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled
| * d2640d86 btrfs: reset destination buffer when read_extent_buffer() gets invalid range
| * 1a541999 scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id()
| * 532a2396 scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called
| * 6642b4eb ata: ahci: Add Elkhart Lake AHCI controller
| * 07261196 ata: ahci: Rename board_ahci_mobile
| * 82741547 ata: ahci: Add support for AMD A85 FCH (Hudson D4)
| * bd69c74d ata: libata: Rename link flag ATA_LFLAG_NO_DB_DELAY
| * f5ba6d9d netfilter: nft_exthdr: Fix non-linear header modification
| * 7ca3a1b0 netfilter: exthdr: add support for tcp option removal
| * fb6f6578 Input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN
| * 191fc23c Input: i8042 - rename i8042-x86ia64io.h to i8042-acpipnpio.h
| * 5d2b57c0 xfs: fix xfs_inodegc_stop racing with mod_delayed_work
| * 657f8428 xfs: disable reaping in fscounters scrub
| * 8444467e xfs: check that per-cpu inodegc workers actually run on that cpu
| * 67db9ecb xfs: explicitly specify cpu when forcing inodegc delayed work to run immediately
| * 99e65f07 xfs: introduce xfs_inodegc_push()
| * 2df38196 xfs: bound maximum wait time for inodegc work
| * 08dc2159 i2c: mux: gpio: Add missing fwnode_handle_put()
| * f912d9d8 i2c: mux: gpio: Replace custom acpi_get_local_address()
| * 1aa39eee i2c: mux: demux-pinctrl: check the return value of devm_kstrdup()
| * 9910b141 gpio: tb10x: Fix an error handling path in tb10x_gpio_probe()
| * d7acb703 Fix up backport of 13619170 ("interconnect: Teach lockdep about icc_bw_lock order")
| * d645206e igc: Expose tx-usecs coalesce setting to user
| * d7a2bf6f bnxt_en: Flush XDP for bnxt_poll_nitroa0()'s NAPI
| * 56d2418a net: ena: Flush XDP packets on error.
| * 07b56905 locking/seqlock: Do the lockdep annotation before locking in do_write_seqcount_begin_nested()
| * a70dbded netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP
| * 0dcc9b40 netfilter: nf_tables: disable toggling dormant table state more than once
| * ea82139e net: rds: Fix possible NULL-pointer dereference
| * cd05eec2 team: fix null-ptr-deref when team device type is changed
| * 8bc97117 net: bridge: use DEV_STATS_INC()
| * 0d3939cc net: hns3: add 5ms delay before clear firmware reset irq source
| * d6d182d8 net: hns3: fix fail to delete tc flower rules during reset issue
| * 7c47b238 net: hns3: only enable unicast promisc when mac table full
| * 96af9a55 net: hns3: fix GRE checksum offload issue
| * 13ea4b92 x86/srso: Fix SBPB enablement for spec_rstack_overflow=off
| * e2c34afe x86/srso: Fix srso_show_state() side effect
| * 21efa88e platform/x86: intel_scu_ipc: Fail IPC send if still busy
| * 0a5d236b platform/x86: intel_scu_ipc: Don't override scu in intel_scu_ipc_dev_simple_command()
| * ab78000c platform/x86: intel_scu_ipc: Check status upon timeout in ipc_wait_for_interrupt()
| * 47329633 platform/x86: intel_scu_ipc: Check status after timeout in busy_loop()
| * 26df9ab5 dccp: fix dccp_v4_err()/dccp_v6_err() again
| * 3b14e843 powerpc/perf/hv-24x7: Update domain value check
| * 8860d354 ipv4: fix null-deref in ipv4_link_failure
| * c196ecd3 igc: Fix infinite initialization loop with early XDP redirect
| * a2d69dcb ionic: fix 16bit math issue when PAGE_SIZE >= 64KB
| * 3796e449 i40e: Fix VF VLAN offloading when port VLAN is configured
| * a628f3b5 i40e: Add VF VLAN pruning
| * 7a9eee3b iavf: do not process adminq tasks when __IAVF_IN_REMOVE_TASK is set
| * f3c6a179 ASoC: imx-audmix: Fix return error with devm_clk_get()
| * f90a7b95 net/core: Fix ETH_P_1588 flow dissector
| * 55629e61 selftests: tls: swap the TX and RX sockets in some tests
| * acabf5df bpf: Avoid deadlock when using queue and stack maps from NMI
| * c6e44f4c netfilter: nf_tables: disallow element removal on anonymous sets
| * 6a8de777 ASoC: meson: spdifin: start hw on dai probe
| * ef99506e netfilter: nf_tables: fix memleak when more than 255 elements expired
| * 8d7a00b9 netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration
| * 83d3a460 netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails
| * 949369f9 netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC
| * 2e6846b6 netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention
| * 9af7dfb3 netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
| * 9366966c netfilter: nf_tables: defer gc run if previous batch is still pending
| * 082791b4 netfilter: nf_tables: use correct lock to protect gc_list
| * b44a459c netfilter: nf_tables: GC transaction race with abort path
| * 24707fa1 netfilter: nf_tables: GC transaction race with netns dismantle
| * 6796800f netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path
| * af78b048 netfilter: nf_tables: don't fail inserts if duplicate has expired
| * 8f24fe69 netfilter: nf_tables: remove busy mark and gc batch API
| * b290795b netfilter: nft_set_hash: mark set element as dead when deleting from packet path
| * 479a2cf5 netfilter: nf_tables: adapt set backend to use GC transaction API
| * d19e8bf3 netfilter: nf_tables: GC transaction API to avoid race with control plane
| * 7c7e658a netfilter: nf_tables: don't skip expired elements during walk
| * a2d1125e tracing: Have event inject files inc the trace array ref count
| * 6b6c088c ext4: do not let fstrim block system suspend
| * a9d3bb58 ext4: move setting of trimmed bit into ext4_try_to_trim_range()
| * d91abea1 ext4: replace the traditional ternary conditional operator with with max()/min()
| * 656f0495 ext4: change s_last_trim_minblks type to unsigned long
| * be57857f ext4: scope ret locally in ext4_try_to_trim_range()
| * e832b558 ata: libahci: clear pending interrupt status
| * f6189f37 ata: ahci: Drop pointless VPRINTK() calls and convert the remaining ones
| * fa6d449e tracing: Increase trace array ref count on enable and filter files
| * 7a688f19 tracing: Make trace_marker{,_raw} stream-like
| * 68fc0e75 NFSv4.1: fix pnfs MDS=DS session trunking
| * 0ff78c45 NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server
| * d381bfe1 SUNRPC: Mark the cred for revalidation if the server rejects it
| * f1c434dd NFS/pNFS: Report EINVAL errors from connect() to the server
| * 0c0a7e1f NFS: More fixes for nfs_direct_write_reschedule_io()
| * a354b4a3 NFS: Use the correct commit info in nfs_join_page_group()
* | a2d74a39 ANDROID: GKI: add strscpy to fips140 build symbol list.
* | 24e4d224 Merge 5.15.133 into android14-5.15-lts
|\|
| * b9113293 Linux 5.15.133
| * e3a29b80 interconnect: Teach lockdep about icc_bw_lock order
| * c6244cd0 drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma
| * 08569c92 net/sched: Retire rsvp classifier
| * 6b080fa8 drm/amdgpu: fix amdgpu_cs_p1_user_fence
| * 6386a2d4 drm/amd/display: fix the white screen issue when >= 64GB DRAM
| * e04b7073 ext4: fix rec_len verify error
| * 93763d58 scsi: pm8001: Setup IRQs on resume
| * 72a22696 scsi: megaraid_sas: Fix deadlock on firmware crashdump
| * 54603e8a ata: libata: disallow dev-initiated LPM transitions to unsupported states
| * 01c7c38a i2c: aspeed: Reset the i2c controller when timeout occurs
| * 763d39f4 tracefs: Add missing lockdown check to tracefs_create_dir()
| * bf195968 nfsd: fix change_info in NFSv4 RENAME replies
| * bf38c1d2 tracing: Have option files inc the trace array ref count
| * 85ad4688 tracing: Have current_trace inc the trace array ref count
| * 962e6723 tracing: Have tracing_max_latency inc the trace array ref count
| * 380bbd46 btrfs: release path before inode lookup during the ino lookup ioctl
| * 779c3cf2 btrfs: fix lockdep splat and potential deadlock after failure running delayed items
| * f9c78afc ovl: fix incorrect fdput() on aio completion
| * 05a7289a ovl: fix failed copyup of fileattr on a symlink
| * 8bcb8029 attr: block mode changes of symlinks
| * d30af15e md/raid1: fix error: ISO C90 forbids mixed declarations
| * abdfde03 samples/hw_breakpoint: fix building without module unloading
| * 58787ff3 x86/purgatory: Remove LTO flags
| * 8abf1ec8 x86/boot/compressed: Reserve more memory for page tables
| * e1a27664 scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file()
| * f0fd24f1 selftests: tracing: Fix to unmount tracefs for recovering environment
| * dded6b81 scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir()
| * 1d5caeac drm: gm12u320: Fix the timeout usage for usb_bulk_msg()
| * b9f0572b btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super
| * cba491ee btrfs: add a helper to read the superblock metadata_uuid
| * cb3671a2 btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h
| * f16fe293 perf test shell stat_bpf_counters: Fix test on Intel
| * ad73216e perf test: Remove bash construct from stat_bpf_counters.sh test
| * d8f81bae MIPS: Use "grep -E" instead of "egrep"
| * dfe961b1 mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller
| * 56cf9f44 mtd: rawnand: brcmnand: Allow SoC to provide I/O operations
| * 34fcb594 jbd2: correct the end of the journal recovery scan range
| * a4605449 jbd2: rename jbd_debug() to jbd2_debug()
| * db6c90f2 jbd2: kill t_handle_lock transaction spinlock
| * e9270898 jbd2: fix use-after-free of transaction_t race
| * b0412dd1 jbd2: refactor wait logic for transaction updates into a common function
| * f980bf15 printk: Consolidate console deferred printing
| * 9be2957f interconnect: Fix locking for runpm vs reclaim
| * f3f6bf22 kobject: Add sanity check for kset->kobj.ktype in kset_register()
| * 81bbe666 media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning
| * d4ef3c9c usb: ehci: add workaround for chipidea PORTSC.PEC bug
| * c829d25e serial: cpm_uart: Avoid suspicious locking
| * 5353df78 scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
| * b97aaf9f tools: iio: iio_generic_buffer: Fix some integer type and calculation
| * 60a71fd1 usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc
| * c861a61b usb: cdns3: Put the cdns set active part outside the spin lock
| * 930c60e1 media: pci: cx23885: replace BUG with error return
| * 48bb6a9f media: tuners: qt1010: replace BUG_ON with a regular error
| * 2a33fc57 media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer
| * 5b1ea100 media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()
| * 3dd5846a media: anysee: fix null-ptr-deref in anysee_master_xfer
| * 033b0c07 media: af9005: Fix null-ptr-deref in af9005_i2c_xfer
| * 90356620 media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
| * d9ef84a7 media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
| * ca49cef3 PCI: fu740: Set the number of MSI vectors
| * d35e7ae1 powerpc/pseries: fix possible memory leak in ibmebus_bus_init()
| * 46870eea ARM: 9317/1: kexec: Make smp stop calls asynchronous
| * ef731110 jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
| * aa5b019a fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
| * 7ac65c29 ext2: fix datatype of block number in ext2_xattr_set2()
| * 4f96c066 md: raid1: fix potential OOB in raid1_remove_disk()
| * f3e9fc7b bus: ti-sysc: Configure uart quirks for k3 SoC
| * 3157aa79 drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
| * 78bc9d25 drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN31
| * 5eca70c1 ALSA: hda: intel-dsp-cfg: add LunarLake support
| * e8ba418d samples/hw_breakpoint: Fix kernel BUG 'invalid opcode: 0000'
| * 961df5a3 arm64: dts: qcom: sm8250-edo: correct ramoops pmsg-size
| * 49cd5490 arm64: dts: qcom: sm8150-kumano: correct ramoops pmsg-size
| * 1e0a38bb arm64: dts: qcom: sm6125-pdx201: correct ramoops pmsg-size
| * 20107195 drm/bridge: tc358762: Instruct DSI host to generate HSE packets
| * c64ee9dd wifi: mac80211_hwsim: drop short frames
| * 66594a1e netfilter: ebtables: fix fortify warnings in size_entry_mwt()
| * fedd9377 wifi: mac80211: check S1G action frame size
| * e08333e2 alx: fix OOB-read compiler warning
| * 2b0a093c mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450
| * 0a1f87f0 tpm_tis: Resend command to recover from data transfer errors
| * 67589d24 crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()
| * 38910642 wifi: wil6210: fix fortify warnings
| * ddb8f358 wifi: mwifiex: fix fortify warning
| * a7ebe459 wifi: ath9k: fix printk specifier
| * 3de6b6ab wifi: ath9k: fix fortify warnings
| * 6b0adfaf crypto: lrw,xts - Replace strlcpy with strscpy
| * dc100292 devlink: remove reload failed checks in params get/set callbacks
| * 7b7964cd ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects
| * eda268b5 hw_breakpoint: fix single-stepping when using bpf_overflow_handler
| * 6e743b72 perf/imx_ddr: speed up overflow frequency of cycle
| * f9a2c79c perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
| * ed1afb59 ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470
| * f685311d scftorture: Forgive memory-allocation failure if KASAN
| * 4f03fba0 rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle()
| * f1ceff37 kernel/fork: beware of __put_task_struct() calling context
| * 43078705 ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer
| * 766e56fa locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock
| * 6994f806 btrfs: output extra debug info if we failed to find an inline backref
| * 71eeddca autofs: fix memory leak of waitqueues in autofs_catatonic_mode
* | 661e59ac FROMLIST: lib/test_meminit: fix off-by-one error in test_pages()
* | e25a34ce ANDROID: GKI: db845c: add pcie_capability_clear_and_set_word to the symbol list
* | 4a80d037 Revert "fs/nls: make load_nls() take a const parameter"
* | 24a6c402 Revert "tracing: Introduce pipe_cpumask to avoid race on trace_pipes"
* | 682d0f1c Revert "tracing: Zero the pipe cpumask on alloc to avoid spurious -EBUSY"
* | e2c62c87 Revert "crypto: api - Use work queue in crypto_destroy_instance"
* | b5df330a Merge 5.15.132 into android14-5.15-lts
|/
* 35ecaa36 Linux 5.15.132
* 0c0d79f3 pcd: fix error codes in pcd_init_unit()
* 893978f1 drm/amd/display: Fix a bug when searching for insert_above_mpcc
* 0b8e09b3 MIPS: Only fiddle with CHECKFLAGS if `need-compiler'
* 55d2e7c1 kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().
* e80228b2 ixgbe: fix timestamp configuration code
* 5b55dac9 ipv6: fix ip6_sock_set_addr_preferences() typo
* 481bd6dc net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
* 3600c0dc platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events
* 07c0abc8 platform/mellanox: mlxbf-pmc: Fix potential buffer overflows
* 7c34ea34 platform/mellanox: mlxbf-tmfifo: Drop jumbo frames
* 69403520 platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors
* 97275339 kcm: Fix memory leak in error path of kcm_sendmsg()
* 864da4a5 r8152: check budget for r8152_poll()
* fbdc4e99 net: dsa: sja1105: hide all multicast addresses from "bridge fdb show"
* 6a4480c5 hsr: Fix uninit-value access in fill_frame_info()
* 072324cf net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
* 5bb09ddd net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc()
* 06b4934a net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in smcr_port_add
* aea3801c kselftest/runner.sh: Propagate SIGTERM to runner child
* 2f1e8601 net: ipv4: fix one memleak in __inet_del_ifa()
* f086e859 ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2
* 8173d902 ARM: dts: samsung: exynos4210-i9100: Fix LCD screen's physical size
* 072cd213 block: don't add or resize partition on the disk with GENHD_FL_NO_PART
* c6ce1c5d block: rename GENHD_FL_NO_PART_SCAN to GENHD_FL_NO_PART
* 6c06a7f6 block: move GENHD_FL_BLOCK_EVENTS_ON_EXCL_WRITE to disk->event_flags
* 8247ff0d block: move GENHD_FL_NATIVE_CAPACITY to disk->state
* 5ad42b99 pcd: cleanup initialization
* 7607bc7f pcd: move the identify buffer into pcd_identify
* 242bbe21 perf hists browser: Fix the number of entries for 'e' key
* 4d7a8a44 perf tools: Handle old data in PERF_RECORD_ATTR
* a8f91f48 perf hists browser: Fix hierarchy mode header
* 4ee1cf2a MIPS: Fix CONFIG_CPU_DADDI_WORKAROUNDS `modules_install' regression
* df4d8d5a drm/amd/display: prevent potential division by zero errors
* 3b51d016 mtd: rawnand: brcmnand: Fix potential false time out warning
* 2353b7bb mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write
* b59ff750 mtd: rawnand: brcmnand: Fix crash during the panic_write
* ca5218ae btrfs: use the correct superblock to compare fsid in btrfs_validate_super
* f3260733 btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART
* 7ef0e8b8 btrfs: free qgroup rsv on io failure
* 5fd6f40d fuse: nlookup missing decrement in fuse_direntplus_link
* 65b6890c ata: pata_ftide010: Add missing MODULE_DESCRIPTION
* 0b62825d ata: sata_gemini: Add missing MODULE_DESCRIPTION
* 81dd61cb ata: pata_falcon: fix IO base selection for Q40
* 20bc2c47 lib: test_scanf: Add explicit type cast to result initialization in test_number_prefix()
* 4315b4a9 ext4: add correct group descriptors and reserved GDT blocks to system zone
* ef5fea70 jbd2: check 'jh->b_transaction' before removing it from checkpoint
* 6778a385 jbd2: fix checkpoint cleanup performance regression
* 6b195e07 dmaengine: sh: rz-dmac: Fix destination and source data size setting
* 0476f201 ARC: atomics: Add compiler barrier to atomic operations...
* 3375186d net/mlx5: Free IRQ rmap and notifier on kernel shutdown
* 2348a375 sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory()
* f5160dc1 net: hns3: remove GSO partial feature bit
* 6d548b7c net: hns3: fix the port information display when sfp is absent
* cc3c67e0 net: hns3: fix invalid mutex between tc qdisc and dcb ets command issue
* 2c9643fa net: hns3: fix debugfs concurrency issue between kfree buffer and read
* 8bfa87cf net: hns3: fix byte order conversion issue in hclge_dbg_fd_tcam_read()
* 19280e8d netfilter: nfnetlink_osf: avoid OOB read
* 1ad7b189 netfilter: nftables: exthdr: fix 4-byte stack OOB write
* 347f7651 net: dsa: sja1105: complete tc-cbs offload support on SJA1110
* cb4494cf net: dsa: sja1105: fix -ENOSPC when replacing the same tc-cbs too many times
* 77b850b8 net: dsa: sja1105: fix bandwidth discrepancy between tc-cbs software and offload
* d11109c0 ip_tunnels: use DEV_STATS_INC()
* fcfb5842 idr: fix param name in idr_alloc_cyclic() doc
* 131cd74a s390/zcrypt: don't leak memory if dev_set_name() fails
* 12de76fd igb: Change IGB_MIN to allow set rx/tx value between 64 and 80
* 7c2f90b1 igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80
* f4c5640d igc: Change IGC_MIN to allow set rx/tx value between 64 and 80
* 9210b3dd octeontx2-af: Fix truncation of smq in CN10K NIX AQ enqueue mbox handler
* 1840f08c kcm: Destroy mutex in kcm_exit_net()
* 6ea277b2 net: sched: sch_qfq: Fix UAF in qfq_dequeue()
* 3868de7c af_unix: Fix data race around sk->sk_err.
* d9545666 af_unix: Fix data-races around sk->sk_shutdown.
* e5edc6e4 af_unix: Fix data-race around unix_tot_inflight.
* 9151ed4b af_unix: Fix data-races around user->unix_inflight.
* 907fbed6 net: phy: micrel: Correct bit assignments for phy_device flags
* 5d2d3f23 net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr
* 77dd55f5 veth: Fixing transmit return status for dropped packets
* 56603b2c igb: disable virtualization features on 82580
* 149bc783 ipv4: ignore dst hint for multipath routes
* e18b4949 drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt()
* 5979985f xsk: Fix xsk_diag use-after-free error during socket cleanup
* 49acc5c5 net: fib: avoid warn splat in flow dissector
* ed4e0adf net: read sk->sk_family once in sk_mc_loop()
* e0b483a0 ipv4: annotate data-races around fi->fib_dead
* 74df0319 sctp: annotate data-races around sk->sk_wmem_queued
* 973a4c30 net/sched: fq_pie: avoid stalls in fq_pie_timer()
* 5e22217c pwm: lpc32xx: Remove handling of PWM channels
* 67615226 watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load
* d6aa2be1 perf top: Don't pass an ERR_PTR() directly to perf_session__delete()
* 79bd17c9 perf vendor events: Drop some of the JSON/events for power10 platform
* 1356eace perf vendor events: Update the JSON/events descriptions for power10 platform
* 24481d5c x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm()
* 6e986316 perf annotate bpf: Don't enclose non-debug code with an assert()
* 184be0d5 Input: tca6416-keypad - fix interrupt enable disbalance
* 0b79f5a1 Input: tca6416-keypad - always expect proper IRQ number in i2c client
* 1e3167aa backlight: gpio_backlight: Drop output GPIO direction check for initial power state
* 6fc8bdc3 pwm: atmel-tcb: Fix resource freeing in error path and remove
* 6b2bb1a1 pwm: atmel-tcb: Harmonize resource allocation order
* d4734ef7 pwm: atmel-tcb: Convert to platform remove callback returning void
* c3bc6685 perf trace: Really free the evsel->priv area
* 8e96f741 perf trace: Use zfree() to reduce chances of use after free
* 414cf7a2 kconfig: fix possible buffer overflow
* be9ce0db gfs2: low-memory forced flush fixes
* 751facd3 gfs2: Switch to wait_event in gfs2_logd
* d0245b06 kbuild: do not run depmod for 'make modules_sign'
* 05333a6a bus: mhi: host: Skip MHI reset if device is in RDDM
* e2964c98 NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info
* da302f1d NFS: Fix a potential data corruption
* 0db19df2 clk: qcom: mss-sc7180: fix missing resume during probe
* f64f682b clk: qcom: q6sstop-qcs404: fix missing resume during probe
* b2f39b81 soc: qcom: qmi_encdec: Restrict string length in decode
* e61db892 clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
* a8474506 clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz
* a69b951c dt-bindings: clock: xlnx,versal-clk: drop select:false
* ead2436c pinctrl: cherryview: fix address_space_handler() argument
* 8859f58c parisc: led: Reduce CPU overhead for disk & lan LED computation
* 2655e1d9 parisc: led: Fix LAN receive and transmit LEDs
* 7ad44409 lib/test_meminit: allocate pages up to order MAX_ORDER
* 2d8138ce clk: qcom: turingcc-qcs404: fix missing resume during probe
* 9f5db4ab drm/ast: Fix DRAM init on AST2200
* cfc47807 clk: qcom: camcc-sc7180: fix async resume during probe
* 309c2716 fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
* 4316e951 scsi: qla2xxx: Fix firmware resource tracking
* 7b89c372 scsi: qla2xxx: Error code did not return to upper layer
* 15a71bb2 scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit()
* 10639215 scsi: qla2xxx: Flush mailbox commands on chip reset
* def49a05 scsi: qla2xxx: Remove unsupported ql2xenabledif option
* be12c9f4 scsi: qla2xxx: Fix TMF leak through
* 4322f3de scsi: qla2xxx: Fix session hang in gnl
* a4708402 scsi: qla2xxx: Turn off noisy message log
* b0453b0c scsi: qla2xxx: Fix erroneous link up failure
* 5934b212 scsi: qla2xxx: Fix command flush during TMF
* 4a16a46c scsi: qla2xxx: fix inconsistent TMF timeout
* f1ea164b scsi: qla2xxx: Fix deletion race condition
* 683945b1 scsi: qla2xxx: Limit TMF to 8 per function
* fde268c2 scsi: qla2xxx: Adjust IOCB resource on qpair create
* c2984824 io_uring: break iopolling on signal
* 0def123f io_uring: break out of iowq iopoll on teardown
* 1a0aba2b io_uring: always lock in io_apoll_task_func
* 2920cc4c net/ipv6: SKB symmetric hash should incorporate transport ports
* 529bcc70 udf: initialize newblock to 0
* fae2d591 Revert "drm/amdgpu: install stub fence into potential unused fence pointers"
* f01e21d6 md/md-bitmap: remove unnecessary local variable in backlog_store()
* 99a8d14d tracing: Zero the pipe cpumask on alloc to avoid spurious -EBUSY
* 05c581ad perf/x86/uncore: Correct the number of CHAs on EMR
* 861cfdc5 x86/sgx: Break up long non-preemptible delays in sgx_vepc_release()
* 7e3ddbea USB: core: Fix oversight in SuperSpeed initialization
* 7fe9d879 USB: core: Fix race by not overwriting udev->descriptor in hub_port_init()
* eda9a296 USB: core: Change usb_get_device_descriptor() API
* 56c49a33 USB: core: Unite old scheme and new scheme descriptor reads
* 0ad6bad3 usb: typec: bus: verify partner exists in typec_altmode_attention
* 31220bd8 usb: typec: tcpm: set initial svdm version based on pd revision
* 3acc6b9f cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug
* cb65ad51 crypto: stm32 - fix loop iterating through scatterlist for DMA
* 9ab2c149 s390/ipl: add missing secure/has_secure file to ipl type 'unknown'
* 6aff2732 arm64: sdei: abort running SDEI handlers during crash
* fedecaee pstore/ram: Check start of empty przs during init
* 8d68582b mmc: renesas_sdhi: register irqs before registering controller
* 5294144b fsverity: skip PKCS#7 parser when keyring is empty
* 86608e1b net: handle ARPHRD_PPP in dev_is_mac_header_xmit()
* 51ffed9c X.509: if signature is unsupported skip validation
* 6ecf0969 dccp: Fix out of bounds access in DCCP error handler
* 7a2978e8 dlm: fix plock lookup when using multiple lockspaces
* 703cf47d parisc: Fix /proc/cpuinfo output for lscpu
* 49a49d44 procfs: block chmod on /proc/thread-self/comm
* 44f6ec58 Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset"
* d73d3787 ntb: Fix calculation ntb_transport_tx_free_entry()
* da0c7293 ntb: Clean up tx tail index on link down
* bfa051f6 ntb: Drop packets when qp link is down
* 8f4edcd6 scsi: mpt3sas: Perform additional retries if doorbell read returns 0
* 58388f29 Revert "scsi: qla2xxx: Fix buffer overrun"
* bd188d1e media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts
* 6e9632a0 media: dvb: symbol fixup for dvb_attach()
* 9a43563c arm64: csum: Fix OoB access in IP checksum code for negative lengths
* a0a49da2 i3c: master: svc: fix probe failure when no i3c device exist
* a905ac21 xtensa: PMU: fix base address for the newer hardware
* 8742dbf9 backlight/lv5207lp: Compare against struct fb_info.device
* 568132f7 backlight/bd6107: Compare against struct fb_info.device
* 4e7b4ddc backlight/gpio_backlight: Compare against struct fb_info.device
* 3b018c3d ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch()
* cbb7d8a4 ipmi_si: fix a memleak in try_smi_init()
* 6043dd31 PCI: rockchip: Use 64-bit mask on MSI 64-bit PCI address
* aba1bf19 media: i2c: ccs: Check rules is non-NULL
* df64819d mm/vmalloc: add a safer version of find_vm_area() for debug
* 20b7d0a6 scsi: core: Fix the scsi_set_resid() documentation
* 20990d6a printk: ringbuffer: Fix truncating buffer size min_t cast
* 0a22f9c1 rcu: dump vmalloc memory info safely
* d479c841 ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
* 111bafa2 PM / devfreq: Fix leak in devfreq_dev_release()
* be7353af igb: set max size RX buffer when store bad packet is enabled
* d5790386 skbuff: skb_segment, Call zero copy functions before using skbuff frags
* 267a29f8 netfilter: xt_sctp: validate the flag_info count
* b3d07714 netfilter: xt_u32: validate user space input
* a9e6142e netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
* 3e48f741 igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
* de16cb79 virtio_ring: fix avail_wrap_counter in virtqueue_add_packed
* d6f80ddb cpufreq: Fix the race condition while updating the transition_task of policy
* 42d8c7fa dmaengine: ste_dma40: Add missing IRQ check in d40_probe
* 329d0f16 um: Fix hostaudio build errors
* 58d17e76 mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume()
* 679a71b3 mtd: spi-nor: Check bus width while setting QE bit
* 8869fd16 leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead
* 0f715ea7 leds: multicolor: Use rounded division when calculating color components
* 1a68bef2 leds: pwm: Fix error code in led_pwm_create_fwnode()
* abd740db rpmsg: glink: Add check for kstrdup
* b45cf29f phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write
* 40d63735 phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate
* 52942a47 phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
* 31d7e6c7 mtd: rawnand: brcmnand: Fix mtd oobsize
* 6182318a tracing: Fix race issue between cpu buffer write and swap
* 548f48ec tracing: Remove extra space at the end of hwlat_detector/mode
* 2ba8bb00 x86/speculation: Mark all Skylake CPUs as vulnerable to GDS
* dde88ab4 HID: multitouch: Correct devm device reference for hidinput input_dev name
* 4fb28379 HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode()
* 1bb42aca Revert "IB/isert: Fix incorrect release of isert connection"
* 4f1807fd amba: bus: fix refcount leak
* 1c370137 serial: tegra: handle clk prepare error in tegra_uart_hw_init()
* 076fb40c scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock
* c4772759 scsi: core: Use 32-bit hostnum in scsi_host_lookup()
* 6248f430 cgroup:namespace: Remove unused cgroup_namespaces_init()
* 04824d50 media: i2c: rdacm21: Fix uninitialized value
* f3572eef media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors
* 205f7174 media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working
* 89ecb4b4 media: ov2680: Add ov2680_fill_format() helper function
* 784d1b83 media: ov2680: Don't take the lock for try_fmt calls
* dbb717b4 media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s
* 4c1a5c28 media: ov2680: Fix vflip / hflip set functions
* 958905ed media: ov2680: Fix ov2680_bayer_order()
* cdd5fca7 media: ov2680: Remove auto-gain and auto-exposure controls
* 322a805f media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips
* abba3401 media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
* 1717f67b USB: gadget: f_mass_storage: Fix unused variable warning
* 121b8d30 media: venus: hfi_venus: Only consider sys_idle_indicator on V1
* f6b483ea media: go7007: Remove redundant if statement
* d079a3e1 platform/x86: dell-sysman: Fix reference leak
* 426bd741 iommu/vt-d: Fix to flush cache of PASID directory table
* 9dc6f660 iommu/qcom: Disable and reset context bank before programming
* 3274e32f fsi: aspeed: Reset master errors after CFAM reset
* 7a17deca IB/uverbs: Fix an potential error pointer dereference
* 42d11130 RDMA/hns: Fix CQ and QP cache affinity
* b051c3bf RDMA/hns: Fix incorrect post-send with direct wqe of wr-list
* 15482235 RDMA/hns: Fix port active speed
* de4aca5b iommu/sprd: Add missing force_aperture
* 46b76f13 driver core: test_async: fix an error code
* a6992ece dma-buf/sync_file: Fix docs syntax
* d3256d80 coresight: tmc: Explicit type conversions to prevent integer overflow
* 93a5b461 RDMA/irdma: Replace one-element array with flexible-array member
* 97097ea2 scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly
* 1c996be7 scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly
* cb6d20a8 scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly
* 2f0d202d x86/APM: drop the duplicate APM_MINOR_DEV macro
* f34508d9 serial: sprd: Fix DMA buffer leak issue
* c54c66d9 serial: sprd: Assign sprd_port after initialized to avoid wrong access
* f61fc650 scsi: qla4xxx: Add length check when parsing nlattrs
* 46ad449e scsi: be2iscsi: Add length check when parsing nlattrs
* 4bd57d88 scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
* e9bac3cc scsi: iscsi: Add length check for nlattr payload
* 9285efd9 scsi: iscsi: Rename iscsi_set_param() to iscsi_if_set_param()
* 7231d60d scsi: RDMA/srp: Fix residual handling
* 484ddaa9 usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host()
* cbb8f709 media: mediatek: vcodec: Return NULL if no vdec_fb is found
* 18dc93de media: rkvdec: increase max supported height for H.264
* f1e7d999 scsi: hisi_sas: Fix normally completed I/O analysed as failed
* 46d1b2a3 scsi: hisi_sas: Fix warnings detected by sparse
* e454e985 scsi: hisi_sas: Modify v3 HW SATA completion error processing
* 7caac45b scsi: hisi_sas: Modify v3 HW SSP underflow error processing
* f64d0282 media: cx24120: Add retval check for cx24120_message_send()
* 7ca7cd02 media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()
* fb24b65a media: dib7000p: Fix potential division by zero
* 56a3d8ae drivers: usb: smsusb: fix error handling code in smsusb_init_device
* d1b51b13 iommu: rockchip: Fix directory table address encoding
* a50d60b8 iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind
* caf05883 media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()
* 711e9e44 media: i2c: tvp5150: check return value of devm_kasprintf()
* 30d4380e media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables
* 663114df RDMA/qedr: Remove a duplicate assignment in irdma_query_ah()
* 1473e40b pNFS: Fix assignment of xprtdata.cred
* fb7ddc11 NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ
* 53a1e5ab NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN
* 19a648a0 NFSD: da_addr_body field missing in some GETDEVICEINFO replies
* b0f127a7 fs: lockd: avoid possible wrong NULL parameter
* 8f994b83 jfs: validate max amount of blocks before allocation.
* f6a84ef1 ext4: fix unttached inode after power cut with orphan file feature enabled
* a9ddbfed powerpc/iommu: Fix notifiers being shared by PCI and VIO buses
* a70c8de3 nfs/blocklayout: Use the passed in gfp flags
* 2935443d powerpc/pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT
* 75dcb650 powerpc: Don't include lppaca.h in paca.h
* cefcb002 PCI: layerscape: Add workaround for lost link capabilities during reset
* 4be323c7 PCI: layerscape: Add the endpoint linkup notifier support
* 69c71238 PCI: dwc: Add start_link/stop_link inlines
* aac0a9a1 wifi: ath10k: Use RMW accessors for changing LNKCTL
* 3539bab5 wifi: ath11k: Use RMW accessors for changing LNKCTL
* ea670d01 net/mlx5: Use RMW accessors for changing LNKCTL
* 348ef09d drm/radeon: Use RMW accessors for changing LNKCTL
* 54682373 drm/amdgpu: Use RMW accessors for changing LNKCTL
* 00f79e78 powerpc/perf: Convert fsl_emb notifier to state machine callbacks
* a26a5e4b powerpc/fadump: reset dump area size if fadump memory reserve fails
* 13fd667d vfio/type1: fix cap_migration information leak
* 6b708243 powerpc/radix: Move some functions into #ifdef CONFIG_KVM_BOOK3S_HV_POSSIBLE
* dbde1d9c clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op
* 824e9730 clk: imx8mp: fix sai4 clock
* 66ef144d PCI/ASPM: Use RMW accessors for changing LNKCTL
* f46fa8ab PCI: pciehp: Use RMW accessors for changing LNKCTL
* 759d978e pinctrl: mcp23s08: check return value of devm_kasprintf()
* 02faf0bd PCI: Mark NVIDIA T4 GPUs to avoid bus reset
* 4c20a414 PCI: microchip: Correct the DED and SEC interrupt bit offsets
* 377f7aed clk: qcom: gcc-sm6350: Fix gcc_sdcc2_apps_clk_src
* 1c4a98c5 clk: qcom: reset: Use the correct type of sleep/delay based on length
* bd4eff9c clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src
* b1cb8bf4 ext4: avoid potential data overflow in next_linear_group
* 3e24082f ext4: correct grp validation in ext4_mb_good_group
* febacbef EDAC/igen6: Fix the issue of no error events
* 964f62ca clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src
* f1399e15 clk: sunxi-ng: Modify mismatched function name
* 92913d32 drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init()
* 3ad53071 ipmi:ssif: Fix a memory leak when scanning for an adapter
* 77928694 ipmi:ssif: Add check for kstrdup
* 53abafed ALSA: ac97: Fix possible error value of *rac97
* 48fc5717 of: unittest: Fix overlay type in apply/revert check
* 01bb96ad of: overlay: Call of_changeset_init() early
* 30f04a41 md: raid0: account for split bio in iostat accounting
* 9643cc0b md/raid0: Fix performance regression for large sequential writes
* 17fbf7da md/raid0: Factor out helper for mapping and submitting a bio
* d04f1e32 md: add error_handlers for raid0 and linear
* d8b6adb8 md: Set MD_BROKEN for RAID1 and RAID10
* a68fabda bus: ti-sysc: Fix cast to enum warning
* 7636dfc4 arm64: dts: qcom: apq8016-sbc: Fix ov5640 regulator supply names
* fff4d362 drm/mediatek: Fix potential memory leak if vmap() fail
* e5758ad9 drm/mediatek: Remove freeing not dynamic allocated memory
* 97274bea bus: ti-sysc: Fix build warning for 64-bit build
* cc6b0967 io_uring: fix drain stalls by invalid SQE
* 0152e775 audit: fix possible soft lockup in __audit_inode_child()
* 48e4c481 drm/msm/a2xx: Call adreno_gpu_init() earlier
* 76c3ad12 drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create()
* 32e06092 smackfs: Prevent underflow in smk_set_cipso()
* 502dfc58 firmware: meson_sm: fix to avoid potential NULL pointer dereference
* c0b1eee6 drm/msm/mdp5: Don't leak some plane state
* d0b82c21 drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask
* b7b0c488 ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig
* 8025396b drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01
* 27eee65b drm/armada: Fix off-by-one error in armada_overlay_get_property()
* cc9254b2 arm64: dts: qcom: sm8150: Fix the I2C7 interrupt
* ea5bc6f5 of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name()
* 4197eeb5 drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
* 9712279e drm/msm: Update dev core dump to not print backwards
* 8ef5d1f1 md/md-bitmap: hold 'reconfig_mutex' in backlog_store()
* 38263836 md/bitmap: don't set max_write_behind if there is no write mostly device
* a3d36107 md/raid10: use dereference_rdev_and_rrdev() to get devices
* 94ca5eed md/raid10: factor out dereference_rdev_and_rrdev()
* 246bac7d drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl'
* de93b471 arm64: dts: qcom: sdm845: Fix the min frequency of "ice_core_clk"
* a9e56fa8 arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC
* db0ba312 ARM: dts: BCM53573: Fix Ethernet info for Luxul devices
* c4413633 drm: adv7511: Fix low refresh rate register for ADV7533/5
* 57b6d92c ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split)
* b7f47031 ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210
* 2f0246b3 ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split)
* d12beb1b ARM: dts: s3c64xx: align pinctrl with dtschema
* 188f2d41 x86/mm: Fix PAT bit missing from page protection modify mask
* 1dd43e1e drm/etnaviv: fix dumping of active MMU context
* 1634fe40 arm64: dts: qcom: pmi8994: Add missing OVP interrupt
* 4b7eb5e2 arm64: dts: qcom: Move WLED num-strings from pmi8994 to sony-xperia-tone
* 92919d98 arm64: dts: qcom: pmi8994: Remove hardcoded linear WLED enabled-strings
* 36590985 arm64: dts: qcom: pm660l: Add missing short interrupt
* ea48fd91 arm64: dts: qcom: correct SPMI WLED register range encoding
* eee01e0d arm64: dts: qcom: pmi8998: Add node for WLED
* b788afdb arm64: dts: qcom: sm8250-sony-xperia: correct GPIO keys wakeup again
* 2840d9b9 ARM: dts: BCM53573: Use updated "spi-gpio" binding properties
* b35f3ca1 ARM: dts: BCM53573: Add cells sizes to PCIe node
* bed08bb8 drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar()
* 261e69456617 arm64: dts: qcom: sm8250: Mark PCIe hosts as DMA coherent
* 12a93e53eaf0 arm64: dts: qcom: pmk8350: fix ADC-TM compatible string
* 4c9a637258bb arm64: dts: qcom: sm8350: Use proper CPU compatibles
* 4c918fb77dea arm64: dts: qcom: sm8350: Add missing LMH interrupts to cpufreq
* 9c022ab2db40 arm64: dts: qcom: msm8996: Add missing interrupt to the USB2 controller
* bda65ecaec97 arm64: dts: qcom: sm8250-edo: Rectify gpio-keys
* 6119aaced94f arm64: dts: qcom: sm8250-edo: Add GPIO line names for PMIC GPIOs
* c0dc9d7d3f2b arm64: dts: qcom: sm8250-edo: Add gpio line names for TLMM
* d2d698daa1fa arm64: dts: qcom: sm8250: correct dynamic power coefficients
* 510bae3d37f7 soc: qcom: ocmem: Fix NUM_PORTS & NUM_MACROS macros
* b08c7a31baeb soc: qcom: ocmem: Add OCMEM hardware version print
* dc04034502e6 ASoC: stac9766: fix build errors with REGMAP_AC97
* 89602de9a2d7 quota: fix dqput() to follow the guarantees dquot_srcu should provide
* 1df46e717ee9 quota: add new helper dquot_active()
* bd0a6452f070 quota: rename dquot_active() to inode_quota_active()
* 5b8240223407 quota: factor out dquot_write_dquot()
* 6c6efd3a1d06 drm/bridge: tc358764: Fix debug print parameter order
* a48e7def0006 netrom: Deny concurrent connect().
* 4cf994d3f4ff net/sched: sch_hfsc: Ensure inner classes have fsc curve
* edb5b1b3b9f8 hwmon: (tmp513) Fix the channel number in tmp51x_is_visible()
* a85fd8116555 mlxsw: i2c: Limit single transaction buffer size
* 7790b6a2f5f0 mlxsw: i2c: Fix chunk size setting in output mailbox buffer
* 510e0cbd6408 net: arcnet: Do not call kfree_skb() under local_irq_disable()
* 93a572b9d42f wifi: ath9k: use IS_ERR() with debugfs_create_dir()
* 5138beea8e7f Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave()
* d7fd24b8d1bb wifi: mwifiex: avoid possible NULL skb pointer dereference
* 71ce8be48bf0 wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute
* 11f93fff6e8a wifi: ath9k: protect WMI command response buffer replacement with a lock
* 6904c7afd512 wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx
* cec7db9ea031 samples/bpf: fix broken map lookup probe
* 89f19a9a055d wifi: mwifiex: Fix missed return in oob checks failed path
* 308eb3a609ac wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
* 9c00731bf05d fs: ocfs2: namei: check return value of ocfs2_add_entry()
* f683992d30ee lwt: Check LWTUNNEL_XMIT_CONTINUE strictly
* e3f647e4b642 lwt: Fix return values of BPF xmit ops
* 4ff998134025 hwrng: iproc-rng200 - Implement suspend and resume calls
* 5a70ab6b59b2 crypto: caam - fix unchecked return value error
* 660b6b1c5cf8 ice: ice_aq_check_events: fix off-by-one check when filling buffer
* 55fab9389d65 net-memcg: Fix scope of sockmem pressure indicators
* 41c40d84838d selftests/bpf: Clean up fmod_ret in bench_rename test script
* 50c78e71446d net: tcp: fix unexcepted socket die when snd_wnd is 0
* 942d8cefb022 Bluetooth: Fix potential use-after-free when clear keys
* 7b0243d26a71 Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe()
* 048545d9fc64 crypto: api - Use work queue in crypto_destroy_instance
* 56cb7bbefcaf crypto: stm32 - Properly handle pm_runtime_get failing
* e3c4a6b073e4 selftests/bpf: fix static assert compilation issue for test_cls_*.c
* 43423b3e0467 wifi: mwifiex: fix error recovery in PCIE buffer descriptor management
* 7c54b6fc39eb wifi: mwifiex: Fix OOB and integer underflow when rx packets
* a20b96cf6925 wifi: mt76: mt7915: fix power-limits while chan_switch
* 5c75a4379589 can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM
* 890843254f38 spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe()
* 2ff9ac0cf25f wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH
* 802008e8c73a ipv6: Add reasons for skb drops to __udp6_lib_rcv
* 7dcbc0bb0e5c bpf: reject unhashed sockets in bpf_sk_assign
* caa2883b1885 udp: re-score reuseport groups when connected sockets are present
* b60dfa4559d8 regmap: rbtree: Use alloc_flags for memory allocations
* 34f1180658d9 hwrng: pic32 - use devm_clk_get_enabled
* 5af3c8676b36 hwrng: nomadik - keep clock enabled while hwrng is registered
* 14c6d1e80847 tcp: tcp_enter_quickack_mode() should be static
* 7b75b4c90a9e bpf: Clear the probe_addr for uprobe
* 75d3960be702 bpftool: Use a local bpf_perf_event_value to fix accessing its fields
* 8ea6871116d5 cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit()
* be2092d2a703 x86/efistub: Fix PCI ROM preservation in mixed mode
* 9eb25ea7b65d ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table
* 26097a7f28b3 ACPI: x86: s2idle: Post-increment variables when getting constraints
* 8a962f11a95b s390/paes: fix PKEY_TYPE_EP11_AES handling for secure keyblobs
* 7833a74f8d00 s390/pkey: fix/harmonize internal keyblob headers
* 208383d68510 selftests/futex: Order calls to futex_lock_pi
* c7802ff51adc perf/imx_ddr: don't enable counter0 if none of 4 counters are used
* 0a872a0521c8 x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved
* 3af6f77e8090 selftests/resctrl: Close perf value read fd on errors
* 4505ad996b66 selftests/resctrl: Unmount resctrl FS if child fails to run benchmark
* c68a196e7ff6 selftests/resctrl: Don't leak buffer in fill_cache()
* fdcb63afd3f6 selftests/resctrl: Add resctrl.h into build deps
* b2ba11ed4d10 selftests/resctrl: Make resctrl_tests run using kselftest framework
* e0478944f4a5 OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd()
* ec9d118ad99d refscale: Fix uninitalized use of wait_queue_head_t
* e280033ef135 ARM: ptrace: Restore syscall skipping for tracers
* 4c3f33904dea ARM: ptrace: Restore syscall restart tracing
* 0481251b7cd6 selftests/harness: Actually report SKIP for signal tests
* 060ca3f7899a tmpfs: verify {g,u}id mount options correctly
* d412e9b34b90 fs: Fix error checking for d_hash_and_lookup()
* a4229f93bc54 eventfd: prevent underflow for eventfd semaphores
* cedb8719333d reiserfs: Check the return value from __getblk()
* c1a4117f1544 Revert "net: macsec: preserve ingress frame ordering"
* 40671f90d5b5 udf: Handle error when adding extent to a file
* 099bf90d7fc4 udf: Check consistency of Space Bitmap Descriptor
* 7039aa1be9cc of: kexec: Mark ima_{free,stable}_kexec_buffer() as __init
* 759d51eda2d0 net: Avoid address overwrite in kernel_connect
* 7c4cce5700b9 arm64: lib: Import latest version of Arm Optimized Routines' strncmp
* 104df1c695c1 crypto: rsa-pkcs1pad - Use helper to set reqsize
* 273f4615314f platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications
* 9ef5c25bcf1b tracing: Introduce pipe_cpumask to avoid race on trace_pipes
* 8c1b60dad0f5 ALSA: seq: oss: Fix racy open/close of MIDI devices
* fa05aea28195 scsi: lpfc: Fix incorrect big endian type assignment in bsg loopback path
* f0bf8a071134 scsi: storvsc: Always set no_report_opcodes
* e9e62419e797 sctp: handle invalid error codes without calling BUG()
* 3714bb4a1df8 bnx2x: fix page fault following EEH recovery
* 53b8cc2f9685 netlabel: fix shift wrapping bug in netlbl_catmap_setlong()
* 867cdd7f9544 drm/amdgpu: Match against exact bootloader status
* 0863204deb3c net: hns3: restore user pause configure when disable autoneg
* ac93def0dbb4 scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock
* bef6c89a92d0 scsi: lpfc: Remove reftag check in DIF paths
* b439e33a8c93 idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM
* 156b803194ae wifi: brcmfmac: Fix field-spanning write in brcmf_scan_params_v2_to_v1()
* 87ea5e89407e net: usb: qmi_wwan: add Quectel EM05GV2
* e1313fa9d2e3 vmbus_testing: fix wrong python syntax for integer value comparison
* 5faad57ba6c7 clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM
* e13f0dd5fbe2 kprobes: Prohibit probing on CFI preamble symbol
* ee49b97cb5ae security: keys: perform capable check only on privileged operations
* f44f50305de2 ata: pata_arasan_cf: Use dev_err_probe() instead dev_err() in data_xfer()
* a85c523aeccd ovl: Always reevaluate the file signature for IMA
* 3faa126258a9 drm/amd/display: Exit idle optimizations before attempt to access PHY
* c152ca4f219b platform/x86: huawei-wmi: Silence ambient light sensor
* a9988b9c7a31 platform/x86/intel/hid: Add HP Dragonfly G2 to VGBS DMI quirks
* 7f3901b04c8f platform/x86: intel: hid: Always call BTNL ACPI method
* 23151421ed01 ASoC: atmel: Fix the 8K sample parameter in I2SC master
* c934d2a6970c ASoC: rt711-sdca: fix for JD event handling in ClockStop Mode0
* 20587011d271 ASoC: rt711: fix for JD event handling in ClockStop Mode0
* b41f79896456 ASoc: codecs: ES8316: Fix DMIC config
* cc2b0a2055dc ASoC: rt5682-sdw: fix for JD event handling in ClockStop Mode0
* 5b64fc2471f9 fs/nls: make load_nls() take a const parameter
* f85908f6bfd2 s390/dasd: fix hanging device after request requeue
* a4845e694893 s390/dasd: use correct number of retries for ERP requests
* e062aa1acf9b m68k: Fix invalid .section syntax
* bbfa7d712b24 vxlan: generalize vxlan_parse_gpe_hdr and remove unused args
* b10215ffdb01 ethernet: atheros: fix return value check in atl1c_tso_csum()
* 6bb94f46d31a ASoC: da7219: Check for failure reading AAD IRQ events
* 279a6dad0cd9 ASoC: da7219: Flush pending AAD IRQ when suspending
* d424c636b750 ksmbd: no response from compound read
* 82373d1b763e ksmbd: fix out of bounds in smb3_decrypt_req()
* 20d449a08749 9p: virtio: make sure 'offs' is initialized in zc_request
* c4269c7258d9 media: pci: cx23885: fix error handling for cx23885 ATSC boards
* 17d75773b66e media: pulse8-cec: handle possible ping error
* f281a3739399 phy: qcom-snps-femto-v2: use qcom_snps_hsphy_suspend/resume error code
* dfff9c91cbb0 ARM: dts: imx: Set default tuning step for imx7d usdhc
* 4e364cab1331 ARM: dts: imx: Adjust dma-apbh node name
* 99319298fd9a ARM: dts: imx7s: Drop dma-apb interrupt-names
* 1dc2c12854b6 ARM: dts: imx: update sdma node name format

Change-Id: I91b781c9fec447d5ef02e49d8186afe20b5a5ecc
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>