Merge tag 'android13-5.15.148_r00' into android13-5.15

This merges up to the 5.15-148 LTS release into the android13-5.15
branch.  It includes the following commits:

*   993bed18 Merge "Merge branch 'android13-5.15' into branch 'android13-5.15-lts'" into android13-5.15-lts
|\
| * c75be3bf Merge branch 'android13-5.15' into branch 'android13-5.15-lts'
* | a3e656f3 UPSTREAM: drm/msm/dsi: Enable runtime PM
* | 1384d7e3 UPSTREAM: PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend()
|/
* 3802b455 Revert "clk: fixed-rate: add devm_clk_hw_register_fixed_rate"
* f1e1d7d7 Revert "clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw"
*   f8386f71 Merge 5.15.148 into android13-5.15-lts
|\
| * 6139f2a0 Linux 5.15.148
| * 84c39986 Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
| * c8483a48 arm64: dts: armada-3720-turris-mox: set irq type for RTC
| * 98052220 netfilter: nft_quota: copy content when cloning expression
| * 3be3c612 netfilter: nft_last: copy content when cloning expression
| * 42d46178 netfilter: nft_limit: Clone packet limits' cost value
| * d8088058 netfilter: nft_limit: fix stateful object memory leak
| * e562d842 netfilter: nft_connlimit: memleak if nf_ct_netns_get() fails
| * 10823cfe netfilter: nf_tables: typo NULL check in _clone() function
| * 0f2dca51 block: Remove special-casing of compound pages
| * 08bf5611 i2c: s3c24xx: fix transferring more than one message in polling mode
| * 38ce342a i2c: s3c24xx: fix read transfers in polling mode
| * 62b3387b ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work
| * 58485b95 selftests: mlxsw: qos_pfc: Adjust the test to support 8 lanes
| * 34811252 mlxsw: spectrum_acl_tcam: Fix stack corruption
| * 005f2d10 mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations
| * 077c4776 mlxsw: spectrum_acl_tcam: Make fini symmetric to init
| * d28048d3 mlxsw: spectrum_acl_tcam: Add missing mutex_destroy()
| * 196f3595 mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable
| * 87c54033 mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
| * 3732db29 ethtool: netlink: Add missing ethnl_ops_begin/complete
| * 7f3d781e kdb: Fix a potential buffer overflow in kdb_local()
| * 995d6099 ipvs: avoid stat macros calls from preemptible context
| * 27513eff netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description
| * d6420b66 netfilter: nf_tables: skip dead set elements in netlink dump
| * 77be8c49 netfilter: nf_tables: do not allow mismatch field size and set key length
| * b8eb65bd netfilter: nft_limit: do not ignore unsupported flags
| * d7b5da4f netfilter: nf_tables: memcg accounting for dynamically allocated objects
| * 3bb4403d netfilter: nft_limit: move stateful fields out of expression data
| * 8a663507 netfilter: nft_limit: rename stateful structure
| * e2e8fdd0 netfilter: nft_quota: move stateful fields out of expression data
| * b147911d netfilter: nft_last: move stateful fields out of expression data
| * 36997eb1 netfilter: nft_connlimit: move stateful fields out of expression data
| * 713a1388 netfilter: nf_tables: reject invalid set policy
| * 78e85466 net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe
| * 29ffa63f bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
| * 68429089 net: stmmac: ethtool: Fixed calltrace caused by unbalanced disable_irq_wake calls
| * 8e481c7f net: ravb: Fix dma_addr_t truncation in error case
| * f05301ad mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req()
| * 413b9135 mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
| * 9b82d5f5 mptcp: strict validation before using mp_opt->hmac
| * c99f490a mptcp: drop unused sk in mptcp_get_options
| * cbe983d0 mptcp: mptcp_parse_option() fix for MPTCPOPT_MP_JOIN
| * 4f2c4ba3 net: phy: micrel: populate .soft_reset for KSZ9131
| * 890bc96e net: ethernet: ti: am65-cpsw: Fix max mtu to fit ethernet frames
| * 3b525486 net: qualcomm: rmnet: fix global oob in rmnet_policy
| * 18babcfa s390/pci: fix max size calculation in zpci_memcpy_toio()
| * bf330405 PCI: keystone: Fix race condition when initializing PHYs
| * a300f741 nvmet-tcp: Fix the H2C expected PDU len calculation
| * b02a005b nvmet: re-fix tracing strncpy() warning
| * 763c67e9 serial: imx: Correct clock error message in function probe()
| * 1ed3c202 usb: xhci-mtk: fix a short packet issue of gen1 isoc-in transfer
| * 0a12db73 apparmor: avoid crash when parsed profile name is empty
| * 367d061a perf env: Avoid recursively taking env->bpf_progs.lock
| * 0613a2fb nvmet-tcp: fix a crash in nvmet_req_complete()
| * 4cb3cf71 nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
| * 013d7878 usb: cdc-acm: return correct error code on unsupported break
| * c50f8895 tty: use 'if' in send_break() instead of 'goto'
| * a222bd01 tty: don't check for signal_pending() in send_break()
| * 370b18ae tty: early return from send_break() on TTY_DRIVER_HARDWARE_BREAK
| * 6f98751f tty: change tty_write_lock()'s ndelay parameter to bool
| * 7ab8ef24 perf genelf: Set ELF program header addresses properly
| * 08715e4f iio: adc: ad9467: fix scale setting
| * d7773702 iio: adc: ad9467: don't ignore error codes
| * fd1957c7 iio: adc: ad9467: fix reset gpio handling
| * 71204292 iio: adc: ad9467: Benefit from devm_clk_get_enabled() to simplify
| * fbcc37f4 selftests/sgx: Skip non X86_64 platform
| * 71005a1d selftests/sgx: Fix uninitialized pointer dereference in error path
| * ff168d4f serial: imx: fix tx statemachine deadlock
| * 714778c2 software node: Let args be NULL in software_node_get_reference_args
| * c203812b libapi: Add missing linux/types.h header to get the __u64 type on io.h
| * 828cd829 serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed
| * 96d289b5 power: supply: bq256xx: fix some problem in bq256xx_hw_init
| * 43567157 power: supply: cw2015: correct time_to_empty units in sysfs
| * 07733ca5 MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup()
| * 4590f46c MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup()
| * c1669b54 riscv: Fix module_alloc() that did not reset the linear mapping permissions
| * 938f70d1 riscv: Check if the code to patch lies in the exit section
| * 8e093543 mips: Fix incorrect max_low_pfn adjustment
| * 4b88c9c8 mips: dmi: Fix early remap on MIPS32
| * d1c8c7ef mfd: intel-lpss: Fix the fractional clock divider flags
| * 6109ff5a leds: aw2013: Select missing dependency REGMAP_I2C
| * c3e3a214 mfd: syscon: Fix null pointer dereference in of_syscon_register()
| * a004323a ARM: 9330/1: davinci: also select PINCTRL
| * 77c20b4c iommu/dma: Trace bounce buffer usage when mapping buffers
| * fc7c3be6 serial: sc16is7xx: set safe default SPI clock frequency
| * 160ef3fc serial: sc16is7xx: add check for unsupported SPI modes during probe
| * b1effdda HID: wacom: Correct behavior when processing some confidence == false touches
| * 400ad6fe iio: adc: ad7091r: Pass iio_dev to event handler
| * 12c2759a KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
| * d99976d1 KVM: arm64: vgic-v4: Restore pending state on host userspace write
| * 9bd4c6e6 x86/kvm: Do not try to disable kvmclock if it was not enabled
| * a4563156 PCI: mediatek: Clear interrupt status before dispatching handler
| * 0f59d377 PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
| * 25aab84f wifi: mwifiex: configure BSSID consistently when starting AP
| * a61373d3 wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors
| * 1f0b6979 wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code
| * 5600943b wifi: mt76: fix broken precal loading from MTD for mt7915
| * 4124a004 iommu/arm-smmu-qcom: Add missing GMU entry to match table
| * a7b98aa1 bpf: Fix re-attachment branch in bpf_tracing_prog_attach
| * 4c71c01d Bluetooth: Fix atomicity violation in {min,max}_key_size_set
| * 27e58d3b rootfs: Fix support for rootfstype= when root= is given
| * 79ea1c6f io_uring/rw: ensure io->bytes_done is always initialized
| * 801c8adb pwm: jz4740: Don't use dev_err_probe() in .request()
| * c9ed30ee netfilter: nf_tables: check if catch-all set element is active in next generation
| * 5010c271 block: add check that partition length needs to be aligned with block size
| * 6a73c9fd scsi: mpi3mr: Refresh sdev queue depth after controller reset
| * 610ca0ca fbdev: flush deferred work in fb_deferred_io_fsync()
| * cb32c0e1 ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx
| * d37d61c0 ALSA: oxygen: Fix right channel of capture volume mixer
| * 314cf7c2 serial: imx: Ensure that imx_uart_rs485_config() is called with enabled clock
| * ac0c3a2f usb: mon: Fix atomicity violation in mon_bin_vma_fault
| * d7ce8ebd usb: typec: class: fix typec_altmode_put_partner to put plugs
| * 4212a9ff Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs"
| * 2c64904a usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
| * e1b3be9b usb: cdns3: fix iso transfer error when mult is not zero
| * 9cdf2c91 usb: cdns3: fix uvc failure work since sg support enabled
| * 2e349cf0 usb: chipidea: wait controller resume finished for wakeup irq
| * 295b4fa3 Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-only"
| * 4f5a109b Revert "usb: dwc3: Soft reset phy on probe for host"
| * ea968824 usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart
| * e3e35301 usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host()
| * 41e05f24 tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug
| * 98fee5be binder: fix race between mmput() and do_exit()
| * e03023fc xen-netback: don't produce zero-size SKB frags
| * 409c30ff virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session()
| * f97f6128 dma-mapping: Fix build error unused-value
| * 72d29dcd Input: atkbd - use ab83 as id when skipping the getid command
| * 9c1fa9ee binder: fix unused alloc->free_async_space
| * c44b276b binder: fix async space check for 0-sized buffers
| * 0921867f keys, dns: Fix size check of V1 server-list header
| * 10193a50 selftests/bpf: Add assert for user stacks in test_task_stack
| * cc9c60b2 of: unittest: Fix of_count_phandle_with_args() expected value message
| * 45410040 of: Fix double free in of_parse_phandle_with_args_map
| * 83f5d6c1 ksmbd: validate the zero field of packet header
| * 4af46741 drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init
| * bf1acc62 IB/iser: Prevent invalidating wrong MR
| * 106136f2 mmc: sdhci_omap: Fix TI SoC dependencies
| * da9eae2c mmc: sdhci_am654: Fix TI SoC dependencies
| * e517645e ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
| * 3a09488f ALSA: scarlett2: Add missing error checks to *_ctl_get()
| * 12023666 ALSA: scarlett2: Allow passing any output to line_out_remap()
| * 51d5697e ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config()
| * 0ba9386e ALSA: scarlett2: Add missing error check to scarlett2_config_save()
| * c60490b8 ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[]
| * cf55afb5 pwm: stm32: Fix enable count for clk in .probe()
| * df19bf40 pwm: stm32: Use hweight32 in stm32_pwm_detect_channels
| * c82c21e7 pwm: stm32: Use regmap_clear_bits and regmap_set_bits where applicable
| * fa019c01 clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw
| * 256d1232 clk: fixed-rate: add devm_clk_hw_register_fixed_rate
| * a30ca04d clk: asm9260: use parent index to link the reference clock
| * c45ca73b clk: si5341: fix an error code problem in si5341_output_clk_set_rate
| * 347f9d72 watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused
| * 3646d83d watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling
| * 1711bdfe watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO
| * b9bced8c watchdog: set cdev owner before adding
| * 9117fc44 drivers: clk: zynqmp: update divider round rate logic
| * 8f494194 clk: zynqmp: Add a check for NULL pointer
| * f46c0ec5 clk: zynqmp: make bestdiv unsigned
| * e27660be drivers: clk: zynqmp: calculate closest mux rate
| * 8aff5f67 clk: qcom: videocc-sm8150: Add missing PLL config property
| * b31526b8 clk: qcom: videocc-sm8150: Update the videocc resets
| * 1dd84d5e dt-bindings: clock: Update the videocc resets for sm8150
| * c72dbb78 gpu/drm/radeon: fix two memleaks in radeon_vm_init
| * b6dcba02 drivers/amd/pm: fix a use-after-free in kv_parse_power_table
| * 2bf47c89 drm/amd/pm: fix a double-free in si_dpm_init
| * 11d1f2d8 drm/amdgpu/debugfs: fix error code when smc register accessors are NULL
| * 720919b5 media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path of m88ds3103_probe()
| * 0a50ca09 media: dvbdev: drop refcount on error path in dvb_device_open()
| * 11e60be4 f2fs: fix the f2fs_file_write_iter tracepoint
| * f3a220d9 f2fs: fix to update iostat correctly in f2fs_filemap_fault()
| * df2571b4 f2fs: fix to check compress file in f2fs_move_file_range()
| * a3316290 media: rkisp1: Disable runtime PM in probe error path
| * f4176c51 clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config
| * d3a8c5c7 media: cx231xx: fix a memleak in cx231xx_init_isoc
| * 9f583fc9 drm/bridge: tc358767: Fix return value on error case
| * a3cb0b5b drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable
| * a5934df4 drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table
| * 1a6cccd7 drm/radeon/dpm: fix a memleak in sumo_parse_power_table
| * 14bbfaa5 drm/radeon: check the alloc_workqueue return value in radeon_crtc_init()
| * 929af5cd drm/drv: propagate errors from drm_modeset_register_all()
| * cbf207b1 drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks
| * 6d8dc619 drm/msm/mdp4: flush vblank event on disable
| * d3aa670b ASoC: cs35l34: Fix GPIO name and drop legacy include
| * a0f27f67 ASoC: cs35l33: Fix GPIO name and drop legacy include
| * 528844bb drm/radeon: check return value of radeon_ring_lock()
| * 4e57efe0 drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check()
| * 1f7008dd drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg()
| * f100ba61 f2fs: fix to avoid dirent corruption
| * 4c5e6a02 drm/bridge: Fix typo in post_disable() description
| * ec3634eb media: pvrusb2: fix use after free on context disconnection
| * 1821c4d1 drm/tilcdc: Fix irq free on unload
| * 08ccff6e drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
| * 45c4c4b0 drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer
| * ab45a15a drm/panel-elida-kd35t133: hold panel in reset for unprepare
| * a811031d RDMA/hns: Fix inappropriate err code for unsupported operations
| * 5245c05c RDMA/usnic: Silence uninitialized symbol smatch warnings
| * ab8038e7 Revert "drm/omapdrm: Annotate dma-fence critical section in commit path"
| * d847363b Revert "drm/tidss: Annotate dma-fence critical section in commit path"
| * 13e3dd2d ARM: davinci: always select CONFIG_CPU_ARM926T
| * 4329426c ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
| * d0464a7e mlxbf_gige: Enable the GigE port in mlxbf_gige_open
| * 8d632d0f net: mellanox: mlxbf_gige: Replace non-standard interrupt handling
| * 86f3df04 mlxbf_gige: Fix intermittent no ip issue
| * 172ba7d4 net/sched: act_ct: fix skb leak and crash on ooo frags
| * c3d8edb1 null_blk: don't cap max_hw_sectors to BLK_DEF_MAX_SECTORS
| * 8676b014 block: make BLK_DEF_MAX_SECTORS unsigned
| * ce3440b6 Bluetooth: btmtkuart: fix recv_buf() return value
| * cede5d0c Bluetooth: Fix bogus check for re-auth no supported with non-ssp
| * 166d65b0 netfilter: nf_tables: mark newset as dead on transaction abort
| * e907e957 wifi: iwlwifi: mvm: send TX path flush in rfkill
| * 8d6c6142 wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request
| * 5f4ea050 wifi: rtlwifi: rtl8192se: using calculate_bit_shift()
| * aaf4723f wifi: rtlwifi: rtl8192ee: using calculate_bit_shift()
| * dbbbd2cc wifi: rtlwifi: rtl8192de: using calculate_bit_shift()
| * 7e0d54f5 wifi: rtlwifi: rtl8192ce: using calculate_bit_shift()
| * 5dbc5c52 wifi: rtlwifi: rtl8192cu: using calculate_bit_shift()
| * 62de5647 wifi: rtlwifi: rtl8192c: using calculate_bit_shift()
| * aec0dee3 wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift()
| * 37871c97 wifi: rtlwifi: add calculate_bit_shift()
| * 493cfed2 arm64: dts: qcom: sc7280: Mark SDHCI hosts as cache-coherent
| * 2c97f945 block: add check of 'minors' and 'first_minor' in device_add_disk()
| * df4f5a35 arm64: dts: qcom: sm8150-hdk: fix SS USB regulators
| * 6f20058d soc: qcom: llcc: Fix dis_cap_alloc and retain_on_pc configuration
| * ccc94806 dma-mapping: clear dev->dma_mem to NULL after freeing it
| * 99326214 dma-mapping: Add dma_release_coherent_memory to DMA API
| * 930cd34a virtio/vsock: fix logic which reduces credit update messages
| * a18eff8b selftests/net: fix grep checking for fib_nexthop_multiprefix
| * 62c904c4 scsi: hisi_sas: Correct the number of global debugfs registers
| * 6bf21261 scsi: hisi_sas: Rollback some operations if FLR failed
| * 84e174af scsi: hisi_sas: Replace with standard error code return value
| * 0d17931d scsi: hisi_sas: Prevent parallel FLR and controller reset
| * 0760d1d6 scsi: hisi_sas: Rename HISI_SAS_{RESET -> RESETTING}_BIT
| * 80b0b7c7 block: Set memalloc_noio to false on device_add_disk() error path
| * 02962684 bpf: Fix verification of indirect var-off stack access
| * 8c2127dc arm64: dts: qcom: sc7280: fix usb_2 wakeup interrupt types
| * 97c60adf arm64: dts: qcom: sdm845-db845c: correct LED panic indicator
| * 6211a043 arm64: dts: qcom: qrb5165-rb5: correct LED panic indicator
| * 609c7d55 scsi: fnic: Return error if vmalloc() failed
| * 67e6707f bpf: fix check for attempt to corrupt spilled pointer
| * f40cd60f arm64: dts: qcom: sm8250: Make watchdog bark interrupt edge triggered
| * a413fdd3 arm64: dts: qcom: sm8150: Make watchdog bark interrupt edge triggered
| * a78ae106 arm64: dts: qcom: sdm845: Make watchdog bark interrupt edge triggered
| * 06ec7a39 arm64: dts: qcom: sc7280: Make watchdog bark interrupt edge triggered
| * 0c55ace4 arm64: dts: qcom: sc7180: Make watchdog bark interrupt edge triggered
| * 65b28cad ARM: dts: qcom: sdx65: correct SPMI node name
| * bb88e217 bpf: enforce precision of R0 on callback return
| * fa5b150a arm64: dts: ti: k3-am65-main: Fix DSS irq trigger type
| * 18051358 wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior
| * bf98ac32 firmware: meson_sm: populate platform devices from sm device tree data
| * 41b32282 firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create()
| * 7e366462 net/ncsi: Fix netlink major/minor version numbers
| * 024e2408 ARM: dts: qcom: apq8064: correct XOADC register address
| * ef2373f3 wifi: libertas: stop selecting wext
| * 69f7c1f5 wifi: ath11k: Defer on rproc_get failure
| * 131afd9a bpf: Add crosstask check to __bpf_get_stack
| * 1ed921e4 bpf, lpm: Fix check prefixlen before walking trie
| * 2b67863c wifi: rtw88: fix RX filter in FIF_ALLMULTI flag
| * 9d4f4dea NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT
| * d0e09a7b blocklayoutdriver: Fix reference leak of pnfs_device_node
| * a5f2f91b crypto: scomp - fix req->dst buffer overflow
| * dc677955 crypto: sahara - do not resize req->src when doing hash operations
| * a5e0e39d crypto: sahara - fix processing hash requests with req->nbytes < sg->length
| * 2dc0f23a crypto: sahara - improve error handling in sahara_sha_process()
| * faa25455 crypto: sahara - fix wait_for_completion_timeout() error handling
| * 2104f405 crypto: sahara - fix ahash reqsize
| * 34c6a335 crypto: sahara - handle zero-length aes requests
| * a7b435e8 crypto: sahara - avoid skcipher fallback code duplication
| * b1664c53 crypto: virtio - Wait for tasklet to complete on device remove
| * ee0586d7 gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
| * 00e3321c fs: indicate request originates from old mount API
| * 8fb12524 pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
| * 8dd9e58c crypto: sahara - fix error handling in sahara_hw_descriptor_create()
| * 3413d878 crypto: sahara - fix processing requests with cryptlen < sg->length
| * a962882a crypto: sahara - fix ahash selftest failure
| * 6f31caf8 crypto: sahara - fix cbc selftest failure
| * 6fb7db05 crypto: sahara - remove FLAGS_NEW_KEY logic
| * d2205b9b crypto: af_alg - Disallow multiple in-flight AIO requests
| * 088123dd crypto: ccp - fix memleak in ccp_init_dm_workarea
| * d3ff5362 crypto: sa2ul - Return crypto_aead_setkey to transfer the error
| * 75cba72d crypto: virtio - Handle dataq logic with tasklet
| * 5e37fa0b selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket
| * d8ac2537 mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
| * a252d5c1 kunit: debugfs: Fix unchecked dereference in debugfs_print_results()
| * f23aa841 ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error
| * f5de4ad6 ACPI: LPSS: Fix the fractional clock divider flags
| * 6b15fb99 spi: sh-msiof: Enforce fixed DTDL for R-Car H3
| * 2aa141f8 efivarfs: force RO when remounting if SetVariable is not supported
| * a4529a08 calipso: fix memory leak in netlbl_calipso_add_pass()
| * dd645fc8 cpufreq: scmi: process the result of devm_of_clk_add_hw_provider()
| * aead146e cpufreq: Use of_property_present() for testing DT property presence
| * 435841c1 of: Add of_property_present() helper
| * c5df4179 of: property: define of_property_read_u{8,16,32,64}_array() unconditionally
| * c1814a4f ACPI: LPIT: Avoid u32 multiplication overflow
| * 3a370502 ACPI: video: check for error while searching for backlight device parent
| * 45f60807 mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response
| * 9c92f01b spi: spi-zynqmp-gqspi: fix driver kconfig dependencies
| * f105c263 powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
| * 6b58d160 powerpc/powernv: Add a null pointer check in opal_powercap_init()
| * c0b111ea powerpc/powernv: Add a null pointer check in opal_event_init()
| * 2a82c443 powerpc/powernv: Add a null pointer check to scom_debug_init_one()
| * 5daf0ef6 selftests/powerpc: Fix error handling in FPU/VMX preemption tests
| * 999a27b3 powerpc/pseries/memhp: Fix access beyond end of drmem array
| * 5d69c885 powerpc/44x: select I2C for CURRITUCK
| * 467c9c9d powerpc: add crtsavres.o to always-y instead of extra-y
| * 0b11a145 powerpc: remove checks for binutils older than 2.25
| * 63ecb085 powerpc/toc: Future proof kernel toc
| * 2de654d8 powerpc: Mark .opd section read-only
| * 700cf4be EDAC/thunderx: Fix possible out-of-bounds string access
| * b53730a4 x86/lib: Fix overflow when counting digits
| * 0a43304c coresight: etm4x: Fix width of CCITMIN field
| * b67064bd PCI: Add ACS quirk for more Zhaoxin Root Ports
| * e62243b3 leds: ledtrig-tty: Free allocated ttyname buffer on deactivate
| * 6c3388c0 parport: parport_serial: Add Brainboxes device IDs and geometry
| * 72095a54 parport: parport_serial: Add Brainboxes BAR details
| * 5cf604ee uio: Fix use-after-free in uio_open
| * 659be220 binder: fix comment on binder_alloc_new_buf() return value
| * 2900c0ee binder: fix trivial typo of binder_free_buf_locked()
| * 8ad4d580 binder: fix use-after-free in shinker's callback
| * 1263bd9e binder: use EPOLLERR from eventpoll.h
| * 0ee3ded7 Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"
| * 12b07f44 kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list
| * 66cb0868 bpf: Add --skip_encoding_btf_inconsistent_proto, --btf_gen_optimized to pahole flags for v1.25
| * 2a2495b6 Revert "ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek"
| * 313cfcae ACPI: resource: Add another DMI match for the TongFang GMxXGxx
| * dec51297 drm/crtc: fix uninitialized variable use
| * 21eea9b6 ARM: sun9i: smp: fix return code check of of_property_match_string
| * dc26b677 net: qrtr: ns: Return 0 if server port is not present
| * 5dbcdaf4 ida: Fix crash in ida_free when the bitmap is empty
| * c9f5b801 i2c: rk3x: fix potential spinlock recursion on poll
| * 3f0dc646 ASoC: Intel: bytcr_rt5640: Add quirk for the Medion Lifetab S10346
| * adf4616a Input: xpad - add Razer Wolverine V2 support
| * d66ffc87 wifi: iwlwifi: pcie: avoid a NULL pointer dereference
| * fd13543d ARC: fix spare error
| * b3f44f21 s390/scm: fix virtual vs physical address confusion
| * 46445552 Input: i8042 - add nomux quirk for Acer P459-G2-M
| * 0f0da2d6 Input: atkbd - skip ATKBD_CMD_GETID in translated mode
| * 274b4c81 reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning
| * 5d307038 ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI
| * a9655e7e tracing: Fix uaf issue when open the hist or hist_debug file
| * 64d81f61 MIPS: dts: loongson: drop incorrect dwmac fallback compatible
| * 3f483a39 stmmac: dwmac-loongson: drop useless check for compatible fallback
| * aeb0d506 tracing: Add size check when printing trace_marker output
| * c3729567 tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing
| * c8af7ad7 jbd2: fix soft lockup in journal_finish_inode_data_buffers()
| * 7b0586ad platform/x86: intel-vbtn: Fix missing tablet-mode-switch events
| * 6511772f neighbour: Don't let neigh_forced_gc() disable preemption for long
| * 2e1846b0 drm/crtc: Fix uninit-value bug in drm_mode_setcrtc
| * c01c4455 jbd2: correct the printing of write_flags in jbd2_write_superblock()
| * 5378fd3c clk: rockchip: rk3128: Fix HCLK_OTG gate register
| * a14da838 hwmon: (corsair-psu) Fix probe when built-in
| * 79454052 drm/exynos: fix a wrong error checking
| * e02a2693 drm/exynos: fix a potential error pointer dereference
| * 10250096 drm/amdgpu: Add NULL checks for function pointers
| * 8b985248 nvme: introduce helper function to get ctrl state
| * c11fc224 ASoC: ops: add correct range check for limiting volume
| * 09c0f281 ASoC: da7219: Support low DC impedance headset
| * 16d3a65e net/tg3: fix race condition in tg3_reset_task()
| * 9904379f nouveau/tu102: flush all pdbs on vmm flush
| * 7a3ff8a2 ASoC: rt5650: add mutex to avoid the jack detection failure
| * ebf8d5ec ASoC: cs43130: Fix incorrect frame delay configuration
| * ec52e3e2 ASoC: cs43130: Fix the position of const qualifier
| * ce6cce07 ASoC: Intel: Skylake: mem leak in skl register function
| * cb6b6ff7 ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16
| * 4ec0f3b3 ASoC: Intel: Skylake: Fix mem leak in few functions
| * 20e23f6b ASoC: wm8974: Correct boost mixer inputs
| * 05d753d7 nvme-core: check for too small lba shift
| * 9ad8b171 drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer
| * f8eadbe7 debugfs: fix automount d_fsdata usage
| * 473fb46a wifi: cfg80211: lock wiphy mutex for rfkill poll
| * 5d520ae3 mptcp: fix uninit-value in mptcp_incoming_options
| * 8d40e351 ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro
| * 3dec0bd9 pinctrl: lochnagar: Don't build on MIPS
| * 32a6cfc6 f2fs: explicitly null-terminate the xattr list
* | 1c3a1f32 Revert "ipv6: remove max_size check inline with ipv4"
* |   8fb87b72 Merge "Merge 5.15.147 into android13-5.15-lts" into android13-5.15-lts
|\ \
| * | 39736d99 Merge 5.15.147 into android13-5.15-lts
| |\|
| | * ddcaf499 Linux 5.15.147
| | * 231752a0 net: usb: ax88179_178a: move priv to driver_priv
| | * d800d18b net: usb: ax88179_178a: remove redundant init code
| | * 32919703 tracing/kprobes: Fix symbol counting logic by looking at modules as well
| | * ccb7eef5 kallsyms: Make module_kallsyms_on_each_symbol generally available
| | * ab3a3aad netfilter: nf_tables: Reject tables of unsupported family
| | * 0eb556b2 perf inject: Fix GEN_ELF_TEXT_OFFSET for jit
| | * b8a5308f ipv6: remove max_size check inline with ipv4
| | * ba5efd85 net: tls, update curr on splice as well
| | * 06bb52d2 mmc: sdhci-sprd: Fix eMMC init failure after hw reset
| | * 67221868 mmc: core: Cancel delayed work before releasing host
| | * edaefc21 mmc: rpmb: fixes pause retune on all RPMB partitions.
| | * 41f20ac9 mmc: meson-mx-sdhc: Fix initialization frozen issue
| | * 91432aeb mm: fix unmap_mapping_range high bits shift bug
| | * 5e44f5da i2c: core: Fix atomic xfer check for non-preempt config
| | * 1d5c1617 x86/kprobes: fix incorrect return address calculation in kprobe_emulate_call_indirect
| | * 10086ff5 firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards
| | * 660b3c3b mm/memory-failure: check the mapcount of the precise page
| | * 80eb449f selftests: secretmem: floor the memory size to the multiple of page_size
| | * a58ae5ab net: Implement missing SO_TIMESTAMPING_NEW cmsg support
| | * 500c7f32 bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters()
| | * fda00eb3 asix: Add check for usbnet_get_endpoints
| | * 0817c1b2 octeontx2-af: Re-enable MAC TX in otx2_stop processing
| | * 20fce91b octeontx2-af: Always configure NIX TX link credits based on max frame size
| | * 6bbbcff3 octeontx2-af: Set NIX link credits based on max LMAC
| | * 6ef9a28e octeontx2-af: Don't enable Pause frames by default
| | * bc56ed72 net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues
| | * cfcf5490 igc: Fix hicredit calculation
| | * 6c853b57 i40e: Restore VF MSI-X state during PCI reset
| | * 9400f854 ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux
| | * e08b666e ASoC: meson: g12a-toacodec: Fix event generation
| | * 3a78a577 ASoC: meson: g12a-tohdmitx: Validate written enum values
| | * f74281f2 ASoC: meson: g12a-toacodec: Validate written enum values
| | * 947db598 i40e: fix use-after-free in i40e_aqc_add_filters()
| | * 975d6f66 net: Save and restore msg_namelen in sock_sendmsg
| | * b2869e76 netfilter: nft_immediate: drop chain reference counter on error
| | * 51976846 net: bcmgenet: Fix FCS generation for fragmented skbuffs
| | * c748c358 sfc: fix a double-free bug in efx_probe_filters
| | * 5c161f22 ARM: sun9i: smp: Fix array-index-out-of-bounds read in sunxi_mc_smp_init
| | * fd2e7829 net-timestamp: extend SOF_TIMESTAMPING_OPT_ID to HW timestamps
| | * dc5643ab can: raw: add support for SO_MARK
| | * 464fb49c can: raw: add support for SO_TXTIME/SCM_TXTIME
| | * ba80ff7a net: Implement missing getsockopt(SO_TIMESTAMPING_NEW)
| | * 5636941e r8169: Fix PCI error on system resume
| | * 0ce9a244 net: sched: em_text: fix possible memory leak in em_text_destroy()
| | * c0b56aa9 mlxbf_gige: fix receive packet race condition
| | * 271567af ASoC: fsl_rpmsg: Fix error handler with pm_runtime_enable
| | * 1867a909 igc: Check VLAN EtherType mask
| | * f24370dd igc: Check VLAN TCI mask
| | * 4ec5efdb igc: Report VLAN EtherType matching back to user
| | * b17f8024 i40e: Fix filter input checks to prevent config with invalid values
| | * def90597 drm/i915/dp: Fix passing the correct DPCD_REV for drm_dp_set_phy_test_pattern
| | * a7b67635 octeontx2-af: Fix marking couple of structure as __packed
| | * 802af3c8 nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local
| | * 5d3e98ef drm/bridge: ti-sn65dsi86: Never store more than msg->size bytes in AUX xfer
| | * 2f8cefc8 wifi: iwlwifi: pcie: don't synchronize IRQs from IRQ
| | * 1f2f662c Revert "PCI/ASPM: Remove pcie_aspm_pm_state_change()"
| | * 200cecd6 ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP ProBook 440 G6
| | * 90ab9a70 block: Don't invalidate pagecache for invalid falloc modes
| | * c496c353 keys, dns: Fix missing size check of V1 server-list header
* | | c541149e ANDROID: db845c: Enable device tree overlay support
|/ /
* | 1e6a2d06 Revert "gpiolib: cdev: add gpio_device locking wrapper around gpio_ioctl()"
* | cdf5ac29 Revert "device property: Add const qualifier to device_get_match_data() parameter"
* | 207d7cfa Revert "spi: Introduce spi_get_device_match_data() helper"
* | 6f2a1f50 Revert "iio: imu: adis16475: add spi_device_id table"
* | aca21d61 Revert "device property: Allow const parameter to dev_fwnode()"
* | 66f854c9 Merge 5.15.146 into android13-5.15-lts
|\|
| * 26c690ef Linux 5.15.146
| * 13578b4e bpf: Fix prog_array_map_poke_run map poke update
| * 339add04 device property: Allow const parameter to dev_fwnode()
| * 4d9dcdb3 dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata()
| * a033bb82 ring-buffer: Fix slowpath of interrupted event
| * d10f7540 netfilter: nf_tables: skip set commit for deleted/destroyed sets
| * d739f2b6 ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
| * 53bed9b9 ring-buffer: Remove useless update to write_stamp in rb_try_to_discard()
| * 7fb264ae tracing: Fix blocked reader of snapshot buffer
| * c73cb01a ring-buffer: Fix wake ups when buffer_percent is set to 100
| * c0be5218 mm/filemap: avoid buffered read/write race to read inconsistent data
| * 2b16d960 Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
| * ded3cfde smb: client: fix OOB in smbCalcSize()
| * bfd18c0f smb: client: fix OOB in SMB2_query_info_init()
| * 1228354a iio: imu: adis16475: add spi_device_id table
| * bd1be85d spi: Introduce spi_get_device_match_data() helper
| * fcf6fce2 device property: Add const qualifier to device_get_match_data() parameter
| * d63fafd6 net: usb: ax88179_178a: avoid failed operations when device is disconnected
| * f860413a net: usb: ax88179_178a: wol optimizations
| * 2964a0de net: usb: ax88179_178a: clean up pm calls
| * 597305fd ethernet: constify references to netdev->dev_addr in drivers
| * 32d9a4ce usb: fotg210-hcd: delete an incorrect bounds test
| * d529cc22 ARM: dts: Fix occasional boot hang for am3 usb
| * 8bf06286 ksmbd: fix wrong allocation size update in smb2_open()
| * 06208a04 ksmbd: avoid duplicate opinfo_put() call on error of smb21_lease_break_ack()
| * 9444c47d ksmbd: lazy v2 lease break on smb2_write()
| * f58afd8c ksmbd: send v2 lease break notification for directory
| * 86967f69 ksmbd: downgrade RWH lease caching state to RH for directory
| * f7c8270b ksmbd: set v2 lease capability
| * 1bf476d8 ksmbd: set epoch in create context v2 lease
| * ac385518 ksmbd: have a dependency on cifs ARC4
| * b54b9fbc fuse: share lookup state between submount and its parent
| * 1c811b7c x86/alternatives: Sync core before enabling interrupts
| * ccda72aa KVM: arm64: vgic: Force vcpu vgic teardown on vcpu destroy
| * 46bc250b lib/vsprintf: Fix %pfwf when current node refcount == 0
| * f9dc6e0a gpio: dwapb: mask/unmask IRQ when disable/enale it
| * e4d3534c bus: ti-sysc: Flush posted write only after srst_udelay
| * d47b2b6a tracing / synthetic: Disable events after testing in synth_event_gen_test_init()
| * da95f8b7 scsi: core: Always send batch on reset or error handling command
| * 68677452 dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp
| * 7c25c5d7 net: ks8851: Fix TX stall caused by TX buffer overrun
| * 28855385 net: rfkill: gpio: set GPIO direction
| * 4431cf7c net: 9p: avoid freeing uninit memory in p9pdu_vreadf
| * 85fd35ce Input: soc_button_array - add mapping for airplane mode button
| * a346cfc6 Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE
| * 916ca52a Bluetooth: L2CAP: Send reject on command corrupted request
| * 70db6466 Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent
| * 094ae245 USB: serial: option: add Quectel RM500Q R13 firmware support
| * d0adf8fe USB: serial: option: add Foxconn T99W265 with new baseline
| * a67f0b5b USB: serial: option: add Quectel EG912Y module support
| * 0e285069 USB: serial: ftdi_sio: update Actisense PIDs constant names
| * 43388934 wifi: cfg80211: fix certs build to not depend on file order
| * 69fab6dc wifi: cfg80211: Add my certificate
| * 498f212a ALSA: usb-audio: Increase delay in MOTU M quirk
| * 5a16bb60 iio: triggered-buffer: prevent possible freeing of wrong buffer
| * 3becd9bc iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma()
| * b9ccf18e iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table
| * f1d9a66e scsi: bnx2fc: Fix skb double free in bnx2fc_rcv()
| * 1e3effe6 Input: ipaq-micro-keys - add error handling for devm_kmemdup
| * 25c441a0 iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw
| * 3cbae23d interconnect: Treat xlate() returning NULL node as an error
| * f47e3f60 smb: client: fix OOB in smb2_query_reparse_point()
| * fd3951b7 smb: client: fix NULL deref in asn1_ber_decoder()
| * 6ded9038 drm/i915: Fix intel_atomic_setup_scalers() plane_state handling
| * f9954b18 drm/i915: Relocate intel_atomic_setup_scalers()
| * 2a4ef0d6 drm/i915/mtl: limit second scaler vertical scaling in ver >= 14
| * 6bbeb396 ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE
| * c0c4e976 gpiolib: cdev: add gpio_device locking wrapper around gpio_ioctl()
| * 8bdcedfd pinctrl: at91-pio4: use dedicated lock class for IRQ
| * f0c52b79 i2c: aspeed: Handle the coalesced stop conditions with the start conditions.
| * c87ab6e3 ASoC: hdmi-codec: fix missing report for jack initial status
| * 98fb5eaa afs: Fix use-after-free due to get/remove race in volume tree
| * 57bf5629 afs: Use refcount_t rather than atomic_t
| * d1fe946c afs: Fix overwriting of result of DNS query
| * 2552b32b keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry
| * a1ab650f net: check dev->gso_max_size in gso_features_check()
| * 56eaa3ec afs: Fix dynamic root lookup DNS check
| * 3f85785b afs: Fix the dynamic root's d_delete to always delete unused dentries
| * 3739e0a5 net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev()
| * c124a75b net: mana: select PAGE_POOL
| * c0e527c5 net/rose: fix races in rose_kill_by_device()
| * 66d21168 ethernet: atheros: fix a memleak in atl1e_setup_ring_resources
| * 87255af4 net: sched: ife: fix potential use-after-free
| * 242670aa net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors
| * da2396b5 net/mlx5: Fix fw tracer first block check
| * b0873aa4 net/mlx5e: fix a potential double-free in fs_udp_create_groups
| * 4ddba57b net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list()
| * 5ae420f6 Revert "net/mlx5e: fix double free of encap_header"
| * 135fa6fa Revert "net/mlx5e: fix double free of encap_header in update funcs"
| * b387f068 wifi: mac80211: mesh_plink: fix matches_local logic
| * 6558f4aa wifi: iwlwifi: pcie: add another missing bh-disable for rxq->lock
| * 183ea95f s390/vx: fix save/restore of fpu kernel context
| * 58f3fc83 reset: Fix crash when freeing non-existent optional resets
| * 52c69a07 ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init
| * d3ffbbb0 ARM: dts: dra7: Fix DRA7 L3 NoC node register size
* | ea2937bd Merge 5.15.145 into android13-5.15-lts
|\|
| * d93fa2c7 Linux 5.15.145
| * ee41f667 kasan: disable kasan_non_canonical_hook() for HW tags
| * f30f8931 tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols
| * 7aa33c99 Revert "drm/bridge: lt9611uxc: Switch to devm MIPI-DSI helpers"
| * 4a8350a0 Revert "drm/bridge: lt9611uxc: Register and attach our DSI device at probe"
| * e21817ce Revert "drm/bridge: lt9611uxc: fix the race in the error path"
| * 811b5eae ksmbd: don't update ->op_state as OPLOCK_STATE_NONE on error
| * bd47f9c8 ksmbd: move setting SMB2_FLAGS_ASYNC_COMMAND and AsyncId
| * 5e1f3137 ksmbd: release interim response after sending status pending response
| * c21d0445 ksmbd: move oplock handling after unlock parent dir
| * 772d81ae ksmbd: separately allocate ci per dentry
| * 8ed1118d ksmbd: fix possible deadlock in smb2_open
| * ae3356cb ksmbd: prevent memory leak on error return
| * 8dc9eb7d ksmbd: handle malformed smb1 message
| * 1f50c418 ksmbd: fix kernel-doc comment of ksmbd_vfs_kern_path_locked()
| * 3fecda5d ksmbd: no need to wait for binded connection termination at logoff
| * 841bcade ksmbd: add support for surrogate pair conversion
| * 0eaeb8ae ksmbd: fix missing RDMA-capable flag for IPoIB device in ksmbd_rdma_capable_netdev()
| * 20b4f6bd ksmbd: fix recursive locking in vfs helpers
| * f30a2ff7 ksmbd: fix kernel-doc comment of ksmbd_vfs_setxattr()
| * df79244f ksmbd: reorganize ksmbd_iov_pin_rsp()
| * 845837fb ksmbd: Remove unused field in ksmbd_user struct
| * fab0175b ksmbd: fix potential double free on smb2_read_pipe() error path
| * ef435dec ksmbd: fix Null pointer dereferences in ksmbd_update_fstate()
| * 4b9b7ea1 ksmbd: fix wrong error response status by using set_smb2_rsp_status()
| * dd45db4d ksmbd: fix race condition between tree conn lookup and disconnect
| * 0901be8d ksmbd: fix race condition from parallel smb2 lock requests
| * 50e13932 ksmbd: fix race condition from parallel smb2 logoff requests
| * f99d5d1d ksmbd: fix race condition with fp
| * c77fd3e2 ksmbd: fix race condition between session lookup and expire
| * b9a3e454 ksmbd: check iov vector index in ksmbd_conn_write()
| * 01df133b ksmbd: return invalid parameter error response if smb2 request is invalid
| * 4a67467f ksmbd: fix passing freed memory 'aux_payload_buf'
| * fbed0adf ksmbd: remove unneeded mark_inode_dirty in set_info_sec()
| * a9128c41 ksmbd: remove experimental warning
| * 6997fa65 ksmbd: add missing calling smb2_set_err_rsp() on error
| * bd554ed4 ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()
| * 70194404 ksmbd: Fix one kernel-doc comment
| * c5aa7444 ksmbd: reduce descriptor size if remaining bytes is less than request size
| * e12b0924 ksmbd: fix `force create mode' and `force directory mode'
| * 6f020721 ksmbd: fix wrong interim response on compound
| * f2283680 ksmbd: add support for read compound
| * d7ad0ac5 ksmbd: switch to use kmemdup_nul() helper
| * 5c0df9d3 ksmbd: fix out of bounds in init_smb2_rsp_hdr()
| * 017d85c9 ksmbd: validate session id and tree id in compound request
| * 4a027b96 ksmbd: check if a mount point is crossed during path lookup
| * cf63b94f ksmbd: Fix unsigned expression compared with zero
| * 5f36e229 ksmbd: Replace one-element array with flexible-array member
| * d9902ad1 ksmbd: Use struct_size() helper in ksmbd_negotiate_smb_dialect()
| * 97f5c1e3 ksmbd: add missing compound request handing in some commands
| * 67639218 ksmbd: fix out of bounds read in smb2_sess_setup
| * d91ba801 ksmbd: Replace the ternary conditional operator with min()
| * 2222ada0 ksmbd: use kvzalloc instead of kvmalloc
| * 638043be ksmbd: Change the return value of ksmbd_vfs_query_maximal_access to void
| * 7585898d ksmbd: return a literal instead of 'err' in ksmbd_vfs_kern_path_locked()
| * 4910a79a ksmbd: use kzalloc() instead of __GFP_ZERO
| * b6576228 ksmbd: remove unused ksmbd_tree_conn_share function
| * ce95f7d2 ksmbd: add mnt_want_write to ksmbd vfs functions
| * 0d1a3f97 ksmbd: validate smb request protocol id
| * df3a4518 ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop
| * ae33f07c ksmbd: fix posix_acls and acls dereferencing possible ERR_PTR()
| * 55ceeb4e ksmbd: fix out-of-bound read in parse_lease_state()
| * 4adb4fbd ksmbd: fix out-of-bound read in deassemble_neg_contexts()
| * 049ed0f9 ksmbd: call putname after using the last component
| * b423ddab ksmbd: fix UAF issue from opinfo->conn
| * 19b2b9af ksmbd: fix multiple out-of-bounds read during context decoding
| * 61a306c1 ksmbd: fix uninitialized pointer read in smb2_create_link()
| * ea799dd2 ksmbd: fix uninitialized pointer read in ksmbd_vfs_rename()
| * b36295c1 ksmbd: fix racy issue under cocurrent smb2 tree disconnect
| * ae06b798 ksmbd: fix racy issue from smb2 close and logoff with multichannel
| * dff87902 ksmbd: block asynchronous requests when making a delay on session setup
| * a6a9601b ksmbd: destroy expired sessions
| * 708c304b ksmbd: fix racy issue from session setup and logoff
| * 019aae48 ksmbd: fix racy issue from using ->d_parent and ->d_name
| * b31e1ef3 fs: introduce lock_rename_child() helper
| * 380a0fe8 ksmbd: remove unused compression negotiate ctx packing
| * 0dbfcc34 ksmbd: avoid duplicate negotiate ctx offset increments
| * 2ca23947 ksmbd: set NegotiateContextCount once instead of every inc
| * 39f5b4b3 ksmbd: avoid out of bounds access in decode_preauth_ctxt()
| * 92153604 ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr
| * 9494242c ksmbd: delete asynchronous work from list
| * 427caadf ksmbd: remove unused is_char_allowed function
| * 289b46fd ksmbd: fix wrong signingkey creation when encryption is AES256
| * bfe8372e ksmbd: fix possible memory leak in smb2_lock()
| * d625db88 ksmbd: Fix parameter name and comment mismatch
| * 0d3f06fd ksmbd: Fix spelling mistake "excceed" -> "exceeded"
| * 1f1aca1d ksmbd: update Kconfig to note Kerberos support and fix indentation
| * a35ebf65 ksmbd: Remove duplicated codes
| * b15734ec ksmbd: fix typo, syncronous->synchronous
| * 1f485b54 ksmbd: Implements sess->rpc_handle_list as xarray
| * b1caecbf ksmbd: Implements sess->ksmbd_chann_list as xarray
| * d7f088dc ksmbd: send proper error response in smb2_tree_connect()
| * bcab5c81 ksmbd: Convert to use sysfs_emit()/sysfs_emit_at() APIs
| * 46c517bc ksmbd: Fix resource leak in smb2_lock()
| * 9ea6b43d ksmbd: use F_SETLK when unlocking a file
| * 8263acd2 ksmbd: set SMB2_SESSION_FLAG_ENCRYPT_DATA when enforcing data encryption for this share
| * 64b4d72c ksmbd: replace one-element arrays with flexible-array members
| * 2bdd995f ksmbd: validate share name from share config response
| * ef97ccd0 ksmbd: call ib_drain_qp when disconnected
| * b3e852be ksmbd: make utf-8 file name comparison work in __caseless_lookup()
| * 131e3085 ksmbd: hide socket error message when ipv6 config is disable
| * 507cb106 ksmbd: reduce server smbdirect max send/receive segment sizes
| * fe4d0979 ksmbd: decrease the number of SMB3 smbdirect server SGEs
| * d5a3b102 ksmbd: set NTLMSSP_NEGOTIATE_SEAL flag to challenge blob
| * 4d796ff8 ksmbd: fix encryption failure issue for session logoff response
| * e925de7d ksmbd: fill sids in SMB_FIND_FILE_POSIX_INFO response
| * 95b72edc ksmbd: set file permission mode to match Samba server posix extension behavior
| * 813ef06e ksmbd: change security id to the one samba used for posix extension
| * 62e6846e ksmbd: casefold utf-8 share names and fix ascii lowercase conversion
| * 43e2963b ksmbd: remove generic_fillattr use in smb2_open()
| * aa77fc81 ksmbd: constify struct path
| * b79a9f99 ksmbd: don't open-code %pD
| * d6686d57 ksmbd: don't open-code file_path()
| * a7ddc495 ksmbd: remove unnecessary generic_fillattr in smb2_open
| * ebb8c616 ksmbd: request update to stale share config
| * c7aff8b8 ksmbd: use wait_event instead of schedule_timeout()
| * 1f82ecbc ksmbd: remove unused ksmbd_share_configs_cleanup function
| * 8d0f8231 ksmbd: remove duplicate flag set in smb2_write
| * d4b374ff ksmbd: smbd: Remove useless license text when SPDX-License-Identifier is already used
| * ff403dbe ksmbd: smbd: relax the count of sges required
| * 9d609b52 ksmbd: smbd: fix connection dropped issue
| * 32af379e ksmbd: Fix some kernel-doc comments
| * 81602ee1 ksmbd: fix wrong smbd max read/write size check
| * 918a690d ksmbd: smbd: handle multiple Buffer descriptors
| * 673c186f ksmbd: smbd: change the return value of get_sg_list
| * 30bd0df6 ksmbd: smbd: simplify tracking pending packets
| * f17ed7b3 ksmbd: smbd: introduce read/write credits for RDMA read/write
| * 982fcdec ksmbd: smbd: change prototypes of RDMA read/write related functions
| * 6bb43993 ksmbd: validate length in smb2_write()
| * 8e32e158 ksmbd: remove filename in ksmbd_file
| * e9a32512 smb3: fix ksmbd bigendian bug in oplock break, and move its struct to smbfs_common
| * dc232946 ksmbd: replace usage of found with dedicated list iterator variable
| * a5213868 ksmbd: Remove a redundant zeroing of memory
| * 7ee6f9ba ksmbd: shorten experimental warning on loading the module
| * a5a8c913 ksmbd: store fids as opaque u64 integers
| * 170598b6 ksmbd: use netif_is_bridge_port
| * c5049d2d ksmbd: add support for key exchange
| * 09b4c603 ksmbd: smbd: validate buffer descriptor structures
| * 858b9644 ksmbd: smbd: fix missing client's memory region invalidation
| * 51d0b879 ksmbd: add smb-direct shutdown
| * d15077ad ksmbd: smbd: change the default maximum read/write, receive size
| * ba7c3ff9 ksmbd: smbd: create MR pool
| * 97b3a088 ksmbd: smbd: call rdma_accept() under CM handler
| * 8a49ab3e ksmbd: set 445 port to smbdirect port by default
| * 178ecc32 ksmbd: register ksmbd ib client with ib_register_client()
| * 91d73075 ksmbd: Fix smb2_get_name() kernel-doc comment
| * dd56eb36 ksmbd: Delete an invalid argument description in smb2_populate_readdir_entry()
| * 36167446 ksmbd: Fix smb2_set_info_file() kernel-doc comment
| * 2fa426c9 ksmbd: Fix buffer_check_err() kernel-doc comment
| * e5b04973 ksmbd: set both ipv4 and ipv6 in FSCTL_QUERY_NETWORK_INTERFACE_INFO
| * a6325670 ksmbd: Remove unused fields from ksmbd_file struct definition
| * de203cdf ksmbd: Remove unused parameter from smb2_get_name()
| * 82ae5fe3 ksmbd: use oid registry functions to decode OIDs
| * 7833bd31 ksmbd: change LeaseKey data type to u8 array
| * 199b8b5c ksmbd: remove smb2_buf_length in smb2_transform_hdr
| * e0c58420 ksmbd: remove smb2_buf_length in smb2_hdr
| * 6cd90c01 ksmbd: remove md4 leftovers
| * 84af59bc ksmbd: Remove redundant 'flush_workqueue()' calls
| * a33bb607 ksmdb: use cmd helper variable in smb2_get_ksmbd_tcon()
| * 5fed9cbb ksmbd: use ksmbd_req_buf_next() in ksmbd_verify_smb_message()
* 174bf055 Reapply "kasan: print the original fault addr when access invalid shadow"

Change-Id: I9ff0de1948f3bc706c79ea34bc1fd249273ca49f
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>