Merge tag 'android13-5.15.168_r00' into android13-5.15

Merge up to the 5.15.168 LTS release into the android13-5.15 branch.
Changes included in here are:

* 101e665d UPSTREAM: netfilter: xtables: fix typo causing some targets not to load on IPv6
* ed8f3023 Revert "i2c: smbus: Use device_*() functions instead of of_*()"
* 17c8c8c7 Revert "i2c: create debugfs entry per adapter"
* 2055d21b Revert "i2c: core: Lock address during client device instantiation"
* 6bf50d25 Revert "net: Add l3mdev index to flow struct and avoid oif reset for port devices"
* 765a0b87 Revert "netfilter: rpfilter/fib: Populate flowic_l3mdev field"
* 61a0c160 Revert "netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces."
* 894ae559 Revert "netfilter: fib: check correct rtable in vrf setups"
* 633a5817 Revert "xfrm: Pass flowi_oif or l3mdev as oif to xfrm_dst_lookup"
* f80e71c9 Revert "net: Handle l3mdev in ip_tunnel_init_flow"
* c61bc55c ANDROID: GKI: rexport __qdisc_calculate_pkt_len
* 29ba9c92 Revert "xhci: fix event ring segment table related masks and variables in header"
* 40121820 Revert "xhci: remove xhci_test_trb_in_td_math early development check"
* a9c18be6 Revert "xhci: Refactor interrupter code for initial multi interrupter support."
* c6174a2b Revert "xhci: Preserve RsvdP bits in ERSTBA register correctly"
* 524db18a Revert "xhci: Add a quirk for writing ERST in high-low order"
* 9b1184c5 Revert "usb: xhci: fix loss of data on Cadence xHC"
*   bc390ec6 Merge 5.15.168 into android13-5.15-lts
|\
| * 584a40a2 Linux 5.15.168
| * 1b62ef7f net: xilinx: axienet: Schedule NAPI in two steps
| * 56d5ca2e selftests: net: more strict check in net_helper
| * 7ef0ff59 net: axienet: start napi before enabling Rx/Tx
| * a97eacad ext4: fix warning in ext4_dio_write_end_io()
| * 8fcd1021 netfilter: ip6t_rpfilter: Fix regression with VRF interfaces
| * 83948838 net: vrf: determine the dst using the original ifindex for multicast
| * 70247cc8 net: seg6: fix seg6_lookup_any_nexthop() to handle VRFs using flowi_l3mdev
| * 760852df net: Handle l3mdev in ip_tunnel_init_flow
| * 9476ecd7 xfrm: Pass flowi_oif or l3mdev as oif to xfrm_dst_lookup
| * 78f4daf7 net: geneve: add missing netlink policy and size for IFLA_GENEVE_INNER_PROTO_INHERIT
| * 7db54f3b i2c: smbus: Check for parent device before dereference
| * 63a07379 block, bfq: fix uaf for accessing waker_bfqq after splitting
| * 40a6e660 kthread: unpark only parked kthread
| * 8c3de928 nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
| * cda875cd mptcp: pm: do not remove closing subflows
| * d8435f58 net: dsa: lan9303: ensure chip reset and wait for READY status
| * 1cdec792 net: Fix an unsafe loop on the list
| * daf462ff net: explicitly clear the sk pointer, when pf->create fails
| * 24ab54a0 drm/v3d: Stop the active perfmon before being destroyed
| * dd2bac3d hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma
| * 1c4da771 usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
| * e3194214 usb: xhci: Fix problem with xhci resume from suspend
| * 254ef45a usb: dwc3: core: Stop processing of pending events if controller is halted
| * 34354210 Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
| * d246ee01 HID: plantronics: Workaround for an unexcepted opposite volume key
| * 8a6fef7d resource: fix region_intersects() vs add_memory_driver_managed()
| * 8c6ad37e HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
| * a77e1d1a hwmon: (adt7470) Add missing dependency on REGMAP_I2C
| * 36b8e8de hwmon: (adm9240) Add missing dependency on REGMAP_I2C
| * b5a3a65f hwmon: (tmp513) Add missing dependency on REGMAP_I2C
| * 1fdc3bab x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
| * 330c825e RDMA/hns: Fix UAF for cq async event
| * 5e336384 slip: make slhc_remember() more robust against malicious packets
| * fadf8fdb ppp: fix ppp_async_encode() illegal access
| * c9abdd07 mctp: Handle error of rtnl_register_module().
| * 947acd1b rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
| * 21d30b12 net: rtnetlink: add msg kind names
| * 95ad7ee0 netfilter: fib: check correct rtable in vrf setups
| * 66464a43 netfilter: rpfilter/fib: Set ->flowic_uid correctly for user namespaces.
| * 5c6cb7ab netfilter: rpfilter/fib: Populate flowic_l3mdev field
| * 5bcde9b4 net: Add l3mdev index to flow struct and avoid oif reset for port devices
| * 85ff9a0f netfilter: xtables: avoid NFPROTO_UNSPEC where needed
| * f30ea678 sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
| * b5d662f4 net: ibm: emac: mal: fix wrong goto
| * 8fb65035 net/sched: accept TCA_STAB only for root qdisc
| * 0a94079e igb: Do not bring the device up after non-fatal error
| * 9db6ce9e i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
| * 394ded96 ice: Fix netif_is_ice() in Safe Mode
| * dcd9bf6d gpio: aspeed: Use devm_clk api to manage clock source
| * a82f6a31 gpio: aspeed: Add the flush write to ensure the write complete.
| * 043b681d net: dsa: b53: fix jumbo frames on 10/100 ports
| * 6bc26a82 net: dsa: b53: allow lower MTUs on BCM5325/5365
| * 94a40349 net: dsa: b53: fix max MTU for BCM5325/BCM5365
| * 7b444a8d net: dsa: b53: fix max MTU for 1g switches
| * def87a33 net: dsa: b53: fix jumbo frame mtu check
| * 8403021b thermal: intel: int340x: processor: Fix warning during module unload
| * 2ba1af0c thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add
| * 5f14a2d0 net: phy: bcm84881: Fix some error handling paths
| * 496b2ab0 Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
| * 95c0cff5 netfilter: br_netfilter: fix panic with metadata_dst skb
| * 7134b01b tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
| * ffdcd3bd tcp: fix to allow timestamp undo if no retransmits were sent
| * ad0d76b8 net: phy: dp83869: fix memory corruption when enabling fiber
| * 584c019b NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
| * 91b9a4c5 SUNRPC: Fix integer overflow in decode_rc_list()
| * 8a202373 ice: fix VLAN replay after reset
| * ca5b4237 NFSD: Mark filecache "down" if init fails
| * e0e14dd3 RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
| * 41cf6f26 fbdev: sisfb: Fix strbuf array overflow
| * c643ef59 drm/amd/display: Check null pointer before dereferencing se
| * 57551835 driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute
| * 59eba86b tools/iio: Add memory allocation failure check for trigger_name
| * 9a2bc9b6 virtio_pmem: Check device status before requesting flush
| * 6515b7b1 comedi: ni_routing: tools: Check when the file could not be opened
| * 98d5873e usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario
| * 7ad71deb usb: chipidea: udc: enable suspend interrupt after usb reset
| * d18dc8e1 clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
| * 64f2ca5c remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
| * 52f8c06e media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()
| * 92728fce ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition
| * f1c9b8dc PCI: Mark Creative Labs EMU20k2 INTx masking as broken
| * 28ad4ed0 i2c: i801: Use a different adapter-name for IDF adapters
| * 351a97d9 PCI: Add ACS quirk for Qualcomm SA8775P
| * 3e11b8de clk: bcm: bcm53573: fix OF node leak in init
| * 394b2f4d RDMA/rtrs-srv: Avoid null pointer deref during path establishment
| * eb549794 PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
| * 7022a517 RDMA/mad: Improve handling of timed out WRs of mad agent
| * ee603aae ktest.pl: Avoid false positives with grub2 skip regex
| * b85e6e46 s390/cpum_sf: Remove WARN_ON_ONCE statements
| * 4f5768a3 ext4: nested locking for xattr inode
| * fbb177bc ext4: don't set SB_RDONLY after filesystem errors
| * 11cd5f6e bpf, x64: Fix a jit convergence issue
| * 02e5e382 s390/mm: Add cond_resched() to cmm_alloc/free_pages()
| * 4a749c14 s390/facility: Disable compile time optimization for decompressor code
| * 297c326c bpf: Check percpu map value size first
| * 40364194 Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
| * 1ce2632e virtio_console: fix misc probe bugs
| * 54b946e6 fs/ntfs3: Refactor enum_rstbl to suppress static checker
| * 9d7e3c9f selftests: net: Remove executable bits from library scripts
| * 5174a2aa selftests/net: synchronize udpgro tests' tx and rx connection
| * fc1ec829 selftests/net: give more time to udpgro bg processes to complete startup
| * 084435db tracing: Have saved_cmdlines arrays all in one allocation
| * 455df76f drm/crtc: fix uninitialized variable use even harder
| * daceb147 tracing: Remove precision vsnprintf() check from print event
| * 5320baa1 net: ethernet: cortina: Drop TSO support
| * 651b954c unicode: Don't special case ignorable code points
| * f57204ed ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate()
| * a7167798 perf report: Fix segfault when 'sym' sort key is not used
| * 46128370 vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
| * 3bb6763a 9p: add missing locking around taking dentry fid list
| * 8b4920bd ext4: fix inode tree inconsistency caused by ENOMEM
| * 5292eafa Revert "arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings"
| * 07b98400 ACPI: battery: Fix possible crash when unregistering a battery hook
| * eb7924f8 ACPI: battery: Simplify battery hook locking
| * a1a37348 clk: qcom: gcc-sc8180x: Add GPLL9 support
| * 21950321 r8169: add tally counter fields added with RTL8125
| * e36d8907 r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
| * befa8b1f dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
| * f691f2b5 dt-bindings: clock: qcom: Add missing UFS QREF clocks
| * a0c5a9b9 media: imx335: Fix reset-gpio handling
| * 846a78f7 media: i2c: imx335: Enable regulator supplies
| * e1b0752d drm/rockchip: vop: clear DMA stop bit on RK3066
| * 5e889e72 drm/rockchip: support gamma control on RK3399
| * a8ade6a3 drm/rockchip: define gamma registers for RK3399
| * 8fa2b681 lib/buildid: harden build ID parsing logic
| * 91fdcb0d build-id: require program headers to be right after ELF header
| * feca6017 drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
| * 21cb47db uprobes: fix kernel info leak via "[uprobes]" vma
| * 9707c789 arm64: errata: Expand speculative SSBS workaround once more
| * f76454cf arm64: cputype: Add Neoverse-N3 definitions
| * 66f6e22d arm64: Add Cortex-715 CPU part definition
| * 8c30a9a8 ext4: dax: fix overflowing extents beyond inode size when partially writing
| * bb990db7 ext4: properly sync file size update after O_SYNC direct IO
| * d1c3c8a5 spi: bcm63xx: Fix missing pm_runtime_disable()
| * 676546ba i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
| * 01eb21af i2c: xiic: Use devm_clk_get_enabled()
| * 65677e96 i2c: core: Lock address during client device instantiation
| * 0e8926ab i2c: create debugfs entry per adapter
| * 19e9b89c i2c: smbus: Use device_*() functions instead of of_*()
| * c15e2ab4 device property: Add fwnode_irq_get_byname
| * bf36521e device property: Add fwnode_iomap()
| * 3d5bce8a kconfig: qconf: fix buffer overflow in debug links
| * eb9329cd drm/amd/display: Fix system hang while resume with TBT monitor
| * 622bc647 drm/sched: Add locking to drm_sched_entity_modify_sched
| * 7e9d945a close_range(): fix the logics in descriptor table trimming
| * 322920b5 tracing/timerlat: Fix a race during cpuhp processing
| * 5b8d9e49 tracing/hwlat: Fix a race during cpuhp processing
| * 4764c820 gpio: davinci: fix lazy disable
| * 4c98fe0d btrfs: wait for fixup workers before stopping cleaner kthread during umount
| * 37fee9c2 btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
| * 5ec5d4dd ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
| * d32f7a43 ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
| * 95555f9f Input: adp5589-keys - fix adp5589_gpio_get_value()
| * 4449fedb Input: adp5589-keys - fix NULL pointer dereference
| * fc65bc81 rtc: at91sam9: fix OF node leak in probe() error path
| * b0da9504 net: stmmac: Fix zero-division error when disabling tc cbs
| * 84a9d135 tomoyo: fallback to realpath if symlink's pathname does not exist
| * 14bf8400 iio: magnetometer: ak8975: Fix reading for ak099xx sensors
| * ab727ca0 clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
| * c02e3ab7 clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
| * bf6be32e media: venus: fix use after free bug in venus_remove due to race condition
| * 248e5169 clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
| * ed17f317 clk: qcom: clk-rpmh: Fix overflow in BCM vote
| * 5c784773 media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
| * 862ab6b7 media: sun4i_csi: Implement link validate for sun4i_csi subdev
| * 595f3a4c clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
| * 6be85772 clk: rockchip: fix error for unknown clocks
| * 07b418d5 aoe: fix the potential use-after-free problem in more places
| * 2f8f226f NFSD: Fix NFSv4's PUTPUBFH operation
| * 825789ca nfsd: map the EBADMSG to nfserr_io to avoid warning
| * c5f73b37 nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
| * fdb6429a perf hist: Update hist symbol when updating maps
| * ddf704c2 exfat: fix memory leak in exfat_load_bitmap()
| * f47b1d5e riscv: define ILLEGAL_POINTER_VALUE for 64bit
| * aab0032d ext4: mark fc as ineligible using an handle in ext4_xattr_set()
| * b4eff7c7 ext4: use handle to mark fc as ineligible in __track_dentry_update()
| * 4e66fc1d ext4: fix fast commit inode enqueueing during a full journal commit
| * 13e4a67f ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
| * 3c1777a4 ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
| * a9fcb171 ext4: update orig_path in ext4_find_extent()
| * 32bbb59e ext4: fix double brelse() the buffer of the extents path
| * 9df59009 ext4: aovid use-after-free in ext4_ext_insert_extent()
| * a34bed97 ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
| * 02cb2cb0 ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
| * a11cfe5e ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
| * cafcc1bd ext4: fix slab-use-after-free in ext4_split_extent_at()
| * a1f71afb ext4: correct encrypted dentry name hash when not casefolded
| * aca593e6 ext4: no need to continue when the number of entries is 1
| * c25c05b2 ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
| * 6d62d3ef ALSA: line6: add hw monitor volume control to POD HD500X
| * 5276f42f ALSA: usb-audio: Add native DSD support for Luxman D-08u
| * cac2df1c ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
| * c82ee046 ALSA: core: add isascii() check to card ID generator
| * 90e8f0be drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
| * 2d158286 parisc: Fix itlb miss handler for 64-bit programs
| * 1905a87c perf/core: Fix small negative period being ignored
| * 0c965564 power: supply: hwmon: Fix missing temp1_max_alarm attribute
| * 5199bc71 spi: bcm63xx: Fix module autoloading
| * 35f7af9b firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
| * 438e1173 i2c: xiic: Wait for TX empty to avoid missed TX NAKs
| * b261af56 i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
| * 1883cad2 i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
| * 1973c4d8 platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
| * b8219d9d selftests: vDSO: fix vdso_config for s390
| * 2d07646d selftests: vDSO: fix ELF hash table entry size for s390x
| * 0fc61eef selftests/mm: fix charge_reserved_hugetlb.sh test
| * 4862f665 selftests: vDSO: fix vDSO symbols lookup for powerpc64
| * cd7bd2af selftests: vDSO: fix vdso_config for powerpc
| * e6b63652 selftests: vDSO: fix vDSO name for powerpc
| * d9663682 selftests: breakpoints: use remaining time to check if suspend succeed
| * ed11dd79 spi: s3c64xx: fix timeout counters in flush_fifo
| * 0e2d6c17 spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
| * 2a07e6f0 usb: typec: tcpm: Check for port partner validity before consuming it
| * 09e829b3 blk-integrity: register sysfs attributes on struct device
| * 6356f2d2 blk-integrity: convert to struct device_attribute
| * 71246997 blk-integrity: use sysfs_emit
| * ef05572d ext4: fix i_data_sem unlock order in ext4_ind_migrate()
| * 4999fed8 ext4: avoid use-after-free in ext4_ext_show_leaf()
| * 69fe6502 ext4: ext4_search_dir should return a proper error
| * ee6b6fa1 of/irq: Refer to actual buffer size in of_irq_parse_one()
| * 9550d8d6 drm/amd/pm: ensure the fw_info is not null before using it
| * c8c09585 drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
| * eb9a4b6f scsi: aacraid: Rearrange order of struct aac_srb_unit
| * 6aeb160e drm/printer: Allow NULL data in devcoredump printer
| * 1f9f8186 drm/amd/display: Initialize get_bytes_per_element's default to 1
| * c13f9c62 drm/amd/display: Fix index out of bounds in DCN30 color transformation
| * c6979719 drm/amd/display: Fix index out of bounds in degamma hardware format translation
| * de6ee4f9 drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
| * 14db8692 drm/amd/display: Check stream before comparing them
| * 0af53bc5 platform/x86: touchscreen_dmi: add nanote-next quirk
| * 3217b83e HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
| * f38b68a6 drm/amdgpu: enable gfxoff quirk on HP 705G4
| * 0000f7b4 drm/amdgpu: add raven1 gfxoff quirk
| * d7444f91 jfs: Fix uninit-value access of new_ea in ea_buffer
| * 48edb1f7 scsi: smartpqi: correct stream detection
| * 25d2a3ff jfs: check if leafidx greater than num leaves per dmap tree
| * e7ae14f7 jfs: Fix uaf in dbFreeBits
| * 89257ecb jfs: UBSAN: shift-out-of-bounds in dbFindBits
| * a545a940 drm/amd/display: Check null pointers before using dc->clk_mgr
| * 6a6045ad ata: sata_sil: Rename sil_blacklist to sil_quirks
| * 8ab59527 drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
| * 8840dc73 iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
| * 4a96abcc iommu/vt-d: Always reserve a domain ID for identity setup
| * d9e19f1b power: reset: brcmstb: Do not go into infinite loop if reset fails
| * f4ff7eb5 iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
| * afb940c9 rcuscale: Provide clear error when async specified without primitives
| * 4cda484e fbdev: pxafb: Fix possible use after free in pxafb_task()
| * 1af86293 x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
| * 6c4194f3 ALSA: hdsp: Break infinite MIDI input flush loop
| * 36ee4021 ALSA: asihpi: Fix potential OOB array access
| * dacec3a3 tools/x86/kcpuid: Protect against faulty "max subleaf" values
| * d6a62fcf ALSA: usb-audio: Add logitech Audio profile quirk
| * 8659f67f ALSA: usb-audio: Define macros for quirk table entries
| * e479cb83 x86/ioapic: Handle allocation failures gracefully
| * 8af3e93c ALSA: usb-audio: Add input value sanity checks for standard types
| * 4631445c signal: Replace BUG_ON()s
| * c50c8946 nfp: Use IRQF_NO_AUTOEN flag in request_irq()
| * e59bdb1b wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
| * 0f722fb4 wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
| * 4a55880f proc: add config & param to block forcing mem writes
| * 0a898bec ACPICA: iasl: handle empty connection_node
| * 34478851 tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
| * f7a05d5d net: atlantic: Avoid warning about potential string truncation
| * fb55f3d8 ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
| * babfc874 ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
| * 4fd17b61 net: mvpp2: Increase size of queue_name buffer
| * 54dae0e9 tipc: guard against string buffer overrun
| * 1c9b8775 ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
| * d6e279a0 ACPI: EC: Do not release locks during operation region accesses
| * 7df61957 wifi: rtw88: select WANT_DEV_COREDUMP
| * 4dd73289 wifi: ath11k: fix array out-of-bound access in SoC stats
| * a37a6976 nvme-pci: qdepth 1 quirk
| * f4ef9bef blk_iocost: fix more out of bound shifts
| * d1e08ebc net: sched: consistently use rcu_replace_pointer() in taprio_change()
| * 5ee8ee67 ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
| * bcf5c930 ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
| * 92e5661b ACPI: PAD: fix crash in exit_round_robin()
| * 1163b7a1 net: hisilicon: hns_mdio: fix OF node leak in probe()
| * 36622aa3 net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
| * 3d055e84 net: hisilicon: hip04: fix OF node leak in probe()
| * a0465723 net/xen-netback: prevent UAF in xenvif_flush_hash()
| * d107d63e ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
| * 012ae530 wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
| * 08a24438 wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
| * 88ff021e f2fs: Require FMODE_WRITE for atomic write ioctls
| * a37b5014 ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
| * 472b5fc6 ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
| * e142b12f ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
| * 6eac1b15 ALSA: hda/realtek: Fix the push button function for the ALC257
| * 2bded581 ALSA: mixer_oss: Remove some incorrect kfree_const() usages
| * d5ed208d media: usbtv: Remove useless locks in usbtv_video_free()
| * fa593e9c i2c: xiic: Try re-initialization on bus busy timeout
| * 5ffff2b5 i2c: xiic: improve error message when transfer fails to start
| * 72cb227a i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path
| * a50c8564 i2c: xiic: Fix RX IRQ busy check
| * c7ed4dda i2c: xiic: Switch from waitqueue to completion
| * 574d8d0f i2c: xiic: Fix broken locking on tx_msg
| * e7a84421 sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
| * 176dd41e ppp: do not assume bh is held in ppp_channel_bridge_input()
| * 97b1f515 ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
| * 105a2921 net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
| * a785cbc8 net: stmmac: Disable automatic FCS/Pad stripping
| * e255383a stmmac_pci: Fix underflow size in stmmac_rx
| * 2415f465 net: add more sanity checks to qdisc_pkt_len_init()
| * 939c88cb net: avoid potential underflow in qdisc_pkt_len_init() with UFO
| * 469856f7 net: ethernet: lantiq_etop: fix memory disclosure
| * 62a4567e Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
| * 38e3fd0c netfilter: nf_tables: prevent nf_skb_duplicated corruption
| * 3ed462d0 net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
| * 62ac553b netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
| * 4655456a net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
| * 201ce2f7 net/mlx5: Added cond_resched() to crdump collection
| * ce828b34 net/mlx5: Fix error path in multi-packet WQE transmit
| * ee57897c ieee802154: Fix build error
| * f863bfd0 ceph: remove the incorrect Fw reference check when dirtying pages
| * df293ea7 mailbox: bcm2835: Fix timeout during suspend mode
| * 6bd8e9ef mailbox: rockchip: fix a typo in module autoloading
| * bc935651 static_call: Replace pointless WARN_ON() in static_call_module_notify()
| * ed4c8ce0 static_call: Handle module init failure correctly in static_call_del_module()
| * 894ac00d spi: lpspi: Simplify some error message
| * 1e0417dc usb: yurex: Fix inconsistent locking bug in yurex_read()
| * 84554d42 i2c: isch: Add missed 'else'
| * a2146b61 i2c: aspeed: Update the stop sw state when the bus recovery occurs
| * 8ce4b0d4 mm: only enforce minimum stack gap size if it's sensible
| * e59cd4b1 lockdep: fix deadlock issue between lockdep and rcu
| * cc59ee9b bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
| * 9186293c x86/entry: Remove unwanted instrumentation in common_interrupt()
| * c86f5a9d x86/idtentry: Incorporate definitions/declarations of the FRED entries
| * 3a69dccc pps: add an error check in parport_attach
| * ec22387a pps: remove usage of the deprecated ida_simple_xx() API
| * 009a2f6c usb: xhci: fix loss of data on Cadence xHC
| * 112625ec xhci: Add a quirk for writing ERST in high-low order
| * cfe314e9 xhci: Preserve RsvdP bits in ERSTBA register correctly
| * d2e4da87 xhci: Refactor interrupter code for initial multi interrupter support.
| * f2ae6fd0 xhci: remove xhci_test_trb_in_td_math early development check
| * a646b4e5 xhci: fix event ring segment table related masks and variables in header
| * 0bf337c4 USB: misc: yurex: fix race between read and write
| * 97968750 usb: yurex: Replace snprintf() with the safer scnprintf() variant
| * 23c84724 soc: versatile: realview: fix soc_dev leak during device remove
| * 5eae90b2 soc: versatile: realview: fix memory leak during device remove
| * 72164d5b padata: use integer wrap around to prevent deadlock on seq_nr overflow
| * c3dfec3c EDAC/igen6: Fix conversion of system address to physical memory address
| * 62356668 nfs: fix memory leak in error path of nfs4_do_reclaim
| * 39458418 fs: Fix file_set_fowner LSM hook inconsistencies
| * 3721a694 vfs: fix race between evice_inodes() and find_inode()&iput()
| * 3eb0143d arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
| * 04afbac8 arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
| * beb14f60 hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
| * 07f76fec hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
| * 8bdb3983 hwrng: mtk - Use devm_pm_runtime_enable
| * dc9a23d3 f2fs: avoid potential int overflow in sanity_check_area_boundary()
| * afb5da22 f2fs: prevent possible int overflow in dir_block_index()
* | 2e66050f Merge 21f05519 ("debugobjects: Fix conditions in fill_pool()") into android13-5.15-lts
|\|
| * 21f05519 debugobjects: Fix conditions in fill_pool()
| * f5056adc wifi: mt76: mt7615: check devm_kasprintf() returned value
| * 44f94356 wifi: rtw88: 8822c: Fix reported RX band width
| * 5ebb243e perf/x86/intel/pt: Fix sampling synchronization
| * 11690d7e efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
| * 43f5d026 ACPI: resource: Add another DMI match for the TongFang GMxXGxx
| * 0cdfb917 ACPI: sysfs: validate return type of _STR method
| * 90ed958a drbd: Add NULL check for net_conf to prevent dereference in state validation
| * c9ae82e4 drbd: Fix atomicity violation in drbd_uuid_set_bm()
| * 3e425c8a crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
| * 7ddf551c xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
| * bfdddc20 tty: rp2: Fix reset with non forgiving PCIe host bridges
| * a77fc4ac firmware_loader: Block path traversal
| * 4d6e61d7 bus: integrator-lm: fix OF node leak in probe()
| * 2682248b usb: dwc2: drd: fix clock gating on USB role switch
| * ff359dad usb: cdnsp: Fix incorrect usb_request status
| * 92f9e6c8 USB: class: CDC-ACM: fix race between get_serial and set_serial
| * cde120f5 USB: misc: cypress_cy7c63: check for short transfer
| * 39c22ede USB: appledisplay: close race between probe and completion handler
| * b80aacfe usbnet: fix cyclical race on disconnect with work queue
| * 75349cb4 scsi: mac_scsi: Disallow bus errors during PDMA send
| * aa4d228b scsi: mac_scsi: Refactor polling loop
| * 3fe6d2a7 scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
| * 9113f60b drm/amd/display: Validate backlight caps are sane
| * 458c54c6 drm/amd/display: Round calculated vtotal
| * a2c1d68a Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
| * 7874e99b Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
| * 87d6eabb Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
| * c3b04fe1 Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
| * d738f1dc soc: versatile: integrator: fix OF node leak in probe() error path
| * 49006a92 ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
| * 65038f8c PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
| * fdceebc8 Remove *.orig pattern from .gitignore
| * fe0cd537 selinux,smack: don't bypass permissions check in inode_setsecctx hook
| * a6d81055 vfio/pci: fix potential memory leak in vfio_intx_enable()
| * a1630bd1 x86/mm: Switch to new Intel CPU model defines
| * 3088bb7a powercap: RAPL: fix invalid initialization for pl4_supported field
| * 9a4be35d Input: goodix - use the new soc_intel_is_byt() helper
| * 71442652 drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
| * 5d72a13d netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
| * 39696868 netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
| * c1be35e7 bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
| * 0066d4ba net: qrtr: Update packets cloning when broadcasting
| * 5c4c0328 tcp: check skb is non-NULL in tcp_rto_delta_us()
| * a3e83a40 net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
| * 822c7bb1 net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
| * fbff87d6 netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
| * d1c98c68 net: xilinx: axienet: Fix packet counting
| * fac36298 net: axienet: Switch to 64-bit RX/TX statistics
| * 15d2b2bf net: axienet: Use NAPI for TX completion path
| * e09deb71 net: axienet: Be more careful about updating tx_bd_tail
| * 0493a5d8 net: axienet: add coalesce timer ethtool configuration
| * 72e135ba net: axienet: reduce default RX interrupt threshold to 1
| * 3b4b8afd net: axienet: implement NAPI and GRO receive
| * 635e766e net: axienet: don't set IRQ timer when IRQ delay not used
| * 50a2ed16 net: axienet: Clean up DMA start/stop and error handling
| * 9384262a net: axienet: Clean up device used for DMA calls
| * 043dc922 Revert "dm: requeue IO if mapping table not yet available"
| * 927a2580 vhost_vdpa: assign irq bypass producer token correctly
| * 4d10104d vdpa: Add eventfd for the vdpa callback
| * b22db557 interconnect: qcom: sm8250: Enable sync_state
| * 4a6e2210 coresight: tmc: sg: Do not leak sg_table
| * 01a2e655 iio: adc: ad7606: fix standby gpio state to match the documentation
| * 2abf0fa4 iio: adc: ad7606: fix oversampling gpio array
| * 7553f7a8 spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
| * 00148baf spi: lpspi: release requested DMA channels
| * 41324fd0 spi: lpspi: Silence error message upon deferred probe
* | 97dbcffd Merge e8d64f59 ("f2fs: get rid of online repaire on corrupted directory") into android13-5.15-lts
|\|
| * e8d64f59 f2fs: get rid of online repaire on corrupted directory
| * e2d39a59 f2fs: clean up w/ dotdot_name
| * 0cab7158 f2fs: introduce F2FS_IPU_HONOR_OPU_WRITE ipu policy
| * de5561be f2fs: fix to wait page writeback before setting gcing flag
| * 520ff47f f2fs: optimize error handling in redirty_blocks
| * 2e580f42 f2fs: reduce expensive checkpoint trigger frequency
| * 500d362d f2fs: remove unneeded check condition in __f2fs_setxattr()
| * 6eacbf58 f2fs: fix to update i_ctime in __f2fs_setxattr()
| * 9c58cd07 f2fs: fix typo
* | ef332e92 Revert "PCI: xilinx-nwl: Clean up clock on probe failure/removal"
* | 8ca19381 Merge b7b7a8df ("nfsd: return -EINVAL when namelen is 0") into android13-5.15-lts
|\|
| * b7b7a8df nfsd: return -EINVAL when namelen is 0
| * 9803ab88 nfsd: call cache_put if xdr_reserve_space returns NULL
| * 85a84de8 ntb_perf: Fix printk format
| * a429158f ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
| * 35c8e66e RDMA/irdma: fix error message in irdma_modify_qp_roce()
| * b11318dc RDMA/cxgb4: Added NULL check for lookup_atid
| * 208dba18 riscv: Fix fp alignment bug in perf_callchain_user()
| * 16eda7c0 RDMA/hns: Optimize hem allocation performance
| * 3e5a43da RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
| * 4685b680 RDMA/hns: Refactor the abnormal interrupt handler function
| * 254b52a2 RDMA/hns: Fix the wrong type of return value of the interrupt handler
| * 55f98f48 RDMA/hns: Remove unused abnormal interrupt of type RAS
| * 29c0f546 RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
| * b79ddb93 RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
| * 15bcd2dc RDMA/hns: Don't modify rq next block addr in HIP09 QPC
| * bd5f76cc watchdog: imx_sc_wdt: Don't disable WDT in suspend
| * 1730d47d IB/core: Fix ib_cache_setup_one error flow cleanup
| * 70ce36ad pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
| * 255527b8 pinctrl: mvebu: Use devm_platform_get_and_ioremap_resource()
| * bef565d7 nfsd: fix refcount leak when file is unhashed after being found
| * 0b5bc6d1 nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
| * e69b5883 clk: ti: dra7-atl: Fix leak of of_nodes
| * 0429a4e9 RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
| * c84af5f5 RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
| * 8e561229 pinctrl: single: fix missing error code in pcs_probe()
| * da039269 RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
| * 9cf0b13a PCI: xilinx-nwl: Clean up clock on probe failure/removal
| * 5bbcac07 PCI: xilinx-nwl: Fix register misspelling
| * dc5aeba0 PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
| * 86d920d2 drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
| * a879b6cd drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
| * 9a2d7636 Input: ilitek_ts_i2c - add report id message validation
| * f448eb55 Input: ilitek_ts_i2c - avoid wrong input subsystem sync
| * 82133243 clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
| * 7d214562 remoteproc: imx_rproc: Initialize workqueue earlier
| * 070d4502 remoteproc: imx_rproc: Correct ddr alias for i.MX8M
| * 30efd759 clk: imx: imx8qxp: Parent should be initialized earlier than the clock
| * f1046dd0 clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
| * 03b2049e clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
| * 47a121d9 perf time-utils: Fix 32-bit nsec parsing
| * dcdbb13e perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time
| * f73fc46d perf sched timehist: Fix missing free of session in perf_sched__timehist()
| * f666eb1b perf mem: Free the allocated sort string, fixing a leak
| * 9dada37c bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
| * c4f85549 nilfs2: fix potential oob read in nilfs_btree_check_delete()
| * 42d44163 nilfs2: determine empty node blocks as corrupted
| * 73d23ecf nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
| * be2e9b11 ext4: avoid OOB when system.data xattr changes underneath the filesystem
| * 299d996f ext4: return error on ext4_find_inline_entry
| * bf4cabdf ext4: avoid negative min_clusters in find_group_orlov()
| * a2037e06 ext4: avoid potential buffer_head leak in __ext4_new_inode()
| * 9b638bcf ext4: avoid buffer_head leak in ext4_mark_inode_used()
| * 86964b59 smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
| * 38c00906 ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
| * a75b4f3a kthread: fix task state in kthread worker if being frozen
| * c37bf4de xz: cleanup CRC32 edits from 2018
| * bfea0441 selftests/bpf: Fix C++ compile error from missing _Bool type
| * aa02db40 selftests/bpf: Fix error compiling test_lru_map.c
| * f40796cd selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
| * bf5988a4 selftests/bpf: Fix compiling core_reloc.c with musl-libc
| * e0fcf564 selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
| * a445d939 selftests/bpf: Fix compiling flow_dissector.c with musl-libc
| * 9b548bff selftests/bpf: Fix compiling kfree_skb.c with musl-libc
| * 0193a67c selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
| * ea960f62 selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
| * c9a6207a selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
* | 42bb395d Revert "i2c: Add i2c_get_match_data()"
* | 18b35daf Revert "hwmon: (max16065) Remove use of i2c_match_id()"
* | 21d0519a Revert "hwmon: (max16065) Fix alarm attributes"
* | 756e98dc Merge ebc4e1f4 ("tpm: Clean up TPM space after command failure") into android13-5.15-lts
|\|
| * ebc4e1f4 tpm: Clean up TPM space after command failure
| * 07c9cccc xen/swiotlb: add alignment check for dma buffers
| * ed3e8cc9 xen: use correct end address of kernel for conflict checking
| * a8906615 drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
| * 0220a2d7 drm/msm: fix %s null argument error
| * 72782ec6 ipmi: docs: don't advertise deprecated sysfs entries
| * 9963b910 drm/msm/a5xx: workaround early ring-buffer emptiness check
| * 1058abdc drm/msm: Drop priv->lastctx
| * d1838814 drm/msm/a5xx: fix races in preemption evaluation stage
| * b43f548e drm/msm/a5xx: properly clear preemption records on resume
| * 1dae34bd drm/msm/a5xx: disable preemption in submits by default
| * 071e6751 drm/msm: Fix incorrect file name output in adreno_request_fw()
| * 18f0b0b1 powerpc/8xx: Fix kernel vs user address comparison
| * a078336d powerpc/8xx: Fix initial memory mapping
| * 6f790377 powerpc/32: Remove 'noltlbs' kernel parameter
| * 1c0e359a powerpc/32: Remove the 'nobats' kernel parameter
| * 46184cbb drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
| * ead82533 jfs: fix out-of-bounds in dbNextAG() and diAlloc()
| * 16a570f0 scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
| * 791b3d66 drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
| * e8a4a2e4 drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
| * 4d871e3e drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
| * b4cb296e drm/rockchip: vop: Allow 4096px width scaling
| * 036ab40a scsi: NCR5380: Check for phase match during PDMA fixup
| * c63e9284 scsi: NCR5380: Add SCp members to struct NCR5380_cmd
| * b95955dc drm/radeon: properly handle vbios fake edid sizing
| * 26819a5b drm/radeon: Replace one-element array with flexible-array member
| * 92734d5e drm/amdgpu: properly handle vbios fake edid sizing
| * a1f0111f drm/amdgpu: Replace one-element array with flexible-array member
| * 44948d3c drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
| * 2948bb29 drm/stm: Fix an error handling path in stm_drm_platform_probe()
| * 1d43adec pmdomain: core: Harden inter-column space in debug summary
| * 962c92e4 mtd: powernv: Add check devm_kasprintf() returned value
| * 21d445fd fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
| * 5f54a866 power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
| * eac72ef9 power: supply: axp20x_battery: Remove design from min and max voltage
| * bb58bae2 hwmon: (ntc_thermistor) fix module autoloading
| * a2cb89bb mtd: slram: insert break after errors in parsing the map
| * d5c43b10 hwmon: (max16065) Fix alarm attributes
| * d522354c hwmon: (max16065) Remove use of i2c_match_id()
| * 41fe2205 i2c: Add i2c_get_match_data()
| * 302bb15d hwmon: (max16065) Fix overflows seen when writing limits
* | 9e5f21ef Revert "bareudp: Pull inner IP header in bareudp_udp_encap_recv()."
* | 3df032c8 Revert "cgroup: Make operations on the cgroup root_list RCU safe"
* | b4bc05e5 Revert "cgroup: Move rcu_head up near the top of cgroup_root"
* | 95e89f7c Revert "inet: inet_defrag: prevent sk release while still in use"
* | 2968c40d Merge 365384c3 ("m68k: Fix kernel_clone_args.flags in m68k_clone()") into android13-5.15-lts
|\|
| * 365384c3 m68k: Fix kernel_clone_args.flags in m68k_clone()
| * d681dae5 clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
| * 4a60b539 reset: k210: fix OF node leak in probe() error path
| * aaeadde7 reset: berlin: fix OF node leak in probe() error path
| * dcf11d38 ARM: versatile: fix OF node leak in CPUs prepare
| * d8539f13 ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
| * bb55d5e7 ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
| * 412a519d arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
| * db323e08 spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
| * 89008d5e spi: ppc4xx: handle irq_of_parse_and_map() errors
| * cc4d21d9 block: fix potential invalid pointer dereference in blk_add_partition
| * a894cf7e block: print symbolic error name instead of error code
| * e0c20d88 block, bfq: don't break merge chain in bfq_split_bfqq()
| * 3883a687 block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
| * 8aa9de02 block, bfq: fix possible UAF for bfqq->bic with merge chain
| * 67adffd3 net: tipc: avoid possible garbage value
| * 1ee3ffd8 net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
| * 613dad98 r8169: disable ALDPS per default for RTL8125
| * ad0af189 net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
| * 64ad2aac bareudp: Pull inner IP header on xmit.
| * b293c9d8 geneve: Fix incorrect inner network header offset when innerprotoinherit is set
| * 446f84d3 net: geneve: support IPv4/IPv6 as inner protocol
| * 2099b709 bareudp: Pull inner IP header in bareudp_udp_encap_recv().
| * b614fde1 Bluetooth: btusb: Fix not handling ZPL/short-transfer
| * 2b316418 can: m_can: m_can_close(): stop clocks after device has been shut down
| * 9550baad can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
| * 984648aa sock_map: Add a cond_resched() in sock_hash_free()
| * bf090f4f wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
| * acb53a71 wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
| * 439353e5 wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
| * 95f2c90b wifi: mt76: mt7915: fix rx filter setting for bfee functionality
| * c8d74454 wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
| * 40fb6425 x86/sgx: Fix deadlock in SGX NUMA node search
| * b6e1cdf2 cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
| * 3e2b7c9d netfilter: nf_tables: remove annotation to access set timeout while holding lock
| * b5f97550 netfilter: nf_tables: reject expiration higher than timeout
| * b987e863 netfilter: nf_tables: reject element expiration with no timeout
| * 616aa287 netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
| * 94e8c988 ACPI: CPPC: Fix MASK_VAL() usage
| * 89588512 ACPI: bus: Avoid using CPPC if not supported by firmware
| * b48ba808 can: j1939: use correct function name in comment
| * e53934e3 padata: Honor the caller's alignment in case of chunk_size 0
| * b48560a5 wifi: iwlwifi: mvm: increase the time between ranging measurements
| * d5ecaf72 mount: handle OOM on mnt_warn_timestamp_expiry
| * 33e460b4 fs/namespace: fnic: Switch to use %ptTd
| * a6e8d2a0 mount: warn only once about timestamp range expiration
| * b6a9b12e fs: explicitly unregister per-superblock BDIs
| * 66663a9d wifi: rtw88: remove CPT execution branch never used
| * d19865d5 net: stmmac: dwmac-loongson: Init ref and PTP clocks rate
| * 43df8109 wifi: ath9k: Remove error checks when creating debugfs entries
| * 49d8d8e0 wifi: ath9k: fix parameter check in ath9k_init_debug()
| * 9dd0cb48 ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
| * 435ec960 crypto: xor - fix template benchmarking
| * ceaab3fb wifi: rtw88: always wait for both firmware loading attempts
| * 7367e0fe EDAC/synopsys: Fix error injection on Zynq UltraScale+
| * 12ee2b3a EDAC/synopsys: Fix ECC status and IRQ control race condition
| * 7e1cf435 EDAC/synopsys: Re-enable the error interrupts on v3 hw
| * 9a9187f3 EDAC/synopsys: Use the correct register to disable the error interrupt on v3 hw
| * 28ccc041 EDAC/synopsys: Add support for version 3 of the Synopsys EDAC DDR
| * 0c927dfc USB: usbtmc: prevent kernel-usb-infoleak
| * 86b49544 USB: serial: pl2303: add device id for Macrosilicon MS3020
| * 9405d778 cgroup: Move rcu_head up near the top of cgroup_root
| * c218058f gpiolib: cdev: Ignore reconfiguration without direction
| * 4318608d inet: inet_defrag: prevent sk release while still in use
| * c65ab97e gpio: prevent potential speculation leaks in gpio_device_get_desc()
| * e0f67494 Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
| * ded5376e netfilter: nf_tables: missing iterator type in lookup walk
| * ce9fef54 netfilter: nft_set_pipapo: walk over current view on netlink dump
| * de77545c cgroup: Make operations on the cgroup root_list RCU safe
| * c031d286 ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
| * 5bbe51ea ocfs2: add bounds checking to ocfs2_xattr_find_entry()
| * ad98e04b spi: spidev: Add missing spi_device_id for jg10309-01
| * 4e1b1fce x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
| * bba8f339 spi: bcm63xx: Enable module autoloading
| * 534f63c5 drm: komeda: Fix an issue related to normalized zpos
| * 82ead539 spi: spidev: Add an entry for elgin,jg10309-01
| * b7795462 ASoC: tda7419: fix module autoloading
| * f2f5918c ASoC: intel: fix module autoloading
| * 6a9e652e wifi: iwlwifi: clear trans->state earlier upon error
| * 1afed66c wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
| * a15df5f3 wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
| * 8f03a04b wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
| * 6f19780d wifi: iwlwifi: lower message level for FW buffer destination
* | bc7ef680 Merge 8e46e6d3 ("net: ftgmac100: Ensure tx descriptor updates are visible") into android13-5.15-lts
|\|
| * 8e46e6d3 net: ftgmac100: Ensure tx descriptor updates are visible
| * 6f836612 microblaze: don't treat zero reserved memory regions as error
| * befc2d67 pinctrl: at91: make it work with current gpiolib
| * e69c0100 scsi: lpfc: Fix overflow build issue
| * 04eb0c49 ALSA: hda/realtek - FIxed ALC285 headphone no sound
| * fe040144 ALSA: hda/realtek - Fixed ALC256 headphone no sound
| * 2208c252 ASoC: allow module autoloading for table db1200_pids
| * fb053002 ASoC: meson: axg-card: fix 'use-after-free'
| * 79cce5e8 dma-buf: heaps: Fix off-by-one in CMA heap fault handler
| * 16b3e7ad soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
| * 491f9646 spi: nxp-fspi: fix the KASAN report out-of-bounds bug
| * 38f5db55 net: dpaa: Pad packets to ETH_ZLEN
| * ddc7c423 netfilter: nft_socket: fix sk refcount leaks
| * e259f8aa net: ftgmac100: Enable TX interrupt to avoid TX timeout
| * 8fa29817 octeontx2-af: Modify SMQ flush sequence to drop packets
| * e216ded4 octeontx2-af: Set XOFF on other child transmit schedulers during SMQ flush
| * 16ff0895 fou: fix initialization of grc
| * b503f004 net/mlx5: Add missing masks and QoS bit masks for scheduling elements
| * 63991ecf net/mlx5: Add IFC bits and enums for flow meter
| * 0a596903 net/mlx5: Add support to create match definer
| * 636de102 net/mlx5: Explicitly set scheduling element and TSAR type
| * 3f8d4d9b net/mlx5e: Add missing link modes to ptys2ethtool_map
| * 61964f36 igb: Always call igb_xdp_ring_update_tail() under Tx lock
| * 25cf67f8 ice: fix accounting for filters shared by multiple VSIs
| * 3f796b4d hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev >= 1.2
| * 7e40afcc hwmon: (pmbus) Introduce and use write_byte_data callback
| * 87bd31cb selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
| * 47c5117a eeprom: digsy_mtc: Fix 93xx46 driver probe failure
| * f7bfeb68 arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
| * 8fd28e6b fs/ntfs3: Use kvfree to free memory allocated by kvmalloc
| * 5b2c8b34 mm: avoid leaving partial pfn mappings around in error case
| * b6e5727d net: tighten bad gso csum offset check in virtio_net_hdr
| * 235af50e minmax: reduce min/max macro expansion in atomisp driver
| * 73103e80 arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
| * 3554482f mptcp: pm: Fix uaf in __timer_delete_sync
| * 190b8a64 platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
| * b7c2f692 platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
| * 3666a257 NFS: Avoid unnecessary rescanning of the per-server delegation list
| * e796a3db NFSv4: Fix clearing of layout segments in layoutreturn
| * 2fb6f894 Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
| * 156ea082 drm/msm/adreno: Fix error return if missing firmware-name
| * da69c017 platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
| * 18576c70 scripts: kconfig: merge_config: config files: add a trailing newline
| * 7d91a0b2 HID: multitouch: Add support for GT7868Q
| * 10c11176 Input: synaptics - enable SMBus for HP Elitebook 840 G2
| * 39de55ed Input: ads7846 - ratelimit the spi_sync error message
| * f5a73abe btrfs: update target inode's ctime on unlink
| * 00ef1de6 powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
| * be4e5f5b net: phy: vitesse: repair vsc73xx autonegotiation
| * 9ef29b75 net: ethernet: use ip_hdrlen() instead of bit shift
| * d71c5e8c usbnet: ipheth: fix carrier detection in modes 1 and 4
| * df944dc4 ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
| * ff55291f ocfs2: fix null-ptr-deref when journal load failed.
| * f55a33fe ocfs2: remove unreasonable unlock in ocfs2_read_blocks
| * 4173d127 ocfs2: cancel dqi_sync_work before freeing oinfo
| * 020f5c53 ocfs2: reserve space for inline xattr before attaching reflink tree
| * 07718269 ocfs2: fix uninit-value in ocfs2_get_block()
| * ff8875e5 ocfs2: fix the la space leak when unmounting an ocfs2 volume
| * 44f79667 mm: krealloc: consider spare memory for __GFP_ZERO
| * 70fee368 jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
| * ec7f8337 jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
| * e60b0d3b drm: omapdrm: Add missing check for alloc_ordered_workqueue
| * 45157733 of/irq: Support #msi-cells=<0> in of_msi_get_domain
| * e18d233e parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
| * cb946784 parisc: Fix 64-bit userspace syscall path
* 3bfe0893 Merge branch 'android13-5.15' into android13-5.15-lts

Change-Id: Iba89e0f7fd93603776d30c990b3f35c88bec3629
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>