Change-Id: I944643fe506d1f86cce982d55127c04b290db3fc

Currently usb role only can be set device mode and host mode,
if remove usb cable, usb role is still device mode, this is
incorrect.

Through connected state, host_mode and device_mode value to set
usb role, can help fix usb suspend issue.

Change-Id: I6958e3e107db243ea5135c25d3c721b22e8f31ec
Signed-off-by: Ke Du <quic_kedu@quicinc.com>

Enable the leds_pwm driver for bengal LE target.

Change-Id: I6f43b329c971f94294ec567f3bb24bb5e88b2997
Signed-off-by: Aesha Gandhi <quic_gaesha@quicinc.com>

Change-Id: I947360b918cf290e9c9e11d48c84cbb2e83feaa3

The xHC has to set/clear OCA bit and set OCC bit of PORTSC
register on OverCurrent true and false conditions respectively.

On QCOM SoCs the xHC controllers are not capable of detecting
OCP on their ports. However there is a Qscratch register that can be
written to trigger the xHC to update the PORTSC bits.
Platforms may then be able to add external OC detection circuitry
and connect the detection output to a GPIO. This Qscratch register
can then be written up on receiving an interrupt on this GPIO when
it asserts.

Add support for the same based on USB fault GPIO probe and proper
QSCRATCH register update.

Change-Id: I042eb78a040b75dcd453ad16efd0beb131f9dc00
Signed-off-by: Sriram Dash <quic_sriramd@quicinc.com>

Change detection gpio completion method to add FALLING_DOWN
and check gpio status when irq occurs. If high resets the
lt8711uxe2, otherwise holding reset gpio high will make
the lt8711uxe2 not work.

Change-Id: I50de9f32221033f65626a313d79321c3f6dc2715
Signed-off-by: Yaswanth Kowtha <quic_ykowtha@quicinc.com>

Rename Extra input register to DWC_EXTRA_INPUT_6 and update
corresponding register bit names.

Change-Id: I28c62d7fd0ed177eb80698456a5d79a0bf458fe3
Signed-off-by: Sriram Dash <quic_sriramd@quicinc.com>

CPU1:                                         CPU2:
handle_uaudio_stream_req              uaudio_dev_cleanup
prepare_qmi_response                  uaudio_event_ring_cleanup_free
xhci_sec_event_ring_cleanup           xhci_sec_event_ring_cleanup
sec_event_ring_cleanup                sec_event_ring_cleanup
                                      xhci_handle_sec_intr_evnt

There could be a chance that CPU1 running thread is trying to clean the
"sec" list, and at the same time, after cleanup, CPU2 running thread
is trying to fetch "ir_set" and "erst->entries."

Call trace:
xhci_sec_event_ring_cleanup [snd_usb_audio_qmi]
uaudio_event_ring_cleanup_free [snd_usb_audio_qmi]
uaudio_dev_cleanup [snd_usb_audio_qmi]
uaudio_disconnect [snd_usb_audio_qmi]
usb_audio_disconnect
usb_unbind_interface
device_release_driver_internal
device_release_driver
bus_remove_device
device_del
usb_disable_device
usb_disconnect
hub_event

Adding spin_lock in xhci_sec_ring_cleanup to avoid
multiple access to same function.

Change-Id: Ie0fa7a69ac6ab4ef105570b8d3569ee4e1f45204
Signed-off-by: Uttkarsh Aggarwal <quic_uaggarwa@quicinc.com>
Signed-off-by: Manish Nagar <quic_mnagar@quicinc.com>

Change-Id: Ied554655d575b358261ea4c1032658b9ca9efdd8

This reverts commit 576bec7a

Reason for revert: <clean up symbols to match ksymtab and symbol list>.

Change-Id: I45a03737b5a5158827acaaac71f1768cdc53f6c1
Signed-off-by: Bhasker Reddy Komatireddy <quic_kbhasker@quicinc.com>
Signed-off-by: Yanhong Wu <quic_yanhwu@quicinc.com>

Once the first sub-handshake failed, the connection id will be
invalid or even worse be reused, reset it and let the userspace
retry in this case.

Change-Id: I5f13c73035feb13327db9bcd98e2c46d159fd576
Signed-off-by: Hui Li <quic_hul@quicinc.com>

1.added generic_bengal_defconfig for target bengal_le
2.added perf (gki) and debug(consolidate) defconfigs for bengal_le.

Change-Id: Idfb047ddb03bc62bbeb7c5c4265c5046ed3d45d0
Signed-off-by: Asit Shah <quic_asitshah@quicinc.com>

Currently, both virtion and hybrid implementations lack the logic
to remove the map->attr persistent bit after calling the "munmap_fd"
ioctl. As a result, vfastrpc_mmap_free can be triggered repeatedly
to decrement the reference count. This will cause a mismatch in
reference counts between "refs" and others (i.e. "ctx_refs").
A potential UAF scenario may arise. The logic to remove the map->attr
persistent bit after calling the "munmap_fd" ioctl can be added to
solve this problem.

Change-Id: I6be7498ba0c9070e505b44779fecd2cac427c04a
Signed-off-by: mingzh <quic_mingzh@quicinc.com>

The show/store functions for deep_sleep_allowed was registered
under attr ds_allow_ka and the same should be used to get the
deep_sleep_allowed member variable.

Change-Id: I2a5ce466f8648dbf274a3a86ad077efd54bfb163
Signed-off-by: Abdul Salam <quic_asalam@quicinc.com>

* refs/heads/tmp-a3a0d152:
  Revert "UPSTREAM: unicode: Don't special case ignorable code points"
  Revert "ANDROID: mm: Fix SPF-aware fast-mremap"
  UPSTREAM: HID: core: zero-initialize the report buffer
  ANDROID: mm: Fix SPF-aware fast-mremap
  BACKPORT: FROMGIT: binder: add delivered_freeze to debugfs output
  BACKPORT: FROMGIT: binder: fix memleak of proc->delivered_freeze
  FROMGIT: binder: allow freeze notification for dead nodes
  FROMGIT: binder: fix BINDER_WORK_CLEAR_FREEZE_NOTIFICATION debug logs
  FROMGIT: binder: fix BINDER_WORK_FROZEN_BINDER debug logs
  BACKPORT: FROMGIT: binder: fix freeze UAF in binder_release_work()
  FROMGIT: binder: fix OOB in binder_add_freeze_work()
  FROMGIT: binder: fix node UAF in binder_add_freeze_work()
  UPSTREAM: USB: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
  ANDROID: GKI: Add additional symbols for honor
  ANDROID: Update abi_gki_aarch64_qcom symbol list
  ANDROID: GKI: Update symbol list for honor
  UPSTREAM: dma-buf: heaps: Fix off-by-one in CMA heap fault handler
  ANDROID: ABI: update symbol list for honor
  ANDROID: fs: add vendor hook to collect IO statistics
  Revert "drm/mipi-dsi: Set the fwnode for mipi_dsi_device"
  ANDROID: GKI: Update symbol list for mtk
  Revert "drm/mipi-dsi: Set the fwnode for mipi_dsi_device"
  ANDROID: Fix kernelci build-break
  ANDROID: GKI: Update symbol list for mtk
  BACKPORT: firmware: arm_scmi: Queue in scmi layer for mailbox implementation
  UPSTREAM: PCI/ASPM: Restore parent state to parent, child state to child
  BACKPORT: PCI/ASPM: Disable L1 before configuring L1 Substates
  UPSTREAM: PCI/ASPM: Call pci_save_ltr_state() from pci_save_pcie_state()
  BACKPORT: PCI/ASPM: Save L1 PM Substates Capability for suspend/resume
  BACKPORT: PCI/ASPM: Move pci_save_ltr_state() to aspm.c
  BACKPORT: PCI/ASPM: Move pci_configure_ltr() to aspm.c
  BACKPORT: gso: fix udp gso fraglist segmentation after pull from frag_list
  ANDROID: usb: Optimization the transfer rate of accessory mode in USB3.2 mode
  ANDROID: KVM: arm64: Don't run a protected VCPU if it isn't runnable
  ANDROID: GKI: add init symbol list file for vivo
  ANDROID: ABI: add device_property_match_string to abi symbol list
  UPSTREAM: blk-mq: avoid extending delays of active hctx from blk_mq_delay_run_hw_queues
  ANDROID: ABI: update symbol list for honor
  ANDROID: GKI: Add patch that uses vendor hook define for Honor
  ANDROID: GKI: Update symbol list for honor
  ANDROID: Allow vendor modules perform more operationson on sock.
  BACKPORT: exfat: Implement sops->shutdown and ioctl
  UPSTREAM: unicode: Don't special case ignorable code points
  UPSTREAM: unicode: Don't special case ignorable code points
  ANDROID: 16K: Fixup padding vm_flags bits on VMA splits
  ANDROID: 16K: Introduce pgsize_migration_inline.h
  ANDROID: abi_gki_aarch64_qcom: Update QCOM symbol list
  Revert "perf/aux: Fix AUX buffer serialization"
  Revert "hwspinlock: Introduce hwspin_lock_bust()"
  Revert "clocksource/drivers/timer-of: Remove percpu irq related code"
  Revert "bareudp: Fix device stats updates."
  Revert "fuse: fix UAF in rcu pathwalks"
  Revert "net: stmmac: Enable mac_managed_pm phylink config"
  Revert "genirq: Allow irq_chip registration functions to take a const irq_chip"
  Revert "sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE tasks"
  Revert "genirq: Allow the PM device to originate from irq domain"
  ANDROID: fix up ABI breakage due to new arm64 errata
  Revert "irqchip/imx-irqsteer: Constify irq_chip struct"
  Revert "irqchip/imx-irqsteer: Add runtime PM support"
  Revert "irqchip/imx-irqsteer: Handle runtime power management correctly"
  Revert "leds: trigger: use RCU to protect the led_cdevs list"
  Revert "leds: trigger: Remove unused function led_trigger_rename_static()"
  Revert "leds: trigger: Store brightness set by led_trigger_event()"
  Revert "leds: trigger: Call synchronize_rcu() before calling trig->activate()"
  Revert "leds: triggers: Flush pending brightness before activating trigger"
  Revert "scsi: core: Fix a use-after-free"
  Revert "net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD()"
  Revert "net: inline sock_prot_inuse_add()"
  Revert "net: drop nopreempt requirement on sock_prot_inuse_add()"
  Revert "ipv6: annotate some data-races around sk->sk_prot"
  Revert "ipv6: Fix data races around sk->sk_prot."
  Revert "tcp: Fix data races around icsk->icsk_af_ops."
  Revert "af_unix: Annotate data-race of sk->sk_state in unix_stream_connect()."
  Revert "i2c: add fwnode APIs"
  Revert "i2c: acpi: Unbind mux adapters before delete"
  Revert "tcp: Use BPF timeout setting for SYN ACK RTO"
  Revert "Fix race for duplicate reqsk on identical SYN"
  Revert "KVM: arm64: vgic-v4: Make the doorbell request robust w.r.t preemption"
  Revert "mmc: davinci_mmc: Convert to platform remove callback returning void"
  Revert "mmc: davinci: Don't strip remove function when driver is builtin"
  Revert "Input: ioc3kbd - convert to platform remove callback returning void"
  UPSTREAM: f2fs: fix to update i_ctime in __f2fs_setxattr()
  BACKPORT: f2fs: Create COW inode from parent dentry for atomic write
  BACKPORT: f2fs: atomic: fix to avoid racing w/ GC
  UPSTREAM: f2fs: remove unused PAGE_PRIVATE_ATOMIC_WRITE
  BACKPORT: f2fs: use meta inode for GC of COW file
  BACKPORT: f2fs: use meta inode for GC of atomic file
  UPSTREAM: f2fs: truncate page cache before clearing flags when aborting atomic write
  UPSTREAM: f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
  UPSTREAM: f2fs: prevent atomic file from being dirtied before commit
  UPSTREAM: f2fs: mark inode dirty for FI_ATOMIC_COMMITTED flag
  ANDROID: GKI: Export a symbol “next_arg” for honor
  BACKPORT: netem: fix return value if duplicate enqueue fails
  ANDROID: arm64: call vendor hook in reworked handers
  Revert "drm/mipi-dsi: use correct return type for the DSC functions"
  Revert "media: cec: call enable_adap on s_log_addrs"
  Revert "media: cec: abort if the current transmit was canceled"
  Revert "media: cec: correctly pass on reply results"
  Revert "media: cec: use call_op and check for !unregistered"
  Revert "media: cec-adap.c: drop activate_cnt, use state info instead"
  Revert "media: cec: core: avoid confusing "transmit timed out" message"
  Revert "media: cec: core: avoid recursive cec_claim_log_addrs"
  Revert "media: cec: core: add adap_nb_transmit_canceled() callback"
  Linux 5.15.167
  udp: fix receiving fraglist GSO packets
  memcg: protect concurrent access to mem_cgroup_idr
  btrfs: fix race between direct IO write and fsync when using same fd
  net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket
  x86/mm: Fix PTI for i386 some more
  net: drop bad gso csum_start and offset in virtio_net_hdr
  gso: fix dodgy bit handling for GSO_UDP_L4
  net: change maximum number of UDP segments to 128
  net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation
  gpio: rockchip: fix OF node leak in probe()
  drm/i915/fence: Mark debug_fence_free() with __maybe_unused
  drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
  ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode
  nvmet-tcp: fix kernel crash if commands allocation fails
  arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
  arm64: acpi: Move get_cpu_for_acpi_id() to a header
  ACPI: processor: Fix memory leaks in error paths of processor_add()
  ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()
  workqueue: Improve scalability of workqueue watchdog touch
  workqueue: wq_watchdog_touch is always called with valid CPU
  nilfs2: protect references to superblock parameters exposed in sysfs
  nilfs2: replace snprintf in show functions with sysfs_emit
  ksmbd: Unlock on in ksmbd_tcp_set_interfaces()
  ksmbd: unset the binding mark of a reused connection
  perf/aux: Fix AUX buffer serialization
  uprobes: Use kzalloc to allocate xol area
  clocksource/drivers/timer-of: Remove percpu irq related code
  clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
  clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
  VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
  Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
  uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
  nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
  binder: fix UAF caused by offsets overwrite
  usb: dwc3: core: update LC timer as per USB Spec V3.2
  iio: adc: ad7124: fix chip ID mismatch
  iio: adc: ad7124: fix config comparison
  iio: fix scale application in iio_convert_raw_to_processed_unlocked
  iio: buffer-dmaengine: fix releasing dma channel on error
  staging: iio: frequency: ad9834: Validate frequency parameter value
  cifs: Check the lease context if we actually got a lease
  NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
  ata: pata_macio: Use WARN instead of BUG
  MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
  lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
  of/irq: Prevent device address out-of-bounds read in interrupt map walk
  Squashfs: sanity check symbolic link size
  usbnet: ipheth: race between ipheth_close and error handling
  Input: uinput - reject requests with unreasonable number of slots
  HID: amd_sfh: free driver_data after destroying hid device
  HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
  s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
  btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()
  kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
  i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
  net: dpaa: avoid on-stack arrays of NR_CPUS elements
  PCI: Add missing bridge lock to pci_bus_lock()
  riscv: set trap vector earlier
  btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
  btrfs: clean up our handling of refs == 0 in snapshot delete
  btrfs: replace BUG_ON with ASSERT in walk_down_proc()
  fs/ntfs3: Check more cases when directory is corrupted
  smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
  wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
  dma-mapping: benchmark: Don't starve others when doing the test
  ext4: fix possible tid_t sequence overflows
  drm/amdgpu: Set no_hw_access when VF request full GPU fails
  libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
  hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
  hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
  hwmon: (lm95234) Fix underflows seen when writing limit attributes
  hwmon: (adc128d818) Fix underflows seen when writing limit attributes
  pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
  devres: Initialize an uninitialized struct member
  um: line: always fill *error_out in setup_one_line()
  cgroup: Protect css->cgroup write under css_set_lock
  iommu/vt-d: Handle volatile descriptor status read
  dm init: Handle minors larger than 255
  ASoC: topology: Properly initialize soc_enum values
  net: dsa: vsc73xx: fix possible subblocks range of CAPT block
  net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
  fou: Fix null-ptr-deref in GRO.
  gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers
  gro: remove rcu_read_lock/rcu_read_unlock from gro_receive handlers
  bareudp: Fix device stats updates.
  usbnet: modern method to get random MAC
  net: usb: don't write directly to netdev->dev_addr
  ice: check ICE_VSI_DOWN under rtnl_lock when preparing for reset
  igc: Unlock on error in igc_io_resume()
  tcp_bpf: fix return value of tcp_bpf_sendmsg()
  platform/x86: dell-smbios: Fix error path in dell_smbios_init()
  igb: Fix not clearing TimeSync interrupts for 82580
  can: m_can: Release irq on error in m_can_open
  can: bcm: Remove proc entry when dev is unregistered.
  drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6
  pcmcia: Use resource_size function on resource object
  media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
  PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
  media: vivid: don't set HDMI TX controls if there are no HDMI outputs
  drm/amd/display: Check HDCP returned status
  usb: uas: set host status byte on data completion error
  wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
  leds: spi-byte: Call of_node_put() on error path
  media: vivid: fix wrong sizeimage value for mplane
  udf: Avoid excessive partition lengths
  netfilter: nf_conncount: fix wrong variable type
  iommu: sun50i: clear bypass register
  af_unix: Remove put_pid()/put_cred() in copy_peercred().
  irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
  smack: unix sockets: fix accept()ed socket label
  ALSA: hda: Add input value sanity checks to HDMI channel map controls
  mptcp: pm: send ACK on an active subflow
  mptcp: pr_debug: add missing \n at the end
  mptcp: pm: skip connecting to already established sf
  mptcp: pm: do not remove already closed subflows
  mptcp: pm: ADD_ADDR 0 is not a new address
  mptcp: close subflow when receiving TCP+FIN
  mptcp: avoid duplicated SUB_CLOSED events
  mptcp: pm: avoid possible UaF when selecting endp
  mptcp: constify a bunch of of helpers
  mptcp: pm: fullmesh: select the right ID later
  mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR
  mptcp: pm: only decrement add_addr_accepted for MPJ req
  mptcp: pm: re-using ID of unused flushed subflows
  nilfs2: fix state management in error path of log writing function
  nilfs2: fix missing cleanup on rollforward recovery error
  sched: sch_cake: fix bulk flow accounting logic for host fairness
  ila: call nf_unregister_net_hooks() sooner
  tracing: Avoid possible softlockup in tracing_iter_reset()
  can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
  clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
  clk: qcom: clk-alpha-pll: Fix the pll post div mask
  fuse: use unsigned type for getxattr/listxattr size truncation
  fuse: update stats for pages in dropped aux writeback list
  mmc: cqhci: Fix checking of CQHCI_HALT state
  mmc: sdhci-of-aspeed: fix module autoloading
  mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
  Bluetooth: MGMT: Ignore keys being loaded with invalid type
  Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
  nvme-pci: Add sleep quirk for Samsung 990 Evo
  rtmutex: Drop rt_mutex::wait_lock before scheduling
  irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
  ata: libata: Fix memory leak for error path in ata_host_alloc()
  ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
  ALSA: hda/realtek: add patch for internal mic in Lenovo V145
  ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
  KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing
  KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE
  ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
  sch/netem: fix use after free in netem_dequeue
  i2c: Use IS_REACHABLE() for substituting empty ACPI functions
  ext4: handle redirtying in ext4_bio_write_page()
  udf: Limit file size to 4TB
  ext4: reject casefold inode flag without casefold feature
  rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
  virtio_net: Fix napi_skb_cache_put warning
  drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
  media: uvcvideo: Enforce alignment of frame and interval
  drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
  block: remove the blk_flush_integrity call in blk_integrity_unregister
  wifi: cfg80211: make hash table duplicates more survivable
  drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
  drm/meson: plane: Add error handling
  smack: tcp: ipv4, fix incorrect labeling
  fsnotify: clear PARENT_WATCHED flags lazily
  usb: typec: ucsi: Fix null pointer dereference in trace
  usbip: Don't submit special requests twice
  rcu/nocb: Remove buggy bypass lock contention mitigation
  ionic: fix potential irq name truncation
  RDMA/efa: Properly handle unexpected AQ completions
  hwspinlock: Introduce hwspin_lock_bust()
  PCI: al: Check IORESOURCE_BUS existence during probe
  cpufreq: scmi: Avoid overflow of target_freq in fast switch
  wifi: iwlwifi: remove fw_running op
  drm/amdgpu: update type of buf size to u32 for eeprom functions
  drm/amd/pm: check negtive return for table entries
  drm/amdgpu: the warning dereferencing obj for nbio_v7_4
  drm/amd/pm: check specific index for aldebaran
  drm/amdgpu: fix the waring dereferencing hive
  drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs
  apparmor: fix possible NULL pointer dereference
  drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device
  drm/amdgpu: fix mc_data out-of-bounds read warning
  drm/amdgpu: fix ucode out-of-bounds read warning
  drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
  drm/amdgpu: Fix out-of-bounds write warning
  drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
  drm/amdgpu/pm: Fix uninitialized variable warning for smu10
  drm/amd/amdgpu: Check tbo resource pointer
  drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
  drm/amd/display: Check msg_id before processing transcation
  drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
  drm/amd/display: Add array index check for hdcp ddc access
  drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
  drm/amd/display: Check gpio_id before used as array index
  drm/amdgpu: avoid reading vf2pf info size from FB
  drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
  drm/amdgpu: fix uninitialized scalar variable warning
  drm/amd/pm: fix the Out-of-bounds read warning
  drm/amd/pm: fix warning using uninitialized value of max_vid_step
  drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
  drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc
  drm/amdgpu: fix overflowed array index read warning
  drm/amd/display: Assign linear_pitch_alignment even for VM
  drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
  net: usb: qmi_wwan: add MeiG Smart SRM825L
  dma-debug: avoid deadlock between dma debug vs printk and netconsole
  i2c: Fix conditional for substituting empty ACPI functions
  ALSA: hda/conexant: Mute speakers at suspend / shutdown
  ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
  drm: panel-orientation-quirks: Add quirk for OrangePi Neo
  Revert "binder: fix max_thread type inconsistency"
  Revert "bpf, sockmap: Convert schedule_work into delayed_work"
  Revert "bpf, sockmap: Reschedule is now done through backlog"
  Revert "bpf, sockmap: Improved check for empty queue"
  ANDROID: usb: dwc3: Fix gadget mis-merge from upstream
  Linux 5.15.166
  apparmor: fix policy_unpack_test on big endian systems
  scsi: aacraid: Fix double-free on probe failure
  igc: Fix qbv tx latency by setting gtxoffset
  igc: Fix reset adapter logics when tx mode change
  phy: zynqmp: Enable reference clock correctly
  usb: cdnsp: fix for Link TRB with TC
  usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function
  usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes()
  usb: dwc3: st: add missing depopulate in probe error path
  usb: dwc3: st: fix probed platform device ref count on probe error path
  usb: dwc3: core: Prevent USB core invalid event buffer address access
  usb: dwc3: omap: add missing depopulate in probe error path
  USB: serial: option: add MeiG Smart SRM825L
  cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
  soc: qcom: cmd-db: Map shared memory as WC, not WB
  nfc: pn533: Add poll mod list filling check
  net: busy-poll: use ktime_get_ns() instead of local_clock()
  gtp: fix a potential NULL pointer dereference
  ethtool: check device is present when getting link settings
  dmaengine: dw: Add memory bus width verification
  dmaengine: dw: Add peripheral bus width verification
  phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume
  phy: xilinx: phy-zynqmp: dynamic clock support for power-save
  phy: xilinx: add runtime PM support
  PM: runtime: Add DEFINE_RUNTIME_DEV_PM_OPS() macro
  PM: core: Add EXPORT[_GPL]_SIMPLE_DEV_PM_OPS macros
  PM: core: Remove DEFINE_UNIVERSAL_DEV_PM_OPS() macro
  soundwire: stream: fix programming slave ports for non-continous port maps
  net:rds: Fix possible deadlock in rds_message_put
  cgroup/cpuset: Prevent UAF in proc_cpuset_show()
  ata: libata-core: Fix null pointer dereference on error
  drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
  Revert "MIPS: Loongson64: reset: Prioritise firmware service"
  mptcp: sched: check both backup in retrans
  net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response
  wifi: mwifiex: duplicate static structs used in driver instances
  pinctrl: single: fix potential NULL dereference in pcs_get_function()
  pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins
  btrfs: run delayed iputs when flushing delalloc
  drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
  tools: move alignment-related macros to new <linux/align.h>
  Input: MT - limit max slots
  Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO
  mm/numa: no task_numa_fault() call if PTE is changed
  mm/numa: no task_numa_fault() call if PMD is changed
  ALSA: timer: Relax start tick time check for slave timer elements
  hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt()
  Revert "drm/amd/display: Validate hw_points_num before using it"
  mmc: dw_mmc: allow biu and ciu clocks to defer
  KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
  cxgb4: add forgotten u64 ivlan cast before shift
  HID: microsoft: Add rumble support to latest xbox controllers
  HID: wacom: Defer calculation of resolution until resolution_code is known
  MIPS: Loongson64: Set timer mode in cpu-probe
  scsi: core: Fix the return value of scsi_logical_block_count()
  Bluetooth: MGMT: Add error handling to pair_device()
  mmc: mmc_test: Fix NULL dereference on allocation failure
  drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
  drm/msm/dp: reset the link phy params before link training
  drm/msm/dpu: don't play tricks with debug macros
  net: xilinx: axienet: Fix dangling multicast addresses
  net: xilinx: axienet: Always disable promiscuous mode
  netfilter: flowtable: validate vlan header
  ipv6: prevent possible UAF in ip6_xmit()
  ipv6: fix possible UAF in ip6_finish_output2()
  ipv6: prevent UAF in ip6_send_skb()
  netem: fix return value if duplicate enqueue fails
  net: dsa: mv88e6xxx: Fix out-of-bound access
  net: dsa: mv88e6xxx: replace ATU violation prints with trace points
  net: dsa: mv88e6xxx: read FID when handling ATU violations
  dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp()
  ice: fix ICE_LAST_OFFSET formula
  bonding: fix xfrm state handling when clearing active slave
  bonding: fix xfrm real_dev null pointer dereference
  bonding: fix null pointer deref in bond_ipsec_offload_ok
  bonding: fix bond_ipsec_offload_ok return type
  ip6_tunnel: Fix broken GRO
  netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
  netfilter: nft_counter: Disable BH in nft_counter_offload_stats().
  kcm: Serialise kcm_sendmsg() for the same socket.
  tc-testing: don't access non-existent variable on exception
  Bluetooth: SMP: Fix assumption of Central always being Initiator
  nfsd: make svc_stat per-network namespace instead of global
  Bluetooth: hci_core: Fix LE quote calculation
  nfsd: remove nfsd_stats, make th_cnt a global counter
  platform/surface: aggregator: Fix warning when controller is destroyed in probe
  nfsd: make all of the nfsd stats per-network namespace
  net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings
  dm suspend: return -ERESTARTSYS instead of -EINTR
  media: solo6x10: replace max(a, min(b, c)) by clamp(b, a, c)
  nfsd: expose /proc/net/sunrpc/nfsd in net namespaces
  nfsd: rename NFSD_NET_* to NFSD_STATS_*
  sunrpc: use the struct net as the svc proc private
  sunrpc: remove ->pg_stats from svc_program
  sunrpc: pass in the sv_stats struct through svc_create_pooled
  nfsd: stop setting ->pg_stats for unused stats
  sunrpc: don't change ->sv_stats if it doesn't exist
  NFSD: Fix frame size warning in svc_export_parse()
  NFSD: Rewrite synopsis of nfsd_percpu_counters_init()
  NFSD: Refactor the duplicate reply cache shrinker
  NFSD: Replace nfsd_prune_bucket()
  NFSD: Rename nfsd_reply_cache_alloc()
  NFSD: Refactor nfsd_reply_cache_free_locked()
  nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net
  nfsd: move reply cache initialization into nfsd startup
  block: use "unsigned long" for blk_validate_block_size().
  gtp: pull network headers in gtp_dev_xmit()
  hrtimer: Prevent queuing of hrtimer without a function callback
  nvmet-rdma: fix possible bad dereference when freeing rsps
  ext4: set the type of max_zeroout to unsigned int to avoid overflow
  irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
  usb: dwc3: core: Skip setting event buffers for host only controllers
  platform/x86: lg-laptop: fix %s null argument warning
  clocksource: Make watchdog and suspend-timing multiplication overflow safe
  s390/iucv: fix receive buffer virtual vs physical address confusion
  openrisc: Call setup_memory() earlier in the init sequence
  NFS: avoid infinite loop in pnfs_update_layout.
  nvmet-tcp: do not continue for invalid icreq
  net: hns3: add checking for vf id of mailbox
  Bluetooth: bnep: Fix out-of-bound access
  usb: gadget: fsl: Increase size of name buffer for endpoints
  f2fs: fix to do sanity check in update_sit_entry
  btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent()
  btrfs: change BUG_ON to assertion in tree_move_down()
  btrfs: send: handle unexpected data in header buffer in begin_cmd()
  btrfs: handle invalid root reference found in may_destroy_subvol()
  btrfs: change BUG_ON to assertion when checking for delayed_node root
  powerpc/boot: Only free if realloc() succeeds
  powerpc/boot: Handle allocation failure in simple_realloc()
  parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
  memory: stm32-fmc2-ebi: check regmap_read return value
  x86: Increase brk randomness entropy for 64-bit systems
  md: clean up invalid BUG_ON in md_ioctl
  netlink: hold nlk->cb_mutex longer in __netlink_dump_start()
  clocksource/drivers/arm_global_timer: Guard against division by zero
  virtiofs: forbid newlines in tags
  drm/lima: set gp bus_stop bit before hard reset
  net/sun3_82586: Avoid reading past buffer in debug output
  media: drivers/media/dvb-core: copy user arrays safely
  scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
  fs: binfmt_elf_efpic: don't use missing interpreter's properties
  media: pci: cx23885: check cx23885_vdev_init() return
  quota: Remove BUG_ON from dqget()
  fuse: fix UAF in rcu pathwalks
  afs: fix __afs_break_callback() / afs_drop_open_mmap() race
  ext4: do not trim the group with corrupted block bitmap
  nvmet-trace: avoid dereferencing pointer too early
  powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu
  memory: tegra: Skip SID programming if SID registers aren't set
  arm64: Fix KASAN random tag seed initialization
  hwmon: (ltc2992) Avoid division by zero
  IB/hfi1: Fix potential deadlock on &irq_src_lock and &dd->uctxt_lock
  wifi: iwlwifi: fw: Fix debugfs command sending
  wifi: iwlwifi: abort scan when rfkill on but device enabled
  gfs2: setattr_chown: Add missing initialization
  scsi: spi: Fix sshdr use
  media: qcom: venus: fix incorrect return value
  binfmt_misc: cleanup on filesystem umount
  staging: ks7010: disable bh on tx_dev_lock
  drm/amd/display: Validate hw_points_num before using it
  staging: iio: resolver: ad2s1210: fix use before initialization
  media: radio-isa: use dev_name to fill in bus_info
  i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer
  i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out
  s390/smp,mcck: fix early IPI handling
  RDMA/rtrs: Fix the problem of variable not initialized fully
  i2c: riic: avoid potential division by zero
  wifi: cw1200: Avoid processing an invalid TIM IE
  wifi: mac80211: fix BA session teardown race
  wifi: cfg80211: check wiphy mutex is held for wdev mutex
  ssb: Fix division by zero issue in ssb_calc_clock_rate
  ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
  net: hns3: fix a deadlock problem when config TC during resetting
  net: hns3: fix wrong use of semaphore up
  netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
  netfilter: flowtable: initialise extack before use
  netfilter: allow ipv6 fragments to arrive on different devices
  mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
  mlxbf_gige: disable RX filters until RX path initialized
  mlxbf_gige: Remove two unused function declarations
  net: dsa: vsc73xx: check busy flag in MDIO operations
  net: dsa: vsc73xx: use read_poll_timeout instead delay loop
  net: dsa: vsc73xx: pass value in phy_write operation
  net: axienet: Fix register defines comment description
  atm: idt77252: prevent use after free in dequeue_rx()
  net/mlx5e: Correctly report errors for ethtool rx flows
  igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer
  igc: remove I226 Qbv BaseTime restriction
  igc: Correct the launchtime offset
  s390/uv: Panic for set and remove shared access UVC errors
  drm/amdgpu/jpeg2: properly set atomics vmid field
  memcg_write_event_control(): fix a user-triggerable oops
  drm/amdgpu: Actually check flags for all context ops.
  btrfs: tree-checker: add dev extent item checks
  selinux: fix potential counting error in avc_add_xperms_decision()
  fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
  bitmap: introduce generic optimized bitmap_size()
  btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits()
  s390/cio: rename bitmap_size() -> idset_bitmap_size()
  fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
  vfs: Don't evict inode under the inode lru traversing context
  dm persistent data: fix memory allocation failure
  dm resume: don't return EINVAL when signalled
  arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE
  s390/dasd: fix error recovery leading to data corruption on ESE devices
  thunderbolt: Mark XDomain as unplugged when router is removed
  xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
  ALSA: usb-audio: Support Yamaha P-125 quirk entry
  ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET
  char: xillybus: Check USB endpoints when probing device
  char: xillybus: Refine workqueue handling
  char: xillybus: Don't destroy workqueue from work item running on it
  fuse: Initialize beyond-EOF page contents before setting uptodate
  ANDROID: update .xml for change to struct clk_core
  Revert "bpf: Fix ringbuf memory type confusion when passing to helpers"
  Linux 5.15.165
  Revert "ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error"
  media: Revert "media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()"
  ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode
  wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
  binfmt_flat: Fix corruption when not offsetting data start
  usb: gadget: u_audio: Check return codes from usb_ep_enable and config_ep_by_speed.
  nvme/pci: Add APST quirk for Lenovo N60z laptop
  exec: Fix ToCToU between perm check and set-uid/gid usage
  arm64: cpufeature: Fix the visibility of compat hwcaps
  arm64: dts: qcom: msm8996: correct #clock-cells for QMP PHY nodes
  powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
  drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
  mptcp: fully established after ADD_ADDR echo on MPJ
  wifi: mac80211: check basic rates validity
  PCI: dwc: Restore MSI Receiver mask during resume
  net: stmmac: Enable mac_managed_pm phylink config
  netfilter: nf_tables: prefer nft_chain_validate
  netfilter: nf_tables: allow clone callbacks to sleep
  netfilter: nf_tables: bail out if stateful expression provides no .clone
  netfilter: nf_tables: use timestamp to check for set element timeout
  netfilter: nf_tables: set element extended ACK reporting support
  tls: fix race between tx work scheduling and socket close
  PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
  btrfs: fix double inode unlock for direct IO sync writes
  xfs: fix log recovery buffer allocation for the legacy h_size fixup
  btrfs: fix corruption after buffer fault in during direct IO append write
  selftests: mptcp: join: check backup support in signal endp
  selftests: mptcp: join: validate backup in MPJ
  mptcp: pm: fix backup support in signal endpoints
  mptcp: export local_address
  mptcp: pm: only set request_bkup flag when sending MP_PRIO
  mptcp: fix bad RCVPRUNED mib accounting
  mptcp: mib: count MPJ with backup flag
  mptcp: fix NL PM announced address accounting
  mptcp: distinguish rcv vs sent backup flag in requests
  mptcp: sched: check both directions for backup
  drm/mgag200: Set DDC timeout in milliseconds
  drm/bridge: analogix_dp: properly handle zero sized AUX transactions
  sched/smt: Fix unbalance sched_smt_present dec/inc
  sched/smt: Introduce sched_smt_present_inc/dec() helper
  x86/mtrr: Check if fixed MTRRs exist before saving them
  padata: Fix possible divide-by-0 panic in padata_mt_helper()
  tracing: Fix overflow in get_free_elt()
  power: supply: axp288_charger: Round constant_charge_voltage writes down
  power: supply: axp288_charger: Fix constant_charge_voltage writes
  genirq/irqdesc: Honor caller provided affinity in alloc_desc()
  irqchip/xilinx: Fix shift out of bounds
  kcov: properly check for softirq context
  serial: core: check uartclk for zero to avoid divide by zero
  timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex()
  ntp: Safeguard against time_constant overflow
  driver core: Fix uevent_show() vs driver detach race
  irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to 'raw_spinlock_t'
  irqchip/meson-gpio: support more than 8 channels gpio irq
  clocksource: Fix brown-bag boolean thinko in cs_watchdog_read()
  clocksource: Scale the watchdog read retries automatically
  torture: Enable clocksource watchdog with "tsc=watchdog"
  clocksource: Reduce the default clocksource_watchdog() retries to 2
  ntp: Clamp maxerror and esterror to operating range
  vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler
  tick/broadcast: Move per CPU pointer access into the atomic section
  scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic
  scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES
  usb: gadget: u_serial: Set start_delayed during suspend
  usb: gadget: core: Check for unset descriptor
  USB: serial: debug: do not echo input by default
  usb: vhci-hcd: Do not drop references before new references are gained
  ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4
  ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list
  ALSA: line6: Fix racy access to midibuf
  drm/client: fix null pointer dereference in drm_client_modeset_probe
  ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT
  ALSA: usb-audio: Re-add ScratchAmp quirk entries
  spi: spi-fsl-lpspi: Fix scldiv calculation
  kprobes: Fix to check symbol prefixes correctly
  bpf: kprobe: remove unused declaring of bpf_kprobe_override
  i2c: smbus: Send alert notifications to all devices if source not found
  spi: spidev: Add missing spi_device_id for bh2228fv
  ASoC: codecs: wsa881x: Correct Soundwire ports mask
  ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask
  i2c: smbus: Improve handling of stuck alerts
  arm64: errata: Expand speculative SSBS workaround (again)
  arm64: cputype: Add Cortex-A725 definitions
  arm64: cputype: Add Cortex-X1C definitions
  arm64: errata: Expand speculative SSBS workaround
  arm64: errata: Unify speculative SSBS errata logic
  arm64: cputype: Add Cortex-X925 definitions
  arm64: cputype: Add Cortex-A720 definitions
  arm64: cputype: Add Cortex-X3 definitions
  arm64: errata: Add workaround for Arm errata 3194386 and 3312417
  arm64: cputype: Add Neoverse-V3 definitions
  arm64: cputype: Add Cortex-X4 definitions
  arm64: barrier: Restore spec_bar() macro
  arm64: Add Neoverse-V2 part
  arm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-space
  ext4: fix wrong unit use in ext4_mb_find_by_goal
  sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
  scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
  profiling: remove profile=sleep support
  SUNRPC: Fix a race to wake a sync task
  s390/sclp: Prevent release of buffer in I/O
  jbd2: avoid memleak in jbd2_journal_write_metadata_buffer
  ext4: fix uninitialized variable in ext4_inlinedir_to_tree
  media: uvcvideo: Fix the bandwdith quirk on USB 3.x
  media: uvcvideo: Ignore empty TS packets
  drm/amd/display: Add null checker before passing variables
  drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
  drm/amdgpu: Fix the null pointer dereference to ras_manager
  drm/amdgpu/pm: Fix the null pointer dereference for smu7
  btrfs: fix bitmap leak when loading free space cache on duplicate entry
  wifi: nl80211: don't give key data to userspace
  udf: prevent integer overflow in udf_bitmap_free_blocks()
  PCI: Add Edimax Vendor ID to pci_ids.h
  selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT
  ACPI: SBS: manage alarm sysfs attribute through psy core
  ACPI: battery: create alarm sysfs attribute atomically
  clocksource/drivers/sh_cmt: Address race condition for clock events
  md/raid5: avoid BUG_ON() while continue reshape after reassembling
  md: do not delete safemode_timer in mddev_suspend
  rcutorture: Fix rcu_torture_fwd_cb_cr() data race
  net: fec: Stop PPS on driver remove
  l2tp: fix lockdep splat
  net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
  Bluetooth: l2cap: always unlock channel in l2cap_conless_channel()
  net: linkwatch: use system_unbound_wq
  net: bridge: mcast: wait for previous gc cycles when removing port
  net: usb: qmi_wwan: fix memory leak for not ip packets
  sctp: Fix null-ptr-deref in reuseport_add_sock().
  sctp: move hlist_node and hashent out of sctp_ep_common
  x86/mm: Fix pti_clone_entry_text() for i386
  x86/mm: Fix pti_clone_pgtable() alignment assumption
  irqchip/mbigen: Fix mbigen node address layout
  genirq: Allow irq_chip registration functions to take a const irq_chip
  netfilter: ipset: Add list flush to cancel_gc
  mptcp: fix duplicate data handling
  r8169: don't increment tx_dropped in case of NETDEV_TX_BUSY
  net: usb: sr9700: fix uninitialized variable use in sr_mdio_read
  drm/vmwgfx: Fix a deadlock in dma buf fence polling
  Revert "ALSA: firewire-lib: operate for period elapse event in process context"
  Revert "ALSA: firewire-lib: obsolete workqueue for period update"
  ALSA: hda/realtek: Add quirk for Acer Aspire E5-574G
  ALSA: usb-audio: Correct surround channels in UAC1 channel map
  protect the fetch of ->fd[fd] in do_dup2() from mispredictions
  HID: wacom: Modify pen IDs
  platform/chrome: cros_ec_proto: Lock device when updating MKBP version
  power: supply: bq24190_charger: replace deprecated strncpy with strscpy
  riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
  ipv6: fix ndisc_is_useropt() handling for PIO
  net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys
  netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init().
  netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init().
  net: mvpp2: Don't re-use loop iterator
  net/iucv: fix use after free in iucv_sock_close()
  rtnetlink: Don't ignore IFLA_TARGET_NETNSID when ifname is specified in rtnl_dellink().
  rtnetlink: enable alt_ifname for setlink/newlink
  ALSA: hda: conexant: Fix headset auto detect fail in the polling mode
  sched: act_ct: take care of padding in struct zones_ht_key
  drm/vmwgfx: Fix overlay when using Screen Targets
  drm/nouveau: prime: fix refcount underflow
  MIPS: dts: loongson: Fix ls2k1000-rtc interrupt
  MIPS: dts: loongson: Fix liointc IRQ polarity
  MIPS: Loongson64: DTS: Fix PCIe port nodes for ls7a
  MIPS: Loongson64: DTS: Add RTC support to Loongson-2K1000
  remoteproc: imx_rproc: Fix refcount mistake in imx_rproc_addr_init
  drm/dp_mst: Fix all mstb marked as not probed after suspend/resume
  irqchip/imx-irqsteer: Handle runtime power management correctly
  irqchip/imx-irqsteer: Add runtime PM support
  irqchip/imx-irqsteer: Constify irq_chip struct
  genirq: Allow the PM device to originate from irq domain
  irqdomain: Fixed unbalanced fwnode get and put
  leds: triggers: Flush pending brightness before activating trigger
  leds: trigger: Call synchronize_rcu() before calling trig->activate()
  leds: trigger: Store brightness set by led_trigger_event()
  leds: trigger: Remove unused function led_trigger_rename_static()
  leds: trigger: use RCU to protect the led_cdevs list
  drivers: soc: xilinx: check return status of get_api_version()
  soc: xilinx: move PM_INIT_FINALIZE to zynqmp_pm_domains driver
  ext4: check the extent status again before inserting delalloc block
  ext4: factor out a common helper to query extent map
  ext4: convert to exclusive lock while inserting delalloc extents
  ext4: refactor ext4_da_map_blocks()
  ext4: make ext4_es_insert_extent() return void
  sysctl: always initialize i_uid/i_gid
  arm64: dts: qcom: ipq8074: Disable SS instance in Parkmode for USB
  arm64: dts: qcom: msm8998: Disable SS instance in Parkmode for USB
  arm64: dts: qcom: msm8998: switch USB QMP PHY to new style of bindings
  arm64: dts: qcom: msm8998: drop USB PHY clock index
  arm64: dts: qcom: msm8996: Move '#clock-cells' to QMP PHY child node
  powerpc/configs: Update defconfig with now user-visible CONFIG_FSL_IFC
  fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT
  nvme-pci: add missing condition check for existence of mapped data
  nvme: separate command prep and issue
  nvme: split command copy into a helper
  iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en
  ceph: fix incorrect kmalloc size of pagevec mempool
  ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable
  spi: spidev: add correct compatible for Rohm BH2228FV
  spi: spidev: order compatibles alphabetically
  spidev: Add Silicon Labs EM3581 device compatible
  spi: spidev: Replace OF specific code by device property API
  spi: spidev: Replace ACPI specific code by device_get_match_data()
  spi: spidev: Make probe to fail early if a spidev compatible is used
  lirc: rc_dev_get_from_fd(): fix file leak
  powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap()
  apparmor: Fix null pointer deref when receiving skb during sock creation
  mISDN: Fix a use after free in hfcmulti_tx()
  bpf: Fix a segment issue when downgrading gso_size
  net: nexthop: Initialize all fields in dumped nexthops
  net: stmmac: Correct byte order of perfect_match
  tipc: Return non-zero value from tipc_udp_addr2str() on error
  netfilter: nft_set_pipapo_avx2: disable softinterrupts
  net: bonding: correctly annotate RCU in bond_should_notify_peers()
  ipv4: Fix incorrect source address in Record Route option
  MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later
  bpf, events: Use prog to emit ksymbol event for main program
  dma: fix call order in dmam_free_coherent
  libbpf: Fix no-args func prototype BTF dumping syntax
  um: time-travel: fix signal blocking race/hang
  um: time-travel: fix time-travel-start option
  phy: cadence-torrent: Check return value on register read
  dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels
  jfs: Fix array-index-out-of-bounds in diFree
  kdb: Use the passed prompt in kdb_position_cursor()
  kdb: address -Wformat-security warnings
  kernel: rerun task_work while freezing in get_signal()
  io_uring/io-wq: limit retrying worker initialisation
  nilfs2: handle inconsistent state in nilfs_btnode_create_block()
  Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591
  Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables
  rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings
  rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait
  drm/panfrost: Mark simple_ondemand governor as softdep
  MIPS: Loongson64: Test register availability before use
  MIPS: Loongson64: reset: Prioritise firmware service
  MIPS: Loongson64: Remove memory node for builtin-dtb
  MIPS: Loongson64: env: Hook up Loongsson-2K
  MIPS: dts: loongson: Fix GMAC phy node
  MIPS: ip30: ip30-console: Add missing include
  remoteproc: imx_rproc: Skip over memory region when node value is NULL
  remoteproc: stm32_rproc: Fix mailbox interrupts queuing
  rbd: don't assume rbd_is_lock_owner() for exclusive mappings
  selftests/sigaltstack: Fix ppc64 GCC build
  RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
  platform: mips: cpu_hwmon: Disable driver on unsupported hardware
  watchdog/perf: properly initialize the turbo mode timestamp and rearm counter
  rtc: isl1208: Fix return value of nvmem callbacks
  perf: Fix event leak upon exec and file release
  drm/i915/dp: Reset intel_dp->link_trained before retraining the link
  drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell
  drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8
  perf/x86/intel/pt: Fix a topa_entry base address calculation
  perf/x86/intel/pt: Fix topa_entry base length
  perf/x86/intel/uncore: Fix the bits of the CHA extended umask for SPR
  perf: Fix event leak upon exit
  scsi: qla2xxx: validate nvme_local_port correctly
  scsi: qla2xxx: Complete command early within lock
  scsi: qla2xxx: Fix flash read failure
  scsi: qla2xxx: Use QP lock to search for bsg
  scsi: qla2xxx: Fix for possible memory corruption
  scsi: qla2xxx: Unable to act on RSCN for port online
  scsi: qla2xxx: During vport delete send async logout explicitly
  rtc: cmos: Fix return value of nvmem callbacks
  mm/numa_balancing: teach mpol_to_str about the balancing mode
  devres: Fix memory leakage caused by driver API devm_free_percpu()
  devres: Fix devm_krealloc() wasting memory
  gve: Fix an edge case for TSO skb validity check
  kobject_uevent: Fix OOB access within zap_modalias_env()
  kbuild: Fix '-S -c' in x86 stack protector scripts
  decompress_bunzip2: fix rare decompression failure
  ubi: eba: properly rollback inside self_check_eba
  clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use
  scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds
  fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed
  dev/parport: fix the array out-of-bounds risk
  binder: fix hang of unregistered readers
  PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio
  PCI: dw-rockchip: Fix initial PERST# GPIO value
  PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN
  hwrng: amd - Convert PCIBIOS_* return codes to errnos
  tools/memory-model: Fix bug in lock.cat
  ALSA: usb-audio: Add a quirk for Sonix HD USB Camera
  ALSA: usb-audio: Move HD Webcam quirk to the right place
  ALSA: usb-audio: Fix microphone sound on HD webcam.
  KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked()
  media: uvcvideo: Fix integer overflow calculating timestamp
  jbd2: make jbd2_journal_get_max_txn_bufs() internal
  leds: ss4200: Convert PCIBIOS_* return codes to errnos
  wifi: mwifiex: Fix interface type change
  selftests/landlock: Add cred_transfer test
  io_uring: tighten task exit cancellations
  ext4: make sure the first directory block is not a hole
  ext4: check dot and dotdot of dx_root before making dir indexed
  m68k: amiga: Turn off Warp1260 interrupts during boot
  udf: Avoid using corrupted block bitmap buffer
  task_work: Introduce task_work_cancel() again
  task_work: s/task_work_cancel()/task_work_cancel_func()/
  apparmor: use kvfree_sensitive to free data->data
  sched/fair: Use all little CPUs for CPU-bound workloads
  drm/amd/display: Check for NULL pointer
  scsi: qla2xxx: Fix optrom version displayed in FDMI
  drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
  drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
  ext2: Verify bitmap and itable block numbers before using them
  hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
  ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error
  media: venus: fix use after free in vdec_close
  char: tpm: Fix possible memory leak in tpm_bios_measurements_open()
  fuse: verify {g,u}id mount options correctly
  sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE tasks
  ipv6: take care of scope when choosing the src addr
  af_packet: Handle outgoing VLAN packets without hardware offloading
  net: netconsole: Disable target before netpoll cleanup
  tick/broadcast: Make takeover of broadcast hrtimer reliable
  dt-bindings: thermal: correct thermal zone node name limit
  mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
  mm/hugetlb: fix possible recursive locking detected warning
  landlock: Don't lose track of restrictions on cred_transfer
  fs/ntfs3: Missed error return
  rtc: interface: Add RTC offset to alarm after fix-up
  nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro
  fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
  fs/ntfs3: Fix field-spanning write in INDEX_HDR
  fs/ntfs3: Replace inode_trylock with inode_lock
  pinctrl: freescale: mxs: Fix refcount of child
  pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails
  pinctrl: ti: ti-iodelay: Drop if block with always false condition
  pinctrl: single: fix possible memory leak when pinctrl_enable() fails
  pinctrl: core: fix possible memory leak when pinctrl_enable() fails
  pinctrl: rockchip: update rk3308 iomux routes
  fs/ntfs3: Fix getting file type
  fs/ntfs3: Missed NI_FLAG_UPDATE_PARENT setting
  fs/ntfs3: Fix transform resident to nonresident for compressed files
  fs/ntfs3: Merge synonym COMPRESSION_UNIT and NTFS_LZNT_CUNIT
  fs/ntfs3: Use ALIGN kernel macro
  net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports
  net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports
  netfilter: nf_set_pipapo: fix initial map fill
  netfilter: nft_set_pipapo: constify lookup fn args where possible
  netfilter: ctnetlink: use helper function to calculate expect ID
  bnxt_re: Fix imm_data endianness
  RDMA/hns: Fix insufficient extend DB for VFs.
  RDMA/hns: Fix undifined behavior caused by invalid max_sge
  RDMA/hns: Fix missing pagesize and alignment check in FRMR
  macintosh/therm_windtunnel: fix module unload.
  powerpc/xmon: Fix disassembly CPU feature checks
  MIPS: Octeron: remove source file executable bit
  net: missing check virtio
  vhost/vsock: always initialize seqpacket_allow
  PCI: endpoint: Clean up error handling in vpci_scan_bus()
  Input: elan_i2c - do not leave interrupt disabled on suspend failure
  RDMA/device: Return error earlier if port in not valid
  mtd: make mtd_test.c a separate module
  ASoC: max98088: Check for clk_prepare_enable() error
  RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs
  RDMA/mlx4: Fix truncated output warning in alias_GUID.c
  RDMA/mlx4: Fix truncated output warning in mad.c
  Input: qt1050 - handle CHIP_ID reading error
  RDMA/cache: Release GID table even if leak is detected
  RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE
  coresight: Fix ref leak when of_coresight_parse_endpoint() fails
  clk: qcom: gcc-sc7280: Update force mem core bit for UFS ICE clock
  clk: qcom: branch: Add helper functions for setting retain bits
  PCI: Fix resource double counting on remove & rescan
  SUNRPC: Fixup gss_status tracepoint error output
  sparc64: Fix incorrect function signature and add prototype for prom_cif_init
  ext4: avoid writing unitialized memory to disk in EA inodes
  ext4: don't track ranges in fast_commit if inode has inlined data
  ext4: return early for non-eligible fast_commit track events
  NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server
  SUNRPC: avoid soft lockup when transmitting UDP to reachable server.
  xprtrdma: Fix rpcrdma_reqs_reset()
  mfd: omap-usb-tll: Use struct_size to allocate tll
  mfd: rsmu: Split core code into separate module
  perf intel-pt: Fix exclude_guest setting
  perf intel-pt: Fix aux_watermark calculation for 64-bit size
  media: venus: flush all buffers in output plane streamoff
  ext4: fix infinite loop when replaying fast_commit
  Revert "leds: led-core: Fix refcount leak in of_led_get()"
  drm/qxl: Add check for drm_cvt_mode
  drm/etnaviv: fix DMA direction handling for cached RW buffers
  perf report: Fix condition in sort__sym_cmp()
  leds: trigger: Unregister sysfs attributes before calling deactivate()
  drm/mediatek: Add DRM_MODE_ROTATE_0 to rotation property
  drm/mediatek: Add missing plane settings when async update
  media: renesas: vsp1: Store RPF partition configuration per RPF instance
  media: renesas: vsp1: Fix _irqsave and _irq mix
  media: uvcvideo: Override default flags
  saa7134: Unchecked i2c_transfer function result fixed
  media: i2c: Fix imx412 exposure control
  media: imon: Fix race getting ictx->lock
  media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()
  drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare()
  drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators
  drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit
  drm/amd/pm: Fix aldebaran pcie speed reporting
  xdp: fix invalid wait context of page_pool_destroy()
  selftests: forwarding: devlink_lib: Wait for udev events after reloading
  bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o
  bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
  bpf: annotate BTF show functions with __printf
  selftests/bpf: Close fd in error path in drop_on_reuseport
  locking/rwsem: Add __always_inline annotation to __down_write_common() and inlined callers
  perf: Fix default aux_watermark calculation
  wifi: virt_wifi: don't use strlen() in const context
  perf: Prevent passing zero nr_pages to rb_alloc_aux()
  gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey
  perf: Fix perf_aux_size() for greater-than 32-bit size
  wifi: virt_wifi: avoid reporting connection success with wrong SSID
  perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation
  netfilter: nf_tables: rise cap on SELinux secmark context
  ipvs: Avoid unnecessary calls to skb_is_gso_sctp
  libbpf: Checking the btf_type kind when fixing variable offsets
  net: fec: Fix FEC_ECR_EN1588 being cleared on link-down
  net: fec: Refactor: #define magic constants
  wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he()
  wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he()
  wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers
  mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors
  mlxsw: spectrum_acl_bloom_filter: Make mlxsw_sp_acl_bf_key_encode() more flexible
  mlxsw: spectrum_acl_erp: Fix object nesting warning
  lib: objagg: Fix general protection fault
  selftests/bpf: Check length of recv in test_sockmap
  net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined
  tcp: fix races in tcp_v[46]_err()
  tcp: fix race in tcp_write_err()
  tcp: add tcp_done_with_error() helper
  tcp: annotate lockless access to sk->sk_err
  tcp: annotate lockless accesses to sk->sk_err_soft
  net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP
  selftests/bpf: Fix prog numbers in test_sockmap
  wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device
  firmware: turris-mox-rwtm: Initialize completion before mailbox
  firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout()
  firmware: turris-mox-rwtm: Do not complete if there are no waiters
  vmlinux.lds.h: catch .bss..L* sections into BSS")
  ARM: spitz: fix GPIO assignment for backlight
  ARM: pxa: spitz: use gpio descriptors for audio
  m68k: cmpxchg: Fix return value for default case in __arch_xchg()
  x86/xen: Convert comma to semicolon
  m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages
  arm64: dts: amlogic: gx: correct hdmi clocks
  arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add ports node for anx7625
  arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux
  arm64: dts: mediatek: mt8183-kukui: Drop bogus output-enable property
  ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity
  ARM: dts: imx6qdl-kontron-samx6i: fix SPI0 chip selects
  ARM: dts: imx6qdl-kontron-samx6i: fix board reset
  ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset
  ARM: dts: imx6qdl-kontron-samx6i: move phy reset into phy-node
  arm64: dts: rockchip: Increase VOP clk rate on RK3328
  soc: qcom: pdr: fix parsing of domains lists
  soc: qcom: pdr: protect locator_addr with the main mutex
  memory: fsl_ifc: Make FSL_IFC config visible and selectable
  arm64: dts: qcom: msm8996: specify UFS core_clk frequencies
  soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data() callers
  arm64: dts: qcom: sm8250: add power-domain to UFS PHY
  arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings
  arm64: dts: qcom: sdm845: add power-domain to UFS PHY
  hwmon: (max6697) Fix swapped temp{1,8} critical alarms
  hwmon: (max6697) Fix underflow when writing limit attributes
  drm/meson: fix canvas release in bind function
  pwm: stm32: Always do lazy disabling
  hwmon: (adt7475) Fix default duty on fan is disabled
  x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos
  x86/pci/xen: Fix PCIBIOS_* return code handling
  x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling
  x86/of: Return consistent error type from x86_of_pci_irq_enable()
  hfsplus: fix to avoid false alarm of circular locking
  block: initialize integrity buffer to zero before writing it to media
  block: cleanup bio_integrity_prep
  block: refactor to use helper
  platform/chrome: cros_ec_debugfs: fix wrong EC message version
  EDAC, i10nm: make skx_common.o a separate module
  f2fs: fix to don't dirty inode for readonly filesystem
  f2fs: fix return value of f2fs_convert_inline_inode()
  Revert "scsi: usb: Call scsi_done() directly"
  Revert "USB: UAS: return ENODEV when submit urbs fail with device not attached"
  Revert "Merge ccd9fe71 ("nfsd: Fix a regression in nfsd_setattr()") into android13-5.15-lts"
  ANDROID: fix up merge error in kasan_test.c
  Revert "timers: Rename del_timer_sync() to timer_delete_sync()"
  Revert "dma-mapping: add dma_opt_mapping_size()"
  Revert "dma-iommu: add iommu_dma_opt_mapping_size()"
  Revert "iommu/dma: Force swiotlb_max_mapping_size on an untrusted device"
  Revert "PCI: Work around Intel I210 ROM BAR overlap defect"
  Revert "PCI/ASPM: Make Intel DG2 L1 acceptable latency unlimited"
  Revert "PCI/DPC: Quirk PIO log size for certain Intel Root Ports"
  Revert "PCI/DPC: Quirk PIO log size for Intel Raptor Lake Root Ports"
  Revert "tracing: Use .flush() call to wake up readers"
  Linux 5.15.164
  tap: add missing verification for short frame
  tun: add missing verification for short frame
  wifi: rt2x00: use explicitly signed or unsigned types
  filelock: Fix fcntl/close race recovery compat path
  ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused
  arm64: dts: qcom: sdm630: Disable SS instance in Parkmode for USB
  arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB
  ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360
  ALSA: hda/realtek: Enable headset mic on Positivo SU C1400
  fs/ntfs3: Validate ff offset
  jfs: don't walk off the end of ealist
  ocfs2: add bounds checking to ocfs2_check_dir_entry()
  net: relax socket state check at accept time.
  Add gitignore file for samples/fanotify/ subdirectory
  docs: Fix formatting of literal sections in fanotify docs
  samples: Make fs-monitor depend on libc and headers
  samples: Add fs error monitoring example
  drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
  wifi: mac80211: disable softirqs for queued frame handling
  mm/damon/core: merge regions aggressively when max_nr_regions is unmet
  minmax: relax check to allow comparison between unsigned arguments and signed constants
  minmax: allow comparisons of 'int' against 'unsigned char/short'
  minmax: allow min()/max()/clamp() if the arguments have the same signedness.
  minmax: fix header inclusions
  minmax: clamp more efficiently by avoiding extra comparison
  minmax: sanity check constant bounds when clamping
  tracing: Define the is_signed_type() macro once
  spi: mux: set ctlr->bits_per_word_mask
  hfsplus: fix uninit-value in copy_name
  selftests/vDSO: fix clang build errors and warnings
  spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices
  riscv: stacktrace: fix usage of ftrace_graph_ret_addr()
  fs: better handle deep ancestor chains in is_subdir()
  drm/radeon: check bo_va->bo is non-NULL before using it
  Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
  scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed
  powerpc/eeh: avoid possible crash when edev->pdev changes
  powerpc/pseries: Whitelist dtl slub object for copying to userspace
  net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD()
  net: usb: qmi_wwan: add Telit FN912 compositions
  ALSA: dmaengine_pcm: terminate dmaengine before synchronize
  ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx
  btrfs: qgroup: fix quota root leak after quota disable failure
  platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB
  platform/x86: lg-laptop: Change ACPI device id
  platform/x86: lg-laptop: Remove LGEX0815 hotkey handling
  platform/x86: wireless-hotkey: Add support for LG Airplane Button
  s390/sclp: Fix sclp_init() cleanup on failure
  can: kvaser_usb: fix return value for hif_usb_send_regout
  ASoC: ti: omap-hdmi: Fix too long driver name
  ASoC: ti: davinci-mcasp: Set min period size using FIFO config
  ALSA: dmaengine: Synchronize dma channel after drop()
  bytcr_rt5640 : inverse jack detect for Archos 101 cesium
  Input: i8042 - add Ayaneo Kun to i8042 quirk table
  Input: elantech - fix touchpad state on resume for Lenovo N24
  mips: fix compat_sys_lseek syscall
  ALSA: hda/realtek: Add more codec ID to no shutup pins list
  drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency
  KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
  wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
  nvme: avoid double free special payload
  mei: demote client disconnect warning on suspend to debug
  fs/file: fix the check in find_next_fd()
  kconfig: remove wrong expr_trans_bool()
  kconfig: gconf: give a proper initial state to the Save button
  null_blk: fix validation of block size
  arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
  ila: block BH in ila_output()
  net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input()
  Input: silead - Always support 10 fingers
  selftests/openat2: Fix build warnings on ppc64
  wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan()
  wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option
  wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd
  wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup
  wifi: mac80211: handle tasklet frames before stopping
  wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata
  tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
  ACPI: EC: Avoid returning AE_OK on errors in address space handler
  ACPI: EC: Abort address space access upon error
  scsi: qedf: Set qed_slowpath_params to zero before use
  scsi: qedf: Wait for stag work during unload
  scsi: qedf: Don't process stag work during unload and recovery
  scsi: core: alua: I/O errors for ALUA state transitions
  scsi: core: Fix a use-after-free
  bpf: Fix overrunning reservations in ringbuf
  ACPI: processor_idle: Fix invalid comparison with insertion sort for latency
  ARM: 9324/1: fix get_user() broken with veneer
  filelock: Remove locks reliably when fcntl/close race is detected
  gcc-plugins: Rename last_stmt() for GCC 14+
  Linux 5.15.163
  i2c: rcar: fix error code in probe()
  kbuild: Make ld-version.sh more robust against version string changes
  x86/bhi: Avoid warning in #DB handler due to BHI mitigation
  x86/entry/64: Remove obsolete comment on tracing vs. SYSRET
  i2c: rcar: clear NO_RXDMA flag after resetting
  i2c: testunit: avoid re-issued work after read message
  i2c: rcar: ensure Gen3+ reset does not disturb local targets
  i2c: rcar: introduce Gen4 devices
  i2c: rcar: reset controller is mandatory for Gen3+
  i2c: rcar: Add R-Car Gen4 support
  i2c: mark HostNotify target address as used
  i2c: rcar: bring hardware to known state when probing
  nilfs2: fix kernel bug on rename operation of broken directory
  bpf: Allow reads from uninit stack
  ipv6: prevent NULL dereference in ip6_output()
  ipv6: annotate data-races around cnf.disable_ipv6
  wireguard: send: annotate intentional data race in checking empty queue
  wireguard: queueing: annotate intentional data race in cpu round robin
  wireguard: allowedips: avoid unaligned 64-bit memory accesses
  libceph: fix race between delayed_work() and ceph_monc_stop()
  Fix userfaultfd_api to return EINVAL as expected
  ALSA: hda/realtek: Limit mic boost on VAIO PRO PX
  ALSA: hda/realtek: Enable Mute LED on HP 250 G7
  ALSA: hda/realtek: add quirk for Clevo V5[46]0TU
  nvmem: core: only change name to fram for current attribute
  nvmem: meson-efuse: Fix return value of nvmem callbacks
  nvmem: rmem: Fix return value of rmem_read()
  hpet: Support 32-bit userspace
  USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor
  usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
  USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k
  USB: serial: mos7840: fix crash on resume
  USB: serial: option: add Rolling RW350-GL variants
  USB: serial: option: add Netprisma LCUK54 series modules
  USB: serial: option: add support for Foxconn T99W651
  USB: serial: option: add Fibocom FM350-GL
  USB: serial: option: add Telit FN912 rmnet compositions
  USB: serial: option: add Telit generic core-dump composition
  net: ks8851: Fix potential TX stall after interface reopen
  tcp: avoid too many retransmit packets
  tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
  octeontx2-af: fix issue with IPv4 match for RSS
  octeontx2-af: fix issue with IPv6 ext match for RSS
  octeontx2-af: extend RSS supported offload types
  octeontx2-af: fix detection of IP layer
  octeontx2-af: fix a issue with cpt_lf_alloc mailbox
  octeontx2-af: update cpt lf alloc mailbox
  octeontx2-af: replace cpt slot with lf id on reg write
  ARM: davinci: Convert comma to semicolon
  s390: Mark psw in __load_psw_mask() as __unitialized
  net/sched: Fix UAF when resolving a clash
  udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
  ethtool: netlink: do not return SQI value if link is down
  ppp: reject claimed-as-LCP but actually malformed packets
  net: ethernet: mtk-star-emac: set mac_managed_pm when probing
  net: ethernet: lantiq_etop: fix double free in detach
  net: lantiq_etop: add blank line after declaration
  i40e: Fix XDP program unloading while removing the driver
  net: fix rc7's __skb_datagram_iter()
  octeontx2-af: Fix incorrect value output on error path in rvu_check_rsrc_availability()
  skmsg: Skip zero length skb in sk_msg_recvmsg
  tcp: fix incorrect undo caused by DSACK of TLP retransmit
  vfs: don't mod negative dentry count when on shrinker list
  fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading
  filelock: fix potential use-after-free in posix_lock_inode
  mm: prevent derefencing NULL ptr in pfn_section_valid()
  nilfs2: fix incorrect inode allocation from reserved inodes
  null_blk: Do not allow runt zone with zone capacity smaller then zone size
  nfc/nci: Add the inconsistency check between the input data length and count
  kbuild: fix short log for AS in link-vmlinux.sh
  nvmet: fix a possible leak when destroy a ctrl during qp establishment
  platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro
  platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6" tablet
  regmap-i2c: Subtract reg size from max_write
  nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset
  dma-mapping: benchmark: avoid needless copy_to_user if benchmark fails
  nvme-multipath: find NUMA path only for online numa-node
  ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897
  fs/ntfs3: Mark volume as dirty if xattr is broken
  i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
  clk: qcom: gcc-sm6350: Fix gpll6* & gpll7 parents
  media: dw2102: fix a potential buffer overflow
  ima: Avoid blocking in RCU read-side critical section
  bnx2x: Fix multiple UBSAN array-index-out-of-bounds
  mtd: rawnand: rockchip: ensure NVDDR timings are rejected
  mtd: rawnand: Bypass a couple of sanity checks during NAND identification
  mtd: rawnand: Ensure ECC configuration is propagated to upper layers
  drm/amdgpu/atomfirmware: silence UBSAN warning
  drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
  Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
  fsnotify: Do not generate events for O_PATH file descriptors
  can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct
  Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
  btrfs: fix adding block group to a reclaim list and the unused list during reclaim
  mm: avoid overflows in dirty throttling logic
  mm: optimize the redundant loop of mm_update_owner_next()
  nilfs2: add missing check for inode numbers on directory entries
  nilfs2: fix inode number range checks
  Revert "igc: fix a log entry using uninitialized netdev"
  gpiolib: of: add polarity quirk for TSC2005
  gpiolib: of: add a quirk for reset line polarity for Himax LCDs
  gpiolib: of: factor out code overriding gpio line polarity
  inet_diag: Initialize pad field in struct inet_diag_req_v2
  selftests: make order checking verbose in msg_zerocopy selftest
  selftests: fix OOM in msg_zerocopy selftest
  bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
  netfilter: nf_tables: unconditionally flush pending work before notifier
  riscv: kexec: Avoid deadlock in kexec crash path
  wifi: wilc1000: fix ies_len type in connect path
  net: allow skb_datagram_iter to be called from any context
  e1000e: Fix S0ix residency on corporate systems
  KVM: s390: fix LPSWEY handling
  tcp_metrics: validate source addr length
  UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open()
  tools/power turbostat: Remember global max_die_id
  s390/pkey: Wipe sensitive data on failure
  jffs2: Fix potential illegal address access in jffs2_free_inode
  bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
  igc: fix a log entry using uninitialized netdev
  powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#"
  kunit: Fix timeout message
  orangefs: fix out-of-bounds fsid access
  powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n
  i2c: i801: Annotate apanel_addr as __ro_after_init
  media: dvb-frontends: tda10048: Fix integer overflow
  media: s2255: Use refcount_t instead of atomic_t for num_channels
  media: dvb-frontends: tda18271c2dd: Remove casting during div
  net: dsa: mv88e6xxx: Correct check for empty list
  wifi: mt76: replace skb_put with skb_put_zero
  Input: ff-core - prefer struct_size over open coded arithmetic
  firmware: dmi: Stop decoding on broken entry
  sctp: prefer struct_size over open coded arithmetic
  media: dw2102: Don't translate i2c read into write
  drm/amd/display: Skip finding free audio for unknown engine_id
  drm/amd/display: Check pipe offset before setting vblank
  drm/amd/display: Check index msg_id before read or write
  drm/amdgpu: Initialize timestamp for some legacy SOCs
  crypto: aead,cipher - zeroize key buffer after use
  scsi: qedf: Make qedf_execute_tmf() non-preemptible
  IB/core: Implement a limit on UMAD receive List
  media: dvb-usb: dib0700_devices: Add missing release_firmware()
  media: dvb: as102-fe: Fix as10x_register_addr packing
  drm/lima: fix shared irq handling on driver remove
  locking/mutex: Introduce devm_mutex_init()
  Compiler Attributes: Add __uninitialized macro
  Linux 5.15.162
  tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset()
  serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
  arm64: dts: rockchip: Add sound-dai-cells for RK3368
  arm64: dts: rockchip: fix PMIC interrupt pin on ROCK Pi E
  ARM: dts: rockchip: rk3066a: add #sound-dai-cells to hdmi node
  KVM: arm64: vgic-v4: Make the doorbell request robust w.r.t preemption
  efi/x86: Free EFI memory map only when installing a new one.
  efi: xen: Set EFI_PARAVIRT for Xen dom0 boot on all architectures
  efi: memmap: Move manipulation routines into x86 arch tree
  efi: Correct comment on efi_memmap_alloc
  drivers: fix typo in firmware/efi/memmap.c
  tcp: Fix data races around icsk->icsk_af_ops.
  ipv6: Fix data races around sk->sk_prot.
  ipv6: annotate some data-races around sk->sk_prot
  nfs: Leave pages in the pagecache if readpage failed
  pwm: stm32: Refuse too small period requests
  syscalls: fix sys_fanotify_mark prototype
  syscalls: fix compat_sys_io_pgetevents_time64 usage
  ftruncate: pass a signed offset
  ata: libata-core: Fix double free on error
  ata: ahci: Clean up sysfs file on error
  batman-adv: Don't accept TT entries for out-of-spec VIDs
  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
  drm/i915/gt: Fix potential UAF by revoke of fence registers
  drm/amdgpu: avoid using null object of framebuffer
  drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
  hexagon: fix fadvise64_64 calling conventions
  csky, hexagon: fix broken sys_sync_file_range
  sh: rework sync_file_range ABI
  kbuild: Install dtb files as 0644 in Makefile.dtbinst
  cpu/hotplug: Fix dynstate assignment in __cpuhp_setup_state_cpuslocked()
  net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
  net: can: j1939: recover socket queue on CAN bus error during BAM transmission
  net: can: j1939: Initialize unused data in j1939_send_one()
  tty: mcf: MCF54418 has 10 UARTS
  serial: 8250_omap: Implementation of Errata i2310
  usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock
  usb: atm: cxacru: fix endpoint checking in cxacru_bind()
  usb: musb: da8xx: fix a resource leak in probe()
  usb: gadget: printer: fix races against disable
  usb: gadget: printer: SS+ support
  net: usb: ax88179_178a: improve link status logs
  iio: chemical: bme680: Fix sensor data read operation
  iio: chemical: bme680: Fix overflows in compensate() functions
  iio: chemical: bme680: Fix calibration data variable
  iio: chemical: bme680: Fix pressure value output
  iio: accel: fxls8962af: select IIO_BUFFER & IIO_KFIFO_BUF
  iio: adc: ad7266: Fix variable checking bug
  i2c: testunit: discard write requests while old command is running
  i2c: testunit: don't erase registers after STOP
  mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro()
  mmc: sdhci: Do not invert write-protect twice
  mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos
  ocfs2: fix DIO failure due to insufficient transaction credits
  parisc: use generic sys_fanotify_mark implementation
  x86: stop playing stack games in profile_pc()
  gpiolib: cdev: Disallow reconfiguration without direction (uAPI v1)
  gpio: davinci: Validate the obtained number of IRQs
  drm/panel: simple: Add missing display timing flags for KOE TX26D202VM0BWA
  nvme: fixup comment for nvme RDMA Provider Type
  drm/radeon/radeon_display: Decrease the size of allocated memory
  soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message
  media: dvbdev: Initialize sbuf
  ALSA: emux: improve patch ioctl data validation
  crypto: ecdh - explicitly zeroize private_key
  net/dpaa2: Avoid explicit cpumask var allocation on stack
  net/iucv: Avoid explicit cpumask var allocation on stack
  RDMA/restrack: Fix potential invalid address access
  bpf: Add a check for struct bpf_fib_lookup size
  mtd: partitions: redboot: Added conversion of operands to a larger type
  x86/fpu: Fix AMD X86_BUG_FXSAVE_LEAK fixup
  vduse: Temporarily fail if control queue feature requested
  vduse: validate block features only with block devices
  drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
  bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
  netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
  tcp: fix tcp_rcv_fastopen_synack() to enter TCP_CA_Loss for failed TFO
  parisc: use correct compat recv/recvfrom syscalls
  sparc: fix compat recv/recvfrom syscalls
  sparc: fix old compat_sys_select()
  Fix race for duplicate reqsk on identical SYN
  tcp: Use BPF timeout setting for SYN ACK RTO
  xdp: Remove WARN() from __xdp_reg_mem_model()
  net: phy: micrel: add Microchip KSZ 9477 to the device table
  ibmvnic: Free any outstanding tx skbs during scrq reset
  net: dsa: microchip: fix initial port flush problem
  ASoC: fsl-asoc-card: set priv->pdev before using it
  net: stmmac: Assign configured channel value to EXTTS event
  net: mdio: add helpers to extract clause 45 regad and devad fields
  drm/amdgpu: fix UBSAN warning in kv_dpm.c
  cifs: fix typo in module parameter enable_gcm_256
  pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set
  pinctrl: rockchip: use dedicated pinctrl type for RK3328
  pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins
  pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins
  pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
  Input: ili210x - fix ili251x_read_touch_data() return value
  gve: Clear napi->skb before dev_kfree_skb_any()
  gve: Add RX context.
  ACPI: x86: Force StorageD3Enable on more products
  ACPI: x86: utils: Add Picasso to the list for forcing StorageD3Enable
  smb: client: fix deadlock in smb2_find_smb_tcon()
  x86/amd_nb: Check for invalid SMN reads
  PCI: Add PCI_ERROR_RESPONSE and related definitions
  perf/core: Fix missing wakeup when waiting for context reference
  riscv: fix overlap of allocated page and PTR_ERR
  riscv: mm: init: try best to use IS_ENABLED(CONFIG_64BIT) instead of #ifdef
  kheaders: explicitly define file modes for archived headers
  Revert "kheaders: substituting --sort in archive creation"
  drm/i915/gt: Disarm breadcrumbs if engines are already idle
  drm/i915/gt: Only kick the signal worker if there's been an update
  ksmbd: ignore trailing slashes in share paths
  x86/cpu: Fix x86_match_cpu() to match just X86_VENDOR_INTEL
  x86/cpu/vfm: Add new macros to work with (vendor/family/model) values
  tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test
  bcache: fix variable length array abuse in btree_iter
  pmdomain: ti-sci: Fix duplicate PD referrals
  wifi: rtlwifi: rtl8192de: Fix 5 GHz TX power
  rtlwifi: rtl8192de: Style clean-ups
  ARM: dts: samsung: smdk4412: fix keypad no-autorepeat
  ARM: dts: samsung: exynos4412-origen: fix keypad no-autorepeat
  ARM: dts: samsung: smdkv310: fix keypad no-autorepeat
  perf script: Show also errors for --insn-trace option
  perf: script: add raw|disasm arguments to --insn-trace option
  drm/amd/display: revert Exit idle optimizations before HDCP execution
  arm64: dts: imx8qm-mek: fix gpio number for reg_usdhc2_vmmc
  dt-bindings: i2c: google,cros-ec-i2c-tunnel: correct path to i2c-controller schema
  i2c: ocores: set IACK bit after core is enabled
  tcp: clear tp->retrans_stamp in tcp_rcv_fastopen_synack()
  kcov: don't lose track of remote references during softirqs
  gcov: add support for GCC 14
  drm/radeon: fix UBSAN warning in kv_dpm.c
  drm/i915/mso: using joiner is not possible with eDP MSO
  ALSA: hda/realtek: Limit mic boost on N14AP7
  KVM: x86: Always sync PIR to IRR prior to scanning I/O APIC routes
  btrfs: retry block group reclaim without infinite loop
  net: do not leave a dangling sk pointer, when socket creation fails
  serial: stm32: rework RX over DMA
  RDMA/mlx5: Add check for srq max_sge attribute
  ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
  regulator: bd71815: fix ramp values
  dmaengine: ioatdma: Fix missing kmem_cache_destroy()
  dmaengine: ioatdma: Fix kmemleak in ioat_pci_probe()
  dmaengine: ioatdma: Fix error path in ioat3_dma_probe()
  dmaengine: ioat: use PCI core macros for PCIe Capability
  dmaengine: ioatdma: Fix leaking on version mismatch
  dmaengine: ioat: Drop redundant pci_enable_pcie_error_reporting()
  dmaengine: ioat: switch from 'pci_' to 'dma_' API
  dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
  regulator: core: Fix modpost error "regulator_get_regmap" undefined
  net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings
  bnxt_en: Restore PTP tx_avail count in case of skb_pad() error
  seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors
  netfilter: ipset: Fix suspicious rcu_dereference_protected()
  octeontx2-pf: Add error handling to VLAN unoffload handling
  virtio_net: checksum offloading handling fix
  net: stmmac: No need to calculate speed divider when offload is disabled
  ptp: fix integer overflow in max_vclocks_store
  sched: act_ct: add netns into the key of tcf_ct_flow_table
  net/sched: act_ct: set 'net' pointer when creating new nf_flow_table
  tipc: force a dst refcount before doing decryption
  net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
  net/sched: act_api: rely on rcu in tcf_idr_check_alloc
  qca_spi: Make interrupt remembering atomic
  netns: Make get_net_ns() handle zero refcount net
  xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
  ipv6: prevent possible NULL dereference in rt6_probe()
  ipv6: prevent possible NULL deref in fib6_nh_init()
  netrom: Fix a memory leak in nr_heartbeat_expiry()
  cipso: fix total option length computation
  tracing: Build event generation tests only as modules
  mips: bmips: BCM6358: make sure CBR is correctly set
  MIPS: Routerboard 532: Fix vendor retry check code
  serial: exar: adding missing CTI and Exar PCI ids
  serial: imx: Introduce timeout when waiting on transmitter empty
  MIPS: Octeon: Add PCIe link status check
  PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports
  udf: udftime: prevent overflow in udf_disk_stamp_to_time()
  Avoid hw_desc array overrun in dw-axi-dmac
  usb: misc: uss720: check for incompatible versions of the Belkin F5U002
  f2fs: remove clear SB_INLINECRYPT flag in default_options
  iommu/arm-smmu-v3: Free MSIs in case of ENOMEM
  power: supply: cros_usbpd: provide ID table for avoiding fallback match
  powerpc/io: Avoid clang null pointer arithmetic warnings
  powerpc/pseries: Enforce hcall result buffer validity and size
  drm/lima: mask irqs in timeout path before hard reset
  drm/lima: add mask irq callback to gp and pp
  drm/amd/display: Exit idle optimizations before HDCP execution
  Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl
  ACPI: video: Add backlight=native quirk for Lenovo Slim 7 16ARH7
  HID: Add quirk for Logitech Casa touchpad
  netpoll: Fix race condition in netpoll_owner_active
  kselftest: arm64: Add a null pointer check
  scsi: qedi: Fix crash while reading debugfs attribute
  drop_monitor: replace spin_lock by raw_spin_lock
  af_packet: avoid a false positive warning in packet_setsockopt()
  wifi: ath9k: work around memset overflow warning
  batman-adv: bypass empty buckets in batadv_purge_orig_ref()
  selftests/bpf: Fix flaky test btf_map_in_map/lookup_update
  selftests/bpf: Prevent client connect before server bind in test_tc_tunnel.sh
  block/ioctl: prefer different overflow check
  rcutorture: Fix invalid context warning when enable srcu barrier testing
  rcutorture: Make stall-tasks directly exit when rcutorture tests end
  rcutorture: Fix rcu_torture_one_read() pipe_count overflow comment
  crypto: hisilicon/sec - Fix memory leak for sec resource release
  padata: Disable BH when taking works lock on MT path
  Bluetooth: qca: fix info leak when fetching board id
  Bluetooth: qca: Fix error code in qca_read_fw_build_info()
  zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
  i2c: designware: Fix the functionality flags of the slave-only interface
  i2c: at91: Fix the functionality flags of the slave-only interface
  usb-storage: alauda: Check whether the media is initialized
  greybus: Fix use-after-free bug in gb_interface_release due to race condition.
  kbuild: Remove support for Clang's ThinLTO caching
  mptcp: pm: update add_addr counters after connect
  mptcp: pm: inc RmAddr MIB counter once per RM_ADDR ID
  hugetlb_encode.h: fix undefined behaviour (34 << 26)
  serial: 8250_pxa: Configure tx_loadsz to match FIFO IRQ level
  mm/huge_memory: don't unpoison huge_zero_folio
  scsi: mpi3mr: Fix ATA NCQ priority support
  tick/nohz_full: Don't abuse smp_call_function_single() in tick_setup_device()
  nilfs2: fix potential kernel bug due to lack of writeback flag waiting
  intel_th: pci: Add Lunar Lake support
  intel_th: pci: Add Meteor Lake-S support
  intel_th: pci: Add Sapphire Rapids SOC support
  intel_th: pci: Add Granite Rapids SOC support
  intel_th: pci: Add Granite Rapids support
  dmaengine: axi-dmac: fix possible race in remove()
  PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id
  ocfs2: fix races between hole punching and AIO+DIO
  ocfs2: use coarse time for new created files
  fs/proc: fix softlockup in __read_vmcore
  knfsd: LOOKUP can return an illegal error value
  spmi: hisi-spmi-controller: Do not override device identifier
  vmci: prevent speculation leaks by sanitizing event in event_deliver()
  sock_map: avoid race between sock_map_close and sk_psock_put
  null_blk: Print correct max open zones limit in null_init_zoned_dev()
  tracing/selftests: Fix kprobe event name test for .isra. functions
  mptcp: ensure snd_una is properly initialized on connect
  drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found
  drm/exynos/vidi: fix memory leak in .get_modes()
  drivers: core: synchronize really_probe() and dev_uevent()
  iio: imu: inv_icm42600: delete unneeded update watermark call
  iio: dac: ad5592r: fix temperature channel scaling value
  iio: adc: ad9467: fix scan type sign
  af_unix: Read with MSG_PEEK loops if the first unread byte is OOB
  ionic: fix use after netif_napi_del()
  net/ipv6: Fix the RT cache flush via sysctl using a previous delay
  net: stmmac: replace priv->speed with the portTransmitRate from the tc-cbs parameters
  netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type
  Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ
  net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets
  tcp: fix race in tcp_v6_syn_recv_sock()
  drm/bridge/panel: Fix runtime warning on panel bridge release
  drm/komeda: check for error-valued pointer
  liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
  net: hns3: add cond_resched() to hns3 ring buffer init process
  net: hns3: fix kernel crash problem in concurrent scenario
  net: sfp: Always call `sfp_sm_mod_remove()` on remove
  drm/vmwgfx: 3D disabled should not effect STDU memory limits
  HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
  iommu: Return right value in iommu_sva_bind_device()
  iommu/amd: Fix sysfs leak in iommu init
  iommu/amd: Introduce pci segment structure
  HID: core: remove unnecessary WARN_ON() in implement()
  gpio: tqmx86: store IRQ trigger type and unmask status separately
  gpio: tqmx86: fix typo in Kconfig label
  platform/x86: dell-smbios: Fix wrong token data in sysfs
  platform/x86: dell-smbios-base: Use sysfs_emit()
  SUNRPC: return proper error from gss_wrap_req_priv
  clk: sifive: Do not register clkdevs for PRCI clocks
  Input: try trimming too long modalias strings
  powerpc/uaccess: Fix build errors seen with GCC 13/14
  scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
  xhci: Apply broken streams quirk to Etron EJ188 xHCI host
  xhci: Handle TD clearing for multiple streams case
  xhci: Apply reset resume quirk to Etron EJ188 xHCI host
  xhci: Set correct transferred length for cancelled bulk transfers
  jfs: xattr: fix buffer overflow for invalid xattr
  mei: me: release irq in mei_me_pci_resume error path
  usb: typec: tcpm: Ignore received Hard Reset in TOGGLING state
  USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
  nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
  nilfs2: return the mapped address from nilfs_get_page()
  nilfs2: Remove check for PageError
  btrfs: fix leak of qgroup extent records after transaction abort
  wifi: ath10k: fix QCOM_RPROC_COMMON dependency
  selftests/mm: compaction_test: fix bogus test success on Aarch64
  selftests/mm: conform test to TAP format output
  selftests/mm: compaction_test: fix incorrect write of zero to nr_hugepages
  mm/cma: drop incorrect alignment check in cma_init_reserved_mem
  cma: factor out minimum alignment requirement
  i2c: acpi: Unbind mux adapters before delete
  i2c: add fwnode APIs
  mmc: davinci: Don't strip remove function when driver is builtin
  mmc: davinci_mmc: Convert to platform remove callback returning void
  ftrace: Fix possible use-after-free issue in ftrace_location()
  x86/ibt,ftrace: Search for __fentry__ location
  serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler
  serial: sc16is7xx: replace hardcoded divisor value with BIT() macro
  Bluetooth: qca: fix info leak when fetching fw build id
  Bluetooth: qca: add support for QCA2066
  Bluetooth: qca: use switch case for soc type behavior
  Bluetooth: btqca: Add WCN3988 support
  Bluetooth: btqca: use le32_to_cpu for ver.soc_id
  Bluetooth: hci_qca: mark OF related data as maybe unused
  skbuff: introduce skb_pull_data
  misc/pvpanic-pci: register attributes via pci_driver
  misc/pvpanic: deduplicate common code
  pvpanic: Indentation fixes here and there
  pvpanic: Keep single style across modules
  drm/amd/display: Fix incorrect DSC instance for MST
  drm/amd/display: drop unnecessary NULL checks in debugfs
  drm/amd/display: Clean up some inconsistent indenting
  drm/amd/display: Handle Y carry-over in VCP X.Y calculation
  iio: accel: mxc4005: Reset chip on probe() and resume()
  usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
  usb: gadget: f_fs: use io_data->status consistently
  ipv6: fix possible race in __fib6_drop_pcpu_from()
  af_unix: Annotate data-race of sk->sk_shutdown in sk_diag_fill().
  af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen().
  af_unix: Use skb_queue_empty_lockless() in unix_release_sock().
  af_unix: annotate lockless accesses to sk->sk_err
  af_unix: Use unix_recvq_full_lockless() in unix_stream_connect().
  af_unix: Annotate data-race of net->unx.sysctl_max_dgram_qlen.
  af_unix: Annotate data-races around sk->sk_state in UNIX_DIAG.
  af_unix: Annotate data-race of sk->sk_state in unix_stream_read_skb().
  af_unix: Annotate data-races around sk->sk_state in sendmsg() and recvmsg().
  af_unix: Annotate data-race of sk->sk_state in unix_stream_connect().
  net: drop nopreempt requirement on sock_prot_inuse_add()
  net: inline sock_prot_inuse_add()
  af_unix: Annotate data-races around sk->sk_state in unix_write_space() and poll().
  af_unix: Annotate data-race of sk->sk_state in unix_inq_len().
  af_unix: Annodate data-races around sk->sk_state for writers.
  af_unix: Set sk->sk_state under unix_state_lock() for truly disconencted peer.
  ptp: Fix error message on failed pin verification
  net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
  tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB
  vxlan: Fix regression when dropping packets due to invalid src addresses
  net: sched: sch_multiq: fix possible OOB write in multiq_tune()
  octeontx2-af: Always allocate PF entries from low prioriy zone
  bpf: Set run context for rawtp test_run callback
  ipv6: sr: block BH in seg6_output_core() and seg6_input_core()
  net/ncsi: Fix the multi thread manner of NCSI driver
  net/ncsi: Simplify Kconfig/dts control flow
  wifi: mac80211: correctly parse Spatial Reuse Parameter Set element
  wifi: iwlwifi: mvm: don't read past the mfuart notifcation
  wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
  wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef
  wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64
  wifi: cfg80211: pmsr: use correct nla_get_uX functions
  wifi: cfg80211: Lock wiphy in cfg80211_get_station
  wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
  wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
  Linux 5.15.161
  scsi: ufs: ufs-qcom: Clear qunipro_g4_sel for HW major version > 5
  NFS: Fix READ_PLUS when server doesn't support OP_READ_PLUS
  nfs: fix undefined behavior in nfs_block_bits()
  EDAC/igen6: Convert PCIBIOS_* return codes to errnos
  i3c: master: svc: fix invalidate IBI type and miss call client IBI handler
  s390/cpacf: Make use of invalid opcode produce a link error
  s390/cpacf: Split and rework cpacf query functions
  s390/ap: Fix crash in AP internal function modify_bitmap()
  ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
  ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow
  sparc: move struct termio to asm/termios.h
  net: fix __dst_negative_advice() race
  kdb: Use format-specifiers rather than memset() for padding in kdb_read()
  kdb: Merge identical case statements in kdb_read()
  kdb: Fix console handling when editing and tab-completing commands
  kdb: Use format-strings rather than '\0' injection in kdb_read()
  kdb: Fix buffer overflow during tab-complete
  watchdog: rti_wdt: Set min_hw_heartbeat_ms to accommodate a safety margin
  sparc64: Fix number of online CPUs
  intel_th: pci: Add Meteor Lake-S CPU support
  net/9p: fix uninit-value in p9_client_rpc()
  net/ipv6: Fix route deleting failure when metric equals 0
  crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
  crypto: ecrdsa - Fix module auto-load on add_key
  crypto: ecdsa - Fix module auto-load on add-key
  KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode
  KVM: arm64: Fix AArch32 register narrowing on userspace write
  drm/amdgpu/atomfirmware: add intergrated info v2.3 table
  fbdev: savage: Handle err return when savagefb_check_var failed
  mmc: sdhci-acpi: Disable write protect detection on Toshiba WT10-A
  mmc: sdhci-acpi: Fix Lenovo Yoga Tablet 2 Pro 1380 sdcard slot not working
  mmc: sdhci-acpi: Sort DMI quirks alphabetically
  mmc: core: Add mmc_gpiod_set_cd_config() function
  media: v4l2-core: hold videodev_lock until dev reg, finishes
  media: mxl5xx: Move xpt structures off stack
  media: mc: mark the media devnode as registered from the, start
  arm64: dts: hi3798cv200: fix the size of GICR
  wifi: rtlwifi: rtl8192de: Fix endianness issue in RX path
  wifi: rtlwifi: rtl8192de: Fix low speed with WPA3-SAE
  wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU
  md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
  arm64: dts: qcom: qcs404: fix bluetooth device address
  arm64: tegra: Correct Tegra132 I2C alias
  ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx
  soc: qcom: rpmh-rsc: Enhance check for VRM in-flight request
  thermal/drivers/qcom/lmh: Check for SCM availability at probe
  ata: pata_legacy: make legacy_exit() work again
  drm/amdgpu: add error handle to avoid out-of-bounds
  media: lgdt3306a: Add a check against null-pointer-def
  f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
  sunrpc: exclude from freezer when waiting for requests:
  scripts/gdb: fix SB_* constants parsing
  net: dsa: tag_sja1105: always prefer source port information from INCL_SRCPT
  net: dsa: sja1105: always enable the INCL_SRCPT option
  vxlan: Fix regression when dropping packets due to invalid src addresses
  mptcp: fix full TCP keep-alive support
  Revert "drm/amdgpu: init iommu after amdkfd device init"
  nilfs2: fix use-after-free of timer for log writer thread
  afs: Don't cross .backup mountpoint from backup volume
  io_uring: fail NOP if non-zero op flags is passed in
  mmc: core: Do not force a retune before RPMB switch
  drm: Check polling initialized before enabling in drm_helper_probe_single_connector_modes
  drm: Check output polling initialized before disabling
  SUNRPC: Fix loop termination condition in gss_free_in_token_pages()
  media: cec: core: add adap_nb_transmit_canceled() callback
  net: ena: Fix DMA syncing in XDP path when SWIOTLB is on
  genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
  KVM: x86: Don't advertise guest.MAXPHYADDR as host.MAXPHYADDR in CPUID
  ALSA: timer: Set lower bound of start tick time
  hwmon: (shtc1) Fix property misspelling
  ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
  net: ena: Fix redundant device NUMA node override
  net: ena: Reduce lines with longer column width boundary
  net: ena: Add dynamic recycling mechanism for rx buffers
  net: ena: Do not waste napi skb cache
  net: ena: Extract recurring driver reset code into a function
  net: ena: Add capabilities field with support for ENI stats capability
  spi: stm32: Don't warn about spurious interrupts
  kconfig: fix comparison to constant symbols, 'm', 'n'
  netfilter: tproxy: bail out if IP has been disabled on the device
  netfilter: nft_payload: skbuff vlan metadata mangle support
  netfilter: nft_payload: rebuild vlan header on h_proto access
  netfilter: nft_payload: rebuild vlan header when needed
  netfilter: nft_payload: move struct nft_payload_set definition where it belongs
  net:fec: Add fec_enet_deinit()
  bpf: Allow delete from sockmap/sockhash only if update is allowed
  net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM
  enic: Validate length of nl attributes in enic_set_vf_port
  bpf: Fix potential integer overflow in resolve_btfids
  dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
  net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion
  net/mlx5e: Fix IPsec tunnel mode offload feature check
  net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8061
  nvmet: fix ns enable/disable possible hang
  dma-mapping: benchmark: handle NUMA_NO_NODE correctly
  dma-mapping: benchmark: fix node id validation
  spi: Don't mark message DMA mapped when no transfer in it is
  netfilter: nft_payload: restore vlan q-in-q match support
  netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu()
  ice: Interpret .set_channels() input differently
  nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
  nfc: nci: Fix kcov check in nci_rx_work()
  tls: fix missing memory barrier in tls_init
  net: fec: avoid lock evasion when reading pps_enable
  riscv: stacktrace: fixed walk_stackframe()
  riscv: stacktrace: Make walk_stackframe cross pt_regs frame
  virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
  arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
  openvswitch: Set the skbuff pkt_type for proper pmtud support.
  tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
  ipv6: sr: fix memleak in seg6_hmac_init_algo
  af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock.
  rpcrdma: fix handling for RDMA_CM_EVENT_DEVICE_REMOVAL
  sunrpc: fix NFSACL RPC retry on soft mount
  NFSv4: Fixup smatch warning for ambiguous return
  ASoC: tas2552: Add TX path for capturing AUDIO-OUT data
  nfc: nci: Fix uninit-value in nci_rx_work
  ipv6: sr: fix missing sk_buff release in seg6_input_core
  net: Always descend into dsa/ folder with CONFIG_NET_DSA enabled
  x86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER=y
  regulator: bd71828: Don't overwrite runtime voltages
  ASoC: mediatek: mt8192: fix register configuration for tdm
  null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION()
  media: cec: core: avoid confusing "transmit timed out" message
  media: cec: core: avoid recursive cec_claim_log_addrs
  media: cec-adap.c: drop activate_cnt, use state info instead
  media: cec: use call_op and check for !unregistered
  media: cec: correctly pass on reply results
  media: cec: abort if the current transmit was canceled
  media: cec: call enable_adap on s_log_addrs
  media: cec: cec-api: add locking in cec_release()
  media: cec: cec-adap: always cancel work in cec_transmit_msg_fh
  um: Fix the -Wmissing-prototypes warning for __switch_mm
  powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp
  media: flexcop-usb: fix sanity check of bNumEndpoints
  media: flexcop-usb: clean up endpoint sanity checks
  Input: cyapa - add missing input core locking to suspend/resume functions
  scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy()
  media: stk1160: fix bounds checking in stk1160_copy_video()
  drm/bridge: tc358775: fix support for jeida-18 and jeida-24
  fs/ntfs3: Use variable length array instead of fixed size
  fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
  um: vector: fix bpfflash parameter evaluation
  um: Add winch to winch_handlers before registering winch IRQ
  um: Fix return value in ubd_init()
  drm/msm/dpu: Always flush the slave INTF on the CTL
  drm/msm/dsi: Print dual-DSI-adjusted pclk instead of original mode pclk
  Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation
  mmc: sdhci_am654: Fix ITAPDLY for HS400 timing
  mmc: sdhci_am654: Add ITAPDLYSEL in sdhci_j721e_4bit_set_clock
  mmc: sdhci_am654: Add OTAP/ITAP delay enable
  mmc: sdhci_am654: Drop lookup for deprecated ti,otap-del-sel
  mmc: sdhci_am654: Write ITAPDLY for DDR52 timing
  mmc: sdhci_am654: Add tuning algorithm for delay chain
  Input: ioc3kbd - add device table
  Input: ioc3kbd - convert to platform remove callback returning void
  Input: ims-pcu - fix printf string overflow
  s390/boot: Remove alt_stfle_fac_list from decompressor
  s390/ipl: Fix incorrect initialization of nvme dump block
  s390/ipl: Fix incorrect initialization of len fields in nvme reipl block
  s390/vdso: Use standard stack frame layout
  s390/vdso: Generate unwind information for C modules
  s390/vdso64: filter out munaligned-symbols flag for vdso
  s390/vdso: filter out mno-pic-data-is-text-relative cflag
  libsubcmd: Fix parse-options memory leak
  serial: sh-sci: protect invalidating RXDMA on shutdown
  f2fs: compress: don't allow unaligned truncation on released compress inode
  f2fs: fix to release node block count in error path of f2fs_new_node_page()
  f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock
  PCI/EDR: Align EDR_PORT_LOCATE_DSM with PCI Firmware r3.3
  PCI/EDR: Align EDR_PORT_DPC_ENABLE_DSM with PCI Firmware r3.3
  extcon: max8997: select IRQ_DOMAIN instead of depending on it
  ppdev: Add an error check in register_device
  ppdev: Remove usage of the deprecated ida_simple_xx() API
  stm class: Fix a double free in stm_register_device()
  usb: gadget: u_audio: Clear uac pointer when freed.
  watchdog: bd9576: Drop "always-running" property
  watchdog: bd9576_wdt: switch to using devm_fwnode_gpiod_get()
  dt-bindings: pinctrl: mediatek: mt7622: fix array properties
  microblaze: Remove early printk call from cpuinfo-static.c
  microblaze: Remove gcc flag for non existing early_printk.c file
  fpga: region: add owner module and take its refcount
  fpga: region: Use standard dev_release for class driver
  coresight: etm4x: Fix access to resource selector registers
  coresight: etm4x: Safe access for TRCQCLTR
  coresight: etm4x: Cleanup TRCIDR0 register accesses
  coresight: no-op refactor to make INSTP0 check more idiomatic
  coresight: etm4x: Do not save/restore Data trace control registers
  coresight: etm4x: Do not hardcode IOMEM access for register restore
  iio: pressure: dps310: support negative temperature values
  coresight: etm4x: Fix unbalanced pm_runtime_enable()
  f2fs: fix to check pinfile flag in f2fs_move_file_range()
  f2fs: fix to relocate check condition in f2fs_fallocate()
  f2fs: fix typos in comments
  f2fs: do not allow partial truncation on pinned file
  f2fs: compress: fix to relocate check condition in f2fs_ioc_{,de}compress_file()
  f2fs: convert to use sbi directly
  f2fs: compress: fix to relocate check condition in f2fs_{release,reserve}_compress_blocks()
  dt-bindings: PCI: rcar-pci-host: Add missing IOMMU properties
  dt-bindings: PCI: rcar-pci-host: Add optional regulators
  serial: sc16is7xx: add proper sched.h include for sched_set_fifo()
  PCI: tegra194: Fix probe path for Endpoint mode
  greybus: arche-ctrl: move device table to its right location
  serial: max3100: Fix bitwise types
  serial: max3100: Update uart_driver_registered on driver removal
  serial: max3100: Lock port->lock when calling uart_handle_cts_change()
  firmware: dmi-id: add a release callback function
  dmaengine: idma64: Add check for dma_set_max_seg_size
  soundwire: cadence: fix invalid PDI offset
  f2fs: fix to wait on page writeback in __clone_blkaddrs()
  f2fs: Delete f2fs_copy_page() and replace with memcpy_page()
  greybus: lights: check return of get_channel_from_mode
  sched/core: Fix incorrect initialization of the 'burst' parameter in cpu_max_write()
  sched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level
  af_packet: do not call packet_read_pending() from tpacket_destruct_skb()
  netrom: fix possible dead-lock in nr_rt_ioctl()
  net: qrtr: ns: Fix module refcnt
  selftests: net: bridge: increase IGMP/MLD exclude timeout membership interval
  RDMA/IPoIB: Fix format truncation compilation errors
  selftests/kcmp: remove unused open mode
  selftests/kcmp: Make the test output consistent and clear
  SUNRPC: Fix gss_free_in_token_pages()
  ext4: fix potential unnitialized variable
  ext4: remove unused parameter from ext4_mb_new_blocks_simple()
  ext4: try all groups in ext4_mb_new_blocks_simple
  ext4: fix unit mismatch in ext4_mb_new_blocks_simple
  ext4: simplify calculation of blkoff in ext4_mb_new_blocks_simple
  sunrpc: removed redundant procp check
  drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map()
  virt: acrn: stop using follow_pfn
  virt: acrn: Prefer array_size and struct_size over open coded arithmetic
  ext4: avoid excessive credit estimate in ext4_tmpfile()
  x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map
  clk: qcom: mmcc-msm8998: fix venus clock issue
  RDMA/hns: Modify the print level of CQE error
  RDMA/hns: Use complete parentheses in macros
  RDMA/hns: Fix GMV table pagesize
  RDMA/hns: Fix deadlock on SRQ async events.
  RDMA/hns: Fix return value in hns_roce_map_mr_sg
  RDMA/mlx5: Adding remote atomic access flag to updatable flags
  drm/mipi-dsi: use correct return type for the DSC functions
  drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector
  drm/bridge: tc358775: Don't log an error when DSI host can't be found
  drm/bridge: lt9611: Don't log an error when DSI host can't be found
  drm/bridge: lt8912b: Don't log an error when DSI host can't be found
  ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value
  drm: vc4: Fix possible null pointer dereference
  drm/arm/malidp: fix a possible null pointer dereference
  media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries
  fbdev: sh7760fb: allow modular build
  media: dt-bindings: ovti,ov2680: Fix the power supply names
  media: ipu3-cio2: Request IRQ earlier
  media: ipu3-cio2: Use temporary storage for struct device pointer
  drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
  media: radio-shark2: Avoid led_names truncations
  media: ngene: Add dvb_ca_en50221_init return value check
  fbdev: sisfb: hide unused variables
  powerpc/fsl-soc: hide unused const variable
  drm/mediatek: Add 0 size check to mtk_drm_gem_obj
  drm/meson: vclk: fix calculation of 59.94 fractional rates
  ASoC: kirkwood: Fix potential NULL dereference
  fbdev: shmobile: fix snprintf truncation
  mtd: rawnand: hynix: fixed typo
  mtd: core: Report error if first mtd_otp_size() call fails in mtd_otp_nvmem_add()
  ASoC: Intel: Disable route checks for Skylake boards
  drm/amd/display: Fix potential index out of bounds in color transformation function
  dev_printk: Add and use dev_no_printk()
  printk: Let no_printk() use _printk()
  mptcp: SO_KEEPALIVE: fix getsockopt support
  s390/bpf: Emit a barrier for BPF_FETCH instructions
  net/mlx5: Discard command completions in internal error
  ipv6: sr: fix invalid unregister error path
  ipv6: sr: fix incorrect unregister order
  ipv6: sr: add missing seg6_local_exit
  net: openvswitch: fix overwriting ct original tuple for ICMPv6
  net: usb: smsc95xx: stop lying about skb->truesize
  af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
  net: ethernet: cortina: Locking fixes
  eth: sungem: remove .ndo_poll_controller to avoid deadlocks
  net: ipv6: fix wrong start position when receive hop-by-hop fragment
  m68k: mac: Fix reboot hang on Mac IIci
  m68k: Fix spinlock race in kernel thread creation
  net: usb: sr9700: stop lying about skb->truesize
  usb: aqc111: stop lying about skb->truesize
  wifi: mwl8k: initialize cmd->addr[] properly
  scsi: qla2xxx: Fix debugfs output for fw_resource_count
  scsi: qedf: Ensure the copied buf is NUL terminated
  scsi: bfa: Ensure the copied buf is NUL terminated
  HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors
  selftests/resctrl: fix clang build failure: use LOCAL_HDRS
  selftests/binderfs: use the Makefile's rules, not Make's implicit rules
  Revert "sh: Handle calling csum_partial with misaligned data"
  sh: kprobes: Merge arch_copy_kprobe() into arch_prepare_kprobe()
  wifi: ar5523: enable proper endpoint verification
  wifi: carl9170: add a proper sanity check for endpoints
  macintosh/via-macii: Fix "BUG: sleeping function called from invalid context"
  net: give more chances to rcu in netdev_wait_allrefs_any()
  pwm: sti: Simplify probe function using devm functions
  pwm: sti: Prepare removing pwm_chip from driver data
  pwm: sti: Convert to platform remove callback returning void
  tcp: avoid premature drops in tcp_add_backlog()
  net: dsa: mv88e6xxx: Avoid EEPROM timeout without EEPROM on 88E6250-family switches
  net: dsa: mv88e6xxx: Add support for model-specific pre- and post-reset handlers
  wifi: ath10k: populate board data for WCN3990
  wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger()
  thermal/drivers/tsens: Fix null pointer dereference
  x86/purgatory: Switch to the position-independent small code model
  scsi: hpsa: Fix allocation size for Scsi_Host private data
  scsi: libsas: Fix the failure of adding phy with zero-address to port
  cppc_cpufreq: Fix possible null pointer dereference
  udp: Avoid call to compute_score on multiple sites
  net: remove duplicate reuseport_lookup functions
  net: export inet_lookup_reuseport and inet6_lookup_reuseport
  cpufreq: exit() callback is optional
  cpufreq: Rearrange locking in cpufreq_remove_dev()
  cpufreq: Split cpufreq_offline()
  cpufreq: Reorganize checks in cpufreq_offline()
  selftests/bpf: Fix umount cgroup2 error in test_sockmap
  gfs2: Fix "ignore unlock failures after withdraw"
  gfs2: Don't forget to complete delayed withdraw
  ACPI: disable -Wstringop-truncation
  irqchip/loongson-pch-msi: Fix off-by-one on allocation error path
  irqchip/alpine-msi: Fix off-by-one in allocation error path
  scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL
  scsi: ufs: core: Perform read back after disabling interrupts
  scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV
  scsi: ufs: qcom: Perform read back after writing CGC enable
  scsi: ufs: qcom: Perform read back after writing unipro mode
  scsi: ufs: ufs-qcom: Clear qunipro_g4_sel for HW version major 5
  scsi: ufs: ufs-qcom: Fix the Qcom register name for offset 0xD0
  scsi: ufs: qcom: Perform read back after writing REG_UFS_SYS1CLK_1US
  scsi: ufs: qcom: Perform read back after writing reset bit
  bpf: Pack struct bpf_fib_lookup
  qed: avoid truncating work queue length
  sched/fair: Add EAS checks before updating root_domain::overutilized
  x86/boot: Ignore relocations in .notes sections in walk_relocs() too
  wifi: ath10k: poll service ready message before failing
  md: fix resync softlockup when bitmap size is less than array size
  null_blk: Fix missing mutex_destroy() at module removal
  soc: mediatek: cmdq: Fix typo of CMDQ_JUMP_RELATIVE
  jffs2: prevent xattr node from overflowing the eraseblock
  s390/cio: fix tracepoint subchannel type field
  crypto: x86/sha512-avx2 - add missing vzeroupper
  crypto: x86/sha256-avx2 - add missing vzeroupper
  crypto: x86/nh-avx2 - add missing vzeroupper
  crypto: ccp - drop platform ifdef checks
  parisc: add missing export of __cmpxchg_u8()
  nilfs2: fix out-of-range warning
  ecryptfs: Fix buffer size for tag 66 packet
  firmware: raspberrypi: Use correct device for DMA mappings
  mm/slub, kunit: Use inverted data to corrupt kmem cache
  crypto: bcm - Fix pointer arithmetic
  openpromfs: finish conversion to the new mount API
  epoll: be better about file lifetimes
  nvme: find numa distance only if controller has valid numa id
  x86/mm: Remove broken vsyscall emulation code from the page fault code
  drm/amdkfd: Flush the process wq before creating a kfd_process
  ASoC: da7219-aad: fix usage of device_get_named_child_node()
  softirq: Fix suspicious RCU usage in __do_softirq()
  ASoC: rt715-sdca: volume step modification
  ASoC: rt715: add vendor clear control register
  regulator: vqmmc-ipq4019: fix module autoloading
  ASoC: dt-bindings: rt5645: add cbj sleeve gpio property
  ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating
  regulator: irq_helpers: duplicate IRQ name
  selftests: sud_test: return correct emulated syscall value on RISC-V
  drm/amd/display: Set color_mgmt_changed to true on unsuspend
  net: usb: qmi_wwan: add Telit FN920C04 compositions
  dt-bindings: rockchip: grf: Add missing type to 'pcie-phy' node
  wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class
  ALSA: Fix deadlocks with kctl removals at disconnection
  ALSA: core: Fix NULL module pointer assignment at card init
  fs/ntfs3: Break dir enumeration if directory contents error
  fs/ntfs3: Fix case when index is reused during tree transformation
  fs/ntfs3: Taking DOS names into account during link counting
  fs/ntfs3: Remove max link count info display during driver init
  nilfs2: fix potential hang in nilfs_detach_log_writer()
  nilfs2: fix unexpected freezing of nilfs_segctor_sync()
  net: smc91x: Fix m68k kernel compilation for ColdFire CPU
  tools/latency-collector: Fix -Wformat-security compile warns
  ring-buffer: Fix a race between readers and resize checks
  r8169: Fix possible ring buffer corruption on fragmented Tx packets.
  Revert "r8169: don't try to disable interrupts if NAPI is, scheduled already"
  serial: 8250_bcm7271: use default_mux_rate if possible
  speakup: Fix sizeof() vs ARRAY_SIZE() bug
  tty: n_gsm: fix missing receive state reset after mode switch
  tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
  x86/tsc: Trust initial offset in architectural TSC-adjust MSRs
  Linux 5.15.160
  docs: kernel_include.py: Cope with docutils 0.21
  admin-guide/hw-vuln/core-scheduling: fix return type of PR_SCHED_CORE_GET
  KEYS: trusted: Do not use WARN when encode fails
  remoteproc: mediatek: Make sure IPI buffer fits in L2TCM
  serial: kgdboc: Fix NMI-safety problems from keyboard reset code
  usb: typec: ucsi: displayport: Fix potential deadlock
  binder: fix max_thread type inconsistency
  drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper()
  KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection
  netlink: annotate data-races around sk->sk_err
  netlink: annotate lockless accesses to nlk->max_recvmsg_len
  net: tls: handle backlogging of crypto requests
  tls: fix race between async notify and socket close
  net: tls: factor out tls_*crypt_async_wait()
  tls: extract context alloc/initialization out of tls_set_sw_offload
  tls: rx: simplify async wait
  net: bcmgenet: synchronize UMAC_CMD access
  net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
  Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems"
  KEYS: trusted: Fix memory leak in tpm2_key_encode()
  nfsd: don't allow nfsd threads to be signalled.
  pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin()
  drm/amd/display: Fix division by zero in setup_dsc_config
  Linux 5.15.159
  md: fix kmemleak of rdev->serial
  keys: Fix overwrite of key expiration on instantiation
  Bluetooth: qca: fix firmware check error path
  Bluetooth: qca: fix NVM configuration parsing
  Bluetooth: qca: add missing firmware sanity checks
  regulator: core: fix debugfs creation regression
  hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
  net: fix out-of-bounds access in ops_init
  drm/vmwgfx: Fix invalid reads in fence signaled events
  mei: me: add lunar lake point M DID
  slimbus: qcom-ngd-ctrl: Add timeout for wait operation
  dyndbg: fix old BUG_ON in >control parser
  ASoC: ti: davinci-mcasp: Fix race condition during probe
  ASoC: tegra: Fix DSPK 16-bit playback
  net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
  tipc: fix UAF in error path
  iio: accel: mxc4005: Interrupt handling fixes
  iio:imu: adis16475: Fix sync mode setting
  dt-bindings: iio: health: maxim,max30102: fix compatible check
  mptcp: ensure snd_nxt is properly initialized on connect
  btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
  ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
  usb: dwc3: core: Prevent phy suspend during init
  usb: xhci-plat: Don't include xhci.h
  usb: gadget: f_fs: Fix a race condition when processing setup packets.
  usb: gadget: composite: fix OS descriptors w_value logic
  usb: ohci: Prevent missed ohci interrupts
  usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device
  usb: typec: ucsi: Fix connector check on init
  usb: typec: ucsi: Check for notifications after init
  arm64: dts: qcom: Fix 'interrupt-map' parent address cells
  Reapply "drm/qxl: simplify qxl_fence_wait"
  firewire: nosy: ensure user_length is taken into account when fetching packet contents
  btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send()
  ACPI: CPPC: Fix access width used for PCC registers
  ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
  Revert "Revert "ACPI: CPPC: Use access_width over bit_width for system memory accesses""
  drm/amd/display: Atom Integrated System Info v2_2 for DCN35
  drm/connector: Add \n to message about demoting connector force-probes
  drm/meson: dw-hdmi: add bandgap setting for g12
  drm/meson: dw-hdmi: power up phy on device init
  net: hns3: fix port vlan filter not disabled issue
  net: hns3: split function hclge_init_vlan_config()
  net: hns3: use appropriate barrier function after setting a bit value
  net: hns3: change type of numa_node_mask as nodemask_t
  net: hns3: refactor hclge_cmd_send with new hclge_comm_cmd_send API
  net: hns3: create new set of unified hclge_comm_cmd_send APIs
  net: hns3: create new cmdq hardware description structure hclge_comm_hw
  net: hns3: refactor hns3 makefile to support hns3_common module
  net: hns3: direct return when receive a unknown mailbox message
  net: hns3: refactor function hclge_mbx_handler()
  net: hns3: add query vf ring and vector map relation
  net: hns3: add log for workqueue scheduled late
  net: hns3: using user configure after hardware reset
  net: hns3: PF support get unicast MAC address space assigned by firmware
  ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
  net: bridge: fix corrupted ethernet header on multicast-to-unicast
  phonet: fix rtm_phonet_notify() skb allocation
  hwmon: (corsair-cpro) Protect ccp->wait_input_report with a spinlock
  hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event()
  hwmon: (corsair-cpro) Use a separate buffer for sending commands
  rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
  Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
  Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
  tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
  tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
  ARM: 9381/1: kasan: clear stale stack poison
  xfrm: Preserve vlan tags for transport mode software GRO
  qibfs: fix dentry leak
  bpf, sockmap: Improved check for empty queue
  bpf, sockmap: Reschedule is now done through backlog
  bpf, sockmap: Convert schedule_work into delayed_work
  bpf, sockmap: Handle fin correctly
  bpf, sockmap: TCP data stall on recv before accept
  net:usb:qmi_wwan: support Rolling modules
  drm/nouveau/dp: Don't probe eDP ports twice harder
  fs/9p: drop inodes immediately on non-.L too
  clk: Don't hold prepare_lock when calling kref_put()
  gpio: crystalcove: Use -ENOTSUPP consistently
  gpio: wcove: Use -ENOTSUPP consistently
  9p: explicitly deny setlease attempts
  fs/9p: translate O_TRUNC into OTRUNC
  fs/9p: only translate RWX permissions for plain 9P2000
  iommu: mtk: fix module autoloading
  selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
  MIPS: scall: Save thread_info.syscall unconditionally on entry
  gpu: host1x: Do not setup DMA for virtual devices
  blk-iocost: avoid out of bounds shift
  scsi: target: Fix SELinux error when systemd-modules loads the target module
  btrfs: always clear PERTRANS metadata during commit
  btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
  tools/power turbostat: Fix Bzy_MHz documentation typo
  tools/power turbostat: Fix added raw MSR output
  firewire: ohci: mask bus reset interrupts between ISR and bottom half
  ata: sata_gemini: Check clk_enable() result
  net: bcmgenet: Reset RBUF on first open
  ALSA: line6: Zero-initialize message buffers
  kbuild: Disable KCSAN for autogenerated *.mod.c intermediaries
  btrfs: return accurate error code on open failure in open_fs_devices()
  scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
  net: mark racy access on sk->sk_rcvbuf
  wifi: cfg80211: fix rdev_dump_mpp() arguments order
  wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
  gfs2: Fix invalid metadata access in punch_hole
  scsi: lpfc: Replace hbalock with ndlp lock in lpfc_nvme_unregister_port()
  scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
  scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
  KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
  KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id
  clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
  net: gro: add flush check in udp_gro_receive_segment
  drm/panel: ili9341: Use predefined error codes
  drm/panel: ili9341: Respect deferred probe
  s390/qeth: Fix kernel panic after setting hsuid
  s390/qeth: don't keep track of Input Queue count
  tipc: fix a possible memleak in tipc_buf_append
  net: core: reject skb_copy(_expand) for fraglist GSO skbs
  net: bridge: fix multicast-to-unicast with fraglist GSO
  net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
  cxgb4: Properly lock TX queue for the selftest.
  s390/cio: Ensure the copied buf is NUL terminated
  ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node()
  ASoC: meson: cards: select SND_DYNAMIC_MINORS
  ASoC: meson: axg-tdm-interface: manage formatters in trigger
  ASoC: meson: axg-card: make links nonatomic
  ASoC: meson: axg-fifo: use threaded irq to check periods
  ASoC: meson: axg-fifo: use FIELD helpers
  net: qede: use return from qede_parse_actions()
  net: qede: use return from qede_parse_flow_attr() for flow_spec
  net: qede: use return from qede_parse_flow_attr() for flower
  net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
  s390/vdso: Add CFI for RA register to asm macro vdso_func
  net l2tp: drop flow hash on forward
  nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment().
  octeontx2-af: avoid off-by-one read from userspace
  bna: ensure the copied buf is NUL terminated
  xdp: use flags field to disambiguate broadcast redirect
  xdp: Add xdp_do_redirect_frame() for pre-computed xdp_frames
  xdp: Move conversion to xdp_frame out of map functions
  s390/mm: Fix clearing storage keys for huge pages
  s390/mm: Fix storage key clearing for guest huge pages
  spi: hisi-kunpeng: Delete the dump interface of data registers in debugfs
  bpf: Fix a verifier verbose message
  bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
  bpf, kconfig: Fix DEBUG_INFO_BTF_MODULES Kconfig definition
  regulator: mt6360: De-capitalize devicetree regulator subnodes
  pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
  power: supply: mt6360_charger: Fix of_match for usb-otg-vbus regulator
  power: rt9455: hide unused rt9455_boost_voltage_values
  nfs: Handle error of rpc_proc_register() in nfs_net_init().
  nfs: make the rpc_stat per net namespace
  nfs: expose /proc/net/sunrpc/nfs in net namespaces
  sunrpc: add a struct rpc_stats arg to rpc_create_args
  pinctrl: mediatek: paris: Rework support for PIN_CONFIG_{INPUT,OUTPUT}_ENABLE
  pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback
  pinctrl: mediatek: paris: Rework mtk_pinconf_{get,set} switch/case logic
  pinctrl: core: delete incorrect free in pinctrl_enable()
  pinctrl/meson: fix typo in PDM's pin name
  pinctrl: pinctrl-aspeed-g6: Fix register offset for pinconf of GPIOR-T
  eeprom: at24: fix memory corruption race condition
  eeprom: at24: Probe for DDR3 thermal sensor in the SPD case
  eeprom: at24: Use dev_err_probe for nvmem register failure
  ksmbd: clear RENAME_NOREPLACE before calling vfs_rename
  ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
  ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf
  wifi: nl80211: don't free NULL coalescing rule
  dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state"
  dmaengine: pl330: issue_pending waits until WFP state
  Linux 5.15.158
  serial: core: fix kernel-doc for uart_port_unlock_irqrestore()
  udp: preserve the connected status if only UDP cmsg
  bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS
  HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
  fbdev: fix incorrect address computation in deferred IO
  i2c: smbus: fix NULL function pointer dereference
  riscv: Fix TASK_SIZE on 64-bit NOMMU
  riscv: fix VMALLOC_START definition
  dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
  dma: xilinx_dpdma: Fix locking
  idma64: Don't try to serve interrupts when device is powered off
  dmaengine: owl: fix register access functions
  tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge()
  tcp: Clean up kernel listener's reqsk in inet_twsk_purge()
  mtd: diskonchip: work around ubsan link failure
  stackdepot: respect __GFP_NOLOCKDEP allocation flag
  net: b44: set pause params only when interface is up
  ethernet: Add helper for assigning packet type when dest address does not match device address
  irqchip/gic-v3-its: Prevent double free on error
  drm/amdgpu: Fix leak when GPU memory allocation fails
  drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
  arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
  cpu: Re-enable CPU mitigations by default for !X86 architectures
  btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
  mmc: sdhci-msm: pervent access to suspended controller
  Bluetooth: qca: fix NULL-deref on non-serdev suspend
  Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
  Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
  x86/cpu: Fix check for RDPKRU in __show_regs()
  tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together
  tracing: Show size of requested perf buffer
  net/mlx5e: Fix a race in command alloc flow
  Revert "crypto: api - Disallow identical driver names"
  drm/vmwgfx: Fix crtc's atomic check conditional
  drm-print: add drm_dbg_driver to improve namespace symmetry
  serial: mxs-auart: add spinlock around changing cts state
  serial: core: Provide port lock wrappers
  af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
  net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
  iavf: Fix TC config comparison with existing adapter TC config
  i40e: Report MFS in decimal base instead of hex
  i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
  netfilter: nf_tables: honor table dormant flag from netdev release event path
  mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
  mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
  mlxsw: spectrum_acl_tcam: Fix warning during rehash
  mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
  mlxsw: spectrum_acl_tcam: Rate limit error message
  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
  mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
  mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
  net: openvswitch: Fix Use-After-Free in ovs_ct_exit
  ipvs: Fix checksumming on GSO of SCTP packets
  net: gtp: Fix Use-After-Free in gtp_dellink
  net: usb: ax88179_178a: stop lying about skb->truesize
  ipv4: check for NULL idev in ip_route_use_hint()
  NFC: trf7970a: disable all regulators on removal
  bridge/br_netlink.c: no need to return void function
  icmp: prevent possible NULL dereferences from icmp_build_probe()
  mlxsw: core: Unregister EMAD trap using FORWARD action
  vxlan: drop packets from invalid src-address
  wifi: iwlwifi: mvm: return uid from iwl_mvm_build_scan_cmd
  wifi: iwlwifi: mvm: remove old PASN station when adding a new one
  ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
  arm64: dts: mediatek: mt2712: fix validation errors
  arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
  arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
  arm64: dts: mediatek: mt7622: fix IR nodename
  arm64: dts: mediatek: mt7622: fix clock controllers
  arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch
  arm64: dts: mediatek: mt7622: add support for coherent DMA
  arm64: dts: mediatek: mt8183: Add power-domains properity to mfgcfg
  arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
  arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
  arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
  arm64: dts: rockchip: enable internal pull-up on Q7_USB_ID for RK3399 Puma
  HID: logitech-dj: allow mice to use all types of reports
  HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc
  cifs: reinstate original behavior again for forceuid/forcegid
  smb: client: fix rename(2) regression against samba
  Linux 5.15.157
  net: dsa: mt7530: fix enabling EEE on MT7531 switch on all boards
  net: dsa: mt7530: fix improper frames on all 25MHz and 40MHz XTAL MT7530
  net: dsa: introduce preferred_default_local_cpu_port and use on MT7530
  net: dsa: mt7530: set all CPU ports in MT7531_CPU_PMAP
  nilfs2: fix OOB in nilfs_set_de_type
  nouveau: fix instmem race condition around ptr stores
  drm/vmwgfx: Sort primary plane formats by order of preference
  drm/amdgpu: validate the parameters of bo mapping operations more clearly
  binder: check offset alignment in binder_get_object()
  init/main.c: Fix potential static_command_line memory overflow
  arm64: hibernate: Fix level3 translation fault in swsusp_save()
  KVM: x86/pmu: Do not mask LVTPC when handling a PMI on AMD platforms
  KVM: x86: Snapshot if a vCPU's vendor model is AMD vs. Intel compatible
  fs: sysfs: Fix reference leak in sysfs_break_active_protection()
  speakup: Avoid crash on very long word
  mei: me: disable RPL-S on SPS and IGN firmwares
  usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error
  usb: Disable USB3 LPM at shutdown
  usb: dwc2: host: Fix dereference issue in DDMA completion flow.
  Revert "usb: cdc-wdm: close race between read and workqueue"
  USB: serial: option: add Telit FN920C04 rmnet compositions
  USB: serial: option: add Rolling RW101-GL and RW135-GL support
  USB: serial: option: support Quectel EM060K sub-models
  USB: serial: option: add Lonsung U8300/U9300 product
  USB: serial: option: add support for Fibocom FM650/FG650
  USB: serial: option: add Fibocom FM135-GL variants
  serial/pmac_zilog: Remove flawed mitigation for rx irq flood
  comedi: vmk80xx: fix incomplete endpoint checking
  thunderbolt: Fix wake configurations after device unplug
  thunderbolt: Avoid notify PM core about runtime PM resume
  x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ
  x86/bugs: Fix BHI retpoline check
  clk: Get runtime PM before walking tree during disable_unused
  clk: Initialize struct clk_core kref earlier
  clk: Print an info line before disabling unused clocks
  clk: remove extra empty line
  clk: Mark 'all_lists' as const
  clk: Remove prepare_lock hold assertion in __clk_release()
  drm/panel: visionox-rm69299: don't unregister DSI device
  drm: nv04: Fix out of bounds access
  s390/cio: fix race condition during online processing
  s390/qdio: handle deferred cc1
  RDMA/mlx5: Fix port number for counter query in multi-port configuration
  RDMA/cm: Print the old state when cm_destroy_id gets timeout
  RDMA/rxe: Fix the problem "mutex_destroy missing"
  net: ethernet: ti: am65-cpsw-nuss: cleanup DMA Channels before using them
  net: dsa: mt7530: fix mirroring frames received on local port
  tun: limit printing rate when illegal packet received by tun dev
  af_unix: Don't peek OOB data without MSG_OOB.
  af_unix: Call manage_oob() for every skb in unix_stream_read_generic().
  netfilter: flowtable: incorrect pppoe tuple
  netfilter: flowtable: validate pppoe header
  netfilter: nf_flow_table: count pending offload workqueue tasks
  netfilter: nft_set_pipapo: do not free live element
  netfilter: br_netfilter: skip conntrack input hook for promisc packets
  netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
  netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
  Revert "lockd: introduce safe async lock op"
  Revert "tracing/trigger: Fix to return error if failed to alloc snapshot"
  kprobes: Fix possible use-after-free issue on kprobe registration
  bpf: Fix ringbuf memory type confusion when passing to helpers
  bpf: Fix out of bounds access for ringbuf helpers
  bpf: Generally fix helper register offset check
  bpf: Generalize check_ctx_reg for reuse with other types
  bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support
  selftests/ftrace: Limit length in subsystem-enable tests
  SUNRPC: Fix rpcgss_context trace event acceptor field
  btrfs: record delayed inode root in transaction
  ksmbd: do not set SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1
  ksmbd: validate payload size in ipc response
  ksmbd: don't send oplock break if rename fails
  Linux 5.15.156
  drm/i915/cdclk: Fix CDCLK programming order when pipes are active
  x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI
  x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto
  x86/bugs: Clarify that syscall hardening isn't a BHI mitigation
  x86/bugs: Fix BHI handling of RRSBA
  x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr'
  x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES
  x86/bugs: Fix BHI documentation
  x86/bugs: Fix return type of spectre_bhi_state()
  irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
  x86/apic: Force native_apic_mem_read() to use the MOV instruction
  selftests: timers: Fix abs() warning in posix_timers test
  x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
  perf/x86: Fix out of range data
  vhost: Add smp_rmb() in vhost_vq_avail_empty()
  drm/client: Fully protect modes[] with dev->mode_config.mutex
  btrfs: qgroup: correctly model root qgroup rsv in convert
  iommu/vt-d: Allocate local memory for page request queue
  tracing: hide unused ftrace_event_id_fops
  net: ena: Fix incorrect descriptor free behavior
  net: ena: Wrong missing IO completions check order
  net: ena: Fix potential sign extension issue
  af_unix: Fix garbage collector racing against connect()
  af_unix: Do not use atomic ops for unix_sk(sk)->inflight.
  net: dsa: mt7530: trap link-local frames regardless of ST Port State
  net: sparx5: fix wrong config being used when reconfiguring PCS
  net/mlx5: Properly link new fs rules into the tree
  netfilter: complete validation of user input
  ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
  ipv4/route: avoid unused-but-set-variable warning
  ipv6: fib: hide unused 'pn' variable
  octeontx2-af: Fix NIX SQ mode and BP config
  af_unix: Clear stale u->oob_skb.
  geneve: fix header validation in geneve[6]_xmit_skb
  xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
  u64_stats: Disable preemption on 32bit UP+SMP PREEMPT_RT during updates.
  net: openvswitch: fix unwanted error log on timeout policy probing
  scsi: qla2xxx: Fix off by one in qla_edif_app_getstats()
  nouveau: fix function cast warning
  Revert "drm/qxl: simplify qxl_fence_wait"
  arm64: dts: imx8-ss-conn: fix usdhc wrong lpcg clock order
  media: cec: core: remove length check of Timer Status
  Bluetooth: Fix memory leak in hci_req_sync_complete()
  ring-buffer: Only update pages_touched when a new page is touched
  batman-adv: Avoid infinite loop trying to resize local TT
  Linux 5.15.155
  Revert "ACPI: CPPC: Use access_width over bit_width for system memory accesses"
  VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
  Bluetooth: btintel: Fixe build regression
  platform/x86: intel-vbtn: Update tablet mode switch at end of probe
  randomize_kstack: Improve entropy diffusion
  x86/mm/pat: fix VM_PAT handling in COW mappings
  virtio: reenable config if freezing device failed
  gcc-plugins/stackleak: Avoid .head.text section
  gcc-plugins/stackleak: Ignore .noinstr.text and .entry.text
  tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  netfilter: nf_tables: discard table flag update with pending basechain deletion
  netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
  netfilter: nf_tables: release batch on table validation from abort path
  fbmon: prevent division by zero in fb_videomode_from_videomode()
  drivers/nvme: Add quirks for device 126f:2262
  fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
  ASoC: soc-core.c: Skip dummy codec when adding platforms
  usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
  usb: typec: tcpci: add generic tcpci fallback compatible
  tools: iio: replace seekdir() in iio_generic_buffer
  ring-buffer: use READ_ONCE() to read cpu_buffer->commit_page in concurrent environment
  ktest: force $buildonly = 1 for 'make_warnings_file' test type
  platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
  Input: allocate keycode for Display refresh rate toggle
  RDMA/cm: add timeout to cm_destroy_id wait
  block: prevent division by zero in blk_rq_stat_sum()
  libperf evlist: Avoid out-of-bounds access
  Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
  SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
  drm/amd/display: Fix nanosec stat overflow
  ext4: forbid commit inconsistent quota data when errors=remount-ro
  ext4: add a hint for block bitmap corrupt state in mb_groups
  ALSA: firewire-lib: handle quirk to calculate payload quadlets as data block counter
  media: sta2x11: fix irq handler cast
  isofs: handle CDs with bad root inode but good Joliet root directory
  scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
  sysv: don't call sb_bread() with pointers_lock held
  pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
  Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
  Bluetooth: btintel: Fix null ptr deref in btintel_read_version
  net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
  btrfs: send: handle path ref underflow in header iterate_inode_ref()
  btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
  btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
  wifi: ath11k: decrease MHI channel buffer length to 8KB
  net: pcs: xpcs: Return EINVAL in the internal methods
  tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
  pstore/zone: Add a null pointer check to the psz_kmsg_read
  ionic: set adminq irq affinity
  arm64: dts: rockchip: fix rk3399 hdmi ports node
  arm64: dts: rockchip: fix rk3328 hdmi ports node
  cpuidle: Avoid potential overflow in integer multiplication
  panic: Flush kernel log buffer at the end
  VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
  wifi: ath9k: fix LNA selection in ath_ant_try_scan()
  net: dsa: fix panic when DSA master device unbinds on shutdown
  amdkfd: use calloc instead of kzalloc to avoid integer overflow
  Linux 5.15.154
  x86: set SPECTRE_BHI_ON as default
  KVM: x86: Add BHI_NO
  x86/bhi: Mitigate KVM by default
  x86/bhi: Add BHI mitigation knob
  x86/bhi: Enumerate Branch History Injection (BHI) bug
  x86/bhi: Define SPEC_CTRL_BHI_DIS_S
  x86/bhi: Add support for clearing branch history at syscall entry
  x86/syscall: Don't force use of indirect calls for system calls
  x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file
  nvme: fix miss command type check
  gro: fix ownership transfer
  mm/secretmem: fix GUP-fast succeeding on secretmem folios
  mptcp: don't account accept() of non-MPC client as fallback to TCP
  x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
  x86/bugs: Fix the SRSO mitigation on Zen3/4
  riscv: process: Fix kernel gp leakage
  riscv: Fix spurious errors from __get/put_kernel_nofault
  s390/entry: align system call table on 8 bytes
  x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
  of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
  driver core: Introduce device_link_wait_removal()
  ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
  fs/pipe: Fix lockdep false-positive in watchqueue pipe_write()
  openrisc: Fix pagewalk usage in arch_dma_{clear, set}_uncached
  HID: uhid: Use READ_ONCE()/WRITE_ONCE() for ->running
  nfsd: hold a lighter-weight client reference over CB_RECALL_ANY
  ata: sata_mv: Fix PCI device ID table declaration compilation warning
  scsi: mylex: Fix sysfs buffer lengths
  ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
  ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
  ASoC: rt711-sdw: fix locking sequence
  ASoC: rt711-sdca: fix locking sequence
  ASoC: rt5682-sdw: fix locking sequence
  net: ravb: Always process TX descriptor ring
  net: fec: Set mac_managed_pm during probe
  drivers: net: convert to boolean for the mac_managed_pm flag
  net: usb: asix: suspend embedded PHY if external is used
  i40e: Enforce software interrupt during busy-poll exit
  i40e: Remove _t suffix from enum type names
  i40e: Store the irq number in i40e_q_vector
  Revert "usb: phy: generic: Get the vbus supply"
  scsi: qla2xxx: Update manufacturer detail
  scsi: qla2xxx: Update manufacturer details
  i40e: fix vf may be used uninitialized in this function warning
  i40e: fix i40e_count_filters() to count only active/new filters
  octeontx2-pf: check negative error code in otx2_open()
  octeontx2-af: Fix issue with loading coalesced KPU profiles
  udp: prevent local UDP tunnel packets from being GROed
  udp: do not transition UDP GRO fraglist partial checksums to unnecessary
  udp: do not accept non-tunnel GSO skbs landing in a tunnel
  mlxbf_gige: stop interface during shutdown
  ipv6: Fix infinite recursion in fib6_dump_done().
  selftests: reuseaddr_conflict: add missing new line at the end of the output
  erspan: make sure erspan_base_hdr is present in skb->head
  selftests: net: gro fwd: update vxlan GRO test expectations
  net: stmmac: fix rx queue priority assignment
  net/sched: act_skbmod: prevent kernel-infoleak
  bpf, sockmap: Prevent lock inversion deadlock in map delete elem
  vboxsf: Avoid an spurious warning if load_nls_xxx() fails
  netfilter: validate user input for expected length
  netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
  netfilter: nf_tables: flush pending destroy work before exit_net release
  netfilter: nf_tables: reject new basechain after table flag update
  KVM: x86: Mark target gfn of emulated atomic instruction as dirty
  KVM: x86: Bail to userspace if emulation of atomic user access faults
  thermal: devfreq_cooling: Fix perf state when calculate dfc res_util
  mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations
  Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
  io_uring: ensure '0' is returned on file registration success
  locking/rwsem: Disable preemption while trying for rwsem lock
  net/rds: fix possible cp null dereference
  xen-netfront: Add missing skb_mark_for_recycle
  Bluetooth: Fix TOCTOU in HCI debugfs implementation
  Bluetooth: hci_event: set the conn encrypted before conn establishes
  arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
  x86/cpufeatures: Add CPUID_LNX_5 to track recently added Linux-defined word
  x86/cpufeatures: Add new word for scattered features
  r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
  dm integrity: fix out-of-range warning
  Octeontx2-af: fix pause frame configuration in GMP mode
  bpf: Protect against int overflow for stack access size
  mlxbf_gige: call request_irq() after NAPI initialized
  USB: UAS: return ENODEV when submit urbs fail with device not attached
  ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
  scsi: usb: Stop using the SCSI pointer
  tcp: properly terminate timers for kernel sockets
  s390/qeth: handle deferred cc1
  ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa()
  wifi: iwlwifi: mvm: rfi: fix potential response leaks
  iwlwifi: mvm: rfi: use kmemdup() to replace kzalloc + memcpy
  mlxbf_gige: stop PHY during open() error paths
  nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
  scsi: usb: Call scsi_done() directly
  USB: core: Fix deadlock in usb_deauthorize_interface()
  scsi: lpfc: Correct size for wqe for memset()
  PCI/DPC: Quirk PIO log size for Intel Ice Lake Root Ports
  x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled
  scsi: qla2xxx: Delay I/O Abort on PCI error
  scsi: qla2xxx: Change debug message during driver unload
  scsi: qla2xxx: Fix double free of fcport
  scsi: qla2xxx: Fix command flush on cable pull
  scsi: qla2xxx: NVME|FCP prefer flag not being honored
  scsi: qla2xxx: Split FCE|EFT trace control
  scsi: qla2xxx: Fix N2N stuck connection
  scsi: qla2xxx: Prevent command send on chip reset
  usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
  usb: typec: ucsi: Ack unsupported commands
  usb: udc: remove warning when queue disabled ep
  usb: dwc2: gadget: LPM flow fix
  usb: dwc2: gadget: Fix exiting from clock gating
  usb: dwc2: host: Fix ISOC flow in DDMA mode
  usb: dwc2: host: Fix hibernation flow
  usb: dwc2: host: Fix remote wakeup from hibernation
  USB: core: Add hub_get() and hub_put() routines
  staging: vc04_services: fix information leak in create_component()
  staging: vc04_services: changen strncpy() to strscpy_pad()
  scsi: core: Fix unremoved procfs host directory regression
  ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
  drm/amd/display: Preserve original aspect ratio in create stream
  drm/amdgpu: Use drm_mode_copy()
  usb: cdc-wdm: close race between read and workqueue
  drm/i915/gt: Reset queue_priority_hint on parking
  net: ll_temac: platform_get_resource replaced by wrong function
  mmc: core: Avoid negative index with array access
  mmc: core: Initialize mmc_blk_ioc_data
  hexagon: vmlinux.lds.S: handle attributes section
  exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
  wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
  btrfs: zoned: use zone aware sb location for scrub
  init: open /initrd.image with O_LARGEFILE
  mm/migrate: set swap entry values of THP tail pages properly.
  serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO
  vfio/fsl-mc: Block calling interrupt handler without trigger
  vfio/platform: Create persistent IRQ handlers
  vfio/pci: Create persistent INTx handler
  vfio: Introduce interface to flush virqfd inject workqueue
  vfio/pci: Lock external INTx masking ops
  vfio/pci: Disable auto-enable of exclusive INTx IRQ
  selftests: mptcp: diag: return KSFT_FAIL not test_cnt
  powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
  efivarfs: Request at most 512 bytes for variable names
  nfsd: Fix a regression in nfsd_setattr()
  perf/core: Fix reentry problem in perf_output_read_group()
  nfsd: don't call locks_release_private() twice concurrently
  nfsd: don't take fi_lock in nfsd_break_deleg_cb()
  nfsd: fix RELEASE_LOCKOWNER
  nfsd: drop the nfsd_put helper
  nfsd: call nfsd_last_thread() before final nfsd_put()
  lockd: introduce safe async lock op
  NFSD: fix possible oops when nfsd/pool_stats is closed.
  Documentation: Add missing documentation for EXPORT_OP flags
  nfsd: separate nfsd_last_thread() from nfsd_put()
  nfsd: Simplify code around svc_exit_thread() call in nfsd()
  nfsd: Fix creation time serialization order
  NFSD: Add an nfsd4_encode_nfstime4() helper
  lockd: drop inappropriate svc_get() from locked_get()
  nfsd: fix double fget() bug in __write_ports_addfd()
  nfsd: make a copy of struct iattr before calling notify_change
  NFSD: Fix problem of COMMIT and NFS4ERR_DELAY in infinite loop
  nfsd: simplify the delayed disposal list code
  NFSD: Convert filecache to rhltable
  nfsd: allow reaping files still under writeback
  nfsd: update comment over __nfsd_file_cache_purge
  nfsd: don't take/put an extra reference when putting a file
  nfsd: add some comments to nfsd_file_do_acquire
  nfsd: don't kill nfsd_files because of lease break error
  nfsd: simplify test_bit return in NFSD_FILE_KEY_FULL comparator
  nfsd: NFSD_FILE_KEY_INODE only needs to find GC'ed entries
  nfsd: don't open-code clear_and_wake_up_bit
  nfsd: call op_release, even when op_func returns an error
  nfsd: don't replace page in rq_pages if it's a continuation of last page
  NFSD: Protect against filesystem freezing
  NFSD: copy the whole verifier in nfsd_copy_write_verifier
  nfsd: don't fsync nfsd_files on last close
  nfsd: fix courtesy client with deny mode handling in nfs4_upgrade_open
  NFSD: fix problems with cleanup on errors in nfsd4_copy
  nfsd: don't hand out delegation on setuid files being opened for write
  NFSD: fix leaked reference count of nfsd4_ssc_umount_item
  nfsd: clean up potential nfsd_file refcount leaks in COPY codepath
  nfsd: allow nfsd_file_get to sanely handle a NULL pointer
  NFSD: enhance inter-server copy cleanup
  nfsd: don't destroy global nfs4_file table in per-net shutdown
  nfsd: don't free files unconditionally in __nfsd_file_cache_purge
  NFSD: replace delayed_work with work_struct for nfsd_client_shrinker
  NFSD: register/unregister of nfsd-client shrinker at nfsd startup/shutdown time
  NFSD: Use set_bit(RQ_DROPME)
  Revert "SUNRPC: Use RMW bitops in single-threaded hot paths"
  nfsd: fix handling of cached open files in nfsd4_open codepath
  nfsd: rework refcounting in filecache
  NFSD: Avoid clashing function prototypes
  NFSD: Use only RQ_DROPME to signal the need to drop a reply
  NFSD: add CB_RECALL_ANY tracepoints
  NFSD: add delegation reaper to react to low memory condition
  NFSD: add support for sending CB_RECALL_ANY
  NFSD: refactoring courtesy_client_reaper to a generic low memory shrinker
  trace: Relocate event helper files
  lockd: fix file selection in nlmsvc_cancel_blocked
  lockd: ensure we use the correct file descriptor when unlocking
  lockd: set missing fl_flags field when retrieving args
  NFSD: Use struct_size() helper in alloc_session()
  nfsd: return error if nfs4_setacl fails
  NFSD: Add an nfsd_file_fsync tracepoint
  nfsd: fix up the filecache laundrette scheduling
  filelock: add a new locks_inode_context accessor function
  nfsd: reorganize filecache.c
  nfsd: remove the pages_flushed statistic from filecache
  NFSD: Fix licensing header in filecache.c
  NFSD: Use rhashtable for managing nfs4_file objects
  NFSD: Refactor find_file()
  NFSD: Clean up find_or_add_file()
  NFSD: Add a nfsd4_file_hash_remove() helper
  NFSD: Clean up nfsd4_init_file()
  NFSD: Update file_hashtbl() helpers
  NFSD: Use const pointers as parameters to fh_ helpers
  NFSD: Trace delegation revocations
  NFSD: Trace stateids returned via DELEGRETURN
  NFSD: Clean up nfs4_preprocess_stateid_op() call sites
  NFSD: Flesh out a documenting comment for filecache.c
  NFSD: Add an NFSD_FILE_GC flag to enable nfsd_file garbage collection
  NFSD: Revert "NFSD: NFSv4 CLOSE should release an nfsd_file immediately"
  NFSD: Pass the target nfsd_file to nfsd_commit()
  exportfs: use pr_debug for unreachable debug statements
  nfsd: allow disabling NFSv2 at compile time
  nfsd: move nfserrno() to vfs.c
  nfsd: ignore requests to disable unsupported versions
  NFSD: Finish converting the NFSv3 GETACL result encoder
  NFSD: Remove redundant assignment to variable host_err
  NFSD: Simplify READ_PLUS
  nfsd: use locks_inode_context helper
  lockd: use locks_inode_context helper
  NFSD: Fix reads with a non-zero offset that don't end on a page boundary
  NFSD: Fix trace_nfsd_fh_verify_err() crasher
  nfsd: put the export reference in nfsd4_verify_deleg_dentry
  nfsd: fix use-after-free in nfsd_file_do_acquire tracepoint
  nfsd: fix net-namespace logic in __nfsd_file_cache_purge
  nfsd: ensure we always call fh_verify_error tracepoint
  NFSD: unregister shrinker when nfsd_init_net() fails
  nfsd: rework hashtable handling in nfsd_do_file_acquire
  nfsd: fix nfsd_file_unhash_and_dispose
  fanotify: Remove obsoleted fanotify_event_has_path()
  fsnotify: remove unused declaration
  fs/notify: constify path
  nfsd: extra checks when freeing delegation stateids
  nfsd: make nfsd4_run_cb a bool return function
  nfsd: fix comments about spinlock handling with delegations
  nfsd: only fill out return pointer on success in nfsd4_lookup_stateid
  NFSD: Cap rsize_bop result based on send buffer size
  NFSD: Rename the fields in copy_stateid_t
  nfsd: use DEFINE_SHOW_ATTRIBUTE to define nfsd_file_cache_stats_fops
  nfsd: use DEFINE_SHOW_ATTRIBUTE to define nfsd_reply_cache_stats_fops
  nfsd: use DEFINE_SHOW_ATTRIBUTE to define client_info_fops
  nfsd: use DEFINE_SHOW_ATTRIBUTE to define export_features_fops and supported_enctypes_fops
  nfsd: use DEFINE_PROC_SHOW_ATTRIBUTE to define nfsd_proc_ops
  NFSD: Pack struct nfsd4_compoundres
  NFSD: Remove unused nfsd4_compoundargs::cachetype field
  NFSD: Remove "inline" directives on op_rsize_bop helpers
  NFSD: Clean up nfs4svc_encode_compoundres()
  NFSD: Clean up WRITE arg decoders
  NFSD: Use xdr_inline_decode() to decode NFSv3 symlinks
  NFSD: Refactor common code out of dirlist helpers
  NFSD: Reduce amount of struct nfsd4_compoundargs that needs clearing
  SUNRPC: Parametrize how much of argsize should be zeroed
  NFSD: add shrinker to reap courtesy clients on low memory condition
  NFSD: keep track of the number of courtesy clients in the system
  NFSD: Make nfsd4_remove() wait before returning NFS4ERR_DELAY
  NFSD: Make nfsd4_rename() wait before returning NFS4ERR_DELAY
  NFSD: Make nfsd4_setattr() wait before returning NFS4ERR_DELAY
  NFSD: Refactor nfsd_setattr()
  NFSD: Add a mechanism to wait for a DELEGRETURN
  NFSD: Add tracepoints to report NFSv4 callback completions
  NFSD: Trace NFSv4 COMPOUND tags
  NFSD: Replace dprintk() call site in fh_verify()
  nfsd: remove nfsd4_prepare_cb_recall() declaration
  nfsd: clean up mounted_on_fileid handling
  NFSD: drop fname and flen args from nfsd_create_locked()
  NFSD: Increase NFSD_MAX_OPS_PER_COMPOUND
  nfsd: Propagate some error code returned by memdup_user()
  nfsd: Avoid some useless tests
  NFSD: remove redundant variable status
  NFSD enforce filehandle check for source file in COPY
  lockd: move from strlcpy with unused retval to strscpy
  NFSD: move from strlcpy with unused retval to strscpy
  nfsd_splice_actor(): handle compound pages
  NFSD: fix regression with setting ACLs.
  NFSD: discard fh_locked flag and fh_lock/fh_unlock
  NFSD: use (un)lock_inode instead of fh_(un)lock for file operations
  NFSD: use explicit lock/unlock for directory ops
  NFSD: reduce locking in nfsd_lookup()
  NFSD: only call fh_unlock() once in nfsd_link()
  NFSD: always drop directory lock in nfsd_unlink()
  NFSD: change nfsd_create()/nfsd_symlink() to unlock directory before returning.
  NFSD: add posix ACLs to struct nfsd_attrs
  NFSD: add security label to struct nfsd_attrs
  NFSD: set attributes when creating symlinks
  NFSD: introduce struct nfsd_attrs
  NFSD: verify the opened dentry after setting a delegation
  NFSD: drop fh argument from alloc_init_deleg
  NFSD: Move copy offload callback arguments into a separate structure
  NFSD: Add nfsd4_send_cb_offload()
  NFSD: Remove kmalloc from nfsd4_do_async_copy()
  NFSD: Refactor nfsd4_do_copy()
  NFSD: Refactor nfsd4_cleanup_inter_ssc() (2/2)
  NFSD: Refactor nfsd4_cleanup_inter_ssc() (1/2)
  NFSD: Replace boolean fields in struct nfsd4_copy
  NFSD: Make nfs4_put_copy() static
  NFSD: Reorder the fields in struct nfsd4_op
  NFSD: Shrink size of struct nfsd4_copy
  NFSD: Shrink size of struct nfsd4_copy_notify
  NFSD: nfserrno(-ENOMEM) is nfserr_jukebox
  NFSD: Fix strncpy() fortify warning
  NFSD: Clean up nfsd4_encode_readlink()
  NFSD: Use xdr_pad_size()
  NFSD: Simplify starting_len
  NFSD: Optimize nfsd4_encode_readv()
  NFSD: Add an nfsd4_read::rd_eof field
  NFSD: Clean up SPLICE_OK in nfsd4_encode_read()
  NFSD: Optimize nfsd4_encode_fattr()
  NFSD: Optimize nfsd4_encode_operation()
  nfsd: silence extraneous printk on nfsd.ko insertion
  NFSD: limit the number of v4 clients to 1024 per 1GB of system memory
  NFSD: keep track of the number of v4 clients in the system
  NFSD: refactoring v4 specific code to a helper in nfs4state.c
  NFSD: Ensure nf_inode is never dereferenced
  NFSD: NFSv4 CLOSE should release an nfsd_file immediately
  NFSD: Move nfsd_file_trace_alloc() tracepoint
  NFSD: Separate tracepoints for acquire and create
  NFSD: Clean up unused code after rhashtable conversion
  NFSD: Convert the filecache to use rhashtable
  NFSD: Set up an rhashtable for the filecache
  NFSD: Replace the "init once" mechanism
  NFSD: Remove nfsd_file::nf_hashval
  NFSD: nfsd_file_hash_remove can compute hashval
  NFSD: Refactor __nfsd_file_close_inode()
  NFSD: nfsd_file_unhash can compute hashval from nf->nf_inode
  NFSD: Remove lockdep assertion from unhash_and_release_locked()
  NFSD: No longer record nf_hashval in the trace log
  NFSD: Never call nfsd_file_gc() in foreground paths
  NFSD: Fix the filecache LRU shrinker
  NFSD: Leave open files out of the filecache LRU
  NFSD: Trace filecache LRU activity
  NFSD: WARN when freeing an item still linked via nf_lru
  NFSD: Hook up the filecache stat file
  NFSD: Zero counters when the filecache is re-initialized
  NFSD: Record number of flush calls
  NFSD: Report the number of items evicted by the LRU walk
  NFSD: Refactor nfsd_file_lru_scan()
  NFSD: Refactor nfsd_file_gc()
  NFSD: Add nfsd_file_lru_dispose_list() helper
  NFSD: Report average age of filecache items
  NFSD: Report count of freed filecache items
  NFSD: Report count of calls to nfsd_file_acquire()
  NFSD: Report filecache LRU size
  NFSD: Demote a WARN to a pr_warn()
  nfsd: remove redundant assignment to variable len
  NFSD: Fix space and spelling mistake
  NFSD: Instrument fh_verify()
  NLM: Defend against file_lock changes after vfs_test_lock()
  fsnotify: Fix comment typo
  fanotify: introduce FAN_MARK_IGNORE
  fanotify: cleanups for fanotify_mark() input validations
  fanotify: prepare for setting event flags in ignore mask
  fs: inotify: Fix typo in inotify comment
  NFSD: Decode NFSv4 birth time attribute
  fanotify: refine the validation checks on non-dir inode mask
  NFS: restore module put when manager exits.
  NFSD: Fix potential use-after-free in nfsd_file_put()
  NFSD: nfsd_file_put() can sleep
  NFSD: Add documenting comment for nfsd4_release_lockowner()
  NFSD: Modernize nfsd4_release_lockowner()
  nfsd: Fix null-ptr-deref in nfsd_fill_super()
  nfsd: Unregister the cld notifier when laundry_wq create failed
  SUNRPC: Use RMW bitops in single-threaded hot paths
  NFSD: Trace filecache opens
  NFSD: Move documenting comment for nfsd4_process_open2()
  NFSD: Fix whitespace
  NFSD: Remove dprintk call sites from tail of nfsd4_open()
  NFSD: Instantiate a struct file when creating a regular NFSv4 file
  NFSD: Clean up nfsd_open_verified()
  NFSD: Remove do_nfsd_create()
  NFSD: Refactor NFSv4 OPEN(CREATE)
  NFSD: Refactor NFSv3 CREATE
  NFSD: Refactor nfsd_create_setattr()
  NFSD: Avoid calling fh_drop_write() twice in do_nfsd_create()
  NFSD: Clean up nfsd3_proc_create()
  NFSD: Show state of courtesy client in client info
  NFSD: add support for lock conflict to courteous server
  fs/lock: add 2 callbacks to lock_manager_operations to resolve conflict
  fs/lock: add helper locks_owner_has_blockers to check for blockers
  NFSD: move create/destroy of laundry_wq to init_nfsd and exit_nfsd
  NFSD: add support for share reservation conflict to courteous server
  NFSD: add courteous server support for thread with only delegation
  NFSD: Clean up nfsd_splice_actor()
  fanotify: fix incorrect fmode_t casts
  fsnotify: consistent behavior for parent not watching children
  fsnotify: introduce mark type iterator
  fanotify: enable "evictable" inode marks
  fanotify: use fsnotify group lock helpers
  fanotify: implement "evictable" inode marks
  fanotify: factor out helper fanotify_mark_update_flags()
  fanotify: create helper fanotify_mark_user_flags()
  fsnotify: allow adding an inode mark without pinning inode
  dnotify: use fsnotify group lock helpers
  nfsd: use fsnotify group lock helpers
  inotify: use fsnotify group lock helpers
  fsnotify: create helpers for group mark_mutex lock
  fsnotify: make allow_dups a property of the group
  fsnotify: pass flags argument to fsnotify_alloc_group()
  inotify: move control flags from mask to mark flags
  fs/lock: documentation cleanup. Replace inode->i_lock with flc_lock.
  fanotify: do not allow setting dirent events in mask of non-dir
  nfsd: Clean up nfsd_file_put()
  nfsd: Fix a write performance regression
  fsnotify: remove redundant parameter judgment
  fsnotify: optimize FS_MODIFY events with no ignored masks
  fsnotify: fix merge with parent's ignored mask
  nfsd: fix using the correct variable for sizeof()
  NFSD: Clean up _lm_ operation names
  NFSD: Remove CONFIG_NFSD_V3
  NFSD: Move svc_serv_ops::svo_function into struct svc_serv
  NFSD: Remove svc_serv_ops::svo_module
  SUNRPC: Remove svc_shutdown_net()
  SUNRPC: Rename svc_close_xprt()
  SUNRPC: Rename svc_create_xprt()
  SUNRPC: Remove svo_shutdown method
  SUNRPC: Merge svc_do_enqueue_xprt() into svc_enqueue_xprt()
  SUNRPC: Remove the .svo_enqueue_xprt method
  NFSD: Remove NFSD_PROC_ARGS_* macros
  NFSD: Streamline the rare "found" case
  NFSD: Skip extra computation for RC_NOCACHE case
  orDate: Thu Sep 30 19:19:57 2021 -0400
  nfsd: Add support for the birth time attribute
  NFSD: Deprecate NFS_OFFSET_MAX
  fsnotify: invalidate dcache before IN_DELETE event
  NFSD: Move fill_pre_wcc() and fill_post_wcc()
  NFSD: Trace boot verifier resets
  NFSD: Rename boot verifier functions
  NFSD: Clean up the nfsd_net::nfssvc_boot field
  NFSD: Write verifier might go backwards
  nfsd: Add a tracepoint for errors in nfsd4_clone_file_range()
  NFSD: De-duplicate net_generic(SVC_NET(rqstp), nfsd_net_id)
  NFSD: Clean up nfsd_vfs_write()
  nfsd: Retry once in nfsd_open on an -EOPENSTALE return
  nfsd: Add errno mapping for EREMOTEIO
  nfsd: map EBADF
  nfsd4: add refcount for nfsd4_blocked_lock
  nfs: block notification on fs with its own ->lock
  NFSD: De-duplicate nfsd4_decode_bitmap4()
  nfsd: improve stateid access bitmask documentation
  NFSD: Combine XDR error tracepoints
  NFSD: simplify per-net file cache management
  NFSD: Fix inconsistent indenting
  NFSD: Remove be32_to_cpu() from DRC hash function
  NFS: switch the callback service back to non-pooled.
  lockd: use svc_set_num_threads() for thread start and stop
  SUNRPC: always treat sv_nrpools==1 as "not pooled"
  SUNRPC: move the pool_map definitions (back) into svc.c
  lockd: rename lockd_create_svc() to lockd_get()
  lockd: introduce lockd_put()
  lockd: move svc_exit_thread() into the thread
  lockd: move lockd_start_svc() call into lockd_create_svc()
  lockd: simplify management of network status notifiers
  lockd: introduce nlmsvc_serv
  NFSD: simplify locking for network notifier.
  SUNRPC: discard svo_setup and rename svc_set_num_threads_sync()
  NFSD: Make it possible to use svc_set_num_threads_sync
  NFSD: narrow nfsd_mutex protection in nfsd thread
  SUNRPC: use sv_lock to protect updates to sv_nrthreads.
  nfsd: make nfsd_stats.th_cnt atomic_t
  SUNRPC: stop using ->sv_nrthreads as a refcount
  SUNRPC/NFSD: clean up get/put functions.
  SUNRPC: change svc_get() to return the svc.
  NFSD: handle errors better in write_ports_addfd()
  exit: Rename module_put_and_exit to module_put_and_kthread_exit
  exit: Implement kthread_exit
  fanotify: wire up FAN_RENAME event
  fanotify: report old and/or new parent+name in FAN_RENAME event
  fanotify: record either old name new name or both for FAN_RENAME
  fanotify: record old and new parent and name in FAN_RENAME event
  fanotify: support secondary dir fh and name in fanotify_info
  fanotify: use helpers to parcel fanotify_info buffer
  fanotify: use macros to get the offset to fanotify_info buffer
  fsnotify: generate FS_RENAME event with rich information
  fanotify: introduce group flag FAN_REPORT_TARGET_FID
  fsnotify: separate mark iterator type from object type enum
  fsnotify: clarify object type argument
  ext4: fix error code saved on super block during file system abort
  nfsd4: remove obselete comment
  NFSD:fix boolreturn.cocci warning
  nfsd: update create verifier comment
  SUNRPC: Change return value type of .pc_encode
  SUNRPC: Replace the "__be32 *p" parameter to .pc_encode
  NFSD: Save location of NFSv4 COMPOUND status
  SUNRPC: Change return value type of .pc_decode
  SUNRPC: Replace the "__be32 *p" parameter to .pc_decode
  NFSD: Initialize pointer ni with NULL and not plain integer 0
  NFSD: simplify struct nfsfh
  NFSD: drop support for ancient filehandles
  NFSD: move filehandle format declarations out of "uapi".
  NFSD: Optimize DRC bucket pruning
  NFS: Move NFS protocol display macros to global header
  NFS: Move generic FS show macros to global header
  SUNRPC: Tracepoints should display tk_pid and cl_clid as a fixed-size field
  NFS: Remove unnecessary TRACE_DEFINE_ENUM()s
  docs: Document the FAN_FS_ERROR event
  ext4: Send notifications on error
  fanotify: Allow users to request FAN_FS_ERROR events
  fanotify: Emit generic error info for error event
  fanotify: Report fid info for file related file system errors
  fanotify: WARN_ON against too large file handles
  fanotify: Add helpers to decide whether to report FID/DFID
  fanotify: Wrap object_fh inline space in a creator macro
  fanotify: Support merging of error events
  fanotify: Support enqueueing of error events
  fanotify: Pre-allocate pool of error events
  fanotify: Reserve UAPI bits for FAN_FS_ERROR
  fsnotify: Support FS_ERROR event type
  fanotify: Require fid_mode for any non-fd event
  fanotify: Encode empty file handle when no inode is provided
  fanotify: Allow file handle encoding for unhashed events
  fanotify: Support null inode event in fanotify_dfid_inode
  fsnotify: Pass group argument to free_event
  fsnotify: Protect fsnotify_handle_inode_event from no-inode events
  fsnotify: Retrieve super block from the data field
  fsnotify: Add wrapper around fsnotify_add_event
  fsnotify: Add helper to detect overflow_event
  inotify: Don't force FS_IN_IGNORED
  fanotify: Split fsid check from other fid mode checks
  x86/static_call: Add support for Jcc tail-calls
  fanotify: Fold event size calculation to its own function
  x86/alternatives: Teach text_poke_bp() to patch Jcc.d32 instructions
  fsnotify: Don't insert unmergeable events in hashtable
  x86/alternatives: Introduce int3_emulate_jcc()
  fsnotify: clarify contract for create event hooks
  x86/asm: Differentiate between code and function alignment
  fsnotify: pass dentry instead of inode data
  arch: Introduce CONFIG_FUNCTION_ALIGNMENT
  fsnotify: pass data_type to fsnotify_name()
  KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests
  x86/rfds: Mitigate Register File Data Sampling (RFDS)
  Documentation/hw-vuln: Add documentation for RFDS
  x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set
  KVM/VMX: Move VERW closer to VMentry for MDS mitigation
  KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH
  x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key
  x86/entry_32: Add VERW just before userspace transition
  x86/entry_64: Add VERW just before userspace transition
  x86/bugs: Add asm helpers for executing VERW
  x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix
  KVM: arm64: Limit stage2_apply_range() batch size to largest block
  KVM: arm64: Work out supported block level at compile time
  tty: serial: imx: Fix broken RS485
  printk: Update @console_may_schedule in console_trylock_spinning()
  iommu/dma: Force swiotlb_max_mapping_size on an untrusted device
  dma-iommu: add iommu_dma_opt_mapping_size()
  dma-mapping: add dma_opt_mapping_size()
  swiotlb: Fix alignment checks when both allocation and DMA masks are present
  minmax: add umin(a, b) and umax(a, b)
  entry: Respect changes to system call number by trace_sys_enter()
  clocksource/drivers/arm_global_timer: Fix maximum prescaler value
  ACPI: CPPC: Use access_width over bit_width for system memory accesses
  xen/events: close evtchn after mapping cleanup
  i2c: i801: Avoid potential double call to gpiod_remove_lookup_table
  tee: optee: Fix kernel panic caused by incorrect error handling
  fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion
  vt: fix unicode buffer corruption when deleting characters
  mei: me: add arrow lake point H DID
  mei: me: add arrow lake point S DID
  tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled
  usb: port: Don't try to peer unused USB ports based on location
  usb: gadget: ncm: Fix handling of zero block length packets
  USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command
  ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform
  drm/i915: Check before removing mm notifier
  tracing: Use .flush() call to wake up readers
  KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region()
  xfrm: Avoid clang fortify warning in copy_to_user_tmpl()
  Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory
  netfilter: nf_tables: reject constant set with timeout
  netfilter: nf_tables: disallow anonymous set with timeout flag
  netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout
  cpufreq: brcmstb-avs-cpufreq: fix up "add check for cpufreq_cpu_get's return value"
  net: ravb: Add R-Car Gen4 support
  x86/pm: Work around false positive kmemleak report in msr_build_context()
  dm snapshot: fix lockup in dm_exception_table_exit
  drm/amd/display: Fix noise issue on HDMI AV mute
  drm/amd/display: Return the correct HDCP error code
  drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
  ahci: asm1064: asm1166: don't limit reported ports
  ahci: asm1064: correct count of reported ports
  wireguard: netlink: access device through ctx instead of peer
  wireguard: netlink: check for dangling peer via is_dead instead of empty list
  net: hns3: tracing: fix hclgevf trace event strings
  NFSD: Fix nfsd_clid_class use of __string_len() macro
  x86/CPU/AMD: Update the Zenbleed microcode revisions
  cpufreq: dt: always allocate zeroed cpumask
  nilfs2: prevent kernel bug at submit_bh_wbc()
  nilfs2: fix failure to detect DAT corruption in btree and direct mappings
  memtest: use {READ,WRITE}_ONCE in memory scanning
  drm/vc4: hdmi: do not return negative values from .get_modes()
  drm/imx/ipuv3: do not return negative values from .get_modes()
  drm/exynos: do not return negative values from .get_modes()
  drm/panel: do not return negative error codes from drm_panel_get_modes()
  s390/zcrypt: fix reference counting on zcrypt card objects
  soc: fsl: qbman: Use raw spinlock for cgr_lock
  soc: fsl: qbman: Add CGR update function
  soc: fsl: qbman: Add helper for sanity checking cgr ops
  soc: fsl: qbman: Always disable interrupts when taking cgr_lock
  ring-buffer: Use wait_event_interruptible() in ring_buffer_wait()
  ring-buffer: Fix full_waiters_pending in poll
  ring-buffer: Fix resetting of shortest_full
  ring-buffer: Do not set shortest_full when full target is hit
  ring-buffer: Fix waking up ring buffer readers
  ksmbd: retrieve number of blocks using vfs_getattr in set_file_allocation_info
  vfio/platform: Disable virqfds on cleanup
  PCI: dwc: endpoint: Fix advertised resizable BAR size
  kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
  nfs: fix UAF in direct writes
  PCI/AER: Block runtime suspend when handling errors
  speakup: Fix 8bit characters from direct synth
  usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
  phy: tegra: xusb: Add API to retrieve the port number of phy
  slimbus: core: Remove usage of the deprecated ida_simple_xx() API
  nvmem: meson-efuse: fix function pointer type mismatch
  ext4: fix corruption during on-line resize
  hwmon: (amc6821) add of_match table
  landlock: Warn once if a Landlock action is requested while disabled
  drm/etnaviv: Restore some id values
  mmc: core: Fix switch on gp3 partition
  mm: swap: fix race between free_swap_and_cache() and swapoff()
  swap: comments get_swap_device() with usage rule
  mac802154: fix llsec key resources release in mac802154_llsec_key_del
  dm-raid: fix lockdep waring in "pers->hot_add_disk"
  PCI/DPC: Quirk PIO log size for Intel Raptor Lake Root Ports
  PCI/DPC: Quirk PIO log size for certain Intel Root Ports
  PCI/ASPM: Make Intel DG2 L1 acceptable latency unlimited
  PCI: Work around Intel I210 ROM BAR overlap defect
  PCI/PM: Drain runtime-idle callbacks before driver removal
  PCI: Drop pci_device_remove() test of pci_dev->driver
  btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
  serial: Lock console when calling into driver before registration
  printk/console: Split out code that enables default console
  usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
  fuse: don't unhash root
  fuse: fix root lookup with nonzero generation
  mmc: tmio: avoid concurrent runs of mmc_request_done()
  PM: sleep: wakeirq: fix wake irq warning in system suspend
  USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
  USB: serial: option: add MeiG Smart SLM320 product
  USB: serial: cp210x: add ID for MGP Instruments PDS100
  USB: serial: add device ID for VeriFone adapter
  USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
  powerpc/fsl: Fix mfpmr build errors with newer binutils
  usb: xhci: Add error handling in xhci_map_urb_for_dma
  clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
  clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
  clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
  clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
  PM: suspend: Set mem_sleep_current during kernel command line setup
  parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
  parisc: Fix csum_ipv6_magic on 64-bit systems
  parisc: Fix csum_ipv6_magic on 32-bit systems
  parisc: Fix ip_fast_csum
  parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros
  mtd: rawnand: meson: fix scrambling mode value in command macro
  ubi: correct the calculation of fastmap size
  ubi: Check for too small LEB size in VTBL code
  ubifs: Set page uptodate in the correct place
  fat: fix uninitialized field in nostale filehandles
  bounds: support non-power-of-two CONFIG_NR_CPUS
  kasan/test: avoid gcc warning for intentional overflow
  kasan: test: add memcpy test that avoids out-of-bounds write
  block: Clear zone limits for a non-zoned stacked queue
  ext4: correct best extent lstart adjustment logic
  selftests/mqueue: Set timeout to 180 seconds
  crypto: qat - resolve race condition during AER recovery
  crypto: qat - fix double free during reset
  sparc: vDSO: fix return value of __setup handler
  sparc64: NMI watchdog: fix return value of __setup handler
  KVM: Always flush async #PF workqueue when vCPU is being destroyed
  media: xc4000: Fix atomicity violation in xc4000_get_frequency
  pci_iounmap(): Fix MMIO mapping leak
  drm/vmwgfx: Fix possible null pointer derefence with invalid contexts
  arm: dts: marvell: Fix maxium->maxim typo in brownstone dts
  smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
  smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
  clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
  media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
  wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
  timers: Rename del_timer_sync() to timer_delete_sync()
  timers: Use del_timer_sync() even on UP
  timers: Update kernel-doc for various functions
  KVM: x86: Use a switch statement and macros in __feature_translate()
  KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace
  KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs
  x86/bugs: Use sysfs_emit()
  x86/cpu: Support AMD Automatic IBRS
  Documentation/hw-vuln: Update spectre doc

 Conflicts:
	Documentation/devicetree/bindings
	Documentation/devicetree/bindings/i2c/google,cros-ec-i2c-tunnel.yaml
	Documentation/devicetree/bindings/iio/health/maxim,max30102.yaml
	Documentation/devicetree/bindings/media/i2c/ovti,ov2680.yaml
	Documentation/devicetree/bindings/pci/rcar-pci-host.yaml
	Documentation/devicetree/bindings/pinctrl/mediatek,mt7622-pinctrl.yaml
	Documentation/devicetree/bindings/soc/rockchip/grf.yaml
	Documentation/devicetree/bindings/sound/rt5645.txt
	Documentation/devicetree/bindings/thermal/thermal-zones.yaml
	drivers/clk/qcom/gcc-sdm845.c
	drivers/mmc/host/sdhci-msm.c
	drivers/net/usb/ax88179_178a.c
	drivers/scsi/ufs/ufs-qcom.c
	drivers/scsi/ufs/ufs-qcom.h
	drivers/slimbus/qcom-ngd-ctrl.c
	drivers/soc/qcom/cmd-db.c
	drivers/soc/qcom/rpmh-rsc.c
	drivers/soc/qcom/rpmh.c
	drivers/spi/spidev.c
	include/soc/qcom/cmd-db.h
	net/qrtr/ns.c

Change-Id: I83cb208d2b988e8ceb0eeccdc35da1354838b9ba
Signed-off-by: Sivasri Kumar, Vanka <quic_svanka@quicinc.com>

Dumping all dma-buf objects is using a mutex and if this
is called in atomic context we can see a scheduling while
atomic error with the following callstack:

[] queued_spin_lock_slowpath+0x1b8
[] _raw_spin_lock[jt]+0x30
[] __schedule+0xc0
[] schedule+0x7c
[] schedule_preempt_disabled+0x24
[] __ww_mutex_lock+0x5c4
[] __ww_mutex_lock_slowpath+0x18
[] ww_mutex_lock[jt]+0x88
[] dump_bufinfo[minidump]+0x50
[] dma_buf_get_each+0x70
[] md_dump_memory[minidump]+0xf4c
[] md_dump_process[minidump]+0x8ec
[] md_panic_handler[minidump]+0x10

Just skip dumping dma-buf objects if we are running in atomic
context.

[quic_cgoldswo@quicinc.com: replace in_atomic() with preemption count]
Change-Id: I430c040fbfb047a0adc04080373662c3734888ae
Signed-off-by: Georgi Djakov <quic_c_gdjako@quicinc.com>
Signed-off-by: Vishnu Teja <quic_vteja@quicinc.com>
Signed-off-by: Chris Goldsworthy <quic_cgoldswo@quicinc.com>

Currently, in uaudio_disconnect, the interface variable is still
accessed from uaudio_dbg print after being freed. This can cause a NULL
pointer dereference since the variable is already freed.

Fix this by moving the print inside uaudio_dev_intf_cleanup, which
already has a gating check and will print it only if the interface is
valid.

Change-Id: I10338a165a6897c98926be722ed9eaac3c54ace5
Signed-off-by: Udipto Goswami <quic_ugoswami@quicinc.com>

There is possibility that network will be used after free.
This change is to fix this issue.

Change-Id: I2368532df4fc4e75e8d8f2f259a989b5af5f9679
Signed-off-by: Gao Wang <quic_gaowang@quicinc.com>
(cherry picked from commit 4cfe408f)
Signed-off-by: Brahmaiah <quic_bgunturu@quicinc.com>

A persistence map is expected to hold refs=2 during its creation.
However, the Fuzzy test can create a persistence map by configuring
a mismatch between attributes and flags using the KEEP MAP attribute
and FD NOMAP flags. This sets the map reference count to 1. The user
then calls fastrpc_internal_munmap_fd to free the map since it
doesn't check flags, which can cause a use-after-free (UAF) for the
file map and shared buffer. Add a check to restrict DMA handle
maps with invalid attributes.

Change-Id: I2f024ef99cc2a0487010504166e3af3433d5302d
Acked-by: Santosh <quic_ssakore@quicinc.com>
Signed-off-by: Anand Kulkarni <quic_anankulk@quicinc.com>
(cherry picked from commit 56cd0e3a)

Change-Id: I611b4f9616ce5ad2fd7fef241fa3be3887d942f5

Added build.config for bengal LE platform.

Change-Id: I0fb8ed80a74e08af82cb19edcc9e0b60476fe5aa
Signed-off-by: Asit Shah <quic_asitshah@quicinc.com>

Added module files for Bengal LE platform.

Change-Id: Ieb3fbad4cb7a84f98b57f0121772f173a30b79aa
Signed-off-by: Asit Shah <quic_asitshah@quicinc.com>