- Mar 28, 2025
-
-
Faisal Hassan authored
Check if dwc is NULL before accessing dwc->num_ports in the dwc3_qcom_suspend function. Prevent a potential NULL pointer dereference when the dwc structure is not properly initialized. Change-Id: I0e673ddd59946e9c1a67d3de09db78653c0645bc Signed-off-by:
Faisal Hassan <faisal.hassan@oss.qualcomm.com>
-
- Mar 25, 2025
-
-
Linux Build Service Account authored
-
- Mar 21, 2025
-
-
Krishna Kurapati authored
Add Multiport support for USB controller Refactor PHY logic to support Multiport Controller Add multiport controller support for qcom wrapper Update MP support for dwc3-msm wrapper. Change-Id: I9f7804434d5909dee2d976026e030cd9ba7a0f43 Signed-off-by:
Krishna Kurapati <quic_kriskura@quicinc.com> Signed-off-by:
Selvarasu Ganesan <quic_selvaras@quicinc.com> Signed-off-by:
Sriram Dash <quic_sriramd@quicinc.com> Signed-off-by:
Rajashekar kuruva <quic_kuruva@quicinc.com>
-
- Mar 17, 2025
-
-
Hao Li authored
Change-Id: I105b03cd8f7770ddb513aaaf385582916a5d19cd Signed-off-by:
Hao Li <quic_haolia@quicinc.com>
-
- Feb 22, 2025
-
-
Swetha Chikkaboraiah authored
KGSL requested for arm_smmu_flush_iotlb_all which enables GPU SMMU CLOCK and same time smmu shutdown is called which disables same clock and latter in tlbi path accessing register GPU_GFX_SMMU_CBn_TLBIASID causing NOC. So do not disable the clock in shutdown path. Change-Id: I2a0660b476690d632ba812d893a3522899f1973d Signed-off-by:
Swetha Chikkaboraiah <quic_schikk@quicinc.com> Signed-off-by:
Deepak Suresh <quic_deesur@quicinc.com>
-
- Feb 21, 2025
-
-
Linux Build Service Account authored
Change-Id: Ia301ac6598176ec063af9b18ee2336a79ac6ef83
-
- Feb 20, 2025
-
-
QCTECMDR Service authored
-
Jaswanth Gundpalli authored
lts tag android13-5.15_144 introduced the dependency for DWMAC_LOONGSON on MACH_LOONGSON64 hence this configuration brought up the difference between gki and msm gen3auto configs,since STMMAC is being enabled for gen3auto. For mobile targets these all net drivers are disabled so removed this config as it is not NA for auto targets also. Change-Id: I48cea4883d1d97863da98738c4d63fc85e264ef3 Signed-off-by:
Madhu Ananthula <quic_mananthu@quicinc.com> (cherry picked from commit a4a6e50e) Signed-off-by:
Jaswanth Gundpalli <quic_jgundpal@quicinc.com>
-
- Feb 19, 2025
-
-
QCTECMDR Service authored
-
- Feb 17, 2025
-
-
Jaswanth Gundpalli authored
* refs/heads/tmp-a3a0d152: Revert "UPSTREAM: unicode: Don't special case ignorable code points" Revert "ANDROID: mm: Fix SPF-aware fast-mremap" UPSTREAM: HID: core: zero-initialize the report buffer ANDROID: mm: Fix SPF-aware fast-mremap BACKPORT: FROMGIT: binder: add delivered_freeze to debugfs output BACKPORT: FROMGIT: binder: fix memleak of proc->delivered_freeze FROMGIT: binder: allow freeze notification for dead nodes FROMGIT: binder: fix BINDER_WORK_CLEAR_FREEZE_NOTIFICATION debug logs FROMGIT: binder: fix BINDER_WORK_FROZEN_BINDER debug logs BACKPORT: FROMGIT: binder: fix freeze UAF in binder_release_work() FROMGIT: binder: fix OOB in binder_add_freeze_work() FROMGIT: binder: fix node UAF in binder_add_freeze_work() UPSTREAM: USB: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format ANDROID: GKI: Add additional symbols for honor ANDROID: Update abi_gki_aarch64_qcom symbol list ANDROID: GKI: Update symbol list for honor UPSTREAM: dma-buf: heaps: Fix off-by-one in CMA heap fault handler ANDROID: ABI: update symbol list for honor ANDROID: fs: add vendor hook to collect IO statistics Revert "drm/mipi-dsi: Set the fwnode for mipi_dsi_device" ANDROID: GKI: Update symbol list for mtk Revert "drm/mipi-dsi: Set the fwnode for mipi_dsi_device" ANDROID: Fix kernelci build-break ANDROID: GKI: Update symbol list for mtk BACKPORT: firmware: arm_scmi: Queue in scmi layer for mailbox implementation UPSTREAM: PCI/ASPM: Restore parent state to parent, child state to child BACKPORT: PCI/ASPM: Disable L1 before configuring L1 Substates UPSTREAM: PCI/ASPM: Call pci_save_ltr_state() from pci_save_pcie_state() BACKPORT: PCI/ASPM: Save L1 PM Substates Capability for suspend/resume BACKPORT: PCI/ASPM: Move pci_save_ltr_state() to aspm.c BACKPORT: PCI/ASPM: Move pci_configure_ltr() to aspm.c BACKPORT: gso: fix udp gso fraglist segmentation after pull from frag_list ANDROID: usb: Optimization the transfer rate of accessory mode in USB3.2 mode ANDROID: KVM: arm64: Don't run a protected VCPU if it isn't runnable ANDROID: GKI: add init symbol list file for vivo ANDROID: ABI: add device_property_match_string to abi symbol list UPSTREAM: blk-mq: avoid extending delays of active hctx from blk_mq_delay_run_hw_queues ANDROID: ABI: update symbol list for honor ANDROID: GKI: Add patch that uses vendor hook define for Honor ANDROID: GKI: Update symbol list for honor ANDROID: Allow vendor modules perform more operationson on sock. BACKPORT: exfat: Implement sops->shutdown and ioctl UPSTREAM: unicode: Don't special case ignorable code points UPSTREAM: unicode: Don't special case ignorable code points ANDROID: 16K: Fixup padding vm_flags bits on VMA splits ANDROID: 16K: Introduce pgsize_migration_inline.h ANDROID: abi_gki_aarch64_qcom: Update QCOM symbol list Revert "perf/aux: Fix AUX buffer serialization" Revert "hwspinlock: Introduce hwspin_lock_bust()" Revert "clocksource/drivers/timer-of: Remove percpu irq related code" Revert "bareudp: Fix device stats updates." Revert "fuse: fix UAF in rcu pathwalks" Revert "net: stmmac: Enable mac_managed_pm phylink config" Revert "genirq: Allow irq_chip registration functions to take a const irq_chip" Revert "sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE tasks" Revert "genirq: Allow the PM device to originate from irq domain" ANDROID: fix up ABI breakage due to new arm64 errata Revert "irqchip/imx-irqsteer: Constify irq_chip struct" Revert "irqchip/imx-irqsteer: Add runtime PM support" Revert "irqchip/imx-irqsteer: Handle runtime power management correctly" Revert "leds: trigger: use RCU to protect the led_cdevs list" Revert "leds: trigger: Remove unused function led_trigger_rename_static()" Revert "leds: trigger: Store brightness set by led_trigger_event()" Revert "leds: trigger: Call synchronize_rcu() before calling trig->activate()" Revert "leds: triggers: Flush pending brightness before activating trigger" Revert "scsi: core: Fix a use-after-free" Revert "net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD()" Revert "net: inline sock_prot_inuse_add()" Revert "net: drop nopreempt requirement on sock_prot_inuse_add()" Revert "ipv6: annotate some data-races around sk->sk_prot" Revert "ipv6: Fix data races around sk->sk_prot." Revert "tcp: Fix data races around icsk->icsk_af_ops." Revert "af_unix: Annotate data-race of sk->sk_state in unix_stream_connect()." Revert "i2c: add fwnode APIs" Revert "i2c: acpi: Unbind mux adapters before delete" Revert "tcp: Use BPF timeout setting for SYN ACK RTO" Revert "Fix race for duplicate reqsk on identical SYN" Revert "KVM: arm64: vgic-v4: Make the doorbell request robust w.r.t preemption" Revert "mmc: davinci_mmc: Convert to platform remove callback returning void" Revert "mmc: davinci: Don't strip remove function when driver is builtin" Revert "Input: ioc3kbd - convert to platform remove callback returning void" UPSTREAM: f2fs: fix to update i_ctime in __f2fs_setxattr() BACKPORT: f2fs: Create COW inode from parent dentry for atomic write BACKPORT: f2fs: atomic: fix to avoid racing w/ GC UPSTREAM: f2fs: remove unused PAGE_PRIVATE_ATOMIC_WRITE BACKPORT: f2fs: use meta inode for GC of COW file BACKPORT: f2fs: use meta inode for GC of atomic file UPSTREAM: f2fs: truncate page cache before clearing flags when aborting atomic write UPSTREAM: f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation UPSTREAM: f2fs: prevent atomic file from being dirtied before commit UPSTREAM: f2fs: mark inode dirty for FI_ATOMIC_COMMITTED flag ANDROID: GKI: Export a symbol “next_arg” for honor BACKPORT: netem: fix return value if duplicate enqueue fails ANDROID: arm64: call vendor hook in reworked handers Revert "drm/mipi-dsi: use correct return type for the DSC functions" Revert "media: cec: call enable_adap on s_log_addrs" Revert "media: cec: abort if the current transmit was canceled" Revert "media: cec: correctly pass on reply results" Revert "media: cec: use call_op and check for !unregistered" Revert "media: cec-adap.c: drop activate_cnt, use state info instead" Revert "media: cec: core: avoid confusing "transmit timed out" message" Revert "media: cec: core: avoid recursive cec_claim_log_addrs" Revert "media: cec: core: add adap_nb_transmit_canceled() callback" Linux 5.15.167 udp: fix receiving fraglist GSO packets memcg: protect concurrent access to mem_cgroup_idr btrfs: fix race between direct IO write and fsync when using same fd net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket x86/mm: Fix PTI for i386 some more net: drop bad gso csum_start and offset in virtio_net_hdr gso: fix dodgy bit handling for GSO_UDP_L4 net: change maximum number of UDP segments to 128 net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation gpio: rockchip: fix OF node leak in probe() drm/i915/fence: Mark debug_fence_free() with __maybe_unused drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode nvmet-tcp: fix kernel crash if commands allocation fails arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry arm64: acpi: Move get_cpu_for_acpi_id() to a header ACPI: processor: Fix memory leaks in error paths of processor_add() ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add() workqueue: Improve scalability of workqueue watchdog touch workqueue: wq_watchdog_touch is always called with valid CPU nilfs2: protect references to superblock parameters exposed in sysfs nilfs2: replace snprintf in show functions with sysfs_emit ksmbd: Unlock on in ksmbd_tcp_set_interfaces() ksmbd: unset the binding mark of a reused connection perf/aux: Fix AUX buffer serialization uprobes: Use kzalloc to allocate xol area clocksource/drivers/timer-of: Remove percpu irq related code clocksource/drivers/imx-tpm: Fix next event not taking effect sometime clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX VMCI: Fix use-after-free when removing resource in vmci_resource_remove() Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc binder: fix UAF caused by offsets overwrite usb: dwc3: core: update LC timer as per USB Spec V3.2 iio: adc: ad7124: fix chip ID mismatch iio: adc: ad7124: fix config comparison iio: fix scale application in iio_convert_raw_to_processed_unlocked iio: buffer-dmaengine: fix releasing dma channel on error staging: iio: frequency: ad9834: Validate frequency parameter value cifs: Check the lease context if we actually got a lease NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations ata: pata_macio: Use WARN instead of BUG MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() of/irq: Prevent device address out-of-bounds read in interrupt map walk Squashfs: sanity check symbolic link size usbnet: ipheth: race between ipheth_close and error handling Input: uinput - reject requests with unreasonable number of slots HID: amd_sfh: free driver_data after destroying hid device HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup s390/vmlinux.lds.S: Move ro_after_init section behind rodata section btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry() kselftests: dmabuf-heaps: Ensure the driver name is null-terminated i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup net: dpaa: avoid on-stack arrays of NR_CPUS elements PCI: Add missing bridge lock to pci_bus_lock() riscv: set trap vector earlier btrfs: replace BUG_ON() with error handling at update_ref_for_cow() btrfs: clean up our handling of refs == 0 in snapshot delete btrfs: replace BUG_ON with ASSERT in walk_down_proc() fs/ntfs3: Check more cases when directory is corrupted smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu() wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() dma-mapping: benchmark: Don't starve others when doing the test ext4: fix possible tid_t sequence overflows drm/amdgpu: Set no_hw_access when VF request full GPU fails libbpf: Add NULL checks to bpf_object__{prev_map,next_map} hwmon: (w83627ehf) Fix underflows seen when writing limit attributes hwmon: (nct6775-core) Fix underflows seen when writing limit attributes hwmon: (lm95234) Fix underflows seen when writing limit attributes hwmon: (adc128d818) Fix underflows seen when writing limit attributes pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv devres: Initialize an uninitialized struct member um: line: always fill *error_out in setup_one_line() cgroup: Protect css->cgroup write under css_set_lock iommu/vt-d: Handle volatile descriptor status read dm init: Handle minors larger than 255 ASoC: topology: Properly initialize soc_enum values net: dsa: vsc73xx: fix possible subblocks range of CAPT block net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN fou: Fix null-ptr-deref in GRO. gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers gro: remove rcu_read_lock/rcu_read_unlock from gro_receive handlers bareudp: Fix device stats updates. usbnet: modern method to get random MAC net: usb: don't write directly to netdev->dev_addr ice: check ICE_VSI_DOWN under rtnl_lock when preparing for reset igc: Unlock on error in igc_io_resume() tcp_bpf: fix return value of tcp_bpf_sendmsg() platform/x86: dell-smbios: Fix error path in dell_smbios_init() igb: Fix not clearing TimeSync interrupts for 82580 can: m_can: Release irq on error in m_can_open can: bcm: Remove proc entry when dev is unregistered. drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6 pcmcia: Use resource_size function on resource object media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) media: vivid: don't set HDMI TX controls if there are no HDMI outputs drm/amd/display: Check HDCP returned status usb: uas: set host status byte on data completion error wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3 leds: spi-byte: Call of_node_put() on error path media: vivid: fix wrong sizeimage value for mplane udf: Avoid excessive partition lengths netfilter: nf_conncount: fix wrong variable type iommu: sun50i: clear bypass register af_unix: Remove put_pid()/put_cred() in copy_peercred(). irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1 smack: unix sockets: fix accept()ed socket label ALSA: hda: Add input value sanity checks to HDMI channel map controls mptcp: pm: send ACK on an active subflow mptcp: pr_debug: add missing \n at the end mptcp: pm: skip connecting to already established sf mptcp: pm: do not remove already closed subflows mptcp: pm: ADD_ADDR 0 is not a new address mptcp: close subflow when receiving TCP+FIN mptcp: avoid duplicated SUB_CLOSED events mptcp: pm: avoid possible UaF when selecting endp mptcp: constify a bunch of of helpers mptcp: pm: fullmesh: select the right ID later mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR mptcp: pm: only decrement add_addr_accepted for MPJ req mptcp: pm: re-using ID of unused flushed subflows nilfs2: fix state management in error path of log writing function nilfs2: fix missing cleanup on rollforward recovery error sched: sch_cake: fix bulk flow accounting logic for host fairness ila: call nf_unregister_net_hooks() sooner tracing: Avoid possible softlockup in tracing_iter_reset() can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API clk: qcom: clk-alpha-pll: Fix the pll post div mask fuse: use unsigned type for getxattr/listxattr size truncation fuse: update stats for pages in dropped aux writeback list mmc: cqhci: Fix checking of CQHCI_HALT state mmc: sdhci-of-aspeed: fix module autoloading mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K Bluetooth: MGMT: Ignore keys being loaded with invalid type Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE" nvme-pci: Add sleep quirk for Samsung 990 Evo rtmutex: Drop rt_mutex::wait_lock before scheduling irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init() ata: libata: Fix memory leak for error path in ata_host_alloc() ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx ALSA: hda/realtek: add patch for internal mic in Lenovo V145 ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object sch/netem: fix use after free in netem_dequeue i2c: Use IS_REACHABLE() for substituting empty ACPI functions ext4: handle redirtying in ext4_bio_write_page() udf: Limit file size to 4TB ext4: reject casefold inode flag without casefold feature rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow virtio_net: Fix napi_skb_cache_put warning drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr media: uvcvideo: Enforce alignment of frame and interval drm/amd/display: Skip wbscl_set_scaler_filter if filter is null block: remove the blk_flush_integrity call in blk_integrity_unregister wifi: cfg80211: make hash table duplicates more survivable drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ drm/meson: plane: Add error handling smack: tcp: ipv4, fix incorrect labeling fsnotify: clear PARENT_WATCHED flags lazily usb: typec: ucsi: Fix null pointer dereference in trace usbip: Don't submit special requests twice rcu/nocb: Remove buggy bypass lock contention mitigation ionic: fix potential irq name truncation RDMA/efa: Properly handle unexpected AQ completions hwspinlock: Introduce hwspin_lock_bust() PCI: al: Check IORESOURCE_BUS existence during probe cpufreq: scmi: Avoid overflow of target_freq in fast switch wifi: iwlwifi: remove fw_running op drm/amdgpu: update type of buf size to u32 for eeprom functions drm/amd/pm: check negtive return for table entries drm/amdgpu: the warning dereferencing obj for nbio_v7_4 drm/amd/pm: check specific index for aldebaran drm/amdgpu: fix the waring dereferencing hive drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs apparmor: fix possible NULL pointer dereference drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device drm/amdgpu: fix mc_data out-of-bounds read warning drm/amdgpu: fix ucode out-of-bounds read warning drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number drm/amdgpu: Fix out-of-bounds write warning drm/amdgpu/pm: Fix uninitialized variable agc_btc_response drm/amdgpu/pm: Fix uninitialized variable warning for smu10 drm/amd/amdgpu: Check tbo resource pointer drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create drm/amd/display: Check msg_id before processing transcation drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] drm/amd/display: Add array index check for hdcp ddc access drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 drm/amd/display: Check gpio_id before used as array index drm/amdgpu: avoid reading vf2pf info size from FB drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr drm/amdgpu: fix uninitialized scalar variable warning drm/amd/pm: fix the Out-of-bounds read warning drm/amd/pm: fix warning using uninitialized value of max_vid_step drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc drm/amdgpu: fix overflowed array index read warning drm/amd/display: Assign linear_pitch_alignment even for VM drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr net: usb: qmi_wwan: add MeiG Smart SRM825L dma-debug: avoid deadlock between dma debug vs printk and netconsole i2c: Fix conditional for substituting empty ACPI functions ALSA: hda/conexant: Mute speakers at suspend / shutdown ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown drm: panel-orientation-quirks: Add quirk for OrangePi Neo UPSTREAM: f2fs: fix to do sanity check in update_sit_entry UPSTREAM: netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type Revert "binder: fix max_thread type inconsistency" ANDROID: gki_config: Disable CONFIG_DEBUG_STACK_USAGE ANDROID: delete tool added by mistake Revert "bpf, sockmap: Convert schedule_work into delayed_work" Revert "bpf, sockmap: Reschedule is now done through backlog" Revert "bpf, sockmap: Improved check for empty queue" ANDROID: Update abi_gki_aarch64_qcom symbol list ANDROID: binder: fix KMI issues due to frozen notification BACKPORT: FROMGIT: binder: frozen notification binder_features flag BACKPORT: FROMGIT: binder: frozen notification ANDROID: usb: dwc3: Fix gadget mis-merge from upstream ANDROID: usb: dwc3: Fix gadget mis-merge from upstream ANDROID: Update abi_gki_aarch64_qcom symbol list Linux 5.15.166 apparmor: fix policy_unpack_test on big endian systems scsi: aacraid: Fix double-free on probe failure igc: Fix qbv tx latency by setting gtxoffset igc: Fix reset adapter logics when tx mode change phy: zynqmp: Enable reference clock correctly usb: cdnsp: fix for Link TRB with TC usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes() usb: dwc3: st: add missing depopulate in probe error path usb: dwc3: st: fix probed platform device ref count on probe error path usb: dwc3: core: Prevent USB core invalid event buffer address access usb: dwc3: omap: add missing depopulate in probe error path USB: serial: option: add MeiG Smart SRM825L cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller soc: qcom: cmd-db: Map shared memory as WC, not WB nfc: pn533: Add poll mod list filling check net: busy-poll: use ktime_get_ns() instead of local_clock() gtp: fix a potential NULL pointer dereference ethtool: check device is present when getting link settings dmaengine: dw: Add memory bus width verification dmaengine: dw: Add peripheral bus width verification phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume phy: xilinx: phy-zynqmp: dynamic clock support for power-save phy: xilinx: add runtime PM support PM: runtime: Add DEFINE_RUNTIME_DEV_PM_OPS() macro PM: core: Add EXPORT[_GPL]_SIMPLE_DEV_PM_OPS macros PM: core: Remove DEFINE_UNIVERSAL_DEV_PM_OPS() macro soundwire: stream: fix programming slave ports for non-continous port maps net:rds: Fix possible deadlock in rds_message_put cgroup/cpuset: Prevent UAF in proc_cpuset_show() ata: libata-core: Fix null pointer dereference on error drm/amdkfd: don't allow mapping the MMIO HDP page with large pages Revert "MIPS: Loongson64: reset: Prioritise firmware service" mptcp: sched: check both backup in retrans net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response wifi: mwifiex: duplicate static structs used in driver instances pinctrl: single: fix potential NULL dereference in pcs_get_function() pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins btrfs: run delayed iputs when flushing delalloc drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc tools: move alignment-related macros to new <linux/align.h> Input: MT - limit max slots Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO mm/numa: no task_numa_fault() call if PTE is changed mm/numa: no task_numa_fault() call if PMD is changed ALSA: timer: Relax start tick time check for slave timer elements hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt() Revert "drm/amd/display: Validate hw_points_num before using it" mmc: dw_mmc: allow biu and ciu clocks to defer KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 cxgb4: add forgotten u64 ivlan cast before shift HID: microsoft: Add rumble support to latest xbox controllers HID: wacom: Defer calculation of resolution until resolution_code is known MIPS: Loongson64: Set timer mode in cpu-probe scsi: core: Fix the return value of scsi_logical_block_count() Bluetooth: MGMT: Add error handling to pair_device() mmc: mmc_test: Fix NULL dereference on allocation failure drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails drm/msm/dp: reset the link phy params before link training drm/msm/dpu: don't play tricks with debug macros net: xilinx: axienet: Fix dangling multicast addresses net: xilinx: axienet: Always disable promiscuous mode netfilter: flowtable: validate vlan header ipv6: prevent possible UAF in ip6_xmit() ipv6: fix possible UAF in ip6_finish_output2() ipv6: prevent UAF in ip6_send_skb() netem: fix return value if duplicate enqueue fails net: dsa: mv88e6xxx: Fix out-of-bound access net: dsa: mv88e6xxx: replace ATU violation prints with trace points net: dsa: mv88e6xxx: read FID when handling ATU violations dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp() ice: fix ICE_LAST_OFFSET formula bonding: fix xfrm state handling when clearing active slave bonding: fix xfrm real_dev null pointer dereference bonding: fix null pointer deref in bond_ipsec_offload_ok bonding: fix bond_ipsec_offload_ok return type ip6_tunnel: Fix broken GRO netfilter: nft_counter: Synchronize nft_counter_reset() against reader. netfilter: nft_counter: Disable BH in nft_counter_offload_stats(). kcm: Serialise kcm_sendmsg() for the same socket. tc-testing: don't access non-existent variable on exception Bluetooth: SMP: Fix assumption of Central always being Initiator nfsd: make svc_stat per-network namespace instead of global Bluetooth: hci_core: Fix LE quote calculation nfsd: remove nfsd_stats, make th_cnt a global counter platform/surface: aggregator: Fix warning when controller is destroyed in probe nfsd: make all of the nfsd stats per-network namespace net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings dm suspend: return -ERESTARTSYS instead of -EINTR media: solo6x10: replace max(a, min(b, c)) by clamp(b, a, c) nfsd: expose /proc/net/sunrpc/nfsd in net namespaces nfsd: rename NFSD_NET_* to NFSD_STATS_* sunrpc: use the struct net as the svc proc private sunrpc: remove ->pg_stats from svc_program sunrpc: pass in the sv_stats struct through svc_create_pooled nfsd: stop setting ->pg_stats for unused stats sunrpc: don't change ->sv_stats if it doesn't exist NFSD: Fix frame size warning in svc_export_parse() NFSD: Rewrite synopsis of nfsd_percpu_counters_init() NFSD: Refactor the duplicate reply cache shrinker NFSD: Replace nfsd_prune_bucket() NFSD: Rename nfsd_reply_cache_alloc() NFSD: Refactor nfsd_reply_cache_free_locked() nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net nfsd: move reply cache initialization into nfsd startup block: use "unsigned long" for blk_validate_block_size(). gtp: pull network headers in gtp_dev_xmit() hrtimer: Prevent queuing of hrtimer without a function callback nvmet-rdma: fix possible bad dereference when freeing rsps ext4: set the type of max_zeroout to unsigned int to avoid overflow irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc usb: dwc3: core: Skip setting event buffers for host only controllers platform/x86: lg-laptop: fix %s null argument warning clocksource: Make watchdog and suspend-timing multiplication overflow safe s390/iucv: fix receive buffer virtual vs physical address confusion openrisc: Call setup_memory() earlier in the init sequence NFS: avoid infinite loop in pnfs_update_layout. nvmet-tcp: do not continue for invalid icreq net: hns3: add checking for vf id of mailbox Bluetooth: bnep: Fix out-of-bound access usb: gadget: fsl: Increase size of name buffer for endpoints f2fs: fix to do sanity check in update_sit_entry btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent() btrfs: change BUG_ON to assertion in tree_move_down() btrfs: send: handle unexpected data in header buffer in begin_cmd() btrfs: handle invalid root reference found in may_destroy_subvol() btrfs: change BUG_ON to assertion when checking for delayed_node root powerpc/boot: Only free if realloc() succeeds powerpc/boot: Handle allocation failure in simple_realloc() parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367 memory: stm32-fmc2-ebi: check regmap_read return value x86: Increase brk randomness entropy for 64-bit systems md: clean up invalid BUG_ON in md_ioctl netlink: hold nlk->cb_mutex longer in __netlink_dump_start() clocksource/drivers/arm_global_timer: Guard against division by zero virtiofs: forbid newlines in tags drm/lima: set gp bus_stop bit before hard reset net/sun3_82586: Avoid reading past buffer in debug output media: drivers/media/dvb-core: copy user arrays safely scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list() fs: binfmt_elf_efpic: don't use missing interpreter's properties media: pci: cx23885: check cx23885_vdev_init() return quota: Remove BUG_ON from dqget() fuse: fix UAF in rcu pathwalks afs: fix __afs_break_callback() / afs_drop_open_mmap() race ext4: do not trim the group with corrupted block bitmap nvmet-trace: avoid dereferencing pointer too early powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu memory: tegra: Skip SID programming if SID registers aren't set arm64: Fix KASAN random tag seed initialization hwmon: (ltc2992) Avoid division by zero IB/hfi1: Fix potential deadlock on &irq_src_lock and &dd->uctxt_lock wifi: iwlwifi: fw: Fix debugfs command sending wifi: iwlwifi: abort scan when rfkill on but device enabled gfs2: setattr_chown: Add missing initialization scsi: spi: Fix sshdr use media: qcom: venus: fix incorrect return value binfmt_misc: cleanup on filesystem umount staging: ks7010: disable bh on tx_dev_lock drm/amd/display: Validate hw_points_num before using it staging: iio: resolver: ad2s1210: fix use before initialization media: radio-isa: use dev_name to fill in bus_info i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out s390/smp,mcck: fix early IPI handling RDMA/rtrs: Fix the problem of variable not initialized fully i2c: riic: avoid potential division by zero wifi: cw1200: Avoid processing an invalid TIM IE wifi: mac80211: fix BA session teardown race wifi: cfg80211: check wiphy mutex is held for wdev mutex ssb: Fix division by zero issue in ssb_calc_clock_rate ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 net: hns3: fix a deadlock problem when config TC during resetting net: hns3: fix wrong use of semaphore up netfilter: nf_queue: drop packets with cloned unconfirmed conntracks netfilter: flowtable: initialise extack before use netfilter: allow ipv6 fragments to arrive on different devices mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size mlxbf_gige: disable RX filters until RX path initialized mlxbf_gige: Remove two unused function declarations net: dsa: vsc73xx: check busy flag in MDIO operations net: dsa: vsc73xx: use read_poll_timeout instead delay loop net: dsa: vsc73xx: pass value in phy_write operation net: axienet: Fix register defines comment description atm: idt77252: prevent use after free in dequeue_rx() net/mlx5e: Correctly report errors for ethtool rx flows igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer igc: remove I226 Qbv BaseTime restriction igc: Correct the launchtime offset s390/uv: Panic for set and remove shared access UVC errors drm/amdgpu/jpeg2: properly set atomics vmid field memcg_write_event_control(): fix a user-triggerable oops drm/amdgpu: Actually check flags for all context ops. btrfs: tree-checker: add dev extent item checks selinux: fix potential counting error in avc_add_xperms_decision() fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE bitmap: introduce generic optimized bitmap_size() btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits() s390/cio: rename bitmap_size() -> idset_bitmap_size() fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64() vfs: Don't evict inode under the inode lru traversing context dm persistent data: fix memory allocation failure dm resume: don't return EINVAL when signalled arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE s390/dasd: fix error recovery leading to data corruption on ESE devices thunderbolt: Mark XDomain as unplugged when router is removed xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration ALSA: usb-audio: Support Yamaha P-125 quirk entry ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET char: xillybus: Check USB endpoints when probing device char: xillybus: Refine workqueue handling char: xillybus: Don't destroy workqueue from work item running on it fuse: Initialize beyond-EOF page contents before setting uptodate UPSTREAM: bpf: Fix overrunning reservations in ringbuf UPSTREAM: net: sched: sch_multiq: fix possible OOB write in multiq_tune() FROMLIST: binder: fix UAF caused by offsets overwrite ANDROID: update .xml for change to struct clk_core Revert "bpf: Fix ringbuf memory type confusion when passing to helpers" ANDROID: GKI: Update symbol list for Transsion UPSTREAM: net: sched: sch_multiq: fix possible OOB write in multiq_tune() FROMLIST: binder: fix UAF caused by offsets overwrite ANDROID: Update symbols for ARCVM ANDROID: abi_gki_aarch64_qcom: Add devm_fwnode_pwm_get symbol Linux 5.15.165 Revert "ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error" media: Revert "media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()" ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values binfmt_flat: Fix corruption when not offsetting data start usb: gadget: u_audio: Check return codes from usb_ep_enable and config_ep_by_speed. nvme/pci: Add APST quirk for Lenovo N60z laptop exec: Fix ToCToU between perm check and set-uid/gid usage arm64: cpufeature: Fix the visibility of compat hwcaps arm64: dts: qcom: msm8996: correct #clock-cells for QMP PHY nodes powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt. drm/i915/gem: Fix Virtual Memory mapping boundaries calculation mptcp: fully established after ADD_ADDR echo on MPJ wifi: mac80211: check basic rates validity PCI: dwc: Restore MSI Receiver mask during resume net: stmmac: Enable mac_managed_pm phylink config netfilter: nf_tables: prefer nft_chain_validate netfilter: nf_tables: allow clone callbacks to sleep netfilter: nf_tables: bail out if stateful expression provides no .clone netfilter: nf_tables: use timestamp to check for set element timeout netfilter: nf_tables: set element extended ACK reporting support tls: fix race between tx work scheduling and socket close PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal btrfs: fix double inode unlock for direct IO sync writes xfs: fix log recovery buffer allocation for the legacy h_size fixup btrfs: fix corruption after buffer fault in during direct IO append write selftests: mptcp: join: check backup support in signal endp selftests: mptcp: join: validate backup in MPJ mptcp: pm: fix backup support in signal endpoints mptcp: export local_address mptcp: pm: only set request_bkup flag when sending MP_PRIO mptcp: fix bad RCVPRUNED mib accounting mptcp: mib: count MPJ with backup flag mptcp: fix NL PM announced address accounting mptcp: distinguish rcv vs sent backup flag in requests mptcp: sched: check both directions for backup drm/mgag200: Set DDC timeout in milliseconds drm/bridge: analogix_dp: properly handle zero sized AUX transactions sched/smt: Fix unbalance sched_smt_present dec/inc sched/smt: Introduce sched_smt_present_inc/dec() helper x86/mtrr: Check if fixed MTRRs exist before saving them padata: Fix possible divide-by-0 panic in padata_mt_helper() tracing: Fix overflow in get_free_elt() power: supply: axp288_charger: Round constant_charge_voltage writes down power: supply: axp288_charger: Fix constant_charge_voltage writes genirq/irqdesc: Honor caller provided affinity in alloc_desc() irqchip/xilinx: Fix shift out of bounds kcov: properly check for softirq context serial: core: check uartclk for zero to avoid divide by zero timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex() ntp: Safeguard against time_constant overflow driver core: Fix uevent_show() vs driver detach race irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to 'raw_spinlock_t' irqchip/meson-gpio: support more than 8 channels gpio irq clocksource: Fix brown-bag boolean thinko in cs_watchdog_read() clocksource: Scale the watchdog read retries automatically torture: Enable clocksource watchdog with "tsc=watchdog" clocksource: Reduce the default clocksource_watchdog() retries to 2 ntp: Clamp maxerror and esterror to operating range vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler tick/broadcast: Move per CPU pointer access into the atomic section scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES usb: gadget: u_serial: Set start_delayed during suspend usb: gadget: core: Check for unset descriptor USB: serial: debug: do not echo input by default usb: vhci-hcd: Do not drop references before new references are gained ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list ALSA: line6: Fix racy access to midibuf drm/client: fix null pointer dereference in drm_client_modeset_probe ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT ALSA: usb-audio: Re-add ScratchAmp quirk entries spi: spi-fsl-lpspi: Fix scldiv calculation kprobes: Fix to check symbol prefixes correctly bpf: kprobe: remove unused declaring of bpf_kprobe_override i2c: smbus: Send alert notifications to all devices if source not found spi: spidev: Add missing spi_device_id for bh2228fv ASoC: codecs: wsa881x: Correct Soundwire ports mask ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask i2c: smbus: Improve handling of stuck alerts arm64: errata: Expand speculative SSBS workaround (again) arm64: cputype: Add Cortex-A725 definitions arm64: cputype: Add Cortex-X1C definitions arm64: errata: Expand speculative SSBS workaround arm64: errata: Unify speculative SSBS errata logic arm64: cputype: Add Cortex-X925 definitions arm64: cputype: Add Cortex-A720 definitions arm64: cputype: Add Cortex-X3 definitions arm64: errata: Add workaround for Arm errata 3194386 and 3312417 arm64: cputype: Add Neoverse-V3 definitions arm64: cputype: Add Cortex-X4 definitions arm64: barrier: Restore spec_bar() macro arm64: Add Neoverse-V2 part arm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-space ext4: fix wrong unit use in ext4_mb_find_by_goal sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES profiling: remove profile=sleep support SUNRPC: Fix a race to wake a sync task s390/sclp: Prevent release of buffer in I/O jbd2: avoid memleak in jbd2_journal_write_metadata_buffer ext4: fix uninitialized variable in ext4_inlinedir_to_tree media: uvcvideo: Fix the bandwdith quirk on USB 3.x media: uvcvideo: Ignore empty TS packets drm/amd/display: Add null checker before passing variables drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules drm/amdgpu: Fix the null pointer dereference to ras_manager drm/amdgpu/pm: Fix the null pointer dereference for smu7 btrfs: fix bitmap leak when loading free space cache on duplicate entry wifi: nl80211: don't give key data to userspace udf: prevent integer overflow in udf_bitmap_free_blocks() PCI: Add Edimax Vendor ID to pci_ids.h selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT ACPI: SBS: manage alarm sysfs attribute through psy core ACPI: battery: create alarm sysfs attribute atomically clocksource/drivers/sh_cmt: Address race condition for clock events md/raid5: avoid BUG_ON() while continue reshape after reassembling md: do not delete safemode_timer in mddev_suspend rcutorture: Fix rcu_torture_fwd_cb_cr() data race net: fec: Stop PPS on driver remove l2tp: fix lockdep splat net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() net: linkwatch: use system_unbound_wq net: bridge: mcast: wait for previous gc cycles when removing port net: usb: qmi_wwan: fix memory leak for not ip packets sctp: Fix null-ptr-deref in reuseport_add_sock(). sctp: move hlist_node and hashent out of sctp_ep_common x86/mm: Fix pti_clone_entry_text() for i386 x86/mm: Fix pti_clone_pgtable() alignment assumption irqchip/mbigen: Fix mbigen node address layout genirq: Allow irq_chip registration functions to take a const irq_chip netfilter: ipset: Add list flush to cancel_gc mptcp: fix duplicate data handling r8169: don't increment tx_dropped in case of NETDEV_TX_BUSY net: usb: sr9700: fix uninitialized variable use in sr_mdio_read drm/vmwgfx: Fix a deadlock in dma buf fence polling Revert "ALSA: firewire-lib: operate for period elapse event in process context" Revert "ALSA: firewire-lib: obsolete workqueue for period update" ALSA: hda/realtek: Add quirk for Acer Aspire E5-574G ALSA: usb-audio: Correct surround channels in UAC1 channel map protect the fetch of ->fd[fd] in do_dup2() from mispredictions HID: wacom: Modify pen IDs platform/chrome: cros_ec_proto: Lock device when updating MKBP version power: supply: bq24190_charger: replace deprecated strncpy with strscpy riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error() ipv6: fix ndisc_is_useropt() handling for PIO net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init(). netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init(). net: mvpp2: Don't re-use loop iterator net/iucv: fix use after free in iucv_sock_close() rtnetlink: Don't ignore IFLA_TARGET_NETNSID when ifname is specified in rtnl_dellink(). rtnetlink: enable alt_ifname for setlink/newlink ALSA: hda: conexant: Fix headset auto detect fail in the polling mode sched: act_ct: take care of padding in struct zones_ht_key drm/vmwgfx: Fix overlay when using Screen Targets drm/nouveau: prime: fix refcount underflow MIPS: dts: loongson: Fix ls2k1000-rtc interrupt MIPS: dts: loongson: Fix liointc IRQ polarity MIPS: Loongson64: DTS: Fix PCIe port nodes for ls7a MIPS: Loongson64: DTS: Add RTC support to Loongson-2K1000 remoteproc: imx_rproc: Fix refcount mistake in imx_rproc_addr_init drm/dp_mst: Fix all mstb marked as not probed after suspend/resume irqchip/imx-irqsteer: Handle runtime power management correctly irqchip/imx-irqsteer: Add runtime PM support irqchip/imx-irqsteer: Constify irq_chip struct genirq: Allow the PM device to originate from irq domain irqdomain: Fixed unbalanced fwnode get and put leds: triggers: Flush pending brightness before activating trigger leds: trigger: Call synchronize_rcu() before calling trig->activate() leds: trigger: Store brightness set by led_trigger_event() leds: trigger: Remove unused function led_trigger_rename_static() leds: trigger: use RCU to protect the led_cdevs list drivers: soc: xilinx: check return status of get_api_version() soc: xilinx: move PM_INIT_FINALIZE to zynqmp_pm_domains driver ext4: check the extent status again before inserting delalloc block ext4: factor out a common helper to query extent map ext4: convert to exclusive lock while inserting delalloc extents ext4: refactor ext4_da_map_blocks() ext4: make ext4_es_insert_extent() return void sysctl: always initialize i_uid/i_gid arm64: dts: qcom: ipq8074: Disable SS instance in Parkmode for USB arm64: dts: qcom: msm8998: Disable SS instance in Parkmode for USB arm64: dts: qcom: msm8998: switch USB QMP PHY to new style of bindings arm64: dts: qcom: msm8998: drop USB PHY clock index arm64: dts: qcom: msm8996: Move '#clock-cells' to QMP PHY child node powerpc/configs: Update defconfig with now user-visible CONFIG_FSL_IFC fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT nvme-pci: add missing condition check for existence of mapped data nvme: separate command prep and issue nvme: split command copy into a helper iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en ceph: fix incorrect kmalloc size of pagevec mempool ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable spi: spidev: add correct compatible for Rohm BH2228FV spi: spidev: order compatibles alphabetically spidev: Add Silicon Labs EM3581 device compatible spi: spidev: Replace OF specific code by device property API spi: spidev: Replace ACPI specific code by device_get_match_data() spi: spidev: Make probe to fail early if a spidev compatible is used lirc: rc_dev_get_from_fd(): fix file leak powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap() apparmor: Fix null pointer deref when receiving skb during sock creation mISDN: Fix a use after free in hfcmulti_tx() bpf: Fix a segment issue when downgrading gso_size net: nexthop: Initialize all fields in dumped nexthops net: stmmac: Correct byte order of perfect_match tipc: Return non-zero value from tipc_udp_addr2str() on error netfilter: nft_set_pipapo_avx2: disable softinterrupts net: bonding: correctly annotate RCU in bond_should_notify_peers() ipv4: Fix incorrect source address in Record Route option MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later bpf, events: Use prog to emit ksymbol event for main program dma: fix call order in dmam_free_coherent libbpf: Fix no-args func prototype BTF dumping syntax um: time-travel: fix signal blocking race/hang um: time-travel: fix time-travel-start option phy: cadence-torrent: Check return value on register read dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels jfs: Fix array-index-out-of-bounds in diFree kdb: Use the passed prompt in kdb_position_cursor() kdb: address -Wformat-security warnings kernel: rerun task_work while freezing in get_signal() io_uring/io-wq: limit retrying worker initialisation nilfs2: handle inconsistent state in nilfs_btnode_create_block() Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591 Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait drm/panfrost: Mark simple_ondemand governor as softdep MIPS: Loongson64: Test register availability before use MIPS: Loongson64: reset: Prioritise firmware service MIPS: Loongson64: Remove memory node for builtin-dtb MIPS: Loongson64: env: Hook up Loongsson-2K MIPS: dts: loongson: Fix GMAC phy node MIPS: ip30: ip30-console: Add missing include remoteproc: imx_rproc: Skip over memory region when node value is NULL remoteproc: stm32_rproc: Fix mailbox interrupts queuing rbd: don't assume rbd_is_lock_owner() for exclusive mappings selftests/sigaltstack: Fix ppc64 GCC build RDMA/iwcm: Fix a use-after-free related to destroying CM IDs platform: mips: cpu_hwmon: Disable driver on unsupported hardware watchdog/perf: properly initialize the turbo mode timestamp and rearm counter rtc: isl1208: Fix return value of nvmem callbacks perf: Fix event leak upon exec and file release drm/i915/dp: Reset intel_dp->link_trained before retraining the link drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8 perf/x86/intel/pt: Fix a topa_entry base address calculation perf/x86/intel/pt: Fix topa_entry base length perf/x86/intel/uncore: Fix the bits of the CHA extended umask for SPR perf: Fix event leak upon exit scsi: qla2xxx: validate nvme_local_port correctly scsi: qla2xxx: Complete command early within lock scsi: qla2xxx: Fix flash read failure scsi: qla2xxx: Use QP lock to search for bsg scsi: qla2xxx: Fix for possible memory corruption scsi: qla2xxx: Unable to act on RSCN for port online scsi: qla2xxx: During vport delete send async logout explicitly rtc: cmos: Fix return value of nvmem callbacks mm/numa_balancing: teach mpol_to_str about the balancing mode devres: Fix memory leakage caused by driver API devm_free_percpu() devres: Fix devm_krealloc() wasting memory gve: Fix an edge case for TSO skb validity check kobject_uevent: Fix OOB access within zap_modalias_env() kbuild: Fix '-S -c' in x86 stack protector scripts decompress_bunzip2: fix rare decompression failure ubi: eba: properly rollback inside self_check_eba clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed dev/parport: fix the array out-of-bounds risk binder: fix hang of unregistered readers PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio PCI: dw-rockchip: Fix initial PERST# GPIO value PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN hwrng: amd - Convert PCIBIOS_* return codes to errnos tools/memory-model: Fix bug in lock.cat ALSA: usb-audio: Add a quirk for Sonix HD USB Camera ALSA: usb-audio: Move HD Webcam quirk to the right place ALSA: usb-audio: Fix microphone sound on HD webcam. KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked() media: uvcvideo: Fix integer overflow calculating timestamp jbd2: make jbd2_journal_get_max_txn_bufs() internal leds: ss4200: Convert PCIBIOS_* return codes to errnos wifi: mwifiex: Fix interface type change selftests/landlock: Add cred_transfer test io_uring: tighten task exit cancellations ext4: make sure the first directory block is not a hole ext4: check dot and dotdot of dx_root before making dir indexed m68k: amiga: Turn off Warp1260 interrupts during boot udf: Avoid using corrupted block bitmap buffer task_work: Introduce task_work_cancel() again task_work: s/task_work_cancel()/task_work_cancel_func()/ apparmor: use kvfree_sensitive to free data->data sched/fair: Use all little CPUs for CPU-bound workloads drm/amd/display: Check for NULL pointer scsi: qla2xxx: Fix optrom version displayed in FDMI drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes ext2: Verify bitmap and itable block numbers before using them hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error media: venus: fix use after free in vdec_close char: tpm: Fix possible memory leak in tpm_bios_measurements_open() fuse: verify {g,u}id mount options correctly sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE tasks ipv6: take care of scope when choosing the src addr af_packet: Handle outgoing VLAN packets without hardware offloading net: netconsole: Disable target before netpoll cleanup tick/broadcast: Make takeover of broadcast hrtimer reliable dt-bindings: thermal: correct thermal zone node name limit mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer mm/hugetlb: fix possible recursive locking detected warning landlock: Don't lose track of restrictions on cred_transfer fs/ntfs3: Missed error return rtc: interface: Add RTC offset to alarm after fix-up nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP fs/ntfs3: Fix field-spanning write in INDEX_HDR fs/ntfs3: Replace inode_trylock with inode_lock pinctrl: freescale: mxs: Fix refcount of child pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails pinctrl: ti: ti-iodelay: Drop if block with always false condition pinctrl: single: fix possible memory leak when pinctrl_enable() fails pinctrl: core: fix possible memory leak when pinctrl_enable() fails pinctrl: rockchip: update rk3308 iomux routes fs/ntfs3: Fix getting file type fs/ntfs3: Missed NI_FLAG_UPDATE_PARENT setting fs/ntfs3: Fix transform resident to nonresident for compressed files fs/ntfs3: Merge synonym COMPRESSION_UNIT and NTFS_LZNT_CUNIT fs/ntfs3: Use ALIGN kernel macro net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports netfilter: nf_set_pipapo: fix initial map fill netfilter: nft_set_pipapo: constify lookup fn args where possible netfilter: ctnetlink: use helper function to calculate expect ID bnxt_re: Fix imm_data endianness RDMA/hns: Fix insufficient extend DB for VFs. RDMA/hns: Fix undifined behavior caused by invalid max_sge RDMA/hns: Fix missing pagesize and alignment check in FRMR macintosh/therm_windtunnel: fix module unload. powerpc/xmon: Fix disassembly CPU feature checks MIPS: Octeron: remove source file executable bit net: missing check virtio vhost/vsock: always initialize seqpacket_allow PCI: endpoint: Clean up error handling in vpci_scan_bus() Input: elan_i2c - do not leave interrupt disabled on suspend failure RDMA/device: Return error earlier if port in not valid mtd: make mtd_test.c a separate module ASoC: max98088: Check for clk_prepare_enable() error RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs RDMA/mlx4: Fix truncated output warning in alias_GUID.c RDMA/mlx4: Fix truncated output warning in mad.c Input: qt1050 - handle CHIP_ID reading error RDMA/cache: Release GID table even if leak is detected RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE coresight: Fix ref leak when of_coresight_parse_endpoint() fails clk: qcom: gcc-sc7280: Update force mem core bit for UFS ICE clock clk: qcom: branch: Add helper functions for setting retain bits PCI: Fix resource double counting on remove & rescan SUNRPC: Fixup gss_status tracepoint error output sparc64: Fix incorrect function signature and add prototype for prom_cif_init ext4: avoid writing unitialized memory to disk in EA inodes ext4: don't track ranges in fast_commit if inode has inlined data ext4: return early for non-eligible fast_commit track events NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server SUNRPC: avoid soft lockup when transmitting UDP to reachable server. xprtrdma: Fix rpcrdma_reqs_reset() mfd: omap-usb-tll: Use struct_size to allocate tll mfd: rsmu: Split core code into separate module perf intel-pt: Fix exclude_guest setting perf intel-pt: Fix aux_watermark calculation for 64-bit size media: venus: flush all buffers in output plane streamoff ext4: fix infinite loop when replaying fast_commit Revert "leds: led-core: Fix refcount leak in of_led_get()" drm/qxl: Add check for drm_cvt_mode drm/etnaviv: fix DMA direction handling for cached RW buffers perf report: Fix condition in sort__sym_cmp() leds: trigger: Unregister sysfs attributes before calling deactivate() drm/mediatek: Add DRM_MODE_ROTATE_0 to rotation property drm/mediatek: Add missing plane settings when async update media: renesas: vsp1: Store RPF partition configuration per RPF instance media: renesas: vsp1: Fix _irqsave and _irq mix media: uvcvideo: Override default flags saa7134: Unchecked i2c_transfer function result fixed media: i2c: Fix imx412 exposure control media: imon: Fix race getting ictx->lock media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control() drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare() drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit drm/amd/pm: Fix aldebaran pcie speed reporting xdp: fix invalid wait context of page_pool_destroy() selftests: forwarding: devlink_lib: Wait for udev events after reloading bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o bna: adjust 'name' buf size of bna_tcb and bna_ccb structures bpf: annotate BTF show functions with __printf selftests/bpf: Close fd in error path in drop_on_reuseport locking/rwsem: Add __always_inline annotation to __down_write_common() and inlined callers perf: Fix default aux_watermark calculation wifi: virt_wifi: don't use strlen() in const context perf: Prevent passing zero nr_pages to rb_alloc_aux() gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey perf: Fix perf_aux_size() for greater-than 32-bit size wifi: virt_wifi: avoid reporting connection success with wrong SSID perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation netfilter: nf_tables: rise cap on SELinux secmark context ipvs: Avoid unnecessary calls to skb_is_gso_sctp libbpf: Checking the btf_type kind when fixing variable offsets net: fec: Fix FEC_ECR_EN1588 being cleared on link-down net: fec: Refactor: #define magic constants wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he() wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors mlxsw: spectrum_acl_bloom_filter: Make mlxsw_sp_acl_bf_key_encode() more flexible mlxsw: spectrum_acl_erp: Fix object nesting warning lib: objagg: Fix general protection fault selftests/bpf: Check length of recv in test_sockmap net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined tcp: fix races in tcp_v[46]_err() tcp: fix race in tcp_write_err() tcp: add tcp_done_with_error() helper tcp: annotate lockless access to sk->sk_err tcp: annotate lockless accesses to sk->sk_err_soft net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP selftests/bpf: Fix prog numbers in test_sockmap wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device firmware: turris-mox-rwtm: Initialize completion before mailbox firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout() firmware: turris-mox-rwtm: Do not complete if there are no waiters vmlinux.lds.h: catch .bss..L* sections into BSS") ARM: spitz: fix GPIO assignment for backlight ARM: pxa: spitz: use gpio descriptors for audio m68k: cmpxchg: Fix return value for default case in __arch_xchg() x86/xen: Convert comma to semicolon m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages arm64: dts: amlogic: gx: correct hdmi clocks arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add ports node for anx7625 arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux arm64: dts: mediatek: mt8183-kukui: Drop bogus output-enable property ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity ARM: dts: imx6qdl-kontron-samx6i: fix SPI0 chip selects ARM: dts: imx6qdl-kontron-samx6i: fix board reset ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset ARM: dts: imx6qdl-kontron-samx6i: move phy reset into phy-node arm64: dts: rockchip: Increase VOP clk rate on RK3328 soc: qcom: pdr: fix parsing of domains lists soc: qcom: pdr: protect locator_addr with the main mutex memory: fsl_ifc: Make FSL_IFC config visible and selectable arm64: dts: qcom: msm8996: specify UFS core_clk frequencies soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data() callers arm64: dts: qcom: sm8250: add power-domain to UFS PHY arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings arm64: dts: qcom: sdm845: add power-domain to UFS PHY hwmon: (max6697) Fix swapped temp{1,8} critical alarms hwmon: (max6697) Fix underflow when writing limit attributes drm/meson: fix canvas release in bind function pwm: stm32: Always do lazy disabling hwmon: (adt7475) Fix default duty on fan is disabled x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos x86/pci/xen: Fix PCIBIOS_* return code handling x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling x86/of: Return consistent error type from x86_of_pci_irq_enable() hfsplus: fix to avoid false alarm of circular locking block: initialize integrity buffer to zero before writing it to media block: cleanup bio_integrity_prep block: refactor to use helper platform/chrome: cros_ec_debugfs: fix wrong EC message version EDAC, i10nm: make skx_common.o a separate module f2fs: fix to don't dirty inode for readonly filesystem f2fs: fix return value of f2fs_convert_inline_inode() Revert "scsi: usb: Call scsi_done() directly" Revert "USB: UAS: return ENODEV when submit urbs fail with device not attached" Revert "Merge ccd9fe71 ("nfsd: Fix a regression in nfsd_setattr()") into android13-5.15-lts" ANDROID: Add vendor hook for new MGLGU generation creation ANDROID: fix up merge error in kasan_test.c Revert "timers: Rename del_timer_sync() to timer_delete_sync()" Revert "dma-mapping: add dma_opt_mapping_size()" Revert "dma-iommu: add iommu_dma_opt_mapping_size()" Revert "iommu/dma: Force swiotlb_max_mapping_size on an untrusted device" Revert "PCI: Work around Intel I210 ROM BAR overlap defect" Revert "PCI/ASPM: Make Intel DG2 L1 acceptable latency unlimited" Revert "PCI/DPC: Quirk PIO log size for certain Intel Root Ports" Revert "PCI/DPC: Quirk PIO log size for Intel Raptor Lake Root Ports" Revert "tracing: Use .flush() call to wake up readers" UPSTREAM: fuse: Add initial support for fs-verity ANDROID: tools/objtool: Pass CFLAGS to libsubcmd build via EXTRA_CFLAGS Revert "cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value" Revert "bpf: Defer the free of inner map when necessary" Revert "pwm: atmel-hlcdc: Convert to platform remove callback returning void" Revert "net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()" ANDROID: GKI: Update symbols to symbol list ANDROID: GKI: Add symbol to symbol list for vivo. ANDROID: vendor_hooks: add hooks to modify pageflags ANDROID: GKI: Add pageflags for OEM ANDROID: Add Interrupt Hook for madvise Compression Revert "regmap: Add bulk read/write callbacks into regmap_config" Revert "serial: max310x: make accessing revision id interface-agnostic" Revert "serial: max310x: fix IO data corruption in batched operations" Linux 5.15.164 tap: add missing verification for short frame tun: add missing verification for short frame wifi: rt2x00: use explicitly signed or unsigned types filelock: Fix fcntl/close race recovery compat path ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused arm64: dts: qcom: sdm630: Disable SS instance in Parkmode for USB arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 fs/ntfs3: Validate ff offset jfs: don't walk off the end of ealist ocfs2: add bounds checking to ocfs2_check_dir_entry() net: relax socket state check at accept time. Add gitignore file for samples/fanotify/ subdirectory docs: Fix formatting of literal sections in fanotify docs samples: Make fs-monitor depend on libc and headers samples: Add fs error monitoring example drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() wifi: mac80211: disable softirqs for queued frame handling mm/damon/core: merge regions aggressively when max_nr_regions is unmet minmax: relax check to allow comparison between unsigned arguments and signed constants minmax: allow comparisons of 'int' against 'unsigned char/short' minmax: allow min()/max()/clamp() if the arguments have the same signedness. minmax: fix header inclusions minmax: clamp more efficiently by avoiding extra comparison minmax: sanity check constant bounds when clamping tracing: Define the is_signed_type() macro once spi: mux: set ctlr->bits_per_word_mask hfsplus: fix uninit-value in copy_name selftests/vDSO: fix clang build errors and warnings spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices riscv: stacktrace: fix usage of ftrace_graph_ret_addr() fs: better handle deep ancestor chains in is_subdir() drm/radeon: check bo_va->bo is non-NULL before using it Bluetooth: hci_core: cancel all works upon hci_unregister_dev() scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed powerpc/eeh: avoid possible crash when edev->pdev changes powerpc/pseries: Whitelist dtl slub object for copying to userspace net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() net: usb: qmi_wwan: add Telit FN912 compositions ALSA: dmaengine_pcm: terminate dmaengine before synchronize ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx btrfs: qgroup: fix quota root leak after quota disable failure platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB platform/x86: lg-laptop: Change ACPI device id platform/x86: lg-laptop: Remove LGEX0815 hotkey handling platform/x86: wireless-hotkey: Add support for LG Airplane Button s390/sclp: Fix sclp_init() cleanup on failure can: kvaser_usb: fix return value for hif_usb_send_regout ASoC: ti: omap-hdmi: Fix too long driver name ASoC: ti: davinci-mcasp: Set min period size using FIFO config ALSA: dmaengine: Synchronize dma channel after drop() bytcr_rt5640 : inverse jack detect for Archos 101 cesium Input: i8042 - add Ayaneo Kun to i8042 quirk table Input: elantech - fix touchpad state on resume for Lenovo N24 mips: fix compat_sys_lseek syscall ALSA: hda/realtek: Add more codec ID to no shutup pins list drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() wifi: cfg80211: wext: add extra SIOCSIWSCAN data check nvme: avoid double free special payload mei: demote client disconnect warning on suspend to debug fs/file: fix the check in find_next_fd() kconfig: remove wrong expr_trans_bool() kconfig: gconf: give a proper initial state to the Save button null_blk: fix validation of block size arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process ila: block BH in ila_output() net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input() Input: silead - Always support 10 fingers selftests/openat2: Fix build warnings on ppc64 wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup wifi: mac80211: handle tasklet frames before stopping wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs ACPI: EC: Avoid returning AE_OK on errors in address space handler ACPI: EC: Abort address space access upon error scsi: qedf: Set qed_slowpath_params to zero before use scsi: qedf: Wait for stag work during unload scsi: qedf: Don't process stag work during unload and recovery scsi: core: alua: I/O errors for ALUA state transitions scsi: core: Fix a use-after-free bpf: Fix overrunning reservations in ringbuf ACPI: processor_idle: Fix invalid comparison with insertion sort for latency ARM: 9324/1: fix get_user() broken with veneer filelock: Remove locks reliably when fcntl/close race is detected gcc-plugins: Rename last_stmt() for GCC 14+ ANDROID: fsnotify: Do not notify lower fs of open when ENOSYS ANDROID: GKI: remove export of tracing control functions Revert "geneve: make sure to pull inner header in geneve_rx()" Revert "Merge f354086d ("ALSA: usb-audio: add quirk for RODE NT-USB+") into android13-5.15-lts" ANDROID: Incremental fs: Retry page faults on non-fatal errors UPSTREAM: usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() ANDROID: abi_gki_aarch64_qcom: Add groups_free symbol BACKPORT: block: Add ioprio to block_rq tracepoint ANDROID: GKI: Add symbol to symbol list for vivo. ANDROID: vendor_hooks: add hooks to modify pageflags ANDROID: GKI: Add pageflags for OEM ANDROID: GKI: Update symbols list for vivo ANDROID: GKI: Add initialization for mutex oem_data. ANDROID: GKI: Add initialization for rwsem's oem_data and vendor_data. ANDROID: GKI: Update symbol list for vivo ANDROID: GKI: export sys_exit tracepoint ANDROID: GKI: Update symbol list for vivo ANDROID: vendor_hooks: add hooks in rwsem read trylock ANDROID: GKI: Update symbol list for vivo ANDROID: GKI: add percpu_rwsem vendor hooks ANDROID: GKI: Update symbol list for vivo ANDROID: vendor_hooks: add hooks in rwsem ANDROID: GKI: Update symbol list for vivo ANDROID: vendor_hooks: add vendor hooks for fuse request ANDROID: abi_gki_aarch64_qcom: Add groups_free symbol ANDROID: 16K: Don't set padding vm_flags on 32-bit archs Linux 5.15.163 i2c: rcar: fix error code in probe() kbuild: Make ld-version.sh more robust against version string changes x86/bhi: Avoid warning in #DB handler due to BHI mitigation x86/entry/64: Remove obsolete comment on tracing vs. SYSRET i2c: rcar: clear NO_RXDMA flag after resetting i2c: testunit: avoid re-issued work after read message i2c: rcar: ensure Gen3+ reset does not disturb local targets i2c: rcar: introduce Gen4 devices i2c: rcar: reset controller is mandatory for Gen3+ i2c: rcar: Add R-Car Gen4 support i2c: mark HostNotify target address as used i2c: rcar: bring hardware to known state when probing nilfs2: fix kernel bug on rename operation of broken directory bpf: Allow reads from uninit stack ipv6: prevent NULL dereference in ip6_output() ipv6: annotate data-races around cnf.disable_ipv6 wireguard: send: annotate intentional data race in checking empty queue wireguard: queueing: annotate intentional data race in cpu round robin wireguard: allowedips: avoid unaligned 64-bit memory accesses libceph: fix race between delayed_work() and ceph_monc_stop() Fix userfaultfd_api to return EINVAL as expected ALSA: hda/realtek: Limit mic boost on VAIO PRO PX ALSA: hda/realtek: Enable Mute LED on HP 250 G7 ALSA: hda/realtek: add quirk for Clevo V5[46]0TU nvmem: core: only change name to fram for current attribute nvmem: meson-efuse: Fix return value of nvmem callbacks nvmem: rmem: Fix return value of rmem_read() hpet: Support 32-bit userspace USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k USB: serial: mos7840: fix crash on resume USB: serial: option: add Rolling RW350-GL variants USB: serial: option: add Netprisma LCUK54 series modules USB: serial: option: add support for Foxconn T99W651 USB: serial: option: add Fibocom FM350-GL USB: serial: option: add Telit FN912 rmnet compositions USB: serial: option: add Telit generic core-dump composition net: ks8851: Fix potential TX stall after interface reopen tcp: avoid too many retransmit packets tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() octeontx2-af: fix issue with IPv4 match for RSS octeontx2-af: fix issue with IPv6 ext match for RSS octeontx2-af: extend RSS supported offload types octeontx2-af: fix detection of IP layer octeontx2-af: fix a issue with cpt_lf_alloc mailbox octeontx2-af: update cpt lf alloc mailbox octeontx2-af: replace cpt slot with lf id on reg write ARM: davinci: Convert comma to semicolon s390: Mark psw in __load_psw_mask() as __unitialized net/sched: Fix UAF when resolving a clash udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). ethtool: netlink: do not return SQI value if link is down ppp: reject claimed-as-LCP but actually malformed packets net: ethernet: mtk-star-emac: set mac_managed_pm when probing net: ethernet: lantiq_etop: fix double free in detach net: lantiq_etop: add blank line after declaration i40e: Fix XDP program unloading while removing the driver net: fix rc7's __skb_datagram_iter() octeontx2-af: Fix incorrect value output on error path in rvu_check_rsrc_availability() skmsg: Skip zero length skb in sk_msg_recvmsg tcp: fix incorrect undo caused by DSACK of TLP retransmit vfs: don't mod negative dentry count when on shrinker list fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading filelock: fix potential use-after-free in posix_lock_inode mm: prevent derefencing NULL ptr in pfn_section_valid() nilfs2: fix incorrect inode allocation from reserved inodes null_blk: Do not allow runt zone with zone capacity smaller then zone size nfc/nci: Add the inconsistency check between the input data length and count kbuild: fix short log for AS in link-vmlinux.sh nvmet: fix a possible leak when destroy a ctrl during qp establishment platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6" tablet regmap-i2c: Subtract reg size from max_write nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset dma-mapping: benchmark: avoid needless copy_to_user if benchmark fails nvme-multipath: find NUMA path only for online numa-node ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897 fs/ntfs3: Mark volume as dirty if xattr is broken i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr clk: qcom: gcc-sm6350: Fix gpll6* & gpll7 parents media: dw2102: fix a potential buffer overflow ima: Avoid blocking in RCU read-side critical section bnx2x: Fix multiple UBSAN array-index-out-of-bounds mtd: rawnand: rockchip: ensure NVDDR timings are rejected mtd: rawnand: Bypass a couple of sanity checks during NAND identification mtd: rawnand: Ensure ECC configuration is propagated to upper layers drm/amdgpu/atomfirmware: silence UBSAN warning drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" fsnotify: Do not generate events for O_PATH file descriptors can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot btrfs: fix adding block group to a reclaim list and the unused list during reclaim mm: avoid overflows in dirty throttling logic mm: optimize the redundant loop of mm_update_owner_next() nilfs2: add missing check for inode numbers on directory entries nilfs2: fix inode number range checks Revert "igc: fix a log entry using uninitialized netdev" gpiolib: of: add polarity quirk for TSC2005 gpiolib: of: add a quirk for reset line polarity for Himax LCDs gpiolib: of: factor out code overriding gpio line polarity inet_diag: Initialize pad field in struct inet_diag_req_v2 selftests: make order checking verbose in msg_zerocopy selftest selftests: fix OOM in msg_zerocopy selftest bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() netfilter: nf_tables: unconditionally flush pending work before notifier riscv: kexec: Avoid deadlock in kexec crash path wifi: wilc1000: fix ies_len type in connect path net: allow skb_datagram_iter to be called from any context e1000e: Fix S0ix residency on corporate systems KVM: s390: fix LPSWEY handling tcp_metrics: validate source addr length UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open() tools/power turbostat: Remember global max_die_id s390/pkey: Wipe sensitive data on failure jffs2: Fix potential illegal address access in jffs2_free_inode bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD igc: fix a log entry using uninitialized netdev powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#" kunit: Fix timeout message orangefs: fix out-of-bounds fsid access powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n i2c: i801: Annotate apanel_addr as __ro_after_init media: dvb-frontends: tda10048: Fix integer overflow media: s2255: Use refcount_t instead of atomic_t for num_channels media: dvb-frontends: tda18271c2dd: Remove casting during div net: dsa: mv88e6xxx: Correct check for empty list wifi: mt76: replace skb_put with skb_put_zero Input: ff-core - prefer struct_size over open coded arithmetic firmware: dmi: Stop decoding on broken entry sctp: prefer struct_size over open coded arithmetic media: dw2102: Don't translate i2c read into write drm/amd/display: Skip finding free audio for unknown engine_id drm/amd/display: Check pipe offset before setting vblank drm/amd/display: Check index msg_id before read or write drm/amdgpu: Initialize timestamp for some legacy SOCs crypto: aead,cipher - zeroize key buffer after use scsi: qedf: Make qedf_execute_tmf() non-preemptible IB/core: Implement a limit on UMAD receive List media: dvb-usb: dib0700_devices: Add missing release_firmware() media: dvb: as102-fe: Fix as10x_register_addr packing drm/lima: fix shared irq handling on driver remove locking/mutex: Introduce devm_mutex_init() Compiler Attributes: Add __uninitialized macro ANDROID: GKI: Add symbol to symbol list for vivo. ANDROID: vendor_hooks: add hooks to modify pageflags ANDROID: GKI: Add pageflags for OEM ANDROID: fuse-bpf: Fix readdir for getdents ANDROID: abi_gki_aarch64_qcom: Add groups_free symbol UPSTREAM: af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock. UPSTREAM: af_unix: Don't peek OOB data without MSG_OOB. UPSTREAM: af_unix: Clear stale u->oob_skb. ANDROID: GKI: Add initialization for mutex oem_data. ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hooks: add hooks to move certain scenarios' work to a fixed binder thread ANDROID: userfaultfd: Fix use-after-free in userfaultfd_using_sigbus() ANDROID: GKI: Update symbol list for mtk ANDROID: GKI: Add initialization for rwsem's oem_data and vendor_data. Linux 5.15.162 tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset() serial: 8250_omap: Fix Errata i2310 with RX FIFO level check arm64: dts: rockchip: Add sound-dai-cells for RK3368 arm64: dts: rockchip: fix PMIC interrupt pin on ROCK Pi E ARM: dts: rockchip: rk3066a: add #sound-dai-cells to hdmi node KVM: arm64: vgic-v4: Make the doorbell request robust w.r.t preemption efi/x86: Free EFI memory map only when installing a new one. efi: xen: Set EFI_PARAVIRT for Xen dom0 boot on all architectures efi: memmap: Move manipulation routines into x86 arch tree efi: Correct comment on efi_memmap_alloc drivers: fix typo in firmware/efi/memmap.c tcp: Fix data races around icsk->icsk_af_ops. ipv6: Fix data races around sk->sk_prot. ipv6: annotate some data-races around sk->sk_prot nfs: Leave pages in the pagecache if readpage failed pwm: stm32: Refuse too small period requests syscalls: fix sys_fanotify_mark prototype syscalls: fix compat_sys_io_pgetevents_time64 usage ftruncate: pass a signed offset ata: libata-core: Fix double free on error ata: ahci: Clean up sysfs file on error batman-adv: Don't accept TT entries for out-of-spec VIDs drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes drm/i915/gt: Fix potential UAF by revoke of fence registers drm/amdgpu: avoid using null object of framebuffer drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes hexagon: fix fadvise64_64 calling conventions csky, hexagon: fix broken sys_sync_file_range sh: rework sync_file_range ABI kbuild: Install dtb files as 0644 in Makefile.dtbinst cpu/hotplug: Fix dynstate assignment in __cpuhp_setup_state_cpuslocked() net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new net: can: j1939: recover socket queue on CAN bus error during BAM transmission net: can: j1939: Initialize unused data in j1939_send_one() tty: mcf: MCF54418 has 10 UARTS serial: 8250_omap: Implementation of Errata i2310 usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock usb: atm: cxacru: fix endpoint checking in cxacru_bind() usb: musb: da8xx: fix a resource leak in probe() usb: gadget: printer: fix races against disable usb: gadget: printer: SS+ support net: usb: ax88179_178a: improve link status logs iio: chemical: bme680: Fix sensor data read operation iio: chemical: bme680: Fix overflows in compensate() functions iio: chemical: bme680: Fix calibration data variable iio: chemical: bme680: Fix pressure value output iio: accel: fxls8962af: select IIO_BUFFER & IIO_KFIFO_BUF iio: adc: ad7266: Fix variable checking bug i2c: testunit: discard write requests while old command is running i2c: testunit: don't erase registers after STOP mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro() mmc: sdhci: Do not invert write-protect twice mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos ocfs2: fix DIO failure due to insufficient transaction credits parisc: use generic sys_fanotify_mark implementation x86: stop playing stack games in profile_pc() gpiolib: cdev: Disallow reconfiguration without direction (uAPI v1) gpio: davinci: Validate the obtained number of IRQs drm/panel: simple: Add missing display timing flags for KOE TX26D202VM0BWA nvme: fixup comment for nvme RDMA Provider Type drm/radeon/radeon_display: Decrease the size of allocated memory soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message media: dvbdev: Initialize sbuf ALSA: emux: improve patch ioctl data validation crypto: ecdh - explicitly zeroize private_key net/dpaa2: Avoid explicit cpumask var allocation on stack net/iucv: Avoid explicit cpumask var allocation on stack RDMA/restrack: Fix potential invalid address access bpf: Add a check for struct bpf_fib_lookup size mtd: partitions: redboot: Added conversion of operands to a larger type x86/fpu: Fix AMD X86_BUG_FXSAVE_LEAK fixup vduse: Temporarily fail if control queue feature requested vduse: validate block features only with block devices drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro() netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers tcp: fix tcp_rcv_fastopen_synack() to enter TCP_CA_Loss for failed TFO parisc: use correct compat recv/recvfrom syscalls sparc: fix compat recv/recvfrom syscalls sparc: fix old compat_sys_select() Fix race for duplicate reqsk on identical SYN tcp: Use BPF timeout setting for SYN ACK RTO xdp: Remove WARN() from __xdp_reg_mem_model() net: phy: micrel: add Microchip KSZ 9477 to the device table ibmvnic: Free any outstanding tx skbs during scrq reset net: dsa: microchip: fix initial port flush problem ASoC: fsl-asoc-card: set priv->pdev before using it net: stmmac: Assign configured channel value to EXTTS event net: mdio: add helpers to extract clause 45 regad and devad fields drm/amdgpu: fix UBSAN warning in kv_dpm.c cifs: fix typo in module parameter enable_gcm_256 pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set pinctrl: rockchip: use dedicated pinctrl type for RK3328 pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER Input: ili210x - fix ili251x_read_touch_data() return value gve: Clear napi->skb before dev_kfree_skb_any() gve: Add RX context. ACPI: x86: Force StorageD3Enable on more products ACPI: x86: utils: Add Picasso to the list for forcing StorageD3Enable smb: client: fix deadlock in smb2_find_smb_tcon() x86/amd_nb: Check for invalid SMN reads PCI: Add PCI_ERROR_RESPONSE and related definitions perf/core: Fix missing wakeup when waiting for context reference riscv: fix overlap of allocated page and PTR_ERR riscv: mm: init: try best to use IS_ENABLED(CONFIG_64BIT) instead of #ifdef kheaders: explicitly define file modes for archived headers Revert "kheaders: substituting --sort in archive creation" drm/i915/gt: Disarm breadcrumbs if engines are already idle drm/i915/gt: Only kick the signal worker if there's been an update ksmbd: ignore trailing slashes in share paths x86/cpu: Fix x86_match_cpu() to match just X86_VENDOR_INTEL x86/cpu/vfm: Add new macros to work with (vendor/family/model) values tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test bcache: fix variable length array abuse in btree_iter pmdomain: ti-sci: Fix duplicate PD referrals wifi: rtlwifi: rtl8192de: Fix 5 GHz TX power rtlwifi: rtl8192de: Style clean-ups ARM: dts: samsung: smdk4412: fix keypad no-autorepeat ARM: dts: samsung: exynos4412-origen: fix keypad no-autorepeat ARM: dts: samsung: smdkv310: fix keypad no-autorepeat perf script: Show also errors for --insn-trace option perf: script: add raw|disasm arguments to --insn-trace option drm/amd/display: revert Exit idle optimizations before HDCP execution arm64: dts: imx8qm-mek: fix gpio number for reg_usdhc2_vmmc dt-bindings: i2c: google,cros-ec-i2c-tunnel: correct path to i2c-controller schema i2c: ocores: set IACK bit after core is enabled tcp: clear tp->retrans_stamp in tcp_rcv_fastopen_synack() kcov: don't lose track of remote references during softirqs gcov: add support for GCC 14 drm/radeon: fix UBSAN warning in kv_dpm.c drm/i915/mso: using joiner is not possible with eDP MSO ALSA: hda/realtek: Limit mic boost on N14AP7 KVM: x86: Always sync PIR to IRR prior to scanning I/O APIC routes btrfs: retry block group reclaim without infinite loop net: do not leave a dangling sk pointer, when socket creation fails serial: stm32: rework RX over DMA RDMA/mlx5: Add check for srq max_sge attribute ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." regulator: bd71815: fix ramp values dmaengine: ioatdma: Fix missing kmem_cache_destroy() dmaengine: ioatdma: Fix kmemleak in ioat_pci_probe() dmaengine: ioatdma: Fix error path in ioat3_dma_probe() dmaengine: ioat: use PCI core macros for PCIe Capability dmaengine: ioatdma: Fix leaking on version mismatch dmaengine: ioat: Drop redundant pci_enable_pcie_error_reporting() dmaengine: ioat: switch from 'pci_' to 'dma_' API dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list regulator: core: Fix modpost error "regulator_get_regmap" undefined net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings bnxt_en: Restore PTP tx_avail count in case of skb_pad() error seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors netfilter: ipset: Fix suspicious rcu_dereference_protected() octeontx2-pf: Add error handling to VLAN unoffload handling virtio_net: checksum offloading handling fix net: stmmac: No need to calculate speed divider when offload is disabled ptp: fix integer overflow in max_vclocks_store sched: act_ct: add netns into the key of tcf_ct_flow_table net/sched: act_ct: set 'net' pointer when creating new nf_flow_table tipc: force a dst refcount before doing decryption net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() net/sched: act_api: rely on rcu in tcf_idr_check_alloc qca_spi: Make interrupt remembering atomic netns: Make get_net_ns() handle zero refcount net xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() ipv6: prevent possible NULL dereference in rt6_probe() ipv6: prevent possible NULL deref in fib6_nh_init() netrom: Fix a memory leak in nr_heartbeat_expiry() cipso: fix total option length computation tracing: Build event generation tests only as modules mips: bmips: BCM6358: make sure CBR is correctly set MIPS: Routerboard 532: Fix vendor retry check code serial: exar: adding missing CTI and Exar PCI ids serial: imx: Introduce timeout when waiting on transmitter empty MIPS: Octeon: Add PCIe link status check PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports udf: udftime: prevent overflow in udf_disk_stamp_to_time() Avoid hw_desc array overrun in dw-axi-dmac usb: misc: uss720: check for incompatible versions of the Belkin F5U002 f2fs: remove clear SB_INLINECRYPT flag in default_options iommu/arm-smmu-v3: Free MSIs in case of ENOMEM power: supply: cros_usbpd: provide ID table for avoiding fallback match powerpc/io: Avoid clang null pointer arithmetic warnings powerpc/pseries: Enforce hcall result buffer validity and size drm/lima: mask irqs in timeout path before hard reset drm/lima: add mask irq callback to gp and pp drm/amd/display: Exit idle optimizations before HDCP execution Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl ACPI: video: Add backlight=native quirk for Lenovo Slim 7 16ARH7 HID: Add quirk for Logitech Casa touchpad netpoll: Fix race condition in netpoll_owner_active kselftest: arm64: Add a null pointer check scsi: qedi: Fix crash while reading debugfs attribute drop_monitor: replace spin_lock by raw_spin_lock af_packet: avoid a false positive warning in packet_setsockopt() wifi: ath9k: work around memset overflow warning batman-adv: bypass empty buckets in batadv_purge_orig_ref() selftests/bpf: Fix flaky test btf_map_in_map/lookup_update selftests/bpf: Prevent client connect before server bind in test_tc_tunnel.sh block/ioctl: prefer different overflow check rcutorture: Fix invalid context warning when enable srcu barrier testing rcutorture: Make stall-tasks directly exit when rcutorture tests end rcutorture: Fix rcu_torture_one_read() pipe_count overflow comment crypto: hisilicon/sec - Fix memory leak for sec resource release padata: Disable BH when taking works lock on MT path Bluetooth: qca: fix info leak when fetching board id Bluetooth: qca: Fix error code in qca_read_fw_build_info() zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING i2c: designware: Fix the functionality flags of the slave-only interface i2c: at91: Fix the functionality flags of the slave-only interface usb-storage: alauda: Check whether the media is initialized greybus: Fix use-after-free bug in gb_interface_release due to race condition. kbuild: Remove support for Clang's ThinLTO caching mptcp: pm: update add_addr counters after connect mptcp: pm: inc RmAddr MIB counter once per RM_ADDR ID hugetlb_encode.h: fix undefined behaviour (34 << 26) serial: 8250_pxa: Configure tx_loadsz to match FIFO IRQ level mm/huge_memory: don't unpoison huge_zero_folio scsi: mpi3mr: Fix ATA NCQ priority support tick/nohz_full: Don't abuse smp_call_function_single() in tick_setup_device() nilfs2: fix potential kernel bug due to lack of writeback flag waiting intel_th: pci: Add Lunar Lake support intel_th: pci: Add Meteor Lake-S support intel_th: pci: Add Sapphire Rapids SOC support intel_th: pci: Add Granite Rapids SOC support intel_th: pci: Add Granite Rapids support dmaengine: axi-dmac: fix possible race in remove() PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id ocfs2: fix races between hole punching and AIO+DIO ocfs2: use coarse time for new created files fs/proc: fix softlockup in __read_vmcore knfsd: LOOKUP can return an illegal error value spmi: hisi-spmi-controller: Do not override device identifier vmci: prevent speculation leaks by sanitizing event in event_deliver() sock_map: avoid race between sock_map_close and sk_psock_put null_blk: Print correct max open zones limit in null_init_zoned_dev() tracing/selftests: Fix kprobe event name test for .isra. functions mptcp: ensure snd_una is properly initialized on connect drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found drm/exynos/vidi: fix memory leak in .get_modes() drivers: core: synchronize really_probe() and dev_uevent() iio: imu: inv_icm42600: delete unneeded update watermark call iio: dac: ad5592r: fix temperature channel scaling value iio: adc: ad9467: fix scan type sign af_unix: Read with MSG_PEEK loops if the first unread byte is OOB ionic: fix use after netif_napi_del() net/ipv6: Fix the RT cache flush via sysctl using a previous delay net: stmmac: replace priv->speed with the portTransmitRate from the tc-cbs parameters netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets tcp: fix race in tcp_v6_syn_recv_sock() drm/bridge/panel: Fix runtime warning on panel bridge release drm/komeda: check for error-valued pointer liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet net: hns3: add cond_resched() to hns3 ring buffer init process net: hns3: fix kernel crash problem in concurrent scenario net: sfp: Always call `sfp_sm_mod_remove()` on remove drm/vmwgfx: 3D disabled should not effect STDU memory limits HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() iommu: Return right value in iommu_sva_bind_device() iommu/amd: Fix sysfs leak in iommu init iommu/amd: Introduce pci segment structure HID: core: remove unnecessary WARN_ON() in implement() gpio: tqmx86: store IRQ trigger type and unmask status separately gpio: tqmx86: fix typo in Kconfig label platform/x86: dell-smbios: Fix wrong token data in sysfs platform/x86: dell-smbios-base: Use sysfs_emit() SUNRPC: return proper error from gss_wrap_req_priv clk: sifive: Do not register clkdevs for PRCI clocks Input: try trimming too long modalias strings powerpc/uaccess: Fix build errors seen with GCC 13/14 scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory xhci: Apply broken streams quirk to Etron EJ188 xHCI host xhci: Handle TD clearing for multiple streams case xhci: Apply reset resume quirk to Etron EJ188 xHCI host xhci: Set correct transferred length for cancelled bulk transfers jfs: xattr: fix buffer overflow for invalid xattr mei: me: release irq in mei_me_pci_resume error path usb: typec: tcpm: Ignore received Hard Reset in TOGGLING state USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors nilfs2: return the mapped address from nilfs_get_page() nilfs2: Remove check for PageError btrfs: fix leak of qgroup extent records after transaction abort wifi: ath10k: fix QCOM_RPROC_COMMON dependency selftests/mm: compaction_test: fix bogus test success on Aarch64 selftests/mm: conform test to TAP format output selftests/mm: compaction_test: fix incorrect write of zero to nr_hugepages mm/cma: drop incorrect alignment check in cma_init_reserved_mem cma: factor out minimum alignment requirement i2c: acpi: Unbind mux adapters before delete i2c: add fwnode APIs mmc: davinci: Don't strip remove function when driver is builtin mmc: davinci_mmc: Convert to platform remove callback returning void ftrace: Fix possible use-after-free issue in ftrace_location() x86/ibt,ftrace: Search for __fentry__ location serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler serial: sc16is7xx: replace hardcoded divisor value with BIT() macro Bluetooth: qca: fix info leak when fetching fw build id Bluetooth: qca: add support for QCA2066 Bluetooth: qca: use switch case for soc type behavior Bluetooth: btqca: Add WCN3988 support Bluetooth: btqca: use le32_to_cpu for ver.soc_id Bluetooth: hci_qca: mark OF related data as maybe unused skbuff: introduce skb_pull_data misc/pvpanic-pci: register attributes via pci_driver misc/pvpanic: deduplicate common code pvpanic: Indentation fixes here and there pvpanic: Keep single style across modules drm/amd/display: Fix incorrect DSC instance for MST drm/amd/display: drop unnecessary NULL checks in debugfs drm/amd/display: Clean up some inconsistent indenting drm/amd/display: Handle Y carry-over in VCP X.Y calculation iio: accel: mxc4005: Reset chip on probe() and resume() usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete usb: gadget: f_fs: use io_data->status consistently ipv6: fix possible race in __fib6_drop_pcpu_from() af_unix: Annotate data-race of sk->sk_shutdown in sk_diag_fill(). af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen(). af_unix: Use skb_queue_empty_lockless() in unix_release_sock(). af_unix: annotate lockless accesses to sk->sk_err af_unix: Use unix_recvq_full_lockless() in unix_stream_connect(). af_unix: Annotate data-race of net->unx.sysctl_max_dgram_qlen. af_unix: Annotate data-races around sk->sk_state in UNIX_DIAG. af_unix: Annotate data-race of sk->sk_state in unix_stream_read_skb(). af_unix: Annotate data-races around sk->sk_state in sendmsg() and recvmsg(). af_unix: Annotate data-race of sk->sk_state in unix_stream_connect(). net: drop nopreempt requirement on sock_prot_inuse_add() net: inline sock_prot_inuse_add() af_unix: Annotate data-races around sk->sk_state in unix_write_space() and poll(). af_unix: Annotate data-race of sk->sk_state in unix_inq_len(). af_unix: Annodate data-races around sk->sk_state for writers. af_unix: Set sk->sk_state under unix_state_lock() for truly disconencted peer. ptp: Fix error message on failed pin verification net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB vxlan: Fix regression when dropping packets due to invalid src addresses net: sched: sch_multiq: fix possible OOB write in multiq_tune() octeontx2-af: Always allocate PF entries from low prioriy zone bpf: Set run context for rawtp test_run callback ipv6: sr: block BH in seg6_output_core() and seg6_input_core() net/ncsi: Fix the multi thread manner of NCSI driver net/ncsi: Simplify Kconfig/dts control flow wifi: mac80211: correctly parse Spatial Reuse Parameter Set element wifi: iwlwifi: mvm: don't read past the mfuart notifcation wifi: iwlwifi: mvm: check n_ssids before accessing the ssids wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64 wifi: cfg80211: pmsr: use correct nla_get_uX functions wifi: cfg80211: Lock wiphy in cfg80211_get_station wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects ANDROID: update symbol for unisoc whitelist ANDROID: GKI: Update symbols list for vivo FROMLIST: iommu: Avoid races around default domain allocations BACKPORT: iommu: Have __iommu_probe_device() check for already probed devices UPSTREAM: netfilter: nf_conntrack_h323: Add protection for bmp length out of range ANDROID: fix kernelci build breaks due to hid/uhid cyclic dependency ANDROID: ABI: Update symbols to unisoc whitelist for the K5.15 FROMLIST: locking/rwsem: Add __always_inline annotation to __down_write_common() and inlined callers UPSTREAM: scsi: ufs: core: Perform read back after writing UTP_TASK_REQ_LIST_BASE_H UPSTREAM: mm/damon/vaddr: change asm-generic/mman-common.h to linux/mman.h UPSTREAM: crypto: xts - use 'spawn' for underlying single-block cipher UPSTREAM: mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() UPSTREAM: firmware: arm_ffa: Don't set the memory region attributes for MEM_LEND UPSTREAM: wifi: cfg80211: remove dead/unused enum value UPSTREAM: f2fs: avoid false alarm of circular locking UPSTREAM: wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems() UPSTREAM: wifi: cfg80211: fix regulatory disconnect for non-MLO ANDROID: GKI: Update symbol list for vivo ANDROID: GKI: export sys_exit tracepoint ANDROID: GKI: Update symbol list for Amlogic ANDROID: mm: allow hooks into free_pages_prepare() ANDROID: GKI: Update symbol list for vivo Revert "net: dev: Convert sa_data to flexible array in struct sockaddr" Revert "arp: Prevent overflow in arp_req_get()." Revert "usb: roles: fix NULL pointer issue when put module's reference" Revert "usb: roles: don't get/set_role() when usb_role_switch is unregistered" Revert "mptcp: fix lockless access in subflow ULP diag" Revert "xhci: cleanup xhci_hub_control port references" Revert "xhci: move port specific items such as state completions to port structure" Revert "xhci: rename resume_done to resume_timestamp" Revert "xhci: clear usb2 resume related variables in one place." Revert "xhci: decouple usb2 port resume and get_port_status request handling" Revert "xhci: track port suspend state correctly in unsuccessful resume cases" Revert "posix-timers: Ensure timer ID search-loop limit is valid" ANDROID: vendor_hooks: add hooks in rwsem read trylock UPSTREAM: netfilter: nf_conntrack_h323: Add protection for bmp length out of range ANDROID: GKI: Update symbol list for vivo ANDROID: GKI: add percpu_rwsem vendor hooks ANDROID: GKI: Update symbol list for vivo ANDROID: vendor_hooks: add hooks in rwsem Revert "f2fs: fix to tag gcing flag on page during block migration" ANDROID: GKI: Update symbol list for vivo ANDROID: vendor_hooks: add vendor hooks for fuse request UPSTREAM: af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock. UPSTREAM: af_unix: Don't peek OOB data without MSG_OOB. UPSTREAM: af_unix: Clear stale u->oob_skb. ANDROID: GKI: Update symbols to symbol list Revert "f2fs: fix to tag gcing flag on page during block migration" Linux 5.15.161 scsi: ufs: ufs-qcom: Clear qunipro_g4_sel for HW major version > 5 NFS: Fix READ_PLUS when server doesn't support OP_READ_PLUS nfs: fix undefined behavior in nfs_block_bits() EDAC/igen6: Convert PCIBIOS_* return codes to errnos i3c: master: svc: fix invalidate IBI type and miss call client IBI handler s390/cpacf: Make use of invalid opcode produce a link error s390/cpacf: Split and rework cpacf query functions s390/ap: Fix crash in AP internal function modify_bitmap() ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow sparc: move struct termio to asm/termios.h net: fix __dst_negative_advice() race kdb: Use format-specifiers rather than memset() for padding in kdb_read() kdb: Merge identical case statements in kdb_read() kdb: Fix console handling when editing and tab-completing commands kdb: Use format-strings rather than '\0' injection in kdb_read() kdb: Fix buffer overflow during tab-complete watchdog: rti_wdt: Set min_hw_heartbeat_ms to accommodate a safety margin sparc64: Fix number of online CPUs intel_th: pci: Add Meteor Lake-S CPU support net/9p: fix uninit-value in p9_client_rpc() net/ipv6: Fix route deleting failure when metric equals 0 crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak crypto: ecrdsa - Fix module auto-load on add_key crypto: ecdsa - Fix module auto-load on add-key KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode KVM: arm64: Fix AArch32 register narrowing on userspace write drm/amdgpu/atomfirmware: add intergrated info v2.3 table fbdev: savage: Handle err return when savagefb_check_var failed mmc: sdhci-acpi: Disable write protect detection on Toshiba WT10-A mmc: sdhci-acpi: Fix Lenovo Yoga Tablet 2 Pro 1380 sdcard slot not working mmc: sdhci-acpi: Sort DMI quirks alphabetically mmc: core: Add mmc_gpiod_set_cd_config() function media: v4l2-core: hold videodev_lock until dev reg, finishes media: mxl5xx: Move xpt structures off stack media: mc: mark the media devnode as registered from the, start arm64: dts: hi3798cv200: fix the size of GICR wifi: rtlwifi: rtl8192de: Fix endianness issue in RX path wifi: rtlwifi: rtl8192de: Fix low speed with WPA3-SAE wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING arm64: dts: qcom: qcs404: fix bluetooth device address arm64: tegra: Correct Tegra132 I2C alias ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx soc: qcom: rpmh-rsc: Enhance check for VRM in-flight request thermal/drivers/qcom/lmh: Check for SCM availability at probe ata: pata_legacy: make legacy_exit() work again drm/amdgpu: add error handle to avoid out-of-bounds media: lgdt3306a: Add a check against null-pointer-def f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() sunrpc: exclude from freezer when waiting for requests: scripts/gdb: fix SB_* constants parsing net: dsa: tag_sja1105: always prefer source port information from INCL_SRCPT net: dsa: sja1105: always enable the INCL_SRCPT option vxlan: Fix regression when dropping packets due to invalid src addresses mptcp: fix full TCP keep-alive support Revert "drm/amdgpu: init iommu after amdkfd device init" nilfs2: fix use-after-free of timer for log writer thread afs: Don't cross .backup mountpoint from backup volume io_uring: fail NOP if non-zero op flags is passed in mmc: core: Do not force a retune before RPMB switch drm: Check polling initialized before enabling in drm_helper_probe_single_connector_modes drm: Check output polling initialized before disabling SUNRPC: Fix loop termination condition in gss_free_in_token_pages() media: cec: core: add adap_nb_transmit_canceled() callback net: ena: Fix DMA syncing in XDP path when SWIOTLB is on genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline KVM: x86: Don't advertise guest.MAXPHYADDR as host.MAXPHYADDR in CPUID ALSA: timer: Set lower bound of start tick time hwmon: (shtc1) Fix property misspelling ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound net: ena: Fix redundant device NUMA node override net: ena: Reduce lines with longer column width boundary net: ena: Add dynamic recycling mechanism for rx buffers net: ena: Do not waste napi skb cache net: ena: Extract recurring driver reset code into a function net: ena: Add capabilities field with support for ENI stats capability spi: stm32: Don't warn about spurious interrupts kconfig: fix comparison to constant symbols, 'm', 'n' netfilter: tproxy: bail out if IP has been disabled on the device netfilter: nft_payload: skbuff vlan metadata mangle support netfilter: nft_payload: rebuild vlan header on h_proto access netfilter: nft_payload: rebuild vlan header when needed netfilter: nft_payload: move struct nft_payload_set definition where it belongs net:fec: Add fec_enet_deinit() bpf: Allow delete from sockmap/sockhash only if update is allowed net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM enic: Validate length of nl attributes in enic_set_vf_port bpf: Fix potential integer overflow in resolve_btfids dma-buf/sw-sync: don't enable IRQ from sync_print_obj() net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion net/mlx5e: Fix IPsec tunnel mode offload feature check net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8061 nvmet: fix ns enable/disable possible hang dma-mapping: benchmark: handle NUMA_NO_NODE correctly dma-mapping: benchmark: fix node id validation spi: Don't mark message DMA mapped when no transfer in it is netfilter: nft_payload: restore vlan q-in-q match support netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() ice: Interpret .set_channels() input differently nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() nfc: nci: Fix kcov check in nci_rx_work() tls: fix missing memory barrier in tls_init net: fec: avoid lock evasion when reading pps_enable riscv: stacktrace: fixed walk_stackframe() riscv: stacktrace: Make walk_stackframe cross pt_regs frame virtio: delete vq in vp_find_vqs_msix() when request_irq() fails arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY openvswitch: Set the skbuff pkt_type for proper pmtud support. tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). ipv6: sr: fix memleak in seg6_hmac_init_algo af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock. rpcrdma: fix handling for RDMA_CM_EVENT_DEVICE_REMOVAL sunrpc: fix NFSACL RPC retry on soft mount NFSv4: Fixup smatch warning for ambiguous return ASoC: tas2552: Add TX path for capturing AUDIO-OUT data nfc: nci: Fix uninit-value in nci_rx_work ipv6: sr: fix missing sk_buff release in seg6_input_core net: Always descend into dsa/ folder with CONFIG_NET_DSA enabled x86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER=y regulator: bd71828: Don't overwrite runtime voltages ASoC: mediatek: mt8192: fix register configuration for tdm null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION() media: cec: core: avoid confusing "transmit timed out" message media: cec: core: avoid recursive cec_claim_log_addrs media: cec-adap.c: drop activate_cnt, use state info instead media: cec: use call_op and check for !unregistered media: cec: correctly pass on reply results media: cec: abort if the current transmit was canceled media: cec: call enable_adap on s_log_addrs media: cec: cec-api: add locking in cec_release() media: cec: cec-adap: always cancel work in cec_transmit_msg_fh um: Fix the -Wmissing-prototypes warning for __switch_mm powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp media: flexcop-usb: fix sanity check of bNumEndpoints media: flexcop-usb: clean up endpoint sanity checks Input: cyapa - add missing input core locking to suspend/resume functions scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() media: stk1160: fix bounds checking in stk1160_copy_video() drm/bridge: tc358775: fix support for jeida-18 and jeida-24 fs/ntfs3: Use variable length array instead of fixed size fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow um: vector: fix bpfflash parameter evaluation um: Add winch to winch_handlers before registering winch IRQ um: Fix return value in ubd_init() drm/msm/dpu: Always flush the slave INTF on the CTL drm/msm/dsi: Print dual-DSI-adjusted pclk instead of original mode pclk Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation mmc: sdhci_am654: Fix ITAPDLY for HS400 timing mmc: sdhci_am654: Add ITAPDLYSEL in sdhci_j721e_4bit_set_clock mmc: sdhci_am654: Add OTAP/ITAP delay enable mmc: sdhci_am654: Drop lookup for deprecated ti,otap-del-sel mmc: sdhci_am654: Write ITAPDLY for DDR52 timing mmc: sdhci_am654: Add tuning algorithm for delay chain Input: ioc3kbd - add device table Input: ioc3kbd - convert to platform remove callback returning void Input: ims-pcu - fix printf string overflow s390/boot: Remove alt_stfle_fac_list from decompressor s390/ipl: Fix incorrect initialization of nvme dump block s390/ipl: Fix incorrect initialization of len fields in nvme reipl block s390/vdso: Use standard stack frame layout s390/vdso: Generate unwind information for C modules s390/vdso64: filter out munaligned-symbols flag for vdso s390/vdso: filter out mno-pic-data-is-text-relative cflag libsubcmd: Fix parse-options memory leak serial: sh-sci: protect invalidating RXDMA on shutdown f2fs: compress: don't allow unaligned truncation on released compress inode f2fs: fix to release node block count in error path of f2fs_new_node_page() f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem lock PCI/EDR: Align EDR_PORT_LOCATE_DSM with PCI Firmware r3.3 PCI/EDR: Align EDR_PORT_DPC_ENABLE_DSM with PCI Firmware r3.3 extcon: max8997: select IRQ_DOMAIN instead of depending on it ppdev: Add an error check in register_device ppdev: Remove usage of the deprecated ida_simple_xx() API stm class: Fix a double free in stm_register_device() usb: gadget: u_audio: Clear uac pointer when freed. watchdog: bd9576: Drop "always-running" property watchdog: bd9576_wdt: switch to using devm_fwnode_gpiod_get() dt-bindings: pinctrl: mediatek: mt7622: fix array properties microblaze: Remove early printk call from cpuinfo-static.c microblaze: Remove gcc flag for non existing early_printk.c file fpga: region: add owner module and take its refcount fpga: region: Use standard dev_release for class driver coresight: etm4x: Fix access to resource selector registers coresight: etm4x: Safe access for TRCQCLTR coresight: etm4x: Cleanup TRCIDR0 register accesses coresight: no-op refactor to make INSTP0 check more idiomatic coresight: etm4x: Do not save/restore Data trace control registers coresight: etm4x: Do not hardcode IOMEM access for register restore iio: pressure: dps310: support negative temperature values coresight: etm4x: Fix unbalanced pm_runtime_enable() f2fs: fix to check pinfile flag in f2fs_move_file_range() f2fs: fix to relocate check condition in f2fs_fallocate() f2fs: fix typos in comments f2fs: do not allow partial truncation on pinned file f2fs: compress: fix to relocate check condition in f2fs_ioc_{,de}compress_file() f2fs: convert to use sbi directly f2fs: compress: fix to relocate check condition in f2fs_{release,reserve}_compress_blocks() dt-bindings: PCI: rcar-pci-host: Add missing IOMMU properties dt-bindings: PCI: rcar-pci-host: Add optional regulators serial: sc16is7xx: add proper sched.h include for sched_set_fifo() PCI: tegra194: Fix probe path for Endpoint mode greybus: arche-ctrl: move device table to its right location serial: max3100: Fix bitwise types serial: max3100: Update uart_driver_registered on driver removal serial: max3100: Lock port->lock when calling uart_handle_cts_change() firmware: dmi-id: add a release callback function dmaengine: idma64: Add check for dma_set_max_seg_size soundwire: cadence: fix invalid PDI offset f2fs: fix to wait on page writeback in __clone_blkaddrs() f2fs: Delete f2fs_copy_page() and replace with memcpy_page() greybus: lights: check return of get_channel_from_mode sched/core: Fix incorrect initialization of the 'burst' parameter in cpu_max_write() sched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level af_packet: do not call packet_read_pending() from tpacket_destruct_skb() netrom: fix possible dead-lock in nr_rt_ioctl() net: qrtr: ns: Fix module refcnt selftests: net: bridge: increase IGMP/MLD exclude timeout membership interval RDMA/IPoIB: Fix format truncation compilation errors selftests/kcmp: remove unused open mode selftests/kcmp: Make the test output consistent and clear SUNRPC: Fix gss_free_in_token_pages() ext4: fix potential unnitialized variable ext4: remove unused parameter from ext4_mb_new_blocks_simple() ext4: try all groups in ext4_mb_new_blocks_simple ext4: fix unit mismatch in ext4_mb_new_blocks_simple ext4: simplify calculation of blkoff in ext4_mb_new_blocks_simple sunrpc: removed redundant procp check drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() virt: acrn: stop using follow_pfn virt: acrn: Prefer array_size and struct_size over open coded arithmetic ext4: avoid excessive credit estimate in ext4_tmpfile() x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map clk: qcom: mmcc-msm8998: fix venus clock issue RDMA/hns: Modify the print level of CQE error RDMA/hns: Use complete parentheses in macros RDMA/hns: Fix GMV table pagesize RDMA/hns: Fix deadlock on SRQ async events. RDMA/hns: Fix return value in hns_roce_map_mr_sg RDMA/mlx5: Adding remote atomic access flag to updatable flags drm/mipi-dsi: use correct return type for the DSC functions drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector drm/bridge: tc358775: Don't log an error when DSI host can't be found drm/bridge: lt9611: Don't log an error when DSI host can't be found drm/bridge: lt8912b: Don't log an error when DSI host can't be found ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value drm: vc4: Fix possible null pointer dereference drm/arm/malidp: fix a possible null pointer dereference media: atomisp: ssh_css: Fix a null-pointer dereference in load_video_binaries fbdev: sh7760fb: allow modular build media: dt-bindings: ovti,ov2680: Fix the power supply names media: ipu3-cio2: Request IRQ earlier media: ipu3-cio2: Use temporary storage for struct device pointer drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference media: radio-shark2: Avoid led_names truncations media: ngene: Add dvb_ca_en50221_init return value check fbdev: sisfb: hide unused variables powerpc/fsl-soc: hide unused const variable drm/mediatek: Add 0 size check to mtk_drm_gem_obj drm/meson: vclk: fix calculation of 59.94 fractional rates ASoC: kirkwood: Fix potential NULL dereference fbdev: shmobile: fix snprintf truncation mtd: rawnand: hynix: fixed typo mtd: core: Report error if first mtd_otp_size() call fails in mtd_otp_nvmem_add() ASoC: Intel: Disable route checks for Skylake boards drm/amd/display: Fix potential index out of bounds in color transformation function dev_printk: Add and use dev_no_printk() printk: Let no_printk() use _printk() mptcp: SO_KEEPALIVE: fix getsockopt support s390/bpf: Emit a barrier for BPF_FETCH instructions net/mlx5: Discard command completions in internal error ipv6: sr: fix invalid unregister error path ipv6: sr: fix incorrect unregister order ipv6: sr: add missing seg6_local_exit net: openvswitch: fix overwriting ct original tuple for ICMPv6 net: usb: smsc95xx: stop lying about skb->truesize af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg net: ethernet: cortina: Locking fixes eth: sungem: remove .ndo_poll_controller to avoid deadlocks net: ipv6: fix wrong start position when receive hop-by-hop fragment m68k: mac: Fix reboot hang on Mac IIci m68k: Fix spinlock race in kernel thread creation net: usb: sr9700: stop lying about skb->truesize usb: aqc111: stop lying about skb->truesize wifi: mwl8k: initialize cmd->addr[] properly scsi: qla2xxx: Fix debugfs output for fw_resource_count scsi: qedf: Ensure the copied buf is NUL terminated scsi: bfa: Ensure the copied buf is NUL terminated HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors selftests/resctrl: fix clang build failure: use LOCAL_HDRS selftests/binderfs: use the Makefile's rules, not Make's implicit rules Revert "sh: Handle calling csum_partial with misaligned data" sh: kprobes: Merge arch_copy_kprobe() into arch_prepare_kprobe() wifi: ar5523: enable proper endpoint verification wifi: carl9170: add a proper sanity check for endpoints macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" net: give more chances to rcu in netdev_wait_allrefs_any() pwm: sti: Simplify probe function using devm functions pwm: sti: Prepare removing pwm_chip from driver data pwm: sti: Convert to platform remove callback returning void tcp: avoid premature drops in tcp_add_backlog() net: dsa: mv88e6xxx: Avoid EEPROM timeout without EEPROM on 88E6250-family switches net: dsa: mv88e6xxx: Add support for model-specific pre- and post-reset handlers wifi: ath10k: populate board data for WCN3990 wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() thermal/drivers/tsens: Fix null pointer dereference x86/purgatory: Switch to the position-independent small code model scsi: hpsa: Fix allocation size for Scsi_Host private data scsi: libsas: Fix the failure of adding phy with zero-address to port cppc_cpufreq: Fix possible null pointer dereference udp: Avoid call to compute_score on multiple sites net: remove duplicate reuseport_lookup functions net: export inet_lookup_reuseport and inet6_lookup_reuseport cpufreq: exit() callback is optional cpufreq: Rearrange locking in cpufreq_remove_dev() cpufreq: Split cpufreq_offline() cpufreq: Reorganize checks in cpufreq_offline() selftests/bpf: Fix umount cgroup2 error in test_sockmap gfs2: Fix "ignore unlock failures after withdraw" gfs2: Don't forget to complete delayed withdraw ACPI: disable -Wstringop-truncation irqchip/loongson-pch-msi: Fix off-by-one on allocation error path irqchip/alpine-msi: Fix off-by-one in allocation error path scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL scsi: ufs: core: Perform read back after disabling interrupts scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV scsi: ufs: qcom: Perform read back after writing CGC enable scsi: ufs: qcom: Perform read back after writing unipro mode scsi: ufs: ufs-qcom: Clear qunipro_g4_sel for HW version major 5 scsi: ufs: ufs-qcom: Fix the Qcom register name for offset 0xD0 scsi: ufs: qcom: Perform read back after writing REG_UFS_SYS1CLK_1US scsi: ufs: qcom: Perform read back after writing reset bit bpf: Pack struct bpf_fib_lookup qed: avoid truncating work queue length sched/fair: Add EAS checks before updating root_domain::overutilized x86/boot: Ignore relocations in .notes sections in walk_relocs() too wifi: ath10k: poll service ready message before failing md: fix resync softlockup when bitmap size is less than array size null_blk: Fix missing mutex_destroy() at module removal soc: mediatek: cmdq: Fix typo of CMDQ_JUMP_RELATIVE jffs2: prevent xattr node from overflowing the eraseblock s390/cio: fix tracepoint subchannel type field crypto: x86/sha512-avx2 - add missing vzeroupper crypto: x86/sha256-avx2 - add missing vzeroupper crypto: x86/nh-avx2 - add missing vzeroupper crypto: ccp - drop platform ifdef checks parisc: add missing export of __cmpxchg_u8() nilfs2: fix out-of-range warning ecryptfs: Fix buffer size for tag 66 packet firmware: raspberrypi: Use correct device for DMA mappings mm/slub, kunit: Use inverted data to corrupt kmem cache crypto: bcm - Fix pointer arithmetic openpromfs: finish conversion to the new mount API epoll: be better about file lifetimes nvme: find numa distance only if controller has valid numa id x86/mm: Remove broken vsyscall emulation code from the page fault code drm/amdkfd: Flush the process wq before creating a kfd_process ASoC: da7219-aad: fix usage of device_get_named_child_node() softirq: Fix suspicious RCU usage in __do_softirq() ASoC: rt715-sdca: volume step modification ASoC: rt715: add vendor clear control register regulator: vqmmc-ipq4019: fix module autoloading ASoC: dt-bindings: rt5645: add cbj sleeve gpio property ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating regulator: irq_helpers: duplicate IRQ name selftests: sud_test: return correct emulated syscall value on RISC-V drm/amd/display: Set color_mgmt_changed to true on unsuspend net: usb: qmi_wwan: add Telit FN920C04 compositions dt-bindings: rockchip: grf: Add missing type to 'pcie-phy' node wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class ALSA: Fix deadlocks with kctl removals at disconnection ALSA: core: Fix NULL module pointer assignment at card init fs/ntfs3: Break dir enumeration if directory contents error fs/ntfs3: Fix case when index is reused during tree transformation fs/ntfs3: Taking DOS names into account during link counting fs/ntfs3: Remove max link count info display during driver init nilfs2: fix potential hang in nilfs_detach_log_writer() nilfs2: fix unexpected freezing of nilfs_segctor_sync() net: smc91x: Fix m68k kernel compilation for ColdFire CPU tools/latency-collector: Fix -Wformat-security compile warns ring-buffer: Fix a race between readers and resize checks r8169: Fix possible ring buffer corruption on fragmented Tx packets. Revert "r8169: don't try to disable interrupts if NAPI is, scheduled already" serial: 8250_bcm7271: use default_mux_rate if possible speakup: Fix sizeof() vs ARRAY_SIZE() bug tty: n_gsm: fix missing receive state reset after mode switch tty: n_gsm: fix possible out-of-bounds in gsm0_receive() x86/tsc: Trust initial offset in architectural TSC-adjust MSRs BACKPORT: f2fs: clear writeback when compression failed FROMGIT: f2fs: do not return EFSCORRUPTED, but try to run online repair BACKPORT: f2fs: support recording errors into superblock BACKPORT: f2fs: fix to detect corrupted meta ino ANDROID: 16K: Only check basename of linker context UPSTREAM: mmc: core: Avoid negative index with array access UPSTREAM: mmc: core: Initialize mmc_blk_ioc_data ANDROID: GKI: Update oplus symbol list BACKPORT: f2fs: fix to handle error paths of {new,change}_curseg() BACKPORT: f2fs: fix to check return value __allocate_new_segment BACKPORT: f2fs: fix to handle segment allocation failure correctly BACKPORT: f2fs: stop checkpoint when get a out-of-bounds segment UPSTREAM: usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete UPSTREAM: usb: gadget: f_fs: use io_data->status consistently UPSTREAM: wifi: cfg80211: Clear mlo_links info when STA disconnects ANDROID: ABI fixup for abi break in struct dst_ops BACKPORT: net: fix __dst_negative_advice() race ANDROID: Add __nocfi return for swsusp_arch_resume ANDROID: ABI fixup for abi break in struct dst_ops BACKPORT: net: fix __dst_negative_advice() race ANDROID: GKI: Update vendor symbol list for vivo ANDROID: vendor_hooks: add vendor hooks for init mmc queue BACKPORT: usb: gadget: uvc: Disable interrupt endpoint by default UPSTREAM: usb: gadget: uvc: Add new enable_interrupt_ep attribute UPSTREAM: selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior BACKPORT: usb: gadget: uvc: Rename uvc_control_ep Linux 5.15.160 docs: kernel_include.py: Cope with docutils 0.21 admin-guide/hw-vuln/core-scheduling: fix return type of PR_SCHED_CORE_GET KEYS: trusted: Do not use WARN when encode fails remoteproc: mediatek: Make sure IPI buffer fits in L2TCM serial: kgdboc: Fix NMI-safety problems from keyboard reset code usb: typec: ucsi: displayport: Fix potential deadlock binder: fix max_thread type inconsistency drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() KVM: x86: Clear "has_error_code", not "error_code", for RM exception injection netlink: annotate data-races around sk->sk_err netlink: annotate lockless accesses to nlk->max_recvmsg_len net: tls: handle backlogging of crypto requests tls: fix race between async notify and socket close net: tls: factor out tls_*crypt_async_wait() tls: extract context alloc/initialization out of tls_set_sw_offload tls: rx: simplify async wait net: bcmgenet: synchronize UMAC_CMD access net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems" KEYS: trusted: Fix memory leak in tpm2_key_encode() nfsd: don't allow nfsd threads to be signalled. pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin() drm/amd/display: Fix division by zero in setup_dsc_config ANDROID: fuse: Skip canonical path logic if ENOSYS ANDROID: update symbol for unisoc device whitelist UPSTREAM: epoll: be better about file lifetimes ANDROID: GKI: Update symbol list for mtk Linux 5.15.159 md: fix kmemleak of rdev->serial keys: Fix overwrite of key expiration on instantiation Bluetooth: qca: fix firmware check error path Bluetooth: qca: fix NVM configuration parsing Bluetooth: qca: add missing firmware sanity checks regulator: core: fix debugfs creation regression hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us net: fix out-of-bounds access in ops_init drm/vmwgfx: Fix invalid reads in fence signaled events mei: me: add lunar lake point M DID slimbus: qcom-ngd-ctrl: Add timeout for wait operation dyndbg: fix old BUG_ON in >control parser ASoC: ti: davinci-mcasp: Fix race condition during probe ASoC: tegra: Fix DSPK 16-bit playback net: bcmgenet: synchronize use of bcmgenet_set_rx_mode() tipc: fix UAF in error path iio: accel: mxc4005: Interrupt handling fixes iio:imu: adis16475: Fix sync mode setting dt-bindings: iio: health: maxim,max30102: fix compatible check mptcp: ensure snd_nxt is properly initialized on connect btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU usb: dwc3: core: Prevent phy suspend during init usb: xhci-plat: Don't include xhci.h usb: gadget: f_fs: Fix a race condition when processing setup packets. usb: gadget: composite: fix OS descriptors w_value logic usb: ohci: Prevent missed ohci interrupts usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed device usb: typec: ucsi: Fix connector check on init usb: typec: ucsi: Check for notifications after init arm64: dts: qcom: Fix 'interrupt-map' parent address cells Reapply "drm/qxl: simplify qxl_fence_wait" firewire: nosy: ensure user_length is taken into account when fetching packet contents btrfs: fix kvcalloc() arguments order in btrfs_ioctl_send() ACPI: CPPC: Fix access width used for PCC registers ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro Revert "Revert "ACPI: CPPC: Use access_width over bit_width for system memory accesses"" drm/amd/display: Atom Integrated System Info v2_2 for DCN35 drm/connector: Add \n to message about demoting connector force-probes drm/meson: dw-hdmi: add bandgap setting for g12 drm/meson: dw-hdmi: power up phy on device init net: hns3: fix port vlan filter not disabled issue net: hns3: split function hclge_init_vlan_config() net: hns3: use appropriate barrier function after setting a bit value net: hns3: change type of numa_node_mask as nodemask_t net: hns3: refactor hclge_cmd_send with new hclge_comm_cmd_send API net: hns3: create new set of unified hclge_comm_cmd_send APIs net: hns3: create new cmdq hardware description structure hclge_comm_hw net: hns3: refactor hns3 makefile to support hns3_common module net: hns3: direct return when receive a unknown mailbox message net: hns3: refactor function hclge_mbx_handler() net: hns3: add query vf ring and vector map relation net: hns3: add log for workqueue scheduled late net: hns3: using user configure after hardware reset net: hns3: PF support get unicast MAC address space assigned by firmware ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() net: bridge: fix corrupted ethernet header on multicast-to-unicast phonet: fix rtm_phonet_notify() skb allocation hwmon: (corsair-cpro) Protect ccp->wait_input_report with a spinlock hwmon: (corsair-cpro) Use complete_all() instead of complete() in ccp_raw_event() hwmon: (corsair-cpro) Use a separate buffer for sending commands rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets ARM: 9381/1: kasan: clear stale stack poison xfrm: Preserve vlan tags for transport mode software GRO qibfs: fix dentry leak bpf, sockmap: Improved check for empty queue bpf, sockmap: Reschedule is now done through backlog bpf, sockmap: Convert schedule_work into delayed_work bpf, sockmap: Handle fin correctly bpf, sockmap: TCP data stall on recv before accept net:usb:qmi_wwan: support Rolling modules drm/nouveau/dp: Don't probe eDP ports twice harder fs/9p: drop inodes immediately on non-.L too clk: Don't hold prepare_lock when calling kref_put() gpio: crystalcove: Use -ENOTSUPP consistently gpio: wcove: Use -ENOTSUPP consistently 9p: explicitly deny setlease attempts fs/9p: translate O_TRUNC into OTRUNC fs/9p: only translate RWX permissions for plain 9P2000 iommu: mtk: fix module autoloading selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior MIPS: scall: Save thread_info.syscall unconditionally on entry gpu: host1x: Do not setup DMA for virtual devices blk-iocost: avoid out of bounds shift scsi: target: Fix SELinux error when systemd-modules loads the target module btrfs: always clear PERTRANS metadata during commit btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve tools/power turbostat: Fix Bzy_MHz documentation typo tools/power turbostat: Fix added raw MSR output firewire: ohci: mask bus reset interrupts between ISR and bottom half ata: sata_gemini: Check clk_enable() result net: bcmgenet: Reset RBUF on first open ALSA: line6: Zero-initialize message buffers kbuild: Disable KCSAN for autogenerated *.mod.c intermediaries btrfs: return accurate error code on open failure in open_fs_devices() scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload net: mark racy access on sk->sk_rcvbuf wifi: cfg80211: fix rdev_dump_mpp() arguments order wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc gfs2: Fix invalid metadata access in punch_hole scsi: lpfc: Replace hbalock with ndlp lock in lpfc_nvme_unregister_port() scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic scsi: lpfc: Move NPIV's transport unregistration to after resource clean up KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change net: gro: add flush check in udp_gro_receive_segment drm/panel: ili9341: Use predefined error codes drm/panel: ili9341: Respect deferred probe s390/qeth: Fix kernel panic after setting hsuid s390/qeth: don't keep track of Input Queue count tipc: fix a possible memleak in tipc_buf_append net: core: reject skb_copy(_expand) for fraglist GSO skbs net: bridge: fix multicast-to-unicast with fraglist GSO net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 cxgb4: Properly lock TX queue for the selftest. s390/cio: Ensure the copied buf is NUL terminated ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node() ASoC: meson: cards: select SND_DYNAMIC_MINORS ASoC: meson: axg-tdm-interface: manage formatters in trigger ASoC: meson: axg-card: make links nonatomic ASoC: meson: axg-fifo: use threaded irq to check periods ASoC: meson: axg-fifo: use FIELD helpers net: qede: use return from qede_parse_actions() net: qede: use return from qede_parse_flow_attr() for flow_spec net: qede: use return from qede_parse_flow_attr() for flower net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() s390/vdso: Add CFI for RA register to asm macro vdso_func net l2tp: drop flow hash on forward nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). octeontx2-af: avoid off-by-one read from userspace bna: ensure the copied buf is NUL terminated xdp: use flags field to disambiguate broadcast redirect xdp: Add xdp_do_redirect_frame() for pre-computed xdp_frames xdp: Move conversion to xdp_frame out of map functions s390/mm: Fix clearing storage keys for huge pages s390/mm: Fix storage key clearing for guest huge pages spi: hisi-kunpeng: Delete the dump interface of data registers in debugfs bpf: Fix a verifier verbose message bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue bpf, kconfig: Fix DEBUG_INFO_BTF_MODULES Kconfig definition regulator: mt6360: De-capitalize devicetree regulator subnodes pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() power: supply: mt6360_charger: Fix of_match for usb-otg-vbus regulator power: rt9455: hide unused rt9455_boost_voltage_values nfs: Handle error of rpc_proc_register() in nfs_net_init(). nfs: make the rpc_stat per net namespace nfs: expose /proc/net/sunrpc/nfs in net namespaces sunrpc: add a struct rpc_stats arg to rpc_create_args pinctrl: mediatek: paris: Rework support for PIN_CONFIG_{INPUT,OUTPUT}_ENABLE pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback pinctrl: mediatek: paris: Rework mtk_pinconf_{get,set} switch/case logic pinctrl: core: delete incorrect free in pinctrl_enable() pinctrl/meson: fix typo in PDM's pin name pinctrl: pinctrl-aspeed-g6: Fix register offset for pinconf of GPIOR-T eeprom: at24: fix memory corruption race condition eeprom: at24: Probe for DDR3 thermal sensor in the SPD case eeprom: at24: Use dev_err_probe for nvmem register failure ksmbd: clear RENAME_NOREPLACE before calling vfs_rename ksmbd: validate request buffer size in smb2_allocate_rsp_buf() ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf wifi: nl80211: don't free NULL coalescing rule dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state" dmaengine: pl330: issue_pending waits until WFP state ANDROID: usb: Optimize the problem of slow transfer rate in USB accessory mode ANDROID: GKI: Add symbol list for exynosauto FROMGIT: usb: dwc3: Wait unconditionally after issuing EndXfer command ANDROID: GKI: Update symbol list for vivo ANDROID: vendor_hooks: add hooks for exting task's swp_entrys ANDROID: ABI: Update honor symbol list ANDROID: add vendor hook in do_read_fault to tune fault_around_bytes ANDROID: 16K: Fix show maps CFI failure ANDROID: 16K: Handle pad VMA splits and merges ANDROID: 16K: madvise_vma_pad_pages: Remove filemap_fault check ANDROID: 16K: Only madvise padding from dynamic linker context ANDROID: 16K: Separate padding from ELF LOAD segment mappings ANDROID: 16K: Exclude ELF padding for fault around range ANDROID: 16K: Use MADV_DONTNEED to save VMA padding pages. ANDROID: 16K: Introduce ELF padding representation for VMAs ANDROID: 16K: Introduce /sys/kernel/mm/pgsize_miration/enabled Linux 5.15.158 serial: core: fix kernel-doc for uart_port_unlock_irqrestore() udp: preserve the connected status if only UDP cmsg bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up fbdev: fix incorrect address computation in deferred IO i2c: smbus: fix NULL function pointer dereference riscv: Fix TASK_SIZE on 64-bit NOMMU riscv: fix VMALLOC_START definition dmaengine: idxd: Fix oops during rmmod on single-CPU platforms dma: xilinx_dpdma: Fix locking idma64: Don't try to serve interrupts when device is powered off dmaengine: owl: fix register access functions tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge() tcp: Clean up kernel listener's reqsk in inet_twsk_purge() mtd: diskonchip: work around ubsan link failure stackdepot: respect __GFP_NOLOCKDEP allocation flag net: b44: set pause params only when interface is up ethernet: Add helper for assigning packet type when dest address does not match device address irqchip/gic-v3-its: Prevent double free on error drm/amdgpu: Fix leak when GPU memory allocation fails drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3 arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma cpu: Re-enable CPU mitigations by default for !X86 architectures btrfs: fix information leak in btrfs_ioctl_logical_to_ino() mmc: sdhci-msm: pervent access to suspended controller Bluetooth: qca: fix NULL-deref on non-serdev suspend Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853 Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() x86/cpu: Fix check for RDPKRU in __show_regs() tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together tracing: Show size of requested perf buffer net/mlx5e: Fix a race in command alloc flow Revert "crypto: api - Disallow identical driver names" drm/vmwgfx: Fix crtc's atomic check conditional drm-print: add drm_dbg_driver to improve namespace symmetry serial: mxs-auart: add spinlock around changing cts state serial: core: Provide port lock wrappers af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets iavf: Fix TC config comparison with existing adapter TC config i40e: Report MFS in decimal base instead of hex i40e: Do not use WQ_MEM_RECLAIM flag for workqueue netfilter: nf_tables: honor table dormant flag from netdev release event path mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work mlxsw: spectrum_acl_tcam: Fix incorrect list API usage mlxsw: spectrum_acl_tcam: Fix warning during rehash mlxsw: spectrum_acl_tcam: Fix memory leak during rehash mlxsw: spectrum_acl_tcam: Rate limit error message mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work net: openvswitch: Fix Use-After-Free in ovs_ct_exit ipvs: Fix checksumming on GSO of SCTP packets net: gtp: Fix Use-After-Free in gtp_dellink net: usb: ax88179_178a: stop lying about skb->truesize ipv4: check for NULL idev in ip_route_use_hint() NFC: trf7970a: disable all regulators on removal bridge/br_netlink.c: no need to return void function icmp: prevent possible NULL dereferences from icmp_build_probe() mlxsw: core: Unregister EMAD trap using FORWARD action vxlan: drop packets from invalid src-address wifi: iwlwifi: mvm: return uid from iwl_mvm_build_scan_cmd wifi: iwlwifi: mvm: remove old PASN station when adding a new one ARC: [plat-hsdk]: Remove misplaced interrupt-cells property arm64: dts: mediatek: mt2712: fix validation errors arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block arm64: dts: mediatek: mt7622: fix ethernet controller "compatible" arm64: dts: mediatek: mt7622: fix IR nodename arm64: dts: mediatek: mt7622: fix clock controllers arm64: dts: mediatek: mt7622: introduce nodes for Wireless Ethernet Dispatch arm64: dts: mediatek: mt7622: add support for coherent DMA arm64: dts: mediatek: mt8183: Add power-domains properity to mfgcfg arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma arm64: dts: rockchip: fix alphabetical ordering RK3399 puma arm64: dts: rockchip: enable internal pull-up on Q7_USB_ID for RK3399 Puma HID: logitech-dj: allow mice to use all types of reports HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc cifs: reinstate original behavior again for forceuid/forcegid smb: client: fix rename(2) regression against samba ANDROID: Add symbol list for ARCVM ANDROID: Add CONFIG_NET_9P ANDROID: Enable CONFIG_LAZY_RCU in x86 gki_defconfig ANDROID: Enable CONFIG_LAZY_RCU in arm64 gki_defconfig FROMLIST: rcu: Provide a boot time parameter to control lazy RCU ANDROID: rcu: Add a minimum time for marking boot as completed UPSTREAM: rcu/kvfree: Move need_offload_krc() out of krcp->lock UPSTREAM: rcu/kfree: Fix kfree_rcu_shrink_count() return value UPSTREAM: rcu/kvfree: Update KFREE_DRAIN_JIFFIES interval UPSTREAM: rcu/kvfree: Remove useless monitor_todo flag UPSTREAM: scsi/scsi_error: Use call_rcu_hurry() instead of call_rcu() ANDROID: rxrpc: Use call_rcu_hurry() instead of call_rcu() UPSTREAM: net: devinet: Reduce refcount before grace period UPSTREAM: rcu: Disable laziness if lazy-tracking says so UPSTREAM: rcu: Track laziness during boot and suspend UPSTREAM: net: Use call_rcu_hurry() for dst_release() UPSTREAM: percpu-refcount: Use call_rcu_hurry() for atomic switch UPSTREAM: rcu/sync: Use call_rcu_hurry() instead of call_rcu UPSTREAM: rcu: Refactor code a bit in rcu_nocb_do_flush_bypass() BACKPORT: rcu: Shrinker for lazy rcu BACKPORT: rcu: Make call_rcu() lazy to save power UPSTREAM: rcu: Fix late wakeup when flush of bypass cblist happens BACKPORT: rcu: Fix missing nocb gp wake on rcu_barrier() ANDROID: abi_gki_aarch64_qcom: Update symbol list UPSTREAM: netfilter: nft_set_pipapo: do not free live element UPSTREAM: af_unix: Fix garbage collector racing against connect() UPSTREAM: af_unix: Do not use atomic ops for unix_sk(sk)->inflight. Linux 5.15.157 net: dsa: mt7530: fix enabling EEE on MT7531 switch on all boards net: dsa: mt7530: fix improper frames on all 25MHz and 40MHz XTAL MT7530 net: dsa: introduce preferred_default_local_cpu_port and use on MT7530 net: dsa: mt7530: set all CPU ports in MT7531_CPU_PMAP nilfs2: fix OOB in nilfs_set_de_type nouveau: fix instmem race condition around ptr stores drm/vmwgfx: Sort primary plane formats by order of preference drm/amdgpu: validate the parameters of bo mapping operations more clearly binder: check offset alignment in binder_get_object() init/main.c: Fix potential static_command_line memory overflow arm64: hibernate: Fix level3 translation fault in swsusp_save() KVM: x86/pmu: Do not mask LVTPC when handling a PMI on AMD platforms KVM: x86: Snapshot if a vCPU's vendor model is AMD vs. Intel compatible fs: sysfs: Fix reference leak in sysfs_break_active_protection() speakup: Avoid crash on very long word mei: me: disable RPL-S on SPS and IGN firmwares usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error usb: Disable USB3 LPM at shutdown usb: dwc2: host: Fix dereference issue in DDMA completion flow. Revert "usb: cdc-wdm: close race between read and workqueue" USB: serial: option: add Telit FN920C04 rmnet compositions USB: serial: option: add Rolling RW101-GL and RW135-GL support USB: serial: option: support Quectel EM060K sub-models USB: serial: option: add Lonsung U8300/U9300 product USB: serial: option: add support for Fibocom FM650/FG650 USB: serial: option: add Fibocom FM135-GL variants serial/pmac_zilog: Remove flawed mitigation for rx irq flood comedi: vmk80xx: fix incomplete endpoint checking thunderbolt: Fix wake configurations after device unplug thunderbolt: Avoid notify PM core about runtime PM resume x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ x86/bugs: Fix BHI retpoline check clk: Get runtime PM before walking tree during disable_unused clk: Initialize struct clk_core kref earlier clk: Print an info line before disabling unused clocks clk: remove extra empty line clk: Mark 'all_lists' as const clk: Remove prepare_lock hold assertion in __clk_release() drm/panel: visionox-rm69299: don't unregister DSI device drm: nv04: Fix out of bounds access s390/cio: fix race condition during online processing s390/qdio: handle deferred cc1 RDMA/mlx5: Fix port number for counter query in multi-port configuration RDMA/cm: Print the old state when cm_destroy_id gets timeout RDMA/rxe: Fix the problem "mutex_destroy missing" net: ethernet: ti: am65-cpsw-nuss: cleanup DMA Channels before using them net: dsa: mt7530: fix mirroring frames received on local port tun: limit printing rate when illegal packet received by tun dev af_unix: Don't peek OOB data without MSG_OOB. af_unix: Call manage_oob() for every skb in unix_stream_read_generic(). netfilter: flowtable: incorrect pppoe tuple netfilter: flowtable: validate pppoe header netfilter: nf_flow_table: count pending offload workqueue tasks netfilter: nft_set_pipapo: do not free live element netfilter: br_netfilter: skip conntrack input hook for promisc packets netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() Revert "lockd: introduce safe async lock op" Revert "tracing/trigger: Fix to return error if failed to alloc snapshot" kprobes: Fix possible use-after-free issue on kprobe registration bpf: Fix ringbuf memory type confusion when passing to helpers bpf: Fix out of bounds access for ringbuf helpers bpf: Generally fix helper register offset check bpf: Generalize check_ctx_reg for reuse with other types bpf: Extend kfunc with PTR_TO_CTX, PTR_TO_MEM argument support selftests/ftrace: Limit length in subsystem-enable tests SUNRPC: Fix rpcgss_context trace event acceptor field btrfs: record delayed inode root in transaction ksmbd: do not set SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1 ksmbd: validate payload size in ipc response ksmbd: don't send oplock break if rename fails ANDROID: GKI: Update symbols to symbol list ANDROID: vendor_hook: Add hooks to support reader optimistic spin in rwsem UPSTREAM: usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error ANDROID: GKI: Update symbols to symbol list Revert "hrtimer: Report offline hrtimer enqueue" ANDROID: GKI: update symbol list file for xiaomi Revert "mm/sparsemem: fix race in accessing memory_section->usage" Revert "drm/mipi-dsi: Fix detach call without attach" Revert "bpf: Add map and need_defer parameters to .map_fd_put_ptr()" ANDROID: ABI: Update oplus symbol list Linux 5.15.156 drm/i915/cdclk: Fix CDCLK programming order when pipes are active x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto x86/bugs: Clarify that syscall hardening isn't a BHI mitigation x86/bugs: Fix BHI handling of RRSBA x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES x86/bugs: Fix BHI documentation x86/bugs: Fix return type of spectre_bhi_state() irqflags: Explicitly ignore lockdep_hrtimer_exit() argument x86/apic: Force native_apic_mem_read() to use the MOV instruction selftests: timers: Fix abs() warning in posix_timers test x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n perf/x86: Fix out of range data vhost: Add smp_rmb() in vhost_vq_avail_empty() drm/client: Fully protect modes[] with dev->mode_config.mutex btrfs: qgroup: correctly model root qgroup rsv in convert iommu/vt-d: Allocate local memory for page request queue tracing: hide unused ftrace_event_id_fops net: ena: Fix incorrect descriptor free behavior net: ena: Wrong missing IO completions check order net: ena: Fix potential sign extension issue af_unix: Fix garbage collector racing against connect() af_unix: Do not use atomic ops for unix_sk(sk)->inflight. net: dsa: mt7530: trap link-local frames regardless of ST Port State net: sparx5: fix wrong config being used when reconfiguring PCS net/mlx5: Properly link new fs rules into the tree netfilter: complete validation of user input ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr ipv4/route: avoid unused-but-set-variable warning ipv6: fib: hide unused 'pn' variable octeontx2-af: Fix NIX SQ mode and BP config af_unix: Clear stale u->oob_skb. geneve: fix header validation in geneve[6]_xmit_skb xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING u64_stats: Disable preemption on 32bit UP+SMP PREEMPT_RT during updates. net: openvswitch: fix unwanted error log on timeout policy probing scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() nouveau: fix function cast warning Revert "drm/qxl: simplify qxl_fence_wait" arm64: dts: imx8-ss-conn: fix usdhc wrong lpcg clock order media: cec: core: remove length check of Timer Status Bluetooth: Fix memory leak in hci_req_sync_complete() ring-buffer: Only update pages_touched when a new page is touched batman-adv: Avoid infinite loop trying to resize local TT Revert "serial: 8250_exar: Fill in rs485_supported" Revert "serial: 8250_exar: Set missing rs485_supported flag" Revert "ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv()" ANDROID: mm: fix incorrect unlock mmap_lock for speculative swap fault UPSTREAM: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path UPSTREAM: netfilter: nf_tables: release batch on table validation from abort path UPSTREAM: netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout Linux 5.15.155 Revert "ACPI: CPPC: Use access_width over bit_width for system memory accesses" VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() Bluetooth: btintel: Fixe build regression platform/x86: intel-vbtn: Update tablet mode switch at end of probe randomize_kstack: Improve entropy diffusion x86/mm/pat: fix VM_PAT handling in COW mappings virtio: reenable config if freezing device failed gcc-plugins/stackleak: Avoid .head.text section gcc-plugins/stackleak: Ignore .noinstr.text and .entry.text tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc netfilter: nf_tables: discard table flag update with pending basechain deletion netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path netfilter: nf_tables: release batch on table validation from abort path fbmon: prevent division by zero in fb_videomode_from_videomode() drivers/nvme: Add quirks for device 126f:2262 fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 ASoC: soc-core.c: Skip dummy codec when adding platforms usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined usb: typec: tcpci: add generic tcpci fallback compatible tools: iio: replace seekdir() in iio_generic_buffer ring-buffer: use READ_ONCE() to read cpu_buffer->commit_page in concurrent environment ktest: force $buildonly = 1 for 'make_warnings_file' test type platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet Input: allocate keycode for Display refresh rate toggle RDMA/cm: add timeout to cm_destroy_id wait block: prevent division by zero in blk_rq_stat_sum() libperf evlist: Avoid out-of-bounds access Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default" SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int drm/amd/display: Fix nanosec stat overflow ext4: forbid commit inconsistent quota data when errors=remount-ro ext4: add a hint for block bitmap corrupt state in mb_groups ALSA: firewire-lib: handle quirk to calculate payload quadlets as data block counter media: sta2x11: fix irq handler cast isofs: handle CDs with bad root inode but good Joliet root directory scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() sysv: don't call sb_bread() with pointers_lock held pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails Bluetooth: btintel: Fix null ptr deref in btintel_read_version net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() btrfs: send: handle path ref underflow in header iterate_inode_ref() btrfs: export: handle invalid inode or root reference in btrfs_get_parent() btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() wifi: ath11k: decrease MHI channel buffer length to 8KB net: pcs: xpcs: Return EINVAL in the internal methods tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num() pstore/zone: Add a null pointer check to the psz_kmsg_read ionic: set adminq irq affinity arm64: dts: rockchip: fix rk3399 hdmi ports node arm64: dts: rockchip: fix rk3328 hdmi ports node cpuidle: Avoid potential overflow in integer multiplication panic: Flush kernel log buffer at the end VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() wifi: ath9k: fix LNA selection in ath_ant_try_scan() net: dsa: fix panic when DSA master device unbinds on shutdown amdkfd: use calloc instead of kzalloc to avoid integer overflow FROMLIST: binder: check offset alignment in binder_get_object() ANDROID: ABI: Update oplus symbol list BACKPORT: dm-crypt: Fix IO priority lost when queuing write bios BACKPORT: dm-verity: Fix IO priority lost when reading FEC and hash BACKPORT: dm-bufio: Support IO priority BACKPORT: dm-io: Support IO priority BACKPORT: block: Fix where bio IO priority gets set Linux 5.15.154 x86: set SPECTRE_BHI_ON as default KVM: x86: Add BHI_NO x86/bhi: Mitigate KVM by default x86/bhi: Add BHI mitigation knob x86/bhi: Enumerate Branch History Injection (BHI) bug x86/bhi: Define SPEC_CTRL_BHI_DIS_S x86/bhi: Add support for clearing branch history at syscall entry x86/syscall: Don't force use of indirect calls for system calls x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file nvme: fix miss command type check gro: fix ownership transfer mm/secretmem: fix GUP-fast succeeding on secretmem folios mptcp: don't account accept() of non-MPC client as fallback to TCP x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO x86/bugs: Fix the SRSO mitigation on Zen3/4 riscv: process: Fix kernel gp leakage riscv: Fix spurious errors from __get/put_kernel_nofault s390/entry: align system call table on 8 bytes x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() of: dynamic: Synchronize of_changeset_destroy() with the devlink removals driver core: Introduce device_link_wait_removal() ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone fs/pipe: Fix lockdep false-positive in watchqueue pipe_write() openrisc: Fix pagewalk usage in arch_dma_{clear, set}_uncached HID: uhid: Use READ_ONCE()/WRITE_ONCE() for ->running nfsd: hold a lighter-weight client reference over CB_RECALL_ANY ata: sata_mv: Fix PCI device ID table declaration compilation warning scsi: mylex: Fix sysfs buffer lengths ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw ASoC: rt711-sdw: fix locking sequence ASoC: rt711-sdca: fix locking sequence ASoC: rt5682-sdw: fix locking sequence net: ravb: Always process TX descriptor ring net: fec: Set mac_managed_pm during probe drivers: net: convert to boolean for the mac_managed_pm flag net: usb: asix: suspend embedded PHY if external is used i40e: Enforce software interrupt during busy-poll exit i40e: Remove _t suffix from enum type names i40e: Store the irq number in i40e_q_vector Revert "usb: phy: generic: Get the vbus supply" scsi: qla2xxx: Update manufacturer detail scsi: qla2xxx: Update manufacturer details i40e: fix vf may be used uninitialized in this function warning i40e: fix i40e_count_filters() to count only active/new filters octeontx2-pf: check negative error code in otx2_open() octeontx2-af: Fix issue with loading coalesced KPU profiles udp: prevent local UDP tunnel packets from being GROed udp: do not transition UDP GRO fraglist partial checksums to unnecessary udp: do not accept non-tunnel GSO skbs landing in a tunnel mlxbf_gige: stop interface during shutdown ipv6: Fix infinite recursion in fib6_dump_done(). selftests: reuseaddr_conflict: add missing new line at the end of the output erspan: make sure erspan_base_hdr is present in skb->head selftests: net: gro fwd: update vxlan GRO test expectations net: stmmac: fix rx queue priority assignment net/sched: act_skbmod: prevent kernel-infoleak bpf, sockmap: Prevent lock inversion deadlock in map delete elem vboxsf: Avoid an spurious warning if load_nls_xxx() fails netfilter: validate user input for expected length netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() netfilter: nf_tables: flush pending destroy work before exit_net release netfilter: nf_tables: reject new basechain after table flag update KVM: x86: Mark target gfn of emulated atomic instruction as dirty KVM: x86: Bail to userspace if emulation of atomic user access faults thermal: devfreq_cooling: Fix perf state when calculate dfc res_util mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped." io_uring: ensure '0' is returned on file registration success locking/rwsem: Disable preemption while trying for rwsem lock net/rds: fix possible cp null dereference xen-netfront: Add missing skb_mark_for_recycle Bluetooth: Fix TOCTOU in HCI debugfs implementation Bluetooth: hci_event: set the conn encrypted before conn establishes arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken x86/cpufeatures: Add CPUID_LNX_5 to track recently added Linux-defined word x86/cpufeatures: Add new word for scattered features r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d dm integrity: fix out-of-range warning Octeontx2-af: fix pause frame configuration in GMP mode bpf: Protect against int overflow for stack access size mlxbf_gige: call request_irq() after NAPI initialized USB: UAS: return ENODEV when submit urbs fail with device not attached ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields() scsi: usb: Stop using the SCSI pointer tcp: properly terminate timers for kernel sockets s390/qeth: handle deferred cc1 ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa() wifi: iwlwifi: mvm: rfi: fix potential response leaks iwlwifi: mvm: rfi: use kmemdup() to replace kzalloc + memcpy mlxbf_gige: stop PHY during open() error paths nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet scsi: usb: Call scsi_done() directly USB: core: Fix deadlock in usb_deauthorize_interface() scsi: lpfc: Correct size for wqe for memset() PCI/DPC: Quirk PIO log size for Intel Ice Lake Root Ports x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled scsi: qla2xxx: Delay I/O Abort on PCI error scsi: qla2xxx: Change debug message during driver unload scsi: qla2xxx: Fix double free of fcport scsi: qla2xxx: Fix command flush on cable pull scsi: qla2xxx: NVME|FCP prefer flag not being honored scsi: qla2xxx: Split FCE|EFT trace control scsi: qla2xxx: Fix N2N stuck connection scsi: qla2xxx: Prevent command send on chip reset usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset usb: typec: ucsi: Ack unsupported commands usb: udc: remove warning when queue disabled ep usb: dwc2: gadget: LPM flow fix usb: dwc2: gadget: Fix exiting from clock gating usb: dwc2: host: Fix ISOC flow in DDMA mode usb: dwc2: host: Fix hibernation flow usb: dwc2: host: Fix remote wakeup from hibernation USB: core: Add hub_get() and hub_put() routines staging: vc04_services: fix information leak in create_component() staging: vc04_services: changen strncpy() to strscpy_pad() scsi: core: Fix unremoved procfs host directory regression ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs drm/amd/display: Preserve original aspect ratio in create stream drm/amdgpu: Use drm_mode_copy() usb: cdc-wdm: close race between read and workqueue drm/i915/gt: Reset queue_priority_hint on parking net: ll_temac: platform_get_resource replaced by wrong function mmc: core: Avoid negative index with array access mmc: core: Initialize mmc_blk_ioc_data hexagon: vmlinux.lds.S: handle attributes section exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack() wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes btrfs: zoned: use zone aware sb location for scrub init: open /initrd.image with O_LARGEFILE mm/migrate: set swap entry values of THP tail pages properly. serial: sc16is7xx: convert from _raw_ to _noinc_ regmap functions for FIFO vfio/fsl-mc: Block calling interrupt handler without trigger vfio/platform: Create persistent IRQ handlers vfio/pci: Create persistent INTx handler vfio: Introduce interface to flush virqfd inject workqueue vfio/pci: Lock external INTx masking ops vfio/pci: Disable auto-enable of exclusive INTx IRQ selftests: mptcp: diag: return KSFT_FAIL not test_cnt powerpc: xor_vmx: Add '-mhard-float' to CFLAGS efivarfs: Request at most 512 bytes for variable names nfsd: Fix a regression in nfsd_setattr() perf/core: Fix reentry problem in perf_output_read_group() nfsd: don't call locks_release_private() twice concurrently nfsd: don't take fi_lock in nfsd_break_deleg_cb() nfsd: fix RELEASE_LOCKOWNER nfsd: drop the nfsd_put helper nfsd: call nfsd_last_thread() before final nfsd_put() lockd: introduce safe async lock op NFSD: fix possible oops when nfsd/pool_stats is closed. Documentation: Add missing documentation for EXPORT_OP flags nfsd: separate nfsd_last_thread() from nfsd_put() nfsd: Simplify code around svc_exit_thread() call in nfsd() nfsd: Fix creation time serialization order NFSD: Add an nfsd4_encode_nfstime4() helper lockd: drop inappropriate svc_get() from locked_get() nfsd: fix double fget() bug in __write_ports_addfd() nfsd: make a copy of struct iattr before calling notify_change NFSD: Fix problem of COMMIT and NFS4ERR_DELAY in infinite loop nfsd: simplify the delayed disposal list code NFSD: Convert filecache to rhltable nfsd: allow reaping files still under writeback nfsd: update comment over __nfsd_file_cache_purge nfsd: don't take/put an extra reference when putting a file nfsd: add some comments to nfsd_file_do_acquire nfsd: don't kill nfsd_files because of lease break error nfsd: simplify test_bit return in NFSD_FILE_KEY_FULL comparator nfsd: NFSD_FILE_KEY_INODE only needs to find GC'ed entries nfsd: don't open-code clear_and_wake_up_bit nfsd: call op_release, even when op_func returns an error nfsd: don't replace page in rq_pages if it's a continuation of last page NFSD: Protect against filesystem freezing NFSD: copy the whole verifier in nfsd_copy_write_verifier nfsd: don't fsync nfsd_files on last close nfsd: fix courtesy client with deny mode handling in nfs4_upgrade_open NFSD: fix problems with cleanup on errors in nfsd4_copy nfsd: don't hand out delegation on setuid files being opened for write NFSD: fix leaked reference count of nfsd4_ssc_umount_item nfsd: clean up potential nfsd_file refcount leaks in COPY codepath nfsd: allow nfsd_file_get to sanely handle a NULL pointer NFSD: enhance inter-server copy cleanup nfsd: don't destroy global nfs4_file table in per-net shutdown nfsd: don't free files unconditionally in __nfsd_file_cache_purge NFSD: replace delayed_work with work_struct for nfsd_client_shrinker NFSD: register/unregister of nfsd-client shrinker at nfsd startup/shutdown time NFSD: Use set_bit(RQ_DROPME) Revert "SUNRPC: Use RMW bitops in single-threaded hot paths" nfsd: fix handling of cached open files in nfsd4_open codepath nfsd: rework refcounting in filecache NFSD: Avoid clashing function prototypes NFSD: Use only RQ_DROPME to signal the need to drop a reply NFSD: add CB_RECALL_ANY tracepoints NFSD: add delegation reaper to react to low memory condition NFSD: add support for sending CB_RECALL_ANY NFSD: refactoring courtesy_client_reaper to a generic low memory shrinker trace: Relocate event helper files lockd: fix file selection in nlmsvc_cancel_blocked lockd: ensure we use the correct file descriptor when unlocking lockd: set missing fl_flags field when retrieving args NFSD: Use struct_size() helper in alloc_session() nfsd: return error if nfs4_setacl fails NFSD: Add an nfsd_file_fsync tracepoint nfsd: fix up the filecache laundrette scheduling filelock: add a new locks_inode_context accessor function nfsd: reorganize filecache.c nfsd: remove the pages_flushed statistic from filecache NFSD: Fix licensing header in filecache.c NFSD: Use rhashtable for managing nfs4_file objects NFSD: Refactor find_file() NFSD: Clean up find_or_add_file() NFSD: Add a nfsd4_file_hash_remove() helper NFSD: Clean up nfsd4_init_file() NFSD: Update file_hashtbl() helpers NFSD: Use const pointers as parameters to fh_ helpers NFSD: Trace delegation revocations NFSD: Trace stateids returned via DELEGRETURN NFSD: Clean up nfs4_preprocess_stateid_op() call sites NFSD: Flesh out a documenting comment for filecache.c NFSD: Add an NFSD_FILE_GC flag to enable nfsd_file garbage collection NFSD: Revert "NFSD: NFSv4 CLOSE should release an nfsd_file immediately" NFSD: Pass the target nfsd_file to nfsd_commit() exportfs: use pr_debug for unreachable debug statements nfsd: allow disabling NFSv2 at compile time nfsd: move nfserrno() to vfs.c nfsd: ignore requests to disable unsupported versions NFSD: Finish converting the NFSv3 GETACL result encoder NFSD: Remove redundant assignment to variable host_err NFSD: Simplify READ_PLUS nfsd: use locks_inode_context helper lockd: use locks_inode_context helper NFSD: Fix reads with a non-zero offset that don't end on a page boundary NFSD: Fix trace_nfsd_fh_verify_err() crasher nfsd: put the export reference in nfsd4_verify_deleg_dentry nfsd: fix use-after-free in nfsd_file_do_acquire tracepoint nfsd: fix net-namespace logic in __nfsd_file_cache_purge nfsd: ensure we always call fh_verify_error tracepoint NFSD: unregister shrinker when nfsd_init_net() fails nfsd: rework hashtable handling in nfsd_do_file_acquire nfsd: fix nfsd_file_unhash_and_dispose fanotify: Remove obsoleted fanotify_event_has_path() fsnotify: remove unused declaration fs/notify: constify path nfsd: extra checks when freeing delegation stateids nfsd: make nfsd4_run_cb a bool return function nfsd: fix comments about spinlock handling with delegations nfsd: only fill out return pointer on success in nfsd4_lookup_stateid NFSD: Cap rsize_bop result based on send buffer size NFSD: Rename the fields in copy_stateid_t nfsd: use DEFINE_SHOW_ATTRIBUTE to define nfsd_file_cache_stats_fops nfsd: use DEFINE_SHOW_ATTRIBUTE to define nfsd_reply_cache_stats_fops nfsd: use DEFINE_SHOW_ATTRIBUTE to define client_info_fops nfsd: use DEFINE_SHOW_ATTRIBUTE to define export_features_fops and supported_enctypes_fops nfsd: use DEFINE_PROC_SHOW_ATTRIBUTE to define nfsd_proc_ops NFSD: Pack struct nfsd4_compoundres NFSD: Remove unused nfsd4_compoundargs::cachetype field NFSD: Remove "inline" directives on op_rsize_bop helpers NFSD: Clean up nfs4svc_encode_compoundres() NFSD: Clean up WRITE arg decoders NFSD: Use xdr_inline_decode() to decode NFSv3 symlinks NFSD: Refactor common code out of dirlist helpers NFSD: Reduce amount of struct nfsd4_compoundargs that needs clearing SUNRPC: Parametrize how much of argsize should be zeroed NFSD: add shrinker to reap courtesy clients on low memory condition NFSD: keep track of the number of courtesy clients in the system NFSD: Make nfsd4_remove() wait before returning NFS4ERR_DELAY NFSD: Make nfsd4_rename() wait before returning NFS4ERR_DELAY NFSD: Make nfsd4_setattr() wait before returning NFS4ERR_DELAY NFSD: Refactor nfsd_setattr() NFSD: Add a mechanism to wait for a DELEGRETURN NFSD: Add tracepoints to report NFSv4 callback completions NFSD: Trace NFSv4 COMPOUND tags NFSD: Replace dprintk() call site in fh_verify() nfsd: remove nfsd4_prepare_cb_recall() declaration nfsd: clean up mounted_on_fileid handling NFSD: drop fname and flen args from nfsd_create_locked() NFSD: Increase NFSD_MAX_OPS_PER_COMPOUND nfsd: Propagate some error code returned by memdup_user() nfsd: Avoid some useless tests NFSD: remove redundant variable status NFSD enforce filehandle check for source file in COPY lockd: move from strlcpy with unused retval to strscpy NFSD: move from strlcpy with unused retval to strscpy nfsd_splice_actor(): handle compound pages NFSD: fix regression with setting ACLs. NFSD: discard fh_locked flag and fh_lock/fh_unlock NFSD: use (un)lock_inode instead of fh_(un)lock for file operations NFSD: use explicit lock/unlock for directory ops NFSD: reduce locking in nfsd_lookup() NFSD: only call fh_unlock() once in nfsd_link() NFSD: always drop directory lock in nfsd_unlink() NFSD: change nfsd_create()/nfsd_symlink() to unlock directory before returning. NFSD: add posix ACLs to struct nfsd_attrs NFSD: add security label to struct nfsd_attrs NFSD: set attributes when creating symlinks NFSD: introduce struct nfsd_attrs NFSD: verify the opened dentry after setting a delegation NFSD: drop fh argument from alloc_init_deleg NFSD: Move copy offload callback arguments into a separate structure NFSD: Add nfsd4_send_cb_offload() NFSD: Remove kmalloc from nfsd4_do_async_copy() NFSD: Refactor nfsd4_do_copy() NFSD: Refactor nfsd4_cleanup_inter_ssc() (2/2) NFSD: Refactor nfsd4_cleanup_inter_ssc() (1/2) NFSD: Replace boolean fields in struct nfsd4_copy NFSD: Make nfs4_put_copy() static NFSD: Reorder the fields in struct nfsd4_op NFSD: Shrink size of struct nfsd4_copy NFSD: Shrink size of struct nfsd4_copy_notify NFSD: nfserrno(-ENOMEM) is nfserr_jukebox NFSD: Fix strncpy() fortify warning NFSD: Clean up nfsd4_encode_readlink() NFSD: Use xdr_pad_size() NFSD: Simplify starting_len NFSD: Optimize nfsd4_encode_readv() NFSD: Add an nfsd4_read::rd_eof field NFSD: Clean up SPLICE_OK in nfsd4_encode_read() NFSD: Optimize nfsd4_encode_fattr() NFSD: Optimize nfsd4_encode_operation() nfsd: silence extraneous printk on nfsd.ko insertion NFSD: limit the number of v4 clients to 1024 per 1GB of system memory NFSD: keep track of the number of v4 clients in the system NFSD: refactoring v4 specific code to a helper in nfs4state.c NFSD: Ensure nf_inode is never dereferenced NFSD: NFSv4 CLOSE should release an nfsd_file immediately NFSD: Move nfsd_file_trace_alloc() tracepoint NFSD: Separate tracepoints for acquire and create NFSD: Clean up unused code after rhashtable conversion NFSD: Convert the filecache to use rhashtable NFSD: Set up an rhashtable for the filecache NFSD: Replace the "init once" mechanism NFSD: Remove nfsd_file::nf_hashval NFSD: nfsd_file_hash_remove can compute hashval NFSD: Refactor __nfsd_file_close_inode() NFSD: nfsd_file_unhash can compute hashval from nf->nf_inode NFSD: Remove lockdep assertion from unhash_and_release_locked() NFSD: No longer record nf_hashval in the trace log NFSD: Never call nfsd_file_gc() in foreground paths NFSD: Fix the filecache LRU shrinker NFSD: Leave open files out of the filecache LRU NFSD: Trace filecache LRU activity NFSD: WARN when freeing an item still linked via nf_lru NFSD: Hook up the filecache stat file NFSD: Zero counters when the filecache is re-initialized NFSD: Record number of flush calls NFSD: Report the number of items evicted by the LRU walk NFSD: Refactor nfsd_file_lru_scan() NFSD: Refactor nfsd_file_gc() NFSD: Add nfsd_file_lru_dispose_list() helper NFSD: Report average age of filecache items NFSD: Report count of freed filecache items NFSD: Report count of calls to nfsd_file_acquire() NFSD: Report filecache LRU size NFSD: Demote a WARN to a pr_warn() nfsd: remove redundant assignment to variable len NFSD: Fix space and spelling mistake NFSD: Instrument fh_verify() NLM: Defend against file_lock changes after vfs_test_lock() fsnotify: Fix comment typo fanotify: introduce FAN_MARK_IGNORE fanotify: cleanups for fanotify_mark() input validations fanotify: prepare for setting event flags in ignore mask fs: inotify: Fix typo in inotify comment NFSD: Decode NFSv4 birth time attribute fanotify: refine the validation checks on non-dir inode mask NFS: restore module put when manager exits. NFSD: Fix potential use-after-free in nfsd_file_put() NFSD: nfsd_file_put() can sleep NFSD: Add documenting comment for nfsd4_release_lockowner() NFSD: Modernize nfsd4_release_lockowner() nfsd: Fix null-ptr-deref in nfsd_fill_super() nfsd: Unregister the cld notifier when laundry_wq create failed SUNRPC: Use RMW bitops in single-threaded hot paths NFSD: Trace filecache opens NFSD: Move documenting comment for nfsd4_process_open2() NFSD: Fix whitespace NFSD: Remove dprintk call sites from tail of nfsd4_open() NFSD: Instantiate a struct file when creating a regular NFSv4 file NFSD: Clean up nfsd_open_verified() NFSD: Remove do_nfsd_create() NFSD: Refactor NFSv4 OPEN(CREATE) NFSD: Refactor NFSv3 CREATE NFSD: Refactor nfsd_create_setattr() NFSD: Avoid calling fh_drop_write() twice in do_nfsd_create() NFSD: Clean up nfsd3_proc_create() NFSD: Show state of courtesy client in client info NFSD: add support for lock conflict to courteous server fs/lock: add 2 callbacks to lock_manager_operations to resolve conflict fs/lock: add helper locks_owner_has_blockers to check for blockers NFSD: move create/destroy of laundry_wq to init_nfsd and exit_nfsd NFSD: add support for share reservation conflict to courteous server NFSD: add courteous server support for thread with only delegation NFSD: Clean up nfsd_splice_actor() fanotify: fix incorrect fmode_t casts fsnotify: consistent behavior for parent not watching children fsnotify: introduce mark type iterator fanotify: enable "evictable" inode marks fanotify: use fsnotify group lock helpers fanotify: implement "evictable" inode marks fanotify: factor out helper fanotify_mark_update_flags() fanotify: create helper fanotify_mark_user_flags() fsnotify: allow adding an inode mark without pinning inode dnotify: use fsnotify group lock helpers nfsd: use fsnotify group lock helpers inotify: use fsnotify group lock helpers fsnotify: create helpers for group mark_mutex lock fsnotify: make allow_dups a property of the group fsnotify: pass flags argument to fsnotify_alloc_group() inotify: move control flags from mask to mark flags fs/lock: documentation cleanup. Replace inode->i_lock with flc_lock. fanotify: do not allow setting dirent events in mask of non-dir nfsd: Clean up nfsd_file_put() nfsd: Fix a write performance regression fsnotify: remove redundant parameter judgment fsnotify: optimize FS_MODIFY events with no ignored masks fsnotify: fix merge with parent's ignored mask nfsd: fix using the correct variable for sizeof() NFSD: Clean up _lm_ operation names NFSD: Remove CONFIG_NFSD_V3 NFSD: Move svc_serv_ops::svo_function into struct svc_serv NFSD: Remove svc_serv_ops::svo_module SUNRPC: Remove svc_shutdown_net() SUNRPC: Rename svc_close_xprt() SUNRPC: Rename svc_create_xprt() SUNRPC: Remove svo_shutdown method SUNRPC: Merge svc_do_enqueue_xprt() into svc_enqueue_xprt() SUNRPC: Remove the .svo_enqueue_xprt method NFSD: Remove NFSD_PROC_ARGS_* macros NFSD: Streamline the rare "found" case NFSD: Skip extra computation for RC_NOCACHE case orDate: Thu Sep 30 19:19:57 2021 -0400 nfsd: Add support for the birth time attribute NFSD: Deprecate NFS_OFFSET_MAX fsnotify: invalidate dcache before IN_DELETE event NFSD: Move fill_pre_wcc() and fill_post_wcc() NFSD: Trace boot verifier resets NFSD: Rename boot verifier functions NFSD: Clean up the nfsd_net::nfssvc_boot field NFSD: Write verifier might go backwards nfsd: Add a tracepoint for errors in nfsd4_clone_file_range() NFSD: De-duplicate net_generic(SVC_NET(rqstp), nfsd_net_id) NFSD: Clean up nfsd_vfs_write() nfsd: Retry once in nfsd_open on an -EOPENSTALE return nfsd: Add errno mapping for EREMOTEIO nfsd: map EBADF nfsd4: add refcount for nfsd4_blocked_lock nfs: block notification on fs with its own ->lock NFSD: De-duplicate nfsd4_decode_bitmap4() nfsd: improve stateid access bitmask documentation NFSD: Combine XDR error tracepoints NFSD: simplify per-net file cache management NFSD: Fix inconsistent indenting NFSD: Remove be32_to_cpu() from DRC hash function NFS: switch the callback service back to non-pooled. lockd: use svc_set_num_threads() for thread start and stop SUNRPC: always treat sv_nrpools==1 as "not pooled" SUNRPC: move the pool_map definitions (back) into svc.c lockd: rename lockd_create_svc() to lockd_get() lockd: introduce lockd_put() lockd: move svc_exit_thread() into the thread lockd: move lockd_start_svc() call into lockd_create_svc() lockd: simplify management of network status notifiers lockd: introduce nlmsvc_serv NFSD: simplify locking for network notifier. SUNRPC: discard svo_setup and rename svc_set_num_threads_sync() NFSD: Make it possible to use svc_set_num_threads_sync NFSD: narrow nfsd_mutex protection in nfsd thread SUNRPC: use sv_lock to protect updates to sv_nrthreads. nfsd: make nfsd_stats.th_cnt atomic_t SUNRPC: stop using ->sv_nrthreads as a refcount SUNRPC/NFSD: clean up get/put functions. SUNRPC: change svc_get() to return the svc. NFSD: handle errors better in write_ports_addfd() exit: Rename module_put_and_exit to module_put_and_kthread_exit exit: Implement kthread_exit fanotify: wire up FAN_RENAME event fanotify: report old and/or new parent+name in FAN_RENAME event fanotify: record either old name new name or both for FAN_RENAME fanotify: record old and new parent and name in FAN_RENAME event fanotify: support secondary dir fh and name in fanotify_info fanotify: use helpers to parcel fanotify_info buffer fanotify: use macros to get the offset to fanotify_info buffer fsnotify: generate FS_RENAME event with rich information fanotify: introduce group flag FAN_REPORT_TARGET_FID fsnotify: separate mark iterator type from object type enum fsnotify: clarify object type argument ext4: fix error code saved on super block during file system abort nfsd4: remove obselete comment NFSD:fix boolreturn.cocci warning nfsd: update create verifier comment SUNRPC: Change return value type of .pc_encode SUNRPC: Replace the "__be32 *p" parameter to .pc_encode NFSD: Save location of NFSv4 COMPOUND status SUNRPC: Change return value type of .pc_decode SUNRPC: Replace the "__be32 *p" parameter to .pc_decode NFSD: Initialize pointer ni with NULL and not plain integer 0 NFSD: simplify struct nfsfh NFSD: drop support for ancient filehandles NFSD: move filehandle format declarations out of "uapi". NFSD: Optimize DRC bucket pruning NFS: Move NFS protocol display macros to global header NFS: Move generic FS show macros to global header SUNRPC: Tracepoints should display tk_pid and cl_clid as a fixed-size field NFS: Remove unnecessary TRACE_DEFINE_ENUM()s docs: Document the FAN_FS_ERROR event ext4: Send notifications on error fanotify: Allow users to request FAN_FS_ERROR events fanotify: Emit generic error info for error event fanotify: Report fid info for file related file system errors fanotify: WARN_ON against too large file handles fanotify: Add helpers to decide whether to report FID/DFID fanotify: Wrap object_fh inline space in a creator macro fanotify: Support merging of error events fanotify: Support enqueueing of error events fanotify: Pre-allocate pool of error events fanotify: Reserve UAPI bits for FAN_FS_ERROR fsnotify: Support FS_ERROR event type fanotify: Require fid_mode for any non-fd event fanotify: Encode empty file handle when no inode is provided fanotify: Allow file handle encoding for unhashed events fanotify: Support null inode event in fanotify_dfid_inode fsnotify: Pass group argument to free_event fsnotify: Protect fsnotify_handle_inode_event from no-inode events fsnotify: Retrieve super block from the data field fsnotify: Add wrapper around fsnotify_add_event fsnotify: Add helper to detect overflow_event inotify: Don't force FS_IN_IGNORED fanotify: Split fsid check from other fid mode checks x86/static_call: Add support for Jcc tail-calls fanotify: Fold event size calculation to its own function x86/alternatives: Teach text_poke_bp() to patch Jcc.d32 instructions fsnotify: Don't insert unmergeable events in hashtable x86/alternatives: Introduce int3_emulate_jcc() fsnotify: clarify contract for create event hooks x86/asm: Differentiate between code and function alignment fsnotify: pass dentry instead of inode data arch: Introduce CONFIG_FUNCTION_ALIGNMENT fsnotify: pass data_type to fsnotify_name() KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests x86/rfds: Mitigate Register File Data Sampling (RFDS) Documentation/hw-vuln: Add documentation for RFDS x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set KVM/VMX: Move VERW closer to VMentry for MDS mitigation KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key x86/entry_32: Add VERW just before userspace transition x86/entry_64: Add VERW just before userspace transition x86/bugs: Add asm helpers for executing VERW x86/asm: Add _ASM_RIP() macro for x86-64 (%rip) suffix KVM: arm64: Limit stage2_apply_range() batch size to largest block KVM: arm64: Work out supported block level at compile time tty: serial: imx: Fix broken RS485 printk: Update @console_may_schedule in console_trylock_spinning() iommu/dma: Force swiotlb_max_mapping_size on an untrusted device dma-iommu: add iommu_dma_opt_mapping_size() dma-mapping: add dma_opt_mapping_size() swiotlb: Fix alignment checks when both allocation and DMA masks are present minmax: add umin(a, b) and umax(a, b) entry: Respect changes to system call number by trace_sys_enter() clocksource/drivers/arm_global_timer: Fix maximum prescaler value ACPI: CPPC: Use access_width over bit_width for system memory accesses xen/events: close evtchn after mapping cleanup i2c: i801: Avoid potential double call to gpiod_remove_lookup_table tee: optee: Fix kernel panic caused by incorrect error handling fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion vt: fix unicode buffer corruption when deleting characters mei: me: add arrow lake point H DID mei: me: add arrow lake point S DID tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled usb: port: Don't try to peer unused USB ports based on location usb: gadget: ncm: Fix handling of zero block length packets USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform drm/i915: Check before removing mm notifier tracing: Use .flush() call to wake up readers KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() xfrm: Avoid clang fortify warning in copy_to_user_tmpl() Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory netfilter: nf_tables: reject constant set with timeout netfilter: nf_tables: disallow anonymous set with timeout flag netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout cpufreq: brcmstb-avs-cpufreq: fix up "add check for cpufreq_cpu_get's return value" net: ravb: Add R-Car Gen4 support x86/pm: Work around false positive kmemleak report in msr_build_context() dm snapshot: fix lockup in dm_exception_table_exit drm/amd/display: Fix noise issue on HDMI AV mute drm/amd/display: Return the correct HDCP error code drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag ahci: asm1064: asm1166: don't limit reported ports ahci: asm1064: correct count of reported ports wireguard: netlink: access device through ctx instead of peer wireguard: netlink: check for dangling peer via is_dead instead of empty list net: hns3: tracing: fix hclgevf trace event strings NFSD: Fix nfsd_clid_class use of __string_len() macro x86/CPU/AMD: Update the Zenbleed microcode revisions cpufreq: dt: always allocate zeroed cpumask nilfs2: prevent kernel bug at submit_bh_wbc() nilfs2: fix failure to detect DAT corruption in btree and direct mappings memtest: use {READ,WRITE}_ONCE in memory scanning drm/vc4: hdmi: do not return negative values from .get_modes() drm/imx/ipuv3: do not return negative values from .get_modes() drm/exynos: do not return negative values from .get_modes() drm/panel: do not return negative error codes from drm_panel_get_modes() s390/zcrypt: fix reference counting on zcrypt card objects soc: fsl: qbman: Use raw spinlock for cgr_lock soc: fsl: qbman: Add CGR update function soc: fsl: qbman: Add helper for sanity checking cgr ops soc: fsl: qbman: Always disable interrupts when taking cgr_lock ring-buffer: Use wait_event_interruptible() in ring_buffer_wait() ring-buffer: Fix full_waiters_pending in poll ring-buffer: Fix resetting of shortest_full ring-buffer: Do not set shortest_full when full target is hit ring-buffer: Fix waking up ring buffer readers ksmbd: retrieve number of blocks using vfs_getattr in set_file_allocation_info vfio/platform: Disable virqfds on cleanup PCI: dwc: endpoint: Fix advertised resizable BAR size kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1 nfs: fix UAF in direct writes PCI/AER: Block runtime suspend when handling errors speakup: Fix 8bit characters from direct synth usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic phy: tegra: xusb: Add API to retrieve the port number of phy slimbus: core: Remove usage of the deprecated ida_simple_xx() API nvmem: meson-efuse: fix function pointer type mismatch ext4: fix corruption during on-line resize hwmon: (amc6821) add of_match table landlock: Warn once if a Landlock action is requested while disabled drm/etnaviv: Restore some id values mmc: core: Fix switch on gp3 partition mm: swap: fix race between free_swap_and_cache() and swapoff() swap: comments get_swap_device() with usage rule mac802154: fix llsec key resources release in mac802154_llsec_key_del dm-raid: fix lockdep waring in "pers->hot_add_disk" PCI/DPC: Quirk PIO log size for Intel Raptor Lake Root Ports PCI/DPC: Quirk PIO log size for certain Intel Root Ports PCI/ASPM: Make Intel DG2 L1 acceptable latency unlimited PCI: Work around Intel I210 ROM BAR overlap defect PCI/PM: Drain runtime-idle callbacks before driver removal PCI: Drop pci_device_remove() test of pci_dev->driver btrfs: fix off-by-one chunk length calculation at contains_pending_extent() serial: Lock console when calling into driver before registration printk/console: Split out code that enables default console usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros fuse: don't unhash root fuse: fix root lookup with nonzero generation mmc: tmio: avoid concurrent runs of mmc_request_done() PM: sleep: wakeirq: fix wake irq warning in system suspend USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M USB: serial: option: add MeiG Smart SLM320 product USB: serial: cp210x: add ID for MGP Instruments PDS100 USB: serial: add device ID for VeriFone adapter USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB powerpc/fsl: Fix mfpmr build errors with newer binutils usb: xhci: Add error handling in xhci_map_urb_for_dma clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays PM: suspend: Set mem_sleep_current during kernel command line setup parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds parisc: Fix csum_ipv6_magic on 64-bit systems parisc: Fix csum_ipv6_magic on 32-bit systems parisc: Fix ip_fast_csum parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt macros mtd: rawnand: meson: fix scrambling mode value in command macro ubi: correct the calculation of fastmap size ubi: Check for too small LEB size in VTBL code ubifs: Set page uptodate in the correct place fat: fix uninitialized field in nostale filehandles bounds: support non-power-of-two CONFIG_NR_CPUS kasan/test: avoid gcc warning for intentional overflow kasan: test: add memcpy test that avoids out-of-bounds write block: Clear zone limits for a non-zoned stacked queue ext4: correct best extent lstart adjustment logic selftests/mqueue: Set timeout to 180 seconds crypto: qat - resolve race condition during AER recovery crypto: qat - fix double free during reset sparc: vDSO: fix return value of __setup handler sparc64: NMI watchdog: fix return value of __setup handler KVM: Always flush async #PF workqueue when vCPU is being destroyed media: xc4000: Fix atomicity violation in xc4000_get_frequency pci_iounmap(): Fix MMIO mapping leak drm/vmwgfx: Fix possible null pointer derefence with invalid contexts arm: dts: marvell: Fix maxium->maxim typo in brownstone dts smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity() smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr() clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd media: staging: ipu3-imgu: Set fields before media_entity_pads_init() wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach timers: Rename del_timer_sync() to timer_delete_sync() timers: Use del_timer_sync() even on UP timers: Update kernel-doc for various functions KVM: x86: Use a switch statement and macros in __feature_translate() KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs x86/bugs: Use sysfs_emit() x86/cpu: Support AMD Automatic IBRS Documentation/hw-vuln: Update spectre doc UPSTREAM: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain BACKPORT: xhci: track port suspend state correctly in unsuccessful resume cases BACKPORT: usb: host: xhci: Avoid XHCI resume delay if SSUSB device is not present BACKPORT: mm: update mark_victim tracepoints fields Revert "FROMGIT: BACKPORT: mm: update mark_victim tracepoints fields" UPSTREAM: netfilter: nft_set_pipapo: release elements in clone only from destroy path ANDROID: GKI: Update symbol list for Amlogic ANDROID: Update abi_gki_aarch64_qcom symbol UPSTREAM: ARM: 9269/1: vfp: Add hwcap for FEAT_DotProd UPSTREAM: ARM: 9268/1: vfp: Add hwcap FPHP and ASIMDHP for FEAT_FP16 UPSTREAM: ARM: 9267/1: Define Armv8 registers in AArch32 state FROMLIST: binder: check offset alignment in binder_get_object() ANDROID: Update abi_gki_aarch64_qcom for fw_devlink_purge_absent_suppliers UPSTREAM: usb: dwc3: gadget: Don't disconnect if not started Linux 5.15.153 remoteproc: stm32: fix incorrect optional pointers regmap: Add missing map->bus check spi: spi-mt65xx: Fix NULL pointer access in interrupt handler net: dsa: mt7530: fix handling of all link-local frames net: dsa: mt7530: fix link-local frames that ingress vlan filtering ports net: dsa: mt7530: fix handling of 802.1X PAE frames net: dsa: mt7530: fix handling of LLDP frames bpf: report RCU QS in cpumap kthread net: report RCU QS on threaded NAPI repolling rcu: add a helper to report consolidated flavor QS netfilter: nf_tables: do not compare internal table flags on updates netfilter: nft_set_pipapo: release elements in clone only from destroy path octeontx2-af: Use separate handlers for interrupts net/bnx2x: Prevent access to a freed page in page_pool net: phy: fix phy_read_poll_timeout argument type in genphy_loopback hsr: Handle failures in module init rds: introduce acquire/release ordering in acquire/release_in_xmit() wireguard: receive: annotate data-race around receiving_counter.counter vdpa/mlx5: Allow CVQ size changes net: dsa: mt7530: prevent possible incorrect XTAL frequency selection net: veth: do not manipulate GRO when using XDP packet: annotate data-races around ignore_outgoing net: ethernet: mtk_eth_soc: fix PPE hanging issue net: mediatek: mtk_eth_soc: clear MAC_MCR_FORCE_LINK only when MAC is up net: mtk_eth_soc: move MAC_MCR setting to mac_finish() hsr: Fix uninit-value access in hsr_get_node() soc: fsl: dpio: fix kcalloc() argument order s390/vtime: fix average steal time calculation octeontx2-af: Use matching wake_up API variant in CGX command interface nouveau: reset the bo resource bus info after an eviction io_uring: don't save/restore iowait state usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin staging: greybus: fix get_channel_from_mode() failure path serial: 8250_exar: Don't remove GPIO device on suspend rtc: mt6397: select IRQ_DOMAIN instead of depending on it kconfig: fix infinite loop when expanding a macro at the end of file arm64: dts: broadcom: bcmbca: bcm4908: drop invalid switch cells tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT serial: max310x: fix syntax error in IRQ error message tty: vt: fix 20 vs 0x20 typo in EScsiignore remoteproc: stm32: Fix incorrect type assignment returned by stm32_rproc_get_loaded_rsc_tablef remoteproc: stm32: Fix incorrect type in assignment for va remoteproc: stm32: use correct format strings on 64-bit comedi: comedi_test: Prevent timers rescheduling during deletion afs: Revert "afs: Hide silly-rename files from userspace" f2fs: compress: fix reserve_cblocks counting error when out of space NFS: Fix an off by one in root_nfs_cat() watchdog: stm32_iwdg: initialize default timeout NFSv4.2: fix listxattr maximum XDR buffer size NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn RDMA/rtrs-clt: Check strnlen return len in sysfs mpath_policy_store() RDMA/device: Fix a race between mad_client and cm_client init scsi: csiostor: Avoid function pointer casts f2fs: compress: fix to check unreleased compressed cluster f2fs: compress: fix to cover normal cluster write with cp_rwsem f2fs: reduce stack memory cost by using bitfield in struct f2fs_io_info f2fs: invalidate meta pages only for post_read required inode f2fs: fix to invalidate META_MAPPING before DIO write f2fs: replace congestion_wait() calls with io_schedule_timeout() f2fs: invalidate META_MAPPING before IPU/DIO write f2fs: multidevice: support direct IO RDMA/srpt: Do not register event handler until srpt device is fully setup ALSA: usb-audio: Stop parsing channels bits when all channels are found. ALSA: hda/realtek: fix ALC285 issues on HP Envy x360 laptops clk: zynq: Prevent null pointer dereference caused by kmalloc failure clk: Fix clk_core_get NULL dereference sparc32: Fix section mismatch in leon_pci_grpci backlight: lp8788: Fully initialize backlight_properties during probe backlight: lm3639: Fully initialize backlight_properties during probe backlight: da9052: Fully initialize backlight_properties during probe backlight: lm3630a: Don't set bl->props.brightness in get_brightness backlight: lm3630a: Initialize backlight_properties on init leds: sgm3140: Add missing timer cleanup and flash gpio control leds: aw2013: Unlock mutex before destroying it powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc. modules: wait do_free_init correctly module: Add support for default value for module async_probe drm/msm/dpu: add division of drm_display_mode's hskew parameter powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip media: mediatek: vcodec: avoid -Wcast-function-type-strict warning media: ttpci: fix two memleaks in budget_av_attach media: go7007: fix a memleak in go7007_load_encoder media: dvb-frontends: avoid stack overflow warnings with clang media: pvrusb2: fix uaf in pvr2_context_set_notify drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int() HID: amd_sfh: Update HPD sensor structure elements ASoC: meson: axg-tdm-interface: add frame rate constraint ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs mtd: rawnand: lpc32xx_mlc: fix irq handler prototype mtd: maps: physmap-core: fix flash size larger than 32-bit drm/tidss: Fix initial plane zpos values crypto: arm/sha - fix function cast warnings mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref drm/tegra: put drm_gem_object ref on error in tegra_fb_create clk: hisilicon: hi3559a: Fix an erroneous devm_kfree() clk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister() PCI: Mark 3ware-9650SE Root Port Extended Tags as broken drm/mediatek: dsi: Fix DSI RGB666 formats and definitions clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times media: pvrusb2: fix pvr2_stream_callback casts media: pvrusb2: remove redundant NULL check media: go7007: add check of return value of go7007_read_addr() media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak media: sun8i-di: Fix chroma difference threshold media: sun8i-di: Fix power on/off sequences media: sun8i-di: Fix coefficient writes NTB: fix possible name leak in ntb_register_device() NTB: EPF: fix possible memory leak in pci_vntb_probe() PCI: endpoint: Support NTB transfer between RC and EP powerpc: Force inlining of arch_vmap_p{u/m}d_supported() ASoC: meson: t9015: fix function pointer type mismatch ASoC: meson: aiu: fix function pointer type mismatch ASoC: meson: Use dev_err_probe() helper perf stat: Avoid metric-only segv ALSA: seq: fix function cast warnings drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode() perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str() crypto: xilinx - call finalize with bh disabled PCI: switchtec: Fix an error handling path in switchtec_pci_probe() PCI/P2PDMA: Fix a sleeping issue in a RCU read section quota: Fix rcu annotations of inode dquot pointers quota: Fix potential NULL pointer dereference quota: simplify drop_dquot_ref() clk: qcom: reset: Ensure write completion on reset de/assertion clk: qcom: reset: Commonize the de/assert functions pinctrl: mediatek: Drop bogus slew rate register range for MT8192 media: edia: dvbdev: fix a use-after-free media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity media: v4l2-tpg: fix some memleaks in tpg_alloc media: em28xx: annotate unchecked call to media_device_register() clk: meson: Add missing clocks to axg_clk_regmaps perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample() drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' HID: lenovo: Add middleclick_workaround sysfs knob for cptkbd perf record: Fix possible incorrect free in record__switch_output() PCI/DPC: Print all TLP Prefixes, not just the first media: tc358743: register v4l2 async device only after successful setup dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA drm/lima: fix a memleak in lima_heap_alloc drm/rockchip: lvds: do not print scary message when probing defer drm/rockchip: lvds: do not overwrite error code drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node drm/ttm: add ttm_resource_fini v2 drm: Don't treat 0 as -1 in drm_fixp2int_ceil drm/rockchip: inno_hdmi: Fix video timing drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe() drm/tegra: rgb: Fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe() drm/tegra: rgb: Fix some error handling paths in tegra_dc_rgb_probe() drm/tegra: dc: rgb: Allow changing PLLD rate on Tegra30+ drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe() drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe() drm/tegra: dsi: Make use of the helper function dev_err_probe() drm/tegra: dpaux: Fix PM disable depth imbalance in tegra_dpaux_probe drm/tegra: dpaux: Populate AUX bus drm/tegra: dsi: Add missing check for of_find_device_by_node dm: call the resume method on internal suspend dm raid: fix false positive for requeue needed during reshape nfp: flower: handle acti_netdevs allocation failure net/x25: fix incorrect parameter validation in the x25_getsockopt() function net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function udp: fix incorrect parameter validation in the udp_lib_getsockopt() function l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function ipmr: fix incorrect parameter validation in the ip_mroute_getsockopt() function bpf: net: Change do_ip_getsockopt() to take the sockptr_t argument bpf: net: Change sk_getsockopt() to take the sockptr_t argument net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function OPP: debugfs: Fix warning around icc_get_name() net: phy: dp83822: Fix RGMII TX delay configuration net: phy: DP83822: enable rgmii mode if phy_interface_is_rgmii net: hns3: fix port duplex configure error in IMP reset net: hns3: fix kernel crash when 1588 is received on HIP08 devices net: phy: fix phy_get_internal_delay accessing an empty array net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() ipv6: fib6_rules: flush route cache when rule is changed bpf: Fix stackmap overflow check on 32-bit arches bpf: Fix hashtab overflow check on 32-bit arches bpf: Fix DEVMAP_HASH overflow check on 32-bit arches sr9800: Add check for usbnet_get_endpoints Bluetooth: hci_core: Fix possible buffer overflow Bluetooth: hci_qca: don't use IS_ERR_OR_NULL() with gpiod_get_optional() Bluetooth: hci_qca: Add support for QTI Bluetooth chip wcn6855 Bluetooth: Remove superfluous call to hci_conn_check_pending() igb: Fix missing time sync events igb: move PEROUT and EXTTS isr logic to separate functions iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected PCI: Make pci_dev_is_disconnected() helper public for other drivers wifi: rtw88: 8821c: Fix false alarm count mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function SUNRPC: fix some memleaks in gssx_dec_option_array x86, relocs: Ignore relocations in .notes section ACPI: scan: Fix device check notification handling ACPI: resource: Add MAIBENBEN X577 to irq1_edge_low_force_override ACPI: resource: Do IRQ override on Lunnen Ground laptops ACPI: resource: Add Infinity laptops to irq1_edge_low_force_override arm64: dts: marvell: reorder crypto interrupts on Armada SoCs ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address ARM: dts: imx6dl-yapp4: Move phy reset into switch node arm64: dts: renesas: r8a779a0: Correct avb[01] reg sizes arm64: dts: renesas: r8a779a0: Update to R-Car Gen4 compatible values ARM: dts: arm: realview: Fix development chip ROM compatible value net: ena: Remove ena_select_queue wifi: brcmsmac: avoid function pointer casts iommu/amd: Mark interrupt as managed bus: tegra-aconnect: Update dependency to ARCH_TEGRA ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces wireless: Remove redundant 'flush_workqueue()' calls bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly arm64: dts: mediatek: mt7622: add missing "device_type" to memory nodes arm64: dts: mt8183: Move CrosEC base detection node to kukui-based DTs arm64: dts: mt8183: kukui: Split out keyboard node and describe detachables arm64: dts: mt8183: kukui: Add Type C node ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down() s390/vdso: drop '-fPIC' from LDFLAGS wifi: iwlwifi: mvm: don't set replay counters to 0xff pwm: sti: Fix capture for st,pwm-num-chan < st,capture-num-chan pwm: sti: Implement .apply() callback wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() net: blackhole_dev: fix build warning for ethh set but not used pwm: atmel-hlcdc: Fix clock imbalance related to suspend support pwm: atmel-hlcdc: Use consistent variable naming pwm: atmel-hlcdc: Convert to platform remove callback returning void arm64: dts: imx8mm-venice-gw71xx: fix USB OTG VBUS wifi: iwlwifi: fix EWRD table validity check wifi: iwlwifi: dbg-tlv: ensure NUL termination wifi: iwlwifi: mvm: report beacon protection failures wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete arm64: dts: imx8mm-kontron: Disable pull resistors for SD card signals on BL board arm64: dts: imx8mm-kontron: Use the VSELECT signal to switch SD card IO voltage arm64: dts: imx8mm-kontron: Add support for ultra high speed modes on SD card arm64: dts: imx8mm-kontron: Disable pullups for onboard UART signals on BL board arm64: dts: imx8mm-kontron: Disable pullups for I2C signals on SL/BL i.MX8MM cpufreq: mediatek-hw: Don't error out if supply is not found af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc(). bpftool: Silence build warning about calloc() inet_diag: annotate data-races around inet_diag_table[] sock_diag: annotate data-races around sock_diag_handlers[family] cpufreq: mediatek-hw: Wait for CPU supplies before probing cpufreq: Explicitly include correct DT includes cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir() wifi: wilc1000: fix multi-vif management when deleting a vif wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work wifi: wilc1000: fix RCU usage in connect path wifi: wilc1000: fix declarations ordering wifi: b43: Disable QoS for bcm4331 wifi: b43: Stop correct queue in DMA worker when QoS is disabled wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() sched/fair: Take the scheduling domain into account in select_idle_core() timekeeping: Fix cross-timestamp interpolation for non-x86 timekeeping: Fix cross-timestamp interpolation corner case decision timekeeping: Fix cross-timestamp interpolation on counter wrap aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts rtc: test: Fix invalid format specifier. time: test: Fix incorrect format specifier lib/cmdline: Fix an invalid format specifier in an assertion msg md: Don't clear MD_CLOSING when the raid is about to stop fs/select: rework stack allocation hack for clang nbd: null check for nla_nest_start s390/dasd: fix double module refcount decrement s390/dasd: Use dev_*() for device log messages s390/dasd: add autoquiesce feature s390/dasd: add copy pair setup s390/dasd: add query PPRC function s390/dasd: put block allocation in separate function do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC Input: gpio_keys_polled - suppress deferred probe error for gpio ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet firewire: core: use long bus reset on gap count error Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security drm/amdgpu: Enable gpu reset for S3 abort cases on Raven series ALSA: hda/realtek - ALC285 reduce pop noise from Headphone port scsi: mpt3sas: Prevent sending diag_reset when the controller is ready dm-verity, dm-crypt: align "struct bvec_iter" correctly block: sed-opal: handle empty atoms when parsing response parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check net/iucv: fix the allocation size of iucv_path_table array x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h riscv: dts: sifive: add missing #interrupt-cells to pmic RDMA/mlx5: Relax DEVX access upon modify commands RDMA/mlx5: Fix fortify source warning while accessing Eth segment gen_compile_commands: fix invalid escape sequence warning HID: multitouch: Add required quirk for Synaptics 0xcddc device MIPS: Clear Cause.BD in instruction_pointer_set x86/xen: Add some null pointer checking to smp.c ASoC: rt5645: Make LattePanda board DMI match more precise selftests: tls: use exact comparison in recv_partial bpf: Defer the free of inner map when necessary rcu-tasks: Provide rcu_trace_implies_rcu_gp() io_uring: drop any code related to SCM_RIGHTS io_uring/unix: drop usage of io_uring socket UPSTREAM: usb: dwc3: gadget: Don't disconnect if not started ANDROID: Update the GKI symbol list and ABI XML UPSTREAM: netfilter: nf_tables: disallow timeout for anonymous sets ANDROID: userfaultfd: abort uffdio ops if mmap_lock is contended ANDROID: userfaultfd: add MMAP_TRYLOCK mode for COPY/ZEROPAGE Linux 5.15.152 FROMGIT: usb: host: xhci-plat: Set XHCI_STATE_REMOVING before resuming XHCI HC FROMGIT: usb: host: xhci: Do not re-initialize the XHCI HC if being removed ANDROID: uid_sys_stat: fix data-error of cputime and io serial: max310x: fix IO data corruption in batched operations ALSA: usb-audio: Sort quirk table entries ALSA: usb-audio: Always initialize fixed_rate in snd_usb_find_implicit_fb_sync_format() ALSA: usb-audio: Fix wrong kfree issue in snd_usb_endpoint_free_all serial: max310x: make accessing revision id interface-agnostic ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum610 Wireless regmap: Add bulk read/write callbacks into regmap_config regmap: allow to define reg_update_bits for no bus configuration fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() proc: Use task_is_running() for wchan in /proc/$pid/stat getrusage: use sig->stats_lock rather than lock_task_sighand() getrusage: use __for_each_thread() getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand() getrusage: add the "signal_struct *sig" local variable drm/amd/display: Increase frame-larger-than for all display_mode_vba files drm/amd/display: remove DML Makefile duplicate lines drm/amd/display: move calcs folder into DML drm/amd/display: Re-arrange FPU code structure for dcn2x hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed hv_netvsc: use netif_is_bond_master() instead of open code selftests: mptcp: decrease BW in simult flows drm/amdgpu: Reset IH OVERFLOW_CLEAR bit drm/amd/pm: do not expose the API used internally only in kv_dpm.c serial: max310x: prevent infinite while() loop in port startup serial: max310x: use a separate regmap for each port serial: max310x: use regmap methods for SPI batch operations xhci: handle isoc Babble and Buffer Overrun events properly xhci: process isoc TD properly when there was a transaction error mid TD. selftests: mm: fix map_hugetlb failure on 64K page size systems selftests/mm: switch to bash from sh nfp: flower: add hardware offload check for post ct entry ALSA: usb-audio: add quirk for RODE NT-USB+ nfp: flower: add goto_chain_index for ct entry ALSA: usb-audio: Fix microphone sound on Nexigo webcam. drm/amd/display: Fix uninitialized variable usage in core_link_ 'read_dpcd() & write_dpcd()' functions ALSA: usb-audio: Add new quirk FIXED_RATE for JBL Quantum810 Wireless ALSA: usb-audio: Add quirk for Tascam Model 12 ALSA: usb-audio: Avoid superfluous endpoint setup ALSA: usb-audio: Correct the return code from snd_usb_endpoint_set_params() ALSA: usb-audio: Apply mutex around snd_usb_endpoint_set_params() ALSA: usb-audio: Properly refcounting clock rate ALSA: usb-audio: Split endpoint setups for hw_params and prepare (take#2) netrom: Fix data-races around sysctl_net_busy_read ALSA: usb-audio: Clear fixed clock rate at closing EP netrom: Fix a data-race around sysctl_netrom_link_fails_count ALSA: usb-audio: Refcount multiple accesses on the single clock netrom: Fix a data-race around sysctl_netrom_routing_control netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size netrom: Fix a data-race around sysctl_netrom_transport_busy_delay netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries netrom: Fix a data-race around sysctl_netrom_transport_timeout netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser netrom: Fix a data-race around sysctl_netrom_default_path_quality erofs: apply proper VMA alignment for memory mapped files on THP netfilter: nf_conntrack_h323: Add protection for bmp length out of range netfilter: nft_ct: fix l3num expectations with inet pseudo family net/rds: fix WARNING in rds_conn_connect_if_down cpumap: Zero-initialise xdp_rxq_info struct before running XDP program net/ipv6: avoid possible UAF in ip6_route_mpath_notify() net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() net: sparx5: Fix use after free inside sparx5_del_mact_entry geneve: make sure to pull inner header in geneve_rx() tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string i40e: disable NAPI right after disabling irqs when handling xsk_pool ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able net: lan78xx: fix runtime PM count underflow on link stop mmc: mmci: stm32: fix DMA API overlapping mappings warning mmc: mmci: stm32: use a buffer for unaligned DMA requests ANDROID: fix isolate_migratepages_range return value ANDROID: GKI: Update oplus symbol list ANDROID: update symbol for unisoc whitelist ANDROID: TRACE: mm: export mm_filemap_* for calling in ko ANDROID: abi_gki_aarch64_qcom: Export trace_android_vh_try_fixup_sea ANDROID: arm64: Call fixup_exception() within do_sea() ANDROID: ABI: Add avenrun symbol to symbol list for unisoc FROMGIT: usb: xhci: Add error handling in xhci_map_urb_for_dma Linux 5.15.151 mptcp: fix double-free on socket dismantle Revert "tls: rx: move counting TlsDecryptErrors for sync" net: tls: fix async vs NIC crypto offload bpf: Derive source IP addr via bpf_*_fib_lookup() bpf: Add table ID to bpf_fib_lookup BPF helper bpf: Add BPF_FIB_LOOKUP_SKIP_NEIGH for bpf_fib_lookup Revert "interconnect: Teach lockdep about icc_bw_lock order" Revert "interconnect: Fix locking for runpm vs reclaim" gpio: fix resource unwinding order in error path gpiolib: Fix the error path order in gpiochip_add_data_with_key() gpio: 74x164: Enable output pins after registers are reset af_unix: Drop oob_skb ref before purging queue in GC. Revert "drm/bridge: lt8912b: Register and attach our DSI device at probe" fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super cachefiles: fix memory leak in cachefiles_add_cache() mptcp: fix possible deadlock in subflow diag mptcp: push at DSS boundaries mptcp: add needs_id for netlink appending addr mptcp: clean up harmless false expressions selftests: mptcp: add missing kconfig for NF Filter in v6 selftests: mptcp: add missing kconfig for NF Filter mptcp: rename timer related helper to less confusing names mptcp: process pending subflow error on close mptcp: move __mptcp_error_report in protocol.c x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation mmc: sdhci-xenon: fix PHY init clock stability mmc: sdhci-xenon: add timeout for PHY init complete mmc: core: Fix eMMC initialization with 1-bit bus connection dmaengine: fsl-qdma: init irq after reg initialization dmaengine: ptdma: use consistent DMA masks dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read btrfs: dev-replace: properly validate device names wifi: nl80211: reject iftype change with mesh ID change gtp: fix use-after-free and null-ptr-deref in gtp_newlink() ALSA: firewire-lib: fix to check cycle continuity tomoyo: fix UAF write bug in tomoyo_write_control() riscv: Sparse-Memory/vmemmap out-of-bounds fix afs: Fix endless loop in directory parsing fbcon: always restore the old font data in fbcon_do_set_font() ALSA: Drop leftover snd-rtctimer stuff from Makefile power: supply: bq27xxx-i2c: Do not free non existing IRQ efi/capsule-loader: fix incorrect allocation size tls: decrement decrypt_pending if no async completion will be called tls: rx: use async as an in-out argument tls: rx: assume crypto always calls our callback tls: rx: move counting TlsDecryptErrors for sync tls: rx: don't track the async count tls: rx: factor out writing ContentType to cmsg tls: rx: wrap decryption arguments in a structure tls: rx: don't report text length from the bowels of decrypt tls: rx: drop unnecessary arguments from tls_setup_from_iter() tls: hw: rx: use return value of tls_device_decrypted() to carry status tls: rx: refactor decrypt_skb_update() tls: rx: don't issue wake ups when data is decrypted tls: rx: don't store the decryption status in socket context tls: rx: don't store the record type in socket context igb: extend PTP timestamp adjustments to i211 rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back netfilter: bridge: confirm multicast packets before passing them up the stack netfilter: let reset rules clean out conntrack entries netfilter: make function op structures const netfilter: core: move ip_ct_attach indirection to struct nf_ct_hook netfilter: nfnetlink_queue: silence bogus compiler warning netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate() Bluetooth: Enforce validation on max value of connection interval Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR Bluetooth: Avoid potential use-after-free in hci_error_reset stmmac: Clear variable when destroying workqueue uapi: in6: replace temporary label with rfc9486 net: usb: dm9601: fix wrong return value in dm9601_mdio_read veth: try harder when allocating queue memory net: enable memcg accounting for veth queues lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() net: veth: clear GRO when clearing XDP even when down cpufreq: intel_pstate: fix pstate limits enforcement for adjust_perf call back tun: Fix xdp_rxq_info's queue_index when detaching net: ip_tunnel: prevent perpetual headroom growth netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter mtd: spinand: gigadevice: Fix the get ecc status issue netfilter: nf_tables: disallow timeout for anonymous sets ANDROID: userfaultfd: allow SPF for UFFD_FEATURE_SIGBUS on private+anon Linux 5.15.150 r8169: use new PM macros netfilter: nf_tables: can't schedule in nft_chain_validate ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks() ext4: regenerate buddy after block freeing failed if under fc replay netfilter: nf_tables: fix scheduling-while-atomic splat arp: Prevent overflow in arp_req_get(). fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio cifs: fix mid leak during reconnection after timeout threshold i2c: imx: when being a target, mark the last read as processed i2c: imx: Add timer for handling the stop condition drm/amd/display: Fix memory leak in dm_sw_fini() drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set netfilter: nft_flow_offload: release dst in case direct xmit path is used netfilter: nft_flow_offload: reset dst in route object after setting up flow netfilter: flowtable: simplify route logic netfilter: nf_tables: set dormant flag on hook register failure tls: stop recv() if initial process_rx_list gave us non-DATA tls: rx: drop pointless else after goto tls: rx: jump to a more appropriate label s390: use the correct count for __iowrite64_copy() octeontx2-af: Consider the action set by PF drm/nouveau/instmem: fix uninitialized_var.cocci warning net: dev: Convert sa_data to flexible array in struct sockaddr packet: move from strlcpy with unused retval to strscpy ipv6: sr: fix possible use-after-free and null-ptr-deref afs: Increase buffer size in afs_update_volume_status() bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel ata: ahci_ceva: fix error handling for Xilinx GT PHY support ata: libahci_platform: Introduce reset assertion/deassertion methods ata: libahci_platform: Convert to using devm bulk clocks API ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid net: stmmac: Fix incorrect dereference in interrupt handlers nouveau: fix function cast warnings scsi: jazz_esp: Only build if SCSI core is builtin bpf, scripts: Correct GPL license name RDMA/srpt: fix function pointer cast warnings arm64: dts: rockchip: set num-cs property for spi on px30 RDMA/qedr: Fix qedr_create_user_qp error flow RDMA/srpt: Support specifying the srpt_service_guid parameter RDMA/irdma: Add AE for too many RNRS RDMA/irdma: Set the CQ read threshold for GEN 1 RDMA/irdma: Validate max_send_wr and max_recv_wr RDMA/irdma: Fix KASAN issue with tasklet RDMA/bnxt_re: Return error for SRQ resize IB/hfi1: Fix a memleak in init_credit_return cifs: add a warning when the in-flight count goes negative xhci: track port suspend state correctly in unsuccessful resume cases xhci: decouple usb2 port resume and get_port_status request handling xhci: clear usb2 resume related variables in one place. xhci: rename resume_done to resume_timestamp xhci: move port specific items such as state completions to port structure xhci: cleanup xhci_hub_control port references ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA ACPI: resource: Add ASUS model S5402ZA to quirks ACPI: video: Add backlight=native DMI quirk for Apple iMac12,1 and iMac12,2 ARM: dts: BCM53573: Describe on-SoC BCM53125 rev 4 switch arm64: dts: rockchip: add SPDIF node for ROCK Pi 4 arm64: dts: rockchip: add ES8316 codec for ROCK Pi 4 arm64: dts: rockchip: fix regulator name on rk3399-rock-4 exfat: support dynamic allocate bh for exfat_entry_set_cache wifi: iwlwifi: mvm: avoid baid size integer overflow igb: Fix igb_down hung on surprise removal wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point() devlink: report devlink_port_type_warn source device bpf: Address KCSAN report on bpf_lru_list wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range sched/fair: Don't balance task to its current running CPU arm64: mm: fix VA-range sanity check arm64: set __exception_irq_entry with __irq_entry as a default ACPI: video: Add backlight=native DMI quirk for Lenovo ThinkPad X131e (3371 AMD version) ACPI: video: Add backlight=native DMI quirk for Apple iMac11,3 ACPI: button: Add lid disable DMI quirk for Nextbook Ares 8A btrfs: add xxhash to fast checksum implementations posix-timers: Ensure timer ID search-loop limit is valid md/raid10: prevent soft lockup while flush writes md: fix data corruption for raid456 when reshape restart while grow up nbd: Add the maximum limit of allocated index in nbd_dev_add debugobjects: Recheck debug_objects_enabled before reporting netfilter: nf_tables: add rescheduling points during loop detection walks net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs Input: iqs269a - do not poll during ATI Input: iqs269a - do not poll during suspend or resume Input: iqs269a - switch to DEFINE_SIMPLE_DEV_PM_OPS() and pm_sleep_ptr() PM: core: Remove static qualifier in DEFINE_SIMPLE_DEV_PM_OPS macro mmc: mxc: Use the new PM macros mmc: jz4740: Use the new PM macros PM: core: Add new *_PM_OPS macros, deprecate old ones PM: core: Redefine pm_ptr() macro powerpc/eeh: Set channel state after notifying the drivers powerpc/eeh: Small refactor of eeh_handle_normal_event() powerpc/rtas: ensure 4KB alignment for rtas_data_buf powerpc/rtas: make all exports GPL net: ethernet: ti: add missing of_node_put before return dt-bindings: clocks: imx8mp: Add ID for usb suspend clock clk: imx8mp: add clkout1/2 support clk: imx8mp: Add DISP2 pixel clock serial: 8250: Remove serial_rs485 sanitization from em485 cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() kernel/sched: Remove dl_boosted flag comment drm/i915/dg1: Update DMC_DEBUG3 register f2fs: write checkpoint during FG_GC f2fs: don't set GC_FAILURE_PIN for background GC drm/amdgpu: init iommu after amdkfd device init tools/virtio: fix build perf beauty: Update copy of linux/socket.h with the kernel sources tools headers UAPI: Sync linux/fscrypt.h with the kernel sources ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger acpi: property: Let args be NULL in __acpi_node_get_property_reference platform/x86: asus-wmi: Document the dgpu_disable sysfs attribute clk: linux/clk-provider.h: fix kernel-doc warnings and typos RDMA/siw: Correct wrong debug message RDMA/siw: Balance the reference of cep->kref in the error path ARM: dts: BCM53573: Drop nonexistent #usb-cells selftests: net: vrf-xfrm-tests: change authentication and encryption algos vdpa/mlx5: Don't clear mr struct on destroy MR MIPS: vpe-mt: drop physical_memsize MIPS: SMP-CPS: fix build error when HOTPLUG_CPU not set powerpc/pseries/lpar: add missing RTAS retry status handling powerpc/perf/hv-24x7: add missing RTAS retry status handling powerpc/pseries/lparcfg: add missing RTAS retry status handling clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled() clk: qcom: gpucc-sdm845: fix clk_dis_wait being programmed for CX GDSC clk: qcom: gpucc-sc7180: fix clk_dis_wait being programmed for CX GDSC powerpc/powernv/ioda: Skip unallocated resources when mapping to PE Input: ads7846 - don't check penirq immediately for 7845 Input: ads7846 - always set last command to PWRDOWN clk: imx: avoid memory leak clk: renesas: cpg-mssr: Remove superfluous check in resume code Input: ads7846 - don't report pressure for ads7845 clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed Input: iqs269a - increase interrupt handler return delay Input: iqs269a - configure device with a single block write Input: iqs269a - drop unused device node references RISC-V: fix funct4 definition for c.jalr in parse_asm.h mtd: rawnand: sunxi: Fix the size of the last OOB region clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents clk: imx: imx8mp: add shared clk gate for usb suspend clk mptcp: fix lockless access in subflow ULP diag usb: roles: don't get/set_role() when usb_role_switch is unregistered usb: roles: fix NULL pointer issue when put module's reference usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs serial: amba-pl011: Fix DMA transmission in RS485 mode usb: cdns3: fix memory double free when handle zero packet x86/alternative: Make custom return thunk unconditional usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable() Revert "x86/alternative: Make custom return thunk unconditional" usb: cdnsp: fixed issue with incorrect detecting CDNSP family controllers x86/returnthunk: Allow different return thunks usb: cdnsp: blocked some cdns3 specific code x86/ftrace: Use alternative RET encoding usb: dwc3: gadget: Don't disconnect if not started x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch() x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR Revert "x86/ftrace: Use alternative RET encoding" pmdomain: renesas: r8a77980-sysc: CR7 must be always on ARM: ep93xx: Add terminator to gpiod_lookup_table ksmbd: free aux buffer if ksmbd_iov_pin_rsp_read fails l2tp: pass correct message length to ip6_append_data PCI/MSI: Prevent MSI hardware interrupt number truncation gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names platform/x86: intel-vbtn: Stop calling "VBDL" from notify_handler dm-crypt: don't modify the data when using authenticated encryption drm/ttm: Fix an invalid freeing on already freed page in error path IB/hfi1: Fix sdma.h tx->num_descs off-by-one error erofs: fix lz4 inplace decompression fs/ntfs3: Fix oob in ntfs_listxattr pmdomain: mediatek: fix race conditions with genpd fs/ntfs3: Update inode->i_size after success write into compressed file virtio-blk: Ensure no requests in virtqueues before deleting vqs. fs/ntfs3: Correct function is_rst_area_valid drm/amdgpu: reset gpu for s3 suspend abort case drm/amdgpu: skip to program GFXDEC registers for suspend abort firewire: core: send bus reset promptly on gap count error scsi: lpfc: Use unsigned type for num_sge hwmon: (coretemp) Enlarge per package core count limit efi: Don't add memblocks for soft-reserved memory efi: runtime: Fix potential overflow of soft-reserved region size wifi: mac80211: adding missing drv_mgd_complete_tx() call fs/ntfs3: Prevent generic message "attempt to access beyond end of device" fs/ntfs3: use non-movable memory for ntfs3 MFT buffer cache fs/ntfs3: Disable ATTR_LIST_ENTRY size check fs/ntfs3: Add NULL ptr dereference checking at the end of attr_allocate_frame() fs/ntfs3: Fix detected field-spanning write (size 8) of single field "le->name" fs/ntfs3: Print warning while fixing hard links count fs/ntfs3: Correct hard links updating when dealing with DOS names fs/ntfs3: Improve ntfs_dir_count fs/ntfs3: Modified fix directory element type detection Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table ext4: correct the hole length returned by ext4_map_blocks() nvmet-fc: take ref count on tgtport before delete assoc nvmet-fc: avoid deadlock on delete association path nvmet-fc: abort command when there is no binding nvmet-fc: hold reference on hostport match nvmet-fc: defer cleanup using RCU properly nvmet-fc: release reference on target port nvmet-fcloop: swap the list_add_tail arguments nvme-fc: do not wait in vain when unloading module ALSA: usb-audio: Ignore clock selector errors for single connection netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new Input: xpad - add Lenovo Legion Go controllers spi: sh-msiof: avoid integer overflow in constants ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616 ALSA: usb-audio: Check presence of valid altsetting control nvmet-tcp: fix nvme tcp ida memory leak regulator: pwm-regulator: Add validity checks in continuous .get_voltage dmaengine: ti: edma: Add some null pointer checks to the edma_probe platform/x86: touchscreen_dmi: Add info for the TECLAST X16 Plus tablet ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() MIPS: reserve exception vector space ONLY ONCE ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt ahci: asm1166: correct count of reported ports spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected fbdev: sis: Error out if pixclock equals zero fbdev: savage: Error out if pixclock equals zero wifi: mac80211: fix race condition on enabling fast-xmit wifi: cfg80211: fix missing interfaces when dumping dmaengine: fsl-qdma: increase size of 'irq_name' dmaengine: shdma: increase size of 'dev_id' scsi: target: core: Add TMF to tmr_list handling sched/rt: Disallow writing invalid values to sched_rt_period_us sched/rt: Fix sysctl_sched_rr_timeslice intial value x86/fpu: Stop relying on userspace for info to fault in xsave buffer zonefs: Improve error handling userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb bpf: Remove trace_printk_lock bpf: Do cleanup in bpf_bprintf_cleanup only when needed bpf: Add struct for bin_args arg in bpf_bprintf_prepare bpf: Merge printk and seq_printf VARARG max macros PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq() sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset smb: client: fix parsing of SMB3.1.1 POSIX create context smb: client: fix potential OOBs in smb2_parse_contexts() smb: client: fix OOB in receive_encrypted_standard() net/sched: Retire dsmark qdisc net/sched: Retire ATM qdisc net/sched: Retire CBQ qdisc UPSTREAM: usb: dwc3: gadget: Handle EP0 request dequeuing properly BACKPORT: hwrng: virtio - unregister device before reset Revert "interconnect: Fix locking for runpm vs reclaim" UPSTREAM: virtio-rng: make device ready before making request Revert "interconnect: Teach lockdep about icc_bw_lock order" ANDROID: ABI: Update oplus symbol list ANDROID: binder: Add vendor hook to fix priority restore UPSTREAM: netfilter: nft_set_rbtree: skip end interval element from gc BACKPORT: FROMGIT: PM: runtime: add tracepoint for runtime_status changes Linux 5.15.149 usb: dwc3: gadget: Ignore End Transfer delay on teardown media: Revert "media: rkisp1: Drop IRQF_SHARED" usb: dwc3: gadget: Execute gadget stop after halting the controller usb: dwc3: gadget: Don't delay End Transfer on delayed_status staging: fbtft: core: set smem_len before fb_deferred_io_init call smb3: Replace smb2pdu 1-element arrays with flex-arrays fs/ntfs3: Add null pointer checks net: bcmgenet: Fix EEE implementation Revert "selftests/bpf: Test tail call counting with bpf2bpf and data on stack" drm/msm/dsi: Enable runtime PM PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() arm64: Subscribe Microsoft Azure Cobalt 100 to ARM Neoverse N2 errata dm: limit the number of targets and parameter size area nilfs2: replace WARN_ONs for invalid DAT metadata block requests nilfs2: fix potential bug in end_buffer_async_write sched/membarrier: reduce the ability to hammer on sys_membarrier netfilter: ipset: Missing gc cancellations fixed net: prevent mss overflow in skb_segment() hrtimer: Ignore slack time for RT tasks in schedule_hrtimeout_range() netfilter: ipset: fix performance regression in swap operation scripts/decode_stacktrace.sh: optionally use LLVM utilities scripts: decode_stacktrace: demangle Rust symbols scripts/decode_stacktrace.sh: support old bash version fbdev: flush deferred IO before closing fbdev: Fix incorrect page mapping clearance at fb_deferred_io_release() fbdev: Fix invalid page access after closing deferred I/O devices fbdev: Rename pagelist to pagereflist for deferred I/O fbdev: Track deferred-I/O pages in pageref struct fbdev: defio: fix the pagelist corruption fbdev: Don't sort deferred-I/O pages by default fbdev/defio: Early-out if page is already enlisted serial: 8250_exar: Set missing rs485_supported flag serial: 8250_exar: Fill in rs485_supported usb: dwc3: gadget: Queue PM runtime idle on disconnect event usb: dwc3: gadget: Handle EP0 request dequeuing properly usb: dwc3: gadget: Refactor EP0 forced stall/restart into a separate API usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive usb: dwc3: gadget: Submit endxfer command if delayed during disconnect usb: dwc3: gadget: Force sending delayed status during soft disconnect usb: dwc3: Fix ep0 handling when getting reset while doing control transfer usb: dwc3: gadget: Delay issuing End Transfer usb: dwc3: gadget: Only End Transfer for ep0 data phase usb: dwc3: ep0: Don't prepare beyond Setup stage usb: dwc3: gadget: Wait for ep0 xfers to complete during dequeue crypto: lib/mpi - Fix unexpected pointer access in mpi_ec_init bus: moxtet: Add spi device table dma-buf: add dma_fence_timestamp helper af_unix: Fix task hung while purging oob_skb in GC. tracing: Inform kmemleak of saved_cmdlines allocation pmdomain: core: Move the unused cleanup to a _sync initcall can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock of: property: fix typo in io-channels mm: hugetlb pages should not be reserved by shmat() if SHM_NORESERVE ceph: prevent use-after-free in encode_cap_msg() net: ethernet: ti: cpsw_new: enable mac_managed_pm to fix mdio s390/qeth: Fix potential loss of L3-IP@ in case of network issues net: ethernet: ti: cpsw: enable mac_managed_pm to fix mdio irqchip/gic-v3-its: Fix GICv4.1 VPE affinity update irqchip/irq-brcmstb-l2: Add write memory barrier before exit wifi: mac80211: reload info pointer in ieee80211_tx_dequeue() nfp: flower: prevent re-adding mac index for bonded port nfp: use correct macro for LengthSelect in BAR config crypto: ccp - Fix null pointer dereference in __sev_platform_shutdown_locked nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() nilfs2: fix data corruption in dsync block recovery for small block sizes ALSA: hda/conexant: Add quirk for SWS JS201D mmc: slot-gpio: Allow non-sleeping GPIO ro x86/mm/ident_map: Use gbpages only where full GB page should be mapped. x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6 powerpc/64: Set task pt_regs->link to the LR value on scv entry serial: max310x: fail probe if clock crystal is unstable serial: max310x: improve crystal stable clock detection serial: max310x: set default value when reading clock ready bit ring-buffer: Clean ring_buffer_poll_wait() error return hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove drm/prime: Support page array >= 4GB media: rc: bpf attach/detach requires write permission iio: accel: bma400: Fix a compilation problem iio: core: fix memleak in iio_device_register_sysfs iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC staging: iio: ad5933: fix type mismatch regression tracing: Fix wasted memory in saved_cmdlines logic ext4: fix double-free of blocks due to wrong extents moved_len misc: fastrpc: Mark all sessions as invalid in cb_remove binder: signal epoll threads of self-work ALSA: hda/cs8409: Suppress vmaster control for Dolphin models ASoC: codecs: wcd938x: handle deferred probe ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL xen-netback: properly sync TX responses net: hsr: remove WARN_ONCE() in send_hsr_supervision_frame() nfc: nci: free rx_data_reassembly skb on NCI device cleanup kbuild: Fix changing ELF file type for output of gen_btf for big endian firewire: core: correct documentation of fw_csr_string() kernel API lsm: fix the logic in security_inode_getsecctx() Revert "drm/amd: flush any delayed gfxoff on suspend entry" scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock" mptcp: fix data re-injection from stale subflow modpost: trim leading spaces when processing source files list i2c: i801: Fix block process call transactions i2c: i801: Remove i801_set_block_buffer_mode powerpc/kasan: Fix addr error caused by page alignment media: ir_toy: fix a memleak in irtoy_tx usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend usb: f_mass_storage: forbid async queue when shutdown happen USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT usb: ucsi_acpi: Fix command completion handling iio: hid-sensor-als: Return 0 for HID_USAGE_SENSOR_TIME_TIMESTAMP HID: wacom: Do not register input devices until after hid_hw_start HID: wacom: generic: Avoid reporting a serial of '0' to userspace HID: i2c-hid-of: fix NULL-deref on failed power up ALSA: hda/realtek: Enable Mute LED on HP Laptop 14-fq0xxx ALSA: hda/realtek: Fix the external mic not being recognised for Acer Swift 1 SF114-32 scsi: storvsc: Fix ring buffer size calculation mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again tracing/trigger: Fix to return error if failed to alloc snapshot scs: add CONFIG_MMU dependency for vfree_atomic() i40e: Fix waiting for queues of all VSIs to be disabled MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler net: sysfs: Fix /sys/class/net/<iface> path for statistics ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() spi: ppc4xx: Drop write-only variable net: openvswitch: limit the number of recursions from action sets wifi: iwlwifi: Fix some error codes of: unittest: Fix compile in the non-dynamic case btrfs: send: return EOPNOTSUPP on unknown flags btrfs: forbid deleting live subvol qgroup btrfs: do not ASSERT() if the newly created subvolume already got read btrfs: forbid creating subvol qgroups netfilter: nft_set_rbtree: skip end interval element from gc net: stmmac: xgmac: fix a typo of register name in DPP safety handling net: stmmac: xgmac: use #define for string constants clocksource: Skip watchdog check for large watchdog intervals vhost: use kzalloc() instead of kmalloc() followed by memset() Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU hrtimer: Report offline hrtimer enqueue usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK usb: dwc3: host: Set XHCI_SG_TRB_CACHE_SIZE_QUIRK USB: serial: cp210x: add ID for IMST iM871A-USB USB: serial: option: add Fibocom FM101-GL variant USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e ALSA: usb-audio: Add a quirk for Yamaha YIT-W12TX transmitter drivers: lkdtm: fix clang -Wformat warning blk-iocost: Fix an UBSAN shift-out-of-bounds warning scsi: core: Move scsi_host_busy() out of host lock if it is for per-command fs/ntfs3: Fix an NULL dereference bug netfilter: nft_set_pipapo: remove scratch_aligned pointer netfilter: nft_set_pipapo: add helper to release pcpu scratch area netfilter: nft_set_pipapo: store index in scratch maps netfilter: nft_ct: reject direction for ct id drm/amd/display: Implement bounds check for stream encoder creation in DCN301 drm/amd/display: Fix multiple memory leaks reported by coverity netfilter: nft_compat: restrict match/target protocol to u16 netfilter: nft_compat: reject unused compat flag ppp_async: limit MRU to 64K af_unix: Call kfree_skb() for dead unix_(sk)->oob_skb in GC. tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() rxrpc: Fix response to PING RESPONSE ACKs to a dead call inet: read sk->sk_family once in inet_recv_error() hwmon: (coretemp) Fix bogus core_id to attr name mapping hwmon: (coretemp) Fix out-of-bounds memory access hwmon: (aspeed-pwm-tacho) mutex for tach reading octeontx2-pf: Fix a memleak otx2_sq_init atm: idt77252: fix a memleak in open_card_ubr0 tunnels: fix out of bounds access when building IPv6 PMTU error selftests: net: avoid just another constant wait selftests: net: cut more slack for gro fwd tests. net: stmmac: xgmac: fix handling of DPP safety error for DMA channels drm/msm/dp: return correct Colorimetry for DP_TEST_DYNAMIC_RANGE_CEA case phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV phy: renesas: rcar-gen3-usb2: Fix returning wrong error code dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA dmaengine: ti: k3-udma: Report short packet errors dmaengine: fsl-dpaa2-qdma: Fix the size of dma pools ASoC: codecs: lpass-wsa-macro: fix compander volume hack bonding: remove print in bond_verify_device_path HID: apple: Add 2021 magic keyboard FN key mapping HID: apple: Add support for the 2021 Magic Keyboard gve: Fix use-after-free vulnerability arm64: irq: set the correct node for shadow call stack net: sysfs: Fix /sys/class/net/<iface> path selftests: net: fix available tunnels detection af_unix: fix lockdep positive in sk_diag_dump_icons() net: ipv4: fix a memleak in ip_setup_cork netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV bridge: mcast: fix disabled snooping after long uptime llc: call sock_orphan() at release time ipv6: Ensure natural alignment of const ipv6 loopback and router addresses ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() ixgbe: Refactor overtemp event handling ixgbe: Refactor returning internal error codes ixgbe: Remove non-inclusive language tcp: add sanity checks to rx zerocopy ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() ip6_tunnel: use dev_sw_netstats_rx_add() selftests: net: give more time for GRO aggregation scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler scsi: isci: Fix an error code problem in isci_io_request_build() drm: using mul_u32_u32() requires linux/math64.h wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update perf: Fix the nr_addr_filters fix drm/amdkfd: Fix 'node' NULL check in 'svm_range_get_range_boundaries()' drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()' drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()' ceph: fix deadlock or deadcode of misusing dget() blk-mq: fix IO hang from sbitmap wakeup race virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings drm/amdkfd: Fix lock dependency warning libsubcmd: Fix memory leak in uniq() PCI/AER: Decode Requester ID when no error info found PCI: Fix 64GT/s effective data rate calculation fs/kernfs/dir: obey S_ISGID tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE selftests/sgx: Fix linker script asserts usb: hub: Replace hardcoded quirk value with BIT() macro perf cs-etm: Bump minimum OpenCSD version to ensure a bugfix is present PCI: switchtec: Fix stdev_release() crash after surprise hot remove PCI: Only override AMD USB controller if required mailbox: arm_mhuv2: Fix a bug for mhuv2_sender_interrupt mfd: ti_am335x_tscadc: Fix TI SoC dependencies xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import i3c: master: cdns: Update maximum prescaler value for i2c clock um: time-travel: fix time corruption um: net: Fix return type of uml_net_start_xmit() um: Don't use vfprintf() for os_info() um: Fix naming clash between UML and scheduler leds: trigger: panic: Don't register panic notifier if creating the trigger failed ALSA: hda/conexant: Fix headset auto detect fail in cx8070 and SN6140 drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' drm/amdgpu: Let KFD sync with VM fences clk: imx: clk-imx8qxp: fix LVDS bypass, pixel and phy clocks clk: imx: scu: Fix memory leak in __imx_clk_gpr_scu() watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786 clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() drm/amdgpu: fix ftrace event amdgpu_bo_move always move on same heap drm/msm/dpu: Ratelimit framedone timeout msgs media: i2c: imx335: Fix hblank min/max values media: ddbridge: fix an error code problem in ddb_probe IB/ipoib: Fix mcast list locking drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time f2fs: fix to tag gcing flag on page during block migration media: rkisp1: Drop IRQF_SHARED ALSA: hda: intel-dspcfg: add filters for ARL-S and ARL ALSA: hda: Intel: add HDA_ARL PCI ID support PCI: add INTEL_HDA_ARL to pci_ids.h media: rockchip: rga: fix swizzling for RGB formats media: stk1160: Fixed high volume of stk1160_dbg messages drm/mipi-dsi: Fix detach call without attach drm/framebuffer: Fix use of uninitialized variable drm/drm_file: fix use of uninitialized variable f2fs: fix write pointers on zoned device after roll forward drm/amd/display: Fix tiled display misalignment RDMA/IPoIB: Fix error code return in ipoib_mcast_join fast_dput(): handle underflows gracefully ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument ALSA: hda: Refer to correct stream index at loops f2fs: fix to check return value of f2fs_reserve_new_block() octeontx2-af: Fix max NPC MCAM entry check while validating ref_entry i40e: Fix VF disable behavior to block all traffic bridge: cfm: fix enum typo in br_cc_ccm_tx_parse Bluetooth: L2CAP: Fix possible multiple reject send Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066 wifi: cfg80211: free beacon_ies when overridden from hidden BSS wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() ALSA: usb-audio: Add delay quirk for MOTU M Series 2nd revision libbpf: Fix NULL pointer dereference in bpf_object__collect_prog_relos wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property md: Whenassemble the array, consult the superblock of the freshest device block: prevent an integer overflow in bvec_try_merge_hw_page net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path ARM: dts: imx23/28: Fix the DMA controller node name ARM: dts: imx23-sansa: Use preferred i2c-gpios properties ARM: dts: imx27-apf27dev: Fix LED name ARM: dts: imx25/27: Pass timing0 ARM: dts: imx25: Fix the iim compatible string block/rnbd-srv: Check for unlikely string overflow ionic: pass opcode to devcmd_wait ARM: dts: imx1: Fix sram node ARM: dts: imx27: Fix sram node ARM: dts: imx: Use flash@0,0 pattern ARM: dts: imx25/27-eukrea: Fix RTC node name ARM: dts: rockchip: fix rk3036 hdmi ports node bpf: Set uattr->batch.count as zero before batched update or deletion scsi: libfc: Fix up timeout error in fc_fcp_rec_error() scsi: libfc: Don't schedule abort twice bpf: Add map and need_defer parameters to .map_fd_put_ptr() wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() ARM: dts: imx7s: Fix nand-controller #size-cells ARM: dts: imx7s: Fix lcdif compatible ARM: dts: imx7d: Fix coresight funnel ports scsi: arcmsr: Support new PCI device IDs 1883 and 1886 bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk PCI: Add no PM reset quirk for NVIDIA Spectrum devices scsi: lpfc: Fix possible file string name overflow when updating firmware selftests/bpf: Fix issues in setup_classid_environment() selftests/bpf: Fix pyperf180 compilation failure with clang18 selftests/bpf: satisfy compiler by having explicit return in btf test wifi: rt2x00: restart beacon queue when hardware reset ext4: avoid online resizing failures due to oversized flex bg ext4: remove unnecessary check from alloc_flex_gd() ext4: unify the type of flexbg_size to unsigned int ext4: fix inconsistent between segment fstrim and full fstrim ecryptfs: Reject casefold directory inodes SUNRPC: Fix a suspicious RCU usage warning KVM: s390: fix setting of fpc register s390/ptrace: handle setting of fpc register correctly arch: consolidate arch_irq_work_raise prototypes jfs: fix array-index-out-of-bounds in diNewExt rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu() crypto: stm32/crc32 - fix parsing list of devices crypto: octeontx2 - Fix cptvf driver cleanup pstore/ram: Fix crash when setting number of cpus to an odd number jfs: fix uaf in jfs_evict_inode jfs: fix array-index-out-of-bounds in dbAdjTree jfs: fix slab-out-of-bounds Read in dtSearch UBSAN: array-index-out-of-bounds in dtSplitRoot FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events PM / devfreq: Synchronize devfreq_monitor_[start/stop] ACPI: extlog: fix NULL pointer dereference check PNP: ACPI: fix fortify warning ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop audit: Send netlink ACK before setting connection in auditd_set regulator: core: Only increment use_count when enable_count changes debugobjects: Stop accessing objects after releasing hash bucket lock perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel powerpc/lib: Validate size for vector operations powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE x86/boot: Ignore NMIs during very early boot powerpc/64s: Fix CONFIG_NUMA=n build due to create_section_mapping() powerpc/mm: Fix build failures due to arch_reserved_kernel_pages() powerpc: Fix build error due to is_valid_bugaddr() drivers/perf: pmuv3: don't expose SW_INCR event in sysfs arm64: irq: set the correct node for VMAP stack powerpc/mm: Fix null-pointer dereference in pgtable_cache_add x86/entry/ia32: Ensure s32 is sign extended to s64 tick/sched: Preserve number of idle sleeps across CPU hotplug events mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan spi: bcm-qspi: fix SFDP BFPT read by usig mspi read block: Move checking GENHD_FL_NO_PART to bdev_add_partition() gpio: eic-sprd: Clear interrupt after set the interrupt type drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume drm/exynos: fix accidental on-stack copy of exynos_drm_plane drm: panel-simple: add missing bus flags for Tianma tm070jvhg[30/33] cpufreq: intel_pstate: Refine computation of P-state for given frequency cpufreq: intel_pstate: Drop redundant intel_pstate_get_hwp_cap() call ksmbd: fix global oob in ksmbd_nl_policy btrfs: add definition for EXTENT_TREE_V2 PM / devfreq: Fix buffer overflow in trans_stat_show mm/sparsemem: fix race in accessing memory_section->usage mm: use __pfn_to_section() instead of open coding it media: mtk-jpeg: Fix use after free bug due to error path handling in mtk_jpeg_dec_device_run ARM: dts: qcom: sdx55: fix USB SS wakeup ARM: dts: qcom: sdx55: fix USB DP/DM HS PHY interrupts ARM: dts: qcom: sdx55: fix pdc '#interrupt-cells' ARM: dts: samsung: exynos4210-i9100: Unconditionally enable LDO12 ARM: dts: qcom: sdx55: fix USB wakeup interrupt types pipe: wakeup wr_wait after setting max_usage fs/pipe: move check to pipe_has_watch_queue() bus: mhi: host: Add alignment check for event ring read pointer bus: mhi: host: Rename "struct mhi_tre" to "struct mhi_ring_element" PM: sleep: Fix possible deadlocks in core system-wide PM code PM: core: Remove unnecessary (void *) conversions drm/bridge: nxp-ptn3460: simplify some error checking drm/tidss: Fix atomic_flush check drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking drm: Don't unref the same fb many times by mistake due to deadlock handling gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 xfs: read only mounts with fsopen mount API are busted firmware: arm_scmi: Check mailbox/SMT channel for consistency netfilter: nf_tables: reject QUEUE/DROP verdict parameters netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain hv_netvsc: Calculate correct ring size when PAGE_SIZE is not 4 Kbytes wifi: iwlwifi: fix a memory corruption exec: Fix error handling in begin_new_exec() rbd: don't move requests to the running list on errors btrfs: don't abort filesystem when attempting to snapshot deleted subvolume btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args btrfs: don't warn if discard range is not aligned to sector btrfs: tree-checker: fix inline ref size in error messages btrfs: ref-verify: free ref cache before clearing mount opt btrfs: avoid copying BTRFS_ROOT_SUBVOL_DEAD flag to snapshot of subvolume being deleted btrfs: fix race between reading a directory and adding entries to it btrfs: refresh dir last index during a rewinddir(3) call btrfs: set last dir index to the current last index when opening dir btrfs: fix infinite directory reads net: fec: fix the unhandled context fault from smmu fjes: fix memleaks in fjes_hw_setup selftests: netdevsim: fix the udp_tunnel_nic test net: mvpp2: clear BM pool before initialization net: stmmac: Wait a bit for the reset to take effect netfilter: nf_tables: validate NFPROTO_* family netfilter: nf_tables: restrict anonymous set and map names to 16 bytes netfilter: nft_limit: reject configurations that cause integer overflow overflow: Allow mixed type arguments net/mlx5e: fix a potential double-free in fs_any_create_groups net/mlx5e: fix a double-free in arfs_create_groups net/mlx5: DR, Can't go to uplink vport on RX rule net/mlx5: DR, Align mlx5dv_dr API vport action with FW behavior net/mlx5: DR, Replace local WIRE_PORT macro with the existing MLX5_VPORT_UPLINK net/mlx5: DR, Use the right GVMI number for drop action ipv6: init the accept_queue's spinlocks in inet6_create netlink: fix potential sleeping issue in mqueue_flush_file tcp: Add memory barrier to tcp_push() afs: Hide silly-rename files from userspace tracing: Ensure visibility when inserting an element into tracing_map net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv llc: Drop support for ETH_P_TR_802_2. llc: make llc_ui_sendmsg() more robust against bonding changes vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING bnxt_en: Wait for FLR to complete during probe tcp: make sure init the accept_queue's spinlocks once net/smc: fix illegal rmb_desc access in SMC-D connection dump ksmbd: Add missing set_freezable() for freezable kthread ksmbd: send lease break notification on FILE_RENAME_INFORMATION ksmbd: don't increment epoch if current state and request state are same ksmbd: fix potential circular locking issue in smb2_set_ea() ksmbd: set v2 lease version on lease upgrade rename(): fix the locking of subdirectories ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path nouveau/vmm: don't set addr on the fail path to avoid warning rtc: Adjust failure return code for cmos_set_alarm() mmc: mmc_spi: remove custom DMA mapped buffers mmc: core: Use mrq.sbc in close-ended ffu scripts/get_abi: fix source path leak lsm: new security_file_ioctl_compat() hook arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts arm64: dts: qcom: sm8150: fix USB wakeup interrupt types arm64: dts: qcom: sdm845: fix USB wakeup interrupt types arm64: dts: qcom: sc7180: fix USB wakeup interrupt types async: Introduce async_schedule_dev_nocall() async: Split async_schedule_node_domain() parisc/firmware: Fix F-extend for PDC addresses bus: mhi: host: Add spinlock to protect WP access when queueing TREs bus: mhi: host: Drop chan lock before queuing buffers mips: Fix max_mapnr being uninitialized on early stages media: ov9734: Enable runtime PM before registering async sub-device rpmsg: virtio: Free driver_override when rpmsg_remove() media: imx355: Enable runtime PM before registering async sub-device crypto: s390/aes - Fix buffer overread in CTR mode hwrng: core - Fix page fault dead lock on mmap-ed hwrng PM: hibernate: Enforce ordering during image compression/decompression crypto: api - Disallow identical driver names btrfs: sysfs: validate scrub_speed_max value ext4: allow for the last group to be marked as trimmed iio:adc:ad7091r: Move exports into IIO_AD7091R namespace. scsi: ufs: core: Remove the ufshcd_hba_exit() call from ufshcd_async_scan() scsi: ufs: core: Simplify power management during async scan dmaengine: fix NULL pointer in channel unregistration function iio: adc: ad7091r: Enable internal vref if external vref is not supplied iio: adc: ad7091r: Allow users to configure device events iio: adc: ad7091r: Set alert bit in config register ksmbd: only v2 leases handle the directory ksmbd: fix UAF issue in ksmbd_tcp_new_connection() ksmbd: validate mech token in session setup ksmbd: don't allow O_TRUNC open on read-only share ksmbd: free ppace array on error in parse_dacl BACKPORT: UPSTREAM: tick/sched: Preserve number of idle sleeps across CPU hotplug events BACKPORT: UPSTREAM: tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug ANDROID: GKI: Add symbol list for Nothing ANDROID: thermal: Add vendor thermal_pm_notify_suspend function ANDROID: ABI: Update oplus symbol list ANDROID: GKI: add more vfs-only exports to their own namespace ANDROID: fs: Export free_fs_struct,copy_fs_struct. UPSTREAM: drm/msm/dsi: Enable runtime PM UPSTREAM: PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() ANDROID: introduce a vendor hook to allow speculative swap pagefaults ANDROID: mm: allow limited speculative page faulting in do_swap_page() UPSTREAM: Revert "drm/bridge: lt9611uxc: Switch to devm MIPI-DSI helpers" UPSTREAM: Revert "drm/bridge: lt9611uxc: Register and attach our DSI device at probe" UPSTREAM: Revert "drm/bridge: lt9611uxc: fix the race in the error path" ANDROID: Add vendor hooks for FUSE tmpfile support ANDROID: ABI: Add to QCOM symbols list ANDROID: ABI: Add to QCOM symbols list UPSTREAM: net: tls, update curr on splice as well ANDROID: GKI: abi_gki_aarch64_qcom: QCOM symbols list update ANDROID: GKI: db845c: Update symbols list and ABI on devm MIPI-DSI helpers ANDROID: GKI: abi_gki_aarch64_qcom: Add to QCOM symbols list UPSTREAM: netfilter: nf_tables: check if catch-all set element is active in next generation Revert "clk: fixed-rate: add devm_clk_hw_register_fixed_rate" Revert "clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw" Reapply "perf: Fix perf_event_validate_size()" UPSTREAM: ida: Fix crash in ida_free when the bitmap is empty UPSTREAM: net/rose: Fix Use-After-Free in rose_ioctl UPSTREAM: netfilter: nf_tables: Reject tables of unsupported family ANDROID: ABI break fix caused by kernfs_root and kernfs_elem_dir size increase UPSTREAM: kernfs: fix NULL dereferencing in kernfs_remove UPSTREAM: kernfs: prevent early freeing of root node UPSTREAM: kernfs: switch global kernfs_rwsem lock to per-fs lock Reapply "perf: Disallow mis-matched inherited group reads" UPSTREAM: extcon: Add EXTCON_DISP_CVBS and EXTCON_DISP_EDP FROMGIT: usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend UPSTREAM: extcon: Add EXTCON_DISP_CVBS and EXTCON_DISP_EDP FROMGIT: usb: dwc3: host: Set XHCI_SG_TRB_CACHE_SIZE_QUIRK FROMGIT: usb: host: xhci-plat: Add support for XHCI_SG_TRB_CACHE_SIZE_QUIRK ANDROID: mm: Fix VMA ref count after fast-mremap Linux 5.15.148 Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" arm64: dts: armada-3720-turris-mox: set irq type for RTC netfilter: nft_quota: copy content when cloning expression netfilter: nft_last: copy content when cloning expression netfilter: nft_limit: Clone packet limits' cost value netfilter: nft_limit: fix stateful object memory leak netfilter: nft_connlimit: memleak if nf_ct_netns_get() fails netfilter: nf_tables: typo NULL check in _clone() function block: Remove special-casing of compound pages i2c: s3c24xx: fix transferring more than one message in polling mode i2c: s3c24xx: fix read transfers in polling mode ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work selftests: mlxsw: qos_pfc: Adjust the test to support 8 lanes mlxsw: spectrum_acl_tcam: Fix stack corruption mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations mlxsw: spectrum_acl_tcam: Make fini symmetric to init mlxsw: spectrum_acl_tcam: Add missing mutex_destroy() mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure ethtool: netlink: Add missing ethnl_ops_begin/complete kdb: Fix a potential buffer overflow in kdb_local() ipvs: avoid stat macros calls from preemptible context netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description netfilter: nf_tables: skip dead set elements in netlink dump netfilter: nf_tables: do not allow mismatch field size and set key length netfilter: nft_limit: do not ignore unsupported flags netfilter: nf_tables: memcg accounting for dynamically allocated objects netfilter: nft_limit: move stateful fields out of expression data netfilter: nft_limit: rename stateful structure netfilter: nft_quota: move stateful fields out of expression data netfilter: nft_last: move stateful fields out of expression data netfilter: nft_connlimit: move stateful fields out of expression data netfilter: nf_tables: reject invalid set policy net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS net: stmmac: ethtool: Fixed calltrace caused by unbalanced disable_irq_wake calls net: ravb: Fix dma_addr_t truncation in error case mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req() mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() mptcp: strict validation before using mp_opt->hmac mptcp: drop unused sk in mptcp_get_options mptcp: mptcp_parse_option() fix for MPTCPOPT_MP_JOIN net: phy: micrel: populate .soft_reset for KSZ9131 net: ethernet: ti: am65-cpsw: Fix max mtu to fit ethernet frames net: qualcomm: rmnet: fix global oob in rmnet_policy s390/pci: fix max size calculation in zpci_memcpy_toio() PCI: keystone: Fix race condition when initializing PHYs nvmet-tcp: Fix the H2C expected PDU len calculation nvmet: re-fix tracing strncpy() warning serial: imx: Correct clock error message in function probe() usb: xhci-mtk: fix a short packet issue of gen1 isoc-in transfer apparmor: avoid crash when parsed profile name is empty perf env: Avoid recursively taking env->bpf_progs.lock nvmet-tcp: fix a crash in nvmet_req_complete() nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length usb: cdc-acm: return correct error code on unsupported break tty: use 'if' in send_break() instead of 'goto' tty: don't check for signal_pending() in send_break() tty: early return from send_break() on TTY_DRIVER_HARDWARE_BREAK tty: change tty_write_lock()'s ndelay parameter to bool perf genelf: Set ELF program header addresses properly iio: adc: ad9467: fix scale setting iio: adc: ad9467: don't ignore error codes iio: adc: ad9467: fix reset gpio handling iio: adc: ad9467: Benefit from devm_clk_get_enabled() to simplify selftests/sgx: Skip non X86_64 platform selftests/sgx: Fix uninitialized pointer dereference in error path serial: imx: fix tx statemachine deadlock software node: Let args be NULL in software_node_get_reference_args libapi: Add missing linux/types.h header to get the __u64 type on io.h serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed power: supply: bq256xx: fix some problem in bq256xx_hw_init power: supply: cw2015: correct time_to_empty units in sysfs MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup() MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup() riscv: Fix module_alloc() that did not reset the linear mapping permissions riscv: Check if the code to patch lies in the exit section mips: Fix incorrect max_low_pfn adjustment mips: dmi: Fix early remap on MIPS32 mfd: intel-lpss: Fix the fractional clock divider flags leds: aw2013: Select missing dependency REGMAP_I2C mfd: syscon: Fix null pointer dereference in of_syscon_register() ARM: 9330/1: davinci: also select PINCTRL iommu/dma: Trace bounce buffer usage when mapping buffers serial: sc16is7xx: set safe default SPI clock frequency serial: sc16is7xx: add check for unsupported SPI modes during probe HID: wacom: Correct behavior when processing some confidence == false touches iio: adc: ad7091r: Pass iio_dev to event handler KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache KVM: arm64: vgic-v4: Restore pending state on host userspace write x86/kvm: Do not try to disable kvmclock if it was not enabled PCI: mediatek: Clear interrupt status before dispatching handler PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support wifi: mwifiex: configure BSSID consistently when starting AP wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code wifi: mt76: fix broken precal loading from MTD for mt7915 iommu/arm-smmu-qcom: Add missing GMU entry to match table bpf: Fix re-attachment branch in bpf_tracing_prog_attach Bluetooth: Fix atomicity violation in {min,max}_key_size_set rootfs: Fix support for rootfstype= when root= is given io_uring/rw: ensure io->bytes_done is always initialized pwm: jz4740: Don't use dev_err_probe() in .request() netfilter: nf_tables: check if catch-all set element is active in next generation block: add check that partition length needs to be aligned with block size scsi: mpi3mr: Refresh sdev queue depth after controller reset fbdev: flush deferred work in fb_deferred_io_fsync() ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx ALSA: oxygen: Fix right channel of capture volume mixer serial: imx: Ensure that imx_uart_rs485_config() is called with enabled clock usb: mon: Fix atomicity violation in mon_bin_vma_fault usb: typec: class: fix typec_altmode_put_partner to put plugs Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs" usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled usb: cdns3: fix iso transfer error when mult is not zero usb: cdns3: fix uvc failure work since sg support enabled usb: chipidea: wait controller resume finished for wakeup irq Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-only" Revert "usb: dwc3: Soft reset phy on probe for host" usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host() tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug binder: fix race between mmput() and do_exit() xen-netback: don't produce zero-size SKB frags virtio-crypto: fix memory leak in virtio_crypto_alg_skcipher_close_session() dma-mapping: Fix build error unused-value Input: atkbd - use ab83 as id when skipping the getid command binder: fix unused alloc->free_async_space binder: fix async space check for 0-sized buffers keys, dns: Fix size check of V1 server-list header selftests/bpf: Add assert for user stacks in test_task_stack of: unittest: Fix of_count_phandle_with_args() expected value message of: Fix double free in of_parse_phandle_with_args_map ksmbd: validate the zero field of packet header drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init IB/iser: Prevent invalidating wrong MR mmc: sdhci_omap: Fix TI SoC dependencies mmc: sdhci_am654: Fix TI SoC dependencies ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put() ALSA: scarlett2: Add missing error checks to *_ctl_get() ALSA: scarlett2: Allow passing any output to line_out_remap() ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config() ALSA: scarlett2: Add missing error check to scarlett2_config_save() ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[] pwm: stm32: Fix enable count for clk in .probe() pwm: stm32: Use hweight32 in stm32_pwm_detect_channels pwm: stm32: Use regmap_clear_bits and regmap_set_bits where applicable clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw clk: fixed-rate: add devm_clk_hw_register_fixed_rate clk: asm9260: use parent index to link the reference clock clk: si5341: fix an error code problem in si5341_output_clk_set_rate watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO watchdog: set cdev owner before adding drivers: clk: zynqmp: update divider round rate logic clk: zynqmp: Add a check for NULL pointer clk: zynqmp: make bestdiv unsigned drivers: clk: zynqmp: calculate closest mux rate clk: qcom: videocc-sm8150: Add missing PLL config property clk: qcom: videocc-sm8150: Update the videocc resets dt-bindings: clock: Update the videocc resets for sm8150 gpu/drm/radeon: fix two memleaks in radeon_vm_init drivers/amd/pm: fix a use-after-free in kv_parse_power_table drm/amd/pm: fix a double-free in si_dpm_init drm/amdgpu/debugfs: fix error code when smc register accessors are NULL media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path of m88ds3103_probe() media: dvbdev: drop refcount on error path in dvb_device_open() f2fs: fix the f2fs_file_write_iter tracepoint f2fs: fix to update iostat correctly in f2fs_filemap_fault() f2fs: fix to check compress file in f2fs_move_file_range() media: rkisp1: Disable runtime PM in probe error path clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config media: cx231xx: fix a memleak in cx231xx_init_isoc drm/bridge: tc358767: Fix return value on error case drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table drm/radeon/dpm: fix a memleak in sumo_parse_power_table drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() drm/drv: propagate errors from drm_modeset_register_all() drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks drm/msm/mdp4: flush vblank event on disable ASoC: cs35l34: Fix GPIO name and drop legacy include ASoC: cs35l33: Fix GPIO name and drop legacy include drm/radeon: check return value of radeon_ring_lock() drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check() drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg() f2fs: fix to avoid dirent corruption drm/bridge: Fix typo in post_disable() description media: pvrusb2: fix use after free on context disconnection drm/tilcdc: Fix irq free on unload drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer drm/panel-elida-kd35t133: hold panel in reset for unprepare RDMA/hns: Fix inappropriate err code for unsupported operations RDMA/usnic: Silence uninitialized symbol smatch warnings Revert "drm/omapdrm: Annotate dma-fence critical section in commit path" Revert "drm/tidss: Annotate dma-fence critical section in commit path" ARM: davinci: always select CONFIG_CPU_ARM926T ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() mlxbf_gige: Enable the GigE port in mlxbf_gige_open net: mellanox: mlxbf_gige: Replace non-standard interrupt handling mlxbf_gige: Fix intermittent no ip issue net/sched: act_ct: fix skb leak and crash on ooo frags null_blk: don't cap max_hw_sectors to BLK_DEF_MAX_SECTORS block: make BLK_DEF_MAX_SECTORS unsigned Bluetooth: btmtkuart: fix recv_buf() return value Bluetooth: Fix bogus check for re-auth no supported with non-ssp netfilter: nf_tables: mark newset as dead on transaction abort wifi: iwlwifi: mvm: send TX path flush in rfkill wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request wifi: rtlwifi: rtl8192se: using calculate_bit_shift() wifi: rtlwifi: rtl8192ee: using calculate_bit_shift() wifi: rtlwifi: rtl8192de: using calculate_bit_shift() wifi: rtlwifi: rtl8192ce: using calculate_bit_shift() wifi: rtlwifi: rtl8192cu: using calculate_bit_shift() wifi: rtlwifi: rtl8192c: using calculate_bit_shift() wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift() wifi: rtlwifi: add calculate_bit_shift() arm64: dts: qcom: sc7280: Mark SDHCI hosts as cache-coherent block: add check of 'minors' and 'first_minor' in device_add_disk() arm64: dts: qcom: sm8150-hdk: fix SS USB regulators soc: qcom: llcc: Fix dis_cap_alloc and retain_on_pc configuration dma-mapping: clear dev->dma_mem to NULL after freeing it dma-mapping: Add dma_release_coherent_memory to DMA API virtio/vsock: fix logic which reduces credit update messages selftests/net: fix grep checking for fib_nexthop_multiprefix scsi: hisi_sas: Correct the number of global debugfs registers scsi: hisi_sas: Rollback some operations if FLR failed scsi: hisi_sas: Replace with standard error code return value scsi: hisi_sas: Prevent parallel FLR and controller reset scsi: hisi_sas: Rename HISI_SAS_{RESET -> RESETTING}_BIT block: Set memalloc_noio to false on device_add_disk() error path bpf: Fix verification of indirect var-off stack access arm64: dts: qcom: sc7280: fix usb_2 wakeup interrupt types arm64: dts: qcom: sdm845-db845c: correct LED panic indicator arm64: dts: qcom: qrb5165-rb5: correct LED panic indicator scsi: fnic: Return error if vmalloc() failed bpf: fix check for attempt to corrupt spilled pointer arm64: dts: qcom: sm8250: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sm8150: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sdm845: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sc7280: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sc7180: Make watchdog bark interrupt edge triggered ARM: dts: qcom: sdx65: correct SPMI node name bpf: enforce precision of R0 on callback return arm64: dts: ti: k3-am65-main: Fix DSS irq trigger type wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior firmware: meson_sm: populate platform devices from sm device tree data firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create() net/ncsi: Fix netlink major/minor version numbers ARM: dts: qcom: apq8064: correct XOADC register address wifi: libertas: stop selecting wext wifi: ath11k: Defer on rproc_get failure bpf: Add crosstask check to __bpf_get_stack bpf, lpm: Fix check prefixlen before walking trie wifi: rtw88: fix RX filter in FIF_ALLMULTI flag NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT blocklayoutdriver: Fix reference leak of pnfs_device_node crypto: scomp - fix req->dst buffer overflow crypto: sahara - do not resize req->src when doing hash operations crypto: sahara - fix processing hash requests with req->nbytes < sg->length crypto: sahara - improve error handling in sahara_sha_process() crypto: sahara - fix wait_for_completion_timeout() error handling crypto: sahara - fix ahash reqsize crypto: sahara - handle zero-length aes requests crypto: sahara - avoid skcipher fallback code duplication crypto: virtio - Wait for tasklet to complete on device remove gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump fs: indicate request originates from old mount API pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() crypto: sahara - fix error handling in sahara_hw_descriptor_create() crypto: sahara - fix processing requests with cryptlen < sg->length crypto: sahara - fix ahash selftest failure crypto: sahara - fix cbc selftest failure crypto: sahara - remove FLAGS_NEW_KEY logic crypto: af_alg - Disallow multiple in-flight AIO requests crypto: ccp - fix memleak in ccp_init_dm_workarea crypto: sa2ul - Return crypto_aead_setkey to transfer the error crypto: virtio - Handle dataq logic with tasklet selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket mtd: Fix gluebi NULL pointer dereference caused by ftl notifier kunit: debugfs: Fix unchecked dereference in debugfs_print_results() ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error ACPI: LPSS: Fix the fractional clock divider flags spi: sh-msiof: Enforce fixed DTDL for R-Car H3 efivarfs: force RO when remounting if SetVariable is not supported calipso: fix memory leak in netlbl_calipso_add_pass() cpufreq: scmi: process the result of devm_of_clk_add_hw_provider() cpufreq: Use of_property_present() for testing DT property presence of: Add of_property_present() helper of: property: define of_property_read_u{8,16,32,64}_array() unconditionally ACPI: LPIT: Avoid u32 multiplication overflow ACPI: video: check for error while searching for backlight device parent mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response spi: spi-zynqmp-gqspi: fix driver kconfig dependencies powerpc/imc-pmu: Add a null pointer check in update_events_in_group() powerpc/powernv: Add a null pointer check in opal_powercap_init() powerpc/powernv: Add a null pointer check in opal_event_init() powerpc/powernv: Add a null pointer check to scom_debug_init_one() selftests/powerpc: Fix error handling in FPU/VMX preemption tests powerpc/pseries/memhp: Fix access beyond end of drmem array powerpc/44x: select I2C for CURRITUCK powerpc: add crtsavres.o to always-y instead of extra-y powerpc: remove checks for binutils older than 2.25 powerpc/toc: Future proof kernel toc powerpc: Mark .opd section read-only EDAC/thunderx: Fix possible out-of-bounds string access x86/lib: Fix overflow when counting digits coresight: etm4x: Fix width of CCITMIN field PCI: Add ACS quirk for more Zhaoxin Root Ports leds: ledtrig-tty: Free allocated ttyname buffer on deactivate parport: parport_serial: Add Brainboxes device IDs and geometry parport: parport_serial: Add Brainboxes BAR details uio: Fix use-after-free in uio_open binder: fix comment on binder_alloc_new_buf() return value binder: fix trivial typo of binder_free_buf_locked() binder: fix use-after-free in shinker's callback binder: use EPOLLERR from eventpoll.h Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list bpf: Add --skip_encoding_btf_inconsistent_proto, --btf_gen_optimized to pahole flags for v1.25 Revert "ASoC: atmel: Remove system clock tree configuration for at91sam9g20ek" ACPI: resource: Add another DMI match for the TongFang GMxXGxx drm/crtc: fix uninitialized variable use ARM: sun9i: smp: fix return code check of of_property_match_string net: qrtr: ns: Return 0 if server port is not present ida: Fix crash in ida_free when the bitmap is empty i2c: rk3x: fix potential spinlock recursion on poll ASoC: Intel: bytcr_rt5640: Add quirk for the Medion Lifetab S10346 Input: xpad - add Razer Wolverine V2 support wifi: iwlwifi: pcie: avoid a NULL pointer dereference ARC: fix spare error s390/scm: fix virtual vs physical address confusion Input: i8042 - add nomux quirk for Acer P459-G2-M Input: atkbd - skip ATKBD_CMD_GETID in translated mode reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI tracing: Fix uaf issue when open the hist or hist_debug file MIPS: dts: loongson: drop incorrect dwmac fallback compatible stmmac: dwmac-loongson: drop useless check for compatible fallback tracing: Add size check when printing trace_marker output tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing jbd2: fix soft lockup in journal_finish_inode_data_buffers() platform/x86: intel-vbtn: Fix missing tablet-mode-switch events neighbour: Don't let neigh_forced_gc() disable preemption for long drm/crtc: Fix uninit-value bug in drm_mode_setcrtc jbd2: correct the printing of write_flags in jbd2_write_superblock() clk: rockchip: rk3128: Fix HCLK_OTG gate register hwmon: (corsair-psu) Fix probe when built-in drm/exynos: fix a wrong error checking drm/exynos: fix a potential error pointer dereference drm/amdgpu: Add NULL checks for function pointers nvme: introduce helper function to get ctrl state ASoC: ops: add correct range check for limiting volume ASoC: da7219: Support low DC impedance headset net/tg3: fix race condition in tg3_reset_task() nouveau/tu102: flush all pdbs on vmm flush ASoC: rt5650: add mutex to avoid the jack detection failure ASoC: cs43130: Fix incorrect frame delay configuration ASoC: cs43130: Fix the position of const qualifier ASoC: Intel: Skylake: mem leak in skl register function ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16 ASoC: Intel: Skylake: Fix mem leak in few functions ASoC: wm8974: Correct boost mixer inputs nvme-core: check for too small lba shift drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer debugfs: fix automount d_fsdata usage wifi: cfg80211: lock wiphy mutex for rfkill poll mptcp: fix uninit-value in mptcp_incoming_options ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro pinctrl: lochnagar: Don't build on MIPS f2fs: explicitly null-terminate the xattr list ANDROID: GKI: Update abi_gki_aarch64_pasa ANDROID: gki_defconfig: enable CONFIG_ARM_SCMI_TRANSPORT_VIRTIO UPSTREAM: workqueue: Warn when a new worker could not be created ANDROID: uid_sys_stats: Drop CONFIG_UID_SYS_STATS_DEBUG logic ANDROID: uid_sys_stats: Fully initialize uid_entry_tmp value UPSTREAM: usb: gadget: uvc: Remove nested locking UPSTREAM: usb: gadget: uvc: Fix use are free during STREAMOFF ANDROID: fuse-bpf: Fix the issue of abnormal lseek system calls ANDROID: GKI: Update symbols to symbol list FROMGIT: usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart FROMGIT: BACKPORT: mm: update mark_victim tracepoints fields ANDROID: vendor_hooks: fix ABI following __set_task_comm vendor hook ANDROID: vendor_hooks: fix ABI following __set_task_comm vendor hook FROMGIT: usb: dwc3: core: set force_gen1 bit in USB31 devices if max speed is SS Revert "ipv6: remove max_size check inline with ipv4" ANDROID: db845c: Enable device tree overlay support ANDROID: fs/fuse: Use extended init flags for FUSE_PASSTHROUGH Linux 5.15.147 net: usb: ax88179_178a: move priv to driver_priv net: usb: ax88179_178a: remove redundant init code tracing/kprobes: Fix symbol counting logic by looking at modules as well kallsyms: Make module_kallsyms_on_each_symbol generally available netfilter: nf_tables: Reject tables of unsupported family perf inject: Fix GEN_ELF_TEXT_OFFSET for jit ipv6: remove max_size check inline with ipv4 net: tls, update curr on splice as well mmc: sdhci-sprd: Fix eMMC init failure after hw reset mmc: core: Cancel delayed work before releasing host mmc: rpmb: fixes pause retune on all RPMB partitions. mmc: meson-mx-sdhc: Fix initialization frozen issue mm: fix unmap_mapping_range high bits shift bug i2c: core: Fix atomic xfer check for non-preempt config x86/kprobes: fix incorrect return address calculation in kprobe_emulate_call_indirect firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards mm/memory-failure: check the mapcount of the precise page selftests: secretmem: floor the memory size to the multiple of page_size net: Implement missing SO_TIMESTAMPING_NEW cmsg support bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters() asix: Add check for usbnet_get_endpoints octeontx2-af: Re-enable MAC TX in otx2_stop processing octeontx2-af: Always configure NIX TX link credits based on max frame size octeontx2-af: Set NIX link credits based on max LMAC octeontx2-af: Don't enable Pause frames by default net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues igc: Fix hicredit calculation i40e: Restore VF MSI-X state during PCI reset ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux ASoC: meson: g12a-toacodec: Fix event generation ASoC: meson: g12a-tohdmitx: Validate written enum values ASoC: meson: g12a-toacodec: Validate written enum values i40e: fix use-after-free in i40e_aqc_add_filters() net: Save and restore msg_namelen in sock_sendmsg netfilter: nft_immediate: drop chain reference counter on error net: bcmgenet: Fix FCS generation for fragmented skbuffs sfc: fix a double-free bug in efx_probe_filters ARM: sun9i: smp: Fix array-index-out-of-bounds read in sunxi_mc_smp_init net-timestamp: extend SOF_TIMESTAMPING_OPT_ID to HW timestamps can: raw: add support for SO_MARK can: raw: add support for SO_TXTIME/SCM_TXTIME net: Implement missing getsockopt(SO_TIMESTAMPING_NEW) r8169: Fix PCI error on system resume net: sched: em_text: fix possible memory leak in em_text_destroy() mlxbf_gige: fix receive packet race condition ASoC: fsl_rpmsg: Fix error handler with pm_runtime_enable igc: Check VLAN EtherType mask igc: Check VLAN TCI mask igc: Report VLAN EtherType matching back to user i40e: Fix filter input checks to prevent config with invalid values drm/i915/dp: Fix passing the correct DPCD_REV for drm_dp_set_phy_test_pattern octeontx2-af: Fix marking couple of structure as __packed nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local drm/bridge: ti-sn65dsi86: Never store more than msg->size bytes in AUX xfer wifi: iwlwifi: pcie: don't synchronize IRQs from IRQ Revert "PCI/ASPM: Remove pcie_aspm_pm_state_change()" ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP ProBook 440 G6 block: Don't invalidate pagecache for invalid falloc modes keys, dns: Fix missing size check of V1 server-list header UPSTREAM: netfilter: nf_tables: bail out on mismatching dynset and set expressions Revert "gpiolib: cdev: add gpio_device locking wrapper around gpio_ioctl()" Revert "device property: Add const qualifier to device_get_match_data() parameter" Revert "spi: Introduce spi_get_device_match_data() helper" Revert "iio: imu: adis16475: add spi_device_id table" Revert "device property: Allow const parameter to dev_fwnode()" ANDROID: ABI: Update symbols to unisoc whitelist for rwsem ANDROID: vendor_hooks: Add android_vh_rwsem_downgrade_wake_finish to rwsem_downgrade_wake ANDROID: gki_defconfig: Set CONFIG_IDLE_INJECT and CONFIG_CPU_IDLE_THERMAL into y Reapply "kasan: print the original fault addr when access invalid shadow" UPSTREAM: netfilter: nf_tables: skip set commit for deleted/destroyed sets UPSTREAM: ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet ANDROID: GKI: Update symbol list for Amlogic UPSTREAM: bpf: Fix prog_array_map_poke_run map poke update ANDROID: GKI: fix crc issue in include/net/addrconf.h Linux 5.15.146 bpf: Fix prog_array_map_poke_run map poke update device property: Allow const parameter to dev_fwnode() dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata() ring-buffer: Fix slowpath of interrupted event netfilter: nf_tables: skip set commit for deleted/destroyed sets ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() ring-buffer: Remove useless update to write_stamp in rb_try_to_discard() tracing: Fix blocked reader of snapshot buffer ring-buffer: Fix wake ups when buffer_percent is set to 100 mm/filemap: avoid buffered read/write race to read inconsistent data Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg smb: client: fix OOB in smbCalcSize() smb: client: fix OOB in SMB2_query_info_init() iio: imu: adis16475: add spi_device_id table spi: Introduce spi_get_device_match_data() helper device property: Add const qualifier to device_get_match_data() parameter net: usb: ax88179_178a: avoid failed operations when device is disconnected net: usb: ax88179_178a: wol optimizations net: usb: ax88179_178a: clean up pm calls ethernet: constify references to netdev->dev_addr in drivers usb: fotg210-hcd: delete an incorrect bounds test ARM: dts: Fix occasional boot hang for am3 usb ksmbd: fix wrong allocation size update in smb2_open() ksmbd: avoid duplicate opinfo_put() call on error of smb21_lease_break_ack() ksmbd: lazy v2 lease break on smb2_write() ksmbd: send v2 lease break notification for directory ksmbd: downgrade RWH lease caching state to RH for directory ksmbd: set v2 lease capability ksmbd: set epoch in create context v2 lease ksmbd: have a dependency on cifs ARC4 fuse: share lookup state between submount and its parent x86/alternatives: Sync core before enabling interrupts KVM: arm64: vgic: Force vcpu vgic teardown on vcpu destroy lib/vsprintf: Fix %pfwf when current node refcount == 0 gpio: dwapb: mask/unmask IRQ when disable/enale it bus: ti-sysc: Flush posted write only after srst_udelay tracing / synthetic: Disable events after testing in synth_event_gen_test_init() scsi: core: Always send batch on reset or error handling command dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp net: ks8851: Fix TX stall caused by TX buffer overrun net: rfkill: gpio: set GPIO direction net: 9p: avoid freeing uninit memory in p9pdu_vreadf Input: soc_button_array - add mapping for airplane mode button Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE Bluetooth: L2CAP: Send reject on command corrupted request Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent USB: serial: option: add Quectel RM500Q R13 firmware support USB: serial: option: add Foxconn T99W265 with new baseline USB: serial: option: add Quectel EG912Y module support USB: serial: ftdi_sio: update Actisense PIDs constant names wifi: cfg80211: fix certs build to not depend on file order wifi: cfg80211: Add my certificate ALSA: usb-audio: Increase delay in MOTU M quirk iio: triggered-buffer: prevent possible freeing of wrong buffer iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma() iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() Input: ipaq-micro-keys - add error handling for devm_kmemdup iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw interconnect: Treat xlate() returning NULL node as an error smb: client: fix OOB in smb2_query_reparse_point() smb: client: fix NULL deref in asn1_ber_decoder() drm/i915: Fix intel_atomic_setup_scalers() plane_state handling drm/i915: Relocate intel_atomic_setup_scalers() drm/i915/mtl: limit second scaler vertical scaling in ver >= 14 ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE gpiolib: cdev: add gpio_device locking wrapper around gpio_ioctl() pinctrl: at91-pio4: use dedicated lock class for IRQ i2c: aspeed: Handle the coalesced stop conditions with the start conditions. ASoC: hdmi-codec: fix missing report for jack initial status afs: Fix use-after-free due to get/remove race in volume tree afs: Use refcount_t rather than atomic_t afs: Fix overwriting of result of DNS query keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry net: check dev->gso_max_size in gso_features_check() afs: Fix dynamic root lookup DNS check afs: Fix the dynamic root's d_delete to always delete unused dentries net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() net: mana: select PAGE_POOL net/rose: fix races in rose_kill_by_device() ethernet: atheros: fix a memleak in atl1e_setup_ring_resources net: sched: ife: fix potential use-after-free net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors net/mlx5: Fix fw tracer first block check net/mlx5e: fix a potential double-free in fs_udp_create_groups net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list() Revert "net/mlx5e: fix double free of encap_header" Revert "net/mlx5e: fix double free of encap_header in update funcs" wifi: mac80211: mesh_plink: fix matches_local logic wifi: iwlwifi: pcie: add another missing bh-disable for rxq->lock s390/vx: fix save/restore of fpu kernel context reset: Fix crash when freeing non-existent optional resets ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init ARM: dts: dra7: Fix DRA7 L3 NoC node register size ANDROID: GKI: Update honda symbol list for xt_LOG ANDROID: GKI: Update honda symbol list for ebt filter ANDROID: GKI: Update honda symbol list for ebtables ANDROID: GKI: Update honda symbol list for net scheduler ANDROID: GKI: Update honda symbol list for led-trigger ANDROID: GKI: Add initial symbol list for honda Revert "cred: switch to using atomic_long_t" ANDROID: GKI: fix build error with mm/memory_hotplug.c and v5.15.144 ANDROID: ABI: add trace_android_rvh_set_task_comm to whitelist ANDROID: vendor_hooks: Add a hook for set_task_comm FROMLIST: binder: fix race between mmput() and do_exit() Revert "drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group" Revert "perf/core: Add a new read format to get a number of lost samples" Revert "perf: Fix perf_event_validate_size()" Revert "hrtimers: Push pending hrtimers away from outgoing CPU earlier" ANDROID: fix KASAN-related kernel crash by KMI W/A for NETFILTER_FAMILY_BRIDGE ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hooks: Add hooks for rt_mutex steal Linux 5.15.145 kasan: disable kasan_non_canonical_hook() for HW tags tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols Revert "drm/bridge: lt9611uxc: Switch to devm MIPI-DSI helpers" Revert "drm/bridge: lt9611uxc: Register and attach our DSI device at probe" Revert "drm/bridge: lt9611uxc: fix the race in the error path" ksmbd: don't update ->op_state as OPLOCK_STATE_NONE on error ksmbd: move setting SMB2_FLAGS_ASYNC_COMMAND and AsyncId ksmbd: release interim response after sending status pending response ksmbd: move oplock handling after unlock parent dir ksmbd: separately allocate ci per dentry ksmbd: fix possible deadlock in smb2_open ksmbd: prevent memory leak on error return ksmbd: handle malformed smb1 message ksmbd: fix kernel-doc comment of ksmbd_vfs_kern_path_locked() ksmbd: no need to wait for binded connection termination at logoff ksmbd: add support for surrogate pair conversion ksmbd: fix missing RDMA-capable flag for IPoIB device in ksmbd_rdma_capable_netdev() ksmbd: fix recursive locking in vfs helpers ksmbd: fix kernel-doc comment of ksmbd_vfs_setxattr() ksmbd: reorganize ksmbd_iov_pin_rsp() ksmbd: Remove unused field in ksmbd_user struct ksmbd: fix potential double free on smb2_read_pipe() error path ksmbd: fix Null pointer dereferences in ksmbd_update_fstate() ksmbd: fix wrong error response status by using set_smb2_rsp_status() ksmbd: fix race condition between tree conn lookup and disconnect ksmbd: fix race condition from parallel smb2 lock requests ksmbd: fix race condition from parallel smb2 logoff requests ksmbd: fix race condition with fp ksmbd: fix race condition between session lookup and expire ksmbd: check iov vector index in ksmbd_conn_write() ksmbd: return invalid parameter error response if smb2 request is invalid ksmbd: fix passing freed memory 'aux_payload_buf' ksmbd: remove unneeded mark_inode_dirty in set_info_sec() ksmbd: remove experimental warning ksmbd: add missing calling smb2_set_err_rsp() on error ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob() ksmbd: Fix one kernel-doc comment ksmbd: reduce descriptor size if remaining bytes is less than request size ksmbd: fix `force create mode' and `force directory mode' ksmbd: fix wrong interim response on compound ksmbd: add support for read compound ksmbd: switch to use kmemdup_nul() helper ksmbd: fix out of bounds in init_smb2_rsp_hdr() ksmbd: validate session id and tree id in compound request ksmbd: check if a mount point is crossed during path lookup ksmbd: Fix unsigned expression compared with zero ksmbd: Replace one-element array with flexible-array member ksmbd: Use struct_size() helper in ksmbd_negotiate_smb_dialect() ksmbd: add missing compound request handing in some commands ksmbd: fix out of bounds read in smb2_sess_setup ksmbd: Replace the ternary conditional operator with min() ksmbd: use kvzalloc instead of kvmalloc ksmbd: Change the return value of ksmbd_vfs_query_maximal_access to void ksmbd: return a literal instead of 'err' in ksmbd_vfs_kern_path_locked() ksmbd: use kzalloc() instead of __GFP_ZERO ksmbd: remove unused ksmbd_tree_conn_share function ksmbd: add mnt_want_write to ksmbd vfs functions ksmbd: validate smb request protocol id ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop ksmbd: fix posix_acls and acls dereferencing possible ERR_PTR() ksmbd: fix out-of-bound read in parse_lease_state() ksmbd: fix out-of-bound read in deassemble_neg_contexts() ksmbd: call putname after using the last component ksmbd: fix UAF issue from opinfo->conn ksmbd: fix multiple out-of-bounds read during context decoding ksmbd: fix uninitialized pointer read in smb2_create_link() ksmbd: fix uninitialized pointer read in ksmbd_vfs_rename() ksmbd: fix racy issue under cocurrent smb2 tree disconnect ksmbd: fix racy issue from smb2 close and logoff with multichannel ksmbd: block asynchronous requests when making a delay on session setup ksmbd: destroy expired sessions ksmbd: fix racy issue from session setup and logoff ksmbd: fix racy issue from using ->d_parent and ->d_name fs: introduce lock_rename_child() helper ksmbd: remove unused compression negotiate ctx packing ksmbd: avoid duplicate negotiate ctx offset increments ksmbd: set NegotiateContextCount once instead of every inc ksmbd: avoid out of bounds access in decode_preauth_ctxt() ksmbd: fix slab-out-of-bounds in init_smb2_rsp_hdr ksmbd: delete asynchronous work from list ksmbd: remove unused is_char_allowed function ksmbd: fix wrong signingkey creation when encryption is AES256 ksmbd: fix possible memory leak in smb2_lock() ksmbd: Fix parameter name and comment mismatch ksmbd: Fix spelling mistake "excceed" -> "exceeded" ksmbd: update Kconfig to note Kerberos support and fix indentation ksmbd: Remove duplicated codes ksmbd: fix typo, syncronous->synchronous ksmbd: Implements sess->rpc_handle_list as xarray ksmbd: Implements sess->ksmbd_chann_list as xarray ksmbd: send proper error response in smb2_tree_connect() ksmbd: Convert to use sysfs_emit()/sysfs_emit_at() APIs ksmbd: Fix resource leak in smb2_lock() ksmbd: use F_SETLK when unlocking a file ksmbd: set SMB2_SESSION_FLAG_ENCRYPT_DATA when enforcing data encryption for this share ksmbd: replace one-element arrays with flexible-array members ksmbd: validate share name from share config response ksmbd: call ib_drain_qp when disconnected ksmbd: make utf-8 file name comparison work in __caseless_lookup() ksmbd: hide socket error message when ipv6 config is disable ksmbd: reduce server smbdirect max send/receive segment sizes ksmbd: decrease the number of SMB3 smbdirect server SGEs ksmbd: set NTLMSSP_NEGOTIATE_SEAL flag to challenge blob ksmbd: fix encryption failure issue for session logoff response ksmbd: fill sids in SMB_FIND_FILE_POSIX_INFO response ksmbd: set file permission mode to match Samba server posix extension behavior ksmbd: change security id to the one samba used for posix extension ksmbd: casefold utf-8 share names and fix ascii lowercase conversion ksmbd: remove generic_fillattr use in smb2_open() ksmbd: constify struct path ksmbd: don't open-code %pD ksmbd: don't open-code file_path() ksmbd: remove unnecessary generic_fillattr in smb2_open ksmbd: request update to stale share config ksmbd: use wait_event instead of schedule_timeout() ksmbd: remove unused ksmbd_share_configs_cleanup function ksmbd: remove duplicate flag set in smb2_write ksmbd: smbd: Remove useless license text when SPDX-License-Identifier is already used ksmbd: smbd: relax the count of sges required ksmbd: smbd: fix connection dropped issue ksmbd: Fix some kernel-doc comments ksmbd: fix wrong smbd max read/write size check ksmbd: smbd: handle multiple Buffer descriptors ksmbd: smbd: change the return value of get_sg_list ksmbd: smbd: simplify tracking pending packets ksmbd: smbd: introduce read/write credits for RDMA read/write ksmbd: smbd: change prototypes of RDMA read/write related functions ksmbd: validate length in smb2_write() ksmbd: remove filename in ksmbd_file smb3: fix ksmbd bigendian bug in oplock break, and move its struct to smbfs_common ksmbd: replace usage of found with dedicated list iterator variable ksmbd: Remove a redundant zeroing of memory ksmbd: shorten experimental warning on loading the module ksmbd: store fids as opaque u64 integers ksmbd: use netif_is_bridge_port ksmbd: add support for key exchange ksmbd: smbd: validate buffer descriptor structures ksmbd: smbd: fix missing client's memory region invalidation ksmbd: add smb-direct shutdown ksmbd: smbd: change the default maximum read/write, receive size ksmbd: smbd: create MR pool ksmbd: smbd: call rdma_accept() under CM handler ksmbd: set 445 port to smbdirect port by default ksmbd: register ksmbd ib client with ib_register_client() ksmbd: Fix smb2_get_name() kernel-doc comment ksmbd: Delete an invalid argument description in smb2_populate_readdir_entry() ksmbd: Fix smb2_set_info_file() kernel-doc comment ksmbd: Fix buffer_check_err() kernel-doc comment ksmbd: set both ipv4 and ipv6 in FSCTL_QUERY_NETWORK_INTERFACE_INFO ksmbd: Remove unused fields from ksmbd_file struct definition ksmbd: Remove unused parameter from smb2_get_name() ksmbd: use oid registry functions to decode OIDs ksmbd: change LeaseKey data type to u8 array ksmbd: remove smb2_buf_length in smb2_transform_hdr ksmbd: remove smb2_buf_length in smb2_hdr ksmbd: remove md4 leftovers ksmbd: Remove redundant 'flush_workqueue()' calls ksmdb: use cmd helper variable in smb2_get_ksmbd_tcon() ksmbd: use ksmbd_req_buf_next() in ksmbd_verify_smb_message() FROMGIT: PM / devfreq: Synchronize devfreq_monitor_[start/stop] BACKPORT: sched: Fix stop_one_cpu_nowait() vs hotplug UPSTREAM: dm verity: don't perform FEC for failed readahead IO Revert "mmc: core: add helpers mmc_regulator_enable/disable_vqmmc" Revert "mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled" Revert "HID: core: store the unique system identifier in hid_device" Revert "HID: fix HID device resource race between HID core and debugging support" Revert "wireguard: use DEV_STATS_INC()" UPSTREAM: netfilter: nft_set_pipapo: skip inactive elements during set walk FROMLIST: iommu: Avoid more races around device probe ANDROID: fuse-bpf: Follow mounts in lookups Linux 5.15.144 r8152: fix the autosuspend doesn't work r8152: remove rtl_vendor_mode function r8152: avoid to change cfg for all devices powerpc/ftrace: Fix stack teardown in ftrace_no_trace powerpc/ftrace: Create a dummy stackframe to fix stack unwind RDMA/irdma: Prevent zero-length STAG registration USB: gadget: core: adjust uevent timing on gadget unbind ring-buffer: Do not try to put back write_stamp ring-buffer: Fix a race in rb_time_cmpxchg() for 32 bit archs ring-buffer: Fix writing to the buffer with max_data_size ring-buffer: Have saved event hold the entire event ring-buffer: Do not update before stamp when switching sub-buffers tracing: Update snapshot buffer on resize if it is allocated ring-buffer: Fix memory leak of free page drm/amdgpu/sdma5.2: add begin/end_use ring callbacks team: Fix use-after-free when an option instance allocation fails arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS soundwire: stream: fix NULL pointer dereference for multi_link btrfs: do not allow non subvolume root targets for snapshot perf: Fix perf_event_validate_size() lockdep splat HID: hid-asus: add const to read-only outgoing usb buffer net: usb: qmi_wwan: claim interface 4 for ZTE MF290 asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad HID: hid-asus: reset the backlight brightness level on resume HID: add ALWAYS_POLL quirk for Apple kb HID: glorious: fix Glorious Model I HID report platform/x86: intel_telemetry: Fix kernel doc descriptions bcache: avoid NULL checking to c->root in run_cache_set() bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() bcache: remove redundant assignment to variable cur_idx bcache: avoid oversize memory allocation by small stripe_size blk-cgroup: bypass blkcg_deactivate_policy after destroying blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" stmmac: dwmac-loongson: Add architecture dependency usb: aqc111: check packet for fixup for true limit drm/mediatek: Add spinlock for setting vblank event in atomic_begin PCI: loongson: Limit MRRS to 256 Revert "PCI: acpiphp: Reassign resources on bridge if necessary" ALSA: hda/realtek: Apply mute LED quirk for HP15-db ALSA: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants ALSA: hda/hdmi: add force-connect quirk for NUC5CPYB fuse: dax: set fc->dax to NULL in fuse_dax_conn_free() cred: switch to using atomic_long_t net: atlantic: fix double free in ring reinit logic appletalk: Fix Use-After-Free in atalk_ioctl net: stmmac: Handle disabled MDIO busses from devicetree net: stmmac: use dev_err_probe() for reporting mdio bus registration failure dpaa2-switch: fix size of the dma_unmap vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() sign-file: Fix incorrect return values check stmmac: dwmac-loongson: Make sure MDIO is initialized before use net: ena: Fix XDP redirection error net: ena: Fix xdp drops handling due to multibuf packets net: ena: Destroy correct number of xdp queues upon failure net: Remove acked SYN flag from packet in the transmit queue correctly qed: Fix a potential use-after-free in qed_cxt_tables_alloc net/rose: Fix Use-After-Free in rose_ioctl atm: Fix Use-After-Free in do_vcc_ioctl octeontx2-af: Update RSS algorithm index octeontx2-pf: Fix promisc mcam entry action octeontx2-af: fix a use-after-free in rvu_nix_register_reporters net: fec: correct queue selection net: vlan: introduce skb_vlan_eth_hdr() atm: solos-pci: Fix potential deadlock on &tx_queue_lock atm: solos-pci: Fix potential deadlock on &cli_queue_lock qca_spi: Fix reset behavior qca_debug: Fix ethtool -G iface tx behavior qca_debug: Prevent crash on TX ring changes net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX HID: lenovo: Restrict detection of patched firmware only to USB cptkbd afs: Fix refcount underflow from error handling race ksmbd: fix memory leak in smb2_lock() MIPS: Loongson64: Handle more memory types passed from firmware memblock: allow to specify flags with memblock_add_node() mm/memory_hotplug: handle memblock_add_node() failures in add_memory_resource() netfilter: nf_tables: fix 'exist' matching on bigendian arches r8152: add vendor/device ID pair for ASUS USB-C2500 r8152: add vendor/device ID pair for D-Link DUB-E250 r8152: add USB device driver for config selection perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table ANDROID: KMI workaround for CONFIG_NETFILTER_FAMILY_BRIDGE Revert "ASoC: soc-card: Add storage for PCI SSID" Revert "net: inet: Remove count from inet_listen_hashbucket" Revert "net: inet: Open code inet_hash2 and inet_unhash2" Revert "net: inet: Retire port only listening_hash" Revert "net: set SOCK_RCU_FREE before inserting socket into hashtable" Revert "tracing: Have trace_event_file have ref counters" Revert "workqueue: Provide one lock class key per work_on_cpu() callsite" ANDROID: Snapshot Mainline's version of checkpatch.pl FROMLIST: iommu: Avoid more races around device probe UPSTREAM: usb:typec:tcpm:support double Rp to Vbus cable as sink ANDROID: GKI: Update oplus symbol list ANDROID: GKI: Update oplus symbol list ANDROID: vendor_hooks: export tracepoint symbol trace_mm_vmscan_kswapd_wake ANDROID: mm: Add vendor hooks for recording when kswapd finishing the reclaim job Linux 5.15.143 devcoredump: Send uevent once devcd is ready devcoredump : Serialize devcd_del work smb: client: fix potential NULL deref in parse_dfs_referrals() cifs: Fix non-availability of dedup breaking generic/304 Revert "btrfs: add dmesg output for first mount and last unmount of a filesystem" MIPS: Loongson64: Enable DMA noncoherent support MIPS: Loongson64: Reserve vgabios memory on boot KVM: SVM: Update EFER software model on CR0 trap for SEV-ES KVM: s390/mm: Properly reset no-dat x86/CPU/AMD: Check vendor in the AMD microcode callback serial: 8250_omap: Add earlycon support for the AM654 UART controller serial: 8250: 8250_omap: Do not start RX DMA on THRI interrupt serial: 8250: 8250_omap: Clear UART_HAS_RHR_IT_DIS bit serial: sc16is7xx: address RX timeout interrupt errata ARM: PL011: Fix DMA support usb: typec: class: fix typec_altmode_put_partner to put plugs Revert "xhci: Loosen RPM as default policy to cover for AMD xHC 1.1" parport: Add support for Brainboxes IX/UC/PX parallel cards usb: gadget: f_hid: fix report descriptor allocation drm/amdgpu: correct the amdgpu runtime dereference usage count drm/amd/amdgpu: Fix warnings in amdgpu/amdgpu_display.c gpiolib: sysfs: Fix error handling on failed export perf: Fix perf_event_validate_size() perf/core: Add a new read format to get a number of lost samples arm64: dts: mt8183: kukui: Fix underscores in node names arm64: dts: mediatek: add missing space before { arm64: dts: mediatek: mt8183: Move thermal-zones to the root node arm64: dts: mediatek: align thermal zone node names with dtschema tools headers UAPI: Sync linux/perf_event.h with the kernel sources docs/process/howto: Replace C89 with C11 platform/x86: asus-wmi: Fix kbd_dock_devid tablet-switch reporting netfilter: nft_set_pipapo: skip inactive elements during set walk io_uring/af_unix: disable sending io_uring over sockets mm: fix oops when filemap_map_pmd() without prealloc_pte r8169: fix rtl8125b PAUSE frames blasting when suspended tracing: Stop current tracer when resizing buffer tracing: Set actual size after ring buffer resize ring-buffer: Force absolute timestamp on discard of event misc: mei: client.c: fix problem of return '-EOVERFLOW' in mei_cl_write misc: mei: client.c: return negative error code in mei_cl_write coresight: etm4x: Remove bogous __exit annotation for some functions coresight: etm4x: Make etm4_remove_dev() return void kallsyms: Make kallsyms_on_each_symbol generally available binder: fix memory leaks of spam and pending work arm64: dts: mediatek: mt8183: Fix unit address for scp reserved memory arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names arm64: dts: mediatek: mt8183-kukui-jacuzzi: fix dsi unnecessary cells properties arm64: dts: mediatek: mt7622: fix memory node warning check platform/surface: aggregator: fix recv_buf() return value regmap: fix bogus error on regcache_sync success packet: Move reference count in packet_sock to atomic_long_t tracing: Fix a possible race when disabling buffered events tracing: Fix incomplete locking when disabling buffered events tracing: Disable snapshot buffer when stopping instance tracers tracing: Always update snapshot buffer size checkstack: fix printed address nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage() nilfs2: fix missing error check for sb_set_blocksize call ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5 ALSA: pcm: fix out-of-bounds in snd_pcm_state_names ALSA: usb-audio: Add Pioneer DJM-450 mixer controls io_uring: fix mutex_unlock with unreferenced ctx nvme-pci: Add sleep quirk for Kingston drives kprobes: consistent rcu api usage for kretprobe holder md: don't leave 'MD_RECOVERY_FROZEN' in error path of md_set_readonly() md: introduce md_ro_state riscv: fix misaligned access handling of C.SWSP and C.SDSP ARM: dts: imx28-xea: Pass the 'model' property ARM: dts: imx7: Declare timers compatible with fsl,imx6dl-gpt ARM: imx: Check return value of devm_kasprintf in imx_mmdc_perf_init scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() tracing: Fix a warning when allocating buffered events fails ARM: dts: imx6ul-pico: Describe the Ethernet PHY clock arm64: dts: imx8mp: imx8mq: Add parkmode-disable-ss-quirk on DWC3 arm64: dts: imx8mq: drop usb3-resume-missing-cas from usb RDMA/irdma: Avoid free the non-cqp_request scratch RDMA/core: Fix umem iterator when PAGE_SIZE is greater then HCA pgsz ASoC: wm_adsp: fix memleak in wm_adsp_buffer_populate hwmon: (nzxt-kraken2) Fix error handling path in kraken2_probe() hwmon: (acpi_power_meter) Fix 4.29 MW bug RDMA/bnxt_re: Correct module description string RDMA/rtrs-clt: Remove the warnings for req in_use check RDMA/rtrs-clt: Fix the max_send_wr setting RDMA/rtrs-srv: Destroy path files after making sure no IOs in-flight RDMA/rtrs-srv: Free srv_mr iu only when always_invalidate is true RDMA/rtrs-srv: Check return values while processing info request RDMA/rtrs-clt: Start hb after path_up RDMA/rtrs-srv: Do not unconditionally enable irq arm64: dts: rockchip: Expand reg size of vdec node for RK3399 RDMA/irdma: Add wait for suspend on SQD RDMA/irdma: Do not modify to SQD on error RDMA/hns: Fix unnecessary err return when using invalid congest control algorithm tee: optee: Fix supplicant based device enumeration drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group net: add missing kdoc for struct genl_multicast_group::flags psample: Require 'CAP_NET_ADMIN' when joining "packets" group bpf: sockmap, updating the sg structure should also update curr tcp: do not accept ACK of bytes we never sent netfilter: xt_owner: Fix for unsafe access of sk->sk_socket netfilter: nf_tables: validate family when identifying table via handle netfilter: nf_tables: bail out on mismatching dynset and set expressions octeontx2-af: Update Tx link register range net: hns: fix fake link up on xge port ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit() ionic: Fix dim work handling in split interrupt mode ionic: fix snprintf format length warning net: bnxt: fix a potential use-after-free in bnxt_init_tc i40e: Fix unexpected MFS warning message octeontx2-af: fix a use-after-free in rvu_npa_register_reporters net: stmmac: fix FPE events losing arcnet: restoring support for multiple Sohard Arcnet cards platform/mellanox: Check devm_hwmon_device_register_with_groups() return value platform/mellanox: Add null pointer checks for devm_kasprintf() mlxbf-bootctl: correctly identify secure boot with development keys r8152: Add RTL8152_INACCESSIBLE to r8153_aldps_en() r8152: Add RTL8152_INACCESSIBLE to r8153_pre_firmware_1() r8152: Add RTL8152_INACCESSIBLE to r8156b_wait_loading_flash() r8152: Add RTL8152_INACCESSIBLE checks to more loops r8152: Rename RTL8152_UNPLUG to RTL8152_INACCESSIBLE hv_netvsc: rndis_filter needs to select NLS octeontx2-af: Check return value of nix_get_nixlf before using nixlf octeontx2-pf: Add missing mutex lock in otx2_get_pauseparam ipv6: fix potential NULL deref in fib6_add() platform/x86: wmi: Skip blocks with zero instances platform/x86: wmi: Allow duplicate GUIDs for drivers that use struct wmi_driver of: dynamic: Fix of_reconfig_get_state_change() return value documentation platform/x86: asus-wmi: Move i8042 filter install to shared asus-wmi code platform/x86: asus-wmi: Simplify tablet-mode-switch handling platform/x86: asus-wmi: Simplify tablet-mode-switch probing platform/x86: asus-wmi: Add support for ROG X13 tablet mode platform/x86: asus-wmi: Adjust tablet/lidflip handling to use enum drm/amdgpu: correct chunk_ptr to a pointer to chunk. kconfig: fix memory leak from range properties tg3: Increment tx_dropped in tg3_tso_bug() tg3: Move the [rt]x_dropped counters to tg3_napi netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test i2c: designware: Fix corrupted memory seen in the ISR hrtimers: Push pending hrtimers away from outgoing CPU earlier vdpa/mlx5: preserve CVQ vringh index Reapply "ANDROID: GKI: db845c: Update symbols list and ABI on rpmsg_register_device_override" Reapply "ANDROID: fix up rpmsg_device ABI break" Reapply "ANDROID: fix up platform_device ABI break" Reapply "UPSTREAM: rpmsg: Fix possible refcount leak in rpmsg_register_device_override()" Reapply "UPSTREAM: rpmsg: glink: Release driver_override" Reapply "BACKPORT: rpmsg: Fix calling device_lock() on non-initialized device" Reapply "BACKPORT: rpmsg: Fix kfree() of static memory on setting driver_override" Reapply "UPSTREAM: rpmsg: Constify local variable in field store macro" Reapply "UPSTREAM: driver: platform: Add helper for safer setting of driver_override" Revert "UPSTREAM: driver: platform: Add helper for safer setting of driver_override" Revert "UPSTREAM: rpmsg: Constify local variable in field store macro" Revert "BACKPORT: rpmsg: Fix kfree() of static memory on setting driver_override" Revert "BACKPORT: rpmsg: Fix calling device_lock() on non-initialized device" Revert "UPSTREAM: rpmsg: glink: Release driver_override" Revert "UPSTREAM: rpmsg: Fix possible refcount leak in rpmsg_register_device_override()" Revert "ANDROID: fix up platform_device ABI break" Revert "ANDROID: fix up rpmsg_device ABI break" Revert "ANDROID: GKI: db845c: Update symbols list and ABI on rpmsg_register_device_override" ANDROID: GKI: db845c: Update symbols list and ABI on rpmsg_register_device_override ANDROID: fix up rpmsg_device ABI break ANDROID: fix up platform_device ABI break UPSTREAM: rpmsg: Fix possible refcount leak in rpmsg_register_device_override() UPSTREAM: rpmsg: glink: Release driver_override BACKPORT: rpmsg: Fix calling device_lock() on non-initialized device BACKPORT: rpmsg: Fix kfree() of static memory on setting driver_override UPSTREAM: rpmsg: Constify local variable in field store macro UPSTREAM: driver: platform: Add helper for safer setting of driver_override ANDROID: GKI: Update symbol list for transsion ANDROID: Add vendor_hooks to workaround CONFIG_TASK_DELAY_ACCT UPSTREAM: io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid Revert "ipvlan: properly track tx_errors" Revert "mfd: core: Un-constify mfd_cell.of_reg" Revert "inet: shrink struct flowi_common" Revert "arm64/arm: xen: enlighten: Fix KPTI checks" ANDROID: sort Bazel load statements ANDROID: sort Bazel load statements ANDROID: sort Bazel load statements Linux 5.15.142 iomap: update ki_pos a little later in iomap_dio_complete r8169: fix deadlock on RTL8125 in jumbo mtu mode r8169: disable ASPM in case of tx timeout mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled mmc: core: add helpers mmc_regulator_enable/disable_vqmmc iommu/vt-d: Make context clearing consistent with context mapping iommu/vt-d: Omit devTLB invalidation requests when TES=0 cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily cpufreq: imx6q: don't warn for disabling a non-existing frequency smb3: fix caching of ctime on setxattr fs: add ctime accessors infrastructure fbdev: stifb: Make the STI next font pointer a 32-bit signed offset ASoC: SOF: sof-pci-dev: Fix community key quirk detection ASoC: SOF: sof-pci-dev: don't use the community key on APL Chromebooks ASoC: SOF: sof-pci-dev: add parameter to override topology filename ASoC: SOF: sof-pci-dev: use community key on all Up boards ASoC: Intel: Move soc_intel_is_foo() helpers to a generic header smb3: fix touch -h of symlink selftests/resctrl: Move _GNU_SOURCE define into Makefile selftests/resctrl: Add missing SPDX license to Makefile perf intel-pt: Fix async branch flags net: ravb: Stop DMA in case of failures on ravb_open() net: ravb: Start TX queues after HW initialization succeeded net: ravb: Use pm_runtime_resume_and_get() net: ravb: Check return value of reset_control_deassert() ravb: Fix races between ravb_tx_timeout_work() and net related ops r8169: prevent potential deadlock in rtl8169_close Revert "workqueue: remove unused cancel_work()" octeontx2-pf: Fix adding mbox work queue entry when num_vfs > 64 net: stmmac: xgmac: Disable FPE MMC interrupts octeontx2-af: Fix possible buffer overflow selftests/net: ipsec: fix constant out of range uapi: propagate __struct_group() attributes to the container union dpaa2-eth: increase the needed headroom to account for alignment ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet usb: config: fix iteration issue in 'usb_get_bos_descriptor()' USB: core: Change configuration warnings to notices hv_netvsc: fix race of netvsc and VF register_netdevice rcu: Avoid tracing a few functions executed in stop machine vlan: move dev_put into vlan_dev_uninit vlan: introduce vlan_dev_free_egress_priority Input: xpad - add HyperX Clutch Gladiate Support btrfs: make error messages more clear when getting a chunk map btrfs: send: ensure send_fd is writable btrfs: fix off-by-one when checking chunk map includes logical address btrfs: ref-verify: fix memory leaks in btrfs_ref_tree_mod() btrfs: add dmesg output for first mount and last unmount of a filesystem parisc: Drop the HP-UX ENOSYM and EREMOTERELEASE error codes powerpc: Don't clobber f0/vs0 during fp|altivec register save iommu/vt-d: Add MTL to quirk list to skip TE disabling bcache: revert replacing IS_ERR_OR_NULL with IS_ERR dm verity: don't perform FEC for failed readahead IO dm-verity: align struct dm_verity_fec_io properly ALSA: hda/realtek: Add supported ALC257 for ChromeOS ALSA: hda/realtek: Headset Mic VREF to 100% ALSA: hda: Disable power-save on KONTRON SinglePC mmc: block: Be sure to wait while busy in CQE error recovery mmc: block: Do not lose cache flush during CQE error recovery mmc: block: Retry commands in CQE error recovery mmc: cqhci: Fix task clearing in CQE error recovery mmc: cqhci: Warn of halt or task clear failure mmc: cqhci: Increase recovery halt timeout firewire: core: fix possible memory leak in create_units() pinctrl: avoid reload of p state in list iteration ANDROID: fs/passthrough: Fix compatibility with R/O file system UPSTREAM: netfilter: nf_tables: remove catchall element in GC sync path UPSTREAM: tcp: Reduce chance of collisions in inet6_hashfn(). ANDROID: GKI: Update symbol list for sunxi ANDROID: GKI: Update symbol list for sunxi Linux 5.15.141 io_uring: fix off-by one bvec index USB: dwc3: qcom: fix wakeup after probe deferral USB: dwc3: qcom: fix software node leak on probe errors usb: dwc3: set the dma max_seg_size usb: dwc3: Fix default mode initialization USB: dwc2: write HCINT with INTMASK applied usb: typec: tcpm: Skip hard reset when in error recovery USB: serial: option: don't claim interface 4 for ZTE MF290 USB: serial: option: fix FM101R-GL defines USB: serial: option: add Fibocom L7xx modules usb: cdnsp: Fix deadlock issue during using NCM gadget bcache: fixup lock c->root error bcache: fixup init dirty data errors bcache: prevent potential division by zero error bcache: check return value from btree_node_alloc_replacement() dm-delay: fix a race between delay_presuspend and delay_bio hv_netvsc: Mark VF as slave before exposing it to user-mode hv_netvsc: Fix race of register_netdevice_notifier and VF register USB: serial: option: add Luat Air72*U series products s390/dasd: protect device queue against concurrent access io_uring/fs: consider link->flags when getting path for LINKAT bcache: fixup multi-threaded bch_sectors_dirty_init() wake-up race md: fix bi_status reporting in md_end_clone_io bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in btree_gc_coalesce() swiotlb-xen: provide the "max_mapping_size" method ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA proc: sysctl: prevent aliased sysctls from getting passed to init ext4: make sure allocate pending entry not fail ext4: fix slab-use-after-free in ext4_es_insert_extent() ext4: using nofail preallocation in ext4_es_insert_extent() ext4: using nofail preallocation in ext4_es_insert_delayed_block() ext4: using nofail preallocation in ext4_es_remove_extent() ext4: use pre-allocated es in __es_remove_extent() ext4: use pre-allocated es in __es_insert_extent() ext4: factor out __es_alloc_extent() and __es_free_extent() ext4: add a new helper to check if es must be kept media: qcom: camss: Fix csid-gen2 for test pattern generator media: qcom: camss: Fix set CSI2_RX_CFG1_VC_MODE when VC is greater than 3 media: camss: sm8250: Virtual channels for CSID media: camss: Replace hard coded value with parameter MIPS: KVM: Fix a build warning about variable set but not used lockdep: Fix block chain corruption USB: dwc3: qcom: fix ACPI platform device leak USB: dwc3: qcom: fix resource leaks on probe deferral nvmet: nul-terminate the NQNs passed in the connect command afs: Fix file locking on R/O volumes to operate in local mode afs: Return ENOENT if no cell DNS record can be found net: axienet: Fix check for partial TX checksum amd-xgbe: propagate the correct speed and duplex status amd-xgbe: handle the corner-case during tx completion amd-xgbe: handle corner-case during sfp hotplug octeontx2-pf: Fix ntuple rule creation to direct packet to VF with higher Rx queue than its PF arm/xen: fix xen_vcpu_info allocation alignment net/smc: avoid data corruption caused by decline net: usb: ax88179_178a: fix failed operations during ax88179_reset ipv4: Correct/silence an endian warning in __ip_do_redirect HID: fix HID device resource race between HID core and debugging support HID: core: store the unique system identifier in hid_device drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full ata: pata_isapnp: Add missing error check for devm_ioport_map() octeontx2-pf: Fix memory leak during interface down wireguard: use DEV_STATS_INC() drm/panel: simple: Fix Innolux G101ICE-L01 timings drm/panel: simple: Fix Innolux G101ICE-L01 bus flags drm/panel: auo,b101uan08.3: Fine tune the panel power sequence drm/panel: boe-tv101wum-nl6: Fine tune the panel power sequence afs: Make error on cell lookup failure consistent with OpenAFS afs: Fix afs_server_list to be cleaned up with RCU ANDROID: GKI: db845c: Update symbols list and ABI on rpmsg_register_device_override ANDROID: fuse-bpf: Ignore readaheads unless they go to the daemon ANDROID: mm: do not allow file-backed pages from CMA ANDROID: ABI: Update pixel symbol list UPSTREAM: USB: core: Fix race by not overwriting udev->descriptor in hub_port_init() UPSTREAM: USB: core: Change usb_get_device_descriptor() API UPSTREAM: USB: core: Unite old scheme and new scheme descriptor reads Linux 5.15.140 driver core: Release all resources during unbind before updating device links Input: xpad - add VID for Turtle Beach controllers tracing: Have trace_event_file have ref counters powerpc/powernv: Fix fortify source warnings in opal-prd.c io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox drm/amdgpu: fix error handling in amdgpu_bo_list_get() drm/amdgpu: don't use ATRM for external devices drm/i915: Fix potential spectre vulnerability drm/amd/pm: Handle non-terminated overdrive commands. ext4: add missed brelse in update_backups ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks ext4: correct the start block of counting reserved clusters ext4: correct return value of ext4_convert_meta_bg ext4: correct offset of gdb backup in non meta_bg group to update_backups ext4: apply umask if ACL support is disabled Revert "net: r8169: Disable multicast filter for RTL8168H and RTL8107E" media: qcom: camss: Fix missing vfe_lite clocks check media: qcom: camss: Fix VFE-17x vfe_disable_output() media: qcom: camss: Fix vfe_get() error jump media: qcom: camss: Fix pm_domain_on sequence in probe mmc: sdhci-pci-gli: GL9750: Mask the replay timer timeout of AER r8169: fix network lost after resume on DASH systems mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors mmc: sdhci-pci-gli: A workaround to allow GL9750 to enter ASPM L1.2 riscv: kprobes: allow writing to x0 nfsd: fix file memleak on client_opens_release media: ccs: Correctly initialise try compose rectangle media: venus: hfi: add checks to handle capabilities from firmware media: venus: hfi: fix the check to handle session buffer requirement media: venus: hfi_parser: Add check to keep the number of codecs within range media: sharp: fix sharp encoding media: lirc: drop trailing space from scancode transmit f2fs: avoid format-overflow warning i2c: i801: fix potential race in i801_block_transaction_byte_by_byte net: phylink: initialize carrier state at creation net: dsa: lan9303: consequently nested-lock physical MDIO net: ethtool: Fix documentation of ethtool_sprintf() s390/ap: fix AP bus crash on early config change callback invocation i2c: designware: Disable TX_EMPTY irq while waiting for block length byte sbsa_gwdt: Calculate timeout with 64-bit math lsm: fix default return value for inode_getsecctx lsm: fix default return value for vm_enough_memory Revert "i2c: pxa: move to generic GPIO recovery" Revert ncsi: Propagate carrier gain/loss events to the NCSI controller powerpc/pseries/ddw: simplify enable_ddw() arm64: dts: qcom: ipq6018: Fix tcsr_mutex register size arm64: dts: qcom: ipq6018: switch TCSR mutex to MMIO ksmbd: fix slab out of bounds write in smb_inherit_dacl() Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables bluetooth: Add device 13d3:3571 to device tables bluetooth: Add device 0bda:887b to device tables Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559 cpufreq: stats: Fix buffer overflow detection in trans_stats() regmap: Ensure range selector registers are updated after cache sync tty: serial: meson: fix hard LOCKUP on crtscts mode serial: meson: Use platform_get_irq() to get the interrupt ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC ALSA: hda/realtek - Add Dell ALC295 to pin fall back table ALSA: info: Fix potential deadlock at disconnection xhci: Enable RPM on controllers that support low-power states parisc/pgtable: Do not drop upper 5 address bits of physical address parisc: Prevent booting 64-bit kernels on PA1.x machines i3c: master: svc: fix SDA keep low when polling IBIWON timeout happen i3c: master: svc: fix check wrong status register in irq handler i3c: master: svc: fix ibi may not return mandatory data byte i3c: master: svc: fix wrong data return when IBI happen during start frame i3c: master: svc: fix race condition in ibi work thread i3c: master: cdns: Fix reading status register mtd: cfi_cmdset_0001: Byte swap OTP info mm/memory_hotplug: use pfn math in place of direct struct page manipulation mm/cma: use nth_page() in place of direct struct page manipulation s390/cmma: fix detection of DAT pages dmaengine: stm32-mdma: correct desc prep when channel running mcb: fix error handling for different scenarios when parsing tracing: Have the user copy of synthetic event address use correct context i2c: core: Run atomic i2c xfer when !preemptible kernel/reboot: emergency_restart: Set correct system_state quota: explicitly forbid quota files from being encrypted jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev ASoC: codecs: wsa-macro: fix uninitialized stack variables with name prefix selftests/resctrl: Reduce failures due to outliers in MBA/MBM tests selftests/resctrl: Remove duplicate feature check from CMT test netfilter: nf_tables: split async and sync catchall in two functions netfilter: nf_tables: remove catchall element in GC sync path PCI: keystone: Don't discard .probe() callback PCI: keystone: Don't discard .remove() callback KEYS: trusted: Rollback init_trusted() consistently genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware mmc: meson-gx: Remove setting of CMD_CFG_ERROR wifi: ath11k: fix htt pktlog locking wifi: ath11k: fix dfs radar event locking wifi: ath11k: fix temperature event locking ima: detect changes to the backing overlay file ima: annotate iint mutex to avoid lockdep false positive warnings ACPI: FPDT: properly handle invalid FPDT subtables firmware: qcom_scm: use 64-bit calling convention only when client is 64-bit btrfs: don't arbitrarily slow down delalloc if we're committing rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects PM: hibernate: Clean up sync_read handling in snapshot_write_next() PM: hibernate: Use __get_safe_page() rather than touching the list arm64: dts: qcom: ipq6018: Fix hwlock index for SMEM rcu/tree: Defer setting of jiffies during stall reset svcrdma: Drop connection after an RDMA Read error wifi: wilc1000: use vmm_table as array in wilc struct PCI: exynos: Don't discard .remove() callback PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common() mmc: sdhci_am654: fix start loop index for TAP value parsing mmc: vub300: fix an error code clk: qcom: ipq6018: drop the CLK_SET_RATE_PARENT flag from PLL clocks clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks clk: socfpga: Fix undefined behavior bug in struct stratix10_clock_data parisc/pdc: Add width field to struct pdc_model arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer ACPI: resource: Do IRQ override on TongFang GMxXGxx watchdog: move softlockup_panic back to early_param PCI/sysfs: Protect driver's D3cold preference from user space hvc/xen: fix event channel handling for secondary consoles hvc/xen: fix error path in xen_hvc_init() to always register frontend driver hvc/xen: fix console unplug tty/sysrq: replace smp_processor_id() with get_cpu() audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() audit: don't take task_lock() in audit_exe_compare() code path KVM: x86: Ignore MSR_AMD64_TW_CFG access KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space x86/cpu/hygon: Fix the CPU topology evaluation for real crypto: x86/sha - load modules based on CPU features scsi: qla2xxx: Fix system crash due to bad pointer access scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers scsi: mpt3sas: Fix loop logic bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END bpf: Fix check_stack_write_fixed_off() to correctly spill imm randstruct: Fix gcc-plugin performance mode to stay in group powerpc/perf: Fix disabling BHRB and instruction sampling media: venus: hfi: add checks to perform sanity on queue pointers i915/perf: Fix NULL deref bugs with drm_dbg() calls xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init() xfs: fix memory leak in xfs_errortag_init xfs: fix exception caused by unexpected illegal bestcount in leaf dir xfs: avoid a UAF when log intent item recovery fails xfs: fix inode reservation space for removing transaction xfs: Fix false ENOSPC when performing direct write on a delalloc extent in cow fork xfs: add missing cmap->br_state = XFS_EXT_NORM update xfs: fix intermittent hang during quotacheck xfs: don't leak memory when attr fork loading fails xfs: fix use-after-free in xattr node block inactivation xfs: flush inode gc workqueue before clearing agi bucket xfs: prevent a UAF when log IO errors race with unmount xfs: use invalidate_lock to check the state of mmap_lock xfs: convert buf_cancel_table allocation to kmalloc_array xfs: don't leak xfs_buf_cancel structures when recovery fails xfs: refactor buffer cancellation table allocation cifs: fix check of rc in function generate_smb3signingkey cifs: spnego: add ';' in HOST_KEY_LEN tools/power/turbostat: Enable the C-state Pre-wake printing tools/power/turbostat: Fix a knl bug macvlan: Don't propagate promisc change to lower dev in passthru net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors net/mlx5e: Reduce the size of icosq_str net/mlx5e: Fix pedit endianness net/mlx5e: Refactor mod header management API net/mlx5e: Move mod hdr allocation to a single place net/mlx5e: Remove incorrect addition of action fwd flag net/mlx5e: fix double free of encap_header in update funcs net/mlx5e: fix double free of encap_header net: stmmac: fix rx budget limit check netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() netfilter: nf_tables: add and use BE register load-store helpers netfilter: nf_tables: use the correct get/put helpers netfilter: nf_conntrack_bridge: initialize err to 0 af_unix: fix use-after-free in unix_stream_read_actor() net: ethernet: cortina: Fix MTU max setting net: ethernet: cortina: Handle large frames net: ethernet: cortina: Fix max RX frame define bonding: stop the device in bond_setup_by_slave() ptp: annotate data-race around q->head and q->tail xen/events: fix delayed eoi list handling ppp: limit MRU to 64K tipc: Fix kernel-infoleak due to uninitialized TLV value net: hns3: fix VF wrong speed and duplex issue net: hns3: fix VF reset fail issue net: hns3: fix variable may not initialized problem in hns3_init_mac_addr() net: hns3: fix incorrect capability bit display for copper port net: hns3: add barrier in vf mailbox reply process net: hns3: add byte order conversion for PF to VF mailbox message net: hns3: refine the definition for struct hclge_pf_to_vf_msg net: hns3: fix add VLAN fail issue tty: Fix uninit-value access in ppp_sync_receive() ipvlan: add ipvlan_route_v6_outbound() helper net: set SOCK_RCU_FREE before inserting socket into hashtable net: inet: Retire port only listening_hash net: inet: Open code inet_hash2 and inet_unhash2 net: inet: Remove count from inet_listen_hashbucket mptcp: listen diag dump support mptcp: diag: switch to context structure gfs2: Silence "suspicious RCU usage in gfs2_permission" warning SUNRPC: Fix RPC client cleaned up the freed pipefs dentries NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO SUNRPC: Add an IS_ERR() check back to where it was SUNRPC: ECONNRESET might require a rebind media: cec: meson: always include meson sub-directory in Makefile media: cadence: csi2rx: Unregister v4l2 async notifier sched/core: Optimize in_task() and in_interrupt() a bit tracing/perf: Add interrupt_context_level() helper tracing: Reuse logic from perf's get_recursion_context() wifi: iwlwifi: Use FW rate for non-data frames pwm: Fix double shift bug drm/amdgpu: fix software pci_unplug on some chips drm/qxl: prevent memory leak ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings i2c: dev: copy userspace array safely kgdb: Flush console before entering kgdb on panic drm/amd/display: Avoid NULL dereference of timing generator media: imon: fix access to invalid resource for the second interface media: ccs: Fix driver quirk struct documentation media: cobalt: Use FIELD_GET() to extract Link Width gfs2: fix an oops in gfs2_permission gfs2: ignore negated quota changes media: vivid: avoid integer overflow media: gspca: cpia1: shift-out-of-bounds in set_flicker i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data. virtio-blk: fix implicit overflow on virtio_max_dma_size i2c: sun6i-p2wi: Prevent potential division by zero i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler 9p: v9fs_listxattr: fix %s null argument warning 9p/trans_fd: Annotate data-racy writes to file::f_flags usb: gadget: f_ncm: Always set current gadget in ncm_bind() tty: vcc: Add check for kstrdup() in vcc_probe() exfat: support handle zero-size directory HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W PCI: Use FIELD_GET() in Sapphire RX 5600 XT Pulse quirk misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe controller PCI: Disable ATS for specific Intel IPU E2000 devices PCI: Extract ATS disabling to a helper function PCI: Use FIELD_GET() to extract Link Width scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() atm: iphase: Do PCI error checks on own line PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields ALSA: hda: Fix possible null-ptr-deref when assigning a stream ARM: 9320/1: fix stack depot IRQ stack filter HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround jfs: fix array-index-out-of-bounds in diAlloc jfs: fix array-index-out-of-bounds in dbFindLeaf fs/jfs: Add validity check for db_maxag and db_agpref fs/jfs: Add check for negative db_l2nbperpage scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs RDMA/hfi1: Use FIELD_GET() to extract Link Width crypto: pcrypt - Fix hungtask for PADATA_RESET ASoC: soc-card: Add storage for PCI SSID selftests/efivarfs: create-read: fix a resource leak arm64: dts: ls208xa: use a pseudo-bus to constrain usb dma size drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL drm/amdkfd: Fix shift out-of-bounds issue drm/panel: st7703: Pick different reset sequence drm/amdgpu/vkms: fix a possible null pointer dereference drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference drm/panel: fix a possible null pointer dereference drm/amdgpu: Fix potential null pointer derefernce drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 drm/msm/dp: skip validity check for DP CTS EDID checksum drm: vmwgfx_surface.c: copy user-array safely kernel: watch_queue: copy user-array safely kernel: kexec: copy user-array safely string.h: add array-wrappers for (v)memdup_user() drm/amd/display: use full update for clip size increase of large plane source drm/amdkfd: Fix a race condition of vram buffer unref in svm code drm/komeda: drop all currently held locks if deadlock happens platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e Bluetooth: Fix double free in hci_conn_cleanup Bluetooth: btusb: Add date->evt_skb is NULL check wifi: ath10k: Don't touch the CE interrupt registers after power up net: annotate data-races around sk->sk_dst_pending_confirm net: annotate data-races around sk->sk_tx_queue_mapping wifi: ath10k: fix clang-specific fortify warning wifi: ath9k: fix clang-specific fortify warnings bpf: Detect IP == ksym.end as part of BPF program atl1c: Work around the DMA RX overflow issue wifi: mac80211: don't return unset power in ieee80211_get_tx_power() wifi: mac80211_hwsim: fix clang-specific fortify warning x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size workqueue: Provide one lock class key per work_on_cpu() callsite clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware clocksource/drivers/timer-imx-gpt: Fix potential memory leak perf/core: Bail out early if the request AUX area is out of bound locking/ww_mutex/test: Fix potential workqueue corruption UPSTREAM: drm/qxl: fix UAF on handle creation FROMGIT: usb:gadget:uvc Do not use worker thread to pump isoc usb requests FROMGIT: usb: gadget: uvc: Fix use-after-free for inflight usb_requests FROMGIT: usb: gadget: uvc: move video disable logic to its own function FROMGIT: usb: gadget: uvc: Allocate uvc_requests one at a time FROMGIT: usb: gadget: uvc: prevent use of disabled endpoint ANDROID: fuse-bpf: Add NULL pointer check in fuse_release_in ANDROID: fix up rpmsg_device ABI break ANDROID: fix up platform_device ABI break Revert "kasan: print the original fault addr when access invalid shadow" FROMGIT: Input: uinput - allow injecting event times ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hooks: Add hooks for binder Linux 5.15.139 btrfs: use u64 for buffer sizes in the tree search ioctls Revert "mmc: core: Capture correct oemid-bits for eMMC cards" tracing/kprobes: Fix the order of argument descriptions fbdev: fsl-diu-fb: mark wr_reg_wa() static fbdev: imsttfb: fix a resource leak in probe fbdev: imsttfb: Fix error path of imsttfb_probe() spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies ASoC: hdmi-codec: register hpd callback on component probe drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate eval call-backs netfilter: xt_recent: fix (increase) ipv6 literal buffer length i2c: iproc: handle invalid slave state r8169: respect userspace disabling IFF_MULTICAST blk-core: use pr_warn_ratelimited() in bio_check_ro() block: remove unneeded return value of bio_check_ro() tg3: power down device only on SYSTEM_POWER_OFF net/smc: put sk reference if close work was canceled net/smc: allow cdc msg send rather than drop it with NULL sndbuf_desc net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT selftests: pmtu.sh: fix result checking net: stmmac: xgmac: Enable support for multiple Flexible PPS outputs Fix termination state for idr_for_each_entry_ul() net: r8169: Disable multicast filter for RTL8168H and RTL8107E dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses. dccp: Call security_inet_conn_request() after setting IPv4 addresses. octeontx2-pf: Fix holes in error code octeontx2-pf: Fix error codes inet: shrink struct flowi_common bpf: Check map->usercnt after timer->timer is assigned tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING hsr: Prevent use after free in prp_create_tagged_frame() llc: verify mac len before reading mac header Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume pwm: sti: Reduce number of allocations and drop usage of chip_data regmap: prevent noinc writes from clobbering cache media: dvb-usb-v2: af9035: fix missing unlock media: cedrus: Fix clock/reset sequence media: vidtv: mux: Add check and kfree for kstrdup media: vidtv: psi: Add check for kstrdup media: s3c-camif: Avoid inappropriate kfree() media: bttv: fix use after free error due to btv->timeout timer media: i2c: max9286: Fix some redundant of_node_put() calls pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() pcmcia: ds: fix refcount leak in pcmcia_device_add() pcmcia: cs: fix possible hung task and memory leak pccardd() rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call cxl/mem: Fix shutdown order i3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs 9p/net: fix possible memory leak in p9_check_errors() perf hist: Add missing puts to hist__account_cycles perf machine: Avoid out of bounds LBR memory read usb: host: xhci-plat: fix possible kernel oops while resuming xhci: Loosen RPM as default policy to cover for AMD xHC 1.1 powerpc/pseries: fix potential memory leak in init_cpu_associativity() powerpc/imc-pmu: Use the correct spinlock initializer. powerpc/xive: Fix endian conversion size powerpc/40x: Remove stale PTE_ATOMIC_UPDATES macro modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host powerpc: Only define __parse_fpscr() when required f2fs: fix to initialize map.m_pblk in f2fs_precache_extents() dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc() USB: usbip: fix stub_dev hub disconnect tools: iio: iio_generic_buffer ensure alignment misc: st_core: Do not call kfree_skb() under spin_lock_irqsave() dmaengine: ti: edma: handle irq_of_parse_and_map() errors usb: chipidea: Simplify Tegra DMA alignment code usb: chipidea: Fix DMA overwrite for Tegra usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency dmaengine: idxd: Register dsa_bus_type before registering idxd sub-drivers livepatch: Fix missing newline character in klp_resolve_symbols() tty: tty_jobctrl: fix pid memleak in disassociate_ctty() f2fs: compress: fix to avoid redundant compress extension f2fs: compress: fix to avoid use-after-free on dic leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu' leds: pwm: Don't disable the PWM when the LED should be off leds: turris-omnia: Do not use SMBUS calls leds: turris-omnia: Drop unnecessary mutex locking mfd: arizona-spi: Set pdata.hpdet_channel for ACPI enumerated devs mfd: dln2: Fix double put in dln2_probe mfd: core: Ensure disabled devices are skipped without aborting mfd: core: Un-constify mfd_cell.of_reg ASoC: ams-delta.c: use component after check crypto: qat - fix deadlock in backlog processing padata: Fix refcnt handling in padata_free_shell() ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails HID: logitech-hidpp: Move get_wireless_feature_index() check to hidpp_connect_event() HID: logitech-hidpp: Revert "Don't restart communication if not necessary" HID: logitech-hidpp: Don't restart IO, instead defer hid_connect() only HID: logitech-hidpp: Remove HIDPP_QUIRK_NO_HIDINPUT quirk Revert "HID: logitech-hidpp: add a module parameter to keep firmware gestures" sh: bios: Revive earlyprintk support hid: cp2112: Fix IRQ shutdown stopping polling for all IRQs on chip RDMA/hfi1: Workaround truncation compilation error scsi: ufs: core: Leave space for '\0' in utf8 desc string ASoC: fsl: Fix PM disable depth imbalance in fsl_easrc_probe RDMA/hns: The UD mode can only be configured with DCQCN RDMA/hns: Fix signed-unsigned mixed comparisons RDMA/hns: Fix uninitialized ucmd in hns_roce_create_qp_common() IB/mlx5: Fix rdma counter binding for RAW QP ASoC: fsl: mpc5200_dma.c: Fix warning of Function parameter or member not described ext4: move 'ix' sanity check to corrent position ARM: 9321/1: memset: cast the constant byte to unsigned char hid: cp2112: Fix duplicate workqueue initialization crypto: qat - increase size of buffers crypto: caam/jr - fix Chacha20 + Poly1305 self test failure crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure nd_btt: Make BTT lanes preemptible libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value scsi: ibmvfc: Fix erroneous use of rtas_busy_delay with hcall return code RDMA/core: Use size_{add,sub,mul}() in calls to struct_size() hwrng: geode - fix accessing registers crypto: hisilicon/hpre - Fix a erroneous check after snprintf() selftests/resctrl: Ensure the benchmark commands fits to its array selftests/pidfd: Fix ksft print formats arm64: dts: imx8mn: Add sound-dai-cells to micfil node arm64: dts: imx8mm: Add sound-dai-cells to micfil node arm64: dts: imx8qm-ss-img: Fix jpegenc compatible entry clk: scmi: Free scmi_clk allocated when the clocks with invalid info are skipped firmware: arm_ffa: Assign the missing IDR allocation ID to the FFA device firmware: ti_sci: Mark driver as non removable soc: qcom: llcc: Handle a second device without data corruption ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator arm64: dts: qcom: apq8016-sbc: Add missing ADV7533 regulators ARM64: dts: marvell: cn9310: Use appropriate label for spi1 pins arm64: dts: qcom: sdm845-mtp: fix WiFi configuration arm64: dts: qcom: sc7280: Add missing LMH interrupts arm64: dts: qcom: msm8992-libra: drop duplicated reserved memory arm64: dts: qcom: msm8916: Fix iommu local address range ARM: dts: renesas: blanche: Fix typo in GP_11_2 pin name perf: hisi: Fix use-after-free when register pmu fails drm: mediatek: mtk_dsi: Fix NO_EOT_PACKET settings/handling drm/msm/dsi: use msm_gem_kernel_put to free TX buffer xen-pciback: Consider INTx disabled when MSI/MSI-X is enabled drm/rockchip: Fix type promotion bug in rockchip_gem_iommu_map() arm64/arm: xen: enlighten: Fix KPTI checks drm/bridge: lt9611uxc: fix the race in the error path drm/bridge: lt9611uxc: Register and attach our DSI device at probe drm/bridge: lt9611uxc: Switch to devm MIPI-DSI helpers drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe() drm/mediatek: Fix iommu fault during crtc enabling drm/mediatek: Fix iommu fault by swapping FBs after updating plane state drm/amdkfd: fix some race conditions in vram buffer alloc/free of svm code drm/bridge: tc358768: Fix bit updates drm/bridge: tc358768: Disable non-continuous clock mode drm/bridge: tc358768: Fix use of uninitialized variable drm/bridge: lt8912b: Add missing drm_bridge_attach call drm/bridge: lt8912b: Manually disable HPD only if it was enabled drm/bridge: lt8912b: Fix crash on bridge detach drm/bridge: lt8912b: Fix bridge_detach drm/bridge: lt8912b: Add hot plug detection drm/bridge: lt8912b: Register and attach our DSI device at probe drm/bridge: lt8912b: Switch to devm MIPI-DSI helpers drm/mipi-dsi: Create devm device attachment drm/mipi-dsi: Create devm device registration drm/radeon: possible buffer overflow drm/rockchip: vop: Fix call to crtc reset helper drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs hwmon: (coretemp) Fix potentially truncated sysfs attribute name hwmon: (axi-fan-control) Fix possible NULL pointer dereference platform/x86: wmi: Fix opening of char device platform/x86: wmi: remove unnecessary initializations platform/x86: wmi: Fix probe failure when failing to register WMI devices clk: qcom: config IPQ_APSS_6018 should depend on QCOM_SMEM clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data clk: npcm7xx: Fix incorrect kfree clk: ti: fix double free in of_ti_divider_clk_setup() clk: ti: change ti_clk_register[_omap_hw]() API clk: ti: Update component clocks to use ti_dt_clk_name() clk: ti: Update pll and clockdomain clocks to use ti_dt_clk_name() clk: ti: Add ti_dt_clk_name() helper to use clock-output-names clk: keystone: pll: fix a couple NULL vs IS_ERR() checks spi: nxp-fspi: use the correct ioremap function clk: renesas: rzg2l: Fix computation formula clk: renesas: rzg2l: Use FIELD_GET() for PLL register fields clk: renesas: rzg2l: Simplify multiplication/shift logic clk: imx: imx8qxp: Fix elcdif_pll clock clk: imx: imx8mq: correct error handling path clk: imx: Select MXC_CLK for CLK_IMX8QXP clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src clk: qcom: mmcc-msm8998: Fix the SMMU GDSC clk: qcom: mmcc-msm8998: Don't check halt bit on some branch clks clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies spi: tegra: Fix missing IRQ check in tegra_slink_probe() regmap: debugfs: Fix a erroneous check after snprintf() ipvlan: properly track tx_errors net: add DEV_STATS_READ() helper ipv6: avoid atomic fragment on GSO packets ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias() wifi: iwlwifi: empty overflow queue during flush wifi: iwlwifi: pcie: synchronize IRQs before NAPI wifi: iwlwifi: call napi_synchronize() before freeing rx/tx queues iwlwifi: pcie: adjust to Bz completion descriptor tcp: fix cookie_init_timestamp() overflows chtls: fix tp->rcv_tstamp initialization r8169: fix rare issue with broken rx after link-down on RTL8125 r8169: use tp_to_dev instead of open code thermal: core: prevent potential string overflow netfilter: nf_tables: Drop pointless memset when dumping rules PM / devfreq: rockchip-dfi: Make pmu regmap mandatory can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() can: dev: can_restart(): don't crash kernel if carrier is OK wifi: rtlwifi: fix EDCA limit set by BT coexistence tcp_metrics: do not create an entry from tcp_init_metrics() tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics() tcp_metrics: add missing barriers on delete wifi: mt76: mt7603: improve stuck beacon handling mt76: pass original queue id from __mt76_tx_queue_skb to the driver mt76: add support for overriding the device used for DMA mapping mt76: dma: use kzalloc instead of devm_kzalloc for txwi wifi: mt76: mt7603: rework/fix rx pse hang check wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file() net: spider_net: Use size_add() in call to struct_size() tipc: Use size_add() in calls to struct_size() mlxsw: Use size_mul() in call to struct_size() gve: Use size_add() in call to struct_size() tcp: call tcp_try_undo_recovery when an RTOd TFO SYNACK is ACKed udp: add missing WRITE_ONCE() around up->encap_rcv selftests/bpf: Correct map_fd to data_fd in tailcalls selftests/bpf: Test tail call counting with bpf2bpf and data on stack i40e: fix potential memory leaks in i40e_remove() genirq/matrix: Exclude managed interrupts in irq_matrix_allocated() pstore/platform: Add check for kstrdup x86/boot: Fix incorrect startup_gdt_descr.size x86/sev-es: Allow copy_from_kernel_nofault() in earlier boot x86: Share definition of __is_canonical_address() futex: Don't include process MM in futex key on no-MMU x86/srso: Fix SBPB enablement for (possible) future fixed HW writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs vfs: fix readahead(2) on block devices sched: Fix stop_one_cpu_nowait() vs hotplug sched/uclamp: Ignore (util == 0) optimization in feec() when p_util_max = 0 iov_iter, x86: Be consistent about the __user tag on copy_mc_to_user() BACKPORT: dma-buf: add dma_fence_unwrap v2 UPSTREAM: dma-buf: Add dma_fence_array_for_each (v2) UPSTREAM: dma-buf: add dma_fence_chain_contained helper BACKPORT: blk-ioprio: Introduce promote-to-rt policy BACKPORT: block: Always initialize bio IO priority on submit BACKPORT: block: Initialize bio priority earlier BACKPORT: blk-ioprio: Convert from rqos policy to direct call ANDROID: KVM: arm64: Fix error path in pkvm_mem_abort() Linux 5.15.138 ALSA: hda: intel-dsp-config: Fix JSL Chromebook quirk detection misc: pci_endpoint_test: Add deviceID for J721S2 PCIe EP device support tty: 8250: Add Brainboxes Oxford Semiconductor-based quirks tty: 8250: Add support for Intashield IX cards tty: 8250: Add support for additional Brainboxes PX cards tty: 8250: Fix up PX-803/PX-857 tty: 8250: Fix port count of PX-257 tty: 8250: Add support for Intashield IS-100 tty: 8250: Add support for Brainboxes UP cards tty: 8250: Add support for additional Brainboxes UC cards tty: 8250: Remove UC-257 and UC-431 tty: n_gsm: fix race condition in status line change on dead connections usb: raw-gadget: properly handle interrupted requests usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() usb: storage: set 1.50 as the lower bcdDevice for older "Super Top" compatibility PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device drm/amd: Disable ASPM for VI w/ all Intel systems drm/amd: Move helper for dynamic speed switch check out of smu13 can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior can: isotp: isotp_bind(): do not validate unused address information can: isotp: add local echo tx processing and tx without FC can: isotp: handle wait_event_interruptible() return values can: isotp: check CAN address family in isotp_bind() can: isotp: isotp_bind(): return -EINVAL on incorrect CAN ID formatting can: isotp: set max PDU size to 64 kByte powerpc/mm: Fix boot crash with FLATMEM r8152: Check for unplug in r8153b_ups_en() / r8153c_ups_en() r8152: Check for unplug in rtl_phy_patch_request() net: chelsio: cxgb4: add an error code check in t4_load_phy_fw platform/mellanox: mlxbf-tmfifo: Fix a warning message scsi: mpt3sas: Fix in error path fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit() drm/ttm: Reorder sys manager cleanup step ASoC: rt5650: fix the wrong result of key button netfilter: nfnetlink_log: silence bogus compiler warning spi: npcm-fiu: Fix UMA reads when dummy.nbytes == 0 fs/ntfs3: Avoid possible memory leak fs/ntfs3: Fix directory element type detection fs/ntfs3: Fix NULL pointer dereference on error in attr_allocate_frame() fs/ntfs3: Fix possible NULL-ptr-deref in ni_readpage_cmpr() fs/ntfs3: Use kvmalloc instead of kmalloc(... __GFP_NOWARN) fs/ntfs3: Write immediately updated ntfs state fs/ntfs3: Add ckeck in ni_update_parent() fbdev: atyfb: only use ioremap_uc() on i386 and ia64 Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport powerpc/85xx: Fix math emulation exception dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe irqchip/stm32-exti: add missing DT IRQ flag translation irqchip/riscv-intc: Mark all INTC nodes as initialized net: sched: cls_u32: Fix allocation size in u32_init() ASoC: simple-card: fixup asoc_simple_probe() error handling x86: Fix .brk attribute in linker script rpmsg: Fix possible refcount leak in rpmsg_register_device_override() rpmsg: glink: Release driver_override rpmsg: Fix calling device_lock() on non-initialized device rpmsg: Fix kfree() of static memory on setting driver_override rpmsg: Constify local variable in field store macro driver: platform: Add helper for safer setting of driver_override objtool/x86: add missing embedded_insn check ext4: avoid overlapping preallocations due to overflow ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow ext4: add two helper functions extent_logical_end() and pa_logical_end() x86/mm: Fix RESERVE_BRK() for older binutils x86/mm: Simplify RESERVE_BRK() x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility gve: Fix GFP flags when allocing pages iio: afe: rescale: Accept only offset channels iio: afe: rescale: add offset support iio: afe: rescale: expose scale processing function iio: afe: rescale: reorder includes clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name sparc32: fix a braino in fault handling in csum_and_copy_..._user() perf/core: Fix potential NULL deref nvmem: imx: correct nregs for i.MX6UL nvmem: imx: correct nregs for i.MX6SLL nvmem: imx: correct nregs for i.MX6ULL misc: fastrpc: Clean buffers on remote invocation failures tracing/kprobes: Fix the description of variable length arguments i2c: aspeed: Fix i2c bus hang in slave read i2c: stm32f7: Fix PEC handling in case of SMBUS transfers i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() iio: adc: xilinx-xadc: Correct temperature offset/scale for UltraScale iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature thresholds iio: exynos-adc: request second interupt only when touchscreen mode is used kasan: print the original fault addr when access invalid shadow i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR gtp: fix fragmentation needed check with gso gtp: uapi: fix GTPA_MAX tcp: fix wrong RTO timeout when received SACK reneging r8152: Release firmware if we have an error in probe r8152: Cancel hw_phy_work if we have an error in probe r8152: Run the unload routine if we have errors during probe r8152: Increase USB control msg timeout to 5000ms as per spec net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show() igc: Fix ambiguity in the ethtool advertising neighbour: fix various data-races igb: Fix potential memory leak in igb_add_ethtool_nfc_entry treewide: Spelling fix in comment i40e: Fix I40E_FLAG_VF_VLAN_PRUNING value r8169: fix the KCSAN reported data race in rtl_rx while reading desc->opts1 r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1 r8169: fix the KCSAN reported data-race in rtl_tx() while reading tp->cur_tx firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels() drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() vsock/virtio: initialize the_virtio_vsock before using VQs vsock/virtio: add support for device suspend/resume vsock/virtio: factor our the code to initialize and delete VQs drm/i915/pmu: Check if pmu is closed before stopping event nfsd: lock_rename() needs both directories to live on the same fs mm/migrate: fix do_pages_move for compat pointers mm/page_alloc: correct start page when guard page debug is enabled vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE virtio-mmio: fix memory leak of vm_dev virtio_balloon: Fix endless deflation and inflation on arm64 mcb-lpc: Reallocate memory region to avoid memory overlapping mcb: Return actual parsed size when reading chameleon table mptcp: more conservative check for zero probes tcp: cleanup tcp_remove_empty_skb() use tcp: remove dead code from tcp_sendmsg_locked() pinctrl: qcom: lpass-lpi: fix concurrent register updates ASoC: codecs: wcd938x: fix runtime PM imbalance on remove ASoC: codecs: wcd938x: fix resource leaks on bind errors Revert "ipv4/fib: send notify when delete source address routes" Revert "perf: Disallow mis-matched inherited group reads" Revert "xfrm: fix a data-race in xfrm_gen_index()" Revert "Bluetooth: hci_core: Fix build warnings" Revert "xfrm: interface: use DEV_STATS_INC()" ANDROID: GKI: arm64: drop CONFIG_DEBUG_PREEMPT forced disable Revert "net: add sysctl accept_ra_min_rtr_lft" Revert "net: change accept_ra_min_rtr_lft to affect all RA lifetimes" Revert "net: release reference to inet6_dev pointer" Revert "scsi: core: Use a structure member to track the SCSI command submitter" Revert "scsi: core: Rename scsi_mq_done() into scsi_done() and export it" Revert "scsi: ib_srp: Call scsi_done() directly" Revert "RDMA/srp: Do not call scsi_done() from srp_abort()" Revert "net: macsec: indicate next pn update when offloading" Revert "net: phy: mscc: macsec: reject PN update requests" Revert "spi: zynqmp-gqspi: Convert to platform remove callback returning void" Revert "netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp" Linux 5.15.137 xfrm6: fix inet6_dev refcount underflow problem Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name Bluetooth: hci_sock: fix slab oob read in create_monitor_event phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins phy: mapphone-mdm6600: Fix runtime PM for remove phy: mapphone-mdm6600: Fix runtime disable on probe serial: 8250: omap: Move uart_write() inside PM section ASoC: pxa: fix a memory leak in probe() gpio: vf610: set value before the direction to avoid a glitch platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e platform/surface: platform_profile: Propagate error if profile registration fails s390/cio: fix a memleak in css_alloc_subchannel selftests/ftrace: Add new test case which checks non unique symbol s390/pci: fix iommu bitmap allocation perf: Disallow mis-matched inherited group reads USB: serial: option: add Fibocom to DELL custom modem FM101R-GL USB: serial: option: add entry for Sierra EM9191 with new firmware USB: serial: option: add Telit LE910C4-WWX 0x1035 composition nvme-rdma: do not try to stop unallocated queues nvme-pci: add BOGUS_NID for Intel 0a54 device ACPI: irq: Fix incorrect return value in acpi_register_gsi() NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server pNFS: Fix a hang in nfs4_evict_inode() Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()" mmc: core: Capture correct oemid-bits for eMMC cards mmc: core: sdio: hold retuning if sdio in 1-bit mode mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw mtd: physmap-core: Restore map_rom fallback mtd: spinand: micron: correct bitmask for ecc status mtd: rawnand: arasan: Ensure program page operations are successful mtd: rawnand: marvell: Ensure program page operations are successful mtd: rawnand: pl353: Ensure program page operations are successful mtd: rawnand: qcom: Unmap the right resource upon probe failure net: fix ifname in netlink ntf during netns move net: move from strlcpy with unused retval to strscpy net: introduce a function to check if a netdev name is in use Bluetooth: hci_event: Fix using memcmp when comparing keys net/mlx5: Handle fw tracer change ownership event based on MTRC platform/x86: touchscreen_dmi: Add info for the Positivo C4128B HID: multitouch: Add required quirk for Synaptics 0xcd7e device btrfs: error out when reallocating block for defrag using a stale transaction btrfs: error when COWing block from a root that is being deleted btrfs: error out when COWing block using a stale transaction btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c drm: panel-orientation-quirks: Add quirk for One Mix 2S ipv4/fib: send notify when delete source address routes sky2: Make sure there is at least one frag_addr available regulator/core: Revert "fix kobject release warning and memory leak in regulator_register()" wifi: cfg80211: avoid leaking stack data into trace wifi: mac80211: allow transmitting EAPOL frames with tainted key wifi: cfg80211: Fix 6GHz scan configuration Bluetooth: hci_core: Fix build warnings Bluetooth: Avoid redundant authentication Bluetooth: btusb: add shutdown function for QCA6174 HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event wifi: iwlwifi: Ensure ack flag is properly cleared. wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len tracing: relax trace_event_eval_update() execution with cond_resched() ata: libata-eh: Fix compilation warning in ata_eh_link_report() ata: libata-core: Fix compilation warning in ata_dev_config_ncq() gpio: timberdale: Fix potential deadlock on &tgpio->lock overlayfs: set ctime when setting mtime and atime i2c: mux: Avoid potential false error message in i2c_mux_add_adapter btrfs: initialize start_slot in btrfs_log_prealloc_extents btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1 fs-writeback: do not requeue a clean inode having skipped pages ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone ksmbd: not allow to open file if delelete on close bit is set nfp: flower: avoid rmmod nfp crash issues mctp: perform route lookups under a RCU read-side lock mctp: Allow local delivery to the null EID powerpc/47x: Fix 47x syscall return crash powerpc/32s: Do kuep_lock() and kuep_unlock() in assembly powerpc/32s: Remove capability to disable KUEP at boottime drm/atomic-helper: relax unregistered connector check perf/x86/lbr: Filter vsyscall addresses perf/x86: Move branch classifier perf: Add irq and exception return branch types iio: adc: ad7192: Correct reference voltage iio: cros_ec: fix an use-after-free in cros_ec_sensors_push_data() iio: core: introduce iio_device_{claim|release}_buffer_mode() APIs iio: core: Hide read accesses to iio_dev->currentmode iio: Un-inline iio_buffer_enabled() serial: 8250_omap: Fix errors with no_console_suspend serial: 8250: omap: Fix imprecise external abort for omap_8250_pm() selftests/mm: fix awk usage in charge_reserved_hugetlb.sh and hugetlb_reparenting_test.sh that may cause error net: pktgen: Fix interface flags printing netfilter: nf_tables: revert do not remove elements if set backend implements .abort netfilter: nf_tables: do not remove elements if set backend implements .abort netfilter: nft_set_rbtree: .deactivate fails if element has expired neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve bonding: Return pointer to data after pull on skb net: dsa: bcm_sf2: Fix possible memory leak in bcm_sf2_mdio_register() i40e: prevent crash on probe if hw registers have invalid values net: usb: smsc95xx: Fix an error code in smsc95xx_reset() ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr tun: prevent negative ifindex tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb tcp: fix excessive TLP and RACK timeouts from HZ rounding net: rfkill: gpio: prevent value glitch during probe net: ipv6: fix return value check in esp_remove_trailer net: ipv4: fix return value check in esp_remove_trailer xfrm: interface: use DEV_STATS_INC() xfrm: fix a data-race in xfrm_gen_index() qed: fix LL2 RX buffer allocation ASoC: codecs: wcd938x: fix unbind tear down order ASoC: codecs: wcd938x: drop bogus bind error handling ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind drm/i915: Retry gtt fault when out of fence registers nvmet-tcp: Fix a possible UAF in queue intialization setup netfilter: nft_payload: fix wrong mac header matching fs/ntfs3: fix deadlock in mark_as_free_ex fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea() fs/ntfs3: Fix possible null-pointer dereference in hdr_find_e() tcp: check mptcp-level constraints for backlog coalescing x86/sev: Check for user-space IOIO pointing to kernel space x86/sev: Check IOBM for IOIO exceptions from user-space x86/sev: Disable MMIO emulation from user mode KVM: x86: Mask LVTPC when handling a PMI regmap: fix NULL deref on lookup nfc: nci: fix possible NULL pointer dereference in send_acknowledge() ice: reset first in crash dump kernels ice: fix over-shifted variable Bluetooth: avoid memcmp() out of bounds warning Bluetooth: hci_event: Fix coding style Bluetooth: vhci: Fix race when opening vhci device Bluetooth: Fix a refcnt underflow problem for hci_conn Bluetooth: Reject connection with the device which has same BD_ADDR Bluetooth: hci_event: Ignore NULL link key xfs: don't expose internal symlink metadata buffers to the vfs Documentation: sysctl: align cells in second content column lib/Kconfig.debug: do not enable DEBUG_PREEMPT by default Revert "net: bridge: use DEV_STATS_INC()" Revert "usb: ehci: add workaround for chipidea PORTSC.PEC bug" Linux 5.15.136 eth: remove remaining copies of the NAPI_POLL_WEIGHT define usb: hub: Guard against accesses to uninitialized BOS descriptors Revert "kernel/sched: Modify initial boot task idle setup" arm64: armv8_deprecated: fix unused-function error arm64: armv8_deprecated: rework deprected instruction handling arm64: armv8_deprecated: move aarch32 helper earlier arm64: armv8_deprecated move emulation functions arm64: armv8_deprecated: fold ops into insn_emulation arm64: rework EL0 MRS emulation arm64: factor insn read out of call_undef_hook() arm64: factor out EL1 SSBS emulation hook arm64: split EL0/EL1 UNDEF handlers arm64: allow kprobes on EL0 handlers arm64: rework BTI exception handling arm64: rework FPAC exception handling arm64: consistently pass ESR_ELx to die() arm64: die(): pass 'err' as long arm64: report EL1 UNDEFs better powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE dmaengine: mediatek: Fix deadlock caused by synchronize_irq() dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq x86/alternatives: Disable KASAN in apply_alternatives() usb: cdnsp: Fixes issue with dequeuing not queued requests usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call usb: gadget: udc-xilinx: replace memcpy with memcpy_toio counter: microchip-tcb-capture: Fix the use of internal GCLK logic pinctrl: avoid unsafe code pattern in find_pinctrl() cgroup: Remove duplicates in cgroup v1 tasks file tee: amdtee: fix use-after-free vulnerability in amdtee_close_session Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table Input: xpad - add PXN V900 support Input: psmouse - fix fast_reconnect function for PS/2 mode Input: powermate - fix use-after-free in powermate_config_complete ceph: fix type promotion bug on 32bit systems ceph: fix incorrect revoked caps assert in ceph_fill_file_size() libceph: use kernel_connect() thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge mcb: remove is_added flag from mcb_device struct x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA drm/amd/display: Don't set dpms_off for seamless boot drm/amdgpu: add missing NULL check iio: pressure: ms5611: ms5611_prom_is_valid false negative bug iio: pressure: dps310: Adjust Timeout Settings iio: pressure: bmp280: Fix NULL pointer exception usb: musb: Modify the "HWVers" register address usb: musb: Get the musb_qh poniter after musb_giveback usb: cdns3: Modify the return value of cdns_set_active () to void when CONFIG_PM_SLEEP is disabled usb: dwc3: Soft reset phy on probe for host net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer xhci: Keep interrupt disabled in initialization until host is running. dmaengine: stm32-mdma: abort resume if no ongoing transfer media: mtk-jpeg: Fix use after free bug due to uncanceled work net: release reference to inet6_dev pointer net: change accept_ra_min_rtr_lft to affect all RA lifetimes net: add sysctl accept_ra_min_rtr_lft workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() nfc: nci: assert requested protocol is valid pinctrl: renesas: rzn1: Enable missing PINMUX net/smc: Fix pos miscalculation in statistics net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp ixgbe: fix crash with empty VF macvlan list net: phy: mscc: macsec: reject PN update requests net: macsec: indicate next pn update when offloading bpf: Fix verifier log for async callback return values drm/vmwgfx: fix typo of sizeof argument riscv, bpf: Sign-extend return values riscv, bpf: Factor out emit_call for kernel and bpf context xen-netback: use default TX queue size for vifs eth: remove copies of the NAPI_POLL_WEIGHT define mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type ieee802154: ca8210: Fix a potential UAF in ca8210_probe ravb: Fix use-after-free issue in ravb_tx_timeout_work() ravb: Fix up dma_free_coherent() call in ravb_remove() drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow drm/msm/dsi: fix irq_of_parse_and_map() error checking drm/msm/dsi: skip the wait for video mode done if not applicable drm/msm/dp: do not reinitialize phy unless retry during link training KEYS: trusted: Remove redundant static calls usage KEYS: trusted: allow use of kernel RNG for key material ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset net: prevent address rewrite in kernel_bind() quota: Fix slow quotaoff HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect lib/test_meminit: fix off-by-one error in test_pages() platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section mismatch warning platform/x86: think-lmi: Fix reference leak of: overlay: Reorder struct fragment fields kerneldoc perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7 RDMA/cxgb4: Check skb value for failure to allocate RDMA/srp: Do not call scsi_done() from srp_abort() scsi: ib_srp: Call scsi_done() directly scsi: core: Rename scsi_mq_done() into scsi_done() and export it scsi: core: Use a structure member to track the SCSI command submitter iommu/vt-d: Avoid memory allocation in iommu_suspend() Revert "pwm: atmel-tcb: Convert to platform remove callback returning void" FROMLIST: lib/test_meminit: fix off-by-one error in test_pages() Linux 5.15.135 xen/events: replace evtchn_rwlock with RCU parisc: Restore __ldcw_align for PA-RISC 2.0 processors ksmbd: fix uaf in smb20_oplock_break_ack RDMA/mlx5: Fix NULL string error RDMA/siw: Fix connection failure handling RDMA/uverbs: Fix typo of sizeof argument RDMA/cma: Fix truncation compilation warning in make_cma_ports RDMA/cma: Initialize ib_sa_multicast structure to 0 when join gpio: pxa: disable pinctrl calls for MMP_GPIO gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() IB/mlx4: Fix the size of a buffer in add_port_entries() of: dynamic: Fix potential memory leak in of_changeset_action() RDMA/core: Require admin capabilities to set system parameters dm zoned: free dmz->ddev array in dmz_put_zoned_devices HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit HID: sony: remove duplicate NULL check before calling usb_free_urb() sctp: update hb timer immediately after users change hb_interval sctp: update transport state when processing a dupcook packet tcp: fix delayed ACKs for MSS boundary condition tcp: fix quick-ack counting to count actual ACKs of new data tipc: fix a potential deadlock on &tx->lock net: stmmac: dwmac-stm32: fix resume on STM32 MCU ipv4: Set offload_failed flag in fibmatch results netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp ibmveth: Remove condition to recompute TCP header checksum. net: ethernet: ti: am65-cpsw: Fix error code in am65_cpsw_nuss_init_tx_chns() net: nfc: llcp: Add lock when modifying device list net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent ptp: ocp: Fix error handling in ptp_ocp_device_init ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() net: fix possible store tearing in neigh_periodic_work() modpost: add missing else to the "of" check bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets NFSv4: Fix a nfs4_state_manager() race ima: rework CONFIG_IMA dependency block scsi: target: core: Fix deadlock due to recursive locking ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig regmap: rbtree: Fix wrong register marked as in-cache when creating new node wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close() bpf: Fix tr dereferencing wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet wifi: iwlwifi: mvm: Fix a memory corruption issue iwlwifi: avoid void pointer arithmetic wifi: iwlwifi: dbg_ini: fix structure packing ubi: Refuse attaching if mtd's erasesize is 0 HID: sony: Fix a potential memory leak in sony_probe() arm64: Add Cortex-A520 CPU part definition drm/amd: Fix detection of _PR3 on the PCIe root port net: prevent rewrite of msg_name in sock_sendmsg() net: replace calls to sock->ops->connect() with kernel_connect() wifi: mwifiex: Fix tlv_buf_left calculation qed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info vringh: don't use vringh_kiov_advance() in vringh_iov_xfer() scsi: zfcp: Fix a double put in zfcp_port_enqueue() Revert "clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz" block: fix use-after-free of q->q_usage_counter rbd: take header_rwsem in rbd_dev_refresh() only when updating rbd: decouple parent info read-in from updating rbd_dev rbd: decouple header read-in from updating rbd_dev->header rbd: move rbd_dev_refresh() definition iommu/arm-smmu-v3: Avoid constructing invalid range commands iommu/arm-smmu-v3: Set TTL invalidation hint better arm64: Avoid repeated AA64MMFR1_EL1 register read on pagefault path ring-buffer: Fix bytes info in per_cpu buffer stats ring-buffer: remove obsolete comment for free_buffer_page() NFSv4: Fix a state manager thread deadlock regression NFS: rename nfs_client_kset to nfs_kset NFS: Cleanup unused rpc_clnt variable ASoC: tegra: Fix redundant PLLA and PLLA_OUT0 updates ASoC: soc-utils: Export snd_soc_dai_is_dummy() symbol spi: zynqmp-gqspi: fix clock imbalance on probe failure spi: zynqmp-gqspi: Convert to platform remove callback returning void Revert "usb: typec: bus: verify partner exists in typec_altmode_attention" Revert "scsi: core: Use 32-bit hostnum in scsi_host_lookup()" Linux 5.15.134 netfilter: nf_tables: fix kdoc warnings after gc rework drm/meson: fix memory leak on ->hpd_notify callback fs: binfmt_elf_efpic: fix personality for ELF-FDPIC ata: libata-sata: increase PMP SRST timeout to 10s ata: libata-core: Do not register PM operations for SAS ports ata: libata-core: Fix port and device removal ata: libata-core: Fix ata_port_request_pm() locking net: thunderbolt: Fix TCPv6 GSO checksum calculation bpf: Fix BTF_ID symbol generation collision in tools/ bpf: Fix BTF_ID symbol generation collision btrfs: properly report 0 avail for very full file systems ring-buffer: Update "shortest_full" in polling proc: nommu: /proc/<pid>/maps: release mmap read lock Revert "SUNRPC dont update timeout value on connection reset" io_uring/fs: remove sqe->rw_flags checking from LINKAT sched/rt: Fix live lock between select_fallback_rq() and RT push kernel/sched: Modify initial boot task idle setup i2c: i801: unregister tco_pdev in i801_probe() error path ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q netfilter: nf_tables: disallow rule removal from chain binding nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() serial: 8250_port: Check IRQ data before use Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux" misc: rtsx: Fix some platforms can not boot and move the l1ss judgment to probe x86/srso: Add SRSO mitigation for Hygon processors iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range Smack:- Use overlay inode label in smack_inode_copy_up() smack: Retrieve transmuting information in smack_inode_getsecurity() smack: Record transmuting in smk_transmuted nvme-pci: always return an ERR_PTR from nvme_pci_alloc_dev scsi: qla2xxx: Fix NULL pointer dereference in target mode i40e: fix potential NULL pointer dereferencing of pf->vf i40e_sync_vsi_filters() watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running watchdog: iTCO_wdt: No need to stop the timer in probe nvme-pci: do not set the NUMA node of device if it has none nvme-pci: factor out a nvme_pci_alloc_dev helper nvme-pci: factor the iod mempool creation into a helper cgroup: Fix suspicious rcu_dereference_check() usage warning sched/cpuacct: Optimize away RCU read lock perf build: Define YYNOMEM as YYNOABORT for bison < 3.81 fbdev/sh7760fb: Depend on FB=y ncsi: Propagate carrier gain/loss events to the NCSI controller powerpc/watchpoints: Annotate atomic context in more places powerpc/watchpoint: Disable pagefaults when getting user instruction powerpc/watchpoints: Disable preemption in thread_change_pc() media: vb2: frame_vector.c: replace WARN_ONCE with a comment ASoC: imx-rpmsg: Set ignore_pmdown_time for dai_link bpf: Clarify error expectations from bpf_clone_redirect ASoC: fsl: imx-pcm-rpmsg: Add SNDRV_PCM_INFO_BATCH flag spi: stm32: add a delay before SPI disable spi: nxp-fspi: reset the FLSHxCR1 registers ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset() smb3: correct places where ENOTSUPP is used instead of preferred EOPNOTSUPP scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command scsi: pm80xx: Use phy-specific SAS address when sending PHY_START command drm/amdgpu: Handle null atom context in VBIOS info ioctl drm/amd/display: Don't check registers, if using AUX BL control platform/mellanox: mlxbf-bootctl: add NET dependency into Kconfig ring-buffer: Do not attempt to read past "commit" selftests: fix dependency checker script btrfs: improve error message after failure to add delayed dir index item ring-buffer: Avoid softlockup in ring_buffer_resize() selftests/ftrace: Correctly enable event in instance-event.tc scsi: ufs: core: Move __ufshcd_send_uic_cmd() outside host_lock scsi: qedf: Add synchronization between I/O completions and abort parisc: irq: Make irq_stack_union static to avoid sparse warning parisc: drivers: Fix sparse warning parisc: iosapic.c: Fix sparse warnings parisc: sba: Fix compile warning wrt list of SBA devices spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain spi: sun6i: reduce DMA RX transfer width to single byte dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock i2c: npcm7xx: Fix callback completion ordering gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip soc: imx8m: Enable OCOTP clock for imx8mm before reading registers xtensa: boot/lib: fix function prototypes xtensa: boot: don't add include-dirs xtensa: iss/network: make functions static xtensa: add default definition for XCHAL_HAVE_DIV32 firmware: imx-dsp: Fix an error handling path in imx_dsp_setup_channels() power: supply: ucs1002: fix error code in ucs1002_get_property() bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up ARM: dts: ti: omap: motorola-mapphone: Fix abe_clkctrl warning on boot ARM: dts: ti: omap: Fix bandgap thermal cells addressing for omap3/4 ARM: dts: omap: correct indentation treewide: Replace GPLv2 boilerplate/reference with SPDX - gpl-2.0_56.RULE (part 1) clk: tegra: fix error return case for recalc_rate bus: ti-sysc: Fix missing AM35xx SoC matching bus: ti-sysc: Use fsleep() instead of usleep_range() in sysc_reset() drm/bridge: ti-sn65dsi83: Do not generate HFP/HBP/HSA and EOT packet MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled btrfs: reset destination buffer when read_extent_buffer() gets invalid range scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called ata: ahci: Add Elkhart Lake AHCI controller ata: ahci: Rename board_ahci_mobile ata: ahci: Add support for AMD A85 FCH (Hudson D4) ata: libata: Rename link flag ATA_LFLAG_NO_DB_DELAY netfilter: nft_exthdr: Fix non-linear header modification netfilter: exthdr: add support for tcp option removal Input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN Input: i8042 - rename i8042-x86ia64io.h to i8042-acpipnpio.h xfs: fix xfs_inodegc_stop racing with mod_delayed_work xfs: disable reaping in fscounters scrub xfs: check that per-cpu inodegc workers actually run on that cpu xfs: explicitly specify cpu when forcing inodegc delayed work to run immediately xfs: introduce xfs_inodegc_push() xfs: bound maximum wait time for inodegc work i2c: mux: gpio: Add missing fwnode_handle_put() i2c: mux: gpio: Replace custom acpi_get_local_address() i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() Fix up backport of 136191703038 ("interconnect: Teach lockdep about icc_bw_lock order") igc: Expose tx-usecs coalesce setting to user bnxt_en: Flush XDP for bnxt_poll_nitroa0()'s NAPI net: ena: Flush XDP packets on error. locking/seqlock: Do the lockdep annotation before locking in do_write_seqcount_begin_nested() netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP netfilter: nf_tables: disable toggling dormant table state more than once net: rds: Fix possible NULL-pointer dereference team: fix null-ptr-deref when team device type is changed net: bridge: use DEV_STATS_INC() net: hns3: add 5ms delay before clear firmware reset irq source net: hns3: fix fail to delete tc flower rules during reset issue net: hns3: only enable unicast promisc when mac table full net: hns3: fix GRE checksum offload issue x86/srso: Fix SBPB enablement for spec_rstack_overflow=off x86/srso: Fix srso_show_state() side effect platform/x86: intel_scu_ipc: Fail IPC send if still busy platform/x86: intel_scu_ipc: Don't override scu in intel_scu_ipc_dev_simple_command() platform/x86: intel_scu_ipc: Check status upon timeout in ipc_wait_for_interrupt() platform/x86: intel_scu_ipc: Check status after timeout in busy_loop() dccp: fix dccp_v4_err()/dccp_v6_err() again powerpc/perf/hv-24x7: Update domain value check ipv4: fix null-deref in ipv4_link_failure igc: Fix infinite initialization loop with early XDP redirect ionic: fix 16bit math issue when PAGE_SIZE >= 64KB i40e: Fix VF VLAN offloading when port VLAN is configured i40e: Add VF VLAN pruning iavf: do not process adminq tasks when __IAVF_IN_REMOVE_TASK is set ASoC: imx-audmix: Fix return error with devm_clk_get() net/core: Fix ETH_P_1588 flow dissector selftests: tls: swap the TX and RX sockets in some tests bpf: Avoid deadlock when using queue and stack maps from NMI netfilter: nf_tables: disallow element removal on anonymous sets ASoC: meson: spdifin: start hw on dai probe netfilter: nf_tables: fix memleak when more than 255 elements expired netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction netfilter: nf_tables: defer gc run if previous batch is still pending netfilter: nf_tables: use correct lock to protect gc_list netfilter: nf_tables: GC transaction race with abort path netfilter: nf_tables: GC transaction race with netns dismantle netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path netfilter: nf_tables: don't fail inserts if duplicate has expired netfilter: nf_tables: remove busy mark and gc batch API netfilter: nft_set_hash: mark set element as dead when deleting from packet path netfilter: nf_tables: adapt set backend to use GC transaction API netfilter: nf_tables: GC transaction API to avoid race with control plane netfilter: nf_tables: don't skip expired elements during walk tracing: Have event inject files inc the trace array ref count ext4: do not let fstrim block system suspend ext4: move setting of trimmed bit into ext4_try_to_trim_range() ext4: replace the traditional ternary conditional operator with with max()/min() ext4: change s_last_trim_minblks type to unsigned long ext4: scope ret locally in ext4_try_to_trim_range() ata: libahci: clear pending interrupt status ata: ahci: Drop pointless VPRINTK() calls and convert the remaining ones tracing: Increase trace array ref count on enable and filter files tracing: Make trace_marker{,_raw} stream-like NFSv4.1: fix pnfs MDS=DS session trunking NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server SUNRPC: Mark the cred for revalidation if the server rejects it NFS/pNFS: Report EINVAL errors from connect() to the server NFS: More fixes for nfs_direct_write_reschedule_io() NFS: Use the correct commit info in nfs_join_page_group() Revert "fs/nls: make load_nls() take a const parameter" Revert "tracing: Introduce pipe_cpumask to avoid race on trace_pipes" Revert "tracing: Zero the pipe cpumask on alloc to avoid spurious -EBUSY" Revert "crypto: api - Use work queue in crypto_destroy_instance" Linux 5.15.133 interconnect: Teach lockdep about icc_bw_lock order drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma net/sched: Retire rsvp classifier drm/amdgpu: fix amdgpu_cs_p1_user_fence drm/amd/display: fix the white screen issue when >= 64GB DRAM ext4: fix rec_len verify error scsi: pm8001: Setup IRQs on resume scsi: megaraid_sas: Fix deadlock on firmware crashdump ata: libata: disallow dev-initiated LPM transitions to unsupported states i2c: aspeed: Reset the i2c controller when timeout occurs tracefs: Add missing lockdown check to tracefs_create_dir() nfsd: fix change_info in NFSv4 RENAME replies tracing: Have option files inc the trace array ref count tracing: Have current_trace inc the trace array ref count tracing: Have tracing_max_latency inc the trace array ref count btrfs: release path before inode lookup during the ino lookup ioctl btrfs: fix lockdep splat and potential deadlock after failure running delayed items ovl: fix incorrect fdput() on aio completion ovl: fix failed copyup of fileattr on a symlink attr: block mode changes of symlinks md/raid1: fix error: ISO C90 forbids mixed declarations samples/hw_breakpoint: fix building without module unloading x86/purgatory: Remove LTO flags x86/boot/compressed: Reserve more memory for page tables scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file() selftests: tracing: Fix to unmount tracefs for recovering environment scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() drm: gm12u320: Fix the timeout usage for usb_bulk_msg() btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super btrfs: add a helper to read the superblock metadata_uuid btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h perf test shell stat_bpf_counters: Fix test on Intel perf test: Remove bash construct from stat_bpf_counters.sh test MIPS: Use "grep -E" instead of "egrep" mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller mtd: rawnand: brcmnand: Allow SoC to provide I/O operations jbd2: correct the end of the journal recovery scan range jbd2: rename jbd_debug() to jbd2_debug() jbd2: kill t_handle_lock transaction spinlock jbd2: fix use-after-free of transaction_t race jbd2: refactor wait logic for transaction updates into a common function printk: Consolidate console deferred printing interconnect: Fix locking for runpm vs reclaim kobject: Add sanity check for kset->kobj.ktype in kset_register() media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning usb: ehci: add workaround for chipidea PORTSC.PEC bug serial: cpm_uart: Avoid suspicious locking scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() tools: iio: iio_generic_buffer: Fix some integer type and calculation usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc usb: cdns3: Put the cdns set active part outside the spin lock media: pci: cx23885: replace BUG with error return media: tuners: qt1010: replace BUG_ON with a regular error media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() media: anysee: fix null-ptr-deref in anysee_master_xfer media: af9005: Fix null-ptr-deref in af9005_i2c_xfer media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer PCI: fu740: Set the number of MSI vectors powerpc/pseries: fix possible memory leak in ibmebus_bus_init() ARM: 9317/1: kexec: Make smp stop calls asynchronous jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() ext2: fix datatype of block number in ext2_xattr_set2() md: raid1: fix potential OOB in raid1_remove_disk() bus: ti-sysc: Configure uart quirks for k3 SoC drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN31 ALSA: hda: intel-dsp-cfg: add LunarLake support samples/hw_breakpoint: Fix kernel BUG 'invalid opcode: 0000' arm64: dts: qcom: sm8250-edo: correct ramoops pmsg-size arm64: dts: qcom: sm8150-kumano: correct ramoops pmsg-size arm64: dts: qcom: sm6125-pdx201: correct ramoops pmsg-size drm/bridge: tc358762: Instruct DSI host to generate HSE packets wifi: mac80211_hwsim: drop short frames netfilter: ebtables: fix fortify warnings in size_entry_mwt() wifi: mac80211: check S1G action frame size alx: fix OOB-read compiler warning mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450 tpm_tis: Resend command to recover from data transfer errors crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() wifi: wil6210: fix fortify warnings wifi: mwifiex: fix fortify warning wifi: ath9k: fix printk specifier wifi: ath9k: fix fortify warnings crypto: lrw,xts - Replace strlcpy with strscpy devlink: remove reload failed checks in params get/set callbacks ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects hw_breakpoint: fix single-stepping when using bpf_overflow_handler perf/imx_ddr: speed up overflow frequency of cycle perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 scftorture: Forgive memory-allocation failure if KASAN rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle() kernel/fork: beware of __put_task_struct() calling context ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock btrfs: output extra debug info if we failed to find an inline backref autofs: fix memory leak of waitqueues in autofs_catatonic_mode Revert "ip_tunnels: use DEV_STATS_INC()" Linux 5.15.132 pcd: fix error codes in pcd_init_unit() drm/amd/display: Fix a bug when searching for insert_above_mpcc MIPS: Only fiddle with CHECKFLAGS if `need-compiler' kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg(). ixgbe: fix timestamp configuration code ipv6: fix ip6_sock_set_addr_preferences() typo net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events platform/mellanox: mlxbf-pmc: Fix potential buffer overflows platform/mellanox: mlxbf-tmfifo: Drop jumbo frames platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors kcm: Fix memory leak in error path of kcm_sendmsg() r8152: check budget for r8152_poll() net: dsa: sja1105: hide all multicast addresses from "bridge fdb show" hsr: Fix uninit-value access in fill_frame_info() net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in smcr_port_add kselftest/runner.sh: Propagate SIGTERM to runner child net: ipv4: fix one memleak in __inet_del_ifa() ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2 ARM: dts: samsung: exynos4210-i9100: Fix LCD screen's physical size block: don't add or resize partition on the disk with GENHD_FL_NO_PART block: rename GENHD_FL_NO_PART_SCAN to GENHD_FL_NO_PART block: move GENHD_FL_BLOCK_EVENTS_ON_EXCL_WRITE to disk->event_flags block: move GENHD_FL_NATIVE_CAPACITY to disk->state pcd: cleanup initialization pcd: move the identify buffer into pcd_identify perf hists browser: Fix the number of entries for 'e' key perf tools: Handle old data in PERF_RECORD_ATTR perf hists browser: Fix hierarchy mode header MIPS: Fix CONFIG_CPU_DADDI_WORKAROUNDS `modules_install' regression drm/amd/display: prevent potential division by zero errors mtd: rawnand: brcmnand: Fix potential false time out warning mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write mtd: rawnand: brcmnand: Fix crash during the panic_write btrfs: use the correct superblock to compare fsid in btrfs_validate_super btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART btrfs: free qgroup rsv on io failure fuse: nlookup missing decrement in fuse_direntplus_link ata: pata_ftide010: Add missing MODULE_DESCRIPTION ata: sata_gemini: Add missing MODULE_DESCRIPTION ata: pata_falcon: fix IO base selection for Q40 lib: test_scanf: Add explicit type cast to result initialization in test_number_prefix() ext4: add correct group descriptors and reserved GDT blocks to system zone jbd2: check 'jh->b_transaction' before removing it from checkpoint jbd2: fix checkpoint cleanup performance regression dmaengine: sh: rz-dmac: Fix destination and source data size setting ARC: atomics: Add compiler barrier to atomic operations... net/mlx5: Free IRQ rmap and notifier on kernel shutdown sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory() net: hns3: remove GSO partial feature bit net: hns3: fix the port information display when sfp is absent net: hns3: fix invalid mutex between tc qdisc and dcb ets command issue net: hns3: fix debugfs concurrency issue between kfree buffer and read net: hns3: fix byte order conversion issue in hclge_dbg_fd_tcam_read() netfilter: nfnetlink_osf: avoid OOB read netfilter: nftables: exthdr: fix 4-byte stack OOB write net: dsa: sja1105: complete tc-cbs offload support on SJA1110 net: dsa: sja1105: fix -ENOSPC when replacing the same tc-cbs too many times net: dsa: sja1105: fix bandwidth discrepancy between tc-cbs software and offload ip_tunnels: use DEV_STATS_INC() idr: fix param name in idr_alloc_cyclic() doc s390/zcrypt: don't leak memory if dev_set_name() fails igb: Change IGB_MIN to allow set rx/tx value between 64 and 80 igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80 igc: Change IGC_MIN to allow set rx/tx value between 64 and 80 octeontx2-af: Fix truncation of smq in CN10K NIX AQ enqueue mbox handler kcm: Destroy mutex in kcm_exit_net() net: sched: sch_qfq: Fix UAF in qfq_dequeue() af_unix: Fix data race around sk->sk_err. af_unix: Fix data-races around sk->sk_shutdown. af_unix: Fix data-race around unix_tot_inflight. af_unix: Fix data-races around user->unix_inflight. net: phy: micrel: Correct bit assignments for phy_device flags net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr veth: Fixing transmit return status for dropped packets igb: disable virtualization features on 82580 ipv4: ignore dst hint for multipath routes drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt() xsk: Fix xsk_diag use-after-free error during socket cleanup net: fib: avoid warn splat in flow dissector net: read sk->sk_family once in sk_mc_loop() ipv4: annotate data-races around fi->fib_dead sctp: annotate data-races around sk->sk_wmem_queued net/sched: fq_pie: avoid stalls in fq_pie_timer() pwm: lpc32xx: Remove handling of PWM channels watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load perf top: Don't pass an ERR_PTR() directly to perf_session__delete() perf vendor events: Drop some of the JSON/events for power10 platform perf vendor events: Update the JSON/events descriptions for power10 platform x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm() perf annotate bpf: Don't enclose non-debug code with an assert() Input: tca6416-keypad - fix interrupt enable disbalance Input: tca6416-keypad - always expect proper IRQ number in i2c client backlight: gpio_backlight: Drop output GPIO direction check for initial power state pwm: atmel-tcb: Fix resource freeing in error path and remove pwm: atmel-tcb: Harmonize resource allocation order pwm: atmel-tcb: Convert to platform remove callback returning void perf trace: Really free the evsel->priv area perf trace: Use zfree() to reduce chances of use after free kconfig: fix possible buffer overflow gfs2: low-memory forced flush fixes gfs2: Switch to wait_event in gfs2_logd kbuild: do not run depmod for 'make modules_sign' bus: mhi: host: Skip MHI reset if device is in RDDM NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info NFS: Fix a potential data corruption clk: qcom: mss-sc7180: fix missing resume during probe clk: qcom: q6sstop-qcs404: fix missing resume during probe soc: qcom: qmi_encdec: Restrict string length in decode clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz dt-bindings: clock: xlnx,versal-clk: drop select:false pinctrl: cherryview: fix address_space_handler() argument parisc: led: Reduce CPU overhead for disk & lan LED computation parisc: led: Fix LAN receive and transmit LEDs lib/test_meminit: allocate pages up to order MAX_ORDER clk: qcom: turingcc-qcs404: fix missing resume during probe drm/ast: Fix DRAM init on AST2200 clk: qcom: camcc-sc7180: fix async resume during probe fbdev/ep93xx-fb: Do not assign to struct fb_info.dev scsi: qla2xxx: Fix firmware resource tracking scsi: qla2xxx: Error code did not return to upper layer scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit() scsi: qla2xxx: Flush mailbox commands on chip reset scsi: qla2xxx: Remove unsupported ql2xenabledif option scsi: qla2xxx: Fix TMF leak through scsi: qla2xxx: Fix session hang in gnl scsi: qla2xxx: Turn off noisy message log scsi: qla2xxx: Fix erroneous link up failure scsi: qla2xxx: Fix command flush during TMF scsi: qla2xxx: fix inconsistent TMF timeout scsi: qla2xxx: Fix deletion race condition scsi: qla2xxx: Limit TMF to 8 per function scsi: qla2xxx: Adjust IOCB resource on qpair create io_uring: break iopolling on signal io_uring: break out of iowq iopoll on teardown io_uring: always lock in io_apoll_task_func net/ipv6: SKB symmetric hash should incorporate transport ports udf: initialize newblock to 0 Revert "drm/amdgpu: install stub fence into potential unused fence pointers" md/md-bitmap: remove unnecessary local variable in backlog_store() tracing: Zero the pipe cpumask on alloc to avoid spurious -EBUSY perf/x86/uncore: Correct the number of CHAs on EMR x86/sgx: Break up long non-preemptible delays in sgx_vepc_release() USB: core: Fix oversight in SuperSpeed initialization USB: core: Fix race by not overwriting udev->descriptor in hub_port_init() USB: core: Change usb_get_device_descriptor() API USB: core: Unite old scheme and new scheme descriptor reads usb: typec: bus: verify partner exists in typec_altmode_attention usb: typec: tcpm: set initial svdm version based on pd revision cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug crypto: stm32 - fix loop iterating through scatterlist for DMA s390/ipl: add missing secure/has_secure file to ipl type 'unknown' arm64: sdei: abort running SDEI handlers during crash pstore/ram: Check start of empty przs during init mmc: renesas_sdhi: register irqs before registering controller fsverity: skip PKCS#7 parser when keyring is empty net: handle ARPHRD_PPP in dev_is_mac_header_xmit() X.509: if signature is unsupported skip validation dccp: Fix out of bounds access in DCCP error handler dlm: fix plock lookup when using multiple lockspaces parisc: Fix /proc/cpuinfo output for lscpu procfs: block chmod on /proc/thread-self/comm Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset" ntb: Fix calculation ntb_transport_tx_free_entry() ntb: Clean up tx tail index on link down ntb: Drop packets when qp link is down scsi: mpt3sas: Perform additional retries if doorbell read returns 0 Revert "scsi: qla2xxx: Fix buffer overrun" media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts media: dvb: symbol fixup for dvb_attach() arm64: csum: Fix OoB access in IP checksum code for negative lengths i3c: master: svc: fix probe failure when no i3c device exist xtensa: PMU: fix base address for the newer hardware backlight/lv5207lp: Compare against struct fb_info.device backlight/bd6107: Compare against struct fb_info.device backlight/gpio_backlight: Compare against struct fb_info.device ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch() ipmi_si: fix a memleak in try_smi_init() PCI: rockchip: Use 64-bit mask on MSI 64-bit PCI address media: i2c: ccs: Check rules is non-NULL mm/vmalloc: add a safer version of find_vm_area() for debug scsi: core: Fix the scsi_set_resid() documentation printk: ringbuffer: Fix truncating buffer size min_t cast rcu: dump vmalloc memory info safely ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl PM / devfreq: Fix leak in devfreq_dev_release() igb: set max size RX buffer when store bad packet is enabled skbuff: skb_segment, Call zero copy functions before using skbuff frags netfilter: xt_sctp: validate the flag_info count netfilter: xt_u32: validate user space input netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU virtio_ring: fix avail_wrap_counter in virtqueue_add_packed cpufreq: Fix the race condition while updating the transition_task of policy dmaengine: ste_dma40: Add missing IRQ check in d40_probe um: Fix hostaudio build errors mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() mtd: spi-nor: Check bus width while setting QE bit leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead leds: multicolor: Use rounded division when calculating color components leds: pwm: Fix error code in led_pwm_create_fwnode() rpmsg: glink: Add check for kstrdup phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 mtd: rawnand: brcmnand: Fix mtd oobsize tracing: Fix race issue between cpu buffer write and swap tracing: Remove extra space at the end of hwlat_detector/mode x86/speculation: Mark all Skylake CPUs as vulnerable to GDS HID: multitouch: Correct devm device reference for hidinput input_dev name HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() Revert "IB/isert: Fix incorrect release of isert connection" amba: bus: fix refcount leak serial: tegra: handle clk prepare error in tegra_uart_hw_init() scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock scsi: core: Use 32-bit hostnum in scsi_host_lookup() cgroup:namespace: Remove unused cgroup_namespaces_init() media: i2c: rdacm21: Fix uninitialized value media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working media: ov2680: Add ov2680_fill_format() helper function media: ov2680: Don't take the lock for try_fmt calls media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s media: ov2680: Fix vflip / hflip set functions media: ov2680: Fix ov2680_bayer_order() media: ov2680: Remove auto-gain and auto-exposure controls media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() USB: gadget: f_mass_storage: Fix unused variable warning media: venus: hfi_venus: Only consider sys_idle_indicator on V1 media: go7007: Remove redundant if statement platform/x86: dell-sysman: Fix reference leak iommu/vt-d: Fix to flush cache of PASID directory table iommu/qcom: Disable and reset context bank before programming fsi: aspeed: Reset master errors after CFAM reset IB/uverbs: Fix an potential error pointer dereference RDMA/hns: Fix CQ and QP cache affinity RDMA/hns: Fix incorrect post-send with direct wqe of wr-list RDMA/hns: Fix port active speed iommu/sprd: Add missing force_aperture driver core: test_async: fix an error code dma-buf/sync_file: Fix docs syntax coresight: tmc: Explicit type conversions to prevent integer overflow RDMA/irdma: Replace one-element array with flexible-array member scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly x86/APM: drop the duplicate APM_MINOR_DEV macro serial: sprd: Fix DMA buffer leak issue serial: sprd: Assign sprd_port after initialized to avoid wrong access scsi: qla4xxx: Add length check when parsing nlattrs scsi: be2iscsi: Add length check when parsing nlattrs scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() scsi: iscsi: Add length check for nlattr payload scsi: iscsi: Rename iscsi_set_param() to iscsi_if_set_param() scsi: RDMA/srp: Fix residual handling usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() media: mediatek: vcodec: Return NULL if no vdec_fb is found media: rkvdec: increase max supported height for H.264 scsi: hisi_sas: Fix normally completed I/O analysed as failed scsi: hisi_sas: Fix warnings detected by sparse scsi: hisi_sas: Modify v3 HW SATA completion error processing scsi: hisi_sas: Modify v3 HW SSP underflow error processing media: cx24120: Add retval check for cx24120_message_send() media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() media: dib7000p: Fix potential division by zero drivers: usb: smsusb: fix error handling code in smsusb_init_device iommu: rockchip: Fix directory table address encoding iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() media: i2c: tvp5150: check return value of devm_kasprintf() media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() pNFS: Fix assignment of xprtdata.cred NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN NFSD: da_addr_body field missing in some GETDEVICEINFO replies fs: lockd: avoid possible wrong NULL parameter jfs: validate max amount of blocks before allocation. ext4: fix unttached inode after power cut with orphan file feature enabled powerpc/iommu: Fix notifiers being shared by PCI and VIO buses nfs/blocklayout: Use the passed in gfp flags powerpc/pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT powerpc: Don't include lppaca.h in paca.h PCI: layerscape: Add workaround for lost link capabilities during reset PCI: layerscape: Add the endpoint linkup notifier support PCI: dwc: Add start_link/stop_link inlines wifi: ath10k: Use RMW accessors for changing LNKCTL wifi: ath11k: Use RMW accessors for changing LNKCTL net/mlx5: Use RMW accessors for changing LNKCTL drm/radeon: Use RMW accessors for changing LNKCTL drm/amdgpu: Use RMW accessors for changing LNKCTL powerpc/perf: Convert fsl_emb notifier to state machine callbacks powerpc/fadump: reset dump area size if fadump memory reserve fails vfio/type1: fix cap_migration information leak powerpc/radix: Move some functions into #ifdef CONFIG_KVM_BOOK3S_HV_POSSIBLE clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op clk: imx8mp: fix sai4 clock PCI/ASPM: Use RMW accessors for changing LNKCTL PCI: pciehp: Use RMW accessors for changing LNKCTL pinctrl: mcp23s08: check return value of devm_kasprintf() PCI: Mark NVIDIA T4 GPUs to avoid bus reset PCI: microchip: Correct the DED and SEC interrupt bit offsets clk: qcom: gcc-sm6350: Fix gcc_sdcc2_apps_clk_src clk: qcom: reset: Use the correct type of sleep/delay based on length clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src ext4: avoid potential data overflow in next_linear_group ext4: correct grp validation in ext4_mb_good_group EDAC/igen6: Fix the issue of no error events clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src clk: sunxi-ng: Modify mismatched function name drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() ipmi:ssif: Fix a memory leak when scanning for an adapter ipmi:ssif: Add check for kstrdup ALSA: ac97: Fix possible error value of *rac97 of: unittest: Fix overlay type in apply/revert check of: overlay: Call of_changeset_init() early md: raid0: account for split bio in iostat accounting md/raid0: Fix performance regression for large sequential writes md/raid0: Factor out helper for mapping and submitting a bio md: add error_handlers for raid0 and linear md: Set MD_BROKEN for RAID1 and RAID10 bus: ti-sysc: Fix cast to enum warning arm64: dts: qcom: apq8016-sbc: Fix ov5640 regulator supply names drm/mediatek: Fix potential memory leak if vmap() fail drm/mediatek: Remove freeing not dynamic allocated memory bus: ti-sysc: Fix build warning for 64-bit build io_uring: fix drain stalls by invalid SQE audit: fix possible soft lockup in __audit_inode_child() drm/msm/a2xx: Call adreno_gpu_init() earlier drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() smackfs: Prevent underflow in smk_set_cipso() firmware: meson_sm: fix to avoid potential NULL pointer dereference drm/msm/mdp5: Don't leak some plane state drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 drm/armada: Fix off-by-one error in armada_overlay_get_property() arm64: dts: qcom: sm8150: Fix the I2C7 interrupt of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() drm/tegra: dpaux: Fix incorrect return value of platform_get_irq drm/msm: Update dev core dump to not print backwards md/md-bitmap: hold 'reconfig_mutex' in backlog_store() md/bitmap: don't set max_write_behind if there is no write mostly device md/raid10: use dereference_rdev_and_rrdev() to get devices md/raid10: factor out dereference_rdev_and_rrdev() drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl' arm64: dts: qcom: sdm845: Fix the min frequency of "ice_core_clk" arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC ARM: dts: BCM53573: Fix Ethernet info for Luxul devices drm: adv7511: Fix low refresh rate register for ADV7533/5 ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split) ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210 ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split) ARM: dts: s3c64xx: align pinctrl with dtschema x86/mm: Fix PAT bit missing from page protection modify mask drm/etnaviv: fix dumping of active MMU context arm64: dts: qcom: pmi8994: Add missing OVP interrupt arm64: dts: qcom: Move WLED num-strings from pmi8994 to sony-xperia-tone arm64: dts: qcom: pmi8994: Remove hardcoded linear WLED enabled-strings arm64: dts: qcom: pm660l: Add missing short interrupt arm64: dts: qcom: correct SPMI WLED register range encoding arm64: dts: qcom: pmi8998: Add node for WLED arm64: dts: qcom: sm8250-sony-xperia: correct GPIO keys wakeup again ARM: dts: BCM53573: Use updated "spi-gpio" binding properties ARM: dts: BCM53573: Add cells sizes to PCIe node drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() arm64: dts: qcom: sm8250: Mark PCIe hosts as DMA coherent arm64: dts: qcom: pmk8350: fix ADC-TM compatible string arm64: dts: qcom: sm8350: Use proper CPU compatibles arm64: dts: qcom: sm8350: Add missing LMH interrupts to cpufreq arm64: dts: qcom: msm8996: Add missing interrupt to the USB2 controller arm64: dts: qcom: sm8250-edo: Rectify gpio-keys arm64: dts: qcom: sm8250-edo: Add GPIO line names for PMIC GPIOs arm64: dts: qcom: sm8250-edo: Add gpio line names for TLMM arm64: dts: qcom: sm8250: correct dynamic power coefficients soc: qcom: ocmem: Fix NUM_PORTS & NUM_MACROS macros soc: qcom: ocmem: Add OCMEM hardware version print ASoC: stac9766: fix build errors with REGMAP_AC97 quota: fix dqput() to follow the guarantees dquot_srcu should provide quota: add new helper dquot_active() quota: rename dquot_active() to inode_quota_active() quota: factor out dquot_write_dquot() drm/bridge: tc358764: Fix debug print parameter order netrom: Deny concurrent connect(). net/sched: sch_hfsc: Ensure inner classes have fsc curve hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() mlxsw: i2c: Limit single transaction buffer size mlxsw: i2c: Fix chunk size setting in output mailbox buffer net: arcnet: Do not call kfree_skb() under local_irq_disable() wifi: ath9k: use IS_ERR() with debugfs_create_dir() Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() wifi: mwifiex: avoid possible NULL skb pointer dereference wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute wifi: ath9k: protect WMI command response buffer replacement with a lock wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx samples/bpf: fix broken map lookup probe wifi: mwifiex: Fix missed return in oob checks failed path wifi: mwifiex: fix memory leak in mwifiex_histogram_read() fs: ocfs2: namei: check return value of ocfs2_add_entry() lwt: Check LWTUNNEL_XMIT_CONTINUE strictly lwt: Fix return values of BPF xmit ops hwrng: iproc-rng200 - Implement suspend and resume calls crypto: caam - fix unchecked return value error ice: ice_aq_check_events: fix off-by-one check when filling buffer net-memcg: Fix scope of sockmem pressure indicators selftests/bpf: Clean up fmod_ret in bench_rename test script net: tcp: fix unexcepted socket die when snd_wnd is 0 Bluetooth: Fix potential use-after-free when clear keys Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() crypto: api - Use work queue in crypto_destroy_instance crypto: stm32 - Properly handle pm_runtime_get failing selftests/bpf: fix static assert compilation issue for test_cls_*.c wifi: mwifiex: fix error recovery in PCIE buffer descriptor management wifi: mwifiex: Fix OOB and integer underflow when rx packets wifi: mt76: mt7915: fix power-limits while chan_switch can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH ipv6: Add reasons for skb drops to __udp6_lib_rcv bpf: reject unhashed sockets in bpf_sk_assign udp: re-score reuseport groups when connected sockets are present regmap: rbtree: Use alloc_flags for memory allocations hwrng: pic32 - use devm_clk_get_enabled hwrng: nomadik - keep clock enabled while hwrng is registered tcp: tcp_enter_quickack_mode() should be static bpf: Clear the probe_addr for uprobe bpftool: Use a local bpf_perf_event_value to fix accessing its fields cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit() x86/efistub: Fix PCI ROM preservation in mixed mode ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table ACPI: x86: s2idle: Post-increment variables when getting constraints s390/paes: fix PKEY_TYPE_EP11_AES handling for secure keyblobs s390/pkey: fix/harmonize internal keyblob headers selftests/futex: Order calls to futex_lock_pi perf/imx_ddr: don't enable counter0 if none of 4 counters are used x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved selftests/resctrl: Close perf value read fd on errors selftests/resctrl: Unmount resctrl FS if child fails to run benchmark selftests/resctrl: Don't leak buffer in fill_cache() selftests/resctrl: Add resctrl.h into build deps selftests/resctrl: Make resctrl_tests run using kselftest framework OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd() refscale: Fix uninitalized use of wait_queue_head_t ARM: ptrace: Restore syscall skipping for tracers ARM: ptrace: Restore syscall restart tracing selftests/harness: Actually report SKIP for signal tests tmpfs: verify {g,u}id mount options correctly fs: Fix error checking for d_hash_and_lookup() eventfd: prevent underflow for eventfd semaphores reiserfs: Check the return value from __getblk() Revert "net: macsec: preserve ingress frame ordering" udf: Handle error when adding extent to a file udf: Check consistency of Space Bitmap Descriptor of: kexec: Mark ima_{free,stable}_kexec_buffer() as __init net: Avoid address overwrite in kernel_connect arm64: lib: Import latest version of Arm Optimized Routines' strncmp crypto: rsa-pkcs1pad - Use helper to set reqsize platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications tracing: Introduce pipe_cpumask to avoid race on trace_pipes ALSA: seq: oss: Fix racy open/close of MIDI devices scsi: lpfc: Fix incorrect big endian type assignment in bsg loopback path scsi: storvsc: Always set no_report_opcodes sctp: handle invalid error codes without calling BUG() bnx2x: fix page fault following EEH recovery netlabel: fix shift wrapping bug in netlbl_catmap_setlong() drm/amdgpu: Match against exact bootloader status net: hns3: restore user pause configure when disable autoneg scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock scsi: lpfc: Remove reftag check in DIF paths idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM wifi: brcmfmac: Fix field-spanning write in brcmf_scan_params_v2_to_v1() net: usb: qmi_wwan: add Quectel EM05GV2 vmbus_testing: fix wrong python syntax for integer value comparison clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM kprobes: Prohibit probing on CFI preamble symbol security: keys: perform capable check only on privileged operations ata: pata_arasan_cf: Use dev_err_probe() instead dev_err() in data_xfer() ovl: Always reevaluate the file signature for IMA drm/amd/display: Exit idle optimizations before attempt to access PHY platform/x86: huawei-wmi: Silence ambient light sensor platform/x86/intel/hid: Add HP Dragonfly G2 to VGBS DMI quirks platform/x86: intel: hid: Always call BTNL ACPI method ASoC: atmel: Fix the 8K sample parameter in I2SC master ASoC: rt711-sdca: fix for JD event handling in ClockStop Mode0 ASoC: rt711: fix for JD event handling in ClockStop Mode0 ASoc: codecs: ES8316: Fix DMIC config ASoC: rt5682-sdw: fix for JD event handling in ClockStop Mode0 fs/nls: make load_nls() take a const parameter s390/dasd: fix hanging device after request requeue s390/dasd: use correct number of retries for ERP requests m68k: Fix invalid .section syntax vxlan: generalize vxlan_parse_gpe_hdr and remove unused args ethernet: atheros: fix return value check in atl1c_tso_csum() ASoC: da7219: Check for failure reading AAD IRQ events ASoC: da7219: Flush pending AAD IRQ when suspending ksmbd: no response from compound read ksmbd: fix out of bounds in smb3_decrypt_req() 9p: virtio: make sure 'offs' is initialized in zc_request media: pci: cx23885: fix error handling for cx23885 ATSC boards media: pulse8-cec: handle possible ping error phy: qcom-snps-femto-v2: use qcom_snps_hsphy_suspend/resume error code ARM: dts: imx: Set default tuning step for imx7d usdhc ARM: dts: imx: Adjust dma-apbh node name ARM: dts: imx7s: Drop dma-apb interrupt-names ARM: dts: imx: update sdma node name format Linux 5.15.131 usb: typec: tcpci: clear the fault status bit usb: typec: tcpci: move tcpci.h to include/linux/usb/ pinctrl: amd: Don't show `Invalid config param` errors nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers() tcpm: Avoid soft reset when partner does not support get_status fsi: master-ast-cf: Add MODULE_FIRMWARE macro firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe serial: sc16is7xx: fix bug when first setting GPIO direction serial: sc16is7xx: fix broken port 0 uart init serial: qcom-geni: fix opp vote on shutdown wifi: mt76: mt7921: do not support one stream on secondary antenna only Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition staging: rtl8712: fix race condition HID: wacom: remove the battery when the EKR is off usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 usb: dwc3: meson-g12a: do post init to fix broken usb after resumption ALSA: usb-audio: Fix init call orders for UAC1 USB: serial: option: add FOXCONN T99W368/T99W373 product USB: serial: option: add Quectel EM05G variant (0x030e) modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index mmc: au1xmmc: force non-modular build and remove symbol_get usage ARM: pxa: remove use of symbol_get() ksmbd: replace one-element array with flex-array member in struct smb2_ea_info ksmbd: fix wrong DataOffset validation of create context erofs: ensure that the post-EOF tails are all zeroed Linux 5.15.130 rcu-tasks: Add trc_inspect_reader() checks for exiting critical section rcu-tasks: Wait for trc_read_check_handler() IPIs rcu-tasks: Fix IPI failure handling in trc_wait_for_one_reader rcu: Prevent expedited GP from enabling tick on offline CPU ARM: module: Use module_init_layout_section() to spot init sections arm64: module: Use module_init_layout_section() to spot init sections arm64: module-plts: inline linux/moduleloader.h module: Expose module_init_layout_section() ACPI: thermal: Drop nocrt parameter Revert "drm/display/dp: Fix the DP DSC Receiver cap size" Revert "macsec: Fix traffic counters/statistics" Revert "macsec: use DEV_STATS_INC()" Linux 5.15.129 mm,ima,kexec,of: use memblock_free_late from ima_free_kexec_buffer mm: memory-failure: fix unexpected return value in soft_offline_page() mm: memory-failure: kill soft_offline_free_page() dma-buf/sw_sync: Avoid recursive lock during fence signal pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' scsi: core: raid_class: Remove raid_component_add() scsi: snic: Fix double free in snic_tgt_create() can: raw: add missing refcount for memory leak fix drm/i915: Fix premature release of request's reusable memory cgroup/cpuset: Free DL BW in case can_attach() fails sched/deadline: Create DL BW alloc, free & check overflow interface cgroup/cpuset: Iterate only if DEADLINE tasks are present sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets sched/cpuset: Bring back cpuset_mutex cgroup/cpuset: Rename functions dealing with DEADLINE accounting torture: Fix hang during kthread shutdown phase nfsd: use vfs setgid helper nfs: use vfs setgid helper x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 x86/fpu: Invalidate FPU state correctly on exec() drm/display/dp: Fix the DP DSC Receiver cap size drm/vmwgfx: Fix shader stage validation PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus media: vcodec: Fix potential array out-of-bounds in encoder queue_setup of: dynamic: Refactor action prints to not use "%pOF" inside devtree_lock of: unittest: Fix EXPECT for parse_phandle_with_args_map() test radix tree: remove unused variable lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels batman-adv: Hold rtnl lock during MTU update via netlink batman-adv: Fix batadv_v_ogm_aggr_send memory leak batman-adv: Fix TT global entry leak when client roamed back batman-adv: Do not get eth header before batadv_check_management_packet batman-adv: Don't increase MTU when set by user batman-adv: Trigger events for auto adjusted MTU selinux: set next pointer before attaching to list nfsd: Fix race to FREE_STATEID and cl_revoked NFS: Fix a use after free in nfs_direct_join_group() mm: add a call to flush_cache_vmap() in vmap_pfn() ALSA: ymfpci: Fix the missing snd_card_free() call at probe error clk: Fix slab-out-of-bounds error in devm_clk_release() NFSv4: Fix dropped lock for racing OPEN and delegation return ibmveth: Use dcbf rather than dcbfl Revert "KVM: x86: enable TDP MMU by default" net/ncsi: change from ndo_set_mac_address to dev_set_mac_address net/ncsi: make one oem_gma function for all mfr id bonding: fix macvlan over alb bond support net: remove bond_slave_has_mac_rcu() rtnetlink: Reject negative ifindexes in RTM_NEWLINK rtnetlink: return ENODEV when ifname does not exist and group is given netfilter: nf_tables: fix out of memory error handling netfilter: nf_tables: flush pending destroy work before netlink notifier net/sched: fix a qdisc modification with ambiguous command request igc: Fix the typo in the PTM Control macro igb: Avoid starting unnecessary workqueues ice: fix receive buffer size miscalculation net: validate veth and vxcan peer ifindexes net: bcmgenet: Fix return value check for fixed_phy_register() net: bgmac: Fix return value check for fixed_phy_register() ipvlan: Fix a reference count leak warning in ipvlan_ns_exit() dccp: annotate data-races in dccp_poll() sock: annotate data-races around prot->memory_pressure octeontx2-af: SDP: fix receive link config tracing: Fix memleak due to race between current_tracer and trace tracing: Fix cpu buffers unavailable due to 'record_disabled' missed can: raw: fix lockdep issue in raw_release() drm/amd/display: check TG is non-null before checking if enabled drm/amd/display: do not wait for mpc idle if tg is disabled can: raw: fix receiver memory leak jbd2: fix a race when checking checkpoint buffer busy jbd2: remove journal_clean_one_cp_list() jbd2: remove t_checkpoint_io_list ALSA: pcm: Fix potential data race at PCM memory allocation helpers fbdev: fix potential OOB read in fast_imageblit() fbdev: Fix sys_imageblit() for arbitrary image widths fbdev: Improve performance of sys_imageblit() MIPS: cpu-features: Use boot_cpu_type for CPU type based features MIPS: cpu-features: Enable octeon_cache by cpu_type fs: dlm: fix mismatch of plock results from userspace fs: dlm: use dlm_plock_info for do_unlock_close fs: dlm: change plock interrupted message to debug again fs: dlm: add pid to debug log dlm: replace usage of found with dedicated list iterator variable dlm: improve plock logging if interrupted PCI: acpiphp: Reassign resources on bridge if necessary xprtrdma: Remap Receive buffers after a reconnect NFSv4: fix out path in __nfs4_get_acl_uncached NFSv4.2: fix error handling in nfs42_proc_getxattr objtool/x86: Fix SRSO mess Revert "locking/rtmutex: Fix task->pi_waiters integrity" Linux 5.15.128 x86/srso: Correct the mitigation status when SMT is disabled objtool/x86: Fixup frame-pointer vs rethunk x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG x86/srso: Disable the mitigation on unaffected configurations x86/CPU/AMD: Fix the DIV(0) initial fix attempt x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() x86/static_call: Fix __static_call_fixup() x86/srso: Explain the untraining sequences a bit more x86/cpu: Cleanup the untrain mess x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 x86/cpu: Rename original retbleed methods x86/cpu: Clean up SRSO return thunk mess x86/ibt: Add ANNOTATE_NOENDBR objtool: Add frame-pointer-specific function ignore x86/alternative: Make custom return thunk unconditional x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() x86/cpu: Fix __x86_return_thunk symbol type mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled virtio-net: set queues after driver_ok af_unix: Fix null-ptr-deref in unix_stream_sendpage(). arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 exfat: check if filename entries exceeds max filename length netfilter: set default timeout to 3 secs for sctp shutdown send and recv state drm/amd: flush any delayed gfxoff on suspend entry drm/qxl: fix UAF on handle creation mmc: block: Fix in_flight[issue_type] value error mmc: wbsd: fix double mmc_free_host() in wbsd_init() cifs: Release folio lock on fscache read hit. ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. serial: 8250: Fix oops for port->pm on uart_change_pm() riscv: uaccess: Return the number of bytes effectively not copied ALSA: hda/realtek - Remodified 3k pull low procedure soc: aspeed: socinfo: Add kfree for kstrdup ASoC: meson: axg-tdm-formatter: fix channel slot allocation ASoC: rt5665: add missed regulator_bulk_disable ARM: dts: imx: Set default tuning step for imx6sx usdhc arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict bus: ti-sysc: Flush posted write on enable before reset net: do not allow gso_size to be set to GSO_BY_FRAGS sock: Fix misuse of sk_under_memory_pressure() net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset i40e: fix misleading debug logs iavf: fix FDIR rule fields masks validation team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves net: phy: broadcom: stub c45 read/write for 54810 netfilter: nft_dynset: disallow object maps ipvs: fix racy memcpy in proc_do_sync_threshold netfilter: nf_tables: deactivate catchall elements in next generation netfilter: nf_tables: fix false-positive lockdep splat drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs selftests: mirror_gre_changes: Tighten up the TTL test match net: phy: fix IRQ-based wake-on-lan over hibernate / power off xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH xfrm: add NULL check in xfrm_update_ae_params ip_vti: fix potential slab-use-after-free in decode_session6 ip6_vti: fix slab-use-after-free in decode_session6 xfrm: fix slab-use-after-free in decode_session6 net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure net: af_key: fix sadb_x_filter validation net: xfrm: Fix xfrm_address_filter OOB read i2c: designware: Handle invalid SMBus block data response length value i2c: designware: Correct length byte validation logic btrfs: fix BUG_ON condition in btrfs_cancel_balance tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux powerpc/rtas_flash: allow user copy to flash block cache objects fbdev: mmp: fix value check in mmphw_probe() i2c: hisi: Only handle the interrupt of the driver's transfer i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue cifs: fix potential oops in cifs_oplock_break vduse: Use proper spinlock for IRQ injection virtio-mmio: don't break lifecycle of vm_dev btrfs: move out now unused BG from the reclaim list ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node ARM: dts: imx6sll: fixup of operating points mmc: sunxi: fix deferred probing mmc: bcm2835: fix deferred probing USB: dwc3: fix use-after-free on core driver unbind USB: dwc3: qcom: fix NULL-deref on suspend tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms tty: serial: fsl_lpuart: Add i.MXRT1050 support usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() USB: dwc3: gadget: drop dead hibernation code usb: dwc3: Fix typos in gadget.c usb: dwc3: Remove DWC3 locking during gadget suspend/resume usb: dwc3: gadget: Synchronize IRQ between soft connect/disconnect drm/amd/display: fix access hdcp_workqueue assert drm/amd/display: phase3 mst hdcp for multiple displays drm/amd/display: save restore hdcp state when display is unplugged from mst hub ARM: dts: aspeed: asrock: Correct firmware flash SPI clocks igc: read before write to SRRCTL register iio: addac: stx104: Fix race condition when converting analog-to-digital iio: addac: stx104: Fix race condition for stx104_write_raw() iio: stx104: Move to addac subdirectory iio: adc: stx104: Implement and utilize register structures iio: adc: stx104: Utilize iomap interface iio: add addac subdirectory ring-buffer: Do not swap cpu_buffer during resize process powerpc/kasan: Disable KCOV in KASAN code ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 fs/ntfs3: Mark ntfs dirty when on-disk struct is corrupted fs: ntfs3: Fix possible null-pointer dereferences in mi_read() fs/ntfs3: Enhance sanity check while generating attr_list drm/amdgpu: Fix potential fence use-after-free v2 Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally Bluetooth: L2CAP: Fix use-after-free watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) firewire: net: fix use after free in fwnet_finish_incoming_packet() pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() gfs2: Fix possible data races in gfs2_show_options() usb: chipidea: imx: add missing USB PHY DPDM wakeup setting usb: chipidea: imx: don't request QoS for imx8ulp thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() media: platform: mediatek: vpu: fix NULL ptr dereference usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push media: v4l2-mem2mem: add lock to protect parameter num_rdy smb: client: fix warning in cifs_smb3_do_mount() ovl: check type and offset of struct vfsmount in ovl_entry RDMA/mlx5: Return the firmware result upon destroying QP/RQ HID: add quirk for 03f0:464a HP Elite Presenter Mouse drm/amdgpu: install stub fence into potential unused fence pointers HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard dma-remap: use kvmalloc_array/kvfree for larger dma memory remap ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion iopoll: Call cpu_relax() in busy loops ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings PCI: tegra194: Fix possible array out of bounds access net: tls: avoid discarding data on record close net/tls: Multi-threaded calls to TX tls_dev_del net/tls: Perform immediate device ctx cleanup when possible macsec: use DEV_STATS_INC() macsec: Fix traffic counters/statistics selftests: forwarding: tc_actions: Use ncat instead of nc selftests: forwarding: tc_actions: cleanup temporary files when test is aborted mmc: sdhci-f-sdh30: Replace with sdhci_pltfm Linux 5.15.127 timers/nohz: Last resort update jiffies on nohz_full IRQ entry timers/nohz: Switch to ONESHOT_STOPPED in the low-res handler when the tick is stopped tick: Detect and fix jiffies update stall sch_netem: fix issues in netem_change() vs get_dist_table() alpha: remove __init annotation from exported page_is_ram() scsi: qedf: Fix firmware halt over suspend and resume scsi: qedi: Fix firmware halt over suspend and resume scsi: fnic: Replace return codes in fnic_clean_pending_aborts() scsi: core: Fix possible memory leak if device_add() fails scsi: snic: Fix possible memory leak if device_add() fails scsi: 53c700: Check that command slot is not NULL scsi: storvsc: Fix handling of virtual Fibre Channel timeouts scsi: core: Fix legacy /proc parsing buffer overflow netfilter: nf_tables: report use refcount overflow nvme-rdma: fix potential unbalanced freeze & unfreeze nvme-tcp: fix potential unbalanced freeze & unfreeze btrfs: set cache_block_group_error if we find an error btrfs: reject invalid reloc tree root keys with stack dump btrfs: exit gracefully if reloc roots don't match btrfs: don't stop integrity writeback too early ibmvnic: Handle DMA unmapping of login buffs in release functions ibmvnic: Unmap DMA login rsp buffer on send login fail ibmvnic: Enforce stronger sanity checks on login response net/mlx5: Skip clock update work when device is in error state net/mlx5: Allow 0 for total host VFs dmaengine: mcf-edma: Fix a potential un-allocated memory access nexthop: Fix infinite nexthop bucket dump when using maximum nexthop ID nexthop: Make nexthop bucket dump more efficient nexthop: Fix infinite nexthop dump when using maximum nexthop ID net: hns3: add wait until mac link down net: hns3: refactor hclge_mac_link_status_wait for interface reuse net: phy: at803x: remove set/get wol callbacks for AR8032 RDMA/umem: Set iova in ODP flow wifi: cfg80211: fix sband iftype data lookup for AP_VLAN drm/rockchip: Don't spam logs in atomic check IB/hfi1: Fix possible panic during hotplug remove iavf: fix potential races for FDIR filters drivers: net: prevent tun_build_skb() to exceed the packet size limit dccp: fix data-race around dp->dccps_mss_cache bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves xsk: fix refcount underflow in error path tunnels: fix kasan splat when generating ipv4 pmtu error net/packet: annotate data-races around tp->status mISDN: Update parameter type of dsp_cmx_send() bpf, sockmap: Fix bug that strp_done cannot be called bpf, sockmap: Fix map type error in sock_map_del_link net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail() selftests: forwarding: tc_flower: Relax success criterion selftests: forwarding: Switch off timeout selftests: forwarding: Skip test when no interfaces are specified selftests: forwarding: ethtool_extended_state: Skip when using veth pairs selftests: forwarding: ethtool: Skip when using veth pairs selftests: forwarding: Add a helper to skip test when using veth pairs selftests/rseq: Fix build with undefined __weak drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes x86: Move gds_ucode_mitigated() declaration to header x86/speculation: Add cpu_show_gds() prototype x86/mm: Fix VDSO and VVAR placement on 5-level paging machines x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 x86/srso: Fix build breakage with the LLVM linker usb: typec: tcpm: Fix response to vsafe0V event usb: common: usb-conn-gpio: Prevent bailing out if initial role is none usb: dwc3: Properly handle processing of pending events usb-storage: alauda: Fix uninit-value in alauda_check_media() misc: rtsx: judge ASPM Mode to set PETXCFG Reg binder: fix memory leak in binder_init() iio: adc: ina2xx: avoid NULL pointer dereference on OF device match iio: cros_ec: Fix the allocation size for cros_ec_command io_uring: correct check for O_TMPFILE selftests/bpf: Fix sk_assign on s390x selftests/bpf: Workaround verification failure for fexit_bpf2bpf/func_replace_return_code selftests/bpf: make test_align selftest more robust bpf: aggressively forget precise markings during state checkpointing bpf: stop setting precise in current state bpf: allow precision tracking for programs with subprogs nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput radix tree test suite: fix incorrect allocation size for pthreads hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 drm/amd/display: check attr flag before set cursor degamma on DCN3+ drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap() drm/nouveau/gr: enable memory loads on helper invocation on all channels riscv,mmio: Fix readX()-to-delay() ordering dmaengine: pl330: Return DMA_PAUSED when transaction is paused ipv6: adjust ndisc_is_useropt() to also return true for PIO mmc: moxart: read scr register without changing byte order wireguard: allowedips: expand maximum node depth ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea() ksmbd: validate command request size Linux 5.15.126 PM: sleep: wakeirq: fix wake irq arming PM / wakeirq: support enabling wake-up irq after runtime_suspend called soundwire: fix enumeration completion soundwire: bus: pm_runtime_request_resume on peripheral attachment selftests/rseq: Play nice with binaries statically linked against glibc 2.35+ selftests/rseq: check if libc rseq support is registered drm/imx/ipuv3: Fix front porch adjustment upon hactive aligning powerpc/mm/altmap: Fix altmap boundary check mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts mtd: rawnand: rockchip: fix oobfree offset and description mtd: rawnand: omap_elm: Fix incorrect type in assignment ext2: Drop fragment support fs: Protect reconfiguration of sb read-write from racing writes net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb fs/sysv: Null check to prevent null-ptr-deref bug fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_load_attr_list() file: reinstate f_pos locking optimization for regular files bpf, cpumap: Make sure kthread is running before map update returns drm/ttm: check null pointer before accessing when swapping open: make RESOLVE_CACHED correctly test for O_TMPFILE bpf: Disable preemption in bpf_event_output rbd: prevent busy loop when requesting exclusive lock wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) net: tap_open(): set sk_uid from current_fsuid() net: tun_chr_open(): set sk_uid from current_fsuid() arm64: dts: stratix10: fix incorrect I2C property for SCL signal mtd: rawnand: meson: fix OOB available bytes for ECC mtd: spinand: toshiba: Fix ecc_get_status exfat: release s_lock before calling dir_emit() exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree x86/CPU/AMD: Do not leak quotient data after a division by 0 firmware: arm_scmi: Drop OF node reference in the transport channel setup ceph: defer stopping mdsc delayed_work USB: zaurus: Add ID for A-300/B-500/C-700 libceph: fix potential hang in ceph_osdc_notify() scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices scsi: zfcp: Defer fc_rport blocking until after ADISC response tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen tcp_metrics: annotate data-races around tm->tcpm_net tcp_metrics: annotate data-races around tm->tcpm_vals[] tcp_metrics: annotate data-races around tm->tcpm_lock tcp_metrics: annotate data-races around tm->tcpm_stamp tcp_metrics: fix addr_same() helper prestera: fix fallback to previous version on same major version net/mlx5: fs_core: Skip the FTs in the same FS_TYPE_PRIO_CHAINS fs_prio net/mlx5: fs_core: Make find_closest_ft more generic vxlan: Fix nexthop hash size ip6mr: Fix skb_under_panic in ip6mr_cache_report() s390/qeth: Don't call dev_close/dev_open (DOWN/UP) net: dcb: choose correct policy to parse DCB_ATTR_BCN net: netsec: Ignore 'phy-mode' on SynQuacer in DT mode net: korina: handle clk prepare error in korina_probe() net: ll_temac: fix error checking of irq_of_parse_and_map() net: ll_temac: Switch to use dev_err_probe() helper bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free bpf, cpumap: Handle skb as well when clean up ptr_ring net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX. net: add missing data-race annotation for sk_ll_usec net: add missing data-race annotations around sk->sk_peek_off net: add missing READ_ONCE(sk->sk_rcvbuf) annotation net: add missing READ_ONCE(sk->sk_sndbuf) annotation net: add missing READ_ONCE(sk->sk_rcvlowat) annotation net: annotate data-races around sk->sk_max_pacing_rate qed: Fix scheduling in a tasklet while getting stats qed: Fix kernel-doc warnings mISDN: hfcpci: Fix potential deadlock on &hc->lock net: sched: cls_u32: Fix match key mis-addressing perf test uprobe_from_different_cu: Skip if there is no gcc net: dsa: fix value check in bcm_sf2_sw_probe() rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length bpf: Add length check for SK_DIAG_BPF_STORAGE_REQ_MAP_FD parsing net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx wifi: cfg80211: Fix return value in scan logic KVM: s390: fix sthyi error handling word-at-a-time: use the same return type for has_zero regardless of endianness arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux iommu/arm-smmu-v3: Document nesting-related errata iommu/arm-smmu-v3: Add explicit feature for nesting iommu/arm-smmu-v3: Document MMU-700 erratum 2812531 iommu/arm-smmu-v3: Work around MMU-600 erratum 1076982 arm64: errata: Add detection for TRBE write to out-of-range arm64: errata: Add workaround for TSB flush failures net/mlx5: Free irqs only on shutdown callback perf: Fix function pointer case io_uring: gate iowait schedule on having pending requests Linux 5.15.125 x86: fix backwards merge of GDS/SRSO bit xen/netback: Fix buffer overrun triggered by unusual packet x86/srso: Tie SBPB bit setting to microcode patch detection x86/srso: Fix return thunks in generated code x86/srso: Add IBPB on VMEXIT x86/srso: Add IBPB x86/srso: Add SRSO_NO support x86/srso: Add IBPB_BRTYPE support x86/srso: Add a Speculative RAS Overflow mitigation x86/cpu, kvm: Add support for CPUID_80000021_EAX x86/bugs: Increase the x86 bugs vector size to two u32s Documentation/x86: Fix backwards on/off logic about YMM support x86/mm: Initialize text poking earlier mm: Move mm_cachep initialization to mm_init() x86/mm: Use mm_alloc() in poking_init() x86/mm: fix poking_init() for Xen PV guests x86/xen: Fix secondary processors' FPU initialization KVM: Add GDS_NO support to KVM x86/speculation: Add Kconfig option for GDS x86/speculation: Add force option to GDS mitigation x86/speculation: Add Gather Data Sampling mitigation x86/fpu: Move FPU initialization into arch_cpu_finalize_init() x86/fpu: Mark init functions __init x86/fpu: Remove cpuinfo argument from init functions x86/init: Initialize signal frame size late init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() init: Invoke arch_cpu_finalize_init() earlier init: Remove check_bugs() leftovers um/cpu: Switch to arch_cpu_finalize_init() sparc/cpu: Switch to arch_cpu_finalize_init() sh/cpu: Switch to arch_cpu_finalize_init() mips/cpu: Switch to arch_cpu_finalize_init() m68k/cpu: Switch to arch_cpu_finalize_init() ia64/cpu: Switch to arch_cpu_finalize_init() ARM: cpu: Switch to arch_cpu_finalize_init() x86/cpu: Switch to arch_cpu_finalize_init() init: Provide arch_cpu_finalize_init() Linux 5.15.124 selftests: mptcp: join: only check for ip6tables if needed ASoC: cs42l51: fix driver to properly autoload with automatic module loading io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq selftests: mptcp: sockopt: use 'iptables-legacy' if available cpufreq: intel_pstate: Drop ACPI _PSS states table patching ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily ACPI: processor: perflib: Use the "no limit" frequency QoS tracing: Fix trace_event_raw_event_synth() if else statement rbd: retrieve and check lock owner twice before blocklisting rbd: harden get_lock_owner_info() a bit rbd: make get_lock_owner_info() return a single locker or NULL dm cache policy smq: ensure IO doesn't prevent cleaner policy progress ceph: never send metrics if disable_send_metrics is set ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register s390/dasd: fix hanging device after quiesce/resume virtio-net: fix race between set queues and probe KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid locking/rtmutex: Fix task->pi_waiters integrity irqchip/gic-v4.1: Properly lock VPEs when doing a directLPI invalidation irq-bcm6345-l1: Do not assume a fixed block to cpu mapping tpm_tis: Explicitly check for error code nfsd: Remove incorrect check in nfsd4_validate_stateid file: always lock position for FMODE_ATOMIC_POS btrfs: check for commit error at btrfs_attach_transaction_barrier() btrfs: check if the transaction was aborted at btrfs_wait_for_commit() hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature ALSA: hda/relatek: Enable Mute LED on HP 250 G8 Revert "xhci: add quirk for host controllers that don't update endpoint DCS" tty: n_gsm: fix UAF in gsm_cleanup_mux staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() staging: r8712: Fix memory leak in _r8712_init_xmit_priv() Documentation: security-bugs.rst: clarify CVE handling Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group Revert "usb: xhci: tegra: Fix error check" usb: xhci-mtk: set the dma max_seg_size usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config USB: quirks: add quirk for Focusrite Scarlett usb: ohci-at91: Fix the unhandle interrupt when resume usb: dwc3: don't reset device side if dwc3 was configured as host-only usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy Revert "usb: dwc3: core: Enable AutoRetry feature in the controller" can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED USB: serial: simple: sort driver entries USB: serial: simple: add Kaufmann RKS+CAN VCP USB: serial: option: add Quectel EC200A module support USB: serial: option: support Quectel EM060K_128 serial: sifive: Fix sifive_serial_console_setup() section serial: 8250_dw: Preserve original value of DLF register serial: qcom-geni: drop bogus runtime pm state update KVM: VMX: Don't fudge CR0 and CR4 for restricted L2 guest KVM: Grab a reference to KVM for VM and vCPU stats file descriptors USB: gadget: Fix the memory leak in raw_gadget driver usb: gadget: call usb_gadget_check_config() to verify UDC capability Revert "usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init()" tracing: Fix warning in trace_buffered_event_disable() ring-buffer: Fix wrong stat of cpu_buffer->read ata: pata_ns87415: mark ns87560_tf_read static RDMA/irdma: Report correct WC error drm/amd: Fix an error handling mistake in psp_sw_init() dm raid: protect md_stop() with 'reconfig_mutex' dm raid: clean up four equivalent goto tags in raid_ctr() dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths block: Fix a source code comment in include/uapi/linux/blkzoned.h ASoC: fsl_spdif: Silence output on stop drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() RDMA/bnxt_re: Prevent handling any completions after qp destroy RDMA/mthca: Fix crash when polling CQ for shared QPs RDMA/irdma: Fix data race on CQP request done RDMA/irdma: Fix data race on CQP completion stats RDMA/irdma: Add missing read barriers drm/msm/adreno: Fix snapshot BINDLESS_DATA size drm/msm/dpu: drop enum dpu_core_perf_data_bus_id RDMA/mlx4: Make check for invalid flags stricter tipc: stop tipc crypto on failure in tipc_node_create tipc: check return value of pskb_trim() benet: fix return value check in be_lancer_xmit_workarounds() net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64 net/sched: mqprio: add extack to mqprio_parse_nlattr() net/sched: mqprio: refactor nlattr parsing to a separate function netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR netfilter: nft_set_rbtree: fix overlap expiration walk igc: Fix Kernel Panic during ndo_tx_timeout callback platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 net: stmmac: Apply redundant write work around on 4.xx too team: reset team's flags when down link is P2P device bonding: reset bond's flags when down link is P2P device ice: Fix memory management in ice_ethtool_fdir.c tcp: Reduce chance of collisions in inet6_hashfn(). ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address ethernet: atheros: fix return value check in atl1e_tso_csum() phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() vxlan: calculate correct header length for GPE vxlan: move to its own directory net: hns3: fix wrong bw weight of disabled tc issue net: hns3: fix wrong tc bandwidth weight data issue net: phy: marvell10g: fix 88x3310 power up iavf: check for removal state before IAVF_FLAG_PF_COMMS_FAILED iavf: fix potential deadlock on allocation failure i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() media: staging: atomisp: select V4L2_FWNODE soundwire: qcom: update status correctly with mask phy: qcom-snps-femto-v2: properly enable ref clock phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc phy: qcom-snps: Use dev_err_probe() to simplify code drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel drm/amdgpu: fix vkms crtc settings scsi: qla2xxx: Fix hang in task management scsi: qla2xxx: Add debug prints in the device remove path scsi: qla2xxx: Fix task management cmd fail due to unavailable resource scsi: qla2xxx: Fix task management cmd failure scsi: qla2xxx: Multi-que support for TMF scsi: qla2xxx: Remove unused declarations for qla2xxx tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails Revert "tracing: Add "(fault)" name injection to kernel probes" tracing: Allow synthetic events to pass around stacktraces tracing/probes: Fix to avoid double count of the string length on the array tracing/probes: Add symstr type for dynamic events pwm: meson: fix handling of period/duty if greater than UINT_MAX pwm: meson: Simplify duplicated per-channel tracking cifs: if deferred close is disabled then close files immediately ksmbd: remove internal.h include cifs: use fs_context for automounts cifs: missing directory in MAINTAINERS file drm/ttm: never consider pinned BOs for eviction&swap tty: fix hang on tty device with no_room set n_tty: Rename tail to old_tail in n_tty_read() drm/ttm: Don't leak a resource on eviction error drm/ttm: Don't print error message if eviction was interrupted fs: dlm: interrupt posix locks only when process is killed dlm: rearrange async condition return dlm: cleanup plock_op vs plock_xop PCI: rockchip: Don't advertise MSI-X in PCIe capabilities PCI: rockchip: Fix window mapping and address translation for endpoint PCI: rockchip: Remove writes to unused registers PCI/ASPM: Avoid link retraining race PCI/ASPM: Factor out pcie_wait_for_retrain() PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() i2c: nomadik: Remove a useless call in the remove function i2c: nomadik: Use devm_clk_get_enabled() i2c: nomadik: Remove unnecessary goto label i2c: Improve size determinations i2c: Delete error messages for failed memory allocations btrfs: fix race between quota disable and relocation gpio: mvebu: fix irq domain leak gpio: mvebu: Make use of devm_pwmchip_add pwm: Add a stub for devm_pwmchip_add() gpio: tps68470: Make tps68470_gpio_output() always set the initial value io_uring: don't audit the capability check in io_uring_create() KVM: s390: pv: fix index value of replaced ASCE jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint Conflicts: Documentation/devicetree/bindings Documentation/devicetree/bindings/clock/xlnx,versal-clk.yaml Documentation/devicetree/bindings/i2c/google,cros-ec-i2c-tunnel.yaml Documentation/devicetree/bindings/iio/health/maxim,max30102.yaml Documentation/devicetree/bindings/media/i2c/ovti,ov2680.yaml Documentation/devicetree/bindings/nvmem/mxs-ocotp.yaml Documentation/devicetree/bindings/pci/rcar-pci-host.yaml Documentation/devicetree/bindings/pinctrl/mediatek,mt7622-pinctrl.yaml Documentation/devicetree/bindings/soc/rockchip/grf.yaml Documentation/devicetree/bindings/sound/rt5645.txt Documentation/devicetree/bindings/thermal/thermal-zones.yaml drivers/bus/mhi/host/main.c drivers/bus/mhi/host/pm.c drivers/clk/qcom/gcc-qcs404.c drivers/clk/qcom/gcc-sdm845.c drivers/clk/qcom/gcc-sm8150.c drivers/clk/qcom/gcc-sm8250.c drivers/clk/qcom/gpucc-sdm845.c drivers/clk/qcom/videocc-sm8150.c drivers/media/platform/qcom/venus/hfi_parser.c drivers/mmc/host/sdhci-msm.c drivers/net/ethernet/stmicro/stmmac/dwxgmac2.h drivers/net/ethernet/stmicro/stmmac/stmmac_ethtool.c drivers/net/usb/ax88179_178a.c drivers/rpmsg/qcom_glink_native.c drivers/scsi/ufs/ufs-qcom.c drivers/scsi/ufs/ufs-qcom.h drivers/slimbus/qcom-ngd-ctrl.c drivers/soc/qcom/cmd-db.c drivers/soc/qcom/llcc-qcom.c drivers/soc/qcom/rpmh-rsc.c drivers/soc/qcom/rpmh.c drivers/spi/spidev.c include/dt-bindings/clock/qcom,videocc-sm8150.h include/soc/qcom/cmd-db.h net/qrtr/ns.c net/unix/af_unix.c net/unix/garbage.c Change-Id: I86808e3d7f82fbbeafa85da596af9a922d495185 Signed-off-by:
Jaswanth Gundpalli <quic_jgundpal@quicinc.com>
-
Linux Build Service Account authored
-
Gao Wang authored
There is possibility that network will be used after free. This change is to fix this issue. Change-Id: I2368532df4fc4e75e8d8f2f259a989b5af5f9679 Signed-off-by:
Gao Wang <quic_gaowang@quicinc.com> (cherry picked from commit d6482d45) (cherry picked from commit d597d86d)
-
Anand Kulkarni authored
A persistence map is expected to hold refs=2 during its creation. However, the Fuzzy test can create a persistence map by configuring a mismatch between attributes and flags using the KEEP MAP attribute and FD NOMAP flags. This sets the map reference count to 1. The user then calls fastrpc_internal_munmap_fd to free the map since it doesn't check flags, which can cause a use-after-free (UAF) for the file map and shared buffer. Add a check to restrict DMA handle maps with invalid attributes. Change-Id: I2f024ef99cc2a0487010504166e3af3433d5302d Acked-by:
Santosh <quic_ssakore@quicinc.com> Signed-off-by:
Anand Kulkarni <quic_anankulk@quicinc.com> (cherry picked from commit 56cd0e3a) (cherry picked from commit d5d9265d)
-
- Feb 16, 2025
-
-
QCTECMDR Service authored
-
- Feb 13, 2025
-
-
QCTECMDR Service authored
-
Eric Dumazet authored
syzbot reported that nf_reject_ip6_tcphdr_put() was possibly sending garbage on the four reserved tcp bits (th->res1) Use skb_put_zero() to clear the whole TCP header, as done in nf_reject_ip_tcphdr_put() BUG: KMSAN: uninit-value in nf_reject_ip6_tcphdr_put+0x688/0x6c0 net/ipv6/netfilter/nf_reject_ipv6.c:255 nf_reject_ip6_tcphdr_put+0x688/0x6c0 net/ipv6/netfilter/nf_reject_ipv6.c:255 nf_send_reset6+0xd84/0x15b0 net/ipv6/netfilter/nf_reject_ipv6.c:344 nft_reject_inet_eval+0x3c1/0x880 net/netfilter/nft_reject_inet.c:48 expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline] nft_do_chain+0x438/0x22a0 net/netfilter/nf_tables_core.c:288 nft_do_chain_inet+0x41a/0x4f0 net/netfilter/nft_chain_filter.c:161 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xf4/0x400 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] NF_HOOK include/linux/netfilter.h:312 [inline] ipv6_rcv+0x29b/0x390 net/ipv6/ip6_input.c:310 __netif_receive_skb_one_core net/core/dev.c:5661 [inline] __netif_receive_skb+0x1da/0xa00 net/core/dev.c:5775 process_backlog+0x4ad/0xa50 net/core/dev.c:6108 __napi_poll+0xe7/0x980 net/core/dev.c:6772 napi_poll net/core/dev.c:6841 [inline] net_rx_action+0xa5a/0x19b0 net/core/dev.c:6963 handle_softirqs+0x1ce/0x800 kernel/softirq.c:554 __do_softirq+0x14/0x1a kernel/softirq.c:588 do_softirq+0x9a/0x100 kernel/softirq.c:455 __local_bh_enable_ip+0x9f/0xb0 kernel/softirq.c:382 local_bh_enable include/linux/bottom_half.h:33 [inline] rcu_read_unlock_bh include/linux/rcupdate.h:908 [inline] __dev_queue_xmit+0x2692/0x5610 net/core/dev.c:4450 dev_queue_xmit include/linux/netdevice.h:3105 [inline] neigh_resolve_output+0x9ca/0xae0 net/core/neighbour.c:1565 neigh_output include/net/neighbour.h:542 [inline] ip6_finish_output2+0x2347/0x2ba0 net/ipv6/ip6_output.c:141 __ip6_finish_output net/ipv6/ip6_output.c:215 [inline] ip6_finish_output+0xbb8/0x14b0 net/ipv6/ip6_output.c:226 NF_HOOK_COND include/linux/netfilter.h:303 [inline] ip6_output+0x356/0x620 net/ipv6/ip6_output.c:247 dst_output include/net/dst.h:450 [inline] NF_HOOK include/linux/netfilter.h:314 [inline] ip6_xmit+0x1ba6/0x25d0 net/ipv6/ip6_output.c:366 inet6_csk_xmit+0x442/0x530 net/ipv6/inet6_connection_sock.c:135 __tcp_transmit_skb+0x3b07/0x4880 net/ipv4/tcp_output.c:1466 tcp_transmit_skb net/ipv4/tcp_output.c:1484 [inline] tcp_connect+0x35b6/0x7130 net/ipv4/tcp_output.c:4143 tcp_v6_connect+0x1bcc/0x1e40 net/ipv6/tcp_ipv6.c:333 __inet_stream_connect+0x2ef/0x1730 net/ipv4/af_inet.c:679 inet_stream_connect+0x6a/0xd0 net/ipv4/af_inet.c:750 __sys_connect_file net/socket.c:2061 [inline] __sys_connect+0x606/0x690 net/socket.c:2078 __do_sys_connect net/socket.c:2088 [inline] __se_sys_connect net/socket.c:2085 [inline] __x64_sys_connect+0x91/0xe0 net/socket.c:2085 x64_sys_call+0x27a5/0x3ba0 arch/x86/include/generated/asm/syscalls_64.h:43 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was stored to memory at: nf_reject_ip6_tcphdr_put+0x60c/0x6c0 net/ipv6/netfilter/nf_reject_ipv6.c:249 nf_send_reset6+0xd84/0x15b0 net/ipv6/netfilter/nf_reject_ipv6.c:344 nft_reject_inet_eval+0x3c1/0x880 net/netfilter/nft_reject_inet.c:48 expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline] nft_do_chain+0x438/0x22a0 net/netfilter/nf_tables_core.c:288 nft_do_chain_inet+0x41a/0x4f0 net/netfilter/nft_chain_filter.c:161 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xf4/0x400 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] NF_HOOK include/linux/netfilter.h:312 [inline] ipv6_rcv+0x29b/0x390 net/ipv6/ip6_input.c:310 __netif_receive_skb_one_core net/core/dev.c:5661 [inline] __netif_receive_skb+0x1da/0xa00 net/core/dev.c:5775 process_backlog+0x4ad/0xa50 net/core/dev.c:6108 __napi_poll+0xe7/0x980 net/core/dev.c:6772 napi_poll net/core/dev.c:6841 [inline] net_rx_action+0xa5a/0x19b0 net/core/dev.c:6963 handle_softirqs+0x1ce/0x800 kernel/softirq.c:554 __do_softirq+0x14/0x1a kernel/softirq.c:588 Uninit was stored to memory at: nf_reject_ip6_tcphdr_put+0x2ca/0x6c0 net/ipv6/netfilter/nf_reject_ipv6.c:231 nf_send_reset6+0xd84/0x15b0 net/ipv6/netfilter/nf_reject_ipv6.c:344 nft_reject_inet_eval+0x3c1/0x880 net/netfilter/nft_reject_inet.c:48 expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline] nft_do_chain+0x438/0x22a0 net/netfilter/nf_tables_core.c:288 nft_do_chain_inet+0x41a/0x4f0 net/netfilter/nft_chain_filter.c:161 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xf4/0x400 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] NF_HOOK include/linux/netfilter.h:312 [inline] ipv6_rcv+0x29b/0x390 net/ipv6/ip6_input.c:310 __netif_receive_skb_one_core net/core/dev.c:5661 [inline] __netif_receive_skb+0x1da/0xa00 net/core/dev.c:5775 process_backlog+0x4ad/0xa50 net/core/dev.c:6108 __napi_poll+0xe7/0x980 net/core/dev.c:6772 napi_poll net/core/dev.c:6841 [inline] net_rx_action+0xa5a/0x19b0 net/core/dev.c:6963 handle_softirqs+0x1ce/0x800 kernel/softirq.c:554 __do_softirq+0x14/0x1a kernel/softirq.c:588 Uninit was created at: slab_post_alloc_hook mm/slub.c:3998 [inline] slab_alloc_node mm/slub.c:4041 [inline] kmem_cache_alloc_node_noprof+0x6bf/0xb80 mm/slub.c:4084 kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:583 __alloc_skb+0x363/0x7b0 net/core/skbuff.c:674 alloc_skb include/linux/skbuff.h:1320 [inline] nf_send_reset6+0x98d/0x15b0 net/ipv6/netfilter/nf_reject_ipv6.c:327 nft_reject_inet_eval+0x3c1/0x880 net/netfilter/nft_reject_inet.c:48 expr_call_ops_eval net/netfilter/nf_tables_core.c:240 [inline] nft_do_chain+0x438/0x22a0 net/netfilter/nf_tables_core.c:288 nft_do_chain_inet+0x41a/0x4f0 net/netfilter/nft_chain_filter.c:161 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xf4/0x400 net/netfilter/core.c:626 nf_hook include/linux/netfilter.h:269 [inline] NF_HOOK include/linux/netfilter.h:312 [inline] ipv6_rcv+0x29b/0x390 net/ipv6/ip6_input.c:310 __netif_receive_skb_one_core net/core/dev.c:5661 [inline] __netif_receive_skb+0x1da/0xa00 net/core/dev.c:5775 process_backlog+0x4ad/0xa50 net/core/dev.c:6108 __napi_poll+0xe7/0x980 net/core/dev.c:6772 napi_poll net/core/dev.c:6841 [inline] net_rx_action+0xa5a/0x19b0 net/core/dev.c:6963 handle_softirqs+0x1ce/0x800 kernel/softirq.c:554 __do_softirq+0x14/0x1a kernel/softirq.c:588 Fixes: c8d7b98b ("netfilter: move nf_send_resetX() code to nf_reject_ipvX modules") Reported-by:
syzbot <syzkaller@googlegroups.com> Signed-off-by:
Eric Dumazet <edumazet@google.com> Reviewed-by:
Simon Horman <horms@kernel.org> Reviewed-by:
Pablo Neira Ayuso <pablo@netfilter.org> Link: https://patch.msgid.link/20240913170615.3670897-1-edumazet@google.com (cherry picked from commit 9c778fe48d20ef362047e3376dee56d77f8500d4) Signed-off-by:
Paolo Abeni <pabeni@redhat.com> Change-Id: I5873a4d81e276a24c50d35e13bc423d53c8442d5 Signed-off-by:
xuesshi <quic_xuesshi@quicinc.com>
-
- Feb 12, 2025
-
-
QCTECMDR Service authored
-
QCTECMDR Service authored
-
QCTECMDR Service authored
-
- Jan 23, 2025
-
-
QCTECMDR Service authored
-
Gao Wang authored
There is possibility that network will be used after free. This change is to fix this issue. Change-Id: I2368532df4fc4e75e8d8f2f259a989b5af5f9679 Signed-off-by:
Gao Wang <quic_gaowang@quicinc.com> (cherry picked from commit d6482d45)
-
- Jan 22, 2025
-
-
Carlos Llamas authored
Binder objects are processed and copied individually into the target buffer during transactions. Any raw data in-between these objects is copied as well. However, this raw data copy lacks an out-of-bounds check. If the raw data exceeds the data section size then the copy overwrites the offsets section. This eventually triggers an error that attempts to unwind the processed objects. However, at this point the offsets used to index these objects are now corrupted. Unwinding with corrupted offsets can result in decrements of arbitrary nodes and lead to their premature release. Other users of such nodes are left with a dangling pointer triggering a use-after-free. This issue is made evident by the following KASAN report (trimmed): ================================================================== BUG: KASAN: slab-use-after-free in _raw_spin_lock+0xe4/0x19c Write of size 4 at addr ffff47fc91598f04 by task binder-util/743 CPU: 9 UID: 0 PID: 743 Comm: binder-util Not tainted 6.11.0-rc4 #1 Hardware name: linux,dummy-virt (DT) Call trace: _raw_spin_lock+0xe4/0x19c binder_free_buf+0x128/0x434 binder_thread_write+0x8a4/0x3260 binder_ioctl+0x18f0/0x258c [...] Allocated by task 743: __kmalloc_cache_noprof+0x110/0x270 binder_new_node+0x50/0x700 binder_transaction+0x413c/0x6da8 binder_thread_write+0x978/0x3260 binder_ioctl+0x18f0/0x258c [...] Freed by task 745: kfree+0xbc/0x208 binder_thread_read+0x1c5c/0x37d4 binder_ioctl+0x16d8/0x258c [...] ================================================================== To avoid this issue, let's check that the raw data copy is within the boundaries of the data section. Fixes: 6d98eb95b450 ("binder: avoid potential data leakage when copying txn") Cc: Todd Kjos <tkjos@google.com> Cc: stable@vger.kernel.org Signed-off-by:
Carlos Llamas <cmllamas@google.com> Bug: 352520660 Link: https://lore.kernel.org/all/20240822182353.2129600-1-cmllamas@google.com/ (cherry picked from commit f4e5b5151e55932279287c55d4e4a801fbf1df96) Signed-off-by:
Carlos Llamas <cmllamas@google.com> Change-Id: I1b2dd8403b63e5eeb58904558b7b542141c83fc2
-
Hangyu Hua authored
[ Upstream commit affc18fdc694190ca7575b9a86632a73b9fe043d ] q->bands will be assigned to qopt->bands to execute subsequent code logic after kmalloc. So the old q->bands should not be used in kmalloc. Otherwise, an out-of-bounds write will occur. Bug: 349777785 Fixes: c2999f7f ("net: sched: multiq: don't call qdisc_put() while holding tree lock") Signed-off-by:
Hangyu Hua <hbh25y@gmail.com> Acked-by:
Cong Wang <cong.wang@bytedance.com> Signed-off-by:
David S. Miller <davem@davemloft.net> Signed-off-by:
Sasha Levin <sashal@kernel.org> (cherry picked from commit 0f208fad86631e005754606c3ec80c0d44a11882) Signed-off-by:
Lee Jones <joneslee@google.com> Change-Id: Iec8413c39878596795420ae58bbe6974890cf2de
-
- Jan 21, 2025
-
-
QCTECMDR Service authored
-
Feng Chen authored
This reverts commit d3c54eff. Change-Id: Ic5bf9527521f0346edf635bddd790bd7ce5f0160 Signed-off-by:
Feng Chen <quic_fch@quicinc.com>
-
Linux Build Service Account authored
Merge "Revert "[net] sysctl: Move jit_enable and jit_kallsyms to pernet-subsys"" into kernel.lnx.5.15.r7-rel
-
Linux Build Service Account authored
-
Linux Build Service Account authored
-
QCTECMDR Service authored
-
Feng Chen authored
This reverts commit 0b9b6a4d. Change-Id: Ie01fc3667ba2d72d51ebf4c530441e0272846375 Signed-off-by:
Feng Chen <quic_fch@quicinc.com>
-
Feng Chen authored
This reverts commit 9438653c. Change-Id: I33d08e94af23b36b9b923bba2c4fb7b831791d34 Signed-off-by:
Feng Chen <quic_fch@quicinc.com>
-
Feng Chen authored
This reverts commit 649e4403. Change-Id: I7eb07df6719765b4e5351664207e8b7e84064ac9 Signed-off-by:
Feng Chen <quic_fch@quicinc.com>
-
Feng Chen authored
This reverts commit 6261b494. Change-Id: I2744a46bc97b057dec807047ab25bbef17393118 Signed-off-by:
Feng Chen <quic_fch@quicinc.com>
-
Futao He authored
This reverts commit c1c0d7b7. Reason for revert: common kernel code, better find upsteam patch and it does not affect stability much Change-Id: I86d415185f7c580cb880b859830cafd995e9232c Signed-off-by:
Futao He <quic_fhe@quicinc.com>
-
- Dec 23, 2024
-
-
Gao Wang authored
There is possibility that network will be used after free. This change is to fix this issue. Change-Id: I2368532df4fc4e75e8d8f2f259a989b5af5f9679 Signed-off-by:
Gao Wang <quic_gaowang@quicinc.com>
-
- Dec 22, 2024
-
-
Anand Kulkarni authored
A persistence map is expected to hold refs=2 during its creation. However, the Fuzzy test can create a persistence map by configuring a mismatch between attributes and flags using the KEEP MAP attribute and FD NOMAP flags. This sets the map reference count to 1. The user then calls fastrpc_internal_munmap_fd to free the map since it doesn't check flags, which can cause a use-after-free (UAF) for the file map and shared buffer. Add a check to restrict DMA handle maps with invalid attributes. Change-Id: I2f024ef99cc2a0487010504166e3af3433d5302d Acked-by:
Santosh <quic_ssakore@quicinc.com> Signed-off-by:
Anand Kulkarni <quic_anankulk@quicinc.com> (cherry picked from commit 56cd0e3a)
-
Anand Kulkarni authored
A persistence map is expected to hold refs=2 during its creation. However, the Fuzzy test can create a persistence map by configuring a mismatch between attributes and flags using the KEEP MAP attribute and FD NOMAP flags. This sets the map reference count to 1. The user then calls fastrpc_internal_munmap_fd to free the map since it doesn't check flags, which can cause a use-after-free (UAF) for the file map and shared buffer. Add a check to restrict DMA handle maps with invalid attributes. Change-Id: I2f024ef99cc2a0487010504166e3af3433d5302d Acked-by:
Santosh <quic_ssakore@quicinc.com> Signed-off-by:
Anand Kulkarni <quic_anankulk@quicinc.com> (cherry picked from commit 56cd0e3a)
-
- Dec 21, 2024
-
-
Linux Build Service Account authored
-
Linux Build Service Account authored
-
Feng Chen authored
Change-Id: I5cd0e25c451aa017389a39fdef9491d17b27aade Signed-off-by:
Feng Chen <quic_fch@quicinc.com> (cherry picked from commit aba9c008)
-