Merge tag 'android14-5.15.131_r00' into android-14-5.15

This catches the android14-5.15 branch up with the 5.15.131 LTS upstream
release.  It contains the following commits:

*   b92c49c7b8 Merge 5.15.131 into android14-5.15-lts
|\
| * aff03380bd Linux 5.15.131
| * cd8ab566cf usb: typec: tcpci: clear the fault status bit
| * 403b2e9409 usb: typec: tcpci: move tcpci.h to include/linux/usb/
| * f29483873e pinctrl: amd: Don't show `Invalid config param` errors
| * b911bef132 nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse
| * 1c6ddf739f nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers()
| * f6e61aef5c tcpm: Avoid soft reset when partner does not support get_status
| * da0e7d435e fsi: master-ast-cf: Add MODULE_FIRMWARE macro
| * 72eca651d7 firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
| * 907216337b serial: sc16is7xx: fix bug when first setting GPIO direction
| * 45d9611ebf serial: sc16is7xx: fix broken port 0 uart init
| * f90e267dd2 serial: qcom-geni: fix opp vote on shutdown
| * 46d13013b5 wifi: mt76: mt7921: do not support one stream on secondary antenna only
| * a5c2a467e9 Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
| * f49294ad68 staging: rtl8712: fix race condition
| * d17cec60e8 HID: wacom: remove the battery when the EKR is off
| * 842c7da3ee usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0
| * 276a906f81 usb: dwc3: meson-g12a: do post init to fix broken usb after resumption
| * 60f938e84f ALSA: usb-audio: Fix init call orders for UAC1
| * e949dd2a9b USB: serial: option: add FOXCONN T99W368/T99W373 product
| * c41411d8b3 USB: serial: option: add Quectel EM05G variant (0x030e)
| * 09baa839d4 modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules
| * 997a194914 rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff
| * 3d0f640860 net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index
| * da95090821 mmc: au1xmmc: force non-modular build and remove symbol_get usage
| * e3e68100c0 ARM: pxa: remove use of symbol_get()
| * bb5bf157b5 ksmbd: replace one-element array with flex-array member in struct smb2_ea_info
| * 2e3f57f74c ksmbd: fix wrong DataOffset validation of create context
| * b3ad7f39fd erofs: ensure that the post-EOF tails are all zeroed
* | 5879d78a5a Merge 5.15.130 into android14-5.15-lts
|\|
| * 8f790700c9 Linux 5.15.130
| * 69347c3340 rcu-tasks: Add trc_inspect_reader() checks for exiting critical section
| * 8046fb611f rcu-tasks: Wait for trc_read_check_handler() IPIs
| * da22db901c rcu-tasks: Fix IPI failure handling in trc_wait_for_one_reader
| * a0249d365a rcu: Prevent expedited GP from enabling tick on offline CPU
| * 7aec063d60 ARM: module: Use module_init_layout_section() to spot init sections
| * 4a8976052a arm64: module: Use module_init_layout_section() to spot init sections
| * f8a74159d1 arm64: module-plts: inline linux/moduleloader.h
| * 363bbb5008 module: Expose module_init_layout_section()
| * 758e3d0cb7 ACPI: thermal: Drop nocrt parameter
* | 7d5fd694ae ANDROID: GKI: Update the .stg defintion due to opaque type change.
* | d3d222d2f0 Revert "drm/display/dp: Fix the DP DSC Receiver cap size"
* | 7ae847d162 Merge 5.15.129 into android14-5.15-lts
|\|
| * 9e43368a33 Linux 5.15.129
| * d48016d748 mm,ima,kexec,of: use memblock_free_late from ima_free_kexec_buffer
| * 1c41cd30d5 mm: memory-failure: fix unexpected return value in soft_offline_page()
| * 0712721e4f mm: memory-failure: kill soft_offline_free_page()
| * efd02b5cad dma-buf/sw_sync: Avoid recursive lock during fence signal
| * 8dbf913520 pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function}
| * f1c0402b8e clk: Fix undefined reference to `clk_rate_exclusive_{get,put}'
| * 10bc3eddc6 scsi: core: raid_class: Remove raid_component_add()
| * d3d57cdbfd scsi: snic: Fix double free in snic_tgt_create()
| * ef56cc8889 can: raw: add missing refcount for memory leak fix
| * 930f3f1649 drm/i915: Fix premature release of request's reusable memory
| * 3cb86cc565 cgroup/cpuset: Free DL BW in case can_attach() fails
| * ffff4fc4ba sched/deadline: Create DL BW alloc, free & check overflow interface
| * 86aa907959 cgroup/cpuset: Iterate only if DEADLINE tasks are present
| * 43d8cbfefa sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets
| * d0eb4917f4 sched/cpuset: Bring back cpuset_mutex
| * 918879de0e cgroup/cpuset: Rename functions dealing with DEADLINE accounting
| * 78efab71a6 torture: Fix hang during kthread shutdown phase
| * c8fb97dd7f nfsd: use vfs setgid helper
| * 0196651186 nfs: use vfs setgid helper
| * a7a1849899 x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4
| * ad79f943c8 x86/fpu: Invalidate FPU state correctly on exec()
| * b190cf1f27 drm/display/dp: Fix the DP DSC Receiver cap size
| * c8aab333d4 drm/vmwgfx: Fix shader stage validation
| * b53ed41516 PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus
| * 60ba1bfa03 media: vcodec: Fix potential array out-of-bounds in encoder queue_setup
| * 544cd10def of: dynamic: Refactor action prints to not use "%pOF" inside devtree_lock
| * f1d4a58818 of: unittest: Fix EXPECT for parse_phandle_with_args_map() test
| * ce66cd4786 radix tree: remove unused variable
| * 898c8c5b11 lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels
| * ff90a4c6ed batman-adv: Hold rtnl lock during MTU update via netlink
| * ea38c0d9aa batman-adv: Fix batadv_v_ogm_aggr_send memory leak
| * 7f3f72eb8f batman-adv: Fix TT global entry leak when client roamed back
| * f7667b4988 batman-adv: Do not get eth header before batadv_check_management_packet
| * 3f9312dd75 batman-adv: Don't increase MTU when set by user
| * cde5a240d7 batman-adv: Trigger events for auto adjusted MTU
| * 22426e1ce6 selinux: set next pointer before attaching to list
| * 711595bfdc nfsd: Fix race to FREE_STATEID and cl_revoked
| * bd1697e122 NFS: Fix a use after free in nfs_direct_join_group()
| * 5f64261374 mm: add a call to flush_cache_vmap() in vmap_pfn()
| * 440c10034b ALSA: ymfpci: Fix the missing snd_card_free() call at probe error
| * 5cc7d81cf5 clk: Fix slab-out-of-bounds error in devm_clk_release()
| * 0f72859acf NFSv4: Fix dropped lock for racing OPEN and delegation return
| * 9c025420fe ibmveth: Use dcbf rather than dcbfl
| * 7e546bd089 Revert "KVM: x86: enable TDP MMU by default"
| * 67af12f558 net/ncsi: change from ndo_set_mac_address to dev_set_mac_address
| * 4451457d61 net/ncsi: make one oem_gma function for all mfr id
| * f683f4be80 bonding: fix macvlan over alb bond support
| * 0fa8046e92 net: remove bond_slave_has_mac_rcu()
| * f0ec97fca6 rtnetlink: Reject negative ifindexes in RTM_NEWLINK
| * 00247cfd2b rtnetlink: return ENODEV when ifname does not exist and group is given
| * 75cfb7de44 netfilter: nf_tables: fix out of memory error handling
| * f22954f8c5 netfilter: nf_tables: flush pending destroy work before netlink notifier
| * ff34403fef net/sched: fix a qdisc modification with ambiguous command request
| * 30624ea3f8 igc: Fix the typo in the PTM Control macro
| * f697c3ead1 igb: Avoid starting unnecessary workqueues
| * d7823d752c ice: fix receive buffer size miscalculation
| * ace1b0ae30 net: validate veth and vxcan peer ifindexes
| * 335be58541 net: bcmgenet: Fix return value check for fixed_phy_register()
| * 60a5034584 net: bgmac: Fix return value check for fixed_phy_register()
| * 5b52c9ba42 ipvlan: Fix a reference count leak warning in ipvlan_ns_exit()
| * 2bad37b6f6 dccp: annotate data-races in dccp_poll()
| * 9b015360e8 sock: annotate data-races around prot->memory_pressure
| * c52c6c0223 octeontx2-af: SDP: fix receive link config
| * ce6e2b14bc tracing: Fix memleak due to race between current_tracer and trace
| * ef748360ba tracing: Fix cpu buffers unavailable due to 'record_disabled' missed
| * fdf5804d74 can: raw: fix lockdep issue in raw_release()
| * 278fccf587 drm/amd/display: check TG is non-null before checking if enabled
| * a955e6a0e3 drm/amd/display: do not wait for mpc idle if tg is disabled
| * e0bd4f0c60 can: raw: fix receiver memory leak
| * b832174b7f jbd2: fix a race when checking checkpoint buffer busy
| * 9c31bb2684 jbd2: remove journal_clean_one_cp_list()
| * d91783e686 jbd2: remove t_checkpoint_io_list
| * a0ab49e7a7 ALSA: pcm: Fix potential data race at PCM memory allocation helpers
| * 2e56d380da fbdev: fix potential OOB read in fast_imageblit()
| * 14163f4a4f fbdev: Fix sys_imageblit() for arbitrary image widths
| * 5b60bd9081 fbdev: Improve performance of sys_imageblit()
| * 166f0bf456 MIPS: cpu-features: Use boot_cpu_type for CPU type based features
| * 8f106e9740 MIPS: cpu-features: Enable octeon_cache by cpu_type
| * d1d0b239f9 fs: dlm: fix mismatch of plock results from userspace
| * 77d334c446 fs: dlm: use dlm_plock_info for do_unlock_close
| * f9a33cc7d9 fs: dlm: change plock interrupted message to debug again
| * 7ac088841f fs: dlm: add pid to debug log
| * df9c842ab0 dlm: replace usage of found with dedicated list iterator variable
| * 33e9c610e3 dlm: improve plock logging if interrupted
| * d9ce077f8b PCI: acpiphp: Reassign resources on bridge if necessary
| * 8cc8645dd3 xprtrdma: Remap Receive buffers after a reconnect
| * 91a707507e NFSv4: fix out path in __nfs4_get_acl_uncached
| * 323b830eeb NFSv4.2: fix error handling in nfs42_proc_getxattr
| * 5de0a325c4 objtool/x86: Fix SRSO mess
* | 642354c26d Merge 5.15.128 into android14-5.15-lts
|\|
| * 5ddfe5cc87 Linux 5.15.128
| * 9080f4fcc2 x86/srso: Correct the mitigation status when SMT is disabled
| * 484eefc6ff objtool/x86: Fixup frame-pointer vs rethunk
| * 55f1cbeaa1 x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG
| * fa24cd0fbc x86/srso: Disable the mitigation on unaffected configurations
| * aa0777ce0d x86/CPU/AMD: Fix the DIV(0) initial fix attempt
| * bbe585239d x86/retpoline: Don't clobber RFLAGS during srso_safe_ret()
| * 19f23d16b0 x86/static_call: Fix __static_call_fixup()
| * df6495f203 x86/srso: Explain the untraining sequences a bit more
| * 43548590ad x86/cpu: Cleanup the untrain mess
| * 035e906bfc x86/cpu: Rename srso_(.*)_alias to srso_alias_\1
| * 19c1c04996 x86/cpu: Rename original retbleed methods
| * f77dbb9096 x86/cpu: Clean up SRSO return thunk mess
| * f624ce6c7f x86/ibt: Add ANNOTATE_NOENDBR
| * f1171d455d objtool: Add frame-pointer-specific function ignore
| * 08f7cfd44f x86/alternative: Make custom return thunk unconditional
| * 0d810eff09 x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk()
| * 8089aae602 x86/cpu: Fix __x86_return_thunk symbol type
| * 5b28fda5fd mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove
| * e8c5081da2 net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled
| * 431db3f48c virtio-net: set queues after driver_ok
| * d39fc9b94d af_unix: Fix null-ptr-deref in unix_stream_sendpage().
| * 9a4d8dc706 arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4
| * 6b64974e02 exfat: check if filename entries exceeds max filename length
| * 6065b30171 netfilter: set default timeout to 3 secs for sctp shutdown send and recv state
| * a00c5d2c20 drm/amd: flush any delayed gfxoff on suspend entry
| * d578c919de drm/qxl: fix UAF on handle creation
| * ff09f9e671 mmc: block: Fix in_flight[issue_type] value error
| * b803fedb6e mmc: wbsd: fix double mmc_free_host() in wbsd_init()
| * 961f7ce162 cifs: Release folio lock on fscache read hit.
| * cc3f194f46 ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces.
| * 18e27df4f2 serial: 8250: Fix oops for port->pm on uart_change_pm()
| * e9b8ee715d riscv: uaccess: Return the number of bytes effectively not copied
| * b2a331abcb ALSA: hda/realtek - Remodified 3k pull low procedure
| * dfb9676ed2 soc: aspeed: socinfo: Add kfree for kstrdup
| * c5ac7522a8 ASoC: meson: axg-tdm-formatter: fix channel slot allocation
| * fd346ef1cd ASoC: rt5665: add missed regulator_bulk_disable
| * e878458d82 ARM: dts: imx: Set default tuning step for imx6sx usdhc
| * 430c29a54e arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict
| * 03522d73a4 bus: ti-sysc: Flush posted write on enable before reset
| * 578371ce0d net: do not allow gso_size to be set to GSO_BY_FRAGS
| * 5fc4fd3f3e sock: Fix misuse of sk_under_memory_pressure()
| * fc3d82d295 net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset
| * f11c2802e1 i40e: fix misleading debug logs
| * 5ba2b936f3 iavf: fix FDIR rule fields masks validation
| * ae6834689f team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
| * 0ffbc341cf net: phy: broadcom: stub c45 read/write for 54810
| * bf221e5e4b netfilter: nft_dynset: disallow object maps
| * 9177869b85 ipvs: fix racy memcpy in proc_do_sync_threshold
| * 1adaec4758 netfilter: nf_tables: deactivate catchall elements in next generation
| * 82109740d6 netfilter: nf_tables: fix false-positive lockdep splat
| * b2f6d73395 drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs
| * 7207ee323a selftests: mirror_gre_changes: Tighten up the TTL test match
| * c2a6ffe3f1 net: phy: fix IRQ-based wake-on-lan over hibernate / power off
| * 8e5e967348 xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH
| * 075448a2eb xfrm: add NULL check in xfrm_update_ae_params
| * e1e04cc2ef ip_vti: fix potential slab-use-after-free in decode_session6
| * a1639a82ce ip6_vti: fix slab-use-after-free in decode_session6
| * 44b3d40967 xfrm: fix slab-use-after-free in decode_session6
| * a465ace883 net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure
| * fed1cd2cd3 net: af_key: fix sadb_x_filter validation
| * 1960f46807 net: xfrm: Fix xfrm_address_filter OOB read
| * 080dedb1ca i2c: designware: Handle invalid SMBus block data response length value
| * 416c538684 i2c: designware: Correct length byte validation logic
| * b966e9e1e2 btrfs: fix BUG_ON condition in btrfs_cancel_balance
| * 77698e6ff6 tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms
| * 2a52344643 tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux
| * 8ef25fb134 powerpc/rtas_flash: allow user copy to flash block cache objects
| * bb70e2b70f fbdev: mmp: fix value check in mmphw_probe()
| * 184f1b68bb i2c: hisi: Only handle the interrupt of the driver's transfer
| * c4e671dae5 i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue
| * b99f490ea8 cifs: fix potential oops in cifs_oplock_break
| * a5ae5a81bc vduse: Use proper spinlock for IRQ injection
| * 5b7d5c2dd6 virtio-mmio: don't break lifecycle of vm_dev
| * edf3b5aadb btrfs: move out now unused BG from the reclaim list
| * 170773563e ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node
| * 4ffbfe1c98 ARM: dts: imx6sll: fixup of operating points
| * e2ff5cf681 mmc: sunxi: fix deferred probing
| * f93e8c5a7b mmc: bcm2835: fix deferred probing
| * 4eeba5d476 USB: dwc3: fix use-after-free on core driver unbind
| * a78fe5c9d8 USB: dwc3: qcom: fix NULL-deref on suspend
| * 8a6b753402 tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A
| * 701bb5fee7 tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms
| * fa254ab7d0 tty: serial: fsl_lpuart: Add i.MXRT1050 support
| * 20351ddb1f usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume()
| * 31a0e60fe1 USB: dwc3: gadget: drop dead hibernation code
| * d9e004104e usb: dwc3: Fix typos in gadget.c
| * 2fa487a946 usb: dwc3: Remove DWC3 locking during gadget suspend/resume
| * 7dfb384e76 usb: dwc3: gadget: Synchronize IRQ between soft connect/disconnect
| * d3c82f24ee drm/amd/display: fix access hdcp_workqueue assert
| * 0ba6c7ba08 drm/amd/display: phase3 mst hdcp for multiple displays
| * 99c444d3c3 drm/amd/display: save restore hdcp state when display is unplugged from mst hub
| * 4f1beb75f6 ARM: dts: aspeed: asrock: Correct firmware flash SPI clocks
| * f84c2ca349 igc: read before write to SRRCTL register
| * 9fa82f031a iio: addac: stx104: Fix race condition when converting analog-to-digital
| * d31d04ec40 iio: addac: stx104: Fix race condition for stx104_write_raw()
| * 89a007f3a3 iio: stx104: Move to addac subdirectory
| * cadf8f2d7c iio: adc: stx104: Implement and utilize register structures
| * 6089d35434 iio: adc: stx104: Utilize iomap interface
| * 565b96d9a7 iio: add addac subdirectory
| * 49b830d75f ring-buffer: Do not swap cpu_buffer during resize process
| * 6657ecbcc3 powerpc/kasan: Disable KCOV in KASAN code
| * 8703b26387 ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()
| * 5ed4dbc137 ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760
| * c7d8b5f46f fs/ntfs3: Mark ntfs dirty when on-disk struct is corrupted
| * 3a00ec562f fs: ntfs3: Fix possible null-pointer dereferences in mi_read()
| * e7799bb4db fs/ntfs3: Enhance sanity check while generating attr_list
| * ef568da1fd drm/amdgpu: Fix potential fence use-after-free v2
| * 5720c7e185 Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally
| * 548a6b64b3 Bluetooth: L2CAP: Fix use-after-free
| * 302d045963 watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub)
| * 2ea70379e4 firewire: net: fix use after free in fwnet_finish_incoming_packet()
| * 97fd1c8e9c pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()
| * 85e8881500 gfs2: Fix possible data races in gfs2_show_options()
| * eafb79d244 usb: chipidea: imx: add missing USB PHY DPDM wakeup setting
| * 7bdb4c9630 usb: chipidea: imx: don't request QoS for imx8ulp
| * 25decbbb66 thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx()
| * 776b34615a media: platform: mediatek: vpu: fix NULL ptr dereference
| * cb174344bf usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push
| * 1676748aa2 media: v4l2-mem2mem: add lock to protect parameter num_rdy
| * 9850867042 smb: client: fix warning in cifs_smb3_do_mount()
| * a3f252436e ovl: check type and offset of struct vfsmount in ovl_entry
| * 1a650d3ccd RDMA/mlx5: Return the firmware result upon destroying QP/RQ
| * 9631d88503 HID: add quirk for 03f0:464a HP Elite Presenter Mouse
| * 4921792e04 drm/amdgpu: install stub fence into potential unused fence pointers
| * fd41646d43 HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard
| * ff10cd3e9b dma-remap: use kvmalloc_array/kvfree for larger dma memory remap
| * e9ce774052 ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion
| * 7d53d1e476 iopoll: Call cpu_relax() in busy loops
| * ca66e9dd98 ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings
| * cc15908308 PCI: tegra194: Fix possible array out of bounds access
| * e2d10f1de1 net: tls: avoid discarding data on record close
| * 9a15ca8939 net/tls: Multi-threaded calls to TX tls_dev_del
| * 2d93157b7e net/tls: Perform immediate device ctx cleanup when possible
| * 51222e1c77 macsec: use DEV_STATS_INC()
| * 3d64a232e4 macsec: Fix traffic counters/statistics
| * 396a192140 selftests: forwarding: tc_actions: Use ncat instead of nc
| * d61a0886d3 selftests: forwarding: tc_actions: cleanup temporary files when test is aborted
| * a798977df6 mmc: sdhci-f-sdh30: Replace with sdhci_pltfm
* | e87edba21f Merge 5.15.127 into android14-5.15-lts
|\|
| * f6f7927ac6 Linux 5.15.127
| * c597d8cb0d timers/nohz: Last resort update jiffies on nohz_full IRQ entry
| * b4d36e6c5d timers/nohz: Switch to ONESHOT_STOPPED in the low-res handler when the tick is stopped
| * c3b954a51b tick: Detect and fix jiffies update stall
| * af99918f0e sch_netem: fix issues in netem_change() vs get_dist_table()
| * 5d094d4e7b alpha: remove __init annotation from exported page_is_ram()
| * f8d6d25756 scsi: qedf: Fix firmware halt over suspend and resume
| * 85db1cd174 scsi: qedi: Fix firmware halt over suspend and resume
| * e70469c289 scsi: fnic: Replace return codes in fnic_clean_pending_aborts()
| * 6bc7f4c8c2 scsi: core: Fix possible memory leak if device_add() fails
| * 461f8ac666 scsi: snic: Fix possible memory leak if device_add() fails
| * 171e117cdc scsi: 53c700: Check that command slot is not NULL
| * 7a792b3d88 scsi: storvsc: Fix handling of virtual Fibre Channel timeouts
| * 0f52d7b782 scsi: core: Fix legacy /proc parsing buffer overflow
| * b757ef99df netfilter: nf_tables: report use refcount overflow
| * 9bdbbcf9d1 nvme-rdma: fix potential unbalanced freeze & unfreeze
| * d68f8ef6ef nvme-tcp: fix potential unbalanced freeze & unfreeze
| * ae6e21f8bb btrfs: set cache_block_group_error if we find an error
| * 314135b7ba btrfs: reject invalid reloc tree root keys with stack dump
| * 69dd147de4 btrfs: exit gracefully if reloc roots don't match
| * c40d4b60c5 btrfs: don't stop integrity writeback too early
| * 555e126dd3 ibmvnic: Handle DMA unmapping of login buffs in release functions
| * 34fcc82382 ibmvnic: Unmap DMA login rsp buffer on send login fail
| * cee62753cf ibmvnic: Enforce stronger sanity checks on login response
| * 27e8db8380 net/mlx5: Skip clock update work when device is in error state
| * f638fc2f73 net/mlx5: Allow 0 for total host VFs
| * 086a80eb62 dmaengine: mcf-edma: Fix a potential un-allocated memory access
| * 7e1dc94b2d nexthop: Fix infinite nexthop bucket dump when using maximum nexthop ID
| * 608a4327c2 nexthop: Make nexthop bucket dump more efficient
| * 4457300cfd nexthop: Fix infinite nexthop dump when using maximum nexthop ID
| * 91307347d6 net: hns3: add wait until mac link down
| * 094310eb2b net: hns3: refactor hclge_mac_link_status_wait for interface reuse
| * 1ae9703c2e net: phy: at803x: remove set/get wol callbacks for AR8032
| * 7d496cd83a RDMA/umem: Set iova in ODP flow
| * f78a4238a8 wifi: cfg80211: fix sband iftype data lookup for AP_VLAN
| * 26a27dd760 drm/rockchip: Don't spam logs in atomic check
| * 918c1e6843 IB/hfi1: Fix possible panic during hotplug remove
| * df21468bfd iavf: fix potential races for FDIR filters
| * b1f985cf1c drivers: net: prevent tun_build_skb() to exceed the packet size limit
| * f239c9e1d9 dccp: fix data-race around dp->dccps_mss_cache
| * 49a1fee22f bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves
| * 789fcd94c9 xsk: fix refcount underflow in error path
| * e958081219 tunnels: fix kasan splat when generating ipv4 pmtu error
| * 7903311b2c net/packet: annotate data-races around tp->status
| * f4614e379b mISDN: Update parameter type of dsp_cmx_send()
| * 3961761af3 bpf, sockmap: Fix bug that strp_done cannot be called
| * 20d53895d5 bpf, sockmap: Fix map type error in sock_map_del_link
| * a09c258cfa net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail()
| * 85af0b226c selftests: forwarding: tc_flower: Relax success criterion
| * 7b3fa99526 selftests: forwarding: Switch off timeout
| * e410f85ebc selftests: forwarding: Skip test when no interfaces are specified
| * 4a44994526 selftests: forwarding: ethtool_extended_state: Skip when using veth pairs
| * b8d216e9c6 selftests: forwarding: ethtool: Skip when using veth pairs
| * b9dfb80d9f selftests: forwarding: Add a helper to skip test when using veth pairs
| * b973eb76df selftests/rseq: Fix build with undefined __weak
| * b8b8db5857 drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes
| * 4c6767c8bf x86: Move gds_ucode_mitigated() declaration to header
| * f919cbc904 x86/speculation: Add cpu_show_gds() prototype
| * 9290ef14c9 x86/mm: Fix VDSO and VVAR placement on 5-level paging machines
| * 829409510d x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405
| * c41a22b93d x86/srso: Fix build breakage with the LLVM linker
| * c2372b1559 usb: typec: tcpm: Fix response to vsafe0V event
| * f776b94ccd usb: common: usb-conn-gpio: Prevent bailing out if initial role is none
| * 00cc14b52d usb: dwc3: Properly handle processing of pending events
| * 7a11d1e262 usb-storage: alauda: Fix uninit-value in alauda_check_media()
| * 945e1b3c36 misc: rtsx: judge ASPM Mode to set PETXCFG Reg
| * 03eebad962 binder: fix memory leak in binder_init()
| * a8e2ae6296 iio: adc: ina2xx: avoid NULL pointer dereference on OF device match
| * 2df8ae1e42 iio: cros_ec: Fix the allocation size for cros_ec_command
| * a7cedc2b76 io_uring: correct check for O_TMPFILE
| * 697bc23463 selftests/bpf: Fix sk_assign on s390x
| * 1272772621 selftests/bpf: Workaround verification failure for fexit_bpf2bpf/func_replace_return_code
| * ee701208f4 selftests/bpf: make test_align selftest more robust
| * 683d2969a0 bpf: aggressively forget precise markings during state checkpointing
| * 2516deeb87 bpf: stop setting precise in current state
| * c47d0178ad bpf: allow precision tracking for programs with subprogs
| * 3645510cf9 nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput
| * 36a3b560c7 radix tree test suite: fix incorrect allocation size for pthreads
| * 8d10284243 hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100
| * 3ad4ba2b61 drm/amd/display: check attr flag before set cursor degamma on DCN3+
| * 621204fca0 drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap()
| * 64e6253f64 drm/nouveau/gr: enable memory loads on helper invocation on all channels
| * bcd9eeb3a3 riscv,mmio: Fix readX()-to-delay() ordering
| * 57772ae9b3 dmaengine: pl330: Return DMA_PAUSED when transaction is paused
| * 3ca8f5c733 ipv6: adjust ndisc_is_useropt() to also return true for PIO
| * 6cde607776 mmc: moxart: read scr register without changing byte order
| * 3f00757ab4 wireguard: allowedips: expand maximum node depth
| * aeb9749076 ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea()
| * 595679098b ksmbd: validate command request size
* | 19d2b2b033 Merge 5.15.126 into android14-5.15-lts
|\|
| * 24c4de4069 Linux 5.15.126
| * aeb4db8ab7 PM: sleep: wakeirq: fix wake irq arming
| * b5d3a4251b PM / wakeirq: support enabling wake-up irq after runtime_suspend called
| * a36b522767 soundwire: fix enumeration completion
| * 7996facaf0 soundwire: bus: pm_runtime_request_resume on peripheral attachment
| * c91c07ae08 selftests/rseq: Play nice with binaries statically linked against glibc 2.35+
| * 1cdb50faf7 selftests/rseq: check if libc rseq support is registered
| * 0f1f471b91 drm/imx/ipuv3: Fix front porch adjustment upon hactive aligning
| * 5058c14440 powerpc/mm/altmap: Fix altmap boundary check
| * eb7a5e4d14 mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op()
| * 70643e98cb mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts
| * 1796b492f8 mtd: rawnand: rockchip: fix oobfree offset and description
| * f6807b62fb mtd: rawnand: omap_elm: Fix incorrect type in assignment
| * 596be6716b ext2: Drop fragment support
| * 0ccfe21949 fs: Protect reconfiguration of sb read-write from racing writes
| * 27d0f755d6 net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb
| * fbe5a2fed8 Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb
| * afd9a31b5a fs/sysv: Null check to prevent null-ptr-deref bug
| * 80ec112c19 fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_load_attr_list()
| * 0d6f639f1d file: reinstate f_pos locking optimization for regular files
| * b44d28b98f bpf, cpumap: Make sure kthread is running before map update returns
| * 8089eb93d6 drm/ttm: check null pointer before accessing when swapping
| * ef0d07c668 open: make RESOLVE_CACHED correctly test for O_TMPFILE
| * c81bdf8f9f bpf: Disable preemption in bpf_event_output
| * ae07cfe2b0 rbd: prevent busy loop when requesting exclusive lock
| * 7978bcca4c wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC)
| * 32ca6a55e1 net: tap_open(): set sk_uid from current_fsuid()
| * 4ed3eed99e net: tun_chr_open(): set sk_uid from current_fsuid()
| * adacc3a954 arm64: dts: stratix10: fix incorrect I2C property for SCL signal
| * b92c88009d mtd: rawnand: meson: fix OOB available bytes for ECC
| * b0875c583e mtd: spinand: toshiba: Fix ecc_get_status
| * 1c33ca1e19 exfat: release s_lock before calling dir_emit()
| * 8a34a242cf exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree
| * a74878207b x86/CPU/AMD: Do not leak quotient data after a division by 0
| * b8f029fc40 firmware: arm_scmi: Drop OF node reference in the transport channel setup
| * 287c2c8677 ceph: defer stopping mdsc delayed_work
| * 98b521d10e USB: zaurus: Add ID for A-300/B-500/C-700
| * cd6872f2cf libceph: fix potential hang in ceph_osdc_notify()
| * e5f5b4a898 scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices
| * 212a9a3c67 scsi: zfcp: Defer fc_rport blocking until after ADISC response
| * dac3827253 tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen
| * 4517782e1b tcp_metrics: annotate data-races around tm->tcpm_net
| * e842a68667 tcp_metrics: annotate data-races around tm->tcpm_vals[]
| * d3184bea4a tcp_metrics: annotate data-races around tm->tcpm_lock
| * 9a7367cbe3 tcp_metrics: annotate data-races around tm->tcpm_stamp
| * 6f6bd67f48 tcp_metrics: fix addr_same() helper
| * b0acbcf1e7 prestera: fix fallback to previous version on same major version
| * d6d9d0f5a5 net/mlx5: fs_core: Skip the FTs in the same FS_TYPE_PRIO_CHAINS fs_prio
| * c999fb1039 net/mlx5: fs_core: Make find_closest_ft more generic
| * 32ef2c0c6c vxlan: Fix nexthop hash size
| * 1bb54a21f4 ip6mr: Fix skb_under_panic in ip6mr_cache_report()
| * 64e3affee2 s390/qeth: Don't call dev_close/dev_open (DOWN/UP)
| * a0da2684db net: dcb: choose correct policy to parse DCB_ATTR_BCN
| * 193333229a net: netsec: Ignore 'phy-mode' on SynQuacer in DT mode
| * 766c9dd00c net: korina: handle clk prepare error in korina_probe()
| * 6cecfdf650 net: ll_temac: fix error checking of irq_of_parse_and_map()
| * 3761ff4f86 net: ll_temac: Switch to use dev_err_probe() helper
| * 5c534640a7 bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire
| * 79c3d81c9a net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free
| * 9edf795502 net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free
| * 262430dfc6 net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free
| * b58d34068f bpf, cpumap: Handle skb as well when clean up ptr_ring
| * f04f6d9b3b net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
| * 2c55d49415 net: add missing data-race annotation for sk_ll_usec
| * e934c50c48 net: add missing data-race annotations around sk->sk_peek_off
| * fdd8d8d54d net: add missing READ_ONCE(sk->sk_rcvbuf) annotation
| * 98f0d1db3a net: add missing READ_ONCE(sk->sk_sndbuf) annotation
| * 0d1047b77b net: add missing READ_ONCE(sk->sk_rcvlowat) annotation
| * 6c058a1f67 net: annotate data-races around sk->sk_max_pacing_rate
| * 2950c5ac65 qed: Fix scheduling in a tasklet while getting stats
| * a19952dbb5 qed: Fix kernel-doc warnings
| * 6d8c259f48 mISDN: hfcpci: Fix potential deadlock on &hc->lock
| * 8dedcc6af3 net: sched: cls_u32: Fix match key mis-addressing
| * 675d29de69 perf test uprobe_from_different_cu: Skip if there is no gcc
| * 0f6e3d8d7f net: dsa: fix value check in bcm_sf2_sw_probe()
| * 047508edd6 rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length
| * cc9ebceaa6 bpf: Add length check for SK_DIAG_BPF_STORAGE_REQ_MAP_FD parsing
| * 8f9a04c742 net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer()
| * 00cecb0a8f net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx
| * 4c224ea31b wifi: cfg80211: Fix return value in scan logic
| * 8e72db3ffa KVM: s390: fix sthyi error handling
| * 809edb4262 word-at-a-time: use the same return type for has_zero regardless of endianness
| * b7880809d7 arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux
| * 804e72062b iommu/arm-smmu-v3: Document nesting-related errata
| * 744e6b80b8 iommu/arm-smmu-v3: Add explicit feature for nesting
| * fd86b59442 iommu/arm-smmu-v3: Document MMU-700 erratum 2812531
| * 2de9f3dcfe iommu/arm-smmu-v3: Work around MMU-600 erratum 1076982
| * a850fa85d4 arm64: errata: Add detection for TRBE write to out-of-range
| * 073699df4a arm64: errata: Add workaround for TSB flush failures
| * 44b45e8161 net/mlx5: Free irqs only on shutdown callback
| * 40601542c4 perf: Fix function pointer case
| * c12fa4ac89 io_uring: gate iowait schedule on having pending requests
* | de0b2bd1c2 UPSTREAM: x86/srso: Fix build breakage with the LLVM linker
* | edaca1a5a8 Merge 5.15.125 into android14-5.15-lts
|\|
| * c275eaaaa3 Linux 5.15.125
| * 754e0c7c4a x86: fix backwards merge of GDS/SRSO bit
| * b14a3924c2 xen/netback: Fix buffer overrun triggered by unusual packet
| * 153f9a7b02 x86/srso: Tie SBPB bit setting to microcode patch detection
| * df4c3823cb x86/srso: Fix return thunks in generated code
| * 0071b17eb6 x86/srso: Add IBPB on VMEXIT
| * 5398faac76 x86/srso: Add IBPB
| * c24aaa7dde x86/srso: Add SRSO_NO support
| * 4e9115e194 x86/srso: Add IBPB_BRTYPE support
| * b35087763a x86/srso: Add a Speculative RAS Overflow mitigation
| * c3b4c64452 x86/cpu, kvm: Add support for CPUID_80000021_EAX
| * 236dd71333 x86/bugs: Increase the x86 bugs vector size to two u32s
| * 0242a8bdef Documentation/x86: Fix backwards on/off logic about YMM support
| * 27a72e3508 x86/mm: Initialize text poking earlier
| * d0317b9502 mm: Move mm_cachep initialization to mm_init()
| * 8e4c253087 x86/mm: Use mm_alloc() in poking_init()
| * 13ec5cb4c1 x86/mm: fix poking_init() for Xen PV guests
| * 3e90080d56 x86/xen: Fix secondary processors' FPU initialization
| * 348741a9e4 KVM: Add GDS_NO support to KVM
| * 59d78655f8 x86/speculation: Add Kconfig option for GDS
| * 0cc5643b63 x86/speculation: Add force option to GDS mitigation
| * 348a89e201 x86/speculation: Add Gather Data Sampling mitigation
| * a094d3b309 x86/fpu: Move FPU initialization into arch_cpu_finalize_init()
| * 59f2739111 x86/fpu: Mark init functions __init
| * bb9c20d903 x86/fpu: Remove cpuinfo argument from init functions
| * de8b7ce4c5 x86/init: Initialize signal frame size late
| * 041d929233 init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init()
| * 8ae795ed61 init: Invoke arch_cpu_finalize_init() earlier
| * 7e270cebaf init: Remove check_bugs() leftovers
| * 285384ac24 um/cpu: Switch to arch_cpu_finalize_init()
| * 6ea4217864 sparc/cpu: Switch to arch_cpu_finalize_init()
| * 21a1fc8d13 sh/cpu: Switch to arch_cpu_finalize_init()
| * dfeb371a27 mips/cpu: Switch to arch_cpu_finalize_init()
| * 4baf46a3ba m68k/cpu: Switch to arch_cpu_finalize_init()
| * 8c8165cd25 ia64/cpu: Switch to arch_cpu_finalize_init()
| * de8c592cc5 ARM: cpu: Switch to arch_cpu_finalize_init()
| * 75da6209d3 x86/cpu: Switch to arch_cpu_finalize_init()
| * 0774fc2177 init: Provide arch_cpu_finalize_init()
* | a662b58fb5 Revert "ring-buffer: Fix wrong stat of cpu_buffer->read"
* | e02ff715d5 Revert "locking/rtmutex: Fix task->pi_waiters integrity"
* | 5f5a985931 Merge 5.15.124 into android14-5.15-lts
|\|
| * 38d4ca22a5 Linux 5.15.124
| * 78001ffa9b selftests: mptcp: join: only check for ip6tables if needed
| * 66cf5f394a ASoC: cs42l51: fix driver to properly autoload with automatic module loading
| * 3359fdf49d io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq
| * 374edda0db selftests: mptcp: sockopt: use 'iptables-legacy' if available
| * 43bbe1a091 cpufreq: intel_pstate: Drop ACPI _PSS states table patching
| * 73b4cbed91 ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily
| * cd03166968 ACPI: processor: perflib: Use the "no limit" frequency QoS
| * e8e93e2f01 tracing: Fix trace_event_raw_event_synth() if else statement
| * f3b6e63004 rbd: retrieve and check lock owner twice before blocklisting
| * bb25c5c0e4 rbd: harden get_lock_owner_info() a bit
| * b223e9ffb6 rbd: make get_lock_owner_info() return a single locker or NULL
| * 098d0b9ba0 dm cache policy smq: ensure IO doesn't prevent cleaner policy progress
| * 7c9b8cca49 ceph: never send metrics if disable_send_metrics is set
| * e443b3a508 ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register
| * 585355a76e s390/dasd: fix hanging device after quiesce/resume
| * 0061453d6e virtio-net: fix race between set queues and probe
| * 427d42838c KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid
| * 4ed1549129 locking/rtmutex: Fix task->pi_waiters integrity
| * c579caef7c irqchip/gic-v4.1: Properly lock VPEs when doing a directLPI invalidation
| * 6cb3c511af irq-bcm6345-l1: Do not assume a fixed block to cpu mapping
| * 354e8bd5f5 tpm_tis: Explicitly check for error code
| * 8130c32b4a nfsd: Remove incorrect check in nfsd4_validate_stateid
| * 9b8a31a231 file: always lock position for FMODE_ATOMIC_POS
| * 1f5ea62a0f btrfs: check for commit error at btrfs_attach_transaction_barrier()
| * 883c3ed9a1 btrfs: check if the transaction was aborted at btrfs_wait_for_commit()
| * a7abb1690f hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled
| * 3f3cdca844 hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature
| * a676ddc4ca ALSA: hda/relatek: Enable Mute LED on HP 250 G8
| * dd125fcd58 Revert "xhci: add quirk for host controllers that don't update endpoint DCS"
| * 5138c22831 tty: n_gsm: fix UAF in gsm_cleanup_mux
| * baf420e303 staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext()
| * acacdbe0f7 staging: r8712: Fix memory leak in _r8712_init_xmit_priv()
| * ba2975efe9 Documentation: security-bugs.rst: clarify CVE handling
| * 28ae486f8e Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group
| * 98a118840b Revert "usb: xhci: tegra: Fix error check"
| * 2eaa43508a usb: xhci-mtk: set the dma max_seg_size
| * cd2d96c4bc usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config
| * 3af06a8502 USB: quirks: add quirk for Focusrite Scarlett
| * 8fb5a01196 usb: ohci-at91: Fix the unhandle interrupt when resume
| * 6366b11785 usb: dwc3: don't reset device side if dwc3 was configured as host-only
| * 6f126e0263 usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy
| * a2d2fa6612 Revert "usb: dwc3: core: Enable AutoRetry feature in the controller"
| * 97620ed1bc can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED
| * 0ac13ef002 USB: serial: simple: sort driver entries
| * 378e036237 USB: serial: simple: add Kaufmann RKS+CAN VCP
| * 5b9a5cf1bf USB: serial: option: add Quectel EC200A module support
| * 3990913997 USB: serial: option: support Quectel EM060K_128
| * b800c0d557 serial: sifive: Fix sifive_serial_console_setup() section
| * 8fa462ad0f serial: 8250_dw: Preserve original value of DLF register
| * dc4f6c537f serial: qcom-geni: drop bogus runtime pm state update
| * 41c487de4c KVM: VMX: Don't fudge CR0 and CR4 for restricted L2 guest
| * 5883a4e847 KVM: Grab a reference to KVM for VM and vCPU stats file descriptors
| * 0f7a2b5671 USB: gadget: Fix the memory leak in raw_gadget driver
| * 2f9bfccced usb: gadget: call usb_gadget_check_config() to verify UDC capability
| * a49884561a Revert "usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init()"
| * 813cede7b2 tracing: Fix warning in trace_buffered_event_disable()
| * 23e8a65f9a ring-buffer: Fix wrong stat of cpu_buffer->read
| * ae5b8b1c2e ata: pata_ns87415: mark ns87560_tf_read static
| * 6bbbe1b216 RDMA/irdma: Report correct WC error
| * bd79de8bd3 drm/amd: Fix an error handling mistake in psp_sw_init()
| * 4e1c1d7429 dm raid: protect md_stop() with 'reconfig_mutex'
| * 0c4db5a04d dm raid: clean up four equivalent goto tags in raid_ctr()
| * 2e321ee96f dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths
| * 4b9f3ef1f3 block: Fix a source code comment in include/uapi/linux/blkzoned.h
| * 2861b33820 ASoC: fsl_spdif: Silence output on stop
| * 5ec0e4deee drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb()
| * b79a0e71d6 RDMA/bnxt_re: Prevent handling any completions after qp destroy
| * 3ad5f655eb RDMA/mthca: Fix crash when polling CQ for shared QPs
| * c5b5dbcbf9 RDMA/irdma: Fix data race on CQP request done
| * bf0f9f65b7 RDMA/irdma: Fix data race on CQP completion stats
| * fd6e50ec2c RDMA/irdma: Add missing read barriers
| * 5fbb5068d2 drm/msm/adreno: Fix snapshot BINDLESS_DATA size
| * 4e9d4a2161 drm/msm/dpu: drop enum dpu_core_perf_data_bus_id
| * 6ab756a55e RDMA/mlx4: Make check for invalid flags stricter
| * 9dde876a4d tipc: stop tipc crypto on failure in tipc_node_create
| * df019bc124 tipc: check return value of pskb_trim()
| * 42afa7ef66 benet: fix return value check in be_lancer_xmit_workarounds()
| * 95cf4fa31b net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64
| * 98f6bbdfc0 net/sched: mqprio: add extack to mqprio_parse_nlattr()
| * b1e85c9d28 net/sched: mqprio: refactor nlattr parsing to a separate function
| * 5bee91121c netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID
| * 98bcfcaecc netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR
| * 50cbb9d195 netfilter: nft_set_rbtree: fix overlap expiration walk
| * feba294c45 igc: Fix Kernel Panic during ndo_tx_timeout callback
| * 8412fe3686 platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100
| * 238420a24d net: stmmac: Apply redundant write work around on 4.xx too
| * 9be8ec5a0c team: reset team's flags when down link is P2P device
| * bf2d7b63e2 bonding: reset bond's flags when down link is P2P device
| * c28b393876 ice: Fix memory management in ice_ethtool_fdir.c
| * ecb741a17c tcp: Reduce chance of collisions in inet6_hashfn().
| * dd48780a7b ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address
| * 46e4029735 ethernet: atheros: fix return value check in atl1e_tso_csum()
| * 6d8a71e4c3 phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe()
| * 49f5b3c949 vxlan: calculate correct header length for GPE
| * 77396fa909 vxlan: move to its own directory
| * 96dbc68b7f net: hns3: fix wrong bw weight of disabled tc issue
| * 9755714d23 net: hns3: fix wrong tc bandwidth weight data issue
| * 01460ac6ff net: phy: marvell10g: fix 88x3310 power up
| * 57743a86cc iavf: check for removal state before IAVF_FLAG_PF_COMMS_FAILED
| * 1542e399a1 iavf: fix potential deadlock on allocation failure
| * 5a40483557 i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir()
| * c9b936984d media: staging: atomisp: select V4L2_FWNODE
| * 6aa7cb3bb5 soundwire: qcom: update status correctly with mask
| * 3f28ec4a40 phy: qcom-snps-femto-v2: properly enable ref clock
| * ac3fe4c2a7 phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend
| * e7c0c5af51 phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc
| * 450ef59bef phy: qcom-snps: Use dev_err_probe() to simplify code
| * d6f9258281 drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel
| * fc399b0fdf drm/amdgpu: fix vkms crtc settings
| * aa56bcff46 scsi: qla2xxx: Fix hang in task management
| * 58daf4e870 scsi: qla2xxx: Add debug prints in the device remove path
| * f90d44e5bb scsi: qla2xxx: Fix task management cmd fail due to unavailable resource
| * 01366f0b65 scsi: qla2xxx: Fix task management cmd failure
| * 25cea82ea2 scsi: qla2xxx: Multi-que support for TMF
| * 2e18fd3f61 scsi: qla2xxx: Remove unused declarations for qla2xxx
| * ace6bed424 tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails
| * 30c8ba1da3 Revert "tracing: Add "(fault)" name injection to kernel probes"
| * 5f52389bdd tracing: Allow synthetic events to pass around stacktraces
| * e7b4d24fa0 tracing/probes: Fix to avoid double count of the string length on the array
| * 3a1a229712 tracing/probes: Add symstr type for dynamic events
| * 7ac170d93b pwm: meson: fix handling of period/duty if greater than UINT_MAX
| * bae3c43a9d pwm: meson: Simplify duplicated per-channel tracking
| * 5cb0349cfc cifs: if deferred close is disabled then close files immediately
| * c600e23fbc ksmbd: remove internal.h include
| * c8117ac423 cifs: use fs_context for automounts
| * 5076cc8bc1 cifs: missing directory in MAINTAINERS file
| * da60170558 drm/ttm: never consider pinned BOs for eviction&swap
| * c556573e4b tty: fix hang on tty device with no_room set
| * d262770b95 n_tty: Rename tail to old_tail in n_tty_read()
| * 7738335d73 drm/ttm: Don't leak a resource on eviction error
| * 4400b96587 drm/ttm: Don't print error message if eviction was interrupted
| * 354cdda79a fs: dlm: interrupt posix locks only when process is killed
| * 97e7a0f8de dlm: rearrange async condition return
| * 75ce95abc6 dlm: cleanup plock_op vs plock_xop
| * b409d8df9b PCI: rockchip: Don't advertise MSI-X in PCIe capabilities
| * cbd1494e51 PCI: rockchip: Fix window mapping and address translation for endpoint
| * eb39c4c051 PCI: rockchip: Remove writes to unused registers
| * 05f13e85fb PCI/ASPM: Avoid link retraining race
| * 52d274956a PCI/ASPM: Factor out pcie_wait_for_retrain()
| * cf8c181500 PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link()
| * 8b9249d74c i2c: nomadik: Remove a useless call in the remove function
| * f07d8d345b i2c: nomadik: Use devm_clk_get_enabled()
| * 4954c87053 i2c: nomadik: Remove unnecessary goto label
| * 24562f0a46 i2c: Improve size determinations
| * 9845744e57 i2c: Delete error messages for failed memory allocations
| * 89eae1f0aa btrfs: fix race between quota disable and relocation
| * b19e905212 gpio: mvebu: fix irq domain leak
| * a999660042 gpio: mvebu: Make use of devm_pwmchip_add
| * 34fe5fbc20 pwm: Add a stub for devm_pwmchip_add()
| * f3d2344811 gpio: tps68470: Make tps68470_gpio_output() always set the initial value
| * 21d063d27b io_uring: don't audit the capability check in io_uring_create()
| * 49a2686add KVM: s390: pv: fix index value of replaced ASCE
| * fee1e6a735 jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint
* | d737715c00 Merge 5.15.123 into android14-5.15-lts
|\|
| * 09996673e3 Linux 5.15.123
| * e6c2f1ce41 Revert "drm/amd/display: edp do not add non-edid timings"
| * 68eafe2947 nixge: fix mac address error handling again
| * 22f4093a42 tracing/histograms: Return an error if we fail to add histogram to hist_vars list
| * 78471c3ad3 jbd2: recheck chechpointing non-dirty buffer
| * 0ae6b6d217 net: phy: prevent stale pointer dereference in phy_init()
| * b7168d2906 tcp: annotate data-races around fastopenq.max_qlen
| * accb138c10 tcp: annotate data-races around icsk->icsk_user_timeout
| * 6b88371f00 tcp: annotate data-races around tp->notsent_lowat
| * 4f0a31f732 tcp: annotate data-races around rskq_defer_accept
| * ff0fedfc75 tcp: annotate data-races around tp->linger2
| * e187d88f3b tcp: annotate data-races around icsk->icsk_syn_retries
| * d5617eeb54 tcp: annotate data-races around tp->keepalive_probes
| * 9b2296a2ad tcp: annotate data-races around tp->keepalive_intvl
| * f70ebecdf3 tcp: annotate data-races around tp->keepalive_time
| * 0bcee93252 tcp: annotate data-races around tp->tcp_tx_delay
| * 10013f764a netfilter: nf_tables: skip bound chain on rule flush
| * dbe1a82d46 netfilter: nf_tables: skip bound chain in netns release path
| * 706ce3c81b netfilter: nft_set_pipapo: fix improper element removal
| * 62615b895a netfilter: nf_tables: fix spurious set element insertion failure
| * c17b4ec9cc llc: Don't drop packet from non-root netns.
| * 2400ae8fd8 fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe
| * 40276640be Revert "tcp: avoid the lookup process failing to get sk in ehash table"
| * b04ab5243e net:ipv6: check return value of pskb_trim()
| * b87a7e3a33 net: ipv4: Use kfree_sensitive instead of kfree
| * 5dd4d1ff8b tcp: annotate data-races around tcp_rsk(req)->ts_recent
| * fa941f53a2 igc: Prevent garbled TX queue with XDP ZEROCOPY
| * e35dc107a1 bpf: Fix subprog idx logic in check_max_stack_depth
| * 4e87eb2248 octeontx2-pf: Dont allocate BPIDs for LBK interfaces
| * 87fc9616d6 security: keys: Modify mismatched function name
| * 0fb37ce6c0 iavf: Fix out-of-bounds when setting channels on remove
| * 345c44e18c iavf: Fix use-after-free in free_netdev
| * 52ed161463 net: sched: cls_bpf: Undo tcf_bind_filter in case of an error
| * 5ed16ecae5 net: ethernet: mtk_eth_soc: handle probe deferral
| * 39479093a4 ethernet: use of_get_ethdev_address()
| * cb1e666ec0 of: net: add a helper for loading netdev->dev_addr
| * 43da399e50 ethernet: use eth_hw_addr_set() instead of ether_addr_copy()
| * 3fb402bd20 bridge: Add extack warning when enabling STP in netns.
| * ec4ac15ece net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field()
| * 6a5d6096ae pinctrl: amd: Use amd_pinconf_set() for all config options
| * 4727cece29 perf build: Fix library not found error when using CSLIBS
| * 29fb046ec0 fbdev: imxfb: warn about invalid left/right margin
| * 5d19146753 spi: bcm63xx: fix max prepend length
| * 2febd5f81e FS: JFS: Check for read-only mounted filesystem in txBegin
| * 3e94d0d378 FS: JFS: Fix null-ptr-deref Read in txBegin
| * 13ae3f2fd2 MIPS: dec: prom: Address -Warray-bounds warning
| * 39f6292d75 fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
| * 985f966669 udf: Fix uninitialized array access for some pathnames
| * 579d814de8 quota: fix warning in dqgrab()
| * 32c2f51fff quota: Properly disable quotas when add_dquot_ref() fails
| * d363075066 ALSA: emu10k1: roll up loops in DSP setup code for Audigy
| * c0d7dbc6b7 drm/radeon: Fix integer overflow in radeon_cs_parser_init
| * bca9fb7a5a ext4: correct inline offset when handling xattrs in inode body
| * 87336783d0 ASoC: codecs: wcd938x: fix soundwire initialisation race
| * a14527c394 ASoC: codecs: wcd938x: fix codec initialisation race
| * 4ca000456e ASoC: codecs: wcd934x: fix resource leaks on component remove
| * 5a34d25205 ASoC: codecs: wcd938x: fix missing mbhc init error handling
| * aa44782a02 ASoC: codecs: wcd938x: fix resource leaks on component remove
| * 90ab6446eb ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove
| * a05a277a8d ASoC: codecs: wcd938x: fix missing clsh ctrl error handling
| * 574ffa6fdf ASoC: fsl_sai: Disable bit clock with transmitter
| * 925bbcdbc4 drm/amd/display: Keep PHY active for DP displays on DCN31
| * 742340371b drm/amd/display: Disable MPC split by default on special asic
| * 1369d0c586 drm/client: Fix memory leak in drm_client_modeset_probe
| * a85e23a1ef drm/client: Fix memory leak in drm_client_target_cloned
| * 82690148ff selftests: tc: add ConnTrack procfs kconfig
| * 3c3941bb1e can: bcm: Fix UAF in bcm_proc_show()
| * 1484537876 regmap: Account for register length in SMBus I/O limits
| * 6ce258d0c6 regmap: Drop initial version of maximum transfer length fixes
| * d3ee089a16 selftests: tc: add 'ct' action kconfig dep
| * 4a888b22cc selftests: tc: set timeout to 15 minutes
| * 62ee584032 fuse: ioctl: translate ENOSYS in outarg
| * ab80a901f8 btrfs: zoned: fix memory leak after finding block group with super blocks
| * 6ba7ac692a fuse: revalidate: don't invalidate if interrupted
| * c9060caab4 btrfs: fix warning when putting transaction with qgroups enabled after abort
| * 232a104e38 perf probe: Add test for regression introduced by switch to die_get_decl_file()
| * 9aecfebea2 keys: Fix linking a duplicate key to a keyring's assoc_array
| * 0b24b5e187 ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx
| * 2d04042a9f ALSA: hda/realtek: Add quirk for Clevo NS70AU
| * a5de09b7f9 ALSA: hda/realtek - remove 3k pull low procedure
* | 19f4d8d2d0 Merge android14-5.15 into android14-5.15-lts
* | 72b4713d5e Merge 5.15.122 into android14-5.15-lts
|\|
| * 5c6a716301 Linux 5.15.122
| * be824fdb82 x86/cpu/amd: Add a Zenbleed fix
| * 5398be2c48 x86/cpu/amd: Move the errata checking functionality up
* | 2b60f8671a Revert "Revert "8250: add support for ASIX devices with a FIFO bug""
* | 4b20633d79 BACKPORT: mm/damon/ops-common: atomically test and clear young on ptes and pmds
* | 9f5bde3ccf Merge 5.15.121 into android14-5.15-lts
|\|
| * cdd3cdb682 Linux 5.15.121
| * 30580f3a33 drm/atomic: Fix potential use-after-free in nonblocking commits
| * ab2fa2fafb net/sched: sch_qfq: reintroduce lmax bound check for MTU
| * 204d7c36e8 MIPS: kvm: Fix build error with KVM_MIPS_DEBUG_COP0_COUNTERS enabled
| * 522ee1b303 scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue
| * 0715da5139 scsi: qla2xxx: Pointer may be dereferenced
| * 541af83572 scsi: qla2xxx: Correct the index of array
| * 1ccd52b790 scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()
| * 5a52a2e14f scsi: qla2xxx: Fix potential NULL pointer dereference
| * 89250e775d scsi: qla2xxx: Fix buffer overrun
| * 4406fe8a96 scsi: qla2xxx: Avoid fcport pointer dereference
| * 748d8f8698 scsi: qla2xxx: Array index may go out of bound
| * 079c8264ed scsi: qla2xxx: Wait for io return on terminate rport
| * 25d63eb730 tracing/probes: Fix to update dynamic data counter if fetcharg uses it
| * 8277bcacf1 tracing/probes: Fix not to count error code to total length
| * 610193a23f selftests: mptcp: depend on SYN_COOKIES
| * c8b375871e selftests: mptcp: sockopt: return error if wrong mark
| * 3b5d9b7b87 tracing: Fix null pointer dereference in tracing_err_log_open()
| * 391da52c87 xtensa: ISS: fix call to split_if_spec
| * 179feeeef6 ftrace: Fix possible warning on checking all pages used in ftrace_process_locs()
| * bb14a93bcc ring-buffer: Fix deadloop issue on reading trace_pipe
| * 3e36cc94d6 net: ena: fix shift-out-of-bounds in exponential backoff
| * b763e63424 samples: ftrace: Save required argument registers in sample trampolines
| * 954792db9f tracing: Fix memory leak of iter->temp when reading trace_pipe
| * 97f54b330c tracing/histograms: Add histograms to hist_vars if they have referenced variables
| * b45a33897f s390/decompressor: fix misaligned symbol build error
| * 1856cf9132 bus: ixp4xx: fix IXP4XX_EXP_T1_MASK
| * 7269c250dd Revert "8250: add support for ASIX devices with a FIFO bug"
| * 20f7c4d51c soundwire: qcom: fix storing port config out-of-bounds
| * 39a0e723d3 opp: Fix use-after-free in lazy_opp_tables after probe deferral
| * 0ff4a97ac2 meson saradc: fix clock divider mask length
| * e5fdd73c88 xhci: Show ZHAOXIN xHCI root hub speed correctly
| * 6eaedbffec xhci: Fix TRB prefetch issue of ZHAOXIN hosts
| * 328b18a42a xhci: Fix resume issue of some ZHAOXIN hosts
| * d9c91ef5d8 ceph: don't let check_caps skip sending responses for revoke msgs
| * db8ca8d9b4 libceph: harden msgr2.1 frame segment length checks
| * 974ac045a0 firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool()
| * becf8c69b7 tty: serial: imx: fix rs485 rx after tx
| * 9dd8091959 tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk
| * 073dbbe574 tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error
| * 21e2fe510a serial: atmel: don't enable IRQs prematurely
| * af4e0ce2af drm/ttm: Don't leak a resource on swapout move error
| * 22c16c896c drm/amdgpu: avoid restore process run into dead loop.
| * 85b9335d8e drm/amd/display: Correct `DMUB_FW_VERSION` macro
| * 9ced7e65c3 drm/amdgpu: fix clearing mappings for BOs that are always valid in VM
| * 0121d83ddf drm/rockchip: vop: Leave vblank enabled in self-refresh
| * 941a395e96 drm/atomic: Allow vblank-enabled + self-refresh "disable"
| * 54163ad21e fs: dlm: return positive pid value for F_GETLK
| * 866bf37b7c dm init: add dm-mod.waitfor to wait for asynchronously probed block devices
| * 4f61488541 md/raid0: add discard support for the 'original' layout
| * 3435c5674e mfd: pm8008: Fix module autoloading
| * 560c458340 misc: pci_endpoint_test: Re-init completion for every test
| * 14bdee38e9 misc: pci_endpoint_test: Free IRQs before removing the device
| * eec34da87b PCI: rockchip: Set address alignment for endpoint mode
| * 750fd00a0a PCI: rockchip: Use u32 variable to access 32-bit registers
| * 875d7a7f85 PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core
| * 7b0026977a PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked
| * 049d774b8b PCI: rockchip: Write PCI Device ID to correct register
| * 20c62b3c1e PCI: rockchip: Assert PCI Configuration Enable bit after probe
| * e8cc74b6b4 PCI: qcom: Disable write access to read only registers for IP v2.3.3
| * 7b2f1ddc94 PCI: Add function 1 DMA alias quirk for Marvell 88SE9235
| * 1d24c5b10d PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold
| * f930cf3f21 dm integrity: reduce vmalloc space footprint on 32-bit architectures
| * 70564215ad hwrng: imx-rngc - fix the timeout for init and self check
| * de984faecd jfs: jfs_dmap: Validate db_l2nbperpage while mounting
| * d04a3ff04c ext4: only update i_reserved_data_blocks on successful block allocation
| * c327b83c59 ext4: turn quotas off if mount failed after enabling quotas
| * 8830523440 ext4: fix to check return value of freeze_bdev() in ext4_shutdown()
| * c7514dceb7 ext4: fix wrong unit use in ext4_mb_new_blocks
| * 5523851fad ext4: get block from bh in ext4_free_blocks for fast commit replay
| * ba92af119b ext4: fix wrong unit use in ext4_mb_clear_bb
| * 951ee9c9bb ext4: Fix reusing stale buffer heads from last failed mounting
| * cd517f9a9d MIPS: KVM: Fix NULL pointer dereference
| * fd89522a61 MIPS: Loongson: Fix cpu_probe_loongson() again
| * 0e1854f87b erofs: fix compact 4B support for 16k block size
| * e4e7f67cc1 arm64: errata: Add detection for TRBE overwrite in FILL mode
| * affdbc8fbc powerpc/security: Fix Speculation_Store_Bypass reporting on Power10
| * 9f1627d8b0 misc: fastrpc: Create fastrpc scalar with correct buffer count
| * faea67e6a5 powerpc: Fail build if using recordmcount with binutils v2.37
| * 7eeed3ed1a mm/damon/ops-common: atomically test and clear young on ptes and pmds
| * 7efc5bee24 net: bcmgenet: Ensure MDIO unregistration has clocks enabled
| * 626c1c2913 mtd: rawnand: meson: fix unaligned DMA buffers handling
| * e08295290c tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
| * 936adde9c3 pinctrl: amd: Only use special debounce behavior for GPIO 0
| * 0bcf6b12e6 pinctrl: amd: Detect and mask spurious interrupts
| * dff67c64f6 pinctrl: amd: Detect internal GPIO0 debounce handling
| * cc5050add0 pinctrl: amd: Fix mistake in handling clearing pins at startup
| * 982c29e0d2 f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io()
| * 333feb7ba8 fs/ntfs3: Check fields while reading
| * 04d2c9a6cb nvme-pci: fix DMA direction of unmapping integrity data
| * c58e45fbea nvme-pci: remove nvme_queue from nvme_iod
| * 91d3554ab1 net/sched: sch_qfq: account for stab overhead in qfq_enqueue
| * 8e0326cbc4 net/sched: sch_qfq: refactor parsing of netlink parameters
| * 78a0900e8d net/sched: make psched_mtu() RTNL-less safe
| * 31976c68be netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write()
| * 8a128e601f riscv: mm: fix truncation warning on RV32
| * 3bd945532d net/sched: flower: Ensure both minimum and maximum ports are specified
| * d26299f50f bpf: cpumap: Fix memory leak in cpu_map_update_elem
| * 099abb1cd2 wifi: airo: avoid uninitialized warning in airo_get_rate()
| * 0e9ebc1745 erofs: fix fsdax unavailability for chunk-based regular files
| * 41ccbc2ecb erofs: decouple basic mount options from fs_context
| * ed84618f8d erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF
| * e649333bcf octeontx2-pf: Add additional check for MCAM rules
| * c62da24de3 drm/i915: Fix one wrong caching mode enum usage
| * 567397dd8e riscv, bpf: Fix inconsistent JIT image generation
| * 4e4e1f99bb bpf, riscv: Support riscv jit to provide bpf_line_info
| * 420d30d367 igc: Fix inserting of empty frame for launchtime
| * efc7f25937 igc: Fix launchtime before start of cycle
| * d29387922b kernel/trace: Fix cleanup logic of enable_trace_eprobe
| * 7aefc43277 platform/x86: wmi: Break possible infinite loop when parsing GUID
| * 02081e5718 platform/x86: wmi: move variables
| * f3583db898 platform/x86: wmi: use guid_t and guid_equal()
| * 3b6fef4110 platform/x86: wmi: remove unnecessary argument
| * 82abd1c37d ipv6/addrconf: fix a potential refcount underflow for idev
| * 1d63fdf6d3 NTB: ntb_tool: Add check for devm_kcalloc
| * 0aa187a999 NTB: ntb_transport: fix possible memory leak while device_register() fails
| * 7e475cf97c ntb: intel: Fix error handling in intel_ntb_pci_driver_init()
| * 3326ecef63 NTB: amd: Fix error handling in amd_ntb_pci_driver_init()
| * fe1a2ed411 ntb: idt: Fix error handling in idt_pci_driver_init()
| * 7f2153c1ae udp6: fix udp6_ehashfn() typo
| * 3fabca5d9c icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev().
| * ea438eed94 net: prevent skb corruption on frag list segmentation
| * 02474292a4 net: bgmac: postpone turning IRQs off to avoid SoC hangs
| * 1417dd787a ionic: remove WARN_ON to prevent panic_on_warn
| * aa915d12c1 gve: Set default duplex configuration to full
| * 5b55f2d6ef net/sched: cls_fw: Fix improper refcount update leads to use-after-free
| * 1d263bbdc5 net: mvneta: fix txq_map in case of txq_number==1
| * 4a4804e6ae bpf: Fix max stack depth check for async callbacks
| * 1b555dff83 scsi: qla2xxx: Fix error code in qla2x00_start_sp()
| * 6e8af127dd igc: Handle PPS start time programming for past time values
| * 809ea3a3eb igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings
| * 82ac62d76a net/mlx5e: Check for NOT_READY flag state after locking
| * 4892e1e548 net/mlx5e: fix memory leak in mlx5e_ptp_open
| * c61303ae2c net/mlx5e: fix double free in mlx5e_destroy_flow_table
| * f4b1f26251 igc: Remove delay during TX ring configuration
| * b3540c0de8 drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags
| * 9dbc0fa2e8 drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime
| * 486b2551b0 drm/panel: simple: Add connector_type for innolux_at043tn24
| * eb94740351 ksmbd: validate session id and tree id in the compound request
| * 3813eee515 ksmbd: fix out-of-bound read in smb2_write
| * 35f450f54d ksmbd: validate command payload size
| * 08871ede83 ksmbd: use ksmbd_req_buf_next() in ksmbd_smb2_check_message()
| * d528faa9e8 workqueue: clean up WORK_* constant types, clarify masking
| * aed37b12a2 net: lan743x: Don't sleep in atomic context
| * d9e1cfae8d io_uring: add reschedule point to handle_tw_list()
| * f8307d862c io_uring: Use io_schedule* in cqring wait
| * ecb9443b20 block/partition: fix signedness issue for Amiga partitions
| * 478a7a30c3 tty: serial: fsl_lpuart: add earlycon for imx8ulp platform
| * 75308d64c0 wireguard: netlink: send staged packets when setting initial private key
| * 8c660cfd72 wireguard: queueing: use saner cpu selection wrapping
| * 870dcc31c0 netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
| * 041e2ac88c netfilter: nf_tables: do not ignore genmask when looking up chain by id
| * 6f03ce2f1a netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
| * 2bd6f13734 netfilter: nf_tables: unbind non-anonymous set if rule construction fails
| * 30235c2457 fanotify: disallow mount/sb marks on kernel internal pseudo fs
| * d97481c7b2 ovl: fix null pointer dereference in ovl_get_acl_rcu()
| * db42d2bf4f fs: no need to check source
| * 86b93cbfe1 leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename
| * ecc8d95067 ARM: orion5x: fix d2net gpio initialization
| * 1c401bb993 ARM: dts: qcom: ipq4019: fix broken NAND controller properties override
| * 02b5d96f7d ASoC: mediatek: mt8173: Fix snd_soc_component_initialize error path
| * 5f35f98e56 ASoC: mediatek: mt8173: Fix irq error path
| * 6e7f6b4b5c btrfs: do not BUG_ON() on tree mod log failure at __btrfs_cow_block()
| * bdc8a582e1 btrfs: fix extent buffer leak after tree mod log failure at split_node()
| * 7ba0da31dd btrfs: fix race when deleting quota root from the dirty cow roots list
| * bacd1c80e3 btrfs: reinsert BGs failed to reclaim
| * d1ca553f94 btrfs: bail out reclaim process if filesystem is read-only
| * d8e172616f btrfs: delete unused BGs while reclaiming BGs
| * 12b6d68498 btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile
| * dd15d1c5c2 fs: avoid empty option when generating legacy mount string
| * 79b9ab357b jffs2: reduce stack usage in jffs2_build_xattr_subsystem()
| * 5ca021be52 ipvs: increase ip_vs_conn_tab_bits range for 64BIT
| * 6db001a7ed fs: Lock moved directories
| * 40f99ad8e2 fs: Establish locking order for unrelated directories
| * 8fdae421c2 Revert "f2fs: fix potential corruption when moving a directory"
| * eca9c3d86d ext4: Remove ext4 locking of moved directory
| * 487f229efe shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs
| * 17bdba70a8 autofs: use flexible array in ioctl structure
| * e7acd18e5e integrity: Fix possible multiple allocation in integrity_inode_get()
| * f4e0809d3a um: Use HOST_DIR for mrproper
| * f67b0e3081 bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent
| * 991e9c186a bcache: Remove unnecessary NULL point check in node allocations
| * cbdd5b3322 bcache: fixup btree_cache_wait list damage
| * 99d0599742 mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used.
| * c893918bf4 mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS
| * 4a489c8e9c mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M
| * 5b555f2500 mmc: core: disable TRIM on Kingston EMMC04G-M627
| * 8e29835366 io_uring: wait interruptibly for request completions on exit
| * e5da56c682 NFSD: add encoding of op_recall flag for write delegation
| * 8a77b1d466 i2c: qup: Add missing unwind goto in qup_i2c_probe()
| * 5bf90e5e79 btrfs: do not BUG_ON() on tree mod log failure at balance_level()
| * e15eb4ec86 extcon: usbc-tusb320: Convert to i2c's .probe_new()
| * 112c15d097 i2c: xiic: Don't try to handle more interrupt events after error
| * 9eaef43fef i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process()
| * 0fa0cd1f98 apparmor: fix missing error check for rhashtable_insert_fast
| * 196f6c7190 sh: dma: Fix DMA channel offset calculation
| * 6342e46566 s390/qeth: Fix vipa deletion
| * 307623bae6 octeontx-af: fix hardware timestamp configuration
| * deee40944a net: dsa: tag_sja1105: fix MAC DA patching from meta frames
| * e4db7f4369 pptp: Fix fib lookup calls.
| * a4284246fc riscv: move memblock_allow_resize() after linear mapping is ready
| * ae682149bc net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX
| * edd944b70a xsk: Honor SO_BINDTODEVICE on bind
| * 428ccde924 tcp: annotate data races in __tcp_oow_rate_limited()
| * 0dad52a840 net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode
| * ada440952d powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y
| * f3380d895e ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()
| * e425e2ba93 octeontx2-af: Add validation before accessing cgx and lmac
| * eeaf264cd4 octeontx2-af: Fix mapping for NIX block from CGX connection
| * d58d718136 f2fs: fix error path handling in truncate_dnode()
| * c0dd447558 mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
| * 217b6ea8cf spi: bcm-qspi: return error if neither hif_mspi nor mspi is available
| * 2e2e5f9300 net: dsa: vsc73xx: fix MTU configuration
| * b8aedf29db ibmvnic: Do not reset dql stats on NON_FATAL err
| * 6a5a705fa8 Add MODULE_FIRMWARE() for FIRMWARE_TG357766.
| * a6527128fe net/sched: act_ipt: add sanity checks on table name and hook locations
| * 1fba2510b5 sctp: fix potential deadlock on &net->sctp.addr_wq_lock
| * baa76d9b61 media: cec: i2c: ch7322: also select REGMAP
| * 677c5707ec drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times
| * 2a0acbc6b7 rtc: st-lpc: Release some resources in st_rtc_probe() in case of error
| * 7834580ca1 md/raid10: fix the condition to call bio_end_io_acct()
| * d623fd42a0 pwm: mtk_disp: Fix the disable flow of disp_pwm
| * db3c7f3eb8 pwm: ab8500: Fix error code in probe()
| * 05b35ea06d pwm: sysfs: Do not apply state to already disabled PWMs
| * aa12faec23 pwm: imx-tpm: force 'real_period' to be zero in suspend
| * 07e229f06e phy: tegra: xusb: check return value of devm_kzalloc()
| * f7454b8fd2 mfd: stmpe: Only disable the regulators if they are enabled
| * a9ccf140a2 KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler
| * 2070f3e0bc KVM: s390: vsie: fix the length of APCB bitmap
| * 52f371952a mfd: stmfx: Nullify stmfx->vdd in case of error
| * b1dbc919c1 mfd: stmfx: Fix error path in stmfx_chip_init
| * 9783c2ec8d nvmem: rmem: Use NVMEM_DEVID_AUTO
| * e6bd54f497 test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation
| * 22c7e378b0 serial: 8250_omap: Use force_suspend and resume for system suspend
| * 10f6656c95 Revert "usb: common: usb-conn-gpio: Set last role to unknown before initial detection"
| * 76ac2acb75 mfd: intel-lpss: Add missing check for platform_get_resource
| * 0e8b1a2835 usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe()
| * f232c1caac usb: common: usb-conn-gpio: Set last role to unknown before initial detection
| * dfda400a4d usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe()
| * 81ecef54d8 usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove()
| * f219ea71ee KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
| * de846dec7a media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var()
| * 7ad558baf6 media: venus: helpers: Fix ALIGN() of non power of two
| * 3bedb7a273 mfd: rt5033: Drop rt5033-battery sub-device
| * a77616f5a3 coresight: Fix loss of connection info when a module is unloaded
| * ca9e766c8a kernfs: fix missing kernfs_idr_lock to remove an ID from the IDR
| * e7ecade51b serial: 8250: lock port for UART_IER access in omap8250_irq()
| * c1a4ad35c5 serial: 8250: lock port for stop_rx() in omap8250_irq()
| * c2194a3610 usb: hide unused usbfs_notify_suspend/resume functions
| * ecf26d6e1b usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
| * b10200650e extcon: Fix kernel doc of property capability fields to avoid warnings
| * 44e383e22a extcon: Fix kernel doc of property fields to avoid warnings
| * a8ea7ed644 usb: gadget: u_serial: Add null pointer check in gserial_suspend
| * b626cd5e4a usb: dwc3: qcom: Fix potential memory leak
| * 1cee6f0410 clk: qcom: ipq6018: fix networking resets
| * 6ad5ded420 clk: qcom: reset: support resetting multiple bits
| * 40844343a8 clk: qcom: reset: Allow specifying custom reset delay
| * cab904bf50 media: i2c: Correct format propagation for st-mipid02
| * 784a8027b8 media: usb: siano: Fix warning due to null work_func_t function pointer
| * 1e1af31c4c media: videodev2.h: Fix struct v4l2_input tuner index comment
| * a3727915b3 media: usb: Check az6007_read() return value
| * 2a50c146cb clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks
| * 8d762ad800 clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs
| * 10e2b1c5d8 serial: 8250: omap: Fix freeing of resources on failed register
| * a1a5c56060 usb: dwc2: Fix some error handling paths
| * fa1547b471 usb: dwc2: platform: Improve error reporting for problems during .remove()
| * 0a9c0fa3e9 sh: j2: Use ioremap() to translate device tree address into kernel memory
| * 629e97f0c8 w1: fix loop in w1_fini()
| * cb263e9b6d w1: w1_therm: fix locking behavior in convert_t
| * fbf4ace39b SUNRPC: Fix UAF in svc_tcp_listen_data_ready()
| * 92905470a1 block: increment diskseq on all media change events
| * 8744a9eda7 block: change all __u32 annotations to __be32 in affs_hardblocks.h
| * de4d538380 block: add overflow checks for Amiga partition support
| * bc0129a644 block: fix signed int overflow in Amiga partition support
| * 92a37fc522 ALSA: jack: Fix mutex call in snd_jack_report()
| * 2f533bcb07 ALSA: hda/realtek: Add quirk for Clevo NPx0SNx
| * 5bcdfe1544 iio: accel: fxls8962af: fixup buffer scan element type
| * 8cc75ce657 iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF
| * 92cee2da5b iio: adc: ad7192: Fix internal/external clock selection
| * f88a05ef44 iio: adc: ad7192: Fix null ad7192_state pointer access
| * b84998a407 phy: tegra: xusb: Clear the driver reference in usb-phy dev
| * 8585c6cb03 usb: dwc3: gadget: Propagate core init errors to UDC during pullup
| * 9cd1627ff0 USB: serial: option: add LARA-R6 01B PIDs
| * fb348857e7 io_uring: ensure IOPOLL locks around deferred work
| * 4909d0ad17 bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page
| * 902256de2b ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error
| * b3889a5990 ksmbd: avoid field overflow warning
| * ef26b05023 efi/libstub: Disable PCI DMA before grabbing the EFI memory map
| * 5c883c42bd kbuild: Disable GCOV for *.mod.o
| * 3d9f6fc71d hwrng: st - keep clock enabled while hwrng is registered
| * cd5bd4b713 dax/kmem: Pass valid argument to memory_group_register_static
| * 2a327c8c31 dax: Introduce alloc_dev_dax_id()
| * 9c2f993b6c dax: Fix dax_mapping_release() use after free
| * 63fb45ddc4 SMB3: Do not send lease break acknowledgment if all file handles have been closed
| * 7f6023610b NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION
| * 6d9f814b26 crypto: qat - unmap buffers before free for RSA
| * 718f30e30b crypto: qat - unmap buffer before free for DH
| * 3894f5880f crypto: qat - Use helper to set reqsize
| * 30682e1214 crypto: kpp - Add helper to set reqsize
| * 41bd35a161 crypto: qat - use reference to structure in dma_map_single()
| * a3fcd2d23d crypto: qat - replace get_current_node() with numa_node_id()
| * 9560559cba crypto: qat - honor CRYPTO_TFM_REQ_MAY_SLEEP flag
| * f6ee18555b ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard
| * 5e0424cd8a modpost: fix off by one in is_executable_section()
| * 7c0c62e557 crypto: marvell/cesa - Fix type mismatch warning
| * 6bfdced5b6 modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24}
| * cd7806eec3 modpost: fix section mismatch message for R_ARM_ABS32
| * 7543ffe03a crypto: nx - fix build warnings when DEBUG_FS is not enabled
| * b030d23925 modpost: remove broken calculation of exception_table_entry size
| * c76d991b6f hwrng: virtio - Fix race on data_avail and actual data
| * 64410e7b03 hwrng: virtio - always add a pending request
| * 9a9ef96529 hwrng: virtio - don't waste entropy
| * f5634d2154 hwrng: virtio - don't wait on cleanup
| * 91806246e4 hwrng: virtio - add an internal buffer
| * 36874844f7 powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary
| * 271c25008a powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo
| * fafeeb398d riscv: uprobes: Restore thread.bad_cause
| * 3786416e1f powerpc: update ppc_save_regs to save current r1 in pt_regs
| * b08d9a11df powerpc: simplify ppc_save_regs
| * d3a0d96c16 powerpc/powernv/sriov: perform null check on iov before dereferencing iov
| * 0a95dd17a7 pinctrl: at91-pio4: check return value of devm_kasprintf()
| * 50aa3e6abb pinctrl: microchip-sgpio: check return value of devm_kasprintf()
| * f7d9231300 powerpc/64s: Fix VAS mm use after free
| * 5e79521da1 perf dwarf-aux: Fix off-by-one in die_get_varname()
| * ac6c849428 perf script: Fix allocation of evsel->priv related to per-event dump files
| * 939bf462a1 powerpc/signal32: Force inlining of __unsafe_save_user_regs() and save_tm_user_regs_unsafe()
| * 7d25fc45c4 powerpc/interrupt: Don't read MSR from interrupt_exit_kernel_prepare()
| * d4f3531cd2 kcsan: Don't expect 64 bits atomic builtins from 32 bits architectures
| * 196f18dd7f pinctrl: cherryview: Return correct value if pin in push-pull mode
| * c92365c3f3 perf bench: Add missing setlocale() call to allow usage of %'d style formatting
| * e456d9b2dd perf bench: Use unbuffered output when pipe/tee'ing to a file
| * c02b496d92 PCI: Add pci_clear_master() stub for non-CONFIG_PCI
| * d1bfe6ca73 PCI: ftpci100: Release the clock resources
| * 7fe2876aac PCI: pciehp: Cancel bringup sequence if card is not present
| * dfbf41e4fc scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe()
| * 9856c0de49 PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free
| * 6053df4da4 pinctrl: bcm2835: Handle gpiochip_add_pin_range() errors
| * b1de5105d2 scsi: qedf: Fix NULL dereference in error handling
| * 48e6b7602e PCI: vmd: Reset VMD config register between soft reboots
| * 34c701b52d PCI: cadence: Fix Gen2 Link Retraining process
| * a326cf0107 clk: Fix memory leak in devm_clk_notifier_register()
| * a0e7e33b8c ASoC: imx-audmix: check return value of devm_kasprintf()
| * 62f29ca45f ovl: update of dentry revalidate flags after copy up
| * a089ec635a drivers: meson: secure-pwrc: always enable DMA domain
| * 8ca6b2add2 clk: ti: clkctrl: check return value of kasprintf()
| * b700e5d4fe clk: keystone: sci-clk: check return value of kasprintf()
| * 06759faca0 clk: si5341: free unused memory on probe failure
| * 34b11a9a7d clk: si5341: check return value of {devm_}kasprintf()
| * 4ade98acef clk: si5341: return error if one synth clock registration fails
| * 9875046f14 clk: cdce925: check return value of kasprintf()
| * d8832e85a1 clk: vc5: check memory returned by kasprintf()
| * f180408f16 drm/msm/dpu: correct MERGE_3D length
| * e45377cfe1 arm64: dts: mediatek: mt8192: Fix CPUs capacity-dmips-mhz
| * 30111c478b arm64: dts: mediatek: Add cpufreq nodes for MT8192
| * 3c3f3d35f5 drm/msm/dp: Free resources after unregistering them
| * ec3b55b2c9 drm/msm/dpu: do not enable color-management if DSPPs are not available
| * 300e26e3e6 ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer
| * fd1c117bb5 clk: tegra: tegra124-emc: Fix potential memory leak
| * 2f276dd9c0 clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider()
| * 141d87977b arm64: dts: qcom: sm8250-edo: Panel framebuffer is 2.5k instead of 4k
| * bcea444ab4 clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe()
| * 50b5ddde8f clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe
| * 1fb12e7716 RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context
| * 79226176cd RDMA/bnxt_re: wraparound mbox producer index
| * bf35c202a3 drm/msm/a5xx: really check for A510 in a5xx_gpu_init
| * 4300a47e40 amdgpu: validate offset_in_bo of drm_amdgpu_gem_va
| * 9b8087950b drm/radeon: fix possible division-by-zero errors
| * b979dc54b6 drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode
| * 52c2b295e3 drm/amdkfd: Fix potential deallocation of previously deallocated memory.
| * 95afd2c7c7 ARM: dts: BCM5301X: fix duplex-full => full-duplex
| * 838534e86c hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272
| * 31c90fa841 hwmon: (adm1275) Allow setting sample averaging
| * 3ff1062bd0 hwmon: (gsc-hwmon) fix fan pwm temperature scaling
| * 535eafe715 ARM: dts: stm32: fix i2s endpoint format property for stm32mp15xx-dkx
| * 8909898d0b ARM: dts: stm32: Fix audio routing on STM32MP15xx DHCOM PDK2
| * 555ddd671c arm64: dts: ti: k3-j7200: Fix physical address of pin
| * 716efd0898 fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe()
| * 95cb88a853 arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1
| * 06c6fdaa11 ARM: dts: iwg20d-q7-common: Fix backlight pwm specifier
| * 8ac3083a26 RDMA/hns: Fix hns_roce_table_get return value
| * 8d158b32cb IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate
| * b2ffd8212e IB/hfi1: Use bitmap_zalloc() when applicable
| * 192ab38065 RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes
| * f5ca4d358b soc/fsl/qe: fix usb.c build errors
| * 9dcc95e3fc ARM: dts: meson8: correct uart_B and uart_C clock references
| * 1b4d08bdc0 ASoC: es8316: Do not set rate constraints for unsupported MCLKs
| * b324de100d ASoC: es8316: Increment max value for ALC Capture Target Volume control
| * 38d04765ad memory: brcmstb_dpfe: fix testing array offset after use
| * 17b723acee ARM: dts: stm32: Shorten the AV96 HDMI sound card name
| * 9c14802f14 arm64: dts: mediatek: mt8183: Add mediatek,broken-save-restore-fw to kukui
| * 8f08ff836c arm64: dts: qcom: apq8096: fix fixed regulator name property
| * 2e8c8fd792 ARM: omap2: fix missing tick_broadcast() prototype
| * 016aeb9a76 ARM: ep93xx: fix missing-prototype warnings
| * 314850a4d0 drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H
| * 04f16697d3 arm64: dts: qcom: apq8016-sbc: Fix 1.8V power rail on LS expansion
| * 7ce11e9098 arm64: dts: qcom: apq8016-sbc: Fix regulator constraints
| * 8d139a395d arm64: dts: qcom: Drop unneeded extra device-specific includes
| * 078578f608 arm64: dts: qcom: apq8016-sbc: fix mpps state names
| * 25d624af5a arm64: dts: qcom: apq8016-sbc: Clarify firmware-names
| * d7d784424a arm64: dts: qcom: apq8016-sbc: Update modem and WiFi firmware path
| * 6a843066e0 arm64: dts: qcom: db820c: Move blsp1_uart2 pin states to msm8996.dtsi
| * 23f7e4bf89 arm64: dts: qcom: sdm845: correct camss unit address
| * dea5289b05 arm64: dts: qcom: sdm630: correct camss unit address
| * b12e9fb281 arm64: dts: qcom: msm8996: correct camss unit address
| * 5a8bbab2b1 arm64: dts: qcom: msm8994: correct SPMI unit address
| * 46474b10dc arm64: dts: qcom: msm8916: correct camss unit address
| * b4ed5be2ea ARM: dts: gta04: Move model property out of pinctrl node
| * 70b8eeb7c6 drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
| * 2422edc225 drm/msm/disp/dpu: get timing engine status from intf status register
| * adac5cf609 drm/msm/dsi: don't allow enabling 14nm VCO with unprogrammed rate
| * 6882389691 RDMA/bnxt_re: Fix to remove an unnecessary log
| * b41dd1d896 RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid
| * 9ccca79eb3 RDMA/bnxt_re: Use unique names while registering interrupts
| * ced019c1f9 RDMA/bnxt_re: Fix to remove unnecessary return labels
| * adc129e894 RDMA/bnxt_re: Disable/kill tasklet only if it is enabled
| * f95ff838ac clk: imx: scu: use _safe list iterator to avoid a use after free
| * f564dd7109 arm64: dts: microchip: sparx5: do not use PSCI on reference boards
| * 3752e6a98e bus: ti-sysc: Fix dispc quirk masking bool variables
| * 6d07673027 ARM: dts: stm32: Move ethernet MAC EEPROM from SoM to carrier boards
| * a14e6f9392 drm/panel: sharp-ls043t1le01: adjust mode settings
| * 6b5a02a572 drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks`
| * ec43cfdcbd Input: adxl34x - do not hardcode interrupt trigger type
| * fd6cdc56ee ARM: dts: meson8b: correct uart_B and uart_C clock references
| * 5899bc4058 ARM: dts: BCM5301X: Drop "clock-names" from the SPI node
| * ba51c4072f drm/vram-helper: fix function names in vram helper doc
| * 019f013e8b drm/bridge: tc358768: fix THS_TRAILCNT computation
| * ed8bfa0461 drm/bridge: tc358768: fix TXTAGOCNT computation
| * cec2271095 drm/bridge: tc358768: fix THS_ZEROCNT computation
| * 47b8546301 drm/bridge: tc358768: fix TCLK_TRAILCNT computation
| * a07e6484f9 drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation
| * 34b805ab38 drm/bridge: tc358768: fix TCLK_ZEROCNT computation
| * 9e0668ecef drm/bridge: tc358768: fix PLL target frequency
| * 81bb5e859f drm/bridge: tc358768: fix PLL parameters computation
| * 6451b3274f drm/bridge: tc358768: always enable HS video mode
| * 26a0ba5d16 Input: drv260x - sleep between polling GO bit
| * efb61a7185 drm/amd/display: Explicitly specify update type per plane info change
| * 53e0a5ba9d radeon: avoid double free in ci_dpm_init()
| * 6173df9026 drm/amd/display: Add logging for display MALL refresh setting
| * a4b0164fc1 netlink: Add __sock_i_ino() for __netlink_diag_dump().
| * 04daf3f674 ipvlan: Fix return value of ipvlan_queue_xmit()
| * eb720f669b netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value.
| * c052797ac3 netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
| * 5848ad4250 lib/ts_bm: reset initial match offset for every block of text
| * fc8429f8d8 net: nfc: Fix use-after-free caused by nfc_llcp_find_local
| * 60ec0058c7 nfc: llcp: simplify llcp_sock_connect() error paths
| * 91f4ef204e sfc: fix crash when reading stats while NIC is resetting
| * 9ced40bf84 net: axienet: Move reset before 64-bit DMA detection
| * ebd6d2077a gtp: Fix use-after-free in __gtp_encap_destroy().
| * 4f22f55dc8 selftests: rtnetlink: remove netdevsim device after ipsec offload test
| * 029d892b05 bonding: do not assume skb mac_header is set
| * 619384319b netlink: do not hard code device address lenth in fdb dumps
| * a641240b7e netlink: fix potential deadlock in netlink_set_err()
| * d4aee9512a net: stmmac: fix double serdes powerdown
| * cfe147bdd0 igc: Fix race condition in PTP tx code
| * c729f590fe can: length: fix bitstuffing count
| * 4bc4797017 bpf: Fix bpf socket lookup from tc/xdp to respect socket VRF bindings
| * a254e029b7 bpf: Call __bpf_sk_lookup()/__bpf_skc_lookup() directly via TC hookpoint
| * 9eb2651c67 bpf: Factor out socket lookup functions for the TC hookpoint.
| * a66cce0339 bpf: Omit superfluous address family check in __bpf_skc_lookup
| * 7e3d771f85 wifi: ath9k: convert msecs to jiffies where needed
| * 248fc11128 wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection
| * 365cd15e8f wifi: cfg80211: rewrite merging of inherited elements
* | ab76251526 ANDROID: ABI: Update STG ABI to format version 2
* | 2afb23c898 Merge 3b9de981fe ("wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler()") into android14-5.15-lts
|\|
| * 3b9de981fe wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler()
| * d0f665eee9 iwlwifi: don't dump_stack() when we get an unexpected interrupt
| * a6db476ff3 wifi: iwlwifi: pull from TXQs with softirqs disabled
| * a572c6852b rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO
| * 48c2d1455a wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key()
| * 8c561a59c6 memstick r592: make memstick_debug_get_tpc_name() static
| * 79c0fbf8f3 kexec: fix a memory leak in crash_shrink_memory()
| * ed8d827f43 watchdog/perf: more properly prevent false positives with turbo modes
| * c29d8d1f56 watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config
| * 15b37d2b4a wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown
| * 4391fa1808 wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled
| * ac4bf9426a selftests/bpf: Fix check_mtu using wrong variable type
| * 95b4b940f0 wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes
| * ef24fe436b wifi: ray_cs: Fix an error handling path in ray_probe()
| * 0700d878b0 wifi: ray_cs: Drop useless status variable in parse_addr()
| * d696cbbe43 wifi: ray_cs: Utilize strnlen() in parse_addr()
| * 93890d0573 wifi: wl3501_cs: Fix an error handling path in wl3501_probe()
| * eaffd568a2 wl3501_cs: use eth_hw_addr_set()
| * c6143548e6 wifi: atmel: Fix an error handling path in atmel_probe()
| * 5a0a312d34 wifi: orinoco: Fix an error handling path in orinoco_cs_probe()
| * f5bb5474f4 wifi: orinoco: Fix an error handling path in spectrum_cs_probe()
| * ec856ca3b0 regulator: core: Streamline debugfs operations
| * fc2f8b9054 regulator: core: Fix more error checking for debugfs_create_dir()
| * 534508689e bpftool: JIT limited misreported as negative value on aarch64
| * e7e0b6e066 nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect()
| * edeb029dd9 spi: dw: Round of n_bytes to power of 2
| * ac6158b5c4 bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen
| * 71754ee427 libbpf: fix offsetof() and container_of() to work with CO-RE
| * 3e7ee33b95 sctp: add bpf_bypass_getsockopt proto callback
| * a32a89bb04 wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan()
| * a55f88dd15 wifi: wilc1000: fix for absent RSN capabilities WFA testcase
| * e215a8a428 spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG
| * e92f61e070 samples/bpf: Fix buffer overflow in tcp_basertt
| * c77eb01a6e libbpf: btf_dump_type_data_check_overflow needs to consider BTF_MEMBER_BITFIELD_SIZE
| * ad5425e707 wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx
| * 06da826e3b wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation
| * 7930565596 igc: Enable and fix RX hash usage by netstack
| * 38a9d7dac3 pstore/ram: Add check for kstrdup
| * 745cec2bd3 ima: Fix build warnings
| * 41da2c318c evm: Fix build warnings
| * 757b06fb02 evm: Complete description of evm_inode_setattr()
| * 85872ffac4 locking/atomic: arm: fix sync ops
| * cf78062aa9 x86/mm: Fix __swp_entry_to_pte() for Xen PV guests
| * bd4c759d31 perf/ibs: Fix interface via core pmu events
| * 87666a7d3e kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined
| * f766d45ab2 rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale
| * bfe210f625 rcu/rcuscale: Move rcu_scale_*() after kfree_scale_cleanup()
| * 751cb95117 rcuscale: Move shutdown from wait_event() to wait_event_idle()
| * a6d33ea305 rcuscale: Always log error message
| * e610497ba1 rcutorture: Correct name of use_softirq module parameter
| * c756e8a227 thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe()
| * e2b32b0c5f cpufreq: intel_pstate: Fix energy_performance_preference for passive
| * b51194170f ARM: 9303/1: kprobes: avoid missing-declaration warnings
| * 4864c82cb8 powercap: RAPL: Fix CONFIG_IOSF_MBI dependency
| * 2c06e0e010 perf/arm-cmn: Fix DTC reset
| * 3c4f5aee37 PM: domains: fix integer overflow issues in genpd_parse_state()
| * 289e2054ee clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe
| * 5017132f2f tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode().
| * 0670c4c567 posix-timers: Prevent RT livelock in itimer_delete()
| * f222873711 svcrdma: Prevent page release when nothing was received
| * 6689782746 irqchip/jcore-aic: Fix missing allocation of IRQ descriptors
| * e6b7362290 md/raid10: fix io loss while replacement replace rdev
| * f4368a462b md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
| * 3c76920e54 md/raid10: fix wrong setting of max_corr_read_errors
| * d3bf54a69b md/raid10: fix overflow of md/safe_mode_delay
| * a134dd582c md/raid10: check slab-out-of-bounds in md_bitmap_get_counter
| * eb120c0aff blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost
| * 1bc29ba959 x86/resctrl: Only show tasks' pid in current pid namespace
| * d9c194281b fs: pipe: reveal missing function protoypes
| * 25aa2ad37c netfilter: nf_tables: drop map element references from preparation phase
* | bf93b1c960 ANDROID: Set arch attribute for allmodconfig builds
* | 6e44a01a15 Merge 5.15.120 into android14-5.15-lts
|\|
| * d54cfc4205 Linux 5.15.120
| * c06edf13f4 nubus: Partially revert proc_create_single_data() conversion
| * 6e65fa33ed parisc: Delete redundant register definitions in <asm/assembly.h>
| * b4d8f89000 drm/amdgpu: Validate VM ioctl flags.
| * 26eb191bf5 scripts/tags.sh: Resolve gtags empty index generation
| * 989b4a753c perf symbols: Symbol lookup with kcore can fail if multiple segments match stext
| * 87f51cf60e Revert "thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe"
| * 6a28f3490d HID: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651.
| * 67ce772463 HID: wacom: Use ktime_t rather than int when dealing with timestamps
| * 3477323177 bpf: ensure main program has an extable
| * d874cf9799 can: isotp: isotp_sendmsg(): fix return error fix on TX path
| * 27d03d15bb x86/smp: Use dedicated cache-line for mwait_play_dead()
| * d6c745ca4f x86/microcode/AMD: Load late on both threads too
| * 9052349685 drm/amdgpu: Set vmbo destroy after pt bo is created
| * 796481bedc mm, hwpoison: when copy-on-write hits poison, take page offline
| * 6713b8f11a mm, hwpoison: try to recover from copy-on write faults
| * b46021ab83 mptcp: consolidate fallback and non fallback state machine
| * 42ff95b4bd mptcp: fix possible divide by zero in recvmsg()
* | cf7fcaaad7 ANDROID: GKI: update the .stg file
* | 6f8b8ba07b Revert "gpio: Allow per-parent interrupt data"
* | 5315d334e4 Revert "gpiolib: Fix GPIO chip IRQ initialization restriction"
* | f05620ff64 Merge 5.15.119 into android14-5.15-lts
|\|
| * 4af60700a6 Linux 5.15.119
| * 10fbd2e04e act_mirred: remove unneded merge conflict markers
| * 2230b3f874 i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle
| * 907a069ec3 x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys
| * 7949f83f7e vhost_net: revert upend_idx only on retriable error
| * fdac0aa4a1 drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl
| * f012d3037c drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl
| * a44b4230d2 drm/exynos: vidi: fix a wrong error return
| * 79b4125bce ARM: dts: Fix erroneous ADS touchscreen polarities
| * 9684c4fdee s390/purgatory: disable branch profiling
| * 3c4d87e9fa ASoC: nau8824: Add quirk to active-high jack-detect
| * d77eac1b14 soundwire: dmi-quirks: add new mapping for HP Spectre x360
| * 53ad4af4ec ASoC: simple-card: Add missing of_node_put() in case of error
| * bb45dc7b67 spi: lpspi: disable lpspi module irq in DMA mode
| * f8d9d8f172 s390/cio: unregister device when the only path is gone
| * e10d15fdfc Input: soc_button_array - add invalid acpi_index DMI quirk handling
| * 26bde09a15 nvme: double KA polling frequency to avoid KATO with TBKAS on
| * e3bbc14837 usb: gadget: udc: fix NULL dereference in remove()
| * cce681383d nfcsim.c: Fix error checking for debugfs_create_dir
| * 8a5ddd1430 media: cec: core: don't set last_initiator if tx in progress
| * 01cf989090 arm64: Add missing Set/Way CMO encodings
| * f97b16c0a5 HID: wacom: Add error check to wacom_parse_and_register()
| * e8bdb1f886 scsi: target: iscsi: Prevent login threads from racing between each other
| * 1cc379d53b gpio: sifive: add missing check for platform_get_irq
| * 497d401408 gpiolib: Fix GPIO chip IRQ initialization restriction
| * 7973c4b3b9 gpio: Allow per-parent interrupt data
| * c1a2b52d99 sch_netem: acquire qdisc lock in netem_change()
| * 3138c85031 selftests: forwarding: Fix race condition in mirror installation
| * b7db41a865 bpf/btf: Accept function names that contain dots
| * 0f8d81254f Revert "net: phy: dp83867: perform soft reset and retain established link"
| * 57130334da netfilter: nfnetlink_osf: fix module autoload
| * 53defc6ecf netfilter: nf_tables: disallow updates of anonymous sets
| * 2f2f9eaa6d netfilter: nf_tables: reject unbound chain set before commit phase
| * 2938e7d582 netfilter: nf_tables: reject unbound anonymous set before commit phase
| * baa3ec1b31 netfilter: nf_tables: disallow element updates of bound anonymous sets
| * 45eb6944d0 netfilter: nft_set_pipapo: .walk does not deal with generations
| * 4004f12aac netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain
| * 314a8697d0 netfilter: nf_tables: fix chain binding transaction logic
| * 1328e8d4c3 be2net: Extend xmit workaround to BE3 chip
| * 768f94c5f6 net: dsa: mt7530: fix handling of BPDUs on MT7530 switch
| * aa528e7d37 net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch
| * efea112a87 ipvs: align inner_mac_header for encapsulation
| * 24d7d9aee0 mmc: usdhi60rol0: fix deferred probing
| * d1e08bed03 mmc: sh_mmcif: fix deferred probing
| * 34c4906b9a mmc: sdhci-acpi: fix deferred probing
| * 41f1e8dab0 mmc: owl: fix deferred probing
| * b86ca9e08c mmc: omap_hsmmc: fix deferred probing
| * 445a9568de mmc: omap: fix deferred probing
| * 840deb8d14 mmc: mvsdio: fix deferred probing
| * 92f73c4f92 mmc: mtk-sd: fix deferred probing
| * aedecd013d net: qca_spi: Avoid high load if QCA7000 is not available
| * 156dd06fb3 xfrm: Linearize the skb after offloading if needed.
| * d967bd7ea6 selftests: net: fcnal-test: check if FIPS mode is enabled
| * 964cfdfd4b xfrm: fix inbound ipv4/udp/esp packets to UDPv6 dualstack sockets
| * 25e89fa7b5 bpf: Fix verifier id tracking of scalars on spill
| * 0b180495f6 bpf: track immediate values written to stack by BPF_ST instruction
| * 3229a29e95 xfrm: Ensure policies always checked on XFRM-I input path
| * d055ee18ca xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c
| * 491ce3c1d9 xfrm: Treat already-verified secpath entries as optional
| * 0ce3d0c068 ieee802154: hwsim: Fix possible memory leaks
| * 29672dc47d mmc: meson-gx: fix deferred probing
| * 9bac4a2b73 memfd: check for non-NULL file_seals in memfd_create() syscall
| * 103734b429 x86/mm: Avoid using set_pgd() outside of real PGD pages
| * 793d0224bb nilfs2: prevent general protection fault in nilfs_clear_dirty_page()
| * 96987c383c io_uring/net: disable partial retries for recvmsg with cmsg
| * 25a543ca30 io_uring/net: clear msg_controllen on partial sendmsg retry
| * 34a7e5021a io_uring/net: save msghdr->msg_control for retries
| * b07bb2914a writeback: fix dereferencing NULL mapping->host on writeback_page_template
| * 3c46a240dd regmap: spi-avmm: Fix regmap_bus max_raw_write
| * 4796d9b069 regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK
| * ba9952e2f5 ip_tunnels: allow VXLAN/GENEVE to inherit TOS/TTL from VLAN
| * acee272283 mmc: mmci: stm32: fix max busy timeout calculation
| * 999173f295 mmc: meson-gx: remove redundant mmc_request_done() call from irq context
| * 00010b52c7 mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916
| * 4a557910bb cgroup: Do not corrupt task iteration when rebinding subsystem
| * 815b244011 PCI: hv: Add a per-bus mutex state_lock
| * 34e21b8ff3 PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic
| * 7d852ca7af PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev
| * 5e0d33cc78 Revert "PCI: hv: Fix a timing issue which causes kdump to fail occasionally"
| * ac0df91c7d PCI: hv: Fix a race condition bug in hv_pci_query_relations()
| * 80c5d97b4a Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs
| * 4d31eb2e26 Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails
| * 953dd7e2df KVM: Avoid illegal stage2 mapping on invalid memory slot
| * 1d6c932068 ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep()
| * b12011cea5 nilfs2: fix buffer corruption due to concurrent device reads
| * 485f6be254 selftests: mptcp: join: skip check if MIB counter not supported
| * 64cb73ea77 selftests: mptcp: join: use 'iptables-legacy' if available
| * 979a941d7e selftests: mptcp: pm nl: remove hardcoded default limits
| * ac65930751 selftests/mount_setattr: fix redefine struct mount_attr build error
| * 726d033133 selftests: mptcp: lib: skip if not below kernel version
| * b28fc26683 selftests: mptcp: lib: skip if missing symbol
| * 024a24e5d4 tick/common: Align tick period during sched_timer setup
| * 3c1aa91b37 drm/amd/display: Add wrapper to call planes and stream update
| * eea850c025 drm/amd/display: Use dc_update_planes_and_stream
| * fb7c68bbcc drm/amd/display: Add minimal pipe split transition state
| * b5f0e898f6 tpm, tpm_tis: Claim locality in interrupt handler
| * 39e7872537 tracing: Add tracing_reset_all_online_cpus_unlocked() function
| * 5a24be76af drm/amd/display: fix the system hang while disable PSR
* | fe598ae9ca Revert "net: Remove DECnet leftovers from flow.h."
* | 87e8932c28 Merge 5.15.118 into android14-5.15-lts
|\|
| * f676530194 Linux 5.15.118
| * e5bf1f7d1f nilfs2: reject devices with insufficient block count
| * 2bc9231afc mmc: block: ensure error propagation for non-blk
| * 4b7b50d4eb of: overlay: add entry to of_overlay_action_name[]
| * 84770cc54e neighbour: delete neigh_lookup_nodev as not used
| * 4180651825 net: Remove DECnet leftovers from flow.h.
| * 4c39a2414a net: Remove unused inline function dst_hold_and_use()
| * bb76281b6e neighbour: Remove unused inline function neigh_key_eq16()
| * 67866cad76 rcu/kvfree: Avoid freeing new kfree_rcu() memory after old grace period
| * c91ed3a5c2 cgroup: always put cset in cgroup_css_set_put_fork
| * 33b801be2d afs: Fix vlserver probe RTT handling
| * f824bcc3e1 selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET
| * 2077c7dbfe net: tipc: resize nlattr array to correct size
| * f734e16ee1 dm: don't lock fs when the map is NULL during suspend or resume
| * 8a8179f6a3 net: lapbether: only support ethernet devices
| * 052417e8b3 net/sched: cls_api: Fix lockup on flushing explicitly created chain
| * c0cb9d453f ext4: drop the call to ext4_error() from ext4_get_group_info()
| * eb4ccc102d cifs: fix lease break oops in xfstest generic/098
| * 1cb181271e drm/nouveau: add nv_encoder pointer check for NULL
| * c79dccc263 drm/nouveau/dp: check for NULL nv_connector->native_mode
| * 909b7f7497 drm/nouveau: don't detect DSM for non-NVIDIA device
| * 10e1e07bde igb: fix nvm.ops.read() error handling
| * fe03fd373c igc: Clean the TX buffer and TX descriptor ring
| * 032b8cbeb1 sctp: fix an error code in sctp_sf_eat_auth()
| * 981e78781a ipvlan: fix bound dev checking for IPv6 l3s mode
| * 3e76522d1a net: ethtool: correct MAX attribute value for stats
| * 18512de744 IB/isert: Fix incorrect release of isert connection
| * 63e9e71983 IB/isert: Fix possible list corruption in CMA handler
| * 29ff057c0a IB/isert: Fix dead lock in ib_isert
| * fced7aaaa3 IB/uverbs: Fix to consider event queue closing also upon non-blocking mode
| * cd44977ecc RDMA/cma: Always set static rate to 0 for RoCE
| * 5a9dee176b RDMA/mlx5: Initiate dropless RQ for RAW Ethernet functions
| * 35828874aa octeontx2-af: fix lbk link credits on cn10k
| * 7506e77357 octeontx2-af: fixed resource availability check
| * 4dd914b9e2 iavf: remove mask from iavf_irq_enable_queues()
| * e6342cd13d RDMA/rxe: Fix the use-before-initialization error of resp_pkts
| * 466f25fd2d RDMA/rxe: Removed unused name from rxe_task struct
| * 13d087b358 RDMA/rxe: Remove the unused variable obj
| * 0e1098d72f net/sched: cls_u32: Fix reference counter leak leading to overflow
| * d56661cd8d net/sched: act_pedit: Parse L3 Header for L4 offset
| * 17b330b782 net/sched: act_pedit: remove extra check for key type
| * 219b8e9838 net/sched: simplify tcf_pedit_act
| * 688e6db596 ping6: Fix send to link-local addresses with VRF.
| * 471a4c08e3 net: enetc: correct the indexes of highest and 2nd highest TCs
| * 44ebe988cb netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
| * 133b73d853 netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM
| * e4188f8b81 netfilter: nf_tables: integrate pipapo into commit protocol
| * 4da9d4e740 spi: fsl-dspi: avoid SCK glitches with continuous transfers
| * 08acd41bb1 RDMA/rxe: Fix packet length checks
| * 01f6f867ad RDMA/rtrs: Fix rxe_dealloc_pd warning
| * 01bbead309 RDMA/rtrs: Fix the last iu->buf leak in err path
| * 1938f080a1 usb: dwc3: gadget: Reset num TRBs before giving back the request
| * ed02955049 serial: lantiq: add missing interrupt ack
| * 235845b576 USB: serial: option: add Quectel EM061KGL series
| * e05e9cca77 thunderbolt: Mask ring interrupt on Intel hardware as well
| * 0bd227610c thunderbolt: dma_test: Use correct value for absent rings when creating paths
| * 2a974abc09 Remove DECnet support from kernel
| * 28010d3a9a ALSA: hda/realtek: Add a quirk for Compaq N14JP6
| * 203a01ae57 drm/amdgpu: add missing radeon secondary PCI ID
| * b1b64a76b7 drm/amd/display: edp do not add non-edid timings
| * 98c8c0f2b3 net: usb: qmi_wwan: add support for Compal RXM-G1
| * fd81222d1a RDMA/uverbs: Restrict usage of privileged QKEYs
| * 14c30c2439 nouveau: fix client work fence deletion race
| * f4c5eebb37 dm thin metadata: check fail_io before using data_sm
| * ee09c0b1b0 ALSA: usb-audio: Add quirk flag for HEM devices to enable native DSD playback
| * 953cc0bf2d powerpc/purgatory: remove PGO flags
| * faf45f2c5e x86/purgatory: remove PGO flags
| * d38e051ec6 kexec: support purgatories with .text.hot sections
| * 4357336192 nilfs2: fix possible out-of-bounds segment allocation in resize ioctl
| * 74ea184af9 nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key()
| * 941e7452df nios2: dts: Fix tse_mac "max-frame-size" property
| * 8a8efde4a7 ocfs2: check new file size on fallocate call
| * 559b7a0d9f ocfs2: fix use-after-free when unmounting read-only filesystem
| * 8262a9f3b8 epoll: ep_autoremove_wake_function should use list_del_init_careful
| * c0a2422955 wifi: cfg80211: fix double lock bug in reg_wdev_chan_valid()
| * 1a65bac4ed wifi: cfg80211: fix locking in regulatory disconnect
| * 0e388fce7a io_uring: hold uring mutex around poll removal
| * 27825a6da7 irqchip/gic: Correctly validate OF quirk descriptors
| * f50018e2dd NVMe: Add MAXIO 1602 to bogus nid list.
| * 4204b539ca drm:amd:amdgpu: Fix missing buffer object unlock in failure path
| * 7cb02d5dc2 xen/blkfront: Only check REQ_FUA for writes
| * a75928bb92 ASoC: dwc: move DMA init to snd_soc_dai_driver probe()
| * 37f7864c17 mips: Move initrd_start check after initrd address sanitisation.
| * 0d6e654294 MIPS: Alchemy: fix dbdma2
| * 1907b6148f MIPS: unhide PATA_PLATFORM
| * 8f50d247b5 parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory()
| * 717368977b parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu()
| * 7e85809d27 ASoC: soc-pcm: test if a BE can be prepared
| * 68086376a1 btrfs: handle memory allocation failure in btrfs_csum_one_bio
| * 39ea949526 btrfs: scrub: try harder to mark RAID56 block groups read-only
| * 9df872ec4a power: supply: Fix logic checking if system is running from battery
| * 42e6a4a1e0 irqchip/gic-v3: Disable pseudo NMIs on Mediatek devices w/ firmware issues
| * 2105f2fa57 regulator: Fix error checking for debugfs_create_dir
| * 91b3d6aa07 platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0
| * c845ec79c3 power: supply: Ratelimit no data debug output
| * 19d09d31da tools: gpio: fix debounce_period_us output of lsgpio
| * c11bb961ca ARM: dts: vexpress: add missing cache properties
| * 36fdd1d5b4 power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule()
| * 3b86c54e6e power: supply: sc27xx: Fix external_power_changed race
| * 200d8ad44e power: supply: ab8500: Fix external_power_changed race
| * 48992b9287 of: overlay: Fix missing of_node_put() in error case of init_overlay_changeset()
| * 282f0c63cf of: overlay: rework overlay apply and remove kfree()s
| * 5f306cbfa5 of: overlay: rename variables to be consistent
| * 1cc40dccad drm/amdgpu: fix Null pointer dereference error in amdgpu_device_recover_vram
| * 7cf3bf3cc0 ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate
| * de091a6e1f test_firmware: fix a memory leak with reqs buffer
| * bfb0b366e8 test_firmware: prevent race conditions by a correct implementation of locking
| * 4b5511aa0a test_firmware: Use kstrtobool() instead of strtobool()
* | 105a464bd6 Merge branch 'android14-5.15' into 'android14-5.15-lts'
* | 7aef878cc2 Revert "neighbour: fix unaligned access to pneigh_entry"
* | f5d9ff9c9c Revert "net/ipv6: fix bool/int mismatch for skip_notify_on_dev_down"
* | 403dbb90c2 Merge 5.15.117 into android14-5.15-lts
|\|
| * 471e639e59 Linux 5.15.117
| * ef876dd258 Revert "staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE"
| * 6cfe9ddb6a xfs: verify buffer contents when we skip log replay
| * b5a52009d9 Revert "debugobject: Ensure pool refill (again)"
| * 3cc6805547 ext4: only check dquot_initialize_needed() when debugging
| * 86ebb5b534 Revert "ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled"
| * 9945284195 vhost_vdpa: support PACKED when setting-getting vring_base
| * 17882a3556 vhost: support PACKED when setting-getting vring_base
| * d18688ff42 vduse: avoid empty string for dev name
| * 952d1e4cbc riscv: fix kprobe __user string arg print fault issue
| * 62958e78b7 eeprom: at24: also select REGMAP
| * 66b99b3bd7 i2c: sprd: Delete i2c adapter in .remove's error path
| * 58648a533a firmware: arm_ffa: Set handle field to zero in memory descriptor
| * e1ab7ed792 i2c: mv64xxx: Fix reading invalid status value in atomic mode
| * 003421fc43 arm64: dts: imx8mn-beacon: Fix SPI CS pinmux
| * 2a4f0ad59d ASoC: mediatek: mt8195: fix use-after-free in driver remove path
| * cc4a2c0b1e ASoC: mediatek: mt8195-afe-pcm: Convert to platform remove callback returning void
| * 036bba96bf arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
| * d97c8306a9 arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP signals
| * 2212344664 arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified sc7180-lite boards
| * c589ba11da ASoC: codecs: wsa881x: do not set can_multi_write flag
| * 980011869a ARM: dts: at91: sama7g5ek: fix debounce delay property for shdwc
| * ac817e26f9 usb: usbfs: Use consistent mmap functions
| * 35d9f521bc usb: usbfs: Enforce page requirements for mmap
| * 64e4a3b253 pinctrl: meson-axg: add missing GPIOA_18 gpio group
| * 4124536ad9 rbd: get snapshot context after exclusive lock is ensured to be held
| * 1af3b16b62 rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting
| * 2326488a96 tee: amdtee: Add return_origin to 'struct tee_cmd_load_ta'
| * 0a8e5a6166 Bluetooth: hci_qca: fix debugfs registration
| * 2a7e918e22 Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk
| * 36482bf16f s390/dasd: Use correct lock while counting channel queue length
| * fd03b5575c ceph: fix use-after-free bug for inodes when flushing capsnaps
| * e022640b1f can: j1939: avoid possible use-after-free when j1939_can_rx_register fails
| * 67eb5a5153 can: j1939: change j1939_netdev_lock type to mutex
| * e2a6db7cab can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket
| * 4ce28f3ab3 drm/amd/pm: Fix power context allocation in SMU13
| * 2984dbacf6 drm/amdgpu: fix xclk freq on CHIP_STONEY
| * 77558dd165 drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid SKUs
| * 4b1bf59460 drm/i915/gt: Use the correct error value when kernel_context() fails
| * 17c01feed6 ALSA: hda/realtek: Add Lenovo P3 Tower platform
| * 800e4c5b36 ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
| * 9dab648ccd ALSA: hda/realtek: Add quirk for Clevo NS50AU
| * cd67fdd3cc Input: fix open count when closing inhibited device
| * 2545d1b4d1 Input: psmouse - fix OOB access in Elantech protocol
| * ed263c550f Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
| * 5db4229b14 batman-adv: Broken sync while rescheduling delayed work
| * aedad6c7fb bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks
| * a94401de2b bnxt_en: Query default VLAN before VNIC setup on a VF
| * cf0a3e9467 bnxt_en: Don't issue AP reset during ethtool's reset operation
| * 40d074f7e4 lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release()
| * b6b1799c37 bpf: Add extra path pointer check to d_path helper
| * a242c6a92c net: sched: fix possible refcount leak in tc_chain_tmplt_add()
| * d7c69f7b83 net: sched: act_police: fix sparse errors in tcf_police_dump()
| * e7e0f94974 net: sched: move rtm_tca_policy declaration to include file
| * c5e0a2f49c drm/i915/selftests: Add some missing error propagation
| * 234f0337b4 drm/i915/selftests: Stop using kthread_stop()
| * 1f942073e1 drm/i915/selftests: Increase timeout for live_parallel_switch
| * 3604ab1519 rfs: annotate lockless accesses to RFS sock flow table
| * 2501f5a955 rfs: annotate lockless accesses to sk->sk_rxhash
| * dd5296e3b2 ipv6: rpl: Fix Route of Death.
| * eab6cda0bf netfilter: ipset: Add schedule point in call_ad().
| * 7b053b2e8c netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper
| * 34d67ecf3d selftests/bpf: Fix sockopt_sk selftest
| * 01363bf8ef selftests/bpf: Verify optval=NULL case
| * 7e74801e1b wifi: cfg80211: fix locking in sched scan stop work
| * 6c25c96a46 qed/qede: Fix scheduling while atomic
| * 668c3f9514 Bluetooth: L2CAP: Add missing checks for invalid DCID
| * 53c056ccda Bluetooth: Fix l2cap_disconnect_req deadlock
| * c16e79e27e drm/i915: Use 18 fast wake AUX sync len
| * 567873901a drm/i915: Explain the magic numbers for AUX SYNC/precharge length
| * dd40bcc357 net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values
| * 9d66ffd8ac net: enetc: correct the statistics of rx bytes
| * 8db1acf2b1 net/smc: Avoid to access invalid RMBs' MRs in SMCRv1 ADD LINK CONT
| * 9b001a7d1e net/ipv6: fix bool/int mismatch for skip_notify_on_dev_down
| * c85bee3a4a bpf: Fix UAF in task local storage
| * 54c8aea7e8 net: dsa: lan9303: allow vid != 0 in port_fdb_{add|del} methods
| * ab0eca3f54 neighbour: fix unaligned access to pneigh_entry
| * bdcc42186d wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
| * 7b0c76354a afs: Fix setting of mtime when creating a file/dir/symlink
| * 8ef72e7830 spi: qup: Request DMA before enabling clocks
| * f0e84db82e platform/surface: aggregator: Allow completion work-items to be executed in parallel
| * 547da24832 blk-iocost: avoid 64-bit division in ioc_timer_fn
| * 3b07425c3d f2fs: fix iostat lock protection
| * b85fb01a76 bonding (gcc13): synchronize bond_{a,t}lb_xmit() types
| * 0dfc81a283 i40e: fix build warning in ice_fltr_add_mac_to_list()
| * 2e12542c19 i40e: use int for i40e_status
| * 81f552df07 i40e: Remove string printing for i40e_status
| * d13f56d4b2 sfc (gcc13): synchronize ef100_enqueue_skb()'s return type
| * a9ad05e354 remove the sx8 block driver
| * c7cf7760b9 gcc-plugins: Reorganize gimple includes for GCC 13
| * 8d00b4e329 ata: ahci: fix enum constants for gcc-13
* | 97a41de737 Revert "tcp: deny tcp_disconnect() when threads are waiting"
* | 8340dc3122 Merge 5.15.116 into android14-5.15-lts
|\|
| * 7349e40704 Linux 5.15.116
| * 62886f17d3 RDMA/irdma: Do not generate SW completions for NOPs
| * 14d148401c RDMA/irdma: Fix drain SQ hang with no completion
| * e88b19b252 ARM: defconfig: drop CONFIG_DRM_RCAR_LVDS
| * a1c76e2907 ext4: enable the lazy init thread when remounting read/write
| * 76a7dfc9cc selftests: mptcp: join: skip if MPTCP is not supported
| * 807114223d selftests: mptcp: simult flows: skip if MPTCP is not supported
| * 9319c8b75e selftests: mptcp: diag: skip if MPTCP is not supported
| * c971ca2b9d drm/amdgpu/gfx10: Disable gfxoff before disabling powergating.
| * 7a20262fa9 scsi: dpt_i2o: Do not process completions with invalid addresses
| * daeab37ddb scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD)
| * 78a79c6252 drm/rcar: stop using 'imply' for dependencies
| * 4c3dda6b7c tpm, tpm_tis: Request threaded interrupt handler
| * 19750d7b57 regmap: Account for register length when chunking
| * 6cb7e7579a KEYS: asymmetric: Copy sig and digest in public_key_verify_signature()
| * d56c2ab325 ksmbd: fix incorrect AllocationSize set in smb2_get_info
| * 380b47932e ksmbd: fix credit count leakage
| * 8a870c07a1 KVM: x86: Account fastpath-only VM-Exits in vCPU stats
| * 808ed7d86e test_firmware: fix the memory leak of the allocated firmware buffer
| * 4b7a35eb8a serial: 8250_tegra: Fix an error handling path in tegra_uart_probe()
| * fc8ef07141 fbcon: Fix null-ptr-deref in soft_cursor
| * a0790a7739 ext4: add lockdep annotations for i_data_sem for ea_inode's
| * a8c3024c3e ext4: disallow ea_inodes with extended attributes
| * 39a66e7a29 ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find()
| * bdbfbb7d50 ext4: add EA_INODE checking to ext4_iget()
| * efa3fe247d selftests: mptcp: sockopt: skip if MPTCP is not supported
| * 95ad73b627 selftests: mptcp: pm nl: skip if MPTCP is not supported
| * 30bacfd8ca selftests: mptcp: connect: skip if MPTCP is not supported
| * 2712a1ba05 tracing/probe: trace_probe_primary_from_call(): checked list_first_entry
| * 8a716b28b9 selinux: don't use make's grouped targets feature yet
| * 11a8e7fd72 block: fix revalidate performance regression
| * 538d850485 usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM
| * 57a2fd7b2c usb: cdns3: allocate TX FIFO size according to composite EP number
| * d42d869b2c iommu/amd: Fix domain flush size when syncing iotlb
| * cb21384372 powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall
| * f257c1a6cc btrfs: fix csum_tree_block page iteration to avoid tripping on -Werror=array-bounds
| * 292806cfe4 tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK
| * 3fda903511 mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order
| * dade1f4a37 mmc: vub300: fix invalid response handling
| * 3eb4590bc3 block/blk-iocost (gcc13): keep large values in a new enum
| * 43124187fe ath6kl: Use struct_group() to avoid size-mismatched casting
| * 43f4aca98b x86/boot: Wrap literal addresses in absolute_pointer()
| * 3cfd7f042e drm/amd/pm: reverse mclk and fclk clocks levels for renoir
| * 7e0c25b390 drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
| * fce05ec3de drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
| * b0dda610b4 ata: libata-scsi: Use correct device no in ata_find_dev()
| * 57f4555bdf scsi: stex: Fix gcc 13 warnings
| * 6f675380db misc: fastrpc: reject new invocations during device removal
| * cebe84b9c0 misc: fastrpc: return -EPIPE to invocations on device removal
| * d3103fc0d1 md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk()
| * 599e19202b usb: gadget: f_fs: Add unbind event before functionfs_unbind
| * c762eafe79 dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
| * 7099a87cf5 net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
| * 16bd13e701 iio: dac: build ad5758 driver when AD5758 is selected
| * b6622c1fd2 iio: adc: ad7192: Change "shorted" channels to differential
| * aeec28d838 iio: dac: mcp4725: Fix i2c_master_send() return value handling
| * 23c6a184c2 iio: adc: ad_sigma_delta: Fix IRQ issue by setting IRQ_DISABLE_UNLAZY flag
| * 4349ee3dee iio: light: vcnl4035: fixed chip ID check
| * db633585e9 dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476 compatible value
| * 6bd3d6305b iio: imu: inv_icm42600: fix timestamp reset
| * 536b4ffa93 HID: wacom: avoid integer overflow in wacom_intuos_inout()
| * cfa747cc65 HID: google: add jewel USB id
| * 11bc983e43 iio: adc: mxs-lradc: fix the order of two cleanup operations
| * a5461c3134 iio: accel: st_accel: Fix invalid mount_matrix on devices without ACPI _ONT method
| * 6a7d946733 media: uvcvideo: Don't expose unsupported formats to userspace
| * 6dd02a7bff mailbox: mailbox-test: fix a locking issue in mbox_test_message_write()
| * 0f3c55c7d6 nvme-pci: Add quirk for Teamgroup MP33 SSD
| * c9079eb6f1 drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged
| * 4238ea044e atm: hide unused procfs functions
| * 5d4c31d939 drm/msm: Be more shouty if per-process pgtables aren't working
| * 825cc70fbf ALSA: oss: avoid missing-prototype warnings
| * a79da1659c nvme-multipath: don't call blk_mark_disk_dead in nvme_mpath_remove_disk
| * 9a195b9917 netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT
| * 82f505878f wifi: b43: fix incorrect __packed annotation
| * ab62fc176e scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed
| * e04de12881 wifi: mac80211: simplify chanctx allocation
| * 24dc97e135 arm64: vdso: Pass (void *) to virt_to_page()
| * 2944b9f0fd arm64/mm: mark private VM_FAULT_X defines as vm_fault_t
| * 39d84ddd9e ARM: dts: stm32: add pin map for CAN controller on stm32f7
| * b2f00acd53 wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value
| * ce135055be ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
| * 66f05cf2b2 s390/topology: honour nr_cpu_ids when adding CPUs
| * 7980368542 s390/pkey: zeroize key blobs
| * 42624bc8c3 media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221
| * 22fc36d59e media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*()
| * a47a3f7a9b media: dvb-core: Fix use-after-free due to race at dvb_register_device()
| * 50831747cb media: dvb-core: Fix use-after-free due on race condition at dvb_net
| * 9f74fec18f media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table
| * d6c47b2359 media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
| * 747a121914 media: dvb_ca_en50221: fix a size write bug
| * 34562df408 media: netup_unidvb: fix irq init by register it at the end of probe
| * 5e56e3d5eb media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address
| * 5240bc8c0c media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
| * cd6764cf45 media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer
| * ef0d867e29 media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer()
| * abaf49c5a9 media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
| * 4b61ee116a media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer()
| * 5e9ad9962f media: dvb_demux: fix a bug for the continuity counter
| * ae3e3ac8b2 ASoC: ssm2602: Add workaround for playback distortions
| * 6cf7f03d2d ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI codecs
| * 133c78bc67 xfrm: Check if_id in inbound policy/secpath match
| * f1a6d366cd um: harddog: fix modular build
| * e9d167ca48 ASoC: dwc: limit the number of overrun messages
| * 84dfd8bee5 nvme-pci: add quirk for missing secondary temperature thresholds
| * b32eeafd4e nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G
| * f7af470fad block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE
| * 8ba70707c3 nbd: Fix debugfs_create_dir error checking
| * 156f5237e9 fbdev: stifb: Fix info entry in sti_struct on error path
| * b3c7854287 fbdev: modedb: Add 1920x1080 at 60 Hz video mode
| * ad3de274e0 fbdev: imsttfb: Fix use after free bug in imsttfb_probe
| * fd8b4e28f4 gfs2: Don't deref jdesc in evict
| * a00cc85628 platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
| * 736626df53 media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE
| * 1eae6e9196 ARM: 9295/1: unwind:fix unwind abort for uleb128 case
| * af739a7015 btrfs: abort transaction when sibling keys check fails for leaves
| * 872a038dd4 drm/ast: Fix ARM compatibility
| * 3291f4a107 mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write()
| * fe6f6f4706 drm/amdgpu: Use the default reset when loading or reloading the driver
| * 2226d9ef63 ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs.
| * 65221bdde7 watchdog: menz069_wdt: fix watchdog initialisation
| * 6a7bf00389 drm/amdgpu: release gpu full access after "amdgpu_device_ip_late_init"
| * 8ac106aade rtnetlink: call validate_linkmsg in rtnl_create_link
| * beeffe764e mtd: rawnand: marvell: don't set the NAND frequency select
| * 6494318f11 mtd: rawnand: marvell: ensure timing values are written
| * 0fad29dabc net: dsa: mv88e6xxx: Increase wait after reset deactivation
| * 45f47d2cf1 net/sched: flower: fix possible OOB write in fl_set_geneve_opt()
| * b15adce7d3 net/mlx5: Read embedded cpu after init bit cleared
| * c3caee8fe1 net/mlx5e: Fix error handling in mlx5e_refresh_tirs
| * 1abb7b04ec udp6: Fix race condition in udp6_sendmsg & connect
| * 7dc379f885 net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report
| * 91b07931c1 net: sched: fix NULL pointer dereference in mq_attach
| * b1cb1ba1fb net/sched: Prohibit regrafting ingress or clsact Qdiscs
| * cde00dcdf0 net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs
| * 2e859de5ae net/sched: sch_clsact: Only create under TC_H_CLSACT
| * cff0af3d13 net/sched: sch_ingress: Only create under TC_H_INGRESS
| * a907a389c7 tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set
| * fade445f39 tcp: deny tcp_disconnect() when threads are waiting
| * 5434c81287 af_packet: do not use READ_ONCE() in packet_bind()
| * 60bd1403ba RDMA/irdma: Fix Local Invalidate fencing
| * 0b3c392b82 RDMA/irdma: Prevent QP use after free
| * bd2af69575 RDMA/irdma: Add SW mechanism to generate completions on error
| * 2d04dde4de mtd: rawnand: ingenic: fix empty stub helper definitions
| * 8f61d394b0 amd-xgbe: fix the false linkup in xgbe_phy_status
| * aefcb6ea1d af_packet: Fix data-races of pkt_sk(sk)->num.
| * c8775b97bf netrom: fix info-leak in nr_write_internal()
| * 8045788add net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure
| * 8d9d0bfd4c net/mlx5e: Don't attach netdev profile while handling internal error
| * d002e0287d net/mlx5: fw_tracer, Fix event handling
| * 3a7793ae69 riscv: Fix unused variable warning when BUILTIN_DTB is set
| * 3f1191bc5b dmaengine: pl330: rename _start to prevent build error
| * c4be5d71d7 iommu/amd: Don't block updates to GATag if guest mode is on
| * b4fd38c0c7 iommu/rockchip: Fix unwind goto issue
| * 190ea1c391 RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx
| * 2fa9ee0fd6 RDMA/bnxt_re: Fix a possible memory leak
| * fdc977f2e7 dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved()
| * f68eff0faf dmaengine: at_xdmac: Move the free desc to the tail of the desc list
| * ba0e7ca84a RDMA/hns: Modify the value of long message loopback slice
| * 15aeb44199 RDMA/hns: Fix base address table allocation
| * b0f40ecc46 RDMA/efa: Fix unsupported page sizes in device
| * f370588ec3 RDMA/bnxt_re: Fix the page_size used during the MR creation
* | 6720675504 Revert "Revert "binder_alloc: add missing mmap_lock calls when using the VMA""
* | 1b16baaf8b Revert "Revert "android: binder: stop saving a pointer to the VMA""
* | d62b5b7db6 Revert "binder: add lockless binder_alloc_(set|get)_vma()"
* | 4bbb48a4fe Revert "binder: fix UAF of alloc->vma in race with munmap()"
* | e772cc3c8f Merge 5.15.115 into android14-5.15-lts
|\|
| * d7af3e5ba4 Linux 5.15.115
| * e226893c93 netfilter: ctnetlink: Support offloaded conntrack entry deletion
| * 395d846c61 ipv{4,6}/raw: fix output xfrm lookup wrt protocol
| * 1bb8a65190 binder: fix UAF of alloc->vma in race with munmap()
| * 1cae0d5136 binder: add lockless binder_alloc_(set|get)_vma()
| * dd7aff43d0 Revert "android: binder: stop saving a pointer to the VMA"
| * 6802c70090 Revert "binder_alloc: add missing mmap_lock calls when using the VMA"
| * 09411f1b86 bluetooth: Add cmd validity checks at the start of hci_sock_ioctl()
| * 0f21b86217 xdp: xdp_mem_allocator can be NULL in trace_mem_connect().
| * b6c4afcbd6 irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable
| * 13b290f020 page_pool: fix inconsistency for page_pool_ring_[un]lock()
| * 3af319d514 net: page_pool: use in_softirq() instead
| * 1c097b9db1 xdp: Allow registering memory model without rxq reference
| * 623d965c2d net/mlx5e: Fix SQ wake logic in ptp napi_poll context
| * 9085886c04 irqchip/mips-gic: Use raw spinlock for gic_lock
| * 4517730b4c irqchip/mips-gic: Get rid of the reliance on irq_cpu_online()
| * 5fd7c1e36b binder: fix UAF caused by faulty buffer cleanup
| * c88d21c0ae bonding: fix send_peer_notif overflow
| * 7ee611fc85 Bonding: add arp_missed_max option
| * 5b925b48be net: dsa: mt7530: fix network connectivity with multiple CPU ports
| * 5a7266feaa net: dsa: mt7530: split-off common parts from mt7531_setup
| * 0753c1ef24 net: dsa: mt7530: rework mt753[01]_setup
| * 9902f91cf6 net: dsa: introduce helpers for iterating through ports using dp
| * d84b42b725 net: phy: mscc: enable VSC8501/2 RGMII RX clock
| * 3dce2f3d83 platform/x86: ISST: Remove 8 socket limit
| * 017a634f9f platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering
| * ff455f7fbc net/mlx5: Devcom, serialize devcom registration
| * 69966bce28 net/mlx5e: Fix deadlock in tc route query code
| * 1c4e3cf894 net/mlx5: devcom only supports 2 ports
| * 79ea1a12fb bpf: fix a memory leak in the LRU and LRU_PERCPU hash maps
| * 1f06b2a604 power: supply: bq24190: Call power_supply_changed() after updating input current
| * 8c6f881dc1 power: supply: core: Refactor power_supply_set_input_current_limit_from_supplier()
| * 1f9367a890 power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize
| * 75a7e9de60 power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes
| * e4c708a9bb power: supply: bq27xxx: Move bq27xxx_battery_update() down
| * 2288fa1ae9 power: supply: bq27xxx: expose battery data when CI=1
* | b5c8629086 Merge branch 'android14-5.15' into 'android14-5.15-lts'
* | 7a20f4ad2b Revert "usb: gadget: Properly configure the device for remote wakeup"
* | c51cba3cb0 Revert "usb: dwc3: fix gadget mode suspend interrupt handler issue"
* | dc7c06dba7 Merge 5.15.114 into android14-5.15-lts
|\|
| * 0ab06468cb Linux 5.15.114
| * 193c59ba72 net: phy: mscc: add VSC8502 to MODULE_DEVICE_TABLE
| * 350b95e86c 3c589_cs: Fix an error handling path in tc589_probe()
| * 7c2fa3e56d regulator: mt6359: add read check for PMIC MT6359
| * 28ebfb74fb firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors
| * 34b0985ebd arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert delay
| * 1e75506536 net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device
| * a89a69cea4 net/mlx5: Fix error message when failing to allocate device memory
| * e8a974bbf4 net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE
| * 5e0cc0d502 net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs
| * 792a8233fc net/mlx5e: do as little as possible in napi poll when budget is 0
| * fdf8f33e7d platform/mellanox: mlxbf-pmc: fix sscanf() error checking
| * d5ab5447d9 forcedeth: Fix an error handling path in nv_probe()
| * ae7c4ec426 sctp: fix an issue that plpmtu can never go to complete state
| * ee553694be ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg
| * aafa5019e2 x86/show_trace_log_lvl: Ensure stack pointer is aligned, again
| * 90314394a1 xen/pvcalls-back: fix double frees with pvcalls_new_active_socket()
| * ff151810fb coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet()
| * 24cf114743 regulator: pca9450: Fix BUCK2 enable_mask
| * cd41ec2350 fs: fix undefined behavior in bit shift for SB_NOUSER
| * c2f6599109 firmware: arm_ffa: Fix FFA device names for logical partitions
| * 6a26c62625 firmware: arm_ffa: Check if ffa_driver remove is present before executing
| * f64567bd95 power: supply: sbs-charger: Fix INHIBITED bit for Status reg
| * 71a9f146b3 power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status()
| * e98e5bebfc power: supply: bq27xxx: Fix poll_interval handling and races on remove
| * e01820a94a power: supply: bq27xxx: Fix I2C IRQ race on remove
| * d21b344857 power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition
| * c530f60e5a power: supply: mt6360: add a check of devm_work_autocancel in mt6360_charger_probe
| * 0dd4881238 power: supply: leds: Fix blink to LED on transition
| * 5e4bb063dc cifs: mapchars mount option ignored
| * 9b92e2d0eb ipv6: Fix out-of-bounds access in ipv6_find_tlv()
| * bf478c2643 bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields
| * 79081b3f48 octeontx2-pf: Fix TSOv6 offload
| * 114657365c selftests: fib_tests: mute cleanup error message
| * e06841a2ab net: fix skb leak in __skb_tstamp_tx()
| * 8f1512d78b ASoC: lpass: Fix for KASAN use_after_free out of bounds
| * b1bde4b436 media: radio-shark: Add endpoint checks
| * 43f569fd06 USB: sisusbvga: Add endpoint checks
| * da0f4b5576 USB: core: Add routines for endpoint checks in old drivers
| * 387bd0a3af udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated().
| * cf3b5cd712 net: fix stack overflow when LRO is disabled for virtual interfaces
| * 9e12c58a5e fbdev: udlfb: Fix endpoint check
| * aee97eec77 debugobjects: Don't wake up kswapd from fill_pool()
| * c09a7b6190 x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms
| * a9ffd42eb9 perf/x86/uncore: Correct the number of CHAs on SPR
| * 277f206bb8 parisc: Fix flush_dcache_page() for usage from irq context
| * eff115ca94 selftests/memfd: Fix unknown type name build failure
| * 1a98b6e028 x86/mm: Avoid incomplete Global INVLPG flushes
| * 683bb30c69 dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type
| * 647af8a998 btrfs: use nofs when cleaning up aborted transactions
| * 7e93fe1d17 gpio: mockup: Fix mode of debugfs files
| * 3a2d238c5a parisc: Allow to reboot machine after system halt
| * 96f8dd0483 parisc: Handle kgdb breakpoints only in kernel context
| * 16deb7413a m68k: Move signal frame following exception on 68020/030
| * 9be921854e net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize
| * 1f6ae24e3d ASoC: rt5682: Disable jack detection interrupt during suspend
| * 693acaa739 mmc: sdhci-esdhc-imx: make "no-mmc-hs400" works
| * 7177586e06 ALSA: hda/realtek: Enable headset onLenovo M70/M90
| * e6a624451a ALSA: hda: Fix unhandled register update during auto-suspend period
| * 7716da3fa1 ALSA: hda/ca0132: add quirk for EVGA X299 DARK
| * c37eb46c61 arm64: Also reset KASAN tag if page is not PG_mte_tagged
| * 291fe3d6f5 ocfs2: Switch to security_inode_init_security()
| * 4badd33929 spi: fsl-cpm: Use 16 bit mode for large transfers with even size
| * 28ffe8c846 spi: fsl-spi: Re-organise transfer bits_per_word adaptation
| * 381e55bffe ARM: dts: stm32: fix AV96 board SAI2 pin muxing on stm32mp15
| * ca338fa803 watchdog: sp5100_tco: Immediately trigger upon starting.
| * 6312c7cc07 dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries
| * 7ef9045fe7 dt-bindings: ata: ahci-ceva: convert to yaml
| * f191711553 usb: dwc3: fix gadget mode suspend interrupt handler issue
| * 7919af1dcb usb: gadget: Properly configure the device for remote wakeup
* | 49839eb143 ANDROID: GKI: preserve CRC generation for some bluetooth symbols
* | 4c5606f8aa Revert "tipc: add tipc_bearer_min_mtu to calculate min mtu"
* | f0cd76bc48 Revert "tipc: do not update mtu if msg_max is too small in mtu negotiation"
* | 6fb55b36cd Revert "tipc: check the bearer min mtu properly when setting it by netlink"
* | f7240aa50d Revert "firmware: arm_sdei: Fix sleep from invalid context BUG"
* | 4a21190782 Revert "ASoC: fsl_micfil: Fix error handler with pm_runtime_enable"
* | f373d7e7f5 Merge 5.15.113 into android14-5.15-lts
|\|
| * 1fe619a7d2 Linux 5.15.113
| * 7de20a23e5 HID: wacom: add three styli to wacom_intuos_get_tool_type
| * 25b835d408 HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs
| * a540aabefa HID: wacom: Force pen out of prox if no events have been received in a while
| * b4c7b54b83 s390/qdio: fix do_sqbs() inline assembly constraint
| * b8427b8522 nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()
| * cafdd9cefc powerpc/64s/radix: Fix soft dirty tracking
| * fe59dd824f tpm/tpm_tis: Disable interrupts for more Lenovo devices
| * b9eb4491f0 powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device
| * 317ee8c54f ceph: force updating the msg pointer in non-split case
| * e3d1adcad5 vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF
| * 03e39ec739 thunderbolt: Clear registers properly when auto clear isn't in use
| * 742ed5bb68 serial: qcom-geni: fix enabling deactivated interrupt
| * 6960267e7d serial: 8250_exar: Add support for USR298x PCI Modems
| * 7d8873ecbd serial: Add support for Advantech PCI-1611U card
| * 51d90382d2 statfs: enforce statfs[64] structure initialization
| * 865be1cff2 ksmbd: fix global-out-of-bounds in smb2_find_context_vals
| * 7657321b26 ksmbd: fix wrong UserName check in session_user
| * 61e043326e ksmbd: allocate one more byte for implied bcc[0]
| * 1c2461b41f ksmbd: smb2: Allow messages padded to 8byte boundary
| * 49f4794538 SMB3: drop reference to cfile before sending oplock break
| * 653d30a151 SMB3: Close all deferred handles of inode in case of handle lease break
| * 972a33e6cc can: kvaser_pciefd: Disable interrupts in probe error path
| * 143623940a can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt
| * c724a6edc1 can: kvaser_pciefd: Clear listen-only bit if not explicitly requested
| * f04628305c can: kvaser_pciefd: Empty SRB buffer in probe
| * da711a8af0 can: kvaser_pciefd: Call request_irq() before enabling interrupts
| * 4857ccfbe2 can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop()
| * 9ac2448c24 can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag
| * a17cf315f2 can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag
| * 83af087604 ALSA: hda/realtek: Add quirk for 2nd ASUS GU603
| * cc1924ab21 ALSA: hda/realtek: Add a quirk for HP EliteDesk 805
| * 3a32c51494 ALSA: hda/realtek: Add quirk for Clevo L140AU
| * 059a18e95e ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table
| * e8c7d7c43d ALSA: hda: Fix Oops by 9.1 surround channel names
| * 831a1ffb0a xhci: Fix incorrect tracking of free space on transfer rings
| * 4c5c487069 xhci-pci: Only run d3cold avoidance quirk for s2idle
| * fc0e18f95c usb: typec: altmodes/displayport: fix pin_assignment_show
| * 0ed9257a8a usb: gadget: u_ether: Fix host MAC address case
| * c51a131cac usb: dwc3: debugfs: Resume dwc3 before accessing registers
| * 720be29c7d USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value
| * 2ef3ecff09 usb-storage: fix deadlock when a scsi command timeouts more than once
| * 3b43d9df27 USB: usbtmc: Fix direction for 0-length ioctl control messages
| * 15d7441332 ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go
| * 62499cf3dd bridge: always declare tunnel functions
| * ec5caa765f netfilter: nft_set_rbtree: fix null deref on element insertion
| * b0cc763806 netfilter: nf_tables: fix nft_trans type confusion
| * addaba6801 vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit()
| * 3a0450d38a igb: fix bit_shift to be in [1..8] range
| * c15c3bb90c net: dsa: mv88e6xxx: Fix mv88e6393x EPC write command offset
| * 234e744d86 cassini: Fix a memory leak in the error handling path of cas_init_one()
| * 76a7cd047b scsi: storvsc: Don't pass unused PFNs to Hyper-V host
| * 05ad5a4d42 wifi: iwlwifi: mvm: don't trust firmware n_channels
| * d66490c293 wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock
| * fce7d92a89 wifi: mac80211: fix min center freq offset tracing
| * fd8bc0f581 net: bcmgenet: Restore phy_stop() depending upon suspend/close
| * 99c5acfd1f net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop()
| * ed1283c46d s390/cio: include subchannels without devices also for evaluation
| * 673cb47989 tipc: check the bearer min mtu properly when setting it by netlink
| * 575e84d90a tipc: do not update mtu if msg_max is too small in mtu negotiation
| * 5cf99d5f65 tipc: add tipc_bearer_min_mtu to calculate min mtu
| * 6a7690f2bd virtio_net: Fix error unwinding of XDP initialization
| * 18c0bd6888 virtio-net: Maintain reverse cleanup order
| * cdd8160dcd net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment()
| * f51d15d9bc drm/exynos: fix g2d_open/close helper function definitions
| * 45a158a212 SUNRPC: Fix trace_svc_register() call site
| * 1c28b206ae SUNRPC: always free ctxt when freeing deferred request
| * 54832355b0 SUNRPC: Remove svc_rqst::rq_xprt_hlen
| * 7a1dca0131 SUNRPC: Remove dead code in svc_tcp_release_rqst()
| * 9712097e89 SUNRPC: Clean up svc_deferred_class trace events
| * 8c26ecd887 tracing: Introduce helpers to safely handle dynamic-sized sockaddrs
| * 7851771789 SUNRPC: double free xprt_ctxt while still in use
| * 051af3f0b7 media: netup_unidvb: fix use-after-free at del_timer()
| * 8e37baf621 net: hns3: fix reset delay time to avoid configuration timeout
| * aaf7c7d844 net: hns3: fix sending pfc frames after reset issue
| * 56640004ee net: hns3: fix output information incomplete for dumping tx queue info with debugfs
| * 98e9648018 erspan: get the proto with the md version for collect_md
| * 5258395e67 serial: 8250_bcm7271: fix leak in `brcmuart_probe`
| * cc2f7cee93 serial: 8250_bcm7271: balance clk_enable calls
| * f76a18e53a serial: arc_uart: fix of_iomap leak in `arc_serial_probe`
| * 15251e783a tcp: fix possible sk_priority leak in tcp_v4_send_reset()
| * 2832d62446 vsock: avoid to close connected socket after the timeout
| * 2c1617dc6d ALSA: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15
| * bbb5ac533c ALSA: firewire-digi00x: prevent potential use after free
| * 81c8431524 net: phy: dp83867: add w/a for packet errors seen with short cables
| * c1bc2870f1 net: fec: Better handle pm_runtime_get() failing in .remove()
| * b598e76b49 selftets: seg6: disable rp_filter by default in srv6_end_dt4_l3vpn_test
| * 5041897b9f selftests: seg6: disable DAD on IPv6 router cfg for srv6_end_dt4_l3vpn_test
| * d6c89d776b af_key: Reject optional tunnel/BEET mode templates in outbound policies
| * 19457a4423 cpupower: Make TSC read per CPU for Mperf monitor
| * 3a4ff14b0e ASoC: fsl_micfil: Fix error handler with pm_runtime_enable
| * a2e5a77ae3 dt-bindings: display/msm: dsi-controller-main: Document qcom, master-dsi and qcom, sync-dual-dsi
| * e1c9c7482e drm/msm/dpu: Remove duplicate register defines from INTF
| * 85eb9aef4f drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header
| * b688a4115b drm/msm/dpu: Add INTF_5 interrupts
| * d8a291e39a drm/msm/dp: unregister audio driver during unbind
| * 288247879f Revert "Fix XFRM-I support for nested ESP tunnels"
| * 46f1a95354 xfrm: don't check the default policy if the policy allows the packet
| * 98f179c5b0 platform/x86: hp-wmi: add micmute to hp_wmi_keymap struct
| * a832a43fdd platform/x86: Move existing HP drivers to a new hp subdir
| * df14d64b36 platform/x86: hp-wmi: Support touchpad on/off
| * 6158e958e8 parisc: Replace regular spinlock with spin_trylock on panic path
| * 1fa3fb4f70 mfd: dln2: Fix memory leak in dln2_probe()
| * c9faa002ea soundwire: qcom: gracefully handle too many ports in DT
| * b61382a825 phy: st: miphy28lp: use _poll_timeout functions for waits
| * dc9c54d34d Input: xpad - add constants for GIP interface numbers
| * 92c089a931 iommu/sprd: Release dma buffer to avoid memory leak
| * a2bc5241ee iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any
| * aa50d0a460 clk: tegra20: fix gcc-7 constant overflow warning
| * 20f9bfc664 fs/ntfs3: Fix a possible null-pointer dereference in ni_clear()
| * 85afd30074 fs/ntfs3: Add length check in indx_get_root
| * 2a67f26f70 fs/ntfs3: Validate MFT flags before replaying logs
| * d4b7448252 fs/ntfs3: Fix NULL dereference in ni_write_inode
| * 1fd5b80c93 fs/ntfs3: Enhance the attribute size check
| * 6d3d3283e6 fs/ntfs3: Fix NULL pointer dereference in 'ni_write_inode'
| * 8ebcbd1811 iommu/arm-smmu-qcom: Limit the SMR groups to 128
| * 036e02dfd5 RDMA/core: Fix multiple -Warray-bounds warnings
| * ff70ad9159 recordmcount: Fix memory leaks in the uwrite function
| * f3458b84c6 sched: Fix KCSAN noinstr violation
| * 0652b54957 mcb-pci: Reallocate memory region to avoid memory overlapping
| * 1ba5594739 serial: 8250: Reinit port->pm on port specific driver unbind
| * ee009c2abc usb: typec: tcpm: fix multiple times discover svids error
| * 973f84956b HID: wacom: generic: Set battery quirk only when we see battery data
| * b2069cfe1b spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3
| * 6293d0533c HID: logitech-hidpp: Reconcile USB and Unifying serials
| * 3f1719790c HID: logitech-hidpp: Don't use the USB serial for USB devices
| * a97e60bd28 staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE
| * 116b9c002c Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
| * 392a06f965 Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set
| * c018360885 Bluetooth: btintel: Add LE States quirk support
| * 7aa14a7a3a ipvs: Update width of source for ip_vs_sync_conn_options
| * 52851d0c33 nbd: fix incomplete validation of ioctl arg
| * 3d3f8fe01a wifi: ath11k: Fix SKB corruption in REO destination ring
| * 87940e4030 wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace
| * 35e304dbce null_blk: Always check queue mode setting from configfs
| * 82f877ec9b wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf
| * 7545f21eee wifi: iwlwifi: pcie: fix possible NULL pointer dereference
| * 095018267c bpf: Add preempt_count_{sub,add} into btf id deny list
| * e3e6e252d7 samples/bpf: Fix fout leak in hbm's run_bpf_prog
| * e2759a59a4 f2fs: fix to check readonly condition correctly
| * d8f4ad5f39 f2fs: fix to drop all dirty pages during umount() if cp_error is set
| * 613f6cde5e ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa()
| * bc4a3e1d07 ext4: set goal start correctly in ext4_mb_normalize_request
| * 203e8875d2 scsi: ufs: ufs-pci: Add support for Intel Lunar Lake
| * 71ee06193e gfs2: Fix inode height consistency check
| * e84282efc8 scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition
| * c6ed54dd90 lib: cpu_rmap: Avoid use after free on rmap->obj array entries
| * 1911cca591 scsi: target: iscsit: Free cmds before session free
| * a6f9f53d73 net: Catch invalid index in XPS mapping
| * e3644d15d7 net: pasemi: Fix return type of pasemi_mac_start_tx()
| * d5eaf2a6b0 bnxt: avoid overflow in bnxt_get_nvram_directory()
| * f910374870 scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow
| * 99f8a15af6 ext2: Check block size validity during mount
| * e242c66f7e wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex
| * fe913db2ac bpf: Annotate data races in bpf_local_storage
| * aa186074b6 wifi: ath: Silence memcpy run-time false positive warning
| * 9f87ee85ce media: Prefer designated initializers over memset for subdev pad ops
| * 66acfe798c drm/amd: Fix an out of bounds error in BIOS parser
| * d997c920a5 ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects
| * 3a7a4aa395 ACPICA: Avoid undefined behavior: applying zero offset to null pointer
| * 0aa3d558f1 drm/msm/dp: Clean up handling of DP AUX interrupts
| * 33cc6ef106 drm/tegra: Avoid potential 32-bit integer overflow
| * 19882a49b2 remoteproc: stm32_rproc: Add mutex protection for workqueue
| * f4a573eed6 ACPI: EC: Fix oops when removing custom query handlers
| * 66caf22787 firmware: arm_sdei: Fix sleep from invalid context BUG
| * 162a9b3215 memstick: r592: Fix UAF bug in r592_remove due to race condition
| * dcf632bca4 media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish
| * f0a06203f2 media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish()
| * c127337841 arm64: dts: qcom: msm8996: Add missing DWC3 quirks
| * 15856ab956 regmap: cache: Return error in cache sync operations for REGCACHE_NONE
| * e9c5fc4f3f drm/amd/display: Use DC_LOG_DC in the trasform pixel function
| * 9fd5be74b3 drm/displayid: add displayid_get_header() and check bounds better
| * 37cab61a52 fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
| * e30a55e98a rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access
| * 718b66c5eb refscale: Move shutdown from wait_event() to wait_event_idle()
| * 620a3c2822 ext4: allow ext4_get_group_info() to fail
| * 99f7ce0fac ext4: allow to find by goal if EXT4_MB_HINT_GOAL_ONLY is set
| * 1de53f2223 ext4: fix lockdep warning when enabling MMP
| * c53936d9fb ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled
| * 3f937d6615 ext4: reflect error codes from ext4_multi_mount_protect() to its callers
| * 1284253ce9 ext4: remove an unused variable warning with CONFIG_QUOTA=n
| * 96b3233f42 fbdev: arcfb: Fix error handling in arcfb_probe()
| * 33b5890dfa drm/i915/dp: prevent potential div-by-zero
| * a41559ae36 af_unix: Fix data races around sk->sk_shutdown.
| * 610fd07c13 af_unix: Fix a data race of sk->sk_receive_queue->qlen.
| * 62d43dd14b net: datagram: fix data-races in datagram_poll()
| * 7c8be27727 ipvlan:Fix out-of-bounds caused by unclear skb->cb
| * 3c9d916e39 gve: Remove the code of clearing PBA bit
| * 43d938a82e tcp: add annotations around sk->sk_shutdown accesses
| * 9dd9ffe118 net: add vlan_get_protocol_and_depth() helper
| * 538b511bc5 net: deal with most data-races in sk_wait_event()
| * 159a81d5e5 net: annotate sk->sk_err write from do_recvmmsg()
| * 1d5c8b01f1 netlink: annotate accesses to nlk->cb_running
| * 1a2b27f2d7 netfilter: conntrack: fix possible bug_on with enable_hooks=1
| * 8d56f00c61 netfilter: nf_tables: always release netdev hooks from notifier
| * de260d1e02 net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs().
| * 5f5549b998 net: stmmac: Initialize MAC_ONEUS_TIC_COUNTER register
| * b0a513ba5b net: stmmac: switch to use interrupt for hw crosstimestamping
| * 46e100be0f linux/dim: Do nothing if no time delta between samples
| * 2fdce3e52d tick/broadcast: Make broadcast device replacement work correctly
| * 6e455b89f0 scsi: ufs: core: Fix I/O hang that occurs when BKOPS fails in W-LUN suspend
| * b614567e0d net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe()
| * da3cd1a81d ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings
| * ac88a1f41f drm/mipi-dsi: Set the fwnode for mipi_dsi_device
* | 5807982cf4 ANDROID: GKI: fix up mhi.ko build location.
* | e42a74b5f8 Merge 5.15.112 into android14-5.15-lts
|\|
| * 9d6bde8536 Linux 5.15.112
| * 0788273bd0 drm/amd/display: Fix hang when skipping modeset
| * de9a3ed423 RISC-V: Fix up a cherry-pick warning in setup_vm_final()
| * 3c9b08a169 drbd: correctly submit flush bio on barrier
| * d0bcf6caa2 serial: 8250: Fix serial8250_tx_empty() race with DMA Tx
| * 0b401c2ccc drm/msm/adreno: adreno_gpu: Use suspend() instead of idle() on load error
| * 8beaa3cb29 ext4: fix invalid free tracking in ext4_xattr_move_to_block()
| * 978e5e9111 ext4: remove a BUG_ON in ext4_mb_release_group_pa()
| * 2b3b8f18c0 ext4: bail out of ext4_xattr_ibody_get() fails for any reason
| * f22b274429 ext4: add bounds checking in get_max_inline_xattr_value_size()
| * 640c8c3659 ext4: fix deadlock when converting an inline directory in nojournal mode
| * b253193611 ext4: improve error handling from ext4_dirhash()
| * b2f1314e6e ext4: improve error recovery code paths in __ext4_remount()
| * 5f7d66e5e5 ext4: check iomap type only if ext4_iomap_begin() does not fail
| * f5e687698c ext4: fix data races when using cached status extents
| * 6d9a705a65 ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum
| * d55e76e115 ext4: fix WARNING in mb_find_extent
| * c5c385baee locking/rwsem: Add __always_inline annotation to __down_read_common() and inlined callers
| * ed76d3a891 ksmbd: not allow guest user on multichannel
| * 4f9baa0667 ksmbd: fix deadlock in ksmbd_find_crypto_ctx()
| * bc77a6e933 ksmbd: fix racy issue while destroying session on multichannel
| * a89ff57e4d ksmbd: fix kernel oops from idr_remove()
| * 876a7e3b58 ksmbd: add channel rwlock
| * 05cbc9806a ksmbd: replace sessions list in connection with xarray
| * f86a1a74d9 ksmbd: fix multi session connection failure
| * bb3b772f18 ksmbd: set RSS capable in FSCTL_QUERY_NETWORK_INTERFACE_INFO
| * 2456e2889c wifi: rtw88: rtw8821c: Fix rfe_option field width
| * 615aff165b drm/amd/display: Add NULL plane_state check for cursor disable logic
| * c11b90aced drm/amd/display: Refine condition of cursor visibility for pipe-split
| * bf16debcda drm/msm/adreno: fix runtime PM imbalance at gpu load
| * bac00e57cd drm/msm: Remove struct_mutex usage
| * 17eeeac92b drm/i915/dg2: Add HDMI pixel clock frequencies 267.30 and 319.89 MHz
| * 6d5e6d5a70 drm/i915/dg2: Add additional HDMI pixel clock frequencies
| * 06af228515 drm/i915/dg2: Support 4k@30 on HDMI
| * a63c6b1eed ASoC: soc-pcm.c: call __soc_pcm_close() in soc_pcm_close()
| * aa803e6eca ASoC: DPCM: Don't pick up BE without substream
| * 44b685c4ba ASoC: soc-pcm: Move debugfs removal out of spinlock
| * 0d5017dea0 ASoC: soc-compress: Inherit atomicity from DAI link for Compress FE
| * a536c367b0 ASoC: soc-pcm: Fix DPCM lockdep warning due to nested stream locks
| * e2e5b8c729 fs/ntfs3: Refactoring of various minor issues
| * 5047a228d4 HID: wacom: insert timestamp to packed Bluetooth (BT) events
| * db587340a0 HID: wacom: Set a default resolution for older tablets
| * 823787470e drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend
| * b39ba90d69 drm/amdgpu: Fix vram recover doesn't work after whole GPU reset (v2)
| * cd3c0f7013 drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras
| * 6d4b6abedd drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
| * db307e725d drm/amd/display: fix flickering caused by S/G mode
| * 61b694b742 drm/panel: otm8009a: Set backlight parent to panel device
| * 8f57f3e112 f2fs: fix potential corruption when moving a directory
| * e2d1cc82ad drm/msm: fix NULL-deref on irq uninstall
| * 8f0e1ad532 drm/msm: fix NULL-deref on snapshot tear down
| * 74543041c0 drm/bridge: lt8912b: Fix DSI Video Mode
| * 9d79ccd971 ARM: dts: s5pv210: correct MIPI CSIS clock name
| * 137259261c ARM: dts: exynos: fix WM8960 clock name in Itop Elite
| * eb15fb94d4 remoteproc: imx_rproc: Call of_node_put() on iteration error
| * de26e064ed remoteproc: st: Call of_node_put() on iteration error
| * 8915e44eb3 remoteproc: stm32: Call of_node_put() on iteration error
| * 975b80702f sh: nmi_debug: fix return value of __setup handler
| * 66dbc36121 sh: init: use OF_EARLY_FLATTREE for early init
| * bb870c4b73 sh: mcount.S: fix build error when PRINTK is not enabled
| * be95f9ebaf sh: math-emu: fix macro redefined warning
| * 9fdf3666e3 SMB3: force unmount was failing to close deferred close files
| * c3a0ae5259 smb3: fix problem remounting a share after shutdown
| * 17ad86d8c1 inotify: Avoid reporting event with invalid wd
| * e51cd74e32 platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i
| * 21de866f75 platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet
| * 5af78b437c cifs: release leases for deferred close handles when freezing
| * f43b5573cd cifs: fix pcchunk length type in smb2_copychunk_range
| * 69dfa5a2e8 btrfs: fix space cache inconsistency after error loading it from disk
| * e0710a4979 btrfs: print-tree: parent bytenr must be aligned to sector size
| * bcc401bb86 btrfs: zero the buffer before marking it dirty in btrfs_redirty_list_add
| * f264be2414 btrfs: don't free qgroup space unless specified
| * 29478148bb btrfs: fix encoded write i_size corruption with no-holes
| * 91f585024e btrfs: zoned: fix wrong use of bitops API in btrfs_ensure_empty_zones
| * 77c6323dad btrfs: fix btrfs_prev_leaf() to not return the same key twice
| * b13e20cc58 perf stat: Separate bperf from bpf_profiler
| * 2baa45d8f5 perf evlist: Refactor evlist__for_each_cpu()
| * 871149abc1 perf symbols: Fix return incorrect build_id size in elf_read_build_id()
| * f716374c4e crypto: engine - fix crypto_queue backlog handling
| * fa4e304bbd crypto: engine - Use crypto_request_complete
| * e7ce4ba116 crypto: api - Add scaffolding to change completion function signature
| * a8cc4d5adf crypto: engine - check if BH is disabled during completion
| * 7b36a06bac crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs()
| * b6e2d1e253 perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp()
| * 4f128167e6 perf pmu: zfree() expects a pointer to a pointer to zero it after freeing its contents
| * e685e2e2bd perf vendor events power9: Remove UTF-8 characters from JSON files
| * a6ef72c38c perf scripts intel-pt-events.py: Fix IPC output for Python 2
| * 53f7b55f6b net: enetc: check the index of the SFI rather than the handle
| * a0cb00295d virtio_net: suppress cpu stall when free_unused_bufs
| * b4e16ea5f1 virtio_net: split free_unused_bufs()
| * f495e435e5 net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621
| * dfad4eb4c4 ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init`
| * 10c5ea3957 drm/amdgpu: add a missing lock for AMDGPU_SCHED
| * 54c466c60e af_packet: Don't send zero-byte data in packet_sendmsg_spkt().
| * c177dd465f ionic: catch failure from devlink_alloc
| * da81af0ef8 ethtool: Fix uninitialized number of lanes
| * 27b0d1b81f ionic: remove noise from ethtool rxnfc error msg
| * d37f6a8323 octeontx2-vf: Detach LF resources on probe cleanup
| * 00e985958b octeontx2-pf: Disable packet I/O for graceful exit
| * b5ad803dec octeontx2-af: Skip PFs if not enabled
| * e39148d3d7 octeontx2-af: Secure APR table update with the lock
| * a895ab54af rxrpc: Fix hard call timeout units
| * f5b44b2a17 sfc: Fix module EEPROM reporting for QSFP modules
| * 98a20dcedd r8152: move setting r8153b_rx_agg_chg_indicate()
| * 4fbf19a5bd r8152: fix the poor throughput for 2.5G devices
| * d0ebe36065 r8152: fix flow control issue of RTL8156A
| * 55aeff5361 net/sched: act_mirred: Add carrier check
| * 59bf62f0ed RISC-V: mm: Enable huge page support to kernel_page_present() function
| * cc4ae807db watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe()
| * b36cc1c394 writeback: fix call of incorrect macro
| * f98f2ac30f net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu
| * 56444f3061 selftests: srv6: make srv6_end_dt46_l3vpn_test more robust
| * c5ce7c4517 sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()
| * cb145932fc net/sched: cls_api: remove block_cb from driver_list before freeing
| * 480577d419 net/ncsi: clear Tx enable mode when handling a Config required AEN
| * 5e756a59ce scsi: qedi: Fix use after free bug in qedi_remove()
| * fd6204d772 drm/hyperv: Don't overwrite dirt_needed value set by host
| * f8d9e062a6 fs/ntfs3: Fix null-ptr-deref on inode->i_op in ntfs_lookup()
| * ce30b2f48b ASoC: soc-pcm: fix BE handling of PAUSE_RELEASE
| * 74201b3c3e ASoC: soc-pcm: test refcount before triggering
| * 2cf8c9f883 ASoC: soc-pcm: serialize BE triggers
| * 703ebcf64a ASoC: soc-pcm: Fix and cleanup DPCM locking
| * c474bb8000 ASoC: soc-pcm: align BE 'atomicity' with that of the FE
| * 13390bea97 ASoC: soc-pcm: use GFP_ATOMIC for dpcm structure
| * 25361a0155 mailbox: zynqmp: Fix counts of child nodes
| * f9dd36311b mailbox: zynq: Switch to flexible array to simplify code
| * 2343385fe6 bus: mhi: host: Range check CHDBOFF and ERDBOFF
| * a7561c04ad bus: mhi: host: Use mhi_tryset_pm_state() for setting fw error state
| * 7517f62ea0 bus: mhi: host: Remove duplicate ee check for syserr
| * 9fbf10148f bus: mhi: Move host MHI code to "host" directory
| * 43b2f7d690 ubifs: Fix memory leak in do_rename
| * 9933a9086c ubifs: Fix AA deadlock when setting xattr for encrypted file
| * 21ad89e197 crypto: ccp - Clear PSP interrupt status register before calling handler
| * 93f8b66403 ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus
* | bc77a1c78d Revert "uapi/linux/const.h: prefer ISO-friendly __typeof__"
* | 87f6012910 Revert "sched: Make struct sched_statistics independent of fair sched class"
* | 5390c024c3 Revert "sched: Fix DEBUG && !SCHEDSTATS warn"
* | ece8426754 Revert "platform: Provide a remove callback that returns no value"
* | 9325fcde01 Revert "media: rcar_fdp1: Convert to platform remove callback returning void"
* | c2773262b8 Merge 5.15.111 into android14-5.15-lts
|\|
| * b0ece631f8 Linux 5.15.111
| * 0a008c5098 sched: Fix DEBUG && !SCHEDSTATS warn
| * 21c2a45448 netfilter: nf_tables: deactivate anonymous set from preparation phase
| * aa6ff950f8 arm64: dts: qcom: sdm845: correct dynamic power coefficients - again
| * 2931ed45bf sound/oss/dmasound: fix 'dmasound_setup' defined but not used
| * 503e554782 debugobject: Ensure pool refill (again)
| * 6b84832966 perf intel-pt: Fix CYC timestamps after standalone CBR
| * 06106efa20 perf auxtrace: Fix address filter entire kernel size
| * 11c6fb35df dm: don't lock fs when the map is NULL in process of resume
| * e11765cea2 dm ioctl: fix nested locking in table_clear() to remove deadlock concern
| * f76fcb9d43 dm flakey: fix a crash with invalid table line
| * a5d8c6bf58 dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path
| * 56e952ae6d dm clone: call kmem_cache_destroy() in dm_clone_init() error path
| * f382705d04 dm verity: fix error handling for check_at_most_once on FEC
| * 1821a33bb2 ia64: fix an addr to taddr in huge_pte_offset()
| * 3a57c70e9e s390/dasd: fix hanging blockdevice after request requeue
| * ed7e8beb20 btrfs: scrub: reject unsupported scrub flags
| * 14383698c0 scripts/gdb: fix lx-timerlist for Python3
| * 33383fbe4f clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent
| * e8353dea7d wifi: rtl8xxxu: RTL8192EU always needs full init
| * 384a0dcac2 mailbox: zynqmp: Fix typo in IPI documentation
| * 09206edff0 mailbox: zynqmp: Fix IPI isr handling
| * 6d1af51781 mtd: core: fix error path for nvmem provider
| * 8444b46e16 mtd: core: fix nvmem error reporting
| * 7c253e9868 mtd: core: provide unique name for nvmem device, take two
| * 6869508407 md/raid10: fix null-ptr-deref in raid10_sync_request
| * 8d07d91196 nilfs2: fix infinite loop in nilfs_mdt_get_block()
| * 13f73ef77b nilfs2: do not write dirty data after degenerating to read-only
| * ab0748f246 ALSA: usb-audio: Add quirk for Pioneer DDJ-800
| * a87e5b9b4c parisc: Fix argument pointer in real64_call_asm()
| * f1b4681cfa afs: Fix updating of i_size with dv jump from server
| * 33f302c9bf mfd: tqmx86: Correct board names for TQMxE39x
| * ce01b75447 mfd: tqmx86: Specify IO port register range more precisely
| * a23b3b2be0 mfd: tqmx86: Do not access I2C_DETECT register through io_base
| * 388d2578c7 thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe
| * bdcf9fec87 dmaengine: at_xdmac: do not enable all cyclic channels
| * a5227b3be8 dmaengine: at_xdmac: Fix race for the tx desc callback
| * 2b68028d77 dmaengine: at_xdmac: Fix concurrency over chan's completed_cookie
| * 738a4fdbd1 dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing
| * fd6316dec2 dmaengine: dw-edma: Fix to change for continuous transfer
| * dd23c11136 dma: gpi: remove spurious unlock in gpi_ch_init
| * dce3bdaee3 phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port
| * 1cccf7c5c7 pwm: mtk-disp: Configure double buffering before reading in .get_state()
| * d2798512fa pwm: mtk-disp: Disable shadow registers before setting backlight values
| * 8ffa1cb8bc leds: tca6507: Fix error handling of using fwnode_property_read_string
| * e63e3a0fc0 dmaengine: mv_xor_v2: Fix an error code.
| * 332ca024a8 leds: TI_LMU_COMMON: select REGMAP instead of depending on it
| * c904a070d7 pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration
| * 40566def18 ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline
| * 18eb23891a ext4: fix i_disksize exceeding i_size problem in paritally written case
| * 3dc3a86b88 SMB3: Close deferred file handles in case of handle lease break
| * 0f87e18203 SMB3: Add missing locks to protect deferred close file list
| * b574e73db8 timekeeping: Fix references to nonexistent ktime_get_fast_ns()
| * ccfede0a2c openrisc: Properly store r31 to pt_regs on unhandled exceptions
| * 1c7456aa5d clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails
| * c87c6d5050 RDMA/mlx5: Use correct device num_ports when modify DC
| * d2823237da SUNRPC: remove the maximum number of retries in call_bind_status
| * c11e44ac1a RDMA/mlx5: Fix flow counter query via DEVX
| * 7acad58049 Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe
| * b6157a9f0f clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling
| * 33f9b8de1b clk: qcom: regmap: add PHY clock source implementation
| * 0ccc1a6bac NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease
| * a2bd706ab6 IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests
| * 6bbc49661c IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order
| * 00cc21e32e RDMA/srpt: Add a check for valid 'mad_agent' pointer
| * 03b9d26f33 RDMA/cm: Trace icm_send_rej event before the cm state is reset
| * 30218b7698 clk: qcom: gcc-sm6115: Mark RCGs shared where applicable
| * 5255051c8f RDMA/siw: Remove namespace check from siw_netdev_event()
| * 48ba87f6e1 clk: add missing of_node_put() in "assigned-clocks" property parsing
| * 3d7c6f2076 power: supply: generic-adc-battery: fix unit scaling
| * c58ea97aa9 fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de()
| * cd7e1d6792 fs/ntfs3: Fix OOB read in indx_insert_into_buffer
| * 952bbfcedb fs/ntfs3: Add check for kmemdup
| * 3030f2b9b3 fs/ntfs3: Fix memory leak if ntfs_read_mft failed
| * d1faeb14bc rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time
| * 9911be2155 RDMA/mlx4: Prevent shift wrapping in set_user_sq_size()
| * 44438a4959 rtc: omap: include header for omap_rtc_power_off_program prototype
| * 6d19fe968e workqueue: Fix hung time report of worker pools
| * 6c073c5a5b workqueue: Introduce show_one_worker_pool and show_one_workqueue.
| * e89f95c685 RDMA/rdmavt: Delete unnecessary NULL check
| * 9721b14e6c RDMA/siw: Fix potential page_array out of range access
| * 8d909684bd clk: at91: clk-sam9x60-pll: fix return value check
| * 623941780d sched/rt: Fix bad task migration for rt tasks
| * 594d2a0555 Revert "objtool: Support addition to set CFA base"
| * 80973ce36f perf/core: Fix hardlockup failure caused by perf throttle
| * 3e09b68fc5 sched/fair: Fix inaccurate tally of ttwu_move_affine
| * c3b9f95598 sched: Make struct sched_statistics independent of fair sched class
| * 6002989848 sched/fair: Use __schedstat_set() in set_next_entity()
| * 94bcf94c25 powerpc/rtas: use memmove for potentially overlapping buffer copy
| * f7107d44df macintosh: via-pmu-led: requires ATA to be set
| * 85842228df powerpc/sysdev/tsi108: fix resource printk format warnings
| * 179cc5ab95 powerpc/wii: fix resource printk format warnings
| * 516c27922c powerpc/mpc512x: fix resource printk format warning
| * da961d510b macintosh/windfarm_smu_sat: Add missing of_node_put()
| * 5b9fc529b6 virtio_ring: don't update event idx on get_buf
| * ee0b614631 spmi: Add a check for remove callback when removing a SPMI driver
| * be267f30b0 staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
| * 424cf29296 serial: 8250: Add missing wakeup event reporting
| * 8dfd00bfd5 tty: serial: fsl_lpuart: adjust buffer length to the intended size
| * 59ecc2cf34 firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
| * ee53a7a880 usb: mtu3: fix kernel panic at qmu transfer done irq handler
| * 6b0d399dac usb: chipidea: fix missing goto in `ci_hdrc_probe`
| * 6d4325ebd8 usb: gadget: tegra-xudc: Fix crash in vbus_draw
| * d96f6bc107 sh: sq: Fix incorrect element size for allocating bitmap buffer
| * 397eb669da uapi/linux/const.h: prefer ISO-friendly __typeof__
| * d1c4dedcd2 scripts/gdb: raise error with reduced debugging information
| * 2d65599ad1 i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path
| * d453f25faf spi: cadence-quadspi: fix suspend-resume implementations
| * 6a129c0e99 ASoC: fsl_mqs: move of_node_put() to the correct location
| * 8506318455 coresight: etm_pmu: Set the module field
| * db6f1b2bba HID: amd_sfh: Add support for shutdown operation
| * b711dd0ba9 scripts/gdb: bail early if there are no generic PD
| * eaecf281c2 scripts/gdb: bail early if there are no clocks
| * 0110bfacff ia64: salinfo: placate defined-but-not-used warning
| * 51395777f6 ia64: mm/contig: fix section mismatch warning/error
| * 1a2a0d5b06 PCI/EDR: Clear Device Status after EDR error recovery
| * cc4f0e168a of: Fix modalias string generation
| * 770d30b135 vmci_host: fix a race condition in vmci_host_poll() causing GPF
| * 08c7608798 spi: fsl-spi: Fix CPM/QE mode Litte Endian
| * f345d4d71e spi: qup: Don't skip cleanup in remove's error path
| * 77b0c0dd2c linux/vt_buffer.h: allow either builtin or modular for macros
| * af9ec18aa8 ASoC: es8316: Handle optional IRQ assignment
| * 39287d16b2 PCI: imx6: Install the fault handler only on compatible match
| * 1e58fb6b1c usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition
| * f90822ad63 spi: imx: Don't skip cleanup in remove's error path
| * e9ded9dd5d spi: spi-imx: using pm_runtime_resume_and_get instead of pm_runtime_get_sync
| * 193f7fffdc serial: 8250_bcm7271: Fix arbitration handling
| * f67cc4929e iio: light: max44009: add missing OF device matching
| * 7e42057532 fpga: bridge: fix kernel-doc parameter description
| * 72b1ce9045 serial: stm32: Re-assert RTS/DE GPIO in RS485 mode only if more data are transmitted
| * 59ed254dd3 serial: stm32: re-introduce an irq flag condition in usart_receive_chars
| * 4b7bb1c7be usb: dwc3: gadget: Change condition for processing suspend event
| * beb12083c1 usb: host: xhci-rcar: remove leftover quirk handling
| * 295f3fcaa8 pstore: Revert pmsg_lock back to a normal mutex
| * 2491b999a6 drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler()
| * 209850f177 drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler()
| * 1ffb2ca650 ipmi: ASPEED_BT_IPMI_BMC: select REGMAP_MMIO instead of depending on it
| * 43e4197dd5 tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.
| * 1d2f799c16 net: amd: Fix link leak when verifying config failed
| * 5d6e5c054e netlink: Use copy_to_user() for optval in netlink_getsockopt().
| * a789192f36 Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work"
| * a54ec573d9 ipv4: Fix potential uninit variable access bug in __ip_make_skb()
| * d0b43125ec net/sched: sch_fq: fix integer overflow of "credit"
| * 7a45b4e1c8 netfilter: nf_tables: don't write table validation state without mutex
| * 8913abddad bpf: Don't EFAULT for getsockopt with optval=NULL
| * 77f245ce05 net: stmmac:fix system hang when setting up tag_8021q VLAN for DSA ports
| * a9e96eef82 net/mlx5: E-switch, Don't destroy indirect table in split rule
| * 05cf6f353d ixgbe: Enable setting RSS table to default values
| * 624b73f776 ixgbe: Allow flow hash to be set via ethtool
| * e302e9ca14 wifi: iwlwifi: fw: fix memory leak in debugfs
| * 53b3b1f563 wifi: iwlwifi: mvm: check firmware response size
| * aa11a89445 wifi: mt76: mt7921e: improve reliability of dma reset
| * f8923ad9dd wifi: mt76: fix 6GHz high channel not be scanned
| * 613b51663f wifi: mt76: mt7921e: fix probe timeout after reboot
| * 5279aaf9f5 wifi: mt76: add flexible polling wait-interval support
| * ac9fec5b56 wifi: mt76: handle failure of vzalloc in mt7615_coredump_work
| * 210e6d01cc wifi: iwlwifi: make the loop for card preparation effective
| * dff2a7b330 jdb2: Don't refuse invalidation of already invalidated buffers
| * 358317ad9c wifi: iwlwifi: fw: move memset before early return
| * cccf85e047 wifi: iwlwifi: mvm: initialize seq variable
| * b3cecbb257 wifi: iwlwifi: yoyo: Fix possible division by zero
| * 4636c35b7e wifi: iwlwifi: yoyo: skip dump correctly on hw error
| * 34222897e0 md/raid10: don't call bio_start_io_acct twice for bio which experienced read error
| * d6cfcf98b8 md/raid10: fix memleak of md thread
| * 7f673fa34c md/raid10: fix memleak for 'conf->bio_split'
| * 8d09065802 md/raid10: fix leak of 'r10bio->remaining' for recovery
| * 901b4918fa md/raid10: fix task hung in raid10d
| * fc04998351 md/raid10: factor out code from wait_barrier() to stop_waiting_barrier()
| * 39db562b3f md: raid10 add nowait support
| * 74af08efa5 md: drop queue limitation for RAID1 and RAID10
| * 337d1d88be bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap
| * 12e70c6f4e selftests/bpf: Fix leaked bpf_link in get_stackid_cannot_attach
| * 103a427542 nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage"
| * 9fe41e6482 nvme: fix async event trace event
| * 13475e6391 nvme: handle the persistent internal error AER
| * 30b9073583 nvmet: fix I/O Command Set specific Identify Controller
| * 42bcbc2a90 nvmet: fix Identify Active Namespace ID list handling
| * 92cf81746e nvmet: fix Identify Controller handling
| * ac86d59eaa nvmet: fix Identify Namespace handling
| * c7e98afeca nvmet: fix error handling in nvmet_execute_identify_cns_cs_ns()
| * 537083b127 nvmet: move the call to nvmet_ns_changed out of nvmet_ns_revalidate
| * 080826d167 nvmet: use i_size_read() to set size for file-ns
| * f333854dce bpf, sockmap: fix deadlocks in the sockhash and sockmap
| * c8a67bc857 net: ethernet: stmmac: dwmac-rk: fix optional phy regulator handling
| * fd8c83d837 scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
| * 9a7f63283a f2fs: fix to avoid use-after-free for cached IPU bio
| * 119f278ea9 xsk: Fix unaligned descriptor validation
| * 1056b20993 crypto: drbg - Only fail when jent is unavailable in FIPS mode
| * 9317d66120 crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors
| * 80bfd8b184 bpftool: Fix bug for long instructions in program CFG dumps
| * afdc3a4bd7 selftests/bpf: Wait for receive in cg_storage_multi test
| * c5fa99bce6 selftests: xsk: Disable IPv6 on VETH1
| * c4afd6410f net: qrtr: correct types of trace event parameters
| * eb77c0c0a1 wifi: rt2x00: Fix memory leak when handling surveys
| * 0b0c3e37a4 wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg()
| * 0a847af3cb wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg()
| * 3e660d1175 crypto: sa2ul - Select CRYPTO_DES
| * d82d82e037 crypto: caam - Clear some memory in instantiate_rng
| * 169134da41 f2fs: compress: fix to call f2fs_wait_on_page_writeback() in f2fs_write_raw_pages()
| * d0cf44f06d f2fs: apply zone capacity to all zone type
| * 2cc6a05661 f2fs: enforce single zone capacity
| * e5a56f13ba f2fs: handle dqget error in f2fs_transfer_project_quota()
| * 6d6415e5bc scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS
| * eb4cf26d2e scsi: target: iscsit: Fix TAS handling during conn cleanup
| * 9158c86fd3 scsi: target: Fix multiple LUN_RESET handling
| * ad4a647aa5 net/packet: convert po->auxdata to an atomic flag
| * f1a111ca05 net/packet: convert po->origdev to an atomic flag
| * c3238c7dbe net/packet: annotate accesses to po->xmit
| * 97e7b1c1da vlan: partially enable SIOCSHWTSTAMP in container
| * 5f44dfa841 net: pcs: xpcs: remove double-read of link state when using AN
| * a7282fc797 bpf: Remove misleading spec_v1 check on var-offset stack read
| * 60f9ed23b9 selftests/bpf: Fix a fd leak in an error path in network_helpers.c
| * 9b9e803b48 scm: fix MSG_CTRUNC setting condition for SO_PASSSEC
| * 670754766a bpf: fix precision propagation verbose logging
| * c022b09fcc bpf: take into account liveness when propagating precision
| * 23634d119c wifi: rtw88: mac: Return the original error from rtw_mac_power_switch()
| * 3fc0be9f48 wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser()
| * 2ba1e4a623 tools: bpftool: Remove invalid \' json escape
| * 484d95c69f wifi: ath6kl: reduce WARN to dev_dbg() in callback
| * 19ba40acb1 wifi: brcmfmac: support CQM RSSI notification with older firmware
| * 378364abbe wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list()
| * 59073060fe wifi: ath9k: hif_usb: fix memory leak of remain_skbs
| * 104b1b48b6 wifi: ath6kl: minor fix for allocation size
| * d1138f118f hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E
| * f1d68061b0 cpufreq: use correct unit when verify cur freq
| * a55050c798 tick/common: Align tick period with the HZ tick.
| * 54202488c8 drm/i915: Make intel_get_crtc_new_encoder() less oopsy
| * 500ffa58e7 debugobject: Prevent init race with static objects
| * af04d8d3c1 arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step
| * 00132fab90 x86/ioapic: Don't return 0 from arch_dynirq_lower_bound()
| * ad6481f49f regulator: stm32-pwr: fix of_iomap leak
| * b8c2678d0f media: venus: dec: Fix handling of the start cmd
| * 2ed8f8c09d media: rc: gpio-ir-recv: Fix support for wake-up
| * 4b1afffdd9 drm/amd/display: Fix potential null dereference
| * 2322b262d2 media: rcar_fdp1: Fix refcount leak in probe and remove function
| * 5847021f80 media: rcar_fdp1: Convert to platform remove callback returning void
| * d18789f434 platform: Provide a remove callback that returns no value
| * 825281f34b media: rcar_fdp1: Fix the correct variable assignments
| * 3c300022c1 media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource()
| * 2f48c0a463 media: saa7134: fix use after free bug in saa7134_finidev due to race condition
| * c94388b5b9 media: dm1105: Fix use after free bug in dm1105_remove due to race condition
| * cac0f4f36e media: rkvdec: fix use after free bug in rkvdec_remove
| * d991f6139f x86/apic: Fix atomic update of offset in reserve_eilvt_offset()
| * 1e3056b806 regulator: core: Avoid lockdep reports when resolving supplies
| * 4e5c973818 regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow()
| * 678b3f29aa drm/ttm/pool: Fix ttm_pool_alloc error path
| * b19bebc963 drm/ttm: optimize pool allocations a bit v2
| * 1e26766dc8 arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator
| * bee1a28573 arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator
| * fb0bea59d0 arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply
| * 8853aab167 mailbox: mpfs: switch to txdone_poll
| * 623275db28 drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe()
| * 5a8aedb7b9 ACPI: VIOT: Initialize the correct IOMMU fwspec
| * 111af97983 firmware: arm_scmi: Fix xfers allocation on Rx channel
| * 657776d47b ARM: dts: gta04: fix excess dma channel usage
| * d3047a1b04 drm: rcar-du: Fix a NULL vs IS_ERR() bug
| * 3cfaa8713e mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data
| * 60cadfcfa4 ACPI: processor: Fix evaluating _PDC method when running as Xen dom0
| * aa8d52ddf7 drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings
| * d28ec12c48 drm: msm: adreno: Disable preemption on Adreno 510
| * 2ad781393e drm/msm/adreno: drop bogus pm_runtime_set_active()
| * 86c1a99528 drm/msm/adreno: Defer enabling runpm until hw_init()
| * 1ad4b8c455 media: max9286: Free control handler
| * 3d7003c400 drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535
| * a3ea89b597 firmware: qcom_scm: Clear download bit during reboot
| * ca4ce92e3e media: av7110: prevent underflow in write_ts_to_decoder()
| * 519b084940 media: bdisp: Add missing check for create_workqueue
| * 11c58a0c19 x86/MCE/AMD: Use an u64 for bank_map
| * 88a9d3c0b5 ARM: dts: qcom: ipq8064: Fix the PCI I/O port range
| * 112ff0f253 ARM: dts: qcom: ipq8064: reduce pci IO size to 64K
| * 99e7b14569 ARM: dts: qcom: ipq4019: Fix the PCI I/O port range
| * 96158bfc76 arm64: dts: qcom: sm8250: Fix the PCI I/O port range
| * cc1ae8710a arm64: dts: qcom: msm8996: Fix the PCI I/O port range
| * 656657bdeb arm64: dts: qcom: ipq6018: Fix the PCI I/O port range
| * a19c40b979 arm64: dts: qcom: ipq8074: Fix the PCI I/O port range
| * 9f89689d8b arm64: dts: qcom: msm8998: Fix the PCI I/O port range
| * 1611140296 arm64: dts: qcom: sdm845: Fix the PCI I/O port range
| * 3e7be9b632 arm64: dts: qcom: sdm845: correct dynamic power coefficients
| * a9e9a4a627 arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name
| * a46878476c arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename
| * 1994284cb9 arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name
| * 6ae67829fa arm64: dts: Move BCM4908 dts to bcmbca folder
| * fe8ab85ed4 arm64: dts: Add base DTS file for bcmbca device Asus GT-AX6000
| * aefde9ada4 ARM64: dts: Add DTS files for bcmbca SoC BCM6858
| * 273be36e42 arm64: dts: Add DTS files for bcmbca SoC BCM4912
| * fe07b3b5af arm64: dts: Add DTS files for bcmbca SoC BCM63158
| * 77112d23a6 arm64: dts: broadcom: bcm4908: add DT for Netgear RAXE500
| * a53862a202 arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property
| * e3143e6cca regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted
| * 30b4edaf22 EDAC/skx: Fix overflows on the DRAM row address mapping arrays
| * d450fa8657 drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources
| * 62cd3e0561 arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table
| * 667c86b2a9 arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table
| * 6a50350033 soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe
| * fb2a6e0029 tools/x86/kcpuid: Fix avx512bw and avx512lvl fields in Fn00000007
| * 00f79abccc drm/probe-helper: Cancel previous job before starting new one
| * 9fde84fb59 drm/vgem: add missing mutex_destroy
| * a51b71af16 drm/rockchip: Drop unbalanced obj unref
| * 0834a2b554 erofs: fix potential overflow calculating xattr_isize
| * 060fecf111 erofs: stop parsing non-compact HEAD index if clusterofs is invalid
| * 5a37916d98 tpm, tpm_tis: Claim locality when interrupts are reenabled on resume
| * 46da635566 tpm, tpm: Implement usage counter for locality
| * 51162b05a4 tpm, tpm_tis: Claim locality before writing interrupt registers
| * b665edd7a5 tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed
| * fd9b4b2bff tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register
| * 8c08c74de7 tpm, tpm_tis: Do not skip reset of original interrupt vector
| * dfa1e84b77 selinux: ensure av_permissions.h is built when needed
| * 8a3a1f7b54 selinux: fix Makefile dependencies of flask.h
| * 08e4037057 selftests/resctrl: Check for return value after write_schemata()
| * 25661fe5f6 selftests/resctrl: Allow ->setup() to return errors
| * b5adaf5045 selftests/resctrl: Move ->setup() call outside of test specific branches
| * f9eeea03a5 selftests/resctrl: Extend CPU vendor detection
| * ebd40f52de selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem
| * 988901984d rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check
| * 74f06429b7 sound/oss/dmasound: fix build when drivers are mixed =y/=m
| * c628b07d59 xfs: don't consider future format versions valid
| * ce84028492 ubifs: Free memory for tmpfile name
| * 20ef288612 ubi: Fix return value overwrite issue in try_write_vid_and_data()
| * 3ae75f82c3 ubifs: Fix memleak when insert_old_idx() failed
| * 149ea56995 Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path"
| * dc299bd1d5 iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE
| * b7bc8f6c8a tracing: Fix permissions for the buffer_percent file
| * b91a5aa1e7 riscv: mm: remove redundant parameter of create_fdt_early_page_table
| * ec1814116f i2c: omap: Fix standard mode false ACK readings
| * 671f21fbcb ksmbd: fix memleak in session setup
| * 227eb2689b ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem()
| * c053e389db ksmbd: call rcu_barrier() in ksmbd_server_exit()
| * 2db4b91480 writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs
| * 0b46ee654a relayfs: fix out-of-bounds access in relay_file_read
| * a18bdaca46 KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted
| * a79fb2ce4f reiserfs: Add security prefix to xattr name in reiserfs_security_write()
| * 4c3d1a6720 rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed
| * 09e177d6f7 crypto: safexcel - Cleanup ring IRQ workqueues on load failure
| * 63b7fbaa12 crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON()
| * c63741e872 ring-buffer: Sync IRQ works before buffer destruction
| * 333f49fcf0 pinctrl: qcom: lpass-lpi: set output value before enabling output
| * 3028ac7dc0 soundwire: qcom: correct setting ignore bit on v1.5.1
| * 01fefb82fd pwm: meson: Fix g12a ao clk81 name
| * dcf6611e80 pwm: meson: Fix axg ao mux parents
| * 2104e15b00 wifi: mt76: add missing locking to protect against concurrent rx/status calls
| * 4a07d2d511 kheaders: Use array declaration instead of char
| * 99d561199b ipmi: fix SSIF not responding under certain cond.
| * 8fddbd9c5c ipmi:ssif: Add send_retries increment
| * 3ef93b7bd9 MIPS: fw: Allow firmware to pass a empty env
| * e047e40676 tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem
| * 9c0b37d0da xhci: fix debugfs register accesses while suspended
| * 321e16a570 tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
| * fa30909fbd staging: iio: resolver: ads1210: fix config mode
| * ac44e1275d ext4: use ext4_journal_start/stop for fast commit transactions
| * 5bb4005fb6 blk-crypto: make blk_crypto_evict_key() more robust
| * f8d9d6c3ff blk-crypto: make blk_crypto_evict_key() return void
| * d206f79d9c blk-mq: release crypto keyslot before reporting I/O complete
| * 2c62f4abd7 posix-cpu-timers: Implement the missing timer_wait_running callback
| * dca7427a8b hwmon: (adt7475) Use device_property APIs when configuring polarity
| * d50321946e hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write
| * d40fa6f788 USB: dwc3: fix runtime pm imbalance on unbind
| * 9436221ea2 USB: dwc3: fix runtime pm imbalance on probe errors
| * bfd6936281 IMA: allow/fix UML builds
| * c23e103fd7 PCI: qcom: Fix the incorrect register usage in v2.7.0 config
| * 8a0b61e5a7 PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock
| * 402d2b1d54 arm64: Stash shadow stack pointer in the task struct on interrupt
| * 21cc4e5304 arm64: Always load shadow stack pointer directly from the task struct
| * a00f75f71f wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset
| * a646556769 wireguard: timers: cast enum limits members to int in prints
| * 95ec7a59ce x86/cpu: Add model number for Intel Arrow Lake processor
| * 5208204006 asm-generic/io.h: suppress endianness warnings for readq() and writeq()
| * 5e3c87e4d3 selftests mount: Fix mount_setattr_test builds failed
| * e1383b4401 ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750
| * 21976532f2 iio: adc: palmas_gpadc: fix NULL dereference on rmmod
| * 50015dbdec x86/hyperv: Block root partition functionality in a Confidential VM
| * a7d91f67a1 ASoC: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm
| * cf5b14b8de ASOC: Intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15
* 547398c9b4 ANDROID: add more gki_module headers to .gitignore file

Change-Id: I6ce864f3f76fbb9722003a5a61febd40d9cdf949
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>

BUILD.bazel

@@ -160,7 +160,7 @@ _DB845C_MODULE_OUTS = [
     "crypto/michael_mic.ko",
     "drivers/base/regmap/regmap-sdw.ko",
     "drivers/base/regmap/regmap-slimbus.ko",
-    "drivers/bus/mhi/core/mhi.ko",
+    "drivers/bus/mhi/host/mhi.ko",
     "drivers/clk/qcom/clk-qcom.ko",
     "drivers/clk/qcom/clk-rpmh.ko",
     "drivers/clk/qcom/clk-spmi-pmic-div.ko",

Documentation/ABI/testing/sysfs-devices-system-cpu

@@ -511,17 +511,18 @@ Description:	information about CPUs heterogeneity.
 		cpu_capacity: capacity of cpu#.
 
 What:		/sys/devices/system/cpu/vulnerabilities
-		/sys/devices/system/cpu/vulnerabilities/meltdown
-		/sys/devices/system/cpu/vulnerabilities/spectre_v1
-		/sys/devices/system/cpu/vulnerabilities/spectre_v2
-		/sys/devices/system/cpu/vulnerabilities/spec_store_bypass
+		/sys/devices/system/cpu/vulnerabilities/gather_data_sampling
+		/sys/devices/system/cpu/vulnerabilities/itlb_multihit
 		/sys/devices/system/cpu/vulnerabilities/l1tf
 		/sys/devices/system/cpu/vulnerabilities/mds
-		/sys/devices/system/cpu/vulnerabilities/srbds
-		/sys/devices/system/cpu/vulnerabilities/tsx_async_abort
-		/sys/devices/system/cpu/vulnerabilities/itlb_multihit
+		/sys/devices/system/cpu/vulnerabilities/meltdown
 		/sys/devices/system/cpu/vulnerabilities/mmio_stale_data
 		/sys/devices/system/cpu/vulnerabilities/retbleed
+		/sys/devices/system/cpu/vulnerabilities/spec_store_bypass
+		/sys/devices/system/cpu/vulnerabilities/spectre_v1
+		/sys/devices/system/cpu/vulnerabilities/spectre_v2
+		/sys/devices/system/cpu/vulnerabilities/srbds
+		/sys/devices/system/cpu/vulnerabilities/tsx_async_abort
 Date:		January 2018
 Contact:	Linux kernel mailing list <linux-kernel@vger.kernel.org>
 Description:	Information about CPU vulnerabilities

Documentation/admin-guide/hw-vuln/gather_data_sampling.rst

@@ -0,0 +1,109 @@
+.. SPDX-License-Identifier: GPL-2.0
+
+GDS - Gather Data Sampling
+==========================
+
+Gather Data Sampling is a hardware vulnerability which allows unprivileged
+speculative access to data which was previously stored in vector registers.
+
+Problem
+-------
+When a gather instruction performs loads from memory, different data elements
+are merged into the destination vector register. However, when a gather
+instruction that is transiently executed encounters a fault, stale data from
+architectural or internal vector registers may get transiently forwarded to the
+destination vector register instead. This will allow a malicious attacker to
+infer stale data using typical side channel techniques like cache timing
+attacks. GDS is a purely sampling-based attack.
+
+The attacker uses gather instructions to infer the stale vector register data.
+The victim does not need to do anything special other than use the vector
+registers. The victim does not need to use gather instructions to be
+vulnerable.
+
+Because the buffers are shared between Hyper-Threads cross Hyper-Thread attacks
+are possible.
+
+Attack scenarios
+----------------
+Without mitigation, GDS can infer stale data across virtually all
+permission boundaries:
+
+	Non-enclaves can infer SGX enclave data
+	Userspace can infer kernel data
+	Guests can infer data from hosts
+	Guest can infer guest from other guests
+	Users can infer data from other users
+
+Because of this, it is important to ensure that the mitigation stays enabled in
+lower-privilege contexts like guests and when running outside SGX enclaves.
+
+The hardware enforces the mitigation for SGX. Likewise, VMMs should  ensure
+that guests are not allowed to disable the GDS mitigation. If a host erred and
+allowed this, a guest could theoretically disable GDS mitigation, mount an
+attack, and re-enable it.
+
+Mitigation mechanism
+--------------------
+This issue is mitigated in microcode. The microcode defines the following new
+bits:
+
+ ================================   ===   ============================
+ IA32_ARCH_CAPABILITIES[GDS_CTRL]   R/O   Enumerates GDS vulnerability
+                                          and mitigation support.
+ IA32_ARCH_CAPABILITIES[GDS_NO]     R/O   Processor is not vulnerable.
+ IA32_MCU_OPT_CTRL[GDS_MITG_DIS]    R/W   Disables the mitigation
+                                          0 by default.
+ IA32_MCU_OPT_CTRL[GDS_MITG_LOCK]   R/W   Locks GDS_MITG_DIS=0. Writes
+                                          to GDS_MITG_DIS are ignored
+                                          Can't be cleared once set.
+ ================================   ===   ============================
+
+GDS can also be mitigated on systems that don't have updated microcode by
+disabling AVX. This can be done by setting gather_data_sampling="force" or
+"clearcpuid=avx" on the kernel command-line.
+
+If used, these options will disable AVX use by turning off XSAVE YMM support.
+However, the processor will still enumerate AVX support.  Userspace that
+does not follow proper AVX enumeration to check both AVX *and* XSAVE YMM
+support will break.
+
+Mitigation control on the kernel command line
+---------------------------------------------
+The mitigation can be disabled by setting "gather_data_sampling=off" or
+"mitigations=off" on the kernel command line. Not specifying either will default
+to the mitigation being enabled. Specifying "gather_data_sampling=force" will
+use the microcode mitigation when available or disable AVX on affected systems
+where the microcode hasn't been updated to include the mitigation.
+
+GDS System Information
+------------------------
+The kernel provides vulnerability status information through sysfs. For
+GDS this can be accessed by the following sysfs file:
+
+/sys/devices/system/cpu/vulnerabilities/gather_data_sampling
+
+The possible values contained in this file are:
+
+ ============================== =============================================
+ Not affected                   Processor not vulnerable.
+ Vulnerable                     Processor vulnerable and mitigation disabled.
+ Vulnerable: No microcode       Processor vulnerable and microcode is missing
+                                mitigation.
+ Mitigation: AVX disabled,
+ no microcode                   Processor is vulnerable and microcode is missing
+                                mitigation. AVX disabled as mitigation.
+ Mitigation: Microcode          Processor is vulnerable and mitigation is in
+                                effect.
+ Mitigation: Microcode (locked) Processor is vulnerable and mitigation is in
+                                effect and cannot be disabled.
+ Unknown: Dependent on
+ hypervisor status              Running on a virtual guest processor that is
+                                affected but with no way to know if host
+                                processor is mitigated or vulnerable.
+ ============================== =============================================
+
+GDS Default mitigation
+----------------------
+The updated microcode will enable the mitigation by default. The kernel's
+default action is to leave the mitigation enabled.

Documentation/admin-guide/hw-vuln/index.rst

@@ -19,3 +19,5 @@ are configurable at compile, boot or run time.
    l1d_flush.rst
    processor_mmio_stale_data.rst
    cross-thread-rsb.rst
+   gather_data_sampling.rst
+   srso

Documentation/admin-guide/hw-vuln/srso.rst

@@ -0,0 +1,133 @@
+.. SPDX-License-Identifier: GPL-2.0
+
+Speculative Return Stack Overflow (SRSO)
+========================================
+
+This is a mitigation for the speculative return stack overflow (SRSO)
+vulnerability found on AMD processors. The mechanism is by now the well
+known scenario of poisoning CPU functional units - the Branch Target
+Buffer (BTB) and Return Address Predictor (RAP) in this case - and then
+tricking the elevated privilege domain (the kernel) into leaking
+sensitive data.
+
+AMD CPUs predict RET instructions using a Return Address Predictor (aka
+Return Address Stack/Return Stack Buffer). In some cases, a non-architectural
+CALL instruction (i.e., an instruction predicted to be a CALL but is
+not actually a CALL) can create an entry in the RAP which may be used
+to predict the target of a subsequent RET instruction.
+
+The specific circumstances that lead to this varies by microarchitecture
+but the concern is that an attacker can mis-train the CPU BTB to predict
+non-architectural CALL instructions in kernel space and use this to
+control the speculative target of a subsequent kernel RET, potentially
+leading to information disclosure via a speculative side-channel.
+
+The issue is tracked under CVE-2023-20569.
+
+Affected processors
+-------------------
+
+AMD Zen, generations 1-4. That is, all families 0x17 and 0x19. Older
+processors have not been investigated.
+
+System information and options
+------------------------------
+
+First of all, it is required that the latest microcode be loaded for
+mitigations to be effective.
+
+The sysfs file showing SRSO mitigation status is:
+
+  /sys/devices/system/cpu/vulnerabilities/spec_rstack_overflow
+
+The possible values in this file are:
+
+ - 'Not affected'               The processor is not vulnerable
+
+ - 'Vulnerable: no microcode'   The processor is vulnerable, no
+                                microcode extending IBPB functionality
+                                to address the vulnerability has been
+                                applied.
+
+ - 'Mitigation: microcode'      Extended IBPB functionality microcode
+                                patch has been applied. It does not
+                                address User->Kernel and Guest->Host
+                                transitions protection but it does
+                                address User->User and VM->VM attack
+                                vectors.
+
+                                (spec_rstack_overflow=microcode)
+
+ - 'Mitigation: safe RET'       Software-only mitigation. It complements
+                                the extended IBPB microcode patch
+                                functionality by addressing User->Kernel
+                                and Guest->Host transitions protection.
+
+                                Selected by default or by
+                                spec_rstack_overflow=safe-ret
+
+ - 'Mitigation: IBPB'           Similar protection as "safe RET" above
+                                but employs an IBPB barrier on privilege
+                                domain crossings (User->Kernel,
+                                Guest->Host).
+
+                                (spec_rstack_overflow=ibpb)
+
+ - 'Mitigation: IBPB on VMEXIT' Mitigation addressing the cloud provider
+                                scenario - the Guest->Host transitions
+                                only.
+
+                                (spec_rstack_overflow=ibpb-vmexit)
+
+In order to exploit vulnerability, an attacker needs to:
+
+ - gain local access on the machine
+
+ - break kASLR
+
+ - find gadgets in the running kernel in order to use them in the exploit
+
+ - potentially create and pin an additional workload on the sibling
+   thread, depending on the microarchitecture (not necessary on fam 0x19)
+
+ - run the exploit
+
+Considering the performance implications of each mitigation type, the
+default one is 'Mitigation: safe RET' which should take care of most
+attack vectors, including the local User->Kernel one.
+
+As always, the user is advised to keep her/his system up-to-date by
+applying software updates regularly.
+
+The default setting will be reevaluated when needed and especially when
+new attack vectors appear.
+
+As one can surmise, 'Mitigation: safe RET' does come at the cost of some
+performance depending on the workload. If one trusts her/his userspace
+and does not want to suffer the performance impact, one can always
+disable the mitigation with spec_rstack_overflow=off.
+
+Similarly, 'Mitigation: IBPB' is another full mitigation type employing
+an indrect branch prediction barrier after having applied the required
+microcode patch for one's system. This mitigation comes also at
+a performance cost.
+
+Mitigation: safe RET
+--------------------
+
+The mitigation works by ensuring all RET instructions speculate to
+a controlled location, similar to how speculation is controlled in the
+retpoline sequence.  To accomplish this, the __x86_return_thunk forces
+the CPU to mispredict every function return using a 'safe return'
+sequence.
+
+To ensure the safety of this mitigation, the kernel must ensure that the
+safe return sequence is itself free from attacker interference.  In Zen3
+and Zen4, this is accomplished by creating a BTB alias between the
+untraining function srso_alias_untrain_ret() and the safe return
+function srso_alias_safe_ret() which results in evicting a potentially
+poisoned BTB entry and using that safe one for all function returns.
+
+In older Zen1 and Zen2, this is accomplished using a reinterpretation
+technique similar to Retbleed one: srso_untrain_ret() and
+srso_safe_ret().

Documentation/admin-guide/kernel-parameters.txt

@@ -916,10 +916,6 @@
 
 	debugpat	[X86] Enable PAT debugging
 
-	decnet.addr=	[HW,NET]
-			Format: <area>[,<node>]
-			See also Documentation/networking/decnet.rst.
-
 	default_hugepagesz=
 			[HW] The size of the default HugeTLB page. This is
 			the size represented by the legacy /proc/ hugepages
@@ -1513,6 +1509,26 @@
 			Format: off | on
 			default: on
 
+	gather_data_sampling=
+			[X86,INTEL] Control the Gather Data Sampling (GDS)
+			mitigation.
+
+			Gather Data Sampling is a hardware vulnerability which
+			allows unprivileged speculative access to data which was
+			previously stored in vector registers.
+
+			This issue is mitigated by default in updated microcode.
+			The mitigation may have a performance impact but can be
+			disabled. On systems without the microcode mitigation
+			disabling AVX serves as a mitigation.
+
+			force:	Disable AVX to mitigate systems without
+				microcode mitigation. No effect if the microcode
+				mitigation is present. Known to cause crashes in
+				userspace with buggy AVX enumeration.
+
+			off:    Disable GDS mitigation.
+
 	gcov_persist=	[GCOV] When non-zero (default), profiling data for
 			kernel modules is saved and remains accessible via
 			debugfs, even when the module is unloaded/reloaded.
@@ -3086,22 +3102,23 @@
 				Disable all optional CPU mitigations.  This
 				improves system performance, but it may also
 				expose users to several CPU vulnerabilities.
-				Equivalent to: nopti [X86,PPC]
+				Equivalent to: gather_data_sampling=off [X86]
 					       kpti=0 [ARM64]
-					       nospectre_v1 [X86,PPC]
-					       nobp=0 [S390]
-					       nospectre_v2 [X86,PPC,S390,ARM64]
-					       spectre_v2_user=off [X86]
-					       spec_store_bypass_disable=off [X86,PPC]
-					       ssbd=force-off [ARM64]
+					       kvm.nx_huge_pages=off [X86]
 					       l1tf=off [X86]
 					       mds=off [X86]
-					       tsx_async_abort=off [X86]
-					       kvm.nx_huge_pages=off [X86]
+					       mmio_stale_data=off [X86]
 					       no_entry_flush [PPC]
 					       no_uaccess_flush [PPC]
-					       mmio_stale_data=off [X86]
+					       nobp=0 [S390]
+					       nopti [X86,PPC]
+					       nospectre_v1 [X86,PPC]
+					       nospectre_v2 [X86,PPC,S390,ARM64]
 					       retbleed=off [X86]
+					       spec_store_bypass_disable=off [X86,PPC]
+					       spectre_v2_user=off [X86]
+					       ssbd=force-off [ARM64]
+					       tsx_async_abort=off [X86]
 
 				Exceptions:
 					       This does not have any effect on
@@ -5481,6 +5498,17 @@
 			Not specifying this option is equivalent to
 			spectre_v2_user=auto.
 
+	spec_rstack_overflow=
+			[X86] Control RAS overflow mitigation on AMD Zen CPUs
+
+			off		- Disable mitigation
+			microcode	- Enable microcode mitigation only
+			safe-ret	- Enable sw-only safe RET mitigation (default)
+			ibpb		- Enable mitigation by issuing IBPB on
+					  kernel entry
+			ibpb-vmexit	- Issue IBPB only on VMEXIT
+					  (cloud-specific mitigation)
+
 	spec_store_bypass_disable=
 			[HW] Control Speculative Store Bypass (SSB) Disable mitigation
 			(Speculative Store Bypass vulnerability)
@@ -5790,10 +5818,6 @@
 			-1: disable all critical trip points in all thermal zones
 			<degrees C>: override all critical trip points
 
-	thermal.nocrt=	[HW,ACPI]
-			Set to disable actions on ACPI thermal zone
-			critical and hot trip points.
-
 	thermal.off=	[HW,ACPI]
 			1: disable ACPI thermal control
 

Documentation/admin-guide/security-bugs.rst

@@ -63,31 +63,28 @@ information submitted to the security list and any followup discussions
 of the report are treated confidentially even after the embargo has been
 lifted, in perpetuity.
 
-Coordination
-------------
+Coordination with other groups
+------------------------------
 
-Fixes for sensitive bugs, such as those that might lead to privilege
-escalations, may need to be coordinated with the private
-<linux-distros@vs.openwall.org> mailing list so that distribution vendors
-are well prepared to issue a fixed kernel upon public disclosure of the
-upstream fix. Distros will need some time to test the proposed patch and
-will generally request at least a few days of embargo, and vendor update
-publication prefers to happen Tuesday through Thursday. When appropriate,
-the security team can assist with this coordination, or the reporter can
-include linux-distros from the start. In this case, remember to prefix
-the email Subject line with "[vs]" as described in the linux-distros wiki:
-<http://oss-security.openwall.org/wiki/mailing-lists/distros#how-to-use-the-lists>
+The kernel security team strongly recommends that reporters of potential
+security issues NEVER contact the "linux-distros" mailing list until
+AFTER discussing it with the kernel security team.  Do not Cc: both
+lists at once.  You may contact the linux-distros mailing list after a
+fix has been agreed on and you fully understand the requirements that
+doing so will impose on you and the kernel community.
+
+The different lists have different goals and the linux-distros rules do
+not contribute to actually fixing any potential security problems.
 
 CVE assignment
 --------------
 
-The security team does not normally assign CVEs, nor do we require them
-for reports or fixes, as this can needlessly complicate the process and
-may delay the bug handling. If a reporter wishes to have a CVE identifier
-assigned ahead of public disclosure, they will need to contact the private
-linux-distros list, described above. When such a CVE identifier is known
-before a patch is provided, it is desirable to mention it in the commit
-message if the reporter agrees.
+The security team does not assign CVEs, nor do we require them for
+reports or fixes, as this can needlessly complicate the process and may
+delay the bug handling.  If a reporter wishes to have a CVE identifier
+assigned, they should find one by themselves, for example by contacting
+MITRE directly.  However under no circumstances will a patch inclusion
+be delayed to wait for a CVE identifier to arrive.
 
 Non-disclosure agreements
 -------------------------

Documentation/admin-guide/sysctl/net.rst

@@ -34,13 +34,14 @@ Table : Subdirectories in /proc/sys/net
  ========= =================== = ========== ==================
  Directory Content               Directory  Content
  ========= =================== = ========== ==================
- core      General parameter     appletalk  Appletalk protocol
- unix      Unix domain sockets   netrom     NET/ROM
- 802       E802 protocol         ax25       AX25
- ethernet  Ethernet protocol     rose       X.25 PLP layer
- ipv4      IP version 4          x25        X.25 protocol
- bridge    Bridging              decnet     DEC net
- ipv6      IP version 6          tipc       TIPC
+ 802       E802 protocol         mptcp     Multipath TCP
+ appletalk Appletalk protocol    netfilter Network Filter
+ ax25      AX25                  netrom     NET/ROM
+ bridge    Bridging              rose      X.25 PLP layer
+ core      General parameter     tipc      TIPC
+ ethernet  Ethernet protocol     unix      Unix domain sockets
+ ipv4      IP version 4          x25       X.25 protocol
+ ipv6      IP version 6
  ========= =================== = ========== ==================
 
 1. /proc/sys/net/core - Network core options

Documentation/arm64/silicon-errata.rst

@@ -124,6 +124,10 @@ stable kernels.
 +----------------+-----------------+-----------------+-----------------------------+
 | ARM            | MMU-500         | #841119,826419  | N/A                         |
 +----------------+-----------------+-----------------+-----------------------------+
+| ARM            | MMU-600         | #1076982,1209401| N/A                         |
++----------------+-----------------+-----------------+-----------------------------+
+| ARM            | MMU-700         | #2268618,2812531| N/A                         |
++----------------+-----------------+-----------------+-----------------------------+
 +----------------+-----------------+-----------------+-----------------------------+
 | Broadcom       | Brahma-B53      | N/A             | ARM64_ERRATUM_845719        |
 +----------------+-----------------+-----------------+-----------------------------+

Documentation/devicetree/bindings/ata/ahci-ceva.txt

@@ -1,63 +0,0 @@
-Binding for CEVA AHCI SATA Controller
-
-Required properties:
-  - reg: Physical base address and size of the controller's register area.
-  - compatible: Compatibility string. Must be 'ceva,ahci-1v84'.
-  - clocks: Input clock specifier. Refer to common clock bindings.
-  - interrupts: Interrupt specifier. Refer to interrupt binding.
-  - ceva,p0-cominit-params: OOB timing value for COMINIT parameter for port 0.
-  - ceva,p1-cominit-params: OOB timing value for COMINIT parameter for port 1.
-			The fields for the above parameter must be as shown below:
-			ceva,pN-cominit-params = /bits/ 8 <CIBGMN CIBGMX CIBGN CINMP>;
-			CINMP : COMINIT Negate Minimum Period.
-			CIBGN : COMINIT Burst Gap Nominal.
-			CIBGMX: COMINIT Burst Gap Maximum.
-			CIBGMN: COMINIT Burst Gap Minimum.
-  - ceva,p0-comwake-params: OOB timing value for COMWAKE parameter for port 0.
-  - ceva,p1-comwake-params: OOB timing value for COMWAKE parameter for port 1.
-			The fields for the above parameter must be as shown below:
-			ceva,pN-comwake-params = /bits/ 8 <CWBGMN CWBGMX CWBGN CWNMP>;
-			CWBGMN: COMWAKE Burst Gap Minimum.
-			CWBGMX: COMWAKE Burst Gap Maximum.
-			CWBGN: COMWAKE Burst Gap Nominal.
-			CWNMP: COMWAKE Negate Minimum Period.
-  - ceva,p0-burst-params: Burst timing value for COM parameter for port 0.
-  - ceva,p1-burst-params: Burst timing value for COM parameter for port 1.
-			The fields for the above parameter must be as shown below:
-			ceva,pN-burst-params = /bits/ 8 <BMX BNM SFD PTST>;
-			BMX: COM Burst Maximum.
-			BNM: COM Burst Nominal.
-			SFD: Signal Failure Detection value.
-			PTST: Partial to Slumber timer value.
-  - ceva,p0-retry-params: Retry interval timing value for port 0.
-  - ceva,p1-retry-params: Retry interval timing value for port 1.
-			The fields for the above parameter must be as shown below:
-			ceva,pN-retry-params = /bits/ 16 <RIT RCT>;
-			RIT:  Retry Interval Timer.
-			RCT:  Rate Change Timer.
-
-Optional properties:
-  - ceva,broken-gen2: limit to gen1 speed instead of gen2.
-  - phys: phandle for the PHY device
-  - resets: phandle to the reset controller for the SATA IP
-
-Examples:
-	ahci@fd0c0000 {
-		compatible = "ceva,ahci-1v84";
-		reg = <0xfd0c0000 0x200>;
-		interrupt-parent = <&gic>;
-		interrupts = <0 133 4>;
-		clocks = <&clkc SATA_CLK_ID>;
-		ceva,p0-cominit-params = /bits/ 8 <0x0F 0x25 0x18 0x29>;
-		ceva,p0-comwake-params = /bits/ 8 <0x04 0x0B 0x08 0x0F>;
-		ceva,p0-burst-params = /bits/ 8 <0x0A 0x08 0x4A 0x06>;
-		ceva,p0-retry-params = /bits/ 16 <0x0216 0x7F06>;
-
-		ceva,p1-cominit-params = /bits/ 8 <0x0F 0x25 0x18 0x29>;
-		ceva,p1-comwake-params = /bits/ 8 <0x04 0x0B 0x08 0x0F>;
-		ceva,p1-burst-params = /bits/ 8 <0x0A 0x08 0x4A 0x06>;
-		ceva,p1-retry-params = /bits/ 16 <0x0216 0x7F06>;
-		ceva,broken-gen2;
-		phys = <&psgtr 1 PHY_TYPE_SATA 1 1>;
-		resets = <&zynqmp_reset ZYNQMP_RESET_SATA>;
-	};

Documentation/devicetree/bindings/ata/ceva,ahci-1v84.yaml

@@ -0,0 +1,189 @@
+# SPDX-License-Identifier: (GPL-2.0-only OR BSD-2-Clause)
+%YAML 1.2
+---
+$id: http://devicetree.org/schemas/ata/ceva,ahci-1v84.yaml#
+$schema: http://devicetree.org/meta-schemas/core.yaml#
+
+title: Ceva AHCI SATA Controller
+
+maintainers:
+  - Piyush Mehta <piyush.mehta@xilinx.com>
+
+description: |
+  The Ceva SATA controller mostly conforms to the AHCI interface with some
+  special extensions to add functionality, is a high-performance dual-port
+  SATA host controller with an AHCI compliant command layer which supports
+  advanced features such as native command queuing and frame information
+  structure (FIS) based switching for systems employing port multipliers.
+
+properties:
+  compatible:
+    const: ceva,ahci-1v84
+
+  reg:
+    maxItems: 1
+
+  clocks:
+    maxItems: 1
+
+  dma-coherent: true
+
+  interrupts:
+    maxItems: 1
+
+  iommus:
+    maxItems: 4
+
+  power-domains:
+    maxItems: 1
+
+  ceva,p0-cominit-params:
+    $ref: /schemas/types.yaml#/definitions/uint8-array
+    description: |
+      OOB timing value for COMINIT parameter for port 0.
+      The fields for the above parameter must be as shown below:-
+      ceva,p0-cominit-params = /bits/ 8 <CIBGMN CIBGMX CIBGN CINMP>;
+    items:
+      - description: CINMP - COMINIT Negate Minimum Period.
+      - description: CIBGN - COMINIT Burst Gap Nominal.
+      - description: CIBGMX - COMINIT Burst Gap Maximum.
+      - description: CIBGMN - COMINIT Burst Gap Minimum.
+
+  ceva,p0-comwake-params:
+    $ref: /schemas/types.yaml#/definitions/uint8-array
+    description: |
+      OOB timing value for COMWAKE parameter for port 0.
+      The fields for the above parameter must be as shown below:-
+      ceva,p0-comwake-params = /bits/ 8 <CWBGMN CWBGMX CWBGN CWNMP>;
+    items:
+      - description: CWBGMN - COMWAKE Burst Gap Minimum.
+      - description: CWBGMX - COMWAKE Burst Gap Maximum.
+      - description: CWBGN - COMWAKE Burst Gap Nominal.
+      - description: CWNMP - COMWAKE Negate Minimum Period.
+
+  ceva,p0-burst-params:
+    $ref: /schemas/types.yaml#/definitions/uint8-array
+    description: |
+      Burst timing value for COM parameter for port 0.
+      The fields for the above parameter must be as shown below:-
+      ceva,p0-burst-params = /bits/ 8 <BMX BNM SFD PTST>;
+    items:
+      - description: BMX - COM Burst Maximum.
+      - description: BNM - COM Burst Nominal.
+      - description: SFD - Signal Failure Detection value.
+      - description: PTST - Partial to Slumber timer value.
+
+  ceva,p0-retry-params:
+    $ref: /schemas/types.yaml#/definitions/uint16-array
+    description: |
+      Retry interval timing value for port 0.
+      The fields for the above parameter must be as shown below:-
+      ceva,p0-retry-params = /bits/ 16 <RIT RCT>;
+    items:
+      - description: RIT - Retry Interval Timer.
+      - description: RCT - Rate Change Timer.
+
+  ceva,p1-cominit-params:
+    $ref: /schemas/types.yaml#/definitions/uint8-array
+    description: |
+      OOB timing value for COMINIT parameter for port 1.
+      The fields for the above parameter must be as shown below:-
+      ceva,p1-cominit-params = /bits/ 8 <CIBGMN CIBGMX CIBGN CINMP>;
+    items:
+      - description: CINMP - COMINIT Negate Minimum Period.
+      - description: CIBGN - COMINIT Burst Gap Nominal.
+      - description: CIBGMX - COMINIT Burst Gap Maximum.
+      - description: CIBGMN - COMINIT Burst Gap Minimum.
+
+  ceva,p1-comwake-params:
+    $ref: /schemas/types.yaml#/definitions/uint8-array
+    description: |
+      OOB timing value for COMWAKE parameter for port 1.
+      The fields for the above parameter must be as shown below:-
+      ceva,p1-comwake-params = /bits/ 8 <CWBGMN CWBGMX CWBGN CWNMP>;
+    items:
+      - description: CWBGMN - COMWAKE Burst Gap Minimum.
+      - description: CWBGMX - COMWAKE Burst Gap Maximum.
+      - description: CWBGN - COMWAKE Burst Gap Nominal.
+      - description: CWNMP - COMWAKE Negate Minimum Period.
+
+  ceva,p1-burst-params:
+    $ref: /schemas/types.yaml#/definitions/uint8-array
+    description: |
+      Burst timing value for COM parameter for port 1.
+      The fields for the above parameter must be as shown below:-
+      ceva,p1-burst-params = /bits/ 8 <BMX BNM SFD PTST>;
+    items:
+      - description: BMX - COM Burst Maximum.
+      - description: BNM - COM Burst Nominal.
+      - description: SFD - Signal Failure Detection value.
+      - description: PTST - Partial to Slumber timer value.
+
+  ceva,p1-retry-params:
+    $ref: /schemas/types.yaml#/definitions/uint16-array
+    description: |
+      Retry interval timing value for port 1.
+      The fields for the above parameter must be as shown below:-
+      ceva,pN-retry-params = /bits/ 16 <RIT RCT>;
+    items:
+      - description: RIT - Retry Interval Timer.
+      - description: RCT - Rate Change Timer.
+
+  ceva,broken-gen2:
+    $ref: /schemas/types.yaml#/definitions/flag
+    description: |
+      limit to gen1 speed instead of gen2.
+
+  phys:
+    maxItems: 1
+
+  phy-names:
+    items:
+      - const: sata-phy
+
+  resets:
+    maxItems: 1
+
+required:
+  - compatible
+  - reg
+  - clocks
+  - interrupts
+  - ceva,p0-cominit-params
+  - ceva,p0-comwake-params
+  - ceva,p0-burst-params
+  - ceva,p0-retry-params
+  - ceva,p1-cominit-params
+  - ceva,p1-comwake-params
+  - ceva,p1-burst-params
+  - ceva,p1-retry-params
+
+additionalProperties: false
+
+examples:
+  - |
+    #include <dt-bindings/clock/xlnx-zynqmp-clk.h>
+    #include <dt-bindings/interrupt-controller/irq.h>
+    #include <dt-bindings/power/xlnx-zynqmp-power.h>
+    #include <dt-bindings/reset/xlnx-zynqmp-resets.h>
+    #include <dt-bindings/clock/xlnx-zynqmp-clk.h>
+    #include <dt-bindings/phy/phy.h>
+
+    sata: ahci@fd0c0000 {
+        compatible = "ceva,ahci-1v84";
+        reg = <0xfd0c0000 0x200>;
+        interrupt-parent = <&gic>;
+        interrupts = <0 133 IRQ_TYPE_LEVEL_HIGH>;
+        clocks = <&zynqmp_clk SATA_REF>;
+        ceva,p0-cominit-params = /bits/ 8 <0x0F 0x25 0x18 0x29>;
+        ceva,p0-comwake-params = /bits/ 8 <0x04 0x0B 0x08 0x0F>;
+        ceva,p0-burst-params = /bits/ 8 <0x0A 0x08 0x4A 0x06>;
+        ceva,p0-retry-params = /bits/ 16 <0x0216 0x7F06>;
+        ceva,p1-cominit-params = /bits/ 8 <0x0F 0x25 0x18 0x29>;
+        ceva,p1-comwake-params = /bits/ 8 <0x04 0x0B 0x08 0x0F>;
+        ceva,p1-burst-params = /bits/ 8 <0x0A 0x08 0x4A 0x06>;
+        ceva,p1-retry-params = /bits/ 16 <0x0216 0x7F06>;
+        ceva,broken-gen2;
+        phys = <&psgtr 1 PHY_TYPE_SATA 1 1>;
+        resets = <&zynqmp_reset ZYNQMP_RESET_SATA>;
+    };

Documentation/devicetree/bindings/display/msm/dsi-controller-main.yaml

@@ -64,6 +64,18 @@ properties:
       Indicates if the DSI controller is driving a panel which needs
       2 DSI links.
 
+  qcom,master-dsi:
+    type: boolean
+    description: |
+      Indicates if the DSI controller is the master DSI controller when
+      qcom,dual-dsi-mode enabled.
+
+  qcom,sync-dual-dsi:
+    type: boolean
+    description: |
+      Indicates if the DSI controller needs to sync the other DSI controller
+      with MIPI DCS commands when qcom,dual-dsi-mode enabled.
+
   assigned-clocks:
     minItems: 2
     maxItems: 2

Documentation/devicetree/bindings/iio/adc/renesas,rcar-gyroadc.yaml

@@ -86,7 +86,7 @@ patternProperties:
             of the MAX chips to the GyroADC, while MISO line of each Maxim
             ADC connects to a shared input pin of the GyroADC.
         enum:
-          - adi,7476
+          - adi,ad7476
           - fujitsu,mb88101a
           - maxim,max1162
           - maxim,max11100

Documentation/devicetree/bindings/sound/tas2562.yaml

@@ -52,7 +52,9 @@ properties:
     description: TDM TX current sense time slot.
 
   '#sound-dai-cells':
-    const: 1
+    # The codec has a single DAI, the #sound-dai-cells=<1>; case is left in for backward
+    # compatibility but is deprecated.
+    enum: [0, 1]
 
 required:
   - compatible
@@ -69,7 +71,7 @@ examples:
      codec: codec@4c {
        compatible = "ti,tas2562";
        reg = <0x4c>;
-       #sound-dai-cells = <1>;
+       #sound-dai-cells = <0>;
        interrupt-parent = <&gpio1>;
        interrupts = <14>;
        shutdown-gpios = <&gpio1 15 0>;

Documentation/devicetree/bindings/sound/tas2764.yaml

@@ -46,7 +46,9 @@ properties:
     description: TDM TX voltage sense time slot.
 
   '#sound-dai-cells':
-    const: 1
+    # The codec has a single DAI, the #sound-dai-cells=<1>; case is left in for backward
+    # compatibility but is deprecated.
+    enum: [0, 1]
 
 required:
   - compatible
@@ -63,7 +65,7 @@ examples:
      codec: codec@38 {
        compatible = "ti,tas2764";
        reg = <0x38>;
-       #sound-dai-cells = <1>;
+       #sound-dai-cells = <0>;
        interrupt-parent = <&gpio1>;
        interrupts = <14>;
        reset-gpios = <&gpio1 15 0>;

Documentation/devicetree/bindings/sound/tas2770.yaml

@@ -54,7 +54,9 @@ properties:
       - 1 # Falling edge
 
   '#sound-dai-cells':
-    const: 1
+    # The codec has a single DAI, the #sound-dai-cells=<1>; case is left in for backward
+    # compatibility but is deprecated.
+    enum: [0, 1]
 
 required:
   - compatible
@@ -71,7 +73,7 @@ examples:
      codec: codec@41 {
        compatible = "ti,tas2770";
        reg = <0x41>;
-       #sound-dai-cells = <1>;
+       #sound-dai-cells = <0>;
        interrupt-parent = <&gpio1>;
        interrupts = <14>;
        reset-gpio = <&gpio1 15 0>;

Documentation/devicetree/bindings/usb/cdns,usb3.yaml

@@ -64,7 +64,7 @@ properties:
     description:
       size of memory intended as internal memory for endpoints
       buffers expressed in KB
-    $ref: /schemas/types.yaml#/definitions/uint32
+    $ref: /schemas/types.yaml#/definitions/uint16
 
   cdns,phyrst-a-enable:
     description: Enable resetting of PHY if Rx fail is detected

Documentation/devicetree/bindings/usb/snps,dwc3.yaml

@@ -245,7 +245,7 @@ properties:
     description:
       High-Speed PHY interface selection between UTMI+ and ULPI when the
       DWC_USB3_HSPHY_INTERFACE has value 3.
-    $ref: /schemas/types.yaml#/definitions/uint8
+    $ref: /schemas/types.yaml#/definitions/string
     enum: [utmi, ulpi]
 
   snps,quirk-frame-length-adjustment:

Documentation/devicetree/overlay-notes.rst

@@ -119,10 +119,32 @@ Finally, if you need to remove all overlays in one-go, just call
 of_overlay_remove_all() which will remove every single one in the correct
 order.
 
-In addition, there is the option to register notifiers that get called on
+There is the option to register notifiers that get called on
 overlay operations. See of_overlay_notifier_register/unregister and
 enum of_overlay_notify_action for details.
 
-Note that a notifier callback is not supposed to store pointers to a device
-tree node or its content beyond OF_OVERLAY_POST_REMOVE corresponding to the
-respective node it received.
+A notifier callback for OF_OVERLAY_PRE_APPLY, OF_OVERLAY_POST_APPLY, or
+OF_OVERLAY_PRE_REMOVE may store pointers to a device tree node in the overlay
+or its content but these pointers must not persist past the notifier callback
+for OF_OVERLAY_POST_REMOVE.  The memory containing the overlay will be
+kfree()ed after OF_OVERLAY_POST_REMOVE notifiers are called.  Note that the
+memory will be kfree()ed even if the notifier for OF_OVERLAY_POST_REMOVE
+returns an error.
+
+The changeset notifiers in drivers/of/dynamic.c are a second type of notifier
+that could be triggered by applying or removing an overlay.  These notifiers
+are not allowed to store pointers to a device tree node in the overlay
+or its content.  The overlay code does not protect against such pointers
+remaining active when the memory containing the overlay is freed as a result
+of removing the overlay.
+
+Any other code that retains a pointer to the overlay nodes or data is
+considered to be a bug because after removing the overlay the pointer
+will refer to freed memory.
+
+Users of overlays must be especially aware of the overall operations that
+occur on the system to ensure that other kernel code does not retain any
+pointers to the overlay nodes or data.  Any example of an inadvertent use
+of such pointers is if a driver or subsystem module is loaded after an
+overlay has been applied, and the driver or subsystem scans the entire
+devicetree or a large portion of it, including the overlay nodes.

Documentation/filesystems/autofs-mount-control.rst

@@ -196,7 +196,7 @@ information and return operation results::
 		    struct args_ismountpoint	ismountpoint;
 	    };
 
-	    char path[0];
+	    char path[];
     };
 
 The ioctlfd field is a mount point file descriptor of an autofs mount

Documentation/filesystems/autofs.rst

@@ -467,7 +467,7 @@ Each ioctl is passed a pointer to an `autofs_dev_ioctl` structure::
 			struct args_ismountpoint	ismountpoint;
 		};
 
-                char path[0];
+                char path[];
         };
 
 For the **OPEN_MOUNT** and **IS_MOUNTPOINT** commands, the target

Documentation/filesystems/directory-locking.rst

@@ -22,12 +22,11 @@ exclusive.
 3) object removal.  Locking rules: caller locks parent, finds victim,
 locks victim and calls the method.  Locks are exclusive.
 
-4) rename() that is _not_ cross-directory.  Locking rules: caller locks
-the parent and finds source and target.  In case of exchange (with
-RENAME_EXCHANGE in flags argument) lock both.  In any case,
-if the target already exists, lock it.  If the source is a non-directory,
-lock it.  If we need to lock both, lock them in inode pointer order.
-Then call the method.  All locks are exclusive.
+4) rename() that is _not_ cross-directory.  Locking rules: caller locks the
+parent and finds source and target.  We lock both (provided they exist).  If we
+need to lock two inodes of different type (dir vs non-dir), we lock directory
+first.  If we need to lock two inodes of the same type, lock them in inode
+pointer order.  Then call the method.  All locks are exclusive.
 NB: we might get away with locking the source (and target in exchange
 case) shared.
 
@@ -44,15 +43,17 @@ All locks are exclusive.
 rules:
 
 	* lock the filesystem
-	* lock parents in "ancestors first" order.
+	* lock parents in "ancestors first" order. If one is not ancestor of
+	  the other, lock them in inode pointer order.
 	* find source and target.
 	* if old parent is equal to or is a descendent of target
 	  fail with -ENOTEMPTY
 	* if new parent is equal to or is a descendent of source
 	  fail with -ELOOP
-	* If it's an exchange, lock both the source and the target.
-	* If the target exists, lock it.  If the source is a non-directory,
-	  lock it.  If we need to lock both, do so in inode pointer order.
+	* Lock both the source and the target provided they exist. If we
+	  need to lock two inodes of different type (dir vs non-dir), we lock
+	  the directory first. If we need to lock two inodes of the same type,
+	  lock them in inode pointer order.
 	* call the method.
 
 All ->i_rwsem are taken exclusive.  Again, we might get away with locking
@@ -66,8 +67,9 @@ If no directory is its own ancestor, the scheme above is deadlock-free.
 
 Proof:
 
-	First of all, at any moment we have a partial ordering of the
-	objects - A < B iff A is an ancestor of B.
+	First of all, at any moment we have a linear ordering of the
+	objects - A < B iff (A is an ancestor of B) or (B is not an ancestor
+        of A and ptr(A) < ptr(B)).
 
 	That ordering can change.  However, the following is true:
 

Documentation/networking/af_xdp.rst

@@ -433,6 +433,15 @@ start N bytes into the buffer leaving the first N bytes for the
 application to use. The final option is the flags field, but it will
 be dealt with in separate sections for each UMEM flag.
 
+SO_BINDTODEVICE setsockopt
+--------------------------
+
+This is a generic SOL_SOCKET option that can be used to tie AF_XDP
+socket to a particular network interface.  It is useful when a socket
+is created by a privileged process and passed to a non-privileged one.
+Once the option is set, kernel will refuse attempts to bind that socket
+to a different interface.  Updating the value requires CAP_NET_RAW.
+
 XDP_STATISTICS getsockopt
 -------------------------
 

Documentation/networking/bonding.rst

@@ -422,6 +422,17 @@ arp_all_targets
 		consider the slave up only when all of the arp_ip_targets
 		are reachable
 
+arp_missed_max
+
+	Specifies the number of arp_interval monitor checks that must
+	fail in order for an interface to be marked down by the ARP monitor.
+
+	In order to provide orderly failover semantics, backup interfaces
+	are permitted an extra monitor check (i.e., they must fail
+	arp_missed_max + 1 times before being marked down).
+
+	The default value is 2, and the allowable range is 1 - 255.
+
 downdelay
 
 	Specifies the time, in milliseconds, to wait before disabling

Documentation/networking/decnet.rst

@@ -1,243 +0,0 @@
-.. SPDX-License-Identifier: GPL-2.0
-
-=========================================
-Linux DECnet Networking Layer Information
-=========================================
-
-1. Other documentation....
-==========================
-
-   - Project Home Pages
-     - http://www.chygwyn.com/				   - Kernel info
-     - http://linux-decnet.sourceforge.net/                - Userland tools
-     - http://www.sourceforge.net/projects/linux-decnet/   - Status page
-
-2. Configuring the kernel
-=========================
-
-Be sure to turn on the following options:
-
-    - CONFIG_DECNET (obviously)
-    - CONFIG_PROC_FS (to see what's going on)
-    - CONFIG_SYSCTL (for easy configuration)
-
-if you want to try out router support (not properly debugged yet)
-you'll need the following options as well...
-
-    - CONFIG_DECNET_ROUTER (to be able to add/delete routes)
-    - CONFIG_NETFILTER (will be required for the DECnet routing daemon)
-
-Don't turn on SIOCGIFCONF support for DECnet unless you are really sure
-that you need it, in general you won't and it can cause ifconfig to
-malfunction.
-
-Run time configuration has changed slightly from the 2.4 system. If you
-want to configure an endnode, then the simplified procedure is as follows:
-
- - Set the MAC address on your ethernet card before starting _any_ other
-   network protocols.
-
-As soon as your network card is brought into the UP state, DECnet should
-start working. If you need something more complicated or are unsure how
-to set the MAC address, see the next section. Also all configurations which
-worked with 2.4 will work under 2.5 with no change.
-
-3. Command line options
-=======================
-
-You can set a DECnet address on the kernel command line for compatibility
-with the 2.4 configuration procedure, but in general it's not needed any more.
-If you do st a DECnet address on the command line, it has only one purpose
-which is that its added to the addresses on the loopback device.
-
-With 2.4 kernels, DECnet would only recognise addresses as local if they
-were added to the loopback device. In 2.5, any local interface address
-can be used to loop back to the local machine. Of course this does not
-prevent you adding further addresses to the loopback device if you
-want to.
-
-N.B. Since the address list of an interface determines the addresses for
-which "hello" messages are sent, if you don't set an address on the loopback
-interface then you won't see any entries in /proc/net/neigh for the local
-host until such time as you start a connection. This doesn't affect the
-operation of the local communications in any other way though.
-
-The kernel command line takes options looking like the following::
-
-    decnet.addr=1,2
-
-the two numbers are the node address 1,2 = 1.2 For 2.2.xx kernels
-and early 2.3.xx kernels, you must use a comma when specifying the
-DECnet address like this. For more recent 2.3.xx kernels, you may
-use almost any character except space, although a `.` would be the most
-obvious choice :-)
-
-There used to be a third number specifying the node type. This option
-has gone away in favour of a per interface node type. This is now set
-using /proc/sys/net/decnet/conf/<dev>/forwarding. This file can be
-set with a single digit, 0=EndNode, 1=L1 Router and  2=L2 Router.
-
-There are also equivalent options for modules. The node address can
-also be set through the /proc/sys/net/decnet/ files, as can other system
-parameters.
-
-Currently the only supported devices are ethernet and ip_gre. The
-ethernet address of your ethernet card has to be set according to the DECnet
-address of the node in order for it to be autoconfigured (and then appear in
-/proc/net/decnet_dev). There is a utility available at the above
-FTP sites called dn2ethaddr which can compute the correct ethernet
-address to use. The address can be set by ifconfig either before or
-at the time the device is brought up. If you are using RedHat you can
-add the line::
-
-    MACADDR=AA:00:04:00:03:04
-
-or something similar, to /etc/sysconfig/network-scripts/ifcfg-eth0 or
-wherever your network card's configuration lives. Setting the MAC address
-of your ethernet card to an address starting with "hi-ord" will cause a
-DECnet address which matches to be added to the interface (which you can
-verify with iproute2).
-
-The default device for routing can be set through the /proc filesystem
-by setting /proc/sys/net/decnet/default_device to the
-device you want DECnet to route packets out of when no specific route
-is available. Usually this will be eth0, for example::
-
-    echo -n "eth0" >/proc/sys/net/decnet/default_device
-
-If you don't set the default device, then it will default to the first
-ethernet card which has been autoconfigured as described above. You can
-confirm that by looking in the default_device file of course.
-
-There is a list of what the other files under /proc/sys/net/decnet/ do
-on the kernel patch web site (shown above).
-
-4. Run time kernel configuration
-================================
-
-
-This is either done through the sysctl/proc interface (see the kernel web
-pages for details on what the various options do) or through the iproute2
-package in the same way as IPv4/6 configuration is performed.
-
-Documentation for iproute2 is included with the package, although there is
-as yet no specific section on DECnet, most of the features apply to both
-IP and DECnet, albeit with DECnet addresses instead of IP addresses and
-a reduced functionality.
-
-If you want to configure a DECnet router you'll need the iproute2 package
-since its the _only_ way to add and delete routes currently. Eventually
-there will be a routing daemon to send and receive routing messages for
-each interface and update the kernel routing tables accordingly. The
-routing daemon will use netfilter to listen to routing packets, and
-rtnetlink to update the kernels routing tables.
-
-The DECnet raw socket layer has been removed since it was there purely
-for use by the routing daemon which will now use netfilter (a much cleaner
-and more generic solution) instead.
-
-5. How can I tell if its working?
-=================================
-
-Here is a quick guide of what to look for in order to know if your DECnet
-kernel subsystem is working.
-
-   - Is the node address set (see /proc/sys/net/decnet/node_address)
-   - Is the node of the correct type
-     (see /proc/sys/net/decnet/conf/<dev>/forwarding)
-   - Is the Ethernet MAC address of each Ethernet card set to match
-     the DECnet address. If in doubt use the dn2ethaddr utility available
-     at the ftp archive.
-   - If the previous two steps are satisfied, and the Ethernet card is up,
-     you should find that it is listed in /proc/net/decnet_dev and also
-     that it appears as a directory in /proc/sys/net/decnet/conf/. The
-     loopback device (lo) should also appear and is required to communicate
-     within a node.
-   - If you have any DECnet routers on your network, they should appear
-     in /proc/net/decnet_neigh, otherwise this file will only contain the
-     entry for the node itself (if it doesn't check to see if lo is up).
-   - If you want to send to any node which is not listed in the
-     /proc/net/decnet_neigh file, you'll need to set the default device
-     to point to an Ethernet card with connection to a router. This is
-     again done with the /proc/sys/net/decnet/default_device file.
-   - Try starting a simple server and client, like the dnping/dnmirror
-     over the loopback interface. With luck they should communicate.
-     For this step and those after, you'll need the DECnet library
-     which can be obtained from the above ftp sites as well as the
-     actual utilities themselves.
-   - If this seems to work, then try talking to a node on your local
-     network, and see if you can obtain the same results.
-   - At this point you are on your own... :-)
-
-6. How to send a bug report
-===========================
-
-If you've found a bug and want to report it, then there are several things
-you can do to help me work out exactly what it is that is wrong. Useful
-information (_most_ of which _is_ _essential_) includes:
-
- - What kernel version are you running ?
- - What version of the patch are you running ?
- - How far though the above set of tests can you get ?
- - What is in the /proc/decnet* files and /proc/sys/net/decnet/* files ?
- - Which services are you running ?
- - Which client caused the problem ?
- - How much data was being transferred ?
- - Was the network congested ?
- - How can the problem be reproduced ?
- - Can you use tcpdump to get a trace ? (N.B. Most (all?) versions of
-   tcpdump don't understand how to dump DECnet properly, so including
-   the hex listing of the packet contents is _essential_, usually the -x flag.
-   You may also need to increase the length grabbed with the -s flag. The
-   -e flag also provides very useful information (ethernet MAC addresses))
-
-7. MAC FAQ
-==========
-
-A quick FAQ on ethernet MAC addresses to explain how Linux and DECnet
-interact and how to get the best performance from your hardware.
-
-Ethernet cards are designed to normally only pass received network frames
-to a host computer when they are addressed to it, or to the broadcast address.
-
-Linux has an interface which allows the setting of extra addresses for
-an ethernet card to listen to. If the ethernet card supports it, the
-filtering operation will be done in hardware, if not the extra unwanted packets
-received will be discarded by the host computer. In the latter case,
-significant processor time and bus bandwidth can be used up on a busy
-network (see the NAPI documentation for a longer explanation of these
-effects).
-
-DECnet makes use of this interface to allow running DECnet on an ethernet
-card which has already been configured using TCP/IP (presumably using the
-built in MAC address of the card, as usual) and/or to allow multiple DECnet
-addresses on each physical interface. If you do this, be aware that if your
-ethernet card doesn't support perfect hashing in its MAC address filter
-then your computer will be doing more work than required. Some cards
-will simply set themselves into promiscuous mode in order to receive
-packets from the DECnet specified addresses. So if you have one of these
-cards its better to set the MAC address of the card as described above
-to gain the best efficiency. Better still is to use a card which supports
-NAPI as well.
-
-
-8. Mailing list
-===============
-
-If you are keen to get involved in development, or want to ask questions
-about configuration, or even just report bugs, then there is a mailing
-list that you can join, details are at:
-
-http://sourceforge.net/mail/?group_id=4993
-
-9. Legal Info
-=============
-
-The Linux DECnet project team have placed their code under the GPL. The
-software is provided "as is" and without warranty express or implied.
-DECnet is a trademark of Compaq. This software is not a product of
-Compaq. We acknowledge the help of people at Compaq in providing extra
-documentation above and beyond what was previously publicly available.
-
-Steve Whitehouse <SteveW@ACM.org>
-

Documentation/networking/index.rst

@@ -46,7 +46,6 @@ Contents:
    cdc_mbim
    dccp
    dctcp
-   decnet
    dns_resolver
    driver
    eql

Documentation/trace/kprobetrace.rst

@@ -58,8 +58,8 @@ Synopsis of kprobe_events
   NAME=FETCHARG : Set NAME as the argument name of FETCHARG.
   FETCHARG:TYPE : Set TYPE as the type of FETCHARG. Currently, basic types
 		  (u8/u16/u32/u64/s8/s16/s32/s64), hexadecimal types
-		  (x8/x16/x32/x64), "string", "ustring" and bitfield
-		  are supported.
+		  (x8/x16/x32/x64), "string", "ustring", "symbol", "symstr"
+                  and bitfield are supported.
 
   (\*1) only for the probe on function entry (offs == 0).
   (\*2) only for return probe.
@@ -96,6 +96,10 @@ offset, and container-size (usually 32). The syntax is::
 
 Symbol type('symbol') is an alias of u32 or u64 type (depends on BITS_PER_LONG)
 which shows given pointer in "symbol+offset" style.
+On the other hand, symbol-string type ('symstr') converts the given address to
+"symbol+offset/symbolsize" style and stores it as a null-terminated string.
+With 'symstr' type, you can filter the event with wildcard pattern of the
+symbols, and you don't need to solve symbol name by yourself.
 For $comm, the default type is "string"; any other type is invalid.
 
 .. _user_mem_access:

Documentation/userspace-api/ioctl/ioctl-number.rst

@@ -304,7 +304,6 @@ Code  Seq#    Include File                                           Comments
 0x89  00-06  arch/x86/include/asm/sockios.h
 0x89  0B-DF  linux/sockios.h
 0x89  E0-EF  linux/sockios.h                                         SIOCPROTOPRIVATE range
-0x89  E0-EF  linux/dn.h                                              PROTOPRIVATE range
 0x89  F0-FF  linux/sockios.h                                         SIOCDEVPRIVATE range
 0x8B  all    linux/wireless.h
 0x8C  00-3F                                                          WiNRADiO driver

MAINTAINERS

@@ -1250,7 +1250,7 @@ APEX EMBEDDED SYSTEMS STX104 IIO DRIVER
 M:	William Breathitt Gray <vilhelm.gray@gmail.com>
 L:	linux-iio@vger.kernel.org
 S:	Maintained
-F:	drivers/iio/adc/stx104.c
+F:	drivers/iio/addac/stx104.c
 
 APM DRIVER
 M:	Jiri Kosina <jikos@kernel.org>
@@ -4666,6 +4666,7 @@ T:	git git://git.samba.org/sfrench/cifs-2.6.git
 F:	Documentation/admin-guide/cifs/
 F:	fs/cifs/
 F:	fs/smbfs_common/
+F:	include/uapi/linux/cifs
 
 COMPACTPCI HOTPLUG CORE
 M:	Scott Murray <scott@spiteful.org>
@@ -5205,13 +5206,6 @@ F:	include/linux/tfrc.h
 F:	include/uapi/linux/dccp.h
 F:	net/dccp/
 
-DECnet NETWORK LAYER
-L:	linux-decnet-user@lists.sourceforge.net
-S:	Orphan
-W:	http://linux-decnet.sourceforge.net
-F:	Documentation/networking/decnet.rst
-F:	net/decnet/
-
 DECSTATION PLATFORM SUPPORT
 M:	"Maciej W. Rozycki" <macro@orcam.me.uk>
 L:	linux-mips@vger.kernel.org
@@ -8570,7 +8564,7 @@ F:	drivers/net/wireless/intersil/hostap/
 HP COMPAQ TC1100 TABLET WMI EXTRAS DRIVER
 L:	platform-driver-x86@vger.kernel.org
 S:	Orphan
-F:	drivers/platform/x86/tc1100-wmi.c
+F:	drivers/platform/x86/hp/tc1100-wmi.c
 
 HPET:	High Precision Event Timers driver
 M:	Clemens Ladisch <clemens@ladisch.de>
@@ -10848,7 +10842,7 @@ M:	Eric Piel <eric.piel@tremplin-utc.net>
 S:	Maintained
 F:	Documentation/misc-devices/lis3lv02d.rst
 F:	drivers/misc/lis3lv02d/
-F:	drivers/platform/x86/hp_accel.c
+F:	drivers/platform/x86/hp/hp_accel.c
 
 LIST KUNIT TEST
 M:	David Gow <davidgow@google.com>

Makefile

@@ -1,7 +1,7 @@
 # SPDX-License-Identifier: GPL-2.0
 VERSION = 5
 PATCHLEVEL = 15
-SUBLEVEL = 110
+SUBLEVEL = 131
 EXTRAVERSION =
 NAME = Trick or Treat
 

android/abi_gki_aarch64.stg

@@ -118435,6 +118435,12 @@ member {
   type_id: 0x18bd6530
   offset: 256
 }
+member {
+  id: 0x49ff89e0
+  name: "msg_control"
+  type_id: 0x18bd6530
+  offset: 384
+}
 member {
   id: 0xd7b46612
   name: "msg_control_is_user"
@@ -151434,6 +151440,12 @@ member {
   type_id: 0x03913382
   offset: 64
 }
+member {
+  id: 0x9a2ccf59
+  name: "resizing"
+  type_id: 0x74d29cf1
+  offset: 96
+}
 member {
   id: 0x7f319b20
   name: "resolution"
@@ -215731,7 +215743,7 @@ struct_union {
   kind: STRUCT
   name: "io_sr_msg"
   definition {
-    bytesize: 48
+    bytesize: 56
     member_id: 0xbf9f3e0b
     member_id: 0x3be4492a
     member_id: 0xc33d06ca
@@ -215739,6 +215751,7 @@ struct_union {
     member_id: 0xb8f1e8f7
     member_id: 0x6ede3259
     member_id: 0x9b799482
+    member_id: 0x49ff89e0
   }
 }
 struct_union {
@@ -238394,6 +238407,7 @@ struct_union {
     member_id: 0x2d2d0138
     member_id: 0xe7102ce7
     member_id: 0x9fc7d460
+    member_id: 0x9a2ccf59
     member_id: 0x3dac837e
     member_id: 0xaa1570ba
     member_id: 0xad8983a9

arch/Kconfig

@@ -271,6 +271,9 @@ config ARCH_HAS_DMA_SET_UNCACHED
 config ARCH_HAS_DMA_CLEAR_UNCACHED
 	bool
 
+config ARCH_HAS_CPU_FINALIZE_INIT
+	bool
+
 # Select if arch init_task must go in the __init_task_data section
 config ARCH_TASK_STRUCT_ON_STACK
 	bool

arch/alpha/include/asm/bugs.h

@@ -1,20 +0,0 @@
-/*
- *  include/asm-alpha/bugs.h
- *
- *  Copyright (C) 1994  Linus Torvalds
- */
-
-/*
- * This is included by init/main.c to check for architecture-dependent bugs.
- *
- * Needs:
- *	void check_bugs(void);
- */
-
-/*
- * I don't know of any alpha bugs yet.. Nice chip
- */
-
-static void check_bugs(void)
-{
-}

arch/alpha/kernel/setup.c

@@ -385,8 +385,7 @@ setup_memory(void *kernel_end)
 #endif /* CONFIG_BLK_DEV_INITRD */
 }
 
-int __init
-page_is_ram(unsigned long pfn)
+int page_is_ram(unsigned long pfn)
 {
 	struct memclust_struct * cluster;
 	struct memdesc_struct * memdesc;

arch/arc/include/asm/linkage.h

@@ -8,6 +8,10 @@
 
 #include <asm/dwarf.h>
 
+#define ASM_NL		 `	/* use '`' to mark new line in macro */
+#define __ALIGN		.align 4
+#define __ALIGN_STR	__stringify(__ALIGN)
+
 #ifdef __ASSEMBLY__
 
 .macro ST2 e, o, off
@@ -28,10 +32,6 @@
 #endif
 .endm
 
-#define ASM_NL		 `	/* use '`' to mark new line in macro */
-#define __ALIGN		.align 4
-#define __ALIGN_STR	__stringify(__ALIGN)
-
 /* annotation for data we want in DCCM - if enabled in .config */
 .macro ARCFP_DATA nm
 #ifdef CONFIG_ARC_HAS_DCCM

arch/arm/Kconfig

@@ -4,6 +4,7 @@ config ARM
 	default y
 	select ARCH_32BIT_OFF_T
 	select ARCH_HAS_BINFMT_FLAT
+	select ARCH_HAS_CPU_FINALIZE_INIT if MMU
 	select ARCH_HAS_DEBUG_VIRTUAL if MMU
 	select ARCH_HAS_DMA_WRITE_COMBINE if !ARM_DMA_MEM_BUFFERABLE
 	select ARCH_HAS_ELF_RANDOMIZE

arch/arm/boot/dts/am57xx-cl-som-am57x.dts

@@ -527,7 +527,7 @@
 
 		interrupt-parent = <&gpio1>;
 		interrupts = <31 0>;
-		pendown-gpio = <&gpio1 31 0>;
+		pendown-gpio = <&gpio1 31 GPIO_ACTIVE_LOW>;
 
 
 		ti,x-min = /bits/ 16 <0x0>;

arch/arm/boot/dts/aspeed-bmc-asrock-e3c246d4i.dts

@@ -63,7 +63,7 @@
 		status = "okay";
 		m25p,fast-read;
 		label = "bmc";
-		spi-max-frequency = <100000000>; /* 100 MHz */
+		spi-max-frequency = <50000000>; /* 50 MHz */
 #include "openbmc-flash-layout.dtsi"
 	};
 };

arch/arm/boot/dts/at91-sama7g5ek.dts

@@ -659,7 +659,7 @@
 };
 
 &shdwc {
-	atmel,shdwc-debouncer = <976>;
+	debounce-delay-us = <976>;
 	status = "okay";
 
 	input@0 {

arch/arm/boot/dts/at91sam9261ek.dts

@@ -156,7 +156,7 @@
 					compatible = "ti,ads7843";
 					interrupts-extended = <&pioC 2 IRQ_TYPE_EDGE_BOTH>;
 					spi-max-frequency = <3000000>;
-					pendown-gpio = <&pioC 2 GPIO_ACTIVE_HIGH>;
+					pendown-gpio = <&pioC 2 GPIO_ACTIVE_LOW>;
 
 					ti,x-min = /bits/ 16 <150>;
 					ti,x-max = /bits/ 16 <3830>;

arch/arm/boot/dts/bcm53015-meraki-mr26.dts

@@ -128,7 +128,7 @@
 
 			fixed-link {
 				speed = <1000>;
-				duplex-full;
+				full-duplex;
 			};
 		};
 	};

arch/arm/boot/dts/bcm53016-meraki-mr32.dts

@@ -212,7 +212,7 @@
 
 			fixed-link {
 				speed = <1000>;
-				duplex-full;
+				full-duplex;
 			};
 		};
 	};

arch/arm/boot/dts/bcm5301x.dtsi

@@ -542,7 +542,6 @@
 				  "spi_lr_session_done",
 				  "spi_lr_overread";
 		clocks = <&iprocmed>;
-		clock-names = "iprocmed";
 		num-cs = <2>;
 		#address-cells = <1>;
 		#size-cells = <0>;

arch/arm/boot/dts/exynos4412-itop-elite.dts

@@ -179,7 +179,7 @@
 		compatible = "wlf,wm8960";
 		reg = <0x1a>;
 		clocks = <&pmu_system_controller 0>;
-		clock-names = "MCLK1";
+		clock-names = "mclk";
 		wlf,shared-lrclk;
 		#sound-dai-cells = <0>;
 	};

arch/arm/boot/dts/imx6dl-prtrvt.dts

@@ -126,6 +126,10 @@
 	status = "disabled";
 };
 
+&usbotg {
+	disable-over-current;
+};
+
 &vpu {
 	status = "disabled";
 };

arch/arm/boot/dts/imx6qdl-prti6q.dtsi

@@ -69,6 +69,7 @@
 	vbus-supply = <&reg_usb_h1_vbus>;
 	phy_type = "utmi";
 	dr_mode = "host";
+	disable-over-current;
 	status = "okay";
 };
 
@@ -78,10 +79,18 @@
 	pinctrl-0 = <&pinctrl_usbotg>;
 	phy_type = "utmi";
 	dr_mode = "host";
-	disable-over-current;
+	over-current-active-low;
 	status = "okay";
 };
 
+&usbphynop1 {
+	status = "disabled";
+};
+
+&usbphynop2 {
+	status = "disabled";
+};
+
 &usdhc1 {
 	pinctrl-names = "default";
 	pinctrl-0 = <&pinctrl_usdhc1>;

arch/arm/boot/dts/imx6sll.dtsi

@@ -51,20 +51,18 @@
 			device_type = "cpu";
 			reg = <0>;
 			next-level-cache = <&L2>;
-			operating-points = <
+			operating-points =
 				/* kHz    uV */
-				996000  1275000
-				792000  1175000
-				396000  1075000
-				198000	975000
-			>;
-			fsl,soc-operating-points = <
+				<996000  1275000>,
+				<792000  1175000>,
+				<396000  1075000>,
+				<198000	  975000>;
+			fsl,soc-operating-points =
 				/* ARM kHz      SOC-PU uV */
-				996000          1175000
-				792000          1175000
-				396000          1175000
-				198000		1175000
-			>;
+				<996000         1175000>,
+				<792000         1175000>,
+				<396000         1175000>,
+				<198000		1175000>;
 			clock-latency = <61036>; /* two CLK32 periods */
 			#cooling-cells = <2>;
 			clocks = <&clks IMX6SLL_CLK_ARM>,
@@ -554,7 +552,7 @@
 				reg = <0x020ca000 0x1000>;
 				interrupts = <GIC_SPI 41 IRQ_TYPE_LEVEL_HIGH>;
 				clocks = <&clks IMX6SLL_CLK_USBPHY2>;
-				phy-reg_3p0-supply = <&reg_3p0>;
+				phy-3p0-supply = <&reg_3p0>;
 				fsl,anatop = <&anatop>;
 			};
 

arch/arm/boot/dts/imx6sx.dtsi

@@ -981,6 +981,8 @@
 					 <&clks IMX6SX_CLK_USDHC1>;
 				clock-names = "ipg", "ahb", "per";
 				bus-width = <4>;
+				fsl,tuning-start-tap = <20>;
+				fsl,tuning-step= <2>;
 				status = "disabled";
 			};
 
@@ -993,6 +995,8 @@
 					 <&clks IMX6SX_CLK_USDHC2>;
 				clock-names = "ipg", "ahb", "per";
 				bus-width = <4>;
+				fsl,tuning-start-tap = <20>;
+				fsl,tuning-step= <2>;
 				status = "disabled";
 			};
 
@@ -1005,6 +1009,8 @@
 					 <&clks IMX6SX_CLK_USDHC3>;
 				clock-names = "ipg", "ahb", "per";
 				bus-width = <4>;
+				fsl,tuning-start-tap = <20>;
+				fsl,tuning-step= <2>;
 				status = "disabled";
 			};
 

arch/arm/boot/dts/imx7d-pico-hobbit.dts

@@ -64,7 +64,7 @@
 		interrupt-parent = <&gpio2>;
 		interrupts = <7 0>;
 		spi-max-frequency = <1000000>;
-		pendown-gpio = <&gpio2 7 0>;
+		pendown-gpio = <&gpio2 7 GPIO_ACTIVE_LOW>;
 		vcc-supply = <&reg_3p3v>;
 		ti,x-min = /bits/ 16 <0>;
 		ti,x-max = /bits/ 16 <4095>;

arch/arm/boot/dts/imx7d-sdb.dts

@@ -205,7 +205,7 @@
 		pinctrl-0 = <&pinctrl_tsc2046_pendown>;
 		interrupt-parent = <&gpio2>;
 		interrupts = <29 0>;
-		pendown-gpio = <&gpio2 29 GPIO_ACTIVE_HIGH>;
+		pendown-gpio = <&gpio2 29 GPIO_ACTIVE_LOW>;
 		touchscreen-max-pressure = <255>;
 		wakeup-source;
 	};

arch/arm/boot/dts/iwg20d-q7-common.dtsi

@@ -49,7 +49,7 @@
 	lcd_backlight: backlight {
 		compatible = "pwm-backlight";
 
-		pwms = <&pwm3 0 5000000 0>;
+		pwms = <&pwm3 0 5000000>;
 		brightness-levels = <0 4 8 16 32 64 128 255>;
 		default-brightness-level = <7>;
 		enable-gpios = <&gpio5 14 GPIO_ACTIVE_HIGH>;

arch/arm/boot/dts/meson8.dtsi

@@ -749,13 +749,13 @@
 
 &uart_B {
 	compatible = "amlogic,meson8-uart";
-	clocks = <&xtal>, <&clkc CLKID_UART0>, <&clkc CLKID_CLK81>;
+	clocks = <&xtal>, <&clkc CLKID_UART1>, <&clkc CLKID_CLK81>;
 	clock-names = "xtal", "pclk", "baud";
 };
 
 &uart_C {
 	compatible = "amlogic,meson8-uart";
-	clocks = <&xtal>, <&clkc CLKID_UART0>, <&clkc CLKID_CLK81>;
+	clocks = <&xtal>, <&clkc CLKID_UART2>, <&clkc CLKID_CLK81>;
 	clock-names = "xtal", "pclk", "baud";
 };
 

arch/arm/boot/dts/meson8b.dtsi

@@ -737,13 +737,13 @@
 
 &uart_B {
 	compatible = "amlogic,meson8b-uart";
-	clocks = <&xtal>, <&clkc CLKID_UART0>, <&clkc CLKID_CLK81>;
+	clocks = <&xtal>, <&clkc CLKID_UART1>, <&clkc CLKID_CLK81>;
 	clock-names = "xtal", "pclk", "baud";
 };
 
 &uart_C {
 	compatible = "amlogic,meson8b-uart";
-	clocks = <&xtal>, <&clkc CLKID_UART0>, <&clkc CLKID_CLK81>;
+	clocks = <&xtal>, <&clkc CLKID_UART2>, <&clkc CLKID_CLK81>;
 	clock-names = "xtal", "pclk", "baud";
 };
 

arch/arm/boot/dts/omap3-cm-t3x.dtsi

@@ -227,7 +227,7 @@
 
 		interrupt-parent = <&gpio2>;
 		interrupts = <25 0>;		/* gpio_57 */
-		pendown-gpio = <&gpio2 25 GPIO_ACTIVE_HIGH>;
+		pendown-gpio = <&gpio2 25 GPIO_ACTIVE_LOW>;
 
 		ti,x-min = /bits/ 16 <0x0>;
 		ti,x-max = /bits/ 16 <0x0fff>;

arch/arm/boot/dts/omap3-devkit8000-lcd-common.dtsi

@@ -54,7 +54,7 @@
 
 		interrupt-parent = <&gpio1>;
 		interrupts = <27 0>;		/* gpio_27 */
-		pendown-gpio = <&gpio1 27 GPIO_ACTIVE_HIGH>;
+		pendown-gpio = <&gpio1 27 GPIO_ACTIVE_LOW>;
 
 		ti,x-min = /bits/ 16 <0x0>;
 		ti,x-max = /bits/ 16 <0x0fff>;

arch/arm/boot/dts/omap3-gta04.dtsi

@@ -609,6 +609,22 @@
 	clock-frequency = <100000>;
 };
 
+&mcspi1 {
+	status = "disabled";
+};
+
+&mcspi2 {
+	status = "disabled";
+};
+
+&mcspi3 {
+	status = "disabled";
+};
+
+&mcspi4 {
+	status = "disabled";
+};
+
 &usb_otg_hs {
 	interface-type = <0>;
 	usb-phy = <&usb2_phy>;

arch/arm/boot/dts/omap3-gta04a5one.dts

@@ -5,9 +5,11 @@
 
 #include "omap3-gta04a5.dts"
 
-&omap3_pmx_core {
+/ {
 	model = "Goldelico GTA04A5/Letux 2804 with OneNAND";
+};
 
+&omap3_pmx_core {
 	gpmc_pins: pinmux_gpmc_pins {
 		pinctrl-single,pins = <
 

arch/arm/boot/dts/omap3-lilly-a83x.dtsi

@@ -311,7 +311,7 @@
 		interrupt-parent = <&gpio1>;
 		interrupts = <8 0>;   /* boot6 / gpio_8 */
 		spi-max-frequency = <1000000>;
-		pendown-gpio = <&gpio1 8 GPIO_ACTIVE_HIGH>;
+		pendown-gpio = <&gpio1 8 GPIO_ACTIVE_LOW>;
 		vcc-supply = <&reg_vcc3>;
 		pinctrl-names = "default";
 		pinctrl-0 = <&tsc2048_pins>;

arch/arm/boot/dts/omap3-overo-common-lcd35.dtsi

@@ -149,7 +149,7 @@
 
 		interrupt-parent = <&gpio4>;
 		interrupts = <18 0>;			/* gpio_114 */
-		pendown-gpio = <&gpio4 18 GPIO_ACTIVE_HIGH>;
+		pendown-gpio = <&gpio4 18 GPIO_ACTIVE_LOW>;
 
 		ti,x-min = /bits/ 16 <0x0>;
 		ti,x-max = /bits/ 16 <0x0fff>;

arch/arm/boot/dts/omap3-overo-common-lcd43.dtsi

@@ -160,7 +160,7 @@
 
 		interrupt-parent = <&gpio4>;
 		interrupts = <18 0>;			/* gpio_114 */
-		pendown-gpio = <&gpio4 18 GPIO_ACTIVE_HIGH>;
+		pendown-gpio = <&gpio4 18 GPIO_ACTIVE_LOW>;
 
 		ti,x-min = /bits/ 16 <0x0>;
 		ti,x-max = /bits/ 16 <0x0fff>;

arch/arm/boot/dts/omap3-pandora-common.dtsi

@@ -651,7 +651,7 @@
 		pinctrl-0 = <&penirq_pins>;
 		interrupt-parent = <&gpio3>;
 		interrupts = <30 IRQ_TYPE_NONE>;	/* GPIO_94 */
-		pendown-gpio = <&gpio3 30 GPIO_ACTIVE_HIGH>;
+		pendown-gpio = <&gpio3 30 GPIO_ACTIVE_LOW>;
 		vcc-supply = <&vaux4>;
 
 		ti,x-min = /bits/ 16 <0>;

arch/arm/boot/dts/omap5-cm-t54.dts

@@ -354,7 +354,7 @@
 
 		interrupt-parent = <&gpio1>;
 		interrupts = <15 0>;			/* gpio1_wk15 */
-		pendown-gpio = <&gpio1 15 GPIO_ACTIVE_HIGH>;
+		pendown-gpio = <&gpio1 15 GPIO_ACTIVE_LOW>;
 
 
 		ti,x-min = /bits/ 16 <0x0>;

arch/arm/boot/dts/qcom-ipq4019-ap.dk04.1-c1.dts

@@ -11,9 +11,9 @@
 		dma@7984000 {
 			status = "okay";
 		};
-
-		qpic-nand@79b0000 {
-			status = "okay";
-		};
 	};
 };
+
+&nand {
+	status = "okay";
+};

arch/arm/boot/dts/qcom-ipq4019-ap.dk04.1.dtsi

@@ -102,10 +102,10 @@
 			status = "okay";
 			perst-gpio = <&tlmm 38 0x1>;
 		};
-
-		qpic-nand@79b0000 {
-			pinctrl-0 = <&nand_pins>;
-			pinctrl-names = "default";
-		};
 	};
 };
+
+&nand {
+	pinctrl-0 = <&nand_pins>;
+	pinctrl-names = "default";
+};

arch/arm/boot/dts/qcom-ipq4019-ap.dk07.1.dtsi

@@ -65,11 +65,11 @@
 		dma@7984000 {
 			status = "okay";
 		};
-
-		qpic-nand@79b0000 {
-			pinctrl-0 = <&nand_pins>;
-			pinctrl-names = "default";
-			status = "okay";
-		};
 	};
 };
+
+&nand {
+	pinctrl-0 = <&nand_pins>;
+	pinctrl-names = "default";
+	status = "okay";
+};

arch/arm/boot/dts/qcom-ipq4019.dtsi

@@ -424,8 +424,8 @@
 			#address-cells = <3>;
 			#size-cells = <2>;
 
-			ranges = <0x81000000 0 0x40200000 0x40200000 0 0x00100000>,
-				 <0x82000000 0 0x40300000 0x40300000 0 0x00d00000>;
+			ranges = <0x81000000 0x0 0x00000000 0x40200000 0x0 0x00100000>,
+				 <0x82000000 0x0 0x40300000 0x40300000 0x0 0x00d00000>;
 
 			interrupts = <GIC_SPI 141 IRQ_TYPE_LEVEL_HIGH>;
 			interrupt-names = "msi";

arch/arm/boot/dts/qcom-ipq8064.dtsi

@@ -808,8 +808,8 @@
 			#address-cells = <3>;
 			#size-cells = <2>;
 
-			ranges = <0x81000000 0 0x0fe00000 0x0fe00000 0 0x00100000   /* downstream I/O */
-				  0x82000000 0 0x08000000 0x08000000 0 0x07e00000>; /* non-prefetchable memory */
+			ranges = <0x81000000 0x0 0x00000000 0x0fe00000 0x0 0x00010000   /* I/O */
+				  0x82000000 0x0 0x08000000 0x08000000 0x0 0x07e00000>; /* MEM */
 
 			interrupts = <GIC_SPI 35 IRQ_TYPE_LEVEL_HIGH>;
 			interrupt-names = "msi";
@@ -859,8 +859,8 @@
 			#address-cells = <3>;
 			#size-cells = <2>;
 
-			ranges = <0x81000000 0 0x31e00000 0x31e00000 0 0x00100000   /* downstream I/O */
-				  0x82000000 0 0x2e000000 0x2e000000 0 0x03e00000>; /* non-prefetchable memory */
+			ranges = <0x81000000 0x0 0x00000000 0x31e00000 0x0 0x00010000   /* I/O */
+				  0x82000000 0x0 0x2e000000 0x2e000000 0x0 0x03e00000>; /* MEM */
 
 			interrupts = <GIC_SPI 57 IRQ_TYPE_LEVEL_HIGH>;
 			interrupt-names = "msi";
@@ -910,8 +910,8 @@
 			#address-cells = <3>;
 			#size-cells = <2>;
 
-			ranges = <0x81000000 0 0x35e00000 0x35e00000 0 0x00100000   /* downstream I/O */
-				  0x82000000 0 0x32000000 0x32000000 0 0x03e00000>; /* non-prefetchable memory */
+			ranges = <0x81000000 0x0 0x00000000 0x35e00000 0x0 0x00010000   /* I/O */
+				  0x82000000 0x0 0x32000000 0x32000000 0x0 0x03e00000>; /* MEM */
 
 			interrupts = <GIC_SPI 71 IRQ_TYPE_LEVEL_HIGH>;
 			interrupt-names = "msi";

arch/arm/boot/dts/s5pv210.dtsi

@@ -582,7 +582,7 @@
 				interrupts = <29>;
 				clocks = <&clocks CLK_CSIS>,
 						<&clocks SCLK_CSIS>;
-				clock-names = "clk_csis",
+				clock-names = "csis",
 						"sclk_csis";
 				bus-width = <4>;
 				status = "disabled";

arch/arm/boot/dts/stm32f7-pinctrl.dtsi

@@ -284,6 +284,88 @@
 					slew-rate = <2>;
 				};
 			};
+
+			can1_pins_a: can1-0 {
+				pins1 {
+					pinmux = <STM32_PINMUX('A', 12, AF9)>; /* CAN1_TX */
+				};
+				pins2 {
+					pinmux = <STM32_PINMUX('A', 11, AF9)>; /* CAN1_RX */
+					bias-pull-up;
+				};
+			};
+
+			can1_pins_b: can1-1 {
+				pins1 {
+					pinmux = <STM32_PINMUX('B', 9, AF9)>; /* CAN1_TX */
+				};
+				pins2 {
+					pinmux = <STM32_PINMUX('B', 8, AF9)>; /* CAN1_RX */
+					bias-pull-up;
+				};
+			};
+
+			can1_pins_c: can1-2 {
+				pins1 {
+					pinmux = <STM32_PINMUX('D', 1, AF9)>; /* CAN1_TX */
+				};
+				pins2 {
+					pinmux = <STM32_PINMUX('D', 0, AF9)>; /* CAN1_RX */
+					bias-pull-up;
+
+				};
+			};
+
+			can1_pins_d: can1-3 {
+				pins1 {
+					pinmux = <STM32_PINMUX('H', 13, AF9)>; /* CAN1_TX */
+				};
+				pins2 {
+					pinmux = <STM32_PINMUX('H', 14, AF9)>; /* CAN1_RX */
+					bias-pull-up;
+
+				};
+			};
+
+			can2_pins_a: can2-0 {
+				pins1 {
+					pinmux = <STM32_PINMUX('B', 6, AF9)>; /* CAN2_TX */
+				};
+				pins2 {
+					pinmux = <STM32_PINMUX('B', 5, AF9)>; /* CAN2_RX */
+					bias-pull-up;
+				};
+			};
+
+			can2_pins_b: can2-1 {
+				pins1 {
+					pinmux = <STM32_PINMUX('B', 13, AF9)>; /* CAN2_TX */
+				};
+				pins2 {
+					pinmux = <STM32_PINMUX('B', 12, AF9)>; /* CAN2_RX */
+					bias-pull-up;
+				};
+			};
+
+			can3_pins_a: can3-0 {
+				pins1 {
+					pinmux = <STM32_PINMUX('A', 15, AF11)>; /* CAN3_TX */
+				};
+				pins2 {
+					pinmux = <STM32_PINMUX('A', 8, AF11)>; /* CAN3_RX */
+					bias-pull-up;
+				};
+			};
+
+			can3_pins_b: can3-1 {
+				pins1 {
+					pinmux = <STM32_PINMUX('B', 4, AF11)>;  /* CAN3_TX */
+				};
+				pins2 {
+					pinmux = <STM32_PINMUX('B', 3, AF11)>; /* CAN3_RX */
+					bias-pull-up;
+				};
+			};
 		};
 	};
 };

arch/arm/boot/dts/stm32mp15-pinctrl.dtsi

@@ -1190,7 +1190,7 @@
 		};
 	};
 
-	sai2a_sleep_pins_c: sai2a-2 {
+	sai2a_sleep_pins_c: sai2a-sleep-2 {
 		pins {
 			pinmux = <STM32_PINMUX('D', 13, ANALOG)>, /* SAI2_SCK_A */
 				 <STM32_PINMUX('D', 11, ANALOG)>, /* SAI2_SD_A */

arch/arm/boot/dts/stm32mp15xx-dhcom-pdk2.dtsi

@@ -137,10 +137,13 @@
 
 	sound {
 		compatible = "audio-graph-card";
-		routing =
-			"MIC_IN", "Capture",
-			"Capture", "Mic Bias",
-			"Playback", "HP_OUT";
+		widgets = "Headphone", "Headphone Jack",
+			  "Line", "Line In Jack",
+			  "Microphone", "Microphone Jack";
+		routing = "Headphone Jack", "HP_OUT",
+			  "LINE_IN", "Line In Jack",
+			  "MIC_IN", "Microphone Jack",
+			  "Microphone Jack", "Mic Bias";
 		dais = <&sai2a_port &sai2b_port>;
 		status = "okay";
 	};

arch/arm/boot/dts/stm32mp15xx-dhcor-avenger96.dtsi

@@ -88,7 +88,7 @@
 
 	sound {
 		compatible = "audio-graph-card";
-		label = "STM32MP1-AV96-HDMI";
+		label = "STM32-AV96-HDMI";
 		dais = <&sai2a_port>;
 		status = "okay";
 	};
@@ -267,6 +267,12 @@
 			};
 		};
 	};
+
+	dh_mac_eeprom: eeprom@53 {
+		compatible = "atmel,24c02";
+		reg = <0x53>;
+		pagesize = <16>;
+	};
 };
 
 &ltdc {

arch/arm/boot/dts/stm32mp15xx-dhcor-som.dtsi

@@ -171,12 +171,6 @@
 			status = "disabled";
 		};
 	};
-
-	eeprom@53 {
-		compatible = "atmel,24c02";
-		reg = <0x53>;
-		pagesize = <16>;
-	};
 };
 
 &iwdg2 {

arch/arm/boot/dts/stm32mp15xx-dkx.dtsi

@@ -438,7 +438,7 @@
 	i2s2_port: port {
 		i2s2_endpoint: endpoint {
 			remote-endpoint = <&sii9022_tx_endpoint>;
-			format = "i2s";
+			dai-format = "i2s";
 			mclk-fs = <256>;
 		};
 	};

arch/arm/boot/dts/vexpress-v2p-ca5s.dts

@@ -132,6 +132,7 @@
 		reg = <0x2c0f0000 0x1000>;
 		interrupts = <0 84 4>;
 		cache-level = <2>;
+		cache-unified;
 	};
 
 	pmu {

arch/arm/configs/multi_v7_defconfig

@@ -696,7 +696,6 @@ CONFIG_DRM_IMX_LDB=m
 CONFIG_DRM_IMX_HDMI=m
 CONFIG_DRM_ATMEL_HLCDC=m
 CONFIG_DRM_RCAR_DU=m
-CONFIG_DRM_RCAR_LVDS=y
 CONFIG_DRM_SUN4I=m
 CONFIG_DRM_MSM=m
 CONFIG_DRM_FSL_DCU=m

arch/arm/include/asm/assembler.h

@@ -326,6 +326,23 @@
 #endif
 	.endm
 
+/*
+ * Raw SMP data memory barrier
+ */
+	.macro	__smp_dmb mode
+#if __LINUX_ARM_ARCH__ >= 7
+	.ifeqs "\mode","arm"
+	dmb	ish
+	.else
+	W(dmb)	ish
+	.endif
+#elif __LINUX_ARM_ARCH__ == 6
+	mcr	p15, 0, r0, c7, c10, 5	@ dmb
+#else
+	.error "Incompatible SMP platform"
+#endif
+	.endm
+
 #if defined(CONFIG_CPU_V7M)
 	/*
 	 * setmode is used to assert to be in svc mode during boot. For v7-M

arch/arm/include/asm/bugs.h

@@ -1,7 +1,5 @@
 /* SPDX-License-Identifier: GPL-2.0-only */
 /*
- *  arch/arm/include/asm/bugs.h
- *
  *  Copyright (C) 1995-2003 Russell King
  */
 #ifndef __ASM_BUGS_H
@@ -10,10 +8,8 @@
 extern void check_writebuffer_bugs(void);
 
 #ifdef CONFIG_MMU
-extern void check_bugs(void);
 extern void check_other_bugs(void);
 #else
-#define check_bugs() do { } while (0)
 #define check_other_bugs() do { } while (0)
 #endif
 

arch/arm/include/asm/sync_bitops.h

@@ -14,14 +14,35 @@
  * ops which are SMP safe even on a UP kernel.
  */
 
+/*
+ * Unordered
+ */
+
 #define sync_set_bit(nr, p)		_set_bit(nr, p)
 #define sync_clear_bit(nr, p)		_clear_bit(nr, p)
 #define sync_change_bit(nr, p)		_change_bit(nr, p)
-#define sync_test_and_set_bit(nr, p)	_test_and_set_bit(nr, p)
-#define sync_test_and_clear_bit(nr, p)	_test_and_clear_bit(nr, p)
-#define sync_test_and_change_bit(nr, p)	_test_and_change_bit(nr, p)
 #define sync_test_bit(nr, addr)		test_bit(nr, addr)
-#define arch_sync_cmpxchg		arch_cmpxchg
 
+/*
+ * Fully ordered
+ */
+
+int _sync_test_and_set_bit(int nr, volatile unsigned long * p);
+#define sync_test_and_set_bit(nr, p)	_sync_test_and_set_bit(nr, p)
+
+int _sync_test_and_clear_bit(int nr, volatile unsigned long * p);
+#define sync_test_and_clear_bit(nr, p)	_sync_test_and_clear_bit(nr, p)
+
+int _sync_test_and_change_bit(int nr, volatile unsigned long * p);
+#define sync_test_and_change_bit(nr, p)	_sync_test_and_change_bit(nr, p)
+
+#define arch_sync_cmpxchg(ptr, old, new)				\
+({									\
+	__typeof__(*(ptr)) __ret;					\
+	__smp_mb__before_atomic();					\
+	__ret = arch_cmpxchg_relaxed((ptr), (old), (new));		\
+	__smp_mb__after_atomic();					\
+	__ret;								\
+})
 
 #endif

arch/arm/kernel/bugs.c

@@ -1,5 +1,6 @@
 // SPDX-License-Identifier: GPL-2.0
 #include <linux/init.h>
+#include <linux/cpu.h>
 #include <asm/bugs.h>
 #include <asm/proc-fns.h>
 
@@ -11,7 +12,7 @@ void check_other_bugs(void)
 #endif
 }
 
-void __init check_bugs(void)
+void __init arch_cpu_finalize_init(void)
 {
 	check_writebuffer_bugs();
 	check_other_bugs();

arch/arm/kernel/module-plts.c

@@ -256,7 +256,7 @@ int module_frob_arch_sections(Elf_Ehdr *ehdr, Elf_Shdr *sechdrs,
 		/* sort by type and symbol index */
 		sort(rels, numrels, sizeof(Elf32_Rel), cmp_rel, NULL);
 
-		if (strncmp(secstrings + dstsec->sh_name, ".init", 5) != 0)
+		if (!module_init_layout_section(secstrings + dstsec->sh_name))
 			core_plts += count_plts(syms, dstsec->sh_addr, rels,
 						numrels, s->sh_info);
 		else

arch/arm/kernel/unwind.c

@@ -301,6 +301,29 @@ static int unwind_exec_pop_subset_r0_to_r3(struct unwind_ctrl_block *ctrl,
 	return URC_OK;
 }
 
+static unsigned long unwind_decode_uleb128(struct unwind_ctrl_block *ctrl)
+{
+	unsigned long bytes = 0;
+	unsigned long insn;
+	unsigned long result = 0;
+
+	/*
+	 * unwind_get_byte() will advance `ctrl` one instruction at a time, so
+	 * loop until we get an instruction byte where bit 7 is not set.
+	 *
+	 * Note: This decodes a maximum of 4 bytes to output 28 bits data where
+	 * max is 0xfffffff: that will cover a vsp increment of 1073742336, hence
+	 * it is sufficient for unwinding the stack.
+	 */
+	do {
+		insn = unwind_get_byte(ctrl);
+		result |= (insn & 0x7f) << (bytes * 7);
+		bytes++;
+	} while (!!(insn & 0x80) && (bytes != sizeof(result)));
+
+	return result;
+}
+
 /*
  * Execute the current unwind instruction.
  */
@@ -354,7 +377,7 @@ static int unwind_exec_insn(struct unwind_ctrl_block *ctrl)
 		if (ret)
 			goto error;
 	} else if (insn == 0xb2) {
-		unsigned long uleb128 = unwind_get_byte(ctrl);
+		unsigned long uleb128 = unwind_decode_uleb128(ctrl);
 
 		ctrl->vrs[SP] += 0x204 + (uleb128 << 2);
 	} else {

arch/arm/lib/bitops.h

@@ -28,7 +28,7 @@ UNWIND(	.fnend		)
 ENDPROC(\name		)
 	.endm
 
-	.macro	testop, name, instr, store
+	.macro	__testop, name, instr, store, barrier
 ENTRY(	\name		)
 UNWIND(	.fnstart	)
 	ands	ip, r1, #3
@@ -38,7 +38,7 @@ UNWIND(	.fnstart	)
 	mov	r0, r0, lsr #5
 	add	r1, r1, r0, lsl #2	@ Get word offset
 	mov	r3, r2, lsl r3		@ create mask
-	smp_dmb
+	\barrier
 #if __LINUX_ARM_ARCH__ >= 7 && defined(CONFIG_SMP)
 	.arch_extension	mp
 	ALT_SMP(W(pldw)	[r1])
@@ -50,13 +50,21 @@ UNWIND(	.fnstart	)
 	strex	ip, r2, [r1]
 	cmp	ip, #0
 	bne	1b
-	smp_dmb
+	\barrier
 	cmp	r0, #0
 	movne	r0, #1
 2:	bx	lr
 UNWIND(	.fnend		)
 ENDPROC(\name		)
 	.endm
+
+	.macro	testop, name, instr, store
+	__testop \name, \instr, \store, smp_dmb
+	.endm
+
+	.macro	sync_testop, name, instr, store
+	__testop \name, \instr, \store, __smp_dmb
+	.endm
 #else
 	.macro	bitop, name, instr
 ENTRY(	\name		)

arch/arm/lib/testchangebit.S

@@ -10,3 +10,7 @@
                 .text
 
 testop	_test_and_change_bit, eor, str
+
+#if __LINUX_ARM_ARCH__ >= 6
+sync_testop	_sync_test_and_change_bit, eor, str
+#endif

arch/arm/lib/testclearbit.S

@@ -10,3 +10,7 @@
                 .text
 
 testop	_test_and_clear_bit, bicne, strne
+
+#if __LINUX_ARM_ARCH__ >= 6
+sync_testop	_sync_test_and_clear_bit, bicne, strne
+#endif

arch/arm/lib/testsetbit.S

@@ -10,3 +10,7 @@
                 .text
 
 testop	_test_and_set_bit, orreq, streq
+
+#if __LINUX_ARM_ARCH__ >= 6
+sync_testop	_sync_test_and_set_bit, orreq, streq
+#endif

arch/arm/mach-ep93xx/timer-ep93xx.c

@@ -9,6 +9,7 @@
 #include <linux/io.h>
 #include <asm/mach/time.h>
 #include "soc.h"
+#include "platform.h"
 
 /*************************************************************************
  * Timer handling for EP93xx
@@ -60,7 +61,7 @@ static u64 notrace ep93xx_read_sched_clock(void)
 	return ret;
 }
 
-u64 ep93xx_clocksource_read(struct clocksource *c)
+static u64 ep93xx_clocksource_read(struct clocksource *c)
 {
 	u64 ret;
 

arch/arm/mach-omap2/board-generic.c

@@ -13,6 +13,7 @@
 #include <linux/of_platform.h>
 #include <linux/irqdomain.h>
 #include <linux/clocksource.h>
+#include <linux/clockchips.h>
 
 #include <asm/setup.h>
 #include <asm/mach/arch.h>

arch/arm/mach-orion5x/board-dt.c

@@ -63,6 +63,9 @@ static void __init orion5x_dt_init(void)
 	if (of_machine_is_compatible("maxtor,shared-storage-2"))
 		mss2_init();
 
+	if (of_machine_is_compatible("lacie,d2-network"))
+		d2net_init();
+
 	of_platform_default_populate(NULL, orion5x_auxdata_lookup, NULL);
 }
 

arch/arm/mach-orion5x/common.h

@@ -75,6 +75,12 @@ extern void mss2_init(void);
 static inline void mss2_init(void) {}
 #endif
 
+#ifdef CONFIG_MACH_D2NET_DT
+void d2net_init(void);
+#else
+static inline void d2net_init(void) {}
+#endif
+
 /*****************************************************************************
  * Helpers to access Orion registers
  ****************************************************************************/

arch/arm/mach-pxa/sharpsl_pm.c

@@ -220,8 +220,6 @@ void sharpsl_battery_kick(void)
 {
 	schedule_delayed_work(&sharpsl_bat, msecs_to_jiffies(125));
 }
-EXPORT_SYMBOL(sharpsl_battery_kick);
-
 
 static void sharpsl_battery_thread(struct work_struct *private_)
 {

arch/arm/mach-pxa/spitz.c

@@ -9,7 +9,6 @@
  */
 
 #include <linux/kernel.h>
-#include <linux/module.h>	/* symbol_get ; symbol_put */
 #include <linux/platform_device.h>
 #include <linux/delay.h>
 #include <linux/gpio_keys.h>
@@ -514,17 +513,6 @@ static struct pxa2xx_spi_chip spitz_ads7846_chip = {
 	.gpio_cs		= SPITZ_GPIO_ADS7846_CS,
 };
 
-static void spitz_bl_kick_battery(void)
-{
-	void (*kick_batt)(void);
-
-	kick_batt = symbol_get(sharpsl_battery_kick);
-	if (kick_batt) {
-		kick_batt();
-		symbol_put(sharpsl_battery_kick);
-	}
-}
-
 static struct gpiod_lookup_table spitz_lcdcon_gpio_table = {
 	.dev_id = "spi2.1",
 	.table = {
@@ -552,7 +540,7 @@ static struct corgi_lcd_platform_data spitz_lcdcon_info = {
 	.max_intensity		= 0x2f,
 	.default_intensity	= 0x1f,
 	.limit_mask		= 0x0b,
-	.kick_battery		= spitz_bl_kick_battery,
+	.kick_battery		= sharpsl_battery_kick,
 };
 
 static struct pxa2xx_spi_chip spitz_lcdcon_chip = {

arch/arm/mach-sa1100/jornada720_ssp.c

@@ -1,5 +1,5 @@
 // SPDX-License-Identifier: GPL-2.0-only
-/**
+/*
  *  arch/arm/mac-sa1100/jornada720_ssp.c
  *
  *  Copyright (C) 2006/2007 Kristoffer Ericson <Kristoffer.Ericson@gmail.com>
@@ -26,6 +26,7 @@ static unsigned long jornada_ssp_flags;
 
 /**
  * jornada_ssp_reverse - reverses input byte
+ * @byte: input byte to reverse
  *
  * we need to reverse all data we receive from the mcu due to its physical location
  * returns : 01110111 -> 11101110
@@ -46,6 +47,7 @@ EXPORT_SYMBOL(jornada_ssp_reverse);
 
 /**
  * jornada_ssp_byte - waits for ready ssp bus and sends byte
+ * @byte: input byte to transmit
  *
  * waits for fifo buffer to clear and then transmits, if it doesn't then we will
  * timeout after <timeout> rounds. Needs mcu running before its called.
@@ -77,6 +79,7 @@ EXPORT_SYMBOL(jornada_ssp_byte);
 
 /**
  * jornada_ssp_inout - decide if input is command or trading byte
+ * @byte: input byte to send (may be %TXDUMMY)
  *
  * returns : (jornada_ssp_byte(byte)) on success
  *         : %-ETIMEDOUT on timeout failure

arch/arm/probes/kprobes/checkers-common.c

@@ -40,7 +40,7 @@ enum probes_insn checker_stack_use_imm_0xx(probes_opcode_t insn,
  * Different from other insn uses imm8, the real addressing offset of
  * STRD in T32 encoding should be imm8 * 4. See ARMARM description.
  */
-enum probes_insn checker_stack_use_t32strd(probes_opcode_t insn,
+static enum probes_insn checker_stack_use_t32strd(probes_opcode_t insn,
 		struct arch_probes_insn *asi,
 		const struct decode_header *h)
 {

arch/arm/probes/kprobes/core.c

@@ -233,7 +233,7 @@ singlestep(struct kprobe *p, struct pt_regs *regs, struct kprobe_ctlblk *kcb)
  * kprobe, and that level is reserved for user kprobe handlers, so we can't
  * risk encountering a new kprobe in an interrupt handler.
  */
-void __kprobes kprobe_handler(struct pt_regs *regs)
+static void __kprobes kprobe_handler(struct pt_regs *regs)
 {
 	struct kprobe *p, *cur;
 	struct kprobe_ctlblk *kcb;

arch/arm/probes/kprobes/opt-arm.c

@@ -145,8 +145,6 @@ __arch_remove_optimized_kprobe(struct optimized_kprobe *op, int dirty)
 	}
 }
 
-extern void kprobe_handler(struct pt_regs *regs);
-
 static void
 optimized_callback(struct optimized_kprobe *op, struct pt_regs *regs)
 {

arch/arm/probes/kprobes/test-core.c

@@ -720,7 +720,7 @@ static const char coverage_register_lookup[16] = {
 	[REG_TYPE_NOSPPCX]	= COVERAGE_ANY_REG | COVERAGE_SP,
 };
 
-unsigned coverage_start_registers(const struct decode_header *h)
+static unsigned coverage_start_registers(const struct decode_header *h)
 {
 	unsigned regs = 0;
 	int i;

arch/arm/probes/kprobes/test-core.h

@@ -454,3 +454,7 @@ void kprobe_thumb32_test_cases(void);
 #else
 void kprobe_arm_test_cases(void);
 #endif
+
+void __kprobes_test_case_start(void);
+void __kprobes_test_case_end_16(void);
+void __kprobes_test_case_end_32(void);

arch/arm64/Kconfig

@@ -871,6 +871,121 @@ config ARM64_ERRATUM_2457168
 
 	  If unsure, say Y.
 
+config ARM64_WORKAROUND_TRBE_OVERWRITE_FILL_MODE
+	bool
+
+config ARM64_ERRATUM_2119858
+	bool "Cortex-A710: 2119858: workaround TRBE overwriting trace data in FILL mode"
+	default y
+	depends on COMPILE_TEST # Until the CoreSight TRBE driver changes are in
+	depends on CORESIGHT_TRBE
+	select ARM64_WORKAROUND_TRBE_OVERWRITE_FILL_MODE
+	help
+	  This option adds the workaround for ARM Cortex-A710 erratum 2119858.
+
+	  Affected Cortex-A710 cores could overwrite up to 3 cache lines of trace
+	  data at the base of the buffer (pointed to by TRBASER_EL1) in FILL mode in
+	  the event of a WRAP event.
+
+	  Work around the issue by always making sure we move the TRBPTR_EL1 by
+	  256 bytes before enabling the buffer and filling the first 256 bytes of
+	  the buffer with ETM ignore packets upon disabling.
+
+	  If unsure, say Y.
+
+config ARM64_ERRATUM_2139208
+	bool "Neoverse-N2: 2139208: workaround TRBE overwriting trace data in FILL mode"
+	default y
+	depends on COMPILE_TEST # Until the CoreSight TRBE driver changes are in
+	depends on CORESIGHT_TRBE
+	select ARM64_WORKAROUND_TRBE_OVERWRITE_FILL_MODE
+	help
+	  This option adds the workaround for ARM Neoverse-N2 erratum 2139208.
+
+	  Affected Neoverse-N2 cores could overwrite up to 3 cache lines of trace
+	  data at the base of the buffer (pointed to by TRBASER_EL1) in FILL mode in
+	  the event of a WRAP event.
+
+	  Work around the issue by always making sure we move the TRBPTR_EL1 by
+	  256 bytes before enabling the buffer and filling the first 256 bytes of
+	  the buffer with ETM ignore packets upon disabling.
+
+	  If unsure, say Y.
+
+config ARM64_WORKAROUND_TSB_FLUSH_FAILURE
+	bool
+
+config ARM64_ERRATUM_2054223
+	bool "Cortex-A710: 2054223: workaround TSB instruction failing to flush trace"
+	default y
+	select ARM64_WORKAROUND_TSB_FLUSH_FAILURE
+	help
+	  Enable workaround for ARM Cortex-A710 erratum 2054223
+
+	  Affected cores may fail to flush the trace data on a TSB instruction, when
+	  the PE is in trace prohibited state. This will cause losing a few bytes
+	  of the trace cached.
+
+	  Workaround is to issue two TSB consecutively on affected cores.
+
+	  If unsure, say Y.
+
+config ARM64_ERRATUM_2067961
+	bool "Neoverse-N2: 2067961: workaround TSB instruction failing to flush trace"
+	default y
+	select ARM64_WORKAROUND_TSB_FLUSH_FAILURE
+	help
+	  Enable workaround for ARM Neoverse-N2 erratum 2067961
+
+	  Affected cores may fail to flush the trace data on a TSB instruction, when
+	  the PE is in trace prohibited state. This will cause losing a few bytes
+	  of the trace cached.
+
+	  Workaround is to issue two TSB consecutively on affected cores.
+
+	  If unsure, say Y.
+
+config ARM64_WORKAROUND_TRBE_WRITE_OUT_OF_RANGE
+	bool
+
+config ARM64_ERRATUM_2253138
+	bool "Neoverse-N2: 2253138: workaround TRBE writing to address out-of-range"
+	depends on COMPILE_TEST # Until the CoreSight TRBE driver changes are in
+	depends on CORESIGHT_TRBE
+	default y
+	select ARM64_WORKAROUND_TRBE_WRITE_OUT_OF_RANGE
+	help
+	  This option adds the workaround for ARM Neoverse-N2 erratum 2253138.
+
+	  Affected Neoverse-N2 cores might write to an out-of-range address, not reserved
+	  for TRBE. Under some conditions, the TRBE might generate a write to the next
+	  virtually addressed page following the last page of the TRBE address space
+	  (i.e., the TRBLIMITR_EL1.LIMIT), instead of wrapping around to the base.
+
+	  Work around this in the driver by always making sure that there is a
+	  page beyond the TRBLIMITR_EL1.LIMIT, within the space allowed for the TRBE.
+
+	  If unsure, say Y.
+
+config ARM64_ERRATUM_2224489
+	bool "Cortex-A710: 2224489: workaround TRBE writing to address out-of-range"
+	depends on COMPILE_TEST # Until the CoreSight TRBE driver changes are in
+	depends on CORESIGHT_TRBE
+	default y
+	select ARM64_WORKAROUND_TRBE_WRITE_OUT_OF_RANGE
+	help
+	  This option adds the workaround for ARM Cortex-A710 erratum 2224489.
+
+	  Affected Cortex-A710 cores might write to an out-of-range address, not reserved
+	  for TRBE. Under some conditions, the TRBE might generate a write to the next
+	  virtually addressed page following the last page of the TRBE address space
+	  (i.e., the TRBLIMITR_EL1.LIMIT), instead of wrapping around to the base.
+
+	  Work around this in the driver by always making sure that there is a
+	  page beyond the TRBLIMITR_EL1.LIMIT, within the space allowed for the TRBE.
+
+	  If unsure, say Y.
+
 config CAVIUM_ERRATUM_22375
 	bool "Cavium erratum 22375, 24313"
 	default y

arch/arm64/boot/dts/altera/socfpga_stratix10_socdk.dts

@@ -129,7 +129,7 @@
 	status = "okay";
 	clock-frequency = <100000>;
 	i2c-sda-falling-time-ns = <890>;  /* hcnt */
-	i2c-sdl-falling-time-ns = <890>;  /* lcnt */
+	i2c-scl-falling-time-ns = <890>;  /* lcnt */
 
 	adc@14 {
 		compatible = "lltc,ltc2497";