Files
Greg Kroah-Hartman f06b723c6f Merge tag 'android12-5.10.243_r00' into android12-5.10
This merges the android12-5.10.243_r00 tag into the android12-5.10 branch,
catching it up with the latest LTS releases.

It contains the following commits:

* 45ade17078 Revert "e1000e: fix heap overflow in e1000_set_eeprom"
* be8ad78037 Revert "wifi: cw1200: cap SSID length in cw1200_do_join()"
* f2b7aa090b Revert "wifi: libertas: cap SSID len in lbs_associate()"
*   e918b8b0dd Merge 5.10.243 into android12-5.10-lts
|\
| * 9d9b1219d0 Linux 5.10.243
| * dab666be25 dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status()
| * 64ddb14fd0 cifs: fix integer overflow in match_server()
| * 071fdf70d9 clk: qcom: gdsc: Set retain_ff before moving to HW CTRL
| * 8e206c6415 spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort
| * 817efa7b35 spi: spi-fsl-lpspi: Set correct chip-select polarity bit
| * 04c112ddf7 spi: spi-fsl-lpspi: Fix transmissions when using CONT
| * ae184024ef pcmcia: Add error handling for add_interval() in do_validate_mem()
| * e911f0dcfe ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model
| * 4c01ca5b8e net: phy: microchip: force IRQ polling mode for lan88xx
| * 308bccbbd2 net: phy: microchip: remove the use of .ack_interrupt()
| * bb2c31b8a8 net: phy: microchip: implement generic .handle_interrupt() callback
| * eabc92d1fb randstruct: gcc-plugin: Fix attribute addition
| * a5c6c3431e randstruct: gcc-plugin: Remove bogus void member
| * 8a7c47053f arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs
| * 20aa059424 vmxnet3: update MTU after device quiesce
| * 48f5e27c6d net: dsa: microchip: linearize skb for tail-tagging switches
| * b21c1ab6ce net: dsa: microchip: update tag_ksz masks for KSZ9477 family
| * 2bcc31d61d dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status()
| * d43a31ae7d ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup
| * b23bb1c162 gpio: pca953x: fix IRQ storm on system wake up
| * 957e8be112 iio: light: opt3001: fix deadlock due to concurrent flag access
| * 119b2576b8 iio: chemical: pms7003: use aligned_s64 for timestamp
| * 5defea81d4 KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
| * 2075ccfcba cpufreq/sched: Explicitly synchronize limits_changed flag handling
| * f66012909e mm/slub: avoid accessing metadata when pointer is invalid in object_err()
| * cee956ab1e mm/khugepaged: fix ->anon_vma race
| * ce8829d3d4 e1000e: fix heap overflow in e1000_set_eeprom
| * 1e36c6c8dc batman-adv: fix OOB read/write in network-coding decode
| * baa39f6ad7 scsi: lpfc: Fix buffer free/clear order in deferred receive path
| * 4c020f40f4 drm/amdgpu: drop hw access in non-DC audio fini
| * 05daef0442 wifi: mwifiex: Initialize the chan_stats array to zero
| * 5ff2826c99 pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()
| * 100bb38c19 ALSA: usb-audio: Add mute TLV for playback volumes on some devices
| * 87a35a3674 ppp: fix memory leak in pad_compress_skb
| * 3d295ffa95 net: atm: fix memory leak in atm_register_sysfs when device_register fail
| * 5b079be1b9 ax25: properly unshare skbs in ax25_kiss_rcv()
| * 5d10858346 ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init()
| * 044a47be34 net: thunder_bgx: decrement cleanup index before use
| * caabe2edce net: thunder_bgx: add a missing of_node_put
| * 30fc1555c8 wifi: libertas: cap SSID len in lbs_associate()
| * a45926a8a4 wifi: cw1200: cap SSID length in cw1200_do_join()
| * 64c916efe9 net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets
| * 3c6fb929af i40e: Fix potential invalid access when MAC list is empty
| * 33416e5c37 icmp: fix icmp_ndo_send address translation for reply direction
| * 17c01212b3 mISDN: Fix memory leak in dsp_hwec_enable()
| * 3a1de6d556 xirc2ps_cs: fix register access when enabling FullDuplex
| * 83e1d9892e Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
| * 2c9c23ebf0 netfilter: conntrack: helper: Replace -EEXIST by -EBUSY
| * a97a9791e4 wifi: cfg80211: fix use-after-free in cmp_bss()
| * 6d6366087c arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro
| * f266188603 tee: fix NULL pointer dereference in tee_shm_put
| * 9f61018f05 drm/amd/display: Don't warn when missing DCE encoder caps
* | 1700457fe7 Merge 5.10.242 into android12-5.10-lts
|\|
| * c30b4019ea Linux 5.10.242
| * 157ddfb059 xfs: do not propagate ENODATA disk errors into xattr code
| * 47de1eb74a ASoC: Intel: sof_da7219_mx98360a: fail to initialize soundcard
| * 7fb0e7339a ASoC: Intel: sof_da7219_max98373: shrink platform_id below 20 characters
| * ef3343af1f ASoC: Intel: glk_rt5682_max98357a: shrink platform_id below 20 characters
| * d2d9ca50ad ASoC: Intel: sof_rt5682: shrink platform_id names below 20 characters
| * fbf2842887 ASoC: Intel: bxt_da7219_max98357a: shrink platform_id below 20 characters
| * fcd4f0444b Revert "drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS"
| * 607581c2e3 HID: mcp2221: Handle reads greater than 60 bytes
| * c8c7818cfa HID: mcp2221: Don't set bus speed on every transfer
| * adba503561 drm/nouveau/disp: Always accept linear modifier
| * 0bab4c67a9 net: usb: qmi_wwan: add Telit Cinterion LE910C4-WWX new compositions
| * be100617e8 dma/pool: Ensure DMA_DIRECT_REMAP allocations are decrypted
| * 40a0ee4198 Revert "drm/amdgpu: fix incorrect vm flags to map bo"
| * 019c34ca11 HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()
| * 99d73f1872 HID: wacom: Add a new Art Pen 2
| * 7170122e2a HID: asus: fix UAF via HID_CLAIMED_INPUT validation
| * 31a0ad2f60 KVM: x86: use array_index_nospec with indices that come from guest
| * 7943990193 efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
| * 9546934c20 sctp: initialize more fields in sctp_v6_from_sk()
| * 2c9b12737d net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts
| * 9fae5fdee2 net/mlx5e: Set local Xoff after FW update
| * f92ff7b441 net/mlx5e: Update and set Xon/Xoff upon port speed set
| * 0e07fb3b26 net/mlx5e: Update and set Xon/Xoff upon MTU set
| * b2516e8a36 net: dlink: fix multicast stats being counted incorrectly
| * 0a6a6d4fb3 atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
| * 1ef115e82c Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced
| * 5dea003c7c powerpc/kvm: Fix ifdef to remove build warning
| * 1907d84475 net: ipv4: fix regression in local-broadcast routes
| * 6771eea590 vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put()
| * 0ff42a3278 NFS: Fix a race when updating an existing write
| * a4419861bc nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
| * 62f12cde10 x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
| * bbee61dcf2 scsi: core: sysfs: Correct sysfs attributes access rights
| * 5ab0ec206d ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
| * c72a75beeb pinctrl: STMFX: add missing HAS_IOMEM dependency
* | 6aad20bc24 ANDROID: GKI: fix up crc issue caused by new .h inclusion
* | 4eaaec29c3 Revert "i3c: add missing include to internal header"
* | bb5d4e05ea Revert "PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports"
* | d8f5ff933f Revert "media: venus: vdec: Clamp param smaller than 1fps and bigger than 240."
* | f48ff3ec4f Revert "media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar"
* | eabc85af45 Merge 5.10.241 into android12-5.10-lts
|\|
| * c6a3b81c36 Linux 5.10.241
| * 6ca3f8a9c4 alloc_fdtable(): change calling conventions.
| * 7b8b503c06 netfilter: nf_reject: don't leak dst refcount for loopback packets
| * 97540d9e87 netfilter: nft_reject_inet: allow to use reject from inet ingress
| * 4bbe8536e3 netfilter: nft_reject: unify reject init and dump into nft_reject
| * 27d0ed38e1 s390/hypfs: Enable limited access during lockdown
| * 5ef603261c s390/hypfs: Avoid unnecessary ioctl registration in debugfs
| * 11fb6cff19 ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
| * 0e156e9d0c net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
| * de04ddd298 net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
| * 6a471e5957 ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
| * 7ad81508c9 ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
| * 3ae38a8a0d ALSA: usb-audio: Fix size validation in convert_chmap_v3()
| * 7975ee339c mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
| * a732502bf3 iommu/amd: Avoid stack buffer overflow from kernel cmdline
| * ad8a9d38d3 scsi: qla4xxx: Prevent a potential error pointer dereference
| * 92a0fc3c2a RDMA/bnxt_re: Fix to initialize the PBL array
| * 9488173166 cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key
| * c65b1bd0af mm/page_alloc: detect allocation forbidden by cpuset and bail out early
| * fd441fd972 iio: light: as73211: Ensure buffer holes are zeroed
| * b842ef39c2 tracing: Limit access to parser->buffer when trace_get_user failed
| * 78c8e107fe tracing: Remove unneeded goto out logic
| * 2eee98071f iio: imu: inv_icm42600: change invalid data error to -EBUSY
| * 1f39c4fb17 usb: xhci: Fix slot_id resource race conflict
| * 27b32b2c7b compiler: remove __ADDRESSABLE_ASM{_STR,}() again
| * c010b7a9e1 net: usbnet: Fix the wrong netif_carrier_on() call
| * 275116d5d5 selftests: mptcp: pm: check flush doesn't reset limits
| * 389891ac9f gpio: rcar: Use raw_spinlock to protect register access
| * 8731a0b180 usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock
| * f2bfd0a2a6 usb: dwc3: Remove DWC3 locking during gadget suspend/resume
| * 8050652810 dm rq: don't queue request to blk-mq during DM suspend
| * f629437159 dm: rearrange core declarations for extended use from dm-zone.c
| * 261bbd90cc uio_hv_generic: Fix another memory leak in error handling paths
| * a532533f8f media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
| * a650654365 f2fs: fix to avoid out-of-boundary access in dnode page
| * d2e30bdce8 media: qcom: camss: cleanup media device allocated resource on error path
| * 89d17a2d89 drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
| * f4701828f6 drm/amd/display: Don't overclock DCE 6 by 15%
| * 88cf63c259 media: venus: protect against spurious interrupts during probe
| * 54601b830b media: venus: Add support for SSR trigger using fault injection
| * e2624d8e78 media: venus: hfi: explicitly release IRQ during teardown
| * 10ec31df5e media: venus: don't de-reference NULL pointers at IRQ time
| * 4ad09285f7 media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
| * 7b4c52fd55 media: v4l2-ctrls: always copy the controls on completion
| * 2bb4d0f8b6 wifi: ath11k: fix dest ring-buffer corruption when ring is full
| * 5cd4c42f32 asm-generic: Add memory barrier dma_mb()
| * 9c301923f3 locking/barriers, kcsan: Support generic instrumentation
| * 9c57343c8c pwm: mediatek: Fix duty and period setting
| * 24c9aed3aa pwm: mediatek: Handle hardware enable and clock enable separately
| * ee3d05d202 pwm: mediatek: Implement .apply() callback
| * 52da3b69b4 platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
| * 5b5a17dfa5 platform/chrome: cros_ec: remove unneeded label and if-condition
| * 3d3f5d3a2d platform/chrome: cros_ec: Use per-device lockdep key
| * 45732bbd05 platform/chrome: cros_ec: Make cros_ec_unregister() return void
| * 85ec0b4bfb ext4: fix hole length calculation overflow in non-extent inodes
| * 3e0db4894a minmax: add umin(a, b) and umax(a, b)
| * fdee7a0acc ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value
| * 1355258be5 btrfs: populate otime when logging an inode item
| * c757f01dd0 usb: musb: omap2430: fix device leak at unbind
| * e1720eb32a soc: qcom: mdt_loader: Ensure we don't read past the ELF header
| * a375a427b2 iio: adc: ad_sigma_delta: change to buffer predisable
| * 01510a9e82 scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
| * a9dddcd081 ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
| * 3ee9a8c27b mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
| * bdfddcde86 net/sched: ets: use old 'nbands' while purging unused classes
| * 36b3872a56 net_sched: sch_ets: implement lockless ets_dump()
| * c2ab3d677f net/sched: sch_ets: properly init all active DRR list handles
| * 73fcb101bb NFS: Fix the setting of capabilities when automounting a new filesystem
| * 87ef3e7aac NFS: Create an nfs4_server_set_init_caps() function
| * cc55cbca0a NFSv4: Fix nfs4_bitmap_copy_adjust()
| * 7378c7adf3 NFS: Don't set NFS_INO_REVAL_PAGECACHE in the inode cache validity
| * 0c4398f2ee scsi: pm80xx: Fix memory leak during rmmod
| * 04c1af6832 scsi: lpfc: Fix link down processing to address NULL pointer dereference
| * a81e72d49b RDMA/rxe: Return CQE error if invalid lkey was supplied
| * 785cc093b6 drm/amdgpu: handle the case of pci_channel_io_frozen only in amdgpu_pci_resume
| * 90eb79c4ed dma-buf: insert memory barrier before updating num_fences
| * ef01acda0b selftests/memfd: add test for mapping write-sealed memfd read-only
| * b7cbdcf37d mm: reinstate ability to map write-sealed memfd mappings read-only
| * c002f70d44 mm: update memfd seal write check to include F_SEAL_WRITE
| * 609a43e107 mm: drop the assumption that VM_SHARED always implies writable
| * 83a0b12862 dpaa2-eth: Fix device reference count leak in MAC endpoint handling
| * 5f5d326ac9 dpaa2-eth: retry the probe when the MAC is not yet discovered on the bus
| * b8f44f8cde dpaa2-mac: export MAC counters even when in TYPE_FIXED
| * b66c9697d4 dpaa2-mac: split up initializing the MAC object from connecting to it
| * e211fc8839 ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS
| * f8fbbd06fa btrfs: fix deadlock when cloning inline extents and using qgroups
| * db60edbfff block: don't call rq_qos_ops->done_bio if the bio isn't tracked
| * f1c96d8085 ptp: Fix possible memory leak in ptp_clock_register()
| * c68257588e comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
| * fe092604bf cdc-acm: fix race between initial clearing halt and open
| * 70bc2b56c3 USB: cdc-acm: do not log successful probe on later errors
| * 3ca41ab55d hv_netvsc: Fix panic during namespace deletion with VF
| * f2e2c2e292 block: Make REQ_OP_ZONE_FINISH a write operation
| * 79e5614748 PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
| * bbc3a5d0e1 usb: typec: fusb302: cache PD RX state
| * fdcd6a0397 net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
| * ac763090d8 ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
| * 415338b6d1 x86/fpu: Delay instruction pointer fixup until after warning
| * 5fc46564bd mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n
| * f0fc50366d mm/zsmalloc.c: convert to use kmem_cache_zalloc in cache_alloc_zspage()
| * 298dc8b80a drm/sched: Remove optimization that causes hang when killing dependent jobs
| * 435462f8ab ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
| * aadee7c45c pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov
| * db45632479 tracing: Add down_write(trace_event_sem) when adding trace event
| * 5d047b12f8 smb: client: fix use-after-free in crypt_message when using async crypto
| * 2b3ffb5628 usb: hub: Don't try to recover devices lost during warm reset.
| * 8b3b4c759c usb: hub: avoid warm port reset during USB3 disconnect
| * 5960ce00cb x86/mce/amd: Add default names for MCA banks and blocks
| * 6854966dca iio: hid-sensor-prox: Fix incorrect OFFSET calculation
| * ecff54aa20 f2fs: fix to do sanity check on ino and xnid
| * 244ddfdaab kbuild: userprogs: use correct linker when mixing clang and GNU ld
| * cf3ad6aa10 usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
| * 599a26ff72 USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
| * b5d507ef06 usb: storage: realtek_cr: Use correct byte order for bcs->Residue
| * 035c8bc992 USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
| * ded3810841 usb: renesas-xhci: Fix External ROM access timeouts
| * bd801b2868 usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
| * 329b8c67fe most: core: Drop device reference after usage in get_channel()
| * b3a849090f iio: proximity: isl29501: fix buffered read on big-endian systems
| * 6f9b83b10b iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
| * c4cd93811e ftrace: Also allocate and copy hash for reading of filter files
| * 56a00082d2 fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
| * c41a18d0cc use uniform permission checks for all mount propagation changes
| * 75d4019201 move_mount: allow to add a mount into an existing group
| * 3169edb894 fs/buffer: fix use-after-free when call bh_read() helper
| * c60d6b761d selftests: mptcp: connect: also cover alt modes
| * 6c5179f88f drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs
| * 837b6ea4e0 drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
| * dd97e72805 drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
| * 66ba142a79 drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
| * f0b3355e38 ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6
| * 9bdb2e7f9b squashfs: fix memory leak in squashfs_fill_super
| * 9daef86269 mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency
| * 4dedae72a4 memstick: Fix deadlock by moving removing flag earlier
| * a9945f7cf1 sch_htb: make htb_deactivate() idempotent
| * cc71a757da codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
| * 6836202b23 sch_qfq: make qfq_qlen_notify() idempotent
| * 72c61ffbee sch_hfsc: make hfsc_qlen_notify() idempotent
| * c57687014e sch_drr: make drr_qlen_notify() idempotent
| * 32ae12ce6a sch_htb: make htb_qlen_notify() idempotent
| * 8d9bc4a375 net, hsr: reject HSR frame if skb can't hold tag
| * 20e6f7dd8a drm/amd: Restore cached power limit during resume
| * f5b7a94305 media: venus: Add a check for packet size after reading from shared memory
| * 87b57ecd02 media: ov2659: Fix memory leaks in ov2659_probe()
| * 6aaef1a759 media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
| * ee7bade8b9 media: usbtv: Lock resolution while streaming
| * b50fde177d media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
| * a452610472 media: hi556: correct the test pattern configuration
| * 8f11e57ec5 media: gspca: Add bounds checking to firmware parser
| * d545ccaa2d soc/tegra: pmc: Ensure power-domains are in a known state
| * f7ee8fd689 jbd2: prevent softlockup in jbd2_log_do_checkpoint()
| * 4e4cbf21c3 PCI: endpoint: Fix configfs group removal on driver teardown
| * d5aecddc34 PCI: endpoint: Fix configfs group list head handling
| * 980f52e46c mtd: rawnand: fsmc: Add missing check after DMA map
| * 01fa91dd31 hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
| * 0b7a272a7e pwm: imx-tpm: Reset counter if CMOD is 0
| * dfae8045ba wifi: ath11k: fix source ring-buffer corruption
| * 28df1f17f6 wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
| * fa0c699644 zynq_fpga: use sgtable-based scatterlist wrappers
| * 0002fcf497 ata: libata-scsi: Fix ata_to_sense_error() status handling
| * 48ac024a10 ext4: fix reserved gdt blocks handling in fsmap
| * a71079f1b3 ext4: fix fsmap end of range reporting with bigalloc
| * 59bf667c19 ext4: check fast symlink for ea_inode correctly
| * 87a92aeaf6 Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
| * 87e491d6b4 lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
| * e603142ed9 vt: defkeymap: Map keycodes above 127 to K_HOLE
| * f987b9d56f vt: keyboard: Don't process Unicode characters in K_OFF mode
| * f760503c43 bus: mhi: host: Fix endianness of BHI vector table
| * e6d45ce8d7 usb: dwc3: meson-g12a: fix device leaks at unbind
| * 8b39f13943 usb: gadget: udc: renesas_usb3: fix device leak at unbind
| * c3dc2769bb usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
| * 229a175f59 m68k: Fix lost column on framebuffer debug console
| * eb2df34b54 cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
| * b8ca8e3f75 serial: 8250: fix panic due to PSLVERR
| * 2a0fc8fc58 media: uvcvideo: Do not mark valid metadata as invalid
| * 1e269581b3 media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
| * 4b0151e1d4 mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
| * 1ef72a7fed mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
| * 2853ad837c parisc: Makefile: fix a typo in palo.conf
| * a82b0f7b35 btrfs: fix log tree replay failure due to file with 0 links and extents
| * 4995a13d9b thunderbolt: Fix copy+paste error in match_service_id()
| * cd4286123d comedi: fix race between polling and detaching
| * 7a3f8d1a44 usb: typec: ucsi: Update power_supply on power role change
| * 94191de37d misc: rtsx: usb: Ensure mmc child device is active when card is present
| * 5c3097ede7 usb: core: config: Prevent OOB read in SS endpoint companion parsing
| * 7d90a9d27b drm/amdgpu: fix incorrect vm flags to map bo
| * b7fd68b151 ASoC: fsl_sai: replace regmap_write with regmap_update_bits
| * 53b62474c7 ASoC: soc-dai.c: add missing flag check at snd_soc_pcm_dai_probe()
| * 8797e9a827 scsi: lpfc: Remove redundant assignment to avoid memory leak
| * 3128167d22 rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
| * 2896f10111 pNFS: Fix uninited ptr deref in block/scsi layout
| * 01b690d534 pNFS: Handle RPC size limit for layoutcommits
| * dd7cb4936e pNFS: Fix disk addr range check in block/scsi layout
| * 7a2105bbc7 pNFS: Fix stripe mapping in block/scsi layout
| * 4187519100 block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
| * a4f9c504e9 net: phy: smsc: add proper reset flags for LAN8710A
| * 76011e258c ipmi: Fix strcpy source and destination the same
| * 37205ad73d kconfig: lxdialog: fix 'space' to (de)select options
| * 116a981efd kconfig: gconf: fix potential memory leak in renderer_edited()
| * 327877f082 kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
| * 6f6958846e ipmi: Use dev_warn_ratelimited() for incorrect message warnings
| * d3db360783 scsi: aacraid: Stop using PCI_IRQ_AFFINITY
| * 4de95d043c scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
| * ee777917b4 kconfig: nconf: Ensure null termination where strncpy is used
| * 90851a290a kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
| * 24b4af05d5 i2c: Force DLL0945 touchpad i2c freq to 100khz
| * 4aca828ffd dm-mpath: don't print the "loaded" message if registering fails
| * 264d76cda6 i3c: don't fail if GETHDRCAP is unsupported
| * d79d05c43d rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
| * 6e8e3fb570 i3c: add missing include to internal header
| * 511ba4025e md: dm-zoned-target: Initialize return variable r to avoid uninitialized use
| * 3eaf16ff81 media: uvcvideo: Fix bandwidth issue for Alcor camera
| * b3d77a3fc7 media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
| * ce8b7c711b media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
| * 3a90b30461 media: usb: hdpvr: disable zero-length read messages
| * e02a4eff7e media: tc358743: Increase FIFO trigger level to 374
| * 10ad86fd99 media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
| * 280194805d media: tc358743: Check I2C succeeded during probe
| * ac018e3961 pinctrl: stm32: Manage irq affinity settings
| * 3b4ec01ff9 scsi: mpt3sas: Correctly handle ATA device errors
| * 74bdf54a84 scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
| * f07aa00c1f RDMA/core: reduce stack using in nldev_stat_get_doit()
| * 1a7cf828ed RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
| * 10f818b896 leds: leds-lp50xx: Handle reg to get correct multi_index
| * e78033e594 MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
| * a4f199203f jfs: upper bound check of tree index in dbAllocAG
| * 6bc86f1d7d jfs: Regular file corruption check
| * 5845b926c5 jfs: truncate good inode pages when hard link is 0
| * 9337c2affb scsi: bfa: Double-free fix
| * 2a428e38eb MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
| * a7366dc76e watchdog: dw_wdt: Fix default timeout
| * 9041913136 fs/orangefs: use snprintf() instead of sprintf()
| * 9ea6d96156 scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
| * 1199a63998 ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
| * a4dc000de7 cifs: Fix calling CIFSFindFirst() for root path without msearch
| * 8f9fa9b425 vhost: fail early when __vhost_add_used() fails
| * 99170154ba net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
| * 281c1cff81 uapi: in6: restore visibility of most IPv6 socket options
| * 495948bdf3 drm/ttm: Should to return the evict error
| * 94b2754f8c net: ncsi: Fix buffer overflow in fetching version id
| * 16f9fe3574 wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc()
| * 2d1a8784d5 net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
| * 515c23c030 net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
| * 2bd780d1f2 net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
| * 5d1710af54 gve: Return error for unknown admin queue command
| * 21be225b70 net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
| * 5631f8296e wifi: iwlegacy: Check rate_idx range after addition
| * 467e5c00ce netmem: fix skb_frag_address_safe with unreadable skbs
| * cca5b9c51c wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
| * 991ff7efcb drm/amd/display: Fix 'failed to blank crtc!'
| * b16d46105a wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
| * 996e315622 wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
| * e35b9eea14 drm/amd/display: Separate set_gsl from set_gsl_source_select
| * 14f44b886c net: fec: allow disable coalescing
| * 16100157de (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
| * 8ac5716a17 s390/stp: Remove udelay from stp_sync_clock()
| * f008d5a91f wifi: iwlwifi: mvm: fix scan request validation
| * cc3031e6c7 net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
| * c374d798cb net: ipv4: fix incorrect MTU in broadcast routes
| * 0bb4319e6c wifi: cfg80211: Fix interface type validation
| * f937759c74 rcu: Protect ->defer_qs_iw_pending from data race
| * bb4ae7227e net: ag71xx: Add missing check after DMA map
| * 8ca79651e1 et131x: Add missing check after DMA map
| * 71c3a735bb be2net: Use correct byte order and format string for TCP seq and ack_seq
| * 13fcdb9cc0 s390/time: Use monotonic clock in get_cycles()
| * 64082d4836 wifi: cfg80211: reject HTC bit for management frames
| * 54e8887b45 ktest.pl: Prevent recursion of default variable options
| * 0397037ba9 xen/netfront: Fix TX response spurious interrupts
| * 066e2ab333 ASoC: codecs: rt5640: Retry DEVICE_ID verification
| * c90222e5b6 iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement
| * 8ed372c3de ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
| * 9ce6e14a24 ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop
| * fb8116c38d ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
| * 85b3b3966a platform/chrome: cros_ec_typec: Defer probe on missing EC parent
| * 164baecd7b platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
| * 52e257c18f pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
| * 55ecccb190 usb: core: usb_submit_urb: downgrade type check
| * 8a6d408cda usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present
| * 8b465bedc2 ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
| * 18e3d6029e ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
| * f94093106a ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
| * d6dabb6660 x86/bugs: Avoid warning when overriding return thunk
| * db1cba2771 mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
| * a125e79e07 reset: brcmstb: Enable reset drivers for ARCH_BCM2835
| * 089acbf04c ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
| * a93a8dfdd0 mmc: sdhci-msm: Ensure SD card power isn't ON when card removed
| * 24ea07bc84 ACPI: processor: fix acpi_object initialization
| * 4ba02a48e6 PM: sleep: console: Fix the black screen issue
| * bc98b81e88 thermal: sysfs: Return ENODATA instead of EAGAIN for reads
| * 952ea2c4ce PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
| * 6e94e4483e selftests: tracing: Use mutex_unlock for testing glob filter
| * 75a3bdfeed ARM: tegra: Use I/O memcpy to write to IRAM
| * 08571a4d51 gpio: tps65912: check the return value of regmap_update_bits()
| * f3803a3390 ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed
| * 9c83bf68a5 PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store()
| * 888a453c2a ARM: rockchip: fix kernel hang during smp initialization
| * 9b02fdb0f6 cpufreq: Exit governor when failed to start old governor
| * f8c816e361 gpio: wcd934x: check the return value of regmap_update_bits()
| * 1e281d3796 usb: xhci: Avoid showing errors during surprise removal
| * d8fed52344 usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
| * a163d42a6f usb: xhci: Avoid showing warnings for dying controller
| * 0a40f5ef00 usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default
| * 0e1b2af0c7 selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t
| * 9415dd68c2 cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag
| * 00993cf671 usb: xhci: print xhci->xhc_state when queue_command failed
| * d6ceeffbbf securityfs: don't pin dentries twice, once is enough...
| * 45124d4eb9 ata: libata-sata: Disallow changing LPM state if not supported
| * 00b3941910 better lockdep annotations for simple_recursive_removal()
| * d8055f351e hfs: fix not erasing deleted b-tree node issue
| * 810cd546a2 drbd: add missing kref_get in handle_write_conflicts
| * 789a9cb1a7 udf: Verify partition map count
| * 83dad63d66 arm64: Handle KCOV __init vs inline mismatches
| * 9046566fa6 hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
| * 76a4c6636a hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
| * ffee8a7bed hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
| * 67ecc81f64 hfs: fix slab-out-of-bounds in hfs_bnode_read()
| * 19a857874b cpuidle: governors: menu: Avoid using invalid recent intervals data
| * d0a65363a9 intel_idle: Allow loading ACPI tables for any family
| * 03d0cc6889 sctp: linearize cloned gso packets in sctp_rcv
| * 962518c6ca netfilter: ctnetlink: fix refcount leak on table dump
| * ceaca866f0 udp: also consider secpath when evaluating ipsec use for checksumming
| * fc36403e74 ACPI: processor: perflib: Move problematic pr->performance check
| * 608327a281 ACPI: processor: perflib: Fix initial _PPC limit application
| * 637a7ac776 Documentation: ACPI: Fix parent device references
| * f95638a8f2 fs: Prevent file descriptor table allocations exceeding INT_MAX
| * d86d02c715 sunvdc: Balance device refcount in vdc_port_mpgroup_check
| * 6af48f61f9 NFSD: detect mismatch of file handle and delegation stateid in OPEN op
| * d35ac85041 nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
| * 586d36ba98 net: dpaa: fix device leak when querying time stamp info
| * af392b1442 net: gianfar: fix device leak when querying time stamp info
| * 6bee383ff8 netlink: avoid infinite retry looping in netlink_unicast()
| * 786571b10b ALSA: usb-audio: Validate UAC3 cluster segment descriptors
| * ebc9e06b6e ALSA: usb-audio: Validate UAC3 power domain descriptors, too
| * 27df8ad87f io_uring: don't use int for ABI
| * 2db29235e9 usb: gadget : fix use-after-free in composite_dev_cleanup()
| * 8613ddde24 mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
| * 2051013dfc MIPS: mm: tlb-r4k: Uniquify TLB entries on init
| * ad5f7b8cbd USB: serial: option: add Foxconn T99W709
| * d1a5b1964c vsock: Do not allow binding to VMADDR_PORT_ANY
| * 7da733f117 net/packet: fix a race in packet_set_ring() and packet_notifier()
| * d52451a921 perf/core: Prevent VMA split of buffer mappings
| * 9b90a48c7d perf/core: Exit early on perf_mmap() fail
| * 1c4e0e9ead perf/core: Don't leak AUX buffer refcount on allocation failure
| * 86ebc71bfd pptp: fix pptp_xmit() error path
| * 90644a884a smb: client: let recv_done() cleanup before notifying the callers.
| * 1abcd2870c ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out()
| * 975e73b910 benet: fix BUG when creating VFs
| * df6ad849d5 net: drop UFO packets in udp_rcv_segment()
| * 3f638e0b28 ipv6: reject malicious packets in ipv6_gso_segment()
| * 26672f1679 pptp: ensure minimal skb length in pptp_xmit()
| * dce33756d2 phy: mscc: Fix parsing of unicast frames
| * 32a8746bd7 netpoll: prevent hanging NAPI when netcons gets enabled
| * 5838b3abfc NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
| * 1e9a17bce9 XArray: Add calls to might_alloc()
| * 520fe579d0 mm: extract might_alloc() debug check
| * 4ad4df532d NFSv4.2: another fix for listxattr
| * cb09afa094 NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
| * 3b3d150889 pNFS/flexfiles: don't attempt pnfs on fatal DS errors
| * a050c749dd pNFS/flexfiles: Avoid spurious layout returns in ff_layout_choose_ds_for_read
| * 6e7b5f9229 PCI: pnv_php: Fix surprise plug detection and recovery
| * 502f08831a powerpc/eeh: Make EEH driver device hotplug safe
| * e5c5eb43ed powerpc/eeh: Rely on dev->link_active_reporting
| * 9b6081c302 powerpc/eeh: Export eeh_unfreeze_pe()
| * bbdac60ed1 PCI: pnv_php: Work around switches with broken presence detection
| * 8c1ad4af16 PCI: pnv_php: Clean up allocated IRQs on unplug
| * 0842b64382 kconfig: qconf: fix ConfigList::updateListAllforAll()
| * f5a88ffc22 scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume
| * 1cf1ff15f2 f2fs: fix to avoid out-of-boundary access in devs.path
| * 9535e440fe f2fs: fix to avoid panic in f2fs_evict_inode
| * 4dcd830c42 f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
| * 6707f566f0 f2fs: doc: fix wrong quota mount option description
| * 807997ed63 rtc: rv3028: fix incorrect maximum clock rate handling
| * ec869ab319 rtc: pcf8563: fix incorrect maximum clock rate handling
| * d705fc98d3 rtc: pcf85063: fix incorrect maximum clock rate handling
| * f3f71d843d rtc: hym8563: fix incorrect maximum clock rate handling
| * fdc50acfd2 rtc: ds1307: fix incorrect maximum clock rate handling
| * b401bee1e6 module: Restore the moduleparam prefix length check
| * eda378a0ab apparmor: ensure WB_HISTORY_SIZE value is a power of 2
| * 77d2993d8b bpf: Check flow_dissector ctx accesses are aligned
| * 6d4c89b401 vhost-scsi: Fix log flooding with target does not exist errors
| * f2ee406438 mtd: rawnand: atmel: set pmecc data setup time
| * af740045f0 mtd: rawnand: atmel: Fix dma_mapping_error() address
| * 676078c223 jfs: fix metapage reference count leak in dbAllocCtl
| * f00c29e675 fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
| * e5bf8f0f08 crypto: qat - fix seq_file position update in adf_ring_next()
| * 39534c94a2 sh: Do not use hyphen in exported variable name
| * f6ac1449c2 dmaengine: nbpfaxi: Add missing check after DMA map
| * 25bfa98cc1 dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
| * 84c9681b5e fs/orangefs: Allow 2 more characters in do_c_string()
| * 7619150229 soundwire: stream: restore params when prepare ports fail
| * 7d7455982c crypto: img-hash - Fix dma_unmap_sg() nents value
| * 344fd8e2cd hwrng: mtk - handle devm_pm_runtime_enable errors
| * 5c67096975 watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
| * 352fd83e70 scsi: isci: Fix dma_unmap_sg() nents value
| * 0d1d577bb4 scsi: mvsas: Fix dma_unmap_sg() nents value
| * 7387662c90 scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
| * c2d54155c9 clk: sunxi-ng: v3s: Fix de clock definition
| * 7cb44418c8 perf tests bp_account: Fix leaked file descriptor
| * ce63a83925 crypto: ccp - Fix crash when rebind ccp device for ccp.ko
| * f3f855d557 crypto: inside-secure - Fix `dma_unmap_sg()` nents value
| * 1a6a558c86 pinctrl: sunxi: Fix memory leak on krealloc failure
| * f19d1e26b6 power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
| * 7843412e59 clk: davinci: Add NULL check in davinci_lpsc_clk_register()
| * b2fdd90e68 mtd: fix possible integer overflow in erase_xfer()
| * fbcac128fe crypto: marvell/cesa - Fix engine load inaccuracy
| * 13db02bb8e PCI: rockchip-host: Fix "Unexpected Completion" log message
| * 4e7d0ee66d vrf: Drop existing dst reference in vrf_ip6_input_dst
| * 7ea4bbdc1d selftests: rtnetlink.sh: remove esp4_offload after test
| * e021a1eee1 netfilter: xt_nfacct: don't assume acct name is null-terminated
| * 0bba3bfbdf can: kvaser_usb: Assign netdev.dev_port based on device channel index
| * 8e22eb9ae8 can: kvaser_pciefd: Store device channel index
| * 7abdeed1c3 wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE
| * 336c389355 Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
| * 8470f876e5 wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key()
| * b1a1c98900 mwl8k: Add missing check after DMA map
| * 2d69fd43a4 wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
| * 94df5c3fef xen/gntdev: remove struct gntdev_copy_batch from stack
| * 924eee694d net_sched: act_ctinfo: use atomic64_t for three counters
| * f088b6ebe8 net/sched: Restrict conditions for adding duplicating netems to qdisc tree
| * c47a6a1679 arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
| * 16f70570c9 netfilter: nf_tables: adjust lockdep assertions handling
| * f81cac7745 drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
| * 7b086f416b m68k: Don't unregister boot console needlessly
| * c20d77f843 tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
| * 3a6daae987 wifi: ath11k: clear initialized flag for deinit-ed srng lists
| * b398120fbe iwlwifi: Add missing check for alloc_ordered_workqueue
| * 84210f1477 wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
| * 7894157714 wifi: rtl818x: Kill URBs before clearing tx status queue
| * 830bb5d040 caif: reduce stack size, again
| * f613ca79d1 bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure
| * 849d24dc5a bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
| * 0549c62b2f drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed
| * 765cfb0d80 selftests/tracing: Fix false failure of subsystem event test
| * aedb44bc33 staging: nvec: Fix incorrect null termination of battery manufacturer
| * 19e61b3d91 samples: mei: Fix building on musl libc
| * ba84ad7330 cpufreq: Init policy->rwsem before it may be possibly used
| * 2bfbee12d8 cpufreq: Initialize cpufreq-based frequency-invariance later
| * cccdedfbc4 arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed
| * 62c83c58a0 ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface
| * 6a9e356aee usb: early: xhci-dbc: Fix early_ioremap leak
| * 551a124924 Revert "vmci: Prevent the dispatching of uninitialized payloads"
| * 86c717bf24 pps: fix poll support
| * b097d921ef vmci: Prevent the dispatching of uninitialized payloads
| * c3b1c45c48 staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
| * 5a837d4d1f ARM: dts: vfxxx: Correctly use two tuples for timer address
| * 2e8cf2331d ASoC: ops: dynamically allocate struct snd_ctl_elem_value
| * 3f3d9eae27 ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask()
| * fdd6aca652 hfsplus: remove mutex_lock check in hfsplus_free_extents
| * c0c56386c7 fs_context: fix parameter name in infofc() macro
| * fe572b180e ASoC: Intel: fix SND_SOC_SOF dependencies
| * 334f0da713 ethernet: intel: fix building with large NR_CPUS
| * 26c4e4f7ac usb: phy: mxs: disconnect line when USB charger is attached
| * 2b6794a5ec usb: chipidea: add USB PHY event
| * 5b67082151 ALSA: hda: Add missing NVIDIA HDA codec IDs
| * e9661e7f0f comedi: comedi_test: Fix possible deletion of uninitialized timers
| * eaf108b66d x86/bugs: Fix use of possibly uninit value in amd_check_tsa_microcode()
| * 2cf0c4130b nilfs2: reject invalid file types when reading inodes
| * 4b6086b3e8 gve: Fix stuck TX queue for DQ queue format
| * 6c5142c004 e1000e: ignore uninitialized checksum word on tgp
| * d35d8cae84 e1000e: disregard NVM checksum on tgp when valid checksum bit is not set
| * d7e11de23f ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx
| * acfa2948be i2c: qup: jump out of the loop in case of timeout
| * 2b9560c867 net: hns3: fixed vf get max channels bug
| * a400299958 net: hns3: refine the struct hane3_tc_info
| * 2083e7d4fb net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
| * 82d19a70ce net: appletalk: Fix use-after-free in AARP proxy probe
| * 52d2fec7a1 net: appletalk: fix kerneldoc warnings
| * 96e168812c i40e: report VF tx_dropped with tx_errors instead of tx_discards
| * c78504890a i40e: Add rx_missed_errors for buffer exhaustion
| * a36f8f4c07 RDMA/core: Rate limit GID cache warning messages
| * 6c49eac796 regulator: core: fix NULL dereference on unbind due to stale coupling data
| * 13f098bfec xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
| * ddc8649d36 virtio-net: ensure the received length does not exceed allocated size
| * 9cf2d04305 mm/vmalloc: leave lazy MMU mode on PTE mapping error
| * 78f9fca779 ASoC: fsl_sai: Force a software reset when starting in consumer mode
| * 3371972fac usb: dwc3: qcom: Don't leave BCR asserted
| * 63ad6583b0 usb: musb: fix gadget state on disconnect
| * e2d8d3f378 usb: musb: Add and use inline functions musb_{get,set}_state
| * 57a100457c usb: hub: Fix flushing of delayed work used for post resume purposes
| * 0f94efa7f2 usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
| * 8aa04df255 usb: hub: fix detection of high tier USB3 devices behind suspended hubs
| * 5c0506cd1b net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
| * 35142b3816 net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
| * 579fa2399e Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
| * 5a4509bfd8 Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
| * 375f468915 Bluetooth: SMP: If an unallowed command is received consider it a failure
| * 2b27b38900 Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
| * 5408cc668e usb: net: sierra: check for no status endpoint
| * 2e6f4d9cfb hwmon: (corsair-cpro) Validate the size of the received input buffer
| * c09e21dfc0 rpl: Fix use-after-free in rpl_do_srh_inline().
| * d841aa5518 net/sched: sch_qfq: Fix race condition on qfq_aggregate
| * 167c22f3e7 net: emaclite: Fix missing pointer increment in aligned_read()
| * 13e4d9038a comedi: Fix initialization of data for instructions that write to subdevice
| * 16256d7efc comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
| * fa3a5f4d09 comedi: Fix some signed shift left operations
| * de8da1063c comedi: das6402: Fix bit shift out of bounds
| * d1291c69f4 comedi: das16m1: Fix bit shift out of bounds
| * 5ac7c60439 comedi: aio_iiro_16: Fix bit shift out of bounds
| * 0489c30d08 comedi: pcl812: Fix bit shift out of bounds
| * 8ab8589ed2 iio: adc: stm32-adc: Fix race in installing chained IRQ handler
| * 466bad8a10 iio: adc: max1363: Reorder mode_list[] entries
| * d127669826 iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
| * 9e1d2b97f5 soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
| * 6374619529 soc: aspeed: lpc-snoop: Cleanup resources in stack-order
| * ea4f8bddb8 mmc: sdhci_am654: Workaround for Errata i2312
| * bb4ec4c120 mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models
| * adc582e719 mmc: bcm2835: Fix dma_unmap_sg() nents value
| * 62ca664062 memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
| * 6995a41268 isofs: Verify inode mode when loading from disk
| * aec396b4f7 dmaengine: nbpfaxi: Fix memory corruption in probe()
| * fee68f6a65 af_packet: fix soft lockup issue caused by tpacket_snd()
| * dbf3580aec af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
| * 7bd3683a69 phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
| * 40e25aa7e4 HID: core: do not bypass hid_hw_raw_request
| * 293812d1a9 HID: core: ensure __hid_request reserves the report ID as the first byte
| * 9f2892f723 HID: core: ensure the allocated report buffer can contain the reserved report ID
| * 955440488e pch_uart: Fix dma_sync_sg_for_device() nents value
| * 0fff54f23c Input: xpad - set correct controller type for Acer NGR200
| * 9ee3db3f55 thunderbolt: Fix bit masking in tb_dp_port_set_hops()
| * 23a701845a i2c: stm32: fix the device used for the DMA map
| * d68b7c8fef usb: gadget: configfs: Fix OOB read on empty string write
| * 68afa896ba USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
| * 6c71382f4b USB: serial: option: add Foxconn T99W640
| * 5cdd92f940 USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
| * ceb645ac6c phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode
* 18593a0671 Merge android12-5.10 into android12-5.10-lts

Change-Id: Ib9a85abecf21b0ae5b6eae86593b9679cf236c85
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>
2025-09-22 16:30:22 -07:00
..