https://source.android.com/docs/security/bulletin/2025-08-01
* tag 'ASB-2025-08-05_12-5.10' of https://android.googlesource.com/kernel/common:
ANDROID: bpf: do not fail to load if log is full
BACKPORT: Add support for PIO p flag
UPSTREAM: rtc: lib_test: add MODULE_LICENSE
Revert "mm: hugetlb: independent PMD page table shared count"
UPSTREAM: f2fs: compress: fix error path of inc_valid_block_count()
BACKPORT: f2fs: compress: fix to avoid inconsistence bewteen i_blocks and dnode
Revert "net: Rename ->stream_memory_read to ->sock_is_readable"
Revert "net: Fix TOCTOU issue in sk_is_readable()"
UPSTREAM: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
Linux 5.10.239
scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops
bpf: fix precision backtracking instruction iteration
arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
perf: Fix sample vs do_exit()
s390/pci: Fix __pcilg_mio_inuser() inline assembly
rtc: test: Fix invalid format specifier.
hwmon: (occ) Fix P10 VRM temp sensors
mm/huge_memory: fix dereferencing invalid pmd migration entry
net_sched: sch_sfq: move the limit validation
net_sched: sch_sfq: use a temporary work area for validating configuration
net_sched: sch_sfq: don't allow 1 packet limit
net_sched: sch_sfq: handle bigger packets
net_sched: sch_sfq: annotate data-races around q->perturb_period
rtc: Make rtc_time64_to_tm() support dates before 1970
rtc: Improve performance of rtc_time64_to_tm(). Add tests.
bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE
net: Fix checksum update for ILA adj-transport
net/ipv4: fix type mismatch in inet_ehash_locks_alloc() causing build failure
arm64: proton-pack: Add new CPUs 'k' values for branch mitigation
arm64: insn: Add support for encoding DSB
arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
arm64: insn: add encoders for atomic operations
arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
arm64: move AARCH64_BREAK_FAULT into insn-def.h
arm64: spectre: increase parameters that can be used to turn off bhb mitigation individually
arm64: insn: Add barrier encodings
arm64: proton-pack: Expose whether the branchy loop k value
arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists
arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
arm64: proton-pack: Expose whether the platform is mitigated by firmware
serial: sh-sci: Increment the runtime usage counter for the earlycon device
ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms
ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
ARM: dts: am335x-bone-common: Add GPIO PHY reset on revision C3 board
net: atm: fix /proc/net/atm/lec handling
net: atm: add lec_mutex
calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior
atm: atmtcp: Free invalid length skb in atmtcp_c_send().
mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
wifi: carl9170: do not ping device which has failed to load firmware
net: ice: Perform accurate aRFS flow match
aoe: clean device rq_list in aoedev_downdev()
mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
mm: hugetlb: independent PMD page table shared count
mm/hugetlb: unshare page tables during VMA split, not before
hugetlb: unshare some PMDs when splitting VMAs
ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
pldmfw: Select CRC32 when PLDMFW is selected
ALSA: hda/intel: Add Thinkpad E15 to PM deny list
hwmon: (occ) fix unaligned accesses
hwmon: (occ) Rework attribute registration for stack usage
hwmon: (occ) Add soft minimum power cap attribute
hwmon: (occ) Add new temperature sensor type
drm/nouveau/bl: increase buffer size to avoid truncate warning
erofs: remove unused trace event erofs_destroy_inode
ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound card
Input: sparcspkr - avoid unannotated fall-through
HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
atm: Revert atm_account_tx() if copy_from_iter_full() fails.
selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
udmabuf: use sgtable-based scatterlist wrappers
scsi: s390: zfcp: Ensure synchronous unit_add
scsi: storvsc: Increase the timeouts to storvsc_timeout
jffs2: check jffs2_prealloc_raw_node_refs() result in few other places
jffs2: check that raw node were preallocated before writing summary
drivers/rapidio/rio_cm.c: prevent possible heap overwrite
Revert "x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2" on v6.6 and older
powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery
platform/x86: dell_rbu: Stop overwriting data buffer
platform/x86: dell_rbu: Fix list usage
platform: Add Surface platform directory
Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first"
tee: Prevent size calculation wraparound on 32-bit kernels
ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY
bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
watchdog: da9052_wdt: respect TWDMIN
i40e: fix MMIO write access to an invalid page in i40e_clear_hw
sock: Correct error checking condition for (assign|release)_proto_idx()
scsi: lpfc: Use memcpy() for BIOS version
software node: Correct a OOB check in software_node_get_reference_args()
vxlan: Do not treat dst cache initialization errors as fatal
iommu/amd: Ensure GA log notifier callbacks finish running before module unload
scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands
clk: rockchip: rk3036: mark ddrphy as critical
wifi: mac80211: do not offer a mesh path if forwarding is disabled
net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info
pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get()
pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction()
pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction()
pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name()
net: atlantic: generate software timestamp just before the doorbell
ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT
tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows
tcp: always seek for minimal rtt in tcp_rcv_rtt_update()
net: dlink: add synchronization for stats update
i2c: npcm: Add clock toggle recovery
sctp: Do not wake readers in __sctp_write_space()
wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R
emulex/benet: correct command version selection in be_cmd_get_stats()
i2c: designware: Invoke runtime suspend on quick slave re-registration
tipc: use kfree_sensitive() for aead cleanup
net: macb: Check return value of dma_set_mask_and_coherent()
cpufreq: Force sync policy boost with global boost on sysfs update
thermal/drivers/qcom/tsens: Update conditions to strictly evaluate for IP v2+
nios2: force update_mmu_cache on spurious tlb-permission--related pagefaults
media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode()
media: tc358743: ignore video while HPD is low
drm/amdkfd: Set SDMA_RLCx_IB_CNTL/SWITCH_INSIDE_IB
drm/msm/dpu: don't select single flush for active CTL blocks
jfs: Fix null-ptr-deref in jfs_ioc_trim
drm/amdgpu/gfx9: fix CSIB handling
drm/amdgpu/gfx8: fix CSIB handling
drm/amdgpu/gfx7: fix CSIB handling
ext4: prevent stale extent cache entries caused by concurrent get es_cache
media: uapi: v4l: Change V4L2_TYPE_IS_CAPTURE condition
sunrpc: fix race in cache cleanup causing stale nextcheck time
drm/amdgpu/gfx10: fix CSIB handling
media: rkvdec: Initialize the m2m context before the controls
drm/msm/a6xx: Increase HFI response timeout
jfs: fix array-index-out-of-bounds read in add_missing_indices
drm/amd/display: Add NULL pointer checks in dm_force_atomic_commit()
ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space()
media: uapi: v4l: Fix V4L2_TYPE_IS_OUTPUT condition
drm/msm/hdmi: add runtime PM calls to DDC transfer function
exfat: fix double free in delayed_free
drm/bridge: analogix_dp: Add irq flag IRQF_NO_AUTOEN instead of calling disable_irq()
sunrpc: update nextcheck time when adding new cache entries
drm/amdgpu/gfx6: fix CSIB handling
ACPI: battery: negate current when discharging
PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn()
ASoC: tegra210_ahub: Add check to of_device_get_match_data()
ACPICA: utilities: Fix overflow check in vsnprintf()
power: supply: bq27xxx: Retrieve again when busy
ACPICA: fix acpi parse and parseext cache leaks
ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change
ACPICA: Avoid sequence overread in call to strncmp()
clocksource: Fix the CPUs' choice in the watchdog per CPU verification
ACPICA: fix acpi operand cache leak in dswstate.c
iio: adc: ad7606_spi: fix reg write value mask
iio: imu: inv_icm42600: Fix temperature calculation
PCI: Fix lock symmetry in pci_slot_unlock()
PCI: Add ACS quirk for Loongson PCIe
uio_hv_generic: Use correct size for interrupt and monitor pages
regulator: max14577: Add error check for max14577_read_reg()
mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS
staging: iio: ad5933: Correct settling cycles encoding per datasheet
net: ch9200: fix uninitialised access during mii_nway_restart
ftrace: Fix UAF when lookup kallsym after ftrace disabled
dm-mirror: fix a tiny race condition
mtd: nand: sunxi: Add randomizer configuration before randomizer enable
mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk
mm: fix ratelimit_pages update error in dirty_ratio_handler()
ipc: fix to protect IPCS lookups using RCU
clk: meson-g12a: add missing fclk_div2 to spicc
parisc: fix building with gcc-15
vgacon: Add check for vc_origin address range in vgacon_scroll()
fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
EDAC/altera: Use correct write width with the INTTEST register
NFC: nci: uart: Set tty->disc_data only in success path
f2fs: fix to do sanity check on sit_bitmap_size
f2fs: prevent kernel warning due to negative i_nlink from corrupted image
Input: ims-pcu - check record size in ims_pcu_flash_firmware()
ext4: ensure i_size is smaller than maxbytes
ext4: factor out ext4_get_maxbytes()
ext4: fix calculation of credits for extent tree modification
ext4: inline: fix len overflow in ext4_prepare_inline_data
bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device
ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
bus: mhi: host: Fix conflict between power_up and SYSERR
ARM: omap: pmic-cpcap: do not mess around without CPCAP or OMAP4
ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap()
media: vivid: Change the siize of the composing
media: vidtv: Terminating the subsequent process of initialization failure
media: videobuf2: use sgtable-based scatterlist wrappers
media: venus: Fix probe error handling
media: v4l2-dev: fix error handling in __video_register_device()
media: gspca: Add error handling for stv06xx_read_sensor()
media: cxusb: no longer judge rbuf when the write fails
media: ov8856: suppress probe deferral errors
wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723
jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid()
net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr()
ASoC: meson: meson-card-utils: use of_property_present() for DT parsing
ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params()
gfs2: move msleep to sleepable context
crypto: marvell/cesa - Do not chain submitted requests
configfs: Do not override creating attribute file failure in populate_attrs()
tcp: tcp_data_ready() must look at SOCK_DONE
kbuild: hdrcheck: fix cross build with clang
kbuild: userprogs: fix bitsize and target detection on clang
net: usb: aqc111: debug info before sanitation
calipso: unlock rcu before returning -EAFNOSUPPORT
x86/iopl: Cure TIF_IO_BITMAP inconsistencies
xen/arm: call uaccess_ttbr0_enable for dm_op hypercall
usb: Flush altsetting 0 endpoints before reinitializating them after reset.
drm/amd/display: Do not add '-mhard-float' to dcn2{1,0}_resource.o for clang
kbuild: Add KBUILD_CPPFLAGS to as-option invocation
kbuild: add $(CLANG_FLAGS) to KBUILD_CPPFLAGS
kbuild: Add CLANG_FLAGS to as-instr
mips: Include KBUILD_CPPFLAGS in CHECKFLAGS invocation
drm/amd/display: Do not add '-mhard-float' to dml_ccflags for clang
kbuild: Update assembler calls to use proper flags and language target
MIPS: Prefer cc-option for additions to cflags
MIPS: Move '-Wa,-msoft-float' check from as-option to cc-option
x86/boot/compressed: prefer cc-option for CFLAGS additions
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
fs/filesystems: Fix potential unsigned integer underflow in fs_name()
net_sched: ets: fix a race in ets_qdisc_change()
sch_ets: make est_qlen_notify() idempotent
net_sched: tbf: fix a race in tbf_change()
net_sched: red: fix a race in __red_change()
net_sched: prio: fix a race in prio_tune()
net/mlx5: Fix return value when searching for existing flow group
net/mlx5: Ensure fw pages are always allocated on same NUMA
net/mdiobus: Fix potential out-of-bounds read/write access
net: mdio: C22 is now optional, EOPNOTSUPP if not provided
macsec: MACsec SCI assignment for ES = 0
net: Fix TOCTOU issue in sk_is_readable()
net: Rename ->stream_memory_read to ->sock_is_readable
bpf: Clean up sockmap related Kconfigs
tcp: factorize logic into tcp_epollin_ready()
i40e: retry VFLR handling if there is ongoing VF reset
i40e: return false from i40e_reset_vf if reset is in progress
ath10k: snoc: fix unbalanced IRQ enable in crash recovery
powerpc/vas: Return -EINVAL if the offset is non-zero in mmap()
ath10k: prevent deinitializing NAPI twice
powerpc/vas: Move VAS API to book3s common platform
ath10k: add atomic protection for device recovery
net_sched: sch_sfq: fix a potential crash on gso_skb handling
serial: sh-sci: Clean sci_ports[0] after at earlycon exit
scsi: iscsi: Fix incorrect error path labels for flashnode operations
serial: sh-sci: Move runtime PM enable to sci_probe_single()
serial: sh-sci: Check if TX data was written to device in .tx_empty()
arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0
arm64: dts: ti: k3-am65-main: Fix sdhci node properties
arm64: dts: ti: k3-am65-main: Drop deprecated ti,otap-del-sel property
Input: synaptics-rmi - fix crash with unsupported versions of F34
Input: synaptics-rmi4 - convert to use sysfs_emit() APIs
pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id()
do_change_type(): refuse to operate on unmounted/not ours mounts
PM: sleep: Fix power.is_suspended cleanup for direct-complete devices
vmxnet3: correctly report gso type for UDP tunnels
ice: create new Tx scheduler nodes for new queues only
Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION
spi: bcm63xx-hsspi: fix shared reset
spi: bcm63xx-spi: fix shared reset
net/mlx4_en: Prevent potential integer overflow calculating Hz
driver: net: ethernet: mtk_star_emac: fix suspend/resume issue
net: tipc: fix refcount warning in tipc_aead_encrypt
gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt
net: stmmac: platform: guarantee uniqueness of bus_id
vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl()
MIPS: Loongson64: Add missing '#interrupt-cells' for loongson64c_ls7a
iio: adc: ad7124: Fix 3dB filter frequency reading
serial: Fix potential null-ptr-deref in mlb_usio_probe()
usb: renesas_usbhs: Reorder clock handling and power management in probe
rtc: Fix offset calculation for .start_secs < 0
PCI/DPC: Initialize aer_err_info before using it
dmaengine: ti: Add NULL check in udma_probe()
PCI: cadence: Fix runtime atomic count underflow
rtc: sh: assign correct interrupts with DT
nfs: ignore SB_RDONLY when remounting nfs
nfs: clear SB_RDONLY before getting superblock
perf record: Fix incorrect --user-regs comments
perf tests switch-tracking: Fix timestamp comparison
mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE
mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove()
rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send()
perf scripts python: exported-sql-viewer.py: Fix pattern matching with Python 3
backlight: pm8941: Add NULL check in wled_configure()
perf ui browser hists: Set actions->thread before calling do_zoom_thread()
perf build: Warn when libdebuginfod devel files are not available
fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()
soc: aspeed: lpc: Fix impossible judgment condition
arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou
ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device
bus: fsl-mc: fix double-free on mc_dev
nilfs2: do not propagate ENOENT error from nilfs_btree_propagate()
calipso: Don't call calipso functions for AF_INET sk.
nilfs2: add pointer check for nilfs_direct_propagate()
net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy
Squashfs: check return result of sb_min_blocksize
net: usb: aqc111: fix error handling of usbnet read calls
arm64: dts: imx8mm-beacon: Fix RTC capacitive load
netfilter: nft_tunnel: fix geneve_opt dump
ARM: dts: at91: at91sam9263: fix NAND chip selects
vfio/type1: Fix error unwind in migration dirty bitmap allocation
ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select
f2fs: fix to correct check conditions in f2fs_cross_rename
f2fs: use d_inode(dentry) cleanup dentry->d_inode
net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames
net: openvswitch: Fix the dead loop of MPLS parse
netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy
wifi: ath9k_htc: Abort software beacon handling if disabled
s390/bpf: Store backchain even for leaf progs
clk: qcom: gcc-msm8939: Fix mclk0 & mclk1 for 24 MHz
bpf: Fix WARN() in get_bpf_raw_tp_regs
pinctrl: at91: Fix possible out-of-boundary access
libbpf: Use proper errno value in nlattr
ktls, sockmap: Fix missing uncharge operation
clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()
RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction
netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it
f2fs: clean up w/ fscrypt_is_bounce_page()
RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
wifi: rtw88: do not ignore hardware read error during DPK
net: ncsi: Fix GCPS 64-bit member variables
f2fs: fix to do sanity check on sbi->total_valid_block_count
wifi: ath11k: fix node corruption in ar->arvifs list
firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES
drm/tegra: rgb: Fix the unbound reference count
drm/vkms: Adjust vkms_state->active_planes allocation type
drm: rcar-du: Fix memory leak in rcar_du_vsps_init()
selftests/seccomp: fix syscall_restart test for arm compat
firmware: psci: Fix refcount leak in psci_dt_init
m68k: mac: Fix macintosh_config for Mac II
media: rkvdec: Fix frame size enumeration
drm/vmwgfx: Add seqno waiter for sync_files
spi: sh-msiof: Fix maximum DMA transfer size
ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions"
x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges()
PM: wakeup: Delete space in the end of string shown by pm_show_wakelocks()
power: reset: at91-reset: Optimize at91_reset()
EDAC/skx_common: Fix general protection fault
crypto: sun8i-ce - move fallback ahash_request to the end of the struct
crypto: xts - Only add ecb if it is not already there
crypto: lrw - Only add ecb if it is not already there
crypto: marvell/cesa - Avoid empty transfer descriptor
crypto: marvell/cesa - Handle zero-length skcipher requests
x86/cpu: Sanitize CPUID(0x80000000) output
crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions
perf/core: Fix broken throttling when max_samples_per_tick=1
gfs2: gfs2_create_inode error handling fix
netfilter: nft_socket: fix sk refcount leaks
thunderbolt: Do not double dequeue a configuration request
usb: usbtmc: Fix timeout value in get_stb
usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device
usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE
acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio()
pinctrl: armada-37xx: set GPIO output value before setting direction
pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31
tracing: Fix compilation warning on arm32
ANDROID: fix kernelci build breaks for dcn_calcs
FROMGIT: f2fs: sysfs: export linear_lookup in features directory
FROMGIT: f2fs: sysfs: add encoding_flags entry
FROMGIT: f2fs: support to disable linear lookup fallback
Revert "ANDROID: usb: Optimization the transfer rate of accessory mode in USB3.2 mode"
BACKPORT: binder: Create safe versions of binder log files
UPSTREAM: binder: Refactor binder_node print synchronization
Revert "ipv6: save dontfrag in cork"
UPSTREAM: tracing: Fix compilation warning on arm32
Revert "coredump: hand a pidfd to the usermode coredump helper"
Revert "tcp: bring back NUMA dispersion in inet_ehash_locks_alloc()"
Linux 5.10.238
perf/arm-cmn: Initialise cmn->cpu earlier
xen/swiotlb: relax alignment requirements
platform/x86: thinkpad_acpi: Ignore battery threshold change event notification
platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys
tpm: tis: Double the timeout B to 4s
spi: spi-sun4i: fix early activation
um: let 'make clean' properly clean underlying SUBARCH as well
platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS
nfs: don't share pNFS DS connections between net namespaces
HID: quirks: Add ADATA XPG alpha wireless mouse support
coredump: hand a pidfd to the usermode coredump helper
fork: use pidfd_prepare()
pid: add pidfd_prepare()
coredump: fix error handling for replace_fd()
net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
smb: client: Reset all search buffer pointers when releasing buffer
smb: client: Fix use-after-free in cifs_fill_dirent
drm/i915/gvt: fix unterminated-string-initialization warning
kbuild: Disable -Wdefault-const-init-unsafe
spi: spi-fsl-dspi: Reset SR flags before sending a new message
spi: spi-fsl-dspi: Halt the module after a new message transfer
spi: spi-fsl-dspi: restrict register range for regmap access
mm/page_alloc.c: avoid infinite retries caused by cpuset race
memcg: always call cond_resched() after fn()
drm/edid: fixed the bug that hdr metadata was not reset
llc: fix data loss when reading from a socket in llc_ui_recvmsg()
ALSA: pcm: Fix race of buffer access at PCM OSS layer
can: bcm: add missing rcu read protection for procfs content
can: bcm: add locking for bcm_op runtime updates
padata: do not leak refcount in reorder_work
crypto: algif_hash - fix double free in hash_accept
net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
net: dwmac-sun8i: Use parsed internal PHY address instead of 1
bridge: netfilter: Fix forwarding of fragmented packets
xfrm: Sanitize marks before insert
__legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
xenbus: Allow PVH dom0 a non-local xenstore
btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref
nvmet-tcp: don't restore null sk_state_change
ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx
ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013
pinctrl: meson: define the pull up/down resistor value as 60 kOhm
drm: Add valid clones check
drm/atomic: clarify the rules around drm_atomic_state->allow_modeset
regulator: ad5398: Add device tree support
spi: zynqmp-gqspi: Always acknowledge interrupts
wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate
perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt
bpftool: Fix readlink usage in get_fd_type
drm/ast: Find VBIOS mode from regular display size
HID: usbkbd: Fix the bit shift number for LED_KANA
scsi: st: Restore some drive settings after reset
scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine
rcu: fix header guard for rcu_all_qs()
rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y
vxlan: Annotate FDB data races
hwmon: (xgene-hwmon) use appropriate type for the latency value
wifi: rtw88: Fix download_firmware_validate() for RTL8814AU
ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure().
net/mlx5e: reduce rep rxq depth to 256 for ECPF
net/mlx5e: set the tx_queue_len for pfifo_fast
net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB
drm/amd/display: Initial psr_version with correct setting
phy: core: don't require set_mode() callback for phy_get_mode() to work
net/mlx4_core: Avoid impossible mlx4_db_alloc() order value
media: v4l: Memset argument to 0 before calling get_mbus_config pad op
smack: recognize ipv4 CIPSO w/o categories
pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map
ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot()
ASoC: tas2764: Power up/down amp on mute ops
ASoC: ops: Enforce platform maximum on initial value
net/mlx5: Apply rate-limiting to high temperature warning
net/mlx5: Modify LSB bitmask in temperature event to include only the first bit
ACPI: HED: Always initialize before evged
PCI: Fix old_size lower bound in calculate_iosize() too
eth: mlx4: don't try to complete XDP frames in netpoll
can: c_can: Use of_property_present() to test existence of DT property
EDAC/ie31200: work around false positive build warning
net: pktgen: fix access outside of user given buffer in pktgen_thread_write()
wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31
wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU
wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU
scsi: mpt3sas: Send a diag reset if target reset fails
clocksource: mips-gic-timer: Enable counter when CPUs start
MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core
MIPS: Use arch specific syscall name match function
libbpf: Fix out-of-bound read
cpuidle: menu: Avoid discarding useful information
x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus()
soc: ti: k3-socinfo: Do not use syscon helper to build regmap
bonding: report duplicate MAC address in all situations
net: xgene-v2: remove incorrect ACPI_PTR annotation
drm/amdkfd: KFD release_work possible circular locking
net/mlx5: Avoid report two health errors on same syndrome
PCI: brcmstb: Add a softdep to MIP MSI-X driver
PCI: brcmstb: Expand inbound window size up to 64GB
fpga: altera-cvp: Increase credit timeout
drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence
hwmon: (gpio-fan) Add missing mutex locks
x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2
clk: imx8mp: inform CCF of maximum frequency of clocks
ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config().
net: pktgen: fix mpls maximum labels list parsing
net: ethernet: ti: cpsw_new: populate netdev of_node
pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned"
media: cx231xx: set device_caps for 417
drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c
orangefs: Do not truncate file size
dm cache: prevent BUG_ON by blocking retries on failed device resumes
media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe()
ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114
ieee802154: ca8210: Use proper setters and getters for bitwise types
rtc: ds1307: stop disabling alarms on probe
tcp: bring back NUMA dispersion in inet_ehash_locks_alloc()
powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7
arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator
ipv6: save dontfrag in cork
mmc: sdhci: Disable SD card clock before changing parameters
arm64/mm: Check PUD_TYPE_TABLE in pud_bad()
netfilter: conntrack: Bound nf_conntrack sysctl writes
posix-timers: Add cond_resched() to posix_timer_add() search loop
xen: Add support for XenServer 6.1 platform device
dm: restrict dm device size to 2^63-512 bytes
kbuild: fix argument parsing in scripts/config
rtc: rv3032: fix EERD location
tcp: reorganize tcp_in_ack_event() and tcp_count_delivered()
scsi: st: ERASE does not change tape location
scsi: st: Tighten the page format heuristics with MODE SELECT
ext4: reorder capability check last
um: Update min_low_pfn to match changes in uml_reserved
um: Store full CSGSFS and SS register from mcontext
btrfs: send: return -ENAMETOOLONG when attempting a path that is too long
btrfs: avoid linker error in btrfs_find_create_tree_block()
i2c: pxa: fix call balance of i2c->clk handling routines
i2c: qup: Vote for interconnect bandwidth to DRAM
mmc: host: Wait for Vdd to settle on card power off
libnvdimm/labels: Fix divide error in nd_label_data_init()
pNFS/flexfiles: Report ENETDOWN as a connection error
tools/build: Don't pass test log files to linker
dql: Fix dql->limit value when reset.
thermal/drivers/qoriq: Power down TMU on system suspend
SUNRPC: rpcbind should never reset the port to the value '0'
SUNRPC: rpc_clnt_set_transport() must not change the autobind setting
NFSv4: Treat ENETUNREACH errors as fatal for state recovery
fbdev: core: tileblit: Implement missing margin clearing for tileblit
fbcon: Use correct erase colour for clearing in fbcon
fbdev: fsl-diu-fb: add missing device_remove_file()
mailbox: use error ret code of of_parse_phandle_with_args()
NFSv4: Check for delegation validity in nfs_start_delegation_return_locked()
kconfig: merge_config: use an empty file as initfile
cgroup: Fix compilation issue due to cgroup_mutex not being exported
dma-mapping: avoid potential unused data compilation warning
scsi: target: iscsi: Fix timeout on deleted connection
ice: arfs: fix use-after-free when freeing @rx_cpu_rmap
netfilter: nf_tables: do not defer rule destruction via call_rcu
netfilter: nf_tables: wait for rcu grace period on net_device removal
netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
selftests/mm: compaction_test: support platform with huge mount of memory
usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control()
usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group
drm/vmwgfx: Fix a deadlock in dma buf fence polling
ASoC: q6afe-clocks: fix reprobing of the driver
clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable()
dmaengine: ti: k3-udma: Use cap_mask directly from dma_device structure instead of a local copy
dmaengine: ti: k3-udma: Add missing locking
wifi: mt76: disable napi on driver removal
phy: renesas: rcar-gen3-usb2: Set timing registers only once
phy: Fix error handling in tegra_xusb_port_init
tracing: samples: Initialize trace_array_printk() with the correct function
ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2()
ACPI: PPTT: Fix processor subtable walk
dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when interrupted"
NFSv4/pnfs: Reset the layout state after a layoutreturn
qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd()
ALSA: sh: SND_AICA should depend on SH_DMA_API
net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING
net: cadence: macb: Fix a possible deadlock in macb_halt_tx.
net_sched: Flush gso_skb list too during ->change()
spi: loopback-test: Do not split 1024-byte hexdumps
nfs: handle failure of nfs_get_lock_context in unlock path
RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
iio: chemical: sps30: use aligned_s64 for timestamp
iio: adc: ad7768-1: Fix insufficient alignment of timestamp.
platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection
do_umount(): add missing barrier before refcount checks in sync case
nvme: unblock ctrl state transition for firmware update
drm/panel: simple: Update timings for AUO G101EVN010
MIPS: Fix MAX_REG_OFFSET
iio: adc: dln2: Use aligned_s64 for timestamp
types: Complement the aligned types with signed 64-bit one
usb: usbtmc: Fix erroneous generic_read ioctl return
usb: usbtmc: Fix erroneous wait_srq ioctl return
usb: usbtmc: Fix erroneous get_stb ioctl error returns
USB: usbtmc: use interruptible sleep in usbtmc_read
usb: typec: ucsi: displayport: Fix NULL pointer access
usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition
usb: host: tegra: Prevent host controller crash when OTG port is used
usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN
ocfs2: stop quota recovery before disabling quotas
ocfs2: implement handshaking with ocfs2 recovery thread
ocfs2: switch osb->disable_recovery to enum
module: ensure that kobject_put() is safe for module type kobjects
xenbus: Use kref to track req lifetime
usb: uhci-platform: Make the clock really optional
iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo
iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo
iio: adis16201: Correct inclinometer channel resolution
iio: adc: ad7606: fix serial register access
staging: axis-fifo: Correct handling of tx_fifo_depth for size validation
staging: axis-fifo: Remove hardware resets for user errors
staging: iio: adc: ad7816: Correct conditional logic for store mode
Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5
Input: synaptics - enable SMBus for HP Elitebook 850 G1
Input: synaptics - enable InterTouch on Dell Precision M3800
Input: synaptics - enable InterTouch on Dynabook Portege X30L-G
Input: synaptics - enable InterTouch on Dynabook Portege X30-D
net: dsa: b53: fix learning on VLAN unaware bridges
net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave
net: dsa: b53: allow leaky reserved multicast
netfilter: ipset: fix region locking in hash types
can: gw: fix RCU/BH usage in cgw_create_job()
rcu/kvfree: Add kvfree_rcu_mightsleep() and kfree_rcu_mightsleep()
can: gw: use call_rcu() instead of costly synchronize_rcu()
openvswitch: Fix unsafe attribute parsing in output_userspace()
can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls
scsi: target: Fix WRITE_SAME No Data Buffer crash
dm: fix copying after src array boundaries
usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
usb: chipidea: ci_hdrc_imx: use dev_err_probe()
irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
irqchip/gic-v2m: Mark a few functions __init
irqchip/gic-v2m: Add const to of_device_id
Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates"
of: module: add buffer overflow check in of_modalias()
PCI: imx6: Skip controller_id generation logic for i.MX7D
net: fec: ERR007885 Workaround for conventional TX
net: lan743x: Fix memleak issue when GSO enabled
nvme-tcp: fix premature queue removal and I/O failover
bnxt_en: Fix ethtool -d byte order for 32-bit values
net: ipv6: fix UDPv6 GSO segmentation with NAT
net: dlink: Correct endianness handling of led_mode
net_sched: qfq: Fix double list add in class with netem as child qdisc
net_sched: ets: Fix double list add in class with netem as child qdisc
net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
net_sched: drr: Fix double list add in class with netem as child qdisc
net/mlx5: E-switch, Fix error handling for enabling roce
net/mlx5: Remove return statement exist at the end of void function
net/mlx5: E-Switch, Initialize MAC Address for Default GID
net/sched: act_mirred: don't override retval if we already lost the skb
tracing: Fix oob write in trace_seq_to_buffer()
iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57)
iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
dm: always update the array size in realloc_argv on success
dm-integrity: fix a warning on invalid table line
wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe
amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload
parisc: Fix double SIGFPE crash
i2c: imx-lpi2c: Fix clock count when probe defers
EDAC/altera: Set DDR and SDMMC interrupt mask before registration
EDAC/altera: Test the correct error reg offset
drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()
ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset
Conflicts:
Makefile
drivers/bus/mhi/host/pm.c
drivers/platform/Kconfig
drivers/platform/Makefile
scripts/Kbuild.include
Change-Id: I301b8b5a24eeb219f74eeb64929641a8d76d6dd3
314aa5ce56