Merge keystone/android13-5.15-keystone-qcom-release.74 (b1c838f) into msm-5.15

* refs/heads/tmp-b1c838f: Revert "ANDROID: arm64/mm: protect vm_file during speculative page fault handling" Revert "ANDROID: x86/mm: protect vm_file during speculative page fault handling" Revert "ANDROID: powerpc/mm: protect vm_file during speculative page fault handling" UPSTREAM: binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 UPSTREAM: binder: Address corner cases in deferred copy and fixup UPSTREAM: binder: fix pointer cast warning UPSTREAM: binder: defer copies of pre-patched txn data UPSTREAM: binder: read pre-translated fds from sender buffer UPSTREAM: binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 UPSTREAM: binder: Address corner cases in deferred copy and fixup UPSTREAM: binder: fix pointer cast warning UPSTREAM: binder: defer copies of pre-patched txn data UPSTREAM: binder: read pre-translated fds from sender buffer Merge remote-tracking branch into HEAD FROMGIT: tty: serial: qcom-geni-serial: Add support for Hibernation feature ANDROID: ABI: Update allowed list for QCOM ANDROID: abi_gki_aarch64_qcom: whitelist symbols added for cma retries ANDROID: mm/cma: add vendor_hook in cma_alloc for retries ANDROID: irq: put irq_resolve_mapping under protection of __irq_enter_raw BACKPORT: UPSTREAM: usb: typec: ucsi: Wait for the USB role switches UPSTREAM: rpmsg: char: Avoid double destroy of default endpoint BACKPORT: exfat: fix overflow for large capacity partition UPSTREAM: usb: gadget: uvc: fix changing interface name via configfs UPSTREAM: dma-mapping: Fix build error unused-value UPSTREAM: bpf: Ensure correct locking around vulnerable function find_vpid() ANDROID: abi_gki_aarch64_qcom: whitelist symbols added for cma retries ANDROID: mm/cma: add vendor_hook in cma_alloc for retries ANDROID: arm64: mm: perform clean & invalidation in __dma_map_area FROMLIST: sched: Fix use-after-free bug in dup_user_cpus_ptr() UPSTREAM: HID: roccat: Fix use-after-free in roccat_read() UPSTREAM: mm/damon: use set_huge_pte_at() to make huge pte old UPSTREAM: usb: gadget: f_mass_storage: Make CD-ROM emulation works with Windows OS UPSTREAM: gen_compile_commands: handle multiple lines per .mod file UPSTREAM: scripts/nsdeps: adjust to the format change of *.mod files BACKPORT: kbuild: avoid regex RS for POSIX awk UPSTREAM: KVM: arm64: Always start with clearing SVE flag on load UPSTREAM: powerpc/64: Include cache.h directly in paca.h UPSTREAM: KVM: arm64: vgic-v3: Consistently populate ID_AA64PFR0_EL1.GIC UPSTREAM: module.h: simplify MODULE_IMPORT_NS UPSTREAM: mac80211_hwsim: fix RCU protected chanctx access UPSTREAM: KVM: arm64: nvhe: Eliminate kernel-doc warnings BACKPORT: KVM: arm64: Actually prevent SMC64 SYSTEM_RESET2 from AArch32 UPSTREAM: KVM: arm64: Generally disallow SMC64 for AArch32 guests UPSTREAM: virtio: use virtio_device_ready() in virtio_device_restore() UPSTREAM: mm: fix use-after-free bug when mm->mmap is reused after being freed UPSTREAM: kasan: test: prevent cache merging in kmem_cache_double_destroy UPSTREAM: arm64: Ensure that the 'bti' macro is defined where linkage.h is included UPSTREAM: mmc: mediatek: free the ext_csd when mmc_get_ext_csd success UPSTREAM: scsi: ufs: Fix double space in SCSI_UFS_HWMON description UPSTREAM: scsi: ufs: mediatek: Avoid sched_clock() misuse UPSTREAM: scsi: ufs: core: SCSI_UFS_HWMON depends on HWMON=y ANDROID: GKI: db845c: Update symbols list and ABI BACKPORT: f2fs: invalidate meta pages only for post_read required inode ANDROID: GKI: Update symbols to symbol list ANDROID: cpu/hotplug: call perf event through function pointer ANDROID: abi_gki_aarch64_qcom: Update symbol list UPSTREAM: usb: dwc3: gadget: Submit endxfer command if delayed during disconnect BACKPORT: ANDROID: dma-buf: heaps: replace mutex lock with spinlock ANDROID: Update symbol list for mtk ANDROID: Fix license for BUILD.bazel file. UPSTREAM: gcov: clang: fix the buffer overflow issue ANDROID: kleaf: load() then package(). UPSTREAM: perf/arm-cmn: Add debugfs topology info UPSTREAM: perf/arm-cmn: Add CI-700 Support UPSTREAM: dt-bindings: perf: arm-cmn: Add CI-700 UPSTREAM: perf/arm-cmn: Support new IP features UPSTREAM: perf/arm-cmn: Demarcate CMN-600 specifics UPSTREAM: perf/arm-cmn: Move group validation data off-stack UPSTREAM: perf/arm-cmn: Optimise DTC counter accesses UPSTREAM: perf/arm-cmn: Optimise DTM counter reads UPSTREAM: perf/arm-cmn: Refactor DTM handling UPSTREAM: perf/arm-cmn: Streamline node iteration UPSTREAM: perf/arm-cmn: Refactor node ID handling UPSTREAM: perf/arm-cmn: Drop compile-test restriction UPSTREAM: perf/arm-cmn: Account for NUMA affinity UPSTREAM: fs: erofs: add sanity check for kobject in erofs_unregister_sysfs ANDROID: cpufreq: times: record fast switch frequency transitions ANDROID: abi_gki_aarch64_qcom: Add android_vh_madvise_cold_or_pageout ANDROID: GKI: MGLRU ABI Fixup ANDROID: GKI: Build multi-gen LRU BACKPORT: mm: multi-gen LRU: design doc UPSTREAM: mm: multi-gen LRU: admin guide BACKPORT: mm: multi-gen LRU: debugfs interface UPSTREAM: mm: multi-gen LRU: thrashing prevention BACKPORT: mm: multi-gen LRU: kill switch BACKPORT: mm: multi-gen LRU: optimize multiple memcgs BACKPORT: mm: multi-gen LRU: support page table walks BACKPORT: mm: multi-gen LRU: exploit locality in rmap BACKPORT: mm: multi-gen LRU: minimal implementation BACKPORT: mm: multi-gen LRU: groundwork UPSTREAM: Revert "include/linux/mm_inline.h: fold __update_lru_size() into its sole caller" BACKPORT: mm/vmscan.c: refactor shrink_node() BACKPORT: mm: x86: add CONFIG_ARCH_HAS_NONLEAF_PMD_YOUNG BACKPORT: mm: x86, arm64: add arch_has_hw_pte_young() Revert "FROMLIST: mm: x86, arm64: add arch_has_hw_pte_young()" Revert "FROMLIST: mm: x86: add CONFIG_ARCH_HAS_NONLEAF_PMD_YOUNG" Revert "FROMLIST: mm/vmscan.c: refactor shrink_node()" Revert "FROMLIST: Revert "include/linux/mm_inline.h: fold __update_lru_size() into its sole caller"" Revert "FROMLIST: mm: multi-gen LRU: groundwork" Revert "FROMLIST: mm: multi-gen LRU: minimal implementation" Revert "FROMLIST: mm: multi-gen LRU: exploit locality in rmap" Revert "FROMLIST: mm: multi-gen LRU: support page table walks" Revert "FROMLIST: mm: multi-gen LRU: optimize multiple memcgs" Revert "FROMLIST: mm: multi-gen LRU: kill switch" Revert "FROMLIST: mm: multi-gen LRU: thrashing prevention" Revert "FROMLIST: mm: multi-gen LRU: debugfs interface" Revert "FROMLIST: mm: multi-gen LRU: admin guide" Revert "FROMLIST: mm: multi-gen LRU: design doc" Revert "ANDROID: GKI: build multi-gen LRU" ANDROID: mm: Use intended order-adjusted batch size ANDROID: ABI: Update allowed list for QCOM ANDROID: GKI: Add exynos_wear symbol list ANDROID: page_pinner: prevent pp_buffer access before initialization ANDROID: KVM: arm64: Use 32-bit function ID for PSCI MEM_PROTECT call ANDROID: ABI: Update allowed list for QCOM ANDROID: mm: preserve vma->anon_vma after MREMAP_DONTUNMAP for SPF ANDROID: mm: disable speculative page faults for CONFIG_NUMA ANDROID: mm: fix speculative walk which is unsafe under RCU ANDROID: mm: avoid using vmacache in lockless vma search ANDROID: disable page table moves when speculative page faults are enabled ANDROID: mm: skip pte_alloc during speculative page fault ANDROID: mm: introduce vma refcounting to protect vma during SPF UPSTREAM: crypto: arm/xor - make vectorized C code Clang-friendly UPSTREAM: efi: capsule-loader: Fix use-after-free in efi_capsule_write ANDROID: mm: add a vendor hook to rmqueue_bulk() FROMGIT: mm/madvise: fix madvise_pageout for private file mappings ANDROID: vendor_hooks: Allow shared pages reclaim via MADV_PAGEOUT ANDROID: abi_gki_aarch64_qcom: Update symbol list FROMGIT: tty: serial: qcom-geni-serial: Add support for Hibernation feature ANDROID: GKI: Update symbol list for Amlogic UPSTREAM: KVM: x86: do not report a vCPU as preempted outside instruction boundaries ANDROID: mm/slab: Use EXPORT_SYMBOL for android_kmalloc_64_create ANDROID: GKI: update symbol list for ExynosAuto SoC ANDROID: KVM: arm64: s2mpu: Fix SYNC latency regression ANDROID: KVM: arm64: iommu: Add host_stage2_idmap_complete ANDROID: KVM: arm64: Issue CMOs when tearing down shadow pages ANDROID: GKI: Update symbol list for xiaomi ANDROID: Add ashmem ioctl to return a unique file identifier ANDROID: KVM: arm64: Fix repainting of PSCI SYSTEM_RESET2 calls ANDROID: reimplement vm_file protection during speculative page fault Revert "ANDROID: add vma->file_ref_count to synchronize vma->vm_file destruction" Revert "ANDROID: arm64/mm: protect vm_file during speculative page fault handling" Revert "ANDROID: x86/mm: protect vm_file during speculative page fault handling" Revert "ANDROID: powerpc/mm: protect vm_file during speculative page fault handling" FROMGIT: usb: core: stop USB enumeration if too many retries FROMGIT: f2fs: allow to read node block after shutdown ANDROID: KVM: arm64: Adjust PSCI MEM_PROTECT refcount across share/unshare UPSTREAM: ext4,f2fs: fix readahead of verity data Linux 5.15.74 wifi: mac80211: fix MBSSID parsing use-after-free mac80211: fix memory leaks with element parsing mac80211: always allocate struct ieee802_11_elems mac80211: mlme: find auth challenge directly mac80211: move CRC into struct ieee802_11_elems mac80211: mesh: clean up rx_bcn_presp API misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic misc: pci_endpoint_test: Aggregate params checking for xfer Input: xpad - fix wireless 360 controller breaking after suspend Input: xpad - add supported devices as contributed on github wifi: cfg80211: update hidden BSSes to avoid WARN_ON wifi: mac80211: fix crash in beacon protection for P2P-device wifi: mac80211_hwsim: avoid mac80211 warning on bad rate wifi: cfg80211: avoid nontransmitted BSS list corruption wifi: cfg80211: fix BSS refcounting bugs wifi: cfg80211: ensure length byte is present before access wifi: cfg80211/mac80211: reject bad MBSSID elements wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() random: use expired timer rather than wq for mixing fast pool random: avoid reading two cache lines on irq randomness Revert "crypto: qat - reduce size of mapped region" Revert "powerpc/rtas: Implement reentrant rtas call" USB: serial: qcserial: add new usb-id for Dell branded EM7455 scsi: stex: Properly zero out the passthrough command structure efi: Correct Macmini DMI match in uefi cert quirk ALSA: hda: Fix position reporting on Poulsbo random: clamp credited irq bits to maximum mixed random: restore O_NONBLOCK support ceph: don't truncate file in atomic_open nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure nilfs2: fix leak of nilfs_root in case of writer thread creation failure nilfs2: fix use-after-free bug of struct nilfs_root nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() Linux 5.15.73 Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5" rpmsg: qcom: glink: replace strncpy() with strscpy_pad() USB: serial: ftdi_sio: fix 300 bps rate for SIO usb: mon: make mmapped memory read only net/mlx5: Disable irq when locking lag_lock wifi: cfg80211: fix MCS divisor value mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all() mm/huge_memory: minor cleanup for split_huge_pages_all perf parse-events: Identify broken modifiers mmc: core: Terminate infinite loop in SD-UHS voltage switch mmc: core: Replace with already defined values for readability drm/amd/display: skip audio setup when audio stream is enabled drm/amd/display: update gamut remap if plane has changed drm/amd/display: Assume an LTTPR is always present on fixed_vs links drm/amd/display: Fix double cursor on non-video RGB MPO net: atlantic: fix potential memory leak in aq_ndev_close() arch: um: Mark the stack non-executable to fix a binutils warning um: Cleanup compiler warning in arch/x86/um/tls_32.c um: Cleanup syscall_handler_t cast in syscalls_32.h ALSA: hda/hdmi: Fix the converter reuse for the silent stream net: marvell: prestera: add support for for Aldrin2 net/ieee802154: fix uninit value bug in dgram_sendmsg scsi: qedf: Fix a UAF bug in __qedf_probe() ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling firmware: arm_scmi: Add SCMI PM driver remove routine firmware: arm_scmi: Harden accesses to the sensor domains firmware: arm_scmi: Improve checks in the info_get operations fs: fix UAF/GPF bug in nilfs_mdt_destroy powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush mm: gup: fix the fast GUP race against THP collapse xsk: Inherit need_wakeup flag for shared sockets docs: update mediator information in CoC docs Makefile.extrawarn: Move -Wcast-function-type-strict to W=1 Linux 5.15.72 drm/i915/gem: Really move i915_gem_context.link under ref protection x86/alternative: Fix race in try_get_desc() KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest clk: iproc: Do not rely on node name for correct PLL setup clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks fs: split off setxattr_copy and do_setxattr function from setxattr vdpa/ifcvf: fix the calculation of queuepair selftests: Fix the if conditions of in test_extra_filter() net: phy: Don't WARN for PHY_UP state in mdio_bus_phy_resume() net: stmmac: power up/down serdes in stmmac_open/release wifi: mac80211: fix regression with non-QoS drivers nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices net/mlxbf_gige: Fix an IS_ERR() vs NULL bug in mlxbf_gige_mdio_probe cxgb4: fix missing unlock on ETHOFLD desc collect fail path net: sched: act_ct: fix possible refcount leak in tcf_ct_init() usbnet: Fix memory leak in usbnet_disconnect() gpio: mvebu: Fix check for pwm support on non-A8K platforms Input: melfas_mip4 - fix return value check in mip4_probe() Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time" drm/bridge: lt8912b: fix corrupted image output drm/bridge: lt8912b: set hdmi or dvi mode drm/bridge: lt8912b: add vsync hsync ASoC: tas2770: Reinit regcache on reset arm64: dts: qcom: sm8350: fix UFS PHY serdes size ASoC: imx-card: Fix refcount issue with of_node_put soc: sunxi: sram: Fix debugfs info for A64 SRAM C soc: sunxi: sram: Fix probe function ordering issues soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource() soc: sunxi: sram: Prevent the driver from being unbound soc: sunxi: sram: Actually claim SRAM regions ARM: dts: am5748: keep usb4_tm disabled reset: imx7: Fix the iMX8MP PCIe PHY PERST support ARM: dts: am33xx: Fix MMCHS0 dma properties swiotlb: max mapping size takes min align mask into account media: v4l2-compat-ioctl32.c: zero buffer passed to v4l2_compat_get_array_args() media: rkvdec: Disable H.264 error detection media: dvb_vb2: fix possible out of bound access mm,hwpoison: check mm when killing accessing process mm: fix madivse_pageout mishandling on non-LRU page mm/migrate_device.c: flush TLB while holding PTL mm: fix dereferencing possible ERR_PTR mm: prevent page_frag_alloc() from corrupting the memory mm/page_alloc: fix race condition between build_all_zonelists and page allocation mmc: hsq: Fix data stomping during mmc recovery mmc: moxart: fix 4-bit bus width and remove 8-bit bus width libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205 vduse: prevent uninitialized memory accesses drm/amdgpu: Add amdgpu suspend-resume code path under SRIOV drm/i915/gt: Restrict forced preemption to the active context Revert "firmware: arm_scmi: Add clock management to the SCMI power domain" net: mt7531: only do PLL once after the reset mm/damon/dbgfs: fix memory leak when using debugfs_lookup() ntfs: fix BUG_ON in ntfs_lookup_inode_by_name() ARM: dts: integrator: Tag PCI host with device_type x86/sgx: Do not fail on incomplete sanitization on premature stop of ksgxd clk: ingenic-tcu: Properly enable registers before accessing timers can: c_can: don't cache TX messages for C_CAN cores Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455 thunderbolt: Explicitly reset plug events delay back to USB4 spec value usb: typec: ucsi: Remove incorrect warning uas: ignore UAS for Thinkplus chips usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS uas: add no-uas quirk for Hiksemi usb_disk cgroup: cgroup_get_from_id() must check the looked-up kn is a directory cgroup: reduce dependency on cgroup_mutex ALSA: hda/realtek: fix speakers and micmute on HP 855 G8 ALSA: hda: Fix Nvidia dp infoframe ALSA: hda: Fix hang at HD-audio codec unbinding due to refcount saturation ALSA: hda: Do disconnect jacks at codec unbind Linux 5.15.71 ext4: use locality group preallocation for small closed files ext4: avoid unnecessary spreading of allocations among groups ext4: make mballoc try target group first even with mb_optimize_scan ext4: limit the number of retries after discarding preallocations blocks ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 ext4: make directory inode spreading reflect flexbg size devdax: Fix soft-reservation memory description NFSv4: Fixes for nfs4_inode_return_delegation() drm/amdgpu: don't register a dirty callback for non-atomic i2c: mlxbf: Fix frequency calculation i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() i2c: mlxbf: incorrect base address passed during io write i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible workqueue: don't skip lockdep work dependency in cancel_work_sync() fsdax: Fix infinite loop in dax_iomap_rw() drm/rockchip: Fix return type of cdn_dp_connector_mode_valid drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage drm/amd/display: Reduce number of arguments of dml31's CalculateFlipSchedule() drm/amd/display: Reduce number of arguments of dml31's CalculateWatermarksAndDRAMSpeedChangeSupport() drm/amd/display: Limit user regamma to a valid value drm/amdgpu: use dirty framebuffer helper drm/amd/pm: disable BACO entry/exit completely on several sienna cichlid cards drm/gma500: Fix BUG: sleeping function called from invalid context errors Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting serial: Create uart_xmit_advance() serial: fsl_lpuart: Reset prior to registration KVM: x86/mmu: Fold rmap_recycle into rmap_add selftests: forwarding: add shebang for sch_red.sh bnxt: prevent skb UAF after handing over to PTP worker net: sched: fix possible refcount leak in tc_new_tfilter() net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD bonding: fix NULL deref in bond_rr_gen_slave_id net/smc: Stop the CLC flow if no link to map buffers on drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff() perf tools: Honor namespace when synthesizing build-ids perf kcore_copy: Do not check /proc/modules is unchanged perf jit: Include program header in ELF files perf stat: Fix BPF program section name can: gs_usb: gs_can_open(): fix race dev->can.state condition net: sh_eth: Fix PHY state warning splat during system resume net: ravb: Fix PHY state warning splat during system resume netfilter: ebtables: fix memory leak when blob is malformed netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain() netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain() net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs net/sched: taprio: avoid disabling offload when it was never enabled net: enetc: deny offload of tc-based TSN features on VF interfaces net: enetc: move enetc_set_psfp() out of the common enetc_set_features() wireguard: netlink: avoid variable-sized memcpy on sockaddr wireguard: ratelimiter: disable timings test by default net: ipa: properly limit modem routing table use of: mdio: Add of_node_put() when breaking out of for_each_xx drm/hisilicon: Add depends on MMU drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled sfc: fix null pointer dereference in efx_hard_start_xmit sfc: fix TX channel offset when using legacy interrupts i40e: Fix set max_tx_rate when it is lower than 1 Mbps i40e: Fix VF set max MTU size iavf: Fix set max MTU size with port VLAN and jumbo frames mlxbf_gige: clear MDIO gateway lock after read iavf: Fix bad page state um: fix default console kernel parameter MIPS: Loongson32: Fix PHY-mode being left unspecified MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko drm/panel: simple: Fix innolux_g121i1_l01 bus_format net: team: Unsync device addresses on ndo_stop net: bonding: Unsync device addresses on ndo_stop net: bonding: Share lacpdu_mcast_addr definition scsi: mpt3sas: Fix return value check of dma_get_required_mask() scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts() net: phy: aquantia: wait for the suspend/resume operations to finish net: core: fix flow symmetric hash ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header iavf: Fix cached head and tail value for iavf_get_tx_pending ice: Don't double unplug aux on peer initiated reset netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() netfilter: nf_conntrack_irc: Tighten matching on DCC message netfilter: nf_conntrack_sip: fix ct_sip_walk_headers arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get() arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks arm64: dts: rockchip: Fix typo in lisense text for PX30.Core arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob firmware: arm_scmi: Fix the asynchronous reset requests firmware: arm_scmi: Harden accesses to the reset domains xfs: validate inode fork size against fork format xfs: fix xfs_ifree() error handling to not leak perag ref xfs: reorder iunlink remove operation in xfs_ifree vmlinux.lds.h: CFI: Reduce alignment of jump-table to function alignment arm64: topology: fix possible overflow in amu_fie_setup() KVM: x86: Inject #UD on emulated XSETBV if XSAVES isn't enabled mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context. mm/slub: fix to return errno if kmalloc() fails net: mana: Add rmb after checking owner bits can: flexcan: flexcan_mailbox_read() fix return value for drop = true kasan: call kasan_malloc() from __kmalloc_*track_caller() riscv: fix a nasty sigreturn bug... gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully gpio: mockup: Fix potential resource leakage when register a chip gpio: mockup: fix NULL pointer dereference when removing debugfs wifi: mt76: fix reading current per-tid starting sequence number for aggregation efi: libstub: check Shim mode using MokSBStateRT efi: x86: Wipe setup_data on pure EFI boot thunderbolt: Add support for Intel Maple Ridge single port controller usb: dwc3: core: leave default DMA if the controller does not support 64-bit DMA media: flexcop-usb: fix endpoint type check btrfs: fix hang during unmount when stopping a space reclaim worker btrfs: fix hang during unmount when stopping block group reclaim worker iommu/vt-d: Check correct capability for sagaw determination ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop ALSA: hda/realtek: Add quirk for ASUS GA503R laptop ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack ALSA: hda/realtek: Re-arrange quirk table entries ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop ALSA: hda/realtek: Add quirk for Huawei WRT-WX9 ALSA: hda: add Intel 5 Series / 3400 PCI DID ALSA: hda/tegra: set depop delay for tegra ALSA: core: Fix double-free at snd_card_new() Revert "ALSA: usb-audio: Split endpoint setups for hw_params and prepare" USB: serial: option: add Quectel RM520N USB: serial: option: add Quectel BG95 0x0203 composition USB: core: Fix RST error in hub.c drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio" Revert "usb: add quirks for Lenovo OneLink+ Dock" usb: gadget: udc-xilinx: replace memcpy with memcpy_toio usb: add quirks for Lenovo OneLink+ Dock usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup() usb: dwc3: gadget: Refactor pullup() usb: dwc3: gadget: Prevent repeat pullup() usb: dwc3: Issue core soft reset before enabling run/stop usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind staging: r8188eu: Add Rosewill USB-N150 Nano to device tables staging: r8188eu: Remove support for devices with 8188FU chipset (0bda:f179) drm/amdgpu: make sure to init common IP before gmc drm/amdgpu: Separate vf2pf work item init from virt data exchange Revert "arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly" UPSTREAM: Revert "ALSA: usb-audio: Split endpoint setups for hw_params and prepare" Revert "USB: core: Prevent nested device-reset calls" Revert "xhci: Add grace period after xHC start to prevent premature runtime suspend." Linux 5.15.70 ALSA: hda/sigmatel: Fix unused variable warning for beep power change cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() KVM: SEV: add cache flush to solve SEV cache incoherency issues net: Find dst with sk's xfrm policy not ctl_sk video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write mksysmap: Fix the mismatch of 'L0' symbols in System.map drm/panfrost: devfreq: set opp to the recommended one to configure regulator MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping() afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked net: usb: qmi_wwan: add Quectel RM520N ALSA: hda/tegra: Align BDL entry to 4KB boundary ALSA: hda/sigmatel: Keep power up while beep is enabled wifi: mac80211_hwsim: check length for virtio packets rxrpc: Fix calc of resend age rxrpc: Fix local destruction being repeated scsi: lpfc: Return DID_TRANSPORT_DISRUPTED instead of DID_REQUEUE regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe() ASoC: nau8824: Fix semaphore unbalance at error paths arm64: dts: juno: Add missing MHU secure-irq video: fbdev: i740fb: Error out if 'pixclock' equals zero binder: remove inaccurate mmap_assert_locked() drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega drm/amdgpu: move nbio ih_doorbell_range() into ih code for vega drm/amdgpu: Don't enable LTR if not supported tools/include/uapi: Fix <asm/errno.h> for parisc and xtensa parisc: Allow CONFIG_64BIT with ARCH=parisc cifs: always initialize struct msghdr smb_msg completely cifs: don't send down the destination address to sendmsg for a SOCK_STREAM cifs: revalidate mapping when doing direct writes of/device: Fix up of_dma_configure_id() stub parisc: ccio-dma: Add missing iounmap in error path in ccio_probe() block: blk_queue_enter() / __bio_queue_enter() must return -EAGAIN for nowait drm/meson: Fix OSD1 RGB to YCbCr coefficient drm/meson: Correct OSD1 global alpha value gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0 pinctrl: sunxi: Fix name for A100 R_PIO pinctrl: rockchip: Enhance support for IRQ_TYPE_EDGE_BOTH pinctrl: qcom: sc8180x: Fix wrong pin numbers pinctrl: qcom: sc8180x: Fix gpio_wakeirq_map of: fdt: fix off-by-one error in unflatten_dt_nodes() tty: serial: atmel: Preserve previous USART mode if RS485 disabled serial: atmel: remove redundant assignment in rs485_config drm/tegra: vic: Fix build warning when CONFIG_PM=n Revert "mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse" Revert "netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y" Linux 5.15.69 Input: goodix - add compatible string for GT1158 RDMA/irdma: Use s/g array in post send only when its valid usb: gadget: f_uac2: fix superspeed transfer usb: gadget: f_uac2: clean up some inconsistent indenting soc: fsl: select FSL_GUTS driver for DPIO mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() usb: storage: Add ASUS <0x0b05:0x1932> to IGNORE_UAS platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes perf/arm_pmu_platform: fix tests for platform_get_irq() failure net: dsa: hellcreek: Print warning only once drm/amd/amdgpu: skip ucode loading if ucode_size == 0 nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() Input: iforce - add support for Boeder Force Feedback Wheel ieee802154: cc2520: add rc code in cc2520_tx() gpio: mockup: remove gpio debugfs when remove device tg3: Disable tg3 device on system reboot to avoid triggering AER hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo dt-bindings: iio: gyroscope: bosch,bmg160: correct number of pins drm/msm/rd: Fix FIFO-full deadlock platform/surface: aggregator_registry: Add support for Surface Laptop Go 2 Input: goodix - add support for GT1158 iommu/vt-d: Fix kdump kernels boot failure with scalable mode tracefs: Only clobber mode/uid/gid on remount if asked tracing: hold caller_addr to hardirq_{enable,disable}_ip task_stack, x86/cea: Force-inline stack helpers x86/mm: Force-inline __phys_addr_nodebug() lockdep: Fix -Wunused-parameter for _THIS_IP_ ARM: dts: at91: sama7g5ek: specify proper regulator output ranges ARM: dts: at91: fix low limit for CPU regulator ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible ARM: dts: imx: align SPI NOR node name with dtschema ACPI: resource: skip IRQ override on AMD Zen platforms NFS: Fix WARN_ON due to unionization of nfs_inode.nrequests Linux 5.15.68 ARM: at91: ddr: remove CONFIG_SOC_SAMA7 dependency perf machine: Use path__join() to compose a path instead of snprintf(dir, '/', filename) drm/bridge: display-connector: implement bus fmts callbacks arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly iommu/vt-d: Correctly calculate sagaw value of IOMMU arm64/bti: Disable in kernel BTI when cross section thunks are broken Revert "arm64: kasan: Revert "arm64: mte: reset the page tag in page->flags"" hwmon: (mr75203) enable polling for all VM channels hwmon: (mr75203) fix multi-channel voltage reading hwmon: (mr75203) fix voltage equation for negative source input hwmon: (mr75203) update pvt->v_num and vm_num to the actual number of used sensors hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined s390/boot: fix absolute zero lowcore corruption on boot iommu/amd: use full 64-bit value in build_completion_wait() swiotlb: avoid potential left shift overflow i40e: Fix ADQ rate limiting for PF i40e: Refactor tc mqprio checks kbuild: disable header exports for UML in a straightforward way MIPS: loongson32: ls1c: Fix hang during startup ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion ASoC: mchp-spdiftx: remove references to mchp_i2s_caps hwmon: (tps23861) fix byte order in resistance register perf script: Fix Cannot print 'iregs' field for hybrid systems sch_sfb: Also store skb len before calling child enqueue RDMA/irdma: Report RNR NAK generation in device caps RDMA/irdma: Return correct WC error for bind operation failure RDMA/irdma: Report the correct max cqes from query device nvmet: fix mar and mor off-by-one errors tcp: fix early ETIMEDOUT after spurious non-SACK RTO nvme-tcp: fix regression that causes sporadic requests to time out nvme-tcp: fix UAF when detecting digest errors erofs: fix pcluster use-after-free on UP platforms RDMA/mlx5: Set local port to one when accessing counters IB/core: Fix a nested dead lock as part of ODP flow ipv6: sr: fix out-of-bounds read when setting HMAC data. RDMA/siw: Pass a pointer to virt_to_page() xen-netback: only remove 'hotplug-status' when the vif is actually destroyed iavf: Detach device during reset task i40e: Fix kernel crash during module removal ice: use bitmap_free instead of devm_kfree tcp: TX zerocopy should not sense pfmemalloc status net: introduce __skb_fill_page_desc_noacc tipc: fix shift wrapping bug in map_get() sch_sfb: Don't assume the skb is still around after enqueueing to child Revert "net: phy: meson-gxl: improve link-up behavior" afs: Use the operation issue time instead of the reply time for callbacks rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() rxrpc: Fix ICMP/ICMP6 error handling ALSA: usb-audio: Register card again for iface over delayed_register option ALSA: usb-audio: Inform the delayed registration more properly RDMA/srp: Set scmnd->result only when scmnd is not NULL netfilter: nf_conntrack_irc: Fix forged IP logic netfilter: nf_tables: clean up hook list when offload flags check fails netfilter: br_netfilter: Drop dst references before setting. ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges ARM: at91: pm: fix DDR recalibration when resuming from backup and self-refresh ARM: at91: pm: fix self-refresh for sama7g5 wifi: wilc1000: fix DMA on stack objects RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift RDMA/hns: Fix supported page size soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs RDMA/cma: Fix arguments order in net device validation tee: fix compiler warning in tee_shm_register() regulator: core: Clean up on enable failure soc: imx: gpcv2: Assert reset before ungating clock ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node RDMA/rtrs-srv: Pass the correct number of entries for dma mapped SGL RDMA/rtrs-clt: Use the right sg_cnt after ib_dma_map_sg ASoC: qcom: sm8250: add missing module owner cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree NFS: Fix another fsync() issue after a server reboot NFS: Save some space in the inode NFS: Further optimisations for 'ls -l' scsi: lpfc: Add missing destroy_workqueue() in error path scsi: mpt3sas: Fix use-after-free warning drm/i915: Implement WaEdpLinkRateDataReload nvmet: fix a use-after-free drm/amd/display: fix memory leak when using debugfs_lookup() sched/debug: fix dentry leak in update_sched_domain_debugfs debugfs: add debugfs_lookup_and_remove() kprobes: Prohibit probes in gate area vfio/type1: Unpin zero pages btrfs: zoned: set pseudo max append zone limit in zone emulation mode tracing: Fix to check event_mutex is held while accessing trigger list ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() ALSA: usb-audio: Split endpoint setups for hw_params and prepare ALSA: aloop: Fix random zeros in capture data when using jiffies timer ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() fbdev: fbcon: Destroy mutex on freeing struct fb_info md: Flush workqueue md_rdev_misc_wq in md_alloc() net/core/skbuff: Check the return value of skb_copy_bits() cpufreq: check only freq_table in __resolve_freq() netfilter: conntrack: work around exceeded receive window arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() Revert "parisc: Show error if wrong 32/64-bit compiler is being used" scsi: ufs: core: Reduce the power mode change timeout drm/radeon: add a force flush to delay work when radeon drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini drm/gem: Fix GEM handle release errors scsi: megaraid_sas: Fix double kfree() scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()" fs: only do a memory barrier for the first set_buffer_uptodate() wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() efi: capsule-loader: Fix use-after-free in efi_capsule_write efi: libstub: Disable struct randomization net: wwan: iosm: remove pointless null check Linux 5.15.67 kbuild: fix up permissions on scripts/pahole-flags.sh Linux 5.15.66 USB: serial: ch341: fix disabled rx timer on older devices USB: serial: ch341: fix lost character on LCR updates usb: dwc3: disable USB core PHY management usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup usb: dwc3: fix PHY disable sequence kbuild: Add skip_encoding_btf_enum64 option to pahole kbuild: Unify options for BTF generation for vmlinux and modules tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() drm/i915: Skip wm/ddb readout for disabled pipes drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk ALSA: seq: Fix data-race at module auto-loading ALSA: seq: oss: Fix data-race for max_midi_devs access ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298 net: mac802154: Fix a condition in the receive path net: Use u64_stats_fetch_begin_irq() for stats fetch. ip: fix triggering of 'icmp redirect' wifi: mac80211: Fix UAF in ieee80211_scan_rx() wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected driver core: Don't probe devices after bus_type.match() probe deferral usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS usb: xhci-mtk: fix bandwidth release issue usb: xhci-mtk: relax TT periodic bandwidth allocation USB: core: Prevent nested device-reset calls s390: fix nospec table alignments s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages usb-storage: Add ignore-residue quirk for NXP PN7462AU USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer usb: cdns3: fix issue with rearming ISO OUT endpoint usb: dwc2: fix wrong order of phy_power_on and phy_init usb: typec: tcpm: Return ENOTSUPP for power supply prop writes usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode USB: serial: option: add Quectel EM060K modem USB: serial: option: add support for OPPO R11 diag port USB: serial: cp210x: add Decagon UCA device id xhci: Add grace period after xHC start to prevent premature runtime suspend. media: mceusb: Use new usb_control_msg_*() routines usb: dwc3: pci: Add support for Intel Raptor Lake thunderbolt: Use the actual buffer in tb_async_error() xen-blkfront: Cache feature_persistent value before advertisement xen-blkfront: Advertise feature-persistent as user requested xen-blkback: Advertise feature-persistent as user requested mm: pagewalk: Fix race between unmap and page walker xen/grants: prevent integer overflow in gnttab_dma_alloc_pages() KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES gpio: pca953x: Add mutex_lock for regcache sync in PM hwmon: (gpio-fan) Fix array out of bounds access clk: bcm: rpi: Add missing newline clk: bcm: rpi: Prevent out-of-bounds access clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc() clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate Input: rk805-pwrkey - fix module autoloading clk: core: Fix runtime PM sequence in clk_core_unprepare() Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops" clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported" KVM: VMX: Heed the 'msr' argument in msr_write_intercepted() cifs: fix small mempool leak in SMB2_negotiate() binder: fix alloc->vma_vm_mm null-ptr dereference binder: fix UAF of ref->proc caused by race condition mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure mmc: core: Fix UHS-I SD 1.8V workaround branch USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id misc: fastrpc: fix memory corruption on open misc: fastrpc: fix memory corruption on probe iio: adc: mcp3911: use correct formula for AD conversion iio: ad7292: Prevent regulator double disable Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete musb: fix USB_MUSB_TUSB6010 dependency vt: Clear selection before changing the font powerpc: align syscall table for ppc32 staging: r8188eu: add firmware dependency staging: rtl8712: fix use after free bugs serial: fsl_lpuart: RS485 RTS polariy is inverse soundwire: qcom: fix device status array range net/smc: Remove redundant refcount increase Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb" tcp: annotate data-race around challenge_timestamp sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb kcm: fix strp_init() order and cleanup mlxbf_gige: compute MDIO period based on i1clk ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler net/sched: fix netdevice reference leaks in attach_default_qdiscs() net: sched: tbf: don't call qdisc_put() while holding tree lock net: dsa: xrs700x: Use irqsave variant for u64 stats update openvswitch: fix memory leak at failed datapath creation net: smsc911x: Stop and start PHY during suspend and resume net: sparx5: fix handling uneven length packets in manual extraction Revert "xhci: turn off port power in shutdown" wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg drm/i915/display: avoid warnings when registering dual panel backlight drm/i915/backlight: extract backlight code to a separate file ieee802154/adf7242: defer destroy_workqueue call bpf, cgroup: Fix kernel BUG in purge_effective_progs bpf: Restrict bpf_sys_bpf to CAP_PERFMON skmsg: Fix wrong last sg check in sk_msg_recvmsg() iio: adc: mcp3911: make use of the sign bit platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask drm/msm/dsi: Fix number of regulators for SDM660 drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4 drm/msm/dsi: fix the inconsistent indenting ANDROID: kleaf: Do not include GKI modules in default output of //common:kernel_aarch64. Linux 5.15.65 net: neigh: don't call kfree_skb() under spin_lock_irqsave() net/af_packet: check len when min_header_len equals to 0 android: binder: fix lockdep check on clearing vma btrfs: fix space cache corruption and potential double allocations kprobes: don't call disarm_kprobe() for disabled kprobes btrfs: tree-checker: check for overlapping extent items btrfs: fix lockdep splat with reloc root extent buffers btrfs: move lockdep class helpers to locking.c testing: selftests: nft_flowtable.sh: use random netns names netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y drm/amd/display: avoid doing vm_init multiple time drm/amdgpu: Increase tlb flush timeout for sriov drm/amd/display: Fix pixel clock programming drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid ksmbd: don't remove dos attribute xattr on O_TRUNC open s390/hypfs: avoid error message under KVM neigh: fix possible DoS due to net iface start/stop loop ksmbd: return STATUS_BAD_NETWORK_NAME error status if share is not configured drm/amd/display: clear optc underflow before turn off odm clock drm/amd/display: For stereo keep "FLIP_ANY_FRAME" drm/amd/display: Fix HDMI VSIF V3 incorrect issue drm/amd/display: Avoid MPC infinite loop ASoC: sh: rz-ssi: Improve error handling in rz_ssi_probe() error path fs/ntfs3: Fix work with fragmented xattr btrfs: fix warning during log replay when bumping inode link count btrfs: add and use helper for unlinking inode during log replay btrfs: remove no longer needed logic for replaying directory deletes btrfs: remove root argument from btrfs_unlink_inode() mmc: sdhci-of-dwcmshc: Re-enable support for the BlueField-3 SoC mmc: sdhci-of-dwcmshc: rename rk3568 to rk35xx mmc: sdhci-of-dwcmshc: add reset call back for rockchip Socs mmc: mtk-sd: Clear interrupts when cqe off/disable drm/i915/gt: Skip TLB invalidations once wedged HID: thrustmaster: Add sparco wheel and fix array length HID: asus: ROG NKey: Ignore portion of 0x5a report HID: AMD_SFH: Add a DMI quirk entry for Chromebooks HID: add Lenovo Yoga C630 battery quirk ALSA: usb-audio: Add quirk for LH Labs Geek Out HD Audio 1V5 mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse bpf: Don't redirect packets with invalid pkt_len ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead fbdev: fb_pm2fb: Avoid potential divide by zero error net: fix refcount bug in sk_psock_get (2) HID: hidraw: fix memory leak in hidraw_release() media: pvrusb2: fix memory leak in pvr_probe udmabuf: Set the DMA mask for the udmabuf device (v2) HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()" Bluetooth: L2CAP: Fix build errors in some archs kbuild: Fix include path in scripts/Makefile.modpost io_uring: fix UAF due to missing POLLFREE handling io_uring: fix wrong arm_poll error handling io_uring: fail links when poll fails io_uring: bump poll refs to full 31-bits io_uring: remove poll entry from list when canceling all io_uring: Remove unused function req_ref_put io_uring: poll rework io_uring: inline io_poll_complete io_uring: kill poll linking optimisation io_uring: move common poll bits io_uring: refactor poll update io_uring: clean cqe filling functions io_uring: correct fill events helpers types arm64: errata: Add Cortex-A510 to the repeat tlbi list mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pte Drivers: hv: balloon: Support status report for larger page sizes crypto: lib - remove unneeded selection of XOR_BLOCKS firmware: tegra: bpmp: Do only aligned access to IPC memory area drm/vc4: hdmi: Depends on CONFIG_PM drm/vc4: hdmi: Rework power up ACPI: thermal: drop an always true check drm/bridge: Add stubs for devm_drm_of_get_bridge when OF is disabled mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() Linux 5.15.64 bpf: Don't use tnum_range on array range checking for poke descriptors scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq scsi: ufs: core: Enable link lost interrupt perf stat: Clear evsel->reset_group for each stat run perf/x86/intel/ds: Fix precise store latency handling perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU perf python: Fix build when PYTHON_CONFIG is user supplied blk-mq: fix io hung due to missing commit_rqs Documentation/ABI: Mention retbleed vulnerability info file for sysfs x86/nospec: Fix i386 RSB stuffing binder_alloc: add missing mmap_lock calls when using the VMA arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76 mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skb md: call __md_stop_writes in md_stop Revert "md-raid: destroy the bitmap after destroying the thread" mm/hugetlb: fix hugetlb not supporting softdirty tracking Revert "usbnet: smsc95xx: Forward PHY interrupts to PHY driver to avoid polling" Revert "usbnet: smsc95xx: Fix deadlock on runtime resume" io_uring: fix issue with io_write() not always undoing sb_start_write() riscv: traps: add missing prototype xen/privcmd: fix error exit of privcmd_ioctl_dm_op() smb3: missing inode locks in punch hole nouveau: explicitly wait on the fence in nouveau_bo_move_m2mf ACPI: processor: Remove freq Qos request for all CPUs Revert "memcg: cleanup racy sum avoidance code" fbdev: fbcon: Properly revert changes when vc_resize() failed s390: fix double free of GS and RI CBs on fork() failure bootmem: remove the vmemmap pages from kmemleak in put_page_bootmem s390/mm: do not trigger write fault when vma does not allow VM_WRITE mm/damon/dbgfs: avoid duplicate context directory creation asm-generic: sections: refactor memory_intersects writeback: avoid use-after-free after removing device loop: Check for overflow while configuring loop x86/nospec: Unwreck the RSB stuffing x86/bugs: Add "unknown" reporting for MMIO Stale Data x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry perf/x86/lbr: Enable the branch type for the Arch LBR by default btrfs: fix possible memory leak in btrfs_get_dev_args_from_path() btrfs: check if root is readonly while setting security xattr btrfs: add info when mount fails due to stale replace target btrfs: replace: drop assert for suspended replace btrfs: fix silent failure when deleting root reference net: stmmac: work around sporadic tx issue on link-up ionic: VF initial random MAC address if no assigned mac ionic: fix up issues with handling EAGAIN on FW cmds ionic: clear broken state on generation change ionic: widen queue_lock use around lif init and deinit rxrpc: Fix locking in rxrpc's sendmsg i40e: Fix incorrect address type for IPv6 flow rules ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter net: Fix a data-race around sysctl_somaxconn. net: Fix data-races around sysctl_devconf_inherit_init_net. net: Fix data-races around sysctl_fb_tunnels_only_for_init_net. net: Fix a data-race around netdev_budget_usecs. net: Fix data-races around sysctl_max_skb_frags. mptcp: stop relying on tcp_tx_skb_cache tcp: expose the tcp_mark_push() and tcp_skb_entail() helpers net: Fix a data-race around netdev_budget. net: Fix a data-race around sysctl_net_busy_read. net: Fix a data-race around sysctl_net_busy_poll. net: Fix a data-race around sysctl_tstamp_allow_data. net: Fix data-races around sysctl_optmem_max. ratelimit: Fix data-races in ___ratelimit(). net: Fix data-races around netdev_tstamp_prequeue. net: Fix data-races around netdev_max_backlog. net: Fix data-races around weight_p and dev_weight_[rt]x_bias. net: Fix data-races around sysctl_[rw]mem_(max|default). netfilter: flowtable: fix stuck flows on cleanup due to pending work netfilter: flowtable: add function to invoke garbage collection immediately netfilter: nf_tables: disallow binding to already bound chain netfilter: nf_tables: disallow jump to implicit chain from set element netfilter: nf_tables: upfront validation of data via nft_data_init() netfilter: bitwise: improve error goto labels netfilter: nft_cmp: optimize comparison for 16-bytes netfilter: nf_tables: consolidate rule verdict trace call netfilter: nft_tunnel: restrict it to netdev family netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families netfilter: nf_tables: do not leave chain stats enabled on error netfilter: nft_payload: do not truncate csum_offset and csum_type netfilter: nft_payload: report ERANGE for too long offset and length netfilter: nf_tables: make table handle allocation per-netns friendly netfilter: nf_tables: disallow updates of implicit chain bnxt_en: fix NQ resource accounting during vf creation on 57500 chips netfilter: ebtables: reject blobs that don't provide all entry points net: ipvtap - add __init/__exit annotations to module init/exit funcs bonding: 802.3ad: fix no transmission of LACPDUs net: moxa: get rid of asymmetry in DMA mapping/unmapping net: phy: Don't WARN for PHY_READY state in mdio_bus_phy_resume() net: ipa: don't assume SMEM is page-aligned net/mlx5e: Fix wrong tc flag used when set hw-tc-offload off net/mlx5e: Fix wrong application of the LRO state net/mlx5: Avoid false positive lockdep warning by adding lock_class_key net/mlx5e: Properly disable vlan strip on non-UL reps ice: xsk: prohibit usage of non-balanced queue id ice: xsk: Force rings to be sized to power of 2 nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout r8152: fix the RX FIFO settings when suspending r8152: fix the units of some registers for RTL8156A rose: check NULL rose_loopback_neigh->loopback ntfs: fix acl handling mm/smaps: don't access young/dirty bit if pte unpresent SUNRPC: RPC level errors should set task->tk_rpc_status NFSv4.2 fix problems with __nfs42_ssc_open NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open() Revert "net: macsec: update SCI upon MAC address change." net: use eth_hw_addr_set() instead of ether_addr_copy() fs: require CAP_SYS_ADMIN in target namespace for idmapped mounts xfrm: policy: fix metadata dst->dev xmit null pointer dereference af_key: Do not call xfrm_probe_algs in parallel xfrm: clone missing x->lastused in xfrm_do_migrate xfrm: fix refcount leak in __xfrm_policy_check() riscv: lib: uaccess: fix CSR_STATUS SR_SUM bit riscv: lib: uaccess: fold fixups into body btrfs: remove unnecessary parameter delalloc_start for writepage_delalloc() btrfs: pass the dentry to btrfs_log_new_name() instead of the inode btrfs: put initial index value of a directory in a constant scsi: qla2xxx: edif: Fix dropped IKE message scsi: qla2xxx: Fix response queue handler reading stale packets drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist Input: i8042 - add additional TUXEDO devices to i8042 quirk tables Input: i8042 - add TUXEDO devices to i8042 quirk tables Input: i8042 - merge quirk tables Input: i8042 - move __initconst to fix code styling warning btrfs: convert count_max_extents() to use fs_info->max_extent_size btrfs: replace BTRFS_MAX_EXTENT_SIZE with fs_info->max_extent_size btrfs: zoned: revive max_zone_append_bytes block: add bdev_max_segments() helper block: add a bdev_max_zone_append_sectors helper x86/entry: Move CLD to the start of the idtentry macro kernel/sys_ni: add compat entry for fadvise64_64 parisc: Fix exception handler for fldw and fstw instructions parisc: Make CONFIG_64BIT available for ARCH=parisc64 only cgroup: Fix race condition at rebind_subsystems() audit: fix potential double free on error path from fsnotify_add_inode_mark eth: sun: cassini: remove dead code wifi: rtlwifi: remove always-true condition pointed out by GCC 12 Revert "ALSA: control: Use deferred fasync helper" Linux 5.15.63 xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* xfs: revert "xfs: actually bump warning counts when we send warnings" xfs: fix soft lockup via spinning in filestream ag selection loop xfs: fix overfilling of reserve pool xfs: always succeed at setting the reserve pool size xfs: remove infinite loop when reserving free block pool xfs: reserve quota for target dir expansion when renaming files xfs: reserve quota for dir expansion when linking/unlinking files xfs: flush inodegc workqueue tasks before cancel scsi: ufs: ufs-mediatek: Fix build error and type mismatch can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0 video: fbdev: i740fb: Check the argument of i740_calc_vclk() venus: pm_helpers: Fix warning in OPP during probe powerpc/64: Init jump labels before parse_early_param() smb3: check xattr value length earlier f2fs: fix to do sanity check on segment type in build_sit_entries() f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page() ALSA: control: Use deferred fasync helper ALSA: timer: Use deferred fasync helper ALSA: core: Add async signal helpers powerpc/ioda/iommu/debugfs: Generate unique debugfs entries ovl: warn if trusted xattr creation fails powerpc/32: Don't always pass -mcpu=powerpc to the compiler powerpc/32: Set an IBAT covering up to _einittext during init watchdog: export lockup_detector_reconfigure RISC-V: Add fast call path of crash_kexec() riscv: mmap with PROT_WRITE but no PROT_READ is invalid riscv: dts: canaan: Add k210 topology information riscv: dts: sifive: Add fu740 topology information ASoC: rsnd: care default case on rsnd_ssiu_busif_err_irq_ctrl() modules: Ensure natural alignment for .altinstructions and __bug_table sections iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start vfio: Clear the caps->buf to NULL after free KVM: PPC: Book3S HV: Fix "rm_exit" entry in debugfs timings tty: serial: Fix refcount leak bug in ucc_uart.c lib/list_debug.c: Detect uninitialized lists ext4: avoid resizing to a partial cluster size ext4: avoid remove directory when directory is corrupted drivers:md:fix a potential use-after-free bug nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown md: Notify sysfs sync_completed in md_reap_sync_thread() phy: samsung: phy-exynos-pcie: sanitize init/power_on callbacks openrisc: io: Define iounmap argument as volatile dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed selftests/kprobe: Do not test for GRP/ without event failures csky/kprobe: reclaim insn_slot on kprobe unregistration RDMA/rxe: Limit the number of calls to each tasklet dmaengine: dw-axi-dmac: ignore interrupt if no descriptor dmaengine: dw-axi-dmac: do not print NULL LLI during error um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups PCI/ACPI: Guard ARM64-specific mcfg_quirks cxl: Fix a memory leak in an error handling path pinctrl: intel: Check against matching data instead of ACPI companion mmc: tmio: avoid glitches when resetting habanalabs/gaudi: mask constant value before cast habanalabs/gaudi: fix shift out of bounds coresight: etm4x: avoid build failure with unrolled loops gadgetfs: ep_io - wait until IRQ finishes scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input clk: qcom: clk-alpha-pll: fix clk_trion_pll_configure description zram: do not lookup algorithm in backends table uacce: Handle parent device removal or parent driver module rmmod clk: qcom: ipq8074: dont disable gcc_sleep_clk_src vboxguest: Do not use devm for irq usb: dwc2: gadget: remove D+ pull-up while no vbus with usb-role-switch usb: renesas: Fix refcount leak bug usb: host: ohci-ppc-of: Fix refcount leak bug scsi: ufs: ufs-mediatek: Fix the timing of configuring device regulators clk: ti: Stop using legacy clkctrl names for omap4 and 5 drm/meson: Fix overflow implicit truncation warnings irqchip/tegra: Fix overflow implicit truncation warnings PCI: aardvark: Fix reporting Slot capabilities on emulated bridge usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info usb: gadget: uvc: calculate the number of request depending on framesize usb: cdns3: fix random warning message when driver load usb: cdns3 fix use-after-free at workaround 2 platform/chrome: cros_ec_proto: don't show MKBP version if unsupported PCI: Add ACS quirk for Broadcom BCM5750x NICs HID: multitouch: new device class fix Lenovo X12 trackpad sticky KVM: arm64: Reject 32bit user PSTATE on asymmetric systems KVM: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems net: qrtr: start MHI channel after endpoit creation drm/sun4i: dsi: Prevent underflow when computing packet sizes drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf() ASoC: SOF: Intel: hda: Define rom_status_reg in sof_intel_dsp_desc drm/imx/dcss: get rid of HPD warning message tracing/eprobes: Fix reading of string fields gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file kbuild: fix the modules order between drivers and libs igb: Add lock to avoid data race stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove() fec: Fix timer capture timing in `fec_ptp_enable_pps()` i40e: Fix to stop tx_timeout recovery if GLOBR fails regulator: pca9450: Remove restrictions for regulator-name i2c: imx: Make sure to unregister adapter on remove() ice: Ignore EEXIST when setting promisc mode net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions() net: dsa: don't warn in dsa_port_set_state_now() when driver doesn't support it net: genl: fix error path memory leak in policy dumping net: dsa: felix: fix ethtool 256-511 and 512-1023 TX packet counters net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry net: fix potential refcount leak in ndisc_router_discovery() net: moxa: pass pdev instead of ndev to DMA functions mlxsw: spectrum: Clear PTP configuration after unregistering the netdevice net: dsa: mv88e6060: prevent crash on an unused port net/sunrpc: fix potential memory leaks in rpc_sysfs_xprt_state_change() spi: meson-spicc: add local pow2 clock ops to preserve rate between messages powerpc/pci: Fix get_phb_number() locking netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified netfilter: nf_tables: disallow NFT_SET_ELEM_CATCHALL and NFT_SET_ELEM_INTERVAL_END netfilter: nf_tables: NFTA_SET_ELEM_KEY_END requires concat and interval flags netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag netfilter: nf_tables: really skip inactive sets when allocating name netfilter: nf_tables: possible module reference underflow in error path netfilter: nf_tables: disallow NFTA_SET_ELEM_KEY_END with NFT_SET_ELEM_INTERVAL_END flag fs/ntfs3: uninitialized variable in ntfs_set_acl_ex() netfilter: nf_tables: use READ_ONCE and WRITE_ONCE for shared generation id access ASoC: codec: tlv320aic32x4: fix mono playback via I2S ASoC: tas2770: Fix handling of mute/unmute ASoC: tas2770: Drop conflicting set_bias_level power setting ASoC: tas2770: Allow mono streams ASoC: tas2770: Set correct FSYNC polarity ASoC: SOF: debug: Fix potential buffer overflow by snprintf() iavf: Fix reset error handling iavf: Fix adminq error handling nios2: add force_successful_syscall_return() nios2: restarts apply only to the first sigframe we build... nios2: fix syscall restart checks nios2: traced syscall does need to check the syscall number nios2: don't leave NULLs in sys_call_table[] nios2: page fault et.al. are *not* restartable syscalls... fs/ntfs3: Fix missing i_op in ntfs_read_mft fs/ntfs3: Do not change mode if ntfs_set_ea failed fs/ntfs3: Fix double free on remount fs/ntfs3: Don't clear upper bits accidentally in log_replay() fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr fs/ntfs3: Fix using uninitialized value n when calling indx_read dpaa2-eth: trace the allocated address instead of page struct perf tests: Fix Track with sched_switch test for hybrid case perf parse-events: Fix segfault when event parser gets an error perf probe: Fix an error handling path in 'parse_perf_probe_command()' geneve: fix TOS inheriting for ipv4 atm: idt77252: fix use-after-free bugs caused by tst_timer xen/xenbus: fix return type in xenbus_file_read() nfp: ethtool: fix the display error of `ethtool -m DEVNAME` NTB: ntb_tool: uninitialized heap data in tool_fn_write() tools build: Switch to new openssl API for test-libcrypto kbuild: dummy-tools: avoid tmpdir leak in dummy gcc ceph: don't leak snap_rwsem in handle_cap_grant tools/vm/slabinfo: use alphabetic order when two values are equal ceph: use correct index when encoding client supported features spi: dt-bindings: zynqmp-qspi: add missing 'required' spi: dt-bindings: cadence: add missing 'required' dt-bindings: clock: qcom,gcc-msm8996: add more GCC clock sources dt-bindings: arm: qcom: fix MSM8994 boards compatibles dt-bindings: arm: qcom: fix MSM8916 MTP compatibles dt-bindings: arm: qcom: fix Longcheer L8150 compatibles dt-bindings: gpio: zynq: Add missing compatible strings vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() vsock: Fix memory leak in vsock_connect() plip: avoid rcu debug splat ipv6: do not use RT_TOS for IPv6 flowlabel mlx5: do not use RT_TOS for IPv6 flowlabel geneve: do not use RT_TOS for IPv6 flowlabel ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool octeontx2-af: Fix key checking for source mac octeontx2-af: Fix mcam entry resource leak octeontx2-af: suppress external profile loading warning octeontx2-af: Apply tx nibble fixup always octeontx2-pf: Fix NIX_AF_TL3_TL2X_LINKX_CFG register configuration Input: exc3000 - fix return value check of wait_for_completion_timeout pinctrl: qcom: sm8250: Fix PDC map pinctrl: sunxi: Add I/O bias setting for H6 R-PIO pinctrl: amd: Don't save/restore interrupt status and wake status bits pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map dt-bindings: arm: qcom: fix Alcatel OneTouch Idol 3 compatibles selftests: forwarding: Fix failing tests with old libnet net: bgmac: Fix a BUG triggered by wrong bytes_compl net: bcmgenet: Indicate MAC is in charge of PHY PM net: phy: Warn about incorrect mdio_bus_phy_resume() state devlink: Fix use-after-free after a failed reload virtio_net: fix memory leak inside XPD_TX with mergeable SUNRPC: Reinitialise the backchannel request buffers before reuse SUNRPC: Fix xdr_encode_bool() sunrpc: fix expiry of auth creds m68k: coldfire/device.c: protect FLEXCAN blocks net: atlantic: fix aq_vec index out of range error can: j1939: j1939_session_destroy(): fix memory leak of skbs can: mcp251x: Fix race condition on receive interrupt bpf: Check the validity of max_rdwr_access for sock local storage map iterator bpf: Acquire map uref in .init_seq_private for sock{map,hash} iterator bpf: Acquire map uref in .init_seq_private for sock local storage map iterator bpf: Acquire map uref in .init_seq_private for hash map iterator bpf: Acquire map uref in .init_seq_private for array map iterator bpf: Don't reinit map value in prealloc_lru_pop BPF: Fix potential bad pointer dereference in bpf_sys_bpf() NFSv4/pnfs: Fix a use-after-free bug in open NFSv4.1: RECLAIM_COMPLETE must handle EACCES NFSv4: Fix races in the legacy idmapper upcall NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly NFSv4.1: Don't decrease the value of seq_nr_highest_sent Documentation: ACPI: EINJ: Fix obsolete example apparmor: Fix memleak in aa_simple_write_to_buffer() apparmor: fix reference count leak in aa_pivotroot() apparmor: fix overlapping attachment computation apparmor: fix setting unconfined mode on a loaded profile apparmor: fix aa_label_asxprint return check apparmor: Fix failed mount permission check error message apparmor: fix absroot causing audited secids to begin with = apparmor: fix quiet_denied for file rules can: ems_usb: fix clang's -Wunaligned-access warning dt-bindings: usb: mtk-xhci: Allow wakeup interrupt-names to be optional ALSA: usb-audio: More comprehensive mixer map for ASUS ROG Zenith II tracing: Have filter accept "common_cpu" to be consistent tracing/probes: Have kprobes and uprobes use $COMM too tracing/eprobes: Have event probes be consistent with kprobes and uprobes tracing/eprobes: Do not hardcode $comm as a string tracing/eprobes: Do not allow eprobes to use $stack, or % for regs tracing/perf: Fix double put of trace event when init fails x86/kprobes: Fix JNG/JNLE emulation cifs: Fix memory leak on the deferred close btrfs: fix lost error handling when looking up extended ref on log replay btrfs: reset RO counter on block group if we fail to relocate btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() mmc: meson-gx: Fix an error handling path in meson_mmc_probe() mmc: pxamci: Fix an error handling path in pxamci_probe() mmc: pxamci: Fix another error handling path in pxamci_probe() ata: libata-eh: Add missing command name drm/amd/display: Check correct bounds for stream encoder instances for DCN303 drm/ttm: Fix dummy res NULL ptr deref bug drm/nouveau: recognise GA103 locking/atomic: Make test_and_*_bit() ordered on failure rds: add missing barrier to release_refill x86/mm: Use proper mask when setting PUD mapping KVM: Unconditionally get a ref to /dev/kvm module when creating a VM ALSA: hda/realtek: Add quirk for Clevo NS50PU, NS70PU ALSA: info: Fix llseek return value when using callback Revert "android: binder: stop saving a pointer to the VMA" Revert "memremap: remove support for external pgmap refcounts" Revert "mm/memremap: fix memunmap_pages() race with get_dev_pagemap()" Revert "sched/fair: Introduce SIS_UTIL to search idle CPU based on sum of util_avg" Revert "USB: HCD: Fix URB giveback issue in tasklet function" Revert "serial: 8250: dma: Allow driver operations before starting DMA transfers" UPSTREAM: drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init Revert "drm/shmem-helper: Pass GEM shmem object in public interfaces" Revert "drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init" Linux 5.15.62 btrfs: raid56: don't trust any cached sector in __raid56_parity_recover() btrfs: only write the sectors in the vertical stripe which has data stripes x86/ftrace: Use alternative RET encoding x86/ibt,ftrace: Make function-graph play nice Revert "x86/ftrace: Use alternative RET encoding" ksmbd: fix heap-based overflow in set_ntacl_dacl() ksmbd: prevent out of bound read for SMB2_WRITE net_sched: cls_route: disallow handle of 0 tee: add overflow check in register_shm_helper() io_uring: use original request task for inflight tracking Linux 5.15.61 scsi: lpfc: Resolve some cleanup issues following SLI path refactoring scsi: lpfc: Fix element offset in __lpfc_sli_release_iocbq_s4() scsi: lpfc: Fix locking for lpfc_sli_iocbq_lookup() drm/bridge: Move devm_drm_of_get_bridge to bridge/panel.c Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP" io_uring: mem-account pbuf buckets drm/meson: Fix refcount leak in meson_encoder_hdmi_init drm/msm: Fix dirtyfb refcounting tracing/perf: Avoid -Warray-bounds warning for __rel_loc macro drm/vc4: change vc4_dma_range_matches from a global to static net: phy: smsc: Disable Energy Detect Power-Down in interrupt mode drm/bridge: tc358767: Fix (e)DP bridge endpoint parsing in dedicated function Revert "s390/smp: enforce lowcore protection on CPU restart" Revert "mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv" crypto: lib/blake2s - reduce stack frame usage in self test tcp: fix over estimation in sk_forced_mem_schedule() mac80211: fix a memory leak where sta_info is not freed net_sched: cls_route: remove from list when handle is 0 tracing: Use a struct alignof to determine trace event field alignment powerpc: Fix eh field when calling lwarx on PPC32 xen-blkfront: Apply 'feature_persistent' parameter when connect xen-blkback: Apply 'feature_persistent' parameter when connect xen-blkback: fix persistent grants negotiation tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH KEYS: asymmetric: enforce SM2 signature use pkey algo ext4: fix race when reusing xattr blocks ext4: unindent codeblock in ext4_xattr_block_set() ext4: use kmemdup() to replace kmalloc + memcpy ext4: remove EA inode entry from mbcache on inode eviction ext4: make sure ext4_append() always allocates new block ext4: check if directory block is within i_size ext4: fix warning in ext4_iomap_begin as race between bmap and write ext4: correct the misjudgment in ext4_iget_extra_inode ext4: correct max_inline_xattr_value_size computing ext4: fix use-after-free in ext4_xattr_set_entry ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h ext4: fix extent status tree race in writeback error recovery path ext4: update s_overhead_clusters in the superblock during an on-line resize tracing: Avoid -Warray-bounds warning for __rel_loc macro tracing: Add '__rel_loc' using trace event macros dm raid: fix address sanitizer warning in raid_resume dm raid: fix address sanitizer warning in raid_status KVM: nVMX: Attempt to load PERF_GLOBAL_CTRL on nVMX xfer iff it exists KVM: VMX: Add helper to check if the guest PMU has PERF_GLOBAL_CTRL KVM: x86/pmu: Ignore pmu->global_ctrl check if vPMU doesn't support global_ctrl KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU KVM: x86/pmu: Introduce the ctrl_mask value for fixed counter powerpc/powernv/kvm: Use darn for H_RANDOM on Power9 ACPI: CPPC: Do not prevent CPPC from working in the future btrfs: properly flag filesystem with BTRFS_FEATURE_INCOMPAT_BIG_METADATA btrfs: reset block group chunk force if we have to wait btrfs: ensure pages are unlocked on cow_file_range() failure block: don't allow the same type rq_qos add more than once block: remove the struct blk_queue_ctx forward declaration locking/csd_lock: Change csdlock_debug from early_param to __setup timekeeping: contribute wall clock to rng on time change ARM: remove some dead code net/9p: Initialize the iounit field during fid creation dm thin: fix use-after-free crash in dm_sm_register_threshold_callback kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification dm writecache: set a default MAX_WRITEBACK_JOBS tty: 8250: Add support for Brainboxes PX cards. serial: 8250: Add proper clock handling for OxSemi PCIe devices serial: 8250: Fold EndRun device support into OxSemi Tornado code serial: 8250_pci: Replace dev_*() by pci_*() macros serial: 8250_pci: Refactor the loop in pci_ite887x_init() PCI: qcom: Power on PHY before IPQ8074 DBI register accesses PCI/AER: Iterate over error counters instead of error strings iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS) KVM: set_msr_mce: Permit guests to ignore single-bit ECC errors intel_th: pci: Add Raptor Lake-S CPU support intel_th: pci: Add Raptor Lake-S PCH support intel_th: pci: Add Meteor Lake-P support scsi: lpfc: Remove extra atomic_inc on cmd_pending in queuecommand after VMID scsi: lpfc: SLI path split: Refactor SCSI paths scsi: lpfc: SLI path split: Refactor fast and slow paths to native SLI4 scsi: lpfc: SLI path split: Refactor lpfc_iocbq scsi: lpfc: Fix EEH support for NVMe I/O firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails usbnet: smsc95xx: Fix deadlock on runtime resume usbnet: smsc95xx: Forward PHY interrupts to PHY driver to avoid polling usbnet: smsc95xx: Avoid link settings race on interrupt reception usbnet: smsc95xx: Don't clear read-only PHY interrupt drm/vc4: drv: Adopt the dma configuration from the HVS or V3D component drm/dp/mst: Read the extended DPCD capabilities during system resume crypto: blake2s - remove shash module drm/mediatek: Keep dsi as LP00 before dcs cmds transfer drm/mediatek: Allow commands to be sent during video mode spmi: trace: fix stack-out-of-bound access in SPMI tracing functions __follow_mount_rcu(): verify that mount_lock remains unchanged Input: gscps2 - check return value of ioremap() in gscps2_probe() posix-cpu-timers: Cleanup CPU timers before freeing them during exec SMB3: fix lease break timeout when multiple deferred close handles for the same file. x86/olpc: fix 'logical not is only applied to the left hand side' x86/kprobes: Update kcb status flag after singlestepping ftrace/x86: Add back ftrace_expected assignment x86/bugs: Enable STIBP for IBPB mitigated RETBleed scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests scsi: qla2xxx: Fix losing target when it reappears during delete scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os scsi: qla2xxx: Wind down adapter after PCIe error scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection scsi: qla2xxx: Fix excessive I/O error messages by default scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts scsi: qla2xxx: Turn off multi-queue for 8G adapters scsi: qla2xxx: Fix discovery issues in FC-AL topology scsi: qla2xxx: Fix imbalance vha->vref_count scsi: zfcp: Fix missing auto port scan and thus missing target ports scsi: ufs: core: Correct ufshcd_shutdown() flow video: fbdev: s3fb: Check the size of screen before memset_io() video: fbdev: arkfb: Check the size of screen before memset_io() video: fbdev: vt8623fb: Check the size of screen before memset_io() f2fs: do not allow to decompress files have FI_COMPRESS_RELEASED f2fs: allow compression for mmap files in compress_mode=user x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y sched/core: Do not requeue task on CPU excluded from cpus_mask sched: Remove the limitation of WF_ON_CPU on wakelist if wakee cpu is idle sched: Fix the check of nr_running at queue wakelist tools/thermal: Fix possible path truncations video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() x86/numa: Use cpumask_available instead of hardcoded NULL check sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() scripts/faddr2line: Fix vmlinux detection on arm64 genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO powerpc/pci: Fix PHB numbering when using opal-phbid x86/bus_lock: Don't assume the init value of DEBUGCTLMSR.BUS_LOCK_DETECT to be zero kprobes: Forbid probing on trampoline and BPF code areas perf symbol: Fail to read phdr workaround powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address powerpc/xive: Fix refcount leak in xive_get_max_prio powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader f2fs: fix to remove F2FS_COMPR_FL and tag F2FS_NOCOMP_FL at the same time s390/smp: enforce lowcore protection on CPU restart s390/maccess: rework absolute lowcore accessors s390/smp: cleanup control register update routines s390/smp: cleanup target CPU callback starting s390/dump: fix os_info virtual vs physical address confusion tty: serial: fsl_lpuart: correct the count of break characters powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32 powerpc/32: Call mmu_mark_initmem_nx() regardless of data block mapping. ASoC: mchp-spdifrx: disable end of block interrupt on failures video: fbdev: sis: fix typos in SiS_GetModeID() video: fbdev: amba-clcd: Fix refcount leak bugs watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe() watchdog: sp5100_tco: Fix a memory leak of EFCH MMIO resource ASoC: audio-graph-card: Add of_node_put() in fail path fuse: Remove the control interface for virtio-fs ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp() ASoC: imx-card: use snd_pcm_format_t type for asrc_format ASoC: fsl_easrc: use snd_pcm_format_t type for sample_format ASoC: fsl-asoc-card: force cast the asrc_format type ASoC: fsl_asrc: force cast the asrc_format type s390/zcore: fix race when reading from hardware system area s390/crash: fix incorrect number of bytes to copy to user space s390/maccess: fix semantics of memcpy_real() and its callers s390/dump: fix old lowcore virtual vs physical address confusion perf tools: Fix dso_id inode generation comparison iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop mfd: max77620: Fix refcount leak in max77620_initialise_fps mfd: t7l66xb: Drop platform disable callback remoteproc: sysmon: Wait for SSCTL service to come up remoteproc: qcom: pas: Check if coredump is enabled proc: fix a dentry lock race between release_task and lookup lib/smp_processor_id: fix imbalanced instrumentation_end() call kfifo: fix kfifo_to_user() return type rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge MIPS: Fixed __debug_virt_addr_valid() net: 9p: fix refcount leak in p9_read_work() error handling 9p: Add client parameter to p9_req_put() 9p: Drop kref usage 9p: fix a bunch of checkpatch warnings iommu/exynos: Handle failed IOMMU device registration properly serial: 8250_bcm7271: Save/restore RTS in suspend/resume ASoC: mt6359: Fix refcount leak bug swiotlb: fail map correctly with failed io_tlb_default_mem MIPS: vdso: Utilize __pa() for gic_pfn tty: n_gsm: fix missing corner cases in gsmld_poll() tty: n_gsm: fix DM command tty: n_gsm: fix wrong T1 retry count handling serial: 8250_fsl: Don't report FE, PE and OE twice vfio/ccw: Do not change FSM state in subchannel event remoteproc: qcom: wcnss: Fix handling of IRQs ASoC: imx-card: Fix DSD/PDM mclk frequency ASoC: qcom: Fix missing of_node_put() in asoc_qcom_lpass_cpu_platform_probe() tty: n_gsm: fix resource allocation order in gsm_activate_mux() tty: n_gsm: fix race condition in gsmld_write() tty: n_gsm: fix packet re-transmission without open control channel tty: n_gsm: fix non flow control frames during mux flow off tty: n_gsm: fix missing timer to handle stalled links tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output() tty: n_gsm: fix tty registration before control channel open tty: n_gsm: fix user open not possible at responder until initiator open tty: n_gsm: Delete gsmtty open SABM frame when config requester ASoC: samsung: change gpiod_speaker_power and rx1950_audio from global to static variables powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable ASoC: samsung: h1940_uda1380: include proepr GPIO consumer header remoteproc: imx_rproc: Fix refcount leak in imx_rproc_addr_init profiling: fix shift too large makes kernel panic selftests/livepatch: better synchronize test_klp_callbacks_busy remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init rpmsg: mtk_rpmsg: Fix circular locking dependency rpmsg: char: Add mutex protection for rpmsg_eptdev_open() ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty() serial: 8250: dma: Allow driver operations before starting DMA transfers serial: 8250: Export ICR access helpers for internal use ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe ASoC: codecs: da7210: add check for i2c_add_driver ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe ASoC: imx-audmux: Silence a clang warning ASoC: samsung: Fix error handling in aries_audio_probe ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe opp: Fix error check in dev_pm_opp_attach_genpd() usb: cdns3: Don't use priv_dev uninitialized in cdns3_gadget_ep_enable() jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted ext4: recover csum seed of tmp_inode after migrating to extents jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction() block: ensure iov_iter advances for added pages block/bio: remove duplicate append pages code nvme: catch -ENODEV from nvme_revalidate_zones again nvme: don't return an error from nvme_configure_metadata nvme: disable namespace access for unsupported metadata nvme: define compat_ioctl again to unbreak 32-bit userspace. nvme: use command_id instead of req->tag in trace_nvme_complete_rq() null_blk: fix ida error handling in null_add_dev() block/rnbd-srv: Set keep_id to true after mutex_trylock RDMA/rxe: Fix error unwind in rxe_create_qp() RDMA/rxe: Remove the is_user members of struct rxe_sq/rxe_rq/rxe_srq RDMA/rxe: Add memory barriers to kernel queues RDMA/mlx5: Add missing check for return value in get namespace flow of/fdt: declared return type does not match actual return type selftests: kvm: set rax before vmcall mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region android: binder: stop saving a pointer to the VMA RDMA/srpt: Fix a use-after-free RDMA/srpt: Introduce a reference count in struct srpt_device RDMA/srpt: Duplicate port name members platform/olpc: Fix uninitialized data in debugfs write KVM: nVMX: Set UMIP bit CR4_FIXED1 MSR when emulating UMIP mtd: spi-nor: fix spi_nor_spimem_setup_op() call in spi_nor_erase_{sector,chip}() usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() USB: serial: fix tty-port initialized comments HID: amd_sfh: Handle condition of "no sensors" PCI: tegra194: Fix link up retry sequence PCI: tegra194: Fix Root Port interrupt handling RDMA/rxe: For invalidate compare according to set keys in mr HID: alps: Declare U1_UNICORN_LEGACY support mmc: cavium-thunderx: Add of_node_put() when breaking out of loop mmc: cavium-octeon: Add of_node_put() when breaking out of loop RDMA/rxe: Fix mw bind to allow any consumer key portion scripts/gdb: fix 'lx-dmesg' on 32 bits arch scripts/gdb: lx-dmesg: read records individually dmaengine: imx-dma: Cast of_device_get_match_data() with (uintptr_t) HID: amd_sfh: Add NULL check for hid device HID: mcp2221: prevent a buffer overflow in mcp_smbus_write() gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() RDMA/hfi1: fix potential memory leak in setup_base_ctxt() clk: qcom: gcc-msm8939: Fix weird field spacing in ftbl_gcc_camss_cci_clk iio: cros: Register FIFO callback after sensor is registered RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event RDMA/hns: Fix incorrect clearing of interrupt status register RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() RDMA/rtrs-clt: Replace list_next_or_null_rr_rcu with an inline function RDMA/rtrs-clt: Rename rtrs_clt_sess to rtrs_clt_path RDMA/rtrs-srv: Rename rtrs_srv_sess to rtrs_srv_path RDMA/rtrs: Rename rtrs_sess to rtrs_path RDMA/rtrs: Do not allow sessname to contain special symbols / and . RDMA/rtrs: Introduce destroy_cq helper RDMA/rtrs: Replace duplicate check with is_pollqueue helper RDMA/rtrs: Fix warning when use poll mode on client side. RDMA/rtrs-srv: Fix modinfo output for stringify RDMA/irdma: Fix setting of QP context err_rq_idx_valid field RDMA/irdma: Fix VLAN connection with wildcard address RDMA/irdma: Fix a window for use-after-free um: random: Don't initialise hwrng struct with zero interconnect: imx: fix max_node_id phy: stm32: fix error return in stm32_usbphyc_phy_init eeprom: idt_89hpesx: uninitialized data in idt_dbgfs_csr_write() usb: dwc3: qcom: fix missing optional irq warnings usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup usb: dwc3: core: Deprecate GCTL.CORESOFTRESET usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() usb: gadget: udc: amd5536 depends on HAS_DMA xtensa: iss: fix handling error cases in iss_net_configure() xtensa: iss/network: provide release() callback scsi: smartpqi: Fix DMA direction for RAID requests PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks PCI/portdrv: Don't disable AER reporting in get_port_device_capability() KVM: s390: pv: leak the topmost page table when destroy fails mmc: block: Add single read for 4k sector cards of: device: Fix missing of_node_put() in of_dma_set_restricted_buffer mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R memstick/ms_block: Fix a memory leak memstick/ms_block: Fix some incorrect memory allocation mmc: renesas_sdhi: Get the reset handle early in the probe mmc: mxcmmc: Silence a clang warning mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback binder: fix redefinition of seq_file attributes intel_th: msu: Fix vmalloced buffers intel_th: msu-sink: Potential dereference of null pointer intel_th: Fix a resource leak in an error handling path scsi: qla2xxx: Check correct variable in qla24xx_async_gffid() PCI: endpoint: Don't stop controller when unbinding endpoint function dmaengine: sf-pdma: Add multithread support for a DMA channel KVM: arm64: Don't return from void function soundwire: revisit driver bind/unbind and callbacks soundwire: bus_type: fix remove and shutdown support PCI: dwc: Always enable CDM check if "snps,enable-cdm-check" exists PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors PCI: dwc: Set INCREASE_REGION_SIZE flag based on limit address PCI: dwc: Disable outbound windows only for controllers using iATU PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu() PCI: dwc: Stop link on host_init errors and de-initialization mm/mempolicy: fix get_nodes out of bound access clk: qcom: clk-rcg2: Make sure to not write d=0 to the NMD register clk: qcom: clk-rcg2: Fail Duty-Cycle configuration if MND divider is not enabled. clk: qcom: camcc-sm8250: Fix topology around titan_top power domain clk: qcom: camcc-sdm845: Fix topology around titan_top power domain clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks clk: qcom: ipq8074: fix NSS port frequency tables clk: qcom: ipq8074: SW workaround for UBI32 PLL lock clk: qcom: ipq8074: fix NSS core PLL-s RDMA/rxe: Fix deadlock in rxe_do_local_ops() usb: host: xhci: use snprintf() in xhci_decode_trb() clk: qcom: gcc-msm8939: Point MM peripherals to system_mm_noc clock clk: qcom: gcc-msm8939: Add missing system_mm_noc_bfdcd_clk_src clk: qcom: gcc-msm8939: Fix bimc_ddr_clk_src rcgr base address clk: qcom: gcc-msm8939: Add missing SYSTEM_MM_NOC_BFDCD_CLK_SRC clk: qcom: clk-krait: unlock spin after mux completion driver core: fix potential deadlock in __driver_attach misc: rtsx: Fix an error handling path in rtsx_pci_probe() clk: qcom: camcc-sm8250: Fix halt on boot by reducing driver's init level mtd: dataflash: Add SPI ID table dmaengine: dw-edma: Fix eDMA Rd/Wr-channels and DMA-direction semantics scsi: iscsi: Fix session removal on shutdown scsi: iscsi: Add helper to remove a session from the kernel scsi: iscsi: Allow iscsi_if_stop_conn() to be called from kernel mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv mwifiex: Ignore BTCOEX events from the 88W8897 firmware KVM: Don't set Accessed/Dirty bits for ZERO_PAGE mm/memremap: fix memunmap_pages() race with get_dev_pagemap() memremap: remove support for external pgmap refcounts lib/test_hmm: avoid accessing uninitialized pages clk: mediatek: reset: Fix written reset bit offset iio: accel: bma400: Reordering of header files platform/chrome: cros_ec: Always expose last resume result iio: accel: bma400: Fix the scale min and max macro values scsi: qla2xxx: edif: Fix no logout on delete for N2N scsi: qla2xxx: edif: Fix session thrash scsi: qla2xxx: edif: Tear down session if keys have been removed scsi: qla2xxx: edif: Fix no login after app start scsi: qla2xxx: edif: Reduce disruption due to multiple app start scsi: qla2xxx: edif: Send LOGO for unexpected IKE message netfilter: xtables: Bring SPDX identifier back usb: xhci: tegra: Fix error check usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init() usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe fpga: altera-pr-ip: fix unsigned comparison with less than zero PCI: mediatek-gen3: Fix refcount leak in mtk_pcie_init_irq_domains() mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path mtd: parsers: ofpart: Fix refcount leak in bcm4908_partitions_fw_offset mtd: partitions: Fix refcount leak in parse_redboot_of mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release HID: cp2112: prevent a buffer overflow in cp2112_xfer() PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep() PCI: microchip: Fix refcount leak in mc_pcie_init_irq_domains() phy: samsung: exynosautov9-ufs: correct TSRV register configurations KVM: SVM: Stuff next_rip on emulated INT3 injection if NRIPS is supported KVM: SVM: Unwind "speculative" RIP advancement if INTn injection "fails" scsi: qla2xxx: edif: Fix n2n login retry for secure device scsi: qla2xxx: edif: Fix n2n discovery issue with secure target scsi: qla2xxx: edif: Add retry for ELS passthrough scsi: qla2xxx: edif: Synchronize NPIV deletion with authentication application scsi: qla2xxx: edif: Fix inconsistent check of db_flags scsi: qla2xxx: edif: Reduce connection thrash scsi: qla2xxx: edif: Fix potential stuck session in sa update scsi: qla2xxx: edif: Reduce Initiator-Initiator thrashing of: check previous kernel's ima-kexec-buffer against memory bounds mtd: rawnand: meson: Fix a potential double free issue mtd: maps: Fix refcount leak in ap_flash_init mtd: maps: Fix refcount leak in of_flash_probe_versatile clk: renesas: r9a06g032: Fix UART clkgrp bitsel HID: amd_sfh: Don't show client init failed as error when discovery fails wireguard: allowedips: don't corrupt stack when detecting overflow wireguard: ratelimiter: use hrtimer in selftest net: usb: make USB_RTL8153_ECM non user configurable dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock net: ionic: fix error check for vlan flags in ionic_set_nic_features() net: rose: fix netdev reference changes netdevsim: Avoid allocation warnings triggered from user space iavf: Fix 'tc qdisc show' listing too many queues iavf: Fix max_rate limiting wifi: rtw88: check the return value of alloc_workqueue() netdevsim: fib: Fix reference count leak on route deletion failure net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH() inet: add READ_ONCE(sk->sk_bound_dev_if) in INET_MATCH() crypto: hisilicon/sec - fix auth key size error crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of crypto: hisilicon/hpre - don't use GFP_KERNEL to alloc mem during softirq net/mlx5: Adjust log_max_qp to be 18 at most net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version media: cedrus: hevc: Add check for invalid timestamp wifi: libertas: Fix possible refcount leak in if_usb_probe() wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` i2c: mux-gpmux: Add of_node_put() when breaking out of loop i2c: cadence: Support PEC for SMBus block read Bluetooth: hci_intel: Add check for platform_driver_register can: pch_can: pch_can_error(): initialize errc before using it can: error: specify the values of data[5..7] of CAN error frames can: usb_8dev: do not report txerr and rxerr during bus-off can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off can: sun4i_can: do not report txerr and rxerr during bus-off can: hi311x: do not report txerr and rxerr during bus-off can: sja1000: do not report txerr and rxerr during bus-off can: rcar_can: do not report txerr and rxerr during bus-off can: pch_can: do not report txerr and rxerr during bus-off libbpf: fix an snprintf() overflow check selftests/bpf: fix a test for snprintf() overflow wifi: p54: add missing parentheses in p54_flush() wifi: p54: Fix an error handling path in p54spi_probe() wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() media: staging: media: hantro: Fix typos media: hevc: Embedded indexes in RPS media: hantro: Simplify postprocessor media: hantro: postproc: Fix motion vector space size media: cedrus: h265: Fix flag name fs: check FMODE_LSEEK to control internal pipe splicing bpf: Fix subprog names in stack traces. selftests: timers: clocksource-switch: fix passing errors from child selftests: timers: valid-adjtimex: build fix for newer toolchains libbpf: Fix the name of a reused map tcp: make retransmitted SKB fit into the send window drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed. skmsg: Fix invalid last sg check in sk_msg_recvmsg() mediatek: mt76: eeprom: fix missing of_node_put() in mt76_find_power_limits_node() mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init() mt76: mt7921: enlarge maximum VHT MPDU length to 11454 mt76: mt7921: fix aggregation subframes setting to HE max ieee80211: add EHT 1K aggregation definitions mt76: mt7615: do not update pm stats in case of error mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg drm/msm/dpu: Fix for non-visible planes drm/msm: Avoid dirtyfb stalls on video mode displays (v2) media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq crypto: hisilicon/sec - don't sleep when in softirq drm/msm/mdp5: Fix global state lock backoff net: hinic: avoid kernel hung in hinic_get_stats64() net: hinic: fix bug that ethtool get wrong stats hinic: Use the bitmap API when applicable drm: bridge: sii8620: fix possible off-by-one drm/mediatek: dpi: Only enable dpi after the bridge is enabled drm/mediatek: dpi: Remove output format of YUV drm/rockchip: Fix an error handling path rockchip_dp_probe() drm/rockchip: vop: Don't crash for invalid duplicate_state() selftests/xsk: Destroy BPF resources only when ctx refcount drops to 0 crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes drm/vc4: hdmi: Fix timings for interlaced modes drm/vc4: hdmi: Reset HDMI MISC_CONTROL register drm/vc4: hdmi: Avoid full hdmi audio fifo writes drm/vc4: hdmi: Fix HPD GPIO detection drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration drm/vc4: dsi: Fix dsi0 interrupt support drm/vc4: dsi: Register dsi0 as the correct vc4 encoder type drm/vc4: dsi: Correct pixel order for DSI0 drm/vc4: dsi: Correct DSI divider calculations drm/vc4: dsi: Release workaround buffer and DMA drm/vc4: Use of_device_get_match_data() drm/vc4: dsi: Switch to devm_drm_of_get_bridge drm/bridge: Add a function to abstract away panels drm/vc4: plane: Fix margin calculations for the right/bottom edges drm/vc4: plane: Remove subpixel positioning check media: tw686x: Fix memory leak in tw686x_video_init media: driver/nxp/imx-jpeg: fix a unexpected return value problem media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set media: hdpvr: fix error value returns in hdpvr_read drm/mcde: Fix refcount leak in mcde_dsi_bind media: imx-jpeg: Disable slot interrupt when frame done drm: bridge: adv7511: Add check for mipi_dsi_driver_register crypto: ccp - During shutdown, check SEV data pointer before using test_bpf: fix incorrect netdev features rcutorture: Fix ksoftirqd boosting timing and iteration rcutorture: Don't cpuhp_remove_state() if cpuhp_setup_state() failed rcutorture: Warn on individual rcu_torture_init() error conditions drm/radeon: fix incorrrect SPDX-License-Identifiers wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() ath9k: fix use-after-free in ath9k_hif_usb_rx_cb media: imx-jpeg: Implement drain using v4l2-mem2mem helpers media: imx-jpeg: Align upwards buffer size media: imx-jpeg: Support dynamic resolution change media: imx-jpeg: Handle source change in a function media: imx-jpeg: Identify and handle precision correctly media: imx-jpeg: Refactor function mxc_jpeg_parse media: imx-jpeg: Set V4L2_BUF_FLAG_LAST at eos media: imx-jpeg: use NV12M to represent non contiguous NV12 media: imx-jpeg: Add pm-runtime support for imx-jpeg media: imx-jpeg: Leave a blank space before the configuration data media: imx-jpeg: Correct some definition according specification media: tw686x: Register the irq at the end of probe media: atmel: atmel-sama7g5-isc: fix warning in configs without OF crypto: sun8i-ss - fix infinite loop in sun8i_ss_setup_ivs() i2c: Fix a potential use after free can: netlink: allow configuring of fixed data bit rates without need for do_set_data_bittiming callback can: netlink: allow configuring of fixed bit rates without need for do_set_bittiming callback net: fix sk_wmem_schedule() and sk_rmem_schedule() errors crypto: sun8i-ss - fix error codes in allocate_flows() crypto: sun8i-ss - do not allocate memory when handling hash requests drm: adv7511: override i2c address of cec before accessing it drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init drm/shmem-helper: Pass GEM shmem object in public interfaces drm/shmem-helper: Export dedicated wrappers for GEM object functions drm/shmem-helper: Unexport drm_gem_shmem_create_with_handle() virtio-gpu: fix a missing check to avoid NULL dereference i2c: mxs: Silence a clang warning i2c: npcm: Correct slave role behavior i2c: npcm: Remove own slave addresses 2:10 drm/bridge: lt9611uxc: Cancel only driver's work drm/meson: encoder_hdmi: Fix refcount leak in meson_encoder_hdmi_init drm/meson: encoder_hdmi: switch to bridge DRM_BRIDGE_ATTACH_NO_CONNECTOR drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function drm/mediatek: Separate poweron/poweroff from enable/disable and define new funcs drm/mediatek: Modify dsi funcs to atomic operations drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() ath11k: Fix incorrect debug_mask mappings drm/mipi-dbi: align max_chunk to 2 in spi_transfer ath11k: fix netdev open race wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c() drm/panel: Fix build error when CONFIG_DRM_PANEL_SAMSUNG_ATNA33XC20=y && CONFIG_DRM_DISPLAY_HELPER=m drm/st7735r: Fix module autoloading for Okaya RH128128T ath10k: do not enforce interrupt trigger type drm/bridge: tc358767: Move (e)DP bridge endpoint parsing into dedicated function drm/dp: Export symbol / kerneldoc fixes for DP AUX bus pwm: lpc18xx: Fix period handling pwm: lpc18xx-sct: Simplify driver by not using pwm_[gs]et_chip_data() pwm: lpc18xx-sct: Reduce number of devm memory allocations pwm: sifive: Shut down hardware only after pwmchip_remove() completed pwm: sifive: Ensure the clk is enabled exactly once per running PWM pwm: sifive: Simplify offset calculation for PWMCMP registers dm: return early from dm_pr_call() if DM device is suspended thermal/tools/tmon: Include pthread and time headers in tmon.h selftests/seccomp: Fix compile warning when CC=clang x86/extable: Fix ex_handler_msr() print condition nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() drivers/perf: arm_spe: Fix consistency of SYS_PMSCR_EL1.CX irqdomain: Report irq number for NOMAP domains arm64: dts: qcom: qcs404: Fix incorrect USB2 PHYs assignment soc: qcom: Make QCOM_RPMPD depend on PM regulator: of: Fix refcount leak bug in of_get_regulation_constraints() dm writecache: count number of blocks discarded, not number of discard bios dm writecache: count number of blocks written, not number of write bios dm writecache: count number of blocks read, not number of read bios dm writecache: return void from functions PM: domains: Ensure genpd_debugfs_dir exists before remove blktrace: Trace remapped requests correctly hwmon: (drivetemp) Add module alias spi: tegra20-slink: fix UAF in tegra_slink_remove() spi: Fix simplification of devm_spi_register_controller blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created erofs: avoid consecutive detection for Highmem memory arm64: tegra: Fix SDMMC1 CD on P2888 arm64: tegra: Mark BPMP channels as no-memory-wc arm64: tegra: Update Tegra234 BPMP channel addresses arm64: tegra: Fixup SYSRAM references arm64: dts: mt7622: fix BPI-R64 WPS button arm64: dts: qcom: sm8250: add missing PCIe PHY clock-cells arm64: dts: qcom: sm6125: Append -state suffix to pinctrl nodes arm64: dts: qcom: sm6125: Move sdc2 pinctrl from seine-pdx201 to sm6125 ACPI: VIOT: Fix ACS setup drivers/iio: Remove all strcpy() uses ACPI: APEI: explicit init of HEST and GHES in apci_init() arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node stack: Declare {randomize_,}kstack_offset to fix Sparse warnings bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() ARM: dts: qcom: pm8841: add required thermal-sensor-cells soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register soc: qcom: ocmem: Fix refcount leak in of_get_ocmem ARM: dts: qcom-msm8974: fix irq type on blsp2_uart1 ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP regulator: qcom_smd: Fix pm8916_pldo range cpufreq: zynq: Fix refcount leak in zynq_get_revision arm64: dts: qcom: sdm636-sony-xperia-ganges-mermaid: correct sdc2 pinconf arm64: dts: qcom: sdm630: fix gpu's interconnect path arm64: dts: qcom: sdm630: fix the qusb2phy ref clock arm64: dts: qcom: sdm630: disable GPU by default ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init ARM: OMAP2+: Fix refcount leak in omapdss_init_of ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg block: fix infinite loop for invalid zone append soc: fsl: guts: machine variable might be unset arm64: dts: qcom: sc7180: Remove ipa_fw_mem node on trogdor locking/lockdep: Fix lockdep_init_map_*() confusion arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 arm64: select TRACE_IRQFLAGS_NMI_SUPPORT arm64: dts: mt8192: Fix idle-states entry-method arm64: dts: mt8192: Fix idle-states nodes naming scheme ARM: dts: ast2600-evb-a1: fix board compatible ARM: dts: ast2600-evb: fix board compatible ARM: dts: ast2500-evb: fix board compatible x86/pmem: Fix platform-device leak in error path arm64: dts: renesas: Fix thermal-sensors on single-zone sensors soc: amlogic: Fix refcount leak in meson-secure-pwrc.c dt-bindings: iio: accel: Add DT binding doc for ADXL355 scsi: hisi_sas: Use managed PCI functions soc: renesas: r8a779a0-sysc: Fix A2DP1 and A2CV[2357] PDR values ARM: dts: imx7d-colibri-emmc: add cpu1 supply ACPI: processor/idle: Annotate more functions to live in cpuidle section ARM: bcm: Fix refcount leak in bcm_kona_smc_init spi: spi-altera-dfl: Fix an error handling path arm64: dts: renesas: beacon: Fix regulator node names meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init ARM: findbit: fix overflowing offset spi: spi-rspi: Fix PIO fallback on RZ platforms powerpc/64s: Disable stack variable initialisation for prom_init drm/amdgpu: Remove one duplicated ef removal kasan: test: Silence GCC 12 warnings selinux: Add boundary check in put_entry() selinux: fix memleak in security_read_state_kernel() PM: hibernate: defer device probing when resuming from hibernation hwmon: (sht15) Fix wrong assumptions in device remove callback hwmon: (dell-smm) Add Dell XPS 13 7390 to fan control whitelist firmware: tegra: Fix error check return value of debugfs_create_file() ARM: shmobile: rcar-gen2: Increase refcount for new reference arm64: dts: allwinner: a64: orangepi-win: Fix LED node name arm64: dts: qcom: ipq8074: fix NAND node name ARM: dts: qcom: sdx55: Fix the IRQ trigger type for UART ACPI: LPSS: Fix missing check in register_device_clock() ACPI: PM: save NVS memory for Lenovo G40-45 ACPI: EC: Drop the EC_FLAGS_IGNORE_DSDT_GPE quirk ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks ARM: OMAP2+: pdata-quirks: Fix refcount leak bug ARM: OMAP2+: display: Fix refcount leak bug spi: synquacer: Add missing clk_disable_unprepare() ARM: dts: ux500: Fix Gavini accelerometer mounting matrix ARM: dts: ux500: Fix Codina accelerometer mounting matrix ARM: dts: BCM5301X: Add DT for Meraki MR26 ARM: dts: imx6ul: fix qspi node compatible ARM: dts: imx6ul: fix lcdif node compatible ARM: dts: imx6ul: fix csi node compatible ARM: dts: imx6ul: fix keypad compatible ARM: dts: imx6ul: change operating-points to uint32-matrix ARM: dts: imx6ul: add missing properties for sram wait: Fix __wait_event_hrtimeout for RT/DL tasks irqchip/mips-gic: Check the return value of ioremap() in gic_of_init() sched/core: Always flush pending blk_plug genirq: GENERIC_IRQ_IPI depends on SMP irqchip/mips-gic: Only register IPI domain when SMP is enabled genirq: Don't return error on missing optional irq_request_resources() sched/fair: Introduce SIS_UTIL to search idle CPU based on sum of util_avg ext2: Add more validity checks for inode counts arm64: kasan: Revert "arm64: mte: reset the page tag in page->flags" arm64: fix oops in concurrently setting insn_emulation sysctls arm64: Do not forget syscall when starting a new thread. arch: make TRACE_IRQFLAGS_NMI_SUPPORT generic x86: Handle idle=nomwait cmdline properly for x86_idle epoll: autoremove wakers even more aggressively netfilter: nf_tables: fix null deref due to zeroed list head netfilter: nf_tables: do not allow RULE_ID to refer to another chain netfilter: nf_tables: do not allow CHAIN_ID to refer to another table netfilter: nf_tables: do not allow SET_ID to refer to another table usb: dwc3: gadget: fix high speed multiplier setting usb: dwc3: gadget: refactor dwc3_repare_one_trb arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC USB: HCD: Fix URB giveback issue in tasklet function usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion coresight: Clear the connection field properly MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK powerpc/powernv: Avoid crashing if rng is NULL powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E powerpc/fsl-pci: Fix Class Code of PCIe Root Port PCI: Add defines for normal and subtractive PCI bridges ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr() media: [PATCH] pci: atomisp_cmd: fix three missing checks on list iterator mbcache: add functions to delete entry if unused mbcache: don't reclaim used entries md-raid10: fix KASAN warning md-raid: destroy the bitmap after destroying the thread serial: mvebu-uart: uart2 error bits clearing fuse: ioctl: translate ENOSYS fuse: limit nsec ksmbd: fix use-after-free bug in smb2_tree_disconect ksmbd: prevent out of bound read for SMB2_TREE_CONNNECT ksmbd: fix memory leak in smb2_handle_negotiate soundwire: qcom: Check device status before reading devid scsi: qla2xxx: Zero undefined mailbox IN registers scsi: qla2xxx: Fix incorrect display of max frame size scsi: sg: Allow waiting for commands to complete on removed device iio: light: isl29028: Fix the warning in isl29028_remove() iio: fix iio_format_avail_range() printing for none IIO_VAL_INT um: seed rng using host OS rng um: Remove straying parenthesis mtd: rawnand: arasan: Update NAND bus clock instead of system clock mtd: rawnand: arasan: Fix clock rate in NV-DDR btrfs: reject log replay if there is unsupported RO compat flag bpf: Fix KASAN use-after-free Read in compute_effective_progs drm/amdgpu: fix check in fbdev init drm/amdgpu: Check BO's requested pinning domains against its preferred_domains drm/nouveau/kms: Fix failure path for creating DP connectors drm/nouveau/acpi: Don't print error when we get -EINPROGRESS from pm_runtime drm/nouveau: Don't pm_runtime_put_sync(), only pm_runtime_put_autosuspend() drm/nouveau: fix another off-by-one in nvbios_addr drm/hyperv-drm: Include framebuffer and EDID headers drm/vc4: hdmi: Disable audio if dmas property is present but empty drm/shmem-helper: Add missing vunmap on error drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error rtc: rx8025: fix 12/24 hour mode detection on RX-8035 RISC-V: Add modules to virtual kernel memory layout dump RISC-V: Fixup schedule out issue in machine_crash_shutdown() RISC-V: Fixup get incorrect user mode PC for kernel mode regs RISC-V: kexec: Fixup use of smp_processor_id() in preemptible context dt-bindings: riscv: fix SiFive l2-cache's cache-sets riscv:uprobe fix SR_SPIE set/clear handling parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode parisc: Check the return value of ioremap() in lba_driver_probe() parisc: Drop pa_swapper_pg_lock spinlock parisc: Fix device names in /proc/iomem ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak fix short copy handling in copy_mc_pipe_to_iter() usbnet: Fix linkwatch use-after-free on disconnect fbcon: Fix accelerated fbdev scrolling while logo is still shown fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters thermal: sysfs: Fix cooling_device_stats_setup() error code path fs: Add missing umask strip in vfs_tmpfile vfs: Check the truncate maximum size in inode_newsize_ok() tty: vt: initialize unicode screen buffer ALSA: hda/realtek: Add a quirk for HP OMEN 15 (8786) mute LED ALSA: hda/realtek: Add quirk for another Asus K42JZ model ALSA: hda/cirrus - support for iMac 12,1 model ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model riscv: set default pm_power_off to NULL KVM: x86: revalidate steal time cache if MSR value changes KVM: x86: do not report preemption if the steal time cache is stale KVM: x86: Tag kvm_mmu_x86_module_init() with __init KVM: nVMX: Always enable TSC scaling for L2 when it was enabled for L1 KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4 KVM: nVMX: Account for KVM reserved CR4 bits in consistency checks KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value KVM: x86: Split kvm_is_valid_cr4() and export only the non-vendor bits KVM: s390: pv: don't present the ecall interrupt twice KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case HID: wacom: Don't register pad_input for touch switch HID: wacom: Only report rotation for art pen HID: hid-input: add Surface Go battery quirk lockd: detect and reject lock arguments that overflow add barriers to buffer_uptodate and set_buffer_uptodate wifi: mac80211_hwsim: use 32-bit skb cookie wifi: mac80211_hwsim: add back erroneously removed cast wifi: mac80211_hwsim: fix race condition in pending packet ALSA: hda/realtek: Add quirk for HP Spectre x360 15-eb0xxx ALSA: hda/realtek: Add quirk for Clevo NV45PZ ALSA: bcd2000: Fix a UAF bug on the error path of probing ALSA: usb-audio: Add quirk for Behringer UMC202HD nfsd: eliminate the NFSD_FILE_BREAK_* flags NFSD: Clean up the show_nf_flags() macro pNFS/flexfiles: Report RDMA connection errors to the server scsi: Revert "scsi: qla2xxx: Fix disk failure to rediscover" Revert "pNFS: nfs3_set_ds_client should set NFS_CS_NOPING" x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments Makefile: link with -z noexecstack --no-warn-rwx-segments ANDROID: fix up sysctl_vals change in 5.15.58 Revert "ipv4/tcp: do not use per netns ctl sockets" ANDROID: bring back kfree_skb() ANDROID: add tty_schedule_flip() back to the kernel ANDROID: ABI update for virtual device virtio_gpu changes Linux 5.15.60 x86/speculation: Add LFENCE to RSB fill sequence x86/speculation: Add RSB VM Exit protections macintosh/adb: fix oob read in do_adb_query() function Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3586 Bluetooth: btusb: Add Realtek RTL8852C support ID 0x13D3:0x3587 Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0CB8:0xC558 Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04C5:0x1675 Bluetooth: btusb: Add Realtek RTL8852C support ID 0x04CA:0x4007 Bluetooth: btusb: Add support of IMC Networks PID 0x3568 dt-bindings: bluetooth: broadcom: Add BCM4349B1 DT binding Bluetooth: hci_bcm: Add DT compatible for CYW55572 Bluetooth: hci_bcm: Add BCM4349B1 variant btrfs: zoned: fix critical section of relocation inode writeback btrfs: zoned: prevent allocation from previous data relocation BG arm64: set UXN on swapper page tables KVM: x86/svm: add __GFP_ACCOUNT to __sev_dbg_{en,de}crypt_user() selftests: KVM: Handle compiler optimizations in ucall tools/kvm_stat: fix display of error when multiple processes are found KVM: selftests: Make hyperv_clock selftest more stable KVM: x86: do not set st->preempted when going back to user space KVM: x86: do not report a vCPU as preempted outside instruction boundaries crypto: arm64/poly1305 - fix a read out-of-bound ACPI: APEI: Better fix to avoid spamming the console with old error logs ACPI: video: Shortening quirk list by identifying Clevo by board_name only ACPI: video: Force backlight native for some TongFang devices tools/vm/slabinfo: Handle files in debugfs block: fix default IO priority handling again selftests/bpf: Check dst_port only on the client socket selftests/bpf: Extend verifier and bpf_sock tests for dst_port loads x86/speculation: Make all RETbleed mitigations 64-bit only ANDROID: update virtual device target symbol list UPSTREAM: gfs2: Prevent endless loops in gfs2_file_buffered_write UPSTREAM: bcache: move uapi header bcache.h to bcache code directory Revert "net: phy: Don't trigger state machine while in suspend" ANDROID: GKI: remove CONFIG_RANDOM_TRUST_CPU=y from gki_defconfig Revert "i40e: xsk: Move tmp desc array from driver to pool" Revert "xsk: Fix handling of invalid descriptors in XSK TX batching API" Revert "xsk: Fix possible crash when multiple sockets are created" ANDROID: fix build breakage in the scheduler out-of-tree code Revert "drm: fix EDID struct for old ARM OABI format" Revert "signal: Deliver SIGTRAP on perf event asynchronously if blocked" Revert "gpiolib: of: Introduce hook for missing gpio-ranges" Revert "pinctrl: bcm2835: implement hook for missing gpio-ranges" Revert "mailbox: forward the hrtimer if not queued and under a lock" Revert "ALSA: jack: Access input_dev under mutex" ANDROID: GKI: update .xml file with new symbol needed for zsmalloc ANDROID: GKI: fix up abi breakage in struct pipe_inode_info Linux 5.15.59 x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed EDAC/ghes: Set the DIMM label unconditionally ARM: 9216/1: Fix MAX_DMA_ADDRESS overflow page_alloc: fix invalid watermark check on a negative value mm/hmm: fault non-owner device private entries ARM: crypto: comment out gcc warning that breaks clang builds sctp: leave the err path free in sctp_stream_init to sctp_stream_free sfc: disable softirqs for ptp TX perf symbol: Correct address for bss symbols virtio-net: fix the race between refill work and close netfilter: nf_queue: do not allow packet truncation below transport header offset octeontx2-pf: cn10k: Fix egress ratelimit configuration sctp: fix sleep in atomic context bug in timer handlers i40e: Fix interface init with MSI interrupts (no MSI-X) ipv4: Fix data-races around sysctl_fib_notify_on_flag_change. tcp: Fix data-races around sysctl_tcp_reflect_tos. tcp: Fix a data-race around sysctl_tcp_comp_sack_nr. tcp: Fix a data-race around sysctl_tcp_comp_sack_slack_ns. tcp: Fix a data-race around sysctl_tcp_comp_sack_delay_ns. net: Fix data-races around sysctl_[rw]mem(_offset)?. tcp: Fix data-races around sk_pacing_rate. net: mld: fix reference count leak in mld_{query | report}_work() net: macsec: fix potential resource leak in macsec_add_rxsa() and macsec_add_txsa() macsec: always read MACSEC_SA_ATTR_PN as a u64 macsec: limit replay window size with XPN macsec: fix error message in macsec_add_rxsa and _txsa macsec: fix NULL deref in macsec_add_rxsa Documentation: fix sctp_wmem in ip-sysctl.rst tcp: Fix a data-race around sysctl_tcp_invalid_ratelimit. tcp: Fix a data-race around sysctl_tcp_autocorking. tcp: Fix a data-race around sysctl_tcp_min_rtt_wlen. tcp: Fix a data-race around sysctl_tcp_min_tso_segs. net: sungem_phy: Add of_node_put() for reference returned by of_get_parent() net: pcs: xpcs: propagate xpcs_read error to xpcs_get_state_c37_sgmii igmp: Fix data-races around sysctl_igmp_qrv. net/tls: Remove the context from the list in tls_device_down ipv6/addrconf: fix a null-ptr-deref bug for ip6_ptr net: ping6: Fix memleak in ipv6_renew_options(). scsi: mpt3sas: Stop fw fault watchdog work item during system shutdown scsi: core: Fix warning in scsi_alloc_sgtables() tcp: Fix a data-race around sysctl_tcp_challenge_ack_limit. tcp: Fix a data-race around sysctl_tcp_limit_output_bytes. tcp: Fix data-races around sysctl_tcp_moderate_rcvbuf. octeontx2-pf: Fix UDP/TCP src and dst port tc filters Revert "tcp: change pingpong threshold to 3" scsi: ufs: host: Hold reference returned by of_parse_phandle() ice: do not setup vlan for loopback VSI ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) tcp: Fix data-races around sysctl_tcp_no_ssthresh_metrics_save. tcp: Fix a data-race around sysctl_tcp_nometrics_save. tcp: Fix a data-race around sysctl_tcp_frto. tcp: Fix a data-race around sysctl_tcp_adv_win_scale. tcp: Fix a data-race around sysctl_tcp_app_win. tcp: Fix data-races around sysctl_tcp_dsack. watch_queue: Fix missing locking in add_watch_to_object() watch_queue: Fix missing rcu annotation drm/simpledrm: Fix return type of simpledrm_simple_display_pipe_mode_valid() nouveau/svm: Fix to migrate all requested pages s390/archrandom: prevent CPACF trng invocations in interrupt context asm-generic: remove a broken and needless ifdef conditional hugetlb: fix memoryleak in hugetlb_mcopy_atomic_pte mm: fix page leak with multiple threads mapping the same page secretmem: fix unhandled fault in truncate fs: sendfile handles O_NONBLOCK of out_fd ntfs: fix use-after-free in ntfs_ucsncmp() Revert "ocfs2: mount shared volume without ha stack" Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put Linux 5.15.58 drm/amd/display: Fix wrong format specifier in amdgpu_dm.c x86/entry_32: Fix segment exceptions drm/amdgpu: Off by one in dm_dmub_outbox1_low_irq() x86: drop bogus "cc" clobber from __try_cmpxchg_user_asm() KVM: x86: fix typo in __try_cmpxchg_user causing non-atomicness x86/extable: Prefer local labels in .set directives drm/amd/display: invalid parameter check in dmub_hpd_callback drm/amd/display: Don't lock connection_mutex for DMUB HPD watch-queue: remove spurious double semicolon net: usb: ax88179_178a needs FLAG_SEND_ZLP tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() tty: drop tty_schedule_flip() tty: the rest, stop using tty_schedule_flip() tty: drivers/tty/, stop using tty_schedule_flip() watchqueue: make sure to serialize 'wqueue->defunct' properly x86/alternative: Report missing return thunk details x86/amd: Use IBPB for firmware calls drm/amd/display: Fix surface optimization regression on Carrizo drm/amd/display: Optimize bandwidth on following fast update drm/amd/display: Reset DMCUB before HW init exfat: use updated exfat_chain directly during renaming Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks Bluetooth: SCO: Fix sco_send_frame returning skb->len Bluetooth: Fix passing NULL to PTR_ERR Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg Bluetooth: Add bt_skb_sendmmsg helper Bluetooth: Add bt_skb_sendmsg helper um: virtio_uml: Fix broken device handling in time-travel um: virtio_uml: Allow probing from devicetree tracing: Fix return value of trace_pid_write() tracing: Place trace_pid_list logic into abstract functions tracing: Have event format check not flag %p* on __get_dynamic_array() exfat: fix referencing wrong parent directory information after renaming crypto: qat - re-enable registration of algorithms crypto: qat - add param check for DH crypto: qat - add param check for RSA crypto: qat - remove dma_free_coherent() for DH crypto: qat - remove dma_free_coherent() for RSA crypto: qat - fix memory leak in RSA crypto: qat - add backlog mechanism crypto: qat - refactor submission logic crypto: qat - use pre-allocated buffers in datapath crypto: qat - set to zero DH parameters before free iwlwifi: fw: uefi: add missing include guards mt76: fix use-after-free by removing a non-RCU wcid pointer xhci: Set HCD flag to defer primary roothub registration xhci: dbc: Rename xhci_dbc_init and xhci_dbc_exit xhci: dbc: create and remove dbc structure in dbgtty driver. xhci: dbc: refactor xhci_dbc_init() KVM: x86: Use __try_cmpxchg_user() to emulate atomic accesses x86/futex: Remove .fixup usage x86/msr: Remove .fixup usage x86/extable: Extend extable functionality x86/entry_32: Remove .fixup usage bitfield.h: Fix "type of reg too small for mask" test x86/extable: Provide EX_TYPE_DEFAULT_MCE_SAFE and EX_TYPE_FAULT_MCE_SAFE x86/extable: Rework the exception table mechanics x86/mce: Deduplicate exception handling x86/extable: Get rid of redundant macros x86/extable: Tidy up redundant handler functions x86/uaccess: Implement macros for CMPXCHG on user addresses dlm: fix pending remove if msg allocation fails x86/bugs: Warn when "ibrs" mitigation is selected on Enhanced IBRS parts sched/deadline: Fix BUG_ON condition for deboosted tasks bpf: Make sure mac_header was set before using it mm/mempolicy: fix uninit-value in mpol_rebind_policy() KVM: Don't null dereference ops->destroy spi: bcm2835: bcm2835_spi_handle_err(): fix NULL pointer deref for non DMA transfers KVM: selftests: Fix target thread to be migrated in rseq_test gpio: gpio-xilinx: Fix integer overflow tcp: Fix data-races around sysctl_tcp_max_reordering. tcp: Fix a data-race around sysctl_tcp_abort_on_overflow. tcp: Fix a data-race around sysctl_tcp_rfc1337. tcp: Fix a data-race around sysctl_tcp_stdurg. tcp: Fix a data-race around sysctl_tcp_retrans_collapse. tcp: Fix data-races around sysctl_tcp_slow_start_after_idle. tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts. tcp: Fix data-races around sysctl_tcp_recovery. tcp: Fix a data-race around sysctl_tcp_early_retrans. tcp: Fix data-races around sysctl knobs related to SYN option. udp: Fix a data-race around sysctl_udp_l3mdev_accept. ip: Fix data-races around sysctl_ip_prot_sock. ipv4: Fix data-races around sysctl_fib_multipath_hash_fields. ipv4: Fix data-races around sysctl_fib_multipath_hash_policy. ipv4: Fix a data-race around sysctl_fib_multipath_use_neigh. drm/imx/dcss: Add missing of_node_put() in fail path net: dsa: vitesse-vsc73xx: silent spi_device_id warnings net: dsa: sja1105: silent spi_device_id warnings be2net: Fix buffer overflow in be_get_module_eeprom gpio: pca953x: use the correct register address when regcache sync during init gpio: pca953x: use the correct range when do regmap sync gpio: pca953x: only use single read/write for No AI mode net: stmmac: remove redunctant disable xPCS EEE call ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero i40e: Fix erroneous adapter reinitialization during recovery process pinctrl: armada-37xx: use raw spinlocks for regmap to avoid invalid wait context pinctrl: armada-37xx: Convert to use dev_err_probe() pinctrl: armada-37xx: Make use of the devm_platform_ioremap_resource() pinctrl: armada-37xx: Use temporary variable for struct device iavf: Fix handling of dummy receive descriptors tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. tcp: Fix data-races around sysctl_tcp_fastopen. tcp: Fix data-races around sysctl_max_syn_backlog. tcp: Fix a data-race around sysctl_tcp_tw_reuse. tcp: Fix a data-race around sysctl_tcp_notsent_lowat. tcp: Fix data-races around some timeout sysctl knobs. tcp: Fix data-races around sysctl_tcp_reordering. tcp: Fix data-races around sysctl_tcp_migrate_req. tcp: Fix data-races around sysctl_tcp_syncookies. tcp: Fix data-races around sysctl_tcp_syn(ack)?_retries. tcp: Fix data-races around keepalive sysctl knobs. igmp: Fix data-races around sysctl_igmp_max_msf. igmp: Fix a data-race around sysctl_igmp_max_memberships. igmp: Fix data-races around sysctl_igmp_llm_reports. net/tls: Fix race in TLS device down flow net: stmmac: fix dma queue left shift overflow issue perf tests: Fix Convert perf time to TSC test for hybrid i2c: cadence: Change large transfer count reset logic to be unconditional i2c: mlxcpld: Fix register setting for 400KHz frequency net: ipv4: use kfree_skb_reason() in ip_rcv_finish_core() net: ipv4: use kfree_skb_reason() in ip_rcv_core() net: netfilter: use kfree_drop_reason() for NF_DROP net: skb_drop_reason: add document for drop reasons net: socket: rename SKB_DROP_REASON_SOCKET_FILTER net: skb: use kfree_skb_reason() in __udp4_lib_rcv() net: skb: use kfree_skb_reason() in tcp_v4_rcv() net: skb: introduce kfree_skb_reason() net: dsa: microchip: ksz_common: Fix refcount leak bug mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times mtd: rawnand: gpmi: validate controller clock rate net: stmmac: fix unbalanced ptp clock issue in suspend/resume flow net: stmmac: fix pm runtime issue in stmmac_dvr_remove() tcp: Fix a data-race around sysctl_tcp_probe_interval. tcp: Fix a data-race around sysctl_tcp_probe_threshold. tcp: Fix a data-race around sysctl_tcp_mtu_probe_floor. tcp: Fix data-races around sysctl_tcp_min_snd_mss. tcp: Fix data-races around sysctl_tcp_base_mss. tcp: Fix data-races around sysctl_tcp_mtu_probing. tcp: Fix data-races around sysctl_tcp_l3mdev_accept. tcp: sk->sk_bound_dev_if once in inet_request_bound_dev_if() tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. ip: Fix a data-race around sysctl_fwmark_reflect. ip: Fix a data-race around sysctl_ip_autobind_reuse. ip: Fix data-races around sysctl_ip_nonlocal_bind. ip: Fix data-races around sysctl_ip_fwd_update_priority. ip: Fix data-races around sysctl_ip_fwd_use_pmtu. ip: Fix data-races around sysctl_ip_no_pmtu_disc. igc: Reinstate IGC_REMOVED logic and implement it properly Revert "e1000e: Fix possible HW unit hang after an s0ix exit" e1000e: Enable GPT clock before sending message to CSME nvme: fix block device naming collision nvme: check for duplicate identifiers earlier scsi: ufs: core: Drop loglevel of WriteBoost message scsi: megaraid: Clear READ queue map's nr_queues drm/amd/display: Ignore First MST Sideband Message Return Error drm/amdgpu/display: add quirk handling for stutter mode drm/amd/display: Fork thread to offload work of hpd_rx_irq drm/amd/display: Add option to defer works of hpd_rx_irq drm/amd/display: Support for DMUB HPD interrupt handling tcp: Fix data-races around sysctl_tcp_ecn. sysctl: move some boundary constants from sysctl.c to sysctl_vals mm/pagealloc: sysctl: change watermark_scale_factor max limit to 30% net: tun: split run_ebpf_filter() and pskb_trim() into different "if statement" ipv4/tcp: do not use per netns ctl sockets perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() pinctrl: ralink: Check for null return of devm_kcalloc pinctrl: ralink: rename pinctrl-rt2880 to pinctrl-ralink pinctrl: ralink: rename MT7628(an) functions to MT76X8 RDMA/irdma: Fix sleep from invalid context BUG RDMA/irdma: Do not advertise 1GB page size for x722 power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() ip: Fix data-races around sysctl_ip_default_ttl. r8152: fix a WOL issue xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() xfs: fix perag reference leak on iteration race with growfs xfs: terminate perag iteration reliably on agcount xfs: rename the next_agno perag iteration variable xfs: fold perag loop iteration logic into helper function xfs: fix maxlevels comparisons in the btree staging code mt76: mt7921: Fix the error handling path of mt7921_pci_probe() mt76: mt7921e: fix possible probe failure after reboot mt76: mt7921: use physical addr to unify register access Revert "mt76: mt7921e: fix possible probe failure after reboot" Revert "mt76: mt7921: Fix the error handling path of mt7921_pci_probe()" batman-adv: Use netif_rx_any_context() any. serial: mvebu-uart: correctly report configured baudrate value PCI: hv: Fix interrupt mapping for multi-MSI PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI PCI: hv: Fix multi-MSI to allow more than one MSI vector Revert "selftest/vm: verify mmap addr in mremap_test" Revert "selftest/vm: verify remap destination address in mremap_test" bus: mhi: host: pci_generic: add Telit FN990 bus: mhi: host: pci_generic: add Telit FN980 v1 hardware revision drm/ttm: fix locking in vmap/vunmap TTM GEM helpers lockdown: Fix kexec lockdown bypass with ima policy mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication riscv: add as-options for modules with assembly compontents pinctrl: stm32: fix optional IRQ support to gpios ANDROID: random: fix CRC issues with the merge Linux 5.15.57 x86: Use -mindirect-branch-cs-prefix for RETPOLINE builds um: Add missing apply_returns() x86/bugs: Remove apostrophe typo tools headers cpufeatures: Sync with the kernel sources tools arch x86: Sync the msr-index.h copy with the kernel sources KVM: emulate: do not adjust size of fastop and setcc subroutines x86/kvm: fix FASTOP_SIZE when return thunks are enabled efi/x86: use naked RET on mixed mode call wrapper x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit x86/xen: Fix initialisation in hypercall_page after rethunk x86/static_call: Serialize __static_call_fixup() properly x86/speculation: Disable RRSBA behavior x86/kexec: Disable RET on kexec x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported x86/entry: Move PUSH_AND_CLEAR_REGS() back into error_entry x86/bugs: Add Cannon lake to RETBleed affected CPU list x86/retbleed: Add fine grained Kconfig knobs x86/cpu/amd: Enumerate BTC_NO x86/common: Stamp out the stepping madness x86/speculation: Fill RSB on vmexit for IBRS KVM: VMX: Fix IBRS handling after vmexit KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS KVM: VMX: Convert launched argument to flags KVM: VMX: Flatten __vmx_vcpu_run() objtool: Re-add UNWIND_HINT_{SAVE_RESTORE} x86/speculation: Remove x86_spec_ctrl_mask x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit x86/speculation: Fix SPEC_CTRL write on SMT state change x86/speculation: Fix firmware entry SPEC_CTRL handling x86/speculation: Fix RSB filling with CONFIG_RETPOLINE=n x86/cpu/amd: Add Spectral Chicken objtool: Add entry UNRET validation x86/bugs: Do IBPB fallback check only once x86/bugs: Add retbleed=ibpb x86/xen: Add UNTRAIN_RET x86/xen: Rename SYS* entry points objtool: Update Retpoline validation intel_idle: Disable IBRS during long idle x86/bugs: Report Intel retbleed vulnerability x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS x86/bugs: Optimize SPEC_CTRL MSR writes x86/entry: Add kernel IBRS implementation x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value x86/bugs: Enable STIBP for JMP2RET x86/bugs: Add AMD retbleed= boot parameter x86/bugs: Report AMD retbleed vulnerability x86: Add magic AMD return-thunk objtool: Treat .text.__x86.* as noinstr x86/entry: Avoid very early RET x86: Use return-thunk in asm code x86/sev: Avoid using __x86_return_thunk x86/vsyscall_emu/64: Don't use RET in vsyscall emulation x86/kvm: Fix SETcc emulation for return thunks x86/bpf: Use alternative RET encoding x86/ftrace: Use alternative RET encoding x86,static_call: Use alternative RET encoding objtool: skip non-text sections when adding return-thunk sites x86,objtool: Create .return_sites x86: Undo return-thunk damage x86/retpoline: Use -mfunction-return x86/retpoline: Swizzle retpoline thunk x86/retpoline: Cleanup some #ifdefery x86/cpufeatures: Move RETPOLINE flags to word 11 x86/kvm/vmx: Make noinstr clean x86/realmode: build with -D__DISABLE_EXPORTS x86/entry: Remove skip_r11rcx objtool: Default ignore INT3 for unreachable bpf,x86: Respect X86_FEATURE_RETPOLINE* bpf,x86: Simplify computing label offsets x86/alternative: Add debug prints to apply_retpolines() x86/alternative: Try inline spectre_v2=retpoline,amd x86/alternative: Handle Jcc __x86_indirect_thunk_\reg x86/alternative: Implement .retpoline_sites support x86/retpoline: Create a retpoline thunk array x86/retpoline: Move the retpoline thunk declarations to nospec-branch.h x86/asm: Fixup odd GEN-for-each-reg.h usage x86/asm: Fix register order x86/retpoline: Remove unused replacement symbols objtool: Introduce CFI hash objtool,x86: Replace alternatives with .retpoline_sites objtool: Shrink struct instruction objtool: Explicitly avoid self modifying code in .altinstr_replacement objtool: Classify symbols x86/entry: Don't call error_entry() for XENPV x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() x86/entry: Switch the stack after error_entry() returns x86/traps: Use pt_regs directly in fixup_bad_iret() Linux 5.15.56 drm/aperture: Run fbdev removal before internal helpers x86/pat: Fix x86_has_pat_wp() serial: 8250: Fix PM usage_count for console handover serial: pl011: UPSTAT_AUTORTS requires .throttle/unthrottle serial: stm32: Clear prev values before setting RTS delays serial: 8250: fix return error code in serial8250_request_std_resource() vt: fix memory overlapping when deleting chars in the buffer tty: serial: samsung_tty: set dma burst_size to 1 usb: dwc3: gadget: Fix event pending check usb: typec: add missing uevent when partner support PD USB: serial: ftdi_sio: add Belimo device ids signal handling: don't use BUG_ON() for debugging nvme-pci: phison e16 has bogus namespace ids ALSA: usb-audio: Add quirk for Fiero SC-01 (fw v1.0.0) ALSA: usb-audio: Add quirk for Fiero SC-01 ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices Revert "can: xilinx_can: Limit CANFD brp to 2" ARM: dts: stm32: use the correct clock source for CEC on stm32mp151 soc: ixp4xx/npe: Fix unused match warning x86: Clear .brk area at early boot irqchip: or1k-pic: Undefine mask_ack for level triggered hardware ASoC: madera: Fix event generation for rate controls ASoC: madera: Fix event generation for OUT1 demux ASoC: cs47l15: Fix event generation for low power mux control ASoC: dapm: Initialise kcontrol data for mux/demux controls ASoC: rt711-sdca: fix kernel NULL pointer dereference when IO error ASoC: wm5110: Fix DRE control ASoC: Intel: bytcr_wm5102: Fix GPIO related probe-ordering problem ASoC: wcd938x: Fix event generation for some controls ASoC: SOF: Intel: hda-loader: Clarify the cl_dsp_init() flow ASoC: codecs: rt700/rt711/rt711-sdca: initialize workqueues in probe ASoC: rt7*-sdw: harden jack_detect_handler ASoC: rt711: fix calibrate mutex initialization ASoC: Intel: sof_sdw: handle errors on card registration ASoC: rt711-sdca-sdw: fix calibrate mutex initialization ASoC: Realtek/Maxim SoundWire codecs: disable pm_runtime on remove pinctrl: aspeed: Fix potential NULL dereference in aspeed_pinmux_set_mux() ASoC: ops: Fix off by one in range control validation net: sfp: fix memory leak in sfp_probe() nvme: fix regression when disconnect a recovering ctrl nvme-tcp: always fail a request when sending it failed NFC: nxp-nci: don't print header length mismatch on i2c error net: tipc: fix possible refcount leak in tipc_sk_create() fbdev: Disable sysfb device registration when removing conflicting FBs firmware: sysfb: Add sysfb_disable() helper function firmware: sysfb: Make sysfb_create_simplefb() return a pdev pointer platform/x86: hp-wmi: Ignore Sanitization Mode event cpufreq: pmac32-cpufreq: Fix refcount leak bug scsi: hisi_sas: Limit max hw sectors for v3 HW netfilter: br_netfilter: do not skip all hooks with 0 priority virtio_mmio: Restore guest page size on resume virtio_mmio: Add missing PM calls to freeze/restore vduse: Tie vduse mgmtdev and its device vdpa/mlx5: Initialize CVQ vringh only once powerpc/xive/spapr: correct bitmap allocation size ksmbd: use SOCK_NONBLOCK type for kernel_accept() btrfs: zoned: fix a leaked bioc in read_zone_info btrfs: rename btrfs_bio to btrfs_io_context mm: sysctl: fix missing numa_stat when !CONFIG_HUGETLB_PAGE ACPI: video: Fix acpi_video_handles_brightness_key_presses() net/tls: Check for errors in tls_device_init KVM: x86: Fully initialize 'struct kvm_lapic_irq' in kvm_pv_kick_cpu_op() net: atlantic: remove aq_nic_deinit() when resume net: atlantic: remove deep parameter on suspend/resume functions sfc: fix kernel panic when creating VF seg6: bpf: fix skb checksum in bpf_push_seg6_encap() seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors seg6: fix skb checksum evaluation in SRH encapsulation/insertion ceph: switch netfs read ops to use rreq->inode instead of rreq->mapping->host sfc: fix use after free when disabling sriov drm/amd/pm: Prevent divide by zero drm/amd/display: Only use depth 36 bpp linebuffers on DCN display engines. ima: Fix potential memory leak in ima_init_crypto() ima: force signature verification when CONFIG_KEXEC_SIG is configured net: stmmac: fix leaks in probe net: ftgmac100: Hold reference returned by of_get_child_by_name() nexthop: Fix data-races around nexthop_compat_mode. ipv4: Fix data-races around sysctl_ip_dynaddr. tcp: Fix a data-race around sysctl_tcp_ecn_fallback. raw: Fix a data-race around sysctl_raw_l3mdev_accept. icmp: Fix a data-race around sysctl_icmp_ratemask. icmp: Fix a data-race around sysctl_icmp_ratelimit. icmp: Fix a data-race around sysctl_icmp_errors_use_inbound_ifaddr. icmp: Fix a data-race around sysctl_icmp_ignore_bogus_error_responses. icmp: Fix data-races around sysctl_icmp_echo_enable_probe. sysctl: Fix data-races in proc_dointvec_ms_jiffies(). sysctl: Fix data-races in proc_dou8vec_minmax(). bnxt_en: Fix bnxt_refclk_read() bnxt_en: Fix bnxt_reinit_after_abort() code path drm/i915: Require the vm mutex for i915_vma_bind() drm/i915/uc: correctly track uc_fw init failure drm/i915/gt: Serialize TLB invalidates with GT resets drm/i915/gt: Serialize GRDOM access between multiple engine resets drm/i915/dg2: Add Wa_22011100796 drm/i915/selftests: fix a couple IS_ERR() vs NULL tests tracing: Fix sleeping while atomic in kdb ftdump lockd: fix nlm_close_files lockd: set fl_owner when unlocking files xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE drm/i915/gvt: IS_ERR() vs NULL bug in intel_gvt_update_reg_whitelist() netfilter: nf_tables: replace BUG_ON by element length check netfilter: nf_log: incorrect offset to network header arm64: dts: broadcom: bcm4908: Fix cpu node for smp boot arm64: dts: broadcom: bcm4908: Fix timer node for BCM4906 SoC ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero ARM: dts: at91: sama5d2: Fix typo in i2s1 node ipv4: Fix a data-race around sysctl_fib_sync_mem. icmp: Fix data-races around sysctl. cipso: Fix data-races around sysctl. net: Fix data-races around sysctl_mem. inetpeer: Fix data-races around sysctl. tcp: Fix a data-race around sysctl_tcp_max_orphans. sysctl: Fix data races in proc_dointvec_jiffies(). sysctl: Fix data races in proc_doulongvec_minmax(). sysctl: Fix data races in proc_douintvec_minmax(). sysctl: Fix data races in proc_dointvec_minmax(). sysctl: Fix data races in proc_douintvec(). sysctl: Fix data races in proc_dointvec(). net: ethernet: ti: am65-cpsw: Fix devlink port register sequence net: stmmac: dwc-qos: Disable split header for Tegra194 ASoC: Intel: Skylake: Correct the handling of fmt_config flexible array ASoC: Intel: Skylake: Correct the ssp rate discovery in skl_get_ssp_clks() ASoC: tas2764: Fix amp gain register offset & default ASoC: tas2764: Correct playback volume range ASoC: tas2764: Fix and extend FSYNC polarity handling ASoC: tas2764: Add post reset delays ASoC: sgtl5000: Fix noise on shutdown/remove ima: Fix a potential integer overflow in ima_appraise_measurement drm/i915: fix a possible refcount leak in intel_dp_add_mst_connector() net/mlx5e: Ring the TX doorbell on DMA errors net/mlx5e: Fix capability check for updating vnic env counters net/mlx5e: Fix enabling sriov while tc nic rules are offloaded net/mlx5e: kTLS, Fix build time constant test in RX net/mlx5e: kTLS, Fix build time constant test in TX ARM: 9210/1: Mark the FDT_FIXED sections as shareable ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle spi: amd: Limit max transfer and message size ARM: dts: imx6qdl-ts7970: Fix ngpio typo and count reset: Fix devm bulk optional exclusive control getter xfs: drop async cache flushes from CIL commits. xfs: run callbacks before waking waiters in xlog_state_shutdown_callbacks xfs: don't include bnobt blocks when reserving free block pool xfs: only run COW extent recovery when there are no live extents Revert "evm: Fix memleak in init_desc" sh: convert nommu io{re,un}map() to static inline functions nilfs2: fix incorrect masking of permission flags for symlinks fs/remap: constrain dedupe of EOF blocks drm/panfrost: Fix shrinker list corruption by madvise IOCTL drm/panfrost: Put mapping instead of shmem obj on panfrost_mmu_map_fault_addr() error btrfs: return -EAGAIN for NOWAIT dio reads/writes on compressed and inline extents cgroup: Use separate src/dst nodes when preloading css_sets for migration wifi: mac80211: fix queue selection for mesh/OCB interfaces ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction ARM: 9213/1: Print message about disabled Spectre workarounds only once ip: fix dflt addr selection for connected nexthop net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer tracing/histograms: Fix memory leak problem mm: split huge PUD on wp_huge_pud fallback mm: userfaultfd: fix UFFDIO_CONTINUE on fallocated shmem pages fix race between exit_itimers() and /proc/pid/timers xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue ALSA: hda/realtek - Enable the headset-mic on a Xiaomi's laptop ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc221 ALSA: hda/realtek: fix mute/micmute LEDs for HP machines ALSA: hda/realtek - Fix headset mic problem for a HP machine with alc671 ALSA: hda/realtek: Fix headset mic for Acer SF313-51 ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model ALSA: hda - Add fixup for Dell Latitidue E5430 Linux 5.15.55 Revert "mtd: rawnand: gpmi: Fix setting busy timeout setting" Linux 5.15.54 selftests/net: fix section name when using xdp_dummy.o dmaengine: idxd: force wq context cleanup on device disable path dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate dmaengine: qcom: bam_dma: fix runtime PM underflow dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly dmaengine: lgm: Fix an error handling path in intel_ldma_probe() dmaengine: pl330: Fix lockdep warning about non-static key ida: don't use BUG_ON() for debugging dt-bindings: dma: allwinner,sun50i-a64-dma: Fix min/max typo Revert "serial: 8250_mtk: Make sure to select the right FEATURE_SEL" Revert "mm/memory-failure.c: fix race with changing page compound again" misc: rtsx_usb: set return value in rsp_buf alloc err path misc: rtsx_usb: use separate command and response buffers misc: rtsx_usb: fix use of dma mapped buffer for usb bulk transfer dmaengine: imx-sdma: Allow imx8m for imx7 FW revs i2c: cadence: Unregister the clk notifier in error path r8169: fix accessing unset transport header selftests: forwarding: fix error message in learning_test selftests: forwarding: fix learning_test when h1 supports IFF_UNICAST_FLT selftests: forwarding: fix flood_unicast_test when h2 supports IFF_UNICAST_FLT ibmvnic: Properly dispose of all skbs during a failover. ARM: dts: stm32: add missing usbh clock and fix clk order on stm32mp15 ARM: dts: stm32: use usbphyc ck_usbo_48m as USBH OHCI clock on stm32mp151 i40e: Fix VF's MAC Address change on VM i40e: Fix dropped jumbo frames statistics i2c: piix4: Fix a memory leak in the EFCH MMIO support xsk: Clear page contiguity bit when unmapping pool ARM: at91: fix soc detection for SAM9X60 SiPs ARM: dts: at91: sama5d2_icp: fix eeprom compatibles ARM: dts: at91: sam9x60ek: fix eeprom compatible and size ARM: at91: pm: use proper compatibles for sama7g5's rtc and rtt ARM: at91: pm: use proper compatibles for sam9x60's rtc and rtt ARM: at91: pm: use proper compatible for sama5d2's rtc arm64: dts: qcom: msm8992-*: Fix vdd_lvs1_2-supply typo pinctrl: sunxi: sunxi_pconf_set: use correct offset arm64: dts: imx8mp-phyboard-pollux-rdk: correct i2c2 & mmc settings arm64: dts: imx8mp-phyboard-pollux-rdk: correct eqos pad settings arm64: dts: imx8mp-phyboard-pollux-rdk: correct uart pad settings arm64: dts: imx8mp-evk: correct I2C3 pad settings arm64: dts: imx8mp-evk: correct I2C1 pad settings arm64: dts: imx8mp-evk: correct eqos pad settings arm64: dts: imx8mp-evk: correct vbus pad settings arm64: dts: imx8mp-evk: correct gpio-led pad settings arm64: dts: imx8mp-evk: correct the uart2 pinctl value arm64: dts: imx8mp-evk: correct mmc pad settings ARM: mxs_defconfig: Enable the framebuffer arm64: dts: qcom: sdm845: use dispcc AHB clock for mdss node arm64: dts: qcom: msm8994: Fix CPU6/7 reg values ASoC: codecs: rt700/rt711/rt711-sdca: resume bus/codec in .set_jack_detect ASoC: rt711-sdca: Add endianness flag in snd_soc_component_driver ASoC: rt711: Add endianness flag in snd_soc_component_driver pinctrl: sunxi: a83t: Fix NAND function name for some pins ARM: meson: Fix refcount leak in meson_smp_prepare_cpus tty: n_gsm: fix encoding of command/response bit btrfs: fix use of uninitialized variable at rm device ioctl virtio-blk: modify the value type of num in virtio_queue_rq() btrfs: fix error pointer dereference in btrfs_ioctl_rm_dev_v2() Revert "serial: sc16is7xx: Clear RS485 bits in the shutdown" xfs: remove incorrect ASSERT in xfs_rename can: kvaser_usb: kvaser_usb_leaf: fix bittiming limits can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info net: dsa: qca8k: reset cpu port on MTU change powerpc/powernv: delay rng platform device creation until later in boot video: of_display_timing.h: include errno.h memregion: Fix memregion_free() fallback definition PM: runtime: Redefine pm_runtime_release_supplier() fbcon: Prevent that screen size is smaller than font size fbcon: Disallow setting font bigger than screen size fbmem: Check virtual screen sizes in fb_set_var() fbdev: fbmem: Fix logo center image dx issue iommu/vt-d: Fix PCI bus rescan device hot add module: fix [e_shstrndx].sh_size=0 OOB access module: change to print useful messages from elf_validity_check() dt-bindings: soc: qcom: smd-rpm: Fix missing MSM8936 compatible dt-bindings: soc: qcom: smd-rpm: Add compatible for MSM8953 SoC rxrpc: Fix locking issue irqchip/gic-v3: Refactor ISB + EOIR at ack time irqchip/gic-v3: Ensure pseudo-NMIs have an ISB between ack and handling io_uring: avoid io-wq -EAGAIN looping for !IOPOLL Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event Bluetooth: protect le accept and resolv lists with hdev->lock drm/mediatek: Add vblank register/unregister callback functions drm/mediatek: Add cmdq_handle in mtk_crtc drm/mediatek: Detect CMDQ execution timeout drm/mediatek: Remove the pointer of struct cmdq_client drm/mediatek: Use mailbox rx_callback instead of cmdq_task_cb drm/i915: Fix a race between vma / object destruction and unbinding drm/amdgpu: vi: disable ASPM on Intel Alder Lake based systems drm/amd: Refactor `amdgpu_aspm` to be evaluated per device tty: n_gsm: fix invalid gsmtty_write_room() result serial: 8250_mtk: Make sure to select the right FEATURE_SEL tty: n_gsm: fix sometimes uninitialized warning in gsm_dlci_modem_output() tty: n_gsm: fix invalid use of MSC in advanced option mm/hwpoison: fix race between hugetlb free/demotion and memory_failure_hugetlb() mm/memory-failure.c: fix race with changing page compound again mm/hwpoison: avoid the impact of hwpoison_filter() return value on mce handler mm/hwpoison: mf_mutex for soft offline and unpoison KVM: Initialize debugfs_dentry when a VM is created to avoid NULL deref btrfs: zoned: use dedicated lock for data relocation btrfs: zoned: encapsulate inode locking for zoned relocation tty: n_gsm: fix missing update of modem controls after DLCI open ALSA: usb-audio: add mapping for MSI MAG X570S Torpedo MAX. ALSA: usb-audio: add mapping for MSI MPG X570S Carbon Max Wifi. tty: n_gsm: fix frame reception handling tty: n_gsm: Save dlci address open status when config requester tty: n_gsm: Modify CR,PF bit when config requester KVM: Don't create VM debugfs files outside of the VM directory drm/amd/vcn: fix an error msg on vcn 3.0 ASoC: rt5682: fix an incorrect NULL check on list iterator ASoC: rt5682: move clk related code to rt5682_i2c_probe uapi/linux/stddef.h: Add include guards stddef: Introduce DECLARE_FLEX_ARRAY() helper bus: mhi: Fix pm_state conversion to string bus: mhi: core: Use correctly sized arguments for bit field serial: sc16is7xx: Clear RS485 bits in the shutdown powerpc/tm: Fix more userspace r13 corruption powerpc: flexible GPR range save/restore macros powerpc/32: Don't use lmw/stmw for saving/restoring non volatile regs scsi: qla2xxx: Fix loss of NVMe namespaces after driver reload test KVM: s390x: fix SCK locking btrfs: don't access possibly stale fs_info data in device_list_add KVM: use __vcalloc for very large allocations mm: vmalloc: introduce array allocation functions Compiler Attributes: add __alloc_size() for better bounds checking mtd: spi-nor: Skip erase logic when SPI_NOR_NO_ERASE is set batman-adv: Use netif_rx(). iio: accel: mma8452: use the correct logic to get mma8452_data riscv/mm: Add XIP_FIXUP for riscv_pfn_base NFSD: COMMIT operations must not return NFS?ERR_INVAL NFSD: De-duplicate net_generic(nf->nf_net, nfsd_net_id) drm/amd/display: Fix by adding FPU protection for dcn30_internal_validate_bw drm/amd/display: Set min dcfclk if pipe count is 0 drbd: fix an invalid memory access caused by incorrect use of list iterator drbd: Fix double free problem in drbd_create_device drbd: add error handling support for add_disk() btrfs: remove device item and update super block in the same transaction btrfs: use btrfs_get_dev_args_from_path in dev removal ioctls btrfs: add a btrfs_get_dev_args_from_path helper btrfs: handle device lookup with btrfs_dev_lookup_args vdpa/mlx5: Avoid processing works if workqueue was destroyed gfs2: Fix gfs2_file_buffered_write endless loop workaround scsi: qla2xxx: Fix crash during module load unload test scsi: qla2xxx: edif: Replace list_for_each_safe with list_for_each_entry_safe scsi: qla2xxx: Fix laggy FC remote port session recovery scsi: qla2xxx: Move heartbeat handling from DPC thread to workqueue KVM: x86/mmu: Use common TDP MMU zap helper for MMU notifier unmap hook KVM: x86/mmu: Use yield-safe TDP MMU root iter in MMU notifier unmapping clk: renesas: r9a07g044: Update multiplier and divider values for PLL2/3 cxl/port: Hold port reference until decoder release mt76: mt7921: do not always disable fw runtime-pm mt76: mt76_connac: fix MCU_CE_CMD_SET_ROC definition error media: davinci: vpif: fix use-after-free on driver unbind media: omap3isp: Use struct_group() for memcpy() region stddef: Introduce struct_group() helper macro block: fix rq-qos breakage from skipping rq_qos_done_bio() block: only mark bio as tracked if it really is tracked block: use bdev_get_queue() in bio.c io_uring: ensure that fsnotify is always called virtio-blk: avoid preallocating big SGL for data ibmvnic: Allow queueing resets during probe ibmvnic: clear fop when retrying probe ibmvnic: init init_done_rc earlier s390/setup: preserve memory at OLDMEM_BASE and OLDMEM_SIZE s390/setup: use physical pointers for memblock_reserve() s390/boot: allocate amode31 section in decompressor netfilter: nft_payload: don't allow th access for fragments netfilter: nft_payload: support for inner header matching / mangling netfilter: nf_tables: convert pktinfo->tprot_set to flags field ASoC: rt5682: Fix deadlock on resume ASoC: rt5682: Re-detect the combo jack after resuming ASoC: rt5682: Avoid the unexpected IRQ event during going to suspend net/mlx5e: TC, Reject rules with forward and drop actions net/mlx5e: TC, Reject rules with drop and modify hdr action net/mlx5e: Split actions_match_supported() into a sub function net/mlx5e: Check action fwd/drop flag exists also for nic flows RISC-V: defconfigs: Set CONFIG_FB=y, for FB console riscv: defconfig: enable DRM_NOUVEAU bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC bpf: Stop caching subprog index in the bpf_pseudo_func insn mt76: mt7921: fix a possible race enabling/disabling runtime-pm mt76: mt7921: introduce mt7921_mcu_set_beacon_filter utility routine mt76: mt7921: get rid of mt7921_mac_set_beacon_filter platform/x86: wmi: Fix driver->notify() vs ->probe() race platform/x86: wmi: Replace read_takes_no_args with a flags field platform/x86: wmi: introduce helper to convert driver to WMI driver qed: Improve the stack space of filter_config() ath11k: add hw_param for wakeup_mhi memory: renesas-rpc-if: Avoid unaligned bus access for HyperFlash media: ir_toy: prevent device from hanging during transmit PCI: pciehp: Ignore Link Down/Up caused by error-induced Hot Reset PCI/portdrv: Rename pm_iter() to pcie_port_device_iter() drm/i915: Replace the unconditional clflush with drm_clflush_virt_range() drm/i915/gt: Register the migrate contexts with their engines drm/i915: Disable bonding on gen12+ platforms btrfs: fix deadlock between chunk allocation and chunk btree modifications dma-buf/poll: Get a file reference for outstanding fence callbacks Input: goodix - try not to touch the reset-pin on x86/ACPI devices Input: goodix - refactor reset handling Input: goodix - add a goodix.h header file Input: goodix - change goodix_i2c_write() len parameter type to int Input: cpcap-pwrbutton - handle errors from platform_get_irq() btrfs: fix warning when freeing leaf after subvolume creation failure btrfs: fix invalid delayed ref after subvolume creation failure btrfs: add additional parameters to btrfs_init_tree_ref/btrfs_init_data_ref btrfs: rename btrfs_alloc_chunk to btrfs_create_chunk netfilter: nf_tables: stricter validation of element data netfilter: nft_set_pipapo: release elements in clone from abort path net: rose: fix UAF bug caused by rose_t0timer_expiry usbnet: fix memory leak in error case bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals bpf: Fix incorrect verifier simulation around jmp32's jeq/jne can: mcp251xfd: mcp251xfd_regmap_crc_read(): update workaround broken CRC on TBC register can: mcp251xfd: mcp251xfd_regmap_crc_read(): improve workaround handling for mcp2517fd can: m_can: m_can_{read_fifo,echo_tx_event}(): shift timestamp to full 32 bits can: m_can: m_can_chip_config(): actually enable internal timestamping can: gs_usb: gs_usb_open/close(): fix memory leak can: grcan: grcan_probe(): remove extra of_node_get() can: bcm: use call_rcu() instead of costly synchronize_rcu() ALSA: cs46xx: Fix missing snd_card_free() call at probe error ALSA: hda/realtek: Add quirk for Clevo L140PU ALSA: usb-audio: Workarounds for Behringer UMC 204/404 HD Revert "selftests/bpf: Add test for bpf_timer overwriting crash" mm/filemap: fix UAF in find_lock_entries mm/slub: add missing TID updates on slab deactivation Linux 5.15.53 hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails hwmon: (occ) Prevent power cap command overwriting poll response hwmon: (occ) Remove sequence numbering and checksum calculation drm/fourcc: fix integer type usage in uapi header platform/x86: panasonic-laptop: filter out duplicate volume up/down/mute keypresses platform/x86: panasonic-laptop: don't report duplicate brightness key-presses platform/x86: panasonic-laptop: revert "Resolve hotkey double trigger bug" platform/x86: panasonic-laptop: sort includes alphabetically platform/x86: panasonic-laptop: de-obfuscate button codes drivers: cpufreq: Add missing of_node_put() in qoriq-cpufreq.c drm/msm/gem: Fix error return on fence id alloc fail drm/i915/gem: add missing else net: fix IFF_TX_SKB_NO_LINEAR definition fsi: occ: Force sequence numbering per OCC clocksource/drivers/ixp4xx: remove EXPORT_SYMBOL_GPL from ixp4xx_timer_setup() net: usb: qmi_wwan: add Telit 0x1070 composition xen/arm: Fix race in RB-tree based P2M accounting xen-netfront: restore __skb_queue_tail() positioning in xennet_get_responses() xen/blkfront: force data bouncing when backend is untrusted xen/netfront: force data bouncing when backend is untrusted xen/netfront: fix leaking data in shared pages xen/blkfront: fix leaking data in shared pages selftests/rseq: Change type of rseq_offset to ptrdiff_t selftests/rseq: x86-32: use %gs segment selector for accessing rseq thread area selftests/rseq: x86-64: use %fs segment selector for accessing rseq thread area selftests/rseq: Fix: work-around asm goto compiler bugs selftests/rseq: Remove arm/mips asm goto compiler work-around selftests/rseq: Fix warnings about #if checks of undefined tokens selftests/rseq: Fix ppc32 offsets by using long rather than off_t selftests/rseq: Fix ppc32 missing instruction selection "u" and "x" for load/store selftests/rseq: Fix ppc32: wrong rseq_cs 32-bit field pointer on big endian selftests/rseq: Uplift rseq selftests for compatibility with glibc-2.35 selftests/rseq: Introduce thread pointer getters selftests/rseq: Introduce rseq_get_abi() helper selftests/rseq: Remove volatile from __rseq_abi selftests/rseq: Remove useless assignment to cpu variable selftests/rseq: introduce own copy of rseq uapi header selftests/rseq: remove ARRAY_SIZE define from individual tests selftests/bpf: Add test_verifier support to fixup kfunc call insns tcp: add a missing nf_reset_ct() in 3WHS handling MAINTAINERS: add Leah as xfs maintainer for 5.15.y net: tun: avoid disabling NAPI twice mlxsw: spectrum_router: Fix rollback in tunnel next hop init ipv6: fix lockdep splat in in6_dump_addrs() ipv6/sit: fix ipip6_tunnel_get_prl return value tunnels: do not assume mac header is set in skb_tunnel_check_pmtu() ACPI: video: Change how we determine if brightness key-presses are handled io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio epic100: fix use after free on rmmod tipc: move bc link creation back to tipc_node_create NFC: nxp-nci: Don't issue a zero length i2c_master_read() nfc: nfcmrvl: Fix irq_of_parse_and_map() return value powerpc/memhotplug: Add add_pages override for PPC net: bonding: fix use-after-free after 802.3ad slave unbind net: phy: ax88772a: fix lost pause advertisement configuration net: bonding: fix possible NULL deref in rlb code net: asix: fix "can't send until first packet is send" issue net/sched: act_api: Notify user space if any actions were flushed before error net/dsa/hirschmann: Add missing of_node_get() in hellcreek_led_setup() netfilter: nft_dynset: restore set element counter when failing to update s390: remove unneeded 'select BUILD_BIN2C' vdpa/mlx5: Update Control VQ callback information PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events caif_virtio: fix race between virtio_device_ready() and ndo_open() vfs: fix copy_file_range() regression in cross-fs copies NFSD: restore EINVAL error translation in nfsd_commit() net: ipv6: unexport __init-annotated seg6_hmac_net_init() selftests: mptcp: more stable diag tests usbnet: fix memory allocation in helpers net: usb: asix: do not force pause frames support linux/dim: Fix divide by 0 in RDMA DIM RDMA/cm: Fix memory leak in ib_cm_insert_listen RDMA/qedr: Fix reporting QP timeout attribute net: dp83822: disable rx error interrupt net: dp83822: disable false carrier interrupt net: tun: stop NAPI when detaching queues net: tun: unlink NAPI from device on destruction net: dsa: bcm_sf2: force pause link settings selftests/net: pass ipv6_args to udpgso_bench's IPv6 TCP test virtio-net: fix race between ndo_open() and virtio_device_ready() net: usb: ax88179_178a: Fix packet receiving net: rose: fix UAF bugs caused by timer handler SUNRPC: Fix READ_PLUS crasher s390/archrandom: simplify back to earlier design and initialize earlier dm raid: fix KASAN warning in raid5_add_disks dm raid: fix accesses beyond end of raid member array powerpc/bpf: Fix use of user_pt_regs in uapi powerpc/book3e: Fix PUD allocation size in map_kernel_page() powerpc/prom_init: Fix kernel config grep nvdimm: Fix badblocks clear off-by-one error nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA IM2P33F8ABR1 nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG SX6000LNP (AKA SPECTRIX S40G) net: phy: Don't trigger state machine while in suspend ipv6: take care of disable_policy when restoring routes ksmbd: use vfs_llseek instead of dereferencing NULL ksmbd: check invalid FileOffset and BeyondFinalZero in FSCTL_ZERO_DATA ksmbd: set the range of bytes to zero without extending file size in FSCTL_ZERO_DATA drm/amdgpu: To flush tlb for MMHUB of RAVEN series Revert "drm/amdgpu/display: set vblank_disable_immediate for DC" Linux 5.15.52 io_uring: fix not locked access to fixed buf table net: mscc: ocelot: allow unregistered IP multicast flooding to CPU rtw88: rtw8821c: enable rfe 6 devices rtw88: 8821c: support RFE type4 wifi NIC fs: account for group membership fs: fix acl translation fs: support mapped mounts of mapped filesystems fs: add i_user_ns() helper fs: port higher-level mapping helpers fs: remove unused low-level mapping helpers fs: use low-level mapping helpers docs: update mapping documentation fs: account for filesystem mappings fs: tweak fsuidgid_has_mapping() fs: move mapping helpers fs: add is_idmapped_mnt() helper powerpc/ftrace: Remove ftrace init tramp once kernel init is complete xfs: only bother with sync_filesystem during readonly remount xfs: prevent UAF in xfs_log_item_in_current_chkpt xfs: check sb_meta_uuid for dabuf buffer recovery xfs: remove all COW fork extents when remounting readonly xfs: Fix the free logic of state in xfs_attr_node_hasname xfs: punch out data fork delalloc blocks on COW writeback failure xfs: use kmem_cache_free() for kmem_cache objects bcache: memset on stack variables in bch_btree_check() and bch_sectors_dirty_init() x86, kvm: use proper ASM macros for kvm_vcpu_is_preempted tick/nohz: unexport __init-annotated tick_nohz_full_setup() Linux 5.15.51 powerpc/pseries: wire up rng during setup_arch() kbuild: link vmlinux only once for CONFIG_TRIM_UNUSED_KSYMS (2nd attempt) dma-direct: use the correct size for dma_set_encrypted() perf build-id: Fix caching files with a wrong build ID random: update comment from copy_to_user() -> copy_to_iter() ARM: dts: bcm2711-rpi-400: Fix GPIO line names modpost: fix section mismatch check for exported init/exit sections ARM: cns3xxx: Fix refcount leak in cns3xxx_init memory: samsung: exynos5422-dmc: Fix refcount leak in of_get_dram_timings ARM: Fix refcount leak in axxia_boot_secondary soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe ARM: exynos: Fix refcount leak in exynos_map_pmu arm64: dts: ti: k3-am64-main: Remove support for HS400 speed mode ARM: dts: imx6qdl: correct PU regulator ramp delay ARM: dts: imx7: Move hsic_phy power domain to HSIC PHY node drm/msm/dp: Always clear mask bits to disable interrupts at dp_ctrl_reset_irq_ctrl() powerpc/powernv: wire up rng during setup_arch powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address powerpc: Enable execve syscall exit tracepoint powerpc/microwatt: wire up rng during setup_arch() parisc: Enable ARCH_HAS_STRICT_MODULE_RWX parisc/stifb: Fix fb_is_primary_device() only available with CONFIG_FB_STI xtensa: Fix refcount leak bug in time.c xtensa: xtfpga: Fix refcount leak bug in setup iio: adc: ti-ads131e08: add missing fwnode_handle_put() in ads131e08_alloc_channels() iio: adc: adi-axi-adc: Fix refcount leak in adi_axi_adc_attach_client iio: adc: rzg2l_adc: add missing fwnode_handle_put() in rzg2l_adc_parse_properties() iio: adc: axp288: Override TS pin bias current for some models iio: adc: stm32: Fix IRQs on STM32F4 by removing custom spurious IRQs message iio: adc: stm32: Fix ADCs iteration in irq handler iio: afe: rescale: Fix boolean logic bug iio: imu: inv_icm42600: Fix broken icm42600 (chip id 0 value) iio: adc: stm32: fix maximum clock rate for stm32mp15x iio: trigger: sysfs: fix use-after-free on remove iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up() iio: accel: mma8452: ignore the return value of reset operation iio:accel:mxc4005: rearrange iio trigger get and register iio:accel:bma180: rearrange iio trigger get and register iio:accel:kxcjk-1013: rearrange iio trigger get and register iio:chemical:ccs811: rearrange iio trigger get and register iio:humidity:hts221: rearrange iio trigger get and register f2fs: attach inline_data after setting compression btrfs: fix deadlock with fsync+fiemap+transaction commit btrfs: don't set lock_owner when locking extent buffer for reading dt-bindings: usb: ehci: Increase the number of PHYs dt-bindings: usb: ohci: Increase the number of PHYs usb: chipidea: udc: check request status before setting device address USB: gadget: Fix double-free bug in raw_gadget driver usb: gadget: Fix non-unique driver names in raw-gadget driver xhci-pci: Allow host runtime PM as default for Intel Meteor Lake xHCI xhci-pci: Allow host runtime PM as default for Intel Raptor Lake xHCI xhci: turn off port power in shutdown usb: typec: wcove: Drop wrong dependency to INTEL_SOC_PMIC iio: adc: vf610: fix conversion mode sysfs node name iio: magnetometer: yas530: Fix memchr_inv() misuse iio: mma8452: fix probe fail when device tree compatible is used. s390/cpumf: Handle events cycles and instructions identical gpio: winbond: Fix error code in winbond_gpio_get() nvme: move the Samsung X5 quirk entry to the core quirks nvme-pci: add NO APST quirk for Kioxia device sock: redo the psock vs ULP protection check Revert "net/tls: fix tls_sk_proto_close executed repeatedly" virtio_net: fix xdp_rxq_info bug after suspend/resume igb: Make DMA faster when CPU is active on the PCIe link regmap-irq: Fix offset/index mismatch in read_sub_irq_data() regmap-irq: Fix a bug in regmap_irq_enable() for type_in_mask chips ice: ethtool: advertise 1000M speeds properly afs: Fix dynamic root getattr MIPS: Remove repetitive increase irq_err_count x86/xen: Remove undefined behavior in setup_features() xen-blkfront: Handle NULL gendisk selftests: netfilter: correct PKTGEN_SCRIPT_PATHS in nft_concat_range.sh udmabuf: add back sanity check net/tls: fix tls_sk_proto_close executed repeatedly erspan: do not assume transport header is always set perf arm-spe: Don't set data source if it's not a memory operation drm/msm/dp: force link training for display resolution change drm/msm/dp: do not initialize phy until plugin interrupt received drm/msm/dp: dp_link_parse_sink_count() return immediately if aux read failed drm/msm/dp: Drop now unused hpd_high member drm/msm/dp: check core_initialized before disable interrupts at dp_display_unbind() drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms ethtool: Fix get module eeprom fallback bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers igb: fix a use-after-free issue in igb_clean_tx_ring tipc: fix use-after-free Read in tipc_named_reinit net: fix data-race in dev_isalive() net: Write lock dev_base_lock without disabling bottom halves. KVM: arm64: Prevent kmemleak from accessing pKVM memory phy: aquantia: Fix AN when higher speeds than 1G are not advertised scsi: storvsc: Correct reporting of Hyper-V I/O size limits bpf, x86: Fix tail call count offset calculation on bpf2bpf call drm/sun4i: Fix crash during suspend after component bind failure bpf: Fix request_sock leak in sk lookup helpers drm/msm: use for_each_sgtable_sg to iterate over scatterlist xsk: Fix generic transmit when completion queue reservation fails scsi: iscsi: Exclude zero from the endpoint ID range drm/msm: Switch ordering of runpm put vs devfreq_idle scsi: scsi_debug: Fix zone transition to full condition netfilter: use get_random_u32 instead of prandom drm/msm: Fix double pm_runtime_disable() call drm/msm: Ensure mmap offset is initialized USB: serial: option: add Quectel RM500K module support USB: serial: option: add Quectel EM05-G modem USB: serial: option: add Telit LE910Cx 0x1250 composition USB: serial: pl2303: add support for more HXN (G) types drm/i915: Implement w/a 22010492432 for adl-s tracing/kprobes: Check whether get_kretprobe() returns NULL in kretprobe_dispatcher() dm mirror log: clear log bits up to BITS_PER_LONG boundary dm era: commit metadata in postsuspend after worker stops ata: libata: add qc->flags in ata_qc_complete_template tracepoint mtd: rawnand: gpmi: Fix setting busy timeout setting MAINTAINERS: Add new IOMMU development mailing list xen/gntdev: Avoid blocking in unmap_grant_pages() mmc: mediatek: wait dma stop bit reset to 0 mmc: sdhci-pci-o2micro: Fix card detect by dealing with debouncing scsi: ibmvfc: Allocate/free queue resource only during probe/remove scsi: ibmvfc: Store vhost pointer during subcrq allocation btrfs: add error messages to all unrecognized mount options btrfs: prevent remounting to v1 space cache for subpage mount btrfs: fix hang during unmount when block group reclaim task is running 9p: fix fid refcount leak in v9fs_vfs_get_link 9p: fix fid refcount leak in v9fs_vfs_atomic_open_dotl 9p: Fix refcounting during full path walks for fid lookups net: openvswitch: fix parsing of nw_proto for IPv6 fragments ALSA: hda/realtek: Add quirk for Clevo NS50PU ALSA: hda/realtek: Add quirk for Clevo PD70PNT ALSA: hda/realtek: Apply fixup for Lenovo Yoga Duet 7 properly ALSA: hda/realtek - ALC897 headset MIC no sound ALSA: hda/realtek: Add mute LED quirk for HP Omen laptop ALSA: hda/conexant: Fix missing beep setup ALSA: hda/via: Fix missing beep setup random: quiet urandom warning ratelimit suppression message random: schedule mix_interrupt_randomness() less often Linux 5.15.50 arm64: mm: Don't invalidate FROM_DEVICE buffers at start of DMA transfer serial: core: Initialize rs485 RTS polarity already on probe selftests/bpf: Add selftest for calling global functions from freplace bpf: Fix calling global functions from BPF_PROG_TYPE_EXT programs usb: gadget: u_ether: fix regression in setting fixed MAC address zonefs: fix zonefs_iomap_begin() for reads net: mana: Add handling of CQE_RX_TRUNCATED drm/amd/display: Don't reinitialize DMCUB on s0ix resume s390/mm: use non-quiescing sske for KVM switch to keyed guest ANDROID: cpu/hotplug: avoid breaking Android ABI by fusing cpuhp steps ANDROID: change function signatures for some random functions. ANDROID: random: add back removed callback functions Linux 5.15.49 clk: imx8mp: fix usb_root_clk parent powerpc/book3e: get rid of #include <generated/compile.h> virtio-pci: Remove wrong address verification in vp_del_vqs() ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machine KVM: arm64: Don't read a HW interrupt pending state in user context ext4: add reserved GDT blocks check ext4: make variable "count" signed ext4: fix bug_on ext4_mb_use_inode_pa ext4: fix super block checksum incorrect after mount cfi: Fix __cfi_slowpath_diag RCU usage with cpuidle drm/amd/display: Cap OLED brightness per max frame-average luminance dm mirror log: round up region bitmap size to BITS_PER_LONG bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove() serial: 8250: Store to lsr_save_flags after lsr read tty: n_gsm: Debug output allocation must use GFP_ATOMIC usb: gadget: f_fs: change ep->ep safe in ffs_epfile_io() usb: gadget: f_fs: change ep->status safe in ffs_epfile_io() usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe usb: cdnsp: Fixed setting last_trb incorrectly usb: dwc2: Fix memory leak in dwc2_hcd_init USB: serial: io_ti: add Agilent E5805A support USB: serial: option: add support for Cinterion MV31 with new baseline crypto: memneq - move into lib/ comedi: vmk80xx: fix expression for tx buffer size mei: me: add raptor lake point S DID mei: hbm: drop capability response on early shutdown i2c: designware: Use standard optional ref clock implementation sched: Fix balance_push() vs __sched_setscheduler() irqchip/realtek-rtl: Fix refcount leak in map_interrupts irqchip/gic-v3: Fix refcount leak in gic_populate_ppi_partitions irqchip/gic-v3: Fix error handling in gic_populate_ppi_partitions irqchip/gic/realview: Fix refcount leak in realview_gic_of_init i2c: npcm7xx: Add check for platform_driver_register faddr2line: Fix overlapping text section failures, the sequel block: Fix handling of offline queues in blk_mq_alloc_request_hctx() init: Initialize noop_backing_dev_info early certs/blacklist_hashes.c: fix const confusion in certs blacklist arm64: ftrace: consistently handle PLTs. arm64: ftrace: fix branch range checks net: ax25: Fix deadlock caused by skb_recv_datagram in ax25_recvmsg net: bgmac: Fix an erroneous kfree() in bgmac_remove() mlxsw: spectrum_cnt: Reorder counter pools nvme: add device name to warning in uuid_show() net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization net: hns3: don't push link state to VF if unalive net: hns3: set port base vlan tbl_sta to false before removing old vlan net: hns3: split function hclge_update_port_base_vlan_cfg() drm/i915/reset: Fix error_state_read ptr + offset use io_uring: fix races with buffer table unregister io_uring: fix races with file table unregister misc: atmel-ssc: Fix IRQ check in ssc_probe tty: goldfish: Fix free_irq() on remove Drivers: hv: vmbus: Release cpu lock in error case i40e: Fix call trace in setup_tx_descriptors i40e: Fix calculating the number of queue pairs i40e: Fix adding ADQ filter to TC0 clocksource: hyper-v: unexport __init-annotated hv_init_clocksource() sunrpc: set cl_max_connect when cloning an rpc_clnt pNFS: Avoid a live lock condition in pnfs_update_layout() pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE staging: r8188eu: Fix warning of array overflow in ioctl_linux.c staging: r8188eu: Use zeroing allocator in wpa_set_encryption() staging: r8188eu: fix rtw_alloc_hwxmits error detection for now platform/x86/intel: hid: Add Surface Go to VGBS allow list platform/x86: gigabyte-wmi: Add support for B450M DS3H-CF platform/x86: gigabyte-wmi: Add Z690M AORUS ELITE AX DDR4 support gpio: dwapb: Don't print error on -EPROBE_DEFER random: credit cpu and bootloader seeds by default MIPS: Loongson-3: fix compile mips cpu_hwmon as module build error. mellanox: mlx5: avoid uninitialized variable warning with gcc-12 gcc-12: disable '-Wdangling-pointer' warning for now net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface netdev[napi]_alloc_frag ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed ALSA: hda/realtek - Add HW8326 support scsi: pmcraid: Fix missing resource cleanup in error case scsi: ipr: Fix missing/incorrect resource cleanup in error case scsi: mpt3sas: Fix out-of-bounds compiler warning scsi: lpfc: Allow reduced polling rate for nvme_admin_async_event cmd completion scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology scsi: lpfc: Resolve NULL ptr dereference after an ELS LOGO is aborted scsi: vmw_pvscsi: Expand vcpuHint to 16 bits Input: soc_button_array - also add Lenovo Yoga Tablet2 1051F to dmi_use_low_level_irq ASoC: wm_adsp: Fix event generation for wm_adsp_fw_put() ASoC: es8328: Fix event generation for deemphasis control ASoC: wm8962: Fix suspend while playing music quota: Prevent memory allocation recursion while holding dq_lock ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() drm/amdkfd: add pinned BOs to kfd_bo_list ASoC: cs42l51: Correct minimum value for SX volume control ASoC: cs42l56: Correct typo in minimum level for SX volume controls ASoC: cs42l52: Correct TLV for Bypass Volume ASoC: cs53l30: Correct number of volume levels on SX controls ASoC: cs35l36: Update digital volume TLV ASoC: cs42l52: Fix TLV scales for mixer controls dma-debug: make things less spammy under memory pressure drm/amdkfd: Use mmget_not_zero in MMU notifier drm/amd/display: Read Golden Settings Table from VBIOS ASoC: nau8822: Add operation for internal PLL off and on powerpc/kasan: Silence KASAN warnings in __get_wchan() arm64: dts: imx8mn-beacon: Enable RTS-CTS on UART3 arm64: dts: imx8mm-beacon: Enable RTS-CTS on UART3 nfsd: Replace use of rwsem with errseq_t Revert "drm/amd/display: Fix DCN3 B0 DP Alt Mapping" Linux 5.15.48 x86/speculation/mmio: Print SMT warning KVM: x86/speculation: Disable Fill buffer clear within guests x86/speculation/mmio: Reuse SRBDS mitigation for SBDS x86/speculation/srbds: Update SRBDS mitigation selection x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data x86/speculation/mmio: Enable CPU Fill buffer clearing on idle x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data x86/speculation: Add a common function for MD_CLEAR mitigation update x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug Documentation: Add documentation for Processor MMIO Stale Data Linux 5.15.47 xsk: Fix possible crash when multiple sockets are created tcp: fix tcp_mtup_probe_success vs wrong snd_cwnd dmaengine: idxd: add missing callback function to support DMA_INTERRUPT iov_iter: fix build issue due to possible type mis-match zonefs: fix handling of explicit_open option on mount PCI: qcom: Fix pipe clock imbalance net/sched: act_police: more accurate MTU policing md/raid0: Ignore RAID0 layout if the second zone has only one device random: account for arch randomness in bits random: mark bootloader randomness code as __init random: avoid checking crng_ready() twice in random_init() drm/ast: Create threshold values for AST2600 powerpc/mm: Switch obsolete dssall to .long powerpc/32: Fix overread/overwrite of thread_struct via ptrace drm/amdgpu: update VCN codec support for Yellow Carp drm/atomic: Force bridge self-refresh-exit on CRTC switch drm/bridge: analogix_dp: Support PSR-exit to disable transition powerpc: Don't select HAVE_IRQ_EXIT_ON_IRQ_STACK vduse: Fix NULL pointer dereference on sysfs access Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag ixgbe: fix unexpected VLAN Rx in promisc mode on VF ixgbe: fix bcast packets Rx on VF after promisc removal nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION writeback: Fix inode->i_io_list not be protected by inode->i_lock error net: openvswitch: fix misuse of the cached connection on tuple changes net: phy: dp83867: retrigger SGMII AN when link change mmc: block: Fix CQE recovery reset success ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files KEYS: trusted: tpm2: Fix migratable logic cifs: fix reconnect on smb3 mount types cifs: return errors during session setup during reconnects ALSA: hda/realtek: Add quirk for HP Dev One ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo Yoga DuetITL 2021 ALSA: hda/conexant - Fix loopback issue with CX20632 ALSA: usb-audio: Set up (implicit) sync for Saffire 6 ALSA: usb-audio: Skip generic sync EP parse for secondary EP scripts/gdb: change kernel config dumping method vringh: Fix loop descriptors check in the indirect cases nodemask: Fix return values to be unsigned drm/amd/pm: use bitmap_{from,to}_arr32 where appropriate cifs: version operations for smb20 unneeded when legacy support disabled s390/gmap: voluntarily schedule during key setting nbd: fix io hung while disconnecting device nbd: fix race between nbd_alloc_config() and module removal nbd: call genl_unregister_family() first in nbd_cleanup() jump_label,noinstr: Avoid instrumentation for JUMP_LABEL=n builds x86/cpu: Elide KCSAN for cpu_has() and friends modpost: fix undefined behavior of is_arm_mapping_symbol() um: line: Use separate IRQs per line drm/amd/pm: Fix missing thermal throttler status drm/radeon: fix a possible null pointer dereference drm/amd/display: Check if modulo is 0 before dividing. ceph: flush the mdlog for filesystem sync ceph: allow ceph.dir.rctime xattr to be updatable Revert "net: af_key: add check for pfkey_broadcast in function pfkey_process" scsi: myrb: Fix up null pointer access on myrb_cleanup() md: protect md_unregister_thread from reentrancy watchdog: wdat_wdt: Stop watchdog when rebooting the system kernfs: Separate kernfs_pr_cont_buf and rename_lock. serial: msm_serial: disable interrupts in __msm_console_write() staging: rtl8712: fix uninit-value in r871xu_drv_init() staging: rtl8712: fix uninit-value in usb_read8() and friends clocksource/drivers/sp804: Avoid error on multiple instances extcon: Modify extcon device to be created after driver data is set extcon: Fix extcon_get_extcon_dev() error handling misc: rtsx: set NULL intfdata when probe fails soundwire: qcom: adjust autoenumeration timeout usb: dwc2: gadget: don't reset gadget's driver->bus sysrq: do not omit current cpu when showing backtrace of all active CPUs char: xillybus: fix a refcount leak in cleanup_dev() USB: hcd-pci: Fully suspend across freeze/thaw cycle drivers: usb: host: Fix deadlock in oxu_bus_suspend() drivers: tty: serial: Fix deadlock in sa1100_set_termios() USB: host: isp116x: check return value after calling platform_get_resource() drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() thunderbolt: Use different lane for second DisplayPort tunnel tty: Fix a possible resource leak in icom_probe tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() drivers: staging: rtl8192bs: Fix deadlock in rtw_joinbss_event_prehandle() drivers: staging: rtl8723bs: Fix deadlock in rtw_surveydone_event_callback() lkdtm/usercopy: Expand size of "out of frame" object iio: st_sensors: Add a local lock for protecting odr staging: rtl8712: fix a potential memory leak in r871xu_drv_init() iio: dummy: iio_simple_dummy: check the return value of kstrdup() iov_iter: Fix iter_xarray_get_pages{,_alloc}() nfp: flower: restructure flow-key for gre+vlan combination drm: imx: fix compiler warning with gcc-12 tcp: use alloc_large_system_hash() to allocate table_perturb net: dsa: mv88e6xxx: use BMSR_ANEGCOMPLETE bit for filling an_complete net: altera: Fix refcount leak in altera_tse_mdio_create ip_gre: test csum_start instead of transport header net/mlx5: fs, fail conflicting actions net/mlx5: Rearm the FW tracer after each tracer event net/mlx5: Fix mlx5_get_next_dev() peer device matching net/mlx5: Lag, filter non compatible devices net: ipv6: unexport __init-annotated seg6_hmac_init() net: xfrm: unexport __init-annotated xfrm4_protocol_init() net: mdio: unexport __init-annotated mdio_bus_init() SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer() xsk: Fix handling of invalid descriptors in XSK TX batching API i40e: xsk: Move tmp desc array from driver to pool net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list bpf, arm64: Clear prog->jited_len along prog->jited af_unix: Fix a data-race in unix_dgram_peer_wake_me(). stmmac: intel: Fix an error handling path in intel_eth_pci_probe() xen: unexport __init-annotated xen_xlate_map_ballooned_pages() netfilter: nf_tables: bail out early if hardware offload is not supported netfilter: nf_tables: memleak flow rule from commit path netfilter: nf_tables: release new hooks on unsupported flowtable flags ata: pata_octeon_cf: Fix refcount leak in octeon_cf_probe netfilter: nf_tables: always initialize flowtable hook list in transaction SUNRPC: Trap RDMA segment overflows powerpc/kasan: Force thread size increase with KASAN netfilter: nf_tables: delete flowtable hooks via transaction list netfilter: nf_tables: use kfree_rcu(ptr, rcu) to release hooks in clean_net path netfilter: nat: really support inet nat without l3 address drm/bridge: ti-sn65dsi83: Handle dsi_lanes == 0 as invalid drm/bridge: sn65dsi83: Fix an error handling path in sn65dsi83_probe() xprtrdma: treat all calls not a bcall when bc_serv is NULL f2fs: fix to tag gcing flag on page during file defragment m68knommu: fix undefined reference to `mach_get_rtc_pll' RISC-V: use memcpy for kexec_file mode video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() video: fbdev: hyperv_fb: Allow resolutions with size > 64 MB for Gen1 NFSv4: Don't hold the layoutget locks across multiple RPC calls dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type m68knommu: fix undefined reference to `_init_sp' m68knommu: set ZERO_PAGE() to the allocated zeroed page i2c: cadence: Increase timeout per message if necessary f2fs: remove WARN_ON in f2fs_is_valid_blkaddr iommu/arm-smmu-v3: check return value after calling platform_get_resource() iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() tracing: Avoid adding tracer option before update_tracer_options tracing: Fix sleeping function called from invalid context on RT kernel tracing: Make tp_printk work on syscall tracepoints bootconfig: Make the bootconfig.o as a normal object file mips: cpc: Fix refcount leak in mips_cpc_default_phys_base dmaengine: idxd: set DMA_INTERRUPT cap bit perf c2c: Fix sorting in percent_rmt_hitm_cmp() driver core: Fix wait_for_device_probe() & deferred_probe_timeout interaction tipc: check attribute length for bearer name scsi: sd: Fix potential NULL pointer dereference afs: Fix infinite loop found by xfstest generic/676 gpio: pca953x: use the correct register address to do regcache sync regulator: mt6315-regulator: fix invalid allowed mode s390/mcck: isolate SIE instruction when setting CIF_MCCK_GUEST flag octeontx2-af: fix error code in is_valid_offset() vdpa: ifcvf: set pci driver data in probe tcp: tcp_rtx_synack() can be called from process context net: sched: add barrier to fix packet stuck problem for lockless qdisc net/mlx5e: Update netdev features after changing XDP state net/mlx5: correct ECE offset in query qp output net/mlx5: CT: Fix header-rewrite re-use for tupels net/mlx5e: TC NIC mode, fix tc chains miss table net/mlx5: Don't use already freed action pointer virtio: pci: Fix an error handling path in vp_modern_probe() vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit block: make bioset_exit() fully resilient against being called twice sfc: fix wrong tx channel offset with efx_separate_tx_channels sfc: fix considering that all channels have TX queues nfp: only report pause frame configuration for physical device tcp: add accessors to read/set tp->snd_cwnd net/smc: fixes for converting from "struct smc_cdc_tx_pend **" to "struct smc_wr_tx_pend_priv *" riscv: read-only pages should not be writable block: take destination bvec offsets into account in bio_copy_data_iter bpf: Fix probe read error in ___bpf_prog_run() selftests/bpf: fix stacktrace_build_id with missing kprobe/urandom_read selftests/bpf: fix selftest after random: Urandom_read tracepoint removal ubi: ubi_create_volume: Fix use-after-free when volume creation failed ubi: fastmap: Fix high cpu usage of ubi_bgt by making sure wl_pool not empty jffs2: fix memory leak in jffs2_do_fill_super modpost: fix removing numeric suffixes net: dsa: mv88e6xxx: Fix refcount leak in mv88e6xxx_mdios_register net: ethernet: ti: am65-cpsw-nuss: Fix some refcount leaks net: ethernet: mtk_eth_soc: out of bounds read in mtk_hwlro_get_fdir_entry() net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog s390/crypto: fix scatterwalk_unmap() callers in AES-GCM clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition blk-mq: don't touch ->tagset in blk_mq_get_sq_hctx watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe watchdog: rti-wdt: Fix pm_runtime_get_sync() error checking driver core: fix deadlock in __device_attach driver: base: fix UAF when driver_attach failed bus: ti-sysc: Fix warnings for unbind for serial firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle serial: stm32-usart: Correct CSIZE, bits, and parity serial: st-asc: Sanitize CSIZE and correct PARENB for CS7 serial: sifive: Sanitize CSIZE and c_iflag serial: sh-sci: Don't allow CS5-6 serial: txx9: Don't allow CS5-6 serial: rda-uart: Don't allow CS5-6 serial: digicolor-usart: Don't allow CS5-6 serial: cpm_uart: Fix build error without CONFIG_SERIAL_CPM_CONSOLE serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485 serial: meson: acquire port->lock in startup() tty: n_gsm: Fix packet data hex dump output tty: n_gsm: Don't ignore write return value in gsmld_output() staging: r8188eu: add check for kzalloc rtc: ftrtc010: Fix error handling in ftrtc010_rtc_probe rtc: ftrtc010: Use platform_get_irq() to get the interrupt rtc: mt6397: check return value after calling platform_get_resource() ARM: dts: aspeed: ast2600-evb: Enable RX delay for MAC0/MAC1 clocksource/drivers/riscv: Events are stopped during CPU suspend soc: rockchip: Fix refcount leak in rockchip_grf_init extcon: ptn5150: Add queue work sync before driver release ksmbd: fix reference count leak in smb_check_perm_dacl() coresight: cpu-debug: Replace mutex with mutex_trylock on panic notifier soundwire: intel: prevent pm_runtime resume prior to system suspend export: fix string handling of namespace in EXPORT_SYMBOL_NS serial: sifive: Report actual baud base rather than fixed 115200 power: supply: axp288_fuel_gauge: Drop BIOS version check from "T3 MRD" DMI quirk phy: qcom-qmp: fix pipe-clock imbalance on power-on failure misc/pvpanic: Convert regular spinlock into trylock on panic path pvpanic: Fix typos in the comments rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails iio: adc: sc27xx: Fine tune the scale calibration values iio: adc: sc27xx: fix read big scale voltage not right iio: proximity: vl53l0x: Fix return value check of wait_for_completion_timeout iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check rpmsg: virtio: Fix the unregistration of the device rpmsg_ctrl rpmsg: virtio: Fix possible double free in rpmsg_virtio_add_ctrl_dev() rpmsg: virtio: Fix possible double free in rpmsg_probe() usb: typec: mux: Check dev_set_name() return value firmware: stratix10-svc: fix a missing check on list iterator misc: fastrpc: fix an incorrect NULL check on list iterator usb: dwc3: pci: Fix pm_runtime_get_sync() error checking usb: dwc3: gadget: Replace list_for_each_entry_safe() if using giveback rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value pwm: raspberrypi-poe: Fix endianness in firmware struct pwm: lp3943: Fix duty calculation in case period was clamped staging: fieldbus: Fix the error handling path in anybuss_host_common_probe() usb: musb: Fix missing of_node_put() in omap2430_probe USB: storage: karma: fix rio_karma_init return usb: usbip: add missing device lock on tweak configuration cmd usb: usbip: fix a refcount leak in stub_probe() remoteproc: imx_rproc: Ignore create mem entry for resource table tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id and ida_simple_get serial: 8250_aspeed_vuart: Fix potential NULL dereference in aspeed_vuart_probe tty: n_tty: Restore EOF push handling behavior tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe tty: goldfish: Use tty_port_destroy() to destroy port lkdtm/bugs: Don't expect thread termination without CONFIG_UBSAN_TRAP lkdtm/bugs: Check for the NULL pointer after calling kmalloc iio: adc: ad7124: Remove shift from scan_type staging: greybus: codecs: fix type confusion of list iterator variable pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards Revert "net: fix dev_fill_forward_path with pppoe + bridge" Revert "xfrm: rework default policy structure" Revert "xfrm: fix "disable_policy" flag use when arriving from different devices" Linux 5.15.46 block: fix bio_clone_blkg_association() to associate with proper blkcg_gq pinctrl/rockchip: support setting input-enable param md: bcache: check the return value of kzalloc() in detached_dev_do_request() md: fix double free of io_acct_set bioset md: Don't set mddev private to NULL in raid0 pers->free fs/ntfs3: Fix invalid free in log_replay exportfs: support idmapped mounts fs: add two trivial lookup helpers interconnect: qcom: icc-rpmh: Add BCMs to commit list in pre_aggregate interconnect: qcom: sc7180: Drop IP0 interconnects ext4: only allow test_dummy_encryption when supported MIPS: IP30: Remove incorrect `cpu_has_fpu' override MIPS: IP27: Remove incorrect `cpu_has_fpu' override RDMA/rxe: Generate a completion for unsupported/invalid opcode RDMA/hns: Remove the num_cqc_timer variable staging: r8188eu: delete rtw_wx_read/write32() Revert "random: use static branch for crng_ready()" list: test: Add a test for list_is_head() kseltest/cgroup: Make test_stress.sh work if run interactively net: ipa: fix page free in ipa_endpoint_replenish_one() net: ipa: fix page free in ipa_endpoint_trans_release() phy: qcom-qmp: fix reset-controller leak on probe errors coresight: core: Fix coresight device probe failure issue blk-iolatency: Fix inflight count imbalances and IO hangs on offline vdpasim: allow to enable a vq repeatedly dt-bindings: gpio: altera: correct interrupt-cells docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0 SMB3: EBADF/EIO errors in rename/open caused by race condition in smb2_compound_op ARM: pxa: maybe fix gpio lookup tables ARM: dts: s5pv210: Remove spi-cs-high on panel in Aries phy: qcom-qmp: fix struct clk leak on probe errors clk: tegra: Add missing reset deassertion arm64: tegra: Add missing DFLL reset on Tegra210 arm64: dts: qcom: ipq8074: fix the sleep clock frequency gma500: fix an incorrect NULL check on list iterator tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator serial: pch: don't overwrite xmit->buf[0] by x_char bcache: avoid journal no-space deadlock by reserving 1 journal bucket bcache: remove incremental dirty sector counting for bch_sectors_dirty_init() bcache: improve multithreaded bch_sectors_dirty_init() bcache: improve multithreaded bch_btree_check() stm: ltdc: fix two incorrect NULL checks on list iterator carl9170: tx: fix an incorrect use of list iterator ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control rtl818x: Prevent using not initialized queues xtensa/simdisk: fix proc_read_simdisk() mm/memremap: fix missing call to untrack_pfn() in pagemap_range() hugetlb: fix huge_pmd_unshare address update nodemask.h: fix compilation error with GCC12 mm/page_alloc: always attempt to allocate at least one page during bulk allocation Revert "mm/cma.c: remove redundant cma_mutex lock" iommu/dma: Fix iova map result check bug iommu/msm: Fix an incorrect NULL check on list iterator ksmbd: fix outstanding credits related bugs ftrace: Clean up hash direct_functions on register failures kexec_file: drop weak attribute from arch_kexec_apply_relocations[_add] um: Fix out-of-bounds read in LDT setup um: chan_user: Fix winch_tramp() return value um: Use asm-generic/dma-mapping.h mac80211: upgrade passive scan to active scan on DFS channels after beacon rx cfg80211: declare MODULE_FIRMWARE for regulatory.db thermal: devfreq_cooling: use local ops instead of global ops irqchip: irq-xtensa-mx: fix initial IRQ affinity irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x csky: patch_text: Fixup last cpu should be master mmc: core: Allows to override the timeout value for ioctl() path RDMA/hfi1: Fix potential integer multiplication overflow errors Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug ima: remove the IMA_TEMPLATE Kconfig option media: coda: Add more H264 levels for CODA960 media: coda: Fix reported H264 profile mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write md: fix an incorrect NULL check in md_reload_sb md: fix an incorrect NULL check in does_sb_need_changing drm/i915/dsi: fix VBT send packet port selection for ICL+ drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX drm/nouveau/kms/nv50-: atom: fix an incorrect NULL check on list iterator drm/nouveau/clk: Fix an incorrect NULL check on list iterator drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem drm/nouveau/subdev/bus: Ratelimit logging for fault errors drm/amdgpu/cs: make commands with 0 chunks illegal behaviour. landlock: Fix same-layer rule unions landlock: Create find_rule() from unmask_layers() landlock: Reduce the maximum number of layers to 16 landlock: Define access_mask_t to enforce a consistent access mask size selftests/landlock: Test landlock_create_ruleset(2) argument check ordering landlock: Change landlock_restrict_self(2) check ordering landlock: Change landlock_add_rule(2) argument check ordering selftests/landlock: Add tests for O_PATH selftests/landlock: Fully test file rename with "remove" access selftests/landlock: Extend access right tests to directories selftests/landlock: Add tests for unknown access rights selftests/landlock: Extend tests for minimal valid attribute size selftests/landlock: Make tests build with old libc landlock: Fix landlock_add_rule(2) documentation samples/landlock: Format with clang-format samples/landlock: Add clang-format exceptions selftests/landlock: Format with clang-format selftests/landlock: Normalize array assignment selftests/landlock: Add clang-format exceptions landlock: Format with clang-format landlock: Add clang-format exceptions scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled scsi: dc395x: Fix a missing check on list iterator ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock dlm: fix missing lkb refcount handling dlm: uninitialized variable on error in dlm_listen_for_all() dlm: fix plock invalid read s390/stp: clock_delta should be signed s390/perf: obtain sie_block from the right address mm, compaction: fast_find_migrateblock() should return pfn in the target zone staging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan() PCI: qcom: Fix unbalanced PHY init on probe errors PCI: qcom: Fix runtime PM imbalance on probe errors PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299 drm/amdgpu: add beige goby PCI ID tracing: Initialize integer variable to prevent garbage return value tracing: Fix potential double free in create_var_ref() tty: goldfish: Introduce gf_ioread32()/gf_iowrite32() ACPI: property: Release subnode properties with data nodes ext4: avoid cycles in directory h-tree ext4: verify dir block before splitting it ext4: fix bug_on in __es_tree_search ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state ext4: fix bug_on in ext4_writepages ext4: fix warning in ext4_handle_inode_extension ext4: fix race condition between ext4_write and ext4_convert_inline_data ext4: fix use-after-free in ext4_rename_dir_prepare ext4: mark group as trimmed only if it was fully scanned bfq: Make sure bfqg for which we are queueing requests is online bfq: Get rid of __bio_blkcg() usage bfq: Track whether bfq_group is still online bfq: Remove pointless bfq_init_rq() calls bfq: Drop pointless unlock-lock pair bfq: Update cgroup information before merging bio bfq: Split shared queues on move between cgroups bfq: Avoid merging queues with different parents bfq: Avoid false marking of bic as stably merged efi: Do not import certificates from UEFI Secure Boot for T2 Macs fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages iwlwifi: mvm: fix assert 1F04 upon reconfig wifi: mac80211: fix use-after-free in chanctx code objtool: Fix symbol creation objtool: Fix objtool regression on x32 systems f2fs: fix to do sanity check for inline inode f2fs: fix fallocate to use file_modified to update permissions consistently f2fs: don't use casefolded comparison for "." and ".." f2fs: fix to do sanity check on total_data_blocks f2fs: don't need inode lock for system hidden quota f2fs: fix deadloop in foreground GC f2fs: fix to clear dirty inode in f2fs_evict_inode() f2fs: fix to do sanity check on block address in f2fs_do_zero_range() f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count() NFSv4.1 mark qualified async operations as MOVEABLE tasks NFS: Convert GFP_NOFS to GFP_KERNEL NFS: Create a new nfs_alloc_fattr_with_label() function NFS: Always initialise fattr->label in nfs_fattr_alloc() video: fbdev: vesafb: Fix a use-after-free due early fb_info cleanup perf jevents: Fix event syntax error caused by ExtSel perf c2c: Use stdio interface if slang is not supported perf build: Fix btf__load_from_kernel_by_id() feature check i2c: rcar: fix PM ref counts in probe error paths i2c: npcm: Handle spurious interrupts i2c: npcm: Correct register access width i2c: npcm: Fix timeout calculation iommu/amd: Increase timeout waiting for GA log enablement dmaengine: stm32-mdma: fix chan initialization in stm32_mdma_irq_handler() dmaengine: stm32-mdma: remove GISR1 register video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup NFS: Further fixes to the writeback error handling NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout NFS: Don't report errors from nfs_pageio_complete() more than once NFS: Do not report flush errors in nfs_write_end() NFS: Don't report ENOSPC write errors twice NFS: fsync() should report filesystem errors over EINTR/ERESTARTSYS NFS: Do not report EINTR/ERESTARTSYS as mapping errors dmaengine: idxd: Fix the error handling path in idxd_cdev_register() i2c: at91: Initialize dma_buf in at91_twi_xfer() iommu/mediatek: Fix NULL pointer dereference when printing dev_name MIPS: Loongson: Use hwmon_device_register_with_groups() to register hwmon iommu/arm-smmu-v3-sva: Fix mm use-after-free cpufreq: mediatek: Unregister platform device on exit cpufreq: mediatek: Use module_init and add module_exit i2c: at91: use dma safe buffers iommu/mediatek: Add mutex for m4u_group and m4u_dom in data iommu/mediatek: Remove clk_disable in mtk_iommu_remove iommu/mediatek: Add list_del in mtk_iommu_remove iommu/mediatek: Fix 2 HW sharing pgtable issue iommu/amd: Enable swiotlb in all cases f2fs: fix dereference of stale list iterator after loop body f2fs: fix to do sanity check on inline_dots inode f2fs: support fault injection for dquot_initialize() OPP: call of_node_put() on error path in _bandwidth_supported() Input: stmfts - do not leave device disabled in stmfts_input_open KVM: LAPIC: Drop pending LAPIC timer injection when canceling the timer RDMA/hfi1: Prevent use of lock before it is initialized mailbox: forward the hrtimer if not queued and under a lock nfsd: destroy percpu stats counters after reply cache shutdown mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe() powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup powerpc/xive: Fix refcount leak in xive_spapr_init powerpc/xive: Add some error handling code to 'xive_spapr_init()' macintosh: via-pmu and via-cuda need RTC_LIB powerpc/perf: Fix the threshold compare group constraint for power9 powerpc/perf: Fix the threshold compare group constraint for power10 powerpc/64: Only WARN if __pa()/__va() called with bad addresses hwrng: omap3-rom - fix using wrong clk_disable() in omap_rom_rng_runtime_resume() PCI: microchip: Fix potential race in interrupt handling PCI/AER: Clear MULTI_ERR_COR/UNCOR_RCV bits Input: sparcspkr - fix refcount leak in bbc_beep_probe hugetlbfs: fix hugetlbfs_statfs() locking ARM: dts: at91: sama7g5: remove interrupt-parent from gic node crypto: cryptd - Protect per-CPU resource by disabling BH. crypto: sun8i-ss - handle zero sized sg crypto: sun8i-ss - rework handling of IV tty: fix deadlock caused by calling printk() under tty_port->lock PCI: imx6: Fix PERST# start-up sequence ipc/mqueue: use get_tree_nodev() in mqueue_get_tree() proc: fix dentry/inode overinstantiating under /proc/${pid}/net ASoC: atmel-classd: Remove endianness flag on class d component ASoC: atmel-pdmic: Remove endianness flag on pdmic component arm64: dts: marvell: espressobin-ultra: enable front USB3 port arm64: dts: marvell: espressobin-ultra: fix SPI-NOR config RDMA/hns: Add the detection for CMDQ status in the device initialization process powerpc/4xx/cpm: Fix return value of __setup() handler powerpc/idle: Fix return value of __setup() handler pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources() pinctrl: renesas: r8a779a0: Fix GPIO function on I2C-capable pins powerpc/8xx: export 'cpm_setbrg' for modules drm/msm/dpu: fix error check return value of irq_of_parse_and_map() list: fix a data-race around ep->rdllist list: introduce list_is_head() helper and re-use it in list.h firmware: arm_ffa: Remove incorrect assignment of driver_data firmware: arm_ffa: Fix uuid parameter to ffa_partition_probe drivers/base/memory: fix an unlikely reference counting issue in __add_memory_block() dax: fix cache flush on PMD-mapped pages drivers/base/node.c: fix compaction sysfs file leak pinctrl: mvebu: Fix irq_of_parse_and_map() return value nvdimm: Allow overwrite in the presence of disabled dimms nvdimm: Fix firmware activation deadlock scenarios firmware: arm_scmi: Fix list protocols enumeration in the base protocol ASoC: sh: rz-ssi: Release the DMA channels in rz_ssi_probe() error path ASoC: sh: rz-ssi: Propagate error codes returned from platform_get_irq_byname() ASoC: sh: rz-ssi: Check return value of pm_runtime_resume_and_get() arm64: dts: ti: k3-am64-mcu: remove incorrect UART base clock rates soc: bcm: Check for NULL return of devm_kzalloc() scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac() mfd: ipaq-micro: Fix error check return value of platform_get_irq() powerpc/fadump: fix PT_LOAD segment for boot memory area Drivers: hv: vmbus: Fix handling of messages with transaction ID of zero arm64: dts: qcom: qrb5165-rb5: Fix can-clock node name pinctrl: mediatek: mt8195: enable driver on mtk platforms pinctrl/rockchip: support deferring other gpio params arm: mediatek: select arch timer for mt7629 pinctrl: bcm2835: implement hook for missing gpio-ranges gpiolib: of: Introduce hook for missing gpio-ranges crypto: marvell/cesa - ECB does not IV misc: ocxl: fix possible double free in ocxl_file_register_afu ARM: dts: bcm2835-rpi-b: Fix GPIO line names ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT ARM: dts: stm32: Fix PHY post-reset delay on Avenger96 can: xilinx_can: mark bit timing constants as const platform/chrome: Re-introduce cros_ec_cmd_xfer and use it for ioctls ARM: dts: imx6dl-colibri: Fix I2C pinmuxing platform/chrome: cros_ec: fix error handling in cros_ec_register() crypto: qat - set COMPRESSION capability for DH895XCC crypto: qat - set CIPHER capability for DH895XCC crypto: qat - set COMPRESSION capability for QAT GEN2 crypto: qat - set CIPHER capability for QAT GEN2 KVM: nVMX: Clear IDT vectoring on nested VM-Exit for double/triple fault KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry soc: qcom: llcc: Add MODULE_DEVICE_TABLE() ARM: dts: ci4x10: Adapt to changes in imx6qdl.dtsi regarding fec clocks PCI: dwc: Fix setting error return on MSI DMA mapping failure PCI: mediatek: Fix refcount leak in mtk_pcie_subsys_powerup() PCI: rockchip: Fix find_first_zero_bit() limit PCI: cadence: Fix find_first_zero_bit() limit soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc ARM: dts: suniv: F1C100: fix watchdog compatible ARM: dts: BCM5301X: Update pin controller node name ARM: dts: BCM5301X: update CRU block description memory: samsung: exynos5422-dmc: Avoid some over memory allocation PCI/ACPI: Allow D3 only if Root Port can signal and wake from D3 arm64: dts: mt8192: Fix nor_flash status disable typo arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399 dma-direct: don't over-decrypt memory dma-direct: always leak memory that can't be re-encrypted dma-direct: don't call dma_set_decrypted for remapped allocations dma-direct: factor out dma_set_{de,en}crypted helpers net/smc: postpone sk_refcnt increment in connect() net: dsa: restrict SMSC_LAN9303_I2C kconfig hinic: Avoid some over memory allocation net: huawei: hinic: Use devm_kcalloc() instead of devm_kzalloc() rxrpc: Fix decision on when to generate an IDLE ACK rxrpc: Don't let ack.previousPacket regress rxrpc: Fix overlapping ACK accounting rxrpc: Don't try to resend the request if we're receiving the reply rxrpc: Fix listen() setting the bar too high for the prealloc rings hwmon: (pmbus) Check PEC support before reading other registers hv_netvsc: Fix potential dereference of NULL pointer net: stmmac: fix out-of-bounds access in a selftest net: stmmac: selftests: Use kcalloc() instead of kzalloc() ASoC: max98090: Move check for invalid values before casting in max98090_put_enab_tlv() NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx net: macb: Fix PTP one step sync support PM: domains: Fix initialization of genpd's next_wakeup ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition() bfq: Allow current waker to defend against a tentative one bfq: Relax waker detection for shared queues thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe thermal/core: Fix memory leak in __thermal_cooling_device_register() thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe thermal/drivers/bcm2711: Don't clamp temperature at zero drm/i915: Fix CFI violation with show_dynamic_id() drm/msm/dpu: handle pm_runtime_get_sync() errors in bind path selftests/bpf: Add missed ima_setup.sh in Makefile drm/msm: don't free the IRQ if it was not requested x86/sev: Annotate stack change in the #VC handler drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init ext4: reject the 'commit' option on ext2 filesystems regulator: scmi: Fix refcount leak in scmi_regulator_probe media: rkvdec: h264: Fix bit depth wrap in pps packet media: rkvdec: h264: Fix dpb_valid implementation media: staging: media: rkvdec: Make use of the helper function devm_platform_ioremap_resource() media: i2c: ov5648: fix wrong pointer passed to IS_ERR() and PTR_ERR() media: ov7670: remove ov7670_power_off from ov7670_remove kselftest/arm64: bti: force static linking ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_* net: hinic: add missing destroy_workqueue in hinic_pf_to_mgmt_init sctp: read sk->sk_bound_dev_if once in sctp_rcv() m68k: math-emu: Fix dependencies of math emulation support nvme: set dma alignment to dword Bluetooth: use hdev lock for accept_list and reject_list in conn req Bluetooth: use hdev lock in activate_scan for hci_is_adv_monitoring Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout media: hantro: HEVC: Fix tile info buffer value computation media: atmel: atmel-sama5d2-isc: fix wrong mask in YUYV format check media: vsp1: Fix offset calculation for plane cropping media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init media: exynos4-is: Change clk_disable to clk_disable_unprepare media: i2c: rdacm2x: properly set subdev entity function media: atmel: atmel-isc: Fix PM disable depth imbalance in atmel_isc_probe media: st-delta: Fix PM disable depth imbalance in delta_probe mt76: do not attempt to reorder received 802.3 packets without agg session mt76: mt7921: Fix the error handling path of mt7921_pci_probe() media: exynos4-is: Fix PM disable depth imbalance in fimc_is_probe media: aspeed: Fix an error handling path in aspeed_video_probe() scripts/faddr2line: Fix overlapping text section failures kselftest/cgroup: fix test_stress.sh to use OUTPUT dir block: Fix the bio.bi_opf comment ASoC: samsung: Fix refcount leak in aries_audio_probe ASoC: samsung: Use dev_err_probe() helper dma-direct: don't fail on highmem CMA pages in dma_direct_alloc_pages dma-direct: factor out a helper for DMA_ATTR_NO_KERNEL_MAPPING allocations regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe ASoC: imx-hdmi: Fix refcount leak in imx_hdmi_probe ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe ASoC: fsl: Use dev_err_probe() helper HID: amd_sfh: Modify the hid name HID: amd_sfh: Modify the bus name wilc1000: fix crash observed in AP mode with cfg80211_register_netdevice() ath11k: Don't check arvif->is_started before sending management frames perf/amd/ibs: Use interrupt regs ip for stack unwinding samples: bpf: Don't fail for a missing VMLINUX_BTF when VMLINUX_H is provided regulator: qcom_smd: Fix up PM8950 regulator configuration Revert "cpufreq: Fix possible race in cpufreq online error path" spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname() iomap: iomap_write_failed fix arm64: stackleak: fix current_top_of_stack() media: uvcvideo: Fix missing check to determine if element is found in list drm/msm: return an error pointer in msm_gem_prime_get_sg_table() drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected drm/msm/dp: fix event thread stuck in wait_event after kthread_stop() drm/msm/dsi: fix address for second DSI PHY on SDM660 regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET arm64: fix types in copy_highpage() x86/mm: Cleanup the control_va_addr_alignment() __setup handler irqchip/aspeed-scu-ic: Fix irq_of_parse_and_map() return value irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value irqchip/exiu: Fix acknowledgment of edge triggered interrupts x86: Fix return value of __setup handlers nl80211: don't hold RTNL in color change request virtio_blk: fix the discard_granularity and discard_alignment queue limits perf tools: Use Python devtools for version autodetection rather than runtime spi: cadence-quadspi: fix Direct Access Mode disable for SoCFPGA drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() kunit: fix debugfs code to use enum kunit_status, not bool drm/panel: panel-simple: Fix proper bpc for AM-1280800N3TZQW-T00H drm/msm: add missing include to msm_drv.c drm/msm/hdmi: fix error check return value of irq_of_parse_and_map() drm/msm/hdmi: check return value after calling platform_get_resource_byname() drm/msm/dsi: fix error checks and return values for DSI xmit functions drm/msm/dp: do not stop transmitting phy test pattern during DP phy compliance test drm/msm/dp: reset DP controller before transmit phy test pattern drm/msm/dp: fix error check return value of irq_of_parse_and_map() drm/msm/dp: stop event kernel thread when DP unbind drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume perf tools: Add missing headers needed by util/data.h ASoC: rk3328: fix disabling mclk on pclk probe failure x86/speculation: Add missing prototype for unpriv_ebpf_notify() mtd: rawnand: intel: fix possible null-ptr-deref in ebu_nand_probe() mtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe() x86/pm: Fix false positive kmemleak report in msr_build_context() mtd: spi-nor: core: Check written SR value in spi_nor_write_16bit_sr_and_check() libbpf: Fix logic for finding matching program for CO-RE relocation selftests/resctrl: Fix null pointer dereference on open failed drm/v3d: Fix null pointer dereference of pointer perfmon scsi: ufs: core: Exclude UECxx from SFR dump list scsi: ufs: qcom: Fix ufs_qcom_resume() scsi: iscsi: Fix harmless double shift bug drm/msm/dpu: adjust display_v_end for eDP and DP drm/msm/hdmi: switch to drm_bridge_connector drm/msm/dp: Modify prototype of encoder based API selftests/damon: add damon to selftests root Makefile of: overlay: do not break notify on NOTIFY_{OK|STOP} spi: rockchip: fix missing error on unsupported SPI_CS_HIGH spi: rockchip: Preset cs-high and clk polarity in setup progress spi: rockchip: Stop spi slave dma receiver when cs inactive fsnotify: fix wrong lockdep annotations inotify: show inotify mask flags in proc fdinfo mtdblock: warn if opened on NAND ALSA: pcm: Check for null pointer of pointer substream before dereferencing it drm/panel: simple: Add missing bus flags for Innolux G070Y2-L01 media: hantro: Empty encoder capture buffers by default media: i2c: max9286: fix kernel oops when removing module media: i2c: max9286: Use "maxim,gpio-poc" property media: i2c: max9286: Use dev_err_probe() helper ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix printk: wake waiters for safe and NMI contexts printk: add missing memory barrier to wake_up_klogd() printk: use atomic updates for klogd work cpufreq: Fix possible race in cpufreq online error path spi: img-spfi: Fix pm_runtime_get_sync() error checking sched/psi: report zeroes for CPU full at the system level sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq signal: Deliver SIGTRAP on perf event asynchronously if blocked drm/mediatek: dpi: Use mt8183 output formats for mt8192 regulator: da9121: Fix uninit-value in da9121_assign_chip_model() drm/bridge: Fix error handling in analogix_dp_probe HID: elan: Fix potential double free in elan_input_configured HID: hid-led: fix maximum brightness for Dream Cheeky mtd: rawnand: denali: Use managed device resources EDAC/dmc520: Don't print an error for each unconfigured interrupt line drbd: fix duplicate array initializer target: remove an incorrect unmap zeroes data deduction device property: Allow error pointer to be passed to fwnode APIs device property: Check fwnode->secondary when finding properties efi: Add missing prototype for efi_capsule_setup_info NFC: NULL out the dev->rfkill to prevent UAF ixp4xx_eth: fix error check return value of platform_get_irq() net: dsa: mt7530: 1G can also support 1000BASE-X link mode scftorture: Fix distribution of short handler delays spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout drm: mali-dp: potential dereference of null pointer drm/komeda: Fix an undefined behavior bug in komeda_plane_add() nl80211: show SSID for P2P_GO interfaces mptcp: reset the packet scheduler on PRIO change x86/PCI: Fix ALi M1487 (IBC) PIRQ router link value interpretation libbpf: Don't error out on CO-RE relos for overriden weak subprogs drm/vc4: txp: Force alpha to be 0xff if it's disabled drm/vc4: txp: Don't set TXP_VSTART_AT_EOF drm/vc4: hvs: Reset muxes at probe time drm/mediatek: Fix mtk_cec_mask() drm/vc4: hvs: Fix frame count register readout x86/delay: Fix the wrong asm constraint in delay_loop() ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe spi: qcom-qspi: Add minItems to interconnect-names mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG drm: bridge: icn6211: Fix HFP_HSW_HBP_HI and HFP_MIN handling drm: bridge: icn6211: Fix register layout drm/bridge: adv7511: clean up CEC adapter when probe fails drm/edid: fix invalid EDID extension block filtering ath9k: fix ar9003_get_eepmisc drm: bridge: it66121: Fix the register page length ath11k: acquire ab->base_lock in unassign when finding the peer by addr drm/vmwgfx: Fix an invalid read dt-bindings: display: sitronix, st7735r: Fix backlight in example drm/bridge_connector: enable HPD by default if supported drm: fix EDID struct for old ARM OABI format Input: gpio-keys - cancel delayed work only in case of GPIO RDMA/hfi1: Prevent panic when SDMA is disabled smb3: check for null tcon powerpc/iommu: Add missing of_node_put in iommu_init_early_dart macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled powerpc/powernv: fix missing of_node_put in uv_init() powerpc/xics: fix refcount leak in icp_opal_init() powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate alpha: fix alloc_zeroed_user_highpage_movable() KVM: PPC: Book3S HV Nested: L2 LPCR should inherit L1 LPES setting PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() powerpc/rtas: Keep MSR[RI] set when calling RTAS cpufreq: Avoid unnecessary frequency updates due to mismatch ARM: hisi: Add missing of_node_put after of_find_compatible_node ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM ARM: versatile: Add missing of_node_put in dcscb_init pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources() fat: add ratelimit to fat*_ent_bread() powerpc/fadump: Fix fadump to work with a different endian capture kernel ARM: OMAP1: clock: Fix UART rate reporting algorithm ALSA: usb-audio: Move generic implicit fb quirk entries into quirks.c ALSA: usb-audio: Add quirk bits for enabling/disabling generic implicit fb arm64: dts: qcom: sdm845-xiaomi-beryllium: fix typo in panel's vddio-supply property fs: jfs: fix possible NULL pointer dereference in dbFree() soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc crypto: ccree - use fine grained DMA mapping dir PM / devfreq: rk3399_dmc: Disable edev on remove() arm64: dts: qcom: msm8994: Fix BLSP[12]_DMA channels count arm64: dts: qcom: msm8994: Fix the cont_splash_mem address ARM: dts: s5pv210: align DMA channels with dtschema ARM: dts: socfpga: align interrupt controller node name with dtschema ARM: dts: ox820: align interrupt controller node name with dtschema IB/rdmavt: add missing locks in rvt_ruc_loopback scsi: target: tcmu: Avoid holding XArray lock when calling lock_page gfs2: use i_lock spin_lock for inode qadata selftests/bpf: fix btf_dump/btf_dump due to recent clang change char: tpm: cr50_i2c: Suppress duplicated error message in .remove() eth: tg3: silence the GCC 12 array-bounds warning afs: Adjust ACK interpretation to try and cope with NAT rxrpc, afs: Fix selection of abort codes rxrpc: Return an error to sendmsg if call failed m68k: atari: Make Atari ROM port I/O write macros return void net: ipa: ignore endianness if there is no header x86/microcode: Add explicit CPU vendor dependency can: mcp251xfd: silence clang's -Wunaligned-access warning nvme: set non-mdts limits in nvme_scan_work ACPI: CPPC: Assume no transition latency if no PCCT ASoC: rt1015p: remove dependency on GPIOLIB ASoC: max98357a: remove dependency on GPIOLIB media: hantro: Stop using H.264 parameter pic_num media: exynos4-is: Fix compile warning net: phy: micrel: Allow probing without .driver_data drm/amd/pm: update smartshift powerboost calc for smu13 drm/amd/pm: update smartshift powerboost calc for smu12 nbd: Fix hung on disconnect request if socket is closed before ASoC: rt5645: Fix errorenous cleanup order nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags openrisc: start CPU timer early in boot usbnet: Run unregister_netdev() before unbind() again media: cec-adap.c: fix is_configuring state media: imon: reorganize serialization media: ccs-core.c: fix failure to call clk_disable_unprepare media: hantro: HEVC: unconditionnaly set pps_{cb/cr}_qp_offset values media: coda: limit frame interval enumeration to supported encoder frame sizes media: rga: fix possible memory leak in rga_probe mt76: fix encap offload ethernet type check mt76: mt7921: accept rx frames with non-standard VHT MCS10-11 rtlwifi: Use pr_warn instead of WARN_ONCE ipmi: Fix pr_fmt to avoid compilation issues ipmi:ssif: Check for NULL msg when handling events and messages ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC spi: stm32-qspi: Fix wait_cmd timeout in APM mode sched/core: Avoid obvious double update_rq_clock warning perf/amd/ibs: Cascade pmu init functions' return value s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES net: remove two BUG() from skb_checksum_help() scsi: lpfc: Alter FPIN stat accounting logic ASoC: tscs454: Add endianness flag in snd_soc_component_driver of: Support more than one crash kernel regions for kexec -s HID: bigben: fix slab-out-of-bounds Write in bigben_probe regulator: mt6315: Enforce regulator-compatible, not name drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo drm/amdgpu/psp: move PSP memory alloc from hw_init to sw_init mlxsw: Treat LLDP packets as control mlxsw: spectrum_dcb: Do not warn about priority changes ASoC: dapm: Don't fold register value changes into notifications net/mlx5: fs, delete the FTE when there are no rules attached to it ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL scsi: target: tcmu: Fix possible data corruption drm: msm: fix error check return value of irq_of_parse_and_map() arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall ath10k: skip ath10k_halt during suspend for driver state RESTARTING drm/amd/pm: fix the compile warning drm/plane: Move range check for format_count earlier ASoC: Intel: bytcr_rt5640: Add quirk for the HP Pro Tablet 408 ath11k: disable spectral scan during spectral deinit scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp() scsi: ufs: Use pm_runtime_resume_and_get() instead of pm_runtime_get_sync() drm/amdgpu/sdma: Fix incorrect calculations of the wptr of the doorbells scsi: megaraid: Fix error check return value of register_chrdev() drivers: mmc: sdhci_am654: Add the quirk to set TESTCD bit mmc: jz4740: Apply DMA engine limits to maximum segment size md/bitmap: don't set sb values if can't pass sanity check media: cx25821: Fix the warning when removing the module media: pci: cx23885: Fix the error handling in cx23885_initdev() media: venus: hfi: avoid null dereference in deinit ath9k: fix QCA9561 PA bias level ASoC: rsnd: care return value from rsnd_node_fixed_index() ASoC: rsnd: care default case on rsnd_ssiu_busif_err_status_clear() drm/amd/pm: fix double free in si_parse_power_table() cpuidle: PSCI: Improve support for suspend-to-RAM for PSCI OSI mode scsi: lpfc: Fix call trace observed during I/O with CMF enabled scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock scsi: lpfc: Move cfg_log_verbose check before calling lpfc_dmp_dbg() tools/power turbostat: fix ICX DRAM power numbers spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction rtw88: 8821c: fix debugfs rssi value ALSA: jack: Access input_dev under mutex sfc: ef10: Fix assigning negative value to unsigned variable rcu: Make TASKS_RUDE_RCU select IRQ_WORK rcu-tasks: Fix race in schedule and flush work drm/amd/display: Disabling Z10 on DCN31 drm/komeda: return early if drm_universal_plane_init() fails. mac80211: minstrel_ht: fix where rate stats are stored (fixes debugfs output) ACPICA: Avoid cache flush inside virtual machines x86/platform/uv: Update TSC sync state for UV5 fbcon: Consistently protect deferred_takeover with console_lock() ipv6: fix locking issues with loops over idev->addr_list ipw2x00: Fix potential NULL dereference in libipw_xmit() b43: Fix assigning negative value to unsigned variable b43legacy: Fix assigning negative value to unsigned variable mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue selftests/bpf: Fix parsing of prog types in UAPI hdr for bpftool sync selftests/bpf: Fix vfs_link kprobe definition drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes drm/vmwgfx: validate the screen formats iommu/vt-d: Add RPLS to quirk list to skip TE disabling btrfs: fix the error handling for submit_extent_page() for btrfs_do_readpage() btrfs: repair super block num_devices automatically btrfs: return correct error number for __extent_writepage_io() btrfs: add "0x" prefix for unsupported optional features ptrace: Reimplement PTRACE_KILL by always sending SIGKILL ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP x86/sgx: Set active memcg prior to shmem allocation x86/kexec: fix memory leak of elf header buffer perf/x86/intel: Fix event constraints for ICL x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails platform/x86: intel-hid: fix _DSM function index handling xhci: Allow host runtime PM as default for Intel Alder Lake N xHCI cifs: when extending a file with falloc we should make files not-sparse cifs: fix potential double free during failed mount fs/ntfs3: Restore ntfs_xattr_get_acl and ntfs_xattr_set_acl functions fs/ntfs3: Update i_ctime when xattr is added fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()' fs/ntfs3: In function ntfs_set_acl_ex do not change inode->i_mode if called from function ntfs_init_acl fs/ntfs3: Check new size for limits fs/ntfs3: Keep preallocated only if option prealloc enabled fs/ntfs3: Fix fiemap + fix shrink file size (to remove preallocated space) fs/ntfs3: Update valid size if -EIOCBQUEUED usb: core: hcd: Add support for deferring roothub registration usb: dwc3: gadget: Move null pinter check to proper place usb: isp1760: Fix out-of-bounds array access USB: new quirk for Dell Gen 2 devices USB: serial: option: add Quectel BG95 modem USB: serial: pl2303: fix type detection for odd device ALSA: usb-audio: Cancel pending work at closing a MIDI substream ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9520 laptop ALSA: hda/realtek - Add new type for ALC245 riscv: Move alternative length validation into subsection riscv: Wire up memfd_secret in UAPI header riscv: Fix irq_work when SMP is disabled riscv: Initialize thread pointer before calling C functions RISC-V: Mark IORESOURCE_EXCLUSIVE for reserved mem instead of IORESOURCE_BUSY parisc/stifb: Keep track of hardware path of graphics card parisc/stifb: Implement fb_is_primary_device() binfmt_flat: do not stop relocating GOT entries prematurely on riscv Linux 5.15.45 ALSA: usb-audio: Optimize TEAC clock quirk bpf: Check PTR_TO_MEM | MEM_RDONLY in check_helper_mem_access bpf: Reject writes for PTR_TO_MAP_KEY in check_helper_mem_access bpf: Fix excessive memory allocation in stack_map_alloc() bpf: Enlarge offset check value to INT_MAX in bpf_skb_{load,store}_bytes bpf: Fix potential array overflow in bpf_trampoline_get_progs() NFSD: Fix possible sleep during nfsd4_release_lockowner() NFS: Memory allocation failures are not server fatal errors docs: submitting-patches: Fix crossref to 'The canonical patch format' tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe() tpm: Fix buffer access in tpm2_get_tpm_pt() media: i2c: imx412: Fix power_off ordering media: i2c: imx412: Fix reset GPIO polarity x86/sgx: Ensure no data in PCMD page after truncate x86/sgx: Fix race between reclaimer and page fault handler x86/sgx: Obtain backing storage page with enclave mutex held x86/sgx: Mark PCMD page as dirty when modifying contents x86/sgx: Disconnect backing page references from dirty status HID: multitouch: add quirks to enable Lenovo X12 trackpoint HID: multitouch: Add support for Google Whiskers Touchpad fs/ntfs3: validate BOOT sectors_per_clusters raid5: introduce MD_BROKEN dm verity: set DM_TARGET_IMMUTABLE feature flag dm stats: add cond_resched when looping over entries dm crypt: make printing of the key constant-time dm integrity: fix error code in dm_integrity_ctr() ARM: dts: s5pv210: Correct interrupt name for bluetooth in Aries Bluetooth: hci_qca: Use del_timer_sync() before freeing ALSA: usb-audio: Configure sync endpoints before data ALSA: usb-audio: Add missing ep_idx in fixed EP quirks ALSA: usb-audio: Workaround for clock setup on TEAC devices zsmalloc: fix races between asynchronous zspage free and page migration crypto: ecrdsa - Fix incorrect use of vli_cmp crypto: caam - fix i.MX6SX entropy delay value KVM: SVM: Use kzalloc for sev ioctl interfaces to prevent kernel data leak KVM: x86: Drop WARNs that assert a triple fault never "escapes" from L2 KVM: x86: avoid calling x86 emulator without a decoded instruction x86, kvm: use correct GFP flags for preemption disabled x86/kvm: Alloc dummy async #PF token outside of raw spinlock KVM: PPC: Book3S HV: fix incorrect NULL check on list iterator netfilter: conntrack: re-fetch conntrack after insertion netfilter: nf_tables: double hook unregistration in netns path netfilter: nf_tables: hold mutex on netns pre_exit path netfilter: nf_tables: sanitize nft_set_desc_concat_parse() crypto: drbg - make reseeding from get_random_bytes() synchronous crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed() crypto: drbg - track whether DRBG was seeded with !rng_is_initialized() crypto: drbg - prepare for more fine-grained tracking of seeding state lib/crypto: add prompts back to crypto libraries exfat: check if cluster num is valid drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency() net: ipa: compute proper aggregation limit pipe: Fix missing lock in pipe_resize_ring() pipe: make poll_usage boolean and annotate its access assoc_array: Fix BUG_ON during garbage collect i2c: ismt: prevent memory corruption in ismt_access() netfilter: nf_tables: disallow non-stateful expression in sets earlier drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI controllers i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging net: ftgmac100: Disable hardware checksum on AST2600 nfc: pn533: Fix buggy cleanup order net: af_key: check encryption module availability consistency percpu_ref_init(): clean ->percpu_count_ref on failure KVM: arm64: Don't hypercall before EL2 init pinctrl: sunxi: fix f1c100s uart2 function ALSA: usb-audio: Don't get sample rate for MCT Trigger 5 USB-to-HDMI Linux 5.15.44 ALSA: ctxfi: Add SB046x PCI ID random: check for signals after page of pool writes random: wire up fops->splice_{read,write}_iter() random: convert to using fops->write_iter() random: convert to using fops->read_iter() random: unify batched entropy implementations random: move randomize_page() into mm where it belongs random: move initialization functions out of hot pages random: make consistent use of buf and len random: use proper return types on get_random_{int,long}_wait() random: remove extern from functions in header random: use static branch for crng_ready() random: credit architectural init the exact amount random: handle latent entropy and command line from random_init() random: use proper jiffies comparison macro random: remove ratelimiting for in-kernel unseeded randomness random: move initialization out of reseeding hot path random: avoid initializing twice in credit race random: use symbolic constants for crng_init states siphash: use one source of truth for siphash permutations random: help compiler out with fast_mix() by using simpler arguments random: do not use input pool from hard IRQs random: order timer entropy functions below interrupt functions random: do not pretend to handle premature next security model random: use first 128 bits of input as fast init random: do not use batches when !crng_ready() random: insist on random_get_entropy() existing in order to simplify xtensa: use fallback for random_get_entropy() instead of zero sparc: use fallback for random_get_entropy() instead of zero um: use fallback for random_get_entropy() instead of zero x86/tsc: Use fallback for random_get_entropy() instead of zero nios2: use fallback for random_get_entropy() instead of zero arm: use fallback for random_get_entropy() instead of zero mips: use fallback for random_get_entropy() instead of just c0 random riscv: use fallback for random_get_entropy() instead of zero m68k: use fallback for random_get_entropy() instead of zero timekeeping: Add raw clock fallback for random_get_entropy() powerpc: define get_cycles macro for arch-override alpha: define get_cycles macro for arch-override parisc: define get_cycles macro for arch-override s390: define get_cycles macro for arch-override ia64: define get_cycles macro for arch-override init: call time_init() before rand_initialize() random: fix sysctl documentation nits random: document crng_fast_key_erasure() destination possibility random: make random_get_entropy() return an unsigned long random: allow partial reads if later user copies fail random: check for signals every PAGE_SIZE chunk of /dev/[u]random random: check for signal_pending() outside of need_resched() check random: do not allow user to keep crng key around on stack random: do not split fast init input in add_hwgenerator_randomness() random: mix build-time latent entropy into pool at init random: re-add removed comment about get_random_{u32,u64} reseeding random: treat bootloader trust toggle the same way as cpu trust toggle random: skip fast_init if hwrng provides large chunk of entropy random: check for signal and try earlier when generating entropy random: reseed more often immediately after booting random: make consistent usage of crng_ready() random: use SipHash as interrupt entropy accumulator random: replace custom notifier chain with standard one random: don't let 644 read-only sysctls be written to random: give sysctl_random_min_urandom_seed a more sensible value random: do crng pre-init loading in worker rather than irq random: unify cycles_t and jiffies usage and types random: cleanup UUID handling random: only wake up writers after zap if threshold was passed random: round-robin registers as ulong, not u32 random: clear fast pool, crng, and batches in cpuhp bring up random: pull add_hwgenerator_randomness() declaration into random.h random: check for crng_init == 0 in add_device_randomness() random: unify early init crng load accounting random: do not take pool spinlock at boot random: defer fast pool mixing to worker random: rewrite header introductory comment random: group sysctl functions random: group userspace read/write functions random: group entropy collection functions random: group entropy extraction functions random: group crng functions random: group initialization wait functions random: remove whitespace and reorder includes random: remove useless header comment random: introduce drain_entropy() helper to declutter crng_reseed() random: deobfuscate irq u32/u64 contributions random: add proper SPDX header random: remove unused tracepoints random: remove ifdef'd out interrupt bench random: tie batched entropy generation to base_crng generation random: fix locking for crng_init in crng_reseed() random: zero buffer after reading entropy from userspace random: remove outdated INT_MAX >> 6 check in urandom_read() random: make more consistent use of integer types random: use hash function for crng_slow_load() random: use simpler fast key erasure flow on per-cpu keys random: absorb fast pool into input pool after fast load random: do not xor RDRAND when writing into /dev/random random: ensure early RDSEED goes through mixer on init random: inline leaves of rand_initialize() random: get rid of secondary crngs random: use RDSEED instead of RDRAND in entropy extraction random: fix locking in crng_fast_load() random: remove batched entropy locking random: remove use_input_pool parameter from crng_reseed() random: make credit_entropy_bits() always safe random: always wake up entropy writers after extraction random: use linear min-entropy accumulation crediting random: simplify entropy debiting random: use computational hash for entropy extraction random: only call crng_finalize_init() for primary_crng random: access primary_pool directly rather than through pointer random: continually use hwgenerator randomness random: simplify arithmetic function flow in account() random: selectively clang-format where it makes sense random: access input_pool_data directly rather than through pointer random: cleanup fractional entropy shift constants random: prepend remaining pool constants with POOL_ random: de-duplicate INPUT_POOL constants random: remove unused OUTPUT_POOL constants random: rather than entropy_store abstraction, use global random: remove unused extract_entropy() reserved argument random: remove incomplete last_data logic random: cleanup integer types random: cleanup poolinfo abstraction random: fix typo in comments random: don't reset crng_init_cnt on urandom_read() random: avoid superfluous call to RDRAND in CRNG extraction random: early initialization of ChaCha constants random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs random: harmonize "crng init done" messages random: mix bootloader randomness into pool random: do not re-init if crng_reseed completes before primary init random: do not sign extend bytes for rotation when mixing random: use BLAKE2s instead of SHA1 in extraction random: remove unused irq_flags argument from add_interrupt_randomness() random: document add_hwgenerator_randomness() with other input functions lib/crypto: blake2s: avoid indirect calls to compression function for Clang CFI lib/crypto: sha1: re-roll loops to reduce code size lib/crypto: blake2s: move hmac construction into wireguard lib/crypto: blake2s: include as built-in MAINTAINERS: add git tree for random.c MAINTAINERS: co-maintain random.c ACPI: sysfs: Fix BERT error region memory mapping ice: fix crash at allocation failure KVM: x86/mmu: fix NULL pointer dereference on guest INVPCID HID: amd_sfh: Add support for sensor discovery Linux 5.15.43 mptcp: Do TCP fallback on early DSS checksum failure Linux 5.15.42 afs: Fix afs_getattr() to refetch file status if callback break occurred i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe() lockdown: also lock down previous kgdb use mt76: mt7921e: fix possible probe failure after reboot dt-bindings: pinctrl: aspeed-g6: remove FWQSPID group Input: ili210x - fix reset timing arm64: Enable repeat tlbi workaround on KRYO4XX gold CPUs net: atlantic: verify hw_head_ lies within TX buffer ring net: atlantic: add check for MAX_SKB_FRAGS net: atlantic: reduce scope of is_rsc_complete net: atlantic: fix "frag[0] not initialized" net: stmmac: fix missing pci_disable_device() on error in stmmac_pci_probe() ethernet: tulip: fix missing pci_disable_device() on error in tulip_init_one() nl80211: fix locking in nl80211_set_tx_bitrate_mask() net: fix wrong network header length fbdev: Prevent possible use-after-free in fb_release() Revert "fbdev: Make fb_release() return -ENODEV if fbdev was unregistered" selftests: add ping test with ping_group_range tuned nl80211: validate S1G channel width mac80211: fix rx reordering with non explicit / psmp ack policy scsi: qla2xxx: Fix missed DMA unmap for aborted commands scsi: scsi_dh_alua: Properly handle the ALUA transitioning state perf bench numa: Address compiler error on s390 perf regs x86: Fix arch__intr_reg_mask() for the hybrid platform gpio: mvebu/pwm: Refuse requests with inverted polarity gpio: gpio-vf610: do not touch other bits when set the target bit perf build: Fix check for btf__load_from_kernel_by_id() in libbpf scsi: ufs: core: Fix referencing invalid rsp field riscv: dts: sifive: fu540-c000: align dma node name with dtschema net: bridge: Clear offload_fwd_mark when passing frame up bridge interface. netfilter: flowtable: move dst_check to packet path netfilter: flowtable: pass flowtable to nf_flow_table_iterate() netfilter: flowtable: fix TCP flow teardown igb: skip phy status check where unavailable mptcp: fix checksum byte order mptcp: reuse __mptcp_make_csum in validate_data_csum mptcp: change the parameter of __mptcp_make_csum ARM: 9197/1: spectre-bhb: fix loop8 sequence for Thumb2 ARM: 9196/1: spectre-bhb: enable for Cortex-A15 net: af_key: add check for pfkey_broadcast in function pfkey_process net/mlx5e: Properly block LRO when XDP is enabled net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc net/qla3xxx: Fix a test in ql_reset_work() clk: at91: generated: consider range when calculating best rate ice: Fix interrupt moderation settings getting cleared ice: move ice_container_type onto ice_ring_container ice: fix possible under reporting of ethtool Tx and Rx statistics ice: fix crash when writing timestamp on RX rings net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() net: systemport: Fix an error handling path in bcm_sysport_probe() Revert "PCI: aardvark: Rewrite IRQ code to chained IRQ handler" netfilter: nft_flow_offload: fix offload with pppoe + vlan net: fix dev_fill_forward_path with pppoe + bridge netfilter: nft_flow_offload: skip dst neigh lookup for ppp devices netfilter: flowtable: fix excessive hw offload attempts after failure net/sched: act_pedit: sanitize shift argument before usage xfrm: fix "disable_policy" flag use when arriving from different devices xfrm: rework default policy structure net: macb: Increment rx bd head after allocating skb and buffer net: ipa: record proper RX transaction count ALSA: hda - fix unused Realtek function when PM is not enabled pinctrl: mediatek: mt8365: fix IES control pins ARM: dts: aspeed: Add video engine to g6 ARM: dts: aspeed: Add secure boot controller node ARM: dts: aspeed: Add ADC for AST2600 and enable for Rainier and Everest ARM: dts: aspeed-g6: fix SPI1/SPI2 quad pin group pinctrl: pinctrl-aspeed-g6: remove FWQSPID group in pinctrl ARM: dts: aspeed-g6: remove FWQSPID group in pinctrl dtsi dma-buf: ensure unique directory name for dmabuf stats dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace drm/dp/mst: fix a possible memory leak in fetch_monitor_name() drm/i915/dmc: Add MMIO range restrictions drm/amd: Don't reset dGPUs if the system is going to s2idle libceph: fix potential use-after-free on linger ping and resends crypto: qcom-rng - fix infinite loop on requests not multiple of WORD_SZ arm64: mte: Ensure the cleared tags are visible before setting the PTE arm64: paravirt: Use RCU read locks to guard stolen_time KVM: x86/mmu: Update number of zapped pages even if page list is stable Revert "can: m_can: pci: use custom bit timings for Elkhart Lake" PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold Fix double fget() in vhost_net_set_backend() selinux: fix bad cleanup on error in hashtab_duplicate() perf: Fix sys_perf_event_open() race against self ALSA: hda/realtek: Add quirk for TongFang devices with pop noise ALSA: wavefront: Proper check of get_user() error ALSA: usb-audio: Restore Rane SL-1 quirk nilfs2: fix lockdep warnings during disk space reclamation nilfs2: fix lockdep warnings in page operations for btree nodes ARM: 9191/1: arm/stacktrace, kasan: Silence KASAN warnings in unwind_frame() platform/chrome: cros_ec_debugfs: detach log reader wq from devm drbd: remove usage of list iterator variable after loop MIPS: lantiq: check the return value of kzalloc() fs: fix an infinite loop in iomap_fiemap rtc: mc146818-lib: Fix the AltCentury for AMD platforms nvme-multipath: fix hang when disk goes live over reconnect nvmet: use a private workqueue instead of the system workqueue tools/virtio: compile with -pthread vhost_vdpa: don't setup irq offloading when irq_num < 0 s390/pci: improve zpci_dev reference counting s390/traps: improve panic message for translation-specification exception ALSA: hda/realtek: Enable headset mic on Lenovo P360 crypto: x86/chacha20 - Avoid spurious jumps to other functions crypto: stm32 - fix reference leak in stm32_crc_remove rtc: sun6i: Fix time overflow handling gfs2: Disable page faults during lockless buffered reads nvme-pci: add quirks for Samsung X5 SSDs Input: stmfts - fix reference leak in stmfts_input_open Input: add bounds checking to input_set_capability() um: Cleanup syscall_handler_t definition/cast, fix warning rtc: pcf2127: fix bug when reading alarm registers rtc: fix use-after-free on device removal Revert "drm/i915/opregion: check port number bounds for SWSCI display power state" mm/kfence: reset PG_slab and memcg_data before freeing __kfence_pool Watchdog: sp5100_tco: Enable Family 17h+ CPUs Watchdog: sp5100_tco: Add initialization using EFCH MMIO Watchdog: sp5100_tco: Refactor MMIO base address initialization Watchdog: sp5100_tco: Move timer initialization into function i2c: piix4: Enable EFCH MMIO for Family 17h+ i2c: piix4: Add EFCH MMIO support for SMBus port select i2c: piix4: Add EFCH MMIO support to SMBus base address detect i2c: piix4: Add EFCH MMIO support to region request and release i2c: piix4: Move SMBus port selection into function i2c: piix4: Move SMBus controller base address detect into function i2c: piix4: Move port I/O region request/release code into functions i2c: piix4: Replace hardcoded memory map size with a #define kernel/resource: Introduce request_mem_region_muxed() floppy: use a statically allocated error counter io_uring: arm poll for non-nowait files usb: gadget: fix race when gadget driver register via ioctl Conflicts: Documentation/devicetree/bindings Documentation/devicetree/bindings/arm/qcom.yaml Documentation/devicetree/bindings/clock/qcom,gcc-msm8996.yaml Documentation/devicetree/bindings/display/sitronix,st7735r.yaml Documentation/devicetree/bindings/dma/allwinner,sun50i-a64-dma.yaml Documentation/devicetree/bindings/dma/moxa,moxart-dma.txt Documentation/devicetree/bindings/gpio/gpio-altera.txt Documentation/devicetree/bindings/gpio/gpio-zynq.yaml Documentation/devicetree/bindings/iio/gyroscope/bosch,bmg160.yaml Documentation/devicetree/bindings/net/broadcom-bluetooth.yaml Documentation/devicetree/bindings/perf/arm,cmn.yaml Documentation/devicetree/bindings/pinctrl/aspeed,ast2600-pinctrl.yaml Documentation/devicetree/bindings/regulator/mt6315-regulator.yaml Documentation/devicetree/bindings/regulator/nxp,pca9450-regulator.yaml Documentation/devicetree/bindings/riscv/sifive-l2-cache.yaml Documentation/devicetree/bindings/soc/qcom/qcom,smd-rpm.yaml Documentation/devicetree/bindings/spi/qcom,spi-qcom-qspi.yaml Documentation/devicetree/bindings/spi/spi-cadence.yaml Documentation/devicetree/bindings/spi/spi-zynqmp-qspi.yaml Documentation/devicetree/bindings/usb/generic-ehci.yaml Documentation/devicetree/bindings/usb/generic-ohci.yaml Documentation/devicetree/bindings/usb/mediatek,mtk-xhci.yaml drivers/block/virtio_blk.c drivers/dma/qcom/bam_dma.c drivers/interconnect/qcom/icc-rpmh.c drivers/interconnect/qcom/sm8150.c drivers/iommu/arm/arm-smmu/arm-smmu.c drivers/net/ethernet/stmicro/stmmac/stmmac_main.c drivers/remoteproc/qcom_q6v5_pas.c drivers/remoteproc/qcom_sysmon.c drivers/rpmsg/qcom_glink_native.c drivers/scsi/ufs/ufs-qcom.c mm/page_alloc.c net/qrtr/mhi.c Upstream-Build: ks_qcom-android13-5.15-keystone-qcom-release@9464069 TKQ2.230106.001 Change-Id: Ic2d97cec39c0913c507058ec436627685b2203df Signed-off-by: Blagovest Kolenichev <quic_c_bkolen@quicinc.com>
2023-01-08 18:25:29 -08:00
parent fb02444877 b1c838fd5a
commit 05226cef87
3460 changed files with 63032 additions and 41518 deletions
--- a/BUILD.bazel
+++ b/BUILD.bazel
@@ -1,30 +1,21 @@
+# SPDX-License-Identifier: GPL-2.0
 # Copyright (C) 2021 The Android Open Source Project
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#       http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
+
+load("//build/kernel/kleaf:constants.bzl", "aarch64_gz_outs")
+load("//build/kernel/kleaf:common_kernels.bzl", "define_common_kernels", "define_db845c")
+
 package(
    default_visibility = [
        "//visibility:public",
    ],
 )

-load("//build/kernel/kleaf:constants.bzl", "aarch64_gz_outs")
-load("//build/kernel/kleaf:common_kernels.bzl", "define_common_kernels", "define_db845c")
-
 _aarch64_additional_kmi_symbol_lists = [
    # keep sorted
    "android/abi_gki_aarch64_amlogic",
    "android/abi_gki_aarch64_db845c",
    "android/abi_gki_aarch64_exynos",
+    "android/abi_gki_aarch64_exynos_wear",
    "android/abi_gki_aarch64_exynosauto",
    "android/abi_gki_aarch64_fips140",
    "android/abi_gki_aarch64_galaxy",
--- a/Documentation/ABI/testing/sysfs-ata
+++ b/Documentation/ABI/testing/sysfs-ata
@@ -107,13 +107,14 @@ Description:
 				described in ATA8 7.16 and 7.17. Only valid if
 				the device is not a PM.

-		pio_mode:	(RO) Transfer modes supported by the device when
-				in PIO mode. Mostly used by PATA device.
+		pio_mode:	(RO) PIO transfer mode used by the device.
+				Mostly used by PATA devices.

-		xfer_mode:	(RO) Current transfer mode
+		xfer_mode:	(RO) Current transfer mode. Mostly used by
+				PATA devices.

-		dma_mode:	(RO) Transfer modes supported by the device when
-				in DMA mode. Mostly used by PATA device.
+		dma_mode:	(RO) DMA transfer mode used by the device.
+				Mostly used by PATA devices.

 		class:		(RO) Device class. Can be "ata" for disk,
 				"atapi" for packet device, "pmp" for PM, or
--- a/Documentation/ABI/testing/sysfs-bus-iio-vf610
+++ b/Documentation/ABI/testing/sysfs-bus-iio-vf610
@@ -1,4 +1,4 @@
-What:		/sys/bus/iio/devices/iio:deviceX/conversion_mode
+What:		/sys/bus/iio/devices/iio:deviceX/in_conversion_mode
 KernelVersion:	4.2
 Contact:	linux-iio@vger.kernel.org
 Description:
--- a/Documentation/ABI/testing/sysfs-bus-usb
+++ b/Documentation/ABI/testing/sysfs-bus-usb
@@ -244,6 +244,17 @@ Description:
 		is permitted, "u2" if only u2 is permitted, "u1_u2" if both u1 and
 		u2 are permitted.

+What:		/sys/bus/usb/devices/.../<hub_interface>/port<X>/early_stop
+Date:		Sep 2022
+Contact:	Ray Chi <raychi@google.com>
+Description:
+		Some USB hosts have some watchdog mechanisms so that the device
+		may enter ramdump if it takes a long time during port initialization.
+		This attribute allows each port just has two attempts so that the
+		port initialization will be failed quickly. In addition, if a port
+		which is marked with early_stop has failed to initialize, it will ignore
+		all future connections until this attribute is clear.
+
 What:		/sys/bus/usb/devices/.../power/usb2_lpm_l1_timeout
 Date:		May 2013
 Contact:	Mathias Nyman <mathias.nyman@linux.intel.com>
--- a/Documentation/ABI/testing/sysfs-devices-system-cpu
+++ b/Documentation/ABI/testing/sysfs-devices-system-cpu
@@ -520,6 +520,8 @@ What:		/sys/devices/system/cpu/vulnerabilities
 		/sys/devices/system/cpu/vulnerabilities/srbds
 		/sys/devices/system/cpu/vulnerabilities/tsx_async_abort
 		/sys/devices/system/cpu/vulnerabilities/itlb_multihit
+		/sys/devices/system/cpu/vulnerabilities/mmio_stale_data
+		/sys/devices/system/cpu/vulnerabilities/retbleed
 Date:		January 2018
 Contact:	Linux kernel mailing list <linux-kernel@vger.kernel.org>
 Description:	Information about CPU vulnerabilities
--- a/Documentation/ABI/testing/sysfs-driver-xen-blkback
+++ b/Documentation/ABI/testing/sysfs-driver-xen-blkback
@@ -42,5 +42,5 @@ KernelVersion:  5.10
 Contact:        SeongJae Park <sjpark@amazon.de>
 Description:
                Whether to enable the persistent grants feature or not.  Note
-                that this option only takes effect on newly created backends.
+                that this option only takes effect on newly connected backends.
                The default is Y (enable).
--- a/Documentation/ABI/testing/sysfs-driver-xen-blkfront
+++ b/Documentation/ABI/testing/sysfs-driver-xen-blkfront
@@ -15,5 +15,5 @@ KernelVersion:  5.10
 Contact:        SeongJae Park <sjpark@amazon.de>
 Description:
                Whether to enable the persistent grants feature or not.  Note
-                that this option only takes effect on newly created frontends.
+                that this option only takes effect on newly connected frontends.
                The default is Y (enable).
--- a/Documentation/accounting/psi.rst
+++ b/Documentation/accounting/psi.rst
@@ -37,11 +37,7 @@ Pressure interface
 Pressure information for each resource is exported through the
 respective file in /proc/pressure/ -- cpu, memory, and io.

-The format for CPU is as such::
-
-	some avg10=0.00 avg60=0.00 avg300=0.00 total=0
-
-and for memory and IO::
+The format is as such::

 	some avg10=0.00 avg60=0.00 avg300=0.00 total=0
 	full avg10=0.00 avg60=0.00 avg300=0.00 total=0
@@ -58,6 +54,9 @@ situation from a state where some tasks are stalled but the CPU is
 still doing productive work. As such, time spent in this subset of the
 stall state is tracked separately and exported in the "full" averages.

+CPU full is undefined at the system level, but has been reported
+since 5.13, so it is set to zero for backward compatibility.
+
 The ratios (in %) are tracked as recent trends over ten, sixty, and
 three hundred second windows, which gives insight into short term events
 as well as medium and long term trends. The total absolute stall time
--- a/Documentation/admin-guide/device-mapper/writecache.rst
+++ b/Documentation/admin-guide/device-mapper/writecache.rst
@@ -78,16 +78,16 @@ Status:
 2. the number of blocks
 3. the number of free blocks
 4. the number of blocks under writeback
-5. the number of read requests
-6. the number of read requests that hit the cache
-7. the number of write requests
-8. the number of write requests that hit uncommitted block
-9. the number of write requests that hit committed block
-10. the number of write requests that bypass the cache
-11. the number of write requests that are allocated in the cache
+5. the number of read blocks
+6. the number of read blocks that hit the cache
+7. the number of write blocks
+8. the number of write blocks that hit uncommitted block
+9. the number of write blocks that hit committed block
+10. the number of write blocks that bypass the cache
+11. the number of write blocks that are allocated in the cache
 12. the number of write requests that are blocked on the freelist
 13. the number of flush requests
-14. the number of discard requests
+14. the number of discarded blocks

 Messages:
 	flush
--- a/Documentation/admin-guide/hw-vuln/index.rst
+++ b/Documentation/admin-guide/hw-vuln/index.rst
@@ -17,3 +17,4 @@ are configurable at compile, boot or run time.
   special-register-buffer-data-sampling.rst
   core-scheduling.rst
   l1d_flush.rst
+   processor_mmio_stale_data.rst
--- a/Documentation/admin-guide/hw-vuln/processor_mmio_stale_data.rst
+++ b/Documentation/admin-guide/hw-vuln/processor_mmio_stale_data.rst
@@ -0,0 +1,260 @@
+=========================================
+Processor MMIO Stale Data Vulnerabilities
+=========================================
+
+Processor MMIO Stale Data Vulnerabilities are a class of memory-mapped I/O
+(MMIO) vulnerabilities that can expose data. The sequences of operations for
+exposing data range from simple to very complex. Because most of the
+vulnerabilities require the attacker to have access to MMIO, many environments
+are not affected. System environments using virtualization where MMIO access is
+provided to untrusted guests may need mitigation. These vulnerabilities are
+not transient execution attacks. However, these vulnerabilities may propagate
+stale data into core fill buffers where the data can subsequently be inferred
+by an unmitigated transient execution attack. Mitigation for these
+vulnerabilities includes a combination of microcode update and software
+changes, depending on the platform and usage model. Some of these mitigations
+are similar to those used to mitigate Microarchitectural Data Sampling (MDS) or
+those used to mitigate Special Register Buffer Data Sampling (SRBDS).
+
+Data Propagators
+================
+Propagators are operations that result in stale data being copied or moved from
+one microarchitectural buffer or register to another. Processor MMIO Stale Data
+Vulnerabilities are operations that may result in stale data being directly
+read into an architectural, software-visible state or sampled from a buffer or
+register.
+
+Fill Buffer Stale Data Propagator (FBSDP)
+-----------------------------------------
+Stale data may propagate from fill buffers (FB) into the non-coherent portion
+of the uncore on some non-coherent writes. Fill buffer propagation by itself
+does not make stale data architecturally visible. Stale data must be propagated
+to a location where it is subject to reading or sampling.
+
+Sideband Stale Data Propagator (SSDP)
+-------------------------------------
+The sideband stale data propagator (SSDP) is limited to the client (including
+Intel Xeon server E3) uncore implementation. The sideband response buffer is
+shared by all client cores. For non-coherent reads that go to sideband
+destinations, the uncore logic returns 64 bytes of data to the core, including
+both requested data and unrequested stale data, from a transaction buffer and
+the sideband response buffer. As a result, stale data from the sideband
+response and transaction buffers may now reside in a core fill buffer.
+
+Primary Stale Data Propagator (PSDP)
+------------------------------------
+The primary stale data propagator (PSDP) is limited to the client (including
+Intel Xeon server E3) uncore implementation. Similar to the sideband response
+buffer, the primary response buffer is shared by all client cores. For some
+processors, MMIO primary reads will return 64 bytes of data to the core fill
+buffer including both requested data and unrequested stale data. This is
+similar to the sideband stale data propagator.
+
+Vulnerabilities
+===============
+Device Register Partial Write (DRPW) (CVE-2022-21166)
+-----------------------------------------------------
+Some endpoint MMIO registers incorrectly handle writes that are smaller than
+the register size. Instead of aborting the write or only copying the correct
+subset of bytes (for example, 2 bytes for a 2-byte write), more bytes than
+specified by the write transaction may be written to the register. On
+processors affected by FBSDP, this may expose stale data from the fill buffers
+of the core that created the write transaction.
+
+Shared Buffers Data Sampling (SBDS) (CVE-2022-21125)
+----------------------------------------------------
+After propagators may have moved data around the uncore and copied stale data
+into client core fill buffers, processors affected by MFBDS can leak data from
+the fill buffer. It is limited to the client (including Intel Xeon server E3)
+uncore implementation.
+
+Shared Buffers Data Read (SBDR) (CVE-2022-21123)
+------------------------------------------------
+It is similar to Shared Buffer Data Sampling (SBDS) except that the data is
+directly read into the architectural software-visible state. It is limited to
+the client (including Intel Xeon server E3) uncore implementation.
+
+Affected Processors
+===================
+Not all the CPUs are affected by all the variants. For instance, most
+processors for the server market (excluding Intel Xeon E3 processors) are
+impacted by only Device Register Partial Write (DRPW).
+
+Below is the list of affected Intel processors [#f1]_:
+
+   ===================  ============  =========
+   Common name          Family_Model  Steppings
+   ===================  ============  =========
+   HASWELL_X            06_3FH        2,4
+   SKYLAKE_L            06_4EH        3
+   BROADWELL_X          06_4FH        All
+   SKYLAKE_X            06_55H        3,4,6,7,11
+   BROADWELL_D          06_56H        3,4,5
+   SKYLAKE              06_5EH        3
+   ICELAKE_X            06_6AH        4,5,6
+   ICELAKE_D            06_6CH        1
+   ICELAKE_L            06_7EH        5
+   ATOM_TREMONT_D       06_86H        All
+   LAKEFIELD            06_8AH        1
+   KABYLAKE_L           06_8EH        9 to 12
+   ATOM_TREMONT         06_96H        1
+   ATOM_TREMONT_L       06_9CH        0
+   KABYLAKE             06_9EH        9 to 13
+   COMETLAKE            06_A5H        2,3,5
+   COMETLAKE_L          06_A6H        0,1
+   ROCKETLAKE           06_A7H        1
+   ===================  ============  =========
+
+If a CPU is in the affected processor list, but not affected by a variant, it
+is indicated by new bits in MSR IA32_ARCH_CAPABILITIES. As described in a later
+section, mitigation largely remains the same for all the variants, i.e. to
+clear the CPU fill buffers via VERW instruction.
+
+New bits in MSRs
+================
+Newer processors and microcode update on existing affected processors added new
+bits to IA32_ARCH_CAPABILITIES MSR. These bits can be used to enumerate
+specific variants of Processor MMIO Stale Data vulnerabilities and mitigation
+capability.
+
+MSR IA32_ARCH_CAPABILITIES
+--------------------------
+Bit 13 - SBDR_SSDP_NO - When set, processor is not affected by either the
+	 Shared Buffers Data Read (SBDR) vulnerability or the sideband stale
+	 data propagator (SSDP).
+Bit 14 - FBSDP_NO - When set, processor is not affected by the Fill Buffer
+	 Stale Data Propagator (FBSDP).
+Bit 15 - PSDP_NO - When set, processor is not affected by Primary Stale Data
+	 Propagator (PSDP).
+Bit 17 - FB_CLEAR - When set, VERW instruction will overwrite CPU fill buffer
+	 values as part of MD_CLEAR operations. Processors that do not
+	 enumerate MDS_NO (meaning they are affected by MDS) but that do
+	 enumerate support for both L1D_FLUSH and MD_CLEAR implicitly enumerate
+	 FB_CLEAR as part of their MD_CLEAR support.
+Bit 18 - FB_CLEAR_CTRL - Processor supports read and write to MSR
+	 IA32_MCU_OPT_CTRL[FB_CLEAR_DIS]. On such processors, the FB_CLEAR_DIS
+	 bit can be set to cause the VERW instruction to not perform the
+	 FB_CLEAR action. Not all processors that support FB_CLEAR will support
+	 FB_CLEAR_CTRL.
+
+MSR IA32_MCU_OPT_CTRL
+---------------------
+Bit 3 - FB_CLEAR_DIS - When set, VERW instruction does not perform the FB_CLEAR
+action. This may be useful to reduce the performance impact of FB_CLEAR in
+cases where system software deems it warranted (for example, when performance
+is more critical, or the untrusted software has no MMIO access). Note that
+FB_CLEAR_DIS has no impact on enumeration (for example, it does not change
+FB_CLEAR or MD_CLEAR enumeration) and it may not be supported on all processors
+that enumerate FB_CLEAR.
+
+Mitigation
+==========
+Like MDS, all variants of Processor MMIO Stale Data vulnerabilities  have the
+same mitigation strategy to force the CPU to clear the affected buffers before
+an attacker can extract the secrets.
+
+This is achieved by using the otherwise unused and obsolete VERW instruction in
+combination with a microcode update. The microcode clears the affected CPU
+buffers when the VERW instruction is executed.
+
+Kernel reuses the MDS function to invoke the buffer clearing:
+
+	mds_clear_cpu_buffers()
+
+On MDS affected CPUs, the kernel already invokes CPU buffer clear on
+kernel/userspace, hypervisor/guest and C-state (idle) transitions. No
+additional mitigation is needed on such CPUs.
+
+For CPUs not affected by MDS or TAA, mitigation is needed only for the attacker
+with MMIO capability. Therefore, VERW is not required for kernel/userspace. For
+virtualization case, VERW is only needed at VMENTER for a guest with MMIO
+capability.
+
+Mitigation points
+-----------------
+Return to user space
+^^^^^^^^^^^^^^^^^^^^
+Same mitigation as MDS when affected by MDS/TAA, otherwise no mitigation
+needed.
+
+C-State transition
+^^^^^^^^^^^^^^^^^^
+Control register writes by CPU during C-state transition can propagate data
+from fill buffer to uncore buffers. Execute VERW before C-state transition to
+clear CPU fill buffers.
+
+Guest entry point
+^^^^^^^^^^^^^^^^^
+Same mitigation as MDS when processor is also affected by MDS/TAA, otherwise
+execute VERW at VMENTER only for MMIO capable guests. On CPUs not affected by
+MDS/TAA, guest without MMIO access cannot extract secrets using Processor MMIO
+Stale Data vulnerabilities, so there is no need to execute VERW for such guests.
+
+Mitigation control on the kernel command line
+---------------------------------------------
+The kernel command line allows to control the Processor MMIO Stale Data
+mitigations at boot time with the option "mmio_stale_data=". The valid
+arguments for this option are:
+
+  ==========  =================================================================
+  full        If the CPU is vulnerable, enable mitigation; CPU buffer clearing
+              on exit to userspace and when entering a VM. Idle transitions are
+              protected as well. It does not automatically disable SMT.
+  full,nosmt  Same as full, with SMT disabled on vulnerable CPUs. This is the
+              complete mitigation.
+  off         Disables mitigation completely.
+  ==========  =================================================================
+
+If the CPU is affected and mmio_stale_data=off is not supplied on the kernel
+command line, then the kernel selects the appropriate mitigation.
+
+Mitigation status information
+-----------------------------
+The Linux kernel provides a sysfs interface to enumerate the current
+vulnerability status of the system: whether the system is vulnerable, and
+which mitigations are active. The relevant sysfs file is:
+
+	/sys/devices/system/cpu/vulnerabilities/mmio_stale_data
+
+The possible values in this file are:
+
+  .. list-table::
+
+     * - 'Not affected'
+       - The processor is not vulnerable
+     * - 'Vulnerable'
+       - The processor is vulnerable, but no mitigation enabled
+     * - 'Vulnerable: Clear CPU buffers attempted, no microcode'
+       - The processor is vulnerable, but microcode is not updated. The
+         mitigation is enabled on a best effort basis.
+     * - 'Mitigation: Clear CPU buffers'
+       - The processor is vulnerable and the CPU buffer clearing mitigation is
+         enabled.
+     * - 'Unknown: No mitigations'
+       - The processor vulnerability status is unknown because it is
+	 out of Servicing period. Mitigation is not attempted.
+
+Definitions:
+------------
+
+Servicing period: The process of providing functional and security updates to
+Intel processors or platforms, utilizing the Intel Platform Update (IPU)
+process or other similar mechanisms.
+
+End of Servicing Updates (ESU): ESU is the date at which Intel will no
+longer provide Servicing, such as through IPU or other similar update
+processes. ESU dates will typically be aligned to end of quarter.
+
+If the processor is vulnerable then the following information is appended to
+the above information:
+
+  ========================  ===========================================
+  'SMT vulnerable'          SMT is enabled
+  'SMT disabled'            SMT is disabled
+  'SMT Host state unknown'  Kernel runs in a VM, Host SMT state unknown
+  ========================  ===========================================
+
+References
+----------
+.. [#f1] Affected Processors
+   https://www.intel.com/content/www/us/en/developer/topic-technology/software-security-guidance/processors-affected-consolidated-product-cpu-model.html
--- a/Documentation/admin-guide/hw-vuln/spectre.rst
+++ b/Documentation/admin-guide/hw-vuln/spectre.rst
@@ -422,6 +422,14 @@ The possible values in this file are:
  'RSB filling'   Protection of RSB on context switch enabled
  =============   ===========================================

+  - EIBRS Post-barrier Return Stack Buffer (PBRSB) protection status:
+
+  ===========================  =======================================================
+  'PBRSB-eIBRS: SW sequence'   CPU is affected and protection of RSB on VMEXIT enabled
+  'PBRSB-eIBRS: Vulnerable'    CPU is vulnerable
+  'PBRSB-eIBRS: Not affected'  CPU is not affected by PBRSB
+  ===========================  =======================================================
+
 Full mitigation might require a microcode update from the CPU
 vendor. When the necessary microcode is not available, the kernel will
 report vulnerability.
--- a/Documentation/admin-guide/kernel-parameters.txt
+++ b/Documentation/admin-guide/kernel-parameters.txt
@@ -3049,6 +3049,8 @@
 					       kvm.nx_huge_pages=off [X86]
 					       no_entry_flush [PPC]
 					       no_uaccess_flush [PPC]
+					       mmio_stale_data=off [X86]
+					       retbleed=off [X86]

 				Exceptions:
 					       This does not have any effect on
@@ -3070,6 +3072,8 @@
 				Equivalent to: l1tf=flush,nosmt [X86]
 					       mds=full,nosmt [X86]
 					       tsx_async_abort=full,nosmt [X86]
+					       mmio_stale_data=full,nosmt [X86]
+					       retbleed=auto,nosmt [X86]

 	mminit_loglevel=
 			[KNL] When CONFIG_DEBUG_MEMORY_INIT is set, this
@@ -3079,6 +3083,40 @@
 			log everything. Information is printed at KERN_DEBUG
 			so loglevel=8 may also need to be specified.

+	mmio_stale_data=
+			[X86,INTEL] Control mitigation for the Processor
+			MMIO Stale Data vulnerabilities.
+
+			Processor MMIO Stale Data is a class of
+			vulnerabilities that may expose data after an MMIO
+			operation. Exposed data could originate or end in
+			the same CPU buffers as affected by MDS and TAA.
+			Therefore, similar to MDS and TAA, the mitigation
+			is to clear the affected CPU buffers.
+
+			This parameter controls the mitigation. The
+			options are:
+
+			full       - Enable mitigation on vulnerable CPUs
+
+			full,nosmt - Enable mitigation and disable SMT on
+				     vulnerable CPUs.
+
+			off        - Unconditionally disable mitigation
+
+			On MDS or TAA affected machines,
+			mmio_stale_data=off can be prevented by an active
+			MDS or TAA mitigation as these vulnerabilities are
+			mitigated with the same mechanism so in order to
+			disable this mitigation, you need to specify
+			mds=off and tsx_async_abort=off too.
+
+			Not specifying this option is equivalent to
+			mmio_stale_data=full.
+
+			For details see:
+			Documentation/admin-guide/hw-vuln/processor_mmio_stale_data.rst
+
 	module.sig_enforce
 			[KNL] When CONFIG_MODULE_SIG is set, this means that
 			modules without (valid) signatures will fail to load.
@@ -4337,6 +4375,12 @@
 			fully seed the kernel's CRNG. Default is controlled
 			by CONFIG_RANDOM_TRUST_CPU.

+	random.trust_bootloader={on,off}
+			[KNL] Enable or disable trusting the use of a
+			seed passed by the bootloader (if available) to
+			fully seed the kernel's CRNG. Default is controlled
+			by CONFIG_RANDOM_TRUST_BOOTLOADER.
+
 	randomize_kstack_offset=
 			[KNL] Enable or disable kernel stack offset
 			randomization, which provides roughly 5 bits of
@@ -4956,6 +5000,43 @@

 	retain_initrd	[RAM] Keep initrd memory after extraction

+	retbleed=	[X86] Control mitigation of RETBleed (Arbitrary
+			Speculative Code Execution with Return Instructions)
+			vulnerability.
+
+			AMD-based UNRET and IBPB mitigations alone do not stop
+			sibling threads from influencing the predictions of other
+			sibling threads. For that reason, STIBP is used on pro-
+			cessors that support it, and mitigate SMT on processors
+			that don't.
+
+			off          - no mitigation
+			auto         - automatically select a migitation
+			auto,nosmt   - automatically select a mitigation,
+				       disabling SMT if necessary for
+				       the full mitigation (only on Zen1
+				       and older without STIBP).
+			ibpb         - On AMD, mitigate short speculation
+				       windows on basic block boundaries too.
+				       Safe, highest perf impact. It also
+				       enables STIBP if present. Not suitable
+				       on Intel.
+			ibpb,nosmt   - Like "ibpb" above but will disable SMT
+				       when STIBP is not available. This is
+				       the alternative for systems which do not
+				       have STIBP.
+			unret        - Force enable untrained return thunks,
+				       only effective on AMD f15h-f17h based
+				       systems.
+			unret,nosmt  - Like unret, but will disable SMT when STIBP
+				       is not available. This is the alternative for
+				       systems which do not have STIBP.
+
+			Selecting 'auto' will choose a mitigation method at run
+			time according to the CPU.
+
+			Not specifying this option is equivalent to retbleed=auto.
+
 	rfkill.default_state=
 		0	"airplane mode".  All wifi, bluetooth, wimax, gps, fm,
 			etc. communication is blocked by default.
@@ -5302,6 +5383,7 @@
 			eibrs		  - enhanced IBRS
 			eibrs,retpoline   - enhanced IBRS + Retpolines
 			eibrs,lfence      - enhanced IBRS + LFENCE
+			ibrs		  - use IBRS to protect kernel

 			Not specifying this option is equivalent to
 			spectre_v2=auto.
--- a/Documentation/admin-guide/mm/multigen_lru.rst
+++ b/Documentation/admin-guide/mm/multigen_lru.rst
@@ -24,12 +24,13 @@ following subsections.

 Kill switch
 -----------
-``enable`` accepts different values to enable or disable the following
-components. Its default value depends on ``CONFIG_LRU_GEN_ENABLED``.
-All the components should be enabled unless some of them have
-unforeseen side effects. Writing to ``enable`` has no effect when a
-component is not supported by the hardware, and valid values will be
-accepted even when the main switch is off.
+``enabled`` accepts different values to enable or disable the
+following components. Its default value depends on
+``CONFIG_LRU_GEN_ENABLED``. All the components should be enabled
+unless some of them have unforeseen side effects. Writing to
+``enabled`` has no effect when a component is not supported by the
+hardware, and valid values will be accepted even when the main switch
+is off.

 ====== ===============================================================
 Values Components
@@ -39,7 +40,9 @@ Values Components
       batches, when MMU sets it (e.g., on x86). This behavior can
       theoretically worsen lock contention (mmap_lock). If it is
       disabled, the multi-gen LRU will suffer a minor performance
-       degradation.
+       degradation for workloads that contiguously map hot pages,
+       whose accessed bits can be otherwise cleared by fewer larger
+       batches.
 0x0004 Clearing the accessed bit in non-leaf page table entries as
       well, when MMU sets it (e.g., on x86). This behavior was not
       verified on x86 varieties other than Intel and AMD. If it is
@@ -90,18 +93,19 @@ evicted generations in this file.

 Working set estimation
 ----------------------
-Working set estimation measures how much memory an application
-requires in a given time interval, and it is usually done with little
-impact on the performance of the application. E.g., data centers want
-to optimize job scheduling (bin packing) to improve memory
-utilizations. When a new job comes in, the job scheduler needs to find
-out whether each server it manages can allocate a certain amount of
-memory for this new job before it can pick a candidate. To do so, this
-job scheduler needs to estimate the working sets of the existing jobs.
+Working set estimation measures how much memory an application needs
+in a given time interval, and it is usually done with little impact on
+the performance of the application. E.g., data centers want to
+optimize job scheduling (bin packing) to improve memory utilizations.
+When a new job comes in, the job scheduler needs to find out whether
+each server it manages can allocate a certain amount of memory for
+this new job before it can pick a candidate. To do so, the job
+scheduler needs to estimate the working sets of the existing jobs.

 When it is read, ``lru_gen`` returns a histogram of numbers of pages
 accessed over different time intervals for each memcg and node.
-``MAX_NR_GENS`` decides the number of bins for each histogram.
+``MAX_NR_GENS`` decides the number of bins for each histogram. The
+histograms are noncumulative.
 ::

    memcg  memcg_id  memcg_path
@@ -110,43 +114,49 @@ accessed over different time intervals for each memcg and node.
           ...
           max_gen_nr  age_in_ms  nr_anon_pages  nr_file_pages

-Each generation contains an estimated number of pages that have been
-accessed within ``age_in_ms`` non-cumulatively. E.g., ``min_gen_nr``
-contains the coldest pages and ``max_gen_nr`` contains the hottest
-pages, since ``age_in_ms`` of the former is the largest and that of
-the latter is the smallest.
+Each bin contains an estimated number of pages that have been accessed
+within ``age_in_ms``. E.g., ``min_gen_nr`` contains the coldest pages
+and ``max_gen_nr`` contains the hottest pages, since ``age_in_ms`` of
+the former is the largest and that of the latter is the smallest.

-Users can write ``+ memcg_id node_id max_gen_nr
-[can_swap[full_scan]]`` to ``lru_gen`` to create a new generation
-``max_gen_nr+1``. ``can_swap`` defaults to the swap setting and, if it
-is set to ``1``, it forces the scan of anon pages when swap is off.
-``full_scan`` defaults to ``1`` and, if it is set to ``0``, it reduces
-the overhead as well as the coverage when scanning page tables.
+Users can write the following command to ``lru_gen`` to create a new
+generation ``max_gen_nr+1``:

-A typical use case is that a job scheduler writes to ``lru_gen`` at a
+    ``+ memcg_id node_id max_gen_nr [can_swap [force_scan]]``
+
+``can_swap`` defaults to the swap setting and, if it is set to ``1``,
+it forces the scan of anon pages when swap is off, and vice versa.
+``force_scan`` defaults to ``1`` and, if it is set to ``0``, it
+employs heuristics to reduce the overhead, which is likely to reduce
+the coverage as well.
+
+A typical use case is that a job scheduler runs this command at a
 certain time interval to create new generations, and it ranks the
-servers it manages based on the sizes of their cold memory defined by
+servers it manages based on the sizes of their cold pages defined by
 this time interval.

 Proactive reclaim
 -----------------
-Proactive reclaim induces memory reclaim when there is no memory
-pressure and usually targets cold memory only. E.g., when a new job
-comes in, the job scheduler wants to proactively reclaim memory on the
-server it has selected to improve the chance of successfully landing
+Proactive reclaim induces page reclaim when there is no memory
+pressure. It usually targets cold pages only. E.g., when a new job
+comes in, the job scheduler wants to proactively reclaim cold pages on
+the server it selected, to improve the chance of successfully landing
 this new job.

-Users can write ``- memcg_id node_id min_gen_nr [swappiness
-[nr_to_reclaim]]`` to ``lru_gen`` to evict generations less than or
-equal to ``min_gen_nr``. Note that ``min_gen_nr`` should be less than
-``max_gen_nr-1`` as ``max_gen_nr`` and ``max_gen_nr-1`` are not fully
-aged and therefore cannot be evicted. ``swappiness`` overrides the
-default value in ``/proc/sys/vm/swappiness``. ``nr_to_reclaim`` limits
-the number of pages to evict.
+Users can write the following command to ``lru_gen`` to evict
+generations less than or equal to ``min_gen_nr``.

-A typical use case is that a job scheduler writes to ``lru_gen``
-before it tries to land a new job on a server, and if it fails to
-materialize the cold memory without impacting the existing jobs on
-this server, it retries on the next server according to the ranking
-result obtained from the working set estimation step described
-earlier.
+    ``- memcg_id node_id min_gen_nr [swappiness [nr_to_reclaim]]``
+
+``min_gen_nr`` should be less than ``max_gen_nr-1``, since
+``max_gen_nr`` and ``max_gen_nr-1`` are not fully aged (equivalent to
+the active list) and therefore cannot be evicted. ``swappiness``
+overrides the default value in ``/proc/sys/vm/swappiness``.
+``nr_to_reclaim`` limits the number of pages to evict.
+
+A typical use case is that a job scheduler runs this command before it
+tries to land a new job on a server. If it fails to materialize enough
+cold pages because of the overestimation, it retries on the next
+server according to the ranking result obtained from the working set
+estimation step. This less forceful approach limits the impacts on the
+existing jobs.
--- a/Documentation/admin-guide/pm/cpuidle.rst
+++ b/Documentation/admin-guide/pm/cpuidle.rst
@@ -612,8 +612,8 @@ the ``menu`` governor to be used on the systems that use the ``ladder`` governor
 by default this way, for example.

 The other kernel command line parameters controlling CPU idle time management
-described below are only relevant for the *x86* architecture and some of
-them affect Intel processors only.
+described below are only relevant for the *x86* architecture and references
+to ``intel_idle`` affect Intel processors only.

 The *x86* architecture support code recognizes three kernel command line
 options related to CPU idle time management: ``idle=poll``, ``idle=halt``,
@@ -635,10 +635,13 @@ idle, so it very well may hurt single-thread computations performance as well as
 energy-efficiency.  Thus using it for performance reasons may not be a good idea
 at all.]

-The ``idle=nomwait`` option disables the ``intel_idle`` driver and causes
-``acpi_idle`` to be used (as long as all of the information needed by it is
-there in the system's ACPI tables), but it is not allowed to use the
-``MWAIT`` instruction of the CPUs to ask the hardware to enter idle states.
+The ``idle=nomwait`` option prevents the use of ``MWAIT`` instruction of
+the CPU to enter idle states. When this option is used, the ``acpi_idle``
+driver will use the ``HLT`` instruction instead of ``MWAIT``. On systems
+running Intel processors, this option disables the ``intel_idle`` driver
+and forces the use of the ``acpi_idle`` driver instead. Note that in either
+case, ``acpi_idle`` driver will function only if all the information needed
+by it is in the system's ACPI tables.

 In addition to the architecture-level kernel command line options affecting CPU
 idle time management, there are parameters affecting individual ``CPUIdle``
--- a/Documentation/admin-guide/sysctl/kernel.rst
+++ b/Documentation/admin-guide/sysctl/kernel.rst
@@ -1036,28 +1036,22 @@ This is a directory, with the following entries:
 * ``boot_id``: a UUID generated the first time this is retrieved, and
  unvarying after that;

+* ``uuid``: a UUID generated every time this is retrieved (this can
+  thus be used to generate UUIDs at will);
+
 * ``entropy_avail``: the pool's entropy count, in bits;

 * ``poolsize``: the entropy pool size, in bits;

 * ``urandom_min_reseed_secs``: obsolete (used to determine the minimum
-  number of seconds between urandom pool reseeding).
-
-* ``uuid``: a UUID generated every time this is retrieved (this can
-  thus be used to generate UUIDs at will);
+  number of seconds between urandom pool reseeding). This file is
+  writable for compatibility purposes, but writing to it has no effect
+  on any RNG behavior;

 * ``write_wakeup_threshold``: when the entropy count drops below this
  (as a number of bits), processes waiting to write to ``/dev/random``
-  are woken up.
-
-If ``drivers/char/random.c`` is built with ``ADD_INTERRUPT_BENCH``
-defined, these additional entries are present:
-
-* ``add_interrupt_avg_cycles``: the average number of cycles between
-  interrupts used to feed the pool;
-
-* ``add_interrupt_avg_deviation``: the standard deviation seen on the
-  number of cycles between interrupts used to feed the pool.
+  are woken up. This file is writable for compatibility purposes, but
+  writing to it has no effect on any RNG behavior.


 randomize_va_space
--- a/Documentation/admin-guide/sysctl/net.rst
+++ b/Documentation/admin-guide/sysctl/net.rst
@@ -271,7 +271,7 @@ poll cycle or the number of packets processed reaches netdev_budget.
 netdev_max_backlog
 ------------------

-Maximum number  of  packets,  queued  on  the  INPUT  side, when the interface
+Maximum number of packets, queued on the INPUT side, when the interface
 receives packets faster than kernel can process them.

 netdev_rss_key
--- a/Documentation/arm64/silicon-errata.rst
+++ b/Documentation/arm64/silicon-errata.rst
@@ -92,6 +92,8 @@ stable kernels.
 +----------------+-----------------+-----------------+-----------------------------+
 | ARM            | Cortex-A77      | #1508412        | ARM64_ERRATUM_1508412       |
 +----------------+-----------------+-----------------+-----------------------------+
+| ARM            | Cortex-A510     | #2441009        | ARM64_ERRATUM_2441009       |
+----------------+-----------------+-----------------+-----------------------------+
 | ARM            | Cortex-A710     | #2119858        | ARM64_ERRATUM_2119858       |
 +----------------+-----------------+-----------------+-----------------------------+
 | ARM            | Cortex-A710     | #2054223        | ARM64_ERRATUM_2054223       |
--- a/Documentation/atomic_bitops.txt
+++ b/Documentation/atomic_bitops.txt
@@ -59,7 +59,7 @@ Like with atomic_t, the rule of thumb is:
 - RMW operations that have a return value are fully ordered.

 - RMW operations that are conditional are unordered on FAILURE,
-   otherwise the above rules apply. In the case of test_and_{}_bit() operations,
+   otherwise the above rules apply. In the case of test_and_set_bit_lock(),
   if the bit in memory is unchanged by the operation then it is deemed to have
   failed.

--- a/Documentation/conf.py
+++ b/Documentation/conf.py
@@ -161,7 +161,7 @@ finally:
 #
 # This is also used if you do content translation via gettext catalogs.
 # Usually you set "language" from the command line for these cases.
-language = None
+language = 'en'

 # There are two options for replacing |today|: either, you set today to some
 # non-false value, then it is used:
--- a/Documentation/driver-api/firmware/other_interfaces.rst
+++ b/Documentation/driver-api/firmware/other_interfaces.rst
@@ -13,6 +13,12 @@ EDD Interfaces
 .. kernel-doc:: drivers/firmware/edd.c
   :internal:

+Generic System Framebuffers Interface
+-------------------------------------
+
+.. kernel-doc:: drivers/firmware/sysfb.c
+   :export:
+
 Intel Stratix10 SoC Service Layer
 ---------------------------------
 Some features of the Intel Stratix10 SoC require a level of privilege
--- a/Documentation/filesystems/idmappings.rst
+++ b/Documentation/filesystems/idmappings.rst
@@ -952,75 +952,3 @@ The raw userspace id that is put on disk is ``u1000`` so when the user takes
 their home directory back to their home computer where they are assigned
 ``u1000`` using the initial idmapping and mount the filesystem with the initial
 idmapping they will see all those files owned by ``u1000``.
-
-Shortcircuting
--------------
-
-Currently, the implementation of idmapped mounts enforces that the filesystem
-is mounted with the initial idmapping. The reason is simply that none of the
-filesystems that we targeted were mountable with a non-initial idmapping. But
-that might change soon enough. As we've seen above, thanks to the properties of
-idmappings the translation works for both filesystems mounted with the initial
-idmapping and filesystem with non-initial idmappings.
-
-Based on this current restriction to filesystem mounted with the initial
-idmapping two noticeable shortcuts have been taken:
-
-1. We always stash a reference to the initial user namespace in ``struct
-   vfsmount``. Idmapped mounts are thus mounts that have a non-initial user
-   namespace attached to them.
-
-   In order to support idmapped mounts this needs to be changed. Instead of
-   stashing the initial user namespace the user namespace the filesystem was
-   mounted with must be stashed. An idmapped mount is then any mount that has
-   a different user namespace attached then the filesystem was mounted with.
-   This has no user-visible consequences.
-
-2. The translation algorithms in ``mapped_fs*id()`` and ``i_*id_into_mnt()``
-   are simplified.
-
-   Let's consider ``mapped_fs*id()`` first. This function translates the
-   caller's kernel id into a kernel id in the filesystem's idmapping via
-   a mount's idmapping. The full algorithm is::
-
-    mapped_fsuid(kid):
-      /* Map the kernel id up into a userspace id in the mount's idmapping. */
-      from_kuid(mount-idmapping, kid) = uid
-
-      /* Map the userspace id down into a kernel id in the filesystem's idmapping. */
-      make_kuid(filesystem-idmapping, uid) = kuid
-
-   We know that the filesystem is always mounted with the initial idmapping as
-   we enforce this in ``mount_setattr()``. So this can be shortened to::
-
-    mapped_fsuid(kid):
-      /* Map the kernel id up into a userspace id in the mount's idmapping. */
-      from_kuid(mount-idmapping, kid) = uid
-
-      /* Map the userspace id down into a kernel id in the filesystem's idmapping. */
-      KUIDT_INIT(uid) = kuid
-
-   Similarly, for ``i_*id_into_mnt()`` which translated the filesystem's kernel
-   id into a mount's kernel id::
-
-    i_uid_into_mnt(kid):
-      /* Map the kernel id up into a userspace id in the filesystem's idmapping. */
-      from_kuid(filesystem-idmapping, kid) = uid
-
-      /* Map the userspace id down into a kernel id in the mounts's idmapping. */
-      make_kuid(mount-idmapping, uid) = kuid
-
-   Again, we know that the filesystem is always mounted with the initial
-   idmapping as we enforce this in ``mount_setattr()``. So this can be
-   shortened to::
-
-    i_uid_into_mnt(kid):
-      /* Map the kernel id up into a userspace id in the filesystem's idmapping. */
-      __kuid_val(kid) = uid
-
-      /* Map the userspace id down into a kernel id in the mounts's idmapping. */
-      make_kuid(mount-idmapping, uid) = kuid
-
-Handling filesystems mounted with non-initial idmappings requires that the
-translation functions be converted to their full form. They can still be
-shortcircuited on non-idmapped mounts. This has no user-visible consequences.
--- a/Documentation/firmware-guide/acpi/apei/einj.rst
+++ b/Documentation/firmware-guide/acpi/apei/einj.rst
@@ -168,7 +168,7 @@ An error injection example::
  0x00000008	Memory Correctable
  0x00000010	Memory Uncorrectable non-fatal
  # echo 0x12345000 > param1		# Set memory address for injection
-  # echo $((-1 << 12)) > param2		# Mask 0xfffffffffffff000 - anywhere in this page
+  # echo 0xfffffffffffff000 > param2		# Mask - anywhere in this page
  # echo 0x8 > error_type			# Choose correctable memory error
  # echo 1 > error_inject			# Inject now

--- a/Documentation/input/joydev/joystick.rst
+++ b/Documentation/input/joydev/joystick.rst
@@ -517,6 +517,7 @@ All I-Force devices are supported by the iforce module. This includes:
 * AVB Mag Turbo Force
 * AVB Top Shot Pegasus
 * AVB Top Shot Force Feedback Racing Wheel
+* Boeder Force Feedback Wheel
 * Logitech WingMan Force
 * Logitech WingMan Force Wheel
 * Guillemot Race Leader Force Feedback
--- a/Documentation/networking/ip-sysctl.rst
+++ b/Documentation/networking/ip-sysctl.rst
@@ -1063,7 +1063,7 @@ cipso_cache_enable - BOOLEAN
 cipso_cache_bucket_size - INTEGER
 	The CIPSO label cache consists of a fixed size hash table with each
 	hash bucket containing a number of cache entries.  This variable limits
-	the number of entries in each hash bucket; the larger the value the
+	the number of entries in each hash bucket; the larger the value is, the
 	more CIPSO label mappings that can be cached.  When the number of
 	entries in a given hash bucket reaches this limit adding new entries
 	causes the oldest entry in the bucket to be removed to make room.
@@ -1170,7 +1170,7 @@ ip_autobind_reuse - BOOLEAN
 	option should only be set by experts.
 	Default: 0

-ip_dynaddr - BOOLEAN
+ip_dynaddr - INTEGER
 	If set non-zero, enables support for dynamic addresses.
 	If set to a non-zero value larger than 1, a kernel log
 	message will be printed when dynamic address rewriting
@@ -2821,7 +2821,14 @@ sctp_rmem - vector of 3 INTEGERs: min, default, max
 	Default: 4K

 sctp_wmem  - vector of 3 INTEGERs: min, default, max
-	Currently this tunable has no effect.
+	Only the first value ("min") is used, "default" and "max" are
+	ignored.
+
+	min: Minimum size of send buffer that can be used by SCTP sockets.
+	It is guaranteed to each SCTP socket (but not association) even
+	under moderate memory pressure.
+
+	Default: 4K

 addr_scope_policy - INTEGER
 	Control IPv4 address scoping - draft-stewart-tsvwg-sctp-ipv4-00
--- a/Documentation/process/code-of-conduct-interpretation.rst
+++ b/Documentation/process/code-of-conduct-interpretation.rst
@@ -51,7 +51,7 @@ the Technical Advisory Board (TAB) or other maintainers if you're
 uncertain how to handle situations that come up.  It will not be
 considered a violation report unless you want it to be.  If you are
 uncertain about approaching the TAB or any other maintainers, please
-reach out to our conflict mediator, Mishi Choudhary <mishi@linux.com>.
+reach out to our conflict mediator, Joanna Lee <joanna.lee@gesmer.com>.

 In the end, "be kind to each other" is really what the end goal is for
 everybody.  We know everyone is human and we all fail at times, but the
--- a/Documentation/process/submitting-patches.rst
+++ b/Documentation/process/submitting-patches.rst
@@ -72,7 +72,7 @@ as you intend it to.

 The maintainer will thank you if you write your patch description in a
 form which can be easily pulled into Linux's source code management
-system, ``git``, as a "commit log".  See :ref:`explicit_in_reply_to`.
+system, ``git``, as a "commit log".  See :ref:`the_canonical_patch_format`.

 Solve only one problem per patch.  If your description starts to get
 long, that's a sign that you probably need to split up your patch.
--- a/Documentation/sound/alsa-configuration.rst
+++ b/Documentation/sound/alsa-configuration.rst
@@ -2246,7 +2246,7 @@ implicit_fb
    Apply the generic implicit feedback sync mode.  When this is set
    and the playback stream sync mode is ASYNC, the driver tries to
    tie an adjacent ASYNC capture stream as the implicit feedback
-    source.
+    source.  This is equivalent with quirk_flags bit 17.
 use_vmalloc
    Use vmalloc() for allocations of the PCM buffers (default: yes).
    For architectures with non-coherent memory like ARM or MIPS, the
@@ -2288,6 +2288,8 @@ quirk_flags
        * bit 14: Ignore errors for mixer access
        * bit 15: Support generic DSD raw U32_BE format
        * bit 16: Set up the interface at first like UAC1
+        * bit 17: Apply the generic implicit feedback sync mode
+        * bit 18: Don't apply implicit feedback sync mode

 This module supports multiple devices, autoprobe and hotplugging.

--- a/Documentation/tty/device_drivers/oxsemi-tornado.rst
+++ b/Documentation/tty/device_drivers/oxsemi-tornado.rst
@@ -0,0 +1,129 @@
+.. SPDX-License-Identifier: GPL-2.0
+
+====================================================================
+Notes on Oxford Semiconductor PCIe (Tornado) 950 serial port devices
+====================================================================
+
+Oxford Semiconductor PCIe (Tornado) 950 serial port devices are driven
+by a fixed 62.5MHz clock input derived from the 100MHz PCI Express clock.
+
+The baud rate produced by the baud generator is obtained from this input
+frequency by dividing it by the clock prescaler, which can be set to any
+value from 1 to 63.875 in increments of 0.125, and then the usual 16-bit
+divisor is used as with the original 8250, to divide the frequency by a
+value from 1 to 65535.  Finally a programmable oversampling rate is used
+that can take any value from 4 to 16 to divide the frequency further and
+determine the actual baud rate used.  Baud rates from 15625000bps down
+to 0.933bps can be obtained this way.
+
+By default the oversampling rate is set to 16 and the clock prescaler is
+set to 33.875, meaning that the frequency to be used as the reference
+for the usual 16-bit divisor is 115313.653, which is close enough to the
+frequency of 115200 used by the original 8250 for the same values to be
+used for the divisor to obtain the requested baud rates by software that
+is unaware of the extra clock controls available.
+
+The oversampling rate is programmed with the TCR register and the clock
+prescaler is programmed with the CPR/CPR2 register pair[1][2][3][4].
+To switch away from the default value of 33.875 for the prescaler the
+the enhanced mode has to be explicitly enabled though, by setting bit 4
+of the EFR.  In that mode setting bit 7 in the MCR enables the prescaler
+or otherwise it is bypassed as if the value of 1 was used.  Additionally
+writing any value to CPR clears CPR2 for compatibility with old software
+written for older conventional PCI Oxford Semiconductor devices that do
+not have the extra prescaler's 9th bit in CPR2, so the CPR/CPR2 register
+pair has to be programmed in the right order.
+
+By using these parameters rates from 15625000bps down to 1bps can be
+obtained, with either exact or highly-accurate actual bit rates for
+standard and many non-standard rates.
+
+Here are the figures for the standard and some non-standard baud rates
+(including those quoted in Oxford Semiconductor documentation), giving
+the requested rate (r), the actual rate yielded (a) and its deviation
+from the requested rate (d), and the values of the oversampling rate
+(tcr), the clock prescaler (cpr) and the divisor (div) produced by the
+new `get_divisor' handler:
+
+r: 15625000, a: 15625000.00, d:  0.0000%, tcr:  4, cpr:  1.000, div:     1
+r: 12500000, a: 12500000.00, d:  0.0000%, tcr:  5, cpr:  1.000, div:     1
+r: 10416666, a: 10416666.67, d:  0.0000%, tcr:  6, cpr:  1.000, div:     1
+r:  8928571, a:  8928571.43, d:  0.0000%, tcr:  7, cpr:  1.000, div:     1
+r:  7812500, a:  7812500.00, d:  0.0000%, tcr:  8, cpr:  1.000, div:     1
+r:  4000000, a:  4000000.00, d:  0.0000%, tcr:  5, cpr:  3.125, div:     1
+r:  3686400, a:  3676470.59, d: -0.2694%, tcr:  8, cpr:  2.125, div:     1
+r:  3500000, a:  3496503.50, d: -0.0999%, tcr: 13, cpr:  1.375, div:     1
+r:  3000000, a:  2976190.48, d: -0.7937%, tcr: 14, cpr:  1.500, div:     1
+r:  2500000, a:  2500000.00, d:  0.0000%, tcr: 10, cpr:  2.500, div:     1
+r:  2000000, a:  2000000.00, d:  0.0000%, tcr: 10, cpr:  3.125, div:     1
+r:  1843200, a:  1838235.29, d: -0.2694%, tcr: 16, cpr:  2.125, div:     1
+r:  1500000, a:  1492537.31, d: -0.4975%, tcr:  5, cpr:  8.375, div:     1
+r:  1152000, a:  1152073.73, d:  0.0064%, tcr: 14, cpr:  3.875, div:     1
+r:   921600, a:   919117.65, d: -0.2694%, tcr: 16, cpr:  2.125, div:     2
+r:   576000, a:   576036.87, d:  0.0064%, tcr: 14, cpr:  3.875, div:     2
+r:   460800, a:   460829.49, d:  0.0064%, tcr:  7, cpr:  3.875, div:     5
+r:   230400, a:   230414.75, d:  0.0064%, tcr: 14, cpr:  3.875, div:     5
+r:   115200, a:   115207.37, d:  0.0064%, tcr: 14, cpr:  1.250, div:    31
+r:    57600, a:    57603.69, d:  0.0064%, tcr:  8, cpr:  3.875, div:    35
+r:    38400, a:    38402.46, d:  0.0064%, tcr: 14, cpr:  3.875, div:    30
+r:    19200, a:    19201.23, d:  0.0064%, tcr:  8, cpr:  3.875, div:   105
+r:     9600, a:     9600.06, d:  0.0006%, tcr:  9, cpr:  1.125, div:   643
+r:     4800, a:     4799.98, d: -0.0004%, tcr:  7, cpr:  2.875, div:   647
+r:     2400, a:     2400.02, d:  0.0008%, tcr:  9, cpr:  2.250, div:  1286
+r:     1200, a:     1200.00, d:  0.0000%, tcr: 14, cpr:  2.875, div:  1294
+r:      300, a:      300.00, d:  0.0000%, tcr: 11, cpr:  2.625, div:  7215
+r:      200, a:      200.00, d:  0.0000%, tcr: 16, cpr:  1.250, div: 15625
+r:      150, a:      150.00, d:  0.0000%, tcr: 13, cpr:  2.250, div: 14245
+r:      134, a:      134.00, d:  0.0000%, tcr: 11, cpr:  2.625, div: 16153
+r:      110, a:      110.00, d:  0.0000%, tcr: 12, cpr:  1.000, div: 47348
+r:       75, a:       75.00, d:  0.0000%, tcr:  4, cpr:  5.875, div: 35461
+r:       50, a:       50.00, d:  0.0000%, tcr: 16, cpr:  1.250, div: 62500
+r:       25, a:       25.00, d:  0.0000%, tcr: 16, cpr:  2.500, div: 62500
+r:        4, a:        4.00, d:  0.0000%, tcr: 16, cpr: 20.000, div: 48828
+r:        2, a:        2.00, d:  0.0000%, tcr: 16, cpr: 40.000, div: 48828
+r:        1, a:        1.00, d:  0.0000%, tcr: 16, cpr: 63.875, div: 61154
+
+With the baud base set to 15625000 and the unsigned 16-bit UART_DIV_MAX
+limitation imposed by `serial8250_get_baud_rate' standard baud rates
+below 300bps become unavailable in the regular way, e.g. the rate of
+200bps requires the baud base to be divided by 78125 and that is beyond
+the unsigned 16-bit range.  The historic spd_cust feature can still be
+used by encoding the values for, the prescaler, the oversampling rate
+and the clock divisor (DLM/DLL) as follows to obtain such rates if so
+required:
+
+ 31 29 28             20 19   16 15                            0
+-----+-----------------+-------+-------------------------------+
+|0 0 0|    CPR2:CPR     |  TCR  |            DLM:DLL            |
+-----+-----------------+-------+-------------------------------+
+
+Use a value such encoded for the `custom_divisor' field along with the
+ASYNC_SPD_CUST flag set in the `flags' field in `struct serial_struct'
+passed with the TIOCSSERIAL ioctl(2), such as with the setserial(8)
+utility and its `divisor' and `spd_cust' parameters, and the select
+the baud rate of 38400bps.  Note that the value of 0 in TCR sets the
+oversampling rate to 16 and prescaler values below 1 in CPR2/CPR are
+clamped by the driver to 1.
+
+For example the value of 0x1f4004e2 will set CPR2/CPR, TCR and DLM/DLL
+respectively to 0x1f4, 0x0 and 0x04e2, choosing the prescaler value,
+the oversampling rate and the clock divisor of 62.500, 16 and 1250
+respectively.  These parameters will set the baud rate for the serial
+port to 62500000 / 62.500 / 1250 / 16 = 50bps.
+
+References:
+
+[1] "OXPCIe200 PCI Express Multi-Port Bridge", Oxford Semiconductor,
+    Inc., DS-0045, 10 Nov 2008, Section "950 Mode", pp. 64-65
+
+[2] "OXPCIe952 PCI Express Bridge to Dual Serial & Parallel Port",
+    Oxford Semiconductor, Inc., DS-0046, Mar 06 08, Section "950 Mode",
+    p. 20
+
+[3] "OXPCIe954 PCI Express Bridge to Quad Serial Port", Oxford
+    Semiconductor, Inc., DS-0047, Feb 08, Section "950 Mode", p. 20
+
+[4] "OXPCIe958 PCI Express Bridge to Octal Serial Port", Oxford
+    Semiconductor, Inc., DS-0048, Feb 08, Section "950 Mode", p. 20
+
+Maciej W. Rozycki  <macro@orcam.me.uk>
--- a/Documentation/userspace-api/landlock.rst
+++ b/Documentation/userspace-api/landlock.rst
@@ -267,8 +267,8 @@ restrict such paths with dedicated ruleset flags.
 Ruleset layers
 --------------

-There is a limit of 64 layers of stacked rulesets.  This can be an issue for a
-task willing to enforce a new ruleset in complement to its 64 inherited
+There is a limit of 16 layers of stacked rulesets.  This can be an issue for a
+task willing to enforce a new ruleset in complement to its 16 inherited
 rulesets.  Once this limit is reached, sys_landlock_restrict_self() returns
 E2BIG.  It is then strongly suggested to carefully build rulesets once in the
 life of a thread, especially for applications able to launch other applications
--- a/Documentation/userspace-api/media/v4l/ext-ctrls-codec.rst
+++ b/Documentation/userspace-api/media/v4l/ext-ctrls-codec.rst
@@ -3326,15 +3326,15 @@ enum v4l2_mpeg_video_hevc_size_of_length_field -
    * - __u8
      - ``poc_st_curr_before[V4L2_HEVC_DPB_ENTRIES_NUM_MAX]``
      - PocStCurrBefore as described in section 8.3.2 "Decoding process for reference
-        picture set.
+        picture set": provides the index of the short term before references in DPB array.
    * - __u8
      - ``poc_st_curr_after[V4L2_HEVC_DPB_ENTRIES_NUM_MAX]``
      - PocStCurrAfter as described in section 8.3.2 "Decoding process for reference
-        picture set.
+        picture set": provides the index of the short term after references in DPB array.
    * - __u8
      - ``poc_lt_curr[V4L2_HEVC_DPB_ENTRIES_NUM_MAX]``
      - PocLtCurr as described in section 8.3.2 "Decoding process for reference
-        picture set.
+        picture set": provides the index of the long term references in DPB array.
    * - __u64
      - ``flags``
      - See :ref:`Decode Parameters Flags <hevc_decode_params_flags>`
--- a/Documentation/vm/multigen_lru.rst
+++ b/Documentation/vm/multigen_lru.rst
@@ -22,15 +22,15 @@ The design objectives are:
 The representation of access recency is at the core of all LRU
 implementations. In the multi-gen LRU, each generation represents a
 group of pages with similar access recency. Generations establish a
-common frame of reference and therefore help make better choices,
-e.g., between different memcgs on a computer or different computers in
-a data center (for job scheduling).
+(time-based) common frame of reference and therefore help make better
+choices, e.g., between different memcgs on a computer or different
+computers in a data center (for job scheduling).

 Exploiting spatial locality improves efficiency when gathering the
 accessed bit. A rmap walk targets a single page and does not try to
 profit from discovering a young PTE. A page table walk can sweep all
 the young PTEs in an address space, but the address space can be too
-large to make a profit. The key is to optimize both methods and use
+sparse to make a profit. The key is to optimize both methods and use
 them in combination.

 Fast paths reduce code complexity and runtime overhead. Unmapped pages
@@ -38,7 +38,7 @@ do not require TLB flushes; clean pages do not require writeback.
 These facts are only helpful when other conditions, e.g., access
 recency, are similar. With generations as a common frame of reference,
 additional factors stand out. But obvious choices might not be good
-choices; thus self-correction is required.
+choices; thus self-correction is necessary.

 The benefits of simple self-correcting heuristics are self-evident.
 Again, with generations as a common frame of reference, this becomes
@@ -64,7 +64,7 @@ The protection of the former channel is by design stronger because:
 3. The penalty of underprotecting the former channel is higher because
   applications usually do not prepare themselves for major page
   faults like they do for blocked I/O. E.g., GUI applications
-   commonly use dedicated I/O threads to avoid blocking the rendering
+   commonly use dedicated I/O threads to avoid blocking rendering
   threads.

 There are also two access patterns:
@@ -88,19 +88,19 @@ pages can be evicted regardless of swap constraints. These three
 variables are monotonically increasing.

 Generation numbers are truncated into ``order_base_2(MAX_NR_GENS+1)``
-bits in order to fit into the gen counter in ``page->flags``. Each
+bits in order to fit into the gen counter in ``folio->flags``. Each
 truncated generation number is an index to ``lrugen->lists[]``. The
 sliding window technique is used to track at least ``MIN_NR_GENS`` and
 at most ``MAX_NR_GENS`` generations. The gen counter stores a value
 within ``[1, MAX_NR_GENS]`` while a page is on one of
 ``lrugen->lists[]``; otherwise it stores zero.

-Each generation is divided into multiple tiers. Tiers represent
-different ranges of numbers of accesses through file descriptors. A
-page accessed ``N`` times through file descriptors is in tier
-``order_base_2(N)``. In contrast to moving across generations, which
-requires the LRU lock, moving across tiers only requires operations on
-``page->flags`` and therefore has a negligible cost. A feedback loop
+Each generation is divided into multiple tiers. A page accessed ``N``
+times through file descriptors is in tier ``order_base_2(N)``. Unlike
+generations, tiers do not have dedicated ``lrugen->lists[]``. In
+contrast to moving across generations, which requires the LRU lock,
+moving across tiers only involves atomic operations on
+``folio->flags`` and therefore has a negligible cost. A feedback loop
 modeled after the PID controller monitors refaults over all the tiers
 from anon and file types and decides which tiers from which types to
 evict or protect.
@@ -118,12 +118,11 @@ demotion of cold pages happens consequently when it increments
 ``max_seq``. The aging uses page table walks and rmap walks to find
 young PTEs. For the former, it iterates ``lruvec_memcg()->mm_list``
 and calls ``walk_page_range()`` with each ``mm_struct`` on this list
-to scan PTEs. On finding a young PTE, it clears the accessed bit and
-updates the gen counter of the page mapped by this PTE to
-``(max_seq%MAX_NR_GENS)+1``. After each iteration of this list, it
-increments ``max_seq``. For the latter, when the eviction walks the
-rmap and finds a young PTE, the aging scans the adjacent PTEs and
-follows the same steps just described.
+to scan PTEs, and after each iteration, it increments ``max_seq``. For
+the latter, when the eviction walks the rmap and finds a young PTE,
+the aging scans the adjacent PTEs. For both, on finding a young PTE,
+the aging clears the accessed bit and updates the gen counter of the
+page mapped by this PTE to ``(max_seq%MAX_NR_GENS)+1``.

 Eviction
 --------
@@ -134,12 +133,12 @@ evict from, it first compares ``min_seq[]`` to select the older type.
 If both types are equally old, it selects the one whose first tier has
 a lower refault percentage. The first tier contains single-use
 unmapped clean pages, which are the best bet. The eviction sorts a
-page according to the gen counter if the aging has found this page
-accessed through page tables and updated the gen counter. It also
+page according to its gen counter if the aging has found this page
+accessed through page tables and updated its gen counter. It also
 moves a page to the next generation, i.e., ``min_seq+1``, if this page
 was accessed multiple times through file descriptors and the feedback
 loop has detected outlying refaults from the tier this page is in. To
-do this, the feedback loop uses the first tier as the baseline, for
+this end, the feedback loop uses the first tier as the baseline, for
 the reason stated earlier.

 Summary
@@ -147,14 +146,14 @@ Summary
 The multi-gen LRU can be disassembled into the following parts:

 * Generations
-* Page table walks
 * Rmap walks
+* Page table walks
 * Bloom filters
-* The PID controller
+* PID controller

-The aging and the eviction is a producer-consumer model; specifically,
-the latter drives the former by the sliding window over generations.
-Within the aging, rmap walks drive page table walks by inserting hot
-densely populated page tables to the Bloom filters. Within the
-eviction, the PID controller uses refaults as the feedback to select
-types to evict and tiers to protect.
+The aging and the eviction form a producer-consumer model;
+specifically, the latter drives the former by the sliding window over
+generations. Within the aging, rmap walks drive page table walks by
+inserting hot densely populated page tables to the Bloom filters.
+Within the eviction, the PID controller uses refaults as the feedback
+to select types to evict and tiers to protect.
--- a/17
+++ b/17
@@ -434,6 +434,7 @@ ACPI VIOT DRIVER
 M:	Jean-Philippe Brucker <jean-philippe@linaro.org>
 L:	linux-acpi@vger.kernel.org
 L:	iommu@lists.linux-foundation.org
+L:	iommu@lists.linux.dev
 S:	Maintained
 F:	drivers/acpi/viot.c
 F:	include/linux/acpi_viot.h
@@ -941,6 +942,7 @@ AMD IOMMU (AMD-VI)
 M:	Joerg Roedel <joro@8bytes.org>
 R:	Suravee Suthikulpanit <suravee.suthikulpanit@amd.com>
 L:	iommu@lists.linux-foundation.org
+L:	iommu@lists.linux.dev
 S:	Maintained
 T:	git git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu.git
 F:	drivers/iommu/amd/
@@ -5602,6 +5604,7 @@ M:	Christoph Hellwig <hch@lst.de>
 M:	Marek Szyprowski <m.szyprowski@samsung.com>
 R:	Robin Murphy <robin.murphy@arm.com>
 L:	iommu@lists.linux-foundation.org
+L:	iommu@lists.linux.dev
 S:	Supported
 W:	http://git.infradead.org/users/hch/dma-mapping.git
 T:	git git://git.infradead.org/users/hch/dma-mapping.git
@@ -5614,6 +5617,7 @@ F:	kernel/dma/
 DMA MAPPING BENCHMARK
 M:	Barry Song <song.bao.hua@hisilicon.com>
 L:	iommu@lists.linux-foundation.org
+L:	iommu@lists.linux.dev
 F:	kernel/dma/map_benchmark.c
 F:	tools/testing/selftests/dma/

@@ -7115,6 +7119,7 @@ F:	drivers/gpu/drm/exynos/exynos_dp*
 EXYNOS SYSMMU (IOMMU) driver
 M:	Marek Szyprowski <m.szyprowski@samsung.com>
 L:	iommu@lists.linux-foundation.org
+L:	iommu@lists.linux.dev
 S:	Maintained
 F:	drivers/iommu/exynos-iommu.c

@@ -7947,9 +7952,10 @@ F:	drivers/media/usb/go7007/

 GOODIX TOUCHSCREEN
 M:	Bastien Nocera <hadess@hadess.net>
+M:	Hans de Goede <hdegoede@redhat.com>
 L:	linux-input@vger.kernel.org
 S:	Maintained
-F:	drivers/input/touchscreen/goodix.c
+F:	drivers/input/touchscreen/goodix*

 GOOGLE ETHERNET DRIVERS
 M:	Jeroen de Borst <jeroendb@google.com>
@@ -9464,6 +9470,7 @@ INTEL IOMMU (VT-d)
 M:	David Woodhouse <dwmw2@infradead.org>
 M:	Lu Baolu <baolu.lu@linux.intel.com>
 L:	iommu@lists.linux-foundation.org
+L:	iommu@lists.linux.dev
 S:	Supported
 T:	git git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu.git
 F:	drivers/iommu/intel/
@@ -9800,6 +9807,7 @@ IOMMU DRIVERS
 M:	Joerg Roedel <joro@8bytes.org>
 M:	Will Deacon <will@kernel.org>
 L:	iommu@lists.linux-foundation.org
+L:	iommu@lists.linux.dev
 S:	Maintained
 T:	git git://git.kernel.org/pub/scm/linux/kernel/git/joro/iommu.git
 F:	Documentation/devicetree/bindings/iommu/
@@ -11802,6 +11810,7 @@ F:	drivers/i2c/busses/i2c-mt65xx.c
 MEDIATEK IOMMU DRIVER
 M:	Yong Wu <yong.wu@mediatek.com>
 L:	iommu@lists.linux-foundation.org
+L:	iommu@lists.linux.dev
 L:	linux-mediatek@lists.infradead.org (moderated for non-subscribers)
 S:	Supported
 F:	Documentation/devicetree/bindings/iommu/mediatek*
@@ -15567,6 +15576,7 @@ F:	drivers/i2c/busses/i2c-qcom-cci.c
 QUALCOMM IOMMU
 M:	Rob Clark <robdclark@gmail.com>
 L:	iommu@lists.linux-foundation.org
+L:	iommu@lists.linux.dev
 L:	linux-arm-msm@vger.kernel.org
 S:	Maintained
 F:	drivers/iommu/arm/arm-smmu/qcom_iommu.c
@@ -15733,6 +15743,8 @@ F:	arch/mips/generic/board-ranchu.c

 RANDOM NUMBER DRIVER
 M:	"Theodore Ts'o" <tytso@mit.edu>
+M:	Jason A. Donenfeld <Jason@zx2c4.com>
+T:	git https://git.kernel.org/pub/scm/linux/kernel/git/crng/random.git
 S:	Maintained
 F:	drivers/char/random.c

@@ -17993,6 +18005,7 @@ F:	arch/x86/boot/video*
 SWIOTLB SUBSYSTEM
 M:	Christoph Hellwig <hch@infradead.org>
 L:	iommu@lists.linux-foundation.org
+L:	iommu@lists.linux.dev
 S:	Supported
 W:	http://git.infradead.org/users/hch/dma-mapping.git
 T:	git git://git.infradead.org/users/hch/dma-mapping.git
@@ -20573,12 +20586,14 @@ M:	Juergen Gross <jgross@suse.com>
 M:	Stefano Stabellini <sstabellini@kernel.org>
 L:	xen-devel@lists.xenproject.org (moderated for non-subscribers)
 L:	iommu@lists.linux-foundation.org
+L:	iommu@lists.linux.dev
 S:	Supported
 F:	arch/x86/xen/*swiotlb*
 F:	drivers/xen/*swiotlb*

 XFS FILESYSTEM
 C:	irc://irc.oftc.net/xfs
+M:	Leah Rumancik <leah.rumancik@gmail.com>
 M:	Darrick J. Wong <djwong@kernel.org>
 M:	linux-xfs@vger.kernel.org
 L:	linux-xfs@vger.kernel.org
--- a/44
+++ b/44
@@ -1,7 +1,7 @@
 # SPDX-License-Identifier: GPL-2.0
 VERSION = 5
 PATCHLEVEL = 15
-SUBLEVEL = 41
+SUBLEVEL = 74
 EXTRAVERSION =
 NAME = Trick or Treat

@@ -503,6 +503,8 @@ LZ4		= lz4
 XZ		= xz
 ZSTD		= zstd

+PAHOLE_FLAGS	= $(shell PAHOLE=$(PAHOLE) $(srctree)/scripts/pahole-flags.sh)
+
 CHECKFLAGS     := -D__linux__ -Dlinux -D__STDC__ -Dunix -D__unix__ \
 		  -Wbitwise -Wno-return-void -Wno-unknown-attribute $(CF)
 NOSTDINC_FLAGS :=
@@ -559,6 +561,7 @@ export KBUILD_CFLAGS CFLAGS_KERNEL CFLAGS_MODULE
 export KBUILD_AFLAGS AFLAGS_KERNEL AFLAGS_MODULE
 export KBUILD_AFLAGS_MODULE KBUILD_CFLAGS_MODULE KBUILD_LDFLAGS_MODULE
 export KBUILD_AFLAGS_KERNEL KBUILD_CFLAGS_KERNEL
+export PAHOLE_FLAGS

 # Files to ignore in find ... statements

@@ -714,12 +717,19 @@ endif

 ifdef CONFIG_CC_IS_GCC
 RETPOLINE_CFLAGS	:= $(call cc-option,-mindirect-branch=thunk-extern -mindirect-branch-register)
+RETPOLINE_CFLAGS	+= $(call cc-option,-mindirect-branch-cs-prefix)
 RETPOLINE_VDSO_CFLAGS	:= $(call cc-option,-mindirect-branch=thunk-inline -mindirect-branch-register)
 endif
 ifdef CONFIG_CC_IS_CLANG
 RETPOLINE_CFLAGS	:= -mretpoline-external-thunk
 RETPOLINE_VDSO_CFLAGS	:= -mretpoline
 endif
+
+ifdef CONFIG_RETHUNK
+RETHUNK_CFLAGS         := -mfunction-return=thunk-extern
+RETPOLINE_CFLAGS       += $(RETHUNK_CFLAGS)
+endif
+
 export RETPOLINE_CFLAGS
 export RETPOLINE_VDSO_CFLAGS

@@ -838,6 +848,9 @@ endif
 KBUILD_CFLAGS += $(call cc-disable-warning, unused-but-set-variable)
 KBUILD_CFLAGS += $(call cc-disable-warning, unused-const-variable)

+# These result in bogus false positives
+KBUILD_CFLAGS += $(call cc-disable-warning, dangling-pointer)
+
 ifdef CONFIG_FRAME_POINTER
 KBUILD_CFLAGS	+= -fno-omit-frame-pointer -fno-optimize-sibling-calls
 else
@@ -1041,6 +1054,21 @@ ifdef CONFIG_CC_IS_GCC
 KBUILD_CFLAGS += -Wno-maybe-uninitialized
 endif

+ifdef CONFIG_CC_IS_GCC
+# The allocators already balk at large sizes, so silence the compiler
+# warnings for bounds checks involving those possible values. While
+# -Wno-alloc-size-larger-than would normally be used here, earlier versions
+# of gcc (<9.1) weirdly don't handle the option correctly when _other_
+# warnings are produced (?!). Using -Walloc-size-larger-than=SIZE_MAX
+# doesn't work (as it is documented to), silently resolving to "0" prior to
+# version 9.1 (and producing an error more recently). Numeric values larger
+# than PTRDIFF_MAX also don't work prior to version 9.1, which are silently
+# ignored, continuing to default to PTRDIFF_MAX. So, left with no other
+# choice, we must perform a versioned check to disable this warning.
+# https://lore.kernel.org/lkml/20210824115859.187f272f@canb.auug.org.au
+KBUILD_CFLAGS += $(call cc-ifversion, -ge, 0901, -Wno-alloc-size-larger-than)
+endif
+
 # disable invalid "can't wrap" optimizations for signed / pointers
 KBUILD_CFLAGS	+= -fno-strict-overflow

@@ -1086,6 +1114,11 @@ KBUILD_CFLAGS   += $(KCFLAGS)
 KBUILD_LDFLAGS_MODULE += --build-id=sha1
 LDFLAGS_vmlinux += --build-id=sha1

+KBUILD_LDFLAGS	+= -z noexecstack
+ifeq ($(CONFIG_LD_IS_BFD),y)
+KBUILD_LDFLAGS	+= $(call ld-option,--no-warn-rwx-segments)
+endif
+
 ifeq ($(CONFIG_STRIP_ASM_SYMS),y)
 LDFLAGS_vmlinux	+= $(call ld-option, -X,)
 endif
@@ -1176,8 +1209,7 @@ headers_install: headers

 headers:
 ifeq ($(KBUILD_EXTMOD),)
-	$(if $(wildcard $(srctree)/arch/$(SRCARCH)/include/uapi/asm/Kbuild),, \
-	  $(error Headers not exportable for the $(SRCARCH) architecture))
+	$(if $(filter um, $(SRCARCH)), $(error Headers not exportable for UML))
 endif
 	$(Q)$(MAKE) $(hdr-inst)=$(hdr-prefix)include/uapi
 	$(Q)$(MAKE) $(hdr-inst)=$(hdr-prefix)arch/$(SRCARCH)/include/uapi
@@ -1250,13 +1282,11 @@ vmlinux-alldirs	:= $(sort $(vmlinux-dirs) Documentation \
 		     $(patsubst %/,%,$(filter %/, $(core-) \
 			$(drivers-) $(libs-))))

-subdir-modorder := $(addsuffix modules.order,$(filter %/, \
-			$(core-y) $(core-m) $(libs-y) $(libs-m) \
-			$(drivers-y) $(drivers-m)))
-
 build-dirs	:= $(vmlinux-dirs)
 clean-dirs	:= $(vmlinux-alldirs)

+subdir-modorder := $(addsuffix /modules.order, $(build-dirs))
+
 # Externally visible symbols (used by link-vmlinux.sh)
 KBUILD_VMLINUX_OBJS := $(head-y) $(patsubst %/,%/built-in.a, $(core-y))
 KBUILD_VMLINUX_OBJS += $(addsuffix built-in.a, $(filter %/, $(libs-y)))
--- a/android/ACK_SHA
+++ b/android/ACK_SHA
@@ -1,2 +1,2 @@
-9846d1db27906a30c6b3546c58bbdf2fec68a7ac
-android13-5.15-2022-11_r3
+9a744ad1ae8bd4ee3c7ef2e1ba1b1d3f99bd1108
+android13-5.15-2022-12_r2
--- a/android/abi_gki_aarch64
+++ b/android/abi_gki_aarch64
@@ -82,7 +82,6 @@
  strcpy
  strlcpy
  strlen
-  __sysfs_match_string
  sysfs_streq
  unregister_blkdev
  up_read
@@ -124,7 +123,6 @@
  kstrdup
  __list_add_valid
  __list_del_entry_valid
-  __lock_page
  memstart_addr
  page_mapping
  prepare_to_wait_event
@@ -142,4 +140,5 @@
  system_wq
  unlock_page
  unregister_shrinker
+  wait_on_page_bit
  __wake_up
--- a/android/abi_gki_aarch64.xml
+++ b/android/abi_gki_aarch64.xml
--- a/android/abi_gki_aarch64_amlogic
+++ b/android/abi_gki_aarch64_amlogic
@@ -689,6 +689,7 @@
  flush_delayed_work
  flush_work
  flush_workqueue
+  flush_signals
  fpsimd_context_busy
  fput
  free_irq
@@ -1120,6 +1121,7 @@
  net_ratelimit
  new_inode
  next_arg
+  nla_append
  nla_find
  nla_memcpy
  __nla_parse
@@ -1345,6 +1347,7 @@
  proc_create
  proc_create_data
  proc_dointvec
+  proc_get_parent_data
  proc_mkdir
  proc_mkdir_data
  proc_remove
@@ -1515,6 +1518,10 @@
  sdio_register_driver
  sdio_release_host
  sdio_release_irq
+  sdio_retune_crc_disable
+  sdio_retune_crc_enable
+  sdio_retune_hold_now
+  sdio_retune_release
  sdio_set_block_size
  sdio_set_host_pm_flags
  sdio_unregister_driver
@@ -1761,10 +1768,12 @@
  trace_event_raw_init
  trace_event_reg
  trace_handle_return
+  __traceiter_android_rvh_panic_unhandled
  __traceiter_android_vh_cpu_idle_enter
  __traceiter_android_vh_cpu_idle_exit
  __traceiter_android_vh_do_traversal_lruvec
  __traceiter_android_vh_dump_throttled_rt_tasks
+  __traceiter_android_vh_ftrace_format_check
  __traceiter_android_vh_mmc_sd_update_cmdline_timing
  __traceiter_android_vh_mmc_sd_update_dataline_timing
  __traceiter_android_vh_rmqueue
--- a/android/abi_gki_aarch64_db845c
+++ b/android/abi_gki_aarch64_db845c
@@ -2,7 +2,9 @@
 # commonly used symbols
  add_uevent_var
  alloc_io_pgtable_ops
+  __alloc_skb
  alloc_workqueue
+  android_kmalloc_64_create
  __arch_copy_from_user
  __arch_copy_to_user
  arm64_const_caps_ready
@@ -16,8 +18,11 @@
  bpf_trace_run3
  bpf_trace_run4
  bpf_trace_run5
+  bpf_trace_run6
+  bpf_trace_run8
  bus_register
  bus_unregister
+  call_rcu
  cancel_delayed_work
  cancel_delayed_work_sync
  cancel_work_sync
@@ -27,6 +32,8 @@
  cdev_init
  __cfi_slowpath_diag
  __check_object_size
+  __class_register
+  class_unregister
  clk_bulk_disable
  clk_bulk_enable
  clk_bulk_prepare
@@ -53,11 +60,20 @@
  __const_udelay
  consume_skb
  _copy_from_iter
+  __cpuhp_remove_state
+  __cpuhp_setup_state
  cpu_hwcap_keys
  cpu_hwcaps
  cpumask_next
  cpu_number
  __cpu_online_mask
+  __cpu_possible_mask
+  crc32_le
+  crypto_alloc_shash
+  crypto_destroy_tfm
+  crypto_shash_setkey
+  crypto_shash_update
+  _ctype
  debugfs_create_dir
  debugfs_create_file
  debugfs_create_u32
@@ -65,13 +81,17 @@
  debugfs_remove
  default_llseek
  delayed_work_timer_fn
+  del_timer
  del_timer_sync
  destroy_workqueue
+  dev_close
  dev_coredumpv
  dev_driver_string
  _dev_err
  dev_err_probe
  dev_get_regmap
+  device_add
+  device_del
  device_find_child
  device_for_each_child
  device_get_match_data
@@ -180,6 +200,7 @@
  dma_sync_single_for_device
  dma_unmap_page_attrs
  dma_unmap_sg_attrs
+  down_read
  driver_register
  driver_unregister
  drm_add_edid_modes
@@ -201,16 +222,22 @@
  drm_kms_helper_hotplug_event
  drm_mode_vrefresh
  enable_irq
+  eth_type_trans
  event_triggers_call
  _find_first_bit
  _find_first_zero_bit
  _find_next_bit
  finish_wait
  firmware_request_nowarn
+  flush_delayed_work
  flush_work
  flush_workqueue
  free_io_pgtable_ops
  free_irq
+  __free_pages
+  free_pages
+  free_percpu
+  gcd
  generic_handle_domain_irq
  generic_handle_irq
  geni_icc_disable
@@ -278,6 +305,7 @@
  init_net
  __init_swait_queue_head
  init_timer_key
+  init_uts_ns
  init_wait_entry
  __init_waitqueue_head
  iomem_resource
@@ -328,24 +356,38 @@
  kernel_sendmsg
  kfree
  kfree_const
+  kfree_sensitive
  kfree_skb
  __kmalloc
  kmalloc_caches
  kmalloc_order_trace
+  kmem_cache_alloc
  kmem_cache_alloc_trace
+  kmem_cache_create
+  kmem_cache_destroy
+  kmem_cache_free
  kmemdup
  kstrdup
  kstrdup_const
  kstrtoint
  kstrtouint
  kthread_create_on_node
+  kthread_should_stop
+  kthread_stop
  ktime_get
  ktime_get_mono_fast_ns
  ktime_get_real_ts64
  ktime_get_with_offset
+  kvfree
+  kvfree_call_rcu
+  kvmalloc_node
  __list_add_valid
  __list_del_entry_valid
  __local_bh_enable_ip
+  log_post_read_mmio
+  log_post_write_mmio
+  log_read_mmio
+  log_write_mmio
  mbox_client_txdone
  mbox_free_channel
  mbox_request_channel
@@ -354,6 +396,7 @@
  __memcpy_fromio
  __memcpy_toio
  memmove
+  memparse
  memremap
  memset
  __memset_io
@@ -380,12 +423,16 @@
  __napi_schedule
  napi_schedule_prep
  __netdev_alloc_skb
+  netdev_err
+  netdev_info
  netif_napi_add
  __netif_napi_del
+  netif_tx_wake_queue
  __nla_parse
  nla_put
  no_llseek
  nr_cpu_ids
+  __num_online_cpus
  nvmem_cell_get
  nvmem_cell_put
  nvmem_cell_read
@@ -433,8 +480,11 @@
  of_property_read_u32_index
  of_property_read_variable_u32_array
  of_property_read_variable_u8_array
+  of_prop_next_u32
  of_reserved_mem_lookup
  param_ops_bool
+  param_ops_charp
+  param_ops_int
  param_ops_uint
  pci_clear_master
  pci_disable_device
@@ -449,6 +499,7 @@
  pci_request_region
  pci_set_master
  pci_unregister_driver
+  __per_cpu_offset
  perf_trace_buf_alloc
  perf_trace_run_bpf_submit
  phy_exit
@@ -499,6 +550,8 @@
  radix_tree_next_chunk
  ___ratelimit
  rational_best_approximation
+  _raw_read_lock
+  _raw_read_unlock
  _raw_spin_lock
  _raw_spin_lock_bh
  _raw_spin_lock_irq
@@ -507,8 +560,13 @@
  _raw_spin_unlock_bh
  _raw_spin_unlock_irq
  _raw_spin_unlock_irqrestore
+  _raw_write_lock
  _raw_write_lock_bh
+  _raw_write_unlock
  _raw_write_unlock_bh
+  rb_erase
+  rb_insert_color
+  rcu_barrier
  __rcu_read_lock
  __rcu_read_unlock
  rdev_get_drvdata
@@ -516,8 +574,10 @@
  regcache_cache_only
  regcache_mark_dirty
  regcache_sync
+  register_netdevice_notifier
  register_reboot_notifier
  __register_rpmsg_driver
+  register_shrinker
  regmap_bulk_read
  regmap_bulk_write
  regmap_field_read
@@ -549,7 +609,9 @@
  request_threaded_irq
  reset_control_assert
  reset_control_deassert
+  reset_control_put
  reset_control_reset
+  round_jiffies_up
  rpmsg_register_device
  rpmsg_send
  rpmsg_unregister_device
@@ -561,6 +623,9 @@
  rproc_del
  rproc_free
  rproc_remove_subdev
+  rtnl_is_locked
+  rtnl_lock
+  rtnl_unlock
  sched_set_fifo_low
  schedule
  schedule_timeout
@@ -577,10 +642,14 @@
  simple_read_from_buffer
  single_open
  single_release
+  skb_clone
+  skb_copy
+  skb_copy_bits
  skb_dequeue
  skb_pull
  skb_push
  skb_put
+  skb_queue_head
  skb_queue_purge
  skb_queue_tail
  skb_trim
@@ -633,6 +702,7 @@
  strnlen
  strpbrk
  strscpy
+  strscpy_pad
  strsep
  __sw_hweight16
  __sw_hweight32
@@ -646,11 +716,13 @@
  sysfs_create_link
  sysfs_emit
  sysfs_remove_link
+  system_power_efficient_wq
  system_wq
  tasklet_init
  tasklet_kill
  __tasklet_schedule
  tasklet_setup
+  tasklet_unlock_wait
  thermal_cooling_device_register
  thermal_cooling_device_unregister
  thermal_zone_device_update
@@ -665,9 +737,14 @@
  __ubsan_handle_cfi_check_fail_abort
  __udelay
  unregister_chrdev_region
+  unregister_netdevice_notifier
+  unregister_netdevice_queue
  unregister_reboot_notifier
  unregister_rpmsg_driver
+  unregister_shrinker
+  up_read
  usb_disabled
+  __usecs_to_jiffies
  usleep_range_state
  vabits_actual
  vfree
@@ -707,27 +784,20 @@
  iommu_fwspec_free
  iommu_group_ref_get
  of_dma_is_coherent
-  param_ops_int
  pci_bus_type
  pci_device_group
  report_iommu_fault

-# required by ath.ko
-
 # required by ath10k_core.ko
  cpu_latency_qos_add_request
  cpu_latency_qos_remove_request
-  crc32_le
  device_get_mac_address
  device_set_wakeup_enable
  guid_gen
-  init_uts_ns
  __kfifo_alloc
  __kfifo_free
  param_ops_ulong
-  skb_copy
  skb_dequeue_tail
-  skb_queue_head
  skb_realloc_headroom
  strlcat

@@ -742,14 +812,8 @@
  iommu_map

 # required by ath11k.ko
-  crypto_alloc_shash
-  crypto_destroy_tfm
  crypto_shash_final
-  crypto_shash_setkey
-  crypto_shash_update
  memcpy_and_pad
-  rtnl_lock
-  rtnl_unlock

 # required by ath11k_ahb.ko
  rproc_boot
@@ -777,6 +841,56 @@
  vchan_tx_desc_free
  vchan_tx_submit

+# required by cfg80211.ko
+  bpf_trace_run10
+  bpf_trace_run7
+  debugfs_rename
+  __dev_change_net_namespace
+  __dev_get_by_index
+  dev_get_by_index
+  device_rename
+  do_trace_netlink_extack
+  genlmsg_multicast_allns
+  genlmsg_put
+  genl_register_family
+  genl_unregister_family
+  get_net_ns_by_fd
+  get_net_ns_by_pid
+  inet_csk_get_port
+  key_create_or_update
+  key_put
+  keyring_alloc
+  ktime_get_coarse_with_offset
+  memcmp
+  netif_rx_ni
+  netlink_broadcast
+  netlink_register_notifier
+  netlink_unicast
+  netlink_unregister_notifier
+  net_ns_type_operations
+  nla_find
+  nla_memcpy
+  nla_put_64bit
+  nla_reserve
+  __nla_validate
+  __put_net
+  register_netdevice
+  register_pernet_device
+  request_firmware_nowait
+  rfkill_alloc
+  rfkill_blocked
+  rfkill_destroy
+  rfkill_register
+  rfkill_resume_polling
+  rfkill_set_hw_state_reason
+  rfkill_unregister
+  skb_add_rx_frag
+  __sock_create
+  trace_print_array_seq
+  unregister_pernet_device
+  verify_pkcs7_signature
+  wireless_nlevent_flush
+
 # required by clk-qcom.ko
  __clk_determine_rate
  clk_fixed_factor_ops
@@ -789,7 +903,6 @@
  __clk_mux_determine_rate_closest
  divider_ro_round_rate_parent
  of_find_node_opts_by_path
-  of_prop_next_u32
  pm_genpd_remove_subdomain

 # required by clk-rpmh.ko
@@ -808,6 +921,10 @@
  mmc_cqe_request_done

 # required by display-connector.ko
+  drm_atomic_get_new_bridge_state
+  drm_atomic_helper_bridge_destroy_state
+  drm_atomic_helper_bridge_duplicate_state
+  drm_atomic_helper_bridge_reset
  drm_probe_ddc
  of_get_i2c_adapter_by_node

@@ -816,7 +933,6 @@
  devm_extcon_dev_register
  extcon_set_state_sync
  gpiod_set_debounce
-  system_power_efficient_wq

 # required by fastrpc.ko
  dma_buf_attach
@@ -827,7 +943,6 @@
  dma_buf_put
  dma_buf_unmap_attachment
  dma_get_sgtable_attrs
-  down_read
  __find_vma
  __mmap_lock_do_trace_acquire_returned
  __mmap_lock_do_trace_released
@@ -838,7 +953,6 @@
  __tracepoint_mmap_lock_acquire_returned
  __tracepoint_mmap_lock_released
  __tracepoint_mmap_lock_start_locking
-  up_read

 # required by gpio-regulator.ko
  devm_gpiod_get_index
@@ -848,20 +962,12 @@
  gpiod_get_optional

 # required by gpu-sched.ko
-  call_rcu
  dma_fence_add_callback
  dma_fence_remove_callback
-  kmem_cache_alloc
-  kmem_cache_create
-  kmem_cache_destroy
-  kmem_cache_free
  kthread_park
  kthread_parkme
  kthread_should_park
-  kthread_should_stop
-  kthread_stop
  kthread_unpark
-  rcu_barrier
  wait_for_completion

 # required by i2c-designware-core.ko
@@ -908,9 +1014,6 @@
  i2c_get_dma_safe_msg_buf
  i2c_put_dma_safe_msg_buf

-# required by i2c-qup.ko
-  __usecs_to_jiffies
-
 # required by i2c-rk3x.ko
  clk_notifier_register
  clk_notifier_unregister
@@ -948,6 +1051,77 @@
  pm_clk_resume
  pm_clk_suspend

+# required by mac80211.ko
+  alloc_netdev_mqs
+  __alloc_percpu_gfp
+  arc4_crypt
+  arc4_setkey
+  crc32_be
+  crypto_aead_decrypt
+  crypto_aead_encrypt
+  crypto_aead_setauthsize
+  crypto_aead_setkey
+  crypto_alloc_aead
+  crypto_alloc_skcipher
+  __crypto_memneq
+  crypto_shash_digest
+  crypto_shash_finup
+  crypto_skcipher_decrypt
+  crypto_skcipher_encrypt
+  crypto_skcipher_setkey
+  __crypto_xor
+  dev_alloc_name
+  dev_fetch_sw_netstats
+  _dev_printk
+  dev_queue_xmit
+  ether_setup
+  eth_mac_addr
+  ethtool_op_get_link
+  free_netdev
+  get_random_u32
+  __hw_addr_init
+  __hw_addr_sync
+  __hw_addr_unsync
+  kernel_param_lock
+  kernel_param_unlock
+  kfree_skb_list
+  ktime_get_seconds
+  napi_gro_receive
+  netdev_set_default_ethtool_ops
+  netif_carrier_off
+  netif_carrier_on
+  netif_receive_skb
+  netif_receive_skb_list
+  netif_rx
+  netif_tx_stop_all_queues
+  net_ratelimit
+  prandom_bytes
+  ___pskb_trim
+  rb_next
+  rb_prev
+  register_inet6addr_notifier
+  register_inetaddr_notifier
+  rhashtable_free_and_destroy
+  rhashtable_insert_slow
+  rhltable_init
+  __rht_bucket_nested
+  rht_bucket_nested
+  rht_bucket_nested_insert
+  round_jiffies
+  round_jiffies_relative
+  sg_init_one
+  skb_checksum_help
+  skb_clone_sk
+  skb_complete_wifi_ack
+  skb_copy_expand
+  skb_ensure_writable
+  __skb_get_hash
+  __skb_gso_segment
+  system_freezable_wq
+  unregister_inet6addr_notifier
+  unregister_inetaddr_notifier
+  unregister_netdevice_many
+
 # required by mcp251xfd.ko
  alloc_candev_mqs
  alloc_can_err_skb
@@ -971,12 +1145,9 @@
  dql_completed
  dql_reset
  free_candev
-  netdev_err
-  netdev_info
  netdev_notice
  netdev_warn
  netif_schedule_queue
-  netif_tx_wake_queue
  open_candev
  register_candev
  regmap_get_val_bytes
@@ -994,8 +1165,6 @@
  __vmalloc

 # required by mhi.ko
-  device_add
-  device_del
  pm_wakeup_dev_event
  prandom_u32
  _raw_read_lock_bh
@@ -1016,8 +1185,6 @@
 # required by msm.ko
  __bitmap_andnot
  __bitmap_weight
-  bpf_trace_run6
-  bpf_trace_run8
  clk_get_parent
  clk_set_parent
  component_add
@@ -1026,10 +1193,8 @@
  component_master_add_with_match
  component_master_del
  component_unbind_all
-  _ctype
  debugfs_create_bool
  debugfs_create_u64
-  del_timer
  dev_coredumpm
  devfreq_cooling_unregister
  devfreq_recommended_opp
@@ -1082,9 +1247,11 @@
  drm_atomic_private_obj_init
  __drm_atomic_state_free
  drm_bridge_attach
+  drm_bridge_connector_enable_hpd
+  drm_bridge_connector_init
+  drm_bridge_detect
  drm_compat_ioctl
  drm_connector_has_possible_encoder
-  drm_connector_init_with_ddc
  drm_connector_list_iter_begin
  drm_connector_list_iter_end
  drm_connector_list_iter_next
@@ -1247,10 +1414,7 @@
  kthread_create_worker
  kthread_destroy_worker
  kthread_queue_work
-  kvfree
-  kvmalloc_node
  memdup_user_nul
-  memparse
  mipi_dsi_create_packet
  mipi_dsi_host_register
  mipi_dsi_host_unregister
@@ -1271,21 +1435,14 @@
  of_graph_get_next_endpoint
  of_graph_get_remote_port_parent
  of_icc_get
-  param_ops_charp
  phy_calibrate
  phy_configure
  pid_task
  pm_runtime_get_if_active
  put_pid
  put_unused_fd
-  _raw_read_lock
-  _raw_read_unlock
-  _raw_write_lock
-  _raw_write_unlock
-  register_shrinker
  register_vmap_purge_notifier
  reservation_ww_class
-  round_jiffies_up
  sched_set_fifo
  schedule_timeout_interruptible
  __sg_page_iter_dma_next
@@ -1299,7 +1456,6 @@
  sync_file_create
  sync_file_get_fence
  unmap_mapping_range
-  unregister_shrinker
  unregister_vmap_purge_notifier
  vmf_insert_mixed
  vm_get_page_prot
@@ -1342,7 +1498,6 @@
  dma_pool_create
  dma_pool_destroy
  dma_pool_free
-  free_pages
  gen_pool_dma_alloc_align
  gen_pool_dma_zalloc_align
  gen_pool_free_owner
@@ -1385,7 +1540,7 @@
  usb_remove_hcd

 # required by phy-qcom-qmp.ko
-  of_clk_get_by_name
+  devm_get_clk_from_child
  __of_reset_control_get

 # required by phy-qcom-qusb2.ko
@@ -1447,7 +1602,6 @@
  cpufreq_get_driver_data
  cpufreq_register_driver
  cpufreq_unregister_driver
-  __cpu_possible_mask
  cpu_scale
  dev_pm_opp_adjust_voltage
  dev_pm_opp_disable
@@ -1459,7 +1613,6 @@
  dev_pm_opp_set_sharing_cpus
  get_cpu_device
  of_get_cpu_node
-  __per_cpu_offset
  policy_has_boost_freq
  system_highpri_wq
  topology_set_thermal_pressure
@@ -1548,7 +1701,6 @@
  bitmap_find_next_zero_area_off
  __bitmap_set
  cpu_pm_register_notifier
-  __num_online_cpus
  _raw_spin_trylock

 # required by qcom_spmi-regulator.ko
@@ -1569,7 +1721,6 @@
  _copy_to_iter

 # required by qrtr.ko
-  __alloc_skb
  autoremove_wake_function
  datagram_poll
  do_wait_intr_irq
@@ -1582,8 +1733,6 @@
  refcount_dec_and_mutex_lock
  release_sock
  sk_alloc
-  skb_clone
-  skb_copy_bits
  skb_copy_datagram_iter
  skb_free_datagram
  __skb_pad
@@ -1617,8 +1766,6 @@

 # required by rmtfs_mem.ko
  alloc_chrdev_region
-  __class_register
-  class_unregister

 # required by rpmsg_ns.ko
  rpmsg_create_channel
@@ -1641,7 +1788,6 @@
  mmc_send_tuning
  regulator_is_supported_voltage
  __reset_control_get
-  reset_control_put
  __sdhci_add_host
  sdhci_add_host
  sdhci_cleanup_host
@@ -1691,9 +1837,6 @@
  snd_soc_of_parse_aux_devs
  snd_soc_of_parse_card_name

-# required by snd-soc-rl6231.ko
-  gcd
-
 # required by snd-soc-rt5663.ko
  regcache_cache_bypass
  snd_soc_dapm_disable_pin
@@ -1711,9 +1854,6 @@

 # required by snd-soc-wcd9335.ko
  kmemdup_nul
-  snd_soc_get_volsw_sx
-  snd_soc_info_volsw_sx
-  snd_soc_put_volsw_sx
  strnstr

 # required by snd-soc-wcd934x.ko
@@ -1748,7 +1888,6 @@
  spi_delay_exec
  spi_finalize_current_message
  spi_get_next_queued_message
-  tasklet_unlock_wait

 # required by spi-qcom-qspi.ko
  icc_disable
@@ -1770,7 +1909,6 @@
  dma_heap_get_name
  dma_sync_sg_for_cpu
  dma_sync_sg_for_device
-  __free_pages
  __sg_page_iter_next

 # required by ufs_qcom.ko
@@ -1800,3 +1938,79 @@
 # required by wcd934x.ko
  mfd_add_devices
  mfd_remove_devices
+
+# required by zram.ko
+  __alloc_percpu
+  bio_endio
+  bio_end_io_acct_remapped
+  bio_start_io_acct
+  __blk_alloc_disk
+  blk_cleanup_disk
+  blk_queue_flag_clear
+  blk_queue_flag_set
+  blk_queue_io_min
+  blk_queue_io_opt
+  blk_queue_logical_block_size
+  blk_queue_max_discard_sectors
+  blk_queue_max_write_zeroes_sectors
+  blk_queue_physical_block_size
+  __cpuhp_state_add_instance
+  __cpuhp_state_remove_instance
+  crypto_alloc_base
+  crypto_comp_compress
+  crypto_comp_decompress
+  crypto_has_alg
+  del_gendisk
+  device_add_disk
+  disk_end_io_acct
+  disk_start_io_acct
+  down_write
+  flush_dcache_page
+  fsync_bdev
+  __get_free_pages
+  __init_rwsem
+  kstrtou16
+  kstrtoull
+  memset64
+  page_endio
+  __register_blkdev
+  set_capacity
+  set_capacity_and_notify
+  sysfs_streq
+  unregister_blkdev
+  up_write
+  zs_compact
+  zs_create_pool
+  zs_destroy_pool
+  zs_free
+  zs_get_total_pages
+  zs_huge_class_size
+  zs_malloc
+  zs_map_object
+  zs_pool_stats
+  zs_unmap_object
+
+# required by zsmalloc.ko
+  alloc_anon_inode
+  __alloc_pages
+  __ClearPageMovable
+  contig_page_data
+  dec_zone_page_state
+  inc_zone_page_state
+  init_pseudo
+  iput
+  kern_mount
+  kern_unmount
+  kill_anon_super
+  page_mapping
+  __put_page
+  __SetPageMovable
+  unlock_page
+  wait_on_page_bit
+
+# preserved by --additions-only
+  drm_connector_init_with_ddc
+  of_clk_get_by_name
+  snd_soc_get_volsw_sx
+  snd_soc_info_volsw_sx
+  snd_soc_put_volsw_sx
--- a/android/abi_gki_aarch64_exynos_wear
+++ b/android/abi_gki_aarch64_exynos_wear
--- a/android/abi_gki_aarch64_exynosauto
+++ b/android/abi_gki_aarch64_exynosauto
@@ -9,6 +9,7 @@
  alloc_workqueue
  amba_driver_register
  amba_driver_unregister
+  android_debug_for_each_module
  android_debug_symbol
  anon_inode_getfd
  anon_inode_getfile
@@ -33,10 +34,14 @@
  __bitmap_clear
  __bitmap_complement
  bitmap_find_free_region
+  bitmap_free
+  bitmap_parselist
  bitmap_print_to_pagebuf
  bitmap_release_region
  __bitmap_set
  __bitmap_weight
+  __bitmap_xor
+  bitmap_zalloc
  __blk_alloc_disk
  blk_cleanup_disk
  blk_execute_rq
@@ -162,12 +167,24 @@
  consume_skb
  contig_page_data
  copy_from_user_nofault
+  __cpu_active_mask
  cpu_bit_bitmap
+  cpufreq_cpu_get
+  cpufreq_cpu_get_raw
+  cpufreq_cpu_put
+  __cpufreq_driver_target
+  cpufreq_freq_transition_begin
+  cpufreq_freq_transition_end
+  cpufreq_frequency_table_verify
+  cpufreq_generic_attr
+  cpufreq_register_driver
+  cpufreq_table_index_unsorted
  __cpuhp_remove_state
  __cpuhp_setup_state
  __cpuhp_setup_state_cpuslocked
  __cpuhp_state_add_instance
  __cpuhp_state_remove_instance
+  cpuhp_tasks_frozen
  cpu_hwcap_keys
  cpu_hwcaps
  cpumask_next
@@ -200,6 +217,7 @@
  debugfs_create_x32
  debugfs_lookup
  debugfs_remove
+  debugfs_rename
  dec_zone_page_state
  default_llseek
  default_wake_function
@@ -215,6 +233,17 @@
  _dev_emerg
  _dev_err
  dev_err_probe
+  devfreq_add_device
+  devfreq_add_governor
+  devfreq_monitor_resume
+  devfreq_monitor_start
+  devfreq_monitor_stop
+  devfreq_monitor_suspend
+  devfreq_recommended_opp
+  devfreq_remove_device
+  devfreq_remove_governor
+  devfreq_update_interval
+  dev_fwnode
  dev_get_stats
  device_add_disk
  device_create
@@ -223,11 +252,13 @@
  device_destroy
  device_for_each_child
  device_get_match_data
+  device_get_phy_mode
  device_initialize
  device_init_wakeup
  device_link_add
  device_link_del
  device_property_present
+  device_property_read_u32_array
  device_property_read_u8_array
  device_register
  device_remove_file
@@ -238,37 +269,47 @@
  _dev_info
  __dev_kfree_skb_any
  devm_add_action
+  devm_alloc_etherdev_mqs
  devm_clk_get
  devm_clk_get_optional
  devm_clk_put
  dev_mc_sync_multiple
  dev_mc_unsync
+  devm_devfreq_register_notifier
+  devm_devfreq_unregister_notifier
  __devm_drm_dev_alloc
  devm_free_irq
  devm_gen_pool_create
  devm_get_free_pages
  devm_gpiochip_add_data_with_key
+  devm_gpiod_get
  devm_gpiod_get_optional
  devm_gpio_request_one
  devm_i2c_new_dummy_device
  devm_ioremap
  devm_ioremap_resource
  devm_iounmap
+  __devm_irq_alloc_descs
  devm_kasprintf
  devm_kfree
  devm_kmalloc
  devm_kmemdup
+  devm_kstrdup
+  devm_mfd_add_devices
  __devm_of_phy_provider_register
+  devm_pci_alloc_host_bridge
  devm_phy_create
  devm_phy_get
  devm_pinctrl_get
  devm_pinctrl_register
  devm_platform_ioremap_resource
+  devm_platform_ioremap_resource_byname
  __devm_regmap_init
  __devm_regmap_init_i2c
  __devm_regmap_init_mmio_clk
  devm_regulator_bulk_get
  devm_regulator_get
+  devm_regulator_register
  __devm_request_region
  devm_request_threaded_irq
  __devm_reset_control_get
@@ -279,12 +320,18 @@
  devm_thermal_zone_of_sensor_register
  _dev_notice
  dev_open
+  dev_pm_opp_add
  dev_pm_opp_find_freq_ceil
+  dev_pm_opp_get_voltage
  dev_pm_opp_of_add_table
  dev_pm_opp_of_remove_table
  dev_pm_opp_put
  dev_pm_opp_put_regulators
  dev_pm_opp_set_regulators
+  dev_pm_qos_add_request
+  dev_pm_qos_read_value
+  dev_pm_qos_remove_request
+  dev_pm_qos_update_request
  _dev_printk
  dev_queue_xmit
  devres_add
@@ -313,6 +360,7 @@
  dma_buf_export
  dma_buf_fd
  dma_buf_get
+  dma_buf_get_flags
  dma_buf_map_attachment
  dma_buf_mmap
  dma_buf_move_notify
@@ -393,6 +441,7 @@
  down_write_trylock
  dql_completed
  dql_reset
+  drain_workqueue
  driver_unregister
  drm_add_edid_modes
  drm_add_modes_noedid
@@ -407,7 +456,9 @@
  drm_atomic_helper_commit
  drm_atomic_helper_commit_modeset_disables
  drm_atomic_helper_commit_planes
+  __drm_atomic_helper_connector_destroy_state
  drm_atomic_helper_connector_destroy_state
+  __drm_atomic_helper_connector_duplicate_state
  drm_atomic_helper_connector_duplicate_state
  drm_atomic_helper_connector_reset
  drm_atomic_helper_crtc_destroy_state
@@ -636,6 +687,8 @@
  drm_universal_plane_init
  drm_vblank_init
  drm_writeback_connector_init
+  drm_writeback_queue_job
+  drm_writeback_signal_completion
  dump_backtrace
  dump_stack
  dw_pcie_ep_init
@@ -656,6 +709,8 @@
  ethnl_cable_test_result
  ethnl_cable_test_step
  eth_prepare_mac_addr_change
+  ethtool_convert_legacy_u32_to_link_mode
+  ethtool_convert_link_mode_to_legacy_u32
  __ethtool_get_link_ksettings
  ethtool_op_get_link
  ethtool_op_get_ts_info
@@ -673,7 +728,12 @@
  _find_next_bit
  __find_vma
  finish_wait
+  flow_block_cb_setup_simple
  flow_keys_basic_dissector
+  flow_rule_match_basic
+  flow_rule_match_ipv4_addrs
+  flow_rule_match_ports
+  flow_rule_match_vlan
  flush_dcache_page
  flush_delayed_work
  flush_work
@@ -685,6 +745,8 @@
  free_pages
  free_percpu
  freezing_slow_path
+  freq_qos_add_request
+  freq_qos_update_request
  fsync_bdev
  gcd
  generic_file_llseek
@@ -700,16 +762,22 @@
  genphy_c45_read_lpa
  genphy_check_and_restart_aneg
  __genphy_config_aneg
+  genphy_handle_interrupt_no_ack
+  genphy_read_abilities
  genphy_read_lpa
+  genphy_read_mmd_unsupported
+  genphy_read_status
  genphy_read_status_fixed
  genphy_resume
  genphy_setup_forced
  genphy_soft_reset
  genphy_suspend
  genphy_update_link
+  genphy_write_mmd_unsupported
  gen_pool_add_owner
  gen_pool_alloc_algo_owner
  gen_pool_free_owner
+  get_cpu_device
  get_device
  __get_free_pages
  get_random_bytes
@@ -740,6 +808,7 @@
  handle_nested_irq
  handle_simple_irq
  handle_sysrq
+  hdmi_audio_infoframe_init
  hdmi_avi_infoframe_init
  hdmi_avi_infoframe_pack
  hex_dump_to_buffer
@@ -791,6 +860,7 @@
  i3c_master_set_info
  i3c_master_unregister
  ida_alloc_range
+  ida_destroy
  ida_free
  idr_alloc
  idr_alloc_cyclic
@@ -881,6 +951,7 @@
  is_dma_buf_file
  is_vmalloc_addr
  iterate_fd
+  jiffies64_to_msecs
  jiffies
  jiffies_to_msecs
  jiffies_to_usecs
@@ -969,6 +1040,8 @@
  mdiobus_unregister
  __mdiobus_write
  mdiobus_write
+  mdio_device_create
+  mdio_device_free
  memcpy
  __memcpy_fromio
  __memcpy_toio
@@ -1026,6 +1099,7 @@
  netdev_master_upper_dev_link
  netdev_notify_peers
  netdev_pick_tx
+  netdev_rss_key_fill
  netdev_rx_handler_register
  netdev_rx_handler_unregister
  netdev_update_features
@@ -1132,6 +1206,11 @@
  oops_in_progress
  page_endio
  page_mapping
+  page_pool_alloc_pages
+  page_pool_create
+  page_pool_destroy
+  page_pool_put_page
+  page_pool_release_page
  panic
  panic_notifier_list
  param_array_ops
@@ -1143,6 +1222,7 @@
  param_ops_charp
  param_ops_hexint
  param_ops_int
+  param_ops_long
  param_ops_string
  param_ops_uint
  param_set_bool
@@ -1175,12 +1255,14 @@
  pci_generic_config_read
  pci_generic_config_write
  pci_get_device
+  pci_host_probe
  pci_iomap
  pci_iomap_range
  pci_iounmap
  pci_irq_get_affinity
  pci_irq_vector
  pci_load_saved_state
+  pci_lock_rescan_remove
  pci_map_rom
  pci_msi_create_irq_domain
  pci_msi_mask_irq
@@ -1195,6 +1277,7 @@
  pci_release_region
  pci_release_resource
  pci_release_selected_regions
+  pci_remove_root_bus
  pci_request_region
  pci_request_selected_regions
  pci_rescan_bus
@@ -1203,7 +1286,9 @@
  pci_restore_state
  pci_save_state
  pci_set_master
+  pci_stop_root_bus
  pci_store_saved_state
+  pci_unlock_rescan_remove
  pci_unmap_rom
  pci_unregister_driver
  pci_vfs_assigned
@@ -1219,6 +1304,7 @@
  perf_trace_run_bpf_submit
  pfn_is_map_memory
  phy_attached_info
+  phy_basic_t1_features
  phy_config_aneg
  phy_configure
  phy_disconnect
@@ -1238,10 +1324,27 @@
  phylink_connect_phy
  phylink_create
  phylink_destroy
+  phylink_disconnect_phy
+  phylink_ethtool_get_eee
+  phylink_ethtool_get_pauseparam
+  phylink_ethtool_get_wol
  phylink_ethtool_ksettings_get
+  phylink_ethtool_ksettings_set
+  phylink_ethtool_nway_reset
+  phylink_ethtool_set_eee
+  phylink_ethtool_set_pauseparam
+  phylink_ethtool_set_wol
+  phylink_get_eee_err
+  phylink_mii_ioctl
  phylink_of_phy_connect
+  phylink_resume
+  phylink_set_pcs
  phylink_set_port_modes
+  phylink_speed_down
+  phylink_speed_up
  phylink_start
+  phylink_stop
+  phylink_suspend
  phy_mac_interrupt
  phy_mii_ioctl
  __phy_modify
@@ -1278,6 +1381,7 @@
  pinctrl_remove_gpio_range
  pinctrl_select_state
  pin_user_pages
+  pin_user_pages_fast
  pin_user_pages_remote
  pipe_lock
  pipe_unlock
@@ -1327,6 +1431,7 @@
  prandom_bytes
  preempt_schedule
  preempt_schedule_notrace
+  prepare_to_wait
  prepare_to_wait_event
  print_hex_dump
  _printk
@@ -1336,6 +1441,7 @@
  proc_mkdir
  proc_set_size
  __pskb_pull_tail
+  ptp_clock_event
  ptp_clock_index
  ptp_clock_register
  ptp_clock_unregister
@@ -1399,6 +1505,7 @@
  register_chrdev_region
  register_console
  register_die_notifier
+  register_module_notifier
  register_netdev
  register_netdevice_notifier
  register_oom_notifier
@@ -1410,6 +1517,7 @@
  register_virtio_device
  register_virtio_driver
  regmap_bulk_write
+  regmap_multi_reg_write
  regmap_read
  regmap_register_patch
  regmap_update_bits_base
@@ -1426,6 +1534,7 @@
  regulator_map_voltage_linear
  regulator_put
  regulator_register
+  regulator_set_load
  regulator_set_voltage
  regulator_unregister
  release_firmware
@@ -1436,10 +1545,12 @@
  remove_proc_entry
  remove_wait_queue
  request_firmware
+  request_firmware_into_buf
  __request_region
  request_threaded_irq
  reset_control_assert
  reset_control_deassert
+  reset_control_reset
  return_address
  rtc_time64_to_tm
  rtc_update_irq
@@ -1509,9 +1620,16 @@
  smp_call_function
  smp_call_function_single
  smp_call_on_cpu
+  snd_ctl_add
  snd_ctl_enum_info
+  snd_ctl_new1
  snd_dmaengine_pcm_prepare_slave_config
+  snd_pcm_add_chmap_ctls
+  snd_pcm_create_iec958_consumer_default
+  snd_pcm_fill_iec958_consumer
+  snd_pcm_fill_iec958_consumer_hw_params
  snd_pcm_format_width
+  snd_pcm_hw_constraint_eld
  snd_pcm_hw_constraint_integer
  snd_pcm_lib_free_pages
  snd_pcm_lib_ioctl
@@ -1539,6 +1657,7 @@
  snd_soc_get_volsw
  snd_soc_info_enum_double
  snd_soc_info_volsw
+  snd_soc_jack_report
  snd_soc_of_get_dai_link_codecs
  snd_soc_of_get_dai_name
  snd_soc_of_parse_audio_routing
@@ -1620,6 +1739,7 @@
  sysfs_streq
  sysrq_mask
  system_freezing_cnt
+  system_state
  system_unbound_wq
  system_wq
  sys_tz
@@ -1643,6 +1763,7 @@
  trace_handle_return
  __traceiter_android_vh_ipi_stop
  __traceiter_android_vh_logbuf
+  __traceiter_android_vh_show_mem
  __traceiter_android_vh_ufs_fill_prdt
  __traceiter_cpu_idle
  __traceiter_device_pm_callback_end
@@ -1663,6 +1784,7 @@
  trace_output_call
  __tracepoint_android_vh_ipi_stop
  __tracepoint_android_vh_logbuf
+  __tracepoint_android_vh_show_mem
  __tracepoint_android_vh_ufs_fill_prdt
  __tracepoint_cpu_idle
  __tracepoint_device_pm_callback_end
@@ -1967,10 +2089,28 @@
  xdp_master_redirect
  xdp_return_frame
  xdp_return_frame_rx_napi
+  xdp_rxq_info_is_reg
  xdp_rxq_info_reg
  xdp_rxq_info_reg_mem_model
  xdp_rxq_info_unreg
+  xdp_rxq_info_unreg_mem_model
  xdp_warn
+  xp_alloc
+  xp_dma_map
+  xp_dma_sync_for_cpu_slow
+  xp_dma_sync_for_device_slow
+  xp_dma_unmap
+  xp_free
+  xp_raw_get_dma
+  xp_set_rxq_info
+  xsk_clear_rx_need_wakeup
+  xsk_get_pool_from_qid
+  xsk_set_rx_need_wakeup
+  xsk_set_tx_need_wakeup
+  xsk_tx_completed
+  xsk_tx_peek_desc
+  xsk_tx_release
+  xsk_uses_need_wakeup
  zs_compact
  zs_create_pool
  zs_destroy_pool
--- a/android/abi_gki_aarch64_fips140
+++ b/android/abi_gki_aarch64_fips140
@@ -111,6 +111,7 @@
  _raw_spin_lock
  _raw_spin_unlock
  refcount_warn_saturate
+  rng_is_initialized
  scatterwalk_ffwd
  scatterwalk_map_and_copy
  sg_init_one
--- a/android/abi_gki_aarch64_mtk
+++ b/android/abi_gki_aarch64_mtk
@@ -2003,6 +2003,7 @@
  __traceiter_android_rvh_override_creds
  __traceiter_android_rvh_prepare_prio_fork
  __traceiter_android_rvh_revert_creds
+  __traceiter_android_rvh_rmqueue_bulk
  __traceiter_android_rvh_rtmutex_prepare_setprio
  __traceiter_android_rvh_rto_next_cpu
  __traceiter_android_rvh_sched_newidle_balance
@@ -2079,6 +2080,7 @@
  __tracepoint_android_rvh_override_creds
  __tracepoint_android_rvh_prepare_prio_fork
  __tracepoint_android_rvh_revert_creds
+  __tracepoint_android_rvh_rmqueue_bulk
  __tracepoint_android_rvh_rtmutex_prepare_setprio
  __tracepoint_android_rvh_rto_next_cpu
  __tracepoint_android_rvh_sched_newidle_balance
--- a/android/abi_gki_aarch64_oplus
+++ b/android/abi_gki_aarch64_oplus
@@ -134,6 +134,7 @@
  init_wait_entry
  __init_waitqueue_head
  io_schedule
+  iov_iter_advance
  ip6_local_out
  ip6_route_me_harder
  ip_local_deliver
--- a/android/abi_gki_aarch64_qcom
+++ b/android/abi_gki_aarch64_qcom
@@ -72,6 +72,8 @@
  blk_freeze_queue_start
  blk_get_queue
  blk_get_request
+  blk_ksm_get_slot_idx
+  blk_ksm_register
  blk_mark_disk_dead
  blk_mq_alloc_request
  blk_mq_alloc_request_hctx
@@ -2013,6 +2015,7 @@
  syscon_regmap_lookup_by_phandle
  sysctl_sched_features
  sysctl_vals
+  sysctl_vals_new
  sysfs_add_file_to_group
  sysfs_add_link_to_group
  sysfs_create_bin_file
@@ -2142,6 +2145,7 @@
  __traceiter_android_vh_check_hibernation_swap
  __traceiter_android_vh_check_uninterruptible_tasks
  __traceiter_android_vh_check_uninterruptible_tasks_dn
+  __traceiter_android_vh_cma_alloc_retry
  __traceiter_android_vh_cpu_idle_enter
  __traceiter_android_vh_cpu_idle_exit
  __traceiter_android_vh_cpuidle_psci_enter
@@ -2254,6 +2258,7 @@
  __tracepoint_android_vh_check_hibernation_swap
  __tracepoint_android_vh_check_uninterruptible_tasks
  __tracepoint_android_vh_check_uninterruptible_tasks_dn
+  __tracepoint_android_vh_cma_alloc_retry
  __tracepoint_android_vh_cpu_idle_enter
  __tracepoint_android_vh_cpu_idle_exit
  __tracepoint_android_vh_cpuidle_psci_enter
--- a/android/abi_gki_aarch64_virtual_device
+++ b/android/abi_gki_aarch64_virtual_device
@@ -435,7 +435,9 @@
  set_capacity_and_notify
  __SetPageMovable
  sg_alloc_table
+  sg_alloc_table_chained
  sg_free_table
+  sg_free_table_chained
  sg_init_one
  sg_init_table
  sg_miter_next
--- a/android/abi_gki_aarch64_xiaomi
+++ b/android/abi_gki_aarch64_xiaomi
@@ -450,6 +450,7 @@
  iomap_dio_complete
  iov_iter_alignment
  iter_file_splice_write
+  kernfs_get
  kset_register
  migrate_page_move_mapping
  migrate_page_states
--- a/arch/Kconfig
+++ b/arch/Kconfig
@@ -200,6 +200,9 @@ config HAVE_NMI
 config TRACE_IRQFLAGS_SUPPORT
 	bool

+config TRACE_IRQFLAGS_NMI_SUPPORT
+	bool
+
 #
 # An arch should select this if it provides all these things:
 #
@@ -1297,7 +1300,6 @@ config ARCH_HAVE_TRACE_MMIO_ACCESS

 config ARCH_HAS_NONLEAF_PMD_YOUNG
 	bool
-	depends on PGTABLE_LEVELS > 2
 	help
 	  Architectures that select this option are capable of setting the
 	  accessed bit in non-leaf PMD entries when using them as part of linear
--- a/arch/alpha/include/asm/page.h
+++ b/arch/alpha/include/asm/page.h
@@ -18,7 +18,7 @@ extern void clear_page(void *page);
 #define clear_user_page(page, vaddr, pg)	clear_page(page)

 #define alloc_zeroed_user_highpage_movable(vma, vaddr) \
-	alloc_page_vma(GFP_HIGHUSER_MOVABLE | __GFP_ZERO, vma, vmaddr)
+	alloc_page_vma(GFP_HIGHUSER_MOVABLE | __GFP_ZERO, vma, vaddr)
 #define __HAVE_ARCH_ALLOC_ZEROED_USER_HIGHPAGE_MOVABLE

 extern void copy_page(void * _to, void * _from);
--- a/arch/alpha/include/asm/timex.h
+++ b/arch/alpha/include/asm/timex.h
@@ -28,5 +28,6 @@ static inline cycles_t get_cycles (void)
 	__asm__ __volatile__ ("rpcc %0" : "=r"(ret));
 	return ret;
 }
+#define get_cycles get_cycles

 #endif
--- a/arch/alpha/kernel/srmcons.c
+++ b/arch/alpha/kernel/srmcons.c
@@ -59,7 +59,7 @@ srmcons_do_receive_chars(struct tty_port *port)
 	} while((result.bits.status & 1) && (++loops < 10));

 	if (count)
-		tty_schedule_flip(port);
+		tty_flip_buffer_push(port);

 	return count;
 }
--- a/arch/arm/boot/dts/Makefile
+++ b/arch/arm/boot/dts/Makefile
@@ -127,6 +127,7 @@ dtb-$(CONFIG_ARCH_BCM_5301X) += \
 	bcm47094-luxul-xwr-3150-v1.dtb \
 	bcm47094-netgear-r8500.dtb \
 	bcm47094-phicomm-k3.dtb \
+	bcm53015-meraki-mr26.dtb \
 	bcm53016-meraki-mr32.dtb \
 	bcm94708.dtb \
 	bcm94709.dtb \
--- a/arch/arm/boot/dts/am33xx-l4.dtsi
+++ b/arch/arm/boot/dts/am33xx-l4.dtsi
@@ -1500,8 +1500,7 @@
 			mmc1: mmc@0 {
 				compatible = "ti,am335-sdhci";
 				ti,needs-special-reset;
-				dmas = <&edma_xbar 24 0 0
-					&edma_xbar 25 0 0>;
+				dmas = <&edma 24 0>, <&edma 25 0>;
 				dma-names = "tx", "rx";
 				interrupts = <64>;
 				reg = <0x0 0x1000>;
--- a/arch/arm/boot/dts/am5748.dtsi
+++ b/arch/arm/boot/dts/am5748.dtsi
@@ -25,6 +25,10 @@
 	status = "disabled";
 };

+&usb4_tm {
+	status = "disabled";
+};
+
 &atl_tm {
 	status = "disabled";
 };
--- a/arch/arm/boot/dts/aspeed-ast2500-evb.dts
+++ b/arch/arm/boot/dts/aspeed-ast2500-evb.dts
@@ -5,7 +5,7 @@

 / {
 	model = "AST2500 EVB";
-	compatible = "aspeed,ast2500";
+	compatible = "aspeed,ast2500-evb", "aspeed,ast2500";

 	aliases {
 		serial4 = &uart5;
--- a/arch/arm/boot/dts/aspeed-ast2600-evb-a1.dts
+++ b/arch/arm/boot/dts/aspeed-ast2600-evb-a1.dts
@@ -5,6 +5,7 @@

 / {
 	model = "AST2600 A1 EVB";
+	compatible = "aspeed,ast2600-evb-a1", "aspeed,ast2600";

 	/delete-node/regulator-vcc-sdhci0;
 	/delete-node/regulator-vcc-sdhci1;
--- a/arch/arm/boot/dts/aspeed-ast2600-evb.dts
+++ b/arch/arm/boot/dts/aspeed-ast2600-evb.dts
@@ -8,7 +8,7 @@

 / {
 	model = "AST2600 EVB";
-	compatible = "aspeed,ast2600";
+	compatible = "aspeed,ast2600-evb-a1", "aspeed,ast2600";

 	aliases {
 		serial4 = &uart5;
@@ -103,7 +103,7 @@
 &mac0 {
 	status = "okay";

-	phy-mode = "rgmii";
+	phy-mode = "rgmii-rxid";
 	phy-handle = <&ethphy0>;

 	pinctrl-names = "default";
@@ -114,7 +114,7 @@
 &mac1 {
 	status = "okay";

-	phy-mode = "rgmii";
+	phy-mode = "rgmii-rxid";
 	phy-handle = <&ethphy1>;

 	pinctrl-names = "default";
--- a/arch/arm/boot/dts/aspeed-bmc-ibm-everest.dts
+++ b/arch/arm/boot/dts/aspeed-bmc-ibm-everest.dts
@@ -231,6 +231,21 @@
 			gpios = <&gpio0 ASPEED_GPIO(P, 4) GPIO_ACTIVE_LOW>;
 		};
 	};
+
+	iio-hwmon {
+		compatible = "iio-hwmon";
+		io-channels = <&adc1 7>;
+	};
+};
+
+&adc1 {
+	status = "okay";
+	aspeed,int-vref-microvolt = <2500000>;
+	pinctrl-names = "default";
+	pinctrl-0 = <&pinctrl_adc8_default &pinctrl_adc9_default
+				 &pinctrl_adc10_default &pinctrl_adc11_default
+				 &pinctrl_adc12_default &pinctrl_adc13_default
+				 &pinctrl_adc14_default &pinctrl_adc15_default>;
 };

 &gpio0 {
--- a/arch/arm/boot/dts/aspeed-bmc-ibm-rainier.dts
+++ b/arch/arm/boot/dts/aspeed-bmc-ibm-rainier.dts
@@ -246,6 +246,21 @@
 			linux,code = <11>;
 		};
 	};
+
+	iio-hwmon {
+		compatible = "iio-hwmon";
+		io-channels = <&adc1 7>;
+	};
+};
+
+&adc1 {
+	status = "okay";
+	aspeed,int-vref-microvolt = <2500000>;
+	pinctrl-names = "default";
+	pinctrl-0 = <&pinctrl_adc8_default &pinctrl_adc9_default
+		&pinctrl_adc10_default &pinctrl_adc11_default
+		&pinctrl_adc12_default &pinctrl_adc13_default
+		&pinctrl_adc14_default &pinctrl_adc15_default>;
 };

 &ehci1 {
--- a/arch/arm/boot/dts/aspeed-g6-pinctrl.dtsi
+++ b/arch/arm/boot/dts/aspeed-g6-pinctrl.dtsi
@@ -117,11 +117,6 @@
 		groups = "FWSPID";
 	};

-	pinctrl_fwqspid_default: fwqspid_default {
-		function = "FWSPID";
-		groups = "FWQSPID";
-	};
-
 	pinctrl_fwspiwp_default: fwspiwp_default {
 		function = "FWSPIWP";
 		groups = "FWSPIWP";
@@ -653,12 +648,12 @@
 	};

 	pinctrl_qspi1_default: qspi1_default {
-		function = "QSPI1";
+		function = "SPI1";
 		groups = "QSPI1";
 	};

 	pinctrl_qspi2_default: qspi2_default {
-		function = "QSPI2";
+		function = "SPI2";
 		groups = "QSPI2";
 	};

--- a/arch/arm/boot/dts/aspeed-g6.dtsi
+++ b/arch/arm/boot/dts/aspeed-g6.dtsi
@@ -364,6 +364,41 @@
 				status = "disabled";
 			};

+			adc0: adc@1e6e9000 {
+				compatible = "aspeed,ast2600-adc0";
+				reg = <0x1e6e9000 0x100>;
+				clocks = <&syscon ASPEED_CLK_APB2>;
+				resets = <&syscon ASPEED_RESET_ADC>;
+				interrupts = <GIC_SPI 46 IRQ_TYPE_LEVEL_HIGH>;
+				#io-channel-cells = <1>;
+				status = "disabled";
+			};
+
+			adc1: adc@1e6e9100 {
+				compatible = "aspeed,ast2600-adc1";
+				reg = <0x1e6e9100 0x100>;
+				clocks = <&syscon ASPEED_CLK_APB2>;
+				resets = <&syscon ASPEED_RESET_ADC>;
+				interrupts = <GIC_SPI 46 IRQ_TYPE_LEVEL_HIGH>;
+				#io-channel-cells = <1>;
+				status = "disabled";
+			};
+
+			sbc: secure-boot-controller@1e6f2000 {
+				compatible = "aspeed,ast2600-sbc";
+				reg = <0x1e6f2000 0x1000>;
+			};
+
+			video: video@1e700000 {
+				compatible = "aspeed,ast2600-video-engine";
+				reg = <0x1e700000 0x1000>;
+				clocks = <&syscon ASPEED_CLK_GATE_VCLK>,
+					 <&syscon ASPEED_CLK_GATE_ECLK>;
+				clock-names = "vclk", "eclk";
+				interrupts = <GIC_SPI 7 IRQ_TYPE_LEVEL_HIGH>;
+				status = "disabled";
+			};
+
 			gpio0: gpio@1e780000 {
 				#gpio-cells = <2>;
 				gpio-controller;
--- a/arch/arm/boot/dts/at91-sam9x60ek.dts
+++ b/arch/arm/boot/dts/at91-sam9x60ek.dts
@@ -233,10 +233,9 @@
 		status = "okay";

 		eeprom@53 {
-			compatible = "atmel,24c32";
+			compatible = "atmel,24c02";
 			reg = <0x53>;
 			pagesize = <16>;
-			size = <128>;
 			status = "okay";
 		};
 	};
--- a/arch/arm/boot/dts/at91-sama5d27_wlsom1.dtsi
+++ b/arch/arm/boot/dts/at91-sama5d27_wlsom1.dtsi
@@ -68,8 +68,8 @@
 		regulators {
 			vdd_3v3: VDD_IO {
 				regulator-name = "VDD_IO";
-				regulator-min-microvolt = <1200000>;
-				regulator-max-microvolt = <3700000>;
+				regulator-min-microvolt = <3300000>;
+				regulator-max-microvolt = <3300000>;
 				regulator-initial-mode = <2>;
 				regulator-allowed-modes = <2>, <4>;
 				regulator-always-on;
@@ -87,8 +87,8 @@

 			vddio_ddr: VDD_DDR {
 				regulator-name = "VDD_DDR";
-				regulator-min-microvolt = <600000>;
-				regulator-max-microvolt = <1850000>;
+				regulator-min-microvolt = <1200000>;
+				regulator-max-microvolt = <1200000>;
 				regulator-initial-mode = <2>;
 				regulator-allowed-modes = <2>, <4>;
 				regulator-always-on;
@@ -110,8 +110,8 @@

 			vdd_core: VDD_CORE {
 				regulator-name = "VDD_CORE";
-				regulator-min-microvolt = <600000>;
-				regulator-max-microvolt = <1850000>;
+				regulator-min-microvolt = <1250000>;
+				regulator-max-microvolt = <1250000>;
 				regulator-initial-mode = <2>;
 				regulator-allowed-modes = <2>, <4>;
 				regulator-always-on;
@@ -152,8 +152,8 @@

 			LDO1 {
 				regulator-name = "LDO1";
-				regulator-min-microvolt = <1200000>;
-				regulator-max-microvolt = <3700000>;
+				regulator-min-microvolt = <3300000>;
+				regulator-max-microvolt = <3300000>;
 				regulator-always-on;

 				regulator-state-standby {
@@ -167,9 +167,8 @@

 			LDO2 {
 				regulator-name = "LDO2";
-				regulator-min-microvolt = <1200000>;
-				regulator-max-microvolt = <3700000>;
-				regulator-always-on;
+				regulator-min-microvolt = <1800000>;
+				regulator-max-microvolt = <3300000>;

 				regulator-state-standby {
 					regulator-on-in-suspend;
--- a/arch/arm/boot/dts/at91-sama5d2_icp.dts
+++ b/arch/arm/boot/dts/at91-sama5d2_icp.dts
@@ -197,8 +197,8 @@
 			regulators {
 				vdd_io_reg: VDD_IO {
 					regulator-name = "VDD_IO";
-					regulator-min-microvolt = <1200000>;
-					regulator-max-microvolt = <3700000>;
+					regulator-min-microvolt = <3300000>;
+					regulator-max-microvolt = <3300000>;
 					regulator-initial-mode = <2>;
 					regulator-allowed-modes = <2>, <4>;
 					regulator-always-on;
@@ -216,8 +216,8 @@

 				VDD_DDR {
 					regulator-name = "VDD_DDR";
-					regulator-min-microvolt = <600000>;
-					regulator-max-microvolt = <1850000>;
+					regulator-min-microvolt = <1350000>;
+					regulator-max-microvolt = <1350000>;
 					regulator-initial-mode = <2>;
 					regulator-allowed-modes = <2>, <4>;
 					regulator-always-on;
@@ -235,8 +235,8 @@

 				VDD_CORE {
 					regulator-name = "VDD_CORE";
-					regulator-min-microvolt = <600000>;
-					regulator-max-microvolt = <1850000>;
+					regulator-min-microvolt = <1250000>;
+					regulator-max-microvolt = <1250000>;
 					regulator-initial-mode = <2>;
 					regulator-allowed-modes = <2>, <4>;
 					regulator-always-on;
@@ -258,7 +258,6 @@
 					regulator-max-microvolt = <1850000>;
 					regulator-initial-mode = <2>;
 					regulator-allowed-modes = <2>, <4>;
-					regulator-always-on;

 					regulator-state-standby {
 						regulator-on-in-suspend;
@@ -273,8 +272,8 @@

 				LDO1 {
 					regulator-name = "LDO1";
-					regulator-min-microvolt = <1200000>;
-					regulator-max-microvolt = <3700000>;
+					regulator-min-microvolt = <2500000>;
+					regulator-max-microvolt = <2500000>;
 					regulator-always-on;

 					regulator-state-standby {
@@ -288,8 +287,8 @@

 				LDO2 {
 					regulator-name = "LDO2";
-					regulator-min-microvolt = <1200000>;
-					regulator-max-microvolt = <3700000>;
+					regulator-min-microvolt = <3300000>;
+					regulator-max-microvolt = <3300000>;
 					regulator-always-on;

 					regulator-state-standby {
@@ -323,21 +322,21 @@
 	status = "okay";

 	eeprom@50 {
-		compatible = "atmel,24c32";
+		compatible = "atmel,24c02";
 		reg = <0x50>;
 		pagesize = <16>;
 		status = "okay";
 	};

 	eeprom@52 {
-		compatible = "atmel,24c32";
+		compatible = "atmel,24c02";
 		reg = <0x52>;
 		pagesize = <16>;
 		status = "disabled";
 	};

 	eeprom@53 {
-		compatible = "atmel,24c32";
+		compatible = "atmel,24c02";
 		reg = <0x53>;
 		pagesize = <16>;
 		status = "disabled";
--- a/arch/arm/boot/dts/at91-sama7g5ek.dts
+++ b/arch/arm/boot/dts/at91-sama7g5ek.dts
@@ -169,8 +169,8 @@
 			regulators {
 				vdd_3v3: VDD_IO {
 					regulator-name = "VDD_IO";
-					regulator-min-microvolt = <1200000>;
-					regulator-max-microvolt = <3700000>;
+					regulator-min-microvolt = <3300000>;
+					regulator-max-microvolt = <3300000>;
 					regulator-initial-mode = <2>;
 					regulator-allowed-modes = <2>, <4>;
 					regulator-always-on;
@@ -188,8 +188,8 @@

 				vddioddr: VDD_DDR {
 					regulator-name = "VDD_DDR";
-					regulator-min-microvolt = <1300000>;
-					regulator-max-microvolt = <1450000>;
+					regulator-min-microvolt = <1350000>;
+					regulator-max-microvolt = <1350000>;
 					regulator-initial-mode = <2>;
 					regulator-allowed-modes = <2>, <4>;
 					regulator-always-on;
@@ -209,8 +209,8 @@

 				vddcore: VDD_CORE {
 					regulator-name = "VDD_CORE";
-					regulator-min-microvolt = <1100000>;
-					regulator-max-microvolt = <1850000>;
+					regulator-min-microvolt = <1150000>;
+					regulator-max-microvolt = <1150000>;
 					regulator-initial-mode = <2>;
 					regulator-allowed-modes = <2>, <4>;
 					regulator-always-on;
@@ -228,8 +228,8 @@

 				vddcpu: VDD_OTHER {
 					regulator-name = "VDD_OTHER";
-					regulator-min-microvolt = <1125000>;
-					regulator-max-microvolt = <1850000>;
+					regulator-min-microvolt = <1050000>;
+					regulator-max-microvolt = <1250000>;
 					regulator-initial-mode = <2>;
 					regulator-allowed-modes = <2>, <4>;
 					regulator-ramp-delay = <3125>;
@@ -248,8 +248,8 @@

 				vldo1: LDO1 {
 					regulator-name = "LDO1";
-					regulator-min-microvolt = <1200000>;
-					regulator-max-microvolt = <3700000>;
+					regulator-min-microvolt = <1800000>;
+					regulator-max-microvolt = <1800000>;
 					regulator-always-on;

 					regulator-state-standby {
--- a/arch/arm/boot/dts/bcm2711-rpi-400.dts
+++ b/arch/arm/boot/dts/bcm2711-rpi-400.dts
@@ -28,12 +28,12 @@
 &expgpio {
 	gpio-line-names = "BT_ON",
 			  "WL_ON",
-			  "",
+			  "PWR_LED_OFF",
 			  "GLOBAL_RESET",
 			  "VDD_SD_IO_SEL",
-			  "CAM_GPIO",
+			  "GLOBAL_SHUTDOWN",
 			  "SD_PWR_ON",
-			  "SD_OC_N";
+			  "SHUTDOWN_REQUEST";
 };

 &genet_mdio {
--- a/arch/arm/boot/dts/bcm2835-rpi-b.dts
+++ b/arch/arm/boot/dts/bcm2835-rpi-b.dts
@@ -53,18 +53,17 @@
 			  "GPIO18",
 			  "NC", /* GPIO19 */
 			  "NC", /* GPIO20 */
-			  "GPIO21",
+			  "CAM_GPIO0",
 			  "GPIO22",
 			  "GPIO23",
 			  "GPIO24",
 			  "GPIO25",
 			  "NC", /* GPIO26 */
-			  "CAM_GPIO0",
-			  /* Binary number representing build/revision */
-			  "CONFIG0",
-			  "CONFIG1",
-			  "CONFIG2",
-			  "CONFIG3",
+			  "GPIO27",
+			  "GPIO28",
+			  "GPIO29",
+			  "GPIO30",
+			  "GPIO31",
 			  "NC", /* GPIO32 */
 			  "NC", /* GPIO33 */
 			  "NC", /* GPIO34 */
--- a/arch/arm/boot/dts/bcm2835-rpi-zero-w.dts
+++ b/arch/arm/boot/dts/bcm2835-rpi-zero-w.dts
@@ -74,16 +74,18 @@
 			  "GPIO27",
 			  "SDA0",
 			  "SCL0",
-			  "NC", /* GPIO30 */
-			  "NC", /* GPIO31 */
-			  "NC", /* GPIO32 */
-			  "NC", /* GPIO33 */
-			  "NC", /* GPIO34 */
-			  "NC", /* GPIO35 */
-			  "NC", /* GPIO36 */
-			  "NC", /* GPIO37 */
-			  "NC", /* GPIO38 */
-			  "NC", /* GPIO39 */
+			  /* Used by BT module */
+			  "CTS0",
+			  "RTS0",
+			  "TXD0",
+			  "RXD0",
+			  /* Used by Wifi */
+			  "SD1_CLK",
+			  "SD1_CMD",
+			  "SD1_DATA0",
+			  "SD1_DATA1",
+			  "SD1_DATA2",
+			  "SD1_DATA3",
 			  "CAM_GPIO1", /* GPIO40 */
 			  "WL_ON", /* GPIO41 */
 			  "NC", /* GPIO42 */
--- a/arch/arm/boot/dts/bcm2837-rpi-3-b-plus.dts
+++ b/arch/arm/boot/dts/bcm2837-rpi-3-b-plus.dts
@@ -45,7 +45,7 @@
 		#gpio-cells = <2>;
 		gpio-line-names = "BT_ON",
 				  "WL_ON",
-				  "STATUS_LED_R",
+				  "PWR_LED_R",
 				  "LAN_RUN",
 				  "",
 				  "CAM_GPIO0",
--- a/arch/arm/boot/dts/bcm2837-rpi-cm3-io3.dts
+++ b/arch/arm/boot/dts/bcm2837-rpi-cm3-io3.dts
@@ -63,8 +63,8 @@
 			  "GPIO43",
 			  "GPIO44",
 			  "GPIO45",
-			  "GPIO46",
-			  "GPIO47",
+			  "SMPS_SCL",
+			  "SMPS_SDA",
 			  /* Used by eMMC */
 			  "SD_CLK_R",
 			  "SD_CMD_R",
--- a/arch/arm/boot/dts/bcm53015-meraki-mr26.dts
+++ b/arch/arm/boot/dts/bcm53015-meraki-mr26.dts
@@ -0,0 +1,166 @@
+// SPDX-License-Identifier: GPL-2.0-or-later OR MIT
+/*
+ * Broadcom BCM470X / BCM5301X ARM platform code.
+ * DTS for Meraki MR26 / Codename: Venom
+ *
+ * Copyright (C) 2022 Christian Lamparter <chunkeey@gmail.com>
+ */
+
+/dts-v1/;
+
+#include "bcm4708.dtsi"
+#include "bcm5301x-nand-cs0-bch8.dtsi"
+#include <dt-bindings/leds/common.h>
+
+/ {
+	compatible = "meraki,mr26", "brcm,bcm53015", "brcm,bcm4708";
+	model = "Meraki MR26";
+
+	memory@0 {
+		reg = <0x00000000 0x08000000>;
+		device_type = "memory";
+	};
+
+	leds {
+		compatible = "gpio-leds";
+
+		led-0 {
+			function = LED_FUNCTION_FAULT;
+			color = <LED_COLOR_ID_AMBER>;
+			gpios = <&chipcommon 13 GPIO_ACTIVE_HIGH>;
+			panic-indicator;
+		};
+		led-1 {
+			function = LED_FUNCTION_INDICATOR;
+			color = <LED_COLOR_ID_WHITE>;
+			gpios = <&chipcommon 12 GPIO_ACTIVE_HIGH>;
+		};
+	};
+
+	keys {
+		compatible = "gpio-keys";
+		#address-cells = <1>;
+		#size-cells = <0>;
+
+		key-restart {
+			label = "Reset";
+			linux,code = <KEY_RESTART>;
+			gpios = <&chipcommon 11 GPIO_ACTIVE_LOW>;
+		};
+	};
+};
+
+&uart0 {
+	clock-frequency = <50000000>;
+	/delete-property/ clocks;
+};
+
+&uart1 {
+	status = "disabled";
+};
+
+&gmac0 {
+	status = "okay";
+};
+
+&gmac1 {
+	status = "disabled";
+};
+&gmac2 {
+	status = "disabled";
+};
+&gmac3 {
+	status = "disabled";
+};
+
+&nandcs {
+	nand-ecc-algo = "hw";
+
+	partitions {
+		compatible = "fixed-partitions";
+		#address-cells = <0x1>;
+		#size-cells = <0x1>;
+
+		partition@0 {
+			label = "u-boot";
+			reg = <0x0 0x200000>;
+			read-only;
+		};
+
+		partition@200000 {
+			label = "u-boot-env";
+			reg = <0x200000 0x200000>;
+			/* empty */
+		};
+
+		partition@400000 {
+			label = "u-boot-backup";
+			reg = <0x400000 0x200000>;
+			/* empty */
+		};
+
+		partition@600000 {
+			label = "u-boot-env-backup";
+			reg = <0x600000 0x200000>;
+			/* empty */
+		};
+
+		partition@800000 {
+			label = "ubi";
+			reg = <0x800000 0x7780000>;
+		};
+	};
+};
+
+&srab {
+	status = "okay";
+
+	ports {
+		port@0 {
+			reg = <0>;
+			label = "poe";
+		};
+
+		port@5 {
+			reg = <5>;
+			label = "cpu";
+			ethernet = <&gmac0>;
+
+			fixed-link {
+				speed = <1000>;
+				duplex-full;
+			};
+		};
+	};
+};
+
+&i2c0 {
+	status = "okay";
+
+	pinctrl-names = "default";
+	pinctrl-0 = <&pinmux_i2c>;
+
+	clock-frequency = <100000>;
+
+	ina219@40 {
+		compatible = "ti,ina219"; /* PoE power */
+		reg = <0x40>;
+		shunt-resistor = <60000>; /* = 60 mOhms */
+	};
+
+	eeprom@56 {
+		compatible = "atmel,24c64";
+		reg = <0x56>;
+		pagesize = <32>;
+		read-only;
+		#address-cells = <1>;
+		#size-cells = <1>;
+
+		/* it's empty */
+	};
+};
+
+&thermal {
+	status = "disabled";
+	/* does not work, reads 418 degree Celsius */
+};
--- a/arch/arm/boot/dts/bcm5301x.dtsi
+++ b/arch/arm/boot/dts/bcm5301x.dtsi
@@ -423,14 +423,14 @@
 		#address-cells = <1>;
 		#size-cells = <1>;

-		cru@100 {
-			compatible = "simple-bus";
+		cru-bus@100 {
+			compatible = "brcm,ns-cru", "simple-mfd";
 			reg = <0x100 0x1a4>;
 			ranges;
 			#address-cells = <1>;
 			#size-cells = <1>;

-			lcpll0: lcpll0@100 {
+			lcpll0: clock-controller@100 {
 				#clock-cells = <1>;
 				compatible = "brcm,nsp-lcpll0";
 				reg = <0x100 0x14>;
@@ -439,7 +439,7 @@
 						     "sdio", "ddr_phy";
 			};

-			genpll: genpll@140 {
+			genpll: clock-controller@140 {
 				#clock-cells = <1>;
 				compatible = "brcm,nsp-genpll";
 				reg = <0x140 0x24>;
@@ -450,7 +450,12 @@
 						     "sata1", "sata2";
 			};

-			pinctrl: pin-controller@1c0 {
+			syscon@180 {
+				compatible = "brcm,cru-clkset", "syscon";
+				reg = <0x180 0x4>;
+			};
+
+			pinctrl: pinctrl@1c0 {
 				compatible = "brcm,bcm4708-pinmux";
 				reg = <0x1c0 0x24>;
 				reg-names = "cru_gpio_control";
--- a/arch/arm/boot/dts/exynos5250-smdk5250.dts
+++ b/arch/arm/boot/dts/exynos5250-smdk5250.dts
@@ -129,7 +129,7 @@
 	samsung,i2c-max-bus-freq = <20000>;

 	eeprom@50 {
-		compatible = "samsung,s524ad0xd1";
+		compatible = "samsung,s524ad0xd1", "atmel,24c128";
 		reg = <0x50>;
 	};

@@ -289,7 +289,7 @@
 	samsung,i2c-max-bus-freq = <20000>;

 	eeprom@51 {
-		compatible = "samsung,s524ad0xd1";
+		compatible = "samsung,s524ad0xd1", "atmel,24c128";
 		reg = <0x51>;
 	};

--- a/arch/arm/boot/dts/imx28-evk.dts
+++ b/arch/arm/boot/dts/imx28-evk.dts
@@ -129,7 +129,7 @@
 				pinctrl-0 = <&spi2_pins_a>;
 				status = "okay";

-				flash: m25p80@0 {
+				flash: flash@0 {
 					#address-cells = <1>;
 					#size-cells = <1>;
 					compatible = "sst,sst25vf016b", "jedec,spi-nor";
--- a/arch/arm/boot/dts/imx28-m28evk.dts
+++ b/arch/arm/boot/dts/imx28-m28evk.dts
@@ -33,7 +33,7 @@
 				pinctrl-0 = <&spi2_pins_a>;
 				status = "okay";

-				flash: m25p80@0 {
+				flash: flash@0 {
 					#address-cells = <1>;
 					#size-cells = <1>;
 					compatible = "m25p80", "jedec,spi-nor";
--- a/arch/arm/boot/dts/imx28-sps1.dts
+++ b/arch/arm/boot/dts/imx28-sps1.dts
@@ -51,7 +51,7 @@
 				pinctrl-0 = <&spi2_pins_a>;
 				status = "okay";

-				flash: m25p80@0 {
+				flash: flash@0 {
 					#address-cells = <1>;
 					#size-cells = <1>;
 					compatible = "everspin,mr25h256", "mr25h256";
--- a/arch/arm/boot/dts/imx6dl-eckelmann-ci4x10.dts
+++ b/arch/arm/boot/dts/imx6dl-eckelmann-ci4x10.dts
@@ -297,7 +297,11 @@
 	phy-mode = "rmii";
 	phy-reset-gpios = <&gpio1 18 GPIO_ACTIVE_LOW>;
 	phy-handle = <&phy>;
-	clocks = <&clks IMX6QDL_CLK_ENET>, <&clks IMX6QDL_CLK_ENET>, <&rmii_clk>;
+	clocks = <&clks IMX6QDL_CLK_ENET>,
+		 <&clks IMX6QDL_CLK_ENET>,
+		 <&rmii_clk>,
+		 <&clks IMX6QDL_CLK_ENET_REF>;
+	clock-names = "ipg", "ahb", "ptp", "enet_out";
 	status = "okay";

 	mdio {
--- a/arch/arm/boot/dts/imx6dl-rex-basic.dts
+++ b/arch/arm/boot/dts/imx6dl-rex-basic.dts
@@ -19,7 +19,7 @@
 };

 &ecspi3 {
-	flash: m25p80@0 {
+	flash: flash@0 {
 		compatible = "sst,sst25vf016b", "jedec,spi-nor";
 		spi-max-frequency = <20000000>;
 		reg = <0>;
--- a/arch/arm/boot/dts/imx6q-ba16.dtsi
+++ b/arch/arm/boot/dts/imx6q-ba16.dtsi
@@ -142,7 +142,7 @@
 	pinctrl-0 = <&pinctrl_ecspi1>;
 	status = "okay";

-	flash: n25q032@0 {
+	flash: flash@0 {
 		compatible = "jedec,spi-nor";
 		#address-cells = <1>;
 		#size-cells = <1>;
--- a/arch/arm/boot/dts/imx6q-bx50v3.dtsi
+++ b/arch/arm/boot/dts/imx6q-bx50v3.dtsi
@@ -160,7 +160,7 @@
 	pinctrl-0 = <&pinctrl_ecspi5>;
 	status = "okay";

-	m25_eeprom: m25p80@0 {
+	m25_eeprom: flash@0 {
 		compatible = "atmel,at25";
 		spi-max-frequency = <10000000>;
 		size = <0x8000>;
--- a/arch/arm/boot/dts/imx6q-cm-fx6.dts
+++ b/arch/arm/boot/dts/imx6q-cm-fx6.dts
@@ -260,7 +260,7 @@
 	pinctrl-0 = <&pinctrl_ecspi1>;
 	status = "okay";

-	m25p80@0 {
+	flash@0 {
 		#address-cells = <1>;
 		#size-cells = <1>;
 		compatible = "st,m25p", "jedec,spi-nor";
--- a/arch/arm/boot/dts/imx6q-dmo-edmqmx6.dts
+++ b/arch/arm/boot/dts/imx6q-dmo-edmqmx6.dts
@@ -102,7 +102,7 @@
 	cs-gpios = <&gpio1 12 GPIO_ACTIVE_LOW>;
 	status = "okay";

-	flash: m25p80@0 {
+	flash: flash@0 {
 		compatible = "m25p80", "jedec,spi-nor";
 		spi-max-frequency = <40000000>;
 		reg = <0>;
--- a/arch/arm/boot/dts/imx6q-dms-ba16.dts
+++ b/arch/arm/boot/dts/imx6q-dms-ba16.dts
@@ -47,7 +47,7 @@
 	pinctrl-0 = <&pinctrl_ecspi5>;
 	status = "okay";

-	m25_eeprom: m25p80@0 {
+	m25_eeprom: flash@0 {
 		compatible = "atmel,at25256B", "atmel,at25";
 		spi-max-frequency = <20000000>;
 		size = <0x8000>;
--- a/arch/arm/boot/dts/imx6q-gw5400-a.dts
+++ b/arch/arm/boot/dts/imx6q-gw5400-a.dts
@@ -137,7 +137,7 @@
 	pinctrl-0 = <&pinctrl_ecspi1>;
 	status = "okay";

-	flash: m25p80@0 {
+	flash: flash@0 {
 		compatible = "sst,w25q256", "jedec,spi-nor";
 		spi-max-frequency = <30000000>;
 		reg = <0>;
--- a/arch/arm/boot/dts/imx6q-marsboard.dts
+++ b/arch/arm/boot/dts/imx6q-marsboard.dts
@@ -100,7 +100,7 @@
 	cs-gpios = <&gpio2 30 GPIO_ACTIVE_LOW>;
 	status = "okay";

-	m25p80@0 {
+	flash@0 {
 		compatible = "microchip,sst25vf016b";
 		spi-max-frequency = <20000000>;
 		reg = <0>;
--- a/arch/arm/boot/dts/imx6q-rex-pro.dts
+++ b/arch/arm/boot/dts/imx6q-rex-pro.dts
@@ -19,7 +19,7 @@
 };

 &ecspi3 {
-	flash: m25p80@0 {
+	flash: flash@0 {
 		compatible = "sst,sst25vf032b", "jedec,spi-nor";
 		spi-max-frequency = <20000000>;
 		reg = <0>;
--- a/arch/arm/boot/dts/imx6qdl-aristainetos.dtsi
+++ b/arch/arm/boot/dts/imx6qdl-aristainetos.dtsi
@@ -96,7 +96,7 @@
 	pinctrl-0 = <&pinctrl_ecspi4>;
 	status = "okay";

-	flash: m25p80@0 {
+	flash: flash@0 {
 		#address-cells = <1>;
 		#size-cells = <1>;
 		compatible = "micron,n25q128a11", "jedec,spi-nor";
--- a/arch/arm/boot/dts/imx6qdl-aristainetos2.dtsi
+++ b/arch/arm/boot/dts/imx6qdl-aristainetos2.dtsi
@@ -131,7 +131,7 @@
 	pinctrl-0 = <&pinctrl_ecspi4>;
 	status = "okay";

-	flash: m25p80@1 {
+	flash: flash@1 {
 		#address-cells = <1>;
 		#size-cells = <1>;
 		compatible = "micron,n25q128a11", "jedec,spi-nor";
--- a/arch/arm/boot/dts/imx6qdl-colibri.dtsi
+++ b/arch/arm/boot/dts/imx6qdl-colibri.dtsi
@@ -1,6 +1,6 @@
 // SPDX-License-Identifier: GPL-2.0+ OR MIT
 /*
- * Copyright 2014-2020 Toradex
+ * Copyright 2014-2022 Toradex
 * Copyright 2012 Freescale Semiconductor, Inc.
 * Copyright 2011 Linaro Ltd.
 */
@@ -132,7 +132,7 @@
 	clock-frequency = <100000>;
 	pinctrl-names = "default", "gpio";
 	pinctrl-0 = <&pinctrl_i2c2>;
-	pinctrl-0 = <&pinctrl_i2c2_gpio>;
+	pinctrl-1 = <&pinctrl_i2c2_gpio>;
 	scl-gpios = <&gpio2 30 (GPIO_ACTIVE_HIGH | GPIO_OPEN_DRAIN)>;
 	sda-gpios = <&gpio3 16 (GPIO_ACTIVE_HIGH | GPIO_OPEN_DRAIN)>;
 	status = "okay";
@@ -488,7 +488,7 @@
 		>;
 	};

-	pinctrl_i2c2_gpio: i2c2grp {
+	pinctrl_i2c2_gpio: i2c2gpiogrp {
 		fsl,pins = <
 			MX6QDL_PAD_EIM_EB2__GPIO2_IO30 0x4001b8b1
 			MX6QDL_PAD_EIM_D16__GPIO3_IO16 0x4001b8b1
--- a/arch/arm/boot/dts/imx6qdl-dfi-fs700-m60.dtsi
+++ b/arch/arm/boot/dts/imx6qdl-dfi-fs700-m60.dtsi
@@ -35,7 +35,7 @@
 	pinctrl-0 = <&pinctrl_ecspi3>;
 	status = "okay";

-	flash: m25p80@0 {
+	flash: flash@0 {
 		#address-cells = <1>;
 		#size-cells = <1>;
 		compatible = "sst,sst25vf040b", "jedec,spi-nor";
--- a/arch/arm/boot/dts/imx6qdl-kontron-samx6i.dtsi
+++ b/arch/arm/boot/dts/imx6qdl-kontron-samx6i.dtsi
@@ -51,16 +51,6 @@
 		vin-supply = <&reg_3p3v_s5>;
 	};

-	reg_3p3v_s0: regulator-3p3v-s0 {
-		compatible = "regulator-fixed";
-		regulator-name = "V_3V3_S0";
-		regulator-min-microvolt = <3300000>;
-		regulator-max-microvolt = <3300000>;
-		regulator-always-on;
-		regulator-boot-on;
-		vin-supply = <&reg_3p3v_s5>;
-	};
-
 	reg_3p3v_s5: regulator-3p3v-s5 {
 		compatible = "regulator-fixed";
 		regulator-name = "V_3V3_S5";
@@ -258,8 +248,8 @@
 	status = "okay";

 	/* default boot source: workaround #1 for errata ERR006282 */
-	smarc_flash: spi-flash@0 {
-		compatible = "winbond,w25q16dw", "jedec,spi-nor";
+	smarc_flash: flash@0 {
+		compatible = "jedec,spi-nor";
 		reg = <0>;
 		spi-max-frequency = <20000000>;
 	};
--- a/arch/arm/boot/dts/imx6qdl-nit6xlite.dtsi
+++ b/arch/arm/boot/dts/imx6qdl-nit6xlite.dtsi
@@ -179,7 +179,7 @@
 	pinctrl-0 = <&pinctrl_ecspi1>;
 	status = "okay";

-	flash: m25p80@0 {
+	flash: flash@0 {
 		compatible = "microchip,sst25vf016b";
 		spi-max-frequency = <20000000>;
 		reg = <0>;
--- a/arch/arm/boot/dts/imx6qdl-nitrogen6_max.dtsi
+++ b/arch/arm/boot/dts/imx6qdl-nitrogen6_max.dtsi
@@ -321,7 +321,7 @@
 	pinctrl-0 = <&pinctrl_ecspi1>;
 	status = "okay";

-	flash: m25p80@0 {
+	flash: flash@0 {
 		compatible = "microchip,sst25vf016b";
 		spi-max-frequency = <20000000>;
 		reg = <0>;
--- a/arch/arm/boot/dts/imx6qdl-nitrogen6_som2.dtsi
+++ b/arch/arm/boot/dts/imx6qdl-nitrogen6_som2.dtsi
@@ -252,7 +252,7 @@
 	pinctrl-0 = <&pinctrl_ecspi1>;
 	status = "okay";

-	flash: m25p80@0 {
+	flash: flash@0 {
 		compatible = "microchip,sst25vf016b";
 		spi-max-frequency = <20000000>;
 		reg = <0>;
--- a/arch/arm/boot/dts/imx6qdl-nitrogen6x.dtsi
+++ b/arch/arm/boot/dts/imx6qdl-nitrogen6x.dtsi
@@ -237,7 +237,7 @@
 	pinctrl-0 = <&pinctrl_ecspi1>;
 	status = "okay";

-	flash: m25p80@0 {
+	flash: flash@0 {
 		compatible = "sst,sst25vf016b", "jedec,spi-nor";
 		spi-max-frequency = <20000000>;
 		reg = <0>;
--- a/arch/arm/boot/dts/imx6qdl-sabreauto.dtsi
+++ b/arch/arm/boot/dts/imx6qdl-sabreauto.dtsi
@@ -272,7 +272,7 @@
 	pinctrl-0 = <&pinctrl_ecspi1 &pinctrl_ecspi1_cs>;
 	status = "disabled"; /* pin conflict with WEIM NOR */

-	flash: m25p80@0 {
+	flash: flash@0 {
 		#address-cells = <1>;
 		#size-cells = <1>;
 		compatible = "st,m25p32", "jedec,spi-nor";
--- a/arch/arm/boot/dts/imx6qdl-sabrelite.dtsi
+++ b/arch/arm/boot/dts/imx6qdl-sabrelite.dtsi
@@ -313,7 +313,7 @@
 	pinctrl-0 = <&pinctrl_ecspi1>;
 	status = "okay";

-	flash: m25p80@0 {
+	flash: flash@0 {
 		compatible = "sst,sst25vf016b", "jedec,spi-nor";
 		spi-max-frequency = <20000000>;
 		reg = <0>;
--- a/arch/arm/boot/dts/imx6qdl-sabresd.dtsi
+++ b/arch/arm/boot/dts/imx6qdl-sabresd.dtsi
@@ -197,7 +197,7 @@
 	pinctrl-0 = <&pinctrl_ecspi1>;
 	status = "okay";

-	flash: m25p80@0 {
+	flash: flash@0 {
 		#address-cells = <1>;
 		#size-cells = <1>;
 		compatible = "st,m25p32", "jedec,spi-nor";
--- a/arch/arm/boot/dts/imx6qdl-ts7970.dtsi
+++ b/arch/arm/boot/dts/imx6qdl-ts7970.dtsi
@@ -226,7 +226,7 @@
 		reg = <0x28>;
 		#gpio-cells = <2>;
 		gpio-controller;
-		ngpio = <32>;
+		ngpios = <62>;
 	};

 	sgtl5000: codec@a {
--- a/arch/arm/boot/dts/imx6qdl.dtsi
+++ b/arch/arm/boot/dts/imx6qdl.dtsi
@@ -763,7 +763,7 @@
 					regulator-name = "vddpu";
 					regulator-min-microvolt = <725000>;
 					regulator-max-microvolt = <1450000>;
-					regulator-enable-ramp-delay = <150>;
+					regulator-enable-ramp-delay = <380>;
 					anatop-reg-offset = <0x140>;
 					anatop-vol-bit-shift = <9>;
 					anatop-vol-bit-width = <5>;
--- a/Show More
+++ b/Show More