Jammy update: v5.17.14 upstream stable release

[Paolo Pisati]

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v5.17.14 upstream stable release
       from git://git.kernel.org/

Linux 5.17.14
block: fix bio_clone_blkg_association() to associate with proper blkcg_gq
pinctrl/rockchip: support setting input-enable param
tty: n_gsm: Fix packet data hex dump output
md: bcache: check the return value of kzalloc() in detached_dev_do_request()
md: fix double free of io_acct_set bioset
md: Don't set mddev private to NULL in raid0 pers->free
fs/ntfs3: Fix invalid free in log_replay
exportfs: support idmapped mounts
fs: add two trivial lookup helpers
ext4: only allow test_dummy_encryption when supported
MIPS: IP30: Remove incorrect `cpu_has_fpu' override
MIPS: IP27: Remove incorrect `cpu_has_fpu' override
RDMA/rxe: Generate a completion for unsupported/invalid opcode
RDMA/hns: Remove the num_cqc_timer variable
staging: r8188eu: delete rtw_wx_read/write32()
Revert "random: use static branch for crng_ready()"
list: test: Add a test for list_is_head()
perf evlist: Extend arch_evsel__must_be_in_group to support hybrid systems
kseltest/cgroup: Make test_stress.sh work if run interactively
net: ipa: fix page free in ipa_endpoint_replenish_one()
net: ipa: fix page free in ipa_endpoint_trans_release()
phy: qcom-qmp: fix reset-controller leak on probe errors
coresight: core: Fix coresight device probe failure issue
blk-iolatency: Fix inflight count imbalances and IO hangs on offline
vdpasim: allow to enable a vq repeatedly
dt-bindings: gpio: altera: correct interrupt-cells
docs/conf.py: Cope with removal of language=None in Sphinx 5.0.0
SMB3: EBADF/EIO errors in rename/open caused by race condition in smb2_compound_op
ceph: fix decoding of client session messages flags
ARM: pxa: maybe fix gpio lookup tables
ARM: dts: s5pv210: Remove spi-cs-high on panel in Aries
phy: qcom-qmp: fix struct clk leak on probe errors
clk: tegra: Add missing reset deassertion
arm64: tegra: Add missing DFLL reset on Tegra210
arm64: dts: qcom: ipq8074: fix the sleep clock frequency
gma500: fix an incorrect NULL check on list iterator
tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator
serial: pch: don't overwrite xmit->buf[0] by x_char
bcache: avoid journal no-space deadlock by reserving 1 journal bucket
bcache: remove incremental dirty sector counting for bch_sectors_dirty_init()
bcache: improve multithreaded bch_sectors_dirty_init()
bcache: improve multithreaded bch_btree_check()
stm: ltdc: fix two incorrect NULL checks on list iterator
carl9170: tx: fix an incorrect use of list iterator
ASoC: rt5514: Fix event generation for "DSP Voice Wake Up" control
rtl818x: Prevent using not initialized queues
xtensa/simdisk: fix proc_read_simdisk()
mm/memremap: fix missing call to untrack_pfn() in pagemap_range()
hugetlb: fix huge_pmd_unshare address update
nodemask.h: fix compilation error with GCC12
mm/page_alloc: always attempt to allocate at least one page during bulk allocation
Revert "mm/cma.c: remove redundant cma_mutex lock"
iommu/dma: Fix iova map result check bug
iommu/msm: Fix an incorrect NULL check on list iterator
ksmbd: fix outstanding credits related bugs
ftrace: Clean up hash direct_functions on register failures
kexec_file: drop weak attribute from arch_kexec_apply_relocations[_add]
um: Fix out-of-bounds read in LDT setup
um: chan_user: Fix winch_tramp() return value
um: Use asm-generic/dma-mapping.h
um: virtio_uml: Fix broken device handling in time-travel
mac80211: upgrade passive scan to active scan on DFS channels after beacon rx
cfg80211: declare MODULE_FIRMWARE for regulatory.db
mt76: fix use-after-free by removing a non-RCU wcid pointer
thermal: devfreq_cooling: use local ops instead of global ops
irqchip: irq-xtensa-mx: fix initial IRQ affinity
irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x
csky: patch_text: Fixup last cpu should be master
mmc: core: Allows to override the timeout value for ioctl() path
RDMA/hfi1: Fix potential integer multiplication overflow errors
lib/string_helpers: fix not adding strarray to device's resource list
Kconfig: Add option for asm goto w/ tied outputs to workaround clang-13 bug
ima: remove the IMA_TEMPLATE Kconfig option
media: coda: Add more H264 levels for CODA960
media: coda: Fix reported H264 profile
mtd: cfi_cmdset_0002: Use chip_ready() for write on S29GL064N
mtd: cfi_cmdset_0002: Move and rename chip_check/chip_ready/chip_good_for_write
md: fix an incorrect NULL check in md_reload_sb
md: fix an incorrect NULL check in does_sb_need_changing
drm/i915/dsi: fix VBT send packet port selection for ICL+
drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX
drm/nouveau/kms/nv50-: atom: fix an incorrect NULL check on list iterator
drm/nouveau/clk: Fix an incorrect NULL check on list iterator
drm/etnaviv: check for reaped mapping in etnaviv_iommu_unmap_gem
drm/nouveau/subdev/bus: Ratelimit logging for fault errors
drm/amdgpu/cs: make commands with 0 chunks illegal behaviour.
landlock: Fix same-layer rule unions
landlock: Create find_rule() from unmask_layers()
landlock: Reduce the maximum number of layers to 16
landlock: Define access_mask_t to enforce a consistent access mask size
selftests/landlock: Test landlock_create_ruleset(2) argument check ordering
landlock: Change landlock_restrict_self(2) check ordering
landlock: Change landlock_add_rule(2) argument check ordering
selftests/landlock: Add tests for O_PATH
selftests/landlock: Fully test file rename with "remove" access
selftests/landlock: Extend access right tests to directories
selftests/landlock: Add tests for unknown access rights
selftests/landlock: Extend tests for minimal valid attribute size
selftests/landlock: Make tests build with old libc
landlock: Fix landlock_add_rule(2) documentation
samples/landlock: Format with clang-format
samples/landlock: Add clang-format exceptions
selftests/landlock: Format with clang-format
selftests/landlock: Normalize array assignment
selftests/landlock: Add clang-format exceptions
landlock: Format with clang-format
landlock: Add clang-format exceptions
scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled
scsi: dc395x: Fix a missing check on list iterator
ocfs2: dlmfs: fix error handling of user_dlm_destroy_lock
dlm: fix missing lkb refcount handling
dlm: fix wake_up() calls for pending remove
dlm: uninitialized variable on error in dlm_listen_for_all()
dlm: fix plock invalid read
s390/stp: clock_delta should be signed
s390/perf: obtain sie_block from the right address
mm, compaction: fast_find_migrateblock() should return pfn in the target zone
block: Fix potential deadlock in blk_ia_range_sysfs_show()
staging: r8188eu: prevent ->Ssid overflow in rtw_wx_set_scan()
PCI: qcom: Fix unbalanced PHY init on probe errors
PCI: qcom: Fix runtime PM imbalance on probe errors
PCI/PM: Fix bridge_d3_blacklist[] Elo i2 overwrite of Gigabyte X299
drm/amdgpu: add beige goby PCI ID
tracing: Initialize integer variable to prevent garbage return value
tracing: Fix return value of trace_pid_write()
tracing: Fix potential double free in create_var_ref()
tty: goldfish: Introduce gf_ioread32()/gf_iowrite32()
ACPI: property: Release subnode properties with data nodes
ext4: avoid cycles in directory h-tree
ext4: verify dir block before splitting it
ext4: fix bug_on in __es_tree_search
ext4: filter out EXT4_FC_REPLAY from on-disk superblock field s_state
ext4: fix bug_on in ext4_writepages
ext4: fix memory leak in parse_apply_sb_mount_options()
ext4: fix warning in ext4_handle_inode_extension
ext4: fix race condition between ext4_write and ext4_convert_inline_data
ext4: fix journal_ioprio mount option handling
ext4: fix use-after-free in ext4_rename_dir_prepare
ext4: mark group as trimmed only if it was fully scanned
bfq: Make sure bfqg for which we are queueing requests is online
bfq: Get rid of __bio_blkcg() usage
bfq: Track whether bfq_group is still online
bfq: Remove pointless bfq_init_rq() calls
bfq: Drop pointless unlock-lock pair
bfq: Update cgroup information before merging bio
bfq: Split shared queues on move between cgroups
bfq: Avoid merging queues with different parents
bfq: Avoid false marking of bic as stably merged
efi: Do not import certificates from UEFI Secure Boot for T2 Macs
fs-writeback: writeback_sb_inodes：Recalculate 'wrote' according skipped pages
iwlwifi: mei: fix potential NULL-ptr deref
iwlwifi: mei: clear the sap data header before sending
iwlwifi: mvm: fix assert 1F04 upon reconfig
iwlwifi: fw: init SAR GEO table only if data is present
wifi: mac80211: fix use-after-free in chanctx code
objtool: Fix symbol creation
objtool: Fix objtool regression on x32 systems
f2fs: fix to do sanity check for inline inode
f2fs: fix fallocate to use file_modified to update permissions consistently
f2fs: don't use casefolded comparison for "." and ".."
f2fs: fix to do sanity check on total_data_blocks
f2fs: don't need inode lock for system hidden quota
f2fs: fix deadloop in foreground GC
f2fs: fix to clear dirty inode in f2fs_evict_inode()
f2fs: fix to do sanity check on block address in f2fs_do_zero_range()
f2fs: fix to avoid f2fs_bug_on() in dec_valid_node_count()
NFSv4.1 mark qualified async operations as MOVEABLE tasks
NFS: Convert GFP_NOFS to GFP_KERNEL
video: fbdev: vesafb: Fix a use-after-free due early fb_info cleanup
perf jevents: Fix event syntax error caused by ExtSel
tracing/timerlat: Notify IRQ new max latency only if stop tracing is set
rtla: Fix __set_sched_attr error message
rtla: Minor grammar fix for rtla README
rtla: Don't overwrite existing directory mode
perf c2c: Use stdio interface if slang is not supported
perf build: Fix btf__load_from_kernel_by_id() feature check
MIPS: RALINK: Define pci_remap_iospace under CONFIG_PCI_DRIVERS_GENERIC
RISC-V: Fix the XIP build
tracing: Reset the function filter after completing trampoline/graph selftest
i2c: rcar: fix PM ref counts in probe error paths
i2c: npcm: Handle spurious interrupts
i2c: npcm: Correct register access width
i2c: npcm: Fix timeout calculation
iommu/amd: Increase timeout waiting for GA log enablement
dmaengine: stm32-mdma: fix chan initialization in stm32_mdma_irq_handler()
dmaengine: stm32-mdma: remove GISR1 register
video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup
NFS: Further fixes to the writeback error handling
NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout
NFS: Don't report errors from nfs_pageio_complete() more than once
NFS: Do not report flush errors in nfs_write_end()
NFS: Don't report ENOSPC write errors twice
NFS: fsync() should report filesystem errors over EINTR/ERESTARTSYS
NFS: Do not report EINTR/ERESTARTSYS as mapping errors
dmaengine: idxd: Fix the error handling path in idxd_cdev_register()
i2c: at91: Initialize dma_buf in at91_twi_xfer()
iommu/mediatek: Fix NULL pointer dereference when printing dev_name
MIPS: Loongson: Use hwmon_device_register_with_groups() to register hwmon
iommu/arm-smmu-v3-sva: Fix mm use-after-free
cpufreq: mediatek: Unregister platform device on exit
cpufreq: mediatek: Use module_init and add module_exit
i2c: at91: use dma safe buffers
iommu/mediatek: Add mutex for m4u_group and m4u_dom in data
iommu/mediatek: Remove clk_disable in mtk_iommu_remove
iommu/mediatek: Add list_del in mtk_iommu_remove
iommu/mediatek: Fix 2 HW sharing pgtable issue
iommu/amd: Enable swiotlb in all cases
riscv: Fixup difference with defconfig
f2fs: fix dereference of stale list iterator after loop body
f2fs: fix to do sanity check on inline_dots inode
OPP: call of_node_put() on error path in _bandwidth_supported()
Input: stmfts - do not leave device disabled in stmfts_input_open
KVM: LAPIC: Drop pending LAPIC timer injection when canceling the timer
pinctrl: apple: Use a raw spinlock for the regmap
RDMA/hfi1: Prevent use of lock before it is initialized
mailbox: forward the hrtimer if not queued and under a lock
nfsd: destroy percpu stats counters after reply cache shutdown
mfd: davinci_voicecodec: Fix possible null-ptr-deref davinci_vc_probe()
gpio: sim: Use correct order for the parameters of devm_kcalloc()
powerpc/fsl_book3e: Don't set rodata RO too early
powerpc/fsl_rio: Fix refcount leak in fsl_rio_setup
powerpc/xive: Fix refcount leak in xive_spapr_init
powerpc/xive: Add some error handling code to 'xive_spapr_init()'
macintosh: via-pmu and via-cuda need RTC_LIB
powerpc/perf: Fix the threshold compare group constraint for power9
powerpc/perf: Fix the threshold compare group constraint for power10
powerpc/powernv: Get STF barrier requirements from device-tree
powerpc/powernv: Get L1D flush requirements from device-tree
powerpc/64: Only WARN if __pa()/__va() called with bad addresses
mailbox: pcc: Fix an invalid-load caught by the address sanitizer
perf stat: Always keep perf metrics topdown events in a group
perf evlist: Keep topdown counters in weak group
hwrng: omap3-rom - fix using wrong clk_disable() in omap_rom_rng_runtime_resume()
PCI: microchip: Fix potential race in interrupt handling
KVM: PPC: Book3S HV: Fix vcore_blocked tracepoint
PCI/AER: Clear MULTI_ERR_COR/UNCOR_RCV bits
Input: sparcspkr - fix refcount leak in bbc_beep_probe
mce: fix set_mce_nospec to always unmap the whole page
x86/mce: relocate set{clear}_mce_nospec() functions
hugetlbfs: fix hugetlbfs_statfs() locking
ARM: dts: at91: sama7g5: remove interrupt-parent from gic node
crypto: cryptd - Protect per-CPU resource by disabling BH.
crypto: sun8i-ss - handle zero sized sg
crypto: sun8i-ss - rework handling of IV
tty: fix deadlock caused by calling printk() under tty_port->lock
module: fix [e_shstrndx].sh_size=0 OOB access
module.h: simplify MODULE_IMPORT_NS
PCI: mediatek-gen3: Assert resets to ensure expected init state
PCI: imx6: Fix PERST# start-up sequence
ipc/mqueue: use get_tree_nodev() in mqueue_get_tree()
proc: fix dentry/inode overinstantiating under /proc/${pid}/net
ASoC: atmel-classd: Remove endianness flag on class d component
ASoC: atmel-pdmic: Remove endianness flag on pdmic component
arm64: dts: marvell: espressobin-ultra: enable front USB3 port
arm64: dts: marvell: espressobin-ultra: fix SPI-NOR config
RDMA/hns: Add the detection for CMDQ status in the device initialization process
powerpc/4xx/cpm: Fix return value of __setup() handler
powerpc/idle: Fix return value of __setup() handler
pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources()
pinctrl: renesas: r8a779a0: Fix GPIO function on I2C-capable pins
powerpc/8xx: export 'cpm_setbrg' for modules
drm/msm/dpu: fix error check return value of irq_of_parse_and_map()
list: fix a data-race around ep->rdllist
ocfs2: fix mounting crash if journal is not alloced
firmware: arm_ffa: Remove incorrect assignment of driver_data
firmware: arm_ffa: Fix uuid parameter to ffa_partition_probe
drivers/base/memory: fix an unlikely reference counting issue in __add_memory_block()
dax: fix cache flush on PMD-mapped pages
drivers/base/node.c: fix compaction sysfs file leak
crypto: ccp - Fix the INIT_EX data file open failure
pinctrl: mvebu: Fix irq_of_parse_and_map() return value
nvdimm: Allow overwrite in the presence of disabled dimms
nvdimm: Fix firmware activation deadlock scenarios
firmware: arm_scmi: Fix list protocols enumeration in the base protocol
ASoC: sh: rz-ssi: Release the DMA channels in rz_ssi_probe() error path
ASoC: sh: rz-ssi: Propagate error codes returned from platform_get_irq_byname()
arm64: dts: ti: k3-am64-mcu: remove incorrect UART base clock rates
soc: bcm: Check for NULL return of devm_kzalloc()
scsi: fcoe: Fix Wstringop-overflow warnings in fcoe_wwn_from_mac()
mfd: ipaq-micro: Fix error check return value of platform_get_irq()
powerpc/fadump: fix PT_LOAD segment for boot memory area
Drivers: hv: vmbus: Fix handling of messages with transaction ID of zero
arm64: dts: qcom: qrb5165-rb5: Fix can-clock node name
pinctrl: mediatek: mt8195: enable driver on mtk platforms
pinctrl/rockchip: support deferring other gpio params
arm: mediatek: select arch timer for mt7629
drm/msm: return the average load over the polling period
drm/msm: simplify gpu_busy callback
pinctrl: bcm2835: implement hook for missing gpio-ranges
gpiolib: of: Introduce hook for missing gpio-ranges
crypto: marvell/cesa - ECB does not IV
hwrng: cn10k - Make check_rng_health() return an error code
hwrng: cn10k - Optimize cn10k_rng_read()
misc: ocxl: fix possible double free in ocxl_file_register_afu
ARM: dts: bcm2835-rpi-b: Fix GPIO line names
ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED
ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C
ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT
ARM: dts: qcom: sdx55: remove wrong unit address from RPMH RSC clocks
dt-bindings: soc: qcom: smd-rpm: Fix missing MSM8936 compatible
ARM: dts: stm32: Fix PHY post-reset delay on Avenger96
can: xilinx_can: mark bit timing constants as const
platform/chrome: Re-introduce cros_ec_cmd_xfer and use it for ioctls
ARM: dts: imx6dl-colibri: Fix I2C pinmuxing
platform/chrome: cros_ec: fix error handling in cros_ec_register()
crypto: qat - set COMPRESSION capability for DH895XCC
crypto: qat - set CIPHER capability for DH895XCC
KVM: nVMX: Clear IDT vectoring on nested VM-Exit for double/triple fault
KVM: nVMX: Leave most VM-Exit info fields unmodified on failed VM-Entry
soc: qcom: llcc: Add MODULE_DEVICE_TABLE()
ARM: dts: ci4x10: Adapt to changes in imx6qdl.dtsi regarding fec clocks
PCI: dwc: Fix setting error return on MSI DMA mapping failure
PCI: mediatek: Fix refcount leak in mtk_pcie_subsys_powerup()
PCI: rockchip: Fix find_first_zero_bit() limit
PCI: cadence: Fix find_first_zero_bit() limit
soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc
soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc
ARM: dts: suniv: F1C100: fix watchdog compatible
ARM: dts: BCM5301X: Update pin controller node name
memory: samsung: exynos5422-dmc: Avoid some over memory allocation
PCI/ACPI: Allow D3 only if Root Port can signal and wake from D3
arm64: dts: mt8192: Fix nor_flash status disable typo
arm64: dts: rockchip: Move drive-impedance-ohm to emmc phy on rk3399
Revert "net/smc: fix listen processing for SMC-Rv2"
Bluetooth: hci_conn: Fix hci_connect_le_sync
Bluetooth: hci_sync: Cleanup hci_conn if it cannot be aborted
dma-direct: don't over-decrypt memory
net/smc: fix listen processing for SMC-Rv2
net/smc: postpone sk_refcnt increment in connect()
net: dsa: restrict SMSC_LAN9303_I2C kconfig
hinic: Avoid some over memory allocation
rxrpc: Fix decision on when to generate an IDLE ACK
rxrpc: Don't let ack.previousPacket regress
rxrpc: Fix overlapping ACK accounting
rxrpc: Don't try to resend the request if we're receiving the reply
rxrpc: Fix listen() setting the bar too high for the prealloc rings
rxrpc: Fix locking issue
hwmon: (pmbus) Check PEC support before reading other registers
hv_netvsc: Fix potential dereference of NULL pointer
amt: fix memory leak for advertisement message
amt: fix gateway mode stuck
net: stmmac: fix out-of-bounds access in a selftest
perf parse-events: Support different format of the topdown event name
ASoC: max98090: Move check for invalid values before casting in max98090_put_enab_tlv()
bonding: fix missed rcu protection
NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx
scsi: hisi_sas: Fix rescan after deleting a disk
net: macb: Fix PTP one step sync support
PM: domains: Fix initialization of genpd's next_wakeup
ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition()
bfq: Allow current waker to defend against a tentative one
bfq: Relax waker detection for shared queues
thermal/drivers/imx_sc_thermal: Fix refcount leak in imx_sc_thermal_probe
thermal/core: Fix memory leak in __thermal_cooling_device_register()
thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe
thermal/drivers/bcm2711: Don't clamp temperature at zero
drm/i915: Fix CFI violation with show_dynamic_id()
drm/msm/dpu: handle pm_runtime_get_sync() errors in bind path
selftests/bpf: Add missed ima_setup.sh in Makefile
drm/msm: don't free the IRQ if it was not requested
x86/sev: Annotate stack change in the #VC handler
drm: msm: fix possible memory leak in mdp5_crtc_cursor_set()
drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init
ext4: reject the 'commit' option on ext2 filesystems
net/mlx5e: Correct the calculation of max channels for rep
erofs: fix buffer copy overflow of ztailpacking feature
regulator: scmi: Fix refcount leak in scmi_regulator_probe
media: rkvdec: h264: Fix bit depth wrap in pps packet
media: rkvdec: h264: Fix dpb_valid implementation
media: i2c: ov5648: fix wrong pointer passed to IS_ERR() and PTR_ERR()
media: ov7670: remove ov7670_power_off from ov7670_remove
kselftest/arm64: bti: force static linking
ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_*
net: hinic: add missing destroy_workqueue in hinic_pf_to_mgmt_init
sctp: read sk->sk_bound_dev_if once in sctp_rcv()
m68k: math-emu: Fix dependencies of math emulation support
nvme: set dma alignment to dword
irqchip/gic-v3: Fix priority mask handling
irqchip/gic-v3: Refactor ISB + EOIR at ack time
irqchip/gic-v3: Ensure pseudo-NMIs have an ISB between ack and handling
io_uring: only wake when the correct events are set
io_uring: fix assuming triggered poll waitqueue is the single poll
io_uring: cache poll/double-poll state with a request flag
io_uring: avoid io-wq -EAGAIN looping for !IOPOLL
media: mediatek: vcodec: Fix v4l2 compliance decoder cmd test fail
Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event
Bluetooth: protect le accept and resolv lists with hdev->lock
Bluetooth: use hdev lock for accept_list and reject_list in conn req
Bluetooth: use hdev lock in activate_scan for hci_is_adv_monitoring
Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout
media: hantro: HEVC: Fix tile info buffer value computation
media: atmel: atmel-sama5d2-isc: fix wrong mask in YUYV format check
media: vsp1: Fix offset calculation for plane cropping
media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init
media: exynos4-is: Change clk_disable to clk_disable_unprepare
media: i2c: rdacm2x: properly set subdev entity function
media: atmel: atmel-isc: Fix PM disable depth imbalance in atmel_isc_probe
media: st-delta: Fix PM disable depth imbalance in delta_probe
mt76: mt7915: fix twt table_mask to u16 in mt7915_dev
mt76: fix tx status related use-after-free race on station removal
mt76: do not attempt to reorder received 802.3 packets without agg session
mt76: mt7921: fix kernel crash at mt7921_pci_remove
mt76: fix antenna config missing in 6G cap
mt76: mt7915: do not pass data pointer to mt7915_mcu_muru_debug_set
mt76: mt7921: Fix the error handling path of mt7921_pci_probe()
media: exynos4-is: Fix PM disable depth imbalance in fimc_is_probe
media: aspeed: Fix an error handling path in aspeed_video_probe()
scripts/faddr2line: Fix overlapping text section failures
kselftest/cgroup: fix test_stress.sh to use OUTPUT dir
block: Fix the bio.bi_opf comment
ASoC: samsung: Fix refcount leak in aries_audio_probe
dma-direct: don't fail on highmem CMA pages in dma_direct_alloc_pages
PM: EM: Decrement policy counter
regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt
ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe
ASoC: imx-hdmi: Fix refcount leak in imx_hdmi_probe
ASoC: fsl: Fix refcount leak in imx_sgtl5000_probe
HID: amd_sfh: Modify the hid name
HID: amd_sfh: Modify the bus name
wilc1000: fix crash observed in AP mode with cfg80211_register_netdevice()
ath11k: Don't check arvif->is_started before sending management frames
perf/amd/ibs: Use interrupt regs ip for stack unwinding
samples: bpf: Don't fail for a missing VMLINUX_BTF when VMLINUX_H is provided
regulator: qcom_smd: Fix up PM8950 regulator configuration
Revert "cpufreq: Fix possible race in cpufreq online error path"
selftests/bpf: Prevent skeleton generation race
spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()
iomap: iomap_write_failed fix
arm64: stackleak: fix current_top_of_stack()
media: uvcvideo: Fix missing check to determine if element is found in list
drm/msm: return an error pointer in msm_gem_prime_get_sg_table()
drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected
drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected
drm/msm/dp: fix event thread stuck in wait_event after kthread_stop()
drm/msm/dsi: fix address for second DSI PHY on SDM660
drm/msm/disp/dpu1: avoid clearing hw interrupts if hw_intr is null during drm uninit
regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET
arm64: fix types in copy_highpage()
x86/mm: Cleanup the control_va_addr_alignment() __setup handler
irqchip/aspeed-scu-ic: Fix irq_of_parse_and_map() return value
irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value
irqchip/exiu: Fix acknowledgment of edge triggered interrupts
x86: Fix return value of __setup handlers
nl80211: don't hold RTNL in color change request
virtio_blk: fix the discard_granularity and discard_alignment queue limits
perf tools: Use Python devtools for version autodetection rather than runtime
spi: cadence-quadspi: fix Direct Access Mode disable for SoCFPGA
drm/rockchip: vop: fix possible null-ptr-deref in vop_bind()
kunit: fix debugfs code to use enum kunit_status, not bool
drm/panel: panel-simple: Fix proper bpc for AM-1280800N3TZQW-T00H
drm/msm: add missing include to msm_drv.c
drm/msm/hdmi: fix error check return value of irq_of_parse_and_map()
drm/msm/hdmi: check return value after calling platform_get_resource_byname()
drm/msm/dsi: fix error checks and return values for DSI xmit functions
drm/msm/dp: do not stop transmitting phy test pattern during DP phy compliance test
drm/msm/dp: reset DP controller before transmit phy test pattern
drm/msm/dp: fix error check return value of irq_of_parse_and_map()
drm/msm/dp: stop event kernel thread when DP unbind
drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume
perf tools: Add missing headers needed by util/data.h
ASoC: rk3328: fix disabling mclk on pclk probe failure
x86/speculation: Add missing prototype for unpriv_ebpf_notify()
mtd: rawnand: intel: fix possible null-ptr-deref in ebu_nand_probe()
mtd: rawnand: cadence: fix possible null-ptr-deref in cadence_nand_dt_probe()
x86/pm: Fix false positive kmemleak report in msr_build_context()
mtd: spi-nor: core: Check written SR value in spi_nor_write_16bit_sr_and_check()
libbpf: Fix logic for finding matching program for CO-RE relocation
selftests/resctrl: Fix null pointer dereference on open failed
drm/v3d: Fix null pointer dereference of pointer perfmon
scsi: ufs: core: Exclude UECxx from SFR dump list
scsi: ufs: qcom: Fix ufs_qcom_resume()
scsi: iscsi: Fix harmless double shift bug
drm/msm/dpu: adjust display_v_end for eDP and DP
drm/msm: properly add and remove internal bridges
selftests/damon: add damon to selftests root Makefile
of: overlay: do not break notify on NOTIFY_{OK|STOP}
spi: rockchip: fix missing error on unsupported SPI_CS_HIGH
spi: rockchip: Preset cs-high and clk polarity in setup progress
spi: rockchip: Stop spi slave dma receiver when cs inactive
fsnotify: fix wrong lockdep annotations
inotify: show inotify mask flags in proc fdinfo
mtdblock: warn if opened on NAND
ALSA: pcm: Check for null pointer of pointer substream before dereferencing it
drm/panel: simple: Add missing bus flags for Innolux G070Y2-L01
media: hantro: Empty encoder capture buffers by default
media: i2c: max9286: fix kernel oops when removing module
media: i2c: max9286: Use "maxim,gpio-poc" property
ath9k_htc: fix potential out of bounds access with invalid rxstatus->rs_keyix
printk: wake waiters for safe and NMI contexts
printk: add missing memory barrier to wake_up_klogd()
printk: use atomic updates for klogd work
cpufreq: Fix possible race in cpufreq online error path
spi: img-spfi: Fix pm_runtime_get_sync() error checking
sched/psi: report zeroes for CPU full at the system level
sched/fair: Fix cfs_rq_clock_pelt() for throttled cfs_rq
signal: Deliver SIGTRAP on perf event asynchronously if blocked
drm/mediatek: dpi: Use mt8183 output formats for mt8192
regulator: da9121: Fix uninit-value in da9121_assign_chip_model()
drm/bridge: Fix error handling in analogix_dp_probe
HID: elan: Fix potential double free in elan_input_configured
HID: hid-led: fix maximum brightness for Dream Cheeky
mtd: rawnand: denali: Use managed device resources
drm/bridge: anx7625: Use uint8 for lane-swing arrays
EDAC/dmc520: Don't print an error for each unconfigured interrupt line
drbd: fix duplicate array initializer
target: remove an incorrect unmap zeroes data deduction
device property: Allow error pointer to be passed to fwnode APIs
efi: Add missing prototype for efi_capsule_setup_info
efi: Allow to enable EFI runtime services by default on RT
NFC: NULL out the dev->rfkill to prevent UAF
ixp4xx_eth: fix error check return value of platform_get_irq()
net: dsa: mt7530: 1G can also support 1000BASE-X link mode
scftorture: Fix distribution of short handler delays
spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout
drm: mali-dp: potential dereference of null pointer
drm/komeda: Fix an undefined behavior bug in komeda_plane_add()
nl80211: show SSID for P2P_GO interfaces
mptcp: reset the packet scheduler on PRIO change
mptcp: reset the packet scheduler on incoming MP_PRIO
mptcp: optimize release_cb for the common case
x86/PCI: Fix ALi M1487 (IBC) PIRQ router link value interpretation
libbpf: Don't error out on CO-RE relos for overriden weak subprogs
drm/vc4: txp: Force alpha to be 0xff if it's disabled
drm/vc4: txp: Don't set TXP_VSTART_AT_EOF
drm/vc4: hvs: Reset muxes at probe time
drm/mediatek: Fix mtk_cec_mask()
drm/vc4: hvs: Fix frame count register readout
drm/vc4: kms: Take old state core clock rate into account
drm/mediatek: Fix DPI component detection for MT8192
drm/mediatek: Add vblank register/unregister callback functions
x86/delay: Fix the wrong asm constraint in delay_loop()
ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe
ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe
ASoC: cs35l41: Fix an out-of-bounds access in otp_packed_element_t
spi: qcom-qspi: Add minItems to interconnect-names
mtd: spinand: gigadevice: fix Quad IO for GD5F1GQ5UExxG
drm: bridge: icn6211: Fix HFP_HSW_HBP_HI and HFP_MIN handling
drm: bridge: icn6211: Fix register layout
drm/bridge: adv7511: clean up CEC adapter when probe fails
drm/edid: fix invalid EDID extension block filtering
ath9k: fix ar9003_get_eepmisc
drm: bridge: it66121: Fix the register page length
ath11k: acquire ab->base_lock in unassign when finding the peer by addr
drm/vmwgfx: Fix an invalid read
dt-bindings: display: sitronix, st7735r: Fix backlight in example
drm/omap: fix NULL but dereferenced coccicheck error
drm/bridge_connector: enable HPD by default if supported
drm: fix EDID struct for old ARM OABI format
Input: gpio-keys - cancel delayed work only in case of GPIO
cifs: do not use tcpStatus after negotiate completes
RDMA/hfi1: Prevent panic when SDMA is disabled
smb3: check for null tcon
fanotify: fix incorrect fmode_t casts
powerpc/iommu: Add missing of_node_put in iommu_init_early_dart
macintosh/via-pmu: Fix build failure when CONFIG_INPUT is disabled
powerpc/powernv: fix missing of_node_put in uv_init()
powerpc/xics: fix refcount leak in icp_opal_init()
powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr
cifs: return ENOENT for DFS lookup_cache_entry()
tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate
alpha: fix alloc_zeroed_user_highpage_movable()
KVM: PPC: Book3S HV Nested: L2 LPCR should inherit L1 LPES setting
PCI: cadence: Clear FLR in device capabilities register
PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store()
powerpc/rtas: Keep MSR[RI] set when calling RTAS
PCI: microchip: Add missing chained_irq_enter()/exit() calls
cpufreq: Avoid unnecessary frequency updates due to mismatch
ARM: hisi: Add missing of_node_put after of_find_compatible_node
arm64: dts: qcom: sc7280-idp: Configure CTS pin to bias-bus-hold for bluetooth
ARM: dts: exynos: add atmel,24c128 fallback to Samsung EEPROM
ARM: versatile: Add missing of_node_put in dcscb_init
pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources()
fat: add ratelimit to fat*_ent_bread()
powerpc/fadump: Fix fadump to work with a different endian capture kernel
ARM: OMAP1: clock: Fix UART rate reporting algorithm
ALSA: usb-audio: Move generic implicit fb quirk entries into quirks.c
ALSA: usb-audio: Add quirk bits for enabling/disabling generic implicit fb
arm64: dts: qcom: sdm845-xiaomi-beryllium: fix typo in panel's vddio-supply property
fs: jfs: fix possible NULL pointer dereference in dbFree()
soc: ti: ti_sci_pm_domains: Check for null return of devm_kcalloc
crypto: qat - fix off-by-one error in PFVF debug print
crypto: ccree - use fine grained DMA mapping dir
PM / devfreq: rk3399_dmc: Disable edev on remove()
arm64: dts: qcom: msm8994: Fix BLSP[12]_DMA channels count
arm64: dts: qcom: msm8994: Fix the cont_splash_mem address
ASoC: amd: Add driver data to acp6x machine driver
ARM: dts: s5pv210: align DMA channels with dtschema
ARM: dts: socfpga: align interrupt controller node name with dtschema
ARM: dts: ox820: align interrupt controller node name with dtschema
PCI/ASPM: Make Intel DG2 L1 acceptable latency unlimited
IB/rdmavt: add missing locks in rvt_ruc_loopback
kunit: fix executor OOM error handling logic on non-UML
scsi: target: tcmu: Avoid holding XArray lock when calling lock_page
gfs2: use i_lock spin_lock for inode qadata
selftests/bpf: fix btf_dump/btf_dump due to recent clang change
char: tpm: cr50_i2c: Suppress duplicated error message in .remove()
eth: tg3: silence the GCC 12 array-bounds warning
afs: Adjust ACK interpretation to try and cope with NAT
rxrpc, afs: Fix selection of abort codes
rxrpc: Return an error to sendmsg if call failed
m68k: atari: Make Atari ROM port I/O write macros return void
selftests/bpf: Add missing trampoline program type to trampoline_count test
net: ipa: ignore endianness if there is no header
x86/microcode: Add explicit CPU vendor dependency
can: mcp251xfd: silence clang's -Wunaligned-access warning
nvme: set non-mdts limits in nvme_scan_work
ACPI: CPPC: Assume no transition latency if no PCCT
ASoC: rt1015p: remove dependency on GPIOLIB
ASoC: max98357a: remove dependency on GPIOLIB
blk-throttle: Set BIO_THROTTLED when bio has been throttled
of/fdt: Ignore disabled memory nodes
rtw89: cfo: check mac_id to avoid out-of-bounds
media: hantro: Stop using H.264 parameter pic_num
media: exynos4-is: Fix compile warning
net: phy: micrel: Allow probing without .driver_data
kunit: tool: make parser stop overwriting status of suites w/ no_tests
btrfs: fix anon_dev leak in create_subvol()
drm/amd/pm: update smartshift powerboost calc for smu13
drm/amd/pm: update smartshift powerboost calc for smu12
nbd: Fix hung on disconnect request if socket is closed before
ASoC: rt5645: Fix errorenous cleanup order
nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags
openrisc: start CPU timer early in boot
Bluetooth: btusb: Set HCI_QUIRK_BROKEN_ERR_DATA_REPORTING for QCA
Bluetooth: btusb: Set HCI_QUIRK_BROKEN_ENHANCED_SETUP_SYNC_CONN for QCA
Bluetooth: HCI: Add HCI_QUIRK_BROKEN_ENHANCED_SETUP_SYNC_CONN quirk
usbnet: Run unregister_netdev() before unbind() again
media: cec-adap.c: fix is_configuring state
media: imon: reorganize serialization
media: ccs-core.c: fix failure to call clk_disable_unprepare
media: hantro: HEVC: unconditionnaly set pps_{cb/cr}_qp_offset values
media: coda: limit frame interval enumeration to supported encoder frame sizes
media: rga: fix possible memory leak in rga_probe
mt76: fix encap offload ethernet type check
mt76: mt7921: accept rx frames with non-standard VHT MCS10-11
rtlwifi: Use pr_warn instead of WARN_ONCE
kunit: bail out of test filtering logic quicker if OOM
ipmi: Fix pr_fmt to avoid compilation issues
ipmi: Add an intializer for ipmi_smi_msg struct
ipmi:ssif: Check for NULL msg when handling events and messages
ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default
ASoC: SOF: amd: add missing platform_device_unregister in acp_pci_rn_probe
dma-debug: change allocation mode from GFP_NOWAIT to GFP_ATIOMIC
spi: stm32-qspi: Fix wait_cmd timeout in APM mode
sched/core: Avoid obvious double update_rq_clock warning
perf/amd/ibs: Cascade pmu init functions' return value
s390/preempt: disable __preempt_count_add() optimization for PROFILE_ALL_BRANCHES
net: remove two BUG() from skb_checksum_help()
scsi: lpfc: Alter FPIN stat accounting logic
scsi: hisi_sas: Undo RPM resume for failed notify phy event for v3 HW
net/mlx5: Increase FW pre-init timeout for health recovery
ASoC: tscs454: Add endianness flag in snd_soc_component_driver
of: Support more than one crash kernel regions for kexec -s
drm/tegra: gem: Do not try to dereference ERR_PTR()
HID: bigben: fix slab-out-of-bounds Write in bigben_probe
regulator: mt6315: Enforce regulator-compatible, not name
drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo
drm/amdgpu/psp: move PSP memory alloc from hw_init to sw_init
mlxsw: Treat LLDP packets as control
mlxsw: spectrum_dcb: Do not warn about priority changes
ASoC: dapm: Don't fold register value changes into notifications
net/mlx5: fs, delete the FTE when there are no rules attached to it
ipv6: Don't send rs packets to the interface of ARPHRD_TUNNEL
scsi: target: tcmu: Fix possible data corruption
ath11k: fix warning of not found station for bssid in message
xtensa: move trace_hardirqs_off call back to entry.S
drm/msm/dpu: Clean up CRC debug logs
drm: msm: fix error check return value of irq_of_parse_and_map()
arm64: compat: Do not treat syscall number as ESR_ELx for a bad syscall
ath10k: skip ath10k_halt during suspend for driver state RESTARTING
drm/amd/pm: fix the compile warning
drm/plane: Move range check for format_count earlier
ASoC: Intel: bytcr_rt5640: Add quirk for the HP Pro Tablet 408
ath11k: disable spectral scan during spectral deinit
scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp()
scsi: ufs: Use pm_runtime_resume_and_get() instead of pm_runtime_get_sync()
drm/amdgpu/sdma: Fix incorrect calculations of the wptr of the doorbells
scsi: megaraid: Fix error check return value of register_chrdev()
drivers: mmc: sdhci_am654: Add the quirk to set TESTCD bit
mmc: jz4740: Apply DMA engine limits to maximum segment size
md/bitmap: don't set sb values if can't pass sanity check
media: cx25821: Fix the warning when removing the module
media: pci: cx23885: Fix the error handling in cx23885_initdev()
media: venus: do not queue internal buffers from previous sequence
media: venus: hfi: avoid null dereference in deinit
media: Revert "media: dw9768: activate runtime PM and turn off device"
ath9k: fix QCA9561 PA bias level
ASoC: rsnd: care return value from rsnd_node_fixed_index()
ASoC: rsnd: care default case on rsnd_ssiu_busif_err_status_clear()
drm/amd/pm: fix double free in si_parse_power_table()
cpuidle: PSCI: Improve support for suspend-to-RAM for PSCI OSI mode
scsi: lpfc: Fix call trace observed during I/O with CMF enabled
scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock
scsi: lpfc: Move cfg_log_verbose check before calling lpfc_dmp_dbg()
tcp: consume incoming skb leading to a reset
tools/power turbostat: fix ICX DRAM power numbers
spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction
rtw88: 8821c: fix debugfs rssi value
rtw88: fix incorrect frequency reported
ALSA: jack: Access input_dev under mutex
sfc: ef10: Fix assigning negative value to unsigned variable
rcu: Make TASKS_RUDE_RCU select IRQ_WORK
rcu-tasks: Handle sparse cpu_possible_mask in rcu_tasks_invoke_cbs()
rcu-tasks: Fix race in schedule and flush work
drm/amd/display: Disabling Z10 on DCN31
drm/komeda: return early if drm_universal_plane_init() fails.
mac80211: minstrel_ht: fix where rate stats are stored (fixes debugfs output)
libbpf: Fix a bug with checking bpf_probe_read_kernel() support in old kernels
ACPICA: Avoid cache flush inside virtual machines
x86/platform/uv: Update TSC sync state for UV5
fbcon: Consistently protect deferred_takeover with console_lock()
ipv6: fix locking issues with loops over idev->addr_list
ipw2x00: Fix potential NULL dereference in libipw_xmit()
b43: Fix assigning negative value to unsigned variable
b43legacy: Fix assigning negative value to unsigned variable
mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue
ath11k: Change max no of active probe SSID and BSSID to fw capability
selftests/bpf: Fix parsing of prog types in UAPI hdr for bpftool sync
selftests/bpf: Fix vfs_link kprobe definition
drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes
ath11k: fix the warning of dev_wake in mhi_pm_disable_transition()
drm/vmwgfx: validate the screen formats
iommu/vt-d: Add RPLS to quirk list to skip TE disabling
btrfs: zoned: fix comparison of alloc_offset vs meta_write_pointer
btrfs: zoned: finish block group when there are no more allocatable bytes left
btrfs: zoned: zone finish unused block group
btrfs: zoned: properly finish block group on metadata write
btrfs: fix the error handling for submit_extent_page() for btrfs_do_readpage()
btrfs: repair super block num_devices automatically
btrfs: return correct error number for __extent_writepage_io()
btrfs: add "0x" prefix for unsupported optional features
ptrace: Reimplement PTRACE_KILL by always sending SIGKILL
ptrace/xtensa: Replace PT_SINGLESTEP with TIF_SINGLESTEP
ptrace/um: Replace PT_DTRACE with TIF_SINGLESTEP
kthread: Don't allocate kthread_struct for init and umh
x86/sgx: Set active memcg prior to shmem allocation
x86/kexec: fix memory leak of elf header buffer
perf/x86/intel: Fix event constraints for ICL
x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails
platform/x86: intel-hid: fix _DSM function index handling
xhci: Allow host runtime PM as default for Intel Alder Lake N xHCI
cifs: when extending a file with falloc we should make files not-sparse
cifs: fix potential double free during failed mount
cifs: fix ntlmssp on old servers
cifs: don't call cifs_dfs_query_info_nonascii_quirk() if nodfs was set
fs/ntfs3: Restore ntfs_xattr_get_acl and ntfs_xattr_set_acl functions
fs/ntfs3: Update i_ctime when xattr is added
fs/ntfs3: Fix some memory leaks in an error handling path of 'log_replay()'
fs/ntfs3: In function ntfs_set_acl_ex do not change inode->i_mode if called from function ntfs_init_acl
fs/ntfs3: Check new size for limits
fs/ntfs3: Keep preallocated only if option prealloc enabled
fs/ntfs3: Fix fiemap + fix shrink file size (to remove preallocated space)
fs/ntfs3: Update valid size if -EIOCBQUEUED
usb: core: hcd: Add support for deferring roothub registration
usb: dwc3: gadget: Move null pinter check to proper place
usb: isp1760: Fix out-of-bounds array access
USB: new quirk for Dell Gen 2 devices
USB: serial: option: add Quectel BG95 modem
USB: serial: pl2303: fix type detection for odd device
ALSA: usb-audio: Cancel pending work at closing a MIDI substream
ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS
ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9520 laptop
ALSA: hda/realtek - Add new type for ALC245
riscv: Move alternative length validation into subsection
riscv: Wire up memfd_secret in UAPI header
riscv: Fix irq_work when SMP is disabled
riscv: Initialize thread pointer before calling C functions
RISC-V: Mark IORESOURCE_EXCLUSIVE for reserved mem instead of IORESOURCE_BUSY
parisc/stifb: Keep track of hardware path of graphics card
parisc/stifb: Implement fb_is_primary_device()
binfmt_flat: do not stop relocating GOT entries prematurely on riscv