Merge tag 'android13-5.15.182_r00' into android13-5.15

This merges the android13-5.15.182_r00 tag into the android13-5.15 branch,
catching it up with the latest LTS releases.

It contains the following commits:

*   57725b368731 Merge 5.15.182 into android13-5.15-lts
|\
| * 3b8db0e4f263 Linux 5.15.182
| * 4226622647e3 scsi: target: Fix WRITE_SAME No Data Buffer crash
| * aaa763ab8cec dm: fix copying after src array boundaries
| * 655e607898f8 iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream ids
| * 6077d3a53d99 iommu/arm-smmu-v3: Use the new rb tree helpers
| * f95659affee3 irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
| * 073b77f8619f irqchip/gic-v2m: Mark a few functions __init
| * 5883bcce0ca5 irqchip/gic-v2m: Add const to of_device_id
| * cdde591d23f4 Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates"
| * 853e14cf36f6 net: phy: microchip: force IRQ polling mode for lan88xx
| * d7084c39aed6 ARM: dts: opos6ul: add ksz8081 phy properties
| * 91ff1e9652fb firmware: arm_scmi: Balance device refcount when destroying devices
| * d9f609cb50eb net: hns3: fix deadlock issue when externel_lb and reset are executed together
| * c7f24b7d9454 of: module: add buffer overflow check in of_modalias()
| * cc826a9e1e4e PCI: imx6: Skip controller_id generation logic for i.MX7D
| * 21491989477a net: hns3: defer calling ptp_clock_register()
| * 19a68aa1b993 net: hns3: fixed debugfs tm_qset size
| * a059cef34d73 net: hns3: fix an interrupt residual problem
| * 85fc1d802edf net: hns3: add support for external loopback test
| * 796f64db86d1 net: hns3: store rx VLAN tag offload state for VF
| * 6bed80284c17 net: fec: ERR007885 Workaround for conventional TX
| * df993daa4c96 net: lan743x: Fix memleak issue when GSO enabled
| * f21fb533fc3e nvme-tcp: fix premature queue removal and I/O failover
| * dd008c029fdb bnxt_en: Fix ethtool -d byte order for 32-bit values
| * 69b10dd23ab8 bnxt_en: Fix out-of-bound memcpy() during ethtool -w
| * f4f30f64f7ae bnxt_en: Fix coredump logic to free allocated buffer
| * 15cb7eab09fe net: ipv6: fix UDPv6 GSO segmentation with NAT
| * 6b732322eb65 net: dlink: Correct endianness handling of led_mode
| * a32dcc3b8293 ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr()
| * e06e4cdfb65e ice: Refactor promiscuous functions
| * 0bf32d6fb1fc net_sched: qfq: Fix double list add in class with netem as child qdisc
| * 554acc5a2ea9 net_sched: ets: Fix double list add in class with netem as child qdisc
| * e3e949a39a91 net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
| * 2968632880f1 net_sched: drr: Fix double list add in class with netem as child qdisc
| * 6884fc89d3fc net: ethernet: mtk-star-emac: rearm interrupts in rx_poll only when advised
| * bedd287fdd31 net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll
| * 97da99868573 net: ethernet: mtk-star-emac: separate tx/rx handling with two NAPIs
| * 688fff006fd1 net/mlx5: E-switch, Fix error handling for enabling roce
| * 225ee358a4ed net/mlx5: E-Switch, Initialize MAC Address for Default GID
| * 9d3ef89b6a5e net/sched: act_mirred: don't override retval if we already lost the skb
| * 9efb2b99b96c KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop
| * 1a3f9482b50b tracing: Fix oob write in trace_seq_to_buffer()
| * 8ba0bfe23917 iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57)
| * 466d9da26707 iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
| * 4df67fb22782 dm: always update the array size in realloc_argv on success
| * 526530ec0058 dm-integrity: fix a warning on invalid table line
| * 508be7c00143 wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
| * 113304ce7e8a mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe
| * d5a69c78c9cc amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload
| * ec4584495868 parisc: Fix double SIGFPE crash
| * 6266b3509b2c arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
| * f0d2cca416c6 i2c: imx-lpi2c: Fix clock count when probe defers
| * b98f280fa8c1 EDAC/altera: Set DDR and SDMMC interrupt mask before registration
| * 72d3974ed3a8 EDAC/altera: Test the correct error reg offset
| * 2ec0f5f6d476 drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()
| * 169346d866dc ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset
* | f93c8b5a9e60 ANDROID: GKI: fix up crc issue in crypto_get_default_null_skcipher()
* | 848052fee32b Revert "blk-cgroup: support to track if policy is online"
* | 3d3ca0cdbd95 Revert "blk-iocost: do not WARN if iocg was already offlined"
* | b265f919d07d Revert "net: defer final 'struct net' free in netns dismantle"
* | 3aa7ef4ef48a Revert "auxdisplay: hd44780: Convert to platform remove callback returning void"
* | 5e307ac5e3a8 Revert "auxdisplay: hd44780: Fix an API misuse in hd44780.c"
* | 4763e1e90b01 Revert "backlight: led_bl: Convert to platform remove callback returning void"
* | 04cd3e94ad19 Revert "module: sign with sha512 instead of sha1 by default"
* | 37552cf67517 Merge 5.15.181 into android13-5.15-lts
|\|
| * 16fdf2c7111b Linux 5.15.181
| * 26277a425020 PCI: Release resource invalidated by coalescing
| * e4af080f3ef6 PCI: Fix dropping valid root bus resources with .end = zero
| * ad367516b1c0 PCI: Fix use-after-free in pci_bus_release_domain_nr()
| * 1f7fb4247d90 nvme: fixup scan failure for non-ANA multipath controllers
| * d2e15c2fd913 MIPS: cm: Fix warning if MIPS_CM is disabled
| * c82ca029b29f xdp: Reset bpf_redirect_info before running a xdp's BPF prog.
| * 43c296870740 drm/amd/display: fix double free issue during amdgpu module unload
| * bb6b2175b606 net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family
| * 527978c76ef2 net: dsa: mv88e6xxx: enable PVT for 6321 switch
| * 7a10a6b17401 net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
| * 3ea027203778 crypto: atmel-sha204a - Set hwrng quality to lowest possible
| * 4e386645bc01 comedi: jr3_pci: Fix synchronous deletion of timer
| * a1166e98d80c jfs: define xtree root and page independently
| * 2ddd4a7a8b0f md/raid1: Add check for missing source disk in process_checks()
| * e5e274f64f32 ubsan: Fix panic from test_ubsan_out_of_bounds
| * 7dd6ab7f467c loop: aio inherit the ioprio of original request
| * 1d8f9378cb48 scsi: pm80xx: Set phy_attached to zero when device is gone
| * 47e8efd6c623 scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
| * 4b7bdc2efa11 ext4: make block validity check resistent to sb bh corruption
| * 0773465fbe1b nvmet-fc: put ref when assoc->del_work is already scheduled
| * 33acc9c2d1e4 nvmet-fc: take tgtport reference only once
| * b6a2cd26bcb9 x86/bugs: Don't fill RSB on context switch with eIBRS
| * a71d88ae28ef x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
| * 56332c566f36 x86/bugs: Use SBPB in write_ibpb() if applicable
| * 33f046d7c8d3 selftests/mincore: Allow read-ahead pages to reach the end of the file
| * 3e70fa900584 objtool: Stop UNRET validation on UD2
| * d2830ae38358 nvme: re-read ANA log page after ns scan completes
| * 26671f662eda ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
| * 5a8389206cd4 nvme: requeue namespace scan on missed AENs
| * bbe7c3b33292 xen: Change xen-acpi-processor dom0 dependency
| * 605de05255b3 selftests: ublk: fix test_stripe_04
| * 373512760e13 udmabuf: fix a buf size overflow issue during udmabuf creation
| * 4da2a94ed523 KVM: s390: Don't use %pK through tracepoints
| * 20a3cec623fa sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
| * 40845d9146b9 ntb: reduce stack usage in idt_scan_mws
| * 5fe708c5e3c8 qibfs: fix _another_ leak
| * 1640c9b81d66 objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler()
| * d26a6093d529 usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
| * 3a259d74f57a usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running
| * 0725a991727d dmaengine: dmatest: Fix dmatest waiting less when interrupted
| * e03b10c45c76 sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
| * 059d35a7393c usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
| * 423e146ed630 fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
| * e10e634ee40f usb: host: max3421-hcd: Add missing spi_device_id table
| * d9ef9664e44e s390/tty: Fix a potential memory leak bug
| * e1e00dc45648 s390/sclp: Add check for get_zeroed_page()
| * 6992fb10dff2 parisc: PDT: Fix missing prototype warning
| * aa36ec5d96c9 clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
| * 1dd4a8561d85 crypto: null - Use spin lock instead of mutex
| * 10829b24512a MIPS: cm: Detect CM quirks from device tree
| * 809fce49f0b6 USB: wdm: add annotation
| * 6261b99ef0ed USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
| * b02a3fef3e8c USB: wdm: close race between wdm_open and wdm_wwan_port_stop
| * 17dd48b3f6f2 USB: wdm: handle IO errors in wdm_wwan_port_start
| * 68be90d3d1aa USB: VLI disk crashes if LPM is used
| * 394ff4699263 usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
| * 50d68345d467 usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
| * c0079630f268 usb: dwc3: gadget: check that event count does not exceed event buffer length
| * a143ed263d51 USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
| * 3ec61fa704a4 usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
| * 24b808d7516f usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
| * 8060b719676e usb: chipidea: ci_hdrc_imx: fix usbmisc handling
| * b96239582531 usb: cdns3: Fix deadlock when using NCM gadget
| * 94df04953061 USB: serial: simple: add OWON HDS200 series oscilloscope support
| * 82e841dc1eaf USB: serial: option: add Sierra Wireless EM9291
| * 184cdaa3ea5f USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
| * b59c7fefded5 serial: sifive: lock port in startup()/shutdown() callbacks
| * 116c7d35b8f7 KVM: x86: Reset IRTE to host control if *new* route isn't postable
| * 26ccc791de50 mei: me: add panther lake H DID
| * 843a6fc56e71 USB: storage: quirk for ADATA Portable HDD CH94
| * 59f993cd36b6 mcb: fix a double free bug in chameleon_parse_gdd()
| * 95a34125831e KVM: SVM: Allocate IR data using atomic allocation
| * aeba2e15c873 drm/amd/display: Fix gpu reset in multidisplay config
| * a14b254c35fe net: selftests: initialize TCP header and skb payload with zero
| * bef170d651d3 virtio_console: fix missing byte order handling for cols and rows
| * c71ab87a2523 iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
| * da7936518996 net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
| * fcc8ede66356 net_sched: hfsc: Fix a UAF vulnerability in class handling
| * 5fd464fd24de tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
| * 663c3da86e80 net: phy: leds: fix memory leak
| * 46a35fe74bae cpufreq: cppc: Fix invalid return value in .get() callback
| * 8fbaa76690f6 cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
| * 4e3d1c1925d8 cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
| * ad03f3f852df dma/contiguous: avoid warning about unused size_bytes
| * c049376c76d1 drm/msm/a6xx: Fix stale rpmh votes from GPU
| * cac1786e41b4 drm/msm/a6xx: Avoid gx gbit halt during rpm suspend
| * d5572d3d0034 drm/msm/a6xx: Handle GMU prepare-slumber hfi failure
| * c8064e9c334f drm/msm/a6xx: Improve gpu recovery sequence
| * 14c96391dff0 string: Add load_unaligned_zeropad() code path to sized_strscpy()
| * 039b1d64c8ea kmsan: disable strscpy() optimization under KMSAN
| * f124c35b4a36 selftests/mm: generate a temporary mountpoint for cgroup filesystem
| * fbf43c9e237c ksmbd: Prevent integer overflow in calculation of deadtime
| * 3297497ad224 PCI: Fix reference leak in pci_register_host_bridge()
| * db273126bf54 PCI: Assign PCI domain IDs by ida_alloc()
| * fd168b7d1d7c PCI: Coalesce host bridge contiguous apertures
| * 786474c9dadf gpio: tegra186: fix resource handling in ACPI probe path
| * bc121680d4eb gpio: tegra186: Force one interrupt per bank
| * 32d554841024 cifs: fix integer overflow in match_server()
| * 9c9000cb91b9 cifs: avoid NULL pointer dereference in dbg call
| * 0f552a0a33db cifs: print TIDs as hex
| * 74c7d67a3c30 backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
| * 28d49aeb7760 backlight: led_bl: Convert to platform remove callback returning void
| * 9d708a3b72b0 iio: adc: ad7768-1: Fix conversion result sign
| * fda3b0b782c8 iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check
| * 8ee067cf0cf8 soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
| * c6f24e85919e soc: samsung: exynos-chipid: Pass revision reg offsets
| * 75dd8356b681 soc: samsung: exynos-chipid: avoid soc_device_to_device()
| * f54829389feb net: dsa: mv88e6xxx: fix VTU methods for 6320 family
| * 36771754d618 auxdisplay: hd44780: Fix an API misuse in hd44780.c
| * 959b07fb28b0 auxdisplay: hd44780: Convert to platform remove callback returning void
| * f1d518c0bad0 media: streamzap: fix race between device disconnection and urb callback
| * a5d7d89ac48a media: streamzap: remove unused struct members
| * b608bd3b51c0 media: streamzap: less chatter
| * 6dd4cf3ece54 media: streamzap: no need for usb pid/vid in device name
| * fa5fec7f1555 media: streamzap: remove unnecessary ir_raw_event_reset and handle
| * ed4ee9639b07 module: sign with sha512 instead of sha1 by default
| * 74a466a15731 Bluetooth: SCO: Fix UAF on sco_sock_timeout
| * e7d3a0c7bf77 f2fs: Add inline to f2fs_build_fault_attr() stub
| * c7dc74ab7975 scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
| * 984212fa6b4b pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
| * 6e5b601706ce f2fs: check validation of fault attrs in f2fs_build_fault_attr()
| * eac1e7e1705f mm: fix apply_to_existing_page_range()
| * 0c35d1914353 fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats
| * 7d21587d35bc drm/i915/gt: Cleanup partial engine discovery failures
| * d154b333a566 dm cache: fix flushing uninitialized delayed_work on cache_ctr error
| * 4de2c04c3acd jfs: Fix shift-out-of-bounds in dbDiscardAG
| * 500f00c80637 MIPS: ds1287: Match ds1287_set_base_clock() function types
| * 9aad60a2e686 MIPS: cevt-ds1287: Add missing ds1287.h include
| * dd0e9415ff0c MIPS: dec: Declare which_prom() as static
| * dac465986a4a net: defer final 'struct net' free in netns dismantle
| * 22018622e1e9 scsi: ufs: bsg: Set bsg_queue to NULL after removal
| * 6e9ed2f4721e scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan()
| * 930268823f6b openvswitch: fix lockup on tx to unregistering netdev with carrier
| * 5efcb301523b net: openvswitch: fix race on port output
| * 211168339657 ipvs: properly dereference pe in ip_vs_add_service
| * 22e9b83f0f33 ext4: fix timer use-after-free on failed mount
| * 7d215e013d09 blk-iocost: do not WARN if iocg was already offlined
| * d20f28f00770 blk-cgroup: support to track if policy is online
| * 3516f93cc63d bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
| * 0d90d9e15414 bpf: avoid holding freeze_mutex during mmap operation
| * 82e813b12b10 sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
| * bb6570085826 smb: client: fix potential UAF in cifs_stats_proc_show()
| * ce49569079a9 smb: client: fix potential deadlock when releasing mids
| * 878f32878351 smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
| * 4a788ebbb10d smb: client: fix NULL ptr deref in crypto_aead_setkey()
| * ef51c0d544b1 smb: client: fix UAF in async decryption
| * ed3b36f351d9 cifs: Fix UAF in cifs_demultiplex_thread()
| * 336a066990bb smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
| * 58de45f4d663 net: make sock_inuse_add() available
| * 480469f145e5 ksmbd: fix potencial out-of-bounds when buffer offset is invalid
| * d798fd98e356 smb: client: fix potential UAF in cifs_dump_full_key()
| * d54fdcf171f0 nvmet-fc: Remove unused functions
| * 6955fd3a6fb9 landlock: Add the errata interface
| * 3cc1116de109 drm/amdgpu: fix usage slab after free
| * fcf9d6a9f30e drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing
| * b19ca8425a4b drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
| * e3cd0d8362de drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
| * 27fda36eedad wifi: ath10k: avoid NULL pointer error during sdio remove
| * c1cbf006feee phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
| * a262c2dc833f powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
| * d1c85e262c16 x86/pvh: Call C code via the kernel virtual mapping
| * 386617efacab net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
| * 66a9937187ac bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
| * 7d3914a477ee phonet/pep: fix racy skb_queue_empty() use
| * 6cc52df69e84 filemap: Fix bounds checking in filemap_read()
| * 90c8482a5d97 net: fix crash when config small gso_max_size/gso_ipv4_max_size
| * 77aa9855a878 ipv6: release nexthop on device removal
| * f241e4a78f6a misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type
| * 30f2cd70c4f9 misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error
| * 54c9f299ad7d misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error
| * 980a236af12f mptcp: sockopt: fix getting IPV6_V6ONLY
| * 8fbd9487f676 kbuild: Add '-fno-builtin-wcslen'
| * 5d3779ceaac8 cpufreq: Reference count policy in cpufreq_update_limits()
* | 57b1420d5e49 Merge 93cc7c7f9b83 ("KVM: arm64: Eagerly switch ZCR_EL{1,2}") into android13-5.15-lts
|\|
| * 93cc7c7f9b83 KVM: arm64: Eagerly switch ZCR_EL{1,2}
| * ec3efc04a6ce KVM: arm64: Calculate cptr_el2 traps on activating traps
| * 52a473ba8330 KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN
| * 08ce0d1ee622 KVM: arm64: Remove host FPSIMD saving for non-protected KVM
| * 5289ac43b69c KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
| * 978c0ccf80ce arm64/fpsimd: Stop using TIF_SVE to manage register saving in KVM
| * 6b3d37c9c61e arm64/fpsimd: Have KVM explicitly say which FP registers to save
| * 8be8ba9cf1df arm64/fpsimd: Track the saved FPSIMD state type separately to TIF_SVE
| * c4ab60a86c5e KVM: arm64: Discard any SVE state when entering KVM guests
| * 58ed930115b8 KVM: arm64: Always start with clearing SVE flag on load
| * a2231da36777 KVM: arm64: Get rid of host SVE tracking/saving
* | 9014c95bfd32 UPSTREAM: arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
* | 889c14cafb2c Merge 2f420df780c5 ("drm/sti: remove duplicate object names") into android13-5.15-lts
|\|
| * 2f420df780c5 drm/sti: remove duplicate object names
| * ada78110b2d3 drm/nouveau: prime: fix ttm_bo_delayed_delete oops
| * 4941966558a0 drm/amdgpu/dma_buf: fix page_link check
| * 80814924260c drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
| * f2904fa2b9da drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero
| * be0fffc4152a drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
| * 0c02fcbe4a13 drm/amd/pm/powerplay: Prevent division by zero
| * b7c41df49137 drm/amd/pm: Prevent division by zero
| * c177517ea65c drm/repaper: fix integer overflows in repeat functions
| * 3d81ec24e7db perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR
| * 93c5be4da097 perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX
| * 609ed2fcc9b5 perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR
| * b55b385b3938 perf/x86/intel: Allow to update user space GPRs from PEBS records
| * 5ee09cdaf341 virtiofs: add filesystem context source name check
| * aac80c3e05cb tracing: Fix filter string testing
| * e5467a695337 riscv: Avoid fortify warning in syscall_get_arguments()
| * 7596182dc17f mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable()
| * 6b563dc85fb3 loop: LOOP_SET_FD: send uevents for partitions
| * 81565d0986a9 loop: properly send KOBJ_CHANGED uevent for disk device
| * 63d5a3e207bf isofs: Prevent the use of too small fid
| * cd83035b6f2a i2c: cros-ec-tunnel: defer probe if parent EC is not present
| * a33c035df01d hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
| * 877ee3ba2f78 crypto: caam/qi - Fix drv_ctx refcount bug
| * cdd459a58bb6 btrfs: correctly escape subvol in btrfs_show_options()
| * a70832d35559 nfsd: decrease sc_count directly if fail to queue dl_recall
| * bf5f65aebeaf nfs: add missing selections of CONFIG_CRC32
| * 72f7ccad7ed5 nfs: move nfs_fhandle_hash to common include file
| * 41a125eb52d6 asus-laptop: Fix an uninitialized variable
| * 442a0ab6a4e9 ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels
| * 1a19d2306753 ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate
| * 440225ed4fbb Revert "PCI: Avoid reset when disabled via sysfs"
| * 2b109b99d45f writeback: fix false warning in inode_to_wb()
| * 9ac9ad08723d cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
| * 6bc390b02d4b riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break
| * 854d0f048ead riscv: KGDB: Do not inline arch_kgdb_breakpoint()
| * 3c03e585860a riscv: Properly export reserved regions in /proc/iomem
| * 9ea760991c11 net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails
| * 8ccdf5e24b27 net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered
| * f7b3bddffff2 net: b53: enable BPDU reception for management port
| * 118d05b53034 cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
| * a27526e6b48e net: openvswitch: fix nested key length validation in the set() action
| * 5c1313b93c8c net: mctp: Set SOCK_RCU_FREE
| * 18924cdfea58 igc: cleanup PTP module if probe fails
| * 7d2d77e51371 igc: handle the IGC_PTP_ENABLED flag correctly
| * 5572511776d4 igc: move ktime snapshot into PTM retry loop
| * c1f174edaccc igc: fix PTM cycle trigger logic
| * 6d16d6cb212f Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
| * 24b2cdfc16e9 Bluetooth: l2cap: Check encryption key size on incoming connection
| * 2d7c60c2a38b Bluetooth: btrtl: Prevent potential NULL dereference
| * 056f04935bd8 Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
| * 791daf8240ce RDMA/core: Silence oversized kvmalloc() warning
| * bb93bd4b9920 RDMA/hns: Fix wrong maximum DMA segment size
| * 3af43d7282a8 RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
| * e2c440b23f21 md/raid10: fix missing discard IO accounting
| * f89ab86401c9 scsi: iscsi: Fix missing scsi_host_put() in error path
| * 2996144be660 wifi: wl1251: fix memory leak in wl1251_tx_work
| * 305741e7e632 wifi: mac80211: Purge vif txq in ieee80211_do_stop()
| * 9d00c0a807a3 wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
| * 3c619aec1f53 wifi: at76c50x: fix use after free access in at76_disconnect
| * 00999e369e9e scsi: hisi_sas: Enable force phy when SATA disk directly connected
| * 31676d55028a scsi: libsas: Add struct sas_tmf_task
| * 42bbb529955c scsi: libsas: Delete lldd_clear_aca callback
| * 04bbb1b72b55 scsi: hisi_sas: Fix setting of hisi_sas_slot.is_internal
| * 8b8e6d433bd9 scsi: hisi_sas: Factor out task prep and delivery code
| * 6587850b8827 scsi: hisi_sas: Pass abort structure for internal abort
| * 9ebfa3eb9d52 scsi: hisi_sas: Start delivery hisi_sas_task_exec() directly
| * 9e5a0f577716 Bluetooth: hci_uart: Fix another race during initialization
| * e8ea4dd6659f x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions()
| * fb627b8fe4d7 ACPI: platform-profile: Fix CFI violation when accessing sysfs files
| * 46e22de65eb4 arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists
| * 72972552d0d0 HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition
| * 9242391c20b1 pinctrl: qcom: Clear latched interrupt status when changing IRQ type
| * 40c4c64507fe PCI: Fix reference leak in pci_alloc_child_bus()
| * 8730a3c6f0f1 PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
| * fa4d10970ea3 of/irq: Fix device node refcount leakages in of_irq_init()
| * 90d3d651b985 of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
| * 52f0888eff56 of/irq: Fix device node refcount leakages in of_irq_count()
| * bd8f17219533 ntb: use 64-bit arithmetic for the MSI doorbell mask
| * 94c1cf839b7a gpio: zynq: Fix wakeup source leaks on device unbind
| * dd38803c9088 ftrace: Add cond_resched() to ftrace_graph_set_hash()
| * 422dd984f7ef dm-integrity: set ti->error on memory allocation failure
| * 9c5eedb065fa crypto: ccp - Fix check for the primary ASP device
| * 2e794415ff7f thermal/drivers/rockchip: Add missing rk3328 mapping entry
| * 0f7df4899299 sctp: detect and prevent references to a freed transport in sendmsg
| * 20035e675ca0 mm/hwpoison: do not send SIGBUS to processes with recovered clean pages
| * f3509cecd0fd mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock
| * 7de3726a3afd sparc/mm: disable preemption in lazy mmu mode
| * 66a10239be04 arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
| * 2dd21fc16490 mtd: rawnand: Add status chack in r852_ready()
| * e7d6ceff95c5 mtd: inftlcore: Add error check for inftl_read_oob()
| * cef678a27711 mptcp: only inc MPJoinAckHMacFailure for HMAC failures
| * b3088bd2a679 mptcp: fix NULL pointer in can_accept_new_subflow
| * 9ce88838fcea lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets
| * 031b53078e88 locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
| * 90ee23c2514a mfd: ene-kb3930: Fix a potential NULL pointer dereference
| * ad926f735b4d jbd2: remove wrong sb->s_sequence check
| * 3ba402610843 i3c: Add NULL pointer check in i3c_master_queue_ibi()
| * c658e1302ee3 i3c: master: svc: Use readsb helper for reading MDB
| * 5d74f8a5fb3c vdpa/mlx5: Fix oversized null mkey longer than 32bit
| * 2883e9e74f73 ext4: fix off-by-one error in do_split
| * 899d0353ea69 bus: mhi: host: Fix race between unprepare and queue_buf
| * 65cc93278f69 ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path
| * 9ae11b06c557 wifi: mac80211: fix integer overflow in hwmp_route_info_get()
| * 977fb8126e5c wifi: mt76: Add check for devm_kstrdup()
| * 8f80ade0f6ea clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup
| * c1e3583fb61f mtd: Replace kcalloc() with devm_kcalloc()
| * ef922b40bb6d net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family
| * 8f8ed592d8a1 mtd: Add check for devm_kcalloc()
| * f195e94c7af9 media: venus: hfi_parser: refactor hfi packet parsing logic
| * 1ad6aa1464b8 media: venus: hfi_parser: add check to avoid out of bound access
| * 08ac0e22e456 media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
| * e8396890db79 media: i2c: ov7251: Set enable GPIO low in probe
| * 7c3118db4998 media: i2c: ccs: Set the device's runtime PM status correctly in probe
| * 5a6b5aa8ebc1 media: i2c: ccs: Set the device's runtime PM status correctly in remove
| * 457a61c59856 media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
| * 432f748824b6 media: streamzap: prevent processing IR data on URB failure
| * fbcb584efa5c mtd: rawnand: brcmnand: fix PM resume warning
| * b88004318aeb spi: cadence-qspi: Fix probe on AM62A LP SK
| * 0b08172a635d arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
| * 8cb58a817a45 arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
| * 1a646a6206e0 arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
| * f6ea5a8a5344 arm64: cputype: Add MIDR_CORTEX_A76AE
| * 09a128539129 xenfs/xensyms: respect hypervisor's "next" indication
| * b98fbad6abda media: siano: Fix error handling in smsdvb_module_init()
| * 680cc5303f7c media: vim2m: print device name after registering device
| * 32af5c1fdb9b media: venus: hfi: add check to handle incorrect queue size
| * 1b8fb257234e media: venus: hfi: add a check to handle OOB in sfr region
| * 83724b88175c media: i2c: adv748x: Fix test pattern selection mask
| * 84f2ca8d5f2d ext4: don't treat fhandle lookup of ea_inode as FS corruption
| * 8273ae803009 bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
| * 831062d76d37 bpf: Add endian modifiers to fix endian warnings
| * ed6ff2d48873 pwm: fsl-ftm: Handle clk_get_rate() returning 0
| * 1f45022f219b pwm: rcar: Improve register calculation
| * dc12f37acbc3 pwm: rcar: Simplify multiplication/shift logic
| * e3cf0c38d3ce pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
| * 7fa3d93d4d29 ktest: Fix Test Failures Due to Missing LOG_FILE Directories
| * 09dbf22fd68c fbdev: omapfb: Add 'plane' value check
| * c250262d6485 PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
| * 1690b4949247 drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
| * 25c299517d58 drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
| * 62b3040a1a29 drm/amdkfd: clamp queue size to minimum
| * 0236f723b445 drivers: base: devres: Allow to release group on device release
| * e2dacf842095 drm/bridge: panel: forbid initializing a panel with unknown connector type
| * e33d1037fd89 drm: panel-orientation-quirks: Add new quirk for GPD Win 2
| * b60523a75c2b drm: panel-orientation-quirks: Add support for AYANEO 2S
| * cc301b9d48ab drm/amd/display: Update Cursor request mode to the beginning prefetch always
| * 0a5ba5e28b7b drm: allow encoder mode_set even when connectors change for crtc
| * d71a57a34ab6 Bluetooth: hci_uart: fix race during initialization
| * effeecfe60fc tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER
| * 523fa0979d84 net: vlan: don't propagate flags on open
| * 5a194041bffd wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
| * c6015d0f7a22 scsi: st: Fix array overflow in st_setup()
| * f737418b6de3 ext4: ignore xattrs past end
| * 1648029cd302 ext4: protect ext4_release_dquot against freezing
| * fd4c73a2669c ahci: add PCI ID for Marvell 88SE9215 SATA Controller
| * 67e16ccba74d f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
| * 714036b176ba ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
| * a741f29ac8b6 jfs: add sanity check for agwidth in dbMount
| * 86bfeaa18f9e jfs: Prevent copying of nlink with value 0 from disk inode
| * 3d8a45f87010 fs/jfs: Prevent integer overflow in AG size calculation
| * 761e36cf8c86 fs/jfs: cast inactags to s64 to prevent potential overflow
| * 4f10732712fc jfs: Fix uninit-value access of imap allocated in the diMount() function
| * 91522aba56e9 page_pool: avoid infinite loop to schedule delayed worker
| * 691d45955eda ALSA: usb-audio: Fix CME quirk for UF series keyboards
| * c30b45c78e1a ASoC: fsl_audmix: register card device depends on 'dais' property
| * 81b19dc8ad80 ALSA: hda: intel: Fix Optimus when GPU has no sound
| * 6b4449e4f033 HID: pidff: Fix null pointer dereference in pidff_find_fields
| * 4c5f8e594657 HID: pidff: Do not send effect envelope if it's empty
| * b5d9c541ad33 HID: pidff: Convert infinite length from Linux API to PID standard
| * 01e1c8a26ea3 xen/mcelog: Add __nonstring annotations for unterminated strings
| * 595a9e7b8cda arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
| * 016cc0079e74 perf: arm_pmu: Don't disable counter in armpmu_add()
| * 4162ed24d454 x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine
| * 0e297a02e03d pm: cpupower: bench: Prevent NULL dereference on malloc failure
| * c2077a80caf2 umount: Allow superblock owners to force umount
| * d504882159a2 nft_set_pipapo: fix incorrect avx2 match of 5th field octet
| * 99aa698dec34 net: ppp: Add bound checking for skb data on ppp_sync_txmung
| * e342ea4ce54f nvmet-fcloop: swap list_add_tail arguments
| * bea745327f00 ata: sata_sx4: Add error handling in pdc20621_i2c_read()
| * 3c1c0a8c1a07 ata: sata_sx4: Drop pointless VPRINTK() calls and convert the remaining ones
| * 81a5174e64ce net: ethtool: Don't call .cleanup_data when prepare_data fails
| * ac91c6125468 net: tls: explicitly disallow disconnect
| * ed06675d3b8c tipc: fix memory leak in tipc_link_xmit
| * d0d720f92828 ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
* 88c4075c39ed Merge branch 'android13-5.15' into android13-5.15-lts

Change-Id: I79075ccaa252c934475426a312fc36e656275745
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>