merge-upstream/v5.15.180 from branch/tag: upstream/v5.15.180 into branch: main-R105-cos-5.15

Changelog:
-------------------------------------------------------------

Acs, Jakub (1):
      ext4: fix OOB read when checking dotdot dir

Al Viro (2):
      spufs: fix a leak on spufs_new_file() failure
      spufs: fix a leak in spufs_create_context()

Alex Hung (1):
      drm/amd/display: Assign normalized_pix_clk when color depth = 14

Alexey Kashavkin (1):
      netfilter: nft_exthdr: fix offset with ipv4_find_option()

Alistair Popple (1):
      fuse: fix dax truncate/punch_hole fault path

Andreas Kemnade (1):
      i2c: omap: fix IRQ storms

Andrii Nakryiko (2):
      lib/buildid: Handle memfd_secret() files in build_id_parse()
      libbpf: Fix hypothetical STT_SECTION extern NULL deref case

Andy Shevchenko (1):
      hrtimers: Mark is_migration_base() with __always_inline

AngeloGioacchino Del Regno (2):
      drm/mediatek: mtk_hdmi: Unregister audio platform device on failure
      drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member

Arnaldo Carvalho de Melo (5):
      perf units: Fix insufficient array space
      perf python: Fixup description of sample.id event member
      perf python: Decrement the refcount of just created event on failure
      perf python: Don't keep a raw_data pointer to consumed ring buffer space
      perf python: Check if there is space to copy all the event

Arnd Bergmann (3):
      x86/irq: Define trace events conditionally
      x86/platform: Only allow CONFIG_EISA for 32-bit
      mdacon: rework dependency list

Arthur Mongodin (1):
      mptcp: Fix data stream corruption in the address announcement

Artur Weber (2):
      pinctrl: bcm281xx: Fix incorrect regmap max_registers value
      power: supply: max77693: Fix wrong conversion of charge input threshold value

Barnabás Czémán (1):
      clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock

Bart Van Assche (1):
      fs/procfs: fix the comment above proc_pid_wchan()

Benjamin Berg (1):
      x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct()

Boon Khai Ng (1):
      USB: serial: ftdi_sio: add support for Altera USB Blaster 3

Brahmajit Das (1):
      vboxsf: fix building with GCC 15

Breno Leitao (1):
      netpoll: hold rcu read lock in __netpoll_send_skb()

Cameron Williams (2):
      tty: serial: 8250: Add some more device IDs
      tty: serial: 8250: Add Brainboxes XC devices

Carolina Jubran (1):
      net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices

Charles Keepax (1):
      ASoC: ops: Consistently treat platform_max as control value

Chengchang Tang (1):
      RDMA/hns: Remove redundant 'phy_addr' in hns_roce_hem_list_find_mtt()

Chengen Du (1):
      iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()

Chenyuan Yang (1):
      thermal: int340x: Add NULL check for adev

Chia-Lin Kao (AceLan) (1):
      HID: ignore non-functional sensor in HP 5MP Camera

Christian Eggers (1):
      regulator: check that dummy regulator has been probed before using it

Christophe JAILLET (4):
      ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
      i2c: ali1535: Fix an error handling path in ali1535_probe()
      i2c: ali15x3: Fix an error handling path in ali15x3_probe()
      i2c: sis630: Fix an error handling path in sis630_probe()

Chuck Lever (1):
      NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up

Cong Wang (2):
      net_sched: Prevent creation of classes with TC_H_ROOT
      net_sched: skbprio: Remove overly strict queue assertions

Cosmin Ratiu (1):
      xfrm_output: Force software GSO only in tunnel mode

Dan Carpenter (6):
      ipvs: prevent integer overflow in do_ip_vs_get_ctl()
      Bluetooth: Fix error code in chan_alloc_skb_cb()
      net: atm: fix use after free in lec_send()
      PCI: Remove stray put_device() in pci_register_host_bridge()
      drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()
      fs/ntfs3: Fix a couple integer overflows on 32bit systems

Daniel Lezcano (1):
      thermal/cpufreq_cooling: Remove structure member documentation

Daniel Stodden (1):
      PCI/ASPM: Fix link state exit during switch upstream function removal

Daniel Wagner (2):
      nvme-fc: go straight to connecting state when initializing
      nvme: only allow entering LIVE from CONNECTING state

Danila Chernetsov (1):
      fbdev: sm501fb: Add some geometry checks.

David Rosca (1):
      drm/amdgpu: Fix JPEG video caps max size for navi1x and raven

David Woodhouse (1):
      clockevents/drivers/i8253: Fix stop sequence for timer 0

Debin Zhu (1):
      netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets

Dhruv Deshpande (1):
      ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx

Dominique Martinet (1):
      net: usb: usbnet: restore usb%d name exception for local mac addresses

Douglas Raillard (2):
      tracing: Ensure module defining synth event cannot be unloaded while tracing
      tracing: Fix synth event printk format for str fields

Eric Dumazet (2):
      vlan: fix memory leak in vlan_newlink()
      tcp: fix races in tcp_abort()

Eric Sandeen (1):
      watch_queue: fix pipe accounting mismatch

Eric W. Biederman (1):
      alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support

Fabio Porcedda (4):
      USB: serial: option: add Telit Cinterion FE990B compositions
      USB: serial: option: fix Telit Cinterion FE990A name
      net: usb: qmi_wwan: add Telit Cinterion FN990B composition
      net: usb: qmi_wwan: add Telit Cinterion FE990B composition

Fabrice Gasnier (1):
      counter: stm32-lptimer-cnt: fix error handling when enabling

Fabrizio Castro (2):
      pinctrl: renesas: rza2: Fix missing of_node_put() call
      pinctrl: renesas: rzg2l: Fix missing of_node_put() call

Feng Tang (1):
      PCI/portdrv: Only disable pciehp interrupts early when needed

Feng Yang (1):
      ring-buffer: Fix bytes_dropped calculation issue

Fernando Fernandez Mancera (1):
      ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS

Florent Revest (1):
      x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes

Gannon Kolding (1):
      ACPI: resource: IRQ override for Eluktronics MECH-17

Geert Uytterhoeven (2):
      ARM: shmobile: smp: Enforce shmobile_smp_* alignment
      drm/bridge: ti-sn65dsi86: Fix multiple instances

Geetha sowjanya (2):
      octeontx2-af: Fix mbox INTR handler when num VFs > 64
      octeontx2-af: Free NIX_AF_INT_VEC_GEN irq

Giovanni Gherdovich (1):
      ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid

Greg Kroah-Hartman (1):
      Linux 5.15.180

Grzegorz Nitka (1):
      ice: fix memory leak in aRFS after reset

Gu Bowen (1):
      mmc: atmel-mci: Add missing clk_disable_unprepare()

Guilherme G. Piccoli (1):
      x86/tsc: Always save/restore TSC sched_clock() on suspend/resume

Guillaume Nault (3):
      gre: Fix IPv6 link-local address generation.
      Revert "gre: Fix IPv6 link-local address generation."
      tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().

Haibo Chen (2):
      can: flexcan: only change CAN state when link up in system PM
      can: flexcan: disable transceiver during system PM

Hans Zhang (1):
      PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload

Haoxiang Li (1):
      qlcnic: fix memory leak issues in qlcnic_sriov_common.c

Hector Martin (3):
      ASoC: tas2770: Fix volume scale
      ASoC: tas2764: Fix power control mask
      ASoC: tas2764: Set the SDOUT polarity correctly

Henrique Carvalho (1):
      smb: client: Fix match_session bug preventing session reuse

Henry Martin (2):
      ASoC: imx-card: Add NULL check in imx_card_probe()
      arcnet: Add NULL check in com20020pci_probe()

Herbert Xu (1):
      crypto: nx - Fix uninitialised hv_nxc on error

Hersen Wu (1):
      drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration

Hou Tao (1):
      bpf: Use preempt_count() directly in bpf_send_signal_common()

Icenowy Zheng (2):
      nvme-pci: clean up CMBMSC when registering CMB fails
      nvme-pci: skip CMB blocks incompatible with PCI P2P DMA

Ilkka Koskinen (1):
      coresight: catu: Fix number of pages while using 64k pages

Ilpo Järvinen (1):
      PCI: pciehp: Don't enable HPIE when resuming in poll mode

Ilya Maximets (1):
      net: openvswitch: remove misbehaving actions length check

Ivan Abramov (1):
      drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()

Jann Horn (4):
      sched: Clarify wake_up_q()'s write to task->wake_q.next
      x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
      x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
      x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs

Jayesh Choudhary (1):
      ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible

Jerome Brunet (4):
      clk: amlogic: gxbb: drop incorrect flag on 32k clock
      clk: amlogic: g12b: fix cluster A parent data
      clk: amlogic: gxbb: drop non existing 32k clock parent
      clk: amlogic: g12a: fix mmc A peripheral clock

Jesse Zhang (1):
      drm/amd/pm: Fix negative array index read

Jianbo Liu (1):
      net/mlx5: Bridge, fix the crash caused by LAG state check

Jie Zhan (1):
      cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()

Jim Quinlan (1):
      PCI: brcmstb: Use internal register to change link capability

Jiri Kosina (1):
      HID: remove superfluous (and wrong) Makefile entry for CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER

Joe Hattori (4):
      powercap: call put_device() on an error path in powercap_register_control_type()
      firmware: imx-scu: fix OF node leak in .probe()
      media: platform: allgro-dvt: unregister v4l2_device on the error path
      soundwire: slave: fix an OF node reference leak in soundwire slave device

Johan Hovold (1):
      USB: serial: option: match on interface class for Telit FN990B

Johannes Berg (1):
      wifi: iwlwifi: fw: allocate chained SG tables for dump

John Keeping (1):
      serial: 8250_dma: terminate correct DMA in tx_dma_flush()

Jonathan Cameron (1):
      iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio

Josef Bacik (1):
      btrfs: handle errors from btrfs_dec_ref() properly

Joseph Huang (1):
      net: dsa: mv88e6xxx: Verify after ATU Load ops

Josh Poimboeuf (2):
      objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
      sched/smt: Always inline sched_smt_active()

José Expósito (1):
      drm/vkms: Fix use after free and double free on init error

Juhan Jin (1):
      riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and make_call_ra

Junxian Huang (4):
      RDMA/hns: Fix soft lockup during bt pages loop
      RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
      RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
      RDMA/hns: Fix wrong value of max_sge_rd

Justin Klaassen (1):
      arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S

Kamal Dasu (3):
      mmc: sdhci-brcmstb: Add ability to increase max clock rate for 72116b0
      mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops
      mmc: sdhci-brcmstb: use clk_get_rate(base_clk) in PM resume

Karel Balej (1):
      mmc: sdhci-pxav3: set NEED_RSP_BUSY capability

Kashyap Desai (1):
      RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx

Kees Cook (5):
      slab: clean up function prototypes
      slab: Introduce kmalloc_size_roundup()
      openvswitch: Use kmalloc_size_roundup() to match ksize() usage
      ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed()
      ARM: 9351/1: fault: Add "cut here" line for prefetch aborts

Kohei Enju (1):
      netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()

Kuninori Morimoto (1):
      ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()

Kuniyuki Iwashima (2):
      ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
      ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().

Li Lingfeng (1):
      nfsd: put dl_stid if fail to queue dl_recall

Lin Ma (3):
      net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
      netfilter: nft_tunnel: fix geneve_opt type confusion addition
      net: fix geneve_opt length integer overflow

Luca Weiss (2):
      remoteproc: qcom_q6v5_pas: Make single-PD handling more robust
      remoteproc: qcom_q6v5_mss: Handle platforms with one power domain

Luiz Augusto von Dentz (1):
      Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE

Luo Qiu (1):
      memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove

Ma Ke (1):
      drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params

Magnus Lindholm (1):
      scsi: qla1280: Fix kernel oops when debug level > 2

Maher Sanalla (1):
      IB/mad: Check available slots before posting receive WRs

Mario Limonciello (3):
      drm/amd/display: Restore correct backlight brightness after a GPU reset
      drm/amd/display: Fix slab-use-after-free on hdcp_work
      drm/amd: Keep display off while going into S4

Mark Zhang (1):
      rtnetlink: Allocate vfinfo size for VF GUIDs when supported

Markus Elfring (2):
      fbdev: au1100fb: Move a variable assignment behind a null pointer check
      ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()

Matthieu Baerts (NGI0) (1):
      mptcp: safety check before fallback

Maxim Mikityanskiy (1):
      netfilter: socket: Lookup orig tuple for IPv6 SNAT

Maíra Canal (1):
      drm/v3d: Don't run jobs that have errors flagged in its fence

Miaoqian Lin (1):
      ksmbd: use aead_request_free to match aead_request_alloc

Michael Kelley (2):
      fbdev: hyperv_fb: iounmap() the correct memory when removing a device
      Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()

Michael Strauss (1):
      drm/amd/display: Check for invalid input params when building scaling params

Michal Luczaj (1):
      bpf, sockmap: Fix race between element replace and close()

Mike Rapoport (Microsoft) (1):
      x86/mm/pat: cpa-test: fix length for CPA_ARRAY test

Miklos Szeredi (1):
      fuse: don't truncate cached, mutated symlink

Ming Lei (1):
      block: fix 'kmem_cache of name 'bio-108' already exists'

Minjoong Kim (1):
      atm: Fix NULL pointer dereference

Murad Masimov (5):
      cifs: Fix integer overflow while processing acregmax mount option
      cifs: Fix integer overflow while processing acdirmax mount option
      cifs: Fix integer overflow while processing actimeo mount option
      cifs: Fix integer overflow while processing closetimeo mount option
      acpi: nfit: fix narrowing conversion in acpi_nfit_ctl

Namjae Jeon (2):
      ksmbd: fix multichannel connection failure
      ksmbd: fix incorrect validation for num_aces field of smb_acl

Nathan Chancellor (1):
      mmc: sdhci-brcmstb: Initialize base_clk to NULL in sdhci_brcmstb_probe()

Navon John Lukose (1):
      ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx

Nikita Shubin (1):
      ntb: intel: Fix using link status DB's

Nikita Zhandarovich (2):
      drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
      mfd: sm501: Switch to BIT() to mitigate integer overflows

Nishanth Aravamudan (1):
      PCI: Avoid reset when disabled via sysfs

Oleg Nesterov (1):
      sched/isolation: Prevent boot crash when the boot CPU is nohz_full

Oliver Hartkopp (1):
      can: statistics: use atomic access in hot path

Pablo Neira Ayuso (1):
      netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only

Patrisious Haddad (1):
      RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow

Paul Menzel (1):
      ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP

Paulo Alcantara (1):
      smb: client: fix potential UAF in cifs_debug_files_proc_show()

Peng Fan (1):
      remoteproc: core: Clear table_sz when rproc_shutdown

Peter Geis (1):
      clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent

Peter Oberparleiter (1):
      s390/cio: Fix CHPID "configure" attribute caching

Phil Elwell (2):
      ARM: dts: bcm2711: PL011 UARTs are actually r1p5
      ARM: dts: bcm2711: Don't mark timer regs unconfigured

Prathamesh Shete (1):
      pinctrl: tegra: Set SFIO mode to Mux Register

Qasim Ijaz (2):
      isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
      jfs: fix slab-out-of-bounds read in ea_get()

Qiuxu Zhuo (3):
      EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
      EDAC/ie31200: Fix the DIMM size mask for several SoCs
      EDAC/ie31200: Fix the error path order of ie31200_init()

Rafael J. Wysocki (2):
      PM: sleep: Adjust check before setting power.must_resume
      PM: sleep: Fix handling devices with direct_complete set on errors

Ran Xiaokai (1):
      tracing/osnoise: Fix possible recursive locking for cpus_read_lock()

Rik van Riel (1):
      scsi: core: Use GFP_NOIO to avoid circular locking dependency

Roman Gushchin (1):
      RDMA/core: Don't expose hw_counters outside of init net namespace

Roman Smirnov (1):
      jfs: add index corruption check to DT_GETPAGE()

Ruozhu Li (1):
      nvmet-rdma: recheck queue state is LIVE in state lock in recv done

Sagi Grimberg (1):
      nvme-tcp: fix possible UAF in nvme_tcp_poll

Saranya R (1):
      soc: qcom: pdr: Fix the potential deadlock

Saravanan Vajravel (1):
      RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path

Sebastian Andrzej Siewior (2):
      netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
      lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()

Sherry Sun (2):
      tty: serial: fsl_lpuart: use UARTMODIR register bits for lpuart32 platform
      tty: serial: fsl_lpuart: disable transmitter before changing RS485 related registers

Shrikanth Hegde (1):
      sched/deadline: Use online cpus for validating runtime

Simon Tatham (2):
      affs: generate OFS sequence numbers starting at 1
      affs: don't write overlarge OFS data block size fields

Sourabh Jain (1):
      kexec: initialize ELF lowest address to ULONG_MAX

Srinivas Pandruvada (1):
      platform/x86: ISST: Correct command storage data length

Stanley Chu (1):
      i3c: master: svc: Fix missing the IBI rules

Stefano Garzarella (1):
      vsock: avoid timeout during connect() if the socket is closing

Stephan Gerhold (1):
      net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors

Steven Rostedt (1):
      tracing: Do not use PERF enums when perf is not defined

Sven Eckelmann (1):
      batman-adv: Ignore own maximum aggregation size during RX

Takashi Iwai (1):
      ALSA: hda/realtek: Always honor no_shutup_pins

Tanya Agarwal (1):
      lib: 842: Improve error handling in sw842_compress()

Tao Chen (1):
      perf/ring_buffer: Allow the EPOLLRDNORM flag for poll

Tasos Sahanidis (1):
      hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}

Tengda Wu (1):
      tracing: Fix use-after-free in print_graph_function_flags during tracer switching

Terry Cheong (1):
      ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module

Terry Junge (2):
      ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names
      HID: hid-plantronics: Add mic mute mapping and generalize quirks

Theodore Ts'o (1):
      ext4: don't over-report free space or inodes in statvfs

Thippeswamy Havalige (1):
      PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe

Thomas Zimmermann (1):
      drm/nouveau: Do not override forced connector status

Tim Schumacher (1):
      selinux: Chain up tool resolving errors in install_policy.sh

Tobias Waldekranz (1):
      net: mvpp2: Prevent parser TCAM memory corruption

Tomi Valkeinen (1):
      drm: xlnx: zynqmp: Fix max dma segment size

Trond Myklebust (1):
      NFSv4: Don't trigger uneccessary scans for return-on-close delegations

Uwe Kleine-König (2):
      media: i2c: et8ek8: Don't strip remove function when driver is builtin
      iio: adc: ad7124: Fix comparison of channel configs

Vasiliy Kovalev (1):
      ocfs2: validate l_tree_depth to avoid out-of-bounds access

Ville Syrjälä (1):
      drm/atomic: Filter out redundant DPMS calls

Vitaliy Shevtsov (1):
      drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()

Vitaly Rodionov (1):
      ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.

Vladimir Lypak (1):
      clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock

Vladis Dronov (1):
      x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled

Vlastimil Babka (1):
      mm, slab: remove duplicate kernel-doc comment for ksize()

Waiman Long (1):
      locking/semaphore: Use wake_q to wake up processes outside lock critical section

Wang Yufen (1):
      ipv6: Fix signed integer overflow in __ip6_append_data

Wayne Lin (1):
      drm/dp_mst: Fix drm RAD print

Wenkai Lin (2):
      crypto: hisilicon/sec2 - fix for aead authsize alignment
      crypto: hisilicon/sec2 - fix for aead auth key length

Wentao Liang (1):
      net/mlx5: handle errors in mlx5_chains_create_table()

Will McVicker (1):
      clk: samsung: Fix UBSAN panic in samsung_clk_init()

William Breathitt Gray (1):
      counter: microchip-tcb-capture: Fix undefined counter channel state on probe

Yajun Deng (1):
      ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans

Yanjun Yang (1):
      ARM: Remove address checking for MMUless devices

Ye Bin (1):
      proc: fix UAF in proc_get_inode()

Ying Lu (1):
      usbnet:fix NPE during rx_complete

Yu-Chun Lin (1):
      sctp: Fix undefined behavior in left shift operation

Yuezhang Mo (1):
      exfat: fix the infinite loop in exfat_find_last_cluster()

Zhang Lixu (1):
      HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell

Zijun Hu (1):
      of: property: Increase NR_FWNODE_REFERENCE_ARGS

zuoqian (1):
      cpufreq: scpi: compare kHz instead of Hz

BUG=b/409952024
TEST=tryjob, validation and K8s e2e
RELEASE_NOTE=Updated the Linux kernel to v5.15.180.

Change-Id: I8de196fdd6e195c52345512c7ad569953089edde
Signed-off-by: COS Kernel Merge Bot <cloud-image-merge-automation@prod.google.com>